Merge pull request 'Promote dev → uat (GRO-1793: dynamic time slots)' (#25) from dev into uat

Promote dev → uat: GRO-1793 dynamic portal time slots (#25)

UAT_PLAYBOOK.md

@@ -183,6 +183,18 @@ export const { signIn, signOut, useSession, changePassword } = authClient;
 | TC-WEB-5.12.3 | Confirm appointment | Click confirm on pending appointment | Appointment status updated to confirmed |
 | TC-WEB-5.12.4 | Cancel appointment | Click cancel on appointment | Appointment marked as cancelled |
 
+#### 5.12b Dynamic Portal Time Slots (GRO-1793)
+
+| # | Scenario | Steps | Expected |
+|---|----------|-------|----------|
+| TC-WEB-5.12.5 | BookingFlow dynamic slots | Open Book New, select pet and service, pick a date | Time slots fetched from API; "Checking availability…" shown while loading |
+| TC-WEB-5.12.6 | BookingFlow slots match wizard | Compare BookingFlow slot times with public booking wizard for same date | Same slots displayed |
+| TC-WEB-5.12.7 | BookingFlow error state | Mock API failure on availability fetch | "Failed to load time slots" error shown |
+| TC-WEB-5.12.8 | BookingFlow no slots | Select date with no availability | "No available slots on this date" shown |
+| TC-WEB-5.12.9 | RescheduleFlow dynamic slots | Open reschedule, pick a new date | Time slots fetched from API; loading state shown |
+| TC-WEB-5.12.10 | RescheduleFlow error state | Mock API failure on availability fetch | "Failed to load time slots" error shown |
+| TC-WEB-5.12.11 | RescheduleFlow no slots | Select date with no availability | "No available slots on this date" shown |
+
 ### 5.13 Reports UI
 
 | # | Scenario | Steps | Expected |
@@ -304,26 +316,6 @@ export const { signIn, signOut, useSession, changePassword } = authClient;
 | TC-WEB-5.23.2 | Save pet — error state | Trigger an API save failure (e.g. network error) | Error message displayed; edit form stays open; no data cleared |
 | TC-WEB-5.23.3 | Save pet — saving indicator | Click Save | Spinner/indicator shown while request is in flight; form controls disabled |
 
-
-### 5.24 Booking Funnel Analytics Events (GRO-1794)
-
-
-| # | Scenario | Steps | Expected |
-|---|----------|-------|----------|
-| TC-WEB-5.24.1 | booking_step_service — public | Select a service in the public booking wizard | `booking_step_service` CustomEvent fires with detail.step="service" and detail.flow="public" |
-| TC-WEB-5.24.2 | booking_step_time — public | Select a time slot and click Continue | `booking_step_time` fires with detail.step="time" and detail.flow="public" |
-| TC-WEB-5.24.3 | booking_step_contact — public | Fill in contact/pet form, click "Review booking" | `booking_step_contact` fires with detail.step="contact" and detail.flow="public" |
-| TC-WEB-5.24.4 | booking_step_submit — public | Confirm and submit the booking | `booking_step_submit` fires with detail.step="submit" and detail.flow="public" |
-| TC-WEB-5.24.5 | booking_confirmed — public | Navigate to /booking-confirmed | `booking_confirmed` fires once on mount with detail.step="confirmed" and detail.flow="public" |
-| TC-WEB-5.24.6 | booking_error — public | Navigate to /booking-error | `booking_error` fires once on mount with detail.step="error" and detail.flow="public" |
-| TC-WEB-5.24.7 | booking_step_service — portal | Select a pet in the portal BookingFlow | `booking_step_service` fires with detail.step="service" and detail.flow="portal" |
-| TC-WEB-5.24.8 | booking_step_time — portal | Pick a date and time in portal BookingFlow | `booking_step_time` fires with detail.step="time" and detail.flow="portal" |
-| TC-WEB-5.24.9 | booking_step_contact — portal | Proceed from groomer selection to review screen | `booking_step_contact` fires with detail.step="groomer" and detail.flow="portal" |
-| TC-WEB-5.24.10 | booking_step_submit — portal | Submit booking in portal BookingFlow | `booking_step_submit` fires with detail.step="submit" and detail.flow="portal" |
-| TC-WEB-5.24.11 | booking_confirmed — portal | Portal booking request succeeds | Inline success state is shown and `booking_confirmed` fires with detail.step="confirmed" and detail.flow="portal" |
-| TC-WEB-5.24.12 | No PII in analytics payloads | Fire each event and inspect detail object | Payload contains only: step, flow, timestamp — no names, emails, phone numbers, or pet names |
-| TC-WEB-5.24.13 | No-op safe | Trigger analytics with window.dispatchEvent blocked (e.g. CSP) | No error thrown; booking flow completes normally |
-
 ## 6. Pass/Fail Criteria
 
 **Pass:**

src/__tests__/Appointments.test.tsx

@@ -380,3 +380,141 @@ describe("ConfirmationSection", () => {
     });
   });
 });
+
+describe("RescheduleFlow dynamic time slots", () => {
+  beforeEach(() => {
+    vi.clearAllMocks();
+    global.fetch = vi.fn();
+  });
+
+  const RESCHEDULE_APPT = {
+    id: "appt-r1",
+    petId: "pet-1",
+    petName: "Buddy",
+    groomerId: "groomer-1",
+    groomerName: "Sarah",
+    services: ["Bath & Brush"],
+    serviceId: "service-1",
+    addOns: [],
+    date: "2027-01-01",
+    time: "10:00 AM",
+    duration: 60,
+    price: 50,
+    status: "confirmed" as const,
+    notes: "",
+    customerNotes: "",
+    confirmationStatus: "confirmed" as const,
+  };
+
+  it("shows loading state while fetching availability", async () => {
+    vi.mocked(global.fetch).mockReturnValue(new Promise(() => {})); // Never resolves
+
+    const { RescheduleFlow } = await import("../portal/sections/Appointments.tsx");
+    render(<RescheduleFlow appointment={RESCHEDULE_APPT} onClose={() => {}} sessionId="test-session-id" />);
+
+    const dateInput = screen.getByLabelText(/date/i) || screen.getByRole("textbox", { name: /date/i });
+    fireEvent.change(dateInput, { target: { value: "2027-01-15" } });
+
+    await waitFor(() => {
+      expect(screen.getByText(/Checking availability/i)).toBeInTheDocument();
+    });
+  });
+
+  it("displays fetched time slots from API", async () => {
+    vi.mocked(global.fetch).mockResolvedValue({
+      ok: true,
+      json: async () => ["9:00 AM", "10:00 AM", "2:00 PM"],
+    } as Response);
+
+    const { RescheduleFlow } = await import("../portal/sections/Appointments.tsx");
+    render(<RescheduleFlow appointment={RESCHEDULE_APPT} onClose={() => {}} sessionId="test-session-id" />);
+
+    const dateInput = screen.getByLabelText(/date/i) || screen.getByRole("textbox", { name: /date/i });
+    fireEvent.change(dateInput, { target: { value: "2027-01-15" } });
+
+    await waitFor(() => {
+      expect(screen.getByText("9:00 AM")).toBeInTheDocument();
+      expect(screen.getByText("10:00 AM")).toBeInTheDocument();
+      expect(screen.getByText("2:00 PM")).toBeInTheDocument();
+    });
+  });
+
+  it("shows error state when availability fetch fails", async () => {
+    vi.mocked(global.fetch).mockRejectedValue(new Error("Network error"));
+
+    const { RescheduleFlow } = await import("../portal/sections/Appointments.tsx");
+    render(<RescheduleFlow appointment={RESCHEDULE_APPT} onClose={() => {}} sessionId="test-session-id" />);
+
+    const dateInput = screen.getByLabelText(/date/i) || screen.getByRole("textbox", { name: /date/i });
+    fireEvent.change(dateInput, { target: { value: "2027-01-15" } });
+
+    await waitFor(() => {
+      expect(screen.getByText(/Failed to load time slots/i)).toBeInTheDocument();
+    });
+  });
+
+  it("shows no slots message when API returns empty array", async () => {
+    vi.mocked(global.fetch).mockResolvedValue({
+      ok: true,
+      json: async () => [] as string[],
+    } as Response);
+
+    const { RescheduleFlow } = await import("../portal/sections/Appointments.tsx");
+    render(<RescheduleFlow appointment={RESCHEDULE_APPT} onClose={() => {}} sessionId="test-session-id" />);
+
+    const dateInput = screen.getByLabelText(/date/i) || screen.getByRole("textbox", { name: /date/i });
+    fireEvent.change(dateInput, { target: { value: "2027-01-15" } });
+
+    await waitFor(() => {
+      expect(screen.getByText(/No available slots on this date/i)).toBeInTheDocument();
+    });
+  });
+
+  it("calls /api/book/availability with the selected date", async () => {
+    vi.mocked(global.fetch).mockResolvedValue({
+      ok: true,
+      json: async () => ["9:00 AM"] as string[],
+    } as Response);
+
+    const { RescheduleFlow } = await import("../portal/sections/Appointments.tsx");
+    render(<RescheduleFlow appointment={RESCHEDULE_APPT} onClose={() => {}} sessionId="test-session-id" />);
+
+    const dateInput = screen.getByLabelText(/date/i) || screen.getByRole("textbox", { name: /date/i });
+    fireEvent.change(dateInput, { target: { value: "2027-02-20" } });
+
+    await waitFor(() => {
+      expect(global.fetch).toHaveBeenCalledWith(
+        "/api/book/availability?date=2027-02-20",
+        expect.objectContaining({
+          headers: expect.objectContaining({ "X-Impersonation-Session-Id": "test-session-id" }),
+        })
+      );
+    });
+  });
+
+  it("re-fetches slots when date changes", async () => {
+    vi.mocked(global.fetch)
+      .mockResolvedValueOnce({
+        ok: true,
+        json: async () => ["9:00 AM"] as string[],
+      } as Response)
+      .mockResolvedValueOnce({
+        ok: true,
+        json: async () => ["11:00 AM", "1:00 PM"] as string[],
+      } as Response);
+
+    const { RescheduleFlow } = await import("../portal/sections/Appointments.tsx");
+    render(<RescheduleFlow appointment={RESCHEDULE_APPT} onClose={() => {}} sessionId="test-session-id" />);
+
+    const dateInput = screen.getByLabelText(/date/i) || screen.getByRole("textbox", { name: /date/i });
+
+    fireEvent.change(dateInput, { target: { value: "2027-01-10" } });
+    await waitFor(() => expect(screen.getByText("9:00 AM")).toBeInTheDocument());
+
+    fireEvent.change(dateInput, { target: { value: "2027-01-15" } });
+    await waitFor(() => {
+      expect(screen.getByText("11:00 AM")).toBeInTheDocument();
+      expect(screen.getByText("1:00 PM")).toBeInTheDocument();
+    });
+  });
+});

src/__tests__/BookingCancelled.test.tsx

@@ -1,27 +0,0 @@
-import { describe, it, expect } from "vitest";
-import { render, screen } from "@testing-library/react";
-import { BookingCancelledPage } from "../pages/BookingCancelled.tsx";
-
-describe("BookingCancelledPage", () => {
-  it("renders the cancelled heading", () => {
-    render(<BookingCancelledPage />);
-    expect(screen.getByRole("heading", { name: /Appointment Cancelled/i })).toBeInTheDocument();
-  });
-
-  it("renders the cancelled body text", () => {
-    render(<BookingCancelledPage />);
-    expect(screen.getByText(/Your appointment has been cancelled/i)).toBeInTheDocument();
-  });
-
-  it("has a Book again link pointing to /admin/book", () => {
-    render(<BookingCancelledPage />);
-    const link = screen.getByRole("link", { name: /Book again/i });
-    expect(link).toHaveAttribute("href", "/admin/book");
-  });
-
-  it("has a Back to Portal link pointing to /", () => {
-    render(<BookingCancelledPage />);
-    const link = screen.getByRole("link", { name: /Back to Portal/i });
-    expect(link).toHaveAttribute("href", "/");
-  });
-});

src/__tests__/BookingError.test.tsx

@@ -1,38 +0,0 @@
-import { describe, it, expect } from "vitest";
-import { render, screen } from "@testing-library/react";
-import { BookingErrorPage } from "../pages/BookingError.tsx";
-import { BUSINESS_CONTACT_INFO } from "../lib/contact.ts";
-
-describe("BookingErrorPage", () => {
-  it("renders the error heading", () => {
-    render(<BookingErrorPage />);
-    expect(screen.getByRole("heading", { name: /Link Invalid or Expired/i })).toBeInTheDocument();
-  });
-
-  it("renders the error body text", () => {
-    render(<BookingErrorPage />);
-    expect(screen.getByText(/This confirmation link is invalid/i)).toBeInTheDocument();
-  });
-
-  it("has a Start a new booking link pointing to /admin/book", () => {
-    render(<BookingErrorPage />);
-    const link = screen.getByRole("link", { name: /Start a new booking/i });
-    expect(link).toHaveAttribute("href", "/admin/book");
-  });
-
-  it("has a Back to Portal link pointing to /", () => {
-    render(<BookingErrorPage />);
-    const link = screen.getByRole("link", { name: /Back to Portal/i });
-    expect(link).toHaveAttribute("href", "/");
-  });
-
-  it("displays business contact phone", () => {
-    render(<BookingErrorPage />);
-    expect(screen.getByText(new RegExp(BUSINESS_CONTACT_INFO.phone.replace(/[()]/g, "\\$&")))).toBeInTheDocument();
-  });
-
-  it("displays business contact email", () => {
-    render(<BookingErrorPage />);
-    expect(screen.getByText(new RegExp(BUSINESS_CONTACT_INFO.email))).toBeInTheDocument();
-  });
-});

src/__tests__/analytics.test.ts

@@ -1,83 +0,0 @@
-import { describe, it, expect, vi } from "vitest";
-import { ANALYTICS_EVENTS, fireAnalyticsEvent } from "../lib/analytics";
-
-describe("analytics", () => {
-  describe("ANALYTICS_EVENTS constants", () => {
-    it("exports all required event names", () => {
-      expect(ANALYTICS_EVENTS.BOOKING_STEP_SERVICE).toBe("booking_step_service");
-      expect(ANALYTICS_EVENTS.BOOKING_STEP_TIME).toBe("booking_step_time");
-      expect(ANALYTICS_EVENTS.BOOKING_STEP_CONTACT).toBe("booking_step_contact");
-      expect(ANALYTICS_EVENTS.BOOKING_STEP_SUBMIT).toBe("booking_step_submit");
-      expect(ANALYTICS_EVENTS.BOOKING_CONFIRMED).toBe("booking_confirmed");
-      expect(ANALYTICS_EVENTS.BOOKING_ERROR).toBe("booking_error");
-    });
-
-    it("has no duplicate event names", () => {
-      const values = Object.values(ANALYTICS_EVENTS);
-      const unique = new Set(values);
-      expect(unique.size).toBe(values.length);
-    });
-  });
-
-  describe("fireAnalyticsEvent", () => {
-    it("dispatches a CustomEvent with the correct event name", () => {
-      const listener = vi.fn();
-      window.addEventListener(ANALYTICS_EVENTS.BOOKING_STEP_SERVICE, listener);
-      fireAnalyticsEvent(ANALYTICS_EVENTS.BOOKING_STEP_SERVICE, { step: "service", flow: "public" });
-      expect(listener).toHaveBeenCalledTimes(1);
-      const event = listener.mock.calls[0]![0] as CustomEvent;
-      expect(event.type).toBe("booking_step_service");
-      expect(event.detail.step).toBe("service");
-      expect(event.detail.flow).toBe("public");
-      expect(event.detail.timestamp).toBeDefined();
-      window.removeEventListener(ANALYTICS_EVENTS.BOOKING_STEP_SERVICE, listener);
-    });
-
-    it("includes a timestamp in the event detail", () => {
-      const listener = vi.fn();
-      window.addEventListener(ANALYTICS_EVENTS.BOOKING_CONFIRMED, listener);
-      fireAnalyticsEvent(ANALYTICS_EVENTS.BOOKING_CONFIRMED, { step: "confirmed", flow: "public" });
-      const event = listener.mock.calls[0]![0] as CustomEvent;
-      expect(event.detail.timestamp).toBeTruthy();
-      expect(new Date(event.detail.timestamp as string)).toBeInstanceOf(Date);
-      window.removeEventListener(ANALYTICS_EVENTS.BOOKING_CONFIRMED, listener);
-    });
-
-    it("does not throw when called with no payload", () => {
-      expect(() => {
-        fireAnalyticsEvent(ANALYTICS_EVENTS.BOOKING_ERROR, {});
-      }).not.toThrow();
-    });
-
-    it("does not throw when window.dispatchEvent throws", () => {
-      const original = window.dispatchEvent;
-      window.dispatchEvent = () => {
-        throw new Error("analytics blocked");
-      };
-      expect(() => {
-        fireAnalyticsEvent(ANALYTICS_EVENTS.BOOKING_STEP_SUBMIT, { step: "submit", flow: "public" });
-      }).not.toThrow();
-      window.dispatchEvent = original;
-    });
-
-    it("fires events for all event types", () => {
-      const events = Object.values(ANALYTICS_EVENTS);
-      for (const eventName of events) {
-        const listener = vi.fn();
-        window.addEventListener(eventName, listener);
-        fireAnalyticsEvent(eventName as typeof events[number], { step: "test", flow: "public" });
-        expect(listener).toHaveBeenCalledTimes(1);
-        window.removeEventListener(eventName, listener);
-      }
-    });
-
-    it("does not include PII in payload", () => {
-      // Payload only contains step, flow, and timestamp — no names, emails, or phones
-      const payload = { step: "contact", flow: "public" };
-      const keys = Object.keys(payload);
-      const piish = ["name", "email", "phone", "clientName", "clientEmail", "clientPhone", "petName"];
-      const hasPII = piish.some((k) => keys.includes(k));
-      expect(hasPII).toBe(false);
-    });
-  });
-});

src/index.css

@@ -8,19 +8,6 @@
   --color-accent-dark: color-mix(in srgb, var(--color-accent) 78%, #000);
   --color-accent-light: color-mix(in srgb, var(--color-accent) 18%, #fff);
   --color-accent-lighter: color-mix(in srgb, var(--color-accent) 9%, #fff);
-
-  /* Semantic / booking page tokens */
-  --color-error: #dc2626;
-  --color-error-dark: #b91c1c;
-  --color-error-bg: #fef2f2;
-  --color-cancelled: #ea580c;
-  --color-cancelled-dark: #c2410c;
-  --color-cancelled-bg: #fff7ed;
-  --color-success: #16a34a;
-  --color-success-dark: #15803d;
-  --color-success-bg: #f0fdf4;
-  --color-text-secondary: #4b5563;
-  --color-surface: #fff;
 }
 
 *, *::before, *::after {

src/lib/analytics.ts

@@ -1,40 +0,0 @@
-// Analytics event names — single source of truth
-export const ANALYTICS_EVENTS = {
-  BOOKING_STEP_SERVICE: "booking_step_service",
-  BOOKING_STEP_TIME: "booking_step_time",
-  BOOKING_STEP_CONTACT: "booking_step_contact",
-  BOOKING_STEP_SUBMIT: "booking_step_submit",
-  BOOKING_CONFIRMED: "booking_confirmed",
-  BOOKING_ERROR: "booking_error",
-} as const;
-
-export type AnalyticsEventName = (typeof ANALYTICS_EVENTS)[keyof typeof ANALYTICS_EVENTS];
-
-export type AnalyticsPayload = {
-  step?: string;
-  flow?: "public" | "portal";
-  [key: string]: string | undefined;
-};
-
-/**
- * Fires a lightweight analytics event via window.dispatchEvent.
- * No-op safe: failures are swallowed so analytics never breaks the booking flow.
- * Designed for later Plausible/GTM integration.
- */
-export function fireAnalyticsEvent(
-  eventName: AnalyticsEventName,
-  payload: AnalyticsPayload = {}
-): void {
-  try {
-    window.dispatchEvent(
-      new CustomEvent(eventName, {
-        detail: {
-          ...payload,
-          timestamp: new Date().toISOString(),
-        },
-      })
-    );
-  } catch {
-    // no-op: analytics must never break the booking flow
-  }
-}

src/lib/contact.ts

@@ -1,7 +0,0 @@
-// Business contact information — update values to reflect actual business details.
-// Used on error/cancellation pages to help customers reach the business.
-export const BUSINESS_CONTACT_INFO = {
-  phone: "(555) 000-1234",
-  email: "hello@groombook.example.com",
-  address: "123 Main St, Anytown, USA",
-} as const;

src/pages/Book.tsx

@@ -1,7 +1,6 @@
 import { useEffect, useState } from "react";
 import { useSearchParams } from "react-router-dom";
 import type { Service } from "@groombook/types";
-import { ANALYTICS_EVENTS, fireAnalyticsEvent } from "../lib/analytics";
 
 // ─── Types ───────────────────────────────────────────────────────────────────
 
@@ -194,14 +193,12 @@ export function BookPage() {
     setSelectedService(svc);
     setForm((f) => ({ ...f, serviceId: svc.id }));
     setStep(2);
-    fireAnalyticsEvent(ANALYTICS_EVENTS.BOOKING_STEP_SERVICE, { step: "service", flow: "public" });
   }
 
   function goToStep3() {
     if (!selectedSlot) return;
     setForm((f) => ({ ...f, startTime: selectedSlot }));
     setStep(3);
-    fireAnalyticsEvent(ANALYTICS_EVENTS.BOOKING_STEP_TIME, { step: "time", flow: "public" });
   }
 
   function goToStep4() {
@@ -211,7 +208,6 @@ export function BookPage() {
     }
     setFormError(null);
     setStep(4);
-    fireAnalyticsEvent(ANALYTICS_EVENTS.BOOKING_STEP_CONTACT, { step: "contact", flow: "public" });
   }
 
   async function submitBooking() {
@@ -240,7 +236,6 @@ export function BookPage() {
         throw new Error(body.error ?? `HTTP ${res.status}`);
       }
       const data = (await res.json()) as BookingResult;
-      fireAnalyticsEvent(ANALYTICS_EVENTS.BOOKING_STEP_SUBMIT, { step: "submit", flow: "public" });
       setResult(data);
       setStep(5);
     } catch (e: unknown) {

src/pages/BookingCancelled.tsx

@@ -1,10 +1,3 @@
-const STRINGS = {
-  heading: "Appointment Cancelled",
-  body: "Your appointment has been cancelled. If this was a mistake or you'd like to rebook, please contact us.",
-  bookAgain: "Book again",
-  backToPortal: "Back to Portal",
-} as const;
-
 export function BookingCancelledPage() {
   return (
     <div
@@ -14,12 +7,12 @@ export function BookingCancelledPage() {
         alignItems: "center",
         justifyContent: "center",
         fontFamily: "system-ui, sans-serif",
-        background: "var(--color-cancelled-bg)",
+        background: "#fff7ed",
       }}
     >
       <div
         style={{
-          background: "var(--color-surface)",
+          background: "#fff",
           borderRadius: 12,
           padding: "2.5rem 3rem",
           boxShadow: "0 4px 24px rgba(0,0,0,0.08)",
@@ -28,45 +21,28 @@ export function BookingCancelledPage() {
         }}
       >
         <div style={{ fontSize: 56, marginBottom: "0.5rem" }}>✗</div>
-        <h1 style={{ color: "var(--color-cancelled-dark)", fontSize: 24, margin: "0 0 0.5rem" }}>
+        <h1 style={{ color: "#c2410c", fontSize: 24, margin: "0 0 0.5rem" }}>
-          {STRINGS.heading}
+          Appointment Cancelled
         </h1>
-        <p style={{ color: "var(--color-text-secondary)", margin: "0 0 1.5rem" }}>
+        <p style={{ color: "#4b5563", margin: "0 0 1.5rem" }}>
-          {STRINGS.body}
+          Your appointment has been cancelled. If this was a mistake or you'd
+          like to rebook, please contact us.
         </p>
-
+        <a
-        <div style={{ display: "flex", flexDirection: "column", gap: "0.75rem", alignItems: "center" }}>
+          href="/"
-          <a
+          style={{
-            href="/admin/book"
+            display: "inline-block",
-            style={{
+            padding: "0.6rem 1.5rem",
-              display: "inline-block",
+            background: "#ea580c",
-              padding: "0.6rem 1.5rem",
+            color: "#fff",
-              background: "var(--color-primary)",
+            borderRadius: 6,
-              color: "#fff",
+            textDecoration: "none",
-              borderRadius: 6,
+            fontWeight: 600,
-              textDecoration: "none",
+            fontSize: 14,
-              fontWeight: 600,
+          }}
-              fontSize: 14,
+        >
-            }}
+          Back to Portal
-          >
+        </a>
-            {STRINGS.bookAgain}
-          </a>
-          <a
-            href="/"
-            style={{
-              display: "inline-block",
-              padding: "0.6rem 1.5rem",
-              background: "var(--color-cancelled)",
-              color: "#fff",
-              borderRadius: 6,
-              textDecoration: "none",
-              fontWeight: 600,
-              fontSize: 14,
-            }}
-          >
-            {STRINGS.backToPortal}
-          </a>
-        </div>
       </div>
     </div>
   );

src/pages/BookingConfirmed.tsx

@@ -1,11 +1,4 @@
-import { useEffect } from "react";
-import { ANALYTICS_EVENTS, fireAnalyticsEvent } from "../lib/analytics";
-
 export function BookingConfirmedPage() {
-  useEffect(() => {
-    fireAnalyticsEvent(ANALYTICS_EVENTS.BOOKING_CONFIRMED, { step: "confirmed", flow: "public" });
-  }, []);
-
   return (
     <div
       style={{

src/pages/BookingError.tsx

@@ -1,20 +1,4 @@
-import { useEffect } from "react";
-import { BUSINESS_CONTACT_INFO } from "../lib/contact";
-import { ANALYTICS_EVENTS, fireAnalyticsEvent } from "../lib/analytics";
-
-const STRINGS = {
-  heading: "Link Invalid or Expired",
-  body: "This confirmation link is invalid, has already been used, or your appointment has already passed. Please contact us if you need help.",
-  newBooking: "Start a new booking",
-  backToPortal: "Back to Portal",
-  contactLabel: "Need help?",
-} as const;
-
 export function BookingErrorPage() {
-  useEffect(() => {
-    fireAnalyticsEvent(ANALYTICS_EVENTS.BOOKING_ERROR, { step: "error", flow: "public" });
-  }, []);
-
   return (
     <div
       style={{
@@ -23,12 +7,12 @@ export function BookingErrorPage() {
         alignItems: "center",
         justifyContent: "center",
         fontFamily: "system-ui, sans-serif",
-        background: "var(--color-error-bg)",
+        background: "#fef2f2",
       }}
     >
       <div
         style={{
-          background: "var(--color-surface)",
+          background: "#fff",
           borderRadius: 12,
           padding: "2.5rem 3rem",
           boxShadow: "0 4px 24px rgba(0,0,0,0.08)",
@@ -37,52 +21,28 @@ export function BookingErrorPage() {
         }}
       >
         <div style={{ fontSize: 56, marginBottom: "0.5rem" }}>⚠️</div>
-        <h1 style={{ color: "var(--color-error-dark)", fontSize: 24, margin: "0 0 0.5rem" }}>
+        <h1 style={{ color: "#b91c1c", fontSize: 24, margin: "0 0 0.5rem" }}>
-          {STRINGS.heading}
+          Link Invalid or Expired
         </h1>
-        <p style={{ color: "var(--color-text-secondary)", margin: "0 0 1.5rem" }}>
+        <p style={{ color: "#4b5563", margin: "0 0 1.5rem" }}>
-          {STRINGS.body}
+          This confirmation link is invalid, has already been used, or your
+          appointment has already passed. Please contact us if you need help.
         </p>
-
+        <a
-        <div style={{ display: "flex", flexDirection: "column", gap: "0.75rem", alignItems: "center" }}>
+          href="/"
-          <a
+          style={{
-            href="/admin/book"
+            display: "inline-block",
-            style={{
+            padding: "0.6rem 1.5rem",
-              display: "inline-block",
+            background: "#dc2626",
-              padding: "0.6rem 1.5rem",
+            color: "#fff",
-              background: "var(--color-primary)",
+            borderRadius: 6,
-              color: "#fff",
+            textDecoration: "none",
-              borderRadius: 6,
+            fontWeight: 600,
-              textDecoration: "none",
+            fontSize: 14,
-              fontWeight: 600,
+          }}
-              fontSize: 14,
+        >
-            }}
+          Back to Portal
-          >
+        </a>
-            {STRINGS.newBooking}
-          </a>
-          <a
-            href="/"
-            style={{
-              display: "inline-block",
-              padding: "0.6rem 1.5rem",
-              background: "var(--color-error)",
-              color: "#fff",
-              borderRadius: 6,
-              textDecoration: "none",
-              fontWeight: 600,
-              fontSize: 14,
-            }}
-          >
-            {STRINGS.backToPortal}
-          </a>
-        </div>
-
-        <div style={{ marginTop: "1.5rem", paddingTop: "1rem", borderTop: "1px solid #e5e7eb", fontSize: 13, color: "var(--color-text-secondary)" }}>
-          <p style={{ margin: "0 0 0.25rem", fontWeight: 600 }}>{STRINGS.contactLabel}</p>
-          <p style={{ margin: 0 }}>
-            {BUSINESS_CONTACT_INFO.phone} · {BUSINESS_CONTACT_INFO.email}
-          </p>
-        </div>
       </div>
     </div>
   );

src/portal/sections/Appointments.tsx

@@ -1,6 +1,5 @@
 import React, { useState, useEffect } from 'react';
 import { Calendar, Clock, Plus, ChevronRight, ChevronDown, Loader2 } from 'lucide-react';
-import { ANALYTICS_EVENTS, fireAnalyticsEvent } from '../../lib/analytics';
 
 export interface Appointment {
   id: string;
@@ -574,16 +573,26 @@ export function RescheduleFlow({
   const [submitting, setSubmitting] = useState(false);
   const [error, setError] = useState<string | null>(null);
   const [success, setSuccess] = useState(false);
+  const [slotsLoading, setSlotsLoading] = useState(false);
+  const [slotsError, setSlotsError] = useState<string | null>(null);
+  const [availableTimes, setAvailableTimes] = useState<string[]>([]);
 
-  const availableTimes = [
+  useEffect(() => {
-    '9:00 AM',
+    if (!selectedDate || !sessionId) {
-    '10:00 AM',
+      setAvailableTimes([]);
-    '11:00 AM',
+      return;
-    '1:00 PM',
+    }
-    '2:00 PM',
+    const params = new URLSearchParams({ date: selectedDate });
-    '3:00 PM',
+    setSlotsLoading(true);
-    '4:00 PM',
+    setSlotsError(null);
-  ];
+    fetch(`/api/book/availability?${params.toString()}`, {
+      headers: { "X-Impersonation-Session-Id": sessionId ?? "" },
+    })
+      .then((r) => r.json() as Promise<string[]>)
+      .then(setAvailableTimes)
+      .catch(() => setSlotsError('Failed to load time slots'))
+      .finally(() => setSlotsLoading(false));
+  }, [selectedDate, sessionId]);
 
   async function handleSubmit() {
     if (!selectedDate || !selectedTime) return;
@@ -655,6 +664,7 @@ export function RescheduleFlow({
               <h3 className="font-medium text-stone-800 mb-3">Pick a New Date & Time</h3>
               <input
                 type="date"
+                aria-label="Select date"
                 value={selectedDate}
                 onChange={(e) => setSelectedDate(e.target.value)}
                 min={new Date().toISOString().split('T')[0]}
@@ -662,7 +672,12 @@ export function RescheduleFlow({
               />
               {selectedDate && (
                 <div className="grid grid-cols-3 gap-2 mb-4">
-                  {availableTimes.map((time) => (
+                  {slotsLoading && <p className="col-span-3 text-sm text-stone-500 py-2">Checking availability…</p>}
+                  {!slotsLoading && slotsError && <p className="col-span-3 text-sm text-red-500 py-2">{slotsError}</p>}
+                  {!slotsLoading && availableTimes.length === 0 && !slotsError && (
+                    <p className="col-span-3 text-sm text-stone-500 py-2">No available slots on this date.</p>
+                  )}
+                  {!slotsLoading && availableTimes.map((time) => (
                     <button
                       key={time}
                       onClick={() => setSelectedTime(time)}
@@ -721,24 +736,29 @@ function BookingFlow({ onClose, sessionId }: BookingFlowProps) {
   const [notes, setNotes] = useState('');
   const [recurring, setRecurring] = useState('');
   const [confirmed, setConfirmed] = useState(false);
-  useEffect(() => {
-    if (confirmed) {
-      fireAnalyticsEvent(ANALYTICS_EVENTS.BOOKING_CONFIRMED, { step: "confirmed", flow: "portal" });
-    }
-  }, [confirmed]);
   const [loading, setLoading] = useState(true);
   const [error, setError] = useState<string | null>(null);
   const [submitting, setSubmitting] = useState(false);
+  const [slotsLoading, setSlotsLoading] = useState(false);
+  const [slotsError, setSlotsError] = useState<string | null>(null);
+  const [availableTimes, setAvailableTimes] = useState<string[]>([]);
 
-  const availableTimes = [
+  useEffect(() => {
-    '9:00 AM',
+    if (!selectedDate || !sessionId) {
-    '10:00 AM',
+      setAvailableTimes([]);
-    '11:00 AM',
+      return;
-    '1:00 PM',
+    }
-    '2:00 PM',
+    const params = new URLSearchParams({ date: selectedDate });
-    '3:00 PM',
+    setSlotsLoading(true);
-    '4:00 PM',
+    setSlotsError(null);
-  ];
+    fetch(`/api/book/availability?${params.toString()}`, {
+      headers: { "X-Impersonation-Session-Id": sessionId ?? "" },
+    })
+      .then((r) => r.json() as Promise<string[]>)
+      .then(setAvailableTimes)
+      .catch(() => setSlotsError('Failed to load time slots'))
+      .finally(() => setSlotsLoading(false));
+  }, [selectedDate, sessionId]);
 
   useEffect(() => {
     const fetchData = async () => {
@@ -807,7 +827,6 @@ function BookingFlow({ onClose, sessionId }: BookingFlowProps) {
 
       if (response.ok) {
         setConfirmed(true);
-        fireAnalyticsEvent(ANALYTICS_EVENTS.BOOKING_STEP_SUBMIT, { step: "submit", flow: "portal" });
         setTimeout(() => {
           window.location.reload();
         }, 1500);
@@ -883,7 +902,6 @@ function BookingFlow({ onClose, sessionId }: BookingFlowProps) {
                         onClick={() => {
                           setSelectedPet(pet);
                           setStep(2);
-                          fireAnalyticsEvent(ANALYTICS_EVENTS.BOOKING_STEP_SERVICE, { step: "service", flow: "portal" });
                         }}
                         className={`w-full flex items-center gap-3 p-3 rounded-xl border text-left transition-colors ${
                           selectedPet?.id === pet.id
@@ -1042,10 +1060,7 @@ function BookingFlow({ onClose, sessionId }: BookingFlowProps) {
                       Back
                     </button>
                     <button
-                      onClick={() => {
+                      onClick={() => setStep(4)}
-                        setStep(4);
-                        fireAnalyticsEvent(ANALYTICS_EVENTS.BOOKING_STEP_CONTACT, { step: "groomer", flow: "portal" });
-                      }}
                       className="flex-1 px-4 py-2 bg-blue-600 text-white rounded-lg text-sm font-medium"
                     >
                       Next
@@ -1059,6 +1074,7 @@ function BookingFlow({ onClose, sessionId }: BookingFlowProps) {
                   <h3 className="font-medium text-stone-800 mb-3">Pick Date & Time</h3>
                   <input
                     type="date"
+                    aria-label="Select date"
                     value={selectedDate}
                     onChange={(e) => setSelectedDate(e.target.value)}
                     min={new Date().toISOString().split('T')[0]}
@@ -1066,7 +1082,12 @@ function BookingFlow({ onClose, sessionId }: BookingFlowProps) {
                   />
                   {selectedDate && (
                     <div className="grid grid-cols-3 gap-2 mb-4">
-                      {availableTimes.map((time) => (
+                      {slotsLoading && <p className="col-span-3 text-sm text-stone-500 py-2">Checking availability…</p>}
+                      {!slotsLoading && slotsError && <p className="col-span-3 text-sm text-red-500 py-2">{slotsError}</p>}
+                      {!slotsLoading && availableTimes.length === 0 && !slotsError && (
+                        <p className="col-span-3 text-sm text-stone-500 py-2">No available slots on this date.</p>
+                      )}
+                      {!slotsLoading && availableTimes.map((time) => (
                         <button
                           key={time}
                           onClick={() => setSelectedTime(time)}
@@ -1104,10 +1125,7 @@ function BookingFlow({ onClose, sessionId }: BookingFlowProps) {
                       Back
                     </button>
                     <button
-                      onClick={() => {
+                      onClick={() => setStep(5)}
-                        setStep(5);
-                        fireAnalyticsEvent(ANALYTICS_EVENTS.BOOKING_STEP_TIME, { step: "time", flow: "portal" });
-                      }}
                       disabled={!selectedDate || !selectedTime}
                       className="flex-1 px-4 py-2 bg-blue-600 text-white rounded-lg text-sm font-medium disabled:opacity-50"
                     >