@aglyn/plugins-marketplace 1.0.0-beta.285 → 1.0.0-beta.288

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aglyn/plugins-marketplace",
-  "version": "1.0.0-beta.285",
+  "version": "1.0.0-beta.288",
   "license": "Apache-2.0",
   "homepage": "https://aglyn.com",
   "repository": {
@@ -25,19 +25,19 @@
     "./package.json": "./package.json"
   },
   "dependencies": {
-    "@aglyn/aglyn": "1.0.0-beta.285",
-    "@aglyn/aglyn-markdown-editor": "1.0.0-beta.285",
-    "@aglyn/shared-data-enums": "1.0.0-beta.285",
-    "@aglyn/shared-data-mdi": "1.0.0-beta.285",
-    "@aglyn/shared-ui-jsx": "1.0.0-beta.285",
-    "@aglyn/shared-ui-next": "1.0.0-beta.285",
-    "@aglyn/shared-ui-snackstack": "1.0.0-beta.285",
-    "@aglyn/shared-util-email": "1.0.0-beta.285",
-    "@aglyn/shared-util-http": "1.0.0-beta.285",
-    "@aglyn/shared-util-timestamp": "1.0.0-beta.285",
-    "@aglyn/tenant-data-admin": "1.0.0-beta.285",
-    "@aglyn/tenant-feature-instance": "1.0.0-beta.285",
-    "@aglyn/tenant-runtime": "1.0.0-beta.285",
+    "@aglyn/aglyn": "1.0.0-beta.288",
+    "@aglyn/aglyn-markdown-editor": "1.0.0-beta.288",
+    "@aglyn/shared-data-enums": "1.0.0-beta.288",
+    "@aglyn/shared-data-mdi": "1.0.0-beta.288",
+    "@aglyn/shared-ui-jsx": "1.0.0-beta.288",
+    "@aglyn/shared-ui-next": "1.0.0-beta.288",
+    "@aglyn/shared-ui-snackstack": "1.0.0-beta.288",
+    "@aglyn/shared-util-email": "1.0.0-beta.288",
+    "@aglyn/shared-util-http": "1.0.0-beta.288",
+    "@aglyn/shared-util-timestamp": "1.0.0-beta.288",
+    "@aglyn/tenant-data-admin": "1.0.0-beta.288",
+    "@aglyn/tenant-feature-instance": "1.0.0-beta.288",
+    "@aglyn/tenant-runtime": "1.0.0-beta.288",
     "@swc/helpers": "0.5.23"
   },
   "peerDependencies": {

package/src/lib/declarations.d.ts

@@ -0,0 +1,26 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+/**
+ * The plugin's DECLARATIONS (AGL-4047): installing into a site and publishing
+ * from one, which the one permission catalog lists beside the core keys.
+ * Loaded eagerly by the console (client and server) and the tenant's server
+ * through the generated declarations manifest, so the role editor offers
+ * them, a custom role or a per-member override keeps them, and the site's
+ * stamp carries them. Light by construction: nothing here reaches a
+ * provider, Firestore or React.
+ */
+export declare function registerMarketplaceDeclarations(): void;

package/src/lib/declarations.js

@@ -0,0 +1,37 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ import { registerPluginEntitlements } from "@aglyn/aglyn/plugin-manager/plugin-entitlements";
+import { MARKETPLACE_SITE_PERMISSIONS } from "./model/marketplace-site-permissions.js";
+let declared = false;
+/**
+ * The plugin's DECLARATIONS (AGL-4047): installing into a site and publishing
+ * from one, which the one permission catalog lists beside the core keys.
+ * Loaded eagerly by the console (client and server) and the tenant's server
+ * through the generated declarations manifest, so the role editor offers
+ * them, a custom role or a per-member override keeps them, and the site's
+ * stamp carries them. Light by construction: nothing here reaches a
+ * provider, Firestore or React.
+ */ export function registerMarketplaceDeclarations() {
+    if (declared) return;
+    declared = true;
+    registerPluginEntitlements({
+        pluginId: 'marketplace',
+        orgPermissions: MARKETPLACE_SITE_PERMISSIONS
+    });
+}
+registerMarketplaceDeclarations();
+
+//# sourceMappingURL=declarations.js.map

package/src/lib/declarations.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../libs/plugins/marketplace/src/lib/declarations.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { registerPluginEntitlements } from '@aglyn/aglyn/plugin-manager/plugin-entitlements'\nimport { MARKETPLACE_SITE_PERMISSIONS } from './model/marketplace-site-permissions'\n\nlet declared = false\n\n/**\n * The plugin's DECLARATIONS (AGL-4047): installing into a site and publishing\n * from one, which the one permission catalog lists beside the core keys.\n * Loaded eagerly by the console (client and server) and the tenant's server\n * through the generated declarations manifest, so the role editor offers\n * them, a custom role or a per-member override keeps them, and the site's\n * stamp carries them. Light by construction: nothing here reaches a\n * provider, Firestore or React.\n */\nexport function registerMarketplaceDeclarations(): void {\n  if (declared) return\n  declared = true\n  registerPluginEntitlements({ pluginId: 'marketplace', orgPermissions: MARKETPLACE_SITE_PERMISSIONS })\n}\n\nregisterMarketplaceDeclarations()\n"],"names":["registerPluginEntitlements","MARKETPLACE_SITE_PERMISSIONS","declared","registerMarketplaceDeclarations","pluginId","orgPermissions"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED,SAASA,0BAA0B,QAAQ,kDAAiD;AAC5F,SAASC,4BAA4B,QAAQ,0CAAsC;AAEnF,IAAIC,WAAW;AAEf;;;;;;;;CAQC,GACD,OAAO,SAASC;IACd,IAAID,UAAU;IACdA,WAAW;IACXF,2BAA2B;QAAEI,UAAU;QAAeC,gBAAgBJ;IAA6B;AACrG;AAEAE"}

package/src/lib/declarations.server.d.ts

@@ -19,7 +19,8 @@
  * reads at boot, before any surface loads.
  *
  * The `rating` field type's validator (AGL-434), the marketplace's share of
- * a workspace erasure, and its kill switch as another plugin reads it.
+ * a workspace erasure, its kill switch as another plugin reads it, and the
+ * site starters "Create site" offers (AGL-4049).
  *
  * The validator: A dataset field of this type
  * can be written by a path that never loads the marketplace — a visitor's

package/src/lib/declarations.server.js

@@ -18,6 +18,7 @@
 import { registerCustomFieldType } from "@aglyn/aglyn/plugin-manager/custom-fields";
 import { listPluginOrgErasers, registerPluginOrgEraser } from "@aglyn/aglyn/plugin-manager/plugin-org-erasure";
 import { registerPluginRevocationReader } from "@aglyn/aglyn/plugin-manager/plugin-revocations";
+import { registerPluginSiteStarterSource } from "@aglyn/aglyn/plugin-manager/plugin-site-starters";
 import { BUNDLE_ID } from "./constants/bundle-common.js";
 import { RATING_FIELD } from "./model/rating-field.js";
 /**
@@ -25,7 +26,8 @@ import { RATING_FIELD } from "./model/rating-field.js";
  * reads at boot, before any surface loads.
  *
  * The `rating` field type's validator (AGL-434), the marketplace's share of
- * a workspace erasure, and its kill switch as another plugin reads it.
+ * a workspace erasure, its kill switch as another plugin reads it, and the
+ * site starters "Create site" offers (AGL-4049).
  *
  * The validator: A dataset field of this type
  * can be written by a path that never loads the marketplace — a visitor's
@@ -61,6 +63,21 @@ import { RATING_FIELD } from "./model/rating-field.js";
     }, {
         pluginId: BUNDLE_ID
     });
+    /*
+   * Site starters (AGL-4049): "Create site" searches the marketplace's
+   * `siteStarter` listings and creates a site from the one picked, through
+   * core's `core.site-starters` seam. Registering reads nothing; the Admin SDK
+   * arrives with the first search, not with the boot. The same plugin
+   * registering again replaces itself, so a re-run of these declarations is
+   * safe.
+   */ const starters = ()=>import("./server/site-starter-source.js").then((m)=>m.marketplaceSiteStarterSource);
+    registerPluginSiteStarterSource({
+        search: async (input, viewer)=>(await starters()).search(input, viewer),
+        resolve: async (choice, viewer)=>(await starters()).resolve(choice, viewer),
+        installed: async (choice, viewer, site)=>(await starters()).installed(choice, viewer, site)
+    }, {
+        pluginId: BUNDLE_ID
+    });
 }
 
 //# sourceMappingURL=declarations.server.js.map

package/src/lib/declarations.server.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../../../libs/plugins/marketplace/src/lib/declarations.server.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n// The registry from its own module, not the plugin-manager barrel: boot needs\n// the registry and nothing else.\nimport { registerCustomFieldType } from '@aglyn/aglyn/plugin-manager/custom-fields'\nimport {\n  listPluginOrgErasers,\n  registerPluginOrgEraser,\n} from '@aglyn/aglyn/plugin-manager/plugin-org-erasure'\nimport { registerPluginRevocationReader } from '@aglyn/aglyn/plugin-manager/plugin-revocations'\nimport { BUNDLE_ID } from './constants/bundle-common'\nimport { RATING_FIELD } from './model/rating-field'\n\n/**\n * The marketplace plugin's server declarations: the light registrations core\n * reads at boot, before any surface loads.\n *\n * The `rating` field type's validator (AGL-434), the marketplace's share of\n * a workspace erasure, and its kill switch as another plugin reads it.\n *\n * The validator: A dataset field of this type\n * can be written by a path that never loads the marketplace — a visitor's\n * form submission and an automation step, both in the tenant (AGL-2773) — so\n * the validator registers from here, which every app runs at boot, rather\n * than only from the console API surface. Pure data: no React, no Admin SDK.\n */\nexport function registerMarketplaceServerDeclarations(): void {\n  registerCustomFieldType(RATING_FIELD)\n  /*\n   * The organization's public marketplace identity, erased with it (AGL-1970).\n   * Declared REQUIRED in `plugins.config.json`: the profile carries a payout\n   * identifier on a world-readable document, so an erasure refuses to run\n   * without this eraser rather than report a workspace erased with it\n   * standing. From here, which every app and the erasure script run at boot;\n   * the Admin SDK arrives with the first erasure, not with the boot.\n   */\n  if (!listPluginOrgErasers().includes(BUNDLE_ID)) {\n    registerPluginOrgEraser(\n      async (request) => {\n        const { createPublisherIdentityEraser } = await import('./server/publisher-erasure')\n        return createPublisherIdentityEraser()(request)\n      },\n      { pluginId: BUNDLE_ID },\n    )\n  }\n  /*\n   * The kill switch (`plugin-revocations`, AGL-3080): the send path asks it\n   * before mailing a design installed from a listing, in whichever process\n   * sends. The Admin SDK arrives with the first read.\n   */\n  registerPluginRevocationReader(\n    {\n      async revocation(listingId) {\n        const { marketplaceRevocationReader } = await import('./server/revocation-reader')\n        return marketplaceRevocationReader.revocation(listingId)\n      },\n    },\n    { pluginId: BUNDLE_ID },\n  )\n}\n"],"names":["registerCustomFieldType","listPluginOrgErasers","registerPluginOrgEraser","registerPluginRevocationReader","BUNDLE_ID","RATING_FIELD","registerMarketplaceServerDeclarations","includes","request","createPublisherIdentityEraser","pluginId","revocation","listingId","marketplaceRevocationReader"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED,8EAA8E;AAC9E,iCAAiC;AACjC,SAASA,uBAAuB,QAAQ,4CAA2C;AACnF,SACEC,oBAAoB,EACpBC,uBAAuB,QAClB,iDAAgD;AACvD,SAASC,8BAA8B,QAAQ,iDAAgD;AAC/F,SAASC,SAAS,QAAQ,+BAA2B;AACrD,SAASC,YAAY,QAAQ,0BAAsB;AAEnD;;;;;;;;;;;;CAYC,GACD,OAAO,SAASC;IACdN,wBAAwBK;IACxB;;;;;;;GAOC,GACD,IAAI,CAACJ,uBAAuBM,QAAQ,CAACH,YAAY;QAC/CF,wBACE,OAAOM;YACL,MAAM,EAAEC,6BAA6B,EAAE,GAAG,MAAM,MAAM,CAAC;YACvD,OAAOA,gCAAgCD;QACzC,GACA;YAAEE,UAAUN;QAAU;IAE1B;IACA;;;;GAIC,GACDD,+BACE;QACE,MAAMQ,YAAWC,SAAS;YACxB,MAAM,EAAEC,2BAA2B,EAAE,GAAG,MAAM,MAAM,CAAC;YACrD,OAAOA,4BAA4BF,UAAU,CAACC;QAChD;IACF,GACA;QAAEF,UAAUN;IAAU;AAE1B"}
+{"version":3,"sources":["../../../../../../libs/plugins/marketplace/src/lib/declarations.server.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n// The registry from its own module, not the plugin-manager barrel: boot needs\n// the registry and nothing else.\nimport { registerCustomFieldType } from '@aglyn/aglyn/plugin-manager/custom-fields'\nimport {\n  listPluginOrgErasers,\n  registerPluginOrgEraser,\n} from '@aglyn/aglyn/plugin-manager/plugin-org-erasure'\nimport { registerPluginRevocationReader } from '@aglyn/aglyn/plugin-manager/plugin-revocations'\nimport { registerPluginSiteStarterSource } from '@aglyn/aglyn/plugin-manager/plugin-site-starters'\nimport { BUNDLE_ID } from './constants/bundle-common'\nimport { RATING_FIELD } from './model/rating-field'\n\n/**\n * The marketplace plugin's server declarations: the light registrations core\n * reads at boot, before any surface loads.\n *\n * The `rating` field type's validator (AGL-434), the marketplace's share of\n * a workspace erasure, its kill switch as another plugin reads it, and the\n * site starters \"Create site\" offers (AGL-4049).\n *\n * The validator: A dataset field of this type\n * can be written by a path that never loads the marketplace — a visitor's\n * form submission and an automation step, both in the tenant (AGL-2773) — so\n * the validator registers from here, which every app runs at boot, rather\n * than only from the console API surface. Pure data: no React, no Admin SDK.\n */\nexport function registerMarketplaceServerDeclarations(): void {\n  registerCustomFieldType(RATING_FIELD)\n  /*\n   * The organization's public marketplace identity, erased with it (AGL-1970).\n   * Declared REQUIRED in `plugins.config.json`: the profile carries a payout\n   * identifier on a world-readable document, so an erasure refuses to run\n   * without this eraser rather than report a workspace erased with it\n   * standing. From here, which every app and the erasure script run at boot;\n   * the Admin SDK arrives with the first erasure, not with the boot.\n   */\n  if (!listPluginOrgErasers().includes(BUNDLE_ID)) {\n    registerPluginOrgEraser(\n      async (request) => {\n        const { createPublisherIdentityEraser } = await import('./server/publisher-erasure')\n        return createPublisherIdentityEraser()(request)\n      },\n      { pluginId: BUNDLE_ID },\n    )\n  }\n  /*\n   * The kill switch (`plugin-revocations`, AGL-3080): the send path asks it\n   * before mailing a design installed from a listing, in whichever process\n   * sends. The Admin SDK arrives with the first read.\n   */\n  registerPluginRevocationReader(\n    {\n      async revocation(listingId) {\n        const { marketplaceRevocationReader } = await import('./server/revocation-reader')\n        return marketplaceRevocationReader.revocation(listingId)\n      },\n    },\n    { pluginId: BUNDLE_ID },\n  )\n  /*\n   * Site starters (AGL-4049): \"Create site\" searches the marketplace's\n   * `siteStarter` listings and creates a site from the one picked, through\n   * core's `core.site-starters` seam. Registering reads nothing; the Admin SDK\n   * arrives with the first search, not with the boot. The same plugin\n   * registering again replaces itself, so a re-run of these declarations is\n   * safe.\n   */\n  const starters = () => import('./server/site-starter-source').then((m) => m.marketplaceSiteStarterSource)\n  registerPluginSiteStarterSource(\n    {\n      search: async (input, viewer) => (await starters()).search(input, viewer),\n      resolve: async (choice, viewer) => (await starters()).resolve(choice, viewer),\n      installed: async (choice, viewer, site) => (await starters()).installed(choice, viewer, site),\n    },\n    { pluginId: BUNDLE_ID },\n  )\n}\n"],"names":["registerCustomFieldType","listPluginOrgErasers","registerPluginOrgEraser","registerPluginRevocationReader","registerPluginSiteStarterSource","BUNDLE_ID","RATING_FIELD","registerMarketplaceServerDeclarations","includes","request","createPublisherIdentityEraser","pluginId","revocation","listingId","marketplaceRevocationReader","starters","then","m","marketplaceSiteStarterSource","search","input","viewer","resolve","choice","installed","site"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED,8EAA8E;AAC9E,iCAAiC;AACjC,SAASA,uBAAuB,QAAQ,4CAA2C;AACnF,SACEC,oBAAoB,EACpBC,uBAAuB,QAClB,iDAAgD;AACvD,SAASC,8BAA8B,QAAQ,iDAAgD;AAC/F,SAASC,+BAA+B,QAAQ,mDAAkD;AAClG,SAASC,SAAS,QAAQ,+BAA2B;AACrD,SAASC,YAAY,QAAQ,0BAAsB;AAEnD;;;;;;;;;;;;;CAaC,GACD,OAAO,SAASC;IACdP,wBAAwBM;IACxB;;;;;;;GAOC,GACD,IAAI,CAACL,uBAAuBO,QAAQ,CAACH,YAAY;QAC/CH,wBACE,OAAOO;YACL,MAAM,EAAEC,6BAA6B,EAAE,GAAG,MAAM,MAAM,CAAC;YACvD,OAAOA,gCAAgCD;QACzC,GACA;YAAEE,UAAUN;QAAU;IAE1B;IACA;;;;GAIC,GACDF,+BACE;QACE,MAAMS,YAAWC,SAAS;YACxB,MAAM,EAAEC,2BAA2B,EAAE,GAAG,MAAM,MAAM,CAAC;YACrD,OAAOA,4BAA4BF,UAAU,CAACC;QAChD;IACF,GACA;QAAEF,UAAUN;IAAU;IAExB;;;;;;;GAOC,GACD,MAAMU,WAAW,IAAM,MAAM,CAAC,mCAAgCC,IAAI,CAAC,CAACC,IAAMA,EAAEC,4BAA4B;IACxGd,gCACE;QACEe,QAAQ,OAAOC,OAAOC,SAAW,AAAC,CAAA,MAAMN,UAAS,EAAGI,MAAM,CAACC,OAAOC;QAClEC,SAAS,OAAOC,QAAQF,SAAW,AAAC,CAAA,MAAMN,UAAS,EAAGO,OAAO,CAACC,QAAQF;QACtEG,WAAW,OAAOD,QAAQF,QAAQI,OAAS,AAAC,CAAA,MAAMV,UAAS,EAAGS,SAAS,CAACD,QAAQF,QAAQI;IAC1F,GACA;QAAEd,UAAUN;IAAU;AAE1B"}

package/src/lib/model/marketplace-site-permissions.d.ts

@@ -0,0 +1,26 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import type { HostAccessRole } from '@aglyn/aglyn/foundation/definitions/organization.types';
+import type { PluginOrgPermissionDeclaration } from '@aglyn/aglyn/plugin-manager/plugin-entitlements';
+/** The marketplace's keys whose preset is the site role. */
+export type MarketplaceSitePermission = 'marketplace.siteInstall' | 'marketplace.sitePublish';
+/** Who installed into or published from a site before these were keys: the site's Admin and Editor. */
+export declare const MARKETPLACE_SITE_ROLE_PRESET: Readonly<Record<HostAccessRole, boolean>>;
+/** The keys as the plugin declares them into the org permission catalog. */
+export declare const MARKETPLACE_SITE_PERMISSIONS: readonly PluginOrgPermissionDeclaration[];
+/** The refusal a door answers without one: names the permission, never a role. */
+export declare function marketplaceSitePermissionRefusal(key: MarketplaceSitePermission): string;

package/src/lib/model/marketplace-site-permissions.js

@@ -0,0 +1,62 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ import { _ as _extends } from "@swc/helpers/_/_extends";
+/** Who installed into or published from a site before these were keys: the site's Admin and Editor. */ export const MARKETPLACE_SITE_ROLE_PRESET = {
+    admin: true,
+    editor: true,
+    author: false,
+    viewer: false
+};
+/** The keys as the plugin declares them into the org permission catalog. */ export const MARKETPLACE_SITE_PERMISSIONS = [
+    {
+        key: 'marketplace.siteInstall',
+        label: 'Install marketplace items into a site',
+        description: 'Install templates, themes, layouts, components, email designs and plugins from the marketplace into a site (with "Install from the marketplace"). Follows the site role unless a role or member sets it.',
+        roleDefaults: {
+            owner: true,
+            admin: true,
+            editor: true,
+            viewer: false
+        },
+        hostRoleDefaults: _extends({}, MARKETPLACE_SITE_ROLE_PRESET),
+        group: 'marketplace',
+        groupLabel: 'Marketplace',
+        presetFromSiteRole: true
+    },
+    {
+        key: 'marketplace.sitePublish',
+        label: 'Publish a site’s items to the marketplace',
+        description: 'Publish a site’s templates, themes, layouts, components and email designs to the marketplace (with "Publish to the marketplace"). Follows the site role unless a role or member sets it.',
+        roleDefaults: {
+            owner: true,
+            admin: true,
+            editor: true,
+            viewer: false
+        },
+        hostRoleDefaults: _extends({}, MARKETPLACE_SITE_ROLE_PRESET),
+        group: 'marketplace',
+        groupLabel: 'Marketplace',
+        presetFromSiteRole: true
+    }
+];
+/** The refusal a door answers without one: names the permission, never a role. */ export function marketplaceSitePermissionRefusal(key) {
+    var _ref;
+    var _MARKETPLACE_SITE_PERMISSIONS_find;
+    const label = (_ref = (_MARKETPLACE_SITE_PERMISSIONS_find = MARKETPLACE_SITE_PERMISSIONS.find((entry)=>entry.key === key)) == null ? void 0 : _MARKETPLACE_SITE_PERMISSIONS_find.label) != null ? _ref : key;
+    return `Your role does not include "${label}" — ask an organization admin`;
+}
+
+//# sourceMappingURL=marketplace-site-permissions.js.map

package/src/lib/model/marketplace-site-permissions.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../libs/plugins/marketplace/src/lib/model/marketplace-site-permissions.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport type { HostAccessRole } from '@aglyn/aglyn/foundation/definitions/organization.types'\nimport type { PluginOrgPermissionDeclaration } from '@aglyn/aglyn/plugin-manager/plugin-entitlements'\n\n/*\n * THE MARKETPLACE ON A SITE (AGL-4047).\n *\n * Installing a listing into a site (a template, theme, layout, component,\n * email design or plugin) and publishing a site's own to the marketplace\n * asked two things: the workspace's key (`installPlugins`,\n * `publishToMarketplace`), and the member's role ON THE SITE, Admin or\n * Editor. The second is now a key per act whose preset is that site role\n * (`presetFromSiteRole`), so every member keeps exactly the access they had,\n * and a custom role, a member's own permissions or a site's toggle can grant\n * or refuse it. The workspace's key is still asked beside it.\n */\n\n/** The marketplace's keys whose preset is the site role. */\nexport type MarketplaceSitePermission = 'marketplace.siteInstall' | 'marketplace.sitePublish'\n\n/** Who installed into or published from a site before these were keys: the site's Admin and Editor. */\nexport const MARKETPLACE_SITE_ROLE_PRESET: Readonly<Record<HostAccessRole, boolean>> = {\n  admin: true,\n  editor: true,\n  author: false,\n  viewer: false,\n}\n\n/** The keys as the plugin declares them into the org permission catalog. */\nexport const MARKETPLACE_SITE_PERMISSIONS: readonly PluginOrgPermissionDeclaration[] = [\n  {\n    key: 'marketplace.siteInstall',\n    label: 'Install marketplace items into a site',\n    description:\n      'Install templates, themes, layouts, components, email designs and plugins from the marketplace into a site (with \"Install from the marketplace\"). Follows the site role unless a role or member sets it.',\n    roleDefaults: { owner: true, admin: true, editor: true, viewer: false },\n    hostRoleDefaults: { ...MARKETPLACE_SITE_ROLE_PRESET },\n    group: 'marketplace',\n    groupLabel: 'Marketplace',\n    presetFromSiteRole: true,\n  },\n  {\n    key: 'marketplace.sitePublish',\n    label: 'Publish a site’s items to the marketplace',\n    description:\n      'Publish a site’s templates, themes, layouts, components and email designs to the marketplace (with \"Publish to the marketplace\"). Follows the site role unless a role or member sets it.',\n    roleDefaults: { owner: true, admin: true, editor: true, viewer: false },\n    hostRoleDefaults: { ...MARKETPLACE_SITE_ROLE_PRESET },\n    group: 'marketplace',\n    groupLabel: 'Marketplace',\n    presetFromSiteRole: true,\n  },\n]\n\n/** The refusal a door answers without one: names the permission, never a role. */\nexport function marketplaceSitePermissionRefusal(key: MarketplaceSitePermission): string {\n  const label = MARKETPLACE_SITE_PERMISSIONS.find((entry) => entry.key === key)?.label ?? key\n  return `Your role does not include \"${label}\" — ask an organization admin`\n}\n"],"names":["MARKETPLACE_SITE_ROLE_PRESET","admin","editor","author","viewer","MARKETPLACE_SITE_PERMISSIONS","key","label","description","roleDefaults","owner","hostRoleDefaults","group","groupLabel","presetFromSiteRole","marketplaceSitePermissionRefusal","find","entry"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC;AAqBD,qGAAqG,GACrG,OAAO,MAAMA,+BAA0E;IACrFC,OAAO;IACPC,QAAQ;IACRC,QAAQ;IACRC,QAAQ;AACV,EAAC;AAED,0EAA0E,GAC1E,OAAO,MAAMC,+BAA0E;IACrF;QACEC,KAAK;QACLC,OAAO;QACPC,aACE;QACFC,cAAc;YAAEC,OAAO;YAAMT,OAAO;YAAMC,QAAQ;YAAME,QAAQ;QAAM;QACtEO,kBAAkB,aAAKX;QACvBY,OAAO;QACPC,YAAY;QACZC,oBAAoB;IACtB;IACA;QACER,KAAK;QACLC,OAAO;QACPC,aACE;QACFC,cAAc;YAAEC,OAAO;YAAMT,OAAO;YAAMC,QAAQ;YAAME,QAAQ;QAAM;QACtEO,kBAAkB,aAAKX;QACvBY,OAAO;QACPC,YAAY;QACZC,oBAAoB;IACtB;CACD,CAAA;AAED,gFAAgF,GAChF,OAAO,SAASC,iCAAiCT,GAA8B;;QAC/DD;IAAd,MAAME,iBAAQF,qCAAAA,6BAA6BW,IAAI,CAAC,CAACC,QAAUA,MAAMX,GAAG,KAAKA,yBAA3DD,mCAAiEE,KAAK,mBAAID;IACxF,OAAO,CAAC,4BAA4B,EAAEC,MAAM,6BAA6B,CAAC;AAC5E"}

package/src/lib/model/marketplace.d.ts

@@ -147,6 +147,30 @@ export interface MarketplaceListing {
     sourceComponentId?: string;
     /** Source site for a `template` listing. */
     sourceHostId?: string;
+    /**
+     * Source site for a `siteStarter` listing (AGL-4049): the one-listing-per-
+     * source key `publish-starter` looks up. Its own field, never `sourceHostId`:
+     * the template, layout and theme doors write that one and key on it with a
+     * `limit(1)`, so a shared key would cross a site's starter with its template.
+     */
+    sourceStarterHostId?: string;
+    /**
+     * The platform published it (AGL-4049). Server-owned and ordering only: the
+     * starter picker lists these first. No door, price or checkout branches on
+     * it; the seed and staff write it, a publish never does.
+     */
+    official?: boolean;
+    /**
+     * A site starter's facets (AGL-4049), stamped from its payload by
+     * `siteStarterFacetFields` so a starter search can match them. Server-owned:
+     * they describe the stored version, so a client rewrite would list a
+     * starter under a kind, theme or page count it does not create.
+     */
+    starterKind?: string | null;
+    starterBase?: string | null;
+    starterFonts?: string | null;
+    starterPages?: number;
+    starterMode?: 'base' | 'ai';
     /** Incremented by the install API; frozen from client writes. */
     installCount?: number;
     /**