slotlock 0.8.0 → 0.10.0

package/config.js

@@ -181,6 +181,14 @@ export function readDashboardConfig(env) {
     if (Array.isArray(orgs) && googleClientId !== undefined) {
         throw new SlotlockConfigError('SLOTLOCK_GOOGLE_CLIENT_ID does not go with a list of SLOTLOCK_DASHBOARD_ORGS: those organizations are GitHub\'s; use SLOTLOCK_DASHBOARD_ORGS=enabled to have both');
     }
+    const teamWorkspaces = readDashboardTeamWorkspaces(env);
+    if (teamWorkspaces && Array.isArray(orgs)) {
+        throw new SlotlockConfigError('SLOTLOCK_DASHBOARD_TEAM_WORKSPACES does not go with a list of SLOTLOCK_DASHBOARD_ORGS: with a list, everyone works in those organizations');
+    }
+    const invitationEmail = readInvitationEmail(env, teamWorkspaces);
+    const verifiedDomains = readVerifiedDomains(env);
+    const teamSso = readTeamSso(env, verifiedDomains !== undefined);
+    const teamScim = readTeamScim(env, verifiedDomains !== undefined);
     const name = optional(env, 'SLOTLOCK_DASHBOARD_NAME')?.trim();
     if (name !== undefined && name !== '' && !SLOTLOCK_DASHBOARD_NAME_PATTERN.test(name)) {
         throw new SlotlockConfigError('SLOTLOCK_DASHBOARD_NAME must be 1-60 characters, without <, > or control or invisible characters');
@@ -196,6 +204,11 @@ export function readDashboardConfig(env) {
             ? { google: { clientId: googleClientId, clientSecret: googleClientSecret } }
             : {}),
         ...(orgs !== undefined ? { organizations: orgs } : {}),
+        ...(teamWorkspaces ? { teamWorkspaces: true } : {}),
+        ...(invitationEmail ? { invitationEmail } : {}),
+        ...(verifiedDomains ? { verifiedDomains } : {}),
+        ...(teamSso ? { teamSso } : {}),
+        ...(teamScim ? { teamScim } : {}),
         ...(name !== undefined && name !== '' ? { name } : {}),
         ...(termsUrl !== undefined ? { termsUrl } : {}),
         ...(privacyUrl !== undefined ? { privacyUrl } : {}),
@@ -265,6 +278,100 @@ export function readDashboardOrganizations(env) {
     }
     return [...new Set(orgs.split(','))];
 }
+/**
+ * SLOTLOCK_INVITATION_EMAIL (resend or postmark), with its key and the verified sender: all three, or
+ * none. Only with team workspaces, the one thing it sends.
+ */
+function readInvitationEmail(env, teamWorkspaces) {
+    const provider = optional(env, 'SLOTLOCK_INVITATION_EMAIL');
+    const key = optional(env, 'SLOTLOCK_INVITATION_EMAIL_KEY');
+    const from = optional(env, 'SLOTLOCK_INVITATION_EMAIL_FROM');
+    if (provider === undefined && key === undefined && from === undefined)
+        return undefined;
+    if (provider !== 'resend' && provider !== 'postmark') {
+        throw new SlotlockConfigError('SLOTLOCK_INVITATION_EMAIL must be resend or postmark');
+    }
+    if (!teamWorkspaces) {
+        throw new SlotlockConfigError('SLOTLOCK_INVITATION_EMAIL sends team invitations: it needs SLOTLOCK_DASHBOARD_TEAM_WORKSPACES=on');
+    }
+    if (key === undefined || !/^[\x21-\x7e]{10,500}$/.test(key)) {
+        throw new SlotlockConfigError(`SLOTLOCK_INVITATION_EMAIL_KEY must be ${provider === 'resend' ? "Resend's API key" : "Postmark's server token"}`);
+    }
+    if (from === undefined || !/^([^<>\r\n"]{1,80} )?<?[^@\s<>"]{1,64}@[^@\s<>"]+\.[^@\s<>"]+>?$/.test(from)) {
+        throw new SlotlockConfigError('SLOTLOCK_INVITATION_EMAIL_FROM must be the sender the provider verified: team@example.com or Name <team@example.com>');
+    }
+    return { provider, key, from };
+}
+/**
+ * SLOTLOCK_VERIFIED_DOMAINS: on or off (the default), only with team workspaces; and
+ * SLOTLOCK_DNS_RESOLVER, how a domain's record is looked up: doh (the default: Cloudflare's
+ * DNS-over-HTTPS, cross-checked by Google's) or system (the server's own resolver, which follows
+ * split-horizon DNS). Read on its own as well: the server that runs maintenance checks the domains
+ * each day, wherever the dashboard runs.
+ */
+export function readVerifiedDomains(env) {
+    const value = optional(env, 'SLOTLOCK_VERIFIED_DOMAINS') ?? 'off';
+    if (value !== 'on' && value !== 'off') {
+        throw new SlotlockConfigError('SLOTLOCK_VERIFIED_DOMAINS must be on or off');
+    }
+    const resolver = optional(env, 'SLOTLOCK_DNS_RESOLVER');
+    if (resolver !== undefined && resolver !== 'doh' && resolver !== 'system') {
+        throw new SlotlockConfigError('SLOTLOCK_DNS_RESOLVER must be doh or system');
+    }
+    if (value === 'off') {
+        if (resolver !== undefined) {
+            throw new SlotlockConfigError('SLOTLOCK_DNS_RESOLVER looks up verified domains: it needs SLOTLOCK_VERIFIED_DOMAINS=on');
+        }
+        return undefined;
+    }
+    if (!readDashboardTeamWorkspaces(env)) {
+        throw new SlotlockConfigError('SLOTLOCK_VERIFIED_DOMAINS verifies team workspaces\' domains: it needs SLOTLOCK_DASHBOARD_TEAM_WORKSPACES=on');
+    }
+    return { resolver: resolver ?? 'doh' };
+}
+/**
+ * SLOTLOCK_TEAM_SSO: on or off (the default), only with verified domains; with it,
+ * SLOTLOCK_SSO_SECRET (32+ characters), which seals each team's client secret.
+ */
+function readTeamSso(env, verifiedDomains) {
+    const value = optional(env, 'SLOTLOCK_TEAM_SSO') ?? 'off';
+    if (value !== 'on' && value !== 'off')
+        throw new SlotlockConfigError('SLOTLOCK_TEAM_SSO must be on or off');
+    const secret = optional(env, 'SLOTLOCK_SSO_SECRET');
+    if (value === 'off') {
+        if (secret !== undefined)
+            throw new SlotlockConfigError('SLOTLOCK_SSO_SECRET seals teams\' client secrets: it needs SLOTLOCK_TEAM_SSO=on');
+        return undefined;
+    }
+    if (!verifiedDomains) {
+        throw new SlotlockConfigError('SLOTLOCK_TEAM_SSO trusts addresses only at verified domains: it needs SLOTLOCK_VERIFIED_DOMAINS=on');
+    }
+    if (secret === undefined || secret.length < 32 || /\s/.test(secret)) {
+        throw new SlotlockConfigError(`SLOTLOCK_SSO_SECRET must be 32 or more characters without spaces. ${SECRET_HINT}`);
+    }
+    return { secret };
+}
+/** SLOTLOCK_TEAM_SCIM: on or off (the default), only with verified domains. */
+function readTeamScim(env, verifiedDomains) {
+    const value = optional(env, 'SLOTLOCK_TEAM_SCIM') ?? 'off';
+    if (value !== 'on' && value !== 'off')
+        throw new SlotlockConfigError('SLOTLOCK_TEAM_SCIM must be on or off');
+    if (value === 'on' && !verifiedDomains) {
+        throw new SlotlockConfigError('SLOTLOCK_TEAM_SCIM adds people only at verified domains: it needs SLOTLOCK_VERIFIED_DOMAINS=on');
+    }
+    return value === 'on';
+}
+/**
+ * SLOTLOCK_DASHBOARD_TEAM_WORKSPACES: on or off (the default). Read on its own as well: a server whose
+ * dashboard runs elsewhere (on Cloudflare Workers) takes team workspaces' keys only with it on.
+ */
+export function readDashboardTeamWorkspaces(env) {
+    const value = optional(env, 'SLOTLOCK_DASHBOARD_TEAM_WORKSPACES') ?? 'off';
+    if (value !== 'on' && value !== 'off') {
+        throw new SlotlockConfigError('SLOTLOCK_DASHBOARD_TEAM_WORKSPACES must be on or off');
+    }
+    return value === 'on';
+}
 /** The token buckets `slotlock serve` keeps (SLOTLOCK_LIMITS), each counted per its own key. */
 export const SLOTLOCK_RATE_NAMES = Object.freeze([
     'address',

package/dashboard-assistant-ui.d.ts

@@ -10,7 +10,7 @@ export declare function slotlockAssistantActionVerb(operation: string): {
     danger: boolean;
 };
 /** The chat's styles: one centred column, the composer docked under it, quiet steps and cards. */
-export declare const SLOTLOCK_ASSISTANT_CSS = "\n.assistant-page { display: grid; }\n.assistant { position: relative; display: flex; flex-direction: column; width: min(100%, 720px); margin: 0 auto; min-height: calc(100dvh - 180px); }\n.assistant .thread { flex: 1; }\n.assistant[data-empty] { justify-content: center; padding-bottom: 12vh; }\n.assistant[data-empty] .thread { display: none; }\n.assistant[data-empty] .dock { order: 1; position: static; padding: 0; background: none; }\n.assistant[data-empty] .assistant-start { order: 2; padding-top: var(--space-3); }\n.assistant:not([data-empty]) .assistant-start { display: none; }\n.chips { display: flex; flex-wrap: wrap; justify-content: center; gap: var(--space-2); }\n.chips form { margin: 0; }\n.chip { display: inline-flex; align-items: center; gap: 6px; height: 32px; padding: 0 var(--space-3); border-radius: var(--radius-full); border: 1px solid var(--line); background: var(--surface); color: var(--ink-2); font: inherit; font-size: var(--text-md); cursor: pointer; transition: background var(--fast) var(--ease), border-color var(--fast) var(--ease); }\n.chip:hover { background: var(--hover); border-color: var(--line-strong); color: var(--ink); }\n.thread { list-style: none; margin: 0; padding: var(--space-2) 0 var(--space-6); display: grid; gap: var(--space-6); align-content: start; }\n.turn { margin: 0; min-width: 0; }\n.turn.mine { justify-self: end; max-width: 80%; }\n.bubble { padding: 10px 14px; border-radius: 18px; background: var(--sunken); color: var(--ink); font-size: var(--text-lg); line-height: 1.5; white-space: pre-wrap; overflow-wrap: anywhere; }\n.turn.bot { justify-self: stretch; }\n.prose { max-width: 68ch; color: var(--ink); font-size: var(--text-lg); line-height: 1.6; overflow-wrap: anywhere; }\n.prose > :first-child { margin-top: 0; }\n.prose > :last-child { margin-bottom: 0; }\n.prose p { margin: 0 0 var(--space-3); color: inherit; }\n.prose strong { font-weight: 600; }\n.prose h4 { margin: var(--space-4) 0 var(--space-2); font-size: var(--text-lg); font-weight: 600; }\n.prose ul, .prose ol { margin: 0 0 var(--space-3); padding-left: 20px; }\n.prose li { margin: 4px 0; }\n.prose li > ul, .prose li > ol { margin: 4px 0 0; }\n.prose a { color: var(--accent); text-underline-offset: 2px; }\n.prose code { font: 400 12.5px/1.4 var(--mono); background: var(--sunken); border-radius: 4px; padding: 1px 5px; }\n.prose pre { margin: 0 0 var(--space-3); padding: var(--space-3); background: var(--sunken); border: 1px solid var(--line); border-radius: var(--radius); overflow-x: auto; }\n.prose pre code { background: none; padding: 0; font-size: 12.5px; }\n.prose blockquote { margin: 0 0 var(--space-3); padding-left: var(--space-3); border-left: 2px solid var(--line-strong); color: var(--ink-2); }\n.prose hr { border: 0; border-top: 1px solid var(--line); margin: var(--space-4) 0; }\n.md-table { overflow-x: auto; margin: 0 0 var(--space-3); }\n.md-table table { border-collapse: collapse; font-size: var(--text-md); min-width: 50%; }\n.md-table table { width: auto; }\n.md-table th { font: 600 var(--text-md)/1.4 var(--font); text-transform: none; letter-spacing: 0; background: none; text-align: left; color: var(--ink-2); padding: 6px 16px 6px 0; border-bottom: 1px solid var(--line); white-space: nowrap; }\n.md-table td { padding: 6px 16px 6px 0; border-bottom: 1px solid var(--line-soft); vertical-align: top; }\n.md-table tr:last-child td { border-bottom: 0; }\n.change details.more { margin: 0; }\n.change details.more > summary { cursor: pointer; color: var(--ink-3); font-size: var(--text-sm); list-style: none; }\n.change details.more > summary::-webkit-details-marker { display: none; }\n.change details.more > summary:hover { color: var(--ink-2); }\n.change details.more[open] > summary { margin-bottom: var(--space-2); }\n.turn.steps { justify-self: start; }\ndetails.steps > summary { list-style: none; display: inline-flex; align-items: center; gap: 6px; cursor: pointer; color: var(--ink-3); font-size: var(--text-md); padding: 2px 0; }\ndetails.steps > summary::-webkit-details-marker { display: none; }\ndetails.steps > summary::after { content: \"\"; width: 6px; height: 6px; border-right: 1.5px solid currentColor; border-bottom: 1.5px solid currentColor; transform: rotate(-45deg); transition: transform var(--fast) var(--ease); margin-left: 2px; }\ndetails.steps[open] > summary::after { transform: rotate(45deg); }\ndetails.steps > summary:hover { color: var(--ink-2); }\ndetails.steps.has-bad > summary::before { content: \"\"; width: 6px; height: 6px; border-radius: 50%; background: var(--bad); }\n.step-list { list-style: none; margin: var(--space-2) 0 0; padding: 0 0 0 var(--space-3); border-left: 1px solid var(--line); display: grid; gap: 6px; }\n.step { display: flex; align-items: baseline; gap: var(--space-2); font-size: var(--text-md); color: var(--ink-2); }\n.step::before { content: \"\"; flex: none; width: 7px; height: 7px; border-radius: 50%; background: var(--good); transform: translateY(-1px); }\n.step.bad::before { background: var(--bad); }\n.step.run::before { background: var(--ink-3); }\n.step .why { color: var(--ink-3); font-size: var(--text-sm); }\n.live-steps { display: grid; gap: 6px; }\n.live-steps .step.run, .thinking { background: linear-gradient(90deg, var(--ink-3) 0%, var(--ink) 50%, var(--ink-3) 100%); background-size: 200% 100%; -webkit-background-clip: text; background-clip: text; color: transparent; animation: assistant-shimmer 1.6s linear infinite; }\n.thinking { font-size: var(--text-md); justify-self: start; }\n@keyframes assistant-shimmer { from { background-position: 100% 0; } to { background-position: -100% 0; } }\n.prose.streaming > :last-child::after { content: \"\"; display: inline-block; width: 8px; height: 8px; margin-left: 4px; border-radius: 50%; background: var(--ink-3); vertical-align: baseline; animation: assistant-pulse 1s ease-in-out infinite; }\n@keyframes assistant-pulse { 50% { opacity: 0.25; } }\n.turn.note { color: var(--ink-3); font-size: var(--text-md); }\n.turn.error { display: flex; align-items: center; justify-content: space-between; gap: var(--space-3); padding: 10px 12px; border: 1px solid var(--bad-line); background: var(--bad-wash); border-radius: var(--radius); font-size: var(--text-md); color: var(--ink); }\n.turn.error::before { content: \"\"; flex: none; width: 8px; height: 8px; border-radius: 50%; background: var(--bad); }\n.turn.error > span { flex: 1; }\n.turn.error form, .turn.note form { margin: 0; }\n.text-button { appearance: none; border: 0; background: none; padding: 0; font: inherit; font-size: var(--text-md); color: var(--accent); cursor: pointer; }\n.text-button:hover { text-decoration: underline; text-underline-offset: 2px; }\n.turn.action { justify-self: start; width: min(100%, 560px); }\n.change { padding: var(--space-4) var(--space-5); background: var(--surface); border: 1px solid var(--line-strong); border-radius: var(--radius-lg); display: grid; gap: var(--space-3); }\n.change-title { margin: 0; font-size: var(--text-lg); font-weight: 600; color: var(--ink); overflow-wrap: anywhere; }\n.change .facts { display: grid; grid-template-columns: max-content minmax(0, 1fr); gap: 6px var(--space-4); margin: 0; font-size: var(--text-md); }\n.change .facts dt { color: var(--ink-3); font-size: var(--text-sm); padding-top: 1px; }\n.change .facts dd { margin: 0; color: var(--ink); overflow-wrap: anywhere; }\n.change .facts dd pre { margin: 0; white-space: pre-wrap; font: 400 12px/1.5 var(--mono); }\n.change .facts .was { color: var(--ink-3); text-decoration: line-through; }\n.change-buttons { display: flex; gap: var(--space-2); flex-wrap: wrap; }\n.change-buttons form { margin: 0; }\n.change-buttons button { height: 32px; }\nbutton.danger { background: var(--bad); color: var(--bad-ink); border-color: var(--bad); }\nbutton.danger:hover { filter: brightness(1.08); }\nbutton.ghost { background: transparent; border-color: transparent; color: var(--ink-2); }\nbutton.ghost:hover { background: var(--hover); color: var(--ink); }\n.receipt { margin: 0; display: flex; align-items: baseline; gap: var(--space-2); font-size: var(--text-md); color: var(--ink-2); }\n.receipt::before { content: \"\"; flex: none; width: 7px; height: 7px; border-radius: 50%; background: var(--ink-3); transform: translateY(-1px); }\n.receipt.ok { color: var(--ink); }\n.receipt.ok::before { background: var(--good); }\n.receipt.bad::before { background: var(--bad); }\n.receipt .why { color: var(--ink-3); }\n.dock { position: sticky; bottom: 0; padding: var(--space-6) 0 var(--space-6); background: linear-gradient(to bottom, transparent, var(--canvas) 24px); z-index: 2; }\n.composer { display: grid; margin: 0; background: var(--surface); border: 1px solid var(--line); border-radius: 16px; transition: border-color var(--fast) var(--ease), box-shadow var(--fast) var(--ease); }\n.composer:focus-within { border-color: var(--line-strong); box-shadow: 0 0 0 3px var(--ring); }\n.composer textarea { display: block; width: 100%; min-height: 26px; max-height: 200px; resize: none; border: 0; outline: 0; background: transparent; padding: 14px 16px 0; color: var(--ink); font: inherit; font-size: var(--text-lg); line-height: 1.5; box-shadow: none; }\n.composer textarea:focus { box-shadow: none; border: 0; }\n.composer-bar { display: flex; align-items: center; justify-content: flex-end; gap: var(--space-2); padding: var(--space-2); }\n.composer-bar .count { margin-right: auto; padding-left: var(--space-2); font-size: var(--text-sm); color: var(--ink-3); }\n.composer-bar .count.over { color: var(--warn); }\n.send { display: inline-grid; place-items: center; width: 32px; height: 32px; padding: 0; border-radius: 50%; border: 0; background: var(--button); color: var(--button-ink); cursor: pointer; transition: opacity var(--fast) var(--ease), background var(--fast) var(--ease); }\n.send:hover { background: var(--button-hover); }\n.send:disabled { opacity: 0.4; cursor: default; }\n.send svg { width: 16px; height: 16px; }\n.send .stop { display: none; }\n.assistant.streaming .send .arrow { display: none; }\n.assistant.streaming .send .stop { display: block; }\n.jump { position: absolute; left: 50%; transform: translate(-50%, 0); top: -8px; width: 32px; height: 32px; padding: 0; border-radius: 50%; border: 1px solid var(--line); background: var(--surface); color: var(--ink-2); display: grid; place-items: center; cursor: pointer; box-shadow: var(--pop-shadow); }\n.jump[hidden] { display: none; }\n.new-chat svg { width: 14px; height: 14px; }\n.assistant-page[data-empty] .new-chat { display: none; }\n@media (prefers-reduced-motion: reduce) {\n  .live-steps .step.run, .thinking { animation: none; color: var(--ink-3); background: none; }\n  .prose.streaming > :last-child::after { animation: none; }\n}\n@media (max-width: 760px) {\n  .assistant { min-height: calc(100dvh - 140px); }\n  .assistant[data-empty] { justify-content: flex-end; padding-bottom: 0; }\n  .assistant[data-empty] .assistant-start { order: 1; padding: 0 0 var(--space-3); }\n  .assistant[data-empty] .dock { order: 2; position: sticky; padding-bottom: max(12px, env(safe-area-inset-bottom)); }\n  .chips { flex-wrap: nowrap; justify-content: flex-start; overflow-x: auto; max-width: 100%; padding-bottom: 2px; scrollbar-width: none; }\n  .chips::-webkit-scrollbar { display: none; }\n  .chip { flex: none; }\n  .turn.mine { max-width: 88%; }\n  .md-table table { display: table; }\n  .md-table thead { display: table-header-group; }\n  .md-table tbody { display: table-row-group; }\n  .md-table tr { display: table-row; padding: 0; border: 0; }\n  .md-table th, .md-table td { display: table-cell; padding: 6px 12px 6px 0; }\n  .md-table td { border-bottom: 1px solid var(--line-soft); }\n  .composer textarea { font-size: 16px; }\n  .dock { padding-bottom: max(12px, env(safe-area-inset-bottom)); }\n  .change { padding: var(--space-4); }\n  .change .facts { grid-template-columns: minmax(0, 1fr); gap: 2px; }\n  .change .facts dd { margin-bottom: var(--space-2); }\n  .change-buttons form { flex: 1; }\n  .change-buttons button { width: 100%; height: 40px; }\n}\n";
+export declare const SLOTLOCK_ASSISTANT_CSS = "\n.assistant-page { display: grid; }\n.assistant { position: relative; display: flex; flex-direction: column; width: min(100%, 720px); margin: 0 auto; min-height: calc(100dvh - 180px); }\n.assistant .thread { flex: 1; }\n.assistant[data-empty] { justify-content: center; padding-bottom: 12vh; }\n.assistant[data-empty] .thread { display: none; }\n.assistant[data-empty] .dock { order: 1; position: static; padding: 0; background: none; }\n.assistant[data-empty] .assistant-start { order: 2; padding-top: var(--space-3); }\n.assistant:not([data-empty]) .assistant-start { display: none; }\n.chips { display: flex; flex-wrap: wrap; justify-content: center; gap: var(--space-2); }\n.chips form { margin: 0; }\n.chip { display: inline-flex; align-items: center; gap: 6px; height: 32px; padding: 0 var(--space-3); border-radius: var(--radius-full); border: 1px solid var(--line); background: var(--surface); color: var(--ink-2); font: inherit; font-size: var(--text-md); cursor: pointer; transition: background var(--fast) var(--ease), border-color var(--fast) var(--ease); }\n.chip:hover { background: var(--hover); border-color: var(--line-strong); color: var(--ink); }\n.thread { list-style: none; margin: 0; padding: var(--space-2) 0 var(--space-6); display: grid; gap: var(--space-6); align-content: start; }\n.turn { margin: 0; min-width: 0; }\n.turn.mine { justify-self: end; max-width: 80%; }\n.bubble { padding: 10px 14px; border-radius: 18px; background: var(--sunken); color: var(--ink); font-size: var(--text-lg); line-height: 1.5; white-space: pre-wrap; overflow-wrap: anywhere; }\n.turn.bot { justify-self: stretch; }\n.prose { max-width: 68ch; color: var(--ink); font-size: var(--text-lg); line-height: 1.6; overflow-wrap: anywhere; }\n.prose > :first-child { margin-top: 0; }\n.prose > :last-child { margin-bottom: 0; }\n.prose p { margin: 0 0 var(--space-3); color: inherit; }\n.prose strong { font-weight: 600; }\n.prose h4 { margin: var(--space-4) 0 var(--space-2); font-size: var(--text-lg); font-weight: 600; }\n.prose ul, .prose ol { margin: 0 0 var(--space-3); padding-left: 20px; }\n.prose li { margin: 4px 0; }\n.prose li > ul, .prose li > ol { margin: 4px 0 0; }\n.prose a { color: var(--accent); text-underline-offset: 2px; }\n.prose code { font: 400 12.5px/1.4 var(--mono); background: var(--sunken); border-radius: 4px; padding: 1px 5px; }\n.prose pre { margin: 0 0 var(--space-3); padding: var(--space-3); background: var(--sunken); border: 1px solid var(--line); border-radius: var(--radius); overflow-x: auto; }\n.prose pre code { background: none; padding: 0; font-size: 12.5px; }\n.prose blockquote { margin: 0 0 var(--space-3); padding-left: var(--space-3); border-left: 2px solid var(--line-strong); color: var(--ink-2); }\n.prose hr { border: 0; border-top: 1px solid var(--line); margin: var(--space-4) 0; }\n.md-table { overflow-x: auto; margin: 0 0 var(--space-3); }\n.md-table table { border-collapse: collapse; font-size: var(--text-md); min-width: 50%; }\n.md-table table { width: auto; }\n.md-table th { font: 600 var(--text-md)/1.4 var(--font); text-transform: none; letter-spacing: 0; background: none; text-align: left; color: var(--ink-2); padding: 6px 16px 6px 0; border-bottom: 1px solid var(--line); white-space: nowrap; }\n.md-table td { padding: 6px 16px 6px 0; border-bottom: 1px solid var(--line-soft); vertical-align: top; }\n.md-table tr:last-child td { border-bottom: 0; }\n.change details.more { margin: 0; }\n.change details.more > summary { cursor: pointer; color: var(--ink-3); font-size: var(--text-sm); list-style: none; }\n.change details.more > summary::-webkit-details-marker { display: none; }\n.change details.more > summary:hover { color: var(--ink-2); }\n.change details.more[open] > summary { margin-bottom: var(--space-2); }\n.turn.steps { justify-self: start; }\ndetails.steps > summary { list-style: none; display: inline-flex; align-items: center; gap: 6px; cursor: pointer; color: var(--ink-3); font-size: var(--text-md); padding: 2px 0; }\ndetails.steps > summary::-webkit-details-marker { display: none; }\ndetails.steps > summary::after { content: \"\"; width: 6px; height: 6px; border-right: 1.5px solid currentColor; border-bottom: 1.5px solid currentColor; transform: rotate(-45deg); transition: transform var(--fast) var(--ease); margin-left: 2px; }\ndetails.steps[open] > summary::after { transform: rotate(45deg); }\ndetails.steps > summary:hover { color: var(--ink-2); }\ndetails.steps.has-bad > summary::before { content: \"\"; width: 6px; height: 6px; border-radius: 50%; background: var(--bad); }\n.step-list { list-style: none; margin: var(--space-2) 0 0; padding: 0 0 0 var(--space-3); border-left: 1px solid var(--line); display: grid; gap: 6px; }\n.step { display: flex; align-items: baseline; gap: var(--space-2); font-size: var(--text-md); color: var(--ink-2); }\n.step::before { content: \"\"; flex: none; width: 7px; height: 7px; border-radius: 50%; background: var(--good); transform: translateY(-1px); }\n.step.bad::before { background: var(--bad); }\n.step.run::before { background: var(--ink-3); }\n.step .why { color: var(--ink-3); font-size: var(--text-sm); }\n.live-steps { display: grid; gap: 6px; }\n.live-steps .step.run, .thinking { background: linear-gradient(90deg, var(--ink-3) 0%, var(--ink) 50%, var(--ink-3) 100%); background-size: 200% 100%; -webkit-background-clip: text; background-clip: text; color: transparent; animation: assistant-shimmer 1.6s linear infinite; }\n.thinking { font-size: var(--text-md); justify-self: start; }\n@keyframes assistant-shimmer { from { background-position: 100% 0; } to { background-position: -100% 0; } }\n.prose.streaming > :last-child::after { content: \"\"; display: inline-block; width: 8px; height: 8px; margin-left: 4px; border-radius: 50%; background: var(--ink-3); vertical-align: baseline; animation: assistant-pulse 1s ease-in-out infinite; }\n@keyframes assistant-pulse { 50% { opacity: 0.25; } }\n.turn.note { color: var(--ink-3); font-size: var(--text-md); }\n.turn.error { display: flex; align-items: center; justify-content: space-between; gap: var(--space-3); padding: 10px 12px; border: 1px solid var(--bad-line); background: var(--bad-wash); border-radius: var(--radius); font-size: var(--text-md); color: var(--ink); }\n.turn.error::before { content: \"\"; flex: none; width: 8px; height: 8px; border-radius: 50%; background: var(--bad); }\n.turn.error > span { flex: 1; }\n.turn.error form, .turn.note form { margin: 0; }\n.text-button { appearance: none; border: 0; background: none; padding: 0; font: inherit; font-size: var(--text-md); color: var(--accent); cursor: pointer; }\n.text-button:hover { text-decoration: underline; text-underline-offset: 2px; }\n.turn.action { justify-self: start; width: min(100%, 560px); }\n.change { padding: var(--space-4) var(--space-5); background: var(--surface); border: 1px solid var(--line-strong); border-radius: var(--radius-lg); display: grid; gap: var(--space-3); }\n.change-title { margin: 0; font-size: var(--text-lg); font-weight: 600; color: var(--ink); overflow-wrap: anywhere; }\n.change .facts { display: grid; grid-template-columns: max-content minmax(0, 1fr); gap: 6px var(--space-4); margin: 0; font-size: var(--text-md); }\n.change .facts dt { color: var(--ink-3); font-size: var(--text-sm); padding-top: 1px; }\n.change .facts dd { margin: 0; color: var(--ink); overflow-wrap: anywhere; }\n.change .facts dd pre { margin: 0; white-space: pre-wrap; font: 400 12px/1.5 var(--mono); }\n.change .facts .was { color: var(--ink-3); text-decoration: line-through; }\n.change-buttons { display: flex; gap: var(--space-2); flex-wrap: wrap; }\n.change-buttons form { margin: 0; }\n.change-buttons button { height: 32px; }\nbutton.danger { background: var(--bad); color: var(--bad-ink); border-color: var(--bad); }\nbutton.danger:hover { filter: brightness(1.08); }\nbutton.ghost { background: transparent; border-color: transparent; color: var(--ink-2); }\nbutton.ghost:hover { background: var(--hover); color: var(--ink); }\n.receipt { margin: 0; display: flex; align-items: baseline; gap: var(--space-2); font-size: var(--text-md); color: var(--ink-2); }\n.receipt::before { content: \"\"; flex: none; width: 7px; height: 7px; border-radius: 50%; background: var(--ink-3); transform: translateY(-1px); }\n.receipt.ok { color: var(--ink); }\n.receipt.ok::before { background: var(--good); }\n.receipt.bad::before { background: var(--bad); }\n.receipt .why { color: var(--ink-3); }\n.dock { position: sticky; bottom: 0; padding: var(--space-6) 0 var(--space-6); background: linear-gradient(to bottom, transparent, var(--canvas) 24px); z-index: 2; }\n.composer { display: grid; margin: 0; background: var(--surface); border: 1px solid var(--line); border-radius: 16px; transition: border-color var(--fast) var(--ease), box-shadow var(--fast) var(--ease); }\n.composer:focus-within { border-color: var(--line-strong); box-shadow: 0 0 0 3px var(--ring); }\n.composer textarea { display: block; width: 100%; min-height: 26px; max-height: 200px; resize: none; border: 0; outline: 0; background: transparent; padding: 14px 16px 0; color: var(--ink); font: inherit; font-size: var(--text-lg); line-height: 1.5; box-shadow: none; }\n.composer textarea:focus { box-shadow: none; border: 0; }\n.composer-bar { display: flex; align-items: center; justify-content: flex-end; gap: var(--space-2); padding: var(--space-2); }\n.composer-bar .count { margin-right: auto; padding-left: var(--space-2); font-size: var(--text-sm); color: var(--ink-3); }\n.composer-bar .count.over { color: var(--warn); }\n.send { display: inline-grid; place-items: center; width: 32px; height: 32px; padding: 0; border-radius: 50%; border: 0; background: var(--button); color: var(--button-ink); cursor: pointer; transition: opacity var(--fast) var(--ease), background var(--fast) var(--ease); }\n.send:hover { background: var(--button-hover); }\n.send:disabled { opacity: 0.4; cursor: default; }\n.send svg { width: 16px; height: 16px; }\n.send .stop { display: none; }\n.assistant.streaming .send .arrow { display: none; }\n.assistant.streaming .send .stop { display: block; }\n.jump { position: absolute; left: 50%; transform: translate(-50%, 0); top: -8px; width: 32px; height: 32px; padding: 0; border-radius: 50%; border: 1px solid var(--line); background: var(--surface); color: var(--ink-2); display: grid; place-items: center; cursor: pointer; box-shadow: var(--pop-shadow); }\n.jump[hidden] { display: none; }\n.new-chat svg, .chats-link svg { width: 14px; height: 14px; }\n.assistant-page[data-empty] .new-chat { display: none; }\n.assistant-actions { display: flex; gap: var(--space-2); }\n.chats-link { display: none; }\n/* Chats: the member's conversations beside the one shown, most recent first, grouped by day. */\n.assistant-shell { display: grid; grid-template-columns: 252px minmax(0, 1fr); gap: var(--space-6); align-items: start; }\n/* It scrolls with the page: a column that scrolled on its own would clip a row's menu. */\n.chats { display: flex; flex-direction: column; gap: var(--space-2); min-width: 0; }\n.chats-head { display: flex; align-items: center; justify-content: space-between; min-height: 36px; }\n.chats-head h2 { margin: 0; font-size: var(--text-md); font-weight: 600; color: var(--ink-2); }\n.icon-button { display: grid; place-items: center; width: 30px; height: 30px; border-radius: var(--radius-sm); color: var(--ink-2); transition: background var(--fast) var(--ease), color var(--fast) var(--ease); }\n.icon-button:hover { background: var(--hover); color: var(--ink); text-decoration: none; }\n.icon-button svg { width: 15px; height: 15px; }\n.chats-filter { height: 32px; font-size: var(--text-md); }\n.chats-filter[hidden] { display: none; }\n/* Sentence case, not the dashboard's uppercase h3. */\n.chat-group { margin: var(--space-3) 0 2px; padding: 0 var(--space-2); font-family: inherit; font-size: var(--text-xs); font-weight: 500; line-height: 1.5; text-transform: none; letter-spacing: 0; color: var(--ink-3); }\n.chat-group[hidden] { display: none; }\n.chat-list { min-width: 0; }\n/* minmax(0, 1fr): a long title is cut with an ellipsis, never widening the column. */\n.chat-rows { list-style: none; margin: 0; padding: 0; display: grid; grid-template-columns: minmax(0, 1fr); gap: 1px; }\n.chat-row { position: relative; display: flex; align-items: center; border-radius: var(--radius); transition: background var(--fast) var(--ease); }\n.chat-row[hidden] { display: none; }\n.chat-row:hover, .chat-row:focus-within, .chat-row.current { background: var(--hover); }\n.chat-link { flex: 1; min-width: 0; display: flex; align-items: baseline; gap: var(--space-2); padding: 7px 4px 7px var(--space-2); color: var(--ink-2); font-size: var(--text-md); }\n.chat-link:hover { color: var(--ink); text-decoration: none; }\n.chat-row.current .chat-link { color: var(--ink); font-weight: 500; }\n.chat-title { flex: 1; min-width: 0; overflow: hidden; text-overflow: ellipsis; white-space: nowrap; }\n.chat-when { flex: none; font-size: var(--text-xs); color: var(--ink-3); font-variant-numeric: tabular-nums; }\n.chat-menu { position: relative; flex: none; }\n.chat-menu summary { list-style: none; display: grid; place-items: center; width: 28px; height: 28px; margin-right: 2px; border-radius: var(--radius-sm); color: var(--ink-3); cursor: pointer; opacity: 0; transition: opacity var(--fast) var(--ease), background var(--fast) var(--ease); }\n.chat-menu summary::-webkit-details-marker { display: none; }\n.chat-row:hover .chat-menu summary, .chat-row:focus-within .chat-menu summary, .chat-row.current .chat-menu summary, .chat-menu[open] summary { opacity: 1; }\n.chat-menu summary:hover, .chat-menu[open] summary { background: var(--line-soft); color: var(--ink); }\n.chat-menu summary svg { width: 14px; height: 14px; }\n.chat-menu .pop { z-index: 20; width: 260px; display: grid; gap: var(--space-2); }\n.chat-menu .pop form { display: grid; gap: var(--space-2); margin: 0; }\n.chat-menu .pop form + form { padding-top: var(--space-2); border-top: 1px solid var(--line-soft); }\n.chat-menu .pop button.danger { background: none; border-color: transparent; box-shadow: none; color: var(--bad); }\n.chat-menu .pop button.danger:hover { background: var(--bad-wash); }\n.chat-rename input { width: 100%; min-width: 0; height: 34px; }\n.chats-empty { padding: var(--space-2); font-size: var(--text-md); }\n.chats-page .chats { max-width: 560px; }\n.chats-page .chats-head { display: none; }\n.chats-page .chat-menu summary { opacity: 1; }\n@media (max-width: 1100px) {\n  .assistant-shell { grid-template-columns: minmax(0, 1fr); }\n  .assistant-shell > .chats { display: none; }\n  .chats-link { display: inline-flex; }\n}\n@media (hover: none) {\n  .chat-menu summary { opacity: 1; }\n}\n@media (prefers-reduced-motion: reduce) {\n  .live-steps .step.run, .thinking { animation: none; color: var(--ink-3); background: none; }\n  .prose.streaming > :last-child::after { animation: none; }\n}\n@media (max-width: 760px) {\n  .assistant { min-height: calc(100dvh - 140px); }\n  .assistant[data-empty] { justify-content: flex-end; padding-bottom: 0; }\n  .assistant[data-empty] .assistant-start { order: 1; padding: 0 0 var(--space-3); }\n  .assistant[data-empty] .dock { order: 2; position: sticky; padding-bottom: max(12px, env(safe-area-inset-bottom)); }\n  .chips { flex-wrap: nowrap; justify-content: flex-start; overflow-x: auto; max-width: 100%; padding-bottom: 2px; scrollbar-width: none; }\n  .chips::-webkit-scrollbar { display: none; }\n  .chip { flex: none; }\n  .turn.mine { max-width: 88%; }\n  .md-table table { display: table; }\n  .md-table thead { display: table-header-group; }\n  .md-table tbody { display: table-row-group; }\n  .md-table tr { display: table-row; padding: 0; border: 0; }\n  .md-table th, .md-table td { display: table-cell; padding: 6px 12px 6px 0; }\n  .md-table td { border-bottom: 1px solid var(--line-soft); }\n  .composer textarea { font-size: 16px; }\n  .dock { padding-bottom: max(12px, env(safe-area-inset-bottom)); }\n  .change { padding: var(--space-4); }\n  .change .facts { grid-template-columns: minmax(0, 1fr); gap: 2px; }\n  .change .facts dd { margin-bottom: var(--space-2); }\n  .change-buttons form { flex: 1; }\n  .change-buttons button { width: 100%; height: 40px; }\n}\n";
 /**
  * The browser side of the chat, appended to app.js: Enter sends, the box grows, a write chip fills
  * the box instead of sending, and a reply streams in from `<root>/assistant/stream` (newline-

package/dashboard-assistant-ui.js

@@ -6,6 +6,7 @@ const STEP_WORDS = Object.freeze({
     slotlock_get_free_busy: ['Checking free and busy time', 'Checked free and busy time', 'check free and busy time'],
     slotlock_find_next_available: ['Finding the next free time', 'Found the next free time', 'find the next free time'],
     slotlock_find_available_slots: ['Checking availability', 'Checked availability', 'check availability'],
+    slotlock_find_available_ranges: ['Finding free ranges', 'Found free ranges', 'find free ranges'],
     slotlock_get_pool_availability: ['Checking the pool', 'Checked the pool', 'check the pool'],
     slotlock_get_event: ['Reading a booking', 'Read a booking', 'read the booking'],
     slotlock_list_events: ['Reading bookings', 'Read bookings', 'read bookings'],
@@ -43,6 +44,7 @@ export function slotlockAssistantActionVerb(operation) {
         case 'slotlock_delete_event':
             return { verb: 'Delete booking', busy: 'Deleting…', done: 'Deleted', danger: true };
         case 'slotlock_hold_slots':
+        case 'slotlock_hold_together':
             return { verb: 'Hold', busy: 'Holding…', done: 'Held', danger: false };
         case 'slotlock_release_slots':
             return { verb: 'Release', busy: 'Releasing…', done: 'Released', danger: true };
@@ -159,8 +161,59 @@ button.ghost:hover { background: var(--hover); color: var(--ink); }
 .assistant.streaming .send .stop { display: block; }
 .jump { position: absolute; left: 50%; transform: translate(-50%, 0); top: -8px; width: 32px; height: 32px; padding: 0; border-radius: 50%; border: 1px solid var(--line); background: var(--surface); color: var(--ink-2); display: grid; place-items: center; cursor: pointer; box-shadow: var(--pop-shadow); }
 .jump[hidden] { display: none; }
-.new-chat svg { width: 14px; height: 14px; }
+.new-chat svg, .chats-link svg { width: 14px; height: 14px; }
 .assistant-page[data-empty] .new-chat { display: none; }
+.assistant-actions { display: flex; gap: var(--space-2); }
+.chats-link { display: none; }
+/* Chats: the member's conversations beside the one shown, most recent first, grouped by day. */
+.assistant-shell { display: grid; grid-template-columns: 252px minmax(0, 1fr); gap: var(--space-6); align-items: start; }
+/* It scrolls with the page: a column that scrolled on its own would clip a row's menu. */
+.chats { display: flex; flex-direction: column; gap: var(--space-2); min-width: 0; }
+.chats-head { display: flex; align-items: center; justify-content: space-between; min-height: 36px; }
+.chats-head h2 { margin: 0; font-size: var(--text-md); font-weight: 600; color: var(--ink-2); }
+.icon-button { display: grid; place-items: center; width: 30px; height: 30px; border-radius: var(--radius-sm); color: var(--ink-2); transition: background var(--fast) var(--ease), color var(--fast) var(--ease); }
+.icon-button:hover { background: var(--hover); color: var(--ink); text-decoration: none; }
+.icon-button svg { width: 15px; height: 15px; }
+.chats-filter { height: 32px; font-size: var(--text-md); }
+.chats-filter[hidden] { display: none; }
+/* Sentence case, not the dashboard's uppercase h3. */
+.chat-group { margin: var(--space-3) 0 2px; padding: 0 var(--space-2); font-family: inherit; font-size: var(--text-xs); font-weight: 500; line-height: 1.5; text-transform: none; letter-spacing: 0; color: var(--ink-3); }
+.chat-group[hidden] { display: none; }
+.chat-list { min-width: 0; }
+/* minmax(0, 1fr): a long title is cut with an ellipsis, never widening the column. */
+.chat-rows { list-style: none; margin: 0; padding: 0; display: grid; grid-template-columns: minmax(0, 1fr); gap: 1px; }
+.chat-row { position: relative; display: flex; align-items: center; border-radius: var(--radius); transition: background var(--fast) var(--ease); }
+.chat-row[hidden] { display: none; }
+.chat-row:hover, .chat-row:focus-within, .chat-row.current { background: var(--hover); }
+.chat-link { flex: 1; min-width: 0; display: flex; align-items: baseline; gap: var(--space-2); padding: 7px 4px 7px var(--space-2); color: var(--ink-2); font-size: var(--text-md); }
+.chat-link:hover { color: var(--ink); text-decoration: none; }
+.chat-row.current .chat-link { color: var(--ink); font-weight: 500; }
+.chat-title { flex: 1; min-width: 0; overflow: hidden; text-overflow: ellipsis; white-space: nowrap; }
+.chat-when { flex: none; font-size: var(--text-xs); color: var(--ink-3); font-variant-numeric: tabular-nums; }
+.chat-menu { position: relative; flex: none; }
+.chat-menu summary { list-style: none; display: grid; place-items: center; width: 28px; height: 28px; margin-right: 2px; border-radius: var(--radius-sm); color: var(--ink-3); cursor: pointer; opacity: 0; transition: opacity var(--fast) var(--ease), background var(--fast) var(--ease); }
+.chat-menu summary::-webkit-details-marker { display: none; }
+.chat-row:hover .chat-menu summary, .chat-row:focus-within .chat-menu summary, .chat-row.current .chat-menu summary, .chat-menu[open] summary { opacity: 1; }
+.chat-menu summary:hover, .chat-menu[open] summary { background: var(--line-soft); color: var(--ink); }
+.chat-menu summary svg { width: 14px; height: 14px; }
+.chat-menu .pop { z-index: 20; width: 260px; display: grid; gap: var(--space-2); }
+.chat-menu .pop form { display: grid; gap: var(--space-2); margin: 0; }
+.chat-menu .pop form + form { padding-top: var(--space-2); border-top: 1px solid var(--line-soft); }
+.chat-menu .pop button.danger { background: none; border-color: transparent; box-shadow: none; color: var(--bad); }
+.chat-menu .pop button.danger:hover { background: var(--bad-wash); }
+.chat-rename input { width: 100%; min-width: 0; height: 34px; }
+.chats-empty { padding: var(--space-2); font-size: var(--text-md); }
+.chats-page .chats { max-width: 560px; }
+.chats-page .chats-head { display: none; }
+.chats-page .chat-menu summary { opacity: 1; }
+@media (max-width: 1100px) {
+  .assistant-shell { grid-template-columns: minmax(0, 1fr); }
+  .assistant-shell > .chats { display: none; }
+  .chats-link { display: inline-flex; }
+}
+@media (hover: none) {
+  .chat-menu summary { opacity: 1; }
+}
 @media (prefers-reduced-motion: reduce) {
   .live-steps .step.run, .thinking { animation: none; color: var(--ink-3); background: none; }
   .prose.streaming > :last-child::after { animation: none; }
@@ -198,6 +251,29 @@ button.ghost:hover { background: var(--hover); color: var(--ink); }
  */
 export function slotlockAssistantScript(markdownSource) {
     return `
+// Search chats: rows whose title holds what is typed (ignoring case and accents) stay shown.
+function filterChats() {
+  var filter = document.getElementById('chats-filter');
+  if (!filter) return;
+  filter.hidden = false;
+  var fold = function (text) { return text.normalize('NFKD').replace(/\\p{M}/gu, '').toLowerCase(); };
+  var apply = function () {
+    var wanted = fold(filter.value.trim());
+    for (var group of document.querySelectorAll('.chat-rows')) {
+      var shown = 0;
+      for (var row of group.children) {
+        var title = row.querySelector('.chat-title');
+        row.hidden = wanted !== '' && fold(title ? title.textContent : '').indexOf(wanted) === -1;
+        if (!row.hidden) shown += 1;
+      }
+      var label = group.previousElementSibling;
+      if (label && label.classList.contains('chat-group')) label.hidden = shown === 0;
+    }
+  };
+  filter.addEventListener('input', apply);
+  apply();
+}
+filterChats();
 (function () {
   var page = document.querySelector('[data-assistant]');
   if (!page || typeof fetch !== 'function' || typeof TextDecoder !== 'function') return;
@@ -267,14 +343,20 @@ export function slotlockAssistantScript(markdownSource) {
     event.preventDefault();
     if (!busy && box.value.trim() !== '') form.requestSubmit();
   });
-  for (var chip of page.querySelectorAll('button[data-fill]')) {
+  // A chip that asks sends through the box, so its reply streams; one that writes only fills it.
+  for (var chip of page.querySelectorAll('.chips button.chip')) {
     chip.addEventListener('click', function (event) {
       event.preventDefault();
-      box.value = this.getAttribute('data-fill') || '';
+      var fill = this.getAttribute('data-fill');
+      box.value = fill !== null ? fill : (this.value || '');
       grow();
       update();
-      box.focus();
-      box.setSelectionRange(box.value.length, box.value.length);
+      if (fill !== null) {
+        box.focus();
+        box.setSelectionRange(box.value.length, box.value.length);
+      } else if (!busy && box.value.trim() !== '') {
+        form.requestSubmit();
+      }
     });
   }
   for (var decide of document.querySelectorAll('.change-buttons form')) {
@@ -323,7 +405,8 @@ export function slotlockAssistantScript(markdownSource) {
     var prose = null;
     var proseText = '';
     var steps = null;
-    var stepNodes = {};
+    // Keyed by the provider's call id: no id, __proto__ included, may name an inherited property.
+    var stepNodes = Object.create(null);
     var frame = 0;
     follow(was);
     function draw() {
@@ -374,6 +457,18 @@ export function slotlockAssistantScript(markdownSource) {
         added = [];
         thread.insertAdjacentHTML('beforeend', e.html || '');
         setOnce(e.once);
+        // The conversation it went to: a new one has its id now, its own address, and a place in Chats.
+        if (e.chat) {
+          for (var field of page.querySelectorAll('input[name="chat"]')) field.value = e.chat;
+          if (e.url && window.history && history.replaceState) history.replaceState(null, '', e.url);
+          var heading = document.querySelector('.assistant-page .page-head h1');
+          if (heading && e.title) heading.textContent = e.title;
+          var panel = document.querySelector('aside.chats');
+          if (panel && e.chats) {
+            panel.outerHTML = e.chats;
+            filterChats();
+          }
+        }
       }
       follow(was);
     }
@@ -386,7 +481,8 @@ export function slotlockAssistantScript(markdownSource) {
     }).then(function (response) {
       var type = response.headers.get('content-type') || '';
       if (!response.body || type.indexOf('application/x-ndjson') !== 0) {
-        location.assign(page.getAttribute('data-page') + '#latest');
+        var current = form.querySelector('input[name="chat"]');
+        location.assign(page.getAttribute('data-page') + (current && current.value ? '?c=' + current.value : '') + '#latest');
         location.reload();
         return;
       }
@@ -432,7 +528,12 @@ export function slotlockAssistantScript(markdownSource) {
   });
   grow();
   update();
-  if (location.hash === '#latest' || !page.hasAttribute('data-empty')) window.scrollTo(0, document.documentElement.scrollHeight);
+  // To the latest message only when it would be behind the box: a short conversation keeps its
+  // heading (and Chats) in view.
+  var dockAtLoad = page.querySelector('.dock');
+  var lastAtLoad = thread.lastElementChild;
+  var behind = !!lastAtLoad && lastAtLoad.getBoundingClientRect().bottom > window.innerHeight - (dockAtLoad ? dockAtLoad.offsetHeight : 0);
+  if (!page.hasAttribute('data-empty') && behind) window.scrollTo(0, document.documentElement.scrollHeight);
 })();
 `;
 }

package/dashboard-scope.d.ts

@@ -0,0 +1,7 @@
+import type { SlotlockResourceScope } from './resource-profile.js';
+/** Serve one dashboard request with a scope of its own, none until the person's is read. */
+export declare function runSlotlockDashboardRequest<T>(serve: () => T): T;
+/** The request's person is limited to `scope`: what is read for them from now on keeps to it. */
+export declare function setSlotlockDashboardRequestScope(scope: SlotlockResourceScope | null): void;
+/** The scope of the dashboard request being served, or null for none (or outside a request). */
+export declare function slotlockDashboardRequestScope(): SlotlockResourceScope | null;

package/dashboard-scope.js

@@ -0,0 +1,21 @@
+// The locations and groups the person signed in to the dashboard is limited to (RFC 0004 D1), for
+// the request being served. The dashboard sets it once it has read the person's standing; the
+// store its resources read through (createSlotlockDashboardResources) runs each transaction with it
+// as its resource scope, so the database's resource_scope_v1 policies keep every read and write to
+// those resources, as they do for a key limited to them.
+import { AsyncLocalStorage } from 'node:async_hooks';
+const requests = new AsyncLocalStorage();
+/** Serve one dashboard request with a scope of its own, none until the person's is read. */
+export function runSlotlockDashboardRequest(serve) {
+    return requests.run({ scope: null }, serve);
+}
+/** The request's person is limited to `scope`: what is read for them from now on keeps to it. */
+export function setSlotlockDashboardRequestScope(scope) {
+    const request = requests.getStore();
+    if (request)
+        request.scope = scope;
+}
+/** The scope of the dashboard request being served, or null for none (or outside a request). */
+export function slotlockDashboardRequestScope() {
+    return requests.getStore()?.scope ?? null;
+}

package/dashboard.d.ts

@@ -1,4 +1,8 @@
 import type { SlotlockDashboardTeams } from './teams.js';
+import type { SlotlockDashboardWorkspaces } from './workspaces.js';
+import { type SlotlockDnsResolver } from './domains.js';
+import { type SlotlockSecretBox } from './oidc.js';
+import type { SlotlockAuditEvent, SlotlockAuditEventInput } from './store.js';
 import { type SlotlockApiKeyStore } from './api-keys.js';
 import { type SlotlockAgentCalendarBackend, type SlotlockAgentOperation, type SlotlockAgentOperationDispatchOptions, type SlotlockAgentPrincipal, type SlotlockAgentUsage } from './agent-server.js';
 import { type SlotlockAssistantStore } from './assistant.js';
@@ -8,9 +12,12 @@ import { type SlotlockPlan, type SlotlockTenantPlan } from './plans.js';
 import { type SlotlockLocation, type SlotlockResourceGroup, type SlotlockResourceProfileInput } from './resource-profile.js';
 import { type SlotlockUsageRow } from './usage.js';
 import { type CreateWebhookEndpointResult, type SlotlockChange, type SlotlockWebhookEndpoint } from './event-feed.js';
-import type { SlotlockSql, SlotlockStore, SlotlockWaitlistEntry } from './store.js';
+import { type SlotlockSql, type SlotlockStore, type SlotlockSubject, type SlotlockSubjectErasure, type SlotlockSubjectExport, type SlotlockTenantExport, type SlotlockTenantExportPartResult, type SlotlockWaitlistEntry } from './store.js';
+import type { SlotlockAvailabilityDefaults, SlotlockAvailabilityExceptionInput, SlotlockHolidayCalendar, SlotlockOverrideResources } from './availability-store.js';
+import { type SlotlockAvailabilityException } from './hours.js';
+import { type SlotlockHolidaySource } from './holiday-import.js';
 import { type SlotlockSandboxScenario } from './sandbox.js';
-import type { Interval, SlotlockAgendaEntry, SlotlockApproval, SlotlockResource, SlotlockBookingRuleDefaults, WeeklyAvailabilityRule } from './types.js';
+import type { Interval, SlotlockAgendaEntry, SlotlockApproval, SlotlockContact, SlotlockResource, SlotlockBookingRuleDefaults, WeeklyAvailabilityRule } from './types.js';
 /** Resources one dashboard tenant may hold. */
 export declare const SLOTLOCK_DASHBOARD_MAX_RESOURCES = 500;
 /**
@@ -18,6 +25,12 @@ export declare const SLOTLOCK_DASHBOARD_MAX_RESOURCES = 500;
  * person who made it (`github:<user id>`) as `actor`, to record on the event feed.
  */
 export interface SlotlockDashboardResources {
+    /**
+     * These adapters keep each request to the locations and groups its member is limited to (RFC
+     * 0004 D1), as createSlotlockDashboardResources's do (dashboard-scope.ts). Without it, a limited
+     * member reaches only their own account.
+     */
+    keepsToScope?: boolean;
     list(tenantRef: string): Promise<SlotlockResource[]>;
     /** How many resources the tenant has, archived ones included, as a resource limit counts them. */
     count?(tenantRef: string): Promise<number>;
@@ -30,13 +43,64 @@ export interface SlotlockDashboardResources {
      */
     add(tenantRef: string, externalRef: string, timezone: string, actor?: string): Promise<SlotlockResource>;
     /**
-     * Set the bookable hours of one of the tenant's resources (`{ id }`) or of all of them; `null`
-     * hands them back to the server's and `[]` closes. Returns how many resources changed: 0 for an
-     * id that is not the tenant's.
+     * Set the bookable hours of one of the tenant's resources (`{ id }`), one of its locations
+     * (`{ location }`), or the tenant's own (`'all'`), which every resource without its own inherits
+     * (RFC 0004 B2); `null` hands them to what is above and `[]` closes. For the tenant's, `override`
+     * says what becomes of resources' own hours (SlotlockOverrideResources: `none` keeps them).
+     * Returns 0 for an id or location that is not the tenant's, else at least 1 (for the tenant's, how
+     * many resources they now apply to).
      */
     setHours(tenantRef: string, target: {
         id: string;
-    } | 'all', rules: WeeklyAvailabilityRule[] | null, actor?: string): Promise<number>;
+    } | {
+        location: string;
+    } | 'all', rules: WeeklyAvailabilityRule[] | null, actor?: string, override?: SlotlockOverrideResources): Promise<number>;
+    /**
+     * What the tenant keeps, exported whole, and what it keeps about one person, exported or erased
+     * (RFC 0004 D3): Settings, Privacy.
+     */
+    privacy?: {
+        /** Ask for an export, built in the background; refused while one is built, or with five kept. */
+        createExport(tenantRef: string, actor?: string): Promise<SlotlockTenantExport>;
+        listExports(tenantRef: string): Promise<SlotlockTenantExport[]>;
+        exportPart(tenantRef: string, exportId: string, part: number): Promise<SlotlockTenantExportPartResult>;
+        deleteExport(tenantRef: string, exportId: string): Promise<boolean>;
+        exportSubject(tenantRef: string, subject: SlotlockSubject): Promise<SlotlockSubjectExport>;
+        eraseSubject(tenantRef: string, subject: SlotlockSubject, actor?: string): Promise<SlotlockSubjectErasure>;
+    };
+    /** The people the tenant keeps to tell about bookings (RFC 0004 P3), and forgetting one. */
+    contacts?: {
+        list(tenantRef: string, limit: number, after?: string): Promise<SlotlockContact[]>;
+        forget(tenantRef: string, ref: string, actor?: string): Promise<{
+            deleted: boolean;
+            bookings: number;
+        }>;
+    };
+    /** The tenant's stored hours and its closures and special hours (RFC 0004 B1, B2). */
+    hours?: {
+        defaults(tenantRef: string): Promise<SlotlockAvailabilityDefaults>;
+        exceptions(tenantRef: string, limit: number): Promise<SlotlockAvailabilityException[]>;
+        addException(tenantRef: string, exception: Omit<SlotlockAvailabilityExceptionInput, 'tenantRef'>, actor?: string): Promise<SlotlockAvailabilityException>;
+        deleteException(tenantRef: string, id: string, actor?: string): Promise<boolean>;
+        /**
+         * Import a holiday calendar (its text, or a URL with `byUrl`): each all-day event closes its
+         * days for the next two years. Kept by name at its scope, so importing it again updates it and
+         * removes the holidays it dropped; `subscribe` imports a URL again every 30 days.
+         */
+        importHolidays(tenantRef: string, source: SlotlockHolidaySource, scope: {
+            location?: string;
+            resourceId?: string;
+        }, actor?: string): Promise<{
+            imported: number;
+            skipped: number;
+            removed: number;
+        }>;
+        /** Whether importHolidays reads calendars by URL. */
+        byUrl?: boolean;
+        /** The tenant's holiday calendars, and deleting one with its closures (false: not the tenant's). */
+        calendars?(tenantRef: string): Promise<SlotlockHolidayCalendar[]>;
+        deleteCalendar?(tenantRef: string, id: string, actor?: string): Promise<boolean>;
+    };
     /** What occupies the tenant's resources in `window`, by start: the overview's agenda. */
     agenda?(tenantRef: string, window: Interval, limit: number): Promise<SlotlockAgendaEntry[]>;
     /** The tenant's latest changes, newest first: the overview's activity. */
@@ -133,6 +197,27 @@ export interface SlotlockDashboardResources {
     };
     /** The tenant's assistant settings and its members' conversations (assistant.ts). */
     assistant?: SlotlockAssistantStore;
+    /**
+     * The tenant's audit log (slotlock.audit_events): who changed keys, webhooks, billing and
+     * settings, and every refusal. Append-only: record, and read newest first.
+     */
+    audit?: {
+        /** Whether the workspace's chain holds from its oldest event kept (store verifyAuditChain). */
+        verify?(tenantRef: string): Promise<{
+            checked: number;
+            brokenAt: number | null;
+        }>;
+        record(tenantRef: string, event: SlotlockAuditEventInput): Promise<void>;
+        list(tenantRef: string, params?: {
+            limit?: number;
+            before?: {
+                occurredAt: Date;
+                id: string;
+            };
+            action?: string;
+            actorRef?: string;
+        }): Promise<SlotlockAuditEvent[]>;
+    };
     /** The tenant's webhook endpoints, as the event feed keeps them. */
     webhooks?: {
         list(tenantRef: string): Promise<SlotlockWebhookEndpoint[]>;
@@ -229,7 +314,10 @@ export interface SlotlockDashboardAssistantOptions {
     turnTimeoutMs?: number;
     /** Model calls one message may make (8 by default, at most 20). */
     maxSteps?: number;
-    /** How long a conversation is kept after its last message: 2 hours by default. */
+    /**
+     * How long a conversation is kept after its last message (1 second to 3,650 days). Without it, a
+     * member keeps each conversation until they delete it, up to SLOTLOCK_ASSISTANT_MAX_CHATS.
+     */
     conversationTtlMs?: number;
 }
 /**
@@ -306,6 +394,18 @@ export interface SlotlockDashboardBilling {
     /** The https origins Upgrade and Manage redirect to, allowed in the policy's form-action. */
     formOrigins: readonly string[];
 }
+/** Sends an invitation's link by email (hosted Slotlock); without one, the person inviting sends it. */
+export interface SlotlockInvitationSender {
+    send(invitation: {
+        to: string;
+        /** The team workspace's name, and how the person inviting is shown. */
+        workspace: string;
+        inviter: string;
+        role: string;
+        link: string;
+        expiresAt: Date;
+    }): Promise<void>;
+}
 export interface SlotlockDashboardOptions {
     /** Where people reach the server; the dashboard lives at `<publicUrl>/dashboard`. */
     publicUrl: string;
@@ -373,6 +473,45 @@ export interface SlotlockDashboardOptions {
     organizations?: readonly string[] | 'enabled';
     /** The organizations turned on, with `organizations: 'enabled'` (teams.ts). */
     teams?: SlotlockDashboardTeams;
+    /**
+     * Who belongs to which workspace, and as what (workspaces.ts, workspace-roles.ts): read on every
+     * request, so a role changed or a membership ended applies at the next one, and "Sign out
+     * everywhere" ends every session. Without it, a person is the Owner of their own workspace, and an
+     * organization's GitHub owners are its Owners and its other members Developers, as read at sign-in.
+     */
+    workspaces?: SlotlockDashboardWorkspaces;
+    /**
+     * Team workspaces (`team:<id>`): anyone signed in creates one, invites people to it by email with
+     * a role, and changes or removes them (workspaces.ts teams). Needs `workspaces` with its
+     * database, and no fixed list of organizations. Off unless set.
+     */
+    teamWorkspaces?: boolean;
+    /**
+     * Verified domains (workspace-domains.ts): a team's Owner proves a domain with a DNS record, and
+     * the people whose verified address is at it may ask to join. Needs team workspaces. The resolvers
+     * look the record up when an Owner asks (domains.ts slotlockDomainResolvers); the daily check runs
+     * in the server's maintenance. Off unless set.
+     */
+    domains?: {
+        resolvers: readonly SlotlockDnsResolver[];
+    };
+    /**
+     * Single sign-on through each team's own identity provider (OpenID Connect; workspace-sso.ts,
+     * oidc.ts): needs verified domains. `secretBox` seals the teams' client secrets; `fetch` reaches
+     * the URLs a team's Owner gives (on Node, one that refuses private addresses). Off unless set.
+     */
+    sso?: {
+        secretBox: SlotlockSecretBox;
+        fetch?: typeof fetch;
+    };
+    /**
+     * SCIM 2.0 provisioning (workspace-scim.ts, scim-server.ts): each team's identity provider adds,
+     * deactivates and groups its people at `<dashboard>/scim/v2/<team id>`, with a token an Owner
+     * makes on Settings, Identity. Needs verified domains. Off unless set.
+     */
+    scim?: boolean;
+    /** Sends invitations by email; the person inviting is shown each link either way. */
+    invitations?: SlotlockInvitationSender;
     keys: SlotlockApiKeyStore;
     resources: SlotlockDashboardResources;
     /** Shared by every server behind this origin: see SlotlockDashboardState. */
@@ -418,12 +557,17 @@ export interface SlotlockDashboard {
  * The dashboard's resources, in the store under each tenant's row-level security. Adds hold the cap
  * in the database (a READ COMMITTED transaction, under a per-tenant lock).
  */
-export declare function createSlotlockDashboardResources(store: SlotlockStore, options?: {
+export declare function createSlotlockDashboardResources(given: SlotlockStore, options?: {
     /**
      * The agent backend (`createSlotlockStoreAgentBackend`) a granted approval's booking is made
      * through: with it, the dashboard lists approvals and decides them.
      */
     agentBackend?: SlotlockAgentCalendarBackend;
+    /**
+     * Fetches holiday calendars by URL (the guarded fetch under `serve`): with it, Closures imports
+     * and subscribes to a calendar's address.
+     */
+    holidayFetch?: typeof fetch;
 }): SlotlockDashboardResources;
 /**
  * Records accepted write confirmations (`SlotlockAgentConfirmationOptions.consumeAcceptance`) in