Board Update
May 22
Enterprise architecture, platform hardening, availability refactor, Sadie enhancements, messaging overhaul & widget v2 design
Two weeks, three products
May 11–22 — shipping across Covers, Prospero, and Sadie in parallel
Hassan’s Focus
- Enterprise hierarchy — multi-venue workspace + @repo/time extraction (COV-71)
- Platform hardening — security sprint, admin shell, feature flags, audit log
- Availability refactor — zero-smells architecture rewrite (COV-391)
- Prospero — automotive scrapers, parallel pipeline, 10 demos booked
Ali’s Focus
- Sadie voice AI — 12 call quality improvements, dynamic context injection
- Messaging overhaul — 5 message type toggles, collapsible call threads
- Email templates — visual builder, branded sends, S3 uploads
- Booking widget — per-slot capacity, seating preferences, channel filtering
Enterprise-ready architecture
Multi-venue workspace, Google Places integration, and timezone extraction
Multi-Venue Workspace
Org → venue hierarchy with a redesigned switcher. Single-venue orgs auto-navigate. Multi-venue orgs expand with smooth animation.
Google Places API
Session-based billing, restaurant-type restriction, rich autocomplete with photos and ratings. Falls back to Nominatim if no API key.
@repo/time Extraction
Single source of truth for timezone and date logic. getVenueNow(), toDateStr() — never new Date() for venue time.
Dependency Pinning
All deps pinned across every workspace. 3-day Renovate delay. TanStack aligned. Docker images updated with @repo/time.
Branded emails
Full visual email template builder — restaurants customize colors, logo, fonts, and preview in real time
Visual Editor
50/50 split layout — editor left, preview right. Color pickers for background, heading, text, and accent. 2×2 color grid.
Logo & Image Upload
Upload logo and body images. Each venue’s assets isolated per location. Images render in preview and all sent emails.
Font Customization
9 web-safe font options — system default plus Georgia, Palatino, Times New Roman, Arial, Helvetica, Verdana, Trebuchet MS, Courier New.
Test & Go Live
Send test emails before activating. Rate-limited to 3/min. Branded templates across all send paths.
Platform hardening
Security sprint, admin infrastructure, and feature flag system
Auth Hardening
Email verification on signup, 10-char minimum passwords, rate limiting on all auth + OAuth endpoints, Swagger disabled in production.
SSRF & Injection Protection
DNS rebinding + redirect blocking on webhooks. IPv6 ranges blocked. HTML escaping in email templates. Crypto-secure confirmation codes.
Admin Shell (COV-372)
Super-admin UI with role-gated access, audit log, schema drift checker in CI, idempotent migrations.
Feature Flags (COV-383)
Org overrides, master-key global kill switch, UI gating on sidebar + pages + onboarding. OCC guards on all service view mutations.
Granular message control
5 message type toggles and 3 channel controls — restaurants decide exactly what gets sent and how
Booking Details
ActiveDate, time, party size, confirmation code. Separated from confirmation request — toggled independently.
Confirmation Request
ActiveAsks the guest to confirm. Separate from booking details — send details without requesting confirmation.
Reminder
Active4h, 12h, 24h, or 48h before. Enforced in SQS enqueue + send worker.
Cancellation
InactiveNew DB column + backend enforcement. Toggled independently from other types.
Reply Ack
InactiveIntent still processed when disabled, just no SMS back. Saves costs on chatty threads.
Channel Controls
SMS, WhatsApp, Email toggles wired to widget. Only enabled channels show as guest contact options.
Backend Enforcement
Every toggle enforced across all send paths. All senders check their flag before sending.
Auto-Configuration
New venues auto-get messaging config with SMS and email on. No manual setup.
159 New Tests
54 toggle-matrix, 26 send-booking-details, 6 webhook-reply-ack, plus independence tests.
Availability — zero smells
Architecture rewrite — renamed API surface, closure types, component splits, and full E2E coverage
API Rename
services.templates.* → services.* across the codebase. serviceTemplateId aliased to serviceId in 6 packages.
Closure Types
service_date_exception.kind enum — marker vs trim. 5-column unique constraint.
Shell + Workspace Splits
Page and ServicePanel split into Shell + Body. Largest hooks reduced from 800+ to ~200 lines.
E2E: 126/141 (89%)
Unified mock framework. Global-setup with sign-in + seed + storageState reuse. 6-tier coverage model.
Unified call threads
Sadie calls grouped into collapsible sections with outcome badges, SMS below, and smooth animations
Collapsible Sections
Each call groups into a compact header — icon, timestamp, duration, outcome badge. Click to expand. CSS grid-rows animation.
SMS Outside Calls
Confirmation and reminder SMS appear as regular thread messages below the call section.
Outcome Badges
Booking Made, Cancelled, Rescheduled, General Inquiry. Instant scan without expanding.
Full Summary
Complete call summary in collapsed header. No truncation. Key info at a glance.
Smarter conversations
12 call quality improvements — Sadie sounds more natural, knows more context, and makes fewer mistakes
Natural Speech
Dates read as “Thursday, May 14th” not ISO. Confirmation codes sent via SMS instead of spelled out.
Guest Profiles
VIP tier, allergies, visit count, preferred name. No re-asking for known information.
Dynamic Schedule
Operating hours injected live from service templates. Sadie always knows when the restaurant is open.
Smart Tagging
Freeform allergy and dietary tagging — creates new tags on the fly. No fixed allergen list.
Configurable Messaging
Post-call SMS configurable from the dashboard — booking details, cancellation, confirmation toggleable per venue.
Prospero — lead engine
Automotive scrapers, hotel directories, contact extraction — and first real conversions
Automotive Scrapers
AutoTrader, CarGurus, Dealer Associations, DMS Detector — real scrapers with noise filtering and deduplication.
Hotel Directories
Expanded to 9 regional associations worldwide. Full contact extraction with quality scoring per directory.
Contact Extraction
7+ methods with noise filtering pipeline. Industry-aware scoring — completeness checks per vertical.
Parallel Pipeline
Optimized delays, hash-bucketed dedup, 6 new California market presets. Full pipeline runs in parallel.
Booking widget redesigned
Three capabilities no competitor offers — an intelligent guest experience
Sadie Voice via WebRTC
Industry FirstCall Sadie from the widget — no phone, no app. Live transcript, instant confirmation. The future of reservations.
Sadie on WhatsApp
Book, reschedule, or ask questions on the channel 2 billion people already use. No new app, no friction.
Apple & Google Wallet
QR code reservation. Guest walks in, host scans — instantly knows who they are. Zero-friction arrival.
What’s next
The roadmap beyond this sprint — from first revenue to AI-powered operations
First Customer Close
Onboarding pipeline ready. White-label widget, branded emails, and Sadie voice all demoed. Targeting June close — revenue milestone.
WhatsApp Channel
WhatsApp Business API integration for guest messaging. Two-way confirmations, reminders, and booking updates via the channel guests already use.
Mise — Proactive Intelligence
AI assistant that surfaces anomalies, prep alerts, and trends before staff asks. “Friday bookings are 40% above average” — not just search, but foresight.
Sadie Outbound
Sadie initiates calls — confirmation follow-ups, no-show re-engagement, waitlist notifications. Turns voice AI from reactive to proactive.
Stripe Billing
Self-serve signup with Stripe integration. Free trial → paid conversion. Usage-based billing for Sadie minutes. Subscription management in-app.
Mobile App (Expo)
Native iOS + Android app for hosts and managers. Push notifications for walk-ins, no-shows, and Sadie escalations. Floor plan on the go.