@fayz-ai/plugin-agenda 0.26.1 → 0.27.0

package/dist/chunk-AKALKGB2.js

@@ -0,0 +1,96 @@
+// src/integrations/google-calendar/mapping.ts
+function bookingSummary(b) {
+  const services = (b.services ?? []).map((s) => s.name).filter(Boolean).join(", ");
+  const who = b.clientName ?? "";
+  if (services && who) return `${services} \u2014 ${who}`;
+  return services || who || "Appointment";
+}
+function bookingToEvent(b, timeZone) {
+  if (!b.startsAt || !b.endsAt) return null;
+  const notes = [b.notes, b.professionalName ? `Pro: ${b.professionalName}` : "", b.locationName ?? ""].filter(Boolean).join("\n");
+  return {
+    summary: bookingSummary(b),
+    description: notes || void 0,
+    start: { dateTime: b.startsAt, timeZone },
+    end: { dateTime: b.endsAt, timeZone }
+  };
+}
+function eventToBookingPatch(ev) {
+  if (ev.status === "cancelled") return { status: "cancelled" };
+  const t = eventTimes(ev);
+  return { startsAt: t.startsAt, endsAt: t.endsAt };
+}
+function appointmentRowSummary(row) {
+  const m = row.metadata ?? {};
+  const services = m.serviceNames ?? "";
+  const who = m.contactName ?? m.clientName ?? "";
+  if (services && who) return `${services} \u2014 ${who}`;
+  return services || who || "Appointment";
+}
+function appointmentRowToEvent(row) {
+  return {
+    summary: appointmentRowSummary(row),
+    description: row.notes ?? void 0,
+    start: { dateTime: row.starts_at },
+    end: { dateTime: row.ends_at ?? row.starts_at }
+  };
+}
+function eventTimes(ev) {
+  const allDay = !ev.start?.dateTime && !!ev.start?.date;
+  const startsAt = ev.start?.dateTime ?? ev.start?.date ?? "";
+  const endsAt = ev.end?.dateTime ?? ev.end?.date ?? startsAt;
+  return { startsAt, endsAt, allDay };
+}
+function channelRowToChannel(r) {
+  return {
+    id: r.id,
+    integrationId: r.integration_id,
+    tenantId: r.tenant_id,
+    googleCalendarId: r.google_calendar_id,
+    summary: r.summary ?? null,
+    color: r.color ?? null,
+    direction: r.direction,
+    targetKind: r.target_kind ?? null,
+    targetId: r.target_id ?? null,
+    importMode: r.import_mode ?? "appointment",
+    syncToken: r.sync_token ?? null,
+    channelId: r.channel_id ?? null,
+    resourceId: r.resource_id ?? null,
+    channelExpiresAt: r.channel_expires_at ?? null,
+    isActive: r.is_active ?? true,
+    createdAt: r.created_at ?? "",
+    updatedAt: r.updated_at ?? ""
+  };
+}
+function resolveTargetChannel(channels, booking) {
+  const eligible = channels.filter(
+    (c) => c.isActive && (c.direction === "outbound" || c.direction === "bidirectional")
+  );
+  const serviceIds = booking.serviceIds ?? [];
+  if (booking.assigneeId) {
+    const byAssignee = eligible.find((c) => c.targetKind === "assignee" && c.targetId === booking.assigneeId);
+    if (byAssignee) return byAssignee;
+  }
+  if (serviceIds.length) {
+    const byService = eligible.find((c) => c.targetKind === "service" && !!c.targetId && serviceIds.includes(c.targetId));
+    if (byService) return byService;
+  }
+  if (booking.locationId) {
+    const byLocation = eligible.find((c) => c.targetKind === "location" && c.targetId === booking.locationId);
+    if (byLocation) return byLocation;
+  }
+  return eligible.find((c) => c.targetKind === null) ?? null;
+}
+
+// src/integrations/google-calendar/data/tables.ts
+var GCAL_TABLES = {
+  integrations: "plg_calendar_integrations",
+  channels: "plg_calendar_channels",
+  syncLog: "plg_calendar_sync_log",
+  webhookDeliveries: "plg_calendar_webhook_deliveries",
+  automationOutbox: "plg_calendar_automation_outbox"
+};
+
+export { GCAL_TABLES, appointmentRowToEvent, bookingToEvent, channelRowToChannel, eventTimes, eventToBookingPatch, resolveTargetChannel };
+//# sourceMappingURL=chunk-AKALKGB2.js.map
+//# sourceMappingURL=chunk-AKALKGB2.js.map

package/dist/chunk-AKALKGB2.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/integrations/google-calendar/mapping.ts","../src/integrations/google-calendar/data/tables.ts"],"names":[],"mappings":";AAoCO,SAAS,eAAe,CAAA,EAA6D;AAC1F,EAAA,MAAM,QAAA,GAAA,CAAY,CAAA,CAAE,QAAA,IAAY,IAAI,GAAA,CAAI,CAAC,CAAA,KAAM,CAAA,CAAE,IAAI,CAAA,CAAE,MAAA,CAAO,OAAO,CAAA,CAAE,KAAK,IAAI,CAAA;AAChF,EAAA,MAAM,GAAA,GAAM,EAAE,UAAA,IAAc,EAAA;AAC5B,EAAA,IAAI,YAAY,GAAA,EAAK,OAAO,CAAA,EAAG,QAAQ,WAAM,GAAG,CAAA,CAAA;AAChD,EAAA,OAAO,YAAY,GAAA,IAAO,aAAA;AAC5B;AAGO,SAAS,cAAA,CAAe,GAAoB,QAAA,EAA0C;AAC3F,EAAA,IAAI,CAAC,CAAA,CAAE,QAAA,IAAY,CAAC,CAAA,CAAE,QAAQ,OAAO,IAAA;AACrC,EAAA,MAAM,QAAQ,CAAC,CAAA,CAAE,OAAO,CAAA,CAAE,gBAAA,GAAmB,QAAQ,CAAA,CAAE,gBAAgB,KAAK,EAAA,EAAI,CAAA,CAAE,gBAAgB,EAAE,CAAA,CACjG,OAAO,OAAO,CAAA,CAAE,KAAK,IAAI,CAAA;AAC5B,EAAA,OAAO;AAAA,IACL,OAAA,EAAS,eAAe,CAAC,CAAA;AAAA,IACzB,aAAa,KAAA,IAAS,MAAA;AAAA,IACtB,KAAA,EAAO,EAAE,QAAA,EAAU,CAAA,CAAE,UAAU,QAAA,EAAS;AAAA,IACxC,GAAA,EAAK,EAAE,QAAA,EAAU,CAAA,CAAE,QAAQ,QAAA;AAAS,GACtC;AACF;AAGO,SAAS,oBAAoB,EAAA,EAA6E;AAC/G,EAAA,IAAI,GAAG,MAAA,KAAW,WAAA,EAAa,OAAO,EAAE,QAAQ,WAAA,EAAY;AAC5D,EAAA,MAAM,CAAA,GAAI,WAAW,EAAE,CAAA;AACvB,EAAA,OAAO,EAAE,QAAA,EAAU,CAAA,CAAE,QAAA,EAAU,MAAA,EAAQ,EAAE,MAAA,EAAO;AAClD;AASO,SAAS,sBAAsB,GAAA,EAA6B;AACjE,EAAA,MAAM,CAAA,GAAI,GAAA,CAAI,QAAA,IAAY,EAAC;AAC3B,EAAA,MAAM,QAAA,GAAY,EAAE,YAAA,IAA2B,EAAA;AAC/C,EAAA,MAAM,GAAA,GAAO,CAAA,CAAE,WAAA,IAA2B,CAAA,CAAE,UAAA,IAAyB,EAAA;AACrE,EAAA,IAAI,YAAY,GAAA,EAAK,OAAO,CAAA,EAAG,QAAQ,WAAM,GAAG,CAAA,CAAA;AAChD,EAAA,OAAO,YAAY,GAAA,IAAO,aAAA;AAC5B;AAGO,SAAS,sBAAsB,GAAA,EAAqC;AACzE,EAAA,OAAO;AAAA,IACL,OAAA,EAAS,sBAAsB,GAAG,CAAA;AAAA,IAClC,WAAA,EAAa,IAAI,KAAA,IAAS,MAAA;AAAA,IAC1B,KAAA,EAAO,EAAE,QAAA,EAAU,GAAA,CAAI,SAAA,EAAU;AAAA,IACjC,KAAK,EAAE,QAAA,EAAU,GAAA,CAAI,OAAA,IAAW,IAAI,SAAA;AAAU,GAChD;AACF;AA2BO,SAAS,WAAW,EAAA,EAA2B;AACpD,EAAA,MAAM,MAAA,GAAS,CAAC,EAAA,CAAG,KAAA,EAAO,YAAY,CAAC,CAAC,GAAG,KAAA,EAAO,IAAA;AAClD,EAAA,MAAM,WAAW,EAAA,CAAG,KAAA,EAAO,QAAA,IAAY,EAAA,CAAG,OAAO,IAAA,IAAQ,EAAA;AACzD,EAAA,MAAM,SAAS,EAAA,CAAG,GAAA,EAAK,QAAA,IAAY,EAAA,CAAG,KAAK,IAAA,IAAQ,QAAA;AACnD,EAAA,OAAO,EAAE,QAAA,EAAU,MAAA,EAAQ,MAAA,EAAO;AACpC;AAKO,SAAS,oBAAoB,CAAA,EAAwC;AAC1E,EAAA,OAAO;AAAA,IACL,IAAI,CAAA,CAAE,EAAA;AAAA,IACN,eAAe,CAAA,CAAE,cAAA;AAAA,IACjB,UAAU,CAAA,CAAE,SAAA;AAAA,IACZ,kBAAkB,CAAA,CAAE,kBAAA;AAAA,IACpB,OAAA,EAAS,EAAE,OAAA,IAAW,IAAA;AAAA,IACtB,KAAA,EAAO,EAAE,KAAA,IAAS,IAAA;AAAA,IAClB,WAAW,CAAA,CAAE,SAAA;AAAA,IACb,UAAA,EAAY,EAAE,WAAA,IAAe,IAAA;AAAA,IAC7B,QAAA,EAAU,EAAE,SAAA,IAAa,IAAA;AAAA,IACzB,UAAA,EAAY,EAAE,WAAA,IAAe,aAAA;AAAA,IAC7B,SAAA,EAAW,EAAE,UAAA,IAAc,IAAA;AAAA,IAC3B,SAAA,EAAW,EAAE,UAAA,IAAc,IAAA;AAAA,IAC3B,UAAA,EAAY,EAAE,WAAA,IAAe,IAAA;AAAA,IAC7B,gBAAA,EAAkB,EAAE,kBAAA,IAAsB,IAAA;AAAA,IAC1C,QAAA,EAAU,EAAE,SAAA,IAAa,IAAA;AAAA,IACzB,SAAA,EAAW,EAAE,UAAA,IAAc,EAAA;AAAA,IAC3B,SAAA,EAAW,EAAE,UAAA,IAAc;AAAA,GAC7B;AACF;AAiBO,SAAS,oBAAA,CACd,UACA,OAAA,EACwB;AACxB,EAAA,MAAM,WAAW,QAAA,CAAS,MAAA;AAAA,IACxB,CAAC,MAAM,CAAA,CAAE,QAAA,KAAa,EAAE,SAAA,KAAc,UAAA,IAAc,EAAE,SAAA,KAAc,eAAA;AAAA,GACtE;AACA,EAAA,MAAM,UAAA,GAAa,OAAA,CAAQ,UAAA,IAAc,EAAC;AAE1C,EAAA,IAAI,QAAQ,UAAA,EAAY;AACtB,IAAA,MAAM,UAAA,GAAa,QAAA,CAAS,IAAA,CAAK,CAAC,CAAA,KAAM,CAAA,CAAE,UAAA,KAAe,UAAA,IAAc,CAAA,CAAE,QAAA,KAAa,OAAA,CAAQ,UAAU,CAAA;AACxG,IAAA,IAAI,YAAY,OAAO,UAAA;AAAA,EACzB;AACA,EAAA,IAAI,WAAW,MAAA,EAAQ;AACrB,IAAA,MAAM,YAAY,QAAA,CAAS,IAAA,CAAK,CAAC,CAAA,KAAM,EAAE,UAAA,KAAe,SAAA,IAAa,CAAC,CAAC,EAAE,QAAA,IAAY,UAAA,CAAW,QAAA,CAAS,CAAA,CAAE,QAAQ,CAAC,CAAA;AACpH,IAAA,IAAI,WAAW,OAAO,SAAA;AAAA,EACxB;AACA,EAAA,IAAI,QAAQ,UAAA,EAAY;AACtB,IAAA,MAAM,UAAA,GAAa,QAAA,CAAS,IAAA,CAAK,CAAC,CAAA,KAAM,CAAA,CAAE,UAAA,KAAe,UAAA,IAAc,CAAA,CAAE,QAAA,KAAa,OAAA,CAAQ,UAAU,CAAA;AACxG,IAAA,IAAI,YAAY,OAAO,UAAA;AAAA,EACzB;AACA,EAAA,OAAO,SAAS,IAAA,CAAK,CAAC,MAAM,CAAA,CAAE,UAAA,KAAe,IAAI,CAAA,IAAK,IAAA;AACxD;;;AC5KO,IAAM,WAAA,GAAc;AAAA,EACzB,YAAA,EAAc,2BAAA;AAAA,EACd,QAAA,EAAU,uBAAA;AAAA,EACV,OAAA,EAAS,uBAAA;AAAA,EACT,iBAAA,EAAmB,iCAAA;AAAA,EACnB,gBAAA,EAAkB;AACpB","file":"chunk-AKALKGB2.js","sourcesContent":["// Booking ↔ Google Calendar event mapping — the SINGLE SOURCE OF TRUTH.\n//\n// These helpers are pure and Deno-friendly (only `import type`, no runtime\n// node/react/https imports), so the Supabase edge function imports this exact\n// file via a relative path (`../../src/integrations/google-calendar/mapping.ts`)\n// instead of keeping a divergent mirror. `import type` is elided by the Deno /\n// esbuild bundler, so the plugin `types.ts`/`CalendarBooking` type imports never\n// become runtime dependencies of the function bundle.\n//\n// Two callers, two input shapes:\n//   • the SDK/UI works with the rich `CalendarBooking` (camelCase, joined) — see\n//     bookingToEvent / eventToBookingPatch;\n//   • the edge function + RPCs work with the raw `AppointmentRow` (snake_case DB\n//     columns) — see appointmentRowToEvent / eventToAppointmentPatch.\n// Field decisions (title, all-day, cancel) are made once, here.\nimport type { CalendarBooking } from '../../types'\nimport type { GCalEvent, AppointmentRow, CalendarChannel, CalendarChannelRow } from './types'\n\nexport interface GCalEventInput {\n  summary: string\n  description?: string\n  // Timed events use dateTime; all-day events use date (YYYY-MM-DD).\n  start: { dateTime?: string; date?: string; timeZone?: string }\n  end: { dateTime?: string; date?: string; timeZone?: string }\n}\n\n/** Normalized time window read off a Google event, all-day aware. */\nexport interface EventTimes {\n  startsAt: string\n  endsAt: string\n  allDay: boolean\n}\n\n// --- Booking (rich SDK shape) → event -------------------------------------\n\n/** Build the event title from the booking's services + client. */\nexport function bookingSummary(b: Pick<CalendarBooking, 'services' | 'clientName'>): string {\n  const services = (b.services ?? []).map((s) => s.name).filter(Boolean).join(', ')\n  const who = b.clientName ?? ''\n  if (services && who) return `${services} — ${who}`\n  return services || who || 'Appointment'\n}\n\n/** Map a Fayz booking to a Google Calendar event input. Returns null when the booking has no end. */\nexport function bookingToEvent(b: CalendarBooking, timeZone?: string): GCalEventInput | null {\n  if (!b.startsAt || !b.endsAt) return null\n  const notes = [b.notes, b.professionalName ? `Pro: ${b.professionalName}` : '', b.locationName ?? '']\n    .filter(Boolean).join('\\n')\n  return {\n    summary: bookingSummary(b),\n    description: notes || undefined,\n    start: { dateTime: b.startsAt, timeZone },\n    end: { dateTime: b.endsAt, timeZone },\n  }\n}\n\n/** Map an inbound Google event change to a partial booking update (reschedule/cancel), all-day aware. */\nexport function eventToBookingPatch(ev: GCalEvent): { startsAt?: string; endsAt?: string; status?: 'cancelled' } {\n  if (ev.status === 'cancelled') return { status: 'cancelled' }\n  const t = eventTimes(ev)\n  return { startsAt: t.startsAt, endsAt: t.endsAt }\n}\n\n// --- Appointment row (raw DB shape) → event -------------------------------\n\n/**\n * Build the event title from an appointments row's denormalized metadata.\n * The raw row has no joined services/client, so we read the names the app\n * stamps onto metadata (serviceNames, contactName/clientName).\n */\nexport function appointmentRowSummary(row: AppointmentRow): string {\n  const m = row.metadata ?? {}\n  const services = (m.serviceNames as string) ?? ''\n  const who = (m.contactName as string) ?? (m.clientName as string) ?? ''\n  if (services && who) return `${services} — ${who}`\n  return services || who || 'Appointment'\n}\n\n/** Map a raw appointments row to a Google event input (outbound push from the edge function). */\nexport function appointmentRowToEvent(row: AppointmentRow): GCalEventInput {\n  return {\n    summary: appointmentRowSummary(row),\n    description: row.notes ?? undefined,\n    start: { dateTime: row.starts_at },\n    end: { dateTime: row.ends_at ?? row.starts_at },\n  }\n}\n\n/**\n * Map an inbound Google event to a DB-friendly appointment patch (snake_case\n * times), all-day aware, cancellation included. Consumed by the edge function\n * when calling gcal_apply_event_patch.\n */\nexport function eventToAppointmentPatch(ev: GCalEvent): {\n  starts_at?: string\n  ends_at?: string\n  summary?: string\n  allDay?: boolean\n  cancelled: boolean\n} {\n  if (ev.status === 'cancelled') return { cancelled: true }\n  const t = eventTimes(ev)\n  return { starts_at: t.startsAt, ends_at: t.endsAt, summary: ev.summary, allDay: t.allDay, cancelled: false }\n}\n\n// --- Shared time normalization (all-day aware) ----------------------------\n\n/**\n * Read a normalized {startsAt, endsAt, allDay} window off a Google event.\n * All-day events carry `start.date`/`end.date` (YYYY-MM-DD, end exclusive) and\n * no dateTime; timed events carry dateTime. Falls back start→end when one side\n * is missing so callers always get a usable pair.\n */\nexport function eventTimes(ev: GCalEvent): EventTimes {\n  const allDay = !ev.start?.dateTime && !!ev.start?.date\n  const startsAt = ev.start?.dateTime ?? ev.start?.date ?? ''\n  const endsAt = ev.end?.dateTime ?? ev.end?.date ?? startsAt\n  return { startsAt, endsAt, allDay }\n}\n\n// --- Channel resolution (outbound destination priority) -------------------\n\n/** Convert a raw plg_calendar_channels row (snake_case) to the camelCase CalendarChannel. */\nexport function channelRowToChannel(r: CalendarChannelRow): CalendarChannel {\n  return {\n    id: r.id,\n    integrationId: r.integration_id,\n    tenantId: r.tenant_id,\n    googleCalendarId: r.google_calendar_id,\n    summary: r.summary ?? null,\n    color: r.color ?? null,\n    direction: r.direction,\n    targetKind: r.target_kind ?? null,\n    targetId: r.target_id ?? null,\n    importMode: r.import_mode ?? 'appointment',\n    syncToken: r.sync_token ?? null,\n    channelId: r.channel_id ?? null,\n    resourceId: r.resource_id ?? null,\n    channelExpiresAt: r.channel_expires_at ?? null,\n    isActive: r.is_active ?? true,\n    createdAt: r.created_at ?? '',\n    updatedAt: r.updated_at ?? '',\n  }\n}\n\nexport interface ChannelMatchInput {\n  assigneeId?: string | null\n  serviceIds?: string[]\n  locationId?: string | null\n}\n\n/**\n * Pick the outbound destination channel for a booking, by priority:\n *   1. a channel targeting the booking's assignee,\n *   2. else a channel targeting one of the booking's services,\n *   3. else a channel targeting the booking's location,\n *   4. else the whole-agenda channel (targetKind === null).\n * Only active outbound/bidirectional channels are eligible. Returns null when\n * nothing matches (caller falls back to the integration's default calendar).\n */\nexport function resolveTargetChannel(\n  channels: CalendarChannel[],\n  booking: ChannelMatchInput,\n): CalendarChannel | null {\n  const eligible = channels.filter(\n    (c) => c.isActive && (c.direction === 'outbound' || c.direction === 'bidirectional'),\n  )\n  const serviceIds = booking.serviceIds ?? []\n\n  if (booking.assigneeId) {\n    const byAssignee = eligible.find((c) => c.targetKind === 'assignee' && c.targetId === booking.assigneeId)\n    if (byAssignee) return byAssignee\n  }\n  if (serviceIds.length) {\n    const byService = eligible.find((c) => c.targetKind === 'service' && !!c.targetId && serviceIds.includes(c.targetId))\n    if (byService) return byService\n  }\n  if (booking.locationId) {\n    const byLocation = eligible.find((c) => c.targetKind === 'location' && c.targetId === booking.locationId)\n    if (byLocation) return byLocation\n  }\n  return eligible.find((c) => c.targetKind === null) ?? null\n}\n","// Canonical DB object names for the Google Calendar connector.\n//\n// Plugin-owned tables carry the platform `plg_<plugin>_` prefix (DATA-MODEL.md\n// Ring 1). Single source of truth so the connector data layer (supabase.ts) and\n// the google-calendar-sync edge function never drift on a table name. The SQL\n// side is owned by ./migrations/001_google_calendar.sql + 002_smart_sync.sql\n// (fresh installs) and 003_plg_rename.sql (legacy-pool rename).\n// webhookDeliveries/automationOutbox were recovered from the deployed bundles on\n// 2026-08-12 (FAY-1379): both live functions read them off this map, but the two\n// tables existed only in the pool — 006 is the migration that creates them.\nexport const GCAL_TABLES = {\n  integrations: 'plg_calendar_integrations',\n  channels: 'plg_calendar_channels',\n  syncLog: 'plg_calendar_sync_log',\n  webhookDeliveries: 'plg_calendar_webhook_deliveries',\n  automationOutbox: 'plg_calendar_automation_outbox',\n} as const\n"]}

package/dist/index.js

@@ -1,5 +1,7 @@
 import { createMockAgendaProvider, createSupabasePublicBookingProvider } from './chunk-A77PUFY5.js';
 export { createMockAgendaProvider } from './chunk-A77PUFY5.js';
+import { GCAL_TABLES, channelRowToChannel } from './chunk-AKALKGB2.js';
+export { bookingToEvent, eventToBookingPatch } from './chunk-AKALKGB2.js';
 import React23, { useState, useEffect, useRef, useMemo, useCallback, useLayoutEffect } from 'react';
 import { tl, recordRailFields, RECORD_GROUP, activeFacet, connectionStatus, createConnectionStore, getActiveTenantId, createSafeDataProvider, todayLocal, getSupabaseClientOptional, registerTranslations, registerMessageDefaults, connectorRuntimeToken, CONNECTOR_RUNTIME_TOKEN_HEADER, getActiveUnitId, assertWrote, emitDataChanged, globalCache, usePluginRuntimeOptional, useTranslation, formatCurrency, useActiveUnitId, emitDomainEvent, getCurrentLocale, localDateKey, useDataChanged, resolveDataProvider, describeError, getWidgetsForZone } from '@fayz-ai/core';
 import { createPluginContext, defineSettingsTab, attendanceSettingsParent, fayzConnectorOAuth, UNIT_DETAIL_ZONES, setScheduleBlockConfig, getScheduleBlockConfig, registerPersonActions, PluginSettingsPanel, adminNavigateTo, createArchetypeLookup, dedup, usePluginPrefs, PersonLink, SettingsGroup, MessageTemplateRow, useTenantPluginSettings, ToggleRow, SelectRow, usePermissionOptional, useAdminPath, PageActions, useRightRailStore, useFieldRules, deriveEntityKey, WidgetSlot, openEntity, ScheduleEditor, useLimitGuard, useLookupCreate, CrudFormPage, CrudDetailPage, ContactPicker, PaymentStatusBadge as PaymentStatusBadge$1, RightRailPage, CrudRecordModal, invalidateLimit } from '@fayz-ai/admin';
@@ -4366,7 +4368,7 @@ function readableTextOn(hex) {
   const L = 0.2126 * lin(r) + 0.7152 * lin(g) + 0.0722 * lin(b);
   return (L + 0.05) / 0.05 > 1.05 / (L + 0.05) ? "#111827" : "#ffffff";
 }
-function bookingToEvent(booking, statusColors, visibleResourceIds = [], serviceLooks) {
+function bookingToEvent2(booking, statusColors, visibleResourceIds = [], serviceLooks) {
   const color = statusColors[booking.status] ?? "#6b7280";
   const kindColor = serviceLooks ? bookingCardColor(booking, serviceLooks) : null;
   const serviceNames = booking.services?.map((service) => service.name).join(", ") ?? "";
@@ -5078,7 +5080,7 @@ function CalendarView() {
     };
   }, [serviceIdsKey, provider2]);
   const bookingEvents = useMemo(
-    () => filteredBookings.map((b) => bookingToEvent(b, statusColors, visibleResourceIds, colorByKind ? serviceLooks : void 0)),
+    () => filteredBookings.map((b) => bookingToEvent2(b, statusColors, visibleResourceIds, colorByKind ? serviceLooks : void 0)),
     [filteredBookings, statusColors, visibleResourceIds, colorByKind, serviceLooks]
   );
   const allLocations = useMemo(() => {
@@ -19709,56 +19711,6 @@ function mapInvoiceStatus(status) {
   }
 }
 
-// src/integrations/google-calendar/mapping.ts
-function bookingSummary(b) {
-  const services = (b.services ?? []).map((s) => s.name).filter(Boolean).join(", ");
-  const who = b.clientName ?? "";
-  if (services && who) return `${services} \u2014 ${who}`;
-  return services || who || "Appointment";
-}
-function bookingToEvent2(b, timeZone) {
-  if (!b.startsAt || !b.endsAt) return null;
-  const notes = [b.notes, b.professionalName ? `Pro: ${b.professionalName}` : "", b.locationName ?? ""].filter(Boolean).join("\n");
-  return {
-    summary: bookingSummary(b),
-    description: notes || void 0,
-    start: { dateTime: b.startsAt, timeZone },
-    end: { dateTime: b.endsAt, timeZone }
-  };
-}
-function eventToBookingPatch(ev) {
-  if (ev.status === "cancelled") return { status: "cancelled" };
-  const t2 = eventTimes(ev);
-  return { startsAt: t2.startsAt, endsAt: t2.endsAt };
-}
-function eventTimes(ev) {
-  const allDay = !ev.start?.dateTime && !!ev.start?.date;
-  const startsAt = ev.start?.dateTime ?? ev.start?.date ?? "";
-  const endsAt = ev.end?.dateTime ?? ev.end?.date ?? startsAt;
-  return { startsAt, endsAt, allDay };
-}
-function channelRowToChannel(r) {
-  return {
-    id: r.id,
-    integrationId: r.integration_id,
-    tenantId: r.tenant_id,
-    googleCalendarId: r.google_calendar_id,
-    summary: r.summary ?? null,
-    color: r.color ?? null,
-    direction: r.direction,
-    targetKind: r.target_kind ?? null,
-    targetId: r.target_id ?? null,
-    importMode: r.import_mode ?? "appointment",
-    syncToken: r.sync_token ?? null,
-    channelId: r.channel_id ?? null,
-    resourceId: r.resource_id ?? null,
-    channelExpiresAt: r.channel_expires_at ?? null,
-    isActive: r.is_active ?? true,
-    createdAt: r.created_at ?? "",
-    updatedAt: r.updated_at ?? ""
-  };
-}
-
 // src/integrations/google-calendar/credentials.ts
 var CONNECTION_COLUMNS = "id, provider, calendar_id, active, last_sync_at";
 function isIntegrationActive(row) {
@@ -19768,12 +19720,6 @@ function disconnectPatch() {
   return { active: false, updated_at: (/* @__PURE__ */ new Date()).toISOString() };
 }
 
-// src/integrations/google-calendar/data/tables.ts
-var GCAL_TABLES = {
-  integrations: "plg_calendar_integrations",
-  channels: "plg_calendar_channels",
-  syncLog: "plg_calendar_sync_log"};
-
 // src/integrations/google-calendar/data/supabase.ts
 var FUNCTION = "google-calendar-sync";
 function sb() {
@@ -22622,6 +22568,58 @@ CREATE TRIGGER trg_gcal_push
 COMMENT ON FUNCTION public.fn_gcal_push_booking() IS
   'Pushes a booking to Google Calendar over pg_net, authorised by the vault secret gcal_outbound_secret. Inert while the vault secrets are absent (008).';
 `;
+var MIGRATION_009_THE_SERVICE_RUNS_THE_SYNC = `-- ============================================================================
+-- google-calendar 009_the_service_runs_the_sync \u2014 the Google Calendar data
+-- plane moves to the integration service (ADR 0003 phase 2, wave 3).
+--
+-- User actions run AS the verified caller and machine actions (a booking push,
+-- a webhook pull, watch renewal) AS the store's owner, both under RLS: the
+-- integrations, channels and sync log already admit a member. What only a
+-- machine writes gets the service role, table by table, with an explicit
+-- policy: the webhook delivery log and the automation outbox. And the four
+-- server-only RPCs the sync calls (002/003: service_role only) get EXECUTE for
+-- the service role, where they exist on the cluster.
+--
+-- Guarded: the role is an operator step, and a cluster may not have the RPCs.
+-- Replay-safe.
+-- ============================================================================
+
+DO $$
+DECLARE
+  t text;
+  f text;
+BEGIN
+  IF NOT EXISTS (SELECT 1 FROM pg_roles WHERE rolname = 'fayz_integration') THEN
+    RETURN;
+  END IF;
+
+  FOREACH t IN ARRAY ARRAY['plg_calendar_webhook_deliveries', 'plg_calendar_automation_outbox'] LOOP
+    IF to_regclass('public.' || t) IS NULL THEN CONTINUE; END IF;
+    EXECUTE format('GRANT SELECT, INSERT, UPDATE ON public.%I TO fayz_integration', t);
+    EXECUTE format('DROP POLICY IF EXISTS %I ON public.%I', t || '_service', t);
+    EXECUTE format('CREATE POLICY %I ON public.%I FOR ALL TO fayz_integration USING (true) WITH CHECK (true)', t || '_service', t);
+  END LOOP;
+
+  -- The webhook resolves a channel by its Google channel id before it knows the
+  -- tenant: a read of the channels table, and nothing else on it.
+  IF to_regclass('public.plg_calendar_channels') IS NOT NULL THEN
+    GRANT SELECT ON public.plg_calendar_channels TO fayz_integration;
+    DROP POLICY IF EXISTS plg_calendar_channels_service_read ON public.plg_calendar_channels;
+    CREATE POLICY plg_calendar_channels_service_read ON public.plg_calendar_channels FOR SELECT TO fayz_integration USING (true);
+  END IF;
+
+  FOREACH f IN ARRAY ARRAY[
+    'public.gcal_import_event(uuid, uuid, text, text, text, timestamptz, timestamptz, boolean, text)',
+    'public.gcal_apply_event_patch(uuid, text, text, timestamptz, timestamptz, text, boolean)',
+    'public.gcal_stamp_outbound(uuid, uuid, text, text, text)',
+    'public.gcal_unlink_channel(uuid)'
+  ] LOOP
+    IF to_regprocedure(f) IS NOT NULL THEN
+      EXECUTE format('GRANT EXECUTE ON FUNCTION %s TO fayz_integration', f);
+    END IF;
+  END LOOP;
+END $$;
+`;
 
 // src/integrations/google-calendar/connector.ts
 var googleCalendarConnector = {
@@ -22766,6 +22764,12 @@ function createGoogleCalendarPlugin() {
         version: "0.16.2",
         sql: MIGRATION_008_THE_OUTBOUND_HALF,
         description: "Install trg_gcal_push and the 005 push function on a pool that came up through 007. 007 creates the tables but not the trigger, and the only files that create it (001, 002) also create the credential columns 007 exists to prevent \u2014 so a fresh pool silently had inbound only. Inert until the vault secrets exist"
+      },
+      {
+        id: "google-calendar-009_the_service_runs_the_sync",
+        version: "0.27.0",
+        sql: MIGRATION_009_THE_SERVICE_RUNS_THE_SYNC,
+        description: "Grant the integration service role (ADR 0003 phase 2) the webhook delivery log, the automation outbox, a read of the channels table and EXECUTE on the server-only gcal_* RPCs where they exist, so the sync and its webhook run in the service without a service-role key"
       }
     ]
   };
@@ -23243,6 +23247,6 @@ function createAgendaPlugin(options) {
   };
 }
 
-export { bookingToEvent2 as bookingToEvent, buildAgendaDomainEvents, buildAgendaMessageDefaults, computeCommissionAmount, createAgendaPlugin, createAgendaTurnQueuePlugin, createFinancialBridge, createGoogleCalendarPlugin, createGoogleCalendarProvider, createMockTurnQueueProvider, createSupabaseTurnQueueProvider, eventToBookingPatch, googleCalendarConnector };
+export { buildAgendaDomainEvents, buildAgendaMessageDefaults, computeCommissionAmount, createAgendaPlugin, createAgendaTurnQueuePlugin, createFinancialBridge, createGoogleCalendarPlugin, createGoogleCalendarProvider, createMockTurnQueueProvider, createSupabaseTurnQueueProvider, googleCalendarConnector };
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map