@aglyn/plugins-workflows 1.0.0-beta.143

package/src/lib/components/host-webhooks-card.component.js

@@ -0,0 +1,421 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ 'use client';
+import { _ as _extends } from "@swc/helpers/_/_extends";
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { checkEntitlement, createResourceUid, pluginDocsHelp, WEBHOOK_MAX_PER_HOST, WEBHOOK_URL_PATTERN } from "@aglyn/aglyn";
+import { CardDisplay, useConfirmationContext } from "@aglyn/shared-ui-jsx";
+import { hostPublicOrigin } from "@aglyn/aglyn/app-utils/host-naming";
+import { useSnackbar } from "@aglyn/shared-ui-snackstack";
+import { Timestamp } from "@aglyn/shared-util-timestamp";
+import { Alert, Button, Dialog, DialogActions, DialogContent, DialogTitle, MenuItem, Stack, TextField, Typography } from "@mui/material";
+import { collection, doc, updateDoc } from "firebase/firestore";
+import { useCallback, useState } from "react";
+import { useFirestore, useFirestoreCollection, useFirestoreDoc, useHostResourceApi } from "@aglyn/tenant-feature-instance";
+/*
+ * The MODULE, not the barrel, for the two PURE helpers — the specs that render
+ * this card mock `@aglyn/tenant-feature-instance` wholesale to stage their
+ * Firestore hooks, and a query builder imported through that barrel disappears
+ * under the mock. Neither of these is a hook.
+ */ import { ceilingedWindow, collectionCeiling } from "@aglyn/tenant-feature-instance/hooks/host-collection-queries";
+/**
+ * How many webhook documents the card reads.
+ *
+ * Above `WEBHOOK_MAX_PER_HOST` on purpose. The cap counts LIVE hooks and the
+ * collection keeps soft-deleted ones, so a site that has created and deleted
+ * its five several times holds more documents than it may have hooks.
+ */ const WEBHOOK_CEILING = 20;
+/**
+ * How many workflows the inbound-endpoint picker offers.
+ *
+ * Paid for only while the editor is open, which is what makes a ceiling this
+ * size affordable: it is one operator mid-edit rather than every visitor to
+ * the page.
+ */ const WORKFLOW_OPTION_CEILING = 100;
+function generateSecret() {
+    const bytes = new Uint8Array(24);
+    crypto.getRandomValues(bytes);
+    return Array.from(bytes, (byte)=>byte.toString(16).padStart(2, '0')).join('');
+}
+/**
+ * Webhooks manager (AGL-149): outbound targets (used by the actions
+ * builder's "Send a webhook" step, HMAC-signed) and inbound endpoints
+ * (`/api/hooks/{hostId}/{hookId}`, secret-verified, run a workflow with
+ * the payload in scope). Business tier.
+ */ export function HostWebhooksCard(props) {
+    var _hostPublicOrigin, _ref, _ref1, _ref2, _ref3, _ref4;
+    const { hostId, org } = props;
+    const firestore = useFirestore();
+    const { enqueueSnackbar } = useSnackbar();
+    const { confirm } = useConfirmationContext();
+    const createResource = useHostResourceApi();
+    const [draft, setDraft] = useState(null);
+    /**
+   * The editor has been opened at least once in this session.
+   *
+   * A LATCH rather than `draft` itself, because the workflow picker below keys its
+   * listeners on it. Tracking the dialog would tear that subscription down
+   * on Cancel and pay for them again on the next Edit, so a merchant working
+   * through ten actions would buy the same window ten times — worse than
+   * the mount-time read this replaces. Latched, a reader who never edits pays
+   * nothing and a reader who edits pays once.
+   */ const [editorOpened, setEditorOpened] = useState(false);
+    if (draft && !editorOpened) setEditorOpened(true);
+    /*
+   * ORDERED AND CEILINGED (AGL-2501). A bare `limit` is answered in
+   * DOCUMENT-ID order, so an unnamed window is an arbitrary twenty that the
+   * `localeCompare` below would arrange alphabetically. `collectionCeiling`
+   * does not change WHICH twenty; it NAMES the order, and the probe row it
+   * adds is what lets the card say when the ceiling bites.
+   */ const { data: webhookRead } = useFirestoreCollection(()=>collectionCeiling(collection(firestore, 'hosts', hostId, 'webhooks'), WEBHOOK_CEILING), [
+        firestore,
+        hostId
+    ], {
+        idField: '$id'
+    });
+    const { rows: readWebhooks, truncated: webhooksTruncated } = ceilingedWindow(webhookRead, WEBHOOK_CEILING);
+    /*
+   * READ WHEN THE EDITOR OPENS, not when the card mounts. The only thing that
+   * consumes these rows is the inbound-endpoint select inside the dialog — the
+   * table renders a hook's stored `workflowName` — so an unconditional
+   * listener would charge every visitor to this page a hundred workflows to
+   * fill a control most of them never see, and one that only appears for the
+   * inbound half of the form at that.
+   */ const { data: workflowRead } = useFirestoreCollection(()=>editorOpened ? collectionCeiling(collection(firestore, 'hosts', hostId, 'workflows'), WORKFLOW_OPTION_CEILING) : null, [
+        firestore,
+        hostId,
+        editorOpened
+    ], {
+        idField: '$id'
+    });
+    const { rows: readWorkflows, truncated: workflowOptionsTruncated } = ceilingedWindow(workflowRead, WORKFLOW_OPTION_CEILING);
+    const { data: host } = useFirestoreDoc(()=>doc(firestore, 'hosts', hostId), [
+        firestore,
+        hostId
+    ], {
+        idField: '$id'
+    });
+    // Sorting the whole ceiling, not a page of it.
+    const webhooks = [
+        ...readWebhooks
+    ].filter((hook)=>!hook.deletedAt).sort((a, b)=>{
+        var _a_name, _b_name;
+        return String((_a_name = a.name) != null ? _a_name : '').localeCompare(String((_b_name = b.name) != null ? _b_name : ''));
+    });
+    const workflowNames = readWorkflows.filter((workflow)=>!workflow.deletedAt && workflow.name).map((workflow)=>workflow.name).sort();
+    // `hostPublicOrigin` (AGL-2195) — this base is printed into the webhook
+    // sample payload an operator copies into a third-party system.
+    const siteBase = (_hostPublicOrigin = hostPublicOrigin(host)) != null ? _hostPublicOrigin : '';
+    const handleAdd = useCallback(()=>{
+        if (!checkEntitlement(org, 'webhooks')) {
+            return void enqueueSnackbar('Webhooks require a Business plan — see Billing to upgrade', {
+                variant: 'warning',
+                persist: false
+            });
+        }
+        // An affordance, NOT the limit (AGL-1360). `webhooks` comes from a
+        // Firestore listener and the console runs `persistentLocalCache`, so this
+        // count can be arbitrarily stale — it is here to fail fast when it
+        // happens to be right, never to authorise the create. The cap that holds
+        // is counted server-side in /api/hosts/resources.
+        if (webhooks.length >= WEBHOOK_MAX_PER_HOST) {
+            return void enqueueSnackbar(`Webhooks are capped at ${WEBHOOK_MAX_PER_HOST} per site`, {
+                variant: 'warning',
+                persist: false
+            });
+        }
+        setDraft({
+            id: null,
+            name: '',
+            direction: 'outbound',
+            url: '',
+            workflowName: '',
+            secret: generateSecret()
+        });
+    }, [
+        org,
+        webhooks.length,
+        enqueueSnackbar
+    ]);
+    const handleSave = useCallback(async ()=>{
+        if (!draft || !draft.name.trim()) return;
+        if (draft.direction === 'outbound') {
+            if (!WEBHOOK_URL_PATTERN.test(draft.url.trim())) {
+                return void enqueueSnackbar('Outbound URLs must be public https addresses', {
+                    variant: 'warning',
+                    persist: false
+                });
+            }
+        } else if (!draft.workflowName.trim()) {
+            return void enqueueSnackbar('Pick the workflow this endpoint runs', {
+                variant: 'warning',
+                persist: false
+            });
+        }
+        try {
+            // Creates go through /api/hosts/resources (AGL-1360), which counts the
+            // live webhooks with the Admin SDK before allowing one more; Firestore
+            // rules deny client `create` on this collection. The card has no edit
+            // path — every save is a create — so there is no update branch here.
+            await createResource({
+                hostId,
+                resource: 'webhook',
+                id: createResourceUid(),
+                data: _extends({
+                    name: draft.name.trim().slice(0, 60),
+                    direction: draft.direction
+                }, draft.direction === 'outbound' ? {
+                    url: draft.url.trim()
+                } : {
+                    workflowName: draft.workflowName.trim()
+                }, {
+                    secret: draft.secret,
+                    enabled: true
+                })
+            });
+            setDraft(null);
+            enqueueSnackbar('Webhook saved', {
+                variant: 'success',
+                persist: false
+            });
+        } catch (error) {
+            console.error(error);
+            // The route's message is the useful one — it names the cap, the
+            // entitlement or the role that refused.
+            enqueueSnackbar((error == null ? void 0 : error.message) || 'An error has occurred', {
+                variant: 'error',
+                allowDuplicate: true
+            });
+        }
+    }, [
+        draft,
+        createResource,
+        hostId,
+        enqueueSnackbar
+    ]);
+    const handleDelete = useCallback((hook)=>async ()=>{
+            const confirmed = await confirm({
+                title: 'Delete this webhook?',
+                description: `"${hook.name}" stops ${hook.direction === 'outbound' ? 'delivering' : 'accepting calls'} immediately.`,
+                confirmationText: 'Delete',
+                confirmationButtonProps: {
+                    color: 'error'
+                }
+            }).then(()=>true).catch(()=>false);
+            if (!confirmed) return;
+            await updateDoc(doc(firestore, 'hosts', hostId, 'webhooks', hook.$id), {
+                deletedAt: Timestamp.now()
+            });
+        }, [
+        confirm,
+        firestore,
+        hostId
+    ]);
+    return /*#__PURE__*/ _jsxs(CardDisplay, {
+        header: 'Webhooks',
+        help: pluginDocsHelp('webhooks', {
+            anchor: '#outbound-webhooks'
+        }),
+        contentGutterX: true,
+        contentGutterY: true,
+        children: [
+            /*#__PURE__*/ _jsxs(Stack, {
+                spacing: 1,
+                children: [
+                    /*#__PURE__*/ _jsx(Typography, {
+                        variant: "body2",
+                        color: "text.secondary",
+                        children: 'Send signed JSON to outside systems from the actions builder, ' + 'or accept calls that run a workflow. Business plans.'
+                    }),
+                    webhooks.map((hook)=>/*#__PURE__*/ _jsxs(Stack, {
+                            direction: "row",
+                            spacing: 1,
+                            sx: {
+                                alignItems: 'center'
+                            },
+                            children: [
+                                /*#__PURE__*/ _jsxs(Stack, {
+                                    sx: {
+                                        flex: 1,
+                                        minWidth: 0
+                                    },
+                                    children: [
+                                        /*#__PURE__*/ _jsx(Typography, {
+                                            variant: "body2",
+                                            noWrap: true,
+                                            children: hook.name
+                                        }),
+                                        /*#__PURE__*/ _jsx(Typography, {
+                                            variant: "caption",
+                                            color: "text.secondary",
+                                            noWrap: true,
+                                            children: hook.direction === 'outbound' ? `outbound · ${hook.url}` : `inbound · ${siteBase}/api/hooks/${hostId}/${hook.$id}` + ` → ${hook.workflowName}`
+                                        })
+                                    ]
+                                }),
+                                hook.direction === 'inbound' ? /*#__PURE__*/ _jsx(Button, {
+                                    size: "small",
+                                    onClick: ()=>{
+                                        void navigator.clipboard.writeText(`${siteBase}/api/hooks/${hostId}/${hook.$id}`);
+                                        enqueueSnackbar('Endpoint URL copied — send the secret in x-aglyn-secret', {
+                                            variant: 'success',
+                                            persist: false
+                                        });
+                                    },
+                                    children: 'Copy URL'
+                                }) : null,
+                                /*#__PURE__*/ _jsx(Button, {
+                                    size: "small",
+                                    onClick: ()=>{
+                                        var _hook_secret;
+                                        void navigator.clipboard.writeText((_hook_secret = hook.secret) != null ? _hook_secret : '');
+                                        enqueueSnackbar('Secret copied', {
+                                            variant: 'success',
+                                            persist: false
+                                        });
+                                    },
+                                    children: 'Secret'
+                                }),
+                                /*#__PURE__*/ _jsx(Button, {
+                                    size: "small",
+                                    color: "error",
+                                    onClick: handleDelete(hook),
+                                    children: 'Delete'
+                                })
+                            ]
+                        }, hook.$id)),
+                    webhooksTruncated ? /*#__PURE__*/ _jsx(Alert, {
+                        severity: "info",
+                        children: `Showing the first ${WEBHOOK_CEILING} webhook documents on this ` + 'site, ordered by id. There are more, so a hook may be missing ' + 'from this list.'
+                    }) : null,
+                    /*#__PURE__*/ _jsx(Button, {
+                        size: "small",
+                        color: "primary",
+                        sx: {
+                            alignSelf: 'flex-start'
+                        },
+                        onClick: handleAdd,
+                        children: 'Add webhook'
+                    })
+                ]
+            }),
+            /*#__PURE__*/ _jsxs(Dialog, {
+                open: Boolean(draft),
+                onClose: ()=>setDraft(null),
+                maxWidth: "xs",
+                fullWidth: true,
+                children: [
+                    /*#__PURE__*/ _jsx(DialogTitle, {
+                        children: 'Add webhook'
+                    }),
+                    /*#__PURE__*/ _jsxs(DialogContent, {
+                        sx: {
+                            display: 'flex',
+                            flexDirection: 'column',
+                            gap: 1.5,
+                            pt: 1
+                        },
+                        children: [
+                            /*#__PURE__*/ _jsx(TextField, {
+                                label: "Name",
+                                value: (_ref = draft == null ? void 0 : draft.name) != null ? _ref : '',
+                                onChange: (event)=>setDraft((prev)=>prev ? _extends({}, prev, {
+                                            name: event.target.value
+                                        }) : prev),
+                                size: "small",
+                                autoFocus: true,
+                                sx: {
+                                    mt: 1
+                                }
+                            }),
+                            /*#__PURE__*/ _jsxs(TextField, {
+                                select: true,
+                                label: "Direction",
+                                value: (_ref1 = draft == null ? void 0 : draft.direction) != null ? _ref1 : 'outbound',
+                                onChange: (event)=>setDraft((prev)=>prev ? _extends({}, prev, {
+                                            direction: event.target.value
+                                        }) : prev),
+                                size: "small",
+                                children: [
+                                    /*#__PURE__*/ _jsx(MenuItem, {
+                                        value: "outbound",
+                                        children: 'Outbound — send data to a URL'
+                                    }),
+                                    /*#__PURE__*/ _jsx(MenuItem, {
+                                        value: "inbound",
+                                        children: 'Inbound — receive data, run a workflow'
+                                    })
+                                ]
+                            }),
+                            (draft == null ? void 0 : draft.direction) === 'outbound' ? /*#__PURE__*/ _jsx(TextField, {
+                                label: "Delivery URL",
+                                placeholder: "https://example.com/hooks/aglyn",
+                                value: (_ref2 = draft == null ? void 0 : draft.url) != null ? _ref2 : '',
+                                onChange: (event)=>setDraft((prev)=>prev ? _extends({}, prev, {
+                                            url: event.target.value
+                                        }) : prev),
+                                size: "small"
+                            }) : /*#__PURE__*/ _jsx(TextField, {
+                                select: true,
+                                label: "Workflow to run",
+                                helperText: workflowOptionsTruncated ? `Showing ${WORKFLOW_OPTION_CEILING} workflows, ordered ` + 'by id. This site has more, so one of them is not ' + 'offered here.' : undefined,
+                                value: (_ref3 = draft == null ? void 0 : draft.workflowName) != null ? _ref3 : '',
+                                onChange: (event)=>setDraft((prev)=>prev ? _extends({}, prev, {
+                                            workflowName: event.target.value
+                                        }) : prev),
+                                size: "small",
+                                children: workflowNames.map((name)=>/*#__PURE__*/ _jsx(MenuItem, {
+                                        value: name,
+                                        children: name
+                                    }, name))
+                            }),
+                            /*#__PURE__*/ _jsx(TextField, {
+                                label: "Secret",
+                                helperText: (draft == null ? void 0 : draft.direction) === 'outbound' ? 'Signs deliveries (X-Aglyn-Signature, HMAC-SHA256)' : 'Callers send this in the x-aglyn-secret header',
+                                value: (_ref4 = draft == null ? void 0 : draft.secret) != null ? _ref4 : '',
+                                size: "small",
+                                slotProps: {
+                                    input: {
+                                        readOnly: true
+                                    }
+                                }
+                            })
+                        ]
+                    }),
+                    /*#__PURE__*/ _jsxs(DialogActions, {
+                        children: [
+                            /*#__PURE__*/ _jsx(Button, {
+                                onClick: ()=>setDraft(null),
+                                children: 'Cancel'
+                            }),
+                            /*#__PURE__*/ _jsx(Button, {
+                                variant: "contained",
+                                color: "primary",
+                                disabled: !(draft == null ? void 0 : draft.name.trim()),
+                                onClick: handleSave,
+                                children: 'Save webhook'
+                            })
+                        ]
+                    })
+                ]
+            })
+        ]
+    });
+}
+HostWebhooksCard.displayName = 'HostWebhooksCard';
+export default HostWebhooksCard;
+
+//# sourceMappingURL=host-webhooks-card.component.js.map

package/src/lib/components/host-webhooks-card.component.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../libs/plugins/workflows/src/lib/components/host-webhooks-card.component.tsx"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n'use client'\n\nimport {\n  type AglynOrgBilling,\n  checkEntitlement,\n  createResourceUid,\n  pluginDocsHelp,\n  WEBHOOK_MAX_PER_HOST,\n  WEBHOOK_URL_PATTERN,\n} from '@aglyn/aglyn'\nimport { CardDisplay, useConfirmationContext } from '@aglyn/shared-ui-jsx'\nimport { hostPublicOrigin } from '@aglyn/aglyn/app-utils/host-naming'\nimport { useSnackbar } from '@aglyn/shared-ui-snackstack'\nimport { Timestamp } from '@aglyn/shared-util-timestamp'\nimport {\n  Alert,\n  Button,\n  Dialog,\n  DialogActions,\n  DialogContent,\n  DialogTitle,\n  MenuItem,\n  Stack,\n  TextField,\n  Typography,\n} from '@mui/material'\nimport { collection, doc, updateDoc } from 'firebase/firestore'\nimport { useCallback, useState } from 'react'\nimport {\n  useFirestore,\n  useFirestoreCollection,\n  useFirestoreDoc,\n  useHostResourceApi,\n} from '@aglyn/tenant-feature-instance'\n/*\n * The MODULE, not the barrel, for the two PURE helpers — the specs that render\n * this card mock `@aglyn/tenant-feature-instance` wholesale to stage their\n * Firestore hooks, and a query builder imported through that barrel disappears\n * under the mock. Neither of these is a hook.\n */\nimport {\n  ceilingedWindow,\n  collectionCeiling,\n} from '@aglyn/tenant-feature-instance/hooks/host-collection-queries'\n\n/**\n * How many webhook documents the card reads.\n *\n * Above `WEBHOOK_MAX_PER_HOST` on purpose. The cap counts LIVE hooks and the\n * collection keeps soft-deleted ones, so a site that has created and deleted\n * its five several times holds more documents than it may have hooks.\n */\nconst WEBHOOK_CEILING = 20\n\n/**\n * How many workflows the inbound-endpoint picker offers.\n *\n * Paid for only while the editor is open, which is what makes a ceiling this\n * size affordable: it is one operator mid-edit rather than every visitor to\n * the page.\n */\nconst WORKFLOW_OPTION_CEILING = 100\n\nfunction generateSecret(): string {\n  const bytes = new Uint8Array(24)\n  crypto.getRandomValues(bytes)\n  return Array.from(bytes, (byte) => byte.toString(16).padStart(2, '0')).join(\n    '',\n  )\n}\n\ninterface WebhookDraft {\n  id: string | null\n  name: string\n  direction: 'outbound' | 'inbound'\n  url: string\n  workflowName: string\n  secret: string\n}\n\n/**\n * Webhooks manager (AGL-149): outbound targets (used by the actions\n * builder's \"Send a webhook\" step, HMAC-signed) and inbound endpoints\n * (`/api/hooks/{hostId}/{hookId}`, secret-verified, run a workflow with\n * the payload in scope). Business tier.\n */\nexport function HostWebhooksCard(props: {\n  hostId: string\n  org?: Partial<AglynOrgBilling>\n}) {\n  const { hostId, org } = props\n  const firestore = useFirestore()\n  const { enqueueSnackbar } = useSnackbar()\n  const { confirm } = useConfirmationContext()\n  const createResource = useHostResourceApi()\n\n\n  const [draft, setDraft] = useState<WebhookDraft | null>(null)\n  /**\n   * The editor has been opened at least once in this session.\n   *\n   * A LATCH rather than `draft` itself, because the workflow picker below keys its\n   * listeners on it. Tracking the dialog would tear that subscription down\n   * on Cancel and pay for them again on the next Edit, so a merchant working\n   * through ten actions would buy the same window ten times — worse than\n   * the mount-time read this replaces. Latched, a reader who never edits pays\n   * nothing and a reader who edits pays once.\n   */\n  const [editorOpened, setEditorOpened] = useState(false)\n  if (draft && !editorOpened) setEditorOpened(true)\n  /*\n   * ORDERED AND CEILINGED (AGL-2501). A bare `limit` is answered in\n   * DOCUMENT-ID order, so an unnamed window is an arbitrary twenty that the\n   * `localeCompare` below would arrange alphabetically. `collectionCeiling`\n   * does not change WHICH twenty; it NAMES the order, and the probe row it\n   * adds is what lets the card say when the ceiling bites.\n   */\n  const { data: webhookRead } = useFirestoreCollection<any>(\n    () =>\n      collectionCeiling(\n        collection(firestore, 'hosts', hostId, 'webhooks'),\n        WEBHOOK_CEILING,\n      ),\n    [firestore, hostId],\n    { idField: '$id' },\n  )\n  const { rows: readWebhooks, truncated: webhooksTruncated } =\n    ceilingedWindow<any>(webhookRead, WEBHOOK_CEILING)\n  /*\n   * READ WHEN THE EDITOR OPENS, not when the card mounts. The only thing that\n   * consumes these rows is the inbound-endpoint select inside the dialog — the\n   * table renders a hook's stored `workflowName` — so an unconditional\n   * listener would charge every visitor to this page a hundred workflows to\n   * fill a control most of them never see, and one that only appears for the\n   * inbound half of the form at that.\n   */\n  const { data: workflowRead } = useFirestoreCollection<any>(\n    () =>\n      editorOpened\n        ? collectionCeiling(\n            collection(firestore, 'hosts', hostId, 'workflows'),\n            WORKFLOW_OPTION_CEILING,\n          )\n        : null,\n    [firestore, hostId, editorOpened],\n    { idField: '$id' },\n  )\n  const { rows: readWorkflows, truncated: workflowOptionsTruncated } =\n    ceilingedWindow<any>(workflowRead, WORKFLOW_OPTION_CEILING)\n  const { data: host } = useFirestoreDoc<any>(\n    () => doc(firestore, 'hosts', hostId),\n    [firestore, hostId],\n    { idField: '$id' },\n  )\n  // Sorting the whole ceiling, not a page of it.\n  const webhooks = [...readWebhooks]\n    .filter((hook: any) => !hook.deletedAt)\n    .sort((a: any, b: any) =>\n      String(a.name ?? '').localeCompare(String(b.name ?? '')),\n    )\n  const workflowNames = readWorkflows\n    .filter((workflow: any) => !workflow.deletedAt && workflow.name)\n    .map((workflow: any) => workflow.name as string)\n    .sort()\n  // `hostPublicOrigin` (AGL-2195) — this base is printed into the webhook\n  // sample payload an operator copies into a third-party system.\n  const siteBase = hostPublicOrigin(host) ?? ''\n\n  const handleAdd = useCallback(() => {\n    if (!checkEntitlement(org, 'webhooks')) {\n      return void enqueueSnackbar(\n        'Webhooks require a Business plan — see Billing to upgrade',\n        { variant: 'warning', persist: false },\n      )\n    }\n    // An affordance, NOT the limit (AGL-1360). `webhooks` comes from a\n    // Firestore listener and the console runs `persistentLocalCache`, so this\n    // count can be arbitrarily stale — it is here to fail fast when it\n    // happens to be right, never to authorise the create. The cap that holds\n    // is counted server-side in /api/hosts/resources.\n    if (webhooks.length >= WEBHOOK_MAX_PER_HOST) {\n      return void enqueueSnackbar(\n        `Webhooks are capped at ${WEBHOOK_MAX_PER_HOST} per site`,\n        { variant: 'warning', persist: false },\n      )\n    }\n    setDraft({\n      id: null,\n      name: '',\n      direction: 'outbound',\n      url: '',\n      workflowName: '',\n      secret: generateSecret(),\n    })\n  }, [org, webhooks.length, enqueueSnackbar])\n\n  const handleSave = useCallback(async () => {\n    if (!draft || !draft.name.trim()) return\n    if (draft.direction === 'outbound') {\n      if (!WEBHOOK_URL_PATTERN.test(draft.url.trim())) {\n        return void enqueueSnackbar(\n          'Outbound URLs must be public https addresses',\n          { variant: 'warning', persist: false },\n        )\n      }\n    } else if (!draft.workflowName.trim()) {\n      return void enqueueSnackbar('Pick the workflow this endpoint runs', {\n        variant: 'warning',\n        persist: false,\n      })\n    }\n    try {\n      // Creates go through /api/hosts/resources (AGL-1360), which counts the\n      // live webhooks with the Admin SDK before allowing one more; Firestore\n      // rules deny client `create` on this collection. The card has no edit\n      // path — every save is a create — so there is no update branch here.\n      await createResource({\n        hostId,\n        resource: 'webhook',\n        id: createResourceUid(),\n        data: {\n          name: draft.name.trim().slice(0, 60),\n          direction: draft.direction,\n          ...(draft.direction === 'outbound'\n            ? { url: draft.url.trim() }\n            : { workflowName: draft.workflowName.trim() }),\n          secret: draft.secret,\n          enabled: true,\n        },\n      })\n      setDraft(null)\n      enqueueSnackbar('Webhook saved', { variant: 'success', persist: false })\n    } catch (error: any) {\n      console.error(error)\n      // The route's message is the useful one — it names the cap, the\n      // entitlement or the role that refused.\n      enqueueSnackbar(error?.message || 'An error has occurred', {\n        variant: 'error',\n        allowDuplicate: true,\n      })\n    }\n  }, [draft, createResource, hostId, enqueueSnackbar])\n\n  const handleDelete = useCallback(\n    (hook: any) => async () => {\n      const confirmed = await confirm({\n        title: 'Delete this webhook?',\n        description: `\"${hook.name}\" stops ${\n          hook.direction === 'outbound' ? 'delivering' : 'accepting calls'\n        } immediately.`,\n        confirmationText: 'Delete',\n        confirmationButtonProps: { color: 'error' },\n      })\n        .then(() => true)\n        .catch(() => false)\n      if (!confirmed) return\n      await updateDoc(doc(firestore, 'hosts', hostId, 'webhooks', hook.$id), {\n        deletedAt: Timestamp.now(),\n      })\n    },\n    [confirm, firestore, hostId],\n  )\n\n  return (\n    <CardDisplay\n      header={'Webhooks'}\n      help={pluginDocsHelp('webhooks', { anchor: '#outbound-webhooks' })}\n      contentGutterX\n      contentGutterY\n    >\n      <Stack spacing={1}>\n        <Typography variant=\"body2\" color=\"text.secondary\">\n          {'Send signed JSON to outside systems from the actions builder, ' +\n            'or accept calls that run a workflow. Business plans.'}\n        </Typography>\n        {webhooks.map((hook: any) => (\n          <Stack\n            key={hook.$id}\n            direction=\"row\"\n            spacing={1}\n            sx={{ alignItems: 'center' }}\n          >\n            <Stack sx={{ flex: 1, minWidth: 0 }}>\n              <Typography variant=\"body2\" noWrap>\n                {hook.name}\n              </Typography>\n              <Typography variant=\"caption\" color=\"text.secondary\" noWrap>\n                {hook.direction === 'outbound'\n                  ? `outbound · ${hook.url}`\n                  : `inbound · ${siteBase}/api/hooks/${hostId}/${hook.$id}` +\n                    ` → ${hook.workflowName}`}\n              </Typography>\n            </Stack>\n            {hook.direction === 'inbound' ? (\n              <Button\n                size=\"small\"\n                onClick={() => {\n                  void navigator.clipboard.writeText(\n                    `${siteBase}/api/hooks/${hostId}/${hook.$id}`,\n                  )\n                  enqueueSnackbar(\n                    'Endpoint URL copied — send the secret in x-aglyn-secret',\n                    { variant: 'success', persist: false },\n                  )\n                }}\n              >\n                {'Copy URL'}\n              </Button>\n            ) : null}\n            <Button\n              size=\"small\"\n              onClick={() => {\n                void navigator.clipboard.writeText(hook.secret ?? '')\n                enqueueSnackbar('Secret copied', {\n                  variant: 'success',\n                  persist: false,\n                })\n              }}\n            >\n              {'Secret'}\n            </Button>\n            <Button size=\"small\" color=\"error\" onClick={handleDelete(hook)}>\n              {'Delete'}\n            </Button>\n          </Stack>\n        ))}\n        {webhooksTruncated ? (\n          <Alert severity=\"info\">\n            {`Showing the first ${WEBHOOK_CEILING} webhook documents on this ` +\n              'site, ordered by id. There are more, so a hook may be missing ' +\n              'from this list.'}\n          </Alert>\n        ) : null}\n        <Button\n          size=\"small\"\n          color=\"primary\"\n          sx={{ alignSelf: 'flex-start' }}\n          onClick={handleAdd}\n        >\n          {'Add webhook'}\n        </Button>\n      </Stack>\n\n      <Dialog\n        open={Boolean(draft)}\n        onClose={() => setDraft(null)}\n        maxWidth=\"xs\"\n        fullWidth\n      >\n        <DialogTitle>{'Add webhook'}</DialogTitle>\n        <DialogContent\n          sx={{ display: 'flex', flexDirection: 'column', gap: 1.5, pt: 1 }}\n        >\n          <TextField\n            label=\"Name\"\n            value={draft?.name ?? ''}\n            onChange={(event) =>\n              setDraft((prev) =>\n                prev ? { ...prev, name: event.target.value } : prev,\n              )\n            }\n            size=\"small\"\n            autoFocus\n            sx={{ mt: 1 }}\n          />\n          <TextField\n            select\n            label=\"Direction\"\n            value={draft?.direction ?? 'outbound'}\n            onChange={(event) =>\n              setDraft((prev) =>\n                prev\n                  ? { ...prev, direction: event.target.value as any }\n                  : prev,\n              )\n            }\n            size=\"small\"\n          >\n            <MenuItem value=\"outbound\">\n              {'Outbound — send data to a URL'}\n            </MenuItem>\n            <MenuItem value=\"inbound\">\n              {'Inbound — receive data, run a workflow'}\n            </MenuItem>\n          </TextField>\n          {draft?.direction === 'outbound' ? (\n            <TextField\n              label=\"Delivery URL\"\n              placeholder=\"https://example.com/hooks/aglyn\"\n              value={draft?.url ?? ''}\n              onChange={(event) =>\n                setDraft((prev) =>\n                  prev ? { ...prev, url: event.target.value } : prev,\n                )\n              }\n              size=\"small\"\n            />\n          ) : (\n            <TextField\n              select\n              label=\"Workflow to run\"\n              helperText={\n                workflowOptionsTruncated\n                  ? `Showing ${WORKFLOW_OPTION_CEILING} workflows, ordered ` +\n                    'by id. This site has more, so one of them is not ' +\n                    'offered here.'\n                  : undefined\n              }\n              value={draft?.workflowName ?? ''}\n              onChange={(event) =>\n                setDraft((prev) =>\n                  prev ? { ...prev, workflowName: event.target.value } : prev,\n                )\n              }\n              size=\"small\"\n            >\n              {workflowNames.map((name) => (\n                <MenuItem key={name} value={name}>\n                  {name}\n                </MenuItem>\n              ))}\n            </TextField>\n          )}\n          <TextField\n            label=\"Secret\"\n            helperText={\n              draft?.direction === 'outbound'\n                ? 'Signs deliveries (X-Aglyn-Signature, HMAC-SHA256)'\n                : 'Callers send this in the x-aglyn-secret header'\n            }\n            value={draft?.secret ?? ''}\n            size=\"small\"\n            slotProps={{ input: { readOnly: true } }}\n          />\n        </DialogContent>\n        <DialogActions>\n          <Button onClick={() => setDraft(null)}>{'Cancel'}</Button>\n          <Button\n            variant=\"contained\"\n            color=\"primary\"\n            disabled={!draft?.name.trim()}\n            onClick={handleSave}\n          >\n            {'Save webhook'}\n          </Button>\n        </DialogActions>\n      </Dialog>\n    </CardDisplay>\n  )\n}\nHostWebhooksCard.displayName = 'HostWebhooksCard'\n\nexport default HostWebhooksCard\n"],"names":["checkEntitlement","createResourceUid","pluginDocsHelp","WEBHOOK_MAX_PER_HOST","WEBHOOK_URL_PATTERN","CardDisplay","useConfirmationContext","hostPublicOrigin","useSnackbar","Timestamp","Alert","Button","Dialog","DialogActions","DialogContent","DialogTitle","MenuItem","Stack","TextField","Typography","collection","doc","updateDoc","useCallback","useState","useFirestore","useFirestoreCollection","useFirestoreDoc","useHostResourceApi","ceilingedWindow","collectionCeiling","WEBHOOK_CEILING","WORKFLOW_OPTION_CEILING","generateSecret","bytes","Uint8Array","crypto","getRandomValues","Array","from","byte","toString","padStart","join","HostWebhooksCard","props","hostId","org","firestore","enqueueSnackbar","confirm","createResource","draft","setDraft","editorOpened","setEditorOpened","data","webhookRead","idField","rows","readWebhooks","truncated","webhooksTruncated","workflowRead","readWorkflows","workflowOptionsTruncated","host","webhooks","filter","hook","deletedAt","sort","a","b","String","name","localeCompare","workflowNames","workflow","map","siteBase","handleAdd","variant","persist","length","id","direction","url","workflowName","secret","handleSave","trim","test","resource","slice","enabled","error","console","message","allowDuplicate","handleDelete","confirmed","title","description","confirmationText","confirmationButtonProps","color","then","catch","$id","now","header","help","anchor","contentGutterX","contentGutterY","spacing","sx","alignItems","flex","minWidth","noWrap","size","onClick","navigator","clipboard","writeText","severity","alignSelf","open","Boolean","onClose","maxWidth","fullWidth","display","flexDirection","gap","pt","label","value","onChange","event","prev","target","autoFocus","mt","select","placeholder","helperText","undefined","slotProps","input","readOnly","disabled","displayName"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GACD;;;AAEA,SAEEA,gBAAgB,EAChBC,iBAAiB,EACjBC,cAAc,EACdC,oBAAoB,EACpBC,mBAAmB,QACd,eAAc;AACrB,SAASC,WAAW,EAAEC,sBAAsB,QAAQ,uBAAsB;AAC1E,SAASC,gBAAgB,QAAQ,qCAAoC;AACrE,SAASC,WAAW,QAAQ,8BAA6B;AACzD,SAASC,SAAS,QAAQ,+BAA8B;AACxD,SACEC,KAAK,EACLC,MAAM,EACNC,MAAM,EACNC,aAAa,EACbC,aAAa,EACbC,WAAW,EACXC,QAAQ,EACRC,KAAK,EACLC,SAAS,EACTC,UAAU,QACL,gBAAe;AACtB,SAASC,UAAU,EAAEC,GAAG,EAAEC,SAAS,QAAQ,qBAAoB;AAC/D,SAASC,WAAW,EAAEC,QAAQ,QAAQ,QAAO;AAC7C,SACEC,YAAY,EACZC,sBAAsB,EACtBC,eAAe,EACfC,kBAAkB,QACb,iCAAgC;AACvC;;;;;CAKC,GACD,SACEC,eAAe,EACfC,iBAAiB,QACZ,+DAA8D;AAErE;;;;;;CAMC,GACD,MAAMC,kBAAkB;AAExB;;;;;;CAMC,GACD,MAAMC,0BAA0B;AAEhC,SAASC;IACP,MAAMC,QAAQ,IAAIC,WAAW;IAC7BC,OAAOC,eAAe,CAACH;IACvB,OAAOI,MAAMC,IAAI,CAACL,OAAO,CAACM,OAASA,KAAKC,QAAQ,CAAC,IAAIC,QAAQ,CAAC,GAAG,MAAMC,IAAI,CACzE;AAEJ;AAWA;;;;;CAKC,GACD,OAAO,SAASC,iBAAiBC,KAGhC;QA6EkBtC;IA5EjB,MAAM,EAAEuC,MAAM,EAAEC,GAAG,EAAE,GAAGF;IACxB,MAAMG,YAAYvB;IAClB,MAAM,EAAEwB,eAAe,EAAE,GAAGzC;IAC5B,MAAM,EAAE0C,OAAO,EAAE,GAAG5C;IACpB,MAAM6C,iBAAiBvB;IAGvB,MAAM,CAACwB,OAAOC,SAAS,GAAG7B,SAA8B;IACxD;;;;;;;;;GASC,GACD,MAAM,CAAC8B,cAAcC,gBAAgB,GAAG/B,SAAS;IACjD,IAAI4B,SAAS,CAACE,cAAcC,gBAAgB;IAC5C;;;;;;GAMC,GACD,MAAM,EAAEC,MAAMC,WAAW,EAAE,GAAG/B,uBAC5B,IACEI,kBACEV,WAAW4B,WAAW,SAASF,QAAQ,aACvCf,kBAEJ;QAACiB;QAAWF;KAAO,EACnB;QAAEY,SAAS;IAAM;IAEnB,MAAM,EAAEC,MAAMC,YAAY,EAAEC,WAAWC,iBAAiB,EAAE,GACxDjC,gBAAqB4B,aAAa1B;IACpC;;;;;;;GAOC,GACD,MAAM,EAAEyB,MAAMO,YAAY,EAAE,GAAGrC,uBAC7B,IACE4B,eACIxB,kBACEV,WAAW4B,WAAW,SAASF,QAAQ,cACvCd,2BAEF,MACN;QAACgB;QAAWF;QAAQQ;KAAa,EACjC;QAAEI,SAAS;IAAM;IAEnB,MAAM,EAAEC,MAAMK,aAAa,EAAEH,WAAWI,wBAAwB,EAAE,GAChEpC,gBAAqBkC,cAAc/B;IACrC,MAAM,EAAEwB,MAAMU,IAAI,EAAE,GAAGvC,gBACrB,IAAMN,IAAI2B,WAAW,SAASF,SAC9B;QAACE;QAAWF;KAAO,EACnB;QAAEY,SAAS;IAAM;IAEnB,+CAA+C;IAC/C,MAAMS,WAAW;WAAIP;KAAa,CAC/BQ,MAAM,CAAC,CAACC,OAAc,CAACA,KAAKC,SAAS,EACrCC,IAAI,CAAC,CAACC,GAAQC;YACND,SAAmCC;eAA1CC,QAAOF,UAAAA,EAAEG,IAAI,YAANH,UAAU,IAAII,aAAa,CAACF,QAAOD,UAAAA,EAAEE,IAAI,YAANF,UAAU;;IAExD,MAAMI,gBAAgBb,cACnBI,MAAM,CAAC,CAACU,WAAkB,CAACA,SAASR,SAAS,IAAIQ,SAASH,IAAI,EAC9DI,GAAG,CAAC,CAACD,WAAkBA,SAASH,IAAI,EACpCJ,IAAI;IACP,wEAAwE;IACxE,+DAA+D;IAC/D,MAAMS,YAAWzE,oBAAAA,iBAAiB2D,iBAAjB3D,oBAA0B;IAE3C,MAAM0E,YAAY1D,YAAY;QAC5B,IAAI,CAACvB,iBAAiB+C,KAAK,aAAa;YACtC,OAAO,KAAKE,gBACV,6DACA;gBAAEiC,SAAS;gBAAWC,SAAS;YAAM;QAEzC;QACA,mEAAmE;QACnE,0EAA0E;QAC1E,mEAAmE;QACnE,yEAAyE;QACzE,kDAAkD;QAClD,IAAIhB,SAASiB,MAAM,IAAIjF,sBAAsB;YAC3C,OAAO,KAAK8C,gBACV,CAAC,uBAAuB,EAAE9C,qBAAqB,SAAS,CAAC,EACzD;gBAAE+E,SAAS;gBAAWC,SAAS;YAAM;QAEzC;QACA9B,SAAS;YACPgC,IAAI;YACJV,MAAM;YACNW,WAAW;YACXC,KAAK;YACLC,cAAc;YACdC,QAAQxD;QACV;IACF,GAAG;QAACc;QAAKoB,SAASiB,MAAM;QAAEnC;KAAgB;IAE1C,MAAMyC,aAAanE,YAAY;QAC7B,IAAI,CAAC6B,SAAS,CAACA,MAAMuB,IAAI,CAACgB,IAAI,IAAI;QAClC,IAAIvC,MAAMkC,SAAS,KAAK,YAAY;YAClC,IAAI,CAAClF,oBAAoBwF,IAAI,CAACxC,MAAMmC,GAAG,CAACI,IAAI,KAAK;gBAC/C,OAAO,KAAK1C,gBACV,gDACA;oBAAEiC,SAAS;oBAAWC,SAAS;gBAAM;YAEzC;QACF,OAAO,IAAI,CAAC/B,MAAMoC,YAAY,CAACG,IAAI,IAAI;YACrC,OAAO,KAAK1C,gBAAgB,wCAAwC;gBAClEiC,SAAS;gBACTC,SAAS;YACX;QACF;QACA,IAAI;YACF,uEAAuE;YACvE,uEAAuE;YACvE,sEAAsE;YACtE,qEAAqE;YACrE,MAAMhC,eAAe;gBACnBL;gBACA+C,UAAU;gBACVR,IAAIpF;gBACJuD,MAAM;oBACJmB,MAAMvB,MAAMuB,IAAI,CAACgB,IAAI,GAAGG,KAAK,CAAC,GAAG;oBACjCR,WAAWlC,MAAMkC,SAAS;mBACtBlC,MAAMkC,SAAS,KAAK,aACpB;oBAAEC,KAAKnC,MAAMmC,GAAG,CAACI,IAAI;gBAAG,IACxB;oBAAEH,cAAcpC,MAAMoC,YAAY,CAACG,IAAI;gBAAG;oBAC9CF,QAAQrC,MAAMqC,MAAM;oBACpBM,SAAS;;YAEb;YACA1C,SAAS;YACTJ,gBAAgB,iBAAiB;gBAAEiC,SAAS;gBAAWC,SAAS;YAAM;QACxE,EAAE,OAAOa,OAAY;YACnBC,QAAQD,KAAK,CAACA;YACd,gEAAgE;YAChE,wCAAwC;YACxC/C,gBAAgB+C,CAAAA,yBAAAA,MAAOE,OAAO,KAAI,yBAAyB;gBACzDhB,SAAS;gBACTiB,gBAAgB;YAClB;QACF;IACF,GAAG;QAAC/C;QAAOD;QAAgBL;QAAQG;KAAgB;IAEnD,MAAMmD,eAAe7E,YACnB,CAAC8C,OAAc;YACb,MAAMgC,YAAY,MAAMnD,QAAQ;gBAC9BoD,OAAO;gBACPC,aAAa,CAAC,CAAC,EAAElC,KAAKM,IAAI,CAAC,QAAQ,EACjCN,KAAKiB,SAAS,KAAK,aAAa,eAAe,kBAChD,aAAa,CAAC;gBACfkB,kBAAkB;gBAClBC,yBAAyB;oBAAEC,OAAO;gBAAQ;YAC5C,GACGC,IAAI,CAAC,IAAM,MACXC,KAAK,CAAC,IAAM;YACf,IAAI,CAACP,WAAW;YAChB,MAAM/E,UAAUD,IAAI2B,WAAW,SAASF,QAAQ,YAAYuB,KAAKwC,GAAG,GAAG;gBACrEvC,WAAW7D,UAAUqG,GAAG;YAC1B;QACF,GACA;QAAC5D;QAASF;QAAWF;KAAO;IAG9B,qBACE,MAACzC;QACC0G,QAAQ;QACRC,MAAM9G,eAAe,YAAY;YAAE+G,QAAQ;QAAqB;QAChEC,cAAc;QACdC,cAAc;;0BAEd,MAAClG;gBAAMmG,SAAS;;kCACd,KAACjG;wBAAW+D,SAAQ;wBAAQwB,OAAM;kCAC/B,mEACC;;oBAEHvC,SAASY,GAAG,CAAC,CAACV,qBACb,MAACpD;4BAECqE,WAAU;4BACV8B,SAAS;4BACTC,IAAI;gCAAEC,YAAY;4BAAS;;8CAE3B,MAACrG;oCAAMoG,IAAI;wCAAEE,MAAM;wCAAGC,UAAU;oCAAE;;sDAChC,KAACrG;4CAAW+D,SAAQ;4CAAQuC,MAAM;sDAC/BpD,KAAKM,IAAI;;sDAEZ,KAACxD;4CAAW+D,SAAQ;4CAAUwB,OAAM;4CAAiBe,MAAM;sDACxDpD,KAAKiB,SAAS,KAAK,aAChB,CAAC,WAAW,EAAEjB,KAAKkB,GAAG,EAAE,GACxB,CAAC,UAAU,EAAEP,SAAS,WAAW,EAAElC,OAAO,CAAC,EAAEuB,KAAKwC,GAAG,EAAE,GACvD,CAAC,GAAG,EAAExC,KAAKmB,YAAY,EAAE;;;;gCAGhCnB,KAAKiB,SAAS,KAAK,0BAClB,KAAC3E;oCACC+G,MAAK;oCACLC,SAAS;wCACP,KAAKC,UAAUC,SAAS,CAACC,SAAS,CAChC,GAAG9C,SAAS,WAAW,EAAElC,OAAO,CAAC,EAAEuB,KAAKwC,GAAG,EAAE;wCAE/C5D,gBACE,2DACA;4CAAEiC,SAAS;4CAAWC,SAAS;wCAAM;oCAEzC;8CAEC;qCAED;8CACJ,KAACxE;oCACC+G,MAAK;oCACLC,SAAS;4CAC4BtD;wCAAnC,KAAKuD,UAAUC,SAAS,CAACC,SAAS,EAACzD,eAAAA,KAAKoB,MAAM,YAAXpB,eAAe;wCAClDpB,gBAAgB,iBAAiB;4CAC/BiC,SAAS;4CACTC,SAAS;wCACX;oCACF;8CAEC;;8CAEH,KAACxE;oCAAO+G,MAAK;oCAAQhB,OAAM;oCAAQiB,SAASvB,aAAa/B;8CACtD;;;2BA7CEA,KAAKwC,GAAG;oBAiDhB/C,kCACC,KAACpD;wBAAMqH,UAAS;kCACb,CAAC,kBAAkB,EAAEhG,gBAAgB,2BAA2B,CAAC,GAChE,mEACA;yBAEF;kCACJ,KAACpB;wBACC+G,MAAK;wBACLhB,OAAM;wBACNW,IAAI;4BAAEW,WAAW;wBAAa;wBAC9BL,SAAS1C;kCAER;;;;0BAIL,MAACrE;gBACCqH,MAAMC,QAAQ9E;gBACd+E,SAAS,IAAM9E,SAAS;gBACxB+E,UAAS;gBACTC,SAAS;;kCAET,KAACtH;kCAAa;;kCACd,MAACD;wBACCuG,IAAI;4BAAEiB,SAAS;4BAAQC,eAAe;4BAAUC,KAAK;4BAAKC,IAAI;wBAAE;;0CAEhE,KAACvH;gCACCwH,OAAM;gCACNC,KAAK,UAAEvF,yBAAAA,MAAOuB,IAAI,mBAAI;gCACtBiE,UAAU,CAACC,QACTxF,SAAS,CAACyF,OACRA,OAAO,aAAKA;4CAAMnE,MAAMkE,MAAME,MAAM,CAACJ,KAAK;6CAAKG;gCAGnDpB,MAAK;gCACLsB,SAAS;gCACT3B,IAAI;oCAAE4B,IAAI;gCAAE;;0CAEd,MAAC/H;gCACCgI,MAAM;gCACNR,OAAM;gCACNC,KAAK,WAAEvF,yBAAAA,MAAOkC,SAAS,oBAAI;gCAC3BsD,UAAU,CAACC,QACTxF,SAAS,CAACyF,OACRA,OACI,aAAKA;4CAAMxD,WAAWuD,MAAME,MAAM,CAACJ,KAAK;6CACxCG;gCAGRpB,MAAK;;kDAEL,KAAC1G;wCAAS2H,OAAM;kDACb;;kDAEH,KAAC3H;wCAAS2H,OAAM;kDACb;;;;4BAGJvF,CAAAA,yBAAAA,MAAOkC,SAAS,MAAK,2BACpB,KAACpE;gCACCwH,OAAM;gCACNS,aAAY;gCACZR,KAAK,WAAEvF,yBAAAA,MAAOmC,GAAG,oBAAI;gCACrBqD,UAAU,CAACC,QACTxF,SAAS,CAACyF,OACRA,OAAO,aAAKA;4CAAMvD,KAAKsD,MAAME,MAAM,CAACJ,KAAK;6CAAKG;gCAGlDpB,MAAK;+CAGP,KAACxG;gCACCgI,MAAM;gCACNR,OAAM;gCACNU,YACEnF,2BACI,CAAC,QAAQ,EAAEjC,wBAAwB,oBAAoB,CAAC,GACxD,sDACA,kBACAqH;gCAENV,KAAK,WAAEvF,yBAAAA,MAAOoC,YAAY,oBAAI;gCAC9BoD,UAAU,CAACC,QACTxF,SAAS,CAACyF,OACRA,OAAO,aAAKA;4CAAMtD,cAAcqD,MAAME,MAAM,CAACJ,KAAK;6CAAKG;gCAG3DpB,MAAK;0CAEJ7C,cAAcE,GAAG,CAAC,CAACJ,qBAClB,KAAC3D;wCAAoB2H,OAAOhE;kDACzBA;uCADYA;;0CAMrB,KAACzD;gCACCwH,OAAM;gCACNU,YACEhG,CAAAA,yBAAAA,MAAOkC,SAAS,MAAK,aACjB,sDACA;gCAENqD,KAAK,WAAEvF,yBAAAA,MAAOqC,MAAM,oBAAI;gCACxBiC,MAAK;gCACL4B,WAAW;oCAAEC,OAAO;wCAAEC,UAAU;oCAAK;gCAAE;;;;kCAG3C,MAAC3I;;0CACC,KAACF;gCAAOgH,SAAS,IAAMtE,SAAS;0CAAQ;;0CACxC,KAAC1C;gCACCuE,SAAQ;gCACRwB,OAAM;gCACN+C,UAAU,EAACrG,yBAAAA,MAAOuB,IAAI,CAACgB,IAAI;gCAC3BgC,SAASjC;0CAER;;;;;;;;AAMb;AACA9C,iBAAiB8G,WAAW,GAAG;AAE/B,eAAe9G,iBAAgB"}

package/src/lib/components/host-workflows-card.component.d.ts

@@ -0,0 +1,18 @@
+import { type AglynOrgBilling } from '@aglyn/aglyn';
+export interface HostWorkflowsCardProps {
+    hostId: string;
+    /** Resolved entitlement source for quota checks (AGL-395). */
+    org?: Partial<AglynOrgBilling>;
+}
+/**
+ * Workflow builder v1 (AGL-101): pipelines of host-function calls — each
+ * step's argument expressions see host variables and previous step results
+ * (`step1`, or a custom result name). Runs through the pure `runWorkflow`
+ * evaluator; test-run panel included. Plan-gated (`workflows` flag +
+ * `workflowsPerHost` cap, AGL-99); site-event triggers are v2.
+ */
+export declare function HostWorkflowsCard(props: HostWorkflowsCardProps): import("react").JSX.Element;
+export declare namespace HostWorkflowsCard {
+    var displayName: string;
+}
+export default HostWorkflowsCard;