@voyantjs/bookings 0.9.0 → 0.10.0

package/dist/index.d.ts

@@ -2,9 +2,11 @@ import type { LinkableDefinition, Module } from "@voyantjs/core";
 import type { HonoModule } from "@voyantjs/hono/module";
 export { bookingsSupplierExtension } from "./extensions/suppliers.js";
 export { type BookingPiiAuditEvent, type BookingPiiService, type BookingPiiServiceOptions, createBookingPiiService, type UpsertBookingTravelerTravelDetailInput, } from "./pii.js";
+export { type PiiAccessContext, redactBookingContact, redactEmail, redactPhone, redactString, redactTravelerIdentity, shouldRevealBookingPii, } from "./pii-redaction.js";
 export type { ConvertProductData } from "./service.js";
 export { bookingsService } from "./service.js";
 export { type AddBookingGroupMemberInput, type BookingGroupListQuery, type BookingGroupMemberWithBooking, bookingGroupsService, type CreateBookingGroupInput, listGroupBookingTravelers, type UpdateBookingGroupInput, } from "./service-groups.js";
+export { BOOKING_TRANSITIONS, type BookingStatus, type BookingStatusPatch, BookingTransitionError, canTransitionBooking, transitionBooking, } from "./state-machine.js";
 export { type ExpireStaleBookingHoldsInput, type ExpireStaleBookingHoldsResult, expireStaleBookingHolds, } from "./tasks/index.js";
 export declare const bookingLinkable: LinkableDefinition;
 export declare const bookingsLinkable: {

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAA;AAChE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAA;AAMvD,OAAO,EAAE,yBAAyB,EAAE,MAAM,2BAA2B,CAAA;AACrE,OAAO,EACL,KAAK,oBAAoB,EACzB,KAAK,iBAAiB,EACtB,KAAK,wBAAwB,EAC7B,uBAAuB,EACvB,KAAK,sCAAsC,GAC5C,MAAM,UAAU,CAAA;AACjB,YAAY,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAA;AACtD,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAA;AAC9C,OAAO,EACL,KAAK,0BAA0B,EAC/B,KAAK,qBAAqB,EAC1B,KAAK,6BAA6B,EAClC,oBAAoB,EACpB,KAAK,uBAAuB,EAC5B,yBAAyB,EACzB,KAAK,uBAAuB,GAC7B,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EACL,KAAK,4BAA4B,EACjC,KAAK,6BAA6B,EAClC,uBAAuB,GACxB,MAAM,kBAAkB,CAAA;AAEzB,eAAO,MAAM,eAAe,EAAE,kBAK7B,CAAA;AAED,eAAO,MAAM,gBAAgB;;CAE5B,CAAA;AAED,eAAO,MAAM,cAAc,EAAE,MAG5B,CAAA;AAED,wBAAgB,wBAAwB,IAAI,UAAU,CAiBrD;AAED,eAAO,MAAM,kBAAkB,EAAE,UAAuC,CAAA;AAExE,YAAY,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAA;AAC7D,OAAO,EACL,mCAAmC,EACnC,wBAAwB,GACzB,MAAM,oBAAoB,CAAA;AAC3B,YAAY,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAChD,YAAY,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAA;AAC7D,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAA;AACxD,YAAY,EACV,sBAAsB,EACtB,uBAAuB,EACvB,2BAA2B,EAC3B,oCAAoC,EACpC,8BAA8B,GAC/B,MAAM,4BAA4B,CAAA;AACnC,OAAO,EACL,4BAA4B,EAC5B,6BAA6B,EAC7B,uCAAuC,EACvC,uCAAuC,EACvC,4BAA4B,EAC5B,uCAAuC,EACvC,0CAA0C,GAC3C,MAAM,4BAA4B,CAAA;AACnC,YAAY,EACV,OAAO,EACP,eAAe,EACf,iBAAiB,EACjB,eAAe,EACf,kBAAkB,EAClB,YAAY,EACZ,kBAAkB,EAClB,WAAW,EACX,mBAAmB,EACnB,WAAW,EACX,mBAAmB,EACnB,sBAAsB,EACtB,mBAAmB,EACnB,sBAAsB,EACtB,qBAAqB,EACrB,eAAe,EACf,UAAU,EACV,kBAAkB,EAClB,oBAAoB,EACpB,kBAAkB,EAClB,qBAAqB,EACrB,eAAe,EACf,qBAAqB,EACrB,cAAc,EACd,sBAAsB,EACtB,cAAc,EACd,sBAAsB,EACtB,yBAAyB,EACzB,sBAAsB,EACtB,yBAAyB,EACzB,wBAAwB,EACxB,kBAAkB,GACnB,MAAM,aAAa,CAAA;AACpB,OAAO,EACL,kBAAkB,EAClB,kBAAkB,EAClB,gBAAgB,EAChB,mBAAmB,EACnB,oBAAoB,EACpB,0BAA0B,EAC1B,mBAAmB,EACnB,aAAa,EACb,YAAY,EACZ,oBAAoB,EACpB,YAAY,EACZ,mBAAmB,EACnB,uBAAuB,EACvB,oBAAoB,EACpB,uBAAuB,EACvB,uBAAuB,EACvB,QAAQ,EACR,gBAAgB,GACjB,MAAM,aAAa,CAAA;AACpB,OAAO,EAAE,qBAAqB,EAAE,6BAA6B,EAAE,MAAM,qBAAqB,CAAA;AAC1F,OAAO,EACL,2BAA2B,EAC3B,sBAAsB,EACtB,2BAA2B,EAC3B,4BAA4B,EAC5B,sBAAsB,EACtB,mBAAmB,EACnB,oBAAoB,EACpB,oBAAoB,EACpB,mBAAmB,EACnB,mBAAmB,EACnB,yBAAyB,EACzB,uBAAuB,EACvB,6BAA6B,EAC7B,2BAA2B,EAC3B,8BAA8B,EAC9B,wBAAwB,EACxB,uBAAuB,EACvB,+BAA+B,EAC/B,uBAAuB,EACvB,mBAAmB,EACnB,mCAAmC,EACnC,0BAA0B,EAC1B,oBAAoB,EACpB,wCAAwC,EACxC,oBAAoB,EACpB,sCAAsC,EACtC,kCAAkC,EAClC,qCAAqC,EACrC,uCAAuC,EACvC,wCAAwC,EACxC,+BAA+B,EAC/B,gCAAgC,EAChC,iCAAiC,EACjC,gCAAgC,EAChC,qCAAqC,EACrC,6BAA6B,EAC7B,mCAAmC,EACnC,oBAAoB,EACpB,6BAA6B,EAC7B,8BAA8B,EAC9B,wBAAwB,EACxB,uBAAuB,EACvB,mBAAmB,EACnB,yBAAyB,EACzB,0BAA0B,EAC1B,oBAAoB,EACpB,iCAAiC,GAClC,MAAM,iBAAiB,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAA;AAChE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAA;AAMvD,OAAO,EAAE,yBAAyB,EAAE,MAAM,2BAA2B,CAAA;AACrE,OAAO,EACL,KAAK,oBAAoB,EACzB,KAAK,iBAAiB,EACtB,KAAK,wBAAwB,EAC7B,uBAAuB,EACvB,KAAK,sCAAsC,GAC5C,MAAM,UAAU,CAAA;AACjB,OAAO,EACL,KAAK,gBAAgB,EACrB,oBAAoB,EACpB,WAAW,EACX,WAAW,EACX,YAAY,EACZ,sBAAsB,EACtB,sBAAsB,GACvB,MAAM,oBAAoB,CAAA;AAC3B,YAAY,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAA;AACtD,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAA;AAC9C,OAAO,EACL,KAAK,0BAA0B,EAC/B,KAAK,qBAAqB,EAC1B,KAAK,6BAA6B,EAClC,oBAAoB,EACpB,KAAK,uBAAuB,EAC5B,yBAAyB,EACzB,KAAK,uBAAuB,GAC7B,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EACL,mBAAmB,EACnB,KAAK,aAAa,EAClB,KAAK,kBAAkB,EACvB,sBAAsB,EACtB,oBAAoB,EACpB,iBAAiB,GAClB,MAAM,oBAAoB,CAAA;AAC3B,OAAO,EACL,KAAK,4BAA4B,EACjC,KAAK,6BAA6B,EAClC,uBAAuB,GACxB,MAAM,kBAAkB,CAAA;AAEzB,eAAO,MAAM,eAAe,EAAE,kBAK7B,CAAA;AAED,eAAO,MAAM,gBAAgB;;CAE5B,CAAA;AAED,eAAO,MAAM,cAAc,EAAE,MAG5B,CAAA;AAED,wBAAgB,wBAAwB,IAAI,UAAU,CAiBrD;AAED,eAAO,MAAM,kBAAkB,EAAE,UAAuC,CAAA;AAExE,YAAY,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAA;AAC7D,OAAO,EACL,mCAAmC,EACnC,wBAAwB,GACzB,MAAM,oBAAoB,CAAA;AAC3B,YAAY,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAChD,YAAY,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAA;AAC7D,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAA;AACxD,YAAY,EACV,sBAAsB,EACtB,uBAAuB,EACvB,2BAA2B,EAC3B,oCAAoC,EACpC,8BAA8B,GAC/B,MAAM,4BAA4B,CAAA;AACnC,OAAO,EACL,4BAA4B,EAC5B,6BAA6B,EAC7B,uCAAuC,EACvC,uCAAuC,EACvC,4BAA4B,EAC5B,uCAAuC,EACvC,0CAA0C,GAC3C,MAAM,4BAA4B,CAAA;AACnC,YAAY,EACV,OAAO,EACP,eAAe,EACf,iBAAiB,EACjB,eAAe,EACf,kBAAkB,EAClB,YAAY,EACZ,kBAAkB,EAClB,WAAW,EACX,mBAAmB,EACnB,WAAW,EACX,mBAAmB,EACnB,sBAAsB,EACtB,mBAAmB,EACnB,sBAAsB,EACtB,qBAAqB,EACrB,eAAe,EACf,UAAU,EACV,kBAAkB,EAClB,oBAAoB,EACpB,kBAAkB,EAClB,qBAAqB,EACrB,eAAe,EACf,qBAAqB,EACrB,cAAc,EACd,sBAAsB,EACtB,cAAc,EACd,sBAAsB,EACtB,yBAAyB,EACzB,sBAAsB,EACtB,yBAAyB,EACzB,wBAAwB,EACxB,kBAAkB,GACnB,MAAM,aAAa,CAAA;AACpB,OAAO,EACL,kBAAkB,EAClB,kBAAkB,EAClB,gBAAgB,EAChB,mBAAmB,EACnB,oBAAoB,EACpB,0BAA0B,EAC1B,mBAAmB,EACnB,aAAa,EACb,YAAY,EACZ,oBAAoB,EACpB,YAAY,EACZ,mBAAmB,EACnB,uBAAuB,EACvB,oBAAoB,EACpB,uBAAuB,EACvB,uBAAuB,EACvB,QAAQ,EACR,gBAAgB,GACjB,MAAM,aAAa,CAAA;AACpB,OAAO,EAAE,qBAAqB,EAAE,6BAA6B,EAAE,MAAM,qBAAqB,CAAA;AAC1F,OAAO,EACL,2BAA2B,EAC3B,sBAAsB,EACtB,2BAA2B,EAC3B,4BAA4B,EAC5B,sBAAsB,EACtB,mBAAmB,EACnB,oBAAoB,EACpB,oBAAoB,EACpB,mBAAmB,EACnB,mBAAmB,EACnB,yBAAyB,EACzB,uBAAuB,EACvB,6BAA6B,EAC7B,2BAA2B,EAC3B,8BAA8B,EAC9B,wBAAwB,EACxB,uBAAuB,EACvB,+BAA+B,EAC/B,uBAAuB,EACvB,mBAAmB,EACnB,mCAAmC,EACnC,0BAA0B,EAC1B,oBAAoB,EACpB,wCAAwC,EACxC,oBAAoB,EACpB,sCAAsC,EACtC,kCAAkC,EAClC,qCAAqC,EACrC,uCAAuC,EACvC,wCAAwC,EACxC,+BAA+B,EAC/B,gCAAgC,EAChC,iCAAiC,EACjC,gCAAgC,EAChC,qCAAqC,EACrC,6BAA6B,EAC7B,mCAAmC,EACnC,oBAAoB,EACpB,6BAA6B,EAC7B,8BAA8B,EAC9B,wBAAwB,EACxB,uBAAuB,EACvB,mBAAmB,EACnB,yBAAyB,EACzB,0BAA0B,EAC1B,oBAAoB,EACpB,iCAAiC,GAClC,MAAM,iBAAiB,CAAA"}

package/dist/index.js

@@ -3,8 +3,10 @@ import { bookingRoutes } from "./routes.js";
 import { publicBookingRoutes } from "./routes-public.js";
 export { bookingsSupplierExtension } from "./extensions/suppliers.js";
 export { createBookingPiiService, } from "./pii.js";
+export { redactBookingContact, redactEmail, redactPhone, redactString, redactTravelerIdentity, shouldRevealBookingPii, } from "./pii-redaction.js";
 export { bookingsService } from "./service.js";
 export { bookingGroupsService, listGroupBookingTravelers, } from "./service-groups.js";
+export { BOOKING_TRANSITIONS, BookingTransitionError, canTransitionBooking, transitionBooking, } from "./state-machine.js";
 export { expireStaleBookingHolds, } from "./tasks/index.js";
 export const bookingLinkable = {
     module: "bookings",

package/dist/markets-ref.d.ts

@@ -0,0 +1,151 @@
+/**
+ * Local reference to `markets.exchange_rates`. Bookings reads this
+ * table to convert per-item totals into the booking's base currency,
+ * but doesn't pull the markets package as a hard dep — the FK rule
+ * (intra-domain FKs OK, cross-domain MUST use plain text + links)
+ * means we mirror the columns we need with a `Ref`.
+ */
+export declare const exchangeRatesRef: import("drizzle-orm/pg-core").PgTableWithColumns<{
+    name: "exchange_rates";
+    schema: undefined;
+    columns: {
+        id: import("drizzle-orm/pg-core").PgColumn<{
+            name: string;
+            tableName: "exchange_rates";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: true;
+            isAutoincrement: false;
+            hasRuntimeDefault: true;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        fxRateSetId: import("drizzle-orm/pg-core").PgColumn<{
+            name: string;
+            tableName: "exchange_rates";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        baseCurrency: import("drizzle-orm/pg-core").PgColumn<{
+            name: "base_currency";
+            tableName: "exchange_rates";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        quoteCurrency: import("drizzle-orm/pg-core").PgColumn<{
+            name: "quote_currency";
+            tableName: "exchange_rates";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        rateDecimal: import("drizzle-orm/pg-core").PgColumn<{
+            name: "rate_decimal";
+            tableName: "exchange_rates";
+            dataType: "string";
+            columnType: "PgNumeric";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        inverseRateDecimal: import("drizzle-orm/pg-core").PgColumn<{
+            name: "inverse_rate_decimal";
+            tableName: "exchange_rates";
+            dataType: "string";
+            columnType: "PgNumeric";
+            data: string;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        observedAt: import("drizzle-orm/pg-core").PgColumn<{
+            name: "observed_at";
+            tableName: "exchange_rates";
+            dataType: "date";
+            columnType: "PgTimestamp";
+            data: Date;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        createdAt: import("drizzle-orm/pg-core").PgColumn<{
+            name: "created_at";
+            tableName: "exchange_rates";
+            dataType: "date";
+            columnType: "PgTimestamp";
+            data: Date;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+    };
+    dialect: "pg";
+}>;
+//# sourceMappingURL=markets-ref.d.ts.map

package/dist/markets-ref.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"markets-ref.d.ts","sourceRoot":"","sources":["../src/markets-ref.ts"],"names":[],"mappings":"AAGA;;;;;;GAMG;AACH,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAS3B,CAAA"}

package/dist/markets-ref.js

@@ -0,0 +1,19 @@
+import { typeId, typeIdRef } from "@voyantjs/db/lib/typeid-column";
+import { numeric, pgTable, text, timestamp } from "drizzle-orm/pg-core";
+/**
+ * Local reference to `markets.exchange_rates`. Bookings reads this
+ * table to convert per-item totals into the booking's base currency,
+ * but doesn't pull the markets package as a hard dep — the FK rule
+ * (intra-domain FKs OK, cross-domain MUST use plain text + links)
+ * means we mirror the columns we need with a `Ref`.
+ */
+export const exchangeRatesRef = pgTable("exchange_rates", {
+    id: typeId("exchange_rates").primaryKey(),
+    fxRateSetId: typeIdRef("fx_rate_set_id").notNull(),
+    baseCurrency: text("base_currency").notNull(),
+    quoteCurrency: text("quote_currency").notNull(),
+    rateDecimal: numeric("rate_decimal", { precision: 18, scale: 8 }).notNull(),
+    inverseRateDecimal: numeric("inverse_rate_decimal", { precision: 18, scale: 8 }),
+    observedAt: timestamp("observed_at", { withTimezone: true }),
+    createdAt: timestamp("created_at", { withTimezone: true }).notNull(),
+});

package/dist/pii-redaction.d.ts

@@ -0,0 +1,89 @@
+/**
+ * Booking PII redaction.
+ *
+ * Booking rows and traveler rows store contact identifiers (name, email,
+ * phone) as plaintext columns so the operator UI can search and sort. The
+ * `bookings-pii:*` scope (or `*` superuser scope) gates the right to see
+ * those identifiers verbatim. Callers without that scope receive a redacted
+ * shape that retains enough signal for operational triage but not enough to
+ * exfiltrate a full contact list.
+ *
+ * **Scope of this module:** route-layer redaction at the API boundary.
+ * Internal callers (cron jobs, workflows, in-process tasks) bypass redaction
+ * because they need the full record to do their job.
+ *
+ * **What this does NOT do:** encrypt the columns at rest. That is a
+ * follow-up requiring a schema migration + a search-tokenisation strategy
+ * (see issue #283 follow-up). For now plaintext-on-disk + redact-in-flight
+ * is the documented posture.
+ */
+export interface PiiAccessContext {
+    actor?: string | null;
+    scopes?: string[] | null;
+    callerType?: string | null;
+    isInternalRequest?: boolean;
+}
+/**
+ * Returns true when the caller has earned the right to see PII in the clear.
+ *
+ * Internal requests (server-to-server inside the trust boundary) and API
+ * keys with explicit `bookings-pii:read` scope (or superuser `*`) reveal.
+ * Plain staff sessions WITHOUT the scope do NOT reveal — staff are
+ * authorised to see *some* booking data but not necessarily the contact
+ * identifiers. This makes "give the new agent a read-only role" safe by
+ * default; granting `bookings-pii:read` is an explicit decision.
+ */
+export declare function shouldRevealBookingPii(ctx: PiiAccessContext): boolean;
+/**
+ * Mask the local-part of an email, preserving the domain so the operator
+ * can tell at a glance which provider is involved.
+ *
+ * `alice@example.com` → `a***e@example.com`
+ * `bo@example.com`    → `**@example.com`
+ */
+export declare function redactEmail(email: string | null | undefined): string | null;
+/**
+ * Mask all but the last four digits of a phone number, dropping
+ * non-digit characters from the masked region so the result is recognisable
+ * as a phone fragment.
+ *
+ * `+40 712 345 678` → `***5678`
+ */
+export declare function redactPhone(phone: string | null | undefined): string | null;
+/**
+ * Masks an arbitrary identifier like a postal address or city to a single-
+ * char marker. We keep the field present so client schemas don't break,
+ * but the value is effectively absent.
+ */
+export declare function redactString(value: string | null | undefined): string | null;
+/**
+ * Booking row contact-PII redaction. Returns a shallow copy with the
+ * `contact*` columns masked. Caller is responsible for not running this on
+ * already-redacted rows.
+ */
+export declare function redactBookingContact<T extends {
+    contactFirstName?: string | null;
+    contactLastName?: string | null;
+    contactEmail?: string | null;
+    contactPhone?: string | null;
+    contactAddressLine1?: string | null;
+    contactPostalCode?: string | null;
+}>(row: T): T;
+/**
+ * Traveler row redaction. Same shape as `redactBookingContact` but for
+ * traveler identity columns.
+ *
+ * `accessibilityNeeds` is intentionally NOT in the redacted set — it was
+ * moved to the encrypted `bookingTravelerTravelDetails` table (#283) and
+ * is only ever returned through `createBookingPiiService` after
+ * decryption + audit. It's never present on this row shape.
+ */
+export declare function redactTravelerIdentity<T extends {
+    firstName?: string | null;
+    lastName?: string | null;
+    email?: string | null;
+    phone?: string | null;
+    specialRequests?: string | null;
+    notes?: string | null;
+}>(row: T): T;
+//# sourceMappingURL=pii-redaction.d.ts.map

package/dist/pii-redaction.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pii-redaction.d.ts","sourceRoot":"","sources":["../src/pii-redaction.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAMH,MAAM,WAAW,gBAAgB;IAC/B,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACrB,MAAM,CAAC,EAAE,MAAM,EAAE,GAAG,IAAI,CAAA;IACxB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC1B,iBAAiB,CAAC,EAAE,OAAO,CAAA;CAC5B;AAED;;;;;;;;;GASG;AACH,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,gBAAgB,GAAG,OAAO,CAQrE;AAED;;;;;;GAMG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,GAAG,IAAI,CAQ3E;AAED;;;;;;GAMG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,GAAG,IAAI,CAK3E;AAED;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,GAAG,IAAI,CAG5E;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAClC,CAAC,SAAS;IACR,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAChC,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC/B,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC5B,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC5B,mBAAmB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACnC,iBAAiB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAClC,EACD,GAAG,EAAE,CAAC,GAAG,CAAC,CAUX;AAED;;;;;;;;GAQG;AACH,wBAAgB,sBAAsB,CACpC,CAAC,SAAS;IACR,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACzB,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACrB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACrB,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC/B,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CACtB,EACD,GAAG,EAAE,CAAC,GAAG,CAAC,CAUX"}

package/dist/pii-redaction.js

@@ -0,0 +1,120 @@
+/**
+ * Booking PII redaction.
+ *
+ * Booking rows and traveler rows store contact identifiers (name, email,
+ * phone) as plaintext columns so the operator UI can search and sort. The
+ * `bookings-pii:*` scope (or `*` superuser scope) gates the right to see
+ * those identifiers verbatim. Callers without that scope receive a redacted
+ * shape that retains enough signal for operational triage but not enough to
+ * exfiltrate a full contact list.
+ *
+ * **Scope of this module:** route-layer redaction at the API boundary.
+ * Internal callers (cron jobs, workflows, in-process tasks) bypass redaction
+ * because they need the full record to do their job.
+ *
+ * **What this does NOT do:** encrypt the columns at rest. That is a
+ * follow-up requiring a schema migration + a search-tokenisation strategy
+ * (see issue #283 follow-up). For now plaintext-on-disk + redact-in-flight
+ * is the documented posture.
+ */
+const PII_SCOPE_ANY = "bookings-pii:*";
+const PII_SCOPE_READ = "bookings-pii:read";
+const SUPERUSER_SCOPE = "*";
+/**
+ * Returns true when the caller has earned the right to see PII in the clear.
+ *
+ * Internal requests (server-to-server inside the trust boundary) and API
+ * keys with explicit `bookings-pii:read` scope (or superuser `*`) reveal.
+ * Plain staff sessions WITHOUT the scope do NOT reveal — staff are
+ * authorised to see *some* booking data but not necessarily the contact
+ * identifiers. This makes "give the new agent a read-only role" safe by
+ * default; granting `bookings-pii:read` is an explicit decision.
+ */
+export function shouldRevealBookingPii(ctx) {
+    if (ctx.isInternalRequest)
+        return true;
+    const scopes = ctx.scopes ?? [];
+    return (scopes.includes(SUPERUSER_SCOPE) ||
+        scopes.includes(PII_SCOPE_ANY) ||
+        scopes.includes(PII_SCOPE_READ));
+}
+/**
+ * Mask the local-part of an email, preserving the domain so the operator
+ * can tell at a glance which provider is involved.
+ *
+ * `alice@example.com` → `a***e@example.com`
+ * `bo@example.com`    → `**@example.com`
+ */
+export function redactEmail(email) {
+    if (email == null)
+        return email ?? null;
+    const at = email.lastIndexOf("@");
+    if (at < 1)
+        return "***";
+    const local = email.slice(0, at);
+    const domain = email.slice(at);
+    if (local.length <= 2)
+        return `${"*".repeat(local.length)}${domain}`;
+    return `${local[0]}***${local[local.length - 1]}${domain}`;
+}
+/**
+ * Mask all but the last four digits of a phone number, dropping
+ * non-digit characters from the masked region so the result is recognisable
+ * as a phone fragment.
+ *
+ * `+40 712 345 678` → `***5678`
+ */
+export function redactPhone(phone) {
+    if (phone == null)
+        return phone ?? null;
+    const digits = phone.replace(/\D/g, "");
+    if (digits.length <= 4)
+        return "***";
+    return `***${digits.slice(-4)}`;
+}
+/**
+ * Masks an arbitrary identifier like a postal address or city to a single-
+ * char marker. We keep the field present so client schemas don't break,
+ * but the value is effectively absent.
+ */
+export function redactString(value) {
+    if (value == null)
+        return value ?? null;
+    return value.length === 0 ? value : "***";
+}
+/**
+ * Booking row contact-PII redaction. Returns a shallow copy with the
+ * `contact*` columns masked. Caller is responsible for not running this on
+ * already-redacted rows.
+ */
+export function redactBookingContact(row) {
+    return {
+        ...row,
+        contactFirstName: redactString(row.contactFirstName),
+        contactLastName: redactString(row.contactLastName),
+        contactEmail: redactEmail(row.contactEmail),
+        contactPhone: redactPhone(row.contactPhone),
+        contactAddressLine1: redactString(row.contactAddressLine1),
+        contactPostalCode: redactString(row.contactPostalCode),
+    };
+}
+/**
+ * Traveler row redaction. Same shape as `redactBookingContact` but for
+ * traveler identity columns.
+ *
+ * `accessibilityNeeds` is intentionally NOT in the redacted set — it was
+ * moved to the encrypted `bookingTravelerTravelDetails` table (#283) and
+ * is only ever returned through `createBookingPiiService` after
+ * decryption + audit. It's never present on this row shape.
+ */
+export function redactTravelerIdentity(row) {
+    return {
+        ...row,
+        firstName: redactString(row.firstName),
+        lastName: redactString(row.lastName),
+        email: redactEmail(row.email),
+        phone: redactPhone(row.phone),
+        specialRequests: redactString(row.specialRequests),
+        notes: redactString(row.notes),
+    };
+}

package/dist/pii.d.ts

@@ -7,6 +7,7 @@ export interface UpsertBookingTravelerTravelDetailInput {
     passportExpiry?: string | null;
     dateOfBirth?: string | null;
     dietaryRequirements?: string | null;
+    accessibilityNeeds?: string | null;
     isLeadTraveler?: boolean | null;
 }
 export interface BookingPiiAuditEvent {

package/dist/pii.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"pii.d.ts","sourceRoot":"","sources":["../src/pii.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAA;AAG1D,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAA;AACjE,OAAO,EAIL,KAAK,oCAAoC,EAC1C,MAAM,4BAA4B,CAAA;AAGnC,MAAM,WAAW,sCAAsC;IACrD,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3B,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC9B,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC9B,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3B,mBAAmB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACnC,cAAc,CAAC,EAAE,OAAO,GAAG,IAAI,CAAA;CAChC;AAED,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,SAAS,GAAG,SAAS,GAAG,QAAQ,CAAA;IACxC,UAAU,EAAE,MAAM,CAAA;IAClB,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CACxB;AAED,MAAM,WAAW,wBAAwB;IACvC,GAAG,EAAE,WAAW,CAAA;IAChB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,oBAAoB,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CAChE;AAED,MAAM,WAAW,iBAAiB;IAChC,wBAAwB,CACtB,EAAE,EAAE,kBAAkB,EACtB,UAAU,EAAE,MAAM,EAClB,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,GACtB,OAAO,CAAC,oCAAoC,GAAG,IAAI,CAAC,CAAA;IACvD,2BAA2B,CACzB,EAAE,EAAE,kBAAkB,EACtB,UAAU,EAAE,MAAM,EAClB,KAAK,EAAE,sCAAsC,EAC7C,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,GACtB,OAAO,CAAC,oCAAoC,GAAG,IAAI,CAAC,CAAA;IACvD,2BAA2B,CACzB,EAAE,EAAE,kBAAkB,EACtB,UAAU,EAAE,MAAM,EAClB,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,GACtB,OAAO,CAAC;QAAE,UAAU,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC,CAAA;CAC1C;AAqGD,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,wBAAwB,GAAG,iBAAiB,CAuH5F"}
+{"version":3,"file":"pii.d.ts","sourceRoot":"","sources":["../src/pii.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAA;AAG1D,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAA;AACjE,OAAO,EAKL,KAAK,oCAAoC,EAC1C,MAAM,4BAA4B,CAAA;AAGnC,MAAM,WAAW,sCAAsC;IACrD,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3B,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC9B,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC9B,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3B,mBAAmB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACnC,kBAAkB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAClC,cAAc,CAAC,EAAE,OAAO,GAAG,IAAI,CAAA;CAChC;AAED,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,SAAS,GAAG,SAAS,GAAG,QAAQ,CAAA;IACxC,UAAU,EAAE,MAAM,CAAA;IAClB,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CACxB;AAED,MAAM,WAAW,wBAAwB;IACvC,GAAG,EAAE,WAAW,CAAA;IAChB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,oBAAoB,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CAChE;AAED,MAAM,WAAW,iBAAiB;IAChC,wBAAwB,CACtB,EAAE,EAAE,kBAAkB,EACtB,UAAU,EAAE,MAAM,EAClB,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,GACtB,OAAO,CAAC,oCAAoC,GAAG,IAAI,CAAC,CAAA;IACvD,2BAA2B,CACzB,EAAE,EAAE,kBAAkB,EACtB,UAAU,EAAE,MAAM,EAClB,KAAK,EAAE,sCAAsC,EAC7C,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,GACtB,OAAO,CAAC,oCAAoC,GAAG,IAAI,CAAC,CAAA;IACvD,2BAA2B,CACzB,EAAE,EAAE,kBAAkB,EACtB,UAAU,EAAE,MAAM,EAClB,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,GACtB,OAAO,CAAC;QAAE,UAAU,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC,CAAA;CAC1C;AA4HD,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,wBAAwB,GAAG,iBAAiB,CAqI5F"}

package/dist/pii.js

@@ -1,6 +1,6 @@
 import { decryptOptionalJsonEnvelope, encryptOptionalJsonEnvelope } from "@voyantjs/utils";
 import { eq } from "drizzle-orm";
-import { bookingTravelerDietarySchema, bookingTravelerIdentitySchema, bookingTravelerTravelDetails, } from "./schema/travel-details.js";
+import { bookingTravelerAccessibilitySchema, bookingTravelerDietarySchema, bookingTravelerIdentitySchema, bookingTravelerTravelDetails, } from "./schema/travel-details.js";
 import { bookingTravelers } from "./schema.js";
 function buildIdentityPayload(input) {
     const payload = bookingTravelerIdentitySchema.parse({
@@ -26,6 +26,15 @@ function buildDietaryPayload(input) {
     }
     return payload;
 }
+function buildAccessibilityPayload(input) {
+    const payload = bookingTravelerAccessibilitySchema.parse({
+        accessibilityNeeds: input.accessibilityNeeds ?? null,
+    });
+    if (!payload.accessibilityNeeds) {
+        return null;
+    }
+    return payload;
+}
 async function loadExistingTravelDetails(db, travelerId, options, keyRef) {
     const [row] = await db
         .select()
@@ -37,12 +46,14 @@ async function loadExistingTravelDetails(db, travelerId, options, keyRef) {
     }
     const identity = await decryptOptionalJsonEnvelope(options.kms, keyRef, row.identityEncrypted, bookingTravelerIdentitySchema);
     const dietary = await decryptOptionalJsonEnvelope(options.kms, keyRef, row.dietaryEncrypted, bookingTravelerDietarySchema);
+    const accessibility = await decryptOptionalJsonEnvelope(options.kms, keyRef, row.accessibilityEncrypted, bookingTravelerAccessibilitySchema);
     return {
         nationality: identity?.nationality ?? null,
         passportNumber: identity?.passportNumber ?? null,
         passportExpiry: identity?.passportExpiry ?? null,
         dateOfBirth: identity?.dateOfBirth ?? null,
         dietaryRequirements: dietary?.dietaryRequirements ?? null,
+        accessibilityNeeds: accessibility?.accessibilityNeeds ?? null,
         isLeadTraveler: row.isLeadTraveler,
     };
 }
@@ -59,6 +70,9 @@ function mergeTravelDetailInput(existing, input) {
         dietaryRequirements: input.dietaryRequirements === undefined
             ? (existing?.dietaryRequirements ?? null)
             : input.dietaryRequirements,
+        accessibilityNeeds: input.accessibilityNeeds === undefined
+            ? (existing?.accessibilityNeeds ?? null)
+            : input.accessibilityNeeds,
         isLeadTraveler: input.isLeadTraveler === undefined
             ? (existing?.isLeadTraveler ?? false)
             : input.isLeadTraveler,
@@ -78,6 +92,7 @@ export function createBookingPiiService(options) {
             }
             const identity = await decryptOptionalJsonEnvelope(options.kms, keyRef, row.identityEncrypted, bookingTravelerIdentitySchema);
             const dietary = await decryptOptionalJsonEnvelope(options.kms, keyRef, row.dietaryEncrypted, bookingTravelerDietarySchema);
+            const accessibility = await decryptOptionalJsonEnvelope(options.kms, keyRef, row.accessibilityEncrypted, bookingTravelerAccessibilitySchema);
             await options.onAudit?.({ action: "decrypt", travelerId, actorId });
             return {
                 travelerId: row.travelerId,
@@ -86,6 +101,7 @@ export function createBookingPiiService(options) {
                 passportExpiry: identity?.passportExpiry ?? null,
                 dateOfBirth: identity?.dateOfBirth ?? null,
                 dietaryRequirements: dietary?.dietaryRequirements ?? null,
+                accessibilityNeeds: accessibility?.accessibilityNeeds ?? null,
                 isLeadTraveler: row.isLeadTraveler,
                 createdAt: row.createdAt,
                 updatedAt: row.updatedAt,
@@ -104,6 +120,7 @@ export function createBookingPiiService(options) {
             const mergedInput = mergeTravelDetailInput(existing, input);
             const identityEncrypted = await encryptOptionalJsonEnvelope(options.kms, keyRef, buildIdentityPayload(mergedInput));
             const dietaryEncrypted = await encryptOptionalJsonEnvelope(options.kms, keyRef, buildDietaryPayload(mergedInput));
+            const accessibilityEncrypted = await encryptOptionalJsonEnvelope(options.kms, keyRef, buildAccessibilityPayload(mergedInput));
             const now = new Date();
             await db
                 .insert(bookingTravelerTravelDetails)
@@ -111,6 +128,7 @@ export function createBookingPiiService(options) {
                 travelerId,
                 identityEncrypted,
                 dietaryEncrypted,
+                accessibilityEncrypted,
                 isLeadTraveler: mergedInput.isLeadTraveler ?? false,
                 updatedAt: now,
             })
@@ -119,6 +137,7 @@ export function createBookingPiiService(options) {
                 set: {
                     identityEncrypted,
                     dietaryEncrypted,
+                    accessibilityEncrypted,
                     isLeadTraveler: mergedInput.isLeadTraveler ?? false,
                     updatedAt: now,
                 },

package/dist/routes-groups.d.ts

@@ -107,6 +107,7 @@ export declare const bookingGroupRoutes: import("hono/hono-base").HonoBase<Env,
                             contactPostalCode: string | null;
                             sellCurrency: string;
                             baseCurrency: string | null;
+                            fxRateSetId: string | null;
                             sellAmountCents: number | null;
                             baseSellAmountCents: number | null;
                             costAmountCents: number | null;
@@ -243,6 +244,7 @@ export declare const bookingGroupRoutes: import("hono/hono-base").HonoBase<Env,
                         contactPostalCode: string | null;
                         sellCurrency: string;
                         baseCurrency: string | null;
+                        fxRateSetId: string | null;
                         sellAmountCents: number | null;
                         baseSellAmountCents: number | null;
                         costAmountCents: number | null;
@@ -353,13 +355,12 @@ export declare const bookingGroupRoutes: import("hono/hono-base").HonoBase<Env,
                     email: string | null;
                     firstName: string;
                     lastName: string;
-                    personId: string | null;
                     bookingId: string;
+                    personId: string | null;
                     participantType: "other" | "traveler" | "occupant";
                     travelerCategory: "other" | "adult" | "child" | "infant" | "senior" | null;
                     phone: string | null;
                     preferredLanguage: string | null;
-                    accessibilityNeeds: string | null;
                     specialRequests: string | null;
                     isPrimary: boolean;
                 }[];

package/dist/routes-groups.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"routes-groups.d.ts","sourceRoot":"","sources":["../src/routes-groups.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAA;AAQ1D,KAAK,GAAG,GAAG;IACT,SAAS,EAAE;QACT,EAAE,EAAE,UAAU,CAAC,OAAO,oBAAoB,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAA;QAChE,MAAM,CAAC,EAAE,MAAM,CAAA;KAChB,CAAA;CACF,CAAA;AAED,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;yBA0E3B,CAAA;AAEJ,MAAM,MAAM,kBAAkB,GAAG,OAAO,kBAAkB,CAAA"}
+{"version":3,"file":"routes-groups.d.ts","sourceRoot":"","sources":["../src/routes-groups.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAA;AAQ1D,KAAK,GAAG,GAAG;IACT,SAAS,EAAE;QACT,EAAE,EAAE,UAAU,CAAC,OAAO,oBAAoB,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAA;QAChE,MAAM,CAAC,EAAE,MAAM,CAAA;KAChB,CAAA;CACF,CAAA;AAED,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;yBA0E3B,CAAA;AAEJ,MAAM,MAAM,kBAAkB,GAAG,OAAO,kBAAkB,CAAA"}

package/dist/routes-public.d.ts

@@ -27,17 +27,6 @@ export declare const publicBookingRoutes: import("hono/hono-base").HonoBase<Env,
 } & {
     "/sessions/:sessionId": {
         $get: {
-            input: {
-                param: {
-                    sessionId: string;
-                };
-            };
-            output: {
-                error: string;
-            };
-            outputFormat: "json";
-            status: 404;
-        } | {
             input: {
                 param: {
                     sessionId: string;
@@ -69,7 +58,6 @@ export declare const publicBookingRoutes: import("hono/hono-base").HonoBase<Env,
                         email: string | null;
                         phone: string | null;
                         preferredLanguage: string | null;
-                        accessibilityNeeds: string | null;
                         specialRequests: string | null;
                         isPrimary: boolean;
                         notes: string | null;
@@ -140,6 +128,17 @@ export declare const publicBookingRoutes: import("hono/hono-base").HonoBase<Env,
             };
             outputFormat: "json";
             status: import("hono/utils/http-status").ContentfulStatusCode;
+        } | {
+            input: {
+                param: {
+                    sessionId: string;
+                };
+            };
+            output: {
+                error: string;
+            };
+            outputFormat: "json";
+            status: 404;
         };
     };
 } & {
@@ -344,7 +343,6 @@ export declare const publicBookingRoutes: import("hono/hono-base").HonoBase<Env,
                             email: string | null;
                             phone: string | null;
                             preferredLanguage: string | null;
-                            accessibilityNeeds: string | null;
                             specialRequests: string | null;
                             isPrimary: boolean;
                             notes: string | null;

package/dist/routes-public.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"routes-public.d.ts","sourceRoot":"","sources":["../src/routes-public.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,KAAK,GAAG,EAAY,MAAM,oBAAoB,CAAA;AAsCvD,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;oBAmI5B,CAAA;AAEJ,MAAM,MAAM,mBAAmB,GAAG,OAAO,mBAAmB,CAAA"}
+{"version":3,"file":"routes-public.d.ts","sourceRoot":"","sources":["../src/routes-public.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,KAAK,GAAG,EAAY,MAAM,oBAAoB,CAAA;AAsCvD,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;oBAuI5B,CAAA;AAEJ,MAAM,MAAM,mBAAmB,GAAG,OAAO,mBAAmB,CAAA"}

package/dist/routes-public.js

@@ -1,4 +1,4 @@
-import { parseJsonBody, parseQuery } from "@voyantjs/hono";
+import { idempotencyKey, parseJsonBody, parseQuery } from "@voyantjs/hono";
 import { Hono } from "hono";
 import { notFound } from "./routes-shared.js";
 import { publicBookingsService } from "./service-public.js";
@@ -27,7 +27,7 @@ function sessionConflictError(status) {
     }
 }
 export const publicBookingRoutes = new Hono()
-    .post("/sessions", async (c) => {
+    .post("/sessions", idempotencyKey({ scope: "POST /v1/public/bookings/sessions" }), async (c) => {
     const result = await publicBookingsService.createSession(c.get("db"), await parseJsonBody(c, publicCreateBookingSessionSchema), c.get("userId"));
     if (result.status === "slot_not_found") {
         return notFound(c, "Availability slot not found");
@@ -80,7 +80,7 @@ export const publicBookingRoutes = new Hono()
         },
     });
 })
-    .post("/sessions/:sessionId/confirm", async (c) => {
+    .post("/sessions/:sessionId/confirm", idempotencyKey({ scope: "POST /v1/public/bookings/sessions/confirm" }), async (c) => {
     const result = await publicBookingsService.confirmSession(c.get("db"), c.req.param("sessionId"), await parseJsonBody(c, publicBookingSessionMutationSchema), c.get("userId"));
     if (result.status === "not_found") {
         return notFound(c, "Booking session not found");