@aglyn/aglyn 1.0.0-beta.217 → 1.0.0-beta.219

package/src/lib/app-utils/marketplace-update-state.js

@@ -1,132 +0,0 @@
-/**
- * @license
- * Copyright 2026 Aglyn LLC
- *
- * Licensed under the Apache License, Version 2.0 (the "License");
- * you may not use this file except in compliance with the License.
- * You may obtain a copy of the License at
- *
- *   http://www.apache.org/licenses/LICENSE-2.0
- *
- * Unless required by applicable law or agreed to in writing, software
- * distributed under the License is distributed on an "AS IS" BASIS,
- * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- * See the License for the specific language governing permissions and
- * limitations under the License.
- */ import { resolveProvenance } from "./marketplace-provenance.js";
-import { offeredPluginVersion } from "./plugin-manifest.js";
-/**
- * Orders two artifact versions, or returns null when they cannot be ordered.
- *
- * Two numbering schemes are in play and both are real: copied artifacts get a
- * monotonic integer from the publish route, plugins get the semver string off
- * their manifest. A single string compare handles neither ("10" < "9",
- * "1.10.0" < "1.9.0"), so both are parsed as dotted numbers — which covers the
- * integer case as a one-segment version.
- *
- * Anything non-numeric (a prerelease tag, a date-stamped build) is not ordered
- * by guesswork: unequal-and-incomparable is reported as such and surfaces as
- * `unknown`, which is honest, where a string compare would confidently point
- * an update button at an older build.
- */ export function compareArtifactVersions(a, b) {
-    if (a == null || b == null || a === '' || b === '') return null;
-    const left = String(a);
-    const right = String(b);
-    if (left === right) return 0;
-    const parse = (value)=>{
-        const parts = value.split('.');
-        const numbers = [];
-        for (const part of parts){
-            if (!/^\d+$/.test(part)) return null;
-            numbers.push(Number(part));
-        }
-        return numbers.length ? numbers : null;
-    };
-    const leftParts = parse(left);
-    const rightParts = parse(right);
-    if (!leftParts || !rightParts) return null;
-    const length = Math.max(leftParts.length, rightParts.length);
-    for(let index = 0; index < length; index += 1){
-        var _leftParts_index, _rightParts_index;
-        const leftPart = (_leftParts_index = leftParts[index]) != null ? _leftParts_index : 0;
-        const rightPart = (_rightParts_index = rightParts[index]) != null ? _rightParts_index : 0;
-        if (leftPart < rightPart) return -1;
-        if (leftPart > rightPart) return 1;
-    }
-    // Equal numerically but not as strings — "1.0" and "1.0.0" are the same
-    // version written two ways.
-    return 0;
-}
-const UNKNOWN = {
-    state: 'unknown',
-    installedVersion: null,
-    availableVersion: null,
-    unknownReason: 'no-provenance'
-};
-/**
- * Compares what is installed against what the listing offers (AGL-1016).
- *
- * For plugins the offer is the newest INSTALLABLE version, never
- * `latestVersion`. Installs already resolve it that way; advertising
- * `latestVersion` would leak AGL-966's guarantee straight back out through a
- * badge, telling a workspace an update exists that the install route would
- * then refuse to give them.
- *
- * `revocation` is the same leak one state over (AGL-2368). Approval is a
- * review verdict and the kill switch does not clear it, so `latestApprovedVersion`
- * could name a stopped version — an "Update to vX" for bytes `install-plugin`
- * answers 409 to. Optional because it is a second document and not every
- * caller holds it; every writer of the mirror derives it from
- * `newestInstallableVersion` since AGL-2306, so a caller without one is
- * reading a cache that is correct except in the window between two writes.
- * A caller that HAS it should pass it.
- */ export function resolveUpdateState(installed, listing, artifactType, revocation) {
-    var _ref, _provenance_artifactType;
-    const provenance = resolveProvenance(installed, artifactType);
-    if (!installed || provenance.state === 'unknown' || !provenance.version) {
-        return UNKNOWN;
-    }
-    const installedVersion = provenance.version;
-    const type = (_ref = (_provenance_artifactType = provenance.artifactType) != null ? _provenance_artifactType : artifactType) != null ? _ref : null;
-    const available = type === 'plugin' ? offeredPluginVersion(listing, revocation) : listing == null ? void 0 : listing.latestVersion;
-    if (available == null || available === '') {
-        return {
-            state: 'unknown',
-            installedVersion,
-            availableVersion: null,
-            unknownReason: 'nothing-published'
-        };
-    }
-    const availableVersion = String(available);
-    const order = compareArtifactVersions(installedVersion, availableVersion);
-    if (order === null) {
-        return {
-            state: 'unknown',
-            installedVersion,
-            availableVersion,
-            unknownReason: 'incomparable'
-        };
-    }
-    return {
-        state: order === 0 ? 'current' : order < 0 ? 'update-available' : 'ahead',
-        installedVersion,
-        availableVersion
-    };
-}
-/**
- * One sentence describing an update state, so four surfaces do not each invent
- * their own wording for the same fact.
- */ export function updateStateLabel(status) {
-    switch(status.state){
-        case 'update-available':
-            return `You have v${status.installedVersion} · v${status.availableVersion} available`;
-        case 'current':
-            return `Up to date · v${status.installedVersion}`;
-        case 'ahead':
-            return `You have v${status.installedVersion}, newer than the published v${status.availableVersion}`;
-        default:
-            return status.unknownReason === 'nothing-published' ? 'No published version to compare against' : status.unknownReason === 'incomparable' ? `You have v${status.installedVersion}; v${status.availableVersion} cannot be ordered against it` : 'Installed before update tracking — version unknown';
-    }
-}
-
-//# sourceMappingURL=marketplace-update-state.js.map

package/src/lib/app-utils/marketplace-update-state.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../../../../../libs/aglyn/src/lib/app-utils/marketplace-update-state.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport type { MarketplaceArtifactType } from './marketplace-provenance'\nimport { resolveProvenance } from './marketplace-provenance'\nimport {\n  offeredPluginVersion,\n  type PluginRevocation,\n} from './plugin-manifest'\n\n/**\n * \"Is what I have installed still what the publisher ships?\" (AGL-1016).\n *\n * This comparison was previously derived inline on the installed-plugins card\n * and nowhere else, so the Plugins index, the installation page and the\n * marketplace listing could each show a different answer — or none. It is\n * exactly the sort of thing that gets re-derived slightly differently in four\n * places, so it lives here, pure, and every surface asks it.\n */\n\nexport type UpdateState =\n  /** Running the newest version the publisher offers. */\n  | 'current'\n  /** A newer version exists and can be taken. */\n  | 'update-available'\n  /**\n   * Installed version is NEWER than what is offered. Not a bug: a publisher\n   * installs their own unapproved version to test it, and a version can be\n   * withdrawn after someone installed it.\n   */\n  | 'ahead'\n  /** Not enough is known to say — no provenance, or nothing published to compare. */\n  | 'unknown'\n\nexport interface UpdateStatus {\n  state: UpdateState\n  /** The version running, or null when provenance cannot say. */\n  installedVersion: string | null\n  /** The newest version on offer — for plugins, the newest APPROVED one. */\n  availableVersion: string | null\n  /**\n   * Why the answer is `unknown`, for a UI that should say which kind of\n   * silence this is rather than implying the artifact is current.\n   */\n  unknownReason?: 'no-provenance' | 'nothing-published' | 'incomparable'\n}\n\n/**\n * Orders two artifact versions, or returns null when they cannot be ordered.\n *\n * Two numbering schemes are in play and both are real: copied artifacts get a\n * monotonic integer from the publish route, plugins get the semver string off\n * their manifest. A single string compare handles neither (\"10\" < \"9\",\n * \"1.10.0\" < \"1.9.0\"), so both are parsed as dotted numbers — which covers the\n * integer case as a one-segment version.\n *\n * Anything non-numeric (a prerelease tag, a date-stamped build) is not ordered\n * by guesswork: unequal-and-incomparable is reported as such and surfaces as\n * `unknown`, which is honest, where a string compare would confidently point\n * an update button at an older build.\n */\nexport function compareArtifactVersions(\n  a: string | number | null | undefined,\n  b: string | number | null | undefined,\n): -1 | 0 | 1 | null {\n  if (a == null || b == null || a === '' || b === '') return null\n  const left = String(a)\n  const right = String(b)\n  if (left === right) return 0\n  const parse = (value: string): number[] | null => {\n    const parts = value.split('.')\n    const numbers: number[] = []\n    for (const part of parts) {\n      if (!/^\\d+$/.test(part)) return null\n      numbers.push(Number(part))\n    }\n    return numbers.length ? numbers : null\n  }\n  const leftParts = parse(left)\n  const rightParts = parse(right)\n  if (!leftParts || !rightParts) return null\n  const length = Math.max(leftParts.length, rightParts.length)\n  for (let index = 0; index < length; index += 1) {\n    const leftPart = leftParts[index] ?? 0\n    const rightPart = rightParts[index] ?? 0\n    if (leftPart < rightPart) return -1\n    if (leftPart > rightPart) return 1\n  }\n  // Equal numerically but not as strings — \"1.0\" and \"1.0.0\" are the same\n  // version written two ways.\n  return 0\n}\n\n/** The installed side: a plugin pin, or any copied artifact's document. */\nexport interface UpdateComparableInstall {\n  version?: unknown\n  installedFrom?: Record<string, unknown> | null\n  marketplace?: { listingId?: string; version?: unknown } | null\n  source?: { listingId?: string; version?: unknown } | null\n  listingId?: string\n  pluginId?: string\n  sha256?: string\n}\n\n/** The listing side, as the public listing document carries it. */\nexport interface UpdateComparableListing {\n  artifactType?: string\n  type?: string\n  kind?: string\n  latestVersion?: unknown\n  /**\n   * The newest version that PASSED REVIEW (AGL-966), denormalised onto the\n   * listing by the approval route because `pluginVersions` is server-only.\n   */\n  latestApprovedVersion?: unknown\n}\n\nconst UNKNOWN: UpdateStatus = {\n  state: 'unknown',\n  installedVersion: null,\n  availableVersion: null,\n  unknownReason: 'no-provenance',\n}\n\n/**\n * Compares what is installed against what the listing offers (AGL-1016).\n *\n * For plugins the offer is the newest INSTALLABLE version, never\n * `latestVersion`. Installs already resolve it that way; advertising\n * `latestVersion` would leak AGL-966's guarantee straight back out through a\n * badge, telling a workspace an update exists that the install route would\n * then refuse to give them.\n *\n * `revocation` is the same leak one state over (AGL-2368). Approval is a\n * review verdict and the kill switch does not clear it, so `latestApprovedVersion`\n * could name a stopped version — an \"Update to vX\" for bytes `install-plugin`\n * answers 409 to. Optional because it is a second document and not every\n * caller holds it; every writer of the mirror derives it from\n * `newestInstallableVersion` since AGL-2306, so a caller without one is\n * reading a cache that is correct except in the window between two writes.\n * A caller that HAS it should pass it.\n */\nexport function resolveUpdateState(\n  installed: UpdateComparableInstall | null | undefined,\n  listing: UpdateComparableListing | null | undefined,\n  artifactType?: MarketplaceArtifactType,\n  revocation?: PluginRevocation | null,\n): UpdateStatus {\n  const provenance = resolveProvenance(installed as never, artifactType)\n  if (!installed || provenance.state === 'unknown' || !provenance.version) {\n    return UNKNOWN\n  }\n  const installedVersion = provenance.version\n  const type = provenance.artifactType ?? artifactType ?? null\n  const available =\n    type === 'plugin'\n      ? offeredPluginVersion(listing, revocation)\n      : listing?.latestVersion\n  if (available == null || available === '') {\n    return {\n      state: 'unknown',\n      installedVersion,\n      availableVersion: null,\n      unknownReason: 'nothing-published',\n    }\n  }\n  const availableVersion = String(available)\n  const order = compareArtifactVersions(installedVersion, availableVersion)\n  if (order === null) {\n    return {\n      state: 'unknown',\n      installedVersion,\n      availableVersion,\n      unknownReason: 'incomparable',\n    }\n  }\n  return {\n    state: order === 0 ? 'current' : order < 0 ? 'update-available' : 'ahead',\n    installedVersion,\n    availableVersion,\n  }\n}\n\n/**\n * One sentence describing an update state, so four surfaces do not each invent\n * their own wording for the same fact.\n */\nexport function updateStateLabel(status: UpdateStatus): string {\n  switch (status.state) {\n    case 'update-available':\n      return `You have v${status.installedVersion} · v${status.availableVersion} available`\n    case 'current':\n      return `Up to date · v${status.installedVersion}`\n    case 'ahead':\n      return `You have v${status.installedVersion}, newer than the published v${status.availableVersion}`\n    default:\n      return status.unknownReason === 'nothing-published'\n        ? 'No published version to compare against'\n        : status.unknownReason === 'incomparable'\n          ? `You have v${status.installedVersion}; v${status.availableVersion} cannot be ordered against it`\n          : 'Installed before update tracking — version unknown'\n  }\n}\n"],"names":["resolveProvenance","offeredPluginVersion","compareArtifactVersions","a","b","left","String","right","parse","value","parts","split","numbers","part","test","push","Number","length","leftParts","rightParts","Math","max","index","leftPart","rightPart","UNKNOWN","state","installedVersion","availableVersion","unknownReason","resolveUpdateState","installed","listing","artifactType","revocation","provenance","version","type","available","latestVersion","order","updateStateLabel","status"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAGD,SAASA,iBAAiB,QAAQ,8BAA0B;AAC5D,SACEC,oBAAoB,QAEf,uBAAmB;AAuC1B;;;;;;;;;;;;;CAaC,GACD,OAAO,SAASC,wBACdC,CAAqC,EACrCC,CAAqC;IAErC,IAAID,KAAK,QAAQC,KAAK,QAAQD,MAAM,MAAMC,MAAM,IAAI,OAAO;IAC3D,MAAMC,OAAOC,OAAOH;IACpB,MAAMI,QAAQD,OAAOF;IACrB,IAAIC,SAASE,OAAO,OAAO;IAC3B,MAAMC,QAAQ,CAACC;QACb,MAAMC,QAAQD,MAAME,KAAK,CAAC;QAC1B,MAAMC,UAAoB,EAAE;QAC5B,KAAK,MAAMC,QAAQH,MAAO;YACxB,IAAI,CAAC,QAAQI,IAAI,CAACD,OAAO,OAAO;YAChCD,QAAQG,IAAI,CAACC,OAAOH;QACtB;QACA,OAAOD,QAAQK,MAAM,GAAGL,UAAU;IACpC;IACA,MAAMM,YAAYV,MAAMH;IACxB,MAAMc,aAAaX,MAAMD;IACzB,IAAI,CAACW,aAAa,CAACC,YAAY,OAAO;IACtC,MAAMF,SAASG,KAAKC,GAAG,CAACH,UAAUD,MAAM,EAAEE,WAAWF,MAAM;IAC3D,IAAK,IAAIK,QAAQ,GAAGA,QAAQL,QAAQK,SAAS,EAAG;YAC7BJ,kBACCC;QADlB,MAAMI,YAAWL,mBAAAA,SAAS,CAACI,MAAM,YAAhBJ,mBAAoB;QACrC,MAAMM,aAAYL,oBAAAA,UAAU,CAACG,MAAM,YAAjBH,oBAAqB;QACvC,IAAII,WAAWC,WAAW,OAAO,CAAC;QAClC,IAAID,WAAWC,WAAW,OAAO;IACnC;IACA,wEAAwE;IACxE,4BAA4B;IAC5B,OAAO;AACT;AA0BA,MAAMC,UAAwB;IAC5BC,OAAO;IACPC,kBAAkB;IAClBC,kBAAkB;IAClBC,eAAe;AACjB;AAEA;;;;;;;;;;;;;;;;;CAiBC,GACD,OAAO,SAASC,mBACdC,SAAqD,EACrDC,OAAmD,EACnDC,YAAsC,EACtCC,UAAoC;QAOvBC,MAAAA;IALb,MAAMA,aAAanC,kBAAkB+B,WAAoBE;IACzD,IAAI,CAACF,aAAaI,WAAWT,KAAK,KAAK,aAAa,CAACS,WAAWC,OAAO,EAAE;QACvE,OAAOX;IACT;IACA,MAAME,mBAAmBQ,WAAWC,OAAO;IAC3C,MAAMC,QAAOF,QAAAA,2BAAAA,WAAWF,YAAY,YAAvBE,2BAA2BF,wBAA3BE,OAA2C;IACxD,MAAMG,YACJD,SAAS,WACLpC,qBAAqB+B,SAASE,cAC9BF,2BAAAA,QAASO,aAAa;IAC5B,IAAID,aAAa,QAAQA,cAAc,IAAI;QACzC,OAAO;YACLZ,OAAO;YACPC;YACAC,kBAAkB;YAClBC,eAAe;QACjB;IACF;IACA,MAAMD,mBAAmBtB,OAAOgC;IAChC,MAAME,QAAQtC,wBAAwByB,kBAAkBC;IACxD,IAAIY,UAAU,MAAM;QAClB,OAAO;YACLd,OAAO;YACPC;YACAC;YACAC,eAAe;QACjB;IACF;IACA,OAAO;QACLH,OAAOc,UAAU,IAAI,YAAYA,QAAQ,IAAI,qBAAqB;QAClEb;QACAC;IACF;AACF;AAEA;;;CAGC,GACD,OAAO,SAASa,iBAAiBC,MAAoB;IACnD,OAAQA,OAAOhB,KAAK;QAClB,KAAK;YACH,OAAO,CAAC,UAAU,EAAEgB,OAAOf,gBAAgB,CAAC,IAAI,EAAEe,OAAOd,gBAAgB,CAAC,UAAU,CAAC;QACvF,KAAK;YACH,OAAO,CAAC,cAAc,EAAEc,OAAOf,gBAAgB,EAAE;QACnD,KAAK;YACH,OAAO,CAAC,UAAU,EAAEe,OAAOf,gBAAgB,CAAC,4BAA4B,EAAEe,OAAOd,gBAAgB,EAAE;QACrG;YACE,OAAOc,OAAOb,aAAa,KAAK,sBAC5B,4CACAa,OAAOb,aAAa,KAAK,iBACvB,CAAC,UAAU,EAAEa,OAAOf,gBAAgB,CAAC,GAAG,EAAEe,OAAOd,gBAAgB,CAAC,6BAA6B,CAAC,GAChG;IACV;AACF"}

package/src/lib/app-utils/publisher-agreement.d.ts

@@ -1,289 +0,0 @@
-/**
- * @license
- * Copyright 2026 Aglyn LLC
- *
- * Licensed under the Apache License, Version 2.0 (the "License");
- * you may not use this file except in compliance with the License.
- * You may obtain a copy of the License at
- *
- *   http://www.apache.org/licenses/LICENSE-2.0
- *
- * Unless required by applicable law or agreed to in writing, software
- * distributed under the License is distributed on an "AS IS" BASIS,
- * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- * See the License for the specific language governing permissions and
- * limitations under the License.
- */
-/**
- * The version of the agreement currently in force.
- *
- * Matches the `Agreement version` header of the document itself, which is now
- * besigner content at {@link PUBLISHER_AGREEMENT_URL} rather than a repo file
- * (same practice as the Terms of Service). Bump this **only** when the
- * substance changes in a way a publisher should re-read — a typo fix is not a
- * bump. Bumping it stops every publisher at their next publish until they
- * accept again.
- *
- * Moved off `2026-07-28.1` on 2026-08-14 (AGL-1674). That string named the
- * July draft, which was never published and whose §8 said the publisher is the
- * seller of record. The published text says the opposite — Aglyn processes the
- * sale and remits transaction tax — so it is a different document in
- * substance, not a reissue, and re-asking is the point rather than a cost.
- *
- * Moved to `2026-08-18.1` on 2026-08-18 (AGL-1840 + AGL-1661). Two body-text
- * changes: §1 now says "the Aglyn marketplace" (the AGL-975 rename, and the
- * reason this snapshot must NOT need the AGL-975 naming-guard exemption that
- * the `2026-08-14.1` one still carries), and §1's cross-reference to
- * the "End User Licence Agreement"
- * becomes "License" to match the document that agreement actually is, which
- * was renamed on the same day.
- *
- * ⚠️ Read against the "a typo fix is not a bump" rule above, both edits are
- * closer to a typo than to substance, and the tension is real. The bump was
- * taken anyway on the decision (2026-08-18), for a reason the rule does not
- * cover: the served page changed, so keeping `2026-08-14.1` would leave the
- * pin below asserting a hash for text nobody is shown any more — a FALSE
- * RECORD, which is the exact failure the pin exists to detect. The choice is
- * therefore between a bump and a broken pin, not between a bump and nothing.
- *
- * ## 2026-08-22 — the page changed and this string DELIBERATELY did not
- *
- * Three clauses were added on 2026-08-22 (§3(h) listing conduct, §8.6 sales
- * through the Marketplace, §13.6 marks) and the pin below moved with them, but
- * `2026-08-18.1` stayed. That is not the third option the paragraph above says
- * does not exist — it is the same choice with one input changed. A bump exists
- * to re-ask publishers who accepted the OLD text; production holds exactly one
- * acceptance record and it is the own, so there is nobody to re-ask and the
- * bump would buy nothing. the decision, 2026-08-22.
- *
- * The pin still had to move, for precisely the reason given above: the served
- * bytes changed, so leaving the old hash here would assert a document nobody
- * is shown. Version unchanged + pin re-captured is coherent ONLY while the
- * acceptance set is empty. The first real publisher acceptance ends that, and
- * from then on any body-text change costs a bump — see the same rule in
- * `apps/console/constants/legal-documents.ts`, where the clickwrap snapshots
- * collapsed back to `v1` on the identical argument.
- *
- * ## 2026-08-24 — `2026-08-24.1`, and why this one CANNOT be folded (AGL-1956)
- *
- * §13.3 changed twice in one sentence. The venue moved from Williamson County
- * to TRAVIS County (decided) — Williamson entered from the former
- * Jarrell residential address, while every published Aglyn address is 5900
- * Balcones Dr STE 100, Austin, TX 78731, which is Travis. And the clause cited
- * "Terms of Service Section 19" for governing law and venue when those live at
- * §18.6; §19 is General. A wrong cross-reference in a forum-selection clause is
- * the kind of defect that gets argued about, so it was corrected in the same
- * pass.
- *
- * Unlike 2026-08-22, this one takes the bump rather than only re-pinning, and
- * the deciding reason is mechanical rather than editorial: THIS VERSION STRING
- * IS PUBLISHED IN THE DOCUMENT. The page at {@link PUBLISHER_AGREEMENT_URL}
- * serves `Agreement version: 2026-08-24.1` in its own second line, so the
- * capture below contains it, and `publisher-agreement-version.spec.ts` asserts
- * the snapshot contains `Agreement version: ${PUBLISHER_AGREEMENT_VERSION}`.
- * Holding the constant at `2026-08-18.1` against that text would need the page
- * republished to say so, and would otherwise record a publisher as having
- * accepted `2026-08-18.1` while naming bytes that call themselves
- * `2026-08-24.1`. That is a false record of exactly the shape the pin exists
- * to prevent.
- *
- * ⚠️ THIS IS THE ONE PLACE THE CLICKWRAP ARGUMENT DOES NOT REACH. The signup
- * clickwrap folded its 2026-08-24 corrections into `v1` and did not bump
- * (`apps/console/constants/legal-documents.ts`) — decided: no v2
- * before launch. That works there because `v1` is a REPO-SIDE label: the
- * published Terms carry a "Last updated" date and no version string at all, so
- * the label can stay still while the text moves. Here the label is part of the
- * document a publisher reads. The two schemes are not the same kind of thing
- * and must not be reasoned about as one — that difference is the whole content
- * of this paragraph.
- *
- * On the merits it would have been a bump anyway: a forum-selection clause is
- * substance, not a typo — it names the court a publisher would have to travel
- * to. The 2026-08-22 cost argument is unchanged and still cheap, production
- * holding exactly one acceptance record which is the own.
- *
- * §8.1 and §8.3 are UNTOUCHED and were already correct: they have said Aglyn is
- * merchant of record and determines, collects and remits transaction tax since
- * 2026-08-14. The Terms of Service moved TO them in this pass (new ToS §10.7),
- * not the other way around.
- */
-export declare const PUBLISHER_AGREEMENT_VERSION = "2026-08-24.1";
-export declare const PUBLISHER_AGREEMENT_TITLE = "Marketplace Publisher Agreement";
-/**
- * The snapshot pin for the version above (AGL-1678).
- *
- * A version string is a label we control and can reuse, so on its own it
- * proves nothing about what a publisher actually read. These two values pin
- * the archived snapshot at
- * `legal/publisher-agreement/{PUBLISHER_AGREEMENT_VERSION}/marketplace-publisher-agreement.txt`
- * (beside this module), captured FROM THE LIVE PAGE after publication — the
- * same publication-first machinery as the signup clickwrap
- * (`apps/console/constants/legal-documents.ts`, AGL-1497), and deliberately a
- * PARALLEL manifest rather than an entry in `LEGAL_DOCUMENTS`: ToS §19.1 makes
- * that set the entire signup agreement, and the publisher agreement is
- * deliberately not part of it. Mixing them would widen what a signup
- * acceptance covers.
- *
- * Both values go onto every acceptance record, so a record is self-contained
- * evidence of content and later tampering with the archive is detectable
- * rather than invisible. `publisher-agreement-version.spec.ts` re-hashes the
- * snapshot, so one version string can never come to mean two different
- * documents.
- *
- * Capture method (proven byte-for-byte against the clickwrap v4 hashes before
- * this snapshot was taken): fetch the live page, walk its HTML text nodes
- * skipping script/style, trim each, drop empties, take the document's content
- * block (first line `Last updated: …` through its closing `© …` line,
- * excluding site chrome and the table of contents), join with `\n`, and end
- * with a trailing newline. UTF-8 throughout.
- *
- * TO PUBLISH A CHANGE: publish the besigner edit first, confirm the live page
- * serves it, capture a new snapshot under the new version's directory, then
- * bump `PUBLISHER_AGREEMENT_VERSION` and these two values together, and add
- * the version's entry to `PUBLISHER_AGREEMENT_CHANGES` below. Never
- * hand-write a snapshot: it is evidence of what a publisher was shown, and a
- * snapshot of unpublished text is a false record.
- */
-export declare const PUBLISHER_AGREEMENT_SHA256 = "2df6e940f037b4630e53c8f63bad8604ef4bf370374b89afcd4ea7f9fe8e8d63";
-/** Byte length of the same snapshot — a cheap second check on the content. */
-export declare const PUBLISHER_AGREEMENT_BYTES = 13730;
-/**
- * Canonical document, on the operator's legal origin beside the other terms.
- *
- * Built from `LEGAL_ORIGIN` (AGL-2196), which this module already depends on:
- * `publisherAgreementIsPublished` below calls `isPublishedLegalUrl`, and that
- * accepts ONLY `LEGAL_ORIGIN`. So the gate was operator-aware while the link
- * it gates was a bare `aglyn.com` literal — meaning on a self-host install
- * with `NEXT_PUBLIC_OPERATOR_LEGAL_ORIGIN` set, the gate rejected the very URL
- * this file handed it, and every publisher was blocked from accepting. One
- * origin for both closes that, and leaves Aglyn's own URL byte-identical.
- */
-export declare const PUBLISHER_AGREEMENT_URL: string;
-/**
- * Whether that document can actually be read (AGL-1660).
- *
- * It could not, from the day this gate shipped until the day this check did:
- * the URL above 404ed, and the console still rendered it as "Read the full
- * Marketplace Publisher Agreement" above an Accept button. An acceptance
- * collected that way is a signature on a blank page — the same
- * publication-first principle the clickwrap snapshots are built on, failing in
- * the one place the text was never published at all.
- *
- * Derived, not a second flag: it reads `PUBLISHED_LEGAL_PATHS`, so the ONE
- * edit that adds the path when the page goes live is what re-opens acceptance
- * everywhere. There is no boolean to forget to flip, and no way for the link
- * and the gate to disagree.
- */
-export declare function publisherAgreementIsPublished(url?: string): boolean;
-/**
- * What a publisher is told while the document has no page.
- *
- * Deliberately not "try again later" — it names the reason, because the fix is
- * ours and the publisher can do nothing about it. It must never read as though
- * accepting is something they merely have not got round to.
- */
-export declare const PUBLISHER_AGREEMENT_UNAVAILABLE_NOTICE: string;
-/**
- * What the agreement actually commits a publisher to.
- *
- * Shown above the accept control. A link alone is the pattern that produces
- * agreements nobody has read; these are the terms most likely to surprise
- * someone later, in the words they would need at that moment. They summarise
- * the document — they are not it, and the copy says so.
- */
-export declare const PUBLISHER_AGREEMENT_POINTS: readonly {
-    id: string;
-    label: string;
-    detail: string;
-}[];
-/**
- * What each version changed from the one before it, in the words a publisher
- * re-accepting needs (AGL-3407).
- *
- * An org that accepted an older version is asked again, and "the terms
- * changed" with nothing more is a request to re-read thirteen sections to
- * find two edited clauses. Each entry names the sections that moved, read off
- * the archived snapshots beside this module (`legal/publisher-agreement/`) —
- * never written from memory of the edit, for the same reason a snapshot is
- * never hand-written.
- *
- * Oldest first. The last entry is always {@link PUBLISHER_AGREEMENT_VERSION}:
- * a bump adds its entry in the same change, and
- * `publisher-agreement-version.spec.ts` fails a bump that did not. The first
- * published version has no entry, because nothing preceded it that anyone
- * accepted.
- */
-export declare const PUBLISHER_AGREEMENT_CHANGES: readonly {
-    version: string;
-    changes: readonly string[];
-}[];
-/**
- * The changes an org has not yet accepted, oldest first.
- *
- * Versions are dated strings (`YYYY-MM-DD.n`), so they order as text. An
- * acceptance of a version this list does not name — one older than the first
- * entry — gets every entry, which is the honest answer: all of it is new to
- * them. No acceptance at all gets none, because a first acceptance is of the
- * whole document, not a set of edits.
- */
-export declare function publisherAgreementChangesSince(acceptedVersion: string | null | undefined, currentVersion?: string): readonly {
-    version: string;
-    changes: readonly string[];
-}[];
-/**
- * A recorded acceptance: which version, of which exact bytes, by whom, when.
- *
- * `sha256`/`bytes` (AGL-1678) pin the acceptance to the archived snapshot of
- * the text the publisher was shown. Optional because records written before
- * the pin existed carry only the version string — absence means "accepted
- * before 2026-08-17", not "accepted nothing".
- */
-export interface PublisherAgreementAcceptance {
-    version?: string;
-    sha256?: string;
-    bytes?: number;
-    acceptedBy?: string;
-    acceptedAt?: unknown;
-}
-/**
- * Where an org stands with the agreement.
- *
- * `none` and `outdated` are deliberately different answers. "You have never
- * agreed to anything" and "the terms changed since you agreed" are different
- * situations with different copy, and collapsing them into a boolean is how
- * a re-acceptance ends up reading like a first-time setup step.
- */
-export type PublisherAgreementState = 'none' | 'outdated' | 'current';
-export declare function publisherAgreementState(acceptance: PublisherAgreementAcceptance | null | undefined, currentVersion?: string): PublisherAgreementState;
-/**
- * Whether a publish may proceed.
- *
- * An older acceptance is NOT carried forward. Whoever publishes next reads
- * the changed agreement and accepts it, or does not publish — silently
- * inheriting an acceptance across a rewrite is precisely what makes the
- * record worthless.
- */
-export declare function hasCurrentPublisherAgreement(acceptance: PublisherAgreementAcceptance | null | undefined, currentVersion?: string): boolean;
-/**
- * What the acceptance UI may show (AGL-1660).
- *
- * The gate lives HERE rather than in the panel, for the reason every "check it
- * in the component" control eventually fails: the component is not the only
- * caller. The accept route consults the same function, so a client that skips
- * the UI entirely meets the same answer.
- *
- * `documentUrl` is null, not the URL, when the document is unpublished — the
- * console reads the link target from this, so an unreadable document is
- * structurally unable to reach an href.
- */
-export interface PublisherAgreementPresentation {
-    /** The document to link, or null when there is no page to link to. */
-    documentUrl: string | null;
-    /** Whether the accept control may be offered at all. */
-    canAccept: boolean;
-    /** Why acceptance is unavailable, or null when it is available. */
-    unavailableNotice: string | null;
-}
-export declare function publisherAgreementPresentation(state: PublisherAgreementState, published?: boolean): PublisherAgreementPresentation;
-/** The refusal a publisher sees, saying which of the two problems it is. */
-export declare function publisherAgreementRefusal(state: PublisherAgreementState, published?: boolean): string;