Phase 4

Seed data extended with a second barber (different hours/services), a beard-trim service + category, breaks, time off, a guest customer, and appointments in all three key states — verified against a live throwaway Postgres.
14 new integration tests (38 total with Phase 3's) covering guest/authenticated booking, any-barber assignment, slot-conflict handling, ownership enforcement, guest-data isolation, and book-again repricing.
Playwright E2E suite for the 6 required customer journeys, with its own global-setup.ts that migrates and seeds a database automatically.
Full verification pass, which caught and fixed three real bugs along the way (not just test-workarounds):
A date off-by-one bug in the calendar picker that made real weekdays show as closed for anyone in a UTC+ timezone (including the business's own).
A dialog that could vanish mid-confirmation on cancellation, before the customer could read the late-cancellation notice.
A silent test-cleanup leak in the Phase 3 fixtures that had been leaking stray businesses since Phase 3.
Plus a baseline desktop-responsive fix (centered max-w-2xl columns) across Home/Appointments/Settings/booking flow, since desktop had been effectively unstyled.
Final state: 90 unit tests, 38 integration tests, and all 6 E2E journeys passing together on a fresh database; clean tsc, eslint, and next build. Full writeup with routes, security model, guest-matching rules, known limitations, and what to check before Phase 5 is in docs/phase-4-summary.md.

src/features/booking/schemas.ts

@@ -50,7 +50,7 @@ export const rescheduleBookingSchema = z.object({
 
 export const cancelBookingSchema = z.object({
   appointmentId: z.string(),
-  cancelledByUserId: z.string(),
+  cancelledByUserId: z.string().optional(),
   reason: z.string().optional(),
 });
 
@@ -58,3 +58,42 @@ export const updateBookingNotesSchema = z.object({
   appointmentId: z.string(),
   notes: z.string().max(2000),
 });
+
+// ── Customer booking-flow draft steps ────────────────────────────────────
+
+export const saveServicesStepSchema = z.object({
+  businessId: z.string(),
+  serviceIds: z.array(z.string()).min(1, "Select at least one service"),
+});
+
+export const saveBarberTimeStepSchema = z.object({
+  businessId: z.string(),
+  staffId: z.string().optional(),
+  date: z.string(),
+  startAt: z.iso.datetime(),
+});
+
+export const saveDetailsStepSchema = z.object({
+  businessId: z.string(),
+  firstName: z.string().trim().min(1, "First name is required").optional(),
+  lastName: z.string().trim().min(1, "Last name is required").optional(),
+  email: z.email("Enter a valid email address").optional(),
+  phone: z.string().trim().min(1, "Phone number is required").optional(),
+  notes: z.string().max(2000).optional(),
+  policyAcknowledged: z.boolean(),
+});
+
+export const startRebookSchema = z.object({
+  appointmentId: z.string(),
+});
+
+export const customerCancelSchema = z.object({
+  appointmentId: z.string(),
+  reason: z.string().max(500).optional(),
+});
+
+export const customerRescheduleSchema = z.object({
+  appointmentId: z.string(),
+  staffId: z.string().optional(),
+  startAt: z.iso.datetime(),
+});