@checkcourt/sdk 0.5.0 → 0.7.0

package/README.md

@@ -178,6 +178,21 @@ ui.form({
 });
 ```
 
+`ui.field.date` and `ui.field.time` render native date and time pickers. `default`, `min` and
+`max` are `YYYY-MM-DD` strings for dates and `HH:MM` (24-hour) strings for times; `time` takes an
+optional `step` in minutes. Both submit their value as a string:
+
+```ts
+ui.form({
+  actionId: "block",
+  submitLabel: "Sperren",
+  fields: [
+    ui.field.date("day", "Tag", { min: "2026-01-01", required: true }),
+    ui.field.time("from", "Von", { min: "07:00", max: "22:00", step: 30, required: true }),
+  ],
+});
+```
+
 Compare `context.installation_id` and `context.tenant_id` with what you stored from
 `app.installed` before you act on a request. For the context token alone (for example in
 the backend of an iframe extension), use `verifyExtensionContext(token, secret)`.
@@ -192,7 +207,8 @@ with the matching builder; each throws when the answer would break CheckCourt's
 | `court.annotation` | `ext.date`, `ext.courts` | `ui.annotations([{ court_id, label, variant? }])`, label up to 24 characters, one per court |
 | `member.list.column` | `ext.members` | `ui.column({ title, values: [{ member_id, text, variant? }] })`, title up to 20, text up to 24 characters |
 | `booking.hint` | `ext.draft` | `ui.hint([...])` with up to 6 text, badge, key_value or link blocks; answer within 1 second |
-| `booking_plan.action`, `sidebar.action` | `booking_plan.action`: the day as subject | `ui.doc([...])`, shown in a dialog after a click; `ui.hidden()` closes it |
+| `booking_plan.action` | `ext.date`, `ext.courts` (and the day as subject) | `ui.doc([...])`, shown in a dialog after a click; `ui.hidden()` closes it |
+| `sidebar.action` | nothing extra | `ui.doc([...])`, shown in a dialog after a click; `ui.hidden()` closes it |
 | `member.settings.section` | nothing extra | `ui.doc([...])`, a card on the member's own settings page |
 
 ```ts

package/dist/extensions.d.ts

@@ -115,7 +115,7 @@ export type ExtensionContextClaims = {
 export declare function verifyExtensionContext(token: string, secret: string, options?: {
     now?: Date | number;
 }): Promise<ExtensionContextClaims>;
-/** A court of the plan a `court.annotation` request covers. */
+/** A court of the plan a `court.annotation` or `booking_plan.action` request covers. */
 export interface AnnotationCourt {
     id: number;
     name: string;
@@ -145,9 +145,9 @@ export interface ExtensionRenderRequest {
     context: ExtensionContextClaims;
     point: ExtensionPoint;
     subject: ExtensionSubject | null;
-    /** `court.annotation`: the plan's day, YYYY-MM-DD. */
+    /** `court.annotation` and `booking_plan.action`: the plan's day, YYYY-MM-DD. */
     date?: string;
-    /** `court.annotation`: every court of the plan, answered in one document. */
+    /** `court.annotation` (one document for all) and `booking_plan.action`: every court of the plan. */
     courts?: AnnotationCourt[];
     /** `member.list.column`: the members on the visible page. */
     members?: ColumnMember[];
@@ -162,6 +162,10 @@ export interface ExtensionActionRequest {
     subject: ExtensionSubject | null;
     actionId: string;
     values: UiFormValues;
+    /** `booking_plan.action`: the plan's day, YYYY-MM-DD. */
+    date?: string;
+    /** `booking_plan.action`: every court of the plan, so a form can offer a court select. */
+    courts?: AnnotationCourt[];
 }
 export type ExtensionRequest = ExtensionRenderRequest | ExtensionActionRequest;
 type HeaderSource = Headers | Record<string, string | string[] | undefined>;
@@ -169,7 +173,8 @@ type HeaderSource = Headers | Record<string, string | string[] | undefined>;
  * Verifies a declarative extension POST: the `CheckCourt-Signature` over the raw body (it binds
  * `action_id` and `values` to the token), the context token, and that body, header token and
  * claims agree. Renders at `court.annotation`, `member.list.column` and `booking.hint` also
- * carry `date` and `courts`, `members` or `draft`. Throws `ExtensionVerificationError`.
+ * carry `date` and `courts`, `members` or `draft`; `booking_plan.action` renders and actions
+ * carry the plan's `date` and `courts`. Throws `ExtensionVerificationError`.
  */
 export declare function verifyExtensionRequest(options: {
     secret: string;

package/dist/extensions.js

@@ -84,17 +84,21 @@ function sameSubject(a, b) {
 const DATE = /^\d{4}-\d{2}-\d{2}$/;
 const TIME = /^\d{2}:\d{2}$/;
 const isObject = (v) => typeof v === "object" && v !== null && !Array.isArray(v);
+/** Parses the `date` and `courts` a court.annotation or booking_plan.action request carries. */
+function planCourts(body) {
+    const { date, courts } = body;
+    if (typeof date !== "string" || !DATE.test(date))
+        throw fail("invalid_body", "date is not YYYY-MM-DD");
+    if (!Array.isArray(courts) || !courts.every((c) => isObject(c) && typeof c.id === "number" && typeof c.name === "string")) {
+        throw fail("invalid_body", "courts is not a list of { id, name }");
+    }
+    return { date, courts: courts.map((c) => ({ id: c.id, name: c.name })) };
+}
 function surfaceFields(point, body) {
     switch (point) {
-        case "court.annotation": {
-            const { date, courts } = body;
-            if (typeof date !== "string" || !DATE.test(date))
-                throw fail("invalid_body", "date is not YYYY-MM-DD");
-            if (!Array.isArray(courts) || !courts.every((c) => isObject(c) && typeof c.id === "number" && typeof c.name === "string")) {
-                throw fail("invalid_body", "courts is not a list of { id, name }");
-            }
-            return { date, courts: courts.map((c) => ({ id: c.id, name: c.name })) };
-        }
+        case "court.annotation":
+        case "booking_plan.action":
+            return planCourts(body);
         case "member.list.column": {
             const { members } = body;
             if (!Array.isArray(members) ||
@@ -134,7 +138,8 @@ function surfaceFields(point, body) {
  * Verifies a declarative extension POST: the `CheckCourt-Signature` over the raw body (it binds
  * `action_id` and `values` to the token), the context token, and that body, header token and
  * claims agree. Renders at `court.annotation`, `member.list.column` and `booking.hint` also
- * carry `date` and `courts`, `members` or `draft`. Throws `ExtensionVerificationError`.
+ * carry `date` and `courts`, `members` or `draft`; `booking_plan.action` renders and actions
+ * carry the plan's `date` and `courts`. Throws `ExtensionVerificationError`.
  */
 export async function verifyExtensionRequest(options) {
     try {
@@ -185,5 +190,6 @@ export async function verifyExtensionRequest(options) {
         subject,
         actionId: body.action_id,
         values: values,
+        ...(context.point === "booking_plan.action" ? planCourts(body) : {}),
     };
 }

package/dist/generated/schema.d.ts

@@ -242,11 +242,11 @@ export interface paths {
          * @description **Required scope:** `members:invite`
          *
          *     Adds a member to the club. Three flows, decided by the input:
-         *     1. **Email already has an account** (in no other club): the existing user is added to this club.
+         *     1. **Email already has an account** (in no other club): the account owner is invited. The membership stays pending (`awaitingAcceptance: true`) until they accept after their next login; until then the club cannot change the account's name, email, phone or password, and deleting the member only withdraws the invitation. `sendEmail` controls the invitation mail.
          *     2. **New email**: a new account is created and, unless `sendEmail=false`, a welcome mail with a claim link is sent.
          *     3. **`noOwnEmail=true`**: for members without their own mailbox. Creates an account with a synthetic address, stores the given email as forwarding address and requires a `password` (min 8 chars) the member uses to log in.
          *
-         *     `roleIds` (optional) assigns roles besides the base role Mitglied (member) and requires `roles:manage`, which only personal keys can hold: the caller must outrank each role and hold all of its scopes (403). Unknown ids fail with 404 before anything is created.
+         *     `roleIds` (optional) assigns roles besides the base role Mitglied and requires `roles:manage`, which only personal keys can hold: the caller must outrank each role and hold all of its scopes (403). Unknown ids fail with 404 before anything is created.
          *
          *     Fails with 422 when the club's member limit is reached, the member number is taken, the email already belongs to this club, or the data processing agreement (AVV) has not been signed yet.
          */
@@ -302,7 +302,7 @@ export interface paths {
          * End a membership
          * @description **Required scope:** `members:delete`
          *
-         *     Removes the member from the club with a full cascade: future bookings are cancelled (with email notification), open guest fees are resolved according to `orphanedFeeAction`, and if this was the user's only club the account is anonymized. Members who lead a team cannot be deleted until leadership is handed over, and the club's last administrator cannot be deleted (422). The response summarizes what happened.
+         *     Removes the member from the club with a full cascade: future bookings are cancelled (with email notification), open guest fees are resolved according to `orphanedFeeAction`, and if this was the user's only club the account is anonymized (not for a pending invitation, which only withdraws the invitation). The caller must outrank the member (403): only administrators may delete members holding an equal or higher role; management keys act with their creator's rank but never on administrators. Members who lead a team cannot be deleted until leadership is handed over, and the club's last administrator cannot be deleted (422). The response summarizes what happened.
          */
         delete: operations["deleteMember"];
         options?: never;
@@ -311,7 +311,7 @@ export interface paths {
          * Update a member
          * @description **Required scope:** `members:write`
          *
-         *     `name` and `email` are required (send the current values to keep them); `phone` and `memberNumber` are optional. For forwarding-only accounts the email update changes the forwarding address, not the login address. If the user is also a member of another club, name/email/phone are left untouched (they are account-level) and only the member number changes. Sessions cannot edit their own account; management keys are exempt from that rule. Member numbers are unique per club (422 on collision). Roles are not part of this endpoint: use `PUT /members/{id}/roles`. Sending `role` fails with 400.
+         *     `name` and `email` are required (send the current values to keep them); `phone` and `memberNumber` are optional. For forwarding-only accounts the email update changes the forwarding address, not the login address. If the user is also a member of another club, name/email/phone are left untouched (they are account-level) and only the member number changes. Sessions cannot edit their own account; management keys are exempt from that rule. Changing the email requires outranking the member (403): only administrators may change the email of members holding an equal or higher role; management keys act with their creator's rank but never on administrators. While the member's invitation is pending, changing name, email or phone fails with 422. Member numbers are unique per club (422 on collision). Roles are not part of this endpoint: use `PUT /members/{id}/roles`. Sending `role` fails with 400.
          */
         patch: operations["updateMember"];
         trace?: never;
@@ -3586,7 +3586,12 @@ export interface operations {
                     [name: string]: unknown;
                 };
                 content: {
-                    "application/json": components["schemas"]["Success"];
+                    "application/json": {
+                        /** @constant */
+                        success: true;
+                        /** @description True when an existing account was invited and its owner still has to accept */
+                        awaitingAcceptance: boolean;
+                    };
                 };
             };
             400: components["responses"]["ValidationError"];

package/dist/generated/spec-hash.d.ts

@@ -1 +1 @@
-export declare const OPENAPI_SPEC_SHA256 = "b01c1f9ed8ee89d62dc6daaf41f3f27f55fe06a524660f9790c4981785eed8da";
+export declare const OPENAPI_SPEC_SHA256 = "838f8beb1f933593ea8eea8ea14eb78b12e0e8d61109254f5e72bec10b57e58a";

package/dist/generated/spec-hash.js

@@ -1,2 +1,2 @@
 // Generated by scripts/generate.mjs from the CheckCourt OpenAPI spec. Do not edit.
-export const OPENAPI_SPEC_SHA256 = "b01c1f9ed8ee89d62dc6daaf41f3f27f55fe06a524660f9790c4981785eed8da";
+export const OPENAPI_SPEC_SHA256 = "838f8beb1f933593ea8eea8ea14eb78b12e0e8d61109254f5e72bec10b57e58a";

package/dist/ui.d.ts

@@ -93,7 +93,33 @@ export type UiSwitchField = {
     label: string;
     default?: boolean;
 };
-export type UiFormField = UiTextField | UiNumberField | UiSelectField | UiSwitchField;
+export type UiDateField = {
+    type: "date";
+    name: string;
+    label: string;
+    /** YYYY-MM-DD. */
+    default?: string;
+    /** YYYY-MM-DD. */
+    min?: string;
+    /** YYYY-MM-DD. */
+    max?: string;
+    required?: boolean;
+};
+export type UiTimeField = {
+    type: "time";
+    name: string;
+    label: string;
+    /** HH:MM, 24-hour. */
+    default?: string;
+    /** HH:MM, 24-hour. */
+    min?: string;
+    /** HH:MM, 24-hour. */
+    max?: string;
+    required?: boolean;
+    /** Granularity of the time picker in minutes. */
+    step?: number;
+};
+export type UiFormField = UiTextField | UiNumberField | UiSelectField | UiSwitchField | UiDateField | UiTimeField;
 export type UiFormBlock = {
     type: "form";
     fields: UiFormField[];
@@ -263,6 +289,8 @@ export declare const ui: {
         number(name: string, label: string, options?: Opt<Omit<UiNumberField, "type" | "name" | "label">>): UiNumberField;
         select(name: string, label: string, options: UiSelectField["options"], extra?: Opt<Pick<UiSelectField, "default" | "required">>): UiSelectField;
         switch(name: string, label: string, options?: Opt<Pick<UiSwitchField, "default">>): UiSwitchField;
+        date(name: string, label: string, options?: Opt<Omit<UiDateField, "type" | "name" | "label">>): UiDateField;
+        time(name: string, label: string, options?: Opt<Omit<UiTimeField, "type" | "name" | "label">>): UiTimeField;
     };
     readonly divider: () => UiDividerBlock;
     readonly stack: (children: UiBlock[]) => UiStackBlock;

package/dist/ui.js

@@ -40,6 +40,12 @@ const field = {
     switch(name, label, options = {}) {
         return { type: "switch", name, label, ...options };
     },
+    date(name, label, options = {}) {
+        return compact({ type: "date", name, label, ...options });
+    },
+    time(name, label, options = {}) {
+        return compact({ type: "time", name, label, ...options });
+    },
 };
 function compact(value) {
     return Object.fromEntries(Object.entries(value).filter(([, v]) => v !== undefined));

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@checkcourt/sdk",
-  "version": "0.5.0",
+  "version": "0.7.0",
   "description": "Official TypeScript SDK for the CheckCourt app platform",
   "private": false,
   "license": "MIT",