feat(portal,sanity): support multiple guests per booking

A booking can now list every guest appearing on an episode in `guests[]`.
Each guest signs in with their own email, edits only their own speaker
profile, and signs their own media release; the host can view and edit any
guest's profile but cannot sign on a guest's behalf. Single-guest bookings
without `guests[]` behave exactly as before.

- booking schema: `guests[]` with name, email, profile link, and per-guest
  release signature/consents
- portal-guests: resolve the guest list (legacy single-guest fallback)
- access list includes every guest email
- sign-release / guest-profile: act on the signed-in guest's entry; the
  first guest is mirrored to the top-level release fields for the ops app
- guest-profile: only the host may target an arbitrary guestSlug
- portal page: "Guests on This Episode" roster with profile/release status
- fix biome lint/format errors already on main so CI passes

Co-authored-by: Cursor <cursoragent@cursor.com>

Author: codercatdev

apps/sanity/schemas/documents/booking.ts

@@ -19,6 +19,74 @@ export default defineType({
       type: 'string',
       validation: (Rule) => Rule.required().email(),
     }),
+    defineField({
+      name: 'guests',
+      title: 'Guests on This Episode',
+      description:
+        'Everyone appearing on the episode. Each guest signs in with their own email, edits their own speaker profile, and signs their own media release. Leave empty for a single-guest booking (Guest Full Legal Name / Guest Email are used).',
+      type: 'array',
+      of: [
+        {
+          type: 'object',
+          name: 'bookingGuest',
+          fields: [
+            defineField({
+              name: 'name',
+              title: 'Full Legal Name',
+              type: 'string',
+              validation: (Rule) => Rule.required(),
+            }),
+            defineField({
+              name: 'email',
+              title: 'Email',
+              type: 'string',
+              validation: (Rule) => Rule.required().email(),
+            }),
+            defineField({name: 'guestSlug', title: 'Linked Guest Slug', type: 'string'}),
+            defineField({name: 'guestDocId', title: 'Linked Guest Document ID', type: 'string'}),
+            defineField({
+              name: 'signatureMode',
+              title: 'E-SIGN Signature Mode',
+              type: 'string',
+              options: {
+                list: [
+                  {title: 'Drawn Canvas Signature', value: 'draw'},
+                  {title: 'Typed Legal Signature', value: 'type'},
+                ],
+              },
+            }),
+            defineField({
+              name: 'signatureData',
+              title: 'E-SIGN Signature Data (Typed Name or Base64 PNG)',
+              type: 'text',
+            }),
+            defineField({name: 'signedAt', title: 'E-SIGN Executed At', type: 'datetime'}),
+            defineField({
+              name: 'consentRecording',
+              title: 'Consent: Recording & Distribution',
+              type: 'boolean',
+            }),
+            defineField({
+              name: 'consentCommercial',
+              title: 'Consent: Commercial & Sponsorship Use',
+              type: 'boolean',
+            }),
+            defineField({
+              name: 'consentLikeness',
+              title: 'Consent: Likeness & Social Clips',
+              type: 'boolean',
+            }),
+          ],
+          preview: {
+            select: {title: 'name', subtitle: 'email', signedAt: 'signedAt'},
+            prepare: ({title, subtitle, signedAt}) => ({
+              title,
+              subtitle: `${subtitle || ''}${signedAt ? ' · release signed' : ' · release pending'}`,
+            }),
+          },
+        },
+      ],
+    }),
     defineField({
       name: 'company',
       title: 'Company / Flagship Project',

apps/site/src/lib/og-utils.ts

@@ -571,10 +571,7 @@ function mascotShowcaseElement({
  * - Massive readable typography, large cover artwork (440x248) or 210px mascot medallion.
  * - Top full-bleed gradient accent stripe.
  */
-function cardShell(
-	accentBarGradient: string,
-	content: any,
-) {
+function cardShell(accentBarGradient: string, content: any) {
 	return h(
 		"div",
 		{

apps/site/src/lib/portal-guests.ts

@@ -0,0 +1,75 @@
+/**
+ * A person appearing on an episode. Multi-guest bookings store these in
+ * `booking.guests[]`; older single-guest bookings keep one guest in the
+ * top-level `guestName` / `guestEmail` / `signature*` fields, which
+ * `resolvePortalGuests` maps to a single entry with `_key: "primary"`.
+ */
+export interface PortalGuest {
+	_key: string;
+	name: string;
+	email: string;
+	guestSlug?: string;
+	guestDocId?: string;
+	signatureMode?: string;
+	signatureData?: string;
+	signedAt?: string;
+}
+
+export const PRIMARY_GUEST_KEY = "primary";
+
+export function hasGuestList(
+	booking: Record<string, any> | null | undefined,
+): boolean {
+	return Array.isArray(booking?.guests) && booking.guests.length > 0;
+}
+
+export function resolvePortalGuests(
+	booking: Record<string, any> | null | undefined,
+	lead?: Record<string, any> | null,
+): PortalGuest[] {
+	if (hasGuestList(booking)) {
+		return (booking?.guests as Array<Record<string, any>>)
+			.filter((g) => g?._key && g?.email)
+			.map((g) => ({
+				_key: g._key,
+				name: g.name || g.email,
+				email: String(g.email).trim().toLowerCase(),
+				guestSlug: g.guestSlug,
+				guestDocId: g.guestDocId,
+				signatureMode: g.signatureMode,
+				signatureData: g.signatureData,
+				signedAt: g.signedAt,
+			}));
+	}
+
+	const email = (booking?.guestEmail || lead?.contactEmail || "")
+		.trim()
+		.toLowerCase();
+	const name = booking?.guestName || lead?.contactName || "";
+	if (!email && !name) {
+		return [];
+	}
+	return [
+		{
+			_key: PRIMARY_GUEST_KEY,
+			name: name || email,
+			email,
+			guestSlug: booking?.guestSlug || lead?.guestSlug,
+			guestDocId: booking?.guestDocId || lead?.guestDocId,
+			signatureMode: booking?.signatureMode,
+			signatureData: booking?.signatureData,
+			signedAt: booking?.signedAt,
+		},
+	];
+}
+
+export function findGuestByEmail(
+	guests: PortalGuest[],
+	email?: string | null,
+): PortalGuest | undefined {
+	const clean = (email || "").trim().toLowerCase();
+	if (!clean) {
+		return undefined;
+	}
+	return guests.find((g) => g.email === clean);
+}

apps/site/src/lib/portal-security.ts

@@ -109,6 +109,9 @@ export function extractPortalAllowedEmails(
 			doc.coordinatorEmail,
 			...(Array.isArray(doc.coordinatorEmails) ? doc.coordinatorEmails : []),
 			...(Array.isArray(doc.allowedEmails) ? doc.allowedEmails : []),
+			...(Array.isArray(doc.guests)
+				? doc.guests.map((g: { email?: string }) => g?.email)
+				: []),
 		];
 		for (const item of rawStrings) {
 			if (typeof item !== "string") {
@@ -125,6 +128,10 @@ export function extractPortalAllowedEmails(
 	return Array.from(out);
 }
 
+export function isHostEmail(email?: string | null): boolean {
+	return HOST_ADMIN_EMAILS.has((email || "").trim().toLowerCase());
+}
+
 /**
  * Checks whether an authenticated Better-Auth user's email is authorized to unlock
  * a specific Studio Portal (exact guest/sponsor email, coordinator email, same non-public