payload-reserve 1.5.0 → 2.0.0

package/dist/translations/pl.json

@@ -99,6 +99,7 @@
   "fieldCustomerCreateNew": "Utwórz nowego klienta",
   "fieldCustomerClear": "Wyczyść wybór",
   "calendarPending": "Oczekujące",
+  "calendarShowingNofM": "Wyświetlono {{shown}} z {{total}} rezerwacji — zawęź zakres lub filtruj, aby zobaczyć resztę.",
   "pendingDateTime": "Data / Czas",
   "pendingActions": "Akcje",
   "pendingSelectAll": "Zaznacz wszystkie",

package/dist/translations/ru.json

@@ -99,6 +99,7 @@
   "fieldCustomerCreateNew": "Создать нового клиента",
   "fieldCustomerClear": "Очистить выбор",
   "calendarPending": "Ожидает",
+  "calendarShowingNofM": "Показано {{shown}} из {{total}} броней — сузьте диапазон или примените фильтр, чтобы увидеть остальные.",
   "pendingDateTime": "Дата / Время",
   "pendingActions": "Действия",
   "pendingSelectAll": "Выбрать все",

package/dist/translations/tr.json

@@ -99,6 +99,7 @@
   "fieldCustomerCreateNew": "Yeni müşteri oluştur",
   "fieldCustomerClear": "Seçimi temizle",
   "calendarPending": "Beklemede",
+  "calendarShowingNofM": "{{total}} rezervasyondan {{shown}} tanesi gösteriliyor — geri kalanını görmek için aralığı daraltın veya filtreleyin.",
   "pendingDateTime": "Tarih / Saat",
   "pendingActions": "İşlemler",
   "pendingSelectAll": "Tümünü seç",

package/dist/translations/zh.json

@@ -99,6 +99,7 @@
   "fieldCustomerCreateNew": "新建客户",
   "fieldCustomerClear": "清除选择",
   "calendarPending": "待处理",
+  "calendarShowingNofM": "显示 {{total}} 个预约中的 {{shown}} 个 — 缩小范围或筛选以查看其余部分。",
   "pendingDateTime": "日期 / 时间",
   "pendingActions": "操作",
   "pendingSelectAll": "全选",

package/dist/types.d.ts

@@ -3,6 +3,10 @@ export type DurationType = 'fixed' | 'flexible' | 'full-day';
 export type CapacityMode = 'per-guest' | 'per-reservation';
 export type StatusMachineConfig = {
     blockingStatuses: string[];
+    /** Status treated as "cancelled" — fires beforeBookingCancel/afterBookingCancel, the cancellation notice period, and the cancellationReason field. */
+    cancelStatus: string;
+    /** Status treated as "confirmed" — fires beforeBookingConfirm/afterBookingConfirm. */
+    confirmStatus: string;
     defaultStatus: string;
     statuses: string[];
     terminalStatuses: string[];
@@ -64,12 +68,15 @@ export type ResourceOwnerModeConfig = {
     ownerCollection?: string;
     /** Field name for the owner relationship on Resources (default: 'owner') */
     ownerField?: string;
+    /** User field holding the role for admin detection (default: staffProvisioning.roleField or 'role') */
+    roleField?: string;
 };
 export type ResolvedResourceOwnerModeConfig = {
     adminRoles: string[];
     ownedServices: boolean;
     ownerCollection?: string;
     ownerField: string;
+    roleField: string;
 };
 export type StaffProvisioningConfig = {
     /** Stamp tenant / custom fields onto the provisioned Resource before create. */
@@ -97,6 +104,17 @@ export type ResolvedStaffProvisioningConfig = {
     staffRoles: string[];
     userCollection: string;
 };
+/**
+ * Per-collection override applied to a generated collection. `fields` is a
+ * function receiving the plugin's default fields so you can append/reorder/
+ * replace them; supplied `hooks` are merged with (not replacing) the plugin's;
+ * `access` composes per operation; `slug` is ignored (use the `slugs` option).
+ */
+export type CollectionOverride = {
+    fields?: (args: {
+        defaultFields: Field[];
+    }) => Field[];
+} & Omit<Partial<CollectionConfig>, 'fields' | 'slug'>;
 export type ReservationPluginConfig = {
     /** Override access control per collection */
     access?: {
@@ -112,16 +130,31 @@ export type ReservationPluginConfig = {
     allowGuestBooking?: boolean;
     /** Hours of notice required before cancellation */
     cancellationNoticePeriod?: number;
+    /** Per-collection overrides applied to the generated collections (issue #4) */
+    collectionOverrides?: {
+        customers?: CollectionOverride;
+        reservations?: CollectionOverride;
+        resources?: CollectionOverride;
+        schedules?: CollectionOverride;
+        services?: CollectionOverride;
+    };
     /** Default buffer time in minutes between reservations */
     defaultBufferTime?: number;
     /** Disable the plugin entirely */
     disabled?: boolean;
-    /** Extra fields to append to the Reservations collection */
+    /** @deprecated Use `collectionOverrides.reservations.fields` instead. Extra fields appended to Reservations. */
     extraReservationFields?: Field[];
     /** Plugin hooks for external integrations */
     hooks?: ReservationPluginHooks;
     /** Configurable leave/exception type vocabulary (default: vacation/sick/personal/closure/other) */
     leaveTypes?: string[];
+    /** Tenant scoping for the custom admin views (calendar, availability, dashboard). Applied only when the scoped collection has the tenant field AND the tenant cookie is set. */
+    multiTenant?: {
+        /** Cookie written by the tenant-selector (default 'payload-tenant'). */
+        cookieName?: string;
+        /** Tenant field name on scoped collections (default 'tenant'). */
+        tenantField?: string;
+    };
     /** Enable resource-owner multi-tenancy (opt-in) */
     resourceOwnerMode?: ResourceOwnerModeConfig;
     /** Configurable resourceType vocabulary (default: staff/equipment/room) */
@@ -139,6 +172,8 @@ export type ReservationPluginConfig = {
     staffProvisioning?: StaffProvisioningConfig;
     /** Configurable status machine (defaults to current behavior) */
     statusMachine?: Partial<StatusMachineConfig>;
+    /** IANA business timezone governing schedules and day boundaries (default 'UTC') */
+    timezone?: string;
     /** Which existing auth collection to extend with customer fields */
     userCollection?: string;
 };
@@ -153,12 +188,25 @@ export type ResolvedReservationPluginConfig = {
     adminGroup: string;
     allowGuestBooking: boolean;
     cancellationNoticePeriod: number;
+    collectionOverrides: {
+        customers?: CollectionOverride;
+        reservations?: CollectionOverride;
+        resources?: CollectionOverride;
+        schedules?: CollectionOverride;
+        services?: CollectionOverride;
+    };
     defaultBufferTime: number;
     disabled: boolean;
     extraReservationFields: Field[];
+    /** Whether the media collection (`slugs.media`) exists — set by the plugin; gates the image upload fields. */
+    hasMediaCollection: boolean;
     hooks: ReservationPluginHooks;
     leaveTypes: string[];
     localized: boolean;
+    multiTenant: {
+        cookieName: string;
+        tenantField: string;
+    };
     resourceOwnerMode: ResolvedResourceOwnerModeConfig | undefined;
     resourceTypes: string[];
     slugs: {
@@ -171,6 +219,7 @@ export type ResolvedReservationPluginConfig = {
     };
     staffProvisioning: ResolvedStaffProvisioningConfig | undefined;
     statusMachine: StatusMachineConfig;
+    timezone: string;
     userCollection: string | undefined;
 };
 export type ReservationStatus = 'cancelled' | 'completed' | 'confirmed' | 'no-show' | 'pending';

package/dist/types.js

@@ -3,6 +3,8 @@ export const DEFAULT_STATUS_MACHINE = {
         'pending',
         'confirmed'
     ],
+    cancelStatus: 'cancelled',
+    confirmStatus: 'confirmed',
     defaultStatus: 'pending',
     statuses: [
         'pending',

package/dist/types.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/types.ts"],"sourcesContent":["import type { CollectionConfig, Field, PayloadRequest } from 'payload'\n\n// --- Duration & Capacity models ---\n\nexport type DurationType = 'fixed' | 'flexible' | 'full-day'\n\nexport type CapacityMode = 'per-guest' | 'per-reservation'\n\n// --- Configurable status machine ---\n\nexport type StatusMachineConfig = {\n  blockingStatuses: string[]\n  defaultStatus: string\n  statuses: string[]\n  terminalStatuses: string[]\n  transitions: Record<string, string[]>\n}\n\nexport const DEFAULT_STATUS_MACHINE: StatusMachineConfig = {\n  blockingStatuses: ['pending', 'confirmed'],\n  defaultStatus: 'pending',\n  statuses: ['pending', 'confirmed', 'completed', 'cancelled', 'no-show'],\n  terminalStatuses: ['completed', 'cancelled', 'no-show'],\n  transitions: {\n    cancelled: [],\n    completed: [],\n    confirmed: ['completed', 'cancelled', 'no-show'],\n    'no-show': [],\n    pending: ['confirmed', 'cancelled'],\n  },\n}\n\n// --- Reservation item (for multi-resource bookings, Phase 3) ---\n\nexport type ReservationItemConfig = {\n  endTime?: string\n  guestCount?: number\n  resource: string\n  service?: string\n  startTime?: string\n}\n\n// --- Plugin hooks for external integrations ---\n\nexport type ReservationPluginHooks = {\n  afterBookingCancel?: Array<\n    (args: { doc: Record<string, unknown>; req: PayloadRequest }) => Promise<void> | void\n  >\n  afterBookingConfirm?: Array<\n    (args: { doc: Record<string, unknown>; req: PayloadRequest }) => Promise<void> | void\n  >\n  afterBookingCreate?: Array<\n    (args: { doc: Record<string, unknown>; req: PayloadRequest }) => Promise<void> | void\n  >\n  afterStatusChange?: Array<\n    (args: {\n      doc: Record<string, unknown>\n      newStatus: string\n      previousStatus: string\n      req: PayloadRequest\n    }) => Promise<void> | void\n  >\n  beforeBookingCancel?: Array<\n    (args: {\n      doc: Record<string, unknown>\n      reason?: string\n      req: PayloadRequest\n    }) => Promise<void> | void\n  >\n  beforeBookingConfirm?: Array<\n    (args: {\n      doc: Record<string, unknown>\n      newStatus: string\n      req: PayloadRequest\n    }) => Promise<void> | void\n  >\n  beforeBookingCreate?: Array<\n    (args: {\n      data: Record<string, unknown>\n      req: PayloadRequest\n    }) => Promise<Record<string, unknown>> | Record<string, unknown>\n  >\n}\n\n// --- Resource owner mode ---\n\nexport type ResourceOwnerModeConfig = {\n  /** Roles that can see all records (default: check req.user.collection === adminCollection) */\n  adminRoles?: string[]\n  /** Whether Services also get an owner field (default: false — Services are platform-managed) */\n  ownedServices?: boolean\n  /**\n   * Collection the owner field relates to (where owners/staff live). Defaults to\n   * `staffProvisioning.userCollection` when set, otherwise `slugs.customers`. Set\n   * this when owners live in a different collection than your customers (e.g.\n   * separate `users` and `customers` collections).\n   */\n  ownerCollection?: string\n  /** Field name for the owner relationship on Resources (default: 'owner') */\n  ownerField?: string\n}\n\nexport type ResolvedResourceOwnerModeConfig = {\n  adminRoles: string[]\n  ownedServices: boolean\n  ownerCollection?: string\n  ownerField: string\n}\n\n// --- Staff provisioning ---\n\nexport type StaffProvisioningConfig = {\n  /** Stamp tenant / custom fields onto the provisioned Resource before create. */\n  beforeCreate?: (args: {\n    data: Record<string, unknown>\n    req: PayloadRequest\n    user: Record<string, unknown>\n  }) => Promise<Record<string, unknown>> | Record<string, unknown>\n  /** User field copied into Resource `name` (default 'name', falls back to email). */\n  nameFrom?: string\n  /** resourceType to stamp (default 'staff'). Must be a valid resourceType. */\n  resourceType?: string\n  /** Field on the user holding the role (default 'role'). */\n  roleField?: string\n  /** Role value(s) marking a user as staff. Required, non-empty. */\n  staffRoles: string[]\n  /** Auth collection holding staff users. Defaults to top-level `userCollection`. */\n  userCollection?: string\n}\n\nexport type ResolvedStaffProvisioningConfig = {\n  beforeCreate?: StaffProvisioningConfig['beforeCreate']\n  nameFrom: string\n  resourceType: string\n  roleField: string\n  staffRoles: string[]\n  userCollection: string\n}\n\n// --- Plugin configuration ---\n\nexport type ReservationPluginConfig = {\n  /** Override access control per collection */\n  access?: {\n    customers?: CollectionConfig['access']\n    reservations?: CollectionConfig['access']\n    resources?: CollectionConfig['access']\n    schedules?: CollectionConfig['access']\n    services?: CollectionConfig['access']\n  }\n  /** Admin group name for all reservation collections */\n  adminGroup?: string\n  /** Allow bookings without a customer account by default (per-service override available) */\n  allowGuestBooking?: boolean\n  /** Hours of notice required before cancellation */\n  cancellationNoticePeriod?: number\n  /** Default buffer time in minutes between reservations */\n  defaultBufferTime?: number\n  /** Disable the plugin entirely */\n  disabled?: boolean\n  /** Extra fields to append to the Reservations collection */\n  extraReservationFields?: Field[]\n  /** Plugin hooks for external integrations */\n  hooks?: ReservationPluginHooks\n  /** Configurable leave/exception type vocabulary (default: vacation/sick/personal/closure/other) */\n  leaveTypes?: string[]\n  /** Enable resource-owner multi-tenancy (opt-in) */\n  resourceOwnerMode?: ResourceOwnerModeConfig\n  /** Configurable resourceType vocabulary (default: staff/equipment/room) */\n  resourceTypes?: string[]\n  /** Override collection slugs */\n  slugs?: {\n    customers?: string\n    media?: string\n    reservations?: string\n    resources?: string\n    schedules?: string\n    services?: string\n  }\n  /** Auto-provision a Resource from staff-role users (opt-in; requires resourceOwnerMode) */\n  staffProvisioning?: StaffProvisioningConfig\n  /** Configurable status machine (defaults to current behavior) */\n  statusMachine?: Partial<StatusMachineConfig>\n  /** Which existing auth collection to extend with customer fields */\n  userCollection?: string\n}\n\nexport type ResolvedReservationPluginConfig = {\n  access: {\n    customers?: CollectionConfig['access']\n    reservations?: CollectionConfig['access']\n    resources?: CollectionConfig['access']\n    schedules?: CollectionConfig['access']\n    services?: CollectionConfig['access']\n  }\n  adminGroup: string\n  allowGuestBooking: boolean\n  cancellationNoticePeriod: number\n  defaultBufferTime: number\n  disabled: boolean\n  extraReservationFields: Field[]\n  hooks: ReservationPluginHooks\n  leaveTypes: string[]\n  localized: boolean\n  resourceOwnerMode: ResolvedResourceOwnerModeConfig | undefined\n  resourceTypes: string[]\n  slugs: {\n    customers: string\n    media: string\n    reservations: string\n    resources: string\n    schedules: string\n    services: string\n  }\n  staffProvisioning: ResolvedStaffProvisioningConfig | undefined\n  statusMachine: StatusMachineConfig\n  userCollection: string | undefined\n}\n\nexport type ReservationStatus = 'cancelled' | 'completed' | 'confirmed' | 'no-show' | 'pending'\n\nexport type DayOfWeek = 'fri' | 'mon' | 'sat' | 'sun' | 'thu' | 'tue' | 'wed'\n\nexport type ScheduleType = 'manual' | 'recurring'\n\n/** @deprecated Use DEFAULT_STATUS_MACHINE.transitions instead */\nexport const VALID_STATUS_TRANSITIONS: Record<ReservationStatus, ReservationStatus[]> =\n  DEFAULT_STATUS_MACHINE.transitions as Record<ReservationStatus, ReservationStatus[]>\n"],"names":["DEFAULT_STATUS_MACHINE","blockingStatuses","defaultStatus","statuses","terminalStatuses","transitions","cancelled","completed","confirmed","pending","VALID_STATUS_TRANSITIONS"],"mappings":"AAkBA,OAAO,MAAMA,yBAA8C;IACzDC,kBAAkB;QAAC;QAAW;KAAY;IAC1CC,eAAe;IACfC,UAAU;QAAC;QAAW;QAAa;QAAa;QAAa;KAAU;IACvEC,kBAAkB;QAAC;QAAa;QAAa;KAAU;IACvDC,aAAa;QACXC,WAAW,EAAE;QACbC,WAAW,EAAE;QACbC,WAAW;YAAC;YAAa;YAAa;SAAU;QAChD,WAAW,EAAE;QACbC,SAAS;YAAC;YAAa;SAAY;IACrC;AACF,EAAC;AAmMD,+DAA+D,GAC/D,OAAO,MAAMC,2BACXV,uBAAuBK,WAAW,CAAkD"}
+{"version":3,"sources":["../src/types.ts"],"sourcesContent":["import type { CollectionConfig, Field, PayloadRequest } from 'payload'\n\n// --- Duration & Capacity models ---\n\nexport type DurationType = 'fixed' | 'flexible' | 'full-day'\n\nexport type CapacityMode = 'per-guest' | 'per-reservation'\n\n// --- Configurable status machine ---\n\nexport type StatusMachineConfig = {\n  blockingStatuses: string[]\n  /** Status treated as \"cancelled\" — fires beforeBookingCancel/afterBookingCancel, the cancellation notice period, and the cancellationReason field. */\n  cancelStatus: string\n  /** Status treated as \"confirmed\" — fires beforeBookingConfirm/afterBookingConfirm. */\n  confirmStatus: string\n  defaultStatus: string\n  statuses: string[]\n  terminalStatuses: string[]\n  transitions: Record<string, string[]>\n}\n\nexport const DEFAULT_STATUS_MACHINE: StatusMachineConfig = {\n  blockingStatuses: ['pending', 'confirmed'],\n  cancelStatus: 'cancelled',\n  confirmStatus: 'confirmed',\n  defaultStatus: 'pending',\n  statuses: ['pending', 'confirmed', 'completed', 'cancelled', 'no-show'],\n  terminalStatuses: ['completed', 'cancelled', 'no-show'],\n  transitions: {\n    cancelled: [],\n    completed: [],\n    confirmed: ['completed', 'cancelled', 'no-show'],\n    'no-show': [],\n    pending: ['confirmed', 'cancelled'],\n  },\n}\n\n// --- Reservation item (for multi-resource bookings, Phase 3) ---\n\nexport type ReservationItemConfig = {\n  endTime?: string\n  guestCount?: number\n  resource: string\n  service?: string\n  startTime?: string\n}\n\n// --- Plugin hooks for external integrations ---\n\nexport type ReservationPluginHooks = {\n  afterBookingCancel?: Array<\n    (args: { doc: Record<string, unknown>; req: PayloadRequest }) => Promise<void> | void\n  >\n  afterBookingConfirm?: Array<\n    (args: { doc: Record<string, unknown>; req: PayloadRequest }) => Promise<void> | void\n  >\n  afterBookingCreate?: Array<\n    (args: { doc: Record<string, unknown>; req: PayloadRequest }) => Promise<void> | void\n  >\n  afterStatusChange?: Array<\n    (args: {\n      doc: Record<string, unknown>\n      newStatus: string\n      previousStatus: string\n      req: PayloadRequest\n    }) => Promise<void> | void\n  >\n  beforeBookingCancel?: Array<\n    (args: {\n      doc: Record<string, unknown>\n      reason?: string\n      req: PayloadRequest\n    }) => Promise<void> | void\n  >\n  beforeBookingConfirm?: Array<\n    (args: {\n      doc: Record<string, unknown>\n      newStatus: string\n      req: PayloadRequest\n    }) => Promise<void> | void\n  >\n  beforeBookingCreate?: Array<\n    (args: {\n      data: Record<string, unknown>\n      req: PayloadRequest\n    }) => Promise<Record<string, unknown>> | Record<string, unknown>\n  >\n}\n\n// --- Resource owner mode ---\n\nexport type ResourceOwnerModeConfig = {\n  /** Roles that can see all records (default: check req.user.collection === adminCollection) */\n  adminRoles?: string[]\n  /** Whether Services also get an owner field (default: false — Services are platform-managed) */\n  ownedServices?: boolean\n  /**\n   * Collection the owner field relates to (where owners/staff live). Defaults to\n   * `staffProvisioning.userCollection` when set, otherwise `slugs.customers`. Set\n   * this when owners live in a different collection than your customers (e.g.\n   * separate `users` and `customers` collections).\n   */\n  ownerCollection?: string\n  /** Field name for the owner relationship on Resources (default: 'owner') */\n  ownerField?: string\n  /** User field holding the role for admin detection (default: staffProvisioning.roleField or 'role') */\n  roleField?: string\n}\n\nexport type ResolvedResourceOwnerModeConfig = {\n  adminRoles: string[]\n  ownedServices: boolean\n  ownerCollection?: string\n  ownerField: string\n  roleField: string\n}\n\n// --- Staff provisioning ---\n\nexport type StaffProvisioningConfig = {\n  /** Stamp tenant / custom fields onto the provisioned Resource before create. */\n  beforeCreate?: (args: {\n    data: Record<string, unknown>\n    req: PayloadRequest\n    user: Record<string, unknown>\n  }) => Promise<Record<string, unknown>> | Record<string, unknown>\n  /** User field copied into Resource `name` (default 'name', falls back to email). */\n  nameFrom?: string\n  /** resourceType to stamp (default 'staff'). Must be a valid resourceType. */\n  resourceType?: string\n  /** Field on the user holding the role (default 'role'). */\n  roleField?: string\n  /** Role value(s) marking a user as staff. Required, non-empty. */\n  staffRoles: string[]\n  /** Auth collection holding staff users. Defaults to top-level `userCollection`. */\n  userCollection?: string\n}\n\nexport type ResolvedStaffProvisioningConfig = {\n  beforeCreate?: StaffProvisioningConfig['beforeCreate']\n  nameFrom: string\n  resourceType: string\n  roleField: string\n  staffRoles: string[]\n  userCollection: string\n}\n\n// --- Plugin configuration ---\n\n/**\n * Per-collection override applied to a generated collection. `fields` is a\n * function receiving the plugin's default fields so you can append/reorder/\n * replace them; supplied `hooks` are merged with (not replacing) the plugin's;\n * `access` composes per operation; `slug` is ignored (use the `slugs` option).\n */\nexport type CollectionOverride = {\n  fields?: (args: { defaultFields: Field[] }) => Field[]\n} & Omit<Partial<CollectionConfig>, 'fields' | 'slug'>\n\nexport type ReservationPluginConfig = {\n  /** Override access control per collection */\n  access?: {\n    customers?: CollectionConfig['access']\n    reservations?: CollectionConfig['access']\n    resources?: CollectionConfig['access']\n    schedules?: CollectionConfig['access']\n    services?: CollectionConfig['access']\n  }\n  /** Admin group name for all reservation collections */\n  adminGroup?: string\n  /** Allow bookings without a customer account by default (per-service override available) */\n  allowGuestBooking?: boolean\n  /** Hours of notice required before cancellation */\n  cancellationNoticePeriod?: number\n  /** Per-collection overrides applied to the generated collections (issue #4) */\n  collectionOverrides?: {\n    customers?: CollectionOverride\n    reservations?: CollectionOverride\n    resources?: CollectionOverride\n    schedules?: CollectionOverride\n    services?: CollectionOverride\n  }\n  /** Default buffer time in minutes between reservations */\n  defaultBufferTime?: number\n  /** Disable the plugin entirely */\n  disabled?: boolean\n  /** @deprecated Use `collectionOverrides.reservations.fields` instead. Extra fields appended to Reservations. */\n  extraReservationFields?: Field[]\n  /** Plugin hooks for external integrations */\n  hooks?: ReservationPluginHooks\n  /** Configurable leave/exception type vocabulary (default: vacation/sick/personal/closure/other) */\n  leaveTypes?: string[]\n  /** Tenant scoping for the custom admin views (calendar, availability, dashboard). Applied only when the scoped collection has the tenant field AND the tenant cookie is set. */\n  multiTenant?: {\n    /** Cookie written by the tenant-selector (default 'payload-tenant'). */\n    cookieName?: string\n    /** Tenant field name on scoped collections (default 'tenant'). */\n    tenantField?: string\n  }\n  /** Enable resource-owner multi-tenancy (opt-in) */\n  resourceOwnerMode?: ResourceOwnerModeConfig\n  /** Configurable resourceType vocabulary (default: staff/equipment/room) */\n  resourceTypes?: string[]\n  /** Override collection slugs */\n  slugs?: {\n    customers?: string\n    media?: string\n    reservations?: string\n    resources?: string\n    schedules?: string\n    services?: string\n  }\n  /** Auto-provision a Resource from staff-role users (opt-in; requires resourceOwnerMode) */\n  staffProvisioning?: StaffProvisioningConfig\n  /** Configurable status machine (defaults to current behavior) */\n  statusMachine?: Partial<StatusMachineConfig>\n  /** IANA business timezone governing schedules and day boundaries (default 'UTC') */\n  timezone?: string\n  /** Which existing auth collection to extend with customer fields */\n  userCollection?: string\n}\n\nexport type ResolvedReservationPluginConfig = {\n  access: {\n    customers?: CollectionConfig['access']\n    reservations?: CollectionConfig['access']\n    resources?: CollectionConfig['access']\n    schedules?: CollectionConfig['access']\n    services?: CollectionConfig['access']\n  }\n  adminGroup: string\n  allowGuestBooking: boolean\n  cancellationNoticePeriod: number\n  collectionOverrides: {\n    customers?: CollectionOverride\n    reservations?: CollectionOverride\n    resources?: CollectionOverride\n    schedules?: CollectionOverride\n    services?: CollectionOverride\n  }\n  defaultBufferTime: number\n  disabled: boolean\n  extraReservationFields: Field[]\n  /** Whether the media collection (`slugs.media`) exists — set by the plugin; gates the image upload fields. */\n  hasMediaCollection: boolean\n  hooks: ReservationPluginHooks\n  leaveTypes: string[]\n  localized: boolean\n  multiTenant: {\n    cookieName: string\n    tenantField: string\n  }\n  resourceOwnerMode: ResolvedResourceOwnerModeConfig | undefined\n  resourceTypes: string[]\n  slugs: {\n    customers: string\n    media: string\n    reservations: string\n    resources: string\n    schedules: string\n    services: string\n  }\n  staffProvisioning: ResolvedStaffProvisioningConfig | undefined\n  statusMachine: StatusMachineConfig\n  timezone: string\n  userCollection: string | undefined\n}\n\nexport type ReservationStatus = 'cancelled' | 'completed' | 'confirmed' | 'no-show' | 'pending'\n\nexport type DayOfWeek = 'fri' | 'mon' | 'sat' | 'sun' | 'thu' | 'tue' | 'wed'\n\nexport type ScheduleType = 'manual' | 'recurring'\n\n/** @deprecated Use DEFAULT_STATUS_MACHINE.transitions instead */\nexport const VALID_STATUS_TRANSITIONS: Record<ReservationStatus, ReservationStatus[]> =\n  DEFAULT_STATUS_MACHINE.transitions as Record<ReservationStatus, ReservationStatus[]>\n"],"names":["DEFAULT_STATUS_MACHINE","blockingStatuses","cancelStatus","confirmStatus","defaultStatus","statuses","terminalStatuses","transitions","cancelled","completed","confirmed","pending","VALID_STATUS_TRANSITIONS"],"mappings":"AAsBA,OAAO,MAAMA,yBAA8C;IACzDC,kBAAkB;QAAC;QAAW;KAAY;IAC1CC,cAAc;IACdC,eAAe;IACfC,eAAe;IACfC,UAAU;QAAC;QAAW;QAAa;QAAa;QAAa;KAAU;IACvEC,kBAAkB;QAAC;QAAa;QAAa;KAAU;IACvDC,aAAa;QACXC,WAAW,EAAE;QACbC,WAAW,EAAE;QACbC,WAAW;YAAC;YAAa;YAAa;SAAU;QAChD,WAAW,EAAE;QACbC,SAAS;YAAC;YAAa;SAAY;IACrC;AACF,EAAC;AA+OD,+DAA+D,GAC/D,OAAO,MAAMC,2BACXZ,uBAAuBO,WAAW,CAAkD"}

package/dist/utilities/collectionOverrides.d.ts

@@ -0,0 +1,14 @@
+import type { CollectionConfig } from 'payload';
+import type { CollectionOverride } from '../types.js';
+/**
+ * Apply a per-collection override to a generated collection, protecting the
+ * plugin's load-bearing behavior:
+ * - `fields`: a function receiving the plugin's default fields, returning the
+ *   final list (append/reorder/replace — covers the issue #4 join-field case).
+ * - `hooks`: MERGED per event array (plugin hooks run first, then the user's) —
+ *   an override can add hooks but never clobber conflict detection / status hooks.
+ * - `access`: composed per operation (rules the override omits survive).
+ * - `slug`: ignored (the `slugs` option owns slugs).
+ * - everything else (admin, labels, custom, …): shallow-merged.
+ */
+export declare function applyCollectionOverride(collection: CollectionConfig, override?: CollectionOverride): CollectionConfig;

package/dist/utilities/collectionOverrides.js

@@ -0,0 +1,47 @@
+import { composeAccess } from './ownerAccess.js';
+/**
+ * Apply a per-collection override to a generated collection, protecting the
+ * plugin's load-bearing behavior:
+ * - `fields`: a function receiving the plugin's default fields, returning the
+ *   final list (append/reorder/replace — covers the issue #4 join-field case).
+ * - `hooks`: MERGED per event array (plugin hooks run first, then the user's) —
+ *   an override can add hooks but never clobber conflict detection / status hooks.
+ * - `access`: composed per operation (rules the override omits survive).
+ * - `slug`: ignored (the `slugs` option owns slugs).
+ * - everything else (admin, labels, custom, …): shallow-merged.
+ */ export function applyCollectionOverride(collection, override) {
+    if (!override) {
+        return collection;
+    }
+    // Pull out the specially-handled keys; the rest shallow-merges. `slug` is
+    // omitted from CollectionOverride's type, but strip it defensively in case a
+    // caller cast around the type — the `slugs` option owns slugs.
+    const { access, fields, hooks, ...rest } = override;
+    delete rest.slug;
+    const mergedFields = fields ? fields({
+        defaultFields: collection.fields
+    }) : collection.fields;
+    // Merge hooks per event array: plugin's first, then the override's.
+    const mergedHooks = {
+        ...collection.hooks
+    };
+    if (hooks) {
+        for (const key of Object.keys(hooks)){
+            const pluginHooks = collection.hooks?.[key] ?? [];
+            const overrideHooks = hooks[key] ?? [];
+            mergedHooks[key] = [
+                ...pluginHooks,
+                ...overrideHooks
+            ];
+        }
+    }
+    return {
+        ...collection,
+        ...rest,
+        access: composeAccess(collection.access ?? {}, access),
+        fields: mergedFields,
+        hooks: mergedHooks
+    };
+}
+
+//# sourceMappingURL=collectionOverrides.js.map

package/dist/utilities/collectionOverrides.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/utilities/collectionOverrides.ts"],"sourcesContent":["import type { CollectionConfig } from 'payload'\n\nimport type { CollectionOverride } from '../types.js'\n\nimport { composeAccess } from './ownerAccess.js'\n\n/**\n * Apply a per-collection override to a generated collection, protecting the\n * plugin's load-bearing behavior:\n * - `fields`: a function receiving the plugin's default fields, returning the\n *   final list (append/reorder/replace — covers the issue #4 join-field case).\n * - `hooks`: MERGED per event array (plugin hooks run first, then the user's) —\n *   an override can add hooks but never clobber conflict detection / status hooks.\n * - `access`: composed per operation (rules the override omits survive).\n * - `slug`: ignored (the `slugs` option owns slugs).\n * - everything else (admin, labels, custom, …): shallow-merged.\n */\nexport function applyCollectionOverride(\n  collection: CollectionConfig,\n  override?: CollectionOverride,\n): CollectionConfig {\n  if (!override) {\n    return collection\n  }\n\n  // Pull out the specially-handled keys; the rest shallow-merges. `slug` is\n  // omitted from CollectionOverride's type, but strip it defensively in case a\n  // caller cast around the type — the `slugs` option owns slugs.\n  const { access, fields, hooks, ...rest } = override\n  delete (rest as { slug?: unknown }).slug\n\n  const mergedFields = fields ? fields({ defaultFields: collection.fields }) : collection.fields\n\n  // Merge hooks per event array: plugin's first, then the override's.\n  const mergedHooks: CollectionConfig['hooks'] = { ...collection.hooks }\n  if (hooks) {\n    for (const key of Object.keys(hooks) as Array<keyof NonNullable<CollectionConfig['hooks']>>) {\n      const pluginHooks = (collection.hooks?.[key] ?? []) as unknown[]\n      const overrideHooks = (hooks[key] ?? []) as unknown[]\n      // eslint-disable-next-line @typescript-eslint/no-explicit-any\n      ;(mergedHooks as any)[key] = [...pluginHooks, ...overrideHooks]\n    }\n  }\n\n  return {\n    ...collection,\n    ...rest,\n    access: composeAccess(collection.access ?? {}, access),\n    fields: mergedFields,\n    hooks: mergedHooks,\n  }\n}\n"],"names":["composeAccess","applyCollectionOverride","collection","override","access","fields","hooks","rest","slug","mergedFields","defaultFields","mergedHooks","key","Object","keys","pluginHooks","overrideHooks"],"mappings":"AAIA,SAASA,aAAa,QAAQ,mBAAkB;AAEhD;;;;;;;;;;CAUC,GACD,OAAO,SAASC,wBACdC,UAA4B,EAC5BC,QAA6B;IAE7B,IAAI,CAACA,UAAU;QACb,OAAOD;IACT;IAEA,0EAA0E;IAC1E,6EAA6E;IAC7E,+DAA+D;IAC/D,MAAM,EAAEE,MAAM,EAAEC,MAAM,EAAEC,KAAK,EAAE,GAAGC,MAAM,GAAGJ;IAC3C,OAAO,AAACI,KAA4BC,IAAI;IAExC,MAAMC,eAAeJ,SAASA,OAAO;QAAEK,eAAeR,WAAWG,MAAM;IAAC,KAAKH,WAAWG,MAAM;IAE9F,oEAAoE;IACpE,MAAMM,cAAyC;QAAE,GAAGT,WAAWI,KAAK;IAAC;IACrE,IAAIA,OAAO;QACT,KAAK,MAAMM,OAAOC,OAAOC,IAAI,CAACR,OAA+D;YAC3F,MAAMS,cAAeb,WAAWI,KAAK,EAAE,CAACM,IAAI,IAAI,EAAE;YAClD,MAAMI,gBAAiBV,KAAK,CAACM,IAAI,IAAI,EAAE;YAErCD,WAAmB,CAACC,IAAI,GAAG;mBAAIG;mBAAgBC;aAAc;QACjE;IACF;IAEA,OAAO;QACL,GAAGd,UAAU;QACb,GAAGK,IAAI;QACPH,QAAQJ,cAAcE,WAAWE,MAAM,IAAI,CAAC,GAAGA;QAC/CC,QAAQI;QACRH,OAAOK;IACT;AACF"}

package/dist/utilities/ownerAccess.d.ts

@@ -1,6 +1,12 @@
 import type { CollectionConfig } from 'payload';
 import type { ResolvedResourceOwnerModeConfig } from '../types.js';
 type CollectionAccess = NonNullable<CollectionConfig['access']>;
+/**
+ * Overlay app-provided access overrides onto a base (owner-mode) access object,
+ * per operation. Specifying only `read` keeps the base's create/update/delete
+ * rules intact, instead of replacing them wholesale (review C9).
+ */
+export declare function composeAccess(base: CollectionAccess, override: CollectionConfig['access']): CollectionAccess;
 /**
  * Access factories for Resources collection.
  * Owners may read/update/delete their own resources; anyone authenticated may create.

package/dist/utilities/ownerAccess.js

@@ -1,13 +1,26 @@
+/**
+ * Overlay app-provided access overrides onto a base (owner-mode) access object,
+ * per operation. Specifying only `read` keeps the base's create/update/delete
+ * rules intact, instead of replacing them wholesale (review C9).
+ */ export function composeAccess(base, override) {
+    return {
+        ...base,
+        ...override ?? {}
+    };
+}
 /**
  * Returns true if the requesting user is considered an "admin" for resource-owner mode:
  * - No user → deny
- * - adminRoles provided → user.role must be in that list
+ * - adminRoles provided → the user's `roleField` value must be in that list
  * - adminRoles empty → no bypass role; all authenticated users are treated as owners
- */ function isAdmin(user, adminRoles) {
+ *
+ * Reads the configured `roleField` (not a hardcoded `user.role`) so apps using a
+ * `roles: string[]` field — or any custom role field — aren't silently demoted.
+ */ function isAdmin(user, adminRoles, roleField) {
     if (!adminRoles.length) {
         return false;
     }
-    const role = user.role;
+    const role = user[roleField];
     if (!role) {
         return false;
     }
@@ -17,13 +30,13 @@
  * Access factories for Resources collection.
  * Owners may read/update/delete their own resources; anyone authenticated may create.
  */ export function makeResourceOwnerAccess(rom) {
-    const { adminRoles, ownerField } = rom;
+    const { adminRoles, ownerField, roleField } = rom;
     const ownerOrAdmin = ({ req })=>{
         if (!req.user) {
             return false;
         }
         const user = req.user;
-        if (isAdmin(user, adminRoles)) {
+        if (isAdmin(user, adminRoles, roleField)) {
             return true;
         }
         return {
@@ -43,13 +56,13 @@
  * Access factories for Schedules collection.
  * A schedule's ownership is determined through its `resource.owner` relationship.
  */ export function makeScheduleOwnerAccess(rom) {
-    const { adminRoles, ownerField } = rom;
+    const { adminRoles, ownerField, roleField } = rom;
     const ownerOrAdmin = ({ req })=>{
         if (!req.user) {
             return false;
         }
         const user = req.user;
-        if (isAdmin(user, adminRoles)) {
+        if (isAdmin(user, adminRoles, roleField)) {
             return true;
         }
         return {
@@ -70,13 +83,13 @@
  * Resource owners can see reservations for their resources (read-only);
  * mutations are admin-only to prevent owners from unilaterally cancelling guest bookings.
  */ export function makeReservationOwnerAccess(rom) {
-    const { adminRoles, ownerField } = rom;
+    const { adminRoles, ownerField, roleField } = rom;
     const readAccess = ({ req })=>{
         if (!req.user) {
             return false;
         }
         const user = req.user;
-        if (isAdmin(user, adminRoles)) {
+        if (isAdmin(user, adminRoles, roleField)) {
             return true;
         }
         return {
@@ -90,7 +103,7 @@
             return false;
         }
         const user = req.user;
-        return isAdmin(user, adminRoles);
+        return isAdmin(user, adminRoles, roleField);
     };
     return {
         create: adminOnly,
@@ -102,13 +115,13 @@
 /**
  * Access factories for Services collection when `ownedServices: true`.
  */ export function makeServiceOwnerAccess(rom, ownerField) {
-    const { adminRoles } = rom;
+    const { adminRoles, roleField } = rom;
     const ownerOrAdmin = ({ req })=>{
         if (!req.user) {
             return false;
         }
         const user = req.user;
-        if (isAdmin(user, adminRoles)) {
+        if (isAdmin(user, adminRoles, roleField)) {
             return true;
         }
         return {

package/dist/utilities/ownerAccess.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/utilities/ownerAccess.ts"],"sourcesContent":["import type { Access, CollectionConfig, PayloadRequest } from 'payload'\n\nimport type { ResolvedResourceOwnerModeConfig } from '../types.js'\n\ntype CollectionAccess = NonNullable<CollectionConfig['access']>\n\n/**\n * Returns true if the requesting user is considered an \"admin\" for resource-owner mode:\n * - No user → deny\n * - adminRoles provided → user.role must be in that list\n * - adminRoles empty → no bypass role; all authenticated users are treated as owners\n */\nfunction isAdmin(user: Record<string, unknown>, adminRoles: string[]): boolean {\n  if (!adminRoles.length) {return false}\n  const role = user.role as string | string[] | undefined\n  if (!role) {return false}\n  return Array.isArray(role) ? role.some((r) => adminRoles.includes(r)) : adminRoles.includes(role)\n}\n\n/**\n * Access factories for Resources collection.\n * Owners may read/update/delete their own resources; anyone authenticated may create.\n */\nexport function makeResourceOwnerAccess(rom: ResolvedResourceOwnerModeConfig): CollectionAccess {\n  const { adminRoles, ownerField } = rom\n\n  const ownerOrAdmin: Access = ({ req }: { req: PayloadRequest }) => {\n    if (!req.user) {return false}\n    const user = req.user as Record<string, unknown>\n    if (isAdmin(user, adminRoles)) {return true}\n    return { [ownerField]: { equals: user.id } }\n  }\n\n  return {\n    create: ({ req }: { req: PayloadRequest }) => Boolean(req.user),\n    delete: ownerOrAdmin,\n    read: ownerOrAdmin,\n    update: ownerOrAdmin,\n  }\n}\n\n/**\n * Access factories for Schedules collection.\n * A schedule's ownership is determined through its `resource.owner` relationship.\n */\nexport function makeScheduleOwnerAccess(rom: ResolvedResourceOwnerModeConfig): CollectionAccess {\n  const { adminRoles, ownerField } = rom\n\n  const ownerOrAdmin: Access = ({ req }: { req: PayloadRequest }) => {\n    if (!req.user) {return false}\n    const user = req.user as Record<string, unknown>\n    if (isAdmin(user, adminRoles)) {return true}\n    return { [`resource.${ownerField}`]: { equals: user.id } }\n  }\n\n  return {\n    create: ({ req }: { req: PayloadRequest }) => Boolean(req.user),\n    delete: ownerOrAdmin,\n    read: ownerOrAdmin,\n    update: ownerOrAdmin,\n  }\n}\n\n/**\n * Access factories for Reservations collection.\n * Resource owners can see reservations for their resources (read-only);\n * mutations are admin-only to prevent owners from unilaterally cancelling guest bookings.\n */\nexport function makeReservationOwnerAccess(\n  rom: ResolvedResourceOwnerModeConfig,\n): CollectionAccess {\n  const { adminRoles, ownerField } = rom\n\n  const readAccess: Access = ({ req }: { req: PayloadRequest }) => {\n    if (!req.user) {return false}\n    const user = req.user as Record<string, unknown>\n    if (isAdmin(user, adminRoles)) {return true}\n    return { [`resource.${ownerField}`]: { equals: user.id } }\n  }\n\n  const adminOnly: Access = ({ req }: { req: PayloadRequest }) => {\n    if (!req.user) {return false}\n    const user = req.user as Record<string, unknown>\n    return isAdmin(user, adminRoles)\n  }\n\n  return {\n    create: adminOnly,\n    delete: adminOnly,\n    read: readAccess,\n    update: adminOnly,\n  }\n}\n\n/**\n * Access factories for Services collection when `ownedServices: true`.\n */\nexport function makeServiceOwnerAccess(\n  rom: ResolvedResourceOwnerModeConfig,\n  ownerField: string,\n): CollectionAccess {\n  const { adminRoles } = rom\n\n  const ownerOrAdmin: Access = ({ req }: { req: PayloadRequest }) => {\n    if (!req.user) {return false}\n    const user = req.user as Record<string, unknown>\n    if (isAdmin(user, adminRoles)) {return true}\n    return { [ownerField]: { equals: user.id } }\n  }\n\n  return {\n    create: ({ req }: { req: PayloadRequest }) => Boolean(req.user),\n    delete: ownerOrAdmin,\n    read: ownerOrAdmin,\n    update: ownerOrAdmin,\n  }\n}\n"],"names":["isAdmin","user","adminRoles","length","role","Array","isArray","some","r","includes","makeResourceOwnerAccess","rom","ownerField","ownerOrAdmin","req","equals","id","create","Boolean","delete","read","update","makeScheduleOwnerAccess","makeReservationOwnerAccess","readAccess","adminOnly","makeServiceOwnerAccess"],"mappings":"AAMA;;;;;CAKC,GACD,SAASA,QAAQC,IAA6B,EAAEC,UAAoB;IAClE,IAAI,CAACA,WAAWC,MAAM,EAAE;QAAC,OAAO;IAAK;IACrC,MAAMC,OAAOH,KAAKG,IAAI;IACtB,IAAI,CAACA,MAAM;QAAC,OAAO;IAAK;IACxB,OAAOC,MAAMC,OAAO,CAACF,QAAQA,KAAKG,IAAI,CAAC,CAACC,IAAMN,WAAWO,QAAQ,CAACD,MAAMN,WAAWO,QAAQ,CAACL;AAC9F;AAEA;;;CAGC,GACD,OAAO,SAASM,wBAAwBC,GAAoC;IAC1E,MAAM,EAAET,UAAU,EAAEU,UAAU,EAAE,GAAGD;IAEnC,MAAME,eAAuB,CAAC,EAAEC,GAAG,EAA2B;QAC5D,IAAI,CAACA,IAAIb,IAAI,EAAE;YAAC,OAAO;QAAK;QAC5B,MAAMA,OAAOa,IAAIb,IAAI;QACrB,IAAID,QAAQC,MAAMC,aAAa;YAAC,OAAO;QAAI;QAC3C,OAAO;YAAE,CAACU,WAAW,EAAE;gBAAEG,QAAQd,KAAKe,EAAE;YAAC;QAAE;IAC7C;IAEA,OAAO;QACLC,QAAQ,CAAC,EAAEH,GAAG,EAA2B,GAAKI,QAAQJ,IAAIb,IAAI;QAC9DkB,QAAQN;QACRO,MAAMP;QACNQ,QAAQR;IACV;AACF;AAEA;;;CAGC,GACD,OAAO,SAASS,wBAAwBX,GAAoC;IAC1E,MAAM,EAAET,UAAU,EAAEU,UAAU,EAAE,GAAGD;IAEnC,MAAME,eAAuB,CAAC,EAAEC,GAAG,EAA2B;QAC5D,IAAI,CAACA,IAAIb,IAAI,EAAE;YAAC,OAAO;QAAK;QAC5B,MAAMA,OAAOa,IAAIb,IAAI;QACrB,IAAID,QAAQC,MAAMC,aAAa;YAAC,OAAO;QAAI;QAC3C,OAAO;YAAE,CAAC,CAAC,SAAS,EAAEU,YAAY,CAAC,EAAE;gBAAEG,QAAQd,KAAKe,EAAE;YAAC;QAAE;IAC3D;IAEA,OAAO;QACLC,QAAQ,CAAC,EAAEH,GAAG,EAA2B,GAAKI,QAAQJ,IAAIb,IAAI;QAC9DkB,QAAQN;QACRO,MAAMP;QACNQ,QAAQR;IACV;AACF;AAEA;;;;CAIC,GACD,OAAO,SAASU,2BACdZ,GAAoC;IAEpC,MAAM,EAAET,UAAU,EAAEU,UAAU,EAAE,GAAGD;IAEnC,MAAMa,aAAqB,CAAC,EAAEV,GAAG,EAA2B;QAC1D,IAAI,CAACA,IAAIb,IAAI,EAAE;YAAC,OAAO;QAAK;QAC5B,MAAMA,OAAOa,IAAIb,IAAI;QACrB,IAAID,QAAQC,MAAMC,aAAa;YAAC,OAAO;QAAI;QAC3C,OAAO;YAAE,CAAC,CAAC,SAAS,EAAEU,YAAY,CAAC,EAAE;gBAAEG,QAAQd,KAAKe,EAAE;YAAC;QAAE;IAC3D;IAEA,MAAMS,YAAoB,CAAC,EAAEX,GAAG,EAA2B;QACzD,IAAI,CAACA,IAAIb,IAAI,EAAE;YAAC,OAAO;QAAK;QAC5B,MAAMA,OAAOa,IAAIb,IAAI;QACrB,OAAOD,QAAQC,MAAMC;IACvB;IAEA,OAAO;QACLe,QAAQQ;QACRN,QAAQM;QACRL,MAAMI;QACNH,QAAQI;IACV;AACF;AAEA;;CAEC,GACD,OAAO,SAASC,uBACdf,GAAoC,EACpCC,UAAkB;IAElB,MAAM,EAAEV,UAAU,EAAE,GAAGS;IAEvB,MAAME,eAAuB,CAAC,EAAEC,GAAG,EAA2B;QAC5D,IAAI,CAACA,IAAIb,IAAI,EAAE;YAAC,OAAO;QAAK;QAC5B,MAAMA,OAAOa,IAAIb,IAAI;QACrB,IAAID,QAAQC,MAAMC,aAAa;YAAC,OAAO;QAAI;QAC3C,OAAO;YAAE,CAACU,WAAW,EAAE;gBAAEG,QAAQd,KAAKe,EAAE;YAAC;QAAE;IAC7C;IAEA,OAAO;QACLC,QAAQ,CAAC,EAAEH,GAAG,EAA2B,GAAKI,QAAQJ,IAAIb,IAAI;QAC9DkB,QAAQN;QACRO,MAAMP;QACNQ,QAAQR;IACV;AACF"}
+{"version":3,"sources":["../../src/utilities/ownerAccess.ts"],"sourcesContent":["import type { Access, CollectionConfig, PayloadRequest } from 'payload'\n\nimport type { ResolvedResourceOwnerModeConfig } from '../types.js'\n\ntype CollectionAccess = NonNullable<CollectionConfig['access']>\n\n/**\n * Overlay app-provided access overrides onto a base (owner-mode) access object,\n * per operation. Specifying only `read` keeps the base's create/update/delete\n * rules intact, instead of replacing them wholesale (review C9).\n */\nexport function composeAccess(\n  base: CollectionAccess,\n  override: CollectionConfig['access'],\n): CollectionAccess {\n  return { ...base, ...(override ?? {}) }\n}\n\n/**\n * Returns true if the requesting user is considered an \"admin\" for resource-owner mode:\n * - No user → deny\n * - adminRoles provided → the user's `roleField` value must be in that list\n * - adminRoles empty → no bypass role; all authenticated users are treated as owners\n *\n * Reads the configured `roleField` (not a hardcoded `user.role`) so apps using a\n * `roles: string[]` field — or any custom role field — aren't silently demoted.\n */\nfunction isAdmin(user: Record<string, unknown>, adminRoles: string[], roleField: string): boolean {\n  if (!adminRoles.length) {return false}\n  const role = user[roleField] as string | string[] | undefined\n  if (!role) {return false}\n  return Array.isArray(role) ? role.some((r) => adminRoles.includes(r)) : adminRoles.includes(role)\n}\n\n/**\n * Access factories for Resources collection.\n * Owners may read/update/delete their own resources; anyone authenticated may create.\n */\nexport function makeResourceOwnerAccess(rom: ResolvedResourceOwnerModeConfig): CollectionAccess {\n  const { adminRoles, ownerField, roleField } = rom\n\n  const ownerOrAdmin: Access = ({ req }: { req: PayloadRequest }) => {\n    if (!req.user) {return false}\n    const user = req.user as Record<string, unknown>\n    if (isAdmin(user, adminRoles, roleField)) {return true}\n    return { [ownerField]: { equals: user.id } }\n  }\n\n  return {\n    create: ({ req }: { req: PayloadRequest }) => Boolean(req.user),\n    delete: ownerOrAdmin,\n    read: ownerOrAdmin,\n    update: ownerOrAdmin,\n  }\n}\n\n/**\n * Access factories for Schedules collection.\n * A schedule's ownership is determined through its `resource.owner` relationship.\n */\nexport function makeScheduleOwnerAccess(rom: ResolvedResourceOwnerModeConfig): CollectionAccess {\n  const { adminRoles, ownerField, roleField } = rom\n\n  const ownerOrAdmin: Access = ({ req }: { req: PayloadRequest }) => {\n    if (!req.user) {return false}\n    const user = req.user as Record<string, unknown>\n    if (isAdmin(user, adminRoles, roleField)) {return true}\n    return { [`resource.${ownerField}`]: { equals: user.id } }\n  }\n\n  return {\n    create: ({ req }: { req: PayloadRequest }) => Boolean(req.user),\n    delete: ownerOrAdmin,\n    read: ownerOrAdmin,\n    update: ownerOrAdmin,\n  }\n}\n\n/**\n * Access factories for Reservations collection.\n * Resource owners can see reservations for their resources (read-only);\n * mutations are admin-only to prevent owners from unilaterally cancelling guest bookings.\n */\nexport function makeReservationOwnerAccess(\n  rom: ResolvedResourceOwnerModeConfig,\n): CollectionAccess {\n  const { adminRoles, ownerField, roleField } = rom\n\n  const readAccess: Access = ({ req }: { req: PayloadRequest }) => {\n    if (!req.user) {return false}\n    const user = req.user as Record<string, unknown>\n    if (isAdmin(user, adminRoles, roleField)) {return true}\n    return { [`resource.${ownerField}`]: { equals: user.id } }\n  }\n\n  const adminOnly: Access = ({ req }: { req: PayloadRequest }) => {\n    if (!req.user) {return false}\n    const user = req.user as Record<string, unknown>\n    return isAdmin(user, adminRoles, roleField)\n  }\n\n  return {\n    create: adminOnly,\n    delete: adminOnly,\n    read: readAccess,\n    update: adminOnly,\n  }\n}\n\n/**\n * Access factories for Services collection when `ownedServices: true`.\n */\nexport function makeServiceOwnerAccess(\n  rom: ResolvedResourceOwnerModeConfig,\n  ownerField: string,\n): CollectionAccess {\n  const { adminRoles, roleField } = rom\n\n  const ownerOrAdmin: Access = ({ req }: { req: PayloadRequest }) => {\n    if (!req.user) {return false}\n    const user = req.user as Record<string, unknown>\n    if (isAdmin(user, adminRoles, roleField)) {return true}\n    return { [ownerField]: { equals: user.id } }\n  }\n\n  return {\n    create: ({ req }: { req: PayloadRequest }) => Boolean(req.user),\n    delete: ownerOrAdmin,\n    read: ownerOrAdmin,\n    update: ownerOrAdmin,\n  }\n}\n"],"names":["composeAccess","base","override","isAdmin","user","adminRoles","roleField","length","role","Array","isArray","some","r","includes","makeResourceOwnerAccess","rom","ownerField","ownerOrAdmin","req","equals","id","create","Boolean","delete","read","update","makeScheduleOwnerAccess","makeReservationOwnerAccess","readAccess","adminOnly","makeServiceOwnerAccess"],"mappings":"AAMA;;;;CAIC,GACD,OAAO,SAASA,cACdC,IAAsB,EACtBC,QAAoC;IAEpC,OAAO;QAAE,GAAGD,IAAI;QAAE,GAAIC,YAAY,CAAC,CAAC;IAAE;AACxC;AAEA;;;;;;;;CAQC,GACD,SAASC,QAAQC,IAA6B,EAAEC,UAAoB,EAAEC,SAAiB;IACrF,IAAI,CAACD,WAAWE,MAAM,EAAE;QAAC,OAAO;IAAK;IACrC,MAAMC,OAAOJ,IAAI,CAACE,UAAU;IAC5B,IAAI,CAACE,MAAM;QAAC,OAAO;IAAK;IACxB,OAAOC,MAAMC,OAAO,CAACF,QAAQA,KAAKG,IAAI,CAAC,CAACC,IAAMP,WAAWQ,QAAQ,CAACD,MAAMP,WAAWQ,QAAQ,CAACL;AAC9F;AAEA;;;CAGC,GACD,OAAO,SAASM,wBAAwBC,GAAoC;IAC1E,MAAM,EAAEV,UAAU,EAAEW,UAAU,EAAEV,SAAS,EAAE,GAAGS;IAE9C,MAAME,eAAuB,CAAC,EAAEC,GAAG,EAA2B;QAC5D,IAAI,CAACA,IAAId,IAAI,EAAE;YAAC,OAAO;QAAK;QAC5B,MAAMA,OAAOc,IAAId,IAAI;QACrB,IAAID,QAAQC,MAAMC,YAAYC,YAAY;YAAC,OAAO;QAAI;QACtD,OAAO;YAAE,CAACU,WAAW,EAAE;gBAAEG,QAAQf,KAAKgB,EAAE;YAAC;QAAE;IAC7C;IAEA,OAAO;QACLC,QAAQ,CAAC,EAAEH,GAAG,EAA2B,GAAKI,QAAQJ,IAAId,IAAI;QAC9DmB,QAAQN;QACRO,MAAMP;QACNQ,QAAQR;IACV;AACF;AAEA;;;CAGC,GACD,OAAO,SAASS,wBAAwBX,GAAoC;IAC1E,MAAM,EAAEV,UAAU,EAAEW,UAAU,EAAEV,SAAS,EAAE,GAAGS;IAE9C,MAAME,eAAuB,CAAC,EAAEC,GAAG,EAA2B;QAC5D,IAAI,CAACA,IAAId,IAAI,EAAE;YAAC,OAAO;QAAK;QAC5B,MAAMA,OAAOc,IAAId,IAAI;QACrB,IAAID,QAAQC,MAAMC,YAAYC,YAAY;YAAC,OAAO;QAAI;QACtD,OAAO;YAAE,CAAC,CAAC,SAAS,EAAEU,YAAY,CAAC,EAAE;gBAAEG,QAAQf,KAAKgB,EAAE;YAAC;QAAE;IAC3D;IAEA,OAAO;QACLC,QAAQ,CAAC,EAAEH,GAAG,EAA2B,GAAKI,QAAQJ,IAAId,IAAI;QAC9DmB,QAAQN;QACRO,MAAMP;QACNQ,QAAQR;IACV;AACF;AAEA;;;;CAIC,GACD,OAAO,SAASU,2BACdZ,GAAoC;IAEpC,MAAM,EAAEV,UAAU,EAAEW,UAAU,EAAEV,SAAS,EAAE,GAAGS;IAE9C,MAAMa,aAAqB,CAAC,EAAEV,GAAG,EAA2B;QAC1D,IAAI,CAACA,IAAId,IAAI,EAAE;YAAC,OAAO;QAAK;QAC5B,MAAMA,OAAOc,IAAId,IAAI;QACrB,IAAID,QAAQC,MAAMC,YAAYC,YAAY;YAAC,OAAO;QAAI;QACtD,OAAO;YAAE,CAAC,CAAC,SAAS,EAAEU,YAAY,CAAC,EAAE;gBAAEG,QAAQf,KAAKgB,EAAE;YAAC;QAAE;IAC3D;IAEA,MAAMS,YAAoB,CAAC,EAAEX,GAAG,EAA2B;QACzD,IAAI,CAACA,IAAId,IAAI,EAAE;YAAC,OAAO;QAAK;QAC5B,MAAMA,OAAOc,IAAId,IAAI;QACrB,OAAOD,QAAQC,MAAMC,YAAYC;IACnC;IAEA,OAAO;QACLe,QAAQQ;QACRN,QAAQM;QACRL,MAAMI;QACNH,QAAQI;IACV;AACF;AAEA;;CAEC,GACD,OAAO,SAASC,uBACdf,GAAoC,EACpCC,UAAkB;IAElB,MAAM,EAAEX,UAAU,EAAEC,SAAS,EAAE,GAAGS;IAElC,MAAME,eAAuB,CAAC,EAAEC,GAAG,EAA2B;QAC5D,IAAI,CAACA,IAAId,IAAI,EAAE;YAAC,OAAO;QAAK;QAC5B,MAAMA,OAAOc,IAAId,IAAI;QACrB,IAAID,QAAQC,MAAMC,YAAYC,YAAY;YAAC,OAAO;QAAI;QACtD,OAAO;YAAE,CAACU,WAAW,EAAE;gBAAEG,QAAQf,KAAKgB,EAAE;YAAC;QAAE;IAC7C;IAEA,OAAO;QACLC,QAAQ,CAAC,EAAEH,GAAG,EAA2B,GAAKI,QAAQJ,IAAId,IAAI;QAC9DmB,QAAQN;QACRO,MAAMP;QACNQ,QAAQR;IACV;AACF"}

package/dist/utilities/reservationChanges.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Read-only merged view of an update: the original document overlaid with the
+ * incoming partial patch. Used for validation only — never assign the result
+ * back into `data`, or unchanged fields get written back to the database.
+ */
+export declare function mergeReservationData(data: Record<string, unknown>, originalDoc: Record<string, unknown> | undefined): Record<string, unknown>;
+/**
+ * True when the update patch changes any scheduling-relevant field, or moves
+ * status from a non-blocking value into a blocking one (re-occupying a slot).
+ * Key presence alone is not a change — full-document admin saves include every
+ * field, and a notes-only edit must not trigger re-validation.
+ */
+export declare function schedulingFieldsChanged({ blockingStatuses, data, originalDoc, }: {
+    blockingStatuses: string[];
+    data: Record<string, unknown>;
+    originalDoc: Record<string, unknown> | undefined;
+}): boolean;

package/dist/utilities/reservationChanges.js

@@ -0,0 +1,88 @@
+import { extractId } from './resolveReservationItems.js';
+/**
+ * Fields whose change means a reservation's slot occupancy may differ,
+ * requiring conflict re-validation and endTime recomputation on update.
+ */ const SCHEDULING_FIELDS = [
+    'endTime',
+    'guestCount',
+    'items',
+    'resource',
+    'service',
+    'startTime'
+];
+/**
+ * Read-only merged view of an update: the original document overlaid with the
+ * incoming partial patch. Used for validation only — never assign the result
+ * back into `data`, or unchanged fields get written back to the database.
+ */ export function mergeReservationData(data, originalDoc) {
+    return {
+        ...originalDoc ?? {},
+        ...data ?? {}
+    };
+}
+function normalizeDate(value) {
+    if (value === null || value === undefined || value === '') {
+        return null;
+    }
+    const time = new Date(value).getTime();
+    return Number.isNaN(time) ? null : time;
+}
+function normalizeRelationship(value) {
+    const id = extractId(value);
+    return id === undefined ? null : String(id);
+}
+function itemsEqual(a, b) {
+    const listA = Array.isArray(a) ? a : [];
+    const listB = Array.isArray(b) ? b : [];
+    if (listA.length !== listB.length) {
+        return false;
+    }
+    return listA.every((itemA, i)=>{
+        const itemB = listB[i];
+        return normalizeRelationship(itemA.resource) === normalizeRelationship(itemB.resource) && normalizeRelationship(itemA.service) === normalizeRelationship(itemB.service) && normalizeDate(itemA.startTime) === normalizeDate(itemB.startTime) && normalizeDate(itemA.endTime) === normalizeDate(itemB.endTime) && (itemA.guestCount ?? null) === (itemB.guestCount ?? null);
+    });
+}
+/**
+ * True when the update patch changes any scheduling-relevant field, or moves
+ * status from a non-blocking value into a blocking one (re-occupying a slot).
+ * Key presence alone is not a change — full-document admin saves include every
+ * field, and a notes-only edit must not trigger re-validation.
+ */ export function schedulingFieldsChanged({ blockingStatuses, data, originalDoc }) {
+    if (!originalDoc) {
+        return true;
+    }
+    for (const field of SCHEDULING_FIELDS){
+        if (!(field in data)) {
+            continue;
+        }
+        const next = data[field];
+        const prev = originalDoc[field];
+        let changed;
+        switch(field){
+            case 'endTime':
+            case 'startTime':
+                changed = normalizeDate(next) !== normalizeDate(prev);
+                break;
+            case 'guestCount':
+                changed = (next ?? null) !== (prev ?? null);
+                break;
+            case 'items':
+                changed = !itemsEqual(next, prev);
+                break;
+            default:
+                changed = normalizeRelationship(next) !== normalizeRelationship(prev);
+        }
+        if (changed) {
+            return true;
+        }
+    }
+    if ('status' in data && typeof data.status === 'string') {
+        const prevStatus = originalDoc.status;
+        if (data.status !== prevStatus && blockingStatuses.includes(data.status) && (prevStatus === undefined || !blockingStatuses.includes(prevStatus))) {
+            return true;
+        }
+    }
+    return false;
+}
+
+//# sourceMappingURL=reservationChanges.js.map

package/dist/utilities/reservationChanges.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/utilities/reservationChanges.ts"],"sourcesContent":["import { extractId } from './resolveReservationItems.js'\n\n/**\n * Fields whose change means a reservation's slot occupancy may differ,\n * requiring conflict re-validation and endTime recomputation on update.\n */\nconst SCHEDULING_FIELDS = [\n  'endTime',\n  'guestCount',\n  'items',\n  'resource',\n  'service',\n  'startTime',\n] as const\n\n/**\n * Read-only merged view of an update: the original document overlaid with the\n * incoming partial patch. Used for validation only — never assign the result\n * back into `data`, or unchanged fields get written back to the database.\n */\nexport function mergeReservationData(\n  data: Record<string, unknown>,\n  originalDoc: Record<string, unknown> | undefined,\n): Record<string, unknown> {\n  return { ...(originalDoc ?? {}), ...(data ?? {}) }\n}\n\nfunction normalizeDate(value: unknown): null | number {\n  if (value === null || value === undefined || value === '') {\n    return null\n  }\n  const time = new Date(value as string).getTime()\n  return Number.isNaN(time) ? null : time\n}\n\nfunction normalizeRelationship(value: unknown): null | string {\n  const id = extractId(value)\n  return id === undefined ? null : String(id)\n}\n\nfunction itemsEqual(a: unknown, b: unknown): boolean {\n  const listA = Array.isArray(a) ? (a as Array<Record<string, unknown>>) : []\n  const listB = Array.isArray(b) ? (b as Array<Record<string, unknown>>) : []\n  if (listA.length !== listB.length) {\n    return false\n  }\n  return listA.every((itemA, i) => {\n    const itemB = listB[i]\n    return (\n      normalizeRelationship(itemA.resource) === normalizeRelationship(itemB.resource) &&\n      normalizeRelationship(itemA.service) === normalizeRelationship(itemB.service) &&\n      normalizeDate(itemA.startTime) === normalizeDate(itemB.startTime) &&\n      normalizeDate(itemA.endTime) === normalizeDate(itemB.endTime) &&\n      ((itemA.guestCount ?? null) as null | number) ===\n        ((itemB.guestCount ?? null) as null | number)\n    )\n  })\n}\n\n/**\n * True when the update patch changes any scheduling-relevant field, or moves\n * status from a non-blocking value into a blocking one (re-occupying a slot).\n * Key presence alone is not a change — full-document admin saves include every\n * field, and a notes-only edit must not trigger re-validation.\n */\nexport function schedulingFieldsChanged({\n  blockingStatuses,\n  data,\n  originalDoc,\n}: {\n  blockingStatuses: string[]\n  data: Record<string, unknown>\n  originalDoc: Record<string, unknown> | undefined\n}): boolean {\n  if (!originalDoc) {\n    return true\n  }\n\n  for (const field of SCHEDULING_FIELDS) {\n    if (!(field in data)) {\n      continue\n    }\n    const next = data[field]\n    const prev = originalDoc[field]\n    let changed: boolean\n    switch (field) {\n      case 'endTime':\n      case 'startTime':\n        changed = normalizeDate(next) !== normalizeDate(prev)\n        break\n      case 'guestCount':\n        changed = ((next ?? null) as null | number) !== ((prev ?? null) as null | number)\n        break\n      case 'items':\n        changed = !itemsEqual(next, prev)\n        break\n      default:\n        changed = normalizeRelationship(next) !== normalizeRelationship(prev)\n    }\n    if (changed) {\n      return true\n    }\n  }\n\n  if ('status' in data && typeof data.status === 'string') {\n    const prevStatus = originalDoc.status as string | undefined\n    if (\n      data.status !== prevStatus &&\n      blockingStatuses.includes(data.status) &&\n      (prevStatus === undefined || !blockingStatuses.includes(prevStatus))\n    ) {\n      return true\n    }\n  }\n\n  return false\n}\n"],"names":["extractId","SCHEDULING_FIELDS","mergeReservationData","data","originalDoc","normalizeDate","value","undefined","time","Date","getTime","Number","isNaN","normalizeRelationship","id","String","itemsEqual","a","b","listA","Array","isArray","listB","length","every","itemA","i","itemB","resource","service","startTime","endTime","guestCount","schedulingFieldsChanged","blockingStatuses","field","next","prev","changed","status","prevStatus","includes"],"mappings":"AAAA,SAASA,SAAS,QAAQ,+BAA8B;AAExD;;;CAGC,GACD,MAAMC,oBAAoB;IACxB;IACA;IACA;IACA;IACA;IACA;CACD;AAED;;;;CAIC,GACD,OAAO,SAASC,qBACdC,IAA6B,EAC7BC,WAAgD;IAEhD,OAAO;QAAE,GAAIA,eAAe,CAAC,CAAC;QAAG,GAAID,QAAQ,CAAC,CAAC;IAAE;AACnD;AAEA,SAASE,cAAcC,KAAc;IACnC,IAAIA,UAAU,QAAQA,UAAUC,aAAaD,UAAU,IAAI;QACzD,OAAO;IACT;IACA,MAAME,OAAO,IAAIC,KAAKH,OAAiBI,OAAO;IAC9C,OAAOC,OAAOC,KAAK,CAACJ,QAAQ,OAAOA;AACrC;AAEA,SAASK,sBAAsBP,KAAc;IAC3C,MAAMQ,KAAKd,UAAUM;IACrB,OAAOQ,OAAOP,YAAY,OAAOQ,OAAOD;AAC1C;AAEA,SAASE,WAAWC,CAAU,EAAEC,CAAU;IACxC,MAAMC,QAAQC,MAAMC,OAAO,CAACJ,KAAMA,IAAuC,EAAE;IAC3E,MAAMK,QAAQF,MAAMC,OAAO,CAACH,KAAMA,IAAuC,EAAE;IAC3E,IAAIC,MAAMI,MAAM,KAAKD,MAAMC,MAAM,EAAE;QACjC,OAAO;IACT;IACA,OAAOJ,MAAMK,KAAK,CAAC,CAACC,OAAOC;QACzB,MAAMC,QAAQL,KAAK,CAACI,EAAE;QACtB,OACEb,sBAAsBY,MAAMG,QAAQ,MAAMf,sBAAsBc,MAAMC,QAAQ,KAC9Ef,sBAAsBY,MAAMI,OAAO,MAAMhB,sBAAsBc,MAAME,OAAO,KAC5ExB,cAAcoB,MAAMK,SAAS,MAAMzB,cAAcsB,MAAMG,SAAS,KAChEzB,cAAcoB,MAAMM,OAAO,MAAM1B,cAAcsB,MAAMI,OAAO,KAC5D,AAAEN,CAAAA,MAAMO,UAAU,IAAI,IAAG,MACrBL,CAAAA,MAAMK,UAAU,IAAI,IAAG;IAE/B;AACF;AAEA;;;;;CAKC,GACD,OAAO,SAASC,wBAAwB,EACtCC,gBAAgB,EAChB/B,IAAI,EACJC,WAAW,EAKZ;IACC,IAAI,CAACA,aAAa;QAChB,OAAO;IACT;IAEA,KAAK,MAAM+B,SAASlC,kBAAmB;QACrC,IAAI,CAAEkC,CAAAA,SAAShC,IAAG,GAAI;YACpB;QACF;QACA,MAAMiC,OAAOjC,IAAI,CAACgC,MAAM;QACxB,MAAME,OAAOjC,WAAW,CAAC+B,MAAM;QAC/B,IAAIG;QACJ,OAAQH;YACN,KAAK;YACL,KAAK;gBACHG,UAAUjC,cAAc+B,UAAU/B,cAAcgC;gBAChD;YACF,KAAK;gBACHC,UAAU,AAAEF,CAAAA,QAAQ,IAAG,MAA2BC,CAAAA,QAAQ,IAAG;gBAC7D;YACF,KAAK;gBACHC,UAAU,CAACtB,WAAWoB,MAAMC;gBAC5B;YACF;gBACEC,UAAUzB,sBAAsBuB,UAAUvB,sBAAsBwB;QACpE;QACA,IAAIC,SAAS;YACX,OAAO;QACT;IACF;IAEA,IAAI,YAAYnC,QAAQ,OAAOA,KAAKoC,MAAM,KAAK,UAAU;QACvD,MAAMC,aAAapC,YAAYmC,MAAM;QACrC,IACEpC,KAAKoC,MAAM,KAAKC,cAChBN,iBAAiBO,QAAQ,CAACtC,KAAKoC,MAAM,KACpCC,CAAAA,eAAejC,aAAa,CAAC2B,iBAAiBO,QAAQ,CAACD,WAAU,GAClE;YACA,OAAO;QACT;IACF;IAEA,OAAO;AACT"}

package/dist/utilities/scheduleUtils.d.ts

@@ -1,10 +1,12 @@
 import type { DayOfWeek } from '../types.js';
 /**
- * Get the DayOfWeek value for a given Date.
+ * @deprecated Server-TZ-dependent legacy helper — no longer used by the plugin's
+ * own resolution path. Use timezoneUtils (getDayOfWeekFromDayKey / combineDayKeyAndTime).
  */
 export declare function getDayOfWeek(date: Date): DayOfWeek;
 /**
- * Check if a date string (ISO) matches a DayOfWeek.
+ * @deprecated Server-TZ-dependent legacy helper — no longer used by the plugin's
+ * own resolution path. Use timezoneUtils (getDayOfWeekFromDayKey / combineDayKeyAndTime).
  */
 export declare function dateMatchesDay(date: Date, day: DayOfWeek): boolean;
 /**
@@ -15,17 +17,19 @@ export declare function parseTime(time: string): {
     minutes: number;
 };
 /**
- * Combine a date (day) with a HH:mm time string into a full Date.
+ * @deprecated Server-TZ-dependent legacy helper — no longer used by the plugin's
+ * own resolution path. Use timezoneUtils (getDayOfWeekFromDayKey / combineDayKeyAndTime).
  */
 export declare function combineDateAndTime(date: Date, time: string): Date;
 /**
- * Check if a given date is an exception date in the schedule.
+ * Check if a calendar day is an exception day in the schedule.
  * Supports range exceptions via optional endDate (inclusive on both ends).
+ * `date` may be a Date instant (keyed in `timeZone`) or a YYYY-MM-DD day key.
  */
-export declare function isExceptionDate(date: Date, exceptions: Array<{
+export declare function isExceptionDate(date: Date | string, exceptions: Array<{
     date: string;
     endDate?: string;
-}>): boolean;
+}>, timeZone?: string): boolean;
 type RecurringSlot = {
     day: DayOfWeek;
     endTime: string;
@@ -51,7 +55,9 @@ type TimeRange = {
     start: Date;
 };
 /**
- * Resolve a schedule to concrete available time ranges for a given date.
+ * Resolve a schedule to concrete available time ranges for a calendar day.
+ * `date` may be a Date instant (keyed in `timeZone`) or a YYYY-MM-DD day key.
+ * All wall-clock times (HH:mm) are interpreted in `timeZone`.
  */
-export declare function resolveScheduleForDate(schedule: Schedule, date: Date): TimeRange[];
+export declare function resolveScheduleForDate(schedule: Schedule, date: Date | string, timeZone?: string): TimeRange[];
 export {};