slotlock 0.5.2 → 0.5.3

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "slotlock",
-  "version": "0.5.2",
+  "version": "0.5.3",
   "type": "module",
   "description": "Resource-first, deterministic calendar and availability engine for AI agents.",
   "license": "Apache-2.0",

package/self-host.js

@@ -8,7 +8,7 @@ import { createHash, timingSafeEqual } from 'node:crypto';
 import { parseArgs } from 'node:util';
 import postgres from 'postgres';
 import { createSlotlockAgentServer, slotlockAgentOperationScope, } from './agent-server.js';
-import { createSlotlockStoreAgentBackend, createSlotlockStoreApplicationBackend, } from './agent-store-backend.js';
+import { createSlotlockStoreAgentBackend, createSlotlockStoreApplicationBackend, createSlotlockStoreChangeSource, } from './agent-store-backend.js';
 import { SLOTLOCK_API_KEY_DEFAULT_SCOPES, SLOTLOCK_API_KEY_MAX_LIFETIME_DAYS, SLOTLOCK_API_KEY_SCOPES, createSlotlockApiKeyAuthenticator, createSlotlockApiKeyStore, slotlockBearerCredential, } from './api-keys.js';
 import { createSlotlockDashboard, createSlotlockDashboardResources, createSlotlockAcceptanceRecords, createSlotlockDashboardState, } from './dashboard.js';
 import { SECRET_HINT, SlotlockConfigError, formatSlotlockRate, optional, readAvailability, readDashboardConfig, readDashboardOrganizations, readLimits, readSecret, readServerUrl, readTrustedProxyHeader, slotlockKeySubscriptions, } from './config.js';
@@ -657,6 +657,8 @@ export async function startSlotlockServer(config, log) {
                 return true;
             },
             subscriptions: {
+                // Live updates poll each tenant's change feed (one reader per tenant).
+                changes: createSlotlockStoreChangeSource(store, sql),
                 maxTotal: caps.subscriptions,
                 maxPerTenant: caps.tenant_subscriptions,
                 maxPerPrincipal: slotlockKeySubscriptions(caps),
@@ -789,7 +791,9 @@ export async function startSlotlockServer(config, log) {
                     send,
                     feed: {
                         claimWebhookDeliveries: (params) => deliveryStore.withTenant(tenantRef, (tenant) => tenant.claimWebhookDeliveries(params)),
-                        settleWebhookDelivery: (params) => deliveryStore.withTenant(tenantRef, (tenant) => tenant.settleWebhookDelivery(params)),
+                        settleWebhookDelivery: (params) => deliveryStore.withTenant(tenantRef, (tenant) => tenant.settleWebhookDelivery(params), {
+                            origin: 'maintenance',
+                        }),
                     },
                 }),
                 // Counts only, never the tenant or a URL.
@@ -1551,7 +1555,7 @@ export async function runSlotlockCli(argv, io) {
             }
             case 'key rotate': {
                 const config = readSlotlockDatabaseConfig(io.env);
-                const rotated = await withApiKeys(config, (keys) => keys.rotate({ tenantRef: config.tenantRef, id: operands[1] }));
+                const rotated = await withApiKeys(config, (keys) => keys.rotate({ tenantRef: config.tenantRef, id: operands[1], actor: CLI_KEY_CREATOR }));
                 if (!rotated) {
                     io.stderr.write('slotlock: no active API key with that id in this tenant\n');
                     return 1;
@@ -1562,7 +1566,7 @@ export async function runSlotlockCli(argv, io) {
             }
             case 'key revoke': {
                 const config = readSlotlockDatabaseConfig(io.env);
-                const revoked = await withApiKeys(config, (keys) => keys.revoke({ tenantRef: config.tenantRef, id: operands[1] }));
+                const revoked = await withApiKeys(config, (keys) => keys.revoke({ tenantRef: config.tenantRef, id: operands[1], actor: CLI_KEY_CREATOR }));
                 if (!revoked) {
                     io.stderr.write('slotlock: no API key with that id in this tenant\n');
                     return 1;

package/slotlock.manifest.json

@@ -3,7 +3,7 @@
   "schemaVersion": "1.0",
   "name": "Slotlock",
   "package": "slotlock",
-  "version": "0.5.2",
+  "version": "0.5.3",
   "description": "Resource-first, deterministic calendar and availability engine for AI agents.",
   "intervalSemantics": {
     "boundary": "[)",

package/store.d.ts

@@ -1,8 +1,8 @@
-import { type SlotlockEventFeed } from './event-feed.js';
+import { type SlotlockChangeOrigin, type SlotlockEventFeed } from './event-feed.js';
 import { type SlotlockBookingRules } from './booking-rules.js';
 import type { Sql, TransactionSql } from 'postgres';
 import { SLOTLOCK_CALENDAR_HORIZON_DAYS } from './rules.js';
-import type { AcquireHoldResult, CalendarCoverageCommand, CalendarCoverageResult, CalendarEventContent, CalendarEventRetentionResult, BookingRetentionResult, SlotlockTenantErasure, CalendarFreeBusy, CalendarHorizonRollCursor, CalendarHorizonRollResult, CancelCalendarEventResult, CancelExternalReservationResult, ConfirmHoldResult, CreateReservationResult, DeleteResourceResult, ExternalReservationCommand, ExternalReservationResult, Interval, SlotlockCalendarEvent, SlotlockAgendaEntry, SlotlockHold, SlotlockReservation, SlotlockResource, PutCalendarEventCommand, PutCalendarEventResult, ReleaseHoldResult, WeeklyAvailabilityRule } from './types.js';
+import type { AcquireHoldResult, CalendarCoverageCommand, CalendarCoverageResult, CalendarEventContent, CalendarEventRetentionResult, BookingRetentionResult, SlotlockTenantErasure, SlotlockBookingRuleDefaults, CalendarFreeBusy, CalendarHorizonRollCursor, CalendarHorizonRollResult, CancelCalendarEventResult, CancelExternalReservationResult, ConfirmHoldResult, CreateReservationResult, DeleteResourceResult, ExternalReservationCommand, ExternalReservationResult, Interval, SlotlockCalendarEvent, SlotlockAgendaEntry, SlotlockHold, SlotlockReservation, SlotlockResource, PutCalendarEventCommand, PutCalendarEventResult, ReleaseHoldResult, WeeklyAvailabilityRule } from './types.js';
 export { SLOTLOCK_CALENDAR_HORIZON_DAYS };
 /**
  * Longest one-off event the store accepts (ten years and some leap days): long enough for any lease
@@ -90,6 +90,8 @@ export declare function legacyPutCommandHash(params: Parameters<typeof putComman
 }): string;
 /** Members a pool booking or search considers at most, in id order. */
 export declare const SLOTLOCK_MAX_POOL_MEMBERS = 100;
+/** The most pools of one tenant that may have default booking rules (`setBookingRuleDefaults`). */
+export declare const SLOTLOCK_MAX_POOL_RULE_DEFAULTS = 1000;
 export declare function isPoolName(value: unknown): value is string;
 export interface SlotlockStore extends SlotlockEventFeed {
     /**
@@ -148,6 +150,13 @@ export interface SlotlockStore extends SlotlockEventFeed {
          * without control characters: the history (listHistory) records it with each change.
          */
         actor?: string;
+        /**
+         * Where the changes come from (SLOTLOCK_CHANGE_ORIGINS: `mcp`, `rest`, `dashboard`, ...),
+         * recorded with each beside the actor. Unset, the enclosing withTenant's, else `library`.
+         */
+        origin?: SlotlockChangeOrigin;
+        /** The id (a UUID) of the API key making these changes, recorded with each. */
+        keyId?: string;
     }): Promise<T>;
     /**
      * INVARIANT (erasure completeness): a tenant integration must use a stable, erasable business
@@ -228,6 +237,24 @@ export interface SlotlockStore extends SlotlockEventFeed {
         id: string;
         rules: SlotlockBookingRules | null;
     }): Promise<SlotlockResource | null>;
+    /**
+     * Set (or clear, with `null`) the tenant's default booking rules, or one pool's (`pool`): a
+     * resource's rules as they apply (`effectiveBookingRules`) are the tenant's, overlaid by its
+     * pool's, overlaid by its own, a field set at a narrower level winning. They apply to bookings made
+     * from then on. `checkInMinutes` is only a resource's own (`invalid_booking_rules`, as for rules
+     * outside their bounds); `pool` is a pool name (`invalid_pool`). At most
+     * SLOTLOCK_MAX_POOL_RULE_DEFAULTS pools a tenant have them (`pool_rules_limit_reached` for one
+     * more). Returns the rules stored.
+     */
+    setBookingRuleDefaults(params: {
+        tenantRef: string;
+        pool: string | null;
+        rules: SlotlockBookingRules | null;
+    }): Promise<SlotlockBookingRules | null>;
+    /** The tenant's default booking rules, and each pool's that has them, by pool name. */
+    getBookingRuleDefaults(params: {
+        tenantRef: string;
+    }): Promise<SlotlockBookingRuleDefaults>;
     /**
      * Put one resource in a pool, or take it out (`null`): `pool` is 1-100 characters of a-z, 0-9,
      * `.`, `_` and `-`, starting with a letter or digit (`invalid_pool` otherwise). A resource is in
@@ -870,6 +897,8 @@ export type CheckInReservationResult = {
 /** One source's coverage of a resource, with its health (listCoverage). */
 export interface SlotlockCoverageHealth {
     source: string;
+    /** How the change feed names the source (slotlockCoverageSourceId), never the source itself. */
+    sourceId: string;
     start: Date;
     end: Date;
     revision: number;
@@ -974,4 +1003,4 @@ export declare function createSlotlockStore(sql: StoreSql, options?: SlotlockSto
  * Every store method that writes for a tenant: what a suspended tenant's withTenant store refuses.
  * Maintenance (rolling series, pruning, purging) and erasure are not among them.
  */
-export declare const SLOTLOCK_TENANT_WRITE_METHODS: readonly ["createResource", "archiveResource", "restoreResource", "deleteResource", "setResourceAvailability", "setResourceBookingRules", "setResourcePool", "setTenantAvailability", "createReservation", "createExternalReservation", "rescheduleExternalReservation", "cancelExternalReservation", "acquireHold", "confirmHold", "releaseHold", "putCalendarEvent", "cancelCalendarEvent", "cancelCalendarEventById", "recordCalendarCoverage", "createWebhookEndpoint", "deleteWebhookEndpoint", "enableWebhookEndpoint", "recordCoverageFailure", "deleteCoverage", "checkInReservation", "joinWaitlist", "leaveWaitlist", "putAssistantSettings", "deleteAssistantSettings", "putAssistantConversation", "settleAssistantAction", "deleteAssistantConversation"];
+export declare const SLOTLOCK_TENANT_WRITE_METHODS: readonly ["createResource", "archiveResource", "restoreResource", "deleteResource", "setResourceAvailability", "setResourceBookingRules", "setBookingRuleDefaults", "setResourcePool", "setTenantAvailability", "createReservation", "createExternalReservation", "rescheduleExternalReservation", "cancelExternalReservation", "acquireHold", "confirmHold", "releaseHold", "putCalendarEvent", "cancelCalendarEvent", "cancelCalendarEventById", "recordCalendarCoverage", "createWebhookEndpoint", "deleteWebhookEndpoint", "enableWebhookEndpoint", "recordCoverageFailure", "deleteCoverage", "checkInReservation", "joinWaitlist", "leaveWaitlist", "putAssistantSettings", "deleteAssistantSettings", "putAssistantConversation", "settleAssistantAction", "deleteAssistantConversation"];