@aglyn/aglyn 1.0.0-beta.221 → 1.0.0-beta.222

package/src/lib/plugin-manager/plugin-record-email-state.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../../../libs/aglyn/src/lib/plugin-manager/plugin-record-email-state.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport type { EmailState } from '../app-utils/email-state'\nimport {\n  definePluginServiceContract,\n  registerPluginService,\n  resolvePluginServices,\n} from './plugin-services'\n\n/**\n * The verdict on an address, written onto the records that carry it\n * (AGL-3245).\n *\n * The senders keep their lists — the platform's suppression list, a site's\n * suppressions, an organization's do-not-contact list — and those are what\n * a send consults. The record a person reads is the record system's: a\n * lead, a contact, whatever the plugin that keeps the workspace's records\n * calls them. A sender must not write that plugin's documents itself, nor\n * import it; so the record system registers a WRITER here, and a sender\n * that filed a verdict on a list says so through it.\n *\n * The writer finds every record the address is — the plugin knows its own\n * storage and its own index — and stamps `emailState` on each, keeping the\n * stronger verdict (`nextEmailState`). A single-implementation contract: a\n * workspace keeps one record system.\n *\n * ## The caller proves who is asking\n *\n * Like the timeline seam, the registry authenticates nobody. The caller\n * decides, in its own terms and before it asks, that the verdict is the\n * workspace's to write: an address it sent to, a list it wrote.\n */\n\nexport interface PluginRecordEmailStateRequest {\n  /** The organization whose records are stamped. */\n  orgId?: string\n  /**\n   * Or the site the send left from, when the caller knows only that — a\n   * campaign webhook, an unsubscribe link. The writer reads the\n   * organization off it.\n   */\n  hostId?: string\n  email: string\n  state: EmailState\n  /** Write the state whatever the record holds — a release. */\n  force?: boolean\n  /**\n   * Take the verdict back instead of writing it: a record whose standing\n   * state has `state.status` loses it, and any other record is left alone.\n   * The deliverability check's way back from `undeliverable` once the\n   * domain takes mail (AGL-3328); it never clears a verdict it did not give.\n   */\n  withdraw?: boolean\n}\n\nexport interface PluginRecordEmailStateReport {\n  /** Records whose state moved. */\n  records: number\n}\n\n/**\n * One delivery event a send's webhook recorded, as the delivery log\n * answered it: who it is about, what happened, when, and whether it is the\n * first event of its type for its message.\n */\nexport interface PluginRecordEmailEvent {\n  /** The recipient, lowercased. */\n  to: string\n  /** `opened`, `clicked`, `delivered`, `bounced`, … */\n  type: string\n  /** When it happened, epoch ms. */\n  at: number\n  /** No event of this type had been recorded against this message before. */\n  firstOfType: boolean\n}\n\n/**\n * The events one webhook delivery recorded for a send from a site — what\n * the record system reads a person's engagement off (AGL-2616).\n */\nexport interface PluginRecordEmailEngagementRequest {\n  /**\n   * The site the send went out from: the `hostId` tag the send stamped,\n   * which is the only tenant identity a delivery event carries.\n   */\n  hostId: string\n  events: readonly PluginRecordEmailEvent[]\n}\n\n/**\n * The people a marketing send was delivered to (AGL-3446), so the record\n * system can say automated email is reaching them — a lead's Nurturing\n * stage. Only what was actually accepted for delivery: a refused or\n * deferred address reached nobody.\n */\nexport interface PluginRecordEmailReachRequest {\n  /** The organization whose records the send reached. */\n  orgId: string\n  /** The site the send went out as; only records it holds are moved. */\n  hostId: string\n  /** The addresses delivered to, as the send addressed them. */\n  emails: readonly string[]\n}\n\nexport interface PluginRecordEmailStateWriter {\n  /** Never throws: a list is the control, the stamp is what a person reads. */\n  stamp(request: PluginRecordEmailStateRequest): Promise<PluginRecordEmailStateReport>\n  /**\n   * Stamps when each person these events name last engaged with a send from\n   * the site, on the records the site may see. Optional: a record system\n   * that keeps no engagement answers nothing. Never throws, for the reason\n   * `stamp` does not: the webhook's acknowledgement must not depend on it.\n   */\n  engaged?(request: PluginRecordEmailEngagementRequest): Promise<PluginRecordEmailStateReport>\n  /**\n   * Notes that a marketing send reached these people. Optional: a record\n   * system with no stage for it answers nothing. Never throws: the mail has\n   * already gone.\n   */\n  reached?(request: PluginRecordEmailReachRequest): Promise<PluginRecordEmailStateReport>\n}\n\nexport const PLUGIN_RECORD_EMAIL_STATE = definePluginServiceContract<PluginRecordEmailStateWriter>(\n  'core.record-email-state',\n  { multiple: false },\n)\n\n/**\n * Registers the workspace's record email-state writer. The owner is the\n * loader's marker when a register fn is running, else `options.pluginId`;\n * with neither the registration throws, and a second plugin's writer is\n * refused naming both — the incumbent keeps serving.\n */\nexport function registerPluginRecordEmailStateWriter(\n  writer: PluginRecordEmailStateWriter,\n  options?: { pluginId?: string },\n): void {\n  registerPluginService(PLUGIN_RECORD_EMAIL_STATE, writer, {\n    ...(options?.pluginId ? { pluginId: options.pluginId } : {}),\n  })\n}\n\nexport interface ResolvedPluginRecordEmailStateWriter {\n  /** The plugin that keeps the records. */\n  pluginId: string\n  writer: PluginRecordEmailStateWriter\n}\n\n/** The writer, with its owner, or `null` when no plugin keeps records here. */\nexport function pluginRecordEmailStateWriter(): ResolvedPluginRecordEmailStateWriter | null {\n  const entry = resolvePluginServices(PLUGIN_RECORD_EMAIL_STATE)[0]\n  return entry ? { pluginId: entry.pluginId, writer: entry.impl } : null\n}\n\n/**\n * Stamps the verdict through whichever plugin keeps the records, or answers\n * `null` when none does. Never throws: every caller is a sender for whom\n * the stamp is a courtesy beside the list it already wrote.\n */\nexport async function stampRecordEmailState(\n  request: PluginRecordEmailStateRequest,\n): Promise<PluginRecordEmailStateReport | null> {\n  const resolved = pluginRecordEmailStateWriter()\n  if (!resolved) return null\n  try {\n    return await resolved.writer.stamp(request)\n  } catch (error) {\n    console.error('[record-email-state] the record system could not stamp the address', error)\n    return null\n  }\n}\n\n/**\n * Hands a send's delivery events to whichever plugin keeps the records, so\n * it can stamp the people who engaged (AGL-2616). Answers `null` when no\n * plugin keeps records, or the one that does keeps no engagement. Never\n * throws: the caller is a webhook whose acknowledgement must not hang on a\n * courtesy stamp.\n */\nexport async function stampRecordEmailEngagement(\n  request: PluginRecordEmailEngagementRequest,\n): Promise<PluginRecordEmailStateReport | null> {\n  const resolved = pluginRecordEmailStateWriter()\n  if (!resolved?.writer.engaged) return null\n  try {\n    return await resolved.writer.engaged(request)\n  } catch (error) {\n    console.error('[record-email-state] the record system could not stamp an engagement', error)\n    return null\n  }\n}\n\n/**\n * Hands the addresses a marketing send was delivered to to whichever plugin\n * keeps the records (AGL-3446). Answers `null` when no plugin keeps\n * records, or the one that does keeps no such stage. Never throws: the\n * send has already delivered, and its bookkeeping must not fail it.\n */\nexport async function stampRecordEmailReach(\n  request: PluginRecordEmailReachRequest,\n): Promise<PluginRecordEmailStateReport | null> {\n  if (!request.emails.length) return null\n  const resolved = pluginRecordEmailStateWriter()\n  if (!resolved?.writer.reached) return null\n  try {\n    return await resolved.writer.reached(request)\n  } catch (error) {\n    console.error('[record-email-state] the record system could not note a delivered send', error)\n    return null\n  }\n}\n"],"names":["definePluginServiceContract","registerPluginService","resolvePluginServices","PLUGIN_RECORD_EMAIL_STATE","multiple","registerPluginRecordEmailStateWriter","writer","options","pluginId","pluginRecordEmailStateWriter","entry","impl","stampRecordEmailState","request","resolved","stamp","error","console","stampRecordEmailEngagement","engaged","stampRecordEmailReach","emails","length","reached"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC;AAGD,SACEA,2BAA2B,EAC3BC,qBAAqB,EACrBC,qBAAqB,QAChB,uBAAmB;AAmH1B,OAAO,MAAMC,4BAA4BH,4BACvC,2BACA;IAAEI,UAAU;AAAM,GACnB;AAED;;;;;CAKC,GACD,OAAO,SAASC,qCACdC,MAAoC,EACpCC,OAA+B;IAE/BN,sBAAsBE,2BAA2BG,QAAQ,aACnDC,CAAAA,2BAAAA,QAASC,QAAQ,IAAG;QAAEA,UAAUD,QAAQC,QAAQ;IAAC,IAAI,CAAC;AAE9D;AAQA,6EAA6E,GAC7E,OAAO,SAASC;IACd,MAAMC,QAAQR,sBAAsBC,0BAA0B,CAAC,EAAE;IACjE,OAAOO,QAAQ;QAAEF,UAAUE,MAAMF,QAAQ;QAAEF,QAAQI,MAAMC,IAAI;IAAC,IAAI;AACpE;AAEA;;;;CAIC,GACD,OAAO,eAAeC,sBACpBC,OAAsC;IAEtC,MAAMC,WAAWL;IACjB,IAAI,CAACK,UAAU,OAAO;IACtB,IAAI;QACF,OAAO,MAAMA,SAASR,MAAM,CAACS,KAAK,CAACF;IACrC,EAAE,OAAOG,OAAO;QACdC,QAAQD,KAAK,CAAC,sEAAsEA;QACpF,OAAO;IACT;AACF;AAEA;;;;;;CAMC,GACD,OAAO,eAAeE,2BACpBL,OAA2C;IAE3C,MAAMC,WAAWL;IACjB,IAAI,EAACK,4BAAAA,SAAUR,MAAM,CAACa,OAAO,GAAE,OAAO;IACtC,IAAI;QACF,OAAO,MAAML,SAASR,MAAM,CAACa,OAAO,CAACN;IACvC,EAAE,OAAOG,OAAO;QACdC,QAAQD,KAAK,CAAC,wEAAwEA;QACtF,OAAO;IACT;AACF;AAEA;;;;;CAKC,GACD,OAAO,eAAeI,sBACpBP,OAAsC;IAEtC,IAAI,CAACA,QAAQQ,MAAM,CAACC,MAAM,EAAE,OAAO;IACnC,MAAMR,WAAWL;IACjB,IAAI,EAACK,4BAAAA,SAAUR,MAAM,CAACiB,OAAO,GAAE,OAAO;IACtC,IAAI;QACF,OAAO,MAAMT,SAASR,MAAM,CAACiB,OAAO,CAACV;IACvC,EAAE,OAAOG,OAAO;QACdC,QAAQD,KAAK,CAAC,0EAA0EA;QACxF,OAAO;IACT;AACF"}
+{"version":3,"sources":["../../../../../../libs/aglyn/src/lib/plugin-manager/plugin-record-email-state.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport type { EmailState } from '../app-utils/email-state'\nimport {\n  definePluginServiceContract,\n  registerPluginService,\n  resolvePluginServices,\n} from './plugin-services'\n\n/**\n * The verdict on an address, written onto the records that carry it\n * (AGL-3245).\n *\n * The senders keep their lists — the platform's suppression list, a site's\n * suppressions, an organization's do-not-contact list — and those are what\n * a send consults. The record a person reads is the record system's: a\n * lead, a contact, whatever the plugin that keeps the workspace's records\n * calls them. A sender must not write that plugin's documents itself, nor\n * import it; so the record system registers a WRITER here, and a sender\n * that filed a verdict on a list says so through it.\n *\n * The writer finds every record the address is — the plugin knows its own\n * storage and its own index — and stamps `emailState` on each, keeping the\n * stronger verdict (`nextEmailState`). A single-implementation contract: a\n * workspace keeps one record system.\n *\n * ## The caller proves who is asking\n *\n * Like the timeline seam, the registry authenticates nobody. The caller\n * decides, in its own terms and before it asks, that the verdict is the\n * workspace's to write: an address it sent to, a list it wrote.\n */\n\nexport interface PluginRecordEmailStateRequest {\n  /** The organization whose records are stamped. */\n  orgId?: string\n  /**\n   * Or the site the send left from, when the caller knows only that — a\n   * campaign webhook, an unsubscribe link. The writer reads the\n   * organization off it.\n   */\n  hostId?: string\n  email: string\n  state: EmailState\n  /** Write the state whatever the record holds — a release. */\n  force?: boolean\n  /**\n   * Take the verdict back instead of writing it: a record whose standing\n   * state has `state.status` loses it, and any other record is left alone.\n   * The deliverability check's way back from `undeliverable` once the\n   * domain takes mail (AGL-3328); it never clears a verdict it did not give.\n   */\n  withdraw?: boolean\n}\n\nexport interface PluginRecordEmailStateReport {\n  /** Records whose state moved. */\n  records: number\n}\n\n/**\n * One delivery event a send's webhook recorded, as the delivery log\n * answered it: who it is about, what happened, when, and whether it is the\n * first event of its type for its message.\n */\nexport interface PluginRecordEmailEvent {\n  /** The recipient, lowercased. */\n  to: string\n  /** `opened`, `clicked`, `delivered`, `bounced`, … */\n  type: string\n  /** When it happened, epoch ms. */\n  at: number\n  /** No event of this type had been recorded against this message before. */\n  firstOfType: boolean\n}\n\n/**\n * The events one webhook delivery recorded for a send from a site — what\n * the record system reads a person's engagement off (AGL-2616).\n */\nexport interface PluginRecordEmailEngagementRequest {\n  /**\n   * The site the send went out from: the `hostId` tag the send stamped,\n   * which is the only tenant identity a delivery event carries.\n   */\n  hostId: string\n  events: readonly PluginRecordEmailEvent[]\n}\n\n/**\n * The people a marketing send was delivered to (AGL-3446), so the record\n * system can say automated email is reaching them — a lead's Nurturing\n * stage. Only what was actually accepted for delivery: a refused or\n * deferred address reached nobody.\n */\nexport interface PluginRecordEmailReachRequest {\n  /** The organization whose records the send reached. */\n  orgId: string\n  /** The site the send went out as; only records it holds are moved. */\n  hostId: string\n  /** The addresses delivered to, as the send addressed them. */\n  emails: readonly string[]\n}\n\n/**\n * The people who wrote back to mail the workspace sent them (AGL-3080), so\n * the record system can say a person is engaged — a lead nobody had worked is\n * being worked now. Only a real reply: an opt-out answered with \"remove me\"\n * is a refusal, filed through the suppression lists, and is not handed here.\n */\nexport interface PluginRecordEmailReplyRequest {\n  /** The organization whose records the reply is about. */\n  orgId: string\n  /** The site the mail went out as; only records it holds are moved. */\n  hostId: string\n  /** The addresses that wrote back, as the mail addressed them. */\n  emails: readonly string[]\n}\n\nexport interface PluginRecordEmailStateWriter {\n  /** Never throws: a list is the control, the stamp is what a person reads. */\n  stamp(request: PluginRecordEmailStateRequest): Promise<PluginRecordEmailStateReport>\n  /**\n   * Stamps when each person these events name last engaged with a send from\n   * the site, on the records the site may see. Optional: a record system\n   * that keeps no engagement answers nothing. Never throws, for the reason\n   * `stamp` does not: the webhook's acknowledgement must not depend on it.\n   */\n  engaged?(request: PluginRecordEmailEngagementRequest): Promise<PluginRecordEmailStateReport>\n  /**\n   * Notes that a marketing send reached these people. Optional: a record\n   * system with no stage for it answers nothing. Never throws: the mail has\n   * already gone.\n   */\n  reached?(request: PluginRecordEmailReachRequest): Promise<PluginRecordEmailStateReport>\n  /**\n   * Notes that these people replied. Optional: a record system with no stage\n   * for it answers nothing. Never throws: the reply has already arrived.\n   */\n  replied?(request: PluginRecordEmailReplyRequest): Promise<PluginRecordEmailStateReport>\n}\n\nexport const PLUGIN_RECORD_EMAIL_STATE = definePluginServiceContract<PluginRecordEmailStateWriter>(\n  'core.record-email-state',\n  { multiple: false },\n)\n\n/**\n * Registers the workspace's record email-state writer. The owner is the\n * loader's marker when a register fn is running, else `options.pluginId`;\n * with neither the registration throws, and a second plugin's writer is\n * refused naming both — the incumbent keeps serving.\n */\nexport function registerPluginRecordEmailStateWriter(\n  writer: PluginRecordEmailStateWriter,\n  options?: { pluginId?: string },\n): void {\n  registerPluginService(PLUGIN_RECORD_EMAIL_STATE, writer, {\n    ...(options?.pluginId ? { pluginId: options.pluginId } : {}),\n  })\n}\n\nexport interface ResolvedPluginRecordEmailStateWriter {\n  /** The plugin that keeps the records. */\n  pluginId: string\n  writer: PluginRecordEmailStateWriter\n}\n\n/** The writer, with its owner, or `null` when no plugin keeps records here. */\nexport function pluginRecordEmailStateWriter(): ResolvedPluginRecordEmailStateWriter | null {\n  const entry = resolvePluginServices(PLUGIN_RECORD_EMAIL_STATE)[0]\n  return entry ? { pluginId: entry.pluginId, writer: entry.impl } : null\n}\n\n/**\n * Stamps the verdict through whichever plugin keeps the records, or answers\n * `null` when none does. Never throws: every caller is a sender for whom\n * the stamp is a courtesy beside the list it already wrote.\n */\nexport async function stampRecordEmailState(\n  request: PluginRecordEmailStateRequest,\n): Promise<PluginRecordEmailStateReport | null> {\n  const resolved = pluginRecordEmailStateWriter()\n  if (!resolved) return null\n  try {\n    return await resolved.writer.stamp(request)\n  } catch (error) {\n    console.error('[record-email-state] the record system could not stamp the address', error)\n    return null\n  }\n}\n\n/**\n * Hands a send's delivery events to whichever plugin keeps the records, so\n * it can stamp the people who engaged (AGL-2616). Answers `null` when no\n * plugin keeps records, or the one that does keeps no engagement. Never\n * throws: the caller is a webhook whose acknowledgement must not hang on a\n * courtesy stamp.\n */\nexport async function stampRecordEmailEngagement(\n  request: PluginRecordEmailEngagementRequest,\n): Promise<PluginRecordEmailStateReport | null> {\n  const resolved = pluginRecordEmailStateWriter()\n  if (!resolved?.writer.engaged) return null\n  try {\n    return await resolved.writer.engaged(request)\n  } catch (error) {\n    console.error('[record-email-state] the record system could not stamp an engagement', error)\n    return null\n  }\n}\n\n/**\n * Hands the addresses a marketing send was delivered to to whichever plugin\n * keeps the records (AGL-3446). Answers `null` when no plugin keeps\n * records, or the one that does keeps no such stage. Never throws: the\n * send has already delivered, and its bookkeeping must not fail it.\n */\nexport async function stampRecordEmailReach(\n  request: PluginRecordEmailReachRequest,\n): Promise<PluginRecordEmailStateReport | null> {\n  if (!request.emails.length) return null\n  const resolved = pluginRecordEmailStateWriter()\n  if (!resolved?.writer.reached) return null\n  try {\n    return await resolved.writer.reached(request)\n  } catch (error) {\n    console.error('[record-email-state] the record system could not note a delivered send', error)\n    return null\n  }\n}\n\n/**\n * Hands the addresses that wrote back to whichever plugin keeps the records\n * (AGL-3080). Answers `null` when no plugin keeps records, or the one that\n * does keeps no such stage. Never throws: the reply is already filed, and its\n * bookkeeping must not fail the sync that read it.\n */\nexport async function stampRecordEmailReply(\n  request: PluginRecordEmailReplyRequest,\n): Promise<PluginRecordEmailStateReport | null> {\n  if (!request.emails.length) return null\n  const resolved = pluginRecordEmailStateWriter()\n  if (!resolved?.writer.replied) return null\n  try {\n    return await resolved.writer.replied(request)\n  } catch (error) {\n    console.error('[record-email-state] the record system could not note a reply', error)\n    return null\n  }\n}\n"],"names":["definePluginServiceContract","registerPluginService","resolvePluginServices","PLUGIN_RECORD_EMAIL_STATE","multiple","registerPluginRecordEmailStateWriter","writer","options","pluginId","pluginRecordEmailStateWriter","entry","impl","stampRecordEmailState","request","resolved","stamp","error","console","stampRecordEmailEngagement","engaged","stampRecordEmailReach","emails","length","reached","stampRecordEmailReply","replied"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC;AAGD,SACEA,2BAA2B,EAC3BC,qBAAqB,EACrBC,qBAAqB,QAChB,uBAAmB;AAuI1B,OAAO,MAAMC,4BAA4BH,4BACvC,2BACA;IAAEI,UAAU;AAAM,GACnB;AAED;;;;;CAKC,GACD,OAAO,SAASC,qCACdC,MAAoC,EACpCC,OAA+B;IAE/BN,sBAAsBE,2BAA2BG,QAAQ,aACnDC,CAAAA,2BAAAA,QAASC,QAAQ,IAAG;QAAEA,UAAUD,QAAQC,QAAQ;IAAC,IAAI,CAAC;AAE9D;AAQA,6EAA6E,GAC7E,OAAO,SAASC;IACd,MAAMC,QAAQR,sBAAsBC,0BAA0B,CAAC,EAAE;IACjE,OAAOO,QAAQ;QAAEF,UAAUE,MAAMF,QAAQ;QAAEF,QAAQI,MAAMC,IAAI;IAAC,IAAI;AACpE;AAEA;;;;CAIC,GACD,OAAO,eAAeC,sBACpBC,OAAsC;IAEtC,MAAMC,WAAWL;IACjB,IAAI,CAACK,UAAU,OAAO;IACtB,IAAI;QACF,OAAO,MAAMA,SAASR,MAAM,CAACS,KAAK,CAACF;IACrC,EAAE,OAAOG,OAAO;QACdC,QAAQD,KAAK,CAAC,sEAAsEA;QACpF,OAAO;IACT;AACF;AAEA;;;;;;CAMC,GACD,OAAO,eAAeE,2BACpBL,OAA2C;IAE3C,MAAMC,WAAWL;IACjB,IAAI,EAACK,4BAAAA,SAAUR,MAAM,CAACa,OAAO,GAAE,OAAO;IACtC,IAAI;QACF,OAAO,MAAML,SAASR,MAAM,CAACa,OAAO,CAACN;IACvC,EAAE,OAAOG,OAAO;QACdC,QAAQD,KAAK,CAAC,wEAAwEA;QACtF,OAAO;IACT;AACF;AAEA;;;;;CAKC,GACD,OAAO,eAAeI,sBACpBP,OAAsC;IAEtC,IAAI,CAACA,QAAQQ,MAAM,CAACC,MAAM,EAAE,OAAO;IACnC,MAAMR,WAAWL;IACjB,IAAI,EAACK,4BAAAA,SAAUR,MAAM,CAACiB,OAAO,GAAE,OAAO;IACtC,IAAI;QACF,OAAO,MAAMT,SAASR,MAAM,CAACiB,OAAO,CAACV;IACvC,EAAE,OAAOG,OAAO;QACdC,QAAQD,KAAK,CAAC,0EAA0EA;QACxF,OAAO;IACT;AACF;AAEA;;;;;CAKC,GACD,OAAO,eAAeQ,sBACpBX,OAAsC;IAEtC,IAAI,CAACA,QAAQQ,MAAM,CAACC,MAAM,EAAE,OAAO;IACnC,MAAMR,WAAWL;IACjB,IAAI,EAACK,4BAAAA,SAAUR,MAAM,CAACmB,OAAO,GAAE,OAAO;IACtC,IAAI;QACF,OAAO,MAAMX,SAASR,MAAM,CAACmB,OAAO,CAACZ;IACvC,EAAE,OAAOG,OAAO;QACdC,QAAQD,KAAK,CAAC,iEAAiEA;QAC/E,OAAO;IACT;AACF"}

package/src/lib/plugin-manager/plugin-record-index.d.ts

@@ -78,6 +78,16 @@ export interface PluginRecordIndex {
     get(request: PluginRecordIndexScope & {
         id: string;
     }): Promise<PluginIndexedRecord | null>;
+    /**
+     * One record's document — a Firestore Admin `DocumentReference` — for a
+     * reader that changes what the owner documents a reader may change, or
+     * keeps its own records under it; `null` for a scope the kind has none in.
+     * Whether the record exists is the reader's read to make. Optional: a kind
+     * whose owner offers no such thing is read through `get` alone.
+     */
+    ref?(request: PluginRecordIndexScope & {
+        id: string;
+    }): Promise<unknown>;
 }
 export declare const PLUGIN_RECORD_INDEXES: import("./plugin-services").PluginServiceContract<PluginRecordIndex>;
 /**

package/src/lib/plugin-manager/plugin-record-index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../../../libs/aglyn/src/lib/plugin-manager/plugin-record-index.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { getRegisteringPluginId } from '../app-utils/registering-plugin'\nimport {\n  definePluginServiceContract,\n  registerPluginService,\n  resolvePluginServices,\n} from './plugin-services'\n\n/**\n * A plugin's records, listed and read for ANOTHER plugin (AGL-3080).\n *\n * A plugin that works over records it does not own — an AI job enriching a\n * site's products, a composer binding the products an email names — used to\n * read the owner's Firestore collection itself: the path, the field names,\n * what \"deleted\" looks like. That is a plugin's storage reached around the\n * plugin, invisible to `check:lib-boundaries` because a collection name is\n * not an import, and it breaks the day the owner changes a field.\n *\n * So the owner publishes an INDEX for each record kind it keeps: `list` names\n * the live records of a scope, `get` reads one — each as an id, a name and the\n * FACTS the owner chooses to share, in a shape its registration documents.\n * The reader never learns where the records are stored or what a deleted one\n * looks like; the owner answers only live records.\n *\n * Its siblings: `plugin-record-cards` (how one record LOOKS, for a campaign\n * sender) and `plugin-record-facts` (what a record SAYS, for a summary);\n * `plugin-resource-drafts` is the WRITE side. This is the side that finds and\n * reads records to work on.\n *\n * ## Not registered is an answer\n *\n * No index for a kind means no plugin keeps it in this process — the owner is\n * not installed, or not loaded. A reader treats that as \"none here\" and says\n * so, rather than reaching for the collection itself. Registered from the\n * owner's server declarations, so every server process that boots the\n * declarations has it.\n *\n * ## One index per kind\n *\n * A second plugin registering an index for a kind another plugin already\n * keeps is refused, naming both, and the incumbent keeps serving.\n */\n\n/** One record, as its owner shares it. */\nexport interface PluginIndexedRecord {\n  id: string\n  /** What a person calls it. Never empty: the owner leaves an unnamed record out. */\n  name: string\n  /** What else the owner shares, in the shape its registration documents. */\n  facts: Readonly<Record<string, unknown>>\n}\n\n/** Which records a reader asks about. */\nexport interface PluginRecordIndexScope {\n  /** The organization the records belong to, where the kind is org-scoped. */\n  orgId?: string | null\n  /** The site the records belong to, where the kind is site-scoped. */\n  hostId?: string | null\n}\n\nexport interface PluginRecordIndex {\n  /**\n   * The live records of the scope, at most `limit`, in the owner's order.\n   * `truncated` says the scope holds more than were answered.\n   */\n  list(\n    request: PluginRecordIndexScope & { limit: number },\n  ): Promise<{ records: PluginIndexedRecord[]; truncated: boolean }>\n  /** One live record, or `null` — gone, deleted, or not the scope's. */\n  get(request: PluginRecordIndexScope & { id: string }): Promise<PluginIndexedRecord | null>\n}\n\nexport const PLUGIN_RECORD_INDEXES = definePluginServiceContract<PluginRecordIndex>(\n  'core.record-index',\n  { multiple: true },\n)\n\n/**\n * Publishes the index for one record kind. The owner is the loader's marker\n * when a register fn is running, else `options.pluginId`; with neither the\n * registration throws. A kind another plugin keeps throws naming both.\n */\nexport function registerPluginRecordIndex(\n  kind: string,\n  index: PluginRecordIndex,\n  options?: { pluginId?: string },\n): void {\n  const key = kind.trim()\n  if (!key) throw new Error('a record index needs a record kind')\n  const pluginId = (getRegisteringPluginId() ?? options?.pluginId ?? '').trim()\n  if (!pluginId) {\n    throw new Error(`the record index for \"${key}\" was registered with no owner`)\n  }\n  const incumbent = resolvePluginServices(PLUGIN_RECORD_INDEXES).find(\n    (entry) => entry.key === key,\n  )\n  if (incumbent && incumbent.pluginId !== pluginId) {\n    throw new Error(\n      `record kind \"${key}\" is already indexed by \"${incumbent.pluginId}\"; refused \"${pluginId}\"`,\n    )\n  }\n  registerPluginService(PLUGIN_RECORD_INDEXES, index, { pluginId, key })\n}\n\n/** The index for a kind, with the plugin that keeps it, or `null` when none does here. */\nexport function pluginRecordIndex(\n  kind: string,\n): { pluginId: string; index: PluginRecordIndex } | null {\n  const key = kind.trim()\n  const entry = resolvePluginServices(PLUGIN_RECORD_INDEXES).find((one) => one.key === key)\n  return entry ? { pluginId: entry.pluginId, index: entry.impl } : null\n}\n"],"names":["getRegisteringPluginId","definePluginServiceContract","registerPluginService","resolvePluginServices","PLUGIN_RECORD_INDEXES","multiple","registerPluginRecordIndex","kind","index","options","key","trim","Error","pluginId","incumbent","find","entry","pluginRecordIndex","one","impl"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED,SAASA,sBAAsB,QAAQ,qCAAiC;AACxE,SACEC,2BAA2B,EAC3BC,qBAAqB,EACrBC,qBAAqB,QAChB,uBAAmB;AAkE1B,OAAO,MAAMC,wBAAwBH,4BACnC,qBACA;IAAEI,UAAU;AAAK,GAClB;AAED;;;;CAIC,GACD,OAAO,SAASC,0BACdC,IAAY,EACZC,KAAwB,EACxBC,OAA+B;QAIbT,MAAAA;IAFlB,MAAMU,MAAMH,KAAKI,IAAI;IACrB,IAAI,CAACD,KAAK,MAAM,IAAIE,MAAM;IAC1B,MAAMC,WAAW,EAACb,QAAAA,0BAAAA,oCAAAA,0BAA4BS,2BAAAA,QAASI,QAAQ,YAA7Cb,OAAiD,IAAIW,IAAI;IAC3E,IAAI,CAACE,UAAU;QACb,MAAM,IAAID,MAAM,CAAC,sBAAsB,EAAEF,IAAI,8BAA8B,CAAC;IAC9E;IACA,MAAMI,YAAYX,sBAAsBC,uBAAuBW,IAAI,CACjE,CAACC,QAAUA,MAAMN,GAAG,KAAKA;IAE3B,IAAII,aAAaA,UAAUD,QAAQ,KAAKA,UAAU;QAChD,MAAM,IAAID,MACR,CAAC,aAAa,EAAEF,IAAI,yBAAyB,EAAEI,UAAUD,QAAQ,CAAC,YAAY,EAAEA,SAAS,CAAC,CAAC;IAE/F;IACAX,sBAAsBE,uBAAuBI,OAAO;QAAEK;QAAUH;IAAI;AACtE;AAEA,wFAAwF,GACxF,OAAO,SAASO,kBACdV,IAAY;IAEZ,MAAMG,MAAMH,KAAKI,IAAI;IACrB,MAAMK,QAAQb,sBAAsBC,uBAAuBW,IAAI,CAAC,CAACG,MAAQA,IAAIR,GAAG,KAAKA;IACrF,OAAOM,QAAQ;QAAEH,UAAUG,MAAMH,QAAQ;QAAEL,OAAOQ,MAAMG,IAAI;IAAC,IAAI;AACnE"}
+{"version":3,"sources":["../../../../../../libs/aglyn/src/lib/plugin-manager/plugin-record-index.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { getRegisteringPluginId } from '../app-utils/registering-plugin'\nimport {\n  definePluginServiceContract,\n  registerPluginService,\n  resolvePluginServices,\n} from './plugin-services'\n\n/**\n * A plugin's records, listed and read for ANOTHER plugin (AGL-3080).\n *\n * A plugin that works over records it does not own — an AI job enriching a\n * site's products, a composer binding the products an email names — used to\n * read the owner's Firestore collection itself: the path, the field names,\n * what \"deleted\" looks like. That is a plugin's storage reached around the\n * plugin, invisible to `check:lib-boundaries` because a collection name is\n * not an import, and it breaks the day the owner changes a field.\n *\n * So the owner publishes an INDEX for each record kind it keeps: `list` names\n * the live records of a scope, `get` reads one — each as an id, a name and the\n * FACTS the owner chooses to share, in a shape its registration documents.\n * The reader never learns where the records are stored or what a deleted one\n * looks like; the owner answers only live records.\n *\n * Its siblings: `plugin-record-cards` (how one record LOOKS, for a campaign\n * sender) and `plugin-record-facts` (what a record SAYS, for a summary);\n * `plugin-resource-drafts` is the WRITE side. This is the side that finds and\n * reads records to work on.\n *\n * ## Not registered is an answer\n *\n * No index for a kind means no plugin keeps it in this process — the owner is\n * not installed, or not loaded. A reader treats that as \"none here\" and says\n * so, rather than reaching for the collection itself. Registered from the\n * owner's server declarations, so every server process that boots the\n * declarations has it.\n *\n * ## One index per kind\n *\n * A second plugin registering an index for a kind another plugin already\n * keeps is refused, naming both, and the incumbent keeps serving.\n */\n\n/** One record, as its owner shares it. */\nexport interface PluginIndexedRecord {\n  id: string\n  /** What a person calls it. Never empty: the owner leaves an unnamed record out. */\n  name: string\n  /** What else the owner shares, in the shape its registration documents. */\n  facts: Readonly<Record<string, unknown>>\n}\n\n/** Which records a reader asks about. */\nexport interface PluginRecordIndexScope {\n  /** The organization the records belong to, where the kind is org-scoped. */\n  orgId?: string | null\n  /** The site the records belong to, where the kind is site-scoped. */\n  hostId?: string | null\n}\n\nexport interface PluginRecordIndex {\n  /**\n   * The live records of the scope, at most `limit`, in the owner's order.\n   * `truncated` says the scope holds more than were answered.\n   */\n  list(\n    request: PluginRecordIndexScope & { limit: number },\n  ): Promise<{ records: PluginIndexedRecord[]; truncated: boolean }>\n  /** One live record, or `null` — gone, deleted, or not the scope's. */\n  get(request: PluginRecordIndexScope & { id: string }): Promise<PluginIndexedRecord | null>\n  /**\n   * One record's document — a Firestore Admin `DocumentReference` — for a\n   * reader that changes what the owner documents a reader may change, or\n   * keeps its own records under it; `null` for a scope the kind has none in.\n   * Whether the record exists is the reader's read to make. Optional: a kind\n   * whose owner offers no such thing is read through `get` alone.\n   */\n  ref?(request: PluginRecordIndexScope & { id: string }): Promise<unknown>\n}\n\nexport const PLUGIN_RECORD_INDEXES = definePluginServiceContract<PluginRecordIndex>(\n  'core.record-index',\n  { multiple: true },\n)\n\n/**\n * Publishes the index for one record kind. The owner is the loader's marker\n * when a register fn is running, else `options.pluginId`; with neither the\n * registration throws. A kind another plugin keeps throws naming both.\n */\nexport function registerPluginRecordIndex(\n  kind: string,\n  index: PluginRecordIndex,\n  options?: { pluginId?: string },\n): void {\n  const key = kind.trim()\n  if (!key) throw new Error('a record index needs a record kind')\n  const pluginId = (getRegisteringPluginId() ?? options?.pluginId ?? '').trim()\n  if (!pluginId) {\n    throw new Error(`the record index for \"${key}\" was registered with no owner`)\n  }\n  const incumbent = resolvePluginServices(PLUGIN_RECORD_INDEXES).find(\n    (entry) => entry.key === key,\n  )\n  if (incumbent && incumbent.pluginId !== pluginId) {\n    throw new Error(\n      `record kind \"${key}\" is already indexed by \"${incumbent.pluginId}\"; refused \"${pluginId}\"`,\n    )\n  }\n  registerPluginService(PLUGIN_RECORD_INDEXES, index, { pluginId, key })\n}\n\n/** The index for a kind, with the plugin that keeps it, or `null` when none does here. */\nexport function pluginRecordIndex(\n  kind: string,\n): { pluginId: string; index: PluginRecordIndex } | null {\n  const key = kind.trim()\n  const entry = resolvePluginServices(PLUGIN_RECORD_INDEXES).find((one) => one.key === key)\n  return entry ? { pluginId: entry.pluginId, index: entry.impl } : null\n}\n"],"names":["getRegisteringPluginId","definePluginServiceContract","registerPluginService","resolvePluginServices","PLUGIN_RECORD_INDEXES","multiple","registerPluginRecordIndex","kind","index","options","key","trim","Error","pluginId","incumbent","find","entry","pluginRecordIndex","one","impl"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED,SAASA,sBAAsB,QAAQ,qCAAiC;AACxE,SACEC,2BAA2B,EAC3BC,qBAAqB,EACrBC,qBAAqB,QAChB,uBAAmB;AA0E1B,OAAO,MAAMC,wBAAwBH,4BACnC,qBACA;IAAEI,UAAU;AAAK,GAClB;AAED;;;;CAIC,GACD,OAAO,SAASC,0BACdC,IAAY,EACZC,KAAwB,EACxBC,OAA+B;QAIbT,MAAAA;IAFlB,MAAMU,MAAMH,KAAKI,IAAI;IACrB,IAAI,CAACD,KAAK,MAAM,IAAIE,MAAM;IAC1B,MAAMC,WAAW,EAACb,QAAAA,0BAAAA,oCAAAA,0BAA4BS,2BAAAA,QAASI,QAAQ,YAA7Cb,OAAiD,IAAIW,IAAI;IAC3E,IAAI,CAACE,UAAU;QACb,MAAM,IAAID,MAAM,CAAC,sBAAsB,EAAEF,IAAI,8BAA8B,CAAC;IAC9E;IACA,MAAMI,YAAYX,sBAAsBC,uBAAuBW,IAAI,CACjE,CAACC,QAAUA,MAAMN,GAAG,KAAKA;IAE3B,IAAII,aAAaA,UAAUD,QAAQ,KAAKA,UAAU;QAChD,MAAM,IAAID,MACR,CAAC,aAAa,EAAEF,IAAI,yBAAyB,EAAEI,UAAUD,QAAQ,CAAC,YAAY,EAAEA,SAAS,CAAC,CAAC;IAE/F;IACAX,sBAAsBE,uBAAuBI,OAAO;QAAEK;QAAUH;IAAI;AACtE;AAEA,wFAAwF,GACxF,OAAO,SAASO,kBACdV,IAAY;IAEZ,MAAMG,MAAMH,KAAKI,IAAI;IACrB,MAAMK,QAAQb,sBAAsBC,uBAAuBW,IAAI,CAAC,CAACG,MAAQA,IAAIR,GAAG,KAAKA;IACrF,OAAOM,QAAQ;QAAEH,UAAUG,MAAMH,QAAQ;QAAEL,OAAOQ,MAAMG,IAAI;IAAC,IAAI;AACnE"}

package/src/lib/plugin-manager/plugin-record-lists.d.ts

@@ -14,7 +14,7 @@
  * See the License for the specific language governing permissions and
  * limitations under the License.
  */
-import type { DocumentData, Firestore, Query } from 'firebase/firestore';
+import type { DocumentData, DocumentReference, Firestore, Query } from 'firebase/firestore';
 import type { PluginIndexedRecord } from './plugin-record-index';
 /**
  * A plugin's records, LISTED in the console for another plugin's picker or
@@ -72,9 +72,38 @@ export interface PluginRecordListRequest {
      * owner keeps it. A kind that is never installed answers none.
      */
     installedFrom?: string | null;
+    /**
+     * The consent group the named site presents as (`app-utils/consent-groups`),
+     * for a kind whose records say different things to different groups — a
+     * person's name as one brand knows them. Absent reads as the site alone.
+     */
+    consentGroupId?: string | null;
+    /**
+     * The signed-in member, for a kind some of whose records are one member's
+     * own — a saved view kept private: the owner leaves out what this member
+     * may not list. Absent reads as nobody's, which lists only what is shared.
+     */
+    viewerUid?: string | null;
     /** The most documents the query may answer — a reader asks one past its window to learn it was cut. */
     limit: number;
 }
+/** Where a reader walks a kind, or opens one record of it. */
+export interface PluginRecordListScope {
+    /** The organization, where no site is named. */
+    orgId?: string | null;
+    /** The site; named, it wins over the organization. */
+    hostId?: string | null;
+}
+/**
+ * The most records one by-name read asks for: Firestore's `in` takes thirty
+ * values, so a reader with more asks in chunks.
+ */
+export declare const PLUGIN_RECORD_LIST_IDS_MAX = 30;
+/** Named records of a scope, for a reader that already holds their ids. */
+export type PluginRecordListByIdsRequest = Omit<PluginRecordListRequest, 'limit' | 'search'> & {
+    /** At most {@link PLUGIN_RECORD_LIST_IDS_MAX}; the owner reads no more. */
+    ids: readonly string[];
+};
 export interface PluginRecordListSource {
     /**
      * The query the signed-in member's read of the scope is proved by, at most
@@ -82,8 +111,38 @@ export interface PluginRecordListSource {
      * kind asked at the organization, a search with nothing to match).
      */
     query(firestore: Firestore, request: PluginRecordListRequest): Query<DocumentData> | null;
-    /** One stored document as the owner shares it, or `null` to leave it out (deleted, unnamed). */
-    record(id: string, data: Readonly<Record<string, unknown>>): PluginIndexedRecord | null;
+    /**
+     * The query for NAMED records of the scope — a reader that holds ids from
+     * somewhere else, an attribution naming the submission it credits — or
+     * `null` where none can be read. Optional: a source without it answers no
+     * by-name read, and the reader treats every id as one it could not find.
+     */
+    byIds?(firestore: Firestore, request: PluginRecordListByIdsRequest): Query<DocumentData> | null;
+    /**
+     * One stored document as the owner shares it, or `null` to leave it out
+     * (deleted, unnamed, or not the reader's to list). `request` is the one the
+     * query was built from, when the reader hands it back: a rule the query
+     * cannot state — a site's view of an org-wide row, a member's own view —
+     * is applied here.
+     */
+    record(id: string, data: Readonly<Record<string, unknown>>, request?: PluginRecordListRequest): PluginIndexedRecord | null;
+    /**
+     * The base a reader WALKS the kind from with the console's paged list query
+     * (`useListQuery`), which adds its filters, its order and its pages over the
+     * stored fields the owner documents for the kind — or `null` for a scope
+     * the kind has none in. For a kind whose reader pages a whole list rather
+     * than picking from a window. Where the rules admit a read only narrowed by
+     * a field, the owner's registration says which, and the reader adds it.
+     */
+    walk?(firestore: Firestore, scope: PluginRecordListScope): Query<DocumentData> | null;
+    /**
+     * One record's document, for a reader that opens it whole or changes what
+     * the owner documents a reader may change — the security rules hold the
+     * rest — or `null` for a scope the kind has none in.
+     */
+    doc?(firestore: Firestore, request: PluginRecordListScope & {
+        id: string;
+    }): DocumentReference<DocumentData> | null;
 }
 export declare const PLUGIN_RECORD_LISTS: import("./plugin-services").PluginServiceContract<PluginRecordListSource>;
 /**
@@ -106,10 +165,31 @@ export declare function pluginRecordListSource(kind: string): {
  * none.
  */
 export declare function pluginRecordListQuery(kind: string, firestore: Firestore, request: PluginRecordListRequest): Query<DocumentData> | null;
+/**
+ * The base a reader walks `kind` from in a scope, or `null` — no plugin keeps
+ * the kind here, it offers no walk, or the scope has none.
+ */
+export declare function pluginRecordListWalk(kind: string, firestore: Firestore, scope: PluginRecordListScope): Query<DocumentData> | null;
+/**
+ * One record of `kind`'s document, or `null` — no plugin keeps the kind here,
+ * it offers no document, or the scope has none.
+ */
+export declare function pluginRecordListDoc(kind: string, firestore: Firestore, request: PluginRecordListScope & {
+    id: string;
+}): DocumentReference<DocumentData> | null;
+/**
+ * The query for named records of `kind` — at most
+ * {@link PLUGIN_RECORD_LIST_IDS_MAX} ids, the rest left for the next chunk —
+ * or `null` when no plugin keeps the kind here, its source reads none by
+ * name, or there is no id to ask for.
+ */
+export declare function pluginRecordListByIdsQuery(kind: string, firestore: Firestore, request: PluginRecordListByIdsRequest): Query<DocumentData> | null;
 /**
  * The documents a reader's listener answered for `kind`, as their owner
  * shares them: each row's id is read from `idField` (the listener's), and a
- * row the owner leaves out (deleted, unnamed) is not answered. None where no
- * plugin keeps the kind here.
+ * row the owner leaves out (deleted, unnamed, not this reader's) is not
+ * answered. None where no plugin keeps the kind here. `request` is the one
+ * the query was built from: hand it back, so the owner can apply what the
+ * query could not state.
  */
-export declare function pluginRecordsFromRows(kind: string, rows: ReadonlyArray<Readonly<Record<string, unknown>>> | null | undefined, idField?: string): PluginIndexedRecord[];
+export declare function pluginRecordsFromRows(kind: string, rows: ReadonlyArray<Readonly<Record<string, unknown>>> | null | undefined, idField?: string, request?: PluginRecordListRequest): PluginIndexedRecord[];

package/src/lib/plugin-manager/plugin-record-lists.js

@@ -13,8 +13,13 @@
  * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
  * See the License for the specific language governing permissions and
  * limitations under the License.
- */ import { getRegisteringPluginId } from "../app-utils/registering-plugin.js";
+ */ import { _ as _extends } from "@swc/helpers/_/_extends";
+import { getRegisteringPluginId } from "../app-utils/registering-plugin.js";
 import { definePluginServiceContract, registerPluginService, resolvePluginServices } from "./plugin-services.js";
+/**
+ * The most records one by-name read asks for: Firestore's `in` takes thirty
+ * values, so a reader with more asks in chunks.
+ */ export const PLUGIN_RECORD_LIST_IDS_MAX = 30;
 export const PLUGIN_RECORD_LISTS = definePluginServiceContract('core.record-lists', {
     multiple: true
 });
@@ -57,18 +62,50 @@ export const PLUGIN_RECORD_LISTS = definePluginServiceContract('core.record-list
     var _pluginRecordListSource;
     return (_ref = (_pluginRecordListSource = pluginRecordListSource(kind)) == null ? void 0 : _pluginRecordListSource.source.query(firestore, request)) != null ? _ref : null;
 }
+/**
+ * The base a reader walks `kind` from in a scope, or `null` — no plugin keeps
+ * the kind here, it offers no walk, or the scope has none.
+ */ export function pluginRecordListWalk(kind, firestore, scope) {
+    var _ref;
+    var _pluginRecordListSource_source_walk, _pluginRecordListSource;
+    return (_ref = (_pluginRecordListSource = pluginRecordListSource(kind)) == null ? void 0 : (_pluginRecordListSource_source_walk = _pluginRecordListSource.source.walk) == null ? void 0 : _pluginRecordListSource_source_walk.call(_pluginRecordListSource.source, firestore, scope)) != null ? _ref : null;
+}
+/**
+ * One record of `kind`'s document, or `null` — no plugin keeps the kind here,
+ * it offers no document, or the scope has none.
+ */ export function pluginRecordListDoc(kind, firestore, request) {
+    var _ref;
+    var _pluginRecordListSource_source_doc, _pluginRecordListSource;
+    return (_ref = (_pluginRecordListSource = pluginRecordListSource(kind)) == null ? void 0 : (_pluginRecordListSource_source_doc = _pluginRecordListSource.source.doc) == null ? void 0 : _pluginRecordListSource_source_doc.call(_pluginRecordListSource.source, firestore, request)) != null ? _ref : null;
+}
+/**
+ * The query for named records of `kind` — at most
+ * {@link PLUGIN_RECORD_LIST_IDS_MAX} ids, the rest left for the next chunk —
+ * or `null` when no plugin keeps the kind here, its source reads none by
+ * name, or there is no id to ask for.
+ */ export function pluginRecordListByIdsQuery(kind, firestore, request) {
+    var _ref;
+    var _pluginRecordListSource_source_byIds, _pluginRecordListSource;
+    const ids = request.ids.filter(Boolean).slice(0, PLUGIN_RECORD_LIST_IDS_MAX);
+    if (!ids.length) return null;
+    return (_ref = (_pluginRecordListSource = pluginRecordListSource(kind)) == null ? void 0 : (_pluginRecordListSource_source_byIds = _pluginRecordListSource.source.byIds) == null ? void 0 : _pluginRecordListSource_source_byIds.call(_pluginRecordListSource.source, firestore, _extends({}, request, {
+        ids
+    }))) != null ? _ref : null;
+}
 /**
  * The documents a reader's listener answered for `kind`, as their owner
  * shares them: each row's id is read from `idField` (the listener's), and a
- * row the owner leaves out (deleted, unnamed) is not answered. None where no
- * plugin keeps the kind here.
- */ export function pluginRecordsFromRows(kind, rows, idField = '$id') {
+ * row the owner leaves out (deleted, unnamed, not this reader's) is not
+ * answered. None where no plugin keeps the kind here. `request` is the one
+ * the query was built from: hand it back, so the owner can apply what the
+ * query could not state.
+ */ export function pluginRecordsFromRows(kind, rows, idField = '$id', request) {
     var _pluginRecordListSource;
     const source = (_pluginRecordListSource = pluginRecordListSource(kind)) == null ? void 0 : _pluginRecordListSource.source;
     if (!source) return [];
     return (rows != null ? rows : []).map((row)=>{
         var _row_idField;
-        return source.record(String((_row_idField = row[idField]) != null ? _row_idField : ''), row);
+        return source.record(String((_row_idField = row[idField]) != null ? _row_idField : ''), row, request);
     }).filter((record)=>record !== null);
 }
 

package/src/lib/plugin-manager/plugin-record-lists.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../../../libs/aglyn/src/lib/plugin-manager/plugin-record-lists.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport type { DocumentData, Firestore, Query } from 'firebase/firestore'\nimport { getRegisteringPluginId } from '../app-utils/registering-plugin'\nimport type { PluginIndexedRecord } from './plugin-record-index'\nimport {\n  definePluginServiceContract,\n  registerPluginService,\n  resolvePluginServices,\n} from './plugin-services'\n\n/**\n * A plugin's records, LISTED in the console for another plugin's picker or\n * check (AGL-3080) — the browser's half of `plugin-record-index`.\n *\n * A plugin that offers records it does not own — an automation step picking\n * a dataset, a reference check confirming a workflow still exists, a deal\n * picking a product — used to query the owner's collection from the browser\n * itself: the path, the filter the owner's security rules require, the field\n * a name is in, what a deleted one looks like. Each breaks the day the owner\n * changes one, and none is visible to `check:lib-boundaries`.\n *\n * So the owner publishes a LIST SOURCE for each record kind it keeps: the\n * query the signed-in member's read of a scope is proved by, and how one\n * stored document reads as a record — an id, a name and the facts the owner\n * chooses to share, in the shape its registration documents, the same shape\n * its server index answers. The reader runs the query with its own listener\n * (`pluginRecordListQuery`) and reads the rows back through the owner\n * (`pluginRecordsFromRows`), and never learns where the records are stored.\n *\n * ## Not registered is an answer\n *\n * No source for a kind means no plugin keeps it in this console — the owner is\n * not installed or not loaded. A reader treats that as \"none here\" and says\n * so, rather than reaching for the collection itself.\n *\n * ## One source per kind\n *\n * A second plugin registering a source for a kind another plugin already\n * keeps is refused, naming both, and the incumbent keeps serving.\n */\n\n/** Which records a reader lists. */\nexport interface PluginRecordListRequest {\n  /** The organization the records belong to, where the kind is org-scoped. */\n  orgId?: string | null\n  /**\n   * The site the records are listed for. An org-scoped kind narrows to what\n   * the site may use; `null` lists the organization's own view, which only an\n   * organization-wide reader may hold.\n   */\n  hostId?: string | null\n  /** What a person typed, matched the owner's way; absent lists the scope. */\n  search?: string | null\n  /**\n   * The signed-in member's own scope tokens, where they are not\n   * organization-wide and no site is named: an org-scoped kind narrows to\n   * what they may see, which is the filter the security rules require of\n   * them. Absent for an organization-wide reader; a named site's narrowing\n   * wins over it, and a site's own kind has no use for it.\n   */\n  memberScope?: readonly string[] | null\n  /**\n   * Only the records installed from this listing — the `listingId` of their\n   * install stamp (`app-utils/artifact-provenance.ts`), matched wherever the\n   * owner keeps it. A kind that is never installed answers none.\n   */\n  installedFrom?: string | null\n  /** The most documents the query may answer — a reader asks one past its window to learn it was cut. */\n  limit: number\n}\n\nexport interface PluginRecordListSource {\n  /**\n   * The query the signed-in member's read of the scope is proved by, at most\n   * `limit` documents, or `null` for a scope the kind has none in (a site-only\n   * kind asked at the organization, a search with nothing to match).\n   */\n  query(firestore: Firestore, request: PluginRecordListRequest): Query<DocumentData> | null\n  /** One stored document as the owner shares it, or `null` to leave it out (deleted, unnamed). */\n  record(id: string, data: Readonly<Record<string, unknown>>): PluginIndexedRecord | null\n}\n\nexport const PLUGIN_RECORD_LISTS = definePluginServiceContract<PluginRecordListSource>(\n  'core.record-lists',\n  { multiple: true },\n)\n\n/**\n * Publishes the list source for one record kind. The owner is the loader's\n * marker when a register fn is running, else `options.pluginId`; with neither\n * the registration throws. A kind another plugin lists throws naming both.\n */\nexport function registerPluginRecordListSource(\n  kind: string,\n  source: PluginRecordListSource,\n  options?: { pluginId?: string },\n): void {\n  const key = kind.trim()\n  if (!key) throw new Error('a record list source needs a record kind')\n  const pluginId = (getRegisteringPluginId() ?? options?.pluginId ?? '').trim()\n  if (!pluginId) {\n    throw new Error(`the record list source for \"${key}\" was registered with no owner`)\n  }\n  const incumbent = resolvePluginServices(PLUGIN_RECORD_LISTS).find((entry) => entry.key === key)\n  if (incumbent && incumbent.pluginId !== pluginId) {\n    throw new Error(\n      `record kind \"${key}\" is already listed by \"${incumbent.pluginId}\"; refused \"${pluginId}\"`,\n    )\n  }\n  registerPluginService(PLUGIN_RECORD_LISTS, source, { pluginId, key })\n}\n\n/** The list source for a kind, with the plugin that keeps it, or `null` when none does here. */\nexport function pluginRecordListSource(\n  kind: string,\n): { pluginId: string; source: PluginRecordListSource } | null {\n  const key = kind.trim()\n  const entry = resolvePluginServices(PLUGIN_RECORD_LISTS).find((one) => one.key === key)\n  return entry ? { pluginId: entry.pluginId, source: entry.impl } : null\n}\n\n/**\n * The query a reader listens to for a kind's records — with the console's own\n * collection listener, so it is bounded, retried and reported like every\n * other list — or `null` when no plugin keeps the kind here or the scope has\n * none.\n */\nexport function pluginRecordListQuery(\n  kind: string,\n  firestore: Firestore,\n  request: PluginRecordListRequest,\n): Query<DocumentData> | null {\n  return pluginRecordListSource(kind)?.source.query(firestore, request) ?? null\n}\n\n/**\n * The documents a reader's listener answered for `kind`, as their owner\n * shares them: each row's id is read from `idField` (the listener's), and a\n * row the owner leaves out (deleted, unnamed) is not answered. None where no\n * plugin keeps the kind here.\n */\nexport function pluginRecordsFromRows(\n  kind: string,\n  rows: ReadonlyArray<Readonly<Record<string, unknown>>> | null | undefined,\n  idField = '$id',\n): PluginIndexedRecord[] {\n  const source = pluginRecordListSource(kind)?.source\n  if (!source) return []\n  return (rows ?? [])\n    .map((row) => source.record(String(row[idField] ?? ''), row))\n    .filter((record): record is PluginIndexedRecord => record !== null)\n}\n"],"names":["getRegisteringPluginId","definePluginServiceContract","registerPluginService","resolvePluginServices","PLUGIN_RECORD_LISTS","multiple","registerPluginRecordListSource","kind","source","options","key","trim","Error","pluginId","incumbent","find","entry","pluginRecordListSource","one","impl","pluginRecordListQuery","firestore","request","query","pluginRecordsFromRows","rows","idField","map","row","record","String","filter"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAGD,SAASA,sBAAsB,QAAQ,qCAAiC;AAExE,SACEC,2BAA2B,EAC3BC,qBAAqB,EACrBC,qBAAqB,QAChB,uBAAmB;AA0E1B,OAAO,MAAMC,sBAAsBH,4BACjC,qBACA;IAAEI,UAAU;AAAK,GAClB;AAED;;;;CAIC,GACD,OAAO,SAASC,+BACdC,IAAY,EACZC,MAA8B,EAC9BC,OAA+B;QAIbT,MAAAA;IAFlB,MAAMU,MAAMH,KAAKI,IAAI;IACrB,IAAI,CAACD,KAAK,MAAM,IAAIE,MAAM;IAC1B,MAAMC,WAAW,EAACb,QAAAA,0BAAAA,oCAAAA,0BAA4BS,2BAAAA,QAASI,QAAQ,YAA7Cb,OAAiD,IAAIW,IAAI;IAC3E,IAAI,CAACE,UAAU;QACb,MAAM,IAAID,MAAM,CAAC,4BAA4B,EAAEF,IAAI,8BAA8B,CAAC;IACpF;IACA,MAAMI,YAAYX,sBAAsBC,qBAAqBW,IAAI,CAAC,CAACC,QAAUA,MAAMN,GAAG,KAAKA;IAC3F,IAAII,aAAaA,UAAUD,QAAQ,KAAKA,UAAU;QAChD,MAAM,IAAID,MACR,CAAC,aAAa,EAAEF,IAAI,wBAAwB,EAAEI,UAAUD,QAAQ,CAAC,YAAY,EAAEA,SAAS,CAAC,CAAC;IAE9F;IACAX,sBAAsBE,qBAAqBI,QAAQ;QAAEK;QAAUH;IAAI;AACrE;AAEA,8FAA8F,GAC9F,OAAO,SAASO,uBACdV,IAAY;IAEZ,MAAMG,MAAMH,KAAKI,IAAI;IACrB,MAAMK,QAAQb,sBAAsBC,qBAAqBW,IAAI,CAAC,CAACG,MAAQA,IAAIR,GAAG,KAAKA;IACnF,OAAOM,QAAQ;QAAEH,UAAUG,MAAMH,QAAQ;QAAEL,QAAQQ,MAAMG,IAAI;IAAC,IAAI;AACpE;AAEA;;;;;CAKC,GACD,OAAO,SAASC,sBACdb,IAAY,EACZc,SAAoB,EACpBC,OAAgC;;QAEzBL;IAAP,gBAAOA,0BAAAA,uBAAuBV,0BAAvBU,wBAA8BT,MAAM,CAACe,KAAK,CAACF,WAAWC,2BAAY;AAC3E;AAEA;;;;;CAKC,GACD,OAAO,SAASE,sBACdjB,IAAY,EACZkB,IAAyE,EACzEC,UAAU,KAAK;QAEAT;IAAf,MAAMT,UAASS,0BAAAA,uBAAuBV,0BAAvBU,wBAA8BT,MAAM;IACnD,IAAI,CAACA,QAAQ,OAAO,EAAE;IACtB,OAAO,CAACiB,eAAAA,OAAQ,EAAE,EACfE,GAAG,CAAC,CAACC;YAA6BA;eAArBpB,OAAOqB,MAAM,CAACC,QAAOF,eAAAA,GAAG,CAACF,QAAQ,YAAZE,eAAgB,KAAKA;OACvDG,MAAM,CAAC,CAACF,SAA0CA,WAAW;AAClE"}
+{"version":3,"sources":["../../../../../../libs/aglyn/src/lib/plugin-manager/plugin-record-lists.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport type { DocumentData, DocumentReference, Firestore, Query } from 'firebase/firestore'\nimport { getRegisteringPluginId } from '../app-utils/registering-plugin'\nimport type { PluginIndexedRecord } from './plugin-record-index'\nimport {\n  definePluginServiceContract,\n  registerPluginService,\n  resolvePluginServices,\n} from './plugin-services'\n\n/**\n * A plugin's records, LISTED in the console for another plugin's picker or\n * check (AGL-3080) — the browser's half of `plugin-record-index`.\n *\n * A plugin that offers records it does not own — an automation step picking\n * a dataset, a reference check confirming a workflow still exists, a deal\n * picking a product — used to query the owner's collection from the browser\n * itself: the path, the filter the owner's security rules require, the field\n * a name is in, what a deleted one looks like. Each breaks the day the owner\n * changes one, and none is visible to `check:lib-boundaries`.\n *\n * So the owner publishes a LIST SOURCE for each record kind it keeps: the\n * query the signed-in member's read of a scope is proved by, and how one\n * stored document reads as a record — an id, a name and the facts the owner\n * chooses to share, in the shape its registration documents, the same shape\n * its server index answers. The reader runs the query with its own listener\n * (`pluginRecordListQuery`) and reads the rows back through the owner\n * (`pluginRecordsFromRows`), and never learns where the records are stored.\n *\n * ## Not registered is an answer\n *\n * No source for a kind means no plugin keeps it in this console — the owner is\n * not installed or not loaded. A reader treats that as \"none here\" and says\n * so, rather than reaching for the collection itself.\n *\n * ## One source per kind\n *\n * A second plugin registering a source for a kind another plugin already\n * keeps is refused, naming both, and the incumbent keeps serving.\n */\n\n/** Which records a reader lists. */\nexport interface PluginRecordListRequest {\n  /** The organization the records belong to, where the kind is org-scoped. */\n  orgId?: string | null\n  /**\n   * The site the records are listed for. An org-scoped kind narrows to what\n   * the site may use; `null` lists the organization's own view, which only an\n   * organization-wide reader may hold.\n   */\n  hostId?: string | null\n  /** What a person typed, matched the owner's way; absent lists the scope. */\n  search?: string | null\n  /**\n   * The signed-in member's own scope tokens, where they are not\n   * organization-wide and no site is named: an org-scoped kind narrows to\n   * what they may see, which is the filter the security rules require of\n   * them. Absent for an organization-wide reader; a named site's narrowing\n   * wins over it, and a site's own kind has no use for it.\n   */\n  memberScope?: readonly string[] | null\n  /**\n   * Only the records installed from this listing — the `listingId` of their\n   * install stamp (`app-utils/artifact-provenance.ts`), matched wherever the\n   * owner keeps it. A kind that is never installed answers none.\n   */\n  installedFrom?: string | null\n  /**\n   * The consent group the named site presents as (`app-utils/consent-groups`),\n   * for a kind whose records say different things to different groups — a\n   * person's name as one brand knows them. Absent reads as the site alone.\n   */\n  consentGroupId?: string | null\n  /**\n   * The signed-in member, for a kind some of whose records are one member's\n   * own — a saved view kept private: the owner leaves out what this member\n   * may not list. Absent reads as nobody's, which lists only what is shared.\n   */\n  viewerUid?: string | null\n  /** The most documents the query may answer — a reader asks one past its window to learn it was cut. */\n  limit: number\n}\n\n/** Where a reader walks a kind, or opens one record of it. */\nexport interface PluginRecordListScope {\n  /** The organization, where no site is named. */\n  orgId?: string | null\n  /** The site; named, it wins over the organization. */\n  hostId?: string | null\n}\n\n/**\n * The most records one by-name read asks for: Firestore's `in` takes thirty\n * values, so a reader with more asks in chunks.\n */\nexport const PLUGIN_RECORD_LIST_IDS_MAX = 30\n\n/** Named records of a scope, for a reader that already holds their ids. */\nexport type PluginRecordListByIdsRequest = Omit<PluginRecordListRequest, 'limit' | 'search'> & {\n  /** At most {@link PLUGIN_RECORD_LIST_IDS_MAX}; the owner reads no more. */\n  ids: readonly string[]\n}\n\nexport interface PluginRecordListSource {\n  /**\n   * The query the signed-in member's read of the scope is proved by, at most\n   * `limit` documents, or `null` for a scope the kind has none in (a site-only\n   * kind asked at the organization, a search with nothing to match).\n   */\n  query(firestore: Firestore, request: PluginRecordListRequest): Query<DocumentData> | null\n  /**\n   * The query for NAMED records of the scope — a reader that holds ids from\n   * somewhere else, an attribution naming the submission it credits — or\n   * `null` where none can be read. Optional: a source without it answers no\n   * by-name read, and the reader treats every id as one it could not find.\n   */\n  byIds?(firestore: Firestore, request: PluginRecordListByIdsRequest): Query<DocumentData> | null\n  /**\n   * One stored document as the owner shares it, or `null` to leave it out\n   * (deleted, unnamed, or not the reader's to list). `request` is the one the\n   * query was built from, when the reader hands it back: a rule the query\n   * cannot state — a site's view of an org-wide row, a member's own view —\n   * is applied here.\n   */\n  record(\n    id: string,\n    data: Readonly<Record<string, unknown>>,\n    request?: PluginRecordListRequest,\n  ): PluginIndexedRecord | null\n  /**\n   * The base a reader WALKS the kind from with the console's paged list query\n   * (`useListQuery`), which adds its filters, its order and its pages over the\n   * stored fields the owner documents for the kind — or `null` for a scope\n   * the kind has none in. For a kind whose reader pages a whole list rather\n   * than picking from a window. Where the rules admit a read only narrowed by\n   * a field, the owner's registration says which, and the reader adds it.\n   */\n  walk?(firestore: Firestore, scope: PluginRecordListScope): Query<DocumentData> | null\n  /**\n   * One record's document, for a reader that opens it whole or changes what\n   * the owner documents a reader may change — the security rules hold the\n   * rest — or `null` for a scope the kind has none in.\n   */\n  doc?(\n    firestore: Firestore,\n    request: PluginRecordListScope & { id: string },\n  ): DocumentReference<DocumentData> | null\n}\n\nexport const PLUGIN_RECORD_LISTS = definePluginServiceContract<PluginRecordListSource>(\n  'core.record-lists',\n  { multiple: true },\n)\n\n/**\n * Publishes the list source for one record kind. The owner is the loader's\n * marker when a register fn is running, else `options.pluginId`; with neither\n * the registration throws. A kind another plugin lists throws naming both.\n */\nexport function registerPluginRecordListSource(\n  kind: string,\n  source: PluginRecordListSource,\n  options?: { pluginId?: string },\n): void {\n  const key = kind.trim()\n  if (!key) throw new Error('a record list source needs a record kind')\n  const pluginId = (getRegisteringPluginId() ?? options?.pluginId ?? '').trim()\n  if (!pluginId) {\n    throw new Error(`the record list source for \"${key}\" was registered with no owner`)\n  }\n  const incumbent = resolvePluginServices(PLUGIN_RECORD_LISTS).find((entry) => entry.key === key)\n  if (incumbent && incumbent.pluginId !== pluginId) {\n    throw new Error(\n      `record kind \"${key}\" is already listed by \"${incumbent.pluginId}\"; refused \"${pluginId}\"`,\n    )\n  }\n  registerPluginService(PLUGIN_RECORD_LISTS, source, { pluginId, key })\n}\n\n/** The list source for a kind, with the plugin that keeps it, or `null` when none does here. */\nexport function pluginRecordListSource(\n  kind: string,\n): { pluginId: string; source: PluginRecordListSource } | null {\n  const key = kind.trim()\n  const entry = resolvePluginServices(PLUGIN_RECORD_LISTS).find((one) => one.key === key)\n  return entry ? { pluginId: entry.pluginId, source: entry.impl } : null\n}\n\n/**\n * The query a reader listens to for a kind's records — with the console's own\n * collection listener, so it is bounded, retried and reported like every\n * other list — or `null` when no plugin keeps the kind here or the scope has\n * none.\n */\nexport function pluginRecordListQuery(\n  kind: string,\n  firestore: Firestore,\n  request: PluginRecordListRequest,\n): Query<DocumentData> | null {\n  return pluginRecordListSource(kind)?.source.query(firestore, request) ?? null\n}\n\n/**\n * The base a reader walks `kind` from in a scope, or `null` — no plugin keeps\n * the kind here, it offers no walk, or the scope has none.\n */\nexport function pluginRecordListWalk(\n  kind: string,\n  firestore: Firestore,\n  scope: PluginRecordListScope,\n): Query<DocumentData> | null {\n  return pluginRecordListSource(kind)?.source.walk?.(firestore, scope) ?? null\n}\n\n/**\n * One record of `kind`'s document, or `null` — no plugin keeps the kind here,\n * it offers no document, or the scope has none.\n */\nexport function pluginRecordListDoc(\n  kind: string,\n  firestore: Firestore,\n  request: PluginRecordListScope & { id: string },\n): DocumentReference<DocumentData> | null {\n  return pluginRecordListSource(kind)?.source.doc?.(firestore, request) ?? null\n}\n\n/**\n * The query for named records of `kind` — at most\n * {@link PLUGIN_RECORD_LIST_IDS_MAX} ids, the rest left for the next chunk —\n * or `null` when no plugin keeps the kind here, its source reads none by\n * name, or there is no id to ask for.\n */\nexport function pluginRecordListByIdsQuery(\n  kind: string,\n  firestore: Firestore,\n  request: PluginRecordListByIdsRequest,\n): Query<DocumentData> | null {\n  const ids = request.ids.filter(Boolean).slice(0, PLUGIN_RECORD_LIST_IDS_MAX)\n  if (!ids.length) return null\n  return pluginRecordListSource(kind)?.source.byIds?.(firestore, { ...request, ids }) ?? null\n}\n\n/**\n * The documents a reader's listener answered for `kind`, as their owner\n * shares them: each row's id is read from `idField` (the listener's), and a\n * row the owner leaves out (deleted, unnamed, not this reader's) is not\n * answered. None where no plugin keeps the kind here. `request` is the one\n * the query was built from: hand it back, so the owner can apply what the\n * query could not state.\n */\nexport function pluginRecordsFromRows(\n  kind: string,\n  rows: ReadonlyArray<Readonly<Record<string, unknown>>> | null | undefined,\n  idField = '$id',\n  request?: PluginRecordListRequest,\n): PluginIndexedRecord[] {\n  const source = pluginRecordListSource(kind)?.source\n  if (!source) return []\n  return (rows ?? [])\n    .map((row) => source.record(String(row[idField] ?? ''), row, request))\n    .filter((record): record is PluginIndexedRecord => record !== null)\n}\n"],"names":["getRegisteringPluginId","definePluginServiceContract","registerPluginService","resolvePluginServices","PLUGIN_RECORD_LIST_IDS_MAX","PLUGIN_RECORD_LISTS","multiple","registerPluginRecordListSource","kind","source","options","key","trim","Error","pluginId","incumbent","find","entry","pluginRecordListSource","one","impl","pluginRecordListQuery","firestore","request","query","pluginRecordListWalk","scope","walk","pluginRecordListDoc","doc","pluginRecordListByIdsQuery","ids","filter","Boolean","slice","length","byIds","pluginRecordsFromRows","rows","idField","map","row","record","String"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC;AAGD,SAASA,sBAAsB,QAAQ,qCAAiC;AAExE,SACEC,2BAA2B,EAC3BC,qBAAqB,EACrBC,qBAAqB,QAChB,uBAAmB;AAmF1B;;;CAGC,GACD,OAAO,MAAMC,6BAA6B,GAAE;AAsD5C,OAAO,MAAMC,sBAAsBJ,4BACjC,qBACA;IAAEK,UAAU;AAAK,GAClB;AAED;;;;CAIC,GACD,OAAO,SAASC,+BACdC,IAAY,EACZC,MAA8B,EAC9BC,OAA+B;QAIbV,MAAAA;IAFlB,MAAMW,MAAMH,KAAKI,IAAI;IACrB,IAAI,CAACD,KAAK,MAAM,IAAIE,MAAM;IAC1B,MAAMC,WAAW,EAACd,QAAAA,0BAAAA,oCAAAA,0BAA4BU,2BAAAA,QAASI,QAAQ,YAA7Cd,OAAiD,IAAIY,IAAI;IAC3E,IAAI,CAACE,UAAU;QACb,MAAM,IAAID,MAAM,CAAC,4BAA4B,EAAEF,IAAI,8BAA8B,CAAC;IACpF;IACA,MAAMI,YAAYZ,sBAAsBE,qBAAqBW,IAAI,CAAC,CAACC,QAAUA,MAAMN,GAAG,KAAKA;IAC3F,IAAII,aAAaA,UAAUD,QAAQ,KAAKA,UAAU;QAChD,MAAM,IAAID,MACR,CAAC,aAAa,EAAEF,IAAI,wBAAwB,EAAEI,UAAUD,QAAQ,CAAC,YAAY,EAAEA,SAAS,CAAC,CAAC;IAE9F;IACAZ,sBAAsBG,qBAAqBI,QAAQ;QAAEK;QAAUH;IAAI;AACrE;AAEA,8FAA8F,GAC9F,OAAO,SAASO,uBACdV,IAAY;IAEZ,MAAMG,MAAMH,KAAKI,IAAI;IACrB,MAAMK,QAAQd,sBAAsBE,qBAAqBW,IAAI,CAAC,CAACG,MAAQA,IAAIR,GAAG,KAAKA;IACnF,OAAOM,QAAQ;QAAEH,UAAUG,MAAMH,QAAQ;QAAEL,QAAQQ,MAAMG,IAAI;IAAC,IAAI;AACpE;AAEA;;;;;CAKC,GACD,OAAO,SAASC,sBACdb,IAAY,EACZc,SAAoB,EACpBC,OAAgC;;QAEzBL;IAAP,gBAAOA,0BAAAA,uBAAuBV,0BAAvBU,wBAA8BT,MAAM,CAACe,KAAK,CAACF,WAAWC,2BAAY;AAC3E;AAEA;;;CAGC,GACD,OAAO,SAASE,qBACdjB,IAAY,EACZc,SAAoB,EACpBI,KAA4B;;QAErBR,qCAAAA;IAAP,gBAAOA,0BAAAA,uBAAuBV,2BAAvBU,sCAAAA,wBAA8BT,MAAM,CAACkB,IAAI,qBAAzCT,yCAAAA,wBAA8BT,MAAM,EAAQa,WAAWI,yBAAU;AAC1E;AAEA;;;CAGC,GACD,OAAO,SAASE,oBACdpB,IAAY,EACZc,SAAoB,EACpBC,OAA+C;;QAExCL,oCAAAA;IAAP,gBAAOA,0BAAAA,uBAAuBV,2BAAvBU,qCAAAA,wBAA8BT,MAAM,CAACoB,GAAG,qBAAxCX,wCAAAA,wBAA8BT,MAAM,EAAOa,WAAWC,2BAAY;AAC3E;AAEA;;;;;CAKC,GACD,OAAO,SAASO,2BACdtB,IAAY,EACZc,SAAoB,EACpBC,OAAqC;;QAI9BL,sCAAAA;IAFP,MAAMa,MAAMR,QAAQQ,GAAG,CAACC,MAAM,CAACC,SAASC,KAAK,CAAC,GAAG9B;IACjD,IAAI,CAAC2B,IAAII,MAAM,EAAE,OAAO;IACxB,gBAAOjB,0BAAAA,uBAAuBV,2BAAvBU,uCAAAA,wBAA8BT,MAAM,CAAC2B,KAAK,qBAA1ClB,0CAAAA,wBAA8BT,MAAM,EAASa,WAAW,aAAKC;QAASQ;0BAAU;AACzF;AAEA;;;;;;;CAOC,GACD,OAAO,SAASM,sBACd7B,IAAY,EACZ8B,IAAyE,EACzEC,UAAU,KAAK,EACfhB,OAAiC;QAElBL;IAAf,MAAMT,UAASS,0BAAAA,uBAAuBV,0BAAvBU,wBAA8BT,MAAM;IACnD,IAAI,CAACA,QAAQ,OAAO,EAAE;IACtB,OAAO,CAAC6B,eAAAA,OAAQ,EAAE,EACfE,GAAG,CAAC,CAACC;YAA6BA;eAArBhC,OAAOiC,MAAM,CAACC,QAAOF,eAAAA,GAAG,CAACF,QAAQ,YAAZE,eAAgB,KAAKA,KAAKlB;OAC5DS,MAAM,CAAC,CAACU,SAA0CA,WAAW;AAClE"}

package/src/lib/plugin-manager/plugin-record-origin.d.ts

@@ -0,0 +1,79 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+/**
+ * WHERE A PERSON FIRST CAME FROM, told to the record system (AGL-3519).
+ *
+ * A door that meets somebody — the platform's own account sign-up, a sales
+ * sequence enrolling them — knows HOW it met them, and the record system
+ * keeps the field a sales team reads that answer from. The door must not
+ * write that plugin's records itself, nor import it; so the record system
+ * registers a WRITER here, and the door names the person and its own word
+ * for how it met them.
+ *
+ * ## Original source: never overwritten
+ *
+ * The writer records the origin only on a record that holds none — the
+ * first door to meet a person names where they came from, and nothing later
+ * moves it. What the word becomes, and whether the workspace still offers
+ * it, is the writer's to decide; a word it does not know records nothing.
+ *
+ * A single-implementation contract: a workspace keeps one record system.
+ */
+/**
+ * A first-party door's word for how it met a person. Open, so a plugin's own
+ * door can name itself; the record system ignores a word it has no value for.
+ */
+export type PluginRecordOrigin = 'form' | 'booking' | 'newsletter' | 'member' | 'order' | 'account' | 'sequence' | 'emailCampaign' | (string & {});
+export interface PluginRecordOriginRequest {
+    /** The organization whose records are stamped, when the caller knows it. */
+    orgId?: string;
+    /** The site the door met the person on: whose records, and whose view of them. */
+    hostId: string;
+    email: string;
+    origin: PluginRecordOrigin;
+    /**
+     * Only a record this door just started — a person met for the first time.
+     * A door that touches people already on file (a capture on a known
+     * address) asks for this; one acting on a person deliberately (an
+     * enrollment) does not.
+     */
+    firstTouchOnly?: boolean;
+}
+export interface PluginRecordOriginReport {
+    /** Records that took the origin. */
+    records: number;
+}
+export interface PluginRecordOriginWriter {
+    /** Never throws: the door has already done what it records. */
+    stamp(request: PluginRecordOriginRequest): Promise<PluginRecordOriginReport>;
+}
+export declare const PLUGIN_RECORD_ORIGIN: import("./plugin-services").PluginServiceContract<PluginRecordOriginWriter>;
+/**
+ * Registers the workspace's record-origin writer. The owner is the loader's
+ * marker when a register fn is running, else `options.pluginId`; with
+ * neither the registration throws, and a second plugin's writer is refused
+ * naming both — the incumbent keeps serving.
+ */
+export declare function registerPluginRecordOriginWriter(writer: PluginRecordOriginWriter, options?: {
+    pluginId?: string;
+}): void;
+/**
+ * Records where a person came from through whichever plugin keeps the
+ * records, or answers `null` when none does. Never throws: every caller has
+ * already met the person, and the origin is bookkeeping beside it.
+ */
+export declare function stampRecordOrigin(request: PluginRecordOriginRequest): Promise<PluginRecordOriginReport | null>;

package/src/lib/plugin-manager/plugin-record-origin.js

@@ -0,0 +1,46 @@
+import { _ as _extends } from "@swc/helpers/_/_extends";
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ import { definePluginServiceContract, registerPluginService, resolvePluginServices } from "./plugin-services.js";
+export const PLUGIN_RECORD_ORIGIN = definePluginServiceContract('core.record-origin', {
+    multiple: false
+});
+/**
+ * Registers the workspace's record-origin writer. The owner is the loader's
+ * marker when a register fn is running, else `options.pluginId`; with
+ * neither the registration throws, and a second plugin's writer is refused
+ * naming both — the incumbent keeps serving.
+ */ export function registerPluginRecordOriginWriter(writer, options) {
+    registerPluginService(PLUGIN_RECORD_ORIGIN, writer, _extends({}, (options == null ? void 0 : options.pluginId) ? {
+        pluginId: options.pluginId
+    } : {}));
+}
+/**
+ * Records where a person came from through whichever plugin keeps the
+ * records, or answers `null` when none does. Never throws: every caller has
+ * already met the person, and the origin is bookkeeping beside it.
+ */ export async function stampRecordOrigin(request) {
+    const entry = resolvePluginServices(PLUGIN_RECORD_ORIGIN)[0];
+    if (!entry) return null;
+    try {
+        return await entry.impl.stamp(request);
+    } catch (error) {
+        console.error('[record-origin] the record system could not record where a person came from', error);
+        return null;
+    }
+}
+
+//# sourceMappingURL=plugin-record-origin.js.map

package/src/lib/plugin-manager/plugin-record-origin.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../libs/aglyn/src/lib/plugin-manager/plugin-record-origin.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport {\n  definePluginServiceContract,\n  registerPluginService,\n  resolvePluginServices,\n} from './plugin-services'\n\n/**\n * WHERE A PERSON FIRST CAME FROM, told to the record system (AGL-3519).\n *\n * A door that meets somebody — the platform's own account sign-up, a sales\n * sequence enrolling them — knows HOW it met them, and the record system\n * keeps the field a sales team reads that answer from. The door must not\n * write that plugin's records itself, nor import it; so the record system\n * registers a WRITER here, and the door names the person and its own word\n * for how it met them.\n *\n * ## Original source: never overwritten\n *\n * The writer records the origin only on a record that holds none — the\n * first door to meet a person names where they came from, and nothing later\n * moves it. What the word becomes, and whether the workspace still offers\n * it, is the writer's to decide; a word it does not know records nothing.\n *\n * A single-implementation contract: a workspace keeps one record system.\n */\n\n/**\n * A first-party door's word for how it met a person. Open, so a plugin's own\n * door can name itself; the record system ignores a word it has no value for.\n */\nexport type PluginRecordOrigin =\n  | 'form'\n  | 'booking'\n  | 'newsletter'\n  | 'member'\n  | 'order'\n  | 'account'\n  | 'sequence'\n  | 'emailCampaign'\n  | (string & {})\n\nexport interface PluginRecordOriginRequest {\n  /** The organization whose records are stamped, when the caller knows it. */\n  orgId?: string\n  /** The site the door met the person on: whose records, and whose view of them. */\n  hostId: string\n  email: string\n  origin: PluginRecordOrigin\n  /**\n   * Only a record this door just started — a person met for the first time.\n   * A door that touches people already on file (a capture on a known\n   * address) asks for this; one acting on a person deliberately (an\n   * enrollment) does not.\n   */\n  firstTouchOnly?: boolean\n}\n\nexport interface PluginRecordOriginReport {\n  /** Records that took the origin. */\n  records: number\n}\n\nexport interface PluginRecordOriginWriter {\n  /** Never throws: the door has already done what it records. */\n  stamp(request: PluginRecordOriginRequest): Promise<PluginRecordOriginReport>\n}\n\nexport const PLUGIN_RECORD_ORIGIN = definePluginServiceContract<PluginRecordOriginWriter>(\n  'core.record-origin',\n  { multiple: false },\n)\n\n/**\n * Registers the workspace's record-origin writer. The owner is the loader's\n * marker when a register fn is running, else `options.pluginId`; with\n * neither the registration throws, and a second plugin's writer is refused\n * naming both — the incumbent keeps serving.\n */\nexport function registerPluginRecordOriginWriter(\n  writer: PluginRecordOriginWriter,\n  options?: { pluginId?: string },\n): void {\n  registerPluginService(PLUGIN_RECORD_ORIGIN, writer, {\n    ...(options?.pluginId ? { pluginId: options.pluginId } : {}),\n  })\n}\n\n/**\n * Records where a person came from through whichever plugin keeps the\n * records, or answers `null` when none does. Never throws: every caller has\n * already met the person, and the origin is bookkeeping beside it.\n */\nexport async function stampRecordOrigin(\n  request: PluginRecordOriginRequest,\n): Promise<PluginRecordOriginReport | null> {\n  const entry = resolvePluginServices(PLUGIN_RECORD_ORIGIN)[0]\n  if (!entry) return null\n  try {\n    return await entry.impl.stamp(request)\n  } catch (error) {\n    console.error('[record-origin] the record system could not record where a person came from', error)\n    return null\n  }\n}\n"],"names":["definePluginServiceContract","registerPluginService","resolvePluginServices","PLUGIN_RECORD_ORIGIN","multiple","registerPluginRecordOriginWriter","writer","options","pluginId","stampRecordOrigin","request","entry","impl","stamp","error","console"],"mappings":";AAAA;;;;;;;;;;;;;;;CAeC,GAED,SACEA,2BAA2B,EAC3BC,qBAAqB,EACrBC,qBAAqB,QAChB,uBAAmB;AA+D1B,OAAO,MAAMC,uBAAuBH,4BAClC,sBACA;IAAEI,UAAU;AAAM,GACnB;AAED;;;;;CAKC,GACD,OAAO,SAASC,iCACdC,MAAgC,EAChCC,OAA+B;IAE/BN,sBAAsBE,sBAAsBG,QAAQ,aAC9CC,CAAAA,2BAAAA,QAASC,QAAQ,IAAG;QAAEA,UAAUD,QAAQC,QAAQ;IAAC,IAAI,CAAC;AAE9D;AAEA;;;;CAIC,GACD,OAAO,eAAeC,kBACpBC,OAAkC;IAElC,MAAMC,QAAQT,sBAAsBC,qBAAqB,CAAC,EAAE;IAC5D,IAAI,CAACQ,OAAO,OAAO;IACnB,IAAI;QACF,OAAO,MAAMA,MAAMC,IAAI,CAACC,KAAK,CAACH;IAChC,EAAE,OAAOI,OAAO;QACdC,QAAQD,KAAK,CAAC,+EAA+EA;QAC7F,OAAO;IACT;AACF"}

package/src/lib/plugin-manager/plugin-record-pages.d.ts

@@ -0,0 +1,37 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+export interface PluginRecordPageDeclaration {
+    /** The record kind, as `plugin-record-routes` and `plugin-record-index` key it. */
+    kind: string;
+    /**
+     * The site console path the kind is read on, under one of the declaring
+     * plugin's own console routes: `/inbox`.
+     */
+    path: string;
+}
+/** A declaration with the plugin whose page it is. */
+export type ResolvedPluginRecordPage = PluginRecordPageDeclaration & {
+    pluginId: string;
+};
+/** Where a kind is read, or `null` when no plugin in this build shows it. */
+export declare function pluginRecordPage(kind: string): ResolvedPluginRecordPage | null;
+/**
+ * A notification's link to the page a site's records of `kind` are read on —
+ * `/{hostId}{path}`, which the notification layer rewrites onto the site's
+ * console address — or `null` when no plugin shows the kind.
+ */
+export declare function pluginRecordPageLink(kind: string, hostId: string): string | null;

package/src/lib/plugin-manager/plugin-record-pages.js

@@ -0,0 +1,52 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ /**
+ * WHERE A PERSON READS A RECORD KIND, FOR A SERVER THAT TELLS THEM ABOUT ONE
+ * (AGL-3080).
+ *
+ * The console's record routes (`plugin-record-routes`) answer where a record
+ * is read for a surface rendered in the console: the plugin that shows the
+ * kind registers its addresses from its console registrar, and a link asks for
+ * the kind. A SERVER has no console registrar. The forms plugin's door tells a
+ * site's managers about a new submission, or that submissions are paused, and
+ * the notification's link is where they read submissions — a page the Inbox
+ * draws, which the door may not spell.
+ *
+ * So the plugin whose console page shows a kind DECLARES it in
+ * `plugins.config.json` (`recordPages`: the kind, and the site console path
+ * under one of its own routes), the manifest generator compiles it, and a
+ * server asks here for the kind. Compiled rather than registered for the same
+ * reason the host collections are: the tenant process that sends the
+ * notification never loads the plugin that draws the page.
+ *
+ * No declaration is an answer: no plugin shows the kind in this build, and a
+ * notification goes without a link rather than to a page that is not there.
+ */ import { PLUGIN_RECORD_PAGES_DECLARED } from "./first-party-plugins.generated.js";
+/** Where a kind is read, or `null` when no plugin in this build shows it. */ export function pluginRecordPage(kind) {
+    var _PLUGIN_RECORD_PAGES_DECLARED_find;
+    const key = kind.trim();
+    return (_PLUGIN_RECORD_PAGES_DECLARED_find = PLUGIN_RECORD_PAGES_DECLARED.find((one)=>one.kind === key)) != null ? _PLUGIN_RECORD_PAGES_DECLARED_find : null;
+}
+/**
+ * A notification's link to the page a site's records of `kind` are read on —
+ * `/{hostId}{path}`, which the notification layer rewrites onto the site's
+ * console address — or `null` when no plugin shows the kind.
+ */ export function pluginRecordPageLink(kind, hostId) {
+    const page = pluginRecordPage(kind);
+    return page && hostId ? `/${hostId}${page.path}` : null;
+}
+
+//# sourceMappingURL=plugin-record-pages.js.map

package/src/lib/plugin-manager/plugin-record-pages.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../libs/aglyn/src/lib/plugin-manager/plugin-record-pages.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n/**\n * WHERE A PERSON READS A RECORD KIND, FOR A SERVER THAT TELLS THEM ABOUT ONE\n * (AGL-3080).\n *\n * The console's record routes (`plugin-record-routes`) answer where a record\n * is read for a surface rendered in the console: the plugin that shows the\n * kind registers its addresses from its console registrar, and a link asks for\n * the kind. A SERVER has no console registrar. The forms plugin's door tells a\n * site's managers about a new submission, or that submissions are paused, and\n * the notification's link is where they read submissions — a page the Inbox\n * draws, which the door may not spell.\n *\n * So the plugin whose console page shows a kind DECLARES it in\n * `plugins.config.json` (`recordPages`: the kind, and the site console path\n * under one of its own routes), the manifest generator compiles it, and a\n * server asks here for the kind. Compiled rather than registered for the same\n * reason the host collections are: the tenant process that sends the\n * notification never loads the plugin that draws the page.\n *\n * No declaration is an answer: no plugin shows the kind in this build, and a\n * notification goes without a link rather than to a page that is not there.\n */\n\nimport { PLUGIN_RECORD_PAGES_DECLARED } from './first-party-plugins.generated'\n\nexport interface PluginRecordPageDeclaration {\n  /** The record kind, as `plugin-record-routes` and `plugin-record-index` key it. */\n  kind: string\n  /**\n   * The site console path the kind is read on, under one of the declaring\n   * plugin's own console routes: `/inbox`.\n   */\n  path: string\n}\n\n/** A declaration with the plugin whose page it is. */\nexport type ResolvedPluginRecordPage = PluginRecordPageDeclaration & { pluginId: string }\n\n/** Where a kind is read, or `null` when no plugin in this build shows it. */\nexport function pluginRecordPage(kind: string): ResolvedPluginRecordPage | null {\n  const key = kind.trim()\n  return PLUGIN_RECORD_PAGES_DECLARED.find((one) => one.kind === key) ?? null\n}\n\n/**\n * A notification's link to the page a site's records of `kind` are read on —\n * `/{hostId}{path}`, which the notification layer rewrites onto the site's\n * console address — or `null` when no plugin shows the kind.\n */\nexport function pluginRecordPageLink(kind: string, hostId: string): string | null {\n  const page = pluginRecordPage(kind)\n  return page && hostId ? `/${hostId}${page.path}` : null\n}\n"],"names":["PLUGIN_RECORD_PAGES_DECLARED","pluginRecordPage","kind","key","trim","find","one","pluginRecordPageLink","hostId","page","path"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED;;;;;;;;;;;;;;;;;;;;;CAqBC,GAED,SAASA,4BAA4B,QAAQ,qCAAiC;AAe9E,2EAA2E,GAC3E,OAAO,SAASC,iBAAiBC,IAAY;QAEpCF;IADP,MAAMG,MAAMD,KAAKE,IAAI;IACrB,QAAOJ,qCAAAA,6BAA6BK,IAAI,CAAC,CAACC,MAAQA,IAAIJ,IAAI,KAAKC,gBAAxDH,qCAAgE;AACzE;AAEA;;;;CAIC,GACD,OAAO,SAASO,qBAAqBL,IAAY,EAAEM,MAAc;IAC/D,MAAMC,OAAOR,iBAAiBC;IAC9B,OAAOO,QAAQD,SAAS,CAAC,CAAC,EAAEA,SAASC,KAAKC,IAAI,EAAE,GAAG;AACrD"}