@rubytech/create-maxy-code 0.1.341 → 0.1.343

package/payload/platform/plugins/cloudflare/skills/calendar-site/template/wrangler.toml

@@ -0,0 +1,14 @@
+# Cloudflare Pages config for the booking site (calendar-site skill).
+# The skill fills the placeholders at assemble time:
+#   __PROJECT_NAME__     the Pages project name
+#   __D1_DATABASE_NAME__ the D1 database name
+#   __D1_DATABASE_ID__   the id printed by `wrangler d1 create`
+name = "__PROJECT_NAME__"
+pages_build_output_dir = "public"
+compatibility_date = "2024-01-01"
+compatibility_flags = ["nodejs_compat"]
+
+[[d1_databases]]
+binding = "DB"
+database_name = "__D1_DATABASE_NAME__"
+database_id = "__D1_DATABASE_ID__"

package/payload/platform/plugins/cloudflare/skills/cloudflare/SKILL.md

@@ -16,6 +16,7 @@ This is the entry point for every Cloudflare task on the install. Pick the opera
 | Tear down corrupt tunnel state and start clean | `references/reset-guide.md` | a fresh `manual-setup.md` run reaches `200` |
 | Call the Cloudflare API (DNS, zones, tunnels, Access, token list/reuse/revoke) | `references/api.md` | the API call returns success and the change is observable |
 | Deploy a static / Next.js site to Cloudflare Pages | `references/hosting-sites.md` | the deployed URL serves the new build |
+| Take an approved content tree to a live site on its custom domain (canonical source, OG, optional D1 form, live verify) | `Skill site-deploy` | cache-busted `200` on the custom domain with correct content + `og:*`; a form site records a test POST to D1 |
 | Capture form/waitlist submissions into a database | `references/d1-data-capture.md` | a test POST appears in `SELECT … WHERE swept = 0` |
 | Diagnose / enable Web Analytics on a site (0 visitors, no data) | `references/web-analytics.md` | beacon present in live HTML (`curl -s https://<host>/ \| grep cloudflareinsights`) |
 

package/payload/platform/plugins/cloudflare/skills/site-deploy/SKILL.md

@@ -0,0 +1,84 @@
+---
+name: site-deploy
+description: Assemble an approved content tree into a live Cloudflare Pages deployment on its custom domain that survives the install device being offline. This is the skill behind "deploy this site", "put this landing page / investor site / microsite live on its own domain", "publish the waitlist site", and "the live site is stale / shows the wrong brand". It takes one canonical source tree, reuses the per-scope Pages-and-D1 token from the account secrets file, runs `wrangler pages deploy` to the production alias, attaches the custom domain, wires a contact or waitlist form to D1 when the tree carries one, and gates "done" on a cache-busted live `200` with correct content and Open Graph metadata on the production domain. Admin-run; it holds Bash and the account secrets surface. Distinct from `admin:publish-site` (device-tunnel hosting that dies when the device goes offline) and from `sitedesk:microsite` (single-page builder that stops before deploy).
+---
+
+# Deploy a site to Cloudflare Pages
+
+Run by the admin/main session, the operator-infra surface that holds the `Bash` tool and reads the account secrets file. A content specialist authors and approves the site tree; the deploy itself is admin work because it touches the Cloudflare account credentials. When a `content-producer` finishes a site, it hands the deploy off to admin, which loads this skill.
+
+This skill is an outcome contract, not a second copy of the Pages mechanics. The mechanics live in the cloudflare references; this skill names the canonical source convention, the auth discipline, the form-to-D1 wiring trigger, the Open Graph correctness check, and the live done-gate, then defers each command block to the matching reference. Read `references/hosting-sites.md` (build, `wrangler pages deploy`, custom domain) and `references/d1-data-capture.md` (form to Pages Function to D1) via `plugin-read` before issuing those commands; read `references/api.md` for the token discipline.
+
+## When this skill, not another
+
+| Situation | Skill |
+|---|---|
+| A standalone site (landing, investor, waitlist, microsite output) goes live on its own custom domain, hosted on Cloudflare's edge, surviving the install device being offline | **this skill** |
+| Serve content that the install device itself renders, at a custom domain over the brand tunnel | `admin:publish-site` (device-tunnel `/sites/` path) |
+| Build a single-page site from a brief | `sitedesk:microsite` (it stops before deploy; its output tree is then deployed by this skill) |
+
+`admin:publish-site` serves from the install device through the brand tunnel: when the device is offline the site is unreachable. This skill puts the site on Cloudflare Pages, so it stays up independent of the device. Name the distinction when the operator's intent is ambiguous, and pick by whether the site must survive the device going offline.
+
+## One canonical source tree
+
+Each site is driven by exactly one source tree at:
+
+```
+<accountDir>/pages/<project>/
+```
+
+`<project>` is the slug of the site's graph node (the `:Organization` or site entity the site represents), so there is one deterministic path per site and no second copy to reconcile. The tree holds the framework source, `wrangler.toml`, the built output directory, and `functions/api/contact.ts` when the site captures form data.
+
+There is never a `sites/<brand>/` versus `output/<brand>-site/` pair, a `.bak` clone, or a stale sibling. If more than one candidate tree exists when you start, reconcile to the single canonical path first: confirm which tree is current, move it to `<accountDir>/pages/<project>/`, and remove the others before deploying. Deploying from an unreconciled tree is the root cause of the dev/live drift this skill exists to prevent. `<accountDir>/pages/` is distinct from `<accountDir>/sites/`, which belongs to the device-tunnel `admin:publish-site` path; the two never share a directory.
+
+## Auth: reuse the per-scope token, never mint ad hoc
+
+A Pages deploy needs **Account · Cloudflare Pages · Edit**. A site with a D1-backed form also needs **Account · D1 · Edit** on the same token. Load the stable `<brand>-pages-d1` token from the account secrets file, minting it once only if absent and persisting it, exactly as `references/api.md` § Provisioning and reusing a stable per-scope token and `references/d1-data-capture.md` § 0 prescribe. The token is never written into the project tree, never committed, never echoed into chat. The master token stays in the secrets file. Surface every command as verb plus target ("deploying Pages project `<project>`"); `wrangler` prints the deployment URL, which is what gets relayed.
+
+## Deploy and attach the custom domain
+
+Follow `references/hosting-sites.md`: build the framework output, write `wrangler.toml` (the project name is `<project>`, the output dir is the framework default), and `wrangler pages deploy <output-dir> --project-name <project> --branch=main` to the production alias. Attach the custom domain to the Pages project via the Cloudflare API with the reused `<brand>-pages-d1` token (the operator clicks **Workers & Pages → project → Custom domains** in the dashboard only when they prefer to do it by hand), so the site answers on the operator's domain, not only on `<project>.pages.dev`.
+
+Attaching the custom domain to the project is not the same as the domain resolving. The attach leaves validation **pending** until a DNS record in the zone points the hostname at the Pages site; until that record exists the domain returns `NXDOMAIN` and the page is unreachable. Confirm the record exists and create it when it does not:
+
+- A **subdomain** custom domain (`investors.example.com`) needs a `CNAME` to `<project>.pages.dev`.
+- An **apex** custom domain (`example.com`) cannot hold a literal CNAME, so it needs a **proxied (flattened) CNAME** at the apex to `<project>.pages.dev`, plus a `www` CNAME if `www` is also served. This is the case the attach most often leaves pending.
+
+Creating that DNS record is a **DNS-scope** operation, not a Pages-scope one: the `<brand>-pages-d1` token returns a `10000 Authentication error` on the DNS endpoint. Use the DNS-scoped `<brand>-dns` token, exactly as `cloudflare/SKILL.md` § Apex hostnames and `references/api.md` § DNS records prescribe, minting it once if absent. The hostname's zone must be on the same Cloudflare account; a hostname whose zone lives in a different account is reached with that account's own `<brand>-dns` token, never by probing a drawer of ad-hoc `CF_DNS_TOKEN_*` strays (that token sprawl is what the `references/api.md` reconcile pass exists to clear). The custom domain is the surface the done-gate checks, so a missing record fails the gate rather than passing silently.
+
+## Wire the form to D1 when one exists
+
+When the canonical tree carries a contact or waitlist form, the deploy is not complete until that form records to D1. Follow `references/d1-data-capture.md`: create the database, add the `[[d1_databases]]` binding to `wrangler.toml`, create the table, and ship `functions/api/contact.ts`. The token from the auth step already carries D1 Edit, so the form does not silently 500 at the insert. A site with no form skips this section.
+
+## Open Graph correctness
+
+The live page must carry brand-correct Open Graph metadata: `<meta property="og:title">`, `og:description`, `og:image`, and `og:url` reflecting this site and this brand, not a leftover from whatever the tree was cloned from. Stale OG (a live card still naming a previous brand) is a recorded failure mode of hand deployment. Confirm the `og:*` tags in the deployed HTML are correct before claiming done; if they are stale, fix them in the source tree, redeploy, and re-check.
+
+## Done-gate: a live cache-busted 200 on the custom domain
+
+"Done" is never "I ran deploy". It is a live behavioural signal on the **production custom domain**, surfaced verbatim in chat:
+
+```bash
+curl -s "https://<custom-domain>/?cb=$(date +%s)" -D - -o /tmp/site.html | head -1
+grep -o '<meta property="og:[^>]*>' /tmp/site.html
+```
+
+The done-gate passes only when all hold:
+
+- the domain resolves at all: a `NXDOMAIN` or "could not resolve host" means the custom-domain DNS record was never created, so go back to the custom-domain step and create the CNAME with the `<brand>-dns` token; a `522` is the certificate-provisioning window, so wait and re-curl rather than treating it as done,
+- the status line is `HTTP/2 200` (or `HTTP/1.1 200 OK`),
+- the body carries an expected content marker for this site (a brand string or headline you can name in advance), not a stale marker from a previous brand,
+- the `og:*` tags are present and brand-correct,
+- for a form-bearing site, a test POST appears in D1 unswept, per `references/d1-data-capture.md` § Outcome contract. This sub-check reuses the same `${PAGES_D1}` token and `<db-name>` already loaded when the form was wired, not a fresh token:
+
+```bash
+curl -sS -X POST -d "email=test@example.com&name=verify" "https://<custom-domain>/api/contact" -i | head -1
+CLOUDFLARE_API_TOKEN="${PAGES_D1}" wrangler d1 execute <db-name> --remote --command \
+  "SELECT email FROM leads WHERE swept = 0;"
+```
+
+Any other status, a missing or stale content marker, an OG mismatch, or a form POST that does not land in D1 blocks "done" and is reported with the exact failing URL. Record the deployment alias and the cache-busted verification command in the result so a later operator re-runs the same check against the custom domain to confirm live state without reading source.
+
+## Tool discipline
+
+The permitted surface is `wrangler`, `curl`, and the Cloudflare API via Bash following the cloudflare references, using the reused per-scope token. The agent does not mint a fresh token per deploy, does not drive the dashboard with Playwright or Chrome DevTools, does not synthesise `wrangler` flags from web search, and never writes or echoes a token. When a step fails, report the exact output with secrets redacted, name the failing URL or command, and stop.

package/payload/platform/plugins/docs/PLUGIN.md

@@ -25,6 +25,7 @@ Load these when users ask about Maxy features or need guidance:
 - **Access Control** → `references/access-control.md` — who can chat with your public agent, invitations, authentication
 - **Projects** → `references/projects-guide.md` — creating projects, tracking health, phase transitions, completing
 - **Slides** → `references/slides.md` — generating, theming, and reviewing HTML slide decks with `/slides`
+- **Calendar & booking** → `references/calendar-booking.md` — the admin calendar at `/calendar`, deploying a public booking page, setting availability, and how bookings become meetings
 - **Troubleshooting** → `references/troubleshooting.md` — common issues and how to resolve them
 
 ## Platform Reference

package/payload/platform/plugins/docs/references/admin-ui.md

@@ -385,6 +385,32 @@ Two endpoints, two surfaces, two restart-survival roles:
   string. Hosted on `maxy-edge.service` so the Software Update modal
   can read it while the brand service is mid-restart.
 
+## Installable PWA
+
+The admin (`index.html`), operator (`operator.html`), and chat (`chat.html`)
+shells are installable. Each links its own webmanifest (`/manifest-admin`,
+`/manifest-operator`, `/manifest-chat`) whose `icons` declare an explicit
+`192x192` and `512x512` `any` entry plus a `512x512` `maskable` entry, and an
+`apple-touch-icon`. These all point at an **opaque, padded** app icon baked on a
+white tile — never the transparent brand mark, because iOS/macOS composite a
+transparent app icon onto black. The opaque icons ship per brand
+(`assets.appIcon` / `appIcon192` / `maskableIcon`); `manifest`
+`background_color` only paints the splash screen, so the tile background is
+baked into the PNG. The maskable variant carries a wider safe zone so Android's
+circular crop never clips the mark.
+
+The sign-in page is installable too. The remote-auth gate redirects every
+unauthenticated request to it, so a fresh device installs from there; the page
+links the admin manifest and the opaque `apple-touch-icon` so the install adopts
+the brand name and icon instead of a monogram generated from the title. The
+sign-in page registers no service worker — only the authenticated shells do.
+
+A boot census logs `[pwa-census] surfaces=3 manifest-linked=3 icons-present=3`
+when every shell links its manifest and the app-icon files are present; a missing
+or mis-named icon asset shows `icons-present<3`, and a dropped head injection
+shows `manifest-linked<3`. The graph, data, and browser shells are intentionally
+non-installable.
+
 ## Related references
 
 - [`platform.md`](platform.md) — UI layout, session reconcile model,

package/payload/platform/plugins/docs/references/calendar-booking.md

@@ -0,0 +1,56 @@
+# Calendar and booking
+
+Maxy gives you a calendar of your meetings and a public page where people can book time with you. They are two sides of the same data: the meetings the calendar shows are the same meetings a booking creates.
+
+## The admin calendar
+
+Open `/calendar` on your Maxy address (the same sign-in as the dashboard). It shows your meetings in four views:
+
+- **Day** and **Week** show an hour grid with each meeting as a timed block.
+- **Month** shows the familiar month grid with a few meetings per day.
+- **Year** shows twelve small months; days with a meeting carry a dot, and clicking a month opens it.
+
+Use **Today** and the arrows to move around, and the view buttons to switch. The calendar reads your live meetings, so anything in your graph (imported from a calendar export, or created by a booking) appears here. The view is read-only: it shows meetings, it does not create or edit them.
+
+The meetings come from the same `:Meeting` records the rest of Maxy uses, scoped to your account.
+
+## The public booking page
+
+The booking page is a separate, public site on its own web address (for example `book.yourdomain.com`). A visitor sees only open time slots, never the titles or details of your existing meetings. They pick a slot, enter their name, email, and an optional note, and submit. That is the whole flow, like a simple Calendly.
+
+The page is hosted on Cloudflare so it keeps working and keeps taking bookings even if your Maxy device is briefly offline. Each submission is stored safely at the edge first, then turned into a meeting on your calendar shortly after.
+
+## Putting the booking page live
+
+Ask the admin to run the **calendar-site** skill ("put up a booking link" or "deploy the booking site"). It will ask for:
+
+- your **time zone**,
+- the **meeting length** (for example 30 minutes),
+- a **buffer** between meetings (for example 10 minutes),
+- your **weekly availability** (which days and hours you take bookings),
+- the **web address** the booking page should use.
+
+It writes those settings, builds the page, puts it live on that address, and checks that a test booking is captured. To change your availability later, run the same skill again with the new numbers.
+
+## How a booking becomes a meeting
+
+1. A visitor submits a booking on the public page.
+2. The booking is saved immediately at the edge (so it is never lost).
+3. Your Maxy device picks it up on a short cycle, creates a `:Meeting` for it, and links the visitor as a contact.
+4. You are notified by email (and by WhatsApp only if you already have a thread with the agent; it never starts a new WhatsApp conversation).
+5. The new meeting appears on your `/calendar`.
+
+This usually completes within a couple of minutes of the booking.
+
+## If a booking does not show up
+
+Bookings are reconciled on a cycle and the system audits itself each run. In the device logs:
+
+- `[calendar-booking]` lines trace one booking through submit, write, notify, and done.
+- `[calendar-reconcile]` lines report two health numbers per account: `pendingUnreconciled` (bookings captured but not yet turned into meetings) and `orphanMeetings` (booking meetings with no matching saved booking).
+
+A `pendingUnreconciled` number that stays above zero across several runs means the reconcile step is stuck and is worth investigating. To read them: `journalctl --user -u <brand-service> | grep -E '\[calendar-booking\]|\[calendar-reconcile\]'`, then filter by one booking id for its full story. The edge half of a booking (before your device sees it) is in the Cloudflare Pages function logs.
+
+## What this does not do
+
+One meeting type only (one length, one weekly window, one buffer). No syncing to Google or iCloud calendars: your meetings in Maxy are the source of truth. No rescheduling or cancellation links, reminders, or visitor time-zone selection. The booking page shows availability live from your device, so while your device is offline the page can still take a booking but may not show fresh open times until it is back.

package/payload/platform/plugins/scheduling/PLUGIN.md

@@ -102,6 +102,16 @@ Dispatch results are recorded on the Event node (`lastDispatchResult`, `lastDisp
 
 Users and plugins both create events with actions via the same `schedule-event` interface — the mechanism is symmetric.
 
+## Reconciling public bookings (D1 → graph)
+
+`scheduling/mcp/dist/scripts/reconcile-bookings.js` turns public bookings into calendar meetings. The booking site (deployed by the cloudflare `calendar-site` skill) writes each submission to a Cloudflare D1 `bookings` table at the edge, so capture survives a brief Pi outage. This binary pulls accepted, unswept rows from each account's D1, writes one `:Meeting {source:'booking', uid:'booking-<id>'}` per row (idempotent — a re-run writes no duplicate), links the booker as a `:Person` via `[:ATTENDED]` (respecting the global email-uniqueness skip), notifies the admin (email; WhatsApp only when a thread already exists, never cold), then marks the row swept.
+
+It is **armed by the always-running `platform/ui` server on an interval**, because the Pi has no other periodic surface (the same gap `check-due-events` has). A PID lock at `<configDir>/reconcile-bookings.lock` prevents overlapping runs. It registers **no agent tool** — there is nothing for the agent to call — so the tool-surface registries are untouched.
+
+Env: `PLATFORM_ROOT`, `NEO4J_URI` (and `NEO4J_PASSWORD` or `config/.neo4j-password`). Per account it reads `data/accounts/<id>/calendar-availability.json` (for `bookingDbName`) and `data/accounts/<id>/secrets/cloudflare.env` (for the Pages-and-D1 token), and shells `wrangler` for the D1 reads/writes.
+
+Observability: one `[calendar-booking]` line per step keyed by `bookingId` (`reconcile-claim`, `meeting-write`, `notify`, `booked`), and one `[calendar-reconcile] account=… pendingUnreconciled=… orphanMeetings=…` audit line per account per run. A `pendingUnreconciled` that persists across runs means reconcile is stalled; `orphanMeetings` means a booking meeting has no backing D1 row.
+
 ## Ingesting calendar archives (.ics → graph)
 
 `schedule-archive-ics` is the bulk-ingest path: it reads an `.ics` export from any calendar app (Google, Apple, Outlook, Fastmail, etc.) and writes one `:Meeting` per VEVENT into the graph, with attendees resolved to `:Person` by lowercased email. Distinct from `schedule-import-ics`, which only parses + returns events for the operator to recreate via `schedule-event` one at a time.

package/payload/platform/plugins/scheduling/mcp/dist/lib/__tests__/booking-notify.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=booking-notify.test.d.ts.map

package/payload/platform/plugins/scheduling/mcp/dist/lib/__tests__/booking-notify.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"booking-notify.test.d.ts","sourceRoot":"","sources":["../../../src/lib/__tests__/booking-notify.test.ts"],"names":[],"mappings":""}

package/payload/platform/plugins/scheduling/mcp/dist/lib/__tests__/booking-notify.test.js

@@ -0,0 +1,45 @@
+// Booking notify dispatch (Task 1012). Email always attempted when configured;
+// failures captured not thrown; WhatsApp only with dispatcher + known thread.
+import { describe, it, expect, vi } from "vitest";
+import { notifyBooking } from "../booking-notify.js";
+const booking = {
+    bookingId: "abc",
+    slotStart: "2026-06-22T09:00:00Z",
+    slotEnd: "2026-06-22T09:30:00Z",
+    name: "Jo",
+    email: "jo@example.com",
+};
+describe("notifyBooking", () => {
+    it("dispatches email and returns dispatched=true", async () => {
+        const sendEmail = vi.fn(async () => { });
+        const r = await notifyBooking({ adminEmail: "admin@x.com", sendEmail }, booking);
+        expect(sendEmail).toHaveBeenCalledOnce();
+        expect(r).toEqual([{ channel: "email", dispatched: true }]);
+    });
+    it("captures an email failure as dispatched=false, never throws", async () => {
+        const sendEmail = vi.fn(async () => {
+            throw new Error("smtp down");
+        });
+        const r = await notifyBooking({ adminEmail: "admin@x.com", sendEmail }, booking);
+        expect(r).toEqual([{ channel: "email", dispatched: false }]);
+    });
+    it("adds a WhatsApp result only when a dispatcher and thread are supplied", async () => {
+        const sendEmail = vi.fn(async () => { });
+        const sendWhatsapp = vi.fn(async () => { });
+        const r = await notifyBooking({ adminEmail: "admin@x.com", sendEmail, adminWhatsapp: "+440000", sendWhatsapp }, booking);
+        expect(sendWhatsapp).toHaveBeenCalledOnce();
+        expect(r).toEqual([
+            { channel: "email", dispatched: true },
+            { channel: "whatsapp", dispatched: true },
+        ]);
+    });
+    it("never sends WhatsApp without a known thread (cold-send ban)", async () => {
+        const sendEmail = vi.fn(async () => { });
+        const sendWhatsapp = vi.fn(async () => { });
+        // dispatcher present but no adminWhatsapp thread -> WhatsApp must not fire.
+        const r = await notifyBooking({ adminEmail: "admin@x.com", sendEmail, sendWhatsapp }, booking);
+        expect(sendWhatsapp).not.toHaveBeenCalled();
+        expect(r).toEqual([{ channel: "email", dispatched: true }]);
+    });
+});
+//# sourceMappingURL=booking-notify.test.js.map

package/payload/platform/plugins/scheduling/mcp/dist/lib/__tests__/booking-notify.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"booking-notify.test.js","sourceRoot":"","sources":["../../../src/lib/__tests__/booking-notify.test.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,8EAA8E;AAC9E,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAClD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAGrD,MAAM,OAAO,GAAe;IAC1B,SAAS,EAAE,KAAK;IAChB,SAAS,EAAE,sBAAsB;IACjC,OAAO,EAAE,sBAAsB;IAC/B,IAAI,EAAE,IAAI;IACV,KAAK,EAAE,gBAAgB;CACxB,CAAC;AAEF,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE;IAC7B,EAAE,CAAC,8CAA8C,EAAE,KAAK,IAAI,EAAE;QAC5D,MAAM,SAAS,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,GAAE,CAAC,CAAC,CAAC;QACxC,MAAM,CAAC,GAAG,MAAM,aAAa,CAAC,EAAE,UAAU,EAAE,aAAa,EAAE,SAAS,EAAE,EAAE,OAAO,CAAC,CAAC;QACjF,MAAM,CAAC,SAAS,CAAC,CAAC,oBAAoB,EAAE,CAAC;QACzC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAC9D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6DAA6D,EAAE,KAAK,IAAI,EAAE;QAC3E,MAAM,SAAS,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE;YACjC,MAAM,IAAI,KAAK,CAAC,WAAW,CAAC,CAAC;QAC/B,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,GAAG,MAAM,aAAa,CAAC,EAAE,UAAU,EAAE,aAAa,EAAE,SAAS,EAAE,EAAE,OAAO,CAAC,CAAC;QACjF,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;IAC/D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uEAAuE,EAAE,KAAK,IAAI,EAAE;QACrF,MAAM,SAAS,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,GAAE,CAAC,CAAC,CAAC;QACxC,MAAM,YAAY,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,GAAE,CAAC,CAAC,CAAC;QAC3C,MAAM,CAAC,GAAG,MAAM,aAAa,CAC3B,EAAE,UAAU,EAAE,aAAa,EAAE,SAAS,EAAE,aAAa,EAAE,SAAS,EAAE,YAAY,EAAE,EAChF,OAAO,CACR,CAAC;QACF,MAAM,CAAC,YAAY,CAAC,CAAC,oBAAoB,EAAE,CAAC;QAC5C,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;YAChB,EAAE,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE;YACtC,EAAE,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,IAAI,EAAE;SAC1C,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6DAA6D,EAAE,KAAK,IAAI,EAAE;QAC3E,MAAM,SAAS,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,GAAE,CAAC,CAAC,CAAC;QACxC,MAAM,YAAY,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,GAAE,CAAC,CAAC,CAAC;QAC3C,4EAA4E;QAC5E,MAAM,CAAC,GAAG,MAAM,aAAa,CAAC,EAAE,UAAU,EAAE,aAAa,EAAE,SAAS,EAAE,YAAY,EAAE,EAAE,OAAO,CAAC,CAAC;QAC/F,MAAM,CAAC,YAAY,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QAC5C,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAC9D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/payload/platform/plugins/scheduling/mcp/dist/lib/__tests__/booking-reconcile.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=booking-reconcile.test.d.ts.map

package/payload/platform/plugins/scheduling/mcp/dist/lib/__tests__/booking-reconcile.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"booking-reconcile.test.d.ts","sourceRoot":"","sources":["../../../src/lib/__tests__/booking-reconcile.test.ts"],"names":[],"mappings":""}

package/payload/platform/plugins/scheduling/mcp/dist/lib/__tests__/booking-reconcile.test.js

@@ -0,0 +1,89 @@
+// Booking reconcile core (Task 1012). The :Meeting MERGE is keyed on the
+// booking uid (real MERGE idempotency is a live-Neo4j property); these tests
+// pin the contract the JS owns: correct uid/source on the write, the
+// global-email-uniqueness branch (same-account link / cross-account skip / new
+// stub), and the audit arithmetic.
+import { describe, it, expect, vi } from "vitest";
+import { reconcileOne, auditCounts, bookingUid } from "../booking-reconcile.js";
+const booking = {
+    bookingId: "abc",
+    slotStart: "2026-06-22T09:00:00Z",
+    slotEnd: "2026-06-22T09:30:00Z",
+    name: "Jo Visitor",
+    email: "jo@example.com",
+    note: "hello",
+};
+// Fake session that routes each run() by the cypher it sees. The booker link
+// is a single MERGE (p:Person {email}) whose returned `linked` is true when the
+// resolved Person belongs to this account (a new node, or an existing
+// same-account one) and false for a foreign-account node.
+function makeSession(opts) {
+    const cyphers = [];
+    const params = [];
+    const run = vi.fn(async (cypher, p) => {
+        cyphers.push(cypher);
+        params.push(p);
+        if (cypher.includes("MERGE (m:Meeting")) {
+            return { records: [{ get: (k) => (k === "created" ? opts.created : "el-meeting-1") }] };
+        }
+        if (cypher.includes("MERGE (p:Person")) {
+            // undefined owner = freshly created under this account.
+            const linked = opts.personOwner === undefined || opts.personOwner === p.accountId;
+            return { records: [{ get: () => linked }] };
+        }
+        return { records: [] };
+    });
+    return { session: { run }, run, cyphers, params };
+}
+describe("reconcileOne", () => {
+    it("writes the booking meeting with the right uid + source and links a new booker", async () => {
+        const { session, cyphers, params } = makeSession({ created: true, personOwner: undefined });
+        const r = await reconcileOne(session, "acct-1", booking);
+        expect(r.created).toBe(true);
+        expect(r.meetingId).toBe("el-meeting-1");
+        expect(r.personLinked).toBe(true);
+        expect(r.crossAccountSkipped).toBe(false);
+        // uid + source asserted on the meeting MERGE params/cypher.
+        expect(params[0].uid).toBe(bookingUid("abc"));
+        expect(cyphers[0]).toMatch(/m\.source = 'booking'/);
+        // booker link is one atomic MERGE on the unique email, not a check-then-create.
+        expect(cyphers.some((c) => c.includes("MERGE (p:Person {email: $email})"))).toBe(true);
+        expect(cyphers.some((c) => c.includes("CREATE (p:Person"))).toBe(false);
+    });
+    it("reports created=false on the idempotent re-run", async () => {
+        const { session } = makeSession({ created: false, personOwner: "acct-1" });
+        const r = await reconcileOne(session, "acct-1", booking);
+        expect(r.created).toBe(false);
+    });
+    it("links a same-account existing person via ATTENDED", async () => {
+        const { session, cyphers } = makeSession({ created: true, personOwner: "acct-1" });
+        const r = await reconcileOne(session, "acct-1", booking);
+        expect(r.personLinked).toBe(true);
+        expect(r.crossAccountSkipped).toBe(false);
+        expect(cyphers.some((c) => c.includes("MERGE (p)-[r:ATTENDED]->(m)"))).toBe(true);
+    });
+    it("skips a cross-account person but still lands the meeting", async () => {
+        const { session } = makeSession({ created: true, personOwner: "other-account" });
+        const r = await reconcileOne(session, "acct-1", booking);
+        expect(r.created).toBe(true);
+        expect(r.personLinked).toBe(false);
+        expect(r.crossAccountSkipped).toBe(true);
+    });
+});
+describe("auditCounts", () => {
+    it("counts pending (D1 ahead) and orphans (graph ahead)", async () => {
+        const run = vi.fn(async () => ({
+            records: [{ get: () => ["booking-a", "booking-b"] }],
+        }));
+        const counts = await auditCounts({ run }, "acct-1", ["a", "c"]);
+        // 'c' accepted in D1 but no meeting -> pending 1; 'booking-b' meeting with no D1 row -> orphan 1.
+        expect(counts.pendingUnreconciled).toBe(1);
+        expect(counts.orphanMeetings).toBe(1);
+    });
+    it("is clean when D1 and graph agree", async () => {
+        const run = vi.fn(async () => ({ records: [{ get: () => ["booking-a", "booking-b"] }] }));
+        const counts = await auditCounts({ run }, "acct-1", ["a", "b"]);
+        expect(counts).toEqual({ pendingUnreconciled: 0, orphanMeetings: 0 });
+    });
+});
+//# sourceMappingURL=booking-reconcile.test.js.map

package/payload/platform/plugins/scheduling/mcp/dist/lib/__tests__/booking-reconcile.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"booking-reconcile.test.js","sourceRoot":"","sources":["../../../src/lib/__tests__/booking-reconcile.test.ts"],"names":[],"mappings":"AAAA,yEAAyE;AACzE,6EAA6E;AAC7E,qEAAqE;AACrE,+EAA+E;AAC/E,mCAAmC;AACnC,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,UAAU,EAAmB,MAAM,yBAAyB,CAAC;AAEjG,MAAM,OAAO,GAAe;IAC1B,SAAS,EAAE,KAAK;IAChB,SAAS,EAAE,sBAAsB;IACjC,OAAO,EAAE,sBAAsB;IAC/B,IAAI,EAAE,YAAY;IAClB,KAAK,EAAE,gBAAgB;IACvB,IAAI,EAAE,OAAO;CACd,CAAC;AAEF,6EAA6E;AAC7E,gFAAgF;AAChF,sEAAsE;AACtE,0DAA0D;AAC1D,SAAS,WAAW,CAAC,IAA4D;IAC/E,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,MAAM,GAA8B,EAAE,CAAC;IAC7C,MAAM,GAAG,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,MAAc,EAAE,CAA0B,EAAE,EAAE;QACrE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACrB,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACf,IAAI,MAAM,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC;YACxC,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,cAAc,CAAC,EAAE,CAAC,EAAE,CAAC;QAClG,CAAC;QACD,IAAI,MAAM,CAAC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,CAAC;YACvC,wDAAwD;YACxD,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,KAAK,SAAS,IAAI,IAAI,CAAC,WAAW,KAAM,CAAC,CAAC,SAAoB,CAAC;YAC9F,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC;QAC9C,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IACzB,CAAC,CAAC,CAAC;IACH,OAAO,EAAE,OAAO,EAAE,EAAE,GAAG,EAAS,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;AAC3D,CAAC;AAED,QAAQ,CAAC,cAAc,EAAE,GAAG,EAAE;IAC5B,EAAE,CAAC,+EAA+E,EAAE,KAAK,IAAI,EAAE;QAC7F,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,WAAW,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC,CAAC;QAC5F,MAAM,CAAC,GAAG,MAAM,YAAY,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;QACzD,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7B,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QACzC,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClC,MAAM,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1C,4DAA4D;QAC5D,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC;QAC9C,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,uBAAuB,CAAC,CAAC;QACpD,gFAAgF;QAChF,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,kCAAkC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvF,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC1E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gDAAgD,EAAE,KAAK,IAAI,EAAE;QAC9D,MAAM,EAAE,OAAO,EAAE,GAAG,WAAW,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC3E,MAAM,CAAC,GAAG,MAAM,YAAY,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;QACzD,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mDAAmD,EAAE,KAAK,IAAI,EAAE;QACjE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,WAAW,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,CAAC,CAAC;QACnF,MAAM,CAAC,GAAG,MAAM,YAAY,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;QACzD,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClC,MAAM,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1C,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,6BAA6B,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0DAA0D,EAAE,KAAK,IAAI,EAAE;QACxE,MAAM,EAAE,OAAO,EAAE,GAAG,WAAW,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,eAAe,EAAE,CAAC,CAAC;QACjF,MAAM,CAAC,GAAG,MAAM,YAAY,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;QACzD,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7B,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnC,MAAM,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,aAAa,EAAE,GAAG,EAAE;IAC3B,EAAE,CAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;QACnE,MAAM,GAAG,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;YAC7B,OAAO,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE,WAAW,CAAC,EAAE,CAAC;SACrD,CAAC,CAAC,CAAC;QACJ,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,EAAE,GAAG,EAAS,EAAE,QAAQ,EAAE,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;QACvE,kGAAkG;QAClG,MAAM,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC3C,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kCAAkC,EAAE,KAAK,IAAI,EAAE;QAChD,MAAM,GAAG,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE,WAAW,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QAC1F,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,EAAE,GAAG,EAAS,EAAE,QAAQ,EAAE,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;QACvE,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,mBAAmB,EAAE,CAAC,EAAE,cAAc,EAAE,CAAC,EAAE,CAAC,CAAC;IACxE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/payload/platform/plugins/scheduling/mcp/dist/lib/booking-notify.d.ts

@@ -0,0 +1,22 @@
+import type { BookingRow } from "./booking-reconcile.js";
+export interface NotifyDeps {
+    /** Admin destination address; email is skipped when absent. */
+    adminEmail?: string;
+    sendEmail?: (msg: {
+        to: string;
+        subject: string;
+        body: string;
+    }) => Promise<void>;
+    /** Admin WhatsApp thread; set ONLY when a thread already exists (reply-only). */
+    adminWhatsapp?: string;
+    sendWhatsapp?: (msg: {
+        to: string;
+        text: string;
+    }) => Promise<void>;
+}
+export interface NotifyResult {
+    channel: "email" | "whatsapp";
+    dispatched: boolean;
+}
+export declare function notifyBooking(deps: NotifyDeps, booking: BookingRow): Promise<NotifyResult[]>;
+//# sourceMappingURL=booking-notify.d.ts.map

package/payload/platform/plugins/scheduling/mcp/dist/lib/booking-notify.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"booking-notify.d.ts","sourceRoot":"","sources":["../../src/lib/booking-notify.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAEzD,MAAM,WAAW,UAAU;IACzB,+DAA+D;IAC/D,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,CAAC,GAAG,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAClF,iFAAiF;IACjF,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,YAAY,CAAC,EAAE,CAAC,GAAG,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CACrE;AAED,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,OAAO,GAAG,UAAU,CAAC;IAC9B,UAAU,EAAE,OAAO,CAAC;CACrB;AAOD,wBAAsB,aAAa,CACjC,IAAI,EAAE,UAAU,EAChB,OAAO,EAAE,UAAU,GAClB,OAAO,CAAC,YAAY,EAAE,CAAC,CA0BzB"}

package/payload/platform/plugins/scheduling/mcp/dist/lib/booking-notify.js

@@ -0,0 +1,31 @@
+function summary(booking) {
+    return `${booking.name} (${booking.email}) booked ${booking.slotStart}.` +
+        (booking.note ? ` Note: ${booking.note}` : "");
+}
+export async function notifyBooking(deps, booking) {
+    const results = [];
+    if (deps.adminEmail && deps.sendEmail) {
+        try {
+            await deps.sendEmail({
+                to: deps.adminEmail,
+                subject: `New booking: ${booking.name}`,
+                body: summary(booking),
+            });
+            results.push({ channel: "email", dispatched: true });
+        }
+        catch {
+            results.push({ channel: "email", dispatched: false });
+        }
+    }
+    if (deps.adminWhatsapp && deps.sendWhatsapp) {
+        try {
+            await deps.sendWhatsapp({ to: deps.adminWhatsapp, text: summary(booking) });
+            results.push({ channel: "whatsapp", dispatched: true });
+        }
+        catch {
+            results.push({ channel: "whatsapp", dispatched: false });
+        }
+    }
+    return results;
+}
+//# sourceMappingURL=booking-notify.js.map

package/payload/platform/plugins/scheduling/mcp/dist/lib/booking-notify.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"booking-notify.js","sourceRoot":"","sources":["../../src/lib/booking-notify.ts"],"names":[],"mappings":"AAwBA,SAAS,OAAO,CAAC,OAAmB;IAClC,OAAO,GAAG,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,KAAK,YAAY,OAAO,CAAC,SAAS,GAAG;QACtE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AACnD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,IAAgB,EAChB,OAAmB;IAEnB,MAAM,OAAO,GAAmB,EAAE,CAAC;IAEnC,IAAI,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;QACtC,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,SAAS,CAAC;gBACnB,EAAE,EAAE,IAAI,CAAC,UAAU;gBACnB,OAAO,EAAE,gBAAgB,OAAO,CAAC,IAAI,EAAE;gBACvC,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC;aACvB,CAAC,CAAC;YACH,OAAO,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;QACvD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC;QACxD,CAAC;IACH,CAAC;IAED,IAAI,IAAI,CAAC,aAAa,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;QAC5C,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,YAAY,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,aAAa,EAAE,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YAC5E,OAAO,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1D,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/payload/platform/plugins/scheduling/mcp/dist/lib/booking-reconcile.d.ts

@@ -0,0 +1,28 @@
+import type { Session } from "neo4j-driver";
+export interface BookingRow {
+    bookingId: string;
+    slotStart: string;
+    slotEnd: string;
+    name: string;
+    email: string;
+    note?: string;
+}
+export interface ReconcileResult {
+    created: boolean;
+    meetingId: string;
+    personLinked: boolean;
+    crossAccountSkipped: boolean;
+}
+export declare function bookingUid(bookingId: string): string;
+export declare function reconcileOne(session: Session, accountId: string, booking: BookingRow): Promise<ReconcileResult>;
+export interface AuditCounts {
+    pendingUnreconciled: number;
+    orphanMeetings: number;
+}
+/**
+ * Compare D1's accepted booking ids against the account's booking :Meeting set.
+ *   pendingUnreconciled — accepted in D1 but no :Meeting yet (reconcile lagging).
+ *   orphanMeetings      — a booking :Meeting with no backing D1 row.
+ */
+export declare function auditCounts(session: Session, accountId: string, d1AcceptedIds: string[]): Promise<AuditCounts>;
+//# sourceMappingURL=booking-reconcile.d.ts.map

package/payload/platform/plugins/scheduling/mcp/dist/lib/booking-reconcile.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"booking-reconcile.d.ts","sourceRoot":"","sources":["../../src/lib/booking-reconcile.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAE5C,MAAM,WAAW,UAAU;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,OAAO,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,OAAO,CAAC;IACtB,mBAAmB,EAAE,OAAO,CAAC;CAC9B;AAED,wBAAgB,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAEpD;AAED,wBAAsB,YAAY,CAChC,OAAO,EAAE,OAAO,EAChB,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,UAAU,GAClB,OAAO,CAAC,eAAe,CAAC,CA4D1B;AAED,MAAM,WAAW,WAAW;IAC1B,mBAAmB,EAAE,MAAM,CAAC;IAC5B,cAAc,EAAE,MAAM,CAAC;CACxB;AAED;;;;GAIG;AACH,wBAAsB,WAAW,CAC/B,OAAO,EAAE,OAAO,EAChB,SAAS,EAAE,MAAM,EACjB,aAAa,EAAE,MAAM,EAAE,GACtB,OAAO,CAAC,WAAW,CAAC,CAWtB"}

package/payload/platform/plugins/scheduling/mcp/dist/lib/booking-reconcile.js

@@ -0,0 +1,70 @@
+export function bookingUid(bookingId) {
+    return `booking-${bookingId}`;
+}
+export async function reconcileOne(session, accountId, booking) {
+    const uid = bookingUid(booking.bookingId);
+    const meetingRes = await session.run(`MERGE (m:Meeting {accountId: $accountId, uid: $uid})
+       ON CREATE SET m.title = $title,
+                     m.startsAt = datetime($slotStart),
+                     m.endsAt = datetime($slotEnd),
+                     m.scope = 'booking',
+                     m.source = 'booking',
+                     m.bookerEmail = $email,
+                     m.note = $note,
+                     m.isAllDay = false,
+                     m.createdAt = datetime(),
+                     m.updatedAt = datetime(),
+                     m.createdByAgent = 'booking-reconcile',
+                     m.createdBySource = 'booking-reconcile',
+                     m._created = true
+       ON MATCH SET  m.updatedAt = datetime(),
+                     m._created = false
+     WITH m, m._created AS created
+     REMOVE m._created
+     RETURN created, elementId(m) AS meetingId`, {
+        accountId,
+        uid,
+        title: `Booking: ${booking.name}`,
+        slotStart: booking.slotStart,
+        slotEnd: booking.slotEnd,
+        email: booking.email,
+        note: booking.note ?? "",
+    });
+    const created = meetingRes.records[0].get("created");
+    const meetingId = meetingRes.records[0].get("meetingId");
+    // Resolve the booker in one atomic statement that respects the global
+    // Person.email uniqueness constraint. MERGE on email matches any existing
+    // Person (without relabeling it — ON CREATE fires only on a fresh node) or
+    // creates one under this account. The ATTENDED link is written only when the
+    // resolved Person belongs to this account, so a foreign-account person is
+    // neither linked nor modified, and there is no check-then-create race that
+    // could throw the unique constraint and wedge the row.
+    const personRes = await session.run(`MATCH (m:Meeting) WHERE elementId(m) = $meetingId
+     MERGE (p:Person {email: $email})
+       ON CREATE SET p.accountId = $accountId,
+                     p.displayName = $name,
+                     p.scope = 'booking',
+                     p.source = 'booking-reconcile',
+                     p.createdAt = datetime()
+     FOREACH (_ IN CASE WHEN p.accountId = $accountId THEN [1] ELSE [] END |
+       MERGE (p)-[r:ATTENDED]->(m)
+         ON CREATE SET r.role = 'booker', r.createdAt = datetime(), r.createdBySource = 'booking-reconcile')
+     RETURN p.accountId = $accountId AS linked`, { meetingId, email: booking.email, accountId, name: booking.name });
+    const linked = personRes.records[0]?.get("linked") === true;
+    return { created, meetingId, personLinked: linked, crossAccountSkipped: !linked };
+}
+/**
+ * Compare D1's accepted booking ids against the account's booking :Meeting set.
+ *   pendingUnreconciled — accepted in D1 but no :Meeting yet (reconcile lagging).
+ *   orphanMeetings      — a booking :Meeting with no backing D1 row.
+ */
+export async function auditCounts(session, accountId, d1AcceptedIds) {
+    const res = await session.run(`MATCH (m:Meeting {accountId: $accountId, source: 'booking'}) RETURN collect(m.uid) AS uids`, { accountId });
+    const uids = res.records[0]?.get("uids") ?? [];
+    const uidSet = new Set(uids);
+    const idSet = new Set(d1AcceptedIds);
+    const pendingUnreconciled = d1AcceptedIds.filter((id) => !uidSet.has(bookingUid(id))).length;
+    const orphanMeetings = uids.filter((uid) => !idSet.has(uid.replace(/^booking-/, ""))).length;
+    return { pendingUnreconciled, orphanMeetings };
+}
+//# sourceMappingURL=booking-reconcile.js.map

package/payload/platform/plugins/scheduling/mcp/dist/lib/booking-reconcile.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"booking-reconcile.js","sourceRoot":"","sources":["../../src/lib/booking-reconcile.ts"],"names":[],"mappings":"AA2BA,MAAM,UAAU,UAAU,CAAC,SAAiB;IAC1C,OAAO,WAAW,SAAS,EAAE,CAAC;AAChC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,OAAgB,EAChB,SAAiB,EACjB,OAAmB;IAEnB,MAAM,GAAG,GAAG,UAAU,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAE1C,MAAM,UAAU,GAAG,MAAM,OAAO,CAAC,GAAG,CAClC;;;;;;;;;;;;;;;;;;+CAkB2C,EAC3C;QACE,SAAS;QACT,GAAG;QACH,KAAK,EAAE,YAAY,OAAO,CAAC,IAAI,EAAE;QACjC,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,EAAE;KACzB,CACF,CAAC;IACF,MAAM,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAY,CAAC;IAChE,MAAM,SAAS,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,CAAW,CAAC;IAEnE,sEAAsE;IACtE,0EAA0E;IAC1E,2EAA2E;IAC3E,6EAA6E;IAC7E,0EAA0E;IAC1E,2EAA2E;IAC3E,uDAAuD;IACvD,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,GAAG,CACjC;;;;;;;;;;+CAU2C,EAC3C,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CACnE,CAAC;IACF,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,QAAQ,CAAC,KAAK,IAAI,CAAC;IAE5D,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC,MAAM,EAAE,CAAC;AACpF,CAAC;AAOD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,OAAgB,EAChB,SAAiB,EACjB,aAAuB;IAEvB,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,CAC3B,4FAA4F,EAC5F,EAAE,SAAS,EAAE,CACd,CAAC;IACF,MAAM,IAAI,GAAa,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IACzD,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC;IAC7B,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,aAAa,CAAC,CAAC;IACrC,MAAM,mBAAmB,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IAC7F,MAAM,cAAc,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IAC7F,OAAO,EAAE,mBAAmB,EAAE,cAAc,EAAE,CAAC;AACjD,CAAC"}

package/payload/platform/plugins/scheduling/mcp/dist/scripts/reconcile-bookings.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Dispatcher script: reconcile-bookings
+ *
+ * Self-contained, like check-due-events. Pulls accepted booking rows from each
+ * account's Cloudflare D1 `bookings` table (written by the booking site's Pages
+ * Function), writes each into Neo4j as a :Meeting so it appears on the admin
+ * calendar, links the booker as a :Person, and notifies the admin. Marks each
+ * row swept so it reconciles exactly once. Ends with the standing audit.
+ *
+ * The Pi has no running periodic surface today (the legacy cron was removed and
+ * the desktop-scheduled-task replacement is not wired), so this binary is armed
+ * by the always-running platform/ui server on an interval. A PID lock prevents
+ * overlapping runs.
+ *
+ * Observability — one [calendar-booking] line per step keyed by bookingId, plus
+ * one [calendar-reconcile] audit line per account per run.
+ *
+ *   PLATFORM_ROOT=... NEO4J_URI=... node dist/scripts/reconcile-bookings.js
+ */
+export {};
+//# sourceMappingURL=reconcile-bookings.d.ts.map

package/payload/platform/plugins/scheduling/mcp/dist/scripts/reconcile-bookings.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"reconcile-bookings.d.ts","sourceRoot":"","sources":["../../src/scripts/reconcile-bookings.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG"}