@aglyn/plugins-marketplace 1.0.0-beta.143

package/src/lib/components/report-target.component.js

@@ -0,0 +1,181 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ 'use client';
+import { _ as _extends } from "@swc/helpers/_/_extends";
+import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-runtime";
+import { useSnackbar } from "@aglyn/shared-ui-snackstack";
+import { Button, Dialog, DialogActions, DialogContent, DialogTitle, Stack, TextField, Typography } from "@mui/material";
+import { useCallback, useState } from "react";
+import { useUser } from "@aglyn/tenant-feature-instance";
+import { authorizedFetch } from "@aglyn/shared-util-http/authorized-token";
+/** Mirrors `MAX_REASON_LENGTH` in `server/report.ts`. */ const MAX_REASON_LENGTH = 1000;
+/**
+ * "Report" — the only way anything reaches the staff abuse queue (AGL-658).
+ *
+ * WHY THIS EXISTS. `POST marketplace/report` has been registered, rule-complete
+ * and unreachable: it verifies the reporter's ID token, derives a deterministic
+ * doc id so one account cannot inflate a queue by reporting twice, resolves the
+ * listing name and publisher org, and writes `marketplaceReports/{id}`.
+ * `/admin/marketplace-reports` reads that collection and can triage it. Nothing
+ * in the product ever POSTed to the route, so the queue could never receive a
+ * single report and the whole pipeline was staff-side machinery attached to
+ * nothing.
+ *
+ * Pre-publication review is plugin-only by design — a template is inert until
+ * installed — so after-the-fact reporting is the entire safety net for every
+ * other artifact type. It was not connected.
+ *
+ * SIGNED-IN ONLY, and said rather than hidden. The route answers 401 without a
+ * bearer token; a button that silently did nothing would teach a reporter that
+ * reporting does not work, which is worse than the absence it replaces.
+ */ export function ReportTarget(props) {
+    const { listingId, reviewUid, label } = props;
+    const { data: user } = useUser();
+    const { enqueueSnackbar } = useSnackbar();
+    const [open, setOpen] = useState(false);
+    const [reason, setReason] = useState('');
+    const [busy, setBusy] = useState(false);
+    const submit = useCallback(async ()=>{
+        const trimmed = reason.trim();
+        // The server refuses an empty reason with a 400; refusing here as well
+        // keeps a reporter from losing what they typed to a round trip.
+        if (!trimmed) return;
+        setBusy(true);
+        try {
+            const response = await authorizedFetch(user, '/api/marketplace/report', {
+                method: 'POST',
+                headers: {
+                    'Content-Type': 'application/json'
+                },
+                body: JSON.stringify(_extends({
+                    listingId
+                }, reviewUid ? {
+                    reviewUid
+                } : {}, {
+                    reason: trimmed
+                }))
+            });
+            const payload = await response.json().catch(()=>({}));
+            if (!response.ok) {
+                return void enqueueSnackbar((payload == null ? void 0 : payload.error) || 'Could not send that report', {
+                    variant: 'error',
+                    persist: false
+                });
+            }
+            setOpen(false);
+            setReason('');
+            // Says what happens next. "Reported" alone leaves someone wondering
+            // whether anybody will look, and the honest answer — a human reads it —
+            // is the reason to file one at all.
+            enqueueSnackbar('Thanks — staff will review this report', {
+                variant: 'success',
+                persist: false
+            });
+        } catch (unused) {
+            enqueueSnackbar('Could not send that report', {
+                variant: 'error',
+                persist: false
+            });
+        } finally{
+            setBusy(false);
+        }
+    }, [
+        enqueueSnackbar,
+        listingId,
+        reason,
+        reviewUid,
+        user
+    ]);
+    return /*#__PURE__*/ _jsxs(_Fragment, {
+        children: [
+            /*#__PURE__*/ _jsx(Button, {
+                size: "small",
+                color: "inherit",
+                sx: {
+                    alignSelf: 'flex-start'
+                },
+                onClick: ()=>setOpen(true),
+                children: 'Report'
+            }),
+            /*#__PURE__*/ _jsxs(Dialog, {
+                open: open,
+                onClose: ()=>setOpen(false),
+                maxWidth: "xs",
+                fullWidth: true,
+                children: [
+                    /*#__PURE__*/ _jsx(DialogTitle, {
+                        children: `Report ${label}`
+                    }),
+                    /*#__PURE__*/ _jsx(DialogContent, {
+                        dividers: true,
+                        children: /*#__PURE__*/ _jsxs(Stack, {
+                            spacing: 1.5,
+                            children: [
+                                /*#__PURE__*/ _jsx(Typography, {
+                                    variant: "body2",
+                                    color: "text.secondary",
+                                    children: 'Tell us what is wrong with this ' + (reviewUid ? 'review' : 'listing') + '. A staff member reads every report.'
+                                }),
+                                /*#__PURE__*/ _jsx(TextField, {
+                                    autoFocus: true,
+                                    multiline: true,
+                                    minRows: 3,
+                                    size: "small",
+                                    label: "Reason",
+                                    value: reason,
+                                    onChange: (event)=>setReason(event.target.value.slice(0, MAX_REASON_LENGTH)),
+                                    slotProps: {
+                                        htmlInput: {
+                                            maxLength: MAX_REASON_LENGTH
+                                        }
+                                    }
+                                }),
+                                user ? null : /*#__PURE__*/ _jsx(Typography, {
+                                    variant: "caption",
+                                    color: "warning.main",
+                                    children: 'Sign in to send a report.'
+                                }),
+                                /*#__PURE__*/ _jsx(Typography, {
+                                    variant: "caption",
+                                    color: "text.secondary",
+                                    children: 'Reporting again updates your report rather than adding ' + 'another one.'
+                                })
+                            ]
+                        })
+                    }),
+                    /*#__PURE__*/ _jsxs(DialogActions, {
+                        children: [
+                            /*#__PURE__*/ _jsx(Button, {
+                                onClick: ()=>setOpen(false),
+                                children: 'Cancel'
+                            }),
+                            /*#__PURE__*/ _jsx(Button, {
+                                variant: "contained",
+                                disabled: busy || !reason.trim() || !user,
+                                onClick: ()=>void submit(),
+                                children: 'Send report'
+                            })
+                        ]
+                    })
+                ]
+            })
+        ]
+    });
+}
+ReportTarget.displayName = 'ReportTarget';
+export default ReportTarget;
+
+//# sourceMappingURL=report-target.component.js.map

package/src/lib/components/report-target.component.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../libs/plugins/marketplace/src/lib/components/report-target.component.tsx"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n'use client'\n\nimport { useSnackbar } from '@aglyn/shared-ui-snackstack'\nimport {\n  Button,\n  Dialog,\n  DialogActions,\n  DialogContent,\n  DialogTitle,\n  Stack,\n  TextField,\n  Typography,\n} from '@mui/material'\nimport { useCallback, useState } from 'react'\nimport { useUser } from '@aglyn/tenant-feature-instance'\nimport { authorizedFetch } from '@aglyn/shared-util-http/authorized-token'\n\n/** Mirrors `MAX_REASON_LENGTH` in `server/report.ts`. */\nconst MAX_REASON_LENGTH = 1000\n\nexport interface ReportTargetProps {\n  listingId: string\n  /**\n   * Reporting a REVIEW rather than the listing itself. Omitted, the report is\n   * filed against the listing — the same fork `report.ts` takes to set\n   * `targetType`.\n   */\n  reviewUid?: string\n  /** What the reporter is looking at, for the dialog copy. */\n  label: string\n}\n\n/**\n * \"Report\" — the only way anything reaches the staff abuse queue (AGL-658).\n *\n * WHY THIS EXISTS. `POST marketplace/report` has been registered, rule-complete\n * and unreachable: it verifies the reporter's ID token, derives a deterministic\n * doc id so one account cannot inflate a queue by reporting twice, resolves the\n * listing name and publisher org, and writes `marketplaceReports/{id}`.\n * `/admin/marketplace-reports` reads that collection and can triage it. Nothing\n * in the product ever POSTed to the route, so the queue could never receive a\n * single report and the whole pipeline was staff-side machinery attached to\n * nothing.\n *\n * Pre-publication review is plugin-only by design — a template is inert until\n * installed — so after-the-fact reporting is the entire safety net for every\n * other artifact type. It was not connected.\n *\n * SIGNED-IN ONLY, and said rather than hidden. The route answers 401 without a\n * bearer token; a button that silently did nothing would teach a reporter that\n * reporting does not work, which is worse than the absence it replaces.\n */\nexport function ReportTarget(props: ReportTargetProps) {\n  const { listingId, reviewUid, label } = props\n  const { data: user } = useUser()\n  const { enqueueSnackbar } = useSnackbar()\n  const [open, setOpen] = useState(false)\n  const [reason, setReason] = useState('')\n  const [busy, setBusy] = useState(false)\n\n  const submit = useCallback(async () => {\n    const trimmed = reason.trim()\n    // The server refuses an empty reason with a 400; refusing here as well\n    // keeps a reporter from losing what they typed to a round trip.\n    if (!trimmed) return\n    setBusy(true)\n    try {\n      const response = await authorizedFetch(user, '/api/marketplace/report', {\n        method: 'POST',\n        headers: { 'Content-Type': 'application/json' },\n        body: JSON.stringify({\n          listingId,\n          ...(reviewUid ? { reviewUid } : {}),\n          reason: trimmed,\n        }),\n      })\n      const payload = await response.json().catch(() => ({}))\n      if (!response.ok) {\n        return void enqueueSnackbar(\n          payload?.error || 'Could not send that report',\n          { variant: 'error', persist: false },\n        )\n      }\n      setOpen(false)\n      setReason('')\n      // Says what happens next. \"Reported\" alone leaves someone wondering\n      // whether anybody will look, and the honest answer — a human reads it —\n      // is the reason to file one at all.\n      enqueueSnackbar('Thanks — staff will review this report', {\n        variant: 'success',\n        persist: false,\n      })\n    } catch {\n      enqueueSnackbar('Could not send that report', {\n        variant: 'error',\n        persist: false,\n      })\n    } finally {\n      setBusy(false)\n    }\n  }, [enqueueSnackbar, listingId, reason, reviewUid, user])\n\n  return (\n    <>\n      <Button\n        size=\"small\"\n        color=\"inherit\"\n        sx={{ alignSelf: 'flex-start' }}\n        onClick={() => setOpen(true)}\n      >\n        {'Report'}\n      </Button>\n      <Dialog\n        open={open}\n        onClose={() => setOpen(false)}\n        maxWidth=\"xs\"\n        fullWidth\n      >\n        <DialogTitle>{`Report ${label}`}</DialogTitle>\n        <DialogContent dividers>\n          <Stack spacing={1.5}>\n            <Typography variant=\"body2\" color=\"text.secondary\">\n              {'Tell us what is wrong with this ' +\n                (reviewUid ? 'review' : 'listing') +\n                '. A staff member reads every report.'}\n            </Typography>\n            <TextField\n              autoFocus\n              multiline\n              minRows={3}\n              size=\"small\"\n              label=\"Reason\"\n              value={reason}\n              onChange={(event) =>\n                setReason(event.target.value.slice(0, MAX_REASON_LENGTH))\n              }\n              slotProps={{ htmlInput: { maxLength: MAX_REASON_LENGTH } }}\n            />\n            {/* The route requires a verified token. Saying so beats a 401\n                the reporter cannot act on. */}\n            {user ? null : (\n              <Typography variant=\"caption\" color=\"warning.main\">\n                {'Sign in to send a report.'}\n              </Typography>\n            )}\n            <Typography variant=\"caption\" color=\"text.secondary\">\n              {'Reporting again updates your report rather than adding ' +\n                'another one.'}\n            </Typography>\n          </Stack>\n        </DialogContent>\n        <DialogActions>\n          <Button onClick={() => setOpen(false)}>{'Cancel'}</Button>\n          <Button\n            variant=\"contained\"\n            disabled={busy || !reason.trim() || !user}\n            onClick={() => void submit()}\n          >\n            {'Send report'}\n          </Button>\n        </DialogActions>\n      </Dialog>\n    </>\n  )\n}\n\nReportTarget.displayName = 'ReportTarget'\n\nexport default ReportTarget\n"],"names":["useSnackbar","Button","Dialog","DialogActions","DialogContent","DialogTitle","Stack","TextField","Typography","useCallback","useState","useUser","authorizedFetch","MAX_REASON_LENGTH","ReportTarget","props","listingId","reviewUid","label","data","user","enqueueSnackbar","open","setOpen","reason","setReason","busy","setBusy","submit","trimmed","trim","response","method","headers","body","JSON","stringify","payload","json","catch","ok","error","variant","persist","size","color","sx","alignSelf","onClick","onClose","maxWidth","fullWidth","dividers","spacing","autoFocus","multiline","minRows","value","onChange","event","target","slice","slotProps","htmlInput","maxLength","disabled","displayName"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GACD;;;AAEA,SAASA,WAAW,QAAQ,8BAA6B;AACzD,SACEC,MAAM,EACNC,MAAM,EACNC,aAAa,EACbC,aAAa,EACbC,WAAW,EACXC,KAAK,EACLC,SAAS,EACTC,UAAU,QACL,gBAAe;AACtB,SAASC,WAAW,EAAEC,QAAQ,QAAQ,QAAO;AAC7C,SAASC,OAAO,QAAQ,iCAAgC;AACxD,SAASC,eAAe,QAAQ,2CAA0C;AAE1E,uDAAuD,GACvD,MAAMC,oBAAoB;AAc1B;;;;;;;;;;;;;;;;;;;CAmBC,GACD,OAAO,SAASC,aAAaC,KAAwB;IACnD,MAAM,EAAEC,SAAS,EAAEC,SAAS,EAAEC,KAAK,EAAE,GAAGH;IACxC,MAAM,EAAEI,MAAMC,IAAI,EAAE,GAAGT;IACvB,MAAM,EAAEU,eAAe,EAAE,GAAGrB;IAC5B,MAAM,CAACsB,MAAMC,QAAQ,GAAGb,SAAS;IACjC,MAAM,CAACc,QAAQC,UAAU,GAAGf,SAAS;IACrC,MAAM,CAACgB,MAAMC,QAAQ,GAAGjB,SAAS;IAEjC,MAAMkB,SAASnB,YAAY;QACzB,MAAMoB,UAAUL,OAAOM,IAAI;QAC3B,uEAAuE;QACvE,gEAAgE;QAChE,IAAI,CAACD,SAAS;QACdF,QAAQ;QACR,IAAI;YACF,MAAMI,WAAW,MAAMnB,gBAAgBQ,MAAM,2BAA2B;gBACtEY,QAAQ;gBACRC,SAAS;oBAAE,gBAAgB;gBAAmB;gBAC9CC,MAAMC,KAAKC,SAAS,CAAC;oBACnBpB;mBACIC,YAAY;oBAAEA;gBAAU,IAAI,CAAC;oBACjCO,QAAQK;;YAEZ;YACA,MAAMQ,UAAU,MAAMN,SAASO,IAAI,GAAGC,KAAK,CAAC,IAAO,CAAA,CAAC,CAAA;YACpD,IAAI,CAACR,SAASS,EAAE,EAAE;gBAChB,OAAO,KAAKnB,gBACVgB,CAAAA,2BAAAA,QAASI,KAAK,KAAI,8BAClB;oBAAEC,SAAS;oBAASC,SAAS;gBAAM;YAEvC;YACApB,QAAQ;YACRE,UAAU;YACV,oEAAoE;YACpE,wEAAwE;YACxE,oCAAoC;YACpCJ,gBAAgB,0CAA0C;gBACxDqB,SAAS;gBACTC,SAAS;YACX;QACF,EAAE,eAAM;YACNtB,gBAAgB,8BAA8B;gBAC5CqB,SAAS;gBACTC,SAAS;YACX;QACF,SAAU;YACRhB,QAAQ;QACV;IACF,GAAG;QAACN;QAAiBL;QAAWQ;QAAQP;QAAWG;KAAK;IAExD,qBACE;;0BACE,KAACnB;gBACC2C,MAAK;gBACLC,OAAM;gBACNC,IAAI;oBAAEC,WAAW;gBAAa;gBAC9BC,SAAS,IAAMzB,QAAQ;0BAEtB;;0BAEH,MAACrB;gBACCoB,MAAMA;gBACN2B,SAAS,IAAM1B,QAAQ;gBACvB2B,UAAS;gBACTC,SAAS;;kCAET,KAAC9C;kCAAa,CAAC,OAAO,EAAEa,OAAO;;kCAC/B,KAACd;wBAAcgD,QAAQ;kCACrB,cAAA,MAAC9C;4BAAM+C,SAAS;;8CACd,KAAC7C;oCAAWkC,SAAQ;oCAAQG,OAAM;8CAC/B,qCACE5B,CAAAA,YAAY,WAAW,SAAQ,IAChC;;8CAEJ,KAACV;oCACC+C,SAAS;oCACTC,SAAS;oCACTC,SAAS;oCACTZ,MAAK;oCACL1B,OAAM;oCACNuC,OAAOjC;oCACPkC,UAAU,CAACC,QACTlC,UAAUkC,MAAMC,MAAM,CAACH,KAAK,CAACI,KAAK,CAAC,GAAGhD;oCAExCiD,WAAW;wCAAEC,WAAW;4CAAEC,WAAWnD;wCAAkB;oCAAE;;gCAI1DO,OAAO,qBACN,KAACZ;oCAAWkC,SAAQ;oCAAUG,OAAM;8CACjC;;8CAGL,KAACrC;oCAAWkC,SAAQ;oCAAUG,OAAM;8CACjC,4DACC;;;;;kCAIR,MAAC1C;;0CACC,KAACF;gCAAO+C,SAAS,IAAMzB,QAAQ;0CAAS;;0CACxC,KAACtB;gCACCyC,SAAQ;gCACRuB,UAAUvC,QAAQ,CAACF,OAAOM,IAAI,MAAM,CAACV;gCACrC4B,SAAS,IAAM,KAAKpB;0CAEnB;;;;;;;;AAMb;AAEAd,aAAaoD,WAAW,GAAG;AAE3B,eAAepD,aAAY"}

package/src/lib/components/uninstall-impact-dialog.component.d.ts

@@ -0,0 +1,40 @@
+import type { UninstallTarget } from '../model/marketplace';
+export interface UninstallImpactDialogProps {
+    open: boolean;
+    listing: {
+        $id?: string;
+        displayName?: string;
+        pluginId?: string;
+    } | null;
+    /** Sites this uninstall touches — see `resolveUninstallTargets`. */
+    targets: readonly UninstallTarget[];
+    scope: 'org' | 'host';
+    onCancel: () => void;
+    onConfirm: () => void | Promise<unknown>;
+}
+/**
+ * What an uninstall breaks, before it happens (AGL-1027).
+ *
+ * Uninstalling was a single click with no confirmation and no statement of
+ * consequence — the pin went away and every page placing the plugin stopped
+ * rendering it, on live sites, silently. A generic "are you sure?" would not
+ * have fixed that: a confirmation that only asks whether you are sure trains
+ * people to click through it. This one names what stops working, and scales its
+ * friction to the finding:
+ *
+ * * nothing placed anywhere → a plain confirm, because there is nothing to
+ *   weigh and adding ceremony to a harmless action is how ceremony stops
+ *   being read;
+ * * published pages affected → a typed acknowledgement, because the number is
+ *   the point and typing it is the only way to be sure it was seen.
+ *
+ * It also has to say when uninstalling changes NOTHING visible: removing a host
+ * pin while an org pin still covers the site swaps which pointer is in use, and
+ * a dialog that implied the plugin was about to stop working would be wrong in
+ * the direction that stops people trusting it.
+ */
+export declare function UninstallImpactDialog(props: UninstallImpactDialogProps): import("react").JSX.Element;
+export declare namespace UninstallImpactDialog {
+    var displayName: string;
+}
+export default UninstallImpactDialog;

package/src/lib/components/uninstall-impact-dialog.component.js

@@ -0,0 +1,244 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ 'use client';
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { useUser } from "@aglyn/tenant-feature-instance";
+import { authorizedFetch } from "@aglyn/shared-util-http/authorized-token";
+import { Alert, Box, Button, Chip, CircularProgress, Dialog, DialogActions, DialogContent, DialogTitle, Stack, TextField, Typography } from "@mui/material";
+import { useCallback, useEffect, useState } from "react";
+/** The word people expect to type when a confirmation is worth slowing down. */ const ACKNOWLEDGEMENT = 'UNINSTALL';
+const PLACEMENT_NOUNS = {
+    screen: 'page',
+    layout: 'layout',
+    component: 'component'
+};
+/**
+ * What an uninstall breaks, before it happens (AGL-1027).
+ *
+ * Uninstalling was a single click with no confirmation and no statement of
+ * consequence — the pin went away and every page placing the plugin stopped
+ * rendering it, on live sites, silently. A generic "are you sure?" would not
+ * have fixed that: a confirmation that only asks whether you are sure trains
+ * people to click through it. This one names what stops working, and scales its
+ * friction to the finding:
+ *
+ * * nothing placed anywhere → a plain confirm, because there is nothing to
+ *   weigh and adding ceremony to a harmless action is how ceremony stops
+ *   being read;
+ * * published pages affected → a typed acknowledgement, because the number is
+ *   the point and typing it is the only way to be sure it was seen.
+ *
+ * It also has to say when uninstalling changes NOTHING visible: removing a host
+ * pin while an org pin still covers the site swaps which pointer is in use, and
+ * a dialog that implied the plugin was about to stop working would be wrong in
+ * the direction that stops people trusting it.
+ */ export function UninstallImpactDialog(props) {
+    var _ref, _ref1, _ref2, _ref3;
+    const { open, listing, targets, scope, onCancel, onConfirm } = props;
+    const { data: user } = useUser();
+    const [impact, setImpact] = useState(null);
+    const [failed, setFailed] = useState(false);
+    const [typed, setTyped] = useState('');
+    const [busy, setBusy] = useState(false);
+    const pluginId = (listing == null ? void 0 : listing.pluginId) ? String(listing.pluginId) : '';
+    const losing = targets.filter((target)=>!target.stillCovered);
+    const covered = targets.filter((target)=>target.stillCovered);
+    const targetKey = targets.map((target)=>target.hostId).join(',');
+    useEffect(()=>{
+        if (!open) {
+            setImpact(null);
+            setFailed(false);
+            setTyped('');
+            return;
+        }
+        // Nothing to scan: either the plugin has no manifest id to match nodes on,
+        // or every site keeps it. Both are answerable without a request.
+        if (!pluginId || !losing.length) {
+            setImpact(null);
+            return;
+        }
+        let active = true;
+        setFailed(false);
+        void (async ()=>{
+            try {
+                const response = await authorizedFetch(user, '/api/hosts/plugin-impact', {
+                    method: 'POST',
+                    headers: {
+                        'Content-Type': 'application/json'
+                    },
+                    body: JSON.stringify({
+                        pluginId,
+                        hostIds: targets.map((target)=>target.hostId),
+                        stillCoveredHostIds: covered.map((target)=>target.hostId)
+                    })
+                });
+                const payload = await response.json().catch(()=>null);
+                if (!active) return;
+                if (!response.ok || !payload) return void setFailed(true);
+                setImpact(payload);
+            } catch (unused) {
+                if (active) setFailed(true);
+            }
+        })();
+        return ()=>{
+            active = false;
+        };
+    // eslint-disable-next-line react-hooks/exhaustive-deps
+    }, [
+        open,
+        pluginId,
+        targetKey,
+        user
+    ]);
+    const confirm = useCallback(async ()=>{
+        setBusy(true);
+        try {
+            await onConfirm();
+        } finally{
+            setBusy(false);
+        }
+    }, [
+        onConfirm
+    ]);
+    const name = (_ref = listing == null ? void 0 : listing.displayName) != null ? _ref : 'this plugin';
+    const scanning = Boolean(pluginId) && losing.length > 0 && !impact && !failed;
+    const affected = (_ref1 = impact == null ? void 0 : impact.affectedScreens) != null ? _ref1 : 0;
+    /**
+   * The scan could not speak, so it must not be read as "nothing breaks".
+   * A failed check is a reason for MORE friction, not less — the one thing it
+   * rules out is confidence.
+   */ const unknown = failed || !pluginId && losing.length > 0;
+    const needsAcknowledgement = affected > 0 || unknown;
+    const canConfirm = !busy && !scanning && (!needsAcknowledgement || typed.trim().toUpperCase() === ACKNOWLEDGEMENT);
+    return /*#__PURE__*/ _jsxs(Dialog, {
+        open: open,
+        onClose: ()=>!busy && onCancel(),
+        maxWidth: "sm",
+        fullWidth: true,
+        children: [
+            /*#__PURE__*/ _jsx(DialogTitle, {
+                children: scope === 'org' ? `Uninstall ${name} across the organization?` : `Remove ${name} from this site?`
+            }),
+            /*#__PURE__*/ _jsx(DialogContent, {
+                dividers: true,
+                children: /*#__PURE__*/ _jsxs(Stack, {
+                    spacing: 2,
+                    children: [
+                        scanning ? /*#__PURE__*/ _jsxs(Stack, {
+                            direction: "row",
+                            spacing: 1,
+                            sx: {
+                                alignItems: 'center'
+                            },
+                            children: [
+                                /*#__PURE__*/ _jsx(CircularProgress, {
+                                    size: 16
+                                }),
+                                /*#__PURE__*/ _jsx(Typography, {
+                                    variant: "body2",
+                                    color: "text.secondary",
+                                    children: 'Checking what this would break…'
+                                })
+                            ]
+                        }) : null,
+                        unknown && !scanning ? /*#__PURE__*/ _jsx(Alert, {
+                            severity: "warning",
+                            children: pluginId ? 'The impact check could not run, so this cannot say what ' + 'would stop working. Nothing here means "nothing breaks".' : 'This listing records no plugin id, so its placements cannot ' + 'be found. Pages using it may stop rendering it.'
+                        }) : null,
+                        !scanning && !unknown && affected > 0 ? /*#__PURE__*/ _jsx(Alert, {
+                            severity: "error",
+                            children: `Removes ${name} from ${(_ref2 = impact == null ? void 0 : impact.losingSites) != null ? _ref2 : losing.length} ` + `site${((_ref3 = impact == null ? void 0 : impact.losingSites) != null ? _ref3 : losing.length) === 1 ? '' : 's'}; ` + `${(impact == null ? void 0 : impact.truncated) ? 'at least ' : ''}${affected} published ` + `page${affected === 1 ? '' : 's'} ` + `place${affected === 1 ? 's' : ''} it and will stop ` + 'rendering it.'
+                        }) : null,
+                        !scanning && !unknown && affected === 0 && losing.length ? /*#__PURE__*/ _jsx(Alert, {
+                            severity: "info",
+                            children: 'No published page places this plugin, so nothing visitors can ' + 'see changes.'
+                        }) : null,
+                        covered.length ? // The case that would otherwise read as a lie.
+                        /*#__PURE__*/ _jsx(Alert, {
+                            severity: "info",
+                            children: covered.length === targets.length ? 'The plugin keeps running on ' + (covered.length === 1 ? 'this site' : `all ${covered.length} of these sites`) + ', because another install still covers ' + (covered.length === 1 ? 'it' : 'them') + '. Only which version is in use changes.' : `${covered.length} of these sites keep the plugin — ` + `${covered.map((target)=>target.label).join(', ')} — because another install still covers them.`
+                        }) : null,
+                        impact == null ? void 0 : impact.sites.filter((site)=>!site.stillCovered && site.placements.length).map((site)=>/*#__PURE__*/ _jsxs(Box, {
+                                children: [
+                                    /*#__PURE__*/ _jsx(Typography, {
+                                        variant: "subtitle2",
+                                        children: site.label
+                                    }),
+                                    /*#__PURE__*/ _jsx(Typography, {
+                                        variant: "caption",
+                                        color: "text.secondary",
+                                        children: `${site.affectedScreens} published page` + `${site.affectedScreens === 1 ? '' : 's'} affected`
+                                    }),
+                                    /*#__PURE__*/ _jsxs(Stack, {
+                                        direction: "row",
+                                        spacing: 1,
+                                        sx: {
+                                            flexWrap: 'wrap',
+                                            gap: 1,
+                                            marginTop: 1
+                                        },
+                                        children: [
+                                            site.placements.slice(0, 12).map((placement)=>/*#__PURE__*/ _jsx(Chip, {
+                                                    size: "small",
+                                                    variant: "outlined",
+                                                    label: `${PLACEMENT_NOUNS[placement.type]}: ${placement.name}` + (placement.count > 1 ? ` ×${placement.count}` : '')
+                                                }, `${placement.type}:${placement.id}`)),
+                                            site.placements.length > 12 ? /*#__PURE__*/ _jsx(Chip, {
+                                                size: "small",
+                                                label: `+${site.placements.length - 12} more`
+                                            }) : null
+                                        ]
+                                    })
+                                ]
+                            }, site.hostId)),
+                        !scanning && losing.length ? /*#__PURE__*/ _jsx(Typography, {
+                            variant: "body2",
+                            color: "text.secondary",
+                            children: 'Uninstalling removes the install only. The plugin’s settings ' + 'and any data it stored are kept, and installing it again ' + 'restores the pages that place it.'
+                        }) : null,
+                        needsAcknowledgement && !scanning ? /*#__PURE__*/ _jsx(TextField, {
+                            size: "small",
+                            label: `Type ${ACKNOWLEDGEMENT} to confirm`,
+                            value: typed,
+                            onChange: (event)=>setTyped(event.target.value),
+                            autoComplete: "off"
+                        }) : null
+                    ]
+                })
+            }),
+            /*#__PURE__*/ _jsxs(DialogActions, {
+                children: [
+                    /*#__PURE__*/ _jsx(Button, {
+                        disabled: busy,
+                        onClick: onCancel,
+                        children: 'Cancel'
+                    }),
+                    /*#__PURE__*/ _jsx(Button, {
+                        color: "error",
+                        variant: "contained",
+                        disabled: !canConfirm,
+                        onClick: ()=>void confirm(),
+                        children: scope === 'org' ? 'Uninstall org-wide' : 'Remove'
+                    })
+                ]
+            })
+        ]
+    });
+}
+UninstallImpactDialog.displayName = 'UninstallImpactDialog';
+export default UninstallImpactDialog;
+
+//# sourceMappingURL=uninstall-impact-dialog.component.js.map

package/src/lib/components/uninstall-impact-dialog.component.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../libs/plugins/marketplace/src/lib/components/uninstall-impact-dialog.component.tsx"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n'use client'\n\nimport { useUser } from '@aglyn/tenant-feature-instance'\nimport { authorizedFetch } from '@aglyn/shared-util-http/authorized-token'\nimport {\n  Alert,\n  Box,\n  Button,\n  Chip,\n  CircularProgress,\n  Dialog,\n  DialogActions,\n  DialogContent,\n  DialogTitle,\n  Stack,\n  TextField,\n  Typography,\n} from '@mui/material'\nimport { useCallback, useEffect, useState } from 'react'\nimport type { UninstallTarget } from '../model/marketplace'\n\n/** Mirrors the `/api/hosts/plugin-impact` response. */\ninterface ImpactSite {\n  hostId: string\n  label: string\n  stillCovered: boolean\n  placements: Array<{\n    type: 'screen' | 'layout' | 'component'\n    id: string\n    name: string\n    count: number\n  }>\n  affectedScreens: number\n  truncated: boolean\n}\ninterface Impact {\n  sites: ImpactSite[]\n  losingSites: number\n  placements: number\n  affectedScreens: number\n  truncated: boolean\n  dataSurvives: boolean\n}\n\n/** The word people expect to type when a confirmation is worth slowing down. */\nconst ACKNOWLEDGEMENT = 'UNINSTALL'\n\nconst PLACEMENT_NOUNS: Record<ImpactSite['placements'][number]['type'], string> =\n  {\n    screen: 'page',\n    layout: 'layout',\n    component: 'component',\n  }\n\nexport interface UninstallImpactDialogProps {\n  open: boolean\n  listing: { $id?: string; displayName?: string; pluginId?: string } | null\n  /** Sites this uninstall touches — see `resolveUninstallTargets`. */\n  targets: readonly UninstallTarget[]\n  scope: 'org' | 'host'\n  onCancel: () => void\n  onConfirm: () => void | Promise<unknown>\n}\n\n/**\n * What an uninstall breaks, before it happens (AGL-1027).\n *\n * Uninstalling was a single click with no confirmation and no statement of\n * consequence — the pin went away and every page placing the plugin stopped\n * rendering it, on live sites, silently. A generic \"are you sure?\" would not\n * have fixed that: a confirmation that only asks whether you are sure trains\n * people to click through it. This one names what stops working, and scales its\n * friction to the finding:\n *\n * * nothing placed anywhere → a plain confirm, because there is nothing to\n *   weigh and adding ceremony to a harmless action is how ceremony stops\n *   being read;\n * * published pages affected → a typed acknowledgement, because the number is\n *   the point and typing it is the only way to be sure it was seen.\n *\n * It also has to say when uninstalling changes NOTHING visible: removing a host\n * pin while an org pin still covers the site swaps which pointer is in use, and\n * a dialog that implied the plugin was about to stop working would be wrong in\n * the direction that stops people trusting it.\n */\nexport function UninstallImpactDialog(props: UninstallImpactDialogProps) {\n  const { open, listing, targets, scope, onCancel, onConfirm } = props\n  const { data: user } = useUser()\n  const [impact, setImpact] = useState<Impact | null>(null)\n  const [failed, setFailed] = useState(false)\n  const [typed, setTyped] = useState('')\n  const [busy, setBusy] = useState(false)\n\n  const pluginId = listing?.pluginId ? String(listing.pluginId) : ''\n  const losing = targets.filter((target) => !target.stillCovered)\n  const covered = targets.filter((target) => target.stillCovered)\n  const targetKey = targets.map((target) => target.hostId).join(',')\n\n  useEffect(() => {\n    if (!open) {\n      setImpact(null)\n      setFailed(false)\n      setTyped('')\n      return\n    }\n    // Nothing to scan: either the plugin has no manifest id to match nodes on,\n    // or every site keeps it. Both are answerable without a request.\n    if (!pluginId || !losing.length) {\n      setImpact(null)\n      return\n    }\n    let active = true\n    setFailed(false)\n    void (async () => {\n      try {\n        const response = await authorizedFetch(\n          user,\n          '/api/hosts/plugin-impact',\n          {\n            method: 'POST',\n            headers: { 'Content-Type': 'application/json' },\n            body: JSON.stringify({\n              pluginId,\n              hostIds: targets.map((target) => target.hostId),\n              stillCoveredHostIds: covered.map((target) => target.hostId),\n            }),\n          },\n        )\n        const payload = await response.json().catch(() => null)\n        if (!active) return\n        if (!response.ok || !payload) return void setFailed(true)\n        setImpact(payload as Impact)\n      } catch {\n        if (active) setFailed(true)\n      }\n    })()\n    return () => {\n      active = false\n    }\n    // eslint-disable-next-line react-hooks/exhaustive-deps\n  }, [open, pluginId, targetKey, user])\n\n  const confirm = useCallback(async () => {\n    setBusy(true)\n    try {\n      await onConfirm()\n    } finally {\n      setBusy(false)\n    }\n  }, [onConfirm])\n\n  const name = listing?.displayName ?? 'this plugin'\n  const scanning = Boolean(pluginId) && losing.length > 0 && !impact && !failed\n  const affected = impact?.affectedScreens ?? 0\n  /**\n   * The scan could not speak, so it must not be read as \"nothing breaks\".\n   * A failed check is a reason for MORE friction, not less — the one thing it\n   * rules out is confidence.\n   */\n  const unknown = failed || (!pluginId && losing.length > 0)\n  const needsAcknowledgement = affected > 0 || unknown\n  const canConfirm =\n    !busy &&\n    !scanning &&\n    (!needsAcknowledgement || typed.trim().toUpperCase() === ACKNOWLEDGEMENT)\n\n  return (\n    <Dialog open={open} onClose={() => !busy && onCancel()} maxWidth=\"sm\" fullWidth>\n      <DialogTitle>\n        {scope === 'org'\n          ? `Uninstall ${name} across the organization?`\n          : `Remove ${name} from this site?`}\n      </DialogTitle>\n      <DialogContent dividers>\n        <Stack spacing={2}>\n          {scanning ? (\n            <Stack direction=\"row\" spacing={1} sx={{ alignItems: 'center' }}>\n              <CircularProgress size={16} />\n              <Typography variant=\"body2\" color=\"text.secondary\">\n                {'Checking what this would break…'}\n              </Typography>\n            </Stack>\n          ) : null}\n\n          {unknown && !scanning ? (\n            <Alert severity=\"warning\">\n              {pluginId\n                ? 'The impact check could not run, so this cannot say what ' +\n                  'would stop working. Nothing here means \"nothing breaks\".'\n                : 'This listing records no plugin id, so its placements cannot ' +\n                  'be found. Pages using it may stop rendering it.'}\n            </Alert>\n          ) : null}\n\n          {!scanning && !unknown && affected > 0 ? (\n            <Alert severity=\"error\">\n              {`Removes ${name} from ${impact?.losingSites ?? losing.length} ` +\n                `site${(impact?.losingSites ?? losing.length) === 1 ? '' : 's'}; ` +\n                `${impact?.truncated ? 'at least ' : ''}${affected} published ` +\n                `page${affected === 1 ? '' : 's'} ` +\n                `place${affected === 1 ? 's' : ''} it and will stop ` +\n                'rendering it.'}\n            </Alert>\n          ) : null}\n\n          {!scanning && !unknown && affected === 0 && losing.length ? (\n            <Alert severity=\"info\">\n              {'No published page places this plugin, so nothing visitors can ' +\n                'see changes.'}\n            </Alert>\n          ) : null}\n\n          {covered.length ? (\n            // The case that would otherwise read as a lie.\n            <Alert severity=\"info\">\n              {covered.length === targets.length\n                ? 'The plugin keeps running on ' +\n                  (covered.length === 1\n                    ? 'this site'\n                    : `all ${covered.length} of these sites`) +\n                  ', because another install still covers ' +\n                  (covered.length === 1 ? 'it' : 'them') +\n                  '. Only which version is in use changes.'\n                : `${covered.length} of these sites keep the plugin — ` +\n                  `${covered\n                    .map((target) => target.label)\n                    .join(', ')} — because another install still covers them.`}\n            </Alert>\n          ) : null}\n\n          {impact?.sites\n            .filter((site) => !site.stillCovered && site.placements.length)\n            .map((site) => (\n              <Box key={site.hostId}>\n                <Typography variant=\"subtitle2\">{site.label}</Typography>\n                <Typography variant=\"caption\" color=\"text.secondary\">\n                  {`${site.affectedScreens} published page` +\n                    `${site.affectedScreens === 1 ? '' : 's'} affected`}\n                </Typography>\n                <Stack\n                  direction=\"row\"\n                  spacing={1}\n                  sx={{ flexWrap: 'wrap', gap: 1, marginTop: 1 }}\n                >\n                  {site.placements.slice(0, 12).map((placement) => (\n                    <Chip\n                      key={`${placement.type}:${placement.id}`}\n                      size=\"small\"\n                      variant=\"outlined\"\n                      label={\n                        `${PLACEMENT_NOUNS[placement.type]}: ${placement.name}` +\n                        (placement.count > 1 ? ` ×${placement.count}` : '')\n                      }\n                    />\n                  ))}\n                  {site.placements.length > 12 ? (\n                    <Chip\n                      size=\"small\"\n                      label={`+${site.placements.length - 12} more`}\n                    />\n                  ) : null}\n                </Stack>\n              </Box>\n            ))}\n\n          {!scanning && losing.length ? (\n            <Typography variant=\"body2\" color=\"text.secondary\">\n              {'Uninstalling removes the install only. The plugin’s settings ' +\n                'and any data it stored are kept, and installing it again ' +\n                'restores the pages that place it.'}\n            </Typography>\n          ) : null}\n\n          {needsAcknowledgement && !scanning ? (\n            <TextField\n              size=\"small\"\n              label={`Type ${ACKNOWLEDGEMENT} to confirm`}\n              value={typed}\n              onChange={(event) => setTyped(event.target.value)}\n              autoComplete=\"off\"\n            />\n          ) : null}\n        </Stack>\n      </DialogContent>\n      <DialogActions>\n        <Button disabled={busy} onClick={onCancel}>\n          {'Cancel'}\n        </Button>\n        <Button\n          color=\"error\"\n          variant=\"contained\"\n          disabled={!canConfirm}\n          onClick={() => void confirm()}\n        >\n          {scope === 'org' ? 'Uninstall org-wide' : 'Remove'}\n        </Button>\n      </DialogActions>\n    </Dialog>\n  )\n}\nUninstallImpactDialog.displayName = 'UninstallImpactDialog'\n\nexport default UninstallImpactDialog\n"],"names":["useUser","authorizedFetch","Alert","Box","Button","Chip","CircularProgress","Dialog","DialogActions","DialogContent","DialogTitle","Stack","TextField","Typography","useCallback","useEffect","useState","ACKNOWLEDGEMENT","PLACEMENT_NOUNS","screen","layout","component","UninstallImpactDialog","props","open","listing","targets","scope","onCancel","onConfirm","data","user","impact","setImpact","failed","setFailed","typed","setTyped","busy","setBusy","pluginId","String","losing","filter","target","stillCovered","covered","targetKey","map","hostId","join","length","active","response","method","headers","body","JSON","stringify","hostIds","stillCoveredHostIds","payload","json","catch","ok","confirm","name","displayName","scanning","Boolean","affected","affectedScreens","unknown","needsAcknowledgement","canConfirm","trim","toUpperCase","onClose","maxWidth","fullWidth","dividers","spacing","direction","sx","alignItems","size","variant","color","severity","losingSites","truncated","label","sites","site","placements","flexWrap","gap","marginTop","slice","placement","type","count","id","value","onChange","event","autoComplete","disabled","onClick"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GACD;;AAEA,SAASA,OAAO,QAAQ,iCAAgC;AACxD,SAASC,eAAe,QAAQ,2CAA0C;AAC1E,SACEC,KAAK,EACLC,GAAG,EACHC,MAAM,EACNC,IAAI,EACJC,gBAAgB,EAChBC,MAAM,EACNC,aAAa,EACbC,aAAa,EACbC,WAAW,EACXC,KAAK,EACLC,SAAS,EACTC,UAAU,QACL,gBAAe;AACtB,SAASC,WAAW,EAAEC,SAAS,EAAEC,QAAQ,QAAQ,QAAO;AA0BxD,8EAA8E,GAC9E,MAAMC,kBAAkB;AAExB,MAAMC,kBACJ;IACEC,QAAQ;IACRC,QAAQ;IACRC,WAAW;AACb;AAYF;;;;;;;;;;;;;;;;;;;;CAoBC,GACD,OAAO,SAASC,sBAAsBC,KAAiC;;IACrE,MAAM,EAAEC,IAAI,EAAEC,OAAO,EAAEC,OAAO,EAAEC,KAAK,EAAEC,QAAQ,EAAEC,SAAS,EAAE,GAAGN;IAC/D,MAAM,EAAEO,MAAMC,IAAI,EAAE,GAAG/B;IACvB,MAAM,CAACgC,QAAQC,UAAU,GAAGjB,SAAwB;IACpD,MAAM,CAACkB,QAAQC,UAAU,GAAGnB,SAAS;IACrC,MAAM,CAACoB,OAAOC,SAAS,GAAGrB,SAAS;IACnC,MAAM,CAACsB,MAAMC,QAAQ,GAAGvB,SAAS;IAEjC,MAAMwB,WAAWf,CAAAA,2BAAAA,QAASe,QAAQ,IAAGC,OAAOhB,QAAQe,QAAQ,IAAI;IAChE,MAAME,SAAShB,QAAQiB,MAAM,CAAC,CAACC,SAAW,CAACA,OAAOC,YAAY;IAC9D,MAAMC,UAAUpB,QAAQiB,MAAM,CAAC,CAACC,SAAWA,OAAOC,YAAY;IAC9D,MAAME,YAAYrB,QAAQsB,GAAG,CAAC,CAACJ,SAAWA,OAAOK,MAAM,EAAEC,IAAI,CAAC;IAE9DnC,UAAU;QACR,IAAI,CAACS,MAAM;YACTS,UAAU;YACVE,UAAU;YACVE,SAAS;YACT;QACF;QACA,2EAA2E;QAC3E,iEAAiE;QACjE,IAAI,CAACG,YAAY,CAACE,OAAOS,MAAM,EAAE;YAC/BlB,UAAU;YACV;QACF;QACA,IAAImB,SAAS;QACbjB,UAAU;QACV,KAAK,AAAC,CAAA;YACJ,IAAI;gBACF,MAAMkB,WAAW,MAAMpD,gBACrB8B,MACA,4BACA;oBACEuB,QAAQ;oBACRC,SAAS;wBAAE,gBAAgB;oBAAmB;oBAC9CC,MAAMC,KAAKC,SAAS,CAAC;wBACnBlB;wBACAmB,SAASjC,QAAQsB,GAAG,CAAC,CAACJ,SAAWA,OAAOK,MAAM;wBAC9CW,qBAAqBd,QAAQE,GAAG,CAAC,CAACJ,SAAWA,OAAOK,MAAM;oBAC5D;gBACF;gBAEF,MAAMY,UAAU,MAAMR,SAASS,IAAI,GAAGC,KAAK,CAAC,IAAM;gBAClD,IAAI,CAACX,QAAQ;gBACb,IAAI,CAACC,SAASW,EAAE,IAAI,CAACH,SAAS,OAAO,KAAK1B,UAAU;gBACpDF,UAAU4B;YACZ,EAAE,eAAM;gBACN,IAAIT,QAAQjB,UAAU;YACxB;QACF,CAAA;QACA,OAAO;YACLiB,SAAS;QACX;IACA,uDAAuD;IACzD,GAAG;QAAC5B;QAAMgB;QAAUO;QAAWhB;KAAK;IAEpC,MAAMkC,UAAUnD,YAAY;QAC1ByB,QAAQ;QACR,IAAI;YACF,MAAMV;QACR,SAAU;YACRU,QAAQ;QACV;IACF,GAAG;QAACV;KAAU;IAEd,MAAMqC,eAAOzC,2BAAAA,QAAS0C,WAAW,mBAAI;IACrC,MAAMC,WAAWC,QAAQ7B,aAAaE,OAAOS,MAAM,GAAG,KAAK,CAACnB,UAAU,CAACE;IACvE,MAAMoC,oBAAWtC,0BAAAA,OAAQuC,eAAe,oBAAI;IAC5C;;;;GAIC,GACD,MAAMC,UAAUtC,UAAW,CAACM,YAAYE,OAAOS,MAAM,GAAG;IACxD,MAAMsB,uBAAuBH,WAAW,KAAKE;IAC7C,MAAME,aACJ,CAACpC,QACD,CAAC8B,YACA,CAAA,CAACK,wBAAwBrC,MAAMuC,IAAI,GAAGC,WAAW,OAAO3D,eAAc;IAEzE,qBACE,MAACV;QAAOiB,MAAMA;QAAMqD,SAAS,IAAM,CAACvC,QAAQV;QAAYkD,UAAS;QAAKC,SAAS;;0BAC7E,KAACrE;0BACEiB,UAAU,QACP,CAAC,UAAU,EAAEuC,KAAK,yBAAyB,CAAC,GAC5C,CAAC,OAAO,EAAEA,KAAK,gBAAgB,CAAC;;0BAEtC,KAACzD;gBAAcuE,QAAQ;0BACrB,cAAA,MAACrE;oBAAMsE,SAAS;;wBACbb,yBACC,MAACzD;4BAAMuE,WAAU;4BAAMD,SAAS;4BAAGE,IAAI;gCAAEC,YAAY;4BAAS;;8CAC5D,KAAC9E;oCAAiB+E,MAAM;;8CACxB,KAACxE;oCAAWyE,SAAQ;oCAAQC,OAAM;8CAC/B;;;6BAGH;wBAEHf,WAAW,CAACJ,yBACX,KAAClE;4BAAMsF,UAAS;sCACbhD,WACG,6DACA,6DACA,iEACA;6BAEJ;wBAEH,CAAC4B,YAAY,CAACI,WAAWF,WAAW,kBACnC,KAACpE;4BAAMsF,UAAS;sCACb,CAAC,QAAQ,EAAEtB,KAAK,MAAM,WAAElC,0BAAAA,OAAQyD,WAAW,oBAAI/C,OAAOS,MAAM,CAAC,CAAC,CAAC,GAC9D,CAAC,IAAI,EAAE,UAACnB,0BAAAA,OAAQyD,WAAW,oBAAI/C,OAAOS,MAAM,MAAM,IAAI,KAAK,IAAI,EAAE,CAAC,GAClE,GAAGnB,CAAAA,0BAAAA,OAAQ0D,SAAS,IAAG,cAAc,KAAKpB,SAAS,WAAW,CAAC,GAC/D,CAAC,IAAI,EAAEA,aAAa,IAAI,KAAK,IAAI,CAAC,CAAC,GACnC,CAAC,KAAK,EAAEA,aAAa,IAAI,MAAM,GAAG,kBAAkB,CAAC,GACrD;6BAEF;wBAEH,CAACF,YAAY,CAACI,WAAWF,aAAa,KAAK5B,OAAOS,MAAM,iBACvD,KAACjD;4BAAMsF,UAAS;sCACb,mEACC;6BAEF;wBAEH1C,QAAQK,MAAM,GACb,+CAA+C;sCAC/C,KAACjD;4BAAMsF,UAAS;sCACb1C,QAAQK,MAAM,KAAKzB,QAAQyB,MAAM,GAC9B,iCACCL,CAAAA,QAAQK,MAAM,KAAK,IAChB,cACA,CAAC,IAAI,EAAEL,QAAQK,MAAM,CAAC,eAAe,CAAC,AAAD,IACzC,4CACCL,CAAAA,QAAQK,MAAM,KAAK,IAAI,OAAO,MAAK,IACpC,4CACA,GAAGL,QAAQK,MAAM,CAAC,kCAAkC,CAAC,GACrD,GAAGL,QACAE,GAAG,CAAC,CAACJ,SAAWA,OAAO+C,KAAK,EAC5BzC,IAAI,CAAC,MAAM,6CAA6C,CAAC;6BAEhE;wBAEHlB,0BAAAA,OAAQ4D,KAAK,CACXjD,MAAM,CAAC,CAACkD,OAAS,CAACA,KAAKhD,YAAY,IAAIgD,KAAKC,UAAU,CAAC3C,MAAM,EAC7DH,GAAG,CAAC,CAAC6C,qBACJ,MAAC1F;;kDACC,KAACU;wCAAWyE,SAAQ;kDAAaO,KAAKF,KAAK;;kDAC3C,KAAC9E;wCAAWyE,SAAQ;wCAAUC,OAAM;kDACjC,GAAGM,KAAKtB,eAAe,CAAC,eAAe,CAAC,GACvC,GAAGsB,KAAKtB,eAAe,KAAK,IAAI,KAAK,IAAI,SAAS,CAAC;;kDAEvD,MAAC5D;wCACCuE,WAAU;wCACVD,SAAS;wCACTE,IAAI;4CAAEY,UAAU;4CAAQC,KAAK;4CAAGC,WAAW;wCAAE;;4CAE5CJ,KAAKC,UAAU,CAACI,KAAK,CAAC,GAAG,IAAIlD,GAAG,CAAC,CAACmD,0BACjC,KAAC9F;oDAECgF,MAAK;oDACLC,SAAQ;oDACRK,OACE,GAAGzE,eAAe,CAACiF,UAAUC,IAAI,CAAC,CAAC,EAAE,EAAED,UAAUjC,IAAI,EAAE,GACtDiC,CAAAA,UAAUE,KAAK,GAAG,IAAI,CAAC,EAAE,EAAEF,UAAUE,KAAK,EAAE,GAAG,EAAC;mDAL9C,GAAGF,UAAUC,IAAI,CAAC,CAAC,EAAED,UAAUG,EAAE,EAAE;4CAS3CT,KAAKC,UAAU,CAAC3C,MAAM,GAAG,mBACxB,KAAC9C;gDACCgF,MAAK;gDACLM,OAAO,CAAC,CAAC,EAAEE,KAAKC,UAAU,CAAC3C,MAAM,GAAG,GAAG,KAAK,CAAC;iDAE7C;;;;+BA3BE0C,KAAK5C,MAAM;wBAgCxB,CAACmB,YAAY1B,OAAOS,MAAM,iBACzB,KAACtC;4BAAWyE,SAAQ;4BAAQC,OAAM;sCAC/B,kEACC,8DACA;6BAEF;wBAEHd,wBAAwB,CAACL,yBACxB,KAACxD;4BACCyE,MAAK;4BACLM,OAAO,CAAC,KAAK,EAAE1E,gBAAgB,WAAW,CAAC;4BAC3CsF,OAAOnE;4BACPoE,UAAU,CAACC,QAAUpE,SAASoE,MAAM7D,MAAM,CAAC2D,KAAK;4BAChDG,cAAa;6BAEb;;;;0BAGR,MAAClG;;kCACC,KAACJ;wBAAOuG,UAAUrE;wBAAMsE,SAAShF;kCAC9B;;kCAEH,KAACxB;wBACCmF,OAAM;wBACND,SAAQ;wBACRqB,UAAU,CAACjC;wBACXkC,SAAS,IAAM,KAAK3C;kCAEnBtC,UAAU,QAAQ,uBAAuB;;;;;;AAKpD;AACAL,sBAAsB6C,WAAW,GAAG;AAEpC,eAAe7C,sBAAqB"}

package/src/lib/constants/bundle-common.d.ts

@@ -0,0 +1,8 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ */
+export declare const BUNDLE_ID = "marketplace";

package/src/lib/constants/bundle-common.js

@@ -0,0 +1,9 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ */ export const BUNDLE_ID = 'marketplace';
+
+//# sourceMappingURL=bundle-common.js.map

package/src/lib/constants/bundle-common.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../libs/plugins/marketplace/src/lib/constants/bundle-common.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n */\n\nexport const BUNDLE_ID = 'marketplace'\n"],"names":["BUNDLE_ID"],"mappings":"AAAA;;;;;;CAMC,GAED,OAAO,MAAMA,YAAY,cAAa"}

package/src/lib/hooks/use-artifact-update.d.ts

@@ -0,0 +1,41 @@
+import type { ArtifactChange } from '../model';
+/** The server's answer to "what would this update do to my copy?" (AGL-1018). */
+export interface ArtifactUpdatePreview {
+    artifactType: string;
+    installedVersion: string | null;
+    availableVersion: string | null;
+    mergeable: boolean;
+    reason?: string;
+    safe: ArtifactChange[];
+    kept: ArtifactChange[];
+    conflicts: ArtifactChange[];
+    unchanged: number;
+    identical: boolean;
+    schema?: {
+        added: string[];
+        removed: string[];
+        retyped: string[];
+        additiveOnly: boolean;
+        recordCount: number;
+    };
+}
+/**
+ * Preview-then-apply for a copied artifact (AGL-1018).
+ *
+ * Deliberately separate from `useMarketplaceActions`: install writes the
+ * publisher's version, and an update reconciles it with a copy that has
+ * diverged. Sharing one call would put the destructive path one forgotten
+ * argument away from the safe one.
+ */
+export declare function useArtifactUpdate(hostId: string): {
+    preview: ArtifactUpdatePreview;
+    loading: boolean;
+    loadPreview: (listingId: string) => Promise<ArtifactUpdatePreview>;
+    applyUpdate: (listingId: string, options: {
+        mode: "merge" | "copy";
+        takePaths?: string[];
+        confirmDestructive?: boolean;
+    }) => Promise<boolean>;
+    setPreview: import("react").Dispatch<import("react").SetStateAction<ArtifactUpdatePreview>>;
+};
+export default useArtifactUpdate;