@aglyn/plugins-marketplace 1.18.0 → 1.20.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aglyn/plugins-marketplace",
-  "version": "1.18.0",
+  "version": "1.20.0",
   "license": "Apache-2.0",
   "homepage": "https://aglyn.com",
   "repository": {
@@ -25,20 +25,20 @@
     "./package.json": "./package.json"
   },
   "dependencies": {
-    "@aglyn/aglyn": "1.18.0",
-    "@aglyn/aglyn-markdown-editor": "1.18.0",
-    "@aglyn/shared-data-enums": "1.18.0",
-    "@aglyn/shared-data-mdi": "1.18.0",
-    "@aglyn/shared-ui-jsx": "1.18.0",
-    "@aglyn/shared-ui-next": "1.18.0",
-    "@aglyn/shared-ui-snackstack": "1.18.0",
-    "@aglyn/shared-util-email": "1.18.0",
-    "@aglyn/shared-util-http": "1.18.0",
-    "@aglyn/shared-util-timestamp": "1.18.0",
-    "@aglyn/shared-util-tools": "1.18.0",
-    "@aglyn/tenant-data-admin": "1.18.0",
-    "@aglyn/tenant-feature-instance": "1.18.0",
-    "@aglyn/tenant-runtime": "1.18.0",
+    "@aglyn/aglyn": "1.20.0",
+    "@aglyn/aglyn-markdown-editor": "1.20.0",
+    "@aglyn/shared-data-enums": "1.20.0",
+    "@aglyn/shared-data-mdi": "1.20.0",
+    "@aglyn/shared-ui-jsx": "1.20.0",
+    "@aglyn/shared-ui-next": "1.20.0",
+    "@aglyn/shared-ui-snackstack": "1.20.0",
+    "@aglyn/shared-util-email": "1.20.0",
+    "@aglyn/shared-util-http": "1.20.0",
+    "@aglyn/shared-util-timestamp": "1.20.0",
+    "@aglyn/shared-util-tools": "1.20.0",
+    "@aglyn/tenant-data-admin": "1.20.0",
+    "@aglyn/tenant-feature-instance": "1.20.0",
+    "@aglyn/tenant-runtime": "1.20.0",
     "@swc/helpers": "0.5.23"
   },
   "peerDependencies": {

package/src/lib/components/editor-connections-provider.component.js

@@ -16,6 +16,7 @@
  */ 'use client';
 import { jsx as _jsx } from "react/jsx-runtime";
 import { EditorPluginConnectionsContext } from "@aglyn/aglyn/app-utils/plugin-connection-editor";
+import { registerRepeatSource } from "@aglyn/aglyn/app-utils/repeat-sources";
 import { authorizedFetch } from "@aglyn/shared-util-http/authorized-token";
 import { useFirestore, useUser } from "@aglyn/tenant-feature-instance";
 import { doc, getDoc } from "firebase/firestore";
@@ -23,6 +24,7 @@ import { usePathname } from "next/navigation";
 import { useEffect, useState } from "react";
 import { editorPluginConnections, syncingConnectionsOf } from "../model/editor-connections.js";
 import { PLUGIN_CONNECTIONS_API_ROUTES } from "../model/plugin-connections.js";
+import { connectionRepeatSource } from "../repeat/connection-repeat-source.js";
 /** The console's editor surfaces: the Besigner and Preview of any document. */ const EDITOR_PATH = /\/(besigner|preview)(\/|$)/;
 /** A pin of `listingId` on the site, else the workspace's. */ async function readPin(firestore, hostId, orgId, listingId) {
     for (const path of [
@@ -150,6 +152,19 @@ import { PLUGIN_CONNECTIONS_API_ROUTES } from "../model/plugin-connections.js";
         firestore,
         load
     ]);
+    // The repeat source follows the site (AGL-4212): its picker lists this
+    // site's connections, and its token menu their fields. Put back to the
+    // site-less source when the editor closes, as the registrar left it.
+    useEffect(()=>{
+        var _value_repeatables;
+        if (!(value == null ? void 0 : (_value_repeatables = value.repeatables) == null ? void 0 : _value_repeatables.length)) return undefined;
+        registerRepeatSource(connectionRepeatSource(value));
+        return ()=>{
+            registerRepeatSource(connectionRepeatSource());
+        };
+    }, [
+        value
+    ]);
     return /*#__PURE__*/ _jsx(EditorPluginConnectionsContext.Provider, {
         value: value,
         children: children

package/src/lib/components/editor-connections-provider.component.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../../../../libs/plugins/marketplace/src/lib/components/editor-connections-provider.component.tsx"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n'use client'\n\nimport {\n  EditorPluginConnectionsContext,\n  type EditorPluginConnections,\n} from '@aglyn/aglyn/app-utils/plugin-connection-editor'\nimport type { PluginConnectionSiteRecord } from '@aglyn/aglyn/app-utils/plugin-connection-records'\nimport { authorizedFetch } from '@aglyn/shared-util-http/authorized-token'\nimport { useFirestore, useUser } from '@aglyn/tenant-feature-instance'\nimport { doc, getDoc, type Firestore } from 'firebase/firestore'\nimport { usePathname } from 'next/navigation'\nimport { useEffect, useState, type ReactNode } from 'react'\nimport {\n  editorPluginConnections,\n  syncingConnectionsOf,\n  type EditorListingConnections,\n  type EditorRealmInstall,\n} from '../model/editor-connections'\nimport { PLUGIN_CONNECTIONS_API_ROUTES } from '../model/plugin-connections'\n\n/** The console's editor surfaces: the Besigner and Preview of any document. */\nconst EDITOR_PATH = /\\/(besigner|preview)(\\/|$)/\n\nexport interface EditorConnectionsProviderProps {\n  orgId?: string | null\n  hostId?: string | null\n  children?: ReactNode\n  /** Test seam: the console path. */\n  pathname?: string\n  /** Test seam: reads the site's realm installs, pins and records. */\n  load?: (input: { orgId: string; hostId: string }) => Promise<EditorPluginConnections | undefined>\n}\n\ntype Fetcher = (path: string) => Promise<Response>\n\n/** A pin of `listingId` on the site, else the workspace's. */\nasync function readPin(firestore: Firestore, hostId: string, orgId: string, listingId: string): Promise<unknown> {\n  for (const path of [['hosts', hostId, 'installs', listingId], ['orgs', orgId, 'installs', listingId]] as const) {\n    try {\n      const snapshot = await getDoc(doc(firestore, path[0], path[1], path[2], path[3]))\n      if (snapshot.exists()) return snapshot.data()\n    } catch {\n      // A pin this member cannot read is one the editor does without.\n    }\n  }\n  return null\n}\n\n/** The record of one connection, or `null` quietly: no key, no plan, no sync yet. */\nasync function readRecord(\n  fetcher: Fetcher,\n  input: { hostId: string; listingId: string; connectionId: string },\n): Promise<PluginConnectionSiteRecord | null> {\n  try {\n    const response = await fetcher(`/api/${PLUGIN_CONNECTIONS_API_ROUTES.record}?${new URLSearchParams(input).toString()}`)\n    if (!response.ok) return null\n    const answer = (await response.json().catch(() => null)) as { record?: Record<string, unknown> | null } | null\n    const record = answer?.record\n    if (!record || typeof record !== 'object') return null\n    return {\n      fields: (record['fields'] ?? {}) as PluginConnectionSiteRecord['fields'],\n      items: (Array.isArray(record['items']) ? record['items'] : []) as PluginConnectionSiteRecord['items'],\n      syncedAtMs: Number(record['syncedAtMs']) || 0,\n    }\n  } catch {\n    return null\n  }\n}\n\n/** Everything the editor is handed for one site, read once. */\nexport async function loadEditorPluginConnections(\n  deps: { firestore: Firestore; fetcher: Fetcher },\n  input: { orgId: string; hostId: string },\n): Promise<EditorPluginConnections | undefined> {\n  let installs: EditorRealmInstall[]\n  try {\n    const response = await deps.fetcher(`/api/orgs/realm-plugins?${new URLSearchParams(input).toString()}`)\n    if (!response.ok) return undefined\n    installs = (((await response.json()) as { installs?: EditorRealmInstall[] }).installs ?? []).filter(\n      (install) => typeof install?.listingId === 'string' && install.listingId,\n    )\n  } catch {\n    return undefined\n  }\n  const listings: EditorListingConnections[] = []\n  for (const install of installs) {\n    const pin = (await readPin(deps.firestore, input.hostId, input.orgId, install.listingId)) as { manifest?: unknown } | null\n    const connections = syncingConnectionsOf(pin?.manifest)\n    if (connections.length) listings.push({ listingId: install.listingId, connections })\n  }\n  if (!listings.length) return undefined\n  const records: Record<string, Record<string, PluginConnectionSiteRecord>> = {}\n  await Promise.all(\n    listings.flatMap((listing) =>\n      listing.connections.map(async (connection) => {\n        const record = await readRecord(deps.fetcher, {\n          hostId: input.hostId,\n          listingId: listing.listingId,\n          connectionId: connection.id,\n        })\n        if (record) (records[listing.listingId] ??= {})[connection.id] = record\n      }),\n    ),\n  )\n  return editorPluginConnections({ installs, listings, records })\n}\n\n/**\n * The site's declared connections, for the editor (AGL-4196): registered as a\n * console provider, active only on the Besigner and Preview, where the\n * canvas hands each signed element its record and the binding picker lists\n * each record's fields by name. A refusal (no site key, no plan) or a failed\n * read leaves the context empty: elements read `null`, as on a site that has\n * not connected.\n */\nexport function EditorConnectionsProvider(props: EditorConnectionsProviderProps) {\n  const { orgId, hostId, children } = props\n  const routerPath = usePathname()\n  const pathname = props.pathname ?? routerPath ?? ''\n  const firestore = useFirestore()\n  const { data: user } = useUser()\n  const [value, setValue] = useState<EditorPluginConnections | undefined>(undefined)\n  const active = Boolean(orgId && hostId && EDITOR_PATH.test(pathname))\n  const load = props.load\n  const uid = (user as { uid?: string } | null | undefined)?.uid ?? ''\n\n  useEffect(() => {\n    if (!active || !orgId || !hostId || (!load && !uid)) {\n      setValue(undefined)\n      return undefined\n    }\n    let live = true\n    const read =\n      load ?? ((input) => loadEditorPluginConnections({ firestore, fetcher: (path) => authorizedFetch(user as never, path) }, input))\n    void read({ orgId, hostId })\n      .then((next) => {\n        if (live) setValue(next)\n      })\n      .catch(() => {\n        if (live) setValue(undefined)\n      })\n    return () => {\n      live = false\n    }\n    // `user` churns with token refreshes; the member, the site and the surface name the read.\n    // eslint-disable-next-line react-hooks/exhaustive-deps\n  }, [active, orgId, hostId, uid, firestore, load])\n\n  return <EditorPluginConnectionsContext.Provider value={value}>{children}</EditorPluginConnectionsContext.Provider>\n}\nEditorConnectionsProvider.displayName = 'EditorConnectionsProvider'\n\nexport default EditorConnectionsProvider\n"],"names":["EditorPluginConnectionsContext","authorizedFetch","useFirestore","useUser","doc","getDoc","usePathname","useEffect","useState","editorPluginConnections","syncingConnectionsOf","PLUGIN_CONNECTIONS_API_ROUTES","EDITOR_PATH","readPin","firestore","hostId","orgId","listingId","path","snapshot","exists","data","readRecord","fetcher","input","record","response","URLSearchParams","toString","ok","answer","json","catch","fields","items","Array","isArray","syncedAtMs","Number","loadEditorPluginConnections","deps","installs","undefined","filter","install","listings","pin","connections","manifest","length","push","records","Promise","all","flatMap","listing","map","connection","connectionId","id","EditorConnectionsProvider","props","children","routerPath","pathname","user","value","setValue","active","Boolean","test","load","uid","live","read","then","next","Provider","displayName"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GACD;;AAEA,SACEA,8BAA8B,QAEzB,kDAAiD;AAExD,SAASC,eAAe,QAAQ,2CAA0C;AAC1E,SAASC,YAAY,EAAEC,OAAO,QAAQ,iCAAgC;AACtE,SAASC,GAAG,EAAEC,MAAM,QAAwB,qBAAoB;AAChE,SAASC,WAAW,QAAQ,kBAAiB;AAC7C,SAASC,SAAS,EAAEC,QAAQ,QAAwB,QAAO;AAC3D,SACEC,uBAAuB,EACvBC,oBAAoB,QAGf,iCAA6B;AACpC,SAASC,6BAA6B,QAAQ,iCAA6B;AAE3E,6EAA6E,GAC7E,MAAMC,cAAc;AAcpB,4DAA4D,GAC5D,eAAeC,QAAQC,SAAoB,EAAEC,MAAc,EAAEC,KAAa,EAAEC,SAAiB;IAC3F,KAAK,MAAMC,QAAQ;QAAC;YAAC;YAASH;YAAQ;YAAYE;SAAU;QAAE;YAAC;YAAQD;YAAO;YAAYC;SAAU;KAAC,CAAW;QAC9G,IAAI;YACF,MAAME,WAAW,MAAMd,OAAOD,IAAIU,WAAWI,IAAI,CAAC,EAAE,EAAEA,IAAI,CAAC,EAAE,EAAEA,IAAI,CAAC,EAAE,EAAEA,IAAI,CAAC,EAAE;YAC/E,IAAIC,SAASC,MAAM,IAAI,OAAOD,SAASE,IAAI;QAC7C,EAAE,eAAM;QACN,gEAAgE;QAClE;IACF;IACA,OAAO;AACT;AAEA,mFAAmF,GACnF,eAAeC,WACbC,OAAgB,EAChBC,KAAkE;IAElE,IAAI;YAOSC;QANX,MAAMC,WAAW,MAAMH,QAAQ,CAAC,KAAK,EAAEZ,8BAA8Bc,MAAM,CAAC,CAAC,EAAE,IAAIE,gBAAgBH,OAAOI,QAAQ,IAAI;QACtH,IAAI,CAACF,SAASG,EAAE,EAAE,OAAO;QACzB,MAAMC,SAAU,MAAMJ,SAASK,IAAI,GAAGC,KAAK,CAAC,IAAM;QAClD,MAAMP,SAASK,0BAAAA,OAAQL,MAAM;QAC7B,IAAI,CAACA,UAAU,OAAOA,WAAW,UAAU,OAAO;QAClD,OAAO;YACLQ,MAAM,GAAGR,iBAAAA,MAAM,CAAC,SAAS,YAAhBA,iBAAoB,CAAC;YAC9BS,OAAQC,MAAMC,OAAO,CAACX,MAAM,CAAC,QAAQ,IAAIA,MAAM,CAAC,QAAQ,GAAG,EAAE;YAC7DY,YAAYC,OAAOb,MAAM,CAAC,aAAa,KAAK;QAC9C;IACF,EAAE,eAAM;QACN,OAAO;IACT;AACF;AAEA,6DAA6D,GAC7D,OAAO,eAAec,4BACpBC,IAAgD,EAChDhB,KAAwC;IAExC,IAAIiB;IACJ,IAAI;YAGU;QAFZ,MAAMf,WAAW,MAAMc,KAAKjB,OAAO,CAAC,CAAC,wBAAwB,EAAE,IAAII,gBAAgBH,OAAOI,QAAQ,IAAI;QACtG,IAAI,CAACF,SAASG,EAAE,EAAE,OAAOa;QACzBD,WAAW,EAAC,YAAA,AAAE,CAAA,MAAMf,SAASK,IAAI,EAAC,EAA2CU,QAAQ,YAAzE,YAA6E,EAAE,EAAEE,MAAM,CACjG,CAACC,UAAY,QAAOA,2BAAAA,QAAS3B,SAAS,MAAK,YAAY2B,QAAQ3B,SAAS;IAE5E,EAAE,eAAM;QACN,OAAOyB;IACT;IACA,MAAMG,WAAuC,EAAE;IAC/C,KAAK,MAAMD,WAAWH,SAAU;QAC9B,MAAMK,MAAO,MAAMjC,QAAQ2B,KAAK1B,SAAS,EAAEU,MAAMT,MAAM,EAAES,MAAMR,KAAK,EAAE4B,QAAQ3B,SAAS;QACvF,MAAM8B,cAAcrC,qBAAqBoC,uBAAAA,IAAKE,QAAQ;QACtD,IAAID,YAAYE,MAAM,EAAEJ,SAASK,IAAI,CAAC;YAAEjC,WAAW2B,QAAQ3B,SAAS;YAAE8B;QAAY;IACpF;IACA,IAAI,CAACF,SAASI,MAAM,EAAE,OAAOP;IAC7B,MAAMS,UAAsE,CAAC;IAC7E,MAAMC,QAAQC,GAAG,CACfR,SAASS,OAAO,CAAC,CAACC,UAChBA,QAAQR,WAAW,CAACS,GAAG,CAAC,OAAOC;gBAMhBN,UAAQI,oBAARJ;YALb,MAAM1B,SAAS,MAAMH,WAAWkB,KAAKjB,OAAO,EAAE;gBAC5CR,QAAQS,MAAMT,MAAM;gBACpBE,WAAWsC,QAAQtC,SAAS;gBAC5ByC,cAAcD,WAAWE,EAAE;YAC7B;YACA,IAAIlC,QAAQ,EAAC0B,IAAAA,CAAAA,WAAAA,QAAO,CAACI,qBAAAA,QAAQtC,SAAS,CAAC,YAA1BkC,IAAAA,QAAO,CAACI,mBAAkB,GAAK,CAAC,EAAE,CAACE,WAAWE,EAAE,CAAC,GAAGlC;QACnE;IAGJ,OAAOhB,wBAAwB;QAAEgC;QAAUI;QAAUM;IAAQ;AAC/D;AAEA;;;;;;;CAOC,GACD,OAAO,SAASS,0BAA0BC,KAAqC;QAG5DA,MAAAA;IAFjB,MAAM,EAAE7C,KAAK,EAAED,MAAM,EAAE+C,QAAQ,EAAE,GAAGD;IACpC,MAAME,aAAazD;IACnB,MAAM0D,YAAWH,QAAAA,kBAAAA,MAAMG,QAAQ,YAAdH,kBAAkBE,sBAAlBF,OAAgC;IACjD,MAAM/C,YAAYZ;IAClB,MAAM,EAAEmB,MAAM4C,IAAI,EAAE,GAAG9D;IACvB,MAAM,CAAC+D,OAAOC,SAAS,GAAG3D,SAA8CkC;IACxE,MAAM0B,SAASC,QAAQrD,SAASD,UAAUH,YAAY0D,IAAI,CAACN;IAC3D,MAAMO,OAAOV,MAAMU,IAAI;IACvB,MAAMC,eAAOP,wBAAD,AAACA,KAA8CO,GAAG,oBAAI;IAElEjE,UAAU;QACR,IAAI,CAAC6D,UAAU,CAACpD,SAAS,CAACD,UAAW,CAACwD,QAAQ,CAACC,KAAM;YACnDL,SAASzB;YACT,OAAOA;QACT;QACA,IAAI+B,OAAO;QACX,MAAMC,OACJH,eAAAA,OAAS,CAAC/C,QAAUe,4BAA4B;gBAAEzB;gBAAWS,SAAS,CAACL,OAASjB,gBAAgBgE,MAAe/C;YAAM,GAAGM;QAC1H,KAAKkD,KAAK;YAAE1D;YAAOD;QAAO,GACvB4D,IAAI,CAAC,CAACC;YACL,IAAIH,MAAMN,SAASS;QACrB,GACC5C,KAAK,CAAC;YACL,IAAIyC,MAAMN,SAASzB;QACrB;QACF,OAAO;YACL+B,OAAO;QACT;IACA,0FAA0F;IAC1F,uDAAuD;IACzD,GAAG;QAACL;QAAQpD;QAAOD;QAAQyD;QAAK1D;QAAWyD;KAAK;IAEhD,qBAAO,KAACvE,+BAA+B6E,QAAQ;QAACX,OAAOA;kBAAQJ;;AACjE;AACAF,0BAA0BkB,WAAW,GAAG;AAExC,eAAelB,0BAAyB"}
+{"version":3,"sources":["../../../../../../../libs/plugins/marketplace/src/lib/components/editor-connections-provider.component.tsx"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n'use client'\n\nimport {\n  EditorPluginConnectionsContext,\n  type EditorPluginConnections,\n} from '@aglyn/aglyn/app-utils/plugin-connection-editor'\nimport type { PluginConnectionSiteRecord } from '@aglyn/aglyn/app-utils/plugin-connection-records'\nimport { registerRepeatSource } from '@aglyn/aglyn/app-utils/repeat-sources'\nimport { authorizedFetch } from '@aglyn/shared-util-http/authorized-token'\nimport { useFirestore, useUser } from '@aglyn/tenant-feature-instance'\nimport { doc, getDoc, type Firestore } from 'firebase/firestore'\nimport { usePathname } from 'next/navigation'\nimport { useEffect, useState, type ReactNode } from 'react'\nimport {\n  editorPluginConnections,\n  syncingConnectionsOf,\n  type EditorListingConnections,\n  type EditorRealmInstall,\n} from '../model/editor-connections'\nimport { PLUGIN_CONNECTIONS_API_ROUTES } from '../model/plugin-connections'\nimport { connectionRepeatSource } from '../repeat/connection-repeat-source'\n\n/** The console's editor surfaces: the Besigner and Preview of any document. */\nconst EDITOR_PATH = /\\/(besigner|preview)(\\/|$)/\n\nexport interface EditorConnectionsProviderProps {\n  orgId?: string | null\n  hostId?: string | null\n  children?: ReactNode\n  /** Test seam: the console path. */\n  pathname?: string\n  /** Test seam: reads the site's realm installs, pins and records. */\n  load?: (input: { orgId: string; hostId: string }) => Promise<EditorPluginConnections | undefined>\n}\n\ntype Fetcher = (path: string) => Promise<Response>\n\n/** A pin of `listingId` on the site, else the workspace's. */\nasync function readPin(firestore: Firestore, hostId: string, orgId: string, listingId: string): Promise<unknown> {\n  for (const path of [['hosts', hostId, 'installs', listingId], ['orgs', orgId, 'installs', listingId]] as const) {\n    try {\n      const snapshot = await getDoc(doc(firestore, path[0], path[1], path[2], path[3]))\n      if (snapshot.exists()) return snapshot.data()\n    } catch {\n      // A pin this member cannot read is one the editor does without.\n    }\n  }\n  return null\n}\n\n/** The record of one connection, or `null` quietly: no key, no plan, no sync yet. */\nasync function readRecord(\n  fetcher: Fetcher,\n  input: { hostId: string; listingId: string; connectionId: string },\n): Promise<PluginConnectionSiteRecord | null> {\n  try {\n    const response = await fetcher(`/api/${PLUGIN_CONNECTIONS_API_ROUTES.record}?${new URLSearchParams(input).toString()}`)\n    if (!response.ok) return null\n    const answer = (await response.json().catch(() => null)) as { record?: Record<string, unknown> | null } | null\n    const record = answer?.record\n    if (!record || typeof record !== 'object') return null\n    return {\n      fields: (record['fields'] ?? {}) as PluginConnectionSiteRecord['fields'],\n      items: (Array.isArray(record['items']) ? record['items'] : []) as PluginConnectionSiteRecord['items'],\n      syncedAtMs: Number(record['syncedAtMs']) || 0,\n    }\n  } catch {\n    return null\n  }\n}\n\n/** Everything the editor is handed for one site, read once. */\nexport async function loadEditorPluginConnections(\n  deps: { firestore: Firestore; fetcher: Fetcher },\n  input: { orgId: string; hostId: string },\n): Promise<EditorPluginConnections | undefined> {\n  let installs: EditorRealmInstall[]\n  try {\n    const response = await deps.fetcher(`/api/orgs/realm-plugins?${new URLSearchParams(input).toString()}`)\n    if (!response.ok) return undefined\n    installs = (((await response.json()) as { installs?: EditorRealmInstall[] }).installs ?? []).filter(\n      (install) => typeof install?.listingId === 'string' && install.listingId,\n    )\n  } catch {\n    return undefined\n  }\n  const listings: EditorListingConnections[] = []\n  for (const install of installs) {\n    const pin = (await readPin(deps.firestore, input.hostId, input.orgId, install.listingId)) as { manifest?: unknown } | null\n    const connections = syncingConnectionsOf(pin?.manifest)\n    if (connections.length) listings.push({ listingId: install.listingId, connections })\n  }\n  if (!listings.length) return undefined\n  const records: Record<string, Record<string, PluginConnectionSiteRecord>> = {}\n  await Promise.all(\n    listings.flatMap((listing) =>\n      listing.connections.map(async (connection) => {\n        const record = await readRecord(deps.fetcher, {\n          hostId: input.hostId,\n          listingId: listing.listingId,\n          connectionId: connection.id,\n        })\n        if (record) (records[listing.listingId] ??= {})[connection.id] = record\n      }),\n    ),\n  )\n  return editorPluginConnections({ installs, listings, records })\n}\n\n/**\n * The site's declared connections, for the editor (AGL-4196): registered as a\n * console provider, active only on the Besigner and Preview, where the\n * canvas hands each signed element its record and the binding picker lists\n * each record's fields by name. A refusal (no site key, no plan) or a failed\n * read leaves the context empty: elements read `null`, as on a site that has\n * not connected.\n */\nexport function EditorConnectionsProvider(props: EditorConnectionsProviderProps) {\n  const { orgId, hostId, children } = props\n  const routerPath = usePathname()\n  const pathname = props.pathname ?? routerPath ?? ''\n  const firestore = useFirestore()\n  const { data: user } = useUser()\n  const [value, setValue] = useState<EditorPluginConnections | undefined>(undefined)\n  const active = Boolean(orgId && hostId && EDITOR_PATH.test(pathname))\n  const load = props.load\n  const uid = (user as { uid?: string } | null | undefined)?.uid ?? ''\n\n  useEffect(() => {\n    if (!active || !orgId || !hostId || (!load && !uid)) {\n      setValue(undefined)\n      return undefined\n    }\n    let live = true\n    const read =\n      load ?? ((input) => loadEditorPluginConnections({ firestore, fetcher: (path) => authorizedFetch(user as never, path) }, input))\n    void read({ orgId, hostId })\n      .then((next) => {\n        if (live) setValue(next)\n      })\n      .catch(() => {\n        if (live) setValue(undefined)\n      })\n    return () => {\n      live = false\n    }\n    // `user` churns with token refreshes; the member, the site and the surface name the read.\n    // eslint-disable-next-line react-hooks/exhaustive-deps\n  }, [active, orgId, hostId, uid, firestore, load])\n\n  // The repeat source follows the site (AGL-4212): its picker lists this\n  // site's connections, and its token menu their fields. Put back to the\n  // site-less source when the editor closes, as the registrar left it.\n  useEffect(() => {\n    if (!value?.repeatables?.length) return undefined\n    registerRepeatSource(connectionRepeatSource(value))\n    return () => {\n      registerRepeatSource(connectionRepeatSource())\n    }\n  }, [value])\n\n  return <EditorPluginConnectionsContext.Provider value={value}>{children}</EditorPluginConnectionsContext.Provider>\n}\nEditorConnectionsProvider.displayName = 'EditorConnectionsProvider'\n\nexport default EditorConnectionsProvider\n"],"names":["EditorPluginConnectionsContext","registerRepeatSource","authorizedFetch","useFirestore","useUser","doc","getDoc","usePathname","useEffect","useState","editorPluginConnections","syncingConnectionsOf","PLUGIN_CONNECTIONS_API_ROUTES","connectionRepeatSource","EDITOR_PATH","readPin","firestore","hostId","orgId","listingId","path","snapshot","exists","data","readRecord","fetcher","input","record","response","URLSearchParams","toString","ok","answer","json","catch","fields","items","Array","isArray","syncedAtMs","Number","loadEditorPluginConnections","deps","installs","undefined","filter","install","listings","pin","connections","manifest","length","push","records","Promise","all","flatMap","listing","map","connection","connectionId","id","EditorConnectionsProvider","props","children","routerPath","pathname","user","value","setValue","active","Boolean","test","load","uid","live","read","then","next","repeatables","Provider","displayName"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GACD;;AAEA,SACEA,8BAA8B,QAEzB,kDAAiD;AAExD,SAASC,oBAAoB,QAAQ,wCAAuC;AAC5E,SAASC,eAAe,QAAQ,2CAA0C;AAC1E,SAASC,YAAY,EAAEC,OAAO,QAAQ,iCAAgC;AACtE,SAASC,GAAG,EAAEC,MAAM,QAAwB,qBAAoB;AAChE,SAASC,WAAW,QAAQ,kBAAiB;AAC7C,SAASC,SAAS,EAAEC,QAAQ,QAAwB,QAAO;AAC3D,SACEC,uBAAuB,EACvBC,oBAAoB,QAGf,iCAA6B;AACpC,SAASC,6BAA6B,QAAQ,iCAA6B;AAC3E,SAASC,sBAAsB,QAAQ,wCAAoC;AAE3E,6EAA6E,GAC7E,MAAMC,cAAc;AAcpB,4DAA4D,GAC5D,eAAeC,QAAQC,SAAoB,EAAEC,MAAc,EAAEC,KAAa,EAAEC,SAAiB;IAC3F,KAAK,MAAMC,QAAQ;QAAC;YAAC;YAASH;YAAQ;YAAYE;SAAU;QAAE;YAAC;YAAQD;YAAO;YAAYC;SAAU;KAAC,CAAW;QAC9G,IAAI;YACF,MAAME,WAAW,MAAMf,OAAOD,IAAIW,WAAWI,IAAI,CAAC,EAAE,EAAEA,IAAI,CAAC,EAAE,EAAEA,IAAI,CAAC,EAAE,EAAEA,IAAI,CAAC,EAAE;YAC/E,IAAIC,SAASC,MAAM,IAAI,OAAOD,SAASE,IAAI;QAC7C,EAAE,eAAM;QACN,gEAAgE;QAClE;IACF;IACA,OAAO;AACT;AAEA,mFAAmF,GACnF,eAAeC,WACbC,OAAgB,EAChBC,KAAkE;IAElE,IAAI;YAOSC;QANX,MAAMC,WAAW,MAAMH,QAAQ,CAAC,KAAK,EAAEb,8BAA8Be,MAAM,CAAC,CAAC,EAAE,IAAIE,gBAAgBH,OAAOI,QAAQ,IAAI;QACtH,IAAI,CAACF,SAASG,EAAE,EAAE,OAAO;QACzB,MAAMC,SAAU,MAAMJ,SAASK,IAAI,GAAGC,KAAK,CAAC,IAAM;QAClD,MAAMP,SAASK,0BAAAA,OAAQL,MAAM;QAC7B,IAAI,CAACA,UAAU,OAAOA,WAAW,UAAU,OAAO;QAClD,OAAO;YACLQ,MAAM,GAAGR,iBAAAA,MAAM,CAAC,SAAS,YAAhBA,iBAAoB,CAAC;YAC9BS,OAAQC,MAAMC,OAAO,CAACX,MAAM,CAAC,QAAQ,IAAIA,MAAM,CAAC,QAAQ,GAAG,EAAE;YAC7DY,YAAYC,OAAOb,MAAM,CAAC,aAAa,KAAK;QAC9C;IACF,EAAE,eAAM;QACN,OAAO;IACT;AACF;AAEA,6DAA6D,GAC7D,OAAO,eAAec,4BACpBC,IAAgD,EAChDhB,KAAwC;IAExC,IAAIiB;IACJ,IAAI;YAGU;QAFZ,MAAMf,WAAW,MAAMc,KAAKjB,OAAO,CAAC,CAAC,wBAAwB,EAAE,IAAII,gBAAgBH,OAAOI,QAAQ,IAAI;QACtG,IAAI,CAACF,SAASG,EAAE,EAAE,OAAOa;QACzBD,WAAW,EAAC,YAAA,AAAE,CAAA,MAAMf,SAASK,IAAI,EAAC,EAA2CU,QAAQ,YAAzE,YAA6E,EAAE,EAAEE,MAAM,CACjG,CAACC,UAAY,QAAOA,2BAAAA,QAAS3B,SAAS,MAAK,YAAY2B,QAAQ3B,SAAS;IAE5E,EAAE,eAAM;QACN,OAAOyB;IACT;IACA,MAAMG,WAAuC,EAAE;IAC/C,KAAK,MAAMD,WAAWH,SAAU;QAC9B,MAAMK,MAAO,MAAMjC,QAAQ2B,KAAK1B,SAAS,EAAEU,MAAMT,MAAM,EAAES,MAAMR,KAAK,EAAE4B,QAAQ3B,SAAS;QACvF,MAAM8B,cAActC,qBAAqBqC,uBAAAA,IAAKE,QAAQ;QACtD,IAAID,YAAYE,MAAM,EAAEJ,SAASK,IAAI,CAAC;YAAEjC,WAAW2B,QAAQ3B,SAAS;YAAE8B;QAAY;IACpF;IACA,IAAI,CAACF,SAASI,MAAM,EAAE,OAAOP;IAC7B,MAAMS,UAAsE,CAAC;IAC7E,MAAMC,QAAQC,GAAG,CACfR,SAASS,OAAO,CAAC,CAACC,UAChBA,QAAQR,WAAW,CAACS,GAAG,CAAC,OAAOC;gBAMhBN,UAAQI,oBAARJ;YALb,MAAM1B,SAAS,MAAMH,WAAWkB,KAAKjB,OAAO,EAAE;gBAC5CR,QAAQS,MAAMT,MAAM;gBACpBE,WAAWsC,QAAQtC,SAAS;gBAC5ByC,cAAcD,WAAWE,EAAE;YAC7B;YACA,IAAIlC,QAAQ,EAAC0B,IAAAA,CAAAA,WAAAA,QAAO,CAACI,qBAAAA,QAAQtC,SAAS,CAAC,YAA1BkC,IAAAA,QAAO,CAACI,mBAAkB,GAAK,CAAC,EAAE,CAACE,WAAWE,EAAE,CAAC,GAAGlC;QACnE;IAGJ,OAAOjB,wBAAwB;QAAEiC;QAAUI;QAAUM;IAAQ;AAC/D;AAEA;;;;;;;CAOC,GACD,OAAO,SAASS,0BAA0BC,KAAqC;QAG5DA,MAAAA;IAFjB,MAAM,EAAE7C,KAAK,EAAED,MAAM,EAAE+C,QAAQ,EAAE,GAAGD;IACpC,MAAME,aAAa1D;IACnB,MAAM2D,YAAWH,QAAAA,kBAAAA,MAAMG,QAAQ,YAAdH,kBAAkBE,sBAAlBF,OAAgC;IACjD,MAAM/C,YAAYb;IAClB,MAAM,EAAEoB,MAAM4C,IAAI,EAAE,GAAG/D;IACvB,MAAM,CAACgE,OAAOC,SAAS,GAAG5D,SAA8CmC;IACxE,MAAM0B,SAASC,QAAQrD,SAASD,UAAUH,YAAY0D,IAAI,CAACN;IAC3D,MAAMO,OAAOV,MAAMU,IAAI;IACvB,MAAMC,eAAOP,wBAAD,AAACA,KAA8CO,GAAG,oBAAI;IAElElE,UAAU;QACR,IAAI,CAAC8D,UAAU,CAACpD,SAAS,CAACD,UAAW,CAACwD,QAAQ,CAACC,KAAM;YACnDL,SAASzB;YACT,OAAOA;QACT;QACA,IAAI+B,OAAO;QACX,MAAMC,OACJH,eAAAA,OAAS,CAAC/C,QAAUe,4BAA4B;gBAAEzB;gBAAWS,SAAS,CAACL,OAASlB,gBAAgBiE,MAAe/C;YAAM,GAAGM;QAC1H,KAAKkD,KAAK;YAAE1D;YAAOD;QAAO,GACvB4D,IAAI,CAAC,CAACC;YACL,IAAIH,MAAMN,SAASS;QACrB,GACC5C,KAAK,CAAC;YACL,IAAIyC,MAAMN,SAASzB;QACrB;QACF,OAAO;YACL+B,OAAO;QACT;IACA,0FAA0F;IAC1F,uDAAuD;IACzD,GAAG;QAACL;QAAQpD;QAAOD;QAAQyD;QAAK1D;QAAWyD;KAAK;IAEhD,uEAAuE;IACvE,uEAAuE;IACvE,qEAAqE;IACrEjE,UAAU;YACH4D;QAAL,IAAI,EAACA,0BAAAA,qBAAAA,MAAOW,WAAW,qBAAlBX,mBAAoBjB,MAAM,GAAE,OAAOP;QACxC3C,qBAAqBY,uBAAuBuD;QAC5C,OAAO;YACLnE,qBAAqBY;QACvB;IACF,GAAG;QAACuD;KAAM;IAEV,qBAAO,KAACpE,+BAA+BgF,QAAQ;QAACZ,OAAOA;kBAAQJ;;AACjE;AACAF,0BAA0BmB,WAAW,GAAG;AAExC,eAAenB,0BAAyB"}

package/src/lib/components/listing-content.component.d.ts

@@ -1,3 +1,4 @@
+import { type OrgInstallHost } from '../model/marketplace';
 export declare function ListingReadme({ readme }: {
     readme: string;
 }): import("react").JSX.Element;
@@ -41,12 +42,11 @@ export interface MarketplaceListingContentProps {
     /**
      * The org's sites, for the install-targeting picker (AGL-773). Present only
      * at org scope; when given (and non-empty) the CTA offers All sites vs
-     * Selected sites instead of the single org/host choice.
+     * Selected sites instead of the single org/host choice. Each carries the
+     * site's own `disabledPlugins` when the shell has it (AGL-4047), which the
+     * installed-sites panel reads.
      */
-    hosts?: ReadonlyArray<{
-        id: string;
-        label: string;
-    }>;
+    hosts?: ReadonlyArray<OrgInstallHost>;
 }
 /**
  * Marketplace listing detail (AGL-95/419), relocated from the app route —

package/src/lib/components/listing-content.component.js

@@ -16,10 +16,12 @@
  */ 'use client';
 import { _ as _extends } from "@swc/helpers/_/_extends";
 import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-runtime";
-import { LISTING_README_MAX_CHARS, listingArtifactType, installsUnreviewedFallback, listingArtifactLabel, listingInclusions, hasLivePurchaseOf, hasOrgLicenceOf, licensedOrgIdsFor, installTargetsFor, isListingDeleted, isPrivateListing, resolveInstallPlan, resolveOrgInstallSummary, resolvePluginInstallState, resolveUninstallTargets, safePublisherHref, safePublisherImageSrc } from "../model/marketplace.js";
+import { LISTING_README_MAX_CHARS, listingArtifactType, installsUnreviewedFallback, listingArtifactLabel, listingInclusions, hasLivePurchaseOf, hasOrgLicenceOf, licensedOrgIdsFor, installTargetsFor, isListingDeleted, isPrivateListing, resolveInstallPlan, resolveOrgInstallSummary, resolvePluginInstallState, resolveUninstallTargets, safePublisherHref, safePublisherImageSrc, allExceptInstallKind } from "../model/marketplace.js";
 import { isPublisherMemberElsewhere, landsInPublisherWorkspace, publisherMemberBuyReason } from "../model/own-listing.js";
 import { BlockedControl } from "@aglyn/shared-ui-jsx/components/blocked-control.component";
 import { PrerequisiteNotice } from "@aglyn/shared-ui-jsx/components/prerequisite-notice.component";
+import { SiteSharingField } from "@aglyn/shared-ui-jsx/components/site-sharing-field.component";
+import { orgPermissionLabel } from "@aglyn/aglyn/app-utils/org-permissions";
 import UninstallImpactDialog from "./uninstall-impact-dialog.component.js";
 import { ListingImage } from "./listing-image.component.js";
 import { buildRoute, parseMarkdownLite, PLATFORM_BRAND_NAME, offeredPluginVersion, PLUGIN_HOST_ABI_VERSION, pluginDocsHelp, resolveMarkdownLink, resolveMediaSrc, Route } from "@aglyn/aglyn";
@@ -27,7 +29,7 @@ import { mdiCheckCircle, mdiCheckCircleOutline, mdiEmailOutline, mdiGithub, mdiI
 import { AppLink, CardDisplay, GridItems, MdiIcon } from "@aglyn/shared-ui-jsx";
 import { NextPageTitle } from "@aglyn/shared-ui-next/contexts/next-page-title-provider";
 import { useSnackbar } from "@aglyn/shared-ui-snackstack";
-import { Alert, Avatar, Box, Button, Checkbox, Chip, Dialog, DialogActions, DialogContent, DialogTitle, Divider, FormControl, FormControlLabel, FormGroup, FormHelperText, FormLabel, IconButton, Link as MuiLink, Rating, Stack, Tooltip, Typography } from "@mui/material";
+import { Alert, Avatar, Box, Button, Chip, Dialog, DialogActions, DialogContent, DialogTitle, Divider, IconButton, Link as MuiLink, Rating, Stack, Tooltip, Typography } from "@mui/material";
 import { collection, doc, documentId, getDoc, limit, orderBy, query, where } from "firebase/firestore";
 import { useEffect, useMemo, useState } from "react";
 import { useConsoleHostRoute, useFirestore, useFirestoreCollection, useFirestoreDoc, useHostOrgId, useUser, useScopeTokens } from "@aglyn/tenant-feature-instance";
@@ -427,15 +429,23 @@ export function ListingReadme({ readme }) {
     const [updateOpen, setUpdateOpen] = useState(false);
     // Screenshot lightbox (AGL-869): the clicked screenshot's URL, or null.
     const [lightboxUrl, setLightboxUrl] = useState(null);
-    // Org-scope install targeting (AGL-773): All sites vs a chosen subset. Only
-    // engaged at org scope with a known site list; otherwise the per-site tab's
-    // simpler org/host choice (AGL-656) still applies.
+    // Org-scope install targeting (AGL-773): All sites, a chosen subset, or all
+    // sites except some (AGL-4047). Only engaged at org scope with a known site
+    // list; otherwise the per-site tab's simpler org/host choice (AGL-656) still
+    // applies.
     const orgTargeting = Boolean(orgScoped && hosts && hosts.length > 0);
-    const [targeting, setTargeting] = useState('all-sites');
-    const [selectedHostIds, setSelectedHostIds] = useState([]);
+    const [installTo, setInstallTo] = useState({
+        mode: 'all'
+    });
     const allHostIds = useMemo(()=>(hosts != null ? hosts : []).map((h)=>h.id), [
         hosts
     ]);
+    const installSites = useMemo(()=>(hosts != null ? hosts : []).map((host)=>({
+                id: host.id,
+                name: host.label
+            })), [
+        hosts
+    ]);
     // Listings are org-owned (AGL-652) — "did I publish this" is an org
     // comparison, resolved from the routing mirror like the browse grid.
     const [viewerOrgId, setViewerOrgId] = useState(null);
@@ -922,15 +932,49 @@ export function ListingReadme({ readme }) {
     // artifact can host-pin (plugins, components, templates, layouts) — an
     // org-only artifact can't target a subset.
     const canSelectSites = installTargets.includes('host');
+    // "All sites except…" (AGL-4047): a plugin pins once for the workspace and
+    // leaves the chosen sites out, so a site added later gets it; a per-site copy
+    // only picks today's sites; an org-only artifact can't leave one out.
+    const allExceptKind = listing ? allExceptInstallKind(listing) : null;
+    const installModes = useMemo(()=>[
+            'all',
+            ...canSelectSites ? [
+                'selected'
+            ] : [],
+            ...allExceptKind ? [
+                'allExcept'
+            ] : []
+        ], [
+        canSelectSites,
+        allExceptKind
+    ]);
+    // A choice the artifact doesn't offer reads as All sites, never as a plan
+    // that silently means something else.
+    const installChoice = useMemo(()=>installModes.includes(installTo.mode) ? installTo : {
+            mode: 'all'
+        }, [
+        installModes,
+        installTo
+    ]);
+    const targeting = installChoice.mode === 'selected' ? 'selected-sites' : installChoice.mode === 'allExcept' ? 'all-sites-except' : 'all-sites';
     const installPlanSteps = useMemo(()=>listing ? resolveInstallPlan(listing, targeting, {
-            selectedHostIds,
-            allHostIds
+            selectedHostIds: installChoice.mode === 'selected' ? installChoice.hostIds : [],
+            allHostIds,
+            exceptHostIds: installChoice.mode === 'allExcept' ? installChoice.exceptHostIds : []
         }) : [], [
         listing,
         targeting,
-        selectedHostIds,
+        installChoice,
         allHostIds
     ]);
+    const installModeDetails = installTargets.includes('org') ? {
+        all: 'Every site, including sites you add later.',
+        allExcept: 'Every site but the ones you leave out, including sites you add later.'
+    } : {
+        all: `Installs to all ${allHostIds.length} site` + (allHostIds.length === 1 ? '' : 's') + ". New sites won't get it automatically.",
+        allExcept: 'Installs to the sites you have today, but the ones you leave ' + "out. New sites won't get it automatically."
+    };
+    const installToProblem = installChoice.mode === 'selected' && !installChoice.hostIds.length ? 'Pick at least one site.' : installChoice.mode === 'allExcept' && !installChoice.exceptHostIds.length ? 'Choose at least one site to leave out, or choose All sites.' : null;
     const versionHistory = Array.isArray(listing == null ? void 0 : listing.versionHistory) ? [
         ...listing.versionHistory
     ].sort((a, b)=>b.version - a.version) : [];
@@ -940,8 +984,18 @@ export function ListingReadme({ readme }) {
     // something else.
     const installTargetSummary = ()=>{
         if (orgTargeting && !installed) {
-            var _installPlanSteps_;
-            if (installPlanSteps.length === 1 && ((_installPlanSteps_ = installPlanSteps[0]) == null ? void 0 : _installPlanSteps_.scope) === 'org') {
+            var _installPlanSteps_, _orgStep_exceptHostIds;
+            const orgStep = installPlanSteps.length === 1 && ((_installPlanSteps_ = installPlanSteps[0]) == null ? void 0 : _installPlanSteps_.scope) === 'org' ? installPlanSteps[0] : null;
+            if (orgStep == null ? void 0 : (_orgStep_exceptHostIds = orgStep.exceptHostIds) == null ? void 0 : _orgStep_exceptHostIds.length) {
+                // "All sites except…" (AGL-4047): the sites left out, by name.
+                const leftOut = orgStep.exceptHostIds.map((hostId)=>{
+                    var _ref;
+                    var _find;
+                    return (_ref = (_find = (hosts != null ? hosts : []).find((host)=>host.id === hostId)) == null ? void 0 : _find.label) != null ? _ref : hostId;
+                });
+                return `every site except ${leftOut.join(', ')}, ` + 'including sites added later';
+            }
+            if (orgStep) {
                 return 'the whole organization — every site, including sites added later';
             }
             const names = installPlanSteps.filter((step)=>step.scope === 'host').map((step)=>{
@@ -965,10 +1019,13 @@ export function ListingReadme({ readme }) {
     // and which are still free to add. Only meaningful at org scope for a
     // plugin — everything else installs INTO a site and has no pin to survey.
     const orgPluginScope = Boolean(orgTargeting && isPlugin);
-    const orgInstall = useMemo(()=>resolveOrgInstallSummary(hosts != null ? hosts : [], sitePins, orgPin != null ? orgPin : null), [
+    const orgInstall = useMemo(// With each site's own switch (AGL-4047), so a site that turned the plugin
+    // off, or was left out at install, is not listed as running it.
+    ()=>resolveOrgInstallSummary(hosts != null ? hosts : [], sitePins, orgPin != null ? orgPin : null, listingId), [
         hosts,
         sitePins,
-        orgPin
+        orgPin,
+        listingId
     ]);
     /** Run a pin write, then re-read every site's pin. */ const runSiteEdit = async (work)=>{
         try {
@@ -1428,68 +1485,28 @@ export function ListingReadme({ readme }) {
                                                         })
                                                     }) : null,
                                                     orgTargeting && !installed && !(orgPluginScope && orgInstall.installedAnywhere) ? /*#__PURE__*/ _jsxs(Stack, {
-                                                        spacing: 1.5,
+                                                        spacing: 1,
                                                         sx: {
                                                             maxWidth: 420
                                                         },
                                                         children: [
-                                                            /*#__PURE__*/ _jsxs(TextField, {
-                                                                select: true,
-                                                                size: "small",
+                                                            /*#__PURE__*/ _jsx(SiteSharingField, {
                                                                 label: "Install to",
-                                                                value: targeting,
-                                                                onChange: (event)=>setTargeting(event.target.value),
-                                                                helperText: targeting === 'all-sites' ? installTargets.includes('org') ? 'Available on every site — including sites you add later.' : `Installs to all ${allHostIds.length} site` + (allHostIds.length === 1 ? '' : 's') + ". New sites won't get it automatically." : 'Installs only to the sites you choose.',
-                                                                children: [
-                                                                    /*#__PURE__*/ _jsx(MenuItem, {
-                                                                        value: "all-sites",
-                                                                        children: 'All sites'
-                                                                    }),
-                                                                    canSelectSites ? /*#__PURE__*/ _jsx(MenuItem, {
-                                                                        value: "selected-sites",
-                                                                        children: 'Selected sites'
-                                                                    }) : null
-                                                                ]
+                                                                value: installChoice,
+                                                                onChange: setInstallTo,
+                                                                sites: installSites,
+                                                                sitesReady: true,
+                                                                modes: installModes,
+                                                                modeDetails: installModeDetails,
+                                                                listLabels: {
+                                                                    selected: 'Sites to install to'
+                                                                },
+                                                                problem: installToProblem
                                                             }),
-                                                            targeting === 'selected-sites' && canSelectSites ? /*#__PURE__*/ _jsxs(FormControl, {
-                                                                component: "fieldset",
-                                                                error: !selectedHostIds.length,
-                                                                children: [
-                                                                    /*#__PURE__*/ _jsx(FormLabel, {
-                                                                        component: "legend",
-                                                                        sx: {
-                                                                            typography: 'caption'
-                                                                        },
-                                                                        children: 'Sites'
-                                                                    }),
-                                                                    /*#__PURE__*/ _jsx(FormGroup, {
-                                                                        // Scrolls rather than pushing Install off
-                                                                        // the page on an org with many sites.
-                                                                        sx: {
-                                                                            maxHeight: 240,
-                                                                            overflowY: 'auto'
-                                                                        },
-                                                                        children: (hosts != null ? hosts : []).map((host)=>/*#__PURE__*/ _jsx(FormControlLabel, {
-                                                                                control: /*#__PURE__*/ _jsx(Checkbox, {
-                                                                                    size: "small",
-                                                                                    checked: selectedHostIds.includes(host.id),
-                                                                                    onChange: (event)=>setSelectedHostIds((current)=>event.target.checked ? [
-                                                                                                ...current,
-                                                                                                host.id
-                                                                                            ] : current.filter((id)=>id !== host.id))
-                                                                                }),
-                                                                                label: host.label,
-                                                                                slotProps: {
-                                                                                    typography: {
-                                                                                        variant: 'body2'
-                                                                                    }
-                                                                                }
-                                                                            }, host.id))
-                                                                    }),
-                                                                    /*#__PURE__*/ _jsx(FormHelperText, {
-                                                                        children: selectedHostIds.length ? `${selectedHostIds.length} of ${(hosts != null ? hosts : []).length} selected.` : 'Pick at least one site.'
-                                                                    })
-                                                                ]
+                                                            installChoice.mode === 'allExcept' && allExceptKind === 'lasting' ? /*#__PURE__*/ _jsx(Typography, {
+                                                                variant: "caption",
+                                                                color: "text.secondary",
+                                                                children: 'Each site you leave out has the plugin ' + 'switched off, with the same switch as its ' + 'own Admin › Plugins page. Leaving a site ' + 'out takes ' + `“${orgPermissionLabel('site.manage')}” ` + 'there, and anyone holding it, which the ' + 'site’s admins do by default, can turn the ' + 'plugin back on for that site.'
                                                             }) : null
                                                         ]
                                                     }) : installTargets.length > 1 && !installed ? /*#__PURE__*/ _jsxs(TextField, {