@aglyn/plugins-marketplace 1.0.0-beta.149 → 1.0.0-beta.151

package/src/lib/components/org-seller-panel.component.js

@@ -0,0 +1,956 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ 'use client';
+import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-runtime";
+import { trackEvent } from "@aglyn/aglyn/app-utils/analytics-events";
+import { mdiDotsVertical } from "@aglyn/shared-data-mdi";
+import { AppLink, CardDisplay, MdiIcon } from "@aglyn/shared-ui-jsx";
+import { useSnackbar } from "@aglyn/shared-ui-snackstack";
+import { Timestamp } from "@aglyn/shared-util-timestamp";
+import { Alert, Avatar, Button, Chip, Divider, IconButton, Link, Menu, MenuItem, Stack, TextField, Typography } from "@mui/material";
+import { PUBLISHER_AGREEMENT_POINTS, PUBLISHER_AGREEMENT_TITLE, PUBLISHER_AGREEMENT_VERSION, publisherAgreementPresentation, publisherAgreementState } from "@aglyn/aglyn/app-utils/publisher-agreement";
+/*
+  THE LEGAL NAME, not `useBranding().branding.productName` (AGL-2351).
+
+  Every other customer-facing string in the console reads the org's resolved
+  product name, and doing that here would be false: the two sentences below say
+  which entity holds a sales-tax registration and remits against it. A
+  white-label agency holds neither. The value has to name the company that
+  actually stands behind the money — the same reasoning that keeps
+  `tx-return-webfile.ts` naming the entity rather than the product, and the
+  reason these two were left out of the AGL-2319 sweep instead of swept wrong.
+*/ import { PLATFORM_BRAND_LEGAL_NAME } from "@aglyn/aglyn/app-utils/platform-brand";
+import { LISTING_LOGO_HINT } from "../constants/listing-media.js";
+import { useRouter } from "next/navigation";
+import { collection, doc, query, updateDoc, where } from "firebase/firestore";
+import { useCallback, useEffect, useState } from "react";
+import { useFirestore, useUser } from "@aglyn/tenant-feature-instance";
+import { authorizedFetch } from "@aglyn/shared-util-http/authorized-token";
+import { pluginDocsHelp, useMediaPicker } from "@aglyn/aglyn";
+import { useFirestoreCollection } from "@aglyn/tenant-feature-instance";
+import { useFirestoreDoc } from "@aglyn/tenant-feature-instance";
+import EditListingDialog from "./edit-listing-dialog.component.js";
+import { listingPath, publishPluginPath } from "../model/marketplace-paths.js";
+import { payoutReadiness } from "../model/payout-readiness.js";
+import { summarizeSellerLedger } from "../model/seller-ledger-totals.js";
+const HANDLE_PATTERN = /^[a-z0-9][a-z0-9-]{2,29}$/;
+/**
+ * Seller area (AGL-44/798/801): the org's marketplace identity and its
+ * published listings, folded out of the retired `/[orgSlug]/marketplace` page.
+ * Each section (profile, listings, payouts, sales) is its own Marketplace
+ * ROUTE (AGL-801/693), so this renders exactly one card per the `section`
+ * prop. The shared Firestore hooks run regardless of which section is asked
+ * for — Firebase dedupes identical listeners, and only the section the reader
+ * navigated to is mounted at all, so the others never subscribe.
+ */ export function OrgSellerPanel(props) {
+    var _ref, _ref1, _ref2, _profile_lastPayoutFailureCents, _profile_lastPayoutFailureReason;
+    var _profile_publisherAgreement, _profile_publisherAgreement1, _rowMenu_listing, _rowMenu_listing1, _rowMenu_listing2, _rowMenu_listing3, _rowMenu_listing4, _rowMenu_listing5, _rowMenu_listing6, _rowMenu_listing7;
+    const { orgId, section, basePath } = props;
+    const router = useRouter();
+    const firestore = useFirestore();
+    const { data: user } = useUser();
+    const { enqueueSnackbar } = useSnackbar();
+    /** Bumped by Retry to re-subscribe the publisher profile (AGL-1380). */ const [profileRetryNonce, setProfileRetryNonce] = useState(0);
+    const { data: profile, status: profileStatus } = useFirestoreDoc(// The org's marketplace identity (AGL-652), not the personal one. Held
+    // at null rather than addressed as `publisherProfiles/-none-`: that
+    // sentinel issued a guaranteed-denied read, and a denial now lands in
+    // `status: 'error'`, which means something.
+    ()=>orgId ? doc(firestore, 'publisherProfiles', orgId) : null, [
+        firestore,
+        orgId,
+        profileRetryNonce
+    ], {
+        idField: '$id'
+    });
+    /**
+   * Three outcomes, not two (AGL-1380). An absent publisher profile is the
+   * value BEFORE an answer as much as it is the value of a publisher who
+   * never connected Stripe, so reading payout state off `stripeChargesEnabled`
+   * alone told a publisher already taking payouts to "Connect a Stripe
+   * account" and offered them the setup button that starts onboarding again.
+   */ const payoutsState = !orgId || profileStatus === 'loading' ? 'pending' : profileStatus === 'error' ? 'error' : 'loaded';
+    /**
+   * TWO questions, not one (AGL-1997). This card said "Payouts are enabled"
+   * off `stripeChargesEnabled` — whether Stripe will let the account take
+   * MONEY — and never read `stripePayoutsEnabled`, whether the money can
+   * LEAVE. The decision itself lives in `payoutReadiness` so each of its six
+   * outcomes can be asserted without mounting this tree.
+   */ const readiness = payoutReadiness({
+        state: payoutsState,
+        chargesEnabled: profile == null ? void 0 : profile.stripeChargesEnabled,
+        payoutsEnabled: profile == null ? void 0 : profile.stripePayoutsEnabled,
+        accountLivemode: profile == null ? void 0 : profile.stripeAccountLivemode
+    });
+    /** Stripe will let this account take money — four of the seven outcomes. */ const chargesEnabled = readiness === 'ready' || readiness === 'blocked' || readiness === 'unknown' || readiness === 'unverified';
+    // Both held at null while the org is unknown, like the profile above
+    // (AGL-1440): AGL-1380 repaired the profile ref and left these two
+    // `where`-clause siblings on the sentinel. The purchases query is the one
+    // that matters — `marketplacePurchases` is buyer/seller-gated, and a
+    // rules-shaped LIST is evaluated against the QUERY, so the sentinel was
+    // denied wholesale and retried on the refusal cadence. The listings query
+    // is public and merely wasted the round trip.
+    const { data: listings } = useFirestoreCollection(()=>orgId ? query(collection(firestore, 'marketplaceListings'), // Listings are org-owned (AGL-652): `profileId` is the org id,
+        // not a uid — filtering by uid left this list permanently empty
+        // (AGL-781).
+        where('profileId', '==', orgId)) : null, [
+        firestore,
+        orgId
+    ], {
+        idField: '$id'
+    });
+    // Seller ledger (AGL-46): purchase records written by the Stripe webhook.
+    const { data: sales } = useFirestoreCollection(()=>orgId ? query(collection(firestore, 'marketplacePurchases'), // Sales belong to the ORG that published (AGL-652).
+        where('sellerOrgId', '==', orgId)) : null, [
+        firestore,
+        orgId
+    ], {
+        idField: '$id'
+    });
+    // What the publisher was actually paid (AGL-2158) — see
+    // `summarizeSellerLedger`, where the arithmetic and the reasoning live. This
+    // card used to render `amountCents − feeCents` as "net", which is
+    // `pretax + tax − fee`: the payout PLUS sales tax that was never the
+    // publisher's, summed over refunded sales as well as live ones.
+    const totals = summarizeSellerLedger(sales);
+    const [payoutsBusy, setPayoutsBusy] = useState(false);
+    /**
+   * A one-time Stripe Express dashboard link from the connect route. Not
+   * persisted: login links are single-use and short-lived, so a stored one is
+   * a button that fails the second time it is pressed.
+   */ const [dashboardUrl, setDashboardUrl] = useState(null);
+    const handlePayouts = useCallback(async ()=>{
+        setPayoutsBusy(true);
+        try {
+            const response = await authorizedFetch(user, '/api/marketplace/connect', {
+                method: 'POST',
+                headers: {
+                    'Content-Type': 'application/json'
+                },
+                // The acting org from the URL (AGL-861) — never let the server guess
+                // which of the user's orgs is being set up for payouts.
+                body: JSON.stringify({
+                    orgId
+                })
+            });
+            const payload = await response.json();
+            if (response.status === 501) {
+                return void enqueueSnackbar('Payouts are not configured on this deployment', {
+                    variant: 'info',
+                    persist: false
+                });
+            }
+            if (!response.ok) {
+                var _ref;
+                return void enqueueSnackbar((_ref = payload == null ? void 0 : payload.error) != null ? _ref : 'Payout setup failed', {
+                    variant: 'error',
+                    allowDuplicate: true
+                });
+            }
+            if (payload.chargesEnabled) {
+                // Publisher-payout half of the same activation metric (AGL-1561),
+                // gated on the transition for the same reason as the commerce card:
+                // the connect handler is re-entrant and reports `true` on every
+                // revisit. `chargesEnabled` is the pre-request state — the metric is
+                // about CONNECTING (AGL-1997 split the two flags; payout readiness
+                // can arrive days later and is not a second activation).
+                if (!chargesEnabled) trackEvent('stripe_connected', {});
+                // A WARNING THAT NAMES A PROBLEM MUST OFFER THE FIX.
+                //
+                // "Finish payout setup in Stripe" is the label this button carries in
+                // exactly this state, and it could not open Stripe: the route returned
+                // here with a status and no link, and this branch answered before the
+                // `payload.url` check below ever ran. An Express account has no
+                // password and no direct login, so a link minted by the platform is
+                // the publisher's only way in — without one their share accumulates in
+                // an account that cannot release it and nothing says why.
+                if (payload.payoutsEnabled === false && payload.url) {
+                    return void window.location.assign(payload.url);
+                }
+                // Payouts are flowing, so the route answers with the Express dashboard
+                // instead: balance, payout schedule, and the reason a payout failed.
+                // Held rather than followed — this click was a status check.
+                if (payload.payoutsEnabled !== false && typeof payload.dashboardUrl === 'string') {
+                    setDashboardUrl(payload.dashboardUrl);
+                }
+                // The same split the card renders (AGL-1997): the route answers both
+                // flags, so the toast must not announce payouts off the charges one.
+                return void enqueueSnackbar(payload.payoutsEnabled === false ? 'Connected — payouts are not released yet' : 'Payouts are enabled', {
+                    variant: payload.payoutsEnabled === false ? 'warning' : 'success',
+                    persist: false
+                });
+            }
+            if (payload.url) window.location.assign(payload.url);
+        } catch (error) {
+            console.error(error);
+            enqueueSnackbar('An error has occurred', {
+                variant: 'error',
+                allowDuplicate: true
+            });
+        } finally{
+            setPayoutsBusy(false);
+        }
+    }, [
+        orgId,
+        user,
+        chargesEnabled,
+        enqueueSnackbar
+    ]);
+    const [handle, setHandle] = useState('');
+    const [displayName, setDisplayName] = useState('');
+    const [bio, setBio] = useState('');
+    // Logo, support contact and social links (AGL-1009). `avatarUrl` and
+    // `website` existed server-side already — they just had no form input and
+    // no rendering, so they were dead fields until now.
+    const [avatarUrl, setAvatarUrl] = useState('');
+    /*
+   * The console's media library, opened through the picker context rather
+   * than by mounting its dialog (AGL-3080): the library is coupled to the
+   * org and the session, which a plugin has no way to reach, and the console
+   * provides `pickMedia` around every plugin page for exactly this. The URL
+   * comes back already resolved — CDN path over the raw download URL
+   * (AGL-1215) — so the panel no longer resolves one itself.
+   */ const { pickMedia } = useMediaPicker();
+    const chooseLogo = useCallback(async ()=>{
+        const picked = await (pickMedia == null ? void 0 : pickMedia({
+            kind: 'image'
+        }));
+        if (picked == null ? void 0 : picked.url) setAvatarUrl(picked.url);
+    }, [
+        pickMedia
+    ]);
+    const [website, setWebsite] = useState('');
+    const [supportEmail, setSupportEmail] = useState('');
+    const [supportUrl, setSupportUrl] = useState('');
+    const [githubUrl, setGithubUrl] = useState('');
+    const [xUrl, setXUrl] = useState('');
+    const [linkedinUrl, setLinkedinUrl] = useState('');
+    useEffect(()=>{
+        var _ref, _ref1, _ref2, _ref3, _ref4, _ref5, _ref6, _ref7, _ref8, _ref9;
+        setHandle((_ref = profile == null ? void 0 : profile.handle) != null ? _ref : '');
+        setDisplayName((_ref1 = profile == null ? void 0 : profile.displayName) != null ? _ref1 : '');
+        setBio((_ref2 = profile == null ? void 0 : profile.bio) != null ? _ref2 : '');
+        setAvatarUrl((_ref3 = profile == null ? void 0 : profile.avatarUrl) != null ? _ref3 : '');
+        setWebsite((_ref4 = profile == null ? void 0 : profile.website) != null ? _ref4 : '');
+        setSupportEmail((_ref5 = profile == null ? void 0 : profile.supportEmail) != null ? _ref5 : '');
+        setSupportUrl((_ref6 = profile == null ? void 0 : profile.supportUrl) != null ? _ref6 : '');
+        setGithubUrl((_ref7 = profile == null ? void 0 : profile.githubUrl) != null ? _ref7 : '');
+        setXUrl((_ref8 = profile == null ? void 0 : profile.xUrl) != null ? _ref8 : '');
+        setLinkedinUrl((_ref9 = profile == null ? void 0 : profile.linkedinUrl) != null ? _ref9 : '');
+    }, [
+        profile == null ? void 0 : profile.handle,
+        profile == null ? void 0 : profile.displayName,
+        profile == null ? void 0 : profile.bio,
+        profile == null ? void 0 : profile.avatarUrl,
+        profile == null ? void 0 : profile.website,
+        profile == null ? void 0 : profile.supportEmail,
+        profile == null ? void 0 : profile.supportUrl,
+        profile == null ? void 0 : profile.githubUrl,
+        profile == null ? void 0 : profile.xUrl,
+        profile == null ? void 0 : profile.linkedinUrl
+    ]);
+    const validHandle = HANDLE_PATTERN.test(handle);
+    const handleSave = useCallback(async ()=>{
+        if (!orgId || !validHandle || !displayName.trim()) return;
+        try {
+            // Server-owned (AGL-652): the handle must be claimed transactionally in
+            // publisherHandles, which a client write cannot do — two orgs racing
+            // for one handle would both succeed and one would silently lose its
+            // marketplace URL. The rules reject a client handle write outright.
+            const response = await authorizedFetch(user, '/api/marketplace/publisher-profile', {
+                method: 'POST',
+                headers: {
+                    'Content-Type': 'application/json'
+                },
+                body: JSON.stringify({
+                    orgId,
+                    handle,
+                    displayName: displayName.trim(),
+                    bio: bio.trim(),
+                    // AGL-1009: validated server-side (https-only, fixed social
+                    // hosts) — an empty string explicitly clears the stored field.
+                    avatarUrl: avatarUrl.trim(),
+                    website: website.trim(),
+                    supportEmail: supportEmail.trim(),
+                    supportUrl: supportUrl.trim(),
+                    githubUrl: githubUrl.trim(),
+                    xUrl: xUrl.trim(),
+                    linkedinUrl: linkedinUrl.trim()
+                })
+            });
+            const payload = await response.json().catch(()=>null);
+            if (!response.ok) {
+                var _ref;
+                return enqueueSnackbar((_ref = payload == null ? void 0 : payload.error) != null ? _ref : 'Could not save the profile', {
+                    variant: 'warning',
+                    persist: false
+                });
+            }
+            enqueueSnackbar('Profile saved', {
+                variant: 'success',
+                persist: false
+            });
+        } catch (error) {
+            console.error(error);
+            enqueueSnackbar('An error has occurred', {
+                variant: 'error',
+                allowDuplicate: true
+            });
+        }
+    }, [
+        orgId,
+        validHandle,
+        handle,
+        displayName,
+        bio,
+        avatarUrl,
+        website,
+        supportEmail,
+        supportUrl,
+        githubUrl,
+        xUrl,
+        linkedinUrl,
+        user,
+        enqueueSnackbar
+    ]);
+    // The publisher agreement (AGL-1077). `none` and `outdated` get different
+    // copy on purpose: "you never agreed" and "the terms moved" are different
+    // situations, and one message for both reads as a bug in whichever case it
+    // does not describe.
+    const agreementState = publisherAgreementState(profile == null ? void 0 : profile.publisherAgreement);
+    // Whether the document can be read at all (AGL-1660). While it has no
+    // published page there is no link to render and no acceptance to collect —
+    // the summary below is a summary OF something, and without the something it
+    // is just seven sentences we wrote.
+    const agreementPresentation = publisherAgreementPresentation(agreementState);
+    const acceptedOn = (()=>{
+        var _profile_publisherAgreement, _at_toDate;
+        const at = profile == null ? void 0 : (_profile_publisherAgreement = profile.publisherAgreement) == null ? void 0 : _profile_publisherAgreement.acceptedAt;
+        const date = at == null ? void 0 : (_at_toDate = at.toDate) == null ? void 0 : _at_toDate.call(at);
+        return date ? date.toLocaleDateString() : '';
+    })();
+    const [agreementBusy, setAgreementBusy] = useState(false);
+    const handleAcceptAgreement = useCallback(async ()=>{
+        if (!orgId) return;
+        setAgreementBusy(true);
+        try {
+            // Server-owned, like the handle: an acceptance the accepting party can
+            // write itself is not evidence of anything, and the rules block the
+            // field outright.
+            const response = await authorizedFetch(user, '/api/marketplace/publisher-profile', {
+                method: 'POST',
+                headers: {
+                    'Content-Type': 'application/json'
+                },
+                body: JSON.stringify({
+                    action: 'accept-agreement',
+                    orgId,
+                    // Echoed back so the server can refuse an acceptance of anything
+                    // other than the version in force — including one made against a
+                    // page left open across a change.
+                    version: PUBLISHER_AGREEMENT_VERSION
+                })
+            });
+            const payload = await response.json().catch(()=>null);
+            if (!response.ok) {
+                var _ref;
+                return void enqueueSnackbar((_ref = payload == null ? void 0 : payload.error) != null ? _ref : 'Could not record the acceptance', {
+                    variant: 'warning',
+                    persist: false
+                });
+            }
+            enqueueSnackbar('Agreement accepted — you can publish now', {
+                variant: 'success',
+                persist: false
+            });
+        } catch (error) {
+            console.error(error);
+            enqueueSnackbar('An error has occurred', {
+                variant: 'error',
+                allowDuplicate: true
+            });
+        } finally{
+            setAgreementBusy(false);
+        }
+    }, [
+        orgId,
+        user,
+        enqueueSnackbar
+    ]);
+    // The listing open in the full editor (AGL-862), or null when closed.
+    const [editListing, setEditListing] = useState(null);
+    // Per-row overflow menu (AGL-999): the anchor plus the row it belongs to,
+    // so one <Menu> serves every row instead of one per listing.
+    const [rowMenu, setRowMenu] = useState(null);
+    const closeRowMenu = ()=>setRowMenu(null);
+    const listingHref = (listing)=>listingPath(basePath, listing.$id);
+    // Shipping a new version was invisible as a path (AGL-1008): the only door
+    // was the generic publish form, which reads entirely like first-time
+    // publishing, so updating looked like creating a second listing. Same
+    // form, pre-bound to the listing.
+    const newVersionHref = (listing)=>publishPluginPath(basePath, listing.$id);
+    // Private ⇄ public (AGL-968/994). Goes through the API rather than a client
+    // write: making a listing public is gated on it actually carrying the docs
+    // a stranger needs, and that check has to live somewhere a client can't
+    // skip. No re-review either way — the bytes are unchanged.
+    const [visibilityBusy, setVisibilityBusy] = useState('');
+    const handleVisibility = useCallback((listing)=>async ()=>{
+            const next = listing.visibility === 'private' ? 'public' : 'private';
+            setVisibilityBusy(listing.$id);
+            try {
+                const response = await authorizedFetch(user, '/api/marketplace/publish-plugin', {
+                    method: 'POST',
+                    headers: {
+                        'Content-Type': 'application/json'
+                    },
+                    body: JSON.stringify({
+                        action: 'set-visibility',
+                        listingId: listing.$id,
+                        visibility: next
+                    })
+                });
+                const payload = await response.json().catch(()=>({}));
+                if (!response.ok) {
+                    var _ref;
+                    return void enqueueSnackbar((_ref = payload == null ? void 0 : payload.error) != null ? _ref : 'Visibility change failed', {
+                        variant: 'error',
+                        allowDuplicate: true
+                    });
+                }
+                enqueueSnackbar(next === 'private' ? 'Now private — only your sites can install it' : 'Published to the marketplace', {
+                    variant: 'success',
+                    persist: false
+                });
+            } catch (error) {
+                console.error(error);
+                enqueueSnackbar('An error has occurred', {
+                    variant: 'error',
+                    allowDuplicate: true
+                });
+            } finally{
+                setVisibilityBusy('');
+            }
+        }, [
+        user,
+        enqueueSnackbar
+    ]);
+    const handleUnpublish = useCallback((listing)=>async ()=>{
+            try {
+                await updateDoc(doc(firestore, 'marketplaceListings', listing.$id), {
+                    deletedAt: listing.deletedAt ? null : Timestamp.now()
+                });
+                enqueueSnackbar(listing.deletedAt ? 'Republished' : 'Unpublished', {
+                    variant: 'success',
+                    persist: false
+                });
+            } catch (error) {
+                console.error(error);
+                enqueueSnackbar('An error has occurred', {
+                    variant: 'error',
+                    allowDuplicate: true
+                });
+            }
+        }, [
+        firestore,
+        enqueueSnackbar
+    ]);
+    const cards = {
+        profile: /*#__PURE__*/ _jsxs(Stack, {
+            spacing: 2,
+            children: [
+                /*#__PURE__*/ _jsx(CardDisplay, {
+                    header: 'Public profile',
+                    help: pluginDocsHelp('publisherHandbook', {
+                        anchor: '#before-your-first-publish',
+                        excerpt: 'Your public publisher identity — handle, name, and bio shown ' + 'on everything you publish to the marketplace.'
+                    }),
+                    contentGutterX: true,
+                    contentGutterY: true,
+                    children: /*#__PURE__*/ _jsxs(Stack, {
+                        spacing: 2,
+                        children: [
+                            /*#__PURE__*/ _jsx(Typography, {
+                                variant: "body2",
+                                color: "text.secondary",
+                                children: 'Shown on every component you publish to the marketplace. A ' + 'profile is required before publishing.'
+                            }),
+                            /*#__PURE__*/ _jsx(TextField, {
+                                label: "Handle",
+                                value: handle,
+                                onChange: (event)=>setHandle(event.target.value.toLowerCase()),
+                                size: "small",
+                                error: Boolean(handle) && !validHandle,
+                                helperText: Boolean(handle) && !validHandle ? '3–30 chars: lowercase letters, digits, dashes' : ' '
+                            }),
+                            /*#__PURE__*/ _jsx(TextField, {
+                                label: "Display name",
+                                value: displayName,
+                                onChange: (event)=>setDisplayName(event.target.value),
+                                size: "small"
+                            }),
+                            /*#__PURE__*/ _jsx(TextField, {
+                                label: "Bio",
+                                value: bio,
+                                onChange: (event)=>setBio(event.target.value),
+                                size: "small",
+                                multiline: true,
+                                minRows: 2
+                            }),
+                            /*#__PURE__*/ _jsx(Typography, {
+                                variant: "caption",
+                                color: "text.secondary",
+                                component: "div",
+                                children: LISTING_LOGO_HINT
+                            }),
+                            /*#__PURE__*/ _jsxs(Stack, {
+                                direction: "row",
+                                spacing: 2,
+                                sx: {
+                                    alignItems: 'center'
+                                },
+                                children: [
+                                    /*#__PURE__*/ _jsx(Avatar, {
+                                        src: avatarUrl || undefined,
+                                        alt: displayName || 'Publisher logo',
+                                        sx: {
+                                            width: 56,
+                                            height: 56
+                                        },
+                                        variant: "rounded",
+                                        children: (displayName || handle || '?').slice(0, 1).toUpperCase()
+                                    }),
+                                    /*#__PURE__*/ _jsxs(Stack, {
+                                        direction: "row",
+                                        spacing: 1,
+                                        children: [
+                                            /*#__PURE__*/ _jsx(Button, {
+                                                size: "small",
+                                                onClick: chooseLogo,
+                                                children: avatarUrl ? 'Replace logo' : 'Choose logo from library'
+                                            }),
+                                            avatarUrl ? /*#__PURE__*/ _jsx(Button, {
+                                                size: "small",
+                                                color: "error",
+                                                onClick: ()=>setAvatarUrl(''),
+                                                children: 'Remove'
+                                            }) : null
+                                        ]
+                                    })
+                                ]
+                            }),
+                            /*#__PURE__*/ _jsx(TextField, {
+                                label: "Support email",
+                                value: supportEmail,
+                                onChange: (event)=>setSupportEmail(event.target.value),
+                                size: "small",
+                                type: "email"
+                            }),
+                            /*#__PURE__*/ _jsx(TextField, {
+                                label: "Support URL",
+                                value: supportUrl,
+                                onChange: (event)=>setSupportUrl(event.target.value),
+                                size: "small",
+                                helperText: "Where buyers go for help with your plugins — https:// only"
+                            }),
+                            /*#__PURE__*/ _jsx(TextField, {
+                                label: "Website",
+                                value: website,
+                                onChange: (event)=>setWebsite(event.target.value),
+                                size: "small",
+                                helperText: "Your own site, linked from your publisher page — https:// only"
+                            }),
+                            /*#__PURE__*/ _jsx(TextField, {
+                                label: "GitHub",
+                                value: githubUrl,
+                                onChange: (event)=>setGithubUrl(event.target.value),
+                                size: "small",
+                                helperText: "https://github.com/…"
+                            }),
+                            /*#__PURE__*/ _jsx(TextField, {
+                                label: "X",
+                                value: xUrl,
+                                onChange: (event)=>setXUrl(event.target.value),
+                                size: "small",
+                                helperText: "https://x.com/…"
+                            }),
+                            /*#__PURE__*/ _jsx(TextField, {
+                                label: "LinkedIn",
+                                value: linkedinUrl,
+                                onChange: (event)=>setLinkedinUrl(event.target.value),
+                                size: "small",
+                                helperText: "https://linkedin.com/…"
+                            }),
+                            /*#__PURE__*/ _jsx(Button, {
+                                variant: "contained",
+                                color: "primary",
+                                disabled: !validHandle || !displayName.trim(),
+                                onClick: handleSave,
+                                children: 'Save profile'
+                            })
+                        ]
+                    })
+                }),
+                /*#__PURE__*/ _jsx(CardDisplay, {
+                    header: PUBLISHER_AGREEMENT_TITLE,
+                    help: pluginDocsHelp('publisherHandbook', {
+                        anchor: '#the-publisher-agreement',
+                        excerpt: 'The terms your organization publishes under — accepted once, ' + 're-asked when they change.'
+                    }),
+                    contentGutterX: true,
+                    contentGutterY: true,
+                    children: /*#__PURE__*/ _jsxs(Stack, {
+                        spacing: 2,
+                        children: [
+                            agreementState === 'current' ? /*#__PURE__*/ _jsx(Alert, {
+                                severity: "success",
+                                children: `Accepted — version ${profile == null ? void 0 : (_profile_publisherAgreement = profile.publisherAgreement) == null ? void 0 : _profile_publisherAgreement.version}` + (acceptedOn ? ` on ${acceptedOn}` : '')
+                            }) : null,
+                            agreementPresentation.unavailableNotice ? /*#__PURE__*/ _jsx(Alert, {
+                                severity: "warning",
+                                children: agreementPresentation.unavailableNotice
+                            }) : agreementState === 'current' ? null : /*#__PURE__*/ _jsx(Alert, {
+                                severity: agreementState === 'outdated' ? 'warning' : 'info',
+                                children: agreementState === 'outdated' ? 'These terms have changed since your organization accepted ' + `them (you accepted ${profile == null ? void 0 : (_profile_publisherAgreement1 = profile.publisherAgreement) == null ? void 0 : _profile_publisherAgreement1.version}). ` + 'Publishing is paused until someone who can bind the ' + 'organization accepts the current version.' : 'Your organization has not accepted these terms. You can ' + 'set up a profile without them, but you cannot publish.'
+                            }),
+                            /*#__PURE__*/ _jsx(Typography, {
+                                variant: "body2",
+                                color: "text.secondary",
+                                children: 'In summary — this is not the agreement, it is what tends to ' + 'surprise people later:'
+                            }),
+                            /*#__PURE__*/ _jsx(Stack, {
+                                spacing: 1,
+                                children: PUBLISHER_AGREEMENT_POINTS.map((point)=>/*#__PURE__*/ _jsxs(Stack, {
+                                        spacing: 0.25,
+                                        children: [
+                                            /*#__PURE__*/ _jsx(Typography, {
+                                                variant: "body2",
+                                                children: point.label
+                                            }),
+                                            /*#__PURE__*/ _jsx(Typography, {
+                                                variant: "caption",
+                                                color: "text.secondary",
+                                                children: point.detail
+                                            })
+                                        ]
+                                    }, point.id))
+                            }),
+                            agreementPresentation.documentUrl ? /*#__PURE__*/ _jsxs(Typography, {
+                                variant: "body2",
+                                children: [
+                                    /*#__PURE__*/ _jsx(Link, {
+                                        href: agreementPresentation.documentUrl,
+                                        target: "_blank",
+                                        rel: "noopener noreferrer",
+                                        underline: "always",
+                                        children: `Read the full ${PUBLISHER_AGREEMENT_TITLE}`
+                                    }),
+                                    ` (version ${PUBLISHER_AGREEMENT_VERSION})`
+                                ]
+                            }) : /*#__PURE__*/ _jsx(Typography, {
+                                variant: "body2",
+                                color: "text.secondary",
+                                children: `Version ${PUBLISHER_AGREEMENT_VERSION} has no published page ` + 'yet, so there is no full text to link to.'
+                            }),
+                            agreementPresentation.canAccept ? /*#__PURE__*/ _jsx(Button, {
+                                variant: "contained",
+                                color: "primary",
+                                disabled: agreementBusy,
+                                onClick: ()=>void handleAcceptAgreement(),
+                                sx: {
+                                    alignSelf: 'flex-start'
+                                },
+                                children: agreementBusy ? 'Recording…' : agreementState === 'outdated' ? 'Accept the current version' : 'Accept on behalf of this organization'
+                            }) : null,
+                            agreementPresentation.canAccept ? /*#__PURE__*/ _jsx(Typography, {
+                                variant: "caption",
+                                color: "text.secondary",
+                                children: 'Accepting binds the organization, not you personally — only ' + 'an owner or admin can do it, and we record who did and when.'
+                            }) : null
+                        ]
+                    })
+                })
+            ]
+        }),
+        listings: /*#__PURE__*/ _jsxs(CardDisplay, {
+            header: 'Your listings',
+            help: pluginDocsHelp('publisherHandbook', {
+                anchor: '#authoring-your-listing',
+                excerpt: 'Everything you have published, with preview images and ' + 'per-listing unpublish/republish.'
+            }),
+            contentGutterX: true,
+            contentGutterY: true,
+            children: [
+                (listings != null ? listings : []).length === 0 ? /*#__PURE__*/ _jsx(Typography, {
+                    variant: "body2",
+                    color: "text.secondary",
+                    children: 'Publish a reusable component from a site’s Setup page to list ' + 'it here.'
+                }) : /*#__PURE__*/ _jsxs(Stack, {
+                    spacing: 1,
+                    children: [
+                        (listings != null ? listings : []).some((listing)=>listing.visibility === 'private') ? /*#__PURE__*/ _jsx(Typography, {
+                            variant: "caption",
+                            color: "text.secondary",
+                            children: 'Private plugins never appear in the marketplace — open one ' + 'with View to install it on your sites.'
+                        }) : null,
+                        (listings != null ? listings : []).map((listing)=>{
+                            var _listing_priceUsd;
+                            return /*#__PURE__*/ _jsxs(Stack, {
+                                direction: "row",
+                                spacing: 1,
+                                sx: {
+                                    alignItems: 'center',
+                                    // The whole row is the way in (AGL-999) — the name and its
+                                    // metadata are what you aim at, so they should behave like
+                                    // the link they read as.
+                                    borderRadius: 1,
+                                    mx: -1,
+                                    px: 1,
+                                    '&:hover': {
+                                        bgcolor: 'action.hover'
+                                    }
+                                },
+                                children: [
+                                    /*#__PURE__*/ _jsxs(Stack, {
+                                        onClick: ()=>router.push(listingHref(listing)),
+                                        sx: {
+                                            flex: 1,
+                                            minWidth: 0,
+                                            py: 0.75,
+                                            cursor: 'pointer'
+                                        },
+                                        children: [
+                                            /*#__PURE__*/ _jsxs(Stack, {
+                                                direction: "row",
+                                                spacing: 1,
+                                                sx: {
+                                                    alignItems: 'center',
+                                                    minWidth: 0
+                                                },
+                                                children: [
+                                                    /*#__PURE__*/ _jsx(Typography, {
+                                                        variant: "body2",
+                                                        noWrap: true,
+                                                        children: listing.displayName
+                                                    }),
+                                                    listing.visibility === 'private' ? /*#__PURE__*/ _jsx(Chip, {
+                                                        size: "small",
+                                                        variant: "outlined",
+                                                        label: "Private"
+                                                    }) : null
+                                                ]
+                                            }),
+                                            /*#__PURE__*/ _jsx(Typography, {
+                                                variant: "caption",
+                                                color: "text.secondary",
+                                                children: `v${listing.latestVersion}` + (Number((_listing_priceUsd = listing.priceUsd) != null ? _listing_priceUsd : 0) > 0 ? ` · $${listing.priceUsd}` : ' · free') + (listing.previewImageUrl ? ' · has preview' : '') + (listing.deletedAt ? ' · unpublished' : '')
+                                            })
+                                        ]
+                                    }),
+                                    /*#__PURE__*/ _jsx(AppLink, {
+                                        href: listingHref(listing),
+                                        children: /*#__PURE__*/ _jsx(Button, {
+                                            size: "small",
+                                            color: "primary",
+                                            component: "span",
+                                            children: 'View'
+                                        })
+                                    }),
+                                    /*#__PURE__*/ _jsx(IconButton, {
+                                        size: "small",
+                                        "aria-label": `More actions for ${listing.displayName}`,
+                                        onClick: (event)=>setRowMenu({
+                                                anchor: event.currentTarget,
+                                                listing
+                                            }),
+                                        children: /*#__PURE__*/ _jsx(MdiIcon, {
+                                            path: mdiDotsVertical.path,
+                                            fontSize: "small"
+                                        })
+                                    })
+                                ]
+                            }, listing.$id);
+                        })
+                    ]
+                }),
+                /*#__PURE__*/ _jsxs(Menu, {
+                    anchorEl: (_ref = rowMenu == null ? void 0 : rowMenu.anchor) != null ? _ref : null,
+                    open: Boolean(rowMenu),
+                    onClose: closeRowMenu,
+                    children: [
+                        ((_ref1 = rowMenu == null ? void 0 : (_rowMenu_listing = rowMenu.listing) == null ? void 0 : _rowMenu_listing.artifactType) != null ? _ref1 : rowMenu == null ? void 0 : (_rowMenu_listing1 = rowMenu.listing) == null ? void 0 : _rowMenu_listing1.type) === 'plugin' ? /*#__PURE__*/ _jsx(MenuItem, {
+                            onClick: ()=>{
+                                const listing = rowMenu == null ? void 0 : rowMenu.listing;
+                                closeRowMenu();
+                                if (listing) router.push(newVersionHref(listing));
+                            },
+                            children: 'Publish new version…'
+                        }) : null,
+                        /*#__PURE__*/ _jsx(MenuItem, {
+                            onClick: ()=>{
+                                var _ref;
+                                setEditListing((_ref = rowMenu == null ? void 0 : rowMenu.listing) != null ? _ref : null);
+                                closeRowMenu();
+                            },
+                            children: 'Edit listing'
+                        }),
+                        ((_ref2 = rowMenu == null ? void 0 : (_rowMenu_listing2 = rowMenu.listing) == null ? void 0 : _rowMenu_listing2.artifactType) != null ? _ref2 : rowMenu == null ? void 0 : (_rowMenu_listing3 = rowMenu.listing) == null ? void 0 : _rowMenu_listing3.type) === 'plugin' ? /*#__PURE__*/ _jsx(MenuItem, {
+                            disabled: visibilityBusy === (rowMenu == null ? void 0 : (_rowMenu_listing4 = rowMenu.listing) == null ? void 0 : _rowMenu_listing4.$id),
+                            onClick: ()=>{
+                                const listing = rowMenu == null ? void 0 : rowMenu.listing;
+                                closeRowMenu();
+                                if (listing) void handleVisibility(listing)();
+                            },
+                            children: (rowMenu == null ? void 0 : (_rowMenu_listing5 = rowMenu.listing) == null ? void 0 : _rowMenu_listing5.visibility) === 'private' ? 'Make public…' : 'Make private'
+                        }) : null,
+                        /*#__PURE__*/ _jsx(Divider, {}),
+                        /*#__PURE__*/ _jsx(MenuItem, {
+                            sx: {
+                                color: (rowMenu == null ? void 0 : (_rowMenu_listing6 = rowMenu.listing) == null ? void 0 : _rowMenu_listing6.deletedAt) ? undefined : 'error.main'
+                            },
+                            onClick: ()=>{
+                                const listing = rowMenu == null ? void 0 : rowMenu.listing;
+                                closeRowMenu();
+                                if (listing) void handleUnpublish(listing)();
+                            },
+                            children: (rowMenu == null ? void 0 : (_rowMenu_listing7 = rowMenu.listing) == null ? void 0 : _rowMenu_listing7.deletedAt) ? 'Republish' : 'Unpublish'
+                        })
+                    ]
+                }),
+                /*#__PURE__*/ _jsx(EditListingDialog, {
+                    orgId: orgId,
+                    listing: editListing,
+                    open: Boolean(editListing),
+                    onClose: ()=>setEditListing(null),
+                    user: user
+                })
+            ]
+        }),
+        payouts: /*#__PURE__*/ _jsx(CardDisplay, {
+            header: 'Payouts',
+            help: pluginDocsHelp('publisherHandbook', {
+                anchor: '#getting-paid',
+                excerpt: 'Connect Stripe to receive payouts for paid listings. Platform ' + 'fee: 20% per sale, 30% on the Free plan.'
+            }),
+            contentGutterX: true,
+            contentGutterY: true,
+            children: /*#__PURE__*/ _jsx(Stack, {
+                spacing: 2,
+                children: payoutsState === 'error' ? // Neither sentence is safe here: "Payouts are enabled" and
+                // "Connect a Stripe account" both state a payout arrangement we
+                // failed to read, and the button under them acts on it.
+                /*#__PURE__*/ _jsx(Alert, {
+                    severity: "error",
+                    action: /*#__PURE__*/ _jsx(Button, {
+                        color: "inherit",
+                        size: "small",
+                        onClick: ()=>setProfileRetryNonce((n)=>n + 1),
+                        children: 'Retry'
+                    }),
+                    children: 'We couldn’t load your payout setup. This says nothing about ' + 'whether payouts are on — nothing has changed.'
+                }) : payoutsState === 'pending' ? /*#__PURE__*/ _jsx(Typography, {
+                    variant: "body2",
+                    color: "text.secondary",
+                    children: 'Checking your payout setup…'
+                }) : /*#__PURE__*/ _jsxs(_Fragment, {
+                    children: [
+                        readiness === 'blocked' ? /*#__PURE__*/ _jsx(Alert, {
+                            severity: "warning",
+                            children: 'Your Stripe account can take payments, but payouts are ' + 'not enabled yet — sales would stay in Stripe rather ' + 'than reaching your bank. Finish verification in Stripe ' + 'to release them.'
+                        }) : null,
+                        readiness === 'unverified' ? /*#__PURE__*/ _jsx(Alert, {
+                            severity: "error",
+                            children: 'This Stripe account has not been verified for payments ' + 'here, so sales will be refused. Reconnect it to ' + 'confirm — if it was set up against Stripe test mode, ' + 'you will need to connect a live account.'
+                        }) : null,
+                        /*#__PURE__*/ _jsx(Typography, {
+                            variant: "body2",
+                            color: "text.secondary",
+                            children: readiness === 'ready' ? 'Payouts are enabled — paid listings transfer to your ' + 'Stripe account automatically (platform fee 20%, 30% on ' + 'the Free plan).' : readiness === 'unknown' ? // known, like the error branch above.
+                            'Your Stripe account is connected. We haven’t checked ' + 'whether payouts are released yet — recheck to ' + 'confirm. The platform fee is 20% per sale (30% on ' + 'the Free plan).' : readiness === 'blocked' || readiness === 'unverified' ? 'The platform fee is 20% per sale (30% on the Free ' + 'plan).' : 'Connect a Stripe account to sell components. The ' + 'platform fee is 20% per sale (30% on the Free plan).'
+                        }),
+                        /*#__PURE__*/ _jsx(Button, {
+                            variant: chargesEnabled ? 'outlined' : 'contained',
+                            color: "primary",
+                            disabled: payoutsBusy,
+                            onClick: handlePayouts,
+                            children: payoutsBusy ? 'Opening Stripe…' : readiness === 'ready' ? 'Payouts enabled — recheck status' : readiness === 'blocked' ? 'Finish payout setup in Stripe' : readiness === 'unverified' ? 'Reconnect Stripe to verify' : readiness === 'unknown' ? 'Recheck payout status' : 'Set up payouts'
+                        }),
+                        dashboardUrl ? /*#__PURE__*/ _jsx(Button, {
+                            variant: "text",
+                            color: "primary",
+                            href: dashboardUrl,
+                            target: "_blank",
+                            rel: "noopener noreferrer",
+                            children: 'View payouts in Stripe'
+                        }) : null
+                    ]
+                })
+            })
+        }),
+        sales: /*#__PURE__*/ _jsx(CardDisplay, {
+            header: 'Sales',
+            help: pluginDocsHelp('publishAPlugin', {
+                anchor: '#paid-listings',
+                excerpt: 'Sent to your Stripe account is your share after the platform ' + `fee — sales tax is collected on ${PLATFORM_BRAND_LEGAL_NAME}’s ` + 'registration and is never yours.'
+            }),
+            contentGutterX: true,
+            contentGutterY: true,
+            children: (sales != null ? sales : []).length === 0 ? /*#__PURE__*/ _jsx(Typography, {
+                variant: "body2",
+                color: "text.secondary",
+                children: 'No sales yet. Paid listings appear here with what buyers paid ' + 'and what was paid out to you.'
+            }) : /*#__PURE__*/ _jsxs(Stack, {
+                spacing: 0.5,
+                children: [
+                    /*#__PURE__*/ _jsxs(Typography, {
+                        variant: "body2",
+                        children: [
+                            `${totals.paidCount} sale${totals.paidCount === 1 ? '' : 's'}`,
+                            totals.refundedCount > 0 ? ` · ${totals.refundedCount} refunded or charged back` : ''
+                        ]
+                    }),
+                    /*#__PURE__*/ _jsx(Typography, {
+                        variant: "body2",
+                        children: `Sent to your Stripe account $${(totals.sentToStripeCents / 100).toFixed(2)}`
+                    }),
+                    (profile == null ? void 0 : profile.lastPayoutFailureAtMs) ? /*#__PURE__*/ _jsx(Alert, {
+                        severity: "warning",
+                        variant: "outlined",
+                        children: `A payout of $${(Number((_profile_lastPayoutFailureCents = profile.lastPayoutFailureCents) != null ? _profile_lastPayoutFailureCents : 0) / 100).toFixed(2)} did not reach your bank on ${new Date(Number(profile.lastPayoutFailureAtMs)).toLocaleDateString()} — ${String((_profile_lastPayoutFailureReason = profile.lastPayoutFailureReason) != null ? _profile_lastPayoutFailureReason : 'Stripe did not say why')} The money is still in your Stripe account. Open Stripe to fix your payout details.`
+                    }) : null,
+                    /*#__PURE__*/ _jsx(Typography, {
+                        variant: "body2",
+                        color: "text.secondary",
+                        children: `Buyers paid $${(totals.buyersPaidCents / 100).toFixed(2)} · ` + `sales tax $${(totals.salesTaxCents / 100).toFixed(2)} · ` + `platform fee $${(totals.platformFeeCents / 100).toFixed(2)}`
+                    }),
+                    totals.refundedCount > 0 ? /*#__PURE__*/ _jsx(Typography, {
+                        variant: "body2",
+                        color: "text.secondary",
+                        children: `$${(totals.returnedCents / 100).toFixed(2)} returned on refunded ` + 'and charged-back sales, and excluded above'
+                    }) : null,
+                    /*#__PURE__*/ _jsx(Typography, {
+                        variant: "caption",
+                        color: "text.secondary",
+                        children: 'Sent to your Stripe account is the pre-tax price less the ' + 'platform fee. Sales tax is collected and remitted by ' + `${PLATFORM_BRAND_LEGAL_NAME} under its marketplace-provider ` + 'registration and was never part of your share. Reaching ' + 'your Stripe balance is not the same as reaching your bank — ' + 'a failed payout is called out above.'
+                    })
+                ]
+            })
+        })
+    };
+    return cards[section];
+}
+OrgSellerPanel.displayName = 'OrgSellerPanel';
+export default OrgSellerPanel;
+
+//# sourceMappingURL=org-seller-panel.component.js.map