@ossy/booking 1.16.2 → 3.0.1

package/src/bookings.component.jsx

@@ -1,37 +1,38 @@
 import React from 'react'
-import { View, Title, Text, Tags } from '@ossy/design-system'
+import { View, Text, Tags, Page } from '@ossy/design-system'
 import { Definition } from './Definition.js'
-import { moduleStatusTags } from './moduleStatus.js'
 import { BookingList } from './BookingList.jsx'
 
 export const metadata = {
   id: 'booking/bookings',
 }
 
-export const BookingsContent = () => (
-  <View
-    gap="m"
-    surface="primary"
-    style={{ padding: 'var(--space-m) var(--space-l)', height: '100%', overflowY: 'auto' }}
-  >
-    <View inset="s" gap="s">
-      <View layout="row" gap="s" alignItems="center">
-        <Title>{Definition.title} — Bookings</Title>
-        {moduleStatusTags(Definition).length > 0 && (
-          <Tags tags={moduleStatusTags(Definition)} size="s" />
-        )}
-      </View>
+export const BookingsContent = () => {
+  const statusTags = (Definition.status ?? [])
+    .map((s) => ({ beta: 'Beta', 'coming-soon': 'Coming Soon' }[s]))
+    .filter(Boolean)
+
+  return (
+    <Page>
+      <View gap="s">
+        <View layout="row" gap="s" alignItems="center">
+          <Text variant="heading-default" as="h1">{Definition.title} — Bookings</Text>
+          {statusTags.length > 0 && (
+            <Tags tags={statusTags} size="s" />
+          )}
+        </View>
 
-      <Text style={{ maxWidth: '400px' }}>
-        Incoming appointments from your clients.
-      </Text>
-    </View>
+        <Text style={{ maxWidth: '400px' }}>
+          Incoming appointments from your clients.
+        </Text>
+      </View>
 
-    <View gap="s" inset="s">
-      <Title variant="secondary">Upcoming</Title>
-      <BookingList bookings={[]} />
-    </View>
-  </View>
-)
+      <View gap="s">
+        <Text variant="heading-secondary" as="h2">Upcoming</Text>
+        <BookingList bookings={[]} />
+      </View>
+    </Page>
+  )
+}
 
 export default BookingsContent

package/src/bookings.page.jsx

@@ -1,6 +1,6 @@
 import React, { useState, useEffect, useCallback, useMemo } from 'react'
 import { useRouter } from '@ossy/router-react'
-import { View, Title, Text, Tabs, Alert, useLocale } from '@ossy/design-system'
+import { View, Text, Tabs, Guide, ContentHeader, Page, useLocale } from '@ossy/design-system'
 import { useSdk } from '@ossy/sdk-react'
 import { Definition } from './Definition.js'
 import { BookingCard } from './booking-card.component.jsx'
@@ -103,19 +103,20 @@ export default function BookingsPage () {
   const empty = EMPTY_MESSAGES[activeTab] ?? EMPTY_MESSAGES.all
 
   return (
-    <View
-      gap="m"
-      surface="primary"
-      style={{ padding: 'var(--space-m) var(--space-l)', height: '100%', overflowY: 'auto' }}
+    <Page
+      header={(
+        <ContentHeader
+          inset="none"
+          title={(
+            <Text variant="heading-default" as="h1">
+              {Definition.title} — {t('booking.bookings.titleSuffix')}
+            </Text>
+          )}
+          description="booking.bookings.description"
+        />
+      )}
     >
-      <View inset="s" gap="s">
-        <Title>{Definition.title} — {t('booking.bookings.titleSuffix')}</Title>
-        <Text style={{ maxWidth: '400px' }}>
-          {t('booking.bookings.description')}
-        </Text>
-      </View>
-
-      <View gap="m" inset="s" surface="secondary" roundness="m">
+      <View gap="m" surface="secondary" roundness="m">
         <Tabs
           tabs={TABS}
           activeTabId={activeTab}
@@ -127,10 +128,22 @@ export default function BookingsPage () {
             {t('booking.bookings.loading')}
           </Text>
         ) : error ? (
-          <Alert variant="danger">{error}</Alert>
+          <Guide
+            title="booking.bookings.errorLoad.title"
+            far={[
+              {
+                key: 'retry',
+                label: 'design-system.tryAgain',
+                variant: 'neutral',
+                onClick: loadBookings,
+              },
+            ]}
+          >
+            <Text color="secondary" style={{ marginBottom: 'var(--space-m)' }}>{error}</Text>
+          </Guide>
         ) : visible.length === 0 ? (
           <View gap="xs" alignItems="center" inset="l">
-            <Title variant="tertiary">{empty.heading}</Title>
+            <Text variant="heading-tertiary" as="h3">{empty.heading}</Text>
             <Text color="secondary">{empty.body}</Text>
           </View>
         ) : (
@@ -148,6 +161,6 @@ export default function BookingsPage () {
           </View>
         )}
       </View>
-    </View>
+    </Page>
   )
 }

package/src/cancel-booking.action.js

@@ -1 +1 @@
-export const metadata = { id: 'booking/cancel', access: 'authenticated' }
+export const metadata = { id: '@ossy/booking/actions/cancel', access: 'authenticated' }

package/src/cancel-booking.task.js

@@ -1,18 +1,17 @@
-import { Aggregate } from '@ossy/event-store'
-import { Resource, ResourcesEvents } from '@ossy/resources/server'
+import { ResourcesEvents, mutateResource, viewResource } from '@ossy/resources/server'
 import BookingCancellationEmail from './booking-cancellation.email.jsx'
 
-export const metadata = { id: 'booking/cancel' }
+export const metadata = { id: '@ossy/booking/tasks/cancel' }
 
-export async function run({ payload, req, log, integrations }) {
+export async function run ({ payload, req, log, integrations }) {
   const bookingId = payload?.bookingId ?? req?.params?.bookingId
   const workspaceId = payload?.workspaceId ?? req?.workspaceId
 
   if (!bookingId) throw Object.assign(new Error('bookingId is required'), { status: 400 })
 
-  log?.info(`[booking/cancel] Cancelling booking ${bookingId}`)
+  log?.info(`[booking/tasks/cancel] Cancelling booking ${bookingId}`)
 
-  const booking = await Aggregate.Of(Resource, bookingId).then(Aggregate.View())
+  const booking = await viewResource(bookingId)
   if (!booking?.id) throw Object.assign(new Error('Booking not found'), { status: 404 })
 
   if (booking.belongsTo !== workspaceId) {
@@ -23,18 +22,16 @@ export async function run({ payload, req, log, integrations }) {
     throw Object.assign(new Error('Booking is already cancelled'), { status: 409 })
   }
 
-  const updated = await Aggregate.Of(Resource, bookingId)
-    .then(Aggregate.Add(
-      ResourcesEvents.ContentUpdated({
-        createdBy: req?.userId ?? 'system',
-        content: { ...booking.content, status: 'cancelled' },
-      }),
-    ))
-    .then(Aggregate.Save())
+  await mutateResource(
+    bookingId,
+    ResourcesEvents.Patched({
+      createdBy: req?.userId ?? 'system',
+      content: { ...booking.content, status: 'cancelled' },
+    }),
+  )
 
-  log?.info(`[booking/cancel] Booking ${bookingId} cancelled`)
+  log?.info(`[booking/tasks/cancel] Booking ${bookingId} cancelled`)
 
-  // Send cancellation email to client
   const emailClient = integrations?.get?.('email')
   if (emailClient && booking.content?.clientEmail) {
     try {
@@ -52,7 +49,7 @@ export async function run({ payload, req, log, integrations }) {
         },
       )
     } catch (err) {
-      log?.error('[booking/cancel] Failed to send cancellation email', err)
+      log?.error('[booking/tasks/cancel] Failed to send cancellation email', err)
     }
   }
 

package/src/confirm-booking.action.js

@@ -1 +1 @@
-export const metadata = { id: 'booking/confirm', access: 'workspace' }
+export const metadata = { id: '@ossy/booking/actions/confirm', access: 'workspace' }

package/src/confirm-booking.api.js

@@ -0,0 +1,35 @@
+import { ActionService } from '@ossy/platform'
+import { verifyBookingEmailToken } from './booking-email-token.js'
+
+export const metadata = {
+  id: 'booking.confirm',
+  path: '/api/v0/booking/confirm',
+}
+
+function htmlPage (title, message) {
+  return `<!DOCTYPE html><html lang="sv"><head><meta charset="utf-8"><title>${title}</title></head><body><p>${message}</p></body></html>`
+}
+
+export default async function handle (req, res) {
+  if (req.method !== 'GET') {
+    res.setHeader('Allow', 'GET')
+    res.status(405).json({ error: 'Method Not Allowed' })
+    return
+  }
+
+  try {
+    const { bookingId, workspaceId } = await verifyBookingEmailToken(req.query.token, 'confirm')
+    await ActionService.invoke('@ossy/booking/actions/confirm', {
+      payload: { bookingId, workspaceId },
+      req: { ...req, workspaceId },
+    })
+    res.status(200).send(htmlPage('Bokning bekräftad', 'Bokningen är bekräftad. Klienten har fått ett bekräftelsemejl.'))
+  } catch (err) {
+    const status = err?.status ?? 500
+    if (status >= 500) {
+      res.status(status).json({ error: err?.message ?? 'Internal error' })
+      return
+    }
+    res.status(status).send(htmlPage('Kunde inte bekräfta', err?.message ?? 'Ogiltig eller utgången länk.'))
+  }
+}

package/src/confirm-booking.task.js

@@ -1,19 +1,21 @@
-import { Aggregate } from '@ossy/event-store'
-import { Resource, ResourcesEvents } from '@ossy/resources/server'
+import { ResourcesEvents, mutateResource, viewResource } from '@ossy/resources/server'
 import BookingConfirmationEmail from './booking-confirmation.email.jsx'
+import { resolveProviderName, workspaceIdFromContent } from './provider-fields.js'
+import { resolveWorkspaceContact } from './resolve-workspace-contact.js'
 
-export const metadata = { id: 'booking/confirm' }
+export const metadata = { id: '@ossy/booking/tasks/confirm' }
 
-export async function run({ payload, req, log, integrations }) {
+export async function run ({ payload, req, log, integrations }) {
   const bookingId = payload?.bookingId ?? req?.params?.bookingId
   const workspaceId = payload?.workspaceId ?? req?.workspaceId
-  const { consultantName, baseUrl } = payload ?? {}
+  const providerName = resolveProviderName(payload ?? {})
+  const { baseUrl } = payload ?? {}
 
   if (!bookingId) throw Object.assign(new Error('bookingId is required'), { status: 400 })
 
-  log?.info(`[booking/confirm] Confirming booking ${bookingId}`)
+  log?.info(`[booking/tasks/confirm] Confirming booking ${bookingId}`)
 
-  const booking = await Aggregate.Of(Resource, bookingId).then(Aggregate.View())
+  const booking = await viewResource(bookingId)
   if (!booking?.id) throw Object.assign(new Error('Booking not found'), { status: 404 })
 
   if (booking.belongsTo !== workspaceId) {
@@ -27,18 +29,16 @@ export async function run({ payload, req, log, integrations }) {
     )
   }
 
-  await Aggregate.Of(Resource, bookingId)
-    .then(Aggregate.Add(
-      ResourcesEvents.ContentUpdated({
-        createdBy: req?.userId ?? 'system',
-        content: { ...booking.content, status: 'confirmed' },
-      }),
-    ))
-    .then(Aggregate.Save())
+  await mutateResource(
+    bookingId,
+    ResourcesEvents.Patched({
+      createdBy: req?.userId ?? 'system',
+      content: { ...booking.content, status: 'confirmed' },
+    }),
+  )
 
-  log?.info(`[booking/confirm] Booking ${bookingId} confirmed`)
+  log?.info(`[booking/tasks/confirm] Booking ${bookingId} confirmed`)
 
-  // Send confirmation email with .ics to the client
   const emailClient = integrations?.get?.('email')
   if (emailClient && booking.content?.clientEmail) {
     try {
@@ -46,7 +46,7 @@ export async function run({ payload, req, log, integrations }) {
         BookingConfirmationEmail,
         {
           clientName: booking.content.clientName,
-          consultantName: consultantName ?? 'Din konsult',
+          providerName: providerName ?? 'Din utförare',
           startAt: booking.content.startsAt,
           duration: booking.content.duration,
           baseUrl: baseUrl ?? '',
@@ -57,22 +57,24 @@ export async function run({ payload, req, log, integrations }) {
           subject: 'Bokningsbekräftelse',
         },
       )
-      log?.info(`[booking/confirm] Confirmation email sent to ${booking.content.clientEmail}`)
+      log?.info(`[booking/tasks/confirm] Confirmation email sent to ${booking.content.clientEmail}`)
     } catch (err) {
-      log?.error('[booking/confirm] Failed to send confirmation email to client', err)
+      log?.error('[booking/tasks/confirm] Failed to send confirmation email to client', err)
     }
 
-    // Brief notification to the consultant that the booking is now locked in
-    if (booking.content?.consultantId) {
+    const bookingWorkspaceId = booking.belongsTo ?? workspaceIdFromContent(booking.content)
+    const contact = await resolveWorkspaceContact(bookingWorkspaceId)
+    const providerEmail = contact?.providerEmail
+    if (providerEmail) {
       try {
         await emailClient.send({
-          to: booking.content.consultantId,
+          to: providerEmail,
           from: 'noreply@ossy.se',
           subject: 'Bokning bekräftad',
           text: `Du bekräftade bokningen med ${booking.content.clientName} (${booking.content.clientEmail}). En kalenderinbjudan har skickats till klienten.`,
         })
       } catch (err) {
-        log?.error('[booking/confirm] Failed to send confirmation notification to consultant', err)
+        log?.error('[booking/tasks/confirm] Failed to send confirmation notification to provider', err)
       }
     }
   }

package/src/create-booking.action.js

@@ -1 +1 @@
-export const metadata = { id: 'booking/create', access: 'public' }
+export const metadata = { id: '@ossy/booking/actions/create', access: 'public' }

package/src/create-booking.task.js

@@ -1,41 +1,57 @@
 import { nanoid } from 'nanoid'
-import { Aggregate } from '@ossy/event-store'
-import { Resource, ResourcesEvents } from '@ossy/resources/server'
+import { ConfigService } from '@ossy/platform'
+import { ResourcesEvents, commitResource } from '@ossy/resources/server'
+import { BookingSchema } from './schema-ids.js'
 import { getAvailableSlots } from './availability-engine.js'
+import { toMs } from './time.js'
 import { getBookingResources } from './booking-resources.js'
+import { createBookingEmailToken } from './booking-email-token.js'
 import { bookings } from './locations.js'
 import BookingRequestEmail from './booking-request.email.jsx'
+import {
+  resolveProviderEmail,
+  resolveProviderName,
+} from './provider-fields.js'
+import { resolveWorkspaceContact, resolveWorkspaceId } from './resolve-workspace-contact.js'
 
-export const metadata = { id: 'booking/create' }
+export const metadata = { id: '@ossy/booking/tasks/create' }
 
-export async function run({ payload, log, integrations }) {
+export async function run({ payload, req, log, integrations }) {
   const {
-    consultantId,
     startAt,
     duration,
     serviceId,
     clientName,
     clientEmail,
     clientMessage,
-    consultantName,
-    consultantEmail,
+    attachments,
     baseUrl,
     confirmUrl,
     declineUrl,
   } = payload ?? {}
 
-  if (!consultantId) throw Object.assign(new Error('consultantId is required'), { status: 400 })
+  const workspaceId = await resolveWorkspaceId(payload)
+  let providerName = resolveProviderName(payload)
+  let providerEmail = resolveProviderEmail(payload)
+
+  if (!workspaceId) throw Object.assign(new Error('workspaceId or providerSlug is required'), { status: 400 })
+
+  if (!providerEmail || !providerName) {
+    const contact = await resolveWorkspaceContact(workspaceId)
+    providerEmail = providerEmail ?? contact?.providerEmail
+    providerName = providerName ?? contact?.providerName
+  }
   if (!startAt) throw Object.assign(new Error('startAt is required'), { status: 400 })
   if (!duration) throw Object.assign(new Error('duration is required'), { status: 400 })
   if (!clientName) throw Object.assign(new Error('clientName is required'), { status: 400 })
   if (!clientEmail) throw Object.assign(new Error('clientEmail is required'), { status: 400 })
 
-  log?.info(`[booking/create] Creating booking for ${clientEmail} with ${consultantId}`)
+  log?.info(`[booking/tasks/create] Creating booking for ${clientEmail} with workspace ${workspaceId}`)
 
   // Re-validate slot availability
   const availabilityResources = await getBookingResources({
-    type: '@ossy/booking/availability',
-    belongsTo: consultantId,
+    schemaId: BookingSchema.availability,
+    belongsTo: workspaceId,
   })
 
   // New format: single resource with weeklyWindows array in content
@@ -65,8 +81,8 @@ export async function run({ payload, log, integrations }) {
   }
 
   const allBookingResources = await getBookingResources({
-    type: '@ossy/booking/booking',
-    belongsTo: consultantId,
+    schemaId: BookingSchema.booking,
+    belongsTo: workspaceId,
   })
 
   const confirmedBookings = allBookingResources
@@ -77,8 +93,12 @@ export async function run({ payload, log, integrations }) {
       status: 'confirmed',
     }))
 
-  const startDate = new Date(startAt)
-  const endAt = new Date(startDate.getTime() + duration * 60 * 1000).toISOString()
+  const startMs = toMs(startAt)
+  if (startMs == null) {
+    throw Object.assign(new Error('startAt must be a valid time'), { status: 400 })
+  }
+  const startDate = new Date(startMs)
+  const endsAt = startMs + duration * 60 * 1000
 
   // Validate the requested slot is still open
   const openSlots = getAvailableSlots({
@@ -89,7 +109,7 @@ export async function run({ payload, log, integrations }) {
     duration,
   })
 
-  const isAvailable = openSlots.some(s => s.startAt === startDate.toISOString())
+  const isAvailable = openSlots.some(s => s.startAt === startMs)
   if (!isAvailable) {
     throw Object.assign(new Error('The requested slot is no longer available'), { status: 409 })
   }
@@ -97,10 +117,10 @@ export async function run({ payload, log, integrations }) {
   // Create the booking resource
   const bookingId = nanoid()
   const event = ResourcesEvents.Created({
-    aggregateId: bookingId,
-    type: '@ossy/booking/booking',
+    resourceId: bookingId,
+    schemaId: BookingSchema.booking,
     createdBy: 'public',
-    belongsTo: consultantId,
+    belongsTo: workspaceId,
     location: bookings,
     name: `booking-${bookingId}.json`,
     content: {
@@ -108,61 +128,77 @@ export async function run({ payload, log, integrations }) {
       clientName,
       clientEmail,
       clientMessage: clientMessage ?? '',
-      consultantId,
-      startsAt: startDate.toISOString(),
-      endsAt: endAt,
+      attachments: Array.isArray(attachments) ? attachments : [],
+      workspaceId,
+      providerId: workspaceId,
+      startsAt: startMs,
+      endsAt,
       duration,
       status: 'pending',
       paymentStatus: 'unpaid',
     },
   })
 
-  const booking = await Aggregate.Of(Resource, event).then(Aggregate.View())
+  const booking = await commitResource(event)
 
-  log?.info(`[booking/create] Booking ${bookingId} created`)
+  log?.info(`[booking/tasks/create] Booking ${bookingId} created`)
 
   const emailClient = integrations?.get?.('email')
   if (emailClient) {
-    // Notify the consultant of the new booking request
-    if (consultantEmail) {
+    const webBaseUrl = baseUrl ?? ConfigService.getWebClientBaseUrl(req)
+    const confirmToken = createBookingEmailToken({
+      bookingId,
+      workspaceId,
+      purpose: 'confirm',
+    })
+    const declineToken = createBookingEmailToken({
+      bookingId,
+      workspaceId,
+      purpose: 'decline',
+    })
+    const defaultConfirmUrl = `${webBaseUrl}/api/v0/booking/confirm?token=${encodeURIComponent(confirmToken)}`
+    const defaultDeclineUrl = `${webBaseUrl}/api/v0/booking/decline?token=${encodeURIComponent(declineToken)}`
+
+    // Notify the provider of the new booking request
+    if (providerEmail) {
       try {
         await emailClient.sendTemplate(
           BookingRequestEmail,
           {
-            consultantName: consultantName ?? 'Hej',
+            providerName: providerName ?? 'Hej',
             clientName,
             clientEmail,
-            startAt: startDate.toISOString(),
+            startAt: startMs,
             duration,
             message: clientMessage ?? '',
-            confirmUrl: confirmUrl ?? `${baseUrl ?? ''}/actions/booking/confirm?bookingId=${bookingId}`,
-            declineUrl: declineUrl ?? `${baseUrl ?? ''}/actions/booking/decline?bookingId=${bookingId}`,
+            confirmUrl: confirmUrl ?? defaultConfirmUrl,
+            declineUrl: declineUrl ?? defaultDeclineUrl,
           },
           {
-            to: consultantEmail,
+            to: providerEmail,
             from: 'noreply@ossy.se',
             subject: 'Ny bokningsförfrågan',
           },
         )
-        log?.info(`[booking/create] Booking request email sent to consultant ${consultantEmail}`)
+        log?.info(`[booking/tasks/create] Booking request email sent to provider ${providerEmail}`)
       } catch (err) {
-        log?.error('[booking/create] Failed to send booking request email to consultant', err)
+        log?.error('[booking/tasks/create] Failed to send booking request email to provider', err)
       }
     }
 
-    // Send a simple receipt to the client — no .ics yet (sent after consultant confirms)
+    // Send a simple receipt to the client — no .ics yet (sent after provider confirms)
     try {
       await emailClient.send(
         {
           to: clientEmail,
           from: 'noreply@ossy.se',
           subject: 'Vi har tagit emot din förfrågan',
-          text: `Hej ${clientName},\n\nVi har tagit emot din bokningsförfrågan. Konsulten bekräftar inom kort och du får ett nytt mejl med kalenderinbjudan när bokningen är bekräftad.\n\nMvh\nOssy`,
+          text: `Hej ${clientName},\n\nVi har tagit emot din bokningsförfrågan. Bokningsansvarig bekräftar inom kort och du får ett nytt mejl med kalenderinbjudan när bokningen är bekräftad.\n\nMvh\nOssy`,
         },
       )
-      log?.info(`[booking/create] Receipt email sent to client ${clientEmail}`)
+      log?.info(`[booking/tasks/create] Receipt email sent to client ${clientEmail}`)
     } catch (err) {
-      log?.error('[booking/create] Failed to send receipt email to client', err)
+      log?.error('[booking/tasks/create] Failed to send receipt email to client', err)
     }
   }
 

package/src/create-service.action.js

@@ -1 +1,5 @@
-export const metadata = { id: 'booking/create-service', access: 'workspace' }
+export const metadata = {
+  id: '@ossy/booking/actions/create-service',
+  access: 'workspace',
+  label: 'booking.services.save',
+}

package/src/create-service.task.js

@@ -1,9 +1,9 @@
 import { nanoid } from 'nanoid'
-import { Aggregate } from '@ossy/event-store'
-import { Resource, ResourcesEvents } from '@ossy/resources/server'
+import { ResourcesEvents, commitResource } from '@ossy/resources/server'
+import { BookingSchema } from './schema-ids.js'
 import { services } from './locations.js'
 
-export const metadata = { id: 'booking/create-service' }
+export const metadata = { id: '@ossy/booking/tasks/create-service' }
 
 export async function run ({ payload, req, log }) {
   const workspaceId = req?.workspaceId
@@ -28,11 +28,11 @@ export async function run ({ payload, req, log }) {
     active: active !== false,
   }
 
-  log?.info(`[booking/create-service] Creating service ${resourceId} for workspace ${workspaceId}`)
+  log?.info(`[booking/tasks/create-service] Creating service ${resourceId} for workspace ${workspaceId}`)
 
   const event = ResourcesEvents.Created({
-    aggregateId: resourceId,
-    type: '@ossy/booking/service',
+    resourceId,
+    schemaId: BookingSchema.service,
     createdBy: req?.userId ?? 'system',
     belongsTo: workspaceId,
     location: services,
@@ -40,7 +40,7 @@ export async function run ({ payload, req, log }) {
     content,
   })
 
-  const service = await Aggregate.Of(Resource, event).then(Aggregate.View())
+  const service = await commitResource(event)
 
   return { id: resourceId, ...content, ...service }
 }

package/src/decline-booking.action.js

@@ -1 +1 @@
-export const metadata = { id: 'booking/decline', access: 'workspace' }
+export const metadata = { id: '@ossy/booking/actions/decline', access: 'workspace' }

package/src/decline-booking.api.js

@@ -0,0 +1,35 @@
+import { ActionService } from '@ossy/platform'
+import { verifyBookingEmailToken } from './booking-email-token.js'
+
+export const metadata = {
+  id: 'booking.decline',
+  path: '/api/v0/booking/decline',
+}
+
+function htmlPage (title, message) {
+  return `<!DOCTYPE html><html lang="sv"><head><meta charset="utf-8"><title>${title}</title></head><body><p>${message}</p></body></html>`
+}
+
+export default async function handle (req, res) {
+  if (req.method !== 'GET') {
+    res.setHeader('Allow', 'GET')
+    res.status(405).json({ error: 'Method Not Allowed' })
+    return
+  }
+
+  try {
+    const { bookingId, workspaceId } = await verifyBookingEmailToken(req.query.token, 'decline')
+    await ActionService.invoke('@ossy/booking/actions/decline', {
+      payload: { bookingId, workspaceId },
+      req: { ...req, workspaceId },
+    })
+    res.status(200).send(htmlPage('Bokning avböjd', 'Bokningen har avböjts. Klienten har fått ett meddelande.'))
+  } catch (err) {
+    const status = err?.status ?? 500
+    if (status >= 500) {
+      res.status(status).json({ error: err?.message ?? 'Internal error' })
+      return
+    }
+    res.status(status).send(htmlPage('Kunde inte avböja', err?.message ?? 'Ogiltig eller utgången länk.'))
+  }
+}