@aglyn/plugins-email 1.0.0-beta.196 → 1.0.0-beta.198

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aglyn/plugins-email",
-  "version": "1.0.0-beta.196",
+  "version": "1.0.0-beta.198",
   "license": "Apache-2.0",
   "homepage": "https://aglyn.com",
   "repository": {
@@ -25,22 +25,22 @@
     "./package.json": "./package.json"
   },
   "dependencies": {
-    "@aglyn/aglyn": "1.0.0-beta.196",
-    "@aglyn/shared-data-enums": "1.0.0-beta.196",
-    "@aglyn/shared-data-mdi": "1.0.0-beta.196",
-    "@aglyn/shared-data-types": "1.0.0-beta.196",
-    "@aglyn/shared-ui-email-campaigns": "1.0.0-beta.196",
-    "@aglyn/shared-ui-jsx": "1.0.0-beta.196",
-    "@aglyn/shared-ui-jsx-forms": "1.0.0-beta.196",
-    "@aglyn/shared-ui-next": "1.0.0-beta.196",
-    "@aglyn/shared-ui-snackstack": "1.0.0-beta.196",
-    "@aglyn/shared-ui-theme": "1.0.0-beta.196",
-    "@aglyn/shared-util-email": "1.0.0-beta.196",
-    "@aglyn/shared-util-http": "1.0.0-beta.196",
-    "@aglyn/shared-util-timestamp": "1.0.0-beta.196",
-    "@aglyn/shared-util-tools": "1.0.0-beta.196",
-    "@aglyn/tenant-data-admin": "1.0.0-beta.196",
-    "@aglyn/tenant-feature-instance": "1.0.0-beta.196",
+    "@aglyn/aglyn": "1.0.0-beta.198",
+    "@aglyn/shared-data-enums": "1.0.0-beta.198",
+    "@aglyn/shared-data-mdi": "1.0.0-beta.198",
+    "@aglyn/shared-data-types": "1.0.0-beta.198",
+    "@aglyn/shared-ui-email-campaigns": "1.0.0-beta.198",
+    "@aglyn/shared-ui-jsx": "1.0.0-beta.198",
+    "@aglyn/shared-ui-jsx-forms": "1.0.0-beta.198",
+    "@aglyn/shared-ui-next": "1.0.0-beta.198",
+    "@aglyn/shared-ui-snackstack": "1.0.0-beta.198",
+    "@aglyn/shared-ui-theme": "1.0.0-beta.198",
+    "@aglyn/shared-util-email": "1.0.0-beta.198",
+    "@aglyn/shared-util-http": "1.0.0-beta.198",
+    "@aglyn/shared-util-timestamp": "1.0.0-beta.198",
+    "@aglyn/shared-util-tools": "1.0.0-beta.198",
+    "@aglyn/tenant-data-admin": "1.0.0-beta.198",
+    "@aglyn/tenant-feature-instance": "1.0.0-beta.198",
     "@swc/helpers": "0.5.23"
   },
   "peerDependencies": {

package/src/lib/components/consent-group-access.d.ts

@@ -0,0 +1,33 @@
+import { type OrgPermission } from '@aglyn/aglyn';
+/**
+ * What a member needs to change anything about the org's consent groups: the
+ * declaration itself (`/api/orgs/consent-groups`) or the switch over how its
+ * sites treat each other's confirmations (`/api/orgs/settings`). Both routes
+ * ask for the org-settings permission and for the permission that opens this
+ * console, so both cards ask the same question.
+ */
+export declare const CONSENT_GROUP_REQUIRED_PERMISSIONS: readonly OrgPermission[];
+/** Whether the signed-in member may change consent groups, once known. */
+export interface ConsentGroupAccess {
+    /** The label of the first permission they lack, or `null` when they hold both. */
+    missing: string | null;
+    /** False until their membership (and custom role, if any) has been read. */
+    ready: boolean;
+}
+/**
+ * Which permission the signed-in member lacks to change consent groups — its
+ * label, or `null` when they hold both — and whether that is known yet.
+ *
+ * Read off the member's own membership document, and their custom role when
+ * they hold one, both of which the rules let a member read. The shell's
+ * permission map carries the legacy keys and the plugin-declared ones, not
+ * these two, and the CRM's org settings cards answer the same question the
+ * same way. `ready` separates "no" from "not yet", so a control disables with
+ * a reason instead of hiding until the read lands. A membership that cannot
+ * be read resolves no permission at all; the route decides either way.
+ *
+ * Handed no org, it opens no read and stays not ready — which is how a card
+ * handed the answer by its section avoids a second listen on the same
+ * membership.
+ */
+export declare function useConsentGroupAccess(orgId: string | undefined): ConsentGroupAccess;

package/src/lib/components/consent-group-access.js

@@ -0,0 +1,73 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ 'use client';
+import { orgPermissionLabel, resolveOrgPermissions } from "@aglyn/aglyn";
+import { useFirestore, useFirestoreDoc, useUser } from "@aglyn/tenant-feature-instance";
+import { doc } from "firebase/firestore";
+/**
+ * What a member needs to change anything about the org's consent groups: the
+ * declaration itself (`/api/orgs/consent-groups`) or the switch over how its
+ * sites treat each other's confirmations (`/api/orgs/settings`). Both routes
+ * ask for the org-settings permission and for the permission that opens this
+ * console, so both cards ask the same question.
+ */ export const CONSENT_GROUP_REQUIRED_PERMISSIONS = [
+    'org.settings',
+    'data.manage'
+];
+/**
+ * Which permission the signed-in member lacks to change consent groups — its
+ * label, or `null` when they hold both — and whether that is known yet.
+ *
+ * Read off the member's own membership document, and their custom role when
+ * they hold one, both of which the rules let a member read. The shell's
+ * permission map carries the legacy keys and the plugin-declared ones, not
+ * these two, and the CRM's org settings cards answer the same question the
+ * same way. `ready` separates "no" from "not yet", so a control disables with
+ * a reason instead of hiding until the read lands. A membership that cannot
+ * be read resolves no permission at all; the route decides either way.
+ *
+ * Handed no org, it opens no read and stays not ready — which is how a card
+ * handed the answer by its section avoids a second listen on the same
+ * membership.
+ */ export function useConsentGroupAccess(orgId) {
+    var _ref, _roleRead_data;
+    const firestore = useFirestore();
+    const { data: user } = useUser();
+    const uid = (_ref = user == null ? void 0 : user.uid) != null ? _ref : '';
+    const memberRead = useFirestoreDoc(()=>orgId && uid ? doc(firestore, 'orgs', orgId, 'members', uid) : null, [
+        firestore,
+        orgId,
+        uid
+    ]);
+    const member = memberRead.status === 'success' ? memberRead.data : undefined;
+    const roleId = typeof (member == null ? void 0 : member.roleId) === 'string' ? member.roleId : '';
+    const roleRead = useFirestoreDoc(()=>orgId && roleId ? doc(firestore, 'orgs', orgId, 'roles', roleId) : null, [
+        firestore,
+        orgId,
+        roleId
+    ]);
+    // A reference that is never built stays `loading`, so a member with no
+    // custom role has nothing left to wait for.
+    const ready = Boolean(orgId && uid) && memberRead.status !== 'loading' && (!roleId || roleRead.status !== 'loading');
+    const granted = resolveOrgPermissions(member != null ? member : null, roleId && roleRead.status === 'success' ? (_roleRead_data = roleRead.data) != null ? _roleRead_data : null : null);
+    const lacking = CONSENT_GROUP_REQUIRED_PERMISSIONS.find((key)=>granted[key] !== true);
+    return {
+        missing: lacking ? orgPermissionLabel(lacking) : null,
+        ready
+    };
+}
+
+//# sourceMappingURL=consent-group-access.js.map

package/src/lib/components/consent-group-access.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../libs/plugins/email/src/lib/components/consent-group-access.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n'use client'\n\nimport {\n  type AglynOrgCustomRole,\n  type OrgPermission,\n  orgPermissionLabel,\n  resolveOrgPermissions,\n} from '@aglyn/aglyn'\nimport {\n  useFirestore,\n  useFirestoreDoc,\n  useUser,\n} from '@aglyn/tenant-feature-instance'\nimport { doc } from 'firebase/firestore'\n\n/**\n * What a member needs to change anything about the org's consent groups: the\n * declaration itself (`/api/orgs/consent-groups`) or the switch over how its\n * sites treat each other's confirmations (`/api/orgs/settings`). Both routes\n * ask for the org-settings permission and for the permission that opens this\n * console, so both cards ask the same question.\n */\nexport const CONSENT_GROUP_REQUIRED_PERMISSIONS: readonly OrgPermission[] = [\n  'org.settings',\n  'data.manage',\n]\n\n/** A membership document, as the permission resolver reads one. */\ntype MemberRecord = NonNullable<Parameters<typeof resolveOrgPermissions>[0]>\n\n/** Whether the signed-in member may change consent groups, once known. */\nexport interface ConsentGroupAccess {\n  /** The label of the first permission they lack, or `null` when they hold both. */\n  missing: string | null\n  /** False until their membership (and custom role, if any) has been read. */\n  ready: boolean\n}\n\n/**\n * Which permission the signed-in member lacks to change consent groups — its\n * label, or `null` when they hold both — and whether that is known yet.\n *\n * Read off the member's own membership document, and their custom role when\n * they hold one, both of which the rules let a member read. The shell's\n * permission map carries the legacy keys and the plugin-declared ones, not\n * these two, and the CRM's org settings cards answer the same question the\n * same way. `ready` separates \"no\" from \"not yet\", so a control disables with\n * a reason instead of hiding until the read lands. A membership that cannot\n * be read resolves no permission at all; the route decides either way.\n *\n * Handed no org, it opens no read and stays not ready — which is how a card\n * handed the answer by its section avoids a second listen on the same\n * membership.\n */\nexport function useConsentGroupAccess(\n  orgId: string | undefined,\n): ConsentGroupAccess {\n  const firestore = useFirestore()\n  const { data: user } = useUser()\n  const uid = user?.uid ?? ''\n  const memberRead = useFirestoreDoc<MemberRecord>(\n    () => (orgId && uid ? doc(firestore, 'orgs', orgId, 'members', uid) : null),\n    [firestore, orgId, uid],\n  )\n  const member = memberRead.status === 'success' ? memberRead.data : undefined\n  const roleId = typeof member?.roleId === 'string' ? member.roleId : ''\n  const roleRead = useFirestoreDoc<AglynOrgCustomRole>(\n    () => (orgId && roleId ? doc(firestore, 'orgs', orgId, 'roles', roleId) : null),\n    [firestore, orgId, roleId],\n  )\n  // A reference that is never built stays `loading`, so a member with no\n  // custom role has nothing left to wait for.\n  const ready =\n    Boolean(orgId && uid) &&\n    memberRead.status !== 'loading' &&\n    (!roleId || roleRead.status !== 'loading')\n  const granted = resolveOrgPermissions(\n    member ?? null,\n    roleId && roleRead.status === 'success' ? (roleRead.data ?? null) : null,\n  )\n  const lacking = CONSENT_GROUP_REQUIRED_PERMISSIONS.find(\n    (key) => granted[key] !== true,\n  )\n  return { missing: lacking ? orgPermissionLabel(lacking) : null, ready }\n}\n"],"names":["orgPermissionLabel","resolveOrgPermissions","useFirestore","useFirestoreDoc","useUser","doc","CONSENT_GROUP_REQUIRED_PERMISSIONS","useConsentGroupAccess","orgId","roleRead","firestore","data","user","uid","memberRead","member","status","undefined","roleId","ready","Boolean","granted","lacking","find","key","missing"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GACD;AAEA,SAGEA,kBAAkB,EAClBC,qBAAqB,QAChB,eAAc;AACrB,SACEC,YAAY,EACZC,eAAe,EACfC,OAAO,QACF,iCAAgC;AACvC,SAASC,GAAG,QAAQ,qBAAoB;AAExC;;;;;;CAMC,GACD,OAAO,MAAMC,qCAA+D;IAC1E;IACA;CACD,CAAA;AAaD;;;;;;;;;;;;;;;CAeC,GACD,OAAO,SAASC,sBACdC,KAAyB;cAuBoBC;IArB7C,MAAMC,YAAYR;IAClB,MAAM,EAAES,MAAMC,IAAI,EAAE,GAAGR;IACvB,MAAMS,cAAMD,wBAAAA,KAAMC,GAAG,mBAAI;IACzB,MAAMC,aAAaX,gBACjB,IAAOK,SAASK,MAAMR,IAAIK,WAAW,QAAQF,OAAO,WAAWK,OAAO,MACtE;QAACH;QAAWF;QAAOK;KAAI;IAEzB,MAAME,SAASD,WAAWE,MAAM,KAAK,YAAYF,WAAWH,IAAI,GAAGM;IACnE,MAAMC,SAAS,QAAOH,0BAAAA,OAAQG,MAAM,MAAK,WAAWH,OAAOG,MAAM,GAAG;IACpE,MAAMT,WAAWN,gBACf,IAAOK,SAASU,SAASb,IAAIK,WAAW,QAAQF,OAAO,SAASU,UAAU,MAC1E;QAACR;QAAWF;QAAOU;KAAO;IAE5B,uEAAuE;IACvE,4CAA4C;IAC5C,MAAMC,QACJC,QAAQZ,SAASK,QACjBC,WAAWE,MAAM,KAAK,aACrB,CAAA,CAACE,UAAUT,SAASO,MAAM,KAAK,SAAQ;IAC1C,MAAMK,UAAUpB,sBACdc,iBAAAA,SAAU,MACVG,UAAUT,SAASO,MAAM,KAAK,aAAaP,iBAAAA,SAASE,IAAI,YAAbF,iBAAiB,OAAQ;IAEtE,MAAMa,UAAUhB,mCAAmCiB,IAAI,CACrD,CAACC,MAAQH,OAAO,CAACG,IAAI,KAAK;IAE5B,OAAO;QAAEC,SAASH,UAAUtB,mBAAmBsB,WAAW;QAAMH;IAAM;AACxE"}

package/src/lib/components/consent-group-change-progress.d.ts

@@ -0,0 +1,55 @@
+import { type ConsentGroupChangeMarker, type ConsentGroupChangePhase } from './consent-groups-api';
+/**
+ * The least time between two `continue` calls from one page. A call that
+ * returns at once — the job is waiting on its sweep, or another runner holds
+ * it — must not become a loop that asks again the instant it is answered.
+ */
+export declare const CONSENT_GROUP_CONTINUE_GAP_MS = 3000;
+/** What each phase is called while it runs, and what it means for the reader. */
+export declare const CONSENT_GROUP_PHASE_TEXT: Readonly<Record<ConsentGroupChangePhase, {
+    title: string;
+    body: string;
+}>>;
+export interface ConsentGroupChangeProgressProps {
+    orgId: string;
+    changeId: string;
+    /** The org's marker for this change, when the org document carries it yet. */
+    marker: ConsentGroupChangeMarker | null;
+    /**
+     * The reader may drive and stop the change. Anyone else sees where it is,
+     * and opens no read of the job for it.
+     */
+    canDrive: boolean;
+    /** The change finished, or was stopped before it took effect. */
+    onFinished: (outcome: 'done' | 'canceled') => void;
+}
+/**
+ * A consent group change while it runs (AGL-3320).
+ *
+ * ## It finishes on its own; an open page only makes it faster
+ *
+ * The route works in slices of under a minute and a cron resumes it every
+ * quarter hour, so closing the page never strands a change. While this is
+ * mounted for somebody who may drive it, it asks for the next slice as soon
+ * as nobody else holds the job — the job document's lease says when — so a
+ * change the admin is watching finishes in minutes rather than quarter hours.
+ *
+ * ## Only the first phase can be stopped
+ *
+ * Before the flip nothing an admin would notice has changed: refusals were
+ * copied, which never lets anybody be mailed who could not be before, and
+ * the old declaration still holds. So **Stop before it takes effect** is
+ * offered exactly then. After the flip the new declaration is what every
+ * send reads, and stopping would leave the CRM's records half moved.
+ *
+ * ## A stall is shown, not hidden
+ *
+ * After five failures in a row the job stops retrying itself on every call
+ * and records why. The banner shows that reason and **Retry now**; the cron
+ * keeps trying either way.
+ */
+export declare function ConsentGroupChangeProgress(props: ConsentGroupChangeProgressProps): import("react").JSX.Element;
+export declare namespace ConsentGroupChangeProgress {
+    var displayName: string;
+}
+export default ConsentGroupChangeProgress;

package/src/lib/components/consent-group-change-progress.js

@@ -0,0 +1,282 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ 'use client';
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { useConfirmationContext } from "@aglyn/shared-ui-jsx";
+import { useSnackbar } from "@aglyn/shared-ui-snackstack";
+import { useFirestore, useFirestoreDoc, useUser } from "@aglyn/tenant-feature-instance";
+import { Alert, AlertTitle, Button, LinearProgress, Stack, Typography } from "@mui/material";
+import { doc } from "firebase/firestore";
+import { useCallback, useEffect, useRef, useState } from "react";
+import { CONSENT_GROUP_CHANGES_COLLECTION, CONSENT_GROUP_SWEEP_DELAY_MS, postConsentGroups, readConsentGroupChangeJob } from "./consent-groups-api.js";
+/**
+ * The least time between two `continue` calls from one page. A call that
+ * returns at once — the job is waiting on its sweep, or another runner holds
+ * it — must not become a loop that asks again the instant it is answered.
+ */ export const CONSENT_GROUP_CONTINUE_GAP_MS = 3000;
+/** What each phase is called while it runs, and what it means for the reader. */ export const CONSENT_GROUP_PHASE_TEXT = {
+    carry: {
+        title: 'Copying opt-outs — nothing has changed yet',
+        body: 'Opt-outs are being copied onto every site that will stop sharing them, ' + 'so nobody who opted out can be emailed after the change. Until this ' + 'finishes, your consent groups work exactly as they did.'
+    },
+    rehome: {
+        title: 'In effect — combining CRM records',
+        body: 'Every send already follows your new consent groups. The CRM records ' + 'these sites keep are being combined or copied, so some may show under ' + 'their old group for a little while.'
+    },
+    sweep: {
+        title: 'Finishing up',
+        body: 'A last pass for anything written while the change ran. You can make ' + 'another change once this finishes.'
+    }
+};
+/**
+ * A consent group change while it runs (AGL-3320).
+ *
+ * ## It finishes on its own; an open page only makes it faster
+ *
+ * The route works in slices of under a minute and a cron resumes it every
+ * quarter hour, so closing the page never strands a change. While this is
+ * mounted for somebody who may drive it, it asks for the next slice as soon
+ * as nobody else holds the job — the job document's lease says when — so a
+ * change the admin is watching finishes in minutes rather than quarter hours.
+ *
+ * ## Only the first phase can be stopped
+ *
+ * Before the flip nothing an admin would notice has changed: refusals were
+ * copied, which never lets anybody be mailed who could not be before, and
+ * the old declaration still holds. So **Stop before it takes effect** is
+ * offered exactly then. After the flip the new declaration is what every
+ * send reads, and stopping would leave the CRM's records half moved.
+ *
+ * ## A stall is shown, not hidden
+ *
+ * After five failures in a row the job stops retrying itself on every call
+ * and records why. The banner shows that reason and **Retry now**; the cron
+ * keeps trying either way.
+ */ export function ConsentGroupChangeProgress(props) {
+    var _ref, _ref1, _ref2, _job_lastError;
+    var _answer_progress, _answer_progress1;
+    const { orgId, changeId, marker, canDrive, onFinished } = props;
+    const firestore = useFirestore();
+    const { data: user } = useUser();
+    const { enqueueSnackbar } = useSnackbar();
+    const { confirm } = useConfirmationContext();
+    const jobRead = useFirestoreDoc(()=>canDrive && orgId && changeId ? doc(firestore, 'orgs', orgId, CONSENT_GROUP_CHANGES_COLLECTION, changeId) : null, [
+        firestore,
+        orgId,
+        changeId,
+        canDrive
+    ]);
+    const job = readConsentGroupChangeJob(jobRead.status === 'success' ? jobRead.data : undefined);
+    const [answer, setAnswer] = useState(null);
+    const [busy, setBusy] = useState(false);
+    const [stopping, setStopping] = useState(false);
+    /** A refusal that stops this page driving until somebody retries. */ const [halted, setHalted] = useState(null);
+    /** Re-arms the driver after each answer. */ const [tick, setTick] = useState(0);
+    const lastCallAt = useRef(0);
+    const finished = useRef(false);
+    const mounted = useRef(true);
+    useEffect(()=>{
+        mounted.current = true;
+        return ()=>{
+            mounted.current = false;
+        };
+    }, []);
+    const markerPhase = marker && marker.changeId === changeId ? marker.phase : null;
+    const answerPhase = answer && [
+        'carry',
+        'rehome',
+        'sweep'
+    ].includes(String(answer.phase)) ? answer.phase : null;
+    const jobPhase = [
+        'carry',
+        'rehome',
+        'sweep'
+    ].includes(String(job.phase)) ? job.phase : null;
+    const phase = (_ref = (_ref1 = markerPhase != null ? markerPhase : answerPhase) != null ? _ref1 : jobPhase) != null ? _ref : 'carry';
+    const stalled = job.stalled || (answer == null ? void 0 : (_answer_progress = answer.progress) == null ? void 0 : _answer_progress.stalled) === true;
+    const lastError = (_ref2 = (_job_lastError = job.lastError) != null ? _job_lastError : answer == null ? void 0 : (_answer_progress1 = answer.progress) == null ? void 0 : _answer_progress1.lastError) != null ? _ref2 : null;
+    const finish = useCallback((outcome)=>{
+        if (finished.current) return;
+        finished.current = true;
+        onFinished(outcome);
+    }, [
+        onFinished
+    ]);
+    // The job can finish without this page: the cron, or another tab.
+    useEffect(()=>{
+        if (job.finished) finish(job.phase === 'canceled' ? 'canceled' : 'done');
+    }, [
+        job.finished,
+        job.phase,
+        finish
+    ]);
+    const drive = useCallback(async ()=>{
+        if (!user || finished.current) return;
+        lastCallAt.current = Date.now();
+        setBusy(true);
+        const result = await postConsentGroups(user, {
+            orgId,
+            action: 'continue',
+            changeId
+        });
+        if (!mounted.current) return;
+        setBusy(false);
+        if (result.ok) {
+            setAnswer(result.body);
+            if (result.body.done === true) return void finish('done');
+            setTick((value)=>value + 1);
+            return;
+        }
+        setHalted(result.failure.message);
+    }, [
+        user,
+        orgId,
+        changeId,
+        finish
+    ]);
+    /*
+   * The driver. It waits out the least gap between calls, any lease another
+   * runner holds, and the delay before the sweep may run — then asks once.
+   * Each answer re-arms it through `tick`; a lease renewed under it re-arms
+   * it through the job document.
+   */ useEffect(()=>{
+        if (!canDrive || !user || finished.current) return;
+        if (busy || stopping || stalled || halted) return;
+        if (jobRead.status === 'loading') return;
+        const now = Date.now();
+        let at = Math.max(now, lastCallAt.current + CONSENT_GROUP_CONTINUE_GAP_MS);
+        if (job.leaseUntilMs != null && job.leaseUntilMs > now) {
+            at = Math.max(at, job.leaseUntilMs + 1000);
+        }
+        if (phase === 'sweep' && (marker == null ? void 0 : marker.declaredAtMs)) {
+            at = Math.max(at, marker.declaredAtMs + CONSENT_GROUP_SWEEP_DELAY_MS);
+        }
+        const timer = setTimeout(()=>void drive(), at - now);
+        return ()=>clearTimeout(timer);
+    }, [
+        canDrive,
+        user,
+        busy,
+        stopping,
+        stalled,
+        halted,
+        jobRead.status,
+        job.leaseUntilMs,
+        phase,
+        marker == null ? void 0 : marker.declaredAtMs,
+        drive,
+        tick
+    ]);
+    const retry = ()=>{
+        setHalted(null);
+        lastCallAt.current = 0;
+        void drive();
+    };
+    const stop = async ()=>{
+        if (!user || stopping) return;
+        const accepted = await confirm({
+            title: 'Stop this change?',
+            description: 'Nothing has taken effect yet, so your consent groups stay exactly as ' + 'they are. Opt-outs already copied stay in place — a copied opt-out ' + 'never lets anyone be emailed who couldn’t be before.',
+            confirmationText: 'Stop the change',
+            cancellationText: 'Keep going'
+        })// `confirm` resolves with no value and REJECTS on cancel (AGL-950).
+        .then(()=>true).catch(()=>false);
+        if (!accepted) return;
+        setStopping(true);
+        const result = await postConsentGroups(user, {
+            orgId,
+            action: 'cancel',
+            changeId
+        });
+        if (!mounted.current) return;
+        setStopping(false);
+        if (result.ok) {
+            enqueueSnackbar('Stopped. Your consent groups are unchanged.', {
+                variant: 'success',
+                persist: false
+            });
+            return void finish('canceled');
+        }
+        enqueueSnackbar(result.failure.message, {
+            variant: result.failure.kind === 'took-effect' ? 'info' : 'error',
+            allowDuplicate: true
+        });
+    };
+    const text = CONSENT_GROUP_PHASE_TEXT[phase];
+    return /*#__PURE__*/ _jsxs(Alert, {
+        severity: stalled || halted ? 'error' : 'info',
+        "data-testid": "consent-group-change-progress",
+        sx: {
+            '& .MuiAlert-message': {
+                width: '100%'
+            }
+        },
+        children: [
+            /*#__PURE__*/ _jsx(AlertTitle, {
+                children: text.title
+            }),
+            /*#__PURE__*/ _jsxs(Stack, {
+                spacing: 1,
+                children: [
+                    /*#__PURE__*/ _jsx(Typography, {
+                        variant: "body2",
+                        children: text.body
+                    }),
+                    stalled ? /*#__PURE__*/ _jsx(Typography, {
+                        variant: "body2",
+                        children: `This change stopped after repeated errors${lastError ? `: ${lastError}` : '.'} It keeps trying on its own every 15 minutes, or you can retry now.`
+                    }) : null,
+                    halted ? /*#__PURE__*/ _jsx(Typography, {
+                        variant: "body2",
+                        children: halted
+                    }) : null,
+                    !canDrive ? /*#__PURE__*/ _jsx(Typography, {
+                        variant: "body2",
+                        color: "text.secondary",
+                        children: 'It finishes on its own. Only members who can change consent groups can stop it.'
+                    }) : null,
+                    !stalled && !halted ? /*#__PURE__*/ _jsx(LinearProgress, {
+                        "aria-label": "Consent group change in progress"
+                    }) : null,
+                    canDrive && (stalled || halted || phase === 'carry') ? /*#__PURE__*/ _jsxs(Stack, {
+                        direction: "row",
+                        spacing: 1,
+                        children: [
+                            stalled || halted ? /*#__PURE__*/ _jsx(Button, {
+                                size: "small",
+                                variant: "contained",
+                                onClick: retry,
+                                disabled: busy,
+                                children: 'Retry now'
+                            }) : null,
+                            phase === 'carry' ? /*#__PURE__*/ _jsx(Button, {
+                                size: "small",
+                                color: "inherit",
+                                onClick: ()=>void stop(),
+                                disabled: stopping,
+                                children: 'Stop before it takes effect'
+                            }) : null
+                        ]
+                    }) : null
+                ]
+            })
+        ]
+    });
+}
+ConsentGroupChangeProgress.displayName = 'ConsentGroupChangeProgress';
+export default ConsentGroupChangeProgress;
+
+//# sourceMappingURL=consent-group-change-progress.js.map

package/src/lib/components/consent-group-change-progress.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../libs/plugins/email/src/lib/components/consent-group-change-progress.tsx"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n'use client'\n\nimport { useConfirmationContext } from '@aglyn/shared-ui-jsx'\nimport { useSnackbar } from '@aglyn/shared-ui-snackstack'\nimport {\n  useFirestore,\n  useFirestoreDoc,\n  useUser,\n} from '@aglyn/tenant-feature-instance'\nimport {\n  Alert,\n  AlertTitle,\n  Button,\n  LinearProgress,\n  Stack,\n  Typography,\n} from '@mui/material'\nimport { doc } from 'firebase/firestore'\nimport { useCallback, useEffect, useRef, useState } from 'react'\nimport {\n  CONSENT_GROUP_CHANGES_COLLECTION,\n  CONSENT_GROUP_SWEEP_DELAY_MS,\n  postConsentGroups,\n  readConsentGroupChangeJob,\n  type ConsentGroupChangeMarker,\n  type ConsentGroupChangePhase,\n  type ConsentGroupsProgressResponse,\n} from './consent-groups-api'\n\n/**\n * The least time between two `continue` calls from one page. A call that\n * returns at once — the job is waiting on its sweep, or another runner holds\n * it — must not become a loop that asks again the instant it is answered.\n */\nexport const CONSENT_GROUP_CONTINUE_GAP_MS = 3_000\n\n/** What each phase is called while it runs, and what it means for the reader. */\nexport const CONSENT_GROUP_PHASE_TEXT: Readonly<\n  Record<ConsentGroupChangePhase, { title: string; body: string }>\n> = {\n  carry: {\n    title: 'Copying opt-outs — nothing has changed yet',\n    body:\n      'Opt-outs are being copied onto every site that will stop sharing them, ' +\n      'so nobody who opted out can be emailed after the change. Until this ' +\n      'finishes, your consent groups work exactly as they did.',\n  },\n  rehome: {\n    title: 'In effect — combining CRM records',\n    body:\n      'Every send already follows your new consent groups. The CRM records ' +\n      'these sites keep are being combined or copied, so some may show under ' +\n      'their old group for a little while.',\n  },\n  sweep: {\n    title: 'Finishing up',\n    body:\n      'A last pass for anything written while the change ran. You can make ' +\n      'another change once this finishes.',\n  },\n}\n\nexport interface ConsentGroupChangeProgressProps {\n  orgId: string\n  changeId: string\n  /** The org's marker for this change, when the org document carries it yet. */\n  marker: ConsentGroupChangeMarker | null\n  /**\n   * The reader may drive and stop the change. Anyone else sees where it is,\n   * and opens no read of the job for it.\n   */\n  canDrive: boolean\n  /** The change finished, or was stopped before it took effect. */\n  onFinished: (outcome: 'done' | 'canceled') => void\n}\n\n/**\n * A consent group change while it runs (AGL-3320).\n *\n * ## It finishes on its own; an open page only makes it faster\n *\n * The route works in slices of under a minute and a cron resumes it every\n * quarter hour, so closing the page never strands a change. While this is\n * mounted for somebody who may drive it, it asks for the next slice as soon\n * as nobody else holds the job — the job document's lease says when — so a\n * change the admin is watching finishes in minutes rather than quarter hours.\n *\n * ## Only the first phase can be stopped\n *\n * Before the flip nothing an admin would notice has changed: refusals were\n * copied, which never lets anybody be mailed who could not be before, and\n * the old declaration still holds. So **Stop before it takes effect** is\n * offered exactly then. After the flip the new declaration is what every\n * send reads, and stopping would leave the CRM's records half moved.\n *\n * ## A stall is shown, not hidden\n *\n * After five failures in a row the job stops retrying itself on every call\n * and records why. The banner shows that reason and **Retry now**; the cron\n * keeps trying either way.\n */\nexport function ConsentGroupChangeProgress(props: ConsentGroupChangeProgressProps) {\n  const { orgId, changeId, marker, canDrive, onFinished } = props\n  const firestore = useFirestore()\n  const { data: user } = useUser()\n  const { enqueueSnackbar } = useSnackbar()\n  const { confirm } = useConfirmationContext()\n\n  const jobRead = useFirestoreDoc<Record<string, unknown>>(\n    () =>\n      canDrive && orgId && changeId\n        ? doc(firestore, 'orgs', orgId, CONSENT_GROUP_CHANGES_COLLECTION, changeId)\n        : null,\n    [firestore, orgId, changeId, canDrive],\n  )\n  const job = readConsentGroupChangeJob(\n    jobRead.status === 'success' ? jobRead.data : undefined,\n  )\n\n  const [answer, setAnswer] = useState<ConsentGroupsProgressResponse | null>(null)\n  const [busy, setBusy] = useState(false)\n  const [stopping, setStopping] = useState(false)\n  /** A refusal that stops this page driving until somebody retries. */\n  const [halted, setHalted] = useState<string | null>(null)\n  /** Re-arms the driver after each answer. */\n  const [tick, setTick] = useState(0)\n  const lastCallAt = useRef(0)\n  const finished = useRef(false)\n  const mounted = useRef(true)\n  useEffect(() => {\n    mounted.current = true\n    return () => {\n      mounted.current = false\n    }\n  }, [])\n\n  const markerPhase =\n    marker && marker.changeId === changeId ? marker.phase : null\n  const answerPhase =\n    answer && ['carry', 'rehome', 'sweep'].includes(String(answer.phase))\n      ? (answer.phase as ConsentGroupChangePhase)\n      : null\n  const jobPhase = ['carry', 'rehome', 'sweep'].includes(String(job.phase))\n    ? (job.phase as ConsentGroupChangePhase)\n    : null\n  const phase: ConsentGroupChangePhase =\n    markerPhase ?? answerPhase ?? jobPhase ?? 'carry'\n  const stalled = job.stalled || answer?.progress?.stalled === true\n  const lastError = job.lastError ?? answer?.progress?.lastError ?? null\n\n  const finish = useCallback(\n    (outcome: 'done' | 'canceled') => {\n      if (finished.current) return\n      finished.current = true\n      onFinished(outcome)\n    },\n    [onFinished],\n  )\n\n  // The job can finish without this page: the cron, or another tab.\n  useEffect(() => {\n    if (job.finished) finish(job.phase === 'canceled' ? 'canceled' : 'done')\n  }, [job.finished, job.phase, finish])\n\n  const drive = useCallback(async () => {\n    if (!user || finished.current) return\n    lastCallAt.current = Date.now()\n    setBusy(true)\n    const result = await postConsentGroups<ConsentGroupsProgressResponse>(user, {\n      orgId,\n      action: 'continue',\n      changeId,\n    })\n    if (!mounted.current) return\n    setBusy(false)\n    if (result.ok) {\n      setAnswer(result.body)\n      if (result.body.done === true) return void finish('done')\n      setTick((value) => value + 1)\n      return\n    }\n    setHalted(result.failure.message)\n  }, [user, orgId, changeId, finish])\n\n  /*\n   * The driver. It waits out the least gap between calls, any lease another\n   * runner holds, and the delay before the sweep may run — then asks once.\n   * Each answer re-arms it through `tick`; a lease renewed under it re-arms\n   * it through the job document.\n   */\n  useEffect(() => {\n    if (!canDrive || !user || finished.current) return\n    if (busy || stopping || stalled || halted) return\n    if (jobRead.status === 'loading') return\n    const now = Date.now()\n    let at = Math.max(now, lastCallAt.current + CONSENT_GROUP_CONTINUE_GAP_MS)\n    if (job.leaseUntilMs != null && job.leaseUntilMs > now) {\n      at = Math.max(at, job.leaseUntilMs + 1_000)\n    }\n    if (phase === 'sweep' && marker?.declaredAtMs) {\n      at = Math.max(at, marker.declaredAtMs + CONSENT_GROUP_SWEEP_DELAY_MS)\n    }\n    const timer = setTimeout(() => void drive(), at - now)\n    return () => clearTimeout(timer)\n  }, [\n    canDrive,\n    user,\n    busy,\n    stopping,\n    stalled,\n    halted,\n    jobRead.status,\n    job.leaseUntilMs,\n    phase,\n    marker?.declaredAtMs,\n    drive,\n    tick,\n  ])\n\n  const retry = () => {\n    setHalted(null)\n    lastCallAt.current = 0\n    void drive()\n  }\n\n  const stop = async () => {\n    if (!user || stopping) return\n    const accepted = await confirm({\n      title: 'Stop this change?',\n      description:\n        'Nothing has taken effect yet, so your consent groups stay exactly as ' +\n        'they are. Opt-outs already copied stay in place — a copied opt-out ' +\n        'never lets anyone be emailed who couldn’t be before.',\n      confirmationText: 'Stop the change',\n      cancellationText: 'Keep going',\n    })\n      // `confirm` resolves with no value and REJECTS on cancel (AGL-950).\n      .then(() => true)\n      .catch(() => false)\n    if (!accepted) return\n    setStopping(true)\n    const result = await postConsentGroups(user, {\n      orgId,\n      action: 'cancel',\n      changeId,\n    })\n    if (!mounted.current) return\n    setStopping(false)\n    if (result.ok) {\n      enqueueSnackbar('Stopped. Your consent groups are unchanged.', {\n        variant: 'success',\n        persist: false,\n      })\n      return void finish('canceled')\n    }\n    enqueueSnackbar(result.failure.message, {\n      variant: result.failure.kind === 'took-effect' ? 'info' : 'error',\n      allowDuplicate: true,\n    })\n  }\n\n  const text = CONSENT_GROUP_PHASE_TEXT[phase]\n  return (\n    <Alert\n      severity={stalled || halted ? 'error' : 'info'}\n      data-testid=\"consent-group-change-progress\"\n      sx={{ '& .MuiAlert-message': { width: '100%' } }}\n    >\n      <AlertTitle>{text.title}</AlertTitle>\n      <Stack spacing={1}>\n        <Typography variant=\"body2\">{text.body}</Typography>\n        {stalled ? (\n          <Typography variant=\"body2\">\n            {`This change stopped after repeated errors${\n              lastError ? `: ${lastError}` : '.'\n            } It keeps trying on its own every 15 minutes, or you can retry now.`}\n          </Typography>\n        ) : null}\n        {halted ? <Typography variant=\"body2\">{halted}</Typography> : null}\n        {!canDrive ? (\n          <Typography variant=\"body2\" color=\"text.secondary\">\n            {'It finishes on its own. Only members who can change consent groups can stop it.'}\n          </Typography>\n        ) : null}\n        {!stalled && !halted ? (\n          <LinearProgress aria-label=\"Consent group change in progress\" />\n        ) : null}\n        {canDrive && (stalled || halted || phase === 'carry') ? (\n          <Stack direction=\"row\" spacing={1}>\n            {stalled || halted ? (\n              <Button size=\"small\" variant=\"contained\" onClick={retry} disabled={busy}>\n                {'Retry now'}\n              </Button>\n            ) : null}\n            {phase === 'carry' ? (\n              <Button\n                size=\"small\"\n                color=\"inherit\"\n                onClick={() => void stop()}\n                disabled={stopping}\n              >\n                {'Stop before it takes effect'}\n              </Button>\n            ) : null}\n          </Stack>\n        ) : null}\n      </Stack>\n    </Alert>\n  )\n}\nConsentGroupChangeProgress.displayName = 'ConsentGroupChangeProgress'\n\nexport default ConsentGroupChangeProgress\n"],"names":["useConfirmationContext","useSnackbar","useFirestore","useFirestoreDoc","useUser","Alert","AlertTitle","Button","LinearProgress","Stack","Typography","doc","useCallback","useEffect","useRef","useState","CONSENT_GROUP_CHANGES_COLLECTION","CONSENT_GROUP_SWEEP_DELAY_MS","postConsentGroups","readConsentGroupChangeJob","CONSENT_GROUP_CONTINUE_GAP_MS","CONSENT_GROUP_PHASE_TEXT","carry","title","body","rehome","sweep","ConsentGroupChangeProgress","props","markerPhase","job","answer","orgId","changeId","marker","canDrive","onFinished","firestore","data","user","enqueueSnackbar","confirm","jobRead","status","undefined","setAnswer","busy","setBusy","stopping","setStopping","halted","setHalted","tick","setTick","lastCallAt","finished","mounted","current","phase","answerPhase","includes","String","jobPhase","stalled","progress","lastError","finish","outcome","drive","Date","now","result","action","ok","done","value","failure","message","at","Math","max","leaseUntilMs","declaredAtMs","timer","setTimeout","clearTimeout","retry","stop","accepted","description","confirmationText","cancellationText","then","catch","variant","persist","kind","allowDuplicate","text","severity","data-testid","sx","width","spacing","color","aria-label","direction","size","onClick","disabled","displayName"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GACD;;AAEA,SAASA,sBAAsB,QAAQ,uBAAsB;AAC7D,SAASC,WAAW,QAAQ,8BAA6B;AACzD,SACEC,YAAY,EACZC,eAAe,EACfC,OAAO,QACF,iCAAgC;AACvC,SACEC,KAAK,EACLC,UAAU,EACVC,MAAM,EACNC,cAAc,EACdC,KAAK,EACLC,UAAU,QACL,gBAAe;AACtB,SAASC,GAAG,QAAQ,qBAAoB;AACxC,SAASC,WAAW,EAAEC,SAAS,EAAEC,MAAM,EAAEC,QAAQ,QAAQ,QAAO;AAChE,SACEC,gCAAgC,EAChCC,4BAA4B,EAC5BC,iBAAiB,EACjBC,yBAAyB,QAIpB,0BAAsB;AAE7B;;;;CAIC,GACD,OAAO,MAAMC,gCAAgC,KAAK;AAElD,+EAA+E,GAC/E,OAAO,MAAMC,2BAET;IACFC,OAAO;QACLC,OAAO;QACPC,MACE,4EACA,yEACA;IACJ;IACAC,QAAQ;QACNF,OAAO;QACPC,MACE,yEACA,2EACA;IACJ;IACAE,OAAO;QACLH,OAAO;QACPC,MACE,yEACA;IACJ;AACF,EAAC;AAgBD;;;;;;;;;;;;;;;;;;;;;;;;CAwBC,GACD,OAAO,SAASG,2BAA2BC,KAAsC;QA6C7EC,MAAAA,OAEgBC,OAAAA;QADaC,kBACIA;IA9CnC,MAAM,EAAEC,KAAK,EAAEC,QAAQ,EAAEC,MAAM,EAAEC,QAAQ,EAAEC,UAAU,EAAE,GAAGR;IAC1D,MAAMS,YAAYnC;IAClB,MAAM,EAAEoC,MAAMC,IAAI,EAAE,GAAGnC;IACvB,MAAM,EAAEoC,eAAe,EAAE,GAAGvC;IAC5B,MAAM,EAAEwC,OAAO,EAAE,GAAGzC;IAEpB,MAAM0C,UAAUvC,gBACd,IACEgC,YAAYH,SAASC,WACjBtB,IAAI0B,WAAW,QAAQL,OAAOhB,kCAAkCiB,YAChE,MACN;QAACI;QAAWL;QAAOC;QAAUE;KAAS;IAExC,MAAML,MAAMX,0BACVuB,QAAQC,MAAM,KAAK,YAAYD,QAAQJ,IAAI,GAAGM;IAGhD,MAAM,CAACb,QAAQc,UAAU,GAAG9B,SAA+C;IAC3E,MAAM,CAAC+B,MAAMC,QAAQ,GAAGhC,SAAS;IACjC,MAAM,CAACiC,UAAUC,YAAY,GAAGlC,SAAS;IACzC,mEAAmE,GACnE,MAAM,CAACmC,QAAQC,UAAU,GAAGpC,SAAwB;IACpD,0CAA0C,GAC1C,MAAM,CAACqC,MAAMC,QAAQ,GAAGtC,SAAS;IACjC,MAAMuC,aAAaxC,OAAO;IAC1B,MAAMyC,WAAWzC,OAAO;IACxB,MAAM0C,UAAU1C,OAAO;IACvBD,UAAU;QACR2C,QAAQC,OAAO,GAAG;QAClB,OAAO;YACLD,QAAQC,OAAO,GAAG;QACpB;IACF,GAAG,EAAE;IAEL,MAAM5B,cACJK,UAAUA,OAAOD,QAAQ,KAAKA,WAAWC,OAAOwB,KAAK,GAAG;IAC1D,MAAMC,cACJ5B,UAAU;QAAC;QAAS;QAAU;KAAQ,CAAC6B,QAAQ,CAACC,OAAO9B,OAAO2B,KAAK,KAC9D3B,OAAO2B,KAAK,GACb;IACN,MAAMI,WAAW;QAAC;QAAS;QAAU;KAAQ,CAACF,QAAQ,CAACC,OAAO/B,IAAI4B,KAAK,KAClE5B,IAAI4B,KAAK,GACV;IACJ,MAAMA,SACJ7B,QAAAA,QAAAA,sBAAAA,cAAe8B,uBAAf9B,QAA8BiC,oBAA9BjC,OAA0C;IAC5C,MAAMkC,UAAUjC,IAAIiC,OAAO,IAAIhC,CAAAA,2BAAAA,mBAAAA,OAAQiC,QAAQ,qBAAhBjC,iBAAkBgC,OAAO,MAAK;IAC7D,MAAME,aAAYnC,SAAAA,iBAAAA,IAAImC,SAAS,YAAbnC,iBAAiBC,2BAAAA,oBAAAA,OAAQiC,QAAQ,qBAAhBjC,kBAAkBkC,SAAS,YAA5CnC,QAAgD;IAElE,MAAMoC,SAAStD,YACb,CAACuD;QACC,IAAIZ,SAASE,OAAO,EAAE;QACtBF,SAASE,OAAO,GAAG;QACnBrB,WAAW+B;IACb,GACA;QAAC/B;KAAW;IAGd,kEAAkE;IAClEvB,UAAU;QACR,IAAIiB,IAAIyB,QAAQ,EAAEW,OAAOpC,IAAI4B,KAAK,KAAK,aAAa,aAAa;IACnE,GAAG;QAAC5B,IAAIyB,QAAQ;QAAEzB,IAAI4B,KAAK;QAAEQ;KAAO;IAEpC,MAAME,QAAQxD,YAAY;QACxB,IAAI,CAAC2B,QAAQgB,SAASE,OAAO,EAAE;QAC/BH,WAAWG,OAAO,GAAGY,KAAKC,GAAG;QAC7BvB,QAAQ;QACR,MAAMwB,SAAS,MAAMrD,kBAAiDqB,MAAM;YAC1EP;YACAwC,QAAQ;YACRvC;QACF;QACA,IAAI,CAACuB,QAAQC,OAAO,EAAE;QACtBV,QAAQ;QACR,IAAIwB,OAAOE,EAAE,EAAE;YACb5B,UAAU0B,OAAO/C,IAAI;YACrB,IAAI+C,OAAO/C,IAAI,CAACkD,IAAI,KAAK,MAAM,OAAO,KAAKR,OAAO;YAClDb,QAAQ,CAACsB,QAAUA,QAAQ;YAC3B;QACF;QACAxB,UAAUoB,OAAOK,OAAO,CAACC,OAAO;IAClC,GAAG;QAACtC;QAAMP;QAAOC;QAAUiC;KAAO;IAElC;;;;;GAKC,GACDrD,UAAU;QACR,IAAI,CAACsB,YAAY,CAACI,QAAQgB,SAASE,OAAO,EAAE;QAC5C,IAAIX,QAAQE,YAAYe,WAAWb,QAAQ;QAC3C,IAAIR,QAAQC,MAAM,KAAK,WAAW;QAClC,MAAM2B,MAAMD,KAAKC,GAAG;QACpB,IAAIQ,KAAKC,KAAKC,GAAG,CAACV,KAAKhB,WAAWG,OAAO,GAAGrC;QAC5C,IAAIU,IAAImD,YAAY,IAAI,QAAQnD,IAAImD,YAAY,GAAGX,KAAK;YACtDQ,KAAKC,KAAKC,GAAG,CAACF,IAAIhD,IAAImD,YAAY,GAAG;QACvC;QACA,IAAIvB,UAAU,YAAWxB,0BAAAA,OAAQgD,YAAY,GAAE;YAC7CJ,KAAKC,KAAKC,GAAG,CAACF,IAAI5C,OAAOgD,YAAY,GAAGjE;QAC1C;QACA,MAAMkE,QAAQC,WAAW,IAAM,KAAKhB,SAASU,KAAKR;QAClD,OAAO,IAAMe,aAAaF;IAC5B,GAAG;QACDhD;QACAI;QACAO;QACAE;QACAe;QACAb;QACAR,QAAQC,MAAM;QACdb,IAAImD,YAAY;QAChBvB;QACAxB,0BAAAA,OAAQgD,YAAY;QACpBd;QACAhB;KACD;IAED,MAAMkC,QAAQ;QACZnC,UAAU;QACVG,WAAWG,OAAO,GAAG;QACrB,KAAKW;IACP;IAEA,MAAMmB,OAAO;QACX,IAAI,CAAChD,QAAQS,UAAU;QACvB,MAAMwC,WAAW,MAAM/C,QAAQ;YAC7BlB,OAAO;YACPkE,aACE,0EACA,wEACA;YACFC,kBAAkB;YAClBC,kBAAkB;QACpB,EACE,oEAAoE;SACnEC,IAAI,CAAC,IAAM,MACXC,KAAK,CAAC,IAAM;QACf,IAAI,CAACL,UAAU;QACfvC,YAAY;QACZ,MAAMsB,SAAS,MAAMrD,kBAAkBqB,MAAM;YAC3CP;YACAwC,QAAQ;YACRvC;QACF;QACA,IAAI,CAACuB,QAAQC,OAAO,EAAE;QACtBR,YAAY;QACZ,IAAIsB,OAAOE,EAAE,EAAE;YACbjC,gBAAgB,+CAA+C;gBAC7DsD,SAAS;gBACTC,SAAS;YACX;YACA,OAAO,KAAK7B,OAAO;QACrB;QACA1B,gBAAgB+B,OAAOK,OAAO,CAACC,OAAO,EAAE;YACtCiB,SAASvB,OAAOK,OAAO,CAACoB,IAAI,KAAK,gBAAgB,SAAS;YAC1DC,gBAAgB;QAClB;IACF;IAEA,MAAMC,OAAO7E,wBAAwB,CAACqC,MAAM;IAC5C,qBACE,MAACrD;QACC8F,UAAUpC,WAAWb,SAAS,UAAU;QACxCkD,eAAY;QACZC,IAAI;YAAE,uBAAuB;gBAAEC,OAAO;YAAO;QAAE;;0BAE/C,KAAChG;0BAAY4F,KAAK3E,KAAK;;0BACvB,MAACd;gBAAM8F,SAAS;;kCACd,KAAC7F;wBAAWoF,SAAQ;kCAASI,KAAK1E,IAAI;;oBACrCuC,wBACC,KAACrD;wBAAWoF,SAAQ;kCACjB,CAAC,yCAAyC,EACzC7B,YAAY,CAAC,EAAE,EAAEA,WAAW,GAAG,IAChC,mEAAmE,CAAC;yBAErE;oBACHf,uBAAS,KAACxC;wBAAWoF,SAAQ;kCAAS5C;yBAAuB;oBAC7D,CAACf,yBACA,KAACzB;wBAAWoF,SAAQ;wBAAQU,OAAM;kCAC/B;yBAED;oBACH,CAACzC,WAAW,CAACb,uBACZ,KAAC1C;wBAAeiG,cAAW;yBACzB;oBACHtE,YAAa4B,CAAAA,WAAWb,UAAUQ,UAAU,OAAM,kBACjD,MAACjD;wBAAMiG,WAAU;wBAAMH,SAAS;;4BAC7BxC,WAAWb,uBACV,KAAC3C;gCAAOoG,MAAK;gCAAQb,SAAQ;gCAAYc,SAAStB;gCAAOuB,UAAU/D;0CAChE;iCAED;4BACHY,UAAU,wBACT,KAACnD;gCACCoG,MAAK;gCACLH,OAAM;gCACNI,SAAS,IAAM,KAAKrB;gCACpBsB,UAAU7D;0CAET;iCAED;;yBAEJ;;;;;AAIZ;AACArB,2BAA2BmF,WAAW,GAAG;AAEzC,eAAenF,2BAA0B"}

package/src/lib/components/consent-group-confirmation-card.d.ts

@@ -1,22 +1,12 @@
-/**
- * Which permission the signed-in member lacks for this switch — its label, or
- * `null` when they hold both — and whether that is known yet.
- *
- * Read off the member's own membership document, and their custom role when
- * they hold one, both of which the rules let a member read. The shell's
- * permission map carries the legacy keys and the plugin-declared ones, not
- * these two, and the CRM's org settings cards answer the same question the
- * same way. `ready` separates "no" from "not yet", so the switch disables
- * with a reason instead of hiding until the read lands. A membership that
- * cannot be read resolves no permission at all; the route decides either way.
- */
-export declare function useConsentGroupConfirmationAccess(orgId: string | undefined): {
-    missing: string | null;
-    ready: boolean;
-};
+import { type ConsentGroupAccess } from './consent-group-access';
 export interface ConsentGroupConfirmationCardProps {
     /** The org document the shell passes, kept live by its listener. */
     org?: Record<string, unknown> | null;
+    /**
+     * Whether the reader may move the switch, when the section already asked.
+     * Absent, the card reads the reader's membership itself.
+     */
+    access?: ConsentGroupAccess;
 }
 /**
  * "Wait for confirmation across a consent group" — the org's one switch over