@aglyn/tenant-feature-instance 1.0.0-beta.277 → 1.0.0-beta.283

package/src/lib/hooks/use-org-plans.d.ts

@@ -0,0 +1,47 @@
+/**
+ * The billing plan/tier for each of the user's orgs, read on demand (AGL-631).
+ * The org doc is the plan source of truth (webhook-mirrored); the membership
+ * mirror the org switcher lists carries only role/name/slug, so the switcher
+ * reads each org's plan directly. Per-doc `getDoc` keeps it rules-safe — a
+ * member can read their own org doc, whereas an `in` query over `orgs` cannot
+ * be proven allowed and is denied. `enabled` gates the reads to when the menu
+ * opens, so nothing is fetched until the user actually looks.
+ *
+ * AGL-2336 — this fan-out is what capped memberships at 50, not the size of
+ * the membership docs. Two rules now bound it:
+ *
+ *  - **Ask only for what is not already answered.** Resolved tiers accumulate
+ *    for the life of the hook, so re-opening the switcher costs ZERO reads.
+ *    Previously every open re-read every id, so a 50-workspace agency paid 50
+ *    reads per glance at the menu and a 500-workspace one would pay 500.
+ *  - **The caller passes the rows it is actually showing**, not the whole
+ *    membership list — see `org-switcher-nav`'s reveal window. Cost is then
+ *    proportional to what a human looked at and is independent of how many
+ *    workspaces they belong to, which is the precondition for raising the cap.
+ *
+ * A tier resolved once is not re-read while the hook is mounted, so a plan
+ * change elsewhere shows on the next load. That is fine for a row badge: the
+ * workspace you are actually IN takes its badge from `useCurrentOrg`, which
+ * is a live subscription.
+ *
+ * A FAILED read is deliberately not memoised — it is not an answer, and the
+ * next open should ask again.
+ */
+export declare function useOrgPlans(orgIds: string[], enabled?: boolean): Record<string, string>;
+/** What one read of an org doc tells a row about that workspace. */
+export interface OrgRow {
+    /** The plan the workspace gets, as `useOrgPlans` reports it. */
+    plan: string;
+    /** The org's logo (AGL-363), when it set one. */
+    logoUrl?: string;
+    /** The org's dark-mode logo, when it set one. */
+    logoDarkUrl?: string;
+}
+/**
+ * Each org's plan and logos from the SAME per-doc read `useOrgPlans` makes,
+ * so a row that shows a workspace's logo costs nothing more than its badge.
+ * The membership mirror carries no logo, so without this only the workspace
+ * the reader is in (whose doc `useCurrentOrg` holds) could show its own.
+ */
+export declare function useOrgRows(orgIds: string[], enabled?: boolean): Record<string, OrgRow>;
+export default useOrgPlans;

package/src/lib/hooks/use-org-plans.js

@@ -0,0 +1,164 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ 'use client';
+import { _ as _extends } from "@swc/helpers/_/_extends";
+import { isEnterpriseOrg, resolveEffectivePlan } from "@aglyn/aglyn";
+import { useFirestore } from "./firebase/firebase-services.js";
+import { doc, getDoc } from "firebase/firestore";
+import { useEffect, useMemo, useRef, useState } from "react";
+/**
+ * The billing plan/tier for each of the user's orgs, read on demand (AGL-631).
+ * The org doc is the plan source of truth (webhook-mirrored); the membership
+ * mirror the org switcher lists carries only role/name/slug, so the switcher
+ * reads each org's plan directly. Per-doc `getDoc` keeps it rules-safe — a
+ * member can read their own org doc, whereas an `in` query over `orgs` cannot
+ * be proven allowed and is denied. `enabled` gates the reads to when the menu
+ * opens, so nothing is fetched until the user actually looks.
+ *
+ * AGL-2336 — this fan-out is what capped memberships at 50, not the size of
+ * the membership docs. Two rules now bound it:
+ *
+ *  - **Ask only for what is not already answered.** Resolved tiers accumulate
+ *    for the life of the hook, so re-opening the switcher costs ZERO reads.
+ *    Previously every open re-read every id, so a 50-workspace agency paid 50
+ *    reads per glance at the menu and a 500-workspace one would pay 500.
+ *  - **The caller passes the rows it is actually showing**, not the whole
+ *    membership list — see `org-switcher-nav`'s reveal window. Cost is then
+ *    proportional to what a human looked at and is independent of how many
+ *    workspaces they belong to, which is the precondition for raising the cap.
+ *
+ * A tier resolved once is not re-read while the hook is mounted, so a plan
+ * change elsewhere shows on the next load. That is fine for a row badge: the
+ * workspace you are actually IN takes its badge from `useCurrentOrg`, which
+ * is a live subscription.
+ *
+ * A FAILED read is deliberately not memoised — it is not an answer, and the
+ * next open should ask again.
+ */ export function useOrgPlans(orgIds, enabled = true) {
+    const rows = useOrgRows(orgIds, enabled);
+    return useMemo(()=>Object.fromEntries(Object.entries(rows).map(([id, row])=>[
+                id,
+                row.plan
+            ])), [
+        rows
+    ]);
+}
+/**
+ * Each org's plan and logos from the SAME per-doc read `useOrgPlans` makes,
+ * so a row that shows a workspace's logo costs nothing more than its badge.
+ * The membership mirror carries no logo, so without this only the workspace
+ * the reader is in (whose doc `useCurrentOrg` holds) could show its own.
+ */ export function useOrgRows(orgIds, enabled = true) {
+    const firestore = useFirestore();
+    const [plans, setPlans] = useState({});
+    // What has been asked for already — answered or in flight. A ref, not
+    // derived from `plans`, so an id whose read is still in flight is not
+    // re-requested by the next render.
+    const requested = useRef(new Set());
+    const mounted = useRef(true);
+    const key = orgIds.join(',');
+    useEffect(()=>{
+        mounted.current = true;
+        return ()=>{
+            mounted.current = false;
+        };
+    }, []);
+    // A different Firestore instance is a different world; drop the memo with
+    // it rather than serve another instance's answers. Declared BEFORE the
+    // fetch effect so it runs first on the render that swaps the instance, and
+    // skipped on the first run so mounting does not cost a wasted re-render.
+    const instance = useRef(firestore);
+    useEffect(()=>{
+        if (instance.current === firestore) return;
+        instance.current = firestore;
+        requested.current = new Set();
+        setPlans({});
+    }, [
+        firestore
+    ]);
+    useEffect(()=>{
+        if (!enabled) return undefined;
+        const wanted = orgIds.filter((id)=>id && !requested.current.has(id));
+        if (wanted.length === 0) return undefined;
+        wanted.forEach((id)=>requested.current.add(id));
+        void Promise.all(wanted.map(async (id)=>{
+            try {
+                var _snap_data;
+                const snap = await getDoc(doc(firestore, 'orgs', id));
+                const data = (_snap_data = snap.data()) != null ? _snap_data : {};
+                const logos = _extends({}, typeof data.logoUrl === 'string' && data.logoUrl ? {
+                    logoUrl: data.logoUrl
+                } : {}, typeof data.logoDarkUrl === 'string' && data.logoDarkUrl ? {
+                    logoDarkUrl: data.logoDarkUrl
+                } : {});
+                // A custom-priced enterprise deal reads as "enterprise" regardless of
+                // its base plan (AGL-1110).
+                if (isEnterpriseOrg(data)) {
+                    return [
+                        id,
+                        _extends({
+                            plan: 'enterprise'
+                        }, logos)
+                    ];
+                }
+                // An org on the free tier has no `plan` field at all — the webhook
+                // only writes one for a paid subscription. A successful read with
+                // no plan therefore MEANS free, and must be reported as such;
+                // leaving it absent made "free" look identical to "not loaded"
+                // (AGL-646). Only a failed read stays unknown.
+                //
+                // RESOLVED, not read (AGL-3034): a staff comp grants a plan the
+                // field does not name, and a dead subscription's stored plan is
+                // Free. The resolver answers `free` for the missing field too.
+                return [
+                    id,
+                    _extends({
+                        plan: resolveEffectivePlan(data)
+                    }, logos)
+                ];
+            } catch (unused) {
+                // Not an answer — let the next open ask again.
+                requested.current.delete(id);
+                return [
+                    id,
+                    undefined
+                ];
+            }
+        })).then((entries)=>{
+            // Deliberately NOT gated on an effect-scoped `cancelled` flag: closing
+            // the switcher flips `enabled` and tears this effect down, and dropping
+            // an in-flight answer there would leave the id marked requested and
+            // permanently unanswerable. Only an unmounted hook stops caring.
+            if (!mounted.current) return;
+            const resolved = entries.filter((entry)=>Boolean(entry[1]));
+            if (resolved.length === 0) return;
+            // MERGE, never replace: the map spans every row revealed so far, and
+            // replacing it would blank the badges on rows already on screen.
+            setPlans((current)=>_extends({}, current, Object.fromEntries(resolved)));
+        });
+        return undefined;
+    // `key` captures the org-id list; enabled toggles the fetch.
+    // eslint-disable-next-line react-hooks/exhaustive-deps
+    }, [
+        firestore,
+        key,
+        enabled
+    ]);
+    return plans;
+}
+export default useOrgPlans;
+
+//# sourceMappingURL=use-org-plans.js.map

package/src/lib/hooks/use-org-plans.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../../libs/tenant/feature/instance/src/lib/hooks/use-org-plans.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n'use client'\n\nimport { isEnterpriseOrg, resolveEffectivePlan } from '@aglyn/aglyn'\nimport { useFirestore } from './firebase/firebase-services'\nimport { doc, getDoc } from 'firebase/firestore'\nimport { useEffect, useMemo, useRef, useState } from 'react'\n\n/**\n * The billing plan/tier for each of the user's orgs, read on demand (AGL-631).\n * The org doc is the plan source of truth (webhook-mirrored); the membership\n * mirror the org switcher lists carries only role/name/slug, so the switcher\n * reads each org's plan directly. Per-doc `getDoc` keeps it rules-safe — a\n * member can read their own org doc, whereas an `in` query over `orgs` cannot\n * be proven allowed and is denied. `enabled` gates the reads to when the menu\n * opens, so nothing is fetched until the user actually looks.\n *\n * AGL-2336 — this fan-out is what capped memberships at 50, not the size of\n * the membership docs. Two rules now bound it:\n *\n *  - **Ask only for what is not already answered.** Resolved tiers accumulate\n *    for the life of the hook, so re-opening the switcher costs ZERO reads.\n *    Previously every open re-read every id, so a 50-workspace agency paid 50\n *    reads per glance at the menu and a 500-workspace one would pay 500.\n *  - **The caller passes the rows it is actually showing**, not the whole\n *    membership list — see `org-switcher-nav`'s reveal window. Cost is then\n *    proportional to what a human looked at and is independent of how many\n *    workspaces they belong to, which is the precondition for raising the cap.\n *\n * A tier resolved once is not re-read while the hook is mounted, so a plan\n * change elsewhere shows on the next load. That is fine for a row badge: the\n * workspace you are actually IN takes its badge from `useCurrentOrg`, which\n * is a live subscription.\n *\n * A FAILED read is deliberately not memoised — it is not an answer, and the\n * next open should ask again.\n */\nexport function useOrgPlans(\n  orgIds: string[],\n  enabled = true,\n): Record<string, string> {\n  const rows = useOrgRows(orgIds, enabled)\n  return useMemo(\n    () =>\n      Object.fromEntries(Object.entries(rows).map(([id, row]) => [id, row.plan])),\n    [rows],\n  )\n}\n\n/** What one read of an org doc tells a row about that workspace. */\nexport interface OrgRow {\n  /** The plan the workspace gets, as `useOrgPlans` reports it. */\n  plan: string\n  /** The org's logo (AGL-363), when it set one. */\n  logoUrl?: string\n  /** The org's dark-mode logo, when it set one. */\n  logoDarkUrl?: string\n}\n\n/**\n * Each org's plan and logos from the SAME per-doc read `useOrgPlans` makes,\n * so a row that shows a workspace's logo costs nothing more than its badge.\n * The membership mirror carries no logo, so without this only the workspace\n * the reader is in (whose doc `useCurrentOrg` holds) could show its own.\n */\nexport function useOrgRows(\n  orgIds: string[],\n  enabled = true,\n): Record<string, OrgRow> {\n  const firestore = useFirestore()\n  const [plans, setPlans] = useState<Record<string, OrgRow>>({})\n  // What has been asked for already — answered or in flight. A ref, not\n  // derived from `plans`, so an id whose read is still in flight is not\n  // re-requested by the next render.\n  const requested = useRef(new Set<string>())\n  const mounted = useRef(true)\n  const key = orgIds.join(',')\n\n  useEffect(() => {\n    mounted.current = true\n    return () => {\n      mounted.current = false\n    }\n  }, [])\n\n  // A different Firestore instance is a different world; drop the memo with\n  // it rather than serve another instance's answers. Declared BEFORE the\n  // fetch effect so it runs first on the render that swaps the instance, and\n  // skipped on the first run so mounting does not cost a wasted re-render.\n  const instance = useRef(firestore)\n  useEffect(() => {\n    if (instance.current === firestore) return\n    instance.current = firestore\n    requested.current = new Set<string>()\n    setPlans({})\n  }, [firestore])\n\n  useEffect(() => {\n    if (!enabled) return undefined\n    const wanted = orgIds.filter((id) => id && !requested.current.has(id))\n    if (wanted.length === 0) return undefined\n    wanted.forEach((id) => requested.current.add(id))\n    void Promise.all(\n      wanted.map(async (id) => {\n        try {\n          const snap = await getDoc(doc(firestore, 'orgs', id))\n          const data = (snap.data() ?? {}) as Record<string, unknown>\n          const logos = {\n            ...(typeof data.logoUrl === 'string' && data.logoUrl\n              ? { logoUrl: data.logoUrl }\n              : {}),\n            ...(typeof data.logoDarkUrl === 'string' && data.logoDarkUrl\n              ? { logoDarkUrl: data.logoDarkUrl }\n              : {}),\n          }\n          // A custom-priced enterprise deal reads as \"enterprise\" regardless of\n          // its base plan (AGL-1110).\n          if (isEnterpriseOrg(data as never)) {\n            return [id, { plan: 'enterprise', ...logos }] as const\n          }\n          // An org on the free tier has no `plan` field at all — the webhook\n          // only writes one for a paid subscription. A successful read with\n          // no plan therefore MEANS free, and must be reported as such;\n          // leaving it absent made \"free\" look identical to \"not loaded\"\n          // (AGL-646). Only a failed read stays unknown.\n          //\n          // RESOLVED, not read (AGL-3034): a staff comp grants a plan the\n          // field does not name, and a dead subscription's stored plan is\n          // Free. The resolver answers `free` for the missing field too.\n          return [\n            id,\n            { plan: resolveEffectivePlan(data as never) as string, ...logos },\n          ] as const\n        } catch {\n          // Not an answer — let the next open ask again.\n          requested.current.delete(id)\n          return [id, undefined] as const\n        }\n      }),\n    ).then((entries) => {\n      // Deliberately NOT gated on an effect-scoped `cancelled` flag: closing\n      // the switcher flips `enabled` and tears this effect down, and dropping\n      // an in-flight answer there would leave the id marked requested and\n      // permanently unanswerable. Only an unmounted hook stops caring.\n      if (!mounted.current) return\n      const resolved = entries.filter((entry): entry is [string, OrgRow] =>\n        Boolean(entry[1]),\n      )\n      if (resolved.length === 0) return\n      // MERGE, never replace: the map spans every row revealed so far, and\n      // replacing it would blank the badges on rows already on screen.\n      setPlans((current) => ({ ...current, ...Object.fromEntries(resolved) }))\n    })\n    return undefined\n    // `key` captures the org-id list; enabled toggles the fetch.\n    // eslint-disable-next-line react-hooks/exhaustive-deps\n  }, [firestore, key, enabled])\n\n  return plans\n}\n\nexport default useOrgPlans\n"],"names":["isEnterpriseOrg","resolveEffectivePlan","useFirestore","doc","getDoc","useEffect","useMemo","useRef","useState","useOrgPlans","orgIds","enabled","rows","useOrgRows","Object","fromEntries","entries","map","id","row","plan","firestore","plans","setPlans","requested","Set","mounted","key","join","current","instance","undefined","wanted","filter","has","length","forEach","add","Promise","all","snap","data","logos","logoUrl","logoDarkUrl","delete","then","resolved","entry","Boolean"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GACD;;AAEA,SAASA,eAAe,EAAEC,oBAAoB,QAAQ,eAAc;AACpE,SAASC,YAAY,QAAQ,kCAA8B;AAC3D,SAASC,GAAG,EAAEC,MAAM,QAAQ,qBAAoB;AAChD,SAASC,SAAS,EAAEC,OAAO,EAAEC,MAAM,EAAEC,QAAQ,QAAQ,QAAO;AAE5D;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA4BC,GACD,OAAO,SAASC,YACdC,MAAgB,EAChBC,UAAU,IAAI;IAEd,MAAMC,OAAOC,WAAWH,QAAQC;IAChC,OAAOL,QACL,IACEQ,OAAOC,WAAW,CAACD,OAAOE,OAAO,CAACJ,MAAMK,GAAG,CAAC,CAAC,CAACC,IAAIC,IAAI,GAAK;gBAACD;gBAAIC,IAAIC,IAAI;aAAC,IAC3E;QAACR;KAAK;AAEV;AAYA;;;;;CAKC,GACD,OAAO,SAASC,WACdH,MAAgB,EAChBC,UAAU,IAAI;IAEd,MAAMU,YAAYnB;IAClB,MAAM,CAACoB,OAAOC,SAAS,GAAGf,SAAiC,CAAC;IAC5D,sEAAsE;IACtE,sEAAsE;IACtE,mCAAmC;IACnC,MAAMgB,YAAYjB,OAAO,IAAIkB;IAC7B,MAAMC,UAAUnB,OAAO;IACvB,MAAMoB,MAAMjB,OAAOkB,IAAI,CAAC;IAExBvB,UAAU;QACRqB,QAAQG,OAAO,GAAG;QAClB,OAAO;YACLH,QAAQG,OAAO,GAAG;QACpB;IACF,GAAG,EAAE;IAEL,0EAA0E;IAC1E,uEAAuE;IACvE,2EAA2E;IAC3E,yEAAyE;IACzE,MAAMC,WAAWvB,OAAOc;IACxBhB,UAAU;QACR,IAAIyB,SAASD,OAAO,KAAKR,WAAW;QACpCS,SAASD,OAAO,GAAGR;QACnBG,UAAUK,OAAO,GAAG,IAAIJ;QACxBF,SAAS,CAAC;IACZ,GAAG;QAACF;KAAU;IAEdhB,UAAU;QACR,IAAI,CAACM,SAAS,OAAOoB;QACrB,MAAMC,SAAStB,OAAOuB,MAAM,CAAC,CAACf,KAAOA,MAAM,CAACM,UAAUK,OAAO,CAACK,GAAG,CAAChB;QAClE,IAAIc,OAAOG,MAAM,KAAK,GAAG,OAAOJ;QAChCC,OAAOI,OAAO,CAAC,CAAClB,KAAOM,UAAUK,OAAO,CAACQ,GAAG,CAACnB;QAC7C,KAAKoB,QAAQC,GAAG,CACdP,OAAOf,GAAG,CAAC,OAAOC;YAChB,IAAI;oBAEYsB;gBADd,MAAMA,OAAO,MAAMpC,OAAOD,IAAIkB,WAAW,QAAQH;gBACjD,MAAMuB,QAAQD,aAAAA,KAAKC,IAAI,cAATD,aAAe,CAAC;gBAC9B,MAAME,QAAQ,aACR,OAAOD,KAAKE,OAAO,KAAK,YAAYF,KAAKE,OAAO,GAChD;oBAAEA,SAASF,KAAKE,OAAO;gBAAC,IACxB,CAAC,GACD,OAAOF,KAAKG,WAAW,KAAK,YAAYH,KAAKG,WAAW,GACxD;oBAAEA,aAAaH,KAAKG,WAAW;gBAAC,IAChC,CAAC;gBAEP,sEAAsE;gBACtE,4BAA4B;gBAC5B,IAAI5C,gBAAgByC,OAAgB;oBAClC,OAAO;wBAACvB;wBAAI;4BAAEE,MAAM;2BAAiBsB;qBAAQ;gBAC/C;gBACA,mEAAmE;gBACnE,kEAAkE;gBAClE,8DAA8D;gBAC9D,+DAA+D;gBAC/D,+CAA+C;gBAC/C,EAAE;gBACF,gEAAgE;gBAChE,gEAAgE;gBAChE,+DAA+D;gBAC/D,OAAO;oBACLxB;oBACA;wBAAEE,MAAMnB,qBAAqBwC;uBAA6BC;iBAC3D;YACH,EAAE,eAAM;gBACN,+CAA+C;gBAC/ClB,UAAUK,OAAO,CAACgB,MAAM,CAAC3B;gBACzB,OAAO;oBAACA;oBAAIa;iBAAU;YACxB;QACF,IACAe,IAAI,CAAC,CAAC9B;YACN,uEAAuE;YACvE,wEAAwE;YACxE,oEAAoE;YACpE,iEAAiE;YACjE,IAAI,CAACU,QAAQG,OAAO,EAAE;YACtB,MAAMkB,WAAW/B,QAAQiB,MAAM,CAAC,CAACe,QAC/BC,QAAQD,KAAK,CAAC,EAAE;YAElB,IAAID,SAASZ,MAAM,KAAK,GAAG;YAC3B,qEAAqE;YACrE,iEAAiE;YACjEZ,SAAS,CAACM,UAAa,aAAKA,SAAYf,OAAOC,WAAW,CAACgC;QAC7D;QACA,OAAOhB;IACP,6DAA6D;IAC7D,uDAAuD;IACzD,GAAG;QAACV;QAAWM;QAAKhB;KAAQ;IAE5B,OAAOW;AACT;AAEA,eAAeb,YAAW"}

package/src/lib/hooks/use-plugin-drawer-registration.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Registers the host's installed plugins as named besigner drawer entries
+ * (AGL-190): one preset per install under the Marketplace category, dropping
+ * a `marketplacePlugin` node with the listing id pre-pinned. Presets are
+ * re-synced whenever installs change and removed on host change/unmount so
+ * switching hosts never leaks another host's plugins into the drawer.
+ */
+export declare function usePluginDrawerRegistration(hostId: string): void;
+export default usePluginDrawerRegistration;

package/src/lib/hooks/use-plugin-drawer-registration.js

@@ -0,0 +1,133 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ 'use client';
+import { _ as _extends } from "@swc/helpers/_/_extends";
+import { components } from "@aglyn/aglyn";
+import { pluginInstallToPresets, setKnownPluginInstalls } from "@aglyn/aglyn";
+import { collection, limit, query } from "firebase/firestore";
+import { runInAction } from "mobx";
+import { useEffect, useMemo, useRef } from "react";
+import { useFirestore } from "./firebase/firebase-services.js";
+import { useHostOrgId } from "./use-host-org-id.js";
+import useFirestoreCollection from "./use-firestore-collection.js";
+/**
+ * Registers the host's installed plugins as named besigner drawer entries
+ * (AGL-190): one preset per install under the Marketplace category, dropping
+ * a `marketplacePlugin` node with the listing id pre-pinned. Presets are
+ * re-synced whenever installs change and removed on host change/unmount so
+ * switching hosts never leaks another host's plugins into the drawer.
+ */ export function usePluginDrawerRegistration(hostId) {
+    const firestore = useFirestore();
+    const { data: installDocs } = useFirestoreCollection(()=>query(collection(firestore, 'hosts', hostId, 'installs'), limit(50)), [
+        firestore,
+        hostId
+    ], {
+        idField: '$id'
+    });
+    // Org-wide pins too (AGL-1029). One org pin covers every site, so a plugin
+    // installed that way is genuinely available here — but the drawer only ever
+    // read the host's own installs, so those plugins had no entry, and the
+    // element could not be told they were installed either.
+    const orgId = useHostOrgId(hostId);
+    // Held at null while `useHostOrgId` is in flight, never `orgs/-pending-`
+    // (AGL-1440): installs are member-gated, so the sentinel was a
+    // guaranteed-denied listen on every besigner editor session.
+    const { data: orgInstallDocs } = useFirestoreCollection(()=>orgId ? query(collection(firestore, 'orgs', orgId, 'installs'), limit(50)) : null, [
+        firestore,
+        orgId
+    ], {
+        idField: '$id'
+    });
+    /**
+   * Host pins shadow org pins for the same listing (AGL-656), so the host
+   * entry wins — the drawer must not offer the same plugin twice, and the
+   * scope reported for it has to be the one actually in force.
+   */ const installs = useMemo(()=>{
+        const byListing = new Map();
+        for (const install of orgInstallDocs != null ? orgInstallDocs : []){
+            var _ref;
+            const id = (_ref = install == null ? void 0 : install.listingId) != null ? _ref : install == null ? void 0 : install.$id;
+            if (id) byListing.set(id, _extends({}, install, {
+                scope: 'org'
+            }));
+        }
+        for (const install of installDocs != null ? installDocs : []){
+            var _ref1;
+            const id = (_ref1 = install == null ? void 0 : install.listingId) != null ? _ref1 : install == null ? void 0 : install.$id;
+            if (id) byListing.set(id, _extends({}, install, {
+                scope: 'host'
+            }));
+        }
+        return [
+            ...byListing.values()
+        ];
+    }, [
+        installDocs,
+        orgInstallDocs
+    ]);
+    // Track the ids we registered so we can unregister exactly those.
+    const registeredIds = useRef([]);
+    // What the canvas may claim about installation (AGL-1029). Published
+    // separately from the presets because the element asks by listing id, and
+    // an unknown id is only "not installed" if there is a list to be missing
+    // from — on the tenant nothing publishes one.
+    useEffect(()=>{
+        setKnownPluginInstalls(installs.map((install)=>{
+            var _install_listingId, _install_displayName;
+            var _install_manifest, _install_manifest1;
+            return {
+                listingId: (_install_listingId = install.listingId) != null ? _install_listingId : install.$id,
+                displayName: (_install_displayName = install.displayName) != null ? _install_displayName : (_install_manifest = install.manifest) == null ? void 0 : _install_manifest.name,
+                scope: install.scope,
+                // The declared props (and, where a publisher supplied one, how to edit
+                // them) so the attributes panel can render real fields — AGL-1049.
+                capabilities: (_install_manifest1 = install.manifest) == null ? void 0 : _install_manifest1.capabilities
+            };
+        }));
+        return ()=>setKnownPluginInstalls(undefined);
+    }, [
+        installs
+    ]);
+    useEffect(()=>{
+        // Single mobx transaction (AGL-371): the drawer re-renders once per
+        // install sync, not once for the unregister and again per preset.
+        runInAction(()=>{
+            if (registeredIds.current.length) {
+                components.unregisterPreset(registeredIds.current);
+                registeredIds.current = [];
+            }
+            // One preset per install PLUS one per element the pinned version
+            // declares (AGL-1031). Built from the pin, so a declared element appears
+            // only where the plugin is installed and leaves with a revoked version.
+            const presets = installs.flatMap((install)=>pluginInstallToPresets(install)).filter((preset)=>Boolean(preset));
+            if (presets.length) {
+                components.registerPreset(presets);
+                registeredIds.current = presets.map((preset)=>preset.$id);
+            }
+        });
+        return ()=>{
+            if (registeredIds.current.length) {
+                components.unregisterPreset(registeredIds.current);
+                registeredIds.current = [];
+            }
+        };
+    }, [
+        installs
+    ]);
+}
+export default usePluginDrawerRegistration;
+
+//# sourceMappingURL=use-plugin-drawer-registration.js.map

package/src/lib/hooks/use-plugin-drawer-registration.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../../libs/tenant/feature/instance/src/lib/hooks/use-plugin-drawer-registration.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n'use client'\n\nimport { components } from '@aglyn/aglyn'\nimport { pluginInstallToPresets, setKnownPluginInstalls } from '@aglyn/aglyn'\nimport { collection, limit, query } from 'firebase/firestore'\nimport { runInAction } from 'mobx'\nimport { useEffect, useMemo, useRef } from 'react'\nimport { useFirestore } from './firebase/firebase-services'\nimport { useHostOrgId } from './use-host-org-id'\nimport useFirestoreCollection from './use-firestore-collection'\n\n/**\n * Registers the host's installed plugins as named besigner drawer entries\n * (AGL-190): one preset per install under the Marketplace category, dropping\n * a `marketplacePlugin` node with the listing id pre-pinned. Presets are\n * re-synced whenever installs change and removed on host change/unmount so\n * switching hosts never leaks another host's plugins into the drawer.\n */\nexport function usePluginDrawerRegistration(hostId: string): void {\n  const firestore = useFirestore()\n  const { data: installDocs } = useFirestoreCollection<any>(\n    () => query(collection(firestore, 'hosts', hostId, 'installs'), limit(50)),\n    [firestore, hostId],\n    { idField: '$id' },\n  )\n  // Org-wide pins too (AGL-1029). One org pin covers every site, so a plugin\n  // installed that way is genuinely available here — but the drawer only ever\n  // read the host's own installs, so those plugins had no entry, and the\n  // element could not be told they were installed either.\n  const orgId = useHostOrgId(hostId)\n  // Held at null while `useHostOrgId` is in flight, never `orgs/-pending-`\n  // (AGL-1440): installs are member-gated, so the sentinel was a\n  // guaranteed-denied listen on every besigner editor session.\n  const { data: orgInstallDocs } = useFirestoreCollection<any>(\n    () =>\n      orgId\n        ? query(collection(firestore, 'orgs', orgId, 'installs'), limit(50))\n        : null,\n    [firestore, orgId],\n    { idField: '$id' },\n  )\n  /**\n   * Host pins shadow org pins for the same listing (AGL-656), so the host\n   * entry wins — the drawer must not offer the same plugin twice, and the\n   * scope reported for it has to be the one actually in force.\n   */\n  const installs = useMemo(() => {\n    const byListing = new Map<string, any>()\n    for (const install of (orgInstallDocs as any[]) ?? []) {\n      const id = install?.listingId ?? install?.$id\n      if (id) byListing.set(id, { ...install, scope: 'org' })\n    }\n    for (const install of (installDocs as any[]) ?? []) {\n      const id = install?.listingId ?? install?.$id\n      if (id) byListing.set(id, { ...install, scope: 'host' })\n    }\n    return [...byListing.values()]\n  }, [installDocs, orgInstallDocs])\n  // Track the ids we registered so we can unregister exactly those.\n  const registeredIds = useRef<string[]>([])\n\n  // What the canvas may claim about installation (AGL-1029). Published\n  // separately from the presets because the element asks by listing id, and\n  // an unknown id is only \"not installed\" if there is a list to be missing\n  // from — on the tenant nothing publishes one.\n  useEffect(() => {\n    setKnownPluginInstalls(\n      installs.map((install) => ({\n        listingId: install.listingId ?? install.$id,\n        displayName: install.displayName ?? install.manifest?.name,\n        scope: install.scope,\n        // The declared props (and, where a publisher supplied one, how to edit\n        // them) so the attributes panel can render real fields — AGL-1049.\n        capabilities: install.manifest?.capabilities,\n      })),\n    )\n    return () => setKnownPluginInstalls(undefined)\n  }, [installs])\n\n  useEffect(() => {\n    // Single mobx transaction (AGL-371): the drawer re-renders once per\n    // install sync, not once for the unregister and again per preset.\n    runInAction(() => {\n      if (registeredIds.current.length) {\n        components.unregisterPreset(registeredIds.current)\n        registeredIds.current = []\n      }\n      // One preset per install PLUS one per element the pinned version\n      // declares (AGL-1031). Built from the pin, so a declared element appears\n      // only where the plugin is installed and leaves with a revoked version.\n      const presets = installs\n        .flatMap((install) => pluginInstallToPresets(install))\n        .filter(\n          (preset): preset is NonNullable<typeof preset> => Boolean(preset),\n        )\n      if (presets.length) {\n        components.registerPreset(presets)\n        registeredIds.current = presets.map((preset) => preset.$id)\n      }\n    })\n    return () => {\n      if (registeredIds.current.length) {\n        components.unregisterPreset(registeredIds.current)\n        registeredIds.current = []\n      }\n    }\n  }, [installs])\n}\n\nexport default usePluginDrawerRegistration\n"],"names":["components","pluginInstallToPresets","setKnownPluginInstalls","collection","limit","query","runInAction","useEffect","useMemo","useRef","useFirestore","useHostOrgId","useFirestoreCollection","usePluginDrawerRegistration","hostId","firestore","data","installDocs","idField","orgId","orgInstallDocs","installs","byListing","Map","install","id","listingId","$id","set","scope","values","registeredIds","map","displayName","manifest","name","capabilities","undefined","current","length","unregisterPreset","presets","flatMap","filter","preset","Boolean","registerPreset"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GACD;;AAEA,SAASA,UAAU,QAAQ,eAAc;AACzC,SAASC,sBAAsB,EAAEC,sBAAsB,QAAQ,eAAc;AAC7E,SAASC,UAAU,EAAEC,KAAK,EAAEC,KAAK,QAAQ,qBAAoB;AAC7D,SAASC,WAAW,QAAQ,OAAM;AAClC,SAASC,SAAS,EAAEC,OAAO,EAAEC,MAAM,QAAQ,QAAO;AAClD,SAASC,YAAY,QAAQ,kCAA8B;AAC3D,SAASC,YAAY,QAAQ,uBAAmB;AAChD,OAAOC,4BAA4B,gCAA4B;AAE/D;;;;;;CAMC,GACD,OAAO,SAASC,4BAA4BC,MAAc;IACxD,MAAMC,YAAYL;IAClB,MAAM,EAAEM,MAAMC,WAAW,EAAE,GAAGL,uBAC5B,IAAMP,MAAMF,WAAWY,WAAW,SAASD,QAAQ,aAAaV,MAAM,MACtE;QAACW;QAAWD;KAAO,EACnB;QAAEI,SAAS;IAAM;IAEnB,2EAA2E;IAC3E,4EAA4E;IAC5E,uEAAuE;IACvE,wDAAwD;IACxD,MAAMC,QAAQR,aAAaG;IAC3B,yEAAyE;IACzE,+DAA+D;IAC/D,6DAA6D;IAC7D,MAAM,EAAEE,MAAMI,cAAc,EAAE,GAAGR,uBAC/B,IACEO,QACId,MAAMF,WAAWY,WAAW,QAAQI,OAAO,aAAaf,MAAM,OAC9D,MACN;QAACW;QAAWI;KAAM,EAClB;QAAED,SAAS;IAAM;IAEnB;;;;GAIC,GACD,MAAMG,WAAWb,QAAQ;QACvB,MAAMc,YAAY,IAAIC;QACtB,KAAK,MAAMC,WAAYJ,yBAAAA,iBAA4B,EAAE,CAAE;;YACrD,MAAMK,aAAKD,2BAAAA,QAASE,SAAS,mBAAIF,2BAAAA,QAASG,GAAG;YAC7C,IAAIF,IAAIH,UAAUM,GAAG,CAACH,IAAI,aAAKD;gBAASK,OAAO;;QACjD;QACA,KAAK,MAAML,WAAYP,sBAAAA,cAAyB,EAAE,CAAE;;YAClD,MAAMQ,cAAKD,2BAAAA,QAASE,SAAS,oBAAIF,2BAAAA,QAASG,GAAG;YAC7C,IAAIF,IAAIH,UAAUM,GAAG,CAACH,IAAI,aAAKD;gBAASK,OAAO;;QACjD;QACA,OAAO;eAAIP,UAAUQ,MAAM;SAAG;IAChC,GAAG;QAACb;QAAaG;KAAe;IAChC,kEAAkE;IAClE,MAAMW,gBAAgBtB,OAAiB,EAAE;IAEzC,qEAAqE;IACrE,0EAA0E;IAC1E,yEAAyE;IACzE,8CAA8C;IAC9CF,UAAU;QACRL,uBACEmB,SAASW,GAAG,CAAC,CAACR;gBACDA,oBACEA;gBAAuBA,mBAItBA;mBANW;gBACzBE,SAAS,GAAEF,qBAAAA,QAAQE,SAAS,YAAjBF,qBAAqBA,QAAQG,GAAG;gBAC3CM,WAAW,GAAET,uBAAAA,QAAQS,WAAW,YAAnBT,wBAAuBA,oBAAAA,QAAQU,QAAQ,qBAAhBV,kBAAkBW,IAAI;gBAC1DN,OAAOL,QAAQK,KAAK;gBACpB,uEAAuE;gBACvE,mEAAmE;gBACnEO,YAAY,GAAEZ,qBAAAA,QAAQU,QAAQ,qBAAhBV,mBAAkBY,YAAY;YAC9C;;QAEF,OAAO,IAAMlC,uBAAuBmC;IACtC,GAAG;QAAChB;KAAS;IAEbd,UAAU;QACR,oEAAoE;QACpE,kEAAkE;QAClED,YAAY;YACV,IAAIyB,cAAcO,OAAO,CAACC,MAAM,EAAE;gBAChCvC,WAAWwC,gBAAgB,CAACT,cAAcO,OAAO;gBACjDP,cAAcO,OAAO,GAAG,EAAE;YAC5B;YACA,iEAAiE;YACjE,yEAAyE;YACzE,wEAAwE;YACxE,MAAMG,UAAUpB,SACbqB,OAAO,CAAC,CAAClB,UAAYvB,uBAAuBuB,UAC5CmB,MAAM,CACL,CAACC,SAAiDC,QAAQD;YAE9D,IAAIH,QAAQF,MAAM,EAAE;gBAClBvC,WAAW8C,cAAc,CAACL;gBAC1BV,cAAcO,OAAO,GAAGG,QAAQT,GAAG,CAAC,CAACY,SAAWA,OAAOjB,GAAG;YAC5D;QACF;QACA,OAAO;YACL,IAAII,cAAcO,OAAO,CAACC,MAAM,EAAE;gBAChCvC,WAAWwC,gBAAgB,CAACT,cAAcO,OAAO;gBACjDP,cAAcO,OAAO,GAAG,EAAE;YAC5B;QACF;IACF,GAAG;QAACjB;KAAS;AACf;AAEA,eAAeR,4BAA2B"}

package/src/lib/hooks/use-site-marketplace-plugins.d.ts

@@ -0,0 +1,35 @@
+/** One marketplace plugin as a site sees it. */
+export interface SiteMarketplacePlugin {
+    /** The listing document id — the id `enabledPlugins` and the pins key by. */
+    listingId: string;
+    /** The publisher's name for it, denormalized onto the pin. */
+    displayName: string;
+    version?: string;
+    /**
+     * `org` — pinned for every site in the workspace; `site` — pinned for this
+     * one. The distinction changes what switching it off here means, so it is
+     * carried rather than flattened.
+     */
+    scope: 'org' | 'site';
+}
+/**
+ * Every marketplace plugin that can run on one site (AGL-1014).
+ *
+ * The site's plugin switchboard used to derive this from `org.enabledPlugins`
+ * alone, and that field is EMPTY for most workspaces: `syncEnabledPlugins`
+ * appends a listing id only for an org that has already configured the
+ * switchboard, because an absent field means default-open and adding the first
+ * id would switch off every plugin not in it. So a workspace that never
+ * touched the built-in switches had its marketplace installs running on every
+ * site with nothing in the console listing them, and no way to switch one off
+ * for one site.
+ *
+ * The pins are the durable record, so they are the source here: org-tier pins
+ * apply to every site, host-tier pins to this one, and the ids already on
+ * `enabledPlugins` are unioned in so a listing whose pin this reader cannot
+ * see still gets a row rather than silently vanishing.
+ */
+export declare function useSiteMarketplacePlugins(orgId: string, hostId: string, 
+/** Non-first-party ids already on the org's switchboard. */
+switchboardIds?: readonly string[]): SiteMarketplacePlugin[];
+export default useSiteMarketplacePlugins;

package/src/lib/hooks/use-site-marketplace-plugins.js

@@ -0,0 +1,99 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ 'use client';
+import { collection, limit, query } from "firebase/firestore";
+import { useMemo } from "react";
+import { useFirestore } from "./firebase/firebase-services.js";
+import { useFirestoreCollection } from "./use-firestore-collection.js";
+/**
+ * Every marketplace plugin that can run on one site (AGL-1014).
+ *
+ * The site's plugin switchboard used to derive this from `org.enabledPlugins`
+ * alone, and that field is EMPTY for most workspaces: `syncEnabledPlugins`
+ * appends a listing id only for an org that has already configured the
+ * switchboard, because an absent field means default-open and adding the first
+ * id would switch off every plugin not in it. So a workspace that never
+ * touched the built-in switches had its marketplace installs running on every
+ * site with nothing in the console listing them, and no way to switch one off
+ * for one site.
+ *
+ * The pins are the durable record, so they are the source here: org-tier pins
+ * apply to every site, host-tier pins to this one, and the ids already on
+ * `enabledPlugins` are unioned in so a listing whose pin this reader cannot
+ * see still gets a row rather than silently vanishing.
+ */ export function useSiteMarketplacePlugins(orgId, hostId, /** Non-first-party ids already on the org's switchboard. */ switchboardIds = []) {
+    const firestore = useFirestore();
+    // Held at null while the scope is unknown, never `orgs/-pending-`
+    // (AGL-1440): installs are member-gated, so a sentinel id is a
+    // guaranteed-denied listen on every mount.
+    const { data: orgInstalls } = useFirestoreCollection(()=>orgId ? query(collection(firestore, 'orgs', orgId, 'installs'), limit(100)) : null, [
+        firestore,
+        orgId
+    ], {
+        idField: '$id'
+    });
+    const { data: hostInstalls } = useFirestoreCollection(()=>hostId ? query(collection(firestore, 'hosts', hostId, 'installs'), limit(100)) : null, [
+        firestore,
+        hostId
+    ], {
+        idField: '$id'
+    });
+    const switchboardKey = [
+        ...switchboardIds
+    ].sort().join('|');
+    return useMemo(()=>{
+        const byListing = new Map();
+        const add = (pin, scope)=>{
+            var _ref, _ref1, _ref2, _ref3;
+            var _pin_manifest;
+            const listingId = String((_ref = pin == null ? void 0 : pin.$id) != null ? _ref : '');
+            if (!listingId) return;
+            // A host pin is the more specific fact about THIS site, so it wins the
+            // scope; the display name and version are the same either way.
+            const existing = byListing.get(listingId);
+            if (existing && scope === 'org') return;
+            byListing.set(listingId, {
+                listingId,
+                displayName: String((_ref1 = (_ref2 = (_ref3 = pin == null ? void 0 : pin.displayName) != null ? _ref3 : pin == null ? void 0 : (_pin_manifest = pin.manifest) == null ? void 0 : _pin_manifest.name) != null ? _ref2 : pin == null ? void 0 : pin.pluginId) != null ? _ref1 : listingId),
+                version: (pin == null ? void 0 : pin.version) ? String(pin.version) : undefined,
+                scope
+            });
+        };
+        for (const pin of orgInstalls != null ? orgInstalls : [])add(pin, 'org');
+        for (const pin of hostInstalls != null ? hostInstalls : [])add(pin, 'site');
+        // An id the switchboard carries with no readable pin still gets a row,
+        // named by its id. A row that says less is better than a plugin running on
+        // the site with no row at all — which is the state this hook exists to end.
+        for (const listingId of switchboardKey ? switchboardKey.split('|') : []){
+            if (byListing.has(listingId)) continue;
+            byListing.set(listingId, {
+                listingId,
+                displayName: listingId,
+                scope: 'org'
+            });
+        }
+        return [
+            ...byListing.values()
+        ].sort((left, right)=>left.displayName.localeCompare(right.displayName));
+    }, [
+        orgInstalls,
+        hostInstalls,
+        switchboardKey
+    ]);
+}
+export default useSiteMarketplacePlugins;
+
+//# sourceMappingURL=use-site-marketplace-plugins.js.map

package/src/lib/hooks/use-site-marketplace-plugins.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../../libs/tenant/feature/instance/src/lib/hooks/use-site-marketplace-plugins.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n'use client'\n\nimport { collection, limit, query } from 'firebase/firestore'\nimport { useMemo } from 'react'\nimport { useFirestore } from './firebase/firebase-services'\nimport { useFirestoreCollection } from './use-firestore-collection'\n\n/** One marketplace plugin as a site sees it. */\nexport interface SiteMarketplacePlugin {\n  /** The listing document id — the id `enabledPlugins` and the pins key by. */\n  listingId: string\n  /** The publisher's name for it, denormalized onto the pin. */\n  displayName: string\n  version?: string\n  /**\n   * `org` — pinned for every site in the workspace; `site` — pinned for this\n   * one. The distinction changes what switching it off here means, so it is\n   * carried rather than flattened.\n   */\n  scope: 'org' | 'site'\n}\n\n/**\n * Every marketplace plugin that can run on one site (AGL-1014).\n *\n * The site's plugin switchboard used to derive this from `org.enabledPlugins`\n * alone, and that field is EMPTY for most workspaces: `syncEnabledPlugins`\n * appends a listing id only for an org that has already configured the\n * switchboard, because an absent field means default-open and adding the first\n * id would switch off every plugin not in it. So a workspace that never\n * touched the built-in switches had its marketplace installs running on every\n * site with nothing in the console listing them, and no way to switch one off\n * for one site.\n *\n * The pins are the durable record, so they are the source here: org-tier pins\n * apply to every site, host-tier pins to this one, and the ids already on\n * `enabledPlugins` are unioned in so a listing whose pin this reader cannot\n * see still gets a row rather than silently vanishing.\n */\nexport function useSiteMarketplacePlugins(\n  orgId: string,\n  hostId: string,\n  /** Non-first-party ids already on the org's switchboard. */\n  switchboardIds: readonly string[] = [],\n): SiteMarketplacePlugin[] {\n  const firestore = useFirestore()\n\n  // Held at null while the scope is unknown, never `orgs/-pending-`\n  // (AGL-1440): installs are member-gated, so a sentinel id is a\n  // guaranteed-denied listen on every mount.\n  const { data: orgInstalls } = useFirestoreCollection<any>(\n    () =>\n      orgId\n        ? query(collection(firestore, 'orgs', orgId, 'installs'), limit(100))\n        : null,\n    [firestore, orgId],\n    { idField: '$id' },\n  )\n  const { data: hostInstalls } = useFirestoreCollection<any>(\n    () =>\n      hostId\n        ? query(collection(firestore, 'hosts', hostId, 'installs'), limit(100))\n        : null,\n    [firestore, hostId],\n    { idField: '$id' },\n  )\n\n  const switchboardKey = [...switchboardIds].sort().join('|')\n\n  return useMemo(() => {\n    const byListing = new Map<string, SiteMarketplacePlugin>()\n    const add = (pin: any, scope: 'org' | 'site') => {\n      const listingId = String(pin?.$id ?? '')\n      if (!listingId) return\n      // A host pin is the more specific fact about THIS site, so it wins the\n      // scope; the display name and version are the same either way.\n      const existing = byListing.get(listingId)\n      if (existing && scope === 'org') return\n      byListing.set(listingId, {\n        listingId,\n        displayName: String(\n          pin?.displayName ?? pin?.manifest?.name ?? pin?.pluginId ?? listingId,\n        ),\n        version: pin?.version ? String(pin.version) : undefined,\n        scope,\n      })\n    }\n    for (const pin of orgInstalls ?? []) add(pin, 'org')\n    for (const pin of hostInstalls ?? []) add(pin, 'site')\n    // An id the switchboard carries with no readable pin still gets a row,\n    // named by its id. A row that says less is better than a plugin running on\n    // the site with no row at all — which is the state this hook exists to end.\n    for (const listingId of switchboardKey ? switchboardKey.split('|') : []) {\n      if (byListing.has(listingId)) continue\n      byListing.set(listingId, { listingId, displayName: listingId, scope: 'org' })\n    }\n    return [...byListing.values()].sort((left, right) =>\n      left.displayName.localeCompare(right.displayName),\n    )\n  }, [orgInstalls, hostInstalls, switchboardKey])\n}\n\nexport default useSiteMarketplacePlugins\n"],"names":["collection","limit","query","useMemo","useFirestore","useFirestoreCollection","useSiteMarketplacePlugins","orgId","hostId","switchboardIds","firestore","data","orgInstalls","idField","hostInstalls","switchboardKey","sort","join","byListing","Map","add","pin","scope","listingId","String","$id","existing","get","set","displayName","manifest","name","pluginId","version","undefined","split","has","values","left","right","localeCompare"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GACD;AAEA,SAASA,UAAU,EAAEC,KAAK,EAAEC,KAAK,QAAQ,qBAAoB;AAC7D,SAASC,OAAO,QAAQ,QAAO;AAC/B,SAASC,YAAY,QAAQ,kCAA8B;AAC3D,SAASC,sBAAsB,QAAQ,gCAA4B;AAiBnE;;;;;;;;;;;;;;;;CAgBC,GACD,OAAO,SAASC,0BACdC,KAAa,EACbC,MAAc,EACd,0DAA0D,GAC1DC,iBAAoC,EAAE;IAEtC,MAAMC,YAAYN;IAElB,kEAAkE;IAClE,+DAA+D;IAC/D,2CAA2C;IAC3C,MAAM,EAAEO,MAAMC,WAAW,EAAE,GAAGP,uBAC5B,IACEE,QACIL,MAAMF,WAAWU,WAAW,QAAQH,OAAO,aAAaN,MAAM,QAC9D,MACN;QAACS;QAAWH;KAAM,EAClB;QAAEM,SAAS;IAAM;IAEnB,MAAM,EAAEF,MAAMG,YAAY,EAAE,GAAGT,uBAC7B,IACEG,SACIN,MAAMF,WAAWU,WAAW,SAASF,QAAQ,aAAaP,MAAM,QAChE,MACN;QAACS;QAAWF;KAAO,EACnB;QAAEK,SAAS;IAAM;IAGnB,MAAME,iBAAiB;WAAIN;KAAe,CAACO,IAAI,GAAGC,IAAI,CAAC;IAEvD,OAAOd,QAAQ;QACb,MAAMe,YAAY,IAAIC;QACtB,MAAMC,MAAM,CAACC,KAAUC;sBAUjBD,OAAAA;gBAAoBA;YATxB,MAAME,YAAYC,eAAOH,uBAAAA,IAAKI,GAAG,mBAAI;YACrC,IAAI,CAACF,WAAW;YAChB,uEAAuE;YACvE,+DAA+D;YAC/D,MAAMG,WAAWR,UAAUS,GAAG,CAACJ;YAC/B,IAAIG,YAAYJ,UAAU,OAAO;YACjCJ,UAAUU,GAAG,CAACL,WAAW;gBACvBA;gBACAM,aAAaL,QACXH,SAAAA,iBAAAA,uBAAAA,IAAKQ,WAAW,oBAAIR,wBAAAA,gBAAAA,IAAKS,QAAQ,qBAAbT,cAAeU,IAAI,YAAvCV,QAA2CA,uBAAAA,IAAKW,QAAQ,YAAxDX,QAA4DE;gBAE9DU,SAASZ,CAAAA,uBAAAA,IAAKY,OAAO,IAAGT,OAAOH,IAAIY,OAAO,IAAIC;gBAC9CZ;YACF;QACF;QACA,KAAK,MAAMD,OAAOT,sBAAAA,cAAe,EAAE,CAAEQ,IAAIC,KAAK;QAC9C,KAAK,MAAMA,OAAOP,uBAAAA,eAAgB,EAAE,CAAEM,IAAIC,KAAK;QAC/C,uEAAuE;QACvE,2EAA2E;QAC3E,4EAA4E;QAC5E,KAAK,MAAME,aAAaR,iBAAiBA,eAAeoB,KAAK,CAAC,OAAO,EAAE,CAAE;YACvE,IAAIjB,UAAUkB,GAAG,CAACb,YAAY;YAC9BL,UAAUU,GAAG,CAACL,WAAW;gBAAEA;gBAAWM,aAAaN;gBAAWD,OAAO;YAAM;QAC7E;QACA,OAAO;eAAIJ,UAAUmB,MAAM;SAAG,CAACrB,IAAI,CAAC,CAACsB,MAAMC,QACzCD,KAAKT,WAAW,CAACW,aAAa,CAACD,MAAMV,WAAW;IAEpD,GAAG;QAACjB;QAAaE;QAAcC;KAAe;AAChD;AAEA,eAAeT,0BAAyB"}

package/src/lib/hooks/use-theme-library.d.ts

@@ -0,0 +1,7 @@
+import { type ThemeLibraryEntry } from '@aglyn/aglyn/app-utils/theme-library';
+/**
+ * A site's theme library (AGL-3404), live, by entry id. `undefined` until the
+ * first snapshot, so the picker does not list a library it has not read.
+ */
+export declare function useThemeLibrary(hostId: string | undefined): Record<string, ThemeLibraryEntry> | undefined;
+export default useThemeLibrary;

package/src/lib/hooks/use-theme-library.js

@@ -0,0 +1,58 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ 'use client';
+import { _ as _object_without_properties_loose } from "@swc/helpers/_/_object_without_properties_loose";
+import { THEME_LIBRARY_COLLECTION } from "@aglyn/aglyn/app-utils/theme-library";
+import { useFirestore } from "./firebase/firebase-services.js";
+import { collection, limit, query } from "firebase/firestore";
+import { useMemo } from "react";
+import useFirestoreCollection from "./use-firestore-collection.js";
+/**
+ * Well above what a site holds — `THEME_LIBRARY_MAX_CUSTOM` custom themes, a
+ * stash per built-in theme and one entry per marketplace theme — and a bound
+ * on the read however the collection grows.
+ */ const LIBRARY_READ_LIMIT = 100;
+/**
+ * A site's theme library (AGL-3404), live, by entry id. `undefined` until the
+ * first snapshot, so the picker does not list a library it has not read.
+ */ export function useThemeLibrary(hostId) {
+    const firestore = useFirestore();
+    const { data, status } = useFirestoreCollection(()=>hostId ? query(collection(firestore, 'hosts', hostId, THEME_LIBRARY_COLLECTION), limit(LIBRARY_READ_LIMIT)) : null, [
+        firestore,
+        hostId
+    ], {
+        idField: '$id'
+    });
+    return useMemo(()=>{
+        // A refused read lists nothing rather than holding the picker on a
+        // spinner: the built-in themes and the current one still render.
+        if (status === 'loading') return undefined;
+        const entries = {};
+        for (const _ref of data != null ? data : []){
+            const { $id } = _ref, entry = _object_without_properties_loose(_ref, [
+                "$id"
+            ]);
+            entries[$id] = entry;
+        }
+        return entries;
+    }, [
+        data,
+        status
+    ]);
+}
+export default useThemeLibrary;
+
+//# sourceMappingURL=use-theme-library.js.map

package/src/lib/hooks/use-theme-library.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../../libs/tenant/feature/instance/src/lib/hooks/use-theme-library.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n'use client'\n\nimport {\n  THEME_LIBRARY_COLLECTION,\n  type ThemeLibraryEntry,\n} from '@aglyn/aglyn/app-utils/theme-library'\nimport { useFirestore } from './firebase/firebase-services'\nimport { collection, limit, query } from 'firebase/firestore'\nimport { useMemo } from 'react'\nimport useFirestoreCollection from './use-firestore-collection'\n\n/**\n * Well above what a site holds — `THEME_LIBRARY_MAX_CUSTOM` custom themes, a\n * stash per built-in theme and one entry per marketplace theme — and a bound\n * on the read however the collection grows.\n */\nconst LIBRARY_READ_LIMIT = 100\n\n/**\n * A site's theme library (AGL-3404), live, by entry id. `undefined` until the\n * first snapshot, so the picker does not list a library it has not read.\n */\nexport function useThemeLibrary(\n  hostId: string | undefined,\n): Record<string, ThemeLibraryEntry> | undefined {\n  const firestore = useFirestore()\n  const { data, status } = useFirestoreCollection<\n    ThemeLibraryEntry & { $id: string }\n  >(\n    () =>\n      hostId\n        ? query(\n            collection(firestore, 'hosts', hostId, THEME_LIBRARY_COLLECTION),\n            limit(LIBRARY_READ_LIMIT),\n          )\n        : null,\n    [firestore, hostId],\n    { idField: '$id' },\n  )\n  return useMemo(() => {\n    // A refused read lists nothing rather than holding the picker on a\n    // spinner: the built-in themes and the current one still render.\n    if (status === 'loading') return undefined\n    const entries: Record<string, ThemeLibraryEntry> = {}\n    for (const { $id, ...entry } of data ?? []) entries[$id] = entry\n    return entries\n  }, [data, status])\n}\n\nexport default useThemeLibrary\n"],"names":["THEME_LIBRARY_COLLECTION","useFirestore","collection","limit","query","useMemo","useFirestoreCollection","LIBRARY_READ_LIMIT","useThemeLibrary","hostId","firestore","data","status","idField","undefined","entries","$id","entry"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GACD;;AAEA,SACEA,wBAAwB,QAEnB,uCAAsC;AAC7C,SAASC,YAAY,QAAQ,kCAA8B;AAC3D,SAASC,UAAU,EAAEC,KAAK,EAAEC,KAAK,QAAQ,qBAAoB;AAC7D,SAASC,OAAO,QAAQ,QAAO;AAC/B,OAAOC,4BAA4B,gCAA4B;AAE/D;;;;CAIC,GACD,MAAMC,qBAAqB;AAE3B;;;CAGC,GACD,OAAO,SAASC,gBACdC,MAA0B;IAE1B,MAAMC,YAAYT;IAClB,MAAM,EAAEU,IAAI,EAAEC,MAAM,EAAE,GAAGN,uBAGvB,IACEG,SACIL,MACEF,WAAWQ,WAAW,SAASD,QAAQT,2BACvCG,MAAMI,uBAER,MACN;QAACG;QAAWD;KAAO,EACnB;QAAEI,SAAS;IAAM;IAEnB,OAAOR,QAAQ;QACb,mEAAmE;QACnE,iEAAiE;QACjE,IAAIO,WAAW,WAAW,OAAOE;QACjC,MAAMC,UAA6C,CAAC;QACpD,KAAK,MAAM,QAAqBJ,eAAAA,OAAQ,EAAE;kBAA/B,EAAEK,GAAG,EAAY,SAAPC;;;YAAuBF,OAAO,CAACC,IAAI,GAAGC;;QAC3D,OAAOF;IACT,GAAG;QAACJ;QAAMC;KAAO;AACnB;AAEA,eAAeJ,gBAAe"}