@acms-subir/core 0.2.0 → 0.3.1

package/src/pages/events/[slug].astro

@@ -0,0 +1,74 @@
+---
+import Site from '../../layouts/Site.astro';
+import EventPage from '../../components/EventPage.astro';
+import { getRepo } from '../../lib/repo';
+import { expandDynamicBlocks } from '../../lib/dynamicBlocks';
+import { highlightCodeHtml } from '../../lib/highlightCode';
+import { validateSession, SESSION_COOKIE } from '../../lib/auth';
+import { effectiveSettings } from '../../lib/designPreview';
+import { resolveDesign } from '../../lib/theme';
+import { siteOrigin } from '../../lib/seo';
+import { CALENDAR, eventUrl } from '../../lib/calendar/config';
+import { eventIsPublic, featuredOccurrence } from '../../lib/calendar/events';
+import { eventJsonLd } from '../../lib/calendar/seo';
+import { upcomingEvents } from '../../lib/calendar/cards';
+import { createRsvp, seatsTaken, BookingError } from '../../lib/booking/service';
+import { manageUrl } from '../../lib/calendar/config';
+import { waitUntilFrom } from '../../lib/webhooks';
+
+// Public event page. Drafts and private-calendar events 404 for visitors
+// (admins see them with a banner). ?on=YYYY-MM-DD shows one occurrence of a
+// repeating event — the calendar grid links carry it.
+if (!CALENDAR.enabled) return new Response(null, { status: 404, statusText: 'Not found' });
+const repo = await getRepo(Astro.locals);
+const event = await repo.getEventBySlug(Astro.params.slug ?? '');
+const [rawSettings, allCalendars] = await Promise.all([repo.getSettings(), repo.listCalendars()]);
+const calMap = new Map(allCalendars.map((c) => [c.id, c]));
+const isAdmin = (await validateSession(Astro.cookies.get(SESSION_COOKIE)?.value, Astro.locals));
+if (!event || (!eventIsPublic(event, calMap) && !isAdmin)) return new Response(null, { status: 404, statusText: 'Not found' });
+
+const settings = await effectiveSettings(rawSettings, Astro.url, Astro.cookies, Astro.locals);
+const now = Date.now();
+const on = Astro.url.searchParams.get('on') ?? undefined;
+const occurrence = featuredOccurrence(event, settings, now, on && /^\d{4}-\d{2}-\d{2}$/.test(on) ? on : undefined);
+if (!occurrence) return new Response(null, { status: 404, statusText: 'Not found' });
+const origin = siteOrigin(settings, Astro.url);
+// RSVP: "Save my seat" posts back here and lands on the manage page
+let rsvpError = '';
+if (Astro.request.method === 'POST' && event.rsvp.enabled && event.status === 'published') {
+  const form = await Astro.request.formData();
+  try {
+    const b = await createRsvp(repo, {
+      event, start: occurrence.start, end: occurrence.end, seats: Number(form.get('seats')) || 1,
+      booker: { name: String(form.get('name') ?? ''), email: String(form.get('email') ?? '') },
+    }, { origin, locals: Astro.locals, waitUntil: waitUntilFrom(Astro.locals) });
+    return Astro.redirect(`${manageUrl(b.manageToken)}?new=1`);
+  } catch (err) {
+    rsvpError = err instanceof BookingError ? err.message : 'Couldn’t save your RSVP. Please try again.';
+  }
+}
+const taken = event.rsvp.enabled ? await seatsTaken(repo, event.id, occurrence.start) : 0;
+const rsvp = event.rsvp.enabled
+  ? { going: taken, left: event.rsvp.capacity ? Math.max(0, event.rsvp.capacity - taken) : null, maxSeats: event.rsvp.maxSeats, error: rsvpError, open: occurrence.end > now && !event.cancelled }
+  : null;
+const calendars = event.calendarIds.map((id) => calMap.get(id)).filter((c): c is NonNullable<typeof c> => Boolean(c) && c!.visibility !== 'private');
+const html = highlightCodeHtml(await expandDynamicBlocks(event.bodyHtml, repo));
+const upcoming = (await upcomingEvents(repo, settings, now, { limit: 4 })).filter((u) => u.event.id !== event.id).slice(0, 3);
+const pageUrl = origin + eventUrl(event.slug);
+const jsonLd = eventJsonLd(event, occurrence, settings, origin, pageUrl);
+// eslint-disable-next-line @typescript-eslint/no-explicit-any
+const Template = resolveDesign(settings).theme.EventTemplate as any;
+const props = { event, occurrence, settings, calendars, html, upcoming, origin, preview: event.status !== 'published', rsvp };
+---
+
+<Site
+  title={event.seoTitle || event.title}
+  exactTitle={Boolean(event.seoTitle)}
+  description={event.seoDesc || event.excerpt || undefined}
+  image={event.cover || undefined}
+  imageAlt={event.coverAlt || undefined}
+  jsonLd={jsonLd}
+  noindex={event.status !== 'published'}
+>
+  {Template ? <Template {...props} /> : <EventPage {...props} />}
+</Site>

package/src/pages/events/[slug].ics.ts

@@ -0,0 +1,25 @@
+import type { APIRoute } from 'astro';
+import { getRepo } from '../../lib/repo';
+import { siteOrigin } from '../../lib/seo';
+import { CALENDAR, eventUrl } from '../../lib/calendar/config';
+import { eventIsPublic } from '../../lib/calendar/events';
+import { buildFeed } from '../../lib/calendar/ics-write';
+import { icsResponse } from '../../lib/calendar/feeds';
+
+// Single-event .ics behind "Add to calendar → Apple / Download". Served
+// inline so iPhones open it straight in Calendar.
+export const GET: APIRoute = async ({ locals, url, params }) => {
+  if (!CALENDAR.enabled) return new Response(null, { status: 404 });
+  const repo = await getRepo(locals);
+  const event = await repo.getEventBySlug(params.slug ?? '');
+  const calendars = await repo.listCalendars();
+  const map = new Map(calendars.map((c) => [c.id, c]));
+  if (!event || !eventIsPublic(event, map)) return new Response(null, { status: 404 });
+  const settings = await repo.getSettings();
+  const origin = siteOrigin(settings, url);
+  const body = buildFeed([event], settings.timezone, {
+    name: event.title, origin, host: new URL(origin).host, tz: settings.timezone || 'UTC',
+    eventUrl: (e) => eventUrl(e.slug), calendars: map, refreshMinutes: 1440,
+  });
+  return icsResponse(body, `${event.slug}.ics`);
+};

package/src/pages/index.astro

@@ -1,4 +1,5 @@
 ---
+import ThemeSections from '../components/ThemeSections.astro';
 import Site from '../layouts/Site.astro';
 import WidgetRenderer from '../components/WidgetRenderer.astro';
 import { getRepo } from '../lib/repo';
@@ -17,16 +18,22 @@ let [home, rawSettings] = await Promise.all([
   repo.getSettings(),
 ]);
 // ?designPreview=1 (admin-only) renders the staged Design-screen changes
-const settings = effectiveSettings(rawSettings, Astro.url, Astro.cookies);
+const settings = await effectiveSettings(rawSettings, Astro.url, Astro.cookies, Astro.locals);
 // a locale home that isn't authored yet falls back to the default home —
 // /es must never 404 mid-setup
 if (wantsLocaleHome && !home) home = await repo.getHomePage();
 
+// Live state must not survive in a cached page after its snapshot expires.
+if (settings.live.mode !== 'off' || home?.blocks.some(block => block.type === 'live') ||
+    (home && settings.sectionPages?.[home.id]?.sections.some(section => section.type === 'live'))) {
+  Astro.response.headers.set('Cache-Control', 'no-store');
+}
+
 // A theme may ship templates/home.astro — a coded homepage that wins over the
 // isHome content page unless the Design screen forces 'content'. The template
 // receives the page (its body renders as the hero) plus published posts/tags.
 const design = resolveDesign(settings);
-const HomeTemplate = design.homeMode !== 'content' ? (design.HomeTemplate as any) : null;
+const HomeTemplate = design.homeMode !== 'content' && (!home || settings.sectionPages?.[home.id]?.mode !== 'content') ? (design.HomeTemplate as any) : null;
 // theme homepages are blog-shaped — they receive the built-in collection only
 const [posts, tags] = HomeTemplate
   ? await Promise.all([repo.listPublishedPosts('posts'), repo.listTags()])
@@ -38,7 +45,9 @@ const homeForTemplate = home ? { ...home, bodyHtml: homeHtml } : null;
 ---
 
 <Site title={home?.seoTitle || undefined} description={home?.seoDesc || undefined}>
-  {HomeTemplate ? (
+  {home && settings.sectionPages?.[home.id]?.mode === 'sections' ? (
+    <ThemeSections page={home} settings={settings} />
+  ) : HomeTemplate ? (
     <HomeTemplate settings={settings} page={homeForTemplate} posts={posts} tags={tags} />
   ) : home ? (
     home.bodyHtml ? (

package/src/pages/legal/privacy.astro

@@ -0,0 +1,4 @@
+---
+import LegalPage from '../../components/LegalPage.astro';
+---
+<LegalPage policy="privacy" />

package/src/pages/legal/terms.astro

@@ -0,0 +1,4 @@
+---
+import LegalPage from '../../components/LegalPage.astro';
+---
+<LegalPage policy="terms" />

package/src/pages/links.astro

@@ -1,10 +1,20 @@
 ---
+import LiveCard from '../components/LiveCard.astro';
 import Site from '../layouts/Site.astro';
 import { getRepo } from '../lib/repo';
 import { cleanEventName } from '../lib/analytics';
+import { socialIconPath, socialIconSvg } from '../lib/socialIcons';
+import { effectiveNav } from '../lib/designPreview';
 
 const repo = await getRepo(Astro.locals);
-const [links, settings] = await Promise.all([repo.listLinks(), repo.getSettings()]);
+const [links, settings, liveNav] = await Promise.all([repo.listLinks(), repo.getSettings(), repo.listNavItems()]);
+if (links.some(link => link.kind === 'live')) Astro.response.headers.set('Cache-Control', 'no-store');
+// staged social links show up in design preview mode
+const navItems = await effectiveNav(liveNav, Astro.url, Astro.cookies, Astro.locals);
+// the site's social links (Navigation → Social) as an icon row under the bio
+const socials = navItems
+  .filter((n) => n.area === 'social')
+  .map((n) => ({ ...n, path: socialIconPath(n.url) }));
 
 // links page has its own identity; falls back to the site's until it's set
 const profileName = settings.linksName || settings.siteTitle;
@@ -71,8 +81,10 @@ function vcardHref(l: (typeof links)[number]): string {
   return `data:text/vcard;charset=utf-8,${encodeURIComponent(lines.join('\r\n'))}`;
 }
 
-// incomplete buttons (no destination yet) stay hidden on the public page
+// incomplete buttons (no destination yet) and blocks switched off in the
+// admin (meta.hidden) stay hidden on the public page
 const visible = links.filter((l) => {
+  if (l.meta?.hidden) return false;
   if (l.kind === 'link' || l.kind === 'email' || l.kind === 'phone') return Boolean(l.url.trim());
   if (l.kind === 'heading' || l.kind === 'text') return Boolean((l.kind === 'heading' ? l.label : l.html).trim());
   if (l.kind === 'html') return Boolean(l.html.trim());
@@ -85,6 +97,17 @@ const visible = links.filter((l) => {
     {settings.linksAvatar && <img class="links-avatar" src={settings.linksAvatar} alt={profileName} />}
     <h1>{profileName}</h1>
     {profileBio && <p class="tagline">{profileBio}</p>}
+    {socials.length > 0 && (
+      <nav class="social-nav" aria-label="Social">
+        {socials.map((n) => (
+          <a href={n.url} class:list={[{ 'has-icon': n.path }]} aria-label={n.path ? n.label : undefined} title={n.path ? n.label : undefined} target="_blank" rel="noopener me">
+            {n.path ? <Fragment set:html={socialIconSvg(n.path)} /> : n.label}
+          </a>
+        ))}
+      </nav>
+    )}
+    {/* while live, the Live block moves here from wherever it was placed */}
+    <span data-live-slot hidden></span>
     {visible.map((l) => {
       const ico = iconInfo(l);
       const icon =
@@ -93,6 +116,8 @@ const visible = links.filter((l) => {
         ico.type === 'emoji' ? <span class="link-ico link-ico-emoji">{ico.value}</span> :
         null;
       switch (l.kind) {
+        case 'live':
+          return <LiveCard compact />;
         case 'heading':
           return <h2 class="link-heading">{l.label}</h2>;
         case 'text':
@@ -111,6 +136,7 @@ const visible = links.filter((l) => {
           return <a class="link-btn" style={buttonStyle(l)} href={`/go/${l.id}`} rel="noopener" data-umami-event={linkEvent(l.label)}>{icon}<span class="link-label">{l.label}</span></a>;
       }
     })}
-    {visible.length === 0 && <p>No links yet.</p>}
+    {visible.length === 0 && <p class="muted-note">No links yet.</p>}
+    <p class="links-foot"><a href="/">{settings.siteTitle}</a></p>
   </div>
 </Site>

package/src/pages/llms.txt.ts

@@ -35,6 +35,10 @@ export const GET: APIRoute = async ({ locals, url }) => {
         .map((p) => `- [${p.title}](${origin}${collectionUrl(key, p.slug)})${p.excerpt ? `: ${p.excerpt}` : ''}`),
     ]),
     '',
+    '## Agent editing',
+    '',
+    `- [Agent API documentation](${origin}/api/agent/docs) — authenticated HTTP and MCP access; generate a key in admin settings.`,
+    '',
     '## Feeds',
     '',
     `- [RSS](${origin}/rss.xml)`,

package/src/pages/preview/[type]/[id].astro

@@ -6,17 +6,20 @@ import { renderMarkdown } from '../../../lib/markdown';
 import { verifyPreviewToken } from '../../../lib/preview';
 import { expandDynamicBlocks } from '../../../lib/dynamicBlocks';
 import { highlightCodeHtml } from '../../../lib/highlightCode';
-import { verifySessionToken, SESSION_COOKIE } from '../../../lib/auth';
-import { mergePageDraft, mergePostDraft } from '../../../lib/drafts';
+import { validateSession, SESSION_COOKIE } from '../../../lib/auth';
+import { mergeEventDraft, mergePageDraft, mergePostDraft } from '../../../lib/drafts';
+import EventPage from '../../../components/EventPage.astro';
+import { featuredOccurrence } from '../../../lib/calendar/events';
+import { siteOrigin } from '../../../lib/seo';
 
 // Draft preview, any status. Reachable by a logged-in admin (the editor's
 // preview iframe) or by anyone holding a signed share token. Live documents
 // with pending edits render the PENDING version — exactly what Update will
 // publish — while the public URL keeps serving the live one.
 const { type, id } = Astro.params;
-if (type !== 'post' && type !== 'page') return new Response(null, { status: 404 });
+if (type !== 'post' && type !== 'page' && type !== 'event') return new Response(null, { status: 404 });
 
-const isAdmin = verifySessionToken(Astro.cookies.get(SESSION_COOKIE)?.value);
+const isAdmin = (await validateSession(Astro.cookies.get(SESSION_COOKIE)?.value, Astro.locals));
 const token = Astro.url.searchParams.get('token') ?? undefined;
 if (!isAdmin && !verifyPreviewToken(type, id!, token)) {
   return new Response(null, { status: 404 });
@@ -25,7 +28,22 @@ if (!isAdmin && !verifyPreviewToken(type, id!, token)) {
 const repo = await getRepo(Astro.locals);
 const livePost = type === 'post' ? await repo.getPost(id!) : null;
 const livePage = type === 'page' ? await repo.getPage(id!) : null;
-if (!livePost && !livePage) return new Response(null, { status: 404 });
+const liveEvent = type === 'event' ? await repo.getEvent(id!) : null;
+if (!livePost && !livePage && !liveEvent) return new Response(null, { status: 404 });
+// events render through the real event page component, draft merged in
+const event = liveEvent ? mergeEventDraft(liveEvent) : null;
+const eventView = event
+  ? await (async () => {
+      const [settings, calendars] = await Promise.all([repo.getSettings(), repo.listCalendars()]);
+      const occurrence = featuredOccurrence(event, settings, Date.now());
+      return {
+        settings, occurrence,
+        calendars: event.calendarIds.map((cid) => calendars.find((c) => c.id === cid)).filter((c): c is NonNullable<typeof c> => Boolean(c)),
+        html: highlightCodeHtml(await expandDynamicBlocks(event.bodyHtml, repo)),
+        origin: siteOrigin(settings, Astro.url),
+      };
+    })()
+  : null;
 const post = livePost ? mergePostDraft(livePost) : null;
 const page = livePage ? mergePageDraft(livePage) : null;
 
@@ -35,7 +53,10 @@ const fmt = (ts: number | null) =>
   ts ? new Date(ts).toLocaleDateString('en-US', { year: 'numeric', month: 'long', day: 'numeric' }) : '';
 ---
 
-<Site title={post?.title ?? page?.seoTitle ?? page?.title}>
+<Site title={post?.title ?? event?.title ?? page?.seoTitle ?? page?.title}>
+  {event && eventView?.occurrence && (
+    <EventPage event={event} occurrence={eventView.occurrence} settings={eventView.settings} calendars={eventView.calendars} html={eventView.html} upcoming={[]} origin={eventView.origin} preview />
+  )}
   {post && (
     <article>
       <h1>{post.title}</h1>

package/src/pages/search.astro

@@ -6,6 +6,9 @@ import { collectionUrl, tagUrl } from '../lib/content';
 import { authorSlug } from '../lib/schema';
 import { I18N, localeFromPath, localeHomeUrl, normalizePageLocale } from '../lib/i18n';
 import { searchStrings } from '../lib/search-i18n';
+import { CALENDAR, eventUrl } from '../lib/calendar/config';
+import { eventIsPublic, featuredOccurrence, formatOccurrence } from '../lib/calendar/events';
+import { siteLocale } from '../lib/dates';
 
 // The no-JS search surface (the modal's form falls back here). Serves both
 // /search and the locale-prefixed /<locale>/search routes — the locale comes
@@ -20,8 +23,10 @@ const locale = normalizePageLocale(reqLocale);
 const t = searchStrings((reqLocale || siteLang(settings)).slice(0, 2));
 const results = q
   ? await repo.searchPublished(q, { locale })
-  : { posts: [], pages: [], tags: [], authors: [] };
-const total = results.posts.length + results.pages.length + results.tags.length + results.authors.length;
+  : { posts: [], pages: [], events: [], tags: [], authors: [] };
+const calMap = new Map((await repo.listCalendars()).map((c) => [c.id, c]));
+const events = CALENDAR.enabled ? results.events.filter(({ doc }) => eventIsPublic(doc, calMap)).slice(0, 10) : [];
+const total = results.posts.length + results.pages.length + events.length + results.tags.length + results.authors.length;
 ---
 
 <Site title={q ? `${t.label}: ${q}` : t.label} description={`${t.label} · ${settings.siteTitle}`} noindex={Boolean(q)}>
@@ -88,6 +93,26 @@ const total = results.posts.length + results.pages.length + results.tags.length
     </section>
   )}
 
+  {events.length > 0 && (
+    <section class="search-section">
+      <h2>{t.events}</h2>
+      <ul class="post-list">
+        {events.map(({ doc: e, snippet }) => {
+          const o = featuredOccurrence(e, settings, Date.now());
+          return (
+            <li class="post-item">
+              <div>
+                <a href={eventUrl(e.slug)}>{e.title}</a>
+                {o && <span class="search-loc">{formatOccurrence(o, settings.timezone || 'UTC', siteLocale(settings)).range}</span>}
+                {snippet && <p class="post-excerpt" set:html={snippet} />}
+              </div>
+            </li>
+          );
+        })}
+      </ul>
+    </section>
+  )}
+
   {results.tags.length > 0 && (
     <section class="search-section">
       <h2>{t.tags}</h2>
@@ -118,31 +143,26 @@ const total = results.posts.length + results.pages.length + results.tags.length
 </Site>
 
 <style>
-  .search-hero { margin: 24px 0 8px; }
-  .search-form { display: flex; gap: 10px; margin: 18px 0; }
-  .search-form input {
-    flex: 1; font: inherit; padding: 10px 14px; border: 1px solid var(--line);
-    border-radius: 9px; background: var(--panel); color: var(--ink);
-  }
-  .search-form input:focus { outline: 2px solid var(--accent); outline-offset: 1px; border-color: transparent; }
+  .search-hero { padding: calc(20px * var(--space)) 0 0; }
+  .search-hero h1 { font-size: clamp(34px, 5vw, 46px); margin: 0 0 18px; }
+  .search-form { display: flex; gap: 6px; padding: 5px; margin: 0 0 18px; background: var(--panel); border: 1px solid var(--line-2); border-radius: 14px; box-shadow: var(--sh-1); }
+  .search-form:focus-within { border-color: var(--accent); box-shadow: 0 0 0 3px var(--accent-soft); }
+  .search-form input { flex: 1; min-width: 0; font: inherit; padding: 0 12px; border: 0; background: none; color: var(--ink); outline: none; }
   .search-form button {
-    font: inherit; font-weight: 600; padding: 10px 20px; border: 0; border-radius: 9px;
-    background: var(--accent); color: #fff; cursor: pointer;
+    font: 550 15px/1 var(--font-body); height: 42px; padding: 0 18px; border: 0; border-radius: 10px;
+    background: var(--btn); color: var(--btn-ink); cursor: pointer;
   }
-  .search-count { color: var(--muted); }
-  .search-section h2 { font-size: 1.1rem; margin-top: 2rem; }
+  .search-count { color: var(--muted); font-size: 14.5px; margin: 0 0 8px; }
+  .search-section h2 { font-size: 13px; font-weight: 550; letter-spacing: 0; color: var(--muted); margin: 36px 0 4px; font-family: var(--font-body); }
+  .post-list :global(.post-excerpt) { color: var(--muted); font-size: 15px; margin: 4px 0 0; }
   /* snippets arrive pre-escaped with <mark> around matches (set:html), so
      the highlight style must reach into the injected fragment */
   .post-excerpt :global(mark) {
     background: color-mix(in srgb, var(--accent) 22%, transparent);
     color: inherit; border-radius: 3px; padding: 0 1px;
   }
-  .search-loc {
-    font-size: 11px; font-weight: 700; letter-spacing: 0.06em; color: var(--muted);
-    border: 1px solid var(--line); border-radius: 5px; padding: 1px 5px; margin-left: 8px;
-    vertical-align: 2px;
-  }
-  .search-tags { display: flex; flex-wrap: wrap; gap: 8px; margin-top: 10px; }
-  .search-tag-count { color: var(--muted); }
+  .search-loc { font-size: 12.5px; font-weight: 550; color: var(--muted); margin-left: 10px; }
+  .search-tags { display: flex; flex-wrap: wrap; gap: 8px 16px; margin-top: 12px; }
+  .search-tag-count { color: var(--muted); font-weight: 400; }
   .search-avatar { width: 44px; height: 44px; border-radius: 50%; object-fit: cover; flex: none; }
 </style>

package/src/pages/sitemap.xml.ts

@@ -3,18 +3,24 @@ import { getRepo } from '../lib/repo';
 import { isInternalTag } from '../lib/schema';
 import { siteOrigin, xmlEscape } from '../lib/seo';
 import { CONTENT, collectionUrl, tagUrl } from '../lib/content';
+import { CALENDAR, eventUrl, bookingsEnabled, resourceUrl } from '../lib/calendar/config';
+import { eventIsPublic } from '../lib/calendar/events';
 
 // DB-backed sitemap: content lives in D1/libSQL, so this is generated per
 // request instead of at build time. Draft/scheduled content never appears.
 
 export const GET: APIRoute = async ({ locals, url }) => {
   const repo = await getRepo(locals);
-  const [settings, pages, posts, tags] = await Promise.all([
+  const [settings, pages, posts, tags, events, calendars] = await Promise.all([
     repo.getSettings(),
     repo.listPages(),
     repo.listPublishedPosts(),
     repo.listTags(),
+    CALENDAR.enabled ? repo.listPublishedEvents() : Promise.resolve([]),
+    CALENDAR.enabled ? repo.listCalendars() : Promise.resolve([]),
   ]);
+  const calMap = new Map(calendars.map((c) => [c.id, c]));
+  const publicEvents = events.filter((e) => eventIsPublic(e, calMap));
   const origin = siteOrigin(settings, url);
 
   const usedTags = new Set(posts.flatMap((p) => p.tags.map((t) => t.toLowerCase())));
@@ -37,6 +43,15 @@ export const GET: APIRoute = async ({ locals, url }) => {
       .filter((t) => usedTags.has(t.name.toLowerCase()) && !isInternalTag(t.name))
       .map((t) => ({ loc: tagUrl(t.slug) })),
     { loc: '/links' },
+    ...(CALENDAR.enabled
+      ? [
+          { loc: CALENDAR.base, lastmod: Math.max(0, ...publicEvents.map((e) => e.updatedAt)) || undefined },
+          ...publicEvents.map((e) => ({ loc: eventUrl(e.slug), lastmod: e.updatedAt })),
+        ]
+      : []),
+    ...(bookingsEnabled()
+      ? [{ loc: CALENDAR.bookBase }, ...(await repo.listResources()).filter((r) => r.visibility === 'public').map((r) => ({ loc: resourceUrl(r.slug), lastmod: r.updatedAt }))]
+      : []),
   ];
 
   const xml = `<?xml version="1.0" encoding="UTF-8"?>