@nauticana/sail 1.1.12 → 1.1.14

package/README.md

@@ -2,7 +2,7 @@
 
 A shared Angular component library for building CRUD-based admin frontends. Provides table management, form handling, navigation, authentication, two-factor authentication, and trusted device management — all driven by metadata from a [keel](https://github.com/nauticana/keel) Go backend.
 
-> **Compatibility:** sail and keel are versioned in lock-step. The current line is **sail v1.1.x ↔ keel v1.2.x** (sail v1.1.9 needs keel v1.2.16 for the OAuth-connect layer). Earlier lines: **sail v0.5.x ↔ keel v0.5.x**, **sail v0.6.x / v0.7.x ↔ keel v0.7.x**, **sail v0.8.x ↔ keel v0.8.x**, **sail v0.9.x ↔ keel v0.9.x**. Newer sail releases extend the contract — older keel servers reject unknown endpoints with HTTP 404 / 400. The v0.8.x line additionally ships the `table_action` framework (per-table custom buttons surfaced in `TableList` / `TableSearch` / `TableEdit` / `TableDetail`); see the [Migrating to v0.7.0 §5 — TableAction](#migrating-to-v070--payout-user-payment-methods-table-actions) section for the seed shape (basis `table_action` + `authorization_object` + `authorization_object_action` rows) and the [keel/README Table Actions](https://github.com/nauticana/keel#table-actions) section for backend wiring via `handler.WrapTableAction`.
+> **Compatibility:** sail and keel are versioned in lock-step. The current line is **sail v1.1.x ↔ keel v1.2.x**; the agency components in sail v1.1.14 require keel v1.2.41 (sail v1.1.9 needs keel v1.2.16 for the OAuth-connect layer). Earlier lines: **sail v0.5.x ↔ keel v0.5.x**, **sail v0.6.x / v0.7.x ↔ keel v0.7.x**, **sail v0.8.x ↔ keel v0.8.x**, **sail v0.9.x ↔ keel v0.9.x**. Newer sail releases extend the contract — older keel servers reject unknown endpoints with HTTP 404 / 400. The v0.8.x line additionally ships the `table_action` framework (per-table custom buttons surfaced in `TableList` / `TableSearch` / `TableEdit` / `TableDetail`); see the [Migrating to v0.7.0 §5 — TableAction](#migrating-to-v070--payout-user-payment-methods-table-actions) section for the seed shape (basis `table_action` + `authorization_object` + `authorization_object_action` rows) and the [keel/README Table Actions](https://github.com/nauticana/keel#table-actions) section for backend wiring via `handler.WrapTableAction`.
 
 **Recent additions:** `BaseAuthService.acceptToken(jwt)` — adopt an externally-minted JWT (registration / SSO-handoff flows) and run the full post-login sequence (store under the canonical `jwt` key, load appdata, init routes); apps must use this instead of writing `localStorage` directly. `BaseRestService.analytic<T>(endpoint, params?)` — GET a keel `analytic/<endpoint>` report and return its rows. `passwordPolicyValidator` + `BaseAuthService.ensurePasswordPolicy()` — validate passwords against keel's policy (via `SailGuiConfig.passwordPolicyUrl`); see Configuration reference.
 
@@ -22,13 +22,14 @@ A shared Angular component library for building CRUD-based admin frontends. Prov
 | **Billing** | `PlanSelectorComponent`, `PriceSelectorComponent`, `CheckoutButtonComponent`, `PaymentMethodsComponent`, `PortalButtonComponent`, `UsageMeterComponent`, `StatusChipComponent`, `TrialBannerComponent`, `SeatSelectorComponent`, `DunningBannerComponent` |
 | **Dashboard** | `DashboardShellComponent`, `DataCardComponent`, `LockedOverlayComponent`, `ActionCenterComponent`, `EntitySelectorComponent`, `VerificationFlowComponent` |
 | **Payout** | `PayoutProviderOnboardingComponent`, `PayoutBankInfoFormComponent` |
+| **Agency** | `AgencyClientsComponent`, `AgencyStatusBannerComponent`, `AgencyAcceptComponent`, `AgencyEarningsSummaryComponent`, `CommissionLedgerComponent`, `AgencyPayoutHistoryComponent`, `AgencyPayoutProfileComponent` |
 | **Payments / SCA** | `UserPaymentMethodsComponent`, `ScaConfirmComponent`, `ScaConfirmer` (port), `SCA_CONFIRMER` (token) |
-| **Services** | `BaseAuthService` (OTP / social / push / deleteAccount / logoutEverywhere / profile: `getProfile`, `updateProfile`, `request`+`confirmEmailChange`, `request`+`confirmPhoneChange`), `BillingService`, `BackendService`, `PayoutService`, `UserPaymentMethodService`, `loadScript()`, `authInterceptor`, `apiResponseInterceptor` |
+| **Services** | `BaseAuthService` (OTP / social / push / deleteAccount / logoutEverywhere / profile: `getProfile`, `updateProfile`, `request`+`confirmEmailChange`, `request`+`confirmPhoneChange`), `BillingService`, `AgencyService`, `BackendService`, `PayoutService`, `UserPaymentMethodService`, `loadScript()`, `authInterceptor`, `apiResponseInterceptor` |
 | **Abstracts** | `BaseTable`, `BaseForm`, `BaseView`, `AbstractEditableView`, `BaseAsync`, `BaseRestService` |
 | **Config** | `SAIL_GUI_CONFIG`, `SailGuiConfig`, `configureRestUrls()` |
 | **Models** | `ApplicationData`, `TableDefinition`, `SiudAction`, `ApplicationMenu`, `ConstantValue`, `UserAccount`, `RestReport`, `ReportParam`, `TrustedDevice`, `PublicPlan`, `PlanPrice`, `PaymentMethod`, `Subscription`, `Invoice`, `CheckoutRequest`/`CheckoutResponse`, `PortalResponse`, `UsageMeter`, `ChargeResult`, `UserPaymentMethod`, `TableAction`, `ReusableAccount`, `PayoutOnboardingSession`, `BankInfoFormValue`, `CountryProfile`, `OtpRequest`/`OtpResponse`, `SignupConsent`, `ConsentState`, `ConsentOption`, `SocialProvider`, `PushPlatform`, 2FA types, etc. |
 | **Decorators** | `@IsSailString()`, `@IsSailNumeric()` (class-validator based) |
-| **Utils** | `titleCase()`, `fromPriceLabel()` |
+| **Utils** | `titleCase()`, `fromPriceLabel()`, `formatMinorCurrency()` |
 
 ## Quick start
 
@@ -273,7 +274,8 @@ interface SailGuiConfig {
   googleClientId?: string;            // Google Identity Services client ID
   appleServiceId?: string;            // Apple Services ID
   appleRedirectUri?: string;          // Apple Sign-In redirect URI
-  privacyPolicyUrl?: string;          // Linked from ConsentGateComponent
+  privacyPolicyUrl?: string;          // Linked from ConsentGateComponent and the login footer
+  termsUrl?: string;                  // Linked from the SMS-consent disclosure and the login footer
   defaultPolicyVersion?: string;      // Content hash of the deployed policy
   defaultPolicyLanguage?: string;     // ISO 639-1 fallback language
   accountDeletedRoute?: string;       // Route after account deletion (default '/login/local')
@@ -589,6 +591,74 @@ A complete screen is the pieces above assembled over `BillingService` — no met
 <!-- invoices: render listInvoices() rows directly -->
 ```
 
+## Agency / reseller UI (v1.1.14)
+
+sail v1.1.14 supplies composable, unstyled agency components over keel v1.2.41.
+The app owns routes, route guards, brand copy, global CSS, and any columns that
+refer to an app-specific managed entity.
+
+`AgencyService` covers profile enrollment, invitation staging/acceptance,
+delegation/revocation, per-client referral/wholesale selection, earnings, and
+payout-profile selection. Its DTOs use the upstream names
+`agency_client_invitation`, `agency_client_delegation`, and
+`agency_client_rate`; there is no client-side rule-schedule model.
+The enrollment method is `enroll()`; downstream `enrollReferral()` calls must
+be renamed when adopting this release.
+
+Compose an agency page from the pieces you need:
+
+```html
+<sail-agency-clients
+  [extraColumns]="clientColumns"
+  [showBillingModelControls]="true" />
+<sail-agency-earnings-summary [earnings]="earnings()" [activeClients]="activeClients()" />
+<sail-commission-ledger [entries]="earnings()?.entries ?? []" />
+<sail-agency-payout-history [payouts]="earnings()?.payouts ?? []" />
+<sail-agency-payout-profile />
+```
+
+`AgencyClientsComponent` renders status values through the shared
+`StatusChipComponent` and backend constant catalogues. It accepts app-specific
+columns rather than assuming the managed entity. Accepted clients begin in
+referral mode; wholesale controls appear only when the profile permits them and
+the app opts in with `showBillingModelControls`.
+
+Load keel's v1.2.40 basis seed so status chips receive these canonical domains:
+
+| Domain | Values |
+|---|---|
+| `agency_client_status` | `S` Staged, `I` Invited, `V` Client, `X` Cancelled |
+| `agency_billing_model` | `R` Referral, `W` Wholesale |
+| `agency_commission_status` | `H` Held, `P` Payable, `R` Reserved, `D` Paid, `O` Offset |
+| `agency_payout_status` | `C` Created, `P` Processing, `D` Paid, `F` Failed, `R` Returned, `V` Reversed, `M` Manual review |
+
+Do not substitute app-local domain names such as `billing_model` or
+`commission_status`; a missing canonical domain deliberately renders the raw
+code so configuration drift remains visible.
+
+`AgencyAcceptComponent` keeps consent explicit and persists an invitation token
+when the authenticated user still needs to create a business partner. Consumers
+handle its navigation outputs and route back after business setup. Other 409
+conflicts, such as an existing delegation or self-delegation, remain on the
+invitation screen as errors instead of entering the business-setup flow. The
+branch uses keel's stable RFC 7807 `code: "agency_no_partner"` (keel v1.2.41),
+not error prose.
+
+The payout-profile component composes the existing provider-onboarding surface
+and only allows a fully onboarded destination returned by keel. Mount it only
+for an approved, non-suspended agency; keel intentionally rejects its GET for a
+pending profile. The ledger and payout-history components show default empty
+messages; pass `[emptyMessage]="''"` when a composed page should omit empty
+regions entirely.
+
+All accounting values are integer minor units. `formatMinorCurrency()` uses the
+currency exponent reported by `Intl.NumberFormat`, so zero- and three-decimal
+currencies render correctly; earnings stay separated by currency rather than
+being summed into a misleading total.
+
+The agency URL defaults use `/api/v1/agency/*`. Apps mounting Keel elsewhere
+must override the `RestURL.agency*URL` values with `configureRestUrls()`.
+
 ## Off-session SCA / 3DS confirmation (v1.0.x)
 
 When an app charges a rider's **vaulted** card off-session (keel `payment.ChargeClient` / `StripeChargeClient`), the provider may return `requires_action` — the cardholder must complete a Strong Customer Authentication (3DS) challenge. keel surfaces the hooks on `ChargeResult` (`ClientSecret`, `ActionURL`); sail standardizes the **client-side** confirmation so it isn't rebuilt per app.
@@ -1138,8 +1208,8 @@ The v0.6 / v0.7 line introduced three additive feature groups against keel v0.7.
 
 | From | Export | Purpose |
 |---|---|---|
-| `@nauticana/sail` | `PayoutService` | keel/payout API client — hosted-KYC launch, reuse flow, status |
-| `@nauticana/sail` | `PayoutProviderOnboardingComponent` (`<sail-payout-provider-onboarding>`) | Drop-in onboarding step with reuse picker + hosted-KYC launcher |
+| `@nauticana/sail` | `PayoutService` | keel/payout API client — onboarding, reuse, status, bank-version replacement, beneficiary registration |
+| `@nauticana/sail` | `PayoutProviderOnboardingComponent` (`<sail-payout-provider-onboarding>`) | Drop-in onboarding step with reuse picker, hosted-KYC handoff, and asynchronous-confirmation output |
 | `@nauticana/sail` | `PayoutBankInfoFormComponent` (`<sail-payout-bank-info-form>`) | Tax + payout details form (country / currency / tax ID / billing address / agreement) |
 | `@nauticana/sail` | `UserPaymentMethodService` | Saved-card list / delete / set-default API client |
 | `@nauticana/sail` | `UserPaymentMethodsComponent` (`<sail-user-payment-methods>`) | List of saved cards/wallets with set-default + delete |
@@ -1151,10 +1221,12 @@ Make sure your keel deployment exposes these — they're all under `/api/v1/`:
 
 | Endpoint | Method | Purpose |
 |---|---|---|
-| `/api/v1/payout/onboard/start` | POST | Open hosted-KYC; returns `{ url, externalAccountId, expiresAt }` |
+| `/api/v1/payout/onboard/start` | POST | Start provider onboarding; returns `{ url, externalAccountId, expiresAt }` (`url` is empty when confirmation continues asynchronously) |
 | `/api/v1/payout/reusable` | POST | List provider accounts the user has on other partners |
 | `/api/v1/payout/reusable/link` | POST | Copy a `providerAccountId` onto the active partner's `user_bank_info` row |
 | `/api/v1/payout/status` | POST | `{ complete: true }` once the active partner's row has a `providerAccountId` |
+| `/api/v1/payout/bank/replace` | POST | Supersede the active bank-info version and insert its replacement atomically; the app must wire the handler's `SealTaxID` hook |
+| `/api/v1/payout/beneficiary/register` | POST | Create and link a provider beneficiary from provider-collected details |
 | `/api/v1/payment-methods/set-default` | POST | Atomic multi-row UPDATE — sets one row as default, clears the rest |
 | `/api/v1/{table}/{action_name}` | POST | Per-table custom actions resolved from `basis.table_action` |
 
@@ -1176,6 +1248,7 @@ Drop the two components into a wizard step. Routing between them stays in the co
     <sail-payout-provider-onboarding
         (linked)="step.set('done')"
         (started)="step.set('waiting')"
+        (pending)="step.set('awaiting-confirmation')"
         (skipped)="step.set('done')"
         (back)="step.set('bank')">
     </sail-payout-provider-onboarding>
@@ -1183,7 +1256,9 @@ Drop the two components into a wizard step. Routing between them stays in the co
 }
 ```
 
-`BankInfoFormValue` maps 1:1 to `basis.user_bank_info` columns. The consumer decides where to POST it — typically a direct generic-CRUD insert against `/api/v1/user_bank_info`. The provider account itself is created by `<sail-payout-provider-onboarding>` via `PayoutService.startOnboarding()` → hosted KYC → webhook back to keel.
+`BankInfoFormValue` is application-layer input, not a generic-CRUD row. In particular, its plaintext `taxId` must be sealed into the `tax_id_encrypted` column and must never be sent through the generic `/api/v1/user_bank_info` CRUD surface. First-time setup goes through the consuming app's registration service. Changes to an existing destination use `PayoutService.replaceBankInfo()`, which calls keel's atomic version-replacement endpoint; wire `PayoutHandler.SealTaxID` so that endpoint seals the plaintext before persistence.
+
+`PayoutService.startOnboarding()` returns a `PayoutOnboardingSession`. When `url` is non-empty, the component emits `started` and navigates to the provider's hosted flow. When `url` is empty, as with Wise email recipients, it emits `pending` instead; consumers must show an awaiting-confirmation state while the recipient completes the provider's email flow. Airwallex apps can pass details collected by the embedded beneficiary component to `PayoutService.registerBeneficiary()`.
 
 For apps that operate on a single keel partner, the reuse picker stays empty and only the "Start onboarding" CTA renders. Multi-partner apps get the picker for free.
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nauticana/sail",
-  "version": "1.1.12",
+  "version": "1.1.14",
   "description": "Metadata-driven Angular component library for CRUD admin frontends backed by the keel Go backend. Tables, forms, navigation, OTP/2FA/social auth, billing, payout onboarding.",
   "main": "src/index.ts",
   "scripts": {

package/src/component/agency/agency_accept.html

@@ -0,0 +1,33 @@
+@if (loading()) {
+  <mat-spinner diameter="36" aria-label="Loading invitation"></mat-spinner>
+} @else if (complete()) {
+  <div class="agency-accept__complete" role="status">Agency management has been accepted.</div>
+} @else if (invite(); as invitation) {
+  <section class="agency-accept__invitation">
+    <h1>Agency management invitation</h1>
+    <p>
+      <strong>{{ invitation.agencyName }}</strong> invited
+      <strong>{{ invitation.clientName }}</strong>. Accepting grants management access;
+      ownership remains with the client and the delegation can be revoked.
+    </p>
+    @if (invitation.expired) {
+      <p class="agency-accept__error" role="alert">This invitation has expired.</p>
+    }
+    @if (needsBusiness()) {
+      <p role="status">A business must be set up before management can be delegated.</p>
+      <button matButton="filled" type="button" (click)="requestBusinessSetup()">{{ businessSetupLabel() }}</button>
+    } @else if (authenticated()) {
+      <button matButton="filled" type="button" [disabled]="accepting() || invitation.expired" (click)="accept()">
+        Accept management
+      </button>
+    } @else {
+      <button matButton="filled" type="button" (click)="loginRequested.emit()">{{ loginLabel() }}</button>
+      <button matButton type="button" (click)="registrationRequested.emit()">{{ registerLabel() }}</button>
+    }
+    @if (errorMessage()) {
+      <p class="agency-accept__error" role="alert">{{ errorMessage() }}</p>
+    }
+  </section>
+} @else {
+  <p class="agency-accept__error" role="alert">{{ errorMessage() }}</p>
+}

package/src/component/agency/agency_accept.ts

@@ -0,0 +1,94 @@
+import { ChangeDetectionStrategy, Component, OnInit, inject, input, output, signal } from '@angular/core';
+import { MatButtonModule } from '@angular/material/button';
+import { MatProgressSpinnerModule } from '@angular/material/progress-spinner';
+import { AgencyInvite } from '../../model/agency';
+import { AgencyService } from '../../service/agency.service';
+import { errorCode, errorDetail } from '../../util/errors';
+
+const NO_PARTNER_CODE = 'agency_no_partner';
+
+@Component({
+  selector: 'sail-agency-accept',
+  changeDetection: ChangeDetectionStrategy.OnPush,
+  imports: [MatButtonModule, MatProgressSpinnerModule],
+  templateUrl: './agency_accept.html',
+  host: { class: 'agency-accept' },
+})
+export class AgencyAcceptComponent implements OnInit {
+  readonly token = input('');
+  readonly authenticated = input(false);
+  readonly tokenStorageKey = input('sail.agencyInvite');
+  readonly loginLabel = input('Log in to accept');
+  readonly registerLabel = input('Create an account');
+  readonly businessSetupLabel = input('Set up your business');
+
+  readonly loginRequested = output<void>();
+  readonly registrationRequested = output<void>();
+  readonly businessSetupRequested = output<string>();
+  readonly accepted = output<AgencyInvite>();
+
+  private readonly agency = inject(AgencyService);
+  private activeToken = '';
+
+  readonly loading = signal(true);
+  readonly accepting = signal(false);
+  readonly invite = signal<AgencyInvite | null>(null);
+  readonly errorMessage = signal('');
+  readonly complete = signal(false);
+  readonly needsBusiness = signal(false);
+
+  ngOnInit(): void {
+    this.activeToken = this.token() || localStorage.getItem(this.tokenStorageKey()) || '';
+    if (!this.activeToken) {
+      this.loading.set(false);
+      this.errorMessage.set('The invitation token is missing.');
+      return;
+    }
+    this.agency.inviteInfo(this.activeToken).subscribe({
+      next: (invite) => {
+        this.invite.set(invite);
+        this.loading.set(false);
+      },
+      error: (error: unknown) => {
+        this.loading.set(false);
+        this.errorMessage.set(errorDetail(error, 'The invitation was not found.'));
+      },
+    });
+  }
+
+  accept(): void {
+    const invite = this.invite();
+    if (!invite || invite.expired || this.accepting()) return;
+    this.accepting.set(true);
+    this.needsBusiness.set(false);
+    this.errorMessage.set('');
+    this.agency.accept(this.activeToken).subscribe({
+      next: () => {
+        localStorage.removeItem(this.tokenStorageKey());
+        this.accepting.set(false);
+        this.complete.set(true);
+        this.accepted.emit(invite);
+      },
+      error: (error: unknown) => {
+        this.accepting.set(false);
+        if (this.statusOf(error) === 409 && errorCode(error) === NO_PARTNER_CODE) {
+          localStorage.setItem(this.tokenStorageKey(), this.activeToken);
+          this.needsBusiness.set(true);
+          return;
+        }
+        this.errorMessage.set(errorDetail(error, 'Could not accept the invitation.'));
+      },
+    });
+  }
+
+  requestBusinessSetup(): void {
+    localStorage.setItem(this.tokenStorageKey(), this.activeToken);
+    this.businessSetupRequested.emit(this.activeToken);
+  }
+
+  private statusOf(error: unknown): number | undefined {
+    return typeof error === 'object' && error !== null && 'status' in error
+      ? Number((error as { status?: unknown }).status)
+      : undefined;
+  }
+}

package/src/component/agency/agency_clients.html

@@ -0,0 +1,97 @@
+@if (loading()) {
+  <mat-spinner diameter="36" aria-label="Loading agency clients"></mat-spinner>
+} @else if (needsEnrollment()) {
+  <section class="agency-clients__enrollment">
+    <h2>{{ enrollmentTitle() }}</h2>
+    <p>{{ enrollmentDescription() }}</p>
+    <button matButton="filled" type="button" (click)="enroll()">{{ enrollmentActionLabel() }}</button>
+  </section>
+} @else {
+  @if (errorMessage()) {
+    <p class="agency-clients__error" role="alert">{{ errorMessage() }}</p>
+  }
+
+  <sail-agency-status-banner [profile]="profile()" />
+
+  <form class="agency-clients__add" [formGroup]="addForm" (ngSubmit)="addClient()">
+    <mat-form-field appearance="outline">
+      <mat-label>Client name</mat-label>
+      <input matInput formControlName="name" required />
+    </mat-form-field>
+    <mat-form-field appearance="outline">
+      <mat-label>Email</mat-label>
+      <input matInput formControlName="email" type="email" />
+    </mat-form-field>
+    <mat-form-field appearance="outline">
+      <mat-label>Website</mat-label>
+      <input matInput formControlName="website" />
+    </mat-form-field>
+    <button matButton="filled" type="submit" [disabled]="addForm.invalid || !canManage()">Add client</button>
+  </form>
+
+  <p class="agency-clients__count">Active clients: {{ activeClients() }}</p>
+
+  @if (clients().length === 0) {
+    <p class="agency-clients__empty">No clients have been staged.</p>
+  } @else {
+    <div class="agency-clients__table-wrap">
+      <table class="agency-clients__table">
+        <thead>
+          <tr>
+            <th>Name</th>
+            <th>Email</th>
+            <th>Website</th>
+            @for (column of extraColumns(); track column.id) {
+              <th>{{ column.caption }}</th>
+            }
+            <th>Status</th>
+            @if (showBillingModelControls()) { <th>Billing model</th> }
+            <th><span class="agency-clients__visually-hidden">Actions</span></th>
+          </tr>
+        </thead>
+        <tbody>
+          @for (client of clients(); track client.id) {
+            <tr>
+              <td>{{ client.name }}</td>
+              <td>{{ client.email }}</td>
+              <td>{{ client.website }}</td>
+              @for (column of extraColumns(); track column.id) {
+                <td>{{ column.value(client) }}</td>
+              }
+              <td>
+                <sail-status-chip domain="agency_client_status" [value]="client.status" />
+                @if (client.expired) { <span class="agency-clients__expired">Expired</span> }
+              </td>
+              @if (showBillingModelControls()) {
+                <td>
+                  @if (client.clientPartnerId) {
+                    <sail-status-chip domain="agency_billing_model" [value]="client.billingModel ?? ''" />
+                    <button matButton type="button" [disabled]="!canManage() || client.billingModel === 'R'"
+                            (click)="setBillingModel(client, 'R')">Referral</button>
+                    @if (profile()?.wholesaleAllowed) {
+                      <button matButton type="button" [disabled]="!canManage() || client.billingModel === 'W'"
+                              (click)="setBillingModel(client, 'W')">Wholesale</button>
+                    }
+                  }
+                </td>
+              }
+              <td>
+                @if (client.status === 'S' || client.status === 'I') {
+                  <button matButton type="button" [disabled]="!canManage()" (click)="invite(client)">
+                    {{ client.status === 'S' ? 'Invite' : 'Re-invite' }}
+                  </button>
+                  <button matButton type="button" [disabled]="!canManage()" (click)="cancel(client)">Cancel</button>
+                }
+                @if (inviteLinks()[client.id]; as link) {
+                  <button matIconButton type="button" aria-label="Copy invitation link" (click)="copy(link)">
+                    <mat-icon>content_copy</mat-icon>
+                  </button>
+                }
+              </td>
+            </tr>
+          }
+        </tbody>
+      </table>
+    </div>
+  }
+}

package/src/component/agency/agency_clients.ts

@@ -0,0 +1,182 @@
+import { ChangeDetectionStrategy, Component, OnInit, computed, inject, input, output, signal } from '@angular/core';
+import { FormBuilder, ReactiveFormsModule, Validators } from '@angular/forms';
+import { MatButtonModule } from '@angular/material/button';
+import { MatFormFieldModule } from '@angular/material/form-field';
+import { MatIconModule } from '@angular/material/icon';
+import { MatInputModule } from '@angular/material/input';
+import { MatProgressSpinnerModule } from '@angular/material/progress-spinner';
+import { MatSnackBar } from '@angular/material/snack-bar';
+import { AgencyClient, AgencyClientColumn, AgencyProfile } from '../../model/agency';
+import { AgencyService } from '../../service/agency.service';
+import { errorDetail } from '../../util/errors';
+import { StatusChipComponent } from '../billing/status_chip';
+import { AgencyStatusBannerComponent } from './agency_status_banner';
+
+@Component({
+  selector: 'sail-agency-clients',
+  changeDetection: ChangeDetectionStrategy.OnPush,
+  imports: [
+    ReactiveFormsModule,
+    MatButtonModule,
+    MatFormFieldModule,
+    MatIconModule,
+    MatInputModule,
+    MatProgressSpinnerModule,
+    StatusChipComponent,
+    AgencyStatusBannerComponent,
+  ],
+  templateUrl: './agency_clients.html',
+  host: { class: 'agency-clients' },
+})
+export class AgencyClientsComponent implements OnInit {
+  readonly extraColumns = input<AgencyClientColumn[]>([]);
+  readonly enrollmentTitle = input('Agency enrollment');
+  readonly enrollmentDescription = input('Apply to manage clients and receive referral commission.');
+  readonly enrollmentActionLabel = input('Apply');
+  readonly showBillingModelControls = input(false);
+
+  readonly enrolled = output<AgencyProfile>();
+  readonly clientAdded = output<AgencyClient>();
+  readonly invited = output<{ client: AgencyClient; inviteLink: string }>();
+  readonly cancelled = output<AgencyClient>();
+  readonly billingModelChanged = output<{ client: AgencyClient; billingModel: 'R' | 'W' }>();
+
+  private readonly agency = inject(AgencyService);
+  private readonly snack = inject(MatSnackBar);
+  private readonly formBuilder = inject(FormBuilder);
+
+  readonly loading = signal(true);
+  readonly errorMessage = signal('');
+  readonly needsEnrollment = signal(false);
+  readonly profile = signal<AgencyProfile | null>(null);
+  readonly clients = signal<AgencyClient[]>([]);
+  readonly activeClients = signal(0);
+  readonly inviteLinks = signal<Record<number, string>>({});
+  readonly canManage = computed(() => {
+    const profile = this.profile();
+    return profile !== null && Boolean(profile.approvedAt) && !profile.suspended;
+  });
+
+  readonly addForm = this.formBuilder.nonNullable.group({
+    name: ['', Validators.required],
+    email: ['', Validators.email],
+    website: [''],
+  });
+
+  ngOnInit(): void {
+    this.reload();
+  }
+
+  reload(afterProfileLoad?: (profile: AgencyProfile) => void): void {
+    this.loading.set(true);
+    this.errorMessage.set('');
+    this.agency.profile().subscribe({
+      next: ({ profile }) => {
+        this.profile.set(profile);
+        this.needsEnrollment.set(profile === null);
+        if (profile === null) {
+          this.clients.set([]);
+          this.activeClients.set(0);
+          this.loading.set(false);
+          return;
+        }
+        afterProfileLoad?.(profile);
+        this.loadClients();
+      },
+      error: (error: unknown) => {
+        this.loading.set(false);
+        this.errorMessage.set(errorDetail(error, 'Could not load the agency profile.'));
+      },
+    });
+  }
+
+  enroll(): void {
+    this.loading.set(true);
+    this.errorMessage.set('');
+    this.agency.enroll().subscribe({
+      next: () => this.reload((profile) => this.enrolled.emit(profile)),
+      error: (error: unknown) => {
+        this.loading.set(false);
+        this.errorMessage.set(errorDetail(error, 'Agency enrollment failed.'));
+      },
+    });
+  }
+
+  addClient(): void {
+    if (this.addForm.invalid || !this.canManage()) return;
+    const value = this.addForm.getRawValue();
+    this.agency.addClients([value]).subscribe({
+      next: () => {
+        this.addForm.reset();
+        this.loadClients((client) => this.clientAdded.emit(client));
+      },
+      error: (error: unknown) => this.snack.open(errorDetail(error, 'Could not add the client.'), 'Dismiss'),
+    });
+  }
+
+  invite(client: AgencyClient): void {
+    if (!this.canManage()) return;
+    this.agency.invite(client.id).subscribe({
+      next: ({ inviteLink }) => {
+        this.inviteLinks.update((links) => ({ ...links, [client.id]: inviteLink }));
+        this.invited.emit({ client, inviteLink });
+        this.copy(inviteLink);
+        this.loadClients();
+      },
+      error: (error: unknown) => this.snack.open(errorDetail(error, 'Could not create the invitation.'), 'Dismiss'),
+    });
+  }
+
+  cancel(client: AgencyClient): void {
+    if (!this.canManage()) return;
+    this.agency.cancel(client.id).subscribe({
+      next: () => {
+        this.cancelled.emit(client);
+        this.loadClients();
+      },
+      error: (error: unknown) => this.snack.open(errorDetail(error, 'Could not cancel the client.'), 'Dismiss'),
+    });
+  }
+
+  setBillingModel(client: AgencyClient, billingModel: 'R' | 'W'): void {
+    if (!this.canManage() || !client.clientPartnerId) return;
+    this.agency.setBillingModel(client.clientPartnerId, billingModel).subscribe({
+      next: () => {
+        this.billingModelChanged.emit({ client, billingModel });
+        this.loadClients();
+      },
+      error: (error: unknown) => this.snack.open(errorDetail(error, 'Could not change the billing model.'), 'Dismiss'),
+    });
+  }
+
+  copy(link: string): void {
+    if (!navigator.clipboard) {
+      this.snack.open(link, 'Dismiss');
+      return;
+    }
+    navigator.clipboard.writeText(link).then(
+      () => this.snack.open('Invitation link copied.', undefined, { duration: 2500 }),
+      () => this.snack.open(link, 'Dismiss'),
+    );
+  }
+
+  private loadClients(afterLoad?: (client: AgencyClient) => void): void {
+    this.agency.clients().subscribe({
+      next: ({ items, activeClients }) => {
+        const previousIDs = new Set(this.clients().map((client) => client.id));
+        const clients = items ?? [];
+        this.clients.set(clients);
+        this.activeClients.set(activeClients ?? 0);
+        this.loading.set(false);
+        if (afterLoad) {
+          const added = clients.find((client) => !previousIDs.has(client.id));
+          if (added) afterLoad(added);
+        }
+      },
+      error: (error: unknown) => {
+        this.loading.set(false);
+        this.errorMessage.set(errorDetail(error, 'Could not load agency clients.'));
+      },
+    });
+  }
+}

package/src/component/agency/agency_earnings_summary.html

@@ -0,0 +1,24 @@
+@if (earnings(); as value) {
+  <div class="agency-earnings-summary__metric">
+    <span class="agency-earnings-summary__label">Active clients</span>
+    <span class="agency-earnings-summary__value">{{ activeClients() }}</span>
+  </div>
+  <div class="agency-earnings-summary__metric">
+    <span class="agency-earnings-summary__label">Paying clients</span>
+    <span class="agency-earnings-summary__value">{{ value.payingClients }}</span>
+  </div>
+  @for (balance of value.balances; track balance.currency) {
+    <div class="agency-earnings-summary__metric" [attr.data-currency]="balance.currency">
+      <span class="agency-earnings-summary__label">Held ({{ balance.currency }})</span>
+      <span class="agency-earnings-summary__value">{{ format(balance.heldMinor, balance.currency) }}</span>
+    </div>
+    <div class="agency-earnings-summary__metric" [attr.data-currency]="balance.currency">
+      <span class="agency-earnings-summary__label">Due ({{ balance.currency }})</span>
+      <span class="agency-earnings-summary__value">{{ format(balance.dueMinor, balance.currency) }}</span>
+    </div>
+    <div class="agency-earnings-summary__metric" [attr.data-currency]="balance.currency">
+      <span class="agency-earnings-summary__label">Paid ({{ balance.currency }})</span>
+      <span class="agency-earnings-summary__value">{{ format(balance.paidMinor, balance.currency) }}</span>
+    </div>
+  }
+}

package/src/component/agency/agency_earnings_summary.ts

@@ -0,0 +1,15 @@
+import { ChangeDetectionStrategy, Component, input } from '@angular/core';
+import { AgencyEarnings } from '../../model/agency';
+import { formatMinorCurrency } from '../../util/money';
+
+@Component({
+  selector: 'sail-agency-earnings-summary',
+  changeDetection: ChangeDetectionStrategy.OnPush,
+  templateUrl: './agency_earnings_summary.html',
+  host: { class: 'agency-earnings-summary' },
+})
+export class AgencyEarningsSummaryComponent {
+  readonly earnings = input<AgencyEarnings | null>(null);
+  readonly activeClients = input(0);
+  readonly format = formatMinorCurrency;
+}

package/src/component/agency/agency_payout_history.html

@@ -0,0 +1,19 @@
+@if (payouts().length > 0) {
+  <div class="agency-payout-history__table-wrap">
+    <table class="agency-payout-history__table">
+      <thead><tr><th>Cycle</th><th>Amount</th><th>Status</th><th>Paid</th></tr></thead>
+      <tbody>
+        @for (payout of payouts(); track payout.id) {
+          <tr>
+            <td>{{ payout.cutoffAt | date: 'yyyy-MM':'UTC' }}</td>
+            <td>{{ format(payout.amountMinor, payout.currency) }}</td>
+            <td><sail-status-chip domain="agency_payout_status" [value]="payout.status" /></td>
+            <td>{{ payout.paidAt ? (payout.paidAt | date: 'mediumDate':'UTC') : '' }}</td>
+          </tr>
+        }
+      </tbody>
+    </table>
+  </div>
+} @else if (emptyMessage()) {
+  <p class="agency-payout-history__empty">{{ emptyMessage() }}</p>
+}

package/src/component/agency/agency_payout_history.ts

@@ -0,0 +1,18 @@
+import { DatePipe } from '@angular/common';
+import { ChangeDetectionStrategy, Component, input } from '@angular/core';
+import { AgencyPayout } from '../../model/agency';
+import { formatMinorCurrency } from '../../util/money';
+import { StatusChipComponent } from '../billing/status_chip';
+
+@Component({
+  selector: 'sail-agency-payout-history',
+  changeDetection: ChangeDetectionStrategy.OnPush,
+  imports: [DatePipe, StatusChipComponent],
+  templateUrl: './agency_payout_history.html',
+  host: { class: 'agency-payout-history' },
+})
+export class AgencyPayoutHistoryComponent {
+  readonly payouts = input<AgencyPayout[]>([]);
+  readonly emptyMessage = input('No agency payouts yet.');
+  readonly format = formatMinorCurrency;
+}