payload-reserve 2.3.0 → 3.0.0

package/dist/endpoints/createBooking.js

@@ -1,3 +1,5 @@
+import { isTransientWriteConflict, retryOnWriteConflict } from '../utilities/retryOnWriteConflict.js';
+import { callerMayUseTenant } from '../utilities/tenantTimezone.js';
 import { isPrivilegedUser } from '../utilities/userRoles.js';
 export function createBookingEndpoint(config) {
     return {
@@ -6,10 +8,16 @@ export function createBookingEndpoint(config) {
             // Cancellation tokens are server-generated secrets — never accept one
             // from the request body.
             delete data.cancellationToken;
+            // A hold token is a bearer secret, not booking data: it must reach the
+            // conflict check via context (so the hold does not block the booking it
+            // was taken to protect) and must never be persisted on the reservation.
+            const holdToken = typeof data.holdToken === 'string' ? data.holdToken : undefined;
+            delete data.holdToken;
+            const privileged = isPrivilegedUser(req.user, config);
             // Who may book for whom: staff/admin for anyone (walk-ins); an
             // authenticated customer only for themselves; anonymous callers never
             // for an existing customer record (the guest flow covers them).
-            if (!isPrivilegedUser(req.user, config)) {
+            if (!privileged) {
                 if (req.user) {
                     data.customer = req.user.id;
                 } else if (data.customer) {
@@ -20,15 +28,108 @@ export function createBookingEndpoint(config) {
                     });
                 }
             }
+            // The write stays PRIVILEGED for every caller, and the tenant-membership
+            // probe below is the security boundary (maintainer ruling). Applying that
+            // ruling consistently is what makes this endpoint's behaviour identical to
+            // pre-`slotHolds` releases for collection access — it never passed
+            // `overrideAccess`, so the Local API default (`true`) applied to
+            // everyone — while still closing the cross-tenant write.
+            //
+            // Delegating for any subset of callers is not a security improvement and
+            // is a real regression: `isPrivilegedUser` is true for ANY user outside
+            // `slugs.customers`, so delegating on that branch made a non-admin staff
+            // or resource-owner account hit `resourceOwnerMode`'s admin-only
+            // reservation `create` access (`makeReservationOwnerAccess` in
+            // src/utilities/ownerAccess.ts) and get a flat 403 for a walk-in booking
+            // they could take before. And it buys nothing, because Payload's `create`
+            // access check only tests the TRUTHINESS of an access function's result —
+            // a returned `Where` (how multi-tenant scopes access) is discarded, so
+            // `overrideAccess: false` cannot constrain WHICH tenant is written to.
+            // Only the probe can. See README, "/api/reserve/book: the tenant probe is
+            // the gate, not overrideAccess".
+            // See callerMayUseTenant's doc comment (src/utilities/tenantTimezone.ts)
+            // for the full mechanism and its precondition. Unconditional on
+            // `req.user`: it is what authorizes an explicit `tenant` in the body, and
+            // it is independent of the privileged write above.
+            if (req.user) {
+                const permitted = await callerMayUseTenant({
+                    config,
+                    data,
+                    req
+                });
+                if (!permitted) {
+                    return Response.json({
+                        error: 'Not permitted to create this booking'
+                    }, {
+                        status: 403
+                    });
+                }
+            }
             // Create via Payload Local API — collection hooks handle conflict detection,
             // endTime calculation, status transitions, AND the beforeBookingCreate
             // plugin hooks (running them here too made them fire twice per booking).
-            // eslint-disable-next-line @typescript-eslint/no-explicit-any
-            const reservation = await req.payload.create({
-                collection: config.slugs.reservations,
-                data,
-                req
-            });
+            //
+            // Retry only transient write conflicts. acquireBookingLock makes concurrent
+            // bookings for one resource contend on a single document; on MongoDB the
+            // loser aborts rather than waiting, so without this a legitimate booking on
+            // a quantity>1 resource fails purely because it lost a race.
+            let reservation;
+            try {
+                reservation = await retryOnWriteConflict(()=>// eslint-disable-next-line @typescript-eslint/no-explicit-any
+                    req.payload.create({
+                        collection: config.slugs.reservations,
+                        context: holdToken ? {
+                            holdToken
+                        } : undefined,
+                        data,
+                        overrideAccess: true,
+                        req
+                    }), {
+                    req
+                });
+            } catch (err) {
+                // A conflict that survived every attempt is contention, not a bad request:
+                // the caller should try again rather than change anything.
+                if (isTransientWriteConflict(err)) {
+                    return Response.json({
+                        error: 'That slot is being booked by someone else. Please try again.',
+                        retryable: true
+                    }, {
+                        status: 409
+                    });
+                }
+                // An access denial raised anywhere under the create (a consumer hook,
+                // a field-level rule) is an authorization failure, not a 500.
+                if (err?.status === 403) {
+                    return Response.json({
+                        error: 'Not permitted to create this booking'
+                    }, {
+                        status: 403
+                    });
+                }
+                throw err;
+            }
+            // Consume the hold now that the booking exists. Failure here must not fail
+            // the booking — the hold expires on its own, and a stale hold only ever
+            // blocks the slot for its remaining TTL.
+            if (holdToken) {
+                try {
+                    await req.payload.delete({
+                        collection: config.slugs.holds,
+                        req,
+                        where: {
+                            token: {
+                                equals: holdToken
+                            }
+                        }
+                    });
+                } catch (err) {
+                    req.payload.logger.warn({
+                        err,
+                        msg: 'payload-reserve: booking created but its hold could not be released'
+                    });
+                }
+            }
             // Never expose the cancellation token in the HTTP response — it is delivered
             // to the guest by the host project via the afterBookingCreate hook.
             const { cancellationToken: _cancellationToken, ...safeReservation } = reservation;

package/dist/endpoints/createBooking.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/endpoints/createBooking.ts"],"sourcesContent":["import type { Endpoint } from 'payload'\n\nimport type { ResolvedReservationPluginConfig } from '../types.js'\n\nimport { isPrivilegedUser } from '../utilities/userRoles.js'\n\nexport function createBookingEndpoint(config: ResolvedReservationPluginConfig): Endpoint {\n  return {\n    handler: async (req) => {\n      const data = (await req.json?.()) as Record<string, unknown>\n\n      // Cancellation tokens are server-generated secrets — never accept one\n      // from the request body.\n      delete data.cancellationToken\n\n      // Who may book for whom: staff/admin for anyone (walk-ins); an\n      // authenticated customer only for themselves; anonymous callers never\n      // for an existing customer record (the guest flow covers them).\n      if (!isPrivilegedUser(req.user, config)) {\n        if (req.user) {\n          data.customer = req.user.id\n        } else if (data.customer) {\n          return Response.json(\n            { error: 'Anonymous bookings cannot set a customer' },\n            { status: 403 },\n          )\n        }\n      }\n\n      // Create via Payload Local API — collection hooks handle conflict detection,\n      // endTime calculation, status transitions, AND the beforeBookingCreate\n      // plugin hooks (running them here too made them fire twice per booking).\n      // eslint-disable-next-line @typescript-eslint/no-explicit-any\n      const reservation = await (req.payload.create as any)({\n        collection: config.slugs.reservations,\n        data,\n        req,\n      })\n\n      // Never expose the cancellation token in the HTTP response — it is delivered\n      // to the guest by the host project via the afterBookingCreate hook.\n      const { cancellationToken: _cancellationToken, ...safeReservation } =\n        reservation as Record<string, unknown>\n\n      return Response.json(safeReservation, { status: 201 })\n    },\n    method: 'post',\n    path: '/reserve/book',\n  }\n}\n"],"names":["isPrivilegedUser","createBookingEndpoint","config","handler","req","data","json","cancellationToken","user","customer","id","Response","error","status","reservation","payload","create","collection","slugs","reservations","_cancellationToken","safeReservation","method","path"],"mappings":"AAIA,SAASA,gBAAgB,QAAQ,4BAA2B;AAE5D,OAAO,SAASC,sBAAsBC,MAAuC;IAC3E,OAAO;QACLC,SAAS,OAAOC;YACd,MAAMC,OAAQ,MAAMD,IAAIE,IAAI;YAE5B,sEAAsE;YACtE,yBAAyB;YACzB,OAAOD,KAAKE,iBAAiB;YAE7B,+DAA+D;YAC/D,sEAAsE;YACtE,gEAAgE;YAChE,IAAI,CAACP,iBAAiBI,IAAII,IAAI,EAAEN,SAAS;gBACvC,IAAIE,IAAII,IAAI,EAAE;oBACZH,KAAKI,QAAQ,GAAGL,IAAII,IAAI,CAACE,EAAE;gBAC7B,OAAO,IAAIL,KAAKI,QAAQ,EAAE;oBACxB,OAAOE,SAASL,IAAI,CAClB;wBAAEM,OAAO;oBAA2C,GACpD;wBAAEC,QAAQ;oBAAI;gBAElB;YACF;YAEA,6EAA6E;YAC7E,uEAAuE;YACvE,yEAAyE;YACzE,8DAA8D;YAC9D,MAAMC,cAAc,MAAM,AAACV,IAAIW,OAAO,CAACC,MAAM,CAAS;gBACpDC,YAAYf,OAAOgB,KAAK,CAACC,YAAY;gBACrCd;gBACAD;YACF;YAEA,6EAA6E;YAC7E,oEAAoE;YACpE,MAAM,EAAEG,mBAAmBa,kBAAkB,EAAE,GAAGC,iBAAiB,GACjEP;YAEF,OAAOH,SAASL,IAAI,CAACe,iBAAiB;gBAAER,QAAQ;YAAI;QACtD;QACAS,QAAQ;QACRC,MAAM;IACR;AACF"}
+{"version":3,"sources":["../../src/endpoints/createBooking.ts"],"sourcesContent":["import type { Endpoint } from 'payload'\n\nimport type { ResolvedReservationPluginConfig } from '../types.js'\n\nimport {\n  isTransientWriteConflict,\n  retryOnWriteConflict,\n} from '../utilities/retryOnWriteConflict.js'\nimport { callerMayUseTenant } from '../utilities/tenantTimezone.js'\nimport { isPrivilegedUser } from '../utilities/userRoles.js'\n\nexport function createBookingEndpoint(config: ResolvedReservationPluginConfig): Endpoint {\n  return {\n    handler: async (req) => {\n      const data = (await req.json?.()) as Record<string, unknown>\n\n      // Cancellation tokens are server-generated secrets — never accept one\n      // from the request body.\n      delete data.cancellationToken\n\n      // A hold token is a bearer secret, not booking data: it must reach the\n      // conflict check via context (so the hold does not block the booking it\n      // was taken to protect) and must never be persisted on the reservation.\n      const holdToken = typeof data.holdToken === 'string' ? data.holdToken : undefined\n      delete data.holdToken\n\n      const privileged = isPrivilegedUser(req.user, config)\n\n      // Who may book for whom: staff/admin for anyone (walk-ins); an\n      // authenticated customer only for themselves; anonymous callers never\n      // for an existing customer record (the guest flow covers them).\n      if (!privileged) {\n        if (req.user) {\n          data.customer = req.user.id\n        } else if (data.customer) {\n          return Response.json(\n            { error: 'Anonymous bookings cannot set a customer' },\n            { status: 403 },\n          )\n        }\n      }\n\n      // The write stays PRIVILEGED for every caller, and the tenant-membership\n      // probe below is the security boundary (maintainer ruling). Applying that\n      // ruling consistently is what makes this endpoint's behaviour identical to\n      // pre-`slotHolds` releases for collection access — it never passed\n      // `overrideAccess`, so the Local API default (`true`) applied to\n      // everyone — while still closing the cross-tenant write.\n      //\n      // Delegating for any subset of callers is not a security improvement and\n      // is a real regression: `isPrivilegedUser` is true for ANY user outside\n      // `slugs.customers`, so delegating on that branch made a non-admin staff\n      // or resource-owner account hit `resourceOwnerMode`'s admin-only\n      // reservation `create` access (`makeReservationOwnerAccess` in\n      // src/utilities/ownerAccess.ts) and get a flat 403 for a walk-in booking\n      // they could take before. And it buys nothing, because Payload's `create`\n      // access check only tests the TRUTHINESS of an access function's result —\n      // a returned `Where` (how multi-tenant scopes access) is discarded, so\n      // `overrideAccess: false` cannot constrain WHICH tenant is written to.\n      // Only the probe can. See README, \"/api/reserve/book: the tenant probe is\n      // the gate, not overrideAccess\".\n\n      // See callerMayUseTenant's doc comment (src/utilities/tenantTimezone.ts)\n      // for the full mechanism and its precondition. Unconditional on\n      // `req.user`: it is what authorizes an explicit `tenant` in the body, and\n      // it is independent of the privileged write above.\n      if (req.user) {\n        const permitted = await callerMayUseTenant({ config, data, req })\n        if (!permitted) {\n          return Response.json({ error: 'Not permitted to create this booking' }, { status: 403 })\n        }\n      }\n\n      // Create via Payload Local API — collection hooks handle conflict detection,\n      // endTime calculation, status transitions, AND the beforeBookingCreate\n      // plugin hooks (running them here too made them fire twice per booking).\n      //\n      // Retry only transient write conflicts. acquireBookingLock makes concurrent\n      // bookings for one resource contend on a single document; on MongoDB the\n      // loser aborts rather than waiting, so without this a legitimate booking on\n      // a quantity>1 resource fails purely because it lost a race.\n      let reservation: Record<string, unknown>\n      try {\n        reservation = await retryOnWriteConflict(\n          () =>\n            // eslint-disable-next-line @typescript-eslint/no-explicit-any\n            (req.payload.create as any)({\n              collection: config.slugs.reservations,\n              context: holdToken ? { holdToken } : undefined,\n              data,\n              overrideAccess: true,\n              req,\n            }) as Promise<Record<string, unknown>>,\n          { req },\n        )\n      } catch (err) {\n        // A conflict that survived every attempt is contention, not a bad request:\n        // the caller should try again rather than change anything.\n        if (isTransientWriteConflict(err)) {\n          return Response.json(\n            {\n              error: 'That slot is being booked by someone else. Please try again.',\n              retryable: true,\n            },\n            { status: 409 },\n          )\n        }\n        // An access denial raised anywhere under the create (a consumer hook,\n        // a field-level rule) is an authorization failure, not a 500.\n        if ((err as { status?: number })?.status === 403) {\n          return Response.json({ error: 'Not permitted to create this booking' }, { status: 403 })\n        }\n        throw err\n      }\n\n      // Consume the hold now that the booking exists. Failure here must not fail\n      // the booking — the hold expires on its own, and a stale hold only ever\n      // blocks the slot for its remaining TTL.\n      if (holdToken) {\n        try {\n          await req.payload.delete({\n            collection: config.slugs.holds,\n            req,\n            where: { token: { equals: holdToken } },\n          })\n        } catch (err) {\n          req.payload.logger.warn({\n            err,\n            msg: 'payload-reserve: booking created but its hold could not be released',\n          })\n        }\n      }\n\n      // Never expose the cancellation token in the HTTP response — it is delivered\n      // to the guest by the host project via the afterBookingCreate hook.\n      const { cancellationToken: _cancellationToken, ...safeReservation } = reservation\n\n      return Response.json(safeReservation, { status: 201 })\n    },\n    method: 'post',\n    path: '/reserve/book',\n  }\n}\n"],"names":["isTransientWriteConflict","retryOnWriteConflict","callerMayUseTenant","isPrivilegedUser","createBookingEndpoint","config","handler","req","data","json","cancellationToken","holdToken","undefined","privileged","user","customer","id","Response","error","status","permitted","reservation","payload","create","collection","slugs","reservations","context","overrideAccess","err","retryable","delete","holds","where","token","equals","logger","warn","msg","_cancellationToken","safeReservation","method","path"],"mappings":"AAIA,SACEA,wBAAwB,EACxBC,oBAAoB,QACf,uCAAsC;AAC7C,SAASC,kBAAkB,QAAQ,iCAAgC;AACnE,SAASC,gBAAgB,QAAQ,4BAA2B;AAE5D,OAAO,SAASC,sBAAsBC,MAAuC;IAC3E,OAAO;QACLC,SAAS,OAAOC;YACd,MAAMC,OAAQ,MAAMD,IAAIE,IAAI;YAE5B,sEAAsE;YACtE,yBAAyB;YACzB,OAAOD,KAAKE,iBAAiB;YAE7B,uEAAuE;YACvE,wEAAwE;YACxE,wEAAwE;YACxE,MAAMC,YAAY,OAAOH,KAAKG,SAAS,KAAK,WAAWH,KAAKG,SAAS,GAAGC;YACxE,OAAOJ,KAAKG,SAAS;YAErB,MAAME,aAAaV,iBAAiBI,IAAIO,IAAI,EAAET;YAE9C,+DAA+D;YAC/D,sEAAsE;YACtE,gEAAgE;YAChE,IAAI,CAACQ,YAAY;gBACf,IAAIN,IAAIO,IAAI,EAAE;oBACZN,KAAKO,QAAQ,GAAGR,IAAIO,IAAI,CAACE,EAAE;gBAC7B,OAAO,IAAIR,KAAKO,QAAQ,EAAE;oBACxB,OAAOE,SAASR,IAAI,CAClB;wBAAES,OAAO;oBAA2C,GACpD;wBAAEC,QAAQ;oBAAI;gBAElB;YACF;YAEA,yEAAyE;YACzE,0EAA0E;YAC1E,2EAA2E;YAC3E,mEAAmE;YACnE,iEAAiE;YACjE,yDAAyD;YACzD,EAAE;YACF,yEAAyE;YACzE,wEAAwE;YACxE,yEAAyE;YACzE,iEAAiE;YACjE,+DAA+D;YAC/D,yEAAyE;YACzE,0EAA0E;YAC1E,0EAA0E;YAC1E,uEAAuE;YACvE,uEAAuE;YACvE,0EAA0E;YAC1E,iCAAiC;YAEjC,yEAAyE;YACzE,gEAAgE;YAChE,0EAA0E;YAC1E,mDAAmD;YACnD,IAAIZ,IAAIO,IAAI,EAAE;gBACZ,MAAMM,YAAY,MAAMlB,mBAAmB;oBAAEG;oBAAQG;oBAAMD;gBAAI;gBAC/D,IAAI,CAACa,WAAW;oBACd,OAAOH,SAASR,IAAI,CAAC;wBAAES,OAAO;oBAAuC,GAAG;wBAAEC,QAAQ;oBAAI;gBACxF;YACF;YAEA,6EAA6E;YAC7E,uEAAuE;YACvE,yEAAyE;YACzE,EAAE;YACF,4EAA4E;YAC5E,yEAAyE;YACzE,4EAA4E;YAC5E,6DAA6D;YAC7D,IAAIE;YACJ,IAAI;gBACFA,cAAc,MAAMpB,qBAClB,IAEE,AADA,8DAA8D;oBAC7DM,IAAIe,OAAO,CAACC,MAAM,CAAS;wBAC1BC,YAAYnB,OAAOoB,KAAK,CAACC,YAAY;wBACrCC,SAAShB,YAAY;4BAAEA;wBAAU,IAAIC;wBACrCJ;wBACAoB,gBAAgB;wBAChBrB;oBACF,IACF;oBAAEA;gBAAI;YAEV,EAAE,OAAOsB,KAAK;gBACZ,2EAA2E;gBAC3E,2DAA2D;gBAC3D,IAAI7B,yBAAyB6B,MAAM;oBACjC,OAAOZ,SAASR,IAAI,CAClB;wBACES,OAAO;wBACPY,WAAW;oBACb,GACA;wBAAEX,QAAQ;oBAAI;gBAElB;gBACA,sEAAsE;gBACtE,8DAA8D;gBAC9D,IAAI,AAACU,KAA6BV,WAAW,KAAK;oBAChD,OAAOF,SAASR,IAAI,CAAC;wBAAES,OAAO;oBAAuC,GAAG;wBAAEC,QAAQ;oBAAI;gBACxF;gBACA,MAAMU;YACR;YAEA,2EAA2E;YAC3E,wEAAwE;YACxE,yCAAyC;YACzC,IAAIlB,WAAW;gBACb,IAAI;oBACF,MAAMJ,IAAIe,OAAO,CAACS,MAAM,CAAC;wBACvBP,YAAYnB,OAAOoB,KAAK,CAACO,KAAK;wBAC9BzB;wBACA0B,OAAO;4BAAEC,OAAO;gCAAEC,QAAQxB;4BAAU;wBAAE;oBACxC;gBACF,EAAE,OAAOkB,KAAK;oBACZtB,IAAIe,OAAO,CAACc,MAAM,CAACC,IAAI,CAAC;wBACtBR;wBACAS,KAAK;oBACP;gBACF;YACF;YAEA,6EAA6E;YAC7E,oEAAoE;YACpE,MAAM,EAAE5B,mBAAmB6B,kBAAkB,EAAE,GAAGC,iBAAiB,GAAGnB;YAEtE,OAAOJ,SAASR,IAAI,CAAC+B,iBAAiB;gBAAErB,QAAQ;YAAI;QACtD;QACAsB,QAAQ;QACRC,MAAM;IACR;AACF"}

package/dist/endpoints/customerSearch.js

@@ -119,7 +119,13 @@ export function createCustomerSearchEndpoint(config) {
             const result = await req.payload.find({
                 collection: config.slugs.customers,
                 limit,
+                // Delegate isolation to collection access control. The multi-tenant
+                // plugin enforces tenancy through the user's memberships, which the
+                // cookie clause above structurally cannot express — with userCollection
+                // set, tenancy lives on a `tenants` ARRAY, not a flat `tenant` field.
+                overrideAccess: false,
                 page,
+                req,
                 where
             });
             return Response.json({

package/dist/endpoints/customerSearch.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/endpoints/customerSearch.ts"],"sourcesContent":["import type { CollectionSlug, Endpoint, Field, Where } from 'payload'\n\nimport type { ResolvedReservationPluginConfig } from '../types.js'\n\nimport { collectionHasTenantField, readCookie, tenantWhereClause } from '../utilities/tenantFilter.js'\nimport { isPrivilegedUser, privilegedRoles } from '../utilities/userRoles.js'\n\n/**\n * Inspect a collection's field list and return the set of top-level named\n * fields as a plain Set<string>. Unnamed fields (rows, groups without a name,\n * etc.) are skipped.\n */\nfunction getNamedFields(fields: Field[]): Set<string> {\n  const names = new Set<string>()\n  for (const field of fields) {\n    if ('name' in field) {\n      names.add(field.name)\n    }\n  }\n  return names\n}\n\nexport function createCustomerSearchEndpoint(\n  config: ResolvedReservationPluginConfig,\n): Endpoint {\n  return {\n    handler: async (req) => {\n      if (!req.user) {\n        return Response.json({ message: 'Unauthorized' }, { status: 401 })\n      }\n\n      // Only staff/admin may search customers. Role-aware so it works when staff\n      // and customers share one auth collection (userCollection set).\n      if (!isPrivilegedUser(req.user, config)) {\n        return Response.json({ message: 'Forbidden' }, { status: 403 })\n      }\n\n      const url = new URL(req.url!)\n      const search = url.searchParams.get('search') ?? ''\n      const limitRaw = Number(url.searchParams.get('limit') ?? '10')\n      const pageRaw = Number(url.searchParams.get('page') ?? '1')\n      // Non-numeric input falls back to defaults instead of passing NaN to the DB\n      const limit = Number.isFinite(limitRaw) ? Math.min(Math.max(Math.floor(limitRaw), 1), 50) : 10\n      const page = Number.isFinite(pageRaw) ? Math.max(Math.floor(pageRaw), 1) : 1\n\n      // Detect which fields exist on the target collection at runtime\n      const collectionConfig = req.payload.collections[config.slugs.customers as unknown as CollectionSlug]?.config\n      const availableFields: Set<string> = collectionConfig\n        ? getNamedFields(collectionConfig.fields)\n        : new Set()\n\n      const hasName = availableFields.has('name')\n      const hasFirstName = availableFields.has('firstName')\n      const hasLastName = availableFields.has('lastName')\n      const hasPhone = availableFields.has('phone')\n\n      const andClauses: Where[] = []\n\n      if (search) {\n        const orClauses: Where[] = []\n\n        if (hasName) {\n          orClauses.push({ name: { contains: search } })\n        }\n        if (hasFirstName) {\n          orClauses.push({ firstName: { contains: search } })\n        }\n        if (hasLastName) {\n          orClauses.push({ lastName: { contains: search } })\n        }\n        // email is always present on auth collections\n        orClauses.push({ email: { contains: search } })\n        if (hasPhone) {\n          orClauses.push({ phone: { contains: search } })\n        }\n\n        andClauses.push({ or: orClauses })\n      }\n\n      // Single-collection mode: staff/admin live in the same collection as\n      // customers, so exclude privileged roles — the dropdown should list only\n      // actual customers, not bookable-looking staff.\n      if (config.userCollection) {\n        const roleField = config.staffProvisioning?.roleField ?? 'role'\n        const priv = privilegedRoles(config)\n        if (priv.length > 0) {\n          andClauses.push({ [roleField]: { not_in: priv } })\n        }\n      }\n\n      // Tenant scoping: when the customers collection carries the multi-tenant\n      // tenant field and a tenant is selected (cookie), restrict the search to\n      // that tenant. Plain installs (no tenant field / no cookie) add nothing.\n      const tenantClause = tenantWhereClause({\n        hasField: collectionHasTenantField(collectionConfig, config.multiTenant.tenantField),\n        tenantField: config.multiTenant.tenantField,\n        tenantId: readCookie(req.headers?.get('cookie'), config.multiTenant.cookieName),\n      })\n      if (tenantClause) {\n        andClauses.push(tenantClause)\n      }\n\n      const where: Where =\n        andClauses.length === 0\n          ? {}\n          : andClauses.length === 1\n            ? andClauses[0]\n            : { and: andClauses }\n\n      // eslint-disable-next-line @typescript-eslint/no-explicit-any\n      const result = await (req.payload.find as any)({\n        collection: config.slugs.customers,\n        limit,\n        page,\n        where,\n      })\n\n      return Response.json({\n        docs: (result.docs as Record<string, unknown>[]).map((doc) => {\n          const entry: Record<string, unknown> = {\n            id: doc['id'],\n            email: doc['email'] ?? '',\n          }\n\n          if (hasName) {\n            entry['name'] = doc['name'] ?? ''\n          }\n          if (hasFirstName) {\n            entry['firstName'] = doc['firstName'] ?? ''\n          }\n          if (hasLastName) {\n            entry['lastName'] = doc['lastName'] ?? ''\n          }\n          if (hasPhone) {\n            entry['phone'] = doc['phone'] ?? ''\n          }\n\n          return entry\n        }),\n        hasNextPage: result.hasNextPage,\n        totalDocs: result.totalDocs,\n      })\n    },\n    method: 'get',\n    path: '/reservation-customer-search',\n  }\n}\n"],"names":["collectionHasTenantField","readCookie","tenantWhereClause","isPrivilegedUser","privilegedRoles","getNamedFields","fields","names","Set","field","add","name","createCustomerSearchEndpoint","config","handler","req","user","Response","json","message","status","url","URL","search","searchParams","get","limitRaw","Number","pageRaw","limit","isFinite","Math","min","max","floor","page","collectionConfig","payload","collections","slugs","customers","availableFields","hasName","has","hasFirstName","hasLastName","hasPhone","andClauses","orClauses","push","contains","firstName","lastName","email","phone","or","userCollection","roleField","staffProvisioning","priv","length","not_in","tenantClause","hasField","multiTenant","tenantField","tenantId","headers","cookieName","where","and","result","find","collection","docs","map","doc","entry","id","hasNextPage","totalDocs","method","path"],"mappings":"AAIA,SAASA,wBAAwB,EAAEC,UAAU,EAAEC,iBAAiB,QAAQ,+BAA8B;AACtG,SAASC,gBAAgB,EAAEC,eAAe,QAAQ,4BAA2B;AAE7E;;;;CAIC,GACD,SAASC,eAAeC,MAAe;IACrC,MAAMC,QAAQ,IAAIC;IAClB,KAAK,MAAMC,SAASH,OAAQ;QAC1B,IAAI,UAAUG,OAAO;YACnBF,MAAMG,GAAG,CAACD,MAAME,IAAI;QACtB;IACF;IACA,OAAOJ;AACT;AAEA,OAAO,SAASK,6BACdC,MAAuC;IAEvC,OAAO;QACLC,SAAS,OAAOC;YACd,IAAI,CAACA,IAAIC,IAAI,EAAE;gBACb,OAAOC,SAASC,IAAI,CAAC;oBAAEC,SAAS;gBAAe,GAAG;oBAAEC,QAAQ;gBAAI;YAClE;YAEA,2EAA2E;YAC3E,gEAAgE;YAChE,IAAI,CAACjB,iBAAiBY,IAAIC,IAAI,EAAEH,SAAS;gBACvC,OAAOI,SAASC,IAAI,CAAC;oBAAEC,SAAS;gBAAY,GAAG;oBAAEC,QAAQ;gBAAI;YAC/D;YAEA,MAAMC,MAAM,IAAIC,IAAIP,IAAIM,GAAG;YAC3B,MAAME,SAASF,IAAIG,YAAY,CAACC,GAAG,CAAC,aAAa;YACjD,MAAMC,WAAWC,OAAON,IAAIG,YAAY,CAACC,GAAG,CAAC,YAAY;YACzD,MAAMG,UAAUD,OAAON,IAAIG,YAAY,CAACC,GAAG,CAAC,WAAW;YACvD,4EAA4E;YAC5E,MAAMI,QAAQF,OAAOG,QAAQ,CAACJ,YAAYK,KAAKC,GAAG,CAACD,KAAKE,GAAG,CAACF,KAAKG,KAAK,CAACR,WAAW,IAAI,MAAM;YAC5F,MAAMS,OAAOR,OAAOG,QAAQ,CAACF,WAAWG,KAAKE,GAAG,CAACF,KAAKG,KAAK,CAACN,UAAU,KAAK;YAE3E,gEAAgE;YAChE,MAAMQ,mBAAmBrB,IAAIsB,OAAO,CAACC,WAAW,CAACzB,OAAO0B,KAAK,CAACC,SAAS,CAA8B,EAAE3B;YACvG,MAAM4B,kBAA+BL,mBACjC/B,eAAe+B,iBAAiB9B,MAAM,IACtC,IAAIE;YAER,MAAMkC,UAAUD,gBAAgBE,GAAG,CAAC;YACpC,MAAMC,eAAeH,gBAAgBE,GAAG,CAAC;YACzC,MAAME,cAAcJ,gBAAgBE,GAAG,CAAC;YACxC,MAAMG,WAAWL,gBAAgBE,GAAG,CAAC;YAErC,MAAMI,aAAsB,EAAE;YAE9B,IAAIxB,QAAQ;gBACV,MAAMyB,YAAqB,EAAE;gBAE7B,IAAIN,SAAS;oBACXM,UAAUC,IAAI,CAAC;wBAAEtC,MAAM;4BAAEuC,UAAU3B;wBAAO;oBAAE;gBAC9C;gBACA,IAAIqB,cAAc;oBAChBI,UAAUC,IAAI,CAAC;wBAAEE,WAAW;4BAAED,UAAU3B;wBAAO;oBAAE;gBACnD;gBACA,IAAIsB,aAAa;oBACfG,UAAUC,IAAI,CAAC;wBAAEG,UAAU;4BAAEF,UAAU3B;wBAAO;oBAAE;gBAClD;gBACA,8CAA8C;gBAC9CyB,UAAUC,IAAI,CAAC;oBAAEI,OAAO;wBAAEH,UAAU3B;oBAAO;gBAAE;gBAC7C,IAAIuB,UAAU;oBACZE,UAAUC,IAAI,CAAC;wBAAEK,OAAO;4BAAEJ,UAAU3B;wBAAO;oBAAE;gBAC/C;gBAEAwB,WAAWE,IAAI,CAAC;oBAAEM,IAAIP;gBAAU;YAClC;YAEA,qEAAqE;YACrE,yEAAyE;YACzE,gDAAgD;YAChD,IAAInC,OAAO2C,cAAc,EAAE;gBACzB,MAAMC,YAAY5C,OAAO6C,iBAAiB,EAAED,aAAa;gBACzD,MAAME,OAAOvD,gBAAgBS;gBAC7B,IAAI8C,KAAKC,MAAM,GAAG,GAAG;oBACnBb,WAAWE,IAAI,CAAC;wBAAE,CAACQ,UAAU,EAAE;4BAAEI,QAAQF;wBAAK;oBAAE;gBAClD;YACF;YAEA,yEAAyE;YACzE,yEAAyE;YACzE,yEAAyE;YACzE,MAAMG,eAAe5D,kBAAkB;gBACrC6D,UAAU/D,yBAAyBoC,kBAAkBvB,OAAOmD,WAAW,CAACC,WAAW;gBACnFA,aAAapD,OAAOmD,WAAW,CAACC,WAAW;gBAC3CC,UAAUjE,WAAWc,IAAIoD,OAAO,EAAE1C,IAAI,WAAWZ,OAAOmD,WAAW,CAACI,UAAU;YAChF;YACA,IAAIN,cAAc;gBAChBf,WAAWE,IAAI,CAACa;YAClB;YAEA,MAAMO,QACJtB,WAAWa,MAAM,KAAK,IAClB,CAAC,IACDb,WAAWa,MAAM,KAAK,IACpBb,UAAU,CAAC,EAAE,GACb;gBAAEuB,KAAKvB;YAAW;YAE1B,8DAA8D;YAC9D,MAAMwB,SAAS,MAAM,AAACxD,IAAIsB,OAAO,CAACmC,IAAI,CAAS;gBAC7CC,YAAY5D,OAAO0B,KAAK,CAACC,SAAS;gBAClCX;gBACAM;gBACAkC;YACF;YAEA,OAAOpD,SAASC,IAAI,CAAC;gBACnBwD,MAAM,AAACH,OAAOG,IAAI,CAA+BC,GAAG,CAAC,CAACC;oBACpD,MAAMC,QAAiC;wBACrCC,IAAIF,GAAG,CAAC,KAAK;wBACbvB,OAAOuB,GAAG,CAAC,QAAQ,IAAI;oBACzB;oBAEA,IAAIlC,SAAS;wBACXmC,KAAK,CAAC,OAAO,GAAGD,GAAG,CAAC,OAAO,IAAI;oBACjC;oBACA,IAAIhC,cAAc;wBAChBiC,KAAK,CAAC,YAAY,GAAGD,GAAG,CAAC,YAAY,IAAI;oBAC3C;oBACA,IAAI/B,aAAa;wBACfgC,KAAK,CAAC,WAAW,GAAGD,GAAG,CAAC,WAAW,IAAI;oBACzC;oBACA,IAAI9B,UAAU;wBACZ+B,KAAK,CAAC,QAAQ,GAAGD,GAAG,CAAC,QAAQ,IAAI;oBACnC;oBAEA,OAAOC;gBACT;gBACAE,aAAaR,OAAOQ,WAAW;gBAC/BC,WAAWT,OAAOS,SAAS;YAC7B;QACF;QACAC,QAAQ;QACRC,MAAM;IACR;AACF"}
+{"version":3,"sources":["../../src/endpoints/customerSearch.ts"],"sourcesContent":["import type { CollectionSlug, Endpoint, Field, Where } from 'payload'\n\nimport type { ResolvedReservationPluginConfig } from '../types.js'\n\nimport { collectionHasTenantField, readCookie, tenantWhereClause } from '../utilities/tenantFilter.js'\nimport { isPrivilegedUser, privilegedRoles } from '../utilities/userRoles.js'\n\n/**\n * Inspect a collection's field list and return the set of top-level named\n * fields as a plain Set<string>. Unnamed fields (rows, groups without a name,\n * etc.) are skipped.\n */\nfunction getNamedFields(fields: Field[]): Set<string> {\n  const names = new Set<string>()\n  for (const field of fields) {\n    if ('name' in field) {\n      names.add(field.name)\n    }\n  }\n  return names\n}\n\nexport function createCustomerSearchEndpoint(\n  config: ResolvedReservationPluginConfig,\n): Endpoint {\n  return {\n    handler: async (req) => {\n      if (!req.user) {\n        return Response.json({ message: 'Unauthorized' }, { status: 401 })\n      }\n\n      // Only staff/admin may search customers. Role-aware so it works when staff\n      // and customers share one auth collection (userCollection set).\n      if (!isPrivilegedUser(req.user, config)) {\n        return Response.json({ message: 'Forbidden' }, { status: 403 })\n      }\n\n      const url = new URL(req.url!)\n      const search = url.searchParams.get('search') ?? ''\n      const limitRaw = Number(url.searchParams.get('limit') ?? '10')\n      const pageRaw = Number(url.searchParams.get('page') ?? '1')\n      // Non-numeric input falls back to defaults instead of passing NaN to the DB\n      const limit = Number.isFinite(limitRaw) ? Math.min(Math.max(Math.floor(limitRaw), 1), 50) : 10\n      const page = Number.isFinite(pageRaw) ? Math.max(Math.floor(pageRaw), 1) : 1\n\n      // Detect which fields exist on the target collection at runtime\n      const collectionConfig = req.payload.collections[config.slugs.customers as unknown as CollectionSlug]?.config\n      const availableFields: Set<string> = collectionConfig\n        ? getNamedFields(collectionConfig.fields)\n        : new Set()\n\n      const hasName = availableFields.has('name')\n      const hasFirstName = availableFields.has('firstName')\n      const hasLastName = availableFields.has('lastName')\n      const hasPhone = availableFields.has('phone')\n\n      const andClauses: Where[] = []\n\n      if (search) {\n        const orClauses: Where[] = []\n\n        if (hasName) {\n          orClauses.push({ name: { contains: search } })\n        }\n        if (hasFirstName) {\n          orClauses.push({ firstName: { contains: search } })\n        }\n        if (hasLastName) {\n          orClauses.push({ lastName: { contains: search } })\n        }\n        // email is always present on auth collections\n        orClauses.push({ email: { contains: search } })\n        if (hasPhone) {\n          orClauses.push({ phone: { contains: search } })\n        }\n\n        andClauses.push({ or: orClauses })\n      }\n\n      // Single-collection mode: staff/admin live in the same collection as\n      // customers, so exclude privileged roles — the dropdown should list only\n      // actual customers, not bookable-looking staff.\n      if (config.userCollection) {\n        const roleField = config.staffProvisioning?.roleField ?? 'role'\n        const priv = privilegedRoles(config)\n        if (priv.length > 0) {\n          andClauses.push({ [roleField]: { not_in: priv } })\n        }\n      }\n\n      // Tenant scoping: when the customers collection carries the multi-tenant\n      // tenant field and a tenant is selected (cookie), restrict the search to\n      // that tenant. Plain installs (no tenant field / no cookie) add nothing.\n      const tenantClause = tenantWhereClause({\n        hasField: collectionHasTenantField(collectionConfig, config.multiTenant.tenantField),\n        tenantField: config.multiTenant.tenantField,\n        tenantId: readCookie(req.headers?.get('cookie'), config.multiTenant.cookieName),\n      })\n      if (tenantClause) {\n        andClauses.push(tenantClause)\n      }\n\n      const where: Where =\n        andClauses.length === 0\n          ? {}\n          : andClauses.length === 1\n            ? andClauses[0]\n            : { and: andClauses }\n\n      // eslint-disable-next-line @typescript-eslint/no-explicit-any\n      const result = await (req.payload.find as any)({\n        collection: config.slugs.customers,\n        limit,\n        // Delegate isolation to collection access control. The multi-tenant\n        // plugin enforces tenancy through the user's memberships, which the\n        // cookie clause above structurally cannot express — with userCollection\n        // set, tenancy lives on a `tenants` ARRAY, not a flat `tenant` field.\n        overrideAccess: false,\n        page,\n        req,\n        where,\n      })\n\n      return Response.json({\n        docs: (result.docs as Record<string, unknown>[]).map((doc) => {\n          const entry: Record<string, unknown> = {\n            id: doc['id'],\n            email: doc['email'] ?? '',\n          }\n\n          if (hasName) {\n            entry['name'] = doc['name'] ?? ''\n          }\n          if (hasFirstName) {\n            entry['firstName'] = doc['firstName'] ?? ''\n          }\n          if (hasLastName) {\n            entry['lastName'] = doc['lastName'] ?? ''\n          }\n          if (hasPhone) {\n            entry['phone'] = doc['phone'] ?? ''\n          }\n\n          return entry\n        }),\n        hasNextPage: result.hasNextPage,\n        totalDocs: result.totalDocs,\n      })\n    },\n    method: 'get',\n    path: '/reservation-customer-search',\n  }\n}\n"],"names":["collectionHasTenantField","readCookie","tenantWhereClause","isPrivilegedUser","privilegedRoles","getNamedFields","fields","names","Set","field","add","name","createCustomerSearchEndpoint","config","handler","req","user","Response","json","message","status","url","URL","search","searchParams","get","limitRaw","Number","pageRaw","limit","isFinite","Math","min","max","floor","page","collectionConfig","payload","collections","slugs","customers","availableFields","hasName","has","hasFirstName","hasLastName","hasPhone","andClauses","orClauses","push","contains","firstName","lastName","email","phone","or","userCollection","roleField","staffProvisioning","priv","length","not_in","tenantClause","hasField","multiTenant","tenantField","tenantId","headers","cookieName","where","and","result","find","collection","overrideAccess","docs","map","doc","entry","id","hasNextPage","totalDocs","method","path"],"mappings":"AAIA,SAASA,wBAAwB,EAAEC,UAAU,EAAEC,iBAAiB,QAAQ,+BAA8B;AACtG,SAASC,gBAAgB,EAAEC,eAAe,QAAQ,4BAA2B;AAE7E;;;;CAIC,GACD,SAASC,eAAeC,MAAe;IACrC,MAAMC,QAAQ,IAAIC;IAClB,KAAK,MAAMC,SAASH,OAAQ;QAC1B,IAAI,UAAUG,OAAO;YACnBF,MAAMG,GAAG,CAACD,MAAME,IAAI;QACtB;IACF;IACA,OAAOJ;AACT;AAEA,OAAO,SAASK,6BACdC,MAAuC;IAEvC,OAAO;QACLC,SAAS,OAAOC;YACd,IAAI,CAACA,IAAIC,IAAI,EAAE;gBACb,OAAOC,SAASC,IAAI,CAAC;oBAAEC,SAAS;gBAAe,GAAG;oBAAEC,QAAQ;gBAAI;YAClE;YAEA,2EAA2E;YAC3E,gEAAgE;YAChE,IAAI,CAACjB,iBAAiBY,IAAIC,IAAI,EAAEH,SAAS;gBACvC,OAAOI,SAASC,IAAI,CAAC;oBAAEC,SAAS;gBAAY,GAAG;oBAAEC,QAAQ;gBAAI;YAC/D;YAEA,MAAMC,MAAM,IAAIC,IAAIP,IAAIM,GAAG;YAC3B,MAAME,SAASF,IAAIG,YAAY,CAACC,GAAG,CAAC,aAAa;YACjD,MAAMC,WAAWC,OAAON,IAAIG,YAAY,CAACC,GAAG,CAAC,YAAY;YACzD,MAAMG,UAAUD,OAAON,IAAIG,YAAY,CAACC,GAAG,CAAC,WAAW;YACvD,4EAA4E;YAC5E,MAAMI,QAAQF,OAAOG,QAAQ,CAACJ,YAAYK,KAAKC,GAAG,CAACD,KAAKE,GAAG,CAACF,KAAKG,KAAK,CAACR,WAAW,IAAI,MAAM;YAC5F,MAAMS,OAAOR,OAAOG,QAAQ,CAACF,WAAWG,KAAKE,GAAG,CAACF,KAAKG,KAAK,CAACN,UAAU,KAAK;YAE3E,gEAAgE;YAChE,MAAMQ,mBAAmBrB,IAAIsB,OAAO,CAACC,WAAW,CAACzB,OAAO0B,KAAK,CAACC,SAAS,CAA8B,EAAE3B;YACvG,MAAM4B,kBAA+BL,mBACjC/B,eAAe+B,iBAAiB9B,MAAM,IACtC,IAAIE;YAER,MAAMkC,UAAUD,gBAAgBE,GAAG,CAAC;YACpC,MAAMC,eAAeH,gBAAgBE,GAAG,CAAC;YACzC,MAAME,cAAcJ,gBAAgBE,GAAG,CAAC;YACxC,MAAMG,WAAWL,gBAAgBE,GAAG,CAAC;YAErC,MAAMI,aAAsB,EAAE;YAE9B,IAAIxB,QAAQ;gBACV,MAAMyB,YAAqB,EAAE;gBAE7B,IAAIN,SAAS;oBACXM,UAAUC,IAAI,CAAC;wBAAEtC,MAAM;4BAAEuC,UAAU3B;wBAAO;oBAAE;gBAC9C;gBACA,IAAIqB,cAAc;oBAChBI,UAAUC,IAAI,CAAC;wBAAEE,WAAW;4BAAED,UAAU3B;wBAAO;oBAAE;gBACnD;gBACA,IAAIsB,aAAa;oBACfG,UAAUC,IAAI,CAAC;wBAAEG,UAAU;4BAAEF,UAAU3B;wBAAO;oBAAE;gBAClD;gBACA,8CAA8C;gBAC9CyB,UAAUC,IAAI,CAAC;oBAAEI,OAAO;wBAAEH,UAAU3B;oBAAO;gBAAE;gBAC7C,IAAIuB,UAAU;oBACZE,UAAUC,IAAI,CAAC;wBAAEK,OAAO;4BAAEJ,UAAU3B;wBAAO;oBAAE;gBAC/C;gBAEAwB,WAAWE,IAAI,CAAC;oBAAEM,IAAIP;gBAAU;YAClC;YAEA,qEAAqE;YACrE,yEAAyE;YACzE,gDAAgD;YAChD,IAAInC,OAAO2C,cAAc,EAAE;gBACzB,MAAMC,YAAY5C,OAAO6C,iBAAiB,EAAED,aAAa;gBACzD,MAAME,OAAOvD,gBAAgBS;gBAC7B,IAAI8C,KAAKC,MAAM,GAAG,GAAG;oBACnBb,WAAWE,IAAI,CAAC;wBAAE,CAACQ,UAAU,EAAE;4BAAEI,QAAQF;wBAAK;oBAAE;gBAClD;YACF;YAEA,yEAAyE;YACzE,yEAAyE;YACzE,yEAAyE;YACzE,MAAMG,eAAe5D,kBAAkB;gBACrC6D,UAAU/D,yBAAyBoC,kBAAkBvB,OAAOmD,WAAW,CAACC,WAAW;gBACnFA,aAAapD,OAAOmD,WAAW,CAACC,WAAW;gBAC3CC,UAAUjE,WAAWc,IAAIoD,OAAO,EAAE1C,IAAI,WAAWZ,OAAOmD,WAAW,CAACI,UAAU;YAChF;YACA,IAAIN,cAAc;gBAChBf,WAAWE,IAAI,CAACa;YAClB;YAEA,MAAMO,QACJtB,WAAWa,MAAM,KAAK,IAClB,CAAC,IACDb,WAAWa,MAAM,KAAK,IACpBb,UAAU,CAAC,EAAE,GACb;gBAAEuB,KAAKvB;YAAW;YAE1B,8DAA8D;YAC9D,MAAMwB,SAAS,MAAM,AAACxD,IAAIsB,OAAO,CAACmC,IAAI,CAAS;gBAC7CC,YAAY5D,OAAO0B,KAAK,CAACC,SAAS;gBAClCX;gBACA,oEAAoE;gBACpE,oEAAoE;gBACpE,wEAAwE;gBACxE,sEAAsE;gBACtE6C,gBAAgB;gBAChBvC;gBACApB;gBACAsD;YACF;YAEA,OAAOpD,SAASC,IAAI,CAAC;gBACnByD,MAAM,AAACJ,OAAOI,IAAI,CAA+BC,GAAG,CAAC,CAACC;oBACpD,MAAMC,QAAiC;wBACrCC,IAAIF,GAAG,CAAC,KAAK;wBACbxB,OAAOwB,GAAG,CAAC,QAAQ,IAAI;oBACzB;oBAEA,IAAInC,SAAS;wBACXoC,KAAK,CAAC,OAAO,GAAGD,GAAG,CAAC,OAAO,IAAI;oBACjC;oBACA,IAAIjC,cAAc;wBAChBkC,KAAK,CAAC,YAAY,GAAGD,GAAG,CAAC,YAAY,IAAI;oBAC3C;oBACA,IAAIhC,aAAa;wBACfiC,KAAK,CAAC,WAAW,GAAGD,GAAG,CAAC,WAAW,IAAI;oBACzC;oBACA,IAAI/B,UAAU;wBACZgC,KAAK,CAAC,QAAQ,GAAGD,GAAG,CAAC,QAAQ,IAAI;oBACnC;oBAEA,OAAOC;gBACT;gBACAE,aAAaT,OAAOS,WAAW;gBAC/BC,WAAWV,OAAOU,SAAS;YAC7B;QACF;QACAC,QAAQ;QACRC,MAAM;IACR;AACF"}

package/dist/endpoints/effectiveTimezone.js

@@ -24,6 +24,7 @@ import { getEffectiveTenantTimezone } from '../utilities/tenantTimezone.js';
             const timeZone = await getEffectiveTenantTimezone({
                 globalTimezone: config.timezone,
                 payload: req.payload,
+                req,
                 scopedCollection: reservationsCollection,
                 tenantField: config.multiTenant.tenantField,
                 tenantId: readCookie(req.headers?.get('cookie'), config.multiTenant.cookieName),

package/dist/endpoints/effectiveTimezone.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/endpoints/effectiveTimezone.ts"],"sourcesContent":["import type { Endpoint } from 'payload'\n\nimport type { ResolvedReservationPluginConfig } from '../types.js'\n\nimport { readCookie } from '../utilities/tenantFilter.js'\nimport { getEffectiveTenantTimezone } from '../utilities/tenantTimezone.js'\n\n/**\n * Resolve the effective business timezone for the current request's selected\n * tenant (tenant zone → global → UTC), read from the tenant cookie. The custom\n * admin calendar calls this so its day-boundary rendering matches the selected\n * tenant — the client can't resolve it itself because the tenant→timezone map\n * lives server-side and the tenant collection slug is only known at request time.\n *\n * Plain (non-multiTenant) installs always get `config.timezone` here, with no\n * tenant DB read.\n */\nexport function createEffectiveTimezoneEndpoint(\n  config: ResolvedReservationPluginConfig,\n): Endpoint {\n  return {\n    handler: async (req) => {\n      // Staff/admin-only view data — require an authenticated user.\n      if (!req.user) {\n        return Response.json({ error: 'Unauthorized' }, { status: 401 })\n      }\n\n      const reservationsCollection = req.payload.config.collections?.find(\n        (c) => c.slug === config.slugs.reservations,\n      )\n      const timeZone = await getEffectiveTenantTimezone({\n        globalTimezone: config.timezone,\n        payload: req.payload,\n        scopedCollection: reservationsCollection as { fields?: unknown[] } | undefined,\n        tenantField: config.multiTenant.tenantField,\n        tenantId: readCookie(req.headers?.get('cookie'), config.multiTenant.cookieName),\n        timezoneField: config.multiTenant.timezoneField,\n      })\n\n      return Response.json({ timeZone })\n    },\n    method: 'get',\n    path: '/reserve/effective-timezone',\n  }\n}\n"],"names":["readCookie","getEffectiveTenantTimezone","createEffectiveTimezoneEndpoint","config","handler","req","user","Response","json","error","status","reservationsCollection","payload","collections","find","c","slug","slugs","reservations","timeZone","globalTimezone","timezone","scopedCollection","tenantField","multiTenant","tenantId","headers","get","cookieName","timezoneField","method","path"],"mappings":"AAIA,SAASA,UAAU,QAAQ,+BAA8B;AACzD,SAASC,0BAA0B,QAAQ,iCAAgC;AAE3E;;;;;;;;;CASC,GACD,OAAO,SAASC,gCACdC,MAAuC;IAEvC,OAAO;QACLC,SAAS,OAAOC;YACd,8DAA8D;YAC9D,IAAI,CAACA,IAAIC,IAAI,EAAE;gBACb,OAAOC,SAASC,IAAI,CAAC;oBAAEC,OAAO;gBAAe,GAAG;oBAAEC,QAAQ;gBAAI;YAChE;YAEA,MAAMC,yBAAyBN,IAAIO,OAAO,CAACT,MAAM,CAACU,WAAW,EAAEC,KAC7D,CAACC,IAAMA,EAAEC,IAAI,KAAKb,OAAOc,KAAK,CAACC,YAAY;YAE7C,MAAMC,WAAW,MAAMlB,2BAA2B;gBAChDmB,gBAAgBjB,OAAOkB,QAAQ;gBAC/BT,SAASP,IAAIO,OAAO;gBACpBU,kBAAkBX;gBAClBY,aAAapB,OAAOqB,WAAW,CAACD,WAAW;gBAC3CE,UAAUzB,WAAWK,IAAIqB,OAAO,EAAEC,IAAI,WAAWxB,OAAOqB,WAAW,CAACI,UAAU;gBAC9EC,eAAe1B,OAAOqB,WAAW,CAACK,aAAa;YACjD;YAEA,OAAOtB,SAASC,IAAI,CAAC;gBAAEW;YAAS;QAClC;QACAW,QAAQ;QACRC,MAAM;IACR;AACF"}
+{"version":3,"sources":["../../src/endpoints/effectiveTimezone.ts"],"sourcesContent":["import type { Endpoint } from 'payload'\n\nimport type { ResolvedReservationPluginConfig } from '../types.js'\n\nimport { readCookie } from '../utilities/tenantFilter.js'\nimport { getEffectiveTenantTimezone } from '../utilities/tenantTimezone.js'\n\n/**\n * Resolve the effective business timezone for the current request's selected\n * tenant (tenant zone → global → UTC), read from the tenant cookie. The custom\n * admin calendar calls this so its day-boundary rendering matches the selected\n * tenant — the client can't resolve it itself because the tenant→timezone map\n * lives server-side and the tenant collection slug is only known at request time.\n *\n * Plain (non-multiTenant) installs always get `config.timezone` here, with no\n * tenant DB read.\n */\nexport function createEffectiveTimezoneEndpoint(\n  config: ResolvedReservationPluginConfig,\n): Endpoint {\n  return {\n    handler: async (req) => {\n      // Staff/admin-only view data — require an authenticated user.\n      if (!req.user) {\n        return Response.json({ error: 'Unauthorized' }, { status: 401 })\n      }\n\n      const reservationsCollection = req.payload.config.collections?.find(\n        (c) => c.slug === config.slugs.reservations,\n      )\n      const timeZone = await getEffectiveTenantTimezone({\n        globalTimezone: config.timezone,\n        payload: req.payload,\n        req,\n        scopedCollection: reservationsCollection as { fields?: unknown[] } | undefined,\n        tenantField: config.multiTenant.tenantField,\n        tenantId: readCookie(req.headers?.get('cookie'), config.multiTenant.cookieName),\n        timezoneField: config.multiTenant.timezoneField,\n      })\n\n      return Response.json({ timeZone })\n    },\n    method: 'get',\n    path: '/reserve/effective-timezone',\n  }\n}\n"],"names":["readCookie","getEffectiveTenantTimezone","createEffectiveTimezoneEndpoint","config","handler","req","user","Response","json","error","status","reservationsCollection","payload","collections","find","c","slug","slugs","reservations","timeZone","globalTimezone","timezone","scopedCollection","tenantField","multiTenant","tenantId","headers","get","cookieName","timezoneField","method","path"],"mappings":"AAIA,SAASA,UAAU,QAAQ,+BAA8B;AACzD,SAASC,0BAA0B,QAAQ,iCAAgC;AAE3E;;;;;;;;;CASC,GACD,OAAO,SAASC,gCACdC,MAAuC;IAEvC,OAAO;QACLC,SAAS,OAAOC;YACd,8DAA8D;YAC9D,IAAI,CAACA,IAAIC,IAAI,EAAE;gBACb,OAAOC,SAASC,IAAI,CAAC;oBAAEC,OAAO;gBAAe,GAAG;oBAAEC,QAAQ;gBAAI;YAChE;YAEA,MAAMC,yBAAyBN,IAAIO,OAAO,CAACT,MAAM,CAACU,WAAW,EAAEC,KAC7D,CAACC,IAAMA,EAAEC,IAAI,KAAKb,OAAOc,KAAK,CAACC,YAAY;YAE7C,MAAMC,WAAW,MAAMlB,2BAA2B;gBAChDmB,gBAAgBjB,OAAOkB,QAAQ;gBAC/BT,SAASP,IAAIO,OAAO;gBACpBP;gBACAiB,kBAAkBX;gBAClBY,aAAapB,OAAOqB,WAAW,CAACD,WAAW;gBAC3CE,UAAUzB,WAAWK,IAAIqB,OAAO,EAAEC,IAAI,WAAWxB,OAAOqB,WAAW,CAACI,UAAU;gBAC9EC,eAAe1B,OAAOqB,WAAW,CAACK,aAAa;YACjD;YAEA,OAAOtB,SAASC,IAAI,CAAC;gBAAEW;YAAS;QAClC;QACAW,QAAQ;QACRC,MAAM;IACR;AACF"}

package/dist/endpoints/getSlots.js

@@ -1,9 +1,11 @@
 import { getAvailableSlots } from '../services/AvailabilityService.js';
+import { createReserveDebug } from '../utilities/reserveDebug.js';
 import { extractId, mergeResourceIds } from '../utilities/resolveRequiredResources.js';
 import { getDayKeyInTimezone, isValidDayKey } from '../utilities/timezoneUtils.js';
 export function createGetSlotsEndpoint(config) {
     return {
         handler: async (req)=>{
+            const dbg = createReserveDebug(req.payload.logger, config.debug);
             const url = new URL(req.url);
             const date = url.searchParams.get('date');
             const resource = url.searchParams.get('resource');
@@ -58,6 +60,9 @@ export function createGetSlotsEndpoint(config) {
                 id: service,
                 collection: config.slugs.services,
                 depth: 0,
+                // Skip the resources join — internal logic never reads it, and without this
+                // every service read becomes an aggregation with a $lookup.
+                joins: false,
                 req
             }).catch(()=>null);
             if (!svcDoc) {
@@ -85,11 +90,24 @@ export function createGetSlotsEndpoint(config) {
             }
             const requiredIds = (svcDoc?.requiredResources ?? []).map((r)=>extractId(r)).filter((r)=>r !== undefined);
             const resourceIds = mergeResourceIds(callerIds, requiredIds);
-            const slots = await getAvailableSlots({
+            dbg.dbg('request', {
+                date: dayKey,
+                endpoint: 'slots',
+                guestCount,
+                resourceIds,
+                serviceId: service,
+                timeZone: config.timezone
+            });
+            const { reason, slots } = await getAvailableSlots({
                 blockingStatuses: config.statusMachine.blockingStatuses,
                 date: dayKey,
+                debug: dbg,
+                enforceActive: config.enforceActive,
                 getExternalBusy: config.getExternalBusy,
                 guestCount,
+                // Held slots are busy. Omitting this advertises a slot the write path
+                // will reject with a 409.
+                holdsSlug: config.slotHolds.enabled ? config.slugs.holds : undefined,
                 payload: req.payload,
                 req,
                 reservationSlug: config.slugs.reservations,
@@ -100,9 +118,17 @@ export function createGetSlotsEndpoint(config) {
                 serviceSlug: config.slugs.services,
                 timeZone: config.timezone
             });
+            dbg.dbg('response', {
+                endpoint: 'slots',
+                reason,
+                slotCount: slots.length
+            });
             return Response.json({
                 date,
                 guestCount,
+                ...reason ? {
+                    reason
+                } : {},
                 slots: slots.map((s)=>({
                         end: s.end.toISOString(),
                         start: s.start.toISOString()

package/dist/endpoints/getSlots.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/endpoints/getSlots.ts"],"sourcesContent":["import type { Endpoint } from 'payload'\n\nimport type { ResolvedReservationPluginConfig } from '../types.js'\n\nimport { getAvailableSlots } from '../services/AvailabilityService.js'\nimport { extractId, mergeResourceIds } from '../utilities/resolveRequiredResources.js'\nimport { getDayKeyInTimezone, isValidDayKey } from '../utilities/timezoneUtils.js'\n\nexport function createGetSlotsEndpoint(config: ResolvedReservationPluginConfig): Endpoint {\n  return {\n    handler: async (req) => {\n      const url = new URL(req.url!)\n      const date = url.searchParams.get('date')\n      const resource = url.searchParams.get('resource')\n      const service = url.searchParams.get('service')\n\n      if (!date || !resource || !service) {\n        return Response.json(\n          { error: 'Missing required query params: resource, date, service' },\n          { status: 400 },\n        )\n      }\n\n      // YYYY-MM-DD is taken as a business-TZ calendar day verbatim; any other\n      // parseable date is re-keyed into the business timezone. Never\n      // `new Date('YYYY-MM-DD')` — that pins the day to UTC midnight.\n      let dayKey: string\n      if (/^\\d{4}-\\d{2}-\\d{2}$/.test(date)) {\n        if (!isValidDayKey(date)) {\n          return Response.json(\n            { error: 'Invalid date format. Expected YYYY-MM-DD' },\n            { status: 400 },\n          )\n        }\n        dayKey = date\n      } else {\n        const parsed = new Date(date)\n        if (isNaN(parsed.getTime())) {\n          return Response.json(\n            { error: 'Invalid date format. Expected YYYY-MM-DD' },\n            { status: 400 },\n          )\n        }\n        dayKey = getDayKeyInTimezone(parsed, config.timezone)\n      }\n\n      const guestCountRaw = Number(url.searchParams.get('guestCount') ?? '1')\n      if (!Number.isFinite(guestCountRaw)) {\n        return Response.json({ error: 'Invalid guestCount' }, { status: 400 })\n      }\n      const guestCount = Math.max(Math.floor(guestCountRaw), 1)\n\n      // Resolve required resource set: caller resource(s) ∪ service.requiredResources\n      const explicit = url.searchParams.get('resources')\n      const callerIds = explicit ? explicit.split(',').map((s) => s.trim()).filter(Boolean) : [resource]\n\n      // eslint-disable-next-line @typescript-eslint/no-explicit-any\n      const svcDoc = await (req.payload.findByID as any)({\n        id: service,\n        collection: config.slugs.services,\n        depth: 0,\n        req,\n      }).catch(() => null)\n      if (!svcDoc) {\n        return Response.json({ error: 'Service not found' }, { status: 404 })\n      }\n\n      // Validate the primary resource id up front — a malformed id in a query\n      // surfaces as an adapter cast error (500) instead of a clean 404.\n      // eslint-disable-next-line @typescript-eslint/no-explicit-any\n      const resourceDoc = await (req.payload.findByID as any)({\n        id: resource,\n        collection: config.slugs.resources,\n        depth: 0,\n        req,\n      }).catch(() => null)\n      if (!resourceDoc) {\n        return Response.json({ error: 'Resource not found' }, { status: 404 })\n      }\n      const requiredIds = ((svcDoc?.requiredResources as unknown[]) ?? [])\n        .map((r) => extractId(r))\n        .filter((r): r is number | string => r !== undefined)\n      const resourceIds = mergeResourceIds(callerIds, requiredIds)\n\n      const slots = await getAvailableSlots({\n        blockingStatuses: config.statusMachine.blockingStatuses,\n        date: dayKey,\n        getExternalBusy: config.getExternalBusy,\n        guestCount,\n        payload: req.payload,\n        req,\n        reservationSlug: config.slugs.reservations,\n        resourceIds,\n        resourceSlug: config.slugs.resources,\n        scheduleSlug: config.slugs.schedules,\n        serviceId: service,\n        serviceSlug: config.slugs.services,\n        timeZone: config.timezone,\n      })\n\n      return Response.json({\n        date,\n        guestCount,\n        slots: slots.map((s) => ({ end: s.end.toISOString(), start: s.start.toISOString() })),\n      })\n    },\n    method: 'get',\n    path: '/reserve/slots',\n  }\n}\n"],"names":["getAvailableSlots","extractId","mergeResourceIds","getDayKeyInTimezone","isValidDayKey","createGetSlotsEndpoint","config","handler","req","url","URL","date","searchParams","get","resource","service","Response","json","error","status","dayKey","test","parsed","Date","isNaN","getTime","timezone","guestCountRaw","Number","isFinite","guestCount","Math","max","floor","explicit","callerIds","split","map","s","trim","filter","Boolean","svcDoc","payload","findByID","id","collection","slugs","services","depth","catch","resourceDoc","resources","requiredIds","requiredResources","r","undefined","resourceIds","slots","blockingStatuses","statusMachine","getExternalBusy","reservationSlug","reservations","resourceSlug","scheduleSlug","schedules","serviceId","serviceSlug","timeZone","end","toISOString","start","method","path"],"mappings":"AAIA,SAASA,iBAAiB,QAAQ,qCAAoC;AACtE,SAASC,SAAS,EAAEC,gBAAgB,QAAQ,2CAA0C;AACtF,SAASC,mBAAmB,EAAEC,aAAa,QAAQ,gCAA+B;AAElF,OAAO,SAASC,uBAAuBC,MAAuC;IAC5E,OAAO;QACLC,SAAS,OAAOC;YACd,MAAMC,MAAM,IAAIC,IAAIF,IAAIC,GAAG;YAC3B,MAAME,OAAOF,IAAIG,YAAY,CAACC,GAAG,CAAC;YAClC,MAAMC,WAAWL,IAAIG,YAAY,CAACC,GAAG,CAAC;YACtC,MAAME,UAAUN,IAAIG,YAAY,CAACC,GAAG,CAAC;YAErC,IAAI,CAACF,QAAQ,CAACG,YAAY,CAACC,SAAS;gBAClC,OAAOC,SAASC,IAAI,CAClB;oBAAEC,OAAO;gBAAyD,GAClE;oBAAEC,QAAQ;gBAAI;YAElB;YAEA,wEAAwE;YACxE,+DAA+D;YAC/D,gEAAgE;YAChE,IAAIC;YACJ,IAAI,sBAAsBC,IAAI,CAACV,OAAO;gBACpC,IAAI,CAACP,cAAcO,OAAO;oBACxB,OAAOK,SAASC,IAAI,CAClB;wBAAEC,OAAO;oBAA2C,GACpD;wBAAEC,QAAQ;oBAAI;gBAElB;gBACAC,SAAST;YACX,OAAO;gBACL,MAAMW,SAAS,IAAIC,KAAKZ;gBACxB,IAAIa,MAAMF,OAAOG,OAAO,KAAK;oBAC3B,OAAOT,SAASC,IAAI,CAClB;wBAAEC,OAAO;oBAA2C,GACpD;wBAAEC,QAAQ;oBAAI;gBAElB;gBACAC,SAASjB,oBAAoBmB,QAAQhB,OAAOoB,QAAQ;YACtD;YAEA,MAAMC,gBAAgBC,OAAOnB,IAAIG,YAAY,CAACC,GAAG,CAAC,iBAAiB;YACnE,IAAI,CAACe,OAAOC,QAAQ,CAACF,gBAAgB;gBACnC,OAAOX,SAASC,IAAI,CAAC;oBAAEC,OAAO;gBAAqB,GAAG;oBAAEC,QAAQ;gBAAI;YACtE;YACA,MAAMW,aAAaC,KAAKC,GAAG,CAACD,KAAKE,KAAK,CAACN,gBAAgB;YAEvD,gFAAgF;YAChF,MAAMO,WAAWzB,IAAIG,YAAY,CAACC,GAAG,CAAC;YACtC,MAAMsB,YAAYD,WAAWA,SAASE,KAAK,CAAC,KAAKC,GAAG,CAAC,CAACC,IAAMA,EAAEC,IAAI,IAAIC,MAAM,CAACC,WAAW;gBAAC3B;aAAS;YAElG,8DAA8D;YAC9D,MAAM4B,SAAS,MAAM,AAAClC,IAAImC,OAAO,CAACC,QAAQ,CAAS;gBACjDC,IAAI9B;gBACJ+B,YAAYxC,OAAOyC,KAAK,CAACC,QAAQ;gBACjCC,OAAO;gBACPzC;YACF,GAAG0C,KAAK,CAAC,IAAM;YACf,IAAI,CAACR,QAAQ;gBACX,OAAO1B,SAASC,IAAI,CAAC;oBAAEC,OAAO;gBAAoB,GAAG;oBAAEC,QAAQ;gBAAI;YACrE;YAEA,wEAAwE;YACxE,kEAAkE;YAClE,8DAA8D;YAC9D,MAAMgC,cAAc,MAAM,AAAC3C,IAAImC,OAAO,CAACC,QAAQ,CAAS;gBACtDC,IAAI/B;gBACJgC,YAAYxC,OAAOyC,KAAK,CAACK,SAAS;gBAClCH,OAAO;gBACPzC;YACF,GAAG0C,KAAK,CAAC,IAAM;YACf,IAAI,CAACC,aAAa;gBAChB,OAAOnC,SAASC,IAAI,CAAC;oBAAEC,OAAO;gBAAqB,GAAG;oBAAEC,QAAQ;gBAAI;YACtE;YACA,MAAMkC,cAAc,AAAC,CAAA,AAACX,QAAQY,qBAAmC,EAAE,AAAD,EAC/DjB,GAAG,CAAC,CAACkB,IAAMtD,UAAUsD,IACrBf,MAAM,CAAC,CAACe,IAA4BA,MAAMC;YAC7C,MAAMC,cAAcvD,iBAAiBiC,WAAWkB;YAEhD,MAAMK,QAAQ,MAAM1D,kBAAkB;gBACpC2D,kBAAkBrD,OAAOsD,aAAa,CAACD,gBAAgB;gBACvDhD,MAAMS;gBACNyC,iBAAiBvD,OAAOuD,eAAe;gBACvC/B;gBACAa,SAASnC,IAAImC,OAAO;gBACpBnC;gBACAsD,iBAAiBxD,OAAOyC,KAAK,CAACgB,YAAY;gBAC1CN;gBACAO,cAAc1D,OAAOyC,KAAK,CAACK,SAAS;gBACpCa,cAAc3D,OAAOyC,KAAK,CAACmB,SAAS;gBACpCC,WAAWpD;gBACXqD,aAAa9D,OAAOyC,KAAK,CAACC,QAAQ;gBAClCqB,UAAU/D,OAAOoB,QAAQ;YAC3B;YAEA,OAAOV,SAASC,IAAI,CAAC;gBACnBN;gBACAmB;gBACA4B,OAAOA,MAAMrB,GAAG,CAAC,CAACC,IAAO,CAAA;wBAAEgC,KAAKhC,EAAEgC,GAAG,CAACC,WAAW;wBAAIC,OAAOlC,EAAEkC,KAAK,CAACD,WAAW;oBAAG,CAAA;YACpF;QACF;QACAE,QAAQ;QACRC,MAAM;IACR;AACF"}
+{"version":3,"sources":["../../src/endpoints/getSlots.ts"],"sourcesContent":["import type { Endpoint } from 'payload'\n\nimport type { ResolvedReservationPluginConfig } from '../types.js'\n\nimport { getAvailableSlots } from '../services/AvailabilityService.js'\nimport { createReserveDebug } from '../utilities/reserveDebug.js'\nimport { extractId, mergeResourceIds } from '../utilities/resolveRequiredResources.js'\nimport { getDayKeyInTimezone, isValidDayKey } from '../utilities/timezoneUtils.js'\n\nexport function createGetSlotsEndpoint(config: ResolvedReservationPluginConfig): Endpoint {\n  return {\n    handler: async (req) => {\n      const dbg = createReserveDebug(req.payload.logger, config.debug)\n      const url = new URL(req.url!)\n      const date = url.searchParams.get('date')\n      const resource = url.searchParams.get('resource')\n      const service = url.searchParams.get('service')\n\n      if (!date || !resource || !service) {\n        return Response.json(\n          { error: 'Missing required query params: resource, date, service' },\n          { status: 400 },\n        )\n      }\n\n      // YYYY-MM-DD is taken as a business-TZ calendar day verbatim; any other\n      // parseable date is re-keyed into the business timezone. Never\n      // `new Date('YYYY-MM-DD')` — that pins the day to UTC midnight.\n      let dayKey: string\n      if (/^\\d{4}-\\d{2}-\\d{2}$/.test(date)) {\n        if (!isValidDayKey(date)) {\n          return Response.json(\n            { error: 'Invalid date format. Expected YYYY-MM-DD' },\n            { status: 400 },\n          )\n        }\n        dayKey = date\n      } else {\n        const parsed = new Date(date)\n        if (isNaN(parsed.getTime())) {\n          return Response.json(\n            { error: 'Invalid date format. Expected YYYY-MM-DD' },\n            { status: 400 },\n          )\n        }\n        dayKey = getDayKeyInTimezone(parsed, config.timezone)\n      }\n\n      const guestCountRaw = Number(url.searchParams.get('guestCount') ?? '1')\n      if (!Number.isFinite(guestCountRaw)) {\n        return Response.json({ error: 'Invalid guestCount' }, { status: 400 })\n      }\n      const guestCount = Math.max(Math.floor(guestCountRaw), 1)\n\n      // Resolve required resource set: caller resource(s) ∪ service.requiredResources\n      const explicit = url.searchParams.get('resources')\n      const callerIds = explicit ? explicit.split(',').map((s) => s.trim()).filter(Boolean) : [resource]\n\n      // eslint-disable-next-line @typescript-eslint/no-explicit-any\n      const svcDoc = await (req.payload.findByID as any)({\n        id: service,\n        collection: config.slugs.services,\n        depth: 0,\n        // Skip the resources join — internal logic never reads it, and without this\n        // every service read becomes an aggregation with a $lookup.\n        joins: false,\n        req,\n      }).catch(() => null)\n      if (!svcDoc) {\n        return Response.json({ error: 'Service not found' }, { status: 404 })\n      }\n\n      // Validate the primary resource id up front — a malformed id in a query\n      // surfaces as an adapter cast error (500) instead of a clean 404.\n      // eslint-disable-next-line @typescript-eslint/no-explicit-any\n      const resourceDoc = await (req.payload.findByID as any)({\n        id: resource,\n        collection: config.slugs.resources,\n        depth: 0,\n        req,\n      }).catch(() => null)\n      if (!resourceDoc) {\n        return Response.json({ error: 'Resource not found' }, { status: 404 })\n      }\n      const requiredIds = ((svcDoc?.requiredResources as unknown[]) ?? [])\n        .map((r) => extractId(r))\n        .filter((r): r is number | string => r !== undefined)\n      const resourceIds = mergeResourceIds(callerIds, requiredIds)\n\n      dbg.dbg('request', {\n        date: dayKey,\n        endpoint: 'slots',\n        guestCount,\n        resourceIds,\n        serviceId: service,\n        timeZone: config.timezone,\n      })\n\n      const { reason, slots } = await getAvailableSlots({\n        blockingStatuses: config.statusMachine.blockingStatuses,\n        date: dayKey,\n        debug: dbg,\n        enforceActive: config.enforceActive,\n        getExternalBusy: config.getExternalBusy,\n        guestCount,\n        // Held slots are busy. Omitting this advertises a slot the write path\n        // will reject with a 409.\n        holdsSlug: config.slotHolds.enabled ? config.slugs.holds : undefined,\n        payload: req.payload,\n        req,\n        reservationSlug: config.slugs.reservations,\n        resourceIds,\n        resourceSlug: config.slugs.resources,\n        scheduleSlug: config.slugs.schedules,\n        serviceId: service,\n        serviceSlug: config.slugs.services,\n        timeZone: config.timezone,\n      })\n\n      dbg.dbg('response', { endpoint: 'slots', reason, slotCount: slots.length })\n\n      return Response.json({\n        date,\n        guestCount,\n        ...(reason ? { reason } : {}),\n        slots: slots.map((s) => ({ end: s.end.toISOString(), start: s.start.toISOString() })),\n      })\n    },\n    method: 'get',\n    path: '/reserve/slots',\n  }\n}\n"],"names":["getAvailableSlots","createReserveDebug","extractId","mergeResourceIds","getDayKeyInTimezone","isValidDayKey","createGetSlotsEndpoint","config","handler","req","dbg","payload","logger","debug","url","URL","date","searchParams","get","resource","service","Response","json","error","status","dayKey","test","parsed","Date","isNaN","getTime","timezone","guestCountRaw","Number","isFinite","guestCount","Math","max","floor","explicit","callerIds","split","map","s","trim","filter","Boolean","svcDoc","findByID","id","collection","slugs","services","depth","joins","catch","resourceDoc","resources","requiredIds","requiredResources","r","undefined","resourceIds","endpoint","serviceId","timeZone","reason","slots","blockingStatuses","statusMachine","enforceActive","getExternalBusy","holdsSlug","slotHolds","enabled","holds","reservationSlug","reservations","resourceSlug","scheduleSlug","schedules","serviceSlug","slotCount","length","end","toISOString","start","method","path"],"mappings":"AAIA,SAASA,iBAAiB,QAAQ,qCAAoC;AACtE,SAASC,kBAAkB,QAAQ,+BAA8B;AACjE,SAASC,SAAS,EAAEC,gBAAgB,QAAQ,2CAA0C;AACtF,SAASC,mBAAmB,EAAEC,aAAa,QAAQ,gCAA+B;AAElF,OAAO,SAASC,uBAAuBC,MAAuC;IAC5E,OAAO;QACLC,SAAS,OAAOC;YACd,MAAMC,MAAMT,mBAAmBQ,IAAIE,OAAO,CAACC,MAAM,EAAEL,OAAOM,KAAK;YAC/D,MAAMC,MAAM,IAAIC,IAAIN,IAAIK,GAAG;YAC3B,MAAME,OAAOF,IAAIG,YAAY,CAACC,GAAG,CAAC;YAClC,MAAMC,WAAWL,IAAIG,YAAY,CAACC,GAAG,CAAC;YACtC,MAAME,UAAUN,IAAIG,YAAY,CAACC,GAAG,CAAC;YAErC,IAAI,CAACF,QAAQ,CAACG,YAAY,CAACC,SAAS;gBAClC,OAAOC,SAASC,IAAI,CAClB;oBAAEC,OAAO;gBAAyD,GAClE;oBAAEC,QAAQ;gBAAI;YAElB;YAEA,wEAAwE;YACxE,+DAA+D;YAC/D,gEAAgE;YAChE,IAAIC;YACJ,IAAI,sBAAsBC,IAAI,CAACV,OAAO;gBACpC,IAAI,CAACX,cAAcW,OAAO;oBACxB,OAAOK,SAASC,IAAI,CAClB;wBAAEC,OAAO;oBAA2C,GACpD;wBAAEC,QAAQ;oBAAI;gBAElB;gBACAC,SAAST;YACX,OAAO;gBACL,MAAMW,SAAS,IAAIC,KAAKZ;gBACxB,IAAIa,MAAMF,OAAOG,OAAO,KAAK;oBAC3B,OAAOT,SAASC,IAAI,CAClB;wBAAEC,OAAO;oBAA2C,GACpD;wBAAEC,QAAQ;oBAAI;gBAElB;gBACAC,SAASrB,oBAAoBuB,QAAQpB,OAAOwB,QAAQ;YACtD;YAEA,MAAMC,gBAAgBC,OAAOnB,IAAIG,YAAY,CAACC,GAAG,CAAC,iBAAiB;YACnE,IAAI,CAACe,OAAOC,QAAQ,CAACF,gBAAgB;gBACnC,OAAOX,SAASC,IAAI,CAAC;oBAAEC,OAAO;gBAAqB,GAAG;oBAAEC,QAAQ;gBAAI;YACtE;YACA,MAAMW,aAAaC,KAAKC,GAAG,CAACD,KAAKE,KAAK,CAACN,gBAAgB;YAEvD,gFAAgF;YAChF,MAAMO,WAAWzB,IAAIG,YAAY,CAACC,GAAG,CAAC;YACtC,MAAMsB,YAAYD,WAAWA,SAASE,KAAK,CAAC,KAAKC,GAAG,CAAC,CAACC,IAAMA,EAAEC,IAAI,IAAIC,MAAM,CAACC,WAAW;gBAAC3B;aAAS;YAElG,8DAA8D;YAC9D,MAAM4B,SAAS,MAAM,AAACtC,IAAIE,OAAO,CAACqC,QAAQ,CAAS;gBACjDC,IAAI7B;gBACJ8B,YAAY3C,OAAO4C,KAAK,CAACC,QAAQ;gBACjCC,OAAO;gBACP,4EAA4E;gBAC5E,4DAA4D;gBAC5DC,OAAO;gBACP7C;YACF,GAAG8C,KAAK,CAAC,IAAM;YACf,IAAI,CAACR,QAAQ;gBACX,OAAO1B,SAASC,IAAI,CAAC;oBAAEC,OAAO;gBAAoB,GAAG;oBAAEC,QAAQ;gBAAI;YACrE;YAEA,wEAAwE;YACxE,kEAAkE;YAClE,8DAA8D;YAC9D,MAAMgC,cAAc,MAAM,AAAC/C,IAAIE,OAAO,CAACqC,QAAQ,CAAS;gBACtDC,IAAI9B;gBACJ+B,YAAY3C,OAAO4C,KAAK,CAACM,SAAS;gBAClCJ,OAAO;gBACP5C;YACF,GAAG8C,KAAK,CAAC,IAAM;YACf,IAAI,CAACC,aAAa;gBAChB,OAAOnC,SAASC,IAAI,CAAC;oBAAEC,OAAO;gBAAqB,GAAG;oBAAEC,QAAQ;gBAAI;YACtE;YACA,MAAMkC,cAAc,AAAC,CAAA,AAACX,QAAQY,qBAAmC,EAAE,AAAD,EAC/DjB,GAAG,CAAC,CAACkB,IAAM1D,UAAU0D,IACrBf,MAAM,CAAC,CAACe,IAA4BA,MAAMC;YAC7C,MAAMC,cAAc3D,iBAAiBqC,WAAWkB;YAEhDhD,IAAIA,GAAG,CAAC,WAAW;gBACjBM,MAAMS;gBACNsC,UAAU;gBACV5B;gBACA2B;gBACAE,WAAW5C;gBACX6C,UAAU1D,OAAOwB,QAAQ;YAC3B;YAEA,MAAM,EAAEmC,MAAM,EAAEC,KAAK,EAAE,GAAG,MAAMnE,kBAAkB;gBAChDoE,kBAAkB7D,OAAO8D,aAAa,CAACD,gBAAgB;gBACvDpD,MAAMS;gBACNZ,OAAOH;gBACP4D,eAAe/D,OAAO+D,aAAa;gBACnCC,iBAAiBhE,OAAOgE,eAAe;gBACvCpC;gBACA,sEAAsE;gBACtE,0BAA0B;gBAC1BqC,WAAWjE,OAAOkE,SAAS,CAACC,OAAO,GAAGnE,OAAO4C,KAAK,CAACwB,KAAK,GAAGd;gBAC3DlD,SAASF,IAAIE,OAAO;gBACpBF;gBACAmE,iBAAiBrE,OAAO4C,KAAK,CAAC0B,YAAY;gBAC1Cf;gBACAgB,cAAcvE,OAAO4C,KAAK,CAACM,SAAS;gBACpCsB,cAAcxE,OAAO4C,KAAK,CAAC6B,SAAS;gBACpChB,WAAW5C;gBACX6D,aAAa1E,OAAO4C,KAAK,CAACC,QAAQ;gBAClCa,UAAU1D,OAAOwB,QAAQ;YAC3B;YAEArB,IAAIA,GAAG,CAAC,YAAY;gBAAEqD,UAAU;gBAASG;gBAAQgB,WAAWf,MAAMgB,MAAM;YAAC;YAEzE,OAAO9D,SAASC,IAAI,CAAC;gBACnBN;gBACAmB;gBACA,GAAI+B,SAAS;oBAAEA;gBAAO,IAAI,CAAC,CAAC;gBAC5BC,OAAOA,MAAMzB,GAAG,CAAC,CAACC,IAAO,CAAA;wBAAEyC,KAAKzC,EAAEyC,GAAG,CAACC,WAAW;wBAAIC,OAAO3C,EAAE2C,KAAK,CAACD,WAAW;oBAAG,CAAA;YACpF;QACF;QACAE,QAAQ;QACRC,MAAM;IACR;AACF"}

package/dist/endpoints/holdSlot.d.ts

@@ -0,0 +1,12 @@
+import type { Endpoint } from 'payload';
+import type { ResolvedReservationPluginConfig } from '../types.js';
+/**
+ * Claim a slot while the caller completes checkout.
+ *
+ * Retried for the same reason a booking is: taking a hold writes the resource's
+ * bookingLock, so two simultaneous callers contend on one document and MongoDB
+ * aborts the loser rather than making it wait. `takeHold` therefore RETHROWS a
+ * transient conflict instead of returning it — the wrapper below only retries a
+ * rejected promise.
+ */
+export declare function createHoldSlotEndpoint(config: ResolvedReservationPluginConfig): Endpoint;

package/dist/endpoints/holdSlot.js

@@ -0,0 +1,126 @@
+import { takeHold } from '../services/HoldService.js';
+import { isTransientWriteConflict, retryOnWriteConflict } from '../utilities/retryOnWriteConflict.js';
+/**
+ * HTTP status per refusal reason. Exhaustive over the closed
+ * {@link HoldRefusalReason} union on purpose — a new reason cannot be added
+ * without deciding its status, which is how every failure used to collapse into
+ * a single 409 carrying an internal message.
+ */ const REFUSAL_STATUS = {
+    resource_not_found: 404,
+    service_inactive: 409,
+    service_not_found: 404,
+    slot_taken: 409
+};
+/**
+ * Claim a slot while the caller completes checkout.
+ *
+ * Retried for the same reason a booking is: taking a hold writes the resource's
+ * bookingLock, so two simultaneous callers contend on one document and MongoDB
+ * aborts the loser rather than making it wait. `takeHold` therefore RETHROWS a
+ * transient conflict instead of returning it — the wrapper below only retries a
+ * rejected promise.
+ */ export function createHoldSlotEndpoint(config) {
+    return {
+        handler: async (req)=>{
+            const body = await req.json?.();
+            const resource = body.resource;
+            const service = body.service;
+            const startTime = body.startTime;
+            if (!resource || !service || !startTime) {
+                return Response.json({
+                    error: 'resource, service and startTime are required'
+                }, {
+                    status: 400
+                });
+            }
+            const parsedStart = new Date(startTime);
+            if (isNaN(parsedStart.getTime())) {
+                return Response.json({
+                    error: 'startTime is not a valid date'
+                }, {
+                    status: 400
+                });
+            }
+            // `endTime` reaches `computeEndTime` unchanged for a `flexible`-duration
+            // service, so an unparseable one became an Invalid Date whose
+            // `.toISOString()` threw a RangeError deep inside `takeHold` — neither a
+            // transient conflict nor a ValidationError, so it correctly propagated as
+            // a 500 from an endpoint reachable without authentication. Bad input is a
+            // 400, and it is cheaper to say so here.
+            let parsedEnd;
+            if (body.endTime !== undefined && body.endTime !== null) {
+                parsedEnd = new Date(body.endTime);
+                if (isNaN(parsedEnd.getTime())) {
+                    return Response.json({
+                        error: 'endTime is not a valid date'
+                    }, {
+                        status: 400
+                    });
+                }
+            }
+            // `guestCount` is `min: 1` on the collection, and the field-level failure
+            // it raises is a Payload ValidationError — indistinguishable inside
+            // `takeHold` from the ValidationError `validateHoldSlot` raises for genuine
+            // unavailability, so `{ guestCount: 0 }` answered `409 slot_taken`: a
+            // well-behaved client is told the slot is gone and to stop retrying,
+            // for a malformed request. Rejecting it here keeps that 409 meaning only
+            // what it says.
+            let guestCount = 1;
+            if (body.guestCount !== undefined && body.guestCount !== null) {
+                const raw = body.guestCount;
+                if (typeof raw !== 'number' || !Number.isInteger(raw) || raw < 1) {
+                    return Response.json({
+                        error: 'guestCount must be an integer of 1 or more'
+                    }, {
+                        status: 400
+                    });
+                }
+                guestCount = raw;
+            }
+            let result;
+            try {
+                result = await retryOnWriteConflict(()=>takeHold({
+                        config,
+                        endTime: parsedEnd,
+                        guestCount,
+                        req,
+                        resourceId: resource,
+                        serviceId: service,
+                        startTime: parsedStart
+                    }), {
+                    req
+                });
+            } catch (err) {
+                // A conflict that survived every attempt is contention, not a verdict on
+                // the slot — mirrors /reserve/book's mapping so a client can distinguish
+                // "try again" from "gone".
+                if (isTransientWriteConflict(err)) {
+                    return Response.json({
+                        error: 'That slot is being claimed by someone else. Please try again.',
+                        retryable: true
+                    }, {
+                        status: 409
+                    });
+                }
+                throw err;
+            }
+            if (!result.ok) {
+                return Response.json({
+                    error: result.reason
+                }, {
+                    status: REFUSAL_STATUS[result.reason]
+                });
+            }
+            return Response.json({
+                expiresAt: result.hold.expiresAt,
+                token: result.hold.token
+            }, {
+                status: 201
+            });
+        },
+        method: 'post',
+        path: '/reserve/hold'
+    };
+}
+
+//# sourceMappingURL=holdSlot.js.map

package/dist/endpoints/holdSlot.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/endpoints/holdSlot.ts"],"sourcesContent":["import type { Endpoint } from 'payload'\n\nimport type { HoldRefusalReason } from '../services/HoldService.js'\nimport type { ResolvedReservationPluginConfig } from '../types.js'\n\nimport { takeHold } from '../services/HoldService.js'\nimport {\n  isTransientWriteConflict,\n  retryOnWriteConflict,\n} from '../utilities/retryOnWriteConflict.js'\n\n/**\n * HTTP status per refusal reason. Exhaustive over the closed\n * {@link HoldRefusalReason} union on purpose — a new reason cannot be added\n * without deciding its status, which is how every failure used to collapse into\n * a single 409 carrying an internal message.\n */\nconst REFUSAL_STATUS: Record<HoldRefusalReason, number> = {\n  resource_not_found: 404,\n  service_inactive: 409,\n  service_not_found: 404,\n  slot_taken: 409,\n}\n\n/**\n * Claim a slot while the caller completes checkout.\n *\n * Retried for the same reason a booking is: taking a hold writes the resource's\n * bookingLock, so two simultaneous callers contend on one document and MongoDB\n * aborts the loser rather than making it wait. `takeHold` therefore RETHROWS a\n * transient conflict instead of returning it — the wrapper below only retries a\n * rejected promise.\n */\nexport function createHoldSlotEndpoint(config: ResolvedReservationPluginConfig): Endpoint {\n  return {\n    handler: async (req) => {\n      const body = (await req.json?.()) as Record<string, unknown>\n\n      const resource = body.resource as number | string | undefined\n      const service = body.service as number | string | undefined\n      const startTime = body.startTime as string | undefined\n\n      if (!resource || !service || !startTime) {\n        return Response.json(\n          { error: 'resource, service and startTime are required' },\n          { status: 400 },\n        )\n      }\n\n      const parsedStart = new Date(startTime)\n      if (isNaN(parsedStart.getTime())) {\n        return Response.json({ error: 'startTime is not a valid date' }, { status: 400 })\n      }\n\n      // `endTime` reaches `computeEndTime` unchanged for a `flexible`-duration\n      // service, so an unparseable one became an Invalid Date whose\n      // `.toISOString()` threw a RangeError deep inside `takeHold` — neither a\n      // transient conflict nor a ValidationError, so it correctly propagated as\n      // a 500 from an endpoint reachable without authentication. Bad input is a\n      // 400, and it is cheaper to say so here.\n      let parsedEnd: Date | undefined\n      if (body.endTime !== undefined && body.endTime !== null) {\n        parsedEnd = new Date(body.endTime as string)\n        if (isNaN(parsedEnd.getTime())) {\n          return Response.json({ error: 'endTime is not a valid date' }, { status: 400 })\n        }\n      }\n\n      // `guestCount` is `min: 1` on the collection, and the field-level failure\n      // it raises is a Payload ValidationError — indistinguishable inside\n      // `takeHold` from the ValidationError `validateHoldSlot` raises for genuine\n      // unavailability, so `{ guestCount: 0 }` answered `409 slot_taken`: a\n      // well-behaved client is told the slot is gone and to stop retrying,\n      // for a malformed request. Rejecting it here keeps that 409 meaning only\n      // what it says.\n      let guestCount = 1\n      if (body.guestCount !== undefined && body.guestCount !== null) {\n        const raw = body.guestCount\n        if (typeof raw !== 'number' || !Number.isInteger(raw) || raw < 1) {\n          return Response.json(\n            { error: 'guestCount must be an integer of 1 or more' },\n            { status: 400 },\n          )\n        }\n        guestCount = raw\n      }\n\n      let result: Awaited<ReturnType<typeof takeHold>>\n      try {\n        result = await retryOnWriteConflict(\n          () =>\n            takeHold({\n              config,\n              endTime: parsedEnd,\n              guestCount,\n              req,\n              resourceId: resource,\n              serviceId: service,\n              startTime: parsedStart,\n            }),\n          { req },\n        )\n      } catch (err) {\n        // A conflict that survived every attempt is contention, not a verdict on\n        // the slot — mirrors /reserve/book's mapping so a client can distinguish\n        // \"try again\" from \"gone\".\n        if (isTransientWriteConflict(err)) {\n          return Response.json(\n            {\n              error: 'That slot is being claimed by someone else. Please try again.',\n              retryable: true,\n            },\n            { status: 409 },\n          )\n        }\n        throw err\n      }\n\n      if (!result.ok) {\n        return Response.json({ error: result.reason }, { status: REFUSAL_STATUS[result.reason] })\n      }\n\n      return Response.json(\n        { expiresAt: result.hold.expiresAt, token: result.hold.token },\n        { status: 201 },\n      )\n    },\n    method: 'post',\n    path: '/reserve/hold',\n  }\n}\n"],"names":["takeHold","isTransientWriteConflict","retryOnWriteConflict","REFUSAL_STATUS","resource_not_found","service_inactive","service_not_found","slot_taken","createHoldSlotEndpoint","config","handler","req","body","json","resource","service","startTime","Response","error","status","parsedStart","Date","isNaN","getTime","parsedEnd","endTime","undefined","guestCount","raw","Number","isInteger","result","resourceId","serviceId","err","retryable","ok","reason","expiresAt","hold","token","method","path"],"mappings":"AAKA,SAASA,QAAQ,QAAQ,6BAA4B;AACrD,SACEC,wBAAwB,EACxBC,oBAAoB,QACf,uCAAsC;AAE7C;;;;;CAKC,GACD,MAAMC,iBAAoD;IACxDC,oBAAoB;IACpBC,kBAAkB;IAClBC,mBAAmB;IACnBC,YAAY;AACd;AAEA;;;;;;;;CAQC,GACD,OAAO,SAASC,uBAAuBC,MAAuC;IAC5E,OAAO;QACLC,SAAS,OAAOC;YACd,MAAMC,OAAQ,MAAMD,IAAIE,IAAI;YAE5B,MAAMC,WAAWF,KAAKE,QAAQ;YAC9B,MAAMC,UAAUH,KAAKG,OAAO;YAC5B,MAAMC,YAAYJ,KAAKI,SAAS;YAEhC,IAAI,CAACF,YAAY,CAACC,WAAW,CAACC,WAAW;gBACvC,OAAOC,SAASJ,IAAI,CAClB;oBAAEK,OAAO;gBAA+C,GACxD;oBAAEC,QAAQ;gBAAI;YAElB;YAEA,MAAMC,cAAc,IAAIC,KAAKL;YAC7B,IAAIM,MAAMF,YAAYG,OAAO,KAAK;gBAChC,OAAON,SAASJ,IAAI,CAAC;oBAAEK,OAAO;gBAAgC,GAAG;oBAAEC,QAAQ;gBAAI;YACjF;YAEA,yEAAyE;YACzE,8DAA8D;YAC9D,yEAAyE;YACzE,0EAA0E;YAC1E,0EAA0E;YAC1E,yCAAyC;YACzC,IAAIK;YACJ,IAAIZ,KAAKa,OAAO,KAAKC,aAAad,KAAKa,OAAO,KAAK,MAAM;gBACvDD,YAAY,IAAIH,KAAKT,KAAKa,OAAO;gBACjC,IAAIH,MAAME,UAAUD,OAAO,KAAK;oBAC9B,OAAON,SAASJ,IAAI,CAAC;wBAAEK,OAAO;oBAA8B,GAAG;wBAAEC,QAAQ;oBAAI;gBAC/E;YACF;YAEA,0EAA0E;YAC1E,oEAAoE;YACpE,4EAA4E;YAC5E,sEAAsE;YACtE,qEAAqE;YACrE,yEAAyE;YACzE,gBAAgB;YAChB,IAAIQ,aAAa;YACjB,IAAIf,KAAKe,UAAU,KAAKD,aAAad,KAAKe,UAAU,KAAK,MAAM;gBAC7D,MAAMC,MAAMhB,KAAKe,UAAU;gBAC3B,IAAI,OAAOC,QAAQ,YAAY,CAACC,OAAOC,SAAS,CAACF,QAAQA,MAAM,GAAG;oBAChE,OAAOX,SAASJ,IAAI,CAClB;wBAAEK,OAAO;oBAA6C,GACtD;wBAAEC,QAAQ;oBAAI;gBAElB;gBACAQ,aAAaC;YACf;YAEA,IAAIG;YACJ,IAAI;gBACFA,SAAS,MAAM7B,qBACb,IACEF,SAAS;wBACPS;wBACAgB,SAASD;wBACTG;wBACAhB;wBACAqB,YAAYlB;wBACZmB,WAAWlB;wBACXC,WAAWI;oBACb,IACF;oBAAET;gBAAI;YAEV,EAAE,OAAOuB,KAAK;gBACZ,yEAAyE;gBACzE,yEAAyE;gBACzE,2BAA2B;gBAC3B,IAAIjC,yBAAyBiC,MAAM;oBACjC,OAAOjB,SAASJ,IAAI,CAClB;wBACEK,OAAO;wBACPiB,WAAW;oBACb,GACA;wBAAEhB,QAAQ;oBAAI;gBAElB;gBACA,MAAMe;YACR;YAEA,IAAI,CAACH,OAAOK,EAAE,EAAE;gBACd,OAAOnB,SAASJ,IAAI,CAAC;oBAAEK,OAAOa,OAAOM,MAAM;gBAAC,GAAG;oBAAElB,QAAQhB,cAAc,CAAC4B,OAAOM,MAAM,CAAC;gBAAC;YACzF;YAEA,OAAOpB,SAASJ,IAAI,CAClB;gBAAEyB,WAAWP,OAAOQ,IAAI,CAACD,SAAS;gBAAEE,OAAOT,OAAOQ,IAAI,CAACC,KAAK;YAAC,GAC7D;gBAAErB,QAAQ;YAAI;QAElB;QACAsB,QAAQ;QACRC,MAAM;IACR;AACF"}

package/dist/endpoints/releaseSlot.d.ts

@@ -0,0 +1,8 @@
+import type { Endpoint } from 'payload';
+import type { ResolvedReservationPluginConfig } from '../types.js';
+/**
+ * Release a hold early. Idempotent by design: a client that retries after a
+ * network blip, or releases a hold that already expired and was swept, gets a
+ * 200 with released: 0 rather than an error it cannot act on.
+ */
+export declare function createReleaseSlotEndpoint(config: ResolvedReservationPluginConfig): Endpoint;

package/dist/endpoints/releaseSlot.js

@@ -0,0 +1,34 @@
+import { releaseHold } from '../services/HoldService.js';
+/**
+ * Release a hold early. Idempotent by design: a client that retries after a
+ * network blip, or releases a hold that already expired and was swept, gets a
+ * 200 with released: 0 rather than an error it cannot act on.
+ */ export function createReleaseSlotEndpoint(config) {
+    return {
+        handler: async (req)=>{
+            const body = await req.json?.();
+            const token = body.token;
+            if (!token) {
+                return Response.json({
+                    error: 'token is required'
+                }, {
+                    status: 400
+                });
+            }
+            const { released } = await releaseHold({
+                config,
+                req,
+                token
+            });
+            return Response.json({
+                released
+            }, {
+                status: 200
+            });
+        },
+        method: 'post',
+        path: '/reserve/hold/release'
+    };
+}
+
+//# sourceMappingURL=releaseSlot.js.map

package/dist/endpoints/releaseSlot.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/endpoints/releaseSlot.ts"],"sourcesContent":["import type { Endpoint } from 'payload'\n\nimport type { ResolvedReservationPluginConfig } from '../types.js'\n\nimport { releaseHold } from '../services/HoldService.js'\n\n/**\n * Release a hold early. Idempotent by design: a client that retries after a\n * network blip, or releases a hold that already expired and was swept, gets a\n * 200 with released: 0 rather than an error it cannot act on.\n */\nexport function createReleaseSlotEndpoint(config: ResolvedReservationPluginConfig): Endpoint {\n  return {\n    handler: async (req) => {\n      const body = (await req.json?.()) as Record<string, unknown>\n      const token = body.token as string | undefined\n\n      if (!token) {\n        return Response.json({ error: 'token is required' }, { status: 400 })\n      }\n\n      const { released } = await releaseHold({ config, req, token })\n      return Response.json({ released }, { status: 200 })\n    },\n    method: 'post',\n    path: '/reserve/hold/release',\n  }\n}\n"],"names":["releaseHold","createReleaseSlotEndpoint","config","handler","req","body","json","token","Response","error","status","released","method","path"],"mappings":"AAIA,SAASA,WAAW,QAAQ,6BAA4B;AAExD;;;;CAIC,GACD,OAAO,SAASC,0BAA0BC,MAAuC;IAC/E,OAAO;QACLC,SAAS,OAAOC;YACd,MAAMC,OAAQ,MAAMD,IAAIE,IAAI;YAC5B,MAAMC,QAAQF,KAAKE,KAAK;YAExB,IAAI,CAACA,OAAO;gBACV,OAAOC,SAASF,IAAI,CAAC;oBAAEG,OAAO;gBAAoB,GAAG;oBAAEC,QAAQ;gBAAI;YACrE;YAEA,MAAM,EAAEC,QAAQ,EAAE,GAAG,MAAMX,YAAY;gBAAEE;gBAAQE;gBAAKG;YAAM;YAC5D,OAAOC,SAASF,IAAI,CAAC;gBAAEK;YAAS,GAAG;gBAAED,QAAQ;YAAI;QACnD;QACAE,QAAQ;QACRC,MAAM;IACR;AACF"}

package/dist/endpoints/resourceAvailability.d.ts

@@ -1,5 +1,6 @@
 import type { Endpoint, Payload, PayloadRequest } from 'payload';
 import type { ExternalBusyInterval, GetExternalBusy, ResolvedReservationPluginConfig } from '../types.js';
+import { type ReserveDebug } from '../utilities/reserveDebug.js';
 type DayAvailability = {
     date: string;
     shiftWindows: Array<{
@@ -35,8 +36,11 @@ export type ResourceAvailability = {
 };
 export declare function buildResourceAvailability(params: {
     blockingStatuses: string[];
+    debug?: ReserveDebug;
     end: Date;
     getExternalBusy?: GetExternalBusy;
+    /** Slot-holds slug; omit to ignore holds (i.e. when `slotHolds` is off). */
+    holdsSlug?: string;
     payload: Payload;
     req?: PayloadRequest;
     reservationSlug: string;