slotlock 0.6.2 → 0.7.0

package/index.d.ts

@@ -1,6 +1,7 @@
 /// <reference types="node" preserve="true" />
 export { findNextAvailable, mergeIntervals, subtractBusy } from './engine.js';
 export { type SlotlockBookingRule, type SlotlockBookingRules, type SlotlockBookingSearch, bookingRuleBroken, bookingSearch, bookingSearchBlocked, bookingSearchReach, nextStepStart, parseBookingRuleDefaults, parseBookingRules, } from './booking-rules.js';
+export { SLOTLOCK_GROUPING_REF, SLOTLOCK_MAX_GROUPS_PER_RESOURCE, SLOTLOCK_MAX_LOCATION_DEPTH, SLOTLOCK_MAX_LOCATIONS, SLOTLOCK_MAX_RESOURCE_GROUPS, SLOTLOCK_RESOURCE_KINDS, SLOTLOCK_RESOURCE_LABEL, SLOTLOCK_RESOURCE_PROFILE_FIELDS, SLOTLOCK_RESOURCE_PROFILE_LIMITS, parseSlotlockLocation, parseSlotlockResourceGroup, parseSlotlockResourceProfile, type SlotlockLocation, type SlotlockResourceGroup, type SlotlockResourceAttributes, type SlotlockResourceKind, type SlotlockResourceProfileChange, type SlotlockResourceProfileInput, } from './resource-profile.js';
 export { type CreateWebhookEndpointResult, type ListChangesResult, SLOTLOCK_CHANGE_ORIGINS, SLOTLOCK_CHANGE_RETENTION_DAYS, SLOTLOCK_CHANGE_TYPES, SLOTLOCK_MAX_WEBHOOK_ENDPOINTS, SLOTLOCK_WEBHOOK_FAILING_LIMIT_MS, slotlockChangeFeedHead, type SlotlockChange, type SlotlockChangeOrigin, type SlotlockChangeType, type SlotlockEventFeed, type SlotlockWebhookClaim, type SlotlockWebhookEndpoint, slotlockCoverageSourceId, } from './event-feed.js';
 export { type SlotlockCloudEvent, type SlotlockWebhookPassResult, type SlotlockWebhookResponse, type SlotlockWebhookScheduler, type SlotlockWebhookSender, createSlotlockGuardedFetch, createSlotlockWebhookSender, deliverSlotlockWebhooks, isPrivateAddress, signSlotlockWebhook, slotlockCloudEvent, slotlockWebhookRetryDelayMs, startSlotlockWebhookDelivery, } from './webhooks.js';
 export { type SlotlockMetrics, createSlotlockMetrics } from './metrics.js';
@@ -11,8 +12,8 @@ export { emitVAvailability, parseVAvailability, recurrenceRuleFromRRule, SLOTLOC
 export type { EmitVAvailabilityOptions, JSCalendarAlert, JSCalendarEvent, JSCalendarParticipant, JSCalendarRecurrenceRule, ParsedVAvailability, } from './interop.js';
 export { createTimeZoneConverter, zonedCalendarDate, zonedDateTimeToUtc, zonedWallTime, } from './timezone.js';
 export type { LocalDateTime, TimeZoneConverter, ZonedCalendarDate, ZonedWallTime, } from './timezone.js';
-export { createSlotlockAgentServer, clientSupportsSlotlockMcpApp, invokeSlotlockAgentOperation, isSlotlockAgentOperation, slotlockAgentTools, slotlockApplicationOperations, slotlockOpenApi, slotlockCalendarResourceUri, slotlockMcpToolResult, parseSlotlockA2ATimestamp, resolveSlotlockAgentOperation, slotlockAgentOperationScope, SLOTLOCK_A2A_PROTOCOL_VERSION, SLOTLOCK_A2A_TASK_PAGE_SIZE, SLOTLOCK_A2A_WATCH_SKILL, SLOTLOCK_A2A_TASK_STATES, SLOTLOCK_AGENT_OPERATION_LEGACY_NAMES, SLOTLOCK_AGENT_SERVER_VERSION, SLOTLOCK_MCP_LEGACY_PROTOCOL_VERSION, SLOTLOCK_MCP_PROTOCOL_VERSION, SLOTLOCK_MCP_RATE_LIMITED_ERROR_CODE, SLOTLOCK_MCP_RESOURCE_URI_TEMPLATE, SLOTLOCK_MCP_SUPPORTED_PROTOCOL_VERSIONS, SLOTLOCK_MCP_APP_HTML, SLOTLOCK_MCP_APP_MIME_TYPE, SLOTLOCK_MCP_APP_RESOURCE, SLOTLOCK_MCP_APP_RESOURCE_URI, SLOTLOCK_MCP_APPS_EXTENSION, SlotlockAgentOperationError, } from './agent-server.js';
-export type { SlotlockAgentCalendarBackend, SlotlockAgentConfirmationOptions, SlotlockAgentErrorContext, SlotlockAgentInvocationContext, SlotlockAgentOperation, SlotlockAgentOperationDispatchOptions, SlotlockAgentOperationDispatchResult, SlotlockAgentPrincipal, SlotlockAgentScope, SlotlockAgentServerEvent, SlotlockAgentServerOAuthOptions, SlotlockAgentServerOptions, SlotlockAgentSubscriptionOptions, SlotlockAgentWriteOperation, SlotlockArgumentIssue, SlotlockMcpToolResult, SlotlockTraceContext, } from './agent-server.js';
+export { createSlotlockAgentServer, clientSupportsSlotlockMcpApp, invokeSlotlockAgentOperation, isSlotlockAgentOperation, slotlockAgentTools, slotlockApplicationOperations, slotlockOpenApi, slotlockCalendarResourceUri, slotlockMcpToolResult, parseSlotlockA2ATimestamp, resolveSlotlockAgentOperation, slotlockAgentOperationScope, SLOTLOCK_A2A_PROTOCOL_VERSION, SLOTLOCK_A2A_TASK_PAGE_SIZE, SLOTLOCK_A2A_WATCH_SKILL, SLOTLOCK_A2A_TASK_STATES, SLOTLOCK_AGENT_OPERATION_LEGACY_NAMES, SLOTLOCK_AGENT_SERVER_VERSION, SLOTLOCK_MAX_ALTERNATIVES, SLOTLOCK_MCP_LEGACY_PROTOCOL_VERSION, SLOTLOCK_MCP_PROTOCOL_VERSION, SLOTLOCK_MCP_RATE_LIMITED_ERROR_CODE, SLOTLOCK_MCP_RESOURCE_URI_TEMPLATE, SLOTLOCK_MCP_SUPPORTED_PROTOCOL_VERSIONS, SLOTLOCK_MCP_APP_HTML, SLOTLOCK_MCP_APP_MIME_TYPE, SLOTLOCK_MCP_APP_RESOURCE, SLOTLOCK_MCP_APP_RESOURCE_URI, SLOTLOCK_MCP_APPS_EXTENSION, SlotlockAgentOperationError, } from './agent-server.js';
+export type { SlotlockAgentCalendarBackend, SlotlockAgentConfirmationOptions, SlotlockAgentErrorContext, SlotlockAgentInvocationContext, SlotlockAgentOperation, SlotlockAgentOperationDispatchOptions, SlotlockAgentOperationDispatchResult, SlotlockAgentPrincipal, SlotlockAgentScope, SlotlockAgentServerEvent, SlotlockAgentServerOAuthOptions, SlotlockAgentServerOptions, SlotlockAgentSubscriptionOptions, SlotlockAgentWriteOperation, SlotlockAlternative, SlotlockArgumentIssue, SlotlockMcpToolResult, SlotlockTraceContext, } from './agent-server.js';
 export { createSlotlockNodeServer } from './node-server.js';
 export type { SlotlockNodeListenOptions, SlotlockNodeServer, SlotlockNodeServerAddress, SlotlockNodeServerCloseResult, SlotlockNodeServerErrorPhase, SlotlockNodeServerFetchTarget, SlotlockNodeServerOptions, } from './node-server.js';
 export { createSlotlockStoreAgentBackend, createSlotlockStoreApplicationBackend, createSlotlockStoreChangeSource, projectSlotlockCalendarEvent, } from './agent-store-backend.js';
@@ -22,11 +23,21 @@ export { SLOTLOCK_APPLICATION_OPERATIONS, SLOTLOCK_APPLICATION_SCOPE, isSlotlock
 export type { SlotlockApplicationBackend, SlotlockApplicationInvocationContext, SlotlockApplicationOperation, SlotlockApplicationOperationDefinition, } from './application-api.js';
 export { maintainSlotlockTenant, startSlotlockMaintenance, withSlotlockMaintenanceLock, } from './maintenance.js';
 export type { SlotlockMaintenanceResult, SlotlockMaintenanceScheduler, SlotlockMaintenanceSchedulerOptions, } from './maintenance.js';
-export { createSlotlockApiKeyAuthenticator, createSlotlockApiKeyStore, generateSlotlockApiKey, isSlotlockApiKey, slotlockApiKeyDigest, SLOTLOCK_API_KEY_ACTIVE_LIMIT, SLOTLOCK_API_KEY_MAX_LIFETIME_DAYS, SLOTLOCK_API_KEY_PREFIX, SLOTLOCK_API_KEY_RETAINED_LIMIT, SLOTLOCK_API_KEY_SCOPES, } from './api-keys.js';
+export { createSlotlockApiKeyAuthenticator, createSlotlockApiKeyStore, generateSlotlockApiKey, isSlotlockApiKey, isSlotlockTestTenant, slotlockLiveTenant, SLOTLOCK_TEST_API_KEY_PREFIX, SLOTLOCK_TEST_TENANT_SUFFIX, slotlockApiKeyDigest, SLOTLOCK_API_KEY_ACTIVE_LIMIT, SLOTLOCK_API_KEY_MAX_LIFETIME_DAYS, SLOTLOCK_API_KEY_PREFIX, SLOTLOCK_API_KEY_RETAINED_LIMIT, SLOTLOCK_API_KEY_SCOPES, } from './api-keys.js';
 export { createSlotlockDashboard, createSlotlockDashboardResources, createSlotlockAcceptanceRecords, createSlotlockDashboardState, createSlotlockMemoryDashboardState, SLOTLOCK_DASHBOARD_MAX_RESOURCES, } from './dashboard.js';
 export type { SlotlockDashboard, SlotlockDashboardAssistantOptions, SlotlockDashboardOptions, SlotlockDashboardResources, SlotlockDashboardState, } from './dashboard.js';
 export { createSlotlockAssistantStore, createSlotlockMemoryAssistantStore, SLOTLOCK_ASSISTANT_TOOL_USE, } from './assistant.js';
 export type { SlotlockAssistantStore } from './assistant.js';
+export { createSlotlockPartnerKeyAuthenticator, createSlotlockPartnerStore, parseSlotlockPartnerContract, slotlockPartnerTenantRef, SLOTLOCK_PARTNER_ACCOUNT, SLOTLOCK_PARTNER_ID, SLOTLOCK_PARTNER_SCOPE, } from './partners.js';
+export { createSlotlockDashboardTeams, createSlotlockOrganizationCheck } from './teams.js';
+export { reportSlotlockOverage, SLOTLOCK_DEFAULT_OVERAGE_STOP_PERCENT } from './overage.js';
+export type { SlotlockOverageReport } from './overage.js';
+export { createSlotlockOtlpExporter, readSlotlockOtlpConfig, slotlockCallSpan } from './otel.js';
+export type { SlotlockOtlpConfig, SlotlockTraceExporter } from './otel.js';
+export type { SlotlockDashboardTeams } from './teams.js';
+export { closeSlotlockPartnerMonth, priceSlotlockPartnerMonth, slotlockClientLabel, slotlockPartnerMonthChecksum, } from './partner-billing.js';
+export type { SlotlockPartnerAccountMonth, SlotlockPartnerInvoiceLine, SlotlockPartnerMonthClose, } from './partner-billing.js';
+export type { SlotlockPartnerAccount, SlotlockPartnerContract, SlotlockPartnerPlan, SlotlockPartnerPricing, SlotlockPartnerStore, } from './partners.js';
 export type { CreateSlotlockApiKeyInput, SlotlockApiKey, SlotlockApiKeyAuthenticatorOptions, SlotlockApiKeyChange, SlotlockApiKeyIdentity, SlotlockApiKeyScope, SlotlockApiKeyStore, } from './api-keys.js';
 export { ICalendarWorkerBusyError, ICalendarWorkerPoolClosedError, createICalendarWorkerPool, } from './ical-worker.js';
 export type { ICalendarWorkerPool, ICalendarWorkerPoolOptions } from './ical-worker.js';
@@ -34,4 +45,4 @@ export { CalendarContractError, CalendarExpansionLimitError, emitICalendar, emit
 export type { ExternalCalendarChange, ExternalCalendarChangeInput, ExternalCalendarStatus, ICalendarEvent, ICalendarExpansionWindow, ICalendarFeedRead, ICalendarSeriesRefusal, ITipMethod, } from './sync.js';
 export { createSlotlockApplicationRoleGrantsDdl, createSlotlockTenantRlsDdl, SLOTLOCK_API_KEY_FUNCTIONS, SLOTLOCK_API_KEY_TABLES, SLOTLOCK_CORE_DDL, SLOTLOCK_DASHBOARD_FUNCTIONS, SLOTLOCK_DASHBOARD_TABLES, SLOTLOCK_DEFINER_FUNCTIONS, SLOTLOCK_DEFINER_TABLES, SLOTLOCK_OPERATOR_FUNCTIONS, SLOTLOCK_SCHEMA_FUNCTIONS, SLOTLOCK_SCHEMA_TABLES, SLOTLOCK_SCHEMA_VERSION, SLOTLOCK_TENANT_ADMIN_FUNCTIONS, SLOTLOCK_TENANT_ADMIN_TABLES, SLOTLOCK_TENANT_CONTEXT_SETTING, SLOTLOCK_TENANT_RLS_DDL, SLOTLOCK_TENANT_TABLES, } from './ddl.js';
 export { assertSlotlockSchemaCurrent, calendarEventRollingHorizon, createSlotlockStore, readSlotlockSchemaVersion, SLOTLOCK_AGENT_OWNER_COMMAND_QUOTA, SLOTLOCK_AGENT_OWNER_EVENT_QUOTA, SLOTLOCK_CALENDAR_HORIZON_DAYS, SLOTLOCK_EVENT_COMMAND_RETENTION_DAYS, SLOTLOCK_INTERNAL_EVENT_OWNER_REF, SLOTLOCK_LOCAL_RECURRENCE_COVERAGE_SOURCE, SLOTLOCK_MATERIALIZATION_WINDOW_DAYS, SLOTLOCK_MAX_EVENT_DURATION_DAYS, SLOTLOCK_TENANT_WRITE_METHODS, type SlotlockHoldTenantOptions, type SlotlockMigrationOptions, type SlotlockSql, type SlotlockStore, type SlotlockStoreOptions, type SlotlockTenantLimits, type SlotlockTenantStore, } from './store.js';
-export type { AcquireHoldResult, BookingRetentionResult, CalendarAttendee, CalendarAttendeeRole, CalendarCoverageAssessment, CalendarCoverageCommand, CalendarCoverageResult, CalendarEventContent, CalendarEventOccurrence, CalendarEventRetentionResult, CalendarEventStatus, CalendarFreeBusy, CalendarHorizonRollCursor, CalendarHorizonRollResult, CalendarOrganizer, CalendarParticipationStatus, CalendarRecurrence, CalendarRecurrenceException, CalendarReminder, CalendarTransparency, ConfirmHoldResult, CancelCalendarEventResult, CancelExternalReservationResult, CreateReservationResult, DeleteResourceResult, ExternalReservationCommand, ExternalReservationResult, Interval, SlotlockAgendaEntry, SlotlockHold, SlotlockCalendarEvent, SlotlockReservation, SlotlockResource, SlotlockTenantErasure, SlotlockBookingRuleDefaults, PutCalendarEventCommand, PutCalendarEventResult, ReleaseHoldResult, TrustedICalendarEvent, WeeklyAvailabilityRule, } from './types.js';
+export type { AcquireHoldResult, BookingRetentionResult, CalendarAttendee, CalendarAttendeeRole, CalendarCoverageAssessment, CalendarCoverageCommand, CalendarCoverageResult, CalendarEventContent, CalendarEventOccurrence, CalendarEventRetentionResult, CalendarEventStatus, CalendarFreeBusy, CalendarHorizonRollCursor, CalendarHorizonRollResult, CalendarOrganizer, CalendarParticipationStatus, CalendarRecurrence, CalendarRecurrenceException, CalendarReminder, CalendarTransparency, ConfirmHoldResult, CancelCalendarEventResult, CancelExternalReservationResult, CreateReservationResult, DeleteResourceResult, ExternalReservationCommand, ExternalReservationResult, Interval, SlotlockAgendaEntry, SlotlockHold, SlotlockCalendarEvent, SlotlockBookingDescription, SlotlockReservation, SlotlockResource, SlotlockTenantErasure, SlotlockBookingRuleDefaults, PutCalendarEventCommand, PutCalendarEventResult, ReleaseHoldResult, TrustedICalendarEvent, WeeklyAvailabilityRule, } from './types.js';

package/index.js

@@ -5,6 +5,7 @@
 /// <reference types="node" preserve="true" />
 export { findNextAvailable, mergeIntervals, subtractBusy } from './engine.js';
 export { bookingRuleBroken, bookingSearch, bookingSearchBlocked, bookingSearchReach, nextStepStart, parseBookingRuleDefaults, parseBookingRules, } from './booking-rules.js';
+export { SLOTLOCK_GROUPING_REF, SLOTLOCK_MAX_GROUPS_PER_RESOURCE, SLOTLOCK_MAX_LOCATION_DEPTH, SLOTLOCK_MAX_LOCATIONS, SLOTLOCK_MAX_RESOURCE_GROUPS, SLOTLOCK_RESOURCE_KINDS, SLOTLOCK_RESOURCE_LABEL, SLOTLOCK_RESOURCE_PROFILE_FIELDS, SLOTLOCK_RESOURCE_PROFILE_LIMITS, parseSlotlockLocation, parseSlotlockResourceGroup, parseSlotlockResourceProfile, } from './resource-profile.js';
 export { SLOTLOCK_CHANGE_ORIGINS, SLOTLOCK_CHANGE_RETENTION_DAYS, SLOTLOCK_CHANGE_TYPES, SLOTLOCK_MAX_WEBHOOK_ENDPOINTS, SLOTLOCK_WEBHOOK_FAILING_LIMIT_MS, slotlockChangeFeedHead, slotlockCoverageSourceId, } from './event-feed.js';
 export { createSlotlockGuardedFetch, createSlotlockWebhookSender, deliverSlotlockWebhooks, isPrivateAddress, signSlotlockWebhook, slotlockCloudEvent, slotlockWebhookRetryDelayMs, startSlotlockWebhookDelivery, } from './webhooks.js';
 export { createSlotlockMetrics } from './metrics.js';
@@ -12,15 +13,20 @@ export { expandRules } from './rules.js';
 export { availabilityRuleProblem, parseAvailabilityRules, rulesToWeeklyHours, SLOTLOCK_MAX_AVAILABILITY_RULES, weeklyHoursToRules, } from './weekly-hours.js';
 export { emitVAvailability, parseVAvailability, recurrenceRuleFromRRule, SLOTLOCK_MAX_VAVAILABILITY_CHARACTERS, toJSCalendarEvent, } from './interop.js';
 export { createTimeZoneConverter, zonedCalendarDate, zonedDateTimeToUtc, zonedWallTime, } from './timezone.js';
-export { createSlotlockAgentServer, clientSupportsSlotlockMcpApp, invokeSlotlockAgentOperation, isSlotlockAgentOperation, slotlockAgentTools, slotlockApplicationOperations, slotlockOpenApi, slotlockCalendarResourceUri, slotlockMcpToolResult, parseSlotlockA2ATimestamp, resolveSlotlockAgentOperation, slotlockAgentOperationScope, SLOTLOCK_A2A_PROTOCOL_VERSION, SLOTLOCK_A2A_TASK_PAGE_SIZE, SLOTLOCK_A2A_WATCH_SKILL, SLOTLOCK_A2A_TASK_STATES, SLOTLOCK_AGENT_OPERATION_LEGACY_NAMES, SLOTLOCK_AGENT_SERVER_VERSION, SLOTLOCK_MCP_LEGACY_PROTOCOL_VERSION, SLOTLOCK_MCP_PROTOCOL_VERSION, SLOTLOCK_MCP_RATE_LIMITED_ERROR_CODE, SLOTLOCK_MCP_RESOURCE_URI_TEMPLATE, SLOTLOCK_MCP_SUPPORTED_PROTOCOL_VERSIONS, SLOTLOCK_MCP_APP_HTML, SLOTLOCK_MCP_APP_MIME_TYPE, SLOTLOCK_MCP_APP_RESOURCE, SLOTLOCK_MCP_APP_RESOURCE_URI, SLOTLOCK_MCP_APPS_EXTENSION, SlotlockAgentOperationError, } from './agent-server.js';
+export { createSlotlockAgentServer, clientSupportsSlotlockMcpApp, invokeSlotlockAgentOperation, isSlotlockAgentOperation, slotlockAgentTools, slotlockApplicationOperations, slotlockOpenApi, slotlockCalendarResourceUri, slotlockMcpToolResult, parseSlotlockA2ATimestamp, resolveSlotlockAgentOperation, slotlockAgentOperationScope, SLOTLOCK_A2A_PROTOCOL_VERSION, SLOTLOCK_A2A_TASK_PAGE_SIZE, SLOTLOCK_A2A_WATCH_SKILL, SLOTLOCK_A2A_TASK_STATES, SLOTLOCK_AGENT_OPERATION_LEGACY_NAMES, SLOTLOCK_AGENT_SERVER_VERSION, SLOTLOCK_MAX_ALTERNATIVES, SLOTLOCK_MCP_LEGACY_PROTOCOL_VERSION, SLOTLOCK_MCP_PROTOCOL_VERSION, SLOTLOCK_MCP_RATE_LIMITED_ERROR_CODE, SLOTLOCK_MCP_RESOURCE_URI_TEMPLATE, SLOTLOCK_MCP_SUPPORTED_PROTOCOL_VERSIONS, SLOTLOCK_MCP_APP_HTML, SLOTLOCK_MCP_APP_MIME_TYPE, SLOTLOCK_MCP_APP_RESOURCE, SLOTLOCK_MCP_APP_RESOURCE_URI, SLOTLOCK_MCP_APPS_EXTENSION, SlotlockAgentOperationError, } from './agent-server.js';
 export { createSlotlockNodeServer } from './node-server.js';
 export { createSlotlockStoreAgentBackend, createSlotlockStoreApplicationBackend, createSlotlockStoreChangeSource, projectSlotlockCalendarEvent, } from './agent-store-backend.js';
 export { SLOTLOCK_FEED_BUSY_MS, SLOTLOCK_FEED_IDLE_MS, } from './change-watch.js';
 export { SLOTLOCK_APPLICATION_OPERATIONS, SLOTLOCK_APPLICATION_SCOPE, isSlotlockApplicationOperation, } from './application-api.js';
 export { maintainSlotlockTenant, startSlotlockMaintenance, withSlotlockMaintenanceLock, } from './maintenance.js';
-export { createSlotlockApiKeyAuthenticator, createSlotlockApiKeyStore, generateSlotlockApiKey, isSlotlockApiKey, slotlockApiKeyDigest, SLOTLOCK_API_KEY_ACTIVE_LIMIT, SLOTLOCK_API_KEY_MAX_LIFETIME_DAYS, SLOTLOCK_API_KEY_PREFIX, SLOTLOCK_API_KEY_RETAINED_LIMIT, SLOTLOCK_API_KEY_SCOPES, } from './api-keys.js';
+export { createSlotlockApiKeyAuthenticator, createSlotlockApiKeyStore, generateSlotlockApiKey, isSlotlockApiKey, isSlotlockTestTenant, slotlockLiveTenant, SLOTLOCK_TEST_API_KEY_PREFIX, SLOTLOCK_TEST_TENANT_SUFFIX, slotlockApiKeyDigest, SLOTLOCK_API_KEY_ACTIVE_LIMIT, SLOTLOCK_API_KEY_MAX_LIFETIME_DAYS, SLOTLOCK_API_KEY_PREFIX, SLOTLOCK_API_KEY_RETAINED_LIMIT, SLOTLOCK_API_KEY_SCOPES, } from './api-keys.js';
 export { createSlotlockDashboard, createSlotlockDashboardResources, createSlotlockAcceptanceRecords, createSlotlockDashboardState, createSlotlockMemoryDashboardState, SLOTLOCK_DASHBOARD_MAX_RESOURCES, } from './dashboard.js';
 export { createSlotlockAssistantStore, createSlotlockMemoryAssistantStore, SLOTLOCK_ASSISTANT_TOOL_USE, } from './assistant.js';
+export { createSlotlockPartnerKeyAuthenticator, createSlotlockPartnerStore, parseSlotlockPartnerContract, slotlockPartnerTenantRef, SLOTLOCK_PARTNER_ACCOUNT, SLOTLOCK_PARTNER_ID, SLOTLOCK_PARTNER_SCOPE, } from './partners.js';
+export { createSlotlockDashboardTeams, createSlotlockOrganizationCheck } from './teams.js';
+export { reportSlotlockOverage, SLOTLOCK_DEFAULT_OVERAGE_STOP_PERCENT } from './overage.js';
+export { createSlotlockOtlpExporter, readSlotlockOtlpConfig, slotlockCallSpan } from './otel.js';
+export { closeSlotlockPartnerMonth, priceSlotlockPartnerMonth, slotlockClientLabel, slotlockPartnerMonthChecksum, } from './partner-billing.js';
 export { ICalendarWorkerBusyError, ICalendarWorkerPoolClosedError, createICalendarWorkerPool, } from './ical-worker.js';
 export { CalendarContractError, CalendarExpansionLimitError, emitICalendar, emitITipCalendar, expandCalendarEventOccurrences, normalizeCalendarEventContent, normalizeExternalCalendarChange, parseICalendarChanges, parseICalendarFeed, parseTrustedICalendarEvents, recurrenceRuleProblem, storedCalendarEventProblem, } from './sync.js';
 export { createSlotlockApplicationRoleGrantsDdl, createSlotlockTenantRlsDdl, SLOTLOCK_API_KEY_FUNCTIONS, SLOTLOCK_API_KEY_TABLES, SLOTLOCK_CORE_DDL, SLOTLOCK_DASHBOARD_FUNCTIONS, SLOTLOCK_DASHBOARD_TABLES, SLOTLOCK_DEFINER_FUNCTIONS, SLOTLOCK_DEFINER_TABLES, SLOTLOCK_OPERATOR_FUNCTIONS, SLOTLOCK_SCHEMA_FUNCTIONS, SLOTLOCK_SCHEMA_TABLES, SLOTLOCK_SCHEMA_VERSION, SLOTLOCK_TENANT_ADMIN_FUNCTIONS, SLOTLOCK_TENANT_ADMIN_TABLES, SLOTLOCK_TENANT_CONTEXT_SETTING, SLOTLOCK_TENANT_RLS_DDL, SLOTLOCK_TENANT_TABLES, } from './ddl.js';

package/interop.js

@@ -4,7 +4,7 @@
 // directly.
 import ICAL from 'ical.js';
 import { zonedDateTimeFields } from './timezone.js';
-import { parseAvailabilityRules } from './weekly-hours.js';
+import { invalidAvailability, parseAvailabilityRules } from './weekly-hours.js';
 /** The longest VAVAILABILITY text `parseVAvailability` reads. */
 export const SLOTLOCK_MAX_VAVAILABILITY_CHARACTERS = 65_536;
 const PRODID = '-//Pylota//Slotlock//EN';
@@ -13,9 +13,6 @@ const DAYS = ['SU', 'MO', 'TU', 'WE', 'TH', 'FR', 'SA'];
 /** 2024-01-07 is a Sunday: the reference week runs Sunday 7 to Saturday 13 January. */
 const REFERENCE_SUNDAY = Date.UTC(2024, 0, 7);
 const VAVAILABILITY_DTSTAMP = '20240101T000000Z';
-function invalidAvailability(message) {
-    return Object.assign(new Error(message), { code: 'invalid_availability' });
-}
 const pad = (value, width = 2) => String(value).padStart(width, '0');
 /** RFC 5545 §3.1: lines of at most 75 octets, continued with a leading space. */
 function fold(line) {

package/maintenance.d.ts

@@ -8,10 +8,9 @@ export interface SlotlockMaintenanceResult {
     /** Series over the expansion budget, or whose roll failed otherwise; they keep their old coverage. */
     refused: number;
     /**
-     * Expired holds and the answers kept for keyed ones, and past the retention window event
-     * idempotency answers, agents' event cancellations, booking references retired with no
-     * booking and feed changes, deleted, and dashboard assistant conversations past their expiry.
-     * A cancelled booking's tombstone stays.
+     * Rows deleted: expired holds and their keyed answers; past retention, event idempotency answers,
+     * agent event cancellations, stray booking retirements and feed changes; and expired assistant
+     * conversations. A cancelled booking's tombstone stays.
      */
     pruned: number;
     /**
@@ -25,24 +24,31 @@ export interface SlotlockMaintenanceResult {
     noShows: number;
     /** Waitlist entries whose window came free, each now holding it (`waitlist.offered`). */
     waitlistOffers: number;
+    /** Approvals no one decided in time, their held time freed (`approval.expired`). */
+    approvalsExpired: number;
     /** More was left than one pass does: run another. */
     capped: boolean;
     /**
-     * The roll stopped before the series it had put back: series it has not tried since may still
-     * extend, so another pass should follow at once.
+     * The roll stopped before the series it had deferred: others may still extend, so run another
+     * pass at once.
      */
     rollPending: boolean;
 }
 /**
- * One maintenance pass for a tenant: roll its recurring events to the rolling horizon, then purge
- * its expired holds with their answers and prune its events' and bookings' bookkeeping past the
- * retention window, each in at most `batches` batches (1-100, default 10), every batch its own
- * transaction. Aborting `signal` stops it between batches with the signal's reason.
+ * One maintenance pass for a tenant: roll its recurring events to the horizon, then purge expired
+ * holds and prune bookkeeping past retention, each in at most `batches` batches (1-100, default
+ * 10), each its own transaction. Aborting `signal` stops it between batches.
  */
 export declare function maintainSlotlockTenant(store: SlotlockStore, tenantRef: string, options?: {
     batches?: number;
     signal?: AbortSignal;
     followZoneRules?: boolean;
+    /**
+     * Roll the tenant's committed bookings and holds up into its usage first (usage.ts), before
+     * pruning can delete feed changes it has not counted. For a deployment that meters
+     * (SLOTLOCK_USAGE=on).
+     */
+    usage?: boolean;
 }): Promise<SlotlockMaintenanceResult>;
 /**
  * Run `work` holding the tenant's maintenance lock on a connection of its own, or return
@@ -63,12 +69,20 @@ export interface SlotlockMaintenanceSchedulerOptions {
     sql: Sql;
     /** Tenants maintained from the start, whether or not a key of theirs calls. */
     tenants: readonly string[];
+    /**
+     * Every tenant with data (slotlock.maintenance_tenants), read at the start and once an interval;
+     * each not maintained within the interval is queued, so a tenant whose keys never call is
+     * maintained too. What it throws goes to onError.
+     */
+    discover?: () => Promise<readonly string[]>;
     /** How often each tenant is maintained, at most a day. */
     intervalMs: number;
     /** Tenants remembered; the one served longest ago is forgotten first. Default 10,000. */
     maxTenants?: number;
     /** Batches of each task per pass (maintainSlotlockTenant). */
     batches?: number;
+    /** Roll each tenant's bookings and holds up into its usage, first (maintainSlotlockTenant `usage`). */
+    usage?: boolean;
     /** A pass that ran: counts only, never the tenant. Not awaited; what it throws is ignored. */
     onPass?: (result: SlotlockMaintenanceResult) => void;
     /**

package/maintenance.js

@@ -1,26 +1,31 @@
 import { ignoreRejection } from './hooks.js';
 import { SLOTLOCK_MAX_WAITLIST_PER_TENANT, calendarEventRollingHorizon, } from './store.js';
 /**
- * One maintenance pass for a tenant: roll its recurring events to the rolling horizon, then purge
- * its expired holds with their answers and prune its events' and bookings' bookkeeping past the
- * retention window, each in at most `batches` batches (1-100, default 10), every batch its own
- * transaction. Aborting `signal` stops it between batches with the signal's reason.
+ * One maintenance pass for a tenant: roll its recurring events to the horizon, then purge expired
+ * holds and prune bookkeeping past retention, each in at most `batches` batches (1-100, default
+ * 10), each its own transaction. Aborting `signal` stops it between batches.
  */
 export async function maintainSlotlockTenant(store, tenantRef, options = {}) {
     const batches = options.batches ?? 10;
     if (!(Number.isSafeInteger(batches) && batches >= 1 && batches <= 100)) {
         throw new RangeError('batches must be a whole number from 1 to 100');
     }
-    // What a pass changes (a no-show released, a waitlist offer) is recorded as maintenance's.
     const withTenant = (callback) => store.withTenant(tenantRef, callback, { origin: 'maintenance' });
+    if (options.usage) {
+        for (let batch = 0; batch < batches; batch++) {
+            options.signal?.throwIfAborted();
+            const read = await withTenant((tenant) => tenant.rollUpUsage({ tenantRef, limit: USAGE_ROLL_UP_BATCH }));
+            if (read < USAGE_ROLL_UP_BATCH)
+                break;
+        }
+    }
     const window = calendarEventRollingHorizon();
     let extended = 0;
     let conflicts = 0;
     let refused = 0;
     let rollCapped = true;
     let after = null;
-    // A roll that fails does not stop the pruning: expired holds are purged all the same, and the
-    // roll's error is thrown after.
+    // A failed roll does not stop the pruning; its error is thrown after.
     let rollFailure = null;
     try {
         for (let batch = 0; batch < batches; batch++) {
@@ -65,15 +70,16 @@ export async function maintainSlotlockTenant(store, tenantRef, options = {}) {
         }
     }
     options.signal?.throwIfAborted();
-    // Conversations last 2 hours after their last message (dashboard.ts): an expired one is
-    // unreadable already, and deleted here.
+    // Conversations expire 2 hours after their last message (dashboard.ts).
     pruned += await withTenant((tenant) => tenant.pruneAssistantConversations({ tenantRef }));
     const zones = await withTenant((tenant) => tenant.followZoneRules({ tenantRef, move: options.followZoneRules === true }));
     const staleSources = await withTenant((tenant) => tenant.reportStaleCoverage({ tenantRef }));
-    // No-shows first: the time they free is offered to the waitlist in the same pass.
+    // Approvals past their wait, and no-shows, first: the time they free is offered to the waitlist
+    // in the same pass.
+    const approvals = await withTenant((tenant) => tenant.expireApprovals({ tenantRef, limit: 100 }));
     const noShows = await withTenant((tenant) => tenant.releaseNoShows({ tenantRef }));
-    // The whole waitlist, in join order, a page at a time and each page its own transaction, so a
-    // later entry whose window is free is offered however many wait before it.
+    // The whole waitlist in join order, a page per transaction, so a later free entry is offered
+    // however many wait before it.
     let waitlistOffers = 0;
     let page = null;
     for (let pages = 0; pages < WAITLIST_PAGES; pages++) {
@@ -96,7 +102,8 @@ export async function maintainSlotlockTenant(store, tenantRef, options = {}) {
         staleSources,
         noShows,
         waitlistOffers,
-        capped: rollCapped || eventsLeft || bookingsLeft || changesLeft,
+        approvalsExpired: approvals.expired,
+        capped: rollCapped || eventsLeft || bookingsLeft || changesLeft || approvals.expired === 100,
         rollPending: rollCapped && after !== null && (after.rollRetryAt ?? null) === null,
     };
 }
@@ -106,6 +113,8 @@ const WAITLIST_PAGES = Math.ceil(SLOTLOCK_MAX_WAITLIST_PER_TENANT / 50);
 const SWEEP_INTERVAL_MS = 15 * 60_000;
 /** Feed changes past the retention deleted per batch. */
 const CHANGE_PRUNE_BATCH = 1_000;
+/** Feed changes rolled up into usage per batch. */
+const USAGE_ROLL_UP_BATCH = 5_000;
 /** The advisory lock key for one tenant's maintenance (64-bit, from the tenant reference). */
 const LOCK_NAMESPACE = 'slotlock.maintenance:';
 /**
@@ -173,6 +182,7 @@ export function startSlotlockMaintenance(options) {
                 try {
                     const result = await withSlotlockMaintenanceLock(options.sql, tenantRef, () => maintainSlotlockTenant(options.store, tenantRef, {
                         ...(options.batches !== undefined ? { batches: options.batches } : {}),
+                        ...(options.usage ? { usage: true } : {}),
                         signal: controller.signal,
                     }));
                     recordPass(tenantRef, Date.now());
@@ -183,12 +193,10 @@ export function startSlotlockMaintenance(options) {
                         catch {
                             // Reporting must never stop maintenance, or make a pass that ran look failed.
                         }
-                        // A capped pass that got somewhere goes round again at once, as does one whose roll
-                        // stopped before the series it had put back: each series it could not extend is now
-                        // behind every one it has not tried (the store puts it there), so the next pass meets
-                        // new ones, and however many are stuck, each is met once before a healthy one is
-                        // reached. A pass that reached the series put back waits for the next interval: they
-                        // take turns there, and the next pass reaches anything new before them.
+                        // A capped pass that progressed, or whose roll stopped before its deferred series, goes
+                        // again at once: deferred series sit behind untried ones, so each stuck one is met once
+                        // before a healthy one is reached. A pass that reached the deferred series waits for
+                        // the next interval.
                         const progressed = result.extended + result.pruned > 0;
                         again = result.capped && (progressed || result.rollPending);
                     }
@@ -215,20 +223,42 @@ export function startSlotlockMaintenance(options) {
             working = null;
         }
     };
-    // Expired assistant conversations of every tenant, the ones whose keys never call included (a
-    // tenant only the dashboard serves): one bounded sweep at most every quarter hour.
+    const report = (error) => {
+        try {
+            ignoreRejection(options.onError?.(error));
+        }
+        catch {
+            // Reporting must never stop maintenance.
+        }
+    };
+    // Expired conversations of every tenant, including those no key calls (dashboard-only): one
+    // bounded sweep at most every quarter hour.
     let lastSweep = 0;
     const sweep = () => {
         if (controller.signal.aborted || Date.now() - lastSweep < Math.min(intervalMs, SWEEP_INTERVAL_MS))
             return;
         lastSweep = Date.now();
-        options.store.sweepAssistantConversations().catch((error) => {
-            try {
-                ignoreRejection(options.onError?.(error));
-            }
-            catch {
-                // Reporting must never stop maintenance.
-            }
+        options.store.sweepAssistantConversations().catch(report);
+    };
+    // Every tenant with data, once an interval: those no key has called since the server started too.
+    let lastDiscovery = Number.NEGATIVE_INFINITY;
+    let discovering = false;
+    const discover = () => {
+        const list = options.discover;
+        if (!list || discovering || controller.signal.aborted)
+            return;
+        if (Date.now() - lastDiscovery < intervalMs)
+            return;
+        lastDiscovery = Date.now();
+        discovering = true;
+        (async () => list())()
+            .then((tenants) => {
+            for (const tenantRef of tenants)
+                if (due(tenantRef))
+                    enqueue(tenantRef);
+        }, report)
+            .finally(() => {
+            discovering = false;
         });
     };
     const tick = () => {
@@ -236,6 +266,7 @@ export function startSlotlockMaintenance(options) {
             if (due(tenantRef))
                 enqueue(tenantRef);
         }
+        discover();
         sweep();
     };
     const timer = setInterval(tick, Math.min(intervalMs, 60_000));

package/mcp-app.d.ts

@@ -5,16 +5,14 @@ export declare const SLOTLOCK_MCP_APP_RESOURCE_URI = "ui://slotlock/calendar";
 /** True only when the host declares the stable extension's required HTML MIME capability. */
 export declare function clientSupportsSlotlockMcpApp(capabilities: unknown): boolean;
 /**
- * A static, network-dark calendar view. Dynamic calendar data arrives only through the host's
- * `ui/notifications/tool-result` channel; the template contains no tenant or event data and uses
- * textContent for every untrusted value. Keeping this as reviewed source instead of generated UI
- * also lets MCP hosts inspect and cache the exact resource before rendering it.
+ * A static, network-dark calendar view. Data arrives only through the host's
+ * `ui/notifications/tool-result` channel; the template holds no tenant data and renders untrusted
+ * values with textContent. Reviewed source rather than generated UI, so hosts can inspect and cache
+ * it.
  *
- * A certain slot (from `slotlock_find_available_slots` or `slotlock_find_next_available`) can be
- * picked: the view sends the host one `ui/message` naming it, in a fixed sentence holding only the
- * resource id and the two instants it checked, so the agent books it through the normal path,
- * where Slotlock asks a person to confirm the write if it is set to. The view itself never calls a
- * tool, and every write tool is visible to the model only.
+ * A certain slot can be picked: the view sends one `ui/message` naming only the resource id and its
+ * two instants, so the agent books it through the normal path (with confirmation if configured).
+ * The view never calls a tool.
  */
 export declare const SLOTLOCK_MCP_APP_HTML = "<!doctype html>\n<html lang=\"en\">\n<head>\n  <meta charset=\"utf-8\">\n  <meta name=\"viewport\" content=\"width=device-width,initial-scale=1\">\n  <title>Slotlock calendar</title>\n  <style>\n    :root{color-scheme:light dark;--fb-bg:#fbfbf9;--fb-surface:#ffffff;--fb-sunken:#f3f4f0;--fb-text:#171915;--fb-muted:#5d655b;--fb-faint:#8a9187;--fb-line:#e3e5df;--fb-line-strong:#c9cdc4;--fb-inverse:#171915;--fb-on-inverse:#ffffff;--fb-ring:#2e5bff;--fb-ok:#23855b;--fb-warn:#b7791f;--fb-danger:#9b2c2c}\n    @media (prefers-color-scheme:dark){:root:not([data-theme=\"light\"]){--fb-bg:#121411;--fb-surface:#1a1d19;--fb-sunken:#22261f;--fb-text:#eef0ea;--fb-muted:#a9b0a5;--fb-faint:#7d847a;--fb-line:#2c302a;--fb-line-strong:#3d4339;--fb-inverse:#eef0ea;--fb-on-inverse:#121411;--fb-ring:#7d9bff;--fb-ok:#5cc495;--fb-warn:#e0a44a;--fb-danger:#f08a8a}}\n    :root[data-theme=\"dark\"]{--fb-bg:#121411;--fb-surface:#1a1d19;--fb-sunken:#22261f;--fb-text:#eef0ea;--fb-muted:#a9b0a5;--fb-faint:#7d847a;--fb-line:#2c302a;--fb-line-strong:#3d4339;--fb-inverse:#eef0ea;--fb-on-inverse:#121411;--fb-ring:#7d9bff;--fb-ok:#5cc495;--fb-warn:#e0a44a;--fb-danger:#f08a8a}\n    :root{--bg:var(--color-background-primary,var(--fb-bg));--surface:var(--color-background-secondary,var(--fb-surface));--sunken:var(--color-background-tertiary,var(--fb-sunken));--text:var(--color-text-primary,var(--fb-text));--muted:var(--color-text-secondary,var(--fb-muted));--faint:var(--color-text-tertiary,var(--fb-faint));--line:var(--color-border-primary,var(--fb-line));--line-strong:var(--color-border-secondary,var(--fb-line-strong));--inverse:var(--color-background-inverse,var(--fb-inverse));--on-inverse:var(--color-text-inverse,var(--fb-on-inverse));--ring:var(--color-ring-primary,var(--fb-ring));--ok:var(--color-text-success,var(--fb-ok));--danger:var(--color-text-danger,var(--fb-danger));font-family:var(--font-sans,ui-sans-serif,system-ui,-apple-system,\"Segoe UI\",sans-serif);color:var(--text);background:var(--bg)}\n    *{box-sizing:border-box}body{margin:0;min-width:0;background:transparent;-webkit-font-smoothing:antialiased}button,input,textarea{font:inherit;color:inherit}p{margin:0}\n    button:focus-visible,input:focus-visible,textarea:focus-visible{outline:2px solid var(--ring);outline-offset:2px}\n    .shell{display:grid;gap:12px;padding:16px;max-width:760px;margin:0 auto}\n    .sr{position:absolute;width:1px;height:1px;overflow:hidden;clip:rect(0 0 0 0);white-space:nowrap}\n    .status{display:inline-flex;align-items:center;gap:6px;font-size:12px;color:var(--muted)}.dot{width:7px;height:7px;border-radius:50%;background:var(--fb-warn)}.status[data-ready=\"true\"] .dot{background:var(--ok)}\n    /* The picker */\n    .picker{display:grid;border:1px solid var(--line);border-radius:16px;background:var(--surface);overflow:hidden}.picker[hidden]{display:none}\n    .head{display:flex;align-items:flex-start;justify-content:space-between;gap:12px;padding:16px 16px 12px}\n    .head h1{margin:0;font-size:var(--font-heading-sm-size,18px);font-weight:var(--font-weight-semibold,600);letter-spacing:-.01em}\n    .meta{margin-top:4px;font-size:13px;color:var(--muted);display:flex;flex-wrap:wrap;gap:4px 10px}.meta span+span::before{content:\"\u00B7\";margin-right:10px;color:var(--faint)}\n    .clock{display:inline-flex;padding:2px;border-radius:8px;background:var(--sunken);flex:none}.clock button{min-width:40px;padding:4px 8px;border:0;border-radius:6px;background:transparent;font-size:12px;color:var(--muted);cursor:pointer}.clock button[aria-pressed=\"true\"]{background:var(--surface);color:var(--text);box-shadow:0 1px 2px rgba(0,0,0,.08)}\n    .days{display:flex;gap:6px;padding:0 16px 12px;overflow-x:auto;scrollbar-width:none;scroll-snap-type:x proximity}.days::-webkit-scrollbar{display:none}.days[hidden]{display:none}\n    .day{flex:none;display:grid;justify-items:center;gap:1px;width:56px;padding:8px 0 7px;border:1px solid var(--line);border-radius:12px;background:transparent;cursor:pointer;scroll-snap-align:start;font-variant-numeric:tabular-nums}\n    .day small{font-size:11px;color:var(--muted)}.day strong{font-size:17px;font-weight:var(--font-weight-semibold,600);line-height:1.2}.day i{font-style:normal;font-size:10px;color:var(--faint)}\n    .day:hover{border-color:var(--line-strong)}.day[aria-pressed=\"true\"]{background:var(--inverse);border-color:var(--inverse);color:var(--on-inverse)}.day[aria-pressed=\"true\"] small,.day[aria-pressed=\"true\"] i{color:inherit;opacity:.75}\n    .times{display:grid;gap:14px;padding:14px 16px 16px;border-top:1px solid var(--line)}.times[hidden],.choice[hidden]{display:none}.foot:has(.choice[hidden]){justify-content:flex-end}\n    .part h2{margin:0 0 8px;font-size:11px;font-weight:var(--font-weight-medium,500);letter-spacing:.06em;text-transform:uppercase;color:var(--faint)}\n    .grid{display:grid;grid-template-columns:repeat(auto-fill,minmax(96px,1fr));gap:8px}\n    .time{display:grid;justify-items:center;gap:1px;min-height:42px;padding:8px 6px;border:1px solid var(--line-strong);border-radius:10px;background:var(--surface);cursor:pointer;font-variant-numeric:tabular-nums;font-weight:var(--font-weight-medium,500);transition:border-color .12s,background-color .12s}\n    .time small{font-size:10px;font-weight:400;color:var(--muted)}.time:hover:not(:disabled){border-color:var(--text)}\n    .time[aria-pressed=\"true\"]{background:var(--inverse);border-color:var(--inverse);color:var(--on-inverse)}.time[aria-pressed=\"true\"] small{color:inherit;opacity:.75}.time:disabled{cursor:default}.time:disabled:not([aria-pressed=\"true\"]){opacity:.45}\n    .one{display:grid;gap:4px;padding:4px 16px 16px}.one strong{font-size:var(--font-heading-md-size,22px);font-weight:var(--font-weight-semibold,600);letter-spacing:-.01em;font-variant-numeric:tabular-nums}.one span{font-size:14px;color:var(--muted)}.one[hidden]{display:none}\n    .foot{display:flex;align-items:center;justify-content:space-between;gap:12px;padding:12px 16px;border-top:1px solid var(--line);background:var(--sunken)}\n    .choice{min-width:0;font-size:13px;color:var(--muted);overflow-wrap:anywhere}.choice b{display:block;color:var(--text);font-weight:var(--font-weight-semibold,600)}\n    .book{flex:none;min-height:40px;padding:9px 16px;border:0;border-radius:10px;background:var(--inverse);color:var(--on-inverse);font-weight:var(--font-weight-semibold,600);cursor:pointer}.book:disabled{cursor:default;opacity:.4}.book[data-sent=\"true\"]{opacity:1;background:transparent;color:var(--ok);padding-inline:4px}\n    .fallback{display:grid;gap:6px;padding:12px 16px;border-top:1px solid var(--line);font-size:13px;color:var(--muted)}.fallback[hidden]{display:none}.fallback textarea{width:100%;min-height:64px;padding:8px;border:1px solid var(--line-strong);border-radius:8px;background:var(--bg);font:12px/1.5 var(--font-mono,ui-monospace,monospace);resize:vertical}\n    /* Every other result */\n    .list[hidden]{display:none}.list{display:grid;gap:12px}\n    .mast{display:flex;align-items:center;justify-content:space-between;gap:12px}.mast h1{margin:0;font-size:var(--font-heading-sm-size,18px);font-weight:var(--font-weight-semibold,600)}\n    .toolbar{display:flex;align-items:center;gap:10px;flex-wrap:wrap}.search{flex:1;min-width:min(100%,220px);min-height:38px;padding:8px 12px;border:1px solid var(--line-strong);border-radius:10px;background:var(--surface)}.summary{font-size:13px;color:var(--muted)}\n    .panel{min-width:0;border:1px solid var(--line);border-radius:14px;background:var(--surface);overflow:hidden}.items{display:grid;min-width:0}\n    .item{display:grid;grid-template-columns:minmax(120px,.85fr) minmax(0,1.5fr) auto;gap:12px;align-items:start;padding:12px 14px;border-bottom:1px solid var(--line)}.item:last-child{border-bottom:0}.item-title{font-weight:var(--font-weight-semibold,600);overflow-wrap:anywhere}.item-detail{min-width:0;color:var(--muted);font-size:13px;line-height:1.45;overflow-wrap:anywhere}.badge{justify-self:end;padding:3px 7px;border:1px solid var(--line);border-radius:6px;font-size:11px;color:var(--muted);white-space:nowrap}.empty{padding:28px 16px;text-align:center;color:var(--muted);font-size:14px}\n    details{border-top:1px solid var(--line)}summary{cursor:pointer;padding:10px 14px;color:var(--muted);font-size:12px}pre{margin:0;padding:14px;max-height:260px;overflow:auto;font:12px/1.5 var(--font-mono,ui-monospace,monospace);white-space:pre-wrap;overflow-wrap:anywhere;background:var(--sunken)}\n    @media(max-width:520px){.shell{padding:10px}.item{grid-template-columns:1fr}.badge{justify-self:start}.grid{grid-template-columns:repeat(auto-fill,minmax(84px,1fr))}.foot{flex-wrap:wrap}.book{flex:1}}\n    @media(prefers-reduced-motion:reduce){.time{transition:none}}\n  </style>\n</head>\n<body>\n  <main class=\"shell\">\n    <section class=\"picker\" id=\"picker\" aria-labelledby=\"pickTitle\" hidden>\n      <div class=\"head\">\n        <div><h1 id=\"pickTitle\">Pick a time</h1><p class=\"meta\" id=\"pickMeta\"></p></div>\n        <div class=\"clock\" role=\"group\" aria-label=\"Clock\"><button type=\"button\" id=\"h12\" aria-pressed=\"false\">12h</button><button type=\"button\" id=\"h24\" aria-pressed=\"false\">24h</button></div>\n      </div>\n      <div class=\"days\" id=\"days\" role=\"group\" aria-label=\"Day\"></div>\n      <div class=\"one\" id=\"one\" hidden></div>\n      <div class=\"times\" id=\"times\"></div>\n      <div class=\"foot\">\n        <p class=\"choice\" id=\"choice\" aria-live=\"polite\">No time picked</p>\n        <button type=\"button\" class=\"book\" id=\"book\" disabled>Book this time</button>\n      </div>\n      <div class=\"fallback\" id=\"fallback\" hidden><p>Your host did not pass the choice on. Send this to your agent:</p><textarea id=\"fallbackText\" readonly></textarea></div>\n    </section>\n    <section class=\"list\" id=\"list\">\n      <header class=\"mast\"><h1>Slotlock calendar</h1><p class=\"status\" id=\"status\" data-ready=\"false\" role=\"status\"><span class=\"dot\" aria-hidden=\"true\"></span><span id=\"statusText\">Connecting to host</span></p></header>\n      <div class=\"toolbar\">\n        <label class=\"sr\" for=\"filter\">Filter this result</label><input id=\"filter\" class=\"search\" type=\"search\" autocomplete=\"off\" placeholder=\"Filter by resource, event or time\">\n        <p class=\"summary\" id=\"summary\" aria-live=\"polite\">Waiting for a calendar result.</p>\n      </div>\n      <div class=\"panel\">\n        <div class=\"items\" id=\"items\"><p class=\"empty\">Ask your agent to list resources, inspect free-busy, find a slot, or list events.</p></div>\n        <details><summary>Structured result</summary><pre id=\"raw\">No result yet.</pre></details>\n      </div>\n    </section>\n  </main>\n  <script>\n    (() => {\n      'use strict';\n      const state = { data: null, query: '', requestId: 1, nextId: 2, timeZone: undefined, locale: undefined, hour12: undefined, day: null, chosen: null, sent: false, pending: {}, size: '' };\n      const $ = (id) => document.getElementById(id);\n      const status = $('status'), statusText = $('statusText'), items = $('items'), summary = $('summary'), raw = $('raw'), filter = $('filter');\n      const picker = $('picker'), list = $('list'), days = $('days'), times = $('times'), one = $('one'), choice = $('choice'), book = $('book'), pickMeta = $('pickMeta'), fallback = $('fallback'), fallbackText = $('fallbackText'), h12 = $('h12'), h24 = $('h24');\n      const safeText = (value) => value === null || value === undefined ? '\u2014' : String(value);\n      const post = (message) => window.parent.postMessage(message, '*');\n      const setStatus = (text, ready) => { statusText.textContent = text; status.dataset.ready = ready ? 'true' : 'false'; };\n      const clear = (node) => { while (node.firstChild) node.removeChild(node.firstChild); };\n      const el = (tag, className, text) => { const node = document.createElement(tag); if (className) node.className = className; if (text !== undefined) node.textContent = text; return node; };\n\n      // The host's look: its standard theme variables (only these names, as plain values) and its theme.\n      const THEME_KEYS = /^--(color-(background|text|border|ring)-[a-z]+|font-(sans|mono)|font-weight-[a-z]+|font-(text|heading)-[a-z]+-size)$/;\n      const applyHost = (context) => {\n        if (!context || typeof context !== 'object') return;\n        if (context.theme === 'light' || context.theme === 'dark') document.documentElement.dataset.theme = context.theme;\n        const variables = context.styles && context.styles.variables;\n        if (variables && typeof variables === 'object') {\n          Object.entries(variables).forEach(([key, value]) => {\n            if (THEME_KEYS.test(key) && typeof value === 'string' && value.length <= 200 && !/url\\(|expression|[;{}<>]/i.test(value)) document.documentElement.style.setProperty(key, value);\n          });\n        }\n        if (typeof context.timeZone === 'string') state.timeZone = context.timeZone;\n        if (typeof context.locale === 'string') state.locale = context.locale;\n      };\n\n      // Only what the view has checked goes into the message a person sends: an id of plain\n      // characters and two instants it parsed itself, never a title or any other server text.\n      const SAFE_ID = /^[A-Za-z0-9._:-]{1,200}$/;\n      const instant = (value) => { const time = typeof value === 'string' ? Date.parse(value) : NaN; return Number.isFinite(time) ? new Date(time) : null; };\n      const HOLD_ID = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;\n      const pickable = (slot) => {\n        if (!slot || typeof slot.resource_id !== 'string' || !SAFE_ID.test(slot.resource_id)) return null;\n        const start = instant(slot.start); const end = instant(slot.end);\n        if (!start || !end || end <= start) return null;\n        if (slot.hold_id === undefined) return { resource_id: slot.resource_id, start, end };\n        // A held time (slotlock_hold_slots): booking it names the hold, so it needs a plain id.\n        const expires = instant(slot.expires_at);\n        return typeof slot.hold_id === 'string' && HOLD_ID.test(slot.hold_id) && expires\n          ? { resource_id: slot.resource_id, start, end, hold_id: slot.hold_id, expires }\n          : null;\n      };\n      const slotsOf = (data) => {\n        if (!data || typeof data !== 'object' || data.error) return [];\n        // Held time is free for this agent alone until it expires: certain by being held.\n        if (Array.isArray(data.holds)) return data.holds.map(pickable).filter((slot) => slot && slot.hold_id);\n        if (data.coverage?.certainty !== 'certain') return [];\n        const listed = Array.isArray(data.slots) ? data.slots : 'start' in data ? [data] : [];\n        return listed.map(pickable).filter(Boolean);\n      };\n\n      const fmt = (date, options) => {\n        const zone = state.timeZone ? { timeZone: state.timeZone } : {};\n        try { return new Intl.DateTimeFormat(state.locale, { ...options, ...zone }).format(date); }\n        catch { return new Intl.DateTimeFormat(undefined, options).format(date); }\n      };\n      const prefers12 = () => { try { const cycle = new Intl.DateTimeFormat(state.locale, { hour: 'numeric' }).resolvedOptions().hourCycle; return cycle === 'h11' || cycle === 'h12'; } catch { return false; } };\n      const hour12 = () => state.hour12 === undefined ? prefers12() : state.hour12;\n      const dayKey = (date) => fmt(date, { year: 'numeric', month: '2-digit', day: '2-digit' });\n      const dayLabel = (date) => fmt(date, { weekday: 'short', day: 'numeric', month: 'short' });\n      const timeLabel = (date) => fmt(date, { hour: hour12() ? 'numeric' : '2-digit', minute: '2-digit', hour12: hour12() });\n      // The hour as a number in any locale: German formats it as \"10 Uhr\", so read the hour part.\n      const hourOf = (date) => {\n        const zone = state.timeZone ? { timeZone: state.timeZone } : {};\n        let parts;\n        try { parts = new Intl.DateTimeFormat('en-US', { hour: 'numeric', hourCycle: 'h23', ...zone }).formatToParts(date); }\n        catch { parts = new Intl.DateTimeFormat('en-US', { hour: 'numeric', hourCycle: 'h23' }).formatToParts(date); }\n        return Number(parts.find((part) => part.type === 'hour')?.value) % 24;\n      };\n      const minutes = (slot) => Math.round((slot.end - slot.start) / 60000);\n      const lengthLabel = (total) => total < 60 ? total + ' min' : Math.floor(total / 60) + ' h' + (total % 60 ? ' ' + (total % 60) + ' min' : '');\n      const sentence = (slot) => 'Book the slot I picked: ' + (slot.hold_id ? 'hold ' + slot.hold_id + ', ' : '') + 'resource ' + slot.resource_id + ', from ' + slot.start.toISOString() + ' to ' + slot.end.toISOString() + ' (' + dayLabel(slot.start) + ', ' + timeLabel(slot.start) + ' to ' + timeLabel(slot.end) + (state.timeZone ? ' ' + state.timeZone : '') + ').';\n\n      const renderPicker = (slots) => {\n        const resources = [...new Set(slots.map((slot) => slot.resource_id))];\n        const lengths = new Set(slots.map(minutes));\n        clear(pickMeta);\n        if (lengths.size === 1) pickMeta.append(el('span', '', lengthLabel(minutes(slots[0]))));\n        if (resources.length > 1) pickMeta.append(el('span', '', resources.length + ' resources'));\n        pickMeta.append(el('span', '', state.timeZone || Intl.DateTimeFormat().resolvedOptions().timeZone || 'Local time'));\n        const held = slots.filter((slot) => slot.expires).map((slot) => slot.expires).sort((a, b) => a - b)[0];\n        if (held) pickMeta.append(el('span', 'held', 'Held until ' + timeLabel(held)));\n        h12.setAttribute('aria-pressed', String(hour12())); h24.setAttribute('aria-pressed', String(!hour12()));\n        const byDay = new Map();\n        slots.forEach((slot) => { const key = dayKey(slot.start); if (!byDay.has(key)) byDay.set(key, []); byDay.get(key).push(slot); });\n        if (!byDay.has(state.day)) state.day = byDay.keys().next().value;\n        const single = slots.length === 1;\n        $('pickTitle').textContent = single ? 'Next available' : 'Pick a time';\n        clear(days); clear(times); clear(one);\n        days.hidden = single || byDay.size < 2;\n        one.hidden = !single;\n        times.hidden = single;\n        if (single) {\n          if (!state.chosen) state.chosen = slots[0];\n          one.append(el('strong', '', timeLabel(slots[0].start) + '\u2013' + timeLabel(slots[0].end)), el('span', '', fmt(slots[0].start, { weekday: 'long', day: 'numeric', month: 'long' })));\n        } else {\n          byDay.forEach((daySlots, key) => {\n            const first = daySlots[0].start;\n            const button = el('button', 'day');\n            button.type = 'button';\n            button.setAttribute('aria-pressed', String(key === state.day));\n            button.setAttribute('aria-label', dayLabel(first) + ', ' + daySlots.length + (daySlots.length === 1 ? ' time' : ' times'));\n            button.append(el('small', '', fmt(first, { weekday: 'short' })), el('strong', '', fmt(first, { day: 'numeric' })), el('i', '', fmt(first, { month: 'short' })));\n            button.addEventListener('click', () => { state.day = key; render(); });\n            days.append(button);\n          });\n          const parts = [['Morning', (h) => h < 12], ['Afternoon', (h) => h >= 12 && h < 17], ['Evening', (h) => h >= 17]];\n          const daySlots = byDay.get(state.day) || [];\n          parts.forEach(([name, test]) => {\n            const inPart = daySlots.filter((slot) => test(hourOf(slot.start)));\n            if (inPart.length === 0) return;\n            const part = el('section', 'part'); const grid = el('div', 'grid');\n            part.append(el('h2', '', name), grid);\n            inPart.forEach((slot) => {\n              const button = el('button', 'time', timeLabel(slot.start));\n              button.type = 'button';\n              const isChosen = state.chosen && state.chosen.resource_id === slot.resource_id && +state.chosen.start === +slot.start;\n              button.setAttribute('aria-pressed', String(Boolean(isChosen)));\n              button.setAttribute('aria-label', dayLabel(slot.start) + ', ' + timeLabel(slot.start) + ' to ' + timeLabel(slot.end) + (resources.length > 1 ? ', resource ' + (resources.indexOf(slot.resource_id) + 1) : ''));\n              if (resources.length > 1) button.append(el('small', '', 'Resource ' + (resources.indexOf(slot.resource_id) + 1)));\n              else if (lengths.size > 1) button.append(el('small', '', lengthLabel(minutes(slot))));\n              button.disabled = state.sent;\n              button.addEventListener('click', () => { state.chosen = slot; fallback.hidden = true; render(); });\n              grid.append(button);\n            });\n            times.append(part);\n          });\n        }\n        clear(choice);\n        choice.hidden = single;\n        if (state.chosen) {\n          choice.append(el('b', '', dayLabel(state.chosen.start) + ', ' + timeLabel(state.chosen.start) + '\u2013' + timeLabel(state.chosen.end)));\n          if (resources.length > 1) choice.append(document.createTextNode('Resource ' + (resources.indexOf(state.chosen.resource_id) + 1)));\n        } else choice.textContent = 'No time picked';\n        book.disabled = !state.chosen || state.sent;\n        book.dataset.sent = String(state.sent);\n        book.textContent = state.sent ? '\u2713 Sent to your agent' : 'Book this time';\n      };\n      book.addEventListener('click', () => {\n        if (!state.chosen || state.sent) return;\n        state.sent = true;\n        fallback.hidden = true;\n        const text = sentence(state.chosen);\n        const id = state.nextId++;\n        state.pending[id] = text;\n        setStatus('Sent to your agent', true);\n        post({ jsonrpc: '2.0', id, method: 'ui/message', params: { role: 'user', content: { type: 'text', text } } });\n        render();\n      });\n      h12.addEventListener('click', () => { state.hour12 = true; render(); });\n      h24.addEventListener('click', () => { state.hour12 = false; render(); });\n\n      const reportSize = () => {\n        const root = document.documentElement;\n        const size = { width: Math.ceil(root.scrollWidth), height: Math.ceil(root.scrollHeight) };\n        const key = size.width + 'x' + size.height;\n        if (key === state.size) return;\n        state.size = key;\n        post({ jsonrpc: '2.0', method: 'ui/notifications/size-changed', params: size });\n      };\n      const intervalText = (entry) => [entry.start || entry.starts_at, entry.end || entry.ends_at].filter(Boolean).join(' \u2192 ');\n      // A refused call carries no structuredContent (hosts validate it against the tool's\n      // outputSchema); its text content is {\"error\":{\"code\":\u2026}}.\n      const refusalOf = (content) => {\n        const text = Array.isArray(content) ? content.find((part) => part && part.type === 'text')?.text : undefined;\n        try {\n          const parsed = JSON.parse(text);\n          if (parsed && parsed.error && typeof parsed.error === 'object') return { error: parsed.error };\n        } catch {}\n        return { error: { code: 'request_refused' } };\n      };\n      const flatten = (data) => {\n        if (!data || typeof data !== 'object') return [];\n        if (data.error) return [{ title: data.error.code || 'Unable to load', detail: 'The calendar server refused this request.', badge: 'Error' }];\n        if (Array.isArray(data.resources)) return data.resources.flatMap((resource) => {\n          if (Array.isArray(resource.busy)) return resource.busy.map((busy) => ({ title: resource.resource_id, detail: intervalText(busy), badge: resource.coverage?.certainty || 'busy' }));\n          return [{ title: resource.external_ref || resource.id || resource.resource_id, detail: resource.timezone || 'Calendar resource', badge: resource.coverage?.certainty || 'resource' }];\n        });\n        if (Array.isArray(data.slots)) {\n          if (data.coverage?.certainty !== 'certain') return [{ title: 'Availability unproven', detail: 'Required calendar coverage is incomplete.', badge: data.coverage?.certainty || 'uncertain' }];\n          return data.slots.length === 0 ? [{ title: 'No free time', detail: 'Nothing of that length is free in the window.', badge: 'certain' }] : data.slots.map((slot) => ({ title: slot.resource_id, detail: intervalText(slot), badge: 'free' }));\n        }\n        if (Array.isArray(data.holds)) return [{ title: 'Nothing held', detail: 'Every time asked for was taken.', badge: 'refused' }];\n        if (Array.isArray(data.events)) return data.events.map((event) => ({ title: event.title || event.id, detail: intervalText(event), badge: event.status || event.transparency || 'event' }));\n        if (data.event && typeof data.event === 'object') return [{ title: data.event.title || data.event.id, detail: intervalText(data.event), badge: data.event.status || 'event' }];\n        if ('start' in data || 'end' in data) {\n          const coverage = data.coverage && typeof data.coverage === 'object' ? data.coverage : null;\n          const certainty = coverage?.certainty;\n          const completeInterval = typeof data.start === 'string' && typeof data.end === 'string';\n          if (certainty !== 'certain' || !completeInterval) {\n            const reason = typeof coverage?.reason === 'string' ? coverage.reason.replaceAll('_', ' ') : 'Required calendar coverage is incomplete.';\n            return [{ title: 'Availability unproven', detail: reason, badge: certainty || 'uncertain' }];\n          }\n          return [{ title: data.resource_id || 'Next available', detail: intervalText(data), badge: certainty }];\n        }\n        return Object.entries(data).slice(0, 100).map(([key, value]) => ({ title: key, detail: typeof value === 'object' ? JSON.stringify(value) : safeText(value), badge: 'value' }));\n      };\n      const line = (title, detail, badge) => {\n        const row = el('article', 'item');\n        row.append(el('div', 'item-title', safeText(title)), el('div', 'item-detail', safeText(detail)), el('div', 'badge', safeText(badge)));\n        return row;\n      };\n      const render = () => {\n        const slots = slotsOf(state.data);\n        picker.hidden = slots.length === 0;\n        list.hidden = slots.length > 0;\n        if (slots.length > 0) { renderPicker(slots); reportSize(); return; }\n        clear(items);\n        const rows = flatten(state.data).filter((entry) => (entry.title + ' ' + entry.detail + ' ' + entry.badge).toLowerCase().includes(state.query));\n        if (rows.length === 0) items.append(el('p', 'empty', state.data ? 'No rows match this filter.' : 'Waiting for a calendar result.'));\n        else rows.forEach((entry) => items.append(line(entry.title, entry.detail, entry.badge)));\n        summary.textContent = rows.length === 1 ? '1 calendar row' : rows.length + ' calendar rows';\n        raw.textContent = state.data ? JSON.stringify(state.data, null, 2) : 'No result yet.';\n        reportSize();\n      };\n      filter.addEventListener('input', () => { state.query = filter.value.trim().toLowerCase(); render(); });\n      window.addEventListener('message', (event) => {\n        if (event.source !== window.parent) return;\n        const message = event.data;\n        if (!message || message.jsonrpc !== '2.0') return;\n        if (message.id === state.requestId && message.result) {\n          applyHost(message.result.hostContext);\n          post({ jsonrpc: '2.0', method: 'ui/notifications/initialized' });\n          setStatus('Connected', true);\n          render();\n          return;\n        }\n        if (message.id in state.pending) {\n          const text = state.pending[message.id];\n          delete state.pending[message.id];\n          if (message.error) {\n            // Refused or unsupported: the person can still send it, and pick again.\n            state.sent = false;\n            fallbackText.value = text;\n            fallback.hidden = false;\n            setStatus('Not sent', false);\n            render();\n          }\n          return;\n        }\n        if (message.method === 'ui/notifications/tool-result') {\n          const result = message.params || {};\n          state.data = result.structuredContent || (result.isError ? refusalOf(result.content) : null);\n          state.chosen = null; state.sent = false; state.day = null;\n          fallback.hidden = true;\n          setStatus(result.isError ? 'Request refused' : 'Result current', !result.isError);\n          render();\n        }\n        if (message.method === 'ui/notifications/host-context-changed') { applyHost(message.params); render(); }\n      });\n      if (typeof ResizeObserver === 'function') new ResizeObserver(reportSize).observe(document.documentElement);\n      post({ jsonrpc: '2.0', id: state.requestId, method: 'ui/initialize', params: { appInfo: { name: 'slotlock-calendar', version: '1.1.0' }, appCapabilities: { availableDisplayModes: ['inline', 'fullscreen'] }, protocolVersion: '2026-01-26' } });\n    })();\n  </script>\n</body>\n</html>";
 export declare const SLOTLOCK_MCP_APP_RESOURCE: Readonly<{

package/mcp-app.js

@@ -16,16 +16,14 @@ export function clientSupportsSlotlockMcpApp(capabilities) {
     return Array.isArray(mimeTypes) && mimeTypes.includes(SLOTLOCK_MCP_APP_MIME_TYPE);
 }
 /**
- * A static, network-dark calendar view. Dynamic calendar data arrives only through the host's
- * `ui/notifications/tool-result` channel; the template contains no tenant or event data and uses
- * textContent for every untrusted value. Keeping this as reviewed source instead of generated UI
- * also lets MCP hosts inspect and cache the exact resource before rendering it.
+ * A static, network-dark calendar view. Data arrives only through the host's
+ * `ui/notifications/tool-result` channel; the template holds no tenant data and renders untrusted
+ * values with textContent. Reviewed source rather than generated UI, so hosts can inspect and cache
+ * it.
  *
- * A certain slot (from `slotlock_find_available_slots` or `slotlock_find_next_available`) can be
- * picked: the view sends the host one `ui/message` naming it, in a fixed sentence holding only the
- * resource id and the two instants it checked, so the agent books it through the normal path,
- * where Slotlock asks a person to confirm the write if it is set to. The view itself never calls a
- * tool, and every write tool is visible to the model only.
+ * A certain slot can be picked: the view sends one `ui/message` naming only the resource id and its
+ * two instants, so the agent books it through the normal path (with confirmation if configured).
+ * The view never calls a tool.
  */
 export const SLOTLOCK_MCP_APP_HTML = `<!doctype html>
 <html lang="en">

package/mcp-modern.d.ts

@@ -16,11 +16,10 @@ export interface ModernMcpRefusal {
     data?: Record<string, unknown>;
 }
 /**
- * Validate a 2026-07-28 request's `_meta` envelope and the HTTP headers that mirror its body, in the
- * specification's order: the required `_meta` fields (-32602, basic §_meta), `MCP-Protocol-Version`
- * against the body (-32020), a revision the server implements (-32022, basic/versioning), then
- * `Mcp-Method` and `Mcp-Name` against the body, the latter after Base64-sentinel decoding (-32020,
- * streamable-http §Server Validation). Every refusal is HTTP 400.
+ * Validate a 2026-07-28 request's `_meta` envelope and the headers mirroring its body, in the
+ * specification's order: required `_meta` fields (-32602), `MCP-Protocol-Version` against the body
+ * (-32020), a supported revision (-32022), then `Mcp-Method` and `Mcp-Name` against the body
+ * (-32020). Every refusal is HTTP 400.
  */
 export declare function checkModernMcpRequest(args: {
     headers: Headers;
@@ -40,13 +39,13 @@ export declare function sha256Hex(value: string): string;
 /** Validate and copy the HMAC keys that seal `requestState`: 1-8 keys of at least 32 bytes each. */
 export declare function stateSecrets(secrets: readonly (string | Uint8Array)[]): Buffer[];
 /**
- * Seal a JSON payload for a client to carry and echo: `v1.<payload>.<HMAC-SHA256>`, both base64url.
- * It is integrity-protected, not encrypted, so it must never hold anything the client may not see.
+ * Seal a JSON payload for a client to echo: `v1.<payload>.<HMAC-SHA256>`, base64url.
+ * Integrity-protected, not encrypted: never put anything the client may not see in it.
  */
 export declare function sealRequestState(key: Buffer, payload: Record<string, unknown>): string;
 /**
- * The payload of a state this server sealed with any of `keys`, and the key that verified it; `null`
- * for anything else. The MAC is checked in constant time before the payload is parsed.
+ * The payload of a state this server sealed with any of `keys`, and the verifying key; `null`
+ * otherwise. The MAC is checked in constant time before parsing.
  */
 export declare function openRequestState(keys: readonly Buffer[], state: unknown): {
     payload: Record<string, unknown>;
@@ -69,9 +68,9 @@ export interface McpEventStream {
     close(): void;
 }
 /**
- * An SSE response (streamable-http §Receiving Messages): never cached, not buffered by a reverse
- * proxy (`X-Accel-Buffering: no`). `onCancel` runs once when the reader goes away first — the client
- * closed the stream, which on HTTP is how it cancels the request.
+ * An SSE response (streamable-http §Receiving Messages): uncached and unbuffered by proxies
+ * (`X-Accel-Buffering: no`). `onCancel` runs once if the reader leaves first, which is how an HTTP
+ * client cancels.
  */
 export declare function openMcpEventStream(onCancel: () => void): McpEventStream;
 /** W3C Trace Context (and Baggage) a request carried, validated; handed to the backend as is. */
@@ -81,9 +80,8 @@ export interface SlotlockTraceContext {
     baggage?: string;
 }
 /**
- * Trace context from the request's `_meta` (MCP reserves `traceparent`, `tracestate` and `baggage`
- * there) or, when `_meta` has none, from the HTTP headers of the same names. One source only, never
- * a mix; an invalid `traceparent` discards the context, and an invalid `tracestate` or `baggage` is
- * dropped on its own (W3C Trace Context §3.3, Baggage §3.3).
+ * Trace context from `_meta` (MCP reserves `traceparent`, `tracestate` and `baggage` there) or, if
+ * absent, the HTTP headers; never a mix. An invalid `traceparent` discards it all; an invalid
+ * `tracestate` or `baggage` is dropped alone (W3C Trace Context §3.3, Baggage §3.3).
  */
 export declare function traceContextFrom(meta: Record<string, unknown> | undefined, headers: Headers): SlotlockTraceContext | undefined;