@cosmoops/connect-sdk 0.37.0 → 0.40.0

package/dist/esm/client/components/workspace-switcher.js

@@ -4,6 +4,7 @@ import { useState } from "react";
 import { Button, Dropdown, ListBox, Separator } from "@heroui/react";
 import { ChevronsUpDown, Plus } from "lucide-react";
 import { useConnect, useConnectUser, useConnectWorkspaces } from "../provider.js";
+import { ConnectCreateWorkspaceModal } from "./create-workspace-form.js";
 import { m } from "./motion.js";
 import { SidebarLabel, sidebarRowClass, useConnectShell } from "./shell-context.js";
 /** `Acme Logistics` -> `AL`. The collapsed rail's whole label for a workspace. */
@@ -11,9 +12,6 @@ function workspaceInitials(name) {
     const parts = name.trim().split(/\s+/).filter(Boolean);
     return (parts.slice(0, 2).map((part) => part[0]).join("") || "?").toUpperCase();
 }
-function openExternal(url) {
-    window.open(url, "_blank", "noopener,noreferrer");
-}
 /**
  * Switches which workspace this application is looking at.
  *
@@ -28,9 +26,9 @@ function openExternal(url) {
  * a workspace is *created*, so hiding it at one workspace would guarantee
  * nobody ever reached two. `alwaysShow` is the escape hatch for a partner
  * application that wants that same discoverability without becoming Connect:
- * it keeps the dropdown open below two workspaces and adds a row that sends
- * the member to Connect to actually create one, since there is nothing here
- * that can.
+ * it keeps the dropdown open below two workspaces and adds a row that opens
+ * `<ConnectCreateWorkspaceModal>` inline, auto-switching into the result when
+ * that is possible - see `handleCreated` below.
  *
  * **Authorization is the data, not a prop.** The list comes from the caller's
  * own session (`GET /workspaces` takes no user id), so a workspace the user
@@ -50,12 +48,13 @@ function openExternal(url) {
  * `onSwitched` defaults to.
  */
 export function ConnectWorkspaceSwitcher({ onSwitched, row = true, className, alwaysShow = false, }) {
-    const { mutateResource, appUrl } = useConnect();
+    const { mutateResource } = useConnect();
     const { collapsed } = useConnectShell();
     const user = useConnectUser();
-    const { data, isLoading } = useConnectWorkspaces();
+    const { data, isLoading, refetch } = useConnectWorkspaces();
     const [switching, setSwitching] = useState(null);
     const [error, setError] = useState(null);
+    const [isCreateOpen, setIsCreateOpen] = useState(false);
     const workspaces = data?.workspaces ?? [];
     // Nothing loaded yet. Deliberately renders `null` rather than a skeleton:
     // this sits in persistent chrome, and a placeholder that resolves to
@@ -90,11 +89,45 @@ export function ConnectWorkspaceSwitcher({ onSwitched, row = true, className, al
             setSwitching(null);
         }
     };
+    /**
+     * After a successful create: bring the new row into this list (it is
+     * created, not switched to - see `ConnectCreateWorkspaceModal`'s doc
+     * comment), then move into it when that is actually possible.
+     *
+     * Deliberately **not** `handleSwitch` - that function's `selectable()`
+     * guard requires `subscribed`, which a workspace this young never is, so
+     * calling it here would silently do nothing. `SwitchWorkspaceUseCase`
+     * itself has no subscription gate, only membership/MFA/audience, so this
+     * calls the bridge directly and only withholds on `inAudience` - a
+     * workspace of a type this application is not sold to, which `switch`
+     * really does refuse.
+     */
+    const handleCreated = async (workspace) => {
+        setIsCreateOpen(false);
+        refetch();
+        if (!workspace.inAudience)
+            return;
+        setSwitching(workspace.workspaceId);
+        setError(null);
+        try {
+            await mutateResource("/workspaces/switch", { workspaceId: workspace.workspaceId });
+            if (onSwitched) {
+                onSwitched(workspace);
+            }
+            else {
+                window.location.reload();
+            }
+        }
+        catch (cause) {
+            setError(cause instanceof Error ? cause.message : "Workspace created, but could not switch to it");
+            setSwitching(null);
+        }
+    };
     return (_jsxs("div", { className: row ? "" : className, children: [_jsxs(Dropdown, { children: [row ? (
                     // A 32px tile rather than a 20px glyph, so the initials land on the
                     // same optical centre the avatar below them uses - see
                     // `SIDEBAR_ROW_TILE`. Collapsed, this tile *is* the switcher.
-                    _jsxs(Button, { variant: "tertiary", "aria-label": `Workspace: ${label}. Switch workspace`, className: sidebarRowClass({ tile: true, className }), children: [_jsx("span", { className: "flex size-8 shrink-0 items-center justify-center rounded-lg bg-accent-soft text-xs font-semibold text-accent", children: workspaceInitials(label) }), _jsx(SidebarLabel, { className: "text-sm font-medium text-foreground", children: label }), _jsx(m.span, { className: "shrink-0 text-muted", animate: { opacity: collapsed ? 0 : 1 }, transition: collapsed ? { duration: 0.1 } : { duration: 0.18, delay: 0.1 }, "aria-hidden": true, children: _jsx(ChevronsUpDown, { className: "size-4" }) })] })) : (_jsxs(Button, { variant: "secondary", size: "sm", className: "w-full justify-between", children: [_jsx("span", { className: "truncate", children: label }), _jsx(ChevronsUpDown, { className: "size-4 shrink-0 text-muted", "aria-hidden": "true" })] })), _jsx(Dropdown.Popover, { children: _jsxs(ListBox, { children: [workspaces.map((workspace) => (_jsxs(ListBox.Item, { id: workspace.workspaceId, textValue: workspace.name, isDisabled: !selectable(workspace) || switching !== null, onAction: () => void handleSwitch(workspace), children: [_jsxs("div", { className: "min-w-0", children: [_jsx("p", { className: "truncate text-sm", children: workspace.name }), selectable(workspace) ? null : (_jsx("p", { className: "truncate text-xs text-muted", children: reasonUnavailable(workspace) }))] }), _jsx(ListBox.ItemIndicator, {})] }, workspace.workspaceId))), alwaysShow ? (_jsxs(_Fragment, { children: [workspaces.length > 0 && _jsx(Separator, {}), _jsxs(ListBox.Item, { id: "__create_workspace", textValue: "Create workspace", onAction: () => openExternal(appUrl), children: [_jsx(Plus, { className: "size-4 shrink-0 text-muted", "aria-hidden": true }), _jsx("p", { className: "truncate text-sm", children: "Create workspace" })] })] })) : null] }) })] }), error && !collapsed ? _jsx("p", { className: "mt-1 px-2 text-xs text-danger", children: error }) : null] }));
+                    _jsxs(Button, { variant: "tertiary", "aria-label": `Workspace: ${label}. Switch workspace`, className: sidebarRowClass({ tile: true, className }), children: [_jsx("span", { className: "flex size-8 shrink-0 items-center justify-center rounded-lg bg-accent-soft text-xs font-semibold text-accent", children: workspaceInitials(label) }), _jsx(SidebarLabel, { className: "text-sm font-medium text-foreground", children: label }), _jsx(m.span, { className: "shrink-0 text-muted", animate: { opacity: collapsed ? 0 : 1 }, transition: collapsed ? { duration: 0.1 } : { duration: 0.18, delay: 0.1 }, "aria-hidden": true, children: _jsx(ChevronsUpDown, { className: "size-4" }) })] })) : (_jsxs(Button, { variant: "secondary", size: "sm", className: "w-full justify-between", children: [_jsx("span", { className: "truncate", children: label }), _jsx(ChevronsUpDown, { className: "size-4 shrink-0 text-muted", "aria-hidden": "true" })] })), _jsx(Dropdown.Popover, { children: _jsxs(ListBox, { children: [workspaces.map((workspace) => (_jsxs(ListBox.Item, { id: workspace.workspaceId, textValue: workspace.name, isDisabled: !selectable(workspace) || switching !== null, onAction: () => void handleSwitch(workspace), children: [_jsxs("div", { className: "min-w-0", children: [_jsx("p", { className: "truncate text-sm", children: workspace.name }), selectable(workspace) ? null : (_jsx("p", { className: "truncate text-xs text-muted", children: reasonUnavailable(workspace) }))] }), _jsx(ListBox.ItemIndicator, {})] }, workspace.workspaceId))), alwaysShow ? (_jsxs(_Fragment, { children: [workspaces.length > 0 && _jsx(Separator, {}), _jsxs(ListBox.Item, { id: "__create_workspace", textValue: "Create workspace", onAction: () => setIsCreateOpen(true), children: [_jsx(Plus, { className: "size-4 shrink-0 text-muted", "aria-hidden": true }), _jsx("p", { className: "truncate text-sm", children: "Create workspace" })] })] })) : null] }) })] }), error && !collapsed ? _jsx("p", { className: "mt-1 px-2 text-xs text-danger", children: error }) : null, alwaysShow ? (_jsx(ConnectCreateWorkspaceModal, { isOpen: isCreateOpen, onOpenChange: setIsCreateOpen, onCreated: (workspace) => void handleCreated(workspace) })) : null] }));
 }
 /** Belongs to the user, and usable here. The same two facts `switch` enforces. */
 function selectable(workspace) {

package/dist/esm/client/index.js

@@ -31,6 +31,11 @@ ConnectUserMenu, ConnectManageSubscriptionButton, ConnectInvoicesButton, Connect
 // Built, compiled into `dist/`, and reachable from no entry point until now -
 // `ConnectUserMenu` was the only thing that could render it.
 export { ConnectAccountSessions } from "./components/account-sessions.js";
+// A link to *any* Connect portal page that offers a "Back to <your app>" way
+// home - what `ConnectProfileButton` builds for `/profile` internally, made
+// reusable for a host linking out to a different Connect page (e.g.
+// `/calendar/settings`) on its own.
+export { connectPortalUrl, useConnectPortalUrl } from "./portal-links.js";
 // The frame the rest of these components live inside. Exported next to the
 // pieces it composes rather than in a section of its own - an integration
 // reaching for a sidebar wants to find the launcher and the account menu in
@@ -142,7 +147,18 @@ isFreePlan,
 groupPlansByTier, resolvePlanGroup, } from "./components/plan-pricing.js";
 export { ConnectWorkspaceSwitcher } from "./components/workspace-switcher.js";
 export { useConnectWorkspaces, useConnectWorkspaceMembers } from "./provider.js";
+// The write half of the workspace switcher - opening another workspace under
+// the signed-in user's own tenant, from inside a host application rather
+// than a link-out to Connect's own "Create workspace" button.
+export { ConnectCreateWorkspaceModal } from "./components/create-workspace-form.js";
+export { useCreateWorkspace } from "./use-workspaces.js";
 export { ConnectBookingCalendar } from "./components/booking-calendar.js";
 export { ConnectBookingDialog, ConnectBookingDetail } from "./components/booking-dialogs.js";
-export { useBookableEventTypes, useAvailableSlots, useBookings, useBookingActions, } from "./use-scheduling.js";
+// The write half of scheduling - a workspace's own first-time setup, not a
+// partner integration's booking flow. `ConnectAvailabilityFormModal` and
+// `ConnectEventTypeFormModal` give a host application a real inline setup
+// step instead of a link-out to Connect's own Calendar settings.
+export { ConnectAvailabilityFormModal } from "./components/availability-form.js";
+export { ConnectEventTypeFormModal } from "./components/event-type-form.js";
+export { useBookableEventTypes, useAvailabilitySchedules, useCreateAvailabilitySchedule, useUpdateAvailabilitySchedule, useManageableEventTypes, useCreateEventType, useUpdateEventType, useAvailableSlots, useBookings, useBookingActions, } from "./use-scheduling.js";
 export { layoutBookings, dayColumns, zonedInstant, } from "./components/booking-grid.js";

package/dist/esm/client/portal-links.js

@@ -0,0 +1,34 @@
+"use client";
+import { useConnect } from "./provider.js";
+/**
+ * Any Connect portal page, with the context it needs to offer a way back
+ * here - `connectPortalUrl(appUrl, clientId, "/profile")`,
+ * `connectPortalUrl(appUrl, clientId, "/calendar/settings")`, and so on.
+ *
+ * Connect answers any of these paths for a signed-in user on the bare URL -
+ * these two params only add the "Back to <your app>" banner
+ * (`ApplicationReturnBar` on Connect's side). It validates `return_to`
+ * against this `client_id`'s registered redirect origins and silently drops
+ * the banner if they don't match, so a wrong or stale `appUrl`/`clientId`
+ * pairing degrades to what linking there did before rather than erroring.
+ *
+ * `window.location.href` rather than a configured home URL: the point is to
+ * come back to the page they left, and only the browser knows which one that
+ * is.
+ */
+export function connectPortalUrl(appUrl, clientId, path) {
+    const url = new URL(path, appUrl);
+    url.searchParams.set("client_id", clientId);
+    if (typeof window !== "undefined") {
+        url.searchParams.set("return_to", window.location.href);
+    }
+    return url.toString();
+}
+/**
+ * `connectPortalUrl`, with `appUrl`/`clientId` read from the provider instead
+ * of threaded through by every caller.
+ */
+export function useConnectPortalUrl(path) {
+    const { appUrl, clientId } = useConnect();
+    return connectPortalUrl(appUrl, clientId, path);
+}

package/dist/esm/client/use-scheduling.js

@@ -15,6 +15,82 @@ export function useBookableEventTypes() {
     const { data, isLoading, error } = useConnectResource("/scheduling/event-types");
     return { eventTypes: data?.eventTypes ?? [], isLoading, error };
 }
+/**
+ * The working-hours templates an appointment type can point at.
+ *
+ * Read this before offering a "set up availability" step - a workspace that
+ * already has one does not need a second "Working hours" from your UI.
+ */
+export function useAvailabilitySchedules() {
+    const { data, isLoading, error } = useConnectResource("/scheduling/schedules");
+    return { schedules: data?.schedules ?? [], isLoading, error };
+}
+/**
+ * The richer read `ConnectEventTypeFormModal`'s edit mode needs - everything
+ * `useBookableEventTypes`'s booking catalogue deliberately withholds. See
+ * the bridge route's own doc comment for why this is a separate read rather
+ * than a wider response on that one. Includes inactive rows.
+ */
+export function useManageableEventTypes() {
+    const { data, isLoading, error, refetch } = useConnectResource("/scheduling/event-types/manage");
+    return { eventTypes: data?.eventTypes ?? [], isLoading, error, refetch };
+}
+/**
+ * Gives a workspace its first working hours.
+ *
+ * **Not optimistic** - same posture as `useBookingActions`: this is one of
+ * the two writes a host's first-run setup makes, and a modal that closes on
+ * a failed create is worse than one that stays open with the reason shown.
+ */
+export function useCreateAvailabilitySchedule() {
+    const { run, isPending, error, clearError } = useResourceAction();
+    return {
+        isPending,
+        error,
+        clearError,
+        createSchedule: (input) => run("/scheduling/schedules", input),
+    };
+}
+/** Edits an existing availability schedule. Every field optional - send only what changed. */
+export function useUpdateAvailabilitySchedule() {
+    const { run, isPending, error, clearError } = useResourceAction();
+    return {
+        isPending,
+        error,
+        clearError,
+        updateSchedule: (input) => run("/scheduling/schedules/update", input),
+    };
+}
+/**
+ * Creates the first thing a workspace can be booked for.
+ *
+ * Host is a specific member, never a team - there is no groups read in this
+ * bridge, so a round-robin team host stays a Console-only capability
+ * reachable by following "Manage in Connect".
+ */
+export function useCreateEventType() {
+    const { run, isPending, error, clearError } = useResourceAction();
+    return {
+        isPending,
+        error,
+        clearError,
+        createEventType: (input) => run("/scheduling/event-types", input),
+    };
+}
+/**
+ * Edits an existing appointment type. Every field optional - send only what
+ * changed. `hostMemberId` omitted leaves the host untouched, including a
+ * *group* host this surface cannot represent.
+ */
+export function useUpdateEventType() {
+    const { run, isPending, error, clearError } = useResourceAction();
+    return {
+        isPending,
+        error,
+        clearError,
+        updateEventType: (input) => run("/scheduling/event-types/update", input),
+    };
+}
 /**
  * Free times for one appointment type.
  *
@@ -68,15 +144,16 @@ export function useBookings(query) {
     };
 }
 /**
- * Book, move and cancel.
+ * The isPending/error bookkeeping every write in this file shares, factored
+ * out once `useCreateAvailabilitySchedule` and `useCreateEventType` needed
+ * the identical shape `useBookingActions` already had.
  *
- * **None of these is optimistic**, and that is not an oversight. Whether a
- * slot is still free is a question only the server can answer, inside the
- * transaction that decides it - two people can be holding the same minute
- * right now. Painting a booking as made and withdrawing it is exactly the lie
- * the two-phase hold exists to prevent.
+ * **Never optimistic**, and that is not an oversight for any caller of this:
+ * whether a slot is free, or a schedule name collides, is a question only the
+ * server can answer. Painting the result before it comes back is exactly the
+ * lie a two-phase hold (or a modal that closes early) would tell.
  */
-export function useBookingActions() {
+function useResourceAction() {
     const { mutateResource } = useConnect();
     const [isPending, setPending] = useState(false);
     const [error, setError] = useState(null);
@@ -96,10 +173,23 @@ export function useBookingActions() {
             setPending(false);
         }
     }, [mutateResource]);
+    return { isPending, error, clearError: () => setError(null), run };
+}
+/**
+ * Book, move and cancel.
+ *
+ * **None of these is optimistic**, and that is not an oversight. Whether a
+ * slot is still free is a question only the server can answer, inside the
+ * transaction that decides it - two people can be holding the same minute
+ * right now. Painting a booking as made and withdrawing it is exactly the lie
+ * the two-phase hold exists to prevent.
+ */
+export function useBookingActions() {
+    const { run, isPending, error, clearError } = useResourceAction();
     return {
         isPending,
         error,
-        clearError: () => setError(null),
+        clearError,
         createBooking: (input) => run("/scheduling/bookings", input),
         rescheduleBooking: (input) => run("/scheduling/bookings/reschedule", input).then((result) => result?.booking ?? null),
         cancelBooking: (input) => run("/scheduling/bookings/cancel", input),

package/dist/esm/client/use-workspaces.js

@@ -0,0 +1,38 @@
+"use client";
+import { useCallback, useState } from "react";
+import { useConnect } from "./provider.js";
+/**
+ * Opens another workspace under the tenant the signed-in user already owns.
+ *
+ * **Not optimistic**, same posture as every write in `use-scheduling.ts`:
+ * whether the tenant's plan still has room for another workspace is a
+ * question only the server can answer, and a modal that closes before that
+ * answer comes back is the lie a two-phase write exists to avoid.
+ *
+ * The result is a `UserWorkspace` row with `isActive`/`subscribed` both
+ * `false` - creating does not switch the session to it, and the workspace has
+ * no subscription yet. Pair with `<ConnectWorkspaceSwitcher>`'s own
+ * `mutateResource("/workspaces/switch", ...)` call to move into it, guarded
+ * on `inAudience` the same way that component's `selectable()` already is.
+ */
+export function useCreateWorkspace() {
+    const { mutateResource } = useConnect();
+    const [isPending, setPending] = useState(false);
+    const [error, setError] = useState(null);
+    const createWorkspace = useCallback(async (input) => {
+        setPending(true);
+        setError(null);
+        try {
+            const result = await mutateResource("/workspaces", input);
+            return result.workspace;
+        }
+        catch (cause) {
+            setError(cause instanceof Error ? cause.message : "Could not create that workspace.");
+            return null;
+        }
+        finally {
+            setPending(false);
+        }
+    }, [mutateResource]);
+    return { isPending, error, clearError: () => setError(null), createWorkspace };
+}

package/dist/esm/server/client.js

@@ -175,4 +175,4 @@ export class ConnectClient {
     }
 }
 /** Kept in step with `package.json` by `sdk.test.ts`. */
-export const SDK_VERSION = "0.37.0";
+export const SDK_VERSION = "0.40.0";

package/dist/esm/server/handler.js

@@ -738,8 +738,8 @@ export function createConnectHandler(options) {
          */
         "STORE": async (request) => storeRoute(request),
         /**
-         * The workspace switcher's three reads, forwarded with the caller's own
-         * session token.
+         * The workspace switcher's reads and writes, forwarded with the caller's
+         * own session token.
          *
          * `POST /workspaces/switch` is the only bridge route that *changes the
          * caller's session*, so it writes the new token back through the same
@@ -751,6 +751,14 @@ export function createConnectHandler(options) {
          * A partner with no `session.write` cannot re-persist a rotated token, so
          * switching is simply absent for them rather than half-working - the same
          * treatment `/signin` and `/callback` already get.
+         *
+         * `POST /workspaces` opens another workspace under the caller's own
+         * tenant and does not rotate anything - it does not switch the session,
+         * same as Connect's own "Create workspace" button. Every guard
+         * (ownership, the plan's workspace allowance, the business-email-domain
+         * rule) lives server-side in `CreateWorkspaceUseCase`; this route is a
+         * plain forward with the caller's session token, exactly like the reads
+         * beside it.
          */
         /*
          * Push notifications - the browser half, and deliberately only that half.
@@ -807,6 +815,20 @@ export function createConnectHandler(options) {
             return json(await client.push.revokeDevice(body.id, { asUser: token }));
         },
         "GET /workspaces": async (request) => json({ workspaces: await client.workspaces.list({ asUser: await requireToken(request) }) }),
+        "POST /workspaces": async (request) => {
+            const token = await requireToken(request);
+            const body = (await request.json().catch(() => null));
+            if (typeof body?.name !== "string" || (body.type !== "individual" && body.type !== "business")) {
+                throw new ConnectError({
+                    status: 400,
+                    code: "validation_error",
+                    message: "name and type are required",
+                    endpoint: "POST /workspaces",
+                });
+            }
+            const workspace = await client.workspaces.create({ name: body.name, type: body.type }, { asUser: token });
+            return json({ workspace });
+        },
         "GET /workspaces/members": async (request) => json({ members: await client.workspaces.members({ asUser: await requireToken(request) }) }),
         "POST /workspaces/switch": async (request) => {
             const token = await requireToken(request);
@@ -850,6 +872,163 @@ export function createConnectHandler(options) {
             const asUser = await requireToken(request);
             return json({ eventTypes: await client.scheduling.listEventTypes(workspaceId, { asUser }) });
         },
+        /*
+         * Creates the first thing a workspace can be booked for - a browser-side
+         * counterpart to `POST /scheduling/event-types` above, for a host's own
+         * inline setup UI (`ConnectEventTypeFormModal`). Host is a specific
+         * member, never a team - there is no groups read in this bridge, so a
+         * round-robin team host stays a Console-only capability.
+         */
+        "POST /scheduling/event-types": async (request) => {
+            const { workspaceId } = await requireWorkspace(request);
+            const asUser = await requireToken(request);
+            const body = (await request.json().catch(() => null));
+            if (typeof body?.name !== "string" ||
+                typeof body.durationMinutes !== "number" ||
+                typeof body.hostMemberId !== "string" ||
+                typeof body.scheduleId !== "string" ||
+                typeof body.location?.kind !== "string") {
+                throw new ConnectError({
+                    status: 400,
+                    code: "validation_error",
+                    message: "name, durationMinutes, hostMemberId, scheduleId and location are required",
+                    endpoint: "/scheduling/event-types",
+                });
+            }
+            return json(await client.scheduling.createEventType({
+                workspaceId,
+                name: body.name,
+                description: typeof body.description === "string" ? body.description : null,
+                durationMinutes: body.durationMinutes,
+                bufferBeforeMinutes: typeof body.bufferBeforeMinutes === "number" ? body.bufferBeforeMinutes : undefined,
+                bufferAfterMinutes: typeof body.bufferAfterMinutes === "number" ? body.bufferAfterMinutes : undefined,
+                hostMemberId: body.hostMemberId,
+                scheduleId: body.scheduleId,
+                location: {
+                    kind: body.location.kind,
+                    value: typeof body.location.value === "string" ? body.location.value : null,
+                },
+                publicBookingEnabled: typeof body.publicBookingEnabled === "boolean" ? body.publicBookingEnabled : undefined,
+                asUser,
+            }), 201);
+        },
+        /*
+         * The richer read `ConnectEventTypeFormModal`'s edit mode needs - see
+         * `listManageableEventTypes`'s own doc comment for why this is a separate
+         * route from the catalogue above rather than a wider response on it.
+         */
+        "GET /scheduling/event-types/manage": async (request) => {
+            const { workspaceId } = await requireWorkspace(request);
+            const asUser = await requireToken(request);
+            return json({
+                eventTypes: await client.scheduling.listManageableEventTypes(workspaceId, { asUser }),
+            });
+        },
+        /*
+         * A fixed path with the id in the body, not `/scheduling/event-types/{id}` -
+         * this table is matched by exact string, the same reason the booking
+         * actions below take their id this way rather than as a path segment.
+         */
+        "POST /scheduling/event-types/update": async (request) => {
+            const { workspaceId } = await requireWorkspace(request);
+            const asUser = await requireToken(request);
+            const body = (await request.json().catch(() => null));
+            if (typeof body?.eventTypeId !== "string") {
+                throw new ConnectError({
+                    status: 400,
+                    code: "validation_error",
+                    message: "eventTypeId is required",
+                    endpoint: "/scheduling/event-types/update",
+                });
+            }
+            return json(await client.scheduling.updateEventType({
+                workspaceId,
+                eventTypeId: body.eventTypeId,
+                name: typeof body.name === "string" ? body.name : undefined,
+                description: typeof body.description === "string" || body.description === null
+                    ? body.description
+                    : undefined,
+                durationMinutes: typeof body.durationMinutes === "number" ? body.durationMinutes : undefined,
+                bufferBeforeMinutes: typeof body.bufferBeforeMinutes === "number" ? body.bufferBeforeMinutes : undefined,
+                bufferAfterMinutes: typeof body.bufferAfterMinutes === "number" ? body.bufferAfterMinutes : undefined,
+                hostMemberId: typeof body.hostMemberId === "string" ? body.hostMemberId : undefined,
+                scheduleId: typeof body.scheduleId === "string" ? body.scheduleId : undefined,
+                location: body.location && typeof body.location.kind === "string"
+                    ? {
+                        kind: body.location.kind,
+                        value: typeof body.location.value === "string" ? body.location.value : null,
+                    }
+                    : undefined,
+                publicBookingEnabled: typeof body.publicBookingEnabled === "boolean" ? body.publicBookingEnabled : undefined,
+                active: typeof body.active === "boolean" ? body.active : undefined,
+                asUser,
+            }));
+        },
+        /*
+         * The working-hours templates an appointment type can point at - read
+         * before a setup UI offers to create one, so it can tell "none yet" from
+         * "already set up".
+         */
+        "GET /scheduling/schedules": async (request) => {
+            const { workspaceId } = await requireWorkspace(request);
+            const asUser = await requireToken(request);
+            return json({ schedules: await client.scheduling.listSchedules(workspaceId, { asUser }) });
+        },
+        /**
+         * Gives a workspace its first working hours - the browser-side
+         * counterpart to `POST /scheduling/schedules` above, for
+         * `ConnectAvailabilityFormModal`.
+         */
+        "POST /scheduling/schedules": async (request) => {
+            const { workspaceId } = await requireWorkspace(request);
+            const asUser = await requireToken(request);
+            const body = (await request.json().catch(() => null));
+            if (typeof body?.name !== "string" ||
+                typeof body.timezone !== "string" ||
+                typeof body.weeklyHours !== "object" ||
+                body.weeklyHours === null) {
+                throw new ConnectError({
+                    status: 400,
+                    code: "validation_error",
+                    message: "name, timezone and weeklyHours are required",
+                    endpoint: "/scheduling/schedules",
+                });
+            }
+            return json(await client.scheduling.createSchedule({
+                workspaceId,
+                name: body.name,
+                timezone: body.timezone,
+                weeklyHours: body.weeklyHours,
+                asUser,
+            }), 201);
+        },
+        /*
+         * A fixed path with the id in the body, same reasoning as the event
+         * type's own `update` route above.
+         */
+        "POST /scheduling/schedules/update": async (request) => {
+            const { workspaceId } = await requireWorkspace(request);
+            const asUser = await requireToken(request);
+            const body = (await request.json().catch(() => null));
+            if (typeof body?.scheduleId !== "string") {
+                throw new ConnectError({
+                    status: 400,
+                    code: "validation_error",
+                    message: "scheduleId is required",
+                    endpoint: "/scheduling/schedules/update",
+                });
+            }
+            return json(await client.scheduling.updateSchedule({
+                workspaceId,
+                scheduleId: body.scheduleId,
+                name: typeof body.name === "string" ? body.name : undefined,
+                timezone: typeof body.timezone === "string" ? body.timezone : undefined,
+                weeklyHours: typeof body.weeklyHours === "object" && body.weeklyHours !== null
+                    ? body.weeklyHours
+                    : undefined,
+                asUser,
+            }));
+        },
         "GET /scheduling/slots": async (request) => {
             const { workspaceId } = await requireWorkspace(request);
             const asUser = await requireToken(request);

package/dist/esm/server/http.js

@@ -1,4 +1,15 @@
 import { ConnectError } from "../errors.js";
+/**
+ * How long a *generating* endpoint may take to send its headers.
+ *
+ * One number, named once, and it is not a guess: it is what
+ * `POST /visitor/chat` and `POST /ai/chat` declare as their `maxDuration` on
+ * the far side. A client bound shorter than the route's own ceiling cannot be
+ * right - it can only abort work Connect is still allowed to be doing - and
+ * the two numbers drifting apart is exactly how a 20s client came to be
+ * fronting a 60s route.
+ */
+export const GENERATION_TIMEOUT_MS = 60_000;
 const RETRYABLE_STATUS = new Set([408, 429, 500, 502, 503, 504]);
 /**
  * One id, safe to interpolate into a request path.
@@ -145,7 +156,7 @@ export async function request(options, spec) {
         // that has actually started to run as long as it needs. A caller that
         // wants to bound the stream itself passes `spec.signal`.
         const timeoutController = new AbortController();
-        const timer = setTimeout(() => timeoutController.abort(), options.timeoutMs);
+        const timer = setTimeout(() => timeoutController.abort(), spec.timeoutMs ?? options.timeoutMs);
         const signal = spec.signal
             ? AbortSignal.any([spec.signal, timeoutController.signal])
             : timeoutController.signal;

package/dist/esm/server/resources/ai.js

@@ -1,5 +1,5 @@
 import { actingAs } from "./acting-as.js";
-import { request } from "../http.js";
+import { GENERATION_TIMEOUT_MS, request } from "../http.js";
 /**
  * RAG chat and structured extraction against a workspace's data.
  *
@@ -40,6 +40,12 @@ export class AiResource {
                 ...(input.screenContext ? { screenContext: input.screenContext } : {}),
             },
             headers: actingAs(input.asUser),
+            /*
+             * Matches the route's own `maxDuration`. This endpoint does not send
+             * headers until the model's first token, so the default 20s bound was
+             * aborting any turn that opened with a tool call - see `RequestSpec.timeoutMs`.
+             */
+            timeoutMs: GENERATION_TIMEOUT_MS,
             raw: true,
             signal: options.signal,
         });