@aglyn/aglyn 1.0.0-beta.218 → 1.0.0-beta.220

package/src/lib/plugin-manager/plugin-usage-meters.d.ts

@@ -0,0 +1,108 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import type { ReleaseFlagKey } from '../app-utils/release-flags';
+/** What the sweep tells a meter about one workspace's month. */
+export interface PluginUsageMeterContext {
+    orgId: string;
+    /** The workspace document, as the sweep read it for every decision. */
+    org: Readonly<Record<string, unknown>>;
+    /** `YYYY-MM`, the month being measured. */
+    month: string;
+    /**
+     * Whether the month has CLOSED. A closed month is the one an invoice is
+     * about; an open one is measured daily for the budget and never billed.
+     */
+    closed: boolean;
+    /**
+     * The month's rollup as it stood before this run — for a stock meter, the
+     * last reading an earlier sweep stamped inside the month.
+     */
+    previous: Readonly<Record<string, unknown>>;
+    /**
+     * A release flag's verdict for this workspace, resolved as the sweep
+     * resolves every flag it gates billing on: bucketed by workspace, with its
+     * overrides and its tier.
+     */
+    releaseFlagOn: (key: ReleaseFlagKey) => boolean;
+}
+/** What a meter answers for one workspace's month. */
+export interface PluginUsageMeterReading {
+    /**
+     * Written onto the month's rollup on every run, zeros included. A field the
+     * platform writes itself is never overwritten.
+     */
+    fields: Readonly<Record<string, unknown>>;
+    /**
+     * Written only while the month is OPEN — a stock meter's period-end reading,
+     * which a closed sweep then bills from. Never written for a closed month,
+     * so a re-run of a closed month reads the same input every time.
+     */
+    periodEndFields?: Readonly<Record<string, unknown>>;
+    /**
+     * Dollars that enter the month's billed figure. Rounded to cents per meter,
+     * like every plan-priced line beside it; 0 for a meter that bills nothing.
+     */
+    billedUsd: number;
+    /**
+     * For a stock meter on a CLOSED month: `true` when the reading came from a
+     * period-end stamp taken inside the month. The rollup's `stockBasis` is
+     * `period-end` when any stock reading was.
+     */
+    periodEndBasis?: boolean;
+}
+/** What a meter's close-out is told about one workspace's closed month. */
+export interface PluginUsageMeterCloseContext extends PluginUsageMeterContext {
+    /**
+     * The workspace's Stripe customer, or `null` when it has none. Read only
+     * when asked, so a close-out with nothing to settle costs no read.
+     */
+    stripeCustomerId: () => Promise<string | null>;
+}
+/** A plugin's meter in the monthly usage sweep. */
+export interface PluginUsageMeter {
+    pluginId: string;
+    /** As the plugin's `usageAxes` declaration names it under `meters`. */
+    id: string;
+    measure: (context: PluginUsageMeterContext) => Promise<PluginUsageMeterReading>;
+    /**
+     * Called once per workspace for a CLOSED month, every day the sweep runs,
+     * so a plugin that bills part of its usage itself can settle what is left
+     * of it. Idempotent by the plugin's own records; errors are logged.
+     */
+    closeMonth?: (context: PluginUsageMeterCloseContext) => Promise<void>;
+}
+/**
+ * Registers a meter. Idempotent per plugin and id: the same pair again
+ * replaces the earlier registration, so a declarations module evaluated twice
+ * measures once. A meter with no owner, no id or no `measure` throws.
+ */
+export declare function registerPluginUsageMeter(meter: Omit<PluginUsageMeter, 'pluginId'> & {
+    pluginId?: string;
+}): void;
+/**
+ * Every registered meter, in the order the sweep runs them: declared meters in
+ * catalog order, then any other in registration order. The order is fixed so
+ * two processes write one workspace's rollup the same way.
+ */
+export declare function listPluginUsageMeters(): PluginUsageMeter[];
+/**
+ * Every DECLARED meter nothing registered, as `pluginId:id`. The sweep refuses
+ * to report a workspace's month while this is not empty.
+ */
+export declare function unregisteredPluginUsageMeters(): string[];
+/** Test seam: forget every meter. */
+export declare function resetPluginUsageMetersForTests(): void;

package/src/lib/plugin-manager/plugin-usage-meters.js

@@ -0,0 +1,105 @@
+import { _ as _extends } from "@swc/helpers/_/_extends";
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ /**
+ * A METER A PLUGIN MEASURES IN THE MONTHLY USAGE SWEEP (AGL-3080).
+ *
+ * The usage sweep (`/api/billing/report-usage`) writes one rollup per
+ * workspace and month — `orgs/{orgId}/usage/{month}` — and posts the month's
+ * billed figure as one Stripe meter event. The platform's own meters (storage,
+ * bandwidth, API requests, email) it measures itself. A plugin's meter it
+ * cannot: the plugin owns the collection the usage is recorded in, the band
+ * it is measured against and the price past the band.
+ *
+ * So the plugin registers a meter, and the sweep asks it once per workspace:
+ * `measure` answers the fields the plugin writes onto the rollup — under the
+ * names its usage axes declare, so the cost model and the utilization table
+ * read them — and the dollars that enter the month's billed figure. The sweep
+ * never learns what the meter counts or how it prices it, and the plugin
+ * never edits the sweep.
+ *
+ * ## Declared, then registered, and refused when missing
+ *
+ * A meter is a runtime registration because measuring is code — a read of the
+ * plugin's own storage, a band, a price. But a meter that failed to register
+ * is money the sweep would silently stop billing, so the plugin also DECLARES
+ * it (`usageAxes` → `meters`, compiled into the catalog file), and the sweep
+ * refuses to report a workspace's month while a declared meter is missing:
+ * the workspace fails loudly for this pass and is swept again tomorrow, which
+ * is late and visible, where a month billed without the meter would be short
+ * and final.
+ *
+ * ## A throw is the workspace's, not the sweep's
+ *
+ * `measure` throwing fails that workspace's pass the same way — a meter that
+ * could not measure has no figure worth billing. `closeMonth` is different:
+ * it settles what the plugin bills on its own, is logged when it fails, and
+ * never costs the platform's own metering.
+ */ import { getRegisteringPluginId } from "../app-utils/registering-plugin.js";
+import { PLUGIN_USAGE_METERS_DECLARED } from "./first-party-plugins.generated.js";
+const meters = new Map();
+const keyOf = (pluginId, id)=>`${pluginId}:${id}`;
+/**
+ * Registers a meter. Idempotent per plugin and id: the same pair again
+ * replaces the earlier registration, so a declarations module evaluated twice
+ * measures once. A meter with no owner, no id or no `measure` throws.
+ */ export function registerPluginUsageMeter(meter) {
+    var _ref, _getRegisteringPluginId, _meter_id;
+    const pluginId = ((_ref = (_getRegisteringPluginId = getRegisteringPluginId()) != null ? _getRegisteringPluginId : meter.pluginId) != null ? _ref : '').trim();
+    const id = String((_meter_id = meter.id) != null ? _meter_id : '').trim();
+    if (!pluginId || !id) {
+        throw new Error('a usage meter needs a pluginId and an id');
+    }
+    if (typeof meter.measure !== 'function') {
+        throw new Error(`usage meter "${keyOf(pluginId, id)}" has no measure function`);
+    }
+    meters.set(keyOf(pluginId, id), _extends({
+        pluginId,
+        id,
+        measure: meter.measure
+    }, typeof meter.closeMonth === 'function' ? {
+        closeMonth: meter.closeMonth
+    } : {}));
+}
+/**
+ * Every registered meter, in the order the sweep runs them: declared meters in
+ * catalog order, then any other in registration order. The order is fixed so
+ * two processes write one workspace's rollup the same way.
+ */ export function listPluginUsageMeters() {
+    const declared = PLUGIN_USAGE_METERS_DECLARED.map((one)=>keyOf(one.pluginId, one.id));
+    const rank = (key)=>{
+        const index = declared.indexOf(key);
+        return index === -1 ? Number.MAX_SAFE_INTEGER : index;
+    };
+    return [
+        ...meters.entries()
+    ].map(([key, meter], sequence)=>({
+            key,
+            meter,
+            sequence
+        })).sort((a, b)=>rank(a.key) - rank(b.key) || a.sequence - b.sequence).map(({ meter })=>_extends({}, meter));
+}
+/**
+ * Every DECLARED meter nothing registered, as `pluginId:id`. The sweep refuses
+ * to report a workspace's month while this is not empty.
+ */ export function unregisteredPluginUsageMeters() {
+    return PLUGIN_USAGE_METERS_DECLARED.map((one)=>keyOf(one.pluginId, one.id)).filter((key)=>!meters.has(key));
+}
+/** Test seam: forget every meter. */ export function resetPluginUsageMetersForTests() {
+    meters.clear();
+}
+
+//# sourceMappingURL=plugin-usage-meters.js.map

package/src/lib/plugin-manager/plugin-usage-meters.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../libs/aglyn/src/lib/plugin-manager/plugin-usage-meters.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n/**\n * A METER A PLUGIN MEASURES IN THE MONTHLY USAGE SWEEP (AGL-3080).\n *\n * The usage sweep (`/api/billing/report-usage`) writes one rollup per\n * workspace and month — `orgs/{orgId}/usage/{month}` — and posts the month's\n * billed figure as one Stripe meter event. The platform's own meters (storage,\n * bandwidth, API requests, email) it measures itself. A plugin's meter it\n * cannot: the plugin owns the collection the usage is recorded in, the band\n * it is measured against and the price past the band.\n *\n * So the plugin registers a meter, and the sweep asks it once per workspace:\n * `measure` answers the fields the plugin writes onto the rollup — under the\n * names its usage axes declare, so the cost model and the utilization table\n * read them — and the dollars that enter the month's billed figure. The sweep\n * never learns what the meter counts or how it prices it, and the plugin\n * never edits the sweep.\n *\n * ## Declared, then registered, and refused when missing\n *\n * A meter is a runtime registration because measuring is code — a read of the\n * plugin's own storage, a band, a price. But a meter that failed to register\n * is money the sweep would silently stop billing, so the plugin also DECLARES\n * it (`usageAxes` → `meters`, compiled into the catalog file), and the sweep\n * refuses to report a workspace's month while a declared meter is missing:\n * the workspace fails loudly for this pass and is swept again tomorrow, which\n * is late and visible, where a month billed without the meter would be short\n * and final.\n *\n * ## A throw is the workspace's, not the sweep's\n *\n * `measure` throwing fails that workspace's pass the same way — a meter that\n * could not measure has no figure worth billing. `closeMonth` is different:\n * it settles what the plugin bills on its own, is logged when it fails, and\n * never costs the platform's own metering.\n */\n\nimport { getRegisteringPluginId } from '../app-utils/registering-plugin'\nimport type { ReleaseFlagKey } from '../app-utils/release-flags'\nimport { PLUGIN_USAGE_METERS_DECLARED } from './first-party-plugins.generated'\n\n/** What the sweep tells a meter about one workspace's month. */\nexport interface PluginUsageMeterContext {\n  orgId: string\n  /** The workspace document, as the sweep read it for every decision. */\n  org: Readonly<Record<string, unknown>>\n  /** `YYYY-MM`, the month being measured. */\n  month: string\n  /**\n   * Whether the month has CLOSED. A closed month is the one an invoice is\n   * about; an open one is measured daily for the budget and never billed.\n   */\n  closed: boolean\n  /**\n   * The month's rollup as it stood before this run — for a stock meter, the\n   * last reading an earlier sweep stamped inside the month.\n   */\n  previous: Readonly<Record<string, unknown>>\n  /**\n   * A release flag's verdict for this workspace, resolved as the sweep\n   * resolves every flag it gates billing on: bucketed by workspace, with its\n   * overrides and its tier.\n   */\n  releaseFlagOn: (key: ReleaseFlagKey) => boolean\n}\n\n/** What a meter answers for one workspace's month. */\nexport interface PluginUsageMeterReading {\n  /**\n   * Written onto the month's rollup on every run, zeros included. A field the\n   * platform writes itself is never overwritten.\n   */\n  fields: Readonly<Record<string, unknown>>\n  /**\n   * Written only while the month is OPEN — a stock meter's period-end reading,\n   * which a closed sweep then bills from. Never written for a closed month,\n   * so a re-run of a closed month reads the same input every time.\n   */\n  periodEndFields?: Readonly<Record<string, unknown>>\n  /**\n   * Dollars that enter the month's billed figure. Rounded to cents per meter,\n   * like every plan-priced line beside it; 0 for a meter that bills nothing.\n   */\n  billedUsd: number\n  /**\n   * For a stock meter on a CLOSED month: `true` when the reading came from a\n   * period-end stamp taken inside the month. The rollup's `stockBasis` is\n   * `period-end` when any stock reading was.\n   */\n  periodEndBasis?: boolean\n}\n\n/** What a meter's close-out is told about one workspace's closed month. */\nexport interface PluginUsageMeterCloseContext extends PluginUsageMeterContext {\n  /**\n   * The workspace's Stripe customer, or `null` when it has none. Read only\n   * when asked, so a close-out with nothing to settle costs no read.\n   */\n  stripeCustomerId: () => Promise<string | null>\n}\n\n/** A plugin's meter in the monthly usage sweep. */\nexport interface PluginUsageMeter {\n  pluginId: string\n  /** As the plugin's `usageAxes` declaration names it under `meters`. */\n  id: string\n  measure: (context: PluginUsageMeterContext) => Promise<PluginUsageMeterReading>\n  /**\n   * Called once per workspace for a CLOSED month, every day the sweep runs,\n   * so a plugin that bills part of its usage itself can settle what is left\n   * of it. Idempotent by the plugin's own records; errors are logged.\n   */\n  closeMonth?: (context: PluginUsageMeterCloseContext) => Promise<void>\n}\n\nconst meters = new Map<string, PluginUsageMeter>()\n\nconst keyOf = (pluginId: string, id: string) => `${pluginId}:${id}`\n\n/**\n * Registers a meter. Idempotent per plugin and id: the same pair again\n * replaces the earlier registration, so a declarations module evaluated twice\n * measures once. A meter with no owner, no id or no `measure` throws.\n */\nexport function registerPluginUsageMeter(\n  meter: Omit<PluginUsageMeter, 'pluginId'> & { pluginId?: string },\n): void {\n  const pluginId = (getRegisteringPluginId() ?? meter.pluginId ?? '').trim()\n  const id = String(meter.id ?? '').trim()\n  if (!pluginId || !id) {\n    throw new Error('a usage meter needs a pluginId and an id')\n  }\n  if (typeof meter.measure !== 'function') {\n    throw new Error(`usage meter \"${keyOf(pluginId, id)}\" has no measure function`)\n  }\n  meters.set(keyOf(pluginId, id), {\n    pluginId,\n    id,\n    measure: meter.measure,\n    ...(typeof meter.closeMonth === 'function'\n      ? { closeMonth: meter.closeMonth }\n      : {}),\n  })\n}\n\n/**\n * Every registered meter, in the order the sweep runs them: declared meters in\n * catalog order, then any other in registration order. The order is fixed so\n * two processes write one workspace's rollup the same way.\n */\nexport function listPluginUsageMeters(): PluginUsageMeter[] {\n  const declared = PLUGIN_USAGE_METERS_DECLARED.map((one) =>\n    keyOf(one.pluginId, one.id),\n  )\n  const rank = (key: string) => {\n    const index = declared.indexOf(key)\n    return index === -1 ? Number.MAX_SAFE_INTEGER : index\n  }\n  return [...meters.entries()]\n    .map(([key, meter], sequence) => ({ key, meter, sequence }))\n    .sort((a, b) => rank(a.key) - rank(b.key) || a.sequence - b.sequence)\n    .map(({ meter }) => ({ ...meter }))\n}\n\n/**\n * Every DECLARED meter nothing registered, as `pluginId:id`. The sweep refuses\n * to report a workspace's month while this is not empty.\n */\nexport function unregisteredPluginUsageMeters(): string[] {\n  return PLUGIN_USAGE_METERS_DECLARED.map((one) =>\n    keyOf(one.pluginId, one.id),\n  ).filter((key) => !meters.has(key))\n}\n\n/** Test seam: forget every meter. */\nexport function resetPluginUsageMetersForTests(): void {\n  meters.clear()\n}\n"],"names":["getRegisteringPluginId","PLUGIN_USAGE_METERS_DECLARED","meters","Map","keyOf","pluginId","id","registerPluginUsageMeter","meter","trim","String","Error","measure","set","closeMonth","listPluginUsageMeters","declared","map","one","rank","key","index","indexOf","Number","MAX_SAFE_INTEGER","entries","sequence","sort","a","b","unregisteredPluginUsageMeters","filter","has","resetPluginUsageMetersForTests","clear"],"mappings":";AAAA;;;;;;;;;;;;;;;CAeC,GAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAkCC,GAED,SAASA,sBAAsB,QAAQ,qCAAiC;AAExE,SAASC,4BAA4B,QAAQ,qCAAiC;AA4E9E,MAAMC,SAAS,IAAIC;AAEnB,MAAMC,QAAQ,CAACC,UAAkBC,KAAe,GAAGD,SAAS,CAAC,EAAEC,IAAI;AAEnE;;;;CAIC,GACD,OAAO,SAASC,yBACdC,KAAiE;QAE/CR,MAAAA,yBACAQ;IADlB,MAAMH,WAAW,EAACL,QAAAA,0BAAAA,oCAAAA,0BAA4BQ,MAAMH,QAAQ,YAA1CL,OAA8C,IAAIS,IAAI;IACxE,MAAMH,KAAKI,QAAOF,YAAAA,MAAMF,EAAE,YAARE,YAAY,IAAIC,IAAI;IACtC,IAAI,CAACJ,YAAY,CAACC,IAAI;QACpB,MAAM,IAAIK,MAAM;IAClB;IACA,IAAI,OAAOH,MAAMI,OAAO,KAAK,YAAY;QACvC,MAAM,IAAID,MAAM,CAAC,aAAa,EAAEP,MAAMC,UAAUC,IAAI,yBAAyB,CAAC;IAChF;IACAJ,OAAOW,GAAG,CAACT,MAAMC,UAAUC,KAAK;QAC9BD;QACAC;QACAM,SAASJ,MAAMI,OAAO;OAClB,OAAOJ,MAAMM,UAAU,KAAK,aAC5B;QAAEA,YAAYN,MAAMM,UAAU;IAAC,IAC/B,CAAC;AAET;AAEA;;;;CAIC,GACD,OAAO,SAASC;IACd,MAAMC,WAAWf,6BAA6BgB,GAAG,CAAC,CAACC,MACjDd,MAAMc,IAAIb,QAAQ,EAAEa,IAAIZ,EAAE;IAE5B,MAAMa,OAAO,CAACC;QACZ,MAAMC,QAAQL,SAASM,OAAO,CAACF;QAC/B,OAAOC,UAAU,CAAC,IAAIE,OAAOC,gBAAgB,GAAGH;IAClD;IACA,OAAO;WAAInB,OAAOuB,OAAO;KAAG,CACzBR,GAAG,CAAC,CAAC,CAACG,KAAKZ,MAAM,EAAEkB,WAAc,CAAA;YAAEN;YAAKZ;YAAOkB;QAAS,CAAA,GACxDC,IAAI,CAAC,CAACC,GAAGC,IAAMV,KAAKS,EAAER,GAAG,IAAID,KAAKU,EAAET,GAAG,KAAKQ,EAAEF,QAAQ,GAAGG,EAAEH,QAAQ,EACnET,GAAG,CAAC,CAAC,EAAET,KAAK,EAAE,GAAM,aAAKA;AAC9B;AAEA;;;CAGC,GACD,OAAO,SAASsB;IACd,OAAO7B,6BAA6BgB,GAAG,CAAC,CAACC,MACvCd,MAAMc,IAAIb,QAAQ,EAAEa,IAAIZ,EAAE,GAC1ByB,MAAM,CAAC,CAACX,MAAQ,CAAClB,OAAO8B,GAAG,CAACZ;AAChC;AAEA,mCAAmC,GACnC,OAAO,SAASa;IACd/B,OAAOgC,KAAK;AACd"}

package/src/lib/plugin-manager/plugin-zones.d.ts

@@ -21,10 +21,9 @@
  * a slot id has always been an open string, so a plugin could already host a
  * zone of its own. What it could not do is say what that zone HANDS a widget.
  * The props had to be a type, the type had to be somewhere both sides import,
- * and "somewhere both sides import" was read as the core — which is how
- * `plugin-manager/commerce-zone-props.ts` and `plugin-manager/record-zone-props.ts`
- * came to spell out the commerce catalog and the record vocabulary of two
- * named plugins inside the platform.
+ * and "somewhere both sides import" was read as the core — which is how a
+ * named plugin's catalog or record vocabulary comes to be spelled out inside
+ * the platform.
  *
  * So the declaration moves to the plugin. A plugin defines a token for its
  * zone with {@link definePluginZone}, carrying the props type on the token,
@@ -36,7 +35,7 @@
  *
  * A zone token is `{ id }` and nothing else: `__props` is a phantom field that
  * never holds a value, so the props type is carried at the type level and
- * erased. That is the same trick the two type-only modules above use, and it
+ * erased. That is the same trick a type-only props module uses, and it
  * is load-bearing rather than tidy — AGL-3082 measured the zone catalog on the
  * published page's static graph, and a declaration that put a plugin's prop
  * SHAPES there would have made every published page carry the console's

package/src/lib/plugin-manager/plugin-zones.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../../../libs/aglyn/src/lib/plugin-manager/plugin-zones.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { getRegisteringPluginId } from '../app-utils/registering-plugin'\nimport {\n  definePluginServiceContract,\n  registerPluginService,\n  resolvePluginServices,\n} from './plugin-services'\n\n/**\n * A zone a plugin declares, and the props it hands each widget (AGL-3124).\n *\n * `CONSOLE_WIDGET_SLOTS` is the catalog of zones the console SHELL draws, and\n * a slot id has always been an open string, so a plugin could already host a\n * zone of its own. What it could not do is say what that zone HANDS a widget.\n * The props had to be a type, the type had to be somewhere both sides import,\n * and \"somewhere both sides import\" was read as the core — which is how\n * `plugin-manager/commerce-zone-props.ts` and `plugin-manager/record-zone-props.ts`\n * came to spell out the commerce catalog and the record vocabulary of two\n * named plugins inside the platform.\n *\n * So the declaration moves to the plugin. A plugin defines a token for its\n * zone with {@link definePluginZone}, carrying the props type on the token,\n * and registers it here with a label and the surface it is drawn on. A widget\n * author takes the props type off the token — `PluginZoneProps<typeof ZONE>`\n * — without the core ever naming a product, a deal or a lead.\n *\n * ## Nothing here reaches a published page\n *\n * A zone token is `{ id }` and nothing else: `__props` is a phantom field that\n * never holds a value, so the props type is carried at the type level and\n * erased. That is the same trick the two type-only modules above use, and it\n * is load-bearing rather than tidy — AGL-3082 measured the zone catalog on the\n * published page's static graph, and a declaration that put a plugin's prop\n * SHAPES there would have made every published page carry the console's\n * vocabulary. `plugin-zones.spec.ts` pins the token's own key set so a field\n * added to it later has to be a decision.\n *\n * This module is reached by its own subpath and is deliberately absent from\n * `plugin-manager/index.ts`, for the reason that barrel already states about\n * `plugin-figures`: what a published page does not need, it must not import.\n *\n * ## One zone id, one owner\n *\n * A zone is a position on a page somebody draws. Two plugins declaring the\n * same id would each believe they set what a widget there receives, and the\n * widget author would have no way to tell whose props arrived — so a second\n * plugin's declaration is refused naming both, and the incumbent keeps its\n * zone. The same plugin declaring again — a second surface, a hot reload —\n * replaces its own.\n */\n\n/**\n * A zone's identity, with the props it hands a widget carried at the type\n * level. `__props` never holds a value.\n */\nexport interface PluginZone<Props> {\n  readonly id: string\n  readonly __props?: Props\n}\n\n/** The props a zone hands each widget, read off its token. */\nexport type PluginZoneProps<Zone> = Zone extends PluginZone<infer Props>\n  ? Props\n  : never\n\n/**\n * A zone token. Pure: it allocates no registration and reads no registry, so\n * a plugin may define one at module scope and register it from its register\n * fn, where the loader's owner marker is set.\n */\nexport function definePluginZone<Props>(id: string): PluginZone<Props> {\n  const zoneId = id.trim()\n  if (!zoneId) throw new Error('a plugin zone needs an id')\n  return { id: zoneId }\n}\n\n/** Where a zone is drawn, which is what decides the gates around it. */\nexport type PluginZoneSurface = 'console' | 'besigner' | 'site'\n\nexport interface PluginZoneDeclaration<Props = unknown> {\n  zone: PluginZone<Props>\n  /** What the plugin's own manifest and the widget picker call the zone. */\n  label: string\n  /** The surface the zone is drawn on. */\n  surface: PluginZoneSurface\n  /**\n   * What a widget here may do, and what it may not — the sentence a widget\n   * author reads before writing one. Every zone in the core catalog carries\n   * the same distinction (a widget proposes, the host writes), and a plugin's\n   * zone owes its widgets the same statement.\n   */\n  description?: string\n  /**\n   * How the zone places its widgets. `stack`, the default, is one block of\n   * the page: its widgets are cards, spaced, and the block takes no room when\n   * nothing in it drew. `bare` adds no element of its own: every widget is one\n   * item of a layout the HOST draws — a button in a row of actions, a control\n   * beside a form's fields, a dialog that portals out of the page. A wrapper\n   * would put every button of a row into one column.\n   */\n  layout?: PluginZoneLayout\n}\n\n/** See {@link PluginZoneDeclaration.layout}. */\nexport type PluginZoneLayout = 'stack' | 'bare'\n\n/** A declaration with the plugin that made it. */\nexport type ResolvedPluginZone = PluginZoneDeclaration<unknown> & {\n  pluginId: string\n}\n\nexport const PLUGIN_ZONES = definePluginServiceContract<\n  PluginZoneDeclaration<never>\n>('core.zones', { multiple: true })\n\n/**\n * Declares a zone the registering plugin hosts. The owner is the loader's\n * marker when a register fn is running, else `options.pluginId`; with neither\n * the registration throws. A zone id another plugin declared throws naming\n * both.\n */\nexport function registerPluginZone<Props>(\n  declaration: PluginZoneDeclaration<Props>,\n  options?: { pluginId?: string },\n): void {\n  const key = declaration.zone?.id?.trim() ?? ''\n  if (!key) throw new Error('a plugin zone needs an id')\n  if (!declaration.label?.trim()) {\n    throw new Error(`plugin zone \"${key}\" needs a label`)\n  }\n  const pluginId = (getRegisteringPluginId() ?? options?.pluginId ?? '').trim()\n  const incumbent = resolvePluginServices(PLUGIN_ZONES).find(\n    (entry) => entry.key === key,\n  )\n  if (incumbent && pluginId && incumbent.pluginId !== pluginId) {\n    throw new Error(\n      `zone \"${key}\" is already declared by \"${incumbent.pluginId}\"; ` +\n        `refused \"${pluginId}\"`,\n    )\n  }\n  registerPluginService(\n    PLUGIN_ZONES,\n    declaration as unknown as PluginZoneDeclaration<never>,\n    {\n      ...(options?.pluginId ? { pluginId: options.pluginId } : {}),\n      key,\n    },\n  )\n}\n\n/** Every declared zone, with its owner, in registration order. */\nexport function listPluginZones(): ResolvedPluginZone[] {\n  return resolvePluginServices(PLUGIN_ZONES).map((entry) => ({\n    ...(entry.impl as unknown as PluginZoneDeclaration<unknown>),\n    pluginId: entry.pluginId,\n  }))\n}\n\n/** One declared zone by id, with its owner, or `null` when nobody declares it. */\nexport function pluginZone(zoneId: string): ResolvedPluginZone | null {\n  const key = zoneId.trim()\n  const entry = resolvePluginServices(PLUGIN_ZONES).find(\n    (one) => one.key === key,\n  )\n  return entry\n    ? {\n        ...(entry.impl as unknown as PluginZoneDeclaration<unknown>),\n        pluginId: entry.pluginId,\n      }\n    : null\n}\n\n/** The plugin that declared a zone, for attribution, or `undefined`. */\nexport function pluginIdForZone(zoneId: string): string | undefined {\n  return pluginZone(zoneId)?.pluginId\n}\n"],"names":["getRegisteringPluginId","definePluginServiceContract","registerPluginService","resolvePluginServices","definePluginZone","id","zoneId","trim","Error","PLUGIN_ZONES","multiple","registerPluginZone","declaration","options","key","zone","label","pluginId","incumbent","find","entry","listPluginZones","map","impl","pluginZone","one","pluginIdForZone"],"mappings":";AAAA;;;;;;;;;;;;;;;CAeC,GAED,SAASA,sBAAsB,QAAQ,qCAAiC;AACxE,SACEC,2BAA2B,EAC3BC,qBAAqB,EACrBC,qBAAqB,QAChB,uBAAmB;AA2D1B;;;;CAIC,GACD,OAAO,SAASC,iBAAwBC,EAAU;IAChD,MAAMC,SAASD,GAAGE,IAAI;IACtB,IAAI,CAACD,QAAQ,MAAM,IAAIE,MAAM;IAC7B,OAAO;QAAEH,IAAIC;IAAO;AACtB;AAqCA,OAAO,MAAMG,eAAeR,4BAE1B,cAAc;IAAES,UAAU;AAAK,GAAE;AAEnC;;;;;CAKC,GACD,OAAO,SAASC,mBACdC,WAAyC,EACzCC,OAA+B;cAObb,OAAAA;QALNY,sBAAAA,mBAEPA;IAFL,MAAME,eAAMF,oBAAAA,YAAYG,IAAI,sBAAhBH,uBAAAA,kBAAkBP,EAAE,qBAApBO,qBAAsBL,IAAI,qBAAM;IAC5C,IAAI,CAACO,KAAK,MAAM,IAAIN,MAAM;IAC1B,IAAI,GAACI,qBAAAA,YAAYI,KAAK,qBAAjBJ,mBAAmBL,IAAI,KAAI;QAC9B,MAAM,IAAIC,MAAM,CAAC,aAAa,EAAEM,IAAI,eAAe,CAAC;IACtD;IACA,MAAMG,WAAW,EAACjB,SAAAA,0BAAAA,oCAAAA,0BAA4Ba,2BAAAA,QAASI,QAAQ,YAA7CjB,QAAiD,IAAIO,IAAI;IAC3E,MAAMW,YAAYf,sBAAsBM,cAAcU,IAAI,CACxD,CAACC,QAAUA,MAAMN,GAAG,KAAKA;IAE3B,IAAII,aAAaD,YAAYC,UAAUD,QAAQ,KAAKA,UAAU;QAC5D,MAAM,IAAIT,MACR,CAAC,MAAM,EAAEM,IAAI,0BAA0B,EAAEI,UAAUD,QAAQ,CAAC,GAAG,CAAC,GAC9D,CAAC,SAAS,EAAEA,SAAS,CAAC,CAAC;IAE7B;IACAf,sBACEO,cACAG,aACA,aACMC,CAAAA,2BAAAA,QAASI,QAAQ,IAAG;QAAEA,UAAUJ,QAAQI,QAAQ;IAAC,IAAI,CAAC;QAC1DH;;AAGN;AAEA,gEAAgE,GAChE,OAAO,SAASO;IACd,OAAOlB,sBAAsBM,cAAca,GAAG,CAAC,CAACF,QAAW,aACrDA,MAAMG,IAAI;YACdN,UAAUG,MAAMH,QAAQ;;AAE5B;AAEA,gFAAgF,GAChF,OAAO,SAASO,WAAWlB,MAAc;IACvC,MAAMQ,MAAMR,OAAOC,IAAI;IACvB,MAAMa,QAAQjB,sBAAsBM,cAAcU,IAAI,CACpD,CAACM,MAAQA,IAAIX,GAAG,KAAKA;IAEvB,OAAOM,QACH,aACMA,MAAMG,IAAI;QACdN,UAAUG,MAAMH,QAAQ;SAE1B;AACN;AAEA,sEAAsE,GACtE,OAAO,SAASS,gBAAgBpB,MAAc;QACrCkB;IAAP,QAAOA,cAAAA,WAAWlB,4BAAXkB,YAAoBP,QAAQ;AACrC"}
+{"version":3,"sources":["../../../../../../libs/aglyn/src/lib/plugin-manager/plugin-zones.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { getRegisteringPluginId } from '../app-utils/registering-plugin'\nimport {\n  definePluginServiceContract,\n  registerPluginService,\n  resolvePluginServices,\n} from './plugin-services'\n\n/**\n * A zone a plugin declares, and the props it hands each widget (AGL-3124).\n *\n * `CONSOLE_WIDGET_SLOTS` is the catalog of zones the console SHELL draws, and\n * a slot id has always been an open string, so a plugin could already host a\n * zone of its own. What it could not do is say what that zone HANDS a widget.\n * The props had to be a type, the type had to be somewhere both sides import,\n * and \"somewhere both sides import\" was read as the core — which is how a\n * named plugin's catalog or record vocabulary comes to be spelled out inside\n * the platform.\n *\n * So the declaration moves to the plugin. A plugin defines a token for its\n * zone with {@link definePluginZone}, carrying the props type on the token,\n * and registers it here with a label and the surface it is drawn on. A widget\n * author takes the props type off the token — `PluginZoneProps<typeof ZONE>`\n * — without the core ever naming a product, a deal or a lead.\n *\n * ## Nothing here reaches a published page\n *\n * A zone token is `{ id }` and nothing else: `__props` is a phantom field that\n * never holds a value, so the props type is carried at the type level and\n * erased. That is the same trick a type-only props module uses, and it\n * is load-bearing rather than tidy — AGL-3082 measured the zone catalog on the\n * published page's static graph, and a declaration that put a plugin's prop\n * SHAPES there would have made every published page carry the console's\n * vocabulary. `plugin-zones.spec.ts` pins the token's own key set so a field\n * added to it later has to be a decision.\n *\n * This module is reached by its own subpath and is deliberately absent from\n * `plugin-manager/index.ts`, for the reason that barrel already states about\n * `plugin-figures`: what a published page does not need, it must not import.\n *\n * ## One zone id, one owner\n *\n * A zone is a position on a page somebody draws. Two plugins declaring the\n * same id would each believe they set what a widget there receives, and the\n * widget author would have no way to tell whose props arrived — so a second\n * plugin's declaration is refused naming both, and the incumbent keeps its\n * zone. The same plugin declaring again — a second surface, a hot reload —\n * replaces its own.\n */\n\n/**\n * A zone's identity, with the props it hands a widget carried at the type\n * level. `__props` never holds a value.\n */\nexport interface PluginZone<Props> {\n  readonly id: string\n  readonly __props?: Props\n}\n\n/** The props a zone hands each widget, read off its token. */\nexport type PluginZoneProps<Zone> = Zone extends PluginZone<infer Props>\n  ? Props\n  : never\n\n/**\n * A zone token. Pure: it allocates no registration and reads no registry, so\n * a plugin may define one at module scope and register it from its register\n * fn, where the loader's owner marker is set.\n */\nexport function definePluginZone<Props>(id: string): PluginZone<Props> {\n  const zoneId = id.trim()\n  if (!zoneId) throw new Error('a plugin zone needs an id')\n  return { id: zoneId }\n}\n\n/** Where a zone is drawn, which is what decides the gates around it. */\nexport type PluginZoneSurface = 'console' | 'besigner' | 'site'\n\nexport interface PluginZoneDeclaration<Props = unknown> {\n  zone: PluginZone<Props>\n  /** What the plugin's own manifest and the widget picker call the zone. */\n  label: string\n  /** The surface the zone is drawn on. */\n  surface: PluginZoneSurface\n  /**\n   * What a widget here may do, and what it may not — the sentence a widget\n   * author reads before writing one. Every zone in the core catalog carries\n   * the same distinction (a widget proposes, the host writes), and a plugin's\n   * zone owes its widgets the same statement.\n   */\n  description?: string\n  /**\n   * How the zone places its widgets. `stack`, the default, is one block of\n   * the page: its widgets are cards, spaced, and the block takes no room when\n   * nothing in it drew. `bare` adds no element of its own: every widget is one\n   * item of a layout the HOST draws — a button in a row of actions, a control\n   * beside a form's fields, a dialog that portals out of the page. A wrapper\n   * would put every button of a row into one column.\n   */\n  layout?: PluginZoneLayout\n}\n\n/** See {@link PluginZoneDeclaration.layout}. */\nexport type PluginZoneLayout = 'stack' | 'bare'\n\n/** A declaration with the plugin that made it. */\nexport type ResolvedPluginZone = PluginZoneDeclaration<unknown> & {\n  pluginId: string\n}\n\nexport const PLUGIN_ZONES = definePluginServiceContract<\n  PluginZoneDeclaration<never>\n>('core.zones', { multiple: true })\n\n/**\n * Declares a zone the registering plugin hosts. The owner is the loader's\n * marker when a register fn is running, else `options.pluginId`; with neither\n * the registration throws. A zone id another plugin declared throws naming\n * both.\n */\nexport function registerPluginZone<Props>(\n  declaration: PluginZoneDeclaration<Props>,\n  options?: { pluginId?: string },\n): void {\n  const key = declaration.zone?.id?.trim() ?? ''\n  if (!key) throw new Error('a plugin zone needs an id')\n  if (!declaration.label?.trim()) {\n    throw new Error(`plugin zone \"${key}\" needs a label`)\n  }\n  const pluginId = (getRegisteringPluginId() ?? options?.pluginId ?? '').trim()\n  const incumbent = resolvePluginServices(PLUGIN_ZONES).find(\n    (entry) => entry.key === key,\n  )\n  if (incumbent && pluginId && incumbent.pluginId !== pluginId) {\n    throw new Error(\n      `zone \"${key}\" is already declared by \"${incumbent.pluginId}\"; ` +\n        `refused \"${pluginId}\"`,\n    )\n  }\n  registerPluginService(\n    PLUGIN_ZONES,\n    declaration as unknown as PluginZoneDeclaration<never>,\n    {\n      ...(options?.pluginId ? { pluginId: options.pluginId } : {}),\n      key,\n    },\n  )\n}\n\n/** Every declared zone, with its owner, in registration order. */\nexport function listPluginZones(): ResolvedPluginZone[] {\n  return resolvePluginServices(PLUGIN_ZONES).map((entry) => ({\n    ...(entry.impl as unknown as PluginZoneDeclaration<unknown>),\n    pluginId: entry.pluginId,\n  }))\n}\n\n/** One declared zone by id, with its owner, or `null` when nobody declares it. */\nexport function pluginZone(zoneId: string): ResolvedPluginZone | null {\n  const key = zoneId.trim()\n  const entry = resolvePluginServices(PLUGIN_ZONES).find(\n    (one) => one.key === key,\n  )\n  return entry\n    ? {\n        ...(entry.impl as unknown as PluginZoneDeclaration<unknown>),\n        pluginId: entry.pluginId,\n      }\n    : null\n}\n\n/** The plugin that declared a zone, for attribution, or `undefined`. */\nexport function pluginIdForZone(zoneId: string): string | undefined {\n  return pluginZone(zoneId)?.pluginId\n}\n"],"names":["getRegisteringPluginId","definePluginServiceContract","registerPluginService","resolvePluginServices","definePluginZone","id","zoneId","trim","Error","PLUGIN_ZONES","multiple","registerPluginZone","declaration","options","key","zone","label","pluginId","incumbent","find","entry","listPluginZones","map","impl","pluginZone","one","pluginIdForZone"],"mappings":";AAAA;;;;;;;;;;;;;;;CAeC,GAED,SAASA,sBAAsB,QAAQ,qCAAiC;AACxE,SACEC,2BAA2B,EAC3BC,qBAAqB,EACrBC,qBAAqB,QAChB,uBAAmB;AA0D1B;;;;CAIC,GACD,OAAO,SAASC,iBAAwBC,EAAU;IAChD,MAAMC,SAASD,GAAGE,IAAI;IACtB,IAAI,CAACD,QAAQ,MAAM,IAAIE,MAAM;IAC7B,OAAO;QAAEH,IAAIC;IAAO;AACtB;AAqCA,OAAO,MAAMG,eAAeR,4BAE1B,cAAc;IAAES,UAAU;AAAK,GAAE;AAEnC;;;;;CAKC,GACD,OAAO,SAASC,mBACdC,WAAyC,EACzCC,OAA+B;cAObb,OAAAA;QALNY,sBAAAA,mBAEPA;IAFL,MAAME,eAAMF,oBAAAA,YAAYG,IAAI,sBAAhBH,uBAAAA,kBAAkBP,EAAE,qBAApBO,qBAAsBL,IAAI,qBAAM;IAC5C,IAAI,CAACO,KAAK,MAAM,IAAIN,MAAM;IAC1B,IAAI,GAACI,qBAAAA,YAAYI,KAAK,qBAAjBJ,mBAAmBL,IAAI,KAAI;QAC9B,MAAM,IAAIC,MAAM,CAAC,aAAa,EAAEM,IAAI,eAAe,CAAC;IACtD;IACA,MAAMG,WAAW,EAACjB,SAAAA,0BAAAA,oCAAAA,0BAA4Ba,2BAAAA,QAASI,QAAQ,YAA7CjB,QAAiD,IAAIO,IAAI;IAC3E,MAAMW,YAAYf,sBAAsBM,cAAcU,IAAI,CACxD,CAACC,QAAUA,MAAMN,GAAG,KAAKA;IAE3B,IAAII,aAAaD,YAAYC,UAAUD,QAAQ,KAAKA,UAAU;QAC5D,MAAM,IAAIT,MACR,CAAC,MAAM,EAAEM,IAAI,0BAA0B,EAAEI,UAAUD,QAAQ,CAAC,GAAG,CAAC,GAC9D,CAAC,SAAS,EAAEA,SAAS,CAAC,CAAC;IAE7B;IACAf,sBACEO,cACAG,aACA,aACMC,CAAAA,2BAAAA,QAASI,QAAQ,IAAG;QAAEA,UAAUJ,QAAQI,QAAQ;IAAC,IAAI,CAAC;QAC1DH;;AAGN;AAEA,gEAAgE,GAChE,OAAO,SAASO;IACd,OAAOlB,sBAAsBM,cAAca,GAAG,CAAC,CAACF,QAAW,aACrDA,MAAMG,IAAI;YACdN,UAAUG,MAAMH,QAAQ;;AAE5B;AAEA,gFAAgF,GAChF,OAAO,SAASO,WAAWlB,MAAc;IACvC,MAAMQ,MAAMR,OAAOC,IAAI;IACvB,MAAMa,QAAQjB,sBAAsBM,cAAcU,IAAI,CACpD,CAACM,MAAQA,IAAIX,GAAG,KAAKA;IAEvB,OAAOM,QACH,aACMA,MAAMG,IAAI;QACdN,UAAUG,MAAMH,QAAQ;SAE1B;AACN;AAEA,sEAAsE,GACtE,OAAO,SAASS,gBAAgBpB,MAAc;QACrCkB;IAAP,QAAOA,cAAAA,WAAWlB,4BAAXkB,YAAoBP,QAAQ;AACrC"}

package/src/lib/plugin-manager/realm-host-aglyn.generated.js

@@ -79,6 +79,7 @@ export const AGLYN_HOST_SURFACE = Object.freeze({
     FieldComponentType: m10.FieldComponentType,
     FieldValidatorType: m10.FieldValidatorType,
     LinealDirectiveFlag: m10.LinealDirectiveFlag,
+    CONSOLE_SEARCH_LOAD_POINT: m11.CONSOLE_SEARCH_LOAD_POINT,
     CONSOLE_STAFF_WIDGET_SLOTS: m11.CONSOLE_STAFF_WIDGET_SLOTS,
     CONSOLE_WIDGET_SLOTS: m11.CONSOLE_WIDGET_SLOTS,
     MUI_BUNDLE_ID: m11.MUI_BUNDLE_ID,
@@ -89,6 +90,7 @@ export const AGLYN_HOST_SURFACE = Object.freeze({
     listConsoleNavItems: m11.listConsoleNavItems,
     listConsoleOrgNavItems: m11.listConsoleOrgNavItems,
     listConsoleProviders: m11.listConsoleProviders,
+    listConsoleSearchSources: m11.listConsoleSearchSources,
     listConsoleStaffPages: m11.listConsoleStaffPages,
     listConsoleThemePresets: m11.listConsoleThemePresets,
     listConsoleWidgets: m11.listConsoleWidgets,

package/src/lib/plugin-manager/realm-host-aglyn.generated.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../../../libs/aglyn/src/lib/plugin-manager/realm-host-aglyn.generated.ts"],"sourcesContent":["/**\n * GENERATED FILE — do not edit. Regenerate with:\n *   node tools/scripts/generate-realm-host-exports.mjs\n *\n * The realm plugin surface of `@aglyn/aglyn` (AGL-3392): what a signed\n * bundle reads from core. Imported only by the lazily loaded host module.\n */\n/* eslint-disable */\n\nimport * as m0 from \"../aglyn\"\nimport * as m1 from \"../app-utils/binding-tokens\"\nimport * as m2 from \"../app-utils/enabled-plugins-context\"\nimport * as m3 from \"../app-utils/functions\"\nimport * as m4 from \"../app-utils/node-identity\"\nimport * as m5 from \"../app-utils/screen-link-context-value\"\nimport * as m6 from \"../app-utils/site-context\"\nimport * as m7 from \"../app-utils/variables\"\nimport * as m8 from \"../foundation/constants/components\"\nimport * as m9 from \"../foundation/constants/shared\"\nimport * as m10 from \"../foundation/definitions/components.types\"\nimport * as m11 from \"./feature-plugins\"\nimport * as m12 from \"../types/nodes\"\n\nexport const AGLYN_HOST_SURFACE: Readonly<Record<string, unknown>> = Object.freeze({\n  Aglyn: m0.Aglyn,\n  aglyn: m0.aglyn,\n  canvas: m0.canvas,\n  components: m0.components,\n  emitter: m0.emitter,\n  logger: m0.logger,\n  plugins: m0.plugins,\n  FUNCTION_TOKEN_PATTERN: m1.FUNCTION_TOKEN_PATTERN,\n  MISSING_BINDING_LABEL: m1.MISSING_BINDING_LABEL,\n  NAME_TOKEN_PATTERN: m1.NAME_TOKEN_PATTERN,\n  VARIABLE_ID_TOKEN_PATTERN: m1.VARIABLE_ID_TOKEN_PATTERN,\n  bindingTokenNeedsDeep: m1.bindingTokenNeedsDeep,\n  displayBindingTokens: m1.displayBindingTokens,\n  editableBindingTokens: m1.editableBindingTokens,\n  formatFunctionIdToken: m1.formatFunctionIdToken,\n  formatVariableIdToken: m1.formatVariableIdToken,\n  keyById: m1.keyById,\n  nodesReferenceBinding: m1.nodesReferenceBinding,\n  normalizeBindingTokens: m1.normalizeBindingTokens,\n  rewriteBindingTokensDeep: m1.rewriteBindingTokensDeep,\n  textReferencesBinding: m1.textReferencesBinding,\n  CATEGORY_REQUIRED_CAPABILITY: m2.CATEGORY_REQUIRED_CAPABILITY,\n  EnabledPluginsContext: m2.EnabledPluginsContext,\n  isCategoryCapabilityEnabled: m2.isCategoryCapabilityEnabled,\n  isFromEnabledPlugin: m2.isFromEnabledPlugin,\n  isSwitchedOffForRenderedSite: m2.isSwitchedOffForRenderedSite,\n  useEnabledPlugins: m2.useEnabledPlugins,\n  FUNCTION_BUILTIN_NAMES: m3.FUNCTION_BUILTIN_NAMES,\n  FUNCTION_MAX_OPERATIONS: m3.FUNCTION_MAX_OPERATIONS,\n  evaluateExpression: m3.evaluateExpression,\n  evaluateHostFunction: m3.evaluateHostFunction,\n  expressionIdentifiers: m3.expressionIdentifiers,\n  formatFunctionParameterOptions: m3.formatFunctionParameterOptions,\n  functionReferencedNames: m3.functionReferencedNames,\n  parseFunctionParameterOptions: m3.parseFunctionParameterOptions,\n  NodeIdentityContext: m4.NodeIdentityContext,\n  useNodeId: m4.useNodeId,\n  ScreenLinkContext: m5.ScreenLinkContext,\n  PREVIEW_REFUSED_STATUS: m6.PREVIEW_REFUSED_STATUS,\n  PREVIEW_WRITE_BLOCKED_EVENT: m6.PREVIEW_WRITE_BLOCKED_EVENT,\n  SiteContext: m6.SiteContext,\n  isPreviewRefusal: m6.isPreviewRefusal,\n  useSite: m6.useSite,\n  useSiteFetch: m6.useSiteFetch,\n  HOST_VARIABLE_TYPE_LABELS: m7.HOST_VARIABLE_TYPE_LABELS,\n  VARIABLE_NAME_PATTERN: m7.VARIABLE_NAME_PATTERN,\n  attachFunctionDefinitions: m7.attachFunctionDefinitions,\n  formatVariableValue: m7.formatVariableValue,\n  functionGlobals: m7.functionGlobals,\n  hasBindings: m7.hasBindings,\n  resolveBindings: m7.resolveBindings,\n  resolveNodesBindings: m7.resolveNodesBindings,\n  COMPONENT_CATEGORY_ORDER: m8.COMPONENT_CATEGORY_ORDER,\n  ComponentCategory: m8.ComponentCategory,\n  REUSABLE_COMPONENT_CATEGORY: m8.REUSABLE_COMPONENT_CATEGORY,\n  REUSABLE_EMAIL_BLOCK_CATEGORY: m8.REUSABLE_EMAIL_BLOCK_CATEGORY,\n  FEATURE_FLAG: m9.FEATURE_FLAG,\n  RICH_TEXT_COMMANDS: m9.RICH_TEXT_COMMANDS,\n  FieldComponentType: m10.FieldComponentType,\n  FieldValidatorType: m10.FieldValidatorType,\n  LinealDirectiveFlag: m10.LinealDirectiveFlag,\n  CONSOLE_STAFF_WIDGET_SLOTS: m11.CONSOLE_STAFF_WIDGET_SLOTS,\n  CONSOLE_WIDGET_SLOTS: m11.CONSOLE_WIDGET_SLOTS,\n  MUI_BUNDLE_ID: m11.MUI_BUNDLE_ID,\n  THEME_PRESETS_LOAD_POINT: m11.THEME_PRESETS_LOAD_POINT,\n  defineUiFeatureBundle: m11.defineUiFeatureBundle,\n  isConsoleStaffWidgetSlot: m11.isConsoleStaffWidgetSlot,\n  listConsoleExtensions: m11.listConsoleExtensions,\n  listConsoleNavItems: m11.listConsoleNavItems,\n  listConsoleOrgNavItems: m11.listConsoleOrgNavItems,\n  listConsoleProviders: m11.listConsoleProviders,\n  listConsoleStaffPages: m11.listConsoleStaffPages,\n  listConsoleThemePresets: m11.listConsoleThemePresets,\n  listConsoleWidgets: m11.listConsoleWidgets,\n  registerConsoleExtension: m11.registerConsoleExtension,\n  resolveConsoleOrgPluginPage: m11.resolveConsoleOrgPluginPage,\n  resolveConsolePluginPage: m11.resolveConsolePluginPage,\n  resolveConsoleStaffPage: m11.resolveConsoleStaffPage,\n  unregisterConsoleExtension: m11.unregisterConsoleExtension,\n  NodeType: m12.NodeType,\n})\n"],"names":["m0","m1","m2","m3","m4","m5","m6","m7","m8","m9","m10","m11","m12","AGLYN_HOST_SURFACE","Object","freeze","Aglyn","aglyn","canvas","components","emitter","logger","plugins","FUNCTION_TOKEN_PATTERN","MISSING_BINDING_LABEL","NAME_TOKEN_PATTERN","VARIABLE_ID_TOKEN_PATTERN","bindingTokenNeedsDeep","displayBindingTokens","editableBindingTokens","formatFunctionIdToken","formatVariableIdToken","keyById","nodesReferenceBinding","normalizeBindingTokens","rewriteBindingTokensDeep","textReferencesBinding","CATEGORY_REQUIRED_CAPABILITY","EnabledPluginsContext","isCategoryCapabilityEnabled","isFromEnabledPlugin","isSwitchedOffForRenderedSite","useEnabledPlugins","FUNCTION_BUILTIN_NAMES","FUNCTION_MAX_OPERATIONS","evaluateExpression","evaluateHostFunction","expressionIdentifiers","formatFunctionParameterOptions","functionReferencedNames","parseFunctionParameterOptions","NodeIdentityContext","useNodeId","ScreenLinkContext","PREVIEW_REFUSED_STATUS","PREVIEW_WRITE_BLOCKED_EVENT","SiteContext","isPreviewRefusal","useSite","useSiteFetch","HOST_VARIABLE_TYPE_LABELS","VARIABLE_NAME_PATTERN","attachFunctionDefinitions","formatVariableValue","functionGlobals","hasBindings","resolveBindings","resolveNodesBindings","COMPONENT_CATEGORY_ORDER","ComponentCategory","REUSABLE_COMPONENT_CATEGORY","REUSABLE_EMAIL_BLOCK_CATEGORY","FEATURE_FLAG","RICH_TEXT_COMMANDS","FieldComponentType","FieldValidatorType","LinealDirectiveFlag","CONSOLE_STAFF_WIDGET_SLOTS","CONSOLE_WIDGET_SLOTS","MUI_BUNDLE_ID","THEME_PRESETS_LOAD_POINT","defineUiFeatureBundle","isConsoleStaffWidgetSlot","listConsoleExtensions","listConsoleNavItems","listConsoleOrgNavItems","listConsoleProviders","listConsoleStaffPages","listConsoleThemePresets","listConsoleWidgets","registerConsoleExtension","resolveConsoleOrgPluginPage","resolveConsolePluginPage","resolveConsoleStaffPage","unregisterConsoleExtension","NodeType"],"mappings":"AAAA;;;;;;CAMC,GACD,kBAAkB,GAElB,YAAYA,QAAQ,cAAU;AAC9B,YAAYC,QAAQ,iCAA6B;AACjD,YAAYC,QAAQ,0CAAsC;AAC1D,YAAYC,QAAQ,4BAAwB;AAC5C,YAAYC,QAAQ,gCAA4B;AAChD,YAAYC,QAAQ,4CAAwC;AAC5D,YAAYC,QAAQ,+BAA2B;AAC/C,YAAYC,QAAQ,4BAAwB;AAC5C,YAAYC,QAAQ,wCAAoC;AACxD,YAAYC,QAAQ,oCAAgC;AACpD,YAAYC,SAAS,gDAA4C;AACjE,YAAYC,SAAS,uBAAmB;AACxC,YAAYC,SAAS,oBAAgB;AAErC,OAAO,MAAMC,qBAAwDC,OAAOC,MAAM,CAAC;IACjFC,OAAOhB,GAAGgB,KAAK;IACfC,OAAOjB,GAAGiB,KAAK;IACfC,QAAQlB,GAAGkB,MAAM;IACjBC,YAAYnB,GAAGmB,UAAU;IACzBC,SAASpB,GAAGoB,OAAO;IACnBC,QAAQrB,GAAGqB,MAAM;IACjBC,SAAStB,GAAGsB,OAAO;IACnBC,wBAAwBtB,GAAGsB,sBAAsB;IACjDC,uBAAuBvB,GAAGuB,qBAAqB;IAC/CC,oBAAoBxB,GAAGwB,kBAAkB;IACzCC,2BAA2BzB,GAAGyB,yBAAyB;IACvDC,uBAAuB1B,GAAG0B,qBAAqB;IAC/CC,sBAAsB3B,GAAG2B,oBAAoB;IAC7CC,uBAAuB5B,GAAG4B,qBAAqB;IAC/CC,uBAAuB7B,GAAG6B,qBAAqB;IAC/CC,uBAAuB9B,GAAG8B,qBAAqB;IAC/CC,SAAS/B,GAAG+B,OAAO;IACnBC,uBAAuBhC,GAAGgC,qBAAqB;IAC/CC,wBAAwBjC,GAAGiC,sBAAsB;IACjDC,0BAA0BlC,GAAGkC,wBAAwB;IACrDC,uBAAuBnC,GAAGmC,qBAAqB;IAC/CC,8BAA8BnC,GAAGmC,4BAA4B;IAC7DC,uBAAuBpC,GAAGoC,qBAAqB;IAC/CC,6BAA6BrC,GAAGqC,2BAA2B;IAC3DC,qBAAqBtC,GAAGsC,mBAAmB;IAC3CC,8BAA8BvC,GAAGuC,4BAA4B;IAC7DC,mBAAmBxC,GAAGwC,iBAAiB;IACvCC,wBAAwBxC,GAAGwC,sBAAsB;IACjDC,yBAAyBzC,GAAGyC,uBAAuB;IACnDC,oBAAoB1C,GAAG0C,kBAAkB;IACzCC,sBAAsB3C,GAAG2C,oBAAoB;IAC7CC,uBAAuB5C,GAAG4C,qBAAqB;IAC/CC,gCAAgC7C,GAAG6C,8BAA8B;IACjEC,yBAAyB9C,GAAG8C,uBAAuB;IACnDC,+BAA+B/C,GAAG+C,6BAA6B;IAC/DC,qBAAqB/C,GAAG+C,mBAAmB;IAC3CC,WAAWhD,GAAGgD,SAAS;IACvBC,mBAAmBhD,GAAGgD,iBAAiB;IACvCC,wBAAwBhD,GAAGgD,sBAAsB;IACjDC,6BAA6BjD,GAAGiD,2BAA2B;IAC3DC,aAAalD,GAAGkD,WAAW;IAC3BC,kBAAkBnD,GAAGmD,gBAAgB;IACrCC,SAASpD,GAAGoD,OAAO;IACnBC,cAAcrD,GAAGqD,YAAY;IAC7BC,2BAA2BrD,GAAGqD,yBAAyB;IACvDC,uBAAuBtD,GAAGsD,qBAAqB;IAC/CC,2BAA2BvD,GAAGuD,yBAAyB;IACvDC,qBAAqBxD,GAAGwD,mBAAmB;IAC3CC,iBAAiBzD,GAAGyD,eAAe;IACnCC,aAAa1D,GAAG0D,WAAW;IAC3BC,iBAAiB3D,GAAG2D,eAAe;IACnCC,sBAAsB5D,GAAG4D,oBAAoB;IAC7CC,0BAA0B5D,GAAG4D,wBAAwB;IACrDC,mBAAmB7D,GAAG6D,iBAAiB;IACvCC,6BAA6B9D,GAAG8D,2BAA2B;IAC3DC,+BAA+B/D,GAAG+D,6BAA6B;IAC/DC,cAAc/D,GAAG+D,YAAY;IAC7BC,oBAAoBhE,GAAGgE,kBAAkB;IACzCC,oBAAoBhE,IAAIgE,kBAAkB;IAC1CC,oBAAoBjE,IAAIiE,kBAAkB;IAC1CC,qBAAqBlE,IAAIkE,mBAAmB;IAC5CC,4BAA4BlE,IAAIkE,0BAA0B;IAC1DC,sBAAsBnE,IAAImE,oBAAoB;IAC9CC,eAAepE,IAAIoE,aAAa;IAChCC,0BAA0BrE,IAAIqE,wBAAwB;IACtDC,uBAAuBtE,IAAIsE,qBAAqB;IAChDC,0BAA0BvE,IAAIuE,wBAAwB;IACtDC,uBAAuBxE,IAAIwE,qBAAqB;IAChDC,qBAAqBzE,IAAIyE,mBAAmB;IAC5CC,wBAAwB1E,IAAI0E,sBAAsB;IAClDC,sBAAsB3E,IAAI2E,oBAAoB;IAC9CC,uBAAuB5E,IAAI4E,qBAAqB;IAChDC,yBAAyB7E,IAAI6E,uBAAuB;IACpDC,oBAAoB9E,IAAI8E,kBAAkB;IAC1CC,0BAA0B/E,IAAI+E,wBAAwB;IACtDC,6BAA6BhF,IAAIgF,2BAA2B;IAC5DC,0BAA0BjF,IAAIiF,wBAAwB;IACtDC,yBAAyBlF,IAAIkF,uBAAuB;IACpDC,4BAA4BnF,IAAImF,0BAA0B;IAC1DC,UAAUnF,IAAImF,QAAQ;AACxB,GAAE"}
+{"version":3,"sources":["../../../../../../libs/aglyn/src/lib/plugin-manager/realm-host-aglyn.generated.ts"],"sourcesContent":["/**\n * GENERATED FILE — do not edit. Regenerate with:\n *   node tools/scripts/generate-realm-host-exports.mjs\n *\n * The realm plugin surface of `@aglyn/aglyn` (AGL-3392): what a signed\n * bundle reads from core. Imported only by the lazily loaded host module.\n */\n/* eslint-disable */\n\nimport * as m0 from \"../aglyn\"\nimport * as m1 from \"../app-utils/binding-tokens\"\nimport * as m2 from \"../app-utils/enabled-plugins-context\"\nimport * as m3 from \"../app-utils/functions\"\nimport * as m4 from \"../app-utils/node-identity\"\nimport * as m5 from \"../app-utils/screen-link-context-value\"\nimport * as m6 from \"../app-utils/site-context\"\nimport * as m7 from \"../app-utils/variables\"\nimport * as m8 from \"../foundation/constants/components\"\nimport * as m9 from \"../foundation/constants/shared\"\nimport * as m10 from \"../foundation/definitions/components.types\"\nimport * as m11 from \"./feature-plugins\"\nimport * as m12 from \"../types/nodes\"\n\nexport const AGLYN_HOST_SURFACE: Readonly<Record<string, unknown>> = Object.freeze({\n  Aglyn: m0.Aglyn,\n  aglyn: m0.aglyn,\n  canvas: m0.canvas,\n  components: m0.components,\n  emitter: m0.emitter,\n  logger: m0.logger,\n  plugins: m0.plugins,\n  FUNCTION_TOKEN_PATTERN: m1.FUNCTION_TOKEN_PATTERN,\n  MISSING_BINDING_LABEL: m1.MISSING_BINDING_LABEL,\n  NAME_TOKEN_PATTERN: m1.NAME_TOKEN_PATTERN,\n  VARIABLE_ID_TOKEN_PATTERN: m1.VARIABLE_ID_TOKEN_PATTERN,\n  bindingTokenNeedsDeep: m1.bindingTokenNeedsDeep,\n  displayBindingTokens: m1.displayBindingTokens,\n  editableBindingTokens: m1.editableBindingTokens,\n  formatFunctionIdToken: m1.formatFunctionIdToken,\n  formatVariableIdToken: m1.formatVariableIdToken,\n  keyById: m1.keyById,\n  nodesReferenceBinding: m1.nodesReferenceBinding,\n  normalizeBindingTokens: m1.normalizeBindingTokens,\n  rewriteBindingTokensDeep: m1.rewriteBindingTokensDeep,\n  textReferencesBinding: m1.textReferencesBinding,\n  CATEGORY_REQUIRED_CAPABILITY: m2.CATEGORY_REQUIRED_CAPABILITY,\n  EnabledPluginsContext: m2.EnabledPluginsContext,\n  isCategoryCapabilityEnabled: m2.isCategoryCapabilityEnabled,\n  isFromEnabledPlugin: m2.isFromEnabledPlugin,\n  isSwitchedOffForRenderedSite: m2.isSwitchedOffForRenderedSite,\n  useEnabledPlugins: m2.useEnabledPlugins,\n  FUNCTION_BUILTIN_NAMES: m3.FUNCTION_BUILTIN_NAMES,\n  FUNCTION_MAX_OPERATIONS: m3.FUNCTION_MAX_OPERATIONS,\n  evaluateExpression: m3.evaluateExpression,\n  evaluateHostFunction: m3.evaluateHostFunction,\n  expressionIdentifiers: m3.expressionIdentifiers,\n  formatFunctionParameterOptions: m3.formatFunctionParameterOptions,\n  functionReferencedNames: m3.functionReferencedNames,\n  parseFunctionParameterOptions: m3.parseFunctionParameterOptions,\n  NodeIdentityContext: m4.NodeIdentityContext,\n  useNodeId: m4.useNodeId,\n  ScreenLinkContext: m5.ScreenLinkContext,\n  PREVIEW_REFUSED_STATUS: m6.PREVIEW_REFUSED_STATUS,\n  PREVIEW_WRITE_BLOCKED_EVENT: m6.PREVIEW_WRITE_BLOCKED_EVENT,\n  SiteContext: m6.SiteContext,\n  isPreviewRefusal: m6.isPreviewRefusal,\n  useSite: m6.useSite,\n  useSiteFetch: m6.useSiteFetch,\n  HOST_VARIABLE_TYPE_LABELS: m7.HOST_VARIABLE_TYPE_LABELS,\n  VARIABLE_NAME_PATTERN: m7.VARIABLE_NAME_PATTERN,\n  attachFunctionDefinitions: m7.attachFunctionDefinitions,\n  formatVariableValue: m7.formatVariableValue,\n  functionGlobals: m7.functionGlobals,\n  hasBindings: m7.hasBindings,\n  resolveBindings: m7.resolveBindings,\n  resolveNodesBindings: m7.resolveNodesBindings,\n  COMPONENT_CATEGORY_ORDER: m8.COMPONENT_CATEGORY_ORDER,\n  ComponentCategory: m8.ComponentCategory,\n  REUSABLE_COMPONENT_CATEGORY: m8.REUSABLE_COMPONENT_CATEGORY,\n  REUSABLE_EMAIL_BLOCK_CATEGORY: m8.REUSABLE_EMAIL_BLOCK_CATEGORY,\n  FEATURE_FLAG: m9.FEATURE_FLAG,\n  RICH_TEXT_COMMANDS: m9.RICH_TEXT_COMMANDS,\n  FieldComponentType: m10.FieldComponentType,\n  FieldValidatorType: m10.FieldValidatorType,\n  LinealDirectiveFlag: m10.LinealDirectiveFlag,\n  CONSOLE_SEARCH_LOAD_POINT: m11.CONSOLE_SEARCH_LOAD_POINT,\n  CONSOLE_STAFF_WIDGET_SLOTS: m11.CONSOLE_STAFF_WIDGET_SLOTS,\n  CONSOLE_WIDGET_SLOTS: m11.CONSOLE_WIDGET_SLOTS,\n  MUI_BUNDLE_ID: m11.MUI_BUNDLE_ID,\n  THEME_PRESETS_LOAD_POINT: m11.THEME_PRESETS_LOAD_POINT,\n  defineUiFeatureBundle: m11.defineUiFeatureBundle,\n  isConsoleStaffWidgetSlot: m11.isConsoleStaffWidgetSlot,\n  listConsoleExtensions: m11.listConsoleExtensions,\n  listConsoleNavItems: m11.listConsoleNavItems,\n  listConsoleOrgNavItems: m11.listConsoleOrgNavItems,\n  listConsoleProviders: m11.listConsoleProviders,\n  listConsoleSearchSources: m11.listConsoleSearchSources,\n  listConsoleStaffPages: m11.listConsoleStaffPages,\n  listConsoleThemePresets: m11.listConsoleThemePresets,\n  listConsoleWidgets: m11.listConsoleWidgets,\n  registerConsoleExtension: m11.registerConsoleExtension,\n  resolveConsoleOrgPluginPage: m11.resolveConsoleOrgPluginPage,\n  resolveConsolePluginPage: m11.resolveConsolePluginPage,\n  resolveConsoleStaffPage: m11.resolveConsoleStaffPage,\n  unregisterConsoleExtension: m11.unregisterConsoleExtension,\n  NodeType: m12.NodeType,\n})\n"],"names":["m0","m1","m2","m3","m4","m5","m6","m7","m8","m9","m10","m11","m12","AGLYN_HOST_SURFACE","Object","freeze","Aglyn","aglyn","canvas","components","emitter","logger","plugins","FUNCTION_TOKEN_PATTERN","MISSING_BINDING_LABEL","NAME_TOKEN_PATTERN","VARIABLE_ID_TOKEN_PATTERN","bindingTokenNeedsDeep","displayBindingTokens","editableBindingTokens","formatFunctionIdToken","formatVariableIdToken","keyById","nodesReferenceBinding","normalizeBindingTokens","rewriteBindingTokensDeep","textReferencesBinding","CATEGORY_REQUIRED_CAPABILITY","EnabledPluginsContext","isCategoryCapabilityEnabled","isFromEnabledPlugin","isSwitchedOffForRenderedSite","useEnabledPlugins","FUNCTION_BUILTIN_NAMES","FUNCTION_MAX_OPERATIONS","evaluateExpression","evaluateHostFunction","expressionIdentifiers","formatFunctionParameterOptions","functionReferencedNames","parseFunctionParameterOptions","NodeIdentityContext","useNodeId","ScreenLinkContext","PREVIEW_REFUSED_STATUS","PREVIEW_WRITE_BLOCKED_EVENT","SiteContext","isPreviewRefusal","useSite","useSiteFetch","HOST_VARIABLE_TYPE_LABELS","VARIABLE_NAME_PATTERN","attachFunctionDefinitions","formatVariableValue","functionGlobals","hasBindings","resolveBindings","resolveNodesBindings","COMPONENT_CATEGORY_ORDER","ComponentCategory","REUSABLE_COMPONENT_CATEGORY","REUSABLE_EMAIL_BLOCK_CATEGORY","FEATURE_FLAG","RICH_TEXT_COMMANDS","FieldComponentType","FieldValidatorType","LinealDirectiveFlag","CONSOLE_SEARCH_LOAD_POINT","CONSOLE_STAFF_WIDGET_SLOTS","CONSOLE_WIDGET_SLOTS","MUI_BUNDLE_ID","THEME_PRESETS_LOAD_POINT","defineUiFeatureBundle","isConsoleStaffWidgetSlot","listConsoleExtensions","listConsoleNavItems","listConsoleOrgNavItems","listConsoleProviders","listConsoleSearchSources","listConsoleStaffPages","listConsoleThemePresets","listConsoleWidgets","registerConsoleExtension","resolveConsoleOrgPluginPage","resolveConsolePluginPage","resolveConsoleStaffPage","unregisterConsoleExtension","NodeType"],"mappings":"AAAA;;;;;;CAMC,GACD,kBAAkB,GAElB,YAAYA,QAAQ,cAAU;AAC9B,YAAYC,QAAQ,iCAA6B;AACjD,YAAYC,QAAQ,0CAAsC;AAC1D,YAAYC,QAAQ,4BAAwB;AAC5C,YAAYC,QAAQ,gCAA4B;AAChD,YAAYC,QAAQ,4CAAwC;AAC5D,YAAYC,QAAQ,+BAA2B;AAC/C,YAAYC,QAAQ,4BAAwB;AAC5C,YAAYC,QAAQ,wCAAoC;AACxD,YAAYC,QAAQ,oCAAgC;AACpD,YAAYC,SAAS,gDAA4C;AACjE,YAAYC,SAAS,uBAAmB;AACxC,YAAYC,SAAS,oBAAgB;AAErC,OAAO,MAAMC,qBAAwDC,OAAOC,MAAM,CAAC;IACjFC,OAAOhB,GAAGgB,KAAK;IACfC,OAAOjB,GAAGiB,KAAK;IACfC,QAAQlB,GAAGkB,MAAM;IACjBC,YAAYnB,GAAGmB,UAAU;IACzBC,SAASpB,GAAGoB,OAAO;IACnBC,QAAQrB,GAAGqB,MAAM;IACjBC,SAAStB,GAAGsB,OAAO;IACnBC,wBAAwBtB,GAAGsB,sBAAsB;IACjDC,uBAAuBvB,GAAGuB,qBAAqB;IAC/CC,oBAAoBxB,GAAGwB,kBAAkB;IACzCC,2BAA2BzB,GAAGyB,yBAAyB;IACvDC,uBAAuB1B,GAAG0B,qBAAqB;IAC/CC,sBAAsB3B,GAAG2B,oBAAoB;IAC7CC,uBAAuB5B,GAAG4B,qBAAqB;IAC/CC,uBAAuB7B,GAAG6B,qBAAqB;IAC/CC,uBAAuB9B,GAAG8B,qBAAqB;IAC/CC,SAAS/B,GAAG+B,OAAO;IACnBC,uBAAuBhC,GAAGgC,qBAAqB;IAC/CC,wBAAwBjC,GAAGiC,sBAAsB;IACjDC,0BAA0BlC,GAAGkC,wBAAwB;IACrDC,uBAAuBnC,GAAGmC,qBAAqB;IAC/CC,8BAA8BnC,GAAGmC,4BAA4B;IAC7DC,uBAAuBpC,GAAGoC,qBAAqB;IAC/CC,6BAA6BrC,GAAGqC,2BAA2B;IAC3DC,qBAAqBtC,GAAGsC,mBAAmB;IAC3CC,8BAA8BvC,GAAGuC,4BAA4B;IAC7DC,mBAAmBxC,GAAGwC,iBAAiB;IACvCC,wBAAwBxC,GAAGwC,sBAAsB;IACjDC,yBAAyBzC,GAAGyC,uBAAuB;IACnDC,oBAAoB1C,GAAG0C,kBAAkB;IACzCC,sBAAsB3C,GAAG2C,oBAAoB;IAC7CC,uBAAuB5C,GAAG4C,qBAAqB;IAC/CC,gCAAgC7C,GAAG6C,8BAA8B;IACjEC,yBAAyB9C,GAAG8C,uBAAuB;IACnDC,+BAA+B/C,GAAG+C,6BAA6B;IAC/DC,qBAAqB/C,GAAG+C,mBAAmB;IAC3CC,WAAWhD,GAAGgD,SAAS;IACvBC,mBAAmBhD,GAAGgD,iBAAiB;IACvCC,wBAAwBhD,GAAGgD,sBAAsB;IACjDC,6BAA6BjD,GAAGiD,2BAA2B;IAC3DC,aAAalD,GAAGkD,WAAW;IAC3BC,kBAAkBnD,GAAGmD,gBAAgB;IACrCC,SAASpD,GAAGoD,OAAO;IACnBC,cAAcrD,GAAGqD,YAAY;IAC7BC,2BAA2BrD,GAAGqD,yBAAyB;IACvDC,uBAAuBtD,GAAGsD,qBAAqB;IAC/CC,2BAA2BvD,GAAGuD,yBAAyB;IACvDC,qBAAqBxD,GAAGwD,mBAAmB;IAC3CC,iBAAiBzD,GAAGyD,eAAe;IACnCC,aAAa1D,GAAG0D,WAAW;IAC3BC,iBAAiB3D,GAAG2D,eAAe;IACnCC,sBAAsB5D,GAAG4D,oBAAoB;IAC7CC,0BAA0B5D,GAAG4D,wBAAwB;IACrDC,mBAAmB7D,GAAG6D,iBAAiB;IACvCC,6BAA6B9D,GAAG8D,2BAA2B;IAC3DC,+BAA+B/D,GAAG+D,6BAA6B;IAC/DC,cAAc/D,GAAG+D,YAAY;IAC7BC,oBAAoBhE,GAAGgE,kBAAkB;IACzCC,oBAAoBhE,IAAIgE,kBAAkB;IAC1CC,oBAAoBjE,IAAIiE,kBAAkB;IAC1CC,qBAAqBlE,IAAIkE,mBAAmB;IAC5CC,2BAA2BlE,IAAIkE,yBAAyB;IACxDC,4BAA4BnE,IAAImE,0BAA0B;IAC1DC,sBAAsBpE,IAAIoE,oBAAoB;IAC9CC,eAAerE,IAAIqE,aAAa;IAChCC,0BAA0BtE,IAAIsE,wBAAwB;IACtDC,uBAAuBvE,IAAIuE,qBAAqB;IAChDC,0BAA0BxE,IAAIwE,wBAAwB;IACtDC,uBAAuBzE,IAAIyE,qBAAqB;IAChDC,qBAAqB1E,IAAI0E,mBAAmB;IAC5CC,wBAAwB3E,IAAI2E,sBAAsB;IAClDC,sBAAsB5E,IAAI4E,oBAAoB;IAC9CC,0BAA0B7E,IAAI6E,wBAAwB;IACtDC,uBAAuB9E,IAAI8E,qBAAqB;IAChDC,yBAAyB/E,IAAI+E,uBAAuB;IACpDC,oBAAoBhF,IAAIgF,kBAAkB;IAC1CC,0BAA0BjF,IAAIiF,wBAAwB;IACtDC,6BAA6BlF,IAAIkF,2BAA2B;IAC5DC,0BAA0BnF,IAAImF,wBAAwB;IACtDC,yBAAyBpF,IAAIoF,uBAAuB;IACpDC,4BAA4BrF,IAAIqF,0BAA0B;IAC1DC,UAAUrF,IAAIqF,QAAQ;AACxB,GAAE"}

package/src/lib/plugin-manager/record-captured-contact.d.ts

@@ -71,19 +71,6 @@
  * `plugin-manager/index.ts`.
  */
 import { type PluginContactCaptureRequest, type PluginContactCaptured } from './plugin-contact-capture';
-/**
- * The app offers its boot step, so a capture that finds nobody can run it.
- *
- * Called at boot from the app's own instrumentation, beside the declarations
- * themselves and BEFORE them — this is a plain assignment that cannot fail,
- * and the failure it exists to repair is the one immediately after it. The
- * app passes a function rather than core importing the generated manifest,
- * which core may not do: the manifest names every plugin.
- *
- * Idempotent and last-one-wins; an app registers exactly once per process.
- */
-export declare function registerPluginDeclarationsRepair(run: () => Promise<void>): void;
-/** Only for specs: forgets the registered boot step. */
-export declare function resetPluginDeclarationsRepairForTests(): void;
+export { registerPluginDeclarationsRepair, resetPluginDeclarationsRepairForTests, } from './plugin-declarations-repair';
 export declare function recordCapturedContact(request: PluginContactCaptureRequest): Promise<PluginContactCaptured | null>;
 export default recordCapturedContact;

package/src/lib/plugin-manager/record-captured-contact.js

@@ -69,31 +69,12 @@
  * Server-side: reached by its own subpath, never through
  * `plugin-manager/index.ts`.
  */ import { pluginContactCaptureWriter } from "./plugin-contact-capture.js";
-/**
- * The app's boot-time declarations step, when it has offered one.
- *
- * Held on `globalThis` rather than in a module `let` (AGL-3412): the app
- * offers it from `instrumentation.ts`, which Next compiles into a different
- * module graph from the routes that capture, so a module-scoped slot is set
- * in one copy and read as empty in the other.
- */ const REPAIR_KEY = Symbol.for('@aglyn/aglyn:plugin-declarations-repair');
-const globalScope = globalThis;
-/**
- * The app offers its boot step, so a capture that finds nobody can run it.
- *
- * Called at boot from the app's own instrumentation, beside the declarations
- * themselves and BEFORE them — this is a plain assignment that cannot fail,
- * and the failure it exists to repair is the one immediately after it. The
- * app passes a function rather than core importing the generated manifest,
- * which core may not do: the manifest names every plugin.
- *
- * Idempotent and last-one-wins; an app registers exactly once per process.
- */ export function registerPluginDeclarationsRepair(run) {
-    globalScope[REPAIR_KEY] = run;
-}
-/** Only for specs: forgets the registered boot step. */ export function resetPluginDeclarationsRepairForTests() {
-    globalScope[REPAIR_KEY] = null;
-}
+import { runPluginDeclarationsRepair } from "./plugin-declarations-repair.js";
+/*
+ * The boot step's slot lives in its own leaf (AGL-2773), because the custom
+ * field registry reads it too and that registry is client-safe. Re-exported
+ * so the apps' instrumentation keeps importing it from here.
+ */ export { registerPluginDeclarationsRepair, resetPluginDeclarationsRepairForTests } from "./plugin-declarations-repair.js";
 export async function recordCapturedContact(request) {
     const where = `${request.interaction.source} on ${request.hostId}`;
     const found = pluginContactCaptureWriter();
@@ -102,13 +83,10 @@ export async function recordCapturedContact(request) {
     // that registers the writer failed and every capture in this process has
     // been going nowhere. Run it and ask again — the registration memoizes its
     // own promise, so this is one attempt per process and not one per capture.
-    const repair = globalScope[REPAIR_KEY];
-    if (repair) {
-        try {
-            await repair();
-        } catch (error) {
-            console.error(`[capture] plugin declarations failed before ${where}`, error);
-        }
+    try {
+        await runPluginDeclarationsRepair();
+    } catch (error) {
+        console.error(`[capture] plugin declarations failed before ${where}`, error);
     }
     const late = pluginContactCaptureWriter();
     if (!late) {

package/src/lib/plugin-manager/record-captured-contact.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../../../libs/aglyn/src/lib/plugin-manager/record-captured-contact.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n/**\n * How a door hands somebody it just met to whichever plugin keeps people\n * (AGL-3080).\n *\n * `capturePluginContact` is the contract; this is the three things every\n * door calling it has to get right, in one place so no door has to remember\n * them. It lives in core rather than in an app because the doors are not all\n * in one place: a form submission is a core route in the tenant app, a\n * newsletter signup and a membership registration are commerce's, a booking\n * request is bookings'. A plugin may not import an app, so a wrapper that\n * lived in one would be a wrapper the plugin doors had to copy — and a copy\n * is where the two halves of this behaviour would drift.\n *\n * ## It makes sure somebody is listening, without slowing down the case where\n * somebody already is\n *\n * `capturePluginContact` answers `null` when no plugin keeps people, and the\n * plugin that does registers itself from the server declarations each app\n * runs at boot. That boot step is wrapped in a `catch` — a declaration that\n * fails to load must not cost every route — so a boot that went wrong leaves\n * a process where every capture answers `null` and no contact is ever\n * written, with one line in a log nobody is reading.\n *\n * So the writer is looked up FIRST, synchronously, and handed the capture\n * with no await in between. That matters for more than speed: every caller\n * is fire-and-forget, and a door that awaited anything before reaching the\n * writer would hand the capture to a request that may already have returned.\n * Only when no writer answers does this run the app's boot step and try once\n * more — repairing the broken-boot case rather than just reporting it.\n *\n * The boot step itself is the app's, because the list of plugins to declare\n * is generated per app and core may not import a plugin. The app hands it\n * over at boot with {@link registerPluginDeclarationsRepair}. An app that has\n * not — or a process that never ran its instrumentation at all — loses the\n * repair and keeps every other behaviour here, which is the honest outcome:\n * a process that ran no boot step has bigger silences than this one.\n *\n * ## It tells the difference between the two silences\n *\n * `null` is \"this workspace has no record system\", which is a real and quiet\n * answer for a workspace with the record plugin switched off. It is ALSO what\n * a broken registration looks like, and the two are indistinguishable from\n * here. So it is logged rather than ignored: a workspace that should be\n * keeping contacts and has silently stopped is the failure mode this seam can\n * produce, and a line naming the site is what turns an unreproducible support\n * ticket into a one-minute answer. A refusal is different again — the owner\n * considered this person and declined, for a reason it states — and is logged\n * as itself.\n *\n * ⚠️ IT NEVER THROWS, and callers use it fire-and-forget. Every door has\n * already done the thing it is recording; losing the submission, the signup\n * or the booking over the contact would be the larger failure.\n *\n * Server-side: reached by its own subpath, never through\n * `plugin-manager/index.ts`.\n */\n\nimport {\n  pluginContactCaptureWriter,\n  type PluginContactCaptureRequest,\n  type PluginContactCaptureWriter,\n  type PluginContactCaptured,\n} from './plugin-contact-capture'\n\n/**\n * The app's boot-time declarations step, when it has offered one.\n *\n * Held on `globalThis` rather than in a module `let` (AGL-3412): the app\n * offers it from `instrumentation.ts`, which Next compiles into a different\n * module graph from the routes that capture, so a module-scoped slot is set\n * in one copy and read as empty in the other.\n */\nconst REPAIR_KEY = Symbol.for('@aglyn/aglyn:plugin-declarations-repair')\n\nconst globalScope = globalThis as typeof globalThis & {\n  [REPAIR_KEY]?: (() => Promise<void>) | null\n}\n\n/**\n * The app offers its boot step, so a capture that finds nobody can run it.\n *\n * Called at boot from the app's own instrumentation, beside the declarations\n * themselves and BEFORE them — this is a plain assignment that cannot fail,\n * and the failure it exists to repair is the one immediately after it. The\n * app passes a function rather than core importing the generated manifest,\n * which core may not do: the manifest names every plugin.\n *\n * Idempotent and last-one-wins; an app registers exactly once per process.\n */\nexport function registerPluginDeclarationsRepair(run: () => Promise<void>): void {\n  globalScope[REPAIR_KEY] = run\n}\n\n/** Only for specs: forgets the registered boot step. */\nexport function resetPluginDeclarationsRepairForTests(): void {\n  globalScope[REPAIR_KEY] = null\n}\n\nexport async function recordCapturedContact(\n  request: PluginContactCaptureRequest,\n): Promise<PluginContactCaptured | null> {\n  const where = `${request.interaction.source} on ${request.hostId}`\n  const found = pluginContactCaptureWriter()\n  if (found) return await handedTo(found.writer, request, where)\n\n  // Nobody answers. Either this workspace keeps no records, or the boot step\n  // that registers the writer failed and every capture in this process has\n  // been going nowhere. Run it and ask again — the registration memoizes its\n  // own promise, so this is one attempt per process and not one per capture.\n  const repair = globalScope[REPAIR_KEY]\n  if (repair) {\n    try {\n      await repair()\n    } catch (error) {\n      console.error(`[capture] plugin declarations failed before ${where}`, error)\n    }\n  }\n  const late = pluginContactCaptureWriter()\n  if (!late) {\n    console.warn(\n      `[capture] no plugin keeps people, so the ${where} recorded nobody. ` +\n        'Expected when the record plugin is off for this workspace; a bug otherwise.',\n    )\n    return null\n  }\n  console.warn(\n    `[capture] the ${where} found no writer until it registered one itself — ` +\n      'the boot-time declarations did not run in this process.',\n  )\n  return await handedTo(late.writer, request, where)\n}\n\n/** One capture, with the two failures a door must not be made to handle. */\nasync function handedTo(\n  writer: PluginContactCaptureWriter,\n  request: PluginContactCaptureRequest,\n  where: string,\n): Promise<PluginContactCaptured | null> {\n  try {\n    const verdict = await writer.capture(request)\n    if (verdict.ok === false) {\n      console.warn(`[capture] ${where} was refused (${verdict.reason})`)\n    }\n    return verdict\n  } catch (error) {\n    // The contract says a writer RETURNS its refusals, so reaching here means\n    // one broke its own contract. It still costs the door nothing.\n    console.error(`[capture] ${where} threw`, error)\n    return null\n  }\n}\n\nexport default recordCapturedContact\n"],"names":["pluginContactCaptureWriter","REPAIR_KEY","Symbol","for","globalScope","globalThis","registerPluginDeclarationsRepair","run","resetPluginDeclarationsRepairForTests","recordCapturedContact","request","where","interaction","source","hostId","found","handedTo","writer","repair","error","console","late","warn","verdict","capture","ok","reason"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAuDC,GAED,SACEA,0BAA0B,QAIrB,8BAA0B;AAEjC;;;;;;;CAOC,GACD,MAAMC,aAAaC,OAAOC,GAAG,CAAC;AAE9B,MAAMC,cAAcC;AAIpB;;;;;;;;;;CAUC,GACD,OAAO,SAASC,iCAAiCC,GAAwB;IACvEH,WAAW,CAACH,WAAW,GAAGM;AAC5B;AAEA,sDAAsD,GACtD,OAAO,SAASC;IACdJ,WAAW,CAACH,WAAW,GAAG;AAC5B;AAEA,OAAO,eAAeQ,sBACpBC,OAAoC;IAEpC,MAAMC,QAAQ,GAAGD,QAAQE,WAAW,CAACC,MAAM,CAAC,IAAI,EAAEH,QAAQI,MAAM,EAAE;IAClE,MAAMC,QAAQf;IACd,IAAIe,OAAO,OAAO,MAAMC,SAASD,MAAME,MAAM,EAAEP,SAASC;IAExD,2EAA2E;IAC3E,yEAAyE;IACzE,2EAA2E;IAC3E,2EAA2E;IAC3E,MAAMO,SAASd,WAAW,CAACH,WAAW;IACtC,IAAIiB,QAAQ;QACV,IAAI;YACF,MAAMA;QACR,EAAE,OAAOC,OAAO;YACdC,QAAQD,KAAK,CAAC,CAAC,4CAA4C,EAAER,OAAO,EAAEQ;QACxE;IACF;IACA,MAAME,OAAOrB;IACb,IAAI,CAACqB,MAAM;QACTD,QAAQE,IAAI,CACV,CAAC,yCAAyC,EAAEX,MAAM,kBAAkB,CAAC,GACnE;QAEJ,OAAO;IACT;IACAS,QAAQE,IAAI,CACV,CAAC,cAAc,EAAEX,MAAM,kDAAkD,CAAC,GACxE;IAEJ,OAAO,MAAMK,SAASK,KAAKJ,MAAM,EAAEP,SAASC;AAC9C;AAEA,0EAA0E,GAC1E,eAAeK,SACbC,MAAkC,EAClCP,OAAoC,EACpCC,KAAa;IAEb,IAAI;QACF,MAAMY,UAAU,MAAMN,OAAOO,OAAO,CAACd;QACrC,IAAIa,QAAQE,EAAE,KAAK,OAAO;YACxBL,QAAQE,IAAI,CAAC,CAAC,UAAU,EAAEX,MAAM,cAAc,EAAEY,QAAQG,MAAM,CAAC,CAAC,CAAC;QACnE;QACA,OAAOH;IACT,EAAE,OAAOJ,OAAO;QACd,0EAA0E;QAC1E,+DAA+D;QAC/DC,QAAQD,KAAK,CAAC,CAAC,UAAU,EAAER,MAAM,MAAM,CAAC,EAAEQ;QAC1C,OAAO;IACT;AACF;AAEA,eAAeV,sBAAqB"}
+{"version":3,"sources":["../../../../../../libs/aglyn/src/lib/plugin-manager/record-captured-contact.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n/**\n * How a door hands somebody it just met to whichever plugin keeps people\n * (AGL-3080).\n *\n * `capturePluginContact` is the contract; this is the three things every\n * door calling it has to get right, in one place so no door has to remember\n * them. It lives in core rather than in an app because the doors are not all\n * in one place: a form submission is a core route in the tenant app, a\n * newsletter signup and a membership registration are commerce's, a booking\n * request is bookings'. A plugin may not import an app, so a wrapper that\n * lived in one would be a wrapper the plugin doors had to copy — and a copy\n * is where the two halves of this behaviour would drift.\n *\n * ## It makes sure somebody is listening, without slowing down the case where\n * somebody already is\n *\n * `capturePluginContact` answers `null` when no plugin keeps people, and the\n * plugin that does registers itself from the server declarations each app\n * runs at boot. That boot step is wrapped in a `catch` — a declaration that\n * fails to load must not cost every route — so a boot that went wrong leaves\n * a process where every capture answers `null` and no contact is ever\n * written, with one line in a log nobody is reading.\n *\n * So the writer is looked up FIRST, synchronously, and handed the capture\n * with no await in between. That matters for more than speed: every caller\n * is fire-and-forget, and a door that awaited anything before reaching the\n * writer would hand the capture to a request that may already have returned.\n * Only when no writer answers does this run the app's boot step and try once\n * more — repairing the broken-boot case rather than just reporting it.\n *\n * The boot step itself is the app's, because the list of plugins to declare\n * is generated per app and core may not import a plugin. The app hands it\n * over at boot with {@link registerPluginDeclarationsRepair}. An app that has\n * not — or a process that never ran its instrumentation at all — loses the\n * repair and keeps every other behaviour here, which is the honest outcome:\n * a process that ran no boot step has bigger silences than this one.\n *\n * ## It tells the difference between the two silences\n *\n * `null` is \"this workspace has no record system\", which is a real and quiet\n * answer for a workspace with the record plugin switched off. It is ALSO what\n * a broken registration looks like, and the two are indistinguishable from\n * here. So it is logged rather than ignored: a workspace that should be\n * keeping contacts and has silently stopped is the failure mode this seam can\n * produce, and a line naming the site is what turns an unreproducible support\n * ticket into a one-minute answer. A refusal is different again — the owner\n * considered this person and declined, for a reason it states — and is logged\n * as itself.\n *\n * ⚠️ IT NEVER THROWS, and callers use it fire-and-forget. Every door has\n * already done the thing it is recording; losing the submission, the signup\n * or the booking over the contact would be the larger failure.\n *\n * Server-side: reached by its own subpath, never through\n * `plugin-manager/index.ts`.\n */\n\nimport {\n  pluginContactCaptureWriter,\n  type PluginContactCaptureRequest,\n  type PluginContactCaptureWriter,\n  type PluginContactCaptured,\n} from './plugin-contact-capture'\nimport { runPluginDeclarationsRepair } from './plugin-declarations-repair'\n\n/*\n * The boot step's slot lives in its own leaf (AGL-2773), because the custom\n * field registry reads it too and that registry is client-safe. Re-exported\n * so the apps' instrumentation keeps importing it from here.\n */\nexport {\n  registerPluginDeclarationsRepair,\n  resetPluginDeclarationsRepairForTests,\n} from './plugin-declarations-repair'\n\nexport async function recordCapturedContact(\n  request: PluginContactCaptureRequest,\n): Promise<PluginContactCaptured | null> {\n  const where = `${request.interaction.source} on ${request.hostId}`\n  const found = pluginContactCaptureWriter()\n  if (found) return await handedTo(found.writer, request, where)\n\n  // Nobody answers. Either this workspace keeps no records, or the boot step\n  // that registers the writer failed and every capture in this process has\n  // been going nowhere. Run it and ask again — the registration memoizes its\n  // own promise, so this is one attempt per process and not one per capture.\n  try {\n    await runPluginDeclarationsRepair()\n  } catch (error) {\n    console.error(`[capture] plugin declarations failed before ${where}`, error)\n  }\n  const late = pluginContactCaptureWriter()\n  if (!late) {\n    console.warn(\n      `[capture] no plugin keeps people, so the ${where} recorded nobody. ` +\n        'Expected when the record plugin is off for this workspace; a bug otherwise.',\n    )\n    return null\n  }\n  console.warn(\n    `[capture] the ${where} found no writer until it registered one itself — ` +\n      'the boot-time declarations did not run in this process.',\n  )\n  return await handedTo(late.writer, request, where)\n}\n\n/** One capture, with the two failures a door must not be made to handle. */\nasync function handedTo(\n  writer: PluginContactCaptureWriter,\n  request: PluginContactCaptureRequest,\n  where: string,\n): Promise<PluginContactCaptured | null> {\n  try {\n    const verdict = await writer.capture(request)\n    if (verdict.ok === false) {\n      console.warn(`[capture] ${where} was refused (${verdict.reason})`)\n    }\n    return verdict\n  } catch (error) {\n    // The contract says a writer RETURNS its refusals, so reaching here means\n    // one broke its own contract. It still costs the door nothing.\n    console.error(`[capture] ${where} threw`, error)\n    return null\n  }\n}\n\nexport default recordCapturedContact\n"],"names":["pluginContactCaptureWriter","runPluginDeclarationsRepair","registerPluginDeclarationsRepair","resetPluginDeclarationsRepairForTests","recordCapturedContact","request","where","interaction","source","hostId","found","handedTo","writer","error","console","late","warn","verdict","capture","ok","reason"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAuDC,GAED,SACEA,0BAA0B,QAIrB,8BAA0B;AACjC,SAASC,2BAA2B,QAAQ,kCAA8B;AAE1E;;;;CAIC,GACD,SACEC,gCAAgC,EAChCC,qCAAqC,QAChC,kCAA8B;AAErC,OAAO,eAAeC,sBACpBC,OAAoC;IAEpC,MAAMC,QAAQ,GAAGD,QAAQE,WAAW,CAACC,MAAM,CAAC,IAAI,EAAEH,QAAQI,MAAM,EAAE;IAClE,MAAMC,QAAQV;IACd,IAAIU,OAAO,OAAO,MAAMC,SAASD,MAAME,MAAM,EAAEP,SAASC;IAExD,2EAA2E;IAC3E,yEAAyE;IACzE,2EAA2E;IAC3E,2EAA2E;IAC3E,IAAI;QACF,MAAML;IACR,EAAE,OAAOY,OAAO;QACdC,QAAQD,KAAK,CAAC,CAAC,4CAA4C,EAAEP,OAAO,EAAEO;IACxE;IACA,MAAME,OAAOf;IACb,IAAI,CAACe,MAAM;QACTD,QAAQE,IAAI,CACV,CAAC,yCAAyC,EAAEV,MAAM,kBAAkB,CAAC,GACnE;QAEJ,OAAO;IACT;IACAQ,QAAQE,IAAI,CACV,CAAC,cAAc,EAAEV,MAAM,kDAAkD,CAAC,GACxE;IAEJ,OAAO,MAAMK,SAASI,KAAKH,MAAM,EAAEP,SAASC;AAC9C;AAEA,0EAA0E,GAC1E,eAAeK,SACbC,MAAkC,EAClCP,OAAoC,EACpCC,KAAa;IAEb,IAAI;QACF,MAAMW,UAAU,MAAML,OAAOM,OAAO,CAACb;QACrC,IAAIY,QAAQE,EAAE,KAAK,OAAO;YACxBL,QAAQE,IAAI,CAAC,CAAC,UAAU,EAAEV,MAAM,cAAc,EAAEW,QAAQG,MAAM,CAAC,CAAC,CAAC;QACnE;QACA,OAAOH;IACT,EAAE,OAAOJ,OAAO;QACd,0EAA0E;QAC1E,+DAA+D;QAC/DC,QAAQD,KAAK,CAAC,CAAC,UAAU,EAAEP,MAAM,MAAM,CAAC,EAAEO;QAC1C,OAAO;IACT;AACF;AAEA,eAAeT,sBAAqB"}