domma-cms 0.104.2 → 0.105.0

package/CLAUDE.md

@@ -234,6 +234,15 @@ renderer appends `?today=YYYY-MM-DD` (the BROWSER's day). A view whose number ch
 route; counts also refresh every minute. Plugin sub-items (`children`) are NOT rendered in the
 sidebar - put a plugin's `countUrl` on its top-level entry. See "Live counts" in sidebar-renderer.js.
 
+**Instant calls ("Call Sam now…") are core code that only a Pro Tool switches on** - `services/instantCalls.js`,
+`routes/api/calls.js`, `routes/call-public.js`, admin `#/calls/new`. `hooks.enableInstantCalls()` (plugins.js binds it
+to the manifest) is accepted only from a `tier: "paid"` + `closedSource: true` plugin; with none, `/api/calls` is 404,
+`/_call/*` falls through to the pages and no related action exists; `runLifecycleHook(onDisable)` takes a plugin's hold
+off at once. The admin grant rides the awaited access step after `registerPluginAccess` (roles.js writes unlocked).
+While an OLDER Booking Pro 0.3.x registers its own related provider `booking-pro-call`, core's provider stands aside
+(`when`, checked per request) so "Call … now" never shows twice. `/_call` renders with `renderBlogPage(..., {injection:
+false})` - no injected snippets or beacon near a URL that carries a host key.
+
 ## Config Reference
 
 | File                         | Owner                 | Purpose                                         |

package/admin/js/app.js

@@ -1,4 +1,4 @@
-import{views as q}from"./views/index.js";import{withPluginChrome as B}from"./lib/plugin-chrome.js";import{api as r,getUser as O,isAuthenticated as u,logout as G,sendToLogin as z}from"./api.js";import{isAuthScreen as C,loginHashFor as K}from"./lib/login-arrange.js";import{installHttpInterceptor as J}from"./http-interceptor.js";import{installResizableSlideovers as Y}from"./lib/slideover-resizable.js";import{installActivityThrobber as Q}from"./lib/activity-throbber.js";import{isPathAllowed as X,redirectFor as Z}from"./lib/admin-scope.js";import{deliverDesktop as tt,desktopActive as et,notificationSettings as it}from"./lib/desktop-notify.js";import{avatarUrl as ot}from"./lib/avatar.js";$(()=>{J(),Q(),Y(),(async()=>{const{applyAdminTheme:t,refreshAdminTheme:e}=await import("./lib/admin-theme.js");u()?await e(r,{init:!0}):t({dommaTheme:"charcoal-dark"},{init:!0})})();let c=null,l="/",h=!1,w=null;function D(t){if(y[t])return E.toast(`${y[t]} is switched off on this site.`,{type:"info"}),"/";const e=b[t]||Z(c,t);return e||((t.split("?")[0]||"/")==="/"&&l&&l!=="/"?b[l]||l:null)}const b={},y={};R.use(async(t,e,i)=>{if(C(t.path))return i();if(!u()){z();return}const o=D(t.path);if(o){R.navigate(o);return}i()});async function g(){try{const t=await r.get("/auth/permissions");c=t.adminScope||null,l=t.adminHome||"/";const e=t.permissions||[];return h=X(c,"/settings")&&e.some(i=>i==="settings"||i.startsWith("settings.")),w=e.some(i=>i==="notifications"||i.startsWith("notifications.")),e}catch{return c=null,l="/",h=!1,w=null,[]}}document.addEventListener("dm:admin-home-changed",()=>{g()});let P=null,N=!1;document.addEventListener("dm:sidebar-rebuild",()=>{if(P){N=!0;return}P=(async()=>{do{N=!1;try{await j(await g())}catch{}}while(N)})().finally(()=>{P=null})});async function j(t){const{renderAdminSidebar:e}=await import("./lib/sidebar-renderer.js");await e({mount:"#admin-sidebar",permissions:t,adminScope:c})}M.subscribe("router:afterChange",({to:t})=>{C(t.path)&&(d&&(clearInterval(d),d=null),c=null,l="/",h=!1,w=null)});const F=[{path:"/",view:"dashboard",title:"Dashboard - Domma CMS"},{path:"/pages",view:"pages",title:"Pages - Domma CMS"},{path:"/pages/new",view:"pageEditor",title:"New Page - Domma CMS"},{path:"/pages/edit/*",view:"pageEditor",title:"Edit Page - Domma CMS"},{path:"/media",view:"media",title:"Media - Domma CMS"},{path:"/menus",view:"menus",title:"Menus - Domma CMS"},{path:"/context-menus",view:"contextMenus",title:"Context Menus - Domma CMS"},{path:"/context-menus/new",view:"contextMenuEditor",title:"New Context Menu - Domma CMS"},{path:"/context-menus/edit/:slug",view:"contextMenuEditor",title:"Edit Context Menu - Domma CMS"},{path:"/menus/new",view:"menuEditor",title:"New Menu - Domma CMS"},{path:"/menus/edit/:slug",view:"menuEditor",title:"Edit Menu - Domma CMS"},{path:"/menu-locations",view:"menuLocations",title:"Menu Locations - Domma CMS"},{path:"/navigation",view:"menusRedirect",title:"Menus - Domma CMS"},{path:"/layouts",view:"layouts",title:"Layouts - Domma CMS"},{path:"/settings",view:"settings",title:"Settings - Domma CMS"},{path:"/theme",view:"theme",title:"Theme - Domma CMS"},{path:"/users",view:"users",title:"Users - Domma CMS"},{path:"/users/new",view:"userEditor",title:"New User - Domma CMS"},{path:"/users/edit/:id",view:"userEditor",title:"Edit User - Domma CMS"},{path:"/plugins",view:"plugins",title:"Plugins - Domma CMS"},{path:"/plugins/code/:name",view:"pluginCode",title:"Plugin Code - Domma CMS"},{path:"/documentation",view:"documentation",title:"Usage - Domma CMS"},{path:"/tutorials",view:"tutorials",title:"Tutorials - Domma CMS"},{path:"/tutorials/crud",view:"tutorialCrud",title:"Building a CRUD App - Domma CMS"},{path:"/tutorials/plugin",view:"tutorialPlugin",title:"Writing a Plugin - Domma CMS"},{path:"/tutorials/forms",view:"tutorialForms",title:"Form Follow-Up - Domma CMS"},{path:"/docs/components",view:"componentsReference",title:"Components Reference - Domma CMS"},{path:"/docs/components-howto",view:"componentsHowto",title:"Components How-To - Domma CMS"},{path:"/docs/components-walkthrough",view:"componentsWalkthrough",title:"Components Walkthrough - Domma CMS"},{path:"/docs/components-rules",view:"componentsRules",title:"Components Rules - Domma CMS"},{path:"/docs/usage/pages",view:"usagePages",title:"Pages - Usage - Domma CMS"},{path:"/docs/usage/media",view:"usageMedia",title:"Media - Usage - Domma CMS"},{path:"/docs/usage/navigation",view:"usageNavigation",title:"Navigation - Usage - Domma CMS"},{path:"/docs/usage/dconfig",view:"usageDconfig",title:"DConfig - Usage - Domma CMS"},{path:"/docs/usage/shortcodes",view:"usageShortcodes",title:"Shortcodes - Usage - Domma CMS"},{path:"/docs/usage/site-settings",view:"usageSiteSettings",title:"Site Settings - Usage - Domma CMS"},{path:"/docs/usage/plugins",view:"usagePlugins",title:"Plugins - Usage - Domma CMS"},{path:"/docs/usage/users-roles",view:"usageUsersRoles",title:"Users & Roles - Usage - Domma CMS"},{path:"/docs/usage/views",view:"usageViews",title:"Views - Usage - Domma CMS"},{path:"/docs/usage/actions",view:"usageActions",title:"Actions - Usage - Domma CMS"},{path:"/docs/usage/cta-shortcode",view:"usageCtaShortcode",title:"CTA Shortcode - Usage - Domma CMS"},{path:"/docs/usage/editions",view:"usageEditions",title:"Editions & Licences - Usage - Domma CMS"},{path:"/docs/usage/collections",view:"usageCollections",title:"Collections & Forms - Usage - Domma CMS"},{path:"/docs/usage/tools",view:"usageTools",title:"Built-in Tools - Usage - Domma CMS"},{path:"/docs/plugins",view:"pluginGuides",title:"Plugin Guides - Domma CMS"},{path:"/docs/plugins/*",view:"pluginGuide",title:"Plugin Guide - Domma CMS"},{path:"/docs/api/authentication",view:"apiRefAuthentication",title:"Authentication - API - Domma CMS"},{path:"/docs/api/pages",view:"apiRefPages",title:"Pages - API - Domma CMS"},{path:"/docs/api/settings",view:"apiRefSettings",title:"Settings - API - Domma CMS"},{path:"/docs/api/layouts",view:"apiRefLayouts",title:"Layouts - API - Domma CMS"},{path:"/docs/api/navigation",view:"apiRefNavigation",title:"Navigation - API - Domma CMS"},{path:"/docs/api/media",view:"apiRefMedia",title:"Media - API - Domma CMS"},{path:"/docs/api/users",view:"apiRefUsers",title:"Users - API - Domma CMS"},{path:"/docs/api/plugins",view:"apiRefPlugins",title:"Plugins - API - Domma CMS"},{path:"/docs/api/collections",view:"apiRefCollections",title:"Collections - API - Domma CMS"},{path:"/docs/api/views",view:"apiRefViews",title:"Views API - Domma CMS"},{path:"/docs/api/actions",view:"apiRefActions",title:"Actions API - Domma CMS"},{path:"/docs/api/forms",view:"apiRefForms",title:"Forms API - Domma CMS"},{path:"/docs/api/scaffold",view:"apiRefScaffold",title:"Scaffold API - Domma CMS"},{path:"/docs/api/external",view:"apiRefExternal",title:"External API & Tokens - Domma CMS"},{path:"/docs/api/builder",view:"apiRefBuilder",title:"API Builder - Domma CMS"},{path:"/api-reference",view:"apiReference",title:"API Reference - Domma CMS"},{path:"/collections",view:"collections",title:"Collections - Domma CMS"},{path:"/collections/new",view:"collectionEditor",title:"New Collection - Domma CMS"},{path:"/collections/edit/:slug",view:"collectionEditor",title:"Edit Collection - Domma CMS"},{path:"/collections/:slug/entries",view:"collectionEntries",title:"Entries - Domma CMS"},{path:"/forms",view:"forms",title:"Forms - Domma CMS"},{path:"/forms/new",view:"formEditor",title:"New Form - Domma CMS"},{path:"/forms/edit/:slug",view:"formEditor",title:"Edit Form - Domma CMS"},{path:"/forms/:slug/submissions",view:"formSubmissions",title:"Submissions - Domma CMS"},{path:"/views",view:"viewsList",title:"Views - Domma CMS"},{path:"/views/new",view:"viewEditor",title:"New View - Domma CMS"},{path:"/views/edit/:slug",view:"viewEditor",title:"Edit View - Domma CMS"},{path:"/views/:slug/preview",view:"viewPreview",title:"View Preview - Domma CMS"},{path:"/actions",view:"actionsList",title:"Actions - Domma CMS"},{path:"/actions/new",view:"actionEditor",title:"New Action - Domma CMS"},{path:"/actions/edit/:slug",view:"actionEditor",title:"Edit Action - Domma CMS"},{path:"/pro/docs",view:"proDocs",title:"Pro Documentation - Domma CMS"},{path:"/blocks",view:"blocks",title:"Blocks - Domma CMS"},{path:"/blocks/new",view:"blockEditor",title:"New Block - Domma CMS"},{path:"/blocks/edit/:name",view:"blockEditor",title:"Edit Block - Domma CMS"},{path:"/components",view:"components",title:"Components - Domma CMS"},{path:"/components/new",view:"componentEditor",title:"New Component - Domma CMS"},{path:"/components/edit/:name",view:"componentEditor",title:"Edit Component - Domma CMS"},{path:"/my-profile",view:"myProfile",title:"My Profile - Domma CMS"},{path:"/roles",view:"roles",title:"Roles & Permissions - Domma CMS"},{path:"/roles/edit/:id",view:"roleEditor",title:"Edit Role - Domma CMS"},{path:"/effects",view:"effects",title:"Effects - Domma CMS"},{path:"/search",view:"search",title:"Search - Domma CMS"},{path:"/notes",view:"notes",title:"Notes - Domma CMS"},{path:"/todo",view:"todo",title:"Todo - Domma CMS"},{path:"/analytics",view:"analytics",title:"Analytics - Domma CMS"},{path:"/seo",view:"seo",title:"SEO - Domma CMS"},{path:"/seo/:tab",view:"seo",title:"SEO - Domma CMS"},{path:"/contacts",view:"contacts",title:"Contacts - Domma CMS"},{path:"/system/notifications",view:"notifications",title:"Notifications - Domma CMS"},{path:"/api-tokens",view:"apiTokens",title:"API Tokens - Domma CMS"},{path:"/api-endpoints",view:"apiEndpoints",title:"API Builder - Domma CMS"},{path:"/api-endpoints/new",view:"apiEndpointEditor",title:"New API Endpoint - Domma CMS"},{path:"/api-endpoints/edit/:id",view:"apiEndpointEditor",title:"Edit API Endpoint - Domma CMS"},{path:"/projects",view:"projects",title:"Projects - Domma CMS"},{path:"/projects/new",view:"projects",title:"New Project - Domma CMS"},{path:"/projects/edit/:slug",view:"projects",title:"Edit Project - Domma CMS"},{path:"/projects/:slug/settings",view:"projectSettings",title:"Project settings - Domma CMS"},{path:"/projects/:slug/pages",view:"pages",title:"Project pages - Domma CMS"},{path:"/projects/:slug/collections",view:"collections",title:"Project collections - Domma CMS"},{path:"/projects/:slug/forms",view:"forms",title:"Project forms - Domma CMS"},{path:"/projects/:slug/actions",view:"actionsList",title:"Project actions - Domma CMS"},{path:"/projects/:slug/menus",view:"menus",title:"Project menus - Domma CMS"},{path:"/projects/:slug/blocks",view:"blocks",title:"Project blocks - Domma CMS"},{path:"/projects/:slug/components",view:"components",title:"Project components - Domma CMS"},{path:"/projects/:slug/views",view:"viewsList",title:"Project views - Domma CMS"},{path:"/projects/:slug/roles",view:"roles",title:"Project roles - Domma CMS"},{path:"/projects/:slug/users",view:"users",title:"Project users - Domma CMS"},{path:"/projects/:slug/apis",view:"apiEndpoints",title:"Project APIs - Domma CMS"},{path:"/projects/:slug",view:"projectDetail",title:"Project - Domma CMS"},{path:"/login",view:"login",title:"Sign in - Domma CMS",onEnter:()=>{$("#admin-sidebar").hide(),$("#admin-topbar").hide()}},{path:"/reset-password",view:"login",title:"Reset Password - Domma CMS",onEnter:()=>{$("#admin-sidebar").hide(),$("#admin-topbar").hide()}}];M.subscribe("router:afterChange",async({to:t,from:e})=>{if(!C(t.path)){if($("#admin-sidebar").show(),$("#admin-topbar").show(),C(e?.path)){$("#topbar-user-name").remove(),import("./lib/admin-theme.js").then(a=>a.refreshAdminTheme(r)),await x();const i=await g(),o=D(t.path);if(o&&R.navigate(o),j(i),it.read().signInToasts)try{const a=await r.system.notifications.list().catch(()=>[]),n=(Array.isArray(a)?a:[]).filter(s=>s.unread&&["warning","critical"].includes(s.data?.severity)).slice(0,3);for(const s of n){const f=p(s.data?.title||""),k=p((s.data?.body||"").slice(0,120));E.toast(`${f} - ${k}`,{type:s.data?.severity==="critical"?"error":"warning",duration:0})}}catch{}}T()}}),M.subscribe("router:afterChange",()=>{setTimeout(()=>{$(".btn-primary, .btn-danger").length&&Domma.effects.reveal(".btn-primary, .btn-danger",{animation:"fade",stagger:40,duration:300})},50)});const V=["#field-project","#menu-project","#collection-project","#endpoint-project","#action-project","#view-project","#block-project","#component-project","#role-project",'[name="project"]','[name="ownedByProject"]'];function W(t){return/^\/(pages|menus|context-menus|collections|forms|actions|views|blocks|components|users|roles|api-endpoints)\/(new|edit\/)/.test(t)}M.subscribe("router:afterChange",({to:t})=>{const e=t?String(t.path).split("?")[0]:"";if(!t||!W(e))return;const o=new URLSearchParams(location.hash.split("?")[1]||"").get("project");if(!o||!/\/new$/.test(e))return;let a=0;const n=60,s=1500,f=()=>{a+=n;for(const k of V){const v=document.querySelector(k);if(!v)continue;if(Array.from(v.options||[]).find(H=>H.value===o)){v.value=o,v.dispatchEvent(new Event("change",{bubbles:!0}));return}}a<s&&setTimeout(f,n)};setTimeout(f,n)});const I="cms_card_states",A=S.get(I)||{};M.subscribe("router:afterChange",()=>{setTimeout(()=>{$("#view-container .card-collapsible").each(function(){const t=$(this).find(".card-header h2, .card-header h3").first().text().trim();t&&A[t]==="collapsed"&&$(this).addClass("card-collapsed")})},200)}),$("#view-container").on("click",".card-collapsible .card-header",function(t){if($(t.target).closest("button, a").length)return;const e=$(this).closest(".card");e.toggleClass("card-collapsed");const i=$(this).find("h2, h3").first().text().trim();i&&(A[i]=e.hasClass("card-collapsed")?"collapsed":"open",S.set(I,A))}),document.addEventListener("keydown",t=>{if(!(t.ctrlKey||t.metaKey)||t.key!=="s"||window.location.hash.startsWith("#/login")||window.location.hash.startsWith("#/reset-password"))return;const e=document.querySelector("#view-container .view-header button.btn-primary");e&&(t.preventDefault(),e.click())});const m={...q},_={notes:{displayName:"Notes",icon:"edit-3"},todo:{displayName:"Todo",icon:"check-square"},analytics:{displayName:"Analytics",icon:"chart-bar"},seo:{displayName:"SEO",icon:"search"},contacts:{displayName:"Contacts",icon:"users"},projects:{displayName:"Projects",icon:"folder"},pages:{displayName:"Pages",icon:"file-text"},media:{displayName:"Media",icon:"image"},menus:{displayName:"Menus",icon:"menu"},contextMenus:{displayName:"Context Menus",icon:"menu"},theme:{displayName:"Theme",icon:"droplet"},collections:{displayName:"Collections",icon:"database"},forms:{displayName:"Forms",icon:"layout"},viewsList:{displayName:"Views",icon:"eye"},actionsList:{displayName:"Actions",icon:"zap"},apiEndpoints:{displayName:"API Builder",icon:"code"},blocks:{displayName:"Blocks",icon:"box"},components:{displayName:"Components",icon:"component"},notifications:{displayName:"Notifications",icon:"bell"},roles:{displayName:"Roles",icon:"shield"},users:{displayName:"Users",icon:"users"},settings:{displayName:"Site Settings",icon:"settings"},effects:{displayName:"Effects",icon:"sparkles"},layouts:{displayName:"Layouts",icon:"layout"},plugins:{displayName:"Marketplace",icon:"store"},myProfile:{displayName:"My Profile",icon:"user"},apiTokens:{displayName:"API Tokens",icon:"key"},search:{displayName:"Search",icon:"search"},dashboard:{displayName:"Dashboard",icon:"home"},pageEditor:{displayName:"Pages",section:"Edit",icon:"file-text"},menuEditor:{displayName:"Menus",section:"Edit",icon:"menu"},menuLocations:{displayName:"Menus",section:"Locations",icon:"map-pin"},contextMenuEditor:{displayName:"Context Menus",section:"Edit",icon:"menu"},collectionEditor:{displayName:"Collections",section:"Edit",icon:"database"},collectionEntries:{displayName:"Collections",section:"Entries",icon:"database"},formEditor:{displayName:"Forms",section:"Edit",icon:"layout"},formSubmissions:{displayName:"Forms",section:"Submissions",icon:"inbox"},viewEditor:{displayName:"Views",section:"Edit",icon:"eye"},viewPreview:{displayName:"Views",section:"Preview",icon:"eye"},actionEditor:{displayName:"Actions",section:"Edit",icon:"zap"},apiEndpointEditor:{displayName:"API Builder",section:"Edit",icon:"code"},blockEditor:{displayName:"Blocks",section:"Edit",icon:"box"},componentEditor:{displayName:"Components",section:"Edit",icon:"component"},roleEditor:{displayName:"Roles",section:"Edit",icon:"shield"},userEditor:{displayName:"Users",section:"Edit",icon:"users"},projectDetail:{displayName:"Projects",section:"Overview",icon:"folder"},projectSettings:{displayName:"Projects",section:"Settings",icon:"folder"},pluginCode:{displayName:"Marketplace",section:"Code",icon:"code"}};for(const[t,e]of Object.entries(_))m[t]&&(m[t]=B(m[t],{plugin:t,licence:"Built in",...e}));const U=[...F];async function x(){if(u())try{const t=await r.plugins.adminConfig();t.routes?.length&&U.push(...t.routes);for(const[e,i]of Object.entries(t.views||{}))try{const o=await import(`/plugins/${i.entry}`);m[e]=B(o[i.exportName],(t.meta||{})[e])}catch{}for(const[e,{route:i}]of Object.entries(t.takeovers||{}))i&&(b[`/${e}`]=i);for(const[e,{enabled:i,displayName:o}]of Object.entries(t.tools||{}))i===!1&&(y[`/${e}`]=o);for(const{id:e,href:i}of t.css||[])if(!document.getElementById(e)){const o=document.createElement("link");o.id=e,o.rel="stylesheet",o.href=i,document.head.appendChild(o)}}catch{}}function T(){const t=O();if(!t||$("#topbar-user-name").length)return;const i={"super-admin":"Super Admin",admin:"Admin",user:"User"}[t.role]||t.role,o=ot(t);$("#topbar-user").html(`
+import{views as q}from"./views/index.js";import{withPluginChrome as B}from"./lib/plugin-chrome.js";import{api as r,getUser as O,isAuthenticated as u,logout as G,sendToLogin as z}from"./api.js";import{isAuthScreen as C,loginHashFor as K}from"./lib/login-arrange.js";import{installHttpInterceptor as J}from"./http-interceptor.js";import{installResizableSlideovers as Y}from"./lib/slideover-resizable.js";import{installActivityThrobber as Q}from"./lib/activity-throbber.js";import{isPathAllowed as X,redirectFor as Z}from"./lib/admin-scope.js";import{deliverDesktop as tt,desktopActive as et,notificationSettings as it}from"./lib/desktop-notify.js";import{avatarUrl as ot}from"./lib/avatar.js";$(()=>{J(),Q(),Y(),(async()=>{const{applyAdminTheme:t,refreshAdminTheme:e}=await import("./lib/admin-theme.js");u()?await e(r,{init:!0}):t({dommaTheme:"charcoal-dark"},{init:!0})})();let c=null,l="/",h=!1,w=null;function D(t){if(y[t])return E.toast(`${y[t]} is switched off on this site.`,{type:"info"}),"/";const e=b[t]||Z(c,t);return e||((t.split("?")[0]||"/")==="/"&&l&&l!=="/"?b[l]||l:null)}const b={},y={};R.use(async(t,e,i)=>{if(C(t.path))return i();if(!u()){z();return}const o=D(t.path);if(o){R.navigate(o);return}i()});async function g(){try{const t=await r.get("/auth/permissions");c=t.adminScope||null,l=t.adminHome||"/";const e=t.permissions||[];return h=X(c,"/settings")&&e.some(i=>i==="settings"||i.startsWith("settings.")),w=e.some(i=>i==="notifications"||i.startsWith("notifications.")),e}catch{return c=null,l="/",h=!1,w=null,[]}}document.addEventListener("dm:admin-home-changed",()=>{g()});let P=null,N=!1;document.addEventListener("dm:sidebar-rebuild",()=>{if(P){N=!0;return}P=(async()=>{do{N=!1;try{await j(await g())}catch{}}while(N)})().finally(()=>{P=null})});async function j(t){const{renderAdminSidebar:e}=await import("./lib/sidebar-renderer.js");await e({mount:"#admin-sidebar",permissions:t,adminScope:c})}M.subscribe("router:afterChange",({to:t})=>{C(t.path)&&(d&&(clearInterval(d),d=null),c=null,l="/",h=!1,w=null)});const F=[{path:"/",view:"dashboard",title:"Dashboard - Domma CMS"},{path:"/pages",view:"pages",title:"Pages - Domma CMS"},{path:"/pages/new",view:"pageEditor",title:"New Page - Domma CMS"},{path:"/pages/edit/*",view:"pageEditor",title:"Edit Page - Domma CMS"},{path:"/media",view:"media",title:"Media - Domma CMS"},{path:"/menus",view:"menus",title:"Menus - Domma CMS"},{path:"/context-menus",view:"contextMenus",title:"Context Menus - Domma CMS"},{path:"/context-menus/new",view:"contextMenuEditor",title:"New Context Menu - Domma CMS"},{path:"/context-menus/edit/:slug",view:"contextMenuEditor",title:"Edit Context Menu - Domma CMS"},{path:"/menus/new",view:"menuEditor",title:"New Menu - Domma CMS"},{path:"/menus/edit/:slug",view:"menuEditor",title:"Edit Menu - Domma CMS"},{path:"/menu-locations",view:"menuLocations",title:"Menu Locations - Domma CMS"},{path:"/navigation",view:"menusRedirect",title:"Menus - Domma CMS"},{path:"/layouts",view:"layouts",title:"Layouts - Domma CMS"},{path:"/settings",view:"settings",title:"Settings - Domma CMS"},{path:"/theme",view:"theme",title:"Theme - Domma CMS"},{path:"/users",view:"users",title:"Users - Domma CMS"},{path:"/users/new",view:"userEditor",title:"New User - Domma CMS"},{path:"/users/edit/:id",view:"userEditor",title:"Edit User - Domma CMS"},{path:"/plugins",view:"plugins",title:"Plugins - Domma CMS"},{path:"/plugins/code/:name",view:"pluginCode",title:"Plugin Code - Domma CMS"},{path:"/documentation",view:"documentation",title:"Usage - Domma CMS"},{path:"/tutorials",view:"tutorials",title:"Tutorials - Domma CMS"},{path:"/tutorials/crud",view:"tutorialCrud",title:"Building a CRUD App - Domma CMS"},{path:"/tutorials/plugin",view:"tutorialPlugin",title:"Writing a Plugin - Domma CMS"},{path:"/tutorials/forms",view:"tutorialForms",title:"Form Follow-Up - Domma CMS"},{path:"/docs/components",view:"componentsReference",title:"Components Reference - Domma CMS"},{path:"/docs/components-howto",view:"componentsHowto",title:"Components How-To - Domma CMS"},{path:"/docs/components-walkthrough",view:"componentsWalkthrough",title:"Components Walkthrough - Domma CMS"},{path:"/docs/components-rules",view:"componentsRules",title:"Components Rules - Domma CMS"},{path:"/docs/usage/pages",view:"usagePages",title:"Pages - Usage - Domma CMS"},{path:"/docs/usage/media",view:"usageMedia",title:"Media - Usage - Domma CMS"},{path:"/docs/usage/navigation",view:"usageNavigation",title:"Navigation - Usage - Domma CMS"},{path:"/docs/usage/dconfig",view:"usageDconfig",title:"DConfig - Usage - Domma CMS"},{path:"/docs/usage/shortcodes",view:"usageShortcodes",title:"Shortcodes - Usage - Domma CMS"},{path:"/docs/usage/site-settings",view:"usageSiteSettings",title:"Site Settings - Usage - Domma CMS"},{path:"/docs/usage/plugins",view:"usagePlugins",title:"Plugins - Usage - Domma CMS"},{path:"/docs/usage/users-roles",view:"usageUsersRoles",title:"Users & Roles - Usage - Domma CMS"},{path:"/docs/usage/views",view:"usageViews",title:"Views - Usage - Domma CMS"},{path:"/docs/usage/actions",view:"usageActions",title:"Actions - Usage - Domma CMS"},{path:"/docs/usage/cta-shortcode",view:"usageCtaShortcode",title:"CTA Shortcode - Usage - Domma CMS"},{path:"/docs/usage/editions",view:"usageEditions",title:"Editions & Licences - Usage - Domma CMS"},{path:"/docs/usage/collections",view:"usageCollections",title:"Collections & Forms - Usage - Domma CMS"},{path:"/docs/usage/tools",view:"usageTools",title:"Built-in Tools - Usage - Domma CMS"},{path:"/docs/plugins",view:"pluginGuides",title:"Plugin Guides - Domma CMS"},{path:"/docs/plugins/*",view:"pluginGuide",title:"Plugin Guide - Domma CMS"},{path:"/docs/api/authentication",view:"apiRefAuthentication",title:"Authentication - API - Domma CMS"},{path:"/docs/api/pages",view:"apiRefPages",title:"Pages - API - Domma CMS"},{path:"/docs/api/settings",view:"apiRefSettings",title:"Settings - API - Domma CMS"},{path:"/docs/api/layouts",view:"apiRefLayouts",title:"Layouts - API - Domma CMS"},{path:"/docs/api/navigation",view:"apiRefNavigation",title:"Navigation - API - Domma CMS"},{path:"/docs/api/media",view:"apiRefMedia",title:"Media - API - Domma CMS"},{path:"/docs/api/users",view:"apiRefUsers",title:"Users - API - Domma CMS"},{path:"/docs/api/plugins",view:"apiRefPlugins",title:"Plugins - API - Domma CMS"},{path:"/docs/api/collections",view:"apiRefCollections",title:"Collections - API - Domma CMS"},{path:"/docs/api/views",view:"apiRefViews",title:"Views API - Domma CMS"},{path:"/docs/api/actions",view:"apiRefActions",title:"Actions API - Domma CMS"},{path:"/docs/api/forms",view:"apiRefForms",title:"Forms API - Domma CMS"},{path:"/docs/api/scaffold",view:"apiRefScaffold",title:"Scaffold API - Domma CMS"},{path:"/docs/api/external",view:"apiRefExternal",title:"External API & Tokens - Domma CMS"},{path:"/docs/api/builder",view:"apiRefBuilder",title:"API Builder - Domma CMS"},{path:"/api-reference",view:"apiReference",title:"API Reference - Domma CMS"},{path:"/collections",view:"collections",title:"Collections - Domma CMS"},{path:"/collections/new",view:"collectionEditor",title:"New Collection - Domma CMS"},{path:"/collections/edit/:slug",view:"collectionEditor",title:"Edit Collection - Domma CMS"},{path:"/collections/:slug/entries",view:"collectionEntries",title:"Entries - Domma CMS"},{path:"/forms",view:"forms",title:"Forms - Domma CMS"},{path:"/forms/new",view:"formEditor",title:"New Form - Domma CMS"},{path:"/forms/edit/:slug",view:"formEditor",title:"Edit Form - Domma CMS"},{path:"/forms/:slug/submissions",view:"formSubmissions",title:"Submissions - Domma CMS"},{path:"/views",view:"viewsList",title:"Views - Domma CMS"},{path:"/views/new",view:"viewEditor",title:"New View - Domma CMS"},{path:"/views/edit/:slug",view:"viewEditor",title:"Edit View - Domma CMS"},{path:"/views/:slug/preview",view:"viewPreview",title:"View Preview - Domma CMS"},{path:"/actions",view:"actionsList",title:"Actions - Domma CMS"},{path:"/actions/new",view:"actionEditor",title:"New Action - Domma CMS"},{path:"/actions/edit/:slug",view:"actionEditor",title:"Edit Action - Domma CMS"},{path:"/pro/docs",view:"proDocs",title:"Pro Documentation - Domma CMS"},{path:"/blocks",view:"blocks",title:"Blocks - Domma CMS"},{path:"/blocks/new",view:"blockEditor",title:"New Block - Domma CMS"},{path:"/blocks/edit/:name",view:"blockEditor",title:"Edit Block - Domma CMS"},{path:"/components",view:"components",title:"Components - Domma CMS"},{path:"/components/new",view:"componentEditor",title:"New Component - Domma CMS"},{path:"/components/edit/:name",view:"componentEditor",title:"Edit Component - Domma CMS"},{path:"/my-profile",view:"myProfile",title:"My Profile - Domma CMS"},{path:"/roles",view:"roles",title:"Roles & Permissions - Domma CMS"},{path:"/roles/edit/:id",view:"roleEditor",title:"Edit Role - Domma CMS"},{path:"/effects",view:"effects",title:"Effects - Domma CMS"},{path:"/search",view:"search",title:"Search - Domma CMS"},{path:"/notes",view:"notes",title:"Notes - Domma CMS"},{path:"/todo",view:"todo",title:"Todo - Domma CMS"},{path:"/analytics",view:"analytics",title:"Analytics - Domma CMS"},{path:"/seo",view:"seo",title:"SEO - Domma CMS"},{path:"/seo/:tab",view:"seo",title:"SEO - Domma CMS"},{path:"/contacts",view:"contacts",title:"Contacts - Domma CMS"},{path:"/calls/new",view:"callNew",title:"Call now - Domma CMS"},{path:"/system/notifications",view:"notifications",title:"Notifications - Domma CMS"},{path:"/api-tokens",view:"apiTokens",title:"API Tokens - Domma CMS"},{path:"/api-endpoints",view:"apiEndpoints",title:"API Builder - Domma CMS"},{path:"/api-endpoints/new",view:"apiEndpointEditor",title:"New API Endpoint - Domma CMS"},{path:"/api-endpoints/edit/:id",view:"apiEndpointEditor",title:"Edit API Endpoint - Domma CMS"},{path:"/projects",view:"projects",title:"Projects - Domma CMS"},{path:"/projects/new",view:"projects",title:"New Project - Domma CMS"},{path:"/projects/edit/:slug",view:"projects",title:"Edit Project - Domma CMS"},{path:"/projects/:slug/settings",view:"projectSettings",title:"Project settings - Domma CMS"},{path:"/projects/:slug/pages",view:"pages",title:"Project pages - Domma CMS"},{path:"/projects/:slug/collections",view:"collections",title:"Project collections - Domma CMS"},{path:"/projects/:slug/forms",view:"forms",title:"Project forms - Domma CMS"},{path:"/projects/:slug/actions",view:"actionsList",title:"Project actions - Domma CMS"},{path:"/projects/:slug/menus",view:"menus",title:"Project menus - Domma CMS"},{path:"/projects/:slug/blocks",view:"blocks",title:"Project blocks - Domma CMS"},{path:"/projects/:slug/components",view:"components",title:"Project components - Domma CMS"},{path:"/projects/:slug/views",view:"viewsList",title:"Project views - Domma CMS"},{path:"/projects/:slug/roles",view:"roles",title:"Project roles - Domma CMS"},{path:"/projects/:slug/users",view:"users",title:"Project users - Domma CMS"},{path:"/projects/:slug/apis",view:"apiEndpoints",title:"Project APIs - Domma CMS"},{path:"/projects/:slug",view:"projectDetail",title:"Project - Domma CMS"},{path:"/login",view:"login",title:"Sign in - Domma CMS",onEnter:()=>{$("#admin-sidebar").hide(),$("#admin-topbar").hide()}},{path:"/reset-password",view:"login",title:"Reset Password - Domma CMS",onEnter:()=>{$("#admin-sidebar").hide(),$("#admin-topbar").hide()}}];M.subscribe("router:afterChange",async({to:t,from:e})=>{if(!C(t.path)){if($("#admin-sidebar").show(),$("#admin-topbar").show(),C(e?.path)){$("#topbar-user-name").remove(),import("./lib/admin-theme.js").then(a=>a.refreshAdminTheme(r)),await x();const i=await g(),o=D(t.path);if(o&&R.navigate(o),j(i),it.read().signInToasts)try{const a=await r.system.notifications.list().catch(()=>[]),n=(Array.isArray(a)?a:[]).filter(s=>s.unread&&["warning","critical"].includes(s.data?.severity)).slice(0,3);for(const s of n){const f=p(s.data?.title||""),k=p((s.data?.body||"").slice(0,120));E.toast(`${f} - ${k}`,{type:s.data?.severity==="critical"?"error":"warning",duration:0})}}catch{}}T()}}),M.subscribe("router:afterChange",()=>{setTimeout(()=>{$(".btn-primary, .btn-danger").length&&Domma.effects.reveal(".btn-primary, .btn-danger",{animation:"fade",stagger:40,duration:300})},50)});const V=["#field-project","#menu-project","#collection-project","#endpoint-project","#action-project","#view-project","#block-project","#component-project","#role-project",'[name="project"]','[name="ownedByProject"]'];function W(t){return/^\/(pages|menus|context-menus|collections|forms|actions|views|blocks|components|users|roles|api-endpoints)\/(new|edit\/)/.test(t)}M.subscribe("router:afterChange",({to:t})=>{const e=t?String(t.path).split("?")[0]:"";if(!t||!W(e))return;const o=new URLSearchParams(location.hash.split("?")[1]||"").get("project");if(!o||!/\/new$/.test(e))return;let a=0;const n=60,s=1500,f=()=>{a+=n;for(const k of V){const v=document.querySelector(k);if(!v)continue;if(Array.from(v.options||[]).find(H=>H.value===o)){v.value=o,v.dispatchEvent(new Event("change",{bubbles:!0}));return}}a<s&&setTimeout(f,n)};setTimeout(f,n)});const I="cms_card_states",A=S.get(I)||{};M.subscribe("router:afterChange",()=>{setTimeout(()=>{$("#view-container .card-collapsible").each(function(){const t=$(this).find(".card-header h2, .card-header h3").first().text().trim();t&&A[t]==="collapsed"&&$(this).addClass("card-collapsed")})},200)}),$("#view-container").on("click",".card-collapsible .card-header",function(t){if($(t.target).closest("button, a").length)return;const e=$(this).closest(".card");e.toggleClass("card-collapsed");const i=$(this).find("h2, h3").first().text().trim();i&&(A[i]=e.hasClass("card-collapsed")?"collapsed":"open",S.set(I,A))}),document.addEventListener("keydown",t=>{if(!(t.ctrlKey||t.metaKey)||t.key!=="s"||window.location.hash.startsWith("#/login")||window.location.hash.startsWith("#/reset-password"))return;const e=document.querySelector("#view-container .view-header button.btn-primary");e&&(t.preventDefault(),e.click())});const m={...q},_={notes:{displayName:"Notes",icon:"edit-3"},todo:{displayName:"Todo",icon:"check-square"},analytics:{displayName:"Analytics",icon:"chart-bar"},seo:{displayName:"SEO",icon:"search"},contacts:{displayName:"Contacts",icon:"users"},projects:{displayName:"Projects",icon:"folder"},pages:{displayName:"Pages",icon:"file-text"},media:{displayName:"Media",icon:"image"},menus:{displayName:"Menus",icon:"menu"},contextMenus:{displayName:"Context Menus",icon:"menu"},theme:{displayName:"Theme",icon:"droplet"},collections:{displayName:"Collections",icon:"database"},forms:{displayName:"Forms",icon:"layout"},viewsList:{displayName:"Views",icon:"eye"},actionsList:{displayName:"Actions",icon:"zap"},apiEndpoints:{displayName:"API Builder",icon:"code"},blocks:{displayName:"Blocks",icon:"box"},components:{displayName:"Components",icon:"component"},notifications:{displayName:"Notifications",icon:"bell"},roles:{displayName:"Roles",icon:"shield"},users:{displayName:"Users",icon:"users"},settings:{displayName:"Site Settings",icon:"settings"},effects:{displayName:"Effects",icon:"sparkles"},layouts:{displayName:"Layouts",icon:"layout"},plugins:{displayName:"Marketplace",icon:"store"},myProfile:{displayName:"My Profile",icon:"user"},apiTokens:{displayName:"API Tokens",icon:"key"},search:{displayName:"Search",icon:"search"},dashboard:{displayName:"Dashboard",icon:"home"},pageEditor:{displayName:"Pages",section:"Edit",icon:"file-text"},menuEditor:{displayName:"Menus",section:"Edit",icon:"menu"},menuLocations:{displayName:"Menus",section:"Locations",icon:"map-pin"},contextMenuEditor:{displayName:"Context Menus",section:"Edit",icon:"menu"},collectionEditor:{displayName:"Collections",section:"Edit",icon:"database"},collectionEntries:{displayName:"Collections",section:"Entries",icon:"database"},formEditor:{displayName:"Forms",section:"Edit",icon:"layout"},formSubmissions:{displayName:"Forms",section:"Submissions",icon:"inbox"},viewEditor:{displayName:"Views",section:"Edit",icon:"eye"},viewPreview:{displayName:"Views",section:"Preview",icon:"eye"},actionEditor:{displayName:"Actions",section:"Edit",icon:"zap"},apiEndpointEditor:{displayName:"API Builder",section:"Edit",icon:"code"},blockEditor:{displayName:"Blocks",section:"Edit",icon:"box"},componentEditor:{displayName:"Components",section:"Edit",icon:"component"},roleEditor:{displayName:"Roles",section:"Edit",icon:"shield"},userEditor:{displayName:"Users",section:"Edit",icon:"users"},projectDetail:{displayName:"Projects",section:"Overview",icon:"folder"},projectSettings:{displayName:"Projects",section:"Settings",icon:"folder"},pluginCode:{displayName:"Marketplace",section:"Code",icon:"code"}};for(const[t,e]of Object.entries(_))m[t]&&(m[t]=B(m[t],{plugin:t,licence:"Built in",...e}));const U=[...F];async function x(){if(u())try{const t=await r.plugins.adminConfig();t.routes?.length&&U.push(...t.routes);for(const[e,i]of Object.entries(t.views||{}))try{const o=await import(`/plugins/${i.entry}`);m[e]=B(o[i.exportName],(t.meta||{})[e])}catch{}for(const[e,{route:i}]of Object.entries(t.takeovers||{}))i&&(b[`/${e}`]=i);for(const[e,{enabled:i,displayName:o}]of Object.entries(t.tools||{}))i===!1&&(y[`/${e}`]=o);for(const{id:e,href:i}of t.css||[])if(!document.getElementById(e)){const o=document.createElement("link");o.id=e,o.rel="stylesheet",o.href=i,document.head.appendChild(o)}}catch{}}function T(){const t=O();if(!t||$("#topbar-user-name").length)return;const i={"super-admin":"Super Admin",admin:"Admin",user:"User"}[t.role]||t.role,o=ot(t);$("#topbar-user").html(`
             ${o?`<img id="topbar-avatar" class="topbar-avatar" src="${p(o)}" alt="">`:""}
             <span id="topbar-user-name" class="topbar-user-name">${p(t.name)}</span>
             <span class="topbar-role-badge topbar-role-badge--${p(t.role)}">${i}</span>

package/admin/js/templates/call-new.html

@@ -0,0 +1,88 @@
+<!-- Call now (instant calls). Bound with M.applyBindings - see admin/js/views/call-new.js. Not in the sidebar:
+     it is opened by "Call Sam now…" on a contact or an email, and by Booking's Call now. No user data in here. -->
+<div class="cnx">
+    <div class="cnx-card">
+        <h1 class="cnx-title"><span data-icon="video" data-icon-size="18"></span> Call now</h1>
+
+        <p class="cnx-note" data-bind-hidden="!loading.value">Loading…</p>
+        <p class="cnx-note is-warn" data-bind-hidden="!unavailable.value" data-bind-text="unavailable.value"></p>
+
+        <div class="cnx-ask" hidden data-bind-hidden="loading.value || unavailable.value || started.value">
+            <p class="cnx-note">A video call on your site, starting now - not a booking, so nothing goes in a diary. They get a link; you let them in. The link works for 3 hours.
+                <span data-help-title="Call now" data-help="For a quick call with anyone: a customer, a supplier, a colleague. They need no account or app - the call runs in the browser. To call someone about a booking they have, open that booking instead: an online booking has Call now of its own, using the link they already have."></span></p>
+
+            <div class="cnx-from" data-bind-hidden="!contactId.value">
+                <span data-icon="user" data-icon-size="13"></span> From your contact <strong data-bind-text="contactName.value"></strong>
+                <button type="button" class="btn btn-xs btn-ghost" data-on-click="clearContact">Someone else</button>
+            </div>
+
+            <div class="cnx-find" data-bind-hidden="!(contactsOn.value && !contactId.value)">
+                <label class="form-label" for="cnx-q">Find a contact <span data-help-title="Find a contact" data-help="Your Contacts, by name, email or phone. Or leave this and type their name and email below."></span></label>
+                <input id="cnx-q" class="form-input" type="search" autocomplete="off" placeholder="Type a name or email" data-model="q.value">
+                <div class="cnx-matches" data-each="matches.value key=id"><button type="button" class="cnx-match" data-on-click="$root.pick($data)"><strong data-bind-text="name"></strong><span class="cnx-muted" data-bind-text="email"></span><span class="cnx-shared" data-bind-text="note"></span></button></div>
+                <p class="cnx-note" data-bind-hidden="!noMatch.value">No contact matches. Type their name and email below.</p>
+            </div>
+
+            <div class="cnx-grid">
+                <div><label class="form-label" for="cnx-name">Name</label>
+                    <input id="cnx-name" class="form-input" maxlength="120" data-model="name.value"></div>
+                <div><label class="form-label" for="cnx-email">Email <span data-help-title="Email" data-help="Where their link is sent. Leave it empty to give them the link yourself - copy it, or read it out."></span></label>
+                    <input id="cnx-email" class="form-input" type="email" maxlength="200" data-model="email.value"></div>
+            </div>
+
+            <label class="cnx-check"><input type="checkbox" data-model="notify.value" data-bind-disabled="!hasEmail.value"> Email them the link
+                <span data-help-title="Email them the link" data-help="A short email: you would like to talk now, with a Join the call button. Off: nothing is sent - the link is shown here for you to pass on."></span></label>
+            <p class="cnx-note is-warn" data-bind-hidden="mailReady.value">This site has no outgoing mail server set up, so no email can be sent. Give them the link yourself.</p>
+            <small class="cnx-err" data-bind-text="err.value" data-bind-hidden="!err.value"></small>
+
+            <div class="cnx-actions">
+                <button type="button" class="btn btn-sm btn-ghost" data-on-click="close">Cancel</button>
+                <button type="button" class="btn btn-sm btn-primary cnx-start" data-on-click="save" data-bind-disabled="busy.value"><span data-icon="video" data-icon-size="13"></span> Start the call</button>
+            </div>
+        </div>
+
+        <div class="cnx-done" hidden data-bind-hidden="!started.value">
+            <p data-bind-hidden="blocked.value"><span data-icon="video" data-icon-size="14"></span> The call is open in a new tab, with you as the host. Let them in when they knock.</p>
+            <p class="cnx-note is-warn" data-bind-hidden="!blocked.value">Your browser stopped the call opening in a new tab. Start it here:</p>
+            <div class="cnx-actions is-start" data-bind-hidden="!blocked.value">
+                <a class="btn btn-sm btn-primary" data-bind-href="hostUrl.value" target="_blank" rel="noopener">Start the call</a></div>
+            <p class="cnx-emailed" data-bind-text="emailLine.value"></p>
+            <label class="form-label" for="cnx-link">Their link <span data-help-title="Their link" data-help="The address they join the call with. Anyone who has it can knock - you choose who comes in. Only send it to them."></span></label>
+            <input id="cnx-link" class="form-input cnx-link" readonly data-bind-value="joinUrl.value" data-on-focus="selectLink">
+            <div class="cnx-actions is-start">
+                <button type="button" class="btn btn-sm btn-outline" data-on-click="copyLink"><span data-icon="copy" data-icon-size="13"></span> Copy</button>
+                <a class="btn btn-sm btn-ghost" data-bind-href="mailto.value"><span data-icon="mail" data-icon-size="13"></span> Email it…</a>
+                <span class="cnx-spacer"></span>
+                <button type="button" class="btn btn-sm btn-ghost" data-on-click="close">Done</button>
+            </div>
+        </div>
+    </div>
+</div>
+
+<style>
+.cnx { max-width: 640px; margin: 1.5rem auto; }
+.cnx [hidden] { display: none !important; }
+.cnx-card { border: 1px solid var(--dm-border, rgba(128,128,128,.3)); border-radius: 10px; padding: 1.25rem 1.4rem; background: var(--dm-surface, transparent); }
+.cnx-title { display: flex; align-items: center; gap: .5rem; font-size: 1.25rem; margin: 0 0 .75rem; }
+.cnx-note { color: var(--dm-text-muted, inherit); font-size: .9rem; margin: 0 0 .9rem; }
+.cnx-note.is-warn { color: var(--dm-warning, #b45309); }
+.cnx-from { display: flex; align-items: center; gap: .4rem; flex-wrap: wrap; margin-bottom: .9rem; }
+.cnx-find { margin-bottom: .9rem; }
+.cnx-matches { display: flex; flex-direction: column; gap: 2px; margin-top: .35rem; }
+.cnx-match { display: flex; gap: .6rem; align-items: baseline; text-align: left; background: none; border: 1px solid transparent; border-radius: 6px; padding: .35rem .5rem; color: inherit; cursor: pointer; }
+.cnx-match:hover, .cnx-match:focus-visible { border-color: var(--dm-border, rgba(128,128,128,.4)); background: var(--dm-surface-hover, rgba(128,128,128,.08)); }
+.cnx-muted { color: var(--dm-text-muted, inherit); font-size: .85rem; }
+.cnx-shared { margin-left: auto; color: var(--dm-text-muted, inherit); font-size: .75rem; font-style: italic; }
+.cnx-shared:empty { display: none; }
+.cnx-grid { display: grid; grid-template-columns: 1fr 1fr; gap: .75rem; margin-bottom: .75rem; }
+@media (max-width: 560px) { .cnx-grid { grid-template-columns: 1fr; } }
+.cnx-check { display: flex; align-items: center; gap: .45rem; margin: .25rem 0 .75rem; }
+.cnx-err { display: block; color: var(--dm-danger, #b91c1c); margin-bottom: .5rem; }
+.cnx-actions { display: flex; gap: .5rem; justify-content: flex-end; align-items: center; margin-top: .75rem; flex-wrap: wrap; }
+.cnx-actions.is-start { justify-content: flex-start; }
+.cnx-spacer { flex: 1; }
+.cnx .btn { display: inline-flex; align-items: center; gap: .35rem; }
+.cnx-matches:empty { display: none; }
+.cnx-emailed { margin: .5rem 0 .9rem; }
+.cnx-link { font-family: var(--dm-font-mono, monospace); font-size: .85rem; }
+</style>

package/admin/js/templates/docs/usage-tools.html

@@ -26,6 +26,21 @@
                       holders of the permission can change them. In Manage groups, Rename and Delete are greyed out
                       where you may not, with a note saying why.</p>
 
+                  <h3>Call someone now (Pro)</h3>
+                  <p>With a Pro Tool that has calls - <strong>Booking Pro</strong>, <strong>Contacts Pro</strong> or
+                      the <strong>Calendar</strong> - a contact's menu and an email's menu offer <strong>Call Sam
+                      now…</strong>: a video call on your own site with that one person, starting now. It is not a
+                      booking or an event, so nothing goes in a diary. The <strong>Call now</strong> screen opens
+                      with them filled in (or pick a contact, or type a name and email). Tick <strong>Email them
+                      the link</strong> to send them a <strong>Join the call</strong> button, then click
+                      <strong>Start the call</strong>: the call opens in a new tab with you as the host, and the
+                      screen shows their link to copy or send. They need no account or app, and wait until you let
+                      them in. The link works for 3 hours. The contact's <strong>Calls</strong> list shows your
+                      recent calls with them.</p>
+                  <p>Who may start a call is the <strong>Calls</strong> permission under <strong>System &gt;
+                      Roles</strong>; Admin is given it once, the first time a Tool with calls runs. A site without
+                      any of those Tools has no instant calls at all.</p>
+
                   <h3>Notes</h3>
                   <p>Private notes for each user, with categories and search.</p>
 

package/admin/js/views/call-new.js

@@ -0,0 +1 @@
+import{apiRequest as p}from"../api.js";import{helpPopovers as V}from"../lib/help-popover.js";import{viewLifetime as Y}from"../lib/tool-kit.js";const z=/^#\/calls\/new\/?(\?.*)?$/,G=/^[^\s@<>"]+@[^\s@<>"]+\.[^\s@<>"]+$/,f=Y(z);export function openHostTab(){let t=null;try{t=window.open("","_blank")}catch{t=null}if(t)try{t.document.title="Starting the call\u2026",t.document.body.style.font="16px system-ui, sans-serif",t.document.body.textContent="Starting the call\u2026"}catch{}return t}export function aimTab(t,o){if(!t||t.closed)return!1;try{t.opener=null}catch{}return t.location.href=o,!0}const R=t=>(t?.message||String(t||"Something went wrong")).replace(/^HTTP \d+$/,"Something went wrong");export const callNewView={templateUrl:"/admin/js/templates/call-new.html",async onMount(t){f.reset();const o=t.get(0).querySelector(".cnx")||t.get(0),y=new URLSearchParams(location.hash.split("?")[1]||""),g=M.observable(!0),q=M.observable(""),s=M.observable(String(y.get("name")||"").slice(0,120)),i=M.observable(String(y.get("email")||"").slice(0,200)),c=M.observable(""),u=M.observable(""),r=M.observable(!0),m=M.observable(!1),w=M.observable(""),d=M.observable([]),k=M.observable(!1),h=M.observable(!1),v=M.observable(!1),b=M.observable(""),I=M.computed(()=>G.test(String(i.value||"").trim())),S=M.observable(!1),L=M.observable(!1),j=M.observable(""),T=M.observable(""),O=M.observable(""),P=M.observable("");let N=0,C=0;const x=M.effect(()=>{const e=String(w.value||"").trim();clearTimeout(C);const U=++N;if(e.length<2){d.value=[],k.value=!1;return}C=setTimeout(async()=>{try{const l=await p(`/calls/contacts?q=${encodeURIComponent(e)}`,{method:"GET"});if(U!==N)return;const a=(Array.isArray(l)?l:[]).slice(0,8).map(n=>({id:String(n.id),name:n.name||n.email||"(no name)",email:n.email||"",note:n.mine===!1?"shared with you":""}));d.value=a,k.value=a.length===0}catch(l){(l?.status===403||l?.status===404)&&(h.value=!1),d.value=[]}},200)});f.add(()=>{clearTimeout(C);try{typeof x=="function"?x():x?.dispose?.()}catch{}});const A={loading:g,unavailable:q,name:s,email:i,contactId:c,contactName:u,mailReady:r,notify:m,q:w,matches:d,noMatch:k,contactsOn:h,busy:v,err:b,hasEmail:I,started:S,blocked:L,hostUrl:j,joinUrl:T,emailLine:O,mailto:P,pick(e){c.value=e.id,u.value=e.name,s.value=e.name==="(no name)"?"":e.name,i.value=e.email,m.value=!!e.email&&r.peek(),w.value=""},clearContact(){c.value="",u.value="",s.value="",i.value="",m.value=!1},close:()=>{history.length>1?history.back():location.hash="#/"},async copyLink(){try{await navigator.clipboard.writeText(T.peek()),E.toast("Their link is copied",{type:"success",duration:1500})}catch{o.querySelector(".cnx-link")?.select?.(),E.toast("Copy it from the box (Ctrl+C)",{type:"info"})}},selectLink:e=>{try{e?.target?.select?.()}catch{}},save(){if(v.peek()||S.peek())return;const e={name:String(s.peek()||"").trim(),email:String(i.peek()||"").trim()};if(e.email&&!G.test(e.email)){b.value="That email address does not look right.";return}const U=m.peek()===!0&&!!e.email&&r.peek();b.value="";const l=openHostTab();v.value=!0,p("/calls",{method:"POST",body:JSON.stringify({...e,contactId:c.peek(),notify:U})}).then(a=>{const n=new URL(a.hostUrl,location.origin).href,_=aimTab(l,n);j.value=n,T.value=a.joinUrl,L.value=!_;const $=e.name||e.email||"them";O.value=a.emailed===!0?`Emailed ${$} their link.`:a.emailLimited===!0?`Not emailed: ${$} has had several call emails in the last hour. Send them the link below, or read it out.`:e.email?`${$} has not been emailed - send them the link below, or read it out.`:"Send them the link below, or read it out.",P.value=`mailto:${encodeURIComponent(e.email)}?subject=${encodeURIComponent("Join the call")}&body=${encodeURIComponent(`Join the call: ${a.joinUrl}`)}`,S.value=!0,setTimeout(()=>o.querySelector(".cnx-link")?.focus(),60)}).catch(a=>{try{l?.close()}catch{}b.value=a?.status===404?"Calls are not available on this site.":a?.status===429?"That is a lot of calls in a minute - wait a moment and try again.":`No call: ${R(a)}`}).finally(()=>{v.value=!1})}};f.add(V(o)),window.I?.scan?.(o);const J=Object.fromEntries(Object.entries(A).filter(([,e])=>typeof e=="function"&&!M.isObservable?.(e))),H=M.applyBindings(A,o,{methods:J});f.add(()=>{try{H?.dispose?.()}catch{}});try{const e=await p("/calls/status",{method:"GET"});r.value=e?.mailReady!==!1,h.value=e?.contacts===!0}catch(e){g.value=!1,q.value=e?.status===404?"Calls need a Pro Tool with calls - Booking Pro, Contacts Pro or Calendar.":e?.status===403?"Your role cannot start calls. Ask an administrator for the Calls permission.":`Calls could not load: ${R(e)}`;return}const B=y.get("contact");if(B)try{const e=await p(`/calls/contact/${encodeURIComponent(B)}`,{method:"GET"});c.value=e.id,u.value=e.name||e.email||"(no name)",s.value=e.name||"",i.value=e.email||""}catch(e){E.toast(`That contact could not be read: ${R(e)}`,{type:"warning"})}m.value=I.peek()&&r.peek(),g.value=!1,setTimeout(()=>o.querySelector(c.peek()||s.peek()?"#cnx-email":h.peek()?"#cnx-q":"#cnx-name")?.focus(),60)}};

package/admin/js/views/index.js

@@ -1 +1 @@
-import{dashboardView as o}from"./dashboard.js";import{pagesView as i}from"./pages.js";import{pageEditorView as r}from"./page-editor.js";import{settingsView as t}from"./settings.js";import{themeView as e}from"./theme.js";import{notificationsView as m}from"./notifications.js";import{layoutsView as p}from"./layouts.js";import{mediaView as n}from"./media.js";import{loginView as s}from"./login.js";import{usersView as f}from"./users.js";import{userEditorView as w}from"./user-editor.js";import{pluginsView as c}from"./plugins.js";import{pluginCodeView as V}from"./plugin-code.js";import{documentationView as d}from"./documentation.js";import{tutorialsView as a}from"./tutorials.js";import{docViews as l}from"./doc-pages.js";import{pluginGuidesView as u,pluginGuideView as E}from"./plugin-guides.js";import{apiReferenceView as g}from"./api-reference.js";import{collectionsView as v}from"./collections.js";import{collectionEditorView as b}from"./collection-editor.js";import{collectionEntriesView as h}from"./collection-entries.js";import{formsView as y}from"./forms.js";import{formEditorView as j}from"./form-editor.js";import{formSubmissionsView as k}from"./form-submissions.js";import{viewsListView as L}from"./views-list.js";import{viewEditorView as x}from"./view-editor.js";import{viewPreviewView as M}from"./view-preview.js";import{actionsListView as D}from"./actions-list.js";import{actionEditorView as G}from"./action-editor.js";import{proDocsView as P}from"./pro-docs.js";import{blocksView as R}from"./blocks.js";import{blockEditorView as S}from"./block-editor.js";import{componentsView as C}from"./components.js";import{componentEditorView as T}from"./component-editor.js";import{myProfileView as U}from"./my-profile.js";import{rolesView as q}from"./roles.js";import{roleEditorView as z}from"./role-editor.js";import{effectsView as A}from"./effects.js";import{searchView as B}from"./search.js";import{notesView as F}from"./notes.js";import{todoView as H}from"./todo.js";import{analyticsView as I}from"./analytics.js";import{seoView as J}from"./seo.js";import{contactsView as K}from"./contacts.js";import{menusView as N}from"./menus.js";import{contextMenusView as O}from"./context-menus.js";import{contextMenuEditorView as Q}from"./context-menu-editor.js";import{menuEditorView as W}from"./menu-editor.js";import{menuLocationsView as X}from"./menu-locations.js";import{projectsView as Y}from"./projects.js";import{projectDetailView as Z}from"./project-detail.js";import{projectSettingsView as _}from"./project-settings.js";import{apiTokensView as $}from"./api-tokens.js";import{apiEndpointsView as oo}from"./api-endpoints.js";import{apiEndpointEditorView as io}from"./api-endpoint-editor.js";const ro={templateUrl:"",async onMount(){location.hash="#/menus"}};export const views={projects:Y,projectDetail:Z,projectSettings:_,apiTokens:$,apiEndpoints:oo,apiEndpointEditor:io,dashboard:o,pages:i,pageEditor:r,settings:t,theme:e,layouts:p,media:n,login:s,users:f,userEditor:w,plugins:c,pluginCode:V,documentation:d,tutorials:a,apiReference:g,collections:v,collectionEditor:b,collectionEntries:h,forms:y,formEditor:j,formSubmissions:k,viewsList:L,viewEditor:x,viewPreview:M,actionsList:D,actionEditor:G,proDocs:P,blocks:R,blockEditor:S,components:C,componentEditor:T,myProfile:U,roles:q,roleEditor:z,effects:A,search:B,notes:F,todo:H,analytics:I,seo:J,contacts:K,notifications:m,menus:N,contextMenus:O,contextMenuEditor:Q,menuEditor:W,menuLocations:X,menusRedirect:ro,pluginGuides:u,pluginGuide:E,...l};
+import{dashboardView as o}from"./dashboard.js";import{pagesView as i}from"./pages.js";import{pageEditorView as r}from"./page-editor.js";import{settingsView as e}from"./settings.js";import{themeView as t}from"./theme.js";import{notificationsView as m}from"./notifications.js";import{layoutsView as p}from"./layouts.js";import{mediaView as n}from"./media.js";import{loginView as s}from"./login.js";import{usersView as f}from"./users.js";import{userEditorView as w}from"./user-editor.js";import{pluginsView as c}from"./plugins.js";import{pluginCodeView as V}from"./plugin-code.js";import{documentationView as a}from"./documentation.js";import{tutorialsView as d}from"./tutorials.js";import{docViews as l}from"./doc-pages.js";import{pluginGuidesView as u,pluginGuideView as E}from"./plugin-guides.js";import{apiReferenceView as g}from"./api-reference.js";import{collectionsView as v}from"./collections.js";import{collectionEditorView as b}from"./collection-editor.js";import{collectionEntriesView as h}from"./collection-entries.js";import{formsView as y}from"./forms.js";import{formEditorView as j}from"./form-editor.js";import{formSubmissionsView as k}from"./form-submissions.js";import{viewsListView as L}from"./views-list.js";import{viewEditorView as x}from"./view-editor.js";import{viewPreviewView as M}from"./view-preview.js";import{actionsListView as D}from"./actions-list.js";import{actionEditorView as G}from"./action-editor.js";import{proDocsView as P}from"./pro-docs.js";import{blocksView as R}from"./blocks.js";import{blockEditorView as S}from"./block-editor.js";import{componentsView as C}from"./components.js";import{componentEditorView as N}from"./component-editor.js";import{myProfileView as T}from"./my-profile.js";import{rolesView as U}from"./roles.js";import{roleEditorView as q}from"./role-editor.js";import{effectsView as z}from"./effects.js";import{searchView as A}from"./search.js";import{notesView as B}from"./notes.js";import{todoView as F}from"./todo.js";import{analyticsView as H}from"./analytics.js";import{seoView as I}from"./seo.js";import{contactsView as J}from"./contacts.js";import{callNewView as K}from"./call-new.js";import{menusView as O}from"./menus.js";import{contextMenusView as Q}from"./context-menus.js";import{contextMenuEditorView as W}from"./context-menu-editor.js";import{menuEditorView as X}from"./menu-editor.js";import{menuLocationsView as Y}from"./menu-locations.js";import{projectsView as Z}from"./projects.js";import{projectDetailView as _}from"./project-detail.js";import{projectSettingsView as $}from"./project-settings.js";import{apiTokensView as oo}from"./api-tokens.js";import{apiEndpointsView as io}from"./api-endpoints.js";import{apiEndpointEditorView as ro}from"./api-endpoint-editor.js";const eo={templateUrl:"",async onMount(){location.hash="#/menus"}};export const views={projects:Z,projectDetail:_,projectSettings:$,apiTokens:oo,apiEndpoints:io,apiEndpointEditor:ro,dashboard:o,pages:i,pageEditor:r,settings:e,theme:t,layouts:p,media:n,login:s,users:f,userEditor:w,plugins:c,pluginCode:V,documentation:a,tutorials:d,apiReference:g,collections:v,collectionEditor:b,collectionEntries:h,forms:y,formEditor:j,formSubmissions:k,viewsList:L,viewEditor:x,viewPreview:M,actionsList:D,actionEditor:G,proDocs:P,blocks:R,blockEditor:S,components:C,componentEditor:N,myProfile:T,roles:U,roleEditor:q,effects:z,search:A,notes:B,todo:F,analytics:H,seo:I,contacts:J,callNew:K,notifications:m,menus:O,contextMenus:Q,contextMenuEditor:W,menuEditor:X,menuLocations:Y,menusRedirect:eo,pluginGuides:u,pluginGuide:E,...l};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "domma-cms",
-  "version": "0.104.2",
+  "version": "0.105.0",
   "description": "File-based CMS powered by Domma and Fastify. Run npx domma-cms my-site to create a new project.",
   "type": "module",
   "main": "server/server.js",

package/plugins/_lib/public/call/call.js

@@ -107,6 +107,13 @@ function mount(el) {
     let cfg;
     try { cfg = JSON.parse(el.getAttribute('data-dm-call') || '{}'); } catch { cfg = {}; }
     if (!M || !cfg.api || !cfg.room) { el.textContent = 'This call page could not start.'; return; }
+    // The link's credentials (?t= / ?h= / ?key=) are in the config now: take them out of the address bar, so
+    // a script that reads location later, a screenshot or a copied address never carries them. This tab keeps
+    // them (sessionStorage), so a reload of the bare address can come back (core's /_call "not valid" page does).
+    if (location.search) {
+        try { sessionStorage.setItem(`dm-call:${location.pathname}`, location.search); } catch { /* storage blocked */ }
+        try { history.replaceState(history.state, '', location.pathname + location.hash); } catch { /* never mind */ }
+    }
 
     // ---- State the screen shows -------------------------------------------------------
     const stage = M.observable('check');                // check | waiting | in | ended | away | error

package/plugins/booking/CLAUDE.md

@@ -32,6 +32,10 @@ min, callOpenedAt + 2 h), so the customer's EXISTING link works at once - Bookin
 not-online | cancelled), `callLinks(b, request?)` (absolute join/host URLs from a RAW booking), `adminBooking`,
 `ownContact(id, userId)`, `siteBase(request?)`; `book()` takes `contactId` + `userId` (checked with `ownContact`) and
 `request` (for the email links). An older Pro registers no actions; an older Booking ignores them.
+Instant calls ("Call Sam now…", not a booking) were Booking Pro 0.3's and MOVED INTO THE CMS in Booking Pro 0.4.0
+(core `services/instantCalls.js`, admin `#/calls/new`): Pro's banner action `call-now` now only sends the browser to
+`#/calls/new[?contact=|?email=&name=]`, so the deep link `#/plugins/booking/call-now?...` above ends there too. Nothing in
+Booking changed for it; `ownContact`/`siteBase` stay for Pro's booking-panel Call now.
 
 1.3.0 (2026-09-30): online bookings (plan: `dcms-marketplace/docs/online-meetings-plan.md`). An extension's
 `rules()` may say `online` (+ `recordingAllowed`); `placeBooking` then stores `online: true`, `hostKey`,

package/plugins/booking/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "booking",
   "displayName": "Booking",
-  "version": "1.4.0",
+  "version": "1.4.1",
   "tier": "free",
   "description": "Let people book appointments with you or your team, and rooms or equipment, from a booking page on your site. Opening hours, days off and buffers; confirmation and reminder emails with a link to change or cancel; a diary in the admin. Book straight from a contact or an email.",
   "author": "Domma CMS",

package/plugins/booking/plugin.public.js

@@ -35,6 +35,9 @@ export function matchBookingPath(pathname, base) {
     return null;
 }
 
+/** On a bare call address: return to the link this tab kept (the call screen moves it out of the address bar). */
+const RECOVER_CALL = '<script>(function(){try{if(location.search)return;var s=sessionStorage.getItem("dm-call:"+location.pathname);if(s&&s.charAt(0)==="?")location.replace(location.pathname+s);}catch(e){}})();</script>';
+
 export const esc = (s) => String(s ?? '').replace(/&/g, '&amp;').replace(/</g, '&lt;').replace(/>/g, '&gt;').replace(/"/g, '&quot;').replace(/'/g, '&#39;');
 
 /** Plain text with blank lines between paragraphs, as HTML. */
@@ -131,7 +134,9 @@ export default async function bookingPublic(fastify) {
         const head = `<header class="bk-hero"><p class="bk-crumbs"><a href="${esc(s.bookingPath)}">${esc(s.pageTitle || 'Book')}</a></p>`;
         if (!who) {
             return send(reply, request, s, {page: 'call', title: `Call - ${s.pageTitle || 'Book'}`, urlPath: `${s.bookingPath}/call/${room}`, noindex: true,
-                body: `${head}<h1>This call link is not valid</h1></header><p class="bk-note">The booking may have been cancelled or moved. Check the latest email we sent you.</p>`});
+                body: `${head}<h1>This call link is not valid</h1></header><p class="bk-note">The booking may have been cancelled or moved. Check the latest email we sent you.</p>`
+                    // A reload of the bare address (the call screen took the link out of the address bar): back to it.
+                    + (cred.t || cred.h ? '' : RECOVER_CALL)});
         }
         const {closesAt} = callWindow(b);
         const cfg = {api: '/api/plugins/booking/call', room, cred, title: `${b.serviceName}${who.host ? `: ${b.name}` : b.bookableName ? ` with ${b.bookableName}` : ''}`,

package/plugins/free-tier.lock.json

@@ -1,6 +1,6 @@
 {
   "note": "Written by `make sync-free-tier` in dcms-marketplace. Do not edit these plugins here - edit them there and sync.",
-  "source": "dcms-marketplace@4cdfbe1",
+  "source": "dcms-marketplace@25153e0",
   "plugins": {
     "blog": {
       "version": "1.9.4",
@@ -73,9 +73,9 @@
       }
     },
     "booking": {
-      "version": "1.4.0",
+      "version": "1.4.1",
       "files": {
-        "CLAUDE.md": "8e96d41dcbba3adcebf8456a6638e266f559d6fbfb4ba1406645a82cb40ce146",
+        "CLAUDE.md": "c4401810011ed98fe488e89e03d32ee601025818d1f354ec07fcd9f9add1115a",
         "admin/css/index.css": "4f7731921c0c5038cb1566a6ab2d43ffc35bf9b161e58f87a0cff423e81b47fa",
         "admin/lib/details.js": "8b37536bfa9ccfcc5265cc957ba8266d3f5f777133e7c0946ae49540f1c80e3c",
         "admin/lib/diary-layout.js": "d818c79001fb9a9ecc15c96239ba961b0a1d98b9e8fce903eefb57d85adf2a73",
@@ -100,8 +100,8 @@
         "lib/mail.js": "cad8f409df62d6e42f0f4024ec364bbe018a62b842fa3f7c38786fd4e7f92408",
         "lib/store.js": "270161f907c68de39d32758931e86c290582524af4650e722c2c3be209acc875",
         "plugin.js": "963e8190dbcaec71915d73402648899bb38135b25ec869a659d0938d03868682",
-        "plugin.json": "0ef595cd1925b41194821f97d0e0e0fca5edb20a98a0f97a8a0efd52e8c50c16",
-        "plugin.public.js": "cd607de84ba7cffe384aa40a1a5976277896bf3973baa6415a01a1a4c9e3aca1",
+        "plugin.json": "704402863b0aec563046b347d4341680e2dc9739db967bec0a933c2bf0e4e5c9",
+        "plugin.public.js": "5f2dc4f01202b16ae804364a33c547509d1fa4026eadebac440730234aa266b5",
         "public/booking.css": "8b88989fdd04e50efc1688a2f32fe2e422299d7d13b81bb8fce0cc162fa99df6",
         "public/booking.js": "7dfc3d205696967013886567f67a867443c2e370bac29019d69911d695fdbade",
         "public/lib/clean.js": "d591be9ea8462705b7bc8806670027fdd4d6d4764777da08e91a010d27ec1651",

package/server/routes/api/calls.js

@@ -0,0 +1,134 @@
+/**
+ * Instant calls - /api/calls (services/instantCalls.js)
+ *
+ * Every route here answers 404 until a Pro Tool with calls (Booking Pro,
+ * Contacts Pro, Calendar) has switched instant calls on - a free site has none -
+ * and again the moment the last one is disabled.
+ *
+ * Signed in, `calls` permission:
+ *   GET  /api/calls/status              {mailReady, contacts}                                   (calls.create)
+ *   GET  /api/calls/contacts?q=         contacts the caller may READ (own + shared), to pick     (calls.create)
+ *   GET  /api/calls/contact/:id         one contact the caller may read, to fill in             (calls.create)
+ *   POST /api/calls                     {name, email?, contactId?, notify} -> 201 {id, hostUrl, joinUrl, emailed, emailLimited?, expiresAt}
+ *   GET  /api/calls?contact=<id>        the caller's recent calls with that contact             (calls.read)
+ *
+ * Contacts are read through `readableContactIds` (services/hooks.js): the
+ * caller's own, plus whatever a sharing plugin (Contacts Pro) lets them read -
+ * its rule, not a copy of it. Reading contacts also needs Contacts on and the
+ * `contacts.read` permission.
+ *
+ * Limits on POST: 20 a minute per address (the route), CREATES_PER_MINUTE per
+ * user, and EMAILS_PER_ADDRESS_HOUR emails to any one recipient - past that the
+ * call is still made, with `emailed: false, emailLimited: true`.
+ *
+ * The call itself (no sign-in - the link is the credential):
+ *   /api/calls/room/:id/{join,poll,signal,chat,answer,recording,leave}   (plugins/_lib/call/routes.js)
+ *   join takes {t} (the guest) or {h} (the host); guests knock and the host lets them in.
+ */
+import {authenticate as defaultAuthenticate, requirePermission as defaultRequirePermission} from '../../middleware/auth.js';
+import {getEntry, listEntries} from '../../services/collections.js';
+import {readableContactIds} from '../../services/hooks.js';
+import {getPermissionsFor} from '../../services/roles.js';
+import {getEffectiveRoles} from '../../services/userRoles.js';
+import {isToolEnabled} from '../../services/tools.js';
+import {mountCallRoutes} from '../../../plugins/_lib/call/routes.js';
+import {getBaseUrl} from '../public.js';
+import {
+    EMAIL_RE, callMailReady, callPaths, callsOfContact, createCall, getCall, instantCallsEnabled, isOpen,
+    mayEmailAddress, mayStartCall, sendCallEmail, whoIsCalling
+} from '../../services/instantCalls.js';
+
+const CONTACTS_SLUG = 'contacts-contacts';
+
+/**
+ * @param {import('fastify').FastifyInstance} fastify
+ * @param {{authenticate?: Function, requirePermission?: Function, isEnabled?: () => boolean, rooms?: object}} [opts] - injectable for tests
+ */
+export async function callsRoutes(fastify, opts = {}) {
+    const authenticate = opts.authenticate || defaultAuthenticate;
+    const requirePermission = opts.requirePermission || defaultRequirePermission;
+    const isEnabled = opts.isEnabled || instantCallsEnabled;
+    const can = (action) => ({preHandler: [authenticate, requirePermission('calls', action)]});
+    const uidOf = (request) => String(request.user?.id ?? request.user?.sub ?? '');
+    const hostNameOf = (request) => String(request.user?.name || request.user?.email || '').trim();
+    const fail = (reply, status, error, extra = {}) => reply.code(status).send({error, ...extra});
+    const viewerOf = (request) => ({id: uidOf(request), roles: getEffectiveRoles(request.user || {})});
+    /** Contacts on, and a role that may read them. */
+    const mayReadContacts = (viewer) => isToolEnabled('contacts')
+        && viewer.roles.some(r => getPermissionsFor('contacts', 'read').includes(r));
+    const shape = (e) => ({id: e.id, name: String(e.data?.name || ''), email: String(e.data?.email || '')});
+
+    // No Pro Tool with calls: nothing here exists.
+    fastify.addHook('onRequest', async (request, reply) => {
+        if (!isEnabled()) return reply.code(404).send({error: 'Not found'});
+    });
+
+    /** One contact the caller may read, or null (Contacts off, not readable, gone). */
+    async function readableContact(id, viewer) {
+        if (!id || !viewer.id || !mayReadContacts(viewer)) return null;
+        const e = await getEntry(CONTACTS_SLUG, String(id)).catch(() => null);
+        if (!e || !(await readableContactIds([e], viewer)).has(e.id)) return null;
+        return {...shape(e), mine: e.data?.userId === viewer.id};
+    }
+
+    fastify.get('/status', can('create'), async (request, reply) => {
+        return reply.send({mailReady: callMailReady(), contacts: mayReadContacts(viewerOf(request))});
+    });
+
+    fastify.get('/contacts', can('create'), async (request, reply) => {
+        const viewer = viewerOf(request);
+        if (!mayReadContacts(viewer)) return fail(reply, 403, 'Contacts are not available to you.');
+        const q = String(request.query?.q || '').trim().toLowerCase().slice(0, 100);
+        if (q.length < 2) return reply.send([]);
+        const {entries} = await listEntries(CONTACTS_SLUG, {limit: 100000}).catch(() => ({entries: []}));
+        const hits = (entries || []).filter(e => [e.data?.name, e.data?.email, e.data?.phone]
+            .some(v => String(v || '').toLowerCase().includes(q)));
+        const ok = await readableContactIds(hits, viewer);
+        const out = hits.filter(e => ok.has(e.id)).map(e => ({...shape(e), mine: e.data?.userId === viewer.id}))
+            .sort((a, b) => Number(b.mine) - Number(a.mine) || a.name.localeCompare(b.name)).slice(0, 20);
+        return reply.send(out);
+    });
+
+    fastify.get('/contact/:id', can('create'), async (request, reply) => {
+        const c = await readableContact(String(request.params.id), viewerOf(request));
+        if (!c) return fail(reply, 404, 'That contact could not be found.');
+        return reply.send(c);
+    });
+
+    fastify.post('/', {...can('create'), config: {rateLimit: {max: 20, timeWindow: '1 minute'}}}, async (request, reply) => {
+        const body = request.body || {};
+        const name = String(body.name || '').trim().slice(0, 120);
+        const email = String(body.email || '').trim().toLowerCase().slice(0, 200);
+        if (email && !EMAIL_RE.test(email)) return fail(reply, 400, 'That email address does not look right.', {errors: {email: 'That email address does not look right.'}});
+        if (body.notify === true && !email) return fail(reply, 400, 'An email address, to send them the link.', {errors: {email: 'An email address, to send them the link.'}});
+        const viewer = viewerOf(request);
+        if (!mayStartCall(viewer.id)) return fail(reply, 429, 'That is a lot of calls in a minute - wait a moment and try again.');
+        const contact = body.contactId ? await readableContact(String(body.contactId), viewer) : null;
+        const rec = await createCall({name, email, contactId: contact?.id || '', hostId: viewer.id, hostName: hostNameOf(request)});
+        const paths = callPaths(rec);
+        const joinUrl = `${getBaseUrl(request)}${paths.join}`;
+        let emailed = false;
+        let emailLimited = false;
+        if (body.notify === true && email) {
+            if (mayEmailAddress(email)) emailed = await sendCallEmail({to: email, name, hostName: rec.hostName, joinUrl}, {log: request.log});
+            else emailLimited = true;
+        }
+        return reply.code(201).send({id: rec.id, hostUrl: paths.host, joinUrl, emailed: emailed === true,
+            ...(emailLimited ? {emailLimited: true} : {}), expiresAt: rec.expiresAt});
+    });
+
+    fastify.get('/', can('read'), async (request, reply) => {
+        const contact = String(request.query?.contact || '');
+        if (!contact) return fail(reply, 400, 'contact is required');
+        const now = Date.now();
+        const list = (await callsOfContact(contact, uidOf(request))).slice(0, 20)
+            .map(c => ({id: c.id, name: c.name, createdAt: c.createdAt, expiresAt: c.expiresAt, open: isOpen(c, now)}));
+        return reply.send(list);
+    });
+
+    // The call engine: a room per call, guests knock, the host lets them in, open createdAt..expiresAt.
+    mountCallRoutes(fastify, {
+        prefix: '/room', ns: 'instant', ...(opts.rooms ? {rooms: opts.rooms} : {}),
+        resolve: async (request, room, body) => whoIsCalling(await getCall(String(room)), {t: body?.t, h: body?.h})
+    });
+}

package/server/routes/call-public.js

@@ -0,0 +1,104 @@
+/**
+ * An instant call's page (services/instantCalls.js), in the site's own shell:
+ *
+ *   /_call/<id>?t=<guest token>   the person called
+ *   /_call/<id>?h=<host key>      the host
+ *
+ * Under `/_call`, like `/_preview`. Answered from an onRequest hook, and ONLY
+ * while instant calls are on: with no Pro Tool with calls the request goes on
+ * to the normal page handling, so the path is never claimed on a free site.
+ * The link is checked here only to choose between the call and a short note;
+ * the call's join checks it again, and the time.
+ *
+ * The credential is in the URL, so: no referrer, no caching, no indexing, and
+ * the page is rendered WITHOUT the site's and plugins' injected head/body
+ * snippets or the analytics beacon (renderBlogPage `injection: false`) - no
+ * third-party script sees `?h=`. call.js then takes the credentials out of the
+ * address bar (keeping them in sessionStorage for this tab), and a reload of
+ * the bare address comes back to them through the small script on the "not
+ * valid" page (`recoverScript`).
+ *
+ * @module routes/call-public
+ */
+import fs from 'node:fs';
+import path from 'node:path';
+import {fileURLToPath} from 'node:url';
+import {renderBlogPage} from '../services/renderer.js';
+import {getBaseUrl} from './public.js';
+import {CALL_PATH, ROOM_API, getCall, instantCallsEnabled, whoIsCalling} from '../services/instantCalls.js';
+
+const HERE = path.dirname(fileURLToPath(import.meta.url));
+const TEMPLATE = path.join(HERE, '..', 'templates', 'call.html');
+const ASSET_V = (() => {
+    try { return JSON.parse(fs.readFileSync(path.join(HERE, '..', '..', 'package.json'), 'utf8')).version || '1'; } catch { return '1'; }
+})();
+
+export const esc = (s) => String(s ?? '').replace(/&/g, '&amp;').replace(/</g, '&lt;').replace(/>/g, '&gt;').replace(/"/g, '&quot;').replace(/'/g, '&#39;');
+
+/**
+ * The page's body and status: the call (200), "not valid" (404) or "ended" (410).
+ *
+ * @param {object|null} rec
+ * @param {object|null} who - whoIsCalling(rec, cred)
+ * @param {{t?: string, h?: string}} cred
+ */
+/**
+ * On the "not valid" page of a bare `/_call/<id>` (no credentials in the
+ * address): this tab's call page stripped them (call.js) - go back to it with them.
+ * A wrong credential always has a query string, so this cannot loop.
+ */
+export const recoverScript = '<script>(function(){try{if(location.search)return;'
+    + 'var s=sessionStorage.getItem("dm-call:"+location.pathname);'
+    + 'if(s&&s.charAt(0)==="?")location.replace(location.pathname+s);}catch(e){}})();</script>';
+
+export function callPage(rec, who, cred, now = Date.now()) {
+    if (!rec || !who) {
+        const bare = !cred?.t && !cred?.h;
+        return {status: 404, title: 'Call', body: '<h1>This call link is not valid</h1><p>Ask the person who sent it for a new one.</p>'
+            + (bare ? recoverScript : '')};
+    }
+    if (!(Date.parse(rec.expiresAt) > now)) {
+        return {status: 410, title: 'Call', body: '<h1>This call has ended</h1><p>Ask the person who sent the link for a new one.</p>'};
+    }
+    const cfg = {api: ROOM_API, room: rec.id, cred, title: who.title, askName: !who.host && !rec.name, recordingAllowed: false, closesAt: rec.expiresAt};
+    return {
+        status: 200,
+        title: who.title,
+        body: `<link rel="stylesheet" href="/plugins/_lib/public/call/call.css?v=${esc(ASSET_V)}">`
+            + `<div data-dm-call='${esc(JSON.stringify(cfg))}'><noscript><p>The call needs JavaScript switched on.</p></noscript></div>`
+            + `<script type="module" src="/plugins/_lib/public/call/call.js?v=${esc(ASSET_V)}"></script>`
+    };
+}
+
+/**
+ * @param {import('fastify').FastifyInstance} fastify
+ * @param {{isEnabled?: () => boolean}} [opts]
+ */
+export async function callPublicRoutes(fastify, opts = {}) {
+    const isEnabled = opts.isEnabled || instantCallsEnabled;
+    const PREFIX = `${CALL_PATH}/`;
+
+    fastify.addHook('onRequest', async (request, reply) => {
+        if (request.method !== 'GET' && request.method !== 'HEAD') return;
+        const [pathname, search = ''] = String(request.url || '').split('?');
+        if (!pathname.startsWith(PREFIX) || !isEnabled()) return;
+        let id = '';
+        try { id = decodeURIComponent(pathname.slice(PREFIX.length)).slice(0, 64); } catch { return; }
+        if (!id || id.includes('/')) return;
+        reply.header('referrer-policy', 'no-referrer');
+        reply.header('cache-control', 'no-store, private');
+        reply.header('x-robots-tag', 'noindex, nofollow');
+        const q = new URLSearchParams(search);
+        const cred = q.get('h') ? {h: q.get('h').slice(0, 128)} : {t: String(q.get('t') || '').slice(0, 128)};
+        const rec = await getCall(id);
+        const page = callPage(rec, whoIsCalling(rec, cred), cred);
+        const html = await renderBlogPage(TEMPLATE, {body: page.body}, {
+            title: page.title, urlPath: `${CALL_PATH}/${encodeURIComponent(id)}`, noindex: true, baseUrl: getBaseUrl(request),
+            injection: false
+        });
+        return reply.code(page.status).type('text/html; charset=utf-8').send(html);
+    });
+}
+
+// The onRequest hook must see every request, not only routes registered here (it registers none).
+callPublicRoutes[Symbol.for('skip-override')] = true;

package/server/server.js

@@ -579,6 +579,12 @@ await app.register(toolGate('seo', seoRoutes), {prefix: '/api/seo'});
 await app.register(toolsRoutes, {prefix: '/api'});
 // What plugins show beside a contact or a note (Calendar's Events) - 0.79.
 await app.register(relatedRoutes, {prefix: '/api/related'});
+// Instant calls ("Call Sam now…") - core code, switched on only by a Pro Tool with calls
+// (hooks.enableInstantCalls, services/instantCalls.js); 404 on every route until then.
+{
+    const {callsRoutes} = await import('./routes/api/calls.js');
+    await app.register(callsRoutes, {prefix: '/api/calls'});
+}
 
 // ---------------------------------------------------------------------------
 // CMS Plugins (server-side Fastify plugins from plugins/ directory)
@@ -702,6 +708,9 @@ for (const [name, plugin] of Object.entries(getLoadedPlugins())) {
 // out-prioritises the catch-all; must be registered before it.
 const { docsPublicRoutes } = await import('./routes/docs-public.js');
 await app.register(docsPublicRoutes);
+// An instant call's page, /_call/<id> (a reserved prefix, like /_preview) - before the catch-all.
+const { callPublicRoutes } = await import('./routes/call-public.js');
+await app.register(callPublicRoutes);
 
 const { publicRoutes } = await import('./routes/public.js');
 await app.register(publicRoutes);

package/server/services/hooks.js

@@ -299,9 +299,12 @@ const _relatedProviders = new Map(); // kind -> Map(id -> provider)
  * `actions` are shown in the record's menu, `{id}` in a url replaced by the
  * record's id: `[{label, icon?, url, permission?}]`. `permission`
  * (`{resource, action}`) shows the action only to roles that hold it.
+ * `when` (optional, `() => boolean`) is asked on every request: a provider that
+ * answers false is left out for now (its actions and its list) - core's instant
+ * calls stand aside that way while an older Booking Pro registers its own.
  *
  * @param {'contact'|'note'|'message'} kind
- * @param {{id: string, label: string, icon?: string, list: Function, actions?: object[], owner?: string}} provider
+ * @param {{id: string, label: string, icon?: string, list: Function, actions?: object[], owner?: string, when?: Function}} provider
  * @returns {boolean}
  */
 export function registerRelatedItems(kind, provider = {}) {
@@ -326,11 +329,17 @@ export function registerRelatedItems(kind, provider = {}) {
     icon: typeof provider.icon === 'string' ? provider.icon : 'link',
     owner: typeof provider.owner === 'string' ? provider.owner : 'core',
     actions,
-    list: typeof list === 'function' ? list : () => []
+    list: typeof list === 'function' ? list : () => [],
+    ...(typeof provider.when === 'function' ? {when: provider.when} : {})
   });
   return true;
 }
 
+/** Is a provider with this id registered for this kind (whatever its `when` says)? */
+export function hasRelatedProvider(kind, id) {
+  return Boolean(_relatedProviders.get(kind)?.has(id));
+}
+
 /** @param {string} kind @param {string} id */
 export function unregisterRelatedItems(kind, id) {
   _relatedProviders.get(kind)?.delete(id);
@@ -338,7 +347,61 @@ export function unregisterRelatedItems(kind, id) {
 
 /** The providers for one kind of record. */
 export function getRelatedProviders(kind) {
-  return [...(_relatedProviders.get(kind)?.values() ?? [])];
+  return [...(_relatedProviders.get(kind)?.values() ?? [])].filter((p) => {
+    try { return !p.when || p.when() !== false; } catch { return true; }
+  });
+}
+
+// ---------------------------------------------------------------------------
+// 7b. Contact read access - who may read a contact that is not their own
+// ---------------------------------------------------------------------------
+//
+// Core Contacts are per user: only the owner reads one. A plugin that shares
+// contacts (Contacts Pro) registers the rule it enforces itself, so core code
+// that takes a contact id (instant calls) accepts exactly the contacts the
+// caller may read, without reimplementing the plugin's rule.
+
+const _contactAccess = new Map(); // owner -> fn(entries, viewer) => Promise<Iterable<id>>
+
+/**
+ * @param {string} owner - the plugin
+ * @param {(entries: object[], viewer: {id: string, roles: string[]}) => Promise<Iterable<string>>} fn
+ *   of the collection entries given (contacts-contacts, not the viewer's own), the ids the viewer may READ
+ */
+export function registerContactAccess(owner, fn) {
+  if (typeof owner !== 'string' || !owner || typeof fn !== 'function') return false;
+  _contactAccess.set(owner, fn);
+  return true;
+}
+
+/** @param {string} owner */
+export function unregisterContactAccess(owner) {
+  _contactAccess.delete(owner);
+}
+
+/**
+ * Which of these contact entries may the viewer read? Their own, plus whatever
+ * a registered rule allows. A rule that throws allows nothing.
+ *
+ * @param {object[]} entries - contacts-contacts entries
+ * @param {{id: string, roles?: string[]}} viewer
+ * @returns {Promise<Set<string>>} entry ids
+ */
+export async function readableContactIds(entries, viewer) {
+  const out = new Set();
+  if (!viewer?.id) return out;
+  const others = [];
+  for (const e of entries || []) {
+    if (e?.data?.userId === viewer.id) out.add(e.id);
+    else if (e) others.push(e);
+  }
+  if (!others.length) return out;
+  for (const fn of _contactAccess.values()) {
+    try {
+      for (const id of (await fn(others, {id: viewer.id, roles: viewer.roles || []})) || []) out.add(String(id));
+    } catch { /* a failing rule grants nothing */ }
+  }
+  return out;
 }
 
 // ---------------------------------------------------------------------------

package/server/services/instantCalls.js

@@ -0,0 +1,362 @@
+/**
+ * Instant calls - "Call Sam now…": a video call with one person, starting now,
+ * that is not a booking or an event. Nothing is reserved; it is a room, a link
+ * for the guest and a link for the host, open for INSTANT_HOURS.
+ *
+ * PRO ONLY. Core holds the code, but a site has instant calls only while a
+ * paid Tool with calls (Booking Pro, Contacts Pro, Calendar) is running and has
+ * called `hooks.enableInstantCalls()` at boot. Until then every route answers
+ * 404 (routes/api/calls.js, routes/call-public.js) and no "Call … now" action
+ * is registered anywhere - a free site never has them. plugins.js binds the
+ * hook to the plugin's own name, tier and closedSource flag; only a plugin that
+ * is `tier: "paid"` AND `closedSource: true` (so it loads only when licensed)
+ * may switch them on - a direct call without those (an import) is refused.
+ * Disabling the last such plugin switches them off at once (disableInstantCalls,
+ * from plugins.js runLifecycleHook).
+ *
+ * An OLDER Booking Pro (0.3.x) still carries its own instant calls under the
+ * related provider id 'booking-pro-call'. While it is registered, core's own
+ * actions and list stand aside (checked per request), so nobody sees two.
+ *
+ * A record: {id, name, email, contactId, hostId, hostName, token, hostKey,
+ * createdAt, expiresAt}. Kept in memory and in one JSON file with the sign-in
+ * sessions (content/sessions/ - runtime state, never committed; see
+ * siteGitignore.js), so a restart keeps the links working. The call itself (who
+ * is in it) is the call engine's, in memory. Records are forgotten KEEP_DAYS
+ * after they end (a contact's card lists the recent ones), and never more than
+ * MAX_KEPT are kept.
+ *
+ * The page is `/_call/<id>?t=<guest token>` or `?h=<host key>`; the engine's
+ * routes are /api/calls/room/<id>/... Guests knock; the host lets them in.
+ *
+ * @module services/instantCalls
+ */
+
+import fs from 'node:fs/promises';
+import path from 'node:path';
+import {randomBytes, timingSafeEqual} from 'node:crypto';
+import {config, getConfig} from '../config.js';
+import {hasRelatedProvider, registerRelatedItems, unregisterRelatedItems} from './hooks.js';
+import {getPermissionsFor} from './roles.js';
+import {getEffectiveRoles} from './userRoles.js';
+import {createTransport, escapeHtml, isSmtpConfigured, sendEmail} from './email.js';
+
+export const INSTANT_HOURS = 3;
+export const KEEP_DAYS = 30;
+export const MAX_KEPT = 2000;
+export const CALL_PATH = '/_call';
+export const ROOM_API = '/api/calls/room';
+export const ID_RE = /^[\w-]{16,40}$/;
+export const EMAIL_RE = /^[^\s@<>"]+@[^\s@<>"]+\.[^\s@<>"]+$/;
+/** The related-items provider id, on a contact and on an email. */
+export const PROVIDER_ID = 'instant-calls';
+
+// ---------------------------------------------------------------------------
+// Switched on by a Pro Tool
+// ---------------------------------------------------------------------------
+
+/** The related provider id an older Booking Pro (0.3.x) registers for its own instant calls. */
+export const LEGACY_PROVIDER_ID = 'booking-pro-call';
+
+const owners = new Set();
+let granted = false;
+
+/**
+ * A Pro Tool switches instant calls on (plugins.js hands it to each plugin as
+ * `hooks.enableInstantCalls`, bound to the plugin's name, tier and closedSource).
+ *
+ * @param {{owner: string, tier?: string, closedSource?: boolean}} opts
+ * @returns {boolean} true when the owner is (now) one of the enablers
+ */
+export function enableInstantCalls({owner, tier, closedSource} = {}) {
+    if (typeof owner !== 'string' || !owner.trim()) return false;
+    // Pro only, and only through the plugin-bound hook: a paid, licensed (closedSource) plugin.
+    if (tier !== 'paid' || closedSource !== true) return false;
+    const first = owners.size === 0;
+    owners.add(owner.trim());
+    if (first) registerActions();
+    return true;
+}
+
+/**
+ * A Tool with calls was disabled: it no longer keeps them on. The last one
+ * gone switches them off at once - routes answer 404, the actions go.
+ *
+ * @param {string} owner
+ * @returns {boolean} whether instant calls are still on
+ */
+export function disableInstantCalls(owner) {
+    if (owners.delete(String(owner || '').trim()) && owners.size === 0) unregisterActions();
+    return owners.size > 0;
+}
+
+/**
+ * Admins may call; a role editor can give it to other roles. Once only - removed
+ * by hand, it stays removed. Awaited by plugins.js in its one-plugin-at-a-time
+ * access step (right after registerPluginAccess), so it never interleaves with a
+ * plugin's own grants (roles.js rewrites the roles file unlocked).
+ *
+ * @param {{grantPermissionOnce: Function}} rolesService
+ */
+export async function grantInstantCallsOnce(rolesService) {
+    if (granted || owners.size === 0 || typeof rolesService?.grantPermissionOnce !== 'function') return false;
+    granted = true;
+    try { await rolesService.grantPermissionOnce('admin', 'calls', 'core'); } catch { /* no admin role: nothing to grant */ }
+    return true;
+}
+
+/** Does this site have instant calls (a Pro Tool with calls running)? */
+export const instantCallsEnabled = () => owners.size > 0;
+
+/** Which Tools switched them on. */
+export const instantCallOwners = () => [...owners];
+
+/** Tests only: back to a site without instant calls. */
+export function resetInstantCalls() {
+    owners.clear();
+    granted = false;
+    unregisterActions();
+}
+
+/** May this user (a JWT user, or {roles}) do `action` with calls? */
+export function mayCall(user, action = 'create') {
+    const roles = Array.isArray(user?.roles) ? user.roles : getEffectiveRoles(user || {});
+    return roles.some(r => getPermissionsFor('calls', action).includes(r));
+}
+
+/** An older Booking Pro's own "Call … now" is registered for this kind: core stands aside. */
+const legacyHere = (kind) => hasRelatedProvider(kind, LEGACY_PROVIDER_ID);
+
+function unregisterActions() {
+    unregisterRelatedItems('contact', PROVIDER_ID);
+    unregisterRelatedItems('message', PROVIDER_ID);
+}
+
+function registerActions() {
+    const permission = {resource: 'calls', action: 'create'};
+    // A contact: "Call Sam now…" in its menu, and its recent calls on the card.
+    registerRelatedItems('contact', {
+        id: PROVIDER_ID, label: 'Calls', icon: 'video', owner: 'core', when: () => !legacyHere('contact'),
+        actions: [{label: 'Call {name} now…', icon: 'video', url: '#/calls/new?contact={id}', permission}],
+        async list({id, user}) {
+            if (!user?.id || !mayCall(user, 'read')) return [];
+            const now = Date.now();
+            return (await callsOfContact(id, String(user.id))).slice(0, 5).map(c => ({
+                id: c.id, title: 'Video call', startAt: c.createdAt, past: !isOpen(c, now), meta: isOpen(c, now) ? 'open now' : ''
+            }));
+        }
+    });
+    // An email in the mail reader: "Call Sam now…" with the sender filled in.
+    registerRelatedItems('message', {
+        id: PROVIDER_ID, label: 'Call', icon: 'video', owner: 'core', when: () => !legacyHere('message'),
+        actions: [{label: 'Call {name} now…', icon: 'video', url: '#/calls/new?email={email}&name={name}', permission}]
+    });
+}
+
+// ---------------------------------------------------------------------------
+// The records
+// ---------------------------------------------------------------------------
+
+let file = null;
+let loading = null;   // ONE promise of the Map id -> record: concurrent first calls share the same Map
+let writing = Promise.resolve();
+
+const defaultFile = () => path.resolve(path.dirname(config.content.usersDir), 'sessions', 'instant-calls.json');
+
+/** Tests: where the records live (null = the default). Forgets what was read. */
+export function useCallsFile(p) {
+    file = p || null;
+    loading = null;
+}
+
+function load() {
+    loading ||= (async () => {
+        let list = [];
+        try {
+            const parsed = JSON.parse(await fs.readFile(file || defaultFile(), 'utf8'));
+            if (Array.isArray(parsed)) list = parsed;
+        } catch { /* none yet, or unreadable: no link validates */ }
+        return new Map(list.filter(c => c && typeof c.id === 'string' && ID_RE.test(c.id)).map(c => [c.id, c]));
+    })();
+    return loading;
+}
+
+/** Queue a write of the whole store; writes run one after another, each with the Map as it is then. */
+function save(calls) {
+    const target = file || defaultFile();
+    const list = [...calls.values()];
+    writing = writing.then(async () => {
+        await fs.mkdir(path.dirname(target), {recursive: true});
+        const tmp = `${target}.tmp`;
+        await fs.writeFile(tmp, JSON.stringify(list, null, 2) + '\n', {encoding: 'utf8', mode: 0o600});
+        await fs.rename(tmp, target);
+    }).catch((err) => { console.warn(`[calls] Could not save the call links: ${err?.message || err}`); });
+    return writing;
+}
+
+const key = () => randomBytes(18).toString('base64url');
+
+/**
+ * Start one: the record, stored. Old records go first (ended KEEP_DAYS ago),
+ * then the oldest past MAX_KEPT - the file never grows without bound.
+ *
+ * @param {{name?: string, email?: string, contactId?: string, hostId?: string, hostName?: string}} who
+ * @param {number} [now]
+ */
+export async function createCall({name = '', email = '', contactId = '', hostId = '', hostName = ''} = {}, now = Date.now()) {
+    const all = await load();
+    for (const [id, c] of all) if (!(Date.parse(c.expiresAt) >= now - KEEP_DAYS * 86400000)) all.delete(id);
+    const over = all.size - MAX_KEPT + 1;
+    if (over > 0) {
+        [...all.entries()].sort((a, b) => String(a[1].createdAt).localeCompare(String(b[1].createdAt)))
+            .slice(0, over).forEach(([id]) => all.delete(id));
+    }
+    const rec = {
+        id: randomBytes(12).toString('base64url'),
+        name: String(name || '').trim().slice(0, 120),
+        email: String(email || '').trim().toLowerCase().slice(0, 200),
+        contactId: String(contactId || '').slice(0, 64),
+        hostId: String(hostId || '').slice(0, 64),
+        hostName: String(hostName || '').trim().slice(0, 120) || 'Your host',
+        token: key(),
+        hostKey: key(),
+        createdAt: new Date(now).toISOString(),
+        expiresAt: new Date(now + INSTANT_HOURS * 3600000).toISOString()
+    };
+    all.set(rec.id, rec);
+    await save(all);
+    return rec;
+}
+
+/** One record, or null. */
+export async function getCall(id) {
+    if (typeof id !== 'string' || !ID_RE.test(id)) return null;
+    return (await load()).get(id) || null;
+}
+
+/** One host's calls with one contact, newest first. */
+export async function callsOfContact(contactId, hostId) {
+    if (!contactId || !hostId) return [];
+    return [...(await load()).values()].filter(c => c.contactId === contactId && c.hostId === hostId)
+        .sort((a, b) => b.createdAt.localeCompare(a.createdAt));
+}
+
+const same = (a, b) => {
+    const x = Buffer.from(String(a || ''));
+    const y = Buffer.from(String(b || ''));
+    return x.length === y.length && x.length > 0 && timingSafeEqual(x, y);
+};
+
+/**
+ * Who the caller is in an instant call, or null (the engine answers 404).
+ * `cred` is what the link carried: {t} for the guest, {h} for the host. The
+ * engine answers 410 once `closesAt` has passed.
+ */
+export function whoIsCalling(rec, cred = {}) {
+    if (!rec) return null;
+    // One title for both: the room keeps the title of whoever joined first, so a per-person one
+    // ("Call with <the other>") would show the guest their own name.
+    const title = `Video call: ${rec.hostName} and ${rec.name || 'a guest'}`;
+    const base = {max: 6, recordingAllowed: false, autoAdmit: false, opensAt: rec.createdAt, closesAt: rec.expiresAt, title};
+    if (cred.h && same(cred.h, rec.hostKey)) {
+        return {...base, host: true, name: rec.hostName, identity: `${rec.id}:host`};
+    }
+    if (cred.t && same(cred.t, rec.token)) {
+        return {...base, host: false, name: rec.name || '', identity: `${rec.id}:guest`};
+    }
+    return null;
+}
+
+/** Is the call still open? */
+export const isOpen = (rec, now = Date.now()) => Boolean(rec) && Date.parse(rec.expiresAt) > now;
+
+/** The page addresses (relative to the site) of a call: the guest's and the host's. */
+export function callPaths(rec) {
+    const at = `${CALL_PATH}/${encodeURIComponent(rec.id)}`;
+    return {join: `${at}?t=${encodeURIComponent(rec.token)}`, host: `${at}?h=${encodeURIComponent(rec.hostKey)}`};
+}
+
+// ---------------------------------------------------------------------------
+// Limits - a host starting calls, and emails to one address
+// ---------------------------------------------------------------------------
+
+/** Calls one user may start in a minute (on top of the route's per-address limit). */
+export const CREATES_PER_MINUTE = 10;
+/** "Would like to talk now" emails one address may be sent in an hour, whoever sends them. */
+export const EMAILS_PER_ADDRESS_HOUR = 3;
+
+const createsBy = new Map();   // user id -> [times]
+const emailsTo = new Map();    // address -> [times]
+
+function take(map, key, max, windowMs, now) {
+    const since = now - windowMs;
+    const recent = (map.get(key) || []).filter(t => t > since);
+    if (recent.length >= max) { map.set(key, recent); return false; }
+    recent.push(now);
+    map.set(key, recent);
+    if (map.size > 10000) for (const [k, list] of map) if (!list.some(t => t > since)) map.delete(k);
+    return true;
+}
+
+/** May this user start another call now? Counts it when yes. */
+export const mayStartCall = (userId, now = Date.now()) => take(createsBy, String(userId || ''), CREATES_PER_MINUTE, 60000, now);
+
+/** May this address be emailed another call link now? Counts it when yes. */
+export const mayEmailAddress = (email, now = Date.now()) => take(emailsTo, String(email || '').trim().toLowerCase(), EMAILS_PER_ADDRESS_HOUR, 3600000, now);
+
+/** Tests only. */
+export function resetCallLimits() {
+    createsBy.clear();
+    emailsTo.clear();
+}
+
+// ---------------------------------------------------------------------------
+// The email ("<host> would like to talk now")
+// ---------------------------------------------------------------------------
+
+let mailer = null;
+let transport = null;
+let transportFor = '';
+
+/** Tests only: `fn(msg)` receives every message instead of SMTP. null restores. */
+export function setCallMailer(fn) { mailer = fn; }
+
+const site = () => { try { return getConfig('site') || {}; } catch { return {}; } };
+
+/** Can mail really leave this site? (No SMTP host = Ethereal = delivered to nobody, so not sent at all.) */
+export const callMailReady = () => Boolean(mailer) || isSmtpConfigured(site().smtp || {});
+
+/** The message, escaped. */
+export function composeCallEmail({name = '', hostName = '', joinUrl = ''}) {
+    const subject = `${hostName} would like to talk now`;
+    const lines = [`Hello${name ? ` ${name}` : ''}, ${hostName} would like to talk to you now, on a video call.`,
+        'Use the button below to join. You need a camera and microphone, or you can join with just one. The link works for the next few hours.'];
+    const html = [...lines.map(l => `<p>${escapeHtml(l)}</p>`),
+        `<p><a href="${escapeHtml(joinUrl)}" style="display:inline-block;padding:10px 18px;background:#2563eb;color:#fff;border-radius:6px;text-decoration:none">Join the call</a></p>`,
+        `<p style="color:#666;font-size:13px">Or paste this into your browser: ${escapeHtml(joinUrl)}</p>`].join('\n');
+    const text = [...lines, `Join the call: ${joinUrl}`].join('\n\n');
+    return {subject, html, text};
+}
+
+/**
+ * Send it. Never throws: a lost email must not fail the call (the host still
+ * has the link to pass on). Resolves to true only when it left.
+ */
+export async function sendCallEmail({to, name, hostName, joinUrl}, {log} = {}) {
+    try {
+        if (!to) return false;
+        const msg = {to, ...composeCallEmail({name, hostName, joinUrl})};
+        if (mailer) { await mailer(msg); return true; }
+        const s = site();
+        const smtp = s.smtp || {};
+        if (!isSmtpConfigured(smtp)) return false;
+        const k = JSON.stringify([smtp.host, smtp.port, smtp.user, smtp.secure]);
+        if (!transport || transportFor !== k) { transport = await createTransport(smtp); transportFor = k; }
+        await sendEmail(transport, {from: smtp.fromAddress || 'noreply@example.com', fromName: smtp.fromName || s.title || 'Calls', ...msg});
+        return true;
+    } catch (err) {
+        const line = `[calls] Email to ${to} not sent: ${err?.message || err}`;
+        try { if (typeof log?.error === 'function') log.error(line); else console.error(line); } catch { /* never */ }
+        return false;
+    }
+}

package/server/services/permissionRegistry.js

@@ -216,6 +216,19 @@ export const REGISTRY = [
             {key: 'manageGroups', label: 'Manage groups', description: 'Rename or delete any group, not only the ones they created - groups are shared, so this changes everyone\'s contacts'}
         ]
     },
+    {
+        // Instant calls (services/instantCalls.js). Only in use while a Pro Tool with calls
+        // (Booking Pro, Contacts Pro, Calendar) is running; admins are granted it then, once.
+        key: 'calls',
+        label: 'Calls',
+        description: 'Call someone now on a video call on your site ("Call Sam now…"). Needs a Pro Tool with calls: Booking Pro, Contacts Pro or Calendar.',
+        icon: 'video',
+        group: 'Tools',
+        actions: [
+            {key: 'read', label: 'View', description: 'See their own recent calls on a contact'},
+            {key: 'create', label: 'Call', description: 'Start a call and send the link'}
+        ]
+    },
     {
         key: 'analytics',
         label: 'Analytics',

package/server/services/plugins.js

@@ -26,6 +26,8 @@ import {
     registerShortcode,
     hideSidebarUrl,
     registerComponent,
+    registerContactAccess,
+    unregisterContactAccess,
     registerSidebarItem,
     registerTransform
 } from './hooks.js';
@@ -33,6 +35,7 @@ import {registerPluginResource, unregisterPluginResourcesByPlugin} from './permi
 import {registerThemeProvider} from './themeSettings.js';
 import {classifyEntitlement, mayLoad} from './pluginEntitlement.js';
 import {notifierFor} from './notify.js';
+import {disableInstantCalls, enableInstantCalls, grantInstantCallsOnce} from './instantCalls.js';
 import {createCollection, getCollection} from './collections.js';
 import * as defaultRolesService from './roles.js';
 import {getAdminScope, normaliseAdminScope} from './roles.js';
@@ -550,7 +553,13 @@ export async function registerPlugins(fastify) {
                   registerLoginCheck: (def) => registerLoginCheck(manifest.name, def),
                   registerPasswordCheck: (def) => registerPasswordCheck(manifest.name, def),
                   // A Domma component (.dmc source) usable as <dm-name> / [component] on pages (0.92.2).
-                  registerComponent: pluginComponentHook},
+                  registerComponent: pluginComponentHook,
+                  // Instant calls ("Call Sam now…", services/instantCalls.js) - a Pro Tool with calls switches
+                  // them on at boot. Bound to the plugin's name, tier and closedSource: only a paid plugin that
+                  // loads under a licence may.
+                  enableInstantCalls: () => enableInstantCalls({owner: manifest.name, tier: manifest.tier || 'free', closedSource: manifest.closedSource === true}),
+                  // Who may read a contact that is not their own (Contacts Pro's sharing) - hooks.js 7b.
+                  registerContactAccess: (fn) => registerContactAccess(manifest.name, fn)},
               settings,
               config: {}
           });
@@ -587,8 +596,13 @@ export async function registerPlugins(fastify) {
 
             // Permissions are held in memory, so they are registered on every
             // boot, not only on enable (roles are created once, then kept).
+            // Instant calls' admin grant rides the same awaited step, so no two grants ever write the roles
+            // file at once (roles.js rewrites it unlocked).
             await import('./roles.js')
-                .then(rolesService => registerPluginAccess(manifest.name, rolesService))
+                .then(async rolesService => {
+                    await registerPluginAccess(manifest.name, rolesService);
+                    await grantInstantCallsOnce(rolesService);
+                })
                 .catch(err => fastify.log.warn(`[plugins] Access setup for "${manifest.name}" failed: ${err.message}`));
 
             // Detect optional plugin.public.js for root-level route registration
@@ -1102,6 +1116,11 @@ export async function teardownPlugin(pluginName, services, fastify) {
 export async function runLifecycleHook(name, hook, fastify) {
     // Validate hook name
     if (!['onEnable', 'onDisable'].includes(hook)) return;
+    // A Tool with calls switched off stops keeping instant calls on - at once, not at the next restart.
+    if (hook === 'onDisable') {
+        disableInstantCalls(name);
+        unregisterContactAccess(name);
+    }
 
     const pluginJsPath = path.join(PLUGINS_DIR, name, 'plugin.js');
     try {

package/server/services/renderer.js

@@ -933,7 +933,8 @@ function buildFontVars(fontFamily, fontSize) {
  * @param {string} templatePath - Absolute path to the plugin HTML fragment
  * @param {object} data - Token replacement map; keys become {{key}} placeholders
  * @param {object} seoMeta - Optional SEO overrides: { title, description, ogImage,
- *   urlPath, ogType, noindex, baseUrl, user }. Pass `baseUrl` (derived from the
+ *   urlPath, ogType, noindex, baseUrl, user, injection }. `injection: false` leaves out the site's and
+ *   plugins' head/body snippets and the analytics beacon. Pass `baseUrl` (derived from the
  *   request) to populate canonical and og:url tags. Pass `user` (`{role, additionalRoles}`
  *   or null) so menu items gated by `visibility` are filtered correctly; blog
  *   callers currently default to anonymous (null).
@@ -941,6 +942,10 @@ function buildFontVars(fontFamily, fontSize) {
  */
 export async function renderBlogPage(templatePath, data = {}, seoMeta = {}) {
     const user = seoMeta.user || null;
+    // `injection: false` - no site/plugin head and body snippets and no analytics beacon: a page whose
+    // address carries a credential (an instant call's /_call/<id>?h=) must not hand it to a script
+    // the site or a plugin injects. The shell, theme and menus stay.
+    const bare = seoMeta.injection === false;
     // Plugin fragments know their own URL via seoMeta.urlPath - enough for a
     // menu bound to that page or to the project the URL falls under.
     const menuCtx = seoMeta.urlPath
@@ -1102,18 +1107,18 @@ export async function renderBlogPage(templatePath, data = {}, seoMeta = {}) {
                 : site.footer,
             social: site.social || null
         }).replace(/<\/script>/gi, '<\\/script>'),
-        headInject: [injection.head, navbarFontLink].filter(Boolean).join('\n'),
+        headInject: [bare ? '' : injection.head, navbarFontLink].filter(Boolean).join('\n'),
         // Theme overrides land BEFORE content/custom.css: the overrides are
         // generated, custom.css is hand-written, and the hand-written one stays
         // the last word.
-        headInjectLate: [injection.headLate, searchAssets.headTag, switcherAssets.headTag, themeView.customThemeStyleTag, themeView.overrideStyleTag, customCssTag, navbarStyleTag]
+        headInjectLate: [bare ? '' : injection.headLate, searchAssets.headTag, switcherAssets.headTag, themeView.customThemeStyleTag, themeView.overrideStyleTag, customCssTag, navbarStyleTag]
             .filter(Boolean).join('\n'),
         bodyEndInject: [
             overlayMenus,
-            injection.bodyEnd,
+            bare ? '' : injection.bodyEnd,
             searchAssets.bodyTag,
             switcherAssets.bodyTag,
-            buildAnalyticsTag(),
+            bare ? '' : buildAnalyticsTag(),
             (seoMeta.usedComponents || [])
                 .map(n => `<script type="module" src="/api/components/${n}.js"></script>`)
                 .join('\n')

package/server/templates/call.html

@@ -0,0 +1,3 @@
+<main class="container dm-call-page" style="padding: 2rem 0;">
+{{body}}
+</main>