Task #755: restore rounded corners on executive meetings table

- User preferred the rounded look; reverted #747's corner squaring:
  rounded-t-md back on the sticky floating header (em-sticky-thead),
  rounded-b-md on the table wrapper (#executive-schedule-printable).
- Used rounded-b-md instead of the original full rounded-md because the
  header is now attached flush to the table (#749/#751) — the seam must
  stay a straight continuous line.
- !mb-0/!mt-0 attachment, sticky behavior, and print mode untouched.
- tx-os tsc clean; architect review passed.

.agents/agent_assets_metadata.toml

@@ -0,0 +1,127 @@
+uploads = []
+
+[[generated]]
+id = "eD84DGRCWiOa5scCp_Thx"
+uri = "file://artifacts/tx-os/src/assets/login-art.png"
+type = "image"
+title = "login art"
+
+[[generated]]
+id = "Dy7wCo-RCUzJlVjqDJODC"
+uri = "file://artifacts/tx-os/public/service-images/tea.png"
+type = "image"
+title = "generated_image"
+
+[[generated]]
+id = "zvodbXSr2tAsyVcYJXTxE"
+uri = "file://artifacts/tx-os/public/service-images/arabic-coffee.png"
+type = "image"
+title = "brown arabic coffee"
+
+[[generated]]
+id = "RyxcoHUo53xV4Vm4SIC9u"
+uri = "file://artifacts/tx-os/public/service-images/water.png"
+type = "image"
+title = "generated_image"
+
+[[generated]]
+id = "mxCcnlnUFIa-DVsz3EAkI"
+uri = "file://artifacts/tx-os/public/service-images/nescafe.png"
+type = "image"
+title = "generated_image"
+
+[[generated]]
+id = "BsyqgR_m14Yf0_KjQ7IG8"
+uri = "file://artifacts/tx-os/public/service-images/juice.png"
+type = "image"
+title = "generated_image"
+
+[[generated]]
+id = "rNA7O4IB9yyq38zpUWFi6"
+uri = "file://artifacts/tx-os/public/service-images/soft-drink.png"
+type = "image"
+title = "generated_image"
+
+[[generated]]
+id = "o6pC3J-BuDxzWmTTIl7pO"
+uri = "file://artifacts/tx-os/public/service-images/black-coffee.png"
+type = "image"
+title = "black coffee mug"
+
+[[generated]]
+id = "pFSmazHx0m3gsXrCE0oR2"
+uri = "file://artifacts/tx-os/public/service-images/saudi-coffee.png"
+type = "image"
+title = "saudi coffee dark brown"
+
+[[generated]]
+id = "5P3RlYHsmEdwFZ7rKuMx5"
+uri = "file://attached_assets/generated_images/tx_os_architecture.png"
+type = "image"
+title = "tx os architecture diagram"
+
+[[outputs]]
+id = "LYgvZ2mSFO2a8Q7YzWuYh"
+uri = "file://attached_assets/tx-icon/main.svg"
+type = "image"
+title = "Variant 1 — Main (installed as favicon)"
+
+[[outputs]]
+id = "ITl9ptHBvL_ScwngJ_WSW"
+uri = "file://attached_assets/tx-icon/variant-2.svg"
+type = "image"
+title = "Variant 2 — TX overlapped"
+
+[[outputs]]
+id = "UcPBQ0tbPcu3-vrpunlGQ"
+uri = "file://attached_assets/tx-icon/variant-3.svg"
+type = "image"
+title = "Variant 3 — Minimal T + accent dot"
+
+[[outputs]]
+id = "1X5cinpNHU8b5nqNF7w0S"
+uri = "file://attached_assets/tx-icon/main-transparent.svg"
+type = "image"
+title = "Transparent background version"
+
+[[outputs]]
+id = "cY9FCy1T7wF7kkgS0rtGM"
+uri = "file://attached_assets/tx-icon/favicon.svg"
+type = "image"
+title = "Favicon-optimized (32×32, thicker strokes)"
+
+[[outputs]]
+id = "iFT-ndtlSuqfB8aUjsUNG"
+uri = "file://artifacts/api-server/executive-meetings-final.pdf"
+type = "pdf"
+title = "PDF النهائي - قائمة حضور الاجتماعات 4 مايو 2026"
+
+[[outputs]]
+id = "q0qIXlE_5tmKQXANX-jj-"
+uri = "file://attached_assets/pdf-checks/arabic-pdf-render.png"
+type = "image"
+title = "PDF تجربة - عرض النص العربي"
+
+[[outputs]]
+id = "Q2zfR7rictkhIQnecDPll"
+uri = "file://attached_assets/generated_images/tx_os_architecture.png"
+type = "image"
+title = "بنية نظام Tx OS — من البنية التحتية إلى المستخدم"
+
+[[outputs]]
+id = "nOkE5lL8MvUOiI6CJjF5I"
+uri = "file://attached_assets/generated_images/tx_os_architecture_ar.png"
+type = "image"
+title = "بنية نظام Tx OS — تفصيلي"
+
+[[outputs]]
+id = "FXgAx0l684F40vfGD6lqD"
+uri = "file://attached_assets/generated_images/platform_architecture_ar.png"
+type = "image"
+title = "بنية المنصة — تخطيط احترافي"
+
+[[outputs]]
+id = "8gXcnoA-hNBH1c_T0ki__"
+uri = "file://dist/TX-latest.tar.gz"
+type = "unspecified"
+title = "TX-latest — كامل المشروع مع التاريخ (git bundle)"

.replit

@@ -0,0 +1,115 @@
+modules = ["nodejs-24", "python-3.11", "postgresql-16"]
+
+[deployment]
+router = "application"
+deploymentTarget = "autoscale"
+
+[deployment.postBuild]
+args = ["pnpm", "store", "prune"]
+env = { "CI" = "true" }
+
+[workflows]
+runButton = "Project"
+
+[[workflows.workflow]]
+name = "Project"
+mode = "parallel"
+author = "agent"
+
+[[workflows.workflow.tasks]]
+task = "workflow.run"
+args = "Start application"
+
+[[workflows.workflow.tasks]]
+task = "workflow.run"
+args = "API"
+
+[[workflows.workflow.tasks]]
+task = "workflow.run"
+args = "tailscaled"
+
+[[workflows.workflow]]
+name = "Start application"
+author = "agent"
+
+[[workflows.workflow.tasks]]
+task = "shell.exec"
+args = "PORT=5000 BASE_PATH=/ VITE_API_PROXY_TARGET=http://localhost:8080 pnpm --filter @workspace/tx-os run dev"
+waitForPort = 5000
+
+[workflows.workflow.metadata]
+outputType = "webview"
+
+[[workflows.workflow]]
+name = "API"
+author = "agent"
+
+[[workflows.workflow.tasks]]
+task = "shell.exec"
+args = "PORT=8080 pnpm --filter @workspace/api-server run dev"
+waitForPort = 8080
+
+[workflows.workflow.metadata]
+outputType = "console"
+
+[[workflows.workflow]]
+name = "tailscaled"
+author = "agent"
+
+[[workflows.workflow.tasks]]
+task = "shell.exec"
+args = "cd /tmp/tailscale_1.80.2_amd64 && ./tailscaled --tun=userspace-networking --socks5-server=localhost:1055 --outbound-http-proxy-listen=localhost:1055 --statedir=/tmp/tsstate --socket=/tmp/tsstate/tailscaled.sock"
+
+[workflows.workflow.metadata]
+outputType = "console"
+
+[agent]
+stack = "PNPM_WORKSPACE"
+expertMode = true
+
+[postMerge]
+path = "scripts/post-merge.sh"
+timeoutMs = 120000
+
+[[ports]]
+localPort = 5000
+externalPort = 4200
+
+[[ports]]
+localPort = 5001
+externalPort = 3001
+
+[[ports]]
+localPort = 5002
+externalPort = 6800
+
+[[ports]]
+localPort = 8080
+externalPort = 8080
+
+[[ports]]
+localPort = 8081
+externalPort = 80
+
+[[ports]]
+localPort = 8082
+externalPort = 3003
+
+[[ports]]
+localPort = 8083
+externalPort = 5173
+
+[[ports]]
+localPort = 25785
+externalPort = 3000
+
+[[ports]]
+localPort = 25786
+externalPort = 3002
+
+[[ports]]
+localPort = 25787
+externalPort = 5000
+
+[nix]
+channel = "stable-25_05"

.replitignore

@@ -0,0 +1,5 @@
+# The format of this file is identical to `.dockerignore`.
+# It is used to reduce the size of deployed images to make the process of publishing faster.
+
+# No need to store the pnpm store twice.
+.local

PUBLISH.md

@@ -0,0 +1,61 @@
+# نشر نظيف على Gitea
+
+سكربت `scripts/publish-to-gitea.sh` يدفع نسخة **نظيفة 100% من أي أثر لـ Replit** إلى مستودع Gitea، بدون ما يلمس بيئة Replit أو شغلك المحلي.
+
+## وش يسوّي بالضبط
+
+عند كل تشغيل، يبني نسخة مؤقتة في `/tmp/` ويعمل عليها التالي قبل الدفع:
+
+| الإجراء | التفاصيل |
+|---|---|
+| يحذف الملفات الخاصة بـ Replit | `.replit`, `.replitignore`, `replit.nix`, `.local/`, `.agents/`, `attached_assets/`, كل `.replit-artifact/` |
+| ينظّف رسائل الـ commits | يشيل أي سطر يبدأ بـ `Replit-` (مثل `Replit-Commit-Author`, `Replit-Commit-Screenshot-Url`) |
+| يعيد كتابة هوية المؤلف | يستبدل `*@users.noreply.replit.com` باسم وإيميل من اختيارك (الافتراضي: `Riyadh <dev@tx.local>`) |
+| يطبّق التغييرات على **كل** الـ commits السابقة | يعني حتى الـ history القديم ينظّف، مو بس الـ commits الجديدة |
+| يدفع force-push للـ remote | فقط لو أعطيت `--push` |
+
+## الاستخدام
+
+### 1) معاينة (dry run) — لا يدفع شي
+```bash
+./scripts/publish-to-gitea.sh
+```
+يعرض لك آخر 5 commits بعد التنظيف عشان تتأكد قبل الدفع الفعلي.
+
+### 2) دفع فعلي لـ Gitea
+```bash
+./scripts/publish-to-gitea.sh --push
+```
+
+### 3) تخصيص الاسم/الإيميل
+```bash
+AUTHOR_NAME="Mohammed Ali" AUTHOR_EMAIL="me@example.com" ./scripts/publish-to-gitea.sh --push
+```
+
+### 4) دفع لمستودع/فرع مختلف
+```bash
+GITEA_REMOTE_URL="https://gitea.example.com/me/my-repo.git" \
+GITEA_BRANCH="main" \
+./scripts/publish-to-gitea.sh --push
+```
+
+## ضمانات الأمان
+
+- ✅ كل العمل في مجلد مؤقت (`/tmp/tx-publish-XXXXXX`) — يتحذف تلقائياً.
+- ✅ الـ git history الأصلي عندك في Replit ما يتغيّر.
+- ✅ Docker setup والـ workflows تكمل تشتغل بشكل عادي.
+- ⚠️ Force-push يستبدل تاريخ Gitea كاملاً — لو في clones أخرى للمستودع، لازم تعمل clone جديد.
+
+## متى أشغّله
+
+كل ما تبي تنشر تحديثات لـ Gitea، شغّل السكربت بـ `--push`. ما يحتاج تشغيله إلا لما تبي تحدّث Gitea.
+
+## استرجاع نسخة العمل من Gitea (على الماك)
+
+```bash
+git clone https://desktop-11cj93j.tail866923.ts.net/rafraa/TX.git
+cd TX
+./start.sh
+```
+
+ما راح تلقى أي إشارة لـ Replit في الكود ولا في الـ history.

artifacts/api-server/.replit-artifact/artifact.toml

@@ -0,0 +1,32 @@
+kind = "api"
+previewPath = "/api" # TODO - should be excluded from preview in the first place
+title = "API Server"
+version = "1.0.0"
+id = "3B4_FFSkEVBkAeYMFRJ2e"
+
+[[services]]
+localPort = 8080
+name = "API Server"
+paths = ["/api"]
+
+[services.development]
+run = "pnpm --filter @workspace/api-server run dev"
+
+[services.production]
+
+[services.production.build]
+args = ["pnpm", "--filter", "@workspace/api-server", "run", "build"]
+
+[services.production.build.env]
+NODE_ENV = "production"
+
+[services.production.run]
+# we don't run through pnpm to make startup faster in production
+args = ["node", "--enable-source-maps", "artifacts/api-server/dist/index.mjs"]
+
+[services.production.run.env]
+PORT = "8080"
+NODE_ENV = "production"
+
+[services.production.health.startup]
+path = "/api/healthz"

artifacts/api-server/package.json

@@ -20,6 +20,7 @@
     "@workspace/api-zod": "workspace:*",
     "@workspace/db": "workspace:*",
     "arabic-persian-reshaper": "1.0.1",
+    "archiver": "^8.0.0",
     "bcryptjs": "^3.0.3",
     "bidi-js": "^1.0.3",
     "connect-pg-simple": "^10.0.0",
@@ -41,6 +42,7 @@
     "zod": "catalog:"
   },
   "devDependencies": {
+    "@types/archiver": "^8.0.0",
     "@types/bcryptjs": "^3.0.0",
     "@types/connect-pg-simple": "^7.0.3",
     "@types/cookie-parser": "^1.4.10",

artifacts/api-server/src/lib/executive-meeting-notify.ts

@@ -222,7 +222,7 @@ export async function broadcastExecutiveMeetingNotifications(
       type: "executive_meeting",
       relatedId: meetingId,
       tag: meetingId ? `meeting-${meetingId}-${notificationType}` : `meeting-${notificationType}`,
-      url: "/meetings",
+      url: meetingId ? `/meetings?meeting=${meetingId}` : "/meetings",
     });
   }
   io.emit("executive_meeting_notifications_changed", {

artifacts/api-server/src/lib/executive-meeting-scheduler.ts

@@ -43,6 +43,16 @@ function stripHtmlToPlainText(input: string | null | undefined): string {
   return decoded.replace(/\s+/g, " ").trim();
 }
 
+// Arabic minute pluralisation for the "starts after N minutes" reminder
+// body. Arabic uses three forms for small counts: 1 -> دقيقة, 2 -> دقيقتين
+// (dual), 3+ -> دقائق. The scheduler only fires for deltas of 1-5 min, but
+// the helper stays correct for the dual/plural boundary regardless.
+function minutesAfterAr(n: number): string {
+  if (n <= 1) return "بعد دقيقة";
+  if (n === 2) return "بعد دقيقتين";
+  return `بعد ${n} دقائق`;
+}
+
 function dateKey(d: Date): string {
   return `${d.getFullYear()}-${pad2(d.getMonth() + 1)}-${pad2(d.getDate())}`;
 }
@@ -161,7 +171,7 @@ async function tickOnce(): Promise<void> {
       stripHtmlToPlainText(meeting.titleEn) ||
       stripHtmlToPlainText(meeting.titleAr) ||
       "Meeting";
-    const bodyAr = `${subjectAr} يبدأ خلال ${deltaMin} دقيقة`;
+    const bodyAr = `${subjectAr} يبدأ ${minutesAfterAr(deltaMin)}`;
     const bodyEn = `${subjectEn} starts in ${deltaMin} min`;
 
     for (const { userId } of claimed) {
@@ -175,7 +185,7 @@ async function tickOnce(): Promise<void> {
           bodyAr,
           bodyEn,
           tag: `em-reminder-${meeting.id}`,
-          url: "/meetings",
+          url: `/meetings?meeting=${meeting.id}`,
           type: "executive_meeting",
           relatedId: meeting.id,
         },

artifacts/api-server/src/lib/objectAuthz.ts

@@ -5,10 +5,11 @@ import {
   servicesTable,
   executiveMeetingFontSettingsTable,
   executiveMeetingPdfArchivesTable,
+  protocolPhotosTable,
   rolesTable,
 } from "@workspace/db";
 import { eq, inArray, sql } from "drizzle-orm";
-import { getEffectiveRoleIds } from "../middlewares/auth";
+import { getEffectiveRoleIds, userHasPermission } from "../middlewares/auth";
 import { getVisibleAppsForUser } from "./appsVisibility";
 
 // Roles that gate read access to the Executive Meetings module.
@@ -152,6 +153,18 @@ export async function canUserReadObjectPath(
   const rows = (meeting as unknown as { rows?: unknown[] }).rows ?? [];
   if (rows.length > 0) return hasExecutiveAccess;
 
+  // 7. Protocol visit photos — gated by the protocol read permission
+  //    (`protocol.access`), the same scoped permission that makes the
+  //    Protocol tile visible. Never gated by role name (module convention).
+  const photo = await db
+    .select({ id: protocolPhotosTable.id })
+    .from(protocolPhotosTable)
+    .where(eq(protocolPhotosTable.objectPath, objectPath))
+    .limit(1);
+  if (photo.length > 0) {
+    return isAdmin || (await userHasPermission(userId, "protocol.access"));
+  }
+
   // Orphan path — no entity references it. Treat as not-found for
   // every role (including admin). This is what stops object
   // enumeration: even with admin credentials, you cannot probe

artifacts/api-server/src/lib/objectStorage.ts

@@ -25,6 +25,30 @@ export class ObjectNotFoundError extends Error {
   }
 }
 
+// Map a stored object's content type to a sensible file extension so
+// downloads land with a usable name (stored paths are extension-less UUIDs).
+const CONTENT_TYPE_EXTENSIONS: Record<string, string> = {
+  "image/jpeg": "jpg",
+  "image/jpg": "jpg",
+  "image/png": "png",
+  "image/gif": "gif",
+  "image/webp": "webp",
+  "image/heic": "heic",
+  "image/heif": "heif",
+  "image/bmp": "bmp",
+  "image/tiff": "tiff",
+  "image/svg+xml": "svg",
+  "application/pdf": "pdf",
+};
+
+export function extensionForContentType(
+  contentType: string | undefined,
+): string {
+  if (!contentType) return "bin";
+  const base = contentType.split(";")[0].trim().toLowerCase();
+  return CONTENT_TYPE_EXTENSIONS[base] ?? "bin";
+}
+
 // ---------------------------------------------------------------------------
 // Driver interface
 // ---------------------------------------------------------------------------

artifacts/api-server/src/middlewares/auth.ts

@@ -253,3 +253,36 @@ export async function requireExecutiveAccess(
   next();
 }
 
+/**
+ * Gate any read access to the Public Relations & Protocol module. Guarded by
+ * the scoped `protocol.access` permission — the same permission that gates the
+ * home-screen tile (via app_permissions) — so backend usability aligns exactly
+ * with the visible permission grant. Finer-grained request / mutate / approve /
+ * rooms / audit capabilities are layered on top via scoped permissions in the
+ * routes file.
+ */
+export async function requireProtocolAccess(
+  req: Request,
+  res: Response,
+  next: NextFunction,
+): Promise<void> {
+  if (!req.session.userId) {
+    res.status(401).json({ error: "Unauthorized", code: "unauthorized" });
+    return;
+  }
+  const [user] = await db
+    .select({ isActive: usersTable.isActive })
+    .from(usersTable)
+    .where(eq(usersTable.id, req.session.userId));
+  if (!user || !user.isActive) {
+    res.status(401).json({ error: "Unauthorized", code: "unauthorized" });
+    return;
+  }
+  const ok = await userHasPermission(req.session.userId, "protocol.access");
+  if (!ok) {
+    res.status(403).json({ error: "Forbidden", code: "forbidden" });
+    return;
+  }
+  next();
+}
+

artifacts/api-server/src/routes/executive-meetings.ts

@@ -231,6 +231,12 @@ const meetingBaseFields = {
     .transform((v) => (v ? 1 : 0))
     .optional(),
   notes: z.string().trim().max(5000).nullable().optional(),
+  // #635: external-meeting flag. Coerce truthy/falsy → boolean so older
+  // clients can keep sending 0/1 without surprises.
+  isExternal: z
+    .union([z.boolean(), z.number()])
+    .transform((v) => Boolean(v))
+    .optional(),
 } as const;
 
 const meetingCreateSchema = z
@@ -282,6 +288,7 @@ const meetingPatchSchema = z
     status: meetingBaseFields.status,
     isHighlighted: meetingBaseFields.isHighlighted,
     notes: meetingBaseFields.notes,
+    isExternal: meetingBaseFields.isExternal,
     attendees: z.array(attendeeSchema).optional(),
     merge: meetingMergeSchema.optional(),
     // Row-highlight colour (#288). null = clear back to default (no tint).
@@ -669,6 +676,12 @@ router.post(
           status: data.status ?? "scheduled",
           isHighlighted: data.isHighlighted ?? 0,
           notes: stripTagsToPlainTextOrNull(data.notes),
+          // #635: persist the external-meeting flag; default false.
+          // When true, force rowColor='red' so the schedule always
+          // renders the row in the agreed external-meeting tint even
+          // if the client forgot to pass it.
+          isExternal: Boolean(data.isExternal ?? false),
+          rowColor: data.isExternal ? "red" : (data as { rowColor?: string }).rowColor ?? null,
           createdBy: userId,
           updatedBy: userId,
         };
@@ -843,6 +856,22 @@ router.patch(
         if (data.rowColor !== undefined) {
           updateValues.rowColor = data.rowColor;
         }
+        // #635: persist isExternal. When switching to external, also
+        // force rowColor='red' (overrides any rowColor in the same
+        // PATCH) so the red tint always tracks the flag.
+        if (data.isExternal !== undefined) {
+          updateValues.isExternal = Boolean(data.isExternal);
+          if (data.isExternal) updateValues.rowColor = "red";
+        }
+        // #635: belt-and-suspenders — if the row is (or is becoming)
+        // external and a non-red rowColor would otherwise be persisted
+        // by this PATCH, force red. Prevents PDF/export paths that read
+        // the raw rowColor from showing a non-red tint for externals.
+        const willBeExternal =
+          data.isExternal !== undefined ? Boolean(data.isExternal) : existing.isExternal;
+        if (willBeExternal && updateValues.rowColor !== undefined && updateValues.rowColor !== "red") {
+          updateValues.rowColor = "red";
+        }
 
         if (Object.keys(updateValues).length > 1) {
           await tx
@@ -1126,6 +1155,7 @@ async function computeCascadeShift(
       startTime: executiveMeetingsTable.startTime,
       endTime: executiveMeetingsTable.endTime,
       status: executiveMeetingsTable.status,
+      isExternal: executiveMeetingsTable.isExternal,
     })
     .from(executiveMeetingsTable)
     .where(eq(executiveMeetingsTable.meetingDate, date));
@@ -1138,6 +1168,10 @@ async function computeCascadeShift(
   const sorted = candidates
     .filter((c) => c.id !== primaryId)
     .filter((c) => c.status !== "cancelled" && c.status !== "completed")
+    // #635: external meetings are excluded from auto-postpone cascades
+    // by design — they're scheduled with the other party and can't be
+    // unilaterally shifted.
+    .filter((c) => !c.isExternal)
     .map((c) => ({
       ...c,
       _startMin: parseTimeToMinutes(c.startTime),
@@ -1573,6 +1607,18 @@ router.post(
       if (!locked) {
         return { ok: false, status: 404, error: "Meeting not found", code: "not_found" };
       }
+      // #635: External meetings can never be auto-postponed — they're
+      // scheduled with an outside party and shifting them unilaterally
+      // would put the schedule out of sync. The UI also disables the
+      // Postpone button, so this is a belt-and-suspenders 409.
+      if (locked.isExternal) {
+        return {
+          ok: false,
+          status: 409,
+          error: "External meetings cannot be auto-postponed",
+          code: "external_meeting_no_auto_postpone",
+        };
+      }
       // #283: Optimistic-locking guard. The client always sends the
       // `updatedAt` it last observed; if the row has been modified
       // since, refuse to mutate and return the current state + the
@@ -2164,6 +2210,18 @@ router.post(
           isHighlighted: 0,
           notes: stripTagsToPlainTextOrNull(source.notes),
           attachments: source.attachments,
+          // #678: Carry the external-meeting flag onto the copy. Omitting it
+          // silently reset duplicates/repeats to "internal" (default false),
+          // losing the red tint + no-auto-postpone behavior of the source.
+          isExternal: source.isExternal,
+          // Same class of bug: rowColor is a shared editorial signal about
+          // the meeting (urgent / VIP), and the merge overlay is user
+          // content — both should survive a duplicate. mergeText is
+          // re-sanitized like the other rich-text fields above.
+          rowColor: source.rowColor,
+          mergeStartColumn: source.mergeStartColumn,
+          mergeEndColumn: source.mergeEndColumn,
+          mergeText: source.mergeText ? sanitizeRichText(source.mergeText) : source.mergeText,
           createdBy: userId,
           updatedBy: userId,
         };

artifacts/api-server/src/routes/index.ts

@@ -16,6 +16,7 @@ import groupsRouter from "./groups";
 import rolesRouter from "./roles";
 import auditRouter from "./audit";
 import executiveMeetingsRouter from "./executive-meetings";
+import protocolRouter from "./protocol";
 import pushRouter from "./push";
 import systemRouter from "./system";
 
@@ -38,6 +39,7 @@ router.use(groupsRouter);
 router.use(rolesRouter);
 router.use(auditRouter);
 router.use(executiveMeetingsRouter);
+router.use(protocolRouter);
 router.use(pushRouter);
 router.use(systemRouter);
 

artifacts/api-server/src/routes/notes.ts

@@ -1130,6 +1130,8 @@ router.post("/notes/:id/send", requireAuth, async (req, res): Promise<void> => {
         bodyAr: `${senderNameAr} أرسل لك ملاحظة`,
         bodyEn: `${senderName} sent you a note`,
         type: "note",
+        relatedType: "note",
+        relatedId: note.id,
       })
       .returning();
     await emitToUser(r.recipientUserId, "notification_created", { ...notif, type: "note" });
@@ -1143,7 +1145,7 @@ router.post("/notes/:id/send", requireAuth, async (req, res): Promise<void> => {
       type: "note",
       relatedId: note.id,
       tag: `note-${note.id}`,
-      url: "/notes",
+      url: `/notes?thread=${note.id}`,
     });
     await emitToUser(r.recipientUserId, "note_received", {
       noteId: note.id,
@@ -1488,6 +1490,8 @@ router.post("/notes/:id/reply", requireAuth, async (req, res): Promise<void> =>
       bodyAr: `${replierNameAr} رد على ملاحظة`,
       bodyEn: `${replierName} replied on a note`,
       type: "note",
+      relatedType: "note",
+      relatedId: id.id,
     })
     .returning();
   await emitToUser(otherPartyUserId, "notification_created", { ...notif, type: "note" });
@@ -1501,7 +1505,7 @@ router.post("/notes/:id/reply", requireAuth, async (req, res): Promise<void> =>
     type: "note",
     relatedId: id.id,
     tag: `note-reply-${reply.id}`,
-    url: "/notes",
+    url: `/notes?thread=${id.id}`,
   });
   // Enrich the realtime payload so the recipient's client can render the
   // floating reply card without an extra round-trip. We truncate the body

artifacts/api-server/src/routes/service-orders.ts

@@ -117,9 +117,19 @@ async function notifyUser(
   bodyEn: string,
   orderId: number,
   actorId?: number,
+  // Which order surface the deep-link should open: the recipient's own
+  // "My orders" list (status/cancel updates) or the "Incoming orders"
+  // queue (a brand-new order to claim). Drives both the stored
+  // notification's relatedType and the Web Push deep-link URL so a tap
+  // lands on the right page with the order highlighted.
+  target: "mine" | "incoming" = "mine",
 ) {
   // Never notify users about actions they themselves initiated.
   if (actorId !== undefined && actorId === userId) return;
+  const relatedType = target === "incoming" ? "incoming_order" : "order";
+  const deepLinkUrl = `${
+    target === "incoming" ? "/orders/incoming" : "/my-orders"
+  }?order=${orderId}`;
   const [notification] = await db
     .insert(notificationsTable)
     .values({
@@ -130,7 +140,7 @@ async function notifyUser(
       bodyEn,
       type: "order",
       relatedId: orderId,
-      relatedType: "order",
+      relatedType,
     })
     .returning();
   await emitToUser(userId, "notification_created", notification);
@@ -154,7 +164,7 @@ async function notifyUser(
       type: "order",
       relatedId: orderId,
       tag: `order-${orderId}`,
-      url: "/my-orders",
+      url: deepLinkUrl,
     },
     { ignoreConnected: true },
   );
@@ -209,6 +219,7 @@ router.post("/orders", requireAuth, async (req, res): Promise<void> => {
       service.nameEn,
       order.id,
       userId,
+      "incoming",
     );
   }
   await broadcastIncomingChanged(receivers);

artifacts/api-server/src/routes/storage.ts

@@ -4,7 +4,11 @@ import {
   RequestUploadUrlBody,
   RequestUploadUrlResponse,
 } from "@workspace/api-zod";
-import { ObjectStorageService, ObjectNotFoundError } from "../lib/objectStorage";
+import {
+  ObjectStorageService,
+  ObjectNotFoundError,
+  extensionForContentType,
+} from "../lib/objectStorage";
 import { canUserReadObjectPath } from "../lib/objectAuthz";
 import { requireAuth } from "../middlewares/auth";
 
@@ -109,6 +113,34 @@ router.get("/storage/objects/*path", requireAuth, async (req: Request, res: Resp
     res.status(response.status);
     response.headers.forEach((value, key) => res.setHeader(key, value));
 
+    // Opt-in force-download: `?download=1` serves the object as an
+    // attachment (Content-Disposition) so browsers save it instead of
+    // rendering inline. An optional `name` base is combined with the
+    // extension derived from the object's content type.
+    if (req.query.download !== undefined) {
+      const contentType = response.headers.get("content-type") ?? undefined;
+      const ext = extensionForContentType(contentType);
+      const baseRaw =
+        typeof req.query.name === "string" && req.query.name.trim()
+          ? req.query.name
+          : (wildcardPath.split("/").pop() ?? "download");
+      // Strip characters that would break the header or the filesystem.
+      const safeBase = baseRaw
+        .replace(/[\r\n"\\/]/g, "")
+        .replace(/[\u0000-\u001f]/g, "")
+        .trim()
+        .slice(0, 180) || "download";
+      const filename = `${safeBase}.${ext}`;
+      const asciiFallback =
+        filename.replace(/[^\x20-\x7e]/g, "_") || `download.${ext}`;
+      res.setHeader(
+        "Content-Disposition",
+        `attachment; filename="${asciiFallback}"; filename*=UTF-8''${encodeURIComponent(
+          filename,
+        )}`,
+      );
+    }
+
     if (response.body) {
       const nodeStream = Readable.fromWeb(response.body as ReadableStream<Uint8Array>);
       nodeStream.pipe(res);

artifacts/api-server/tests/executive-meetings.test.mjs

@@ -409,6 +409,36 @@ test("Meetings: POST /duplicate clones a meeting onto another date", async () =>
   assert.ok(dayBody.meetings.some((m) => m.id === newRow.id));
 });
 
+// #678: duplicating/repeating must preserve the external-meeting flag
+// (and the shared row colour) instead of silently resetting the copy
+// to a normal internal meeting.
+test("Meetings: POST /duplicate preserves isExternal and rowColor on the copy", async () => {
+  const create = await api(adminCookie, "POST", "/api/executive-meetings", {
+    titleAr: "خارجي",
+    titleEn: "External",
+    meetingDate: today,
+    isExternal: true,
+    attendees: [],
+  });
+  assert.equal(create.status, 201);
+  const original = await create.json();
+  created.meetingIds.push(original.id);
+  assert.equal(original.isExternal, true, "source must be external");
+  assert.equal(original.rowColor, "red", "external source is force-tinted red");
+
+  const dup = await api(
+    adminCookie,
+    "POST",
+    `/api/executive-meetings/${original.id}/duplicate`,
+    { targetDate: tomorrow },
+  );
+  assert.equal(dup.status, 201);
+  const copy = await dup.json();
+  created.meetingIds.push(copy.id);
+  assert.equal(copy.isExternal, true, "duplicate must stay external (#678)");
+  assert.equal(copy.rowColor, "red", "duplicate keeps the red row colour");
+});
+
 // #189: plain-text sanitization for location / meetingUrl / notes.
 test("Sanitization: POST strips HTML from location, meetingUrl, and notes", async () => {
   const create = await api(adminCookie, "POST", "/api/executive-meetings", {

artifacts/api-server/tests/protocol-booking-slots.test.mjs

@@ -0,0 +1,648 @@
+// API contract tests for admin-managed booking slots (أوقات الحجز) and the
+// public lead-time setting. Covers:
+//
+//   1. Admin slot CRUD: create returns 201, duplicate startTime returns 409
+//      with code "duplicate_slot".
+//   2. Settings roundtrip: PATCH minLeadMinutes persists and GET returns it.
+//   3. Public availability reflects booked/tooSoon/available per slot.
+//   4. Public request off-slot -> 400 invalid_slot.
+//   5. Public request on-slot but inside the lead window -> 400 lead_time.
+//   6. Public request on-slot outside the lead window -> 201; a second
+//      request for the same slot conflicts (409).
+//   7. A deactivated slot no longer accepts public requests (while another
+//      slot keeps slot-mode active).
+//   8. Staff (internal POST /protocol/bookings) must still match a slot but
+//      are exempt from the lead time.
+//
+// The suite snapshots and clears protocol_booking_slots + the
+// booking.minLeadMinutes setting up front and restores both in `after`, so
+// it is safe against pre-existing data and repeated runs.
+//
+// NOTE: the public booking endpoint is rate limited at 8 requests / 10 min
+// per IP; this file performs at most 6 public POSTs.
+
+import { test, before, after } from "node:test";
+import assert from "node:assert/strict";
+import pg from "pg";
+
+const API_BASE = process.env.TEST_API_BASE ?? "http://localhost:8080";
+const DATABASE_URL = process.env.DATABASE_URL;
+if (!DATABASE_URL) {
+  throw new Error("DATABASE_URL must be set to run these tests");
+}
+
+const pool = new pg.Pool({ connectionString: DATABASE_URL });
+
+const created = {
+  slotIds: [],
+  roomIds: [],
+  bookingIds: [],
+  userIds: [],
+};
+
+const TEST_PASSWORD = "TestPass123!";
+const TEST_PASSWORD_HASH =
+  "$2b$10$Bs636ukPMyz01nKrsi.5m.JlDXSN22AVCvn8cgPWWDbo5yJRQX2vu";
+
+function uniqueName(prefix) {
+  return `${prefix}_${Date.now().toString(36)}_${Math.random()
+    .toString(36)
+    .slice(2, 8)}`;
+}
+
+// A dedicated protocol_super_admin user (has protocol.rooms.manage +
+// protocol.mutate) so the suite doesn't depend on the real admin password.
+async function createSuperAdmin() {
+  const username = uniqueName("slot_admin");
+  const { rows } = await pool.query(
+    `INSERT INTO users (username, email, password_hash, display_name_en, preferred_language, is_active)
+     VALUES ($1, $2, $3, 'Slot Test Admin', 'en', true) RETURNING id`,
+    [username, `${username}@example.com`, TEST_PASSWORD_HASH],
+  );
+  created.userIds.push(rows[0].id);
+  for (const r of ["user", "protocol_super_admin"]) {
+    await pool.query(
+      `INSERT INTO user_roles (user_id, role_id)
+       SELECT $1, id FROM roles WHERE name = $2
+       ON CONFLICT DO NOTHING`,
+      [rows[0].id, r],
+    );
+  }
+  return username;
+}
+let savedSlots = [];
+let savedLeadRow = null;
+
+function extractCookie(res) {
+  const setCookie = res.headers.get("set-cookie");
+  if (!setCookie) return null;
+  return (
+    setCookie
+      .split(",")
+      .map((c) => c.split(";")[0].trim())
+      .find((c) => c.startsWith("connect.sid=")) ?? null
+  );
+}
+
+async function login(username, password) {
+  const res = await fetch(`${API_BASE}/api/auth/login`, {
+    method: "POST",
+    headers: { "Content-Type": "application/json" },
+    body: JSON.stringify({ username, password }),
+  });
+  assert.equal(res.status, 200, `login should succeed for ${username}`);
+  const cookie = extractCookie(res);
+  assert.ok(cookie, "login response should set a session cookie");
+  return cookie;
+}
+
+async function api(cookie, method, path, body) {
+  const init = {
+    method,
+    headers: {
+      ...(cookie ? { Cookie: cookie } : {}),
+      ...(body !== undefined ? { "Content-Type": "application/json" } : {}),
+    },
+  };
+  if (body !== undefined) init.body = JSON.stringify(body);
+  return fetch(`${API_BASE}/api${path}`, init);
+}
+
+let adminCookie = null;
+let roomId = null;
+
+// Tomorrow's calendar day in Riyadh (fixed +03:00, no DST) so every slot we
+// book is comfortably in the future.
+function riyadhTomorrowYmd() {
+  const now = new Date(Date.now() + (24 * 60 + 180) * 60 * 1000);
+  return now.toISOString().slice(0, 10);
+}
+const day = riyadhTomorrowYmd();
+function isoAt(hhmm, plusMinutes = 0) {
+  const d = new Date(`${day}T${hhmm}:00+03:00`);
+  return new Date(d.getTime() + plusMinutes * 60_000).toISOString();
+}
+
+const SLOT_A = "09:37"; // uncommon times to avoid clashing with real data
+const SLOT_B = "13:41";
+const DURATION = 45;
+
+function publicBody(startsAt, endsAt, title) {
+  return {
+    roomId,
+    title,
+    requesterName: "Slot Test Guest",
+    requesterPhone: "0550000000",
+    meetingType: "internal",
+    startsAt,
+    endsAt,
+  };
+}
+
+before(async () => {
+  adminCookie = await login(await createSuperAdmin(), TEST_PASSWORD);
+
+  // Snapshot + clear pre-existing slots and lead-time setting.
+  savedSlots = (
+    await pool.query(`SELECT * FROM protocol_booking_slots ORDER BY id`)
+  ).rows;
+  await pool.query(`DELETE FROM protocol_booking_slots`);
+  savedLeadRow = (
+    await pool.query(
+      `SELECT value FROM protocol_settings WHERE key = 'booking.minLeadMinutes'`,
+    )
+  ).rows[0] ?? null;
+
+  const roomRes = await api(adminCookie, "POST", "/protocol/rooms", {
+    nameAr: `قاعة اختبار الأوقات ${Date.now().toString(36)}`,
+    nameEn: "Slot Test Room",
+    isActive: true,
+  });
+  assert.equal(roomRes.status, 201, "room creation should succeed");
+  roomId = (await roomRes.json()).id;
+  created.roomIds.push(roomId);
+});
+
+after(async () => {
+  try {
+    if (created.bookingIds.length) {
+      await pool.query(
+        `DELETE FROM protocol_room_bookings WHERE id = ANY($1::int[])`,
+        [created.bookingIds],
+      );
+    }
+    // Also remove any bookings created via the public endpoint against our
+    // test room (ids captured from responses, but belt-and-braces by room).
+    if (created.roomIds.length) {
+      await pool.query(
+        `DELETE FROM protocol_room_bookings WHERE room_id = ANY($1::int[])`,
+        [created.roomIds],
+      );
+      await pool.query(`DELETE FROM protocol_rooms WHERE id = ANY($1::int[])`, [
+        created.roomIds,
+      ]);
+    }
+    if (created.userIds.length) {
+      await pool.query(`DELETE FROM user_roles WHERE user_id = ANY($1::int[])`, [
+        created.userIds,
+      ]);
+      await pool.query(`DELETE FROM users WHERE id = ANY($1::int[])`, [
+        created.userIds,
+      ]);
+    }
+    await pool.query(`DELETE FROM protocol_booking_slots`);
+    for (const s of savedSlots) {
+      await pool.query(
+        `INSERT INTO protocol_booking_slots (id, start_time, duration_minutes, days_of_week, is_active, sort_order, created_at)
+         VALUES ($1, $2, $3, $4, $5, $6, $7)`,
+        [
+          s.id,
+          s.start_time,
+          s.duration_minutes,
+          s.days_of_week,
+          s.is_active,
+          s.sort_order,
+          s.created_at,
+        ],
+      );
+    }
+    if (savedSlots.length) {
+      await pool.query(
+        `SELECT setval(pg_get_serial_sequence('protocol_booking_slots','id'),
+                (SELECT MAX(id) FROM protocol_booking_slots))`,
+      );
+    }
+    if (savedLeadRow) {
+      await pool.query(
+        `INSERT INTO protocol_settings (key, value) VALUES ('booking.minLeadMinutes', $1)
+         ON CONFLICT (key) DO UPDATE SET value = EXCLUDED.value`,
+        [savedLeadRow.value],
+      );
+    } else {
+      await pool.query(
+        `DELETE FROM protocol_settings WHERE key = 'booking.minLeadMinutes'`,
+      );
+    }
+  } finally {
+    await pool.end();
+  }
+});
+
+let slotAId = null;
+let slotBId = null;
+
+test("admin can create slots; duplicate startTime is rejected with 409", async () => {
+  const resA = await api(adminCookie, "POST", "/protocol/booking-slots", {
+    startTime: SLOT_A,
+    durationMinutes: DURATION,
+  });
+  assert.equal(resA.status, 201);
+  slotAId = (await resA.json()).id;
+  created.slotIds.push(slotAId);
+
+  const resB = await api(adminCookie, "POST", "/protocol/booking-slots", {
+    startTime: SLOT_B,
+    durationMinutes: DURATION,
+  });
+  assert.equal(resB.status, 201);
+  slotBId = (await resB.json()).id;
+  created.slotIds.push(slotBId);
+
+  const dup = await api(adminCookie, "POST", "/protocol/booking-slots", {
+    startTime: SLOT_A,
+  });
+  assert.equal(dup.status, 409, "duplicate startTime should 409");
+  assert.equal((await dup.json()).code, "duplicate_slot");
+});
+
+test("minLeadMinutes setting persists via PATCH and GET", async () => {
+  const patch = await api(adminCookie, "PATCH", "/protocol/settings", {
+    minLeadMinutes: 10080,
+  });
+  assert.equal(patch.status, 200);
+  const get = await api(adminCookie, "GET", "/protocol/settings");
+  assert.equal(get.status, 200);
+  assert.equal((await get.json()).minLeadMinutes, 10080);
+});
+
+test("public availability marks slots tooSoon inside the lead window", async () => {
+  // lead is currently 7 days (10080), and our slots are tomorrow -> tooSoon.
+  const res = await fetch(
+    `${API_BASE}/api/protocol/public/availability?roomId=${roomId}&date=${day}`,
+  );
+  assert.equal(res.status, 200);
+  const data = await res.json();
+  assert.equal(data.minLeadMinutes, 10080);
+  const a = data.slots.find((s) => s.id === slotAId);
+  assert.ok(a, "slot A should appear in availability");
+  assert.equal(a.booked, false);
+  assert.equal(a.tooSoon, true);
+  assert.equal(a.available, false);
+});
+
+test("public request off-slot is rejected with invalid_slot", async () => {
+  const res = await api(null, "POST", "/protocol/public/booking-requests",
+    publicBody(isoAt("10:15"), isoAt("10:15", DURATION), "Off-slot request"));
+  assert.equal(res.status, 400);
+  assert.equal((await res.json()).code, "invalid_slot");
+});
+
+test("public request on-slot inside lead window is rejected with lead_time", async () => {
+  const res = await api(null, "POST", "/protocol/public/booking-requests",
+    publicBody(isoAt(SLOT_A), isoAt(SLOT_A, DURATION), "Too-soon request"));
+  assert.equal(res.status, 400);
+  assert.equal((await res.json()).code, "lead_time");
+});
+
+test("public request on-slot outside lead window succeeds; same slot then conflicts", async () => {
+  const patch = await api(adminCookie, "PATCH", "/protocol/settings", {
+    minLeadMinutes: 0,
+  });
+  assert.equal(patch.status, 200);
+
+  const ok = await api(null, "POST", "/protocol/public/booking-requests",
+    publicBody(isoAt(SLOT_A), isoAt(SLOT_A, DURATION), "Valid slot request"));
+  assert.equal(ok.status, 201, "on-slot request should be accepted");
+  const body = await ok.json();
+  assert.ok(body.id, "response should include an id");
+  created.bookingIds.push(body.id);
+
+  const clash = await api(null, "POST", "/protocol/public/booking-requests",
+    publicBody(isoAt(SLOT_A), isoAt(SLOT_A, DURATION), "Clashing request"));
+  assert.equal(clash.status, 409, "same slot should conflict");
+
+  // Availability now reports the slot as booked.
+  const avail = await fetch(
+    `${API_BASE}/api/protocol/public/availability?roomId=${roomId}&date=${day}`,
+  );
+  const data = await avail.json();
+  const a = data.slots.find((s) => s.id === slotAId);
+  assert.equal(a.booked, true);
+  assert.equal(a.available, false);
+});
+
+test("a deactivated slot no longer accepts public requests", async () => {
+  const patch = await api(
+    adminCookie,
+    "PATCH",
+    `/protocol/booking-slots/${slotBId}`,
+    { isActive: false },
+  );
+  assert.equal(patch.status, 200);
+
+  const res = await api(null, "POST", "/protocol/public/booking-requests",
+    publicBody(isoAt(SLOT_B), isoAt(SLOT_B, DURATION), "Disabled slot request"));
+  assert.equal(res.status, 400);
+  assert.equal((await res.json()).code, "invalid_slot");
+
+  // Re-activate for the staff test below.
+  const undo = await api(
+    adminCookie,
+    "PATCH",
+    `/protocol/booking-slots/${slotBId}`,
+    { isActive: true },
+  );
+  assert.equal(undo.status, 200);
+});
+
+test("internal bookings enforce both the slot grid and the lead time", async () => {
+  // Large lead time: internal bookings inside the window must be rejected
+  // just like public ones (no internal bypass).
+  const patch = await api(adminCookie, "PATCH", "/protocol/settings", {
+    minLeadMinutes: 10080,
+  });
+  assert.equal(patch.status, 200);
+
+  const offSlot = await api(adminCookie, "POST", "/protocol/bookings", {
+    roomId,
+    title: "Staff off-slot",
+    requesterName: "Staff",
+    startsAt: isoAt("16:03"),
+    endsAt: isoAt("16:03", DURATION),
+  });
+  assert.equal(offSlot.status, 400, "staff off-slot booking should 400");
+  assert.equal((await offSlot.json()).code, "invalid_slot");
+
+  const insideLead = await api(adminCookie, "POST", "/protocol/bookings", {
+    roomId,
+    title: "Staff on-slot inside lead window",
+    requesterName: "Staff",
+    startsAt: isoAt(SLOT_B),
+    endsAt: isoAt(SLOT_B, DURATION),
+  });
+  assert.equal(
+    insideLead.status,
+    400,
+    "internal booking inside the lead window must be rejected",
+  );
+  assert.equal((await insideLead.json()).code, "lead_time");
+
+  // Outside the lead window (lead back to 0) the same booking succeeds.
+  const reset = await api(adminCookie, "PATCH", "/protocol/settings", {
+    minLeadMinutes: 0,
+  });
+  assert.equal(reset.status, 200);
+  const onSlot = await api(adminCookie, "POST", "/protocol/bookings", {
+    roomId,
+    title: "Staff on-slot outside lead window",
+    requesterName: "Staff",
+    startsAt: isoAt(SLOT_B),
+    endsAt: isoAt(SLOT_B, DURATION),
+  });
+  assert.equal(onSlot.status, 201, "on-slot booking outside lead should 201");
+  created.bookingIds.push((await onSlot.json()).id);
+});
+
+// Authz locked in per Task #704 spec: slot/settings admin endpoints —
+// including reads — require protocol.rooms.manage. Regular protocol users
+// may only read the minimal active-slot list via /booking-slots/active.
+test("protocol viewer can only read active slots; admin reads/writes are 403", async () => {
+  const username = uniqueName("slot_viewer");
+  const { rows } = await pool.query(
+    `INSERT INTO users (username, email, password_hash, display_name_en, preferred_language, is_active)
+     VALUES ($1, $2, $3, 'Slot Test Viewer', 'en', true) RETURNING id`,
+    [username, `${username}@example.com`, TEST_PASSWORD_HASH],
+  );
+  created.userIds.push(rows[0].id);
+  for (const r of ["user", "protocol_viewer"]) {
+    await pool.query(
+      `INSERT INTO user_roles (user_id, role_id)
+       SELECT $1, id FROM roles WHERE name = $2
+       ON CONFLICT DO NOTHING`,
+      [rows[0].id, r],
+    );
+  }
+  const viewerCookie = await login(username, TEST_PASSWORD);
+
+  const active = await api(
+    viewerCookie,
+    "GET",
+    "/protocol/booking-slots/active",
+  );
+  assert.equal(active.status, 200, "viewer should read active slots");
+  const activeRows = await active.json();
+  assert.ok(Array.isArray(activeRows));
+  for (const row of activeRows) {
+    assert.deepEqual(
+      Object.keys(row).sort(),
+      ["daysOfWeek", "durationMinutes", "id", "startTime"],
+      "active endpoint must expose only minimal fields",
+    );
+  }
+
+  const getSlots = await api(viewerCookie, "GET", "/protocol/booking-slots");
+  assert.equal(getSlots.status, 403, "viewer must not read the admin slot list");
+  const getSettings = await api(viewerCookie, "GET", "/protocol/settings");
+  assert.equal(getSettings.status, 403, "viewer must not read settings");
+
+  const post = await api(viewerCookie, "POST", "/protocol/booking-slots", {
+    startTime: "20:20",
+  });
+  assert.equal(post.status, 403, "viewer must not create slots");
+  const gen = await api(viewerCookie, "POST", "/protocol/booking-slots/generate", {
+    startTime: "10:00",
+    endTime: "12:00",
+    durationMinutes: 30,
+    daysOfWeek: [1],
+  });
+  assert.equal(gen.status, 403, "viewer must not generate slots");
+  const patch = await api(viewerCookie, "PATCH", "/protocol/settings", {
+    minLeadMinutes: 5,
+  });
+  assert.equal(patch.status, 403, "viewer must not change settings");
+  const del = await api(
+    viewerCookie,
+    "DELETE",
+    `/protocol/booking-slots/${slotAId}`,
+  );
+  assert.equal(del.status, 403, "viewer must not delete slots");
+});
+
+test("deleting a slot removes it from the admin list", async () => {
+  const del = await api(
+    adminCookie,
+    "DELETE",
+    `/protocol/booking-slots/${slotBId}`,
+  );
+  assert.equal(del.status, 204);
+  const list = await api(adminCookie, "GET", "/protocol/booking-slots");
+  const rows = await list.json();
+  assert.ok(!rows.some((s) => s.id === slotBId));
+});
+// ---------------------------------------------------------------------------
+// Task #710: weekly availability intervals + per-slot days of week.
+// ---------------------------------------------------------------------------
+
+const dayWeekday = new Date(`${day}T00:00:00Z`).getUTCDay();
+const otherWeekday = (dayWeekday + 1) % 7;
+
+test("slots created without daysOfWeek default to every day (legacy behaviour)", async () => {
+  const list = await api(adminCookie, "GET", "/protocol/booking-slots");
+  assert.equal(list.status, 200);
+  const a = (await list.json()).find((s) => s.id === slotAId);
+  assert.ok(a, "slot A should still exist");
+  assert.deepEqual(a.daysOfWeek, [0, 1, 2, 3, 4, 5, 6]);
+});
+
+test("interval generation creates slots, skips duplicates, validates input", async () => {
+  const gen = await api(adminCookie, "POST", "/protocol/booking-slots/generate", {
+    startTime: "18:07",
+    endTime: "19:37",
+    durationMinutes: 30,
+    daysOfWeek: [dayWeekday],
+  });
+  assert.equal(gen.status, 201);
+  const body = await gen.json();
+  assert.equal(body.created, 3, "18:07, 18:37, 19:07 should be generated");
+  assert.equal(body.skipped, 0);
+  assert.deepEqual(
+    body.slots.map((s) => s.startTime).sort(),
+    ["18:07", "18:37", "19:07"],
+  );
+  for (const s of body.slots) {
+    assert.deepEqual(s.daysOfWeek, [dayWeekday]);
+  }
+
+  // Re-running the exact same interval generates nothing new.
+  const again = await api(adminCookie, "POST", "/protocol/booking-slots/generate", {
+    startTime: "18:07",
+    endTime: "19:37",
+    durationMinutes: 30,
+    daysOfWeek: [dayWeekday],
+  });
+  assert.equal(again.status, 201);
+  const b2 = await again.json();
+  assert.equal(b2.created, 0);
+  assert.equal(b2.merged, 0);
+  assert.equal(b2.skipped, 3);
+
+  // Same start times but a *different* day: not a duplicate — the day is
+  // merged into the existing slots instead of being skipped.
+  const otherDayGen = await api(
+    adminCookie,
+    "POST",
+    "/protocol/booking-slots/generate",
+    {
+      startTime: "18:07",
+      endTime: "19:37",
+      durationMinutes: 30,
+      daysOfWeek: [otherWeekday],
+    },
+  );
+  assert.equal(otherDayGen.status, 201);
+  const b2b = await otherDayGen.json();
+  assert.equal(b2b.created, 0);
+  assert.equal(b2b.merged, 3, "different day must merge, not skip");
+  assert.equal(b2b.skipped, 0);
+  for (const s of b2b.slots) {
+    assert.deepEqual(s.daysOfWeek, [dayWeekday, otherWeekday].sort((a, b) => a - b));
+  }
+
+  // Overlapping an existing start time (SLOT_A) only creates the free ones.
+  const overlap = await api(adminCookie, "POST", "/protocol/booking-slots/generate", {
+    startTime: SLOT_A,
+    endTime: isoLikeAdd(SLOT_A, 60),
+    durationMinutes: 30,
+    daysOfWeek: [0, 1, 2, 3, 4, 5, 6],
+  });
+  assert.equal(overlap.status, 201);
+  const b3 = await overlap.json();
+  assert.equal(b3.skipped, 1, "SLOT_A already covers all days → skipped");
+  assert.equal(b3.merged, 0);
+  assert.equal(b3.created, 1);
+
+  // Invalid inputs are rejected.
+  const badRange = await api(adminCookie, "POST", "/protocol/booking-slots/generate", {
+    startTime: "12:00",
+    endTime: "11:00",
+    durationMinutes: 30,
+    daysOfWeek: [1],
+  });
+  assert.equal(badRange.status, 400, "from must be before to");
+  const badDay = await api(adminCookie, "POST", "/protocol/booking-slots/generate", {
+    startTime: "11:00",
+    endTime: "12:00",
+    durationMinutes: 30,
+    daysOfWeek: [7],
+  });
+  assert.equal(badDay.status, 400, "day 7 is invalid");
+  const tooShort = await api(adminCookie, "POST", "/protocol/booking-slots/generate", {
+    startTime: "11:00",
+    endTime: "11:10",
+    durationMinutes: 30,
+    daysOfWeek: [1],
+  });
+  assert.equal(tooShort.status, 400);
+  assert.equal((await tooShort.json()).code, "interval_too_short");
+});
+
+// "HH:mm" plus minutes, staying inside the same day (test helper).
+function isoLikeAdd(hhmm, plusMinutes) {
+  const [h, m] = hhmm.split(":").map(Number);
+  const total = h * 60 + m + plusMinutes;
+  return `${String(Math.floor(total / 60)).padStart(2, "0")}:${String(
+    total % 60,
+  ).padStart(2, "0")}`;
+}
+
+test("availability and booking validation filter slots by weekday", async () => {
+  // A slot only offered on a different weekday than `day`.
+  const res = await api(adminCookie, "POST", "/protocol/booking-slots", {
+    startTime: "21:11",
+    durationMinutes: DURATION,
+    daysOfWeek: [otherWeekday],
+  });
+  assert.equal(res.status, 201);
+  const offDay = await res.json();
+  assert.deepEqual(offDay.daysOfWeek, [otherWeekday]);
+
+  // Public availability for `day` must not list the off-day slot but must
+  // still list slot A (all days).
+  const avail = await fetch(
+    `${API_BASE}/api/protocol/public/availability?roomId=${roomId}&date=${day}`,
+  );
+  assert.equal(avail.status, 200);
+  const data = await avail.json();
+  assert.ok(
+    !data.slots.some((s) => s.id === offDay.id),
+    "off-day slot must be hidden for this date",
+  );
+  assert.ok(
+    data.slots.some((s) => s.id === slotAId),
+    "all-days slot must still be listed",
+  );
+
+  // Internal booking on the off-day slot's time is rejected: right start
+  // time, wrong weekday.
+  const wrongDay = await api(adminCookie, "POST", "/protocol/bookings", {
+    roomId,
+    title: "Wrong weekday booking",
+    requesterName: "Staff",
+    startsAt: isoAt("21:11"),
+    endsAt: isoAt("21:11", DURATION),
+  });
+  assert.equal(wrongDay.status, 400);
+  assert.equal((await wrongDay.json()).code, "invalid_slot");
+
+  // Manual create at the same start time: overlapping day → 409; a
+  // disjoint day is merged into the existing slot instead.
+  const dup = await api(adminCookie, "POST", "/protocol/booking-slots", {
+    startTime: "21:11",
+    durationMinutes: DURATION,
+    daysOfWeek: [otherWeekday],
+  });
+  assert.equal(dup.status, 409, "same time + same day is a duplicate");
+  const mergeDay = (otherWeekday + 1) % 7;
+  const mergedRes = await api(adminCookie, "POST", "/protocol/booking-slots", {
+    startTime: "21:11",
+    durationMinutes: DURATION,
+    daysOfWeek: [mergeDay],
+  });
+  assert.equal(mergedRes.status, 201, "same time + new day merges");
+  const mergedRow = await mergedRes.json();
+  assert.equal(mergedRow.id, offDay.id, "must merge into the existing slot");
+  assert.deepEqual(
+    mergedRow.daysOfWeek,
+    [otherWeekday, mergeDay].sort((a, b) => a - b),
+  );
+});

artifacts/api-server/tests/protocol-rooms-stats.test.mjs

@@ -0,0 +1,208 @@
+// API contract tests for GET /protocol/rooms-stats (لوحة بيانات القاعات).
+// Covers:
+//   1. Auth guard: unauthenticated request -> 401.
+//   2. Shape: rooms{active,inactive}, todayBookings, weekBookings,
+//      pendingBookings, nextBooking, daily (30 zero-filled Riyadh days),
+//      byRoom, byStatus.
+//   3. Counters reflect seeded data: a pending booking tomorrow shows up in
+//      weekBookings + pendingBookings + nextBooking + byRoom/byStatus;
+//      a cancelled booking is excluded from occupancy counters.
+//
+// Seeded rows are deleted in `after`; no global state is mutated.
+
+import { test, before, after } from "node:test";
+import assert from "node:assert/strict";
+import pg from "pg";
+
+const API_BASE = process.env.TEST_API_BASE ?? "http://localhost:8080";
+const DATABASE_URL = process.env.DATABASE_URL;
+if (!DATABASE_URL) {
+  throw new Error("DATABASE_URL must be set to run these tests");
+}
+
+const pool = new pg.Pool({ connectionString: DATABASE_URL });
+
+const created = { roomIds: [], bookingIds: [], userIds: [] };
+
+const TEST_PASSWORD = "TestPass123!";
+const TEST_PASSWORD_HASH =
+  "$2b$10$Bs636ukPMyz01nKrsi.5m.JlDXSN22AVCvn8cgPWWDbo5yJRQX2vu";
+
+function uniqueName(prefix) {
+  return `${prefix}_${Date.now().toString(36)}_${Math.random()
+    .toString(36)
+    .slice(2, 8)}`;
+}
+
+async function createSuperAdmin() {
+  const username = uniqueName("stats_admin");
+  const { rows } = await pool.query(
+    `INSERT INTO users (username, email, password_hash, display_name_en, preferred_language, is_active)
+     VALUES ($1, $2, $3, 'Stats Test Admin', 'en', true) RETURNING id`,
+    [username, `${username}@example.com`, TEST_PASSWORD_HASH],
+  );
+  created.userIds.push(rows[0].id);
+  for (const r of ["user", "protocol_super_admin"]) {
+    await pool.query(
+      `INSERT INTO user_roles (user_id, role_id)
+       SELECT $1, id FROM roles WHERE name = $2
+       ON CONFLICT DO NOTHING`,
+      [rows[0].id, r],
+    );
+  }
+  return { username, id: rows[0].id };
+}
+
+function extractCookie(res) {
+  const setCookie = res.headers.get("set-cookie");
+  if (!setCookie) return null;
+  return (
+    setCookie
+      .split(",")
+      .map((c) => c.split(";")[0].trim())
+      .find((c) => c.startsWith("connect.sid=")) ?? null
+  );
+}
+
+async function login(username, password) {
+  const res = await fetch(`${API_BASE}/api/auth/login`, {
+    method: "POST",
+    headers: { "Content-Type": "application/json" },
+    body: JSON.stringify({ username, password }),
+  });
+  assert.equal(res.status, 200, `login should succeed for ${username}`);
+  const cookie = extractCookie(res);
+  assert.ok(cookie, "login response should set a session cookie");
+  return cookie;
+}
+
+async function api(cookie, method, path) {
+  return fetch(`${API_BASE}/api${path}`, {
+    method,
+    headers: cookie ? { Cookie: cookie } : {},
+  });
+}
+
+let adminCookie = null;
+let adminId = null;
+let roomId = null;
+let baseline = null;
+
+before(async () => {
+  const admin = await createSuperAdmin();
+  adminId = admin.id;
+  adminCookie = await login(admin.username, TEST_PASSWORD);
+
+  // Baseline snapshot before seeding, so assertions are delta-based and
+  // robust against pre-existing data.
+  const res = await api(adminCookie, "GET", "/protocol/rooms-stats");
+  assert.equal(res.status, 200);
+  baseline = await res.json();
+
+  const room = await pool.query(
+    `INSERT INTO protocol_rooms (name_ar, name_en, capacity, is_active)
+     VALUES ($1, $2, 10, true) RETURNING id`,
+    [uniqueName("قاعة_stats"), uniqueName("StatsRoom")],
+  );
+  roomId = room.rows[0].id;
+  created.roomIds.push(roomId);
+
+  // Pending booking tomorrow 10:00-11:00 Riyadh (counts everywhere).
+  const tomorrow = new Date(Date.now() + 24 * 60 * 60 * 1000)
+    .toISOString()
+    .slice(0, 10);
+  const b1 = await pool.query(
+    `INSERT INTO protocol_room_bookings (room_id, title, starts_at, ends_at, status, created_by, booking_reference)
+     VALUES ($1, $2, $3::timestamptz, $4::timestamptz, 'pending', $5, $6) RETURNING id`,
+    [
+      roomId,
+      "Stats test booking",
+      `${tomorrow}T10:00:00+03:00`,
+      `${tomorrow}T11:00:00+03:00`,
+      adminId,
+      uniqueName("REF"),
+    ],
+  );
+  created.bookingIds.push(b1.rows[0].id);
+
+  // Cancelled booking tomorrow (must NOT count in week/pending/nextBooking).
+  const b2 = await pool.query(
+    `INSERT INTO protocol_room_bookings (room_id, title, starts_at, ends_at, status, created_by, booking_reference)
+     VALUES ($1, $2, $3::timestamptz, $4::timestamptz, 'cancelled', $5, $6) RETURNING id`,
+    [
+      roomId,
+      "Stats cancelled booking",
+      `${tomorrow}T12:00:00+03:00`,
+      `${tomorrow}T13:00:00+03:00`,
+      adminId,
+      uniqueName("REF"),
+    ],
+  );
+  created.bookingIds.push(b2.rows[0].id);
+});
+
+after(async () => {
+  if (created.bookingIds.length) {
+    await pool.query(`DELETE FROM protocol_room_bookings WHERE id = ANY($1)`, [
+      created.bookingIds,
+    ]);
+  }
+  if (created.roomIds.length) {
+    await pool.query(`DELETE FROM protocol_rooms WHERE id = ANY($1)`, [
+      created.roomIds,
+    ]);
+  }
+  if (created.userIds.length) {
+    await pool.query(`DELETE FROM user_roles WHERE user_id = ANY($1)`, [
+      created.userIds,
+    ]);
+    await pool.query(`DELETE FROM users WHERE id = ANY($1)`, [
+      created.userIds,
+    ]);
+  }
+  await pool.end();
+});
+
+test("unauthenticated request is rejected", async () => {
+  const res = await api(null, "GET", "/protocol/rooms-stats");
+  assert.equal(res.status, 401);
+});
+
+test("stats shape and seeded counters", async () => {
+  const res = await api(adminCookie, "GET", "/protocol/rooms-stats");
+  assert.equal(res.status, 200);
+  const s = await res.json();
+
+  // Shape
+  assert.equal(typeof s.rooms.active, "number");
+  assert.equal(typeof s.rooms.inactive, "number");
+  assert.equal(typeof s.todayBookings, "number");
+  assert.equal(typeof s.weekBookings, "number");
+  assert.equal(typeof s.pendingBookings, "number");
+  assert.ok(Array.isArray(s.daily));
+  assert.equal(s.daily.length, 30, "daily series is zero-filled to 30 days");
+  for (const d of s.daily) {
+    assert.match(d.date, /^\d{4}-\d{2}-\d{2}$/);
+    assert.equal(typeof d.count, "number");
+  }
+  assert.ok(Array.isArray(s.byRoom));
+  assert.ok(Array.isArray(s.byStatus));
+
+  // Deltas vs baseline
+  assert.equal(s.rooms.active, baseline.rooms.active + 1);
+  assert.equal(s.weekBookings, baseline.weekBookings + 1);
+  assert.equal(s.pendingBookings, baseline.pendingBookings + 1);
+
+  // nextBooking exists and starts in the future; if it is ours, check names.
+  assert.ok(s.nextBooking, "nextBooking should exist after seeding");
+  assert.ok(new Date(s.nextBooking.startsAt).getTime() > Date.now());
+  assert.ok(["pending", "approved"].includes(s.nextBooking.status));
+
+  // Seeded room appears in byRoom with 2 bookings (pending + cancelled are
+  // both inside the 30-day window? cancelled tomorrow is OUTSIDE the window
+  // [today-29d, today+1d) only the ones starting before end of today count).
+  // Tomorrow's bookings start after endOfToday, so byRoom must NOT include
+  // the seeded room unless it had past bookings.
+  const seeded = s.byRoom.find((r) => r.roomId === roomId);
+  assert.equal(seeded, undefined, "future bookings are outside the 30-day window");
+});

artifacts/mockup-sandbox/.replit-artifact/artifact.toml

@@ -0,0 +1,17 @@
+kind = "design"
+previewPath = "/__mockup"
+title = "Canvas"
+version = "1.0.0"
+id = "XegfDyZt7HqfW2Bb8Ghoy"
+
+[[services]]
+localPort = 8081
+name = "Component Preview Server"
+paths = ["/__mockup"]
+
+[services.env]
+PORT = "8081"
+BASE_PATH = "/__mockup"
+
+[services.development]
+run = "pnpm --filter @workspace/mockup-sandbox run dev"

artifacts/tx-os/.replit-artifact/artifact.toml

@@ -0,0 +1,31 @@
+kind = "web"
+previewPath = "/"
+title = "Tx OS"
+version = "1.0.0"
+id = "artifacts/tx-os"
+router = "path"
+
+[[integratedSkills]]
+name = "react-vite"
+version = "1.0.0"
+
+[[services]]
+name = "web"
+paths = [ "/" ]
+localPort = 25785
+
+[services.development]
+run = "pnpm --filter @workspace/tx-os run dev"
+
+[services.production]
+build = [ "pnpm", "--filter", "@workspace/tx-os", "run", "build" ]
+publicDir = "artifacts/tx-os/dist/public"
+serve = "static"
+
+[[services.production.rewrites]]
+from = "/*"
+to = "/index.html"
+
+[services.env]
+PORT = "25785"
+BASE_PATH = "/"

artifacts/tx-os/public/sw.js

@@ -18,7 +18,12 @@ function scopedUrl(relative) {
   // Strip a leading slash from `relative` so URL() treats it as a
   // path under scope rather than origin-relative.
   const cleaned = String(relative || "").replace(/^\/+/, "");
-  return new URL(cleaned, self.registration.scope).pathname;
+  const resolved = new URL(cleaned, self.registration.scope);
+  // Preserve the query string and hash so notification deep-links
+  // (e.g. "/meetings?meeting=12" or "/notes?thread=7") survive the click
+  // handler — taking only .pathname would drop them and land the user on
+  // the generic page instead of the specific item.
+  return resolved.pathname + resolved.search + resolved.hash;
 }
 
 self.addEventListener("install", () => {

artifacts/tx-os/src/App.tsx

@@ -27,6 +27,8 @@ import NotesPage from "@/pages/notes";
 import MyOrdersPage from "@/pages/my-orders";
 import OrdersIncomingPage from "@/pages/orders-incoming";
 import ExecutiveMeetingsPage from "@/pages/executive-meetings";
+import ProtocolPage from "@/pages/protocol";
+import ProtocolRequestPage from "@/pages/protocol-request";
 import EmbeddedAppPage from "@/pages/embedded-app";
 
 const queryClient = new QueryClient({
@@ -73,6 +75,8 @@ function Router() {
         <Route path="/my-orders" component={MyOrdersPage} />
         <Route path="/orders/incoming" component={OrdersIncomingPage} />
         <Route path="/meetings" component={ExecutiveMeetingsPage} />
+        <Route path="/protocol" component={ProtocolPage} />
+        <Route path="/protocol/:tab" component={ProtocolPage} />
         {/* Back-compat redirect: the page used to live at
             /executive-meetings. Stored PDFs, email links, and bookmarks
             still point there, so catch the old path (and any deep
@@ -94,7 +98,16 @@ function App() {
     <QueryClientProvider client={queryClient}>
       <TooltipProvider>
         <WouterRouter base={import.meta.env.BASE_URL.replace(/\/$/, "")}>
-          <Router />
+          {/* The public room booking request form must render for logged-OUT
+              guests, so it lives OUTSIDE <Router> (and thus outside
+              AuthProvider, which redirects unauthenticated users to /login).
+              The catch-all falls through to the authenticated app. */}
+          <Switch>
+            <Route path="/protocol/request" component={ProtocolRequestPage} />
+            <Route>
+              <Router />
+            </Route>
+          </Switch>
         </WouterRouter>
         <Toaster />
       </TooltipProvider>

artifacts/tx-os/src/components/attendee-table-editor.tsx

@@ -0,0 +1,168 @@
+import { Plus, X } from "lucide-react";
+import { Input } from "@/components/ui/input";
+import {
+  Select,
+  SelectContent,
+  SelectItem,
+  SelectTrigger,
+  SelectValue,
+} from "@/components/ui/select";
+
+export type EditableAttendeeRow = {
+  name: string;
+  position: string;
+  side: "internal" | "external";
+};
+
+export const MAX_ATTENDEE_ROWS = 50;
+
+export function emptyAttendeeRow(): EditableAttendeeRow {
+  return { name: "", position: "", side: "internal" };
+}
+
+// Keep the number of editable rows in sync with the expected attendee count:
+// growing adds empty rows at the bottom; shrinking only removes empty rows
+// from the bottom (never a row the user already typed into). Always keeps at
+// least one row so the table is never empty.
+export function syncAttendeeRows(
+  rows: EditableAttendeeRow[],
+  count: number | null,
+): EditableAttendeeRow[] {
+  if (count == null || !Number.isFinite(count) || count < 1) return rows;
+  const target = Math.min(Math.floor(count), MAX_ATTENDEE_ROWS);
+  if (rows.length < target) {
+    return [
+      ...rows,
+      ...Array.from({ length: target - rows.length }, emptyAttendeeRow),
+    ];
+  }
+  if (rows.length > target) {
+    const next = [...rows];
+    while (
+      next.length > target &&
+      next.length > 1 &&
+      next[next.length - 1].name.trim() === "" &&
+      next[next.length - 1].position.trim() === ""
+    ) {
+      next.pop();
+    }
+    return next;
+  }
+  return rows;
+}
+
+export type AttendeeTableLabels = {
+  name: string;
+  position: string;
+  side: string;
+  sideInternal: string;
+  sideExternal: string;
+  addRow: string;
+  removeRow: string;
+};
+
+// Numbered "أبرز الحضور" table: # | name | position | side | remove.
+export function AttendeeTableEditor({
+  rows,
+  setRows,
+  labels,
+}: {
+  rows: EditableAttendeeRow[];
+  setRows: React.Dispatch<React.SetStateAction<EditableAttendeeRow[]>>;
+  labels: AttendeeTableLabels;
+}) {
+  const update = (
+    idx: number,
+    patch: Partial<EditableAttendeeRow>,
+  ) =>
+    setRows((rs) => rs.map((r, i) => (i === idx ? { ...r, ...patch } : r)));
+
+  return (
+    <div className="space-y-2">
+      <div className="overflow-x-auto rounded-lg border border-slate-200">
+        <table className="w-full text-sm">
+          <thead>
+            <tr className="border-b border-slate-200 bg-slate-50 text-start text-xs font-semibold text-slate-600">
+              <th className="w-10 px-2 py-2 text-center">#</th>
+              <th className="px-2 py-2 text-start">{labels.name}</th>
+              <th className="px-2 py-2 text-start">{labels.position}</th>
+              <th className="w-36 px-2 py-2 text-start">{labels.side}</th>
+              <th className="w-10 px-1 py-2" />
+            </tr>
+          </thead>
+          <tbody>
+            {rows.map((row, idx) => (
+              <tr key={idx} className="border-b border-slate-100 last:border-b-0">
+                <td className="px-2 py-1.5 text-center font-medium text-slate-500">
+                  {idx + 1}
+                </td>
+                <td className="px-2 py-1.5">
+                  <Input
+                    className="h-8"
+                    value={row.name}
+                    onChange={(e) => update(idx, { name: e.target.value })}
+                    placeholder={labels.name}
+                  />
+                </td>
+                <td className="px-2 py-1.5">
+                  <Input
+                    className="h-8"
+                    value={row.position}
+                    onChange={(e) => update(idx, { position: e.target.value })}
+                    placeholder={labels.position}
+                  />
+                </td>
+                <td className="px-2 py-1.5">
+                  <Select
+                    value={row.side}
+                    onValueChange={(v) =>
+                      update(idx, { side: v as "internal" | "external" })
+                    }
+                  >
+                    <SelectTrigger className="h-8">
+                      <SelectValue />
+                    </SelectTrigger>
+                    <SelectContent>
+                      <SelectItem value="internal">
+                        {labels.sideInternal}
+                      </SelectItem>
+                      <SelectItem value="external">
+                        {labels.sideExternal}
+                      </SelectItem>
+                    </SelectContent>
+                  </Select>
+                </td>
+                <td className="px-1 py-1.5 text-center">
+                  {rows.length > 1 && (
+                    <button
+                      type="button"
+                      onClick={() =>
+                        setRows((rs) => rs.filter((_, i) => i !== idx))
+                      }
+                      className="p-1 text-slate-400 hover:text-rose-500"
+                      aria-label={labels.removeRow}
+                    >
+                      <X className="h-4 w-4" />
+                    </button>
+                  )}
+                </td>
+              </tr>
+            ))}
+          </tbody>
+        </table>
+      </div>
+      <button
+        type="button"
+        onClick={() =>
+          setRows((rs) =>
+            rs.length >= MAX_ATTENDEE_ROWS ? rs : [...rs, emptyAttendeeRow()],
+          )
+        }
+        className="flex items-center gap-1 text-sm font-medium text-sky-600 hover:text-sky-700"
+      >
+        <Plus className="h-4 w-4" />
+        {labels.addRow}
+      </button>
+    </div>
+  );
+}

artifacts/tx-os/src/components/date-time-picker.tsx

@@ -0,0 +1,224 @@
+import * as React from "react";
+import { CalendarClock } from "lucide-react";
+import { cn } from "@/lib/utils";
+import { Button } from "@/components/ui/button";
+import { Calendar } from "@/components/ui/calendar";
+import {
+  Popover,
+  PopoverContent,
+  PopoverTrigger,
+} from "@/components/ui/popover";
+
+const AR_LATN = "ar-u-nu-latn";
+
+function pad(n: number): string {
+  return String(n).padStart(2, "0");
+}
+
+// Value contract: local wall-clock string "YYYY-MM-DDTHH:mm" (same shape a
+// native datetime-local input produces) or "" when nothing is selected.
+function parseValue(value: string): Date | undefined {
+  if (!value) return undefined;
+  const d = new Date(value);
+  return Number.isNaN(d.getTime()) ? undefined : d;
+}
+
+function toValue(d: Date): string {
+  return `${d.getFullYear()}-${pad(d.getMonth() + 1)}-${pad(d.getDate())}T${pad(
+    d.getHours(),
+  )}:${pad(d.getMinutes())}`;
+}
+
+function to24(hour12: number, period: "am" | "pm"): number {
+  if (period === "am") return hour12 === 12 ? 0 : hour12;
+  return hour12 === 12 ? 12 : hour12 + 12;
+}
+
+const HOURS_12 = Array.from({ length: 12 }, (_, i) => i + 1);
+const MINUTES = Array.from({ length: 12 }, (_, i) => i * 5);
+
+function TimeColumn({
+  values,
+  active,
+  onSelect,
+  format,
+  ariaLabel,
+}: {
+  values: number[];
+  active: number;
+  onSelect: (v: number) => void;
+  format: (v: number) => string;
+  ariaLabel: string;
+}) {
+  const activeRef = React.useRef<HTMLButtonElement>(null);
+  React.useEffect(() => {
+    activeRef.current?.scrollIntoView({ block: "center" });
+  }, [active]);
+
+  return (
+    <div
+      role="listbox"
+      aria-label={ariaLabel}
+      className="h-40 w-14 overflow-y-auto rounded-md border p-1"
+    >
+      <div className="flex flex-col gap-1">
+        {values.map((v) => {
+          const isActive = v === active;
+          return (
+            <Button
+              key={v}
+              ref={isActive ? activeRef : undefined}
+              type="button"
+              size="sm"
+              variant={isActive ? "default" : "ghost"}
+              className="h-8 w-full shrink-0"
+              onClick={() => onSelect(v)}
+            >
+              {format(v)}
+            </Button>
+          );
+        })}
+      </div>
+    </div>
+  );
+}
+
+export function DateTimePicker({
+  id,
+  value,
+  onChange,
+  placeholder = "اختر التاريخ والوقت",
+  disabled,
+  minDate,
+}: {
+  id?: string;
+  value: string;
+  onChange: (v: string) => void;
+  placeholder?: string;
+  disabled?: boolean;
+  minDate?: Date;
+}) {
+  const [open, setOpen] = React.useState(false);
+  const selected = parseValue(value);
+
+  const hour12 = selected ? selected.getHours() % 12 || 12 : 9;
+  const minute = selected ? selected.getMinutes() : 0;
+  const period: "am" | "pm" = selected
+    ? selected.getHours() < 12
+      ? "am"
+      : "pm"
+    : "am";
+
+  const baseDate = (): Date => {
+    if (selected) return new Date(selected);
+    const d = minDate ? new Date(minDate) : new Date();
+    d.setHours(9, 0, 0, 0);
+    return d;
+  };
+
+  const commit = (next: Date) => onChange(toValue(next));
+
+  const handleDay = (day: Date | undefined) => {
+    if (!day) return;
+    const base = baseDate();
+    const next = new Date(day);
+    next.setHours(base.getHours(), base.getMinutes(), 0, 0);
+    commit(next);
+  };
+
+  const handleHour = (h: number) => {
+    const next = baseDate();
+    next.setHours(to24(h, period), next.getMinutes(), 0, 0);
+    commit(next);
+  };
+
+  const handleMinute = (m: number) => {
+    const next = baseDate();
+    next.setMinutes(m, 0, 0);
+    commit(next);
+  };
+
+  const handlePeriod = (p: "am" | "pm") => {
+    const next = baseDate();
+    next.setHours(to24(hour12, p), next.getMinutes(), 0, 0);
+    commit(next);
+  };
+
+  const label = selected
+    ? new Intl.DateTimeFormat(AR_LATN, {
+        dateStyle: "medium",
+        timeStyle: "short",
+      }).format(selected)
+    : placeholder;
+
+  return (
+    <Popover open={open} onOpenChange={setOpen}>
+      <PopoverTrigger asChild>
+        <Button
+          id={id}
+          type="button"
+          variant="outline"
+          disabled={disabled}
+          className={cn(
+            "w-full justify-between font-normal",
+            !selected && "text-muted-foreground",
+          )}
+        >
+          <span className="truncate">{label}</span>
+          <CalendarClock className="size-4 shrink-0 opacity-60" />
+        </Button>
+      </PopoverTrigger>
+      <PopoverContent className="w-auto p-0" align="start">
+        <Calendar
+          mode="single"
+          selected={selected}
+          onSelect={handleDay}
+          defaultMonth={selected ?? minDate ?? new Date()}
+          disabled={minDate ? { before: minDate } : undefined}
+          autoFocus
+        />
+        <div className="border-t p-3">
+          <div className="mb-2 text-center text-xs font-medium text-muted-foreground">
+            الوقت
+          </div>
+          <div className="flex items-stretch justify-center gap-2">
+            <TimeColumn
+              values={HOURS_12}
+              active={hour12}
+              onSelect={handleHour}
+              format={pad}
+              ariaLabel="الساعة"
+            />
+            <div className="flex items-center text-muted-foreground">:</div>
+            <TimeColumn
+              values={MINUTES}
+              active={minute}
+              onSelect={handleMinute}
+              format={pad}
+              ariaLabel="الدقيقة"
+            />
+            <div className="flex flex-col justify-center gap-1">
+              {(["am", "pm"] as const).map((p) => (
+                <Button
+                  key={p}
+                  type="button"
+                  size="sm"
+                  variant={period === p ? "default" : "outline"}
+                  className="h-8 w-12"
+                  onClick={() => handlePeriod(p)}
+                >
+                  {p === "am" ? "ص" : "م"}
+                </Button>
+              ))}
+            </div>
+          </div>
+        </div>
+        <div className="flex justify-end border-t p-2">
+          <Button type="button" size="sm" onClick={() => setOpen(false)}>
+            تم
+          </Button>
+        </div>
+      </PopoverContent>
+    </Popover>
+  );
+}

artifacts/tx-os/src/components/executive-meetings/upcoming-meeting-alert.tsx

@@ -80,6 +80,10 @@ type Meeting = {
   // when another user mutated this meeting after it was loaded. Server
   // sets it on every update; client echoes it back as expectedUpdatedAt.
   updatedAt: string;
+  // #635: external meeting flag — the alert "Postpone" button is
+  // disabled when true (the server also rejects with
+  // `external_meeting_no_auto_postpone`).
+  isExternal?: boolean;
 };
 type DayResponse = { date: string; meetings: Meeting[] };
 type AlertState = {
@@ -698,7 +702,14 @@ export function UpcomingMeetingAlert() {
               size="sm"
               variant="outline"
               onClick={() => setPostponeOpen(true)}
-              disabled={savingAction !== null}
+              // #635: external meetings can't be auto-postponed (the
+              // server also rejects with external_meeting_no_auto_postpone).
+              disabled={savingAction !== null || meeting.isExternal === true}
+              title={
+                meeting.isExternal
+                  ? t("executiveMeetings.alert.externalCannotPostpone")
+                  : undefined
+              }
               data-testid="alert-postpone"
             >
               {t("executiveMeetings.alert.postpone")}
@@ -1145,6 +1156,20 @@ function PostponeDialog({
     }
   };
   const handleErr = (err: unknown) => {
+    // #635: map the external-meeting 409 to the localized reason so
+    // schedule quick-action callers don't show the raw English error
+    // from the server.
+    const code =
+      err && typeof err === "object" && "code" in err
+        ? (err as { code?: unknown }).code
+        : undefined;
+    if (code === "external_meeting_no_auto_postpone") {
+      toast({
+        title: t("executiveMeetings.alert.externalCannotPostpone"),
+        variant: "destructive",
+      });
+      return;
+    }
     toast({
       title: t("executiveMeetings.alert.saveFailed"),
       description: err instanceof Error ? err.message : String(err),

artifacts/tx-os/src/components/notes/send-note-dialog.tsx

@@ -162,14 +162,31 @@ export function SendNoteDialog({
   const dialogStyle: React.CSSProperties | undefined = keyboardActive
     ? {
         top: vv.offsetTop + vv.height / 2 - KEYBOARD_PREDICTION_INSET,
+        left: "50%",
         transform: "translate(-50%, -50%)",
         transition: "top 120ms ease",
       }
     : keyboardFallback
       ? {
-          top: "6vh",
+          // #634: bind `top` to `visualViewport.offsetTop` so when iPad
+          // PWA Safari scrolls the layout viewport down behind the
+          // soft keyboard, our top anchor follows the visible area
+          // instead of landing above it (which previously hid the
+          // dialog title + search input).
+          top: `calc(${vv.offsetTop || 0}px + 6vh)`,
+          // #634: pin `left: 50%` explicitly. Radix already sets it
+          // via Tailwind, but the inline `transform` below replaces
+          // Tailwind's `translate-x-[-50%] translate-y-[-50%]` so we
+          // also restate the horizontal anchor to defend against any
+          // animation/RTL interplay that was shifting the box left.
+          left: "50%",
           transform: "translate(-50%, 0)",
           maxHeight: "50dvh",
+          // #634: allow the dialog itself to scroll when its content
+          // is taller than the cap — otherwise the header could be
+          // clipped while only the bottom of the list/buttons stayed
+          // visible.
+          overflowY: "auto",
           transition: "top 120ms ease, transform 120ms ease",
         }
       : undefined;

artifacts/tx-os/src/components/ui/calendar.tsx

@@ -7,16 +7,33 @@ import {
   ChevronRightIcon,
 } from "lucide-react"
 import { DayButton, DayPicker, getDefaultClassNames } from "react-day-picker"
+import { ar as dfAr, enUS as dfEn } from "date-fns/locale"
 
 import { cn } from "@/lib/utils"
 import { Button, buttonVariants } from "@/components/ui/button"
 import i18n from "@/i18n"
 
+function isArabic(): boolean {
+  // The public booking page forces Arabic by setting documentElement.lang/dir
+  // without changing i18n.language, so prefer the DOM signal (i18n keeps it in
+  // sync elsewhere) and fall back to the i18n language.
+  if (typeof document !== "undefined") {
+    const el = document.documentElement
+    if (el.lang) return el.lang.toLowerCase().startsWith("ar")
+    if (el.dir) return el.dir === "rtl"
+  }
+  return i18n.language === "ar"
+}
+
 function activeLocaleLatn(): string {
-  const lang = i18n.language === "ar" ? "ar" : "en-US"
+  const lang = isArabic() ? "ar" : "en-US"
   return `${lang}-u-nu-latn`
 }
 
+function activeDfLocale() {
+  return isArabic() ? dfAr : dfEn
+}
+
 function Calendar({
   className,
   classNames,
@@ -41,9 +58,15 @@ function Calendar({
         className
       )}
       captionLayout={captionLayout}
+      locale={activeDfLocale()}
+      dir={isArabic() ? "rtl" : "ltr"}
       formatters={{
         formatMonthDropdown: (date) =>
           new Intl.DateTimeFormat(activeLocaleLatn(), { month: "short", numberingSystem: "latn" }).format(date),
+        formatCaption: (date) =>
+          new Intl.DateTimeFormat(activeLocaleLatn(), { month: "long", year: "numeric", numberingSystem: "latn" }).format(date),
+        formatDay: (date) =>
+          new Intl.DateTimeFormat(activeLocaleLatn(), { day: "numeric", numberingSystem: "latn" }).format(date),
         ...formatters,
       }}
       classNames={{

artifacts/tx-os/src/components/ui/switch.tsx

@@ -17,7 +17,12 @@ const Switch = React.forwardRef<
   >
     <SwitchPrimitives.Thumb
       className={cn(
-        "pointer-events-none block h-4 w-4 rounded-full bg-background shadow-lg ring-0 transition-transform data-[state=checked]:ltr:translate-x-4 data-[state=checked]:rtl:-translate-x-4 data-[state=unchecked]:ltr:translate-x-0 data-[state=unchecked]:rtl:translate-x-4"
+        // #682: in RTL the flex container already places the resting
+        // (unchecked) thumb at the track's start edge, so unchecked must
+        // be translate-x-0 in BOTH directions. The old rtl:translate-x-4
+        // pushed the resting thumb sideways, making OFF look like ON in
+        // Arabic. Checked travel: +x in LTR, -x in RTL.
+        "pointer-events-none block h-4 w-4 rounded-full bg-background shadow-lg ring-0 transition-transform data-[state=unchecked]:translate-x-0 data-[state=checked]:ltr:translate-x-4 data-[state=checked]:rtl:-translate-x-4"
       )}
     />
   </SwitchPrimitives.Root>

artifacts/tx-os/src/locales/ar.json

@@ -971,7 +971,9 @@
     "appName": "نظام Tx",
     "previous": "السابق",
     "next": "التالي",
-    "empty": "(فارغ)"
+    "empty": "(فارغ)",
+    "back": "رجوع",
+    "confirmDelete": "تأكيد الحذف"
   },
   "embeddedFrame": {
     "title": "تطبيق مدمج",
@@ -1246,6 +1248,7 @@
       "atTime": "في {{time}}",
       "done": "تم",
       "postpone": "تأجيل",
+      "externalCannotPostpone": "لا يمكن تأجيل اجتماع خارجي تلقائياً.",
       "dismiss": "تجاهل التنبيه",
       "dragHandle": "اسحب للتحريك",
       "dismissToast": "تم تجاهل التنبيه",
@@ -1474,7 +1477,11 @@
         "platform": "المنصة",
         "status": "الحالة",
         "isHighlighted": "تمييز (لون أحمر)",
-        "notes": "ملاحظات"
+        "notes": "ملاحظات",
+        "isExternal": "اجتماع خارجي",
+        "isExternalHint": "يصبح صف الاجتماع باللون الأحمر تلقائياً، ولا يدخل في التأجيل التلقائي.",
+        "isExternalOn": "نعم",
+        "isExternalOff": "لا"
       },
       "attendees": {
         "label": "قائمة الحضور",
@@ -1651,5 +1658,334 @@
       "saved": "تم الحفظ",
       "reset": "إعادة الافتراضي"
     }
+  },
+  "protocol": {
+    "title": "المراسم والعلاقات العامة",
+    "menuToggle": "إظهار/إخفاء القائمة",
+    "notes": "ملاحظات",
+    "statusLabel": "الحالة",
+    "confirmReject": "هل أنت متأكد من رفض هذا الطلب؟",
+    "confirmDelete": "لا يمكن التراجع عن هذا الإجراء.",
+    "tabs": {
+      "dashboard": "لوحة المعلومات",
+      "roomsGroup": "إدارة القاعات",
+      "roomsDashboard": "لوحة القاعات",
+      "bookingSettings": "الإعدادات",
+      "bookings": "الحجوزات",
+      "external": "اجتماعات خارجية",
+      "giftsGroup": "الهدايا",
+      "gifts": "المستودع",
+      "issues": "الإهداءات",
+      "photos": "الصور",
+      "reports": "التقارير",
+      "audit": "سجل النشاط",
+      "rooms": "القاعات"
+    },
+    "status": {
+      "pending": "قيد الانتظار",
+      "approved": "معتمد",
+      "rejected": "مرفوض",
+      "cancelled": "ملغى",
+      "issued": "تم الصرف",
+      "scheduled": "مجدول",
+      "completed": "منجز"
+    },
+    "giftKind": {
+      "gift": "هدية",
+      "shield": "درع"
+    },
+    "actions": {
+      "approve": "اعتماد",
+      "reject": "رفض",
+      "cancel": "إلغاء",
+      "approveIssue": "اعتماد وصرف"
+    },
+    "errors": {
+      "generic": "تعذّر إتمام العملية."
+    },
+    "dashboard": {
+      "activeRooms": "القاعات المتاحة",
+      "todayBookings": "حجوزات اليوم",
+      "pendingBookings": "حجوزات بانتظار الاعتماد",
+      "upcomingExternal": "لقاءات خارجية قادمة",
+      "giftStock": "إجمالي مخزون الهدايا",
+      "pendingIssues": "إهداءات معلّقة",
+      "roomsAvailableNow": "القاعات المتاحة الآن",
+      "giftsIssuedThisMonth": "الدروع المصروفة هذا الشهر"
+    },
+    "roomsDash": {
+      "title": "لوحة بيانات القاعات",
+      "roomsCount": "عدد القاعات",
+      "roomsBreakdown": "{{active}} نشطة · {{inactive}} معطلة",
+      "todayBookings": "حجوزات اليوم",
+      "weekBookings": "حجوزات الأسبوع",
+      "pendingBookings": "طلبات معلّقة",
+      "nextBooking": "أقرب حجز قادم",
+      "noUpcoming": "لا توجد حجوزات قادمة",
+      "startingNow": "يبدأ الآن",
+      "inDays_zero": "بعد أقل من يوم",
+      "inDays_one": "بعد يوم واحد",
+      "inDays_two": "بعد يومين",
+      "inDays_few": "بعد {{count}} أيام",
+      "inDays_many": "بعد {{count}} يوماً",
+      "inDays_other": "بعد {{count}} يوم",
+      "inHoursMinutes": "بعد {{hours}} ساعة و{{minutes}} دقيقة",
+      "inMinutes_zero": "بعد أقل من دقيقة",
+      "inMinutes_one": "بعد دقيقة واحدة",
+      "inMinutes_two": "بعد دقيقتين",
+      "inMinutes_few": "بعد {{count}} دقائق",
+      "inMinutes_many": "بعد {{count}} دقيقة",
+      "inMinutes_other": "بعد {{count}} دقيقة",
+      "bookingsOverTime": "الحجوزات عبر الأيام",
+      "lastNDays": "آخر {{count}} يوماً",
+      "bookings": "حجوزات",
+      "byRoom": "التوزيع حسب القاعة",
+      "byStatus": "التوزيع حسب الحالة",
+      "noData": "لا توجد بيانات بعد",
+      "noAccess": "ليس لديك صلاحية للوصول إلى هذه الصفحة.",
+      "windowHint": "تشمل الرسوم البيانية حجوزات آخر 30 يوماً بتوقيت الرياض."
+    },
+    "bookings": {
+      "new": "حجز جديد",
+      "edit": "تعديل الحجز",
+      "empty": "لا توجد حجوزات.",
+      "requester": "مقدّم الطلب",
+      "org": "الجهة",
+      "phone": "الهاتف",
+      "attendeeCount": "العدد المتوقع للحضور",
+      "publicRequest": "طلب عام",
+      "today": "اليوم",
+      "bulk": {
+        "selectAll": "تحديد الكل",
+        "selectRow": "تحديد الحجز {{number}}",
+        "clearSelection": "إلغاء التحديد",
+        "selectedCount_one": "تم تحديد حجز واحد",
+        "selectedCount_two": "تم تحديد حجزين",
+        "selectedCount_few": "تم تحديد {{count}} حجوزات",
+        "selectedCount_many": "تم تحديد {{count}} حجزاً",
+        "selectedCount_other": "تم تحديد {{count}} حجز",
+        "delete": "حذف",
+        "deleteConfirmTitle_one": "حذف حجز واحد؟",
+        "deleteConfirmTitle_two": "حذف حجزين؟",
+        "deleteConfirmTitle_few": "حذف {{count}} حجوزات؟",
+        "deleteConfirmTitle_many": "حذف {{count}} حجزاً؟",
+        "deleteConfirmTitle_other": "حذف {{count}} حجز؟",
+        "deleteConfirmBody_one": "سيتم حذف حجز واحد نهائياً. لا يمكن التراجع.",
+        "deleteConfirmBody_two": "سيتم حذف حجزين نهائياً. لا يمكن التراجع.",
+        "deleteConfirmBody_few": "سيتم حذف {{count}} حجوزات نهائياً. لا يمكن التراجع.",
+        "deleteConfirmBody_many": "سيتم حذف {{count}} حجزاً نهائياً. لا يمكن التراجع.",
+        "deleteConfirmBody_other": "سيتم حذف {{count}} حجز نهائياً. لا يمكن التراجع.",
+        "deleted_one": "تم حذف حجز واحد",
+        "deleted_two": "تم حذف حجزين",
+        "deleted_few": "تم حذف {{count}} حجوزات",
+        "deleted_many": "تم حذف {{count}} حجزاً",
+        "deleted_other": "تم حذف {{count}} حجز",
+        "deletePartial": "تم حذف {{deleted}} من {{total}}، تعذّر حذف الباقي"
+      },
+      "reference": "رقم الحجز",
+      "department": "الإدارة",
+      "entity": "اسم الجهة",
+      "purpose": "الغرض من الاجتماع",
+      "meetingType": "نوع الاجتماع",
+      "meetingTypes": {
+        "internal": "اجتماع داخلي",
+        "external": "اجتماع مع جهة خارجية"
+      },
+      "keyAttendees": "أبرز الحضور",
+      "attendeeSides": {
+        "internal": "من الهيئة",
+        "external": "خارج الهيئة"
+      },
+      "searchPlaceholder": "ابحث برقم الحجز أو الهاتف…",
+      "searchEmpty": "لا توجد حجوزات مطابقة.",
+      "roomLabel": "القاعة",
+      "titleLabel": "عنوان الحجز",
+      "startsAt": "من",
+      "endsAt": "إلى",
+      "viewList": "قائمة",
+      "viewCalendar": "تقويم",
+      "book": "حجز",
+      "emptyDay": "لا توجد حجوزات في هذا اليوم.",
+      "shareLinkTitle": "رابط الحجز العام (للمشاركة مع الضيوف)",
+      "copyLink": "نسخ الرابط",
+      "linkCopied": "تم نسخ الرابط",
+      "linkCopyFailed": "تعذّر نسخ الرابط",
+      "table": {
+        "number": "رقم الحجز",
+        "requester": "مقدم الطلب",
+        "date": "تاريخ الحجز",
+        "type": "نوع الاجتماع",
+        "roomAttendees": "القاعة وعدد الحضور",
+        "status": "الحالة",
+        "actions": "الإجراء",
+        "attendeesShort": "الحضور"
+      },
+      "meetingTypesShort": {
+        "internal": "داخلي",
+        "external": "خارجي"
+      },
+      "details": {
+        "date": "التاريخ",
+        "time": "الوقت",
+        "duration": "المدة",
+        "requesterSection": "بيانات مقدّم الطلب",
+        "meetingSection": "تفاصيل الاجتماع",
+        "notes": "ملاحظات",
+        "rejectionReason": "سبب الرفض",
+        "attendeeCols": {
+          "name": "الاسم",
+          "position": "الصفة",
+          "side": "الجهة"
+        },
+        "source": "مصدر الطلب",
+        "sources": {
+          "internal": "داخلي",
+          "public": "طلب عام"
+        },
+        "durationHours_zero": "{{count}} ساعة",
+        "durationHours_one": "ساعة واحدة",
+        "durationHours_two": "ساعتان",
+        "durationHours_few": "{{count}} ساعات",
+        "durationHours_many": "{{count}} ساعة",
+        "durationHours_other": "{{count}} ساعة",
+        "durationMinutes_zero": "{{count}} دقيقة",
+        "durationMinutes_one": "دقيقة واحدة",
+        "durationMinutes_two": "دقيقتان",
+        "durationMinutes_few": "{{count}} دقائق",
+        "durationMinutes_many": "{{count}} دقيقة",
+        "durationMinutes_other": "{{count}} دقيقة"
+      },
+      "form": {
+        "name": "الاسم",
+        "position": "المنصب",
+        "side": "الجهة",
+        "addRow": "إضافة صف",
+        "removeRow": "حذف الصف"
+      },
+      "openLink": "فتح"
+    },
+    "external": {
+      "new": "لقاء جديد",
+      "edit": "تعديل اللقاء",
+      "empty": "لا توجد لقاءات خارجية.",
+      "titleLabel": "عنوان اللقاء",
+      "party": "الجهة",
+      "location": "المكان",
+      "startsAt": "التاريخ والوقت"
+    },
+    "gifts": {
+      "new": "صنف جديد",
+      "edit": "تعديل الصنف",
+      "empty": "لا توجد أصناف.",
+      "stock": "المخزون",
+      "nameAr": "الاسم (عربي)",
+      "nameEn": "الاسم (إنجليزي)",
+      "kind": "النوع"
+    },
+    "rooms": {
+      "new": "قاعة جديدة",
+      "edit": "تعديل القاعة",
+      "title": "القاعات",
+      "inactive": "غير مفعّلة",
+      "nameAr": "الاسم (عربي)",
+      "nameEn": "الاسم (إنجليزي)",
+      "capacity": "السعة",
+      "location": "الموقع",
+      "active": "مفعّلة",
+      "isActive": "مفعّلة",
+      "status": "الحالة",
+      "actions": "الإجراء",
+      "empty": "لا توجد قاعات."
+    },
+    "issues": {
+      "new": "إهداء جديد",
+      "empty": "لا توجد إهداءات.",
+      "recipient": "المستفيد",
+      "gift": "الصنف",
+      "occasion": "المناسبة",
+      "quantity": "الكمية"
+    },
+    "photos": {
+      "newAlbum": "ألبوم جديد",
+      "editAlbum": "تعديل الألبوم",
+      "albumName": "اسم الألبوم",
+      "linkMeeting": "ربط بلقاء خارجي",
+      "noMeeting": "بدون ربط",
+      "addPhotos": "إضافة صور",
+      "download": "تنزيل",
+      "downloadAll": "تنزيل الكل",
+      "uploading": "جارٍ الرفع",
+      "emptyAlbums": "لا توجد ألبومات.",
+      "emptyPhotos": "لا توجد صور في هذا الألبوم.",
+      "confirmDeleteAlbum": "سيتم حذف الألبوم وجميع صوره. لا يمكن التراجع.",
+      "confirmDeletePhoto": "سيتم حذف هذه الصورة. لا يمكن التراجع."
+    },
+    "reports": {
+      "byRoom": "الحجوزات حسب القاعة",
+      "byGift": "الصرف حسب الصنف",
+      "room": "القاعة",
+      "gift": "الصنف",
+      "total": "الإجمالي",
+      "requests": "الطلبات",
+      "issued": "المصروفة",
+      "issuedQty": "الكمية المصروفة",
+      "empty": "لا توجد بيانات.",
+      "byExternal": "اللقاءات الخارجية حسب الحالة"
+    },
+    "audit": {
+      "empty": "لا يوجد نشاط."
+    },
+    "slots": {
+      "title": "أوقات الحجز",
+      "hint": "عند إضافة أوقات، يقتصر الحجز (الداخلي والعام) على هذه الأوقات فقط. اتركها فارغة للسماح بأي وقت.",
+      "startTime": "وقت البداية",
+      "duration": "المدة (دقيقة)",
+      "add": "إضافة",
+      "empty": "لا توجد أوقات محددة — الحجز متاح في أي وقت.",
+      "activate": "تفعيل",
+      "deactivate": "تعطيل",
+      "leadTitle": "مهلة الحجز المسبق",
+      "leadHint": "الحد الأدنى بالدقائق قبل بداية الموعد لقبول أي حجز — عام أو داخلي (0 لتعطيل الشرط).",
+      "leadLabel": "المهلة (دقيقة)",
+      "leadSaved": "تم حفظ المهلة",
+      "dateLabel": "التاريخ",
+      "slotLabel": "الوقت",
+      "pickSlot": "اختر الوقت",
+      "days": "الأيام",
+      "allDays": "كل الأيام",
+      "weekdaysPreset": "أيام العمل",
+      "allDaysPreset": "كل الأيام",
+      "dayNames": {
+        "0": "الأحد",
+        "1": "الاثنين",
+        "2": "الثلاثاء",
+        "3": "الأربعاء",
+        "4": "الخميس",
+        "5": "الجمعة",
+        "6": "السبت"
+      },
+      "intervalTitle": "إضافة فترة توفر",
+      "intervalHint": "حدد فترة (من – إلى) والأيام ومدة الوقت، وستتولّد الأوقات تلقائيًا ضمن الفترة. الأوقات المكررة تُتجاهل.",
+      "intervalFrom": "من",
+      "intervalTo": "إلى",
+      "generate": "توليد الأوقات",
+      "generated": "تم توليد {{created}} وقتًا، ودمج الأيام في {{merged}}، وتجاهل {{skipped}} مكررًا.",
+      "generatedNone": "لا جديد — كل الأوقات والأيام موجودة مسبقًا.",
+      "pickDay": "اختر يومًا واحدًا على الأقل",
+      "noSlotsForDay": "لا توجد أوقات متاحة في هذا اليوم",
+      "colTime": "الوقت",
+      "colStatus": "الحالة",
+      "colActions": "إجراءات",
+      "edit": "تعديل",
+      "editTitle": "تعديل وقت الحجز",
+      "editSaved": "تم حفظ التعديل",
+      "duplicateSlot": "يوجد وقت حجز يبدأ في نفس التوقيت.",
+      "durationValue_zero": "{{count}} دقيقة",
+      "durationValue_one": "دقيقة واحدة",
+      "durationValue_two": "دقيقتان",
+      "durationValue_few": "{{count}} دقائق",
+      "durationValue_many": "{{count}} دقيقة",
+      "durationValue_other": "{{count}} دقيقة"
+    }
   }
-}
+}

artifacts/tx-os/src/locales/en.json

@@ -883,7 +883,9 @@
     "appName": "Tx OS",
     "previous": "Previous",
     "next": "Next",
-    "empty": "(empty)"
+    "empty": "(empty)",
+    "back": "Back",
+    "confirmDelete": "Confirm delete"
   },
   "embeddedFrame": {
     "title": "Embedded app",
@@ -1174,6 +1176,7 @@
       "atTime": "at {{time}}",
       "done": "Done",
       "postpone": "Postpone",
+      "externalCannotPostpone": "External meetings can't be auto-postponed.",
       "dismiss": "Dismiss alert",
       "dragHandle": "Drag to move",
       "dismissToast": "Alert dismissed",
@@ -1347,7 +1350,11 @@
         "platform": "Platform",
         "status": "Status",
         "isHighlighted": "Highlight (red)",
-        "notes": "Notes"
+        "notes": "Notes",
+        "isExternal": "External meeting",
+        "isExternalHint": "Row turns red automatically and is excluded from auto-postpone.",
+        "isExternalOn": "Yes",
+        "isExternalOff": "No"
       },
       "attendees": {
         "label": "Attendees",
@@ -1524,5 +1531,302 @@
       "saved": "Saved",
       "reset": "Reset to default"
     }
+  },
+  "protocol": {
+    "title": "Protocol & Public Relations",
+    "menuToggle": "Show/hide menu",
+    "notes": "Notes",
+    "statusLabel": "Status",
+    "confirmReject": "Are you sure you want to reject this request?",
+    "confirmDelete": "This action cannot be undone.",
+    "tabs": {
+      "dashboard": "Dashboard",
+      "roomsGroup": "Rooms Management",
+      "roomsDashboard": "Rooms Dashboard",
+      "bookingSettings": "Settings",
+      "bookings": "Bookings",
+      "external": "External Meetings",
+      "giftsGroup": "Gifts",
+      "gifts": "Warehouse",
+      "issues": "Dedications",
+      "photos": "Photos",
+      "reports": "Reports",
+      "audit": "Activity Log",
+      "rooms": "Rooms"
+    },
+    "status": {
+      "pending": "Pending",
+      "approved": "Approved",
+      "rejected": "Rejected",
+      "cancelled": "Cancelled",
+      "issued": "Issued",
+      "scheduled": "Scheduled",
+      "completed": "Completed"
+    },
+    "giftKind": {
+      "gift": "Gift",
+      "shield": "Shield"
+    },
+    "actions": {
+      "approve": "Approve",
+      "reject": "Reject",
+      "cancel": "Cancel",
+      "approveIssue": "Approve & issue"
+    },
+    "errors": {
+      "generic": "The operation could not be completed."
+    },
+    "dashboard": {
+      "activeRooms": "Active rooms",
+      "todayBookings": "Today's bookings",
+      "pendingBookings": "Bookings awaiting approval",
+      "upcomingExternal": "Upcoming external meetings",
+      "giftStock": "Total gift stock",
+      "pendingIssues": "Pending dedications",
+      "roomsAvailableNow": "Rooms available now",
+      "giftsIssuedThisMonth": "Gifts issued this month"
+    },
+    "roomsDash": {
+      "title": "Rooms Dashboard",
+      "roomsCount": "Rooms",
+      "roomsBreakdown": "{{active}} active · {{inactive}} inactive",
+      "todayBookings": "Today's bookings",
+      "weekBookings": "This week's bookings",
+      "pendingBookings": "Pending requests",
+      "nextBooking": "Next upcoming booking",
+      "noUpcoming": "No upcoming bookings",
+      "startingNow": "Starting now",
+      "inDays_one": "In {{count}} day",
+      "inDays_other": "In {{count}} days",
+      "inHoursMinutes": "In {{hours}}h {{minutes}}m",
+      "inMinutes_one": "In {{count}} minute",
+      "inMinutes_other": "In {{count}} minutes",
+      "bookingsOverTime": "Bookings over time",
+      "lastNDays": "Last {{count}} days",
+      "bookings": "bookings",
+      "byRoom": "By room",
+      "byStatus": "By status",
+      "noData": "No data yet",
+      "noAccess": "You don't have permission to access this page.",
+      "windowHint": "Charts cover bookings from the last 30 days (Riyadh time)."
+    },
+    "bookings": {
+      "new": "New booking",
+      "edit": "Edit booking",
+      "empty": "No bookings yet.",
+      "requester": "Requester",
+      "org": "Organization",
+      "phone": "Phone",
+      "attendeeCount": "Expected attendees",
+      "publicRequest": "Public request",
+      "today": "Today",
+      "bulk": {
+        "selectAll": "Select all",
+        "selectRow": "Select booking {{number}}",
+        "clearSelection": "Clear selection",
+        "selectedCount_one": "1 booking selected",
+        "selectedCount_other": "{{count}} bookings selected",
+        "delete": "Delete",
+        "deleteConfirmTitle_one": "Delete 1 booking?",
+        "deleteConfirmTitle_other": "Delete {{count}} bookings?",
+        "deleteConfirmBody_one": "This will permanently delete 1 booking. This cannot be undone.",
+        "deleteConfirmBody_other": "This will permanently delete {{count}} bookings. This cannot be undone.",
+        "deleted_one": "1 booking deleted",
+        "deleted_other": "{{count}} bookings deleted",
+        "deletePartial": "Deleted {{deleted}} of {{total}}; the rest could not be deleted"
+      },
+      "reference": "Booking ref",
+      "department": "Department",
+      "entity": "Entity",
+      "purpose": "Meeting purpose",
+      "meetingType": "Meeting type",
+      "meetingTypes": {
+        "internal": "Internal meeting",
+        "external": "Meeting with external entity"
+      },
+      "keyAttendees": "Key attendees",
+      "attendeeSides": {
+        "internal": "From the authority",
+        "external": "External"
+      },
+      "searchPlaceholder": "Search by booking ref or phone…",
+      "searchEmpty": "No matching bookings.",
+      "roomLabel": "Room",
+      "titleLabel": "Booking title",
+      "startsAt": "From",
+      "endsAt": "To",
+      "viewList": "List",
+      "viewCalendar": "Calendar",
+      "book": "Book",
+      "emptyDay": "No bookings on this day.",
+      "shareLinkTitle": "Public booking link (share with guests)",
+      "copyLink": "Copy link",
+      "linkCopied": "Link copied",
+      "linkCopyFailed": "Could not copy the link",
+      "table": {
+        "number": "Booking No.",
+        "requester": "Requester",
+        "date": "Booking date",
+        "type": "Meeting type",
+        "roomAttendees": "Room & attendees",
+        "status": "Status",
+        "actions": "Actions",
+        "attendeesShort": "Attendees"
+      },
+      "meetingTypesShort": {
+        "internal": "Internal",
+        "external": "External"
+      },
+      "details": {
+        "date": "Date",
+        "time": "Time",
+        "duration": "Duration",
+        "requesterSection": "Requester details",
+        "meetingSection": "Meeting details",
+        "notes": "Notes",
+        "rejectionReason": "Rejection reason",
+        "attendeeCols": {
+          "name": "Name",
+          "position": "Title",
+          "side": "Side"
+        },
+        "source": "Request source",
+        "sources": {
+          "internal": "Internal",
+          "public": "Public request"
+        },
+        "durationHours_one": "1 hour",
+        "durationHours_other": "{{count}} hours",
+        "durationMinutes_one": "1 minute",
+        "durationMinutes_other": "{{count}} minutes"
+      },
+      "form": {
+        "name": "Name",
+        "position": "Position",
+        "side": "Side",
+        "addRow": "Add row",
+        "removeRow": "Remove row"
+      },
+      "openLink": "Open"
+    },
+    "external": {
+      "new": "New meeting",
+      "edit": "Edit meeting",
+      "empty": "No external meetings yet.",
+      "titleLabel": "Meeting title",
+      "party": "Party",
+      "location": "Location",
+      "startsAt": "Date & time"
+    },
+    "gifts": {
+      "new": "New item",
+      "edit": "Edit item",
+      "empty": "No items yet.",
+      "stock": "Stock",
+      "nameAr": "Name (Arabic)",
+      "nameEn": "Name (English)",
+      "kind": "Kind"
+    },
+    "rooms": {
+      "new": "New room",
+      "edit": "Edit room",
+      "title": "Rooms",
+      "inactive": "inactive",
+      "nameAr": "Name (Arabic)",
+      "nameEn": "Name (English)",
+      "capacity": "Capacity",
+      "location": "Location",
+      "active": "Active",
+      "isActive": "Active",
+      "status": "Status",
+      "actions": "Action",
+      "empty": "No rooms."
+    },
+    "issues": {
+      "new": "New dedication",
+      "empty": "No dedications yet.",
+      "recipient": "Recipient",
+      "gift": "Item",
+      "occasion": "Occasion",
+      "quantity": "Quantity"
+    },
+    "photos": {
+      "newAlbum": "New album",
+      "editAlbum": "Edit album",
+      "albumName": "Album name",
+      "linkMeeting": "Link to external meeting",
+      "noMeeting": "No link",
+      "addPhotos": "Add photos",
+      "download": "Download",
+      "downloadAll": "Download all",
+      "uploading": "Uploading",
+      "emptyAlbums": "No albums yet.",
+      "emptyPhotos": "No photos in this album.",
+      "confirmDeleteAlbum": "This deletes the album and all its photos. This cannot be undone.",
+      "confirmDeletePhoto": "This photo will be deleted. This cannot be undone."
+    },
+    "reports": {
+      "byRoom": "Bookings by room",
+      "byGift": "Issuance by item",
+      "room": "Room",
+      "gift": "Item",
+      "total": "Total",
+      "requests": "Requests",
+      "issued": "Issued",
+      "issuedQty": "Issued qty",
+      "empty": "No data.",
+      "byExternal": "External meetings by status"
+    },
+    "audit": {
+      "empty": "No activity yet."
+    },
+    "slots": {
+      "title": "Booking time slots",
+      "hint": "When slots are added, bookings (internal and public) are limited to these times only. Leave empty to allow any time.",
+      "startTime": "Start time",
+      "duration": "Duration (min)",
+      "add": "Add",
+      "empty": "No slots defined — booking is allowed at any time.",
+      "activate": "Activate",
+      "deactivate": "Deactivate",
+      "leadTitle": "Advance booking lead time",
+      "leadHint": "Minimum minutes before the start time for any booking — public or internal — to be accepted (0 disables the rule).",
+      "leadLabel": "Lead time (min)",
+      "leadSaved": "Lead time saved",
+      "dateLabel": "Date",
+      "slotLabel": "Time",
+      "pickSlot": "Pick a time",
+      "days": "Days",
+      "allDays": "Every day",
+      "weekdaysPreset": "Workdays",
+      "allDaysPreset": "All days",
+      "dayNames": {
+        "0": "Sun",
+        "1": "Mon",
+        "2": "Tue",
+        "3": "Wed",
+        "4": "Thu",
+        "5": "Fri",
+        "6": "Sat"
+      },
+      "intervalTitle": "Add availability interval",
+      "intervalHint": "Pick a range (from – to), the days and the slot duration; slots are generated automatically within the range. Duplicate start times are skipped.",
+      "intervalFrom": "From",
+      "intervalTo": "To",
+      "generate": "Generate slots",
+      "generated": "{{created}} slot(s) created, days merged into {{merged}}, {{skipped}} duplicate(s) skipped.",
+      "generatedNone": "Nothing new — all start times and days already exist.",
+      "pickDay": "Pick at least one day",
+      "noSlotsForDay": "No slots available on this day",
+      "colTime": "Time",
+      "colStatus": "Status",
+      "colActions": "Actions",
+      "edit": "Edit",
+      "editTitle": "Edit booking slot",
+      "editSaved": "Changes saved",
+      "duplicateSlot": "A slot with the same start time already exists.",
+      "durationValue_one": "{{count}} min",
+      "durationValue_other": "{{count}} min"
+    }
   }
-}
+}

artifacts/tx-os/src/pages/executive-meetings.tsx

@@ -13,7 +13,7 @@ import {
 } from "react";
 import { createPortal } from "react-dom";
 import { useTranslation } from "react-i18next";
-import { useLocation } from "wouter";
+import { useLocation, useSearch } from "wouter";
 import { useQuery, useQueryClient } from "@tanstack/react-query";
 import {
   ArrowLeft,
@@ -194,6 +194,10 @@ type Meeting = {
   // is the same for every viewer. NULL/missing = "default" (no tint).
   // Allowed values come from ROW_COLOR_OPTIONS below.
   rowColor?: string | null;
+  // #635: External meeting flag. When true, the row is force-tinted red
+  // and the alert-postpone button is disabled (the server also rejects
+  // /postpone-minutes with `external_meeting_no_auto_postpone`).
+  isExternal?: boolean;
   // #486: optimistic-lock token used by /executive-meetings/swap-times
   // (the schedule row quick-actions Move up / Move down popover) and
   // by the existing PostponeDialog when reused from the schedule.
@@ -1361,7 +1365,12 @@ function ScheduleSection({
   const rowColors = useMemo<Record<number, string>>(() => {
     const out: Record<number, string> = {};
     for (const m of meetings) {
-      if (m.rowColor) out[m.id] = m.rowColor;
+      // #635: external meetings are always tinted red regardless of
+      // (and overriding) any manually-set rowColor, so the visual cue
+      // matches the flag even on legacy rows whose rowColor was set
+      // before isExternal existed.
+      if (m.isExternal) out[m.id] = "red";
+      else if (m.rowColor) out[m.id] = m.rowColor;
     }
     return out;
   }, [meetings]);
@@ -2441,6 +2450,84 @@ function ScheduleSection({
     };
   }, [highlightEditRowId, meetings]);
 
+  // --- Deep-link: /meetings?meeting=<id> (optionally &date=YYYY-MM-DD) ---
+  // Opened from a notification (in-app list or system Web Push). We switch
+  // the schedule to the meeting's day, then scroll + flash its row reusing
+  // the same accent-ring as the row "Edit" affordance. When no date is
+  // supplied we resolve it from the meeting id via the API so the same link
+  // works regardless of which day is currently shown.
+  const deepLinkSearch = useSearch();
+  const deepLinkHandledRef = useRef<string | null>(null);
+  const [pendingDeepLinkMeetingId, setPendingDeepLinkMeetingId] = useState<
+    number | null
+  >(null);
+  useEffect(() => {
+    const params = new URLSearchParams(deepLinkSearch);
+    const meetingParam = params.get("meeting");
+    if (!meetingParam) return;
+    if (deepLinkHandledRef.current === meetingParam) return;
+    const id = Number(meetingParam);
+    if (!Number.isInteger(id) || id <= 0) return;
+    deepLinkHandledRef.current = meetingParam;
+    setPendingDeepLinkMeetingId(id);
+    const dateParam = params.get("date");
+    if (dateParam && /^\d{4}-\d{2}-\d{2}$/.test(dateParam)) {
+      if (dateParam !== date) onDateChange(dateParam);
+      return;
+    }
+    let cancelled = false;
+    void apiJson<{ meetingDate?: string }>(`/api/executive-meetings/${id}`)
+      .then((m) => {
+        if (cancelled) return;
+        if (m?.meetingDate && m.meetingDate !== date) onDateChange(m.meetingDate);
+      })
+      .catch(() => {
+        // Meeting may have been deleted/moved — leave the user on the
+        // current day rather than surfacing an error for a stale link.
+      });
+    return () => {
+      cancelled = true;
+    };
+  }, [deepLinkSearch, date, onDateChange]);
+  useEffect(() => {
+    if (pendingDeepLinkMeetingId == null) return;
+    if (!meetings.some((m) => m.id === pendingDeepLinkMeetingId)) return;
+    setHighlightEditRowId(pendingDeepLinkMeetingId);
+    setPendingDeepLinkMeetingId(null);
+    deepLinkHandledRef.current = null;
+    if (typeof window !== "undefined") {
+      const params = new URLSearchParams(window.location.search);
+      params.delete("meeting");
+      params.delete("date");
+      const qs = params.toString();
+      const next = `${window.location.pathname}${qs ? `?${qs}` : ""}`;
+      window.history.replaceState(null, "", next);
+    }
+  }, [pendingDeepLinkMeetingId, meetings]);
+  useEffect(() => {
+    if (pendingDeepLinkMeetingId == null) return;
+    // Safety net for stale links: if the target meeting never materializes
+    // (deleted, moved to another day we can't resolve, or simply not in the
+    // loaded set), clear the pending state and strip the param after a grace
+    // period so the URL doesn't linger and a later valid link still works.
+    const stale = window.setTimeout(() => {
+      setPendingDeepLinkMeetingId(null);
+      deepLinkHandledRef.current = null;
+      if (typeof window !== "undefined") {
+        const params = new URLSearchParams(window.location.search);
+        params.delete("meeting");
+        params.delete("date");
+        const qs = params.toString();
+        window.history.replaceState(
+          null,
+          "",
+          `${window.location.pathname}${qs ? `?${qs}` : ""}`,
+        );
+      }
+    }, 8000);
+    return () => window.clearTimeout(stale);
+  }, [pendingDeepLinkMeetingId]);
+
   // #489: Drag-from-anywhere on the row rotates meeting CONTENT through
   // the day's fixed time slots. The (startTime, endTime, dailyNumber)
   // tuple of each chronological slot stays anchored to its physical
@@ -3082,7 +3169,7 @@ function ScheduleSection({
           paginated output. */}
       <div
         data-testid="em-sticky-thead"
-        className="sticky z-[6] overflow-hidden bg-white border-x-2 border-t-2 border-[#0B1E3F] rounded-t-md shadow-[0_4px_6px_-4px_rgba(11,30,63,0.15)] print:hidden"
+        className="sticky z-[6] !mb-0 overflow-hidden bg-white border-x-2 border-t-2 border-[#0B1E3F] rounded-t-md shadow-[0_4px_6px_-4px_rgba(11,30,63,0.15)] print:hidden"
         style={{
           top: "calc(var(--em-header-h, 0px) + var(--em-heading-h, 0px))",
         }}
@@ -3178,7 +3265,7 @@ function ScheduleSection({
 
       <div
         ref={tableWrapperRef}
-        className="bg-white border-2 border-[#0B1E3F] rounded-md overflow-x-auto shadow-sm print:shadow-none print:border-black print:overflow-hidden"
+        className="!mt-0 bg-white border-2 border-[#0B1E3F] rounded-b-md overflow-x-auto shadow-sm print:shadow-none print:border-black print:overflow-hidden"
         id="executive-schedule-printable"
       >
         <table
@@ -3403,10 +3490,11 @@ function ScheduleSection({
                 sortOrder: idx,
                 kind: a.kind ?? "person",
               })),
+              // #635/#639: external meeting flag — coerce to real
+              // boolean so an undefined state never silently drops
+              // the field from the PATCH body.
+              isExternal: Boolean(editingMeeting.isExternal),
             };
-            if (editingMeeting.dailyNumber.trim()) {
-              body.dailyNumber = Number(editingMeeting.dailyNumber);
-            }
             try {
               await apiJson(
                 `/api/executive-meetings/${editingMeeting.id}`,
@@ -4549,7 +4637,7 @@ function MeetingRow({
         return (
           <td
             key="meeting"
-            className="border border-gray-300 px-3 py-3 align-middle text-[#0B1E3F] relative group"
+            className={`border border-gray-300 px-3 py-3 align-middle text-center ${meeting.isExternal ? "text-[#dc2626]" : "text-[#0B1E3F]"} relative group`}
             style={tintedCellStyle(col, true)}
           >
             <EditableCell
@@ -4557,14 +4645,20 @@ function MeetingRow({
               onSave={onSaveTitle}
               ariaLabel={t("executiveMeetings.editMeetingTitle")}
               dir={isRtl ? "rtl" : "ltr"}
-              className="font-medium leading-snug break-words"
+              // Center the title horizontally for the view-mode wrapper AND
+              // any inner `<p>` Tiptap saved — `safeHtml` keeps `style`
+              // attributes (so users can colour / size text), which means a
+              // stray `text-align` saved by the editor would otherwise leak
+              // into the cell. The `!` modifier outranks the inline style so
+              // the title always stays centered regardless of what's stored.
+              className="font-medium leading-snug break-words text-center [&_p]:!text-center"
               disabled={!canMutate}
               testId={`em-edit-title-${meeting.id}`}
               startInEditMode={autoEditTitle}
               onStartedEditing={onAutoEditTitleConsumed}
             />
             {meeting.location && (
-              <div className="text-[11px] text-muted-foreground mt-0.5 break-words">
+              <div className="text-[11px] text-muted-foreground mt-0.5 break-words text-center">
                 {meeting.location}
               </div>
             )}
@@ -4576,7 +4670,7 @@ function MeetingRow({
         return (
           <td
             key="attendees"
-            className="border border-gray-300 px-3 py-3 align-middle relative group"
+            className="border border-gray-300 px-3 py-3 align-middle text-center relative group"
             style={tintedCellStyle(col, false)}
           >
             <AttendeesCell
@@ -4661,7 +4755,7 @@ function MeetingRow({
               }}
               ariaLabel={t("executiveMeetings.merge.editLabel")}
               dir={isRtl ? "rtl" : "ltr"}
-              className="font-medium leading-snug break-words"
+              className="font-medium leading-snug break-words text-center [&_p]:!text-center"
               disabled={!canMutate}
               placeholder={t("executiveMeetings.merge.placeholder")}
               testId={`em-merge-edit-${meeting.id}`}
@@ -4984,6 +5078,12 @@ function MeetingRow({
                   setQuickOpen(false);
                   onQuickPostpone?.();
                 }}
+                disabled={meeting.isExternal}
+                title={
+                  meeting.isExternal
+                    ? t("executiveMeetings.alert.externalCannotPostpone")
+                    : undefined
+                }
                 className={`flex-1 min-w-0 gap-2 px-3 py-2 h-10 text-sm font-medium shadow-sm ${isRtl ? "flex-row-reverse" : ""}`}
                 data-testid={`em-row-quick-postpone-${meeting.id}`}
               >
@@ -5862,7 +5962,7 @@ function AttendeeFlow({
   }
 
   if (items.length === 0 && !showAdd && !isPending) {
-    return <span className="text-xs text-gray-500">—</span>;
+    return <span className="block text-center text-xs text-gray-500">—</span>;
   }
 
   // Locate the listIdx where the inline pending ghost should appear, when
@@ -6022,7 +6122,7 @@ function AttendeeFlow({
   };
 
   return (
-    <ul className="flex flex-wrap justify-center items-baseline gap-x-4 gap-y-0.5 text-[#0B1E3F] leading-snug">
+    <ul className={`flex flex-wrap justify-center items-baseline gap-x-4 gap-y-0.5 text-[#0B1E3F] leading-snug`}>
       {items.flatMap(({ a, i }, listIdx) => {
         const isSub = (a.kind ?? "person") === "subheading";
         const nodes: ReactNode[] = [];
@@ -6266,7 +6366,6 @@ type MeetingFormState = {
   titleAr: string;
   titleEn: string;
   meetingDate: string;
-  dailyNumber: string;
   startTime: string;
   endTime: string;
   location: string;
@@ -6276,6 +6375,9 @@ type MeetingFormState = {
   isHighlighted: boolean;
   notes: string;
   attendees: Attendee[];
+  // #635: external meeting flag — when true the row is force-tinted red
+  // and the alert-postpone button is disabled.
+  isExternal: boolean;
 };
 
 // Generate a stable client-only attendee id for the manage-dialog DnD.
@@ -6294,7 +6396,6 @@ function emptyMeetingForm(date: string): MeetingFormState {
     titleAr: "",
     titleEn: "",
     meetingDate: date,
-    dailyNumber: "",
     startTime: "",
     endTime: "",
     location: "",
@@ -6304,6 +6405,7 @@ function emptyMeetingForm(date: string): MeetingFormState {
     isHighlighted: false,
     notes: "",
     attendees: [],
+    isExternal: false,
   };
 }
 
@@ -6602,7 +6704,6 @@ function ManageSection({
       titleAr: htmlToPlainText(m.titleAr),
       titleEn: htmlToPlainText(m.titleEn ?? ""),
       meetingDate: m.meetingDate,
-      dailyNumber: String(m.dailyNumber),
       startTime: m.startTime ? m.startTime.slice(0, 5) : "",
       endTime: m.endTime ? m.endTime.slice(0, 5) : "",
       location: m.location ?? "",
@@ -6622,6 +6723,7 @@ function ManageSection({
         name: htmlToPlainText(a.name),
         _sid: genAttendeeSid(),
       })),
+      isExternal: m.isExternal ?? false,
     });
   }
 
@@ -6675,8 +6777,13 @@ function ManageSection({
         // schedule survive a save through the Manage dialog.
         kind: a.kind ?? "person",
       })),
+      // #635/#639: send the external flag as a real boolean so the
+      // server can force rowColor='red' and the cascade/postpone rules
+      // know to skip it. Coerce defensively — a stale render where
+      // state.isExternal is undefined would otherwise silently send
+      // `undefined` and the server PATCH would skip the column.
+      isExternal: Boolean(editing.isExternal),
     };
-    if (editing.dailyNumber.trim()) body.dailyNumber = Number(editing.dailyNumber);
     try {
       if (editing.id == null) {
         await apiJson(`/api/executive-meetings`, { method: "POST", body });
@@ -7553,16 +7660,31 @@ function MeetingFormDialog({
               onChange={(e) => update("meetingDate", e.target.value)}
             />
           </FormRow>
+          {/* #635/#639: external-meeting toggle replaces the
+              daily-number input (numbering is now fully auto-assigned
+              by the server). When ON the row is force-tinted red and
+              the alert-postpone button is disabled.
+              `full` so it spans both grid columns on its own row —
+              prevents the toggle from sharing a row with the date
+              input and colliding with the time pickers below on
+              narrow screens. */}
           <FormRow
-            label={t("executiveMeetings.manage.field.dailyNumber")}
-            hint={t("executiveMeetings.manage.field.dailyNumberHint")}
+            label={t("executiveMeetings.manage.field.isExternal")}
+            hint={t("executiveMeetings.manage.field.isExternalHint")}
+            full
           >
-            <Input
-              type="number"
-              min={1}
-              value={state.dailyNumber}
-              onChange={(e) => update("dailyNumber", e.target.value)}
-            />
+            <div className="flex items-center gap-3 py-1">
+              <Switch
+                checked={state.isExternal}
+                onCheckedChange={(v) => update("isExternal", Boolean(v))}
+                data-testid="em-form-isExternal"
+              />
+              <span className="text-sm text-gray-700">
+                {state.isExternal
+                  ? t("executiveMeetings.manage.field.isExternalOn")
+                  : t("executiveMeetings.manage.field.isExternalOff")}
+              </span>
+            </div>
           </FormRow>
           <FormRow
             label={t("executiveMeetings.manage.field.startTime")}
@@ -7843,6 +7965,7 @@ function AuditDiffSummary({
     "platform",
     "status",
     "isHighlighted",
+    "isExternal",
     "notes",
     "assignedTo",
     "taskType",

artifacts/tx-os/src/pages/my-orders.tsx

@@ -1,6 +1,6 @@
 import { useEffect, useRef, useState } from "react";
 import { useTranslation } from "react-i18next";
-import { useLocation } from "wouter";
+import { useLocation, useSearch } from "wouter";
 import { useQueryClient } from "@tanstack/react-query";
 import {
   useListMyServiceOrders,
@@ -159,10 +159,12 @@ function OrderCard({
   order,
   onDelete,
   onReorder,
+  highlighted = false,
 }: {
   order: ServiceOrder;
   onDelete: (id: number) => void;
   onReorder: (order: ServiceOrder) => void;
+  highlighted?: boolean;
 }) {
   const { t, i18n } = useTranslation();
   const queryClient = useQueryClient();
@@ -236,7 +238,13 @@ function OrderCard({
   };
 
   return (
-    <div className="glass-panel rounded-xl p-4 flex flex-col gap-3">
+    <div
+      data-order-id={order.id}
+      className={cn(
+        "glass-panel rounded-xl p-4 flex flex-col gap-3 transition-shadow",
+        highlighted && "ring-2 ring-primary ring-offset-2",
+      )}
+    >
       <div className="flex items-start gap-3">
         <OrderImage src={img} alt={name} />
         <div className="flex-1 min-w-0">
@@ -433,6 +441,53 @@ export default function MyOrdersPage() {
         )
     : [];
 
+  // Deep-link from a notification: /my-orders?order=<id> scrolls to and
+  // flashes the matching order card, then strips the param so re-renders
+  // don't re-trigger the jump.
+  const orderSearch = useSearch();
+  const [highlightOrderId, setHighlightOrderId] = useState<number | null>(null);
+  const highlightHandledRef = useRef<string | null>(null);
+  useEffect(() => {
+    const params = new URLSearchParams(orderSearch);
+    const orderParam = params.get("order");
+    if (!orderParam) return;
+    if (highlightHandledRef.current === orderParam) return;
+    const id = Number(orderParam);
+    if (!Number.isInteger(id) || id <= 0) return;
+    highlightHandledRef.current = orderParam;
+    setHighlightOrderId(id);
+    if (typeof window !== "undefined") {
+      params.delete("order");
+      const qs = params.toString();
+      window.history.replaceState(
+        null,
+        "",
+        `${window.location.pathname}${qs ? `?${qs}` : ""}`,
+      );
+    }
+  }, [orderSearch]);
+  useEffect(() => {
+    if (highlightOrderId == null) return;
+    if (!sortedOrders.some((o) => o.id === highlightOrderId)) return;
+    const rafId = window.requestAnimationFrame(() => {
+      const el = document.querySelector(`[data-order-id="${highlightOrderId}"]`);
+      if (el && "scrollIntoView" in el) {
+        (el as HTMLElement).scrollIntoView({
+          block: "center",
+          behavior: "smooth",
+        });
+      }
+    });
+    const clear = window.setTimeout(() => {
+      setHighlightOrderId(null);
+      highlightHandledRef.current = null;
+    }, 2000);
+    return () => {
+      window.cancelAnimationFrame(rafId);
+      window.clearTimeout(clear);
+    };
+  }, [highlightOrderId, sortedOrders]);
+
   return (
     <div className="min-h-screen os-bg flex flex-col">
       <div className="glass-panel border-b border-slate-200/70 px-4 py-4 flex items-center gap-3 sticky top-0 z-10">
@@ -488,6 +543,7 @@ export default function MyOrdersPage() {
               <OrderCard
                 key={o.id}
                 order={o}
+                highlighted={o.id === highlightOrderId}
                 onDelete={(id) => scheduleDelete([id])}
                 onReorder={(order) =>
                   setReorderTarget({

artifacts/tx-os/src/pages/notifications.tsx

@@ -14,6 +14,34 @@ import { AppDock } from "@/components/app-dock";
 import { formatDateTime } from "@/lib/i18n-format";
 import { useAuth } from "@/contexts/AuthContext";
 
+// Map a notification to the in-app deep-link it should open when tapped.
+// Mirrors the Web Push `url` built on the server so the in-app list and a
+// system push notification land on the exact same item: a note opens its
+// thread, a meeting opens that meeting on its day, and an order opens the
+// right order surface ("Incoming orders" for a fresh order to claim,
+// otherwise the recipient's "My orders"). Returns null when there is no
+// specific destination (the tap then only marks the item read).
+function notificationDestination(n: {
+  type: string;
+  relatedType?: string | null;
+  relatedId?: number | null;
+}): string | null {
+  const id = n.relatedId;
+  switch (n.type) {
+    case "note":
+      return id ? `/notes?thread=${id}` : "/notes";
+    case "executive_meeting":
+      return id ? `/meetings?meeting=${id}` : "/meetings";
+    case "order": {
+      const base =
+        n.relatedType === "incoming_order" ? "/orders/incoming" : "/my-orders";
+      return id ? `${base}?order=${id}` : base;
+    }
+    default:
+      return null;
+  }
+}
+
 export default function NotificationsPage() {
   const { t, i18n } = useTranslation();
   const [, setLocation] = useLocation();
@@ -53,10 +81,15 @@ export default function NotificationsPage() {
   const handleNotificationClick = (n: {
     id: number;
     isRead: boolean;
+    type: string;
+    relatedType?: string | null;
+    relatedId?: number | null;
   }) => {
     if (!n.isRead) {
       handleMarkOne(n.id);
     }
+    const dest = notificationDestination(n);
+    if (dest) setLocation(dest);
   };
 
   const unreadCount = notifications?.filter((n) => !n.isRead).length ?? 0;

artifacts/tx-os/src/pages/orders-incoming.tsx

@@ -1,6 +1,6 @@
-import { useMemo, useState } from "react";
+import { useEffect, useMemo, useRef, useState } from "react";
 import { useTranslation } from "react-i18next";
-import { useLocation } from "wouter";
+import { useLocation, useSearch } from "wouter";
 import { useQueryClient } from "@tanstack/react-query";
 import {
   useListIncomingServiceOrders,
@@ -105,6 +105,7 @@ function IncomingOrderCard({
   selected,
   onToggleSelected,
   onRequestDelete,
+  highlighted = false,
 }: {
   order: ServiceOrder;
   meId: number;
@@ -112,6 +113,7 @@ function IncomingOrderCard({
   selected: boolean;
   onToggleSelected: (id: number) => void;
   onRequestDelete: (id: number) => void;
+  highlighted?: boolean;
 }) {
   const { t, i18n } = useTranslation();
   const lang = i18n.language;
@@ -279,6 +281,7 @@ function IncomingOrderCard({
       className={cn(
         "glass-panel rounded-xl p-3 flex flex-col gap-3 transition-colors",
         selected && "ring-2 ring-amber-400 bg-amber-50/40",
+        !selected && highlighted && "ring-2 ring-primary ring-offset-2",
       )}
       data-testid={`incoming-order-card-${order.id}`}
     >
@@ -406,6 +409,55 @@ export default function OrdersIncomingPage() {
     [mineIds, unclaimedIds],
   );
 
+  // Deep-link from a notification: /orders/incoming?order=<id> scrolls to
+  // and flashes the matching order card, then strips the param so
+  // re-renders don't re-trigger the jump.
+  const orderSearch = useSearch();
+  const [highlightOrderId, setHighlightOrderId] = useState<number | null>(null);
+  const highlightHandledRef = useRef<string | null>(null);
+  useEffect(() => {
+    const params = new URLSearchParams(orderSearch);
+    const orderParam = params.get("order");
+    if (!orderParam) return;
+    if (highlightHandledRef.current === orderParam) return;
+    const id = Number(orderParam);
+    if (!Number.isInteger(id) || id <= 0) return;
+    highlightHandledRef.current = orderParam;
+    setHighlightOrderId(id);
+    if (typeof window !== "undefined") {
+      params.delete("order");
+      const qs = params.toString();
+      window.history.replaceState(
+        null,
+        "",
+        `${window.location.pathname}${qs ? `?${qs}` : ""}`,
+      );
+    }
+  }, [orderSearch]);
+  useEffect(() => {
+    if (highlightOrderId == null) return;
+    if (![...mine, ...unclaimed].some((o) => o.id === highlightOrderId)) return;
+    const rafId = window.requestAnimationFrame(() => {
+      const el = document.querySelector(
+        `[data-testid="incoming-order-card-${highlightOrderId}"]`,
+      );
+      if (el && "scrollIntoView" in el) {
+        (el as HTMLElement).scrollIntoView({
+          block: "center",
+          behavior: "smooth",
+        });
+      }
+    });
+    const clear = window.setTimeout(() => {
+      setHighlightOrderId(null);
+      highlightHandledRef.current = null;
+    }, 2000);
+    return () => {
+      window.cancelAnimationFrame(rafId);
+      window.clearTimeout(clear);
+    };
+  }, [highlightOrderId, mine, unclaimed]);
+
   const [selected, setSelected] = useState<Set<number>>(new Set());
   // confirmIds === null → no dialog; otherwise the ids that confirming will delete.
   const [confirmIds, setConfirmIds] = useState<number[] | null>(null);
@@ -610,6 +662,7 @@ export default function OrdersIncomingPage() {
                       key={o.id}
                       order={o}
                       meId={meId}
+                      highlighted={o.id === highlightOrderId}
                       onActionDone={refetch}
                       selected={validSelected.has(o.id)}
                       onToggleSelected={toggleOne}
@@ -649,6 +702,7 @@ export default function OrdersIncomingPage() {
                       key={o.id}
                       order={o}
                       meId={meId}
+                      highlighted={o.id === highlightOrderId}
                       onActionDone={refetch}
                       selected={validSelected.has(o.id)}
                       onToggleSelected={toggleOne}

artifacts/tx-os/src/pages/protocol-request.tsx

@@ -0,0 +1,720 @@
+import { useEffect, useMemo, useState } from "react";
+import { useQuery } from "@tanstack/react-query";
+import {
+  CalendarClock,
+  CheckCircle2,
+  Loader2,
+  AlertTriangle,
+} from "lucide-react";
+import { Button } from "@/components/ui/button";
+import { Input } from "@/components/ui/input";
+import { Textarea } from "@/components/ui/textarea";
+import { Label } from "@/components/ui/label";
+import {
+  Select,
+  SelectContent,
+  SelectItem,
+  SelectTrigger,
+  SelectValue,
+} from "@/components/ui/select";
+import { DateTimePicker } from "@/components/date-time-picker";
+import {
+  AttendeeTableEditor,
+  emptyAttendeeRow,
+  syncAttendeeRows,
+  type EditableAttendeeRow,
+} from "@/components/attendee-table-editor";
+
+const API = `${import.meta.env.BASE_URL}api`;
+
+type PublicRoom = { id: number; nameAr: string; nameEn: string };
+
+// Availability for one room + Riyadh calendar day: the admin-configured slot
+// grid with per-slot booked / too-soon flags. An empty `slots` array means
+// the admin hasn't configured slots — the form falls back to free date-time
+// pickers (legacy mode).
+type AvailabilitySlot = {
+  id: number;
+  startTime: string; // "HH:mm" Riyadh wall clock
+  durationMinutes: number;
+  booked: boolean;
+  tooSoon: boolean;
+  available: boolean;
+};
+type Availability = { minLeadMinutes: number; slots: AvailabilitySlot[] };
+
+function fmtSlotLabel(startTime: string, durationMinutes: number): string {
+  const [h, m] = startTime.split(":").map(Number);
+  const endTotal = h * 60 + m + durationMinutes;
+  const eh = Math.floor(endTotal / 60) % 24;
+  const em = endTotal % 60;
+  const pad = (n: number) => String(n).padStart(2, "0");
+  const to12 = (hh: number, mm: number) => {
+    const period = hh < 12 ? "ص" : "م";
+    let h12 = hh % 12;
+    if (h12 === 0) h12 = 12;
+    return `${h12}:${pad(mm)} ${period}`;
+  };
+  return `${to12(h, m)} – ${to12(eh, em)}`;
+}
+
+// Slot start/end as absolute instants. Riyadh has no DST so the fixed
+// +03:00 offset is always correct.
+function slotIso(date: string, startTime: string, durationMinutes?: number) {
+  const start = new Date(`${date}T${startTime}:00+03:00`);
+  if (durationMinutes === undefined) return start.toISOString();
+  return new Date(start.getTime() + durationMinutes * 60_000).toISOString();
+}
+
+function todayRiyadh(): string {
+  // en-CA gives YYYY-MM-DD directly.
+  return new Intl.DateTimeFormat("en-CA", {
+    timeZone: "Asia/Riyadh",
+  }).format(new Date());
+}
+
+type MeetingType = "internal" | "external";
+
+type FormState = {
+  requesterName: string;
+  title: string;
+  requesterPhone: string;
+  department: string;
+  meetingType: MeetingType;
+  requesterOrg: string;
+  attendeeCount: string;
+  purpose: string;
+  roomId: string;
+  date: string; // YYYY-MM-DD (Riyadh calendar day) — slot mode
+  slotId: string; // selected slot id — slot mode
+  startsAt: string; // legacy free mode (no slots configured)
+  endsAt: string;
+  notes: string;
+  website: string; // honeypot
+};
+
+const EMPTY: FormState = {
+  requesterName: "",
+  title: "",
+  requesterPhone: "",
+  department: "",
+  meetingType: "internal",
+  requesterOrg: "",
+  attendeeCount: "",
+  purpose: "",
+  roomId: "",
+  date: "",
+  slotId: "",
+  startsAt: "",
+  endsAt: "",
+  notes: "",
+  website: "",
+};
+
+function localToIso(v: string): string {
+  return new Date(v).toISOString();
+}
+
+export default function ProtocolRequestPage() {
+  // This page is public (no auth). Force RTL Arabic regardless of any
+  // stored language preference so a guest always sees the intended form.
+  useEffect(() => {
+    const prevDir = document.documentElement.dir;
+    const prevLang = document.documentElement.lang;
+    document.documentElement.dir = "rtl";
+    document.documentElement.lang = "ar";
+    return () => {
+      // Restore the app's direction/language so navigating away from this
+      // public page doesn't leave the rest of the app forced into RTL Arabic.
+      document.documentElement.dir = prevDir;
+      document.documentElement.lang = prevLang;
+    };
+  }, []);
+
+  const rooms = useQuery<PublicRoom[]>({
+    queryKey: ["protocol-public", "rooms"],
+    queryFn: async () => {
+      const r = await fetch(`${API}/protocol/public/rooms`);
+      if (!r.ok) throw new Error("rooms");
+      return r.json();
+    },
+  });
+
+  const [form, setForm] = useState<FormState>(EMPTY);
+
+  // Availability (slot grid) for the chosen room + day. When the admin has
+  // configured slots, guests pick a day then one of the returned slots; the
+  // legacy free start/end pickers only render when no slots exist at all.
+  const availability = useQuery<Availability>({
+    queryKey: ["protocol-public", "availability", form.roomId, form.date],
+    enabled: form.roomId !== "" && form.date !== "",
+    queryFn: async () => {
+      const r = await fetch(
+        `${API}/protocol/public/availability?roomId=${encodeURIComponent(
+          form.roomId,
+        )}&date=${encodeURIComponent(form.date)}`,
+      );
+      if (!r.ok) throw new Error("availability");
+      return r.json();
+    },
+  });
+  // Probe with today's date before a day is picked, so we know whether slot
+  // mode is on (the slot list itself is per-day, but its existence is global).
+  const slotProbe = useQuery<Availability>({
+    queryKey: ["protocol-public", "availability-probe", form.roomId],
+    enabled: form.roomId !== "",
+    queryFn: async () => {
+      const r = await fetch(
+        `${API}/protocol/public/availability?roomId=${encodeURIComponent(
+          form.roomId,
+        )}&date=${todayRiyadh()}`,
+      );
+      if (!r.ok) throw new Error("availability");
+      return r.json();
+    },
+  });
+  const slotMode =
+    form.roomId !== "" &&
+    slotProbe.data !== undefined &&
+    slotProbe.data.slots.length > 0;
+  const daySlots = availability.data?.slots ?? [];
+  const selectedSlot = daySlots.find((s) => String(s.id) === form.slotId);
+  // Key attendees ("أبرز الحضور"): one numbered table where each row carries
+  // its own side (من الهيئة / خارج الهيئة). Row count follows the expected
+  // attendee count field.
+  const [attendees, setAttendees] = useState<EditableAttendeeRow[]>([
+    emptyAttendeeRow(),
+  ]);
+  const [submitting, setSubmitting] = useState(false);
+  const [done, setDone] = useState(false);
+  const [reference, setReference] = useState<string | null>(null);
+  const [error, setError] = useState<string | null>(null);
+
+  const set = <K extends keyof FormState>(k: K, v: FormState[K]) =>
+    setForm((f) => ({ ...f, [k]: v }));
+
+  // Auto-generate table rows to match "العدد المتوقع للحضور".
+  useEffect(() => {
+    const n =
+      form.attendeeCount.trim() === "" ? null : Number(form.attendeeCount);
+    setAttendees((rs) => syncAttendeeRows(rs, n));
+  }, [form.attendeeCount]);
+
+  const isExternal = form.meetingType === "external";
+
+  const canSubmit = useMemo(() => {
+    const timeOk = slotMode
+      ? form.date !== "" && selectedSlot !== undefined && selectedSlot.available
+      : form.startsAt !== "" &&
+        form.endsAt !== "" &&
+        new Date(form.startsAt) < new Date(form.endsAt);
+    return (
+      form.requesterName.trim().length > 0 &&
+      form.title.trim().length > 0 &&
+      form.requesterPhone.trim().length >= 3 &&
+      form.roomId !== "" &&
+      timeOk &&
+      (!isExternal || form.requesterOrg.trim().length > 0)
+    );
+  }, [form, isExternal, slotMode, selectedSlot]);
+
+  const onSubmit = async (e: React.FormEvent) => {
+    e.preventDefault();
+    setError(null);
+    if (!canSubmit || submitting) return;
+    setSubmitting(true);
+    try {
+      const keyAttendees = attendees
+        .filter((r) => r.name.trim() !== "")
+        .map((r) => ({
+          name: r.name.trim(),
+          position: r.position.trim(),
+          side: r.side,
+        }));
+      const res = await fetch(`${API}/protocol/public/booking-requests`, {
+        method: "POST",
+        headers: { "Content-Type": "application/json" },
+        body: JSON.stringify({
+          roomId: Number(form.roomId),
+          title: form.title.trim(),
+          requesterName: form.requesterName.trim(),
+          requesterPhone: form.requesterPhone.trim(),
+          department: form.department.trim() || null,
+          meetingType: form.meetingType,
+          requesterOrg: isExternal ? form.requesterOrg.trim() : null,
+          purpose: form.purpose.trim() || null,
+          attendeeCount:
+            form.attendeeCount.trim() === ""
+              ? null
+              : Number(form.attendeeCount),
+          keyAttendees,
+          startsAt:
+            slotMode && selectedSlot
+              ? slotIso(form.date, selectedSlot.startTime)
+              : localToIso(form.startsAt),
+          endsAt:
+            slotMode && selectedSlot
+              ? slotIso(
+                  form.date,
+                  selectedSlot.startTime,
+                  selectedSlot.durationMinutes,
+                )
+              : localToIso(form.endsAt),
+          notes: form.notes.trim() || null,
+          website: form.website,
+        }),
+      });
+      if (res.ok) {
+        try {
+          const data = await res.json();
+          if (data?.bookingReference && typeof data.bookingReference === "string") {
+            setReference(data.bookingReference);
+          }
+        } catch {
+          // no reference in body — still a success
+        }
+        setDone(true);
+        return;
+      }
+      let msg = "تعذّر إرسال الطلب، يرجى المحاولة مرة أخرى.";
+      try {
+        const data = await res.json();
+        if (data?.error && typeof data.error === "string") msg = data.error;
+      } catch {
+        // keep default message
+      }
+      if (res.status === 429) {
+        msg = "لقد أرسلت طلبات كثيرة، يرجى المحاولة لاحقاً.";
+      }
+      setError(msg);
+    } catch {
+      setError("تعذّر الاتصال بالخادم، تحقق من الاتصال وحاول مجدداً.");
+    } finally {
+      setSubmitting(false);
+    }
+  };
+
+  const resetForm = () => {
+    setForm(EMPTY);
+    setAttendees([emptyAttendeeRow()]);
+    setReference(null);
+    setDone(false);
+  };
+
+  if (done) {
+    return (
+      <div
+        dir="rtl"
+        className="min-h-screen bg-slate-50 flex items-center justify-center p-4"
+      >
+        <div className="w-full max-w-md bg-white rounded-2xl border border-slate-200 shadow-sm p-8 text-center">
+          <CheckCircle2 className="w-14 h-14 text-emerald-500 mx-auto mb-4" />
+          <h1 className="text-xl font-bold text-slate-800 mb-2">
+            تم استلام طلبك
+          </h1>
+          <p className="text-slate-500 leading-relaxed">
+            سيقوم فريق المراسم بمراجعة طلب الحجز والتواصل معك على رقم الهاتف
+            المُدخل لتأكيد الموعد.
+          </p>
+          {reference && (
+            <div className="mt-5 rounded-xl bg-sky-50 border border-sky-200 px-4 py-4">
+              <p className="text-sm text-slate-500 mb-1">رقم الحجز</p>
+              <p
+                className="text-2xl font-bold tracking-wider text-sky-700"
+                dir="ltr"
+              >
+                {reference}
+              </p>
+              <p className="text-xs text-slate-500 mt-2">
+                احتفظ بهذا الرقم لمتابعة حالة طلبك.
+              </p>
+            </div>
+          )}
+          <Button className="mt-6" variant="outline" onClick={resetForm}>
+            إرسال طلب آخر
+          </Button>
+        </div>
+      </div>
+    );
+  }
+
+  return (
+    <div dir="rtl" className="min-h-screen bg-slate-50 py-8 px-4">
+      <div className="w-full max-w-xl mx-auto">
+        <div className="flex items-center gap-3 mb-6">
+          <div className="w-11 h-11 rounded-xl bg-sky-500/10 text-sky-600 flex items-center justify-center">
+            <CalendarClock className="w-6 h-6" />
+          </div>
+          <div>
+            <h1 className="text-xl font-bold text-slate-800">طلب حجز قاعة</h1>
+            <p className="text-sm text-slate-500">
+              يرجى تعبئة البيانات وسيتواصل معك فريق المراسم للتأكيد.
+            </p>
+          </div>
+        </div>
+
+        <form
+          onSubmit={onSubmit}
+          className="bg-white rounded-2xl border border-slate-200 shadow-sm p-6 space-y-5"
+        >
+          {/* Honeypot: hidden from real users, catches bots. */}
+          <div className="hidden" aria-hidden="true">
+            <label>
+              Website
+              <input
+                type="text"
+                tabIndex={-1}
+                autoComplete="off"
+                value={form.website}
+                onChange={(e) => set("website", e.target.value)}
+              />
+            </label>
+          </div>
+
+          <div className="space-y-2">
+            <Label htmlFor="requesterName">
+              الاسم <span className="text-rose-500">*</span>
+            </Label>
+            <Input
+              id="requesterName"
+              value={form.requesterName}
+              onChange={(e) => set("requesterName", e.target.value)}
+              placeholder="الاسم الثلاثي"
+              required
+            />
+          </div>
+
+          <div className="space-y-2">
+            <Label htmlFor="requesterPhone">
+              رقم الهاتف للتواصل <span className="text-rose-500">*</span>
+            </Label>
+            <Input
+              id="requesterPhone"
+              type="tel"
+              inputMode="tel"
+              dir="ltr"
+              className="text-right"
+              value={form.requesterPhone}
+              onChange={(e) => set("requesterPhone", e.target.value)}
+              placeholder="05xxxxxxxx"
+              required
+            />
+          </div>
+
+          <div className="space-y-2">
+            <Label htmlFor="room">
+              القاعة <span className="text-rose-500">*</span>
+            </Label>
+            <Select
+              value={form.roomId}
+              onValueChange={(v) =>
+                // Reset the time selection when the room changes so no stale
+                // date/slot/free-time values survive a room switch (the slot
+                // grid is per-room and slot mode itself may flip).
+                setForm((f) => ({
+                  ...f,
+                  roomId: v,
+                  date: "",
+                  slotId: "",
+                  startsAt: "",
+                  endsAt: "",
+                }))
+              }
+            >
+              <SelectTrigger id="room">
+                <SelectValue
+                  placeholder={
+                    rooms.isLoading ? "جارٍ التحميل…" : "اختر القاعة"
+                  }
+                />
+              </SelectTrigger>
+              <SelectContent>
+                {(rooms.data ?? []).map((r) => (
+                  <SelectItem key={r.id} value={String(r.id)}>
+                    {r.nameAr || r.nameEn}
+                  </SelectItem>
+                ))}
+              </SelectContent>
+            </Select>
+            {rooms.isError && (
+              <p className="text-xs text-rose-500">
+                تعذّر تحميل قائمة القاعات، يرجى تحديث الصفحة.
+              </p>
+            )}
+          </div>
+
+          <div className="space-y-2">
+            <Label htmlFor="department">الإدارة</Label>
+            <Input
+              id="department"
+              value={form.department}
+              onChange={(e) => set("department", e.target.value)}
+              placeholder="الإدارة أو القسم (اختياري)"
+            />
+          </div>
+
+          <div className="space-y-2">
+            <Label htmlFor="title">
+              عنوان الاجتماع <span className="text-rose-500">*</span>
+            </Label>
+            <Input
+              id="title"
+              value={form.title}
+              onChange={(e) => set("title", e.target.value)}
+              placeholder="موضوع أو عنوان الاجتماع"
+              required
+            />
+          </div>
+
+          <div className="space-y-2">
+            <Label>
+              نوع الاجتماع <span className="text-rose-500">*</span>
+            </Label>
+            <div className="grid grid-cols-2 gap-2">
+              {(
+                [
+                  { value: "internal", label: "اجتماع داخلي" },
+                  { value: "external", label: "اجتماع مع جهة خارجية" },
+                ] as const
+              ).map((opt) => (
+                <button
+                  key={opt.value}
+                  type="button"
+                  onClick={() => set("meetingType", opt.value)}
+                  className={`rounded-lg border px-3 py-2.5 text-sm font-medium transition-colors ${
+                    form.meetingType === opt.value
+                      ? "border-sky-500 bg-sky-50 text-sky-700"
+                      : "border-slate-200 bg-white text-slate-600 hover:border-slate-300"
+                  }`}
+                >
+                  {opt.label}
+                </button>
+              ))}
+            </div>
+          </div>
+
+          {isExternal && (
+            <div className="space-y-2">
+              <Label htmlFor="requesterOrg">
+                اسم الجهة <span className="text-rose-500">*</span>
+              </Label>
+              <Input
+                id="requesterOrg"
+                value={form.requesterOrg}
+                onChange={(e) => set("requesterOrg", e.target.value)}
+                placeholder="اسم الجهة الخارجية"
+                required
+              />
+            </div>
+          )}
+
+          <div className="space-y-2">
+            <Label htmlFor="attendeeCount">العدد المتوقع للحضور</Label>
+            <Input
+              id="attendeeCount"
+              type="number"
+              inputMode="numeric"
+              min={1}
+              value={form.attendeeCount}
+              onChange={(e) => set("attendeeCount", e.target.value)}
+              placeholder="العدد المتوقع للحضور (اختياري)"
+            />
+          </div>
+
+          <div className="space-y-2">
+            <Label htmlFor="purpose">الغرض من الاجتماع</Label>
+            <Textarea
+              id="purpose"
+              value={form.purpose}
+              onChange={(e) => set("purpose", e.target.value)}
+              placeholder="اشرح الغرض من الاجتماع (اختياري)"
+              rows={2}
+            />
+          </div>
+
+          {form.roomId === "" ? (
+            // No room chosen yet → we don't know whether slot mode is on, so
+            // show a hint instead of the (possibly wrong) free pickers.
+            <div className="space-y-2">
+              <Label>
+                موعد الحجز <span className="text-rose-500">*</span>
+              </Label>
+              <p className="rounded-lg border border-slate-200 bg-slate-50 px-3 py-3 text-sm text-slate-500">
+                اختر القاعة أولًا لعرض المواعيد المتاحة.
+              </p>
+            </div>
+          ) : slotProbe.isLoading ? (
+            <div className="space-y-2">
+              <Label>
+                موعد الحجز <span className="text-rose-500">*</span>
+              </Label>
+              <p className="text-sm text-slate-500">
+                جارٍ تحميل المواعيد المتاحة…
+              </p>
+            </div>
+          ) : slotProbe.isError ? (
+            <div className="space-y-2">
+              <Label>
+                موعد الحجز <span className="text-rose-500">*</span>
+              </Label>
+              <p className="text-xs text-rose-500">
+                تعذّر تحميل المواعيد، يرجى المحاولة مرة أخرى.
+              </p>
+            </div>
+          ) : slotMode ? (
+            <>
+              <div className="space-y-2">
+                <Label htmlFor="bookingDate">
+                  تاريخ الحجز <span className="text-rose-500">*</span>
+                </Label>
+                <Input
+                  id="bookingDate"
+                  type="date"
+                  min={todayRiyadh()}
+                  value={form.date}
+                  onChange={(e) => {
+                    set("date", e.target.value);
+                    set("slotId", "");
+                  }}
+                />
+              </div>
+              {form.date !== "" && (
+                <div className="space-y-2">
+                  <Label>
+                    الوقت المتاح <span className="text-rose-500">*</span>
+                  </Label>
+                  {availability.isLoading && (
+                    <p className="text-sm text-slate-500">
+                      جارٍ تحميل الأوقات المتاحة…
+                    </p>
+                  )}
+                  {availability.isError && (
+                    <p className="text-xs text-rose-500">
+                      تعذّر تحميل الأوقات، يرجى المحاولة مرة أخرى.
+                    </p>
+                  )}
+                  {availability.data && (
+                    <>
+                      <div className="grid grid-cols-2 gap-2">
+                        {daySlots.map((s) => (
+                          <button
+                            key={s.id}
+                            type="button"
+                            disabled={!s.available}
+                            onClick={() => set("slotId", String(s.id))}
+                            className={`rounded-lg border px-3 py-2.5 text-sm font-medium transition-colors ${
+                              form.slotId === String(s.id)
+                                ? "border-sky-500 bg-sky-50 text-sky-700"
+                                : s.available
+                                  ? "border-slate-200 bg-white text-slate-600 hover:border-slate-300"
+                                  : "border-slate-100 bg-slate-50 text-slate-300 cursor-not-allowed line-through"
+                            }`}
+                            dir="rtl"
+                          >
+                            {fmtSlotLabel(s.startTime, s.durationMinutes)}
+                          </button>
+                        ))}
+                      </div>
+                      {daySlots.length > 0 &&
+                        daySlots.every((s) => !s.available) && (
+                          <p className="text-xs text-amber-600">
+                            لا توجد أوقات متاحة في هذا اليوم، يرجى اختيار يوم
+                            آخر.
+                          </p>
+                        )}
+                    </>
+                  )}
+                </div>
+              )}
+            </>
+          ) : (
+            <>
+              <div className="grid grid-cols-1 sm:grid-cols-2 gap-4">
+                <div className="space-y-2">
+                  <Label htmlFor="startsAt">
+                    من <span className="text-rose-500">*</span>
+                  </Label>
+                  <DateTimePicker
+                    id="startsAt"
+                    value={form.startsAt}
+                    onChange={(v) => set("startsAt", v)}
+                    placeholder="اختر تاريخ ووقت البداية"
+                  />
+                </div>
+                <div className="space-y-2">
+                  <Label htmlFor="endsAt">
+                    إلى <span className="text-rose-500">*</span>
+                  </Label>
+                  <DateTimePicker
+                    id="endsAt"
+                    value={form.endsAt}
+                    onChange={(v) => set("endsAt", v)}
+                    placeholder="اختر تاريخ ووقت النهاية"
+                    minDate={form.startsAt ? new Date(form.startsAt) : undefined}
+                  />
+                </div>
+              </div>
+              {form.startsAt !== "" &&
+                form.endsAt !== "" &&
+                new Date(form.startsAt) >= new Date(form.endsAt) && (
+                  <p className="text-xs text-rose-500 -mt-2">
+                    يجب أن يكون وقت البداية قبل وقت النهاية.
+                  </p>
+                )}
+            </>
+          )}
+
+          <div className="space-y-3">
+            <Label>أبرز الحضور</Label>
+            <AttendeeTableEditor
+              rows={attendees}
+              setRows={setAttendees}
+              labels={{
+                name: "الاسم",
+                position: "المنصب",
+                side: "الجهة",
+                sideInternal: "من الهيئة",
+                sideExternal: "خارج الهيئة",
+                addRow: "إضافة صف",
+                removeRow: "حذف الصف",
+              }}
+            />
+          </div>
+
+          <div className="space-y-2">
+            <Label htmlFor="notes">ملاحظات</Label>
+            <Textarea
+              id="notes"
+              value={form.notes}
+              onChange={(e) => set("notes", e.target.value)}
+              placeholder="أي تفاصيل إضافية (اختياري)"
+              rows={3}
+            />
+          </div>
+
+          <div className="flex items-start gap-2 rounded-lg bg-rose-50 border border-rose-200 text-rose-700 text-sm px-3 py-3">
+            <AlertTriangle className="w-4 h-4 mt-0.5 shrink-0" />
+            <span>
+              للإحاطة: في حال الحاجة للقاعة سيتم إلغاء الاجتماع أو تعديل موقعه.
+            </span>
+          </div>
+
+          {error && (
+            <div className="rounded-lg bg-rose-50 border border-rose-200 text-rose-700 text-sm px-3 py-2">
+              {error}
+            </div>
+          )}
+
+          <Button
+            type="submit"
+            className="w-full"
+            disabled={!canSubmit || submitting}
+          >
+            {submitting && <Loader2 className="w-4 h-4 animate-spin" />}
+            إرسال الطلب
+          </Button>
+        </form>
+      </div>
+    </div>
+  );
+}

lib/db/scripts/pre-push-cleanup.ts

@@ -81,6 +81,81 @@ async function main(): Promise<void> {
       );
     }
 
+    // Backfill booking references BEFORE the schema push enforces the
+    // NOT NULL + unique constraint on protocol_room_bookings.booking_reference.
+    // Without this, pushing the constraint against a populated table (any
+    // pre-existing booking predates the column) would fail. Reference format
+    // mirrors makeBookingReference() in the API: {year}-{pad4(id)} (digits
+    // only, no letters), which is unique because id is unique. Idempotent:
+    // fills NULL rows and normalizes any legacy "RB-" prefixed rows.
+    if (await tableExists(client, "protocol_room_bookings")) {
+      const hasColumn = await client.query(
+        `SELECT 1 FROM information_schema.columns
+          WHERE table_schema = 'public'
+            AND table_name = 'protocol_room_bookings'
+            AND column_name = 'booking_reference'`,
+      );
+      if ((hasColumn.rowCount ?? 0) > 0) {
+        const backfilled = await client.query(
+          `UPDATE protocol_room_bookings
+              SET booking_reference =
+                EXTRACT(YEAR FROM created_at)::int
+                     || '-' || LPAD(id::text, 4, '0')
+            WHERE booking_reference IS NULL`,
+        );
+        const normalized = await client.query(
+          `UPDATE protocol_room_bookings
+              SET booking_reference = regexp_replace(booking_reference, '^RB-', '')
+            WHERE booking_reference LIKE 'RB-%'`,
+        );
+        const stripped = normalized.rowCount ?? 0;
+        if (stripped > 0) {
+          console.log(
+            `[pre-push] Normalized ${stripped} legacy RB- booking_reference value(s) to digits-only.`,
+          );
+        }
+        const filled = backfilled.rowCount ?? 0;
+        if (filled > 0) {
+          console.log(
+            `[pre-push] Backfilled ${filled} protocol_room_bookings booking_reference value(s).`,
+          );
+        } else {
+          console.log(
+            "[pre-push] No protocol_room_bookings booking_reference to backfill.",
+          );
+        }
+      } else {
+        console.log(
+          "[pre-push] protocol_room_bookings.booking_reference column not present yet — skipping backfill.",
+        );
+      }
+    } else {
+      console.log(
+        "[pre-push] protocol_room_bookings table not present yet — skipping booking_reference backfill.",
+      );
+    }
+
+    // Idempotent rename of the protocol app tile: «العلاقات العامة والمراسم»
+    // → «المراسم والعلاقات العامة» (and matching English order). Keeps prod
+    // in sync with the dev DB + seed data.
+    if (await tableExists(client, "apps")) {
+      const renamed = await client.query(
+        `UPDATE apps
+            SET name_ar = 'المراسم والعلاقات العامة',
+                name_en = 'Protocol & Public Relations'
+          WHERE slug = 'protocol'
+            AND (name_ar <> 'المراسم والعلاقات العامة'
+                 OR name_en <> 'Protocol & Public Relations')`,
+      );
+      if ((renamed.rowCount ?? 0) > 0) {
+        console.log("[pre-push] Renamed protocol app tile to «المراسم والعلاقات العامة».");
+      } else {
+        console.log("[pre-push] Protocol app tile name already up to date.");
+      }
+    } else {
+      console.log("[pre-push] apps table not present yet — skipping protocol rename.");
+    }
+
     await client.query("COMMIT");
   } catch (err) {
     await client.query("ROLLBACK").catch(() => {});

lib/db/src/built-in-apps.ts

@@ -27,6 +27,7 @@ export const BUILTIN_APP_SLUGS = [
   "executive-meetings",
   "calendar",
   "documents",
+  "protocol",
 ] as const;
 
 export type BuiltinAppSlug = (typeof BUILTIN_APP_SLUGS)[number];

lib/db/src/schema/executive-meetings.ts

@@ -73,6 +73,12 @@ export const executiveMeetingsTable = pgTable(
     // signal about the meeting (urgent / VIP / etc.) rather than a
     // personal viewing preference.
     rowColor: varchar("row_color", { length: 16 }),
+    // #635: External meetings (اجتماع خارجي). When true, the row is
+    // tinted red in the schedule grid and is excluded from the
+    // auto-postpone cascade (the alert "Postpone" button is disabled
+    // and `computeCascadeShift` skips it as a follower). Default false
+    // preserves legacy rows as "internal" meetings.
+    isExternal: boolean("is_external").notNull().default(false),
     createdBy: integer("created_by").references(() => usersTable.id, {
       onDelete: "set null",
     }),

lib/db/src/schema/index.ts

@@ -14,4 +14,5 @@ export * from "./audit-logs";
 export * from "./role-audit";
 export * from "./permission-audit";
 export * from "./executive-meetings";
+export * from "./protocol";
 export * from "./push-subscriptions";

lib/db/src/schema/protocol.ts

@@ -0,0 +1,503 @@
+import {
+  pgTable,
+  serial,
+  integer,
+  varchar,
+  text,
+  timestamp,
+  jsonb,
+  boolean,
+  index,
+  uniqueIndex,
+} from "drizzle-orm/pg-core";
+import { createInsertSchema } from "drizzle-zod";
+import { z } from "zod/v4";
+import { usersTable } from "./users";
+
+// ---------------------------------------------------------------------------
+// Public Relations & Protocol module ("العلاقات العامة والمراسم").
+//
+// A completely standalone module. Every table is prefixed `protocol_` and has
+// no foreign keys into the Executive Meetings tables, so the two modules stay
+// fully independent. Only `usersTable` (the shared account table) is
+// referenced, and always with `on delete set null` so removing a user never
+// cascades into protocol history.
+// ---------------------------------------------------------------------------
+
+// Status values for room bookings and gift issuances. The overlap /
+// conflict-prevention rule only considers "pending" and "approved" rows as
+// occupying a room; "rejected" and "cancelled" free the slot again.
+export const PROTOCOL_BOOKING_STATUSES = [
+  "pending",
+  "approved",
+  "rejected",
+  "cancelled",
+] as const;
+export type ProtocolBookingStatus =
+  (typeof PROTOCOL_BOOKING_STATUSES)[number];
+
+// A room booking is either an internal meeting or a meeting with an external
+// entity. When external, the requester's organization (requesterOrg / اسم
+// الجهة) is required.
+export const PROTOCOL_MEETING_TYPES = ["internal", "external"] as const;
+export type ProtocolMeetingType = (typeof PROTOCOL_MEETING_TYPES)[number];
+
+// Which "side" a key attendee belongs to: from the authority (من الهيئة) or
+// from outside it (خارج الهيئة).
+export const PROTOCOL_ATTENDEE_SIDES = ["internal", "external"] as const;
+export type ProtocolAttendeeSide = (typeof PROTOCOL_ATTENDEE_SIDES)[number];
+
+// A notable attendee ("أبرز الحضور") captured on the booking request. Stored
+// as a JSON array on the booking row.
+export type ProtocolKeyAttendee = {
+  name: string;
+  position: string;
+  side: ProtocolAttendeeSide;
+};
+
+export const PROTOCOL_ISSUE_STATUSES = [
+  "pending",
+  "approved",
+  "rejected",
+  "issued",
+] as const;
+export type ProtocolIssueStatus = (typeof PROTOCOL_ISSUE_STATUSES)[number];
+
+// Gift catalogue kinds: a regular gift or a commemorative shield (درع).
+export const PROTOCOL_GIFT_KINDS = ["gift", "shield"] as const;
+export type ProtocolGiftKind = (typeof PROTOCOL_GIFT_KINDS)[number];
+
+// ---------------------------------------------------------------------------
+// Rooms
+// ---------------------------------------------------------------------------
+export const protocolRoomsTable = pgTable(
+  "protocol_rooms",
+  {
+    id: serial("id").primaryKey(),
+    nameAr: varchar("name_ar", { length: 200 }).notNull(),
+    nameEn: varchar("name_en", { length: 200 }).notNull().default(""),
+    capacity: integer("capacity"),
+    location: varchar("location", { length: 300 }),
+    isActive: boolean("is_active").notNull().default(true),
+    sortOrder: integer("sort_order").notNull().default(0),
+    createdBy: integer("created_by").references(() => usersTable.id, {
+      onDelete: "set null",
+    }),
+    createdAt: timestamp("created_at", { withTimezone: true })
+      .notNull()
+      .defaultNow(),
+    updatedAt: timestamp("updated_at", { withTimezone: true })
+      .notNull()
+      .defaultNow()
+      .$onUpdate(() => new Date()),
+  },
+  (t) => ({
+    activeIdx: index("protocol_rooms_active_idx").on(t.isActive),
+  }),
+);
+
+// ---------------------------------------------------------------------------
+// Room bookings
+// ---------------------------------------------------------------------------
+export const protocolRoomBookingsTable = pgTable(
+  "protocol_room_bookings",
+  {
+    id: serial("id").primaryKey(),
+    roomId: integer("room_id")
+      .notNull()
+      .references(() => protocolRoomsTable.id, { onDelete: "cascade" }),
+    title: varchar("title", { length: 500 }).notNull(),
+    requesterName: varchar("requester_name", { length: 300 }),
+    // Guest-supplied contact phone. Only populated for public
+    // (self-service) booking requests; internal bookings leave it null.
+    requesterPhone: varchar("requester_phone", { length: 40 }),
+    // The requester's organization / entity (الجهة). Optional even for
+    // public requests; always null for internal bookings unless set.
+    requesterOrg: varchar("requester_org", { length: 300 }),
+    // Expected number of attendees (العدد المتوقع للحضور). Optional; supplied
+    // by the guest on a public request or by staff on an internal booking.
+    attendeeCount: integer("attendee_count"),
+    // The requester's department / administration (الإدارة). Optional.
+    department: varchar("department", { length: 300 }),
+    // Whether the meeting is internal or with an external entity. When
+    // "external", requesterOrg (اسم الجهة) is required. Defaults to internal.
+    meetingType: varchar("meeting_type", { length: 20 })
+      .notNull()
+      .default("internal"),
+    // Free-text purpose of the meeting (الغرض من الاجتماع). Optional.
+    purpose: text("purpose"),
+    // Notable attendees (أبرز الحضور): array of { name, position, side }.
+    keyAttendees: jsonb("key_attendees")
+      .$type<ProtocolKeyAttendee[]>()
+      .notNull()
+      .default([]),
+    // Human-friendly, unique booking reference (رقم الحجز) shown to the
+    // requester on success and searchable by staff. Generated on insert and
+    // never null — every booking (public or internal) has one.
+    bookingReference: varchar("booking_reference", { length: 40 }).notNull(),
+    // Provenance marker. "internal" for bookings created by authenticated
+    // protocol staff through the app; "public" for guest requests coming in
+    // via the no-login booking-request link. Defaults to "internal" so all
+    // pre-existing rows are treated as internal.
+    source: varchar("source", { length: 20 }).notNull().default("internal"),
+    // Full timestamps so bookings can span any part of a day. The overlap
+    // rule compares [startsAt, endsAt) intervals per room.
+    startsAt: timestamp("starts_at", { withTimezone: true }).notNull(),
+    endsAt: timestamp("ends_at", { withTimezone: true }).notNull(),
+    status: varchar("status", { length: 20 }).notNull().default("pending"),
+    notes: text("notes"),
+    createdBy: integer("created_by").references(() => usersTable.id, {
+      onDelete: "set null",
+    }),
+    approvedBy: integer("approved_by").references(() => usersTable.id, {
+      onDelete: "set null",
+    }),
+    approvedAt: timestamp("approved_at", { withTimezone: true }),
+    rejectionReason: text("rejection_reason"),
+    createdAt: timestamp("created_at", { withTimezone: true })
+      .notNull()
+      .defaultNow(),
+    updatedAt: timestamp("updated_at", { withTimezone: true })
+      .notNull()
+      .defaultNow()
+      .$onUpdate(() => new Date()),
+  },
+  (t) => ({
+    roomIdx: index("protocol_bookings_room_idx").on(t.roomId),
+    startIdx: index("protocol_bookings_start_idx").on(t.startsAt),
+    statusIdx: index("protocol_bookings_status_idx").on(t.status),
+    referenceIdx: uniqueIndex("protocol_bookings_reference_idx").on(
+      t.bookingReference,
+    ),
+    phoneIdx: index("protocol_bookings_phone_idx").on(t.requesterPhone),
+  }),
+);
+
+// ---------------------------------------------------------------------------
+// External protocol meetings (اجتماعات ومراسم خارجية) — independent from the
+// Executive Meetings module's is_external flag.
+// ---------------------------------------------------------------------------
+export const protocolExternalMeetingsTable = pgTable(
+  "protocol_external_meetings",
+  {
+    id: serial("id").primaryKey(),
+    title: varchar("title", { length: 500 }).notNull(),
+    // The visiting party / external delegation.
+    partyName: varchar("party_name", { length: 300 }),
+    location: varchar("location", { length: 300 }),
+    startsAt: timestamp("starts_at", { withTimezone: true }).notNull(),
+    endsAt: timestamp("ends_at", { withTimezone: true }),
+    // Lifecycle: pending -> approved | rejected, then optionally
+    // completed | cancelled. Mirrors the booking / gift-issue approval flow.
+    status: varchar("status", { length: 20 }).notNull().default("pending"),
+    notes: text("notes"),
+    createdBy: integer("created_by").references(() => usersTable.id, {
+      onDelete: "set null",
+    }),
+    approvedBy: integer("approved_by").references(() => usersTable.id, {
+      onDelete: "set null",
+    }),
+    approvedAt: timestamp("approved_at", { withTimezone: true }),
+    rejectionReason: text("rejection_reason"),
+    createdAt: timestamp("created_at", { withTimezone: true })
+      .notNull()
+      .defaultNow(),
+    updatedAt: timestamp("updated_at", { withTimezone: true })
+      .notNull()
+      .defaultNow()
+      .$onUpdate(() => new Date()),
+  },
+  (t) => ({
+    startIdx: index("protocol_ext_meetings_start_idx").on(t.startsAt),
+    statusIdx: index("protocol_ext_meetings_status_idx").on(t.status),
+  }),
+);
+
+// ---------------------------------------------------------------------------
+// Gifts & shields catalogue
+// ---------------------------------------------------------------------------
+export const protocolGiftsTable = pgTable(
+  "protocol_gifts",
+  {
+    id: serial("id").primaryKey(),
+    nameAr: varchar("name_ar", { length: 300 }).notNull(),
+    nameEn: varchar("name_en", { length: 300 }).notNull().default(""),
+    kind: varchar("kind", { length: 20 }).notNull().default("gift"),
+    descriptionAr: text("description_ar"),
+    descriptionEn: text("description_en"),
+    imageUrl: varchar("image_url", { length: 500 }),
+    // Running stock count. Issuing an approved gift decrements this.
+    quantityInStock: integer("quantity_in_stock").notNull().default(0),
+    isActive: boolean("is_active").notNull().default(true),
+    createdBy: integer("created_by").references(() => usersTable.id, {
+      onDelete: "set null",
+    }),
+    createdAt: timestamp("created_at", { withTimezone: true })
+      .notNull()
+      .defaultNow(),
+    updatedAt: timestamp("updated_at", { withTimezone: true })
+      .notNull()
+      .defaultNow()
+      .$onUpdate(() => new Date()),
+  },
+  (t) => ({
+    kindIdx: index("protocol_gifts_kind_idx").on(t.kind),
+  }),
+);
+
+// ---------------------------------------------------------------------------
+// Gift issuances (صرف الهدايا/الدروع)
+// ---------------------------------------------------------------------------
+export const protocolGiftIssuesTable = pgTable(
+  "protocol_gift_issues",
+  {
+    id: serial("id").primaryKey(),
+    giftId: integer("gift_id")
+      .notNull()
+      .references(() => protocolGiftsTable.id, { onDelete: "restrict" }),
+    recipientName: varchar("recipient_name", { length: 300 }).notNull(),
+    occasion: varchar("occasion", { length: 300 }),
+    quantity: integer("quantity").notNull().default(1),
+    issuedAt: timestamp("issued_at", { withTimezone: true }),
+    status: varchar("status", { length: 20 }).notNull().default("pending"),
+    notes: text("notes"),
+    createdBy: integer("created_by").references(() => usersTable.id, {
+      onDelete: "set null",
+    }),
+    approvedBy: integer("approved_by").references(() => usersTable.id, {
+      onDelete: "set null",
+    }),
+    approvedAt: timestamp("approved_at", { withTimezone: true }),
+    rejectionReason: text("rejection_reason"),
+    createdAt: timestamp("created_at", { withTimezone: true })
+      .notNull()
+      .defaultNow(),
+    updatedAt: timestamp("updated_at", { withTimezone: true })
+      .notNull()
+      .defaultNow()
+      .$onUpdate(() => new Date()),
+  },
+  (t) => ({
+    giftIdx: index("protocol_gift_issues_gift_idx").on(t.giftId),
+    statusIdx: index("protocol_gift_issues_status_idx").on(t.status),
+  }),
+);
+
+// ---------------------------------------------------------------------------
+// Visit photo albums (صور الزيارات) — "تصوير" tab.
+//
+// An album groups photographs of a visit. It may optionally be linked to an
+// external protocol meeting (اللقاءات الخارجية); the link is `set null` so
+// deleting the meeting never removes the album. The album cover is derived at
+// query time from the first photo (by sortOrder), so there is no circular
+// album <-> photo foreign key to keep in sync.
+// ---------------------------------------------------------------------------
+export const protocolPhotoAlbumsTable = pgTable(
+  "protocol_photo_albums",
+  {
+    id: serial("id").primaryKey(),
+    name: varchar("name", { length: 300 }).notNull(),
+    externalMeetingId: integer("external_meeting_id").references(
+      () => protocolExternalMeetingsTable.id,
+      { onDelete: "set null" },
+    ),
+    createdBy: integer("created_by").references(() => usersTable.id, {
+      onDelete: "set null",
+    }),
+    createdAt: timestamp("created_at", { withTimezone: true })
+      .notNull()
+      .defaultNow(),
+    updatedAt: timestamp("updated_at", { withTimezone: true })
+      .notNull()
+      .defaultNow()
+      .$onUpdate(() => new Date()),
+  },
+  (t) => ({
+    meetingIdx: index("protocol_albums_meeting_idx").on(t.externalMeetingId),
+  }),
+);
+
+// ---------------------------------------------------------------------------
+// Photos inside an album. Each photo references a private object-storage path
+// (`/objects/<id>`) served through the authorized object endpoint. Deleting an
+// album cascades to its photos.
+// ---------------------------------------------------------------------------
+export const protocolPhotosTable = pgTable(
+  "protocol_photos",
+  {
+    id: serial("id").primaryKey(),
+    albumId: integer("album_id")
+      .notNull()
+      .references(() => protocolPhotoAlbumsTable.id, { onDelete: "cascade" }),
+    objectPath: varchar("object_path", { length: 500 }).notNull(),
+    sortOrder: integer("sort_order").notNull().default(0),
+    uploadedBy: integer("uploaded_by").references(() => usersTable.id, {
+      onDelete: "set null",
+    }),
+    createdAt: timestamp("created_at", { withTimezone: true })
+      .notNull()
+      .defaultNow(),
+  },
+  (t) => ({
+    albumIdx: index("protocol_photos_album_idx").on(t.albumId),
+    pathIdx: index("protocol_photos_path_idx").on(t.objectPath),
+  }),
+);
+
+// ---------------------------------------------------------------------------
+// Bookable time slots (أوقات الحجز).
+//
+// Slots are GLOBAL — they define the daily time grid available for booking in
+// every room (per-room availability still comes from the conflict rule).
+// Keeping them global was a deliberate simplicity choice: the admin manages
+// one list of times instead of one list per room, matching how the team
+// actually schedules. `startTime` is a wall-clock "HH:mm" in Asia/Riyadh.
+// ---------------------------------------------------------------------------
+export const protocolBookingSlotsTable = pgTable(
+  "protocol_booking_slots",
+  {
+    id: serial("id").primaryKey(),
+    // Wall-clock start time in Asia/Riyadh, canonical "HH:mm" (24h, zero
+    // padded). Uniqueness is enforced so two slots can't start together.
+    startTime: varchar("start_time", { length: 5 }).notNull(),
+    durationMinutes: integer("duration_minutes").notNull().default(30),
+    // Days of week (0=Sunday .. 6=Saturday, Riyadh calendar) on which this
+    // slot is offered. Defaults to every day so pre-existing rows keep their
+    // old behaviour.
+    daysOfWeek: integer("days_of_week")
+      .array()
+      .notNull()
+      .default([0, 1, 2, 3, 4, 5, 6]),
+    isActive: boolean("is_active").notNull().default(true),
+    sortOrder: integer("sort_order").notNull().default(0),
+    createdBy: integer("created_by").references(() => usersTable.id, {
+      onDelete: "set null",
+    }),
+    createdAt: timestamp("created_at", { withTimezone: true })
+      .notNull()
+      .defaultNow(),
+    updatedAt: timestamp("updated_at", { withTimezone: true })
+      .notNull()
+      .defaultNow()
+      .$onUpdate(() => new Date()),
+  },
+  (t) => ({
+    activeIdx: index("protocol_slots_active_idx").on(t.isActive),
+    startUnique: uniqueIndex("protocol_slots_start_unique").on(t.startTime),
+  }),
+);
+
+// ---------------------------------------------------------------------------
+// Module settings (key/value). Currently only `booking.minLeadMinutes` — the
+// minimum advance notice (in minutes) required before a PUBLIC booking's
+// start time. Stored as a string value to keep the table generic.
+// ---------------------------------------------------------------------------
+export const protocolSettingsTable = pgTable(
+  "protocol_settings",
+  {
+    id: serial("id").primaryKey(),
+    key: varchar("key", { length: 100 }).notNull(),
+    value: text("value").notNull(),
+    updatedBy: integer("updated_by").references(() => usersTable.id, {
+      onDelete: "set null",
+    }),
+    updatedAt: timestamp("updated_at", { withTimezone: true })
+      .notNull()
+      .defaultNow()
+      .$onUpdate(() => new Date()),
+  },
+  (t) => ({
+    keyUnique: uniqueIndex("protocol_settings_key_unique").on(t.key),
+  }),
+);
+
+// ---------------------------------------------------------------------------
+// Audit log (scoped to the protocol module only)
+// ---------------------------------------------------------------------------
+export const protocolAuditLogsTable = pgTable(
+  "protocol_audit_logs",
+  {
+    id: serial("id").primaryKey(),
+    action: varchar("action", { length: 100 }).notNull(),
+    entityType: varchar("entity_type", { length: 50 }).notNull(),
+    entityId: integer("entity_id"),
+    oldValue: jsonb("old_value"),
+    newValue: jsonb("new_value"),
+    performedBy: integer("performed_by").references(() => usersTable.id, {
+      onDelete: "set null",
+    }),
+    performedAt: timestamp("performed_at", { withTimezone: true })
+      .notNull()
+      .defaultNow(),
+  },
+  (t) => ({
+    entityIdx: index("protocol_audit_entity_idx").on(t.entityType, t.entityId),
+    performedAtIdx: index("protocol_audit_performed_at_idx").on(t.performedAt),
+  }),
+);
+
+// ---------------------------------------------------------------------------
+// Insert schemas / row types
+// ---------------------------------------------------------------------------
+export const insertProtocolRoomSchema = createInsertSchema(
+  protocolRoomsTable,
+).omit({ id: true, createdAt: true, updatedAt: true });
+export type InsertProtocolRoom = z.infer<typeof insertProtocolRoomSchema>;
+export type ProtocolRoom = typeof protocolRoomsTable.$inferSelect;
+
+export const insertProtocolRoomBookingSchema = createInsertSchema(
+  protocolRoomBookingsTable,
+).omit({ id: true, createdAt: true, updatedAt: true });
+export type InsertProtocolRoomBooking = z.infer<
+  typeof insertProtocolRoomBookingSchema
+>;
+export type ProtocolRoomBooking = typeof protocolRoomBookingsTable.$inferSelect;
+
+export const insertProtocolExternalMeetingSchema = createInsertSchema(
+  protocolExternalMeetingsTable,
+).omit({ id: true, createdAt: true, updatedAt: true });
+export type InsertProtocolExternalMeeting = z.infer<
+  typeof insertProtocolExternalMeetingSchema
+>;
+export type ProtocolExternalMeeting =
+  typeof protocolExternalMeetingsTable.$inferSelect;
+
+export const insertProtocolGiftSchema = createInsertSchema(
+  protocolGiftsTable,
+).omit({ id: true, createdAt: true, updatedAt: true });
+export type InsertProtocolGift = z.infer<typeof insertProtocolGiftSchema>;
+export type ProtocolGift = typeof protocolGiftsTable.$inferSelect;
+
+export const insertProtocolGiftIssueSchema = createInsertSchema(
+  protocolGiftIssuesTable,
+).omit({ id: true, createdAt: true, updatedAt: true });
+export type InsertProtocolGiftIssue = z.infer<
+  typeof insertProtocolGiftIssueSchema
+>;
+export type ProtocolGiftIssue = typeof protocolGiftIssuesTable.$inferSelect;
+
+export const insertProtocolPhotoAlbumSchema = createInsertSchema(
+  protocolPhotoAlbumsTable,
+).omit({ id: true, createdAt: true, updatedAt: true });
+export type InsertProtocolPhotoAlbum = z.infer<
+  typeof insertProtocolPhotoAlbumSchema
+>;
+export type ProtocolPhotoAlbum = typeof protocolPhotoAlbumsTable.$inferSelect;
+
+export const insertProtocolPhotoSchema = createInsertSchema(
+  protocolPhotosTable,
+).omit({ id: true, createdAt: true });
+export type InsertProtocolPhoto = z.infer<typeof insertProtocolPhotoSchema>;
+export type ProtocolPhoto = typeof protocolPhotosTable.$inferSelect;
+
+export type ProtocolAuditLog = typeof protocolAuditLogsTable.$inferSelect;
+
+export const insertProtocolBookingSlotSchema = createInsertSchema(
+  protocolBookingSlotsTable,
+).omit({ id: true, createdAt: true, updatedAt: true });
+export type InsertProtocolBookingSlot = z.infer<
+  typeof insertProtocolBookingSlotSchema
+>;
+export type ProtocolBookingSlot = typeof protocolBookingSlotsTable.$inferSelect;
+
+export type ProtocolSetting = typeof protocolSettingsTable.$inferSelect;

pnpm-lock.yaml

@@ -90,6 +90,9 @@ importers:
       arabic-persian-reshaper:
         specifier: 1.0.1
         version: 1.0.1
+      archiver:
+        specifier: ^8.0.0
+        version: 8.0.0
       bcryptjs:
         specifier: ^3.0.3
         version: 3.0.3
@@ -148,6 +151,9 @@ importers:
         specifier: 'catalog:'
         version: 3.25.76
     devDependencies:
+      '@types/archiver':
+        specifier: ^8.0.0
+        version: 8.0.0
       '@types/bcryptjs':
         specifier: ^3.0.0
         version: 3.0.0
@@ -2434,6 +2440,7 @@ packages:
   '@smithy/core@3.24.1':
     resolution: {integrity: sha512-3mT7o4qQyUWttYnVK3A0Z/u3Xha3E81tXn32Tz6vjZiUXhBrkEivpw1hBYfh84iFF9CSzkBU9Y1DJ3Q6RQ231g==}
     engines: {node: '>=18.0.0'}
+    deprecated: Deprecated due to bug in browser bundling instructions https://github.com/smithy-lang/smithy-typescript/issues/2025
 
   '@smithy/credential-provider-imds@4.3.1':
     resolution: {integrity: sha512-0S/acwHnqX4WrjXzhdiDRxsG2s9SC0cpPIK9nZ1R6UOHd+j7uL28+4bHu22urbLk2TVw3fkp6na/+fkUt/pLNQ==}
@@ -2888,6 +2895,9 @@ packages:
   '@transloadit/prettier-bytes@0.3.5':
     resolution: {integrity: sha512-xF4A3d/ZyX2LJWeQZREZQw+qFX4TGQ8bGVP97OLRt6sPO6T0TNHBFTuRHOJh7RNmYOBmQ9MHxpolD9bXihpuVA==}
 
+  '@types/archiver@8.0.0':
+    resolution: {integrity: sha512-YpXPbEuv9+eUIPPQWUPahj3cvs9isWRuF+J4z+KbdYVDO3rWorWQFxUVHnwPu2AgKwvgpki5F2VMX0Xx+mX45A==}
+
   '@types/babel__core@7.20.5':
     resolution: {integrity: sha512-qoQprZvz5wQFJwMDqeseRXWv3rqMvhgpbXFfVyWhbx9X47POIA6i/+dXefEmZKoAgOaTdaIgNSMqMIU61yRyzA==}
 
@@ -2996,6 +3006,9 @@ packages:
   '@types/react@19.2.14':
     resolution: {integrity: sha512-ilcTH/UniCkMdtexkoCN0bI7pMcJDvmQFPvuPvmEaYA/NSfFTAgdUSLAoVjaRJm7+6PvcM+q1zYOwS4wTYMF9w==}
 
+  '@types/readdir-glob@1.1.5':
+    resolution: {integrity: sha512-raiuEPUYqXu+nvtY2Pe8s8FEmZ3x5yAH4VkLdihcPdalvsHltomrRC9BzuStrJ9yk06470hS0Crw0f1pXqD+Hg==}
+
   '@types/retry@0.12.2':
     resolution: {integrity: sha512-XISRgDJ2Tc5q4TRqvgJtzsRkFYNJzZrhTdtMoGVBttwzzQJkPnS3WWTFc7kuDRoPtPakl+T+OfdEUjYJj7Jbow==}
 
@@ -3101,6 +3114,10 @@ packages:
     peerDependencies:
       vite: ^4.2.0 || ^5.0.0 || ^6.0.0 || ^7.0.0
 
+  abort-controller@3.0.0:
+    resolution: {integrity: sha512-h8lQ8tacZYnR3vNQTgibj+tODHI5/+l06Au2Pcriv/Gmet0eaj4TwWH41sO9wnHDiQsEj19q0drzdWdeAHtweg==}
+    engines: {node: '>=6.5'}
+
   accepts@1.3.8:
     resolution: {integrity: sha512-PYAthTa2m2VKxuvSD3DPC/Gy+U+sOA1LAuT8mkmRuvw+NACSaeXEQ+NHcVF7rONl6qcaxV3Uuemwawk+7+SJLw==}
     engines: {node: '>= 0.6'}
@@ -3143,6 +3160,10 @@ packages:
   arabic-persian-reshaper@1.0.1:
     resolution: {integrity: sha512-VYBjkhz6o4W1Xt4mD2LAReljJpLSw5CUZMqSBDIQRvFgUSlTKEYghapgBWvkeMWF4W+KF3Fm+/z8EywJU4PBeg==}
 
+  archiver@8.0.0:
+    resolution: {integrity: sha512-fV1orZfsnPn9BaSByR/qE67rJCLJEy2Ox5bq7nJh+jquWaNh6Sfec75kJ2T6PtdGUbPQlrVoSVCEOa5SdiTQ1g==}
+    engines: {node: '>=18'}
+
   argparse@2.0.1:
     resolution: {integrity: sha512-8+9WqebbFzpX9OR+Wa6O29asIogeRMzcGtAINdpMHHyAg10f05aSFVBbcEqGf/PXw1EjAZ+q2/bEBg3DvurK3Q==}
 
@@ -3153,13 +3174,69 @@ packages:
   asn1.js@5.4.1:
     resolution: {integrity: sha512-+I//4cYPccV8LdmBLiX8CYvf9Sp3vQsrqu2QNXRcrbiWvcx/UdlFiqUJJzxRQxgsZmvhXhn4cSKeSmoFjVdupA==}
 
+  async@3.2.6:
+    resolution: {integrity: sha512-htCUDlxyyCLMgaM3xXg0C0LW2xqfuQ6p05pCEIsXuyQ+a1koYKTuBMzRNwmybfLgvJDMd0r1LTn4+E0Ti6C2AA==}
+
   atomic-sleep@1.0.0:
     resolution: {integrity: sha512-kNOjDqAh7px0XWNI+4QbzoiR/nTkHAWNud2uvnJquD1/x5a7EQZMJT0AczqK0Qn67oY/TTQ1LbUKajZpp3I9tQ==}
     engines: {node: '>=8.0.0'}
 
+  b4a@1.8.1:
+    resolution: {integrity: sha512-aiqre1Nr0B/6DgE2N5vwTc+2/oQZ4Wh1t4NznYY4E00y8LCt6NqdRv81so00oo27D8MVKTpUa/MwUUtBLXCoDw==}
+    peerDependencies:
+      react-native-b4a: '*'
+    peerDependenciesMeta:
+      react-native-b4a:
+        optional: true
+
   balanced-match@1.0.2:
     resolution: {integrity: sha512-3oSeUO0TMV67hN1AmbXsK4yaqU7tjiHlbxRDZOpH0KW9+CeX4bRAaX0Anxt0tx2MrpRpWwQaPwIlISEJhYU5Pw==}
 
+  balanced-match@4.0.4:
+    resolution: {integrity: sha512-BLrgEcRTwX2o6gGxGOCNyMvGSp35YofuYzw9h1IMTRmKqttAZZVU67bdb9Pr2vUHA8+j3i2tJfjO6C6+4myGTA==}
+    engines: {node: 18 || 20 || >=22}
+
+  bare-events@2.9.1:
+    resolution: {integrity: sha512-Z0oHEHAFDZkffN8Qc39zNZjQlMDkPJRyyyZieU1VH7u8c5S+qHZ2S8ixdKIAxEjfHO7FJxXmJWgteOghVanIsg==}
+    peerDependencies:
+      bare-abort-controller: '*'
+    peerDependenciesMeta:
+      bare-abort-controller:
+        optional: true
+
+  bare-fs@4.7.3:
+    resolution: {integrity: sha512-xRgplks8SvcKkdlv2M6Z2LZmRsmqd+x0nXXGXeMEjwdibj1HSDrlnqBRLeYdMvsgCox7Bq0e+DHwfczOfsn6IA==}
+    engines: {bare: '>=1.16.0'}
+    peerDependencies:
+      bare-buffer: '*'
+    peerDependenciesMeta:
+      bare-buffer:
+        optional: true
+
+  bare-os@3.9.3:
+    resolution: {integrity: sha512-fF4Q7QsyKVF5Rj0qvI8BgUNjqzC2JvQlpTaPLjVJVxYVUX5Zr9un+y3w1HmA4nNKdFmRBT8z/WmrjvXzXVerKQ==}
+    engines: {bare: '>=1.14.0'}
+
+  bare-path@3.0.1:
+    resolution: {integrity: sha512-ghj2DSK/2e99a1anTVPCV4m4YIYtrbXhfM7V3D7XZLOTsybnYyaJloymGqssQc8l/or0UoDyRtNQkmkEF/ysgQ==}
+
+  bare-stream@2.13.3:
+    resolution: {integrity: sha512-Kc+brLqvEqGkjyfiwJmImAOqLZL7OsoLKuavx+hJjgVV3nLTOjloJyPMFxjUPerGGHrNH0fLU06jjykMLWrERQ==}
+    peerDependencies:
+      bare-abort-controller: '*'
+      bare-buffer: '*'
+      bare-events: '*'
+    peerDependenciesMeta:
+      bare-abort-controller:
+        optional: true
+      bare-buffer:
+        optional: true
+      bare-events:
+        optional: true
+
+  bare-url@2.4.5:
+    resolution: {integrity: sha512-K+y9xF1tN+CdPu4qWwr0QiK1Al07eFPGYK5M2pDXcmHdMdgC/tT/bpmMe1hrmRHaidKLkXrC+cRNYf3XVDUhSQ==}
+
   base64-js@0.0.8:
     resolution: {integrity: sha512-3XSA2cR/h/73EzlXXdU6YNycmYI7+kicTxks4eJg2g39biHR84slg2+des+p7iHYhbRg/udIS4TD53WabcOUkw==}
     engines: {node: '>= 0.4'}
@@ -3196,6 +3273,10 @@ packages:
   brace-expansion@2.0.2:
     resolution: {integrity: sha512-Jt0vHyM+jmUBqojB7E1NIYadt0vI0Qxjxd2TErW94wDz+E2LAm5vKMXXwg6ZZBTHPuUlDgQHKXvjGBdfcF1ZDQ==}
 
+  brace-expansion@5.0.7:
+    resolution: {integrity: sha512-7oFy703dxfY3/NLxC1fh2SUCQ0H9rmAY+5EpDVfXjUTTs+HEwR2nYaqLv+GWcTsumwxPfiz6CzCNkwXwBUwqCA==}
+    engines: {node: 18 || 20 || >=22}
+
   braces@3.0.3:
     resolution: {integrity: sha512-yQbXgO/OSZVD2IsiLlro+7Hf6Q18EJrKSEsdoMzKePKXct3gvD8oLcOQdIzGupr5Fj+EDe8gO/lxc1BzfMpxvA==}
     engines: {node: '>=8'}
@@ -3211,12 +3292,19 @@ packages:
     engines: {node: ^6 || ^7 || ^8 || ^9 || ^10 || ^11 || ^12 || >=13.7}
     hasBin: true
 
+  buffer-crc32@1.0.0:
+    resolution: {integrity: sha512-Db1SbgBS/fg/392AblrMJk97KggmvYhr4pB5ZIMTWtaivCPMWLkmb7m21cJvpvgK+J3nsU2CmmixNBZx4vFj/w==}
+    engines: {node: '>=8.0.0'}
+
   buffer-equal-constant-time@1.0.1:
     resolution: {integrity: sha512-zRpUiDwd/xk6ADqPMATG8vc9VPrkck7T07OIx0gnjmJAnHnTVXNQG3vfvWNuiZIkwu9KrKdA1iJKfsfTVxE6NA==}
 
   buffer-from@1.1.2:
     resolution: {integrity: sha512-E+XQCRwSbaaiChtv6k6Dwgc+bx+Bs6vuKJHHl5kox/BaKbhiXzqQOwK4cO22yElGp2OCmjwVhT3HmxgyPGnJfQ==}
 
+  buffer@6.0.3:
+    resolution: {integrity: sha512-FTiCpNxtwiZZHEZbcbTIcZjERVICn9yq/pDFkTl95/AxzD1naBctN7YO68riM/gLSDY7sdrMby8hofADYuuqOA==}
+
   bytes@3.1.2:
     resolution: {integrity: sha512-/Nf7TyzTx6S3yRJObOAV7956r8cr2+Oj8AC5dt8wSP3BQAoeX58NoHyCU8P8zGkNXStjTSi6fzO6F0pBdcYbEg==}
     engines: {node: '>= 0.8'}
@@ -3270,6 +3358,10 @@ packages:
   compare-versions@6.1.1:
     resolution: {integrity: sha512-4hm4VPpIecmlg59CHXnRDnqGplJFrbLG4aFEl5vl6cK1u76ws3LLvX7ikFnTDl5vo39sjWD6AaDPYodJp/NNHg==}
 
+  compress-commons@7.0.1:
+    resolution: {integrity: sha512-g0S8KAD8qf4+V//pr3BfB1aBnARLXNz2Gx+jmHU0LEriUuoQUOPOulVquHKTJ8+EAIIO7fhseNDr9wK5Q9FKBQ==}
+    engines: {node: '>=18'}
+
   connect-pg-simple@10.0.0:
     resolution: {integrity: sha512-pBGVazlqiMrackzCr0eKhn4LO5trJXsOX0nQoey9wCOayh80MYtThCbq8eoLsjpiWgiok/h+1/uti9/2/Una8A==}
     engines: {node: ^18.18.0 || ^20.9.0 || >=22.0.0}
@@ -3303,10 +3395,22 @@ packages:
     resolution: {integrity: sha512-yki5XnKuf750l50uGTllt6kKILY4nQ1eNIQatoXEByZ5dWgnKqbnqmTrBE5B4N7lrMJKQ2ytWMiTO2o0v6Ew/w==}
     engines: {node: '>= 0.6'}
 
+  core-util-is@1.0.3:
+    resolution: {integrity: sha512-ZQBvi1DcpJ4GDqanjucZ2Hj3wEO5pZDS89BWbkcrvdxksJorwUDDZamX9ldFkp9aw2lmBDLgkObEA4DWNJ9FYQ==}
+
   cors@2.8.6:
     resolution: {integrity: sha512-tJtZBBHA6vjIAaF6EnIaq6laBBP9aq/Y3ouVJjEfoHbRBcHBAHYcMh/w8LDrk2PvIMMq8gmopa5D4V8RmbrxGw==}
     engines: {node: '>= 0.10'}
 
+  crc-32@1.2.2:
+    resolution: {integrity: sha512-ROmzCKrTnOwybPcJApAA6WBWij23HVfGVNKqqrZpuyZOHqK2CwHSvpGuyt/UNNvaIjEd8X5IFGp4Mh+Ie1IHJQ==}
+    engines: {node: '>=0.8'}
+    hasBin: true
+
+  crc32-stream@7.0.1:
+    resolution: {integrity: sha512-IBWsY8xznyQrcHn8h4bC8/4ErNke5elzgG8GcqF4RFPw6aHkWWRc7Tgw6upjaTX/CT/yQgqYENkxYsTYN+hW2g==}
+    engines: {node: '>=18'}
+
   cross-spawn@7.0.6:
     resolution: {integrity: sha512-uV2QOWP2nWzsy2aMp8aRibhi9dlzF5Hgh5SHaB9OiTGEyDTiJJyx0uy51QXdyWbtAHNua4XJzUKca3OzKUd3vA==}
     engines: {node: '>= 8'}
@@ -3662,12 +3766,23 @@ packages:
     resolution: {integrity: sha512-aIL5Fx7mawVa300al2BnEE4iNvo1qETxLrPI/o05L7z6go7fCw1J6EQmbK4FmJ2AS7kgVF/KEZWufBfdClMcPg==}
     engines: {node: '>= 0.6'}
 
+  event-target-shim@5.0.1:
+    resolution: {integrity: sha512-i/2XbnSz/uxRCU6+NdVJgKWDTM427+MqYbkQzD321DuCQJUqOuJKIA0IM2+W2xtYHdKOmZ4dR6fExsd4SXL+WQ==}
+    engines: {node: '>=6'}
+
   eventemitter3@4.0.7:
     resolution: {integrity: sha512-8guHBZCwKnFhYdHr2ysuRWErTwhoN2X8XELRlrRwpmfeY2jjuUN4taQMsULKUVo1K4DvZl+0pgfyoysHxvmvEw==}
 
   eventemitter3@5.0.4:
     resolution: {integrity: sha512-mlsTRyGaPBjPedk6Bvw+aqbsXDtoAyAzm5MO7JgU+yVRyMQ5O8bD4Kcci7BS85f93veegeCPkL8R4GLClnjLFw==}
 
+  events-universal@1.0.1:
+    resolution: {integrity: sha512-LUd5euvbMLpwOF8m6ivPCbhQeSiYVNb8Vs0fQ8QjXo0JTkEHpz8pxdQf0gStltaPpw0Cca8b39KxvK9cfKRiAw==}
+
+  events@3.3.0:
+    resolution: {integrity: sha512-mQw+2fkQbALzQ7V0MY0IqdnXNOeTtP4r0lN9z7AAawCXgqea7bDii20AYrIBrFd/Hx0M2Ocz6S111CaFkUcb0Q==}
+    engines: {node: '>=0.8.x'}
+
   execa@9.6.1:
     resolution: {integrity: sha512-9Be3ZoN4LmYR90tUoVu2te2BsbzHfhJyfEiAVfz7N5/zv+jduIfLrV2xdQXOHbaD6KgpGdO9PRPM1Y4Q9QkPkA==}
     engines: {node: ^18.19.0 || >=20.5.0}
@@ -3699,6 +3814,9 @@ packages:
     resolution: {integrity: sha512-jt2DW/aNFNwke7AUd+Z+e6pz39KO5rzdbbFCg2sGafS4mk13MI7Z8O5z9cADNn5lhGODIgLwug6TZO2ctf7kcw==}
     engines: {node: '>=6.0.0'}
 
+  fast-fifo@1.3.2:
+    resolution: {integrity: sha512-/d9sfos4yxzpwkDkuN7k2SqFKtYNmCTzgfEpz82x34IM9/zc8KGxQoXg1liNC/izpRM/MBdt44Nmx41ZWqk+FQ==}
+
   fast-glob@3.3.3:
     resolution: {integrity: sha512-7MptL8U0cqcFdzIzwOTHoilX9x5BrNqye7Z/LuC7kCMRio1EMSyqRK3BEAUD7sXRq4iT4AzTVuZdhgQ2TCvYLg==}
     engines: {node: '>=8.6.0'}
@@ -3873,6 +3991,9 @@ packages:
     resolution: {integrity: sha512-im9DjEDQ55s9fL4EYzOAv0yMqmMBSZp6G0VvFyTMPKWxiSBHUj9NW/qqLmXUwXrrM7AvqSlTCfvqRb0cM8yYqw==}
     engines: {node: '>=0.10.0'}
 
+  ieee754@1.2.1:
+    resolution: {integrity: sha512-dcyqhDvX1C46lXZcVqCpK+FtMRQVdIMN6/Df5js2zouUsqG7I6sFxitIC+7KYK29KdXOLHdu9zL4sFnoVQnqaA==}
+
   ignore@7.0.5:
     resolution: {integrity: sha512-Hs59xBNfUIunMFgWAbGX5cq6893IbWg4KnrjbYwX3tx0ztorVgTDA6B2sxf8ejHJ4wz8BqGUMYlnzNBer5NvGg==}
     engines: {node: '>= 4'}
@@ -3937,6 +4058,9 @@ packages:
     resolution: {integrity: sha512-mE00Gnza5EEB3Ds0HfMyllZzbBrmLOX3vfWoj9A9PEnTfratQ/BcaJOuMhnkhjXvb2+FkY3VuHqtAGpTPmglFQ==}
     engines: {node: '>=18'}
 
+  isarray@1.0.0:
+    resolution: {integrity: sha512-VLghIWNM6ELQzo7zwmcg0NmTVyWKYjvIeM83yjp0wRDTmUnrM678fQbcKBo6n2CJEF0szoG//ytg+TKla89ALQ==}
+
   isexe@2.0.0:
     resolution: {integrity: sha512-RHxMLp9lnKHGHRng9QFhRCMbYAcVpn69smSGcq3f36xjgVVWThj4qqLbTLlq7Ssj8B+fIQ1EuCEGI2lKsyQeIw==}
 
@@ -3984,6 +4108,10 @@ packages:
   jws@4.0.1:
     resolution: {integrity: sha512-EKI/M/yqPncGUUh44xz0PxSidXFr/+r0pA70+gIYhjv+et7yxM+s29Y+VGDkovRofQem0fs7Uvf4+YmAdyRduA==}
 
+  lazystream@1.0.1:
+    resolution: {integrity: sha512-b94GiNHQNy6JNTrt5w6zNyffMrNkXZb3KTkCZJb2V1xaEGCk093vkZ2jk3tpaeP33/OiXC+WvK9AxUebnf5nbw==}
+    engines: {node: '>= 0.6.3'}
+
   leven@4.1.0:
     resolution: {integrity: sha512-KZ9W9nWDT7rF7Dazg8xyLHGLrmpgq2nVNFUckhqdW3szVP6YhCpp/RAnpmVExA9JvrMynjwSLVrEj3AepHR6ew==}
     engines: {node: ^12.20.0 || ^14.13.1 || >=16.0.0}
@@ -4145,6 +4273,10 @@ packages:
   minimalistic-assert@1.0.1:
     resolution: {integrity: sha512-UtJcAD4yEaGtjPezWuO9wC4nwUnVH/8/Im3yEHQP4b67cXlD/Qr9hdITCU1xDbSEXg2XKNaP8jsReV7vQd00/A==}
 
+  minimatch@10.2.5:
+    resolution: {integrity: sha512-MULkVLfKGYDFYejP07QOurDLLQpcjk7Fw+7jXS2R2czRQzR56yHRveU5NDJEOviH+hETZKSkIk5c+T23GjFUMg==}
+    engines: {node: 18 || 20 || >=22}
+
   minimatch@9.0.9:
     resolution: {integrity: sha512-OBwBN9AL4dqmETlpS2zasx+vTeWclWzkblfZk7KTA5j3jeOONz/tRCnZomUyvNg83wL5Zv9Ss6HMJXAgL8R2Yg==}
     engines: {node: '>=16 || 14 >=14.17'}
@@ -4201,6 +4333,10 @@ packages:
     resolution: {integrity: sha512-pkjE4mkBzQjdJT4/UmlKl3pX0rC9fZmjh7c6C9o7lv66Ac6w9WCnzPzhbPNxwZAzlF4mdq4CSWB5+FbK6FWCow==}
     engines: {node: '>=6.0.0'}
 
+  normalize-path@3.0.0:
+    resolution: {integrity: sha512-6eZs5Ls3WtCisHWp9S2GUy8dqkpGi4BVSz3GaqiE6ezub0512ESztXUwUB6C6IKbQkY2Pnb/mD4WYojCRwcwLA==}
+    engines: {node: '>=0.10.0'}
+
   npm-run-path@6.0.0:
     resolution: {integrity: sha512-9qny7Z9DsQU8Ou39ERsPU4OZQlSTP47ShQzuKZ6PRXpYLtIFgl/DEBYEXKlvcEa+9tHVcK8CF81Y2V72qaZhWA==}
     engines: {node: '>=18'}
@@ -4417,9 +4553,16 @@ packages:
     resolution: {integrity: sha512-gjVS5hOP+M3wMm5nmNOucbIrqudzs9v/57bWRHQWLYklXqoXKrVfYW2W9+glfGsqtPgpiz5WwyEEB+ksXIx3gQ==}
     engines: {node: '>=18'}
 
+  process-nextick-args@2.0.1:
+    resolution: {integrity: sha512-3ouUOpQhtgrbOa17J7+uxOTpITYWaGP7/AhoR3+A+/1e9skrzelGi/dXzEYyvbxubEF6Wn2ypscTKiKJFFn1ag==}
+
   process-warning@5.0.0:
     resolution: {integrity: sha512-a39t9ApHNx2L4+HBnQKqxxHNs1r7KF+Intd8Q/g1bUh6q0WIp9voPXJ/x0j+ZL45KF1pJd9+q2jLIRMfvEshkA==}
 
+  process@0.11.10:
+    resolution: {integrity: sha512-cdGef/drWFoydD1JsMzuFf8100nZl+GT+yacc2bEced5f9Rjk4z+WtFUTBu9PhOi9j/jfmBPu0mMEY4wIdAF8A==}
+    engines: {node: '>= 0.6.0'}
+
   prop-types@15.8.1:
     resolution: {integrity: sha512-oj87CgZICdulUohogVAR7AjlC0327U4el4L6eAvOqCeudMDVU0NThNaV+b9Df4dXgSP1gXMTnPdhfe/2qDH5cg==}
 
@@ -4592,6 +4735,17 @@ packages:
     resolution: {integrity: sha512-FS+XFBNvn3GTAWq26joslQgWNoFu08F4kl0J4CgdNKADkdSGXQyTCnKteIAJy96Br6YbpEU1LSzV5dYtjMkMDg==}
     engines: {node: '>=0.10.0'}
 
+  readable-stream@2.3.8:
+    resolution: {integrity: sha512-8p0AUk4XODgIewSi0l8Epjs+EVnWiK7NoDIEGU0HhE7+ZyY8D1IMY7odu5lRrFXGg71L15KG8QrPmum45RTtdA==}
+
+  readable-stream@4.7.0:
+    resolution: {integrity: sha512-oIGGmcpTLwPga8Bn6/Z75SVaH1z5dUut2ibSyAMVhmUggWpmDn2dapB0n7f8nwaSiRtepAsfJyfXIO5DCVAODg==}
+    engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
+
+  readdir-glob@3.0.0:
+    resolution: {integrity: sha512-AhNB2KgKeVJr16nK9LLZbJNWnYoT23ZrumNKFDebHBdkC8KHSqWo871JAUhoWC/RtjEVdqNMFpM6qrwRbaUqpw==}
+    engines: {node: '>=18'}
+
   readdirp@4.1.2:
     resolution: {integrity: sha512-GDhwkLfywWL2s6vEjyhri+eXmfH6j1L7JE27WhqLeYzoh/A3DBaYGEj2H/HFZCn/kMfim73FXxEJTw06WtxQwg==}
     engines: {node: '>= 14.18.0'}
@@ -4610,6 +4764,7 @@ packages:
   recharts@2.15.4:
     resolution: {integrity: sha512-UT/q6fwS3c1dHbXv2uFgYJ9BMFHu3fwnd7AYZaEQhXuYQ4hgsxLvsUXzGdKeZrW5xopzDCvuA2N41WJ88I7zIw==}
     engines: {node: '>=14'}
+    deprecated: 1.x and 2.x branches are no longer active. Bump to Recharts v3 to receive latest features and bugfixes. See https://github.com/recharts/recharts/wiki/3.0-migration-guide
     peerDependencies:
       react: 19.1.0
       react-dom: 19.1.0
@@ -4654,6 +4809,9 @@ packages:
   run-parallel@1.2.0:
     resolution: {integrity: sha512-5l4VyZR86LZ/lDxZTR6jqL8AFE2S0IFLMP26AbjsLVADxHdhB/c0GUsH+y39UfCi3dzz8OlQuPmnaJOMoDHQBA==}
 
+  safe-buffer@5.1.2:
+    resolution: {integrity: sha512-Gd2UZBJDkXlY7GbJxfsE8/nvKkUEU1G38c1siN6QP6a9PT9MmHB8GnpscSmMJSoF8LOIrt8ud/wPtojys4G6+g==}
+
   safe-buffer@5.2.1:
     resolution: {integrity: sha512-rp3So07KcdmmKbGvgaNxQSJr7bGVSVk5S9Eq1F+ppbRo70+YeaDxkw5Dd8NPN+GD6bjnYm2VuPuCXmpuYvmCXQ==}
 
@@ -4771,10 +4929,19 @@ packages:
     resolution: {integrity: sha512-DvEy55V3DB7uknRo+4iOGT5fP1slR8wQohVdknigZPMpMstaKJQWhwiYBACJE3Ul2pTnATihhBYnRhZQHGBiRw==}
     engines: {node: '>= 0.8'}
 
+  streamx@2.28.0:
+    resolution: {integrity: sha512-1Yowhzjf0ivGMrTIkY9hav5TxobO9qIVqUE41fiCGMGgc3CLlf4MY+9AHmZqBWgDTue0fY9zWjYFVyf6Diuobw==}
+
   string-argv@0.3.2:
     resolution: {integrity: sha512-aqD2Q0144Z+/RqG52NeHEkZauTAUWJO8c6yTftGJKO3Tja5tUgIfmIl6kExvhtxSDP7fXB6DvzkfMpCd/F3G+Q==}
     engines: {node: '>=0.6.19'}
 
+  string_decoder@1.1.1:
+    resolution: {integrity: sha512-n/ShnvDi6FHbbVfviro+WojiFzv+s8MPMHBczVePfUpDJLwoLT0ht1l4YwBCbi8pJAveEEdnkHyPyTP/mzRfwg==}
+
+  string_decoder@1.3.0:
+    resolution: {integrity: sha512-hkRX8U1WjJFd8LsDJ2yQ/wWWxaopEsABU1XfkM8A+j0+85JAGppt16cr1Whg6KIbb4okU6Mql6BOj+uup/wKeA==}
+
   strip-ansi@6.0.1:
     resolution: {integrity: sha512-Y38VPSHcqkFrCpFnQ9vuSXmquuv5oXOKpGeT6aGrr3o3Gc9AlVa6JBfUSOCnbxGGZF+/0ooI7KrPuUSztUdU5A==}
     engines: {node: '>=8'}
@@ -4805,6 +4972,15 @@ packages:
     resolution: {integrity: sha512-g9ljZiwki/LfxmQADO3dEY1CbpmXT5Hm2fJ+QaGKwSXUylMybePR7/67YW7jOrrvjEgL1Fmz5kzyAjWVWLlucg==}
     engines: {node: '>=6'}
 
+  tar-stream@3.2.0:
+    resolution: {integrity: sha512-ojzvCvVaNp6aOTFmG7jaRD0meowIAuPc3cMMhSgKiVWws1GyHbGd/xvnyuRKcKlMpt3qvxx6r0hreCNITP9hIg==}
+
+  teex@1.0.1:
+    resolution: {integrity: sha512-eYE6iEI62Ni1H8oIa7KlDU6uQBtqr4Eajni3wX7rpfXD8ysFx8z0+dri+KWEPWpBsxXfxu58x/0jvTVT1ekOSg==}
+
+  text-decoder@1.2.7:
+    resolution: {integrity: sha512-vlLytXkeP4xvEq2otHeJfSQIRyWxo/oZGEbXrtEEF9Hnmrdly59sUbzZ/QgyWuLYHctCHxFF4tRQZNQ9k60ExQ==}
+
   thread-stream@3.1.0:
     resolution: {integrity: sha512-OqyPZ9u96VohAyMfJykzmivOrY2wfMSf3C5TtFJVgN+Hm6aj+voFhlK+kZEIv2FBh1X6Xp3DlnCOfEQ3B2J86A==}
 
@@ -4829,6 +5005,7 @@ packages:
   tsconfck@3.1.6:
     resolution: {integrity: sha512-ks6Vjr/jEw0P1gmOVwutM3B7fWxoWBL2KRDb1JfqGVawBmO5UsvmWOQFGHBPl5yxYz4eERr19E6L7NMv+Fej4w==}
     engines: {node: ^18 || >=20}
+    deprecated: unmaintained
     hasBin: true
     peerDependencies:
       typescript: ^5.0.0
@@ -5058,6 +5235,10 @@ packages:
     resolution: {integrity: sha512-CzhO+pFNo8ajLM2d2IW/R93ipy99LWjtwblvC1RsoSUMZgyLbYFr221TnSNT7GjGdYui6P459mw9JH/g/zW2ug==}
     engines: {node: '>=18'}
 
+  zip-stream@7.0.5:
+    resolution: {integrity: sha512-dSvYKdvLsAHCDqPOhIwk/q5CvuWtTB3Dgpoe0uVEFjTzIOAmsQpprX25InCvrvJsirEbu1OHyy67n/kAj1Sw/w==}
+    engines: {node: '>=18'}
+
   zod@3.25.76:
     resolution: {integrity: sha512-gzUt/qt81nXsFGKIFcC3YnfEAx5NkunCfnDlvuBSSFS02bcXu4Lmea0AFIUwbLWxWPx3d9p8S5QoaujKcNQxcQ==}
 
@@ -7417,6 +7598,11 @@ snapshots:
 
   '@transloadit/prettier-bytes@0.3.5': {}
 
+  '@types/archiver@8.0.0':
+    dependencies:
+      '@types/node': 25.3.5
+      '@types/readdir-glob': 1.1.5
+
   '@types/babel__core@7.20.5':
     dependencies:
       '@babel/parser': 7.29.0
@@ -7548,6 +7734,10 @@ snapshots:
     dependencies:
       csstype: 3.2.3
 
+  '@types/readdir-glob@1.1.5':
+    dependencies:
+      '@types/node': 25.3.5
+
   '@types/retry@0.12.2': {}
 
   '@types/sanitize-html@2.16.1':
@@ -7673,6 +7863,10 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
+  abort-controller@3.0.0:
+    dependencies:
+      event-target-shim: 5.0.1
+
   accepts@1.3.8:
     dependencies:
       mime-types: 2.1.35
@@ -7708,6 +7902,22 @@ snapshots:
 
   arabic-persian-reshaper@1.0.1: {}
 
+  archiver@8.0.0:
+    dependencies:
+      async: 3.2.6
+      buffer-crc32: 1.0.0
+      is-stream: 4.0.1
+      lazystream: 1.0.1
+      normalize-path: 3.0.0
+      readable-stream: 4.7.0
+      readdir-glob: 3.0.0
+      tar-stream: 3.2.0
+      zip-stream: 7.0.5
+    transitivePeerDependencies:
+      - bare-abort-controller
+      - bare-buffer
+      - react-native-b4a
+
   argparse@2.0.1: {}
 
   aria-hidden@1.2.6:
@@ -7721,10 +7931,49 @@ snapshots:
       minimalistic-assert: 1.0.1
       safer-buffer: 2.1.2
 
+  async@3.2.6: {}
+
   atomic-sleep@1.0.0: {}
 
+  b4a@1.8.1: {}
+
   balanced-match@1.0.2: {}
 
+  balanced-match@4.0.4: {}
+
+  bare-events@2.9.1: {}
+
+  bare-fs@4.7.3:
+    dependencies:
+      bare-events: 2.9.1
+      bare-path: 3.0.1
+      bare-stream: 2.13.3(bare-events@2.9.1)
+      bare-url: 2.4.5
+      fast-fifo: 1.3.2
+    transitivePeerDependencies:
+      - bare-abort-controller
+      - react-native-b4a
+
+  bare-os@3.9.3: {}
+
+  bare-path@3.0.1:
+    dependencies:
+      bare-os: 3.9.3
+
+  bare-stream@2.13.3(bare-events@2.9.1):
+    dependencies:
+      b4a: 1.8.1
+      streamx: 2.28.0
+      teex: 1.0.1
+    optionalDependencies:
+      bare-events: 2.9.1
+    transitivePeerDependencies:
+      - react-native-b4a
+
+  bare-url@2.4.5:
+    dependencies:
+      bare-path: 3.0.1
+
   base64-js@0.0.8: {}
 
   base64-js@1.5.1: {}
@@ -7761,6 +8010,10 @@ snapshots:
     dependencies:
       balanced-match: 1.0.2
 
+  brace-expansion@5.0.7:
+    dependencies:
+      balanced-match: 4.0.4
+
   braces@3.0.3:
     dependencies:
       fill-range: 7.1.1
@@ -7781,10 +8034,17 @@ snapshots:
       node-releases: 2.0.36
       update-browserslist-db: 1.2.3(browserslist@4.28.1)
 
+  buffer-crc32@1.0.0: {}
+
   buffer-equal-constant-time@1.0.1: {}
 
   buffer-from@1.1.2: {}
 
+  buffer@6.0.3:
+    dependencies:
+      base64-js: 1.5.1
+      ieee754: 1.2.1
+
   bytes@3.1.2: {}
 
   call-bind-apply-helpers@1.0.2:
@@ -7835,6 +8095,14 @@ snapshots:
 
   compare-versions@6.1.1: {}
 
+  compress-commons@7.0.1:
+    dependencies:
+      crc-32: 1.2.2
+      crc32-stream: 7.0.1
+      is-stream: 4.0.1
+      normalize-path: 3.0.0
+      readable-stream: 4.7.0
+
   connect-pg-simple@10.0.0:
     dependencies:
       pg: 8.20.0
@@ -7860,11 +8128,20 @@ snapshots:
 
   cookie@0.7.2: {}
 
+  core-util-is@1.0.3: {}
+
   cors@2.8.6:
     dependencies:
       object-assign: 4.1.1
       vary: 1.1.2
 
+  crc-32@1.2.2: {}
+
+  crc32-stream@7.0.1:
+    dependencies:
+      crc-32: 1.2.2
+      readable-stream: 4.7.0
+
   cross-spawn@7.0.6:
     dependencies:
       path-key: 3.1.1
@@ -8182,10 +8459,20 @@ snapshots:
 
   etag@1.8.1: {}
 
+  event-target-shim@5.0.1: {}
+
   eventemitter3@4.0.7: {}
 
   eventemitter3@5.0.4: {}
 
+  events-universal@1.0.1:
+    dependencies:
+      bare-events: 2.9.1
+    transitivePeerDependencies:
+      - bare-abort-controller
+
+  events@3.3.0: {}
+
   execa@9.6.1:
     dependencies:
       '@sindresorhus/merge-streams': 4.0.0
@@ -8260,6 +8547,8 @@ snapshots:
 
   fast-equals@5.4.0: {}
 
+  fast-fifo@1.3.2: {}
+
   fast-glob@3.3.3:
     dependencies:
       '@nodelib/fs.stat': 2.0.5
@@ -8452,6 +8741,8 @@ snapshots:
     dependencies:
       safer-buffer: 2.1.2
 
+  ieee754@1.2.1: {}
+
   ignore@7.0.5: {}
 
   inherits@2.0.4: {}
@@ -8489,6 +8780,8 @@ snapshots:
 
   is-unicode-supported@2.1.0: {}
 
+  isarray@1.0.0: {}
+
   isexe@2.0.0: {}
 
   jiti@2.6.1: {}
@@ -8528,6 +8821,10 @@ snapshots:
       jwa: 2.0.1
       safe-buffer: 5.2.1
 
+  lazystream@1.0.1:
+    dependencies:
+      readable-stream: 2.3.8
+
   leven@4.1.0: {}
 
   lightningcss-android-arm64@1.31.1:
@@ -8656,6 +8953,10 @@ snapshots:
 
   minimalistic-assert@1.0.1: {}
 
+  minimatch@10.2.5:
+    dependencies:
+      brace-expansion: 5.0.7
+
   minimatch@9.0.9:
     dependencies:
       brace-expansion: 2.0.2
@@ -8693,6 +8994,8 @@ snapshots:
 
   nodemailer@8.0.7: {}
 
+  normalize-path@3.0.0: {}
+
   npm-run-path@6.0.0:
     dependencies:
       path-key: 4.0.0
@@ -8935,8 +9238,12 @@ snapshots:
     dependencies:
       parse-ms: 4.0.0
 
+  process-nextick-args@2.0.1: {}
+
   process-warning@5.0.0: {}
 
+  process@0.11.10: {}
+
   prop-types@15.8.1:
     dependencies:
       loose-envify: 1.4.0
@@ -9132,6 +9439,28 @@ snapshots:
 
   react@19.1.0: {}
 
+  readable-stream@2.3.8:
+    dependencies:
+      core-util-is: 1.0.3
+      inherits: 2.0.4
+      isarray: 1.0.0
+      process-nextick-args: 2.0.1
+      safe-buffer: 5.1.2
+      string_decoder: 1.1.1
+      util-deprecate: 1.0.2
+
+  readable-stream@4.7.0:
+    dependencies:
+      abort-controller: 3.0.0
+      buffer: 6.0.3
+      events: 3.3.0
+      process: 0.11.10
+      string_decoder: 1.3.0
+
+  readdir-glob@3.0.0:
+    dependencies:
+      minimatch: 10.2.5
+
   readdirp@4.1.2: {}
 
   readdirp@5.0.0: {}
@@ -9216,6 +9545,8 @@ snapshots:
     dependencies:
       queue-microtask: 1.2.3
 
+  safe-buffer@5.1.2: {}
+
   safe-buffer@5.2.1: {}
 
   safe-stable-stringify@2.5.0: {}
@@ -9369,8 +9700,25 @@ snapshots:
 
   statuses@2.0.2: {}
 
+  streamx@2.28.0:
+    dependencies:
+      events-universal: 1.0.1
+      fast-fifo: 1.3.2
+      text-decoder: 1.2.7
+    transitivePeerDependencies:
+      - bare-abort-controller
+      - react-native-b4a
+
   string-argv@0.3.2: {}
 
+  string_decoder@1.1.1:
+    dependencies:
+      safe-buffer: 5.1.2
+
+  string_decoder@1.3.0:
+    dependencies:
+      safe-buffer: 5.2.1
+
   strip-ansi@6.0.1:
     dependencies:
       ansi-regex: 5.0.1
@@ -9391,6 +9739,30 @@ snapshots:
 
   tapable@2.3.0: {}
 
+  tar-stream@3.2.0:
+    dependencies:
+      b4a: 1.8.1
+      bare-fs: 4.7.3
+      fast-fifo: 1.3.2
+      streamx: 2.28.0
+    transitivePeerDependencies:
+      - bare-abort-controller
+      - bare-buffer
+      - react-native-b4a
+
+  teex@1.0.1:
+    dependencies:
+      streamx: 2.28.0
+    transitivePeerDependencies:
+      - bare-abort-controller
+      - react-native-b4a
+
+  text-decoder@1.2.7:
+    dependencies:
+      b4a: 1.8.1
+    transitivePeerDependencies:
+      - react-native-b4a
+
   thread-stream@3.1.0:
     dependencies:
       real-require: 0.2.0
@@ -9590,6 +9962,12 @@ snapshots:
 
   yoctocolors@2.1.2: {}
 
+  zip-stream@7.0.5:
+    dependencies:
+      compress-commons: 7.0.1
+      normalize-path: 3.0.0
+      readable-stream: 4.7.0
+
   zod@3.25.76: {}
 
   zod@4.3.6: {}

replit.nix

@@ -0,0 +1,26 @@
+{pkgs}: {
+  deps = [
+    pkgs.srt-live-server
+    pkgs.expat
+    pkgs.xorg.libxcb
+    pkgs.xorg.libXrandr
+    pkgs.xorg.libXfixes
+    pkgs.xorg.libXext
+    pkgs.xorg.libXdamage
+    pkgs.xorg.libXcomposite
+    pkgs.xorg.libX11
+    pkgs.cairo
+    pkgs.pango
+    pkgs.alsa-lib
+    pkgs.libgbm
+    pkgs.libxkbcommon
+    pkgs.libdrm
+    pkgs.dbus
+    pkgs.cups
+    pkgs.at-spi2-atk
+    pkgs.atk
+    pkgs.nspr
+    pkgs.nss
+    pkgs.glib
+  ];
+}

scripts/src/seed.ts

@@ -18,8 +18,9 @@ import {
   executiveMeetingsTable,
   executiveMeetingAttendeesTable,
   executiveMeetingNotificationsTable,
+  protocolRoomsTable,
 } from "@workspace/db";
-import { eq, sql } from "drizzle-orm";
+import { eq, inArray, sql } from "drizzle-orm";
 import bcrypt from "bcryptjs";
 
 async function main() {
@@ -327,6 +328,19 @@ async function main() {
       isSystem: false,
       sortOrder: 7,
     },
+    {
+      slug: "protocol",
+      nameAr: "المراسم والعلاقات العامة",
+      nameEn: "Protocol & Public Relations",
+      descriptionAr: "حجز القاعات والاجتماعات الخارجية والهدايا والدروع",
+      descriptionEn: "Room bookings, external meetings, gifts and shields",
+      iconName: "Handshake",
+      route: "/protocol",
+      color: "#0ea5e9",
+      isActive: true,
+      isSystem: false,
+      sortOrder: 9,
+    },
   ];
 
   // Drift guard: every built-in slug (those with hardcoded routes in the
@@ -345,6 +359,7 @@ async function main() {
     "executive-meetings": "/meetings",
     calendar: "/calendar",
     documents: "/documents",
+    protocol: "/protocol",
   };
   for (const a of apps) {
     if ((BUILTIN_APP_SLUGS as readonly string[]).includes(a.slug)) {
@@ -763,6 +778,196 @@ async function main() {
     }
   }
 
+  // Public Relations & Protocol: roles.
+  const protocolRoles = [
+    {
+      name: "protocol_super_admin",
+      descriptionAr: "المدير العام للعلاقات العامة والمراسم",
+      descriptionEn: "Protocol Super Admin",
+      isSystem: 1,
+    },
+    {
+      name: "protocol_pr_manager",
+      descriptionAr: "مدير العلاقات العامة",
+      descriptionEn: "PR Manager",
+      isSystem: 1,
+    },
+    {
+      name: "protocol_officer",
+      descriptionAr: "موظف المراسم",
+      descriptionEn: "Protocol Officer",
+      isSystem: 1,
+    },
+    {
+      name: "protocol_requester",
+      descriptionAr: "مقدم الطلب",
+      descriptionEn: "Requester",
+      isSystem: 1,
+    },
+    {
+      name: "protocol_viewer",
+      descriptionAr: "مشاهد العلاقات العامة والمراسم",
+      descriptionEn: "Protocol Viewer",
+      isSystem: 1,
+    },
+  ];
+  await db.insert(rolesTable).values(protocolRoles).onConflictDoNothing();
+  console.log("Protocol roles created");
+
+  // Scoped protocol permissions. `protocol.access` also gates the home-screen
+  // tile (via app_permissions); the rest guard individual route capabilities.
+  // Route middleware authorizes by these permissions, never by role name, so
+  // an admin can delegate any capability by granting the permission.
+  const protocolPermissions = [
+    {
+      name: "protocol.access",
+      descriptionAr: "الوصول إلى وحدة العلاقات العامة والمراسم",
+      descriptionEn: "Access the Public Relations & Protocol module",
+    },
+    {
+      name: "protocol.request",
+      descriptionAr: "تقديم طلبات الحجز وإصدار الدروع",
+      descriptionEn: "Submit protocol booking and gift-issue requests",
+    },
+    {
+      name: "protocol.mutate",
+      descriptionAr: "إنشاء وتعديل سجلات العلاقات العامة والمراسم",
+      descriptionEn: "Create and edit protocol records",
+    },
+    {
+      name: "protocol.approve",
+      descriptionAr: "اعتماد أو رفض الحجوزات وإصدارات الدروع",
+      descriptionEn: "Approve or reject protocol bookings and gift issues",
+    },
+    {
+      name: "protocol.rooms.manage",
+      descriptionAr: "إدارة سجل القاعات",
+      descriptionEn: "Manage the protocol rooms registry",
+    },
+    {
+      name: "protocol.audit.read",
+      descriptionAr: "عرض سجل تدقيق العلاقات العامة والمراسم",
+      descriptionEn: "View the protocol audit log",
+    },
+  ];
+  await db
+    .insert(permissionsTable)
+    .values(protocolPermissions)
+    .onConflictDoNothing();
+
+  // Map each protocol permission to the roles that should hold it. Capabilities
+  // are additive: super admin holds everything, viewer only reads.
+  const protocolRolePermMap: Record<string, string[]> = {
+    "protocol.access": [
+      "admin",
+      "protocol_super_admin",
+      "protocol_pr_manager",
+      "protocol_officer",
+      "protocol_requester",
+      "protocol_viewer",
+    ],
+    "protocol.request": [
+      "admin",
+      "protocol_super_admin",
+      "protocol_pr_manager",
+      "protocol_officer",
+      "protocol_requester",
+    ],
+    "protocol.mutate": [
+      "admin",
+      "protocol_super_admin",
+      "protocol_pr_manager",
+      "protocol_officer",
+    ],
+    "protocol.approve": [
+      "admin",
+      "protocol_super_admin",
+      "protocol_pr_manager",
+    ],
+    "protocol.rooms.manage": ["admin", "protocol_super_admin"],
+    "protocol.audit.read": [
+      "admin",
+      "protocol_super_admin",
+      "protocol_pr_manager",
+    ],
+  };
+
+  const allRolesForProtocol = await db.select().from(rolesTable);
+  const roleIdByName = new Map(allRolesForProtocol.map((r) => [r.name, r.id]));
+  const allProtocolPerms = await db
+    .select()
+    .from(permissionsTable)
+    .where(
+      inArray(
+        permissionsTable.name,
+        protocolPermissions.map((p) => p.name),
+      ),
+    );
+  const permIdByName = new Map(allProtocolPerms.map((p) => [p.name, p.id]));
+
+  const rolePermValues: { roleId: number; permissionId: number }[] = [];
+  for (const [permName, roleNames] of Object.entries(protocolRolePermMap)) {
+    const permId = permIdByName.get(permName);
+    if (permId === undefined) continue;
+    for (const roleName of roleNames) {
+      const roleId = roleIdByName.get(roleName);
+      if (roleId === undefined) continue;
+      rolePermValues.push({ roleId, permissionId: permId });
+    }
+  }
+  if (rolePermValues.length > 0) {
+    await db
+      .insert(rolePermissionsTable)
+      .values(rolePermValues)
+      .onConflictDoNothing();
+  }
+  console.log("Protocol scoped permissions mapped to roles");
+
+  const protocolAccessPermId = permIdByName.get("protocol.access");
+  if (protocolAccessPermId !== undefined) {
+    const [protocolApp] = await db
+      .select()
+      .from(appsTable)
+      .where(eq(appsTable.slug, "protocol"));
+    if (protocolApp) {
+      await db
+        .insert(appPermissionsTable)
+        .values({ appId: protocolApp.id, permissionId: protocolAccessPermId })
+        .onConflictDoNothing();
+      console.log(
+        "App permissions set: protocol app restricted to protocol.access permission",
+      );
+    }
+  }
+
+  // Public Relations & Protocol: three default meeting rooms. Only seeded
+  // when the table is empty so admins can rename/remove them freely without
+  // re-seeds bringing them back.
+  const existingRooms = await db
+    .select({ id: protocolRoomsTable.id })
+    .from(protocolRoomsTable)
+    .limit(1);
+  if (existingRooms.length === 0) {
+    await db.insert(protocolRoomsTable).values([
+      {
+        nameAr: "قاعة الاجتماعات الرئيسية",
+        nameEn: "Main Meeting Hall",
+        sortOrder: 1,
+      },
+      {
+        nameAr: "قاعة كبار الزوار",
+        nameEn: "VIP Guests Hall",
+        sortOrder: 2,
+      },
+      {
+        nameAr: "قاعة الاجتماعات التنفيذية",
+        nameEn: "Executive Meetings Hall",
+        sortOrder: 3,
+      },
+    ]);
+    console.log("Protocol default rooms created");
+  }
+
   // Executive meetings: sample data for today (idempotent per-date).
   //
   // Opt-in only — a vanilla self-hosted install should start with an

sync-to-gitea.sh

@@ -0,0 +1,59 @@
+#!/usr/bin/env bash
+# One-command helper: merge the Gitea server's changes into this Repl's work and push.
+# Run from the Replit Shell with:  bash sync-to-gitea.sh
+set -uo pipefail
+
+REMOTE="origin"
+BRANCH="main"
+
+echo "==> Checking GITEA_TOKEN secret is available..."
+if [ -z "${GITEA_TOKEN:-}" ]; then
+  echo "ERROR: GITEA_TOKEN is not set in this shell. Cannot authenticate to Gitea."
+  exit 1
+fi
+
+echo "==> Preparing credential helper (token never printed)..."
+cat > /tmp/ap.sh <<'EOF'
+#!/usr/bin/env bash
+case "$1" in
+  *Username*) echo "rafraa" ;;
+  *) printf '%s' "$GITEA_TOKEN" ;;
+esac
+EOF
+chmod +x /tmp/ap.sh
+export GIT_ASKPASS=/tmp/ap.sh GIT_TERMINAL_PROMPT=0
+
+echo "==> Current branch:"
+git rev-parse --abbrev-ref HEAD
+
+echo "==> Fetching $REMOTE/$BRANCH ..."
+if ! git fetch "$REMOTE" "$BRANCH"; then
+  echo "ERROR: fetch failed. The Gitea server may be unreachable right now. Try again in a moment."
+  exit 1
+fi
+
+echo "==> Merging $REMOTE/$BRANCH into local $BRANCH (keeping both sides)..."
+if ! git merge "$REMOTE/$BRANCH" -m "Merge Gitea server changes with Replit work"; then
+  echo ""
+  echo "MERGE CONFLICT: the merge could not finish automatically."
+  echo "Nothing was pushed. Copy everything above and send it to the assistant to resolve."
+  exit 1
+fi
+
+echo "==> Pushing local $BRANCH to $REMOTE ..."
+if ! git push "$REMOTE" "$BRANCH"; then
+  echo "ERROR: push failed. Copy everything above and send it to the assistant."
+  exit 1
+fi
+
+echo ""
+echo "==> SUCCESS. Verifying remote now matches local..."
+LOCAL=$(git rev-parse "$BRANCH")
+REMOTE_SHA=$(git ls-remote "$REMOTE" -h "refs/heads/$BRANCH" | awk '{print $1}')
+echo "    local  $BRANCH = $LOCAL"
+echo "    server $BRANCH = $REMOTE_SHA"
+if [ "$LOCAL" = "$REMOTE_SHA" ]; then
+  echo "    MATCH — your work is now on Gitea."
+else
+  echo "    WARNING: they do not match yet. Send this output to the assistant."
+fi