@aglyn/aglyn 1.0.0-beta.218 → 1.0.0-beta.220

package/src/lib/plugin-manager/plugin-containers.generated.js

@@ -0,0 +1,20 @@
+/**
+ * GENERATED FILE — do not edit. Regenerate with:
+ *   node tools/scripts/generate-plugin-manifests.mjs
+ *
+ * The container kinds plugins declare (AGL-3080): each plugin's
+ * `containers` block in plugins.config.json. Core's `plugin-containers.ts`
+ * reads them; core names no kind.
+ */ export const PLUGIN_CONTAINER_KINDS_DECLARED = [
+    {
+        "pluginId": "marketing",
+        "kind": "campaign",
+        "label": "Campaign",
+        "pluralLabel": "Campaigns",
+        "ownerLabel": "Marketing",
+        "orgCollection": "emailCampaigns",
+        "nameField": "name"
+    }
+];
+
+//# sourceMappingURL=plugin-containers.generated.js.map

package/src/lib/plugin-manager/plugin-containers.generated.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../libs/aglyn/src/lib/plugin-manager/plugin-containers.generated.ts"],"sourcesContent":["/**\n * GENERATED FILE — do not edit. Regenerate with:\n *   node tools/scripts/generate-plugin-manifests.mjs\n *\n * The container kinds plugins declare (AGL-3080): each plugin's\n * `containers` block in plugins.config.json. Core's `plugin-containers.ts`\n * reads them; core names no kind.\n */\n\nimport type { PluginContainerKind } from './plugin-containers'\n\nexport const PLUGIN_CONTAINER_KINDS_DECLARED: readonly PluginContainerKind[] = [\n  {\n    \"pluginId\": \"marketing\",\n    \"kind\": \"campaign\",\n    \"label\": \"Campaign\",\n    \"pluralLabel\": \"Campaigns\",\n    \"ownerLabel\": \"Marketing\",\n    \"orgCollection\": \"emailCampaigns\",\n    \"nameField\": \"name\"\n  }\n]\n"],"names":["PLUGIN_CONTAINER_KINDS_DECLARED"],"mappings":"AAAA;;;;;;;CAOC,GAID,OAAO,MAAMA,kCAAkE;IAC7E;QACE,YAAY;QACZ,QAAQ;QACR,SAAS;QACT,eAAe;QACf,cAAc;QACd,iBAAiB;QACjB,aAAa;IACf;CACD,CAAA"}

package/src/lib/plugin-manager/plugin-containers.js

@@ -0,0 +1,27 @@
+import { _ as _extends } from "@swc/helpers/_/_extends";
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ import { PLUGIN_CONTAINER_KINDS_DECLARED } from "./plugin-containers.generated.js";
+/** Every declared container kind, in catalog order. */ export function listPluginContainerKinds() {
+    return PLUGIN_CONTAINER_KINDS_DECLARED.map((row)=>_extends({}, row));
+}
+/** One declared kind, or `null` when no plugin keeps it. */ export function pluginContainerKind(kind) {
+    const key = String(kind != null ? kind : '').trim();
+    const row = PLUGIN_CONTAINER_KINDS_DECLARED.find((one)=>one.kind === key);
+    return row ? _extends({}, row) : null;
+}
+
+//# sourceMappingURL=plugin-containers.js.map

package/src/lib/plugin-manager/plugin-containers.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../libs/aglyn/src/lib/plugin-manager/plugin-containers.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { PLUGIN_CONTAINER_KINDS_DECLARED } from './plugin-containers.generated'\n\n/**\n * CONTAINER KINDS: the documents other records are FILED UNDER, declared by\n * the plugin that keeps them.\n *\n * A container is a document other records join by naming its id in a\n * membership array on their OWN documents — a form, a screen, a lead or a\n * contact filed under a campaign. `app-utils/container-membership.ts` says\n * why the edge lives on the member, and holds the helpers every member's\n * writer and reader share.\n *\n * The plugin that keeps a kind declares it in the `containers` block of\n * `plugins.config.json`, compiled into `plugin-containers.generated.ts`, so\n * no surface that files a record has to know which plugin that is or where\n * the containers are stored:\n *\n *  - `kind` names the membership field: a member holds its containers in\n *    `<kind>Ids` (`containerMembershipField`). The name is the contract,\n *    which is what lets a record page in one plugin file itself under a kind\n *    another plugin keeps without importing it.\n *  - `orgCollection` is where the containers are stored, under the\n *    organization (`orgs/{orgId}/{orgCollection}`), one of the owner's own\n *    declared org collections. A container is placed on sites by the core's\n *    scope field (`visibleTo`) and retired by `deletedAt`, like every other\n *    org record a site hub lists.\n *  - `label` / `pluralLabel` / `ownerLabel` are what a picker calls one, several,\n *    and the plugin a merchant creates one in.\n *\n * Compiled rather than registered: the readers include a form submission\n * that loads no plugin, and a registry that request had not filled would\n * read every record as filed under nothing.\n */\n\n/** One container kind, as its plugin declares it. */\nexport interface PluginContainerKind {\n  /** The plugin that keeps the containers. */\n  pluginId: string\n  /** The kind, lowerCamelCase; its members hold it in `<kind>Ids`. */\n  kind: string\n  /** What one container is called. */\n  label: string\n  /** What several are called. */\n  pluralLabel: string\n  /** The owner's catalog label: where a merchant creates one. */\n  ownerLabel: string\n  /** The org collection the containers are stored in. */\n  orgCollection: string\n  /** The field a container's name is stored in. */\n  nameField: string\n}\n\n/** Every declared container kind, in catalog order. */\nexport function listPluginContainerKinds(): PluginContainerKind[] {\n  return PLUGIN_CONTAINER_KINDS_DECLARED.map((row) => ({ ...row }))\n}\n\n/** One declared kind, or `null` when no plugin keeps it. */\nexport function pluginContainerKind(kind: string): PluginContainerKind | null {\n  const key = String(kind ?? '').trim()\n  const row = PLUGIN_CONTAINER_KINDS_DECLARED.find((one) => one.kind === key)\n  return row ? { ...row } : null\n}\n"],"names":["PLUGIN_CONTAINER_KINDS_DECLARED","listPluginContainerKinds","map","row","pluginContainerKind","kind","key","String","trim","find","one"],"mappings":";AAAA;;;;;;;;;;;;;;;CAeC,GAED,SAASA,+BAA+B,QAAQ,mCAA+B;AAoD/E,qDAAqD,GACrD,OAAO,SAASC;IACd,OAAOD,gCAAgCE,GAAG,CAAC,CAACC,MAAS,aAAKA;AAC5D;AAEA,0DAA0D,GAC1D,OAAO,SAASC,oBAAoBC,IAAY;IAC9C,MAAMC,MAAMC,OAAOF,eAAAA,OAAQ,IAAIG,IAAI;IACnC,MAAML,MAAMH,gCAAgCS,IAAI,CAAC,CAACC,MAAQA,IAAIL,IAAI,KAAKC;IACvE,OAAOH,MAAM,aAAKA,OAAQ;AAC5B"}

package/src/lib/plugin-manager/plugin-contributions.d.ts

@@ -83,7 +83,7 @@ export interface PluginSiteContributions {
 export interface PluginConsoleContributions {
     /**
      * The widget slots its widgets fill: the `CONSOLE_WIDGET_SLOTS` zones, the
-     * panels the shell draws as slots (the assistant dock `assistPanel`, the
+     * panels the shell draws as slots (the console dock `consoleDock`, the
      * besigner's `besignerInspector`), and zones another plugin hosts. A screen
      * that renders one of them loads the plugin.
      */

package/src/lib/plugin-manager/plugin-contributions.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../../../libs/aglyn/src/lib/plugin-manager/plugin-contributions.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n/**\n * What a plugin contributes, and where (AGL-3116).\n *\n * A plugin loads only where something uses it. Installing one loads nothing:\n * a published page fetches a plugin's code when the page places one of its\n * elements or the site runs one of its features, and a console screen\n * fetches it when the screen renders one of its slots or routes, or when the\n * plugin draws something the shell renders on every screen.\n *\n * The loaders cannot learn that by running a plugin, because running it is\n * the cost being avoided. So each plugin DECLARES its contributions:\n * first-party plugins in `plugins.config.json`, marketplace plugins in the\n * manifest they publish (`contributes`). The declaration is the whole of what\n * a loader reads, and it is data: this module is dependency-free so the\n * server, both apps, the verifier and the build tools share one reading.\n *\n * A declared surface only narrows where to look. Presence is the rule: a\n * plugin that declares a component loads on the pages that place it, not on\n * every page of the site that installed it.\n *\n * ## A plugin that declares nothing\n *\n * Every marketplace version published before this contract has no\n * `contributes`. Such a plugin keeps working under one default:\n *\n * - **On a published page it loads only where its element is placed**: a\n *   node whose `pluginId` names the plugin (its manifest id or its listing\n *   id). That is the one presence signal a page carries without running the\n *   bundle, and it is the only way a page can show an element the plugin\n *   registers. A site runtime of an undeclared plugin does not load, and the\n *   publish pipeline refuses a bundle that registers one without declaring\n *   it, so the only plugins this default governs are the ones already\n *   published.\n * - **In the console it loads with the workspace shell**, as it always did,\n *   because a nav tab or a provider is only discoverable by running\n *   `register()`. Nothing on a published page depends on this.\n */\n\n/** What a plugin adds to a published site. */\nexport interface PluginSiteContributions {\n  /**\n   * Canvas component ids the plugin registers: the elements a page places. A\n   * published page loads the plugin only when its node tree places one.\n   */\n  components?: string[]\n  /**\n   * Site features: runtimes the plugin mounts on every page of a site that\n   * switched it on (an announcement bar, an experiment runner), named by the\n   * `runtimeId` it registers. A plugin with a feature loads on every page of\n   * such a site, which is what a feature is.\n   */\n  features?: string[]\n  /**\n   * The elements that run a site function in the visitor's browser (AGL-3393),\n   * each keyed by its component id and naming the prop that holds the\n   * function's name. Compose hands such a node the function's definition and\n   * the site variables it reads; no other node is given either.\n   *\n   * Declared DATA rather than read off a registered schema: compose runs where\n   * no plugin code loads — the tenant's server components — so the only thing\n   * it can consult is a declaration. A first-party plugin declares it in\n   * `plugins.config.json`, a marketplace plugin in its manifest, and both reach\n   * compose as the same map. Every key must also be one of `components`.\n   */\n  functionBindings?: Record<string, string>\n}\n\n/** What a plugin adds to the console. */\nexport interface PluginConsoleContributions {\n  /**\n   * The widget slots its widgets fill: the `CONSOLE_WIDGET_SLOTS` zones, the\n   * panels the shell draws as slots (the assistant dock `assistPanel`, the\n   * besigner's `besignerInspector`), and zones another plugin hosts. A screen\n   * that renders one of them loads the plugin.\n   */\n  slots?: string[]\n  /** Site-level console routes it serves (`/forms`), beneath `/hosts/[host]`. */\n  routes?: string[]\n  /** Organization-level console routes it serves (`/outreach`). */\n  orgRoutes?: string[]\n  /**\n   * The shell draws something of it on every screen of a workspace: a nav\n   * tab, an organization tab, a staff tab or a provider. Such a plugin loads\n   * with the shell, because every screen renders it.\n   */\n  shell?: boolean\n}\n\nexport interface PluginContributions {\n  site?: PluginSiteContributions\n  console?: PluginConsoleContributions\n}\n\n/** Bound on each declared list, so a manifest cannot hand a loader a novel. */\nexport const PLUGIN_MAX_CONTRIBUTIONS = 128\n\n/**\n * A component, feature or slot id: an identifier with the separators ids in\n * the platform use (`muiTypography`, `marketplacePlugin`, `ai.assist`).\n */\nconst CONTRIBUTION_ID = /^[A-Za-z_][A-Za-z0-9_.:-]{0,79}$/\n\n/**\n * A console route: one or more path segments, as a nav item's `href` names\n * them. Never a URL, never `..`.\n */\nconst CONTRIBUTION_ROUTE = /^(\\/[A-Za-z0-9_-]+){1,8}$/\n\n/** A prop name a function binding may name: a plain identifier. */\nconst BINDING_PROP = /^[A-Za-z_$][A-Za-z0-9_$]{0,63}$/\n\ntype Sanitized =\n  | { ok: true; contributions: PluginContributions }\n  | { ok: false; error: string }\n\n/**\n * Validates a declared `contributes` block.\n *\n * Malformed input is REFUSED rather than trimmed: a loader reads this to\n * decide where a plugin runs, so a declaration that silently lost an entry\n * would stop the plugin loading where it is used, and nobody would see why.\n * Duplicates are collapsed and empty lists dropped, because neither changes\n * what the declaration means.\n *\n * `{}` is valid and means \"contributes nothing anywhere\", which is a\n * different statement from an absent block (see the module note).\n */\nexport function sanitizePluginContributions(input: unknown): Sanitized {\n  if (!isPlainObject(input)) {\n    return { ok: false, error: 'contributes must be an object' }\n  }\n  const out: PluginContributions = {}\n  for (const key of Object.keys(input)) {\n    if (key !== 'site' && key !== 'console') {\n      return { ok: false, error: `contributes.${key} is not a known surface` }\n    }\n  }\n\n  if (input['site'] !== undefined) {\n    const site = input['site']\n    if (!isPlainObject(site)) {\n      return { ok: false, error: 'contributes.site must be an object' }\n    }\n    const next: PluginSiteContributions = {}\n    for (const key of Object.keys(site)) {\n      if (key === 'functionBindings') continue\n      if (key !== 'components' && key !== 'features') {\n        return { ok: false, error: `contributes.site.${key} is not a known contribution` }\n      }\n      const list = idList(site[key], `contributes.site.${key}`, CONTRIBUTION_ID)\n      if (list.ok === false) return { ok: false, error: list.error }\n      if (list.values.length) next[key] = list.values\n    }\n    if (site['functionBindings'] !== undefined) {\n      const bindings = functionBindingMap(\n        site['functionBindings'],\n        next.components ?? [],\n      )\n      if (bindings.ok === false) return { ok: false, error: bindings.error }\n      if (Object.keys(bindings.value).length) {\n        next.functionBindings = bindings.value\n      }\n    }\n    if (Object.keys(next).length) out.site = next\n  }\n\n  if (input['console'] !== undefined) {\n    const consoleInput = input['console']\n    if (!isPlainObject(consoleInput)) {\n      return { ok: false, error: 'contributes.console must be an object' }\n    }\n    const next: PluginConsoleContributions = {}\n    for (const key of Object.keys(consoleInput)) {\n      if (key === 'shell') {\n        if (typeof consoleInput['shell'] !== 'boolean') {\n          return { ok: false, error: 'contributes.console.shell must be true or false' }\n        }\n        if (consoleInput['shell']) next.shell = true\n        continue\n      }\n      if (key !== 'slots' && key !== 'routes' && key !== 'orgRoutes') {\n        return {\n          ok: false,\n          error: `contributes.console.${key} is not a known contribution`,\n        }\n      }\n      const list = idList(\n        consoleInput[key],\n        `contributes.console.${key}`,\n        key === 'slots' ? CONTRIBUTION_ID : CONTRIBUTION_ROUTE,\n      )\n      if (list.ok === false) return { ok: false, error: list.error }\n      if (list.values.length) next[key] = list.values\n    }\n    if (Object.keys(next).length) out.console = next\n  }\n\n  return { ok: true, contributions: out }\n}\n\nfunction isPlainObject(value: unknown): value is Record<string, unknown> {\n  return Boolean(value) && typeof value === 'object' && !Array.isArray(value)\n}\n\nfunction idList(\n  value: unknown,\n  where: string,\n  pattern: RegExp,\n): { ok: true; values: string[] } | { ok: false; error: string } {\n  if (!Array.isArray(value)) return { ok: false, error: `${where} must be a list` }\n  if (value.length > PLUGIN_MAX_CONTRIBUTIONS) {\n    return { ok: false, error: `${where} lists more than ${PLUGIN_MAX_CONTRIBUTIONS}` }\n  }\n  const values: string[] = []\n  for (const entry of value) {\n    if (typeof entry !== 'string' || !pattern.test(entry)) {\n      return { ok: false, error: `${where} has an invalid entry \"${String(entry)}\"` }\n    }\n    if (!values.includes(entry)) values.push(entry)\n  }\n  return { ok: true, values }\n}\n\n/**\n * `contributes.site.functionBindings`, validated against the components the\n * same block declares: a binding on an element the plugin does not register\n * would hand a function's definition, and the variable values it reads, to\n * whichever element happens to own that id.\n */\nfunction functionBindingMap(\n  value: unknown,\n  components: readonly string[],\n): { ok: true; value: Record<string, string> } | { ok: false; error: string } {\n  const where = 'contributes.site.functionBindings'\n  if (!isPlainObject(value)) {\n    return { ok: false, error: `${where} must be an object` }\n  }\n  const entries = Object.entries(value)\n  if (entries.length > PLUGIN_MAX_CONTRIBUTIONS) {\n    return { ok: false, error: `${where} lists more than ${PLUGIN_MAX_CONTRIBUTIONS}` }\n  }\n  const out: Record<string, string> = {}\n  for (const [componentId, prop] of entries) {\n    if (!components.includes(componentId)) {\n      return {\n        ok: false,\n        error: `${where} names \"${componentId}\", which contributes.site.components does not declare`,\n      }\n    }\n    if (typeof prop !== 'string' || !BINDING_PROP.test(prop)) {\n      return {\n        ok: false,\n        error: `${where}.${componentId} must name a prop, not \"${String(prop)}\"`,\n      }\n    }\n    out[componentId] = prop\n  }\n  return { ok: true, value: out }\n}\n\n/**\n * A declared `contributes` block as a loader may trust it: the sanitized\n * block, or `undefined` for one that is absent or does not validate.\n *\n * Loaders read this from stored documents (a pinned version's manifest), and\n * a malformed stored block is treated as UNDECLARED — the default applies —\n * never as \"contributes nothing\", which would stop a plugin that is in use.\n */\nexport function readPluginContributions(\n  input: unknown,\n): PluginContributions | undefined {\n  if (input === undefined || input === null) return undefined\n  const verdict = sanitizePluginContributions(input)\n  return verdict.ok ? verdict.contributions : undefined\n}\n\n/**\n * What the surface a plugin is being registered into actually uses\n * (AGL-3141).\n *\n * The loaders carry this from the surface that computed it to each plugin's\n * register function, unchanged. A plugin that can register a part of itself\n * reads it; one that cannot ignores it, and the platform's behavior is the\n * same either way.\n *\n * An absent field means \"everything of that kind\". A surface that cannot say\n * what it uses must be handed all of it, because an element the surface\n * places and the set omits has no registered component and renders NOTHING,\n * silently (the blank-canvas invariant, AGL-52). Narrowing is an optimization\n * and must fail toward the whole.\n */\nexport interface PluginUse {\n  /**\n   * Canvas component ids the surface places, read from the FULL composed\n   * document the way `pagePresence` reads it — withheld lazy-panel subtrees\n   * included, because an element inside a panel the visitor opens later is\n   * still this page's element.\n   */\n  componentIds?: readonly string[]\n}\n\n/** A node as presence reads it: the two ids a placed element carries. */\nexport interface PresenceNode {\n  componentId?: string\n  pluginId?: string\n}\n\n/** What a published page places: its component ids and the plugin ids stamped on its nodes. */\nexport interface PagePresence {\n  componentIds: ReadonlySet<string>\n  pluginIds: ReadonlySet<string>\n}\n\n/**\n * The component ids and plugin ids a node tree places.\n *\n * Read from the FULL composed document — layouts, grafted reusable\n * components and withheld lazy panels included — because an element inside\n * a panel the visitor opens later is still this page's element.\n */\nexport function pagePresence(\n  nodes: Record<string, PresenceNode | null | undefined> | null | undefined,\n): PagePresence {\n  const componentIds = new Set<string>()\n  const pluginIds = new Set<string>()\n  for (const node of Object.values(nodes ?? {})) {\n    if (typeof node?.componentId === 'string' && node.componentId) {\n      componentIds.add(node.componentId)\n    }\n    if (typeof node?.pluginId === 'string' && node.pluginId) {\n      pluginIds.add(node.pluginId)\n    }\n  }\n  return { componentIds, pluginIds }\n}\n\n/** A plugin as the presence rules see it. */\nexport interface PresenceSubject {\n  /** The plugin's own id (a manifest `id`, or a first-party catalog id). */\n  pluginId?: string\n  /** A marketplace plugin's listing id, which its elements may carry instead. */\n  listingId?: string\n  /**\n   * A marketplace plugin's identity, `<publisher handle>.<manifest id>`\n   * (AGL-3390): the `pluginId` its namespaced elements carry.\n   */\n  identity?: string\n  /** Its declaration; `undefined` when it declares nothing. */\n  contributes?: PluginContributions\n}\n\n/**\n * Whether a published page uses a plugin, so the page must load it.\n *\n * - An element of it is placed: a node stamped with the plugin's id, or,\n *   for a declared plugin, a node whose component id it declares.\n * - It declares a site feature. The caller only asks about plugins the site\n *   has switched on, and a feature runs on every page of such a site.\n *\n * A plugin that declares nothing is present only through its stamped\n * elements — the default in the module note.\n */\nexport function isPluginUsedOnPage(\n  subject: PresenceSubject,\n  page: PagePresence,\n): boolean {\n  if (subject.pluginId && page.pluginIds.has(subject.pluginId)) return true\n  if (subject.listingId && page.pluginIds.has(subject.listingId)) return true\n  if (subject.identity && page.pluginIds.has(subject.identity)) return true\n  const site = subject.contributes?.site\n  if (!site) return false\n  if (site.features?.length) return true\n  return (site.components ?? []).some((id) => page.componentIds.has(id))\n}\n\n/**\n * Whether a plugin declares anything a site draws: an element an author can\n * place, or a feature that runs on the site's pages. The editor loads exactly\n * these (AGL-3391). A plugin that declares nothing is not among them: its\n * site half is only discoverable by running `register()`, and the console\n * shell already does that for it.\n */\nexport function declaresSiteElements(\n  contributes: PluginContributions | undefined,\n): boolean {\n  const site = contributes?.site\n  return Boolean(site?.components?.length || site?.features?.length)\n}\n\n/**\n * Every id a plugin's elements and presets may carry as their `pluginId`: its\n * own id and, for a marketplace plugin, its listing id and its identity. A\n * surface that filters registry entries by plugin set needs all of them, or it\n * hides the elements of a plugin it just loaded.\n */\nexport function presenceIds(subject: PresenceSubject): string[] {\n  const ids: string[] = []\n  for (const id of [subject.identity, subject.pluginId, subject.listingId]) {\n    if (id && !ids.includes(id)) ids.push(id)\n  }\n  return ids\n}\n\n/**\n * Function bindings (AGL-3393): component id → the prop naming the site\n * function that element runs.\n */\nexport type FunctionBindings = Readonly<Record<string, string>>\n\n/**\n * The function bindings a set of plugins declares, merged into one map.\n *\n * Where two plugins bind the same component id the FIRST one listed wins, so a\n * caller that passes first-party declarations ahead of marketplace ones keeps\n * a marketplace manifest from rebinding a first-party element. Marketplace ids\n * are namespaced by their publisher (see {@link isNamespacedComponentId}), so\n * a collision is a mistake, never a feature.\n */\nexport function mergeFunctionBindings(\n  ...sources: ReadonlyArray<\n    FunctionBindings | { contributes?: PluginContributions } | null | undefined\n  >\n): FunctionBindings {\n  const merged: Record<string, string> = {}\n  for (const source of sources) {\n    if (!source) continue\n    const declared: FunctionBindings | undefined =\n      'contributes' in source\n        ? (source.contributes as PluginContributions | undefined)?.site\n            ?.functionBindings\n        : (source as FunctionBindings)\n    for (const [componentId, prop] of Object.entries(declared ?? {})) {\n      if (typeof prop !== 'string') continue\n      if (!Object.prototype.hasOwnProperty.call(merged, componentId)) {\n        merged[componentId] = prop\n      }\n    }\n  }\n  return merged\n}\n\n/**\n * Whether a component id belongs to a marketplace plugin's namespace\n * (AGL-3387): `<publisher handle>.<plugin id>.<role>`. A `.` is reserved for\n * those ids — no first-party component carries one, which the manifest\n * generator enforces — so compose can tell, without loading anything, that a\n * tree places an element only an installed plugin can declare.\n */\nexport function isNamespacedComponentId(componentId: unknown): boolean {\n  return typeof componentId === 'string' && componentId.includes('.')\n}\n\n/**\n * Where a plugin's console code loads, resolved with the default applied: a\n * plugin that declares nothing loads with the shell, as it always did.\n */\nexport interface ConsoleLoadPoints {\n  shell: boolean\n  slots: readonly string[]\n  routes: readonly string[]\n  orgRoutes: readonly string[]\n}\n\nexport function consoleLoadPoints(\n  contributes: PluginContributions | undefined,\n): ConsoleLoadPoints {\n  if (!contributes) return { shell: true, slots: [], routes: [], orgRoutes: [] }\n  const declared = contributes.console ?? {}\n  return {\n    shell: Boolean(declared.shell),\n    slots: declared.slots ?? [],\n    routes: declared.routes ?? [],\n    orgRoutes: declared.orgRoutes ?? [],\n  }\n}\n\n/**\n * Whether a declared route serves `href`: the route itself, or a path beneath\n * it on a segment boundary, the way the shell's page resolver matches a nav\n * item that owns its subtree. `/products` serves `/products/orders` and never\n * `/products-archive`.\n */\nexport function routeServes(route: string, href: string): boolean {\n  return href === route || href.startsWith(`${route}/`)\n}\n\n/**\n * A place in the console that loads plugins, as the surface drawing it names\n * itself (AGL-3142).\n *\n * - `shell`: the workspace chrome every screen has. It draws whatever a\n *   plugin adds to every screen — a nav tab, an organization tab, a staff\n *   tab, a provider — so a plugin that declares any of those loads here, and\n *   so does one that declares nothing at all.\n * - `slots`: the zones a screen renders. The zones it names, not the plugins\n *   it expects in them: a screen must never hold a plugin id.\n * - `route`: the path the reader has open, plugin-relative (`/products`,\n *   `/products/orders`), on the level its route tree serves — `site` beneath\n *   `/hosts/[host]`, `org` beneath the organization.\n * - `editor`: the Besigner, which draws a site's elements and offers them in\n *   its Elements panel (AGL-3391). A plugin loads here when it declares site\n *   elements or site features, whether or not the page open uses them, since\n *   the author is choosing what to place.\n */\nexport type ConsoleLoadWhere =\n  | { at: 'shell' }\n  | { at: 'slots'; slots: readonly string[] }\n  | { at: 'route'; href: string; level: 'site' | 'org' }\n  | { at: 'editor' }\n\n/**\n * Whether a console surface uses a plugin, so it must load it.\n *\n * The console twin of {@link isPluginUsedOnPage}, and the same rule: a\n * declaration says where a plugin's code belongs, and the surface that draws\n * that place is the one that fetches it. A screen asks about the zones it\n * renders and the path it serves; it never asks about a plugin by name.\n *\n * A plugin that declares nothing loads with the shell — the default in the\n * module note, and the reason the shell branch reads\n * {@link consoleLoadPoints} rather than the raw block. Its nav tab or its\n * provider is only discoverable by running `register()`, so narrowing it\n * anywhere else would take a tab away with no way to notice.\n */\nexport function isPluginUsedInConsole(\n  contributes: PluginContributions | undefined,\n  where: ConsoleLoadWhere,\n): boolean {\n  if (where.at === 'editor') return declaresSiteElements(contributes)\n  const points = consoleLoadPoints(contributes)\n  if (where.at === 'shell') return points.shell\n  if (where.at === 'slots') {\n    return points.slots.some((slot) => where.slots.includes(slot))\n  }\n  const routes = where.level === 'org' ? points.orgRoutes : points.routes\n  return routes.some((route) => routeServes(route, where.href))\n}\n"],"names":["PLUGIN_MAX_CONTRIBUTIONS","CONTRIBUTION_ID","CONTRIBUTION_ROUTE","BINDING_PROP","sanitizePluginContributions","input","isPlainObject","ok","error","out","key","Object","keys","undefined","site","next","list","idList","values","length","bindings","functionBindingMap","components","value","functionBindings","consoleInput","shell","console","contributions","Boolean","Array","isArray","where","pattern","entry","test","String","includes","push","entries","componentId","prop","readPluginContributions","verdict","pagePresence","nodes","componentIds","Set","pluginIds","node","add","pluginId","isPluginUsedOnPage","subject","page","has","listingId","identity","contributes","features","some","id","declaresSiteElements","presenceIds","ids","mergeFunctionBindings","sources","merged","source","declared","prototype","hasOwnProperty","call","isNamespacedComponentId","consoleLoadPoints","slots","routes","orgRoutes","routeServes","route","href","startsWith","isPluginUsedInConsole","at","points","slot","level"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAoCC,GAED,4CAA4C,GAuD5C,6EAA6E,GAC7E,OAAO,MAAMA,2BAA2B,IAAG;AAE3C;;;CAGC,GACD,MAAMC,kBAAkB;AAExB;;;CAGC,GACD,MAAMC,qBAAqB;AAE3B,iEAAiE,GACjE,MAAMC,eAAe;AAMrB;;;;;;;;;;;CAWC,GACD,OAAO,SAASC,4BAA4BC,KAAc;IACxD,IAAI,CAACC,cAAcD,QAAQ;QACzB,OAAO;YAAEE,IAAI;YAAOC,OAAO;QAAgC;IAC7D;IACA,MAAMC,MAA2B,CAAC;IAClC,KAAK,MAAMC,OAAOC,OAAOC,IAAI,CAACP,OAAQ;QACpC,IAAIK,QAAQ,UAAUA,QAAQ,WAAW;YACvC,OAAO;gBAAEH,IAAI;gBAAOC,OAAO,CAAC,YAAY,EAAEE,IAAI,uBAAuB,CAAC;YAAC;QACzE;IACF;IAEA,IAAIL,KAAK,CAAC,OAAO,KAAKQ,WAAW;QAC/B,MAAMC,OAAOT,KAAK,CAAC,OAAO;QAC1B,IAAI,CAACC,cAAcQ,OAAO;YACxB,OAAO;gBAAEP,IAAI;gBAAOC,OAAO;YAAqC;QAClE;QACA,MAAMO,OAAgC,CAAC;QACvC,KAAK,MAAML,OAAOC,OAAOC,IAAI,CAACE,MAAO;YACnC,IAAIJ,QAAQ,oBAAoB;YAChC,IAAIA,QAAQ,gBAAgBA,QAAQ,YAAY;gBAC9C,OAAO;oBAAEH,IAAI;oBAAOC,OAAO,CAAC,iBAAiB,EAAEE,IAAI,4BAA4B,CAAC;gBAAC;YACnF;YACA,MAAMM,OAAOC,OAAOH,IAAI,CAACJ,IAAI,EAAE,CAAC,iBAAiB,EAAEA,KAAK,EAAET;YAC1D,IAAIe,KAAKT,EAAE,KAAK,OAAO,OAAO;gBAAEA,IAAI;gBAAOC,OAAOQ,KAAKR,KAAK;YAAC;YAC7D,IAAIQ,KAAKE,MAAM,CAACC,MAAM,EAAEJ,IAAI,CAACL,IAAI,GAAGM,KAAKE,MAAM;QACjD;QACA,IAAIJ,IAAI,CAAC,mBAAmB,KAAKD,WAAW;gBAGxCE;YAFF,MAAMK,WAAWC,mBACfP,IAAI,CAAC,mBAAmB,GACxBC,mBAAAA,KAAKO,UAAU,YAAfP,mBAAmB,EAAE;YAEvB,IAAIK,SAASb,EAAE,KAAK,OAAO,OAAO;gBAAEA,IAAI;gBAAOC,OAAOY,SAASZ,KAAK;YAAC;YACrE,IAAIG,OAAOC,IAAI,CAACQ,SAASG,KAAK,EAAEJ,MAAM,EAAE;gBACtCJ,KAAKS,gBAAgB,GAAGJ,SAASG,KAAK;YACxC;QACF;QACA,IAAIZ,OAAOC,IAAI,CAACG,MAAMI,MAAM,EAAEV,IAAIK,IAAI,GAAGC;IAC3C;IAEA,IAAIV,KAAK,CAAC,UAAU,KAAKQ,WAAW;QAClC,MAAMY,eAAepB,KAAK,CAAC,UAAU;QACrC,IAAI,CAACC,cAAcmB,eAAe;YAChC,OAAO;gBAAElB,IAAI;gBAAOC,OAAO;YAAwC;QACrE;QACA,MAAMO,OAAmC,CAAC;QAC1C,KAAK,MAAML,OAAOC,OAAOC,IAAI,CAACa,cAAe;YAC3C,IAAIf,QAAQ,SAAS;gBACnB,IAAI,OAAOe,YAAY,CAAC,QAAQ,KAAK,WAAW;oBAC9C,OAAO;wBAAElB,IAAI;wBAAOC,OAAO;oBAAkD;gBAC/E;gBACA,IAAIiB,YAAY,CAAC,QAAQ,EAAEV,KAAKW,KAAK,GAAG;gBACxC;YACF;YACA,IAAIhB,QAAQ,WAAWA,QAAQ,YAAYA,QAAQ,aAAa;gBAC9D,OAAO;oBACLH,IAAI;oBACJC,OAAO,CAAC,oBAAoB,EAAEE,IAAI,4BAA4B,CAAC;gBACjE;YACF;YACA,MAAMM,OAAOC,OACXQ,YAAY,CAACf,IAAI,EACjB,CAAC,oBAAoB,EAAEA,KAAK,EAC5BA,QAAQ,UAAUT,kBAAkBC;YAEtC,IAAIc,KAAKT,EAAE,KAAK,OAAO,OAAO;gBAAEA,IAAI;gBAAOC,OAAOQ,KAAKR,KAAK;YAAC;YAC7D,IAAIQ,KAAKE,MAAM,CAACC,MAAM,EAAEJ,IAAI,CAACL,IAAI,GAAGM,KAAKE,MAAM;QACjD;QACA,IAAIP,OAAOC,IAAI,CAACG,MAAMI,MAAM,EAAEV,IAAIkB,OAAO,GAAGZ;IAC9C;IAEA,OAAO;QAAER,IAAI;QAAMqB,eAAenB;IAAI;AACxC;AAEA,SAASH,cAAciB,KAAc;IACnC,OAAOM,QAAQN,UAAU,OAAOA,UAAU,YAAY,CAACO,MAAMC,OAAO,CAACR;AACvE;AAEA,SAASN,OACPM,KAAc,EACdS,KAAa,EACbC,OAAe;IAEf,IAAI,CAACH,MAAMC,OAAO,CAACR,QAAQ,OAAO;QAAEhB,IAAI;QAAOC,OAAO,GAAGwB,MAAM,eAAe,CAAC;IAAC;IAChF,IAAIT,MAAMJ,MAAM,GAAGnB,0BAA0B;QAC3C,OAAO;YAAEO,IAAI;YAAOC,OAAO,GAAGwB,MAAM,iBAAiB,EAAEhC,0BAA0B;QAAC;IACpF;IACA,MAAMkB,SAAmB,EAAE;IAC3B,KAAK,MAAMgB,SAASX,MAAO;QACzB,IAAI,OAAOW,UAAU,YAAY,CAACD,QAAQE,IAAI,CAACD,QAAQ;YACrD,OAAO;gBAAE3B,IAAI;gBAAOC,OAAO,GAAGwB,MAAM,uBAAuB,EAAEI,OAAOF,OAAO,CAAC,CAAC;YAAC;QAChF;QACA,IAAI,CAAChB,OAAOmB,QAAQ,CAACH,QAAQhB,OAAOoB,IAAI,CAACJ;IAC3C;IACA,OAAO;QAAE3B,IAAI;QAAMW;IAAO;AAC5B;AAEA;;;;;CAKC,GACD,SAASG,mBACPE,KAAc,EACdD,UAA6B;IAE7B,MAAMU,QAAQ;IACd,IAAI,CAAC1B,cAAciB,QAAQ;QACzB,OAAO;YAAEhB,IAAI;YAAOC,OAAO,GAAGwB,MAAM,kBAAkB,CAAC;QAAC;IAC1D;IACA,MAAMO,UAAU5B,OAAO4B,OAAO,CAAChB;IAC/B,IAAIgB,QAAQpB,MAAM,GAAGnB,0BAA0B;QAC7C,OAAO;YAAEO,IAAI;YAAOC,OAAO,GAAGwB,MAAM,iBAAiB,EAAEhC,0BAA0B;QAAC;IACpF;IACA,MAAMS,MAA8B,CAAC;IACrC,KAAK,MAAM,CAAC+B,aAAaC,KAAK,IAAIF,QAAS;QACzC,IAAI,CAACjB,WAAWe,QAAQ,CAACG,cAAc;YACrC,OAAO;gBACLjC,IAAI;gBACJC,OAAO,GAAGwB,MAAM,QAAQ,EAAEQ,YAAY,qDAAqD,CAAC;YAC9F;QACF;QACA,IAAI,OAAOC,SAAS,YAAY,CAACtC,aAAagC,IAAI,CAACM,OAAO;YACxD,OAAO;gBACLlC,IAAI;gBACJC,OAAO,GAAGwB,MAAM,CAAC,EAAEQ,YAAY,wBAAwB,EAAEJ,OAAOK,MAAM,CAAC,CAAC;YAC1E;QACF;QACAhC,GAAG,CAAC+B,YAAY,GAAGC;IACrB;IACA,OAAO;QAAElC,IAAI;QAAMgB,OAAOd;IAAI;AAChC;AAEA;;;;;;;CAOC,GACD,OAAO,SAASiC,wBACdrC,KAAc;IAEd,IAAIA,UAAUQ,aAAaR,UAAU,MAAM,OAAOQ;IAClD,MAAM8B,UAAUvC,4BAA4BC;IAC5C,OAAOsC,QAAQpC,EAAE,GAAGoC,QAAQf,aAAa,GAAGf;AAC9C;AAuCA;;;;;;CAMC,GACD,OAAO,SAAS+B,aACdC,KAAyE;IAEzE,MAAMC,eAAe,IAAIC;IACzB,MAAMC,YAAY,IAAID;IACtB,KAAK,MAAME,QAAQtC,OAAOO,MAAM,CAAC2B,gBAAAA,QAAS,CAAC,GAAI;QAC7C,IAAI,QAAOI,wBAAAA,KAAMT,WAAW,MAAK,YAAYS,KAAKT,WAAW,EAAE;YAC7DM,aAAaI,GAAG,CAACD,KAAKT,WAAW;QACnC;QACA,IAAI,QAAOS,wBAAAA,KAAME,QAAQ,MAAK,YAAYF,KAAKE,QAAQ,EAAE;YACvDH,UAAUE,GAAG,CAACD,KAAKE,QAAQ;QAC7B;IACF;IACA,OAAO;QAAEL;QAAcE;IAAU;AACnC;AAiBA;;;;;;;;;;CAUC,GACD,OAAO,SAASI,mBACdC,OAAwB,EACxBC,IAAkB;QAQVxC;QAHKuC,sBAETvC;IALJ,IAAIuC,QAAQF,QAAQ,IAAIG,KAAKN,SAAS,CAACO,GAAG,CAACF,QAAQF,QAAQ,GAAG,OAAO;IACrE,IAAIE,QAAQG,SAAS,IAAIF,KAAKN,SAAS,CAACO,GAAG,CAACF,QAAQG,SAAS,GAAG,OAAO;IACvE,IAAIH,QAAQI,QAAQ,IAAIH,KAAKN,SAAS,CAACO,GAAG,CAACF,QAAQI,QAAQ,GAAG,OAAO;IACrE,MAAM3C,QAAOuC,uBAAAA,QAAQK,WAAW,qBAAnBL,qBAAqBvC,IAAI;IACtC,IAAI,CAACA,MAAM,OAAO;IAClB,KAAIA,iBAAAA,KAAK6C,QAAQ,qBAAb7C,eAAeK,MAAM,EAAE,OAAO;IAClC,OAAO,EAACL,mBAAAA,KAAKQ,UAAU,YAAfR,mBAAmB,EAAE,EAAE8C,IAAI,CAAC,CAACC,KAAOP,KAAKR,YAAY,CAACS,GAAG,CAACM;AACpE;AAEA;;;;;;CAMC,GACD,OAAO,SAASC,qBACdJ,WAA4C;QAG7B5C,kBAA4BA;IAD3C,MAAMA,OAAO4C,+BAAAA,YAAa5C,IAAI;IAC9B,OAAOe,QAAQf,CAAAA,yBAAAA,mBAAAA,KAAMQ,UAAU,qBAAhBR,iBAAkBK,MAAM,MAAIL,yBAAAA,iBAAAA,KAAM6C,QAAQ,qBAAd7C,eAAgBK,MAAM;AACnE;AAEA;;;;;CAKC,GACD,OAAO,SAAS4C,YAAYV,OAAwB;IAClD,MAAMW,MAAgB,EAAE;IACxB,KAAK,MAAMH,MAAM;QAACR,QAAQI,QAAQ;QAAEJ,QAAQF,QAAQ;QAAEE,QAAQG,SAAS;KAAC,CAAE;QACxE,IAAIK,MAAM,CAACG,IAAI3B,QAAQ,CAACwB,KAAKG,IAAI1B,IAAI,CAACuB;IACxC;IACA,OAAOG;AACT;AAQA;;;;;;;;CAQC,GACD,OAAO,SAASC,sBACd,GAAGC,OAEF;IAED,MAAMC,SAAiC,CAAC;IACxC,KAAK,MAAMC,UAAUF,QAAS;YAItB,0BAACE;QAHP,IAAI,CAACA,QAAQ;QACb,MAAMC,WACJ,iBAAiBD,UACZA,sBAAAA,OAAOV,WAAW,sBAAnB,2BAAA,AAACU,oBAAwDtD,IAAI,qBAA7D,yBACIU,gBAAgB,GACnB4C;QACP,KAAK,MAAM,CAAC5B,aAAaC,KAAK,IAAI9B,OAAO4B,OAAO,CAAC8B,mBAAAA,WAAY,CAAC,GAAI;YAChE,IAAI,OAAO5B,SAAS,UAAU;YAC9B,IAAI,CAAC9B,OAAO2D,SAAS,CAACC,cAAc,CAACC,IAAI,CAACL,QAAQ3B,cAAc;gBAC9D2B,MAAM,CAAC3B,YAAY,GAAGC;YACxB;QACF;IACF;IACA,OAAO0B;AACT;AAEA;;;;;;CAMC,GACD,OAAO,SAASM,wBAAwBjC,WAAoB;IAC1D,OAAO,OAAOA,gBAAgB,YAAYA,YAAYH,QAAQ,CAAC;AACjE;AAaA,OAAO,SAASqC,kBACdhB,WAA4C;QAG3BA,sBAGRW,iBACCA,kBACGA;IANb,IAAI,CAACX,aAAa,OAAO;QAAEhC,OAAO;QAAMiD,OAAO,EAAE;QAAEC,QAAQ,EAAE;QAAEC,WAAW,EAAE;IAAC;IAC7E,MAAMR,YAAWX,uBAAAA,YAAY/B,OAAO,YAAnB+B,uBAAuB,CAAC;IACzC,OAAO;QACLhC,OAAOG,QAAQwC,SAAS3C,KAAK;QAC7BiD,KAAK,GAAEN,kBAAAA,SAASM,KAAK,YAAdN,kBAAkB,EAAE;QAC3BO,MAAM,GAAEP,mBAAAA,SAASO,MAAM,YAAfP,mBAAmB,EAAE;QAC7BQ,SAAS,GAAER,sBAAAA,SAASQ,SAAS,YAAlBR,sBAAsB,EAAE;IACrC;AACF;AAEA;;;;;CAKC,GACD,OAAO,SAASS,YAAYC,KAAa,EAAEC,IAAY;IACrD,OAAOA,SAASD,SAASC,KAAKC,UAAU,CAAC,GAAGF,MAAM,CAAC,CAAC;AACtD;AA0BA;;;;;;;;;;;;;CAaC,GACD,OAAO,SAASG,sBACdxB,WAA4C,EAC5C1B,KAAuB;IAEvB,IAAIA,MAAMmD,EAAE,KAAK,UAAU,OAAOrB,qBAAqBJ;IACvD,MAAM0B,SAASV,kBAAkBhB;IACjC,IAAI1B,MAAMmD,EAAE,KAAK,SAAS,OAAOC,OAAO1D,KAAK;IAC7C,IAAIM,MAAMmD,EAAE,KAAK,SAAS;QACxB,OAAOC,OAAOT,KAAK,CAACf,IAAI,CAAC,CAACyB,OAASrD,MAAM2C,KAAK,CAACtC,QAAQ,CAACgD;IAC1D;IACA,MAAMT,SAAS5C,MAAMsD,KAAK,KAAK,QAAQF,OAAOP,SAAS,GAAGO,OAAOR,MAAM;IACvE,OAAOA,OAAOhB,IAAI,CAAC,CAACmB,QAAUD,YAAYC,OAAO/C,MAAMgD,IAAI;AAC7D"}
+{"version":3,"sources":["../../../../../../libs/aglyn/src/lib/plugin-manager/plugin-contributions.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n/**\n * What a plugin contributes, and where (AGL-3116).\n *\n * A plugin loads only where something uses it. Installing one loads nothing:\n * a published page fetches a plugin's code when the page places one of its\n * elements or the site runs one of its features, and a console screen\n * fetches it when the screen renders one of its slots or routes, or when the\n * plugin draws something the shell renders on every screen.\n *\n * The loaders cannot learn that by running a plugin, because running it is\n * the cost being avoided. So each plugin DECLARES its contributions:\n * first-party plugins in `plugins.config.json`, marketplace plugins in the\n * manifest they publish (`contributes`). The declaration is the whole of what\n * a loader reads, and it is data: this module is dependency-free so the\n * server, both apps, the verifier and the build tools share one reading.\n *\n * A declared surface only narrows where to look. Presence is the rule: a\n * plugin that declares a component loads on the pages that place it, not on\n * every page of the site that installed it.\n *\n * ## A plugin that declares nothing\n *\n * Every marketplace version published before this contract has no\n * `contributes`. Such a plugin keeps working under one default:\n *\n * - **On a published page it loads only where its element is placed**: a\n *   node whose `pluginId` names the plugin (its manifest id or its listing\n *   id). That is the one presence signal a page carries without running the\n *   bundle, and it is the only way a page can show an element the plugin\n *   registers. A site runtime of an undeclared plugin does not load, and the\n *   publish pipeline refuses a bundle that registers one without declaring\n *   it, so the only plugins this default governs are the ones already\n *   published.\n * - **In the console it loads with the workspace shell**, as it always did,\n *   because a nav tab or a provider is only discoverable by running\n *   `register()`. Nothing on a published page depends on this.\n */\n\n/** What a plugin adds to a published site. */\nexport interface PluginSiteContributions {\n  /**\n   * Canvas component ids the plugin registers: the elements a page places. A\n   * published page loads the plugin only when its node tree places one.\n   */\n  components?: string[]\n  /**\n   * Site features: runtimes the plugin mounts on every page of a site that\n   * switched it on (an announcement bar, an experiment runner), named by the\n   * `runtimeId` it registers. A plugin with a feature loads on every page of\n   * such a site, which is what a feature is.\n   */\n  features?: string[]\n  /**\n   * The elements that run a site function in the visitor's browser (AGL-3393),\n   * each keyed by its component id and naming the prop that holds the\n   * function's name. Compose hands such a node the function's definition and\n   * the site variables it reads; no other node is given either.\n   *\n   * Declared DATA rather than read off a registered schema: compose runs where\n   * no plugin code loads — the tenant's server components — so the only thing\n   * it can consult is a declaration. A first-party plugin declares it in\n   * `plugins.config.json`, a marketplace plugin in its manifest, and both reach\n   * compose as the same map. Every key must also be one of `components`.\n   */\n  functionBindings?: Record<string, string>\n}\n\n/** What a plugin adds to the console. */\nexport interface PluginConsoleContributions {\n  /**\n   * The widget slots its widgets fill: the `CONSOLE_WIDGET_SLOTS` zones, the\n   * panels the shell draws as slots (the console dock `consoleDock`, the\n   * besigner's `besignerInspector`), and zones another plugin hosts. A screen\n   * that renders one of them loads the plugin.\n   */\n  slots?: string[]\n  /** Site-level console routes it serves (`/forms`), beneath `/hosts/[host]`. */\n  routes?: string[]\n  /** Organization-level console routes it serves (`/outreach`). */\n  orgRoutes?: string[]\n  /**\n   * The shell draws something of it on every screen of a workspace: a nav\n   * tab, an organization tab, a staff tab or a provider. Such a plugin loads\n   * with the shell, because every screen renders it.\n   */\n  shell?: boolean\n}\n\nexport interface PluginContributions {\n  site?: PluginSiteContributions\n  console?: PluginConsoleContributions\n}\n\n/** Bound on each declared list, so a manifest cannot hand a loader a novel. */\nexport const PLUGIN_MAX_CONTRIBUTIONS = 128\n\n/**\n * A component, feature or slot id: an identifier with the separators ids in\n * the platform use (`muiTypography`, `marketplacePlugin`, `ai.assist`).\n */\nconst CONTRIBUTION_ID = /^[A-Za-z_][A-Za-z0-9_.:-]{0,79}$/\n\n/**\n * A console route: one or more path segments, as a nav item's `href` names\n * them. Never a URL, never `..`.\n */\nconst CONTRIBUTION_ROUTE = /^(\\/[A-Za-z0-9_-]+){1,8}$/\n\n/** A prop name a function binding may name: a plain identifier. */\nconst BINDING_PROP = /^[A-Za-z_$][A-Za-z0-9_$]{0,63}$/\n\ntype Sanitized =\n  | { ok: true; contributions: PluginContributions }\n  | { ok: false; error: string }\n\n/**\n * Validates a declared `contributes` block.\n *\n * Malformed input is REFUSED rather than trimmed: a loader reads this to\n * decide where a plugin runs, so a declaration that silently lost an entry\n * would stop the plugin loading where it is used, and nobody would see why.\n * Duplicates are collapsed and empty lists dropped, because neither changes\n * what the declaration means.\n *\n * `{}` is valid and means \"contributes nothing anywhere\", which is a\n * different statement from an absent block (see the module note).\n */\nexport function sanitizePluginContributions(input: unknown): Sanitized {\n  if (!isPlainObject(input)) {\n    return { ok: false, error: 'contributes must be an object' }\n  }\n  const out: PluginContributions = {}\n  for (const key of Object.keys(input)) {\n    if (key !== 'site' && key !== 'console') {\n      return { ok: false, error: `contributes.${key} is not a known surface` }\n    }\n  }\n\n  if (input['site'] !== undefined) {\n    const site = input['site']\n    if (!isPlainObject(site)) {\n      return { ok: false, error: 'contributes.site must be an object' }\n    }\n    const next: PluginSiteContributions = {}\n    for (const key of Object.keys(site)) {\n      if (key === 'functionBindings') continue\n      if (key !== 'components' && key !== 'features') {\n        return { ok: false, error: `contributes.site.${key} is not a known contribution` }\n      }\n      const list = idList(site[key], `contributes.site.${key}`, CONTRIBUTION_ID)\n      if (list.ok === false) return { ok: false, error: list.error }\n      if (list.values.length) next[key] = list.values\n    }\n    if (site['functionBindings'] !== undefined) {\n      const bindings = functionBindingMap(\n        site['functionBindings'],\n        next.components ?? [],\n      )\n      if (bindings.ok === false) return { ok: false, error: bindings.error }\n      if (Object.keys(bindings.value).length) {\n        next.functionBindings = bindings.value\n      }\n    }\n    if (Object.keys(next).length) out.site = next\n  }\n\n  if (input['console'] !== undefined) {\n    const consoleInput = input['console']\n    if (!isPlainObject(consoleInput)) {\n      return { ok: false, error: 'contributes.console must be an object' }\n    }\n    const next: PluginConsoleContributions = {}\n    for (const key of Object.keys(consoleInput)) {\n      if (key === 'shell') {\n        if (typeof consoleInput['shell'] !== 'boolean') {\n          return { ok: false, error: 'contributes.console.shell must be true or false' }\n        }\n        if (consoleInput['shell']) next.shell = true\n        continue\n      }\n      if (key !== 'slots' && key !== 'routes' && key !== 'orgRoutes') {\n        return {\n          ok: false,\n          error: `contributes.console.${key} is not a known contribution`,\n        }\n      }\n      const list = idList(\n        consoleInput[key],\n        `contributes.console.${key}`,\n        key === 'slots' ? CONTRIBUTION_ID : CONTRIBUTION_ROUTE,\n      )\n      if (list.ok === false) return { ok: false, error: list.error }\n      if (list.values.length) next[key] = list.values\n    }\n    if (Object.keys(next).length) out.console = next\n  }\n\n  return { ok: true, contributions: out }\n}\n\nfunction isPlainObject(value: unknown): value is Record<string, unknown> {\n  return Boolean(value) && typeof value === 'object' && !Array.isArray(value)\n}\n\nfunction idList(\n  value: unknown,\n  where: string,\n  pattern: RegExp,\n): { ok: true; values: string[] } | { ok: false; error: string } {\n  if (!Array.isArray(value)) return { ok: false, error: `${where} must be a list` }\n  if (value.length > PLUGIN_MAX_CONTRIBUTIONS) {\n    return { ok: false, error: `${where} lists more than ${PLUGIN_MAX_CONTRIBUTIONS}` }\n  }\n  const values: string[] = []\n  for (const entry of value) {\n    if (typeof entry !== 'string' || !pattern.test(entry)) {\n      return { ok: false, error: `${where} has an invalid entry \"${String(entry)}\"` }\n    }\n    if (!values.includes(entry)) values.push(entry)\n  }\n  return { ok: true, values }\n}\n\n/**\n * `contributes.site.functionBindings`, validated against the components the\n * same block declares: a binding on an element the plugin does not register\n * would hand a function's definition, and the variable values it reads, to\n * whichever element happens to own that id.\n */\nfunction functionBindingMap(\n  value: unknown,\n  components: readonly string[],\n): { ok: true; value: Record<string, string> } | { ok: false; error: string } {\n  const where = 'contributes.site.functionBindings'\n  if (!isPlainObject(value)) {\n    return { ok: false, error: `${where} must be an object` }\n  }\n  const entries = Object.entries(value)\n  if (entries.length > PLUGIN_MAX_CONTRIBUTIONS) {\n    return { ok: false, error: `${where} lists more than ${PLUGIN_MAX_CONTRIBUTIONS}` }\n  }\n  const out: Record<string, string> = {}\n  for (const [componentId, prop] of entries) {\n    if (!components.includes(componentId)) {\n      return {\n        ok: false,\n        error: `${where} names \"${componentId}\", which contributes.site.components does not declare`,\n      }\n    }\n    if (typeof prop !== 'string' || !BINDING_PROP.test(prop)) {\n      return {\n        ok: false,\n        error: `${where}.${componentId} must name a prop, not \"${String(prop)}\"`,\n      }\n    }\n    out[componentId] = prop\n  }\n  return { ok: true, value: out }\n}\n\n/**\n * A declared `contributes` block as a loader may trust it: the sanitized\n * block, or `undefined` for one that is absent or does not validate.\n *\n * Loaders read this from stored documents (a pinned version's manifest), and\n * a malformed stored block is treated as UNDECLARED — the default applies —\n * never as \"contributes nothing\", which would stop a plugin that is in use.\n */\nexport function readPluginContributions(\n  input: unknown,\n): PluginContributions | undefined {\n  if (input === undefined || input === null) return undefined\n  const verdict = sanitizePluginContributions(input)\n  return verdict.ok ? verdict.contributions : undefined\n}\n\n/**\n * What the surface a plugin is being registered into actually uses\n * (AGL-3141).\n *\n * The loaders carry this from the surface that computed it to each plugin's\n * register function, unchanged. A plugin that can register a part of itself\n * reads it; one that cannot ignores it, and the platform's behavior is the\n * same either way.\n *\n * An absent field means \"everything of that kind\". A surface that cannot say\n * what it uses must be handed all of it, because an element the surface\n * places and the set omits has no registered component and renders NOTHING,\n * silently (the blank-canvas invariant, AGL-52). Narrowing is an optimization\n * and must fail toward the whole.\n */\nexport interface PluginUse {\n  /**\n   * Canvas component ids the surface places, read from the FULL composed\n   * document the way `pagePresence` reads it — withheld lazy-panel subtrees\n   * included, because an element inside a panel the visitor opens later is\n   * still this page's element.\n   */\n  componentIds?: readonly string[]\n}\n\n/** A node as presence reads it: the two ids a placed element carries. */\nexport interface PresenceNode {\n  componentId?: string\n  pluginId?: string\n}\n\n/** What a published page places: its component ids and the plugin ids stamped on its nodes. */\nexport interface PagePresence {\n  componentIds: ReadonlySet<string>\n  pluginIds: ReadonlySet<string>\n}\n\n/**\n * The component ids and plugin ids a node tree places.\n *\n * Read from the FULL composed document — layouts, grafted reusable\n * components and withheld lazy panels included — because an element inside\n * a panel the visitor opens later is still this page's element.\n */\nexport function pagePresence(\n  nodes: Record<string, PresenceNode | null | undefined> | null | undefined,\n): PagePresence {\n  const componentIds = new Set<string>()\n  const pluginIds = new Set<string>()\n  for (const node of Object.values(nodes ?? {})) {\n    if (typeof node?.componentId === 'string' && node.componentId) {\n      componentIds.add(node.componentId)\n    }\n    if (typeof node?.pluginId === 'string' && node.pluginId) {\n      pluginIds.add(node.pluginId)\n    }\n  }\n  return { componentIds, pluginIds }\n}\n\n/** A plugin as the presence rules see it. */\nexport interface PresenceSubject {\n  /** The plugin's own id (a manifest `id`, or a first-party catalog id). */\n  pluginId?: string\n  /** A marketplace plugin's listing id, which its elements may carry instead. */\n  listingId?: string\n  /**\n   * A marketplace plugin's identity, `<publisher handle>.<manifest id>`\n   * (AGL-3390): the `pluginId` its namespaced elements carry.\n   */\n  identity?: string\n  /** Its declaration; `undefined` when it declares nothing. */\n  contributes?: PluginContributions\n}\n\n/**\n * Whether a published page uses a plugin, so the page must load it.\n *\n * - An element of it is placed: a node stamped with the plugin's id, or,\n *   for a declared plugin, a node whose component id it declares.\n * - It declares a site feature. The caller only asks about plugins the site\n *   has switched on, and a feature runs on every page of such a site.\n *\n * A plugin that declares nothing is present only through its stamped\n * elements — the default in the module note.\n */\nexport function isPluginUsedOnPage(\n  subject: PresenceSubject,\n  page: PagePresence,\n): boolean {\n  if (subject.pluginId && page.pluginIds.has(subject.pluginId)) return true\n  if (subject.listingId && page.pluginIds.has(subject.listingId)) return true\n  if (subject.identity && page.pluginIds.has(subject.identity)) return true\n  const site = subject.contributes?.site\n  if (!site) return false\n  if (site.features?.length) return true\n  return (site.components ?? []).some((id) => page.componentIds.has(id))\n}\n\n/**\n * Whether a plugin declares anything a site draws: an element an author can\n * place, or a feature that runs on the site's pages. The editor loads exactly\n * these (AGL-3391). A plugin that declares nothing is not among them: its\n * site half is only discoverable by running `register()`, and the console\n * shell already does that for it.\n */\nexport function declaresSiteElements(\n  contributes: PluginContributions | undefined,\n): boolean {\n  const site = contributes?.site\n  return Boolean(site?.components?.length || site?.features?.length)\n}\n\n/**\n * Every id a plugin's elements and presets may carry as their `pluginId`: its\n * own id and, for a marketplace plugin, its listing id and its identity. A\n * surface that filters registry entries by plugin set needs all of them, or it\n * hides the elements of a plugin it just loaded.\n */\nexport function presenceIds(subject: PresenceSubject): string[] {\n  const ids: string[] = []\n  for (const id of [subject.identity, subject.pluginId, subject.listingId]) {\n    if (id && !ids.includes(id)) ids.push(id)\n  }\n  return ids\n}\n\n/**\n * Function bindings (AGL-3393): component id → the prop naming the site\n * function that element runs.\n */\nexport type FunctionBindings = Readonly<Record<string, string>>\n\n/**\n * The function bindings a set of plugins declares, merged into one map.\n *\n * Where two plugins bind the same component id the FIRST one listed wins, so a\n * caller that passes first-party declarations ahead of marketplace ones keeps\n * a marketplace manifest from rebinding a first-party element. Marketplace ids\n * are namespaced by their publisher (see {@link isNamespacedComponentId}), so\n * a collision is a mistake, never a feature.\n */\nexport function mergeFunctionBindings(\n  ...sources: ReadonlyArray<\n    FunctionBindings | { contributes?: PluginContributions } | null | undefined\n  >\n): FunctionBindings {\n  const merged: Record<string, string> = {}\n  for (const source of sources) {\n    if (!source) continue\n    const declared: FunctionBindings | undefined =\n      'contributes' in source\n        ? (source.contributes as PluginContributions | undefined)?.site\n            ?.functionBindings\n        : (source as FunctionBindings)\n    for (const [componentId, prop] of Object.entries(declared ?? {})) {\n      if (typeof prop !== 'string') continue\n      if (!Object.prototype.hasOwnProperty.call(merged, componentId)) {\n        merged[componentId] = prop\n      }\n    }\n  }\n  return merged\n}\n\n/**\n * Whether a component id belongs to a marketplace plugin's namespace\n * (AGL-3387): `<publisher handle>.<plugin id>.<role>`. A `.` is reserved for\n * those ids — no first-party component carries one, which the manifest\n * generator enforces — so compose can tell, without loading anything, that a\n * tree places an element only an installed plugin can declare.\n */\nexport function isNamespacedComponentId(componentId: unknown): boolean {\n  return typeof componentId === 'string' && componentId.includes('.')\n}\n\n/**\n * Where a plugin's console code loads, resolved with the default applied: a\n * plugin that declares nothing loads with the shell, as it always did.\n */\nexport interface ConsoleLoadPoints {\n  shell: boolean\n  slots: readonly string[]\n  routes: readonly string[]\n  orgRoutes: readonly string[]\n}\n\nexport function consoleLoadPoints(\n  contributes: PluginContributions | undefined,\n): ConsoleLoadPoints {\n  if (!contributes) return { shell: true, slots: [], routes: [], orgRoutes: [] }\n  const declared = contributes.console ?? {}\n  return {\n    shell: Boolean(declared.shell),\n    slots: declared.slots ?? [],\n    routes: declared.routes ?? [],\n    orgRoutes: declared.orgRoutes ?? [],\n  }\n}\n\n/**\n * Whether a declared route serves `href`: the route itself, or a path beneath\n * it on a segment boundary, the way the shell's page resolver matches a nav\n * item that owns its subtree. `/products` serves `/products/orders` and never\n * `/products-archive`.\n */\nexport function routeServes(route: string, href: string): boolean {\n  return href === route || href.startsWith(`${route}/`)\n}\n\n/**\n * A place in the console that loads plugins, as the surface drawing it names\n * itself (AGL-3142).\n *\n * - `shell`: the workspace chrome every screen has. It draws whatever a\n *   plugin adds to every screen — a nav tab, an organization tab, a staff\n *   tab, a provider — so a plugin that declares any of those loads here, and\n *   so does one that declares nothing at all.\n * - `slots`: the zones a screen renders. The zones it names, not the plugins\n *   it expects in them: a screen must never hold a plugin id.\n * - `route`: the path the reader has open, plugin-relative (`/products`,\n *   `/products/orders`), on the level its route tree serves — `site` beneath\n *   `/hosts/[host]`, `org` beneath the organization.\n * - `editor`: the Besigner, which draws a site's elements and offers them in\n *   its Elements panel (AGL-3391). A plugin loads here when it declares site\n *   elements or site features, whether or not the page open uses them, since\n *   the author is choosing what to place.\n */\nexport type ConsoleLoadWhere =\n  | { at: 'shell' }\n  | { at: 'slots'; slots: readonly string[] }\n  | { at: 'route'; href: string; level: 'site' | 'org' }\n  | { at: 'editor' }\n\n/**\n * Whether a console surface uses a plugin, so it must load it.\n *\n * The console twin of {@link isPluginUsedOnPage}, and the same rule: a\n * declaration says where a plugin's code belongs, and the surface that draws\n * that place is the one that fetches it. A screen asks about the zones it\n * renders and the path it serves; it never asks about a plugin by name.\n *\n * A plugin that declares nothing loads with the shell — the default in the\n * module note, and the reason the shell branch reads\n * {@link consoleLoadPoints} rather than the raw block. Its nav tab or its\n * provider is only discoverable by running `register()`, so narrowing it\n * anywhere else would take a tab away with no way to notice.\n */\nexport function isPluginUsedInConsole(\n  contributes: PluginContributions | undefined,\n  where: ConsoleLoadWhere,\n): boolean {\n  if (where.at === 'editor') return declaresSiteElements(contributes)\n  const points = consoleLoadPoints(contributes)\n  if (where.at === 'shell') return points.shell\n  if (where.at === 'slots') {\n    return points.slots.some((slot) => where.slots.includes(slot))\n  }\n  const routes = where.level === 'org' ? points.orgRoutes : points.routes\n  return routes.some((route) => routeServes(route, where.href))\n}\n"],"names":["PLUGIN_MAX_CONTRIBUTIONS","CONTRIBUTION_ID","CONTRIBUTION_ROUTE","BINDING_PROP","sanitizePluginContributions","input","isPlainObject","ok","error","out","key","Object","keys","undefined","site","next","list","idList","values","length","bindings","functionBindingMap","components","value","functionBindings","consoleInput","shell","console","contributions","Boolean","Array","isArray","where","pattern","entry","test","String","includes","push","entries","componentId","prop","readPluginContributions","verdict","pagePresence","nodes","componentIds","Set","pluginIds","node","add","pluginId","isPluginUsedOnPage","subject","page","has","listingId","identity","contributes","features","some","id","declaresSiteElements","presenceIds","ids","mergeFunctionBindings","sources","merged","source","declared","prototype","hasOwnProperty","call","isNamespacedComponentId","consoleLoadPoints","slots","routes","orgRoutes","routeServes","route","href","startsWith","isPluginUsedInConsole","at","points","slot","level"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAoCC,GAED,4CAA4C,GAuD5C,6EAA6E,GAC7E,OAAO,MAAMA,2BAA2B,IAAG;AAE3C;;;CAGC,GACD,MAAMC,kBAAkB;AAExB;;;CAGC,GACD,MAAMC,qBAAqB;AAE3B,iEAAiE,GACjE,MAAMC,eAAe;AAMrB;;;;;;;;;;;CAWC,GACD,OAAO,SAASC,4BAA4BC,KAAc;IACxD,IAAI,CAACC,cAAcD,QAAQ;QACzB,OAAO;YAAEE,IAAI;YAAOC,OAAO;QAAgC;IAC7D;IACA,MAAMC,MAA2B,CAAC;IAClC,KAAK,MAAMC,OAAOC,OAAOC,IAAI,CAACP,OAAQ;QACpC,IAAIK,QAAQ,UAAUA,QAAQ,WAAW;YACvC,OAAO;gBAAEH,IAAI;gBAAOC,OAAO,CAAC,YAAY,EAAEE,IAAI,uBAAuB,CAAC;YAAC;QACzE;IACF;IAEA,IAAIL,KAAK,CAAC,OAAO,KAAKQ,WAAW;QAC/B,MAAMC,OAAOT,KAAK,CAAC,OAAO;QAC1B,IAAI,CAACC,cAAcQ,OAAO;YACxB,OAAO;gBAAEP,IAAI;gBAAOC,OAAO;YAAqC;QAClE;QACA,MAAMO,OAAgC,CAAC;QACvC,KAAK,MAAML,OAAOC,OAAOC,IAAI,CAACE,MAAO;YACnC,IAAIJ,QAAQ,oBAAoB;YAChC,IAAIA,QAAQ,gBAAgBA,QAAQ,YAAY;gBAC9C,OAAO;oBAAEH,IAAI;oBAAOC,OAAO,CAAC,iBAAiB,EAAEE,IAAI,4BAA4B,CAAC;gBAAC;YACnF;YACA,MAAMM,OAAOC,OAAOH,IAAI,CAACJ,IAAI,EAAE,CAAC,iBAAiB,EAAEA,KAAK,EAAET;YAC1D,IAAIe,KAAKT,EAAE,KAAK,OAAO,OAAO;gBAAEA,IAAI;gBAAOC,OAAOQ,KAAKR,KAAK;YAAC;YAC7D,IAAIQ,KAAKE,MAAM,CAACC,MAAM,EAAEJ,IAAI,CAACL,IAAI,GAAGM,KAAKE,MAAM;QACjD;QACA,IAAIJ,IAAI,CAAC,mBAAmB,KAAKD,WAAW;gBAGxCE;YAFF,MAAMK,WAAWC,mBACfP,IAAI,CAAC,mBAAmB,GACxBC,mBAAAA,KAAKO,UAAU,YAAfP,mBAAmB,EAAE;YAEvB,IAAIK,SAASb,EAAE,KAAK,OAAO,OAAO;gBAAEA,IAAI;gBAAOC,OAAOY,SAASZ,KAAK;YAAC;YACrE,IAAIG,OAAOC,IAAI,CAACQ,SAASG,KAAK,EAAEJ,MAAM,EAAE;gBACtCJ,KAAKS,gBAAgB,GAAGJ,SAASG,KAAK;YACxC;QACF;QACA,IAAIZ,OAAOC,IAAI,CAACG,MAAMI,MAAM,EAAEV,IAAIK,IAAI,GAAGC;IAC3C;IAEA,IAAIV,KAAK,CAAC,UAAU,KAAKQ,WAAW;QAClC,MAAMY,eAAepB,KAAK,CAAC,UAAU;QACrC,IAAI,CAACC,cAAcmB,eAAe;YAChC,OAAO;gBAAElB,IAAI;gBAAOC,OAAO;YAAwC;QACrE;QACA,MAAMO,OAAmC,CAAC;QAC1C,KAAK,MAAML,OAAOC,OAAOC,IAAI,CAACa,cAAe;YAC3C,IAAIf,QAAQ,SAAS;gBACnB,IAAI,OAAOe,YAAY,CAAC,QAAQ,KAAK,WAAW;oBAC9C,OAAO;wBAAElB,IAAI;wBAAOC,OAAO;oBAAkD;gBAC/E;gBACA,IAAIiB,YAAY,CAAC,QAAQ,EAAEV,KAAKW,KAAK,GAAG;gBACxC;YACF;YACA,IAAIhB,QAAQ,WAAWA,QAAQ,YAAYA,QAAQ,aAAa;gBAC9D,OAAO;oBACLH,IAAI;oBACJC,OAAO,CAAC,oBAAoB,EAAEE,IAAI,4BAA4B,CAAC;gBACjE;YACF;YACA,MAAMM,OAAOC,OACXQ,YAAY,CAACf,IAAI,EACjB,CAAC,oBAAoB,EAAEA,KAAK,EAC5BA,QAAQ,UAAUT,kBAAkBC;YAEtC,IAAIc,KAAKT,EAAE,KAAK,OAAO,OAAO;gBAAEA,IAAI;gBAAOC,OAAOQ,KAAKR,KAAK;YAAC;YAC7D,IAAIQ,KAAKE,MAAM,CAACC,MAAM,EAAEJ,IAAI,CAACL,IAAI,GAAGM,KAAKE,MAAM;QACjD;QACA,IAAIP,OAAOC,IAAI,CAACG,MAAMI,MAAM,EAAEV,IAAIkB,OAAO,GAAGZ;IAC9C;IAEA,OAAO;QAAER,IAAI;QAAMqB,eAAenB;IAAI;AACxC;AAEA,SAASH,cAAciB,KAAc;IACnC,OAAOM,QAAQN,UAAU,OAAOA,UAAU,YAAY,CAACO,MAAMC,OAAO,CAACR;AACvE;AAEA,SAASN,OACPM,KAAc,EACdS,KAAa,EACbC,OAAe;IAEf,IAAI,CAACH,MAAMC,OAAO,CAACR,QAAQ,OAAO;QAAEhB,IAAI;QAAOC,OAAO,GAAGwB,MAAM,eAAe,CAAC;IAAC;IAChF,IAAIT,MAAMJ,MAAM,GAAGnB,0BAA0B;QAC3C,OAAO;YAAEO,IAAI;YAAOC,OAAO,GAAGwB,MAAM,iBAAiB,EAAEhC,0BAA0B;QAAC;IACpF;IACA,MAAMkB,SAAmB,EAAE;IAC3B,KAAK,MAAMgB,SAASX,MAAO;QACzB,IAAI,OAAOW,UAAU,YAAY,CAACD,QAAQE,IAAI,CAACD,QAAQ;YACrD,OAAO;gBAAE3B,IAAI;gBAAOC,OAAO,GAAGwB,MAAM,uBAAuB,EAAEI,OAAOF,OAAO,CAAC,CAAC;YAAC;QAChF;QACA,IAAI,CAAChB,OAAOmB,QAAQ,CAACH,QAAQhB,OAAOoB,IAAI,CAACJ;IAC3C;IACA,OAAO;QAAE3B,IAAI;QAAMW;IAAO;AAC5B;AAEA;;;;;CAKC,GACD,SAASG,mBACPE,KAAc,EACdD,UAA6B;IAE7B,MAAMU,QAAQ;IACd,IAAI,CAAC1B,cAAciB,QAAQ;QACzB,OAAO;YAAEhB,IAAI;YAAOC,OAAO,GAAGwB,MAAM,kBAAkB,CAAC;QAAC;IAC1D;IACA,MAAMO,UAAU5B,OAAO4B,OAAO,CAAChB;IAC/B,IAAIgB,QAAQpB,MAAM,GAAGnB,0BAA0B;QAC7C,OAAO;YAAEO,IAAI;YAAOC,OAAO,GAAGwB,MAAM,iBAAiB,EAAEhC,0BAA0B;QAAC;IACpF;IACA,MAAMS,MAA8B,CAAC;IACrC,KAAK,MAAM,CAAC+B,aAAaC,KAAK,IAAIF,QAAS;QACzC,IAAI,CAACjB,WAAWe,QAAQ,CAACG,cAAc;YACrC,OAAO;gBACLjC,IAAI;gBACJC,OAAO,GAAGwB,MAAM,QAAQ,EAAEQ,YAAY,qDAAqD,CAAC;YAC9F;QACF;QACA,IAAI,OAAOC,SAAS,YAAY,CAACtC,aAAagC,IAAI,CAACM,OAAO;YACxD,OAAO;gBACLlC,IAAI;gBACJC,OAAO,GAAGwB,MAAM,CAAC,EAAEQ,YAAY,wBAAwB,EAAEJ,OAAOK,MAAM,CAAC,CAAC;YAC1E;QACF;QACAhC,GAAG,CAAC+B,YAAY,GAAGC;IACrB;IACA,OAAO;QAAElC,IAAI;QAAMgB,OAAOd;IAAI;AAChC;AAEA;;;;;;;CAOC,GACD,OAAO,SAASiC,wBACdrC,KAAc;IAEd,IAAIA,UAAUQ,aAAaR,UAAU,MAAM,OAAOQ;IAClD,MAAM8B,UAAUvC,4BAA4BC;IAC5C,OAAOsC,QAAQpC,EAAE,GAAGoC,QAAQf,aAAa,GAAGf;AAC9C;AAuCA;;;;;;CAMC,GACD,OAAO,SAAS+B,aACdC,KAAyE;IAEzE,MAAMC,eAAe,IAAIC;IACzB,MAAMC,YAAY,IAAID;IACtB,KAAK,MAAME,QAAQtC,OAAOO,MAAM,CAAC2B,gBAAAA,QAAS,CAAC,GAAI;QAC7C,IAAI,QAAOI,wBAAAA,KAAMT,WAAW,MAAK,YAAYS,KAAKT,WAAW,EAAE;YAC7DM,aAAaI,GAAG,CAACD,KAAKT,WAAW;QACnC;QACA,IAAI,QAAOS,wBAAAA,KAAME,QAAQ,MAAK,YAAYF,KAAKE,QAAQ,EAAE;YACvDH,UAAUE,GAAG,CAACD,KAAKE,QAAQ;QAC7B;IACF;IACA,OAAO;QAAEL;QAAcE;IAAU;AACnC;AAiBA;;;;;;;;;;CAUC,GACD,OAAO,SAASI,mBACdC,OAAwB,EACxBC,IAAkB;QAQVxC;QAHKuC,sBAETvC;IALJ,IAAIuC,QAAQF,QAAQ,IAAIG,KAAKN,SAAS,CAACO,GAAG,CAACF,QAAQF,QAAQ,GAAG,OAAO;IACrE,IAAIE,QAAQG,SAAS,IAAIF,KAAKN,SAAS,CAACO,GAAG,CAACF,QAAQG,SAAS,GAAG,OAAO;IACvE,IAAIH,QAAQI,QAAQ,IAAIH,KAAKN,SAAS,CAACO,GAAG,CAACF,QAAQI,QAAQ,GAAG,OAAO;IACrE,MAAM3C,QAAOuC,uBAAAA,QAAQK,WAAW,qBAAnBL,qBAAqBvC,IAAI;IACtC,IAAI,CAACA,MAAM,OAAO;IAClB,KAAIA,iBAAAA,KAAK6C,QAAQ,qBAAb7C,eAAeK,MAAM,EAAE,OAAO;IAClC,OAAO,EAACL,mBAAAA,KAAKQ,UAAU,YAAfR,mBAAmB,EAAE,EAAE8C,IAAI,CAAC,CAACC,KAAOP,KAAKR,YAAY,CAACS,GAAG,CAACM;AACpE;AAEA;;;;;;CAMC,GACD,OAAO,SAASC,qBACdJ,WAA4C;QAG7B5C,kBAA4BA;IAD3C,MAAMA,OAAO4C,+BAAAA,YAAa5C,IAAI;IAC9B,OAAOe,QAAQf,CAAAA,yBAAAA,mBAAAA,KAAMQ,UAAU,qBAAhBR,iBAAkBK,MAAM,MAAIL,yBAAAA,iBAAAA,KAAM6C,QAAQ,qBAAd7C,eAAgBK,MAAM;AACnE;AAEA;;;;;CAKC,GACD,OAAO,SAAS4C,YAAYV,OAAwB;IAClD,MAAMW,MAAgB,EAAE;IACxB,KAAK,MAAMH,MAAM;QAACR,QAAQI,QAAQ;QAAEJ,QAAQF,QAAQ;QAAEE,QAAQG,SAAS;KAAC,CAAE;QACxE,IAAIK,MAAM,CAACG,IAAI3B,QAAQ,CAACwB,KAAKG,IAAI1B,IAAI,CAACuB;IACxC;IACA,OAAOG;AACT;AAQA;;;;;;;;CAQC,GACD,OAAO,SAASC,sBACd,GAAGC,OAEF;IAED,MAAMC,SAAiC,CAAC;IACxC,KAAK,MAAMC,UAAUF,QAAS;YAItB,0BAACE;QAHP,IAAI,CAACA,QAAQ;QACb,MAAMC,WACJ,iBAAiBD,UACZA,sBAAAA,OAAOV,WAAW,sBAAnB,2BAAA,AAACU,oBAAwDtD,IAAI,qBAA7D,yBACIU,gBAAgB,GACnB4C;QACP,KAAK,MAAM,CAAC5B,aAAaC,KAAK,IAAI9B,OAAO4B,OAAO,CAAC8B,mBAAAA,WAAY,CAAC,GAAI;YAChE,IAAI,OAAO5B,SAAS,UAAU;YAC9B,IAAI,CAAC9B,OAAO2D,SAAS,CAACC,cAAc,CAACC,IAAI,CAACL,QAAQ3B,cAAc;gBAC9D2B,MAAM,CAAC3B,YAAY,GAAGC;YACxB;QACF;IACF;IACA,OAAO0B;AACT;AAEA;;;;;;CAMC,GACD,OAAO,SAASM,wBAAwBjC,WAAoB;IAC1D,OAAO,OAAOA,gBAAgB,YAAYA,YAAYH,QAAQ,CAAC;AACjE;AAaA,OAAO,SAASqC,kBACdhB,WAA4C;QAG3BA,sBAGRW,iBACCA,kBACGA;IANb,IAAI,CAACX,aAAa,OAAO;QAAEhC,OAAO;QAAMiD,OAAO,EAAE;QAAEC,QAAQ,EAAE;QAAEC,WAAW,EAAE;IAAC;IAC7E,MAAMR,YAAWX,uBAAAA,YAAY/B,OAAO,YAAnB+B,uBAAuB,CAAC;IACzC,OAAO;QACLhC,OAAOG,QAAQwC,SAAS3C,KAAK;QAC7BiD,KAAK,GAAEN,kBAAAA,SAASM,KAAK,YAAdN,kBAAkB,EAAE;QAC3BO,MAAM,GAAEP,mBAAAA,SAASO,MAAM,YAAfP,mBAAmB,EAAE;QAC7BQ,SAAS,GAAER,sBAAAA,SAASQ,SAAS,YAAlBR,sBAAsB,EAAE;IACrC;AACF;AAEA;;;;;CAKC,GACD,OAAO,SAASS,YAAYC,KAAa,EAAEC,IAAY;IACrD,OAAOA,SAASD,SAASC,KAAKC,UAAU,CAAC,GAAGF,MAAM,CAAC,CAAC;AACtD;AA0BA;;;;;;;;;;;;;CAaC,GACD,OAAO,SAASG,sBACdxB,WAA4C,EAC5C1B,KAAuB;IAEvB,IAAIA,MAAMmD,EAAE,KAAK,UAAU,OAAOrB,qBAAqBJ;IACvD,MAAM0B,SAASV,kBAAkBhB;IACjC,IAAI1B,MAAMmD,EAAE,KAAK,SAAS,OAAOC,OAAO1D,KAAK;IAC7C,IAAIM,MAAMmD,EAAE,KAAK,SAAS;QACxB,OAAOC,OAAOT,KAAK,CAACf,IAAI,CAAC,CAACyB,OAASrD,MAAM2C,KAAK,CAACtC,QAAQ,CAACgD;IAC1D;IACA,MAAMT,SAAS5C,MAAMsD,KAAK,KAAK,QAAQF,OAAOP,SAAS,GAAGO,OAAOR,MAAM;IACvE,OAAOA,OAAOhB,IAAI,CAAC,CAACmB,QAAUD,YAAYC,OAAO/C,MAAMgD,IAAI;AAC7D"}

package/src/lib/plugin-manager/plugin-declarations-repair.d.ts

@@ -0,0 +1,36 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+/**
+ * The app offers its boot step, so a reader that finds nobody can run it.
+ *
+ * Called at boot from the app's own instrumentation, beside the declarations
+ * themselves and BEFORE them — this is a plain assignment that cannot fail,
+ * and the failure it exists to repair is the one immediately after it.
+ *
+ * Idempotent and last-one-wins; an app registers exactly once per process.
+ */
+export declare function registerPluginDeclarationsRepair(run: () => Promise<void>): void;
+/** Only for specs: forgets the registered boot step. */
+export declare function resetPluginDeclarationsRepairForTests(): void;
+/**
+ * Runs the app's boot step, when it offered one. Answers whether one ran.
+ *
+ * Throws what the step throws; each caller decides what a failed repair
+ * costs it. The app's step memoizes its own promise, so this is one attempt
+ * per process rather than one per call.
+ */
+export declare function runPluginDeclarationsRepair(): Promise<boolean>;

package/src/lib/plugin-manager/plugin-declarations-repair.js

@@ -0,0 +1,64 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ /**
+ * The app's boot-time declarations step, offered to core so a reader that
+ * finds a declaration missing can run it (AGL-3080).
+ *
+ * Every app registers the plugins' declarations from its instrumentation, and
+ * wraps that in a `catch` so one bad declaration cannot cost every route. A
+ * boot that went wrong therefore leaves a process where whatever the
+ * declarations register is silently absent. Core cannot run the step itself:
+ * the generated manifest names every plugin, which is the one import core may
+ * not make. So the app hands the step over, and a core reader that finds
+ * nobody registered runs it and asks again.
+ *
+ * A leaf with no imports, so a client-safe module (the custom field registry)
+ * and a server one (contact capture) can both read it.
+ *
+ * Held on `globalThis` rather than in a module `let` (AGL-3412): the app
+ * offers it from `instrumentation.ts`, which Next compiles into a different
+ * module graph from the routes that read it, so a module-scoped slot is set
+ * in one copy and read as empty in the other.
+ */ const REPAIR_KEY = Symbol.for('@aglyn/aglyn:plugin-declarations-repair');
+const globalScope = globalThis;
+/**
+ * The app offers its boot step, so a reader that finds nobody can run it.
+ *
+ * Called at boot from the app's own instrumentation, beside the declarations
+ * themselves and BEFORE them — this is a plain assignment that cannot fail,
+ * and the failure it exists to repair is the one immediately after it.
+ *
+ * Idempotent and last-one-wins; an app registers exactly once per process.
+ */ export function registerPluginDeclarationsRepair(run) {
+    globalScope[REPAIR_KEY] = run;
+}
+/** Only for specs: forgets the registered boot step. */ export function resetPluginDeclarationsRepairForTests() {
+    globalScope[REPAIR_KEY] = null;
+}
+/**
+ * Runs the app's boot step, when it offered one. Answers whether one ran.
+ *
+ * Throws what the step throws; each caller decides what a failed repair
+ * costs it. The app's step memoizes its own promise, so this is one attempt
+ * per process rather than one per call.
+ */ export async function runPluginDeclarationsRepair() {
+    const repair = globalScope[REPAIR_KEY];
+    if (!repair) return false;
+    await repair();
+    return true;
+}
+
+//# sourceMappingURL=plugin-declarations-repair.js.map

package/src/lib/plugin-manager/plugin-declarations-repair.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../libs/aglyn/src/lib/plugin-manager/plugin-declarations-repair.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n/**\n * The app's boot-time declarations step, offered to core so a reader that\n * finds a declaration missing can run it (AGL-3080).\n *\n * Every app registers the plugins' declarations from its instrumentation, and\n * wraps that in a `catch` so one bad declaration cannot cost every route. A\n * boot that went wrong therefore leaves a process where whatever the\n * declarations register is silently absent. Core cannot run the step itself:\n * the generated manifest names every plugin, which is the one import core may\n * not make. So the app hands the step over, and a core reader that finds\n * nobody registered runs it and asks again.\n *\n * A leaf with no imports, so a client-safe module (the custom field registry)\n * and a server one (contact capture) can both read it.\n *\n * Held on `globalThis` rather than in a module `let` (AGL-3412): the app\n * offers it from `instrumentation.ts`, which Next compiles into a different\n * module graph from the routes that read it, so a module-scoped slot is set\n * in one copy and read as empty in the other.\n */\nconst REPAIR_KEY = Symbol.for('@aglyn/aglyn:plugin-declarations-repair')\n\nconst globalScope = globalThis as typeof globalThis & {\n  [REPAIR_KEY]?: (() => Promise<void>) | null\n}\n\n/**\n * The app offers its boot step, so a reader that finds nobody can run it.\n *\n * Called at boot from the app's own instrumentation, beside the declarations\n * themselves and BEFORE them — this is a plain assignment that cannot fail,\n * and the failure it exists to repair is the one immediately after it.\n *\n * Idempotent and last-one-wins; an app registers exactly once per process.\n */\nexport function registerPluginDeclarationsRepair(run: () => Promise<void>): void {\n  globalScope[REPAIR_KEY] = run\n}\n\n/** Only for specs: forgets the registered boot step. */\nexport function resetPluginDeclarationsRepairForTests(): void {\n  globalScope[REPAIR_KEY] = null\n}\n\n/**\n * Runs the app's boot step, when it offered one. Answers whether one ran.\n *\n * Throws what the step throws; each caller decides what a failed repair\n * costs it. The app's step memoizes its own promise, so this is one attempt\n * per process rather than one per call.\n */\nexport async function runPluginDeclarationsRepair(): Promise<boolean> {\n  const repair = globalScope[REPAIR_KEY]\n  if (!repair) return false\n  await repair()\n  return true\n}\n"],"names":["REPAIR_KEY","Symbol","for","globalScope","globalThis","registerPluginDeclarationsRepair","run","resetPluginDeclarationsRepairForTests","runPluginDeclarationsRepair","repair"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED;;;;;;;;;;;;;;;;;;;CAmBC,GACD,MAAMA,aAAaC,OAAOC,GAAG,CAAC;AAE9B,MAAMC,cAAcC;AAIpB;;;;;;;;CAQC,GACD,OAAO,SAASC,iCAAiCC,GAAwB;IACvEH,WAAW,CAACH,WAAW,GAAGM;AAC5B;AAEA,sDAAsD,GACtD,OAAO,SAASC;IACdJ,WAAW,CAACH,WAAW,GAAG;AAC5B;AAEA;;;;;;CAMC,GACD,OAAO,eAAeQ;IACpB,MAAMC,SAASN,WAAW,CAACH,WAAW;IACtC,IAAI,CAACS,QAAQ,OAAO;IACpB,MAAMA;IACN,OAAO;AACT"}

package/src/lib/plugin-manager/plugin-dependents.d.ts

@@ -0,0 +1,101 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import type { BindingRefVia } from '../app-utils/binding-tokens';
+/**
+ * WHAT DEPENDS ON A THING, answered by the plugins whose records refer to it.
+ *
+ * The "Used by" scan (`/api/hosts/where-used`) tells a person what they would
+ * break by deleting or renaming one of a site's things — a variable, a
+ * function, a workflow. What refers to it from a published page is the
+ * platform's to find: the scan reads the published screens and layouts
+ * itself. What refers to it from inside a plugin's records — a step that
+ * calls a function, a variable whose value is computed from somewhere else —
+ * is that plugin's: its storage, its field names, and its rule for what
+ * counts as a reference.
+ *
+ * So a plugin that keeps referring records registers a DEPENDENTS SOURCE: the
+ * kinds of thing it finds references to, and a `find` that answers the
+ * referring records of one site. The scan asks every source registered for
+ * the kind and lists what they answer beside its own findings. That is also
+ * how one plugin learns what another plugin's records need of its own: the
+ * owner of a thing asks the scan, and whichever plugin keeps the references
+ * answers, with neither importing the other.
+ *
+ * Its siblings: `plugin-record-index` lists a plugin's records for another
+ * surface to work on; this answers which of them point at something.
+ *
+ * ## Not registered is an answer; failing is not
+ *
+ * No source for a kind means no plugin keeps records that refer to one in
+ * this process, and the answer is complete. A source that THROWS is a scan
+ * that did not finish: its answer is marked incomplete, exactly as a scan
+ * that stopped at its read cap is, so "nothing uses this" is never said on
+ * the strength of a reader that failed.
+ */
+/** One record that refers to the thing asked about. */
+export interface PluginDependent {
+    /** What kind of record refers to it, in the words the scan lists it under ("variable"). */
+    type: string;
+    id: string;
+    /** What a person calls it. */
+    name: string;
+    /**
+     * How it refers: `id` survives a rename, `name` is a name reference a
+     * rename breaks. Both when the record carries both and both match.
+     */
+    via: BindingRefVia[];
+}
+/** The thing a scan asks about, on one site. */
+export interface PluginDependentsRequest {
+    hostId: string;
+    /** What kind of thing it is: "function", "workflow". */
+    kind: string;
+    /** Its document id. */
+    id: string;
+    /** Its current name, for records that refer to it by name. */
+    name?: string;
+}
+export interface PluginDependentsAnswer {
+    dependents: PluginDependent[];
+    /** The source read less than all of its records, so more may refer to it. */
+    truncated: boolean;
+}
+export interface PluginDependentsSource {
+    /** The kinds of thing this source finds references to. */
+    kinds: readonly string[];
+    find(request: PluginDependentsRequest): Promise<PluginDependentsAnswer>;
+}
+export declare const PLUGIN_DEPENDENTS_SOURCES: import("./plugin-services").PluginServiceContract<PluginDependentsSource>;
+/**
+ * Registers a plugin's dependents source. The owner is the loader's marker
+ * when a register fn is running, else `options.pluginId`; with neither the
+ * registration throws. A plugin registering several sources tells them apart
+ * with `key`; registering the same key again replaces it in place.
+ */
+export declare function registerPluginDependentsSource(source: PluginDependentsSource, options?: {
+    pluginId?: string;
+    key?: string;
+}): void;
+/**
+ * Every dependent the registered sources answer for one thing, in
+ * registration order, and whether the answer is COMPLETE: `false` when any
+ * source read only part of its records or failed to answer at all.
+ */
+export declare function findPluginDependents(request: PluginDependentsRequest): Promise<{
+    dependents: PluginDependent[];
+    complete: boolean;
+}>;

package/src/lib/plugin-manager/plugin-dependents.js

@@ -0,0 +1,75 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ import { _ as _extends } from "@swc/helpers/_/_extends";
+import { getRegisteringPluginId } from "../app-utils/registering-plugin.js";
+import { definePluginServiceContract, registerPluginService, resolvePluginServices } from "./plugin-services.js";
+export const PLUGIN_DEPENDENTS_SOURCES = definePluginServiceContract('core.dependents-source', {
+    multiple: true
+});
+/**
+ * Registers a plugin's dependents source. The owner is the loader's marker
+ * when a register fn is running, else `options.pluginId`; with neither the
+ * registration throws. A plugin registering several sources tells them apart
+ * with `key`; registering the same key again replaces it in place.
+ */ export function registerPluginDependentsSource(source, options) {
+    var _ref, _getRegisteringPluginId, _ref1;
+    const pluginId = ((_ref = (_getRegisteringPluginId = getRegisteringPluginId()) != null ? _getRegisteringPluginId : options == null ? void 0 : options.pluginId) != null ? _ref : '').trim();
+    if (!pluginId) {
+        throw new Error('a dependents source was registered with no owner');
+    }
+    const kinds = source.kinds.map((kind)=>kind.trim()).filter(Boolean);
+    if (!kinds.length) {
+        throw new Error(`the dependents source of "${pluginId}" names no kind it answers for`);
+    }
+    registerPluginService(PLUGIN_DEPENDENTS_SOURCES, source, {
+        pluginId,
+        key: (_ref1 = options == null ? void 0 : options.key) != null ? _ref1 : kinds.join(',')
+    });
+}
+/**
+ * Every dependent the registered sources answer for one thing, in
+ * registration order, and whether the answer is COMPLETE: `false` when any
+ * source read only part of its records or failed to answer at all.
+ */ export async function findPluginDependents(request) {
+    const kind = request.kind.trim();
+    const sources = resolvePluginServices(PLUGIN_DEPENDENTS_SOURCES).filter((entry)=>entry.impl.kinds.some((one)=>one.trim() === kind));
+    const answers = await Promise.all(sources.map(async ({ pluginId, impl })=>{
+        try {
+            return await impl.find(_extends({}, request, {
+                kind
+            }));
+        } catch (error) {
+            console.error(`dependents source of "${pluginId}" failed for a ${kind}`, error);
+            return null;
+        }
+    }));
+    const dependents = [];
+    let complete = true;
+    for (const answer of answers){
+        if (!answer) {
+            complete = false;
+            continue;
+        }
+        if (answer.truncated) complete = false;
+        dependents.push(...answer.dependents);
+    }
+    return {
+        dependents,
+        complete
+    };
+}
+
+//# sourceMappingURL=plugin-dependents.js.map

package/src/lib/plugin-manager/plugin-dependents.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../libs/aglyn/src/lib/plugin-manager/plugin-dependents.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport type { BindingRefVia } from '../app-utils/binding-tokens'\nimport { getRegisteringPluginId } from '../app-utils/registering-plugin'\nimport {\n  definePluginServiceContract,\n  registerPluginService,\n  resolvePluginServices,\n} from './plugin-services'\n\n/**\n * WHAT DEPENDS ON A THING, answered by the plugins whose records refer to it.\n *\n * The \"Used by\" scan (`/api/hosts/where-used`) tells a person what they would\n * break by deleting or renaming one of a site's things — a variable, a\n * function, a workflow. What refers to it from a published page is the\n * platform's to find: the scan reads the published screens and layouts\n * itself. What refers to it from inside a plugin's records — a step that\n * calls a function, a variable whose value is computed from somewhere else —\n * is that plugin's: its storage, its field names, and its rule for what\n * counts as a reference.\n *\n * So a plugin that keeps referring records registers a DEPENDENTS SOURCE: the\n * kinds of thing it finds references to, and a `find` that answers the\n * referring records of one site. The scan asks every source registered for\n * the kind and lists what they answer beside its own findings. That is also\n * how one plugin learns what another plugin's records need of its own: the\n * owner of a thing asks the scan, and whichever plugin keeps the references\n * answers, with neither importing the other.\n *\n * Its siblings: `plugin-record-index` lists a plugin's records for another\n * surface to work on; this answers which of them point at something.\n *\n * ## Not registered is an answer; failing is not\n *\n * No source for a kind means no plugin keeps records that refer to one in\n * this process, and the answer is complete. A source that THROWS is a scan\n * that did not finish: its answer is marked incomplete, exactly as a scan\n * that stopped at its read cap is, so \"nothing uses this\" is never said on\n * the strength of a reader that failed.\n */\n\n/** One record that refers to the thing asked about. */\nexport interface PluginDependent {\n  /** What kind of record refers to it, in the words the scan lists it under (\"variable\"). */\n  type: string\n  id: string\n  /** What a person calls it. */\n  name: string\n  /**\n   * How it refers: `id` survives a rename, `name` is a name reference a\n   * rename breaks. Both when the record carries both and both match.\n   */\n  via: BindingRefVia[]\n}\n\n/** The thing a scan asks about, on one site. */\nexport interface PluginDependentsRequest {\n  hostId: string\n  /** What kind of thing it is: \"function\", \"workflow\". */\n  kind: string\n  /** Its document id. */\n  id: string\n  /** Its current name, for records that refer to it by name. */\n  name?: string\n}\n\nexport interface PluginDependentsAnswer {\n  dependents: PluginDependent[]\n  /** The source read less than all of its records, so more may refer to it. */\n  truncated: boolean\n}\n\nexport interface PluginDependentsSource {\n  /** The kinds of thing this source finds references to. */\n  kinds: readonly string[]\n  find(request: PluginDependentsRequest): Promise<PluginDependentsAnswer>\n}\n\nexport const PLUGIN_DEPENDENTS_SOURCES = definePluginServiceContract<PluginDependentsSource>(\n  'core.dependents-source',\n  { multiple: true },\n)\n\n/**\n * Registers a plugin's dependents source. The owner is the loader's marker\n * when a register fn is running, else `options.pluginId`; with neither the\n * registration throws. A plugin registering several sources tells them apart\n * with `key`; registering the same key again replaces it in place.\n */\nexport function registerPluginDependentsSource(\n  source: PluginDependentsSource,\n  options?: { pluginId?: string; key?: string },\n): void {\n  const pluginId = (getRegisteringPluginId() ?? options?.pluginId ?? '').trim()\n  if (!pluginId) {\n    throw new Error('a dependents source was registered with no owner')\n  }\n  const kinds = source.kinds.map((kind) => kind.trim()).filter(Boolean)\n  if (!kinds.length) {\n    throw new Error(`the dependents source of \"${pluginId}\" names no kind it answers for`)\n  }\n  registerPluginService(PLUGIN_DEPENDENTS_SOURCES, source, {\n    pluginId,\n    key: options?.key ?? kinds.join(','),\n  })\n}\n\n/**\n * Every dependent the registered sources answer for one thing, in\n * registration order, and whether the answer is COMPLETE: `false` when any\n * source read only part of its records or failed to answer at all.\n */\nexport async function findPluginDependents(\n  request: PluginDependentsRequest,\n): Promise<{ dependents: PluginDependent[]; complete: boolean }> {\n  const kind = request.kind.trim()\n  const sources = resolvePluginServices(PLUGIN_DEPENDENTS_SOURCES).filter((entry) =>\n    entry.impl.kinds.some((one) => one.trim() === kind),\n  )\n  const answers = await Promise.all(\n    sources.map(async ({ pluginId, impl }) => {\n      try {\n        return await impl.find({ ...request, kind })\n      } catch (error) {\n        console.error(`dependents source of \"${pluginId}\" failed for a ${kind}`, error)\n        return null\n      }\n    }),\n  )\n  const dependents: PluginDependent[] = []\n  let complete = true\n  for (const answer of answers) {\n    if (!answer) {\n      complete = false\n      continue\n    }\n    if (answer.truncated) complete = false\n    dependents.push(...answer.dependents)\n  }\n  return { dependents, complete }\n}\n"],"names":["getRegisteringPluginId","definePluginServiceContract","registerPluginService","resolvePluginServices","PLUGIN_DEPENDENTS_SOURCES","multiple","registerPluginDependentsSource","source","options","pluginId","trim","Error","kinds","map","kind","filter","Boolean","length","key","join","findPluginDependents","request","sources","entry","impl","some","one","answers","Promise","all","find","error","console","dependents","complete","answer","truncated","push"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC;AAGD,SAASA,sBAAsB,QAAQ,qCAAiC;AACxE,SACEC,2BAA2B,EAC3BC,qBAAqB,EACrBC,qBAAqB,QAChB,uBAAmB;AAuE1B,OAAO,MAAMC,4BAA4BH,4BACvC,0BACA;IAAEI,UAAU;AAAK,GAClB;AAED;;;;;CAKC,GACD,OAAO,SAASC,+BACdC,MAA8B,EAC9BC,OAA6C;QAE3BR,MAAAA;IAAlB,MAAMS,WAAW,EAACT,QAAAA,0BAAAA,oCAAAA,0BAA4BQ,2BAAAA,QAASC,QAAQ,YAA7CT,OAAiD,IAAIU,IAAI;IAC3E,IAAI,CAACD,UAAU;QACb,MAAM,IAAIE,MAAM;IAClB;IACA,MAAMC,QAAQL,OAAOK,KAAK,CAACC,GAAG,CAAC,CAACC,OAASA,KAAKJ,IAAI,IAAIK,MAAM,CAACC;IAC7D,IAAI,CAACJ,MAAMK,MAAM,EAAE;QACjB,MAAM,IAAIN,MAAM,CAAC,0BAA0B,EAAEF,SAAS,8BAA8B,CAAC;IACvF;IACAP,sBAAsBE,2BAA2BG,QAAQ;QACvDE;QACAS,GAAG,WAAEV,2BAAAA,QAASU,GAAG,oBAAIN,MAAMO,IAAI,CAAC;IAClC;AACF;AAEA;;;;CAIC,GACD,OAAO,eAAeC,qBACpBC,OAAgC;IAEhC,MAAMP,OAAOO,QAAQP,IAAI,CAACJ,IAAI;IAC9B,MAAMY,UAAUnB,sBAAsBC,2BAA2BW,MAAM,CAAC,CAACQ,QACvEA,MAAMC,IAAI,CAACZ,KAAK,CAACa,IAAI,CAAC,CAACC,MAAQA,IAAIhB,IAAI,OAAOI;IAEhD,MAAMa,UAAU,MAAMC,QAAQC,GAAG,CAC/BP,QAAQT,GAAG,CAAC,OAAO,EAAEJ,QAAQ,EAAEe,IAAI,EAAE;QACnC,IAAI;YACF,OAAO,MAAMA,KAAKM,IAAI,CAAC,aAAKT;gBAASP;;QACvC,EAAE,OAAOiB,OAAO;YACdC,QAAQD,KAAK,CAAC,CAAC,sBAAsB,EAAEtB,SAAS,eAAe,EAAEK,MAAM,EAAEiB;YACzE,OAAO;QACT;IACF;IAEF,MAAME,aAAgC,EAAE;IACxC,IAAIC,WAAW;IACf,KAAK,MAAMC,UAAUR,QAAS;QAC5B,IAAI,CAACQ,QAAQ;YACXD,WAAW;YACX;QACF;QACA,IAAIC,OAAOC,SAAS,EAAEF,WAAW;QACjCD,WAAWI,IAAI,IAAIF,OAAOF,UAAU;IACtC;IACA,OAAO;QAAEA;QAAYC;IAAS;AAChC"}

package/src/lib/plugin-manager/plugin-distribution.d.ts

@@ -0,0 +1,55 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+/**
+ * Where published third-party plugin versions and their kill switches are
+ * stored, declared by the plugin that publishes them (AGL-3080).
+ *
+ * The realm loader is the platform's: it joins a workspace's install pins
+ * with the version each pin names, keeps only a version carrying the
+ * platform's trust grant, and drops one a kill switch has stopped. The
+ * documents it joins against are the distributing plugin's — a version is
+ * written under that plugin's listing when it is published, and its kill
+ * switch when staff revoke it. So the loader asks this declaration where they
+ * are, and names no plugin's collection itself.
+ *
+ * ## Compiled, never registered
+ *
+ * Every reader is a security gate on a server path that loads no plugin code:
+ * the published page's plugin join, both apps' remote server-bundle loaders,
+ * the console's realm gate. A runtime registry one of them had not filled
+ * would answer "nowhere" — and "nowhere" must mean "nothing loads", which is
+ * only safe because it is also what an unfilled registry would say. That is
+ * the AGL-3025 shape one step from the kill switch, so the plugin declares
+ * this as data in `plugins.config.json` and the generator compiles it.
+ *
+ * ## Absent is closed
+ *
+ * With no distributing plugin, {@link PLUGIN_DISTRIBUTION} is `null`, and
+ * every reader fails CLOSED: no version resolves, and every pin reads as
+ * revoked. A pin with no store to check it against cannot be vouched for.
+ */
+export interface PluginDistribution {
+    /** The plugin that declared it. */
+    pluginId: string;
+    /** The top-level collection of listings, keyed by the id an install pins. */
+    listings: string;
+    /** The subcollection of a listing holding one document per version. */
+    versions: string;
+    /** The top-level collection of kill switches, keyed by the listing id. */
+    revocations: string;
+}
+export { PLUGIN_DISTRIBUTION } from './first-party-plugins.generated';