@aglyn/plugins-inbox 1.0.0-beta.143

package/src/lib/model/submission-presenter.js

@@ -0,0 +1,152 @@
+import { _ as _extends } from "@swc/helpers/_/_extends";
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ /**
+ * How the Inbox renders one submission (AGL-2168).
+ *
+ * `/product/forms`'s hero mockup IS the Inbox, and it shows every row as a
+ * person: a coloured initials avatar, `Priya Nair`, the form name, and
+ * `2m`. The console rendered no sender at all — the row's one content cell
+ * was every field concatenated as `name: Priya Nair · email: … · message:
+ * …`, so the name was in there somewhere, at the mercy of whatever order
+ * the author happened to define the fields in.
+ */ /**
+ * Field names that mean "this is who submitted it", most specific first.
+ *
+ * Compared against a key REDUCED to lowercase letters and digits, because
+ * the same field reaches us as `Full Name`, `full_name` and `fullname`
+ * depending on who built the form — and an exact-match lookup silently
+ * finds none of the three.
+ */ const NAME_KEYS = [
+    'name',
+    'fullname',
+    'yourname',
+    'firstname',
+    'contactname'
+];
+const EMAIL_KEYS = [
+    'email',
+    'emailaddress'
+];
+/** Reduced key → the value the author submitted. */ function normalizeKeys(fields) {
+    const map = new Map();
+    for (const [key, value] of Object.entries(fields != null ? fields : {})){
+        const text = String(value != null ? value : '').trim();
+        if (!text) continue;
+        const reduced = key.toLowerCase().replace(/[^a-z0-9]/g, '');
+        // First spelling wins, so `name` beats a later `Name`.
+        if (!map.has(reduced)) map.set(reduced, text);
+    }
+    return map;
+}
+/**
+ * Who sent it.
+ *
+ * A form is author-defined, so there is no guaranteed name field — the
+ * lookup is by convention and falls back to the email, then to the form's
+ * own name. It never returns an empty string: an avatar with no letters in
+ * it is worse than a generic one.
+ */ export function submissionSender(fields, fallback = 'Someone') {
+    var _ref;
+    const map = normalizeKeys(fields);
+    const email = EMAIL_KEYS.map((key)=>map.get(key)).find(Boolean);
+    const name = NAME_KEYS.map((key)=>map.get(key)).find(Boolean);
+    const label = (_ref = name != null ? name : email) != null ? _ref : fallback;
+    return _extends({
+        label
+    }, email ? {
+        email
+    } : {}, {
+        initials: initialsOf(label)
+    });
+}
+/**
+ * Up to two initials. An email falls back to its local part, so
+ * `priya@lumen.co` gives `P` rather than a `@`.
+ */ export function initialsOf(label) {
+    const trimmed = String(label != null ? label : '').trim();
+    const source = trimmed.includes('@') ? trimmed.split('@')[0] : trimmed;
+    const words = source.split(/[\s._-]+/).map((word)=>word.trim()).filter(Boolean);
+    const letters = words.slice(0, 2).map((word)=>word[0]).join('');
+    return (letters || source[0] || '?').toUpperCase();
+}
+/**
+ * A deterministic hue for the avatar, so one sender keeps one colour
+ * across sessions and machines. The mockup's avatars are coloured, and a
+ * random palette index would make the same person a different colour on
+ * every render.
+ */ export function senderHue(label) {
+    let hash = 0;
+    for(let index = 0; index < label.length; index += 1){
+        hash = (hash * 31 + label.charCodeAt(index)) % 360;
+    }
+    return hash;
+}
+/**
+ * `2m`, `18m`, `1h`, `3d` — the relative times the mockup's list shows.
+ *
+ * The console rendered `toLocaleString()`, which is the right answer to a
+ * different question: an inbox is scanned for recency, and "8/18/2026,
+ * 2:04:31 PM" makes the reader do the subtraction. The absolute time stays
+ * on the detail pane, where it is the fact you actually want.
+ */ export function relativeTime(atMs, nowMs = Date.now()) {
+    if (!atMs || !Number.isFinite(atMs)) return '--';
+    const seconds = Math.round((nowMs - atMs) / 1000);
+    // A clock skew between the browser and the server can put a fresh
+    // submission a few seconds in the future. "in 4 seconds" on an inbox row
+    // is a bug report waiting to happen; "now" is simply true.
+    if (seconds < 60) return 'now';
+    const minutes = Math.floor(seconds / 60);
+    if (minutes < 60) return `${minutes}m`;
+    const hours = Math.floor(minutes / 60);
+    if (hours < 24) return `${hours}h`;
+    const days = Math.floor(hours / 24);
+    if (days < 7) return `${days}d`;
+    const weeks = Math.floor(days / 7);
+    if (weeks < 5) return `${weeks}w`;
+    return `${Math.floor(days / 30)}mo`;
+}
+/**
+ * The status chips the mockup's detail pane carries under the fields:
+ * `Saved to Inbox` (green) and `Added to "Leads" dataset` (blue).
+ *
+ * The first is unconditional and free — every submission that exists is in
+ * the Inbox, which is exactly why the mockup shows it: it is the
+ * reassurance, not a status.
+ *
+ * The second reports what the submit route actually DID. It is stamped on
+ * the document only when a record was really appended, so a form bound to
+ * a dataset that was deleted, or whose record quota was full, shows no chip
+ * rather than a chip for a row that does not exist — the two failure modes
+ * the route already swallows silently.
+ */ export function routingChips(routing) {
+    const chips = [
+        {
+            label: 'Saved to Inbox',
+            color: 'success'
+        }
+    ];
+    const dataset = routing == null ? void 0 : routing.dataset;
+    if (dataset == null ? void 0 : dataset.recordId) {
+        chips.push({
+            label: dataset.name ? `Added to “${dataset.name}” dataset` : 'Added to a dataset',
+            color: 'info'
+        });
+    }
+    return chips;
+}
+
+//# sourceMappingURL=submission-presenter.js.map

package/src/lib/model/submission-presenter.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../libs/plugins/inbox/src/lib/model/submission-presenter.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n/**\n * How the Inbox renders one submission (AGL-2168).\n *\n * `/product/forms`'s hero mockup IS the Inbox, and it shows every row as a\n * person: a coloured initials avatar, `Priya Nair`, the form name, and\n * `2m`. The console rendered no sender at all — the row's one content cell\n * was every field concatenated as `name: Priya Nair · email: … · message:\n * …`, so the name was in there somewhere, at the mercy of whatever order\n * the author happened to define the fields in.\n */\n\n/**\n * Field names that mean \"this is who submitted it\", most specific first.\n *\n * Compared against a key REDUCED to lowercase letters and digits, because\n * the same field reaches us as `Full Name`, `full_name` and `fullname`\n * depending on who built the form — and an exact-match lookup silently\n * finds none of the three.\n */\nconst NAME_KEYS = ['name', 'fullname', 'yourname', 'firstname', 'contactname']\n\nconst EMAIL_KEYS = ['email', 'emailaddress']\n\n/** Reduced key → the value the author submitted. */\nfunction normalizeKeys(\n  fields: Record<string, unknown> | undefined,\n): Map<string, string> {\n  const map = new Map<string, string>()\n  for (const [key, value] of Object.entries(fields ?? {})) {\n    const text = String(value ?? '').trim()\n    if (!text) continue\n    const reduced = key.toLowerCase().replace(/[^a-z0-9]/g, '')\n    // First spelling wins, so `name` beats a later `Name`.\n    if (!map.has(reduced)) map.set(reduced, text)\n  }\n  return map\n}\n\nexport interface SubmissionSender {\n  /** Best available display name — a name, else an email, else a fallback. */\n  label: string\n  /** The email, when one was submitted. */\n  email?: string\n  /** One or two letters for the avatar. */\n  initials: string\n}\n\n/**\n * Who sent it.\n *\n * A form is author-defined, so there is no guaranteed name field — the\n * lookup is by convention and falls back to the email, then to the form's\n * own name. It never returns an empty string: an avatar with no letters in\n * it is worse than a generic one.\n */\nexport function submissionSender(\n  fields: Record<string, unknown> | undefined,\n  fallback = 'Someone',\n): SubmissionSender {\n  const map = normalizeKeys(fields)\n  const email = EMAIL_KEYS.map((key) => map.get(key)).find(Boolean)\n  const name = NAME_KEYS.map((key) => map.get(key)).find(Boolean)\n  const label = name ?? email ?? fallback\n  return { label, ...(email ? { email } : {}), initials: initialsOf(label) }\n}\n\n/**\n * Up to two initials. An email falls back to its local part, so\n * `priya@lumen.co` gives `P` rather than a `@`.\n */\nexport function initialsOf(label: string): string {\n  const trimmed = String(label ?? '').trim()\n  const source = trimmed.includes('@') ? trimmed.split('@')[0] : trimmed\n  const words = source\n    .split(/[\\s._-]+/)\n    .map((word) => word.trim())\n    .filter(Boolean)\n  const letters = words\n    .slice(0, 2)\n    .map((word) => word[0])\n    .join('')\n  return (letters || source[0] || '?').toUpperCase()\n}\n\n/**\n * A deterministic hue for the avatar, so one sender keeps one colour\n * across sessions and machines. The mockup's avatars are coloured, and a\n * random palette index would make the same person a different colour on\n * every render.\n */\nexport function senderHue(label: string): number {\n  let hash = 0\n  for (let index = 0; index < label.length; index += 1) {\n    hash = (hash * 31 + label.charCodeAt(index)) % 360\n  }\n  return hash\n}\n\n/**\n * `2m`, `18m`, `1h`, `3d` — the relative times the mockup's list shows.\n *\n * The console rendered `toLocaleString()`, which is the right answer to a\n * different question: an inbox is scanned for recency, and \"8/18/2026,\n * 2:04:31 PM\" makes the reader do the subtraction. The absolute time stays\n * on the detail pane, where it is the fact you actually want.\n */\nexport function relativeTime(\n  atMs: number | undefined,\n  nowMs: number = Date.now(),\n): string {\n  if (!atMs || !Number.isFinite(atMs)) return '--'\n  const seconds = Math.round((nowMs - atMs) / 1000)\n  // A clock skew between the browser and the server can put a fresh\n  // submission a few seconds in the future. \"in 4 seconds\" on an inbox row\n  // is a bug report waiting to happen; \"now\" is simply true.\n  if (seconds < 60) return 'now'\n  const minutes = Math.floor(seconds / 60)\n  if (minutes < 60) return `${minutes}m`\n  const hours = Math.floor(minutes / 60)\n  if (hours < 24) return `${hours}h`\n  const days = Math.floor(hours / 24)\n  if (days < 7) return `${days}d`\n  const weeks = Math.floor(days / 7)\n  if (weeks < 5) return `${weeks}w`\n  return `${Math.floor(days / 30)}mo`\n}\n\nexport interface SubmissionRouting {\n  /** The dataset a record was appended to, when one was. */\n  dataset?: { id?: string; name?: string; recordId?: string }\n}\n\nexport interface RoutingChip {\n  label: string\n  color: 'success' | 'info' | 'default'\n}\n\n/**\n * The status chips the mockup's detail pane carries under the fields:\n * `Saved to Inbox` (green) and `Added to \"Leads\" dataset` (blue).\n *\n * The first is unconditional and free — every submission that exists is in\n * the Inbox, which is exactly why the mockup shows it: it is the\n * reassurance, not a status.\n *\n * The second reports what the submit route actually DID. It is stamped on\n * the document only when a record was really appended, so a form bound to\n * a dataset that was deleted, or whose record quota was full, shows no chip\n * rather than a chip for a row that does not exist — the two failure modes\n * the route already swallows silently.\n */\nexport function routingChips(routing: SubmissionRouting | undefined): RoutingChip[] {\n  const chips: RoutingChip[] = [{ label: 'Saved to Inbox', color: 'success' }]\n  const dataset = routing?.dataset\n  if (dataset?.recordId) {\n    chips.push({\n      label: dataset.name\n        ? `Added to “${dataset.name}” dataset`\n        : 'Added to a dataset',\n      color: 'info',\n    })\n  }\n  return chips\n}\n"],"names":["NAME_KEYS","EMAIL_KEYS","normalizeKeys","fields","map","Map","key","value","Object","entries","text","String","trim","reduced","toLowerCase","replace","has","set","submissionSender","fallback","name","email","get","find","Boolean","label","initials","initialsOf","trimmed","source","includes","split","words","word","filter","letters","slice","join","toUpperCase","senderHue","hash","index","length","charCodeAt","relativeTime","atMs","nowMs","Date","now","Number","isFinite","seconds","Math","round","minutes","floor","hours","days","weeks","routingChips","routing","chips","color","dataset","recordId","push"],"mappings":";AAAA;;;;;;;;;;;;;;;CAeC,GAED;;;;;;;;;CASC,GAED;;;;;;;CAOC,GACD,MAAMA,YAAY;IAAC;IAAQ;IAAY;IAAY;IAAa;CAAc;AAE9E,MAAMC,aAAa;IAAC;IAAS;CAAe;AAE5C,kDAAkD,GAClD,SAASC,cACPC,MAA2C;IAE3C,MAAMC,MAAM,IAAIC;IAChB,KAAK,MAAM,CAACC,KAAKC,MAAM,IAAIC,OAAOC,OAAO,CAACN,iBAAAA,SAAU,CAAC,GAAI;QACvD,MAAMO,OAAOC,OAAOJ,gBAAAA,QAAS,IAAIK,IAAI;QACrC,IAAI,CAACF,MAAM;QACX,MAAMG,UAAUP,IAAIQ,WAAW,GAAGC,OAAO,CAAC,cAAc;QACxD,uDAAuD;QACvD,IAAI,CAACX,IAAIY,GAAG,CAACH,UAAUT,IAAIa,GAAG,CAACJ,SAASH;IAC1C;IACA,OAAON;AACT;AAWA;;;;;;;CAOC,GACD,OAAO,SAASc,iBACdf,MAA2C,EAC3CgB,WAAW,SAAS;QAKNC;IAHd,MAAMhB,MAAMF,cAAcC;IAC1B,MAAMkB,QAAQpB,WAAWG,GAAG,CAAC,CAACE,MAAQF,IAAIkB,GAAG,CAAChB,MAAMiB,IAAI,CAACC;IACzD,MAAMJ,OAAOpB,UAAUI,GAAG,CAAC,CAACE,MAAQF,IAAIkB,GAAG,CAAChB,MAAMiB,IAAI,CAACC;IACvD,MAAMC,SAAQL,OAAAA,eAAAA,OAAQC,iBAARD,OAAiBD;IAC/B,OAAO;QAAEM;OAAWJ,QAAQ;QAAEA;IAAM,IAAI,CAAC;QAAIK,UAAUC,WAAWF;;AACpE;AAEA;;;CAGC,GACD,OAAO,SAASE,WAAWF,KAAa;IACtC,MAAMG,UAAUjB,OAAOc,gBAAAA,QAAS,IAAIb,IAAI;IACxC,MAAMiB,SAASD,QAAQE,QAAQ,CAAC,OAAOF,QAAQG,KAAK,CAAC,IAAI,CAAC,EAAE,GAAGH;IAC/D,MAAMI,QAAQH,OACXE,KAAK,CAAC,YACN3B,GAAG,CAAC,CAAC6B,OAASA,KAAKrB,IAAI,IACvBsB,MAAM,CAACV;IACV,MAAMW,UAAUH,MACbI,KAAK,CAAC,GAAG,GACThC,GAAG,CAAC,CAAC6B,OAASA,IAAI,CAAC,EAAE,EACrBI,IAAI,CAAC;IACR,OAAO,AAACF,CAAAA,WAAWN,MAAM,CAAC,EAAE,IAAI,GAAE,EAAGS,WAAW;AAClD;AAEA;;;;;CAKC,GACD,OAAO,SAASC,UAAUd,KAAa;IACrC,IAAIe,OAAO;IACX,IAAK,IAAIC,QAAQ,GAAGA,QAAQhB,MAAMiB,MAAM,EAAED,SAAS,EAAG;QACpDD,OAAO,AAACA,CAAAA,OAAO,KAAKf,MAAMkB,UAAU,CAACF,MAAK,IAAK;IACjD;IACA,OAAOD;AACT;AAEA;;;;;;;CAOC,GACD,OAAO,SAASI,aACdC,IAAwB,EACxBC,QAAgBC,KAAKC,GAAG,EAAE;IAE1B,IAAI,CAACH,QAAQ,CAACI,OAAOC,QAAQ,CAACL,OAAO,OAAO;IAC5C,MAAMM,UAAUC,KAAKC,KAAK,CAAC,AAACP,CAAAA,QAAQD,IAAG,IAAK;IAC5C,kEAAkE;IAClE,yEAAyE;IACzE,2DAA2D;IAC3D,IAAIM,UAAU,IAAI,OAAO;IACzB,MAAMG,UAAUF,KAAKG,KAAK,CAACJ,UAAU;IACrC,IAAIG,UAAU,IAAI,OAAO,GAAGA,QAAQ,CAAC,CAAC;IACtC,MAAME,QAAQJ,KAAKG,KAAK,CAACD,UAAU;IACnC,IAAIE,QAAQ,IAAI,OAAO,GAAGA,MAAM,CAAC,CAAC;IAClC,MAAMC,OAAOL,KAAKG,KAAK,CAACC,QAAQ;IAChC,IAAIC,OAAO,GAAG,OAAO,GAAGA,KAAK,CAAC,CAAC;IAC/B,MAAMC,QAAQN,KAAKG,KAAK,CAACE,OAAO;IAChC,IAAIC,QAAQ,GAAG,OAAO,GAAGA,MAAM,CAAC,CAAC;IACjC,OAAO,GAAGN,KAAKG,KAAK,CAACE,OAAO,IAAI,EAAE,CAAC;AACrC;AAYA;;;;;;;;;;;;;CAaC,GACD,OAAO,SAASE,aAAaC,OAAsC;IACjE,MAAMC,QAAuB;QAAC;YAAEpC,OAAO;YAAkBqC,OAAO;QAAU;KAAE;IAC5E,MAAMC,UAAUH,2BAAAA,QAASG,OAAO;IAChC,IAAIA,2BAAAA,QAASC,QAAQ,EAAE;QACrBH,MAAMI,IAAI,CAAC;YACTxC,OAAOsC,QAAQ3C,IAAI,GACf,CAAC,UAAU,EAAE2C,QAAQ3C,IAAI,CAAC,SAAS,CAAC,GACpC;YACJ0C,OAAO;QACT;IACF;IACA,OAAOD;AACT"}

package/src/lib/plugin.d.ts

@@ -0,0 +1,25 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+/**
+ * Inbox feature plugin (AGL-395). Console-only — form submissions, site
+ * members/leads and campaigns live in Firestore and have no canvas element,
+ * so there is no UI bundle. The console half declares the Inbox nav + its
+ * three sections through the ConsoleExtension registry (always-on). The
+ * Campaigns section and the attribution shown inside a submission are zones
+ * this plugin hosts; the plugin that owns campaigns draws in them.
+ */
+export declare function registerInboxConsole(): void;

package/src/lib/plugin.js

@@ -0,0 +1,102 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ import * as Aglyn from "@aglyn/aglyn";
+import { mdiInboxArrowDown } from "@aglyn/shared-data-mdi";
+import { lazy } from "react";
+import { INBOX_CONSOLE_SECTIONS } from "./components/inbox-console-sections.js";
+import { registerPluginZone } from "@aglyn/aglyn/plugin-manager/plugin-zones";
+import { INBOX_CAMPAIGNS_ZONE, INBOX_RECORD_ATTRIBUTION_ZONE } from "./components/inbox-attribution-zone.js";
+import { BUNDLE_ID } from "./constants/bundle-common.js";
+/** Code-split: the Inbox console page only loads when opened. */ const InboxConsolePage = lazy(()=>import("./components/inbox-console-page.js"));
+/**
+ * Code-split: the submissions table loads when a form page asks for it. The
+ * zone hands `hostId` and `formId`, which is what the table's own props are.
+ */ const FormSubmissionsReader = lazy(()=>import("./components/submissions-card.component.js"));
+/** Dashboard glance card, loaded only where the shell renders the slot. */ const InboxGlanceCard = lazy(()=>import("./components/inbox-glance-card.component.js"));
+/**
+ * Inbox feature plugin (AGL-395). Console-only — form submissions, site
+ * members/leads and campaigns live in Firestore and have no canvas element,
+ * so there is no UI bundle. The console half declares the Inbox nav + its
+ * three sections through the ConsoleExtension registry (always-on). The
+ * Campaigns section and the attribution shown inside a submission are zones
+ * this plugin hosts; the plugin that owns campaigns draws in them.
+ */ export function registerInboxConsole() {
+    registerPluginZone({
+        zone: INBOX_RECORD_ATTRIBUTION_ZONE,
+        label: 'Where a lead or a submission came from',
+        surface: 'console',
+        description: 'In a lead’s “Where this came from” dialog and under an open submission. A widget here says which campaign or link brought it; it is handed the site, what the record is and its id, and it writes nothing.'
+    }, // Named, because a spec calls this registrar without the loader.
+    {
+        pluginId: BUNDLE_ID
+    });
+    registerPluginZone({
+        zone: INBOX_CAMPAIGNS_ZONE,
+        label: 'The Inbox’s Campaigns section',
+        surface: 'console',
+        description: 'The body of the Inbox’s Campaigns tab. A widget here lists the site’s campaigns; it is handed the site and nothing else.'
+    }, {
+        pluginId: BUNDLE_ID
+    });
+    Aglyn.registerConsoleExtension({
+        pluginId: BUNDLE_ID,
+        displayName: 'Inbox',
+        // The host dashboard's inbox glance. A form submission is the one thing
+        // on a site that is waiting for a REPLY, and until this it was two
+        // clicks from the page an owner opens first.
+        widgets: [
+            {
+                slot: Aglyn.CONSOLE_WIDGET_SLOTS.hostDashboard,
+                widgetId: 'inbox-glance',
+                title: 'Inbox',
+                Component: InboxGlanceCard
+            },
+            // One form's submissions, on the form's own page. The forms plugin
+            // hosts the zone and hands it the site and the form; the reader is this
+            // plugin's table, narrowed to that form, so the form page gets the same
+            // ordered, paged walk the Inbox uses without importing it.
+            {
+                slot: 'formSubmissions',
+                widgetId: 'inbox-form-submissions',
+                title: 'Submissions',
+                Component: FormSubmissionsReader
+            }
+        ],
+        navItems: [
+            {
+                label: 'Inbox',
+                href: '/inbox',
+                // Sections as ROUTES (AGL-2501): each is a real URL the shell
+                // resolves and gates, so the page mounts the one being read.
+                sections: INBOX_CONSOLE_SECTIONS,
+                navTabId: 'nav-tab-inbox',
+                icon: {
+                    path: mdiInboxArrowDown.path
+                },
+                header: {
+                    title: 'Inbox',
+                    icon: {
+                        path: mdiInboxArrowDown.path
+                    },
+                    docsTopic: 'forms'
+                },
+                Component: InboxConsolePage
+            }
+        ]
+    });
+}
+
+//# sourceMappingURL=plugin.js.map

package/src/lib/plugin.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../libs/plugins/inbox/src/lib/plugin.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport * as Aglyn from '@aglyn/aglyn'\nimport { mdiInboxArrowDown } from '@aglyn/shared-data-mdi'\nimport { lazy } from 'react'\nimport { INBOX_CONSOLE_SECTIONS } from './components/inbox-console-sections'\nimport { registerPluginZone } from '@aglyn/aglyn/plugin-manager/plugin-zones'\nimport {\n  INBOX_CAMPAIGNS_ZONE,\n  INBOX_RECORD_ATTRIBUTION_ZONE,\n} from './components/inbox-attribution-zone'\nimport { BUNDLE_ID } from './constants/bundle-common'\n\n/** Code-split: the Inbox console page only loads when opened. */\nconst InboxConsolePage = lazy(() => import('./components/inbox-console-page'))\n\n/**\n * Code-split: the submissions table loads when a form page asks for it. The\n * zone hands `hostId` and `formId`, which is what the table's own props are.\n */\nconst FormSubmissionsReader = lazy(\n  () => import('./components/submissions-card.component'),\n)\n\n/** Dashboard glance card, loaded only where the shell renders the slot. */\nconst InboxGlanceCard = lazy(\n  () => import('./components/inbox-glance-card.component'),\n)\n\n/**\n * Inbox feature plugin (AGL-395). Console-only — form submissions, site\n * members/leads and campaigns live in Firestore and have no canvas element,\n * so there is no UI bundle. The console half declares the Inbox nav + its\n * three sections through the ConsoleExtension registry (always-on). The\n * Campaigns section and the attribution shown inside a submission are zones\n * this plugin hosts; the plugin that owns campaigns draws in them.\n */\nexport function registerInboxConsole(): void {\n  registerPluginZone(\n    {\n      zone: INBOX_RECORD_ATTRIBUTION_ZONE,\n      label: 'Where a lead or a submission came from',\n      surface: 'console',\n      description:\n        'In a lead’s “Where this came from” dialog and under an open submission. A widget here says which campaign or link brought it; it is handed the site, what the record is and its id, and it writes nothing.',\n    },\n    // Named, because a spec calls this registrar without the loader.\n    { pluginId: BUNDLE_ID },\n  )\n  registerPluginZone(\n    {\n      zone: INBOX_CAMPAIGNS_ZONE,\n      label: 'The Inbox’s Campaigns section',\n      surface: 'console',\n      description:\n        'The body of the Inbox’s Campaigns tab. A widget here lists the site’s campaigns; it is handed the site and nothing else.',\n    },\n    { pluginId: BUNDLE_ID },\n  )\n  Aglyn.registerConsoleExtension({\n    pluginId: BUNDLE_ID,\n    displayName: 'Inbox',\n    // The host dashboard's inbox glance. A form submission is the one thing\n    // on a site that is waiting for a REPLY, and until this it was two\n    // clicks from the page an owner opens first.\n    widgets: [\n      {\n        slot: Aglyn.CONSOLE_WIDGET_SLOTS.hostDashboard,\n        widgetId: 'inbox-glance',\n        title: 'Inbox',\n        Component: InboxGlanceCard,\n      },\n      // One form's submissions, on the form's own page. The forms plugin\n      // hosts the zone and hands it the site and the form; the reader is this\n      // plugin's table, narrowed to that form, so the form page gets the same\n      // ordered, paged walk the Inbox uses without importing it.\n      {\n        slot: 'formSubmissions',\n        widgetId: 'inbox-form-submissions',\n        title: 'Submissions',\n        Component: FormSubmissionsReader,\n      },\n    ],\n    navItems: [\n      {\n        label: 'Inbox',\n        href: '/inbox',\n        // Sections as ROUTES (AGL-2501): each is a real URL the shell\n        // resolves and gates, so the page mounts the one being read.\n        sections: INBOX_CONSOLE_SECTIONS,\n        navTabId: 'nav-tab-inbox',\n        icon: { path: mdiInboxArrowDown.path },\n        header: {\n          title: 'Inbox',\n          icon: { path: mdiInboxArrowDown.path },\n          docsTopic: 'forms',\n        },\n        Component: InboxConsolePage,\n      },\n    ],\n  })\n}\n"],"names":["Aglyn","mdiInboxArrowDown","lazy","INBOX_CONSOLE_SECTIONS","registerPluginZone","INBOX_CAMPAIGNS_ZONE","INBOX_RECORD_ATTRIBUTION_ZONE","BUNDLE_ID","InboxConsolePage","FormSubmissionsReader","InboxGlanceCard","registerInboxConsole","zone","label","surface","description","pluginId","registerConsoleExtension","displayName","widgets","slot","CONSOLE_WIDGET_SLOTS","hostDashboard","widgetId","title","Component","navItems","href","sections","navTabId","icon","path","header","docsTopic"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED,YAAYA,WAAW,eAAc;AACrC,SAASC,iBAAiB,QAAQ,yBAAwB;AAC1D,SAASC,IAAI,QAAQ,QAAO;AAC5B,SAASC,sBAAsB,QAAQ,yCAAqC;AAC5E,SAASC,kBAAkB,QAAQ,2CAA0C;AAC7E,SACEC,oBAAoB,EACpBC,6BAA6B,QACxB,yCAAqC;AAC5C,SAASC,SAAS,QAAQ,+BAA2B;AAErD,+DAA+D,GAC/D,MAAMC,mBAAmBN,KAAK,IAAM,MAAM,CAAC;AAE3C;;;CAGC,GACD,MAAMO,wBAAwBP,KAC5B,IAAM,MAAM,CAAC;AAGf,yEAAyE,GACzE,MAAMQ,kBAAkBR,KACtB,IAAM,MAAM,CAAC;AAGf;;;;;;;CAOC,GACD,OAAO,SAASS;IACdP,mBACE;QACEQ,MAAMN;QACNO,OAAO;QACPC,SAAS;QACTC,aACE;IACJ,GACA,iEAAiE;IACjE;QAAEC,UAAUT;IAAU;IAExBH,mBACE;QACEQ,MAAMP;QACNQ,OAAO;QACPC,SAAS;QACTC,aACE;IACJ,GACA;QAAEC,UAAUT;IAAU;IAExBP,MAAMiB,wBAAwB,CAAC;QAC7BD,UAAUT;QACVW,aAAa;QACb,wEAAwE;QACxE,mEAAmE;QACnE,6CAA6C;QAC7CC,SAAS;YACP;gBACEC,MAAMpB,MAAMqB,oBAAoB,CAACC,aAAa;gBAC9CC,UAAU;gBACVC,OAAO;gBACPC,WAAWf;YACb;YACA,mEAAmE;YACnE,wEAAwE;YACxE,wEAAwE;YACxE,2DAA2D;YAC3D;gBACEU,MAAM;gBACNG,UAAU;gBACVC,OAAO;gBACPC,WAAWhB;YACb;SACD;QACDiB,UAAU;YACR;gBACEb,OAAO;gBACPc,MAAM;gBACN,8DAA8D;gBAC9D,6DAA6D;gBAC7DC,UAAUzB;gBACV0B,UAAU;gBACVC,MAAM;oBAAEC,MAAM9B,kBAAkB8B,IAAI;gBAAC;gBACrCC,QAAQ;oBACNR,OAAO;oBACPM,MAAM;wBAAEC,MAAM9B,kBAAkB8B,IAAI;oBAAC;oBACrCE,WAAW;gBACb;gBACAR,WAAWjB;YACb;SACD;IACH;AACF"}

package/src/lib/server.d.ts

@@ -0,0 +1,179 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+/**
+ * The Inbox's two acts on the person who sent a submission: answer them, and
+ * put them on a marketing list.
+ *
+ * `POST inbox/reply` sends one message. `POST inbox/assign-list` enrolls, and
+ * `POST inbox/list-options` tells the merchant what they may do before they
+ * do it.
+ *
+ * ## The two acts are kept apart everywhere
+ *
+ * A reply is TRANSACTIONAL — the person asked to be contacted by submitting
+ * the form, and answering them is the transaction they started. A list is
+ * MARKETING — a standing invitation to mail them about things they never
+ * asked about. So they are separate routes, separate records and separate
+ * cards on screen, and neither is a side effect of the other: replying
+ * enrolls nobody and writes no consent, and enrolling sends nothing and
+ * meters nothing. Folding either into the other would make a merchant's
+ * ordinary act of answering a customer into an act with consequences they
+ * did not choose. The enrollment rule itself is the framework's
+ * `list-assignment-policy`, shared with the Emails console's audience card so
+ * that both surfaces refuse the same people for the same stated reasons.
+ *
+ * ## The boundary this feature sits on, stated because the UI must say it too
+ *
+ * The Inbox is not a mailbox. Nothing in the INBOX receives mail: no route
+ * of its own, no MX record pointed at a submission, no parser. A submission
+ * arrived as an HTTP POST, not as a message, so there is no `Message-ID` to
+ * thread against and a reply is always the FIRST message in its conversation.
+ * (The platform's one receiving door is the CRM's capture address —
+ * `POST /api/crm/inbound` in the console app, AGL-2657 — which files a
+ * forwarded or copied message on a contact's timeline. It threads nothing
+ * here: a submission is not mail, and the Inbox's statement stands.)
+ *
+ * That decides two things:
+ *
+ * - **No `In-Reply-To` or `References` header is sent.** There is nothing to
+ *   put in them. Inventing an identifier would produce headers that reference
+ *   a message no mail server has ever seen, which threads nothing and makes
+ *   some filters treat the message as forged.
+ * - **`Reply-To` is the sender's own console account address**, so when the
+ *   recipient answers, the answer reaches a human in a real mailbox. It does
+ *   not come back here, and the composer says so. A reply that went to the
+ *   platform's unmonitored address would be a message the merchant never sees
+ *   and the customer believes was received.
+ *
+ * The thread the merchant sees is ours, stored under the submission, and it
+ * holds what we sent — never what came back, because nothing comes back.
+ *
+ * ## Sending identity
+ *
+ * The `From:` address is whatever THIS SITE sends as — `hostSendingIdentity`,
+ * the same resolution a campaign gets — so a site with a domain of its own
+ * replies on it, and a site without one replies on the shared pool, which is
+ * correct for a reply because a reply is transactional.
+ *
+ * The display name varies separately, through `resolveBrandingProfile`, which
+ * is entitlement-gated: a merchant without white-label replies under the
+ * platform's name even on their own domain.
+ *
+ * `Reply-To` stays load-bearing either way, and not as a stopgap. Nothing
+ * here receives mail, so the answer has to be routed to a mailbox somebody
+ * actually reads — and `Reply-To` is the one header that may name an address
+ * on a domain this platform has never verified.
+ *
+ * ## Consent and suppression
+ *
+ * A reply is transactional: the recipient asked to be contacted by submitting
+ * the form, so no marketing-consent record is required and none is read. The
+ * suppression lists still apply — both of them — and this is the first send
+ * path in the product to consult BOTH on one address:
+ *
+ * - the platform list, through `isEmailSuppressed`, which fails closed;
+ * - this site's list, under `hosts/{hostId}/suppressions`.
+ *
+ * Both are keyed with `emailSuppressionKey`, one derivation, so the two reads
+ * cannot disagree about which document to look for.
+ */
+import { type PluginApiHandler } from '@aglyn/aglyn/server';
+import { type ReplyRefusal } from './model/reply-policy';
+/** Where a reply is stored, under the submission it answers. */
+export declare const REPLIES_SUBCOLLECTION = "replies";
+/** `context` on the send: the log label and the Resend attribution tag. */
+export declare const REPLY_CONTEXT = "inbox-reply";
+/**
+ * Is this address suppressed, on either list?
+ *
+ * Order matters only for the reason reported, not the outcome. The platform
+ * list is read first because it is the one that carries a bounce learned
+ * anywhere — including on a send that named no site — and that is the more
+ * useful thing to tell a merchant who is about to retype the message.
+ *
+ * Named for the ADDRESS rather than for either act, because both use it: a
+ * reply must not go to a dead or complaining mailbox, and a list enrollment
+ * must not put one on a standing audience. A second copy for the second act
+ * would be two answers to "may this address be mailed".
+ */
+export declare function addressSuppression(hostId: string, email: string, firestore?: unknown): Promise<ReplyRefusal | null>;
+/**
+ * Reply to one submission.
+ *
+ * Body: `{ hostId, submissionId, subject, message }`. The recipient is
+ * deliberately absent — it is read off the stored submission, so this route
+ * cannot be pointed at an address of the caller's choosing.
+ */
+export declare const inboxReplyHandler: PluginApiHandler;
+/** Where an assignment is recorded, under the submission that occasioned it. */
+export declare const LIST_ASSIGNMENTS_SUBCOLLECTION = "listAssignments";
+/** The `source` stamped on a member enrolled from the Inbox. */
+export declare const ASSIGNMENT_SOURCE = "inbox";
+/**
+ * How many lists the picker offers.
+ *
+ * A ceiling on the READ, so a merchant with an unusual number of lists costs
+ * one bounded query rather than a scan, and the response says when it is a
+ * floor rather than presenting a slice as the whole set.
+ */
+export declare const LIST_OPTIONS_LIMIT = 100;
+/**
+ * `POST inbox/list-options` — what the merchant may do with this sender.
+ *
+ * Reads only. It exists because the answer needs three things the browser
+ * cannot have: the org's lists (rules put them behind org-wide membership,
+ * which the acting console session may not hold), the person's consent record
+ * (an org contact, same gate), and both suppression lists. Computing any of
+ * it client-side would be a second copy of the rule, on the surface whose
+ * whole job is to tell the merchant the truth about what is about to happen.
+ *
+ * Reached by an explicit expansion in the reader, never on mount: it is three
+ * reads and a bounded query, and paying them once per opened submission would
+ * charge every merchant who never touches lists.
+ */
+export declare const inboxListOptionsHandler: PluginApiHandler;
+/**
+ * `POST inbox/assign-list` — put this sender on a marketing list.
+ *
+ * Body: `{ hostId, submissionId, listId, attestConsent? }`. `attestConsent` is
+ * the merchant STATING that they have this person's permission; it is not a
+ * way to name a basis, because the pass-through basis is derived server-side
+ * from the person's own record.
+ *
+ * ## What this act is, and what it is not
+ *
+ * It is marketing enrollment: the only consumer of a list is a campaign. It
+ * is therefore kept entirely separate from the reply — different route,
+ * different card in the UI, different record — and replying enrolls nobody.
+ * The reverse holds too: enrolling somebody sends them nothing, meters
+ * nothing, and is not a promise that they are still mailable when a campaign
+ * eventually runs. Suppression is consulted again at send time, in
+ * `filterSendableForHost`, because an address can be suppressed the day after
+ * it is enrolled and an enrollment-time check that licensed every later send
+ * would be a check that passes once and pays out forever.
+ */
+export declare const inboxAssignListHandler: PluginApiHandler;
+/**
+ * Console API registration.
+ *
+ * None of these is on the machine-path exemption list in
+ * `plugin-api-rate-limit.ts`. Each is reached by a person pressing a button in
+ * a browser, so the visitor limiter's per-(site, IP) budget is far above any
+ * real use of them and is the right ceiling for surfaces that put mail on the
+ * wire or a person into a marketing audience.
+ */
+export declare function registerInboxConsoleApi(): void;