@aglyn/tenant-feature-instance 1.0.0-beta.143

package/src/lib/hooks/use-host-campaigns.js

@@ -0,0 +1,93 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ 'use client';
+import { collection } from "firebase/firestore";
+import { useMemo } from "react";
+import { collectionCeiling } from "./host-collection-queries.js";
+import { useFirestore } from "./firebase/firebase-services.js";
+import { useFirestoreCollection } from "./use-firestore-collection.js";
+/**
+ * How many campaigns a picker offers.
+ *
+ * The same fifty the campaigns table draws, so a campaign a merchant can see
+ * in the list is a campaign they can file a record under. A picker with a
+ * larger window would offer campaigns the list they came from does not show;
+ * a smaller one would hide campaigns that are plainly there.
+ */ export const HOST_CAMPAIGN_CEILING = 50;
+/**
+ * THE SITE'S CAMPAIGNS, for a picker on some other record's page.
+ *
+ * Lives here rather than in the marketing plugin because the console app may
+ * not import a feature plugin — a screen's detail page is an app route — and
+ * the form and contact surfaces that need the same list are two other
+ * libraries again. One read, one shape, three callers.
+ *
+ * ## It is OFF unless a caller asks
+ *
+ * `enabled` defaults to false. The picker this feeds sits on a record's own
+ * page beside fields a reader came for; charging every open of a form, a
+ * screen or a contact for a hundred campaign documents they may not touch is
+ * the read-on-mount this console refuses. The callers turn it on when their
+ * editing surface opens.
+ *
+ * ## Ordered on the document name
+ *
+ * `collectionCeiling`, for the reason it exists: `startAtMs` and `endAtMs`
+ * are both optional on a campaign — an open-ended one carries neither — so
+ * ordering on a date would not mis-sort the picker, it would DROP the
+ * campaigns that have no dates. The labels are sorted by name here, over the
+ * whole ceiling rather than a slice of it, which is the one case sorting a
+ * window is honest.
+ */ export function useHostCampaigns(hostId, options) {
+    var _ref;
+    const enabled = (_ref = options == null ? void 0 : options.enabled) != null ? _ref : false;
+    const firestore = useFirestore();
+    const { data, status } = useFirestoreCollection(()=>enabled && hostId ? collectionCeiling(collection(firestore, 'hosts', hostId, 'emailCampaigns'), HOST_CAMPAIGN_CEILING) : null, [
+        firestore,
+        hostId,
+        enabled
+    ], {
+        idField: '$id'
+    });
+    return useMemo(()=>{
+        const rows = data != null ? data : [];
+        const truncated = rows.length > HOST_CAMPAIGN_CEILING;
+        const live = rows.slice(0, HOST_CAMPAIGN_CEILING)// A campaign the console soft-deleted is not a campaign a record may be
+        // filed under. The campaigns table filters the same field for the same
+        // reason.
+        .filter((row)=>!row['deletedAt']);
+        return {
+            options: live.map((row)=>{
+                var _row_name, _row_startAtMs, _row_endAtMs;
+                return {
+                    value: String(row['$id']),
+                    label: String((_row_name = row['name']) != null ? _row_name : row['$id']),
+                    startAtMs: (_row_startAtMs = row['startAtMs']) != null ? _row_startAtMs : null,
+                    endAtMs: (_row_endAtMs = row['endAtMs']) != null ? _row_endAtMs : null
+                };
+            }).sort((a, b)=>a.label.localeCompare(b.label)),
+            truncated,
+            ready: enabled && status !== 'loading'
+        };
+    }, [
+        data,
+        enabled,
+        status
+    ]);
+}
+export default useHostCampaigns;
+
+//# sourceMappingURL=use-host-campaigns.js.map

package/src/lib/hooks/use-host-campaigns.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../../libs/tenant/feature/instance/src/lib/hooks/use-host-campaigns.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n'use client'\n\nimport { collection } from 'firebase/firestore'\nimport { useMemo } from 'react'\nimport { collectionCeiling } from './host-collection-queries'\nimport { useFirestore } from './firebase/firebase-services'\nimport { useFirestoreCollection } from './use-firestore-collection'\n\n/**\n * How many campaigns a picker offers.\n *\n * The same fifty the campaigns table draws, so a campaign a merchant can see\n * in the list is a campaign they can file a record under. A picker with a\n * larger window would offer campaigns the list they came from does not show;\n * a smaller one would hide campaigns that are plainly there.\n */\nexport const HOST_CAMPAIGN_CEILING = 50\n\n/** One campaign, as much of it as a picker needs. */\nexport interface HostCampaignOption {\n  value: string\n  label: string\n  /** The campaign window, for a caller that wants to say when it ran. */\n  startAtMs?: number | null\n  endAtMs?: number | null\n}\n\nexport interface HostCampaigns {\n  options: HostCampaignOption[]\n  /** The site holds more campaigns than the ceiling offers. */\n  truncated: boolean\n  /** The read has answered — false while it is still settling or disabled. */\n  ready: boolean\n}\n\n/**\n * THE SITE'S CAMPAIGNS, for a picker on some other record's page.\n *\n * Lives here rather than in the marketing plugin because the console app may\n * not import a feature plugin — a screen's detail page is an app route — and\n * the form and contact surfaces that need the same list are two other\n * libraries again. One read, one shape, three callers.\n *\n * ## It is OFF unless a caller asks\n *\n * `enabled` defaults to false. The picker this feeds sits on a record's own\n * page beside fields a reader came for; charging every open of a form, a\n * screen or a contact for a hundred campaign documents they may not touch is\n * the read-on-mount this console refuses. The callers turn it on when their\n * editing surface opens.\n *\n * ## Ordered on the document name\n *\n * `collectionCeiling`, for the reason it exists: `startAtMs` and `endAtMs`\n * are both optional on a campaign — an open-ended one carries neither — so\n * ordering on a date would not mis-sort the picker, it would DROP the\n * campaigns that have no dates. The labels are sorted by name here, over the\n * whole ceiling rather than a slice of it, which is the one case sorting a\n * window is honest.\n */\nexport function useHostCampaigns(\n  hostId: string | undefined,\n  options?: { enabled?: boolean },\n): HostCampaigns {\n  const enabled = options?.enabled ?? false\n  const firestore = useFirestore()\n  const { data, status } = useFirestoreCollection<Record<string, unknown>>(\n    () =>\n      enabled && hostId\n        ? collectionCeiling(\n            collection(firestore, 'hosts', hostId, 'emailCampaigns'),\n            HOST_CAMPAIGN_CEILING,\n          )\n        : null,\n    [firestore, hostId, enabled],\n    { idField: '$id' },\n  )\n\n  return useMemo(() => {\n    const rows = data ?? []\n    const truncated = rows.length > HOST_CAMPAIGN_CEILING\n    const live = rows\n      .slice(0, HOST_CAMPAIGN_CEILING)\n      // A campaign the console soft-deleted is not a campaign a record may be\n      // filed under. The campaigns table filters the same field for the same\n      // reason.\n      .filter((row) => !row['deletedAt'])\n    return {\n      options: live\n        .map((row) => ({\n          value: String(row['$id']),\n          label: String(row['name'] ?? row['$id']),\n          startAtMs: (row['startAtMs'] as number | null | undefined) ?? null,\n          endAtMs: (row['endAtMs'] as number | null | undefined) ?? null,\n        }))\n        .sort((a, b) => a.label.localeCompare(b.label)),\n      truncated,\n      ready: enabled && status !== 'loading',\n    }\n  }, [data, enabled, status])\n}\n\nexport default useHostCampaigns\n"],"names":["collection","useMemo","collectionCeiling","useFirestore","useFirestoreCollection","HOST_CAMPAIGN_CEILING","useHostCampaigns","hostId","options","enabled","firestore","data","status","idField","rows","truncated","length","live","slice","filter","row","map","value","String","label","startAtMs","endAtMs","sort","a","b","localeCompare","ready"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GACD;AAEA,SAASA,UAAU,QAAQ,qBAAoB;AAC/C,SAASC,OAAO,QAAQ,QAAO;AAC/B,SAASC,iBAAiB,QAAQ,+BAA2B;AAC7D,SAASC,YAAY,QAAQ,kCAA8B;AAC3D,SAASC,sBAAsB,QAAQ,gCAA4B;AAEnE;;;;;;;CAOC,GACD,OAAO,MAAMC,wBAAwB,GAAE;AAmBvC;;;;;;;;;;;;;;;;;;;;;;;;CAwBC,GACD,OAAO,SAASC,iBACdC,MAA0B,EAC1BC,OAA+B;;IAE/B,MAAMC,kBAAUD,2BAAAA,QAASC,OAAO,mBAAI;IACpC,MAAMC,YAAYP;IAClB,MAAM,EAAEQ,IAAI,EAAEC,MAAM,EAAE,GAAGR,uBACvB,IACEK,WAAWF,SACPL,kBACEF,WAAWU,WAAW,SAASH,QAAQ,mBACvCF,yBAEF,MACN;QAACK;QAAWH;QAAQE;KAAQ,EAC5B;QAAEI,SAAS;IAAM;IAGnB,OAAOZ,QAAQ;QACb,MAAMa,OAAOH,eAAAA,OAAQ,EAAE;QACvB,MAAMI,YAAYD,KAAKE,MAAM,GAAGX;QAChC,MAAMY,OAAOH,KACVI,KAAK,CAAC,GAAGb,sBACV,wEAAwE;QACxE,uEAAuE;QACvE,UAAU;SACTc,MAAM,CAAC,CAACC,MAAQ,CAACA,GAAG,CAAC,YAAY;QACpC,OAAO;YACLZ,SAASS,KACNI,GAAG,CAAC,CAACD;oBAEUA,WACFA,gBACFA;uBAJG;oBACbE,OAAOC,OAAOH,GAAG,CAAC,MAAM;oBACxBI,OAAOD,QAAOH,YAAAA,GAAG,CAAC,OAAO,YAAXA,YAAeA,GAAG,CAAC,MAAM;oBACvCK,SAAS,GAAGL,iBAAAA,GAAG,CAAC,YAAY,YAAhBA,iBAAkD;oBAC9DM,OAAO,GAAGN,eAAAA,GAAG,CAAC,UAAU,YAAdA,eAAgD;gBAC5D;eACCO,IAAI,CAAC,CAACC,GAAGC,IAAMD,EAAEJ,KAAK,CAACM,aAAa,CAACD,EAAEL,KAAK;YAC/CT;YACAgB,OAAOtB,WAAWG,WAAW;QAC/B;IACF,GAAG;QAACD;QAAMF;QAASG;KAAO;AAC5B;AAEA,eAAeN,iBAAgB"}

package/src/lib/hooks/use-host-org-id.d.ts

@@ -0,0 +1,96 @@
+export interface HostOrgIdState {
+    /** The owning org, or null once we know there isn't one. */
+    orgId: string | null;
+    /** False until the `hostIndex` lookup has settled. */
+    loaded: boolean;
+}
+/**
+ * The org a host belongs to, plus whether we know yet (AGL-1061).
+ *
+ * `useHostOrgId` below returns `null` for THREE different situations —
+ * still loading, no owning org, and lookup failed — and callers that
+ * branch on truthiness take the no-org branch during the first render or
+ * two of every mount, while the `hostIndex` `getDoc` is in flight.
+ *
+ * For a read that is a harmless flash of an empty list. For a WRITE it is
+ * not: a `setDoc` resolving inside that window lands under
+ * `hosts/{hostId}/…`, which AGL-1050 left with no readers — so the save
+ * appears to succeed and the row is unreachable from anywhere afterwards.
+ *
+ * Anything that can write must therefore gate on `loaded` and hold rather
+ * than guess.
+ */
+export declare function useHostOrgIdState(hostId: string | undefined): HostOrgIdState;
+/**
+ * The org a host belongs to, resolved from the `hostIndex` mirror
+ * (AGL-237). Host-scoped pages use this — NOT the workspace context — so
+ * org-shared data stays correct when a multi-org user deep-links into a
+ * host outside their selected workspace.
+ *
+ * Null while loading AND for pre-org hosts, which callers cannot tell
+ * apart. Fine for the many callers that only ever build an org path from
+ * it and render nothing until it arrives; anything that FALLS BACK to a
+ * host path — and especially anything that writes — wants
+ * {@link useHostOrgIdState} instead (AGL-1061).
+ */
+export declare function useHostOrgId(hostId: string | undefined): string | null;
+export interface OrgDataScope {
+    /**
+     * Firestore parent for org-shared data: `['orgs', orgId]`, or NULL when
+     * there is no such path to build — the lookup is still in flight, or the
+     * host has no owning org. Callers pass `null` straight through to their
+     * query factory, which issues nothing.
+     *
+     * There is deliberately no `['hosts', hostId]` alternative (AGL-1050).
+     */
+    scope: readonly ['orgs', string] | null;
+    /** The owning org once known, else null. */
+    orgId: string | null;
+    /**
+     * Whether the lookup has SETTLED. Distinguishes the two reasons `scope`
+     * is null: false means "not yet, keep the spinner", true means "there is
+     * no org and none is coming" — render the empty state, leave saves off.
+     */
+    ready: boolean;
+}
+/**
+ * The `['orgs', orgId]` parent every host-scoped card builds, with an
+ * honest `ready` flag (AGL-1061).
+ *
+ * This existed as a copy-pasted ternary in nine components:
+ *
+ * ```ts
+ * const orgId = props.orgId ?? useHostOrgId(hostId)
+ * const scope = orgId ? ['orgs', orgId] : ['hosts', hostId]
+ * ```
+ *
+ * which silently resolves to the HOST branch for the first render or two
+ * of every mount, because `useHostOrgId` cannot say "not yet". Centralising
+ * it means the window is handled once, correctly, instead of nine times
+ * from memory.
+ *
+ * ## Why there is no host fallback any more (AGL-1050)
+ *
+ * That `: ['hosts', hostId]` branch was the pre-AGL-237 storage location,
+ * kept as a migration path. AGL-1061 counted what actually lives there in
+ * production — `datasets`, `lists`, `contacts`, `contactSegments`, exact
+ * count() per host, no truncation — and the answer was 0 across every
+ * host. So it was not a migration path; it was a second address for
+ * org-shared data that nothing had ever written and nothing read back.
+ *
+ * Keeping it ready-gated would have been enough to close the live defect.
+ * It was removed instead because the branch could only ever be reached by
+ * a bug — most sharply through the `hostIndex` lookup's `.catch()`, where
+ * a transient failure used to hand back a confident host path and let the
+ * card save a row nobody could reach afterwards. A null scope cannot do
+ * that: the query is never issued and the save is never enabled.
+ *
+ * The rules now deny `hosts/{hostId}/datasets/**` outright, so the path is
+ * closed on both sides rather than merely unused on one.
+ */
+export declare function useOrgDataScope(options: {
+    hostId?: string | undefined;
+    /** An explicit org skips the lookup entirely and is ready immediately. */
+    orgId?: string | undefined;
+}): OrgDataScope;
+export default useHostOrgId;

package/src/lib/hooks/use-host-org-id.js

@@ -0,0 +1,154 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ 'use client';
+import { doc, getDoc } from "firebase/firestore";
+import { useEffect, useMemo, useState } from "react";
+import { useFirestore } from "./firebase/firebase-services.js";
+/**
+ * The org a host belongs to, plus whether we know yet (AGL-1061).
+ *
+ * `useHostOrgId` below returns `null` for THREE different situations —
+ * still loading, no owning org, and lookup failed — and callers that
+ * branch on truthiness take the no-org branch during the first render or
+ * two of every mount, while the `hostIndex` `getDoc` is in flight.
+ *
+ * For a read that is a harmless flash of an empty list. For a WRITE it is
+ * not: a `setDoc` resolving inside that window lands under
+ * `hosts/{hostId}/…`, which AGL-1050 left with no readers — so the save
+ * appears to succeed and the row is unreachable from anywhere afterwards.
+ *
+ * Anything that can write must therefore gate on `loaded` and hold rather
+ * than guess.
+ */ export function useHostOrgIdState(hostId) {
+    const firestore = useFirestore();
+    const [state, setState] = useState({
+        orgId: null,
+        loaded: false
+    });
+    useEffect(()=>{
+        // No host to resolve is a SETTLED answer, not a pending one — the org
+        // Data and Media pages pass no host and must not wait forever.
+        if (!hostId) {
+            setState({
+                orgId: null,
+                loaded: true
+            });
+            return undefined;
+        }
+        let active = true;
+        setState({
+            orgId: null,
+            loaded: false
+        });
+        void getDoc(doc(firestore, 'hostIndex', hostId)).then((snapshot)=>{
+            if (active) {
+                var _ref;
+                var _snapshot_data;
+                setState({
+                    orgId: (_ref = (_snapshot_data = snapshot.data()) == null ? void 0 : _snapshot_data['orgId']) != null ? _ref : null,
+                    loaded: true
+                });
+            }
+        }).catch(()=>{
+            // A failed lookup is also settled. Retrying forever would leave
+            // the page permanently disabled; the host branch is the correct
+            // (and, per AGL-1050, empty) fallback.
+            if (active) setState({
+                orgId: null,
+                loaded: true
+            });
+        });
+        return ()=>{
+            active = false;
+        };
+    }, [
+        firestore,
+        hostId
+    ]);
+    return state;
+}
+/**
+ * The org a host belongs to, resolved from the `hostIndex` mirror
+ * (AGL-237). Host-scoped pages use this — NOT the workspace context — so
+ * org-shared data stays correct when a multi-org user deep-links into a
+ * host outside their selected workspace.
+ *
+ * Null while loading AND for pre-org hosts, which callers cannot tell
+ * apart. Fine for the many callers that only ever build an org path from
+ * it and render nothing until it arrives; anything that FALLS BACK to a
+ * host path — and especially anything that writes — wants
+ * {@link useHostOrgIdState} instead (AGL-1061).
+ */ export function useHostOrgId(hostId) {
+    return useHostOrgIdState(hostId).orgId;
+}
+/**
+ * The `['orgs', orgId]` parent every host-scoped card builds, with an
+ * honest `ready` flag (AGL-1061).
+ *
+ * This existed as a copy-pasted ternary in nine components:
+ *
+ * ```ts
+ * const orgId = props.orgId ?? useHostOrgId(hostId)
+ * const scope = orgId ? ['orgs', orgId] : ['hosts', hostId]
+ * ```
+ *
+ * which silently resolves to the HOST branch for the first render or two
+ * of every mount, because `useHostOrgId` cannot say "not yet". Centralising
+ * it means the window is handled once, correctly, instead of nine times
+ * from memory.
+ *
+ * ## Why there is no host fallback any more (AGL-1050)
+ *
+ * That `: ['hosts', hostId]` branch was the pre-AGL-237 storage location,
+ * kept as a migration path. AGL-1061 counted what actually lives there in
+ * production — `datasets`, `lists`, `contacts`, `contactSegments`, exact
+ * count() per host, no truncation — and the answer was 0 across every
+ * host. So it was not a migration path; it was a second address for
+ * org-shared data that nothing had ever written and nothing read back.
+ *
+ * Keeping it ready-gated would have been enough to close the live defect.
+ * It was removed instead because the branch could only ever be reached by
+ * a bug — most sharply through the `hostIndex` lookup's `.catch()`, where
+ * a transient failure used to hand back a confident host path and let the
+ * card save a row nobody could reach afterwards. A null scope cannot do
+ * that: the query is never issued and the save is never enabled.
+ *
+ * The rules now deny `hosts/{hostId}/datasets/**` outright, so the path is
+ * closed on both sides rather than merely unused on one.
+ */ export function useOrgDataScope(options) {
+    const { hostId, orgId: explicitOrgId } = options;
+    const state = useHostOrgIdState(explicitOrgId ? undefined : hostId);
+    const orgId = explicitOrgId != null ? explicitOrgId : state.orgId;
+    const loaded = Boolean(explicitOrgId) || state.loaded;
+    // Memoised because `scope` is a QUERY DEPENDENCY. A fresh tuple every
+    // render, passed to `useFirestoreCollection`, tears down and reopens the
+    // listener (and clears its data) on every render — so hand out a stable
+    // reference rather than trusting every caller to destructure primitives.
+    return useMemo(()=>({
+            orgId,
+            ready: loaded,
+            scope: orgId ? [
+                'orgs',
+                orgId
+            ] : null
+        }), [
+        orgId,
+        loaded
+    ]);
+}
+export default useHostOrgId;
+
+//# sourceMappingURL=use-host-org-id.js.map

package/src/lib/hooks/use-host-org-id.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../../libs/tenant/feature/instance/src/lib/hooks/use-host-org-id.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n'use client'\n\nimport { doc, getDoc } from 'firebase/firestore'\nimport { useEffect, useMemo, useState } from 'react'\nimport { useFirestore } from './firebase/firebase-services'\n\nexport interface HostOrgIdState {\n  /** The owning org, or null once we know there isn't one. */\n  orgId: string | null\n  /** False until the `hostIndex` lookup has settled. */\n  loaded: boolean\n}\n\n/**\n * The org a host belongs to, plus whether we know yet (AGL-1061).\n *\n * `useHostOrgId` below returns `null` for THREE different situations —\n * still loading, no owning org, and lookup failed — and callers that\n * branch on truthiness take the no-org branch during the first render or\n * two of every mount, while the `hostIndex` `getDoc` is in flight.\n *\n * For a read that is a harmless flash of an empty list. For a WRITE it is\n * not: a `setDoc` resolving inside that window lands under\n * `hosts/{hostId}/…`, which AGL-1050 left with no readers — so the save\n * appears to succeed and the row is unreachable from anywhere afterwards.\n *\n * Anything that can write must therefore gate on `loaded` and hold rather\n * than guess.\n */\nexport function useHostOrgIdState(\n  hostId: string | undefined,\n): HostOrgIdState {\n  const firestore = useFirestore()\n  const [state, setState] = useState<HostOrgIdState>({\n    orgId: null,\n    loaded: false,\n  })\n\n  useEffect(() => {\n    // No host to resolve is a SETTLED answer, not a pending one — the org\n    // Data and Media pages pass no host and must not wait forever.\n    if (!hostId) {\n      setState({ orgId: null, loaded: true })\n      return undefined\n    }\n    let active = true\n    setState({ orgId: null, loaded: false })\n    void getDoc(doc(firestore, 'hostIndex', hostId))\n      .then((snapshot) => {\n        if (active) {\n          setState({\n            orgId: (snapshot.data()?.['orgId'] as string) ?? null,\n            loaded: true,\n          })\n        }\n      })\n      .catch(() => {\n        // A failed lookup is also settled. Retrying forever would leave\n        // the page permanently disabled; the host branch is the correct\n        // (and, per AGL-1050, empty) fallback.\n        if (active) setState({ orgId: null, loaded: true })\n      })\n    return () => {\n      active = false\n    }\n  }, [firestore, hostId])\n\n  return state\n}\n\n/**\n * The org a host belongs to, resolved from the `hostIndex` mirror\n * (AGL-237). Host-scoped pages use this — NOT the workspace context — so\n * org-shared data stays correct when a multi-org user deep-links into a\n * host outside their selected workspace.\n *\n * Null while loading AND for pre-org hosts, which callers cannot tell\n * apart. Fine for the many callers that only ever build an org path from\n * it and render nothing until it arrives; anything that FALLS BACK to a\n * host path — and especially anything that writes — wants\n * {@link useHostOrgIdState} instead (AGL-1061).\n */\nexport function useHostOrgId(hostId: string | undefined): string | null {\n  return useHostOrgIdState(hostId).orgId\n}\n\nexport interface OrgDataScope {\n  /**\n   * Firestore parent for org-shared data: `['orgs', orgId]`, or NULL when\n   * there is no such path to build — the lookup is still in flight, or the\n   * host has no owning org. Callers pass `null` straight through to their\n   * query factory, which issues nothing.\n   *\n   * There is deliberately no `['hosts', hostId]` alternative (AGL-1050).\n   */\n  scope: readonly ['orgs', string] | null\n  /** The owning org once known, else null. */\n  orgId: string | null\n  /**\n   * Whether the lookup has SETTLED. Distinguishes the two reasons `scope`\n   * is null: false means \"not yet, keep the spinner\", true means \"there is\n   * no org and none is coming\" — render the empty state, leave saves off.\n   */\n  ready: boolean\n}\n\n/**\n * The `['orgs', orgId]` parent every host-scoped card builds, with an\n * honest `ready` flag (AGL-1061).\n *\n * This existed as a copy-pasted ternary in nine components:\n *\n * ```ts\n * const orgId = props.orgId ?? useHostOrgId(hostId)\n * const scope = orgId ? ['orgs', orgId] : ['hosts', hostId]\n * ```\n *\n * which silently resolves to the HOST branch for the first render or two\n * of every mount, because `useHostOrgId` cannot say \"not yet\". Centralising\n * it means the window is handled once, correctly, instead of nine times\n * from memory.\n *\n * ## Why there is no host fallback any more (AGL-1050)\n *\n * That `: ['hosts', hostId]` branch was the pre-AGL-237 storage location,\n * kept as a migration path. AGL-1061 counted what actually lives there in\n * production — `datasets`, `lists`, `contacts`, `contactSegments`, exact\n * count() per host, no truncation — and the answer was 0 across every\n * host. So it was not a migration path; it was a second address for\n * org-shared data that nothing had ever written and nothing read back.\n *\n * Keeping it ready-gated would have been enough to close the live defect.\n * It was removed instead because the branch could only ever be reached by\n * a bug — most sharply through the `hostIndex` lookup's `.catch()`, where\n * a transient failure used to hand back a confident host path and let the\n * card save a row nobody could reach afterwards. A null scope cannot do\n * that: the query is never issued and the save is never enabled.\n *\n * The rules now deny `hosts/{hostId}/datasets/**` outright, so the path is\n * closed on both sides rather than merely unused on one.\n */\nexport function useOrgDataScope(options: {\n  hostId?: string | undefined\n  /** An explicit org skips the lookup entirely and is ready immediately. */\n  orgId?: string | undefined\n}): OrgDataScope {\n  const { hostId, orgId: explicitOrgId } = options\n  const state = useHostOrgIdState(explicitOrgId ? undefined : hostId)\n  const orgId = explicitOrgId ?? state.orgId\n  const loaded = Boolean(explicitOrgId) || state.loaded\n  // Memoised because `scope` is a QUERY DEPENDENCY. A fresh tuple every\n  // render, passed to `useFirestoreCollection`, tears down and reopens the\n  // listener (and clears its data) on every render — so hand out a stable\n  // reference rather than trusting every caller to destructure primitives.\n  return useMemo(\n    () => ({\n      orgId,\n      ready: loaded,\n      scope: orgId ? (['orgs', orgId] as const) : null,\n    }),\n    [orgId, loaded],\n  )\n}\n\nexport default useHostOrgId\n"],"names":["doc","getDoc","useEffect","useMemo","useState","useFirestore","useHostOrgIdState","hostId","firestore","state","setState","orgId","loaded","undefined","active","then","snapshot","data","catch","useHostOrgId","useOrgDataScope","options","explicitOrgId","Boolean","ready","scope"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GACD;AAEA,SAASA,GAAG,EAAEC,MAAM,QAAQ,qBAAoB;AAChD,SAASC,SAAS,EAAEC,OAAO,EAAEC,QAAQ,QAAQ,QAAO;AACpD,SAASC,YAAY,QAAQ,kCAA8B;AAS3D;;;;;;;;;;;;;;;CAeC,GACD,OAAO,SAASC,kBACdC,MAA0B;IAE1B,MAAMC,YAAYH;IAClB,MAAM,CAACI,OAAOC,SAAS,GAAGN,SAAyB;QACjDO,OAAO;QACPC,QAAQ;IACV;IAEAV,UAAU;QACR,sEAAsE;QACtE,+DAA+D;QAC/D,IAAI,CAACK,QAAQ;YACXG,SAAS;gBAAEC,OAAO;gBAAMC,QAAQ;YAAK;YACrC,OAAOC;QACT;QACA,IAAIC,SAAS;QACbJ,SAAS;YAAEC,OAAO;YAAMC,QAAQ;QAAM;QACtC,KAAKX,OAAOD,IAAIQ,WAAW,aAAaD,SACrCQ,IAAI,CAAC,CAACC;YACL,IAAIF,QAAQ;;oBAEAE;gBADVN,SAAS;oBACPC,KAAK,WAAGK,iBAAAA,SAASC,IAAI,uBAAbD,cAAiB,CAAC,QAAQ,mBAAe;oBACjDJ,QAAQ;gBACV;YACF;QACF,GACCM,KAAK,CAAC;YACL,gEAAgE;YAChE,gEAAgE;YAChE,uCAAuC;YACvC,IAAIJ,QAAQJ,SAAS;gBAAEC,OAAO;gBAAMC,QAAQ;YAAK;QACnD;QACF,OAAO;YACLE,SAAS;QACX;IACF,GAAG;QAACN;QAAWD;KAAO;IAEtB,OAAOE;AACT;AAEA;;;;;;;;;;;CAWC,GACD,OAAO,SAASU,aAAaZ,MAA0B;IACrD,OAAOD,kBAAkBC,QAAQI,KAAK;AACxC;AAsBA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAkCC,GACD,OAAO,SAASS,gBAAgBC,OAI/B;IACC,MAAM,EAAEd,MAAM,EAAEI,OAAOW,aAAa,EAAE,GAAGD;IACzC,MAAMZ,QAAQH,kBAAkBgB,gBAAgBT,YAAYN;IAC5D,MAAMI,QAAQW,wBAAAA,gBAAiBb,MAAME,KAAK;IAC1C,MAAMC,SAASW,QAAQD,kBAAkBb,MAAMG,MAAM;IACrD,sEAAsE;IACtE,yEAAyE;IACzE,wEAAwE;IACxE,yEAAyE;IACzE,OAAOT,QACL,IAAO,CAAA;YACLQ;YACAa,OAAOZ;YACPa,OAAOd,QAAS;gBAAC;gBAAQA;aAAM,GAAa;QAC9C,CAAA,GACA;QAACA;QAAOC;KAAO;AAEnB;AAEA,eAAeO,aAAY"}

package/src/lib/hooks/use-host-resource-api.d.ts

@@ -0,0 +1,43 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+/**
+ * Quota-governed host resource kinds served by `POST /api/hosts/resources`
+ * (AGL-473). Firestore rules deny client-side `create` on these
+ * collections, so creation MUST go through the API — it enforces the
+ * per-plan quota (and entitlement, where the feature is paid) with the
+ * Admin SDK. Updates and deletes stay client-direct.
+ */
+export type HostResourceKind = 'screen' | 'layout' | 'variable' | 'function' | 'workflow' | 'service' | 'redirect' | 'location' | 'product' | 'reusableComponent' | 'form' | 'register' | 'template' | 'webhook' | 'action' | 'entry' | 'author';
+/**
+ * Creates a quota-governed host resource through the console API
+ * (AGL-473). `data` must be JSON-plain — no Firestore Timestamps; the
+ * route stamps `createdAt`/`updatedAt` server-side when absent. Pass `id`
+ * when the caller pre-generates the id (e.g. to write a first `versions`
+ * doc under it). Pass `parentId` for a nested resource — `entry`, which
+ * hangs off `hosts/{hostId}/collections/{parentId}` (AGL-2266). Throws with
+ * the server's message on denial (quota, entitlement, role), for the
+ * caller's snackbar.
+ */
+export declare function useHostResourceApi(): (options: {
+    hostId: string;
+    resource: HostResourceKind;
+    data: Record<string, unknown>;
+    id?: string;
+    parentId?: string;
+}) => Promise<{
+    id: string;
+}>;

package/src/lib/hooks/use-host-resource-api.js

@@ -0,0 +1,60 @@
+import { _ as _extends } from "@swc/helpers/_/_extends";
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ import { useCallback } from "react";
+import { useUser } from "./firebase/firebase-services.js";
+import { authorizedFetch } from "@aglyn/shared-util-http/authorized-token";
+/**
+ * Creates a quota-governed host resource through the console API
+ * (AGL-473). `data` must be JSON-plain — no Firestore Timestamps; the
+ * route stamps `createdAt`/`updatedAt` server-side when absent. Pass `id`
+ * when the caller pre-generates the id (e.g. to write a first `versions`
+ * doc under it). Pass `parentId` for a nested resource — `entry`, which
+ * hangs off `hosts/{hostId}/collections/{parentId}` (AGL-2266). Throws with
+ * the server's message on denial (quota, entitlement, role), for the
+ * caller's snackbar.
+ */ export function useHostResourceApi() {
+    const { data: user } = useUser();
+    return useCallback(async ({ hostId, resource, data, id, parentId })=>{
+        const response = await authorizedFetch(user, '/api/hosts/resources', {
+            method: 'POST',
+            headers: {
+                'Content-Type': 'application/json'
+            },
+            body: JSON.stringify(_extends({
+                hostId,
+                resource,
+                data
+            }, id ? {
+                id
+            } : {}, parentId ? {
+                parentId
+            } : {}))
+        });
+        const result = await response.json().catch(()=>({}));
+        if (!response.ok) {
+            var _ref;
+            throw new Error((_ref = result == null ? void 0 : result.error) != null ? _ref : 'Create failed');
+        }
+        return {
+            id: String(result.id)
+        };
+    }, [
+        user
+    ]);
+}
+
+//# sourceMappingURL=use-host-resource-api.js.map

package/src/lib/hooks/use-host-resource-api.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../../libs/tenant/feature/instance/src/lib/hooks/use-host-resource-api.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { useCallback } from 'react'\nimport { useUser } from './firebase/firebase-services'\nimport { authorizedFetch } from '@aglyn/shared-util-http/authorized-token'\n\n/**\n * Quota-governed host resource kinds served by `POST /api/hosts/resources`\n * (AGL-473). Firestore rules deny client-side `create` on these\n * collections, so creation MUST go through the API — it enforces the\n * per-plan quota (and entitlement, where the feature is paid) with the\n * Admin SDK. Updates and deletes stay client-direct.\n */\nexport type HostResourceKind =\n  | 'screen'\n  | 'layout'\n  | 'variable'\n  | 'function'\n  | 'workflow'\n  | 'service'\n  | 'redirect'\n  | 'location'\n  | 'product'\n  | 'reusableComponent'\n  // A form, which rides the `reusableComponents` entitlement and the\n  // `formsPerHost` ceiling. The route entry existed before any typed caller\n  // did, so creating one from the console was unreachable through this hook.\n  | 'form'\n  | 'register'\n  | 'template'\n  | 'webhook'\n  // AGL-2266: two client-direct classes with no cap on any plan. `action`\n  // is a flat host subcollection; `entry` is the one nested resource here\n  // and needs `parentId` (the content collection it belongs to).\n  | 'action'\n  | 'entry'\n  // AGL-2486: custom content authors, a flat host subcollection with a flat\n  // platform cap — the `action` shape (create denied, update/delete open).\n  | 'author'\n\n/**\n * Creates a quota-governed host resource through the console API\n * (AGL-473). `data` must be JSON-plain — no Firestore Timestamps; the\n * route stamps `createdAt`/`updatedAt` server-side when absent. Pass `id`\n * when the caller pre-generates the id (e.g. to write a first `versions`\n * doc under it). Pass `parentId` for a nested resource — `entry`, which\n * hangs off `hosts/{hostId}/collections/{parentId}` (AGL-2266). Throws with\n * the server's message on denial (quota, entitlement, role), for the\n * caller's snackbar.\n */\nexport function useHostResourceApi(): (options: {\n  hostId: string\n  resource: HostResourceKind\n  data: Record<string, unknown>\n  id?: string\n  parentId?: string\n}) => Promise<{ id: string }> {\n  const { data: user } = useUser()\n  return useCallback(\n    async ({ hostId, resource, data, id, parentId }) => {\n      const response = await authorizedFetch(user, '/api/hosts/resources', {\n        method: 'POST',\n        headers: { 'Content-Type': 'application/json' },\n        body: JSON.stringify({\n          hostId,\n          resource,\n          data,\n          ...(id ? { id } : {}),\n          ...(parentId ? { parentId } : {}),\n        }),\n      })\n      const result = await response.json().catch(() => ({}))\n      if (!response.ok) {\n        throw new Error(result?.error ?? 'Create failed')\n      }\n      return { id: String(result.id) }\n    },\n    [user],\n  )\n}\n"],"names":["useCallback","useUser","authorizedFetch","useHostResourceApi","data","user","hostId","resource","id","parentId","response","method","headers","body","JSON","stringify","result","json","catch","ok","Error","error","String"],"mappings":";AAAA;;;;;;;;;;;;;;;CAeC,GAED,SAASA,WAAW,QAAQ,QAAO;AACnC,SAASC,OAAO,QAAQ,kCAA8B;AACtD,SAASC,eAAe,QAAQ,2CAA0C;AAoC1E;;;;;;;;;CASC,GACD,OAAO,SAASC;IAOd,MAAM,EAAEC,MAAMC,IAAI,EAAE,GAAGJ;IACvB,OAAOD,YACL,OAAO,EAAEM,MAAM,EAAEC,QAAQ,EAAEH,IAAI,EAAEI,EAAE,EAAEC,QAAQ,EAAE;QAC7C,MAAMC,WAAW,MAAMR,gBAAgBG,MAAM,wBAAwB;YACnEM,QAAQ;YACRC,SAAS;gBAAE,gBAAgB;YAAmB;YAC9CC,MAAMC,KAAKC,SAAS,CAAC;gBACnBT;gBACAC;gBACAH;eACII,KAAK;gBAAEA;YAAG,IAAI,CAAC,GACfC,WAAW;gBAAEA;YAAS,IAAI,CAAC;QAEnC;QACA,MAAMO,SAAS,MAAMN,SAASO,IAAI,GAAGC,KAAK,CAAC,IAAO,CAAA,CAAC,CAAA;QACnD,IAAI,CAACR,SAASS,EAAE,EAAE;;YAChB,MAAM,IAAIC,cAAMJ,0BAAAA,OAAQK,KAAK,mBAAI;QACnC;QACA,OAAO;YAAEb,IAAIc,OAAON,OAAOR,EAAE;QAAE;IACjC,GACA;QAACH;KAAK;AAEV"}

package/src/lib/hooks/use-host-template.d.ts

@@ -0,0 +1,44 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import type * as Aglyn from '@aglyn/aglyn';
+import type { DocumentReference } from 'firebase/firestore';
+import { type FirestoreDocOptions } from './firebase/firebase-services';
+/**
+ * A saved template (AGL-681), at `hosts/{hostId}/templates/{templateId}`.
+ *
+ * Unlike screens and layouts there is no version subcollection: a template
+ * is inert — nothing renders from it until it is used to create something
+ * — so there is no published-versus-draft distinction to keep.
+ *
+ * Compressed at rest like every other besigner document (AGL-1151). A
+ * template is the one kind whose whole content arrives by COPY — "save as
+ * template" duplicates a screen's entire tree into a single document with no
+ * version to spread it across — so it reaches the 1 MiB ceiling at exactly
+ * the size the source page does, and about 1.4x sooner stored as a map.
+ */
+export declare const useHostTemplateRef: ({ hostId, templateId, }: {
+    hostId: Aglyn.HostUid;
+    templateId: string;
+}) => DocumentReference<Aglyn.AglynTemplate>;
+export declare const useHostTemplate: (data: {
+    hostId: Aglyn.HostUid;
+    templateId: string;
+}, options?: FirestoreDocOptions<Aglyn.AglynTemplate>) => {
+    doc: import("./firebase/firebase-services").ObservableStatus<Aglyn.AglynTemplate<Aglyn.AglynNodeSchema<Partial<Record<JSX.Key.Any, unknown>>>>>;
+    setDoc: import("./helpers/use-modify-doc-callback").ModifyDocCallback<Aglyn.AglynTemplate<Aglyn.AglynNodeSchema<Partial<Record<JSX.Key.Any, unknown>>>>>;
+};
+export default useHostTemplate;

package/src/lib/hooks/use-host-template.js

@@ -0,0 +1,82 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ // A TYPE-only namespace: every `Aglyn.` reference below is a type, and held
+// as a VALUE the namespace pins every module the barrel reaches into the
+// console shell that renders these hooks. `import type` erases instead.
+import { _ as _extends } from "@swc/helpers/_/_extends";
+import { _ as _object_without_properties_loose } from "@swc/helpers/_/_object_without_properties_loose";
+import { decodeStoredNodes, encodeStoredNodes } from "@aglyn/aglyn";
+import { Timestamp } from "@aglyn/shared-util-timestamp";
+import { Bytes, doc } from "firebase/firestore";
+import { useFirestore } from "./firebase/firebase-services.js";
+import useDoc from "./helpers/use-doc.js";
+/**
+ * A saved template (AGL-681), at `hosts/{hostId}/templates/{templateId}`.
+ *
+ * Unlike screens and layouts there is no version subcollection: a template
+ * is inert — nothing renders from it until it is used to create something
+ * — so there is no published-versus-draft distinction to keep.
+ *
+ * Compressed at rest like every other besigner document (AGL-1151). A
+ * template is the one kind whose whole content arrives by COPY — "save as
+ * template" duplicates a screen's entire tree into a single document with no
+ * version to spread it across — so it reaches the 1 MiB ceiling at exactly
+ * the size the source page does, and about 1.4x sooner stored as a map.
+ */ export const useHostTemplateRef = ({ hostId, templateId })=>{
+    const firestore = useFirestore();
+    const ref = doc(firestore, 'hosts', hostId, 'templates', templateId);
+    return ref.withConverter({
+        toFirestore (data) {
+            // `source` is server-managed and frozen in rules (AGL-666) — stripping
+            // it here means an ordinary save can never trip that guard.
+            const { $id, source } = data, rest = _object_without_properties_loose(data, [
+                "$id",
+                "source"
+            ]);
+            // Only emit `nodes` when the write actually carries them (AGL-1250).
+            // The besigner's save writes `placeholders` and `editedAt` alongside
+            // the tree through a merging `setDoc`, and the template detail page
+            // writes a name on its own — encoding unconditionally would ship an
+            // empty map on the second of those and merge it over the design.
+            if ((rest == null ? void 0 : rest.nodes) === undefined) return _extends({}, rest, {
+                updatedAt: Timestamp.now()
+            });
+            const nodes = encodeStoredNodes(rest.nodes);
+            return _extends({}, rest, nodes ? {
+                nodes: Bytes.fromUint8Array(nodes)
+            } : {}, {
+                updatedAt: Timestamp.now()
+            });
+        },
+        fromFirestore (snapshot, options) {
+            if (!snapshot.exists()) return undefined;
+            const data = snapshot.data(options);
+            if ((data == null ? void 0 : data['nodes']) === undefined) return data;
+            // BOTH stored forms, permanently. Every template written before this
+            // converter compressed is a plain map and nothing migrates them;
+            // `decodeStoredNodes` returns one unchanged.
+            return _extends({}, data, {
+                nodes: decodeStoredNodes(data['nodes'])
+            });
+        }
+    });
+};
+export const useHostTemplate = (data, options)=>{
+    return useDoc(useHostTemplateRef(data), options);
+};
+export default useHostTemplate;
+
+//# sourceMappingURL=use-host-template.js.map

package/src/lib/hooks/use-host-template.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../../libs/tenant/feature/instance/src/lib/hooks/use-host-template.tsx"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n// A TYPE-only namespace: every `Aglyn.` reference below is a type, and held\n// as a VALUE the namespace pins every module the barrel reaches into the\n// console shell that renders these hooks. `import type` erases instead.\nimport type * as Aglyn from '@aglyn/aglyn'\nimport { decodeStoredNodes, encodeStoredNodes } from '@aglyn/aglyn'\nimport { Timestamp } from '@aglyn/shared-util-timestamp'\nimport type { DocumentReference } from 'firebase/firestore'\nimport { Bytes, doc } from 'firebase/firestore'\nimport {\n  useFirestore,\n  type FirestoreDocOptions,\n} from './firebase/firebase-services'\nimport useDoc from './helpers/use-doc'\n\n/**\n * A saved template (AGL-681), at `hosts/{hostId}/templates/{templateId}`.\n *\n * Unlike screens and layouts there is no version subcollection: a template\n * is inert — nothing renders from it until it is used to create something\n * — so there is no published-versus-draft distinction to keep.\n *\n * Compressed at rest like every other besigner document (AGL-1151). A\n * template is the one kind whose whole content arrives by COPY — \"save as\n * template\" duplicates a screen's entire tree into a single document with no\n * version to spread it across — so it reaches the 1 MiB ceiling at exactly\n * the size the source page does, and about 1.4x sooner stored as a map.\n */\nexport const useHostTemplateRef = ({\n  hostId,\n  templateId,\n}: {\n  hostId: Aglyn.HostUid\n  templateId: string\n}) => {\n  const firestore = useFirestore()\n  const ref = doc(firestore, 'hosts', hostId, 'templates', templateId)\n  return ref.withConverter({\n    toFirestore(data: Aglyn.AglynTemplate) {\n      // `source` is server-managed and frozen in rules (AGL-666) — stripping\n      // it here means an ordinary save can never trip that guard.\n      const { $id, source, ...rest } = data as Record<string, unknown> & {\n        $id?: string\n        source?: unknown\n      }\n      // Only emit `nodes` when the write actually carries them (AGL-1250).\n      // The besigner's save writes `placeholders` and `editedAt` alongside\n      // the tree through a merging `setDoc`, and the template detail page\n      // writes a name on its own — encoding unconditionally would ship an\n      // empty map on the second of those and merge it over the design.\n      if (rest?.nodes === undefined) return { ...rest, updatedAt: Timestamp.now() }\n      const nodes = encodeStoredNodes(rest.nodes)\n      return {\n        ...rest,\n        ...(nodes ? { nodes: Bytes.fromUint8Array(nodes) } : {}),\n        updatedAt: Timestamp.now(),\n      }\n    },\n    fromFirestore(snapshot, options) {\n      if (!snapshot.exists()) return undefined\n      const data = snapshot.data(options)\n      if (data?.['nodes'] === undefined) return data as Aglyn.AglynTemplate\n      // BOTH stored forms, permanently. Every template written before this\n      // converter compressed is a plain map and nothing migrates them;\n      // `decodeStoredNodes` returns one unchanged.\n      return {\n        ...data,\n        nodes: decodeStoredNodes(data['nodes']),\n      } as Aglyn.AglynTemplate\n    },\n  }) as DocumentReference<Aglyn.AglynTemplate>\n}\n\nexport const useHostTemplate = (\n  data: { hostId: Aglyn.HostUid; templateId: string },\n  options?: FirestoreDocOptions<Aglyn.AglynTemplate>,\n) => {\n  return useDoc(useHostTemplateRef(data), options)\n}\n\nexport default useHostTemplate\n"],"names":["decodeStoredNodes","encodeStoredNodes","Timestamp","Bytes","doc","useFirestore","useDoc","useHostTemplateRef","hostId","templateId","firestore","ref","withConverter","toFirestore","data","$id","source","rest","nodes","undefined","updatedAt","now","fromUint8Array","fromFirestore","snapshot","options","exists","useHostTemplate"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED,4EAA4E;AAC5E,yEAAyE;AACzE,wEAAwE;;;AAExE,SAASA,iBAAiB,EAAEC,iBAAiB,QAAQ,eAAc;AACnE,SAASC,SAAS,QAAQ,+BAA8B;AAExD,SAASC,KAAK,EAAEC,GAAG,QAAQ,qBAAoB;AAC/C,SACEC,YAAY,QAEP,kCAA8B;AACrC,OAAOC,YAAY,uBAAmB;AAEtC;;;;;;;;;;;;CAYC,GACD,OAAO,MAAMC,qBAAqB,CAAC,EACjCC,MAAM,EACNC,UAAU,EAIX;IACC,MAAMC,YAAYL;IAClB,MAAMM,MAAMP,IAAIM,WAAW,SAASF,QAAQ,aAAaC;IACzD,OAAOE,IAAIC,aAAa,CAAC;QACvBC,aAAYC,IAAyB;YACnC,uEAAuE;YACvE,4DAA4D;YAC5D,MAAM,EAAEC,GAAG,EAAEC,MAAM,EAAW,GAAGF,MAATG,wCAASH;;;;YAIjC,qEAAqE;YACrE,qEAAqE;YACrE,oEAAoE;YACpE,oEAAoE;YACpE,iEAAiE;YACjE,IAAIG,CAAAA,wBAAAA,KAAMC,KAAK,MAAKC,WAAW,OAAO,aAAKF;gBAAMG,WAAWlB,UAAUmB,GAAG;;YACzE,MAAMH,QAAQjB,kBAAkBgB,KAAKC,KAAK;YAC1C,OAAO,aACFD,MACCC,QAAQ;gBAAEA,OAAOf,MAAMmB,cAAc,CAACJ;YAAO,IAAI,CAAC;gBACtDE,WAAWlB,UAAUmB,GAAG;;QAE5B;QACAE,eAAcC,QAAQ,EAAEC,OAAO;YAC7B,IAAI,CAACD,SAASE,MAAM,IAAI,OAAOP;YAC/B,MAAML,OAAOU,SAASV,IAAI,CAACW;YAC3B,IAAIX,CAAAA,wBAAAA,IAAM,CAAC,QAAQ,MAAKK,WAAW,OAAOL;YAC1C,qEAAqE;YACrE,iEAAiE;YACjE,6CAA6C;YAC7C,OAAO,aACFA;gBACHI,OAAOlB,kBAAkBc,IAAI,CAAC,QAAQ;;QAE1C;IACF;AACF,EAAC;AAED,OAAO,MAAMa,kBAAkB,CAC7Bb,MACAW;IAEA,OAAOnB,OAAOC,mBAAmBO,OAAOW;AAC1C,EAAC;AAED,eAAeE,gBAAe"}