@aglyn/plugins-inbox 1.0.0-beta.221 → 1.0.0-beta.223

package/src/lib/components/visitor-door-notices.component.js

@@ -0,0 +1,123 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ 'use client';
+import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-runtime";
+// By their own modules rather than the barrel: the Inbox's specs replace
+// `@aglyn/aglyn` with a closed world, and these are small.
+import { utcMonthKey } from "@aglyn/aglyn/app-utils/utc-month";
+import { pluginVisitorDoors, visitorDoorCaughtNotice, visitorDoorPausedNotice } from "@aglyn/aglyn/plugin-manager/plugin-visitor-doors";
+import { useFirestore, useFirestoreDoc } from "@aglyn/tenant-feature-instance";
+import { Alert, AlertTitle, Typography } from "@mui/material";
+import { doc } from "firebase/firestore";
+import { Fragment } from "react";
+/** The declared doors: compiled into the bundle, so the list never changes. */ const DOORS = pluginVisitorDoors();
+/**
+ * Every declared public door's flood notices, for the site whose traffic
+ * lands here (AGL-1666, AGL-1836, AGL-3080).
+ *
+ * A door is declared by the plugin that keeps it (`visitorDoors`), which names
+ * the two site counters it keeps by month and the words; the Inbox names no
+ * door. Each counter is a client-unwritable document host admins can already
+ * read (AGL-1367), keyed by the SERVER's month through the shared
+ * `utcMonthKey` — a key derived differently here would read zero refusals on
+ * exactly the sites being refused.
+ *
+ * A hook, read by the page above its section guard, so the listens start with
+ * the page rather than a frame later with a section. Two listens per door, in
+ * the same order on every render: the list is compiled and never changes
+ * length, which is what makes a hook per entry safe here.
+ */ export function useVisitorDoorNotices(hostId) {
+    const firestore = useFirestore();
+    const notices = [];
+    for (const door of DOORS){
+        var _ref, _ref1;
+        // eslint-disable-next-line react-hooks/rules-of-hooks -- a compiled, fixed-length list
+        const { data: refusedCounter } = useFirestoreDoc(()=>hostId ? doc(firestore, 'hosts', hostId, 'counters', door.refusedCounter) : null, [
+            firestore,
+            hostId,
+            door.refusedCounter
+        ]);
+        // eslint-disable-next-line react-hooks/rules-of-hooks -- a compiled, fixed-length list
+        const { data: caughtCounter } = useFirestoreDoc(()=>hostId ? doc(firestore, 'hosts', hostId, 'counters', door.caughtCounter) : null, [
+            firestore,
+            hostId,
+            door.caughtCounter
+        ]);
+        notices.push({
+            door: door.door,
+            paused: visitorDoorPausedNotice(door, {
+                refused: Number((_ref = refusedCounter == null ? void 0 : refusedCounter[utcMonthKey()]) != null ? _ref : 0),
+                ceiling: Number(refusedCounter == null ? void 0 : refusedCounter['ceiling']) || undefined
+            }),
+            caught: visitorDoorCaughtNotice(door, {
+                caught: Number((_ref1 = caughtCounter == null ? void 0 : caughtCounter[utcMonthKey()]) != null ? _ref1 : 0)
+            })
+        });
+    }
+    return notices;
+}
+/**
+ * The notices themselves. The paused notice is a warning: until it, a
+ * refusal existed in two places a site owner cannot see — a counters
+ * document only Firestore's console renders, and one notification `system.`
+ * bucket-muting can suppress at write time. The catch count is info rather
+ * than warning on purpose: it reports protection WORKING — caught, dropped,
+ * never stored or billed. Each renders nothing below one, because a counter
+ * document persists from its first trip and a reassuring zero trains the
+ * reader to ignore the row.
+ */ export function VisitorDoorNotices({ notices }) {
+    return /*#__PURE__*/ _jsx(_Fragment, {
+        children: notices.map(({ door, paused, caught })=>/*#__PURE__*/ _jsxs(Fragment, {
+                children: [
+                    paused ? /*#__PURE__*/ _jsxs(Alert, {
+                        severity: "warning",
+                        sx: {
+                            mb: 2
+                        },
+                        children: [
+                            /*#__PURE__*/ _jsx(AlertTitle, {
+                                children: paused.title
+                            }),
+                            /*#__PURE__*/ _jsx(Typography, {
+                                component: "div",
+                                variant: "body2",
+                                children: paused.message
+                            }),
+                            /*#__PURE__*/ _jsx(Typography, {
+                                component: "div",
+                                variant: "body2",
+                                color: "text.secondary",
+                                sx: {
+                                    mt: 0.5
+                                },
+                                children: paused.until
+                            })
+                        ]
+                    }) : null,
+                    caught ? /*#__PURE__*/ _jsx(Alert, {
+                        severity: "info",
+                        sx: {
+                            mb: 2
+                        },
+                        children: caught
+                    }) : null
+                ]
+            }, door))
+    });
+}
+export default VisitorDoorNotices;
+
+//# sourceMappingURL=visitor-door-notices.component.js.map

package/src/lib/components/visitor-door-notices.component.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../libs/plugins/inbox/src/lib/components/visitor-door-notices.component.tsx"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n'use client'\n\n// By their own modules rather than the barrel: the Inbox's specs replace\n// `@aglyn/aglyn` with a closed world, and these are small.\nimport { utcMonthKey } from '@aglyn/aglyn/app-utils/utc-month'\nimport {\n  pluginVisitorDoors,\n  visitorDoorCaughtNotice,\n  visitorDoorPausedNotice,\n  type VisitorDoorPausedNotice,\n} from '@aglyn/aglyn/plugin-manager/plugin-visitor-doors'\nimport { useFirestore, useFirestoreDoc } from '@aglyn/tenant-feature-instance'\nimport { Alert, AlertTitle, Typography } from '@mui/material'\nimport { doc } from 'firebase/firestore'\nimport { Fragment } from 'react'\n\n/** The declared doors: compiled into the bundle, so the list never changes. */\nconst DOORS = pluginVisitorDoors()\n\n/** One door's notices for a site: refusing now, and the month's catches. */\nexport interface VisitorDoorNoticeState {\n  door: string\n  paused: VisitorDoorPausedNotice | null\n  caught: string | null\n}\n\n/**\n * Every declared public door's flood notices, for the site whose traffic\n * lands here (AGL-1666, AGL-1836, AGL-3080).\n *\n * A door is declared by the plugin that keeps it (`visitorDoors`), which names\n * the two site counters it keeps by month and the words; the Inbox names no\n * door. Each counter is a client-unwritable document host admins can already\n * read (AGL-1367), keyed by the SERVER's month through the shared\n * `utcMonthKey` — a key derived differently here would read zero refusals on\n * exactly the sites being refused.\n *\n * A hook, read by the page above its section guard, so the listens start with\n * the page rather than a frame later with a section. Two listens per door, in\n * the same order on every render: the list is compiled and never changes\n * length, which is what makes a hook per entry safe here.\n */\nexport function useVisitorDoorNotices(\n  hostId: string | null | undefined,\n): VisitorDoorNoticeState[] {\n  const firestore = useFirestore()\n  const notices: VisitorDoorNoticeState[] = []\n  for (const door of DOORS) {\n    // eslint-disable-next-line react-hooks/rules-of-hooks -- a compiled, fixed-length list\n    const { data: refusedCounter } = useFirestoreDoc<any>(\n      () => (hostId ? doc(firestore, 'hosts', hostId, 'counters', door.refusedCounter) : null),\n      [firestore, hostId, door.refusedCounter],\n    )\n    // eslint-disable-next-line react-hooks/rules-of-hooks -- a compiled, fixed-length list\n    const { data: caughtCounter } = useFirestoreDoc<any>(\n      () => (hostId ? doc(firestore, 'hosts', hostId, 'counters', door.caughtCounter) : null),\n      [firestore, hostId, door.caughtCounter],\n    )\n    notices.push({\n      door: door.door,\n      paused: visitorDoorPausedNotice(door, {\n        refused: Number(refusedCounter?.[utcMonthKey()] ?? 0),\n        ceiling: Number(refusedCounter?.['ceiling']) || undefined,\n      }),\n      caught: visitorDoorCaughtNotice(door, {\n        caught: Number(caughtCounter?.[utcMonthKey()] ?? 0),\n      }),\n    })\n  }\n  return notices\n}\n\n/**\n * The notices themselves. The paused notice is a warning: until it, a\n * refusal existed in two places a site owner cannot see — a counters\n * document only Firestore's console renders, and one notification `system.`\n * bucket-muting can suppress at write time. The catch count is info rather\n * than warning on purpose: it reports protection WORKING — caught, dropped,\n * never stored or billed. Each renders nothing below one, because a counter\n * document persists from its first trip and a reassuring zero trains the\n * reader to ignore the row.\n */\nexport function VisitorDoorNotices({\n  notices,\n}: {\n  notices: readonly VisitorDoorNoticeState[]\n}) {\n  return (\n    <>\n      {notices.map(({ door, paused, caught }) => (\n        <Fragment key={door}>\n          {paused ? (\n            <Alert severity=\"warning\" sx={{ mb: 2 }}>\n              <AlertTitle>{paused.title}</AlertTitle>\n              <Typography component=\"div\" variant=\"body2\">\n                {paused.message}\n              </Typography>\n              <Typography\n                component=\"div\"\n                variant=\"body2\"\n                color=\"text.secondary\"\n                sx={{ mt: 0.5 }}\n              >\n                {paused.until}\n              </Typography>\n            </Alert>\n          ) : null}\n          {caught ? (\n            <Alert severity=\"info\" sx={{ mb: 2 }}>\n              {caught}\n            </Alert>\n          ) : null}\n        </Fragment>\n      ))}\n    </>\n  )\n}\n\nexport default VisitorDoorNotices\n"],"names":["utcMonthKey","pluginVisitorDoors","visitorDoorCaughtNotice","visitorDoorPausedNotice","useFirestore","useFirestoreDoc","Alert","AlertTitle","Typography","doc","Fragment","DOORS","useVisitorDoorNotices","hostId","firestore","notices","door","data","refusedCounter","caughtCounter","push","paused","refused","Number","ceiling","undefined","caught","VisitorDoorNotices","map","severity","sx","mb","title","component","variant","message","color","mt","until"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED;;AAEA,yEAAyE;AACzE,2DAA2D;AAC3D,SAASA,WAAW,QAAQ,mCAAkC;AAC9D,SACEC,kBAAkB,EAClBC,uBAAuB,EACvBC,uBAAuB,QAElB,mDAAkD;AACzD,SAASC,YAAY,EAAEC,eAAe,QAAQ,iCAAgC;AAC9E,SAASC,KAAK,EAAEC,UAAU,EAAEC,UAAU,QAAQ,gBAAe;AAC7D,SAASC,GAAG,QAAQ,qBAAoB;AACxC,SAASC,QAAQ,QAAQ,QAAO;AAEhC,6EAA6E,GAC7E,MAAMC,QAAQV;AASd;;;;;;;;;;;;;;;CAeC,GACD,OAAO,SAASW,sBACdC,MAAiC;IAEjC,MAAMC,YAAYV;IAClB,MAAMW,UAAoC,EAAE;IAC5C,KAAK,MAAMC,QAAQL,MAAO;;QACxB,uFAAuF;QACvF,MAAM,EAAEM,MAAMC,cAAc,EAAE,GAAGb,gBAC/B,IAAOQ,SAASJ,IAAIK,WAAW,SAASD,QAAQ,YAAYG,KAAKE,cAAc,IAAI,MACnF;YAACJ;YAAWD;YAAQG,KAAKE,cAAc;SAAC;QAE1C,uFAAuF;QACvF,MAAM,EAAED,MAAME,aAAa,EAAE,GAAGd,gBAC9B,IAAOQ,SAASJ,IAAIK,WAAW,SAASD,QAAQ,YAAYG,KAAKG,aAAa,IAAI,MAClF;YAACL;YAAWD;YAAQG,KAAKG,aAAa;SAAC;QAEzCJ,QAAQK,IAAI,CAAC;YACXJ,MAAMA,KAAKA,IAAI;YACfK,QAAQlB,wBAAwBa,MAAM;gBACpCM,SAASC,eAAOL,kCAAAA,cAAgB,CAAClB,cAAc,mBAAI;gBACnDwB,SAASD,OAAOL,kCAAAA,cAAgB,CAAC,UAAU,KAAKO;YAClD;YACAC,QAAQxB,wBAAwBc,MAAM;gBACpCU,QAAQH,gBAAOJ,iCAAAA,aAAe,CAACnB,cAAc,oBAAI;YACnD;QACF;IACF;IACA,OAAOe;AACT;AAEA;;;;;;;;;CASC,GACD,OAAO,SAASY,mBAAmB,EACjCZ,OAAO,EAGR;IACC,qBACE;kBACGA,QAAQa,GAAG,CAAC,CAAC,EAAEZ,IAAI,EAAEK,MAAM,EAAEK,MAAM,EAAE,iBACpC,MAAChB;;oBACEW,uBACC,MAACf;wBAAMuB,UAAS;wBAAUC,IAAI;4BAAEC,IAAI;wBAAE;;0CACpC,KAACxB;0CAAYc,OAAOW,KAAK;;0CACzB,KAACxB;gCAAWyB,WAAU;gCAAMC,SAAQ;0CACjCb,OAAOc,OAAO;;0CAEjB,KAAC3B;gCACCyB,WAAU;gCACVC,SAAQ;gCACRE,OAAM;gCACNN,IAAI;oCAAEO,IAAI;gCAAI;0CAEbhB,OAAOiB,KAAK;;;yBAGf;oBACHZ,uBACC,KAACpB;wBAAMuB,UAAS;wBAAOC,IAAI;4BAAEC,IAAI;wBAAE;kCAChCL;yBAED;;eArBSV;;AA0BvB;AAEA,eAAeW,mBAAkB"}

package/src/lib/model/submission-links.d.ts

@@ -0,0 +1,70 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+/**
+ * WHAT AN OPEN SUBMISSION LINKS TO (AGL-3461).
+ *
+ * A submission names the form that took it, the page it was on and — since
+ * the submit route stamps it — the lead or contact the record system filed
+ * for its sender. Each is somebody else's record: the form is the Forms
+ * plugin's, the person the CRM's, and the page is the live site. So each
+ * link is asked of the owner (`hrefOf`, the record-route registry) and falls
+ * back to plain text when no plugin answers, rather than to a URL this
+ * plugin spelled for them.
+ */
+/** The record the submit route stamps once the person is filed. */
+export interface SubmissionCapturedRecord {
+    kind?: string;
+    id?: string;
+}
+/** The fields of a submission row this module reads. */
+export interface SubmissionLinkSource {
+    formId?: unknown;
+    formName?: unknown;
+    path?: unknown;
+    campaignIds?: unknown;
+    pageCampaignIds?: unknown;
+    capturedRecord?: SubmissionCapturedRecord | null;
+}
+/** One line of the reader's "where it came in" block. */
+export interface SubmissionLink {
+    key: 'form' | 'page' | 'record';
+    /** What the line is: `Form`, `Page`, `Lead`, `Contact`. */
+    label: string;
+    /** What the link reads. */
+    text: string;
+    /** Where it goes, or `null` to draw `text` plainly. */
+    href: string | null;
+    /** The live site, which opens beside the console rather than over it. */
+    external?: boolean;
+}
+/**
+ * The submission's form, page and filed person, in that order, each with the
+ * link its owner publishes. A line whose fact the row does not carry is
+ * left out rather than drawn empty.
+ */
+export declare function submissionLinks(options: {
+    submission: SubmissionLinkSource;
+    /** The record-route registry's answer for one record, or `null`. */
+    hrefOf: (kind: string, id: string) => string | null;
+    /** The site's public origin, `https://…`, or `null` when unknown. */
+    siteOrigin: string | null;
+}): SubmissionLink[];
+/**
+ * The campaigns a submission is FILED under: its form's, then its page's,
+ * deduped — the two stamps the submit route writes when it arrives.
+ */
+export declare function submissionFiledUnder(submission: SubmissionLinkSource | null | undefined): string[];

package/src/lib/model/submission-links.js

@@ -0,0 +1,74 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ import { normalizeContainerIds } from "@aglyn/aglyn/app-utils/container-membership";
+/** The record kinds a captured person may be filed as. */ const PERSON_KINDS = {
+    lead: 'Lead',
+    contact: 'Contact'
+};
+/**
+ * The submission's form, page and filed person, in that order, each with the
+ * link its owner publishes. A line whose fact the row does not carry is
+ * left out rather than drawn empty.
+ */ export function submissionLinks(options) {
+    const { submission, hrefOf, siteOrigin } = options;
+    const links = [];
+    const formId = typeof submission.formId === 'string' ? submission.formId : '';
+    const formName = typeof submission.formName === 'string' && submission.formName.trim() ? submission.formName.trim() : 'Form';
+    if (formId || typeof submission.formName === 'string') {
+        links.push({
+            key: 'form',
+            label: 'Form',
+            text: formName,
+            href: formId ? hrefOf('form', formId) : null
+        });
+    }
+    const path = typeof submission.path === 'string' ? submission.path.trim() : '';
+    if (path) {
+        // Only a site-relative path is joined to the origin; anything else is a
+        // value somebody else wrote, and is shown rather than followed.
+        const relative = path.startsWith('/') && !path.startsWith('//');
+        links.push({
+            key: 'page',
+            label: 'Page',
+            text: path,
+            href: relative && siteOrigin ? `${siteOrigin}${path}` : null,
+            external: true
+        });
+    }
+    const captured = submission.capturedRecord;
+    const kind = typeof (captured == null ? void 0 : captured.kind) === 'string' ? captured.kind : '';
+    const id = typeof (captured == null ? void 0 : captured.id) === 'string' ? captured.id : '';
+    if (PERSON_KINDS[kind] && id) {
+        links.push({
+            key: 'record',
+            label: PERSON_KINDS[kind],
+            text: kind === 'lead' ? 'Open the lead' : 'Open the contact',
+            href: hrefOf(kind, id)
+        });
+    }
+    return links;
+}
+/**
+ * The campaigns a submission is FILED under: its form's, then its page's,
+ * deduped — the two stamps the submit route writes when it arrives.
+ */ export function submissionFiledUnder(submission) {
+    return normalizeContainerIds([
+        ...Array.isArray(submission == null ? void 0 : submission.campaignIds) ? submission.campaignIds : [],
+        ...Array.isArray(submission == null ? void 0 : submission.pageCampaignIds) ? submission.pageCampaignIds : []
+    ]);
+}
+
+//# sourceMappingURL=submission-links.js.map

package/src/lib/model/submission-links.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../libs/plugins/inbox/src/lib/model/submission-links.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { normalizeContainerIds } from '@aglyn/aglyn/app-utils/container-membership'\n\n/**\n * WHAT AN OPEN SUBMISSION LINKS TO (AGL-3461).\n *\n * A submission names the form that took it, the page it was on and — since\n * the submit route stamps it — the lead or contact the record system filed\n * for its sender. Each is somebody else's record: the form is the Forms\n * plugin's, the person the CRM's, and the page is the live site. So each\n * link is asked of the owner (`hrefOf`, the record-route registry) and falls\n * back to plain text when no plugin answers, rather than to a URL this\n * plugin spelled for them.\n */\n\n/** The record the submit route stamps once the person is filed. */\nexport interface SubmissionCapturedRecord {\n  kind?: string\n  id?: string\n}\n\n/** The fields of a submission row this module reads. */\nexport interface SubmissionLinkSource {\n  formId?: unknown\n  formName?: unknown\n  path?: unknown\n  campaignIds?: unknown\n  pageCampaignIds?: unknown\n  capturedRecord?: SubmissionCapturedRecord | null\n}\n\n/** One line of the reader's \"where it came in\" block. */\nexport interface SubmissionLink {\n  key: 'form' | 'page' | 'record'\n  /** What the line is: `Form`, `Page`, `Lead`, `Contact`. */\n  label: string\n  /** What the link reads. */\n  text: string\n  /** Where it goes, or `null` to draw `text` plainly. */\n  href: string | null\n  /** The live site, which opens beside the console rather than over it. */\n  external?: boolean\n}\n\n/** The record kinds a captured person may be filed as. */\nconst PERSON_KINDS: Record<string, string> = { lead: 'Lead', contact: 'Contact' }\n\n/**\n * The submission's form, page and filed person, in that order, each with the\n * link its owner publishes. A line whose fact the row does not carry is\n * left out rather than drawn empty.\n */\nexport function submissionLinks(options: {\n  submission: SubmissionLinkSource\n  /** The record-route registry's answer for one record, or `null`. */\n  hrefOf: (kind: string, id: string) => string | null\n  /** The site's public origin, `https://…`, or `null` when unknown. */\n  siteOrigin: string | null\n}): SubmissionLink[] {\n  const { submission, hrefOf, siteOrigin } = options\n  const links: SubmissionLink[] = []\n  const formId = typeof submission.formId === 'string' ? submission.formId : ''\n  const formName =\n    typeof submission.formName === 'string' && submission.formName.trim()\n      ? submission.formName.trim()\n      : 'Form'\n  if (formId || typeof submission.formName === 'string') {\n    links.push({\n      key: 'form',\n      label: 'Form',\n      text: formName,\n      href: formId ? hrefOf('form', formId) : null,\n    })\n  }\n  const path = typeof submission.path === 'string' ? submission.path.trim() : ''\n  if (path) {\n    // Only a site-relative path is joined to the origin; anything else is a\n    // value somebody else wrote, and is shown rather than followed.\n    const relative = path.startsWith('/') && !path.startsWith('//')\n    links.push({\n      key: 'page',\n      label: 'Page',\n      text: path,\n      href: relative && siteOrigin ? `${siteOrigin}${path}` : null,\n      external: true,\n    })\n  }\n  const captured = submission.capturedRecord\n  const kind = typeof captured?.kind === 'string' ? captured.kind : ''\n  const id = typeof captured?.id === 'string' ? captured.id : ''\n  if (PERSON_KINDS[kind] && id) {\n    links.push({\n      key: 'record',\n      label: PERSON_KINDS[kind],\n      text: kind === 'lead' ? 'Open the lead' : 'Open the contact',\n      href: hrefOf(kind, id),\n    })\n  }\n  return links\n}\n\n/**\n * The campaigns a submission is FILED under: its form's, then its page's,\n * deduped — the two stamps the submit route writes when it arrives.\n */\nexport function submissionFiledUnder(submission: SubmissionLinkSource | null | undefined): string[] {\n  return normalizeContainerIds([\n    ...(Array.isArray(submission?.campaignIds) ? submission.campaignIds : []),\n    ...(Array.isArray(submission?.pageCampaignIds) ? submission.pageCampaignIds : []),\n  ])\n}\n"],"names":["normalizeContainerIds","PERSON_KINDS","lead","contact","submissionLinks","options","submission","hrefOf","siteOrigin","links","formId","formName","trim","push","key","label","text","href","path","relative","startsWith","external","captured","capturedRecord","kind","id","submissionFiledUnder","Array","isArray","campaignIds","pageCampaignIds"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED,SAASA,qBAAqB,QAAQ,8CAA6C;AA2CnF,wDAAwD,GACxD,MAAMC,eAAuC;IAAEC,MAAM;IAAQC,SAAS;AAAU;AAEhF;;;;CAIC,GACD,OAAO,SAASC,gBAAgBC,OAM/B;IACC,MAAM,EAAEC,UAAU,EAAEC,MAAM,EAAEC,UAAU,EAAE,GAAGH;IAC3C,MAAMI,QAA0B,EAAE;IAClC,MAAMC,SAAS,OAAOJ,WAAWI,MAAM,KAAK,WAAWJ,WAAWI,MAAM,GAAG;IAC3E,MAAMC,WACJ,OAAOL,WAAWK,QAAQ,KAAK,YAAYL,WAAWK,QAAQ,CAACC,IAAI,KAC/DN,WAAWK,QAAQ,CAACC,IAAI,KACxB;IACN,IAAIF,UAAU,OAAOJ,WAAWK,QAAQ,KAAK,UAAU;QACrDF,MAAMI,IAAI,CAAC;YACTC,KAAK;YACLC,OAAO;YACPC,MAAML;YACNM,MAAMP,SAASH,OAAO,QAAQG,UAAU;QAC1C;IACF;IACA,MAAMQ,OAAO,OAAOZ,WAAWY,IAAI,KAAK,WAAWZ,WAAWY,IAAI,CAACN,IAAI,KAAK;IAC5E,IAAIM,MAAM;QACR,wEAAwE;QACxE,gEAAgE;QAChE,MAAMC,WAAWD,KAAKE,UAAU,CAAC,QAAQ,CAACF,KAAKE,UAAU,CAAC;QAC1DX,MAAMI,IAAI,CAAC;YACTC,KAAK;YACLC,OAAO;YACPC,MAAME;YACND,MAAME,YAAYX,aAAa,GAAGA,aAAaU,MAAM,GAAG;YACxDG,UAAU;QACZ;IACF;IACA,MAAMC,WAAWhB,WAAWiB,cAAc;IAC1C,MAAMC,OAAO,QAAOF,4BAAAA,SAAUE,IAAI,MAAK,WAAWF,SAASE,IAAI,GAAG;IAClE,MAAMC,KAAK,QAAOH,4BAAAA,SAAUG,EAAE,MAAK,WAAWH,SAASG,EAAE,GAAG;IAC5D,IAAIxB,YAAY,CAACuB,KAAK,IAAIC,IAAI;QAC5BhB,MAAMI,IAAI,CAAC;YACTC,KAAK;YACLC,OAAOd,YAAY,CAACuB,KAAK;YACzBR,MAAMQ,SAAS,SAAS,kBAAkB;YAC1CP,MAAMV,OAAOiB,MAAMC;QACrB;IACF;IACA,OAAOhB;AACT;AAEA;;;CAGC,GACD,OAAO,SAASiB,qBAAqBpB,UAAmD;IACtF,OAAON,sBAAsB;WACvB2B,MAAMC,OAAO,CAACtB,8BAAAA,WAAYuB,WAAW,IAAIvB,WAAWuB,WAAW,GAAG,EAAE;WACpEF,MAAMC,OAAO,CAACtB,8BAAAA,WAAYwB,eAAe,IAAIxB,WAAWwB,eAAe,GAAG,EAAE;KACjF;AACH"}

package/src/lib/server.js

@@ -92,9 +92,9 @@ import { _ as _extends } from "@swc/helpers/_/_extends";
  * cannot disagree about which document to look for.
  */ import { ASSIGNMENT_REFUSAL_MESSAGES, assignmentBasis, assignmentReadout, grantEntriesAsRecorded, isOrgWideMember, readMarketingBasis, registerPluginApiRoute, resolveBrandingProfile } from "@aglyn/aglyn/server";
 import { emailSuppressionKey, enrollListMember, firebaseAdmin, getOrgForHost, hostSendingIdentity, isEmailSuppressed, meterHostEmail, consentGroupForSite, orgDataCollectionForHost, resolveOrgMembership } from "@aglyn/tenant-data-admin";
-// The leaf, not the barrel: this plugin's specs substitute the barrel
-// wholesale, and the lookup must reach the real index logic under them.
-import { findContactByEmail } from "@aglyn/tenant-data-admin/server/contact-email-index";
+// The person behind the address, through the plugin that keeps people
+// (AGL-3080): the Inbox never opens the record system's collections.
+import { findPluginPerson } from "@aglyn/aglyn/plugin-manager/plugin-person-records";
 // And for the refusal a deleted contact left behind (AGL-3338): the real store
 // and the real merge, under whatever the specs put in the barrels' place.
 import { readRetainedRefusals } from "@aglyn/tenant-data-admin/server/retained-refusals";
@@ -104,6 +104,10 @@ import { refusalsOf, withRetainedRefusals } from "@aglyn/aglyn/app-utils/retaine
 import { consentGroupOptOutHosts } from "@aglyn/aglyn/app-utils/consent-groups";
 import { messageFromName, sendEmail } from "@aglyn/shared-util-email";
 import { FieldValue } from "firebase-admin/firestore";
+// The registries' own modules: a reply finds the submission it answers
+// through the index the forms plugin publishes (AGL-3080).
+import { pluginRecordIndex } from "@aglyn/aglyn/plugin-manager/plugin-record-index";
+import { runPluginDeclarationsRepair } from "@aglyn/aglyn/plugin-manager/plugin-declarations-repair";
 import { REPLY_BODY_MAX, REPLY_SUBJECT_MAX, composeReplyBody, replyRecipient } from "./model/reply-policy.js";
 /** Where a reply is stored, under the submission it answers. */ export const REPLIES_SUBCOLLECTION = 'replies';
 /** `context` on the send: the log label and the Resend attribution tag. */ export const REPLY_CONTEXT = 'inbox-reply';
@@ -205,9 +209,9 @@ import { REPLY_BODY_MAX, REPLY_SUBJECT_MAX, composeReplyBody, replyRecipient } f
                 error: 'Your account has no email address, so a reply would have nowhere to come back to.'
             });
         }
-        const submissionRef = hostRef.collection('formSubmissions').doc(submissionId);
-        const submission = await submissionRef.get();
-        if (!submission.exists) {
+        const submissionRef = await formSubmissionRef(hostId, submissionId);
+        const submission = await (submissionRef == null ? void 0 : submissionRef.get());
+        if (!submissionRef || !(submission == null ? void 0 : submission.exists)) {
             return res.status(404).json({
                 error: 'Unknown submission'
             });
@@ -304,6 +308,28 @@ import { REPLY_BODY_MAX, REPLY_SUBJECT_MAX, composeReplyBody, replyRecipient } f
         });
     }
 };
+/**
+ * The submission a reply answers or an assignment acts on, or `null` (AGL-3080).
+ *
+ * Submissions are the forms plugin's records, kept where it keeps them, and
+ * this plugin is their reader: it finds one through the record index the
+ * forms plugin publishes for `formSubmission`, which hands back the one
+ * document — to mark it answered and to keep this plugin's own replies and
+ * assignments under it, as the forms plugin documents a reader may. A process
+ * whose boot failed runs the app's declarations step once and asks again; a
+ * build with no forms plugin keeps no submissions, which is `null`.
+ */ async function formSubmissionRef(hostId, submissionId) {
+    var _owner_index_ref;
+    let owner = pluginRecordIndex('formSubmission');
+    if (!owner && await runPluginDeclarationsRepair().catch(()=>false)) {
+        owner = pluginRecordIndex('formSubmission');
+    }
+    const ref = await (owner == null ? void 0 : (_owner_index_ref = owner.index.ref) == null ? void 0 : _owner_index_ref.call(owner.index, {
+        hostId,
+        id: submissionId
+    }));
+    return ref != null ? ref : null;
+}
 /** Where an assignment is recorded, under the submission that occasioned it. */ export const LIST_ASSIGNMENTS_SUBCOLLECTION = 'listAssignments';
 /** The `source` stamped on a member enrolled from the Inbox. */ export const ASSIGNMENT_SOURCE = 'inbox';
 /**
@@ -402,9 +428,9 @@ import { REPLY_BODY_MAX, REPLY_SUBJECT_MAX, composeReplyBody, replyRecipient } f
             }
         };
     }
-    const submissionRef = hostRef.collection('formSubmissions').doc(submissionId);
-    const submission = await submissionRef.get();
-    if (!submission.exists) {
+    const submissionRef = await formSubmissionRef(hostId, submissionId);
+    const submission = await (submissionRef == null ? void 0 : submissionRef.get());
+    if (!submissionRef || !(submission == null ? void 0 : submission.exists)) {
         return {
             ok: false,
             status: 404,
@@ -434,12 +460,15 @@ import { REPLY_BODY_MAX, REPLY_SUBJECT_MAX, composeReplyBody, replyRecipient } f
     };
 }
 /**
- * The person's own consent facts, read off the org contact for this address.
+ * The person's own consent facts, read off the person record the workspace
+ * keeps for this address — asked of the plugin that keeps people
+ * (`plugin-person-records`, AGL-3080), never read off its storage here.
  *
- * The CRM record is where a refusal lives: `marketingConsent` is written
- * `false` by exactly one path in the product and it writes a contact. So this
- * is the read that makes `declined` mean something at enrollment time, and an
- * absent contact is honestly `unrecorded` rather than a reason to guess.
+ * The person record is where a refusal lives: `marketingConsent` is written
+ * `false` by exactly one path in the product and it writes that record. So
+ * this is the read that makes `declined` mean something at enrollment time,
+ * and an absent person is honestly `unrecorded` rather than a reason to guess
+ * — as is a workspace with no record system, where nobody was ever asked.
  *
  * Read UNSCOPED, deliberately. `scopedToHost` narrows an org collection to
  * what one site may see, and a refusal filtered out by that narrowing is a
@@ -448,10 +477,11 @@ import { REPLY_BODY_MAX, REPLY_SUBJECT_MAX, composeReplyBody, replyRecipient } f
  * proved an org-wide member, which is the tier the rules grant the whole
  * org's contacts to.
  *
- * Through the org's address index (AGL-2633), for the same failure mode
- * from the other side: a refusal recorded on a record that was later
- * merged into another is the survivor's refusal, and the sender's address
- * may be the one that became an alternate.
+ * By the owner's address lookup, which answers an alternate address a merge
+ * folded in (AGL-2633), for the same failure mode from the other side: a
+ * refusal recorded on a record that was later merged into another is the
+ * survivor's refusal, and the sender's address may be the one that became an
+ * alternate.
  *
  * The person's grants come back beside the verdict, off the same document
  * (AGL-3320): a pass-through carries them onto the membership as the record
@@ -468,12 +498,15 @@ import { REPLY_BODY_MAX, REPLY_SUBJECT_MAX, composeReplyBody, replyRecipient } f
     try {
         const contacts = await orgDataCollectionForHost(hostId, 'contacts');
         const [found, retained] = await Promise.all([
-            findContactByEmail(contacts, email),
+            findPluginPerson({
+                hostId,
+                email
+            }),
             readRetainedRefusals(contacts, [
                 email
             ])
         ]);
-        const data = withRetainedRefusals(found ? found.data() : null, refusalsOf([
+        const data = withRetainedRefusals(found ? _extends({}, found.data) : null, refusalsOf([
             ...retained.values()
         ][0]));
         return {