@aglyn/plugins-marketplace 1.0.0-beta.143

package/src/lib/components/host-plugins-card.component.js

@@ -0,0 +1,566 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ 'use client';
+import { _ as _extends } from "@swc/helpers/_/_extends";
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { buildRoute, PLUGIN_COMPONENT_ID, pluginDocsHelp, Route } from "@aglyn/aglyn";
+import { AppLink, CardDisplay, useConfirmationContext } from "@aglyn/shared-ui-jsx";
+import { useSnackbar } from "@aglyn/shared-ui-snackstack";
+import { Alert, Button, Chip, Stack, Tooltip, Typography } from "@mui/material";
+import { collection, deleteDoc, doc, documentId, limit, query, where } from "firebase/firestore";
+import { useCallback, useMemo, useState } from "react";
+import { compareArtifactVersions, isPluginRevoked, lockdownRefusalText, offeredPluginVersion, parseLockdownRefusal } from "@aglyn/aglyn";
+import { useFirestore, useFirestoreCollection, useHostOrgId, useUser } from "@aglyn/tenant-feature-instance";
+import { authorizedFetch } from "@aglyn/shared-util-http/authorized-token";
+/**
+ * Installed marketplace plugins (AGL-45): lists the host's pinned plugin
+ * installs with their capabilities, flags available upgrades (latest
+ * listing version ≠ pinned) and platform kill switches (public
+ * `revocations` read), and offers explicit upgrade/uninstall. Upgrades go
+ * through `/api/marketplace/install-plugin` so the new pin is validated
+ * server-side; uninstall removes the host install doc. Place the installed
+ * plugin on a screen with the Plugin element (listing id).
+ */ export function HostPluginsCard(props) {
+    const { hostId, orgSlug } = props;
+    // One row → one installation page (AGL-1007). The name is the link, so a
+    // row stays clickable without swallowing its own action buttons.
+    const installationHref = (listingId)=>orgSlug ? buildRoute(Route.ORG_PLUGIN_INSTALLATION, {
+            orgSlug,
+            pluginRef: listingId
+        }) : undefined;
+    const firestore = useFirestore();
+    const { data: user } = useUser();
+    const { enqueueSnackbar } = useSnackbar();
+    const { confirm } = useConfirmationContext();
+    const [busy, setBusy] = useState(null);
+    const orgId = useHostOrgId(hostId);
+    const { data: installDocs } = useFirestoreCollection(()=>query(collection(firestore, 'hosts', hostId, 'installs'), limit(50)), [
+        firestore,
+        hostId
+    ], {
+        idField: '$id'
+    });
+    // Org-tier pins (AGL-237): apply to every host in the org; a host pin
+    // of the same listing shadows the org one. Held at null while
+    // `useHostOrgId` is in flight, never `orgs/-pending-` (AGL-1440):
+    // installs are member-gated, so the sentinel was a guaranteed-denied
+    // listen on every mount of this card.
+    const { data: orgInstallDocs } = useFirestoreCollection(()=>orgId ? query(collection(firestore, 'orgs', orgId, 'installs'), limit(50)) : null, [
+        firestore,
+        orgId
+    ], {
+        idField: '$id'
+    });
+    const orgInstalls = useMemo(()=>[
+            ...orgInstallDocs != null ? orgInstallDocs : []
+        ], [
+        orgInstallDocs
+    ]);
+    const installs = useMemo(()=>[
+            ...installDocs != null ? installDocs : []
+        ], [
+        installDocs
+    ]);
+    const listingIds = useMemo(()=>[
+            ...new Set([
+                ...installs.map((install)=>install.$id),
+                ...orgInstalls.map((install)=>install.$id)
+            ])
+        ].slice(0, 10), [
+        installs,
+        orgInstalls
+    ]);
+    // Latest published version per listing (upgrade detection) — public read.
+    const { data: listingDocs } = useFirestoreCollection(()=>query(collection(firestore, 'marketplaceListings'), where(documentId(), 'in', listingIds.length ? listingIds : [
+            '-none-'
+        ])), [
+        firestore,
+        listingIds.join(',')
+    ], {
+        idField: '$id'
+    });
+    // Kill switches (public revocations read) for the installed listings.
+    const { data: revocationDocs } = useFirestoreCollection(()=>query(collection(firestore, 'revocations'), where(documentId(), 'in', listingIds.length ? listingIds : [
+            '-none-'
+        ])), [
+        firestore,
+        listingIds.join(',')
+    ], {
+        idField: '$id'
+    });
+    const revokedByListing = useMemo(()=>{
+        const map = {};
+        for (const install of installs){
+            const revocation = (revocationDocs != null ? revocationDocs : []).find((doc)=>doc.$id === install.$id);
+            if (!revocation) continue;
+            // THE SHARED PREDICATE, not a fourth copy of it (AGL-2305). This card
+            // carried a byte-for-byte duplicate of `isPluginRevoked`'s body, which
+            // is precisely what AGL-1085 collapsed three inline copies into one to
+            // stop: a reader that disagrees with the writer about this document's
+            // shape is how a kill switch silently stops killing. It happened to be
+            // correct; being correct today is not the property that matters.
+            map[install.$id] = isPluginRevoked(revocation, install.version);
+        }
+        return map;
+    }, [
+        installs,
+        revocationDocs
+    ]);
+    /*==========================================
+   * WHY IT WAS DISABLED (AGL-2328).
+   *
+   * Staff are REQUIRED to type a reason to revoke a plugin version — the
+   * route refuses without one — and until now the customer whose site the
+   * plugin stopped working on was shown a bare "disabled" chip and a generic
+   * paragraph. The reason was stored, in the same document this card already
+   * reads, one field away from the flag it renders. Every consumer of
+   * `revocations` reads `versions` and nothing else; the type's own comment
+   * calls `versions` "the ONLY field any reader consults", which was true and
+   * is the defect.
+   *
+   * Only the REASON and the DATE are surfaced. `revokedBy` is a staff uid and
+   * belongs in the audit log, not on a customer's screen.
+   *=========================================*/ const revocationDetailByListing = useMemo(()=>{
+        const map = {};
+        for (const doc of revocationDocs != null ? revocationDocs : []){
+            var _ref;
+            var _at_toMillis;
+            const at = doc.revokedAt;
+            map[doc.$id] = {
+                reason: typeof doc.reason === 'string' && doc.reason.trim() ? doc.reason.trim() : null,
+                atMs: (_ref = at == null ? void 0 : (_at_toMillis = at.toMillis) == null ? void 0 : _at_toMillis.call(at)) != null ? _ref : typeof (at == null ? void 0 : at.seconds) === 'number' ? at.seconds * 1000 : null
+            };
+        }
+        return map;
+    }, [
+        revocationDocs
+    ]);
+    // The newest INSTALLABLE version, not merely the newest approved one
+    // (AGL-1016, corrected by AGL-2368).
+    //
+    // Offering `latestVersion` here put an Upgrade button in front of every
+    // workspace the moment a publisher uploaded, and the install route then
+    // refused the click — AGL-966 only ever hands out reviewed bytes. The
+    // mirror fixed that and then reproduced it one state over: nothing cleared
+    // it when a version was revoked, so the Upgrade button pointed at bytes the
+    // kill switch had stopped. Every writer of the mirror now derives it from
+    // `newestInstallableVersion`, and this card holds the revocation document
+    // ALREADY — it is right there, feeding the disabled chip below — so it
+    // cross-checks rather than trusting a cache written by a separate,
+    // non-transactional write it can observe mid-flight.
+    const latestByListing = useMemo(()=>{
+        const map = {};
+        for (const listing of listingDocs != null ? listingDocs : []){
+            var _offeredPluginVersion;
+            const revocation = (revocationDocs != null ? revocationDocs : []).find((doc)=>doc.$id === listing.$id);
+            map[listing.$id] = (_offeredPluginVersion = offeredPluginVersion(listing, revocation)) != null ? _offeredPluginVersion : '';
+        }
+        return map;
+    }, [
+        listingDocs,
+        revocationDocs
+    ]);
+    const handleUpgrade = useCallback((install)=>async ()=>{
+            setBusy(install.$id);
+            try {
+                const response = await authorizedFetch(user, '/api/marketplace/install-plugin', {
+                    method: 'POST',
+                    headers: {
+                        'Content-Type': 'application/json'
+                    },
+                    body: JSON.stringify({
+                        hostId,
+                        listingId: install.$id
+                    })
+                });
+                const payload = await response.json().catch(()=>({}));
+                if (response.ok) {
+                    enqueueSnackbar(`Upgraded to ${payload.version}`, {
+                        variant: 'success',
+                        persist: false
+                    });
+                } else {
+                    // An installs lockdown refuses the upgrade route too (AGL-1532).
+                    const locked = parseLockdownRefusal(response.status, payload);
+                    if (locked) {
+                        enqueueSnackbar(lockdownRefusalText(locked), {
+                            variant: 'warning',
+                            persist: true
+                        });
+                    } else {
+                        var _ref;
+                        enqueueSnackbar((_ref = payload == null ? void 0 : payload.error) != null ? _ref : 'Upgrade failed', {
+                            variant: 'error',
+                            allowDuplicate: true
+                        });
+                    }
+                }
+            } finally{
+                setBusy(null);
+            }
+        }, [
+        hostId,
+        user,
+        enqueueSnackbar
+    ]);
+    const requestPluginApi = useCallback(async (body)=>{
+        const response = await authorizedFetch(user, '/api/marketplace/install-plugin', {
+            method: 'POST',
+            headers: {
+                'Content-Type': 'application/json'
+            },
+            body: JSON.stringify(_extends({
+                hostId
+            }, body))
+        });
+        const payload = await response.json().catch(()=>({}));
+        if (!response.ok) {
+            var _ref;
+            // Every install-class action in this card funnels through here
+            // (share, org upgrade, uninstall at both scopes) — so does the
+            // pause notice (AGL-1532).
+            const locked = parseLockdownRefusal(response.status, payload);
+            if (locked) {
+                enqueueSnackbar(lockdownRefusalText(locked), {
+                    variant: 'warning',
+                    persist: true
+                });
+                return null;
+            }
+            enqueueSnackbar((_ref = payload == null ? void 0 : payload.error) != null ? _ref : 'Plugin operation failed', {
+                variant: 'error',
+                allowDuplicate: true
+            });
+            return null;
+        }
+        return payload;
+    }, [
+        hostId,
+        user,
+        enqueueSnackbar
+    ]);
+    // Promote a host pin to the org tier (AGL-237): org pin first, then the
+    // host pin is removed — host pins shadow org ones in the loader.
+    const handleShareWithOrg = useCallback((install)=>async ()=>{
+            setBusy(install.$id);
+            try {
+                const payload = await requestPluginApi({
+                    listingId: install.$id,
+                    scope: 'org'
+                });
+                if (!payload) return;
+                await deleteDoc(doc(firestore, 'hosts', hostId, 'installs', install.$id));
+                enqueueSnackbar('Plugin now installed for the whole organization', {
+                    variant: 'success',
+                    persist: false
+                });
+            } finally{
+                setBusy(null);
+            }
+        }, [
+        requestPluginApi,
+        firestore,
+        hostId,
+        enqueueSnackbar
+    ]);
+    const handleOrgUpgrade = useCallback((install)=>async ()=>{
+            setBusy(install.$id);
+            try {
+                const payload = await requestPluginApi({
+                    listingId: install.$id,
+                    scope: 'org'
+                });
+                if (payload) {
+                    enqueueSnackbar(`Upgraded to ${payload.version}`, {
+                        variant: 'success',
+                        persist: false
+                    });
+                }
+            } finally{
+                setBusy(null);
+            }
+        }, [
+        requestPluginApi,
+        enqueueSnackbar
+    ]);
+    const handleOrgUninstall = useCallback((install)=>async ()=>{
+            var _install_displayName;
+            const confirmed = await confirm({
+                title: `Uninstall "${(_install_displayName = install.displayName) != null ? _install_displayName : install.$id}" org-wide?`,
+                description: 'Every site in the organization loses this plugin unless it has ' + 'its own host-level pin. Data the plugin created stays untouched.',
+                confirmationText: 'Uninstall',
+                confirmationButtonProps: {
+                    color: 'error'
+                }
+            }).then(()=>true).catch(()=>false);
+            if (!confirmed) return;
+            const payload = await requestPluginApi({
+                listingId: install.$id,
+                scope: 'org',
+                action: 'uninstall'
+            });
+            if (payload) {
+                enqueueSnackbar('Plugin uninstalled org-wide', {
+                    variant: 'success',
+                    persist: false
+                });
+            }
+        }, [
+        confirm,
+        requestPluginApi,
+        enqueueSnackbar
+    ]);
+    const handleUninstall = useCallback((install)=>async ()=>{
+            var _install_displayName;
+            const confirmed = await confirm({
+                title: `Uninstall "${(_install_displayName = install.displayName) != null ? _install_displayName : install.$id}"?`,
+                description: 'Plugin elements pointing at it will show a placeholder until ' + 'reinstalled. Data the plugin created stays untouched.',
+                confirmationText: 'Uninstall',
+                confirmationButtonProps: {
+                    color: 'error'
+                }
+            }).then(()=>true).catch(()=>false);
+            if (!confirmed) return;
+            // Through the API (AGL-424) so the org enablement switchboard stays
+            // in step with the removed pin.
+            const payload = await requestPluginApi({
+                listingId: install.$id,
+                action: 'uninstall'
+            });
+            if (payload) {
+                enqueueSnackbar('Plugin uninstalled', {
+                    variant: 'success',
+                    persist: false
+                });
+            }
+        }, [
+        confirm,
+        requestPluginApi,
+        enqueueSnackbar
+    ]);
+    return /*#__PURE__*/ _jsx(CardDisplay, {
+        header: "Marketplace installs",
+        help: pluginDocsHelp('plugins', {
+            anchor: '#install--upgrade'
+        }),
+        contentGutterX: true,
+        contentGutterY: true,
+        children: /*#__PURE__*/ _jsxs(Stack, {
+            spacing: 1.5,
+            children: [
+                installs.length === 0 && orgInstalls.length === 0 ? /*#__PURE__*/ _jsx(Typography, {
+                    variant: "body2",
+                    color: "text.secondary",
+                    children: 'No marketplace plugins installed. Install one from the ' + 'marketplace, then add a Plugin element to a screen and set ' + 'its listing id.'
+                }) : installs.map((install)=>{
+                    var _compareArtifactVersions, _ref, _ref1, _install_displayName, _ref2, _install_displayName1;
+                    var _install_manifest, _capabilities_network, _capabilities_events, _capabilities_network1, _capabilities_events1, _revocationDetailByListing_install_$id, _revocationDetailByListing_install_$id1, _revocationDetailByListing_install_$id2, _revocationDetailByListing_install_$id3;
+                    const latest = latestByListing[install.$id];
+                    const canUpgrade = ((_compareArtifactVersions = compareArtifactVersions(install.version, latest)) != null ? _compareArtifactVersions : 0) < 0;
+                    const revoked = revokedByListing[install.$id];
+                    const capabilities = (_ref = (_install_manifest = install.manifest) == null ? void 0 : _install_manifest.capabilities) != null ? _ref : {};
+                    return /*#__PURE__*/ _jsxs(Stack, {
+                        spacing: 0.5,
+                        sx: {
+                            border: '1px solid',
+                            borderColor: 'divider',
+                            borderRadius: 1,
+                            p: 1.5
+                        },
+                        children: [
+                            /*#__PURE__*/ _jsxs(Stack, {
+                                direction: "row",
+                                spacing: 1,
+                                sx: {
+                                    alignItems: 'center'
+                                },
+                                children: [
+                                    /*#__PURE__*/ _jsx(Typography, {
+                                        variant: "body2",
+                                        sx: {
+                                            flex: 1
+                                        },
+                                        noWrap: true,
+                                        children: installationHref(install.$id) ? /*#__PURE__*/ _jsx(AppLink, {
+                                            href: installationHref(install.$id),
+                                            color: "inherit",
+                                            underline: "hover",
+                                            children: (_ref1 = (_install_displayName = install.displayName) != null ? _install_displayName : install.pluginId) != null ? _ref1 : install.$id
+                                        }) : (_ref2 = (_install_displayName1 = install.displayName) != null ? _install_displayName1 : install.pluginId) != null ? _ref2 : install.$id
+                                    }),
+                                    /*#__PURE__*/ _jsx(Chip, {
+                                        size: "small",
+                                        label: `v${install.version}`
+                                    }),
+                                    revoked ? /*#__PURE__*/ _jsx(Chip, {
+                                        size: "small",
+                                        color: "error",
+                                        label: "disabled"
+                                    }) : null,
+                                    canUpgrade ? /*#__PURE__*/ _jsx(Button, {
+                                        size: "small",
+                                        disabled: busy === install.$id,
+                                        onClick: handleUpgrade(install),
+                                        children: `Upgrade to v${latest}`
+                                    }) : null,
+                                    orgId && !orgInstalls.some((entry)=>entry.$id === install.$id) ? /*#__PURE__*/ _jsx(Tooltip, {
+                                        title: "Install for every site in the organization and remove this site's own pin",
+                                        children: /*#__PURE__*/ _jsx(Button, {
+                                            size: "small",
+                                            disabled: busy === install.$id,
+                                            onClick: handleShareWithOrg(install),
+                                            children: 'Share with org'
+                                        })
+                                    }) : null,
+                                    /*#__PURE__*/ _jsx(Button, {
+                                        size: "small",
+                                        color: "error",
+                                        onClick: handleUninstall(install),
+                                        children: 'Uninstall'
+                                    })
+                                ]
+                            }),
+                            /*#__PURE__*/ _jsx(Typography, {
+                                variant: "caption",
+                                color: "text.secondary",
+                                noWrap: true,
+                                children: `id: ${install.$id}`
+                            }),
+                            (((_capabilities_network = capabilities.network) == null ? void 0 : _capabilities_network.length) || ((_capabilities_events = capabilities.events) == null ? void 0 : _capabilities_events.length)) && /*#__PURE__*/ _jsx(Tooltip, {
+                                title: "Declared in the plugin manifest, enforced by the sandbox",
+                                children: /*#__PURE__*/ _jsx(Typography, {
+                                    variant: "caption",
+                                    color: "text.secondary",
+                                    children: [
+                                        ((_capabilities_network1 = capabilities.network) == null ? void 0 : _capabilities_network1.length) ? `network: ${capabilities.network.join(', ')}` : null,
+                                        ((_capabilities_events1 = capabilities.events) == null ? void 0 : _capabilities_events1.length) ? `events: ${capabilities.events.join(', ')}` : null
+                                    ].filter(Boolean).join(' · ')
+                                })
+                            }),
+                            revoked ? /*#__PURE__*/ _jsxs(Alert, {
+                                severity: "error",
+                                sx: {
+                                    mt: 0.5
+                                },
+                                children: [
+                                    'The platform disabled this plugin version. It renders ' + 'a placeholder on your site until you upgrade or ' + 'uninstall it.',
+                                    ((_revocationDetailByListing_install_$id = revocationDetailByListing[install.$id]) == null ? void 0 : _revocationDetailByListing_install_$id.reason) ? /*#__PURE__*/ _jsx(Typography, {
+                                        variant: "body2",
+                                        sx: {
+                                            mt: 1
+                                        },
+                                        children: `Reason: ${(_revocationDetailByListing_install_$id1 = revocationDetailByListing[install.$id]) == null ? void 0 : _revocationDetailByListing_install_$id1.reason}`
+                                    }) : null,
+                                    ((_revocationDetailByListing_install_$id2 = revocationDetailByListing[install.$id]) == null ? void 0 : _revocationDetailByListing_install_$id2.atMs) ? /*#__PURE__*/ _jsx(Typography, {
+                                        variant: "caption",
+                                        sx: {
+                                            display: 'block',
+                                            mt: 0.5
+                                        },
+                                        children: `Disabled ${new Date((_revocationDetailByListing_install_$id3 = revocationDetailByListing[install.$id]) == null ? void 0 : _revocationDetailByListing_install_$id3.atMs).toLocaleDateString()}`
+                                    }) : null
+                                ]
+                            }) : null
+                        ]
+                    }, install.$id);
+                }),
+                orgInstalls.map((install)=>{
+                    var _compareArtifactVersions, _ref, _install_displayName, _ref1, _install_displayName1;
+                    const latest = latestByListing[install.$id];
+                    const canUpgrade = ((_compareArtifactVersions = compareArtifactVersions(install.version, latest)) != null ? _compareArtifactVersions : 0) < 0;
+                    const shadowed = installs.some((entry)=>entry.$id === install.$id);
+                    return /*#__PURE__*/ _jsxs(Stack, {
+                        spacing: 0.5,
+                        sx: {
+                            border: '1px solid',
+                            borderColor: 'divider',
+                            borderRadius: 1,
+                            p: 1.5
+                        },
+                        children: [
+                            /*#__PURE__*/ _jsxs(Stack, {
+                                direction: "row",
+                                spacing: 1,
+                                sx: {
+                                    alignItems: 'center'
+                                },
+                                children: [
+                                    /*#__PURE__*/ _jsx(Typography, {
+                                        variant: "body2",
+                                        sx: {
+                                            flex: 1
+                                        },
+                                        noWrap: true,
+                                        children: installationHref(install.$id) ? /*#__PURE__*/ _jsx(AppLink, {
+                                            href: installationHref(install.$id),
+                                            color: "inherit",
+                                            underline: "hover",
+                                            children: (_ref = (_install_displayName = install.displayName) != null ? _install_displayName : install.pluginId) != null ? _ref : install.$id
+                                        }) : (_ref1 = (_install_displayName1 = install.displayName) != null ? _install_displayName1 : install.pluginId) != null ? _ref1 : install.$id
+                                    }),
+                                    /*#__PURE__*/ _jsx(Chip, {
+                                        size: "small",
+                                        color: "primary",
+                                        label: "Organization"
+                                    }),
+                                    /*#__PURE__*/ _jsx(Chip, {
+                                        size: "small",
+                                        label: `v${install.version}`
+                                    }),
+                                    shadowed ? /*#__PURE__*/ _jsx(Tooltip, {
+                                        title: "This site has its own pin, which takes precedence here",
+                                        children: /*#__PURE__*/ _jsx(Chip, {
+                                            size: "small",
+                                            variant: "outlined",
+                                            label: "shadowed"
+                                        })
+                                    }) : null,
+                                    canUpgrade ? /*#__PURE__*/ _jsx(Button, {
+                                        size: "small",
+                                        disabled: busy === install.$id,
+                                        onClick: handleOrgUpgrade(install),
+                                        children: `Upgrade to v${latest}`
+                                    }) : null,
+                                    /*#__PURE__*/ _jsx(Button, {
+                                        size: "small",
+                                        color: "error",
+                                        onClick: handleOrgUninstall(install),
+                                        children: 'Uninstall'
+                                    })
+                                ]
+                            }),
+                            /*#__PURE__*/ _jsx(Typography, {
+                                variant: "caption",
+                                color: "text.secondary",
+                                noWrap: true,
+                                children: `id: ${install.$id} · shared with every site in the org`
+                            })
+                        ]
+                    }, `org-${install.$id}`);
+                }),
+                /*#__PURE__*/ _jsx(Typography, {
+                    variant: "caption",
+                    color: "text.secondary",
+                    children: `Place a plugin on a screen with the Plugin element (component id ` + `"${PLUGIN_COMPONENT_ID}"), set to the listing id above.`
+                })
+            ]
+        })
+    });
+}
+HostPluginsCard.displayName = 'HostPluginsCard';
+export default HostPluginsCard;
+
+//# sourceMappingURL=host-plugins-card.component.js.map

package/src/lib/components/host-plugins-card.component.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../libs/plugins/marketplace/src/lib/components/host-plugins-card.component.tsx"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n'use client'\n\nimport {\n  buildRoute,\n  PLUGIN_COMPONENT_ID,\n  pluginDocsHelp,\n  Route,\n} from '@aglyn/aglyn'\nimport {\n  AppLink,\n  CardDisplay,\n  useConfirmationContext,\n} from '@aglyn/shared-ui-jsx'\nimport { useSnackbar } from '@aglyn/shared-ui-snackstack'\nimport { Alert, Button, Chip, Stack, Tooltip, Typography } from '@mui/material'\nimport {\n  collection,\n  deleteDoc,\n  doc,\n  documentId,\n  limit,\n  query,\n  where,\n} from 'firebase/firestore'\nimport { useCallback, useMemo, useState } from 'react'\nimport {\n  compareArtifactVersions,\n  isPluginRevoked,\n  lockdownRefusalText,\n  offeredPluginVersion,\n  parseLockdownRefusal,\n} from '@aglyn/aglyn'\nimport {\n  useFirestore,\n  useFirestoreCollection,\n  useHostOrgId,\n  useUser,\n} from '@aglyn/tenant-feature-instance'\nimport { authorizedFetch } from '@aglyn/shared-util-http/authorized-token'\n\nexport interface HostPluginsCardProps {\n  hostId: string\n  /**\n   * Org slug from the URL, when this card is rendered at org scope. With it,\n   * each row links through to that installation's own page (AGL-1007);\n   * without it the rows stay plain text rather than linking to nowhere.\n   */\n  orgSlug?: string\n}\n\n/**\n * Installed marketplace plugins (AGL-45): lists the host's pinned plugin\n * installs with their capabilities, flags available upgrades (latest\n * listing version ≠ pinned) and platform kill switches (public\n * `revocations` read), and offers explicit upgrade/uninstall. Upgrades go\n * through `/api/marketplace/install-plugin` so the new pin is validated\n * server-side; uninstall removes the host install doc. Place the installed\n * plugin on a screen with the Plugin element (listing id).\n */\nexport function HostPluginsCard(props: HostPluginsCardProps) {\n  const { hostId, orgSlug } = props\n  // One row → one installation page (AGL-1007). The name is the link, so a\n  // row stays clickable without swallowing its own action buttons.\n  const installationHref = (listingId: string) =>\n    orgSlug\n      ? buildRoute(Route.ORG_PLUGIN_INSTALLATION, {\n          orgSlug,\n          pluginRef: listingId,\n        })\n      : undefined\n  const firestore = useFirestore()\n  const { data: user } = useUser()\n  const { enqueueSnackbar } = useSnackbar()\n  const { confirm } = useConfirmationContext()\n  const [busy, setBusy] = useState<string | null>(null)\n\n  const orgId = useHostOrgId(hostId)\n  const { data: installDocs } = useFirestoreCollection<any>(\n    () => query(collection(firestore, 'hosts', hostId, 'installs'), limit(50)),\n    [firestore, hostId],\n    { idField: '$id' },\n  )\n  // Org-tier pins (AGL-237): apply to every host in the org; a host pin\n  // of the same listing shadows the org one. Held at null while\n  // `useHostOrgId` is in flight, never `orgs/-pending-` (AGL-1440):\n  // installs are member-gated, so the sentinel was a guaranteed-denied\n  // listen on every mount of this card.\n  const { data: orgInstallDocs } = useFirestoreCollection<any>(\n    () =>\n      orgId\n        ? query(collection(firestore, 'orgs', orgId, 'installs'), limit(50))\n        : null,\n    [firestore, orgId],\n    { idField: '$id' },\n  )\n  const orgInstalls = useMemo(\n    () => [...((orgInstallDocs as any[]) ?? [])],\n    [orgInstallDocs],\n  )\n  const installs = useMemo(\n    () => [...((installDocs as any[]) ?? [])],\n    [installDocs],\n  )\n  const listingIds = useMemo(\n    () =>\n      [\n        ...new Set([\n          ...installs.map((install) => install.$id),\n          ...orgInstalls.map((install) => install.$id),\n        ]),\n      ].slice(0, 10),\n    [installs, orgInstalls],\n  )\n\n  // Latest published version per listing (upgrade detection) — public read.\n  const { data: listingDocs } = useFirestoreCollection<any>(\n    () =>\n      query(\n        collection(firestore, 'marketplaceListings'),\n        where(documentId(), 'in', listingIds.length ? listingIds : ['-none-']),\n      ),\n    [firestore, listingIds.join(',')],\n    { idField: '$id' },\n  )\n  // Kill switches (public revocations read) for the installed listings.\n  const { data: revocationDocs } = useFirestoreCollection<any>(\n    () =>\n      query(\n        collection(firestore, 'revocations'),\n        where(documentId(), 'in', listingIds.length ? listingIds : ['-none-']),\n      ),\n    [firestore, listingIds.join(',')],\n    { idField: '$id' },\n  )\n  const revokedByListing = useMemo(() => {\n    const map: Record<string, boolean> = {}\n    for (const install of installs) {\n      const revocation = ((revocationDocs as any[]) ?? []).find(\n        (doc) => doc.$id === install.$id,\n      )\n      if (!revocation) continue\n      // THE SHARED PREDICATE, not a fourth copy of it (AGL-2305). This card\n      // carried a byte-for-byte duplicate of `isPluginRevoked`'s body, which\n      // is precisely what AGL-1085 collapsed three inline copies into one to\n      // stop: a reader that disagrees with the writer about this document's\n      // shape is how a kill switch silently stops killing. It happened to be\n      // correct; being correct today is not the property that matters.\n      map[install.$id] = isPluginRevoked(revocation, install.version)\n    }\n    return map\n  }, [installs, revocationDocs])\n\n  /*==========================================\n   * WHY IT WAS DISABLED (AGL-2328).\n   *\n   * Staff are REQUIRED to type a reason to revoke a plugin version — the\n   * route refuses without one — and until now the customer whose site the\n   * plugin stopped working on was shown a bare \"disabled\" chip and a generic\n   * paragraph. The reason was stored, in the same document this card already\n   * reads, one field away from the flag it renders. Every consumer of\n   * `revocations` reads `versions` and nothing else; the type's own comment\n   * calls `versions` \"the ONLY field any reader consults\", which was true and\n   * is the defect.\n   *\n   * Only the REASON and the DATE are surfaced. `revokedBy` is a staff uid and\n   * belongs in the audit log, not on a customer's screen.\n   *=========================================*/\n  const revocationDetailByListing = useMemo(() => {\n    const map: Record<string, { reason: string | null; atMs: number | null }> =\n      {}\n    for (const doc of ((revocationDocs as any[]) ?? [])) {\n      const at = doc.revokedAt\n      map[doc.$id] = {\n        reason:\n          typeof doc.reason === 'string' && doc.reason.trim()\n            ? doc.reason.trim()\n            : null,\n        atMs:\n          at?.toMillis?.() ?? (typeof at?.seconds === 'number' ? at.seconds * 1000 : null),\n      }\n    }\n    return map\n  }, [revocationDocs])\n\n  // The newest INSTALLABLE version, not merely the newest approved one\n  // (AGL-1016, corrected by AGL-2368).\n  //\n  // Offering `latestVersion` here put an Upgrade button in front of every\n  // workspace the moment a publisher uploaded, and the install route then\n  // refused the click — AGL-966 only ever hands out reviewed bytes. The\n  // mirror fixed that and then reproduced it one state over: nothing cleared\n  // it when a version was revoked, so the Upgrade button pointed at bytes the\n  // kill switch had stopped. Every writer of the mirror now derives it from\n  // `newestInstallableVersion`, and this card holds the revocation document\n  // ALREADY — it is right there, feeding the disabled chip below — so it\n  // cross-checks rather than trusting a cache written by a separate,\n  // non-transactional write it can observe mid-flight.\n  const latestByListing = useMemo(() => {\n    const map: Record<string, string> = {}\n    for (const listing of (listingDocs as any[]) ?? []) {\n      const revocation = ((revocationDocs as any[]) ?? []).find(\n        (doc) => doc.$id === listing.$id,\n      )\n      map[listing.$id] = offeredPluginVersion(listing, revocation) ?? ''\n    }\n    return map\n  }, [listingDocs, revocationDocs])\n\n  const handleUpgrade = useCallback(\n    (install: any) => async () => {\n      setBusy(install.$id)\n      try {\n        const response = await authorizedFetch(\n          user,\n          '/api/marketplace/install-plugin',\n          {\n            method: 'POST',\n            headers: { 'Content-Type': 'application/json' },\n            body: JSON.stringify({ hostId, listingId: install.$id }),\n          },\n        )\n        const payload = await response.json().catch(() => ({}))\n        if (response.ok) {\n          enqueueSnackbar(`Upgraded to ${payload.version}`, {\n            variant: 'success',\n            persist: false,\n          })\n        } else {\n          // An installs lockdown refuses the upgrade route too (AGL-1532).\n          const locked = parseLockdownRefusal(response.status, payload)\n          if (locked) {\n            enqueueSnackbar(lockdownRefusalText(locked), {\n              variant: 'warning',\n              persist: true,\n            })\n          } else {\n            enqueueSnackbar(payload?.error ?? 'Upgrade failed', {\n              variant: 'error',\n              allowDuplicate: true,\n            })\n          }\n        }\n      } finally {\n        setBusy(null)\n      }\n    },\n    [hostId, user, enqueueSnackbar],\n  )\n\n  const requestPluginApi = useCallback(\n    async (body: Record<string, unknown>) => {\n      const response = await authorizedFetch(\n        user,\n        '/api/marketplace/install-plugin',\n        {\n          method: 'POST',\n          headers: { 'Content-Type': 'application/json' },\n          body: JSON.stringify({ hostId, ...body }),\n        },\n      )\n      const payload = await response.json().catch(() => ({}))\n      if (!response.ok) {\n        // Every install-class action in this card funnels through here\n        // (share, org upgrade, uninstall at both scopes) — so does the\n        // pause notice (AGL-1532).\n        const locked = parseLockdownRefusal(response.status, payload)\n        if (locked) {\n          enqueueSnackbar(lockdownRefusalText(locked), {\n            variant: 'warning',\n            persist: true,\n          })\n          return null\n        }\n        enqueueSnackbar(payload?.error ?? 'Plugin operation failed', {\n          variant: 'error',\n          allowDuplicate: true,\n        })\n        return null\n      }\n      return payload\n    },\n    [hostId, user, enqueueSnackbar],\n  )\n\n  // Promote a host pin to the org tier (AGL-237): org pin first, then the\n  // host pin is removed — host pins shadow org ones in the loader.\n  const handleShareWithOrg = useCallback(\n    (install: any) => async () => {\n      setBusy(install.$id)\n      try {\n        const payload = await requestPluginApi({\n          listingId: install.$id,\n          scope: 'org',\n        })\n        if (!payload) return\n        await deleteDoc(\n          doc(firestore, 'hosts', hostId, 'installs', install.$id),\n        )\n        enqueueSnackbar('Plugin now installed for the whole organization', {\n          variant: 'success',\n          persist: false,\n        })\n      } finally {\n        setBusy(null)\n      }\n    },\n    [requestPluginApi, firestore, hostId, enqueueSnackbar],\n  )\n\n  const handleOrgUpgrade = useCallback(\n    (install: any) => async () => {\n      setBusy(install.$id)\n      try {\n        const payload = await requestPluginApi({\n          listingId: install.$id,\n          scope: 'org',\n        })\n        if (payload) {\n          enqueueSnackbar(`Upgraded to ${payload.version}`, {\n            variant: 'success',\n            persist: false,\n          })\n        }\n      } finally {\n        setBusy(null)\n      }\n    },\n    [requestPluginApi, enqueueSnackbar],\n  )\n\n  const handleOrgUninstall = useCallback(\n    (install: any) => async () => {\n      const confirmed = await confirm({\n        title: `Uninstall \"${install.displayName ?? install.$id}\" org-wide?`,\n        description:\n          'Every site in the organization loses this plugin unless it has ' +\n          'its own host-level pin. Data the plugin created stays untouched.',\n        confirmationText: 'Uninstall',\n        confirmationButtonProps: { color: 'error' },\n      })\n        .then(() => true)\n        .catch(() => false)\n      if (!confirmed) return\n      const payload = await requestPluginApi({\n        listingId: install.$id,\n        scope: 'org',\n        action: 'uninstall',\n      })\n      if (payload) {\n        enqueueSnackbar('Plugin uninstalled org-wide', {\n          variant: 'success',\n          persist: false,\n        })\n      }\n    },\n    [confirm, requestPluginApi, enqueueSnackbar],\n  )\n\n  const handleUninstall = useCallback(\n    (install: any) => async () => {\n      const confirmed = await confirm({\n        title: `Uninstall \"${install.displayName ?? install.$id}\"?`,\n        description:\n          'Plugin elements pointing at it will show a placeholder until ' +\n          'reinstalled. Data the plugin created stays untouched.',\n        confirmationText: 'Uninstall',\n        confirmationButtonProps: { color: 'error' },\n      })\n        .then(() => true)\n        .catch(() => false)\n      if (!confirmed) return\n      // Through the API (AGL-424) so the org enablement switchboard stays\n      // in step with the removed pin.\n      const payload = await requestPluginApi({\n        listingId: install.$id,\n        action: 'uninstall',\n      })\n      if (payload) {\n        enqueueSnackbar('Plugin uninstalled', {\n          variant: 'success',\n          persist: false,\n        })\n      }\n    },\n    [confirm, requestPluginApi, enqueueSnackbar],\n  )\n\n  return (\n    <CardDisplay\n      header=\"Marketplace installs\"\n      help={pluginDocsHelp('plugins', { anchor: '#install--upgrade' })}\n      contentGutterX\n      contentGutterY\n    >\n      <Stack spacing={1.5}>\n        {/* First-party plugins used to be re-listed here for context; that\n            moved out (AGL-802) now that the switchboard sits directly above\n            this card in Marketplace › Installed. This card is only the\n            marketplace install pins. */}\n        {/* \"Nothing installed\" has to mean nothing at either scope. This\n            asked only about HOST pins, so an org-wide install printed the\n            empty-state sentence directly above the row it was denying\n            (AGL-1011) — most visible at org scope, which is where installs\n            usually land org-wide. */}\n        {installs.length === 0 && orgInstalls.length === 0 ? (\n          <Typography variant=\"body2\" color=\"text.secondary\">\n            {'No marketplace plugins installed. Install one from the ' +\n              'marketplace, then add a Plugin element to a screen and set ' +\n              'its listing id.'}\n          </Typography>\n        ) : (\n          installs.map((install) => {\n            const latest = latestByListing[install.$id]\n            const canUpgrade =\n              (compareArtifactVersions(install.version, latest) ?? 0) < 0\n            const revoked = revokedByListing[install.$id]\n            const capabilities = install.manifest?.capabilities ?? {}\n            return (\n              <Stack\n                key={install.$id}\n                spacing={0.5}\n                sx={{\n                  border: '1px solid',\n                  borderColor: 'divider',\n                  borderRadius: 1,\n                  p: 1.5,\n                }}\n              >\n                <Stack\n                  direction=\"row\"\n                  spacing={1}\n                  sx={{ alignItems: 'center' }}\n                >\n                  <Typography variant=\"body2\" sx={{ flex: 1 }} noWrap>\n                    {installationHref(install.$id) ? (\n                      <AppLink\n                        href={installationHref(install.$id)}\n                        color=\"inherit\"\n                        underline=\"hover\"\n                      >\n                        {install.displayName ?? install.pluginId ?? install.$id}\n                      </AppLink>\n                    ) : (\n                      (install.displayName ?? install.pluginId ?? install.$id)\n                    )}\n                  </Typography>\n                  <Chip size=\"small\" label={`v${install.version}`} />\n                  {revoked ? (\n                    <Chip size=\"small\" color=\"error\" label=\"disabled\" />\n                  ) : null}\n                  {canUpgrade ? (\n                    <Button\n                      size=\"small\"\n                      disabled={busy === install.$id}\n                      onClick={handleUpgrade(install)}\n                    >\n                      {`Upgrade to v${latest}`}\n                    </Button>\n                  ) : null}\n                  {orgId &&\n                  !orgInstalls.some((entry) => entry.$id === install.$id) ? (\n                    <Tooltip title=\"Install for every site in the organization and remove this site's own pin\">\n                      <Button\n                        size=\"small\"\n                        disabled={busy === install.$id}\n                        onClick={handleShareWithOrg(install)}\n                      >\n                        {'Share with org'}\n                      </Button>\n                    </Tooltip>\n                  ) : null}\n                  <Button\n                    size=\"small\"\n                    color=\"error\"\n                    onClick={handleUninstall(install)}\n                  >\n                    {'Uninstall'}\n                  </Button>\n                </Stack>\n                <Typography variant=\"caption\" color=\"text.secondary\" noWrap>\n                  {`id: ${install.$id}`}\n                </Typography>\n                {(capabilities.network?.length ||\n                  capabilities.events?.length) && (\n                  <Tooltip title=\"Declared in the plugin manifest, enforced by the sandbox\">\n                    <Typography variant=\"caption\" color=\"text.secondary\">\n                      {[\n                        capabilities.network?.length\n                          ? `network: ${capabilities.network.join(', ')}`\n                          : null,\n                        capabilities.events?.length\n                          ? `events: ${capabilities.events.join(', ')}`\n                          : null,\n                      ]\n                        .filter(Boolean)\n                        .join(' · ')}\n                    </Typography>\n                  </Tooltip>\n                )}\n                {revoked ? (\n                  <Alert severity=\"error\" sx={{ mt: 0.5 }}>\n                    {'The platform disabled this plugin version. It renders ' +\n                      'a placeholder on your site until you upgrade or ' +\n                      'uninstall it.'}\n                    {/*\n                      The reason staff were required to type, shown to the\n                      person it happened to (AGL-2328). Rendered only when one\n                      was recorded — a revocation written before the reason\n                      was required says so, rather than showing an empty\n                      quotation that reads as \"no reason given\".\n                    */}\n                    {revocationDetailByListing[install.$id]?.reason ? (\n                      <Typography variant=\"body2\" sx={{ mt: 1 }}>\n                        {`Reason: ${revocationDetailByListing[install.$id]?.reason}`}\n                      </Typography>\n                    ) : null}\n                    {revocationDetailByListing[install.$id]?.atMs ? (\n                      <Typography variant=\"caption\" sx={{ display: 'block', mt: 0.5 }}>\n                        {`Disabled ${new Date(\n                          revocationDetailByListing[install.$id]\n                            ?.atMs as number,\n                        ).toLocaleDateString()}`}\n                      </Typography>\n                    ) : null}\n                  </Alert>\n                ) : null}\n              </Stack>\n            )\n          })\n        )}\n        {orgInstalls.map((install) => {\n          const latest = latestByListing[install.$id]\n          const canUpgrade =\n            (compareArtifactVersions(install.version, latest) ?? 0) < 0\n          const shadowed = installs.some((entry) => entry.$id === install.$id)\n          return (\n            <Stack\n              key={`org-${install.$id}`}\n              spacing={0.5}\n              sx={{\n                border: '1px solid',\n                borderColor: 'divider',\n                borderRadius: 1,\n                p: 1.5,\n              }}\n            >\n              <Stack direction=\"row\" spacing={1} sx={{ alignItems: 'center' }}>\n                <Typography variant=\"body2\" sx={{ flex: 1 }} noWrap>\n                  {installationHref(install.$id) ? (\n                    <AppLink\n                      href={installationHref(install.$id)}\n                      color=\"inherit\"\n                      underline=\"hover\"\n                    >\n                      {install.displayName ?? install.pluginId ?? install.$id}\n                    </AppLink>\n                  ) : (\n                    (install.displayName ?? install.pluginId ?? install.$id)\n                  )}\n                </Typography>\n                <Chip size=\"small\" color=\"primary\" label=\"Organization\" />\n                <Chip size=\"small\" label={`v${install.version}`} />\n                {shadowed ? (\n                  <Tooltip title=\"This site has its own pin, which takes precedence here\">\n                    <Chip size=\"small\" variant=\"outlined\" label=\"shadowed\" />\n                  </Tooltip>\n                ) : null}\n                {canUpgrade ? (\n                  <Button\n                    size=\"small\"\n                    disabled={busy === install.$id}\n                    onClick={handleOrgUpgrade(install)}\n                  >\n                    {`Upgrade to v${latest}`}\n                  </Button>\n                ) : null}\n                <Button\n                  size=\"small\"\n                  color=\"error\"\n                  onClick={handleOrgUninstall(install)}\n                >\n                  {'Uninstall'}\n                </Button>\n              </Stack>\n              <Typography variant=\"caption\" color=\"text.secondary\" noWrap>\n                {`id: ${install.$id} · shared with every site in the org`}\n              </Typography>\n            </Stack>\n          )\n        })}\n        <Typography variant=\"caption\" color=\"text.secondary\">\n          {`Place a plugin on a screen with the Plugin element (component id ` +\n            `\"${PLUGIN_COMPONENT_ID}\"), set to the listing id above.`}\n        </Typography>\n      </Stack>\n    </CardDisplay>\n  )\n}\nHostPluginsCard.displayName = 'HostPluginsCard'\n\nexport default HostPluginsCard\n"],"names":["buildRoute","PLUGIN_COMPONENT_ID","pluginDocsHelp","Route","AppLink","CardDisplay","useConfirmationContext","useSnackbar","Alert","Button","Chip","Stack","Tooltip","Typography","collection","deleteDoc","doc","documentId","limit","query","where","useCallback","useMemo","useState","compareArtifactVersions","isPluginRevoked","lockdownRefusalText","offeredPluginVersion","parseLockdownRefusal","useFirestore","useFirestoreCollection","useHostOrgId","useUser","authorizedFetch","HostPluginsCard","props","hostId","orgSlug","installationHref","listingId","ORG_PLUGIN_INSTALLATION","pluginRef","undefined","firestore","data","user","enqueueSnackbar","confirm","busy","setBusy","orgId","installDocs","idField","orgInstallDocs","orgInstalls","installs","listingIds","Set","map","install","$id","slice","listingDocs","length","join","revocationDocs","revokedByListing","revocation","find","version","revocationDetailByListing","at","revokedAt","reason","trim","atMs","toMillis","seconds","latestByListing","listing","handleUpgrade","response","method","headers","body","JSON","stringify","payload","json","catch","ok","variant","persist","locked","status","error","allowDuplicate","requestPluginApi","handleShareWithOrg","scope","handleOrgUpgrade","handleOrgUninstall","confirmed","title","displayName","description","confirmationText","confirmationButtonProps","color","then","action","handleUninstall","header","help","anchor","contentGutterX","contentGutterY","spacing","capabilities","latest","canUpgrade","revoked","manifest","sx","border","borderColor","borderRadius","p","direction","alignItems","flex","noWrap","href","underline","pluginId","size","label","disabled","onClick","some","entry","network","events","filter","Boolean","severity","mt","display","Date","toLocaleDateString","shadowed"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GACD;;;AAEA,SACEA,UAAU,EACVC,mBAAmB,EACnBC,cAAc,EACdC,KAAK,QACA,eAAc;AACrB,SACEC,OAAO,EACPC,WAAW,EACXC,sBAAsB,QACjB,uBAAsB;AAC7B,SAASC,WAAW,QAAQ,8BAA6B;AACzD,SAASC,KAAK,EAAEC,MAAM,EAAEC,IAAI,EAAEC,KAAK,EAAEC,OAAO,EAAEC,UAAU,QAAQ,gBAAe;AAC/E,SACEC,UAAU,EACVC,SAAS,EACTC,GAAG,EACHC,UAAU,EACVC,KAAK,EACLC,KAAK,EACLC,KAAK,QACA,qBAAoB;AAC3B,SAASC,WAAW,EAAEC,OAAO,EAAEC,QAAQ,QAAQ,QAAO;AACtD,SACEC,uBAAuB,EACvBC,eAAe,EACfC,mBAAmB,EACnBC,oBAAoB,EACpBC,oBAAoB,QACf,eAAc;AACrB,SACEC,YAAY,EACZC,sBAAsB,EACtBC,YAAY,EACZC,OAAO,QACF,iCAAgC;AACvC,SAASC,eAAe,QAAQ,2CAA0C;AAY1E;;;;;;;;CAQC,GACD,OAAO,SAASC,gBAAgBC,KAA2B;IACzD,MAAM,EAAEC,MAAM,EAAEC,OAAO,EAAE,GAAGF;IAC5B,yEAAyE;IACzE,iEAAiE;IACjE,MAAMG,mBAAmB,CAACC,YACxBF,UACIrC,WAAWG,MAAMqC,uBAAuB,EAAE;YACxCH;YACAI,WAAWF;QACb,KACAG;IACN,MAAMC,YAAYd;IAClB,MAAM,EAAEe,MAAMC,IAAI,EAAE,GAAGb;IACvB,MAAM,EAAEc,eAAe,EAAE,GAAGvC;IAC5B,MAAM,EAAEwC,OAAO,EAAE,GAAGzC;IACpB,MAAM,CAAC0C,MAAMC,QAAQ,GAAG1B,SAAwB;IAEhD,MAAM2B,QAAQnB,aAAaK;IAC3B,MAAM,EAAEQ,MAAMO,WAAW,EAAE,GAAGrB,uBAC5B,IAAMX,MAAML,WAAW6B,WAAW,SAASP,QAAQ,aAAalB,MAAM,MACtE;QAACyB;QAAWP;KAAO,EACnB;QAAEgB,SAAS;IAAM;IAEnB,sEAAsE;IACtE,8DAA8D;IAC9D,kEAAkE;IAClE,qEAAqE;IACrE,sCAAsC;IACtC,MAAM,EAAER,MAAMS,cAAc,EAAE,GAAGvB,uBAC/B,IACEoB,QACI/B,MAAML,WAAW6B,WAAW,QAAQO,OAAO,aAAahC,MAAM,OAC9D,MACN;QAACyB;QAAWO;KAAM,EAClB;QAAEE,SAAS;IAAM;IAEnB,MAAME,cAAchC,QAClB,IAAM;eAAM+B,yBAAAA,iBAA4B,EAAE;SAAE,EAC5C;QAACA;KAAe;IAElB,MAAME,WAAWjC,QACf,IAAM;eAAM6B,sBAAAA,cAAyB,EAAE;SAAE,EACzC;QAACA;KAAY;IAEf,MAAMK,aAAalC,QACjB,IACE;eACK,IAAImC,IAAI;mBACNF,SAASG,GAAG,CAAC,CAACC,UAAYA,QAAQC,GAAG;mBACrCN,YAAYI,GAAG,CAAC,CAACC,UAAYA,QAAQC,GAAG;aAC5C;SACF,CAACC,KAAK,CAAC,GAAG,KACb;QAACN;QAAUD;KAAY;IAGzB,0EAA0E;IAC1E,MAAM,EAAEV,MAAMkB,WAAW,EAAE,GAAGhC,uBAC5B,IACEX,MACEL,WAAW6B,WAAW,wBACtBvB,MAAMH,cAAc,MAAMuC,WAAWO,MAAM,GAAGP,aAAa;YAAC;SAAS,IAEzE;QAACb;QAAWa,WAAWQ,IAAI,CAAC;KAAK,EACjC;QAAEZ,SAAS;IAAM;IAEnB,sEAAsE;IACtE,MAAM,EAAER,MAAMqB,cAAc,EAAE,GAAGnC,uBAC/B,IACEX,MACEL,WAAW6B,WAAW,gBACtBvB,MAAMH,cAAc,MAAMuC,WAAWO,MAAM,GAAGP,aAAa;YAAC;SAAS,IAEzE;QAACb;QAAWa,WAAWQ,IAAI,CAAC;KAAK,EACjC;QAAEZ,SAAS;IAAM;IAEnB,MAAMc,mBAAmB5C,QAAQ;QAC/B,MAAMoC,MAA+B,CAAC;QACtC,KAAK,MAAMC,WAAWJ,SAAU;YAC9B,MAAMY,aAAa,CAAEF,yBAAAA,iBAA4B,EAAE,EAAEG,IAAI,CACvD,CAACpD,MAAQA,IAAI4C,GAAG,KAAKD,QAAQC,GAAG;YAElC,IAAI,CAACO,YAAY;YACjB,sEAAsE;YACtE,uEAAuE;YACvE,uEAAuE;YACvE,sEAAsE;YACtE,uEAAuE;YACvE,iEAAiE;YACjET,GAAG,CAACC,QAAQC,GAAG,CAAC,GAAGnC,gBAAgB0C,YAAYR,QAAQU,OAAO;QAChE;QACA,OAAOX;IACT,GAAG;QAACH;QAAUU;KAAe;IAE7B;;;;;;;;;;;;;;6CAc2C,GAC3C,MAAMK,4BAA4BhD,QAAQ;QACxC,MAAMoC,MACJ,CAAC;QACH,KAAK,MAAM1C,OAASiD,yBAAAA,iBAA4B,EAAE,CAAG;;gBAQ/CM;YAPJ,MAAMA,KAAKvD,IAAIwD,SAAS;YACxBd,GAAG,CAAC1C,IAAI4C,GAAG,CAAC,GAAG;gBACba,QACE,OAAOzD,IAAIyD,MAAM,KAAK,YAAYzD,IAAIyD,MAAM,CAACC,IAAI,KAC7C1D,IAAIyD,MAAM,CAACC,IAAI,KACf;gBACNC,IAAI,UACFJ,uBAAAA,eAAAA,GAAIK,QAAQ,qBAAZL,kBAAAA,sBAAqB,QAAOA,sBAAAA,GAAIM,OAAO,MAAK,WAAWN,GAAGM,OAAO,GAAG,OAAO;YAC/E;QACF;QACA,OAAOnB;IACT,GAAG;QAACO;KAAe;IAEnB,qEAAqE;IACrE,qCAAqC;IACrC,EAAE;IACF,wEAAwE;IACxE,wEAAwE;IACxE,sEAAsE;IACtE,2EAA2E;IAC3E,4EAA4E;IAC5E,0EAA0E;IAC1E,0EAA0E;IAC1E,uEAAuE;IACvE,mEAAmE;IACnE,qDAAqD;IACrD,MAAMa,kBAAkBxD,QAAQ;QAC9B,MAAMoC,MAA8B,CAAC;QACrC,KAAK,MAAMqB,WAAYjB,sBAAAA,cAAyB,EAAE,CAAE;gBAI/BnC;YAHnB,MAAMwC,aAAa,CAAEF,yBAAAA,iBAA4B,EAAE,EAAEG,IAAI,CACvD,CAACpD,MAAQA,IAAI4C,GAAG,KAAKmB,QAAQnB,GAAG;YAElCF,GAAG,CAACqB,QAAQnB,GAAG,CAAC,IAAGjC,wBAAAA,qBAAqBoD,SAASZ,uBAA9BxC,wBAA6C;QAClE;QACA,OAAO+B;IACT,GAAG;QAACI;QAAaG;KAAe;IAEhC,MAAMe,gBAAgB3D,YACpB,CAACsC,UAAiB;YAChBV,QAAQU,QAAQC,GAAG;YACnB,IAAI;gBACF,MAAMqB,WAAW,MAAMhD,gBACrBY,MACA,mCACA;oBACEqC,QAAQ;oBACRC,SAAS;wBAAE,gBAAgB;oBAAmB;oBAC9CC,MAAMC,KAAKC,SAAS,CAAC;wBAAElD;wBAAQG,WAAWoB,QAAQC,GAAG;oBAAC;gBACxD;gBAEF,MAAM2B,UAAU,MAAMN,SAASO,IAAI,GAAGC,KAAK,CAAC,IAAO,CAAA,CAAC,CAAA;gBACpD,IAAIR,SAASS,EAAE,EAAE;oBACf5C,gBAAgB,CAAC,YAAY,EAAEyC,QAAQlB,OAAO,EAAE,EAAE;wBAChDsB,SAAS;wBACTC,SAAS;oBACX;gBACF,OAAO;oBACL,iEAAiE;oBACjE,MAAMC,SAASjE,qBAAqBqD,SAASa,MAAM,EAAEP;oBACrD,IAAIM,QAAQ;wBACV/C,gBAAgBpB,oBAAoBmE,SAAS;4BAC3CF,SAAS;4BACTC,SAAS;wBACX;oBACF,OAAO;;wBACL9C,wBAAgByC,2BAAAA,QAASQ,KAAK,mBAAI,kBAAkB;4BAClDJ,SAAS;4BACTK,gBAAgB;wBAClB;oBACF;gBACF;YACF,SAAU;gBACR/C,QAAQ;YACV;QACF,GACA;QAACb;QAAQS;QAAMC;KAAgB;IAGjC,MAAMmD,mBAAmB5E,YACvB,OAAO+D;QACL,MAAMH,WAAW,MAAMhD,gBACrBY,MACA,mCACA;YACEqC,QAAQ;YACRC,SAAS;gBAAE,gBAAgB;YAAmB;YAC9CC,MAAMC,KAAKC,SAAS,CAAC;gBAAElD;eAAWgD;QACpC;QAEF,MAAMG,UAAU,MAAMN,SAASO,IAAI,GAAGC,KAAK,CAAC,IAAO,CAAA,CAAC,CAAA;QACpD,IAAI,CAACR,SAASS,EAAE,EAAE;;YAChB,+DAA+D;YAC/D,+DAA+D;YAC/D,2BAA2B;YAC3B,MAAMG,SAASjE,qBAAqBqD,SAASa,MAAM,EAAEP;YACrD,IAAIM,QAAQ;gBACV/C,gBAAgBpB,oBAAoBmE,SAAS;oBAC3CF,SAAS;oBACTC,SAAS;gBACX;gBACA,OAAO;YACT;YACA9C,wBAAgByC,2BAAAA,QAASQ,KAAK,mBAAI,2BAA2B;gBAC3DJ,SAAS;gBACTK,gBAAgB;YAClB;YACA,OAAO;QACT;QACA,OAAOT;IACT,GACA;QAACnD;QAAQS;QAAMC;KAAgB;IAGjC,wEAAwE;IACxE,iEAAiE;IACjE,MAAMoD,qBAAqB7E,YACzB,CAACsC,UAAiB;YAChBV,QAAQU,QAAQC,GAAG;YACnB,IAAI;gBACF,MAAM2B,UAAU,MAAMU,iBAAiB;oBACrC1D,WAAWoB,QAAQC,GAAG;oBACtBuC,OAAO;gBACT;gBACA,IAAI,CAACZ,SAAS;gBACd,MAAMxE,UACJC,IAAI2B,WAAW,SAASP,QAAQ,YAAYuB,QAAQC,GAAG;gBAEzDd,gBAAgB,mDAAmD;oBACjE6C,SAAS;oBACTC,SAAS;gBACX;YACF,SAAU;gBACR3C,QAAQ;YACV;QACF,GACA;QAACgD;QAAkBtD;QAAWP;QAAQU;KAAgB;IAGxD,MAAMsD,mBAAmB/E,YACvB,CAACsC,UAAiB;YAChBV,QAAQU,QAAQC,GAAG;YACnB,IAAI;gBACF,MAAM2B,UAAU,MAAMU,iBAAiB;oBACrC1D,WAAWoB,QAAQC,GAAG;oBACtBuC,OAAO;gBACT;gBACA,IAAIZ,SAAS;oBACXzC,gBAAgB,CAAC,YAAY,EAAEyC,QAAQlB,OAAO,EAAE,EAAE;wBAChDsB,SAAS;wBACTC,SAAS;oBACX;gBACF;YACF,SAAU;gBACR3C,QAAQ;YACV;QACF,GACA;QAACgD;QAAkBnD;KAAgB;IAGrC,MAAMuD,qBAAqBhF,YACzB,CAACsC,UAAiB;gBAEOA;YADvB,MAAM2C,YAAY,MAAMvD,QAAQ;gBAC9BwD,OAAO,CAAC,WAAW,GAAE5C,uBAAAA,QAAQ6C,WAAW,YAAnB7C,uBAAuBA,QAAQC,GAAG,CAAC,WAAW,CAAC;gBACpE6C,aACE,oEACA;gBACFC,kBAAkB;gBAClBC,yBAAyB;oBAAEC,OAAO;gBAAQ;YAC5C,GACGC,IAAI,CAAC,IAAM,MACXpB,KAAK,CAAC,IAAM;YACf,IAAI,CAACa,WAAW;YAChB,MAAMf,UAAU,MAAMU,iBAAiB;gBACrC1D,WAAWoB,QAAQC,GAAG;gBACtBuC,OAAO;gBACPW,QAAQ;YACV;YACA,IAAIvB,SAAS;gBACXzC,gBAAgB,+BAA+B;oBAC7C6C,SAAS;oBACTC,SAAS;gBACX;YACF;QACF,GACA;QAAC7C;QAASkD;QAAkBnD;KAAgB;IAG9C,MAAMiE,kBAAkB1F,YACtB,CAACsC,UAAiB;gBAEOA;YADvB,MAAM2C,YAAY,MAAMvD,QAAQ;gBAC9BwD,OAAO,CAAC,WAAW,GAAE5C,uBAAAA,QAAQ6C,WAAW,YAAnB7C,uBAAuBA,QAAQC,GAAG,CAAC,EAAE,CAAC;gBAC3D6C,aACE,kEACA;gBACFC,kBAAkB;gBAClBC,yBAAyB;oBAAEC,OAAO;gBAAQ;YAC5C,GACGC,IAAI,CAAC,IAAM,MACXpB,KAAK,CAAC,IAAM;YACf,IAAI,CAACa,WAAW;YAChB,oEAAoE;YACpE,gCAAgC;YAChC,MAAMf,UAAU,MAAMU,iBAAiB;gBACrC1D,WAAWoB,QAAQC,GAAG;gBACtBkD,QAAQ;YACV;YACA,IAAIvB,SAAS;gBACXzC,gBAAgB,sBAAsB;oBACpC6C,SAAS;oBACTC,SAAS;gBACX;YACF;QACF,GACA;QAAC7C;QAASkD;QAAkBnD;KAAgB;IAG9C,qBACE,KAACzC;QACC2G,QAAO;QACPC,MAAM/G,eAAe,WAAW;YAAEgH,QAAQ;QAAoB;QAC9DC,cAAc;QACdC,cAAc;kBAEd,cAAA,MAACzG;YAAM0G,SAAS;;gBAUb9D,SAASQ,MAAM,KAAK,KAAKT,YAAYS,MAAM,KAAK,kBAC/C,KAAClD;oBAAW8E,SAAQ;oBAAQiB,OAAM;8BAC/B,4DACC,gEACA;qBAGJrD,SAASG,GAAG,CAAC,CAACC;wBAGTnC,gCA0BUmC,OAAAA,sBAGFA,OAAAA;wBA3BUA,mBAkEf2D,uBACAA,sBAIMA,wBAGAA,uBAqBHhD,wCAEeA,yCAGfA,yCAGKA;oBA3Gd,MAAMiD,SAASzC,eAAe,CAACnB,QAAQC,GAAG,CAAC;oBAC3C,MAAM4D,aACJ,EAAChG,2BAAAA,wBAAwBmC,QAAQU,OAAO,EAAEkD,mBAAzC/F,2BAAoD,KAAK;oBAC5D,MAAMiG,UAAUvD,gBAAgB,CAACP,QAAQC,GAAG,CAAC;oBAC7C,MAAM0D,wBAAe3D,oBAAAA,QAAQ+D,QAAQ,qBAAhB/D,kBAAkB2D,YAAY,mBAAI,CAAC;oBACxD,qBACE,MAAC3G;wBAEC0G,SAAS;wBACTM,IAAI;4BACFC,QAAQ;4BACRC,aAAa;4BACbC,cAAc;4BACdC,GAAG;wBACL;;0CAEA,MAACpH;gCACCqH,WAAU;gCACVX,SAAS;gCACTM,IAAI;oCAAEM,YAAY;gCAAS;;kDAE3B,KAACpH;wCAAW8E,SAAQ;wCAAQgC,IAAI;4CAAEO,MAAM;wCAAE;wCAAGC,MAAM;kDAChD7F,iBAAiBqB,QAAQC,GAAG,kBAC3B,KAACxD;4CACCgI,MAAM9F,iBAAiBqB,QAAQC,GAAG;4CAClCgD,OAAM;4CACNyB,WAAU;uDAET1E,SAAAA,uBAAAA,QAAQ6C,WAAW,YAAnB7C,uBAAuBA,QAAQ2E,QAAQ,YAAvC3E,QAA2CA,QAAQC,GAAG;8CAGxDD,SAAAA,wBAAAA,QAAQ6C,WAAW,YAAnB7C,wBAAuBA,QAAQ2E,QAAQ,YAAvC3E,QAA2CA,QAAQC,GAAG;;kDAG3D,KAAClD;wCAAK6H,MAAK;wCAAQC,OAAO,CAAC,CAAC,EAAE7E,QAAQU,OAAO,EAAE;;oCAC9CoD,wBACC,KAAC/G;wCAAK6H,MAAK;wCAAQ3B,OAAM;wCAAQ4B,OAAM;yCACrC;oCACHhB,2BACC,KAAC/G;wCACC8H,MAAK;wCACLE,UAAUzF,SAASW,QAAQC,GAAG;wCAC9B8E,SAAS1D,cAAcrB;kDAEtB,CAAC,YAAY,EAAE4D,QAAQ;yCAExB;oCACHrE,SACD,CAACI,YAAYqF,IAAI,CAAC,CAACC,QAAUA,MAAMhF,GAAG,KAAKD,QAAQC,GAAG,kBACpD,KAAChD;wCAAQ2F,OAAM;kDACb,cAAA,KAAC9F;4CACC8H,MAAK;4CACLE,UAAUzF,SAASW,QAAQC,GAAG;4CAC9B8E,SAASxC,mBAAmBvC;sDAE3B;;yCAGH;kDACJ,KAAClD;wCACC8H,MAAK;wCACL3B,OAAM;wCACN8B,SAAS3B,gBAAgBpD;kDAExB;;;;0CAGL,KAAC9C;gCAAW8E,SAAQ;gCAAUiB,OAAM;gCAAiBuB,MAAM;0CACxD,CAAC,IAAI,EAAExE,QAAQC,GAAG,EAAE;;4BAErB0D,CAAAA,EAAAA,wBAAAA,aAAauB,OAAO,qBAApBvB,sBAAsBvD,MAAM,OAC5BuD,uBAAAA,aAAawB,MAAM,qBAAnBxB,qBAAqBvD,MAAM,CAAD,mBAC1B,KAACnD;gCAAQ2F,OAAM;0CACb,cAAA,KAAC1F;oCAAW8E,SAAQ;oCAAUiB,OAAM;8CACjC;wCACCU,EAAAA,yBAAAA,aAAauB,OAAO,qBAApBvB,uBAAsBvD,MAAM,IACxB,CAAC,SAAS,EAAEuD,aAAauB,OAAO,CAAC7E,IAAI,CAAC,OAAO,GAC7C;wCACJsD,EAAAA,wBAAAA,aAAawB,MAAM,qBAAnBxB,sBAAqBvD,MAAM,IACvB,CAAC,QAAQ,EAAEuD,aAAawB,MAAM,CAAC9E,IAAI,CAAC,OAAO,GAC3C;qCACL,CACE+E,MAAM,CAACC,SACPhF,IAAI,CAAC;;;4BAIbyD,wBACC,MAACjH;gCAAMyI,UAAS;gCAAQtB,IAAI;oCAAEuB,IAAI;gCAAI;;oCACnC,2DACC,qDACA;oCAQD5E,EAAAA,yCAAAA,yBAAyB,CAACX,QAAQC,GAAG,CAAC,qBAAtCU,uCAAwCG,MAAM,kBAC7C,KAAC5D;wCAAW8E,SAAQ;wCAAQgC,IAAI;4CAAEuB,IAAI;wCAAE;kDACrC,CAAC,QAAQ,GAAE5E,0CAAAA,yBAAyB,CAACX,QAAQC,GAAG,CAAC,qBAAtCU,wCAAwCG,MAAM,EAAE;yCAE5D;oCACHH,EAAAA,0CAAAA,yBAAyB,CAACX,QAAQC,GAAG,CAAC,qBAAtCU,wCAAwCK,IAAI,kBAC3C,KAAC9D;wCAAW8E,SAAQ;wCAAUgC,IAAI;4CAAEwB,SAAS;4CAASD,IAAI;wCAAI;kDAC3D,CAAC,SAAS,EAAE,IAAIE,MACf9E,0CAAAA,yBAAyB,CAACX,QAAQC,GAAG,CAAC,qBAAtCU,wCACIK,IAAI,EACR0E,kBAAkB,IAAI;yCAExB;;iCAEJ;;uBA1GC1F,QAAQC,GAAG;gBA6GtB;gBAEDN,YAAYI,GAAG,CAAC,CAACC;wBAGbnC,0BAqBUmC,MAAAA,sBAGFA,OAAAA;oBA1BX,MAAM4D,SAASzC,eAAe,CAACnB,QAAQC,GAAG,CAAC;oBAC3C,MAAM4D,aACJ,EAAChG,2BAAAA,wBAAwBmC,QAAQU,OAAO,EAAEkD,mBAAzC/F,2BAAoD,KAAK;oBAC5D,MAAM8H,WAAW/F,SAASoF,IAAI,CAAC,CAACC,QAAUA,MAAMhF,GAAG,KAAKD,QAAQC,GAAG;oBACnE,qBACE,MAACjD;wBAEC0G,SAAS;wBACTM,IAAI;4BACFC,QAAQ;4BACRC,aAAa;4BACbC,cAAc;4BACdC,GAAG;wBACL;;0CAEA,MAACpH;gCAAMqH,WAAU;gCAAMX,SAAS;gCAAGM,IAAI;oCAAEM,YAAY;gCAAS;;kDAC5D,KAACpH;wCAAW8E,SAAQ;wCAAQgC,IAAI;4CAAEO,MAAM;wCAAE;wCAAGC,MAAM;kDAChD7F,iBAAiBqB,QAAQC,GAAG,kBAC3B,KAACxD;4CACCgI,MAAM9F,iBAAiBqB,QAAQC,GAAG;4CAClCgD,OAAM;4CACNyB,WAAU;uDAET1E,QAAAA,uBAAAA,QAAQ6C,WAAW,YAAnB7C,uBAAuBA,QAAQ2E,QAAQ,YAAvC3E,OAA2CA,QAAQC,GAAG;8CAGxDD,SAAAA,wBAAAA,QAAQ6C,WAAW,YAAnB7C,wBAAuBA,QAAQ2E,QAAQ,YAAvC3E,QAA2CA,QAAQC,GAAG;;kDAG3D,KAAClD;wCAAK6H,MAAK;wCAAQ3B,OAAM;wCAAU4B,OAAM;;kDACzC,KAAC9H;wCAAK6H,MAAK;wCAAQC,OAAO,CAAC,CAAC,EAAE7E,QAAQU,OAAO,EAAE;;oCAC9CiF,yBACC,KAAC1I;wCAAQ2F,OAAM;kDACb,cAAA,KAAC7F;4CAAK6H,MAAK;4CAAQ5C,SAAQ;4CAAW6C,OAAM;;yCAE5C;oCACHhB,2BACC,KAAC/G;wCACC8H,MAAK;wCACLE,UAAUzF,SAASW,QAAQC,GAAG;wCAC9B8E,SAAStC,iBAAiBzC;kDAEzB,CAAC,YAAY,EAAE4D,QAAQ;yCAExB;kDACJ,KAAC9G;wCACC8H,MAAK;wCACL3B,OAAM;wCACN8B,SAASrC,mBAAmB1C;kDAE3B;;;;0CAGL,KAAC9C;gCAAW8E,SAAQ;gCAAUiB,OAAM;gCAAiBuB,MAAM;0CACxD,CAAC,IAAI,EAAExE,QAAQC,GAAG,CAAC,oCAAoC,CAAC;;;uBAhDtD,CAAC,IAAI,EAAED,QAAQC,GAAG,EAAE;gBAoD/B;8BACA,KAAC/C;oBAAW8E,SAAQ;oBAAUiB,OAAM;8BACjC,CAAC,iEAAiE,CAAC,GAClE,CAAC,CAAC,EAAE3G,oBAAoB,gCAAgC,CAAC;;;;;AAKrE;AACAiC,gBAAgBsE,WAAW,GAAG;AAE9B,eAAetE,gBAAe"}