@things-factory/ai-assistant 10.1.47 → 10.1.52

package/server/service/chat-session-resolver.ts

@@ -14,13 +14,15 @@ import { In } from 'typeorm'
 
 import { ChatSession } from './chat-session/chat-session.js'
 import { anchorColumns, anchorWhere } from './chat-session/session-anchor.js'
-import { buildInbox, applyHidden, activityPatch, searchInbox, INBOX_SCAN_CAP } from './chat-session/session-inbox.js'
+import { buildInbox, applyHidden, activityPatch, searchInbox, filterInbox, INBOX_SCAN_CAP, type InboxFilter } from './chat-session/session-inbox.js'
 import { carriedOriginalWhere, planCarriedTurns, quoteCarriedAnswer } from './chat-message/carried-turns.js'
 import { roomMessageBody } from './chat-message/room-message.js'
 import { readerGate } from './chat-message/reader-gate.js'
 import { initialVisibility, mayReadSession, SESSION_VISIBILITIES } from './chat-session/session-visibility.js'
 import { inviteMentionedUsers } from './chat-session-participant/mention-invite.js'
 import { buildInviteNotification } from './chat-session-participant/invite-notification.js'
+import { isSessionParticipant } from './chat-session-participant/participant-lookup.js'
+import { assertMayWriteSession } from './chat-session/session-write-gate.js'
 
 /**
  * 초대 알림 — 발송은 호스트의 기전을 그대로 쓴다(중복 구현 금지).
@@ -28,9 +30,9 @@ import { buildInviteNotification } from './chat-session-participant/invite-notif
  * 알림이 안 가도 초대 자체는 이미 일어났다. 그래서 실패를 삼키되, 초대를 되돌리지는 않는다 —
  * 참여자 목록이 정본이고 알림은 그것을 알리는 편지다.
  */
-async function notifyInvited(context: any, invited: string[], inviter: any): Promise<void> {
+async function notifyInvited(context: any, invited: string[], inviter: any, sessionName?: string): Promise<void> {
   if (invited.length === 0) return
-  const payload = buildInviteNotification(invited, undefined, inviter)
+  const payload = buildInviteNotification(invited, undefined, inviter, sessionName)
   if (!payload) return
   try {
     await context.state?.notify?.(payload)
@@ -38,11 +40,27 @@ async function notifyInvited(context: any, invited: string[], inviter: any): Pro
     /* 편지가 못 갔다고 방에 들어온 사실이 취소되지는 않는다. */
   }
 }
+
+/** Every door that writes into a conversation passes this first (`session-write-gate.ts`). */
+async function writeGate(session: any, context: any, tx?: any): Promise<void> {
+  const { domain, user } = context.state
+  await assertMayWriteSession({
+    session,
+    userId: user?.id,
+    isParticipant: () => isSessionParticipant(domain.id, session.id, user?.id, tx),
+    t: (key, options) => (context.t ? context.t(key, options) : String(options?.defaultValue ?? key))
+  })
+}
 import { formatProposalOutcomeLine, PROPOSAL_VERDICTS, type ProposalOutcome } from './chat-message/proposal-outcome.js'
 import { publishSessionActivity } from './chat-session/session-activity-publish.js'
 import { ChatMessage } from './chat-message/chat-message.js'
 import { ChatSessionParticipant } from './chat-session-participant/chat-session-participant.js'
 import { publishChatMessage } from './chat-message/chat-message-publish.js'
+import GraphQLUpload from 'graphql-upload/GraphQLUpload.js'
+import type { FileUpload } from 'graphql-upload/GraphQLUpload.js'
+import { getAssistantMode } from './assistant-mode/registry.js'
+import { refuseAttachments, type AttachmentRefusal } from './chat-session/attachment-policy.js'
+import { removeAttachmentRows, saveChatAttachments } from './chat-session/session-attachments.js'
 
 @ObjectType({
   description:
@@ -95,6 +113,51 @@ class ChatSessionInboxEntry {
   /* 숨김은 나에게만 적용되고 되돌릴 수 있다 — 필터를 켠 사용자가 무엇이 숨겨진 것인지 알아야 한다. */
   @Field({ nullable: true, description: 'Whether this viewer hid the session from their own list (only returned when showHidden is on).' })
   hidden?: boolean
+
+  /* 목록이 공개 범위를 그리고, owner 만 그것을 바꾸는 단추를 받는다 — 판정은 setSessionVisibility 가 다시 한다. */
+  @Field({ description: "Who may read the session: 'open' (everyone in the domain) or 'private' (participants only)." })
+  visibility!: string
+
+  @Field({ description: 'Whether this viewer is the owner of the session - only the owner may change its visibility.' })
+  owner!: boolean
+}
+
+@ObjectType({ description: 'A file stored with a conversation - opened only through the conversation.' })
+export class ChatAttachmentInfo {
+  @Field(type => ID, { description: 'Attachment id.' })
+  id!: string
+
+  @Field({ description: 'File name.' })
+  name!: string
+
+  @Field({ description: 'MIME type.' })
+  mimetype!: string
+
+  @Field(type => Int, { description: 'Size in bytes.' })
+  size!: number
+}
+
+/** A refusal said in the reader's words - code first, the sentence from it (ADR-0054). */
+function attachmentRefusalMessage(refusal: AttachmentRefusal, context: any): string {
+  const t = (key: string, options: any) => (context.t ? context.t(key, options) : String(options?.defaultValue ?? key))
+  switch (refusal.code) {
+    case 'attachments-not-accepted':
+      return t('ai-assistant.text.attachments-not-accepted', { defaultValue: 'this conversation does not take attachments.' })
+    case 'attachment-kind-not-accepted':
+      return t('ai-assistant.text.attachment-kind-not-accepted', {
+        name: refusal.name,
+        kinds: refusal.kinds.join(', '),
+        defaultValue: '{name} cannot be attached here - this conversation takes {kinds}.'
+      })
+    case 'attachment-too-large':
+      return t('ai-assistant.text.attachment-too-large', {
+        name: refusal.name,
+        max: Math.round(refusal.maxBytes / 1024 / 1024),
+        defaultValue: '{name} is larger than {max} MB.'
+      })
+    case 'too-many-attachments':
+      return t('ai-assistant.text.too-many-attachments', { max: refusal.maxFiles, defaultValue: 'at most {max} files can be sent at once.' })
+  }
 }
 
 @Resolver()
@@ -146,9 +209,16 @@ export class ChatSessionResolver {
     @Arg('search', { nullable: true }) search?: string,
     @Arg('mineOnly', { nullable: true }) mineOnly?: boolean,
     @Arg('limit', () => Int, { nullable: true }) limit?: number,
-    @Arg('offset', () => Int, { nullable: true }) offset?: number
+    @Arg('offset', () => Int, { nullable: true }) offset?: number,
+    /* The manager's filters (shared dock §2-6) - the total takes the same, or "show more" miscounts. */
+    @Arg('kind', { nullable: true, description: 'Only this conversation kind (mode).' }) kind?: string,
+    @Arg('participantOnly', { nullable: true, description: 'Only conversations the caller is in.' }) participantOnly?: boolean,
+    @Arg('visibility', { nullable: true, description: "Only 'open' or only 'private'." }) visibility?: string,
+    @Arg('unreadOnly', { nullable: true, description: 'Only conversations with unread activity.' }) unreadOnly?: boolean
   ): Promise<ChatSessionInboxEntry[]> {
-    const filtered = await this._inboxFiltered(anchorType, anchorId, context, { showHidden, search, mineOnly })
+    const filtered = await this._inboxFiltered(anchorType, anchorId, context, {
+      showHidden, search, mineOnly, kind, participantOnly, visibility, unreadOnly
+    })
     const from = Math.max(0, offset ?? 0)
     const size = Math.min(Math.max(1, limit ?? 50), 200)
     return filtered.slice(from, from + size) as any
@@ -171,9 +241,15 @@ export class ChatSessionResolver {
     @Ctx() context: ResolverContext,
     @Arg('showHidden', { nullable: true }) showHidden?: boolean,
     @Arg('search', { nullable: true }) search?: string,
-    @Arg('mineOnly', { nullable: true }) mineOnly?: boolean
+    @Arg('mineOnly', { nullable: true }) mineOnly?: boolean,
+    @Arg('kind', { nullable: true, description: 'Only this conversation kind (mode).' }) kind?: string,
+    @Arg('participantOnly', { nullable: true, description: 'Only conversations the caller is in.' }) participantOnly?: boolean,
+    @Arg('visibility', { nullable: true, description: "Only 'open' or only 'private'." }) visibility?: string,
+    @Arg('unreadOnly', { nullable: true, description: 'Only conversations with unread activity.' }) unreadOnly?: boolean
   ): Promise<number> {
-    return (await this._inboxFiltered(anchorType, anchorId, context, { showHidden, search, mineOnly })).length
+    return (
+      await this._inboxFiltered(anchorType, anchorId, context, { showHidden, search, mineOnly, kind, participantOnly, visibility, unreadOnly })
+    ).length
   }
 
   /** 필터 적용(페이지 전) — 목록·개수가 **같은 규칙**을 쓰도록 한 곳에 둔다(어긋나면 "더 보기" 가 거짓말이 된다). */
@@ -181,11 +257,11 @@ export class ChatSessionResolver {
     anchorType: string,
     anchorId: string,
     context: ResolverContext,
-    opts: { showHidden?: boolean; search?: string; mineOnly?: boolean }
+    opts: { showHidden?: boolean; search?: string } & InboxFilter
   ): Promise<ChatSessionInboxEntry[]> {
     const all = await this._inboxEntries(anchorType, anchorId, context)
     let entries = opts.showHidden ? all : all.filter(e => !e.hidden)
-    if (opts.mineOnly) entries = entries.filter(e => (e as any).mine)
+    entries = filterInbox(entries as any, opts) as any
     return searchInbox(entries as any, opts.search) as any
   }
 
@@ -520,10 +596,9 @@ export class ChatSessionResolver {
      * 참여자만. 여기서 막히는 것은 **방**이고, 방에 들어온 뒤 값을 읽는 일은 아래 문 판정이 따로 본다.
      */
     if ((session as any).visibility === 'private') {
-      const part = await getRepository(ChatSessionParticipant).findOne({
-        where: { session: { id: sessionId } as any, user: { id: user.id } as any, domain: { id: domain.id } as any }
-      })
-      if (!mayReadSession((session as any).visibility, !!part)) return []
+      /* A hide-only `viewer` row is not being in the room - it must not open a private conversation. */
+      const part = await isSessionParticipant(domain.id, sessionId, user?.id)
+      if (!mayReadSession((session as any).visibility, part)) return []
     }
 
     const rows = await getRepository(ChatMessage).find({
@@ -636,6 +711,8 @@ export class ChatSessionResolver {
     const repo = getRepository(ChatSession, tx)
     const session = await repo.findOneBy({ id: sessionId, domain: { id: domain.id } })
     if (!session) throw new Error(`ChatSession ${sessionId} not found`)
+    /* The board-era rename door had no gate at all - a private conversation's name was anyone's to change. */
+    await writeGate(session, context, tx)
     await repo.update(sessionId, { name: name.trim() || null, updater: user } as any)
     return true
   }
@@ -655,6 +732,7 @@ export class ChatSessionResolver {
     const { domain, user, tx } = context.state
     const session = await getRepository(ChatSession, tx).findOneBy({ id: sessionId, domain: { id: domain.id } })
     if (!session) throw new Error(`ChatSession ${sessionId} not found`)
+    await writeGate(session, context, tx)
 
     const key = (proposalKey ?? '').trim()
     if (!key) return false
@@ -689,6 +767,42 @@ export class ChatSessionResolver {
     return true
   }
 
+  /**
+   * Stores files with a conversation before the turn that carries them (design/ai/shared-dock.md §9).
+   * Passes the write gate - a private conversation takes files from its people only - and the mode's
+   * attachment policy. The size is known only once stored, so a file over the limit is removed and refused.
+   */
+  @Directive('@transaction')
+  @Mutation(() => [ChatAttachmentInfo], {
+    description:
+      "Store files with a conversation, to be sent with the next turn (assistantChat attachmentIds). Private conversations take files from their participants only; what is accepted is the conversation mode's attachment policy."
+  })
+  @Directive('@privilege(category: "ai-assistant", privilege: "mutation", domainOwnerGranted: true)')
+  async attachToConversation(
+    @Arg('sessionId') sessionId: string,
+    @Arg('files', () => [GraphQLUpload]) files: FileUpload[],
+    @Ctx() context: ResolverContext,
+    @Arg('kind', { nullable: true, description: 'The conversation kind, for a session not stamped with one yet.' }) kind?: string
+  ): Promise<ChatAttachmentInfo[]> {
+    const { domain, tx } = context.state
+    const session = await getRepository(ChatSession, tx).findOneBy({ id: sessionId, domain: { id: domain.id } })
+    if (!session) throw new Error(`ChatSession ${sessionId} not found`)
+    await writeGate(session, context, tx)
+
+    const policy = getAssistantMode((session as any).kind || kind || '')?.attachments
+    const uploads = await Promise.all(files)
+    const before = refuseAttachments(policy, uploads.map(upload => ({ name: upload.filename, type: upload.mimetype })))
+    if (before) throw new Error(attachmentRefusalMessage(before, context))
+
+    const saved = await saveChatAttachments(session.id!, uploads, context)
+    const after = refuseAttachments(policy, saved.map(file => ({ name: file.name, type: file.mimetype, size: file.size })))
+    if (after) {
+      await removeAttachmentRows(saved.map(file => file.id))
+      throw new Error(attachmentRefusalMessage(after, context))
+    }
+    return saved
+  }
+
   @Directive('@transaction')
   @Mutation(() => String, {
     nullable: true,
@@ -704,6 +818,7 @@ export class ChatSessionResolver {
     const { domain, user, tx } = context.state
     const session = await getRepository(ChatSession, tx).findOneBy({ id: sessionId, domain: { id: domain.id } })
     if (!session) throw new Error(`ChatSession ${sessionId} not found`)
+    await writeGate(session, context, tx)
 
     const body = roomMessageBody(content)
     if (!body) return null
@@ -772,6 +887,7 @@ export class ChatSessionResolver {
     const { domain, user, tx } = context.state
     const session = await getRepository(ChatSession, tx).findOneBy({ id: sessionId, domain: { id: domain.id } })
     if (!session) throw new Error(`ChatSession ${sessionId} not found`)
+    await writeGate(session, context, tx)
     /* 프롬프트가 한 기록으로 폭증하지 않도록 자른다 — 맥락 전달이 목적이고 전문 보존이 아니다. */
     const body = (content ?? '').trim().slice(0, 4000)
     if (!body) return false
@@ -822,6 +938,7 @@ export class ChatSessionResolver {
     const { domain, user, tx } = context.state
     const session = await getRepository(ChatSession, tx).findOneBy({ id: sessionId, domain: { id: domain.id } })
     if (!session) throw new Error(`ChatSession ${sessionId} not found`)
+    await writeGate(session, context, tx)
 
     /* 옮겨온 대화는 **그 대화의 발언 그대로** 들어간다 — 한 덩어리 기록으로 뭉치면 사람이 읽을 수 없고
      * (화면 하나를 잡아먹는 이탤릭 덩어리), 마크다운도 죽는다. 대신 개수·길이는 제한한다: 맥락 전달이

package/server/service/index.ts

@@ -7,6 +7,9 @@ import { ChatMessageSubscription } from './chat-message/chat-message-subscriptio
 import { entities as ChatSessionEntities } from './chat-session/index.js'
 import { entities as ChatMessageEntities } from './chat-message/index.js'
 import { entities as ChatSessionParticipantEntities } from './chat-session-participant/index.js'
+import './chat-session/attachment-tools.js'
+import './chat-session/session-purge.js'
+import './chat-session/attachment-route.js'
 
 export * from './types.js'
 export * from './chat-session-resolver.js'
@@ -29,6 +32,8 @@ export * from './chat-session/session-visibility.js'
 export * from './chat-session/index.js'
 /* 순수 로직들 — 호스트(board-ai 등)가 같은 규칙을 쓰라고 공개한다. 베끼면 한쪽만 고쳐진다. */
 export * from './chat-session/session-inbox.js'
+export * from './chat-session/attachment-policy.js'
+export * from './chat-session/session-purge.js'
 export * from './chat-session/session-activity-publish.js'
 export * from './chat-session/session-activity-broadcast.js'
 export * from './chat-message/llm-history.js'

package/test/assistant-dock.test.ts

@@ -0,0 +1,124 @@
+/*
+ * The shared AI dock's contract (design/ai/shared-dock.md §8) - checked once here instead of in every app.
+ * The dock is read as text: importing it would pull the shell and i18n, which the runner cannot load.
+ */
+import assert from 'node:assert/strict'
+import { readFileSync } from 'node:fs'
+import { join } from 'node:path'
+
+import { runProposal, registerProposalHandler } from '../client/utils/assistant-proposals'
+
+const read = (file: string) => readFileSync(join(__dirname, file), 'utf8')
+const code = (file: string) => read(file).replace(/\/\*[\s\S]*?\*\//g, '').replace(/^\s*\/\/.*$/gm, '')
+const dock = code('../client/components/assistant-dock.ts')
+/* Not comment-stripped: the chat has strings like 'image/*' that a comment regex would eat. */
+const chat = read('../client/components/assistant-chat.ts')
+
+describe('no empty panel', () => {
+  it('not configured, unreadable, no surface and a stuck anchor are each said', () => {
+    for (const key of ['not-configured', 'capability-unknown', 'no-surface']) assert.match(dock, new RegExp(`t\\('${key}'`))
+    assert.match(dock, /if \(anchor && !isAnchor\(anchor\)\) return anchor\.message/)
+    assert.match(dock, /readAiCapability\(\)/)
+  })
+
+  it('an unreadable capability offers a retry', () => {
+    assert.match(dock, /this\.capability === 'unknown'\s*\?\s*html`<div><button class="sbtn" @click=\$\{\(\) => this\.open\(\)\}>/)
+  })
+})
+
+describe('the dock opens on every screen', () => {
+  it('it stays on editors that bleed wide - the board modeller hides the aside bar', () => {
+    assert.match(code('../client/setup-assistant-dock.ts'), /persistent: true/)
+  })
+})
+
+describe('every request the chat makes is taken', () => {
+  it('new conversation, mode change and proposal execute', () => {
+    assert.match(dock, /addEventListener\('assistant-start-new-session'/)
+    assert.match(dock, /@assistant-mode-change=\$\{this\.onModeChange\}/)
+    assert.match(dock, /@assistant-proposal-execute=\$\{this\.onProposal\}/)
+  })
+
+  it('a board surface gets the scene edits, reverts and actions', () => {
+    for (const event of ['scene-edit-patch', 'board-edit-revert', 'scene-action-execute']) assert.match(dock, new RegExp(`@${event}=`))
+  })
+
+  it('the toolbar opens the manager, and the manager asks with the same events', () => {
+    assert.match(dock, /historyEnabled/)
+    assert.match(dock, /@assistant-session-history=/)
+    assert.match(dock, /<ox-assistant-session-manager/)
+  })
+})
+
+describe('every proposal ends in one reported outcome', () => {
+  it('the dock reports whatever the handler returned', () => {
+    assert.match(dock, /const outcome = await runProposal\(proposal, this\.proposalContext\(sessionId\)\)[\s\S]*await this\.report\(sessionId, proposalKey, outcome\)/)
+  })
+
+  it('a kind nobody handles is unavailable, by name', async () => {
+    const outcome = await runProposal({ tool: 'proposeNothingKnown' }, {} as any)
+    assert.deepEqual(outcome, { verdict: 'unavailable', errorCode: 'unknown-proposal-kind' })
+  })
+
+  it('a handler that throws is refused with its message, never a silent pass', async () => {
+    registerProposalHandler('proposeThrows', async () => {
+      throw new Error('kernel-refused')
+    })
+    assert.deepEqual(await runProposal({ tool: 'proposeThrows' }, {} as any), { verdict: 'refused', errorCode: 'kernel-refused' })
+  })
+
+  it('a handler that answers nothing is not taken as done', async () => {
+    registerProposalHandler('proposeSilent', async () => undefined as any)
+    assert.deepEqual(await runProposal({ tool: 'proposeSilent' }, {} as any), { verdict: 'unavailable', errorCode: 'no-outcome' })
+  })
+
+  it('a handler that asks the person uses the platform confirm', () => {
+    assert.match(dock, /OxPrompt\.open\(/)
+  })
+})
+
+describe('sessions', () => {
+  it('the key carries the conversation kind', () => {
+    assert.match(dock, /scope: JSON\.stringify\(\[this\.app\.contextPath, userId, this\.kind\]\)/)
+  })
+
+  it('a picked conversation of another kind is followed, not refused', () => {
+    assert.match(dock, /followPickedConversation\(pickedKind, this\.kind\)/)
+  })
+})
+
+describe('the screen is checked at send time', () => {
+  it('a send after the screen moved on is refused', () => {
+    assert.match(dock, /if \(openedFor !== this\.scopeKey\(currentAssistantSurface\(\) \?\? surface\)\) throw new Error/)
+  })
+
+  it('the draft is read at send time, never cached', () => {
+    assert.match(dock, /return \{ hostContext: surface\?\.hostContext\?\.\(\) \?\? \{\} \}/)
+  })
+})
+
+describe('the dock knows no application', () => {
+  it('no app names and no proposal kinds in the dock', () => {
+    assert.doesNotMatch(dock, /\b(twin|plant|figure|warehouse|ecs|operato-[a-z]+)\b/i)
+    assert.doesNotMatch(dock, /'propose[A-Z]\w*'/)
+  })
+})
+
+describe('attachments in the chat follow the mode', () => {
+  it('no attach button when the mode declares nothing (the board door keeps its images)', () => {
+    assert.match(chat, /this\.acceptsAttachments\s*\?\s*html`<button/)
+    assert.match(chat, /return !this\.usesAttachmentPolicy \|\| !!this\.modeView\?\.attachments\?\.kinds\?\.length/)
+  })
+
+  it('said before sending, then uploaded to the conversation and sent by id', () => {
+    assert.match(chat, /refuseAttachments\(this\.modeView\?\.attachments/)
+    assert.match(chat, /mutation: ATTACH_TO_CONVERSATION_MUTATION/)
+    /* Without it the client sends the File as {} and the server refuses the upload (found on :3700, 2026-09-25). */
+    assert.match(chat, /context: \{ hasUpload: true \}/)
+    assert.match(chat, /attachmentIds\s*\n\s*\}\)/)
+  })
+
+  it('a stored file opens through the conversation route', () => {
+    assert.match(chat, /chatAttachmentUrl\(this\.sessionId, att\.id\)/)
+  })
+})

package/test/assistant-session-manager.test.ts

@@ -0,0 +1,126 @@
+/*
+ * The conversation manager - one list every dock opens (`<ox-assistant-session-manager>`).
+ *
+ * It was written once inside operato-twin's dock, and plant, figure, warehouse and ecs had only tabs.
+ * These pin what moved here: who may do what, that nothing irreversible happens without the row
+ * asking, that opening and starting stay the host's, and that every word exists in every locale.
+ */
+import assert from 'node:assert/strict'
+import { readFileSync } from 'node:fs'
+import { join } from 'node:path'
+
+import { sessionActions } from '../client/utils/assistant-session-actions.ts'
+
+const read = (file: string) => readFileSync(join(__dirname, file), 'utf8')
+const manager = read('../client/components/assistant-session-manager.ts')
+const admin = read('../client/utils/assistant-session-admin.ts')
+
+describe('who may do what - the server hints, read in one place', () => {
+  it('only the creator is offered delete', () => {
+    assert.equal(sessionActions({ id: 'a', mine: true }).remove, true)
+    assert.equal(sessionActions({ id: 'a', mine: false }).remove, false)
+    assert.equal(sessionActions({ id: 'a' }).remove, false)
+  })
+
+  it('only the owner is offered private / public', () => {
+    assert.equal(sessionActions({ id: 'a', owner: true }).setVisibility, true)
+    assert.equal(sessionActions({ id: 'a', mine: true, owner: false }).setVisibility, false)
+  })
+
+  it('a hidden one offers unhide, a shown one hide - anyone, for their own list', () => {
+    assert.deepEqual(
+      [sessionActions({ id: 'a', hidden: true }).unhide, sessionActions({ id: 'a', hidden: true }).hide],
+      [true, false]
+    )
+    assert.deepEqual([sessionActions({ id: 'a' }).unhide, sessionActions({ id: 'a' }).hide], [false, true])
+  })
+
+  it('a non-participant is not offered rename - the server refuses it', () => {
+    assert.equal(sessionActions({ id: 'a', participant: false }).rename, false)
+    assert.equal(sessionActions({ id: 'a', participant: true }).rename, true)
+  })
+})
+
+describe('the doors are the framework ones, as they are', () => {
+  it('each operation goes through its own mutation', () => {
+    for (const door of ['chatSessionInbox', 'chatSessionInboxTotal', 'hiddenSessionCount', 'renameAISession', 'hideAISession', 'deleteAISession', 'setSessionVisibility']) {
+      assert.match(admin, new RegExp(door), door)
+    }
+  })
+
+  it('the list asks for visibility and owner, so a row can say private and offer the switch', () => {
+    assert.match(admin, /\bvisibility\b[\s\S]*\bowner\b|\bowner\b[\s\S]*\bvisibility\b/)
+  })
+
+  it('the element calls no door itself - it goes through the admin it was given', () => {
+    assert.doesNotMatch(manager, /client\.(mutate|query)|gql`/)
+  })
+})
+
+describe('nothing irreversible without asking', () => {
+  it('delete and making public ask first with the platform confirm; making private, hiding and renaming do not', () => {
+    assert.match(manager, /import \{ OxPrompt \} from '@operato\/popup'/)
+    assert.match(manager, /this\.askRemove\(entry, name\)/)
+    assert.match(manager, /this\.askOpen\(entry, name\)/)
+    assert.match(manager, /@click=\$\{\(\) => this\.setVisibility\(entry, 'private'\)\}/)
+  })
+
+  it('no browser dialog - they sit outside the theme', () => {
+    assert.doesNotMatch(manager, /\bconfirm\(|\balert\(|\bprompt\(/)
+  })
+
+  it('the confirm reads [Cancel][OK]', () => {
+    assert.match(manager, /cancelButton: \{ text: t\('cancel', 'Cancel'\) \}/)
+  })
+
+  it('a refusal or a failure is said, never passed silently', () => {
+    assert.match(manager, /if \(!\(await run\(\)\)\) this\.error = refused/)
+    assert.match(manager, /this\.error = \(error as Error\)\.message/)
+  })
+})
+
+describe('the filters (shared dock §2-6)', () => {
+  it('this kind by default, every kind on request; whose, visibility, unread, hidden', () => {
+    assert.match(manager, /kind: this\.allKinds \? '' : this\.kind/)
+    for (const filter of ['whose', 'visibility', 'includeHidden', 'unreadOnly']) assert.match(manager, new RegExp(`${filter}: this\\.${filter}`))
+  })
+
+  it('a changed filter starts from the first page', () => {
+    assert.match(manager, /private refilter\(change: \(\) => void\) \{\s*change\(\)\s*this\.pageSize = PAGE/)
+  })
+
+  it('picking a row says which kind it is, so the dock can follow it', () => {
+    assert.match(manager, /this\.emit\('assistant-session-select', \{ sessionId: entry\.id, kind: entry\.kind \}\)/)
+  })
+})
+
+describe('opening and starting stay the host\'s', () => {
+  it('the element asks with the toolbar\'s own events', () => {
+    assert.match(manager, /this\.emit\('assistant-session-select', \{ sessionId: entry\.id, kind: entry\.kind \}\)/)
+    assert.match(manager, /this\.emit\('assistant-session-reset'\)/)
+    assert.match(manager, /this\.emit\('assistant-session-changed', \{ sessionId: entry\.id, change \}\)/)
+    assert.match(manager, /bubbles: true, composed: true/)
+  })
+})
+
+describe('every word is in every locale', () => {
+  const keys = [...new Set([...manager.matchAll(/\bt\('([a-z-]+)'/g)].map(match => `ai-assistant.session.${match[1]}`))]
+
+  it('the parser finds the words', () => {
+    assert.ok(keys.length >= 20, `found only ${keys.length}`)
+  })
+
+  for (const locale of ['en', 'ko', 'ja', 'zh', 'ms']) {
+    it(locale, () => {
+      const dictionary = JSON.parse(read(`../translations/${locale}.json`))
+      assert.deepEqual(keys.filter(key => !dictionary[key]), [])
+    })
+  }
+})
+
+describe('rename takes the keys', () => {
+  it('the rename box is focused and selected when it opens - autofocus works once per document', () => {
+    assert.match(manager, /changed\.has\('renamingId'\) && this\.renamingId/)
+    assert.match(manager, /input\?\.focus\(\)/)
+  })
+})

package/test/attachment-policy-agree.test.ts

@@ -0,0 +1,32 @@
+/*
+ * The screen's copy of the attachment rule and the server's are one rule (design/ai/shared-dock.md §9-1):
+ * the screen says "no" before sending, the door refuses the same things. Both run over one table.
+ */
+import * as server from '../server/service/chat-session/attachment-policy'
+import * as screen from '../client/utils/attachment-policy'
+
+const policies = [undefined, { kinds: [] }, { kinds: ['image'] }, { kinds: ['image', 'text'], maxBytes: 100, maxFiles: 2 }] as any[]
+const fileSets = [
+  [],
+  [{ name: 'a.png', type: 'image/png', size: 10 }],
+  [{ name: 'a.csv', type: 'text/csv', size: 10 }],
+  [{ name: 'report.CSV', type: '', size: 10 }],
+  [{ name: 'a.pdf', type: 'application/pdf', size: 10 }],
+  [{ name: 'big.png', type: 'image/png', size: 101 }],
+  [{ name: 'a.png', type: 'image/png', size: 1 }, { name: 'b.png', type: 'image/png', size: 1 }, { name: 'c.png', type: 'image/png', size: 1 }]
+]
+
+describe('the screen and the door refuse the same things', () => {
+  for (const policy of policies) {
+    for (const files of fileSets) {
+      it(`${JSON.stringify(policy)} × ${files.map(f => f.name).join(',') || 'none'}`, () => {
+        expect(screen.refuseAttachments(policy, files)).toEqual(server.refuseAttachments(policy, files))
+      })
+    }
+  }
+
+  it('the same defaults', () => {
+    expect(screen.DEFAULT_MAX_BYTES).toBe(server.DEFAULT_MAX_BYTES)
+    expect(screen.DEFAULT_MAX_FILES).toBe(server.DEFAULT_MAX_FILES)
+  })
+})

package/test/open-doors.test.ts

@@ -138,11 +138,14 @@ describe('what the walk itself has to be true for', () => {
   })
 
   it('the census, in plain numbers', () => {
-    /* 2026-09-24: 27 root fields, 25 declared, 2 open — both streams. */
+    /*
+     * 2026-09-24: 27 root fields, 25 declared, 2 open — both streams.
+     * 2026-09-25: 28 — attachToConversation (a conversation's files, shared dock §9), declared.
+     */
     const all = fieldsOf('Query').length + fieldsOf('Mutation').length + fieldsOf('Subscription').length
     const open = openFields('Query').length + openFields('Mutation').length + openFields('Subscription').length
 
-    expect(all).toBe(27)
+    expect(all).toBe(28)
     expect(open).toBe(2)
   })
 })

package/translations/en.json

@@ -110,5 +110,65 @@
   "ai-assistant.text.answer-needs-permission": "you do not have permission to see this answer. ask an administrator for access.",
   "ai-assistant.label.conversation": "conversation",
   "ai-assistant.text.switch-conversation": "switch to {name}",
-  "ai-assistant.text.session-kind-mismatch": "this conversation is {sessionKind}, and you are writing as {requested}. open the conversation you mean."
+  "ai-assistant.text.session-kind-mismatch": "this conversation is {sessionKind}, and you are writing as {requested}. open the conversation you mean.",
+  "ai-assistant.session.search": "Search names and last messages",
+  "ai-assistant.session.filter": "Which conversations",
+  "ai-assistant.session.filter-all": "All",
+  "ai-assistant.session.filter-mine": "Started by me",
+  "ai-assistant.session.filter-hidden": "Including hidden",
+  "ai-assistant.session.failed": "could not load the conversation list.",
+  "ai-assistant.session.no-match": "No conversation matches \"{q}\".",
+  "ai-assistant.session.none": "No conversations yet.",
+  "ai-assistant.session.load-more": "Show more ({rest})",
+  "ai-assistant.session.hidden-count": "{count} hidden",
+  "ai-assistant.session.untitled": "Untitled conversation",
+  "ai-assistant.session.private": "Private - only its participants read it",
+  "ai-assistant.session.open": "Public - everyone in this domain reads it",
+  "ai-assistant.session.rename": "Rename",
+  "ai-assistant.session.make-open": "Make public",
+  "ai-assistant.session.make-private": "Make private",
+  "ai-assistant.session.hide": "Hide from my list",
+  "ai-assistant.session.unhide": "Show in my list",
+  "ai-assistant.session.remove": "Delete",
+  "ai-assistant.session.cancel": "Cancel",
+  "ai-assistant.session.confirm-remove": "Delete \"{name}\"? It disappears for every participant and cannot be brought back.",
+  "ai-assistant.session.confirm-open": "Make \"{name}\" public? Everyone in this domain will be able to read what is already written.",
+  "ai-assistant.session.rename-refused": "this conversation could not be renamed.",
+  "ai-assistant.session.hide-refused": "this conversation could not be hidden.",
+  "ai-assistant.session.visibility-refused": "only the owner of this conversation can change who reads it.",
+  "ai-assistant.session.remove-refused": "this conversation could not be deleted.",
+  "ai-assistant.text.attachments-not-accepted": "this conversation does not take attachments.",
+  "ai-assistant.text.attachment-kind-not-accepted": "{name} cannot be attached here - this conversation takes {kinds}.",
+  "ai-assistant.text.attachment-too-large": "{name} is larger than {max} MB.",
+  "ai-assistant.text.too-many-attachments": "at most {max} files can be sent at once.",
+  "ai-assistant.text.attachments-need-session": "attachments need a saved conversation.",
+  "ai-assistant.text.attachment-not-in-session": "an attachment does not belong to this conversation.",
+  "ai-assistant.dock.title": "Assistant",
+  "ai-assistant.dock.open": "Ask AI",
+  "ai-assistant.dock.no-conversation": "there is no conversation for this screen.",
+  "ai-assistant.dock.no-user": "your sign-in could not be read. sign in again.",
+  "ai-assistant.dock.confirm": "OK",
+  "ai-assistant.dock.cancel": "Cancel",
+  "ai-assistant.dock.proposal-not-runnable": "this proposal cannot be run on this screen.",
+  "ai-assistant.dock.patch-missed": "{missed} of the changes could not be applied.",
+  "ai-assistant.dock.not-configured": "no AI is set up for this site. an administrator can set one up in the AI settings.",
+  "ai-assistant.dock.capability-unknown": "whether AI is set up here could not be read.",
+  "ai-assistant.dock.no-surface": "this screen has no conversation.",
+  "ai-assistant.dock.to-home": "back to this application's conversation",
+  "ai-assistant.dock.back-to-conversation": "back to the conversation",
+  "ai-assistant.dock.conversations": "conversations",
+  "ai-assistant.dock.rebind": "follow this screen again",
+  "ai-assistant.dock.close": "close",
+  "ai-assistant.dock.screen-changed": "the screen changed while you were writing. send it again.",
+  "ai-assistant.dock.retry": "try again",
+  "ai-assistant.session.filter-kind": "Which kind",
+  "ai-assistant.session.filter-this-kind": "This conversation",
+  "ai-assistant.session.filter-all-kinds": "All kinds here",
+  "ai-assistant.session.filter-whose": "Whose",
+  "ai-assistant.session.filter-participant": "I'm in",
+  "ai-assistant.session.filter-visibility": "Visibility",
+  "ai-assistant.session.filter-any-visibility": "Public and private",
+  "ai-assistant.session.filter-open": "Public",
+  "ai-assistant.session.filter-private": "Private",
+  "ai-assistant.session.filter-unread": "Unread"
 }