@agent-native/scheduling 0.1.23 → 0.1.25

package/README.md

@@ -35,6 +35,22 @@ export { default } from "@agent-native/scheduling/actions/create-booking";
 
 Override by replacing the stub body with a full `defineAction(...)`.
 
+## Package lifecycle
+
+Scheduling publishes a static, versioned `agent-native.package.json`. Inspect
+its contributions without executing package code, preview installation, or
+eject the published source into a local workspace package:
+
+```bash
+agent-native package inspect @agent-native/scheduling --json
+agent-native package add @agent-native/scheduling --apply
+agent-native package eject @agent-native/scheduling --apply
+```
+
+Add and eject are dry-run unless `--apply` is explicit. The CLI refuses file
+collisions and unsupported layouts and rolls back if dependency installation
+fails.
+
 ## Docs for your AI
 
 Expose the package docs to your AI coding tool via `llms.txt`:

package/agent-native.package.json

@@ -0,0 +1,154 @@
+{
+  "manifestVersion": 1,
+  "name": "@agent-native/scheduling",
+  "actions": [
+    "list-event-types",
+    "get-event-type",
+    "create-event-type",
+    "update-event-type",
+    "duplicate-event-type",
+    "delete-event-type",
+    "toggle-event-type-hidden",
+    "reorder-event-types",
+    "set-event-type-location",
+    "add-private-link",
+    "revoke-private-link",
+    "list-schedules",
+    "create-schedule",
+    "update-schedule",
+    "delete-schedule",
+    "set-default-schedule",
+    "add-date-override",
+    "remove-date-override",
+    "get-availability",
+    "check-availability",
+    "find-available-slot",
+    "list-bookings",
+    "get-booking",
+    "create-booking",
+    "reschedule-booking",
+    "cancel-booking",
+    "confirm-booking",
+    "mark-no-show",
+    "add-booking-attendee",
+    "remove-booking-attendee",
+    "send-reschedule-link",
+    "add-booking-note",
+    "export-bookings-csv",
+    "list-calendar-integrations",
+    "connect-calendar",
+    "connect-video",
+    "disconnect-calendar",
+    "list-selected-calendars",
+    "toggle-selected-calendar",
+    "set-destination-calendar",
+    "refresh-busy-times",
+    "install-conferencing-app",
+    "create-team",
+    "invite-team-member",
+    "accept-team-invite",
+    "remove-team-member",
+    "update-member-role",
+    "set-team-branding",
+    "assign-round-robin-host",
+    "set-event-type-hosts",
+    "set-host-availability-override",
+    "create-host-group",
+    "update-profile",
+    "set-appearance",
+    "set-default-conferencing-app",
+    "list-workflows",
+    "create-workflow",
+    "update-workflow",
+    "delete-workflow",
+    "toggle-workflow",
+    "list-routing-forms",
+    "create-routing-form",
+    "update-routing-form",
+    "delete-routing-form",
+    "submit-routing-form-response",
+    "list-routing-form-responses"
+  ],
+  "schemaEntryPoint": "@agent-native/scheduling/schema",
+  "docs": {
+    "llms": "docs/llms.txt",
+    "llmsFull": "docs/llms-full.txt",
+    "skills": [
+      "scheduling-basics",
+      "event-types",
+      "availability",
+      "bookings",
+      "booker",
+      "slot-engine",
+      "team-scheduling",
+      "integrations",
+      "embeds",
+      "workflows",
+      "routing-forms"
+    ]
+  },
+  "requiredSecrets": [
+    {
+      "key": "GOOGLE_CLIENT_ID",
+      "label": "Google OAuth Client ID",
+      "optional": true
+    },
+    {
+      "key": "GOOGLE_CLIENT_SECRET",
+      "label": "Google OAuth Client Secret",
+      "optional": true
+    },
+    {
+      "key": "MICROSOFT_CLIENT_ID",
+      "label": "Microsoft OAuth Client ID",
+      "optional": true
+    },
+    {
+      "key": "MICROSOFT_CLIENT_SECRET",
+      "label": "Microsoft OAuth Client Secret",
+      "optional": true
+    },
+    {
+      "key": "ZOOM_CLIENT_ID",
+      "label": "Zoom OAuth Client ID",
+      "optional": true
+    },
+    {
+      "key": "ZOOM_CLIENT_SECRET",
+      "label": "Zoom OAuth Client Secret",
+      "optional": true
+    },
+    {
+      "key": "DAILY_API_KEY",
+      "label": "Daily.co API Key (built-in video)",
+      "optional": true
+    },
+    {
+      "key": "TWILIO_ACCOUNT_SID",
+      "label": "Twilio Account SID (SMS workflows)",
+      "optional": true
+    },
+    {
+      "key": "TWILIO_AUTH_TOKEN",
+      "label": "Twilio Auth Token",
+      "optional": true
+    },
+    {
+      "key": "TWILIO_FROM_NUMBER",
+      "label": "Twilio sender number",
+      "optional": true
+    }
+  ],
+  "peerProviders": [
+    "google-calendar",
+    "office365",
+    "zoom",
+    "teams",
+    "google-meet",
+    "builtin-video"
+  ],
+  "eject": {
+    "sourceRoot": "src",
+    "targetDirectory": "packages/scheduling"
+  }
+}

package/dist/actions/_helpers.d.ts

@@ -1,5 +1,15 @@
 export declare function currentUserEmail(): string;
 export declare function currentUserEmailOrNull(): string | null;
+/**
+ * Verify the current user is the host of a booking. Throws "Not authorized to
+ * <action>" if not. Mirrors the `isHost` half of the `isHost || hasToken`
+ * guard used by cancel-booking/reschedule-booking, for booking actions that
+ * don't accept a public capability token (attendee/note/status mutations —
+ * host identity is the only legitimate caller for these).
+ */
+export declare function assertBookingHost(booking: {
+    hostEmail: string;
+}, action: string): void;
 export declare function currentOrgId(): string | undefined;
 export declare function assertTeamAdmin(teamId: string): Promise<void>;
 /**

package/dist/actions/_helpers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"_helpers.d.ts","sourceRoot":"","sources":["../../src/actions/_helpers.ts"],"names":[],"mappings":"AAOA,wBAAgB,gBAAgB,IAAI,MAAM,CAIzC;AAED,wBAAgB,sBAAsB,IAAI,MAAM,GAAG,IAAI,CAEtD;AAED,wBAAgB,YAAY,IAAI,MAAM,GAAG,SAAS,CAEjD;AAED,wBAAsB,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAiBnE;AAED;;;;;GAKG;AACH,wBAAsB,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAgBpE"}
+{"version":3,"file":"_helpers.d.ts","sourceRoot":"","sources":["../../src/actions/_helpers.ts"],"names":[],"mappings":"AAOA,wBAAgB,gBAAgB,IAAI,MAAM,CAIzC;AAED,wBAAgB,sBAAsB,IAAI,MAAM,GAAG,IAAI,CAEtD;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAC/B,OAAO,EAAE;IAAE,SAAS,EAAE,MAAM,CAAA;CAAE,EAC9B,MAAM,EAAE,MAAM,GACb,IAAI,CAMN;AAED,wBAAgB,YAAY,IAAI,MAAM,GAAG,SAAS,CAEjD;AAED,wBAAsB,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAiBnE;AAED;;;;;GAKG;AACH,wBAAsB,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAgBpE"}

package/dist/actions/_helpers.js

@@ -12,6 +12,20 @@ export function currentUserEmail() {
 export function currentUserEmailOrNull() {
     return getSchedulingContext().getCurrentUserEmail() ?? null;
 }
+/**
+ * Verify the current user is the host of a booking. Throws "Not authorized to
+ * <action>" if not. Mirrors the `isHost` half of the `isHost || hasToken`
+ * guard used by cancel-booking/reschedule-booking, for booking actions that
+ * don't accept a public capability token (attendee/note/status mutations —
+ * host identity is the only legitimate caller for these).
+ */
+export function assertBookingHost(booking, action) {
+    const userEmail = currentUserEmailOrNull();
+    const isHost = !!userEmail && userEmail === booking.hostEmail;
+    if (!isHost) {
+        throw new Error(`Not authorized to ${action}`);
+    }
+}
 export function currentOrgId() {
     return getSchedulingContext().getCurrentOrgId?.();
 }

package/dist/actions/_helpers.js.map

@@ -1 +1 @@
-{"version":3,"file":"_helpers.js","sourceRoot":"","sources":["../../src/actions/_helpers.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AAEtC,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAE5D,MAAM,UAAU,gBAAgB;IAC9B,MAAM,KAAK,GAAG,oBAAoB,EAAE,CAAC,mBAAmB,EAAE,CAAC;IAC3D,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;IACjD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,sBAAsB;IACpC,OAAO,oBAAoB,EAAE,CAAC,mBAAmB,EAAE,IAAI,IAAI,CAAC;AAC9D,CAAC;AAED,MAAM,UAAU,YAAY;IAC1B,OAAO,oBAAoB,EAAE,CAAC,eAAe,EAAE,EAAE,CAAC;AACpD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,MAAc;IAClD,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,oBAAoB,EAAE,CAAC;IACjD,MAAM,KAAK,GAAG,gBAAgB,EAAE,CAAC;IACjC,MAAM,IAAI,GAAG,MAAM,KAAK,EAAE;SACvB,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;SACzC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC;SACxB,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,EACrC,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,SAAS,EAAE,KAAK,CAAC,CACxC,CACF;SACA,KAAK,CAAC,CAAC,CAAC,CAAC;IACZ,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC;IAC3B,IAAI,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;QACzC,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC7D,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,MAAc;IACnD,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,oBAAoB,EAAE,CAAC;IACjD,MAAM,KAAK,GAAG,gBAAgB,EAAE,CAAC;IACjC,MAAM,IAAI,GAAG,MAAM,KAAK,EAAE;SACvB,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;SACzC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC;SACxB,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,EACrC,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,SAAS,EAAE,KAAK,CAAC,CACxC,CACF;SACA,KAAK,CAAC,CAAC,CAAC,CAAC;IACZ,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACrD,CAAC;AACH,CAAC"}
+{"version":3,"file":"_helpers.js","sourceRoot":"","sources":["../../src/actions/_helpers.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AAEtC,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAE5D,MAAM,UAAU,gBAAgB;IAC9B,MAAM,KAAK,GAAG,oBAAoB,EAAE,CAAC,mBAAmB,EAAE,CAAC;IAC3D,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;IACjD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,sBAAsB;IACpC,OAAO,oBAAoB,EAAE,CAAC,mBAAmB,EAAE,IAAI,IAAI,CAAC;AAC9D,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,iBAAiB,CAC/B,OAA8B,EAC9B,MAAc;IAEd,MAAM,SAAS,GAAG,sBAAsB,EAAE,CAAC;IAC3C,MAAM,MAAM,GAAG,CAAC,CAAC,SAAS,IAAI,SAAS,KAAK,OAAO,CAAC,SAAS,CAAC;IAC9D,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,qBAAqB,MAAM,EAAE,CAAC,CAAC;IACjD,CAAC;AACH,CAAC;AAED,MAAM,UAAU,YAAY;IAC1B,OAAO,oBAAoB,EAAE,CAAC,eAAe,EAAE,EAAE,CAAC;AACpD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,MAAc;IAClD,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,oBAAoB,EAAE,CAAC;IACjD,MAAM,KAAK,GAAG,gBAAgB,EAAE,CAAC;IACjC,MAAM,IAAI,GAAG,MAAM,KAAK,EAAE;SACvB,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;SACzC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC;SACxB,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,EACrC,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,SAAS,EAAE,KAAK,CAAC,CACxC,CACF;SACA,KAAK,CAAC,CAAC,CAAC,CAAC;IACZ,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC;IAC3B,IAAI,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;QACzC,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC7D,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,MAAc;IACnD,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,oBAAoB,EAAE,CAAC;IACjD,MAAM,KAAK,GAAG,gBAAgB,EAAE,CAAC;IACjC,MAAM,IAAI,GAAG,MAAM,KAAK,EAAE;SACvB,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;SACzC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC;SACxB,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,EACrC,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,SAAS,EAAE,KAAK,CAAC,CACxC,CACF;SACA,KAAK,CAAC,CAAC,CAAC,CAAC;IACZ,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACrD,CAAC;AACH,CAAC"}

package/dist/actions/add-booking-attendee.js

@@ -3,6 +3,7 @@ import { nanoid } from "nanoid";
 import { z } from "zod";
 import { getBookingByUid } from "../server/bookings-repo.js";
 import { getSchedulingContext } from "../server/context.js";
+import { assertBookingHost } from "./_helpers.js";
 export default defineAction({
     description: "Add an attendee (or seat reservation) to a booking",
     schema: z.object({
@@ -15,6 +16,7 @@ export default defineAction({
         const booking = await getBookingByUid(args.uid);
         if (!booking)
             throw new Error(`Booking ${args.uid} not found`);
+        assertBookingHost(booking, "add an attendee to this booking");
         const { getDb, schema } = getSchedulingContext();
         await getDb()
             .insert(schema.bookingAttendees)

package/dist/actions/add-booking-attendee.js.map

@@ -1 +1 @@
-{"version":3,"file":"add-booking-attendee.js","sourceRoot":"","sources":["../../src/actions/add-booking-attendee.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAChC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAC7D,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAE5D,eAAe,YAAY,CAAC;IAC1B,WAAW,EAAE,oDAAoD;IACjE,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE;QACf,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;QAChB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;QACjB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KAChC,CAAC;IACF,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;QAClB,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAChD,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,WAAW,IAAI,CAAC,GAAG,YAAY,CAAC,CAAC;QAC/D,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,oBAAoB,EAAE,CAAC;QACjD,MAAM,KAAK,EAAE;aACV,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC;aAC/B,MAAM,CAAC;YACN,EAAE,EAAE,MAAM,EAAE;YACZ,SAAS,EAAE,OAAO,CAAC,EAAE;YACrB,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,IAAI;YAC/B,MAAM,EAAE,KAAK;YACb,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACpC,CAAC,CAAC;QACL,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;IACtD,CAAC;CACF,CAAC,CAAC"}
+{"version":3,"file":"add-booking-attendee.js","sourceRoot":"","sources":["../../src/actions/add-booking-attendee.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAChC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAC7D,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAC5D,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAElD,eAAe,YAAY,CAAC;IAC1B,WAAW,EAAE,oDAAoD;IACjE,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE;QACf,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;QAChB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;QACjB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KAChC,CAAC;IACF,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;QAClB,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAChD,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,WAAW,IAAI,CAAC,GAAG,YAAY,CAAC,CAAC;QAC/D,iBAAiB,CAAC,OAAO,EAAE,iCAAiC,CAAC,CAAC;QAC9D,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,oBAAoB,EAAE,CAAC;QACjD,MAAM,KAAK,EAAE;aACV,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC;aAC/B,MAAM,CAAC;YACN,EAAE,EAAE,MAAM,EAAE;YACZ,SAAS,EAAE,OAAO,CAAC,EAAE;YACrB,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,IAAI;YAC/B,MAAM,EAAE,KAAK;YACb,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACpC,CAAC,CAAC;QACL,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;IACtD,CAAC;CACF,CAAC,CAAC"}

package/dist/actions/add-booking-note.js

@@ -3,7 +3,7 @@ import { nanoid } from "nanoid";
 import { z } from "zod";
 import { getBookingByUid } from "../server/bookings-repo.js";
 import { getSchedulingContext } from "../server/context.js";
-import { currentUserEmail } from "./_helpers.js";
+import { assertBookingHost, currentUserEmail } from "./_helpers.js";
 export default defineAction({
     description: "Add an internal (host-only) note to a booking",
     schema: z.object({ uid: z.string(), content: z.string() }),
@@ -11,6 +11,7 @@ export default defineAction({
         const booking = await getBookingByUid(args.uid);
         if (!booking)
             throw new Error(`Booking ${args.uid} not found`);
+        assertBookingHost(booking, "add a note to this booking");
         const { getDb, schema } = getSchedulingContext();
         const id = nanoid();
         await getDb().insert(schema.bookingNotes).values({

package/dist/actions/add-booking-note.js.map

@@ -1 +1 @@
-{"version":3,"file":"add-booking-note.js","sourceRoot":"","sources":["../../src/actions/add-booking-note.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAChC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAC7D,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAC5D,OAAO,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAEjD,eAAe,YAAY,CAAC;IAC1B,WAAW,EAAE,+CAA+C;IAC5D,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;IAC1D,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;QAClB,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAChD,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,WAAW,IAAI,CAAC,GAAG,YAAY,CAAC,CAAC;QAC/D,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,oBAAoB,EAAE,CAAC;QACjD,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC;QACpB,MAAM,KAAK,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC;YAC/C,EAAE;YACF,SAAS,EAAE,OAAO,CAAC,EAAE;YACrB,WAAW,EAAE,gBAAgB,EAAE;YAC/B,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACpC,CAAC,CAAC;QACH,OAAO,EAAE,EAAE,EAAE,CAAC;IAChB,CAAC;CACF,CAAC,CAAC"}
+{"version":3,"file":"add-booking-note.js","sourceRoot":"","sources":["../../src/actions/add-booking-note.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAChC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAC7D,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAC5D,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAEpE,eAAe,YAAY,CAAC;IAC1B,WAAW,EAAE,+CAA+C;IAC5D,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;IAC1D,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;QAClB,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAChD,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,WAAW,IAAI,CAAC,GAAG,YAAY,CAAC,CAAC;QAC/D,iBAAiB,CAAC,OAAO,EAAE,4BAA4B,CAAC,CAAC;QACzD,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,oBAAoB,EAAE,CAAC;QACjD,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC;QACpB,MAAM,KAAK,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC;YAC/C,EAAE;YACF,SAAS,EAAE,OAAO,CAAC,EAAE;YACrB,WAAW,EAAE,gBAAgB,EAAE;YAC/B,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACpC,CAAC,CAAC;QACH,OAAO,EAAE,EAAE,EAAE,CAAC;IAChB,CAAC;CACF,CAAC,CAAC"}

package/dist/actions/confirm-booking.js

@@ -1,10 +1,15 @@
 import { defineAction } from "@agent-native/core";
 import { z } from "zod";
 import { updateBookingStatus, getBookingByUid, } from "../server/bookings-repo.js";
+import { assertBookingHost } from "./_helpers.js";
 export default defineAction({
     description: "Confirm a pending booking (requires-confirmation flow)",
     schema: z.object({ uid: z.string() }),
     run: async (args) => {
+        const booking = await getBookingByUid(args.uid);
+        if (!booking)
+            throw new Error(`Booking ${args.uid} not found`);
+        assertBookingHost(booking, "confirm this booking");
         await updateBookingStatus(args.uid, "confirmed");
         return { booking: await getBookingByUid(args.uid) };
     },

package/dist/actions/confirm-booking.js.map

@@ -1 +1 @@
-{"version":3,"file":"confirm-booking.js","sourceRoot":"","sources":["../../src/actions/confirm-booking.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EACL,mBAAmB,EACnB,eAAe,GAChB,MAAM,4BAA4B,CAAC;AAEpC,eAAe,YAAY,CAAC;IAC1B,WAAW,EAAE,wDAAwD;IACrE,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;IACrC,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;QAClB,MAAM,mBAAmB,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;QACjD,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;IACtD,CAAC;CACF,CAAC,CAAC"}
+{"version":3,"file":"confirm-booking.js","sourceRoot":"","sources":["../../src/actions/confirm-booking.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EACL,mBAAmB,EACnB,eAAe,GAChB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAElD,eAAe,YAAY,CAAC;IAC1B,WAAW,EAAE,wDAAwD;IACrE,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;IACrC,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;QAClB,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAChD,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,WAAW,IAAI,CAAC,GAAG,YAAY,CAAC,CAAC;QAC/D,iBAAiB,CAAC,OAAO,EAAE,sBAAsB,CAAC,CAAC;QACnD,MAAM,mBAAmB,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;QACjD,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;IACtD,CAAC;CACF,CAAC,CAAC"}

package/dist/actions/duplicate-event-type.js

@@ -1,4 +1,5 @@
 import { defineAction } from "@agent-native/core";
+import { assertAccess } from "@agent-native/core/sharing";
 import { z } from "zod";
 import { getEventTypeById, createEventType, } from "../server/event-types-repo.js";
 import { currentUserEmail, currentOrgId } from "./_helpers.js";
@@ -13,6 +14,7 @@ export default defineAction({
         const source = await getEventTypeById(args.id);
         if (!source)
             throw new Error("Event type not found");
+        await assertAccess("event-type", args.id, "editor");
         return {
             eventType: await createEventType({
                 ownerEmail: source.teamId ? undefined : currentUserEmail(),

package/dist/actions/duplicate-event-type.js.map

@@ -1 +1 @@
-{"version":3,"file":"duplicate-event-type.js","sourceRoot":"","sources":["../../src/actions/duplicate-event-type.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EACL,gBAAgB,EAChB,eAAe,GAChB,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAE/D,eAAe,YAAY,CAAC;IAC1B,WAAW,EAAE,yCAAyC;IACtD,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;QACd,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;QACnB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KAChC,CAAC;IACF,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;QAClB,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC/C,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;QACrD,OAAO;YACL,SAAS,EAAE,MAAM,eAAe,CAAC;gBAC/B,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,gBAAgB,EAAE;gBAC1D,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,KAAK,EAAE,YAAY,EAAE;gBACrB,KAAK,EAAE,IAAI,CAAC,QAAQ,IAAI,GAAG,MAAM,CAAC,KAAK,SAAS;gBAChD,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE;gBAChC,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,WAAW,EAAE,MAAM,CAAC,WAAW;gBAC/B,cAAc,EAAE,MAAM,CAAC,cAAc;gBACrC,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,YAAY,EAAE,MAAM,CAAC,YAAY;gBACjC,UAAU,EAAE,MAAM,CAAC,UAAU;gBAC7B,KAAK,EAAE,MAAM,CAAC,KAAK;aACpB,CAAC;SACH,CAAC;IACJ,CAAC;CACF,CAAC,CAAC"}
+{"version":3,"file":"duplicate-event-type.js","sourceRoot":"","sources":["../../src/actions/duplicate-event-type.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAC1D,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EACL,gBAAgB,EAChB,eAAe,GAChB,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAE/D,eAAe,YAAY,CAAC;IAC1B,WAAW,EAAE,yCAAyC;IACtD,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;QACd,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;QACnB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KAChC,CAAC;IACF,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;QAClB,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC/C,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;QACrD,MAAM,YAAY,CAAC,YAAY,EAAE,IAAI,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;QACpD,OAAO;YACL,SAAS,EAAE,MAAM,eAAe,CAAC;gBAC/B,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,gBAAgB,EAAE;gBAC1D,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,KAAK,EAAE,YAAY,EAAE;gBACrB,KAAK,EAAE,IAAI,CAAC,QAAQ,IAAI,GAAG,MAAM,CAAC,KAAK,SAAS;gBAChD,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE;gBAChC,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,WAAW,EAAE,MAAM,CAAC,WAAW;gBAC/B,cAAc,EAAE,MAAM,CAAC,cAAc;gBACrC,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,YAAY,EAAE,MAAM,CAAC,YAAY;gBACjC,UAAU,EAAE,MAAM,CAAC,UAAU;gBAC7B,KAAK,EAAE,MAAM,CAAC,KAAK;aACpB,CAAC;SACH,CAAC;IACJ,CAAC;CACF,CAAC,CAAC"}

package/dist/actions/get-booking.d.ts

@@ -1,7 +1,9 @@
 declare const _default: import("@agent-native/core").ActionDefinition<{
     uid: string;
 }, {
-    booking: import("../index.js").Booking | null;
+    booking: null;
+} | {
+    booking: import("../index.js").Booking;
 }>;
 export default _default;
 //# sourceMappingURL=get-booking.d.ts.map

package/dist/actions/get-booking.js

@@ -1,9 +1,16 @@
 import { defineAction } from "@agent-native/core";
 import { z } from "zod";
 import { getBookingByUid } from "../server/bookings-repo.js";
+import { assertBookingHost } from "./_helpers.js";
 export default defineAction({
     description: "Get a booking by uid",
     schema: z.object({ uid: z.string() }),
-    run: async (args) => ({ booking: await getBookingByUid(args.uid) }),
+    run: async (args) => {
+        const booking = await getBookingByUid(args.uid);
+        if (!booking)
+            return { booking: null };
+        assertBookingHost(booking, "view this booking");
+        return { booking };
+    },
 });
 //# sourceMappingURL=get-booking.js.map

package/dist/actions/get-booking.js.map

@@ -1 +1 @@
-{"version":3,"file":"get-booking.js","sourceRoot":"","sources":["../../src/actions/get-booking.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAE7D,eAAe,YAAY,CAAC;IAC1B,WAAW,EAAE,sBAAsB;IACnC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;IACrC,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;CACpE,CAAC,CAAC"}
+{"version":3,"file":"get-booking.js","sourceRoot":"","sources":["../../src/actions/get-booking.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAC7D,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAElD,eAAe,YAAY,CAAC;IAC1B,WAAW,EAAE,sBAAsB;IACnC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;IACrC,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;QAClB,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAChD,IAAI,CAAC,OAAO;YAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QACvC,iBAAiB,CAAC,OAAO,EAAE,mBAAmB,CAAC,CAAC;QAChD,OAAO,EAAE,OAAO,EAAE,CAAC;IACrB,CAAC;CACF,CAAC,CAAC"}

package/dist/actions/mark-no-show.js

@@ -1,6 +1,8 @@
 import { defineAction } from "@agent-native/core";
 import { z } from "zod";
 import { markNoShow } from "../server/booking-service.js";
+import { getBookingByUid } from "../server/bookings-repo.js";
+import { assertBookingHost } from "./_helpers.js";
 export default defineAction({
     description: "Mark an attendee as no-show on a booking",
     schema: z.object({
@@ -8,6 +10,10 @@ export default defineAction({
         attendeeEmail: z.string(),
     }),
     run: async (args) => {
+        const booking = await getBookingByUid(args.uid);
+        if (!booking)
+            throw new Error(`Booking ${args.uid} not found`);
+        assertBookingHost(booking, "mark no-show on this booking");
         await markNoShow(args.uid, args.attendeeEmail);
         return { ok: true };
     },

package/dist/actions/mark-no-show.js.map

@@ -1 +1 @@
-{"version":3,"file":"mark-no-show.js","sourceRoot":"","sources":["../../src/actions/mark-no-show.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,UAAU,EAAE,MAAM,8BAA8B,CAAC;AAE1D,eAAe,YAAY,CAAC;IAC1B,WAAW,EAAE,0CAA0C;IACvD,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE;QACf,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE;KAC1B,CAAC;IACF,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;QAClB,MAAM,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC;QAC/C,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACtB,CAAC;CACF,CAAC,CAAC"}
+{"version":3,"file":"mark-no-show.js","sourceRoot":"","sources":["../../src/actions/mark-no-show.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,UAAU,EAAE,MAAM,8BAA8B,CAAC;AAC1D,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAC7D,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAElD,eAAe,YAAY,CAAC;IAC1B,WAAW,EAAE,0CAA0C;IACvD,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE;QACf,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE;KAC1B,CAAC;IACF,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;QAClB,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAChD,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,WAAW,IAAI,CAAC,GAAG,YAAY,CAAC,CAAC;QAC/D,iBAAiB,CAAC,OAAO,EAAE,8BAA8B,CAAC,CAAC;QAC3D,MAAM,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC;QAC/C,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACtB,CAAC;CACF,CAAC,CAAC"}

package/dist/actions/remove-booking-attendee.js

@@ -3,6 +3,7 @@ import { and, eq } from "drizzle-orm";
 import { z } from "zod";
 import { getBookingByUid } from "../server/bookings-repo.js";
 import { getSchedulingContext } from "../server/context.js";
+import { assertBookingHost } from "./_helpers.js";
 export default defineAction({
     description: "Remove an attendee from a booking",
     schema: z.object({ uid: z.string(), email: z.string() }),
@@ -10,6 +11,7 @@ export default defineAction({
         const booking = await getBookingByUid(args.uid);
         if (!booking)
             throw new Error(`Booking ${args.uid} not found`);
+        assertBookingHost(booking, "remove an attendee from this booking");
         const { getDb, schema } = getSchedulingContext();
         await getDb()
             .delete(schema.bookingAttendees)

package/dist/actions/remove-booking-attendee.js.map

@@ -1 +1 @@
-{"version":3,"file":"remove-booking-attendee.js","sourceRoot":"","sources":["../../src/actions/remove-booking-attendee.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AACtC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAC7D,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAE5D,eAAe,YAAY,CAAC;IAC1B,WAAW,EAAE,mCAAmC;IAChD,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;IACxD,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;QAClB,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAChD,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,WAAW,IAAI,CAAC,GAAG,YAAY,CAAC,CAAC;QAC/D,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,oBAAoB,EAAE,CAAC;QACjD,MAAM,KAAK,EAAE;aACV,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC;aAC/B,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,MAAM,CAAC,gBAAgB,CAAC,SAAS,EAAE,OAAO,CAAC,EAAE,CAAC,EACjD,EAAE,CAAC,MAAM,CAAC,gBAAgB,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,CAC9C,CACF,CAAC;QACJ,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;IACtD,CAAC;CACF,CAAC,CAAC"}
+{"version":3,"file":"remove-booking-attendee.js","sourceRoot":"","sources":["../../src/actions/remove-booking-attendee.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AACtC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAC7D,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAC5D,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAElD,eAAe,YAAY,CAAC;IAC1B,WAAW,EAAE,mCAAmC;IAChD,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;IACxD,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;QAClB,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAChD,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,WAAW,IAAI,CAAC,GAAG,YAAY,CAAC,CAAC;QAC/D,iBAAiB,CAAC,OAAO,EAAE,sCAAsC,CAAC,CAAC;QACnE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,oBAAoB,EAAE,CAAC;QACjD,MAAM,KAAK,EAAE;aACV,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC;aAC/B,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,MAAM,CAAC,gBAAgB,CAAC,SAAS,EAAE,OAAO,CAAC,EAAE,CAAC,EACjD,EAAE,CAAC,MAAM,CAAC,gBAAgB,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,CAC9C,CACF,CAAC;QACJ,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;IACtD,CAAC;CACF,CAAC,CAAC"}

package/dist/actions/revoke-private-link.js

@@ -1,4 +1,5 @@
 import { defineAction } from "@agent-native/core";
+import { assertAccess } from "@agent-native/core/sharing";
 import { eq } from "drizzle-orm";
 import { z } from "zod";
 import { getSchedulingContext } from "../server/context.js";
@@ -7,7 +8,23 @@ export default defineAction({
     schema: z.object({ hash: z.string() }),
     run: async (args) => {
         const { getDb, schema } = getSchedulingContext();
-        await getDb()
+        const db = getDb();
+        const [link] = await db
+            .select({ eventTypeId: schema.hashedLinks.eventTypeId })
+            .from(schema.hashedLinks)
+            .where(eq(schema.hashedLinks.hash, args.hash))
+            .limit(1);
+        if (!link)
+            return { ok: true };
+        try {
+            await assertAccess("event-type", link.eventTypeId, "editor");
+        }
+        catch {
+            // Keep private-link hashes unprobeable: callers without access receive
+            // the same idempotent result as callers presenting an unknown hash.
+            return { ok: true };
+        }
+        await db
             .delete(schema.hashedLinks)
             .where(eq(schema.hashedLinks.hash, args.hash));
         return { ok: true };

package/dist/actions/revoke-private-link.js.map

@@ -1 +1 @@
-{"version":3,"file":"revoke-private-link.js","sourceRoot":"","sources":["../../src/actions/revoke-private-link.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAE5D,eAAe,YAAY,CAAC;IAC1B,WAAW,EAAE,8BAA8B;IAC3C,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;IACtC,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;QAClB,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,oBAAoB,EAAE,CAAC;QACjD,MAAM,KAAK,EAAE;aACV,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC;aAC1B,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QACjD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACtB,CAAC;CACF,CAAC,CAAC"}
+{"version":3,"file":"revoke-private-link.js","sourceRoot":"","sources":["../../src/actions/revoke-private-link.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAC1D,OAAO,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAE5D,eAAe,YAAY,CAAC;IAC1B,WAAW,EAAE,8BAA8B;IAC3C,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;IACtC,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;QAClB,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,oBAAoB,EAAE,CAAC;QACjD,MAAM,EAAE,GAAG,KAAK,EAAE,CAAC;QACnB,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,EAAE;aACpB,MAAM,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,CAAC,WAAW,EAAE,CAAC;aACvD,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC;aACxB,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;aAC7C,KAAK,CAAC,CAAC,CAAC,CAAC;QACZ,IAAI,CAAC,IAAI;YAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;QAC/B,IAAI,CAAC;YACH,MAAM,YAAY,CAAC,YAAY,EAAE,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;QAC/D,CAAC;QAAC,MAAM,CAAC;YACP,uEAAuE;YACvE,oEAAoE;YACpE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;QACtB,CAAC;QACD,MAAM,EAAE;aACL,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC;aAC1B,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QACjD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACtB,CAAC;CACF,CAAC,CAAC"}

package/dist/actions/send-reschedule-link.js

@@ -2,6 +2,7 @@ import { defineAction } from "@agent-native/core";
 import { z } from "zod";
 import { getBookingByUid } from "../server/bookings-repo.js";
 import { getSchedulingContext } from "../server/context.js";
+import { assertBookingHost } from "./_helpers.js";
 export default defineAction({
     description: "Return the public reschedule URL for a booking (send it to an attendee)",
     schema: z.object({ uid: z.string() }),
@@ -9,6 +10,7 @@ export default defineAction({
         const booking = await getBookingByUid(args.uid);
         if (!booking)
             throw new Error(`Booking ${args.uid} not found`);
+        assertBookingHost(booking, "view the reschedule link for this booking");
         const baseUrl = getSchedulingContext().publicBaseUrl ?? "";
         return {
             url: `${baseUrl}/reschedule/${booking.uid}?token=${booking.rescheduleToken}`,

package/dist/actions/send-reschedule-link.js.map

@@ -1 +1 @@
-{"version":3,"file":"send-reschedule-link.js","sourceRoot":"","sources":["../../src/actions/send-reschedule-link.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAC7D,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAE5D,eAAe,YAAY,CAAC;IAC1B,WAAW,EACT,yEAAyE;IAC3E,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;IACrC,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;QAClB,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAChD,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,WAAW,IAAI,CAAC,GAAG,YAAY,CAAC,CAAC;QAC/D,MAAM,OAAO,GAAG,oBAAoB,EAAE,CAAC,aAAa,IAAI,EAAE,CAAC;QAC3D,OAAO;YACL,GAAG,EAAE,GAAG,OAAO,eAAe,OAAO,CAAC,GAAG,UAAU,OAAO,CAAC,eAAe,EAAE;SAC7E,CAAC;IACJ,CAAC;CACF,CAAC,CAAC"}
+{"version":3,"file":"send-reschedule-link.js","sourceRoot":"","sources":["../../src/actions/send-reschedule-link.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAC7D,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAC5D,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAElD,eAAe,YAAY,CAAC;IAC1B,WAAW,EACT,yEAAyE;IAC3E,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;IACrC,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;QAClB,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAChD,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,WAAW,IAAI,CAAC,GAAG,YAAY,CAAC,CAAC;QAC/D,iBAAiB,CAAC,OAAO,EAAE,2CAA2C,CAAC,CAAC;QACxE,MAAM,OAAO,GAAG,oBAAoB,EAAE,CAAC,aAAa,IAAI,EAAE,CAAC;QAC3D,OAAO;YACL,GAAG,EAAE,GAAG,OAAO,eAAe,OAAO,CAAC,GAAG,UAAU,OAAO,CAAC,eAAe,EAAE;SAC7E,CAAC;IACJ,CAAC;CACF,CAAC,CAAC"}

package/dist/manifest.d.ts

@@ -8,8 +8,8 @@
  *   - print the list in `agent-native info @agent-native/scheduling`
  */
 export interface SchedulingManifest {
+    manifestVersion: 1;
     name: string;
-    version: string;
     actions: string[];
     schemaEntryPoint: string;
     docs: {
@@ -23,6 +23,10 @@ export interface SchedulingManifest {
         optional?: boolean;
     }[];
     peerProviders: string[];
+    eject?: {
+        sourceRoot: string;
+        targetDirectory: string;
+    };
 }
 export declare const MANIFEST: SchedulingManifest;
 //# sourceMappingURL=manifest.d.ts.map

package/dist/manifest.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"manifest.d.ts","sourceRoot":"","sources":["../src/manifest.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,gBAAgB,EAAE,MAAM,CAAC;IACzB,IAAI,EAAE;QACJ,IAAI,EAAE,MAAM,CAAC;QACb,QAAQ,EAAE,MAAM,CAAC;QACjB,MAAM,EAAE,MAAM,EAAE,CAAC;KAClB,CAAC;IACF,eAAe,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,OAAO,CAAA;KAAE,EAAE,CAAC;IACtE,aAAa,EAAE,MAAM,EAAE,CAAC;CACzB;AAED,eAAO,MAAM,QAAQ,EAAE,kBAqJtB,CAAC"}
+{"version":3,"file":"manifest.d.ts","sourceRoot":"","sources":["../src/manifest.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,MAAM,WAAW,kBAAkB;IACjC,eAAe,EAAE,CAAC,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,gBAAgB,EAAE,MAAM,CAAC;IACzB,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;IAC3D,eAAe,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,OAAO,CAAA;KAAE,EAAE,CAAC;IACtE,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,KAAK,CAAC,EAAE;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,eAAe,EAAE,MAAM,CAAA;KAAE,CAAC;CACzD;AAED,eAAO,MAAM,QAAQ,EAAE,kBA0JtB,CAAC"}

package/dist/manifest.js

@@ -8,8 +8,8 @@
  *   - print the list in `agent-native info @agent-native/scheduling`
  */
 export const MANIFEST = {
+    manifestVersion: 1,
     name: "@agent-native/scheduling",
-    version: "0.1.0",
     actions: [
         // Event types
         "list-event-types",
@@ -153,8 +153,13 @@ export const MANIFEST = {
         "google-calendar",
         "office365",
         "zoom",
+        "teams",
         "google-meet",
         "builtin-video",
     ],
+    eject: {
+        sourceRoot: "src",
+        targetDirectory: "packages/scheduling",
+    },
 };
 //# sourceMappingURL=manifest.js.map

package/dist/manifest.js.map

@@ -1 +1 @@
-{"version":3,"file":"manifest.js","sourceRoot":"","sources":["../src/manifest.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAgBH,MAAM,CAAC,MAAM,QAAQ,GAAuB;IAC1C,IAAI,EAAE,0BAA0B;IAChC,OAAO,EAAE,OAAO;IAChB,OAAO,EAAE;QACP,cAAc;QACd,kBAAkB;QAClB,gBAAgB;QAChB,mBAAmB;QACnB,mBAAmB;QACnB,sBAAsB;QACtB,mBAAmB;QACnB,0BAA0B;QAC1B,qBAAqB;QACrB,yBAAyB;QACzB,kBAAkB;QAClB,qBAAqB;QACrB,2BAA2B;QAC3B,gBAAgB;QAChB,iBAAiB;QACjB,iBAAiB;QACjB,iBAAiB;QACjB,sBAAsB;QACtB,mBAAmB;QACnB,sBAAsB;QACtB,kBAAkB;QAClB,oBAAoB;QACpB,qBAAqB;QACrB,WAAW;QACX,eAAe;QACf,aAAa;QACb,gBAAgB;QAChB,oBAAoB;QACpB,gBAAgB;QAChB,iBAAiB;QACjB,cAAc;QACd,sBAAsB;QACtB,yBAAyB;QACzB,sBAAsB;QACtB,kBAAkB;QAClB,qBAAqB;QACrB,eAAe;QACf,4BAA4B;QAC5B,kBAAkB;QAClB,eAAe;QACf,qBAAqB;QACrB,yBAAyB;QACzB,0BAA0B;QAC1B,0BAA0B;QAC1B,oBAAoB;QACpB,0BAA0B;QAC1B,OAAO;QACP,aAAa;QACb,oBAAoB;QACpB,oBAAoB;QACpB,oBAAoB;QACpB,oBAAoB;QACpB,mBAAmB;QACnB,sBAAsB;QACtB,yBAAyB;QACzB,sBAAsB;QACtB,gCAAgC;QAChC,mBAAmB;QACnB,qBAAqB;QACrB,gBAAgB;QAChB,gBAAgB;QAChB,8BAA8B;QAC9B,YAAY;QACZ,gBAAgB;QAChB,iBAAiB;QACjB,iBAAiB;QACjB,iBAAiB;QACjB,iBAAiB;QACjB,gBAAgB;QAChB,oBAAoB;QACpB,qBAAqB;QACrB,qBAAqB;QACrB,qBAAqB;QACrB,8BAA8B;QAC9B,6BAA6B;KAC9B;IACD,gBAAgB,EAAE,iCAAiC;IACnD,IAAI,EAAE;QACJ,IAAI,EAAE,eAAe;QACrB,QAAQ,EAAE,oBAAoB;QAC9B,MAAM,EAAE;YACN,mBAAmB;YACnB,aAAa;YACb,cAAc;YACd,UAAU;YACV,QAAQ;YACR,aAAa;YACb,iBAAiB;YACjB,cAAc;YACd,QAAQ;YACR,WAAW;YACX,eAAe;SAChB;KACF;IACD,eAAe,EAAE;QACf;YACE,GAAG,EAAE,kBAAkB;YACvB,KAAK,EAAE,wBAAwB;YAC/B,QAAQ,EAAE,IAAI;SACf;QACD;YACE,GAAG,EAAE,sBAAsB;YAC3B,KAAK,EAAE,4BAA4B;YACnC,QAAQ,EAAE,IAAI;SACf;QACD;YACE,GAAG,EAAE,qBAAqB;YAC1B,KAAK,EAAE,2BAA2B;YAClC,QAAQ,EAAE,IAAI;SACf;QACD;YACE,GAAG,EAAE,yBAAyB;YAC9B,KAAK,EAAE,+BAA+B;YACtC,QAAQ,EAAE,IAAI;SACf;QACD,EAAE,GAAG,EAAE,gBAAgB,EAAE,KAAK,EAAE,sBAAsB,EAAE,QAAQ,EAAE,IAAI,EAAE;QACxE;YACE,GAAG,EAAE,oBAAoB;YACzB,KAAK,EAAE,0BAA0B;YACjC,QAAQ,EAAE,IAAI;SACf;QACD;YACE,GAAG,EAAE,eAAe;YACpB,KAAK,EAAE,mCAAmC;YAC1C,QAAQ,EAAE,IAAI;SACf;QACD;YACE,GAAG,EAAE,oBAAoB;YACzB,KAAK,EAAE,oCAAoC;YAC3C,QAAQ,EAAE,IAAI;SACf;QACD,EAAE,GAAG,EAAE,mBAAmB,EAAE,KAAK,EAAE,mBAAmB,EAAE,QAAQ,EAAE,IAAI,EAAE;QACxE;YACE,GAAG,EAAE,oBAAoB;YACzB,KAAK,EAAE,sBAAsB;YAC7B,QAAQ,EAAE,IAAI;SACf;KACF;IACD,aAAa,EAAE;QACb,iBAAiB;QACjB,WAAW;QACX,MAAM;QACN,aAAa;QACb,eAAe;KAChB;CACF,CAAC"}
+{"version":3,"file":"manifest.js","sourceRoot":"","sources":["../src/manifest.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAaH,MAAM,CAAC,MAAM,QAAQ,GAAuB;IAC1C,eAAe,EAAE,CAAC;IAClB,IAAI,EAAE,0BAA0B;IAChC,OAAO,EAAE;QACP,cAAc;QACd,kBAAkB;QAClB,gBAAgB;QAChB,mBAAmB;QACnB,mBAAmB;QACnB,sBAAsB;QACtB,mBAAmB;QACnB,0BAA0B;QAC1B,qBAAqB;QACrB,yBAAyB;QACzB,kBAAkB;QAClB,qBAAqB;QACrB,2BAA2B;QAC3B,gBAAgB;QAChB,iBAAiB;QACjB,iBAAiB;QACjB,iBAAiB;QACjB,sBAAsB;QACtB,mBAAmB;QACnB,sBAAsB;QACtB,kBAAkB;QAClB,oBAAoB;QACpB,qBAAqB;QACrB,WAAW;QACX,eAAe;QACf,aAAa;QACb,gBAAgB;QAChB,oBAAoB;QACpB,gBAAgB;QAChB,iBAAiB;QACjB,cAAc;QACd,sBAAsB;QACtB,yBAAyB;QACzB,sBAAsB;QACtB,kBAAkB;QAClB,qBAAqB;QACrB,eAAe;QACf,4BAA4B;QAC5B,kBAAkB;QAClB,eAAe;QACf,qBAAqB;QACrB,yBAAyB;QACzB,0BAA0B;QAC1B,0BAA0B;QAC1B,oBAAoB;QACpB,0BAA0B;QAC1B,OAAO;QACP,aAAa;QACb,oBAAoB;QACpB,oBAAoB;QACpB,oBAAoB;QACpB,oBAAoB;QACpB,mBAAmB;QACnB,sBAAsB;QACtB,yBAAyB;QACzB,sBAAsB;QACtB,gCAAgC;QAChC,mBAAmB;QACnB,qBAAqB;QACrB,gBAAgB;QAChB,gBAAgB;QAChB,8BAA8B;QAC9B,YAAY;QACZ,gBAAgB;QAChB,iBAAiB;QACjB,iBAAiB;QACjB,iBAAiB;QACjB,iBAAiB;QACjB,gBAAgB;QAChB,oBAAoB;QACpB,qBAAqB;QACrB,qBAAqB;QACrB,qBAAqB;QACrB,8BAA8B;QAC9B,6BAA6B;KAC9B;IACD,gBAAgB,EAAE,iCAAiC;IACnD,IAAI,EAAE;QACJ,IAAI,EAAE,eAAe;QACrB,QAAQ,EAAE,oBAAoB;QAC9B,MAAM,EAAE;YACN,mBAAmB;YACnB,aAAa;YACb,cAAc;YACd,UAAU;YACV,QAAQ;YACR,aAAa;YACb,iBAAiB;YACjB,cAAc;YACd,QAAQ;YACR,WAAW;YACX,eAAe;SAChB;KACF;IACD,eAAe,EAAE;QACf;YACE,GAAG,EAAE,kBAAkB;YACvB,KAAK,EAAE,wBAAwB;YAC/B,QAAQ,EAAE,IAAI;SACf;QACD;YACE,GAAG,EAAE,sBAAsB;YAC3B,KAAK,EAAE,4BAA4B;YACnC,QAAQ,EAAE,IAAI;SACf;QACD;YACE,GAAG,EAAE,qBAAqB;YAC1B,KAAK,EAAE,2BAA2B;YAClC,QAAQ,EAAE,IAAI;SACf;QACD;YACE,GAAG,EAAE,yBAAyB;YAC9B,KAAK,EAAE,+BAA+B;YACtC,QAAQ,EAAE,IAAI;SACf;QACD,EAAE,GAAG,EAAE,gBAAgB,EAAE,KAAK,EAAE,sBAAsB,EAAE,QAAQ,EAAE,IAAI,EAAE;QACxE;YACE,GAAG,EAAE,oBAAoB;YACzB,KAAK,EAAE,0BAA0B;YACjC,QAAQ,EAAE,IAAI;SACf;QACD;YACE,GAAG,EAAE,eAAe;YACpB,KAAK,EAAE,mCAAmC;YAC1C,QAAQ,EAAE,IAAI;SACf;QACD;YACE,GAAG,EAAE,oBAAoB;YACzB,KAAK,EAAE,oCAAoC;YAC3C,QAAQ,EAAE,IAAI;SACf;QACD,EAAE,GAAG,EAAE,mBAAmB,EAAE,KAAK,EAAE,mBAAmB,EAAE,QAAQ,EAAE,IAAI,EAAE;QACxE;YACE,GAAG,EAAE,oBAAoB;YACzB,KAAK,EAAE,sBAAsB;YAC7B,QAAQ,EAAE,IAAI;SACf;KACF;IACD,aAAa,EAAE;QACb,iBAAiB;QACjB,WAAW;QACX,MAAM;QACN,OAAO;QACP,aAAa;QACb,eAAe;KAChB;IACD,KAAK,EAAE;QACL,UAAU,EAAE,KAAK;QACjB,eAAe,EAAE,qBAAqB;KACvC;CACF,CAAC"}

package/dist/server/availability-engine.d.ts

@@ -1,4 +1,24 @@
 import type { EventType, BusyInterval, Slot } from "../shared/index.js";
+export declare class SlotConflictError extends Error {
+    statusCode: number;
+    constructor(message?: string);
+}
+export interface AssertSlotAvailableInput {
+    hostEmail: string;
+    startTime: string;
+    endTime: string;
+    beforeEventBuffer?: number;
+    afterEventBuffer?: number;
+    /** Booking uid to ignore when checking conflicts (e.g. the one being rescheduled). */
+    excludeBookingUid?: string;
+}
+/**
+ * Re-validate a single requested interval right before it's written —
+ * cheap by design: aggregates busy only over the buffer-expanded window
+ * instead of scanning a full day like `getAvailableSlots`. Throws
+ * `SlotConflictError` if the window collides with existing busy time.
+ */
+export declare function assertSlotAvailable(input: AssertSlotAvailableInput): Promise<void>;
 export interface GetSlotsInput {
     eventType: EventType;
     /** The user we're finding availability for — their schedule + calendars. */

package/dist/server/availability-engine.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"availability-engine.d.ts","sourceRoot":"","sources":["../../src/server/availability-engine.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EACV,SAAS,EAET,YAAY,EACZ,IAAI,EACL,MAAM,oBAAoB,CAAC;AAK5B,MAAM,WAAW,aAAa;IAC5B,SAAS,EAAE,SAAS,CAAC;IACrB,4EAA4E;IAC5E,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,IAAI,CAAC;IACjB,QAAQ,EAAE,IAAI,CAAC;IACf,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,GAAG,CAAC,EAAE,IAAI,CAAC;CACZ;AAED,wBAAsB,iBAAiB,CAAC,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,CAyC7E;AAmBD;;;GAGG;AACH,wBAAsB,aAAa,CAAC,KAAK,EAAE;IACzC,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,IAAI,CAAC;IACjB,QAAQ,EAAE,IAAI,CAAC;CAChB,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,CA4D1B"}
+{"version":3,"file":"availability-engine.d.ts","sourceRoot":"","sources":["../../src/server/availability-engine.ts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EACV,SAAS,EAET,YAAY,EACZ,IAAI,EACL,MAAM,oBAAoB,CAAC;AAO5B,qBAAa,iBAAkB,SAAQ,KAAK;IAC1C,UAAU,SAAO;IACjB,YAAY,OAAO,SAA0C,EAG5D;CACF;AAED,MAAM,WAAW,wBAAwB;IACvC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,sFAAsF;IACtF,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED;;;;;GAKG;AACH,wBAAsB,mBAAmB,CACvC,KAAK,EAAE,wBAAwB,GAC9B,OAAO,CAAC,IAAI,CAAC,CAkBf;AAED,MAAM,WAAW,aAAa;IAC5B,SAAS,EAAE,SAAS,CAAC;IACrB,4EAA4E;IAC5E,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,IAAI,CAAC;IACjB,QAAQ,EAAE,IAAI,CAAC;IACf,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,GAAG,CAAC,EAAE,IAAI,CAAC;CACZ;AAED,wBAAsB,iBAAiB,CAAC,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,CAyC7E;AAmBD;;;GAGG;AACH,wBAAsB,aAAa,CAAC,KAAK,EAAE;IACzC,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,IAAI,CAAC;IACjB,QAAQ,EAAE,IAAI,CAAC;CAChB,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,CAwF1B"}