@aglyn/plugins-marketplace 1.0.0 → 1.2.0

package/src/lib/server/admin-reviews.js

@@ -20,11 +20,12 @@ import { checkPluginBundle, isPluginRevoked, newestInstallableVersion, isStoredV
 import { emailUnverifiedResponse, findUserByUidAcrossPools, firebaseAdmin, isImpersonationSession, updateExisting } from "@aglyn/tenant-data-admin";
 import { invalidIdTokenResponse } from "@aglyn/tenant-data-admin/server/id-token-refusal";
 import { buildRoute, Route } from "@aglyn/aglyn/server";
-import { outstandingChecklistItems, PLUGIN_REVIEW_CHECKLIST } from "../model/plugin-review-checklist.js";
+import { outstandingChecklistItems, reviewChecklistFor } from "../model/plugin-review-checklist.js";
+import { SITE_STARTER_ARTIFACT_TYPE, siteStarterFacetsOf } from "@aglyn/aglyn/app-utils/site-starter";
 import { pluginRejectionCategory, rejectionHeadline, rejectionInputError } from "../model/plugin-rejection-categories.js";
 import { attestationsForBytes } from "../model/publisher-attestation.js";
 import { VERIFICATION_DECLINE_COOLDOWN_DAYS } from "../model/listing-verification.js";
-import { isPrivateListing } from "../model/listing-visibility.js";
+import { isPrivateListing, listingArtifactType } from "../model/listing-visibility.js";
 import { PUBLISHER_AGREEMENT_VERSION, publisherAgreementState } from "../model/publisher-agreement.js";
 import { FieldValue } from "firebase-admin/firestore";
 import { notifyOrgAdmins } from "@aglyn/tenant-data-admin";
@@ -32,7 +33,7 @@ import { refreshListingQueryFields } from "./listing-query-fields.js";
 import { nameSearchNormalizers } from "@aglyn/aglyn/app-utils/name-search";
 import { planListQuery } from "@aglyn/shared-ui-jsx/const/list-query-plan";
 import { applyListQuery } from "@aglyn/tenant-data-admin/server/list-query";
-import { REVIEW_QUEUE_QUERY, reviewQueueBase, reviewQueueStatusClauses } from "../model/listing-query.js";
+import { REVIEW_QUEUE_QUERY, reviewQueueBase, reviewQueueStatusClauses, STARTER_REVIEW_QUEUE_QUERY } from "../model/listing-query.js";
 /*
  * The publisher fan-out lives beside the usage-alert one in `_lib` rather
  * than here. Both are multi-recipient platform sends that have to read the
@@ -57,7 +58,18 @@ import { compareArtifactVersions } from "../model/update-state.js";
  * Realm trust stays a SEPARATE, super-staff grant (`admin-trust.ts`) —
  * listing/verifying here never signs anything. Every action lands in
  * adminAudit.
- */ /** Every id the checklist route will accept (AGL-963). */ const REQUIRED_OR_OPTIONAL = new Set(PLUGIN_REVIEW_CHECKLIST.map((item)=>item.id));
+ */ /**
+ * What staff may do to a site starter (AGL-4049): List it or Reject it, tick
+ * its checklist, take it down or restore it. Everything else this route
+ * does is about code — versions approved byte for byte, realm trust, a kill
+ * switch, the Verified badge — and has nothing to act on in a starter.
+ */ const STARTER_ACTIONS = new Set([
+    'list',
+    'reject',
+    'checklist',
+    'hide',
+    'unhide'
+]);
 const ACTIONS = {
     'start-review': 'in_review',
     list: 'listed',
@@ -153,6 +165,160 @@ const ACTIONS = {
             return isPrivate ? `${name} passed review. It is a private plugin, so it stays out ` + `of the marketplace and only your workspace can install it.${offer}` : `${name} passed review and is now listed in the marketplace.${offer}`;
     }
 }
+/**
+ * The body of a site starter's verdict (AGL-4049), for the console
+ * notification and the email. A starter is copied into each site created
+ * from it, so neither verdict reaches a site that already exists, and the
+ * copy never borrows a plugin's installs and versions on offer.
+ */ function starterVerdictBody(input) {
+    const { name } = input;
+    if (input.action === 'list') {
+        return `${name} passed review and is now listed in the marketplace, where ` + 'people creating a site can choose it.';
+    }
+    const why = rejectionReasonText(input.category, input.reason);
+    return [
+        `${pluginAndVersion(name, input.version)} was rejected${why ? `: ${why}` : '.'}`,
+        'It is not offered to anyone while it is rejected. Sites already ' + 'created from it keep everything they have. To send it back for ' + 'review, publish it again from its site.'
+    ].join('\n\n');
+}
+const isRecord = (value)=>!!value && typeof value === 'object' && !Array.isArray(value);
+/** A Firestore timestamp as JSON, or `null`. */ const isoOf = (value)=>{
+    var _ref;
+    var _value_toDate, _value_toDate1;
+    return (_ref = value == null ? void 0 : (_value_toDate1 = value.toDate) == null ? void 0 : (_value_toDate = _value_toDate1.call(value)) == null ? void 0 : _value_toDate.toISOString()) != null ? _ref : null;
+};
+/** Which terms a publisher org is under (AGL-1077), as the detail pages say it. */ async function publisherAgreementOf(firestore, publisherId) {
+    var _ref, _ref1;
+    var _acceptance_acceptedAt_toDate, _acceptance_acceptedAt_toDate1, _acceptance_acceptedAt;
+    const profile = publisherId ? await firestore.collection('publisherProfiles').doc(publisherId).get() : null;
+    const acceptance = profile == null ? void 0 : profile.get('publisherAgreement');
+    return {
+        version: (_ref = acceptance == null ? void 0 : acceptance.version) != null ? _ref : null,
+        acceptedAt: (_ref1 = acceptance == null ? void 0 : (_acceptance_acceptedAt = acceptance.acceptedAt) == null ? void 0 : (_acceptance_acceptedAt_toDate1 = _acceptance_acceptedAt.toDate) == null ? void 0 : (_acceptance_acceptedAt_toDate = _acceptance_acceptedAt_toDate1.call(_acceptance_acceptedAt)) == null ? void 0 : _acceptance_acceptedAt_toDate.toISOString()) != null ? _ref1 : null,
+        required: PUBLISHER_AGREEMENT_VERSION,
+        state: publisherAgreementState(acceptance)
+    };
+}
+/**
+ * One site starter in full, for its review page (AGL-4049): what a site
+ * created from it gets — every page with whether it is published, the layout
+ * they sit in, the theme in its shape, the facets a search finds it by, its
+ * picture and price — then who publishes it, the site it was published from,
+ * its versions, and the starter checklist ticked against the version under
+ * review. That version is the one asked for, else the newest: a re-publish
+ * is a new version, so a listed starter's newest bytes are always the ones a
+ * reviewer reads first.
+ */ async function starterDetail(firestore, listingId, listing, requestedVersion) {
+    var _listing_latestVersion, _ref, _starter_layout_displayName, _storedTheme_base, _listing_profileId, _listing_sourceStarterHostId, _listing_displayName, _listing_description, _listing_priceUsd, _listing_reviewStatus, _listing_rejectionReason, _listing_rejectionCategory, _listing_hiddenReason, _ref1, _ref2, _ref3;
+    var _versions_find, _storedTheme_brand, _storedTheme_brand1;
+    const listingRef = firestore.collection('marketplaceListings').doc(listingId);
+    const versionsSnapshot = await listingRef.collection('versions').orderBy('publishedAt', 'desc').limit(25).get();
+    const versions = versionsSnapshot.docs.map((doc)=>{
+        var _doc_data, _data_reviewChecklist;
+        const data = (_doc_data = doc.data()) != null ? _doc_data : {};
+        const starter = isRecord(data['starter']) ? data['starter'] : {};
+        return {
+            version: String(doc.id),
+            publishedAt: isoOf(data['publishedAt']),
+            pages: Array.isArray(starter['screens']) ? starter['screens'].length : 0,
+            starter,
+            reviewChecklist: (_data_reviewChecklist = data['reviewChecklist']) != null ? _data_reviewChecklist : null
+        };
+    })// Numbered by the publish, so newest first however they were read.
+    .sort((a, b)=>Number(b.version) - Number(a.version));
+    const latestVersion = String((_listing_latestVersion = listing['latestVersion']) != null ? _listing_latestVersion : '');
+    const reviewVersion = requestedVersion && ((_versions_find = versions.find((entry)=>entry.version === requestedVersion)) == null ? void 0 : _versions_find.version) || latestVersion;
+    const review = versions.find((entry)=>entry.version === reviewVersion);
+    const starter = (_ref = review == null ? void 0 : review.starter) != null ? _ref : {};
+    const screens = Array.isArray(starter['screens']) ? starter['screens'] : [];
+    const pages = screens.filter(isRecord).map((screen)=>{
+        var _screen_displayName;
+        const slug = typeof screen['slug'] === 'string' && screen['slug'] ? screen['slug'] : null;
+        return {
+            name: String((_screen_displayName = screen['displayName']) != null ? _screen_displayName : 'Page'),
+            slug,
+            // A page with no route is unpublished in the site it creates.
+            published: Boolean(slug) && screen['published'] !== false
+        };
+    });
+    const layout = isRecord(starter['layout']) ? {
+        name: String((_starter_layout_displayName = starter['layout']['displayName']) != null ? _starter_layout_displayName : 'Site header and footer')
+    } : null;
+    const storedTheme = isRecord(starter['theme']) ? starter['theme'] : {};
+    const theme = storedTheme['kind'] === 'builtin' ? {
+        kind: 'builtin',
+        base: String((_storedTheme_base = storedTheme['base']) != null ? _storedTheme_base : ''),
+        fonts: typeof storedTheme['fonts'] === 'string' ? storedTheme['fonts'] : null,
+        brand: _extends({
+            light: isRecord((_storedTheme_brand = storedTheme['brand']) == null ? void 0 : _storedTheme_brand.light) ? storedTheme['brand'].light : {}
+        }, isRecord((_storedTheme_brand1 = storedTheme['brand']) == null ? void 0 : _storedTheme_brand1.dark) ? {
+            dark: storedTheme['brand'].dark
+        } : {})
+    } : storedTheme['kind'] === 'full' ? {
+        kind: 'full'
+    } : null;
+    const publisherId = String((_listing_profileId = listing['profileId']) != null ? _listing_profileId : '');
+    const publisher = publisherId ? await firestore.collection('orgs').doc(publisherId).get() : null;
+    // The site the pages were captured from, where a reviewer reads them.
+    const sourceHostId = String((_listing_sourceStarterHostId = listing['sourceStarterHostId']) != null ? _listing_sourceStarterHostId : '');
+    const source = sourceHostId ? await firestore.collection('hosts').doc(sourceHostId).get() : null;
+    const textOf = (value)=>typeof value === 'string' && value ? value : null;
+    return Response.json({
+        artifactType: SITE_STARTER_ARTIFACT_TYPE,
+        listingId,
+        displayName: (_listing_displayName = listing['displayName']) != null ? _listing_displayName : listingId,
+        description: (_listing_description = listing['description']) != null ? _listing_description : '',
+        category: textOf(listing['category']),
+        previewImageUrl: textOf(listing['previewImageUrl']),
+        priceUsd: Number((_listing_priceUsd = listing['priceUsd']) != null ? _listing_priceUsd : 0),
+        official: listing['official'] === true,
+        reviewStatus: (_listing_reviewStatus = listing['reviewStatus']) != null ? _listing_reviewStatus : 'submitted',
+        rejectionReason: (_listing_rejectionReason = listing['rejectionReason']) != null ? _listing_rejectionReason : '',
+        rejectionCategory: (_listing_rejectionCategory = listing['rejectionCategory']) != null ? _listing_rejectionCategory : '',
+        // The version the last List or Reject was given on, so a listed
+        // starter published again since says so.
+        reviewedVersion: listing['reviewedVersion'] != null ? String(listing['reviewedVersion']) : null,
+        hidden: Boolean(listing['hiddenAt']),
+        hiddenReason: String((_listing_hiddenReason = listing['hiddenReason']) != null ? _listing_hiddenReason : ''),
+        unpublished: Boolean(listing['deletedAt']),
+        createdAt: isoOf(listing['createdAt']),
+        latestVersion,
+        reviewVersion,
+        mode: starter['mode'] === 'ai' ? 'ai' : 'base',
+        facets: siteStarterFacetsOf(listing),
+        pages,
+        layout,
+        theme,
+        publisherId,
+        publisherName: (_ref1 = publisher == null ? void 0 : publisher.get('name')) != null ? _ref1 : publisherId,
+        publisherSlug: (_ref2 = publisher == null ? void 0 : publisher.get('slug')) != null ? _ref2 : null,
+        publisherAgreement: await publisherAgreementOf(firestore, publisherId),
+        sourceSite: sourceHostId ? {
+            hostId: sourceHostId,
+            name: textOf(source == null ? void 0 : source.get('displayName')),
+            subdomain: textOf(source == null ? void 0 : source.get('subdomain')),
+            cname: textOf(source == null ? void 0 : source.get('cname'))
+        } : null,
+        versions: versions.map(({ version, publishedAt, pages: count })=>({
+                version,
+                publishedAt,
+                pages: count
+            })),
+        // Ticks made on another version do not count: a re-publish starts clean.
+        checklist: Object.fromEntries(Object.entries((_ref3 = review == null ? void 0 : review.reviewChecklist) != null ? _ref3 : {}).filter(([, entry])=>(entry == null ? void 0 : entry.version) === reviewVersion).map(([id, entry])=>{
+            var _entry_by;
+            return [
+                id,
+                {
+                    by: (_entry_by = entry.by) != null ? _entry_by : null
+                }
+            ];
+        })),
+        checklistOutstanding: outstandingChecklistItems(review == null ? void 0 : review.reviewChecklist, reviewVersion, SITE_STARTER_ARTIFACT_TYPE)
+    }, {
+        status: 200
+    });
+}
 /**
  * One listing in full, for the detail page (AGL-959). The index deals in
  * rows; everything a reviewer needs to actually decide — manifest,
@@ -171,6 +337,11 @@ const ACTIONS = {
             status: 404
         });
     }
+    // A site starter is pages and a theme, not code (AGL-4049): its page reads
+    // what a site created from it gets, and none of the manifest below.
+    if (listingArtifactType(listing) === SITE_STARTER_ARTIFACT_TYPE) {
+        return starterDetail(firestore, listingId, listing, requestedVersion);
+    }
     const versionsSnapshot = await listingRef.collection('pluginVersions').orderBy('publishedAt', 'desc').limit(25).get();
     const versions = versionsSnapshot.docs.map((doc)=>{
         var _doc_get, _doc_get1, _doc_get2, _doc_get3, _readPluginContributions, _doc_get4, _ref, _doc_get5, _doc_get6, _doc_get7, _doc_get8, _doc_get9, _doc_get10, _doc_get11;
@@ -314,6 +485,7 @@ const ACTIONS = {
         }
     }
     return Response.json({
+        artifactType: listingArtifactType(listing),
         listingId,
         displayName: (_listing_displayName = listing.displayName) != null ? _listing_displayName : listingId,
         description: (_listing_description = listing.description) != null ? _listing_description : '',
@@ -466,7 +638,7 @@ const queryParam = (value)=>{
 /**
  * The staff review index (AGL-961), every section on its query (AGL-3321).
  *
- * Three sections, each its own query over live plugin listings:
+ * Four sections, each its own query; three over live plugin listings:
  *
  *   - Awaiting review: the newest bytes have no approval. Read from the
  *     listing's `latestVersionReviewState` summary, whose `pending` and
@@ -477,6 +649,9 @@ const queryParam = (value)=>{
  *   - Listed: `reviewStatus` listed or verified.
  *   - Verification requested: the publisher's standing ask (AGL-1217).
  *
+ * and one over live site starter listings (AGL-4049), those waiting for
+ * review — or, under a Status, those it names — newest first.
+ *
  * The Status select and the search (`?status=`, `?q=`) are clauses on every
  * section's query, planned once by `REVIEW_QUEUE_QUERY`; search reads the
  * listing name's `nameTokens`. It used to be matched over one window of a
@@ -494,13 +669,15 @@ const queryParam = (value)=>{
     const more = {
         queue: false,
         listed: false,
-        verification: false
+        verification: false,
+        starters: false
     };
     const read = async (section)=>{
         const base = reviewQueueBase(section, clauses);
         // A Status the section cannot hold: empty by definition, never queried.
         if (!base) return [];
-        const plan = planListQuery(REVIEW_QUEUE_QUERY, {
+        const plan = planListQuery(// Site starters read newest first; the plugin sections in id order.
+        section === 'starters' ? STARTER_REVIEW_QUEUE_QUERY : REVIEW_QUEUE_QUERY, {
             clauses,
             search: words,
             base
@@ -511,10 +688,11 @@ const queryParam = (value)=>{
         more[section] = snapshot.docs.length > pageLimit;
         return snapshot.docs.slice(0, pageLimit);
     };
-    const [queueDocs, listedDocs, verificationDocs] = await Promise.all([
+    const [queueDocs, listedDocs, verificationDocs, starterDocs] = await Promise.all([
         read('queue'),
         read('listed'),
-        read('verification')
+        read('verification'),
+        read('starters')
     ]);
     // Rows only (AGL-961). This used to DOWNLOAD every queued bundle to re-run
     // the verifier, so the index paid a Storage round trip per submission
@@ -584,13 +762,36 @@ const queryParam = (value)=>{
             versions
         };
     }));
+    // Site starters (AGL-4049), a section of their own: a starter is not code,
+    // so a reviewer scans it by its pages, price and when it was submitted
+    // rather than a version's review state, and every row is the listing alone.
+    const starters = starterDocs.map((doc)=>{
+        var _listing_displayName, _listing_reviewStatus, _listing_priceUsd, _ref, _listing_screenCount, _listing_latestVersion;
+        const listing = doc.data();
+        return {
+            listingId: doc.id,
+            displayName: (_listing_displayName = listing.displayName) != null ? _listing_displayName : doc.id,
+            profileId: listing.profileId,
+            reviewStatus: (_listing_reviewStatus = listing.reviewStatus) != null ? _listing_reviewStatus : 'submitted',
+            priceUsd: Number((_listing_priceUsd = listing.priceUsd) != null ? _listing_priceUsd : 0),
+            pages: Number((_ref = (_listing_screenCount = listing.screenCount) != null ? _listing_screenCount : listing.starterPages) != null ? _ref : 0),
+            version: String((_listing_latestVersion = listing.latestVersion) != null ? _listing_latestVersion : ''),
+            // The version the last verdict was given on, so a listed starter
+            // published again since can say so.
+            reviewedVersion: listing.reviewedVersion != null ? String(listing.reviewedVersion) : null,
+            submittedAt: isoOf(listing.createdAt),
+            hidden: Boolean(listing.hiddenAt),
+            official: listing.official === true
+        };
+    });
     // Publisher names for scanning (AGL-961) — a listing id tells a reviewer
     // nothing. One batched read for every section.
     const publisherIds = [
         ...new Set([
             ...queue,
             ...listed,
-            ...verificationRequests
+            ...verificationRequests,
+            ...starters
         ].map((entry)=>{
             var _entry_profileId;
             return String((_entry_profileId = entry.profileId) != null ? _entry_profileId : '');
@@ -609,6 +810,7 @@ const queryParam = (value)=>{
         listed,
         publishers,
         verificationRequests,
+        starters,
         refused,
         notices,
         more,
@@ -629,7 +831,7 @@ async function handler(request) {
         status: 401
     });
     try {
-        var _ref, _ref1, _ref2, _ref3;
+        var _ref, _ref1, _ref2, _ref3, _listing_latestVersion;
         var _listing_verificationRequest;
         const decoded = await firebaseAdmin.app().auth().verifyIdToken(idToken);
         if (!decoded.email_verified && !isImpersonationSession(decoded)) {
@@ -661,6 +863,18 @@ async function handler(request) {
         }
         const listingId = String((_ref = body == null ? void 0 : body.listingId) != null ? _ref : '');
         const action = String((_ref1 = body == null ? void 0 : body.action) != null ? _ref1 : '');
+        // A site starter takes only what applies to it (AGL-4049). Read here, ahead
+        // of every branch, so a plugin action can never write a plugin's state —
+        // a version verdict, a kill switch, a badge — onto a starter.
+        const reviewed = listingId ? (await firestore.collection('marketplaceListings').doc(listingId).get()).data() : undefined;
+        const isStarter = Boolean(reviewed) && listingArtifactType(reviewed != null ? reviewed : {}) === SITE_STARTER_ARTIFACT_TYPE;
+        if (isStarter && !STARTER_ACTIONS.has(action)) {
+            return Response.json({
+                error: 'A site starter is listed or rejected, or taken down; that action is for plugins'
+            }, {
+                status: 400
+            });
+        }
         // Takedown (AGL-658) is separate from the review verdict: it applies to
         // EVERY artifact type, not just plugins, and it must not overwrite a
         // plugin's `reviewStatus` — a hidden plugin that later gets un-hidden
@@ -844,18 +1058,24 @@ async function handler(request) {
         // Review checklist (AGL-963). Ticks are per {version, sha256} and carry
         // who + when, so "verified" is a recorded act rather than a click.
         if (action === 'checklist') {
-            var _ref6, _ref7, _versionSnapshot_get, _versionSnapshot_get1;
+            var _ref6, _ref7, _versionSnapshot_get;
             const version = String((_ref6 = body == null ? void 0 : body.version) != null ? _ref6 : '');
             const itemId = String((_ref7 = body == null ? void 0 : body.itemId) != null ? _ref7 : '');
             const checked = (body == null ? void 0 : body.checked) !== false;
-            if (!listingId || !version || !REQUIRED_OR_OPTIONAL.has(itemId)) {
+            // Each type's own items (AGL-4049): a plugin item means nothing on a
+            // starter's pages, and a starter item nothing on a bundle.
+            const items = reviewChecklistFor(isStarter ? SITE_STARTER_ARTIFACT_TYPE : 'plugin');
+            if (!listingId || !version || !items.some((item)=>item.id === itemId)) {
                 return Response.json({
                     error: 'Unknown checklist item'
                 }, {
                     status: 400
                 });
             }
-            const versionRef = firestore.collection('marketplaceListings').doc(listingId).collection('pluginVersions').doc(version);
+            // A starter's versions are `versions/{n}`, each written once by the
+            // publish that made it; a plugin's are `pluginVersions/{semver}`.
+            const versionsCollection = isStarter ? 'versions' : 'pluginVersions';
+            const versionRef = firestore.collection('marketplaceListings').doc(listingId).collection(versionsCollection).doc(version);
             const versionSnapshot = await versionRef.get();
             if (!versionSnapshot.exists) {
                 return Response.json({
@@ -864,14 +1084,19 @@ async function handler(request) {
                     status: 404
                 });
             }
+            // Pins the tick to what it was made against: a plugin's bytes, or the
+            // starter version, which a re-publish replaces with the next one.
+            const pin = isStarter ? {
+                version
+            } : {
+                sha256: String((_versionSnapshot_get = versionSnapshot.get('sha256')) != null ? _versionSnapshot_get : '')
+            };
             await versionRef.set({
                 reviewChecklist: {
-                    [itemId]: checked ? {
+                    [itemId]: checked ? _extends({
                         by: decoded.uid,
-                        at: FieldValue.serverTimestamp(),
-                        // Pins the tick to the bytes it was made against.
-                        sha256: String((_versionSnapshot_get = versionSnapshot.get('sha256')) != null ? _versionSnapshot_get : '')
-                    } : FieldValue.delete()
+                        at: FieldValue.serverTimestamp()
+                    }, pin) : FieldValue.delete()
                 }
             }, {
                 merge: true
@@ -882,12 +1107,11 @@ async function handler(request) {
             await addAdminAudit(firestore, {
                 actorUid: decoded.uid,
                 action: `plugins.review.checklist.${checked ? 'check' : 'uncheck'}`,
-                target: `marketplaceListings/${listingId}/pluginVersions/${version}`,
-                after: {
+                target: `marketplaceListings/${listingId}/${versionsCollection}/${version}`,
+                after: _extends({
                     itemId,
-                    checked,
-                    sha256: String((_versionSnapshot_get1 = versionSnapshot.get('sha256')) != null ? _versionSnapshot_get1 : '')
-                },
+                    checked
+                }, pin),
                 at: FieldValue.serverTimestamp()
             });
             return Response.json({
@@ -903,7 +1127,7 @@ async function handler(request) {
         // approved one. Listing-level list/verify still exist, but they can no
         // longer ship code past review on their own.
         if (action === 'approve-version' || action === 'reject-version') {
-            var _ref8, _versionSnapshot_get2, _ref9, _ref10, _listing_latestVersion, _listing_reviewStatus, _listing_latestApprovedVersion, _listing_latestApprovedVersion1, _versionSnapshot_get3;
+            var _ref8, _versionSnapshot_get1, _ref9, _ref10, _listing_latestVersion1, _listing_reviewStatus, _listing_latestApprovedVersion, _listing_latestApprovedVersion1, _versionSnapshot_get2;
             const version = String((_ref8 = body == null ? void 0 : body.version) != null ? _ref8 : '');
             const listingRef = firestore.collection('marketplaceListings').doc(listingId);
             const versionRef = listingRef.collection('pluginVersions').doc(version);
@@ -945,7 +1169,7 @@ async function handler(request) {
                 });
             }
             const listing = listingSnapshot.data();
-            const sha256 = String((_versionSnapshot_get2 = versionSnapshot.get('sha256')) != null ? _versionSnapshot_get2 : '');
+            const sha256 = String((_versionSnapshot_get1 = versionSnapshot.get('sha256')) != null ? _versionSnapshot_get1 : '');
             const approving = action === 'approve-version';
             if (approving) {
                 const outstanding = outstandingChecklistItems(versionSnapshot.get('reviewChecklist'), sha256);
@@ -1029,7 +1253,7 @@ async function handler(request) {
             // but ONLY when it is the newest version. Approving an old version
             // must not let the listing claim its newest bytes were reviewed —
             // which is the exact shape of the bug this mirror exists to fix.
-            if (String((_listing_latestVersion = listing.latestVersion) != null ? _listing_latestVersion : '') === version) {
+            if (String((_listing_latestVersion1 = listing.latestVersion) != null ? _listing_latestVersion1 : '') === version) {
                 await updateExisting(listingRef, {
                     latestVersionReviewState: approving ? 'approved' : 'rejected'
                 });
@@ -1093,7 +1317,7 @@ async function handler(request) {
             // {version, sha256} and only asks whether it is revoked — so both
             // sides have to be told, and the reviewer needs the number before
             // deciding whether to reach for the kill switch.
-            const liveInstalls = Number((_versionSnapshot_get3 = versionSnapshot.get('activeInstalls')) != null ? _versionSnapshot_get3 : 0);
+            const liveInstalls = Number((_versionSnapshot_get2 = versionSnapshot.get('activeInstalls')) != null ? _versionSnapshot_get2 : 0);
             const stranded = !approving && liveInstalls > 0;
             if (listing.profileId) {
                 var _listing_displayName, _listing_displayName1;
@@ -1155,7 +1379,7 @@ async function handler(request) {
         // which it now is, below. It was not before, and the gap is what made
         // keeping the badge unsafe rather than merely debatable.
         if (action === 'revoke-version' || action === 'unrevoke-version') {
-            var _ref11, _data, _listing_latestVersion1, _ref12;
+            var _ref11, _data, _listing_latestVersion2, _ref12;
             const version = String((_ref11 = body == null ? void 0 : body.version) != null ? _ref11 : '');
             if (!listingId || !version) {
                 return Response.json({
@@ -1210,15 +1434,15 @@ async function handler(request) {
             // describe. Revoking an old version says nothing about what is on offer.
             const isLatest = revocationWithdrawsReviewedClaim({
                 revokedVersion: version,
-                latestVersion: String((_listing_latestVersion1 = listing['latestVersion']) != null ? _listing_latestVersion1 : '')
+                latestVersion: String((_listing_latestVersion2 = listing['latestVersion']) != null ? _listing_latestVersion2 : '')
             });
             if (isLatest) {
-                var _versionSnapshot_get4;
+                var _versionSnapshot_get3;
                 const versionSnapshot = await listingRef.collection('pluginVersions').doc(version).get();
                 await listingRef.set({
                     latestVersionReviewState: revoking ? REVOKED_VERSION_REVIEW_STATE : // says, rather than assuming `approved` — un-revoking a version
                     // that was never approved must not promote it.
-                    String((_versionSnapshot_get4 = versionSnapshot.get('reviewState')) != null ? _versionSnapshot_get4 : 'pending')
+                    String((_versionSnapshot_get3 = versionSnapshot.get('reviewState')) != null ? _versionSnapshot_get3 : 'pending')
                 }, {
                     merge: true
                 });
@@ -1372,7 +1596,8 @@ async function handler(request) {
         const reason = String((_ref2 = body == null ? void 0 : body.reason) != null ? _ref2 : '').slice(0, 500);
         const category = String((_ref3 = body == null ? void 0 : body.category) != null ? _ref3 : '');
         if (action === 'reject') {
-            const invalid = rejectionInputError(category, reason);
+            // A starter is rejected for a starter's reasons (AGL-4049).
+            const invalid = rejectionInputError(category, reason, isStarter ? SITE_STARTER_ARTIFACT_TYPE : 'plugin');
             if (invalid) return Response.json({
                 error: invalid
             }, {
@@ -1386,6 +1611,9 @@ async function handler(request) {
         }, {
             status: 404
         });
+        // The version a starter's verdict is given on: its newest, the one a
+        // reviewer read (AGL-4049).
+        const starterVersion = isStarter ? String((_listing_latestVersion = listing.latestVersion) != null ? _listing_latestVersion : '') : '';
         // Both gates that expose a plugin to customers require a completed
         // checklist (AGL-963).
         //
@@ -1398,11 +1626,15 @@ async function handler(request) {
         // `start-review` and `reject` stay ungated on purpose: a reviewer must
         // be able to throw something out without first ticking eight boxes
         // about a bundle they have already decided against.
+        //
+        // A site starter's List waits for the starter checklist, ticked against
+        // its newest version (AGL-4049): listing it puts it in front of everyone
+        // creating a site.
         if (action === 'verify' || action === 'list') {
-            var _listing_latestVersion2, _versionSnapshot_get5;
-            const version = String((_listing_latestVersion2 = listing.latestVersion) != null ? _listing_latestVersion2 : '');
-            const versionSnapshot = await listingRef.collection('pluginVersions').doc(version).get();
-            const outstanding = outstandingChecklistItems(versionSnapshot.get('reviewChecklist'), String((_versionSnapshot_get5 = versionSnapshot.get('sha256')) != null ? _versionSnapshot_get5 : ''));
+            var _listing_latestVersion3, _versionSnapshot_get4;
+            const version = String((_listing_latestVersion3 = listing.latestVersion) != null ? _listing_latestVersion3 : '');
+            const versionSnapshot = await listingRef.collection(isStarter ? 'versions' : 'pluginVersions').doc(version).get();
+            const outstanding = isStarter ? outstandingChecklistItems(versionSnapshot.get('reviewChecklist'), version, SITE_STARTER_ARTIFACT_TYPE) : outstandingChecklistItems(versionSnapshot.get('reviewChecklist'), String((_versionSnapshot_get4 = versionSnapshot.get('sha256')) != null ? _versionSnapshot_get4 : ''));
             if (outstanding.length) {
                 return Response.json({
                     error: `Review checklist incomplete — ${outstanding.length} required item(s) outstanding`,
@@ -1428,7 +1660,9 @@ async function handler(request) {
         } : {
             rejectionReason: FieldValue.delete(),
             rejectionCategory: FieldValue.delete()
-        }), {
+        }, isStarter ? {
+            reviewedVersion: starterVersion
+        } : {}), {
             merge: true
         });
         // The verdict decides who browse shows the listing to (AGL-3321).
@@ -1447,15 +1681,22 @@ async function handler(request) {
             const publisherOrgId = String((_listing_profileId1 = listing.profileId) != null ? _listing_profileId1 : '');
             const publisherSlug = publisherOrgId ? (await firestore.collection('orgs').doc(publisherOrgId).get()).get('slug') : undefined;
             if (publisherOrgId) {
-                var _listing_displayName4, _listing_latestVersion3, _listing_latestApprovedVersion2, _listing_displayName5;
+                var _listing_displayName4, _listing_displayName5, _listing_latestVersion4, _listing_latestApprovedVersion2, _listing_displayName6, _listing_displayName7;
                 const isPrivate = isPrivateListing(listing);
                 // One body for the feed and the email (AGL-3432): it names the
                 // plugin and what happened to it, and a rejection carries its
-                // category and what to fix (AGL-977).
-                const verdict = listingVerdictBody({
-                    action,
+                // category and what to fix (AGL-977). A starter's says so as a
+                // starter (AGL-4049); its verdicts are only List and Reject.
+                const verdict = isStarter ? starterVerdictBody({
+                    action: action === 'reject' ? 'reject' : 'list',
                     name: String((_listing_displayName4 = listing.displayName) != null ? _listing_displayName4 : ''),
-                    version: String((_listing_latestVersion3 = listing.latestVersion) != null ? _listing_latestVersion3 : ''),
+                    version: starterVersion,
+                    category,
+                    reason
+                }) : listingVerdictBody({
+                    action,
+                    name: String((_listing_displayName5 = listing.displayName) != null ? _listing_displayName5 : ''),
+                    version: String((_listing_latestVersion4 = listing.latestVersion) != null ? _listing_latestVersion4 : ''),
                     offeredVersion: String((_listing_latestApprovedVersion2 = listing.latestApprovedVersion) != null ? _listing_latestApprovedVersion2 : ''),
                     isPrivate,
                     category,
@@ -1472,8 +1713,13 @@ async function handler(request) {
                     }) : '/'
                 }).catch(()=>undefined);
                 await emailPublisher(publisherOrgId, action === 'reject' ? `${listing.displayName} was rejected — ${rejectionHeadline(category, reason)}` : action === 'delist' ? isPrivate ? `${listing.displayName} is back in review` : `${listing.displayName} was removed from the marketplace` : `${listing.displayName} is now ${nextStatus}`, verdict, {
-                    frame: {
-                        plugin: String((_listing_displayName5 = listing.displayName) != null ? _listing_displayName5 : ''),
+                    frame: isStarter ? {
+                        noun: 'Site starter',
+                        plugin: String((_listing_displayName6 = listing.displayName) != null ? _listing_displayName6 : ''),
+                        version: starterVersion,
+                        outcome: action === 'reject' ? 'Rejected' : 'Listed'
+                    } : {
+                        plugin: String((_listing_displayName7 = listing.displayName) != null ? _listing_displayName7 : ''),
                         outcome: action === 'reject' ? 'Rejected' : action === 'delist' ? isPrivate ? 'Back in review' : 'Removed from the marketplace' : `Now ${nextStatus}`
                     }
                 });
@@ -1487,6 +1733,9 @@ async function handler(request) {
                 reviewStatus: nextStatus
             }, reason ? {
                 reason
+            } : {}, isStarter ? {
+                artifactType: SITE_STARTER_ARTIFACT_TYPE,
+                version: starterVersion
             } : {}),
             at: FieldValue.serverTimestamp()
         });