@aglyn/plugins-marketplace 1.14.0 → 1.15.1

package/src/lib/components/site-plugin-connections-card.component.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../libs/plugins/marketplace/src/lib/components/site-plugin-connections-card.component.tsx"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n'use client'\n\nimport { pluginDocsHelp } from '@aglyn/aglyn/app-utils/docs-help'\nimport { CardDisplay, useConfirmationContext } from '@aglyn/shared-ui-jsx'\nimport { BlockedControl } from '@aglyn/shared-ui-jsx/components/blocked-control.component'\nimport { PlanUpsellNotice } from '@aglyn/shared-ui-jsx/components/plan-upsell-notice.component'\nimport { PrerequisiteNotice } from '@aglyn/shared-ui-jsx/components/prerequisite-notice.component'\nimport { StatusChip } from '@aglyn/shared-ui-jsx/components/status-chip.component'\nimport { useSnackbar } from '@aglyn/shared-ui-snackstack'\nimport { useSiteKeys } from '@aglyn/tenant-feature-instance/hooks/use-site-keys'\nimport { Alert, Button, CircularProgress, MenuItem, Stack, TextField, Typography } from '@mui/material'\nimport { useCallback, useEffect, useRef, useState, type ReactElement } from 'react'\nimport {\n  PluginConnectionRouteError,\n  usePluginConnectionsApi,\n  type PluginConnectionsApi,\n  type PluginConnectionsStatusAnswer,\n} from '../hooks/use-plugin-connections-api'\nimport {\n  declaredPluginConnections,\n  declaredSyncIntervalHours,\n  formatConnectionTime,\n  nextResourceToChoose,\n  PLUGIN_CONNECTION_PHASE_CHIP,\n  PLUGIN_CONNECTIONS_NOT_CONFIGURED_TEXT,\n  pluginConnectionNextSyncAtMs,\n  pluginConnectionNotSetUpText,\n  pluginConnectionPhase,\n  pluginConnectionResultMessage,\n  pluginConnectionSharesText,\n  pluginConnectionTooSoonText,\n  readPluginConnectionReturn,\n  type PluginConnectionCardView,\n} from '../model/plugin-connection-card'\nimport {\n  PLUGIN_CONNECTIONS_PLAN_REFUSAL,\n  PLUGIN_CONNECTIONS_SITE_PERMISSION,\n  PLUGIN_CONNECTIONS_SITE_ROLE_PRESET,\n  pluginConnectionsPermissionRefusal,\n  type PluginConnectionStatusEntry,\n} from '../model/plugin-connections'\n\n/**\n * What the `sitePluginConnections` zone hands each widget: the site's page\n * for one installed plugin, and the pin whose manifest it runs.\n */\nexport interface SitePluginConnectionsCardProps {\n  hostId: string\n  /** Path slug for building `/[orgSlug]/…` links. */\n  orgSlug: string\n  /** The installation's id: the listing the pin is keyed by. */\n  pluginRef: string\n  /** The site's pin of the listing (else the workspace's): its version and manifest. */\n  pin: Readonly<Record<string, unknown>> | null | undefined\n  /** Test seam: the routes. The signed-in member's by default. */\n  api?: PluginConnectionsApi\n  /** Test seam: sends the browser to the provider's consent page. */\n  navigate?: (url: string) => void\n}\n\ntype Load =\n  | { status: 'loading' }\n  | { status: 'error'; message: string; refused: boolean }\n  | { status: 'ready'; answer: PluginConnectionsStatusAnswer }\n\nconst leavePage = (url: string) => window.location.assign(url)\n\nconst HELP = pluginDocsHelp('installYourFirstPlugin', {\n  anchor: '#plugin-connections',\n  excerpt:\n    'Some plugins show information from another service, such as your business listing. Connect it once and the plugin keeps it up to date on its own.',\n})\n\n/**\n * THE SITE'S CONNECTIONS FOR ONE INSTALLED PLUGIN (AGL-4196).\n *\n * A marketplace plugin may declare connections in its manifest: an account at\n * another service the platform signs in to, the things the owner picks there\n * (an account, then one of its locations), and a scheduled sync. The\n * platform runs all of it, so this card is the same for every plugin: one\n * card per declared connection, drawn from the pinned manifest and the\n * status route.\n *\n * Every prerequisite stays on screen: a plan without connections, a\n * publisher who has not set the connection up, a deployment that cannot run\n * them yet and a member without the site key each keep the card, with its\n * controls off and the reason said.\n */\nexport function SitePluginConnectionsCard(props: SitePluginConnectionsCardProps) {\n  const { hostId, orgSlug, pluginRef, pin } = props\n  const routes = usePluginConnectionsApi(hostId)\n  const api = props.api ?? routes\n  const navigate = props.navigate ?? leavePage\n  const { enqueueSnackbar } = useSnackbar()\n  const { blocked } = useSiteKeys(hostId)\n  const declared = declaredPluginConnections(pin?.['manifest'])\n  const hasDeclared = declared.length > 0\n  const [load, setLoad] = useState<Load>({ status: 'loading' })\n  const returned = useRef(false)\n\n  const refresh = useCallback(async () => {\n    try {\n      setLoad({ status: 'ready', answer: await api.status(pluginRef) })\n    } catch (error) {\n      const refusal = error instanceof PluginConnectionRouteError ? error : null\n      setLoad({\n        status: 'error',\n        message: refusal?.message ?? 'The connections could not be read. Try again.',\n        refused: refusal?.reason === 'permission',\n      })\n    }\n  }, [api, pluginRef])\n\n  useEffect(() => {\n    if (!hasDeclared || !hostId) return\n    if (!returned.current && typeof window !== 'undefined') {\n      returned.current = true\n      const back = readPluginConnectionReturn(window.location.href, pluginRef)\n      if (back) {\n        window.history.replaceState(window.history.state, '', back.cleanUrl)\n        const label = declared.find((one) => one.id === back.connectionId)?.label ?? 'The service'\n        const { variant, message } = pluginConnectionResultMessage(back.result, label)\n        enqueueSnackbar(message, { variant })\n      }\n    }\n    void refresh()\n    // `declared` is re-derived each render from the same pin; its ids are what matter.\n    // eslint-disable-next-line react-hooks/exhaustive-deps\n  }, [hasDeclared, hostId, pluginRef, refresh])\n\n  if (!hasDeclared) return null\n\n  const keyRefused = blocked(PLUGIN_CONNECTIONS_SITE_PERMISSION, PLUGIN_CONNECTIONS_SITE_ROLE_PRESET)\n  const permissionText = pluginConnectionsPermissionRefusal(PLUGIN_CONNECTIONS_SITE_PERMISSION)\n\n  if (keyRefused || (load.status === 'error' && load.refused)) {\n    return (\n      <Stack spacing={3}>\n        {declared.map((connection) => (\n          <CardDisplay\n            key={connection.id}\n            header={connection.label}\n            subheader={connection.description}\n            help={HELP}\n            contentGutterX\n            contentGutterY\n            HeaderProps={{\n              action: (\n                <BlockedControl blocked reason={permissionText}>\n                  <Button variant=\"contained\">{'Connect'}</Button>\n                </BlockedControl>\n              ),\n            }}\n          >\n            <Alert severity=\"info\">{permissionText}</Alert>\n          </CardDisplay>\n        ))}\n      </Stack>\n    )\n  }\n\n  if (load.status !== 'ready') {\n    return (\n      <Stack spacing={3}>\n        {declared.map((connection) => (\n          <CardDisplay\n            key={connection.id}\n            header={connection.label}\n            subheader={connection.description}\n            help={HELP}\n            contentGutterX\n            contentGutterY\n            HeaderProps={\n              load.status === 'error'\n                ? {\n                    action: (\n                      <Button variant=\"outlined\" onClick={() => void refresh()}>\n                        {'Try again'}\n                      </Button>\n                    ),\n                  }\n                : undefined\n            }\n          >\n            {load.status === 'error' ? (\n              <Alert severity=\"error\">{load.message}</Alert>\n            ) : (\n              <Stack direction=\"row\" spacing={1} sx={{ alignItems: 'center' }} role=\"status\">\n                <CircularProgress size={18} />\n                <Typography variant=\"body2\" color=\"text.secondary\">\n                  {'Checking the connection…'}\n                </Typography>\n              </Stack>\n            )}\n          </CardDisplay>\n        ))}\n      </Stack>\n    )\n  }\n\n  const { answer } = load\n  const replace = (entry: PluginConnectionStatusEntry, connection: PluginConnectionCardView | null) =>\n    setLoad({\n      status: 'ready',\n      answer: {\n        ...answer,\n        connections: answer.connections.map((one) =>\n          one.listingId === entry.listingId && one.connectionId === entry.connectionId ? { ...one, connection } : one,\n        ),\n      },\n    })\n\n  return (\n    <Stack spacing={3}>\n      {answer.connections.map((entry) => (\n        <SitePluginConnection\n          key={`${entry.listingId}/${entry.connectionId}`}\n          entry={entry}\n          configured={answer.configured}\n          planAllows={answer.planAllows && entry.planAllows}\n          upgradeHref={orgSlug ? `/${orgSlug}/billing#plans` : undefined}\n          pluginName={String(pin?.['displayName'] ?? '') || 'this plugin'}\n          intervalHours={declaredSyncIntervalHours(pin?.['manifest'], entry.connectionId)}\n          api={api}\n          navigate={navigate}\n          onConnection={(connection) => replace(entry, connection)}\n          onStale={refresh}\n        />\n      ))}\n    </Stack>\n  )\n}\nSitePluginConnectionsCard.displayName = 'SitePluginConnectionsCard'\n\nexport default SitePluginConnectionsCard\n\ntype Busy = 'connect' | 'sync' | 'choose' | 'disconnect' | null\n\ninterface SitePluginConnectionProps {\n  entry: PluginConnectionStatusEntry\n  configured: boolean\n  planAllows: boolean\n  upgradeHref: string | undefined\n  pluginName: string\n  intervalHours: number | null\n  api: PluginConnectionsApi\n  navigate: (url: string) => void\n  onConnection: (connection: PluginConnectionCardView | null) => void\n  onStale: () => Promise<void>\n}\n\ntype Items =\n  | { status: 'idle' | 'loading' }\n  | { status: 'error'; message: string }\n  | { status: 'ready'; items: Array<{ id: string; label: string }> }\n\n/** One declared connection on the site: its state, what was chosen, and what can be done next. */\nfunction SitePluginConnection(props: SitePluginConnectionProps) {\n  const { entry, configured, planAllows, upgradeHref, pluginName, intervalHours, api, navigate, onConnection, onStale } =\n    props\n  const { enqueueSnackbar } = useSnackbar()\n  const { confirm } = useConfirmationContext()\n  const [busy, setBusy] = useState<Busy>(null)\n  const [error, setError] = useState<string | null>(null)\n  const [wait, setWait] = useState<string | null>(null)\n  const [changing, setChanging] = useState<number | null>(null)\n  const [items, setItems] = useState<Items>({ status: 'idle' })\n  const [picked, setPicked] = useState('')\n  const phase = pluginConnectionPhase(entry, configured)\n  // A pinned version that declares no sync has nothing for Sync now to run, and no sync times to show.\n  const declaresSync = intervalHours !== null\n  const view = entry.connection as PluginConnectionCardView | null\n  const label = entry.label\n  const ids = { listingId: entry.listingId, connectionId: entry.connectionId }\n\n  const resource = changing !== null ? (entry.resources[changing] ?? null) : phase === 'choosing' ? nextResourceToChoose(entry) : null\n  const resourceId = resource?.id ?? ''\n  const currentChoice = resourceId ? (view?.choices[resourceId]?.id ?? '') : ''\n\n  useEffect(() => {\n    if (!resourceId || !planAllows) {\n      setItems({ status: 'idle' })\n      return\n    }\n    let live = true\n    setItems({ status: 'loading' })\n    setPicked(currentChoice)\n    api\n      .resources({ ...ids, resource: resourceId })\n      .then((answer) => {\n        if (!live) return\n        setItems({ status: 'ready', items: answer.items })\n        setPicked((was) => was || (answer.items.length === 1 ? answer.items[0].id : ''))\n      })\n      .catch((failure: unknown) => {\n        if (!live) return\n        setItems({ status: 'error', message: failure instanceof Error ? failure.message : String(failure) })\n        if (failure instanceof PluginConnectionRouteError && failure.reason === 'reconnect') void onStale()\n      })\n    return () => {\n      live = false\n    }\n    // The connection's ids and the resource are the request; the rest is display.\n    // eslint-disable-next-line react-hooks/exhaustive-deps\n  }, [api, entry.listingId, entry.connectionId, resourceId, planAllows])\n\n  const run = async (kind: NonNullable<Busy>, work: () => Promise<void>) => {\n    setBusy(kind)\n    setError(null)\n    setWait(null)\n    try {\n      await work()\n    } catch (failure) {\n      if (failure instanceof PluginConnectionRouteError && failure.reason === 'too-soon') {\n        // Not a failure: the last sync is under a minute old. Say how long, and show what it brought.\n        const retryAfterMs = Number(failure.body['retryAfterMs'])\n        setWait(pluginConnectionTooSoonText(label, Number.isFinite(retryAfterMs) ? retryAfterMs : null))\n        const connection = failure.body['connection'] as PluginConnectionCardView | undefined\n        if (connection && typeof connection === 'object') onConnection(connection)\n        return\n      }\n      const message = failure instanceof Error ? failure.message : String(failure)\n      setError(message)\n      if (\n        failure instanceof PluginConnectionRouteError &&\n        (failure.reason === 'reconnect' || failure.reason === 'not-connected' || failure.reason === 'choose-first')\n      ) {\n        void onStale()\n      }\n    } finally {\n      setBusy(null)\n    }\n  }\n\n  const connect = () =>\n    run('connect', async () => {\n      const { authorizeUrl } = await api.connectStart({ ...ids, returnTo: window.location.href })\n      navigate(authorizeUrl)\n    })\n\n  const choose = () =>\n    run('choose', async () => {\n      if (!resource || !picked) return\n      const { connection } = await api.choose({ ...ids, resource: resource.id, id: picked })\n      onConnection(connection)\n      if (changing !== null) {\n        const next = changing + 1\n        setChanging(next < entry.resources.length ? next : null)\n      }\n      if (connection?.ready) enqueueSnackbar(`${label} is set up. It syncs on its own from now on.`, { variant: 'success' })\n    })\n\n  const sync = () =>\n    run('sync', async () => {\n      const { connection, synced } = await api.sync(ids)\n      onConnection(connection)\n      enqueueSnackbar(synced ? `${label} is up to date.` : `${label} did not sync. See why below.`, {\n        variant: synced ? 'success' : 'warning',\n      })\n    })\n\n  const disconnect = async () => {\n    const ok = await Promise.resolve(\n      confirm({\n        title: `Disconnect ${label}?`,\n        description: `${pluginName} stops receiving updates from ${label} on this site, and what it last brought in is removed from the site. You can connect again at any time.`,\n        confirmationText: 'Disconnect',\n        confirmationButtonProps: { color: 'warning', variant: 'contained' },\n      }),\n    )\n      .then(() => true)\n      .catch(() => false)\n    if (!ok) return\n    await run('disconnect', async () => {\n      await api.disconnect(ids)\n      setChanging(null)\n      onConnection(null)\n      enqueueSnackbar(`${label} is disconnected.`, { variant: 'success' })\n    })\n  }\n\n  const planReason = PLUGIN_CONNECTIONS_PLAN_REFUSAL\n  const blockedBy =\n    phase === 'not-configured'\n      ? PLUGIN_CONNECTIONS_NOT_CONFIGURED_TEXT\n      : phase === 'not-set-up'\n        ? pluginConnectionNotSetUpText(label)\n        : !planAllows\n          ? planReason\n          : null\n\n  const guarded = (reason: string | null, control: ReactElement<{ disabled?: boolean }>) => (\n    <BlockedControl blocked={Boolean(reason)} reason={reason ?? ''}>\n      {control}\n    </BlockedControl>\n  )\n\n  const disconnectButton = (\n    <Button color=\"warning\" disabled={busy !== null} onClick={() => void disconnect()}>\n      {busy === 'disconnect' ? 'Disconnecting…' : 'Disconnect'}\n    </Button>\n  )\n\n  const actions: ReactElement[] = []\n  if (resource) {\n    actions.push(\n      guarded(\n        !planAllows ? planReason : null,\n        <Button key=\"use\" variant=\"contained\" disabled={busy !== null || !picked || items.status !== 'ready'} onClick={() => void choose()}>\n          {busy === 'choose' ? 'Saving…' : `Use this ${resource.label.toLowerCase()}`}\n        </Button>,\n      ),\n    )\n    if (changing !== null) {\n      actions.push(\n        <Button key=\"cancel\" color=\"inherit\" disabled={busy !== null} onClick={() => setChanging(null)}>\n          {'Cancel'}\n        </Button>,\n      )\n    }\n    actions.push(disconnectButton)\n  } else if (phase === 'not-configured' || phase === 'not-set-up' || phase === 'not-connected') {\n    actions.push(\n      guarded(\n        blockedBy,\n        <Button key=\"connect\" variant=\"contained\" disabled={busy !== null} onClick={() => void connect()}>\n          {busy === 'connect' ? 'Opening…' : 'Connect'}\n        </Button>,\n      ),\n    )\n  } else if (phase === 'reconnect') {\n    actions.push(\n      guarded(\n        !planAllows ? planReason : !entry.credentialsSet ? pluginConnectionNotSetUpText(label) : null,\n        <Button key=\"reconnect\" variant=\"contained\" disabled={busy !== null} onClick={() => void connect()}>\n          {busy === 'connect' ? 'Opening…' : 'Reconnect'}\n        </Button>,\n      ),\n    )\n    actions.push(disconnectButton)\n  } else {\n    if (declaresSync) {\n      actions.push(\n        guarded(\n          !planAllows ? planReason : null,\n          <Button key=\"sync\" variant={phase === 'error' ? 'contained' : 'outlined'} disabled={busy !== null} onClick={() => void sync()}>\n            {busy === 'sync' ? 'Syncing…' : 'Sync now'}\n          </Button>,\n        ),\n      )\n    }\n    if (entry.resources.length) {\n      actions.push(\n        guarded(\n          !planAllows ? planReason : null,\n          <Button key=\"change\" variant=\"outlined\" disabled={busy !== null} onClick={() => setChanging(0)}>\n            {'Change'}\n          </Button>,\n        ),\n      )\n    }\n    actions.push(disconnectButton)\n  }\n\n  const chip = PLUGIN_CONNECTION_PHASE_CHIP[phase]\n  const shares = pluginConnectionSharesText(entry.hosts)\n  const nextSync = pluginConnectionNextSyncAtMs(view, intervalHours)\n  const chosen = entry.resources.filter((one) => view?.choices[one.id])\n\n  return (\n    <CardDisplay\n      header={label}\n      subheader={entry.description}\n      help={HELP}\n      contentGutterX\n      contentGutterY\n      HeaderProps={{\n        action: (\n          <Stack direction=\"row\" spacing={1} useFlexGap sx={{ flexWrap: 'wrap', justifyContent: 'flex-end' }}>\n            {actions.map((action, index) => (\n              <span key={index}>{action}</span>\n            ))}\n          </Stack>\n        ),\n      }}\n    >\n      <Stack spacing={1.5}>\n        <Stack direction=\"row\" spacing={1}>\n          <StatusChip label={chip.label} tone={chip.tone} data-testid=\"plugin-connection-status\" />\n        </Stack>\n\n        {phase === 'not-configured' ? <Alert severity=\"info\">{PLUGIN_CONNECTIONS_NOT_CONFIGURED_TEXT}</Alert> : null}\n        {phase === 'not-set-up' ? <PrerequisiteNotice>{pluginConnectionNotSetUpText(label)}</PrerequisiteNotice> : null}\n        {!planAllows && phase !== 'not-configured' && phase !== 'not-set-up' ? (\n          <PlanUpsellNotice planLabel={undefined} upgradeHref={upgradeHref}>\n            {view ? `${planReason} You can still disconnect it.` : planReason}\n          </PlanUpsellNotice>\n        ) : null}\n\n        {phase === 'not-connected' ? (\n          <Typography variant=\"body2\" color=\"text.secondary\">\n            {`Connect ${label} so ${pluginName} can use it on this site. You sign in at ${label} and choose what to share; this site never sees your password.`}\n          </Typography>\n        ) : null}\n\n        {phase === 'reconnect' ? (\n          <Alert severity=\"warning\">\n            {`${label} no longer accepts this connection. Nothing syncs until you reconnect.`}\n          </Alert>\n        ) : null}\n\n        {phase === 'error' ? (\n          <Alert severity=\"error\">\n            {view?.lastError\n              ? `The last sync did not work: ${view.lastError}. It tries again on schedule, or you can sync now.`\n              : 'The last sync did not work. It tries again on schedule, or you can sync now.'}\n          </Alert>\n        ) : null}\n\n        {resource ? (\n          <Stack spacing={1}>\n            <Typography variant=\"body2\" color=\"text.secondary\">\n              {changing === null\n                ? `Choose the ${resource.label.toLowerCase()} ${pluginName} should use. Nothing syncs until you do.`\n                : `Choose the ${resource.label.toLowerCase()} ${pluginName} should use.`}\n            </Typography>\n            {items.status === 'loading' ? (\n              <Stack direction=\"row\" spacing={1} sx={{ alignItems: 'center' }} role=\"status\">\n                <CircularProgress size={18} />\n                <Typography variant=\"body2\" color=\"text.secondary\">\n                  {`Asking ${label}…`}\n                </Typography>\n              </Stack>\n            ) : null}\n            {items.status === 'error' ? <Alert severity=\"error\">{items.message}</Alert> : null}\n            {items.status === 'ready' && !items.items.length ? (\n              <Alert severity=\"info\">\n                {`The ${label} account you connected has nothing to choose here. Connect a different account, or add one at ${label} first.`}\n              </Alert>\n            ) : null}\n            {items.status === 'ready' && items.items.length ? (\n              <TextField\n                select\n                size=\"small\"\n                label={resource.label}\n                value={picked}\n                disabled={busy !== null || !planAllows}\n                onChange={(event) => setPicked(event.target.value)}\n                sx={{ maxWidth: 480 }}\n              >\n                {items.items.map((item) => (\n                  <MenuItem key={item.id} value={item.id}>\n                    {item.label}\n                  </MenuItem>\n                ))}\n              </TextField>\n            ) : null}\n          </Stack>\n        ) : null}\n\n        {view && chosen.length && changing === null ? (\n          <Stack spacing={0.5}>\n            {chosen.map((one) => (\n              <Typography key={one.id} variant=\"body2\">\n                <Typography component=\"span\" variant=\"body2\" color=\"text.secondary\">\n                  {`${one.label}: `}\n                </Typography>\n                {view.choices[one.id]?.label}\n              </Typography>\n            ))}\n          </Stack>\n        ) : null}\n\n        {view && declaresSync && (phase === 'connected' || phase === 'error') ? (\n          <Stack spacing={0.5}>\n            <Typography variant=\"body2\" color=\"text.secondary\">\n              {view.lastSyncAtMs !== null ? `Last synced ${formatConnectionTime(view.lastSyncAtMs)}` : 'Not synced yet'}\n            </Typography>\n            {nextSync !== null ? (\n              <Typography variant=\"body2\" color=\"text.secondary\">\n                {nextSync === 'soon' ? 'Next sync: within the hour' : `Next sync ${formatConnectionTime(nextSync)}`}\n              </Typography>\n            ) : null}\n          </Stack>\n        ) : null}\n\n        {shares ? (\n          <Typography variant=\"caption\" color=\"text.secondary\">\n            {shares}\n          </Typography>\n        ) : null}\n\n        {wait ? (\n          <Alert severity=\"info\" onClose={() => setWait(null)}>\n            {wait}\n          </Alert>\n        ) : null}\n        {error ? (\n          <Alert severity=\"error\" onClose={() => setError(null)}>\n            {error}\n          </Alert>\n        ) : null}\n      </Stack>\n    </CardDisplay>\n  )\n}\n"],"names":["pluginDocsHelp","CardDisplay","useConfirmationContext","BlockedControl","PlanUpsellNotice","PrerequisiteNotice","StatusChip","useSnackbar","useSiteKeys","Alert","Button","CircularProgress","MenuItem","Stack","TextField","Typography","useCallback","useEffect","useRef","useState","PluginConnectionRouteError","usePluginConnectionsApi","declaredPluginConnections","declaredSyncIntervalHours","formatConnectionTime","nextResourceToChoose","PLUGIN_CONNECTION_PHASE_CHIP","PLUGIN_CONNECTIONS_NOT_CONFIGURED_TEXT","pluginConnectionNextSyncAtMs","pluginConnectionNotSetUpText","pluginConnectionPhase","pluginConnectionResultMessage","pluginConnectionSharesText","pluginConnectionTooSoonText","readPluginConnectionReturn","PLUGIN_CONNECTIONS_PLAN_REFUSAL","PLUGIN_CONNECTIONS_SITE_PERMISSION","PLUGIN_CONNECTIONS_SITE_ROLE_PRESET","pluginConnectionsPermissionRefusal","leavePage","url","window","location","assign","HELP","anchor","excerpt","SitePluginConnectionsCard","props","hostId","orgSlug","pluginRef","pin","routes","api","navigate","enqueueSnackbar","blocked","declared","hasDeclared","length","load","setLoad","status","returned","refresh","answer","error","refusal","message","refused","reason","current","back","href","history","replaceState","state","cleanUrl","label","find","one","id","connectionId","variant","result","keyRefused","permissionText","spacing","map","connection","header","subheader","description","help","contentGutterX","contentGutterY","HeaderProps","action","severity","onClick","undefined","direction","sx","alignItems","role","size","color","replace","entry","connections","listingId","SitePluginConnection","configured","planAllows","upgradeHref","pluginName","String","intervalHours","onConnection","onStale","displayName","view","confirm","busy","setBusy","setError","wait","setWait","changing","setChanging","items","setItems","picked","setPicked","phase","declaresSync","ids","resource","resources","resourceId","currentChoice","choices","live","then","was","catch","failure","Error","run","kind","work","retryAfterMs","Number","body","isFinite","connect","authorizeUrl","connectStart","returnTo","choose","next","ready","sync","synced","disconnect","ok","Promise","resolve","title","confirmationText","confirmationButtonProps","planReason","blockedBy","guarded","control","Boolean","disconnectButton","disabled","actions","push","toLowerCase","credentialsSet","chip","shares","hosts","nextSync","chosen","filter","useFlexGap","flexWrap","justifyContent","index","span","tone","data-testid","planLabel","lastError","select","value","onChange","event","target","maxWidth","item","component","lastSyncAtMs","onClose"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GACD;;;AAEA,SAASA,cAAc,QAAQ,mCAAkC;AACjE,SAASC,WAAW,EAAEC,sBAAsB,QAAQ,uBAAsB;AAC1E,SAASC,cAAc,QAAQ,4DAA2D;AAC1F,SAASC,gBAAgB,QAAQ,+DAA8D;AAC/F,SAASC,kBAAkB,QAAQ,gEAA+D;AAClG,SAASC,UAAU,QAAQ,wDAAuD;AAClF,SAASC,WAAW,QAAQ,8BAA6B;AACzD,SAASC,WAAW,QAAQ,qDAAoD;AAChF,SAASC,KAAK,EAAEC,MAAM,EAAEC,gBAAgB,EAAEC,QAAQ,EAAEC,KAAK,EAAEC,SAAS,EAAEC,UAAU,QAAQ,gBAAe;AACvG,SAASC,WAAW,EAAEC,SAAS,EAAEC,MAAM,EAAEC,QAAQ,QAA2B,QAAO;AACnF,SACEC,0BAA0B,EAC1BC,uBAAuB,QAGlB,yCAAqC;AAC5C,SACEC,yBAAyB,EACzBC,yBAAyB,EACzBC,oBAAoB,EACpBC,oBAAoB,EACpBC,4BAA4B,EAC5BC,sCAAsC,EACtCC,4BAA4B,EAC5BC,4BAA4B,EAC5BC,qBAAqB,EACrBC,6BAA6B,EAC7BC,0BAA0B,EAC1BC,2BAA2B,EAC3BC,0BAA0B,QAErB,qCAAiC;AACxC,SACEC,+BAA+B,EAC/BC,kCAAkC,EAClCC,mCAAmC,EACnCC,kCAAkC,QAE7B,iCAA6B;AAyBpC,MAAMC,YAAY,CAACC,MAAgBC,OAAOC,QAAQ,CAACC,MAAM,CAACH;AAE1D,MAAMI,OAAO5C,eAAe,0BAA0B;IACpD6C,QAAQ;IACRC,SACE;AACJ;AAEA;;;;;;;;;;;;;;CAcC,GACD,OAAO,SAASC,0BAA0BC,KAAqC;QAGjEA,YACKA;IAHjB,MAAM,EAAEC,MAAM,EAAEC,OAAO,EAAEC,SAAS,EAAEC,GAAG,EAAE,GAAGJ;IAC5C,MAAMK,SAAShC,wBAAwB4B;IACvC,MAAMK,OAAMN,aAAAA,MAAMM,GAAG,YAATN,aAAaK;IACzB,MAAME,YAAWP,kBAAAA,MAAMO,QAAQ,YAAdP,kBAAkBT;IACnC,MAAM,EAAEiB,eAAe,EAAE,GAAGjD;IAC5B,MAAM,EAAEkD,OAAO,EAAE,GAAGjD,YAAYyC;IAChC,MAAMS,WAAWpC,0BAA0B8B,uBAAAA,GAAK,CAAC,WAAW;IAC5D,MAAMO,cAAcD,SAASE,MAAM,GAAG;IACtC,MAAM,CAACC,MAAMC,QAAQ,GAAG3C,SAAe;QAAE4C,QAAQ;IAAU;IAC3D,MAAMC,WAAW9C,OAAO;IAExB,MAAM+C,UAAUjD,YAAY;QAC1B,IAAI;YACF8C,QAAQ;gBAAEC,QAAQ;gBAASG,QAAQ,MAAMZ,IAAIS,MAAM,CAACZ;YAAW;QACjE,EAAE,OAAOgB,OAAO;;YACd,MAAMC,UAAUD,iBAAiB/C,6BAA6B+C,QAAQ;YACtEL,QAAQ;gBACNC,QAAQ;gBACRM,OAAO,UAAED,2BAAAA,QAASC,OAAO,mBAAI;gBAC7BC,SAASF,CAAAA,2BAAAA,QAASG,MAAM,MAAK;YAC/B;QACF;IACF,GAAG;QAACjB;QAAKH;KAAU;IAEnBlC,UAAU;QACR,IAAI,CAAC0C,eAAe,CAACV,QAAQ;QAC7B,IAAI,CAACe,SAASQ,OAAO,IAAI,OAAO/B,WAAW,aAAa;YACtDuB,SAASQ,OAAO,GAAG;YACnB,MAAMC,OAAOvC,2BAA2BO,OAAOC,QAAQ,CAACgC,IAAI,EAAEvB;YAC9D,IAAIsB,MAAM;;oBAEMf;gBADdjB,OAAOkC,OAAO,CAACC,YAAY,CAACnC,OAAOkC,OAAO,CAACE,KAAK,EAAE,IAAIJ,KAAKK,QAAQ;gBACnE,MAAMC,iBAAQrB,iBAAAA,SAASsB,IAAI,CAAC,CAACC,MAAQA,IAAIC,EAAE,KAAKT,KAAKU,YAAY,sBAAnDzB,eAAsDqB,KAAK,mBAAI;gBAC7E,MAAM,EAAEK,OAAO,EAAEf,OAAO,EAAE,GAAGtC,8BAA8B0C,KAAKY,MAAM,EAAEN;gBACxEvB,gBAAgBa,SAAS;oBAAEe;gBAAQ;YACrC;QACF;QACA,KAAKnB;IACL,mFAAmF;IACnF,uDAAuD;IACzD,GAAG;QAACN;QAAaV;QAAQE;QAAWc;KAAQ;IAE5C,IAAI,CAACN,aAAa,OAAO;IAEzB,MAAM2B,aAAa7B,QAAQrB,oCAAoCC;IAC/D,MAAMkD,iBAAiBjD,mCAAmCF;IAE1D,IAAIkD,cAAezB,KAAKE,MAAM,KAAK,WAAWF,KAAKS,OAAO,EAAG;QAC3D,qBACE,KAACzD;YAAM2E,SAAS;sBACb9B,SAAS+B,GAAG,CAAC,CAACC,2BACb,KAACzF;oBAEC0F,QAAQD,WAAWX,KAAK;oBACxBa,WAAWF,WAAWG,WAAW;oBACjCC,MAAMlD;oBACNmD,cAAc;oBACdC,cAAc;oBACdC,aAAa;wBACXC,sBACE,KAAC/F;4BAAesD,OAAO;4BAACc,QAAQgB;sCAC9B,cAAA,KAAC7E;gCAAO0E,SAAQ;0CAAa;;;oBAGnC;8BAEA,cAAA,KAAC3E;wBAAM0F,UAAS;kCAAQZ;;mBAdnBG,WAAWR,EAAE;;IAmB5B;IAEA,IAAIrB,KAAKE,MAAM,KAAK,SAAS;QAC3B,qBACE,KAAClD;YAAM2E,SAAS;sBACb9B,SAAS+B,GAAG,CAAC,CAACC,2BACb,KAACzF;oBAEC0F,QAAQD,WAAWX,KAAK;oBACxBa,WAAWF,WAAWG,WAAW;oBACjCC,MAAMlD;oBACNmD,cAAc;oBACdC,cAAc;oBACdC,aACEpC,KAAKE,MAAM,KAAK,UACZ;wBACEmC,sBACE,KAACxF;4BAAO0E,SAAQ;4BAAWgB,SAAS,IAAM,KAAKnC;sCAC5C;;oBAGP,IACAoC;8BAGLxC,KAAKE,MAAM,KAAK,wBACf,KAACtD;wBAAM0F,UAAS;kCAAStC,KAAKQ,OAAO;uCAErC,MAACxD;wBAAMyF,WAAU;wBAAMd,SAAS;wBAAGe,IAAI;4BAAEC,YAAY;wBAAS;wBAAGC,MAAK;;0CACpE,KAAC9F;gCAAiB+F,MAAM;;0CACxB,KAAC3F;gCAAWqE,SAAQ;gCAAQuB,OAAM;0CAC/B;;;;mBAxBFjB,WAAWR,EAAE;;IAgC5B;IAEA,MAAM,EAAEhB,MAAM,EAAE,GAAGL;IACnB,MAAM+C,UAAU,CAACC,OAAoCnB,aACnD5B,QAAQ;YACNC,QAAQ;YACRG,QAAQ,aACHA;gBACH4C,aAAa5C,OAAO4C,WAAW,CAACrB,GAAG,CAAC,CAACR,MACnCA,IAAI8B,SAAS,KAAKF,MAAME,SAAS,IAAI9B,IAAIE,YAAY,KAAK0B,MAAM1B,YAAY,GAAG,aAAKF;wBAAKS;yBAAeT;;QAG9G;IAEF,qBACE,KAACpE;QAAM2E,SAAS;kBACbtB,OAAO4C,WAAW,CAACrB,GAAG,CAAC,CAACoB;;iCACvB,KAACG;gBAECH,OAAOA;gBACPI,YAAY/C,OAAO+C,UAAU;gBAC7BC,YAAYhD,OAAOgD,UAAU,IAAIL,MAAMK,UAAU;gBACjDC,aAAajE,UAAU,CAAC,CAAC,EAAEA,QAAQ,cAAc,CAAC,GAAGmD;gBACrDe,YAAYC,eAAOjE,uBAAAA,GAAK,CAAC,cAAc,mBAAI,OAAO;gBAClDkE,eAAe/F,0BAA0B6B,uBAAAA,GAAK,CAAC,WAAW,EAAEyD,MAAM1B,YAAY;gBAC9E7B,KAAKA;gBACLC,UAAUA;gBACVgE,cAAc,CAAC7B,aAAekB,QAAQC,OAAOnB;gBAC7C8B,SAASvD;eAVJ,GAAG4C,MAAME,SAAS,CAAC,CAAC,EAAEF,MAAM1B,YAAY,EAAE;;;AAezD;AACApC,0BAA0B0E,WAAW,GAAG;AAExC,eAAe1E,0BAAyB;AAsBxC,gGAAgG,GAChG,SAASiE,qBAAqBhE,KAAgC;QAkBtB6D;QAEFa;IAnBpC,MAAM,EAAEb,KAAK,EAAEI,UAAU,EAAEC,UAAU,EAAEC,WAAW,EAAEC,UAAU,EAAEE,aAAa,EAAEhE,GAAG,EAAEC,QAAQ,EAAEgE,YAAY,EAAEC,OAAO,EAAE,GACnHxE;IACF,MAAM,EAAEQ,eAAe,EAAE,GAAGjD;IAC5B,MAAM,EAAEoH,OAAO,EAAE,GAAGzH;IACpB,MAAM,CAAC0H,MAAMC,QAAQ,GAAG1G,SAAe;IACvC,MAAM,CAACgD,OAAO2D,SAAS,GAAG3G,SAAwB;IAClD,MAAM,CAAC4G,MAAMC,QAAQ,GAAG7G,SAAwB;IAChD,MAAM,CAAC8G,UAAUC,YAAY,GAAG/G,SAAwB;IACxD,MAAM,CAACgH,OAAOC,SAAS,GAAGjH,SAAgB;QAAE4C,QAAQ;IAAO;IAC3D,MAAM,CAACsE,QAAQC,UAAU,GAAGnH,SAAS;IACrC,MAAMoH,QAAQzG,sBAAsB+E,OAAOI;IAC3C,qGAAqG;IACrG,MAAMuB,eAAelB,kBAAkB;IACvC,MAAMI,OAAOb,MAAMnB,UAAU;IAC7B,MAAMX,QAAQ8B,MAAM9B,KAAK;IACzB,MAAM0D,MAAM;QAAE1B,WAAWF,MAAME,SAAS;QAAE5B,cAAc0B,MAAM1B,YAAY;IAAC;IAE3E,MAAMuD,WAAWT,aAAa,QAAQpB,4BAAAA,MAAM8B,SAAS,CAACV,SAAS,YAAzBpB,4BAA6B,OAAQ0B,UAAU,aAAa9G,qBAAqBoF,SAAS;IAChI,MAAM+B,qBAAaF,4BAAAA,SAAUxD,EAAE,mBAAI;IACnC,MAAM2D,gBAAgBD,sBAAclB,yBAAAA,2BAAAA,KAAMoB,OAAO,CAACF,WAAW,qBAAzBlB,yBAA2BxC,EAAE,oBAAI,KAAM;IAE3EjE,UAAU;QACR,IAAI,CAAC2H,cAAc,CAAC1B,YAAY;YAC9BkB,SAAS;gBAAErE,QAAQ;YAAO;YAC1B;QACF;QACA,IAAIgF,OAAO;QACXX,SAAS;YAAErE,QAAQ;QAAU;QAC7BuE,UAAUO;QACVvF,IACGqF,SAAS,CAAC,aAAKF;YAAKC,UAAUE;YAC9BI,IAAI,CAAC,CAAC9E;YACL,IAAI,CAAC6E,MAAM;YACXX,SAAS;gBAAErE,QAAQ;gBAASoE,OAAOjE,OAAOiE,KAAK;YAAC;YAChDG,UAAU,CAACW,MAAQA,OAAQ/E,CAAAA,OAAOiE,KAAK,CAACvE,MAAM,KAAK,IAAIM,OAAOiE,KAAK,CAAC,EAAE,CAACjD,EAAE,GAAG,EAAC;QAC/E,GACCgE,KAAK,CAAC,CAACC;YACN,IAAI,CAACJ,MAAM;YACXX,SAAS;gBAAErE,QAAQ;gBAASM,SAAS8E,mBAAmBC,QAAQD,QAAQ9E,OAAO,GAAGgD,OAAO8B;YAAS;YAClG,IAAIA,mBAAmB/H,8BAA8B+H,QAAQ5E,MAAM,KAAK,aAAa,KAAKiD;QAC5F;QACF,OAAO;YACLuB,OAAO;QACT;IACA,8EAA8E;IAC9E,uDAAuD;IACzD,GAAG;QAACzF;QAAKuD,MAAME,SAAS;QAAEF,MAAM1B,YAAY;QAAEyD;QAAY1B;KAAW;IAErE,MAAMmC,MAAM,OAAOC,MAAyBC;QAC1C1B,QAAQyB;QACRxB,SAAS;QACTE,QAAQ;QACR,IAAI;YACF,MAAMuB;QACR,EAAE,OAAOJ,SAAS;YAChB,IAAIA,mBAAmB/H,8BAA8B+H,QAAQ5E,MAAM,KAAK,YAAY;gBAClF,8FAA8F;gBAC9F,MAAMiF,eAAeC,OAAON,QAAQO,IAAI,CAAC,eAAe;gBACxD1B,QAAQ/F,4BAA4B8C,OAAO0E,OAAOE,QAAQ,CAACH,gBAAgBA,eAAe;gBAC1F,MAAM9D,aAAayD,QAAQO,IAAI,CAAC,aAAa;gBAC7C,IAAIhE,cAAc,OAAOA,eAAe,UAAU6B,aAAa7B;gBAC/D;YACF;YACA,MAAMrB,UAAU8E,mBAAmBC,QAAQD,QAAQ9E,OAAO,GAAGgD,OAAO8B;YACpErB,SAASzD;YACT,IACE8E,mBAAmB/H,8BAClB+H,CAAAA,QAAQ5E,MAAM,KAAK,eAAe4E,QAAQ5E,MAAM,KAAK,mBAAmB4E,QAAQ5E,MAAM,KAAK,cAAa,GACzG;gBACA,KAAKiD;YACP;QACF,SAAU;YACRK,QAAQ;QACV;IACF;IAEA,MAAM+B,UAAU,IACdP,IAAI,WAAW;YACb,MAAM,EAAEQ,YAAY,EAAE,GAAG,MAAMvG,IAAIwG,YAAY,CAAC,aAAKrB;gBAAKsB,UAAUtH,OAAOC,QAAQ,CAACgC,IAAI;;YACxFnB,SAASsG;QACX;IAEF,MAAMG,SAAS,IACbX,IAAI,UAAU;YACZ,IAAI,CAACX,YAAY,CAACL,QAAQ;YAC1B,MAAM,EAAE3C,UAAU,EAAE,GAAG,MAAMpC,IAAI0G,MAAM,CAAC,aAAKvB;gBAAKC,UAAUA,SAASxD,EAAE;gBAAEA,IAAImD;;YAC7Ed,aAAa7B;YACb,IAAIuC,aAAa,MAAM;gBACrB,MAAMgC,OAAOhC,WAAW;gBACxBC,YAAY+B,OAAOpD,MAAM8B,SAAS,CAAC/E,MAAM,GAAGqG,OAAO;YACrD;YACA,IAAIvE,8BAAAA,WAAYwE,KAAK,EAAE1G,gBAAgB,GAAGuB,MAAM,4CAA4C,CAAC,EAAE;gBAAEK,SAAS;YAAU;QACtH;IAEF,MAAM+E,OAAO,IACXd,IAAI,QAAQ;YACV,MAAM,EAAE3D,UAAU,EAAE0E,MAAM,EAAE,GAAG,MAAM9G,IAAI6G,IAAI,CAAC1B;YAC9ClB,aAAa7B;YACblC,gBAAgB4G,SAAS,GAAGrF,MAAM,eAAe,CAAC,GAAG,GAAGA,MAAM,6BAA6B,CAAC,EAAE;gBAC5FK,SAASgF,SAAS,YAAY;YAChC;QACF;IAEF,MAAMC,aAAa;QACjB,MAAMC,KAAK,MAAMC,QAAQC,OAAO,CAC9B7C,QAAQ;YACN8C,OAAO,CAAC,WAAW,EAAE1F,MAAM,CAAC,CAAC;YAC7Bc,aAAa,GAAGuB,WAAW,8BAA8B,EAAErC,MAAM,uGAAuG,CAAC;YACzK2F,kBAAkB;YAClBC,yBAAyB;gBAAEhE,OAAO;gBAAWvB,SAAS;YAAY;QACpE,IAEC4D,IAAI,CAAC,IAAM,MACXE,KAAK,CAAC,IAAM;QACf,IAAI,CAACoB,IAAI;QACT,MAAMjB,IAAI,cAAc;YACtB,MAAM/F,IAAI+G,UAAU,CAAC5B;YACrBP,YAAY;YACZX,aAAa;YACb/D,gBAAgB,GAAGuB,MAAM,iBAAiB,CAAC,EAAE;gBAAEK,SAAS;YAAU;QACpE;IACF;IAEA,MAAMwF,aAAazI;IACnB,MAAM0I,YACJtC,UAAU,mBACN5G,yCACA4G,UAAU,eACR1G,6BAA6BkD,SAC7B,CAACmC,aACC0D,aACA;IAEV,MAAME,UAAU,CAACvG,QAAuBwG,wBACtC,KAAC5K;YAAesD,SAASuH,QAAQzG;YAASA,MAAM,EAAEA,iBAAAA,SAAU;sBACzDwG;;IAIL,MAAME,iCACJ,KAACvK;QAAOiG,OAAM;QAAUuE,UAAUtD,SAAS;QAAMxB,SAAS,IAAM,KAAKiE;kBAClEzC,SAAS,eAAe,mBAAmB;;IAIhD,MAAMuD,UAA0B,EAAE;IAClC,IAAIzC,UAAU;QACZyC,QAAQC,IAAI,CACVN,QACE,CAAC5D,aAAa0D,aAAa,oBAC3B,KAAClK;YAAiB0E,SAAQ;YAAY8F,UAAUtD,SAAS,QAAQ,CAACS,UAAUF,MAAMpE,MAAM,KAAK;YAASqC,SAAS,IAAM,KAAK4D;sBACvHpC,SAAS,WAAW,YAAY,CAAC,SAAS,EAAEc,SAAS3D,KAAK,CAACsG,WAAW,IAAI;WADjE;QAKhB,IAAIpD,aAAa,MAAM;YACrBkD,QAAQC,IAAI,eACV,KAAC1K;gBAAoBiG,OAAM;gBAAUuE,UAAUtD,SAAS;gBAAMxB,SAAS,IAAM8B,YAAY;0BACtF;eADS;QAIhB;QACAiD,QAAQC,IAAI,CAACH;IACf,OAAO,IAAI1C,UAAU,oBAAoBA,UAAU,gBAAgBA,UAAU,iBAAiB;QAC5F4C,QAAQC,IAAI,CACVN,QACED,yBACA,KAACnK;YAAqB0E,SAAQ;YAAY8F,UAAUtD,SAAS;YAAMxB,SAAS,IAAM,KAAKwD;sBACpFhC,SAAS,YAAY,aAAa;WADzB;IAKlB,OAAO,IAAIW,UAAU,aAAa;QAChC4C,QAAQC,IAAI,CACVN,QACE,CAAC5D,aAAa0D,aAAa,CAAC/D,MAAMyE,cAAc,GAAGzJ,6BAA6BkD,SAAS,oBACzF,KAACrE;YAAuB0E,SAAQ;YAAY8F,UAAUtD,SAAS;YAAMxB,SAAS,IAAM,KAAKwD;sBACtFhC,SAAS,YAAY,aAAa;WADzB;QAKhBuD,QAAQC,IAAI,CAACH;IACf,OAAO;QACL,IAAIzC,cAAc;YAChB2C,QAAQC,IAAI,CACVN,QACE,CAAC5D,aAAa0D,aAAa,oBAC3B,KAAClK;gBAAkB0E,SAASmD,UAAU,UAAU,cAAc;gBAAY2C,UAAUtD,SAAS;gBAAMxB,SAAS,IAAM,KAAK+D;0BACpHvC,SAAS,SAAS,aAAa;eADtB;QAKlB;QACA,IAAIf,MAAM8B,SAAS,CAAC/E,MAAM,EAAE;YAC1BuH,QAAQC,IAAI,CACVN,QACE,CAAC5D,aAAa0D,aAAa,oBAC3B,KAAClK;gBAAoB0E,SAAQ;gBAAW8F,UAAUtD,SAAS;gBAAMxB,SAAS,IAAM8B,YAAY;0BACzF;eADS;QAKlB;QACAiD,QAAQC,IAAI,CAACH;IACf;IAEA,MAAMM,OAAO7J,4BAA4B,CAAC6G,MAAM;IAChD,MAAMiD,SAASxJ,2BAA2B6E,MAAM4E,KAAK;IACrD,MAAMC,WAAW9J,6BAA6B8F,MAAMJ;IACpD,MAAMqE,SAAS9E,MAAM8B,SAAS,CAACiD,MAAM,CAAC,CAAC3G,MAAQyC,wBAAAA,KAAMoB,OAAO,CAAC7D,IAAIC,EAAE,CAAC;IAEpE,qBACE,KAACjF;QACC0F,QAAQZ;QACRa,WAAWiB,MAAMhB,WAAW;QAC5BC,MAAMlD;QACNmD,cAAc;QACdC,cAAc;QACdC,aAAa;YACXC,sBACE,KAACrF;gBAAMyF,WAAU;gBAAMd,SAAS;gBAAGqG,UAAU;gBAACtF,IAAI;oBAAEuF,UAAU;oBAAQC,gBAAgB;gBAAW;0BAC9FZ,QAAQ1F,GAAG,CAAC,CAACS,QAAQ8F,sBACpB,KAACC;kCAAkB/F;uBAAR8F;;QAInB;kBAEA,cAAA,MAACnL;YAAM2E,SAAS;;8BACd,KAAC3E;oBAAMyF,WAAU;oBAAMd,SAAS;8BAC9B,cAAA,KAAClF;wBAAWyE,OAAOwG,KAAKxG,KAAK;wBAAEmH,MAAMX,KAAKW,IAAI;wBAAEC,eAAY;;;gBAG7D5D,UAAU,iCAAmB,KAAC9H;oBAAM0F,UAAS;8BAAQxE;qBAAkD;gBACvG4G,UAAU,6BAAe,KAAClI;8BAAoBwB,6BAA6BkD;qBAA+B;gBAC1G,CAACmC,cAAcqB,UAAU,oBAAoBA,UAAU,6BACtD,KAACnI;oBAAiBgM,WAAW/F;oBAAWc,aAAaA;8BAClDO,OAAO,GAAGkD,WAAW,6BAA6B,CAAC,GAAGA;qBAEvD;gBAEHrC,UAAU,gCACT,KAACxH;oBAAWqE,SAAQ;oBAAQuB,OAAM;8BAC/B,CAAC,QAAQ,EAAE5B,MAAM,IAAI,EAAEqC,WAAW,yCAAyC,EAAErC,MAAM,8DAA8D,CAAC;qBAEnJ;gBAEHwD,UAAU,4BACT,KAAC9H;oBAAM0F,UAAS;8BACb,GAAGpB,MAAM,sEAAsE,CAAC;qBAEjF;gBAEHwD,UAAU,wBACT,KAAC9H;oBAAM0F,UAAS;8BACbuB,CAAAA,wBAAAA,KAAM2E,SAAS,IACZ,CAAC,4BAA4B,EAAE3E,KAAK2E,SAAS,CAAC,kDAAkD,CAAC,GACjG;qBAEJ;gBAEH3D,yBACC,MAAC7H;oBAAM2E,SAAS;;sCACd,KAACzE;4BAAWqE,SAAQ;4BAAQuB,OAAM;sCAC/BsB,aAAa,OACV,CAAC,WAAW,EAAES,SAAS3D,KAAK,CAACsG,WAAW,GAAG,CAAC,EAAEjE,WAAW,wCAAwC,CAAC,GAClG,CAAC,WAAW,EAAEsB,SAAS3D,KAAK,CAACsG,WAAW,GAAG,CAAC,EAAEjE,WAAW,YAAY,CAAC;;wBAE3Ee,MAAMpE,MAAM,KAAK,0BAChB,MAAClD;4BAAMyF,WAAU;4BAAMd,SAAS;4BAAGe,IAAI;gCAAEC,YAAY;4BAAS;4BAAGC,MAAK;;8CACpE,KAAC9F;oCAAiB+F,MAAM;;8CACxB,KAAC3F;oCAAWqE,SAAQ;oCAAQuB,OAAM;8CAC/B,CAAC,OAAO,EAAE5B,MAAM,CAAC,CAAC;;;6BAGrB;wBACHoD,MAAMpE,MAAM,KAAK,wBAAU,KAACtD;4BAAM0F,UAAS;sCAASgC,MAAM9D,OAAO;6BAAY;wBAC7E8D,MAAMpE,MAAM,KAAK,WAAW,CAACoE,MAAMA,KAAK,CAACvE,MAAM,iBAC9C,KAACnD;4BAAM0F,UAAS;sCACb,CAAC,IAAI,EAAEpB,MAAM,8FAA8F,EAAEA,MAAM,OAAO,CAAC;6BAE5H;wBACHoD,MAAMpE,MAAM,KAAK,WAAWoE,MAAMA,KAAK,CAACvE,MAAM,iBAC7C,KAAC9C;4BACCwL,MAAM;4BACN5F,MAAK;4BACL3B,OAAO2D,SAAS3D,KAAK;4BACrBwH,OAAOlE;4BACP6C,UAAUtD,SAAS,QAAQ,CAACV;4BAC5BsF,UAAU,CAACC,QAAUnE,UAAUmE,MAAMC,MAAM,CAACH,KAAK;4BACjDhG,IAAI;gCAAEoG,UAAU;4BAAI;sCAEnBxE,MAAMA,KAAK,CAAC1C,GAAG,CAAC,CAACmH,qBAChB,KAAChM;oCAAuB2L,OAAOK,KAAK1H,EAAE;8CACnC0H,KAAK7H,KAAK;mCADE6H,KAAK1H,EAAE;6BAKxB;;qBAEJ;gBAEHwC,QAAQiE,OAAO/H,MAAM,IAAIqE,aAAa,qBACrC,KAACpH;oBAAM2E,SAAS;8BACbmG,OAAOlG,GAAG,CAAC,CAACR;4BAKRyC;6CAJH,MAAC3G;4BAAwBqE,SAAQ;;8CAC/B,KAACrE;oCAAW8L,WAAU;oCAAOzH,SAAQ;oCAAQuB,OAAM;8CAChD,GAAG1B,IAAIF,KAAK,CAAC,EAAE,CAAC;;iCAElB2C,uBAAAA,KAAKoB,OAAO,CAAC7D,IAAIC,EAAE,CAAC,qBAApBwC,qBAAsB3C,KAAK;;2BAJbE,IAAIC,EAAE;;qBAQzB;gBAEHwC,QAAQc,gBAAiBD,CAAAA,UAAU,eAAeA,UAAU,OAAM,kBACjE,MAAC1H;oBAAM2E,SAAS;;sCACd,KAACzE;4BAAWqE,SAAQ;4BAAQuB,OAAM;sCAC/Be,KAAKoF,YAAY,KAAK,OAAO,CAAC,YAAY,EAAEtL,qBAAqBkG,KAAKoF,YAAY,GAAG,GAAG;;wBAE1FpB,aAAa,qBACZ,KAAC3K;4BAAWqE,SAAQ;4BAAQuB,OAAM;sCAC/B+E,aAAa,SAAS,+BAA+B,CAAC,UAAU,EAAElK,qBAAqBkK,WAAW;6BAEnG;;qBAEJ;gBAEHF,uBACC,KAACzK;oBAAWqE,SAAQ;oBAAUuB,OAAM;8BACjC6E;qBAED;gBAEHzD,qBACC,KAACtH;oBAAM0F,UAAS;oBAAO4G,SAAS,IAAM/E,QAAQ;8BAC3CD;qBAED;gBACH5D,sBACC,KAAC1D;oBAAM0F,UAAS;oBAAQ4G,SAAS,IAAMjF,SAAS;8BAC7C3D;qBAED;;;;AAIZ"}

package/src/lib/declarations.console-server.d.ts

@@ -0,0 +1,17 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+export declare function registerMarketplaceConsoleServerDeclarations(): void;

package/src/lib/declarations.console-server.js

@@ -0,0 +1,41 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ /**
+ * The marketplace's CONSOLE-ONLY server declarations (AGL-4194), named under
+ * `consoleServerDeclarations` in `plugins.config.json` and run at the
+ * console's boot. The tenant runtime never bundles this module.
+ *
+ * - The declared-connection sync, on the console's fifteen-minute
+ *   `plugin-console-crons` tick (`server/connections/sync.ts`): it opens
+ *   each site's sealed grant with `PLUGIN_CONNECTIONS_TOKEN_KEY`, which only
+ *   the console holds. Without the key every tick returns at once.
+ *
+ * Light at boot: the job's body is imported the first time a tick runs it.
+ */ import { registerPluginConsoleCron } from "@aglyn/aglyn/plugin-manager/plugin-console-crons";
+import { BUNDLE_ID } from "./constants/bundle-common.js";
+/** The sync job's id; `sync.ts` exports the same literal. */ const CONNECTION_SYNC_JOB_ID = 'marketplace-connection-sync';
+export function registerMarketplaceConsoleServerDeclarations() {
+    registerPluginConsoleCron({
+        id: CONNECTION_SYNC_JOB_ID,
+        label: 'Plugin connection sync',
+        drives: 'Runs the scheduled fetch each installed marketplace plugin declares for its connection (Google reviews, for one) and writes the record the site’s pages show. If it stops, those pages keep showing the last record they had, which grows stale.',
+        run: async (context)=>(await import("./server/connections/sync.js")).runPluginConnectionSyncJob(context)
+    }, {
+        pluginId: BUNDLE_ID
+    });
+}
+
+//# sourceMappingURL=declarations.console-server.js.map

package/src/lib/declarations.console-server.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../libs/plugins/marketplace/src/lib/declarations.console-server.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n/**\n * The marketplace's CONSOLE-ONLY server declarations (AGL-4194), named under\n * `consoleServerDeclarations` in `plugins.config.json` and run at the\n * console's boot. The tenant runtime never bundles this module.\n *\n * - The declared-connection sync, on the console's fifteen-minute\n *   `plugin-console-crons` tick (`server/connections/sync.ts`): it opens\n *   each site's sealed grant with `PLUGIN_CONNECTIONS_TOKEN_KEY`, which only\n *   the console holds. Without the key every tick returns at once.\n *\n * Light at boot: the job's body is imported the first time a tick runs it.\n */\n\nimport { registerPluginConsoleCron } from '@aglyn/aglyn/plugin-manager/plugin-console-crons'\nimport { BUNDLE_ID } from './constants/bundle-common'\n\n/** The sync job's id; `sync.ts` exports the same literal. */\nconst CONNECTION_SYNC_JOB_ID = 'marketplace-connection-sync'\n\nexport function registerMarketplaceConsoleServerDeclarations(): void {\n  registerPluginConsoleCron(\n    {\n      id: CONNECTION_SYNC_JOB_ID,\n      label: 'Plugin connection sync',\n      drives:\n        'Runs the scheduled fetch each installed marketplace plugin declares for its connection (Google reviews, for one) and writes the record the site’s pages show. If it stops, those pages keep showing the last record they had, which grows stale.',\n      run: async (context) => (await import('./server/connections/sync')).runPluginConnectionSyncJob(context),\n    },\n    { pluginId: BUNDLE_ID },\n  )\n}\n"],"names":["registerPluginConsoleCron","BUNDLE_ID","CONNECTION_SYNC_JOB_ID","registerMarketplaceConsoleServerDeclarations","id","label","drives","run","context","runPluginConnectionSyncJob","pluginId"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED;;;;;;;;;;;CAWC,GAED,SAASA,yBAAyB,QAAQ,mDAAkD;AAC5F,SAASC,SAAS,QAAQ,+BAA2B;AAErD,2DAA2D,GAC3D,MAAMC,yBAAyB;AAE/B,OAAO,SAASC;IACdH,0BACE;QACEI,IAAIF;QACJG,OAAO;QACPC,QACE;QACFC,KAAK,OAAOC,UAAY,AAAC,CAAA,MAAM,MAAM,CAAC,+BAA2B,EAAGC,0BAA0B,CAACD;IACjG,GACA;QAAEE,UAAUT;IAAU;AAE1B"}

package/src/lib/declarations.js

@@ -16,7 +16,8 @@
  */ import { registerPluginEntitlements } from "@aglyn/aglyn/plugin-manager/plugin-entitlements";
 import { registerPluginPermissions } from "@aglyn/aglyn/plugin-manager/plugin-permissions";
 import { MARKETPLACE_PUBLISHER_PERMISSIONS } from "./model/marketplace-publisher-permissions.js";
-import { MARKETPLACE_SITE_PERMISSIONS } from "./model/marketplace-site-permissions.js";
+import { MARKETPLACE_CONNECTION_SITE_PERMISSIONS, MARKETPLACE_SITE_PERMISSIONS } from "./model/marketplace-site-permissions.js";
+import { PLUGIN_CONNECTIONS_FEATURE_DECLARATION } from "./model/plugin-connections.js";
 let declared = false;
 /**
  * The plugin's DECLARATIONS (AGL-4047): installing into a site and publishing
@@ -32,7 +33,15 @@ let declared = false;
     declared = true;
     registerPluginEntitlements({
         pluginId: 'marketplace',
-        orgPermissions: MARKETPLACE_SITE_PERMISSIONS
+        // Declared connections (AGL-4193): the site key that connects a plugin to
+        // another service, and the plan feature it rides (Starter, Pro, Custom).
+        orgPermissions: [
+            ...MARKETPLACE_SITE_PERMISSIONS,
+            ...MARKETPLACE_CONNECTION_SITE_PERMISSIONS
+        ],
+        features: [
+            PLUGIN_CONNECTIONS_FEATURE_DECLARATION
+        ]
     });
     registerPluginPermissions(MARKETPLACE_PUBLISHER_PERMISSIONS);
 }

package/src/lib/declarations.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../../../libs/plugins/marketplace/src/lib/declarations.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { registerPluginEntitlements } from '@aglyn/aglyn/plugin-manager/plugin-entitlements'\nimport { registerPluginPermissions } from '@aglyn/aglyn/plugin-manager/plugin-permissions'\nimport { MARKETPLACE_PUBLISHER_PERMISSIONS } from './model/marketplace-publisher-permissions'\nimport { MARKETPLACE_SITE_PERMISSIONS } from './model/marketplace-site-permissions'\n\nlet declared = false\n\n/**\n * The plugin's DECLARATIONS (AGL-4047): installing into a site and publishing\n * from one, and the workspace's publisher acts (its profile, its published\n * listings), which the one permission catalog lists beside the core keys.\n * Loaded eagerly by the console (client and server) and the tenant's server\n * through the generated declarations manifest, so the role editor offers\n * them, a custom role or a per-member override keeps them, and the site's\n * stamp carries them. Light by construction: nothing here reaches a\n * provider, Firestore or React.\n */\nexport function registerMarketplaceDeclarations(): void {\n  if (declared) return\n  declared = true\n  registerPluginEntitlements({ pluginId: 'marketplace', orgPermissions: MARKETPLACE_SITE_PERMISSIONS })\n  registerPluginPermissions(MARKETPLACE_PUBLISHER_PERMISSIONS)\n}\n\nregisterMarketplaceDeclarations()\n"],"names":["registerPluginEntitlements","registerPluginPermissions","MARKETPLACE_PUBLISHER_PERMISSIONS","MARKETPLACE_SITE_PERMISSIONS","declared","registerMarketplaceDeclarations","pluginId","orgPermissions"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED,SAASA,0BAA0B,QAAQ,kDAAiD;AAC5F,SAASC,yBAAyB,QAAQ,iDAAgD;AAC1F,SAASC,iCAAiC,QAAQ,+CAA2C;AAC7F,SAASC,4BAA4B,QAAQ,0CAAsC;AAEnF,IAAIC,WAAW;AAEf;;;;;;;;;CASC,GACD,OAAO,SAASC;IACd,IAAID,UAAU;IACdA,WAAW;IACXJ,2BAA2B;QAAEM,UAAU;QAAeC,gBAAgBJ;IAA6B;IACnGF,0BAA0BC;AAC5B;AAEAG"}
+{"version":3,"sources":["../../../../../../libs/plugins/marketplace/src/lib/declarations.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { registerPluginEntitlements } from '@aglyn/aglyn/plugin-manager/plugin-entitlements'\nimport { registerPluginPermissions } from '@aglyn/aglyn/plugin-manager/plugin-permissions'\nimport { MARKETPLACE_PUBLISHER_PERMISSIONS } from './model/marketplace-publisher-permissions'\nimport {\n  MARKETPLACE_CONNECTION_SITE_PERMISSIONS,\n  MARKETPLACE_SITE_PERMISSIONS,\n} from './model/marketplace-site-permissions'\nimport { PLUGIN_CONNECTIONS_FEATURE_DECLARATION } from './model/plugin-connections'\n\nlet declared = false\n\n/**\n * The plugin's DECLARATIONS (AGL-4047): installing into a site and publishing\n * from one, and the workspace's publisher acts (its profile, its published\n * listings), which the one permission catalog lists beside the core keys.\n * Loaded eagerly by the console (client and server) and the tenant's server\n * through the generated declarations manifest, so the role editor offers\n * them, a custom role or a per-member override keeps them, and the site's\n * stamp carries them. Light by construction: nothing here reaches a\n * provider, Firestore or React.\n */\nexport function registerMarketplaceDeclarations(): void {\n  if (declared) return\n  declared = true\n  registerPluginEntitlements({\n    pluginId: 'marketplace',\n    // Declared connections (AGL-4193): the site key that connects a plugin to\n    // another service, and the plan feature it rides (Starter, Pro, Custom).\n    orgPermissions: [...MARKETPLACE_SITE_PERMISSIONS, ...MARKETPLACE_CONNECTION_SITE_PERMISSIONS],\n    features: [PLUGIN_CONNECTIONS_FEATURE_DECLARATION],\n  })\n  registerPluginPermissions(MARKETPLACE_PUBLISHER_PERMISSIONS)\n}\n\nregisterMarketplaceDeclarations()\n"],"names":["registerPluginEntitlements","registerPluginPermissions","MARKETPLACE_PUBLISHER_PERMISSIONS","MARKETPLACE_CONNECTION_SITE_PERMISSIONS","MARKETPLACE_SITE_PERMISSIONS","PLUGIN_CONNECTIONS_FEATURE_DECLARATION","declared","registerMarketplaceDeclarations","pluginId","orgPermissions","features"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED,SAASA,0BAA0B,QAAQ,kDAAiD;AAC5F,SAASC,yBAAyB,QAAQ,iDAAgD;AAC1F,SAASC,iCAAiC,QAAQ,+CAA2C;AAC7F,SACEC,uCAAuC,EACvCC,4BAA4B,QACvB,0CAAsC;AAC7C,SAASC,sCAAsC,QAAQ,gCAA4B;AAEnF,IAAIC,WAAW;AAEf;;;;;;;;;CASC,GACD,OAAO,SAASC;IACd,IAAID,UAAU;IACdA,WAAW;IACXN,2BAA2B;QACzBQ,UAAU;QACV,0EAA0E;QAC1E,yEAAyE;QACzEC,gBAAgB;eAAIL;eAAiCD;SAAwC;QAC7FO,UAAU;YAACL;SAAuC;IACpD;IACAJ,0BAA0BC;AAC5B;AAEAK"}

package/src/lib/declarations.server.js

@@ -1,3 +1,4 @@
+import { _ as _extends } from "@swc/helpers/_/_extends";
 /**
  * @license
  * Copyright 2026 Aglyn LLC
@@ -15,10 +16,14 @@
  * limitations under the License.
  */ // The registry from its own module, not the plugin-manager barrel: boot needs
 // the registry and nothing else.
+import { registerVariableComputer } from "@aglyn/aglyn/plugin-manager/computed-variables";
 import { registerCustomFieldType } from "@aglyn/aglyn/plugin-manager/custom-fields";
 import { listPluginOrgErasers, registerPluginOrgEraser } from "@aglyn/aglyn/plugin-manager/plugin-org-erasure";
 import { registerPluginRevocationReader } from "@aglyn/aglyn/plugin-manager/plugin-revocations";
+import { registerPluginSiteResourceEraser } from "@aglyn/aglyn/plugin-manager/plugin-site-resources";
+import { registerPluginSiteCspSource } from "@aglyn/aglyn/plugin-manager/plugin-site-csp";
 import { registerPluginSiteStarterSource } from "@aglyn/aglyn/plugin-manager/plugin-site-starters";
+import { registerSitePageEnricherService } from "@aglyn/aglyn/plugin-manager/site-page-enricher-services";
 import { BUNDLE_ID } from "./constants/bundle-common.js";
 import { RATING_FIELD } from "./model/rating-field.js";
 /**
@@ -46,12 +51,39 @@ import { RATING_FIELD } from "./model/rating-field.js";
    */ if (!listPluginOrgErasers().includes(BUNDLE_ID)) {
         registerPluginOrgEraser(async (request)=>{
             const { createPublisherIdentityEraser } = await import("./server/publisher-erasure.js");
-            return createPublisherIdentityEraser()(request);
+            const identity = await createPublisherIdentityEraser()(request);
+            /*
+         * The OAuth app credentials the workspace's listings hold for their
+         * declared connections (AGL-4193). The erasure also sweeps them by
+         * `orgId`; deleting them here as well counts them on the audit
+         * record. Isolated from the REQUIRED identity share above: a failure
+         * here is reported as an unmeasured figure, never as that share
+         * failing.
+         */ let connectionCredentials = null;
+            try {
+                const { erasePluginConnectionCredentials } = await import("./server/connections/erasure.js");
+                connectionCredentials = Number((await erasePluginConnectionCredentials(request))['connectionCredentials']);
+            } catch (error) {
+                console.error('[marketplace] erasing plugin connection credentials failed', error);
+            }
+            return _extends({}, identity, {
+                connectionCredentials
+            });
         }, {
             pluginId: BUNDLE_ID
         });
     }
     /*
+   * A site's declared connections (AGL-4193): its grants revoked at each
+   * provider before the site's tree is deleted. Nothing is listed on the
+   * Delete site card. The Admin SDK arrives with the first delete.
+   */ registerPluginSiteResourceEraser({
+        preview: async ()=>(await import("./server/connections/erasure.js")).pluginConnectionsSiteEraser.preview(),
+        erase: async (request)=>(await import("./server/connections/erasure.js")).pluginConnectionsSiteEraser.erase(request)
+    }, {
+        pluginId: BUNDLE_ID
+    });
+    /*
    * The kill switch (`plugin-revocations`, AGL-3080): the send path asks it
    * before mailing a design installed from a listing, in whichever process
    * sends. The Admin SDK arrives with the first read.
@@ -79,6 +111,41 @@ import { RATING_FIELD } from "./model/rating-field.js";
     }, {
         pluginId: BUNDLE_ID
     });
+    registerPluginConnectionsSite();
+}
+/** The site's readers of a site's declared connections (AGL-4195), loaded with their first use. */ const siteRecords = ()=>import("./server/connections/site-records-platform.js");
+/**
+ * What a published site shows of its plugins' declared connections
+ * (AGL-4195), registered wherever these declarations run and used by the
+ * tenant's page render and policy verdict:
+ *
+ *   - the page enricher hands each signed element on the page its own
+ *     listing's connection records, server-rendered; it reads nothing on a
+ *     page without a marketplace element;
+ *   - the variable computer gives each record's declared summary fields to
+ *     the page as `{{var:…}}` values;
+ *   - the CSP source admits the image hosts the site's signed plugins
+ *     declare, on those sites only.
+ *
+ * All three go through the plugin-service registry, which `instrumentation.ts`
+ * and the page route share (a module-scope list filled at boot is empty in
+ * the route, AGL-3947), and each names this plugin as its owner, so the
+ * page's "who contributed" narrowing still holds. Registering again replaces.
+ */ function registerPluginConnectionsSite() {
+    registerSitePageEnricherService(async (context)=>(await siteRecords()).connectionRecordsEnricher(context), {
+        pluginId: BUNDLE_ID,
+        key: 'connection-records'
+    });
+    registerVariableComputer({
+        prepare: async (hostId)=>(await siteRecords()).connectionVariableComputer.prepare(hostId)
+    }, {
+        pluginId: BUNDLE_ID
+    });
+    registerPluginSiteCspSource({
+        hosts: async (input)=>(await siteRecords()).pluginImageHostsSource.hosts(input)
+    }, {
+        pluginId: BUNDLE_ID
+    });
 }
 
 //# sourceMappingURL=declarations.server.js.map

package/src/lib/declarations.server.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../../../libs/plugins/marketplace/src/lib/declarations.server.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n// The registry from its own module, not the plugin-manager barrel: boot needs\n// the registry and nothing else.\nimport { registerCustomFieldType } from '@aglyn/aglyn/plugin-manager/custom-fields'\nimport {\n  listPluginOrgErasers,\n  registerPluginOrgEraser,\n} from '@aglyn/aglyn/plugin-manager/plugin-org-erasure'\nimport { registerPluginRevocationReader } from '@aglyn/aglyn/plugin-manager/plugin-revocations'\nimport { registerPluginSiteStarterSource } from '@aglyn/aglyn/plugin-manager/plugin-site-starters'\nimport { BUNDLE_ID } from './constants/bundle-common'\nimport { RATING_FIELD } from './model/rating-field'\n\n/**\n * The marketplace plugin's server declarations: the light registrations core\n * reads at boot, before any surface loads.\n *\n * The `rating` field type's validator (AGL-434), the marketplace's share of\n * a workspace erasure, its kill switch as another plugin reads it, and the\n * site starters \"Create site\" offers (AGL-4049).\n *\n * The validator: A dataset field of this type\n * can be written by a path that never loads the marketplace — a visitor's\n * form submission and an automation step, both in the tenant (AGL-2773) — so\n * the validator registers from here, which every app runs at boot, rather\n * than only from the console API surface. Pure data: no React, no Admin SDK.\n */\nexport function registerMarketplaceServerDeclarations(): void {\n  registerCustomFieldType(RATING_FIELD)\n  /*\n   * The organization's public marketplace identity, erased with it (AGL-1970).\n   * Declared REQUIRED in `plugins.config.json`: the profile carries a payout\n   * identifier on a world-readable document, so an erasure refuses to run\n   * without this eraser rather than report a workspace erased with it\n   * standing. From here, which every app and the erasure script run at boot;\n   * the Admin SDK arrives with the first erasure, not with the boot.\n   */\n  if (!listPluginOrgErasers().includes(BUNDLE_ID)) {\n    registerPluginOrgEraser(\n      async (request) => {\n        const { createPublisherIdentityEraser } = await import('./server/publisher-erasure')\n        return createPublisherIdentityEraser()(request)\n      },\n      { pluginId: BUNDLE_ID },\n    )\n  }\n  /*\n   * The kill switch (`plugin-revocations`, AGL-3080): the send path asks it\n   * before mailing a design installed from a listing, in whichever process\n   * sends. The Admin SDK arrives with the first read.\n   */\n  registerPluginRevocationReader(\n    {\n      async revocation(listingId) {\n        const { marketplaceRevocationReader } = await import('./server/revocation-reader')\n        return marketplaceRevocationReader.revocation(listingId)\n      },\n    },\n    { pluginId: BUNDLE_ID },\n  )\n  /*\n   * Site starters (AGL-4049): \"Create site\" searches the marketplace's\n   * `siteStarter` listings and creates a site from the one picked, through\n   * core's `core.site-starters` seam. Registering reads nothing; the Admin SDK\n   * arrives with the first search, not with the boot. The same plugin\n   * registering again replaces itself, so a re-run of these declarations is\n   * safe.\n   */\n  const starters = () => import('./server/site-starter-source').then((m) => m.marketplaceSiteStarterSource)\n  registerPluginSiteStarterSource(\n    {\n      search: async (input, viewer) => (await starters()).search(input, viewer),\n      resolve: async (choice, viewer) => (await starters()).resolve(choice, viewer),\n      installed: async (choice, viewer, site) => (await starters()).installed(choice, viewer, site),\n      describe: async (choice, viewer) => (await starters()).describe(choice, viewer),\n    },\n    { pluginId: BUNDLE_ID },\n  )\n}\n"],"names":["registerCustomFieldType","listPluginOrgErasers","registerPluginOrgEraser","registerPluginRevocationReader","registerPluginSiteStarterSource","BUNDLE_ID","RATING_FIELD","registerMarketplaceServerDeclarations","includes","request","createPublisherIdentityEraser","pluginId","revocation","listingId","marketplaceRevocationReader","starters","then","m","marketplaceSiteStarterSource","search","input","viewer","resolve","choice","installed","site","describe"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED,8EAA8E;AAC9E,iCAAiC;AACjC,SAASA,uBAAuB,QAAQ,4CAA2C;AACnF,SACEC,oBAAoB,EACpBC,uBAAuB,QAClB,iDAAgD;AACvD,SAASC,8BAA8B,QAAQ,iDAAgD;AAC/F,SAASC,+BAA+B,QAAQ,mDAAkD;AAClG,SAASC,SAAS,QAAQ,+BAA2B;AACrD,SAASC,YAAY,QAAQ,0BAAsB;AAEnD;;;;;;;;;;;;;CAaC,GACD,OAAO,SAASC;IACdP,wBAAwBM;IACxB;;;;;;;GAOC,GACD,IAAI,CAACL,uBAAuBO,QAAQ,CAACH,YAAY;QAC/CH,wBACE,OAAOO;YACL,MAAM,EAAEC,6BAA6B,EAAE,GAAG,MAAM,MAAM,CAAC;YACvD,OAAOA,gCAAgCD;QACzC,GACA;YAAEE,UAAUN;QAAU;IAE1B;IACA;;;;GAIC,GACDF,+BACE;QACE,MAAMS,YAAWC,SAAS;YACxB,MAAM,EAAEC,2BAA2B,EAAE,GAAG,MAAM,MAAM,CAAC;YACrD,OAAOA,4BAA4BF,UAAU,CAACC;QAChD;IACF,GACA;QAAEF,UAAUN;IAAU;IAExB;;;;;;;GAOC,GACD,MAAMU,WAAW,IAAM,MAAM,CAAC,mCAAgCC,IAAI,CAAC,CAACC,IAAMA,EAAEC,4BAA4B;IACxGd,gCACE;QACEe,QAAQ,OAAOC,OAAOC,SAAW,AAAC,CAAA,MAAMN,UAAS,EAAGI,MAAM,CAACC,OAAOC;QAClEC,SAAS,OAAOC,QAAQF,SAAW,AAAC,CAAA,MAAMN,UAAS,EAAGO,OAAO,CAACC,QAAQF;QACtEG,WAAW,OAAOD,QAAQF,QAAQI,OAAS,AAAC,CAAA,MAAMV,UAAS,EAAGS,SAAS,CAACD,QAAQF,QAAQI;QACxFC,UAAU,OAAOH,QAAQF,SAAW,AAAC,CAAA,MAAMN,UAAS,EAAGW,QAAQ,CAACH,QAAQF;IAC1E,GACA;QAAEV,UAAUN;IAAU;AAE1B"}
+{"version":3,"sources":["../../../../../../libs/plugins/marketplace/src/lib/declarations.server.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n// The registry from its own module, not the plugin-manager barrel: boot needs\n// the registry and nothing else.\nimport { registerVariableComputer } from '@aglyn/aglyn/plugin-manager/computed-variables'\nimport { registerCustomFieldType } from '@aglyn/aglyn/plugin-manager/custom-fields'\nimport {\n  listPluginOrgErasers,\n  registerPluginOrgEraser,\n} from '@aglyn/aglyn/plugin-manager/plugin-org-erasure'\nimport { registerPluginRevocationReader } from '@aglyn/aglyn/plugin-manager/plugin-revocations'\nimport { registerPluginSiteResourceEraser } from '@aglyn/aglyn/plugin-manager/plugin-site-resources'\nimport { registerPluginSiteCspSource } from '@aglyn/aglyn/plugin-manager/plugin-site-csp'\nimport { registerPluginSiteStarterSource } from '@aglyn/aglyn/plugin-manager/plugin-site-starters'\nimport { registerSitePageEnricherService } from '@aglyn/aglyn/plugin-manager/site-page-enricher-services'\nimport { BUNDLE_ID } from './constants/bundle-common'\nimport { RATING_FIELD } from './model/rating-field'\n\n/**\n * The marketplace plugin's server declarations: the light registrations core\n * reads at boot, before any surface loads.\n *\n * The `rating` field type's validator (AGL-434), the marketplace's share of\n * a workspace erasure, its kill switch as another plugin reads it, and the\n * site starters \"Create site\" offers (AGL-4049).\n *\n * The validator: A dataset field of this type\n * can be written by a path that never loads the marketplace — a visitor's\n * form submission and an automation step, both in the tenant (AGL-2773) — so\n * the validator registers from here, which every app runs at boot, rather\n * than only from the console API surface. Pure data: no React, no Admin SDK.\n */\nexport function registerMarketplaceServerDeclarations(): void {\n  registerCustomFieldType(RATING_FIELD)\n  /*\n   * The organization's public marketplace identity, erased with it (AGL-1970).\n   * Declared REQUIRED in `plugins.config.json`: the profile carries a payout\n   * identifier on a world-readable document, so an erasure refuses to run\n   * without this eraser rather than report a workspace erased with it\n   * standing. From here, which every app and the erasure script run at boot;\n   * the Admin SDK arrives with the first erasure, not with the boot.\n   */\n  if (!listPluginOrgErasers().includes(BUNDLE_ID)) {\n    registerPluginOrgEraser(\n      async (request) => {\n        const { createPublisherIdentityEraser } = await import('./server/publisher-erasure')\n        const identity = await createPublisherIdentityEraser()(request)\n        /*\n         * The OAuth app credentials the workspace's listings hold for their\n         * declared connections (AGL-4193). The erasure also sweeps them by\n         * `orgId`; deleting them here as well counts them on the audit\n         * record. Isolated from the REQUIRED identity share above: a failure\n         * here is reported as an unmeasured figure, never as that share\n         * failing.\n         */\n        let connectionCredentials: number | null = null\n        try {\n          const { erasePluginConnectionCredentials } = await import('./server/connections/erasure')\n          connectionCredentials = Number((await erasePluginConnectionCredentials(request))['connectionCredentials'])\n        } catch (error) {\n          console.error('[marketplace] erasing plugin connection credentials failed', error)\n        }\n        return { ...identity, connectionCredentials }\n      },\n      { pluginId: BUNDLE_ID },\n    )\n  }\n  /*\n   * A site's declared connections (AGL-4193): its grants revoked at each\n   * provider before the site's tree is deleted. Nothing is listed on the\n   * Delete site card. The Admin SDK arrives with the first delete.\n   */\n  registerPluginSiteResourceEraser(\n    {\n      preview: async () => (await import('./server/connections/erasure')).pluginConnectionsSiteEraser.preview(),\n      erase: async (request) => (await import('./server/connections/erasure')).pluginConnectionsSiteEraser.erase(request),\n    },\n    { pluginId: BUNDLE_ID },\n  )\n  /*\n   * The kill switch (`plugin-revocations`, AGL-3080): the send path asks it\n   * before mailing a design installed from a listing, in whichever process\n   * sends. The Admin SDK arrives with the first read.\n   */\n  registerPluginRevocationReader(\n    {\n      async revocation(listingId) {\n        const { marketplaceRevocationReader } = await import('./server/revocation-reader')\n        return marketplaceRevocationReader.revocation(listingId)\n      },\n    },\n    { pluginId: BUNDLE_ID },\n  )\n  /*\n   * Site starters (AGL-4049): \"Create site\" searches the marketplace's\n   * `siteStarter` listings and creates a site from the one picked, through\n   * core's `core.site-starters` seam. Registering reads nothing; the Admin SDK\n   * arrives with the first search, not with the boot. The same plugin\n   * registering again replaces itself, so a re-run of these declarations is\n   * safe.\n   */\n  const starters = () => import('./server/site-starter-source').then((m) => m.marketplaceSiteStarterSource)\n  registerPluginSiteStarterSource(\n    {\n      search: async (input, viewer) => (await starters()).search(input, viewer),\n      resolve: async (choice, viewer) => (await starters()).resolve(choice, viewer),\n      installed: async (choice, viewer, site) => (await starters()).installed(choice, viewer, site),\n      describe: async (choice, viewer) => (await starters()).describe(choice, viewer),\n    },\n    { pluginId: BUNDLE_ID },\n  )\n  registerPluginConnectionsSite()\n}\n\n/** The site's readers of a site's declared connections (AGL-4195), loaded with their first use. */\nconst siteRecords = () => import('./server/connections/site-records-platform')\n\n/**\n * What a published site shows of its plugins' declared connections\n * (AGL-4195), registered wherever these declarations run and used by the\n * tenant's page render and policy verdict:\n *\n *   - the page enricher hands each signed element on the page its own\n *     listing's connection records, server-rendered; it reads nothing on a\n *     page without a marketplace element;\n *   - the variable computer gives each record's declared summary fields to\n *     the page as `{{var:…}}` values;\n *   - the CSP source admits the image hosts the site's signed plugins\n *     declare, on those sites only.\n *\n * All three go through the plugin-service registry, which `instrumentation.ts`\n * and the page route share (a module-scope list filled at boot is empty in\n * the route, AGL-3947), and each names this plugin as its owner, so the\n * page's \"who contributed\" narrowing still holds. Registering again replaces.\n */\nfunction registerPluginConnectionsSite(): void {\n  registerSitePageEnricherService(\n    async (context) => (await siteRecords()).connectionRecordsEnricher(context),\n    { pluginId: BUNDLE_ID, key: 'connection-records' },\n  )\n  registerVariableComputer(\n    { prepare: async (hostId) => (await siteRecords()).connectionVariableComputer.prepare(hostId) },\n    { pluginId: BUNDLE_ID },\n  )\n  registerPluginSiteCspSource(\n    { hosts: async (input) => (await siteRecords()).pluginImageHostsSource.hosts(input) },\n    { pluginId: BUNDLE_ID },\n  )\n}\n"],"names":["registerVariableComputer","registerCustomFieldType","listPluginOrgErasers","registerPluginOrgEraser","registerPluginRevocationReader","registerPluginSiteResourceEraser","registerPluginSiteCspSource","registerPluginSiteStarterSource","registerSitePageEnricherService","BUNDLE_ID","RATING_FIELD","registerMarketplaceServerDeclarations","includes","request","createPublisherIdentityEraser","identity","connectionCredentials","erasePluginConnectionCredentials","Number","error","console","pluginId","preview","pluginConnectionsSiteEraser","erase","revocation","listingId","marketplaceRevocationReader","starters","then","m","marketplaceSiteStarterSource","search","input","viewer","resolve","choice","installed","site","describe","registerPluginConnectionsSite","siteRecords","context","connectionRecordsEnricher","key","prepare","hostId","connectionVariableComputer","hosts","pluginImageHostsSource"],"mappings":";AAAA;;;;;;;;;;;;;;;CAeC,GAED,8EAA8E;AAC9E,iCAAiC;AACjC,SAASA,wBAAwB,QAAQ,iDAAgD;AACzF,SAASC,uBAAuB,QAAQ,4CAA2C;AACnF,SACEC,oBAAoB,EACpBC,uBAAuB,QAClB,iDAAgD;AACvD,SAASC,8BAA8B,QAAQ,iDAAgD;AAC/F,SAASC,gCAAgC,QAAQ,oDAAmD;AACpG,SAASC,2BAA2B,QAAQ,8CAA6C;AACzF,SAASC,+BAA+B,QAAQ,mDAAkD;AAClG,SAASC,+BAA+B,QAAQ,0DAAyD;AACzG,SAASC,SAAS,QAAQ,+BAA2B;AACrD,SAASC,YAAY,QAAQ,0BAAsB;AAEnD;;;;;;;;;;;;;CAaC,GACD,OAAO,SAASC;IACdV,wBAAwBS;IACxB;;;;;;;GAOC,GACD,IAAI,CAACR,uBAAuBU,QAAQ,CAACH,YAAY;QAC/CN,wBACE,OAAOU;YACL,MAAM,EAAEC,6BAA6B,EAAE,GAAG,MAAM,MAAM,CAAC;YACvD,MAAMC,WAAW,MAAMD,gCAAgCD;YACvD;;;;;;;SAOC,GACD,IAAIG,wBAAuC;YAC3C,IAAI;gBACF,MAAM,EAAEC,gCAAgC,EAAE,GAAG,MAAM,MAAM,CAAC;gBAC1DD,wBAAwBE,OAAO,AAAC,CAAA,MAAMD,iCAAiCJ,QAAO,CAAE,CAAC,wBAAwB;YAC3G,EAAE,OAAOM,OAAO;gBACdC,QAAQD,KAAK,CAAC,8DAA8DA;YAC9E;YACA,OAAO,aAAKJ;gBAAUC;;QACxB,GACA;YAAEK,UAAUZ;QAAU;IAE1B;IACA;;;;GAIC,GACDJ,iCACE;QACEiB,SAAS,UAAY,AAAC,CAAA,MAAM,MAAM,CAAC,kCAA8B,EAAGC,2BAA2B,CAACD,OAAO;QACvGE,OAAO,OAAOX,UAAY,AAAC,CAAA,MAAM,MAAM,CAAC,kCAA8B,EAAGU,2BAA2B,CAACC,KAAK,CAACX;IAC7G,GACA;QAAEQ,UAAUZ;IAAU;IAExB;;;;GAIC,GACDL,+BACE;QACE,MAAMqB,YAAWC,SAAS;YACxB,MAAM,EAAEC,2BAA2B,EAAE,GAAG,MAAM,MAAM,CAAC;YACrD,OAAOA,4BAA4BF,UAAU,CAACC;QAChD;IACF,GACA;QAAEL,UAAUZ;IAAU;IAExB;;;;;;;GAOC,GACD,MAAMmB,WAAW,IAAM,MAAM,CAAC,mCAAgCC,IAAI,CAAC,CAACC,IAAMA,EAAEC,4BAA4B;IACxGxB,gCACE;QACEyB,QAAQ,OAAOC,OAAOC,SAAW,AAAC,CAAA,MAAMN,UAAS,EAAGI,MAAM,CAACC,OAAOC;QAClEC,SAAS,OAAOC,QAAQF,SAAW,AAAC,CAAA,MAAMN,UAAS,EAAGO,OAAO,CAACC,QAAQF;QACtEG,WAAW,OAAOD,QAAQF,QAAQI,OAAS,AAAC,CAAA,MAAMV,UAAS,EAAGS,SAAS,CAACD,QAAQF,QAAQI;QACxFC,UAAU,OAAOH,QAAQF,SAAW,AAAC,CAAA,MAAMN,UAAS,EAAGW,QAAQ,CAACH,QAAQF;IAC1E,GACA;QAAEb,UAAUZ;IAAU;IAExB+B;AACF;AAEA,iGAAiG,GACjG,MAAMC,cAAc,IAAM,MAAM,CAAC;AAEjC;;;;;;;;;;;;;;;;;CAiBC,GACD,SAASD;IACPhC,gCACE,OAAOkC,UAAY,AAAC,CAAA,MAAMD,aAAY,EAAGE,yBAAyB,CAACD,UACnE;QAAErB,UAAUZ;QAAWmC,KAAK;IAAqB;IAEnD5C,yBACE;QAAE6C,SAAS,OAAOC,SAAW,AAAC,CAAA,MAAML,aAAY,EAAGM,0BAA0B,CAACF,OAAO,CAACC;IAAQ,GAC9F;QAAEzB,UAAUZ;IAAU;IAExBH,4BACE;QAAE0C,OAAO,OAAOf,QAAU,AAAC,CAAA,MAAMQ,aAAY,EAAGQ,sBAAsB,CAACD,KAAK,CAACf;IAAO,GACpF;QAAEZ,UAAUZ;IAAU;AAE1B"}

package/src/lib/hooks/use-plugin-connections-api.d.ts

@@ -0,0 +1,89 @@
+import type { PluginConnectionCardView } from '../model/plugin-connection-card';
+import { type PluginConnectionCredentialsStatus, type PluginConnectionStatusEntry } from '../model/plugin-connections';
+/** Why a connection route refused, as the routes name it. */
+export type PluginConnectionRefusal = 'permission' | 'plan' | 'credentials' | 'not-connected' | 'reconnect' | 'provider' | 'choose-first' | 'no-sync' | 'too-soon';
+/** A route's refusal: its own sentence, its HTTP status and, when it says, why. */
+export declare class PluginConnectionRouteError extends Error {
+    readonly status: number;
+    readonly reason: PluginConnectionRefusal | null;
+    /** The rest of the refusal's JSON: `retryAfterMs` and the view on a `too-soon`. */
+    readonly body: Readonly<Record<string, unknown>>;
+    constructor(message: string, status: number, reason: PluginConnectionRefusal | null, 
+    /** The rest of the refusal's JSON: `retryAfterMs` and the view on a `too-soon`. */
+    body?: Readonly<Record<string, unknown>>);
+}
+export interface PluginConnectionsStatusAnswer {
+    configured: boolean;
+    planAllows: boolean;
+    connections: PluginConnectionStatusEntry[];
+}
+export interface PluginConnectionCredentialsAnswer {
+    configured: boolean;
+    credentials: PluginConnectionCredentialsStatus[];
+}
+/** The site's connection routes, for one site. */
+export interface PluginConnectionsApi {
+    status(listingId: string): Promise<PluginConnectionsStatusAnswer>;
+    connectStart(input: {
+        listingId: string;
+        connectionId: string;
+        returnTo: string;
+    }): Promise<{
+        authorizeUrl: string;
+    }>;
+    resources(input: {
+        listingId: string;
+        connectionId: string;
+        resource: string;
+    }): Promise<{
+        items: Array<{
+            id: string;
+            label: string;
+        }>;
+    }>;
+    choose(input: {
+        listingId: string;
+        connectionId: string;
+        resource: string;
+        id: string;
+    }): Promise<{
+        connection: PluginConnectionCardView | null;
+    }>;
+    sync(input: {
+        listingId: string;
+        connectionId: string;
+    }): Promise<{
+        connection: PluginConnectionCardView | null;
+        synced: boolean;
+    }>;
+    disconnect(input: {
+        listingId: string;
+        connectionId: string;
+    }): Promise<{
+        connection: null;
+    }>;
+}
+/** A listing's OAuth app credentials, for its publisher. */
+export interface PluginConnectionCredentialsApi {
+    read(listingId: string): Promise<PluginConnectionCredentialsAnswer>;
+    save(input: {
+        listingId: string;
+        connectionId: string;
+        clientId: string;
+        clientSecret: string;
+    }): Promise<PluginConnectionCredentialsAnswer>;
+    clear(input: {
+        listingId: string;
+        connectionId: string;
+    }): Promise<PluginConnectionCredentialsAnswer>;
+}
+/** One call to a connection route: the answer, or the route's refusal as a {@link PluginConnectionRouteError}. */
+export declare function callPluginConnectionsRoute<T>(user: unknown, path: string, init: {
+    method: 'GET' | 'POST';
+    query?: Record<string, string>;
+    body?: Record<string, unknown>;
+}): Promise<T>;
+/** The connection routes for one site, as the signed-in member. */
+export declare function usePluginConnectionsApi(hostId: string): PluginConnectionsApi;
+/** A listing's credentials routes, as the signed-in member. */
+export declare function usePluginConnectionCredentialsApi(): PluginConnectionCredentialsApi;

package/src/lib/hooks/use-plugin-connections-api.js

@@ -0,0 +1,132 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ 'use client';
+import { _ as _extends } from "@swc/helpers/_/_extends";
+import { authorizedFetch } from "@aglyn/shared-util-http/authorized-token";
+import { useUser } from "@aglyn/tenant-feature-instance";
+import { useMemo } from "react";
+import { PLUGIN_CONNECTIONS_API_ROUTES } from "../model/plugin-connections.js";
+/** A route's refusal: its own sentence, its HTTP status and, when it says, why. */ export class PluginConnectionRouteError extends Error {
+    constructor(message, status, reason, /** The rest of the refusal's JSON: `retryAfterMs` and the view on a `too-soon`. */ body = {}){
+        super(message), this.status = status, this.reason = reason, this.body = body;
+        this.name = 'PluginConnectionRouteError';
+    }
+}
+const FALLBACK = 'That did not work. Try again.';
+const REASONS = new Set([
+    'permission',
+    'plan',
+    'credentials',
+    'not-connected',
+    'reconnect',
+    'provider',
+    'choose-first',
+    'no-sync',
+    'too-soon'
+]);
+/** One call to a connection route: the answer, or the route's refusal as a {@link PluginConnectionRouteError}. */ export async function callPluginConnectionsRoute(user, path, init) {
+    const search = init.query ? `?${new URLSearchParams(init.query).toString()}` : '';
+    let response;
+    try {
+        response = await authorizedFetch(user, `/api/${path}${search}`, _extends({
+            method: init.method
+        }, init.body ? {
+            headers: {
+                'Content-Type': 'application/json'
+            },
+            body: JSON.stringify(init.body)
+        } : {}));
+    } catch (unused) {
+        throw new PluginConnectionRouteError(FALLBACK, 0, null);
+    }
+    const data = await response.json().catch(()=>null);
+    if (!response.ok) {
+        const reason = typeof (data == null ? void 0 : data.reason) === 'string' && REASONS.has(data.reason) ? data.reason : null;
+        const message = typeof (data == null ? void 0 : data.error) === 'string' && data.error ? data.error : FALLBACK;
+        throw new PluginConnectionRouteError(message, response.status, reason, data != null ? data : {});
+    }
+    return data != null ? data : {};
+}
+/** The connection routes for one site, as the signed-in member. */ export function usePluginConnectionsApi(hostId) {
+    const { data: user } = useUser();
+    return useMemo(()=>({
+            status: (listingId)=>callPluginConnectionsRoute(user, PLUGIN_CONNECTIONS_API_ROUTES.status, {
+                    method: 'GET',
+                    query: {
+                        hostId,
+                        listingId
+                    }
+                }),
+            connectStart: (input)=>callPluginConnectionsRoute(user, PLUGIN_CONNECTIONS_API_ROUTES.connectStart, {
+                    method: 'POST',
+                    body: _extends({
+                        hostId
+                    }, input)
+                }),
+            resources: (input)=>callPluginConnectionsRoute(user, PLUGIN_CONNECTIONS_API_ROUTES.resources, {
+                    method: 'GET',
+                    query: _extends({
+                        hostId
+                    }, input)
+                }),
+            choose: (input)=>callPluginConnectionsRoute(user, PLUGIN_CONNECTIONS_API_ROUTES.choose, {
+                    method: 'POST',
+                    body: _extends({
+                        hostId
+                    }, input)
+                }),
+            sync: (input)=>callPluginConnectionsRoute(user, PLUGIN_CONNECTIONS_API_ROUTES.sync, {
+                    method: 'POST',
+                    body: _extends({
+                        hostId
+                    }, input)
+                }),
+            disconnect: (input)=>callPluginConnectionsRoute(user, PLUGIN_CONNECTIONS_API_ROUTES.disconnect, {
+                    method: 'POST',
+                    body: _extends({
+                        hostId
+                    }, input)
+                })
+        }), [
+        user,
+        hostId
+    ]);
+}
+/** A listing's credentials routes, as the signed-in member. */ export function usePluginConnectionCredentialsApi() {
+    const { data: user } = useUser();
+    return useMemo(()=>({
+            read: (listingId)=>callPluginConnectionsRoute(user, PLUGIN_CONNECTIONS_API_ROUTES.credentials, {
+                    method: 'GET',
+                    query: {
+                        listingId
+                    }
+                }),
+            save: (input)=>callPluginConnectionsRoute(user, PLUGIN_CONNECTIONS_API_ROUTES.credentials, {
+                    method: 'POST',
+                    body: _extends({}, input)
+                }),
+            clear: (input)=>callPluginConnectionsRoute(user, PLUGIN_CONNECTIONS_API_ROUTES.credentials, {
+                    method: 'POST',
+                    body: _extends({}, input, {
+                        clear: true
+                    })
+                })
+        }), [
+        user
+    ]);
+}
+
+//# sourceMappingURL=use-plugin-connections-api.js.map

package/src/lib/hooks/use-plugin-connections-api.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../libs/plugins/marketplace/src/lib/hooks/use-plugin-connections-api.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n'use client'\n\nimport { authorizedFetch } from '@aglyn/shared-util-http/authorized-token'\nimport { useUser } from '@aglyn/tenant-feature-instance'\nimport { useMemo } from 'react'\nimport type { PluginConnectionCardView } from '../model/plugin-connection-card'\nimport {\n  PLUGIN_CONNECTIONS_API_ROUTES,\n  type PluginConnectionCredentialsStatus,\n  type PluginConnectionStatusEntry,\n} from '../model/plugin-connections'\n\n/** Why a connection route refused, as the routes name it. */\nexport type PluginConnectionRefusal =\n  | 'permission'\n  | 'plan'\n  | 'credentials'\n  | 'not-connected'\n  | 'reconnect'\n  | 'provider'\n  | 'choose-first'\n  | 'no-sync'\n  | 'too-soon'\n\n/** A route's refusal: its own sentence, its HTTP status and, when it says, why. */\nexport class PluginConnectionRouteError extends Error {\n  constructor(\n    message: string,\n    readonly status: number,\n    readonly reason: PluginConnectionRefusal | null,\n    /** The rest of the refusal's JSON: `retryAfterMs` and the view on a `too-soon`. */\n    readonly body: Readonly<Record<string, unknown>> = {},\n  ) {\n    super(message)\n    this.name = 'PluginConnectionRouteError'\n  }\n}\n\nexport interface PluginConnectionsStatusAnswer {\n  configured: boolean\n  planAllows: boolean\n  connections: PluginConnectionStatusEntry[]\n}\n\nexport interface PluginConnectionCredentialsAnswer {\n  configured: boolean\n  credentials: PluginConnectionCredentialsStatus[]\n}\n\n/** The site's connection routes, for one site. */\nexport interface PluginConnectionsApi {\n  status(listingId: string): Promise<PluginConnectionsStatusAnswer>\n  connectStart(input: { listingId: string; connectionId: string; returnTo: string }): Promise<{ authorizeUrl: string }>\n  resources(input: { listingId: string; connectionId: string; resource: string }): Promise<{ items: Array<{ id: string; label: string }> }>\n  choose(input: { listingId: string; connectionId: string; resource: string; id: string }): Promise<{ connection: PluginConnectionCardView | null }>\n  sync(input: { listingId: string; connectionId: string }): Promise<{ connection: PluginConnectionCardView | null; synced: boolean }>\n  disconnect(input: { listingId: string; connectionId: string }): Promise<{ connection: null }>\n}\n\n/** A listing's OAuth app credentials, for its publisher. */\nexport interface PluginConnectionCredentialsApi {\n  read(listingId: string): Promise<PluginConnectionCredentialsAnswer>\n  save(input: { listingId: string; connectionId: string; clientId: string; clientSecret: string }): Promise<PluginConnectionCredentialsAnswer>\n  clear(input: { listingId: string; connectionId: string }): Promise<PluginConnectionCredentialsAnswer>\n}\n\nconst FALLBACK = 'That did not work. Try again.'\nconst REASONS: ReadonlySet<string> = new Set([\n  'permission',\n  'plan',\n  'credentials',\n  'not-connected',\n  'reconnect',\n  'provider',\n  'choose-first',\n  'no-sync',\n  'too-soon',\n])\n\n/** One call to a connection route: the answer, or the route's refusal as a {@link PluginConnectionRouteError}. */\nexport async function callPluginConnectionsRoute<T>(\n  user: unknown,\n  path: string,\n  init: { method: 'GET' | 'POST'; query?: Record<string, string>; body?: Record<string, unknown> },\n): Promise<T> {\n  const search = init.query ? `?${new URLSearchParams(init.query).toString()}` : ''\n  let response: Response\n  try {\n    response = await authorizedFetch(user as never, `/api/${path}${search}`, {\n      method: init.method,\n      ...(init.body\n        ? { headers: { 'Content-Type': 'application/json' }, body: JSON.stringify(init.body) }\n        : {}),\n    })\n  } catch {\n    throw new PluginConnectionRouteError(FALLBACK, 0, null)\n  }\n  const data = (await response.json().catch(() => null)) as (Record<string, unknown> & { error?: unknown; reason?: unknown }) | null\n  if (!response.ok) {\n    const reason = typeof data?.reason === 'string' && REASONS.has(data.reason) ? (data.reason as PluginConnectionRefusal) : null\n    const message = typeof data?.error === 'string' && data.error ? data.error : FALLBACK\n    throw new PluginConnectionRouteError(message, response.status, reason, data ?? {})\n  }\n  return (data ?? {}) as T\n}\n\n/** The connection routes for one site, as the signed-in member. */\nexport function usePluginConnectionsApi(hostId: string): PluginConnectionsApi {\n  const { data: user } = useUser()\n  return useMemo<PluginConnectionsApi>(\n    () => ({\n      status: (listingId) =>\n        callPluginConnectionsRoute(user, PLUGIN_CONNECTIONS_API_ROUTES.status, { method: 'GET', query: { hostId, listingId } }),\n      connectStart: (input) =>\n        callPluginConnectionsRoute(user, PLUGIN_CONNECTIONS_API_ROUTES.connectStart, { method: 'POST', body: { hostId, ...input } }),\n      resources: (input) =>\n        callPluginConnectionsRoute(user, PLUGIN_CONNECTIONS_API_ROUTES.resources, { method: 'GET', query: { hostId, ...input } }),\n      choose: (input) =>\n        callPluginConnectionsRoute(user, PLUGIN_CONNECTIONS_API_ROUTES.choose, { method: 'POST', body: { hostId, ...input } }),\n      sync: (input) =>\n        callPluginConnectionsRoute(user, PLUGIN_CONNECTIONS_API_ROUTES.sync, { method: 'POST', body: { hostId, ...input } }),\n      disconnect: (input) =>\n        callPluginConnectionsRoute(user, PLUGIN_CONNECTIONS_API_ROUTES.disconnect, { method: 'POST', body: { hostId, ...input } }),\n    }),\n    [user, hostId],\n  )\n}\n\n/** A listing's credentials routes, as the signed-in member. */\nexport function usePluginConnectionCredentialsApi(): PluginConnectionCredentialsApi {\n  const { data: user } = useUser()\n  return useMemo<PluginConnectionCredentialsApi>(\n    () => ({\n      read: (listingId) =>\n        callPluginConnectionsRoute(user, PLUGIN_CONNECTIONS_API_ROUTES.credentials, { method: 'GET', query: { listingId } }),\n      save: (input) =>\n        callPluginConnectionsRoute(user, PLUGIN_CONNECTIONS_API_ROUTES.credentials, { method: 'POST', body: { ...input } }),\n      clear: (input) =>\n        callPluginConnectionsRoute(user, PLUGIN_CONNECTIONS_API_ROUTES.credentials, {\n          method: 'POST',\n          body: { ...input, clear: true },\n        }),\n    }),\n    [user],\n  )\n}\n"],"names":["authorizedFetch","useUser","useMemo","PLUGIN_CONNECTIONS_API_ROUTES","PluginConnectionRouteError","Error","message","status","reason","body","name","FALLBACK","REASONS","Set","callPluginConnectionsRoute","user","path","init","search","query","URLSearchParams","toString","response","method","headers","JSON","stringify","data","json","catch","ok","has","error","usePluginConnectionsApi","hostId","listingId","connectStart","input","resources","choose","sync","disconnect","usePluginConnectionCredentialsApi","read","credentials","save","clear"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GACD;;AAEA,SAASA,eAAe,QAAQ,2CAA0C;AAC1E,SAASC,OAAO,QAAQ,iCAAgC;AACxD,SAASC,OAAO,QAAQ,QAAO;AAE/B,SACEC,6BAA6B,QAGxB,iCAA6B;AAcpC,iFAAiF,GACjF,OAAO,MAAMC,mCAAmCC;IAC9C,YACEC,OAAe,EACf,AAASC,MAAc,EACvB,AAASC,MAAsC,EAC/C,iFAAiF,GACjF,AAASC,OAA0C,CAAC,CAAC,CACrD;QACA,KAAK,CAACH,eALGC,SAAAA,aACAC,SAAAA,aAEAC,OAAAA;QAGT,IAAI,CAACC,IAAI,GAAG;IACd;AACF;AA8BA,MAAMC,WAAW;AACjB,MAAMC,UAA+B,IAAIC,IAAI;IAC3C;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;CACD;AAED,gHAAgH,GAChH,OAAO,eAAeC,2BACpBC,IAAa,EACbC,IAAY,EACZC,IAAgG;IAEhG,MAAMC,SAASD,KAAKE,KAAK,GAAG,CAAC,CAAC,EAAE,IAAIC,gBAAgBH,KAAKE,KAAK,EAAEE,QAAQ,IAAI,GAAG;IAC/E,IAAIC;IACJ,IAAI;QACFA,WAAW,MAAMtB,gBAAgBe,MAAe,CAAC,KAAK,EAAEC,OAAOE,QAAQ,EAAE;YACvEK,QAAQN,KAAKM,MAAM;WACfN,KAAKR,IAAI,GACT;YAAEe,SAAS;gBAAE,gBAAgB;YAAmB;YAAGf,MAAMgB,KAAKC,SAAS,CAACT,KAAKR,IAAI;QAAE,IACnF,CAAC;IAET,EAAE,eAAM;QACN,MAAM,IAAIL,2BAA2BO,UAAU,GAAG;IACpD;IACA,MAAMgB,OAAQ,MAAML,SAASM,IAAI,GAAGC,KAAK,CAAC,IAAM;IAChD,IAAI,CAACP,SAASQ,EAAE,EAAE;QAChB,MAAMtB,SAAS,QAAOmB,wBAAAA,KAAMnB,MAAM,MAAK,YAAYI,QAAQmB,GAAG,CAACJ,KAAKnB,MAAM,IAAKmB,KAAKnB,MAAM,GAA+B;QACzH,MAAMF,UAAU,QAAOqB,wBAAAA,KAAMK,KAAK,MAAK,YAAYL,KAAKK,KAAK,GAAGL,KAAKK,KAAK,GAAGrB;QAC7E,MAAM,IAAIP,2BAA2BE,SAASgB,SAASf,MAAM,EAAEC,QAAQmB,eAAAA,OAAQ,CAAC;IAClF;IACA,OAAQA,eAAAA,OAAQ,CAAC;AACnB;AAEA,iEAAiE,GACjE,OAAO,SAASM,wBAAwBC,MAAc;IACpD,MAAM,EAAEP,MAAMZ,IAAI,EAAE,GAAGd;IACvB,OAAOC,QACL,IAAO,CAAA;YACLK,QAAQ,CAAC4B,YACPrB,2BAA2BC,MAAMZ,8BAA8BI,MAAM,EAAE;oBAAEgB,QAAQ;oBAAOJ,OAAO;wBAAEe;wBAAQC;oBAAU;gBAAE;YACvHC,cAAc,CAACC,QACbvB,2BAA2BC,MAAMZ,8BAA8BiC,YAAY,EAAE;oBAAEb,QAAQ;oBAAQd,MAAM;wBAAEyB;uBAAWG;gBAAQ;YAC5HC,WAAW,CAACD,QACVvB,2BAA2BC,MAAMZ,8BAA8BmC,SAAS,EAAE;oBAAEf,QAAQ;oBAAOJ,OAAO;wBAAEe;uBAAWG;gBAAQ;YACzHE,QAAQ,CAACF,QACPvB,2BAA2BC,MAAMZ,8BAA8BoC,MAAM,EAAE;oBAAEhB,QAAQ;oBAAQd,MAAM;wBAAEyB;uBAAWG;gBAAQ;YACtHG,MAAM,CAACH,QACLvB,2BAA2BC,MAAMZ,8BAA8BqC,IAAI,EAAE;oBAAEjB,QAAQ;oBAAQd,MAAM;wBAAEyB;uBAAWG;gBAAQ;YACpHI,YAAY,CAACJ,QACXvB,2BAA2BC,MAAMZ,8BAA8BsC,UAAU,EAAE;oBAAElB,QAAQ;oBAAQd,MAAM;wBAAEyB;uBAAWG;gBAAQ;QAC5H,CAAA,GACA;QAACtB;QAAMmB;KAAO;AAElB;AAEA,6DAA6D,GAC7D,OAAO,SAASQ;IACd,MAAM,EAAEf,MAAMZ,IAAI,EAAE,GAAGd;IACvB,OAAOC,QACL,IAAO,CAAA;YACLyC,MAAM,CAACR,YACLrB,2BAA2BC,MAAMZ,8BAA8ByC,WAAW,EAAE;oBAAErB,QAAQ;oBAAOJ,OAAO;wBAAEgB;oBAAU;gBAAE;YACpHU,MAAM,CAACR,QACLvB,2BAA2BC,MAAMZ,8BAA8ByC,WAAW,EAAE;oBAAErB,QAAQ;oBAAQd,MAAM,aAAK4B;gBAAQ;YACnHS,OAAO,CAACT,QACNvB,2BAA2BC,MAAMZ,8BAA8ByC,WAAW,EAAE;oBAC1ErB,QAAQ;oBACRd,MAAM,aAAK4B;wBAAOS,OAAO;;gBAC3B;QACJ,CAAA,GACA;QAAC/B;KAAK;AAEV"}