@aglyn/plugins-commerce 1.0.0-beta.217 → 1.0.0-beta.219

package/src/lib/model/commerce-record-routes.d.ts

@@ -0,0 +1,27 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+/** The query key the Orders list opens one order's dialog by. */
+export declare const ORDERS_ORDER_PARAM = "order";
+/**
+ * The query key the Orders list narrows to one buyer by — the same word the
+ * CRM's contacts list opens a person by, so a reader who edits one URL into
+ * the other is not surprised.
+ */
+export declare const ORDERS_CUSTOMER_PARAM = "email";
+/**
+ * Called from the console registrar. The owner is named rather than read off
+ * the loader's marker, so the route registers the same way under a spec that
+ * calls the registrar directly.
+ */
+export declare function registerCommerceRecordRoutes(): void;

package/src/lib/model/commerce-record-routes.js

@@ -0,0 +1,72 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ import { buildRoute, Route } from "@aglyn/aglyn/app-utils/console-routes";
+import { registerPluginRecordRoute } from "@aglyn/aglyn/plugin-manager/plugin-record-routes";
+import { BUNDLE_ID } from "../constants/bundle-common.js";
+/**
+ * Where a product and an order are read, published for every other surface
+ * (AGL-3080).
+ *
+ * A surface elsewhere — the AI plugin's job drawer opening a product it
+ * drafted, a contact's timeline opening the order it names, a person's page
+ * listing their orders — asks the record-route registry for `product` or
+ * `order` rather than spelling this plugin's console path, and gets `null`
+ * (text instead of a link) where this plugin is not loaded.
+ *
+ * Both are a site's, so only a site has an address. The catalog has no page
+ * per product — a product opens in the hub's editor — so the record answers
+ * the catalog a caller would find it in. An order opens as a dialog over the
+ * Orders list, which reads {@link ORDERS_ORDER_PARAM} on arrival; the list
+ * narrowed to one buyer reads {@link ORDERS_CUSTOMER_PARAM}.
+ */ /** The nav slug the shell resolves the catalog by. */ const PRODUCTS_SLUG = 'products';
+/** The query key the Orders list opens one order's dialog by. */ export const ORDERS_ORDER_PARAM = 'order';
+/**
+ * The query key the Orders list narrows to one buyer by — the same word the
+ * CRM's contacts list opens a person by, so a reader who edits one URL into
+ * the other is not surprised.
+ */ export const ORDERS_CUSTOMER_PARAM = 'email';
+function catalog(context) {
+    return context.host ? buildRoute(Route.HOST_PLUGIN, {
+        orgSlug: context.orgSlug,
+        host: context.host,
+        pluginSlug: PRODUCTS_SLUG
+    }) : null;
+}
+function orders(context, key, value) {
+    const list = catalog(context);
+    if (!list) return null;
+    return key && value ? `${list}/orders?${new URLSearchParams({
+        [key]: value
+    }).toString()}` : `${list}/orders`;
+}
+/**
+ * Called from the console registrar. The owner is named rather than read off
+ * the loader's marker, so the route registers the same way under a spec that
+ * calls the registrar directly.
+ */ export function registerCommerceRecordRoutes() {
+    registerPluginRecordRoute('product', {
+        list: catalog,
+        record: catalog
+    }, {
+        pluginId: BUNDLE_ID
+    });
+    registerPluginRecordRoute('order', {
+        list: (context)=>orders(context),
+        record: (context, id)=>orders(context, ORDERS_ORDER_PARAM, id),
+        byEmail: (context, email)=>orders(context, ORDERS_CUSTOMER_PARAM, email)
+    }, {
+        pluginId: BUNDLE_ID
+    });
+}
+
+//# sourceMappingURL=commerce-record-routes.js.map

package/src/lib/model/commerce-record-routes.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../libs/plugins/commerce/src/lib/model/commerce-record-routes.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *   http://www.apache.org/licenses/LICENSE-2.0\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n\nimport { buildRoute, Route } from '@aglyn/aglyn/app-utils/console-routes'\nimport {\n  registerPluginRecordRoute,\n  type PluginRecordRouteContext,\n} from '@aglyn/aglyn/plugin-manager/plugin-record-routes'\nimport { BUNDLE_ID } from '../constants/bundle-common'\n\n/**\n * Where a product and an order are read, published for every other surface\n * (AGL-3080).\n *\n * A surface elsewhere — the AI plugin's job drawer opening a product it\n * drafted, a contact's timeline opening the order it names, a person's page\n * listing their orders — asks the record-route registry for `product` or\n * `order` rather than spelling this plugin's console path, and gets `null`\n * (text instead of a link) where this plugin is not loaded.\n *\n * Both are a site's, so only a site has an address. The catalog has no page\n * per product — a product opens in the hub's editor — so the record answers\n * the catalog a caller would find it in. An order opens as a dialog over the\n * Orders list, which reads {@link ORDERS_ORDER_PARAM} on arrival; the list\n * narrowed to one buyer reads {@link ORDERS_CUSTOMER_PARAM}.\n */\n\n/** The nav slug the shell resolves the catalog by. */\nconst PRODUCTS_SLUG = 'products'\n\n/** The query key the Orders list opens one order's dialog by. */\nexport const ORDERS_ORDER_PARAM = 'order'\n\n/**\n * The query key the Orders list narrows to one buyer by — the same word the\n * CRM's contacts list opens a person by, so a reader who edits one URL into\n * the other is not surprised.\n */\nexport const ORDERS_CUSTOMER_PARAM = 'email'\n\nfunction catalog(context: PluginRecordRouteContext): string | null {\n  return context.host\n    ? buildRoute(Route.HOST_PLUGIN, {\n        orgSlug: context.orgSlug,\n        host: context.host,\n        pluginSlug: PRODUCTS_SLUG,\n      })\n    : null\n}\n\nfunction orders(context: PluginRecordRouteContext, key?: string, value?: string): string | null {\n  const list = catalog(context)\n  if (!list) return null\n  return key && value\n    ? `${list}/orders?${new URLSearchParams({ [key]: value }).toString()}`\n    : `${list}/orders`\n}\n\n/**\n * Called from the console registrar. The owner is named rather than read off\n * the loader's marker, so the route registers the same way under a spec that\n * calls the registrar directly.\n */\nexport function registerCommerceRecordRoutes(): void {\n  registerPluginRecordRoute(\n    'product',\n    { list: catalog, record: catalog },\n    { pluginId: BUNDLE_ID },\n  )\n  registerPluginRecordRoute(\n    'order',\n    {\n      list: (context) => orders(context),\n      record: (context, id) => orders(context, ORDERS_ORDER_PARAM, id),\n      byEmail: (context, email) => orders(context, ORDERS_CUSTOMER_PARAM, email),\n    },\n    { pluginId: BUNDLE_ID },\n  )\n}\n"],"names":["buildRoute","Route","registerPluginRecordRoute","BUNDLE_ID","PRODUCTS_SLUG","ORDERS_ORDER_PARAM","ORDERS_CUSTOMER_PARAM","catalog","context","host","HOST_PLUGIN","orgSlug","pluginSlug","orders","key","value","list","URLSearchParams","toString","registerCommerceRecordRoutes","record","pluginId","id","byEmail","email"],"mappings":"AAAA;;;;;;;;;;;;CAYC,GAGD,SAASA,UAAU,EAAEC,KAAK,QAAQ,wCAAuC;AACzE,SACEC,yBAAyB,QAEpB,mDAAkD;AACzD,SAASC,SAAS,QAAQ,gCAA4B;AAEtD;;;;;;;;;;;;;;;CAeC,GAED,oDAAoD,GACpD,MAAMC,gBAAgB;AAEtB,+DAA+D,GAC/D,OAAO,MAAMC,qBAAqB,QAAO;AAEzC;;;;CAIC,GACD,OAAO,MAAMC,wBAAwB,QAAO;AAE5C,SAASC,QAAQC,OAAiC;IAChD,OAAOA,QAAQC,IAAI,GACfT,WAAWC,MAAMS,WAAW,EAAE;QAC5BC,SAASH,QAAQG,OAAO;QACxBF,MAAMD,QAAQC,IAAI;QAClBG,YAAYR;IACd,KACA;AACN;AAEA,SAASS,OAAOL,OAAiC,EAAEM,GAAY,EAAEC,KAAc;IAC7E,MAAMC,OAAOT,QAAQC;IACrB,IAAI,CAACQ,MAAM,OAAO;IAClB,OAAOF,OAAOC,QACV,GAAGC,KAAK,QAAQ,EAAE,IAAIC,gBAAgB;QAAE,CAACH,IAAI,EAAEC;IAAM,GAAGG,QAAQ,IAAI,GACpE,GAAGF,KAAK,OAAO,CAAC;AACtB;AAEA;;;;CAIC,GACD,OAAO,SAASG;IACdjB,0BACE,WACA;QAAEc,MAAMT;QAASa,QAAQb;IAAQ,GACjC;QAAEc,UAAUlB;IAAU;IAExBD,0BACE,SACA;QACEc,MAAM,CAACR,UAAYK,OAAOL;QAC1BY,QAAQ,CAACZ,SAASc,KAAOT,OAAOL,SAASH,oBAAoBiB;QAC7DC,SAAS,CAACf,SAASgB,QAAUX,OAAOL,SAASF,uBAAuBkB;IACtE,GACA;QAAEH,UAAUlB;IAAU;AAE1B"}

package/src/lib/model/commerce-search-sources.d.ts

@@ -0,0 +1,21 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import type { ConsoleSearchSource } from '@aglyn/aglyn';
+/**
+ * What the console's search finds in a store (AGL-3080): its products, by
+ * name or slug, opening on the site's Products page. Read only where the plan
+ * carries commerce and allows the site products, so a workspace that holds
+ * none never spends a read on them.
+ */
+export declare const COMMERCE_SEARCH_SOURCES: readonly ConsoleSearchSource[];

package/src/lib/model/commerce-search-sources.js

@@ -0,0 +1,40 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ import { buildRoute, Route } from "@aglyn/aglyn/app-utils/console-routes";
+/**
+ * What the console's search finds in a store (AGL-3080): its products, by
+ * name or slug, opening on the site's Products page. Read only where the plan
+ * carries commerce and allows the site products, so a workspace that holds
+ * none never spends a read on them.
+ */ export const COMMERCE_SEARCH_SOURCES = [
+    {
+        id: 'products',
+        group: 'Products',
+        noun: 'products',
+        scope: 'host',
+        collection: 'products',
+        nameField: 'name',
+        extraFields: [
+            'slug'
+        ],
+        entitlementKey: 'productsPerHost',
+        featureFlag: 'commerce',
+        order: 160,
+        href: (_row, { orgSlug, host })=>host ? buildRoute(Route.HOST_PRODUCTS, {
+                orgSlug,
+                host
+            }) : null
+    }
+];
+
+//# sourceMappingURL=commerce-search-sources.js.map

package/src/lib/model/commerce-search-sources.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../libs/plugins/commerce/src/lib/model/commerce-search-sources.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *   http://www.apache.org/licenses/LICENSE-2.0\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport type { ConsoleSearchSource } from '@aglyn/aglyn'\nimport { buildRoute, Route } from '@aglyn/aglyn/app-utils/console-routes'\n\n/**\n * What the console's search finds in a store (AGL-3080): its products, by\n * name or slug, opening on the site's Products page. Read only where the plan\n * carries commerce and allows the site products, so a workspace that holds\n * none never spends a read on them.\n */\nexport const COMMERCE_SEARCH_SOURCES: readonly ConsoleSearchSource[] = [\n  {\n    id: 'products',\n    group: 'Products',\n    noun: 'products',\n    scope: 'host',\n    collection: 'products',\n    nameField: 'name',\n    extraFields: ['slug'],\n    entitlementKey: 'productsPerHost',\n    featureFlag: 'commerce',\n    order: 160,\n    href: (_row, { orgSlug, host }) =>\n      host ? buildRoute(Route.HOST_PRODUCTS, { orgSlug, host }) : null,\n  },\n]\n"],"names":["buildRoute","Route","COMMERCE_SEARCH_SOURCES","id","group","noun","scope","collection","nameField","extraFields","entitlementKey","featureFlag","order","href","_row","orgSlug","host","HOST_PRODUCTS"],"mappings":"AAAA;;;;;;;;;;;;CAYC,GAGD,SAASA,UAAU,EAAEC,KAAK,QAAQ,wCAAuC;AAEzE;;;;;CAKC,GACD,OAAO,MAAMC,0BAA0D;IACrE;QACEC,IAAI;QACJC,OAAO;QACPC,MAAM;QACNC,OAAO;QACPC,YAAY;QACZC,WAAW;QACXC,aAAa;YAAC;SAAO;QACrBC,gBAAgB;QAChBC,aAAa;QACbC,OAAO;QACPC,MAAM,CAACC,MAAM,EAAEC,OAAO,EAAEC,IAAI,EAAE,GAC5BA,OAAOhB,WAAWC,MAAMgB,aAAa,EAAE;gBAAEF;gBAASC;YAAK,KAAK;IAChE;CACD,CAAA"}

package/src/lib/model/storefront-tax-summary.d.ts

@@ -0,0 +1,121 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+/**
+ * The tax storefront sales collected, by who is liable for it (AGL-1904).
+ *
+ * A storefront sale is a merchant's sale — but on a `mode: 'stripe'` store
+ * the tax charged to the shopper is computed against the PLATFORM's
+ * registrations on a Checkout Session created on the platform's own account
+ * (measured, not inferred: with the platform unregistered and the destination
+ * connected account registered in Texas, Stripe answered `amount_tax: 0` /
+ * `not_collecting`; with the platform registered and nothing else changed,
+ * 8.25% / `standard_rated`; both sessions reported
+ * `automatic_tax.liability: { type: "self" }`). That tax lands in the
+ * platform's balance, and the operator's return reads it through this fold.
+ *
+ * ## THREE BUCKETS, AND THEY MUST NEVER BE SUMMED
+ *
+ * There is deliberately no grand total on this summary, and adding one would
+ * be the bug — the three are answers to three different questions:
+ *
+ *   - **`aglynLiable`** — Stripe Tax computed it against the platform's own
+ *     registrations (`taxMode: 'stripe-automatic'`,
+ *     `taxLiability: 'platform'`). This is money the platform is holding.
+ *   - **`merchantManual`** — the merchant's own configured rate, added as an
+ *     ordinary line item Stripe is never told is tax. The platform's
+ *     registrations played no part; it is not the platform's to remit, and
+ *     counting it would have the operator filing and paying another
+ *     company's tax.
+ *   - **`connectedAccountLiable`** — Stripe Tax that named a CONNECTED
+ *     account as the liable party. None exists today (no storefront path sets
+ *     `on_behalf_of`), and the bucket is here so that if one ever does, the
+ *     money moves out of `aglynLiable` visibly rather than silently.
+ *
+ * `aglynLiable` is a wire name the merchant's own tax report and the staff
+ * return have both read since AGL-1904; it means "the platform operator".
+ *
+ * The classification comes from the stored `taxMode` / `taxLiability`, which
+ * `storefront-tax.ts` derives from `automatic_tax.enabled` and never from the
+ * presence of tax lines — a manual-mode subscription renewal carries genuine
+ * Stripe Tax Rates (AGL-1751) and is otherwise indistinguishable.
+ *
+ * **This says nothing about marketplace-facilitator status.** It reports which
+ * registration computed which tax and where the money is. Which line of a
+ * filed return each bucket belongs on is a question for the preparer and for
+ * counsel, and this module deliberately declines to answer it — which is
+ * exactly why there is no merged total to mistake for one.
+ *
+ * Rows that cannot be classified or read are counted in `attention`, never
+ * dropped and never zeroed.
+ *
+ * Pure and total: no Firestore, no clock. Read by the staff return's source
+ * (`server/tax-return-source.ts`) and by the merchant's own tax report, so
+ * both read the same rows through the same classifier.
+ */
+import { type TaxLineInput, type TaxReturnJurisdiction } from '@aglyn/aglyn/app-utils/tax-jurisdiction-figures';
+/** The subset of a `storefrontTaxCollected/{stripeId}` row this reads. */
+export interface StorefrontTaxReturnRowInput {
+    id: string;
+    hostId?: unknown;
+    orgId?: string | null;
+    taxMode?: unknown;
+    taxLiability?: unknown;
+    grossCents?: unknown;
+    taxCents?: unknown;
+    currency?: unknown;
+    customerAddress?: {
+        country?: unknown;
+        state?: unknown;
+    } | null;
+    taxLines?: TaxLineInput[] | null;
+    paidAt?: unknown;
+}
+export interface StorefrontTaxBucket {
+    transactionCount: number;
+    /** What shoppers paid, tax included. NOT the platform's revenue. */
+    grossCents: number;
+    /** Stripe's `taxable_amount` summed; 0 for buckets that state no base. */
+    taxableSalesCents: number;
+    taxCollectedCents: number;
+    /** Keyed `COUNTRY-STATE`, or `unknown`. */
+    byJurisdiction: Record<string, TaxReturnJurisdiction>;
+}
+export interface StorefrontTaxSummary {
+    periodStart: string;
+    periodEnd: string;
+    transactionCount: number;
+    /** Tax computed against the PLATFORM's registrations. See the module note. */
+    aglynLiable: StorefrontTaxBucket;
+    /** The merchant's own configured tax. Never the platform's to remit. */
+    merchantManual: StorefrontTaxBucket;
+    /** Stripe Tax that named a connected account liable. Empty today. */
+    connectedAccountLiable: StorefrontTaxBucket;
+    attention: {
+        /** Tax collected but no line states its base — see the module note. */
+        rowsMissingTaxableBase: number;
+        rowsMissingAddress: number;
+        nonUsdRows: number;
+        rowsMissingPaidAt: number;
+        /** A `taxMode` this code does not recognize — never silently bucketed. */
+        rowsUnclassified: number;
+    };
+}
+/** The storefront figures from one period's rows. See the module note. */
+export declare function storefrontTaxSummary(rows: readonly StorefrontTaxReturnRowInput[], period: {
+    start: Date;
+    end: Date;
+}): StorefrontTaxSummary;

package/src/lib/model/storefront-tax-summary.js

@@ -0,0 +1,148 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ /**
+ * The tax storefront sales collected, by who is liable for it (AGL-1904).
+ *
+ * A storefront sale is a merchant's sale — but on a `mode: 'stripe'` store
+ * the tax charged to the shopper is computed against the PLATFORM's
+ * registrations on a Checkout Session created on the platform's own account
+ * (measured, not inferred: with the platform unregistered and the destination
+ * connected account registered in Texas, Stripe answered `amount_tax: 0` /
+ * `not_collecting`; with the platform registered and nothing else changed,
+ * 8.25% / `standard_rated`; both sessions reported
+ * `automatic_tax.liability: { type: "self" }`). That tax lands in the
+ * platform's balance, and the operator's return reads it through this fold.
+ *
+ * ## THREE BUCKETS, AND THEY MUST NEVER BE SUMMED
+ *
+ * There is deliberately no grand total on this summary, and adding one would
+ * be the bug — the three are answers to three different questions:
+ *
+ *   - **`aglynLiable`** — Stripe Tax computed it against the platform's own
+ *     registrations (`taxMode: 'stripe-automatic'`,
+ *     `taxLiability: 'platform'`). This is money the platform is holding.
+ *   - **`merchantManual`** — the merchant's own configured rate, added as an
+ *     ordinary line item Stripe is never told is tax. The platform's
+ *     registrations played no part; it is not the platform's to remit, and
+ *     counting it would have the operator filing and paying another
+ *     company's tax.
+ *   - **`connectedAccountLiable`** — Stripe Tax that named a CONNECTED
+ *     account as the liable party. None exists today (no storefront path sets
+ *     `on_behalf_of`), and the bucket is here so that if one ever does, the
+ *     money moves out of `aglynLiable` visibly rather than silently.
+ *
+ * `aglynLiable` is a wire name the merchant's own tax report and the staff
+ * return have both read since AGL-1904; it means "the platform operator".
+ *
+ * The classification comes from the stored `taxMode` / `taxLiability`, which
+ * `storefront-tax.ts` derives from `automatic_tax.enabled` and never from the
+ * presence of tax lines — a manual-mode subscription renewal carries genuine
+ * Stripe Tax Rates (AGL-1751) and is otherwise indistinguishable.
+ *
+ * **This says nothing about marketplace-facilitator status.** It reports which
+ * registration computed which tax and where the money is. Which line of a
+ * filed return each bucket belongs on is a question for the preparer and for
+ * counsel, and this module deliberately declines to answer it — which is
+ * exactly why there is no merged total to mistake for one.
+ *
+ * Rows that cannot be classified or read are counted in `attention`, never
+ * dropped and never zeroed.
+ *
+ * Pure and total: no Firestore, no clock. Read by the staff return's source
+ * (`server/tax-return-source.ts`) and by the merchant's own tax report, so
+ * both read the same rows through the same classifier.
+ */ import { accumulateTaxWorkingPapers, asRowDate, emptyTaxJurisdiction, taxJurisdictionKey } from "@aglyn/aglyn/app-utils/tax-jurisdiction-figures";
+function cents(value) {
+    const parsed = Number(value != null ? value : 0);
+    return Number.isFinite(parsed) ? Math.round(parsed) : 0;
+}
+function emptyBucket() {
+    return {
+        transactionCount: 0,
+        grossCents: 0,
+        taxableSalesCents: 0,
+        taxCollectedCents: 0,
+        byJurisdiction: {}
+    };
+}
+/** The storefront figures from one period's rows. See the module note. */ export function storefrontTaxSummary(rows, period) {
+    const summary = {
+        periodStart: period.start.toISOString(),
+        periodEnd: period.end.toISOString(),
+        transactionCount: 0,
+        aglynLiable: emptyBucket(),
+        merchantManual: emptyBucket(),
+        connectedAccountLiable: emptyBucket(),
+        attention: {
+            rowsMissingTaxableBase: 0,
+            rowsMissingAddress: 0,
+            nonUsdRows: 0,
+            rowsMissingPaidAt: 0,
+            rowsUnclassified: 0
+        }
+    };
+    for (const row of rows != null ? rows : []){
+        var _row_currency, _row_taxMode, _row_taxLiability, _bucket_byJurisdiction, _jurisdiction, _;
+        const gross = cents(row.grossCents);
+        const tax = cents(row.taxCents);
+        const lines = Array.isArray(row.taxLines) ? row.taxLines : [];
+        const statedBases = lines.map((line)=>line == null ? void 0 : line.taxableAmountCents).filter((base)=>base !== null && base !== undefined && Number.isFinite(Number(base)));
+        const taxableBase = statedBases.reduce((sum, base)=>sum + Math.round(Number(base)), 0);
+        const jurisdiction = taxJurisdictionKey(row.customerAddress);
+        if (jurisdiction === 'unknown') summary.attention.rowsMissingAddress += 1;
+        if (String((_row_currency = row.currency) != null ? _row_currency : 'usd').toLowerCase() !== 'usd') {
+            summary.attention.nonUsdRows += 1;
+        }
+        if (!asRowDate(row.paidAt)) summary.attention.rowsMissingPaidAt += 1;
+        // The bucket is chosen from the STORED classification, and an unfamiliar
+        // one falls through to `rowsUnclassified` rather than defaulting into a
+        // bucket — a default here would put a merchant's tax on the platform's
+        // return, or the platform's tax nowhere, and neither is allowed to happen
+        // quietly.
+        const mode = String((_row_taxMode = row.taxMode) != null ? _row_taxMode : '');
+        const liability = String((_row_taxLiability = row.taxLiability) != null ? _row_taxLiability : '');
+        const bucket = mode === 'stripe-automatic' && liability === 'connected-account' ? summary.connectedAccountLiable : mode === 'stripe-automatic' ? summary.aglynLiable : mode === 'manual' ? summary.merchantManual : null;
+        if (!bucket) {
+            summary.attention.rowsUnclassified += 1;
+            continue;
+        }
+        // A taxed row that cannot state the base the rate was applied to —
+        // counted ONLY for Stripe-computed tax. A manual-mode row has no Stripe
+        // base by construction (Stripe was never told the amount was tax), so
+        // flagging it here would raise a permanent alarm about a figure that can
+        // never exist, and an alarm that is always on is an alarm nobody reads.
+        if (mode === 'stripe-automatic' && tax > 0 && statedBases.length === 0) {
+            summary.attention.rowsMissingTaxableBase += 1;
+        }
+        summary.transactionCount += 1;
+        bucket.transactionCount += 1;
+        bucket.grossCents += gross;
+        bucket.taxableSalesCents += taxableBase;
+        bucket.taxCollectedCents += tax;
+        const jurisdictionBucket = (_ = (_bucket_byJurisdiction = bucket.byJurisdiction)[_jurisdiction = jurisdiction]) != null ? _ : _bucket_byJurisdiction[_jurisdiction] = emptyTaxJurisdiction();
+        jurisdictionBucket.transactionCount += 1;
+        jurisdictionBucket.totalSalesCents += gross - tax;
+        jurisdictionBucket.taxableSalesCents += taxableBase;
+        jurisdictionBucket.taxCollectedCents += tax;
+        // The storefront working papers (AGL-2329). Its lines carry the richer
+        // detail — `percentage`, `rateState`, `jurisdiction` — three fields the
+        // writer annotates "for the working papers".
+        accumulateTaxWorkingPapers(jurisdictionBucket, lines);
+    }
+    return summary;
+}
+
+//# sourceMappingURL=storefront-tax-summary.js.map

package/src/lib/model/storefront-tax-summary.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../libs/plugins/commerce/src/lib/model/storefront-tax-summary.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n/**\n * The tax storefront sales collected, by who is liable for it (AGL-1904).\n *\n * A storefront sale is a merchant's sale — but on a `mode: 'stripe'` store\n * the tax charged to the shopper is computed against the PLATFORM's\n * registrations on a Checkout Session created on the platform's own account\n * (measured, not inferred: with the platform unregistered and the destination\n * connected account registered in Texas, Stripe answered `amount_tax: 0` /\n * `not_collecting`; with the platform registered and nothing else changed,\n * 8.25% / `standard_rated`; both sessions reported\n * `automatic_tax.liability: { type: \"self\" }`). That tax lands in the\n * platform's balance, and the operator's return reads it through this fold.\n *\n * ## THREE BUCKETS, AND THEY MUST NEVER BE SUMMED\n *\n * There is deliberately no grand total on this summary, and adding one would\n * be the bug — the three are answers to three different questions:\n *\n *   - **`aglynLiable`** — Stripe Tax computed it against the platform's own\n *     registrations (`taxMode: 'stripe-automatic'`,\n *     `taxLiability: 'platform'`). This is money the platform is holding.\n *   - **`merchantManual`** — the merchant's own configured rate, added as an\n *     ordinary line item Stripe is never told is tax. The platform's\n *     registrations played no part; it is not the platform's to remit, and\n *     counting it would have the operator filing and paying another\n *     company's tax.\n *   - **`connectedAccountLiable`** — Stripe Tax that named a CONNECTED\n *     account as the liable party. None exists today (no storefront path sets\n *     `on_behalf_of`), and the bucket is here so that if one ever does, the\n *     money moves out of `aglynLiable` visibly rather than silently.\n *\n * `aglynLiable` is a wire name the merchant's own tax report and the staff\n * return have both read since AGL-1904; it means \"the platform operator\".\n *\n * The classification comes from the stored `taxMode` / `taxLiability`, which\n * `storefront-tax.ts` derives from `automatic_tax.enabled` and never from the\n * presence of tax lines — a manual-mode subscription renewal carries genuine\n * Stripe Tax Rates (AGL-1751) and is otherwise indistinguishable.\n *\n * **This says nothing about marketplace-facilitator status.** It reports which\n * registration computed which tax and where the money is. Which line of a\n * filed return each bucket belongs on is a question for the preparer and for\n * counsel, and this module deliberately declines to answer it — which is\n * exactly why there is no merged total to mistake for one.\n *\n * Rows that cannot be classified or read are counted in `attention`, never\n * dropped and never zeroed.\n *\n * Pure and total: no Firestore, no clock. Read by the staff return's source\n * (`server/tax-return-source.ts`) and by the merchant's own tax report, so\n * both read the same rows through the same classifier.\n */\n\nimport {\n  accumulateTaxWorkingPapers,\n  asRowDate,\n  emptyTaxJurisdiction,\n  taxJurisdictionKey,\n  type TaxLineInput,\n  type TaxReturnJurisdiction,\n} from '@aglyn/aglyn/app-utils/tax-jurisdiction-figures'\n\n/** The subset of a `storefrontTaxCollected/{stripeId}` row this reads. */\nexport interface StorefrontTaxReturnRowInput {\n  id: string\n  hostId?: unknown\n  orgId?: string | null\n  taxMode?: unknown\n  taxLiability?: unknown\n  grossCents?: unknown\n  taxCents?: unknown\n  currency?: unknown\n  customerAddress?: {\n    country?: unknown\n    state?: unknown\n  } | null\n  taxLines?: TaxLineInput[] | null\n  paidAt?: unknown\n}\n\nexport interface StorefrontTaxBucket {\n  transactionCount: number\n  /** What shoppers paid, tax included. NOT the platform's revenue. */\n  grossCents: number\n  /** Stripe's `taxable_amount` summed; 0 for buckets that state no base. */\n  taxableSalesCents: number\n  taxCollectedCents: number\n  /** Keyed `COUNTRY-STATE`, or `unknown`. */\n  byJurisdiction: Record<string, TaxReturnJurisdiction>\n}\n\nexport interface StorefrontTaxSummary {\n  periodStart: string\n  periodEnd: string\n  transactionCount: number\n  /** Tax computed against the PLATFORM's registrations. See the module note. */\n  aglynLiable: StorefrontTaxBucket\n  /** The merchant's own configured tax. Never the platform's to remit. */\n  merchantManual: StorefrontTaxBucket\n  /** Stripe Tax that named a connected account liable. Empty today. */\n  connectedAccountLiable: StorefrontTaxBucket\n  attention: {\n    /** Tax collected but no line states its base — see the module note. */\n    rowsMissingTaxableBase: number\n    rowsMissingAddress: number\n    nonUsdRows: number\n    rowsMissingPaidAt: number\n    /** A `taxMode` this code does not recognize — never silently bucketed. */\n    rowsUnclassified: number\n  }\n}\n\nfunction cents(value: unknown): number {\n  const parsed = Number(value ?? 0)\n  return Number.isFinite(parsed) ? Math.round(parsed) : 0\n}\n\nfunction emptyBucket(): StorefrontTaxBucket {\n  return {\n    transactionCount: 0,\n    grossCents: 0,\n    taxableSalesCents: 0,\n    taxCollectedCents: 0,\n    byJurisdiction: {},\n  }\n}\n\n/** The storefront figures from one period's rows. See the module note. */\nexport function storefrontTaxSummary(\n  rows: readonly StorefrontTaxReturnRowInput[],\n  period: { start: Date; end: Date },\n): StorefrontTaxSummary {\n  const summary: StorefrontTaxSummary = {\n    periodStart: period.start.toISOString(),\n    periodEnd: period.end.toISOString(),\n    transactionCount: 0,\n    aglynLiable: emptyBucket(),\n    merchantManual: emptyBucket(),\n    connectedAccountLiable: emptyBucket(),\n    attention: {\n      rowsMissingTaxableBase: 0,\n      rowsMissingAddress: 0,\n      nonUsdRows: 0,\n      rowsMissingPaidAt: 0,\n      rowsUnclassified: 0,\n    },\n  }\n\n  for (const row of rows ?? []) {\n    const gross = cents(row.grossCents)\n    const tax = cents(row.taxCents)\n    const lines = Array.isArray(row.taxLines) ? row.taxLines : []\n    const statedBases = lines\n      .map((line) => line?.taxableAmountCents)\n      .filter(\n        (base): base is number =>\n          base !== null && base !== undefined && Number.isFinite(Number(base)),\n      )\n    const taxableBase = statedBases.reduce(\n      (sum, base) => sum + Math.round(Number(base)),\n      0,\n    )\n\n    const jurisdiction = taxJurisdictionKey(row.customerAddress)\n    if (jurisdiction === 'unknown') summary.attention.rowsMissingAddress += 1\n    if (String(row.currency ?? 'usd').toLowerCase() !== 'usd') {\n      summary.attention.nonUsdRows += 1\n    }\n    if (!asRowDate(row.paidAt)) summary.attention.rowsMissingPaidAt += 1\n\n    // The bucket is chosen from the STORED classification, and an unfamiliar\n    // one falls through to `rowsUnclassified` rather than defaulting into a\n    // bucket — a default here would put a merchant's tax on the platform's\n    // return, or the platform's tax nowhere, and neither is allowed to happen\n    // quietly.\n    const mode = String(row.taxMode ?? '')\n    const liability = String(row.taxLiability ?? '')\n    const bucket =\n      mode === 'stripe-automatic' && liability === 'connected-account'\n        ? summary.connectedAccountLiable\n        : mode === 'stripe-automatic'\n          ? summary.aglynLiable\n          : mode === 'manual'\n            ? summary.merchantManual\n            : null\n    if (!bucket) {\n      summary.attention.rowsUnclassified += 1\n      continue\n    }\n\n    // A taxed row that cannot state the base the rate was applied to —\n    // counted ONLY for Stripe-computed tax. A manual-mode row has no Stripe\n    // base by construction (Stripe was never told the amount was tax), so\n    // flagging it here would raise a permanent alarm about a figure that can\n    // never exist, and an alarm that is always on is an alarm nobody reads.\n    if (mode === 'stripe-automatic' && tax > 0 && statedBases.length === 0) {\n      summary.attention.rowsMissingTaxableBase += 1\n    }\n\n    summary.transactionCount += 1\n    bucket.transactionCount += 1\n    bucket.grossCents += gross\n    bucket.taxableSalesCents += taxableBase\n    bucket.taxCollectedCents += tax\n    const jurisdictionBucket = (bucket.byJurisdiction[jurisdiction] ??=\n      emptyTaxJurisdiction())\n    jurisdictionBucket.transactionCount += 1\n    jurisdictionBucket.totalSalesCents += gross - tax\n    jurisdictionBucket.taxableSalesCents += taxableBase\n    jurisdictionBucket.taxCollectedCents += tax\n    // The storefront working papers (AGL-2329). Its lines carry the richer\n    // detail — `percentage`, `rateState`, `jurisdiction` — three fields the\n    // writer annotates \"for the working papers\".\n    accumulateTaxWorkingPapers(jurisdictionBucket, lines)\n  }\n\n  return summary\n}\n"],"names":["accumulateTaxWorkingPapers","asRowDate","emptyTaxJurisdiction","taxJurisdictionKey","cents","value","parsed","Number","isFinite","Math","round","emptyBucket","transactionCount","grossCents","taxableSalesCents","taxCollectedCents","byJurisdiction","storefrontTaxSummary","rows","period","summary","periodStart","start","toISOString","periodEnd","end","aglynLiable","merchantManual","connectedAccountLiable","attention","rowsMissingTaxableBase","rowsMissingAddress","nonUsdRows","rowsMissingPaidAt","rowsUnclassified","row","bucket","jurisdiction","gross","tax","taxCents","lines","Array","isArray","taxLines","statedBases","map","line","taxableAmountCents","filter","base","undefined","taxableBase","reduce","sum","customerAddress","String","currency","toLowerCase","paidAt","mode","taxMode","liability","taxLiability","length","jurisdictionBucket","totalSalesCents"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAmDC,GAED,SACEA,0BAA0B,EAC1BC,SAAS,EACTC,oBAAoB,EACpBC,kBAAkB,QAGb,kDAAiD;AAoDxD,SAASC,MAAMC,KAAc;IAC3B,MAAMC,SAASC,OAAOF,gBAAAA,QAAS;IAC/B,OAAOE,OAAOC,QAAQ,CAACF,UAAUG,KAAKC,KAAK,CAACJ,UAAU;AACxD;AAEA,SAASK;IACP,OAAO;QACLC,kBAAkB;QAClBC,YAAY;QACZC,mBAAmB;QACnBC,mBAAmB;QACnBC,gBAAgB,CAAC;IACnB;AACF;AAEA,wEAAwE,GACxE,OAAO,SAASC,qBACdC,IAA4C,EAC5CC,MAAkC;IAElC,MAAMC,UAAgC;QACpCC,aAAaF,OAAOG,KAAK,CAACC,WAAW;QACrCC,WAAWL,OAAOM,GAAG,CAACF,WAAW;QACjCX,kBAAkB;QAClBc,aAAaf;QACbgB,gBAAgBhB;QAChBiB,wBAAwBjB;QACxBkB,WAAW;YACTC,wBAAwB;YACxBC,oBAAoB;YACpBC,YAAY;YACZC,mBAAmB;YACnBC,kBAAkB;QACpB;IACF;IAEA,KAAK,MAAMC,OAAOjB,eAAAA,OAAQ,EAAE,CAAE;YAiBjBiB,eAUSA,cACKA,mBA4BGC,wBAAsBC,eAAtBD;QAvD5B,MAAME,QAAQlC,MAAM+B,IAAItB,UAAU;QAClC,MAAM0B,MAAMnC,MAAM+B,IAAIK,QAAQ;QAC9B,MAAMC,QAAQC,MAAMC,OAAO,CAACR,IAAIS,QAAQ,IAAIT,IAAIS,QAAQ,GAAG,EAAE;QAC7D,MAAMC,cAAcJ,MACjBK,GAAG,CAAC,CAACC,OAASA,wBAAAA,KAAMC,kBAAkB,EACtCC,MAAM,CACL,CAACC,OACCA,SAAS,QAAQA,SAASC,aAAa5C,OAAOC,QAAQ,CAACD,OAAO2C;QAEpE,MAAME,cAAcP,YAAYQ,MAAM,CACpC,CAACC,KAAKJ,OAASI,MAAM7C,KAAKC,KAAK,CAACH,OAAO2C,QACvC;QAGF,MAAMb,eAAelC,mBAAmBgC,IAAIoB,eAAe;QAC3D,IAAIlB,iBAAiB,WAAWjB,QAAQS,SAAS,CAACE,kBAAkB,IAAI;QACxE,IAAIyB,QAAOrB,gBAAAA,IAAIsB,QAAQ,YAAZtB,gBAAgB,OAAOuB,WAAW,OAAO,OAAO;YACzDtC,QAAQS,SAAS,CAACG,UAAU,IAAI;QAClC;QACA,IAAI,CAAC/B,UAAUkC,IAAIwB,MAAM,GAAGvC,QAAQS,SAAS,CAACI,iBAAiB,IAAI;QAEnE,yEAAyE;QACzE,wEAAwE;QACxE,uEAAuE;QACvE,0EAA0E;QAC1E,WAAW;QACX,MAAM2B,OAAOJ,QAAOrB,eAAAA,IAAI0B,OAAO,YAAX1B,eAAe;QACnC,MAAM2B,YAAYN,QAAOrB,oBAAAA,IAAI4B,YAAY,YAAhB5B,oBAAoB;QAC7C,MAAMC,SACJwB,SAAS,sBAAsBE,cAAc,sBACzC1C,QAAQQ,sBAAsB,GAC9BgC,SAAS,qBACPxC,QAAQM,WAAW,GACnBkC,SAAS,WACPxC,QAAQO,cAAc,GACtB;QACV,IAAI,CAACS,QAAQ;YACXhB,QAAQS,SAAS,CAACK,gBAAgB,IAAI;YACtC;QACF;QAEA,mEAAmE;QACnE,wEAAwE;QACxE,sEAAsE;QACtE,yEAAyE;QACzE,wEAAwE;QACxE,IAAI0B,SAAS,sBAAsBrB,MAAM,KAAKM,YAAYmB,MAAM,KAAK,GAAG;YACtE5C,QAAQS,SAAS,CAACC,sBAAsB,IAAI;QAC9C;QAEAV,QAAQR,gBAAgB,IAAI;QAC5BwB,OAAOxB,gBAAgB,IAAI;QAC3BwB,OAAOvB,UAAU,IAAIyB;QACrBF,OAAOtB,iBAAiB,IAAIsC;QAC5BhB,OAAOrB,iBAAiB,IAAIwB;QAC5B,MAAM0B,sBAAsB7B,IAAAA,CAAAA,yBAAAA,OAAOpB,cAAc,CAAA,CAACqB,gBAAAA,aAAa,YAAnCD,IAAAA,sBAAqB,CAACC,cAAa,GAC7DnC;QACF+D,mBAAmBrD,gBAAgB,IAAI;QACvCqD,mBAAmBC,eAAe,IAAI5B,QAAQC;QAC9C0B,mBAAmBnD,iBAAiB,IAAIsC;QACxCa,mBAAmBlD,iBAAiB,IAAIwB;QACxC,uEAAuE;QACvE,wEAAwE;QACxE,6CAA6C;QAC7CvC,2BAA2BiE,oBAAoBxB;IACjD;IAEA,OAAOrB;AACT"}

package/src/lib/plan-entitlements.d.ts

@@ -0,0 +1,35 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import type { PluginPlanEntitlementsDeclaration } from '@aglyn/aglyn/plugin-manager/plugin-plan-entitlements';
+/**
+ * COMMERCE'S PLAN GATES (AGL-3080): the storefront features that start above
+ * the entry tiers. Compiled into core's `PLAN_ENTITLEMENTS` by the manifest
+ * generator (`register.planEntitlements`), so the plan comparison and every
+ * gate read the answers they always have.
+ */
+declare module '@aglyn/aglyn/plugin-manager/plugin-entitlement-keys' {
+    interface PluginEntitlementFeatures {
+        /** Recurring storefront subscription products (AGL-303). */
+        storefrontSubscriptions?: boolean;
+        /** Gift cards & store credit (AGL-322). */
+        giftCards?: boolean;
+        /** Commerce analytics dashboard (AGL-327). */
+        commerceAnalytics?: boolean;
+    }
+}
+/** Commerce's plan gates, for the manifest generator. */
+export declare function commercePlanEntitlements(): PluginPlanEntitlementsDeclaration;

package/src/lib/plan-entitlements.js

@@ -0,0 +1,54 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ // Types only: the manifest generator loads this module on its own to compile
+// the plan figures, so nothing here may reach a core module at runtime.
+import { _ as _extends } from "@swc/helpers/_/_extends";
+/** Business and up. */ const FROM_BUSINESS = {
+    free: false,
+    starter: false,
+    pro: false,
+    business: true,
+    scale: true,
+    advanced: true,
+    agency: true,
+    enterprise: true
+};
+/** Pro and up. */ const FROM_PRO = _extends({}, FROM_BUSINESS, {
+    pro: true
+});
+/** Commerce's plan gates, for the manifest generator. */ export function commercePlanEntitlements() {
+    return {
+        features: [
+            {
+                key: 'storefrontSubscriptions',
+                label: 'Storefront subscriptions',
+                byPlan: FROM_BUSINESS
+            },
+            {
+                key: 'giftCards',
+                label: 'Gift cards',
+                byPlan: FROM_BUSINESS
+            },
+            {
+                key: 'commerceAnalytics',
+                label: 'Commerce analytics',
+                byPlan: FROM_PRO
+            }
+        ]
+    };
+}
+
+//# sourceMappingURL=plan-entitlements.js.map

package/src/lib/plan-entitlements.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../libs/plugins/commerce/src/lib/plan-entitlements.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n// Types only: the manifest generator loads this module on its own to compile\n// the plan figures, so nothing here may reach a core module at runtime.\nimport type { OrgPlan } from '@aglyn/aglyn/foundation/definitions/org-billing.types'\nimport type { PluginPlanEntitlementsDeclaration } from '@aglyn/aglyn/plugin-manager/plugin-plan-entitlements'\n\n/**\n * COMMERCE'S PLAN GATES (AGL-3080): the storefront features that start above\n * the entry tiers. Compiled into core's `PLAN_ENTITLEMENTS` by the manifest\n * generator (`register.planEntitlements`), so the plan comparison and every\n * gate read the answers they always have.\n */\ndeclare module '@aglyn/aglyn/plugin-manager/plugin-entitlement-keys' {\n  interface PluginEntitlementFeatures {\n    /** Recurring storefront subscription products (AGL-303). */\n    storefrontSubscriptions?: boolean\n    /** Gift cards & store credit (AGL-322). */\n    giftCards?: boolean\n    /** Commerce analytics dashboard (AGL-327). */\n    commerceAnalytics?: boolean\n  }\n}\n\n/** Business and up. */\nconst FROM_BUSINESS: Readonly<Record<OrgPlan, boolean>> = {\n  free: false,\n  starter: false,\n  pro: false,\n  business: true,\n  scale: true,\n  advanced: true,\n  agency: true,\n  enterprise: true,\n}\n\n/** Pro and up. */\nconst FROM_PRO: Readonly<Record<OrgPlan, boolean>> = {\n  ...FROM_BUSINESS,\n  pro: true,\n}\n\n/** Commerce's plan gates, for the manifest generator. */\nexport function commercePlanEntitlements(): PluginPlanEntitlementsDeclaration {\n  return {\n    features: [\n      {\n        key: 'storefrontSubscriptions',\n        label: 'Storefront subscriptions',\n        byPlan: FROM_BUSINESS,\n      },\n      { key: 'giftCards', label: 'Gift cards', byPlan: FROM_BUSINESS },\n      {\n        key: 'commerceAnalytics',\n        label: 'Commerce analytics',\n        byPlan: FROM_PRO,\n      },\n    ],\n  }\n}\n"],"names":["FROM_BUSINESS","free","starter","pro","business","scale","advanced","agency","enterprise","FROM_PRO","commercePlanEntitlements","features","key","label","byPlan"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED,6EAA6E;AAC7E,wEAAwE;;AAqBxE,qBAAqB,GACrB,MAAMA,gBAAoD;IACxDC,MAAM;IACNC,SAAS;IACTC,KAAK;IACLC,UAAU;IACVC,OAAO;IACPC,UAAU;IACVC,QAAQ;IACRC,YAAY;AACd;AAEA,gBAAgB,GAChB,MAAMC,WAA+C,aAChDT;IACHG,KAAK;;AAGP,uDAAuD,GACvD,OAAO,SAASO;IACd,OAAO;QACLC,UAAU;YACR;gBACEC,KAAK;gBACLC,OAAO;gBACPC,QAAQd;YACV;YACA;gBAAEY,KAAK;gBAAaC,OAAO;gBAAcC,QAAQd;YAAc;YAC/D;gBACEY,KAAK;gBACLC,OAAO;gBACPC,QAAQL;YACV;SACD;IACH;AACF"}

package/src/lib/plugin.js

@@ -22,6 +22,9 @@ const NewestSiteUsersCard = lazy(()=>import("./components/console/newest-site-us
 import { COMMERCE_CONSOLE_SECTIONS } from "./components/commerce-console-sections.js";
 import { BUNDLE_ID } from "./constants/bundle-common.js";
 import { COMMERCE_PERMISSIONS } from "./model/plugin-permissions.js";
+import { registerCommerceRecordRoutes } from "./model/commerce-record-routes.js";
+import { registerCommerceZones } from "./components/console/product-zones.js";
+import { COMMERCE_SEARCH_SOURCES } from "./model/commerce-search-sources.js";
 import { COMMERCE_CONFIG_SCHEMA } from "./plugin-config.js";
 /** Code-split: the Products console page only loads when opened. */ const CommerceConsolePage = lazy(()=>import("./components/commerce-console-page.js"));
 /**
@@ -34,6 +37,11 @@ import { COMMERCE_CONFIG_SCHEMA } from "./plugin-config.js";
  * tracked as follow-up. The nav item omits a `Component`, so the shell's
  * nav renders the link and the existing named route serves the page.
  */ export function registerCommerceConsole() {
+    // Where a product is read, for surfaces outside this plugin (AGL-3080).
+    registerCommerceRecordRoutes();
+    // The zones its product editor, products hub and CSV import dialog host,
+    // with the props each hands a widget (AGL-2916, AGL-3080).
+    registerCommerceZones();
     // Plugin-declared permissions (AGL-435): tier defaults ride every
     // resolved role set; custom roles override key-by-key.
     Aglyn.registerPluginPermissions(COMMERCE_PERMISSIONS);
@@ -43,6 +51,7 @@ import { COMMERCE_CONFIG_SCHEMA } from "./plugin-config.js";
     Aglyn.registerConsoleExtension({
         pluginId: BUNDLE_ID,
         displayName: 'Commerce',
+        searchSources: COMMERCE_SEARCH_SOURCES,
         // Dashboard/analytics glance card (AGL-419): rendered through the
         // shell's 'commerceGlance' widget slot.
         widgets: [