From fe5d11754aa734746d13a1de8a9ee76bf0ca21cd Mon Sep 17 00:00:00 2001
From: Alex Dunmow <alex@alexdunmow.com>
Date: Wed, 8 Jul 2026 00:15:30 +0800
Subject: [PATCH] =?UTF-8?q?feat(editor):=20expose=20the=20captchaEnabled?=
 =?UTF-8?q?=20toggle=20=E2=80=94=20v2.0.5?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

The schema declares captchaEnabled (x-editor checkbox) but the custom
MF editor replaces schema-driven rendering and never drew a control for
it, so the captcha gate could not be enabled through the visual editor
at all. Add the switch beside Show Timezone. pnpm build-script approval
for esbuild (package.json onlyBuiltDependencies) so the editor bundle
rebuilds non-interactively.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
---
 plugin.mod       |  2 +-
 web/editor.tsx   | 14 ++++++++++++++
 web/package.json |  5 +++++
 3 files changed, 20 insertions(+), 1 deletion(-)

diff --git a/plugin.mod b/plugin.mod
index b2ff67b..d8a2da0 100644
--- a/plugin.mod
+++ b/plugin.mod
@@ -2,7 +2,7 @@
 name = "calcomblock"
 display_name = "Cal.com Booking"
 scope = "@ninja"
-version = "2.0.4"
+version = "2.0.5"
 description = "Embeddable Cal.com booking calendar block with custom styling, timezone-aware slot windowing, honeypot + captcha + rate-limited public booking endpoints, and webhook receiver."
 kind = "plugin"
 categories = ["forms"]
diff --git a/web/editor.tsx b/web/editor.tsx
index 83b7ac0..dd15e4e 100644
--- a/web/editor.tsx
+++ b/web/editor.tsx
@@ -318,6 +318,20 @@ function CalcomBlockEditor({ content, onChange }: BlockEditorProps) {
 									aria-label={t("calcom.editor.showTimezone.label", "Show Timezone Selector")}
 								/>
 							</div>
+
+							<div className="flex items-center justify-between rounded-lg border p-3">
+								<div className="space-y-0.5">
+									<Label>{t("calcom.editor.captchaEnabled.label", "Enable captcha")}</Label>
+									<p className="text-xs text-muted-foreground">
+										{t("calcom.editor.captchaEnabled.help", "Require visitors to solve a privacy-friendly proof-of-work captcha before booking (spam protection).")}
+									</p>
+								</div>
+								<Switch
+									checked={getBool("captchaEnabled", false)}
+									onCheckedChange={(v) => handleFieldChange("captchaEnabled", v)}
+									aria-label={t("calcom.editor.captchaEnabled.label", "Enable captcha")}
+								/>
+							</div>
 						</CardContent>
 					</Card>
 
diff --git a/web/package.json b/web/package.json
index d207913..02d0282 100644
--- a/web/package.json
+++ b/web/package.json
@@ -18,5 +18,10 @@
 		"react-dom": "^18.3.1",
 		"typescript": "^5.9.3",
 		"vite": "^6.4.1"
+	},
+	"pnpm": {
+		"onlyBuiltDependencies": [
+			"esbuild"
+		]
 	}
 }