@aglyn/plugins-marketplace 1.15.0 → 1.15.2

package/README.md

@@ -20,6 +20,7 @@ Peer dependencies: `react`, `@mui/material`, `firebase`, `next`, and `firebase-a
 - `orgPluginInstalls`: the workspace's installed marketplace plugins, on its Plugins page.
 - `pluginInstallStatus`: whether an installation runs the newest installable version, on its installation page.
 - `pluginSiteSet`: which sites one installation applies to.
+- `sitePluginConnections`: a site's connections to the services an installed plugin's manifest declares (connect, choose, sync, disconnect), on the site's page for that plugin.
 - `staffOverview`: recent purchases and the refund-reversal recovery queue, on the staff overview.
 - `templateGallery`: the "Marketplace templates" shelf of a site's template gallery, installing through `install-template`.
 - `templateInstallStatus`: "Update available" on a library row whose template it installed, re-installing through `install-template`.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aglyn/plugins-marketplace",
-  "version": "1.15.0",
+  "version": "1.15.2",
   "license": "Apache-2.0",
   "homepage": "https://aglyn.com",
   "repository": {
@@ -25,19 +25,20 @@
     "./package.json": "./package.json"
   },
   "dependencies": {
-    "@aglyn/aglyn": "1.15.0",
-    "@aglyn/aglyn-markdown-editor": "1.15.0",
-    "@aglyn/shared-data-enums": "1.15.0",
-    "@aglyn/shared-data-mdi": "1.15.0",
-    "@aglyn/shared-ui-jsx": "1.15.0",
-    "@aglyn/shared-ui-next": "1.15.0",
-    "@aglyn/shared-ui-snackstack": "1.15.0",
-    "@aglyn/shared-util-email": "1.15.0",
-    "@aglyn/shared-util-http": "1.15.0",
-    "@aglyn/shared-util-timestamp": "1.15.0",
-    "@aglyn/tenant-data-admin": "1.15.0",
-    "@aglyn/tenant-feature-instance": "1.15.0",
-    "@aglyn/tenant-runtime": "1.15.0",
+    "@aglyn/aglyn": "1.15.2",
+    "@aglyn/aglyn-markdown-editor": "1.15.2",
+    "@aglyn/shared-data-enums": "1.15.2",
+    "@aglyn/shared-data-mdi": "1.15.2",
+    "@aglyn/shared-ui-jsx": "1.15.2",
+    "@aglyn/shared-ui-next": "1.15.2",
+    "@aglyn/shared-ui-snackstack": "1.15.2",
+    "@aglyn/shared-util-email": "1.15.2",
+    "@aglyn/shared-util-http": "1.15.2",
+    "@aglyn/shared-util-timestamp": "1.15.2",
+    "@aglyn/shared-util-tools": "1.15.2",
+    "@aglyn/tenant-data-admin": "1.15.2",
+    "@aglyn/tenant-feature-instance": "1.15.2",
+    "@aglyn/tenant-runtime": "1.15.2",
     "@swc/helpers": "0.5.23"
   },
   "peerDependencies": {

package/src/lib/components/editor-connections-provider.component.d.ts

@@ -0,0 +1,37 @@
+import { type EditorPluginConnections } from '@aglyn/aglyn/app-utils/plugin-connection-editor';
+import { type Firestore } from 'firebase/firestore';
+import { type ReactNode } from 'react';
+export interface EditorConnectionsProviderProps {
+    orgId?: string | null;
+    hostId?: string | null;
+    children?: ReactNode;
+    /** Test seam: the console path. */
+    pathname?: string;
+    /** Test seam: reads the site's realm installs, pins and records. */
+    load?: (input: {
+        orgId: string;
+        hostId: string;
+    }) => Promise<EditorPluginConnections | undefined>;
+}
+type Fetcher = (path: string) => Promise<Response>;
+/** Everything the editor is handed for one site, read once. */
+export declare function loadEditorPluginConnections(deps: {
+    firestore: Firestore;
+    fetcher: Fetcher;
+}, input: {
+    orgId: string;
+    hostId: string;
+}): Promise<EditorPluginConnections | undefined>;
+/**
+ * The site's declared connections, for the editor (AGL-4196): registered as a
+ * console provider, active only on the Besigner and Preview, where the
+ * canvas hands each signed element its record and the binding picker lists
+ * each record's fields by name. A refusal (no site key, no plan) or a failed
+ * read leaves the context empty: elements read `null`, as on a site that has
+ * not connected.
+ */
+export declare function EditorConnectionsProvider(props: EditorConnectionsProviderProps): import("react").JSX.Element;
+export declare namespace EditorConnectionsProvider {
+    var displayName: string;
+}
+export default EditorConnectionsProvider;

package/src/lib/components/editor-connections-provider.component.js

@@ -0,0 +1,161 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ 'use client';
+import { jsx as _jsx } from "react/jsx-runtime";
+import { EditorPluginConnectionsContext } from "@aglyn/aglyn/app-utils/plugin-connection-editor";
+import { authorizedFetch } from "@aglyn/shared-util-http/authorized-token";
+import { useFirestore, useUser } from "@aglyn/tenant-feature-instance";
+import { doc, getDoc } from "firebase/firestore";
+import { usePathname } from "next/navigation";
+import { useEffect, useState } from "react";
+import { editorPluginConnections, syncingConnectionsOf } from "../model/editor-connections.js";
+import { PLUGIN_CONNECTIONS_API_ROUTES } from "../model/plugin-connections.js";
+/** The console's editor surfaces: the Besigner and Preview of any document. */ const EDITOR_PATH = /\/(besigner|preview)(\/|$)/;
+/** A pin of `listingId` on the site, else the workspace's. */ async function readPin(firestore, hostId, orgId, listingId) {
+    for (const path of [
+        [
+            'hosts',
+            hostId,
+            'installs',
+            listingId
+        ],
+        [
+            'orgs',
+            orgId,
+            'installs',
+            listingId
+        ]
+    ]){
+        try {
+            const snapshot = await getDoc(doc(firestore, path[0], path[1], path[2], path[3]));
+            if (snapshot.exists()) return snapshot.data();
+        } catch (unused) {
+        // A pin this member cannot read is one the editor does without.
+        }
+    }
+    return null;
+}
+/** The record of one connection, or `null` quietly: no key, no plan, no sync yet. */ async function readRecord(fetcher, input) {
+    try {
+        var _record_fields;
+        const response = await fetcher(`/api/${PLUGIN_CONNECTIONS_API_ROUTES.record}?${new URLSearchParams(input).toString()}`);
+        if (!response.ok) return null;
+        const answer = await response.json().catch(()=>null);
+        const record = answer == null ? void 0 : answer.record;
+        if (!record || typeof record !== 'object') return null;
+        return {
+            fields: (_record_fields = record['fields']) != null ? _record_fields : {},
+            items: Array.isArray(record['items']) ? record['items'] : [],
+            syncedAtMs: Number(record['syncedAtMs']) || 0
+        };
+    } catch (unused) {
+        return null;
+    }
+}
+/** Everything the editor is handed for one site, read once. */ export async function loadEditorPluginConnections(deps, input) {
+    let installs;
+    try {
+        var _installs;
+        const response = await deps.fetcher(`/api/orgs/realm-plugins?${new URLSearchParams(input).toString()}`);
+        if (!response.ok) return undefined;
+        installs = ((_installs = (await response.json()).installs) != null ? _installs : []).filter((install)=>typeof (install == null ? void 0 : install.listingId) === 'string' && install.listingId);
+    } catch (unused) {
+        return undefined;
+    }
+    const listings = [];
+    for (const install of installs){
+        const pin = await readPin(deps.firestore, input.hostId, input.orgId, install.listingId);
+        const connections = syncingConnectionsOf(pin == null ? void 0 : pin.manifest);
+        if (connections.length) listings.push({
+            listingId: install.listingId,
+            connections
+        });
+    }
+    if (!listings.length) return undefined;
+    const records = {};
+    await Promise.all(listings.flatMap((listing)=>listing.connections.map(async (connection)=>{
+            var _records, _listing_listingId, _;
+            const record = await readRecord(deps.fetcher, {
+                hostId: input.hostId,
+                listingId: listing.listingId,
+                connectionId: connection.id
+            });
+            if (record) ((_ = (_records = records)[_listing_listingId = listing.listingId]) != null ? _ : _records[_listing_listingId] = {})[connection.id] = record;
+        })));
+    return editorPluginConnections({
+        installs,
+        listings,
+        records
+    });
+}
+/**
+ * The site's declared connections, for the editor (AGL-4196): registered as a
+ * console provider, active only on the Besigner and Preview, where the
+ * canvas hands each signed element its record and the binding picker lists
+ * each record's fields by name. A refusal (no site key, no plan) or a failed
+ * read leaves the context empty: elements read `null`, as on a site that has
+ * not connected.
+ */ export function EditorConnectionsProvider(props) {
+    var _ref, _props_pathname, _ref1;
+    const { orgId, hostId, children } = props;
+    const routerPath = usePathname();
+    const pathname = (_ref = (_props_pathname = props.pathname) != null ? _props_pathname : routerPath) != null ? _ref : '';
+    const firestore = useFirestore();
+    const { data: user } = useUser();
+    const [value, setValue] = useState(undefined);
+    const active = Boolean(orgId && hostId && EDITOR_PATH.test(pathname));
+    const load = props.load;
+    const uid = (_ref1 = user == null ? void 0 : user.uid) != null ? _ref1 : '';
+    useEffect(()=>{
+        if (!active || !orgId || !hostId || !load && !uid) {
+            setValue(undefined);
+            return undefined;
+        }
+        let live = true;
+        const read = load != null ? load : (input)=>loadEditorPluginConnections({
+                firestore,
+                fetcher: (path)=>authorizedFetch(user, path)
+            }, input);
+        void read({
+            orgId,
+            hostId
+        }).then((next)=>{
+            if (live) setValue(next);
+        }).catch(()=>{
+            if (live) setValue(undefined);
+        });
+        return ()=>{
+            live = false;
+        };
+    // `user` churns with token refreshes; the member, the site and the surface name the read.
+    // eslint-disable-next-line react-hooks/exhaustive-deps
+    }, [
+        active,
+        orgId,
+        hostId,
+        uid,
+        firestore,
+        load
+    ]);
+    return /*#__PURE__*/ _jsx(EditorPluginConnectionsContext.Provider, {
+        value: value,
+        children: children
+    });
+}
+EditorConnectionsProvider.displayName = 'EditorConnectionsProvider';
+export default EditorConnectionsProvider;
+
+//# sourceMappingURL=editor-connections-provider.component.js.map

package/src/lib/components/editor-connections-provider.component.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../libs/plugins/marketplace/src/lib/components/editor-connections-provider.component.tsx"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n'use client'\n\nimport {\n  EditorPluginConnectionsContext,\n  type EditorPluginConnections,\n} from '@aglyn/aglyn/app-utils/plugin-connection-editor'\nimport type { PluginConnectionSiteRecord } from '@aglyn/aglyn/app-utils/plugin-connection-records'\nimport { authorizedFetch } from '@aglyn/shared-util-http/authorized-token'\nimport { useFirestore, useUser } from '@aglyn/tenant-feature-instance'\nimport { doc, getDoc, type Firestore } from 'firebase/firestore'\nimport { usePathname } from 'next/navigation'\nimport { useEffect, useState, type ReactNode } from 'react'\nimport {\n  editorPluginConnections,\n  syncingConnectionsOf,\n  type EditorListingConnections,\n  type EditorRealmInstall,\n} from '../model/editor-connections'\nimport { PLUGIN_CONNECTIONS_API_ROUTES } from '../model/plugin-connections'\n\n/** The console's editor surfaces: the Besigner and Preview of any document. */\nconst EDITOR_PATH = /\\/(besigner|preview)(\\/|$)/\n\nexport interface EditorConnectionsProviderProps {\n  orgId?: string | null\n  hostId?: string | null\n  children?: ReactNode\n  /** Test seam: the console path. */\n  pathname?: string\n  /** Test seam: reads the site's realm installs, pins and records. */\n  load?: (input: { orgId: string; hostId: string }) => Promise<EditorPluginConnections | undefined>\n}\n\ntype Fetcher = (path: string) => Promise<Response>\n\n/** A pin of `listingId` on the site, else the workspace's. */\nasync function readPin(firestore: Firestore, hostId: string, orgId: string, listingId: string): Promise<unknown> {\n  for (const path of [['hosts', hostId, 'installs', listingId], ['orgs', orgId, 'installs', listingId]] as const) {\n    try {\n      const snapshot = await getDoc(doc(firestore, path[0], path[1], path[2], path[3]))\n      if (snapshot.exists()) return snapshot.data()\n    } catch {\n      // A pin this member cannot read is one the editor does without.\n    }\n  }\n  return null\n}\n\n/** The record of one connection, or `null` quietly: no key, no plan, no sync yet. */\nasync function readRecord(\n  fetcher: Fetcher,\n  input: { hostId: string; listingId: string; connectionId: string },\n): Promise<PluginConnectionSiteRecord | null> {\n  try {\n    const response = await fetcher(`/api/${PLUGIN_CONNECTIONS_API_ROUTES.record}?${new URLSearchParams(input).toString()}`)\n    if (!response.ok) return null\n    const answer = (await response.json().catch(() => null)) as { record?: Record<string, unknown> | null } | null\n    const record = answer?.record\n    if (!record || typeof record !== 'object') return null\n    return {\n      fields: (record['fields'] ?? {}) as PluginConnectionSiteRecord['fields'],\n      items: (Array.isArray(record['items']) ? record['items'] : []) as PluginConnectionSiteRecord['items'],\n      syncedAtMs: Number(record['syncedAtMs']) || 0,\n    }\n  } catch {\n    return null\n  }\n}\n\n/** Everything the editor is handed for one site, read once. */\nexport async function loadEditorPluginConnections(\n  deps: { firestore: Firestore; fetcher: Fetcher },\n  input: { orgId: string; hostId: string },\n): Promise<EditorPluginConnections | undefined> {\n  let installs: EditorRealmInstall[]\n  try {\n    const response = await deps.fetcher(`/api/orgs/realm-plugins?${new URLSearchParams(input).toString()}`)\n    if (!response.ok) return undefined\n    installs = (((await response.json()) as { installs?: EditorRealmInstall[] }).installs ?? []).filter(\n      (install) => typeof install?.listingId === 'string' && install.listingId,\n    )\n  } catch {\n    return undefined\n  }\n  const listings: EditorListingConnections[] = []\n  for (const install of installs) {\n    const pin = (await readPin(deps.firestore, input.hostId, input.orgId, install.listingId)) as { manifest?: unknown } | null\n    const connections = syncingConnectionsOf(pin?.manifest)\n    if (connections.length) listings.push({ listingId: install.listingId, connections })\n  }\n  if (!listings.length) return undefined\n  const records: Record<string, Record<string, PluginConnectionSiteRecord>> = {}\n  await Promise.all(\n    listings.flatMap((listing) =>\n      listing.connections.map(async (connection) => {\n        const record = await readRecord(deps.fetcher, {\n          hostId: input.hostId,\n          listingId: listing.listingId,\n          connectionId: connection.id,\n        })\n        if (record) (records[listing.listingId] ??= {})[connection.id] = record\n      }),\n    ),\n  )\n  return editorPluginConnections({ installs, listings, records })\n}\n\n/**\n * The site's declared connections, for the editor (AGL-4196): registered as a\n * console provider, active only on the Besigner and Preview, where the\n * canvas hands each signed element its record and the binding picker lists\n * each record's fields by name. A refusal (no site key, no plan) or a failed\n * read leaves the context empty: elements read `null`, as on a site that has\n * not connected.\n */\nexport function EditorConnectionsProvider(props: EditorConnectionsProviderProps) {\n  const { orgId, hostId, children } = props\n  const routerPath = usePathname()\n  const pathname = props.pathname ?? routerPath ?? ''\n  const firestore = useFirestore()\n  const { data: user } = useUser()\n  const [value, setValue] = useState<EditorPluginConnections | undefined>(undefined)\n  const active = Boolean(orgId && hostId && EDITOR_PATH.test(pathname))\n  const load = props.load\n  const uid = (user as { uid?: string } | null | undefined)?.uid ?? ''\n\n  useEffect(() => {\n    if (!active || !orgId || !hostId || (!load && !uid)) {\n      setValue(undefined)\n      return undefined\n    }\n    let live = true\n    const read =\n      load ?? ((input) => loadEditorPluginConnections({ firestore, fetcher: (path) => authorizedFetch(user as never, path) }, input))\n    void read({ orgId, hostId })\n      .then((next) => {\n        if (live) setValue(next)\n      })\n      .catch(() => {\n        if (live) setValue(undefined)\n      })\n    return () => {\n      live = false\n    }\n    // `user` churns with token refreshes; the member, the site and the surface name the read.\n    // eslint-disable-next-line react-hooks/exhaustive-deps\n  }, [active, orgId, hostId, uid, firestore, load])\n\n  return <EditorPluginConnectionsContext.Provider value={value}>{children}</EditorPluginConnectionsContext.Provider>\n}\nEditorConnectionsProvider.displayName = 'EditorConnectionsProvider'\n\nexport default EditorConnectionsProvider\n"],"names":["EditorPluginConnectionsContext","authorizedFetch","useFirestore","useUser","doc","getDoc","usePathname","useEffect","useState","editorPluginConnections","syncingConnectionsOf","PLUGIN_CONNECTIONS_API_ROUTES","EDITOR_PATH","readPin","firestore","hostId","orgId","listingId","path","snapshot","exists","data","readRecord","fetcher","input","record","response","URLSearchParams","toString","ok","answer","json","catch","fields","items","Array","isArray","syncedAtMs","Number","loadEditorPluginConnections","deps","installs","undefined","filter","install","listings","pin","connections","manifest","length","push","records","Promise","all","flatMap","listing","map","connection","connectionId","id","EditorConnectionsProvider","props","children","routerPath","pathname","user","value","setValue","active","Boolean","test","load","uid","live","read","then","next","Provider","displayName"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GACD;;AAEA,SACEA,8BAA8B,QAEzB,kDAAiD;AAExD,SAASC,eAAe,QAAQ,2CAA0C;AAC1E,SAASC,YAAY,EAAEC,OAAO,QAAQ,iCAAgC;AACtE,SAASC,GAAG,EAAEC,MAAM,QAAwB,qBAAoB;AAChE,SAASC,WAAW,QAAQ,kBAAiB;AAC7C,SAASC,SAAS,EAAEC,QAAQ,QAAwB,QAAO;AAC3D,SACEC,uBAAuB,EACvBC,oBAAoB,QAGf,iCAA6B;AACpC,SAASC,6BAA6B,QAAQ,iCAA6B;AAE3E,6EAA6E,GAC7E,MAAMC,cAAc;AAcpB,4DAA4D,GAC5D,eAAeC,QAAQC,SAAoB,EAAEC,MAAc,EAAEC,KAAa,EAAEC,SAAiB;IAC3F,KAAK,MAAMC,QAAQ;QAAC;YAAC;YAASH;YAAQ;YAAYE;SAAU;QAAE;YAAC;YAAQD;YAAO;YAAYC;SAAU;KAAC,CAAW;QAC9G,IAAI;YACF,MAAME,WAAW,MAAMd,OAAOD,IAAIU,WAAWI,IAAI,CAAC,EAAE,EAAEA,IAAI,CAAC,EAAE,EAAEA,IAAI,CAAC,EAAE,EAAEA,IAAI,CAAC,EAAE;YAC/E,IAAIC,SAASC,MAAM,IAAI,OAAOD,SAASE,IAAI;QAC7C,EAAE,eAAM;QACN,gEAAgE;QAClE;IACF;IACA,OAAO;AACT;AAEA,mFAAmF,GACnF,eAAeC,WACbC,OAAgB,EAChBC,KAAkE;IAElE,IAAI;YAOSC;QANX,MAAMC,WAAW,MAAMH,QAAQ,CAAC,KAAK,EAAEZ,8BAA8Bc,MAAM,CAAC,CAAC,EAAE,IAAIE,gBAAgBH,OAAOI,QAAQ,IAAI;QACtH,IAAI,CAACF,SAASG,EAAE,EAAE,OAAO;QACzB,MAAMC,SAAU,MAAMJ,SAASK,IAAI,GAAGC,KAAK,CAAC,IAAM;QAClD,MAAMP,SAASK,0BAAAA,OAAQL,MAAM;QAC7B,IAAI,CAACA,UAAU,OAAOA,WAAW,UAAU,OAAO;QAClD,OAAO;YACLQ,MAAM,GAAGR,iBAAAA,MAAM,CAAC,SAAS,YAAhBA,iBAAoB,CAAC;YAC9BS,OAAQC,MAAMC,OAAO,CAACX,MAAM,CAAC,QAAQ,IAAIA,MAAM,CAAC,QAAQ,GAAG,EAAE;YAC7DY,YAAYC,OAAOb,MAAM,CAAC,aAAa,KAAK;QAC9C;IACF,EAAE,eAAM;QACN,OAAO;IACT;AACF;AAEA,6DAA6D,GAC7D,OAAO,eAAec,4BACpBC,IAAgD,EAChDhB,KAAwC;IAExC,IAAIiB;IACJ,IAAI;YAGU;QAFZ,MAAMf,WAAW,MAAMc,KAAKjB,OAAO,CAAC,CAAC,wBAAwB,EAAE,IAAII,gBAAgBH,OAAOI,QAAQ,IAAI;QACtG,IAAI,CAACF,SAASG,EAAE,EAAE,OAAOa;QACzBD,WAAW,EAAC,YAAA,AAAE,CAAA,MAAMf,SAASK,IAAI,EAAC,EAA2CU,QAAQ,YAAzE,YAA6E,EAAE,EAAEE,MAAM,CACjG,CAACC,UAAY,QAAOA,2BAAAA,QAAS3B,SAAS,MAAK,YAAY2B,QAAQ3B,SAAS;IAE5E,EAAE,eAAM;QACN,OAAOyB;IACT;IACA,MAAMG,WAAuC,EAAE;IAC/C,KAAK,MAAMD,WAAWH,SAAU;QAC9B,MAAMK,MAAO,MAAMjC,QAAQ2B,KAAK1B,SAAS,EAAEU,MAAMT,MAAM,EAAES,MAAMR,KAAK,EAAE4B,QAAQ3B,SAAS;QACvF,MAAM8B,cAAcrC,qBAAqBoC,uBAAAA,IAAKE,QAAQ;QACtD,IAAID,YAAYE,MAAM,EAAEJ,SAASK,IAAI,CAAC;YAAEjC,WAAW2B,QAAQ3B,SAAS;YAAE8B;QAAY;IACpF;IACA,IAAI,CAACF,SAASI,MAAM,EAAE,OAAOP;IAC7B,MAAMS,UAAsE,CAAC;IAC7E,MAAMC,QAAQC,GAAG,CACfR,SAASS,OAAO,CAAC,CAACC,UAChBA,QAAQR,WAAW,CAACS,GAAG,CAAC,OAAOC;gBAMhBN,UAAQI,oBAARJ;YALb,MAAM1B,SAAS,MAAMH,WAAWkB,KAAKjB,OAAO,EAAE;gBAC5CR,QAAQS,MAAMT,MAAM;gBACpBE,WAAWsC,QAAQtC,SAAS;gBAC5ByC,cAAcD,WAAWE,EAAE;YAC7B;YACA,IAAIlC,QAAQ,EAAC0B,IAAAA,CAAAA,WAAAA,QAAO,CAACI,qBAAAA,QAAQtC,SAAS,CAAC,YAA1BkC,IAAAA,QAAO,CAACI,mBAAkB,GAAK,CAAC,EAAE,CAACE,WAAWE,EAAE,CAAC,GAAGlC;QACnE;IAGJ,OAAOhB,wBAAwB;QAAEgC;QAAUI;QAAUM;IAAQ;AAC/D;AAEA;;;;;;;CAOC,GACD,OAAO,SAASS,0BAA0BC,KAAqC;QAG5DA,MAAAA;IAFjB,MAAM,EAAE7C,KAAK,EAAED,MAAM,EAAE+C,QAAQ,EAAE,GAAGD;IACpC,MAAME,aAAazD;IACnB,MAAM0D,YAAWH,QAAAA,kBAAAA,MAAMG,QAAQ,YAAdH,kBAAkBE,sBAAlBF,OAAgC;IACjD,MAAM/C,YAAYZ;IAClB,MAAM,EAAEmB,MAAM4C,IAAI,EAAE,GAAG9D;IACvB,MAAM,CAAC+D,OAAOC,SAAS,GAAG3D,SAA8CkC;IACxE,MAAM0B,SAASC,QAAQrD,SAASD,UAAUH,YAAY0D,IAAI,CAACN;IAC3D,MAAMO,OAAOV,MAAMU,IAAI;IACvB,MAAMC,eAAOP,wBAAD,AAACA,KAA8CO,GAAG,oBAAI;IAElEjE,UAAU;QACR,IAAI,CAAC6D,UAAU,CAACpD,SAAS,CAACD,UAAW,CAACwD,QAAQ,CAACC,KAAM;YACnDL,SAASzB;YACT,OAAOA;QACT;QACA,IAAI+B,OAAO;QACX,MAAMC,OACJH,eAAAA,OAAS,CAAC/C,QAAUe,4BAA4B;gBAAEzB;gBAAWS,SAAS,CAACL,OAASjB,gBAAgBgE,MAAe/C;YAAM,GAAGM;QAC1H,KAAKkD,KAAK;YAAE1D;YAAOD;QAAO,GACvB4D,IAAI,CAAC,CAACC;YACL,IAAIH,MAAMN,SAASS;QACrB,GACC5C,KAAK,CAAC;YACL,IAAIyC,MAAMN,SAASzB;QACrB;QACF,OAAO;YACL+B,OAAO;QACT;IACA,0FAA0F;IAC1F,uDAAuD;IACzD,GAAG;QAACL;QAAQpD;QAAOD;QAAQyD;QAAK1D;QAAWyD;KAAK;IAEhD,qBAAO,KAACvE,+BAA+B6E,QAAQ;QAACX,OAAOA;kBAAQJ;;AACjE;AACAF,0BAA0BkB,WAAW,GAAG;AAExC,eAAelB,0BAAyB"}

package/src/lib/components/listing-connection-credentials-card.component.d.ts

@@ -0,0 +1,33 @@
+import { type PluginConnectionCredentialsApi } from '../hooks/use-plugin-connections-api';
+export interface ListingConnectionCredentialsCardProps {
+    listingId: string;
+    /**
+     * The viewer's resolved permissions, from the shell. Setting and clearing
+     * the credentials need "Set a listing's connection credentials", as the
+     * route does; without it the card stays, its buttons off and the
+     * permission named. An absent key reads as allowed: the route still decides.
+     */
+    permissions?: Record<string, boolean | undefined>;
+    /** Test seam: the routes. The signed-in member's by default. */
+    api?: PluginConnectionCredentialsApi;
+    /** Test seam: the console origin the redirect URI is built on. */
+    origin?: string;
+}
+/**
+ * THE PUBLISHER'S OAUTH APP FOR EACH DECLARED CONNECTION (AGL-4196).
+ *
+ * A plugin that declares a connection signs site owners in with its
+ * publisher's own OAuth app, and the platform holds that app's client ID and
+ * secret sealed. This card sets, replaces and clears them. It is
+ * write-only: the route never answers either value, so all it can ever show
+ * is "Set" or "Not set", and the redirect URI the publisher registers at the
+ * provider.
+ *
+ * Drawn for the listing's publisher only, and only for a listing whose latest
+ * version declares a connection: the route lists none otherwise.
+ */
+export declare function ListingConnectionCredentialsCard(props: ListingConnectionCredentialsCardProps): import("react").JSX.Element;
+export declare namespace ListingConnectionCredentialsCard {
+    var displayName: string;
+}
+export default ListingConnectionCredentialsCard;

package/src/lib/components/listing-connection-credentials-card.component.js

@@ -0,0 +1,318 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ 'use client';
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { pluginDocsHelp } from "@aglyn/aglyn/app-utils/docs-help";
+import { CardDisplay, useConfirmationContext } from "@aglyn/shared-ui-jsx";
+import { BlockedControl } from "@aglyn/shared-ui-jsx/components/blocked-control.component";
+import { CopyField } from "@aglyn/shared-ui-jsx/components/copy-field.component";
+import { StatusChip } from "@aglyn/shared-ui-jsx/components/status-chip.component";
+import { useSnackbar } from "@aglyn/shared-ui-snackstack";
+import { Alert, Button, CircularProgress, Stack, TextField, Typography } from "@mui/material";
+import { useCallback, useEffect, useState } from "react";
+import { PluginConnectionRouteError, usePluginConnectionCredentialsApi } from "../hooks/use-plugin-connections-api.js";
+import { formatConnectionTime, PLUGIN_CONNECTIONS_NOT_CONFIGURED_TEXT, pluginConnectionRedirectUri } from "../model/plugin-connection-card.js";
+import { PLUGIN_CONNECTIONS_CREDENTIALS_PERMISSION, pluginConnectionsPermissionRefusal } from "../model/plugin-connections.js";
+const HELP = pluginDocsHelp('publisherHandbook', {
+    anchor: '#connection-credentials'
+});
+/**
+ * THE PUBLISHER'S OAUTH APP FOR EACH DECLARED CONNECTION (AGL-4196).
+ *
+ * A plugin that declares a connection signs site owners in with its
+ * publisher's own OAuth app, and the platform holds that app's client ID and
+ * secret sealed. This card sets, replaces and clears them. It is
+ * write-only: the route never answers either value, so all it can ever show
+ * is "Set" or "Not set", and the redirect URI the publisher registers at the
+ * provider.
+ *
+ * Drawn for the listing's publisher only, and only for a listing whose latest
+ * version declares a connection: the route lists none otherwise.
+ */ export function ListingConnectionCredentialsCard(props) {
+    var _props_api;
+    const { listingId, permissions } = props;
+    const routes = usePluginConnectionCredentialsApi();
+    const api = (_props_api = props.api) != null ? _props_api : routes;
+    const [load, setLoad] = useState({
+        status: 'loading'
+    });
+    const canSet = (permissions == null ? void 0 : permissions[PLUGIN_CONNECTIONS_CREDENTIALS_PERMISSION]) !== false;
+    const redirectUri = pluginConnectionRedirectUri(props.origin);
+    const refresh = useCallback(async ()=>{
+        try {
+            setLoad({
+                status: 'ready',
+                answer: await api.read(listingId)
+            });
+        } catch (error) {
+            var _ref;
+            const refusal = error instanceof PluginConnectionRouteError ? error : null;
+            setLoad({
+                status: 'error',
+                message: (_ref = refusal == null ? void 0 : refusal.message) != null ? _ref : 'The connection credentials could not be read. Try again.',
+                refused: (refusal == null ? void 0 : refusal.reason) === 'permission'
+            });
+        }
+    }, [
+        api,
+        listingId
+    ]);
+    useEffect(()=>{
+        if (listingId) void refresh();
+    }, [
+        listingId,
+        refresh
+    ]);
+    if (load.status === 'loading') return null;
+    if (load.status === 'error') {
+        return /*#__PURE__*/ _jsx(CardDisplay, {
+            header: 'Connection credentials',
+            help: HELP,
+            contentGutterX: true,
+            contentGutterY: true,
+            children: /*#__PURE__*/ _jsx(Alert, {
+                severity: load.refused ? 'info' : 'error',
+                children: load.message
+            })
+        });
+    }
+    const { answer } = load;
+    if (!answer.credentials.length) return null;
+    return /*#__PURE__*/ _jsx(Stack, {
+        spacing: 3,
+        children: answer.credentials.map((entry)=>/*#__PURE__*/ _jsx(ConnectionCredentials, {
+                listingId: listingId,
+                entry: entry,
+                configured: answer.configured,
+                canSet: canSet,
+                redirectUri: redirectUri,
+                api: api,
+                onAnswer: (next)=>setLoad({
+                        status: 'ready',
+                        answer: next
+                    })
+            }, entry.connectionId))
+    });
+}
+ListingConnectionCredentialsCard.displayName = 'ListingConnectionCredentialsCard';
+export default ListingConnectionCredentialsCard;
+/** One declared connection's OAuth app: set or not, and the form that replaces it. */ function ConnectionCredentials(props) {
+    const { listingId, entry, configured, canSet, redirectUri, api, onAnswer } = props;
+    const { enqueueSnackbar } = useSnackbar();
+    const { confirm } = useConfirmationContext();
+    const [editing, setEditing] = useState(false);
+    const [clientId, setClientId] = useState('');
+    const [clientSecret, setClientSecret] = useState('');
+    const [busy, setBusy] = useState(null);
+    const [error, setError] = useState(null);
+    const refusal = pluginConnectionsPermissionRefusal(PLUGIN_CONNECTIONS_CREDENTIALS_PERMISSION);
+    const blockedReason = !canSet ? refusal : !configured ? PLUGIN_CONNECTIONS_NOT_CONFIGURED_TEXT : null;
+    const close = ()=>{
+        setEditing(false);
+        setClientId('');
+        setClientSecret('');
+        setError(null);
+    };
+    const save = async ()=>{
+        setBusy('save');
+        setError(null);
+        try {
+            const answer = await api.save({
+                listingId,
+                connectionId: entry.connectionId,
+                clientId: clientId.trim(),
+                clientSecret: clientSecret.trim()
+            });
+            close();
+            onAnswer(answer);
+            enqueueSnackbar(`${entry.label} credentials saved.`, {
+                variant: 'success'
+            });
+        } catch (failure) {
+            setError(failure instanceof Error ? failure.message : String(failure));
+        } finally{
+            setBusy(null);
+        }
+    };
+    const clear = async ()=>{
+        const ok = await Promise.resolve(confirm({
+            title: `Clear the ${entry.label} credentials?`,
+            description: 'Sites already connected stop syncing, and nobody can connect until you set new ones.',
+            confirmationText: 'Clear',
+            confirmationButtonProps: {
+                color: 'warning',
+                variant: 'contained'
+            }
+        })).then(()=>true).catch(()=>false);
+        if (!ok) return;
+        setBusy('clear');
+        setError(null);
+        try {
+            onAnswer(await api.clear({
+                listingId,
+                connectionId: entry.connectionId
+            }));
+            enqueueSnackbar(`${entry.label} credentials cleared.`, {
+                variant: 'success'
+            });
+        } catch (failure) {
+            setError(failure instanceof Error ? failure.message : String(failure));
+        } finally{
+            setBusy(null);
+        }
+    };
+    const action = editing ? /*#__PURE__*/ _jsxs(Stack, {
+        direction: "row",
+        spacing: 1,
+        children: [
+            /*#__PURE__*/ _jsx(Button, {
+                color: "inherit",
+                disabled: busy !== null,
+                onClick: close,
+                children: 'Cancel'
+            }),
+            /*#__PURE__*/ _jsx(Button, {
+                variant: "contained",
+                disabled: busy !== null || !clientId.trim() || !clientSecret.trim(),
+                onClick: ()=>void save(),
+                children: busy === 'save' ? 'Saving…' : 'Save'
+            })
+        ]
+    }) : /*#__PURE__*/ _jsxs(Stack, {
+        direction: "row",
+        spacing: 1,
+        children: [
+            /*#__PURE__*/ _jsx(BlockedControl, {
+                blocked: Boolean(blockedReason),
+                reason: blockedReason != null ? blockedReason : '',
+                children: /*#__PURE__*/ _jsx(Button, {
+                    variant: entry.set ? 'outlined' : 'contained',
+                    disabled: busy !== null,
+                    onClick: ()=>setEditing(true),
+                    children: entry.set ? 'Replace' : 'Set credentials'
+                })
+            }),
+            entry.set ? /*#__PURE__*/ _jsx(BlockedControl, {
+                blocked: !canSet,
+                reason: refusal,
+                children: /*#__PURE__*/ _jsx(Button, {
+                    color: "warning",
+                    disabled: busy !== null,
+                    onClick: ()=>void clear(),
+                    children: busy === 'clear' ? 'Clearing…' : 'Clear'
+                })
+            }) : null
+        ]
+    });
+    return /*#__PURE__*/ _jsx(CardDisplay, {
+        header: `Connection credentials: ${entry.label}`,
+        help: HELP,
+        contentGutterX: true,
+        contentGutterY: true,
+        HeaderProps: {
+            action
+        },
+        children: /*#__PURE__*/ _jsxs(Stack, {
+            spacing: 2,
+            children: [
+                /*#__PURE__*/ _jsxs(Stack, {
+                    direction: "row",
+                    spacing: 1,
+                    sx: {
+                        alignItems: 'center',
+                        flexWrap: 'wrap',
+                        gap: 1
+                    },
+                    children: [
+                        /*#__PURE__*/ _jsx(StatusChip, {
+                            label: entry.set ? 'Set' : 'Not set',
+                            tone: entry.set ? 'success' : 'neutral',
+                            "data-testid": "plugin-connection-credentials-status"
+                        }),
+                        entry.set && entry.updatedAtMs !== null ? /*#__PURE__*/ _jsx(Typography, {
+                            variant: "body2",
+                            color: "text.secondary",
+                            children: `Last changed ${formatConnectionTime(entry.updatedAtMs)}`
+                        }) : null
+                    ]
+                }),
+                /*#__PURE__*/ _jsx(Typography, {
+                    variant: "body2",
+                    color: "text.secondary",
+                    children: entry.set ? 'Sites sign in to this service with your OAuth app. The client ID and secret are never shown again; replace them to change them.' : 'Until these are set, sites that install your plugin cannot connect this service.'
+                }),
+                !configured ? /*#__PURE__*/ _jsx(Alert, {
+                    severity: "info",
+                    children: PLUGIN_CONNECTIONS_NOT_CONFIGURED_TEXT
+                }) : null,
+                !canSet ? /*#__PURE__*/ _jsx(Alert, {
+                    severity: "info",
+                    children: refusal
+                }) : null,
+                /*#__PURE__*/ _jsx(CopyField, {
+                    label: "Redirect URI",
+                    value: redirectUri,
+                    helperText: "Register this address at the provider as your OAuth app's redirect URI, exactly as shown."
+                }),
+                editing ? /*#__PURE__*/ _jsxs(Stack, {
+                    spacing: 2,
+                    children: [
+                        /*#__PURE__*/ _jsx(TextField, {
+                            label: "Client ID",
+                            size: "small",
+                            value: clientId,
+                            autoComplete: "off",
+                            disabled: busy !== null,
+                            onChange: (event)=>setClientId(event.target.value),
+                            slotProps: {
+                                htmlInput: {
+                                    spellCheck: false,
+                                    'data-1p-ignore': true
+                                }
+                            }
+                        }),
+                        /*#__PURE__*/ _jsx(TextField, {
+                            label: "Client secret",
+                            size: "small",
+                            type: "password",
+                            value: clientSecret,
+                            autoComplete: "new-password",
+                            disabled: busy !== null,
+                            onChange: (event)=>setClientSecret(event.target.value),
+                            helperText: "Stored sealed. It cannot be read back, by you or anyone else.",
+                            slotProps: {
+                                htmlInput: {
+                                    spellCheck: false,
+                                    'data-1p-ignore': true
+                                }
+                            }
+                        })
+                    ]
+                }) : null,
+                busy === 'clear' ? /*#__PURE__*/ _jsx(CircularProgress, {
+                    size: 18
+                }) : null,
+                error ? /*#__PURE__*/ _jsx(Alert, {
+                    severity: "error",
+                    onClose: ()=>setError(null),
+                    children: error
+                }) : null
+            ]
+        })
+    });
+}
+
+//# sourceMappingURL=listing-connection-credentials-card.component.js.map