Internal vs client visibility
Workspace members see the combined dashboard with privacy rules applied — private Google events as busy blocks, approved bookings in full.
Clients see only what the share link allows: Public calendars with details, Private calendars as busy, hidden events omitted entirely.
Roles that exist today
Owner — connects Google, hides events, manages team, full permissions.
Assistant — invited with toggles for share links, availability, booking approval. Cannot connect Google or delete share links (owner-only delete in current RLS).
Operational rhythm
Pending bookings surface in the Bookings panel. Whoever has Approve bookings clears the queue. Confirmation emails go to clients automatically on approval — no manual "you're confirmed" email unless you want to add one.