@aglyn/plugins-ai 1.0.0-beta.143

package/src/lib/providers/routing.js

@@ -0,0 +1,450 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ import { AI_SETTING_PLATFORM, AI_STEP_MODEL_SETTING } from "../plugin-config.js";
+import { AI_STEP_TIERS, aiCatalogEntry, aiDefaultModelFor } from "./catalog.js";
+import { aiProviderById, defaultAiProvider } from "./registry.js";
+/**
+ * The routing table (AGL-2937, AGL-2939): step kind → provider and model,
+ * through the catalog and never a vendor literal.
+ *
+ * Precedence, dearest override first:
+ *
+ * 1. the org's `pluginSettings/ai` — a provider, and a model per step kind
+ *    that must be one the provider serves;
+ * 2. the deployment's environment — `AI_PROVIDER` for the provider,
+ *    `AI_DEFAULT_MODEL` for every step, and `ASSIST_MODEL` for the
+ *    assistant alone (the incident-response override the chat door has
+ *    always honored);
+ * 3. the catalog's tier for the step kind on the resolved provider.
+ */ /** The environment override for every step kind. */ export const AI_DEFAULT_MODEL_ENV = 'AI_DEFAULT_MODEL';
+/** The assistant's own override, honored before the general one. */ export const ASSIST_MODEL_ENV = 'ASSIST_MODEL';
+/** A settings value that names a real choice, or `undefined` for the platform default. */ function chosen(settings, key) {
+    const value = settings == null ? void 0 : settings[key];
+    return typeof value === 'string' && value && value !== AI_SETTING_PLATFORM ? value : undefined;
+}
+/** The provider a workspace runs on: its own choice when registered, else the platform's. */ export function resolveAiProvider(settings) {
+    const wanted = chosen(settings, 'provider');
+    if (wanted) {
+        const named = aiProviderById(wanted);
+        if (named) return named;
+    }
+    return defaultAiProvider();
+}
+/**
+ * The model a step kind runs on for a workspace, on the resolved provider.
+ * A chosen model on another provider is not served — the provider decides
+ * what it can run — and falls back to the provider's default for the tier.
+ */ export function resolveAiRoute(kind, settings) {
+    var _ref, _ref1, _servedBy;
+    var _process_env_ASSIST_MODEL_ENV, _process_env_AI_DEFAULT_MODEL_ENV;
+    const provider = resolveAiProvider(settings);
+    if (!provider) return undefined;
+    const servedBy = (modelId)=>{
+        var _aiCatalogEntry;
+        return modelId && ((_aiCatalogEntry = aiCatalogEntry(modelId)) == null ? void 0 : _aiCatalogEntry.provider) === provider.id ? modelId : undefined;
+    };
+    const model = (_ref = (_ref1 = (_servedBy = servedBy(chosen(settings, AI_STEP_MODEL_SETTING[kind]))) != null ? _servedBy : kind === 'assist.chat' ? servedBy((_process_env_ASSIST_MODEL_ENV = process.env[ASSIST_MODEL_ENV]) == null ? void 0 : _process_env_ASSIST_MODEL_ENV.trim()) : undefined) != null ? _ref1 : servedBy((_process_env_AI_DEFAULT_MODEL_ENV = process.env[AI_DEFAULT_MODEL_ENV]) == null ? void 0 : _process_env_AI_DEFAULT_MODEL_ENV.trim())) != null ? _ref : aiDefaultModelFor(provider.id, AI_STEP_TIERS[kind]);
+    return model ? {
+        provider,
+        model
+    } : undefined;
+}
+/**
+ * THE ROUTING TABLE (AGL-2937): what each step kind asks of the model, in one
+ * place, with the evidence beside it.
+ *
+ * A step runs on the smallest tier that holds its eval floor. A row moves to a
+ * cheaper tier, or a lower effort, only when a recorded eval
+ * (`npm run eval:ai-live`) holds the floor there; while a row's score is the
+ * authored references', it says so, and the row stays where production has
+ * run it. `runtime/ai-eval.spec.ts` recomputes every row's score from the
+ * harness, so a row cannot claim a score its briefs do not hold.
+ *
+ * A ceiling is sized from the p95 output the staff signals page reports for
+ * the kind once production has served it; until then `maxTokensBasis` names
+ * what it is sized from. The same spec holds every reference answer under its
+ * row's ceiling at three characters a token, a reading that errs high for a
+ * tokenizer that splits finer than four.
+ */ export const AI_ROUTING_TABLE = {
+    'assist.chat': {
+        // A scoped, latency-sensitive chat turn: no thinking, the low effort rung.
+        thinking: 'off',
+        effort: 'low',
+        maxTokens: 1024,
+        maxTokensBasis: 'a docs-grounded answer of a few short paragraphs; the edit rung raises it for its tool call',
+        eval: {
+            kinds: [
+                'chat'
+            ],
+            scores: 'answers',
+            source: 'authored',
+            passRate: 1,
+            meanScore: 0.9688
+        }
+    },
+    'copy.element': {
+        thinking: null,
+        effort: null,
+        maxTokens: 1024,
+        maxTokensBasis: 'one element of copy, about the length of the text it replaces',
+        eval: {
+            kinds: [
+                'element'
+            ],
+            scores: 'answers',
+            source: 'authored',
+            passRate: 1,
+            meanScore: 0.9688
+        }
+    },
+    'copy.section': {
+        thinking: null,
+        effort: null,
+        maxTokens: 3000,
+        maxTokensBasis: 'a section of four to twelve nodes written as JSON',
+        eval: {
+            kinds: [
+                'section'
+            ],
+            scores: 'answers',
+            source: 'authored',
+            passRate: 1,
+            meanScore: 0.9688
+        }
+    },
+    'copy.blog': {
+        thinking: null,
+        effort: null,
+        maxTokens: 2048,
+        maxTokensBasis: 'one blog post body in markdown-lite',
+        eval: {
+            kinds: [
+                'blog'
+            ],
+            scores: 'answers',
+            source: 'authored',
+            passRate: 1,
+            meanScore: 0.9688
+        }
+    },
+    'generate.section': {
+        thinking: null,
+        effort: null,
+        maxTokens: 3000,
+        maxTokensBasis: 'a section of four to twelve nodes written as JSON',
+        eval: {
+            kinds: [
+                'section'
+            ],
+            scores: 'answers',
+            source: 'authored',
+            passRate: 1,
+            meanScore: 0.9688
+        }
+    },
+    'job.layout': {
+        // The plan was reasoned out and confirmed before the step, so it writes without thinking.
+        thinking: 'off',
+        effort: null,
+        maxTokens: 8000,
+        maxTokensBasis: "tighter than the doctrine's default for a layout, so one step and its re-ask fit the job beat's budget; the tree is held to its rule 17 budget either way",
+        eval: {
+            kinds: [
+                'layout'
+            ],
+            scores: 'answers',
+            source: 'authored',
+            passRate: 1,
+            meanScore: 0.9833
+        }
+    },
+    'job.template': {
+        thinking: 'off',
+        effort: null,
+        maxTokens: 8000,
+        maxTokensBasis: "tighter than the doctrine's default for a template, so one step and its re-ask fit the job beat's budget; the tree is held to its rule 17 budget either way",
+        eval: {
+            kinds: [
+                'template'
+            ],
+            scores: 'answers',
+            source: 'authored',
+            passRate: 1,
+            meanScore: 0.9833
+        }
+    },
+    'job.component': {
+        // A component's tree and the properties it declares, in one answer, from a
+        // plan reasoned out and confirmed before the step (AGL-2908).
+        thinking: 'off',
+        effort: null,
+        maxTokens: 8000,
+        maxTokensBasis: "the ceiling the layout and template steps keep, so one step and its re-ask fit the job beat's budget; the tree is held to its rule 17 budget either way",
+        eval: {
+            kinds: [
+                'component'
+            ],
+            scores: 'answers',
+            source: 'authored',
+            passRate: 1,
+            meanScore: 0.9833
+        }
+    },
+    'job.crm': {
+        // CRM by AI (AGL-2917): short answers through a strict tool, written from
+        // the facts the CRM reports about the record the member opened, with no
+        // thinking. The ceiling fits an inline door, so a member is answered in
+        // the request that asked.
+        thinking: null,
+        effort: null,
+        maxTokens: 700,
+        maxTokensBasis: "the largest answer a CRM tool accepts: sixty columns matched to fields by number, or an email draft at its length limits, at three characters a token with room, as ai-job-crm-step.spec.ts measures it",
+        eval: {
+            kinds: [
+                'crm'
+            ],
+            scores: 'answers',
+            source: 'authored',
+            passRate: 1,
+            meanScore: 0.9938
+        }
+    },
+    'job.experiment': {
+        // Variants of one piece of copy, or a result explained against a verdict
+        // code reached before the request was made (AGL-2914). The judgment is
+        // already made either way, so it writes without thinking.
+        thinking: 'off',
+        effort: null,
+        maxTokens: 1500,
+        maxTokensBasis: "four variants at the tool's own lengths — a name, a headline, a body and a rationale each — written as JSON, about 3,000 characters at three characters a token with room; an explanation is a headline, four sentences and a next step, well under it, as ai-job-experiment-step.spec.ts measures both",
+        eval: {
+            kinds: [
+                'experiment'
+            ],
+            scores: 'answers',
+            source: 'authored',
+            passRate: 1,
+            meanScore: 1
+        }
+    },
+    'job.form': {
+        // A form's two halves in one answer: the field declaration and the design
+        // that renders it, as JSON, with no extended thinking (AGL-2913). The step
+        // asks this ceiling, which is the doctrine's own for a form, and registers
+        // the time it takes (AGL-3035).
+        thinking: 'off',
+        effort: null,
+        maxTokens: 6000,
+        maxTokensBasis: "the largest form the doctrine's output budget admits, a form's fields, its consent and routing declaration and the design that renders them written as JSON at the wordiest golden's characters a stored byte, under it with room; ai-job-form-step.spec.ts measures it",
+        eval: {
+            kinds: [
+                'form'
+            ],
+            scores: 'answers',
+            source: 'authored',
+            passRate: 1,
+            meanScore: 0.9833
+        }
+    },
+    'job.insight': {
+        // Readers chosen, then their tables phrased (AGL-2915): short sentences
+        // over figures code computed, each held to the rows it cites, so no
+        // extended thinking. The read call before the answer asks for at most
+        // `AI_INSIGHT_READ_MAX_TOKENS` of the same allowance.
+        thinking: 'off',
+        effort: null,
+        maxTokens: 1500,
+        maxTokensBasis: 'five insights at their 280-character bound, each citing three tables of ten rows, and the gap sentence, written as JSON: about 2,700 characters, under 1,000 tokens at three characters a token, with room',
+        eval: {
+            kinds: [
+                'insight'
+            ],
+            scores: 'answers',
+            source: 'authored',
+            passRate: 1,
+            meanScore: 0.9688
+        }
+    },
+    'job.page': {
+        // One section of a page, written against a plan a member already
+        // confirmed, so it writes without thinking (AGL-2907). The ceiling here
+        // is the MOST a pass may ask for; each pass sizes its own down from it to
+        // what fits the time the job beat can give the step, which on the
+        // balanced tier is about half of this.
+        thinking: 'off',
+        effort: null,
+        maxTokens: 2000,
+        maxTokensBasis: "a section of a page written as JSON, about forty elements at the step's measured 45 tokens an element; a pass lowers it to the worst case that fits AI_JOB_PAGE_STEP_MINIMUM_MS on the model it runs",
+        eval: {
+            kinds: [
+                'page'
+            ],
+            scores: 'answers',
+            source: 'authored',
+            passRate: 1,
+            meanScore: 0.9833
+        }
+    },
+    'job.products': {
+        // A product's copy from its name, text and photo, or a store's first
+        // products, categories and discounts from a brief (AGL-2916): answers held
+        // to the storefront claim rules, written with no extended thinking.
+        thinking: 'off',
+        effort: null,
+        maxTokens: 8000,
+        maxTokensBasis: "the largest catalog the tool accepts, twelve proposed products at every bound written as JSON, which the balanced tier asks as much of as fits a beat; one product's copy asks 1,500 and categories with discounts 2,000, as ai-job-products-step.spec.ts measures them",
+        eval: {
+            kinds: [
+                'product',
+                'catalog',
+                'categories'
+            ],
+            scores: 'answers',
+            source: 'authored',
+            passRate: 1,
+            meanScore: 0.9922
+        }
+    },
+    'job.email': {
+        // One email design from the email palette, written against the brief with
+        // no extended thinking (AGL-2912). A campaign job runs the same
+        // generation, so it carries the same ceiling.
+        thinking: 'off',
+        effort: null,
+        maxTokens: 6000,
+        maxTokensBasis: "an email's node map written as JSON, with three subject lines and three preheaders beside it",
+        eval: {
+            kinds: [
+                'email'
+            ],
+            scores: 'answers',
+            source: 'authored',
+            passRate: 1,
+            meanScore: 0.9688
+        }
+    },
+    'job.campaign': {
+        // The campaign job generates its email through the email step, so it is
+        // routed identically; the draft campaign it also writes asks nothing of
+        // the model (AGL-2912).
+        thinking: 'off',
+        effort: null,
+        maxTokens: 6000,
+        maxTokensBasis: "an email's node map written as JSON, with three subject lines and three preheaders beside it",
+        eval: {
+            kinds: [
+                'email'
+            ],
+            scores: 'answers',
+            source: 'authored',
+            passRate: 1,
+            meanScore: 0.9688
+        }
+    },
+    'job.workflow': {
+        // An automation drafted from a description, or one explained (AGL-2919):
+        // which trigger and which steps a description means is the judgment the
+        // step sells, so it thinks before it answers.
+        thinking: 'adaptive',
+        effort: null,
+        maxTokens: 4000,
+        maxTokensBasis: 'the largest automation the tool accepts, 6,000 characters written out as JSON, at three characters a token with as much again to think in, as ai-job-workflow-step.spec.ts measures it',
+        eval: {
+            kinds: [
+                'workflow'
+            ],
+            scores: 'answers',
+            source: 'authored',
+            passRate: 1,
+            meanScore: 0.9688
+        }
+    },
+    'job.seo': {
+        thinking: null,
+        effort: null,
+        maxTokens: 1024,
+        maxTokensBasis: "the largest listing the tool accepts, at three characters a token with a quarter again, as ai-job-seo-step.spec.ts measures it; an audit's site proposal and fix batches keep ceilings of their own, measured the same way",
+        eval: {
+            kinds: [
+                'seo'
+            ],
+            scores: 'answers',
+            source: 'authored',
+            passRate: 1,
+            meanScore: 1
+        }
+    },
+    'job.text': {
+        thinking: 'adaptive',
+        effort: null,
+        maxTokens: 1024,
+        maxTokensBasis: 'a few paragraphs of copy; a brief asking for more gets a draft to extend',
+        eval: {
+            kinds: [
+                'text'
+            ],
+            scores: 'answers',
+            source: 'authored',
+            passRate: 1,
+            meanScore: 1
+        }
+    },
+    'job.theme': {
+        thinking: 'adaptive',
+        effort: null,
+        maxTokens: 8000,
+        maxTokensBasis: 'the largest answer the theme tool accepts, about 2,500 tokens of JSON as ai-job-theme-step.spec.ts measures it, with as much again to think in',
+        eval: {
+            kinds: [
+                'theme'
+            ],
+            scores: 'answers',
+            source: 'authored',
+            passRate: 1,
+            meanScore: 0.9688
+        }
+    },
+    'job.plan': {
+        thinking: 'adaptive',
+        effort: null,
+        maxTokens: 8000,
+        maxTokensBasis: 'a plan of up to twelve screens with sixteen sections each, with room to think',
+        eval: {
+            kinds: [
+                'page',
+                'template',
+                'component',
+                'layout',
+                'form'
+            ],
+            scores: 'plans',
+            source: 'authored',
+            passRate: 1,
+            meanScore: null
+        }
+    }
+};
+/** The model id alone — what a door records on the meter and the job. */ export function aiModelForStep(kind, settings) {
+    const route = resolveAiRoute(kind, settings);
+    if (!route) {
+        // Every door gates on the provider being configured before it asks
+        // for a model, so this is a wiring fault rather than a customer path.
+        throw new Error('no AI provider is registered');
+    }
+    return route.model;
+}
+
+//# sourceMappingURL=routing.js.map

package/src/lib/providers/routing.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../libs/plugins/ai/src/lib/providers/routing.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { AI_SETTING_PLATFORM, AI_STEP_MODEL_SETTING } from '../plugin-config'\nimport {\n  AI_STEP_TIERS,\n  aiCatalogEntry,\n  aiDefaultModelFor,\n  type AiStepKind,\n} from './catalog'\nimport type { AiEvalKind } from '../runtime/ai-eval'\nimport type { AiEffort, AiProvider, AiThinking } from './contract'\nimport { aiProviderById, defaultAiProvider } from './registry'\n\n/**\n * The routing table (AGL-2937, AGL-2939): step kind → provider and model,\n * through the catalog and never a vendor literal.\n *\n * Precedence, dearest override first:\n *\n * 1. the org's `pluginSettings/ai` — a provider, and a model per step kind\n *    that must be one the provider serves;\n * 2. the deployment's environment — `AI_PROVIDER` for the provider,\n *    `AI_DEFAULT_MODEL` for every step, and `ASSIST_MODEL` for the\n *    assistant alone (the incident-response override the chat door has\n *    always honored);\n * 3. the catalog's tier for the step kind on the resolved provider.\n */\n\n/** The environment override for every step kind. */\nexport const AI_DEFAULT_MODEL_ENV = 'AI_DEFAULT_MODEL'\n/** The assistant's own override, honored before the general one. */\nexport const ASSIST_MODEL_ENV = 'ASSIST_MODEL'\n\n/** The org's resolved `pluginSettings/ai` values, as `getPluginConfig` merges them. */\nexport type AiPluginSettings = Record<string, unknown>\n\nexport interface AiRoute {\n  provider: AiProvider\n  model: string\n}\n\n/** A settings value that names a real choice, or `undefined` for the platform default. */\nfunction chosen(settings: AiPluginSettings | undefined, key: string): string | undefined {\n  const value = settings?.[key]\n  return typeof value === 'string' && value && value !== AI_SETTING_PLATFORM\n    ? value\n    : undefined\n}\n\n/** The provider a workspace runs on: its own choice when registered, else the platform's. */\nexport function resolveAiProvider(settings?: AiPluginSettings): AiProvider | undefined {\n  const wanted = chosen(settings, 'provider')\n  if (wanted) {\n    const named = aiProviderById(wanted)\n    if (named) return named\n  }\n  return defaultAiProvider()\n}\n\n/**\n * The model a step kind runs on for a workspace, on the resolved provider.\n * A chosen model on another provider is not served — the provider decides\n * what it can run — and falls back to the provider's default for the tier.\n */\nexport function resolveAiRoute(\n  kind: AiStepKind,\n  settings?: AiPluginSettings,\n): AiRoute | undefined {\n  const provider = resolveAiProvider(settings)\n  if (!provider) return undefined\n  const servedBy = (modelId: string | undefined): string | undefined =>\n    modelId && aiCatalogEntry(modelId)?.provider === provider.id ? modelId : undefined\n  const model =\n    servedBy(chosen(settings, AI_STEP_MODEL_SETTING[kind])) ??\n    (kind === 'assist.chat' ? servedBy(process.env[ASSIST_MODEL_ENV]?.trim()) : undefined) ??\n    servedBy(process.env[AI_DEFAULT_MODEL_ENV]?.trim()) ??\n    aiDefaultModelFor(provider.id, AI_STEP_TIERS[kind])\n  return model ? { provider, model } : undefined\n}\n\n/**\n * What one step kind asks of its model, beside the tier it is served from\n * (`AI_STEP_TIERS` in the catalog): whether it thinks and how hard, its\n * answer ceiling, and the eval score that tier holds on the step's golden\n * briefs (AGL-2937).\n */\nexport interface AiRoutingRow {\n  /** `null` sends no setting: the model's own default, and all a fast-tier model accepts. */\n  thinking: AiThinking | null\n  effort: AiEffort | null\n  /** The answer ceiling, thinking included. */\n  maxTokens: number\n  /** What the ceiling is sized from. */\n  maxTokensBasis: string\n  eval: AiRoutingEval\n}\n\nexport interface AiRoutingEval {\n  /** The golden-brief kinds the step answers. */\n  kinds: readonly AiEvalKind[]\n  /** `answers` scores the step's answers; `plans` scores the plans those kinds' answers carry. */\n  scores: 'answers' | 'plans'\n  /** `authored` while the score is the hand-written references'; `recorded` once a live run records answers. */\n  source: 'authored' | 'recorded'\n  passRate: number\n  /** The mean answer score; `null` for a plan score, which passes or fails. */\n  meanScore: number | null\n}\n\n/**\n * THE ROUTING TABLE (AGL-2937): what each step kind asks of the model, in one\n * place, with the evidence beside it.\n *\n * A step runs on the smallest tier that holds its eval floor. A row moves to a\n * cheaper tier, or a lower effort, only when a recorded eval\n * (`npm run eval:ai-live`) holds the floor there; while a row's score is the\n * authored references', it says so, and the row stays where production has\n * run it. `runtime/ai-eval.spec.ts` recomputes every row's score from the\n * harness, so a row cannot claim a score its briefs do not hold.\n *\n * A ceiling is sized from the p95 output the staff signals page reports for\n * the kind once production has served it; until then `maxTokensBasis` names\n * what it is sized from. The same spec holds every reference answer under its\n * row's ceiling at three characters a token, a reading that errs high for a\n * tokenizer that splits finer than four.\n */\nexport const AI_ROUTING_TABLE: Readonly<Record<AiStepKind, AiRoutingRow>> = {\n  'assist.chat': {\n    // A scoped, latency-sensitive chat turn: no thinking, the low effort rung.\n    thinking: 'off',\n    effort: 'low',\n    maxTokens: 1024,\n    maxTokensBasis:\n      'a docs-grounded answer of a few short paragraphs; the edit rung raises it for its tool call',\n    eval: { kinds: ['chat'], scores: 'answers', source: 'authored', passRate: 1, meanScore: 0.9688 },\n  },\n  'copy.element': {\n    thinking: null,\n    effort: null,\n    maxTokens: 1024,\n    maxTokensBasis: 'one element of copy, about the length of the text it replaces',\n    eval: { kinds: ['element'], scores: 'answers', source: 'authored', passRate: 1, meanScore: 0.9688 },\n  },\n  'copy.section': {\n    thinking: null,\n    effort: null,\n    maxTokens: 3000,\n    maxTokensBasis: 'a section of four to twelve nodes written as JSON',\n    eval: { kinds: ['section'], scores: 'answers', source: 'authored', passRate: 1, meanScore: 0.9688 },\n  },\n  'copy.blog': {\n    thinking: null,\n    effort: null,\n    maxTokens: 2048,\n    maxTokensBasis: 'one blog post body in markdown-lite',\n    eval: { kinds: ['blog'], scores: 'answers', source: 'authored', passRate: 1, meanScore: 0.9688 },\n  },\n  'generate.section': {\n    thinking: null,\n    effort: null,\n    maxTokens: 3000,\n    maxTokensBasis: 'a section of four to twelve nodes written as JSON',\n    eval: { kinds: ['section'], scores: 'answers', source: 'authored', passRate: 1, meanScore: 0.9688 },\n  },\n  'job.layout': {\n    // The plan was reasoned out and confirmed before the step, so it writes without thinking.\n    thinking: 'off',\n    effort: null,\n    maxTokens: 8000,\n    maxTokensBasis:\n      \"tighter than the doctrine's default for a layout, so one step and its re-ask fit the job beat's budget; the tree is held to its rule 17 budget either way\",\n    eval: { kinds: ['layout'], scores: 'answers', source: 'authored', passRate: 1, meanScore: 0.9833 },\n  },\n  'job.template': {\n    thinking: 'off',\n    effort: null,\n    maxTokens: 8000,\n    maxTokensBasis:\n      \"tighter than the doctrine's default for a template, so one step and its re-ask fit the job beat's budget; the tree is held to its rule 17 budget either way\",\n    eval: { kinds: ['template'], scores: 'answers', source: 'authored', passRate: 1, meanScore: 0.9833 },\n  },\n  'job.component': {\n    // A component's tree and the properties it declares, in one answer, from a\n    // plan reasoned out and confirmed before the step (AGL-2908).\n    thinking: 'off',\n    effort: null,\n    maxTokens: 8000,\n    maxTokensBasis:\n      \"the ceiling the layout and template steps keep, so one step and its re-ask fit the job beat's budget; the tree is held to its rule 17 budget either way\",\n    eval: { kinds: ['component'], scores: 'answers', source: 'authored', passRate: 1, meanScore: 0.9833 },\n  },\n  'job.crm': {\n    // CRM by AI (AGL-2917): short answers through a strict tool, written from\n    // the facts the CRM reports about the record the member opened, with no\n    // thinking. The ceiling fits an inline door, so a member is answered in\n    // the request that asked.\n    thinking: null,\n    effort: null,\n    maxTokens: 700,\n    maxTokensBasis:\n      \"the largest answer a CRM tool accepts: sixty columns matched to fields by number, or an email draft at its length limits, at three characters a token with room, as ai-job-crm-step.spec.ts measures it\",\n    eval: { kinds: ['crm'], scores: 'answers', source: 'authored', passRate: 1, meanScore: 0.9938 },\n  },\n  'job.experiment': {\n    // Variants of one piece of copy, or a result explained against a verdict\n    // code reached before the request was made (AGL-2914). The judgment is\n    // already made either way, so it writes without thinking.\n    thinking: 'off',\n    effort: null,\n    maxTokens: 1500,\n    maxTokensBasis:\n      \"four variants at the tool's own lengths — a name, a headline, a body and a rationale each — written as JSON, about 3,000 characters at three characters a token with room; an explanation is a headline, four sentences and a next step, well under it, as ai-job-experiment-step.spec.ts measures both\",\n    eval: { kinds: ['experiment'], scores: 'answers', source: 'authored', passRate: 1, meanScore: 1 },\n  },\n  'job.form': {\n    // A form's two halves in one answer: the field declaration and the design\n    // that renders it, as JSON, with no extended thinking (AGL-2913). The step\n    // asks this ceiling, which is the doctrine's own for a form, and registers\n    // the time it takes (AGL-3035).\n    thinking: 'off',\n    effort: null,\n    maxTokens: 6000,\n    maxTokensBasis:\n      \"the largest form the doctrine's output budget admits, a form's fields, its consent and routing declaration and the design that renders them written as JSON at the wordiest golden's characters a stored byte, under it with room; ai-job-form-step.spec.ts measures it\",\n    eval: { kinds: ['form'], scores: 'answers', source: 'authored', passRate: 1, meanScore: 0.9833 },\n  },\n  'job.insight': {\n    // Readers chosen, then their tables phrased (AGL-2915): short sentences\n    // over figures code computed, each held to the rows it cites, so no\n    // extended thinking. The read call before the answer asks for at most\n    // `AI_INSIGHT_READ_MAX_TOKENS` of the same allowance.\n    thinking: 'off',\n    effort: null,\n    maxTokens: 1500,\n    maxTokensBasis:\n      'five insights at their 280-character bound, each citing three tables of ten rows, and the gap sentence, written as JSON: about 2,700 characters, under 1,000 tokens at three characters a token, with room',\n    eval: { kinds: ['insight'], scores: 'answers', source: 'authored', passRate: 1, meanScore: 0.9688 },\n  },\n  'job.page': {\n    // One section of a page, written against a plan a member already\n    // confirmed, so it writes without thinking (AGL-2907). The ceiling here\n    // is the MOST a pass may ask for; each pass sizes its own down from it to\n    // what fits the time the job beat can give the step, which on the\n    // balanced tier is about half of this.\n    thinking: 'off',\n    effort: null,\n    maxTokens: 2000,\n    maxTokensBasis:\n      \"a section of a page written as JSON, about forty elements at the step's measured 45 tokens an element; a pass lowers it to the worst case that fits AI_JOB_PAGE_STEP_MINIMUM_MS on the model it runs\",\n    eval: { kinds: ['page'], scores: 'answers', source: 'authored', passRate: 1, meanScore: 0.9833 },\n  },\n  'job.products': {\n    // A product's copy from its name, text and photo, or a store's first\n    // products, categories and discounts from a brief (AGL-2916): answers held\n    // to the storefront claim rules, written with no extended thinking.\n    thinking: 'off',\n    effort: null,\n    maxTokens: 8000,\n    maxTokensBasis:\n      \"the largest catalog the tool accepts, twelve proposed products at every bound written as JSON, which the balanced tier asks as much of as fits a beat; one product's copy asks 1,500 and categories with discounts 2,000, as ai-job-products-step.spec.ts measures them\",\n    eval: {\n      kinds: ['product', 'catalog', 'categories'],\n      scores: 'answers',\n      source: 'authored',\n      passRate: 1,\n      meanScore: 0.9922,\n    },\n  },\n  'job.email': {\n    // One email design from the email palette, written against the brief with\n    // no extended thinking (AGL-2912). A campaign job runs the same\n    // generation, so it carries the same ceiling.\n    thinking: 'off',\n    effort: null,\n    maxTokens: 6000,\n    maxTokensBasis:\n      \"an email's node map written as JSON, with three subject lines and three preheaders beside it\",\n    eval: { kinds: ['email'], scores: 'answers', source: 'authored', passRate: 1, meanScore: 0.9688 },\n  },\n  'job.campaign': {\n    // The campaign job generates its email through the email step, so it is\n    // routed identically; the draft campaign it also writes asks nothing of\n    // the model (AGL-2912).\n    thinking: 'off',\n    effort: null,\n    maxTokens: 6000,\n    maxTokensBasis:\n      \"an email's node map written as JSON, with three subject lines and three preheaders beside it\",\n    eval: { kinds: ['email'], scores: 'answers', source: 'authored', passRate: 1, meanScore: 0.9688 },\n  },\n  'job.workflow': {\n    // An automation drafted from a description, or one explained (AGL-2919):\n    // which trigger and which steps a description means is the judgment the\n    // step sells, so it thinks before it answers.\n    thinking: 'adaptive',\n    effort: null,\n    maxTokens: 4000,\n    maxTokensBasis:\n      'the largest automation the tool accepts, 6,000 characters written out as JSON, at three characters a token with as much again to think in, as ai-job-workflow-step.spec.ts measures it',\n    eval: { kinds: ['workflow'], scores: 'answers', source: 'authored', passRate: 1, meanScore: 0.9688 },\n  },\n  'job.seo': {\n    thinking: null,\n    effort: null,\n    maxTokens: 1024,\n    maxTokensBasis:\n      \"the largest listing the tool accepts, at three characters a token with a quarter again, as ai-job-seo-step.spec.ts measures it; an audit's site proposal and fix batches keep ceilings of their own, measured the same way\",\n    eval: { kinds: ['seo'], scores: 'answers', source: 'authored', passRate: 1, meanScore: 1 },\n  },\n  'job.text': {\n    thinking: 'adaptive',\n    effort: null,\n    maxTokens: 1024,\n    maxTokensBasis: 'a few paragraphs of copy; a brief asking for more gets a draft to extend',\n    eval: { kinds: ['text'], scores: 'answers', source: 'authored', passRate: 1, meanScore: 1 },\n  },\n  'job.theme': {\n    thinking: 'adaptive',\n    effort: null,\n    maxTokens: 8000,\n    maxTokensBasis:\n      'the largest answer the theme tool accepts, about 2,500 tokens of JSON as ai-job-theme-step.spec.ts measures it, with as much again to think in',\n    eval: { kinds: ['theme'], scores: 'answers', source: 'authored', passRate: 1, meanScore: 0.9688 },\n  },\n  'job.plan': {\n    thinking: 'adaptive',\n    effort: null,\n    maxTokens: 8000,\n    maxTokensBasis: 'a plan of up to twelve screens with sixteen sections each, with room to think',\n    eval: {\n      kinds: ['page', 'template', 'component', 'layout', 'form'],\n      scores: 'plans',\n      source: 'authored',\n      passRate: 1,\n      meanScore: null,\n    },\n  },\n}\n\n/** The model id alone — what a door records on the meter and the job. */\nexport function aiModelForStep(kind: AiStepKind, settings?: AiPluginSettings): string {\n  const route = resolveAiRoute(kind, settings)\n  if (!route) {\n    // Every door gates on the provider being configured before it asks\n    // for a model, so this is a wiring fault rather than a customer path.\n    throw new Error('no AI provider is registered')\n  }\n  return route.model\n}\n"],"names":["AI_SETTING_PLATFORM","AI_STEP_MODEL_SETTING","AI_STEP_TIERS","aiCatalogEntry","aiDefaultModelFor","aiProviderById","defaultAiProvider","AI_DEFAULT_MODEL_ENV","ASSIST_MODEL_ENV","chosen","settings","key","value","undefined","resolveAiProvider","wanted","named","resolveAiRoute","kind","servedBy","process","provider","modelId","id","model","env","trim","AI_ROUTING_TABLE","thinking","effort","maxTokens","maxTokensBasis","eval","kinds","scores","source","passRate","meanScore","aiModelForStep","route","Error"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED,SAASA,mBAAmB,EAAEC,qBAAqB,QAAQ,sBAAkB;AAC7E,SACEC,aAAa,EACbC,cAAc,EACdC,iBAAiB,QAEZ,eAAW;AAGlB,SAASC,cAAc,EAAEC,iBAAiB,QAAQ,gBAAY;AAE9D;;;;;;;;;;;;;CAaC,GAED,kDAAkD,GAClD,OAAO,MAAMC,uBAAuB,mBAAkB;AACtD,kEAAkE,GAClE,OAAO,MAAMC,mBAAmB,eAAc;AAU9C,wFAAwF,GACxF,SAASC,OAAOC,QAAsC,EAAEC,GAAW;IACjE,MAAMC,QAAQF,4BAAAA,QAAU,CAACC,IAAI;IAC7B,OAAO,OAAOC,UAAU,YAAYA,SAASA,UAAUZ,sBACnDY,QACAC;AACN;AAEA,2FAA2F,GAC3F,OAAO,SAASC,kBAAkBJ,QAA2B;IAC3D,MAAMK,SAASN,OAAOC,UAAU;IAChC,IAAIK,QAAQ;QACV,MAAMC,QAAQX,eAAeU;QAC7B,IAAIC,OAAO,OAAOA;IACpB;IACA,OAAOV;AACT;AAEA;;;;CAIC,GACD,OAAO,SAASW,eACdC,IAAgB,EAChBR,QAA2B;QAOzBS,MAAAA,OAAAA;QACmCC,+BAC1BA;IAPX,MAAMC,WAAWP,kBAAkBJ;IACnC,IAAI,CAACW,UAAU,OAAOR;IACtB,MAAMM,WAAW,CAACG;YACLnB;eAAXmB,WAAWnB,EAAAA,kBAAAA,eAAemB,6BAAfnB,gBAAyBkB,QAAQ,MAAKA,SAASE,EAAE,GAAGD,UAAUT;;IAC3E,MAAMW,SACJL,QAAAA,SAAAA,YAAAA,SAASV,OAAOC,UAAUT,qBAAqB,CAACiB,KAAK,cAArDC,YACCD,SAAS,gBAAgBC,UAASC,gCAAAA,QAAQK,GAAG,CAACjB,iBAAiB,qBAA7BY,8BAA+BM,IAAI,MAAMb,qBAD5EM,QAEAA,UAASC,oCAAAA,QAAQK,GAAG,CAAClB,qBAAqB,qBAAjCa,kCAAmCM,IAAI,eAFhDP,OAGAf,kBAAkBiB,SAASE,EAAE,EAAErB,aAAa,CAACgB,KAAK;IACpD,OAAOM,QAAQ;QAAEH;QAAUG;IAAM,IAAIX;AACvC;AA+BA;;;;;;;;;;;;;;;;CAgBC,GACD,OAAO,MAAMc,mBAA+D;IAC1E,eAAe;QACb,2EAA2E;QAC3EC,UAAU;QACVC,QAAQ;QACRC,WAAW;QACXC,gBACE;QACFC,MAAM;YAAEC,OAAO;gBAAC;aAAO;YAAEC,QAAQ;YAAWC,QAAQ;YAAYC,UAAU;YAAGC,WAAW;QAAO;IACjG;IACA,gBAAgB;QACdT,UAAU;QACVC,QAAQ;QACRC,WAAW;QACXC,gBAAgB;QAChBC,MAAM;YAAEC,OAAO;gBAAC;aAAU;YAAEC,QAAQ;YAAWC,QAAQ;YAAYC,UAAU;YAAGC,WAAW;QAAO;IACpG;IACA,gBAAgB;QACdT,UAAU;QACVC,QAAQ;QACRC,WAAW;QACXC,gBAAgB;QAChBC,MAAM;YAAEC,OAAO;gBAAC;aAAU;YAAEC,QAAQ;YAAWC,QAAQ;YAAYC,UAAU;YAAGC,WAAW;QAAO;IACpG;IACA,aAAa;QACXT,UAAU;QACVC,QAAQ;QACRC,WAAW;QACXC,gBAAgB;QAChBC,MAAM;YAAEC,OAAO;gBAAC;aAAO;YAAEC,QAAQ;YAAWC,QAAQ;YAAYC,UAAU;YAAGC,WAAW;QAAO;IACjG;IACA,oBAAoB;QAClBT,UAAU;QACVC,QAAQ;QACRC,WAAW;QACXC,gBAAgB;QAChBC,MAAM;YAAEC,OAAO;gBAAC;aAAU;YAAEC,QAAQ;YAAWC,QAAQ;YAAYC,UAAU;YAAGC,WAAW;QAAO;IACpG;IACA,cAAc;QACZ,0FAA0F;QAC1FT,UAAU;QACVC,QAAQ;QACRC,WAAW;QACXC,gBACE;QACFC,MAAM;YAAEC,OAAO;gBAAC;aAAS;YAAEC,QAAQ;YAAWC,QAAQ;YAAYC,UAAU;YAAGC,WAAW;QAAO;IACnG;IACA,gBAAgB;QACdT,UAAU;QACVC,QAAQ;QACRC,WAAW;QACXC,gBACE;QACFC,MAAM;YAAEC,OAAO;gBAAC;aAAW;YAAEC,QAAQ;YAAWC,QAAQ;YAAYC,UAAU;YAAGC,WAAW;QAAO;IACrG;IACA,iBAAiB;QACf,2EAA2E;QAC3E,8DAA8D;QAC9DT,UAAU;QACVC,QAAQ;QACRC,WAAW;QACXC,gBACE;QACFC,MAAM;YAAEC,OAAO;gBAAC;aAAY;YAAEC,QAAQ;YAAWC,QAAQ;YAAYC,UAAU;YAAGC,WAAW;QAAO;IACtG;IACA,WAAW;QACT,0EAA0E;QAC1E,wEAAwE;QACxE,wEAAwE;QACxE,0BAA0B;QAC1BT,UAAU;QACVC,QAAQ;QACRC,WAAW;QACXC,gBACE;QACFC,MAAM;YAAEC,OAAO;gBAAC;aAAM;YAAEC,QAAQ;YAAWC,QAAQ;YAAYC,UAAU;YAAGC,WAAW;QAAO;IAChG;IACA,kBAAkB;QAChB,yEAAyE;QACzE,uEAAuE;QACvE,0DAA0D;QAC1DT,UAAU;QACVC,QAAQ;QACRC,WAAW;QACXC,gBACE;QACFC,MAAM;YAAEC,OAAO;gBAAC;aAAa;YAAEC,QAAQ;YAAWC,QAAQ;YAAYC,UAAU;YAAGC,WAAW;QAAE;IAClG;IACA,YAAY;QACV,0EAA0E;QAC1E,2EAA2E;QAC3E,2EAA2E;QAC3E,gCAAgC;QAChCT,UAAU;QACVC,QAAQ;QACRC,WAAW;QACXC,gBACE;QACFC,MAAM;YAAEC,OAAO;gBAAC;aAAO;YAAEC,QAAQ;YAAWC,QAAQ;YAAYC,UAAU;YAAGC,WAAW;QAAO;IACjG;IACA,eAAe;QACb,wEAAwE;QACxE,oEAAoE;QACpE,sEAAsE;QACtE,sDAAsD;QACtDT,UAAU;QACVC,QAAQ;QACRC,WAAW;QACXC,gBACE;QACFC,MAAM;YAAEC,OAAO;gBAAC;aAAU;YAAEC,QAAQ;YAAWC,QAAQ;YAAYC,UAAU;YAAGC,WAAW;QAAO;IACpG;IACA,YAAY;QACV,iEAAiE;QACjE,wEAAwE;QACxE,0EAA0E;QAC1E,kEAAkE;QAClE,uCAAuC;QACvCT,UAAU;QACVC,QAAQ;QACRC,WAAW;QACXC,gBACE;QACFC,MAAM;YAAEC,OAAO;gBAAC;aAAO;YAAEC,QAAQ;YAAWC,QAAQ;YAAYC,UAAU;YAAGC,WAAW;QAAO;IACjG;IACA,gBAAgB;QACd,qEAAqE;QACrE,2EAA2E;QAC3E,oEAAoE;QACpET,UAAU;QACVC,QAAQ;QACRC,WAAW;QACXC,gBACE;QACFC,MAAM;YACJC,OAAO;gBAAC;gBAAW;gBAAW;aAAa;YAC3CC,QAAQ;YACRC,QAAQ;YACRC,UAAU;YACVC,WAAW;QACb;IACF;IACA,aAAa;QACX,0EAA0E;QAC1E,gEAAgE;QAChE,8CAA8C;QAC9CT,UAAU;QACVC,QAAQ;QACRC,WAAW;QACXC,gBACE;QACFC,MAAM;YAAEC,OAAO;gBAAC;aAAQ;YAAEC,QAAQ;YAAWC,QAAQ;YAAYC,UAAU;YAAGC,WAAW;QAAO;IAClG;IACA,gBAAgB;QACd,wEAAwE;QACxE,wEAAwE;QACxE,wBAAwB;QACxBT,UAAU;QACVC,QAAQ;QACRC,WAAW;QACXC,gBACE;QACFC,MAAM;YAAEC,OAAO;gBAAC;aAAQ;YAAEC,QAAQ;YAAWC,QAAQ;YAAYC,UAAU;YAAGC,WAAW;QAAO;IAClG;IACA,gBAAgB;QACd,yEAAyE;QACzE,wEAAwE;QACxE,8CAA8C;QAC9CT,UAAU;QACVC,QAAQ;QACRC,WAAW;QACXC,gBACE;QACFC,MAAM;YAAEC,OAAO;gBAAC;aAAW;YAAEC,QAAQ;YAAWC,QAAQ;YAAYC,UAAU;YAAGC,WAAW;QAAO;IACrG;IACA,WAAW;QACTT,UAAU;QACVC,QAAQ;QACRC,WAAW;QACXC,gBACE;QACFC,MAAM;YAAEC,OAAO;gBAAC;aAAM;YAAEC,QAAQ;YAAWC,QAAQ;YAAYC,UAAU;YAAGC,WAAW;QAAE;IAC3F;IACA,YAAY;QACVT,UAAU;QACVC,QAAQ;QACRC,WAAW;QACXC,gBAAgB;QAChBC,MAAM;YAAEC,OAAO;gBAAC;aAAO;YAAEC,QAAQ;YAAWC,QAAQ;YAAYC,UAAU;YAAGC,WAAW;QAAE;IAC5F;IACA,aAAa;QACXT,UAAU;QACVC,QAAQ;QACRC,WAAW;QACXC,gBACE;QACFC,MAAM;YAAEC,OAAO;gBAAC;aAAQ;YAAEC,QAAQ;YAAWC,QAAQ;YAAYC,UAAU;YAAGC,WAAW;QAAO;IAClG;IACA,YAAY;QACVT,UAAU;QACVC,QAAQ;QACRC,WAAW;QACXC,gBAAgB;QAChBC,MAAM;YACJC,OAAO;gBAAC;gBAAQ;gBAAY;gBAAa;gBAAU;aAAO;YAC1DC,QAAQ;YACRC,QAAQ;YACRC,UAAU;YACVC,WAAW;QACb;IACF;AACF,EAAC;AAED,uEAAuE,GACvE,OAAO,SAASC,eAAepB,IAAgB,EAAER,QAA2B;IAC1E,MAAM6B,QAAQtB,eAAeC,MAAMR;IACnC,IAAI,CAAC6B,OAAO;QACV,mEAAmE;QACnE,sEAAsE;QACtE,MAAM,IAAIC,MAAM;IAClB;IACA,OAAOD,MAAMf,KAAK;AACpB"}

package/src/lib/runtime/ai-abuse-guards.d.ts

@@ -0,0 +1,113 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import { type ClientIpHeaders } from '@aglyn/aglyn/app-utils/request-ip';
+import type { AglynOrgBilling } from '@aglyn/aglyn/foundation/definitions/org-billing.types';
+import { type RateLimitResult } from '@aglyn/tenant-data-admin/server/api-http';
+/**
+ * The request-level rungs the Free AI taste adds to every AI door
+ * (AGL-2925): a per-address limiter and a minimum account age. Both are
+ * small helpers a door calls from its ladder rather than rungs written
+ * into each ladder, so the three doors and the shared gate cannot drift
+ * into three limits.
+ *
+ * Neither touches Firestore. The limiter is the same per-instance window
+ * as the per-uid one and carries the same caveat — it smooths bursts and is
+ * not the spend bound; the reservation is. The account-age rung reads one
+ * Auth record, cached per instance, and applies only to a Free workspace.
+ */
+/** Requests one client address may make against the AI doors a minute. */
+export declare const AI_IP_RATE_LIMIT = 60;
+export declare const AI_IP_RATE_WINDOW_MS = 60000;
+/**
+ * The per-address window shared by every AI door.
+ *
+ * Keyed on the TRUSTED-HOP client address (`readClientIp`), never on a
+ * header a caller can write, for the reason that module exists: on an
+ * appending proxy the leftmost `x-forwarded-for` hop is whatever the caller
+ * typed, and a limiter keyed on it hands out a fresh budget per request.
+ * `null` when no address is readable — the caller skips the rung, because
+ * keying every anonymous request under one placeholder caps the whole
+ * install at sixty requests a minute.
+ *
+ * Sixty a minute is three times the per-uid window (20/min at each door):
+ * an office NAT signing in a team of three fits under it, and a farm
+ * rotating accounts behind one address does not.
+ */
+export declare function checkAiClientIpRateLimit(headers: ClientIpHeaders): RateLimitResult | null;
+/**
+ * How old an account must be before a Free workspace it belongs to may
+ * generate (`AI_FREE_MIN_ACCOUNT_AGE_HOURS`, default 24).
+ *
+ * The signup surface already costs a working inbox per account; a day of
+ * age costs a day, which is the one thing a script minting accounts cannot
+ * buy in bulk. Paid workspaces never consult it. Zero switches the rung
+ * off, which a self-hoster running an invite-only deployment may
+ * reasonably want; junk and an empty value take the default.
+ */
+export declare function aiFreeMinAccountAgeHours(): number;
+/** How long one account's creation time is remembered per instance. */
+export declare const ACCOUNT_AGE_CACHE_TTL_MS: number;
+/**
+ * Entries the cache holds before it is dropped whole. A creation time is a
+ * few bytes, but a limiter that can be made to remember every uid ever
+ * seen is a memory leak with a use case, so the map is bounded and simply
+ * forgets everything when it fills — the next request re-reads.
+ */
+export declare const ACCOUNT_AGE_CACHE_MAX_ENTRIES = 5000;
+/** Test seam — drops the per-instance cache. */
+export declare function resetAccountAgeCache(): void;
+/** The one thing this rung reads off an Auth record. */
+export interface AccountAgeLookup {
+    (uid: string): Promise<{
+        metadata: {
+            creationTime?: string | null;
+        };
+    }>;
+}
+/**
+ * When the account was created, in epoch milliseconds, or `null` when the
+ * record carries no usable creation time.
+ *
+ * Read through the caller's `getUser` — the Auth pool the token was minted
+ * in — because the decoded token carries `auth_time` (this sign-in) and
+ * not the account's creation, and a fresh account can sign in as often as
+ * it likes. Cached per instance for a few minutes: the value never changes,
+ * and the doors are called far more often than once per account.
+ */
+export declare function accountCreationTimeMs(uid: string, getUser: AccountAgeLookup, now?: number): Promise<number | null>;
+/**
+ * The account-age rung: the `Response` to send, or `null` to climb on.
+ *
+ * Applies to a FREE workspace only — `resolveEffectivePlan`, so a dead
+ * subscription is Free here as everywhere — and never to staff, who are
+ * the ones verifying the fix during an incident. An account younger than
+ * the minimum is a 403 with `reason: 'account-age'`, and the sentence says
+ * when to come back rather than hinting at a way around it.
+ *
+ * Fails CLOSED for a Free workspace: a record that cannot be read is a
+ * 503, not an admission. The verifier just accepted this token from the
+ * same Auth service, so the read failing is rare, and the rung exists
+ * precisely for the request whose age cannot be vouched for. A paid
+ * workspace never reaches the read.
+ */
+export declare function freeAccountAgeRefusal(input: {
+    uid: string;
+    org: Partial<AglynOrgBilling> | null | undefined;
+    staff: boolean;
+    getUser: AccountAgeLookup;
+    now?: Date;
+}): Promise<Response | null>;