slotlock 0.7.0 → 0.8.0

package/CHANGELOG.md

@@ -3,6 +3,50 @@
 All notable changes follow [Keep a Changelog](https://keepachangelog.com/en/1.1.0/) and semantic
 versioning.
 
+## 0.8.0 - 2026-11-10
+
+### Added
+
+- **Usage** in the dashboard's navigation on hosted Slotlock, with or without Stripe: the plan (or
+  the default it moves to, and when) against its limits, this month's operations, bookings and
+  holds against the quotas, and which key used what. Without Stripe, an owner asks for another plan
+  at `SLOTLOCK_PLAN_CONTACT`. `createSlotlockDashboard` takes `plans` (`plan`, `enrol`,
+  `planDefault`, `contact`); `billing` still brings its own.
+
+### Changed
+
+- The Overview leads with what needs a person (approvals waiting, a failed payment, a quota nearly
+  or fully used, a coming plan the workspace is over), then the week ahead and the activity as
+  sentences ("Booking agent booked room-3", passive for what Slotlock did, repeats counted on one
+  line), never a change's type. Get started walks a new workspace from its first resource to an
+  agent that has used a key, folds to one line half way and goes once done. The plan's use and the
+  MCP and A2A endpoints (with the Claude Code command) sit beside the activity.
+- The Plan page is Usage, and a limit refused says "see Usage".
+
+- The dashboard assistant is a chat. A reply streams into the page as the model writes it (the
+  dashboard's own script reads `POST <root>/assistant/stream`, one JSON object a line; the CSP
+  allows `connect-src 'self'` for it), with a Stop button. Without script, a message still posts
+  and the page shows the reply. Replies are Markdown, rendered by one renderer on the server and,
+  from its source, in the page as they stream: everything escaped first, links http(s) only. The
+  page is one centred column, with the box at the centre when the conversation is empty and five
+  things to ask beside it. Each run of reads folds into one line ("Read resources, checked
+  availability") that names, in words, a step that could not run and why. A proposed change is a
+  card that leads with when, which resource and its title, and keeps every other argument one click
+  away; its button says what it does ("Book", "Cancel booking"), and once decided it folds into
+  one line. A provider failure ends the conversation with Retry.
+- Settings is a page a section (Assistant, Endpoints, Hours, Account). The assistant's section
+  shows what is connected, with Test and its result in place, then one form: the provider as tiles
+  (a named one brings its own URL and API format; Custom takes both), the model with Load models,
+  and the key as its last four characters with Replace. Disconnect stands apart.
+
+### Fixed
+
+- A message sent twice (a double click, a reload) no longer ends on "That form was already
+  sent": the second lands on the conversation, and the turn runs once. The same holds for
+  approving, declining and New conversation.
+- A success notice (Saved, Connected) was shown in the error colour: notices are alerts only on
+  an error page, and a status otherwise.
+
 ## 0.7.0 - 2026-11-10
 
 ### Added

package/assistant.d.ts

@@ -191,6 +191,11 @@ interface ModelRequest {
     force?: string;
     fetch: typeof fetch;
     signal: AbortSignal;
+    /**
+     * Stream the answer: called with each piece of its text as it arrives, in order; the pieces join
+     * to the answer's text. Without it the call asks for one JSON answer.
+     */
+    onText?: (delta: string) => void;
 }
 /** One model call. Throws SlotlockAssistantProviderError, whose message never holds the key. */
 export declare function callSlotlockAssistantModel(request: ModelRequest): Promise<SlotlockAssistantModelTurn>;
@@ -257,7 +262,30 @@ export interface SlotlockAssistantTurnOptions {
         ok: false;
         code: string;
     }>;
+    /** Stream the turn: each model call's text as it arrives, and each tool call before and after it runs. */
+    onEvent?: (event: SlotlockAssistantTurnEvent) => void;
+    /** The member's Stop: the turn ends at once, keeping what it has, and says it stopped. */
+    signal?: AbortSignal;
 }
+/**
+ * What a streamed turn tells as it goes, in order: text as the model writes it; then each tool call
+ * (`read` runs, `write` is proposed, `unknown` is refused) before it runs, and its result after.
+ */
+export type SlotlockAssistantTurnEvent = {
+    type: 'text';
+    delta: string;
+} | {
+    type: 'call';
+    id: string;
+    name: string;
+    use: 'read' | 'write' | 'unknown';
+} | {
+    type: 'result';
+    id: string;
+    name: string;
+    ok: boolean;
+    actionId?: string;
+};
 export interface SlotlockAssistantTurnResult {
     /** The entries this turn added. */
     added: SlotlockAssistantEntry[];
@@ -267,7 +295,8 @@ export interface SlotlockAssistantTurnResult {
 /**
  * One member message: call the model, run what it reads, keep what it would write, and call it
  * again with the results, up to `maxSteps` calls. Only the offered tools run, whatever the model
- * names; everything else is answered `tool_not_available`.
+ * names; everything else is answered `tool_not_available`. With `onEvent` each model call streams;
+ * once `signal` aborts, no model call or tool goes on, and every call kept has its result.
  */
 export declare function runSlotlockAssistantTurn(options: SlotlockAssistantTurnOptions): Promise<SlotlockAssistantTurnResult>;
 /**

package/assistant.js

@@ -5,7 +5,9 @@
 // Nothing the model says changes the list of tools.
 //
 // Request formats as the vendors' official TypeScript SDKs describe them: @anthropic-ai/sdk 1.3.0
-// and openai 7.45.1 (read from the npm registry 2026-10-28).
+// and openai 7.45.1 (read from the npm registry 2026-10-28). Streamed answers as Anthropic's
+// "Streaming messages" page, the Chat Completions chunk object, @anthropic-ai/sdk 1.8.0 and openai
+// 7.55.0 describe them, read as server-sent events by the WHATWG HTML standard (all read 2026-11-10).
 //
 // The API key is sealed with AES-256-GCM (WebCrypto) under a key HKDF-SHA-256-derived from
 // SLOTLOCK_ASSISTANT_SECRET, with the tenant as additional data: a sealed key copied to another
@@ -510,14 +512,279 @@ async function readBounded(response) {
     }
     return Buffer.concat(chunks).toString('utf8');
 }
+/** What an HTTP status from a model call means. */
+function statusReason(status) {
+    return status === 401 || status === 403
+        ? 'refused_key'
+        : status === 404
+            ? 'not_found'
+            : status === 429
+                ? 'rate_limited'
+                : status === 408 || status === 504
+                    ? 'timeout'
+                    : 'unavailable';
+}
+/** The HTTP status each Anthropic error type stands for ("Claude API errors"), for one sent mid-stream. */
+const ANTHROPIC_ERROR_STATUS = new Map([
+    ['invalid_request_error', 400],
+    ['authentication_error', 401],
+    ['billing_error', 402],
+    ['permission_error', 403],
+    ['not_found_error', 404],
+    ['request_too_large', 413],
+    ['rate_limit_error', 429],
+    ['api_error', 500],
+    ['timeout_error', 504],
+    ['overloaded_error', 529],
+]);
+/**
+ * Server-sent events as the WHATWG HTML standard interprets them: lines end at CRLF, LF or CR; a
+ * line starting with `:` is a comment; one space after the field's colon is dropped; `data` values
+ * join with LF; a blank line dispatches; other fields are ignored. Text comes in any pieces; an
+ * event the stream ends inside is never dispatched. `push` is true once `dispatch` was (stop).
+ */
+function sseLines(dispatch) {
+    let line = '';
+    let afterCR = false;
+    let event = '';
+    let data = '';
+    let done = false;
+    const take = (field) => {
+        if (field === '') {
+            if (data !== '')
+                done = dispatch(event || 'message', data.slice(0, -1));
+            event = '';
+            data = '';
+            return;
+        }
+        if (field.startsWith(':'))
+            return;
+        const colon = field.indexOf(':');
+        const name = colon === -1 ? field : field.slice(0, colon);
+        const value = colon === -1 ? '' : field.slice(field.charCodeAt(colon + 1) === 0x20 ? colon + 2 : colon + 1);
+        if (name === 'event')
+            event = value;
+        else if (name === 'data')
+            data += `${value}\n`;
+    };
+    return (text) => {
+        let start = 0;
+        for (let index = 0; index < text.length && !done; index += 1) {
+            const code = text.charCodeAt(index);
+            if (code === 0x0a && afterCR) {
+                // The LF of a CRLF whose CR ended the line, perhaps in the previous piece.
+                afterCR = false;
+                start = index + 1;
+                continue;
+            }
+            afterCR = code === 0x0d;
+            if (code !== 0x0a && code !== 0x0d)
+                continue;
+            take(line + text.slice(start, index));
+            line = '';
+            start = index + 1;
+        }
+        if (!done)
+            line += text.slice(start);
+        return done;
+    };
+}
+/**
+ * A streamed body, decoded as its bytes arrive (a character split across chunks waits for the
+ * rest) and read to `onEvent` until it answers true, within MAX_RESPONSE_BYTES. An abort cancels
+ * the read at once and is a timeout, even with events still in hand.
+ */
+async function readEvents(response, signal, onEvent) {
+    if (!response.body)
+        return;
+    const reader = response.body.getReader();
+    const cancel = () => {
+        reader.cancel().catch(() => undefined);
+    };
+    signal.addEventListener('abort', cancel, { once: true });
+    // UTF-8, without a leading byte order mark, as the standard decodes a stream.
+    const decoder = new TextDecoder();
+    const push = sseLines((event, data) => {
+        if (signal.aborted)
+            throw new SlotlockAssistantProviderError('timeout');
+        return onEvent(event, data);
+    });
+    let size = 0;
+    try {
+        for (;;) {
+            if (signal.aborted)
+                throw new SlotlockAssistantProviderError('timeout');
+            let chunk;
+            try {
+                chunk = await reader.read();
+            }
+            catch {
+                throw new SlotlockAssistantProviderError(signal.aborted ? 'timeout' : 'bad_answer');
+            }
+            if (chunk.done) {
+                if (signal.aborted)
+                    throw new SlotlockAssistantProviderError('timeout');
+                return;
+            }
+            size += chunk.value.byteLength;
+            if (size > MAX_RESPONSE_BYTES)
+                throw new SlotlockAssistantProviderError('bad_answer');
+            if (push(decoder.decode(chunk.value, { stream: true })))
+                return;
+        }
+    }
+    finally {
+        signal.removeEventListener('abort', cancel);
+        // Whatever follows the last event, or a body given up on, is not read.
+        cancel();
+    }
+}
+const parsedOr = (json, fallback) => {
+    try {
+        return JSON.parse(json);
+    }
+    catch {
+        return fallback;
+    }
+};
+/**
+ * An Anthropic stream: content blocks by index, text from `text_delta`s, a `tool_use`'s input from
+ * its `input_json_delta` fragments, parsed once whole; ended by `message_stop`. `ping` and event
+ * types this does not know are passed over; `error` names its error as an HTTP status would.
+ */
+function anthropicStream(emit) {
+    const blocks = new Map();
+    let stopped = false;
+    return {
+        event(name, data) {
+            const body = parsedOr(data, undefined);
+            if (name === 'error' || (isRecord(body) && body.type === 'error')) {
+                const type = isRecord(body) && isRecord(body.error) ? body.error.type : undefined;
+                const status = typeof type === 'string' ? ANTHROPIC_ERROR_STATUS.get(type) : undefined;
+                throw new SlotlockAssistantProviderError(status === undefined ? 'unavailable' : statusReason(status));
+            }
+            if (!isRecord(body)) {
+                if (name === 'ping')
+                    return false;
+                throw new SlotlockAssistantProviderError('bad_answer');
+            }
+            const index = typeof body.index === 'number' ? body.index : undefined;
+            if (body.type === 'content_block_start' && index !== undefined && isRecord(body.content_block)) {
+                const block = body.content_block;
+                if (block.type === 'text') {
+                    blocks.set(index, 'text');
+                    if (typeof block.text === 'string')
+                        emit(block.text);
+                }
+                else if (block.type === 'tool_use' && typeof block.id === 'string' && typeof block.name === 'string') {
+                    blocks.set(index, { id: block.id, name: block.name, input: block.input, json: '' });
+                }
+            }
+            else if (body.type === 'content_block_delta' && index !== undefined && isRecord(body.delta)) {
+                const block = blocks.get(index);
+                const delta = body.delta;
+                if (block === 'text' && delta.type === 'text_delta' && typeof delta.text === 'string')
+                    emit(delta.text);
+                if (typeof block === 'object' && delta.type === 'input_json_delta' && typeof delta.partial_json === 'string') {
+                    block.json += delta.partial_json;
+                }
+            }
+            else if (body.type === 'message_stop') {
+                stopped = true;
+            }
+            return stopped;
+        },
+        complete: () => stopped,
+        calls: () => [...blocks.entries()]
+            .sort(([a], [b]) => a - b)
+            .flatMap(([, block]) => block === 'text'
+            ? []
+            : [{ id: block.id, name: block.name, input: block.json === '' ? block.input : parsedOr(block.json, null) }]),
+    };
+}
+/**
+ * A Chat Completions stream: chunks whose first choice's delta carries `content` and `tool_calls`
+ * fragments, each call assembled by its `index` (id and name arrive once, arguments in pieces);
+ * complete at a `finish_reason`, ended by `data: [DONE]`. A chunk with an `error` is a failure.
+ */
+function openaiStream(emit) {
+    const slots = new Map();
+    let finished = false;
+    return {
+        event(name, data) {
+            if (data === '[DONE]') {
+                finished = true;
+                return true;
+            }
+            const body = parsedOr(data, undefined);
+            if (!isRecord(body))
+                throw new SlotlockAssistantProviderError('bad_answer');
+            if (name === 'error' || body.error)
+                throw new SlotlockAssistantProviderError('unavailable');
+            for (const choice of Array.isArray(body.choices) ? body.choices : []) {
+                if (!isRecord(choice) || (choice.index ?? 0) !== 0)
+                    continue;
+                const delta = isRecord(choice.delta) ? choice.delta : {};
+                if (typeof delta.content === 'string')
+                    emit(delta.content);
+                for (const [position, fragment] of (Array.isArray(delta.tool_calls) ? delta.tool_calls : []).entries()) {
+                    if (!isRecord(fragment))
+                        continue;
+                    // A server that sends whole calls without an index sends them in order.
+                    const index = typeof fragment.index === 'number' && Number.isSafeInteger(fragment.index) && fragment.index >= 0
+                        ? fragment.index
+                        : position;
+                    const slot = slots.get(index) ?? { args: '' };
+                    slots.set(index, slot);
+                    const fn = isRecord(fragment.function) ? fragment.function : {};
+                    if (typeof fragment.id === 'string' && fragment.id !== '')
+                        slot.id = fragment.id;
+                    if (typeof fn.name === 'string' && fn.name !== '')
+                        slot.name = fn.name;
+                    if (typeof fn.arguments === 'string')
+                        slot.args += fn.arguments;
+                }
+                if (typeof choice.finish_reason === 'string')
+                    finished = true;
+            }
+            return false;
+        },
+        complete: () => finished,
+        calls: () => [...slots.entries()]
+            .sort(([a], [b]) => a - b)
+            .flatMap(([index, slot]) => slot.name === undefined
+            ? []
+            : [{ id: slot.id ?? `call_${index}`, name: slot.name, input: parsedOr(slot.args || '{}', null) }]),
+    };
+}
+/** Text to `onText`, within MAX_MODEL_TEXT: what it was given is the answer's text. */
+function textSink(onText) {
+    let text = '';
+    return {
+        emit(delta) {
+            const kept = delta.slice(0, MAX_MODEL_TEXT - text.length);
+            if (kept === '')
+                return;
+            text += kept;
+            try {
+                onText(kept);
+            }
+            catch {
+                // Showing the answer never changes it.
+            }
+        },
+        text: () => text,
+    };
+}
+const isEventStream = (response) => (response.headers.get('content-type') ?? '').split(';')[0]?.trim().toLowerCase() === 'text/event-stream';
 /** One model call. Throws SlotlockAssistantProviderError, whose message never holds the key. */
 export async function callSlotlockAssistantModel(request) {
-    const { model } = request;
+    const { model, onText } = request;
     const anthropic = model.provider === 'anthropic';
     const url = anthropic ? `${model.baseUrl}/v1/messages` : `${model.baseUrl}/chat/completions`;
     const headers = {
         'content-type': 'application/json',
-        accept: 'application/json',
+        accept: onText ? 'text/event-stream' : 'application/json',
         'user-agent': 'slotlock-dashboard-assistant',
     };
     if (anthropic) {
@@ -528,12 +795,13 @@ export async function callSlotlockAssistantModel(request) {
     else if (model.apiKey) {
         headers.authorization = `Bearer ${model.apiKey}`;
     }
+    const body = anthropic ? anthropicBody(request) : openaiBody(request);
     let response;
     try {
         response = await request.fetch(url, {
             method: 'POST',
             headers,
-            body: JSON.stringify(anthropic ? anthropicBody(request) : openaiBody(request)),
+            body: JSON.stringify(onText ? { ...body, stream: true } : body),
             // Never follow a redirect: it would carry the key elsewhere.
             redirect: 'manual',
             signal: request.signal,
@@ -548,20 +816,20 @@ export async function callSlotlockAssistantModel(request) {
     }
     if (!response.ok) {
         await response.body?.cancel().catch(() => undefined);
-        const status = response.status;
-        throw new SlotlockAssistantProviderError(status === 401 || status === 403
-            ? 'refused_key'
-            : status === 404
-                ? 'not_found'
-                : status === 429
-                    ? 'rate_limited'
-                    : status === 408 || status === 504
-                        ? 'timeout'
-                        : 'unavailable', status);
+        throw new SlotlockAssistantProviderError(statusReason(response.status), response.status);
     }
-    let body;
+    const sink = onText ? textSink(onText) : undefined;
+    if (sink && isEventStream(response)) {
+        const answer = anthropic ? anthropicStream(sink.emit) : openaiStream(sink.emit);
+        await readEvents(response, request.signal, answer.event);
+        if (!answer.complete())
+            throw new SlotlockAssistantProviderError('bad_answer');
+        return { text: sink.text(), calls: answer.calls() };
+    }
+    // One JSON answer: asked for, or sent by a server that does not stream.
+    let answer;
     try {
-        body = JSON.parse(await readBounded(response));
+        answer = JSON.parse(await readBounded(response));
     }
     catch (error) {
         if (error instanceof SlotlockAssistantProviderError)
@@ -570,7 +838,8 @@ export async function callSlotlockAssistantModel(request) {
             throw new SlotlockAssistantProviderError('timeout');
         throw new SlotlockAssistantProviderError('bad_answer');
     }
-    const turn = anthropic ? readAnthropic(body) : readOpenai(body);
+    const turn = anthropic ? readAnthropic(answer) : readOpenai(answer);
+    sink?.emit(turn.text);
     return { text: turn.text.slice(0, MAX_MODEL_TEXT), calls: turn.calls };
 }
 /**
@@ -692,16 +961,66 @@ const toolText = (value) => {
 /**
  * One member message: call the model, run what it reads, keep what it would write, and call it
  * again with the results, up to `maxSteps` calls. Only the offered tools run, whatever the model
- * names; everything else is answered `tool_not_available`.
+ * names; everything else is answered `tool_not_available`. With `onEvent` each model call streams;
+ * once `signal` aborts, no model call or tool goes on, and every call kept has its result.
  */
 export async function runSlotlockAssistantTurn(options) {
     const tools = slotlockAssistantTools();
     const byName = new Map(tools.map((tool) => [tool.name, tool]));
     const maxSteps = Math.max(1, Math.min(options.maxSteps ?? SLOTLOCK_ASSISTANT_MAX_STEPS, 20));
     const turnSignal = AbortSignal.timeout(options.turnTimeoutMs);
+    const { onEvent, signal: stop } = options;
     const added = [];
+    const tell = (event) => {
+        try {
+            onEvent?.(event);
+        }
+        catch {
+            // Showing the turn never changes it.
+        }
+    };
+    const stopped = () => {
+        added.push({ role: 'note', text: 'Stopped.' });
+        return { added };
+    };
+    const run = async (call, tool, index) => {
+        if (!tool || index >= MAX_CALLS_PER_STEP) {
+            return {
+                id: call.id,
+                name: call.name,
+                content: toolText({ error: { code: tool ? 'too_many_calls' : 'tool_not_available' } }),
+                error: true,
+            };
+        }
+        if (tool.use === 'read') {
+            const outcome = await options.read(tool.name, call.input);
+            return {
+                id: call.id,
+                name: call.name,
+                content: toolText(outcome.ok ? outcome.data : { error: { code: outcome.code, ...(outcome.details ?? {}) } }),
+                error: !outcome.ok,
+            };
+        }
+        const proposed = await options.propose(tool.name, call.input);
+        return proposed.ok
+            ? {
+                id: call.id,
+                name: call.name,
+                content: toolText({
+                    status: 'proposed',
+                    action_id: proposed.actionId,
+                    note: 'Not run. The member sees this change and may approve it; the result comes back as a dashboard note.',
+                }),
+                error: false,
+                action: proposed.actionId,
+            }
+            : { id: call.id, name: call.name, content: toolText({ error: { code: proposed.code } }), error: true };
+    };
     for (let step = 0; step < maxSteps; step += 1) {
+        if (stop?.aborted)
+            return stopped();
         let turn;
+        let streamed = '';
         try {
             turn = await callSlotlockAssistantModel({
                 model: options.model,
@@ -709,10 +1028,24 @@ export async function runSlotlockAssistantTurn(options) {
                 entries: [...options.entries, ...added],
                 tools,
                 fetch: options.fetch,
-                signal: AbortSignal.any([turnSignal, AbortSignal.timeout(options.timeoutMs)]),
+                signal: AbortSignal.any([turnSignal, AbortSignal.timeout(options.timeoutMs), ...(stop ? [stop] : [])]),
+                ...(onEvent
+                    ? {
+                        onText: (delta) => {
+                            streamed += delta;
+                            tell({ type: 'text', delta });
+                        },
+                    }
+                    : {}),
             });
         }
         catch (error) {
+            if (stop?.aborted) {
+                // The text shown so far stays; calls of a reply cut short do not, as none has a result.
+                if (streamed !== '')
+                    added.push({ role: 'assistant', text: streamed, calls: [] });
+                return stopped();
+            }
             added.push({ role: 'note', text: slotlockAssistantProviderMessage(error) });
             return { added, failure: error };
         }
@@ -726,48 +1059,28 @@ export async function runSlotlockAssistantTurn(options) {
             return { added };
         const results = [];
         for (const [index, call] of calls.entries()) {
-            const tool = byName.get(call.name);
-            if (!tool || index >= MAX_CALLS_PER_STEP) {
-                results.push({
-                    id: call.id,
-                    name: call.name,
-                    content: toolText({ error: { code: tool ? 'too_many_calls' : 'tool_not_available' } }),
-                    error: true,
-                });
+            if (stop?.aborted) {
+                // Not run: answered, so the model is never sent a call without its result.
+                results.push({ id: call.id, name: call.name, content: toolText({ error: { code: 'stopped' } }), error: true });
                 continue;
             }
-            if (tool.use === 'read') {
-                const outcome = await options.read(tool.name, call.input);
-                results.push({
-                    id: call.id,
-                    name: call.name,
-                    content: toolText(outcome.ok ? outcome.data : { error: { code: outcome.code, ...(outcome.details ?? {}) } }),
-                    error: !outcome.ok,
-                });
-                continue;
-            }
-            const proposed = await options.propose(tool.name, call.input);
-            results.push(proposed.ok
-                ? {
-                    id: call.id,
-                    name: call.name,
-                    content: toolText({
-                        status: 'proposed',
-                        action_id: proposed.actionId,
-                        note: 'Not run. The member sees this change and may approve it; the result comes back as a dashboard note.',
-                    }),
-                    error: false,
-                    action: proposed.actionId,
-                }
-                : {
-                    id: call.id,
-                    name: call.name,
-                    content: toolText({ error: { code: proposed.code } }),
-                    error: true,
-                });
+            const tool = byName.get(call.name);
+            const use = !tool ? 'unknown' : tool.use === 'read' ? 'read' : 'write';
+            tell({ type: 'call', id: call.id, name: call.name, use });
+            const result = await run(call, tool, index);
+            results.push(result);
+            tell({
+                type: 'result',
+                id: result.id,
+                name: result.name,
+                ok: !result.error,
+                ...(result.action !== undefined ? { actionId: result.action } : {}),
+            });
         }
         added.push({ role: 'tool', results });
     }
+    if (stop?.aborted)
+        return stopped();
     added.push({
         role: 'note',
         text: `The assistant stopped after ${maxSteps} steps. Ask again, or more narrowly, to go on.`,

package/dashboard-assistant-ui.d.ts

@@ -0,0 +1,21 @@
+/** How a step reads while it runs, once it has, and when it could not. */
+export type SlotlockAssistantStepState = 'run' | 'ok' | 'bad';
+/** A tool step in plain words: "Checking availability…", "Checked availability", "Couldn't check availability". */
+export declare function slotlockAssistantStepLabel(name: string, title: string, state: SlotlockAssistantStepState, write?: boolean): string;
+/** The verb a proposed change's card is approved with, and whether it removes something. */
+export declare function slotlockAssistantActionVerb(operation: string): {
+    verb: string;
+    busy: string;
+    done: string;
+    danger: boolean;
+};
+/** The chat's styles: one centred column, the composer docked under it, quiet steps and cards. */
+export declare const SLOTLOCK_ASSISTANT_CSS = "\n.assistant-page { display: grid; }\n.assistant { position: relative; display: flex; flex-direction: column; width: min(100%, 720px); margin: 0 auto; min-height: calc(100dvh - 180px); }\n.assistant .thread { flex: 1; }\n.assistant[data-empty] { justify-content: center; padding-bottom: 12vh; }\n.assistant[data-empty] .thread { display: none; }\n.assistant[data-empty] .dock { order: 1; position: static; padding: 0; background: none; }\n.assistant[data-empty] .assistant-start { order: 2; padding-top: var(--space-3); }\n.assistant:not([data-empty]) .assistant-start { display: none; }\n.chips { display: flex; flex-wrap: wrap; justify-content: center; gap: var(--space-2); }\n.chips form { margin: 0; }\n.chip { display: inline-flex; align-items: center; gap: 6px; height: 32px; padding: 0 var(--space-3); border-radius: var(--radius-full); border: 1px solid var(--line); background: var(--surface); color: var(--ink-2); font: inherit; font-size: var(--text-md); cursor: pointer; transition: background var(--fast) var(--ease), border-color var(--fast) var(--ease); }\n.chip:hover { background: var(--hover); border-color: var(--line-strong); color: var(--ink); }\n.thread { list-style: none; margin: 0; padding: var(--space-2) 0 var(--space-6); display: grid; gap: var(--space-6); align-content: start; }\n.turn { margin: 0; min-width: 0; }\n.turn.mine { justify-self: end; max-width: 80%; }\n.bubble { padding: 10px 14px; border-radius: 18px; background: var(--sunken); color: var(--ink); font-size: var(--text-lg); line-height: 1.5; white-space: pre-wrap; overflow-wrap: anywhere; }\n.turn.bot { justify-self: stretch; }\n.prose { max-width: 68ch; color: var(--ink); font-size: var(--text-lg); line-height: 1.6; overflow-wrap: anywhere; }\n.prose > :first-child { margin-top: 0; }\n.prose > :last-child { margin-bottom: 0; }\n.prose p { margin: 0 0 var(--space-3); color: inherit; }\n.prose strong { font-weight: 600; }\n.prose h4 { margin: var(--space-4) 0 var(--space-2); font-size: var(--text-lg); font-weight: 600; }\n.prose ul, .prose ol { margin: 0 0 var(--space-3); padding-left: 20px; }\n.prose li { margin: 4px 0; }\n.prose li > ul, .prose li > ol { margin: 4px 0 0; }\n.prose a { color: var(--accent); text-underline-offset: 2px; }\n.prose code { font: 400 12.5px/1.4 var(--mono); background: var(--sunken); border-radius: 4px; padding: 1px 5px; }\n.prose pre { margin: 0 0 var(--space-3); padding: var(--space-3); background: var(--sunken); border: 1px solid var(--line); border-radius: var(--radius); overflow-x: auto; }\n.prose pre code { background: none; padding: 0; font-size: 12.5px; }\n.prose blockquote { margin: 0 0 var(--space-3); padding-left: var(--space-3); border-left: 2px solid var(--line-strong); color: var(--ink-2); }\n.prose hr { border: 0; border-top: 1px solid var(--line); margin: var(--space-4) 0; }\n.md-table { overflow-x: auto; margin: 0 0 var(--space-3); }\n.md-table table { border-collapse: collapse; font-size: var(--text-md); min-width: 50%; }\n.md-table table { width: auto; }\n.md-table th { font: 600 var(--text-md)/1.4 var(--font); text-transform: none; letter-spacing: 0; background: none; text-align: left; color: var(--ink-2); padding: 6px 16px 6px 0; border-bottom: 1px solid var(--line); white-space: nowrap; }\n.md-table td { padding: 6px 16px 6px 0; border-bottom: 1px solid var(--line-soft); vertical-align: top; }\n.md-table tr:last-child td { border-bottom: 0; }\n.change details.more { margin: 0; }\n.change details.more > summary { cursor: pointer; color: var(--ink-3); font-size: var(--text-sm); list-style: none; }\n.change details.more > summary::-webkit-details-marker { display: none; }\n.change details.more > summary:hover { color: var(--ink-2); }\n.change details.more[open] > summary { margin-bottom: var(--space-2); }\n.turn.steps { justify-self: start; }\ndetails.steps > summary { list-style: none; display: inline-flex; align-items: center; gap: 6px; cursor: pointer; color: var(--ink-3); font-size: var(--text-md); padding: 2px 0; }\ndetails.steps > summary::-webkit-details-marker { display: none; }\ndetails.steps > summary::after { content: \"\"; width: 6px; height: 6px; border-right: 1.5px solid currentColor; border-bottom: 1.5px solid currentColor; transform: rotate(-45deg); transition: transform var(--fast) var(--ease); margin-left: 2px; }\ndetails.steps[open] > summary::after { transform: rotate(45deg); }\ndetails.steps > summary:hover { color: var(--ink-2); }\ndetails.steps.has-bad > summary::before { content: \"\"; width: 6px; height: 6px; border-radius: 50%; background: var(--bad); }\n.step-list { list-style: none; margin: var(--space-2) 0 0; padding: 0 0 0 var(--space-3); border-left: 1px solid var(--line); display: grid; gap: 6px; }\n.step { display: flex; align-items: baseline; gap: var(--space-2); font-size: var(--text-md); color: var(--ink-2); }\n.step::before { content: \"\"; flex: none; width: 7px; height: 7px; border-radius: 50%; background: var(--good); transform: translateY(-1px); }\n.step.bad::before { background: var(--bad); }\n.step.run::before { background: var(--ink-3); }\n.step .why { color: var(--ink-3); font-size: var(--text-sm); }\n.live-steps { display: grid; gap: 6px; }\n.live-steps .step.run, .thinking { background: linear-gradient(90deg, var(--ink-3) 0%, var(--ink) 50%, var(--ink-3) 100%); background-size: 200% 100%; -webkit-background-clip: text; background-clip: text; color: transparent; animation: assistant-shimmer 1.6s linear infinite; }\n.thinking { font-size: var(--text-md); justify-self: start; }\n@keyframes assistant-shimmer { from { background-position: 100% 0; } to { background-position: -100% 0; } }\n.prose.streaming > :last-child::after { content: \"\"; display: inline-block; width: 8px; height: 8px; margin-left: 4px; border-radius: 50%; background: var(--ink-3); vertical-align: baseline; animation: assistant-pulse 1s ease-in-out infinite; }\n@keyframes assistant-pulse { 50% { opacity: 0.25; } }\n.turn.note { color: var(--ink-3); font-size: var(--text-md); }\n.turn.error { display: flex; align-items: center; justify-content: space-between; gap: var(--space-3); padding: 10px 12px; border: 1px solid var(--bad-line); background: var(--bad-wash); border-radius: var(--radius); font-size: var(--text-md); color: var(--ink); }\n.turn.error::before { content: \"\"; flex: none; width: 8px; height: 8px; border-radius: 50%; background: var(--bad); }\n.turn.error > span { flex: 1; }\n.turn.error form, .turn.note form { margin: 0; }\n.text-button { appearance: none; border: 0; background: none; padding: 0; font: inherit; font-size: var(--text-md); color: var(--accent); cursor: pointer; }\n.text-button:hover { text-decoration: underline; text-underline-offset: 2px; }\n.turn.action { justify-self: start; width: min(100%, 560px); }\n.change { padding: var(--space-4) var(--space-5); background: var(--surface); border: 1px solid var(--line-strong); border-radius: var(--radius-lg); display: grid; gap: var(--space-3); }\n.change-title { margin: 0; font-size: var(--text-lg); font-weight: 600; color: var(--ink); overflow-wrap: anywhere; }\n.change .facts { display: grid; grid-template-columns: max-content minmax(0, 1fr); gap: 6px var(--space-4); margin: 0; font-size: var(--text-md); }\n.change .facts dt { color: var(--ink-3); font-size: var(--text-sm); padding-top: 1px; }\n.change .facts dd { margin: 0; color: var(--ink); overflow-wrap: anywhere; }\n.change .facts dd pre { margin: 0; white-space: pre-wrap; font: 400 12px/1.5 var(--mono); }\n.change .facts .was { color: var(--ink-3); text-decoration: line-through; }\n.change-buttons { display: flex; gap: var(--space-2); flex-wrap: wrap; }\n.change-buttons form { margin: 0; }\n.change-buttons button { height: 32px; }\nbutton.danger { background: var(--bad); color: var(--bad-ink); border-color: var(--bad); }\nbutton.danger:hover { filter: brightness(1.08); }\nbutton.ghost { background: transparent; border-color: transparent; color: var(--ink-2); }\nbutton.ghost:hover { background: var(--hover); color: var(--ink); }\n.receipt { margin: 0; display: flex; align-items: baseline; gap: var(--space-2); font-size: var(--text-md); color: var(--ink-2); }\n.receipt::before { content: \"\"; flex: none; width: 7px; height: 7px; border-radius: 50%; background: var(--ink-3); transform: translateY(-1px); }\n.receipt.ok { color: var(--ink); }\n.receipt.ok::before { background: var(--good); }\n.receipt.bad::before { background: var(--bad); }\n.receipt .why { color: var(--ink-3); }\n.dock { position: sticky; bottom: 0; padding: var(--space-6) 0 var(--space-6); background: linear-gradient(to bottom, transparent, var(--canvas) 24px); z-index: 2; }\n.composer { display: grid; margin: 0; background: var(--surface); border: 1px solid var(--line); border-radius: 16px; transition: border-color var(--fast) var(--ease), box-shadow var(--fast) var(--ease); }\n.composer:focus-within { border-color: var(--line-strong); box-shadow: 0 0 0 3px var(--ring); }\n.composer textarea { display: block; width: 100%; min-height: 26px; max-height: 200px; resize: none; border: 0; outline: 0; background: transparent; padding: 14px 16px 0; color: var(--ink); font: inherit; font-size: var(--text-lg); line-height: 1.5; box-shadow: none; }\n.composer textarea:focus { box-shadow: none; border: 0; }\n.composer-bar { display: flex; align-items: center; justify-content: flex-end; gap: var(--space-2); padding: var(--space-2); }\n.composer-bar .count { margin-right: auto; padding-left: var(--space-2); font-size: var(--text-sm); color: var(--ink-3); }\n.composer-bar .count.over { color: var(--warn); }\n.send { display: inline-grid; place-items: center; width: 32px; height: 32px; padding: 0; border-radius: 50%; border: 0; background: var(--button); color: var(--button-ink); cursor: pointer; transition: opacity var(--fast) var(--ease), background var(--fast) var(--ease); }\n.send:hover { background: var(--button-hover); }\n.send:disabled { opacity: 0.4; cursor: default; }\n.send svg { width: 16px; height: 16px; }\n.send .stop { display: none; }\n.assistant.streaming .send .arrow { display: none; }\n.assistant.streaming .send .stop { display: block; }\n.jump { position: absolute; left: 50%; transform: translate(-50%, 0); top: -8px; width: 32px; height: 32px; padding: 0; border-radius: 50%; border: 1px solid var(--line); background: var(--surface); color: var(--ink-2); display: grid; place-items: center; cursor: pointer; box-shadow: var(--pop-shadow); }\n.jump[hidden] { display: none; }\n.new-chat svg { width: 14px; height: 14px; }\n.assistant-page[data-empty] .new-chat { display: none; }\n@media (prefers-reduced-motion: reduce) {\n  .live-steps .step.run, .thinking { animation: none; color: var(--ink-3); background: none; }\n  .prose.streaming > :last-child::after { animation: none; }\n}\n@media (max-width: 760px) {\n  .assistant { min-height: calc(100dvh - 140px); }\n  .assistant[data-empty] { justify-content: flex-end; padding-bottom: 0; }\n  .assistant[data-empty] .assistant-start { order: 1; padding: 0 0 var(--space-3); }\n  .assistant[data-empty] .dock { order: 2; position: sticky; padding-bottom: max(12px, env(safe-area-inset-bottom)); }\n  .chips { flex-wrap: nowrap; justify-content: flex-start; overflow-x: auto; max-width: 100%; padding-bottom: 2px; scrollbar-width: none; }\n  .chips::-webkit-scrollbar { display: none; }\n  .chip { flex: none; }\n  .turn.mine { max-width: 88%; }\n  .md-table table { display: table; }\n  .md-table thead { display: table-header-group; }\n  .md-table tbody { display: table-row-group; }\n  .md-table tr { display: table-row; padding: 0; border: 0; }\n  .md-table th, .md-table td { display: table-cell; padding: 6px 12px 6px 0; }\n  .md-table td { border-bottom: 1px solid var(--line-soft); }\n  .composer textarea { font-size: 16px; }\n  .dock { padding-bottom: max(12px, env(safe-area-inset-bottom)); }\n  .change { padding: var(--space-4); }\n  .change .facts { grid-template-columns: minmax(0, 1fr); gap: 2px; }\n  .change .facts dd { margin-bottom: var(--space-2); }\n  .change-buttons form { flex: 1; }\n  .change-buttons button { width: 100%; height: 40px; }\n}\n";
+/**
+ * The browser side of the chat, appended to app.js: Enter sends, the box grows, a write chip fills
+ * the box instead of sending, and a reply streams in from `<root>/assistant/stream` (newline-
+ * delimited JSON: text deltas, steps, then the turn as the server renders it). Without it the
+ * page still works: every form posts and the page reloads at the latest message.
+ * `markdownSource` is renderSlotlockMarkdown's source, so a reply renders as it will once stored.
+ */
+export declare function slotlockAssistantScript(markdownSource: string): string;