@aglyn/plugins-bookings 1.0.0-beta.230 → 1.0.0-beta.231

package/README.md

@@ -40,7 +40,7 @@ This package is a first-party Aglyn plugin. It is loaded through Aglyn's plugin
 `@aglyn/plugins-bookings/server` imports `firebase-admin` and is kept out of the client entry point.
 
 - `registerBookingsApi()` (the `tenantApi` surface) registers the site-facing routes `bookings/slots` (open slots for a service, a page of `BOOKING_SLOT_PAGE_DAYS` whole days at a time; `from` asks for the page its `nextFromMs` named) and `bookings/book` (take a booking; a paid service goes through Stripe Checkout).
-- `registerBookingsConsoleApi()` (the `consoleApi` surface) registers `bookings/reminders`, `bookings/refund` and `bookings/booking-analytics`, a handler on the platform billing webhook that confirms paid bookings, and a bookings-by-service figure reader.
+- `registerBookingsConsoleApi()` (the `consoleApi` surface) registers `bookings/reminders`, `bookings/refund`, `bookings/check-in`, `bookings/reschedule`, `bookings/in-person-payment` (a booking paid at the counter on the native Aglyn POS app's card reader) and `bookings/booking-analytics`, a handler on the platform billing webhook that confirms paid bookings, and a bookings-by-service figure reader.
 - Loading the module registers two scheduled plugin jobs: `expire-stale-holds` and `booking-reminders` (a reminder email about a day before a confirmed booking). This is why `package.json` lists `./src/lib/server.*` under `sideEffects`.
 
 Routes are served by the host app's API dispatcher under `/api/`, for example `/api/bookings/slots`.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aglyn/plugins-bookings",
-  "version": "1.0.0-beta.230",
+  "version": "1.0.0-beta.231",
   "license": "Apache-2.0",
   "homepage": "https://aglyn.com",
   "repository": {
@@ -25,16 +25,16 @@
     "./package.json": "./package.json"
   },
   "dependencies": {
-    "@aglyn/aglyn": "1.0.0-beta.230",
-    "@aglyn/shared-data-mdi": "1.0.0-beta.230",
-    "@aglyn/shared-ui-jsx": "1.0.0-beta.230",
-    "@aglyn/shared-ui-snackstack": "1.0.0-beta.230",
-    "@aglyn/shared-util-email": "1.0.0-beta.230",
-    "@aglyn/shared-util-http": "1.0.0-beta.230",
-    "@aglyn/shared-util-timestamp": "1.0.0-beta.230",
-    "@aglyn/tenant-data-admin": "1.0.0-beta.230",
-    "@aglyn/tenant-feature-instance": "1.0.0-beta.230",
-    "@aglyn/tenant-runtime": "1.0.0-beta.230",
+    "@aglyn/aglyn": "1.0.0-beta.231",
+    "@aglyn/shared-data-mdi": "1.0.0-beta.231",
+    "@aglyn/shared-ui-jsx": "1.0.0-beta.231",
+    "@aglyn/shared-ui-snackstack": "1.0.0-beta.231",
+    "@aglyn/shared-util-email": "1.0.0-beta.231",
+    "@aglyn/shared-util-http": "1.0.0-beta.231",
+    "@aglyn/shared-util-timestamp": "1.0.0-beta.231",
+    "@aglyn/tenant-data-admin": "1.0.0-beta.231",
+    "@aglyn/tenant-feature-instance": "1.0.0-beta.231",
+    "@aglyn/tenant-runtime": "1.0.0-beta.231",
     "@swc/helpers": "0.5.23"
   },
   "peerDependencies": {

package/src/lib/model/booking-in-person.d.ts

@@ -0,0 +1,72 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+/** The in-person payment a booking carries while it is being taken. */
+export interface BookingInPersonPayment {
+    paymentIntentId: string;
+    /** The whole charge: service plus tax. */
+    amountCents: number;
+    /** The service amount staff typed, before tax. */
+    serviceCents: number;
+    taxCents: number;
+    feeCents: number;
+    status: 'pending' | 'paid' | 'canceled';
+    startedAtMs: number;
+    startedBy: string;
+    paidAtMs?: number;
+    /** Which start request made it, so a retried start returns it again. */
+    attempt?: string;
+}
+/** The fields of a booking this reads; any booking document has them. */
+export interface BookingPaymentFields {
+    status?: string;
+    expiresAtMs?: number;
+    paidAmountCents?: number;
+    refundedCents?: number;
+    paymentIntentId?: string;
+    inPersonPayment?: Partial<BookingInPersonPayment> | null;
+}
+export type BookingInPersonState = 
+/** Paid already, online or in person. */
+'paid'
+/** Canceled: nothing to pay. */
+ | 'canceled'
+/** Still holding for its online Checkout: the customer is paying there. */
+ | 'awaiting-online'
+/** A card is being taken for it now. */
+ | 'collecting'
+/** Can be paid at the counter. */
+ | 'payable';
+export declare function bookingInPersonState(booking: BookingPaymentFields, nowMs?: number): BookingInPersonState;
+/** The most one in-person booking charge may be: $10,000. */
+export declare const BOOKING_IN_PERSON_MAX_CENTS = 1000000;
+/** Stripe's card minimum in USD. */
+export declare const BOOKING_IN_PERSON_MIN_CENTS = 50;
+/** Null when `serviceCents` is an amount staff may charge; otherwise why not. */
+export declare function bookingInPersonAmountProblem(serviceCents: unknown): string | null;
+/**
+ * The amount to suggest: the service's fixed price, when it has one. A
+ * `varies`, `estimate` or `contact` price suggests nothing; staff type it.
+ */
+export declare function bookingSuggestedCents(service: {
+    priceUsd?: number;
+    priceDisplay?: string;
+} | null | undefined): number | null;
+/** The start and end of the local day that holds `atMs`, in milliseconds. */
+export declare function bookingDayRange(atMs: number, offsetMinutes?: number): {
+    startMs: number;
+    endMs: number;
+};

package/src/lib/model/booking-in-person.js

@@ -0,0 +1,71 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ /*==========================================
+ * TAKING PAYMENT FOR A BOOKING IN PERSON (AGL-3618).
+ *
+ * A booking whose price was not charged online (a free booking, or one whose
+ * price `varies`, is an `estimate` or is `contact`) is paid at the counter
+ * once the work is done: staff type the amount and the customer taps or
+ * inserts a card on the register's reader. Pure: the server route, the
+ * console and the native Aglyn POS app all read a booking through these.
+ *
+ * Imports nothing, so client and server code alike may import it.
+ *=========================================*/ /** The in-person payment a booking carries while it is being taken. */ export function bookingInPersonState(booking, nowMs = Date.now()) {
+    var _booking_paidAmountCents;
+    var _booking_inPersonPayment, _booking_inPersonPayment1;
+    if (Math.round(Number((_booking_paidAmountCents = booking.paidAmountCents) != null ? _booking_paidAmountCents : 0)) > 0 || Boolean(booking.paymentIntentId) || ((_booking_inPersonPayment = booking.inPersonPayment) == null ? void 0 : _booking_inPersonPayment.status) === 'paid') {
+        return 'paid';
+    }
+    if (booking.status === 'canceled') return 'canceled';
+    if (booking.status === 'pendingPayment') {
+        var _booking_expiresAtMs;
+        // A lapsed online hold released its slot; it is not an appointment.
+        return Number((_booking_expiresAtMs = booking.expiresAtMs) != null ? _booking_expiresAtMs : 0) < nowMs ? 'canceled' : 'awaiting-online';
+    }
+    if (((_booking_inPersonPayment1 = booking.inPersonPayment) == null ? void 0 : _booking_inPersonPayment1.status) === 'pending') return 'collecting';
+    return 'payable';
+}
+/** The most one in-person booking charge may be: $10,000. */ export const BOOKING_IN_PERSON_MAX_CENTS = 1000000;
+/** Stripe's card minimum in USD. */ export const BOOKING_IN_PERSON_MIN_CENTS = 50;
+/** Null when `serviceCents` is an amount staff may charge; otherwise why not. */ export function bookingInPersonAmountProblem(serviceCents) {
+    if (typeof serviceCents !== 'number' || !Number.isInteger(serviceCents)) {
+        return 'Enter the amount to charge.';
+    }
+    if (serviceCents < BOOKING_IN_PERSON_MIN_CENTS) return 'Card payments start at $0.50.';
+    if (serviceCents > BOOKING_IN_PERSON_MAX_CENTS) return 'Charge at most $10,000 at a time.';
+    return null;
+}
+/**
+ * The amount to suggest: the service's fixed price, when it has one. A
+ * `varies`, `estimate` or `contact` price suggests nothing; staff type it.
+ */ export function bookingSuggestedCents(service) {
+    var _service_priceUsd;
+    if (!service) return null;
+    if (service.priceDisplay && service.priceDisplay !== 'fixed') return null;
+    const cents = Math.round(Number((_service_priceUsd = service.priceUsd) != null ? _service_priceUsd : 0) * 100);
+    return Number.isFinite(cents) && cents >= BOOKING_IN_PERSON_MIN_CENTS ? cents : null;
+}
+/** The start and end of the local day that holds `atMs`, in milliseconds. */ export function bookingDayRange(atMs, offsetMinutes = new Date(atMs).getTimezoneOffset()) {
+    const local = atMs - offsetMinutes * 60000;
+    const dayStart = Math.floor(local / 86400000) * 86400000;
+    const startMs = dayStart + offsetMinutes * 60000;
+    return {
+        startMs,
+        endMs: startMs + 86400000
+    };
+}
+
+//# sourceMappingURL=booking-in-person.js.map

package/src/lib/model/booking-in-person.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../libs/plugins/bookings/src/lib/model/booking-in-person.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n/*==========================================\n * TAKING PAYMENT FOR A BOOKING IN PERSON (AGL-3618).\n *\n * A booking whose price was not charged online (a free booking, or one whose\n * price `varies`, is an `estimate` or is `contact`) is paid at the counter\n * once the work is done: staff type the amount and the customer taps or\n * inserts a card on the register's reader. Pure: the server route, the\n * console and the native Aglyn POS app all read a booking through these.\n *\n * Imports nothing, so client and server code alike may import it.\n *=========================================*/\n\n/** The in-person payment a booking carries while it is being taken. */\nexport interface BookingInPersonPayment {\n  paymentIntentId: string\n  /** The whole charge: service plus tax. */\n  amountCents: number\n  /** The service amount staff typed, before tax. */\n  serviceCents: number\n  taxCents: number\n  feeCents: number\n  status: 'pending' | 'paid' | 'canceled'\n  startedAtMs: number\n  startedBy: string\n  paidAtMs?: number\n  /** Which start request made it, so a retried start returns it again. */\n  attempt?: string\n}\n\n/** The fields of a booking this reads; any booking document has them. */\nexport interface BookingPaymentFields {\n  status?: string\n  expiresAtMs?: number\n  paidAmountCents?: number\n  refundedCents?: number\n  paymentIntentId?: string\n  inPersonPayment?: Partial<BookingInPersonPayment> | null\n}\n\nexport type BookingInPersonState =\n  /** Paid already, online or in person. */\n  | 'paid'\n  /** Canceled: nothing to pay. */\n  | 'canceled'\n  /** Still holding for its online Checkout: the customer is paying there. */\n  | 'awaiting-online'\n  /** A card is being taken for it now. */\n  | 'collecting'\n  /** Can be paid at the counter. */\n  | 'payable'\n\nexport function bookingInPersonState(\n  booking: BookingPaymentFields,\n  nowMs = Date.now(),\n): BookingInPersonState {\n  if (\n    Math.round(Number(booking.paidAmountCents ?? 0)) > 0 ||\n    Boolean(booking.paymentIntentId) ||\n    booking.inPersonPayment?.status === 'paid'\n  ) {\n    return 'paid'\n  }\n  if (booking.status === 'canceled') return 'canceled'\n  if (booking.status === 'pendingPayment') {\n    // A lapsed online hold released its slot; it is not an appointment.\n    return Number(booking.expiresAtMs ?? 0) < nowMs ? 'canceled' : 'awaiting-online'\n  }\n  if (booking.inPersonPayment?.status === 'pending') return 'collecting'\n  return 'payable'\n}\n\n/** The most one in-person booking charge may be: $10,000. */\nexport const BOOKING_IN_PERSON_MAX_CENTS = 1_000_000\n/** Stripe's card minimum in USD. */\nexport const BOOKING_IN_PERSON_MIN_CENTS = 50\n\n/** Null when `serviceCents` is an amount staff may charge; otherwise why not. */\nexport function bookingInPersonAmountProblem(serviceCents: unknown): string | null {\n  if (typeof serviceCents !== 'number' || !Number.isInteger(serviceCents)) {\n    return 'Enter the amount to charge.'\n  }\n  if (serviceCents < BOOKING_IN_PERSON_MIN_CENTS) return 'Card payments start at $0.50.'\n  if (serviceCents > BOOKING_IN_PERSON_MAX_CENTS) return 'Charge at most $10,000 at a time.'\n  return null\n}\n\n/**\n * The amount to suggest: the service's fixed price, when it has one. A\n * `varies`, `estimate` or `contact` price suggests nothing; staff type it.\n */\nexport function bookingSuggestedCents(service: {\n  priceUsd?: number\n  priceDisplay?: string\n} | null | undefined): number | null {\n  if (!service) return null\n  if (service.priceDisplay && service.priceDisplay !== 'fixed') return null\n  const cents = Math.round(Number(service.priceUsd ?? 0) * 100)\n  return Number.isFinite(cents) && cents >= BOOKING_IN_PERSON_MIN_CENTS ? cents : null\n}\n\n/** The start and end of the local day that holds `atMs`, in milliseconds. */\nexport function bookingDayRange(atMs: number, offsetMinutes = new Date(atMs).getTimezoneOffset()): {\n  startMs: number\n  endMs: number\n} {\n  const local = atMs - offsetMinutes * 60_000\n  const dayStart = Math.floor(local / 86_400_000) * 86_400_000\n  const startMs = dayStart + offsetMinutes * 60_000\n  return { startMs, endMs: startMs + 86_400_000 }\n}\n"],"names":["bookingInPersonState","booking","nowMs","Date","now","Math","round","Number","paidAmountCents","Boolean","paymentIntentId","inPersonPayment","status","expiresAtMs","BOOKING_IN_PERSON_MAX_CENTS","BOOKING_IN_PERSON_MIN_CENTS","bookingInPersonAmountProblem","serviceCents","isInteger","bookingSuggestedCents","service","priceDisplay","cents","priceUsd","isFinite","bookingDayRange","atMs","offsetMinutes","getTimezoneOffset","local","dayStart","floor","startMs","endMs"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED;;;;;;;;;;2CAU2C,GAE3C,qEAAqE,GAuCrE,OAAO,SAASA,qBACdC,OAA6B,EAC7BC,QAAQC,KAAKC,GAAG,EAAE;QAGEH;QAElBA,0BASEA;IAZJ,IACEI,KAAKC,KAAK,CAACC,QAAON,2BAAAA,QAAQO,eAAe,YAAvBP,2BAA2B,MAAM,KACnDQ,QAAQR,QAAQS,eAAe,KAC/BT,EAAAA,2BAAAA,QAAQU,eAAe,qBAAvBV,yBAAyBW,MAAM,MAAK,QACpC;QACA,OAAO;IACT;IACA,IAAIX,QAAQW,MAAM,KAAK,YAAY,OAAO;IAC1C,IAAIX,QAAQW,MAAM,KAAK,kBAAkB;YAEzBX;QADd,oEAAoE;QACpE,OAAOM,QAAON,uBAAAA,QAAQY,WAAW,YAAnBZ,uBAAuB,KAAKC,QAAQ,aAAa;IACjE;IACA,IAAID,EAAAA,4BAAAA,QAAQU,eAAe,qBAAvBV,0BAAyBW,MAAM,MAAK,WAAW,OAAO;IAC1D,OAAO;AACT;AAEA,2DAA2D,GAC3D,OAAO,MAAME,8BAA8B,QAAS;AACpD,kCAAkC,GAClC,OAAO,MAAMC,8BAA8B,GAAE;AAE7C,+EAA+E,GAC/E,OAAO,SAASC,6BAA6BC,YAAqB;IAChE,IAAI,OAAOA,iBAAiB,YAAY,CAACV,OAAOW,SAAS,CAACD,eAAe;QACvE,OAAO;IACT;IACA,IAAIA,eAAeF,6BAA6B,OAAO;IACvD,IAAIE,eAAeH,6BAA6B,OAAO;IACvD,OAAO;AACT;AAEA;;;CAGC,GACD,OAAO,SAASK,sBAAsBC,OAGlB;QAGcA;IAFhC,IAAI,CAACA,SAAS,OAAO;IACrB,IAAIA,QAAQC,YAAY,IAAID,QAAQC,YAAY,KAAK,SAAS,OAAO;IACrE,MAAMC,QAAQjB,KAAKC,KAAK,CAACC,QAAOa,oBAAAA,QAAQG,QAAQ,YAAhBH,oBAAoB,KAAK;IACzD,OAAOb,OAAOiB,QAAQ,CAACF,UAAUA,SAASP,8BAA8BO,QAAQ;AAClF;AAEA,2EAA2E,GAC3E,OAAO,SAASG,gBAAgBC,IAAY,EAAEC,gBAAgB,IAAIxB,KAAKuB,MAAME,iBAAiB,EAAE;IAI9F,MAAMC,QAAQH,OAAOC,gBAAgB;IACrC,MAAMG,WAAWzB,KAAK0B,KAAK,CAACF,QAAQ,YAAc;IAClD,MAAMG,UAAUF,WAAWH,gBAAgB;IAC3C,OAAO;QAAEK;QAASC,OAAOD,UAAU;IAAW;AAChD"}

package/src/lib/model/booking-manage.d.ts

@@ -0,0 +1,66 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+/**
+ * What a site's team may do to a booking once it exists (AGL-3621): check
+ * the guest in, move it, cancel it. One pure rule set, read by the routes
+ * that do it (`bookings/check-in`, `bookings/reschedule`) under their own
+ * transaction, and the rules a client mirrors to decide what to OFFER (the
+ * native Aglyn app's bookings screens port them, cased by this file's spec),
+ * so a screen can only offer what the route would then do.
+ *
+ * No I/O and no React, so client and server code alike may import it.
+ */
+/** `hosts/{hostId}/bookings/{id}`, the fields these rules read. */
+export interface ManagedBooking {
+    status?: string;
+    startsAtMs?: number;
+    endsAtMs?: number;
+    expiresAtMs?: number;
+    paidAmountCents?: number;
+    refundedCents?: number;
+    checkedInAtMs?: number;
+}
+export type BookingState = 'confirmed' | 'pendingPayment' | 'expired' | 'canceled';
+/**
+ * The booking's state as a reader should treat it. A payment hold whose
+ * fifteen minutes ran out released its slot (AGL-170) even while the
+ * document still says `pendingPayment`.
+ */
+export declare function bookingState(booking: ManagedBooking, nowMs: number): BookingState;
+export declare const BOOKING_STATE_LABELS: Readonly<Record<BookingState, string>>;
+/** The paid amount not yet refunded, in cents. */
+export declare function bookingOutstandingCents(booking: ManagedBooking): number;
+export interface BookingActions {
+    checkIn: boolean;
+    undoCheckIn: boolean;
+    reschedule: boolean;
+    /** Cancel; with `refundCents` above zero the cancel goes through the refund route. */
+    cancel: boolean;
+    refundCents: number;
+}
+/**
+ * What may be done to a booking now. A guest is checked in only on a
+ * confirmed booking; a booking moves only while it is confirmed and has not
+ * ended; and nothing is done to a canceled one.
+ */
+export declare function bookingActions(booking: ManagedBooking, nowMs: number): BookingActions;
+/** Why a check-in (or its undo) cannot be written, or null. The route's own refusal. */
+export declare function checkInRefusal(booking: ManagedBooking, checkedIn: boolean, nowMs: number): string | null;
+/** Why a booking cannot move to `startsAtMs`, or null. The slot itself is checked apart. */
+export declare function rescheduleRefusal(booking: ManagedBooking, startsAtMs: number, nowMs: number): string | null;
+/** The booking's length, kept when it moves: what the guest booked, not what the service says today. */
+export declare function bookingDurationMs(booking: ManagedBooking, fallbackMinutes: number): number;

package/src/lib/model/booking-manage.js

@@ -0,0 +1,90 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ /**
+ * What a site's team may do to a booking once it exists (AGL-3621): check
+ * the guest in, move it, cancel it. One pure rule set, read by the routes
+ * that do it (`bookings/check-in`, `bookings/reschedule`) under their own
+ * transaction, and the rules a client mirrors to decide what to OFFER (the
+ * native Aglyn app's bookings screens port them, cased by this file's spec),
+ * so a screen can only offer what the route would then do.
+ *
+ * No I/O and no React, so client and server code alike may import it.
+ */ /** `hosts/{hostId}/bookings/{id}`, the fields these rules read. */ /**
+ * The booking's state as a reader should treat it. A payment hold whose
+ * fifteen minutes ran out released its slot (AGL-170) even while the
+ * document still says `pendingPayment`.
+ */ export function bookingState(booking, nowMs) {
+    if (booking.status === 'canceled') return 'canceled';
+    if (booking.status === 'pendingPayment') {
+        var _booking_expiresAtMs;
+        return Number((_booking_expiresAtMs = booking.expiresAtMs) != null ? _booking_expiresAtMs : 0) < nowMs ? 'expired' : 'pendingPayment';
+    }
+    return 'confirmed';
+}
+export const BOOKING_STATE_LABELS = {
+    confirmed: 'Confirmed',
+    pendingPayment: 'Awaiting payment',
+    expired: 'Payment not finished',
+    canceled: 'Canceled'
+};
+/** The paid amount not yet refunded, in cents. */ export function bookingOutstandingCents(booking) {
+    var _booking_paidAmountCents, _booking_refundedCents;
+    const paid = Math.max(0, Math.round(Number((_booking_paidAmountCents = booking.paidAmountCents) != null ? _booking_paidAmountCents : 0)));
+    const refunded = Math.max(0, Math.round(Number((_booking_refundedCents = booking.refundedCents) != null ? _booking_refundedCents : 0)));
+    return Math.max(0, paid - refunded);
+}
+/**
+ * What may be done to a booking now. A guest is checked in only on a
+ * confirmed booking; a booking moves only while it is confirmed and has not
+ * ended; and nothing is done to a canceled one.
+ */ export function bookingActions(booking, nowMs) {
+    var _booking_checkedInAtMs, _booking_endsAtMs;
+    const state = bookingState(booking, nowMs);
+    const confirmed = state === 'confirmed';
+    const checkedIn = Number((_booking_checkedInAtMs = booking.checkedInAtMs) != null ? _booking_checkedInAtMs : 0) > 0;
+    const ended = Number((_booking_endsAtMs = booking.endsAtMs) != null ? _booking_endsAtMs : 0) <= nowMs;
+    return {
+        checkIn: confirmed && !checkedIn,
+        undoCheckIn: confirmed && checkedIn,
+        reschedule: confirmed && !checkedIn && !ended,
+        cancel: state !== 'canceled' && !checkedIn,
+        refundCents: bookingOutstandingCents(booking)
+    };
+}
+/** Why a check-in (or its undo) cannot be written, or null. The route's own refusal. */ export function checkInRefusal(booking, checkedIn, nowMs) {
+    var _booking_checkedInAtMs;
+    const state = bookingState(booking, nowMs);
+    if (state === 'canceled') return 'This booking was canceled';
+    if (state !== 'confirmed') return 'This booking is not paid yet';
+    return checkedIn || Number((_booking_checkedInAtMs = booking.checkedInAtMs) != null ? _booking_checkedInAtMs : 0) > 0 ? null : 'This guest is not checked in';
+}
+/** Why a booking cannot move to `startsAtMs`, or null. The slot itself is checked apart. */ export function rescheduleRefusal(booking, startsAtMs, nowMs) {
+    var _booking_checkedInAtMs, _booking_endsAtMs;
+    const state = bookingState(booking, nowMs);
+    if (state === 'canceled') return 'This booking was canceled';
+    if (state !== 'confirmed') return 'This booking is not paid yet';
+    if (Number((_booking_checkedInAtMs = booking.checkedInAtMs) != null ? _booking_checkedInAtMs : 0) > 0) return 'This guest is already checked in';
+    if (Number((_booking_endsAtMs = booking.endsAtMs) != null ? _booking_endsAtMs : 0) <= nowMs) return 'This booking has already ended';
+    if (!Number.isFinite(startsAtMs) || startsAtMs <= nowMs) return 'Pick a time that has not passed';
+    return null;
+}
+/** The booking's length, kept when it moves: what the guest booked, not what the service says today. */ export function bookingDurationMs(booking, fallbackMinutes) {
+    var _booking_endsAtMs, _booking_startsAtMs;
+    const stored = Number((_booking_endsAtMs = booking.endsAtMs) != null ? _booking_endsAtMs : 0) - Number((_booking_startsAtMs = booking.startsAtMs) != null ? _booking_startsAtMs : 0);
+    return stored > 0 ? stored : Math.max(5, Math.round(fallbackMinutes || 30)) * 60000;
+}
+
+//# sourceMappingURL=booking-manage.js.map

package/src/lib/model/booking-manage.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../libs/plugins/bookings/src/lib/model/booking-manage.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n/**\n * What a site's team may do to a booking once it exists (AGL-3621): check\n * the guest in, move it, cancel it. One pure rule set, read by the routes\n * that do it (`bookings/check-in`, `bookings/reschedule`) under their own\n * transaction, and the rules a client mirrors to decide what to OFFER (the\n * native Aglyn app's bookings screens port them, cased by this file's spec),\n * so a screen can only offer what the route would then do.\n *\n * No I/O and no React, so client and server code alike may import it.\n */\n\n/** `hosts/{hostId}/bookings/{id}`, the fields these rules read. */\nexport interface ManagedBooking {\n  status?: string\n  startsAtMs?: number\n  endsAtMs?: number\n  expiresAtMs?: number\n  paidAmountCents?: number\n  refundedCents?: number\n  checkedInAtMs?: number\n}\n\nexport type BookingState = 'confirmed' | 'pendingPayment' | 'expired' | 'canceled'\n\n/**\n * The booking's state as a reader should treat it. A payment hold whose\n * fifteen minutes ran out released its slot (AGL-170) even while the\n * document still says `pendingPayment`.\n */\nexport function bookingState(booking: ManagedBooking, nowMs: number): BookingState {\n  if (booking.status === 'canceled') return 'canceled'\n  if (booking.status === 'pendingPayment') {\n    return Number(booking.expiresAtMs ?? 0) < nowMs ? 'expired' : 'pendingPayment'\n  }\n  return 'confirmed'\n}\n\nexport const BOOKING_STATE_LABELS: Readonly<Record<BookingState, string>> = {\n  confirmed: 'Confirmed',\n  pendingPayment: 'Awaiting payment',\n  expired: 'Payment not finished',\n  canceled: 'Canceled',\n}\n\n/** The paid amount not yet refunded, in cents. */\nexport function bookingOutstandingCents(booking: ManagedBooking): number {\n  const paid = Math.max(0, Math.round(Number(booking.paidAmountCents ?? 0)))\n  const refunded = Math.max(0, Math.round(Number(booking.refundedCents ?? 0)))\n  return Math.max(0, paid - refunded)\n}\n\nexport interface BookingActions {\n  checkIn: boolean\n  undoCheckIn: boolean\n  reschedule: boolean\n  /** Cancel; with `refundCents` above zero the cancel goes through the refund route. */\n  cancel: boolean\n  refundCents: number\n}\n\n/**\n * What may be done to a booking now. A guest is checked in only on a\n * confirmed booking; a booking moves only while it is confirmed and has not\n * ended; and nothing is done to a canceled one.\n */\nexport function bookingActions(booking: ManagedBooking, nowMs: number): BookingActions {\n  const state = bookingState(booking, nowMs)\n  const confirmed = state === 'confirmed'\n  const checkedIn = Number(booking.checkedInAtMs ?? 0) > 0\n  const ended = Number(booking.endsAtMs ?? 0) <= nowMs\n  return {\n    checkIn: confirmed && !checkedIn,\n    undoCheckIn: confirmed && checkedIn,\n    reschedule: confirmed && !checkedIn && !ended,\n    cancel: state !== 'canceled' && !checkedIn,\n    refundCents: bookingOutstandingCents(booking),\n  }\n}\n\n/** Why a check-in (or its undo) cannot be written, or null. The route's own refusal. */\nexport function checkInRefusal(booking: ManagedBooking, checkedIn: boolean, nowMs: number): string | null {\n  const state = bookingState(booking, nowMs)\n  if (state === 'canceled') return 'This booking was canceled'\n  if (state !== 'confirmed') return 'This booking is not paid yet'\n  return checkedIn || Number(booking.checkedInAtMs ?? 0) > 0 ? null : 'This guest is not checked in'\n}\n\n/** Why a booking cannot move to `startsAtMs`, or null. The slot itself is checked apart. */\nexport function rescheduleRefusal(booking: ManagedBooking, startsAtMs: number, nowMs: number): string | null {\n  const state = bookingState(booking, nowMs)\n  if (state === 'canceled') return 'This booking was canceled'\n  if (state !== 'confirmed') return 'This booking is not paid yet'\n  if (Number(booking.checkedInAtMs ?? 0) > 0) return 'This guest is already checked in'\n  if (Number(booking.endsAtMs ?? 0) <= nowMs) return 'This booking has already ended'\n  if (!Number.isFinite(startsAtMs) || startsAtMs <= nowMs) return 'Pick a time that has not passed'\n  return null\n}\n\n/** The booking's length, kept when it moves: what the guest booked, not what the service says today. */\nexport function bookingDurationMs(booking: ManagedBooking, fallbackMinutes: number): number {\n  const stored = Number(booking.endsAtMs ?? 0) - Number(booking.startsAtMs ?? 0)\n  return stored > 0 ? stored : Math.max(5, Math.round(fallbackMinutes || 30)) * 60_000\n}\n"],"names":["bookingState","booking","nowMs","status","Number","expiresAtMs","BOOKING_STATE_LABELS","confirmed","pendingPayment","expired","canceled","bookingOutstandingCents","paid","Math","max","round","paidAmountCents","refunded","refundedCents","bookingActions","state","checkedIn","checkedInAtMs","ended","endsAtMs","checkIn","undoCheckIn","reschedule","cancel","refundCents","checkInRefusal","rescheduleRefusal","startsAtMs","isFinite","bookingDurationMs","fallbackMinutes","stored"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED;;;;;;;;;CASC,GAED,iEAAiE,GAajE;;;;CAIC,GACD,OAAO,SAASA,aAAaC,OAAuB,EAAEC,KAAa;IACjE,IAAID,QAAQE,MAAM,KAAK,YAAY,OAAO;IAC1C,IAAIF,QAAQE,MAAM,KAAK,kBAAkB;YACzBF;QAAd,OAAOG,QAAOH,uBAAAA,QAAQI,WAAW,YAAnBJ,uBAAuB,KAAKC,QAAQ,YAAY;IAChE;IACA,OAAO;AACT;AAEA,OAAO,MAAMI,uBAA+D;IAC1EC,WAAW;IACXC,gBAAgB;IAChBC,SAAS;IACTC,UAAU;AACZ,EAAC;AAED,gDAAgD,GAChD,OAAO,SAASC,wBAAwBV,OAAuB;QAClBA,0BACIA;IAD/C,MAAMW,OAAOC,KAAKC,GAAG,CAAC,GAAGD,KAAKE,KAAK,CAACX,QAAOH,2BAAAA,QAAQe,eAAe,YAAvBf,2BAA2B;IACtE,MAAMgB,WAAWJ,KAAKC,GAAG,CAAC,GAAGD,KAAKE,KAAK,CAACX,QAAOH,yBAAAA,QAAQiB,aAAa,YAArBjB,yBAAyB;IACxE,OAAOY,KAAKC,GAAG,CAAC,GAAGF,OAAOK;AAC5B;AAWA;;;;CAIC,GACD,OAAO,SAASE,eAAelB,OAAuB,EAAEC,KAAa;QAG1CD,wBACJA;IAHrB,MAAMmB,QAAQpB,aAAaC,SAASC;IACpC,MAAMK,YAAYa,UAAU;IAC5B,MAAMC,YAAYjB,QAAOH,yBAAAA,QAAQqB,aAAa,YAArBrB,yBAAyB,KAAK;IACvD,MAAMsB,QAAQnB,QAAOH,oBAAAA,QAAQuB,QAAQ,YAAhBvB,oBAAoB,MAAMC;IAC/C,OAAO;QACLuB,SAASlB,aAAa,CAACc;QACvBK,aAAanB,aAAac;QAC1BM,YAAYpB,aAAa,CAACc,aAAa,CAACE;QACxCK,QAAQR,UAAU,cAAc,CAACC;QACjCQ,aAAalB,wBAAwBV;IACvC;AACF;AAEA,sFAAsF,GACtF,OAAO,SAAS6B,eAAe7B,OAAuB,EAAEoB,SAAkB,EAAEnB,KAAa;QAI5DD;IAH3B,MAAMmB,QAAQpB,aAAaC,SAASC;IACpC,IAAIkB,UAAU,YAAY,OAAO;IACjC,IAAIA,UAAU,aAAa,OAAO;IAClC,OAAOC,aAAajB,QAAOH,yBAAAA,QAAQqB,aAAa,YAArBrB,yBAAyB,KAAK,IAAI,OAAO;AACtE;AAEA,0FAA0F,GAC1F,OAAO,SAAS8B,kBAAkB9B,OAAuB,EAAE+B,UAAkB,EAAE9B,KAAa;QAI/ED,wBACAA;IAJX,MAAMmB,QAAQpB,aAAaC,SAASC;IACpC,IAAIkB,UAAU,YAAY,OAAO;IACjC,IAAIA,UAAU,aAAa,OAAO;IAClC,IAAIhB,QAAOH,yBAAAA,QAAQqB,aAAa,YAArBrB,yBAAyB,KAAK,GAAG,OAAO;IACnD,IAAIG,QAAOH,oBAAAA,QAAQuB,QAAQ,YAAhBvB,oBAAoB,MAAMC,OAAO,OAAO;IACnD,IAAI,CAACE,OAAO6B,QAAQ,CAACD,eAAeA,cAAc9B,OAAO,OAAO;IAChE,OAAO;AACT;AAEA,sGAAsG,GACtG,OAAO,SAASgC,kBAAkBjC,OAAuB,EAAEkC,eAAuB;QAC1DlC,mBAAgCA;IAAtD,MAAMmC,SAAShC,QAAOH,oBAAAA,QAAQuB,QAAQ,YAAhBvB,oBAAoB,KAAKG,QAAOH,sBAAAA,QAAQ+B,UAAU,YAAlB/B,sBAAsB;IAC5E,OAAOmC,SAAS,IAAIA,SAASvB,KAAKC,GAAG,CAAC,GAAGD,KAAKE,KAAK,CAACoB,mBAAmB,OAAO;AAChF"}

package/src/lib/server/booking-manage.d.ts

@@ -0,0 +1,77 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import type { PluginApiHandler } from '@aglyn/aglyn/app-utils/api-plugins';
+import { type HostBookingService } from '../model/bookings';
+/** The Firestore surface these routes use: the Admin SDK's, narrowed so a spec can hand in a double. */
+export interface ManageDocSnapshot {
+    readonly exists: boolean;
+    readonly id?: string;
+    get(field: string): unknown;
+    data(): Record<string, unknown> | undefined;
+}
+export interface ManageDocRef {
+    readonly id: string;
+}
+export interface ManageQuery {
+    where(field: string, op: '==' | '>=' | '<', value: unknown): ManageQuery;
+    limit(count: number): ManageQuery;
+}
+export interface ManageTransaction {
+    get(ref: ManageDocRef): Promise<ManageDocSnapshot>;
+    get(query: ManageQuery): Promise<{
+        docs: ManageDocSnapshot[];
+    }>;
+    update(ref: ManageDocRef, data: Record<string, unknown>): unknown;
+}
+export interface ManageFirestore {
+    doc(path: string): ManageDocRef & {
+        get(): Promise<ManageDocSnapshot>;
+    };
+    collection(path: string): ManageQuery;
+    runTransaction<T>(fn: (transaction: ManageTransaction) => Promise<T>): Promise<T>;
+}
+export interface RescheduleNotice {
+    hostId: string;
+    bookingId: string;
+    to: string;
+    name: string;
+    serviceName: string;
+    when: string;
+    previousWhen: string;
+    timezone: string;
+}
+export interface BookingManageDeps {
+    firestore: () => ManageFirestore;
+    verifyIdToken: (token: string) => Promise<{
+        uid: string;
+    }>;
+    /** True when the site is locked down and must not take writes. */
+    siteLocked: (hostId: string) => Promise<boolean>;
+    /** The zone a booking is told in when the document carries none. */
+    timeZoneFor: (hostId: string, service: HostBookingService | undefined) => Promise<string>;
+    notifyRescheduled: (notice: RescheduleNotice) => Promise<void>;
+    now: () => number;
+}
+/** Field the booking stamps when the guest arrives. */
+export declare const CHECKED_IN_AT = "checkedInAtMs";
+export declare const CHECKED_IN_BY = "checkedInBy";
+export declare function createBookingCheckInHandler(deps: BookingManageDeps): PluginApiHandler;
+export declare function createBookingRescheduleHandler(deps: BookingManageDeps): PluginApiHandler;
+/** The email that tells a guest their booking moved, as the confirmation is sent. */
+export declare function sendRescheduledNotice(notice: RescheduleNotice): Promise<void>;
+/** The production wiring: the Admin SDK, the site lockdown verdict and the real send. */
+export declare function bookingManageDeps(): BookingManageDeps;