@cosmoops/connect-sdk 0.17.0 → 0.18.0

package/dist/esm/client/components/booking-dialogs.js

@@ -0,0 +1,120 @@
+"use client";
+import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-runtime";
+import { Button, Input, Label, Modal, TextField } from "@heroui/react";
+import { CalendarX2, Clock } from "lucide-react";
+import { useMemo, useState } from "react";
+import { useAvailableSlots, useBookingActions } from "../use-scheduling.js";
+const SEARCH_DAYS = 14;
+/**
+ * Picking a time, and then who it is for.
+ *
+ * The slot list is read fresh every time this opens and is **never cached
+ * across an open**: it is a snapshot of contention, and offering a time
+ * somebody took ninety seconds ago is how two people end up in the same slot.
+ * The server re-checks inside its transaction regardless, so a stale list
+ * costs a refusal rather than a double booking - this only makes the refusal
+ * rare enough to be surprising when it happens.
+ */
+export function ConnectBookingDialog({ isOpen, onOpenChange, eventTypes, initialStartAt, timeZone, onBooked, }) {
+    const [eventTypeId, setEventTypeId] = useState(eventTypes[0]?.id ?? "");
+    const [chosen, setChosen] = useState(null);
+    const [name, setName] = useState("");
+    const [phone, setPhone] = useState("");
+    const window = useMemo(() => ({
+        // From the start of the day that was clicked, so the times on offer are
+        // the ones near where the person was looking.
+        from: new Date(initialStartAt.getTime() - 12 * 60 * 60_000),
+        to: new Date(initialStartAt.getTime() + SEARCH_DAYS * 24 * 60 * 60_000),
+    }), [initialStartAt]);
+    const { slots, isLoading } = useAvailableSlots(eventTypeId ? { eventTypeId, from: window.from, to: window.to } : null);
+    const { createBooking, isPending, error, clearError } = useBookingActions();
+    const canSubmit = Boolean(chosen && name.trim() && phone.trim()) && !isPending;
+    return (_jsx(Modal, { isOpen: isOpen, onOpenChange: onOpenChange, children: _jsx(Modal.Backdrop, { children: _jsx(Modal.Container, { children: _jsxs(Modal.Dialog, { children: [_jsx(Modal.Header, { children: "New appointment" }), _jsxs(Modal.Body, { className: "flex flex-col gap-4", children: [eventTypes.length > 1 && (_jsx("div", { className: "flex flex-wrap gap-2", children: eventTypes.map((eventType) => (_jsx(Button, { size: "sm", variant: eventType.id === eventTypeId ? "primary" : "secondary", onPress: () => {
+                                            setEventTypeId(eventType.id);
+                                            // The old pick belongs to the old type's grid and is
+                                            // almost never a legal slot on the new one.
+                                            setChosen(null);
+                                        }, children: eventType.name }, eventType.id))) })), _jsx(SlotPicker, { slots: slots, isLoading: isLoading, chosen: chosen, onChoose: setChosen, timeZone: timeZone }), _jsxs(TextField, { isRequired: true, variant: "secondary", children: [_jsx(Label, { children: "Name" }), _jsx(Input, { value: name, onChange: (e) => setName(e.currentTarget.value), disabled: isPending })] }), _jsxs(TextField, { isRequired: true, variant: "secondary", children: [_jsx(Label, { children: "Phone" }), _jsx(Input, { type: "tel", value: phone, onChange: (e) => setPhone(e.currentTarget.value), disabled: isPending })] }), error && _jsx("p", { className: "text-sm text-danger", children: error }), _jsxs("div", { className: "flex justify-end gap-2", children: [_jsx(Button, { variant: "secondary", onPress: () => onOpenChange(false), isDisabled: isPending, children: "Cancel" }), _jsx(Button, { variant: "primary", isDisabled: !canSubmit, onPress: async () => {
+                                                clearError();
+                                                const booked = await createBooking({
+                                                    eventTypeId,
+                                                    startAt: chosen,
+                                                    attendee: { name: name.trim(), phone: phone.trim(), email: null },
+                                                });
+                                                if (booked)
+                                                    onBooked(booked);
+                                            }, children: isPending ? "Booking…" : "Book" })] })] })] }) }) }) }));
+}
+/**
+ * One appointment, and the two things anyone opens it to do.
+ *
+ * Rescheduling re-reads the slots with `excludeBookingId` set to this booking.
+ * Without that the appointment blocks its own replacement, and moving it by
+ * half an hour - the only move most people ever make - offers nothing.
+ */
+export function ConnectBookingDetail({ booking, eventType, timeZone, onOpenChange, onChanged, }) {
+    const [isMoving, setMoving] = useState(false);
+    const [chosen, setChosen] = useState(null);
+    const { rescheduleBooking, cancelBooking, isPending, error, clearError } = useBookingActions();
+    const start = new Date(booking.startAt);
+    const window = useMemo(() => ({
+        from: new Date(start.getTime() - 12 * 60 * 60_000),
+        to: new Date(start.getTime() + SEARCH_DAYS * 24 * 60 * 60_000),
+    }), [start]);
+    const { slots, isLoading } = useAvailableSlots(isMoving ? { eventTypeId: booking.eventTypeId, ...window, excludeBookingId: booking.id } : null);
+    return (_jsx(Modal, { isOpen: true, onOpenChange: onOpenChange, children: _jsx(Modal.Backdrop, { children: _jsx(Modal.Container, { children: _jsxs(Modal.Dialog, { children: [_jsx(Modal.Header, { children: booking.attendee.name }), _jsxs(Modal.Body, { className: "flex flex-col gap-4", children: [_jsxs("div", { className: "flex flex-col gap-1", children: [_jsxs("p", { className: "flex items-center gap-2 text-sm", children: [_jsx(Clock, { className: "size-4 text-muted", "aria-hidden": true }), longLabel(start, timeZone)] }), eventType && _jsx("p", { className: "text-sm text-muted", children: eventType.name }), _jsx("p", { className: "text-sm text-muted", children: booking.attendee.phone }), booking.notes && _jsx("p", { className: "pt-1 text-sm", children: booking.notes })] }), isMoving && (_jsx(SlotPicker, { slots: slots, isLoading: isLoading, chosen: chosen, onChoose: setChosen, timeZone: timeZone })), error && _jsx("p", { className: "text-sm text-danger", children: error }), _jsx("div", { className: "flex flex-wrap justify-end gap-2", children: isMoving ? (_jsxs(_Fragment, { children: [_jsx(Button, { variant: "secondary", onPress: () => setMoving(false), isDisabled: isPending, children: "Back" }), _jsx(Button, { variant: "primary", isDisabled: !chosen || isPending, onPress: async () => {
+                                                    clearError();
+                                                    const moved = await rescheduleBooking({
+                                                        bookingId: booking.id,
+                                                        startAt: chosen,
+                                                    });
+                                                    if (moved)
+                                                        onChanged();
+                                                }, children: isPending ? "Moving…" : "Move appointment" })] })) : (_jsxs(_Fragment, { children: [_jsx(Button, { variant: "danger", isDisabled: isPending, onPress: async () => {
+                                                    clearError();
+                                                    const cancelled = await cancelBooking({ bookingId: booking.id });
+                                                    if (cancelled)
+                                                        onChanged();
+                                                }, children: isPending ? "Cancelling…" : "Cancel appointment" }), _jsx(Button, { variant: "secondary", onPress: () => setMoving(true), children: "Reschedule" })] })) })] })] }) }) }) }));
+}
+function SlotPicker({ slots, isLoading, chosen, onChoose, timeZone, }) {
+    const byDay = useMemo(() => {
+        const groups = new Map();
+        const dayFormat = new Intl.DateTimeFormat("en-IN", {
+            timeZone,
+            weekday: "short",
+            day: "numeric",
+            month: "short",
+        });
+        for (const slot of slots) {
+            const label = dayFormat.format(new Date(slot.startAt));
+            groups.set(label, [...(groups.get(label) ?? []), slot]);
+        }
+        return [...groups.entries()];
+    }, [slots, timeZone]);
+    if (isLoading)
+        return _jsx("p", { className: "text-sm text-muted", children: "Finding free times\u2026" });
+    if (byDay.length === 0) {
+        return (_jsxs("div", { className: "flex items-center gap-2 rounded-lg border border-dashed border-separator p-4", children: [_jsx(CalendarX2, { className: "size-4 text-muted", "aria-hidden": true }), _jsx("p", { className: "text-sm text-muted", children: "Nothing free in the next two weeks." })] }));
+    }
+    return (_jsx("div", { className: "flex max-h-56 flex-col gap-3 overflow-y-auto", children: byDay.map(([day, daySlots]) => (_jsxs("div", { className: "flex flex-col gap-1.5", children: [_jsx("p", { className: "text-xs font-medium text-muted", children: day }), _jsx("div", { className: "grid grid-cols-2 gap-1.5 sm:grid-cols-4", children: daySlots.map((slot) => (_jsx(Button, { size: "sm", className: "w-full", variant: slot.startAt === chosen ? "primary" : "secondary", onPress: () => onChoose(slot.startAt), children: shortTime(new Date(slot.startAt), timeZone) }, slot.startAt))) })] }, day))) }));
+}
+function shortTime(instant, timeZone) {
+    return new Intl.DateTimeFormat("en-IN", {
+        timeZone,
+        hour: "numeric",
+        minute: "2-digit",
+        hour12: true,
+    }).format(instant);
+}
+function longLabel(instant, timeZone) {
+    return new Intl.DateTimeFormat("en-IN", {
+        timeZone,
+        weekday: "long",
+        day: "numeric",
+        month: "long",
+        hour: "numeric",
+        minute: "2-digit",
+        hour12: true,
+    }).format(instant);
+}

package/dist/esm/client/components/booking-grid.js

@@ -0,0 +1,199 @@
+/**
+ * An instant, as the local day and minute it lands on in `timeZone`.
+ *
+ * Built from `formatToParts` rather than by adding a fixed offset. An offset
+ * is only correct until a DST boundary, and "add 5.5 hours" is wrong the
+ * moment the same code is pointed at a zone that observes one - which is
+ * exactly the kind of bug that appears twice a year and never in a test.
+ */
+export function zonedInstant(instant, timeZone) {
+    const parts = partsFormatter(timeZone).formatToParts(instant);
+    const read = (type) => parts.find((part) => part.type === type)?.value ?? "00";
+    // `hourCycle: "h23"` so midnight is 00 rather than 24 - `hour12: false`
+    // alone still yields 24 in some engines, and a 24 would push midnight onto
+    // the wrong day.
+    return {
+        dateKey: `${read("year")}-${read("month")}-${read("day")}`,
+        minutes: Number(read("hour")) * 60 + Number(read("minute")),
+    };
+}
+const formatterCache = new Map();
+function partsFormatter(timeZone) {
+    let formatter = formatterCache.get(timeZone);
+    if (!formatter) {
+        // Cached because a grid calls this once per booking per render, and
+        // constructing an `Intl.DateTimeFormat` is the expensive part by a wide
+        // margin.
+        formatter = new Intl.DateTimeFormat("en-CA", {
+            timeZone,
+            year: "numeric",
+            month: "2-digit",
+            day: "2-digit",
+            hour: "2-digit",
+            minute: "2-digit",
+            hourCycle: "h23",
+        });
+        formatterCache.set(timeZone, formatter);
+    }
+    return formatter;
+}
+/**
+ * `count` consecutive days starting at the local day `anchor` falls on.
+ *
+ * Days are stepped by adding 24 hours and re-reading the zone rather than by
+ * incrementing a date field, so a day that is 23 or 25 hours long still
+ * produces the right sequence of `dateKey`s - the midday anchor is what keeps
+ * a DST shift from landing the step on the previous or next day.
+ */
+export function dayColumns(anchor, timeZone, count, now) {
+    const todayKey = zonedInstant(now, timeZone).dateKey;
+    const columns = [];
+    for (let index = 0; index < count; index += 1) {
+        const probe = new Date(anchor.getTime() + index * 24 * 60 * 60_000);
+        const { dateKey } = zonedInstant(probe, timeZone);
+        const startsAt = dayStartInstant(dateKey, timeZone);
+        columns.push({
+            dateKey,
+            label: new Intl.DateTimeFormat("en-IN", {
+                timeZone,
+                weekday: "short",
+                day: "numeric",
+            }).format(startsAt),
+            monthLabel: new Intl.DateTimeFormat("en-IN", { timeZone, month: "short" }).format(startsAt),
+            startsAt,
+            isToday: dateKey === todayKey,
+        });
+    }
+    return columns;
+}
+/**
+ * Local midnight of `dateKey` in `timeZone`, as an instant.
+ *
+ * Solved by probing rather than by arithmetic: guess UTC midnight, read what
+ * local time that actually is, and subtract the difference. One correction is
+ * always enough because a zone's offset cannot change within the few hours the
+ * correction spans - and unlike a fixed-offset formula it is right across DST
+ * and for the half-hour zones (`Asia/Kolkata`, `Australia/Adelaide`) that a
+ * naive implementation quietly breaks on.
+ */
+export function dayStartInstant(dateKey, timeZone) {
+    const utcGuess = new Date(`${dateKey}T00:00:00.000Z`);
+    const { dateKey: landedOn, minutes } = zonedInstant(utcGuess, timeZone);
+    // Whether the guess landed on the day before, the day itself, or the day
+    // after decides which way to correct.
+    const dayDelta = compareDateKeys(landedOn, dateKey);
+    return new Date(utcGuess.getTime() - (minutes + dayDelta * 1440) * 60_000);
+}
+function compareDateKeys(a, b) {
+    if (a === b)
+        return 0;
+    return a < b ? -1 : 1;
+}
+/**
+ * A fifteen-minute appointment on a twelve-hour grid is two percent tall -
+ * unreadable and unclickable. Short appointments are drawn at a floor and
+ * allowed to overhang, which is what every calendar does and what makes a
+ * back-to-back pair still look like two things.
+ */
+const MIN_VISIBLE_FRACTION = 0.02;
+/**
+ * Places bookings on the grid, side by side where they collide.
+ *
+ * Overlap handling is the part worth stating. Two appointments at the same
+ * time are not an error - a workspace with two hosts has them constantly - and
+ * stacking them would hide one entirely. So overlapping bookings are grouped
+ * into *clusters* and each cluster is split into equal columns. The cluster is
+ * built transitively: A overlapping B and B overlapping C puts all three in one
+ * cluster even when A and C do not touch, because anything else lets two of
+ * them land on the same column.
+ */
+export function layoutBookings(bookings, timeZone, window) {
+    const span = window.endMinute - window.startMinute;
+    if (span <= 0)
+        return [];
+    const byDay = new Map();
+    for (const booking of bookings) {
+        const start = zonedInstant(new Date(booking.startAt), timeZone);
+        const end = zonedInstant(new Date(booking.endAt), timeZone);
+        // An appointment that crosses local midnight is clamped to the end of the
+        // day it started on. Splitting it across two columns would be more correct
+        // and is not worth the complexity for a booking grid, where the longest
+        // event type is capped at eight hours server-side.
+        const endMinutes = end.dateKey === start.dateKey ? end.minutes : 1440;
+        const entries = byDay.get(start.dateKey) ?? [];
+        entries.push({ booking, start: start.minutes, end: Math.max(endMinutes, start.minutes + 1) });
+        byDay.set(start.dateKey, entries);
+    }
+    const positioned = [];
+    for (const [dateKey, entries] of byDay) {
+        entries.sort((a, b) => a.start - b.start || a.end - b.end);
+        for (const cluster of clusterOverlapping(entries)) {
+            cluster.forEach((entry, column) => {
+                const clampedStart = Math.max(entry.start, window.startMinute);
+                const clampedEnd = Math.min(entry.end, window.endMinute);
+                positioned.push({
+                    booking: entry.booking,
+                    dateKey,
+                    top: (clampedStart - window.startMinute) / span,
+                    height: Math.max((clampedEnd - clampedStart) / span, MIN_VISIBLE_FRACTION),
+                    column,
+                    columns: cluster.length,
+                    clipped: entry.start < window.startMinute || entry.end > window.endMinute,
+                });
+            });
+        }
+    }
+    return positioned;
+}
+/**
+ * Transitive overlap grouping - see `layoutBookings`.
+ *
+ * Entries arrive sorted by start. A cluster stays open while the next entry
+ * begins before the *furthest* end seen so far, not before the previous
+ * entry's end: a long appointment that swallows several short ones has to keep
+ * the whole run together.
+ */
+function clusterOverlapping(entries) {
+    const clusters = [];
+    let current = [];
+    let clusterEnd = -Infinity;
+    for (const entry of entries) {
+        if (current.length > 0 && entry.start >= clusterEnd) {
+            clusters.push(current);
+            current = [];
+            clusterEnd = -Infinity;
+        }
+        current.push(entry);
+        clusterEnd = Math.max(clusterEnd, entry.end);
+    }
+    if (current.length > 0)
+        clusters.push(current);
+    return clusters;
+}
+/**
+ * The hour labels down the left edge, inclusive of both ends.
+ *
+ * Takes no timezone, deliberately: these label *wall-clock hours on the grid*,
+ * not instants. The grid is already drawn in the business's zone, so "10 am"
+ * means the business's ten - running the label through a zone conversion would
+ * shift it away from the row it sits on.
+ */
+export function hourMarks(window) {
+    const marks = [];
+    const formatter = new Intl.DateTimeFormat("en-IN", {
+        timeZone: "UTC",
+        hour: "numeric",
+        hour12: true,
+    });
+    const firstHour = Math.ceil(window.startMinute / 60);
+    const lastHour = Math.floor(window.endMinute / 60);
+    for (let hour = firstHour; hour <= lastHour; hour += 1) {
+        marks.push({
+            minute: hour * 60,
+            // A synthetic UTC instant formatted in UTC - the round trip exists only
+            // to borrow `Intl`'s "10 am" / "12 pm" spelling, not to convert anything.
+            label: formatter.format(new Date(Date.UTC(2000, 0, 1, hour % 24))),
+        });
+    }
+    return marks;
+}

package/dist/esm/client/index.js

@@ -113,3 +113,7 @@ export { formatPrice, monthlyOf, resolveAction, annualSaving, discountLabel, ACT
 groupPlansByTier, resolvePlanGroup, } from "./components/plan-pricing.js";
 export { ConnectWorkspaceSwitcher } from "./components/workspace-switcher.js";
 export { useConnectWorkspaces, useConnectWorkspaceMembers } from "./provider.js";
+export { ConnectBookingCalendar } from "./components/booking-calendar.js";
+export { ConnectBookingDialog, ConnectBookingDetail } from "./components/booking-dialogs.js";
+export { useBookableEventTypes, useAvailableSlots, useBookings, useBookingActions, } from "./use-scheduling.js";
+export { layoutBookings, dayColumns, zonedInstant, } from "./components/booking-grid.js";

package/dist/esm/client/use-scheduling.js

@@ -0,0 +1,107 @@
+"use client";
+import { useCallback, useMemo, useState } from "react";
+import { useConnect, useConnectResource } from "./provider.js";
+/**
+ * The bridge's scheduling surface, as hooks.
+ *
+ * Every path here is one of the six the bridge exposes, and every one of them
+ * is resolved *for the signed-in member* - Connect takes the workspace from
+ * their session and checks their own `calendar:read` / `calendar:manage`.
+ * Nothing in this file names a workspace, and nothing should: a browser that
+ * can name a tenant is a browser that can read someone else's diary.
+ */
+/** What this workspace offers as bookable. Active types only. */
+export function useBookableEventTypes() {
+    const { data, isLoading, error } = useConnectResource("/scheduling/event-types");
+    return { eventTypes: data?.eventTypes ?? [], isLoading, error };
+}
+/**
+ * Free times for one appointment type.
+ *
+ * **Deliberately re-read rather than cached across a session.** A slot list is
+ * a snapshot of contention: anyone else on that calendar - a colleague, a
+ * voice agent mid-call, someone on the public booking link - can take one
+ * between the read and the click. Showing a stale one is how two people are
+ * offered the same minute. The booking call re-checks inside a transaction
+ * anyway, so a stale list costs a refusal rather than a double booking; this
+ * just means the refusal is rare.
+ */
+export function useAvailableSlots(query) {
+    const path = query
+        ? `/scheduling/slots?${new URLSearchParams({
+            eventTypeId: query.eventTypeId,
+            from: query.from.toISOString(),
+            to: query.to.toISOString(),
+            ...(query.excludeBookingId ? { excludeBookingId: query.excludeBookingId } : {}),
+        }).toString()}`
+        : null;
+    // `useConnectResource` needs a path; an empty one never resolves, so the
+    // hook is called unconditionally (rules of hooks) and simply idles.
+    const { data, isLoading, error, refetch } = useConnectResource(path ?? "");
+    return {
+        slots: path ? (data?.slots ?? []) : [],
+        timezone: data?.timezone ?? null,
+        durationMinutes: data?.durationMinutes ?? null,
+        isLoading: path ? isLoading : false,
+        error: path ? error : null,
+        refetch,
+    };
+}
+/** One page of the diary, ascending - a forward view, not a history. */
+export function useBookings(query) {
+    const path = useMemo(() => `/scheduling/bookings?${new URLSearchParams({
+        from: query.from.toISOString(),
+        to: query.to.toISOString(),
+        order: "asc",
+        status: "confirmed",
+        limit: String(query.limit ?? 100),
+        ...(query.hostMemberId ? { hostMemberId: query.hostMemberId } : {}),
+    }).toString()}`, [query.from, query.to, query.hostMemberId, query.limit]);
+    const { data, isLoading, error, refetch } = useConnectResource(path);
+    return {
+        bookings: data?.bookings ?? [],
+        hasMore: data?.hasMore ?? false,
+        isLoading,
+        error,
+        path,
+        refetch,
+    };
+}
+/**
+ * Book, move and cancel.
+ *
+ * **None of these is optimistic**, and that is not an oversight. Whether a
+ * slot is still free is a question only the server can answer, inside the
+ * transaction that decides it - two people can be holding the same minute
+ * right now. Painting a booking as made and withdrawing it is exactly the lie
+ * the two-phase hold exists to prevent.
+ */
+export function useBookingActions() {
+    const { mutateResource } = useConnect();
+    const [isPending, setPending] = useState(false);
+    const [error, setError] = useState(null);
+    const run = useCallback(async (path, body) => {
+        setPending(true);
+        setError(null);
+        try {
+            return await mutateResource(path, body);
+        }
+        catch (cause) {
+            // The server writes these as sentences - "that time was just taken" -
+            // precisely so they can be shown rather than mapped to a code.
+            setError(cause instanceof Error ? cause.message : "Something went wrong.");
+            return null;
+        }
+        finally {
+            setPending(false);
+        }
+    }, [mutateResource]);
+    return {
+        isPending,
+        error,
+        clearError: () => setError(null),
+        createBooking: (input) => run("/scheduling/bookings", input),
+        rescheduleBooking: (input) => run("/scheduling/bookings/reschedule", input).then((result) => result?.booking ?? null),
+        cancelBooking: (input) => run("/scheduling/bookings/cancel", input),
+    };
+}

package/dist/esm/server/client.js

@@ -142,4 +142,4 @@ export class ConnectClient {
     }
 }
 /** Kept in step with `package.json` by `sdk.test.ts`. */
-export const SDK_VERSION = "0.17.0";
+export const SDK_VERSION = "0.18.0";

package/dist/esm/server/handler.js

@@ -412,6 +412,142 @@ export function createConnectHandler(options) {
             await session.write?.(request, response, result.sessionToken);
             return response;
         },
+        /*
+         * Scheduling - the workspace's own calendar, in a browser.
+         *
+         * Every one of these forwards the caller's session token, which is what
+         * makes them safe to expose: Connect derives the workspace from that token
+         * and checks the member's own `calendar:read` / `calendar:manage`. The
+         * browser names no tenant and the partner's key does not, by itself,
+         * authorize a write - without that second half, shipping a booking
+         * component would let every end user of every partner app take slots on a
+         * real business calendar.
+         *
+         * `workspaceId` is still passed because the resource requires it, and is
+         * still ignored by Connect whenever a token is present. `requireWorkspace`
+         * supplies the session's own, so the two can never disagree.
+         */
+        "GET /scheduling/event-types": async (request) => {
+            const { workspaceId } = await requireWorkspace(request);
+            const asUser = await requireToken(request);
+            return json({ eventTypes: await client.scheduling.listEventTypes(workspaceId, { asUser }) });
+        },
+        "GET /scheduling/slots": async (request) => {
+            const { workspaceId } = await requireWorkspace(request);
+            const asUser = await requireToken(request);
+            const url = new URL(request.url);
+            const eventTypeId = url.searchParams.get("eventTypeId");
+            const from = url.searchParams.get("from");
+            const to = url.searchParams.get("to");
+            if (!eventTypeId || !from || !to) {
+                throw new ConnectError({
+                    status: 400,
+                    code: "validation_error",
+                    message: "eventTypeId, from and to are required",
+                    endpoint: "/scheduling/slots",
+                });
+            }
+            return json(await client.scheduling.findSlots({
+                workspaceId,
+                eventTypeId,
+                from,
+                to,
+                // Set when offering times to move an existing appointment to, or the
+                // booking blocks its own replacement and the list comes back empty.
+                excludeBookingId: url.searchParams.get("excludeBookingId") ?? undefined,
+                asUser,
+            }));
+        },
+        "GET /scheduling/bookings": async (request) => {
+            const { workspaceId } = await requireWorkspace(request);
+            const asUser = await requireToken(request);
+            const url = new URL(request.url);
+            const limit = Number(url.searchParams.get("limit") ?? 25);
+            return json(await client.scheduling.listBookings({
+                workspaceId,
+                status: url.searchParams.get("status") ?? undefined,
+                hostMemberId: url.searchParams.get("hostMemberId") ?? undefined,
+                from: url.searchParams.get("from") ?? undefined,
+                to: url.searchParams.get("to") ?? undefined,
+                order: url.searchParams.get("order") === "asc" ? "asc" : "desc",
+                cursor: url.searchParams.get("cursor") ?? undefined,
+                limit: Number.isInteger(limit) && limit >= 1 && limit <= 100 ? limit : 25,
+                asUser,
+            }));
+        },
+        "POST /scheduling/bookings": async (request) => {
+            const { workspaceId } = await requireWorkspace(request);
+            const asUser = await requireToken(request);
+            const body = (await request.json().catch(() => null));
+            if (typeof body?.eventTypeId !== "string" ||
+                typeof body.startAt !== "string" ||
+                typeof body.attendee?.name !== "string" ||
+                typeof body.attendee?.phone !== "string") {
+                throw new ConnectError({
+                    status: 400,
+                    code: "validation_error",
+                    message: "eventTypeId, startAt and an attendee name and phone are required",
+                    endpoint: "/scheduling/bookings",
+                });
+            }
+            return json(await client.scheduling.createBooking({
+                workspaceId,
+                eventTypeId: body.eventTypeId,
+                startAt: body.startAt,
+                attendee: {
+                    name: body.attendee.name,
+                    phone: body.attendee.phone,
+                    email: typeof body.attendee.email === "string" ? body.attendee.email : null,
+                },
+                notes: typeof body.notes === "string" ? body.notes : null,
+                asUser,
+            }));
+        },
+        /*
+         * Reschedule and cancel take the booking id in the body rather than the
+         * path, matching `POST /sessions/revoke`. The bridge's route table is
+         * exact-match on `METHOD /path`, so a path parameter would mean a second
+         * matching strategy for two routes.
+         */
+        "POST /scheduling/bookings/reschedule": async (request) => {
+            const { workspaceId } = await requireWorkspace(request);
+            const asUser = await requireToken(request);
+            const body = (await request.json().catch(() => null));
+            if (typeof body?.bookingId !== "string" || typeof body.startAt !== "string") {
+                throw new ConnectError({
+                    status: 400,
+                    code: "validation_error",
+                    message: "bookingId and startAt are required",
+                    endpoint: "/scheduling/bookings/reschedule",
+                });
+            }
+            return json(await client.scheduling.rescheduleBooking({
+                workspaceId,
+                bookingId: body.bookingId,
+                startAt: body.startAt,
+                notes: typeof body.notes === "string" ? body.notes : undefined,
+                asUser,
+            }));
+        },
+        "POST /scheduling/bookings/cancel": async (request) => {
+            const { workspaceId } = await requireWorkspace(request);
+            const asUser = await requireToken(request);
+            const body = (await request.json().catch(() => null));
+            if (typeof body?.bookingId !== "string") {
+                throw new ConnectError({
+                    status: 400,
+                    code: "validation_error",
+                    message: "bookingId is required",
+                    endpoint: "/scheduling/bookings/cancel",
+                });
+            }
+            return json(await client.scheduling.cancelBooking({
+                workspaceId,
+                bookingId: body.bookingId,
+                reason: typeof body.reason === "string" ? body.reason : null,
+                asUser,
+            }));
+        },
         "GET /integrations": async (request) => {
             const { workspaceId } = await requireWorkspace(request);
             return json({ toolkits: await client.integrations.list(workspaceId) });

package/dist/esm/server/resources/scheduling.js

@@ -1,4 +1,5 @@
 import { request } from "../http.js";
+import { actingAs } from "./acting-as.js";
 /**
  * A subscribing workspace's own calendar.
  *
@@ -18,11 +19,12 @@ export class SchedulingResource {
         this.transport = transport;
     }
     /** What this workspace offers as bookable. Active appointment types only. */
-    async listEventTypes(workspaceId) {
+    async listEventTypes(workspaceId, options = {}) {
         const result = await request(this.transport, {
             method: "GET",
             path: "/scheduling/event-types",
             query: { workspaceId },
+            headers: actingAs(options.asUser),
         });
         // `?? []` for the same reason `apps.list` has it - a collection every
         // caller immediately maps, and a body without the key would hand them
@@ -51,7 +53,9 @@ export class SchedulingResource {
                 eventTypeId: input.eventTypeId,
                 from: toInstant(input.from),
                 to: toInstant(input.to),
+                excludeBookingId: input.excludeBookingId,
             },
+            headers: actingAs(input.asUser),
         });
     }
     /** One page of the workspace's diary. */
@@ -69,6 +73,7 @@ export class SchedulingResource {
                 cursor: input.cursor,
                 limit: input.limit === undefined ? undefined : String(input.limit),
             },
+            headers: actingAs(input.asUser),
         });
     }
     /**
@@ -90,6 +95,31 @@ export class SchedulingResource {
                 attendee: input.attendee,
                 notes: input.notes ?? null,
             },
+            headers: actingAs(input.asUser),
+        });
+    }
+    /**
+     * Moves an appointment to a different time.
+     *
+     * **The original is retired, not edited.** It stays on the diary as
+     * `rescheduled` with `rescheduledToId` pointing at the replacement, and both
+     * come back here - so a booking id you cached still resolves, and still says
+     * where the appointment went.
+     *
+     * A refused move changes nothing: the new slot is claimed before the old one
+     * is released, so a `conflict` leaves the customer with the appointment they
+     * already had. Re-read the slots (with `excludeBookingId`) and offer another.
+     */
+    rescheduleBooking(input) {
+        return request(this.transport, {
+            method: "POST",
+            path: `/scheduling/bookings/${encodeURIComponent(input.bookingId)}/reschedule`,
+            json: {
+                workspaceId: input.workspaceId,
+                startAt: toInstant(input.startAt),
+                notes: input.notes ?? null,
+            },
+            headers: actingAs(input.asUser),
         });
     }
     /**
@@ -104,6 +134,7 @@ export class SchedulingResource {
             method: "POST",
             path: `/scheduling/bookings/${encodeURIComponent(input.bookingId)}/cancel`,
             json: { workspaceId: input.workspaceId, reason: input.reason ?? null },
+            headers: actingAs(input.asUser),
         });
     }
 }