@aglyn/aglyn 1.0.0-beta.220 → 1.0.0-beta.222

package/src/lib/plugin-manager/plugin-usage-axes.d.ts

@@ -36,9 +36,10 @@
  *  - a BAND names the rollup fields that measure it and the entitlement that
  *    says what the plan includes. The utilization table reads it beside
  *    core's own bands. A METERED band is also billed past what the plan
- *    includes, at cost × `METERED_MARKUP`, beside storage and bandwidth: the
- *    invoice sweep, the Billing card's estimate, the monthly summary and the
- *    staff usage rows read it from here.
+ *    includes, at its published billed rate (cost + 30% kept after card
+ *    fees), beside storage and bandwidth: the invoice sweep, the Billing
+ *    card's estimate, the monthly summary and the staff usage rows read it
+ *    from here.
  *  - a SPEND LINE names the month document holding what the plugin's usage
  *    came to at the rates it bills, the deployment variable naming the month
  *    it is first charged for, and the unit a customer sees it in. The usage
@@ -133,6 +134,17 @@ export interface PluginUsageBandDeclaration {
      * workspace's sites.
      */
     hostCounter?: string;
+    /**
+     * The WORKSPACE-wide monthly counter the band is enforced against:
+     * `orgs/{orgId}/counters/{orgCounter}`, field `{month}` (AGL-3472). Declared
+     * by a band whose runtime counts every unit on the org's counter as well as
+     * on the site's, in one write, so a workspace-wide band is held to every
+     * site's use rather than handed to each site whole. The Billing card meters
+     * the band once for the organization from it, where a band without one is
+     * metered per site. The usage sweep and alerts still sum `hostCounter`,
+     * which the same write moves.
+     */
+    orgCounter?: string;
     /**
      * The workspace is WARNED as it approaches and reaches this band, by the
      * usage-alerts sweep, from its `hostCounter` against what the plan includes
@@ -149,10 +161,37 @@ export interface PluginUsageBandDeclaration {
         reached: string;
         approach: string;
     };
+    /**
+     * The console's quota banner WARNS an organization-wide reader on every
+     * console page as the workspace approaches and reaches this band
+     * (AGL-2898, AGL-3080). `standing` is a console API path the plugin
+     * serves, asked `?orgId=` with the reader's token, that answers the
+     * band's standing in its own unit under `member` — `{ used, limit }`,
+     * `limit: null` for a plan with no band, which is no row — and
+     * `stopsAtBand`: whether reaching it stops the feature (the reading when
+     * the route does not say) or bills past it. `approach` is the sentence
+     * above 80%; `reached.stops` and `reached.bills` the two at the band.
+     * `linksUsage` says the sentences name Billing → Usage, and the banner
+     * offers the link.
+     *
+     * A route, not a counter: a band's meter may be one no client may read,
+     * and the route answers in the unit the customer was sold.
+     */
+    consoleWarning?: {
+        standing: string;
+        member: string;
+        approach: string;
+        reached: {
+            stops: string;
+            bills: string;
+        };
+        linksUsage?: boolean;
+    };
     /**
      * The band is one of the INFRASTRUCTURE meters (AGL-1280): what the
-     * workspace uses past it is billed at our cost × `METERED_MARKUP`, beside
-     * storage and bandwidth, on the same invoice line and the same estimate.
+     * workspace uses past it is billed at its published billed rate (cost +
+     * 30% kept after card fees), beside storage and bandwidth, on the same
+     * invoice line and the same estimate.
      * A metered band names one rollup field and the `hostCounter` it is
      * measured by.
      */
@@ -265,6 +304,16 @@ export type ResolvedPluginCountedBand = ResolvedPluginUsageBand & {
  * band's counter is read with the infrastructure meters instead.
  */
 export declare function countedPluginBands(): readonly ResolvedPluginCountedBand[];
+/** A declared band kept on a workspace-wide counter. */
+export type ResolvedPluginOrgCountedBand = ResolvedPluginUsageBand & {
+    orgCounter: string;
+};
+/**
+ * Every band with a workspace-wide counter (`orgCounter`), in band order: the
+ * bands the Billing card meters once for the organization, from the counter
+ * the band is enforced against.
+ */
+export declare function orgCountedPluginBands(): readonly ResolvedPluginOrgCountedBand[];
 /** The rollup field a metered band records its count under. */
 export declare function meteredBandField(band: ResolvedPluginMeteredBand): string;
 /**

package/src/lib/plugin-manager/plugin-usage-axes.js

@@ -35,9 +35,10 @@
  *  - a BAND names the rollup fields that measure it and the entitlement that
  *    says what the plan includes. The utilization table reads it beside
  *    core's own bands. A METERED band is also billed past what the plan
- *    includes, at cost × `METERED_MARKUP`, beside storage and bandwidth: the
- *    invoice sweep, the Billing card's estimate, the monthly summary and the
- *    staff usage rows read it from here.
+ *    includes, at its published billed rate (cost + 30% kept after card
+ *    fees), beside storage and bandwidth: the invoice sweep, the Billing
+ *    card's estimate, the monthly summary and the staff usage rows read it
+ *    from here.
  *  - a SPEND LINE names the month document holding what the plugin's usage
  *    came to at the rates it bills, the deployment variable naming the month
  *    it is first charged for, and the unit a customer sees it in. The usage
@@ -86,6 +87,13 @@ export function pluginUsageBands() {
  */ export function countedPluginBands() {
     return PLUGIN_USAGE_BANDS_DECLARED.filter((band)=>Boolean(band.hostCounter && !band.metered));
 }
+/**
+ * Every band with a workspace-wide counter (`orgCounter`), in band order: the
+ * bands the Billing card meters once for the organization, from the counter
+ * the band is enforced against.
+ */ export function orgCountedPluginBands() {
+    return PLUGIN_USAGE_BANDS_DECLARED.filter((band)=>Boolean(band.orgCounter));
+}
 /** The rollup field a metered band records its count under. */ export function meteredBandField(band) {
     return band.fields[0];
 }

package/src/lib/plugin-manager/plugin-usage-axes.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../../../libs/aglyn/src/lib/plugin-manager/plugin-usage-axes.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n/**\n * WHAT A PLUGIN'S USAGE COSTS, AND HOW MUCH OF ITS BAND IT SPENT (AGL-3080).\n *\n * The platform keeps one cost model (`orgMonthlyCogsUsd`) and one\n * utilization table (`margin-utilization.ts`), and both read the monthly\n * usage rollup. Several of the rollup's meters are a plugin's: the AI\n * plugin's provider spend, the CRM's records, the forms plugin's\n * submissions, the workflows plugin's runs. Core used to name each of them —\n * its rollup field, the unit rate that prices it, the band it is measured\n * against — so a plugin that metered something new could not reach the\n * discount guardrail without a core edit, and core could not be taken\n * without the plugins it named.\n *\n * So a plugin declares its meters, and core composes them:\n *\n *  - a COST AXIS names the rollup fields a meter is recorded under and the\n *    `ORG_COGS_UNIT_RATES_USD` key that prices one unit, or no key when the\n *    field is already dollars. `orgMonthlyCogsUsd` prices it beside core's\n *    own axes, and `orgCogsInputFrom` forwards its fields.\n *  - a BAND names the rollup fields that measure it and the entitlement that\n *    says what the plan includes. The utilization table reads it beside\n *    core's own bands. A METERED band is also billed past what the plan\n *    includes, at cost × `METERED_MARKUP`, beside storage and bandwidth: the\n *    invoice sweep, the Billing card's estimate, the monthly summary and the\n *    staff usage rows read it from here.\n *  - a SPEND LINE names the month document holding what the plugin's usage\n *    came to at the rates it bills, the deployment variable naming the month\n *    it is first charged for, and the unit a customer sees it in. The usage\n *    budget shows it beside the metered figure and counts it once charged.\n *  - a METER names what the plugin measures in the monthly usage sweep\n *    (`plugin-usage-meters.ts`), so the sweep can refuse to bill a month the\n *    registered meter is missing from.\n *\n * ## What core keeps\n *\n * The MONEY. Every unit rate stays in `ORG_COGS_UNIT_RATES_USD`, beside the\n * billed table it is reconciled against (`METERED_UNIT_RATES_USD`, which a\n * metered band names its rate in), and every included figure stays in\n * `PLAN_ENTITLEMENTS`. A declaration names fields and keys; it carries no\n * price. The one number a declaration may carry is a band's unit cost, where\n * the band is sold in a unit OF cost (a credit is a fixed quantity of\n * dollars), and that number is the plugin's own definition of its unit.\n *\n * ## Compiled, never registered\n *\n * The cost model's readers include the staff org page, which prices a rollup\n * in the browser, and the discount guardrail, whose every wrong answer is in\n * the approving direction: a cost axis a registry had not filled would price\n * at nothing and approve a discount the margin cannot carry. So these are\n * compiled from each plugin's `usage-axes` declaration by the manifest\n * generator, like the plan figures, and a rate key core does not have is an\n * error rather than a zero.\n */\n\nimport type { ReleaseFlagKey } from '../app-utils/release-flags'\nimport {\n  PLUGIN_COST_AXES_DECLARED,\n  PLUGIN_SPEND_LINES_DECLARED,\n  PLUGIN_USAGE_BANDS_DECLARED,\n} from './first-party-plugins.generated'\n\n/** A meter a plugin contributes to the platform's cost model. */\nexport interface PluginCostAxisDeclaration {\n  /** The breakdown key every staff reader shows it under. */\n  id: string\n  /** Where it sorts among the cost model's axes; core's own are multiples of 10. */\n  order: number\n  /** Rollup fields summed for the axis. */\n  fields: readonly string[]\n  /**\n   * Read only when every one of `fields` is absent from a rollup — the\n   * narrower field an older rollup recorded the same meter under.\n   */\n  fallbackFields?: readonly string[]\n  /**\n   * Rollup fields recorded beside the meter so its sum is legible, forwarded\n   * by `orgCogsInputFrom` and never priced.\n   */\n  recordedFields?: readonly string[]\n  /**\n   * Rollup fields the plugin's usage sweep writes beside the meter for its\n   * staff surfaces to read — served on the staff usage rows, `null` where a\n   * rollup never wrote one, and never forwarded to the cost model.\n   */\n  staffFields?: readonly string[]\n  /**\n   * The `ORG_COGS_UNIT_RATES_USD` key pricing one unit. Absent when the\n   * fields are already dollars, which then enter the model at ×1.\n   */\n  rate?: string\n  /**\n   * The month's LIVE reading, when the rollup's figure is a snapshot a meter\n   * keeps adding to: `orgs/{orgId}/{collection}/{month}`, the first of\n   * `fields` that is a positive number. It replaces the axis's first rollup\n   * field wherever a reader fetches it.\n   */\n  live?: { collection: string; fields: readonly string[] }\n}\n\n/** A band a plugin contributes to the utilization table. */\nexport interface PluginUsageBandDeclaration {\n  /** The band's key, and the column the staff table shows it under. */\n  id: string\n  label: string\n  order: number\n  /** Rollup fields summed for what the org used. */\n  fields: readonly string[]\n  fallbackFields?: readonly string[]\n  /** The resolved entitlement holding what the plan includes. */\n  entitlement: string\n  /** The entitlement is per SITE and the org-wide band is it × `hostLimit`. */\n  perHost?: boolean\n  /**\n   * The band is sold in a unit of cost and the rollup records dollars: what\n   * was used is `ceil(dollars / unitCostUsd)`, rounded UP so spend already\n   * made never reads as less of the band.\n   */\n  unitCostUsd?: number\n  /**\n   * The per-site monthly counter the band is measured by:\n   * `hosts/{hostId}/counters/{hostCounter}`, field `{month}`, summed over the\n   * workspace's sites.\n   */\n  hostCounter?: string\n  /**\n   * The workspace is WARNED as it approaches and reaches this band, by the\n   * usage-alerts sweep, from its `hostCounter` against what the plan includes\n   * of `entitlement`, once per threshold per month. `label` names the band in\n   * the title (\"monthly workflow runs\") and `noun` in the opening sentence\n   * (\"workflow runs\"); `outcome` is what happens at the band — `stops`,\n   * `bills` or `continues` — and `reached` and `approach` are the sentences\n   * that say so, at the band and approaching it.\n   */\n  alert?: {\n    label: string\n    noun: string\n    outcome: 'stops' | 'bills' | 'continues'\n    reached: string\n    approach: string\n  }\n  /**\n   * The band is one of the INFRASTRUCTURE meters (AGL-1280): what the\n   * workspace uses past it is billed at our cost × `METERED_MARKUP`, beside\n   * storage and bandwidth, on the same invoice line and the same estimate.\n   * A metered band names one rollup field and the `hostCounter` it is\n   * measured by.\n   */\n  metered?: PluginMeteredBand\n}\n\n/** How a metered band is priced, quoted and withheld. */\nexport interface PluginMeteredBand {\n  /**\n   * The `METERED_UNIT_RATES_USD` key holding our cost per unit — never a\n   * number: the rate table is the platform's, beside the markup it is\n   * published with.\n   */\n  rate: string\n  /** The count a published price is quoted per: `1000` reads \"per 1,000\". */\n  quotedPer: number\n  /** The band in running prose, plural and lowercase: \"form submissions\". */\n  noun: string\n  /**\n   * A release flag the overage waits behind: while it is off for the\n   * workspace, the units are counted and the charge is recorded as withheld\n   * rather than billed — nobody is charged for what they cannot reach\n   * (AGL-1604). The rollup records the verdict as `{field}Billed` and what\n   * was forgone, at cost, as `{field}OverageWithheldUsd`.\n   */\n  withheldUntil?: ReleaseFlagKey\n}\n\n/**\n * A line of a workspace's monthly SPEND a plugin contributes to its usage\n * budget (`usage-budget.ts`): what the plugin's usage came to this month, in\n * the dollars it is billed at, shown on the customer's budget card and\n * counted toward the budget from the month the plugin starts charging for it.\n */\nexport interface PluginSpendLineDeclaration {\n  /** The line's key. */\n  id: string\n  /** What the budget card and the budget alert call it. */\n  label: string\n  /**\n   * Where the month's figure is read: `orgs/{orgId}/{collection}/{month}`,\n   * field `field`, in dollars.\n   */\n  live: { collection: string; field: string }\n  /**\n   * The deployment variable naming the first month (`YYYY-MM`) the line is\n   * charged for. Until it names this month or an earlier one — and on any\n   * value that is not a month — the line is shown and never counted.\n   */\n  billedFromEnv: string\n  /**\n   * The unit the customer is shown the line in, when the stored dollars are\n   * not theirs to see: `ceil(dollars / costUsd)` of `label`, and the dollar\n   * figure never crosses to the browser.\n   */\n  unit?: { costUsd: number; label: string }\n}\n\n/**\n * A meter the plugin measures in the platform's monthly usage sweep and\n * registers at runtime (`plugin-usage-meters.ts`). Declared as well as\n * registered so the sweep can refuse to bill a workspace's month without it.\n */\nexport interface PluginUsageMeterDeclaration {\n  /** As `registerPluginUsageMeter` names it. */\n  id: string\n}\n\nexport type ResolvedPluginCostAxis = PluginCostAxisDeclaration & { pluginId: string }\nexport type ResolvedPluginUsageBand = PluginUsageBandDeclaration & { pluginId: string }\nexport type ResolvedPluginSpendLine = PluginSpendLineDeclaration & { pluginId: string }\nexport type ResolvedPluginUsageMeter = PluginUsageMeterDeclaration & { pluginId: string }\n\n/** What a plugin's `usageAxes` function answers. */\nexport interface PluginUsageAxesDeclaration {\n  costAxes?: readonly PluginCostAxisDeclaration[]\n  bands?: readonly PluginUsageBandDeclaration[]\n  spendLines?: readonly PluginSpendLineDeclaration[]\n  meters?: readonly PluginUsageMeterDeclaration[]\n}\n\nexport function pluginCostAxes(): readonly ResolvedPluginCostAxis[] {\n  return PLUGIN_COST_AXES_DECLARED\n}\n\nexport function pluginUsageBands(): readonly ResolvedPluginUsageBand[] {\n  return PLUGIN_USAGE_BANDS_DECLARED\n}\n\n/** A declared band that is metered, with its one field and its counter. */\nexport type ResolvedPluginMeteredBand = ResolvedPluginUsageBand & {\n  metered: PluginMeteredBand\n  hostCounter: string\n}\n\n/**\n * Every band billed at cost past what the plan includes, in band order — the\n * infrastructure meters a plugin adds beside storage and bandwidth.\n */\nexport function meteredPluginBands(): readonly ResolvedPluginMeteredBand[] {\n  return PLUGIN_USAGE_BANDS_DECLARED.filter(\n    (band): band is ResolvedPluginMeteredBand =>\n      Boolean(band.metered && band.hostCounter),\n  )\n}\n\n/** A declared band measured by a per-site counter and never billed past it. */\nexport type ResolvedPluginCountedBand = ResolvedPluginUsageBand & {\n  hostCounter: string\n}\n\n/**\n * Every band measured by a per-site counter and not metered, in band order:\n * the usage sweep sums each across the workspace's sites and records it under\n * the band's first field, and the staff usage rows show the count. A metered\n * band's counter is read with the infrastructure meters instead.\n */\nexport function countedPluginBands(): readonly ResolvedPluginCountedBand[] {\n  return PLUGIN_USAGE_BANDS_DECLARED.filter(\n    (band): band is ResolvedPluginCountedBand =>\n      Boolean(band.hostCounter && !band.metered),\n  )\n}\n\n/** The rollup field a metered band records its count under. */\nexport function meteredBandField(band: ResolvedPluginMeteredBand): string {\n  return band.fields[0]!\n}\n\n/**\n * Where the rollup records a withheld band's verdict (`metered.withheldUntil`):\n * whether the month billed the band's overage, and what was forgone, at cost,\n * when it did not. Without the second a withheld month reads as a month that\n * stayed inside the band.\n */\nexport function meteredBandVerdictFields(band: ResolvedPluginMeteredBand): {\n  billed: string\n  withheldUsd: string\n} {\n  const field = meteredBandField(band)\n  return { billed: `${field}Billed`, withheldUsd: `${field}OverageWithheldUsd` }\n}\n\nexport function pluginSpendLines(): readonly ResolvedPluginSpendLine[] {\n  return PLUGIN_SPEND_LINES_DECLARED\n}\n\n/** A positive finite number, or 0 — the reading every meter is priced from. */\nfunction meterValue(value: unknown): number {\n  const parsed = Number(value ?? 0)\n  return Number.isFinite(parsed) && parsed > 0 ? parsed : 0\n}\n\n/**\n * What a rollup recorded for a declared meter: `fields` summed, or\n * `fallbackFields` summed when the rollup carries none of `fields` at all.\n *\n * \"Carries none\" is `null` or absent, never zero. A rollup that measured\n * zero has answered, and must not fall back to a figure recorded under an\n * older, narrower basis.\n */\nexport function declaredMeterReading(\n  source: Readonly<Record<string, unknown>> | null | undefined,\n  declared: {\n    fields: readonly string[]\n    fallbackFields?: readonly string[]\n  },\n): number {\n  const present = declared.fields.some((field) => source?.[field] != null)\n  const fields =\n    !present && declared.fallbackFields?.length\n      ? declared.fallbackFields\n      : declared.fields\n  return fields.reduce((sum, field) => sum + meterValue(source?.[field]), 0)\n}\n\n/**\n * The live reading a cost axis names: the first of its `live.fields` that is\n * a positive number on the month's document, or `undefined` when none is.\n * `undefined` is \"keep the rollup's snapshot\", never zero.\n */\nexport function liveMeterReading(\n  document: { get(field: string): unknown } | null | undefined,\n  live: { fields: readonly string[] },\n): number | undefined {\n  for (const field of live.fields) {\n    const value = meterValue(document?.get(field))\n    if (value > 0) return value\n  }\n  return undefined\n}\n\n/** Every rollup field the declared cost axes read or record, in order. */\nexport function pluginCostAxisFields(): string[] {\n  const fields: string[] = []\n  for (const axis of PLUGIN_COST_AXES_DECLARED) {\n    for (const field of [\n      ...axis.fields,\n      ...(axis.fallbackFields ?? []),\n      ...(axis.recordedFields ?? []),\n    ]) {\n      if (!fields.includes(field)) fields.push(field)\n    }\n  }\n  return fields\n}\n\n/**\n * A month's rollup as a staff reader is served it, one entry per field the\n * declared cost axes read, record or serve to staff (`get` reads one rollup\n * field).\n *\n * A field an axis prices reads zero where the rollup lacks it, as the cost\n * model reads it — except where the axis falls back to an older basis when\n * the rollup carries none of its fields: there absence is the answer that\n * selects the fallback, so it is served as `null`, and a reader pricing the\n * served row reads the month the way the sweep did. A field an axis only\n * records or serves reads `null` when the rollup never wrote it: \"not\n * recorded\" and \"recorded zero\" are different answers, and a projection\n * that collapses them invents history (AGL-2321).\n */\nexport function pluginCostAxisProjection(\n  get: (field: string) => unknown,\n): Record<string, number | null> {\n  const out: Record<string, number | null> = {}\n  for (const axis of PLUGIN_COST_AXES_DECLARED) {\n    const absentIsNull = [\n      ...(axis.fallbackFields?.length ? axis.fields : []),\n      ...(axis.recordedFields ?? []),\n      ...(axis.staffFields ?? []),\n    ]\n    for (const field of [\n      ...axis.fields,\n      ...(axis.fallbackFields ?? []),\n      ...(axis.recordedFields ?? []),\n      ...(axis.staffFields ?? []),\n    ]) {\n      if (field in out) continue\n      const value = get(field)\n      out[field] =\n        value != null ? Number(value) : absentIsNull.includes(field) ? null : 0\n    }\n  }\n  return out\n}\n"],"names":["PLUGIN_COST_AXES_DECLARED","PLUGIN_SPEND_LINES_DECLARED","PLUGIN_USAGE_BANDS_DECLARED","pluginCostAxes","pluginUsageBands","meteredPluginBands","filter","band","Boolean","metered","hostCounter","countedPluginBands","meteredBandField","fields","meteredBandVerdictFields","field","billed","withheldUsd","pluginSpendLines","meterValue","value","parsed","Number","isFinite","declaredMeterReading","source","declared","present","some","fallbackFields","length","reduce","sum","liveMeterReading","document","live","get","undefined","pluginCostAxisFields","axis","recordedFields","includes","push","pluginCostAxisProjection","out","absentIsNull","staffFields"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAoDC,GAGD,SACEA,yBAAyB,EACzBC,2BAA2B,EAC3BC,2BAA2B,QACtB,qCAAiC;AAsKxC,OAAO,SAASC;IACd,OAAOH;AACT;AAEA,OAAO,SAASI;IACd,OAAOF;AACT;AAQA;;;CAGC,GACD,OAAO,SAASG;IACd,OAAOH,4BAA4BI,MAAM,CACvC,CAACC,OACCC,QAAQD,KAAKE,OAAO,IAAIF,KAAKG,WAAW;AAE9C;AAOA;;;;;CAKC,GACD,OAAO,SAASC;IACd,OAAOT,4BAA4BI,MAAM,CACvC,CAACC,OACCC,QAAQD,KAAKG,WAAW,IAAI,CAACH,KAAKE,OAAO;AAE/C;AAEA,6DAA6D,GAC7D,OAAO,SAASG,iBAAiBL,IAA+B;IAC9D,OAAOA,KAAKM,MAAM,CAAC,EAAE;AACvB;AAEA;;;;;CAKC,GACD,OAAO,SAASC,yBAAyBP,IAA+B;IAItE,MAAMQ,QAAQH,iBAAiBL;IAC/B,OAAO;QAAES,QAAQ,GAAGD,MAAM,MAAM,CAAC;QAAEE,aAAa,GAAGF,MAAM,kBAAkB,CAAC;IAAC;AAC/E;AAEA,OAAO,SAASG;IACd,OAAOjB;AACT;AAEA,6EAA6E,GAC7E,SAASkB,WAAWC,KAAc;IAChC,MAAMC,SAASC,OAAOF,gBAAAA,QAAS;IAC/B,OAAOE,OAAOC,QAAQ,CAACF,WAAWA,SAAS,IAAIA,SAAS;AAC1D;AAEA;;;;;;;CAOC,GACD,OAAO,SAASG,qBACdC,MAA4D,EAC5DC,QAGC;QAIaA;IAFd,MAAMC,UAAUD,SAASb,MAAM,CAACe,IAAI,CAAC,CAACb,QAAUU,CAAAA,0BAAAA,MAAQ,CAACV,MAAM,KAAI;IACnE,MAAMF,SACJ,CAACc,aAAWD,2BAAAA,SAASG,cAAc,qBAAvBH,yBAAyBI,MAAM,IACvCJ,SAASG,cAAc,GACvBH,SAASb,MAAM;IACrB,OAAOA,OAAOkB,MAAM,CAAC,CAACC,KAAKjB,QAAUiB,MAAMb,WAAWM,0BAAAA,MAAQ,CAACV,MAAM,GAAG;AAC1E;AAEA;;;;CAIC,GACD,OAAO,SAASkB,iBACdC,QAA4D,EAC5DC,IAAmC;IAEnC,KAAK,MAAMpB,SAASoB,KAAKtB,MAAM,CAAE;QAC/B,MAAMO,QAAQD,WAAWe,4BAAAA,SAAUE,GAAG,CAACrB;QACvC,IAAIK,QAAQ,GAAG,OAAOA;IACxB;IACA,OAAOiB;AACT;AAEA,wEAAwE,GACxE,OAAO,SAASC;IACd,MAAMzB,SAAmB,EAAE;IAC3B,KAAK,MAAM0B,QAAQvC,0BAA2B;YAGtCuC,sBACAA;QAHN,KAAK,MAAMxB,SAAS;eACfwB,KAAK1B,MAAM;gBACV0B,uBAAAA,KAAKV,cAAc,YAAnBU,uBAAuB,EAAE;gBACzBA,uBAAAA,KAAKC,cAAc,YAAnBD,uBAAuB,EAAE;SAC9B,CAAE;YACD,IAAI,CAAC1B,OAAO4B,QAAQ,CAAC1B,QAAQF,OAAO6B,IAAI,CAAC3B;QAC3C;IACF;IACA,OAAOF;AACT;AAEA;;;;;;;;;;;;;CAaC,GACD,OAAO,SAAS8B,yBACdP,GAA+B;IAE/B,MAAMQ,MAAqC,CAAC;IAC5C,KAAK,MAAML,QAAQvC,0BAA2B;YAGtCuC,sBACAA,mBAIAA,sBACAA,uBACAA;YARAA;QADN,MAAMM,eAAe;eACfN,EAAAA,wBAAAA,KAAKV,cAAc,qBAAnBU,sBAAqBT,MAAM,IAAGS,KAAK1B,MAAM,GAAG,EAAE;gBAC9C0B,uBAAAA,KAAKC,cAAc,YAAnBD,uBAAuB,EAAE;gBACzBA,oBAAAA,KAAKO,WAAW,YAAhBP,oBAAoB,EAAE;SAC3B;QACD,KAAK,MAAMxB,SAAS;eACfwB,KAAK1B,MAAM;gBACV0B,uBAAAA,KAAKV,cAAc,YAAnBU,uBAAuB,EAAE;gBACzBA,wBAAAA,KAAKC,cAAc,YAAnBD,wBAAuB,EAAE;gBACzBA,qBAAAA,KAAKO,WAAW,YAAhBP,qBAAoB,EAAE;SAC3B,CAAE;YACD,IAAIxB,SAAS6B,KAAK;YAClB,MAAMxB,QAAQgB,IAAIrB;YAClB6B,GAAG,CAAC7B,MAAM,GACRK,SAAS,OAAOE,OAAOF,SAASyB,aAAaJ,QAAQ,CAAC1B,SAAS,OAAO;QAC1E;IACF;IACA,OAAO6B;AACT"}
+{"version":3,"sources":["../../../../../../libs/aglyn/src/lib/plugin-manager/plugin-usage-axes.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n/**\n * WHAT A PLUGIN'S USAGE COSTS, AND HOW MUCH OF ITS BAND IT SPENT (AGL-3080).\n *\n * The platform keeps one cost model (`orgMonthlyCogsUsd`) and one\n * utilization table (`margin-utilization.ts`), and both read the monthly\n * usage rollup. Several of the rollup's meters are a plugin's: the AI\n * plugin's provider spend, the CRM's records, the forms plugin's\n * submissions, the workflows plugin's runs. Core used to name each of them —\n * its rollup field, the unit rate that prices it, the band it is measured\n * against — so a plugin that metered something new could not reach the\n * discount guardrail without a core edit, and core could not be taken\n * without the plugins it named.\n *\n * So a plugin declares its meters, and core composes them:\n *\n *  - a COST AXIS names the rollup fields a meter is recorded under and the\n *    `ORG_COGS_UNIT_RATES_USD` key that prices one unit, or no key when the\n *    field is already dollars. `orgMonthlyCogsUsd` prices it beside core's\n *    own axes, and `orgCogsInputFrom` forwards its fields.\n *  - a BAND names the rollup fields that measure it and the entitlement that\n *    says what the plan includes. The utilization table reads it beside\n *    core's own bands. A METERED band is also billed past what the plan\n *    includes, at its published billed rate (cost + 30% kept after card\n *    fees), beside storage and bandwidth: the invoice sweep, the Billing\n *    card's estimate, the monthly summary and the staff usage rows read it\n *    from here.\n *  - a SPEND LINE names the month document holding what the plugin's usage\n *    came to at the rates it bills, the deployment variable naming the month\n *    it is first charged for, and the unit a customer sees it in. The usage\n *    budget shows it beside the metered figure and counts it once charged.\n *  - a METER names what the plugin measures in the monthly usage sweep\n *    (`plugin-usage-meters.ts`), so the sweep can refuse to bill a month the\n *    registered meter is missing from.\n *\n * ## What core keeps\n *\n * The MONEY. Every unit rate stays in `ORG_COGS_UNIT_RATES_USD`, beside the\n * billed table it is reconciled against (`METERED_UNIT_RATES_USD`, which a\n * metered band names its rate in), and every included figure stays in\n * `PLAN_ENTITLEMENTS`. A declaration names fields and keys; it carries no\n * price. The one number a declaration may carry is a band's unit cost, where\n * the band is sold in a unit OF cost (a credit is a fixed quantity of\n * dollars), and that number is the plugin's own definition of its unit.\n *\n * ## Compiled, never registered\n *\n * The cost model's readers include the staff org page, which prices a rollup\n * in the browser, and the discount guardrail, whose every wrong answer is in\n * the approving direction: a cost axis a registry had not filled would price\n * at nothing and approve a discount the margin cannot carry. So these are\n * compiled from each plugin's `usage-axes` declaration by the manifest\n * generator, like the plan figures, and a rate key core does not have is an\n * error rather than a zero.\n */\n\nimport type { ReleaseFlagKey } from '../app-utils/release-flags'\nimport {\n  PLUGIN_COST_AXES_DECLARED,\n  PLUGIN_SPEND_LINES_DECLARED,\n  PLUGIN_USAGE_BANDS_DECLARED,\n} from './first-party-plugins.generated'\n\n/** A meter a plugin contributes to the platform's cost model. */\nexport interface PluginCostAxisDeclaration {\n  /** The breakdown key every staff reader shows it under. */\n  id: string\n  /** Where it sorts among the cost model's axes; core's own are multiples of 10. */\n  order: number\n  /** Rollup fields summed for the axis. */\n  fields: readonly string[]\n  /**\n   * Read only when every one of `fields` is absent from a rollup — the\n   * narrower field an older rollup recorded the same meter under.\n   */\n  fallbackFields?: readonly string[]\n  /**\n   * Rollup fields recorded beside the meter so its sum is legible, forwarded\n   * by `orgCogsInputFrom` and never priced.\n   */\n  recordedFields?: readonly string[]\n  /**\n   * Rollup fields the plugin's usage sweep writes beside the meter for its\n   * staff surfaces to read — served on the staff usage rows, `null` where a\n   * rollup never wrote one, and never forwarded to the cost model.\n   */\n  staffFields?: readonly string[]\n  /**\n   * The `ORG_COGS_UNIT_RATES_USD` key pricing one unit. Absent when the\n   * fields are already dollars, which then enter the model at ×1.\n   */\n  rate?: string\n  /**\n   * The month's LIVE reading, when the rollup's figure is a snapshot a meter\n   * keeps adding to: `orgs/{orgId}/{collection}/{month}`, the first of\n   * `fields` that is a positive number. It replaces the axis's first rollup\n   * field wherever a reader fetches it.\n   */\n  live?: { collection: string; fields: readonly string[] }\n}\n\n/** A band a plugin contributes to the utilization table. */\nexport interface PluginUsageBandDeclaration {\n  /** The band's key, and the column the staff table shows it under. */\n  id: string\n  label: string\n  order: number\n  /** Rollup fields summed for what the org used. */\n  fields: readonly string[]\n  fallbackFields?: readonly string[]\n  /** The resolved entitlement holding what the plan includes. */\n  entitlement: string\n  /** The entitlement is per SITE and the org-wide band is it × `hostLimit`. */\n  perHost?: boolean\n  /**\n   * The band is sold in a unit of cost and the rollup records dollars: what\n   * was used is `ceil(dollars / unitCostUsd)`, rounded UP so spend already\n   * made never reads as less of the band.\n   */\n  unitCostUsd?: number\n  /**\n   * The per-site monthly counter the band is measured by:\n   * `hosts/{hostId}/counters/{hostCounter}`, field `{month}`, summed over the\n   * workspace's sites.\n   */\n  hostCounter?: string\n  /**\n   * The WORKSPACE-wide monthly counter the band is enforced against:\n   * `orgs/{orgId}/counters/{orgCounter}`, field `{month}` (AGL-3472). Declared\n   * by a band whose runtime counts every unit on the org's counter as well as\n   * on the site's, in one write, so a workspace-wide band is held to every\n   * site's use rather than handed to each site whole. The Billing card meters\n   * the band once for the organization from it, where a band without one is\n   * metered per site. The usage sweep and alerts still sum `hostCounter`,\n   * which the same write moves.\n   */\n  orgCounter?: string\n  /**\n   * The workspace is WARNED as it approaches and reaches this band, by the\n   * usage-alerts sweep, from its `hostCounter` against what the plan includes\n   * of `entitlement`, once per threshold per month. `label` names the band in\n   * the title (\"monthly workflow runs\") and `noun` in the opening sentence\n   * (\"workflow runs\"); `outcome` is what happens at the band — `stops`,\n   * `bills` or `continues` — and `reached` and `approach` are the sentences\n   * that say so, at the band and approaching it.\n   */\n  alert?: {\n    label: string\n    noun: string\n    outcome: 'stops' | 'bills' | 'continues'\n    reached: string\n    approach: string\n  }\n  /**\n   * The console's quota banner WARNS an organization-wide reader on every\n   * console page as the workspace approaches and reaches this band\n   * (AGL-2898, AGL-3080). `standing` is a console API path the plugin\n   * serves, asked `?orgId=` with the reader's token, that answers the\n   * band's standing in its own unit under `member` — `{ used, limit }`,\n   * `limit: null` for a plan with no band, which is no row — and\n   * `stopsAtBand`: whether reaching it stops the feature (the reading when\n   * the route does not say) or bills past it. `approach` is the sentence\n   * above 80%; `reached.stops` and `reached.bills` the two at the band.\n   * `linksUsage` says the sentences name Billing → Usage, and the banner\n   * offers the link.\n   *\n   * A route, not a counter: a band's meter may be one no client may read,\n   * and the route answers in the unit the customer was sold.\n   */\n  consoleWarning?: {\n    standing: string\n    member: string\n    approach: string\n    reached: { stops: string; bills: string }\n    linksUsage?: boolean\n  }\n  /**\n   * The band is one of the INFRASTRUCTURE meters (AGL-1280): what the\n   * workspace uses past it is billed at its published billed rate (cost +\n   * 30% kept after card fees), beside storage and bandwidth, on the same\n   * invoice line and the same estimate.\n   * A metered band names one rollup field and the `hostCounter` it is\n   * measured by.\n   */\n  metered?: PluginMeteredBand\n}\n\n/** How a metered band is priced, quoted and withheld. */\nexport interface PluginMeteredBand {\n  /**\n   * The `METERED_UNIT_RATES_USD` key holding our cost per unit — never a\n   * number: the rate table is the platform's, beside the markup it is\n   * published with.\n   */\n  rate: string\n  /** The count a published price is quoted per: `1000` reads \"per 1,000\". */\n  quotedPer: number\n  /** The band in running prose, plural and lowercase: \"form submissions\". */\n  noun: string\n  /**\n   * A release flag the overage waits behind: while it is off for the\n   * workspace, the units are counted and the charge is recorded as withheld\n   * rather than billed — nobody is charged for what they cannot reach\n   * (AGL-1604). The rollup records the verdict as `{field}Billed` and what\n   * was forgone, at cost, as `{field}OverageWithheldUsd`.\n   */\n  withheldUntil?: ReleaseFlagKey\n}\n\n/**\n * A line of a workspace's monthly SPEND a plugin contributes to its usage\n * budget (`usage-budget.ts`): what the plugin's usage came to this month, in\n * the dollars it is billed at, shown on the customer's budget card and\n * counted toward the budget from the month the plugin starts charging for it.\n */\nexport interface PluginSpendLineDeclaration {\n  /** The line's key. */\n  id: string\n  /** What the budget card and the budget alert call it. */\n  label: string\n  /**\n   * Where the month's figure is read: `orgs/{orgId}/{collection}/{month}`,\n   * field `field`, in dollars.\n   */\n  live: { collection: string; field: string }\n  /**\n   * The deployment variable naming the first month (`YYYY-MM`) the line is\n   * charged for. Until it names this month or an earlier one — and on any\n   * value that is not a month — the line is shown and never counted.\n   */\n  billedFromEnv: string\n  /**\n   * The unit the customer is shown the line in, when the stored dollars are\n   * not theirs to see: `ceil(dollars / costUsd)` of `label`, and the dollar\n   * figure never crosses to the browser.\n   */\n  unit?: { costUsd: number; label: string }\n}\n\n/**\n * A meter the plugin measures in the platform's monthly usage sweep and\n * registers at runtime (`plugin-usage-meters.ts`). Declared as well as\n * registered so the sweep can refuse to bill a workspace's month without it.\n */\nexport interface PluginUsageMeterDeclaration {\n  /** As `registerPluginUsageMeter` names it. */\n  id: string\n}\n\nexport type ResolvedPluginCostAxis = PluginCostAxisDeclaration & { pluginId: string }\nexport type ResolvedPluginUsageBand = PluginUsageBandDeclaration & { pluginId: string }\nexport type ResolvedPluginSpendLine = PluginSpendLineDeclaration & { pluginId: string }\nexport type ResolvedPluginUsageMeter = PluginUsageMeterDeclaration & { pluginId: string }\n\n/** What a plugin's `usageAxes` function answers. */\nexport interface PluginUsageAxesDeclaration {\n  costAxes?: readonly PluginCostAxisDeclaration[]\n  bands?: readonly PluginUsageBandDeclaration[]\n  spendLines?: readonly PluginSpendLineDeclaration[]\n  meters?: readonly PluginUsageMeterDeclaration[]\n}\n\nexport function pluginCostAxes(): readonly ResolvedPluginCostAxis[] {\n  return PLUGIN_COST_AXES_DECLARED\n}\n\nexport function pluginUsageBands(): readonly ResolvedPluginUsageBand[] {\n  return PLUGIN_USAGE_BANDS_DECLARED\n}\n\n/** A declared band that is metered, with its one field and its counter. */\nexport type ResolvedPluginMeteredBand = ResolvedPluginUsageBand & {\n  metered: PluginMeteredBand\n  hostCounter: string\n}\n\n/**\n * Every band billed at cost past what the plan includes, in band order — the\n * infrastructure meters a plugin adds beside storage and bandwidth.\n */\nexport function meteredPluginBands(): readonly ResolvedPluginMeteredBand[] {\n  return PLUGIN_USAGE_BANDS_DECLARED.filter(\n    (band): band is ResolvedPluginMeteredBand =>\n      Boolean(band.metered && band.hostCounter),\n  )\n}\n\n/** A declared band measured by a per-site counter and never billed past it. */\nexport type ResolvedPluginCountedBand = ResolvedPluginUsageBand & {\n  hostCounter: string\n}\n\n/**\n * Every band measured by a per-site counter and not metered, in band order:\n * the usage sweep sums each across the workspace's sites and records it under\n * the band's first field, and the staff usage rows show the count. A metered\n * band's counter is read with the infrastructure meters instead.\n */\nexport function countedPluginBands(): readonly ResolvedPluginCountedBand[] {\n  return PLUGIN_USAGE_BANDS_DECLARED.filter(\n    (band): band is ResolvedPluginCountedBand =>\n      Boolean(band.hostCounter && !band.metered),\n  )\n}\n\n/** A declared band kept on a workspace-wide counter. */\nexport type ResolvedPluginOrgCountedBand = ResolvedPluginUsageBand & {\n  orgCounter: string\n}\n\n/**\n * Every band with a workspace-wide counter (`orgCounter`), in band order: the\n * bands the Billing card meters once for the organization, from the counter\n * the band is enforced against.\n */\nexport function orgCountedPluginBands(): readonly ResolvedPluginOrgCountedBand[] {\n  return PLUGIN_USAGE_BANDS_DECLARED.filter(\n    (band): band is ResolvedPluginOrgCountedBand => Boolean(band.orgCounter),\n  )\n}\n\n/** The rollup field a metered band records its count under. */\nexport function meteredBandField(band: ResolvedPluginMeteredBand): string {\n  return band.fields[0]!\n}\n\n/**\n * Where the rollup records a withheld band's verdict (`metered.withheldUntil`):\n * whether the month billed the band's overage, and what was forgone, at cost,\n * when it did not. Without the second a withheld month reads as a month that\n * stayed inside the band.\n */\nexport function meteredBandVerdictFields(band: ResolvedPluginMeteredBand): {\n  billed: string\n  withheldUsd: string\n} {\n  const field = meteredBandField(band)\n  return { billed: `${field}Billed`, withheldUsd: `${field}OverageWithheldUsd` }\n}\n\nexport function pluginSpendLines(): readonly ResolvedPluginSpendLine[] {\n  return PLUGIN_SPEND_LINES_DECLARED\n}\n\n/** A positive finite number, or 0 — the reading every meter is priced from. */\nfunction meterValue(value: unknown): number {\n  const parsed = Number(value ?? 0)\n  return Number.isFinite(parsed) && parsed > 0 ? parsed : 0\n}\n\n/**\n * What a rollup recorded for a declared meter: `fields` summed, or\n * `fallbackFields` summed when the rollup carries none of `fields` at all.\n *\n * \"Carries none\" is `null` or absent, never zero. A rollup that measured\n * zero has answered, and must not fall back to a figure recorded under an\n * older, narrower basis.\n */\nexport function declaredMeterReading(\n  source: Readonly<Record<string, unknown>> | null | undefined,\n  declared: {\n    fields: readonly string[]\n    fallbackFields?: readonly string[]\n  },\n): number {\n  const present = declared.fields.some((field) => source?.[field] != null)\n  const fields =\n    !present && declared.fallbackFields?.length\n      ? declared.fallbackFields\n      : declared.fields\n  return fields.reduce((sum, field) => sum + meterValue(source?.[field]), 0)\n}\n\n/**\n * The live reading a cost axis names: the first of its `live.fields` that is\n * a positive number on the month's document, or `undefined` when none is.\n * `undefined` is \"keep the rollup's snapshot\", never zero.\n */\nexport function liveMeterReading(\n  document: { get(field: string): unknown } | null | undefined,\n  live: { fields: readonly string[] },\n): number | undefined {\n  for (const field of live.fields) {\n    const value = meterValue(document?.get(field))\n    if (value > 0) return value\n  }\n  return undefined\n}\n\n/** Every rollup field the declared cost axes read or record, in order. */\nexport function pluginCostAxisFields(): string[] {\n  const fields: string[] = []\n  for (const axis of PLUGIN_COST_AXES_DECLARED) {\n    for (const field of [\n      ...axis.fields,\n      ...(axis.fallbackFields ?? []),\n      ...(axis.recordedFields ?? []),\n    ]) {\n      if (!fields.includes(field)) fields.push(field)\n    }\n  }\n  return fields\n}\n\n/**\n * A month's rollup as a staff reader is served it, one entry per field the\n * declared cost axes read, record or serve to staff (`get` reads one rollup\n * field).\n *\n * A field an axis prices reads zero where the rollup lacks it, as the cost\n * model reads it — except where the axis falls back to an older basis when\n * the rollup carries none of its fields: there absence is the answer that\n * selects the fallback, so it is served as `null`, and a reader pricing the\n * served row reads the month the way the sweep did. A field an axis only\n * records or serves reads `null` when the rollup never wrote it: \"not\n * recorded\" and \"recorded zero\" are different answers, and a projection\n * that collapses them invents history (AGL-2321).\n */\nexport function pluginCostAxisProjection(\n  get: (field: string) => unknown,\n): Record<string, number | null> {\n  const out: Record<string, number | null> = {}\n  for (const axis of PLUGIN_COST_AXES_DECLARED) {\n    const absentIsNull = [\n      ...(axis.fallbackFields?.length ? axis.fields : []),\n      ...(axis.recordedFields ?? []),\n      ...(axis.staffFields ?? []),\n    ]\n    for (const field of [\n      ...axis.fields,\n      ...(axis.fallbackFields ?? []),\n      ...(axis.recordedFields ?? []),\n      ...(axis.staffFields ?? []),\n    ]) {\n      if (field in out) continue\n      const value = get(field)\n      out[field] =\n        value != null ? Number(value) : absentIsNull.includes(field) ? null : 0\n    }\n  }\n  return out\n}\n"],"names":["PLUGIN_COST_AXES_DECLARED","PLUGIN_SPEND_LINES_DECLARED","PLUGIN_USAGE_BANDS_DECLARED","pluginCostAxes","pluginUsageBands","meteredPluginBands","filter","band","Boolean","metered","hostCounter","countedPluginBands","orgCountedPluginBands","orgCounter","meteredBandField","fields","meteredBandVerdictFields","field","billed","withheldUsd","pluginSpendLines","meterValue","value","parsed","Number","isFinite","declaredMeterReading","source","declared","present","some","fallbackFields","length","reduce","sum","liveMeterReading","document","live","get","undefined","pluginCostAxisFields","axis","recordedFields","includes","push","pluginCostAxisProjection","out","absentIsNull","staffFields"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAqDC,GAGD,SACEA,yBAAyB,EACzBC,2BAA2B,EAC3BC,2BAA2B,QACtB,qCAAiC;AAyMxC,OAAO,SAASC;IACd,OAAOH;AACT;AAEA,OAAO,SAASI;IACd,OAAOF;AACT;AAQA;;;CAGC,GACD,OAAO,SAASG;IACd,OAAOH,4BAA4BI,MAAM,CACvC,CAACC,OACCC,QAAQD,KAAKE,OAAO,IAAIF,KAAKG,WAAW;AAE9C;AAOA;;;;;CAKC,GACD,OAAO,SAASC;IACd,OAAOT,4BAA4BI,MAAM,CACvC,CAACC,OACCC,QAAQD,KAAKG,WAAW,IAAI,CAACH,KAAKE,OAAO;AAE/C;AAOA;;;;CAIC,GACD,OAAO,SAASG;IACd,OAAOV,4BAA4BI,MAAM,CACvC,CAACC,OAA+CC,QAAQD,KAAKM,UAAU;AAE3E;AAEA,6DAA6D,GAC7D,OAAO,SAASC,iBAAiBP,IAA+B;IAC9D,OAAOA,KAAKQ,MAAM,CAAC,EAAE;AACvB;AAEA;;;;;CAKC,GACD,OAAO,SAASC,yBAAyBT,IAA+B;IAItE,MAAMU,QAAQH,iBAAiBP;IAC/B,OAAO;QAAEW,QAAQ,GAAGD,MAAM,MAAM,CAAC;QAAEE,aAAa,GAAGF,MAAM,kBAAkB,CAAC;IAAC;AAC/E;AAEA,OAAO,SAASG;IACd,OAAOnB;AACT;AAEA,6EAA6E,GAC7E,SAASoB,WAAWC,KAAc;IAChC,MAAMC,SAASC,OAAOF,gBAAAA,QAAS;IAC/B,OAAOE,OAAOC,QAAQ,CAACF,WAAWA,SAAS,IAAIA,SAAS;AAC1D;AAEA;;;;;;;CAOC,GACD,OAAO,SAASG,qBACdC,MAA4D,EAC5DC,QAGC;QAIaA;IAFd,MAAMC,UAAUD,SAASb,MAAM,CAACe,IAAI,CAAC,CAACb,QAAUU,CAAAA,0BAAAA,MAAQ,CAACV,MAAM,KAAI;IACnE,MAAMF,SACJ,CAACc,aAAWD,2BAAAA,SAASG,cAAc,qBAAvBH,yBAAyBI,MAAM,IACvCJ,SAASG,cAAc,GACvBH,SAASb,MAAM;IACrB,OAAOA,OAAOkB,MAAM,CAAC,CAACC,KAAKjB,QAAUiB,MAAMb,WAAWM,0BAAAA,MAAQ,CAACV,MAAM,GAAG;AAC1E;AAEA;;;;CAIC,GACD,OAAO,SAASkB,iBACdC,QAA4D,EAC5DC,IAAmC;IAEnC,KAAK,MAAMpB,SAASoB,KAAKtB,MAAM,CAAE;QAC/B,MAAMO,QAAQD,WAAWe,4BAAAA,SAAUE,GAAG,CAACrB;QACvC,IAAIK,QAAQ,GAAG,OAAOA;IACxB;IACA,OAAOiB;AACT;AAEA,wEAAwE,GACxE,OAAO,SAASC;IACd,MAAMzB,SAAmB,EAAE;IAC3B,KAAK,MAAM0B,QAAQzC,0BAA2B;YAGtCyC,sBACAA;QAHN,KAAK,MAAMxB,SAAS;eACfwB,KAAK1B,MAAM;gBACV0B,uBAAAA,KAAKV,cAAc,YAAnBU,uBAAuB,EAAE;gBACzBA,uBAAAA,KAAKC,cAAc,YAAnBD,uBAAuB,EAAE;SAC9B,CAAE;YACD,IAAI,CAAC1B,OAAO4B,QAAQ,CAAC1B,QAAQF,OAAO6B,IAAI,CAAC3B;QAC3C;IACF;IACA,OAAOF;AACT;AAEA;;;;;;;;;;;;;CAaC,GACD,OAAO,SAAS8B,yBACdP,GAA+B;IAE/B,MAAMQ,MAAqC,CAAC;IAC5C,KAAK,MAAML,QAAQzC,0BAA2B;YAGtCyC,sBACAA,mBAIAA,sBACAA,uBACAA;YARAA;QADN,MAAMM,eAAe;eACfN,EAAAA,wBAAAA,KAAKV,cAAc,qBAAnBU,sBAAqBT,MAAM,IAAGS,KAAK1B,MAAM,GAAG,EAAE;gBAC9C0B,uBAAAA,KAAKC,cAAc,YAAnBD,uBAAuB,EAAE;gBACzBA,oBAAAA,KAAKO,WAAW,YAAhBP,oBAAoB,EAAE;SAC3B;QACD,KAAK,MAAMxB,SAAS;eACfwB,KAAK1B,MAAM;gBACV0B,uBAAAA,KAAKV,cAAc,YAAnBU,uBAAuB,EAAE;gBACzBA,wBAAAA,KAAKC,cAAc,YAAnBD,wBAAuB,EAAE;gBACzBA,qBAAAA,KAAKO,WAAW,YAAhBP,qBAAoB,EAAE;SAC3B,CAAE;YACD,IAAIxB,SAAS6B,KAAK;YAClB,MAAMxB,QAAQgB,IAAIrB;YAClB6B,GAAG,CAAC7B,MAAM,GACRK,SAAS,OAAOE,OAAOF,SAASyB,aAAaJ,QAAQ,CAAC1B,SAAS,OAAO;QAC1E;IACF;IACA,OAAO6B;AACT"}

package/src/lib/plugin-manager/plugin-user-erasure.js

@@ -1,3 +1,4 @@
+var _globalScope_ERASERS_KEY;
 /**
  * @license
  * Copyright 2026 Aglyn LLC
@@ -34,7 +35,14 @@
  * Registered from a plugin's `serverDeclarations` entry, so the eraser is in
  * place in a server process that never loaded the plugin's API surface.
  */ import { getRegisteringPluginId } from "../app-utils/registering-plugin.js";
-const registrations = [];
+/**
+ * One list per process, on `globalThis` (AGL-3464): the app registers its
+ * plugins' erasers from `instrumentation.ts`, which Next compiles apart from
+ * the route that runs the erasure, and a module-scoped list is filled in one
+ * copy and read empty in the other — the AGL-3412 shape.
+ */ const ERASERS_KEY = Symbol.for('@aglyn/aglyn:plugin-user-erasers');
+const globalScope = globalThis;
+const registrations = (_globalScope_ERASERS_KEY = globalScope[ERASERS_KEY]) != null ? _globalScope_ERASERS_KEY : globalScope[ERASERS_KEY] = [];
 /**
  * Registers a plugin's eraser. Owner = the loader's marker inside a register
  * fn, else `options.pluginId`; an eraser with neither throws. One eraser per

package/src/lib/plugin-manager/plugin-user-erasure.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../../../libs/aglyn/src/lib/plugin-manager/plugin-user-erasure.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n/**\n * A plugin's share of an account erasure (AGL-2939).\n *\n * The account erasure deletes what core stores about a person: the user\n * document and its subcollections, the memberships, the public profile, the\n * delivery log and the auth record. A plugin that keeps data ABOUT a person\n * where none of that reaches — documents under an org keyed by the uid, a\n * collection carrying the uid as a field — registers an eraser here, and\n * the erasure runs every eraser with the person's uid and the workspaces\n * they belonged to.\n *\n * Erasers run in registration order and are ISOLATED: a throw is logged\n * against its plugin, recorded as `null`, and does not stop the next one.\n * An erasure runs against a legal clock, and one plugin's outage must not\n * keep every other plugin's data past it. The `null` is how the erasure's\n * audit record says that plugin's data may remain, which a report of zero\n * would hide.\n *\n * Registered from a plugin's `serverDeclarations` entry, so the eraser is in\n * place in a server process that never loaded the plugin's API surface.\n */\n\nimport { getRegisteringPluginId } from '../app-utils/registering-plugin'\n\n/** What an eraser is asked to erase. */\nexport interface PluginUserErasureRequest {\n  /** The account being erased. */\n  uid: string\n  /**\n   * Every workspace the person belonged to when the erasure began. Their\n   * memberships are removed before the erasers run, so this is the only\n   * record of them an eraser gets.\n   */\n  orgIds: readonly string[]\n}\n\n/**\n * What an eraser reports for the erasure's audit record: counts and flags,\n * never the erased content, because the record outlives the data by design.\n * A `null` field is a figure the eraser could not measure, which is not zero.\n */\nexport type PluginUserErasureReport = Readonly<Record<string, number | boolean | null>>\n\nexport type PluginUserEraser = (\n  request: PluginUserErasureRequest,\n) => Promise<PluginUserErasureReport>\n\ninterface Registration {\n  pluginId: string\n  eraser: PluginUserEraser\n}\n\nconst registrations: Registration[] = []\n\n/**\n * Registers a plugin's eraser. Owner = the loader's marker inside a register\n * fn, else `options.pluginId`; an eraser with neither throws. One eraser per\n * plugin: registering again replaces the plugin's earlier eraser in place,\n * so a module evaluated twice does not erase twice.\n */\nexport function registerPluginUserEraser(\n  eraser: PluginUserEraser,\n  options?: { pluginId?: string },\n): void {\n  const pluginId = (getRegisteringPluginId() ?? options?.pluginId ?? '').trim()\n  if (!pluginId) {\n    throw new Error(\n      'a plugin user eraser was registered with no owner: pass { pluginId } ' +\n        'when registering outside a plugin register fn',\n    )\n  }\n  const index = registrations.findIndex((entry) => entry.pluginId === pluginId)\n  if (index >= 0) registrations[index] = { pluginId, eraser }\n  else registrations.push({ pluginId, eraser })\n}\n\n/**\n * Runs every eraser, in registration order, and answers each plugin's\n * report by plugin id: the eraser's own report, or `null` for one that\n * threw.\n */\nexport async function runPluginUserErasers(\n  request: PluginUserErasureRequest,\n): Promise<Record<string, PluginUserErasureReport | null>> {\n  const reports: Record<string, PluginUserErasureReport | null> = {}\n  for (const { pluginId, eraser } of [...registrations]) {\n    try {\n      reports[pluginId] = await eraser(request)\n    } catch (error) {\n      reports[pluginId] = null\n      console.error(`[plugins] ${pluginId} failed to erase user ${request.uid}`, error)\n    }\n  }\n  return reports\n}\n\n/** The plugins with an eraser, in the order they run. */\nexport function listPluginUserErasers(): string[] {\n  return registrations.map((entry) => entry.pluginId)\n}\n\n/** Test seam: forget every eraser. */\nexport function resetPluginUserErasersForTests(): void {\n  registrations.length = 0\n}\n"],"names":["getRegisteringPluginId","registrations","registerPluginUserEraser","eraser","options","pluginId","trim","Error","index","findIndex","entry","push","runPluginUserErasers","request","reports","error","console","uid","listPluginUserErasers","map","resetPluginUserErasersForTests","length"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED;;;;;;;;;;;;;;;;;;;;CAoBC,GAED,SAASA,sBAAsB,QAAQ,qCAAiC;AA8BxE,MAAMC,gBAAgC,EAAE;AAExC;;;;;CAKC,GACD,OAAO,SAASC,yBACdC,MAAwB,EACxBC,OAA+B;QAEbJ,MAAAA;IAAlB,MAAMK,WAAW,EAACL,QAAAA,0BAAAA,oCAAAA,0BAA4BI,2BAAAA,QAASC,QAAQ,YAA7CL,OAAiD,IAAIM,IAAI;IAC3E,IAAI,CAACD,UAAU;QACb,MAAM,IAAIE,MACR,0EACE;IAEN;IACA,MAAMC,QAAQP,cAAcQ,SAAS,CAAC,CAACC,QAAUA,MAAML,QAAQ,KAAKA;IACpE,IAAIG,SAAS,GAAGP,aAAa,CAACO,MAAM,GAAG;QAAEH;QAAUF;IAAO;SACrDF,cAAcU,IAAI,CAAC;QAAEN;QAAUF;IAAO;AAC7C;AAEA;;;;CAIC,GACD,OAAO,eAAeS,qBACpBC,OAAiC;IAEjC,MAAMC,UAA0D,CAAC;IACjE,KAAK,MAAM,EAAET,QAAQ,EAAEF,MAAM,EAAE,IAAI;WAAIF;KAAc,CAAE;QACrD,IAAI;YACFa,OAAO,CAACT,SAAS,GAAG,MAAMF,OAAOU;QACnC,EAAE,OAAOE,OAAO;YACdD,OAAO,CAACT,SAAS,GAAG;YACpBW,QAAQD,KAAK,CAAC,CAAC,UAAU,EAAEV,SAAS,sBAAsB,EAAEQ,QAAQI,GAAG,EAAE,EAAEF;QAC7E;IACF;IACA,OAAOD;AACT;AAEA,uDAAuD,GACvD,OAAO,SAASI;IACd,OAAOjB,cAAckB,GAAG,CAAC,CAACT,QAAUA,MAAML,QAAQ;AACpD;AAEA,oCAAoC,GACpC,OAAO,SAASe;IACdnB,cAAcoB,MAAM,GAAG;AACzB"}
+{"version":3,"sources":["../../../../../../libs/aglyn/src/lib/plugin-manager/plugin-user-erasure.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n/**\n * A plugin's share of an account erasure (AGL-2939).\n *\n * The account erasure deletes what core stores about a person: the user\n * document and its subcollections, the memberships, the public profile, the\n * delivery log and the auth record. A plugin that keeps data ABOUT a person\n * where none of that reaches — documents under an org keyed by the uid, a\n * collection carrying the uid as a field — registers an eraser here, and\n * the erasure runs every eraser with the person's uid and the workspaces\n * they belonged to.\n *\n * Erasers run in registration order and are ISOLATED: a throw is logged\n * against its plugin, recorded as `null`, and does not stop the next one.\n * An erasure runs against a legal clock, and one plugin's outage must not\n * keep every other plugin's data past it. The `null` is how the erasure's\n * audit record says that plugin's data may remain, which a report of zero\n * would hide.\n *\n * Registered from a plugin's `serverDeclarations` entry, so the eraser is in\n * place in a server process that never loaded the plugin's API surface.\n */\n\nimport { getRegisteringPluginId } from '../app-utils/registering-plugin'\n\n/** What an eraser is asked to erase. */\nexport interface PluginUserErasureRequest {\n  /** The account being erased. */\n  uid: string\n  /**\n   * Every workspace the person belonged to when the erasure began. Their\n   * memberships are removed before the erasers run, so this is the only\n   * record of them an eraser gets.\n   */\n  orgIds: readonly string[]\n}\n\n/**\n * What an eraser reports for the erasure's audit record: counts and flags,\n * never the erased content, because the record outlives the data by design.\n * A `null` field is a figure the eraser could not measure, which is not zero.\n */\nexport type PluginUserErasureReport = Readonly<Record<string, number | boolean | null>>\n\nexport type PluginUserEraser = (\n  request: PluginUserErasureRequest,\n) => Promise<PluginUserErasureReport>\n\ninterface Registration {\n  pluginId: string\n  eraser: PluginUserEraser\n}\n\n/**\n * One list per process, on `globalThis` (AGL-3464): the app registers its\n * plugins' erasers from `instrumentation.ts`, which Next compiles apart from\n * the route that runs the erasure, and a module-scoped list is filled in one\n * copy and read empty in the other — the AGL-3412 shape.\n */\nconst ERASERS_KEY = Symbol.for('@aglyn/aglyn:plugin-user-erasers')\n\nconst globalScope = globalThis as typeof globalThis & {\n  [ERASERS_KEY]?: Registration[]\n}\n\nconst registrations: Registration[] =\n  globalScope[ERASERS_KEY] ?? (globalScope[ERASERS_KEY] = [])\n\n/**\n * Registers a plugin's eraser. Owner = the loader's marker inside a register\n * fn, else `options.pluginId`; an eraser with neither throws. One eraser per\n * plugin: registering again replaces the plugin's earlier eraser in place,\n * so a module evaluated twice does not erase twice.\n */\nexport function registerPluginUserEraser(\n  eraser: PluginUserEraser,\n  options?: { pluginId?: string },\n): void {\n  const pluginId = (getRegisteringPluginId() ?? options?.pluginId ?? '').trim()\n  if (!pluginId) {\n    throw new Error(\n      'a plugin user eraser was registered with no owner: pass { pluginId } ' +\n        'when registering outside a plugin register fn',\n    )\n  }\n  const index = registrations.findIndex((entry) => entry.pluginId === pluginId)\n  if (index >= 0) registrations[index] = { pluginId, eraser }\n  else registrations.push({ pluginId, eraser })\n}\n\n/**\n * Runs every eraser, in registration order, and answers each plugin's\n * report by plugin id: the eraser's own report, or `null` for one that\n * threw.\n */\nexport async function runPluginUserErasers(\n  request: PluginUserErasureRequest,\n): Promise<Record<string, PluginUserErasureReport | null>> {\n  const reports: Record<string, PluginUserErasureReport | null> = {}\n  for (const { pluginId, eraser } of [...registrations]) {\n    try {\n      reports[pluginId] = await eraser(request)\n    } catch (error) {\n      reports[pluginId] = null\n      console.error(`[plugins] ${pluginId} failed to erase user ${request.uid}`, error)\n    }\n  }\n  return reports\n}\n\n/** The plugins with an eraser, in the order they run. */\nexport function listPluginUserErasers(): string[] {\n  return registrations.map((entry) => entry.pluginId)\n}\n\n/** Test seam: forget every eraser. */\nexport function resetPluginUserErasersForTests(): void {\n  registrations.length = 0\n}\n"],"names":["globalScope","getRegisteringPluginId","ERASERS_KEY","Symbol","for","globalThis","registrations","registerPluginUserEraser","eraser","options","pluginId","trim","Error","index","findIndex","entry","push","runPluginUserErasers","request","reports","error","console","uid","listPluginUserErasers","map","resetPluginUserErasersForTests","length"],"mappings":"IAkFEA;AAlFF;;;;;;;;;;;;;;;CAeC,GAED;;;;;;;;;;;;;;;;;;;;CAoBC,GAED,SAASC,sBAAsB,QAAQ,qCAAiC;AA8BxE;;;;;CAKC,GACD,MAAMC,cAAcC,OAAOC,GAAG,CAAC;AAE/B,MAAMJ,cAAcK;AAIpB,MAAMC,iBACJN,2BAAAA,WAAW,CAACE,YAAY,YAAxBF,2BAA6BA,WAAW,CAACE,YAAY,GAAG,EAAE;AAE5D;;;;;CAKC,GACD,OAAO,SAASK,yBACdC,MAAwB,EACxBC,OAA+B;QAEbR,MAAAA;IAAlB,MAAMS,WAAW,EAACT,QAAAA,0BAAAA,oCAAAA,0BAA4BQ,2BAAAA,QAASC,QAAQ,YAA7CT,OAAiD,IAAIU,IAAI;IAC3E,IAAI,CAACD,UAAU;QACb,MAAM,IAAIE,MACR,0EACE;IAEN;IACA,MAAMC,QAAQP,cAAcQ,SAAS,CAAC,CAACC,QAAUA,MAAML,QAAQ,KAAKA;IACpE,IAAIG,SAAS,GAAGP,aAAa,CAACO,MAAM,GAAG;QAAEH;QAAUF;IAAO;SACrDF,cAAcU,IAAI,CAAC;QAAEN;QAAUF;IAAO;AAC7C;AAEA;;;;CAIC,GACD,OAAO,eAAeS,qBACpBC,OAAiC;IAEjC,MAAMC,UAA0D,CAAC;IACjE,KAAK,MAAM,EAAET,QAAQ,EAAEF,MAAM,EAAE,IAAI;WAAIF;KAAc,CAAE;QACrD,IAAI;YACFa,OAAO,CAACT,SAAS,GAAG,MAAMF,OAAOU;QACnC,EAAE,OAAOE,OAAO;YACdD,OAAO,CAACT,SAAS,GAAG;YACpBW,QAAQD,KAAK,CAAC,CAAC,UAAU,EAAEV,SAAS,sBAAsB,EAAEQ,QAAQI,GAAG,EAAE,EAAEF;QAC7E;IACF;IACA,OAAOD;AACT;AAEA,uDAAuD,GACvD,OAAO,SAASI;IACd,OAAOjB,cAAckB,GAAG,CAAC,CAACT,QAAUA,MAAML,QAAQ;AACpD;AAEA,oCAAoC,GACpC,OAAO,SAASe;IACdnB,cAAcoB,MAAM,GAAG;AACzB"}

package/src/lib/plugin-manager/plugin-visitor-doors.d.ts

@@ -0,0 +1,104 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+/** A noun in its two counts: `{ one: 'submission', other: 'submissions' }`. */
+export interface VisitorDoorNoun {
+    one: string;
+    other: string;
+}
+export interface VisitorDoorDeclaration {
+    /** The door's name, as lockdown and the intake gates name it: `form`. */
+    door: string;
+    /** The site counter the door's ceiling refusals are kept in, by month. */
+    refusedCounter: string;
+    /** The site counter the door's honeypot catches are kept in, by month. */
+    caughtCounter: string;
+    words: {
+        /** The owner's notice title: "Form submissions are paused". */
+        pausedTitle: string;
+        /** What the door takes in: submission / submissions. */
+        noun: VisitorDoorNoun;
+        /** The same to staff, who see every door: form submission(s). */
+        staffNoun: VisitorDoorNoun;
+        /** Why it usually happens and what to do — the notice's last sentence. */
+        cause: string;
+        /** The staff flag's label for a door refusing now: "forms paused". */
+        pausedChip: string;
+        /** What the honeypot catches: bot submission(s). */
+        caught: VisitorDoorNoun;
+        /** What caught them: "the honeypot". */
+        caughtBy: string;
+        /** The staff flag's noun for a catch: bot hit(s). */
+        caughtChip: VisitorDoorNoun;
+    };
+}
+/** A declaration with the plugin that keeps the door. */
+export type ResolvedVisitorDoor = VisitorDoorDeclaration & {
+    pluginId: string;
+};
+/** A door's counts for one site and month, as a staff join reads them. */
+export interface VisitorDoorCounts {
+    /** The month the counts are for — `utcMonthKey()`. */
+    month: string;
+    /** Refused by the ceiling this month. */
+    refused: number;
+    /** The ceiling the counter recorded when it tripped, when known. */
+    ceiling: number | null;
+    /** Caught by the honeypot this month. */
+    caught: number;
+}
+/** What the site's owner is shown while a door is refusing. */
+export interface VisitorDoorPausedNotice {
+    title: string;
+    /** What happened, how many, and that none of it is billed. */
+    message: string;
+    /** When it lifts, as a sentence — never a raw month key. */
+    until: string;
+}
+/** Every declared door, in the order the plugins are configured. */
+export declare function pluginVisitorDoors(): readonly ResolvedVisitorDoor[];
+/**
+ * The owner's notice for a door refusing this month, or `null` below one
+ * refusal. `ceiling` is the one the counter recorded, when it did.
+ */
+export declare function visitorDoorPausedNotice(door: VisitorDoorDeclaration, input: {
+    refused: number;
+    ceiling?: number;
+    now?: Date;
+}): VisitorDoorPausedNotice | null;
+/**
+ * The month's honeypot catches as one sentence, or `null` below one catch.
+ * It reports protection WORKING — caught and dropped, nothing stored or
+ * billed — so it never reads as an alarm.
+ */
+export declare function visitorDoorCaughtNotice(door: VisitorDoorDeclaration, input: {
+    caught: number;
+}): string | null;
+/** One staff flag: the chip's terse label, and the sentence behind it. */
+export interface VisitorDoorStaffFlag {
+    label: string;
+    detail: string;
+}
+/**
+ * The staff Sites card's flags for one door on one site: a refusing door, and
+ * the month's catches, each only from one up. Terse labels on purpose — the
+ * owner's wording is for owners — with the ceiling and the date it lifts in
+ * the detail.
+ */
+export declare function visitorDoorStaffFlags(door: VisitorDoorDeclaration, counts: Pick<VisitorDoorCounts, 'refused' | 'ceiling' | 'caught'> | null | undefined, now?: Date): {
+    refused: VisitorDoorStaffFlag | null;
+    caught: VisitorDoorStaffFlag | null;
+};

package/src/lib/plugin-manager/plugin-visitor-doors.js

@@ -0,0 +1,108 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ /**
+ * A PLUGIN'S PUBLIC DOOR, AS ITS OWNER AND STAFF SEE IT WHEN IT IS FLOODED
+ * (AGL-1666, AGL-1831, AGL-3080).
+ *
+ * A plugin that keeps a public door a visitor writes through — the forms
+ * plugin's `/api/forms/submit` — caps a flood with a monthly ceiling and
+ * drops what its honeypot catches, and counts both per site in
+ * `hosts/{hostId}/counters/{counter}`, keyed by `utcMonthKey`. The site's
+ * owner reads those counts where the door's traffic lands (the Inbox), and
+ * staff read them on the organization's Sites card. Neither surface may name
+ * the plugin, and neither loads it: so the plugin DECLARES its door in
+ * `plugins.config.json` (`visitorDoors`) — the two counters and the words —
+ * the manifest generator compiles it, and the surfaces read every declared
+ * door the same way.
+ *
+ * The sentences are built here, from the declared nouns, because their
+ * discipline is the platform's and not a door's: nothing renders below one
+ * refusal or one catch (a counter document persists from its first trip, and
+ * "0 refused" every month trains a reader to ignore the row that will one day
+ * be real); a refusal is never billed and the owner is told so first; and the
+ * date a monthly ceiling lifts is rendered in UTC, the zone its key rolls
+ * over in.
+ */ import { PLUGIN_VISITOR_DOORS_DECLARED } from "./first-party-plugins.generated.js";
+import { nextUtcMonthStart } from "../app-utils/utc-month.js";
+/** Every declared door, in the order the plugins are configured. */ export function pluginVisitorDoors() {
+    return PLUGIN_VISITOR_DOORS_DECLARED;
+}
+const count = (value)=>Math.floor(Number(value) || 0);
+const said = (noun, n)=>n === 1 ? noun.one : noun.other;
+const capitalized = (text)=>text.charAt(0).toUpperCase() + text.slice(1);
+/** The day a monthly ceiling lifts, in UTC: a reader-zone date would be a day early in the Americas. */ function liftsOn(now) {
+    return nextUtcMonthStart(now).toLocaleDateString(undefined, {
+        year: 'numeric',
+        month: 'long',
+        day: 'numeric',
+        timeZone: 'UTC'
+    });
+}
+/**
+ * The owner's notice for a door refusing this month, or `null` below one
+ * refusal. `ceiling` is the one the counter recorded, when it did.
+ */ export function visitorDoorPausedNotice(door, input) {
+    var _input_now;
+    const refused = count(input.refused);
+    if (refused < 1) return null;
+    const { words } = door;
+    const ceiling = typeof input.ceiling === 'number' && Number.isFinite(input.ceiling) ? Math.floor(input.ceiling) : undefined;
+    return {
+        title: words.pausedTitle,
+        message: `${refused.toLocaleString()} ${said(words.noun, refused)} ` + `to this site ${refused === 1 ? 'has' : 'have'} been refused this month` + (ceiling ? ` after it passed ${ceiling.toLocaleString()} ${words.noun.other}` : '') + `. Refused ${words.noun.other} are not stored and are not billed. ${words.cause}`,
+        until: `${capitalized(words.noun.other)} start being accepted again on ${liftsOn((_input_now = input.now) != null ? _input_now : new Date())}.`
+    };
+}
+/**
+ * The month's honeypot catches as one sentence, or `null` below one catch.
+ * It reports protection WORKING — caught and dropped, nothing stored or
+ * billed — so it never reads as an alarm.
+ */ export function visitorDoorCaughtNotice(door, input) {
+    const caught = count(input.caught);
+    if (caught < 1) return null;
+    const { words } = door;
+    return `${caught.toLocaleString()} ${said(words.caught, caught)} ` + `${caught === 1 ? 'was' : 'were'} caught and dropped by ${words.caughtBy} ` + 'this month — nothing was stored or billed.';
+}
+/**
+ * The staff Sites card's flags for one door on one site: a refusing door, and
+ * the month's catches, each only from one up. Terse labels on purpose — the
+ * owner's wording is for owners — with the ceiling and the date it lifts in
+ * the detail.
+ */ export function visitorDoorStaffFlags(door, counts, now = new Date()) {
+    if (!counts) return {
+        refused: null,
+        caught: null
+    };
+    const refused = count(counts.refused);
+    const caught = count(counts.caught);
+    const { words } = door;
+    const ceiling = typeof counts.ceiling === 'number' && Number.isFinite(counts.ceiling) ? Math.floor(counts.ceiling) : null;
+    const caughtDetail = visitorDoorCaughtNotice(door, {
+        caught
+    });
+    return {
+        refused: refused >= 1 ? {
+            label: `${words.pausedChip} · ${refused.toLocaleString()} refused`,
+            detail: `${refused.toLocaleString()} ${said(words.staffNoun, refused)} refused this month` + (ceiling ? ` — the site passed its ${ceiling.toLocaleString()}-${words.noun.one} ceiling` : '') + `. Nothing refused is stored or billed. Accepting again on ${liftsOn(now)}.`
+        } : null,
+        caught: caught >= 1 && caughtDetail ? {
+            label: `${caught.toLocaleString()} ${said(words.caughtChip, caught)} caught`,
+            detail: caughtDetail
+        } : null
+    };
+}
+
+//# sourceMappingURL=plugin-visitor-doors.js.map

package/src/lib/plugin-manager/plugin-visitor-doors.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../libs/aglyn/src/lib/plugin-manager/plugin-visitor-doors.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n/**\n * A PLUGIN'S PUBLIC DOOR, AS ITS OWNER AND STAFF SEE IT WHEN IT IS FLOODED\n * (AGL-1666, AGL-1831, AGL-3080).\n *\n * A plugin that keeps a public door a visitor writes through — the forms\n * plugin's `/api/forms/submit` — caps a flood with a monthly ceiling and\n * drops what its honeypot catches, and counts both per site in\n * `hosts/{hostId}/counters/{counter}`, keyed by `utcMonthKey`. The site's\n * owner reads those counts where the door's traffic lands (the Inbox), and\n * staff read them on the organization's Sites card. Neither surface may name\n * the plugin, and neither loads it: so the plugin DECLARES its door in\n * `plugins.config.json` (`visitorDoors`) — the two counters and the words —\n * the manifest generator compiles it, and the surfaces read every declared\n * door the same way.\n *\n * The sentences are built here, from the declared nouns, because their\n * discipline is the platform's and not a door's: nothing renders below one\n * refusal or one catch (a counter document persists from its first trip, and\n * \"0 refused\" every month trains a reader to ignore the row that will one day\n * be real); a refusal is never billed and the owner is told so first; and the\n * date a monthly ceiling lifts is rendered in UTC, the zone its key rolls\n * over in.\n */\n\nimport { PLUGIN_VISITOR_DOORS_DECLARED } from './first-party-plugins.generated'\nimport { nextUtcMonthStart } from '../app-utils/utc-month'\n\n/** A noun in its two counts: `{ one: 'submission', other: 'submissions' }`. */\nexport interface VisitorDoorNoun {\n  one: string\n  other: string\n}\n\nexport interface VisitorDoorDeclaration {\n  /** The door's name, as lockdown and the intake gates name it: `form`. */\n  door: string\n  /** The site counter the door's ceiling refusals are kept in, by month. */\n  refusedCounter: string\n  /** The site counter the door's honeypot catches are kept in, by month. */\n  caughtCounter: string\n  words: {\n    /** The owner's notice title: \"Form submissions are paused\". */\n    pausedTitle: string\n    /** What the door takes in: submission / submissions. */\n    noun: VisitorDoorNoun\n    /** The same to staff, who see every door: form submission(s). */\n    staffNoun: VisitorDoorNoun\n    /** Why it usually happens and what to do — the notice's last sentence. */\n    cause: string\n    /** The staff flag's label for a door refusing now: \"forms paused\". */\n    pausedChip: string\n    /** What the honeypot catches: bot submission(s). */\n    caught: VisitorDoorNoun\n    /** What caught them: \"the honeypot\". */\n    caughtBy: string\n    /** The staff flag's noun for a catch: bot hit(s). */\n    caughtChip: VisitorDoorNoun\n  }\n}\n\n/** A declaration with the plugin that keeps the door. */\nexport type ResolvedVisitorDoor = VisitorDoorDeclaration & { pluginId: string }\n\n/** A door's counts for one site and month, as a staff join reads them. */\nexport interface VisitorDoorCounts {\n  /** The month the counts are for — `utcMonthKey()`. */\n  month: string\n  /** Refused by the ceiling this month. */\n  refused: number\n  /** The ceiling the counter recorded when it tripped, when known. */\n  ceiling: number | null\n  /** Caught by the honeypot this month. */\n  caught: number\n}\n\n/** What the site's owner is shown while a door is refusing. */\nexport interface VisitorDoorPausedNotice {\n  title: string\n  /** What happened, how many, and that none of it is billed. */\n  message: string\n  /** When it lifts, as a sentence — never a raw month key. */\n  until: string\n}\n\n/** Every declared door, in the order the plugins are configured. */\nexport function pluginVisitorDoors(): readonly ResolvedVisitorDoor[] {\n  return PLUGIN_VISITOR_DOORS_DECLARED\n}\n\nconst count = (value: unknown): number => Math.floor(Number(value) || 0)\nconst said = (noun: VisitorDoorNoun, n: number): string => (n === 1 ? noun.one : noun.other)\nconst capitalized = (text: string): string => text.charAt(0).toUpperCase() + text.slice(1)\n\n/** The day a monthly ceiling lifts, in UTC: a reader-zone date would be a day early in the Americas. */\nfunction liftsOn(now: Date): string {\n  return nextUtcMonthStart(now).toLocaleDateString(undefined, {\n    year: 'numeric',\n    month: 'long',\n    day: 'numeric',\n    timeZone: 'UTC',\n  })\n}\n\n/**\n * The owner's notice for a door refusing this month, or `null` below one\n * refusal. `ceiling` is the one the counter recorded, when it did.\n */\nexport function visitorDoorPausedNotice(\n  door: VisitorDoorDeclaration,\n  input: { refused: number; ceiling?: number; now?: Date },\n): VisitorDoorPausedNotice | null {\n  const refused = count(input.refused)\n  if (refused < 1) return null\n  const { words } = door\n  const ceiling =\n    typeof input.ceiling === 'number' && Number.isFinite(input.ceiling)\n      ? Math.floor(input.ceiling)\n      : undefined\n  return {\n    title: words.pausedTitle,\n    message:\n      `${refused.toLocaleString()} ${said(words.noun, refused)} ` +\n      `to this site ${refused === 1 ? 'has' : 'have'} been refused this month` +\n      (ceiling ? ` after it passed ${ceiling.toLocaleString()} ${words.noun.other}` : '') +\n      `. Refused ${words.noun.other} are not stored and are not billed. ${words.cause}`,\n    until: `${capitalized(words.noun.other)} start being accepted again on ${liftsOn(input.now ?? new Date())}.`,\n  }\n}\n\n/**\n * The month's honeypot catches as one sentence, or `null` below one catch.\n * It reports protection WORKING — caught and dropped, nothing stored or\n * billed — so it never reads as an alarm.\n */\nexport function visitorDoorCaughtNotice(\n  door: VisitorDoorDeclaration,\n  input: { caught: number },\n): string | null {\n  const caught = count(input.caught)\n  if (caught < 1) return null\n  const { words } = door\n  return (\n    `${caught.toLocaleString()} ${said(words.caught, caught)} ` +\n    `${caught === 1 ? 'was' : 'were'} caught and dropped by ${words.caughtBy} ` +\n    'this month — nothing was stored or billed.'\n  )\n}\n\n/** One staff flag: the chip's terse label, and the sentence behind it. */\nexport interface VisitorDoorStaffFlag {\n  label: string\n  detail: string\n}\n\n/**\n * The staff Sites card's flags for one door on one site: a refusing door, and\n * the month's catches, each only from one up. Terse labels on purpose — the\n * owner's wording is for owners — with the ceiling and the date it lifts in\n * the detail.\n */\nexport function visitorDoorStaffFlags(\n  door: VisitorDoorDeclaration,\n  counts: Pick<VisitorDoorCounts, 'refused' | 'ceiling' | 'caught'> | null | undefined,\n  now: Date = new Date(),\n): { refused: VisitorDoorStaffFlag | null; caught: VisitorDoorStaffFlag | null } {\n  if (!counts) return { refused: null, caught: null }\n  const refused = count(counts.refused)\n  const caught = count(counts.caught)\n  const { words } = door\n  const ceiling =\n    typeof counts.ceiling === 'number' && Number.isFinite(counts.ceiling)\n      ? Math.floor(counts.ceiling)\n      : null\n  const caughtDetail = visitorDoorCaughtNotice(door, { caught })\n  return {\n    refused:\n      refused >= 1\n        ? {\n            label: `${words.pausedChip} · ${refused.toLocaleString()} refused`,\n            detail:\n              `${refused.toLocaleString()} ${said(words.staffNoun, refused)} refused this month` +\n              (ceiling ? ` — the site passed its ${ceiling.toLocaleString()}-${words.noun.one} ceiling` : '') +\n              `. Nothing refused is stored or billed. Accepting again on ${liftsOn(now)}.`,\n          }\n        : null,\n    caught:\n      caught >= 1 && caughtDetail\n        ? { label: `${caught.toLocaleString()} ${said(words.caughtChip, caught)} caught`, detail: caughtDetail }\n        : null,\n  }\n}\n"],"names":["PLUGIN_VISITOR_DOORS_DECLARED","nextUtcMonthStart","pluginVisitorDoors","count","value","Math","floor","Number","said","noun","n","one","other","capitalized","text","charAt","toUpperCase","slice","liftsOn","now","toLocaleDateString","undefined","year","month","day","timeZone","visitorDoorPausedNotice","door","input","refused","words","ceiling","isFinite","title","pausedTitle","message","toLocaleString","cause","until","Date","visitorDoorCaughtNotice","caught","caughtBy","visitorDoorStaffFlags","counts","caughtDetail","label","pausedChip","detail","staffNoun","caughtChip"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED;;;;;;;;;;;;;;;;;;;;;;CAsBC,GAED,SAASA,6BAA6B,QAAQ,qCAAiC;AAC/E,SAASC,iBAAiB,QAAQ,4BAAwB;AA2D1D,kEAAkE,GAClE,OAAO,SAASC;IACd,OAAOF;AACT;AAEA,MAAMG,QAAQ,CAACC,QAA2BC,KAAKC,KAAK,CAACC,OAAOH,UAAU;AACtE,MAAMI,OAAO,CAACC,MAAuBC,IAAuBA,MAAM,IAAID,KAAKE,GAAG,GAAGF,KAAKG,KAAK;AAC3F,MAAMC,cAAc,CAACC,OAAyBA,KAAKC,MAAM,CAAC,GAAGC,WAAW,KAAKF,KAAKG,KAAK,CAAC;AAExF,sGAAsG,GACtG,SAASC,QAAQC,GAAS;IACxB,OAAOlB,kBAAkBkB,KAAKC,kBAAkB,CAACC,WAAW;QAC1DC,MAAM;QACNC,OAAO;QACPC,KAAK;QACLC,UAAU;IACZ;AACF;AAEA;;;CAGC,GACD,OAAO,SAASC,wBACdC,IAA4B,EAC5BC,KAAwD;QAgB2BA;IAdnF,MAAMC,UAAU1B,MAAMyB,MAAMC,OAAO;IACnC,IAAIA,UAAU,GAAG,OAAO;IACxB,MAAM,EAAEC,KAAK,EAAE,GAAGH;IAClB,MAAMI,UACJ,OAAOH,MAAMG,OAAO,KAAK,YAAYxB,OAAOyB,QAAQ,CAACJ,MAAMG,OAAO,IAC9D1B,KAAKC,KAAK,CAACsB,MAAMG,OAAO,IACxBV;IACN,OAAO;QACLY,OAAOH,MAAMI,WAAW;QACxBC,SACE,GAAGN,QAAQO,cAAc,GAAG,CAAC,EAAE5B,KAAKsB,MAAMrB,IAAI,EAAEoB,SAAS,CAAC,CAAC,GAC3D,CAAC,aAAa,EAAEA,YAAY,IAAI,QAAQ,OAAO,wBAAwB,CAAC,GACvEE,CAAAA,UAAU,CAAC,iBAAiB,EAAEA,QAAQK,cAAc,GAAG,CAAC,EAAEN,MAAMrB,IAAI,CAACG,KAAK,EAAE,GAAG,EAAC,IACjF,CAAC,UAAU,EAAEkB,MAAMrB,IAAI,CAACG,KAAK,CAAC,oCAAoC,EAAEkB,MAAMO,KAAK,EAAE;QACnFC,OAAO,GAAGzB,YAAYiB,MAAMrB,IAAI,CAACG,KAAK,EAAE,+BAA+B,EAAEM,SAAQU,aAAAA,MAAMT,GAAG,YAATS,aAAa,IAAIW,QAAQ,CAAC,CAAC;IAC9G;AACF;AAEA;;;;CAIC,GACD,OAAO,SAASC,wBACdb,IAA4B,EAC5BC,KAAyB;IAEzB,MAAMa,SAAStC,MAAMyB,MAAMa,MAAM;IACjC,IAAIA,SAAS,GAAG,OAAO;IACvB,MAAM,EAAEX,KAAK,EAAE,GAAGH;IAClB,OACE,GAAGc,OAAOL,cAAc,GAAG,CAAC,EAAE5B,KAAKsB,MAAMW,MAAM,EAAEA,QAAQ,CAAC,CAAC,GAC3D,GAAGA,WAAW,IAAI,QAAQ,OAAO,uBAAuB,EAAEX,MAAMY,QAAQ,CAAC,CAAC,CAAC,GAC3E;AAEJ;AAQA;;;;;CAKC,GACD,OAAO,SAASC,sBACdhB,IAA4B,EAC5BiB,MAAoF,EACpFzB,MAAY,IAAIoB,MAAM;IAEtB,IAAI,CAACK,QAAQ,OAAO;QAAEf,SAAS;QAAMY,QAAQ;IAAK;IAClD,MAAMZ,UAAU1B,MAAMyC,OAAOf,OAAO;IACpC,MAAMY,SAAStC,MAAMyC,OAAOH,MAAM;IAClC,MAAM,EAAEX,KAAK,EAAE,GAAGH;IAClB,MAAMI,UACJ,OAAOa,OAAOb,OAAO,KAAK,YAAYxB,OAAOyB,QAAQ,CAACY,OAAOb,OAAO,IAChE1B,KAAKC,KAAK,CAACsC,OAAOb,OAAO,IACzB;IACN,MAAMc,eAAeL,wBAAwBb,MAAM;QAAEc;IAAO;IAC5D,OAAO;QACLZ,SACEA,WAAW,IACP;YACEiB,OAAO,GAAGhB,MAAMiB,UAAU,CAAC,GAAG,EAAElB,QAAQO,cAAc,GAAG,QAAQ,CAAC;YAClEY,QACE,GAAGnB,QAAQO,cAAc,GAAG,CAAC,EAAE5B,KAAKsB,MAAMmB,SAAS,EAAEpB,SAAS,mBAAmB,CAAC,GACjFE,CAAAA,UAAU,CAAC,uBAAuB,EAAEA,QAAQK,cAAc,GAAG,CAAC,EAAEN,MAAMrB,IAAI,CAACE,GAAG,CAAC,QAAQ,CAAC,GAAG,EAAC,IAC7F,CAAC,0DAA0D,EAAEO,QAAQC,KAAK,CAAC,CAAC;QAChF,IACA;QACNsB,QACEA,UAAU,KAAKI,eACX;YAAEC,OAAO,GAAGL,OAAOL,cAAc,GAAG,CAAC,EAAE5B,KAAKsB,MAAMoB,UAAU,EAAET,QAAQ,OAAO,CAAC;YAAEO,QAAQH;QAAa,IACrG;IACR;AACF"}

package/src/lib/plugin-manager/realm-host-aglyn.generated.js

@@ -79,12 +79,14 @@ export const AGLYN_HOST_SURFACE = Object.freeze({
     FieldComponentType: m10.FieldComponentType,
     FieldValidatorType: m10.FieldValidatorType,
     LinealDirectiveFlag: m10.LinealDirectiveFlag,
+    CONSOLE_HOST_GATED_WIDGET_SLOTS: m11.CONSOLE_HOST_GATED_WIDGET_SLOTS,
     CONSOLE_SEARCH_LOAD_POINT: m11.CONSOLE_SEARCH_LOAD_POINT,
     CONSOLE_STAFF_WIDGET_SLOTS: m11.CONSOLE_STAFF_WIDGET_SLOTS,
     CONSOLE_WIDGET_SLOTS: m11.CONSOLE_WIDGET_SLOTS,
     MUI_BUNDLE_ID: m11.MUI_BUNDLE_ID,
     THEME_PRESETS_LOAD_POINT: m11.THEME_PRESETS_LOAD_POINT,
     defineUiFeatureBundle: m11.defineUiFeatureBundle,
+    isConsoleHostGatedWidgetSlot: m11.isConsoleHostGatedWidgetSlot,
     isConsoleStaffWidgetSlot: m11.isConsoleStaffWidgetSlot,
     listConsoleExtensions: m11.listConsoleExtensions,
     listConsoleNavItems: m11.listConsoleNavItems,

package/src/lib/plugin-manager/realm-host-aglyn.generated.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../../../libs/aglyn/src/lib/plugin-manager/realm-host-aglyn.generated.ts"],"sourcesContent":["/**\n * GENERATED FILE — do not edit. Regenerate with:\n *   node tools/scripts/generate-realm-host-exports.mjs\n *\n * The realm plugin surface of `@aglyn/aglyn` (AGL-3392): what a signed\n * bundle reads from core. Imported only by the lazily loaded host module.\n */\n/* eslint-disable */\n\nimport * as m0 from \"../aglyn\"\nimport * as m1 from \"../app-utils/binding-tokens\"\nimport * as m2 from \"../app-utils/enabled-plugins-context\"\nimport * as m3 from \"../app-utils/functions\"\nimport * as m4 from \"../app-utils/node-identity\"\nimport * as m5 from \"../app-utils/screen-link-context-value\"\nimport * as m6 from \"../app-utils/site-context\"\nimport * as m7 from \"../app-utils/variables\"\nimport * as m8 from \"../foundation/constants/components\"\nimport * as m9 from \"../foundation/constants/shared\"\nimport * as m10 from \"../foundation/definitions/components.types\"\nimport * as m11 from \"./feature-plugins\"\nimport * as m12 from \"../types/nodes\"\n\nexport const AGLYN_HOST_SURFACE: Readonly<Record<string, unknown>> = Object.freeze({\n  Aglyn: m0.Aglyn,\n  aglyn: m0.aglyn,\n  canvas: m0.canvas,\n  components: m0.components,\n  emitter: m0.emitter,\n  logger: m0.logger,\n  plugins: m0.plugins,\n  FUNCTION_TOKEN_PATTERN: m1.FUNCTION_TOKEN_PATTERN,\n  MISSING_BINDING_LABEL: m1.MISSING_BINDING_LABEL,\n  NAME_TOKEN_PATTERN: m1.NAME_TOKEN_PATTERN,\n  VARIABLE_ID_TOKEN_PATTERN: m1.VARIABLE_ID_TOKEN_PATTERN,\n  bindingTokenNeedsDeep: m1.bindingTokenNeedsDeep,\n  displayBindingTokens: m1.displayBindingTokens,\n  editableBindingTokens: m1.editableBindingTokens,\n  formatFunctionIdToken: m1.formatFunctionIdToken,\n  formatVariableIdToken: m1.formatVariableIdToken,\n  keyById: m1.keyById,\n  nodesReferenceBinding: m1.nodesReferenceBinding,\n  normalizeBindingTokens: m1.normalizeBindingTokens,\n  rewriteBindingTokensDeep: m1.rewriteBindingTokensDeep,\n  textReferencesBinding: m1.textReferencesBinding,\n  CATEGORY_REQUIRED_CAPABILITY: m2.CATEGORY_REQUIRED_CAPABILITY,\n  EnabledPluginsContext: m2.EnabledPluginsContext,\n  isCategoryCapabilityEnabled: m2.isCategoryCapabilityEnabled,\n  isFromEnabledPlugin: m2.isFromEnabledPlugin,\n  isSwitchedOffForRenderedSite: m2.isSwitchedOffForRenderedSite,\n  useEnabledPlugins: m2.useEnabledPlugins,\n  FUNCTION_BUILTIN_NAMES: m3.FUNCTION_BUILTIN_NAMES,\n  FUNCTION_MAX_OPERATIONS: m3.FUNCTION_MAX_OPERATIONS,\n  evaluateExpression: m3.evaluateExpression,\n  evaluateHostFunction: m3.evaluateHostFunction,\n  expressionIdentifiers: m3.expressionIdentifiers,\n  formatFunctionParameterOptions: m3.formatFunctionParameterOptions,\n  functionReferencedNames: m3.functionReferencedNames,\n  parseFunctionParameterOptions: m3.parseFunctionParameterOptions,\n  NodeIdentityContext: m4.NodeIdentityContext,\n  useNodeId: m4.useNodeId,\n  ScreenLinkContext: m5.ScreenLinkContext,\n  PREVIEW_REFUSED_STATUS: m6.PREVIEW_REFUSED_STATUS,\n  PREVIEW_WRITE_BLOCKED_EVENT: m6.PREVIEW_WRITE_BLOCKED_EVENT,\n  SiteContext: m6.SiteContext,\n  isPreviewRefusal: m6.isPreviewRefusal,\n  useSite: m6.useSite,\n  useSiteFetch: m6.useSiteFetch,\n  HOST_VARIABLE_TYPE_LABELS: m7.HOST_VARIABLE_TYPE_LABELS,\n  VARIABLE_NAME_PATTERN: m7.VARIABLE_NAME_PATTERN,\n  attachFunctionDefinitions: m7.attachFunctionDefinitions,\n  formatVariableValue: m7.formatVariableValue,\n  functionGlobals: m7.functionGlobals,\n  hasBindings: m7.hasBindings,\n  resolveBindings: m7.resolveBindings,\n  resolveNodesBindings: m7.resolveNodesBindings,\n  COMPONENT_CATEGORY_ORDER: m8.COMPONENT_CATEGORY_ORDER,\n  ComponentCategory: m8.ComponentCategory,\n  REUSABLE_COMPONENT_CATEGORY: m8.REUSABLE_COMPONENT_CATEGORY,\n  REUSABLE_EMAIL_BLOCK_CATEGORY: m8.REUSABLE_EMAIL_BLOCK_CATEGORY,\n  FEATURE_FLAG: m9.FEATURE_FLAG,\n  RICH_TEXT_COMMANDS: m9.RICH_TEXT_COMMANDS,\n  FieldComponentType: m10.FieldComponentType,\n  FieldValidatorType: m10.FieldValidatorType,\n  LinealDirectiveFlag: m10.LinealDirectiveFlag,\n  CONSOLE_SEARCH_LOAD_POINT: m11.CONSOLE_SEARCH_LOAD_POINT,\n  CONSOLE_STAFF_WIDGET_SLOTS: m11.CONSOLE_STAFF_WIDGET_SLOTS,\n  CONSOLE_WIDGET_SLOTS: m11.CONSOLE_WIDGET_SLOTS,\n  MUI_BUNDLE_ID: m11.MUI_BUNDLE_ID,\n  THEME_PRESETS_LOAD_POINT: m11.THEME_PRESETS_LOAD_POINT,\n  defineUiFeatureBundle: m11.defineUiFeatureBundle,\n  isConsoleStaffWidgetSlot: m11.isConsoleStaffWidgetSlot,\n  listConsoleExtensions: m11.listConsoleExtensions,\n  listConsoleNavItems: m11.listConsoleNavItems,\n  listConsoleOrgNavItems: m11.listConsoleOrgNavItems,\n  listConsoleProviders: m11.listConsoleProviders,\n  listConsoleSearchSources: m11.listConsoleSearchSources,\n  listConsoleStaffPages: m11.listConsoleStaffPages,\n  listConsoleThemePresets: m11.listConsoleThemePresets,\n  listConsoleWidgets: m11.listConsoleWidgets,\n  registerConsoleExtension: m11.registerConsoleExtension,\n  resolveConsoleOrgPluginPage: m11.resolveConsoleOrgPluginPage,\n  resolveConsolePluginPage: m11.resolveConsolePluginPage,\n  resolveConsoleStaffPage: m11.resolveConsoleStaffPage,\n  unregisterConsoleExtension: m11.unregisterConsoleExtension,\n  NodeType: m12.NodeType,\n})\n"],"names":["m0","m1","m2","m3","m4","m5","m6","m7","m8","m9","m10","m11","m12","AGLYN_HOST_SURFACE","Object","freeze","Aglyn","aglyn","canvas","components","emitter","logger","plugins","FUNCTION_TOKEN_PATTERN","MISSING_BINDING_LABEL","NAME_TOKEN_PATTERN","VARIABLE_ID_TOKEN_PATTERN","bindingTokenNeedsDeep","displayBindingTokens","editableBindingTokens","formatFunctionIdToken","formatVariableIdToken","keyById","nodesReferenceBinding","normalizeBindingTokens","rewriteBindingTokensDeep","textReferencesBinding","CATEGORY_REQUIRED_CAPABILITY","EnabledPluginsContext","isCategoryCapabilityEnabled","isFromEnabledPlugin","isSwitchedOffForRenderedSite","useEnabledPlugins","FUNCTION_BUILTIN_NAMES","FUNCTION_MAX_OPERATIONS","evaluateExpression","evaluateHostFunction","expressionIdentifiers","formatFunctionParameterOptions","functionReferencedNames","parseFunctionParameterOptions","NodeIdentityContext","useNodeId","ScreenLinkContext","PREVIEW_REFUSED_STATUS","PREVIEW_WRITE_BLOCKED_EVENT","SiteContext","isPreviewRefusal","useSite","useSiteFetch","HOST_VARIABLE_TYPE_LABELS","VARIABLE_NAME_PATTERN","attachFunctionDefinitions","formatVariableValue","functionGlobals","hasBindings","resolveBindings","resolveNodesBindings","COMPONENT_CATEGORY_ORDER","ComponentCategory","REUSABLE_COMPONENT_CATEGORY","REUSABLE_EMAIL_BLOCK_CATEGORY","FEATURE_FLAG","RICH_TEXT_COMMANDS","FieldComponentType","FieldValidatorType","LinealDirectiveFlag","CONSOLE_SEARCH_LOAD_POINT","CONSOLE_STAFF_WIDGET_SLOTS","CONSOLE_WIDGET_SLOTS","MUI_BUNDLE_ID","THEME_PRESETS_LOAD_POINT","defineUiFeatureBundle","isConsoleStaffWidgetSlot","listConsoleExtensions","listConsoleNavItems","listConsoleOrgNavItems","listConsoleProviders","listConsoleSearchSources","listConsoleStaffPages","listConsoleThemePresets","listConsoleWidgets","registerConsoleExtension","resolveConsoleOrgPluginPage","resolveConsolePluginPage","resolveConsoleStaffPage","unregisterConsoleExtension","NodeType"],"mappings":"AAAA;;;;;;CAMC,GACD,kBAAkB,GAElB,YAAYA,QAAQ,cAAU;AAC9B,YAAYC,QAAQ,iCAA6B;AACjD,YAAYC,QAAQ,0CAAsC;AAC1D,YAAYC,QAAQ,4BAAwB;AAC5C,YAAYC,QAAQ,gCAA4B;AAChD,YAAYC,QAAQ,4CAAwC;AAC5D,YAAYC,QAAQ,+BAA2B;AAC/C,YAAYC,QAAQ,4BAAwB;AAC5C,YAAYC,QAAQ,wCAAoC;AACxD,YAAYC,QAAQ,oCAAgC;AACpD,YAAYC,SAAS,gDAA4C;AACjE,YAAYC,SAAS,uBAAmB;AACxC,YAAYC,SAAS,oBAAgB;AAErC,OAAO,MAAMC,qBAAwDC,OAAOC,MAAM,CAAC;IACjFC,OAAOhB,GAAGgB,KAAK;IACfC,OAAOjB,GAAGiB,KAAK;IACfC,QAAQlB,GAAGkB,MAAM;IACjBC,YAAYnB,GAAGmB,UAAU;IACzBC,SAASpB,GAAGoB,OAAO;IACnBC,QAAQrB,GAAGqB,MAAM;IACjBC,SAAStB,GAAGsB,OAAO;IACnBC,wBAAwBtB,GAAGsB,sBAAsB;IACjDC,uBAAuBvB,GAAGuB,qBAAqB;IAC/CC,oBAAoBxB,GAAGwB,kBAAkB;IACzCC,2BAA2BzB,GAAGyB,yBAAyB;IACvDC,uBAAuB1B,GAAG0B,qBAAqB;IAC/CC,sBAAsB3B,GAAG2B,oBAAoB;IAC7CC,uBAAuB5B,GAAG4B,qBAAqB;IAC/CC,uBAAuB7B,GAAG6B,qBAAqB;IAC/CC,uBAAuB9B,GAAG8B,qBAAqB;IAC/CC,SAAS/B,GAAG+B,OAAO;IACnBC,uBAAuBhC,GAAGgC,qBAAqB;IAC/CC,wBAAwBjC,GAAGiC,sBAAsB;IACjDC,0BAA0BlC,GAAGkC,wBAAwB;IACrDC,uBAAuBnC,GAAGmC,qBAAqB;IAC/CC,8BAA8BnC,GAAGmC,4BAA4B;IAC7DC,uBAAuBpC,GAAGoC,qBAAqB;IAC/CC,6BAA6BrC,GAAGqC,2BAA2B;IAC3DC,qBAAqBtC,GAAGsC,mBAAmB;IAC3CC,8BAA8BvC,GAAGuC,4BAA4B;IAC7DC,mBAAmBxC,GAAGwC,iBAAiB;IACvCC,wBAAwBxC,GAAGwC,sBAAsB;IACjDC,yBAAyBzC,GAAGyC,uBAAuB;IACnDC,oBAAoB1C,GAAG0C,kBAAkB;IACzCC,sBAAsB3C,GAAG2C,oBAAoB;IAC7CC,uBAAuB5C,GAAG4C,qBAAqB;IAC/CC,gCAAgC7C,GAAG6C,8BAA8B;IACjEC,yBAAyB9C,GAAG8C,uBAAuB;IACnDC,+BAA+B/C,GAAG+C,6BAA6B;IAC/DC,qBAAqB/C,GAAG+C,mBAAmB;IAC3CC,WAAWhD,GAAGgD,SAAS;IACvBC,mBAAmBhD,GAAGgD,iBAAiB;IACvCC,wBAAwBhD,GAAGgD,sBAAsB;IACjDC,6BAA6BjD,GAAGiD,2BAA2B;IAC3DC,aAAalD,GAAGkD,WAAW;IAC3BC,kBAAkBnD,GAAGmD,gBAAgB;IACrCC,SAASpD,GAAGoD,OAAO;IACnBC,cAAcrD,GAAGqD,YAAY;IAC7BC,2BAA2BrD,GAAGqD,yBAAyB;IACvDC,uBAAuBtD,GAAGsD,qBAAqB;IAC/CC,2BAA2BvD,GAAGuD,yBAAyB;IACvDC,qBAAqBxD,GAAGwD,mBAAmB;IAC3CC,iBAAiBzD,GAAGyD,eAAe;IACnCC,aAAa1D,GAAG0D,WAAW;IAC3BC,iBAAiB3D,GAAG2D,eAAe;IACnCC,sBAAsB5D,GAAG4D,oBAAoB;IAC7CC,0BAA0B5D,GAAG4D,wBAAwB;IACrDC,mBAAmB7D,GAAG6D,iBAAiB;IACvCC,6BAA6B9D,GAAG8D,2BAA2B;IAC3DC,+BAA+B/D,GAAG+D,6BAA6B;IAC/DC,cAAc/D,GAAG+D,YAAY;IAC7BC,oBAAoBhE,GAAGgE,kBAAkB;IACzCC,oBAAoBhE,IAAIgE,kBAAkB;IAC1CC,oBAAoBjE,IAAIiE,kBAAkB;IAC1CC,qBAAqBlE,IAAIkE,mBAAmB;IAC5CC,2BAA2BlE,IAAIkE,yBAAyB;IACxDC,4BAA4BnE,IAAImE,0BAA0B;IAC1DC,sBAAsBpE,IAAIoE,oBAAoB;IAC9CC,eAAerE,IAAIqE,aAAa;IAChCC,0BAA0BtE,IAAIsE,wBAAwB;IACtDC,uBAAuBvE,IAAIuE,qBAAqB;IAChDC,0BAA0BxE,IAAIwE,wBAAwB;IACtDC,uBAAuBzE,IAAIyE,qBAAqB;IAChDC,qBAAqB1E,IAAI0E,mBAAmB;IAC5CC,wBAAwB3E,IAAI2E,sBAAsB;IAClDC,sBAAsB5E,IAAI4E,oBAAoB;IAC9CC,0BAA0B7E,IAAI6E,wBAAwB;IACtDC,uBAAuB9E,IAAI8E,qBAAqB;IAChDC,yBAAyB/E,IAAI+E,uBAAuB;IACpDC,oBAAoBhF,IAAIgF,kBAAkB;IAC1CC,0BAA0BjF,IAAIiF,wBAAwB;IACtDC,6BAA6BlF,IAAIkF,2BAA2B;IAC5DC,0BAA0BnF,IAAImF,wBAAwB;IACtDC,yBAAyBpF,IAAIoF,uBAAuB;IACpDC,4BAA4BrF,IAAIqF,0BAA0B;IAC1DC,UAAUrF,IAAIqF,QAAQ;AACxB,GAAE"}
+{"version":3,"sources":["../../../../../../libs/aglyn/src/lib/plugin-manager/realm-host-aglyn.generated.ts"],"sourcesContent":["/**\n * GENERATED FILE — do not edit. Regenerate with:\n *   node tools/scripts/generate-realm-host-exports.mjs\n *\n * The realm plugin surface of `@aglyn/aglyn` (AGL-3392): what a signed\n * bundle reads from core. Imported only by the lazily loaded host module.\n */\n/* eslint-disable */\n\nimport * as m0 from \"../aglyn\"\nimport * as m1 from \"../app-utils/binding-tokens\"\nimport * as m2 from \"../app-utils/enabled-plugins-context\"\nimport * as m3 from \"../app-utils/functions\"\nimport * as m4 from \"../app-utils/node-identity\"\nimport * as m5 from \"../app-utils/screen-link-context-value\"\nimport * as m6 from \"../app-utils/site-context\"\nimport * as m7 from \"../app-utils/variables\"\nimport * as m8 from \"../foundation/constants/components\"\nimport * as m9 from \"../foundation/constants/shared\"\nimport * as m10 from \"../foundation/definitions/components.types\"\nimport * as m11 from \"./feature-plugins\"\nimport * as m12 from \"../types/nodes\"\n\nexport const AGLYN_HOST_SURFACE: Readonly<Record<string, unknown>> = Object.freeze({\n  Aglyn: m0.Aglyn,\n  aglyn: m0.aglyn,\n  canvas: m0.canvas,\n  components: m0.components,\n  emitter: m0.emitter,\n  logger: m0.logger,\n  plugins: m0.plugins,\n  FUNCTION_TOKEN_PATTERN: m1.FUNCTION_TOKEN_PATTERN,\n  MISSING_BINDING_LABEL: m1.MISSING_BINDING_LABEL,\n  NAME_TOKEN_PATTERN: m1.NAME_TOKEN_PATTERN,\n  VARIABLE_ID_TOKEN_PATTERN: m1.VARIABLE_ID_TOKEN_PATTERN,\n  bindingTokenNeedsDeep: m1.bindingTokenNeedsDeep,\n  displayBindingTokens: m1.displayBindingTokens,\n  editableBindingTokens: m1.editableBindingTokens,\n  formatFunctionIdToken: m1.formatFunctionIdToken,\n  formatVariableIdToken: m1.formatVariableIdToken,\n  keyById: m1.keyById,\n  nodesReferenceBinding: m1.nodesReferenceBinding,\n  normalizeBindingTokens: m1.normalizeBindingTokens,\n  rewriteBindingTokensDeep: m1.rewriteBindingTokensDeep,\n  textReferencesBinding: m1.textReferencesBinding,\n  CATEGORY_REQUIRED_CAPABILITY: m2.CATEGORY_REQUIRED_CAPABILITY,\n  EnabledPluginsContext: m2.EnabledPluginsContext,\n  isCategoryCapabilityEnabled: m2.isCategoryCapabilityEnabled,\n  isFromEnabledPlugin: m2.isFromEnabledPlugin,\n  isSwitchedOffForRenderedSite: m2.isSwitchedOffForRenderedSite,\n  useEnabledPlugins: m2.useEnabledPlugins,\n  FUNCTION_BUILTIN_NAMES: m3.FUNCTION_BUILTIN_NAMES,\n  FUNCTION_MAX_OPERATIONS: m3.FUNCTION_MAX_OPERATIONS,\n  evaluateExpression: m3.evaluateExpression,\n  evaluateHostFunction: m3.evaluateHostFunction,\n  expressionIdentifiers: m3.expressionIdentifiers,\n  formatFunctionParameterOptions: m3.formatFunctionParameterOptions,\n  functionReferencedNames: m3.functionReferencedNames,\n  parseFunctionParameterOptions: m3.parseFunctionParameterOptions,\n  NodeIdentityContext: m4.NodeIdentityContext,\n  useNodeId: m4.useNodeId,\n  ScreenLinkContext: m5.ScreenLinkContext,\n  PREVIEW_REFUSED_STATUS: m6.PREVIEW_REFUSED_STATUS,\n  PREVIEW_WRITE_BLOCKED_EVENT: m6.PREVIEW_WRITE_BLOCKED_EVENT,\n  SiteContext: m6.SiteContext,\n  isPreviewRefusal: m6.isPreviewRefusal,\n  useSite: m6.useSite,\n  useSiteFetch: m6.useSiteFetch,\n  HOST_VARIABLE_TYPE_LABELS: m7.HOST_VARIABLE_TYPE_LABELS,\n  VARIABLE_NAME_PATTERN: m7.VARIABLE_NAME_PATTERN,\n  attachFunctionDefinitions: m7.attachFunctionDefinitions,\n  formatVariableValue: m7.formatVariableValue,\n  functionGlobals: m7.functionGlobals,\n  hasBindings: m7.hasBindings,\n  resolveBindings: m7.resolveBindings,\n  resolveNodesBindings: m7.resolveNodesBindings,\n  COMPONENT_CATEGORY_ORDER: m8.COMPONENT_CATEGORY_ORDER,\n  ComponentCategory: m8.ComponentCategory,\n  REUSABLE_COMPONENT_CATEGORY: m8.REUSABLE_COMPONENT_CATEGORY,\n  REUSABLE_EMAIL_BLOCK_CATEGORY: m8.REUSABLE_EMAIL_BLOCK_CATEGORY,\n  FEATURE_FLAG: m9.FEATURE_FLAG,\n  RICH_TEXT_COMMANDS: m9.RICH_TEXT_COMMANDS,\n  FieldComponentType: m10.FieldComponentType,\n  FieldValidatorType: m10.FieldValidatorType,\n  LinealDirectiveFlag: m10.LinealDirectiveFlag,\n  CONSOLE_HOST_GATED_WIDGET_SLOTS: m11.CONSOLE_HOST_GATED_WIDGET_SLOTS,\n  CONSOLE_SEARCH_LOAD_POINT: m11.CONSOLE_SEARCH_LOAD_POINT,\n  CONSOLE_STAFF_WIDGET_SLOTS: m11.CONSOLE_STAFF_WIDGET_SLOTS,\n  CONSOLE_WIDGET_SLOTS: m11.CONSOLE_WIDGET_SLOTS,\n  MUI_BUNDLE_ID: m11.MUI_BUNDLE_ID,\n  THEME_PRESETS_LOAD_POINT: m11.THEME_PRESETS_LOAD_POINT,\n  defineUiFeatureBundle: m11.defineUiFeatureBundle,\n  isConsoleHostGatedWidgetSlot: m11.isConsoleHostGatedWidgetSlot,\n  isConsoleStaffWidgetSlot: m11.isConsoleStaffWidgetSlot,\n  listConsoleExtensions: m11.listConsoleExtensions,\n  listConsoleNavItems: m11.listConsoleNavItems,\n  listConsoleOrgNavItems: m11.listConsoleOrgNavItems,\n  listConsoleProviders: m11.listConsoleProviders,\n  listConsoleSearchSources: m11.listConsoleSearchSources,\n  listConsoleStaffPages: m11.listConsoleStaffPages,\n  listConsoleThemePresets: m11.listConsoleThemePresets,\n  listConsoleWidgets: m11.listConsoleWidgets,\n  registerConsoleExtension: m11.registerConsoleExtension,\n  resolveConsoleOrgPluginPage: m11.resolveConsoleOrgPluginPage,\n  resolveConsolePluginPage: m11.resolveConsolePluginPage,\n  resolveConsoleStaffPage: m11.resolveConsoleStaffPage,\n  unregisterConsoleExtension: m11.unregisterConsoleExtension,\n  NodeType: m12.NodeType,\n})\n"],"names":["m0","m1","m2","m3","m4","m5","m6","m7","m8","m9","m10","m11","m12","AGLYN_HOST_SURFACE","Object","freeze","Aglyn","aglyn","canvas","components","emitter","logger","plugins","FUNCTION_TOKEN_PATTERN","MISSING_BINDING_LABEL","NAME_TOKEN_PATTERN","VARIABLE_ID_TOKEN_PATTERN","bindingTokenNeedsDeep","displayBindingTokens","editableBindingTokens","formatFunctionIdToken","formatVariableIdToken","keyById","nodesReferenceBinding","normalizeBindingTokens","rewriteBindingTokensDeep","textReferencesBinding","CATEGORY_REQUIRED_CAPABILITY","EnabledPluginsContext","isCategoryCapabilityEnabled","isFromEnabledPlugin","isSwitchedOffForRenderedSite","useEnabledPlugins","FUNCTION_BUILTIN_NAMES","FUNCTION_MAX_OPERATIONS","evaluateExpression","evaluateHostFunction","expressionIdentifiers","formatFunctionParameterOptions","functionReferencedNames","parseFunctionParameterOptions","NodeIdentityContext","useNodeId","ScreenLinkContext","PREVIEW_REFUSED_STATUS","PREVIEW_WRITE_BLOCKED_EVENT","SiteContext","isPreviewRefusal","useSite","useSiteFetch","HOST_VARIABLE_TYPE_LABELS","VARIABLE_NAME_PATTERN","attachFunctionDefinitions","formatVariableValue","functionGlobals","hasBindings","resolveBindings","resolveNodesBindings","COMPONENT_CATEGORY_ORDER","ComponentCategory","REUSABLE_COMPONENT_CATEGORY","REUSABLE_EMAIL_BLOCK_CATEGORY","FEATURE_FLAG","RICH_TEXT_COMMANDS","FieldComponentType","FieldValidatorType","LinealDirectiveFlag","CONSOLE_HOST_GATED_WIDGET_SLOTS","CONSOLE_SEARCH_LOAD_POINT","CONSOLE_STAFF_WIDGET_SLOTS","CONSOLE_WIDGET_SLOTS","MUI_BUNDLE_ID","THEME_PRESETS_LOAD_POINT","defineUiFeatureBundle","isConsoleHostGatedWidgetSlot","isConsoleStaffWidgetSlot","listConsoleExtensions","listConsoleNavItems","listConsoleOrgNavItems","listConsoleProviders","listConsoleSearchSources","listConsoleStaffPages","listConsoleThemePresets","listConsoleWidgets","registerConsoleExtension","resolveConsoleOrgPluginPage","resolveConsolePluginPage","resolveConsoleStaffPage","unregisterConsoleExtension","NodeType"],"mappings":"AAAA;;;;;;CAMC,GACD,kBAAkB,GAElB,YAAYA,QAAQ,cAAU;AAC9B,YAAYC,QAAQ,iCAA6B;AACjD,YAAYC,QAAQ,0CAAsC;AAC1D,YAAYC,QAAQ,4BAAwB;AAC5C,YAAYC,QAAQ,gCAA4B;AAChD,YAAYC,QAAQ,4CAAwC;AAC5D,YAAYC,QAAQ,+BAA2B;AAC/C,YAAYC,QAAQ,4BAAwB;AAC5C,YAAYC,QAAQ,wCAAoC;AACxD,YAAYC,QAAQ,oCAAgC;AACpD,YAAYC,SAAS,gDAA4C;AACjE,YAAYC,SAAS,uBAAmB;AACxC,YAAYC,SAAS,oBAAgB;AAErC,OAAO,MAAMC,qBAAwDC,OAAOC,MAAM,CAAC;IACjFC,OAAOhB,GAAGgB,KAAK;IACfC,OAAOjB,GAAGiB,KAAK;IACfC,QAAQlB,GAAGkB,MAAM;IACjBC,YAAYnB,GAAGmB,UAAU;IACzBC,SAASpB,GAAGoB,OAAO;IACnBC,QAAQrB,GAAGqB,MAAM;IACjBC,SAAStB,GAAGsB,OAAO;IACnBC,wBAAwBtB,GAAGsB,sBAAsB;IACjDC,uBAAuBvB,GAAGuB,qBAAqB;IAC/CC,oBAAoBxB,GAAGwB,kBAAkB;IACzCC,2BAA2BzB,GAAGyB,yBAAyB;IACvDC,uBAAuB1B,GAAG0B,qBAAqB;IAC/CC,sBAAsB3B,GAAG2B,oBAAoB;IAC7CC,uBAAuB5B,GAAG4B,qBAAqB;IAC/CC,uBAAuB7B,GAAG6B,qBAAqB;IAC/CC,uBAAuB9B,GAAG8B,qBAAqB;IAC/CC,SAAS/B,GAAG+B,OAAO;IACnBC,uBAAuBhC,GAAGgC,qBAAqB;IAC/CC,wBAAwBjC,GAAGiC,sBAAsB;IACjDC,0BAA0BlC,GAAGkC,wBAAwB;IACrDC,uBAAuBnC,GAAGmC,qBAAqB;IAC/CC,8BAA8BnC,GAAGmC,4BAA4B;IAC7DC,uBAAuBpC,GAAGoC,qBAAqB;IAC/CC,6BAA6BrC,GAAGqC,2BAA2B;IAC3DC,qBAAqBtC,GAAGsC,mBAAmB;IAC3CC,8BAA8BvC,GAAGuC,4BAA4B;IAC7DC,mBAAmBxC,GAAGwC,iBAAiB;IACvCC,wBAAwBxC,GAAGwC,sBAAsB;IACjDC,yBAAyBzC,GAAGyC,uBAAuB;IACnDC,oBAAoB1C,GAAG0C,kBAAkB;IACzCC,sBAAsB3C,GAAG2C,oBAAoB;IAC7CC,uBAAuB5C,GAAG4C,qBAAqB;IAC/CC,gCAAgC7C,GAAG6C,8BAA8B;IACjEC,yBAAyB9C,GAAG8C,uBAAuB;IACnDC,+BAA+B/C,GAAG+C,6BAA6B;IAC/DC,qBAAqB/C,GAAG+C,mBAAmB;IAC3CC,WAAWhD,GAAGgD,SAAS;IACvBC,mBAAmBhD,GAAGgD,iBAAiB;IACvCC,wBAAwBhD,GAAGgD,sBAAsB;IACjDC,6BAA6BjD,GAAGiD,2BAA2B;IAC3DC,aAAalD,GAAGkD,WAAW;IAC3BC,kBAAkBnD,GAAGmD,gBAAgB;IACrCC,SAASpD,GAAGoD,OAAO;IACnBC,cAAcrD,GAAGqD,YAAY;IAC7BC,2BAA2BrD,GAAGqD,yBAAyB;IACvDC,uBAAuBtD,GAAGsD,qBAAqB;IAC/CC,2BAA2BvD,GAAGuD,yBAAyB;IACvDC,qBAAqBxD,GAAGwD,mBAAmB;IAC3CC,iBAAiBzD,GAAGyD,eAAe;IACnCC,aAAa1D,GAAG0D,WAAW;IAC3BC,iBAAiB3D,GAAG2D,eAAe;IACnCC,sBAAsB5D,GAAG4D,oBAAoB;IAC7CC,0BAA0B5D,GAAG4D,wBAAwB;IACrDC,mBAAmB7D,GAAG6D,iBAAiB;IACvCC,6BAA6B9D,GAAG8D,2BAA2B;IAC3DC,+BAA+B/D,GAAG+D,6BAA6B;IAC/DC,cAAc/D,GAAG+D,YAAY;IAC7BC,oBAAoBhE,GAAGgE,kBAAkB;IACzCC,oBAAoBhE,IAAIgE,kBAAkB;IAC1CC,oBAAoBjE,IAAIiE,kBAAkB;IAC1CC,qBAAqBlE,IAAIkE,mBAAmB;IAC5CC,iCAAiClE,IAAIkE,+BAA+B;IACpEC,2BAA2BnE,IAAImE,yBAAyB;IACxDC,4BAA4BpE,IAAIoE,0BAA0B;IAC1DC,sBAAsBrE,IAAIqE,oBAAoB;IAC9CC,eAAetE,IAAIsE,aAAa;IAChCC,0BAA0BvE,IAAIuE,wBAAwB;IACtDC,uBAAuBxE,IAAIwE,qBAAqB;IAChDC,8BAA8BzE,IAAIyE,4BAA4B;IAC9DC,0BAA0B1E,IAAI0E,wBAAwB;IACtDC,uBAAuB3E,IAAI2E,qBAAqB;IAChDC,qBAAqB5E,IAAI4E,mBAAmB;IAC5CC,wBAAwB7E,IAAI6E,sBAAsB;IAClDC,sBAAsB9E,IAAI8E,oBAAoB;IAC9CC,0BAA0B/E,IAAI+E,wBAAwB;IACtDC,uBAAuBhF,IAAIgF,qBAAqB;IAChDC,yBAAyBjF,IAAIiF,uBAAuB;IACpDC,oBAAoBlF,IAAIkF,kBAAkB;IAC1CC,0BAA0BnF,IAAImF,wBAAwB;IACtDC,6BAA6BpF,IAAIoF,2BAA2B;IAC5DC,0BAA0BrF,IAAIqF,wBAAwB;IACtDC,yBAAyBtF,IAAIsF,uBAAuB;IACpDC,4BAA4BvF,IAAIuF,0BAA0B;IAC1DC,UAAUvF,IAAIuF,QAAQ;AACxB,GAAE"}

package/src/lib/plugin-manager/repeat-rows.d.ts

@@ -35,8 +35,8 @@ import type { RepeatableDataset } from '../app-utils/expand-repeatables';
  * entry, which every app runs at boot, so every process that composes a page
  * has it before the first request. But a registry is only safe where an empty
  * one cannot be mistaken for an answer, and here it can: a page whose repeat
- * found no reader would render the template once where the author put a list,
- * and nothing anywhere would be red. That is the AGL-3025 shape on the most
+ * found no reader would render no copies where the author put a list, and
+ * nothing anywhere would be red. That is the AGL-3025 shape on the most
  * public surface the product has.
  *
  * So the plugin that answers also DECLARES that it does, in
@@ -45,8 +45,7 @@ import type { RepeatableDataset } from '../app-utils/expand-repeatables';
  * that is a broken boot:
  *
  * - nothing declared — this deployment ships no plugin that keeps rows, and a
- *   repeat renders its element once, as written, exactly as a key naming
- *   nothing does;
+ *   repeat renders no copies, exactly as a key naming nothing does (AGL-3496);
  * - declared and registered — the reader answers;
  * - declared and NOT registered — the boot failed. The app's declarations
  *   step is run again ({@link runPluginDeclarationsRepair}); if the reader is
@@ -55,8 +54,8 @@ import type { RepeatableDataset } from '../app-utils/expand-repeatables';
  *   the right way round for a page that would otherwise go out wrong.
  *
  * Per-key failures are the reader's to absorb, as they always were: a deleted
- * or unreadable entry leaves its element rendering once and costs the page
- * nothing else.
+ * or unreadable entry renders no copies of its element (AGL-3496) — never its
+ * raw `{{item.*}}` template — and costs the page nothing else.
  *
  * Reached by path, never through a barrel: only the server composition asks.
  */