@aglyn/aglyn 1.0.0-beta.234 → 1.0.0-beta.236

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aglyn/aglyn",
-  "version": "1.0.0-beta.234",
+  "version": "1.0.0-beta.236",
   "license": "Apache-2.0",
   "homepage": "https://aglyn.com",
   "repository": {
@@ -37,16 +37,16 @@
     "./package.json": "./package.json"
   },
   "dependencies": {
-    "@aglyn/shared-data-enums": "1.0.0-beta.234",
-    "@aglyn/shared-data-mdi": "1.0.0-beta.234",
-    "@aglyn/shared-data-types": "1.0.0-beta.234",
-    "@aglyn/shared-util-email": "1.0.0-beta.234",
-    "@aglyn/shared-util-first-touch": "1.0.0-beta.234",
-    "@aglyn/shared-util-http": "1.0.0-beta.234",
-    "@aglyn/shared-util-logger": "1.0.0-beta.234",
-    "@aglyn/shared-util-timestamp": "1.0.0-beta.234",
-    "@aglyn/shared-util-tools": "1.0.0-beta.234",
-    "@aglyn/shared-util-vendor": "1.0.0-beta.234",
+    "@aglyn/shared-data-enums": "1.0.0-beta.236",
+    "@aglyn/shared-data-mdi": "1.0.0-beta.236",
+    "@aglyn/shared-data-types": "1.0.0-beta.236",
+    "@aglyn/shared-util-email": "1.0.0-beta.236",
+    "@aglyn/shared-util-first-touch": "1.0.0-beta.236",
+    "@aglyn/shared-util-http": "1.0.0-beta.236",
+    "@aglyn/shared-util-logger": "1.0.0-beta.236",
+    "@aglyn/shared-util-timestamp": "1.0.0-beta.236",
+    "@aglyn/shared-util-tools": "1.0.0-beta.236",
+    "@aglyn/shared-util-vendor": "1.0.0-beta.236",
     "@data-driven-forms/react-form-renderer": "^4.2.0",
     "@msgpack/msgpack": "^3.1.3",
     "@types/unist": "^3.0.3",

package/src/lib/app-utils/activity-labels.d.ts

@@ -0,0 +1,117 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+/**
+ * ONE LABEL MAP FOR EVERY ACTIVITY AND AUDIT LIST (AGL-3660).
+ *
+ * Two logs feed the console's lists. The activity logs
+ * (`orgs/{id}/activity`, `hosts/{id}/activity`) store a prose sentence or a
+ * plugin's code plus a `{ type, id, name }` target. The staff audit trail
+ * (`adminAudit`) stores a dotted code (`ai.job.output`, `org.override`) and
+ * a Firestore PATH as its target (`orgs/abc/aiJobs/xyz`). The staff tables
+ * printed both raw, so a reader saw `ai.job.output` next to
+ * `orgs/9fK…/aiJobs/Qe2…` and had to know the schema to read their own
+ * audit trail.
+ *
+ * Every list now draws its words from here: an action as a sentence
+ * (`Created page Home with Aglyn AI`), a target as the site and the item,
+ * and — for an audit row — why, the credits it spent and what came of it.
+ * The raw code and path are kept on the description, for a tooltip and for
+ * the staff details dialog, and never as the visible text.
+ */
+import { type ActivityEntryLike, type ActivityTargetLike } from './activity-presenter';
+/** What a list row and the details dialog show for one entry. */
+export interface ActivityDescription {
+    /** The act, as a sentence. Never a code. */
+    action: string;
+    /** What it was done to, in words: the site and the item. Never a path. */
+    target: string;
+    /** Why it was done, when the writer recorded a reason. */
+    why: string | null;
+    /** AI credits it spent, when it spent any. */
+    credits: number | null;
+    /** What came of it, when the writer recorded an outcome. */
+    result: string | null;
+    /** The stored code, when the action was one — for a tooltip and staff. */
+    code: string | null;
+    /** The stored target path (audit) or `type/id` (activity) — staff only. */
+    path: string | null;
+    /** The organization the entry concerns, when it names one. */
+    orgId: string | null;
+    /** The site the entry concerns, when it names one. */
+    hostId: string | null;
+    /** The plugin job behind the entry (an AI job), when there is one. */
+    jobId: string | null;
+    /** The account the entry concerns, when it names one. */
+    uid: string | null;
+}
+/** Names a route resolved for the ids an entry carries. */
+export interface ActivityNames {
+    /** Organization name by org id. */
+    orgs?: Readonly<Record<string, string | null | undefined>>;
+    /** Site name by host id. */
+    hosts?: Readonly<Record<string, string | null | undefined>>;
+    /** An account's address (or name) by uid. */
+    users?: Readonly<Record<string, string | null | undefined>>;
+}
+/** `screen` → `page`, `Home` → `page Home`: the noun a sentence uses. */
+export declare function activityTargetPhrase(target: ActivityTargetLike | null | undefined): string;
+/**
+ * An activity row's action as a sentence about its target. A plugin code
+ * with a declared sentence fills it (`Created {target} with Aglyn AI`); any
+ * other code reads as its label, and a prose action as itself.
+ */
+export declare function activityActionSentence(action: string | undefined, target?: ActivityTargetLike | null): string;
+/**
+ * A one-column feed's line: the sentence when the code declares one, else
+ * the action with its target's name (`Saved the screen — Home`).
+ */
+export declare function activityRowText(entry: ActivityEntryLike): string;
+/** Whether a stored action is a dotted code rather than a sentence. */
+export declare function isActivityCode(action: unknown): action is string;
+export declare const STAFF_AUDIT_ACTION_LABELS: Readonly<Record<string, string>>;
+/** A code nobody named, as words: `billing.invoice.paid` → `Billing: invoice paid`. */
+export declare function humanizeActivityCode(code: string): string;
+/** What a staff audit code reads as, everywhere it is shown. */
+export declare function staffAuditActionLabel(action: string | null | undefined): string;
+/** The stored audit row, read defensively. */
+export interface StaffAuditEntryLike {
+    action?: string | null;
+    target?: string | null;
+    subjectUid?: string | null;
+    reason?: string | null;
+    note?: string | null;
+    /** The state the act left; AI rows carry `{ label, hostId, credits }`. */
+    after?: Record<string, unknown> | null;
+}
+/** What an audit act did, in words, and the words it was about. */
+export declare function describeStaffAudit(entry: StaffAuditEntryLike, names?: ActivityNames): ActivityDescription;
+/** A stored activity row, read defensively, with where it was read from. */
+export interface ActivityRowLike {
+    action?: string | null;
+    target?: (ActivityTargetLike & {
+        jobId?: string;
+        credits?: number;
+    }) | null;
+    /** `host` or `org`: which log the row came from. */
+    scopeType?: string;
+    scopeId?: string;
+}
+/**
+ * An activity row as the lists show it. Where is the site when the row came
+ * from a site's log, else the organization.
+ */
+export declare function describeActivity(entry: ActivityRowLike, names?: ActivityNames): ActivityDescription;

package/src/lib/app-utils/activity-labels.js

@@ -0,0 +1,343 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ /**
+ * ONE LABEL MAP FOR EVERY ACTIVITY AND AUDIT LIST (AGL-3660).
+ *
+ * Two logs feed the console's lists. The activity logs
+ * (`orgs/{id}/activity`, `hosts/{id}/activity`) store a prose sentence or a
+ * plugin's code plus a `{ type, id, name }` target. The staff audit trail
+ * (`adminAudit`) stores a dotted code (`ai.job.output`, `org.override`) and
+ * a Firestore PATH as its target (`orgs/abc/aiJobs/xyz`). The staff tables
+ * printed both raw, so a reader saw `ai.job.output` next to
+ * `orgs/9fK…/aiJobs/Qe2…` and had to know the schema to read their own
+ * audit trail.
+ *
+ * Every list now draws its words from here: an action as a sentence
+ * (`Created page Home with Aglyn AI`), a target as the site and the item,
+ * and — for an audit row — why, the credits it spent and what came of it.
+ * The raw code and path are kept on the description, for a tooltip and for
+ * the staff details dialog, and never as the visible text.
+ */ import { activityActionLabel, activityPrimaryText, activityTypeLabel } from "./activity-presenter.js";
+import { orgOverrideReasonSummary } from "./org-override-reason.js";
+import { isPluginJobTargetType, pluginActivityActionSentence, pluginActivityTargetLabel, pluginStaffAuditActionLabel, pluginStaffAuditCollection, pluginStaffAuditDescribe } from "../plugin-manager/plugin-activity-actions.js";
+/** `screen` → `page`, `Home` → `page Home`: the noun a sentence uses. */ export function activityTargetPhrase(target) {
+    var _target_name;
+    const noun = activityTypeLabel(target == null ? void 0 : target.type);
+    const lower = noun === 'Item' ? 'item' : noun.charAt(0).toLowerCase() + noun.slice(1);
+    const name = target == null ? void 0 : (_target_name = target.name) == null ? void 0 : _target_name.trim();
+    return name ? `${lower} ${name}` : lower;
+}
+/**
+ * An activity row's action as a sentence about its target. A plugin code
+ * with a declared sentence fills it (`Created {target} with Aglyn AI`); any
+ * other code reads as its label, and a prose action as itself.
+ */ export function activityActionSentence(action, target) {
+    var _ref;
+    const stored = (_ref = action == null ? void 0 : action.trim()) != null ? _ref : '';
+    const sentence = pluginActivityActionSentence(stored);
+    if (sentence) return sentence.replace('{target}', activityTargetPhrase(target));
+    return activityActionLabel(stored);
+}
+/**
+ * A one-column feed's line: the sentence when the code declares one, else
+ * the action with its target's name (`Saved the screen — Home`).
+ */ export function activityRowText(entry) {
+    var _ref;
+    var _entry_action;
+    const stored = (_ref = (_entry_action = entry.action) == null ? void 0 : _entry_action.trim()) != null ? _ref : '';
+    return pluginActivityActionSentence(stored) ? activityActionSentence(stored, entry.target) : activityPrimaryText(entry);
+}
+/** Whether a stored action is a dotted code rather than a sentence. */ export function isActivityCode(action) {
+    return typeof action === 'string' && /^[a-z][\w-]*(\.[\w-]+)+$/i.test(action.trim());
+}
+/*==========================================
+ * THE STAFF AUDIT TRAIL'S WORDS.
+ *
+ * Every code core's doors write. A plugin's doors declare their own through
+ * `staffAuditLabels` (the AI plugin's `ai.job.*`), and a code neither knows
+ * is humanized from its segments rather than shown raw, so a new writer
+ * reads as `Billing: invoice paid` until somebody names it properly.
+ *==========================================*/ export const STAFF_AUDIT_ACTION_LABELS = {
+    'account.closed.self': 'Closed their own account',
+    'account.exported.self': 'Exported their own account data',
+    'ai-usage.exported': 'Exported AI usage',
+    'billing.assistOverage.setCap': 'Set the AI overage ceiling',
+    'billing.assistOverage.setHardCap': 'Set the AI stop-at-band switch',
+    'billing.autoLocked': 'Locked automatically for billing',
+    'billing.collaboratorAllocation': 'Changed collaborator seats',
+    'billing.dispute.opened': 'Payment dispute opened',
+    'billing.disputeClosed': 'Payment dispute closed',
+    'billing.disputeOpened': 'Payment dispute opened',
+    'billing.disputeUnattributed': 'Unattributed payment dispute',
+    'billing.invoice': 'Invoice event',
+    'billing.invoice.closed': 'Invoice closed',
+    'billing.invoice.failed': 'Invoice payment failed',
+    'billing.invoice.paid': 'Invoice paid',
+    'billing.manage': 'Opened billing management',
+    'billing.orphanedSubscription': 'Found a subscription with no workspace',
+    'billing.paymentFailed': 'Payment failed',
+    'billing.paymentMethod.changed': 'Changed the payment method',
+    'billing.platformDisputeLost': 'Lost a payment dispute',
+    'billing.platformInvoiceUncollectible': 'Invoice marked uncollectible',
+    'billing.registerAllocation': 'Changed register allocation',
+    'billing.storageOverage.setCap': 'Set the storage overage ceiling',
+    'billing.subscriptionCanceled': 'Subscription canceled',
+    'billing.usage': 'Recorded usage',
+    'billing.usageBudget.set': 'Set the usage budget',
+    'billing.view': 'Viewed billing',
+    'billing.webhookInert': 'Ignored a billing webhook',
+    'billing.webhookSignatureRejected': 'Rejected a billing webhook signature',
+    'broadcast.send': 'Sent a broadcast',
+    'contact.phone.erased': 'Erased a phone number',
+    'contact.suppression.recorded': 'Added a contact suppression',
+    'contact.suppression.released': 'Released a contact suppression',
+    'coupon.create': 'Created a coupon',
+    'coupon.promotion_code.update': 'Updated a promotion code',
+    'data.transfer.export': 'Exported data',
+    'data.transfer.plan': 'Planned a data transfer',
+    'email.history-imported': 'Imported email history',
+    'email.message-viewed': 'Viewed an email message',
+    'email.sending-domains.reap': 'Removed unused sending domains',
+    'email.suppression.release': 'Released an email suppression',
+    'emailSendRate.update': 'Changed the email send rate',
+    'erasure.runBatch': 'Ran an erasure batch',
+    'erasures.replayed': 'Replayed erasures',
+    'firestore.export': 'Exported the database',
+    'firstPartyHosts.update': 'Changed first-party sites',
+    'flags.update': 'Changed feature flags',
+    'freeWorkspaceCap.update': 'Changed the free workspace cap',
+    'host.deleted': 'Deleted a site',
+    'host.domain.released': 'Released a domain',
+    'host.reattach-domain': 'Reattached a domain',
+    'host.set-subdomain': 'Changed a site address',
+    'host.transfer': 'Transferred a site',
+    'lockdown.lock': 'Locked the workspace down',
+    'lockdown.payouts-pause': 'Paused payouts',
+    'lockdown.payouts-restore': 'Restored payouts',
+    'lockdown.renewals-pause': 'Paused renewals',
+    'lockdown.renewals-resume': 'Resumed renewals',
+    'lockdown.resend-notice': 'Resent the lockdown notice',
+    'maintenance.auditArchive.run': 'Archived the audit log',
+    'maintenance.reapArtifacts.run': 'Removed stale build artifacts',
+    'maintenance.reverifyPlugins.run': 'Re-verified plugins',
+    'operatorAlerts.test': 'Sent a test operator alert',
+    'operatorAlerts.update': 'Changed operator alerts',
+    'org.acquisition-viewed': 'Viewed where the organization came from',
+    'org.auditLog': 'Viewed the organization audit log',
+    'org.discount.apply': 'Applied a discount',
+    'org.discount.remove': 'Removed a discount',
+    'org.enterprise.provision': 'Provisioned enterprise billing',
+    'org.erase-failed': 'Organization erasure failed',
+    'org.erased': 'Erased the organization',
+    'org.erasureCanceled': 'Canceled the organization erasure',
+    'org.erasureRequested': 'Requested organization erasure',
+    'org.exported': 'Exported the organization',
+    'org.name': 'Renamed the organization',
+    'org.note': 'Added a staff note',
+    'org.override': 'Overrode the plan',
+    'org.refund': 'Issued a refund',
+    'org.seatAddons.changed': 'Changed seat add-ons',
+    'org.sso.enforceSignInMethods': 'Changed enforced sign-in methods',
+    'org.sso.jit': 'Changed single sign-on provisioning',
+    'org.subscription-cancel': 'Canceled the subscription',
+    'org.subscriptionStarted.settle': 'Settled a new subscription',
+    'org.successManagerCleared': 'Removed the success manager',
+    'org.successManagerSet': 'Assigned a success manager',
+    'org.upgradeProposal.propose': 'Proposed an upgrade',
+    'org.upgradeProposal.withdraw': 'Withdrew an upgrade proposal',
+    'orgs.unverified.reap': 'Removed unverified organizations',
+    'person.erased': 'Erased a person',
+    'person.erasure-requested': 'Requested erasure of a person',
+    'plan.name': 'Renamed a plan',
+    'plugins.artifacts.reap': 'Removed stale plugin builds',
+    'plugins.remoteServer.load': 'Loaded a remote plugin server',
+    'plugins.verification.decline': 'Declined a plugin verification',
+    'plugins.verifier.regression': 'Plugin verifier regression',
+    'security.pageSecurityHold': 'Put a page on security hold',
+    'security.staffGranted': 'Granted staff access',
+    'site.package.apply': 'Applied a site package',
+    'site.package.undo': 'Undid a site package',
+    'sso.domain.driftDetected': 'Single sign-on domain drift detected',
+    'staff.evidence': 'Recorded evidence',
+    'staff.paymentFailed': 'Payment failed (staff notice)',
+    'staff.planChanged': 'Plan changed (staff notice)',
+    'staff.subscriptionCanceled': 'Subscription canceled (staff notice)',
+    'staff.subscriptionStarted': 'Subscription started (staff notice)',
+    'systemEmail.staffSend': 'Sent a system email',
+    'systemEmail.test': 'Sent a test system email',
+    'taxFilingConfig.clear': 'Cleared the tax filing settings',
+    'taxFilingConfig.update': 'Changed the tax filing settings',
+    'taxablePurchases.clear': 'Cleared taxable purchases',
+    'taxablePurchases.update': 'Changed taxable purchases',
+    'user.acquisition-viewed': 'Viewed where the account came from',
+    'user.erased': 'Erased the account',
+    'user.impersonate': 'Signed in as the account',
+    'user.sendPasswordReset': 'Sent a password reset',
+    'user.setPassword': 'Set the password',
+    'user.signOutDevice': 'Signed a device out',
+    'user.updateProfile': 'Updated the profile'
+};
+/** Leading namespaces as a reader names them. */ const NAMESPACE_LABELS = {
+    org: 'Organization',
+    orgs: 'Organizations',
+    user: 'Account',
+    host: 'Site'
+};
+/** `paymentMethod` → `payment method`, `reattach-domain` → `reattach domain`. */ function words(segment) {
+    return segment.replace(/([a-z0-9])([A-Z])/g, '$1 $2').replace(/[-_]+/g, ' ').toLowerCase().trim();
+}
+/** A code nobody named, as words: `billing.invoice.paid` → `Billing: invoice paid`. */ export function humanizeActivityCode(code) {
+    var _NAMESPACE_LABELS_head;
+    const [head = '', ...rest] = code.trim().split('.').filter(Boolean);
+    const lead = (_NAMESPACE_LABELS_head = NAMESPACE_LABELS[head]) != null ? _NAMESPACE_LABELS_head : words(head).replace(/^./, (c)=>c.toUpperCase());
+    if (!rest.length) return lead;
+    return `${lead}: ${rest.map(words).join(' ')}`;
+}
+/** What a staff audit code reads as, everywhere it is shown. */ export function staffAuditActionLabel(action) {
+    var _ref, _ref1, _STAFF_AUDIT_ACTION_LABELS_code;
+    const code = (_ref = action == null ? void 0 : action.trim()) != null ? _ref : '';
+    if (!code) return '—';
+    return (_ref1 = (_STAFF_AUDIT_ACTION_LABELS_code = STAFF_AUDIT_ACTION_LABELS[code]) != null ? _STAFF_AUDIT_ACTION_LABELS_code : pluginStaffAuditActionLabel(code)) != null ? _ref1 : isActivityCode(code) ? humanizeActivityCode(code) : code;
+}
+/** The collections an audit path walks, named for a reader. */ const COLLECTION_NOUNS = {
+    orgs: 'Organization',
+    hosts: 'Site',
+    users: 'Account',
+    members: 'Member',
+    invites: 'Invitation',
+    screens: 'Page',
+    layouts: 'Layout',
+    components: 'Component',
+    templates: 'Template',
+    media: 'Media',
+    emailDeliveries: 'Email',
+    coupons: 'Coupon',
+    flags: 'Feature flag',
+    plugins: 'Plugin',
+    subscriptions: 'Subscription'
+};
+/** `orgs/a/aiJobs/b` → `{ orgs: 'a', aiJobs: 'b' }`, in walk order. */ function pathPairs(path) {
+    const segments = path.split('/').filter(Boolean);
+    const pairs = [];
+    for(let at = 0; at < segments.length; at += 2){
+        var _segments_at, _segments_;
+        pairs.push([
+            (_segments_at = segments[at]) != null ? _segments_at : '',
+            (_segments_ = segments[at + 1]) != null ? _segments_ : ''
+        ]);
+    }
+    return pairs;
+}
+const str = (value)=>typeof value === 'string' && value.trim() ? value.trim() : null;
+const num = (value)=>typeof value === 'number' && Number.isFinite(value) ? value : null;
+/** What an audit act did, in words, and the words it was about. */ export function describeStaffAudit(entry, names = {}) {
+    var _entry_after, _str, _idOf, _ref, _ref1, _ref2, _ref3, _ref4, _ref5, _ref6, _str1, _orgOverrideReasonSummary, _entry_reason, _entry_note;
+    var _names_hosts, _names_orgs, _names_users, _pluginStaffAuditCollection;
+    const code = str(entry.action);
+    const path = str(entry.target);
+    const after = (_entry_after = entry.after) != null ? _entry_after : {};
+    const pairs = path && path.includes('/') ? pathPairs(path) : [];
+    const idOf = (collection)=>{
+        var _pairs_find;
+        return ((_pairs_find = pairs.find(([name])=>name === collection)) == null ? void 0 : _pairs_find[1]) || null;
+    };
+    const orgId = idOf('orgs');
+    // A plugin's job collection (the AI plugin's jobs) names the job the row
+    // links to; core knows it only through the plugin's declaration.
+    const jobPair = pairs.find(([name])=>{
+        var _pluginStaffAuditCollection;
+        return (_pluginStaffAuditCollection = pluginStaffAuditCollection(name)) == null ? void 0 : _pluginStaffAuditCollection.job;
+    });
+    const jobId = (jobPair == null ? void 0 : jobPair[1]) || null;
+    const hostId = (_str = str(after['hostId'])) != null ? _str : idOf('hosts');
+    const uid = (_idOf = idOf('users')) != null ? _idOf : str(entry.subjectUid);
+    const label = str(after['label']);
+    // A plugin may word the row from what the act left: the AI plugin names
+    // what a job made (`Created page Home with Aglyn AI`).
+    const declared = code ? pluginStaffAuditDescribe(code, after) : undefined;
+    const action = (_ref = declared == null ? void 0 : declared.action) != null ? _ref : staffAuditActionLabel(code);
+    const site = hostId ? (_ref1 = (_names_hosts = names.hosts) == null ? void 0 : _names_hosts[hostId]) != null ? _ref1 : null : null;
+    const org = orgId ? (_ref2 = (_names_orgs = names.orgs) == null ? void 0 : _names_orgs[orgId]) != null ? _ref2 : null : null;
+    const person = uid ? (_ref3 = (_names_users = names.users) == null ? void 0 : _names_users[uid]) != null ? _ref3 : null : null;
+    const last = pairs[pairs.length - 1];
+    const parts = [];
+    if (site) parts.push(site);
+    else if (org) parts.push(org);
+    if (jobPair) parts.push((_ref4 = label != null ? label : (_pluginStaffAuditCollection = pluginStaffAuditCollection(jobPair[0])) == null ? void 0 : _pluginStaffAuditCollection.noun) != null ? _ref4 : 'Job');
+    else if (last && last[0] === 'users') parts.push(person != null ? person : 'Account');
+    else if (last && last[0] !== 'orgs' && last[0] !== 'hosts') {
+        var _ref7, _COLLECTION_NOUNS_last_;
+        var _pluginStaffAuditCollection1;
+        parts.push((_ref7 = (_COLLECTION_NOUNS_last_ = COLLECTION_NOUNS[last[0]]) != null ? _COLLECTION_NOUNS_last_ : (_pluginStaffAuditCollection1 = pluginStaffAuditCollection(last[0])) == null ? void 0 : _pluginStaffAuditCollection1.noun) != null ? _ref7 : activityTypeLabel(last[0]));
+    }
+    if (!parts.length) {
+        var _ref8, _COLLECTION_NOUNS_last_1;
+        var _pluginStaffAuditCollection2;
+        if (last) parts.push((_ref8 = (_COLLECTION_NOUNS_last_1 = COLLECTION_NOUNS[last[0]]) != null ? _COLLECTION_NOUNS_last_1 : (_pluginStaffAuditCollection2 = pluginStaffAuditCollection(last[0])) == null ? void 0 : _pluginStaffAuditCollection2.noun) != null ? _ref8 : 'Item');
+        else if (path) parts.push(isActivityCode(path) || /^[\w-]{16,}$/.test(path) ? 'Platform' : path);
+        else parts.push('—');
+    }
+    const result = (_ref5 = (_ref6 = (_str1 = str(after['result'])) != null ? _str1 : str(after['status'])) != null ? _ref6 : declared == null ? void 0 : declared.result) != null ? _ref5 : null;
+    return {
+        action,
+        target: parts.join(' · '),
+        why: (_orgOverrideReasonSummary = orgOverrideReasonSummary((_entry_reason = entry.reason) != null ? _entry_reason : null, (_entry_note = entry.note) != null ? _entry_note : null)) != null ? _orgOverrideReasonSummary : str(entry.note),
+        credits: num(after['credits']),
+        result,
+        code,
+        path,
+        orgId,
+        hostId,
+        jobId,
+        uid
+    };
+}
+/**
+ * An activity row as the lists show it. Where is the site when the row came
+ * from a site's log, else the organization.
+ */ export function describeActivity(entry, names = {}) {
+    var _entry_target, _entry_scopeId, _entry_scopeId1, _ref, _pluginActivityTargetLabel, _str;
+    var _names_hosts;
+    const stored = str(entry.action);
+    const code = isActivityCode(stored) ? stored : null;
+    const target = (_entry_target = entry.target) != null ? _entry_target : null;
+    const hostId = entry.scopeType === 'host' ? (_entry_scopeId = entry.scopeId) != null ? _entry_scopeId : null : null;
+    const orgId = entry.scopeType === 'org' ? (_entry_scopeId1 = entry.scopeId) != null ? _entry_scopeId1 : null : null;
+    const site = hostId ? (_ref = (_names_hosts = names.hosts) == null ? void 0 : _names_hosts[hostId]) != null ? _ref : null : null;
+    const type = str(target == null ? void 0 : target.type);
+    const jobId = isPluginJobTargetType(type) ? str(target == null ? void 0 : target.id) : str(target == null ? void 0 : target.jobId);
+    const noun = type ? (_pluginActivityTargetLabel = pluginActivityTargetLabel(type)) != null ? _pluginActivityTargetLabel : activityTypeLabel(type) : null;
+    const item = (_str = str(target == null ? void 0 : target.name)) != null ? _str : noun;
+    const parts = [
+        site,
+        item
+    ].filter((part)=>Boolean(part));
+    return {
+        action: activityActionSentence(stored != null ? stored : undefined, target) || '—',
+        target: parts.join(' · ') || '—',
+        why: null,
+        credits: num(target == null ? void 0 : target.credits),
+        result: null,
+        code,
+        path: type ? `${type}${(target == null ? void 0 : target.id) ? `/${target.id}` : ''}` : null,
+        orgId,
+        hostId,
+        jobId,
+        uid: type === 'member' ? str(target == null ? void 0 : target.id) : null
+    };
+}
+
+//# sourceMappingURL=activity-labels.js.map

package/src/lib/app-utils/activity-labels.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../libs/aglyn/src/lib/app-utils/activity-labels.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n/**\n * ONE LABEL MAP FOR EVERY ACTIVITY AND AUDIT LIST (AGL-3660).\n *\n * Two logs feed the console's lists. The activity logs\n * (`orgs/{id}/activity`, `hosts/{id}/activity`) store a prose sentence or a\n * plugin's code plus a `{ type, id, name }` target. The staff audit trail\n * (`adminAudit`) stores a dotted code (`ai.job.output`, `org.override`) and\n * a Firestore PATH as its target (`orgs/abc/aiJobs/xyz`). The staff tables\n * printed both raw, so a reader saw `ai.job.output` next to\n * `orgs/9fK…/aiJobs/Qe2…` and had to know the schema to read their own\n * audit trail.\n *\n * Every list now draws its words from here: an action as a sentence\n * (`Created page Home with Aglyn AI`), a target as the site and the item,\n * and — for an audit row — why, the credits it spent and what came of it.\n * The raw code and path are kept on the description, for a tooltip and for\n * the staff details dialog, and never as the visible text.\n */\n\nimport {\n  activityActionLabel,\n  activityPrimaryText,\n  activityTypeLabel,\n  type ActivityEntryLike,\n  type ActivityTargetLike,\n} from './activity-presenter'\nimport { orgOverrideReasonSummary } from './org-override-reason'\nimport {\n  isPluginJobTargetType,\n  pluginActivityActionSentence,\n  pluginActivityTargetLabel,\n  pluginStaffAuditActionLabel,\n  pluginStaffAuditCollection,\n  pluginStaffAuditDescribe,\n} from '../plugin-manager/plugin-activity-actions'\n\n/** What a list row and the details dialog show for one entry. */\nexport interface ActivityDescription {\n  /** The act, as a sentence. Never a code. */\n  action: string\n  /** What it was done to, in words: the site and the item. Never a path. */\n  target: string\n  /** Why it was done, when the writer recorded a reason. */\n  why: string | null\n  /** AI credits it spent, when it spent any. */\n  credits: number | null\n  /** What came of it, when the writer recorded an outcome. */\n  result: string | null\n  /** The stored code, when the action was one — for a tooltip and staff. */\n  code: string | null\n  /** The stored target path (audit) or `type/id` (activity) — staff only. */\n  path: string | null\n  /** The organization the entry concerns, when it names one. */\n  orgId: string | null\n  /** The site the entry concerns, when it names one. */\n  hostId: string | null\n  /** The plugin job behind the entry (an AI job), when there is one. */\n  jobId: string | null\n  /** The account the entry concerns, when it names one. */\n  uid: string | null\n}\n\n/** Names a route resolved for the ids an entry carries. */\nexport interface ActivityNames {\n  /** Organization name by org id. */\n  orgs?: Readonly<Record<string, string | null | undefined>>\n  /** Site name by host id. */\n  hosts?: Readonly<Record<string, string | null | undefined>>\n  /** An account's address (or name) by uid. */\n  users?: Readonly<Record<string, string | null | undefined>>\n}\n\n/** `screen` → `page`, `Home` → `page Home`: the noun a sentence uses. */\nexport function activityTargetPhrase(target: ActivityTargetLike | null | undefined): string {\n  const noun = activityTypeLabel(target?.type)\n  const lower = noun === 'Item' ? 'item' : noun.charAt(0).toLowerCase() + noun.slice(1)\n  const name = target?.name?.trim()\n  return name ? `${lower} ${name}` : lower\n}\n\n/**\n * An activity row's action as a sentence about its target. A plugin code\n * with a declared sentence fills it (`Created {target} with Aglyn AI`); any\n * other code reads as its label, and a prose action as itself.\n */\nexport function activityActionSentence(\n  action: string | undefined,\n  target?: ActivityTargetLike | null,\n): string {\n  const stored = action?.trim() ?? ''\n  const sentence = pluginActivityActionSentence(stored)\n  if (sentence) return sentence.replace('{target}', activityTargetPhrase(target))\n  return activityActionLabel(stored)\n}\n\n/**\n * A one-column feed's line: the sentence when the code declares one, else\n * the action with its target's name (`Saved the screen — Home`).\n */\nexport function activityRowText(entry: ActivityEntryLike): string {\n  const stored = entry.action?.trim() ?? ''\n  return pluginActivityActionSentence(stored)\n    ? activityActionSentence(stored, entry.target)\n    : activityPrimaryText(entry)\n}\n\n/** Whether a stored action is a dotted code rather than a sentence. */\nexport function isActivityCode(action: unknown): action is string {\n  return typeof action === 'string' && /^[a-z][\\w-]*(\\.[\\w-]+)+$/i.test(action.trim())\n}\n\n/*==========================================\n * THE STAFF AUDIT TRAIL'S WORDS.\n *\n * Every code core's doors write. A plugin's doors declare their own through\n * `staffAuditLabels` (the AI plugin's `ai.job.*`), and a code neither knows\n * is humanized from its segments rather than shown raw, so a new writer\n * reads as `Billing: invoice paid` until somebody names it properly.\n *==========================================*/\nexport const STAFF_AUDIT_ACTION_LABELS: Readonly<Record<string, string>> = {\n  'account.closed.self': 'Closed their own account',\n  'account.exported.self': 'Exported their own account data',\n  'ai-usage.exported': 'Exported AI usage',\n  'billing.assistOverage.setCap': 'Set the AI overage ceiling',\n  'billing.assistOverage.setHardCap': 'Set the AI stop-at-band switch',\n  'billing.autoLocked': 'Locked automatically for billing',\n  'billing.collaboratorAllocation': 'Changed collaborator seats',\n  'billing.dispute.opened': 'Payment dispute opened',\n  'billing.disputeClosed': 'Payment dispute closed',\n  'billing.disputeOpened': 'Payment dispute opened',\n  'billing.disputeUnattributed': 'Unattributed payment dispute',\n  'billing.invoice': 'Invoice event',\n  'billing.invoice.closed': 'Invoice closed',\n  'billing.invoice.failed': 'Invoice payment failed',\n  'billing.invoice.paid': 'Invoice paid',\n  'billing.manage': 'Opened billing management',\n  'billing.orphanedSubscription': 'Found a subscription with no workspace',\n  'billing.paymentFailed': 'Payment failed',\n  'billing.paymentMethod.changed': 'Changed the payment method',\n  'billing.platformDisputeLost': 'Lost a payment dispute',\n  'billing.platformInvoiceUncollectible': 'Invoice marked uncollectible',\n  'billing.registerAllocation': 'Changed register allocation',\n  'billing.storageOverage.setCap': 'Set the storage overage ceiling',\n  'billing.subscriptionCanceled': 'Subscription canceled',\n  'billing.usage': 'Recorded usage',\n  'billing.usageBudget.set': 'Set the usage budget',\n  'billing.view': 'Viewed billing',\n  'billing.webhookInert': 'Ignored a billing webhook',\n  'billing.webhookSignatureRejected': 'Rejected a billing webhook signature',\n  'broadcast.send': 'Sent a broadcast',\n  'contact.phone.erased': 'Erased a phone number',\n  'contact.suppression.recorded': 'Added a contact suppression',\n  'contact.suppression.released': 'Released a contact suppression',\n  'coupon.create': 'Created a coupon',\n  'coupon.promotion_code.update': 'Updated a promotion code',\n  'data.transfer.export': 'Exported data',\n  'data.transfer.plan': 'Planned a data transfer',\n  'email.history-imported': 'Imported email history',\n  'email.message-viewed': 'Viewed an email message',\n  'email.sending-domains.reap': 'Removed unused sending domains',\n  'email.suppression.release': 'Released an email suppression',\n  'emailSendRate.update': 'Changed the email send rate',\n  'erasure.runBatch': 'Ran an erasure batch',\n  'erasures.replayed': 'Replayed erasures',\n  'firestore.export': 'Exported the database',\n  'firstPartyHosts.update': 'Changed first-party sites',\n  'flags.update': 'Changed feature flags',\n  'freeWorkspaceCap.update': 'Changed the free workspace cap',\n  'host.deleted': 'Deleted a site',\n  'host.domain.released': 'Released a domain',\n  'host.reattach-domain': 'Reattached a domain',\n  'host.set-subdomain': 'Changed a site address',\n  'host.transfer': 'Transferred a site',\n  'lockdown.lock': 'Locked the workspace down',\n  'lockdown.payouts-pause': 'Paused payouts',\n  'lockdown.payouts-restore': 'Restored payouts',\n  'lockdown.renewals-pause': 'Paused renewals',\n  'lockdown.renewals-resume': 'Resumed renewals',\n  'lockdown.resend-notice': 'Resent the lockdown notice',\n  'maintenance.auditArchive.run': 'Archived the audit log',\n  'maintenance.reapArtifacts.run': 'Removed stale build artifacts',\n  'maintenance.reverifyPlugins.run': 'Re-verified plugins',\n  'operatorAlerts.test': 'Sent a test operator alert',\n  'operatorAlerts.update': 'Changed operator alerts',\n  'org.acquisition-viewed': 'Viewed where the organization came from',\n  'org.auditLog': 'Viewed the organization audit log',\n  'org.discount.apply': 'Applied a discount',\n  'org.discount.remove': 'Removed a discount',\n  'org.enterprise.provision': 'Provisioned enterprise billing',\n  'org.erase-failed': 'Organization erasure failed',\n  'org.erased': 'Erased the organization',\n  'org.erasureCanceled': 'Canceled the organization erasure',\n  'org.erasureRequested': 'Requested organization erasure',\n  'org.exported': 'Exported the organization',\n  'org.name': 'Renamed the organization',\n  'org.note': 'Added a staff note',\n  'org.override': 'Overrode the plan',\n  'org.refund': 'Issued a refund',\n  'org.seatAddons.changed': 'Changed seat add-ons',\n  'org.sso.enforceSignInMethods': 'Changed enforced sign-in methods',\n  'org.sso.jit': 'Changed single sign-on provisioning',\n  'org.subscription-cancel': 'Canceled the subscription',\n  'org.subscriptionStarted.settle': 'Settled a new subscription',\n  'org.successManagerCleared': 'Removed the success manager',\n  'org.successManagerSet': 'Assigned a success manager',\n  'org.upgradeProposal.propose': 'Proposed an upgrade',\n  'org.upgradeProposal.withdraw': 'Withdrew an upgrade proposal',\n  'orgs.unverified.reap': 'Removed unverified organizations',\n  'person.erased': 'Erased a person',\n  'person.erasure-requested': 'Requested erasure of a person',\n  'plan.name': 'Renamed a plan',\n  'plugins.artifacts.reap': 'Removed stale plugin builds',\n  'plugins.remoteServer.load': 'Loaded a remote plugin server',\n  'plugins.verification.decline': 'Declined a plugin verification',\n  'plugins.verifier.regression': 'Plugin verifier regression',\n  'security.pageSecurityHold': 'Put a page on security hold',\n  'security.staffGranted': 'Granted staff access',\n  'site.package.apply': 'Applied a site package',\n  'site.package.undo': 'Undid a site package',\n  'sso.domain.driftDetected': 'Single sign-on domain drift detected',\n  'staff.evidence': 'Recorded evidence',\n  'staff.paymentFailed': 'Payment failed (staff notice)',\n  'staff.planChanged': 'Plan changed (staff notice)',\n  'staff.subscriptionCanceled': 'Subscription canceled (staff notice)',\n  'staff.subscriptionStarted': 'Subscription started (staff notice)',\n  'systemEmail.staffSend': 'Sent a system email',\n  'systemEmail.test': 'Sent a test system email',\n  'taxFilingConfig.clear': 'Cleared the tax filing settings',\n  'taxFilingConfig.update': 'Changed the tax filing settings',\n  'taxablePurchases.clear': 'Cleared taxable purchases',\n  'taxablePurchases.update': 'Changed taxable purchases',\n  'user.acquisition-viewed': 'Viewed where the account came from',\n  'user.erased': 'Erased the account',\n  'user.impersonate': 'Signed in as the account',\n  'user.sendPasswordReset': 'Sent a password reset',\n  'user.setPassword': 'Set the password',\n  'user.signOutDevice': 'Signed a device out',\n  'user.updateProfile': 'Updated the profile',\n}\n\n/** Leading namespaces as a reader names them. */\nconst NAMESPACE_LABELS: Readonly<Record<string, string>> = {\n  org: 'Organization',\n  orgs: 'Organizations',\n  user: 'Account',\n  host: 'Site',\n}\n\n/** `paymentMethod` → `payment method`, `reattach-domain` → `reattach domain`. */\nfunction words(segment: string): string {\n  return segment\n    .replace(/([a-z0-9])([A-Z])/g, '$1 $2')\n    .replace(/[-_]+/g, ' ')\n    .toLowerCase()\n    .trim()\n}\n\n/** A code nobody named, as words: `billing.invoice.paid` → `Billing: invoice paid`. */\nexport function humanizeActivityCode(code: string): string {\n  const [head = '', ...rest] = code.trim().split('.').filter(Boolean)\n  const lead = NAMESPACE_LABELS[head] ?? words(head).replace(/^./, (c) => c.toUpperCase())\n  if (!rest.length) return lead\n  return `${lead}: ${rest.map(words).join(' ')}`\n}\n\n/** What a staff audit code reads as, everywhere it is shown. */\nexport function staffAuditActionLabel(action: string | null | undefined): string {\n  const code = action?.trim() ?? ''\n  if (!code) return '—'\n  return (\n    STAFF_AUDIT_ACTION_LABELS[code] ??\n    pluginStaffAuditActionLabel(code) ??\n    (isActivityCode(code) ? humanizeActivityCode(code) : code)\n  )\n}\n\n/** The collections an audit path walks, named for a reader. */\nconst COLLECTION_NOUNS: Readonly<Record<string, string>> = {\n  orgs: 'Organization',\n  hosts: 'Site',\n  users: 'Account',\n  members: 'Member',\n  invites: 'Invitation',\n  screens: 'Page',\n  layouts: 'Layout',\n  components: 'Component',\n  templates: 'Template',\n  media: 'Media',\n  emailDeliveries: 'Email',\n  coupons: 'Coupon',\n  flags: 'Feature flag',\n  plugins: 'Plugin',\n  subscriptions: 'Subscription',\n}\n\n/** `orgs/a/aiJobs/b` → `{ orgs: 'a', aiJobs: 'b' }`, in walk order. */\nfunction pathPairs(path: string): Array<[string, string]> {\n  const segments = path.split('/').filter(Boolean)\n  const pairs: Array<[string, string]> = []\n  for (let at = 0; at < segments.length; at += 2) {\n    pairs.push([segments[at] ?? '', segments[at + 1] ?? ''])\n  }\n  return pairs\n}\n\n/** The stored audit row, read defensively. */\nexport interface StaffAuditEntryLike {\n  action?: string | null\n  target?: string | null\n  subjectUid?: string | null\n  reason?: string | null\n  note?: string | null\n  /** The state the act left; AI rows carry `{ label, hostId, credits }`. */\n  after?: Record<string, unknown> | null\n}\n\nconst str = (value: unknown): string | null =>\n  typeof value === 'string' && value.trim() ? value.trim() : null\nconst num = (value: unknown): number | null =>\n  typeof value === 'number' && Number.isFinite(value) ? value : null\n\n/** What an audit act did, in words, and the words it was about. */\nexport function describeStaffAudit(\n  entry: StaffAuditEntryLike,\n  names: ActivityNames = {},\n): ActivityDescription {\n  const code = str(entry.action)\n  const path = str(entry.target)\n  const after = entry.after ?? {}\n  const pairs = path && path.includes('/') ? pathPairs(path) : []\n  const idOf = (collection: string) => pairs.find(([name]) => name === collection)?.[1] || null\n  const orgId = idOf('orgs')\n  // A plugin's job collection (the AI plugin's jobs) names the job the row\n  // links to; core knows it only through the plugin's declaration.\n  const jobPair = pairs.find(([name]) => pluginStaffAuditCollection(name)?.job)\n  const jobId = jobPair?.[1] || null\n  const hostId = str(after['hostId']) ?? idOf('hosts')\n  const uid = idOf('users') ?? str(entry.subjectUid)\n  const label = str(after['label'])\n  // A plugin may word the row from what the act left: the AI plugin names\n  // what a job made (`Created page Home with Aglyn AI`).\n  const declared = code ? pluginStaffAuditDescribe(code, after) : undefined\n  const action = declared?.action ?? staffAuditActionLabel(code)\n\n  const site = hostId ? (names.hosts?.[hostId] ?? null) : null\n  const org = orgId ? (names.orgs?.[orgId] ?? null) : null\n  const person = uid ? (names.users?.[uid] ?? null) : null\n  const last = pairs[pairs.length - 1]\n  const parts: string[] = []\n  if (site) parts.push(site)\n  else if (org) parts.push(org)\n  if (jobPair) parts.push(label ?? pluginStaffAuditCollection(jobPair[0])?.noun ?? 'Job')\n  else if (last && last[0] === 'users') parts.push(person ?? 'Account')\n  else if (last && last[0] !== 'orgs' && last[0] !== 'hosts') {\n    parts.push(\n      COLLECTION_NOUNS[last[0]] ??\n        pluginStaffAuditCollection(last[0])?.noun ??\n        activityTypeLabel(last[0]),\n    )\n  }\n  if (!parts.length) {\n    if (last) parts.push(COLLECTION_NOUNS[last[0]] ?? pluginStaffAuditCollection(last[0])?.noun ?? 'Item')\n    else if (path) parts.push(isActivityCode(path) || /^[\\w-]{16,}$/.test(path) ? 'Platform' : path)\n    else parts.push('—')\n  }\n\n  const result = str(after['result']) ?? str(after['status']) ?? declared?.result ?? null\n\n  return {\n    action,\n    target: parts.join(' · '),\n    why: orgOverrideReasonSummary(entry.reason ?? null, entry.note ?? null) ?? str(entry.note),\n    credits: num(after['credits']),\n    result,\n    code,\n    path,\n    orgId,\n    hostId,\n    jobId,\n    uid,\n  }\n}\n\n/** A stored activity row, read defensively, with where it was read from. */\nexport interface ActivityRowLike {\n  action?: string | null\n  target?: (ActivityTargetLike & { jobId?: string; credits?: number }) | null\n  /** `host` or `org`: which log the row came from. */\n  scopeType?: string\n  scopeId?: string\n}\n\n/**\n * An activity row as the lists show it. Where is the site when the row came\n * from a site's log, else the organization.\n */\nexport function describeActivity(\n  entry: ActivityRowLike,\n  names: ActivityNames = {},\n): ActivityDescription {\n  const stored = str(entry.action)\n  const code = isActivityCode(stored) ? stored : null\n  const target = entry.target ?? null\n  const hostId = entry.scopeType === 'host' ? (entry.scopeId ?? null) : null\n  const orgId = entry.scopeType === 'org' ? (entry.scopeId ?? null) : null\n  const site = hostId ? (names.hosts?.[hostId] ?? null) : null\n  const type = str(target?.type)\n  const jobId = isPluginJobTargetType(type) ? str(target?.id) : str(target?.jobId)\n  const noun = type ? (pluginActivityTargetLabel(type) ?? activityTypeLabel(type)) : null\n  const item = str(target?.name) ?? noun\n  const parts = [site, item].filter((part): part is string => Boolean(part))\n  return {\n    action: activityActionSentence(stored ?? undefined, target) || '—',\n    target: parts.join(' · ') || '—',\n    why: null,\n    credits: num(target?.credits),\n    result: null,\n    code,\n    path: type ? `${type}${target?.id ? `/${target.id}` : ''}` : null,\n    orgId,\n    hostId,\n    jobId,\n    uid: type === 'member' ? str(target?.id) : null,\n  }\n}\n"],"names":["activityActionLabel","activityPrimaryText","activityTypeLabel","orgOverrideReasonSummary","isPluginJobTargetType","pluginActivityActionSentence","pluginActivityTargetLabel","pluginStaffAuditActionLabel","pluginStaffAuditCollection","pluginStaffAuditDescribe","activityTargetPhrase","target","noun","type","lower","charAt","toLowerCase","slice","name","trim","activityActionSentence","action","stored","sentence","replace","activityRowText","entry","isActivityCode","test","STAFF_AUDIT_ACTION_LABELS","NAMESPACE_LABELS","org","orgs","user","host","words","segment","humanizeActivityCode","code","head","rest","split","filter","Boolean","lead","c","toUpperCase","length","map","join","staffAuditActionLabel","COLLECTION_NOUNS","hosts","users","members","invites","screens","layouts","components","templates","media","emailDeliveries","coupons","flags","plugins","subscriptions","pathPairs","path","segments","pairs","at","push","str","value","num","Number","isFinite","describeStaffAudit","names","idOf","label","after","includes","collection","find","orgId","jobPair","job","jobId","hostId","uid","subjectUid","declared","undefined","site","person","last","parts","result","why","reason","note","credits","describeActivity","scopeType","scopeId","id","item","part"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED;;;;;;;;;;;;;;;;;CAiBC,GAED,SACEA,mBAAmB,EACnBC,mBAAmB,EACnBC,iBAAiB,QAGZ,0BAAsB;AAC7B,SAASC,wBAAwB,QAAQ,2BAAuB;AAChE,SACEC,qBAAqB,EACrBC,4BAA4B,EAC5BC,yBAAyB,EACzBC,2BAA2B,EAC3BC,0BAA0B,EAC1BC,wBAAwB,QACnB,+CAA2C;AAsClD,uEAAuE,GACvE,OAAO,SAASC,qBAAqBC,MAA6C;QAGnEA;IAFb,MAAMC,OAAOV,kBAAkBS,0BAAAA,OAAQE,IAAI;IAC3C,MAAMC,QAAQF,SAAS,SAAS,SAASA,KAAKG,MAAM,CAAC,GAAGC,WAAW,KAAKJ,KAAKK,KAAK,CAAC;IACnF,MAAMC,OAAOP,2BAAAA,eAAAA,OAAQO,IAAI,qBAAZP,aAAcQ,IAAI;IAC/B,OAAOD,OAAO,GAAGJ,MAAM,CAAC,EAAEI,MAAM,GAAGJ;AACrC;AAEA;;;;CAIC,GACD,OAAO,SAASM,uBACdC,MAA0B,EAC1BV,MAAkC;;IAElC,MAAMW,iBAASD,0BAAAA,OAAQF,IAAI,qBAAM;IACjC,MAAMI,WAAWlB,6BAA6BiB;IAC9C,IAAIC,UAAU,OAAOA,SAASC,OAAO,CAAC,YAAYd,qBAAqBC;IACvE,OAAOX,oBAAoBsB;AAC7B;AAEA;;;CAGC,GACD,OAAO,SAASG,gBAAgBC,KAAwB;;QACvCA;IAAf,MAAMJ,kBAASI,gBAAAA,MAAML,MAAM,qBAAZK,cAAcP,IAAI,qBAAM;IACvC,OAAOd,6BAA6BiB,UAChCF,uBAAuBE,QAAQI,MAAMf,MAAM,IAC3CV,oBAAoByB;AAC1B;AAEA,qEAAqE,GACrE,OAAO,SAASC,eAAeN,MAAe;IAC5C,OAAO,OAAOA,WAAW,YAAY,4BAA4BO,IAAI,CAACP,OAAOF,IAAI;AACnF;AAEA;;;;;;;4CAO4C,GAC5C,OAAO,MAAMU,4BAA8D;IACzE,uBAAuB;IACvB,yBAAyB;IACzB,qBAAqB;IACrB,gCAAgC;IAChC,oCAAoC;IACpC,sBAAsB;IACtB,kCAAkC;IAClC,0BAA0B;IAC1B,yBAAyB;IACzB,yBAAyB;IACzB,+BAA+B;IAC/B,mBAAmB;IACnB,0BAA0B;IAC1B,0BAA0B;IAC1B,wBAAwB;IACxB,kBAAkB;IAClB,gCAAgC;IAChC,yBAAyB;IACzB,iCAAiC;IACjC,+BAA+B;IAC/B,wCAAwC;IACxC,8BAA8B;IAC9B,iCAAiC;IACjC,gCAAgC;IAChC,iBAAiB;IACjB,2BAA2B;IAC3B,gBAAgB;IAChB,wBAAwB;IACxB,oCAAoC;IACpC,kBAAkB;IAClB,wBAAwB;IACxB,gCAAgC;IAChC,gCAAgC;IAChC,iBAAiB;IACjB,gCAAgC;IAChC,wBAAwB;IACxB,sBAAsB;IACtB,0BAA0B;IAC1B,wBAAwB;IACxB,8BAA8B;IAC9B,6BAA6B;IAC7B,wBAAwB;IACxB,oBAAoB;IACpB,qBAAqB;IACrB,oBAAoB;IACpB,0BAA0B;IAC1B,gBAAgB;IAChB,2BAA2B;IAC3B,gBAAgB;IAChB,wBAAwB;IACxB,wBAAwB;IACxB,sBAAsB;IACtB,iBAAiB;IACjB,iBAAiB;IACjB,0BAA0B;IAC1B,4BAA4B;IAC5B,2BAA2B;IAC3B,4BAA4B;IAC5B,0BAA0B;IAC1B,gCAAgC;IAChC,iCAAiC;IACjC,mCAAmC;IACnC,uBAAuB;IACvB,yBAAyB;IACzB,0BAA0B;IAC1B,gBAAgB;IAChB,sBAAsB;IACtB,uBAAuB;IACvB,4BAA4B;IAC5B,oBAAoB;IACpB,cAAc;IACd,uBAAuB;IACvB,wBAAwB;IACxB,gBAAgB;IAChB,YAAY;IACZ,YAAY;IACZ,gBAAgB;IAChB,cAAc;IACd,0BAA0B;IAC1B,gCAAgC;IAChC,eAAe;IACf,2BAA2B;IAC3B,kCAAkC;IAClC,6BAA6B;IAC7B,yBAAyB;IACzB,+BAA+B;IAC/B,gCAAgC;IAChC,wBAAwB;IACxB,iBAAiB;IACjB,4BAA4B;IAC5B,aAAa;IACb,0BAA0B;IAC1B,6BAA6B;IAC7B,gCAAgC;IAChC,+BAA+B;IAC/B,6BAA6B;IAC7B,yBAAyB;IACzB,sBAAsB;IACtB,qBAAqB;IACrB,4BAA4B;IAC5B,kBAAkB;IAClB,uBAAuB;IACvB,qBAAqB;IACrB,8BAA8B;IAC9B,6BAA6B;IAC7B,yBAAyB;IACzB,oBAAoB;IACpB,yBAAyB;IACzB,0BAA0B;IAC1B,0BAA0B;IAC1B,2BAA2B;IAC3B,2BAA2B;IAC3B,eAAe;IACf,oBAAoB;IACpB,0BAA0B;IAC1B,oBAAoB;IACpB,sBAAsB;IACtB,sBAAsB;AACxB,EAAC;AAED,+CAA+C,GAC/C,MAAMC,mBAAqD;IACzDC,KAAK;IACLC,MAAM;IACNC,MAAM;IACNC,MAAM;AACR;AAEA,+EAA+E,GAC/E,SAASC,MAAMC,OAAe;IAC5B,OAAOA,QACJZ,OAAO,CAAC,sBAAsB,SAC9BA,OAAO,CAAC,UAAU,KAClBR,WAAW,GACXG,IAAI;AACT;AAEA,qFAAqF,GACrF,OAAO,SAASkB,qBAAqBC,IAAY;QAElCR;IADb,MAAM,CAACS,OAAO,EAAE,EAAE,GAAGC,KAAK,GAAGF,KAAKnB,IAAI,GAAGsB,KAAK,CAAC,KAAKC,MAAM,CAACC;IAC3D,MAAMC,QAAOd,yBAAAA,gBAAgB,CAACS,KAAK,YAAtBT,yBAA0BK,MAAMI,MAAMf,OAAO,CAAC,MAAM,CAACqB,IAAMA,EAAEC,WAAW;IACrF,IAAI,CAACN,KAAKO,MAAM,EAAE,OAAOH;IACzB,OAAO,GAAGA,KAAK,EAAE,EAAEJ,KAAKQ,GAAG,CAACb,OAAOc,IAAI,CAAC,MAAM;AAChD;AAEA,8DAA8D,GAC9D,OAAO,SAASC,sBAAsB7B,MAAiC;cAInEQ,OAAAA;IAHF,MAAMS,eAAOjB,0BAAAA,OAAQF,IAAI,qBAAM;IAC/B,IAAI,CAACmB,MAAM,OAAO;IAClB,QACET,SAAAA,kCAAAA,yBAAyB,CAACS,KAAK,YAA/BT,kCACAtB,4BAA4B+B,iBAD5BT,QAECF,eAAeW,QAAQD,qBAAqBC,QAAQA;AAEzD;AAEA,6DAA6D,GAC7D,MAAMa,mBAAqD;IACzDnB,MAAM;IACNoB,OAAO;IACPC,OAAO;IACPC,SAAS;IACTC,SAAS;IACTC,SAAS;IACTC,SAAS;IACTC,YAAY;IACZC,WAAW;IACXC,OAAO;IACPC,iBAAiB;IACjBC,SAAS;IACTC,OAAO;IACPC,SAAS;IACTC,eAAe;AACjB;AAEA,qEAAqE,GACrE,SAASC,UAAUC,IAAY;IAC7B,MAAMC,WAAWD,KAAK1B,KAAK,CAAC,KAAKC,MAAM,CAACC;IACxC,MAAM0B,QAAiC,EAAE;IACzC,IAAK,IAAIC,KAAK,GAAGA,KAAKF,SAASrB,MAAM,EAAEuB,MAAM,EAAG;YAClCF,cAAoBA;QAAhCC,MAAME,IAAI,CAAC;aAACH,eAAAA,QAAQ,CAACE,GAAG,YAAZF,eAAgB;aAAIA,aAAAA,QAAQ,CAACE,KAAK,EAAE,YAAhBF,aAAoB;SAAG;IACzD;IACA,OAAOC;AACT;AAaA,MAAMG,MAAM,CAACC,QACX,OAAOA,UAAU,YAAYA,MAAMtD,IAAI,KAAKsD,MAAMtD,IAAI,KAAK;AAC7D,MAAMuD,MAAM,CAACD,QACX,OAAOA,UAAU,YAAYE,OAAOC,QAAQ,CAACH,SAASA,QAAQ;AAEhE,iEAAiE,GACjE,OAAO,SAASI,mBACdnD,KAA0B,EAC1BoD,QAAuB,CAAC,CAAC;QAIXpD,cAQC8C,MACHO,kCAcYC,OAeTR,OAAAA,OAAAA,OAKRrE,2BAAyBuB,eAAsBA;QA3B/BoD,cACFA,aACCA,cAKWtE;IAzBjC,MAAM8B,OAAOkC,IAAI9C,MAAML,MAAM;IAC7B,MAAM8C,OAAOK,IAAI9C,MAAMf,MAAM;IAC7B,MAAMsE,SAAQvD,eAAAA,MAAMuD,KAAK,YAAXvD,eAAe,CAAC;IAC9B,MAAM2C,QAAQF,QAAQA,KAAKe,QAAQ,CAAC,OAAOhB,UAAUC,QAAQ,EAAE;IAC/D,MAAMY,OAAO,CAACI;YAAuBd;eAAAA,EAAAA,cAAAA,MAAMe,IAAI,CAAC,CAAC,CAAClE,KAAK,GAAKA,SAASiE,gCAAhCd,WAA6C,CAAC,EAAE,KAAI;;IACzF,MAAMgB,QAAQN,KAAK;IACnB,yEAAyE;IACzE,iEAAiE;IACjE,MAAMO,UAAUjB,MAAMe,IAAI,CAAC,CAAC,CAAClE,KAAK;YAAKV;gBAAAA,8BAAAA,2BAA2BU,0BAA3BV,4BAAkC+E,GAAG;;IAC5E,MAAMC,QAAQF,CAAAA,2BAAAA,OAAS,CAAC,EAAE,KAAI;IAC9B,MAAMG,UAASjB,OAAAA,IAAIS,KAAK,CAAC,SAAS,aAAnBT,OAAwBO,KAAK;IAC5C,MAAMW,OAAMX,QAAAA,KAAK,oBAALA,QAAiBP,IAAI9C,MAAMiE,UAAU;IACjD,MAAMX,QAAQR,IAAIS,KAAK,CAAC,QAAQ;IAChC,wEAAwE;IACxE,uDAAuD;IACvD,MAAMW,WAAWtD,OAAO7B,yBAAyB6B,MAAM2C,SAASY;IAChE,MAAMxE,iBAASuE,4BAAAA,SAAUvE,MAAM,mBAAI6B,sBAAsBZ;IAEzD,MAAMwD,OAAOL,mBAAUX,eAAAA,MAAM1B,KAAK,qBAAX0B,YAAa,CAACW,OAAO,oBAAI,OAAQ;IACxD,MAAM1D,MAAMsD,kBAASP,cAAAA,MAAM9C,IAAI,qBAAV8C,WAAY,CAACO,MAAM,oBAAI,OAAQ;IACpD,MAAMU,SAASL,gBAAOZ,eAAAA,MAAMzB,KAAK,qBAAXyB,YAAa,CAACY,IAAI,oBAAI,OAAQ;IACpD,MAAMM,OAAO3B,KAAK,CAACA,MAAMtB,MAAM,GAAG,EAAE;IACpC,MAAMkD,QAAkB,EAAE;IAC1B,IAAIH,MAAMG,MAAM1B,IAAI,CAACuB;SAChB,IAAI/D,KAAKkE,MAAM1B,IAAI,CAACxC;IACzB,IAAIuD,SAASW,MAAM1B,IAAI,EAACS,QAAAA,gBAAAA,SAASxE,8BAAAA,2BAA2B8E,OAAO,CAAC,EAAE,sBAArC9E,4BAAwCI,IAAI,YAArDoE,QAAyD;SAC5E,IAAIgB,QAAQA,IAAI,CAAC,EAAE,KAAK,SAASC,MAAM1B,IAAI,CAACwB,iBAAAA,SAAU;SACtD,IAAIC,QAAQA,IAAI,CAAC,EAAE,KAAK,UAAUA,IAAI,CAAC,EAAE,KAAK,SAAS;YAExD7C,OAAAA;YACE3C;QAFJyF,MAAM1B,IAAI,EACRpB,SAAAA,0BAAAA,gBAAgB,CAAC6C,IAAI,CAAC,EAAE,CAAC,YAAzB7C,2BACE3C,+BAAAA,2BAA2BwF,IAAI,CAAC,EAAE,sBAAlCxF,6BAAqCI,IAAI,YAD3CuC,QAEEjD,kBAAkB8F,IAAI,CAAC,EAAE;IAE/B;IACA,IAAI,CAACC,MAAMlD,MAAM,EAAE;YACII,OAAAA;YAA6B3C;QAAlD,IAAIwF,MAAMC,MAAM1B,IAAI,EAACpB,SAAAA,2BAAAA,gBAAgB,CAAC6C,IAAI,CAAC,EAAE,CAAC,YAAzB7C,4BAA6B3C,+BAAAA,2BAA2BwF,IAAI,CAAC,EAAE,sBAAlCxF,6BAAqCI,IAAI,YAAtEuC,QAA0E;aAC1F,IAAIgB,MAAM8B,MAAM1B,IAAI,CAAC5C,eAAewC,SAAS,eAAevC,IAAI,CAACuC,QAAQ,aAAaA;aACtF8B,MAAM1B,IAAI,CAAC;IAClB;IAEA,MAAM2B,UAAS1B,SAAAA,SAAAA,QAAAA,IAAIS,KAAK,CAAC,SAAS,aAAnBT,QAAwBA,IAAIS,KAAK,CAAC,SAAS,aAA3CT,QAAgDoB,4BAAAA,SAAUM,MAAM,YAAhE1B,QAAoE;IAEnF,OAAO;QACLnD;QACAV,QAAQsF,MAAMhD,IAAI,CAAC;QACnBkD,GAAG,GAAEhG,4BAAAA,0BAAyBuB,gBAAAA,MAAM0E,MAAM,YAAZ1E,gBAAgB,OAAMA,cAAAA,MAAM2E,IAAI,YAAV3E,cAAc,iBAA7DvB,4BAAsEqE,IAAI9C,MAAM2E,IAAI;QACzFC,SAAS5B,IAAIO,KAAK,CAAC,UAAU;QAC7BiB;QACA5D;QACA6B;QACAkB;QACAI;QACAD;QACAE;IACF;AACF;AAWA;;;CAGC,GACD,OAAO,SAASa,iBACd7E,KAAsB,EACtBoD,QAAuB,CAAC,CAAC;QAIVpD,eAC8BA,gBACFA,uBAItBpB,4BACRkE;QAJUM;IALvB,MAAMxD,SAASkD,IAAI9C,MAAML,MAAM;IAC/B,MAAMiB,OAAOX,eAAeL,UAAUA,SAAS;IAC/C,MAAMX,UAASe,gBAAAA,MAAMf,MAAM,YAAZe,gBAAgB;IAC/B,MAAM+D,SAAS/D,MAAM8E,SAAS,KAAK,UAAU9E,iBAAAA,MAAM+E,OAAO,YAAb/E,iBAAiB,OAAQ;IACtE,MAAM2D,QAAQ3D,MAAM8E,SAAS,KAAK,SAAS9E,kBAAAA,MAAM+E,OAAO,YAAb/E,kBAAiB,OAAQ;IACpE,MAAMoE,OAAOL,kBAAUX,eAAAA,MAAM1B,KAAK,qBAAX0B,YAAa,CAACW,OAAO,mBAAI,OAAQ;IACxD,MAAM5E,OAAO2D,IAAI7D,0BAAAA,OAAQE,IAAI;IAC7B,MAAM2E,QAAQpF,sBAAsBS,QAAQ2D,IAAI7D,0BAAAA,OAAQ+F,EAAE,IAAIlC,IAAI7D,0BAAAA,OAAQ6E,KAAK;IAC/E,MAAM5E,OAAOC,QAAQP,6BAAAA,0BAA0BO,iBAA1BP,6BAAmCJ,kBAAkBW,QAAS;IACnF,MAAM8F,QAAOnC,OAAAA,IAAI7D,0BAAAA,OAAQO,IAAI,aAAhBsD,OAAqB5D;IAClC,MAAMqF,QAAQ;QAACH;QAAMa;KAAK,CAACjE,MAAM,CAAC,CAACkE,OAAyBjE,QAAQiE;IACpE,OAAO;QACLvF,QAAQD,uBAAuBE,iBAAAA,SAAUuE,WAAWlF,WAAW;QAC/DA,QAAQsF,MAAMhD,IAAI,CAAC,UAAU;QAC7BkD,KAAK;QACLG,SAAS5B,IAAI/D,0BAAAA,OAAQ2F,OAAO;QAC5BJ,QAAQ;QACR5D;QACA6B,MAAMtD,OAAO,GAAGA,OAAOF,CAAAA,0BAAAA,OAAQ+F,EAAE,IAAG,CAAC,CAAC,EAAE/F,OAAO+F,EAAE,EAAE,GAAG,IAAI,GAAG;QAC7DrB;QACAI;QACAD;QACAE,KAAK7E,SAAS,WAAW2D,IAAI7D,0BAAAA,OAAQ+F,EAAE,IAAI;IAC7C;AACF"}

package/src/lib/app-utils/admin-audit-index.d.ts

@@ -51,6 +51,17 @@ export type AdminAuditKind = 'access' | 'change';
  * high-consequence act even though it mutates nothing, and it belongs beside
  * the impersonations rather than beside the record views.
  */
+/**
+ * Staff opened a workspace's or a site's media library — one row per page
+ * read — on the staff organization or site page. The target is the library
+ * (`orgs/{id}/media`, `hosts/{id}/media`).
+ */
+export declare const ADMIN_AUDIT_MEDIA_LIBRARY_VIEWED = "media.library-viewed";
+/**
+ * Staff opened one asset of a media library — its preview, storage path,
+ * owner and usage. The target is the asset (`orgs/{id}/media/{mediaId}`).
+ */
+export declare const ADMIN_AUDIT_MEDIA_ASSET_VIEWED = "media.asset-viewed";
 export declare const ADMIN_AUDIT_ACCESS_ACTIONS: readonly string[];
 /** What a row carries that the stamped fields are derived from. */
 export type AdminAuditIndexSource = Partial<Record<(typeof ADMIN_AUDIT_SEARCHED_FIELDS)[number], unknown>>;

package/src/lib/app-utils/admin-audit-index.js

@@ -88,8 +88,19 @@ import { nameSearchTokens } from "./name-search.js";
  * An export is deliberately NOT here. Data leaving the platform is a
  * high-consequence act even though it mutates nothing, and it belongs beside
  * the impersonations rather than beside the record views.
- */ export const ADMIN_AUDIT_ACCESS_ACTIONS = [
+ */ /**
+ * Staff opened a workspace's or a site's media library — one row per page
+ * read — on the staff organization or site page. The target is the library
+ * (`orgs/{id}/media`, `hosts/{id}/media`).
+ */ export const ADMIN_AUDIT_MEDIA_LIBRARY_VIEWED = 'media.library-viewed';
+/**
+ * Staff opened one asset of a media library — its preview, storage path,
+ * owner and usage. The target is the asset (`orgs/{id}/media/{mediaId}`).
+ */ export const ADMIN_AUDIT_MEDIA_ASSET_VIEWED = 'media.asset-viewed';
+export const ADMIN_AUDIT_ACCESS_ACTIONS = [
     'email.message-viewed',
+    ADMIN_AUDIT_MEDIA_LIBRARY_VIEWED,
+    ADMIN_AUDIT_MEDIA_ASSET_VIEWED,
     // The acquisition card (AGL-3289). No longer written; the rows already in
     // the log still classify as reads.
     'user.acquisition-viewed',