Merge origin/main before push

# Conflicts:
#	artifacts/api-server/src/routes/protocol.ts
#	artifacts/tx-os/src/locales/ar.json
#	artifacts/tx-os/src/locales/en.json
#	artifacts/tx-os/src/pages/protocol.tsx

artifacts/api-server/src/routes/executive-meetings.ts

@@ -2210,6 +2210,18 @@ router.post(
           isHighlighted: 0,
           notes: stripTagsToPlainTextOrNull(source.notes),
           attachments: source.attachments,
+          // #678: Carry the external-meeting flag onto the copy. Omitting it
+          // silently reset duplicates/repeats to "internal" (default false),
+          // losing the red tint + no-auto-postpone behavior of the source.
+          isExternal: source.isExternal,
+          // Same class of bug: rowColor is a shared editorial signal about
+          // the meeting (urgent / VIP), and the merge overlay is user
+          // content — both should survive a duplicate. mergeText is
+          // re-sanitized like the other rich-text fields above.
+          rowColor: source.rowColor,
+          mergeStartColumn: source.mergeStartColumn,
+          mergeEndColumn: source.mergeEndColumn,
+          mergeText: source.mergeText ? sanitizeRichText(source.mergeText) : source.mergeText,
           createdBy: userId,
           updatedBy: userId,
         };

artifacts/api-server/src/routes/protocol.ts

@@ -1,6 +1,19 @@
 import { Router, type IRouter } from "express";
 import rateLimit, { ipKeyGenerator } from "express-rate-limit";
-import { and, asc, desc, eq, gte, inArray, lt, lte, ne, sql } from "drizzle-orm";
+import {
+  and,
+  asc,
+  desc,
+  eq,
+  gte,
+  ilike,
+  inArray,
+  lt,
+  lte,
+  ne,
+  or,
+  sql,
+} from "drizzle-orm";
 import { z, type ZodType } from "zod";
 import { db } from "@workspace/db";
 import {
@@ -165,12 +178,28 @@ const roomPatchSchema = roomCreateSchema.partial().refine(
   { message: "no fields to update" },
 );
 
+// A single "key attendee" (أبرز الحضور) row.
+const keyAttendeeSchema = z.object({
+  name: z.string().trim().min(1).max(300),
+  position: z.string().trim().max(300).default(""),
+  side: z.enum(["internal", "external"]),
+});
+const keyAttendeesSchema = z.array(keyAttendeeSchema).max(100);
+
 const bookingCreateSchema = z
   .object({
     roomId: z.number().int().positive(),
     title: z.string().trim().min(1).max(500),
     requesterName: z.string().trim().max(300).nullable().optional(),
+    requesterPhone: z.string().trim().max(40).nullable().optional(),
+    // The external entity name (اسم الجهة); only meaningful when
+    // meetingType is "external".
+    requesterOrg: z.string().trim().max(300).nullable().optional(),
+    department: z.string().trim().max(300).nullable().optional(),
+    meetingType: z.enum(["internal", "external"]).default("internal"),
+    purpose: z.string().trim().max(5000).nullable().optional(),
     attendeeCount: z.number().int().positive().max(100000).nullable().optional(),
+    keyAttendees: keyAttendeesSchema.optional().default([]),
     startsAt: isoDateTime,
     endsAt: isoDateTime,
     notes: z.string().trim().max(5000).nullable().optional(),
@@ -185,7 +214,13 @@ const bookingPatchSchema = z
     roomId: z.number().int().positive().optional(),
     title: z.string().trim().min(1).max(500).optional(),
     requesterName: z.string().trim().max(300).nullable().optional(),
+    requesterPhone: z.string().trim().max(40).nullable().optional(),
+    requesterOrg: z.string().trim().max(300).nullable().optional(),
+    department: z.string().trim().max(300).nullable().optional(),
+    meetingType: z.enum(["internal", "external"]).optional(),
+    purpose: z.string().trim().max(5000).nullable().optional(),
     attendeeCount: z.number().int().positive().max(100000).nullable().optional(),
+    keyAttendees: keyAttendeesSchema.optional(),
     startsAt: isoDateTime.optional(),
     endsAt: isoDateTime.optional(),
     notes: z.string().trim().max(5000).nullable().optional(),
@@ -201,8 +236,14 @@ const publicBookingRequestSchema = z
     title: z.string().trim().min(1).max(500),
     requesterName: z.string().trim().min(1).max(300),
     requesterPhone: z.string().trim().min(3).max(40),
+    // The external entity name (اسم الجهة). Required when meetingType is
+    // "external"; ignored/null for internal meetings.
     requesterOrg: z.string().trim().max(300).nullable().optional(),
+    department: z.string().trim().max(300).nullable().optional(),
+    meetingType: z.enum(["internal", "external"]).default("internal"),
+    purpose: z.string().trim().max(5000).nullable().optional(),
     attendeeCount: z.number().int().positive().max(100000).nullable().optional(),
+    keyAttendees: keyAttendeesSchema.optional().default([]),
     startsAt: isoDateTime,
     endsAt: isoDateTime,
     notes: z.string().trim().max(5000).nullable().optional(),
@@ -214,7 +255,18 @@ const publicBookingRequestSchema = z
   .refine((v) => new Date(v.startsAt) < new Date(v.endsAt), {
     message: "startsAt must be before endsAt",
     path: ["endsAt"],
-  });
+  })
+  // When the meeting is with an external entity, its name (اسم الجهة) is
+  // required.
+  .refine(
+    (v) =>
+      v.meetingType !== "external" ||
+      (typeof v.requesterOrg === "string" && v.requesterOrg.trim().length > 0),
+    {
+      message: "requesterOrg is required for external meetings",
+      path: ["requesterOrg"],
+    },
+  );
 
 const rejectSchema = z.object({
   reason: z.string().trim().max(1000).nullable().optional(),
@@ -323,6 +375,28 @@ async function lockRoomRow(
   return rows.length > 0;
 }
 
+// Build a human-friendly booking reference (رقم الحجز) from a row id and its
+// creation date, e.g. "RB-2026-0042". Deterministic + unique because the id
+// is unique.
+function makeBookingReference(id: number, when: Date): string {
+  return `RB-${when.getFullYear()}-${String(id).padStart(4, "0")}`;
+}
+
+// Reserve the next booking id from the table's serial sequence so we can
+// compute the booking reference and store it in the same INSERT (the column
+// is NOT NULL). Advancing the sequence here keeps it in sync with the
+// explicit id we insert.
+async function reserveBookingId(
+  tx: Parameters<Parameters<typeof db.transaction>[0]>[0],
+): Promise<number> {
+  const result = await tx.execute(
+    sql`SELECT nextval(pg_get_serial_sequence('protocol_room_bookings', 'id')) AS id`,
+  );
+  const rows = (result as unknown as { rows: Array<{ id: number | string }> })
+    .rows;
+  return Number(rows[0].id);
+}
+
 async function hasBookingConflict(
   executor: DbExecutor,
   opts: {
@@ -462,15 +536,27 @@ router.post(
         ) {
           throw new Error("__conflict__");
         }
+        const isExternal = body.meetingType === "external";
+        const bookingId = await reserveBookingId(tx);
         const [row] = await tx
           .insert(protocolRoomBookingsTable)
           .values({
+            id: bookingId,
             roomId: body.roomId,
             title: body.title,
             requesterName: body.requesterName,
             requesterPhone: body.requesterPhone,
-            requesterOrg: body.requesterOrg ?? null,
+            requesterOrg: isExternal ? (body.requesterOrg ?? null) : null,
+            department: body.department ?? null,
+            meetingType: body.meetingType,
+            purpose: body.purpose ?? null,
             attendeeCount: body.attendeeCount ?? null,
+            keyAttendees: (body.keyAttendees ?? []).map((a) => ({
+              name: a.name,
+              position: a.position ?? "",
+              side: a.side,
+            })),
+            bookingReference: makeBookingReference(bookingId, new Date()),
             startsAt,
             endsAt,
             status: "pending",
@@ -488,9 +574,12 @@ router.post(
         });
         return row;
       });
-      // Deliberately return only an acknowledgement — never the stored row
-      // (which could leak internal ids / other data) to an anonymous caller.
-      res.status(201).json({ ok: true, id: created.id });
+      // Deliberately return only an acknowledgement plus the booking
+      // reference — never the full stored row (which could leak internal ids
+      // / other data) to an anonymous caller.
+      res
+        .status(201)
+        .json({ ok: true, id: created.id, bookingReference: created.bookingReference });
     } catch (e) {
       if (e instanceof Error && e.message === "__conflict__") {
         res
@@ -644,6 +733,18 @@ router.get(
     if (typeof toRaw === "string" && !Number.isNaN(Date.parse(toRaw))) {
       conds.push(lte(protocolRoomBookingsTable.startsAt, new Date(toRaw)));
     }
+    // Free-text staff search by booking reference (رقم الحجز) OR requester
+    // phone. Both are indexed; matched case-insensitively as a substring.
+    const qRaw = req.query.q;
+    if (typeof qRaw === "string" && qRaw.trim() !== "") {
+      const term = `%${qRaw.trim()}%`;
+      conds.push(
+        or(
+          ilike(protocolRoomBookingsTable.bookingReference, term),
+          ilike(protocolRoomBookingsTable.requesterPhone, term),
+        )!,
+      );
+    }
     const rows = await db
       .select()
       .from(protocolRoomBookingsTable)
@@ -694,13 +795,27 @@ router.post(
         ) {
           throw new Error("__conflict__");
         }
+        const bookingId = await reserveBookingId(tx);
         const [row] = await tx
           .insert(protocolRoomBookingsTable)
           .values({
+            id: bookingId,
             roomId: body.roomId,
             title: body.title,
             requesterName: body.requesterName ?? null,
+            requesterPhone: body.requesterPhone ?? null,
+            requesterOrg:
+              body.meetingType === "external" ? (body.requesterOrg ?? null) : null,
+            department: body.department ?? null,
+            meetingType: body.meetingType,
+            purpose: body.purpose ?? null,
             attendeeCount: body.attendeeCount ?? null,
+            keyAttendees: (body.keyAttendees ?? []).map((a) => ({
+              name: a.name,
+              position: a.position ?? "",
+              side: a.side,
+            })),
+            bookingReference: makeBookingReference(bookingId, new Date()),
             startsAt,
             endsAt,
             status: canApprove ? "approved" : "pending",
@@ -787,9 +902,38 @@ router.patch(
             ...(body.requesterName !== undefined
               ? { requesterName: body.requesterName }
               : {}),
+            ...(body.requesterPhone !== undefined
+              ? { requesterPhone: body.requesterPhone }
+              : {}),
+            ...(body.meetingType !== undefined
+              ? { meetingType: body.meetingType }
+              : {}),
+            ...(body.requesterOrg !== undefined || body.meetingType !== undefined
+              ? {
+                  requesterOrg:
+                    (body.meetingType ?? existing.meetingType) === "external"
+                      ? (body.requesterOrg !== undefined
+                          ? body.requesterOrg
+                          : existing.requesterOrg)
+                      : null,
+                }
+              : {}),
+            ...(body.department !== undefined
+              ? { department: body.department }
+              : {}),
+            ...(body.purpose !== undefined ? { purpose: body.purpose } : {}),
             ...(body.attendeeCount !== undefined
               ? { attendeeCount: body.attendeeCount }
               : {}),
+            ...(body.keyAttendees !== undefined
+              ? {
+                  keyAttendees: body.keyAttendees.map((a) => ({
+                    name: a.name,
+                    position: a.position ?? "",
+                    side: a.side,
+                  })),
+                }
+              : {}),
             startsAt,
             endsAt,
             ...(body.notes !== undefined ? { notes: body.notes } : {}),
@@ -1014,6 +1158,45 @@ router.delete(
   },
 );
 
+// Bulk delete. One transaction: fetch existing rows (for audit), delete them
+// all, and write one audit row per deleted booking. Ids that don't exist are
+// simply skipped and reported back so the client can toast "deleted X of Y".
+const bulkDeleteSchema = z.object({
+  ids: z.array(z.number().int().positive()).min(1).max(500),
+});
+
+router.post(
+  "/protocol/bookings/bulk-delete",
+  requireMutate,
+  async (req: Request, res: Response) => {
+    const body = parseBody(res, bulkDeleteSchema, req.body);
+    if (!body) return;
+    const ids = Array.from(new Set(body.ids));
+    const deletedIds = await db.transaction(async (tx) => {
+      const existing = await tx
+        .select()
+        .from(protocolRoomBookingsTable)
+        .where(inArray(protocolRoomBookingsTable.id, ids));
+      if (existing.length === 0) return [] as number[];
+      const foundIds = existing.map((r) => r.id);
+      await tx
+        .delete(protocolRoomBookingsTable)
+        .where(inArray(protocolRoomBookingsTable.id, foundIds));
+      for (const row of existing) {
+        await logAudit(tx, {
+          action: "booking.delete",
+          entityType: "booking",
+          entityId: row.id,
+          oldValue: row,
+          performedBy: req.session.userId!,
+        });
+      }
+      return foundIds;
+    });
+    res.json({ requested: ids.length, deleted: deletedIds.length, deletedIds });
+  },
+);
+
 // ---------------------------------------------------------------------------
 // External meetings
 // ---------------------------------------------------------------------------

artifacts/api-server/tests/executive-meetings.test.mjs

@@ -409,6 +409,36 @@ test("Meetings: POST /duplicate clones a meeting onto another date", async () =>
   assert.ok(dayBody.meetings.some((m) => m.id === newRow.id));
 });
 
+// #678: duplicating/repeating must preserve the external-meeting flag
+// (and the shared row colour) instead of silently resetting the copy
+// to a normal internal meeting.
+test("Meetings: POST /duplicate preserves isExternal and rowColor on the copy", async () => {
+  const create = await api(adminCookie, "POST", "/api/executive-meetings", {
+    titleAr: "خارجي",
+    titleEn: "External",
+    meetingDate: today,
+    isExternal: true,
+    attendees: [],
+  });
+  assert.equal(create.status, 201);
+  const original = await create.json();
+  created.meetingIds.push(original.id);
+  assert.equal(original.isExternal, true, "source must be external");
+  assert.equal(original.rowColor, "red", "external source is force-tinted red");
+
+  const dup = await api(
+    adminCookie,
+    "POST",
+    `/api/executive-meetings/${original.id}/duplicate`,
+    { targetDate: tomorrow },
+  );
+  assert.equal(dup.status, 201);
+  const copy = await dup.json();
+  created.meetingIds.push(copy.id);
+  assert.equal(copy.isExternal, true, "duplicate must stay external (#678)");
+  assert.equal(copy.rowColor, "red", "duplicate keeps the red row colour");
+});
+
 // #189: plain-text sanitization for location / meetingUrl / notes.
 test("Sanitization: POST strips HTML from location, meetingUrl, and notes", async () => {
   const create = await api(adminCookie, "POST", "/api/executive-meetings", {

artifacts/tx-os/src/components/ui/calendar.tsx

@@ -7,16 +7,33 @@ import {
   ChevronRightIcon,
 } from "lucide-react"
 import { DayButton, DayPicker, getDefaultClassNames } from "react-day-picker"
+import { ar as dfAr, enUS as dfEn } from "date-fns/locale"
 
 import { cn } from "@/lib/utils"
 import { Button, buttonVariants } from "@/components/ui/button"
 import i18n from "@/i18n"
 
+function isArabic(): boolean {
+  // The public booking page forces Arabic by setting documentElement.lang/dir
+  // without changing i18n.language, so prefer the DOM signal (i18n keeps it in
+  // sync elsewhere) and fall back to the i18n language.
+  if (typeof document !== "undefined") {
+    const el = document.documentElement
+    if (el.lang) return el.lang.toLowerCase().startsWith("ar")
+    if (el.dir) return el.dir === "rtl"
+  }
+  return i18n.language === "ar"
+}
+
 function activeLocaleLatn(): string {
-  const lang = i18n.language === "ar" ? "ar" : "en-US"
+  const lang = isArabic() ? "ar" : "en-US"
   return `${lang}-u-nu-latn`
 }
 
+function activeDfLocale() {
+  return isArabic() ? dfAr : dfEn
+}
+
 function Calendar({
   className,
   classNames,
@@ -41,9 +58,15 @@ function Calendar({
         className
       )}
       captionLayout={captionLayout}
+      locale={activeDfLocale()}
+      dir={isArabic() ? "rtl" : "ltr"}
       formatters={{
         formatMonthDropdown: (date) =>
           new Intl.DateTimeFormat(activeLocaleLatn(), { month: "short", numberingSystem: "latn" }).format(date),
+        formatCaption: (date) =>
+          new Intl.DateTimeFormat(activeLocaleLatn(), { month: "long", year: "numeric", numberingSystem: "latn" }).format(date),
+        formatDay: (date) =>
+          new Intl.DateTimeFormat(activeLocaleLatn(), { day: "numeric", numberingSystem: "latn" }).format(date),
         ...formatters,
       }}
       classNames={{

artifacts/tx-os/src/components/ui/switch.tsx

@@ -17,7 +17,12 @@ const Switch = React.forwardRef<
   >
     <SwitchPrimitives.Thumb
       className={cn(
-        "pointer-events-none block h-4 w-4 rounded-full bg-background shadow-lg ring-0 transition-transform data-[state=checked]:ltr:translate-x-4 data-[state=checked]:rtl:-translate-x-4 data-[state=unchecked]:ltr:translate-x-0 data-[state=unchecked]:rtl:translate-x-4"
+        // #682: in RTL the flex container already places the resting
+        // (unchecked) thumb at the track's start edge, so unchecked must
+        // be translate-x-0 in BOTH directions. The old rtl:translate-x-4
+        // pushed the resting thumb sideways, making OFF look like ON in
+        // Arabic. Checked travel: +x in LTR, -x in RTL.
+        "pointer-events-none block h-4 w-4 rounded-full bg-background shadow-lg ring-0 transition-transform data-[state=unchecked]:translate-x-0 data-[state=checked]:ltr:translate-x-4 data-[state=checked]:rtl:-translate-x-4"
       )}
     />
   </SwitchPrimitives.Root>

artifacts/tx-os/src/locales/ar.json

@@ -1667,11 +1667,12 @@
     "confirmDelete": "لا يمكن التراجع عن هذا الإجراء.",
     "tabs": {
       "dashboard": "لوحة المعلومات",
-      "bookings": "حجوزات القاعات",
-      "external": "اللقاءات الخارجية",
-      "gifts": "الإهداءات",
-      "issues": "طلبات الصرف",
-      "photos": "تصوير",
+      "bookings": "حجز القاعات",
+      "external": "اجتماعات خارجية",
+      "giftsGroup": "الهدايا",
+      "gifts": "المستودع",
+      "issues": "الإهداءات",
+      "photos": "الصور",
       "reports": "التقارير",
       "audit": "سجل النشاط",
       "rooms": "القاعات"
@@ -1704,7 +1705,7 @@
       "pendingBookings": "حجوزات بانتظار الاعتماد",
       "upcomingExternal": "لقاءات خارجية قادمة",
       "giftStock": "إجمالي مخزون الهدايا",
-      "pendingIssues": "طلبات صرف معلّقة",
+      "pendingIssues": "إهداءات معلّقة",
       "roomsAvailableNow": "القاعات المتاحة الآن",
       "giftsIssuedThisMonth": "الدروع المصروفة هذا الشهر"
     },
@@ -1715,18 +1716,115 @@
       "requester": "مقدّم الطلب",
       "org": "الجهة",
       "phone": "الهاتف",
-      "attendeeCount": "عدد الحضور",
+      "attendeeCount": "العدد المتوقع للحضور",
       "publicRequest": "طلب عام",
+      "today": "اليوم",
+      "bulk": {
+        "selectAll": "تحديد الكل",
+        "selectRow": "تحديد الحجز {{number}}",
+        "clearSelection": "إلغاء التحديد",
+        "selectedCount_one": "تم تحديد حجز واحد",
+        "selectedCount_two": "تم تحديد حجزين",
+        "selectedCount_few": "تم تحديد {{count}} حجوزات",
+        "selectedCount_many": "تم تحديد {{count}} حجزاً",
+        "selectedCount_other": "تم تحديد {{count}} حجز",
+        "delete": "حذف",
+        "deleteConfirmTitle_one": "حذف حجز واحد؟",
+        "deleteConfirmTitle_two": "حذف حجزين؟",
+        "deleteConfirmTitle_few": "حذف {{count}} حجوزات؟",
+        "deleteConfirmTitle_many": "حذف {{count}} حجزاً؟",
+        "deleteConfirmTitle_other": "حذف {{count}} حجز؟",
+        "deleteConfirmBody_one": "سيتم حذف حجز واحد نهائياً. لا يمكن التراجع.",
+        "deleteConfirmBody_two": "سيتم حذف حجزين نهائياً. لا يمكن التراجع.",
+        "deleteConfirmBody_few": "سيتم حذف {{count}} حجوزات نهائياً. لا يمكن التراجع.",
+        "deleteConfirmBody_many": "سيتم حذف {{count}} حجزاً نهائياً. لا يمكن التراجع.",
+        "deleteConfirmBody_other": "سيتم حذف {{count}} حجز نهائياً. لا يمكن التراجع.",
+        "deleted_one": "تم حذف حجز واحد",
+        "deleted_two": "تم حذف حجزين",
+        "deleted_few": "تم حذف {{count}} حجوزات",
+        "deleted_many": "تم حذف {{count}} حجزاً",
+        "deleted_other": "تم حذف {{count}} حجز",
+        "deletePartial": "تم حذف {{deleted}} من {{total}}، تعذّر حذف الباقي"
+      },
+      "reference": "رقم الحجز",
+      "department": "الإدارة",
+      "entity": "اسم الجهة",
+      "purpose": "الغرض من الاجتماع",
+      "meetingType": "نوع الاجتماع",
+      "meetingTypes": {
+        "internal": "اجتماع داخلي",
+        "external": "اجتماع مع جهة خارجية"
+      },
+      "keyAttendees": "أبرز الحضور",
+      "attendeeSides": {
+        "internal": "من الهيئة",
+        "external": "خارج الهيئة"
+      },
+      "searchPlaceholder": "ابحث برقم الحجز أو الهاتف…",
+      "searchEmpty": "لا توجد حجوزات مطابقة.",
       "roomLabel": "القاعة",
       "titleLabel": "عنوان الحجز",
       "startsAt": "من",
       "endsAt": "إلى",
       "viewList": "قائمة",
       "viewCalendar": "تقويم",
+      "book": "حجز",
+      "emptyDay": "لا توجد حجوزات في هذا اليوم.",
       "shareLinkTitle": "رابط الحجز العام (للمشاركة مع الضيوف)",
       "copyLink": "نسخ الرابط",
       "linkCopied": "تم نسخ الرابط",
-      "linkCopyFailed": "تعذّر نسخ الرابط"
+      "linkCopyFailed": "تعذّر نسخ الرابط",
+      "table": {
+        "number": "رقم الحجز",
+        "requester": "مقدم الطلب",
+        "date": "تاريخ الحجز",
+        "type": "نوع الاجتماع",
+        "roomAttendees": "القاعة وعدد الحضور",
+        "status": "الحالة",
+        "actions": "الإجراء",
+        "attendeesShort": "الحضور"
+      },
+      "meetingTypesShort": {
+        "internal": "داخلي",
+        "external": "خارجي"
+      },
+      "details": {
+        "date": "التاريخ",
+        "time": "الوقت",
+        "duration": "المدة",
+        "requesterSection": "بيانات مقدّم الطلب",
+        "meetingSection": "تفاصيل الاجتماع",
+        "notes": "ملاحظات",
+        "rejectionReason": "سبب الرفض",
+        "attendeeCols": {
+          "name": "الاسم",
+          "position": "الصفة",
+          "side": "الجهة"
+        },
+        "source": "مصدر الطلب",
+        "sources": {
+          "internal": "داخلي",
+          "public": "طلب عام"
+        },
+        "durationHours_zero": "{{count}} ساعة",
+        "durationHours_one": "ساعة واحدة",
+        "durationHours_two": "ساعتان",
+        "durationHours_few": "{{count}} ساعات",
+        "durationHours_many": "{{count}} ساعة",
+        "durationHours_other": "{{count}} ساعة",
+        "durationMinutes_zero": "{{count}} دقيقة",
+        "durationMinutes_one": "دقيقة واحدة",
+        "durationMinutes_two": "دقيقتان",
+        "durationMinutes_few": "{{count}} دقائق",
+        "durationMinutes_many": "{{count}} دقيقة",
+        "durationMinutes_other": "{{count}} دقيقة"
+      },
+      "form": {
+        "name": "الاسم",
+        "position": "المنصب",
+        "addRow": "إضافة صف",
+        "removeRow": "حذف الصف"
+      }
     },
     "external": {
       "new": "لقاء جديد",
@@ -1760,8 +1858,8 @@
       "empty": "لا توجد قاعات."
     },
     "issues": {
-      "new": "طلب صرف",
-      "empty": "لا توجد طلبات صرف.",
+      "new": "إهداء جديد",
+      "empty": "لا توجد إهداءات.",
       "recipient": "المستفيد",
       "gift": "الصنف",
       "occasion": "المناسبة",

artifacts/tx-os/src/locales/en.json

@@ -1542,8 +1542,9 @@
       "dashboard": "Dashboard",
       "bookings": "Room Bookings",
       "external": "External Meetings",
-      "gifts": "Dedications",
-      "issues": "Issuance Requests",
+      "giftsGroup": "Gifts",
+      "gifts": "Warehouse",
+      "issues": "Dedications",
       "photos": "Photos",
       "reports": "Reports",
       "audit": "Activity Log",
@@ -1577,7 +1578,7 @@
       "pendingBookings": "Bookings awaiting approval",
       "upcomingExternal": "Upcoming external meetings",
       "giftStock": "Total gift stock",
-      "pendingIssues": "Pending issuance requests",
+      "pendingIssues": "Pending dedications",
       "roomsAvailableNow": "Rooms available now",
       "giftsIssuedThisMonth": "Gifts issued this month"
     },
@@ -1588,18 +1589,95 @@
       "requester": "Requester",
       "org": "Organization",
       "phone": "Phone",
-      "attendeeCount": "Attendees",
+      "attendeeCount": "Expected attendees",
       "publicRequest": "Public request",
+      "today": "Today",
+      "bulk": {
+        "selectAll": "Select all",
+        "selectRow": "Select booking {{number}}",
+        "clearSelection": "Clear selection",
+        "selectedCount_one": "1 booking selected",
+        "selectedCount_other": "{{count}} bookings selected",
+        "delete": "Delete",
+        "deleteConfirmTitle_one": "Delete 1 booking?",
+        "deleteConfirmTitle_other": "Delete {{count}} bookings?",
+        "deleteConfirmBody_one": "This will permanently delete 1 booking. This cannot be undone.",
+        "deleteConfirmBody_other": "This will permanently delete {{count}} bookings. This cannot be undone.",
+        "deleted_one": "1 booking deleted",
+        "deleted_other": "{{count}} bookings deleted",
+        "deletePartial": "Deleted {{deleted}} of {{total}}; the rest could not be deleted"
+      },
+      "reference": "Booking ref",
+      "department": "Department",
+      "entity": "Entity",
+      "purpose": "Meeting purpose",
+      "meetingType": "Meeting type",
+      "meetingTypes": {
+        "internal": "Internal meeting",
+        "external": "Meeting with external entity"
+      },
+      "keyAttendees": "Key attendees",
+      "attendeeSides": {
+        "internal": "From the authority",
+        "external": "External"
+      },
+      "searchPlaceholder": "Search by booking ref or phone…",
+      "searchEmpty": "No matching bookings.",
       "roomLabel": "Room",
       "titleLabel": "Booking title",
       "startsAt": "From",
       "endsAt": "To",
       "viewList": "List",
       "viewCalendar": "Calendar",
+      "book": "Book",
+      "emptyDay": "No bookings on this day.",
       "shareLinkTitle": "Public booking link (share with guests)",
       "copyLink": "Copy link",
       "linkCopied": "Link copied",
-      "linkCopyFailed": "Could not copy the link"
+      "linkCopyFailed": "Could not copy the link",
+      "table": {
+        "number": "Booking No.",
+        "requester": "Requester",
+        "date": "Booking date",
+        "type": "Meeting type",
+        "roomAttendees": "Room & attendees",
+        "status": "Status",
+        "actions": "Actions",
+        "attendeesShort": "Attendees"
+      },
+      "meetingTypesShort": {
+        "internal": "Internal",
+        "external": "External"
+      },
+      "details": {
+        "date": "Date",
+        "time": "Time",
+        "duration": "Duration",
+        "requesterSection": "Requester details",
+        "meetingSection": "Meeting details",
+        "notes": "Notes",
+        "rejectionReason": "Rejection reason",
+        "attendeeCols": {
+          "name": "Name",
+          "position": "Title",
+          "side": "Side"
+        },
+        "source": "Request source",
+        "sources": {
+          "internal": "Internal",
+          "public": "Public request"
+        },
+        "durationHours_one": "1 hour",
+        "durationHours_other": "{{count}} hours",
+        "durationMinutes_one": "1 minute",
+        "durationMinutes_other": "{{count}} minutes"
+      },
+      "form": {
+        "name": "Name",
+        "position": "Position",
+        "addRow": "Add row",
+        "removeRow": "Remove row"
+      }
     },
     "external": {
       "new": "New meeting",
@@ -1633,8 +1711,8 @@
       "empty": "No rooms."
     },
     "issues": {
-      "new": "Issuance request",
-      "empty": "No issuance requests yet.",
+      "new": "New dedication",
+      "empty": "No dedications yet.",
       "recipient": "Recipient",
       "gift": "Item",
       "occasion": "Occasion",

artifacts/tx-os/src/pages/protocol-request.tsx

@@ -1,6 +1,13 @@
 import { useEffect, useMemo, useState } from "react";
 import { useQuery } from "@tanstack/react-query";
-import { CalendarClock, CheckCircle2, Loader2 } from "lucide-react";
+import {
+  CalendarClock,
+  CheckCircle2,
+  Loader2,
+  Plus,
+  X,
+  AlertTriangle,
+} from "lucide-react";
 import { Button } from "@/components/ui/button";
 import { Input } from "@/components/ui/input";
 import { Textarea } from "@/components/ui/textarea";
@@ -18,12 +25,19 @@ const API = `${import.meta.env.BASE_URL}api`;
 
 type PublicRoom = { id: number; nameAr: string; nameEn: string };
 
+type MeetingType = "internal" | "external";
+type AttendeeSide = "internal" | "external";
+type AttendeeRow = { name: string; position: string };
+
 type FormState = {
   requesterName: string;
   title: string;
   requesterPhone: string;
+  department: string;
+  meetingType: MeetingType;
   requesterOrg: string;
   attendeeCount: string;
+  purpose: string;
   roomId: string;
   startsAt: string;
   endsAt: string;
@@ -35,8 +49,11 @@ const EMPTY: FormState = {
   requesterName: "",
   title: "",
   requesterPhone: "",
+  department: "",
+  meetingType: "internal",
   requesterOrg: "",
   attendeeCount: "",
+  purpose: "",
   roomId: "",
   startsAt: "",
   endsAt: "",
@@ -44,6 +61,8 @@ const EMPTY: FormState = {
   website: "",
 };
 
+const EMPTY_ROW: AttendeeRow = { name: "", position: "" };
+
 function localToIso(v: string): string {
   return new Date(v).toISOString();
 }
@@ -74,13 +93,51 @@ export default function ProtocolRequestPage() {
   });
 
   const [form, setForm] = useState<FormState>(EMPTY);
+  // Key attendees ("أبرز الحضور") are two separate lists: من الهيئة (internal)
+  // and خارج الهيئة (external). Each row is a name + position.
+  const [internalAttendees, setInternalAttendees] = useState<AttendeeRow[]>([
+    { ...EMPTY_ROW },
+  ]);
+  const [externalAttendees, setExternalAttendees] = useState<AttendeeRow[]>([
+    { ...EMPTY_ROW },
+  ]);
   const [submitting, setSubmitting] = useState(false);
   const [done, setDone] = useState(false);
+  const [reference, setReference] = useState<string | null>(null);
   const [error, setError] = useState<string | null>(null);
 
   const set = <K extends keyof FormState>(k: K, v: FormState[K]) =>
     setForm((f) => ({ ...f, [k]: v }));
 
+  const updateRow = (
+    side: AttendeeSide,
+    idx: number,
+    field: keyof AttendeeRow,
+    value: string,
+  ) => {
+    const setter =
+      side === "internal" ? setInternalAttendees : setExternalAttendees;
+    setter((rows) =>
+      rows.map((r, i) => (i === idx ? { ...r, [field]: value } : r)),
+    );
+  };
+
+  const addRow = (side: AttendeeSide) => {
+    const setter =
+      side === "internal" ? setInternalAttendees : setExternalAttendees;
+    setter((rows) => [...rows, { ...EMPTY_ROW }]);
+  };
+
+  const removeRow = (side: AttendeeSide, idx: number) => {
+    const setter =
+      side === "internal" ? setInternalAttendees : setExternalAttendees;
+    setter((rows) =>
+      rows.length <= 1 ? [{ ...EMPTY_ROW }] : rows.filter((_, i) => i !== idx),
+    );
+  };
+
+  const isExternal = form.meetingType === "external";
+
   const canSubmit = useMemo(() => {
     return (
       form.requesterName.trim().length > 0 &&
@@ -89,9 +146,10 @@ export default function ProtocolRequestPage() {
       form.roomId !== "" &&
       form.startsAt !== "" &&
       form.endsAt !== "" &&
-      new Date(form.startsAt) < new Date(form.endsAt)
+      new Date(form.startsAt) < new Date(form.endsAt) &&
+      (!isExternal || form.requesterOrg.trim().length > 0)
     );
-  }, [form]);
+  }, [form, isExternal]);
 
   const onSubmit = async (e: React.FormEvent) => {
     e.preventDefault();
@@ -99,6 +157,22 @@ export default function ProtocolRequestPage() {
     if (!canSubmit || submitting) return;
     setSubmitting(true);
     try {
+      const keyAttendees = [
+        ...internalAttendees
+          .filter((r) => r.name.trim() !== "")
+          .map((r) => ({
+            name: r.name.trim(),
+            position: r.position.trim(),
+            side: "internal" as const,
+          })),
+        ...externalAttendees
+          .filter((r) => r.name.trim() !== "")
+          .map((r) => ({
+            name: r.name.trim(),
+            position: r.position.trim(),
+            side: "external" as const,
+          })),
+      ];
       const res = await fetch(`${API}/protocol/public/booking-requests`, {
         method: "POST",
         headers: { "Content-Type": "application/json" },
@@ -107,11 +181,15 @@ export default function ProtocolRequestPage() {
           title: form.title.trim(),
           requesterName: form.requesterName.trim(),
           requesterPhone: form.requesterPhone.trim(),
-          requesterOrg: form.requesterOrg.trim() || null,
+          department: form.department.trim() || null,
+          meetingType: form.meetingType,
+          requesterOrg: isExternal ? form.requesterOrg.trim() : null,
+          purpose: form.purpose.trim() || null,
           attendeeCount:
             form.attendeeCount.trim() === ""
               ? null
               : Number(form.attendeeCount),
+          keyAttendees,
           startsAt: localToIso(form.startsAt),
           endsAt: localToIso(form.endsAt),
           notes: form.notes.trim() || null,
@@ -119,6 +197,14 @@ export default function ProtocolRequestPage() {
         }),
       });
       if (res.ok) {
+        try {
+          const data = await res.json();
+          if (data?.bookingReference && typeof data.bookingReference === "string") {
+            setReference(data.bookingReference);
+          }
+        } catch {
+          // no reference in body — still a success
+        }
         setDone(true);
         return;
       }
@@ -140,6 +226,14 @@ export default function ProtocolRequestPage() {
     }
   };
 
+  const resetForm = () => {
+    setForm(EMPTY);
+    setInternalAttendees([{ ...EMPTY_ROW }]);
+    setExternalAttendees([{ ...EMPTY_ROW }]);
+    setReference(null);
+    setDone(false);
+  };
+
   if (done) {
     return (
       <div
@@ -155,14 +249,21 @@ export default function ProtocolRequestPage() {
             سيقوم فريق المراسم بمراجعة طلب الحجز والتواصل معك على رقم الهاتف
             المُدخل لتأكيد الموعد.
           </p>
-          <Button
-            className="mt-6"
-            variant="outline"
-            onClick={() => {
-              setForm(EMPTY);
-              setDone(false);
-            }}
-          >
+          {reference && (
+            <div className="mt-5 rounded-xl bg-sky-50 border border-sky-200 px-4 py-4">
+              <p className="text-sm text-slate-500 mb-1">رقم الحجز</p>
+              <p
+                className="text-2xl font-bold tracking-wider text-sky-700"
+                dir="ltr"
+              >
+                {reference}
+              </p>
+              <p className="text-xs text-slate-500 mt-2">
+                احتفظ بهذا الرقم لمتابعة حالة طلبك.
+              </p>
+            </div>
+          )}
+          <Button className="mt-6" variant="outline" onClick={resetForm}>
             إرسال طلب آخر
           </Button>
         </div>
@@ -205,7 +306,7 @@ export default function ProtocolRequestPage() {
 
           <div className="space-y-2">
             <Label htmlFor="requesterName">
-              الاسم الكامل <span className="text-rose-500">*</span>
+              الاسم <span className="text-rose-500">*</span>
             </Label>
             <Input
               id="requesterName"
@@ -216,19 +317,6 @@ export default function ProtocolRequestPage() {
             />
           </div>
 
-          <div className="space-y-2">
-            <Label htmlFor="title">
-              عنوان الاجتماع <span className="text-rose-500">*</span>
-            </Label>
-            <Input
-              id="title"
-              value={form.title}
-              onChange={(e) => set("title", e.target.value)}
-              placeholder="موضوع أو عنوان الاجتماع"
-              required
-            />
-          </div>
-
           <div className="space-y-2">
             <Label htmlFor="requesterPhone">
               رقم الهاتف للتواصل <span className="text-rose-500">*</span>
@@ -246,37 +334,11 @@ export default function ProtocolRequestPage() {
             />
           </div>
 
-          <div className="space-y-2">
-            <Label htmlFor="requesterOrg">الجهة / المؤسسة</Label>
-            <Input
-              id="requesterOrg"
-              value={form.requesterOrg}
-              onChange={(e) => set("requesterOrg", e.target.value)}
-              placeholder="اسم الجهة أو المؤسسة (اختياري)"
-            />
-          </div>
-
-          <div className="space-y-2">
-            <Label htmlFor="attendeeCount">عدد الحضور</Label>
-            <Input
-              id="attendeeCount"
-              type="number"
-              inputMode="numeric"
-              min={1}
-              value={form.attendeeCount}
-              onChange={(e) => set("attendeeCount", e.target.value)}
-              placeholder="العدد المتوقع للحضور (اختياري)"
-            />
-          </div>
-
           <div className="space-y-2">
             <Label htmlFor="room">
               القاعة <span className="text-rose-500">*</span>
             </Label>
-            <Select
-              value={form.roomId}
-              onValueChange={(v) => set("roomId", v)}
-            >
+            <Select value={form.roomId} onValueChange={(v) => set("roomId", v)}>
               <SelectTrigger id="room">
                 <SelectValue
                   placeholder={
@@ -299,6 +361,95 @@ export default function ProtocolRequestPage() {
             )}
           </div>
 
+          <div className="space-y-2">
+            <Label htmlFor="department">الإدارة</Label>
+            <Input
+              id="department"
+              value={form.department}
+              onChange={(e) => set("department", e.target.value)}
+              placeholder="الإدارة أو القسم (اختياري)"
+            />
+          </div>
+
+          <div className="space-y-2">
+            <Label htmlFor="title">
+              عنوان الاجتماع <span className="text-rose-500">*</span>
+            </Label>
+            <Input
+              id="title"
+              value={form.title}
+              onChange={(e) => set("title", e.target.value)}
+              placeholder="موضوع أو عنوان الاجتماع"
+              required
+            />
+          </div>
+
+          <div className="space-y-2">
+            <Label>
+              نوع الاجتماع <span className="text-rose-500">*</span>
+            </Label>
+            <div className="grid grid-cols-2 gap-2">
+              {(
+                [
+                  { value: "internal", label: "اجتماع داخلي" },
+                  { value: "external", label: "اجتماع مع جهة خارجية" },
+                ] as const
+              ).map((opt) => (
+                <button
+                  key={opt.value}
+                  type="button"
+                  onClick={() => set("meetingType", opt.value)}
+                  className={`rounded-lg border px-3 py-2.5 text-sm font-medium transition-colors ${
+                    form.meetingType === opt.value
+                      ? "border-sky-500 bg-sky-50 text-sky-700"
+                      : "border-slate-200 bg-white text-slate-600 hover:border-slate-300"
+                  }`}
+                >
+                  {opt.label}
+                </button>
+              ))}
+            </div>
+          </div>
+
+          {isExternal && (
+            <div className="space-y-2">
+              <Label htmlFor="requesterOrg">
+                اسم الجهة <span className="text-rose-500">*</span>
+              </Label>
+              <Input
+                id="requesterOrg"
+                value={form.requesterOrg}
+                onChange={(e) => set("requesterOrg", e.target.value)}
+                placeholder="اسم الجهة الخارجية"
+                required
+              />
+            </div>
+          )}
+
+          <div className="space-y-2">
+            <Label htmlFor="attendeeCount">العدد المتوقع للحضور</Label>
+            <Input
+              id="attendeeCount"
+              type="number"
+              inputMode="numeric"
+              min={1}
+              value={form.attendeeCount}
+              onChange={(e) => set("attendeeCount", e.target.value)}
+              placeholder="العدد المتوقع للحضور (اختياري)"
+            />
+          </div>
+
+          <div className="space-y-2">
+            <Label htmlFor="purpose">الغرض من الاجتماع</Label>
+            <Textarea
+              id="purpose"
+              value={form.purpose}
+              onChange={(e) => set("purpose", e.target.value)}
+              placeholder="اشرح الغرض من الاجتماع (اختياري)"
+              rows={2}
+            />
+          </div>
+
           <div className="grid grid-cols-1 sm:grid-cols-2 gap-4">
             <div className="space-y-2">
               <Label htmlFor="startsAt">
@@ -332,6 +483,30 @@ export default function ProtocolRequestPage() {
               </p>
             )}
 
+          <div className="space-y-3">
+            <Label>أبرز الحضور</Label>
+            <div className="grid grid-cols-1 sm:grid-cols-2 gap-4">
+              <AttendeeColumn
+                title="من الهيئة"
+                rows={internalAttendees}
+                onChange={(idx, field, value) =>
+                  updateRow("internal", idx, field, value)
+                }
+                onAdd={() => addRow("internal")}
+                onRemove={(idx) => removeRow("internal", idx)}
+              />
+              <AttendeeColumn
+                title="خارج الهيئة"
+                rows={externalAttendees}
+                onChange={(idx, field, value) =>
+                  updateRow("external", idx, field, value)
+                }
+                onAdd={() => addRow("external")}
+                onRemove={(idx) => removeRow("external", idx)}
+              />
+            </div>
+          </div>
+
           <div className="space-y-2">
             <Label htmlFor="notes">ملاحظات</Label>
             <Textarea
@@ -343,6 +518,13 @@ export default function ProtocolRequestPage() {
             />
           </div>
 
+          <div className="flex items-start gap-2 rounded-lg bg-rose-50 border border-rose-200 text-rose-700 text-sm px-3 py-3">
+            <AlertTriangle className="w-4 h-4 mt-0.5 shrink-0" />
+            <span>
+              للإحاطة: في حال الحاجة للقاعة سيتم إلغاء الاجتماع أو تعديل موقعه.
+            </span>
+          </div>
+
           {error && (
             <div className="rounded-lg bg-rose-50 border border-rose-200 text-rose-700 text-sm px-3 py-2">
               {error}
@@ -362,3 +544,59 @@ export default function ProtocolRequestPage() {
     </div>
   );
 }
+
+function AttendeeColumn({
+  title,
+  rows,
+  onChange,
+  onAdd,
+  onRemove,
+}: {
+  title: string;
+  rows: AttendeeRow[];
+  onChange: (idx: number, field: keyof AttendeeRow, value: string) => void;
+  onAdd: () => void;
+  onRemove: (idx: number) => void;
+}) {
+  return (
+    <div className="rounded-lg border border-slate-200 p-3 space-y-3">
+      <p className="text-sm font-semibold text-slate-700">{title}</p>
+      <div className="space-y-3">
+        {rows.map((row, idx) => (
+          <div key={idx} className="space-y-2">
+            <div className="flex items-center gap-2">
+              <Input
+                value={row.name}
+                onChange={(e) => onChange(idx, "name", e.target.value)}
+                placeholder="الاسم"
+              />
+              {rows.length > 1 && (
+                <button
+                  type="button"
+                  onClick={() => onRemove(idx)}
+                  className="shrink-0 text-slate-400 hover:text-rose-500 p-1"
+                  aria-label="حذف الصف"
+                >
+                  <X className="w-4 h-4" />
+                </button>
+              )}
+            </div>
+            <Input
+              value={row.position}
+              onChange={(e) => onChange(idx, "position", e.target.value)}
+              placeholder="المنصب"
+            />
+          </div>
+        ))}
+      </div>
+      <button
+        type="button"
+        onClick={onAdd}
+        className="flex items-center gap-1 text-sm font-medium text-sky-600 hover:text-sky-700"
+      >
+        <Plus className="w-4 h-4" />
+        إضافة صف
+      </button>
+    </div>
+  );
+}

lib/db/scripts/pre-push-cleanup.ts

@@ -81,6 +81,48 @@ async function main(): Promise<void> {
       );
     }
 
+    // Backfill booking references BEFORE the schema push enforces the
+    // NOT NULL + unique constraint on protocol_room_bookings.booking_reference.
+    // Without this, pushing the constraint against a populated table (any
+    // pre-existing booking predates the column) would fail. Reference format
+    // mirrors makeBookingReference() in the API: RB-{year}-{pad4(id)}, which
+    // is unique because id is unique. Idempotent: only touches NULL rows.
+    if (await tableExists(client, "protocol_room_bookings")) {
+      const hasColumn = await client.query(
+        `SELECT 1 FROM information_schema.columns
+          WHERE table_schema = 'public'
+            AND table_name = 'protocol_room_bookings'
+            AND column_name = 'booking_reference'`,
+      );
+      if ((hasColumn.rowCount ?? 0) > 0) {
+        const backfilled = await client.query(
+          `UPDATE protocol_room_bookings
+              SET booking_reference =
+                'RB-' || EXTRACT(YEAR FROM created_at)::int
+                     || '-' || LPAD(id::text, 4, '0')
+            WHERE booking_reference IS NULL`,
+        );
+        const filled = backfilled.rowCount ?? 0;
+        if (filled > 0) {
+          console.log(
+            `[pre-push] Backfilled ${filled} protocol_room_bookings booking_reference value(s).`,
+          );
+        } else {
+          console.log(
+            "[pre-push] No protocol_room_bookings booking_reference to backfill.",
+          );
+        }
+      } else {
+        console.log(
+          "[pre-push] protocol_room_bookings.booking_reference column not present yet — skipping backfill.",
+        );
+      }
+    } else {
+      console.log(
+        "[pre-push] protocol_room_bookings table not present yet — skipping booking_reference backfill.",
+      );
+    }
+
     await client.query("COMMIT");
   } catch (err) {
     await client.query("ROLLBACK").catch(() => {});

lib/db/src/schema/protocol.ts

@@ -8,6 +8,7 @@ import {
   jsonb,
   boolean,
   index,
+  uniqueIndex,
 } from "drizzle-orm/pg-core";
 import { createInsertSchema } from "drizzle-zod";
 import { z } from "zod/v4";
@@ -35,6 +36,25 @@ export const PROTOCOL_BOOKING_STATUSES = [
 export type ProtocolBookingStatus =
   (typeof PROTOCOL_BOOKING_STATUSES)[number];
 
+// A room booking is either an internal meeting or a meeting with an external
+// entity. When external, the requester's organization (requesterOrg / اسم
+// الجهة) is required.
+export const PROTOCOL_MEETING_TYPES = ["internal", "external"] as const;
+export type ProtocolMeetingType = (typeof PROTOCOL_MEETING_TYPES)[number];
+
+// Which "side" a key attendee belongs to: from the authority (من الهيئة) or
+// from outside it (خارج الهيئة).
+export const PROTOCOL_ATTENDEE_SIDES = ["internal", "external"] as const;
+export type ProtocolAttendeeSide = (typeof PROTOCOL_ATTENDEE_SIDES)[number];
+
+// A notable attendee ("أبرز الحضور") captured on the booking request. Stored
+// as a JSON array on the booking row.
+export type ProtocolKeyAttendee = {
+  name: string;
+  position: string;
+  side: ProtocolAttendeeSide;
+};
+
 export const PROTOCOL_ISSUE_STATUSES = [
   "pending",
   "approved",
@@ -94,9 +114,27 @@ export const protocolRoomBookingsTable = pgTable(
     // The requester's organization / entity (الجهة). Optional even for
     // public requests; always null for internal bookings unless set.
     requesterOrg: varchar("requester_org", { length: 300 }),
-    // Expected number of attendees (عدد الحضور). Optional; supplied by the
-    // guest on a public request or by staff on an internal booking.
+    // Expected number of attendees (العدد المتوقع للحضور). Optional; supplied
+    // by the guest on a public request or by staff on an internal booking.
     attendeeCount: integer("attendee_count"),
+    // The requester's department / administration (الإدارة). Optional.
+    department: varchar("department", { length: 300 }),
+    // Whether the meeting is internal or with an external entity. When
+    // "external", requesterOrg (اسم الجهة) is required. Defaults to internal.
+    meetingType: varchar("meeting_type", { length: 20 })
+      .notNull()
+      .default("internal"),
+    // Free-text purpose of the meeting (الغرض من الاجتماع). Optional.
+    purpose: text("purpose"),
+    // Notable attendees (أبرز الحضور): array of { name, position, side }.
+    keyAttendees: jsonb("key_attendees")
+      .$type<ProtocolKeyAttendee[]>()
+      .notNull()
+      .default([]),
+    // Human-friendly, unique booking reference (رقم الحجز) shown to the
+    // requester on success and searchable by staff. Generated on insert and
+    // never null — every booking (public or internal) has one.
+    bookingReference: varchar("booking_reference", { length: 40 }).notNull(),
     // Provenance marker. "internal" for bookings created by authenticated
     // protocol staff through the app; "public" for guest requests coming in
     // via the no-login booking-request link. Defaults to "internal" so all
@@ -128,6 +166,10 @@ export const protocolRoomBookingsTable = pgTable(
     roomIdx: index("protocol_bookings_room_idx").on(t.roomId),
     startIdx: index("protocol_bookings_start_idx").on(t.startsAt),
     statusIdx: index("protocol_bookings_status_idx").on(t.status),
+    referenceIdx: uniqueIndex("protocol_bookings_reference_idx").on(
+      t.bookingReference,
+    ),
+    phoneIdx: index("protocol_bookings_phone_idx").on(t.requesterPhone),
   }),
 );