@aglyn/aglyn 1.0.0-beta.217 → 1.0.0-beta.219

package/src/lib/plugin-manager/plugin-declarations-repair.js

@@ -0,0 +1,64 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ /**
+ * The app's boot-time declarations step, offered to core so a reader that
+ * finds a declaration missing can run it (AGL-3080).
+ *
+ * Every app registers the plugins' declarations from its instrumentation, and
+ * wraps that in a `catch` so one bad declaration cannot cost every route. A
+ * boot that went wrong therefore leaves a process where whatever the
+ * declarations register is silently absent. Core cannot run the step itself:
+ * the generated manifest names every plugin, which is the one import core may
+ * not make. So the app hands the step over, and a core reader that finds
+ * nobody registered runs it and asks again.
+ *
+ * A leaf with no imports, so a client-safe module (the custom field registry)
+ * and a server one (contact capture) can both read it.
+ *
+ * Held on `globalThis` rather than in a module `let` (AGL-3412): the app
+ * offers it from `instrumentation.ts`, which Next compiles into a different
+ * module graph from the routes that read it, so a module-scoped slot is set
+ * in one copy and read as empty in the other.
+ */ const REPAIR_KEY = Symbol.for('@aglyn/aglyn:plugin-declarations-repair');
+const globalScope = globalThis;
+/**
+ * The app offers its boot step, so a reader that finds nobody can run it.
+ *
+ * Called at boot from the app's own instrumentation, beside the declarations
+ * themselves and BEFORE them — this is a plain assignment that cannot fail,
+ * and the failure it exists to repair is the one immediately after it.
+ *
+ * Idempotent and last-one-wins; an app registers exactly once per process.
+ */ export function registerPluginDeclarationsRepair(run) {
+    globalScope[REPAIR_KEY] = run;
+}
+/** Only for specs: forgets the registered boot step. */ export function resetPluginDeclarationsRepairForTests() {
+    globalScope[REPAIR_KEY] = null;
+}
+/**
+ * Runs the app's boot step, when it offered one. Answers whether one ran.
+ *
+ * Throws what the step throws; each caller decides what a failed repair
+ * costs it. The app's step memoizes its own promise, so this is one attempt
+ * per process rather than one per call.
+ */ export async function runPluginDeclarationsRepair() {
+    const repair = globalScope[REPAIR_KEY];
+    if (!repair) return false;
+    await repair();
+    return true;
+}
+
+//# sourceMappingURL=plugin-declarations-repair.js.map

package/src/lib/plugin-manager/plugin-declarations-repair.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../libs/aglyn/src/lib/plugin-manager/plugin-declarations-repair.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n/**\n * The app's boot-time declarations step, offered to core so a reader that\n * finds a declaration missing can run it (AGL-3080).\n *\n * Every app registers the plugins' declarations from its instrumentation, and\n * wraps that in a `catch` so one bad declaration cannot cost every route. A\n * boot that went wrong therefore leaves a process where whatever the\n * declarations register is silently absent. Core cannot run the step itself:\n * the generated manifest names every plugin, which is the one import core may\n * not make. So the app hands the step over, and a core reader that finds\n * nobody registered runs it and asks again.\n *\n * A leaf with no imports, so a client-safe module (the custom field registry)\n * and a server one (contact capture) can both read it.\n *\n * Held on `globalThis` rather than in a module `let` (AGL-3412): the app\n * offers it from `instrumentation.ts`, which Next compiles into a different\n * module graph from the routes that read it, so a module-scoped slot is set\n * in one copy and read as empty in the other.\n */\nconst REPAIR_KEY = Symbol.for('@aglyn/aglyn:plugin-declarations-repair')\n\nconst globalScope = globalThis as typeof globalThis & {\n  [REPAIR_KEY]?: (() => Promise<void>) | null\n}\n\n/**\n * The app offers its boot step, so a reader that finds nobody can run it.\n *\n * Called at boot from the app's own instrumentation, beside the declarations\n * themselves and BEFORE them — this is a plain assignment that cannot fail,\n * and the failure it exists to repair is the one immediately after it.\n *\n * Idempotent and last-one-wins; an app registers exactly once per process.\n */\nexport function registerPluginDeclarationsRepair(run: () => Promise<void>): void {\n  globalScope[REPAIR_KEY] = run\n}\n\n/** Only for specs: forgets the registered boot step. */\nexport function resetPluginDeclarationsRepairForTests(): void {\n  globalScope[REPAIR_KEY] = null\n}\n\n/**\n * Runs the app's boot step, when it offered one. Answers whether one ran.\n *\n * Throws what the step throws; each caller decides what a failed repair\n * costs it. The app's step memoizes its own promise, so this is one attempt\n * per process rather than one per call.\n */\nexport async function runPluginDeclarationsRepair(): Promise<boolean> {\n  const repair = globalScope[REPAIR_KEY]\n  if (!repair) return false\n  await repair()\n  return true\n}\n"],"names":["REPAIR_KEY","Symbol","for","globalScope","globalThis","registerPluginDeclarationsRepair","run","resetPluginDeclarationsRepairForTests","runPluginDeclarationsRepair","repair"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED;;;;;;;;;;;;;;;;;;;CAmBC,GACD,MAAMA,aAAaC,OAAOC,GAAG,CAAC;AAE9B,MAAMC,cAAcC;AAIpB;;;;;;;;CAQC,GACD,OAAO,SAASC,iCAAiCC,GAAwB;IACvEH,WAAW,CAACH,WAAW,GAAGM;AAC5B;AAEA,sDAAsD,GACtD,OAAO,SAASC;IACdJ,WAAW,CAACH,WAAW,GAAG;AAC5B;AAEA;;;;;;CAMC,GACD,OAAO,eAAeQ;IACpB,MAAMC,SAASN,WAAW,CAACH,WAAW;IACtC,IAAI,CAACS,QAAQ,OAAO;IACpB,MAAMA;IACN,OAAO;AACT"}

package/src/lib/plugin-manager/plugin-dependents.d.ts

@@ -0,0 +1,101 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import type { BindingRefVia } from '../app-utils/binding-tokens';
+/**
+ * WHAT DEPENDS ON A THING, answered by the plugins whose records refer to it.
+ *
+ * The "Used by" scan (`/api/hosts/where-used`) tells a person what they would
+ * break by deleting or renaming one of a site's things — a variable, a
+ * function, a workflow. What refers to it from a published page is the
+ * platform's to find: the scan reads the published screens and layouts
+ * itself. What refers to it from inside a plugin's records — a step that
+ * calls a function, a variable whose value is computed from somewhere else —
+ * is that plugin's: its storage, its field names, and its rule for what
+ * counts as a reference.
+ *
+ * So a plugin that keeps referring records registers a DEPENDENTS SOURCE: the
+ * kinds of thing it finds references to, and a `find` that answers the
+ * referring records of one site. The scan asks every source registered for
+ * the kind and lists what they answer beside its own findings. That is also
+ * how one plugin learns what another plugin's records need of its own: the
+ * owner of a thing asks the scan, and whichever plugin keeps the references
+ * answers, with neither importing the other.
+ *
+ * Its siblings: `plugin-record-index` lists a plugin's records for another
+ * surface to work on; this answers which of them point at something.
+ *
+ * ## Not registered is an answer; failing is not
+ *
+ * No source for a kind means no plugin keeps records that refer to one in
+ * this process, and the answer is complete. A source that THROWS is a scan
+ * that did not finish: its answer is marked incomplete, exactly as a scan
+ * that stopped at its read cap is, so "nothing uses this" is never said on
+ * the strength of a reader that failed.
+ */
+/** One record that refers to the thing asked about. */
+export interface PluginDependent {
+    /** What kind of record refers to it, in the words the scan lists it under ("variable"). */
+    type: string;
+    id: string;
+    /** What a person calls it. */
+    name: string;
+    /**
+     * How it refers: `id` survives a rename, `name` is a name reference a
+     * rename breaks. Both when the record carries both and both match.
+     */
+    via: BindingRefVia[];
+}
+/** The thing a scan asks about, on one site. */
+export interface PluginDependentsRequest {
+    hostId: string;
+    /** What kind of thing it is: "function", "workflow". */
+    kind: string;
+    /** Its document id. */
+    id: string;
+    /** Its current name, for records that refer to it by name. */
+    name?: string;
+}
+export interface PluginDependentsAnswer {
+    dependents: PluginDependent[];
+    /** The source read less than all of its records, so more may refer to it. */
+    truncated: boolean;
+}
+export interface PluginDependentsSource {
+    /** The kinds of thing this source finds references to. */
+    kinds: readonly string[];
+    find(request: PluginDependentsRequest): Promise<PluginDependentsAnswer>;
+}
+export declare const PLUGIN_DEPENDENTS_SOURCES: import("./plugin-services").PluginServiceContract<PluginDependentsSource>;
+/**
+ * Registers a plugin's dependents source. The owner is the loader's marker
+ * when a register fn is running, else `options.pluginId`; with neither the
+ * registration throws. A plugin registering several sources tells them apart
+ * with `key`; registering the same key again replaces it in place.
+ */
+export declare function registerPluginDependentsSource(source: PluginDependentsSource, options?: {
+    pluginId?: string;
+    key?: string;
+}): void;
+/**
+ * Every dependent the registered sources answer for one thing, in
+ * registration order, and whether the answer is COMPLETE: `false` when any
+ * source read only part of its records or failed to answer at all.
+ */
+export declare function findPluginDependents(request: PluginDependentsRequest): Promise<{
+    dependents: PluginDependent[];
+    complete: boolean;
+}>;

package/src/lib/plugin-manager/plugin-dependents.js

@@ -0,0 +1,75 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ import { _ as _extends } from "@swc/helpers/_/_extends";
+import { getRegisteringPluginId } from "../app-utils/registering-plugin.js";
+import { definePluginServiceContract, registerPluginService, resolvePluginServices } from "./plugin-services.js";
+export const PLUGIN_DEPENDENTS_SOURCES = definePluginServiceContract('core.dependents-source', {
+    multiple: true
+});
+/**
+ * Registers a plugin's dependents source. The owner is the loader's marker
+ * when a register fn is running, else `options.pluginId`; with neither the
+ * registration throws. A plugin registering several sources tells them apart
+ * with `key`; registering the same key again replaces it in place.
+ */ export function registerPluginDependentsSource(source, options) {
+    var _ref, _getRegisteringPluginId, _ref1;
+    const pluginId = ((_ref = (_getRegisteringPluginId = getRegisteringPluginId()) != null ? _getRegisteringPluginId : options == null ? void 0 : options.pluginId) != null ? _ref : '').trim();
+    if (!pluginId) {
+        throw new Error('a dependents source was registered with no owner');
+    }
+    const kinds = source.kinds.map((kind)=>kind.trim()).filter(Boolean);
+    if (!kinds.length) {
+        throw new Error(`the dependents source of "${pluginId}" names no kind it answers for`);
+    }
+    registerPluginService(PLUGIN_DEPENDENTS_SOURCES, source, {
+        pluginId,
+        key: (_ref1 = options == null ? void 0 : options.key) != null ? _ref1 : kinds.join(',')
+    });
+}
+/**
+ * Every dependent the registered sources answer for one thing, in
+ * registration order, and whether the answer is COMPLETE: `false` when any
+ * source read only part of its records or failed to answer at all.
+ */ export async function findPluginDependents(request) {
+    const kind = request.kind.trim();
+    const sources = resolvePluginServices(PLUGIN_DEPENDENTS_SOURCES).filter((entry)=>entry.impl.kinds.some((one)=>one.trim() === kind));
+    const answers = await Promise.all(sources.map(async ({ pluginId, impl })=>{
+        try {
+            return await impl.find(_extends({}, request, {
+                kind
+            }));
+        } catch (error) {
+            console.error(`dependents source of "${pluginId}" failed for a ${kind}`, error);
+            return null;
+        }
+    }));
+    const dependents = [];
+    let complete = true;
+    for (const answer of answers){
+        if (!answer) {
+            complete = false;
+            continue;
+        }
+        if (answer.truncated) complete = false;
+        dependents.push(...answer.dependents);
+    }
+    return {
+        dependents,
+        complete
+    };
+}
+
+//# sourceMappingURL=plugin-dependents.js.map

package/src/lib/plugin-manager/plugin-dependents.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../libs/aglyn/src/lib/plugin-manager/plugin-dependents.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport type { BindingRefVia } from '../app-utils/binding-tokens'\nimport { getRegisteringPluginId } from '../app-utils/registering-plugin'\nimport {\n  definePluginServiceContract,\n  registerPluginService,\n  resolvePluginServices,\n} from './plugin-services'\n\n/**\n * WHAT DEPENDS ON A THING, answered by the plugins whose records refer to it.\n *\n * The \"Used by\" scan (`/api/hosts/where-used`) tells a person what they would\n * break by deleting or renaming one of a site's things — a variable, a\n * function, a workflow. What refers to it from a published page is the\n * platform's to find: the scan reads the published screens and layouts\n * itself. What refers to it from inside a plugin's records — a step that\n * calls a function, a variable whose value is computed from somewhere else —\n * is that plugin's: its storage, its field names, and its rule for what\n * counts as a reference.\n *\n * So a plugin that keeps referring records registers a DEPENDENTS SOURCE: the\n * kinds of thing it finds references to, and a `find` that answers the\n * referring records of one site. The scan asks every source registered for\n * the kind and lists what they answer beside its own findings. That is also\n * how one plugin learns what another plugin's records need of its own: the\n * owner of a thing asks the scan, and whichever plugin keeps the references\n * answers, with neither importing the other.\n *\n * Its siblings: `plugin-record-index` lists a plugin's records for another\n * surface to work on; this answers which of them point at something.\n *\n * ## Not registered is an answer; failing is not\n *\n * No source for a kind means no plugin keeps records that refer to one in\n * this process, and the answer is complete. A source that THROWS is a scan\n * that did not finish: its answer is marked incomplete, exactly as a scan\n * that stopped at its read cap is, so \"nothing uses this\" is never said on\n * the strength of a reader that failed.\n */\n\n/** One record that refers to the thing asked about. */\nexport interface PluginDependent {\n  /** What kind of record refers to it, in the words the scan lists it under (\"variable\"). */\n  type: string\n  id: string\n  /** What a person calls it. */\n  name: string\n  /**\n   * How it refers: `id` survives a rename, `name` is a name reference a\n   * rename breaks. Both when the record carries both and both match.\n   */\n  via: BindingRefVia[]\n}\n\n/** The thing a scan asks about, on one site. */\nexport interface PluginDependentsRequest {\n  hostId: string\n  /** What kind of thing it is: \"function\", \"workflow\". */\n  kind: string\n  /** Its document id. */\n  id: string\n  /** Its current name, for records that refer to it by name. */\n  name?: string\n}\n\nexport interface PluginDependentsAnswer {\n  dependents: PluginDependent[]\n  /** The source read less than all of its records, so more may refer to it. */\n  truncated: boolean\n}\n\nexport interface PluginDependentsSource {\n  /** The kinds of thing this source finds references to. */\n  kinds: readonly string[]\n  find(request: PluginDependentsRequest): Promise<PluginDependentsAnswer>\n}\n\nexport const PLUGIN_DEPENDENTS_SOURCES = definePluginServiceContract<PluginDependentsSource>(\n  'core.dependents-source',\n  { multiple: true },\n)\n\n/**\n * Registers a plugin's dependents source. The owner is the loader's marker\n * when a register fn is running, else `options.pluginId`; with neither the\n * registration throws. A plugin registering several sources tells them apart\n * with `key`; registering the same key again replaces it in place.\n */\nexport function registerPluginDependentsSource(\n  source: PluginDependentsSource,\n  options?: { pluginId?: string; key?: string },\n): void {\n  const pluginId = (getRegisteringPluginId() ?? options?.pluginId ?? '').trim()\n  if (!pluginId) {\n    throw new Error('a dependents source was registered with no owner')\n  }\n  const kinds = source.kinds.map((kind) => kind.trim()).filter(Boolean)\n  if (!kinds.length) {\n    throw new Error(`the dependents source of \"${pluginId}\" names no kind it answers for`)\n  }\n  registerPluginService(PLUGIN_DEPENDENTS_SOURCES, source, {\n    pluginId,\n    key: options?.key ?? kinds.join(','),\n  })\n}\n\n/**\n * Every dependent the registered sources answer for one thing, in\n * registration order, and whether the answer is COMPLETE: `false` when any\n * source read only part of its records or failed to answer at all.\n */\nexport async function findPluginDependents(\n  request: PluginDependentsRequest,\n): Promise<{ dependents: PluginDependent[]; complete: boolean }> {\n  const kind = request.kind.trim()\n  const sources = resolvePluginServices(PLUGIN_DEPENDENTS_SOURCES).filter((entry) =>\n    entry.impl.kinds.some((one) => one.trim() === kind),\n  )\n  const answers = await Promise.all(\n    sources.map(async ({ pluginId, impl }) => {\n      try {\n        return await impl.find({ ...request, kind })\n      } catch (error) {\n        console.error(`dependents source of \"${pluginId}\" failed for a ${kind}`, error)\n        return null\n      }\n    }),\n  )\n  const dependents: PluginDependent[] = []\n  let complete = true\n  for (const answer of answers) {\n    if (!answer) {\n      complete = false\n      continue\n    }\n    if (answer.truncated) complete = false\n    dependents.push(...answer.dependents)\n  }\n  return { dependents, complete }\n}\n"],"names":["getRegisteringPluginId","definePluginServiceContract","registerPluginService","resolvePluginServices","PLUGIN_DEPENDENTS_SOURCES","multiple","registerPluginDependentsSource","source","options","pluginId","trim","Error","kinds","map","kind","filter","Boolean","length","key","join","findPluginDependents","request","sources","entry","impl","some","one","answers","Promise","all","find","error","console","dependents","complete","answer","truncated","push"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC;AAGD,SAASA,sBAAsB,QAAQ,qCAAiC;AACxE,SACEC,2BAA2B,EAC3BC,qBAAqB,EACrBC,qBAAqB,QAChB,uBAAmB;AAuE1B,OAAO,MAAMC,4BAA4BH,4BACvC,0BACA;IAAEI,UAAU;AAAK,GAClB;AAED;;;;;CAKC,GACD,OAAO,SAASC,+BACdC,MAA8B,EAC9BC,OAA6C;QAE3BR,MAAAA;IAAlB,MAAMS,WAAW,EAACT,QAAAA,0BAAAA,oCAAAA,0BAA4BQ,2BAAAA,QAASC,QAAQ,YAA7CT,OAAiD,IAAIU,IAAI;IAC3E,IAAI,CAACD,UAAU;QACb,MAAM,IAAIE,MAAM;IAClB;IACA,MAAMC,QAAQL,OAAOK,KAAK,CAACC,GAAG,CAAC,CAACC,OAASA,KAAKJ,IAAI,IAAIK,MAAM,CAACC;IAC7D,IAAI,CAACJ,MAAMK,MAAM,EAAE;QACjB,MAAM,IAAIN,MAAM,CAAC,0BAA0B,EAAEF,SAAS,8BAA8B,CAAC;IACvF;IACAP,sBAAsBE,2BAA2BG,QAAQ;QACvDE;QACAS,GAAG,WAAEV,2BAAAA,QAASU,GAAG,oBAAIN,MAAMO,IAAI,CAAC;IAClC;AACF;AAEA;;;;CAIC,GACD,OAAO,eAAeC,qBACpBC,OAAgC;IAEhC,MAAMP,OAAOO,QAAQP,IAAI,CAACJ,IAAI;IAC9B,MAAMY,UAAUnB,sBAAsBC,2BAA2BW,MAAM,CAAC,CAACQ,QACvEA,MAAMC,IAAI,CAACZ,KAAK,CAACa,IAAI,CAAC,CAACC,MAAQA,IAAIhB,IAAI,OAAOI;IAEhD,MAAMa,UAAU,MAAMC,QAAQC,GAAG,CAC/BP,QAAQT,GAAG,CAAC,OAAO,EAAEJ,QAAQ,EAAEe,IAAI,EAAE;QACnC,IAAI;YACF,OAAO,MAAMA,KAAKM,IAAI,CAAC,aAAKT;gBAASP;;QACvC,EAAE,OAAOiB,OAAO;YACdC,QAAQD,KAAK,CAAC,CAAC,sBAAsB,EAAEtB,SAAS,eAAe,EAAEK,MAAM,EAAEiB;YACzE,OAAO;QACT;IACF;IAEF,MAAME,aAAgC,EAAE;IACxC,IAAIC,WAAW;IACf,KAAK,MAAMC,UAAUR,QAAS;QAC5B,IAAI,CAACQ,QAAQ;YACXD,WAAW;YACX;QACF;QACA,IAAIC,OAAOC,SAAS,EAAEF,WAAW;QACjCD,WAAWI,IAAI,IAAIF,OAAOF,UAAU;IACtC;IACA,OAAO;QAAEA;QAAYC;IAAS;AAChC"}

package/src/lib/plugin-manager/plugin-distribution.d.ts

@@ -0,0 +1,55 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+/**
+ * Where published third-party plugin versions and their kill switches are
+ * stored, declared by the plugin that publishes them (AGL-3080).
+ *
+ * The realm loader is the platform's: it joins a workspace's install pins
+ * with the version each pin names, keeps only a version carrying the
+ * platform's trust grant, and drops one a kill switch has stopped. The
+ * documents it joins against are the distributing plugin's — a version is
+ * written under that plugin's listing when it is published, and its kill
+ * switch when staff revoke it. So the loader asks this declaration where they
+ * are, and names no plugin's collection itself.
+ *
+ * ## Compiled, never registered
+ *
+ * Every reader is a security gate on a server path that loads no plugin code:
+ * the published page's plugin join, both apps' remote server-bundle loaders,
+ * the console's realm gate. A runtime registry one of them had not filled
+ * would answer "nowhere" — and "nowhere" must mean "nothing loads", which is
+ * only safe because it is also what an unfilled registry would say. That is
+ * the AGL-3025 shape one step from the kill switch, so the plugin declares
+ * this as data in `plugins.config.json` and the generator compiles it.
+ *
+ * ## Absent is closed
+ *
+ * With no distributing plugin, {@link PLUGIN_DISTRIBUTION} is `null`, and
+ * every reader fails CLOSED: no version resolves, and every pin reads as
+ * revoked. A pin with no store to check it against cannot be vouched for.
+ */
+export interface PluginDistribution {
+    /** The plugin that declared it. */
+    pluginId: string;
+    /** The top-level collection of listings, keyed by the id an install pins. */
+    listings: string;
+    /** The subcollection of a listing holding one document per version. */
+    versions: string;
+    /** The top-level collection of kill switches, keyed by the listing id. */
+    revocations: string;
+}
+export { PLUGIN_DISTRIBUTION } from './first-party-plugins.generated';

package/src/lib/plugin-manager/plugin-distribution.js

@@ -0,0 +1,45 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ /**
+ * Where published third-party plugin versions and their kill switches are
+ * stored, declared by the plugin that publishes them (AGL-3080).
+ *
+ * The realm loader is the platform's: it joins a workspace's install pins
+ * with the version each pin names, keeps only a version carrying the
+ * platform's trust grant, and drops one a kill switch has stopped. The
+ * documents it joins against are the distributing plugin's — a version is
+ * written under that plugin's listing when it is published, and its kill
+ * switch when staff revoke it. So the loader asks this declaration where they
+ * are, and names no plugin's collection itself.
+ *
+ * ## Compiled, never registered
+ *
+ * Every reader is a security gate on a server path that loads no plugin code:
+ * the published page's plugin join, both apps' remote server-bundle loaders,
+ * the console's realm gate. A runtime registry one of them had not filled
+ * would answer "nowhere" — and "nowhere" must mean "nothing loads", which is
+ * only safe because it is also what an unfilled registry would say. That is
+ * the AGL-3025 shape one step from the kill switch, so the plugin declares
+ * this as data in `plugins.config.json` and the generator compiles it.
+ *
+ * ## Absent is closed
+ *
+ * With no distributing plugin, {@link PLUGIN_DISTRIBUTION} is `null`, and
+ * every reader fails CLOSED: no version resolves, and every pin reads as
+ * revoked. A pin with no store to check it against cannot be vouched for.
+ */ export { PLUGIN_DISTRIBUTION } from "./first-party-plugins.generated.js";
+
+//# sourceMappingURL=plugin-distribution.js.map

package/src/lib/plugin-manager/plugin-distribution.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../libs/aglyn/src/lib/plugin-manager/plugin-distribution.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n/**\n * Where published third-party plugin versions and their kill switches are\n * stored, declared by the plugin that publishes them (AGL-3080).\n *\n * The realm loader is the platform's: it joins a workspace's install pins\n * with the version each pin names, keeps only a version carrying the\n * platform's trust grant, and drops one a kill switch has stopped. The\n * documents it joins against are the distributing plugin's — a version is\n * written under that plugin's listing when it is published, and its kill\n * switch when staff revoke it. So the loader asks this declaration where they\n * are, and names no plugin's collection itself.\n *\n * ## Compiled, never registered\n *\n * Every reader is a security gate on a server path that loads no plugin code:\n * the published page's plugin join, both apps' remote server-bundle loaders,\n * the console's realm gate. A runtime registry one of them had not filled\n * would answer \"nowhere\" — and \"nowhere\" must mean \"nothing loads\", which is\n * only safe because it is also what an unfilled registry would say. That is\n * the AGL-3025 shape one step from the kill switch, so the plugin declares\n * this as data in `plugins.config.json` and the generator compiles it.\n *\n * ## Absent is closed\n *\n * With no distributing plugin, {@link PLUGIN_DISTRIBUTION} is `null`, and\n * every reader fails CLOSED: no version resolves, and every pin reads as\n * revoked. A pin with no store to check it against cannot be vouched for.\n */\nexport interface PluginDistribution {\n  /** The plugin that declared it. */\n  pluginId: string\n  /** The top-level collection of listings, keyed by the id an install pins. */\n  listings: string\n  /** The subcollection of a listing holding one document per version. */\n  versions: string\n  /** The top-level collection of kill switches, keyed by the listing id. */\n  revocations: string\n}\n\nexport { PLUGIN_DISTRIBUTION } from './first-party-plugins.generated'\n"],"names":["PLUGIN_DISTRIBUTION"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED;;;;;;;;;;;;;;;;;;;;;;;;;;;CA2BC,GAYD,SAASA,mBAAmB,QAAQ,qCAAiC"}

package/src/lib/plugin-manager/plugin-host-collections.d.ts

@@ -14,6 +14,8 @@
  * See the License for the specific language governing permissions and
  * limitations under the License.
  */
+import type { PluginHostResourceDeclaration } from './plugin-host-resources';
+import type { PluginHostCollectionSiteExport } from './plugin-site-export';
 /**
  * The host subcollections a plugin owns, declared by that plugin (AGL-3124).
  *
@@ -111,6 +113,21 @@ export interface PluginHostCollectionDeclaration {
      * counters total beside its screens, layouts, components and templates.
      */
     artifact?: boolean;
+    /**
+     * The kind a client CREATES a document here as, through the platform's
+     * generic create route — see `plugin-host-resources.ts`. Compiled only: a
+     * runtime registration carrying one is refused, because the route is the
+     * writable-field allow-list and must never depend on a registry a process
+     * may not have filled.
+     */
+    resource?: PluginHostResourceDeclaration;
+    /**
+     * How the whole-site export carries this collection, and what a restore
+     * writes back — see `plugin-site-export.ts`. Compiled only, like
+     * `resource`: a backup that depended on a registry a process had not
+     * filled would be missing the collection with nothing to say so.
+     */
+    siteExport?: PluginHostCollectionSiteExport;
 }
 /** A declaration with the plugin that made it. */
 export type ResolvedPluginHostCollection = PluginHostCollectionDeclaration & {

package/src/lib/plugin-manager/plugin-host-collections.js

@@ -36,6 +36,12 @@ export const PLUGIN_HOST_COLLECTIONS = definePluginServiceContract('core.host-co
         var _declaration_name, _declaration_mediaScanReason;
         const name = (_ref = (_declaration_name = declaration.name) == null ? void 0 : _declaration_name.trim()) != null ? _ref : '';
         if (!name) throw new Error('a host collection needs a name');
+        if (declaration.resource) {
+            throw new Error(`host collection "${name}" declares a resource kind at runtime: the ` + 'create route reads only the compiled declarations in ' + 'plugins.config.json, so a kind registered here could never be created');
+        }
+        if (declaration.siteExport) {
+            throw new Error(`host collection "${name}" declares a site export at runtime: the ` + 'export and restore read only the compiled declarations in ' + 'plugins.config.json, so a backup would silently leave it out');
+        }
         if (declaration.mediaScan === 'none' && !((_declaration_mediaScanReason = declaration.mediaScanReason) == null ? void 0 : _declaration_mediaScanReason.trim())) {
             throw new Error(`host collection "${name}" is not scanned for media and says no ` + 'reason: mediaScanReason has to name what scanning would cost, or ' + 'what it would get wrong');
         }

package/src/lib/plugin-manager/plugin-host-collections.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../../../libs/aglyn/src/lib/plugin-manager/plugin-host-collections.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { getRegisteringPluginId } from '../app-utils/registering-plugin'\nimport { hostContentCollectionLabel } from '../foundation/definitions/host-content-collections'\nimport {\n  PLUGIN_HOST_COLLECTIONS_DECLARED,\n  PLUGIN_ORG_COLLECTIONS_DECLARED,\n} from './first-party-plugins.generated'\nimport {\n  definePluginServiceContract,\n  registerPluginService,\n  resolvePluginServices,\n} from './plugin-services'\n\n/**\n * The host subcollections a plugin owns, declared by that plugin (AGL-3124).\n *\n * A first-party plugin writes ordinary documents under `hosts/{hostId}` with\n * the ordinary SDKs, and several core surfaces have to know which plugin owns\n * which of them: the media-usage scan decides what to read before an author\n * deletes an asset, a reference row deep-links to the console page that shows\n * one, and the artifact counters total what a site holds.\n *\n * Core answered all three by listing the collections and switching over plugin\n * ids — `services` and `resources` are bookings', `campaigns` and `experiments`\n * are marketing's, `functions`, `variables` and `actions` are logic's — which\n * is the platform holding a map of its plugins' storage. Every entry is also a\n * thing that can silently fall out of step: a plugin that ships a new\n * collection is invisible to all three until somebody remembers the list.\n *\n * So the plugin declares what it owns, once, and the three readers ask.\n *\n * ## What a declaration says, and what it deliberately does not\n *\n * A declaration names the collection, how the media scan should treat it, the\n * console slug a reference row links to, and whether a document in it is an\n * ARTIFACT the site's counters total beside screens and layouts. It does NOT\n * name fields: the scan flattens a document generically on purpose, and a\n * field list here would be the same staleness trap one level down.\n *\n * The media default is inherited from the scan's own rule and is the whole\n * reason that rule survives this move: **a collection is scanned unless its\n * declaration says why it is not.** A plugin that ships a media-bearing\n * collection is covered the day it lands rather than the day somebody\n * remembers it, and `mediaScan: 'none'` without a reason is refused — \"it\n * probably has no images in it\" is the guess the scan's design exists to\n * avoid making.\n *\n * ## One collection, one owner\n *\n * Two plugins writing one collection under one site would be two schemas in\n * one place, and the scan, the deep link and the counters would each pick a\n * winner by registration order. So a collection another plugin declared is\n * refused naming both, and the incumbent keeps it; the same plugin declaring\n * again replaces its own.\n *\n * ## Declared in the config, not registered at boot (AGL-3080)\n *\n * A first-party plugin declares its collections in `plugins.config.json` and\n * the generator compiles them, so every reader has the whole list the moment\n * it imports this module. That is not a preference: the media scan answers\n * \"what uses this asset\" in the moment before an author deletes it, every way\n * it can be wrong points at \"unused\", and it runs inside a console request\n * that loads no plugin code. A registry that request had not filled would\n * report every plugin-owned document as holding nothing, with nothing red —\n * the shape of AGL-3025, on the one answer here that somebody acts on.\n *\n * {@link registerPluginHostCollections} is still the door for a plugin the\n * compiler never sees, and the two compose: the compiled rows are a floor a\n * registration cannot lower, and a registration naming a compiled collection\n * is refused the same way a second plugin's would be.\n *\n * Reached by its own subpath rather than through `plugin-manager/index.ts`:\n * the readers are the media scan, the console counters and the reference\n * rows, none of which a published page renders.\n */\n\n/** How the media-usage scan reads a collection. */\nexport type PluginHostCollectionMediaScan =\n  /** Flattened and searched generically, with no per-collection decoder. */\n  | 'generic'\n  /** Read by a pass that knows its shape, the way screens and layouts are. */\n  | 'own'\n  /** Not read; {@link PluginHostCollectionDeclaration.mediaScanReason} says why. */\n  | 'none'\n\nexport interface PluginHostCollectionDeclaration {\n  /** The subcollection under `hosts/{hostId}`, spelled as Firestore holds it. */\n  name: string\n  /**\n   * What one of its documents is called in a reference row. Derived from the\n   * collection name when absent, so a new collection reads correctly without\n   * a second list to keep in step.\n   */\n  label?: string\n  /** Default `generic` — see this module's note on why the default is to scan. */\n  mediaScan?: PluginHostCollectionMediaScan\n  /**\n   * Why the scan does not read it. Required with `mediaScan: 'none'`, and it\n   * has to answer what scanning would COST or what it would get WRONG.\n   */\n  mediaScanReason?: string\n  /**\n   * The `[pluginSlug]` segment of the plugin's console hub, for a reference\n   * row's deep link. Optional on purpose: a row with no destination still\n   * renders as text, which is better than the row not existing.\n   */\n  routeSlug?: string\n  /**\n   * Whether a document here is a live ARTIFACT — something the site's own\n   * counters total beside its screens, layouts, components and templates.\n   */\n  artifact?: boolean\n}\n\n/** A declaration with the plugin that made it. */\nexport type ResolvedPluginHostCollection = PluginHostCollectionDeclaration & {\n  pluginId: string\n}\n\nexport const PLUGIN_HOST_COLLECTIONS =\n  definePluginServiceContract<PluginHostCollectionDeclaration>(\n    'core.host-collections',\n    { multiple: true },\n  )\n\n/**\n * Declares the host subcollections the registering plugin owns. The owner is\n * the loader's marker when a register fn is running, else `options.pluginId`;\n * with neither the registration throws. A collection another plugin declared\n * throws naming both, and nothing in the same call is registered — a\n * declaration is one plugin's statement about its own storage, so half of it\n * landing would be worse than none.\n */\nexport function registerPluginHostCollections(\n  collections: readonly PluginHostCollectionDeclaration[],\n  options?: { pluginId?: string },\n): void {\n  const pluginId = (getRegisteringPluginId() ?? options?.pluginId ?? '').trim()\n  const prepared = collections.map((declaration) => {\n    const name = declaration.name?.trim() ?? ''\n    if (!name) throw new Error('a host collection needs a name')\n    if (declaration.mediaScan === 'none' && !declaration.mediaScanReason?.trim()) {\n      throw new Error(\n        `host collection \"${name}\" is not scanned for media and says no ` +\n          'reason: mediaScanReason has to name what scanning would cost, or ' +\n          'what it would get wrong',\n      )\n    }\n    const incumbent = pluginHostCollection(name)\n    if (incumbent && pluginId && incumbent.pluginId !== pluginId) {\n      throw new Error(\n        `host collection \"${name}\" is already declared by ` +\n          `\"${incumbent.pluginId}\"; refused \"${pluginId}\"`,\n      )\n    }\n    return { ...declaration, name }\n  })\n  for (const declaration of prepared) {\n    registerPluginService(PLUGIN_HOST_COLLECTIONS, declaration, {\n      ...(options?.pluginId ? { pluginId: options.pluginId } : {}),\n      key: declaration.name,\n    })\n  }\n}\n\n/**\n * Every declared collection, with its owner: the compiled rows first, then\n * anything registered at runtime that they do not already name.\n */\nexport function listPluginHostCollections(): ResolvedPluginHostCollection[] {\n  const compiled = PLUGIN_HOST_COLLECTIONS_DECLARED.map((row) => ({ ...row }))\n  const named = new Set(compiled.map((row) => row.name))\n  const registered = resolvePluginServices(PLUGIN_HOST_COLLECTIONS)\n    .map((entry) => ({ ...entry.impl, pluginId: entry.pluginId }))\n    .filter((row) => !named.has(row.name))\n  return [...compiled, ...registered]\n}\n\n/** One declared collection by name, with its owner, or `null`. */\nexport function pluginHostCollection(\n  name: string,\n): ResolvedPluginHostCollection | null {\n  const key = name.trim()\n  return listPluginHostCollections().find((one) => one.name === key) ?? null\n}\n\n/** The plugin that owns a collection, or `undefined` when none declares it. */\nexport function pluginIdForHostCollection(name: string): string | undefined {\n  return pluginHostCollection(name)?.pluginId\n}\n\n/**\n * The console hub slug a reference row for this collection links to, or\n * `undefined` when the owner routes none. A row found by the org pass names an\n * org collection, so an org declaration answers when no host one does.\n */\nexport function pluginHostCollectionRouteSlug(\n  name: string,\n): string | undefined {\n  return pluginHostCollection(name)?.routeSlug ?? pluginOrgCollection(name)?.routeSlug\n}\n\n/**\n * The declared collections the media scan reads generically — the list the\n * scan walks, in place of one core keeps by hand.\n */\nexport function pluginHostCollectionsScannedGenerically(): string[] {\n  return listPluginHostCollections()\n    .filter((one) => (one.mediaScan ?? 'generic') === 'generic')\n    .map((one) => one.name)\n}\n\n/** The declared collections the scan does not read, with the reason given. */\nexport function pluginHostCollectionsExcludedFromMediaScan(): Array<{\n  name: string\n  reason: string\n  pluginId: string\n}> {\n  return listPluginHostCollections()\n    .filter((one) => one.mediaScan === 'none')\n    .map((one) => ({\n      name: one.name,\n      reason: one.mediaScanReason ?? '',\n      pluginId: one.pluginId,\n    }))\n}\n\n/** The declared collections whose documents the site's artifact counters total. */\nexport function pluginHostArtifactCollections(): string[] {\n  return listPluginHostCollections()\n    .filter((one) => one.artifact === true)\n    .map((one) => one.name)\n}\n\n/**\n * What to call one of a collection's documents in a reference row: the\n * declared label, else core's own derivation from the name.\n *\n * The derivation is `hostContentCollectionLabel` rather than a second copy of\n * it, because a reference row does not know or care whether the collection it\n * names belongs to a plugin — two spellings of \"Product category\" reachable\n * by two paths is the kind of difference nobody notices until a screenshot\n * disagrees with a test.\n */\nexport function pluginHostCollectionLabel(name: string): string {\n  const declared = (\n    pluginHostCollection(name)?.label ?? pluginOrgCollection(name)?.label\n  )?.trim()\n  return declared || hostContentCollectionLabel(name)\n}\n\n/**\n * The ORG collections a plugin owns, for the media-usage scan (AGL-3273).\n *\n * Everything above is about `hosts/{hostId}/…`, and the scan's completeness\n * guard sweeps the source for exactly that shape. Some plugin storage lives on\n * the organization instead — Marketing's email sends are\n * `orgs/{orgId}/campaigns`, each naming the site it was sent as — and a\n * collection the scan does not know about is read as holding nothing, which\n * is the answer \"Find where this is used\" must never give by omission.\n *\n * So a plugin declares those too, in the `orgCollections` block of\n * `plugins.config.json`, compiled like the host rows. The same inverted\n * default holds — scanned unless the declaration says why not — and\n * `siteField` names the field that says which site a document belongs to, so\n * a reference row can name that site and link into its hub.\n *\n * Compiled only. There is no runtime door: nothing outside the first-party\n * config writes org storage the scan must read, and a door nobody uses is a\n * registry the scan's request would have to be trusted to have filled.\n */\nexport interface PluginOrgCollectionDeclaration {\n  /** The subcollection under `orgs/{orgId}`, spelled as Firestore holds it. */\n  name: string\n  /** What one of its documents is called in a reference row. */\n  label?: string\n  /** Default `generic`. An org collection has no dedicated pass to be `own`. */\n  mediaScan?: Exclude<PluginHostCollectionMediaScan, 'own'>\n  /** Why the scan does not read it. Required with `mediaScan: 'none'`. */\n  mediaScanReason?: string\n  /** The `[pluginSlug]` of the site hub a reference row links to. */\n  routeSlug?: string\n  /**\n   * The field on each document naming the site it BELONGS to. Two readers\n   * act on it: a reference row names that site and links into its hub, and\n   * deleting the site deletes the documents that name it (`eraseHost`). A\n   * collection whose documents are placed on sites rather than owned by one\n   * declares none.\n   */\n  siteField?: string\n  /**\n   * The states in which a document the site owns is work still IN FLIGHT —\n   * `{ field: 'status', values: ['scheduled', 'sending'] }` — and so holds\n   * the site where it is. Moving the site to another organization is refused\n   * while any document naming it matches (AGL-3381): the work would land\n   * for an organization the site no longer belongs to. Needs `siteField`.\n   */\n  holdsTransferWhile?: { field: string; values: string[] }\n}\n\n/** An org declaration with the plugin that made it. */\nexport type ResolvedPluginOrgCollection = PluginOrgCollectionDeclaration & {\n  pluginId: string\n}\n\n/** Every declared org collection, with its owner. */\nexport function listPluginOrgCollections(): ResolvedPluginOrgCollection[] {\n  return PLUGIN_ORG_COLLECTIONS_DECLARED.map((row) => ({ ...row }))\n}\n\n/** One declared org collection by name, with its owner, or `null`. */\nexport function pluginOrgCollection(\n  name: string,\n): ResolvedPluginOrgCollection | null {\n  const key = name.trim()\n  return listPluginOrgCollections().find((one) => one.name === key) ?? null\n}\n\n/** The declared org collections the media scan reads generically. */\nexport function pluginOrgCollectionsScannedGenerically(): ResolvedPluginOrgCollection[] {\n  return listPluginOrgCollections().filter(\n    (one) => (one.mediaScan ?? 'generic') === 'generic',\n  )\n}\n"],"names":["getRegisteringPluginId","hostContentCollectionLabel","PLUGIN_HOST_COLLECTIONS_DECLARED","PLUGIN_ORG_COLLECTIONS_DECLARED","definePluginServiceContract","registerPluginService","resolvePluginServices","PLUGIN_HOST_COLLECTIONS","multiple","registerPluginHostCollections","collections","options","pluginId","trim","prepared","map","declaration","name","Error","mediaScan","mediaScanReason","incumbent","pluginHostCollection","key","listPluginHostCollections","compiled","row","named","Set","registered","entry","impl","filter","has","find","one","pluginIdForHostCollection","pluginHostCollectionRouteSlug","pluginOrgCollection","routeSlug","pluginHostCollectionsScannedGenerically","pluginHostCollectionsExcludedFromMediaScan","reason","pluginHostArtifactCollections","artifact","pluginHostCollectionLabel","declared","label","listPluginOrgCollections","pluginOrgCollectionsScannedGenerically"],"mappings":";AAAA;;;;;;;;;;;;;;;CAeC,GAED,SAASA,sBAAsB,QAAQ,qCAAiC;AACxE,SAASC,0BAA0B,QAAQ,wDAAoD;AAC/F,SACEC,gCAAgC,EAChCC,+BAA+B,QAC1B,qCAAiC;AACxC,SACEC,2BAA2B,EAC3BC,qBAAqB,EACrBC,qBAAqB,QAChB,uBAAmB;AA4G1B,OAAO,MAAMC,0BACXH,4BACE,yBACA;IAAEI,UAAU;AAAK,GAClB;AAEH;;;;;;;CAOC,GACD,OAAO,SAASC,8BACdC,WAAuD,EACvDC,OAA+B;QAEbX,MAAAA;IAAlB,MAAMY,WAAW,EAACZ,QAAAA,0BAAAA,oCAAAA,0BAA4BW,2BAAAA,QAASC,QAAQ,YAA7CZ,OAAiD,IAAIa,IAAI;IAC3E,MAAMC,WAAWJ,YAAYK,GAAG,CAAC,CAACC;;YACnBA,mBAE4BA;QAFzC,MAAMC,gBAAOD,oBAAAA,YAAYC,IAAI,qBAAhBD,kBAAkBH,IAAI,qBAAM;QACzC,IAAI,CAACI,MAAM,MAAM,IAAIC,MAAM;QAC3B,IAAIF,YAAYG,SAAS,KAAK,UAAU,GAACH,+BAAAA,YAAYI,eAAe,qBAA3BJ,6BAA6BH,IAAI,KAAI;YAC5E,MAAM,IAAIK,MACR,CAAC,iBAAiB,EAAED,KAAK,uCAAuC,CAAC,GAC/D,sEACA;QAEN;QACA,MAAMI,YAAYC,qBAAqBL;QACvC,IAAII,aAAaT,YAAYS,UAAUT,QAAQ,KAAKA,UAAU;YAC5D,MAAM,IAAIM,MACR,CAAC,iBAAiB,EAAED,KAAK,yBAAyB,CAAC,GACjD,CAAC,CAAC,EAAEI,UAAUT,QAAQ,CAAC,YAAY,EAAEA,SAAS,CAAC,CAAC;QAEtD;QACA,OAAO,aAAKI;YAAaC;;IAC3B;IACA,KAAK,MAAMD,eAAeF,SAAU;QAClCT,sBAAsBE,yBAAyBS,aAAa,aACtDL,CAAAA,2BAAAA,QAASC,QAAQ,IAAG;YAAEA,UAAUD,QAAQC,QAAQ;QAAC,IAAI,CAAC;YAC1DW,KAAKP,YAAYC,IAAI;;IAEzB;AACF;AAEA;;;CAGC,GACD,OAAO,SAASO;IACd,MAAMC,WAAWvB,iCAAiCa,GAAG,CAAC,CAACW,MAAS,aAAKA;IACrE,MAAMC,QAAQ,IAAIC,IAAIH,SAASV,GAAG,CAAC,CAACW,MAAQA,IAAIT,IAAI;IACpD,MAAMY,aAAavB,sBAAsBC,yBACtCQ,GAAG,CAAC,CAACe,QAAW,aAAKA,MAAMC,IAAI;YAAEnB,UAAUkB,MAAMlB,QAAQ;YACzDoB,MAAM,CAAC,CAACN,MAAQ,CAACC,MAAMM,GAAG,CAACP,IAAIT,IAAI;IACtC,OAAO;WAAIQ;WAAaI;KAAW;AACrC;AAEA,gEAAgE,GAChE,OAAO,SAASP,qBACdL,IAAY;QAGLO;IADP,MAAMD,MAAMN,KAAKJ,IAAI;IACrB,QAAOW,kCAAAA,4BAA4BU,IAAI,CAAC,CAACC,MAAQA,IAAIlB,IAAI,KAAKM,gBAAvDC,kCAA+D;AACxE;AAEA,6EAA6E,GAC7E,OAAO,SAASY,0BAA0BnB,IAAY;QAC7CK;IAAP,QAAOA,wBAAAA,qBAAqBL,0BAArBK,sBAA4BV,QAAQ;AAC7C;AAEA;;;;CAIC,GACD,OAAO,SAASyB,8BACdpB,IAAY;;QAELK,uBAAyCgB;IAAhD,gBAAOhB,wBAAAA,qBAAqBL,0BAArBK,sBAA4BiB,SAAS,oBAAID,uBAAAA,oBAAoBrB,0BAApBqB,qBAA2BC,SAAS;AACtF;AAEA;;;CAGC,GACD,OAAO,SAASC;IACd,OAAOhB,4BACJQ,MAAM,CAAC,CAACG;YAASA;eAAD,EAACA,iBAAAA,IAAIhB,SAAS,YAAbgB,iBAAiB,eAAe;OACjDpB,GAAG,CAAC,CAACoB,MAAQA,IAAIlB,IAAI;AAC1B;AAEA,4EAA4E,GAC5E,OAAO,SAASwB;IAKd,OAAOjB,4BACJQ,MAAM,CAAC,CAACG,MAAQA,IAAIhB,SAAS,KAAK,QAClCJ,GAAG,CAAC,CAACoB;YAEIA;eAFK;YACblB,MAAMkB,IAAIlB,IAAI;YACdyB,MAAM,GAAEP,uBAAAA,IAAIf,eAAe,YAAnBe,uBAAuB;YAC/BvB,UAAUuB,IAAIvB,QAAQ;QACxB;;AACJ;AAEA,iFAAiF,GACjF,OAAO,SAAS+B;IACd,OAAOnB,4BACJQ,MAAM,CAAC,CAACG,MAAQA,IAAIS,QAAQ,KAAK,MACjC7B,GAAG,CAAC,CAACoB,MAAQA,IAAIlB,IAAI;AAC1B;AAEA;;;;;;;;;CASC,GACD,OAAO,SAAS4B,0BAA0B5B,IAAY;;QAElDK,OAAAA,uBAAqCgB;IADvC,MAAMQ,YACJxB,iBAAAA,wBAAAA,qBAAqBL,0BAArBK,sBAA4ByB,KAAK,oBAAIT,uBAAAA,oBAAoBrB,0BAApBqB,qBAA2BS,KAAK,qBADtD,AACfzB,MACCT,IAAI;IACP,OAAOiC,YAAY7C,2BAA2BgB;AAChD;AAwDA,mDAAmD,GACnD,OAAO,SAAS+B;IACd,OAAO7C,gCAAgCY,GAAG,CAAC,CAACW,MAAS,aAAKA;AAC5D;AAEA,oEAAoE,GACpE,OAAO,SAASY,oBACdrB,IAAY;QAGL+B;IADP,MAAMzB,MAAMN,KAAKJ,IAAI;IACrB,QAAOmC,iCAAAA,2BAA2Bd,IAAI,CAAC,CAACC,MAAQA,IAAIlB,IAAI,KAAKM,gBAAtDyB,iCAA8D;AACvE;AAEA,mEAAmE,GACnE,OAAO,SAASC;IACd,OAAOD,2BAA2BhB,MAAM,CACtC,CAACG;YAASA;eAAD,EAACA,iBAAAA,IAAIhB,SAAS,YAAbgB,iBAAiB,eAAe;;AAE9C"}
+{"version":3,"sources":["../../../../../../libs/aglyn/src/lib/plugin-manager/plugin-host-collections.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { getRegisteringPluginId } from '../app-utils/registering-plugin'\nimport { hostContentCollectionLabel } from '../foundation/definitions/host-content-collections'\nimport type { PluginHostResourceDeclaration } from './plugin-host-resources'\nimport type { PluginHostCollectionSiteExport } from './plugin-site-export'\nimport {\n  PLUGIN_HOST_COLLECTIONS_DECLARED,\n  PLUGIN_ORG_COLLECTIONS_DECLARED,\n} from './first-party-plugins.generated'\nimport {\n  definePluginServiceContract,\n  registerPluginService,\n  resolvePluginServices,\n} from './plugin-services'\n\n/**\n * The host subcollections a plugin owns, declared by that plugin (AGL-3124).\n *\n * A first-party plugin writes ordinary documents under `hosts/{hostId}` with\n * the ordinary SDKs, and several core surfaces have to know which plugin owns\n * which of them: the media-usage scan decides what to read before an author\n * deletes an asset, a reference row deep-links to the console page that shows\n * one, and the artifact counters total what a site holds.\n *\n * Core answered all three by listing the collections and switching over plugin\n * ids — `services` and `resources` are bookings', `campaigns` and `experiments`\n * are marketing's, `functions`, `variables` and `actions` are logic's — which\n * is the platform holding a map of its plugins' storage. Every entry is also a\n * thing that can silently fall out of step: a plugin that ships a new\n * collection is invisible to all three until somebody remembers the list.\n *\n * So the plugin declares what it owns, once, and the three readers ask.\n *\n * ## What a declaration says, and what it deliberately does not\n *\n * A declaration names the collection, how the media scan should treat it, the\n * console slug a reference row links to, and whether a document in it is an\n * ARTIFACT the site's counters total beside screens and layouts. It does NOT\n * name fields: the scan flattens a document generically on purpose, and a\n * field list here would be the same staleness trap one level down.\n *\n * The media default is inherited from the scan's own rule and is the whole\n * reason that rule survives this move: **a collection is scanned unless its\n * declaration says why it is not.** A plugin that ships a media-bearing\n * collection is covered the day it lands rather than the day somebody\n * remembers it, and `mediaScan: 'none'` without a reason is refused — \"it\n * probably has no images in it\" is the guess the scan's design exists to\n * avoid making.\n *\n * ## One collection, one owner\n *\n * Two plugins writing one collection under one site would be two schemas in\n * one place, and the scan, the deep link and the counters would each pick a\n * winner by registration order. So a collection another plugin declared is\n * refused naming both, and the incumbent keeps it; the same plugin declaring\n * again replaces its own.\n *\n * ## Declared in the config, not registered at boot (AGL-3080)\n *\n * A first-party plugin declares its collections in `plugins.config.json` and\n * the generator compiles them, so every reader has the whole list the moment\n * it imports this module. That is not a preference: the media scan answers\n * \"what uses this asset\" in the moment before an author deletes it, every way\n * it can be wrong points at \"unused\", and it runs inside a console request\n * that loads no plugin code. A registry that request had not filled would\n * report every plugin-owned document as holding nothing, with nothing red —\n * the shape of AGL-3025, on the one answer here that somebody acts on.\n *\n * {@link registerPluginHostCollections} is still the door for a plugin the\n * compiler never sees, and the two compose: the compiled rows are a floor a\n * registration cannot lower, and a registration naming a compiled collection\n * is refused the same way a second plugin's would be.\n *\n * Reached by its own subpath rather than through `plugin-manager/index.ts`:\n * the readers are the media scan, the console counters and the reference\n * rows, none of which a published page renders.\n */\n\n/** How the media-usage scan reads a collection. */\nexport type PluginHostCollectionMediaScan =\n  /** Flattened and searched generically, with no per-collection decoder. */\n  | 'generic'\n  /** Read by a pass that knows its shape, the way screens and layouts are. */\n  | 'own'\n  /** Not read; {@link PluginHostCollectionDeclaration.mediaScanReason} says why. */\n  | 'none'\n\nexport interface PluginHostCollectionDeclaration {\n  /** The subcollection under `hosts/{hostId}`, spelled as Firestore holds it. */\n  name: string\n  /**\n   * What one of its documents is called in a reference row. Derived from the\n   * collection name when absent, so a new collection reads correctly without\n   * a second list to keep in step.\n   */\n  label?: string\n  /** Default `generic` — see this module's note on why the default is to scan. */\n  mediaScan?: PluginHostCollectionMediaScan\n  /**\n   * Why the scan does not read it. Required with `mediaScan: 'none'`, and it\n   * has to answer what scanning would COST or what it would get WRONG.\n   */\n  mediaScanReason?: string\n  /**\n   * The `[pluginSlug]` segment of the plugin's console hub, for a reference\n   * row's deep link. Optional on purpose: a row with no destination still\n   * renders as text, which is better than the row not existing.\n   */\n  routeSlug?: string\n  /**\n   * Whether a document here is a live ARTIFACT — something the site's own\n   * counters total beside its screens, layouts, components and templates.\n   */\n  artifact?: boolean\n  /**\n   * The kind a client CREATES a document here as, through the platform's\n   * generic create route — see `plugin-host-resources.ts`. Compiled only: a\n   * runtime registration carrying one is refused, because the route is the\n   * writable-field allow-list and must never depend on a registry a process\n   * may not have filled.\n   */\n  resource?: PluginHostResourceDeclaration\n  /**\n   * How the whole-site export carries this collection, and what a restore\n   * writes back — see `plugin-site-export.ts`. Compiled only, like\n   * `resource`: a backup that depended on a registry a process had not\n   * filled would be missing the collection with nothing to say so.\n   */\n  siteExport?: PluginHostCollectionSiteExport\n}\n\n/** A declaration with the plugin that made it. */\nexport type ResolvedPluginHostCollection = PluginHostCollectionDeclaration & {\n  pluginId: string\n}\n\nexport const PLUGIN_HOST_COLLECTIONS =\n  definePluginServiceContract<PluginHostCollectionDeclaration>(\n    'core.host-collections',\n    { multiple: true },\n  )\n\n/**\n * Declares the host subcollections the registering plugin owns. The owner is\n * the loader's marker when a register fn is running, else `options.pluginId`;\n * with neither the registration throws. A collection another plugin declared\n * throws naming both, and nothing in the same call is registered — a\n * declaration is one plugin's statement about its own storage, so half of it\n * landing would be worse than none.\n */\nexport function registerPluginHostCollections(\n  collections: readonly PluginHostCollectionDeclaration[],\n  options?: { pluginId?: string },\n): void {\n  const pluginId = (getRegisteringPluginId() ?? options?.pluginId ?? '').trim()\n  const prepared = collections.map((declaration) => {\n    const name = declaration.name?.trim() ?? ''\n    if (!name) throw new Error('a host collection needs a name')\n    if (declaration.resource) {\n      throw new Error(\n        `host collection \"${name}\" declares a resource kind at runtime: the ` +\n          'create route reads only the compiled declarations in ' +\n          'plugins.config.json, so a kind registered here could never be created',\n      )\n    }\n    if (declaration.siteExport) {\n      throw new Error(\n        `host collection \"${name}\" declares a site export at runtime: the ` +\n          'export and restore read only the compiled declarations in ' +\n          'plugins.config.json, so a backup would silently leave it out',\n      )\n    }\n    if (declaration.mediaScan === 'none' && !declaration.mediaScanReason?.trim()) {\n      throw new Error(\n        `host collection \"${name}\" is not scanned for media and says no ` +\n          'reason: mediaScanReason has to name what scanning would cost, or ' +\n          'what it would get wrong',\n      )\n    }\n    const incumbent = pluginHostCollection(name)\n    if (incumbent && pluginId && incumbent.pluginId !== pluginId) {\n      throw new Error(\n        `host collection \"${name}\" is already declared by ` +\n          `\"${incumbent.pluginId}\"; refused \"${pluginId}\"`,\n      )\n    }\n    return { ...declaration, name }\n  })\n  for (const declaration of prepared) {\n    registerPluginService(PLUGIN_HOST_COLLECTIONS, declaration, {\n      ...(options?.pluginId ? { pluginId: options.pluginId } : {}),\n      key: declaration.name,\n    })\n  }\n}\n\n/**\n * Every declared collection, with its owner: the compiled rows first, then\n * anything registered at runtime that they do not already name.\n */\nexport function listPluginHostCollections(): ResolvedPluginHostCollection[] {\n  const compiled = PLUGIN_HOST_COLLECTIONS_DECLARED.map((row) => ({ ...row }))\n  const named = new Set(compiled.map((row) => row.name))\n  const registered = resolvePluginServices(PLUGIN_HOST_COLLECTIONS)\n    .map((entry) => ({ ...entry.impl, pluginId: entry.pluginId }))\n    .filter((row) => !named.has(row.name))\n  return [...compiled, ...registered]\n}\n\n/** One declared collection by name, with its owner, or `null`. */\nexport function pluginHostCollection(\n  name: string,\n): ResolvedPluginHostCollection | null {\n  const key = name.trim()\n  return listPluginHostCollections().find((one) => one.name === key) ?? null\n}\n\n/** The plugin that owns a collection, or `undefined` when none declares it. */\nexport function pluginIdForHostCollection(name: string): string | undefined {\n  return pluginHostCollection(name)?.pluginId\n}\n\n/**\n * The console hub slug a reference row for this collection links to, or\n * `undefined` when the owner routes none. A row found by the org pass names an\n * org collection, so an org declaration answers when no host one does.\n */\nexport function pluginHostCollectionRouteSlug(\n  name: string,\n): string | undefined {\n  return pluginHostCollection(name)?.routeSlug ?? pluginOrgCollection(name)?.routeSlug\n}\n\n/**\n * The declared collections the media scan reads generically — the list the\n * scan walks, in place of one core keeps by hand.\n */\nexport function pluginHostCollectionsScannedGenerically(): string[] {\n  return listPluginHostCollections()\n    .filter((one) => (one.mediaScan ?? 'generic') === 'generic')\n    .map((one) => one.name)\n}\n\n/** The declared collections the scan does not read, with the reason given. */\nexport function pluginHostCollectionsExcludedFromMediaScan(): Array<{\n  name: string\n  reason: string\n  pluginId: string\n}> {\n  return listPluginHostCollections()\n    .filter((one) => one.mediaScan === 'none')\n    .map((one) => ({\n      name: one.name,\n      reason: one.mediaScanReason ?? '',\n      pluginId: one.pluginId,\n    }))\n}\n\n/** The declared collections whose documents the site's artifact counters total. */\nexport function pluginHostArtifactCollections(): string[] {\n  return listPluginHostCollections()\n    .filter((one) => one.artifact === true)\n    .map((one) => one.name)\n}\n\n/**\n * What to call one of a collection's documents in a reference row: the\n * declared label, else core's own derivation from the name.\n *\n * The derivation is `hostContentCollectionLabel` rather than a second copy of\n * it, because a reference row does not know or care whether the collection it\n * names belongs to a plugin — two spellings of \"Product category\" reachable\n * by two paths is the kind of difference nobody notices until a screenshot\n * disagrees with a test.\n */\nexport function pluginHostCollectionLabel(name: string): string {\n  const declared = (\n    pluginHostCollection(name)?.label ?? pluginOrgCollection(name)?.label\n  )?.trim()\n  return declared || hostContentCollectionLabel(name)\n}\n\n/**\n * The ORG collections a plugin owns, for the media-usage scan (AGL-3273).\n *\n * Everything above is about `hosts/{hostId}/…`, and the scan's completeness\n * guard sweeps the source for exactly that shape. Some plugin storage lives on\n * the organization instead — Marketing's email sends are\n * `orgs/{orgId}/campaigns`, each naming the site it was sent as — and a\n * collection the scan does not know about is read as holding nothing, which\n * is the answer \"Find where this is used\" must never give by omission.\n *\n * So a plugin declares those too, in the `orgCollections` block of\n * `plugins.config.json`, compiled like the host rows. The same inverted\n * default holds — scanned unless the declaration says why not — and\n * `siteField` names the field that says which site a document belongs to, so\n * a reference row can name that site and link into its hub.\n *\n * Compiled only. There is no runtime door: nothing outside the first-party\n * config writes org storage the scan must read, and a door nobody uses is a\n * registry the scan's request would have to be trusted to have filled.\n */\nexport interface PluginOrgCollectionDeclaration {\n  /** The subcollection under `orgs/{orgId}`, spelled as Firestore holds it. */\n  name: string\n  /** What one of its documents is called in a reference row. */\n  label?: string\n  /** Default `generic`. An org collection has no dedicated pass to be `own`. */\n  mediaScan?: Exclude<PluginHostCollectionMediaScan, 'own'>\n  /** Why the scan does not read it. Required with `mediaScan: 'none'`. */\n  mediaScanReason?: string\n  /** The `[pluginSlug]` of the site hub a reference row links to. */\n  routeSlug?: string\n  /**\n   * The field on each document naming the site it BELONGS to. Two readers\n   * act on it: a reference row names that site and links into its hub, and\n   * deleting the site deletes the documents that name it (`eraseHost`). A\n   * collection whose documents are placed on sites rather than owned by one\n   * declares none.\n   */\n  siteField?: string\n  /**\n   * The states in which a document the site owns is work still IN FLIGHT —\n   * `{ field: 'status', values: ['scheduled', 'sending'] }` — and so holds\n   * the site where it is. Moving the site to another organization is refused\n   * while any document naming it matches (AGL-3381): the work would land\n   * for an organization the site no longer belongs to. Needs `siteField`.\n   */\n  holdsTransferWhile?: { field: string; values: string[] }\n}\n\n/** An org declaration with the plugin that made it. */\nexport type ResolvedPluginOrgCollection = PluginOrgCollectionDeclaration & {\n  pluginId: string\n}\n\n/** Every declared org collection, with its owner. */\nexport function listPluginOrgCollections(): ResolvedPluginOrgCollection[] {\n  return PLUGIN_ORG_COLLECTIONS_DECLARED.map((row) => ({ ...row }))\n}\n\n/** One declared org collection by name, with its owner, or `null`. */\nexport function pluginOrgCollection(\n  name: string,\n): ResolvedPluginOrgCollection | null {\n  const key = name.trim()\n  return listPluginOrgCollections().find((one) => one.name === key) ?? null\n}\n\n/** The declared org collections the media scan reads generically. */\nexport function pluginOrgCollectionsScannedGenerically(): ResolvedPluginOrgCollection[] {\n  return listPluginOrgCollections().filter(\n    (one) => (one.mediaScan ?? 'generic') === 'generic',\n  )\n}\n"],"names":["getRegisteringPluginId","hostContentCollectionLabel","PLUGIN_HOST_COLLECTIONS_DECLARED","PLUGIN_ORG_COLLECTIONS_DECLARED","definePluginServiceContract","registerPluginService","resolvePluginServices","PLUGIN_HOST_COLLECTIONS","multiple","registerPluginHostCollections","collections","options","pluginId","trim","prepared","map","declaration","name","Error","resource","siteExport","mediaScan","mediaScanReason","incumbent","pluginHostCollection","key","listPluginHostCollections","compiled","row","named","Set","registered","entry","impl","filter","has","find","one","pluginIdForHostCollection","pluginHostCollectionRouteSlug","pluginOrgCollection","routeSlug","pluginHostCollectionsScannedGenerically","pluginHostCollectionsExcludedFromMediaScan","reason","pluginHostArtifactCollections","artifact","pluginHostCollectionLabel","declared","label","listPluginOrgCollections","pluginOrgCollectionsScannedGenerically"],"mappings":";AAAA;;;;;;;;;;;;;;;CAeC,GAED,SAASA,sBAAsB,QAAQ,qCAAiC;AACxE,SAASC,0BAA0B,QAAQ,wDAAoD;AAG/F,SACEC,gCAAgC,EAChCC,+BAA+B,QAC1B,qCAAiC;AACxC,SACEC,2BAA2B,EAC3BC,qBAAqB,EACrBC,qBAAqB,QAChB,uBAAmB;AA2H1B,OAAO,MAAMC,0BACXH,4BACE,yBACA;IAAEI,UAAU;AAAK,GAClB;AAEH;;;;;;;CAOC,GACD,OAAO,SAASC,8BACdC,WAAuD,EACvDC,OAA+B;QAEbX,MAAAA;IAAlB,MAAMY,WAAW,EAACZ,QAAAA,0BAAAA,oCAAAA,0BAA4BW,2BAAAA,QAASC,QAAQ,YAA7CZ,OAAiD,IAAIa,IAAI;IAC3E,MAAMC,WAAWJ,YAAYK,GAAG,CAAC,CAACC;;YACnBA,mBAgB4BA;QAhBzC,MAAMC,gBAAOD,oBAAAA,YAAYC,IAAI,qBAAhBD,kBAAkBH,IAAI,qBAAM;QACzC,IAAI,CAACI,MAAM,MAAM,IAAIC,MAAM;QAC3B,IAAIF,YAAYG,QAAQ,EAAE;YACxB,MAAM,IAAID,MACR,CAAC,iBAAiB,EAAED,KAAK,2CAA2C,CAAC,GACnE,0DACA;QAEN;QACA,IAAID,YAAYI,UAAU,EAAE;YAC1B,MAAM,IAAIF,MACR,CAAC,iBAAiB,EAAED,KAAK,yCAAyC,CAAC,GACjE,+DACA;QAEN;QACA,IAAID,YAAYK,SAAS,KAAK,UAAU,GAACL,+BAAAA,YAAYM,eAAe,qBAA3BN,6BAA6BH,IAAI,KAAI;YAC5E,MAAM,IAAIK,MACR,CAAC,iBAAiB,EAAED,KAAK,uCAAuC,CAAC,GAC/D,sEACA;QAEN;QACA,MAAMM,YAAYC,qBAAqBP;QACvC,IAAIM,aAAaX,YAAYW,UAAUX,QAAQ,KAAKA,UAAU;YAC5D,MAAM,IAAIM,MACR,CAAC,iBAAiB,EAAED,KAAK,yBAAyB,CAAC,GACjD,CAAC,CAAC,EAAEM,UAAUX,QAAQ,CAAC,YAAY,EAAEA,SAAS,CAAC,CAAC;QAEtD;QACA,OAAO,aAAKI;YAAaC;;IAC3B;IACA,KAAK,MAAMD,eAAeF,SAAU;QAClCT,sBAAsBE,yBAAyBS,aAAa,aACtDL,CAAAA,2BAAAA,QAASC,QAAQ,IAAG;YAAEA,UAAUD,QAAQC,QAAQ;QAAC,IAAI,CAAC;YAC1Da,KAAKT,YAAYC,IAAI;;IAEzB;AACF;AAEA;;;CAGC,GACD,OAAO,SAASS;IACd,MAAMC,WAAWzB,iCAAiCa,GAAG,CAAC,CAACa,MAAS,aAAKA;IACrE,MAAMC,QAAQ,IAAIC,IAAIH,SAASZ,GAAG,CAAC,CAACa,MAAQA,IAAIX,IAAI;IACpD,MAAMc,aAAazB,sBAAsBC,yBACtCQ,GAAG,CAAC,CAACiB,QAAW,aAAKA,MAAMC,IAAI;YAAErB,UAAUoB,MAAMpB,QAAQ;YACzDsB,MAAM,CAAC,CAACN,MAAQ,CAACC,MAAMM,GAAG,CAACP,IAAIX,IAAI;IACtC,OAAO;WAAIU;WAAaI;KAAW;AACrC;AAEA,gEAAgE,GAChE,OAAO,SAASP,qBACdP,IAAY;QAGLS;IADP,MAAMD,MAAMR,KAAKJ,IAAI;IACrB,QAAOa,kCAAAA,4BAA4BU,IAAI,CAAC,CAACC,MAAQA,IAAIpB,IAAI,KAAKQ,gBAAvDC,kCAA+D;AACxE;AAEA,6EAA6E,GAC7E,OAAO,SAASY,0BAA0BrB,IAAY;QAC7CO;IAAP,QAAOA,wBAAAA,qBAAqBP,0BAArBO,sBAA4BZ,QAAQ;AAC7C;AAEA;;;;CAIC,GACD,OAAO,SAAS2B,8BACdtB,IAAY;;QAELO,uBAAyCgB;IAAhD,gBAAOhB,wBAAAA,qBAAqBP,0BAArBO,sBAA4BiB,SAAS,oBAAID,uBAAAA,oBAAoBvB,0BAApBuB,qBAA2BC,SAAS;AACtF;AAEA;;;CAGC,GACD,OAAO,SAASC;IACd,OAAOhB,4BACJQ,MAAM,CAAC,CAACG;YAASA;eAAD,EAACA,iBAAAA,IAAIhB,SAAS,YAAbgB,iBAAiB,eAAe;OACjDtB,GAAG,CAAC,CAACsB,MAAQA,IAAIpB,IAAI;AAC1B;AAEA,4EAA4E,GAC5E,OAAO,SAAS0B;IAKd,OAAOjB,4BACJQ,MAAM,CAAC,CAACG,MAAQA,IAAIhB,SAAS,KAAK,QAClCN,GAAG,CAAC,CAACsB;YAEIA;eAFK;YACbpB,MAAMoB,IAAIpB,IAAI;YACd2B,MAAM,GAAEP,uBAAAA,IAAIf,eAAe,YAAnBe,uBAAuB;YAC/BzB,UAAUyB,IAAIzB,QAAQ;QACxB;;AACJ;AAEA,iFAAiF,GACjF,OAAO,SAASiC;IACd,OAAOnB,4BACJQ,MAAM,CAAC,CAACG,MAAQA,IAAIS,QAAQ,KAAK,MACjC/B,GAAG,CAAC,CAACsB,MAAQA,IAAIpB,IAAI;AAC1B;AAEA;;;;;;;;;CASC,GACD,OAAO,SAAS8B,0BAA0B9B,IAAY;;QAElDO,OAAAA,uBAAqCgB;IADvC,MAAMQ,YACJxB,iBAAAA,wBAAAA,qBAAqBP,0BAArBO,sBAA4ByB,KAAK,oBAAIT,uBAAAA,oBAAoBvB,0BAApBuB,qBAA2BS,KAAK,qBADtD,AACfzB,MACCX,IAAI;IACP,OAAOmC,YAAY/C,2BAA2BgB;AAChD;AAwDA,mDAAmD,GACnD,OAAO,SAASiC;IACd,OAAO/C,gCAAgCY,GAAG,CAAC,CAACa,MAAS,aAAKA;AAC5D;AAEA,oEAAoE,GACpE,OAAO,SAASY,oBACdvB,IAAY;QAGLiC;IADP,MAAMzB,MAAMR,KAAKJ,IAAI;IACrB,QAAOqC,iCAAAA,2BAA2Bd,IAAI,CAAC,CAACC,MAAQA,IAAIpB,IAAI,KAAKQ,gBAAtDyB,iCAA8D;AACvE;AAEA,mEAAmE,GACnE,OAAO,SAASC;IACd,OAAOD,2BAA2BhB,MAAM,CACtC,CAACG;YAASA;eAAD,EAACA,iBAAAA,IAAIhB,SAAS,YAAbgB,iBAAiB,eAAe;;AAE9C"}