@agent-native/scheduling 0.1.1

package/dist/server/video-oauth-state.js

@@ -0,0 +1,101 @@
+/**
+ * HMAC-signed state for video conferencing OAuth flows.
+ *
+ * The `state` value sent to the OAuth provider must round-trip back to our
+ * callback verbatim. We use HMAC-SHA256 to bind the state to the kind +
+ * authenticated user email + a server secret + a freshness timestamp.
+ * The callback re-derives the HMAC and rejects mismatches — this prevents
+ * an attacker from forging a callback for someone else's account or
+ * replaying an old completed flow.
+ *
+ * Output format:
+ *   <random-nonce>.<timestamp>.<kind>.<base64url-hmac>
+ *
+ * The nonce keeps every issued state distinct even if the same user
+ * starts two parallel OAuth flows for the same provider. The timestamp
+ * lets us bound replay attempts (default: 10 minutes).
+ */
+import crypto from "node:crypto";
+const SEPARATOR = ".";
+const STATE_TTL_MS = 10 * 60 * 1000; // 10 minutes
+function getStateSecret() {
+    const secret = process.env.SCHEDULING_OAUTH_STATE_SECRET ||
+        process.env.BETTER_AUTH_SECRET ||
+        process.env.AUTH_SECRET;
+    if (!secret) {
+        throw new Error("OAuth state secret is not configured. Set BETTER_AUTH_SECRET (or SCHEDULING_OAUTH_STATE_SECRET).");
+    }
+    return secret;
+}
+function b64url(buf) {
+    return buf
+        .toString("base64")
+        .replace(/=+$/, "")
+        .replace(/\+/g, "-")
+        .replace(/\//g, "_");
+}
+function hmac(message, secret) {
+    return b64url(crypto.createHmac("sha256", secret).update(message).digest());
+}
+function safeFragment(value) {
+    // The encoded payload uses dots as separators, so any literal dot in the
+    // user email would corrupt parsing. Replace dots and any non-printable
+    // characters before signing.
+    return value.replace(/[^A-Za-z0-9_@-]/g, "_");
+}
+/**
+ * Mint a fresh signed state value bound to the current authenticated user
+ * and the requested OAuth `kind`.
+ */
+export function signVideoOAuthState(opts) {
+    const nonce = crypto.randomBytes(12).toString("hex");
+    const timestamp = Date.now().toString(36);
+    const safeKind = safeFragment(opts.kind);
+    const safeEmail = safeFragment(opts.userEmail.toLowerCase());
+    const message = [nonce, timestamp, safeKind, safeEmail].join(SEPARATOR);
+    const sig = hmac(message, getStateSecret());
+    return [nonce, timestamp, safeKind, sig].join(SEPARATOR);
+}
+/**
+ * Verify a state value returned from the OAuth provider matches one
+ * minted by `signVideoOAuthState` for the same authenticated user.
+ *
+ * Returns `true` only when:
+ *   1. The state has the expected shape
+ *   2. The HMAC matches (kind + user-email + secret)
+ *   3. The state is not older than STATE_TTL_MS
+ *
+ * Uses `crypto.timingSafeEqual` to prevent timing-based recovery of the
+ * signature.
+ */
+export function verifyVideoOAuthState(opts) {
+    if (!opts.state || typeof opts.state !== "string")
+        return false;
+    const parts = opts.state.split(SEPARATOR);
+    if (parts.length !== 4)
+        return false;
+    const [nonce, timestamp, kindFragment, providedSig] = parts;
+    if (!nonce || !timestamp || !kindFragment || !providedSig)
+        return false;
+    const expectedKind = safeFragment(opts.kind);
+    if (kindFragment !== expectedKind)
+        return false;
+    const safeEmail = safeFragment(opts.userEmail.toLowerCase());
+    const message = [nonce, timestamp, kindFragment, safeEmail].join(SEPARATOR);
+    const expectedSig = hmac(message, getStateSecret());
+    const a = Buffer.from(providedSig);
+    const b = Buffer.from(expectedSig);
+    if (a.length !== b.length)
+        return false;
+    if (!crypto.timingSafeEqual(a, b))
+        return false;
+    // Freshness check.
+    const ttl = opts.ttlMs ?? STATE_TTL_MS;
+    const issuedAt = Number.parseInt(timestamp, 36);
+    if (!Number.isFinite(issuedAt))
+        return false;
+    if (Date.now() - issuedAt > ttl)
+        return false;
+    return true;
+}
+//# sourceMappingURL=video-oauth-state.js.map

package/dist/server/video-oauth-state.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"video-oauth-state.js","sourceRoot":"","sources":["../../src/server/video-oauth-state.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AACH,OAAO,MAAM,MAAM,aAAa,CAAC;AAEjC,MAAM,SAAS,GAAG,GAAG,CAAC;AACtB,MAAM,YAAY,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,aAAa;AAElD,SAAS,cAAc;IACrB,MAAM,MAAM,GACV,OAAO,CAAC,GAAG,CAAC,6BAA6B;QACzC,OAAO,CAAC,GAAG,CAAC,kBAAkB;QAC9B,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC;IAC1B,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CACb,kGAAkG,CACnG,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,MAAM,CAAC,GAAW;IACzB,OAAO,GAAG;SACP,QAAQ,CAAC,QAAQ,CAAC;SAClB,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;SAClB,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;SACnB,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;AACzB,CAAC;AAED,SAAS,IAAI,CAAC,OAAe,EAAE,MAAc;IAC3C,OAAO,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,YAAY,CAAC,KAAa;IACjC,yEAAyE;IACzE,uEAAuE;IACvE,6BAA6B;IAC7B,OAAO,KAAK,CAAC,OAAO,CAAC,kBAAkB,EAAE,GAAG,CAAC,CAAC;AAChD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAGnC;IACC,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACrD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IAC1C,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACzC,MAAM,SAAS,GAAG,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC,CAAC;IAC7D,MAAM,OAAO,GAAG,CAAC,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACxE,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,EAAE,cAAc,EAAE,CAAC,CAAC;IAC5C,OAAO,CAAC,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;AAC3D,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,qBAAqB,CAAC,IAMrC;IACC,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAChE,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAC1C,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACrC,MAAM,CAAC,KAAK,EAAE,SAAS,EAAE,YAAY,EAAE,WAAW,CAAC,GAAG,KAAK,CAAC;IAC5D,IAAI,CAAC,KAAK,IAAI,CAAC,SAAS,IAAI,CAAC,YAAY,IAAI,CAAC,WAAW;QAAE,OAAO,KAAK,CAAC;IAExE,MAAM,YAAY,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC7C,IAAI,YAAY,KAAK,YAAY;QAAE,OAAO,KAAK,CAAC;IAEhD,MAAM,SAAS,GAAG,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC,CAAC;IAC7D,MAAM,OAAO,GAAG,CAAC,KAAK,EAAE,SAAS,EAAE,YAAY,EAAE,SAAS,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC5E,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,EAAE,cAAc,EAAE,CAAC,CAAC;IAEpD,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACnC,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACnC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IACxC,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,EAAE,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAEhD,mBAAmB;IACnB,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,IAAI,YAAY,CAAC;IACvC,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;IAChD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,OAAO,KAAK,CAAC;IAC7C,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,GAAG,GAAG;QAAE,OAAO,KAAK,CAAC;IAE9C,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/server/video-oauth.d.ts

@@ -0,0 +1,18 @@
+export interface CompleteVideoOAuthResult {
+    credentialId: string;
+    kind: string;
+    externalEmail?: string;
+    externalAccountId: string;
+    displayName?: string;
+}
+/**
+ * Complete a video-provider OAuth callback. Throws on any failure so the
+ * caller can decide how to render the error (HTML page, JSON, redirect).
+ */
+export declare function completeVideoOAuth(opts: {
+    kind: string;
+    userEmail: string;
+    code: string;
+    redirectUri: string;
+}): Promise<CompleteVideoOAuthResult>;
+//# sourceMappingURL=video-oauth.d.ts.map

package/dist/server/video-oauth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"video-oauth.d.ts","sourceRoot":"","sources":["../../src/server/video-oauth.ts"],"names":[],"mappings":"AAoBA,MAAM,WAAW,wBAAwB;IACvC,YAAY,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;;GAGG;AACH,wBAAsB,kBAAkB,CAAC,IAAI,EAAE;IAC7C,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;CACrB,GAAG,OAAO,CAAC,wBAAwB,CAAC,CA6DpC"}

package/dist/server/video-oauth.js

@@ -0,0 +1,82 @@
+/**
+ * Server-side helper for completing video conferencing OAuth callbacks.
+ *
+ * Templates mount this under `/_agent-native/oauth/<kind>/callback.get.ts`
+ * and forward the h3 event. The helper:
+ *   1. Looks up the video provider by kind
+ *   2. Allocates a `scheduling_credentials` row (so `credentialId` is stable)
+ *   3. Calls the provider's `completeOAuth` (tokens get persisted via the
+ *      provider's `updateTokens` callback, typically against core's
+ *      `oauth_tokens` table, keyed by `credentialId`)
+ *   4. Updates the credential row with display metadata
+ *
+ * It is intentionally agnostic to the consumer's auth/session plumbing —
+ * pass in `userEmail` explicitly.
+ */
+import { nanoid } from "nanoid";
+import { eq } from "drizzle-orm";
+import { getSchedulingContext } from "./context.js";
+import { getVideoProvider } from "./providers/registry.js";
+/**
+ * Complete a video-provider OAuth callback. Throws on any failure so the
+ * caller can decide how to render the error (HTML page, JSON, redirect).
+ */
+export async function completeVideoOAuth(opts) {
+    const { kind, userEmail, code, redirectUri } = opts;
+    const provider = getVideoProvider(kind);
+    if (!provider) {
+        throw new Error(`No video provider registered for ${kind}`);
+    }
+    if (!provider.completeOAuth) {
+        throw new Error(`Video provider ${kind} does not support OAuth`);
+    }
+    const { getDb, schema } = getSchedulingContext();
+    const now = new Date().toISOString();
+    const credentialId = nanoid();
+    // Insert row up-front so `updateTokens(credentialId, ...)` inside
+    // completeOAuth has a stable key to write against.
+    await getDb().insert(schema.schedulingCredentials).values({
+        id: credentialId,
+        type: kind,
+        userEmail,
+        appId: kind,
+        oauthTokenId: credentialId,
+        isDefault: false,
+        invalid: false,
+        createdAt: now,
+        updatedAt: now,
+    });
+    let result;
+    try {
+        result = await provider.completeOAuth({
+            credentialId,
+            userEmail,
+            code,
+            redirectUri,
+        });
+    }
+    catch (err) {
+        // Roll back the credentials row on failure.
+        await getDb()
+            .delete(schema.schedulingCredentials)
+            .where(eq(schema.schedulingCredentials.id, credentialId));
+        throw err;
+    }
+    // Update the credential row with external identity metadata.
+    await getDb()
+        .update(schema.schedulingCredentials)
+        .set({
+        externalEmail: result.externalEmail ?? null,
+        displayName: result.displayName ?? null,
+        updatedAt: new Date().toISOString(),
+    })
+        .where(eq(schema.schedulingCredentials.id, credentialId));
+    return {
+        credentialId,
+        kind,
+        externalEmail: result.externalEmail,
+        externalAccountId: result.externalAccountId,
+        displayName: result.displayName,
+    };
+}
+//# sourceMappingURL=video-oauth.js.map

package/dist/server/video-oauth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"video-oauth.js","sourceRoot":"","sources":["../../src/server/video-oauth.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAChC,OAAO,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AACpD,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAU3D;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,IAKxC;IACC,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,WAAW,EAAE,GAAG,IAAI,CAAC;IACpD,MAAM,QAAQ,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;IACxC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CAAC,oCAAoC,IAAI,EAAE,CAAC,CAAC;IAC9D,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,aAAa,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,kBAAkB,IAAI,yBAAyB,CAAC,CAAC;IACnE,CAAC;IAED,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,oBAAoB,EAAE,CAAC;IACjD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACrC,MAAM,YAAY,GAAG,MAAM,EAAE,CAAC;IAE9B,kEAAkE;IAClE,mDAAmD;IACnD,MAAM,KAAK,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC,MAAM,CAAC;QACxD,EAAE,EAAE,YAAY;QAChB,IAAI,EAAE,IAAI;QACV,SAAS;QACT,KAAK,EAAE,IAAI;QACX,YAAY,EAAE,YAAY;QAC1B,SAAS,EAAE,KAAK;QAChB,OAAO,EAAE,KAAK;QACd,SAAS,EAAE,GAAG;QACd,SAAS,EAAE,GAAG;KACf,CAAC,CAAC;IAEH,IAAI,MAAuE,CAAC;IAC5E,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,QAAQ,CAAC,aAAa,CAAC;YACpC,YAAY;YACZ,SAAS;YACT,IAAI;YACJ,WAAW;SACZ,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,4CAA4C;QAC5C,MAAM,KAAK,EAAE;aACV,MAAM,CAAC,MAAM,CAAC,qBAAqB,CAAC;aACpC,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,qBAAqB,CAAC,EAAE,EAAE,YAAY,CAAC,CAAC,CAAC;QAC5D,MAAM,GAAG,CAAC;IACZ,CAAC;IAED,6DAA6D;IAC7D,MAAM,KAAK,EAAE;SACV,MAAM,CAAC,MAAM,CAAC,qBAAqB,CAAC;SACpC,GAAG,CAAC;QACH,aAAa,EAAE,MAAM,CAAC,aAAa,IAAI,IAAI;QAC3C,WAAW,EAAE,MAAM,CAAC,WAAW,IAAI,IAAI;QACvC,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACpC,CAAC;SACD,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,qBAAqB,CAAC,EAAE,EAAE,YAAY,CAAC,CAAC,CAAC;IAE5D,OAAO;QACL,YAAY;QACZ,IAAI;QACJ,aAAa,EAAE,MAAM,CAAC,aAAa;QACnC,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;QAC3C,WAAW,EAAE,MAAM,CAAC,WAAW;KAChC,CAAC;AACJ,CAAC"}

package/dist/shared/index.d.ts

@@ -0,0 +1,298 @@
+/**
+ * Wire-level types shared between server, actions, and React client.
+ * These are the primary stable contract of the package.
+ */
+export type SchedulingType = "personal" | "collective" | "round-robin" | "managed";
+export type BookingStatus = "pending" | "confirmed" | "cancelled" | "rejected" | "rescheduled";
+export type LocationKind = "builtin-video" | "zoom" | "google-meet" | "teams" | "phone" | "in-person" | "custom-link" | "attendee-phone" | "organizer-phone" | "attendee-choice";
+export interface Location {
+    kind: LocationKind;
+    /** Provider credential id, if applicable */
+    credentialId?: string;
+    /** Meeting link override */
+    link?: string;
+    /** Street address for in-person */
+    address?: string;
+    /** Phone number for phone/organizer-phone */
+    phone?: string;
+    /** Display name shown in booking UI */
+    label?: string;
+}
+export type PeriodType = "unlimited" | "rolling" | "range";
+export interface BookingLimits {
+    /** Max bookings in one day */
+    perDay?: number;
+    /** Max bookings in one week (starting on user's configured start of week) */
+    perWeek?: number;
+    /** Max bookings in one month */
+    perMonth?: number;
+    /** Max bookings in one year */
+    perYear?: number;
+}
+export interface CustomField {
+    id: string;
+    type: "text" | "textarea" | "number" | "email" | "phone" | "select" | "multiselect" | "boolean" | "radio";
+    label: string;
+    placeholder?: string;
+    required: boolean;
+    options?: string[];
+    /** Default/preset value for this field */
+    defaultValue?: string | number | boolean;
+    /** Internal identifier stored on booking responses */
+    name: string;
+}
+export interface RecurringEventRule {
+    /** iCal RRULE format, e.g. "FREQ=WEEKLY;COUNT=4" */
+    rrule: string;
+    /** Max number of occurrences */
+    count?: number;
+    /** How occurrences are labeled on the booker ("Weekly for 4 weeks") */
+    description?: string;
+}
+export interface EventType {
+    id: string;
+    title: string;
+    slug: string;
+    description?: string;
+    length: number;
+    /** Optional additional duration choices */
+    durations?: number[];
+    hidden: boolean;
+    position: number;
+    schedulingType: SchedulingType;
+    /** If personal, the owner; if team, null (team event types) */
+    ownerEmail?: string;
+    teamId?: string;
+    /** Default schedule ID if not set at event level */
+    scheduleId?: string;
+    locations: Location[];
+    customFields: CustomField[];
+    minimumBookingNotice: number;
+    beforeEventBuffer: number;
+    afterEventBuffer: number;
+    slotInterval: number | null;
+    periodType: PeriodType;
+    periodDays?: number;
+    periodStartDate?: string;
+    periodEndDate?: string;
+    seatsPerTimeSlot?: number;
+    requiresConfirmation: boolean;
+    disableGuests: boolean;
+    hideCalendarNotes: boolean;
+    successRedirectUrl?: string;
+    bookingLimits?: BookingLimits;
+    lockTimeZoneToggle: boolean;
+    color?: string;
+    eventName?: string;
+    recurringEvent?: RecurringEventRule;
+    metadata?: Record<string, any>;
+    createdAt: string;
+    updatedAt: string;
+}
+export interface Slot {
+    /** ISO 8601 start time in UTC */
+    start: string;
+    /** ISO 8601 end time in UTC */
+    end: string;
+    /** True if this slot can still be booked (not full for seated events) */
+    available: boolean;
+    /** Seats remaining, for seated events */
+    seatsRemaining?: number;
+    /** Assigned host for round-robin events (email) */
+    hostEmail?: string;
+}
+export interface AvailabilityInterval {
+    /** "HH:MM" in schedule's timezone */
+    startTime: string;
+    /** "HH:MM" in schedule's timezone */
+    endTime: string;
+}
+export interface WeeklyAvailability {
+    /** 0=Sunday … 6=Saturday, ISO-like */
+    day: number;
+    intervals: AvailabilityInterval[];
+}
+export interface DateOverride {
+    /** YYYY-MM-DD in schedule's timezone */
+    date: string;
+    /** Empty array = fully blocked */
+    intervals: AvailabilityInterval[];
+}
+export interface Schedule {
+    id: string;
+    name: string;
+    timezone: string;
+    ownerEmail: string;
+    weeklyAvailability: WeeklyAvailability[];
+    dateOverrides: DateOverride[];
+    isDefault: boolean;
+    createdAt: string;
+    updatedAt: string;
+}
+export interface Attendee {
+    email: string;
+    name: string;
+    timezone?: string;
+    locale?: string;
+    noShow?: boolean;
+}
+export interface BookingReference {
+    type: string;
+    externalId: string;
+    meetingUrl?: string;
+    meetingPassword?: string;
+    credentialId?: string;
+}
+export interface Booking {
+    id: string;
+    uid: string;
+    eventTypeId: string;
+    hostEmail: string;
+    title: string;
+    description?: string;
+    startTime: string;
+    endTime: string;
+    timezone: string;
+    status: BookingStatus;
+    location?: Location;
+    attendees: Attendee[];
+    references: BookingReference[];
+    customResponses?: Record<string, any>;
+    cancellationReason?: string;
+    reschedulingReason?: string;
+    cancelToken?: string;
+    rescheduleToken?: string;
+    fromReschedule?: string;
+    iCalUid: string;
+    iCalSequence: number;
+    recurringEventId?: string;
+    paid?: boolean;
+    metadata?: Record<string, any>;
+    createdAt: string;
+    updatedAt: string;
+}
+export interface Host {
+    userEmail: string;
+    eventTypeId: string;
+    scheduleId?: string;
+    isFixed: boolean;
+    weight: number;
+    priority: number;
+}
+export interface BusyInterval {
+    /** ISO 8601 UTC */
+    start: string;
+    /** ISO 8601 UTC */
+    end: string;
+    source?: string;
+}
+export interface Team {
+    id: string;
+    slug: string;
+    name: string;
+    logoUrl?: string;
+    brandColor?: string;
+    darkBrandColor?: string;
+    bio?: string;
+    hideBranding: boolean;
+    metadata?: Record<string, any>;
+    createdAt: string;
+    updatedAt: string;
+}
+export type TeamRole = "owner" | "admin" | "member";
+export interface TeamMember {
+    teamId: string;
+    userEmail: string;
+    role: TeamRole;
+    accepted: boolean;
+    joinedAt?: string;
+}
+export type WorkflowTrigger = "new-booking" | "before-event" | "after-event" | "reschedule" | "cancellation" | "no-show";
+export type WorkflowStepAction = "email-host" | "email-attendee" | "email-address" | "sms-attendee" | "sms-host" | "sms-number" | "webhook";
+export interface WorkflowStep {
+    id: string;
+    order: number;
+    action: WorkflowStepAction;
+    /** Minutes from trigger; negative = before (for before-event), positive = after */
+    offsetMinutes: number;
+    sendTo?: string;
+    emailSubject?: string;
+    emailBody?: string;
+    smsBody?: string;
+    webhookUrl?: string;
+    template?: string;
+}
+export interface Workflow {
+    id: string;
+    name: string;
+    trigger: WorkflowTrigger;
+    ownerEmail?: string;
+    teamId?: string;
+    activeOnEventTypeIds: string[];
+    steps: WorkflowStep[];
+    disabled: boolean;
+    createdAt: string;
+    updatedAt: string;
+}
+export type RoutingFormFieldType = "text" | "email" | "phone" | "number" | "select" | "multi";
+export interface RoutingFormField {
+    id: string;
+    name: string;
+    label: string;
+    type: RoutingFormFieldType;
+    required: boolean;
+    options?: string[];
+}
+export interface RoutingFormRule {
+    id: string;
+    /** Array of `{fieldId, op, value}` expressions ANDed together */
+    conditions: {
+        fieldId: string;
+        op: "equals" | "not-equals" | "contains" | "starts-with" | "in";
+        value: string | string[];
+    }[];
+    action: {
+        kind: "event-type";
+        eventTypeId: string;
+        teamId?: string;
+    } | {
+        kind: "external-url";
+        url: string;
+    } | {
+        kind: "custom-message";
+        message: string;
+    };
+}
+export interface RoutingForm {
+    id: string;
+    name: string;
+    description?: string;
+    ownerEmail?: string;
+    teamId?: string;
+    fields: RoutingFormField[];
+    rules: RoutingFormRule[];
+    /** Action taken when no rules match */
+    fallback: {
+        kind: "event-type";
+        eventTypeId: string;
+    } | {
+        kind: "external-url";
+        url: string;
+    } | {
+        kind: "custom-message";
+        message: string;
+    };
+    createdAt: string;
+    updatedAt: string;
+}
+export interface HashedLink {
+    id: string;
+    hash: string;
+    eventTypeId: string;
+    expiresAt?: string;
+    isSingleUse: boolean;
+    usedAt?: string;
+}
+/** Round-robin assignment strategy */
+export type RoundRobinStrategy = "lowest-recent-bookings" | "weighted" | "calibrated";
+//# sourceMappingURL=index.d.ts.map

package/dist/shared/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/shared/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,MAAM,MAAM,cAAc,GACtB,UAAU,GACV,YAAY,GACZ,aAAa,GACb,SAAS,CAAC;AAEd,MAAM,MAAM,aAAa,GACrB,SAAS,GACT,WAAW,GACX,WAAW,GACX,UAAU,GACV,aAAa,CAAC;AAElB,MAAM,MAAM,YAAY,GACpB,eAAe,GACf,MAAM,GACN,aAAa,GACb,OAAO,GACP,OAAO,GACP,WAAW,GACX,aAAa,GACb,gBAAgB,GAChB,iBAAiB,GACjB,iBAAiB,CAAC;AAEtB,MAAM,WAAW,QAAQ;IACvB,IAAI,EAAE,YAAY,CAAC;IACnB,4CAA4C;IAC5C,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,4BAA4B;IAC5B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,mCAAmC;IACnC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,6CAA6C;IAC7C,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,uCAAuC;IACvC,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,MAAM,UAAU,GAAG,WAAW,GAAG,SAAS,GAAG,OAAO,CAAC;AAE3D,MAAM,WAAW,aAAa;IAC5B,8BAA8B;IAC9B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,6EAA6E;IAC7E,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,gCAAgC;IAChC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,+BAA+B;IAC/B,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EACA,MAAM,GACN,UAAU,GACV,QAAQ,GACR,OAAO,GACP,OAAO,GACP,QAAQ,GACR,aAAa,GACb,SAAS,GACT,OAAO,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,OAAO,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,0CAA0C;IAC1C,YAAY,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC;IACzC,sDAAsD;IACtD,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,kBAAkB;IACjC,oDAAoD;IACpD,KAAK,EAAE,MAAM,CAAC;IACd,gCAAgC;IAChC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,uEAAuE;IACvE,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,SAAS;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,2CAA2C;IAC3C,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IACrB,MAAM,EAAE,OAAO,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,cAAc,EAAE,cAAc,CAAC;IAC/B,+DAA+D;IAC/D,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,oDAAoD;IACpD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,QAAQ,EAAE,CAAC;IACtB,YAAY,EAAE,WAAW,EAAE,CAAC;IAC5B,oBAAoB,EAAE,MAAM,CAAC;IAC7B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,gBAAgB,EAAE,MAAM,CAAC;IACzB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,UAAU,EAAE,UAAU,CAAC;IACvB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,oBAAoB,EAAE,OAAO,CAAC;IAC9B,aAAa,EAAE,OAAO,CAAC;IACvB,iBAAiB,EAAE,OAAO,CAAC;IAC3B,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B,kBAAkB,EAAE,OAAO,CAAC;IAC5B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,cAAc,CAAC,EAAE,kBAAkB,CAAC;IACpC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,IAAI;IACnB,iCAAiC;IACjC,KAAK,EAAE,MAAM,CAAC;IACd,+BAA+B;IAC/B,GAAG,EAAE,MAAM,CAAC;IACZ,yEAAyE;IACzE,SAAS,EAAE,OAAO,CAAC;IACnB,yCAAyC;IACzC,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,mDAAmD;IACnD,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,oBAAoB;IACnC,qCAAqC;IACrC,SAAS,EAAE,MAAM,CAAC;IAClB,qCAAqC;IACrC,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,kBAAkB;IACjC,sCAAsC;IACtC,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,EAAE,oBAAoB,EAAE,CAAC;CACnC;AAED,MAAM,WAAW,YAAY;IAC3B,wCAAwC;IACxC,IAAI,EAAE,MAAM,CAAC;IACb,kCAAkC;IAClC,SAAS,EAAE,oBAAoB,EAAE,CAAC;CACnC;AAED,MAAM,WAAW,QAAQ;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,kBAAkB,EAAE,kBAAkB,EAAE,CAAC;IACzC,aAAa,EAAE,YAAY,EAAE,CAAC;IAC9B,SAAS,EAAE,OAAO,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,QAAQ;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,OAAO;IACtB,EAAE,EAAE,MAAM,CAAC;IACX,GAAG,EAAE,MAAM,CAAC;IACZ,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,aAAa,CAAC;IACtB,QAAQ,CAAC,EAAE,QAAQ,CAAC;IACpB,SAAS,EAAE,QAAQ,EAAE,CAAC;IACtB,UAAU,EAAE,gBAAgB,EAAE,CAAC;IAC/B,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACtC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,MAAM,CAAC;IACrB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,IAAI;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,YAAY;IAC3B,mBAAmB;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,mBAAmB;IACnB,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,IAAI;IACnB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,OAAO,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,MAAM,QAAQ,GAAG,OAAO,GAAG,OAAO,GAAG,QAAQ,CAAC;AAEpD,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,QAAQ,CAAC;IACf,QAAQ,EAAE,OAAO,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,MAAM,eAAe,GACvB,aAAa,GACb,cAAc,GACd,aAAa,GACb,YAAY,GACZ,cAAc,GACd,SAAS,CAAC;AAEd,MAAM,MAAM,kBAAkB,GAC1B,YAAY,GACZ,gBAAgB,GAChB,eAAe,GACf,cAAc,GACd,UAAU,GACV,YAAY,GACZ,SAAS,CAAC;AAEd,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,kBAAkB,CAAC;IAC3B,mFAAmF;IACnF,aAAa,EAAE,MAAM,CAAC;IACtB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,QAAQ;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,eAAe,CAAC;IACzB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,oBAAoB,EAAE,MAAM,EAAE,CAAC;IAC/B,KAAK,EAAE,YAAY,EAAE,CAAC;IACtB,QAAQ,EAAE,OAAO,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,MAAM,oBAAoB,GAC5B,MAAM,GACN,OAAO,GACP,OAAO,GACP,QAAQ,GACR,QAAQ,GACR,OAAO,CAAC;AAEZ,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,oBAAoB,CAAC;IAC3B,QAAQ,EAAE,OAAO,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;CACpB;AAED,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,iEAAiE;IACjE,UAAU,EAAE;QACV,OAAO,EAAE,MAAM,CAAC;QAChB,EAAE,EAAE,QAAQ,GAAG,YAAY,GAAG,UAAU,GAAG,aAAa,GAAG,IAAI,CAAC;QAChE,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;KAC1B,EAAE,CAAC;IACJ,MAAM,EACF;QAAE,IAAI,EAAE,YAAY,CAAC;QAAC,WAAW,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,GAC5D;QAAE,IAAI,EAAE,cAAc,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,GACrC;QAAE,IAAI,EAAE,gBAAgB,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;CACjD;AAED,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,gBAAgB,EAAE,CAAC;IAC3B,KAAK,EAAE,eAAe,EAAE,CAAC;IACzB,uCAAuC;IACvC,QAAQ,EACJ;QAAE,IAAI,EAAE,YAAY,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,GAC3C;QAAE,IAAI,EAAE,cAAc,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,GACrC;QAAE,IAAI,EAAE,gBAAgB,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAChD,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,OAAO,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,sCAAsC;AACtC,MAAM,MAAM,kBAAkB,GAC1B,wBAAwB,GACxB,UAAU,GACV,YAAY,CAAC"}

package/dist/shared/index.js

@@ -0,0 +1,6 @@
+/**
+ * Wire-level types shared between server, actions, and React client.
+ * These are the primary stable contract of the package.
+ */
+export {};
+//# sourceMappingURL=index.js.map

package/dist/shared/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/shared/index.ts"],"names":[],"mappings":"AAAA;;;GAGG"}

package/dist/version.d.ts

@@ -0,0 +1,2 @@
+export declare const VERSION = "0.1.0";
+//# sourceMappingURL=version.d.ts.map

package/dist/version.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.d.ts","sourceRoot":"","sources":["../src/version.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,OAAO,UAAU,CAAC"}

package/dist/version.js

@@ -0,0 +1,2 @@
+export const VERSION = "0.1.0";
+//# sourceMappingURL=version.js.map

package/dist/version.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.js","sourceRoot":"","sources":["../src/version.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,OAAO,GAAG,OAAO,CAAC"}

package/docs/UI_UNIFICATION.md

@@ -0,0 +1,78 @@
+# UI Unification — booking-link / event-type editor
+
+As of 0.1.x the `@agent-native/scheduling` package ships a small set of
+shared React components the `calendar` and `scheduling` templates both
+consume so the two apps keep visual parity without duplicating logic.
+
+Exported from `@agent-native/scheduling/react/components`:
+
+| Component                 | Purpose                                                                                                                       |
+| ------------------------- | ----------------------------------------------------------------------------------------------------------------------------- |
+| `ConferencingSelector`    | 2x2 grid of "No conferencing / Google Meet / Zoom / Custom link"; includes a "Connect Zoom" affordance that starts real OAuth |
+| `SlugEditor`              | Inline-editable URL preview (`host/prefix/username/slug`) with click-to-edit segments                                         |
+| `CustomFieldsEditor`      | Add / edit / reorder / remove custom booking-form fields, with presets (LinkedIn, Company, Phone, Website)                    |
+| `DurationPicker`          | Multi-select pills (15 / 30 / 45 / 60 + custom) for per-event-type durations                                                  |
+| `BookingLinkCreateDialog` | Modal prompting for Title / URL / Duration / Description when creating a new event type                                       |
+| `AvailabilityEditor`      | Weekly schedule grid with toggles + start/end time pickers; `summarizeAvailability(ws)` helper for list subtitles             |
+
+The existing `SlotPicker` and `TimezoneSelect` continue to live alongside
+these.
+
+## Shadcn primitives required in the consumer
+
+Every component in this package imports shadcn primitives via the
+standard `@/components/ui/*` alias (resolved by the consumer's bundler).
+The package ships type shims for them in
+`react/components/_shadcn-shims.d.ts` so it compiles cleanly on its own.
+
+Add these to your template's `app/components/ui/` before importing any
+of the shared components:
+
+| Component required | Used by                                                                                               |
+| ------------------ | ----------------------------------------------------------------------------------------------------- |
+| `button`           | ConferencingSelector, BookingLinkCreateDialog, DurationPicker                                         |
+| `input`            | ConferencingSelector, CustomFieldsEditor, DurationPicker, BookingLinkCreateDialog, AvailabilityEditor |
+| `label`            | ConferencingSelector, CustomFieldsEditor, SlugEditor, BookingLinkCreateDialog, AvailabilityEditor     |
+| `textarea`         | CustomFieldsEditor, BookingLinkCreateDialog                                                           |
+| `switch`           | CustomFieldsEditor, AvailabilityEditor                                                                |
+| `badge`            | ConferencingSelector                                                                                  |
+| `dialog`           | BookingLinkCreateDialog                                                                               |
+
+Icons come from `@tabler/icons-react` (not bundled; each template already
+depends on it).
+
+## What moved where
+
+| Old home (calendar template)             | New home                                                              |
+| ---------------------------------------- | --------------------------------------------------------------------- |
+| `ConferencingEditor` in BookingLinksPage | `ConferencingSelector` in `@agent-native/scheduling/react/components` |
+| `EditableBookingUrl` in BookingLinksPage | `SlugEditor` in the package                                           |
+| `CustomFieldsEditor` in BookingLinksPage | `CustomFieldsEditor` in the package                                   |
+
+| Old home (scheduling template)             | New home                                                                    |
+| ------------------------------------------ | --------------------------------------------------------------------------- |
+| `DurationsEditor` in event-type editor     | `DurationPicker` in the package                                             |
+| `LocationEditor` + `AppsGrid` (two places) | `ConferencingSelector` in the package (Apps tab removed — it was redundant) |
+| Inline create dialog in `_index`           | `BookingLinkCreateDialog` in the package                                    |
+
+## Zoom became real OAuth
+
+Previously the calendar template's Zoom option asked the user to paste a
+personal meeting URL. The scheduling template had no OAuth-based Zoom at
+all (only the `zoom_video` "app install" placeholder).
+
+Both now use real Zoom OAuth via the provider's new optional
+`startOAuth` / `completeOAuth` methods on `VideoProvider`. Consumers:
+
+- **Scheduling template** — calls the package's `connect-video` action
+  for `zoom_video`, callback lands at
+  `/_agent-native/oauth/zoom/callback.get.ts`, tokens stored via
+  `completeVideoOAuth()`.
+- **Calendar template** — ships a lightweight `server/lib/zoom.ts` that
+  uses the package's `createZoomProvider` but stores tokens directly in
+  core's `oauth_tokens` keyed by Zoom user id + owner email. The
+  booking-create handler calls `createZoomMeeting()` when the booking
+  link's conferencing type is `zoom`.
+
+Both flows auto-refresh the Zoom access token when it's within 60s of
+expiry and mark credentials invalid if Zoom returns 401/403.