@flamingo-stack/openframe-frontend-core 0.0.596-2034.5677.1 → 0.0.596-2034.5679.1

package/dist/schemas/meeting-booking-schema.d.ts

@@ -136,16 +136,130 @@ export declare const MEETING_BOOKING_ERROR_CODES: readonly ["SLOT_TAKEN", "VALID
  */
 export type MeetingBookingErrorCode = (typeof MEETING_BOOKING_ERROR_CODES)[number];
 /**
- * HubSpot custom-question types the native form supports. The widget's
- * renderer switches over THIS set and `makeBookingSchema` maps over THIS set;
- * fail-closed = a field whose `type` is not in the set (the widget then
- * renders the "Open in HubSpot" escape hatch for that link instead of a
- * half-working native form). Exact upstream type strings are pinned against
- * the rollout fixture link — extend here (renderer + validator move together).
+ * THE registry of HubSpot question types the native form supports — one entry
+ * per `fieldType`, and the ONLY place a type is declared. Everything else
+ * derives from it: `SupportedFormFieldType` is its key union,
+ * `SUPPORTED_FORM_FIELD_TYPES` its keys, `FORM_FIELD_TYPES_WITH_OPTIONS` the
+ * entries that carry `options`, and `makeBookingSchema` maps each answer
+ * through the entry's validator. The widget's control table
+ * (`booking-form.tsx`) is a `Record` over the same key union, so a type added
+ * here without a control is a COMPILE error, not a silent gap.
+ *
+ * Fail-closed: a `fieldType` with no entry makes the link "not natively
+ * bookable" and the card falls back to the HubSpot escape hatch.
+ *
+ * Every string type rides the wire as a STRING (HubSpot's book endpoint takes
+ * `{ name, value: string }`); `checkbox` is the one boolean. `number` is a
+ * Number property validated as a decimal literal — what `<input type="number">`
+ * emits and what the property stores.
+ */
+export interface FormFieldTypeSpec {
+    /** The answer's wire shape, which also decides how required/optional wraps it. */
+    kind: 'string' | 'boolean';
+    /** Whether HubSpot publishes `options` for the type (the pickers). */
+    hasOptions: boolean;
+    /**
+     * The validator for ONE answer. String types EXTEND `base`, which already
+     * carries the required-ness (`min(1)` when required) — so "X is required" is
+     * the first issue reported for an empty answer, ahead of the type's own rule.
+     * Boolean types ignore it.
+     */
+    validator: (field: MeetingFormField, base: z.ZodString) => z.ZodTypeAny;
+    /** The control's placeholder, derived from the field (the mock's "Enter Company Name"). */
+    placeholder?: (field: MeetingFormField) => string;
+}
+export declare const FORM_FIELD_TYPES: {
+    readonly text: {
+        readonly kind: "string";
+        readonly hasOptions: false;
+        readonly validator: (field: MeetingFormField, base: z.ZodString) => z.ZodString;
+        readonly placeholder: (field: MeetingFormField) => string;
+    };
+    readonly textarea: {
+        readonly kind: "string";
+        readonly hasOptions: false;
+        readonly validator: (field: MeetingFormField, base: z.ZodString) => z.ZodString;
+        readonly placeholder: (field: MeetingFormField) => string;
+    };
+    readonly number: {
+        readonly kind: "string";
+        readonly hasOptions: false;
+        readonly validator: (field: MeetingFormField, base: z.ZodString) => z.ZodString;
+    };
+    readonly select: {
+        readonly kind: "string";
+        readonly hasOptions: true;
+        readonly validator: (field: MeetingFormField, base: z.ZodString) => z.ZodTypeAny;
+    };
+    readonly radio: {
+        readonly kind: "string";
+        readonly hasOptions: true;
+        readonly validator: (field: MeetingFormField, base: z.ZodString) => z.ZodTypeAny;
+    };
+    readonly checkbox: {
+        readonly kind: "boolean";
+        readonly hasOptions: false;
+        readonly validator: () => z.ZodBoolean;
+    };
+};
+export type SupportedFormFieldType = keyof typeof FORM_FIELD_TYPES;
+export declare const SUPPORTED_FORM_FIELD_TYPES: readonly SupportedFormFieldType[];
+/** The types whose `options` the host must forward (select, radio). */
+export declare const FORM_FIELD_TYPES_WITH_OPTIONS: readonly SupportedFormFieldType[];
+export declare function isSupportedFormField(field: MeetingFormField): field is SupportedMeetingFormField;
+/** A declared question whose `type` is in the registry. */
+export type SupportedMeetingFormField = MeetingFormField & {
+    type: SupportedFormFieldType;
+};
+/**
+ * The scheduler's fixed identity fields. HubSpot's book endpoint takes them
+ * TOP-LEVEL (`firstName`, `lastName`, `email`), its own booking page hardcodes
+ * them, and the link's `formFields` never lists them — so they are data HERE,
+ * rendered by the widget through the SAME control path as every declared
+ * question, rather than three hand-written blocks. `inputType`/`autoComplete`
+ * are the browser hints a text control takes; the wire and the validator do
+ * not see them.
  */
-export declare const SUPPORTED_FORM_FIELD_TYPES: readonly ["text", "textarea", "select", "radio", "checkbox", "number"];
-export type SupportedFormFieldType = (typeof SUPPORTED_FORM_FIELD_TYPES)[number];
-export declare function isSupportedFormField(field: MeetingFormField): boolean;
+export interface BuiltInBookingField extends MeetingFormField {
+    type: 'text';
+    required: true;
+    inputType?: 'email';
+    autoComplete: string;
+    placeholder: string;
+    /** The wire's own required/format message — kept verbatim from the schema it replaced. */
+    requiredMessage: string;
+}
+export declare const BUILT_IN_BOOKING_FIELDS: readonly [{
+    readonly name: "firstName";
+    readonly label: "First Name";
+    readonly type: "text";
+    readonly required: true;
+    readonly autoComplete: "given-name";
+    readonly placeholder: "Enter First Name";
+    readonly requiredMessage: "First name is required";
+}, {
+    readonly name: "lastName";
+    readonly label: "Last Name";
+    readonly type: "text";
+    readonly required: true;
+    readonly autoComplete: "family-name";
+    readonly placeholder: "Enter Last Name";
+    readonly requiredMessage: "Last name is required";
+}, {
+    readonly name: "email";
+    readonly label: "Email";
+    readonly type: "text";
+    readonly required: true;
+    readonly inputType: "email";
+    readonly autoComplete: "email";
+    readonly placeholder: "username@mail.com";
+    readonly requiredMessage: "Please enter a valid email address";
+}];
+/** `'firstName' | 'lastName' | 'email'` — derived from the array, never restated. */
+export type BuiltInBookingFieldName = (typeof BUILT_IN_BOOKING_FIELDS)[number]['name'];
+/** The registry entry for a supported type, widened to the spec so optional
+ *  members (`placeholder`) are readable without narrowing on the union. */
+export declare function fieldTypeSpec(type: SupportedFormFieldType): FormFieldTypeSpec;
 /**
  * IANA timezone check. Shape prefilter, then the authoritative resolution
  * test: `Intl.DateTimeFormat` throws on unknown zones. NOT

package/dist/schemas/meeting-booking-schema.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"meeting-booking-schema.d.ts","sourceRoot":"","sources":["../../src/schemas/meeting-booking-schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;;;;;;;;;;;GAcG;AAMH;;;;;;;;;GASG;AACH,MAAM,WAAW,mBAAmB;IAClC,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,OAAO,CAAC;IACjB,4EAA4E;IAC5E,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,qEAAqE;IACrE,iBAAiB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IAC5C,UAAU,EAAE,gBAAgB,EAAE,CAAC;IAC/B,8GAA8G;IAC9G,YAAY,EAAE,mBAAmB,GAAG,IAAI,CAAC;IACzC;;;;;OAKG;IACH,KAAK,CAAC,EAAE,WAAW,EAAE,CAAC;CACvB;AAED,oEAAoE;AACpE,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,6DAA6D;IAC7D,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;CACtB;AAED;;;;GAIG;AACH,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,wEAAwE;IACxE,IAAI,EAAE,MAAM,CAAC;IACb,+EAA+E;IAC/E,IAAI,EAAE,MAAM,CAAC;IACb,6EAA6E;IAC7E,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,IAAI,EAAE,UAAU,GAAG,MAAM,CAAC;IAC1B,qEAAqE;IACrE,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,KAAK,EAAE,WAAW,EAAE,CAAC;IACrB,wEAAwE;IACxE,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;CAChC;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,EAAE,KAAK,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,cAAc,EAAE,CAAA;KAAE,CAAC,CAAC;IAC7E,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,OAAO,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;CACpB;AAED;;;;GAIG;AACH,MAAM,WAAW,mBAAmB;IAClC,qBAAqB,EAAE,MAAM,CAAC;IAC9B,8BAA8B,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9C,wBAAwB,EAAE,MAAM,GAAG,IAAI,CAAC;IACxC,8BAA8B,EAAE,KAAK,CAAC;QACpC,mBAAmB,EAAE,MAAM,CAAC;QAC5B,KAAK,EAAE,MAAM,CAAC;QACd,QAAQ,EAAE,OAAO,CAAC;KACnB,CAAC,CAAC;IACH,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,oBAAoB,EAAE,OAAO,CAAC;CAC/B;AAED;;;;GAIG;AACH,MAAM,WAAW,mBAAmB;IAClC,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED;;;;;;;;;GASG;AACH,eAAO,MAAM,2BAA2B,uHAO9B,CAAC;AAEX;;;;;;;GAOG;AACH,MAAM,MAAM,uBAAuB,GAAG,CAAC,OAAO,2BAA2B,CAAC,CAAC,MAAM,CAAC,CAAC;AAMnF;;;;;;;GAOG;AAQH,eAAO,MAAM,0BAA0B,wEAAyE,CAAC;AACjH,MAAM,MAAM,sBAAsB,GAAG,CAAC,OAAO,0BAA0B,CAAC,CAAC,MAAM,CAAC,CAAC;AAEjF,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAErE;AAQD;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAQvD;AAED,sFAAsF;AACtF,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAM1D;AA8HD;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,UAAU,EAAE,gBAAgB,EAAE,EAAE,YAAY,EAAE,mBAAmB,GAAG,IAAI;;;;;;;;;;;;;;;;;;kBAMzG;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,yBAAyB,CAAC,UAAU,EAAE,gBAAgB,EAAE,EAAE,YAAY,EAAE,mBAAmB,GAAG,IAAI;;;;;;;;;;;;;;;;;;kBAWjH;AAED,kEAAkE;AAClE,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,OAAO,iBAAiB,CAAC,CAAC,CAAC;AAElF;;;;GAIG;AACH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,OAAO,yBAAyB,CAAC,CAAC,CAAC"}
+{"version":3,"file":"meeting-booking-schema.d.ts","sourceRoot":"","sources":["../../src/schemas/meeting-booking-schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;;;;;;;;;;;GAcG;AAMH;;;;;;;;;GASG;AACH,MAAM,WAAW,mBAAmB;IAClC,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,OAAO,CAAC;IACjB,4EAA4E;IAC5E,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,qEAAqE;IACrE,iBAAiB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IAC5C,UAAU,EAAE,gBAAgB,EAAE,CAAC;IAC/B,8GAA8G;IAC9G,YAAY,EAAE,mBAAmB,GAAG,IAAI,CAAC;IACzC;;;;;OAKG;IACH,KAAK,CAAC,EAAE,WAAW,EAAE,CAAC;CACvB;AAED,oEAAoE;AACpE,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,6DAA6D;IAC7D,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;CACtB;AAED;;;;GAIG;AACH,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,wEAAwE;IACxE,IAAI,EAAE,MAAM,CAAC;IACb,+EAA+E;IAC/E,IAAI,EAAE,MAAM,CAAC;IACb,6EAA6E;IAC7E,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,IAAI,EAAE,UAAU,GAAG,MAAM,CAAC;IAC1B,qEAAqE;IACrE,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,KAAK,EAAE,WAAW,EAAE,CAAC;IACrB,wEAAwE;IACxE,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;CAChC;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,EAAE,KAAK,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,cAAc,EAAE,CAAA;KAAE,CAAC,CAAC;IAC7E,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,OAAO,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;CACpB;AAED;;;;GAIG;AACH,MAAM,WAAW,mBAAmB;IAClC,qBAAqB,EAAE,MAAM,CAAC;IAC9B,8BAA8B,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9C,wBAAwB,EAAE,MAAM,GAAG,IAAI,CAAC;IACxC,8BAA8B,EAAE,KAAK,CAAC;QACpC,mBAAmB,EAAE,MAAM,CAAC;QAC5B,KAAK,EAAE,MAAM,CAAC;QACd,QAAQ,EAAE,OAAO,CAAC;KACnB,CAAC,CAAC;IACH,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,oBAAoB,EAAE,OAAO,CAAC;CAC/B;AAED;;;;GAIG;AACH,MAAM,WAAW,mBAAmB;IAClC,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED;;;;;;;;;GASG;AACH,eAAO,MAAM,2BAA2B,uHAO9B,CAAC;AAEX;;;;;;;GAOG;AACH,MAAM,MAAM,uBAAuB,GAAG,CAAC,OAAO,2BAA2B,CAAC,CAAC,MAAM,CAAC,CAAC;AAMnF;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,WAAW,iBAAiB;IAChC,kFAAkF;IAClF,IAAI,EAAE,QAAQ,GAAG,SAAS,CAAC;IAC3B,sEAAsE;IACtE,UAAU,EAAE,OAAO,CAAC;IACpB;;;;;OAKG;IACH,SAAS,EAAE,CAAC,KAAK,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC,CAAC,SAAS,KAAK,CAAC,CAAC,UAAU,CAAC;IACxE,2FAA2F;IAC3F,WAAW,CAAC,EAAE,CAAC,KAAK,EAAE,gBAAgB,KAAK,MAAM,CAAC;CACnD;AAOD,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;oCAVR,gBAAgB,QAAQ,CAAC,CAAC,SAAS,KAAK,CAAC,CAAC,UAAU;;;;;oCAApD,gBAAgB,QAAQ,CAAC,CAAC,SAAS,KAAK,CAAC,CAAC,UAAU;;;;;;;CAoCnB,CAAC;AAEvD,MAAM,MAAM,sBAAsB,GAAG,MAAM,OAAO,gBAAgB,CAAC;AAEnE,eAAO,MAAM,0BAA0B,EAAoC,SAAS,sBAAsB,EAAE,CAAC;AAE7G,uEAAuE;AACvE,eAAO,MAAM,6BAA6B,EAAE,SAAS,sBAAsB,EAE1E,CAAC;AAEF,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,gBAAgB,GAAG,KAAK,IAAI,yBAAyB,CAEhG;AAED,2DAA2D;AAC3D,MAAM,MAAM,yBAAyB,GAAG,gBAAgB,GAAG;IAAE,IAAI,EAAE,sBAAsB,CAAA;CAAE,CAAC;AAE5F;;;;;;;;GAQG;AACH,MAAM,WAAW,mBAAoB,SAAQ,gBAAgB;IAC3D,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,IAAI,CAAC;IACf,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,0FAA0F;IAC1F,eAAe,EAAE,MAAM,CAAC;CACzB;AAED,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;EA6Be,CAAC;AAEpD,qFAAqF;AACrF,MAAM,MAAM,uBAAuB,GAAG,CAAC,OAAO,uBAAuB,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC;AAEvF;2EAC2E;AAC3E,wBAAgB,aAAa,CAAC,IAAI,EAAE,sBAAsB,GAAG,iBAAiB,CAE7E;AAkBD;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAQvD;AAED,sFAAsF;AACtF,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAM1D;AAwGD;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,UAAU,EAAE,gBAAgB,EAAE,EAAE,YAAY,EAAE,mBAAmB,GAAG,IAAI;;;;;;;;;;;;;;;;;;kBAMzG;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,yBAAyB,CAAC,UAAU,EAAE,gBAAgB,EAAE,EAAE,YAAY,EAAE,mBAAmB,GAAG,IAAI;;;;;;;;;;;;;;;;;;kBAWjH;AAED,kEAAkE;AAClE,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,OAAO,iBAAiB,CAAC,CAAC,CAAC;AAElF;;;;GAIG;AACH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,OAAO,yBAAyB,CAAC,CAAC,CAAC"}

package/dist/schemas/meeting-booking-schema.js

@@ -9,9 +9,78 @@ var MEETING_BOOKING_ERROR_CODES = [
   "TEMPORARILY_UNAVAILABLE",
   "MEETING_UNAVAILABLE"
 ];
-var SUPPORTED_FORM_FIELD_TYPES = ["text", "textarea", "select", "radio", "checkbox", "number"];
+var optionValidator = (field, base) => base.refine((v) => !v || (field.options ?? []).includes(v), {
+  message: `Please choose a valid option for ${field.label}`
+});
+var FORM_FIELD_TYPES = {
+  text: {
+    kind: "string",
+    hasOptions: false,
+    validator: (field, base) => base.max(1e3, { message: `${field.label} is too long` }),
+    placeholder: (field) => `Enter ${field.label}`
+  },
+  textarea: {
+    kind: "string",
+    hasOptions: false,
+    validator: (field, base) => base.max(5e3, { message: `${field.label} is too long` }),
+    placeholder: (field) => `Enter text${field.required ? "" : " (optional)"}`
+  },
+  number: {
+    kind: "string",
+    hasOptions: false,
+    // Canonical decimal literal — the control normalises what the browser
+    // accepts (`1e3`, `007`) to this before it is validated or sent.
+    validator: (field, base) => base.max(32, { message: `${field.label} is too long` }).regex(/^-?\d+(\.\d+)?$/, { message: `${field.label} must be a number` })
+  },
+  select: { kind: "string", hasOptions: true, validator: optionValidator },
+  radio: { kind: "string", hasOptions: true, validator: optionValidator },
+  checkbox: { kind: "boolean", hasOptions: false, validator: () => z.boolean() }
+};
+var SUPPORTED_FORM_FIELD_TYPES = Object.keys(FORM_FIELD_TYPES);
+var FORM_FIELD_TYPES_WITH_OPTIONS = SUPPORTED_FORM_FIELD_TYPES.filter(
+  (type) => FORM_FIELD_TYPES[type].hasOptions
+);
 function isSupportedFormField(field) {
-  return SUPPORTED_FORM_FIELD_TYPES.includes(field.type);
+  return Object.prototype.hasOwnProperty.call(FORM_FIELD_TYPES, field.type);
+}
+var BUILT_IN_BOOKING_FIELDS = [
+  {
+    name: "firstName",
+    label: "First Name",
+    type: "text",
+    required: true,
+    autoComplete: "given-name",
+    placeholder: "Enter First Name",
+    requiredMessage: "First name is required"
+  },
+  {
+    name: "lastName",
+    label: "Last Name",
+    type: "text",
+    required: true,
+    autoComplete: "family-name",
+    placeholder: "Enter Last Name",
+    requiredMessage: "Last name is required"
+  },
+  {
+    name: "email",
+    label: "Email",
+    type: "text",
+    required: true,
+    inputType: "email",
+    autoComplete: "email",
+    placeholder: "username@mail.com",
+    requiredMessage: "Please enter a valid email address"
+  }
+];
+function fieldTypeSpec(type) {
+  return FORM_FIELD_TYPES[type];
+}
+function identityValidator(name) {
+  const field = BUILT_IN_BOOKING_FIELDS.find((f) => f.name === name);
+  if (!field) throw new Error(`Unknown built-in booking field: ${name}`);
+  const base = z.string().max(255);
+  return field.inputType === "email" ? base.email({ message: field.requiredMessage }) : base.min(1, { message: field.requiredMessage });
 }
 var IANA_TZ_RE = /^(?:UTC|[A-Za-z_]+(?:\/[A-Za-z0-9_+-]+)+)$/;
 function isValidIanaTimezone(tz) {
@@ -34,34 +103,14 @@ function buildBookingSchema(formFields, legalConsent, slot) {
   const answers = {};
   for (const field of formFields) {
     if (!isSupportedFormField(field)) continue;
+    const spec = FORM_FIELD_TYPES[field.type];
     let validator;
-    switch (field.type) {
-      case "checkbox":
-        validator = z.boolean();
-        break;
-      case "select":
-      case "radio":
-        validator = z.string().refine((v) => !v || (field.options ?? []).includes(v), {
-          message: `Please choose a valid option for ${field.label}`
-        });
-        break;
-      case "textarea":
-        validator = z.string().max(5e3, { message: `${field.label} is too long` });
-        break;
-      case "number":
-        validator = z.string().max(32, { message: `${field.label} is too long` }).regex(/^-?\d+(\.\d+)?$/, { message: `${field.label} must be a number` });
-        break;
-      case "text":
-      default:
-        validator = z.string().max(1e3, { message: `${field.label} is too long` });
-        break;
-    }
-    if (field.required) {
-      validator = field.type === "checkbox" ? z.literal(true, { message: `${field.label} is required` }) : validator.min(1, { message: `${field.label} is required` });
-    } else if (field.type !== "checkbox") {
-      validator = validator.optional().or(z.literal(""));
+    if (spec.kind === "boolean") {
+      validator = field.required ? z.literal(true, { message: `${field.label} is required` }) : z.boolean().optional();
     } else {
-      validator = z.boolean().optional();
+      const base = field.required ? z.string().min(1, { message: `${field.label} is required` }) : z.string();
+      validator = spec.validator(field, base);
+      if (!field.required) validator = validator.optional().or(z.literal(""));
     }
     answers[field.name] = validator;
   }
@@ -72,9 +121,11 @@ function buildBookingSchema(formFields, legalConsent, slot) {
     meetingId: z.string().min(1),
     startTimeMs: slot.startTimeMs,
     durationMs: slot.durationMs,
-    firstName: z.string().min(1, { message: "First name is required" }).max(255),
-    lastName: z.string().min(1, { message: "Last name is required" }).max(255),
-    email: z.string().email({ message: "Please enter a valid email address" }).max(255),
+    // The identity trio's rules come from BUILT_IN_BOOKING_FIELDS — the
+    // keys stay literal so the payload type keeps its named properties.
+    firstName: identityValidator("firstName"),
+    lastName: identityValidator("lastName"),
+    email: identityValidator("email"),
     timezone: slot.timezone,
     locale: z.string().refine(isValidBcp47Locale, { message: "Invalid locale" }).optional(),
     // Plain `.optional()` (no `.default()`) so zod's input and output types
@@ -112,6 +163,6 @@ function makeDeferredBookingSchema(formFields, legalConsent) {
   });
 }
 
-export { MEETING_BOOKING_ERROR_CODES, SUPPORTED_FORM_FIELD_TYPES, isSupportedFormField, isValidBcp47Locale, isValidIanaTimezone, makeBookingSchema, makeDeferredBookingSchema };
+export { BUILT_IN_BOOKING_FIELDS, FORM_FIELD_TYPES, FORM_FIELD_TYPES_WITH_OPTIONS, MEETING_BOOKING_ERROR_CODES, SUPPORTED_FORM_FIELD_TYPES, fieldTypeSpec, isSupportedFormField, isValidBcp47Locale, isValidIanaTimezone, makeBookingSchema, makeDeferredBookingSchema };
 //# sourceMappingURL=meeting-booking-schema.js.map
 //# sourceMappingURL=meeting-booking-schema.js.map

package/dist/schemas/meeting-booking-schema.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/schemas/meeting-booking-schema.ts"],"names":[],"mappings":";;;AAwIO,IAAM,2BAAA,GAA8B;AAAA,EACzC,YAAA;AAAA,EACA,YAAA;AAAA,EACA,eAAA;AAAA,EACA,WAAA;AAAA,EACA,yBAAA;AAAA,EACA;AACF;AA+BO,IAAM,6BAA6B,CAAC,MAAA,EAAQ,YAAY,QAAA,EAAU,OAAA,EAAS,YAAY,QAAQ;AAG/F,SAAS,qBAAqB,KAAA,EAAkC;AACrE,EAAA,OAAQ,0BAAA,CAAiD,QAAA,CAAS,KAAA,CAAM,IAAI,CAAA;AAC9E;AAMA,IAAM,UAAA,GAAa,4CAAA;AAQZ,SAAS,oBAAoB,EAAA,EAAqB;AACvD,EAAA,IAAI,CAAC,UAAA,CAAW,IAAA,CAAK,EAAE,GAAG,OAAO,KAAA;AACjC,EAAA,IAAI;AACF,IAAA,IAAI,KAAK,cAAA,CAAe,OAAA,EAAS,EAAE,QAAA,EAAU,IAAI,CAAA;AACjD,IAAA,OAAO,IAAA;AAAA,EACT,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,KAAA;AAAA,EACT;AACF;AAGO,SAAS,mBAAmB,MAAA,EAAyB;AAC1D,EAAA,IAAI;AACF,IAAA,OAAO,IAAA,CAAK,mBAAA,CAAoB,MAAM,CAAA,CAAE,MAAA,GAAS,CAAA;AAAA,EACnD,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,KAAA;AAAA,EACT;AACF;AAwBA,SAAS,kBAAA,CACP,UAAA,EACA,YAAA,EAKA,IAAA,EACA;AACA,EAAA,MAAM,UAAwC,EAAC;AAC/C,EAAA,KAAA,MAAW,SAAS,UAAA,EAAY;AAC9B,IAAA,IAAI,CAAC,oBAAA,CAAqB,KAAK,CAAA,EAAG;AAClC,IAAA,IAAI,SAAA;AACJ,IAAA,QAAQ,MAAM,IAAA;AAAgC,MAC5C,KAAK,UAAA;AACH,QAAA,SAAA,GAAY,EAAE,OAAA,EAAQ;AACtB,QAAA;AAAA,MACF,KAAK,QAAA;AAAA,MACL,KAAK,OAAA;AACH,QAAA,SAAA,GAAY,CAAA,CAAE,MAAA,EAAO,CAAE,MAAA,CAAO,CAAA,CAAA,KAAK,CAAC,CAAA,IAAA,CAAM,KAAA,CAAM,OAAA,IAAW,EAAC,EAAG,QAAA,CAAS,CAAC,CAAA,EAAG;AAAA,UAC1E,OAAA,EAAS,CAAA,iCAAA,EAAoC,KAAA,CAAM,KAAK,CAAA;AAAA,SACzD,CAAA;AACD,QAAA;AAAA,MACF,KAAK,UAAA;AACH,QAAA,SAAA,GAAY,CAAA,CAAE,MAAA,EAAO,CAAE,GAAA,CAAI,GAAA,EAAM,EAAE,OAAA,EAAS,CAAA,EAAG,KAAA,CAAM,KAAK,CAAA,YAAA,CAAA,EAAgB,CAAA;AAC1E,QAAA;AAAA,MACF,KAAK,QAAA;AAGH,QAAA,SAAA,GAAY,CAAA,CACT,QAAO,CACP,GAAA,CAAI,IAAI,EAAE,OAAA,EAAS,GAAG,KAAA,CAAM,KAAK,gBAAgB,CAAA,CACjD,MAAM,iBAAA,EAAmB,EAAE,SAAS,CAAA,EAAG,KAAA,CAAM,KAAK,CAAA,iBAAA,CAAA,EAAqB,CAAA;AAC1E,QAAA;AAAA,MACF,KAAK,MAAA;AAAA,MACL;AACE,QAAA,SAAA,GAAY,CAAA,CAAE,MAAA,EAAO,CAAE,GAAA,CAAI,GAAA,EAAM,EAAE,OAAA,EAAS,CAAA,EAAG,KAAA,CAAM,KAAK,CAAA,YAAA,CAAA,EAAgB,CAAA;AAC1E,QAAA;AAAA;AAEJ,IAAA,IAAI,MAAM,QAAA,EAAU;AAClB,MAAA,SAAA,GACE,KAAA,CAAM,SAAS,UAAA,GACX,CAAA,CAAE,QAAQ,IAAA,EAAM,EAAE,OAAA,EAAS,CAAA,EAAG,KAAA,CAAM,KAAK,gBAAgB,CAAA,GACxD,SAAA,CAA0B,GAAA,CAAI,CAAA,EAAG,EAAE,SAAS,CAAA,EAAG,KAAA,CAAM,KAAK,CAAA,YAAA,CAAA,EAAgB,CAAA;AAAA,IACnF,CAAA,MAAA,IAAW,KAAA,CAAM,IAAA,KAAS,UAAA,EAAY;AACpC,MAAA,SAAA,GAAa,UAA0B,QAAA,EAAS,CAAE,GAAG,CAAA,CAAE,OAAA,CAAQ,EAAE,CAAC,CAAA;AAAA,IACpE,CAAA,MAAO;AACL,MAAA,SAAA,GAAY,CAAA,CAAE,OAAA,EAAQ,CAAE,QAAA,EAAS;AAAA,IACnC;AACA,IAAA,OAAA,CAAQ,KAAA,CAAM,IAAI,CAAA,GAAI,SAAA;AAAA,EACxB;AAEA,EAAA,MAAM,kBAAA,GAAA,CAAsB,YAAA,EAAc,8BAAA,IAAkC,EAAC,EAC1E,MAAA,CAAO,CAAA,CAAA,KAAK,CAAA,CAAE,QAAQ,CAAA,CACtB,GAAA,CAAI,CAAA,CAAA,KAAK,EAAE,mBAAmB,CAAA;AAMjC,EAAA,MAAM,kBAAA,GAAqB,WAAW,IAAA,CAAK,CAAA,CAAA,KAAK,qBAAqB,CAAC,CAAA,IAAK,EAAE,QAAQ,CAAA;AACrF,EAAA,MAAM,aAAA,GAAgB,CAAA,CAAE,MAAA,CAAO,OAAO,CAAA;AAEtC,EAAA,OACE,EACG,MAAA,CAAO;AAAA,IACN,SAAA,EAAW,CAAA,CAAE,MAAA,EAAO,CAAE,IAAI,CAAC,CAAA;AAAA,IAC3B,aAAa,IAAA,CAAK,WAAA;AAAA,IAClB,YAAY,IAAA,CAAK,UAAA;AAAA,IACjB,SAAA,EAAW,CAAA,CAAE,MAAA,EAAO,CAAE,GAAA,CAAI,CAAA,EAAG,EAAE,OAAA,EAAS,wBAAA,EAA0B,CAAA,CAAE,GAAA,CAAI,GAAG,CAAA;AAAA,IAC3E,QAAA,EAAU,CAAA,CAAE,MAAA,EAAO,CAAE,GAAA,CAAI,CAAA,EAAG,EAAE,OAAA,EAAS,uBAAA,EAAyB,CAAA,CAAE,GAAA,CAAI,GAAG,CAAA;AAAA,IACzE,KAAA,EAAO,CAAA,CAAE,MAAA,EAAO,CAAE,KAAA,CAAM,EAAE,OAAA,EAAS,oCAAA,EAAsC,CAAA,CAAE,GAAA,CAAI,GAAG,CAAA;AAAA,IAClF,UAAU,IAAA,CAAK,QAAA;AAAA,IACf,MAAA,EAAQ,CAAA,CAAE,MAAA,EAAO,CAAE,MAAA,CAAO,kBAAA,EAAoB,EAAE,OAAA,EAAS,gBAAA,EAAkB,CAAA,CAAE,QAAA,EAAS;AAAA;AAAA;AAAA;AAAA;AAAA,IAKtF,UAAA,EAAY,kBAAA,GAAqB,aAAA,GAAgB,aAAA,CAAc,QAAA,EAAS;AAAA,IACxE,uBAAuB,CAAA,CACpB,KAAA,CAAM,CAAA,CAAE,MAAA,CAAO,EAAE,mBAAA,EAAqB,CAAA,CAAE,MAAA,EAAO,EAAG,WAAW,CAAA,CAAE,OAAA,IAAW,CAAC,EAC3E,QAAA;AAAS,GACb,CAAA,CAIA,WAAA,CAAY,CAAC,MAAM,GAAA,KAAQ;AAC1B,IAAA,MAAM,SAAA,GAAY,IAAA,CAAK,qBAAA,IAAyB,EAAC;AACjD,IAAA,MAAM,KAAK,kBAAA,CAAmB,KAAA;AAAA,MAAM,CAAA,EAAA,KAClC,UAAU,IAAA,CAAK,CAAA,CAAA,KAAK,EAAE,mBAAA,KAAwB,EAAA,IAAM,CAAA,CAAE,SAAA,KAAc,IAAI;AAAA,KAC1E;AACA,IAAA,IAAI,CAAC,EAAA,EAAI;AACP,MAAA,GAAA,CAAI,QAAA,CAAS;AAAA,QACX,IAAA,EAAM,EAAE,YAAA,CAAa,MAAA;AAAA,QACrB,IAAA,EAAM,CAAC,uBAAuB,CAAA;AAAA,QAC9B,OAAA,EAAS;AAAA,OACV,CAAA;AAAA,IACH;AAAA,EACF,CAAC,CAAA;AAEP;AAOO,SAAS,iBAAA,CAAkB,YAAgC,YAAA,EAA0C;AAC1G,EAAA,OAAO,kBAAA,CAAmB,YAAY,YAAA,EAAc;AAAA,IAClD,aAAa,CAAA,CAAE,MAAA,EAAO,CAAE,GAAA,GAAM,QAAA,EAAS;AAAA,IACvC,YAAY,CAAA,CAAE,MAAA,EAAO,CAAE,GAAA,GAAM,QAAA,EAAS;AAAA,IACtC,QAAA,EAAU,EAAE,MAAA,EAAO,CAAE,OAAO,mBAAA,EAAqB,EAAE,OAAA,EAAS,kBAAA,EAAoB;AAAA,GACjF,CAAA;AACH;AAcO,SAAS,yBAAA,CAA0B,YAAgC,YAAA,EAA0C;AAMlH,EAAA,OAAO,kBAAA,CAAmB,YAAY,YAAA,EAAc;AAAA,IAClD,WAAA,EAAa,EAAE,MAAA,EAAO,CAAE,KAAI,CAAE,QAAA,GAAW,OAAA,EAAQ;AAAA,IACjD,UAAA,EAAY,EAAE,MAAA,EAAO,CAAE,KAAI,CAAE,QAAA,GAAW,OAAA,EAAQ;AAAA,IAChD,QAAA,EAAU,CAAA,CAAE,MAAA,EAAO,CAAE,MAAA,CAAO,mBAAA,EAAqB,EAAE,OAAA,EAAS,kBAAA,EAAoB,CAAA,CAAE,OAAA;AAAQ,GAC3F,CAAA;AACH","file":"meeting-booking-schema.js","sourcesContent":["import { z } from 'zod';\n\n/**\n * Meeting-booking wire contracts + validation factory.\n *\n * SERVER-SAFE tsup entry (no \"use client\" banner) with its OWN per-file\n * subpath (`./schemas/meeting-booking-schema`) — same pattern and reasons as\n * `schemas/contact-schema`: used by BOTH the lib's `<HubSpotMeetingScheduler>`\n * (client-side validation) AND the host's server-side booking route, which\n * REBUILDS the schema from the link's own fetched metadata and never trusts a\n * client-shaped instance. zod is an optional peer quarantined to per-subpath\n * verticals — do NOT re-export this module through any broad barrel.\n *\n * Every cross-boundary type for the scheduling feature lives HERE (the lib\n * owns the contract; hosts import this subpath directly, type-only where\n * possible).\n */\n\n// ---------------------------------------------------------------------------\n// Wire types\n// ---------------------------------------------------------------------------\n\n/**\n * Sanitized availability payload served by the host proxy\n * (`GET {apiBaseUrl}/api/meetings/availability?meeting=<id>&monthOffset=<n>`).\n *\n * NO timezone field on purpose: slot starts are absolute epoch-ms instants\n * (verified timezone-independent against the live API), upstream fetches are\n * UTC-pinned, and ALL zone rendering happens client-side. Slots must be\n * whitelist-copied from HubSpot's `linkAvailability` ONLY — never derived\n * from busy-time data.\n */\nexport interface MeetingAvailability {\n  meetingId: string;\n  monthOffset: number;\n  hasMore: boolean;\n  /** Offered durations in ms — HubSpot's native unit for the booking POST. */\n  durationsMs: number[];\n  /** Bookable slot start times (epoch ms), keyed by duration in ms. */\n  slotsByDurationMs: Record<string, number[]>;\n  formFields: MeetingFormField[];\n  /** Verbatim whitelist-copy of HubSpot's `legalConsentOptions` when consent is enabled; null when disabled. */\n  legalConsent: MeetingLegalConsent | null;\n  /**\n   * Who the visitor is meeting — whitelisted DISPLAY projection the host DAL\n   * builds from its own people data (e.g. a profiles table matched\n   * server-side). NEVER carries emails or busy-time data; optional so\n   * existing hosts stay wire-compatible.\n   */\n  hosts?: MeetingHost[];\n}\n\n/** Display-only host identity for the scheduler's context panel. */\nexport interface MeetingHost {\n  name: string;\n  avatarUrl: string | null;\n  /** Job title / role line under the name (null → omitted). */\n  title: string | null;\n}\n\n/**\n * One scheduling link on the DIRECTORY wire (`GET /api/meetings`) — the\n * host-DAL whitelist projection consumed by `MeetingSchedulerDirectory` and\n * host pages. Never carries organizer emails/busy-time data.\n */\nexport interface SchedulingLink {\n  id: string;\n  /** The link's public HubSpot booking URL — escape-hatch target only. */\n  link: string;\n  /** HubSpot slug path — the row's in-app destination is `<basePath>/<slug>`. */\n  slug: string;\n  /** Audience group key (slugified audience label; `\"other\"` in scope=all). */\n  purpose: string;\n  title: string;\n  description: string | null;\n  kind: 'personal' | 'team';\n  /** Display-only minutes projection (booking stays ms end-to-end). */\n  durationsMinutes: number[];\n  hosts: MeetingHost[];\n  /** Earliest bookable slot (epoch ms) from the current-month payload. */\n  nextAvailableMs: number | null;\n}\n\nexport interface SchedulingLinksPayload {\n  purposes: Array<{ purpose: string; label: string; links: SchedulingLink[] }>;\n  fetchedAt: string;\n}\n\nexport interface MeetingFormField {\n  name: string;\n  label: string;\n  type: string;\n  required: boolean;\n  options?: string[];\n}\n\n/**\n * HubSpot's consent copy, rendered VERBATIM by the widget (GDPR surface —\n * never edited, never summarized). Responses are keyed by\n * `communicationTypeId`.\n */\nexport interface MeetingLegalConsent {\n  processingConsentText: string;\n  processingConsentCheckboxLabel: string | null;\n  communicationConsentText: string | null;\n  communicationConsentCheckboxes: Array<{\n    communicationTypeId: string;\n    label: string;\n    required: boolean;\n  }>;\n  privacyPolicyText: string | null;\n  isLegitimateInterest: boolean;\n}\n\n/**\n * Whitelisted booking result returned by the host proxy — the THIRD HubSpot\n * payload that reaches a browser, so it gets the same whitelist-copy\n * treatment as the two GETs. Nothing organizer-derived.\n */\nexport interface BookingConfirmation {\n  meetingId: string;\n  title: string;\n  startTimeMs: number;\n  durationMs: number;\n}\n\n/**\n * Typed domain errors the booking route emits; the widget keys its recovery\n * UI off these. `SLOT_TAKEN` → refetch-and-recover; `TEMPORARILY_UNAVAILABLE`\n * → retry affordance; `MEETING_UNAVAILABLE` → daily ceiling exhausted\n * (escape hatch, not a retry timer); `LINK_GONE` → link deleted upstream;\n * `INVALID_EMAIL` → HubSpot rejected the attendee address (its\n * MeetingsBookingCreatedError.INVALID_EMAIL class — fake/unreachable\n * mailboxes), so the widget tells the visitor to fix the email instead of\n * blaming the slot or their other details.\n */\nexport const MEETING_BOOKING_ERROR_CODES = [\n  'SLOT_TAKEN',\n  'VALIDATION',\n  'INVALID_EMAIL',\n  'LINK_GONE',\n  'TEMPORARILY_UNAVAILABLE',\n  'MEETING_UNAVAILABLE',\n] as const;\n\n/**\n * Derived from the runtime array ABOVE — the array is the single source of\n * truth. The booking hook validates server codes against it at runtime, so a\n * code added only to a hand-written type would be silently coerced to\n * TEMPORARILY_UNAVAILABLE by every deployed widget (exactly how the\n * INVALID_EMAIL rollout mis-rendered on 2026-08-27: type extended, runtime\n * allowlist stale — an array annotation is not exhaustiveness-checked).\n */\nexport type MeetingBookingErrorCode = (typeof MEETING_BOOKING_ERROR_CODES)[number];\n\n// ---------------------------------------------------------------------------\n// Field-type vocabulary — ONE set drives the renderer AND the validator\n// ---------------------------------------------------------------------------\n\n/**\n * HubSpot custom-question types the native form supports. The widget's\n * renderer switches over THIS set and `makeBookingSchema` maps over THIS set;\n * fail-closed = a field whose `type` is not in the set (the widget then\n * renders the \"Open in HubSpot\" escape hatch for that link instead of a\n * half-working native form). Exact upstream type strings are pinned against\n * the rollout fixture link — extend here (renderer + validator move together).\n */\n// HubSpot `fieldType` values the widget can render faithfully. Anything else\n// (phonenumber, date, booleancheckbox, file, …) makes the link \"not natively\n// bookable\" and the card fails closed to the HubSpot escape hatch — so adding a\n// type here means adding a control in `booking-form.tsx` AND a validator below.\n// `number` is a Number property: the wire value stays a STRING like every other\n// answer (HubSpot's book endpoint takes `{ name, value: string }`), validated as\n// a decimal literal.\nexport const SUPPORTED_FORM_FIELD_TYPES = ['text', 'textarea', 'select', 'radio', 'checkbox', 'number'] as const;\nexport type SupportedFormFieldType = (typeof SUPPORTED_FORM_FIELD_TYPES)[number];\n\nexport function isSupportedFormField(field: MeetingFormField): boolean {\n  return (SUPPORTED_FORM_FIELD_TYPES as readonly string[]).includes(field.type);\n}\n\n// ---------------------------------------------------------------------------\n// Validators (single home — client widget and server rebuild both use these)\n// ---------------------------------------------------------------------------\n\nconst IANA_TZ_RE = /^(?:UTC|[A-Za-z_]+(?:\\/[A-Za-z0-9_+-]+)+)$/;\n\n/**\n * IANA timezone check. Shape prefilter, then the authoritative resolution\n * test: `Intl.DateTimeFormat` throws on unknown zones. NOT\n * `Intl.supportedValuesOf('timeZone')` — that list excludes `'UTC'` itself\n * (verified in Node), which is a legitimate booking zone. Reject, never coerce.\n */\nexport function isValidIanaTimezone(tz: string): boolean {\n  if (!IANA_TZ_RE.test(tz)) return false;\n  try {\n    new Intl.DateTimeFormat('en-US', { timeZone: tz });\n    return true;\n  } catch {\n    return false;\n  }\n}\n\n/** BCP-47 locale shape check via `Intl.getCanonicalLocales`. Reject, never coerce. */\nexport function isValidBcp47Locale(locale: string): boolean {\n  try {\n    return Intl.getCanonicalLocales(locale).length > 0;\n  } catch {\n    return false;\n  }\n}\n\n// ---------------------------------------------------------------------------\n// Schema factory\n// ---------------------------------------------------------------------------\n\n/**\n * Build the booking-form schema for ONE link's declared questions + consent.\n *\n * A factory (not a static schema) because per-link required questions cannot\n * be expressed statically. The widget builds it from the availability payload\n * it rendered; the server REBUILDS it from the link's own fetched metadata —\n * required-consent enforcement flows from this rebuild, not a parallel check.\n *\n * Deliberately NOT `.strict()`: the humanity-signal fields\n * (`HUMANITY_SIGNAL_KEYS` from `utils/humanity-signals`) ride alongside in\n * the same POST body (read raw by the host's bot gate BEFORE parsing) and are\n * stripped server-side before anything reaches HubSpot. zod's default\n * unknown-key stripping means the parsed output never contains them.\n *\n * `timezone`/`locale` are POST-only presentation fields (the invite renders\n * in the visitor's local time) — this schema is the ONLY place a\n * client-supplied zone is accepted; the availability path is UTC-pinned.\n */\nfunction buildBookingSchema<TStart extends z.ZodTypeAny, TDuration extends z.ZodTypeAny, TZone extends z.ZodTypeAny>(\n  formFields: MeetingFormField[],\n  legalConsent: MeetingLegalConsent | null,\n  // Passed IN rather than switched on a boolean: a `deferSlot: boolean`\n  // parameter cannot be narrowed at type level, so every ternary inside would\n  // infer a union and widen `startTimeMs`/`durationMs` to `number | null |\n  // undefined` for BOTH schemas — including the server's wire type.\n  slot: { startTimeMs: TStart; durationMs: TDuration; timezone: TZone },\n) {\n  const answers: Record<string, z.ZodTypeAny> = {};\n  for (const field of formFields) {\n    if (!isSupportedFormField(field)) continue; // unsupported types are fail-closed at render time\n    let validator: z.ZodTypeAny;\n    switch (field.type as SupportedFormFieldType) {\n      case 'checkbox':\n        validator = z.boolean();\n        break;\n      case 'select':\n      case 'radio':\n        validator = z.string().refine(v => !v || (field.options ?? []).includes(v), {\n          message: `Please choose a valid option for ${field.label}`,\n        });\n        break;\n      case 'textarea':\n        validator = z.string().max(5000, { message: `${field.label} is too long` });\n        break;\n      case 'number':\n        // Optional integer sign, digits, optional decimal part — what\n        // `<input type=\"number\">` emits and what a Number property stores.\n        validator = z\n          .string()\n          .max(32, { message: `${field.label} is too long` })\n          .regex(/^-?\\d+(\\.\\d+)?$/, { message: `${field.label} must be a number` });\n        break;\n      case 'text':\n      default:\n        validator = z.string().max(1000, { message: `${field.label} is too long` });\n        break;\n    }\n    if (field.required) {\n      validator =\n        field.type === 'checkbox'\n          ? z.literal(true, { message: `${field.label} is required` })\n          : (validator as z.ZodString).min(1, { message: `${field.label} is required` });\n    } else if (field.type !== 'checkbox') {\n      validator = (validator as z.ZodString).optional().or(z.literal(''));\n    } else {\n      validator = z.boolean().optional();\n    }\n    answers[field.name] = validator;\n  }\n\n  const requiredConsentIds = (legalConsent?.communicationConsentCheckboxes ?? [])\n    .filter(c => c.required)\n    .map(c => c.communicationTypeId);\n\n  // A required answer cannot be enforced by an `.optional()` parent object —\n  // omitting the `formFields` key entirely would skip every per-question\n  // rule. When the link declares at least one required supported question,\n  // the object itself is required.\n  const hasRequiredAnswers = formFields.some(f => isSupportedFormField(f) && f.required);\n  const answersObject = z.object(answers);\n\n  return (\n    z\n      .object({\n        meetingId: z.string().min(1),\n        startTimeMs: slot.startTimeMs,\n        durationMs: slot.durationMs,\n        firstName: z.string().min(1, { message: 'First name is required' }).max(255),\n        lastName: z.string().min(1, { message: 'Last name is required' }).max(255),\n        email: z.string().email({ message: 'Please enter a valid email address' }).max(255),\n        timezone: slot.timezone,\n        locale: z.string().refine(isValidBcp47Locale, { message: 'Invalid locale' }).optional(),\n        // Plain `.optional()` (no `.default()`) so zod's input and output types\n        // match — react-hook-form's zodResolver needs them identical, and the\n        // server handles `undefined` explicitly anyway. REQUIRED when the link\n        // declares required questions (see `hasRequiredAnswers` above).\n        formFields: hasRequiredAnswers ? answersObject : answersObject.optional(),\n        legalConsentResponses: z\n          .array(z.object({ communicationTypeId: z.string(), consented: z.boolean() }))\n          .optional(),\n      })\n      // Object-level rule: `.refine` on an `.optional()` field is skipped when\n      // the field is absent — required consents must reject even on a payload\n      // that omits the array entirely.\n      .superRefine((data, ctx) => {\n        const responses = data.legalConsentResponses ?? [];\n        const ok = requiredConsentIds.every(id =>\n          responses.some(r => r.communicationTypeId === id && r.consented === true),\n        );\n        if (!ok) {\n          ctx.addIssue({\n            code: z.ZodIssueCode.custom,\n            path: ['legalConsentResponses'],\n            message: 'Required consent checkboxes must be accepted',\n          });\n        }\n      })\n  );\n}\n\n/**\n * The STRICT schema — the wire contract. The server rebuilds it from the link's\n * own fetched metadata and validates every booking against it; a slot and a\n * duration are not optional on anything that reaches HubSpot.\n */\nexport function makeBookingSchema(formFields: MeetingFormField[], legalConsent: MeetingLegalConsent | null) {\n  return buildBookingSchema(formFields, legalConsent, {\n    startTimeMs: z.number().int().positive(),\n    durationMs: z.number().int().positive(),\n    timezone: z.string().refine(isValidIanaTimezone, { message: 'Invalid timezone' }),\n  });\n}\n\n/**\n * The DEFERRED schema — same fields, with the slot/duration/timezone triple\n * relaxed. `flow=\"details-first\"` collects answers BEFORE a slot exists, so the\n * form validates against this and the parent re-attaches the authoritative\n * values at POST time.\n *\n * Two named exports over one private builder rather than an overload or an\n * options flag: `MeetingBookingPayload` is `z.infer<ReturnType<...>>`, and\n * either of those alternatives would widen `startTimeMs`/`durationMs` to\n * `number | undefined` for EVERY consumer — including the server's\n * `durationsMs.includes(data.durationMs)`.\n */\nexport function makeDeferredBookingSchema(formFields: MeetingFormField[], legalConsent: MeetingLegalConsent | null) {\n  // `.nullish()`, not `.optional()`: the widget passes these straight into\n  // `defaultValues`, and details-first has `timezone === null` on the server\n  // render and the first client render (zone resolution is post-hydration).\n  // Accepting only `undefined` would reject a field with no rendered control\n  // and no FieldWrapper — the submit button silently dead, type-check clean.\n  return buildBookingSchema(formFields, legalConsent, {\n    startTimeMs: z.number().int().positive().nullish(),\n    durationMs: z.number().int().positive().nullish(),\n    timezone: z.string().refine(isValidIanaTimezone, { message: 'Invalid timezone' }).nullish(),\n  });\n}\n\n/** The wire payload. Pinned to the STRICT builder — see above. */\nexport type MeetingBookingPayload = z.infer<ReturnType<typeof makeBookingSchema>>;\n\n/**\n * The form's value type, used as the `useForm` generic in BOTH flows: a relaxed\n * resolver is not assignable to `Resolver<MeetingBookingPayload>`, and mixing\n * the two survives only on TS's bivariant method-parameter check.\n */\nexport type BookingFormValues = z.infer<ReturnType<typeof makeDeferredBookingSchema>>;\n"]}
+{"version":3,"sources":["../../src/schemas/meeting-booking-schema.ts"],"names":[],"mappings":";;;AAwIO,IAAM,2BAAA,GAA8B;AAAA,EACzC,YAAA;AAAA,EACA,YAAA;AAAA,EACA,eAAA;AAAA,EACA,WAAA;AAAA,EACA,yBAAA;AAAA,EACA;AACF;AAkDA,IAAM,eAAA,GAAkD,CAAC,KAAA,EAAO,IAAA,KAC9D,KAAK,MAAA,CAAO,CAAA,CAAA,KAAK,CAAC,CAAA,IAAA,CAAM,MAAM,OAAA,IAAW,EAAC,EAAG,QAAA,CAAS,CAAC,CAAA,EAAG;AAAA,EACxD,OAAA,EAAS,CAAA,iCAAA,EAAoC,KAAA,CAAM,KAAK,CAAA;AAC1D,CAAC,CAAA;AAEI,IAAM,gBAAA,GAAmB;AAAA,EAC9B,IAAA,EAAM;AAAA,IACJ,IAAA,EAAM,QAAA;AAAA,IACN,UAAA,EAAY,KAAA;AAAA,IACZ,SAAA,EAAW,CAAC,KAAA,EAAO,IAAA,KAAS,IAAA,CAAK,GAAA,CAAI,GAAA,EAAM,EAAE,OAAA,EAAS,CAAA,EAAG,KAAA,CAAM,KAAK,gBAAgB,CAAA;AAAA,IACpF,WAAA,EAAa,CAAA,KAAA,KAAS,CAAA,MAAA,EAAS,KAAA,CAAM,KAAK,CAAA;AAAA,GAC5C;AAAA,EACA,QAAA,EAAU;AAAA,IACR,IAAA,EAAM,QAAA;AAAA,IACN,UAAA,EAAY,KAAA;AAAA,IACZ,SAAA,EAAW,CAAC,KAAA,EAAO,IAAA,KAAS,IAAA,CAAK,GAAA,CAAI,GAAA,EAAM,EAAE,OAAA,EAAS,CAAA,EAAG,KAAA,CAAM,KAAK,gBAAgB,CAAA;AAAA,IACpF,aAAa,CAAA,KAAA,KAAS,CAAA,UAAA,EAAa,KAAA,CAAM,QAAA,GAAW,KAAK,aAAa,CAAA;AAAA,GACxE;AAAA,EACA,MAAA,EAAQ;AAAA,IACN,IAAA,EAAM,QAAA;AAAA,IACN,UAAA,EAAY,KAAA;AAAA;AAAA;AAAA,IAGZ,SAAA,EAAW,CAAC,KAAA,EAAO,IAAA,KACjB,KACG,GAAA,CAAI,EAAA,EAAI,EAAE,OAAA,EAAS,CAAA,EAAG,KAAA,CAAM,KAAK,CAAA,YAAA,CAAA,EAAgB,CAAA,CACjD,KAAA,CAAM,iBAAA,EAAmB,EAAE,SAAS,CAAA,EAAG,KAAA,CAAM,KAAK,CAAA,iBAAA,CAAA,EAAqB;AAAA,GAC9E;AAAA,EACA,QAAQ,EAAE,IAAA,EAAM,UAAU,UAAA,EAAY,IAAA,EAAM,WAAW,eAAA,EAAgB;AAAA,EACvE,OAAO,EAAE,IAAA,EAAM,UAAU,UAAA,EAAY,IAAA,EAAM,WAAW,eAAA,EAAgB;AAAA,EACtE,QAAA,EAAU,EAAE,IAAA,EAAM,SAAA,EAAW,UAAA,EAAY,OAAO,SAAA,EAAW,MAAM,CAAA,CAAE,OAAA,EAAQ;AAC7E;AAIO,IAAM,0BAAA,GAA6B,MAAA,CAAO,IAAA,CAAK,gBAAgB;AAG/D,IAAM,gCAAmE,0BAAA,CAA2B,MAAA;AAAA,EACzG,CAAA,IAAA,KAAQ,gBAAA,CAAiB,IAAI,CAAA,CAAE;AACjC;AAEO,SAAS,qBAAqB,KAAA,EAA6D;AAChG,EAAA,OAAO,OAAO,SAAA,CAAU,cAAA,CAAe,IAAA,CAAK,gBAAA,EAAkB,MAAM,IAAI,CAAA;AAC1E;AAwBO,IAAM,uBAAA,GAA0B;AAAA,EACrC;AAAA,IACE,IAAA,EAAM,WAAA;AAAA,IACN,KAAA,EAAO,YAAA;AAAA,IACP,IAAA,EAAM,MAAA;AAAA,IACN,QAAA,EAAU,IAAA;AAAA,IACV,YAAA,EAAc,YAAA;AAAA,IACd,WAAA,EAAa,kBAAA;AAAA,IACb,eAAA,EAAiB;AAAA,GACnB;AAAA,EACA;AAAA,IACE,IAAA,EAAM,UAAA;AAAA,IACN,KAAA,EAAO,WAAA;AAAA,IACP,IAAA,EAAM,MAAA;AAAA,IACN,QAAA,EAAU,IAAA;AAAA,IACV,YAAA,EAAc,aAAA;AAAA,IACd,WAAA,EAAa,iBAAA;AAAA,IACb,eAAA,EAAiB;AAAA,GACnB;AAAA,EACA;AAAA,IACE,IAAA,EAAM,OAAA;AAAA,IACN,KAAA,EAAO,OAAA;AAAA,IACP,IAAA,EAAM,MAAA;AAAA,IACN,QAAA,EAAU,IAAA;AAAA,IACV,SAAA,EAAW,OAAA;AAAA,IACX,YAAA,EAAc,OAAA;AAAA,IACd,WAAA,EAAa,mBAAA;AAAA,IACb,eAAA,EAAiB;AAAA;AAErB;AAOO,SAAS,cAAc,IAAA,EAAiD;AAC7E,EAAA,OAAO,iBAAiB,IAAI,CAAA;AAC9B;AAGA,SAAS,kBAAkB,IAAA,EAA+B;AACxD,EAAA,MAAM,QAAyC,uBAAA,CAAwB,IAAA,CAAK,CAAA,CAAA,KAAK,CAAA,CAAE,SAAS,IAAI,CAAA;AAChG,EAAA,IAAI,CAAC,KAAA,EAAO,MAAM,IAAI,KAAA,CAAM,CAAA,gCAAA,EAAmC,IAAI,CAAA,CAAE,CAAA;AACrE,EAAA,MAAM,IAAA,GAAO,CAAA,CAAE,MAAA,EAAO,CAAE,IAAI,GAAG,CAAA;AAC/B,EAAA,OAAO,MAAM,SAAA,KAAc,OAAA,GACvB,KAAK,KAAA,CAAM,EAAE,SAAS,KAAA,CAAM,eAAA,EAAiB,CAAA,GAC7C,KAAK,GAAA,CAAI,CAAA,EAAG,EAAE,OAAA,EAAS,KAAA,CAAM,iBAAiB,CAAA;AACpD;AAMA,IAAM,UAAA,GAAa,4CAAA;AAQZ,SAAS,oBAAoB,EAAA,EAAqB;AACvD,EAAA,IAAI,CAAC,UAAA,CAAW,IAAA,CAAK,EAAE,GAAG,OAAO,KAAA;AACjC,EAAA,IAAI;AACF,IAAA,IAAI,KAAK,cAAA,CAAe,OAAA,EAAS,EAAE,QAAA,EAAU,IAAI,CAAA;AACjD,IAAA,OAAO,IAAA;AAAA,EACT,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,KAAA;AAAA,EACT;AACF;AAGO,SAAS,mBAAmB,MAAA,EAAyB;AAC1D,EAAA,IAAI;AACF,IAAA,OAAO,IAAA,CAAK,mBAAA,CAAoB,MAAM,CAAA,CAAE,MAAA,GAAS,CAAA;AAAA,EACnD,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,KAAA;AAAA,EACT;AACF;AAwBA,SAAS,kBAAA,CACP,UAAA,EACA,YAAA,EAKA,IAAA,EACA;AACA,EAAA,MAAM,UAAwC,EAAC;AAC/C,EAAA,KAAA,MAAW,SAAS,UAAA,EAAY;AAC9B,IAAA,IAAI,CAAC,oBAAA,CAAqB,KAAK,CAAA,EAAG;AAClC,IAAA,MAAM,IAAA,GAA0B,gBAAA,CAAiB,KAAA,CAAM,IAAI,CAAA;AAK3D,IAAA,IAAI,SAAA;AACJ,IAAA,IAAI,IAAA,CAAK,SAAS,SAAA,EAAW;AAC3B,MAAA,SAAA,GAAY,MAAM,QAAA,GAAW,CAAA,CAAE,OAAA,CAAQ,IAAA,EAAM,EAAE,OAAA,EAAS,CAAA,EAAG,KAAA,CAAM,KAAK,gBAAgB,CAAA,GAAI,CAAA,CAAE,OAAA,GAAU,QAAA,EAAS;AAAA,IACjH,CAAA,MAAO;AACL,MAAA,MAAM,OAAO,KAAA,CAAM,QAAA,GAAW,CAAA,CAAE,MAAA,GAAS,GAAA,CAAI,CAAA,EAAG,EAAE,OAAA,EAAS,GAAG,KAAA,CAAM,KAAK,gBAAgB,CAAA,GAAI,EAAE,MAAA,EAAO;AACtG,MAAA,SAAA,GAAY,IAAA,CAAK,SAAA,CAAU,KAAA,EAAO,IAAI,CAAA;AACtC,MAAA,IAAI,CAAC,KAAA,CAAM,QAAA,EAAU,SAAA,GAAY,SAAA,CAAU,QAAA,EAAS,CAAE,EAAA,CAAG,CAAA,CAAE,OAAA,CAAQ,EAAE,CAAC,CAAA;AAAA,IACxE;AACA,IAAA,OAAA,CAAQ,KAAA,CAAM,IAAI,CAAA,GAAI,SAAA;AAAA,EACxB;AAEA,EAAA,MAAM,kBAAA,GAAA,CAAsB,YAAA,EAAc,8BAAA,IAAkC,EAAC,EAC1E,MAAA,CAAO,CAAA,CAAA,KAAK,CAAA,CAAE,QAAQ,CAAA,CACtB,GAAA,CAAI,CAAA,CAAA,KAAK,EAAE,mBAAmB,CAAA;AAMjC,EAAA,MAAM,kBAAA,GAAqB,WAAW,IAAA,CAAK,CAAA,CAAA,KAAK,qBAAqB,CAAC,CAAA,IAAK,EAAE,QAAQ,CAAA;AACrF,EAAA,MAAM,aAAA,GAAgB,CAAA,CAAE,MAAA,CAAO,OAAO,CAAA;AAEtC,EAAA,OACE,EACG,MAAA,CAAO;AAAA,IACN,SAAA,EAAW,CAAA,CAAE,MAAA,EAAO,CAAE,IAAI,CAAC,CAAA;AAAA,IAC3B,aAAa,IAAA,CAAK,WAAA;AAAA,IAClB,YAAY,IAAA,CAAK,UAAA;AAAA;AAAA;AAAA,IAGjB,SAAA,EAAW,kBAAkB,WAAW,CAAA;AAAA,IACxC,QAAA,EAAU,kBAAkB,UAAU,CAAA;AAAA,IACtC,KAAA,EAAO,kBAAkB,OAAO,CAAA;AAAA,IAChC,UAAU,IAAA,CAAK,QAAA;AAAA,IACf,MAAA,EAAQ,CAAA,CAAE,MAAA,EAAO,CAAE,MAAA,CAAO,kBAAA,EAAoB,EAAE,OAAA,EAAS,gBAAA,EAAkB,CAAA,CAAE,QAAA,EAAS;AAAA;AAAA;AAAA;AAAA;AAAA,IAKtF,UAAA,EAAY,kBAAA,GAAqB,aAAA,GAAgB,aAAA,CAAc,QAAA,EAAS;AAAA,IACxE,uBAAuB,CAAA,CACpB,KAAA,CAAM,CAAA,CAAE,MAAA,CAAO,EAAE,mBAAA,EAAqB,CAAA,CAAE,MAAA,EAAO,EAAG,WAAW,CAAA,CAAE,OAAA,IAAW,CAAC,EAC3E,QAAA;AAAS,GACb,CAAA,CAIA,WAAA,CAAY,CAAC,MAAM,GAAA,KAAQ;AAC1B,IAAA,MAAM,SAAA,GAAY,IAAA,CAAK,qBAAA,IAAyB,EAAC;AACjD,IAAA,MAAM,KAAK,kBAAA,CAAmB,KAAA;AAAA,MAAM,CAAA,EAAA,KAClC,UAAU,IAAA,CAAK,CAAA,CAAA,KAAK,EAAE,mBAAA,KAAwB,EAAA,IAAM,CAAA,CAAE,SAAA,KAAc,IAAI;AAAA,KAC1E;AACA,IAAA,IAAI,CAAC,EAAA,EAAI;AACP,MAAA,GAAA,CAAI,QAAA,CAAS;AAAA,QACX,IAAA,EAAM,EAAE,YAAA,CAAa,MAAA;AAAA,QACrB,IAAA,EAAM,CAAC,uBAAuB,CAAA;AAAA,QAC9B,OAAA,EAAS;AAAA,OACV,CAAA;AAAA,IACH;AAAA,EACF,CAAC,CAAA;AAEP;AAOO,SAAS,iBAAA,CAAkB,YAAgC,YAAA,EAA0C;AAC1G,EAAA,OAAO,kBAAA,CAAmB,YAAY,YAAA,EAAc;AAAA,IAClD,aAAa,CAAA,CAAE,MAAA,EAAO,CAAE,GAAA,GAAM,QAAA,EAAS;AAAA,IACvC,YAAY,CAAA,CAAE,MAAA,EAAO,CAAE,GAAA,GAAM,QAAA,EAAS;AAAA,IACtC,QAAA,EAAU,EAAE,MAAA,EAAO,CAAE,OAAO,mBAAA,EAAqB,EAAE,OAAA,EAAS,kBAAA,EAAoB;AAAA,GACjF,CAAA;AACH;AAcO,SAAS,yBAAA,CAA0B,YAAgC,YAAA,EAA0C;AAMlH,EAAA,OAAO,kBAAA,CAAmB,YAAY,YAAA,EAAc;AAAA,IAClD,WAAA,EAAa,EAAE,MAAA,EAAO,CAAE,KAAI,CAAE,QAAA,GAAW,OAAA,EAAQ;AAAA,IACjD,UAAA,EAAY,EAAE,MAAA,EAAO,CAAE,KAAI,CAAE,QAAA,GAAW,OAAA,EAAQ;AAAA,IAChD,QAAA,EAAU,CAAA,CAAE,MAAA,EAAO,CAAE,MAAA,CAAO,mBAAA,EAAqB,EAAE,OAAA,EAAS,kBAAA,EAAoB,CAAA,CAAE,OAAA;AAAQ,GAC3F,CAAA;AACH","file":"meeting-booking-schema.js","sourcesContent":["import { z } from 'zod';\n\n/**\n * Meeting-booking wire contracts + validation factory.\n *\n * SERVER-SAFE tsup entry (no \"use client\" banner) with its OWN per-file\n * subpath (`./schemas/meeting-booking-schema`) — same pattern and reasons as\n * `schemas/contact-schema`: used by BOTH the lib's `<HubSpotMeetingScheduler>`\n * (client-side validation) AND the host's server-side booking route, which\n * REBUILDS the schema from the link's own fetched metadata and never trusts a\n * client-shaped instance. zod is an optional peer quarantined to per-subpath\n * verticals — do NOT re-export this module through any broad barrel.\n *\n * Every cross-boundary type for the scheduling feature lives HERE (the lib\n * owns the contract; hosts import this subpath directly, type-only where\n * possible).\n */\n\n// ---------------------------------------------------------------------------\n// Wire types\n// ---------------------------------------------------------------------------\n\n/**\n * Sanitized availability payload served by the host proxy\n * (`GET {apiBaseUrl}/api/meetings/availability?meeting=<id>&monthOffset=<n>`).\n *\n * NO timezone field on purpose: slot starts are absolute epoch-ms instants\n * (verified timezone-independent against the live API), upstream fetches are\n * UTC-pinned, and ALL zone rendering happens client-side. Slots must be\n * whitelist-copied from HubSpot's `linkAvailability` ONLY — never derived\n * from busy-time data.\n */\nexport interface MeetingAvailability {\n  meetingId: string;\n  monthOffset: number;\n  hasMore: boolean;\n  /** Offered durations in ms — HubSpot's native unit for the booking POST. */\n  durationsMs: number[];\n  /** Bookable slot start times (epoch ms), keyed by duration in ms. */\n  slotsByDurationMs: Record<string, number[]>;\n  formFields: MeetingFormField[];\n  /** Verbatim whitelist-copy of HubSpot's `legalConsentOptions` when consent is enabled; null when disabled. */\n  legalConsent: MeetingLegalConsent | null;\n  /**\n   * Who the visitor is meeting — whitelisted DISPLAY projection the host DAL\n   * builds from its own people data (e.g. a profiles table matched\n   * server-side). NEVER carries emails or busy-time data; optional so\n   * existing hosts stay wire-compatible.\n   */\n  hosts?: MeetingHost[];\n}\n\n/** Display-only host identity for the scheduler's context panel. */\nexport interface MeetingHost {\n  name: string;\n  avatarUrl: string | null;\n  /** Job title / role line under the name (null → omitted). */\n  title: string | null;\n}\n\n/**\n * One scheduling link on the DIRECTORY wire (`GET /api/meetings`) — the\n * host-DAL whitelist projection consumed by `MeetingSchedulerDirectory` and\n * host pages. Never carries organizer emails/busy-time data.\n */\nexport interface SchedulingLink {\n  id: string;\n  /** The link's public HubSpot booking URL — escape-hatch target only. */\n  link: string;\n  /** HubSpot slug path — the row's in-app destination is `<basePath>/<slug>`. */\n  slug: string;\n  /** Audience group key (slugified audience label; `\"other\"` in scope=all). */\n  purpose: string;\n  title: string;\n  description: string | null;\n  kind: 'personal' | 'team';\n  /** Display-only minutes projection (booking stays ms end-to-end). */\n  durationsMinutes: number[];\n  hosts: MeetingHost[];\n  /** Earliest bookable slot (epoch ms) from the current-month payload. */\n  nextAvailableMs: number | null;\n}\n\nexport interface SchedulingLinksPayload {\n  purposes: Array<{ purpose: string; label: string; links: SchedulingLink[] }>;\n  fetchedAt: string;\n}\n\nexport interface MeetingFormField {\n  name: string;\n  label: string;\n  type: string;\n  required: boolean;\n  options?: string[];\n}\n\n/**\n * HubSpot's consent copy, rendered VERBATIM by the widget (GDPR surface —\n * never edited, never summarized). Responses are keyed by\n * `communicationTypeId`.\n */\nexport interface MeetingLegalConsent {\n  processingConsentText: string;\n  processingConsentCheckboxLabel: string | null;\n  communicationConsentText: string | null;\n  communicationConsentCheckboxes: Array<{\n    communicationTypeId: string;\n    label: string;\n    required: boolean;\n  }>;\n  privacyPolicyText: string | null;\n  isLegitimateInterest: boolean;\n}\n\n/**\n * Whitelisted booking result returned by the host proxy — the THIRD HubSpot\n * payload that reaches a browser, so it gets the same whitelist-copy\n * treatment as the two GETs. Nothing organizer-derived.\n */\nexport interface BookingConfirmation {\n  meetingId: string;\n  title: string;\n  startTimeMs: number;\n  durationMs: number;\n}\n\n/**\n * Typed domain errors the booking route emits; the widget keys its recovery\n * UI off these. `SLOT_TAKEN` → refetch-and-recover; `TEMPORARILY_UNAVAILABLE`\n * → retry affordance; `MEETING_UNAVAILABLE` → daily ceiling exhausted\n * (escape hatch, not a retry timer); `LINK_GONE` → link deleted upstream;\n * `INVALID_EMAIL` → HubSpot rejected the attendee address (its\n * MeetingsBookingCreatedError.INVALID_EMAIL class — fake/unreachable\n * mailboxes), so the widget tells the visitor to fix the email instead of\n * blaming the slot or their other details.\n */\nexport const MEETING_BOOKING_ERROR_CODES = [\n  'SLOT_TAKEN',\n  'VALIDATION',\n  'INVALID_EMAIL',\n  'LINK_GONE',\n  'TEMPORARILY_UNAVAILABLE',\n  'MEETING_UNAVAILABLE',\n] as const;\n\n/**\n * Derived from the runtime array ABOVE — the array is the single source of\n * truth. The booking hook validates server codes against it at runtime, so a\n * code added only to a hand-written type would be silently coerced to\n * TEMPORARILY_UNAVAILABLE by every deployed widget (exactly how the\n * INVALID_EMAIL rollout mis-rendered on 2026-08-27: type extended, runtime\n * allowlist stale — an array annotation is not exhaustiveness-checked).\n */\nexport type MeetingBookingErrorCode = (typeof MEETING_BOOKING_ERROR_CODES)[number];\n\n// ---------------------------------------------------------------------------\n// Field-type vocabulary — ONE set drives the renderer AND the validator\n// ---------------------------------------------------------------------------\n\n/**\n * THE registry of HubSpot question types the native form supports — one entry\n * per `fieldType`, and the ONLY place a type is declared. Everything else\n * derives from it: `SupportedFormFieldType` is its key union,\n * `SUPPORTED_FORM_FIELD_TYPES` its keys, `FORM_FIELD_TYPES_WITH_OPTIONS` the\n * entries that carry `options`, and `makeBookingSchema` maps each answer\n * through the entry's validator. The widget's control table\n * (`booking-form.tsx`) is a `Record` over the same key union, so a type added\n * here without a control is a COMPILE error, not a silent gap.\n *\n * Fail-closed: a `fieldType` with no entry makes the link \"not natively\n * bookable\" and the card falls back to the HubSpot escape hatch.\n *\n * Every string type rides the wire as a STRING (HubSpot's book endpoint takes\n * `{ name, value: string }`); `checkbox` is the one boolean. `number` is a\n * Number property validated as a decimal literal — what `<input type=\"number\">`\n * emits and what the property stores.\n */\nexport interface FormFieldTypeSpec {\n  /** The answer's wire shape, which also decides how required/optional wraps it. */\n  kind: 'string' | 'boolean';\n  /** Whether HubSpot publishes `options` for the type (the pickers). */\n  hasOptions: boolean;\n  /**\n   * The validator for ONE answer. String types EXTEND `base`, which already\n   * carries the required-ness (`min(1)` when required) — so \"X is required\" is\n   * the first issue reported for an empty answer, ahead of the type's own rule.\n   * Boolean types ignore it.\n   */\n  validator: (field: MeetingFormField, base: z.ZodString) => z.ZodTypeAny;\n  /** The control's placeholder, derived from the field (the mock's \"Enter Company Name\"). */\n  placeholder?: (field: MeetingFormField) => string;\n}\n\nconst optionValidator: FormFieldTypeSpec['validator'] = (field, base) =>\n  base.refine(v => !v || (field.options ?? []).includes(v), {\n    message: `Please choose a valid option for ${field.label}`,\n  });\n\nexport const FORM_FIELD_TYPES = {\n  text: {\n    kind: 'string',\n    hasOptions: false,\n    validator: (field, base) => base.max(1000, { message: `${field.label} is too long` }),\n    placeholder: field => `Enter ${field.label}`,\n  },\n  textarea: {\n    kind: 'string',\n    hasOptions: false,\n    validator: (field, base) => base.max(5000, { message: `${field.label} is too long` }),\n    placeholder: field => `Enter text${field.required ? '' : ' (optional)'}`,\n  },\n  number: {\n    kind: 'string',\n    hasOptions: false,\n    // Canonical decimal literal — the control normalises what the browser\n    // accepts (`1e3`, `007`) to this before it is validated or sent.\n    validator: (field, base) =>\n      base\n        .max(32, { message: `${field.label} is too long` })\n        .regex(/^-?\\d+(\\.\\d+)?$/, { message: `${field.label} must be a number` }),\n  },\n  select: { kind: 'string', hasOptions: true, validator: optionValidator },\n  radio: { kind: 'string', hasOptions: true, validator: optionValidator },\n  checkbox: { kind: 'boolean', hasOptions: false, validator: () => z.boolean() },\n} as const satisfies Record<string, FormFieldTypeSpec>;\n\nexport type SupportedFormFieldType = keyof typeof FORM_FIELD_TYPES;\n\nexport const SUPPORTED_FORM_FIELD_TYPES = Object.keys(FORM_FIELD_TYPES) as readonly SupportedFormFieldType[];\n\n/** The types whose `options` the host must forward (select, radio). */\nexport const FORM_FIELD_TYPES_WITH_OPTIONS: readonly SupportedFormFieldType[] = SUPPORTED_FORM_FIELD_TYPES.filter(\n  type => FORM_FIELD_TYPES[type].hasOptions,\n);\n\nexport function isSupportedFormField(field: MeetingFormField): field is SupportedMeetingFormField {\n  return Object.prototype.hasOwnProperty.call(FORM_FIELD_TYPES, field.type);\n}\n\n/** A declared question whose `type` is in the registry. */\nexport type SupportedMeetingFormField = MeetingFormField & { type: SupportedFormFieldType };\n\n/**\n * The scheduler's fixed identity fields. HubSpot's book endpoint takes them\n * TOP-LEVEL (`firstName`, `lastName`, `email`), its own booking page hardcodes\n * them, and the link's `formFields` never lists them — so they are data HERE,\n * rendered by the widget through the SAME control path as every declared\n * question, rather than three hand-written blocks. `inputType`/`autoComplete`\n * are the browser hints a text control takes; the wire and the validator do\n * not see them.\n */\nexport interface BuiltInBookingField extends MeetingFormField {\n  type: 'text';\n  required: true;\n  inputType?: 'email';\n  autoComplete: string;\n  placeholder: string;\n  /** The wire's own required/format message — kept verbatim from the schema it replaced. */\n  requiredMessage: string;\n}\n\nexport const BUILT_IN_BOOKING_FIELDS = [\n  {\n    name: 'firstName',\n    label: 'First Name',\n    type: 'text',\n    required: true,\n    autoComplete: 'given-name',\n    placeholder: 'Enter First Name',\n    requiredMessage: 'First name is required',\n  },\n  {\n    name: 'lastName',\n    label: 'Last Name',\n    type: 'text',\n    required: true,\n    autoComplete: 'family-name',\n    placeholder: 'Enter Last Name',\n    requiredMessage: 'Last name is required',\n  },\n  {\n    name: 'email',\n    label: 'Email',\n    type: 'text',\n    required: true,\n    inputType: 'email',\n    autoComplete: 'email',\n    placeholder: 'username@mail.com',\n    requiredMessage: 'Please enter a valid email address',\n  },\n] as const satisfies readonly BuiltInBookingField[];\n\n/** `'firstName' | 'lastName' | 'email'` — derived from the array, never restated. */\nexport type BuiltInBookingFieldName = (typeof BUILT_IN_BOOKING_FIELDS)[number]['name'];\n\n/** The registry entry for a supported type, widened to the spec so optional\n *  members (`placeholder`) are readable without narrowing on the union. */\nexport function fieldTypeSpec(type: SupportedFormFieldType): FormFieldTypeSpec {\n  return FORM_FIELD_TYPES[type];\n}\n\n/** The wire validator for one identity field, from ITS declaration above. */\nfunction identityValidator(name: BuiltInBookingFieldName) {\n  const field: BuiltInBookingField | undefined = BUILT_IN_BOOKING_FIELDS.find(f => f.name === name);\n  if (!field) throw new Error(`Unknown built-in booking field: ${name}`);\n  const base = z.string().max(255);\n  return field.inputType === 'email'\n    ? base.email({ message: field.requiredMessage })\n    : base.min(1, { message: field.requiredMessage });\n}\n\n// ---------------------------------------------------------------------------\n// Validators (single home — client widget and server rebuild both use these)\n// ---------------------------------------------------------------------------\n\nconst IANA_TZ_RE = /^(?:UTC|[A-Za-z_]+(?:\\/[A-Za-z0-9_+-]+)+)$/;\n\n/**\n * IANA timezone check. Shape prefilter, then the authoritative resolution\n * test: `Intl.DateTimeFormat` throws on unknown zones. NOT\n * `Intl.supportedValuesOf('timeZone')` — that list excludes `'UTC'` itself\n * (verified in Node), which is a legitimate booking zone. Reject, never coerce.\n */\nexport function isValidIanaTimezone(tz: string): boolean {\n  if (!IANA_TZ_RE.test(tz)) return false;\n  try {\n    new Intl.DateTimeFormat('en-US', { timeZone: tz });\n    return true;\n  } catch {\n    return false;\n  }\n}\n\n/** BCP-47 locale shape check via `Intl.getCanonicalLocales`. Reject, never coerce. */\nexport function isValidBcp47Locale(locale: string): boolean {\n  try {\n    return Intl.getCanonicalLocales(locale).length > 0;\n  } catch {\n    return false;\n  }\n}\n\n// ---------------------------------------------------------------------------\n// Schema factory\n// ---------------------------------------------------------------------------\n\n/**\n * Build the booking-form schema for ONE link's declared questions + consent.\n *\n * A factory (not a static schema) because per-link required questions cannot\n * be expressed statically. The widget builds it from the availability payload\n * it rendered; the server REBUILDS it from the link's own fetched metadata —\n * required-consent enforcement flows from this rebuild, not a parallel check.\n *\n * Deliberately NOT `.strict()`: the humanity-signal fields\n * (`HUMANITY_SIGNAL_KEYS` from `utils/humanity-signals`) ride alongside in\n * the same POST body (read raw by the host's bot gate BEFORE parsing) and are\n * stripped server-side before anything reaches HubSpot. zod's default\n * unknown-key stripping means the parsed output never contains them.\n *\n * `timezone`/`locale` are POST-only presentation fields (the invite renders\n * in the visitor's local time) — this schema is the ONLY place a\n * client-supplied zone is accepted; the availability path is UTC-pinned.\n */\nfunction buildBookingSchema<TStart extends z.ZodTypeAny, TDuration extends z.ZodTypeAny, TZone extends z.ZodTypeAny>(\n  formFields: MeetingFormField[],\n  legalConsent: MeetingLegalConsent | null,\n  // Passed IN rather than switched on a boolean: a `deferSlot: boolean`\n  // parameter cannot be narrowed at type level, so every ternary inside would\n  // infer a union and widen `startTimeMs`/`durationMs` to `number | null |\n  // undefined` for BOTH schemas — including the server's wire type.\n  slot: { startTimeMs: TStart; durationMs: TDuration; timezone: TZone },\n) {\n  const answers: Record<string, z.ZodTypeAny> = {};\n  for (const field of formFields) {\n    if (!isSupportedFormField(field)) continue; // unsupported types are fail-closed at render time\n    const spec: FormFieldTypeSpec = FORM_FIELD_TYPES[field.type];\n    // required/optional wrapping follows the answer's wire KIND, not its type:\n    // a boolean is true-or-absent, a string is non-empty-or-empty. For strings\n    // the required check is the FIRST rule on the chain, so an empty answer\n    // reports \"is required\" rather than the type's own message.\n    let validator: z.ZodTypeAny;\n    if (spec.kind === 'boolean') {\n      validator = field.required ? z.literal(true, { message: `${field.label} is required` }) : z.boolean().optional();\n    } else {\n      const base = field.required ? z.string().min(1, { message: `${field.label} is required` }) : z.string();\n      validator = spec.validator(field, base);\n      if (!field.required) validator = validator.optional().or(z.literal(''));\n    }\n    answers[field.name] = validator;\n  }\n\n  const requiredConsentIds = (legalConsent?.communicationConsentCheckboxes ?? [])\n    .filter(c => c.required)\n    .map(c => c.communicationTypeId);\n\n  // A required answer cannot be enforced by an `.optional()` parent object —\n  // omitting the `formFields` key entirely would skip every per-question\n  // rule. When the link declares at least one required supported question,\n  // the object itself is required.\n  const hasRequiredAnswers = formFields.some(f => isSupportedFormField(f) && f.required);\n  const answersObject = z.object(answers);\n\n  return (\n    z\n      .object({\n        meetingId: z.string().min(1),\n        startTimeMs: slot.startTimeMs,\n        durationMs: slot.durationMs,\n        // The identity trio's rules come from BUILT_IN_BOOKING_FIELDS — the\n        // keys stay literal so the payload type keeps its named properties.\n        firstName: identityValidator('firstName'),\n        lastName: identityValidator('lastName'),\n        email: identityValidator('email'),\n        timezone: slot.timezone,\n        locale: z.string().refine(isValidBcp47Locale, { message: 'Invalid locale' }).optional(),\n        // Plain `.optional()` (no `.default()`) so zod's input and output types\n        // match — react-hook-form's zodResolver needs them identical, and the\n        // server handles `undefined` explicitly anyway. REQUIRED when the link\n        // declares required questions (see `hasRequiredAnswers` above).\n        formFields: hasRequiredAnswers ? answersObject : answersObject.optional(),\n        legalConsentResponses: z\n          .array(z.object({ communicationTypeId: z.string(), consented: z.boolean() }))\n          .optional(),\n      })\n      // Object-level rule: `.refine` on an `.optional()` field is skipped when\n      // the field is absent — required consents must reject even on a payload\n      // that omits the array entirely.\n      .superRefine((data, ctx) => {\n        const responses = data.legalConsentResponses ?? [];\n        const ok = requiredConsentIds.every(id =>\n          responses.some(r => r.communicationTypeId === id && r.consented === true),\n        );\n        if (!ok) {\n          ctx.addIssue({\n            code: z.ZodIssueCode.custom,\n            path: ['legalConsentResponses'],\n            message: 'Required consent checkboxes must be accepted',\n          });\n        }\n      })\n  );\n}\n\n/**\n * The STRICT schema — the wire contract. The server rebuilds it from the link's\n * own fetched metadata and validates every booking against it; a slot and a\n * duration are not optional on anything that reaches HubSpot.\n */\nexport function makeBookingSchema(formFields: MeetingFormField[], legalConsent: MeetingLegalConsent | null) {\n  return buildBookingSchema(formFields, legalConsent, {\n    startTimeMs: z.number().int().positive(),\n    durationMs: z.number().int().positive(),\n    timezone: z.string().refine(isValidIanaTimezone, { message: 'Invalid timezone' }),\n  });\n}\n\n/**\n * The DEFERRED schema — same fields, with the slot/duration/timezone triple\n * relaxed. `flow=\"details-first\"` collects answers BEFORE a slot exists, so the\n * form validates against this and the parent re-attaches the authoritative\n * values at POST time.\n *\n * Two named exports over one private builder rather than an overload or an\n * options flag: `MeetingBookingPayload` is `z.infer<ReturnType<...>>`, and\n * either of those alternatives would widen `startTimeMs`/`durationMs` to\n * `number | undefined` for EVERY consumer — including the server's\n * `durationsMs.includes(data.durationMs)`.\n */\nexport function makeDeferredBookingSchema(formFields: MeetingFormField[], legalConsent: MeetingLegalConsent | null) {\n  // `.nullish()`, not `.optional()`: the widget passes these straight into\n  // `defaultValues`, and details-first has `timezone === null` on the server\n  // render and the first client render (zone resolution is post-hydration).\n  // Accepting only `undefined` would reject a field with no rendered control\n  // and no FieldWrapper — the submit button silently dead, type-check clean.\n  return buildBookingSchema(formFields, legalConsent, {\n    startTimeMs: z.number().int().positive().nullish(),\n    durationMs: z.number().int().positive().nullish(),\n    timezone: z.string().refine(isValidIanaTimezone, { message: 'Invalid timezone' }).nullish(),\n  });\n}\n\n/** The wire payload. Pinned to the STRICT builder — see above. */\nexport type MeetingBookingPayload = z.infer<ReturnType<typeof makeBookingSchema>>;\n\n/**\n * The form's value type, used as the `useForm` generic in BOTH flows: a relaxed\n * resolver is not assignable to `Resolver<MeetingBookingPayload>`, and mixing\n * the two survives only on TS's bivariant method-parameter check.\n */\nexport type BookingFormValues = z.infer<ReturnType<typeof makeDeferredBookingSchema>>;\n"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@flamingo-stack/openframe-frontend-core",
-  "version": "0.0.596-2034.5677.1",
+  "version": "0.0.596-2034.5679.1",
   "description": "Shared design system and components for all Flamingo platforms",
   "type": "module",
   "main": "./dist/index.js",

package/src/__tests__/booking-form-number-field.test.tsx

@@ -2,18 +2,11 @@ import { fireEvent, render, screen, waitFor } from '@testing-library/react';
 import { createRef } from 'react';
 import { describe, expect, it, vi } from 'vitest';
 import { BookingForm } from '../components/meeting-scheduler/booking-form';
-import type { MeetingAvailability } from '../schemas/meeting-booking-schema';
+import { availabilityWith } from './fixtures/meeting-booking';
 
-const availability: MeetingAvailability = {
-  meetingId: '1',
-  monthOffset: 0,
-  hasMore: false,
-  durationsMs: [1_800_000],
-  slotsByDurationMs: { '1800000': [1_700_000_000_000] },
-  formFields: [{ name: 'number_of_endpoints', label: 'Number of endpoints', type: 'number', required: true }],
-  legalConsent: null,
-  hosts: [],
-};
+const availability = availabilityWith([
+  { name: 'number_of_endpoints', label: 'Number of endpoints', type: 'number', required: true },
+]);
 
 type Submit = (payload: Record<string, unknown>) => Promise<void>;
 
@@ -41,21 +34,33 @@ describe('BookingForm — a HubSpot Number question', () => {
     mount();
     const input = screen.getByLabelText(/^Number of endpoints/);
     expect(input).toHaveAttribute('type', 'number');
-    expect(input).toHaveAttribute('inputmode', 'numeric');
+    expect(input).toHaveAttribute('inputmode', 'decimal');
   });
 
-  it('refuses a non-numeric answer and never calls onSubmit', async () => {
+  it('reports a required question left empty as required, and never calls onSubmit', async () => {
     const onSubmit = mount();
     type(screen.getByLabelText(/^Email/), 'a@b.co');
     type(screen.getByLabelText(/^First Name/), 'A');
     type(screen.getByLabelText(/^Last Name/), 'B');
-    // jsdom lets a number input hold arbitrary text; the resolver is the gate.
-    type(screen.getByLabelText(/^Number of endpoints/), 'lots');
     fireEvent.click(screen.getByRole('button', { name: 'Confirm Booking' }));
-    expect(await screen.findByText('Number of endpoints must be a number')).toBeInTheDocument();
+    // The required rule is FIRST on the chain, so the message is "is required",
+    // not the type's own "must be a number".
+    expect(await screen.findByText('Number of endpoints is required')).toBeInTheDocument();
     expect(onSubmit).not.toHaveBeenCalled();
   });
 
+  it('canonicalises what the browser accepts before it reaches the wire', async () => {
+    const onSubmit = mount();
+    type(screen.getByLabelText(/^Email/), 'a@b.co');
+    type(screen.getByLabelText(/^First Name/), 'A');
+    type(screen.getByLabelText(/^Last Name/), 'B');
+    // `1e3` is a valid number-input value; the wire wants the decimal literal.
+    type(screen.getByLabelText(/^Number of endpoints/), '1e3');
+    fireEvent.click(screen.getByRole('button', { name: 'Confirm Booking' }));
+    await waitFor(() => expect(onSubmit).toHaveBeenCalledTimes(1));
+    expect(onSubmit).toHaveBeenCalledWith(expect.objectContaining({ formFields: { number_of_endpoints: '1000' } }));
+  });
+
   it('submits a numeric answer as a string under the declared name', async () => {
     const onSubmit = mount();
     type(screen.getByLabelText(/^Email/), 'a@b.co');

package/src/__tests__/fixtures/meeting-booking.ts

@@ -0,0 +1,27 @@
+import type { MeetingAvailability, MeetingFormField } from '../../schemas/meeting-booking-schema';
+
+/** One well-formed slot-first payload minus the questions — the base every
+ *  booking-schema test extends, declared once. */
+export const BOOKING_BASE = {
+  meetingId: '1',
+  startTimeMs: 1_700_000_000_000,
+  durationMs: 1_800_000,
+  firstName: 'Ada',
+  lastName: 'Lovelace',
+  email: 'ada@example.com',
+  timezone: 'UTC',
+};
+
+/** A minimal availability payload carrying exactly the given questions. */
+export function availabilityWith(formFields: MeetingFormField[]): MeetingAvailability {
+  return {
+    meetingId: '1',
+    monthOffset: 0,
+    hasMore: false,
+    durationsMs: [1_800_000],
+    slotsByDurationMs: { '1800000': [1_700_000_000_000] },
+    formFields,
+    legalConsent: null,
+    hosts: [],
+  };
+}

package/src/__tests__/meeting-booking-schema.test.ts

@@ -5,16 +5,9 @@ import {
   makeDeferredBookingSchema,
   type MeetingFormField,
 } from '../schemas/meeting-booking-schema';
+import { BOOKING_BASE } from './fixtures/meeting-booking';
 
-const base = {
-  meetingId: '1',
-  startTimeMs: 1_700_000_000_000,
-  durationMs: 1_800_000,
-  firstName: 'A',
-  lastName: 'B',
-  email: 'a@b.co',
-  timezone: 'America/New_York',
-};
+const base = BOOKING_BASE;
 
 const endpoints = (required: boolean): MeetingFormField => ({
   name: 'number_of_endpoints',

package/src/components/contact/contact-form.tsx

@@ -50,6 +50,7 @@ import {
   Label,
 } from '../ui';
 import { HoneypotField } from '../ui/honeypot-field';
+import { RequiredMark } from '../ui/required-mark';
 
 /**
  * Fields the caller can suppress. Six values — every primary form
@@ -288,7 +289,8 @@ export function ContactForm({
             {showName && (
               <div className="flex flex-col">
                 <Label htmlFor="name">
-                  Your Name<span className="text-ods-accent">*</span>
+                  Your Name
+                  <RequiredMark />
                 </Label>
                 <Input
                   id="name"
@@ -309,7 +311,8 @@ export function ContactForm({
             {showEmail && (
               <div className="flex flex-col">
                 <Label htmlFor="email">
-                  Email<span className="text-ods-accent">*</span>
+                  Email
+                  <RequiredMark />
                 </Label>
                 <Input
                   id="email"
@@ -402,7 +405,8 @@ export function ContactForm({
         {showHelpCategory && (
           <div className="flex flex-col">
             <Label htmlFor="helpCategory">
-              Choose your main interest<span className="text-ods-accent">*</span>
+              Choose your main interest
+              <RequiredMark />
             </Label>
             <Controller
               control={control}
@@ -437,7 +441,8 @@ export function ContactForm({
         {showMessage && (
           <div className="flex flex-grow flex-col">
             <Label htmlFor="message">
-              Your Message<span className="text-ods-accent">*</span>
+              Your Message
+              <RequiredMark />
             </Label>
             <Textarea
               id="message"