@aglyn/plugins-crm 1.0.0-beta.143

package/src/lib/components/activity-queries.js

@@ -0,0 +1,198 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ 'use client';
+import * as Aglyn from "@aglyn/aglyn";
+import { useFirestore, usePagedCollection, useScopeTokens, useUser } from "@aglyn/tenant-feature-instance";
+import { collection, limit, orderBy, query, where } from "firebase/firestore";
+import { useCallback, useMemo } from "react";
+import { crmVisibleToClause, useCrmScope } from "../hooks/use-crm-scope.js";
+/**
+ * Everything an activity surface needs to know about WHERE it is reading
+ * and writing (AGL-2600), resolved once from the two props the shell hands
+ * every CRM page.
+ *
+ * Four surfaces read activities — a record card, a contact's timeline, the
+ * recent feed and the dialog that writes them — and each of them would
+ * otherwise resolve the same org, the same consent group and the same token
+ * set from the same two inputs. Resolved here so that a surface cannot read
+ * with one group and write with another, which is the shape of leak the
+ * contacts list closed (a listener with no `where` at all).
+ *
+ * Pure of Firestore reads: the org document is the one the shell already
+ * loaded, so the group and the tokens cost nothing, and the data scope is
+ * the memoized `['orgs', orgId]` tuple every host-scoped card builds.
+ */ export function useActivityScope(hostId, org) {
+    const firestore = useFirestore();
+    /*
+   * The controller this surface is showing — the sites declared to be one
+   * sender, or this site alone — read from the org document the shell
+   * passed, by the one hook every CRM surface resolves its scope through
+   * (AGL-2614). The contacts list resolves its group the same way, so an
+   * activity logged from a contact's page lands in the scope that contact
+   * is read under. At the organization level (AGL-2630) there is no viewing
+   * site: `consentGroup` and `readTokens` are `null` — the listener carries
+   * no scope clause — and a new activity is stamped with the picked site's
+   * tokens and provenance.
+   */ const { scope: dataScope, orgId, consentGroup, visibleTo: readTokens, createHostId, createTokens: writeTokens } = useCrmScope({
+        hostId,
+        org
+    });
+    return useMemo(()=>({
+            firestore,
+            dataScope,
+            orgId,
+            /** The site a NEW activity names as provenance — the mounted site, or the picked one. */ hostId: createHostId,
+            /**
+       * The site the surface is MOUNTED under, or `null` at the organization
+       * level — what a dialog reads to decide whether to ask which site.
+       */ mountedHostId: hostId,
+            consentGroup,
+            readTokens,
+            writeTokens
+        }), [
+        firestore,
+        dataScope,
+        orgId,
+        createHostId,
+        hostId,
+        consentGroup,
+        readTokens,
+        writeTokens
+    ]);
+}
+/**
+ * Whether the signed-in user may EDIT or DELETE a given activity (AGL-2600).
+ *
+ * The author may, and so may an org-wide member — the person who administers
+ * the org can correct or remove anything logged in it. Nobody else: a scoped
+ * colleague may read a call log they did not write, and may not rewrite it.
+ *
+ * ⚠️ This is a UI verdict, not an enforced one. The Firestore rules on
+ * `crmActivities` admit any member who may write scoped org data, and they
+ * do not distinguish the author from anybody else — there is no `byUid`
+ * clause in them. The controls are hidden here so that the console does not
+ * offer a colleague's log for editing, and a caller who bypasses the console
+ * is a caller the rules already admit. Tightening the rules to the author is
+ * a decision about what the API permits, not something a card takes on its
+ * own.
+ *
+ * `useScopeTokens` answers org-wide while it loads, so the verdict for a
+ * NON-author waits for `loaded` — a scoped colleague must not see edit
+ * controls flash on for one paint and then vanish.
+ *
+ * Called ONCE by the list that draws the rows, never by a row. The verdict
+ * costs a read of the member document, and a hundred rows each asking would
+ * be a hundred reads of one document on every mount — the shape of cost the
+ * console pays nowhere else. `enabled` is for a surface that offers no
+ * controls at all, the feed: `useScopeTokens` opens nothing for an undefined
+ * org, so a disabled verdict reads nothing and answers no.
+ */ export function useCanEditActivity(orgId, enabled = true) {
+    const { data: user } = useUser();
+    const uid = user == null ? void 0 : user.uid;
+    const membership = useScopeTokens(enabled ? orgId : undefined);
+    return useCallback((activity)=>{
+        if (!enabled || !uid) return false;
+        if (activity.byUid === uid) return true;
+        return membership.loaded && membership.orgWide;
+    }, [
+        enabled,
+        uid,
+        membership.loaded,
+        membership.orgWide
+    ]);
+}
+/** How many rows a "show more" step adds, and how many the first paint reads. */ export const ACTIVITY_PAGE_SIZE = 100;
+/**
+ * The activities filed against one record, or across the CRM, newest-first
+ * and bounded (AGL-2600).
+ *
+ * The window is the query. `usePagedCollection` widens the listener by one
+ * page each time the reader asks for more, so a record with three hundred
+ * calls costs a hundred documents until somebody wants the next hundred —
+ * and `hasMore` is a fact from the probe row, not a guess from the length.
+ * The rows handed back are the WHOLE window so far, not the last page alone,
+ * because a log reads as one list that grows at the bottom rather than as
+ * numbered pages.
+ *
+ * Filtered by `array-contains-any` over the reader's tokens, which is the
+ * predicate the rules evaluate with `hasAny`: a filtered query is provable
+ * per document, and an unfiltered one is refused outright rather than
+ * quietly returning everything. The record filter is one equality on top of
+ * it — the four indexes `(visibleTo, contactId|companyId|dealId|leadId, atMs
+ * DESC)` exist for exactly these queries, and `(visibleTo, atMs DESC)` for the
+ * feed that names no record.
+ *
+ * Each record filter is indexed twice. An organization-level reader has no
+ * tokens, so `crmVisibleToClause` contributes no constraint and the query
+ * arrives as `(<record>, atMs DESC)` with the array field gone — a different
+ * index, not a prefix of the one above it. Adding a record kind here means
+ * adding BOTH halves; one of them alone leaves the other audience unserved.
+ *
+ * These are all DESCENDING because this window asks for `desc` outright. A
+ * read over the same rows that names no order is not served by them: Firestore
+ * orders such a query by its range field ascending, and an index serves one
+ * direction or its exact reverse. That is why the report counts carry their
+ * own ascending indexes rather than borrowing these.
+ */ export function useActivityWindow(scope, link, pageSize = ACTIVITY_PAGE_SIZE) {
+    const { firestore, dataScope, readTokens } = scope;
+    const { contactId, companyId, dealId, leadId } = link;
+    const paged = usePagedCollection((pageLimit)=>{
+        if (!dataScope) return null;
+        const record = contactId ? [
+            where('contactId', '==', contactId)
+        ] : companyId ? [
+            where('companyId', '==', companyId)
+        ] : dealId ? [
+            where('dealId', '==', dealId)
+        ] : leadId ? [
+            where('leadId', '==', leadId)
+        ] : [];
+        return query(collection(firestore, dataScope[0], dataScope[1], Aglyn.CRM_COLLECTIONS.activities), ...crmVisibleToClause(readTokens), ...record, orderBy('atMs', 'desc'), limit(pageLimit));
+    }, [
+        firestore,
+        dataScope,
+        readTokens,
+        contactId,
+        companyId,
+        dealId,
+        leadId
+    ], {
+        idField: '$id',
+        pageSize
+    });
+    const windowSize = paged.pageSize * (paged.page + 1);
+    // The probe row is the one past the window; it says "more exists" and is
+    // never shown.
+    const rows = useMemo(()=>{
+        var _paged_data;
+        return ((_paged_data = paged.data) != null ? _paged_data : []).slice(0, windowSize);
+    }, [
+        paged.data,
+        windowSize
+    ]);
+    const showMore = useCallback(()=>paged.setPage(paged.page + 1), [
+        paged
+    ]);
+    return {
+        rows,
+        hasMore: paged.hasMore,
+        showMore,
+        status: paged.status,
+        /** Whether the listener has a scope to read at all. */ ready: Boolean(dataScope)
+    };
+}
+
+//# sourceMappingURL=activity-queries.js.map

package/src/lib/components/activity-queries.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../libs/plugins/crm/src/lib/components/activity-queries.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n'use client'\n\nimport * as Aglyn from '@aglyn/aglyn'\nimport type { AglynOrgBilling, CrmActivityRow } from '@aglyn/aglyn'\nimport {\n  useFirestore,\n  usePagedCollection,\n  useScopeTokens,\n  useUser,\n} from '@aglyn/tenant-feature-instance'\nimport {\n  collection,\n  limit,\n  orderBy,\n  query,\n  where,\n  type QueryConstraint,\n} from 'firebase/firestore'\nimport { useCallback, useMemo } from 'react'\nimport { crmVisibleToClause, useCrmScope } from '../hooks/use-crm-scope'\n\n/** The org document as the shell passes it: partial, and possibly absent. */\nexport type CrmOrg = Partial<AglynOrgBilling> | null | undefined\n\n/**\n * Which record an activity surface is about. Exactly one of the three is set\n * by a record page; a feed across the CRM sets none.\n */\nexport interface ActivityRecordLink {\n  contactId?: string\n  companyId?: string\n  dealId?: string\n  /** A lead's own log (AGL-2615) — see `CrmActivityLink.leadId`. */\n  leadId?: string\n}\n\n/**\n * Everything an activity surface needs to know about WHERE it is reading\n * and writing (AGL-2600), resolved once from the two props the shell hands\n * every CRM page.\n *\n * Four surfaces read activities — a record card, a contact's timeline, the\n * recent feed and the dialog that writes them — and each of them would\n * otherwise resolve the same org, the same consent group and the same token\n * set from the same two inputs. Resolved here so that a surface cannot read\n * with one group and write with another, which is the shape of leak the\n * contacts list closed (a listener with no `where` at all).\n *\n * Pure of Firestore reads: the org document is the one the shell already\n * loaded, so the group and the tokens cost nothing, and the data scope is\n * the memoized `['orgs', orgId]` tuple every host-scoped card builds.\n */\nexport function useActivityScope(hostId: string | null, org: CrmOrg) {\n  const firestore = useFirestore()\n  /*\n   * The controller this surface is showing — the sites declared to be one\n   * sender, or this site alone — read from the org document the shell\n   * passed, by the one hook every CRM surface resolves its scope through\n   * (AGL-2614). The contacts list resolves its group the same way, so an\n   * activity logged from a contact's page lands in the scope that contact\n   * is read under. At the organization level (AGL-2630) there is no viewing\n   * site: `consentGroup` and `readTokens` are `null` — the listener carries\n   * no scope clause — and a new activity is stamped with the picked site's\n   * tokens and provenance.\n   */\n  const {\n    scope: dataScope,\n    orgId,\n    consentGroup,\n    visibleTo: readTokens,\n    createHostId,\n    createTokens: writeTokens,\n  } = useCrmScope({ hostId, org })\n  return useMemo(\n    () => ({\n      firestore,\n      dataScope,\n      orgId,\n      /** The site a NEW activity names as provenance — the mounted site, or the picked one. */\n      hostId: createHostId,\n      /**\n       * The site the surface is MOUNTED under, or `null` at the organization\n       * level — what a dialog reads to decide whether to ask which site.\n       */\n      mountedHostId: hostId,\n      consentGroup,\n      readTokens,\n      writeTokens,\n    }),\n    [\n      firestore,\n      dataScope,\n      orgId,\n      createHostId,\n      hostId,\n      consentGroup,\n      readTokens,\n      writeTokens,\n    ],\n  )\n}\n\nexport type ActivityScope = ReturnType<typeof useActivityScope>\n\n/**\n * Whether the signed-in user may EDIT or DELETE a given activity (AGL-2600).\n *\n * The author may, and so may an org-wide member — the person who administers\n * the org can correct or remove anything logged in it. Nobody else: a scoped\n * colleague may read a call log they did not write, and may not rewrite it.\n *\n * ⚠️ This is a UI verdict, not an enforced one. The Firestore rules on\n * `crmActivities` admit any member who may write scoped org data, and they\n * do not distinguish the author from anybody else — there is no `byUid`\n * clause in them. The controls are hidden here so that the console does not\n * offer a colleague's log for editing, and a caller who bypasses the console\n * is a caller the rules already admit. Tightening the rules to the author is\n * a decision about what the API permits, not something a card takes on its\n * own.\n *\n * `useScopeTokens` answers org-wide while it loads, so the verdict for a\n * NON-author waits for `loaded` — a scoped colleague must not see edit\n * controls flash on for one paint and then vanish.\n *\n * Called ONCE by the list that draws the rows, never by a row. The verdict\n * costs a read of the member document, and a hundred rows each asking would\n * be a hundred reads of one document on every mount — the shape of cost the\n * console pays nowhere else. `enabled` is for a surface that offers no\n * controls at all, the feed: `useScopeTokens` opens nothing for an undefined\n * org, so a disabled verdict reads nothing and answers no.\n */\nexport function useCanEditActivity(\n  orgId: string | undefined,\n  enabled = true,\n) {\n  const { data: user } = useUser()\n  const uid = user?.uid\n  const membership = useScopeTokens(enabled ? orgId : undefined)\n  return useCallback(\n    (activity: Pick<CrmActivityRow, 'byUid'>): boolean => {\n      if (!enabled || !uid) return false\n      if (activity.byUid === uid) return true\n      return membership.loaded && membership.orgWide\n    },\n    [enabled, uid, membership.loaded, membership.orgWide],\n  )\n}\n\n/** How many rows a \"show more\" step adds, and how many the first paint reads. */\nexport const ACTIVITY_PAGE_SIZE = 100\n\n/**\n * The activities filed against one record, or across the CRM, newest-first\n * and bounded (AGL-2600).\n *\n * The window is the query. `usePagedCollection` widens the listener by one\n * page each time the reader asks for more, so a record with three hundred\n * calls costs a hundred documents until somebody wants the next hundred —\n * and `hasMore` is a fact from the probe row, not a guess from the length.\n * The rows handed back are the WHOLE window so far, not the last page alone,\n * because a log reads as one list that grows at the bottom rather than as\n * numbered pages.\n *\n * Filtered by `array-contains-any` over the reader's tokens, which is the\n * predicate the rules evaluate with `hasAny`: a filtered query is provable\n * per document, and an unfiltered one is refused outright rather than\n * quietly returning everything. The record filter is one equality on top of\n * it — the four indexes `(visibleTo, contactId|companyId|dealId|leadId, atMs\n * DESC)` exist for exactly these queries, and `(visibleTo, atMs DESC)` for the\n * feed that names no record.\n *\n * Each record filter is indexed twice. An organization-level reader has no\n * tokens, so `crmVisibleToClause` contributes no constraint and the query\n * arrives as `(<record>, atMs DESC)` with the array field gone — a different\n * index, not a prefix of the one above it. Adding a record kind here means\n * adding BOTH halves; one of them alone leaves the other audience unserved.\n *\n * These are all DESCENDING because this window asks for `desc` outright. A\n * read over the same rows that names no order is not served by them: Firestore\n * orders such a query by its range field ascending, and an index serves one\n * direction or its exact reverse. That is why the report counts carry their\n * own ascending indexes rather than borrowing these.\n */\nexport function useActivityWindow(\n  scope: ActivityScope,\n  link: ActivityRecordLink,\n  pageSize: number = ACTIVITY_PAGE_SIZE,\n) {\n  const { firestore, dataScope, readTokens } = scope\n  const { contactId, companyId, dealId, leadId } = link\n  const paged = usePagedCollection<CrmActivityRow>(\n    (pageLimit) => {\n      if (!dataScope) return null\n      const record: QueryConstraint[] = contactId\n        ? [where('contactId', '==', contactId)]\n        : companyId\n          ? [where('companyId', '==', companyId)]\n          : dealId\n            ? [where('dealId', '==', dealId)]\n            : leadId\n              ? [where('leadId', '==', leadId)]\n              : []\n      return query(\n        collection(\n          firestore,\n          dataScope[0],\n          dataScope[1],\n          Aglyn.CRM_COLLECTIONS.activities,\n        ),\n        ...crmVisibleToClause(readTokens),\n        ...record,\n        orderBy('atMs', 'desc'),\n        limit(pageLimit),\n      )\n    },\n    [firestore, dataScope, readTokens, contactId, companyId, dealId, leadId],\n    { idField: '$id', pageSize },\n  )\n  const windowSize = paged.pageSize * (paged.page + 1)\n  // The probe row is the one past the window; it says \"more exists\" and is\n  // never shown.\n  const rows = useMemo(\n    () => (paged.data ?? []).slice(0, windowSize),\n    [paged.data, windowSize],\n  )\n  const showMore = useCallback(\n    () => paged.setPage(paged.page + 1),\n    [paged],\n  )\n  return {\n    rows,\n    hasMore: paged.hasMore,\n    showMore,\n    status: paged.status,\n    /** Whether the listener has a scope to read at all. */\n    ready: Boolean(dataScope),\n  }\n}\n"],"names":["Aglyn","useFirestore","usePagedCollection","useScopeTokens","useUser","collection","limit","orderBy","query","where","useCallback","useMemo","crmVisibleToClause","useCrmScope","useActivityScope","hostId","org","firestore","scope","dataScope","orgId","consentGroup","visibleTo","readTokens","createHostId","createTokens","writeTokens","mountedHostId","useCanEditActivity","enabled","data","user","uid","membership","undefined","activity","byUid","loaded","orgWide","ACTIVITY_PAGE_SIZE","useActivityWindow","link","pageSize","contactId","companyId","dealId","leadId","paged","pageLimit","record","CRM_COLLECTIONS","activities","idField","windowSize","page","rows","slice","showMore","setPage","hasMore","status","ready","Boolean"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GACD;AAEA,YAAYA,WAAW,eAAc;AAErC,SACEC,YAAY,EACZC,kBAAkB,EAClBC,cAAc,EACdC,OAAO,QACF,iCAAgC;AACvC,SACEC,UAAU,EACVC,KAAK,EACLC,OAAO,EACPC,KAAK,EACLC,KAAK,QAEA,qBAAoB;AAC3B,SAASC,WAAW,EAAEC,OAAO,QAAQ,QAAO;AAC5C,SAASC,kBAAkB,EAAEC,WAAW,QAAQ,4BAAwB;AAiBxE;;;;;;;;;;;;;;;CAeC,GACD,OAAO,SAASC,iBAAiBC,MAAqB,EAAEC,GAAW;IACjE,MAAMC,YAAYhB;IAClB;;;;;;;;;;GAUC,GACD,MAAM,EACJiB,OAAOC,SAAS,EAChBC,KAAK,EACLC,YAAY,EACZC,WAAWC,UAAU,EACrBC,YAAY,EACZC,cAAcC,WAAW,EAC1B,GAAGb,YAAY;QAAEE;QAAQC;IAAI;IAC9B,OAAOL,QACL,IAAO,CAAA;YACLM;YACAE;YACAC;YACA,uFAAuF,GACvFL,QAAQS;YACR;;;OAGC,GACDG,eAAeZ;YACfM;YACAE;YACAG;QACF,CAAA,GACA;QACET;QACAE;QACAC;QACAI;QACAT;QACAM;QACAE;QACAG;KACD;AAEL;AAIA;;;;;;;;;;;;;;;;;;;;;;;;;;CA0BC,GACD,OAAO,SAASE,mBACdR,KAAyB,EACzBS,UAAU,IAAI;IAEd,MAAM,EAAEC,MAAMC,IAAI,EAAE,GAAG3B;IACvB,MAAM4B,MAAMD,wBAAAA,KAAMC,GAAG;IACrB,MAAMC,aAAa9B,eAAe0B,UAAUT,QAAQc;IACpD,OAAOxB,YACL,CAACyB;QACC,IAAI,CAACN,WAAW,CAACG,KAAK,OAAO;QAC7B,IAAIG,SAASC,KAAK,KAAKJ,KAAK,OAAO;QACnC,OAAOC,WAAWI,MAAM,IAAIJ,WAAWK,OAAO;IAChD,GACA;QAACT;QAASG;QAAKC,WAAWI,MAAM;QAAEJ,WAAWK,OAAO;KAAC;AAEzD;AAEA,+EAA+E,GAC/E,OAAO,MAAMC,qBAAqB,IAAG;AAErC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA+BC,GACD,OAAO,SAASC,kBACdtB,KAAoB,EACpBuB,IAAwB,EACxBC,WAAmBH,kBAAkB;IAErC,MAAM,EAAEtB,SAAS,EAAEE,SAAS,EAAEI,UAAU,EAAE,GAAGL;IAC7C,MAAM,EAAEyB,SAAS,EAAEC,SAAS,EAAEC,MAAM,EAAEC,MAAM,EAAE,GAAGL;IACjD,MAAMM,QAAQ7C,mBACZ,CAAC8C;QACC,IAAI,CAAC7B,WAAW,OAAO;QACvB,MAAM8B,SAA4BN,YAC9B;YAAClC,MAAM,aAAa,MAAMkC;SAAW,GACrCC,YACE;YAACnC,MAAM,aAAa,MAAMmC;SAAW,GACrCC,SACE;YAACpC,MAAM,UAAU,MAAMoC;SAAQ,GAC/BC,SACE;YAACrC,MAAM,UAAU,MAAMqC;SAAQ,GAC/B,EAAE;QACZ,OAAOtC,MACLH,WACEY,WACAE,SAAS,CAAC,EAAE,EACZA,SAAS,CAAC,EAAE,EACZnB,MAAMkD,eAAe,CAACC,UAAU,MAE/BvC,mBAAmBW,gBACnB0B,QACH1C,QAAQ,QAAQ,SAChBD,MAAM0C;IAEV,GACA;QAAC/B;QAAWE;QAAWI;QAAYoB;QAAWC;QAAWC;QAAQC;KAAO,EACxE;QAAEM,SAAS;QAAOV;IAAS;IAE7B,MAAMW,aAAaN,MAAML,QAAQ,GAAIK,CAAAA,MAAMO,IAAI,GAAG,CAAA;IAClD,yEAAyE;IACzE,eAAe;IACf,MAAMC,OAAO5C,QACX;YAAOoC;eAAD,EAACA,cAAAA,MAAMjB,IAAI,YAAViB,cAAc,EAAE,EAAES,KAAK,CAAC,GAAGH;OAClC;QAACN,MAAMjB,IAAI;QAAEuB;KAAW;IAE1B,MAAMI,WAAW/C,YACf,IAAMqC,MAAMW,OAAO,CAACX,MAAMO,IAAI,GAAG,IACjC;QAACP;KAAM;IAET,OAAO;QACLQ;QACAI,SAASZ,MAAMY,OAAO;QACtBF;QACAG,QAAQb,MAAMa,MAAM;QACpB,qDAAqD,GACrDC,OAAOC,QAAQ3C;IACjB;AACF"}

package/src/lib/components/add-to-list-button.d.ts

@@ -0,0 +1,25 @@
+import type { AglynOrgBilling } from '@aglyn/aglyn';
+export interface AddToListButtonProps {
+    /** The site the record is read under, or `null` at the organization level. */
+    hostId: string | null;
+    /** The org the shell passed, so the scope needs no lookup when it has an id. */
+    org?: Partial<AglynOrgBilling> | null;
+    /** The record the button sits on. */
+    contactId: string;
+    /** The person's address; a contact with none cannot be on a list. */
+    email: string | null | undefined;
+}
+/**
+ * "Add to list", for one person's page (AGL-2603).
+ *
+ * The bulk bar's dialog over a selection of one. It lives on the contact
+ * record because that is where somebody reading about one person decides
+ * they belong on the newsletter — and it opens the same checked, attested
+ * door the selection uses, so the record page cannot enroll anyone the
+ * audience page would refuse.
+ */
+export declare function AddToListButton(props: AddToListButtonProps): import("react").JSX.Element;
+export declare namespace AddToListButton {
+    var displayName: string;
+}
+export default AddToListButton;

package/src/lib/components/add-to-list-button.js

@@ -0,0 +1,64 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ 'use client';
+import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-runtime";
+import { Button } from "@mui/material";
+import { useState } from "react";
+import { useCrmScope } from "../hooks/use-crm-scope.js";
+import AddToListDialog from "./add-to-list-dialog.js";
+/**
+ * "Add to list", for one person's page (AGL-2603).
+ *
+ * The bulk bar's dialog over a selection of one. It lives on the contact
+ * record because that is where somebody reading about one person decides
+ * they belong on the newsletter — and it opens the same checked, attested
+ * door the selection uses, so the record page cannot enroll anyone the
+ * audience page would refuse.
+ */ export function AddToListButton(props) {
+    const { hostId, org, email } = props;
+    // The audiences API takes the site whose console is asking: the mounted
+    // one, or at the organization level the one the reader picked (AGL-2630).
+    const { scope, createHostId } = useCrmScope({
+        hostId,
+        org
+    });
+    const [open, setOpen] = useState(false);
+    const address = String(email != null ? email : '').trim();
+    return /*#__PURE__*/ _jsxs(_Fragment, {
+        children: [
+            /*#__PURE__*/ _jsx(Button, {
+                size: "small",
+                variant: "outlined",
+                disabled: !scope || !address || !createHostId,
+                onClick: ()=>setOpen(true),
+                children: 'Add to list'
+            }),
+            open ? /*#__PURE__*/ _jsx(AddToListDialog, {
+                open: true,
+                onClose: ()=>setOpen(false),
+                hostId: createHostId,
+                scope: scope,
+                emails: address ? [
+                    address
+                ] : []
+            }) : null
+        ]
+    });
+}
+AddToListButton.displayName = 'AddToListButton';
+export default AddToListButton;
+
+//# sourceMappingURL=add-to-list-button.js.map

package/src/lib/components/add-to-list-button.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../libs/plugins/crm/src/lib/components/add-to-list-button.tsx"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n'use client'\n\nimport type { AglynOrgBilling } from '@aglyn/aglyn'\nimport { Button } from '@mui/material'\nimport { useState } from 'react'\nimport { useCrmScope } from '../hooks/use-crm-scope'\nimport AddToListDialog from './add-to-list-dialog'\n\nexport interface AddToListButtonProps {\n  /** The site the record is read under, or `null` at the organization level. */\n  hostId: string | null\n  /** The org the shell passed, so the scope needs no lookup when it has an id. */\n  org?: Partial<AglynOrgBilling> | null\n  /** The record the button sits on. */\n  contactId: string\n  /** The person's address; a contact with none cannot be on a list. */\n  email: string | null | undefined\n}\n\n/**\n * \"Add to list\", for one person's page (AGL-2603).\n *\n * The bulk bar's dialog over a selection of one. It lives on the contact\n * record because that is where somebody reading about one person decides\n * they belong on the newsletter — and it opens the same checked, attested\n * door the selection uses, so the record page cannot enroll anyone the\n * audience page would refuse.\n */\nexport function AddToListButton(props: AddToListButtonProps) {\n  const { hostId, org, email } = props\n  // The audiences API takes the site whose console is asking: the mounted\n  // one, or at the organization level the one the reader picked (AGL-2630).\n  const { scope, createHostId } = useCrmScope({ hostId, org })\n  const [open, setOpen] = useState(false)\n  const address = String(email ?? '').trim()\n  return (\n    <>\n      <Button\n        size=\"small\"\n        variant=\"outlined\"\n        disabled={!scope || !address || !createHostId}\n        onClick={() => setOpen(true)}\n      >\n        {'Add to list'}\n      </Button>\n      {open ? (\n        <AddToListDialog\n          open\n          onClose={() => setOpen(false)}\n          hostId={createHostId}\n          scope={scope}\n          emails={address ? [address] : []}\n        />\n      ) : null}\n    </>\n  )\n}\nAddToListButton.displayName = 'AddToListButton'\n\nexport default AddToListButton\n"],"names":["Button","useState","useCrmScope","AddToListDialog","AddToListButton","props","hostId","org","email","scope","createHostId","open","setOpen","address","String","trim","size","variant","disabled","onClick","onClose","emails","displayName"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GACD;;AAGA,SAASA,MAAM,QAAQ,gBAAe;AACtC,SAASC,QAAQ,QAAQ,QAAO;AAChC,SAASC,WAAW,QAAQ,4BAAwB;AACpD,OAAOC,qBAAqB,0BAAsB;AAalD;;;;;;;;CAQC,GACD,OAAO,SAASC,gBAAgBC,KAA2B;IACzD,MAAM,EAAEC,MAAM,EAAEC,GAAG,EAAEC,KAAK,EAAE,GAAGH;IAC/B,wEAAwE;IACxE,0EAA0E;IAC1E,MAAM,EAAEI,KAAK,EAAEC,YAAY,EAAE,GAAGR,YAAY;QAAEI;QAAQC;IAAI;IAC1D,MAAM,CAACI,MAAMC,QAAQ,GAAGX,SAAS;IACjC,MAAMY,UAAUC,OAAON,gBAAAA,QAAS,IAAIO,IAAI;IACxC,qBACE;;0BACE,KAACf;gBACCgB,MAAK;gBACLC,SAAQ;gBACRC,UAAU,CAACT,SAAS,CAACI,WAAW,CAACH;gBACjCS,SAAS,IAAMP,QAAQ;0BAEtB;;YAEFD,qBACC,KAACR;gBACCQ,IAAI;gBACJS,SAAS,IAAMR,QAAQ;gBACvBN,QAAQI;gBACRD,OAAOA;gBACPY,QAAQR,UAAU;oBAACA;iBAAQ,GAAG,EAAE;iBAEhC;;;AAGV;AACAT,gBAAgBkB,WAAW,GAAG;AAE9B,eAAelB,gBAAe"}

package/src/lib/components/add-to-list-dialog.d.ts

@@ -0,0 +1,24 @@
+/**
+ * How many addresses one call to the membership routes takes — their
+ * `readAddresses` cap. Named here because a request over it is refused
+ * whole, and a refusal of the whole selection reads as nobody being addable.
+ */
+export declare const LIST_MEMBER_REQUEST_CHUNK = 100;
+/** The audience picker's window; the Emails console's own pickers use it. */
+export declare const AUDIENCE_PICKER_LIMIT = 50;
+export interface AddToListDialogProps {
+    open: boolean;
+    onClose: () => void;
+    hostId: string;
+    /** `['orgs', orgId]`, or `null` while the org is still being resolved. */
+    scope: readonly [string, string] | null;
+    /** The people to add — a selection's addresses, or one person's. */
+    emails: readonly string[];
+    /** Called once with how many were enrolled, when at least one was. */
+    onAdded?: (added: number) => void;
+}
+export declare function AddToListDialog(props: AddToListDialogProps): import("react").JSX.Element;
+export declare namespace AddToListDialog {
+    var displayName: string;
+}
+export default AddToListDialog;