@aglyn/plugins-ai 1.0.0-beta.143

package/src/lib/runtime/ai-doctrine.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../libs/plugins/ai/src/lib/runtime/ai-doctrine.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport type { NodesMap } from '@aglyn/aglyn/types/nodes'\nimport { parseAiBuildPlan, type AiBuildPlan } from '../model/ai-build-plan'\nimport type { AiPlanCapabilities } from '../model/ai-plan-capabilities'\nimport {\n  AI_INVENTORY_KINDS,\n  AI_INVENTORY_KIND_HEADINGS,\n  AI_SITE_INVENTORY_LISTED_PER_KIND,\n  AI_SITE_INVENTORY_MAX_CHARS,\n  aiHomeScreenIds,\n  aiInventoryLine,\n  aiInventoryRows,\n  type AiInventoryKind,\n  type AiSiteInventory,\n} from '../model/ai-site-inventory'\nimport type { AiStepKind } from '../providers/catalog'\nimport { aiCutOffFigures, aiStoppedAtCeiling, type AiProvider } from '../providers/contract'\nimport { AI_ROUTING_TABLE, aiModelForStep, type AiPluginSettings } from '../providers/routing'\nimport {\n  AI_ACCEPTABLE_USE_BLOCK,\n  runAiRequest,\n  type AiCompletion,\n  type AiEffort,\n  type AiMessage,\n  type AiSystemBlock,\n  type AiThinking,\n  type AiTool,\n  type AiUsage,\n} from './ai-runtime'\nimport {\n  AI_SIMILAR_PAGES_MIN,\n  aiDoctrineViolationText,\n  detectPublishIntent,\n  validateAiBuildPlan,\n  validateAiDoctrineTree,\n  type AiCopyFraming,\n  type AiDoctrineTree,\n  type AiDoctrineTreeContext,\n  type AiDoctrineViolation,\n  type AiOutputScore,\n} from './ai-doctrine-validators'\nimport {\n  AI_INVENTORY_LOOKUP_MAX_ROUNDS,\n  AI_INVENTORY_LOOKUP_TOOL_NAME,\n  aiInventoryLookupTool,\n  answerAiInventoryLookup,\n} from '../tools/ai-inventory-lookup-tool'\nimport { AI_GENERATION_MAX_ATTEMPTS } from './ai-generation-bounds'\nimport type { AiNodeTreeContext } from './ai-node-tree'\nimport {\n  AI_OUTPUT_BUDGETS,\n  AI_OUTPUT_KINDS,\n  AI_OUTPUT_SURFACE,\n  type AiLoadEstimate,\n  type AiOutputKind,\n  type AiSurface,\n} from './ai-palette'\nimport { AI_PALETTE_CATALOG } from './ai-palette.generated'\n\n/**\n * The building doctrine (AGL-2935): the one place the procedures a generator\n * follows live, and the one loop every generator runs them through.\n *\n * A page with the same card twelve times, a header pasted on every screen, a\n * form drawn inline, a hex color in an `sx`: each is what a careless author\n * does, and the AI must never do it. So no generator carries its own copy of\n * the rules. It hands its instructions, its tool and the brief to\n * `runValidatedGeneration(kind, …)`, which\n *\n *  1. prefixes the doctrine as a CACHED system block — byte-identical for\n *     every org, so it is one cache entry for the platform — then the door's\n *     own instructions, then the palette catalog for the output's surface,\n *     and last the site inventory as a VOLATILE block, the one per-site part;\n *  2. calls the runtime once, reads the answer off the tool, and holds it to\n *     the doctrine's validators (`ai-doctrine-validators.ts`) — the doctrine\n *     always runs for a kind it knows, and a door can only ADD checks;\n *  2a. answers, from the window already in memory, a turn that asked to look\n *     a record up rather than answering (AGL-2937): a site larger than its\n *     prompt block can list is found by asking, not by listing more on every\n *     request. Bounded, and not an answer attempt;\n *  3. on a violation, asks ONCE more with the broken rules named and the\n *     offending parts quoted — never the whole document again (AGL-2937);\n *     an answer cut off at its output ceiling is asked for smaller instead,\n *     whatever its truncated input made the check say (AGL-3042);\n *  4. and when the second answer still breaks a rule, gives up with\n *     `needs_input`: a person decides, rather than a loop spending on the\n *     same refusal.\n *\n * Tokens from every attempt are summed on the result, so the caller meters\n * what was actually spent. Nothing here writes a document or publishes.\n *\n * A door whose answer streams to its reader as it arrives — the chat door's\n * edit rung — has no turn left to re-ask in once the answer can be read, so\n * it holds what arrived to the same check through\n * `validateStreamedGeneration`, and composes its own prompt around\n * `aiDoctrineCatalog`, the catalog this loop shows a surface.\n */\n\n// ── The doctrine block ───────────────────────────────────────────────────\n\nfunction kilobytes(bytes: number): string {\n  return bytes >= 1_000_000\n    ? `${(bytes / 1_000_000).toLocaleString('en-US', { maximumFractionDigits: 1 })} MB`\n    : `${Math.round(bytes / 1_000)} KB`\n}\n\nfunction budgetLine(kind: AiOutputKind): string {\n  const budget = AI_OUTPUT_BUDGETS[kind]\n  const parts = [\n    `${budget.nodes} elements`,\n    `${kilobytes(budget.bytes)} stored`,\n    budget.imageBytes ? `${kilobytes(budget.imageBytes)} of images` : 'no images',\n    budget.embeds ? `${budget.embeds} embed` : 'no embeds',\n  ]\n  if (budget.emailHtmlBytes) parts.push(`${kilobytes(budget.emailHtmlBytes)} of rendered HTML`)\n  return `${/^[aeiou]/.test(kind) ? 'an' : 'a'} ${kind} at most ${parts.join(', ')}`\n}\n\n/**\n * What a generation kind produces, and therefore which of the rules below can\n * bind it (AGL-2937).\n *\n * The seventeen rules are written for a kind that composes a DOCUMENT: they\n * name nodes, instances, layouts, slugs and budgets. A kind that produces\n * short fields a door checks itself — a page's search listing, an audit's\n * fixes — can break exactly one of them, and the other sixteen are bytes it\n * pays for on every attempt without ever being held to them. On a fast-tier\n * model, whose cached-prefix minimum no SEO prompt reaches, those bytes are\n * billed at full input rate every single time.\n *\n * Sending fewer rules is not only cheaper here, it is more accurate: rule 14\n * tells a writer to mark a fact it lacks in square brackets, which is right\n * for page copy a person edits before publishing and wrong for a search title\n * that is published exactly as written — and the SEO doors' own rules already\n * say to write only from the text they were given.\n */\nexport type AiDoctrineScope =\n  /** A document the palette composes, or a plan for them: all seventeen rules. */\n  | 'documents'\n  /** Values a door reads and checks itself, composing nothing. */\n  | 'fields'\n\n/** One numbered rule, and the scopes it binds. */\ninterface AiDoctrineRuleText {\n  /**\n   * The rule's number, which the re-ask and every violation name. It is fixed\n   * to the rule and not to its position, so a scope that renders a subset\n   * still calls rule 13 rule 13.\n   */\n  n: number\n  scopes: readonly AiDoctrineScope[]\n  text: string\n}\n\nconst DOCUMENTS: readonly AiDoctrineScope[] = ['documents']\nconst EVERY_SCOPE: readonly AiDoctrineScope[] = ['documents', 'fields']\n\nconst AI_DOCTRINE_RULE_TEXT: readonly AiDoctrineRuleText[] = [\n  { n: 1, scopes: DOCUMENTS, text: 'Repeats become one reusable component. A block with the same elements and props that differs only in its copy, links or images, appearing 3 or more times on a page or on 2 pages built together, is one reusable component with typed props, placed as instances: a \"reusableInstance\" node whose \"refId\" names the component and whose \"propValues\" fill its props. Search the site inventory first, and never create a component that duplicates one listed there; reuse it, or propose extending it. Where the request says the workspace keeps no reusable components, draw the block each time it repeats instead.' },\n  { n: 2, scopes: DOCUMENTS, text: 'Site-wide regions live in the layout. A header, navigation, footer, announcement bar or cookie notice belongs in a layout. Every screen declares the site\\'s layout, or one the plan creates, and never carries its own copy of a layout region.' },\n  { n: 3, scopes: DOCUMENTS, text: 'Forms are built on the Forms page, then placed. A form is created there with its fields, validation, consent and routing, and a page places a \"form\" element bound by its \"formId\", with no fields drawn inside it. Where the request says the workspace keeps no saved forms, the page carries the form itself: a \"form\" element with no \"formId\", holding its \"formField\" elements. Never draw loose form fields on a page. Search is a \"searchBox\" or a collection\\'s \"collectionSearch\", never a form, which collects submissions.' },\n  { n: 4, scopes: DOCUMENTS, text: `Similar pages share one template. When ${AI_SIMILAR_PAGES_MIN} or more pages share one structure and differ by copy or data (products, locations, team members, services), plan one template and apply it once per page, or bind it to a collection when the data exists. Fewer than ${AI_SIMILAR_PAGES_MIN} is not a template.` },\n  { n: 5, scopes: DOCUMENTS, text: 'Colors, spacing and type come from the theme. Use palette tokens such as \"primary.main\", \"text.secondary\" and \"background.paper\", plain numbers on the spacing scale, the theme\\'s shape and its typography variants. Never write a hex, rgb or named color, or a px, rem or em length. A color the theme lacks is a theme change in the plan, never a value on an element.' },\n  { n: 6, scopes: DOCUMENTS, text: 'Emails use the brand. An email uses only the brand colors and fonts the site inventory lists, and a campaign starts from an email template rather than a one-off design.' },\n  { n: 7, scopes: DOCUMENTS, text: 'Reuse before creating. Prefer what the site inventory lists: components, layouts, templates, forms, themes, datasets, collections and screens, referenced by id. Creating is the exception, and every creation says why nothing listed will do. In a plan, refer to something the plan itself creates as new:<name>, and create only what the request says this job may create on this site.' },\n  { n: 8, scopes: DOCUMENTS, text: 'Data is bound, not typed. A list that exists as a dataset, collection, product or record is bound to it and never copied into text; a long list the site lacks becomes a dataset in the plan.' },\n  { n: 9, scopes: DOCUMENTS, text: 'Images come from the media library, with alt text. Place images by media reference, or leave \"src\" empty for an upload; never link an image from another website. Every image has alt text describing it, or \"decorative\": true.' },\n  { n: 10, scopes: DOCUMENTS, text: 'Navigation and SEO travel with a page. Every new screen has a slug of lowercase words joined by hyphens that the site does not already use, a search title of at most 70 characters, a search description of at most 170, and a navigation entry when the brief implies one. A link goes to a screen that does what its words say, or is left out.' },\n  { n: 11, scopes: DOCUMENTS, text: 'One main landmark and an ordered outline. A page declares at most one \"main\"; a component, form or email declares none; a layout has exactly one \"layoutSlot\". A page has exactly one h1 and never skips a heading level, and a layout has no h1. Set a heading\\'s level with the Typography \"component\" (h1 to h6).' },\n  { n: 12, scopes: DOCUMENTS, text: 'Responsive by the theme\\'s breakpoints. Widths come from a Container\\'s maxWidth, a Grid\\'s size, a percentage, or responsive values keyed by xs, sm, md, lg and xl, never a fixed px or viewport width.' },\n  { n: 13, scopes: EVERY_SCOPE, text: 'Drafts only. Everything you produce is a new draft that a person reviews and publishes. Never ask to publish, and never change something already live.' },\n  { n: 14, scopes: DOCUMENTS, text: 'The site\\'s voice, with no filler. Write real copy in the tone of the site and the brief, never lorem ipsum or \"your text here\". When the brief lacks a fact such as a phone number, a price or a name, mark it in square brackets instead of inventing it. For agencies and enterprises, never call the work simple, cheap or effortless.' },\n  { n: 15, scopes: DOCUMENTS, text: 'Start from a duplicate of the nearest thing. When the site has a similar screen, template or email, plan a duplicate of it and edit that, which keeps its versions, bindings and SEO.' },\n  { n: 16, scopes: DOCUMENTS, text: 'The smallest document that does the job. Build the flattest tree that renders the design: no container wrapping a single container, no empty containers, no inline style repeated across elements, text as text, images lazy below the first, video by poster and click-to-play, no fonts beyond the theme\\'s, and no third-party embed or script unless the brief asks for it and the plan names its cost.' },\n  { n: 17, scopes: DOCUMENTS, text: `A measured budget for every output. Each document is measured and refused over its budget: ${AI_OUTPUT_KINDS.map(budgetLine).join('; ')}.` },\n]\n\n/** How a scope opens: what the rules under it are for. */\nconst SCOPE_OPENING: Readonly<Record<AiDoctrineScope, string>> = {\n  documents:\n    'How to build on this platform. Every plan and every document you produce is checked against these rules; an answer that breaks one is refused and asked for again with the rule named.',\n  fields:\n    'An answer that breaks one of these rules is refused and asked for again with the rule named.',\n}\n\n/**\n * How a scope closes. The document scope names the tool generically because\n * every generator it serves is handed a different one; the field doors name\n * their own tool in their own rules, so repeating it here would be the same\n * sentence twice.\n */\nconst SCOPE_CLOSING: Readonly<Record<AiDoctrineScope, string | null>> = {\n  documents:\n    'Answer through the tool you are given, and only through it.',\n  fields: null,\n}\n\n/**\n * The procedures in the model's terms, for one scope. Static text only: the\n * budgets are read from `AI_OUTPUT_BUDGETS` once, at load, so a scope's text\n * is the same bytes on every request and changes only when a budget does.\n */\nexport function aiBuildingDoctrine(scope: AiDoctrineScope): string {\n  const closing = SCOPE_CLOSING[scope]\n  return [\n    SCOPE_OPENING[scope],\n    '',\n    ...AI_DOCTRINE_RULE_TEXT.filter((rule) => rule.scopes.includes(scope)).map(\n      (rule) => `${rule.n}. ${rule.text}`,\n    ),\n    ...(closing ? ['', closing] : []),\n  ].join('\\n')\n}\n\n/** Every rule, as the kinds that compose a document are told them. */\nexport const AI_BUILDING_DOCTRINE = aiBuildingDoctrine('documents')\n\n/**\n * The doctrine as the cached system block, one per scope: the procedures and\n * the platform's acceptable-use rules (AGL-2925), which every generation\n * prompt carries and which ride here so a generator cannot leave them out.\n *\n * The acceptable-use rules are in EVERY scope, whole. They are the platform's\n * abuse guard rather than a building rule, a published title can carry a scam\n * claim as easily as a page can, and a scope that dropped them to save bytes\n * would be trading the thing this issue is forbidden to trade.\n *\n * Built once, at load, so a scope's block is the same object and the same\n * bytes on every request: two workspaces on one door share one cache entry,\n * and `runtime/ai-prompt-cache.spec.ts` holds them to it.\n */\nconst AI_DOCTRINE_SCOPE_BLOCKS: Readonly<Record<AiDoctrineScope, AiSystemBlock>> = {\n  documents: {\n    text: `${aiBuildingDoctrine('documents')}\\n\\n${AI_ACCEPTABLE_USE_BLOCK}`,\n    cacheBreakpoint: true,\n  },\n  fields: {\n    text: `${aiBuildingDoctrine('fields')}\\n\\n${AI_ACCEPTABLE_USE_BLOCK}`,\n    cacheBreakpoint: true,\n  },\n}\n\n/** The doctrine block a kind that composes a document is sent. */\nexport const AI_DOCTRINE_SYSTEM_BLOCK: AiSystemBlock = AI_DOCTRINE_SCOPE_BLOCKS.documents\n\n/** The doctrine block for one scope. */\nexport function aiDoctrineSystemBlock(scope: AiDoctrineScope): AiSystemBlock {\n  return AI_DOCTRINE_SCOPE_BLOCKS[scope]\n}\n\n/**\n * The scope a generation kind is told the rules in. A kind absent from this\n * map composes a document and is told all seventeen — the three SEO kinds are\n * the only ones today that write values instead, and a new kind that does the\n * same names itself here rather than paying for rules it cannot break.\n */\nexport const AI_DOCTRINE_KIND_SCOPE: Readonly<Record<string, AiDoctrineScope>> = {\n  'seo-fields': 'fields',\n  'seo-site': 'fields',\n  'seo-fixes': 'fields',\n  // CRM by AI (AGL-2917): a record's summary, an email draft, an import's\n  // column matches — values the CRM's own forms take, composing nothing.\n  'crm-email': 'fields',\n  'crm-mapping': 'fields',\n  'crm-record': 'fields',\n}\n\n/** The scope for a kind; `documents` unless the kind names another. */\nexport function aiDoctrineScopeFor(kind: string): AiDoctrineScope {\n  return AI_DOCTRINE_KIND_SCOPE[kind] ?? 'documents'\n}\n\n// ── The inventory block ──────────────────────────────────────────────────\n\n/**\n * The inventory as the prompt's VOLATILE block: per site, so it never sits\n * inside a cached prefix. Held to `AI_SITE_INVENTORY_MAX_CHARS` by cutting\n * the longest kind a line at a time, each cut kind named, so no one kind can\n * crowd the others out.\n *\n * It lists `AI_SITE_INVENTORY_LISTED_PER_KIND` records of each kind, not the\n * whole window the reader holds (AGL-2937): the block is billed at full input\n * rate on every attempt, so a large site would spend most of a plan's prompt\n * on rows it will not use. A kind with more — cut by the listing cap or by\n * the read itself — is named as having more, and the sentence points at the\n * lookup tool the loop offers beside the door's own, so the answer to \"is\n * there already a pricing card?\" is a question the model can ask rather than\n * a gap it fills by creating one.\n */\nexport function aiSiteInventoryBlock(inventory: AiSiteInventory | null): string {\n  if (!inventory) {\n    return 'Site inventory: none was read for this request. Reuse nothing by id, and name every creation as new.'\n  }\n  // Only the first rows of each kind are listed; the rest are held for the\n  // lookup tool, and a kind cut by either the listing cap or the read is\n  // named as having more.\n  const lines = Object.fromEntries(\n    AI_INVENTORY_KINDS.map((kind) => [\n      kind,\n      aiInventoryRows(inventory, kind)\n        .slice(0, AI_SITE_INVENTORY_LISTED_PER_KIND)\n        .map((row) => aiInventoryLine(kind, row)),\n    ]),\n  ) as Record<AiInventoryKind, string[]>\n  const truncated = new Set([\n    ...inventory.truncated,\n    ...AI_INVENTORY_KINDS.filter(\n      (kind) => aiInventoryRows(inventory, kind).length > AI_SITE_INVENTORY_LISTED_PER_KIND,\n    ),\n  ])\n  const render = (): string => {\n    const parts = [\n      'Site inventory: what this site already has. Reuse these by id before creating anything.',\n    ]\n    for (const kind of AI_INVENTORY_KINDS) {\n      parts.push(`${AI_INVENTORY_KIND_HEADINGS[kind]}:`)\n      parts.push(...(lines[kind].length ? lines[kind].map((line) => `- ${line}`) : ['- none']))\n    }\n    if (inventory.theme) {\n      parts.push(`Theme: ${inventory.theme.summary.join('; ') || 'the platform default'}.`)\n      const colors = Object.entries(inventory.theme.colors)\n        .map(([path, value]) => `${path}=${value}`)\n        .join(', ')\n      if (colors) parts.push(`Brand colors (light scheme): ${colors}`)\n      if (inventory.theme.fonts.length) {\n        parts.push(`Brand fonts: ${inventory.theme.fonts.join(', ')}`)\n      }\n    }\n    if (truncated.size) {\n      parts.push(\n        `More exist than are listed for: ${AI_INVENTORY_KINDS.filter((kind) => truncated.has(kind)).join(', ')}. Do not assume one is missing because it is not listed — call ${AI_INVENTORY_LOOKUP_TOOL_NAME} to find it.`,\n      )\n    }\n    return parts.join('\\n')\n  }\n  let block = render()\n  while (block.length > AI_SITE_INVENTORY_MAX_CHARS) {\n    const longest = AI_INVENTORY_KINDS.reduce((a, b) =>\n      lines[b].length > lines[a].length ? b : a,\n    )\n    if (!lines[longest].length) break\n    lines[longest] = lines[longest].slice(0, -1)\n    truncated.add(longest)\n    block = render()\n  }\n  return block.length > AI_SITE_INVENTORY_MAX_CHARS\n    ? block.slice(0, AI_SITE_INVENTORY_MAX_CHARS)\n    : block\n}\n\n/** What a tree generated against this inventory may reference, for `validateAiNodeTree`. */\nexport function aiNodeTreeContextFromInventory(\n  inventory: AiSiteInventory | null,\n): AiNodeTreeContext {\n  if (!inventory) return {}\n  return {\n    screenIds: inventory.screens.map((screen) => screen.id),\n    componentIds: inventory.components.map((component) => component.id),\n    componentProps: Object.fromEntries(\n      inventory.components.map((component) => [component.id, component.props]),\n    ),\n    formIds: inventory.forms.map((form) => form.id),\n    datasetIds: inventory.datasets.map((dataset) => dataset.id),\n  }\n}\n\nexport interface AiDoctrineSystemOptions {\n  /** The door's own static instructions, cached after the doctrine. */\n  instructions?: readonly AiSystemBlock[]\n  /** The palette surface a tree is composed on; its catalog is cached after the instructions. */\n  surface?: AiSurface\n  /** Which rules the doctrine block states; `documents` when the door names none. */\n  scope?: AiDoctrineScope\n}\n\n/**\n * The palette catalog a generation on this surface is shown: the elements the\n * surface allows, the props each takes and the named blocks to imitate. The\n * one reader of it, so a door that composes its own prompt shows the model\n * the catalog the loop below shows it.\n */\nexport function aiDoctrineCatalog(surface: AiSurface): string {\n  return AI_PALETTE_CATALOG[surface]\n}\n\n/**\n * The system prompt every generator sends, in cache order: the doctrine\n * (cached), the door's instructions, the surface's palette catalog (cached),\n * then the site inventory (volatile). With no catalog behind them, the\n * instructions close the cached prefix themselves. The runtime refuses the\n * request if a door slips a volatile block inside the cached span.\n *\n * `null` is a site whose inventory was not read, and the model is told so;\n * `undefined` is a kind that builds from no site structure at all — a theme\n * builds from the theme — and sends no inventory block.\n */\nexport function aiDoctrineSystemBlocks(\n  inventory: AiSiteInventory | null | undefined,\n  options: AiDoctrineSystemOptions = {},\n): AiSystemBlock[] {\n  const instructions = [...(options.instructions ?? [])]\n  const catalog: AiSystemBlock[] = options.surface\n    ? [{ text: aiDoctrineCatalog(options.surface), cacheBreakpoint: true }]\n    : []\n  const last = instructions.length - 1\n  if (\n    !catalog.length &&\n    last >= 0 &&\n    !instructions[last].volatile &&\n    !instructions.some((block) => block.cacheBreakpoint)\n  ) {\n    instructions[last] = { ...instructions[last], cacheBreakpoint: true }\n  }\n  return [\n    aiDoctrineSystemBlock(options.scope ?? 'documents'),\n    ...instructions,\n    ...catalog,\n    ...(inventory === undefined\n      ? []\n      : [{ text: aiSiteInventoryBlock(inventory), volatile: true as const }]),\n  ]\n}\n\n// ── Reading and checking an answer ───────────────────────────────────────\n\n/** What a generation kind is: a document the palette composes, a plan, or a door's own kind. */\nexport type AiGenerationKind = AiOutputKind | 'plan'\n\n/**\n * `max_tokens` per kind (AGL-2937): the ceiling of one answer, sized to the\n * kind's budget with room for the model's reasoning. A kind a door brings\n * with its own check takes `AI_CUSTOM_GENERATION_MAX_TOKENS` unless the door\n * names its own.\n */\nexport const AI_GENERATION_MAX_TOKENS: Record<AiGenerationKind, number> = {\n  plan: AI_ROUTING_TABLE['job.plan'].maxTokens,\n  page: 32_000,\n  template: 32_000,\n  component: 8_000,\n  layout: 12_000,\n  form: 6_000,\n  email: 16_000,\n}\n\nexport const AI_CUSTOM_GENERATION_MAX_TOKENS = 8_000\n\n/** One answer, and one re-ask with the violations named. */\nexport { AI_GENERATION_MAX_ATTEMPTS }\n\n/** How much of the offending parts a re-ask quotes. */\nexport const AI_REASK_OFFENDING_MAX_CHARS = 6_000\n\nexport function isAiOutputKind(kind: string): kind is AiOutputKind {\n  return (AI_OUTPUT_KINDS as readonly string[]).includes(kind)\n}\n\n/** What one check made of one answer. */\nexport interface AiGenerationCheckResult<T> {\n  /** The value to keep; `null` when the answer could not be read as one. */\n  value: T | null\n  violations: AiDoctrineViolation[]\n  /** The parts of the answer at fault, keyed as the model wrote them, for the re-ask. */\n  offending?: Record<string, unknown>\n}\n\nexport type AiGenerationCheck<T> = (\n  answer: Record<string, unknown>,\n) => AiGenerationCheckResult<T>\n\n/** A tree that passed the palette validator and every doctrine rule. */\nexport interface AiValidatedTree {\n  rootId: string\n  nodes: NodesMap\n  /** What the palette validator dropped or normalized on the way in. */\n  repairs: string[]\n  /** Each minted id → the id the model wrote for that node. */\n  sourceIds: Record<string, string>\n  score: AiOutputScore\n  /** The weight the proposal shows; `null` for an email. */\n  load: AiLoadEstimate | null\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return typeof value === 'object' && value !== null && !Array.isArray(value)\n}\n\n/**\n * The strict tool a tree arrives through. The node map rides as JSON text:\n * a map keyed by the model's own node ids has no fixed properties, and a\n * strict schema must close every object it declares.\n */\nexport function aiDoctrineTreeTool(kind: AiOutputKind): AiTool {\n  return {\n    name: `submit_${kind}`,\n    description: `Submit the ${kind} as one flat node map.`,\n    strict: true,\n    inputSchema: {\n      type: 'object',\n      additionalProperties: false,\n      required: ['tree'],\n      properties: {\n        tree: {\n          type: 'string',\n          description:\n            'The node map as JSON: {\"rootId\": \"<id>\", \"nodes\": {\"<id>\": {\"componentId\": \"...\", \"props\": {...}, \"sx\": {...}, \"nodes\": [\"<child id>\", ...]}}}.',\n        },\n      },\n    },\n  }\n}\n\n/** The tree a tool answer carries: `tree` as an object or JSON text, else the answer itself. */\nexport function aiAnswerTree(answer: Record<string, unknown>): unknown {\n  const tree = answer['tree']\n  if (typeof tree === 'string') {\n    try {\n      return JSON.parse(tree) as unknown\n    } catch {\n      return tree\n    }\n  }\n  return isRecord(tree) ? tree : answer\n}\n\n/**\n * The answer a completion carries: the named tool's input, or — from a model\n * that answered in text instead — the text as a JSON object.\n */\nfunction answerOf(result: AiCompletion, toolName: string): Record<string, unknown> | null {\n  const call = result.toolUse.find((use) => use.name === toolName)\n  if (call) return call.input\n  const text = result.text.trim()\n  const fenced = /```(?:json)?\\s*([\\s\\S]*?)```/.exec(text)?.[1]\n  for (const candidate of [text, fenced]) {\n    if (!candidate) continue\n    try {\n      const parsed = JSON.parse(candidate) as unknown\n      if (isRecord(parsed)) return parsed\n    } catch {\n      // Not JSON; the next candidate, or no answer.\n    }\n  }\n  return null\n}\n\n/** A JSON value capped to a character budget, entry by entry. */\nfunction capped(entries: Array<[string, unknown]>): Record<string, unknown> | undefined {\n  const out: Record<string, unknown> = {}\n  let used = 2\n  for (const [key, value] of entries) {\n    const size = JSON.stringify(value ?? null).length + key.length + 4\n    if (used + size > AI_REASK_OFFENDING_MAX_CHARS) break\n    out[key] = value\n    used += size\n  }\n  return Object.keys(out).length ? out : undefined\n}\n\n/** The value at a path such as `screens[1].sections[2]`. */\nfunction valueAtPath(root: unknown, path: string): unknown {\n  let value: unknown = root\n  for (const part of path.match(/[^.[\\]]+/g) ?? []) {\n    if (Array.isArray(value)) value = value[Number(part)]\n    else if (isRecord(value)) value = value[part]\n    else return undefined\n  }\n  return value\n}\n\n/**\n * The doctrine's check for a tree kind: the palette validator, every tree\n * rule and the budget, with each offending node reported and quoted by the\n * id the MODEL wrote — the minted ids are ones it never saw.\n */\nexport function aiDoctrineTreeCheck(\n  kind: AiOutputKind,\n  context: AiDoctrineTreeContext = {},\n  otherPages: readonly AiDoctrineTree[] = [],\n): AiGenerationCheck<AiValidatedTree> {\n  return (answer) => {\n    const input = aiAnswerTree(answer)\n    const report = validateAiDoctrineTree(input, kind, context, otherPages)\n    if (!report.tree || !report.score) {\n      return { value: null, violations: report.violations }\n    }\n    const { sourceIds } = report.tree\n    const violations = report.violations.map((violation) =>\n      violation.nodeIds\n        ? { ...violation, nodeIds: violation.nodeIds.map((id) => sourceIds[id] ?? id) }\n        : violation,\n    )\n    const rawNodes = isRecord(input) && isRecord(input['nodes']) ? input['nodes'] : {}\n    const quoted: Array<[string, unknown]> = []\n    const seen = new Set<string>()\n    const quote = (id: string) => {\n      const node = rawNodes[id]\n      if (seen.has(id) || !isRecord(node)) return\n      seen.add(id)\n      quoted.push([id, node])\n      for (const child of Array.isArray(node['nodes']) ? node['nodes'] : []) {\n        if (typeof child === 'string') quote(child)\n      }\n    }\n    for (const violation of violations) for (const id of violation.nodeIds ?? []) quote(id)\n    return {\n      value: {\n        rootId: report.tree.rootId,\n        nodes: report.tree.nodes,\n        repairs: report.tree.repairs,\n        sourceIds,\n        score: report.score,\n        load: report.load,\n      },\n      violations,\n      offending: capped(quoted),\n    }\n  }\n}\n\n/**\n * The doctrine's check for a plan: its shape, then every plan rule against\n * the inventory and, where the job read them, against what it may create on\n * the site (AGL-3030).\n */\nexport function aiDoctrinePlanCheck(\n  inventory: AiSiteInventory | null,\n  framing: AiCopyFraming = null,\n  capabilities: AiPlanCapabilities | null = null,\n): AiGenerationCheck<AiBuildPlan> {\n  return (answer) => {\n    const publish = detectPublishIntent(answer)\n    const parsed = parseAiBuildPlan(answer)\n    if (parsed.ok === false) {\n      return {\n        value: null,\n        violations: [\n          {\n            rule: null,\n            code: 'plan-shape',\n            message: 'The answer could not be read as a plan.',\n            detail: parsed.error,\n          },\n          ...publish,\n        ],\n      }\n    }\n    const violations = [\n      ...publish,\n      ...validateAiBuildPlan(parsed.plan, inventory, framing, capabilities),\n    ]\n    const paths = [...new Set(violations.flatMap((violation) => violation.paths ?? []))]\n    return {\n      value: parsed.plan,\n      violations,\n      offending: capped(paths.map((path) => [path, valueAtPath(parsed.plan, path)])),\n    }\n  }\n}\n\n// ── An answer cut off at its ceiling ─────────────────────────────────────\n\n/** The finding an answer that ran past its output ceiling is refused for (AGL-3042). */\nexport const AI_ANSWER_CUT_OFF_CODE = 'answer-cut-off'\n\n/**\n * Whether a model call stopped at its output ceiling (AGL-3042). The\n * contract owns the predicate, because an adapter reads it to decide whether\n * to keep the call's raw output; the doctrine re-exports it, which is where\n * every door already reads it from.\n */\nexport { aiStoppedAtCeiling }\n\n/**\n * How a door names what it generates, and what makes it smaller, for an\n * answer cut off at its ceiling (AGL-3042).\n */\nexport interface AiGenerationCutOff {\n  /** What a person calls the output: `section` reads \"This section was too large to build in one pass.\" */\n  noun: string\n  /**\n   * What the re-ask tells the model makes an answer of this kind smaller, in\n   * its own sentence: a section's element budget, shorter copy, a repeated\n   * item placed as an instance.\n   */\n  smaller: string\n}\n\n/**\n * The refusal of an answer that ran past its ceiling. The message is what a\n * person reads, so it names the output as they call it and says what helps;\n * the detail is what the model is told makes it smaller. A plan or a palette\n * kind is called by its kind, and any other a door leaves unnamed an answer.\n */\nfunction cutOffAnswer(kind: string, cutOff: AiGenerationCutOff | undefined): AiDoctrineViolation {\n  const noun = cutOff?.noun ?? (kind === 'plan' || isAiOutputKind(kind) ? kind : 'answer')\n  return {\n    rule: null,\n    code: AI_ANSWER_CUT_OFF_CODE,\n    message: `This ${noun} was too large to build in one pass. Try again, or describe it smaller.`,\n    detail: cutOff?.smaller ?? `Build a smaller ${kind}.`,\n  }\n}\n\nfunction unreadableAnswer(toolName: string): AiDoctrineViolation {\n  return {\n    rule: null,\n    code: 'answer-unreadable',\n    message: `The answer did not come through ${toolName}.`,\n  }\n}\n\n/**\n * The re-ask: the rules broken, where, and the offending parts as the model\n * wrote them. An answer cut off at its ceiling is told that first, with what\n * makes it smaller (AGL-3042): it broke no rule it can mend by reading one,\n * and asking for the same answer again is asking to be cut off again.\n */\nexport function aiReaskMessage(\n  kind: string,\n  toolName: string,\n  violations: readonly AiDoctrineViolation[],\n  offending?: Record<string, unknown>,\n): string {\n  const cutOff = violations.find((violation) => violation.code === AI_ANSWER_CUT_OFF_CODE)\n  const broken = cutOff ? violations.filter((violation) => violation !== cutOff) : violations\n  const lines = cutOff\n    ? [\n        `Your ${kind} was not used: it ran past the size one answer may have, and was cut off before it was whole.`,\n        ...(cutOff.detail ? [cutOff.detail] : []),\n        ...(broken.length ? ['It also breaks these building rules:'] : []),\n      ]\n    : [`Your ${kind} was not used, because it breaks these building rules:`]\n  for (const violation of broken) {\n    const where = violation.nodeIds?.length\n      ? ` (nodes ${violation.nodeIds.join(', ')})`\n      : violation.paths?.length\n        ? ` (at ${violation.paths.join(', ')})`\n        : ''\n    const detail = violation.detail ? ` ${violation.detail}` : ''\n    lines.push(`- ${aiDoctrineViolationText(violation)}${detail}${where}`)\n  }\n  if (offending && Object.keys(offending).length) {\n    lines.push('', 'The parts at fault, as you wrote them:', JSON.stringify(offending))\n  }\n  lines.push(\n    '',\n    cutOff\n      ? `Answer again with ${toolName}: the whole ${kind}, smaller than the one that was cut off${\n          broken.length ? ', and built so that none of these rules is broken' : ''\n        }.`\n      : `Answer again with ${toolName}: the whole ${kind}, built so that none of these rules is broken.`,\n  )\n  return lines.join('\\n')\n}\n\n/**\n * What a person reads when the second answer still broke a rule. An answer\n * cut off at its ceiling broke none (AGL-3042), so its own sentence is what\n * they read: it was too large, and what helps.\n */\nexport function aiDoctrineNeedsInputMessage(violations: readonly AiDoctrineViolation[]): string {\n  const cutOff = violations.find((violation) => violation.code === AI_ANSWER_CUT_OFF_CODE)\n  if (cutOff) return cutOff.message\n  const first = violations.find((violation) => violation.rule !== null) ?? violations[0]\n  if (!first) return 'This could not be built within the building rules.'\n  const others = violations.length - 1\n  return `This could not be built within the building rules. ${aiDoctrineViolationText(first)}${\n    others > 0 ? ` (${others} more ${others === 1 ? 'rule was' : 'rules were'} also broken.)` : ''\n  }`\n}\n\n// ── The loop ─────────────────────────────────────────────────────────────\n\ninterface AiGenerationInputBase {\n  /**\n   * The routing table's step kind: it decides the model (never a model\n   * literal) unless `model` names one already resolved. One of the two is\n   * required.\n   */\n  step?: AiStepKind\n  /** The org's resolved `pluginSettings/ai`, for its provider and model choices. */\n  settings?: AiPluginSettings\n  /** A route the door already resolved; the routing table's answer for `step` otherwise. */\n  model?: string\n  /** The door's own static instructions. */\n  instructions: readonly AiSystemBlock[]\n  /** The site the output is built for; `null` when none was read. */\n  inventory: AiSiteInventory | null\n  /** The brief and whatever the door sends in the user turn. */\n  messages: readonly AiMessage[]\n  /** The strict tool the answer arrives through. */\n  tool: AiTool\n  /**\n   * The ceiling of one answer; `AI_GENERATION_MAX_TOKENS` for the kind when\n   * absent. The whole generation — its answers and every lookup round before\n   * them — spends at most `AI_GENERATION_MAX_ATTEMPTS` of it (AGL-3036).\n   */\n  maxTokens?: number\n  /**\n   * What the output is called, and what makes it smaller, when an answer is\n   * cut off at `maxTokens` (AGL-3042). Absent, a plan or a palette kind is\n   * called by its kind, any other output an answer, and the model is asked\n   * for a smaller one of its kind.\n   */\n  cutOff?: AiGenerationCutOff\n  thinking?: AiThinking\n  effort?: AiEffort\n  signal?: AbortSignal\n  /** A provider chosen ahead of every setting; specs use it. */\n  provider?: AiProvider\n}\n\nexport interface AiTreeGenerationInput extends AiGenerationInputBase {\n  /** What the tree rules read beyond the inventory: asset sizes, the brand, embeds, framing. */\n  context?: AiDoctrineTreeContext\n  /** Trees generated beside this one, for rule 1 across pages. */\n  otherPages?: readonly AiDoctrineTree[]\n  /** Checks the door adds to the doctrine's own, run on a tree the doctrine admitted. */\n  extend?: (tree: AiValidatedTree, answer: Record<string, unknown>) => AiDoctrineViolation[]\n}\n\nexport interface AiPlanGenerationInput extends AiGenerationInputBase {\n  framing?: AiCopyFraming\n  /**\n   * What the job may create on its site (AGL-3030). The plan rules refuse a\n   * creation outside it, and build inline where the workspace keeps no\n   * reusable components; absent, the doctrine applies whole.\n   */\n  capabilities?: AiPlanCapabilities | null\n  /** Checks the door adds to the doctrine's own, run on a plan that parsed. */\n  extend?: (plan: AiBuildPlan, answer: Record<string, unknown>) => AiDoctrineViolation[]\n}\n\nexport interface AiCustomGenerationInput<T> extends Omit<AiGenerationInputBase, 'inventory'> {\n  /**\n   * The site the output is built for, `null` when none was read. A kind that\n   * builds from no site structure — a theme builds from the theme — leaves it\n   * out, and no inventory block is sent.\n   */\n  inventory?: AiSiteInventory | null\n  /**\n   * How a kind the doctrine has no reader for is read and checked — a theme\n   * change, an edit. Rule 13 is held on every answer whatever it returns.\n   */\n  check: AiGenerationCheck<T>\n}\n\n/** What a generation spent, whatever its outcome. */\nexport interface AiGenerationSpend {\n  /**\n   * Model calls made, all of which the meter bills: one per answer — 2 when\n   * the first was re-asked — plus one per site-inventory lookup answered\n   * along the way (AGL-2937).\n   */\n  attempts: number\n  /** Tokens across every attempt; the meter bills all of them. */\n  usage: AiUsage\n  estCostUsd: number\n  model: string\n  stopReason: string | null\n  /** The thinking effort the requests asked for; `null` when they named none. */\n  effort: AiEffort | null\n}\n\nexport type AiValidatedGeneration<T> =\n  | (AiGenerationSpend & { status: 'ok'; value: T })\n  /** The re-ask still broke a rule: a person decides. `message` is customer-safe. */\n  | (AiGenerationSpend & {\n      status: 'needs_input'\n      violations: AiDoctrineViolation[]\n      message: string\n      /**\n       * The answer the violations were found in, as it came through the tool\n       * (AGL-3078): what a job's review outlines the parts they name from.\n       * Held in memory only, and `null` when no answer arrived.\n       */\n      answer?: Record<string, unknown> | null\n      /**\n       * What the provider wrote for the attempt its ceiling cut off\n       * (AGL-3143), when it sent it: the bytes behind `answer`, which is only\n       * as much of them as still parsed. Held in memory only, like `answer`,\n       * and `null` when nothing was cut off. It is the trace's, never a\n       * customer's — a caller that keeps it keeps it out of what it shows.\n       */\n      rawOutput?: string | null\n    })\n  /** The model declined; tokens were spent. */\n  | (AiGenerationSpend & { status: 'refused' })\n\nfunction withExtension<T>(\n  check: AiGenerationCheck<T>,\n  extend: ((value: T, answer: Record<string, unknown>) => AiDoctrineViolation[]) | undefined,\n): AiGenerationCheck<T> {\n  if (!extend) return check\n  return (answer) => {\n    const result = check(answer)\n    return result.value === null\n      ? result\n      : { ...result, violations: [...result.violations, ...extend(result.value, answer)] }\n  }\n}\n\n/** A door's own check, with rule 13 held on every answer it reads. */\nfunction withDraftsOnly<T>(check: AiGenerationCheck<T>): AiGenerationCheck<T> {\n  return (answer) => {\n    const result = check(answer)\n    return { ...result, violations: [...detectPublishIntent(answer), ...result.violations] }\n  }\n}\n\n/**\n * What a tree built for this site is checked against: the brand an email is\n * held to, the ids the inventory lists, and whatever the door adds — asset\n * sizes, embeds, framing.\n */\nexport function aiDoctrineTreeContext(\n  inventory: AiSiteInventory | null,\n  extra: AiDoctrineTreeContext = {},\n): AiDoctrineTreeContext {\n  return {\n    brand: inventory?.theme\n      ? { colors: inventory.theme.colors, fonts: inventory.theme.fonts }\n      : null,\n    ...aiNodeTreeContextFromInventory(inventory),\n    homeScreenIds: aiHomeScreenIds(inventory),\n    ...extra,\n  }\n}\n\nfunction checkFor(kind: string, input: object): AiGenerationCheck<unknown> {\n  if (kind === 'plan') {\n    const plan = input as AiPlanGenerationInput\n    return withExtension(\n      aiDoctrinePlanCheck(plan.inventory, plan.framing ?? null, plan.capabilities ?? null),\n      plan.extend,\n    ) as AiGenerationCheck<unknown>\n  }\n  if (isAiOutputKind(kind)) {\n    const tree = input as AiTreeGenerationInput\n    return withExtension(\n      aiDoctrineTreeCheck(kind, aiDoctrineTreeContext(tree.inventory, tree.context), tree.otherPages),\n      tree.extend,\n    ) as AiGenerationCheck<unknown>\n  }\n  const custom = (input as Partial<AiCustomGenerationInput<unknown>>).check\n  if (!custom) {\n    throw new Error(`runValidatedGeneration: the doctrine has no reader for \"${kind}\"; pass check`)\n  }\n  return withDraftsOnly(custom)\n}\n\n/**\n * Generate one output under the doctrine: ask, check, re-ask once with the\n * violations named, and give up with `needs_input` rather than spend again.\n *\n * `kind` decides the check: `'plan'` and the six palette kinds are read and\n * held by the doctrine itself; any other kind brings its own `check`, and the\n * doctrine still holds rule 13 on it. Throws only what the runtime throws — a\n * provider failure, an abort, a prompt the cache guard refuses — so a job\n * step's retry and failure paths stay the machine's.\n */\nexport function runValidatedGeneration(\n  kind: 'plan',\n  input: AiPlanGenerationInput,\n): Promise<AiValidatedGeneration<AiBuildPlan>>\nexport function runValidatedGeneration(\n  kind: AiOutputKind,\n  input: AiTreeGenerationInput,\n): Promise<AiValidatedGeneration<AiValidatedTree>>\nexport function runValidatedGeneration<T>(\n  kind: string,\n  input: AiCustomGenerationInput<T>,\n): Promise<AiValidatedGeneration<T>>\nexport async function runValidatedGeneration(\n  kind: string,\n  input: Omit<AiGenerationInputBase, 'inventory'> & { inventory?: AiSiteInventory | null },\n): Promise<AiValidatedGeneration<unknown>> {\n  const check = checkFor(kind, input)\n  const model =\n    input.model ?? (input.step ? aiModelForStep(input.step, input.settings) : undefined)\n  if (!model) {\n    throw new Error(`runValidatedGeneration: a ${kind} names neither its step nor its model`)\n  }\n  const system = aiDoctrineSystemBlocks(input.inventory, {\n    instructions: input.instructions,\n    scope: aiDoctrineScopeFor(kind),\n    ...(isAiOutputKind(kind) ? { surface: AI_OUTPUT_SURFACE[kind] } : {}),\n  })\n  const maxTokens =\n    input.maxTokens ??\n    AI_GENERATION_MAX_TOKENS[kind as AiGenerationKind] ??\n    AI_CUSTOM_GENERATION_MAX_TOKENS\n  const spend: AiGenerationSpend = {\n    attempts: 0,\n    usage: { inputTokens: 0, outputTokens: 0, cacheReadTokens: 0, cacheWriteTokens: 0 },\n    estCostUsd: 0,\n    model,\n    stopReason: null,\n    effort: input.effort ?? null,\n  }\n  // \"More on request\" (AGL-2937). A door that reads a site is offered the\n  // lookup tool beside its own on EVERY request, whatever the site's size:\n  // the tool list renders ahead of the system blocks and is part of what a\n  // cache entry is keyed on, so offering it only to the sites large enough to\n  // need it would split the platform's one cached prefix in two. A kind that\n  // builds from no site structure — a theme, a listing — passes no inventory\n  // and is offered nothing.\n  const lookup = input.inventory === undefined ? null : aiInventoryLookupTool()\n  const tools = lookup ? [input.tool, lookup] : [input.tool]\n  let messages: AiMessage[] = [...input.messages]\n  let violations: AiDoctrineViolation[] = []\n  // The answer `violations` were found in, for the review a person reads.\n  let refused: Record<string, unknown> | null = null\n  // What the provider wrote for the attempt its ceiling cut off (AGL-3143).\n  let rawOutput: string | null = null\n  // Answer attempts, which the re-ask bounds, are counted apart from model\n  // calls, which lookups also spend.\n  let answers = 0\n  let lookups = 0\n  // ONE ALLOWANCE OF OUTPUT FOR THE WHOLE GENERATION (AGL-3036): an answer\n  // and its re-ask at the ceiling. A lookup round is a model call answered at\n  // the same ceiling, and nothing can tell a request that will look something\n  // up from one that will answer, so each call is asked for no more than is\n  // left of the allowance rather than for a ceiling of its own. What a\n  // generation can take is then its calls' waits for a first token plus this\n  // allowance, however it splits between lookups and answers — the worst case\n  // `jobs/ai-job-budget.ts` plans a step's least time against. A generation\n  // that has spent it all stops: nothing is left to answer with.\n  const allowance = AI_GENERATION_MAX_ATTEMPTS * maxTokens\n  while (answers < AI_GENERATION_MAX_ATTEMPTS) {\n    const spent = Number(spend.usage.outputTokens)\n    const left = allowance - (Number.isFinite(spent) ? spent : 0)\n    if (left <= 0) {\n      if (!violations.length) violations = [cutOffAnswer(kind, input.cutOff)]\n      break\n    }\n    spend.attempts += 1\n    const result = await runAiRequest({\n      model,\n      system,\n      messages,\n      tools,\n      maxTokens: Math.min(maxTokens, left),\n      stream: false,\n      ...(input.thinking ? { thinking: input.thinking } : {}),\n      ...(input.effort ? { effort: input.effort } : {}),\n      ...(input.signal ? { signal: input.signal } : {}),\n      ...(input.settings ? { settings: input.settings } : {}),\n      ...(input.provider ? { provider: input.provider } : {}),\n    })\n    // Thinking tokens add up across the exchanges only where a provider\n    // breaks them out; a generation whose provider reports none carries none,\n    // rather than a zero that would read as \"it did not think\" (AGL-3143).\n    const thinking =\n      result.usage.thinkingTokens === undefined\n        ? spend.usage.thinkingTokens\n        : (spend.usage.thinkingTokens ?? 0) + result.usage.thinkingTokens\n    spend.usage = {\n      inputTokens: spend.usage.inputTokens + result.usage.inputTokens,\n      outputTokens: spend.usage.outputTokens + result.usage.outputTokens,\n      cacheReadTokens: spend.usage.cacheReadTokens + result.usage.cacheReadTokens,\n      cacheWriteTokens: spend.usage.cacheWriteTokens + result.usage.cacheWriteTokens,\n      ...(thinking === undefined ? {} : { thinkingTokens: thinking }),\n    }\n    spend.estCostUsd = Math.round((spend.estCostUsd + result.estCostUsd) * 1_000_000) / 1_000_000\n    spend.stopReason = result.stopReason\n    if (result.kind === 'refusal') return { ...spend, status: 'refused' }\n\n    const answer = answerOf(result, input.tool.name)\n    // A turn that asked to look something up rather than answering is not an\n    // answer attempt: it is answered from the window already in memory and\n    // the model is asked again. Bounded, because each round is a model call\n    // the caller pays for; the last one says so, so the bound costs a turn\n    // rather than a re-ask.\n    const asked = answer ? undefined : result.toolUse.find((use) => use.name === lookup?.name)\n    if (asked && lookups < AI_INVENTORY_LOOKUP_MAX_ROUNDS) {\n      lookups += 1\n      const last =\n        lookups === AI_INVENTORY_LOOKUP_MAX_ROUNDS\n          ? `\\n\\nThat was the last lookup. Answer with ${input.tool.name} now.`\n          : ''\n      messages = [\n        ...messages,\n        { role: 'assistant', content: `Called ${AI_INVENTORY_LOOKUP_TOOL_NAME}.` },\n        {\n          role: 'user',\n          content: `${answerAiInventoryLookup(input.inventory ?? null, asked.input)}${last}`,\n        },\n      ]\n      continue\n    }\n    answers += 1\n    // CUT OFF WINS (AGL-3042), AND IT IS ASKED BEFORE THE CHECK'S VERDICT IS\n    // BELIEVED (AGL-3143). A call that stopped at its ceiling was cut off,\n    // whatever reached the tool: a tool input cut mid-answer arrives partial\n    // or empty, and a check reads the truncation as a shape error — \"the\n    // answer could not be used as a section\" — that a re-ask quoting it\n    // cannot mend, so the re-ask is cut off the same way. The attempt is\n    // refused as too large instead, and only a numbered rule the part that\n    // arrived already broke is named beside it.\n    //\n    // A truncation does not always break a rule, though. A tool call cut at a\n    // point where its valid prefix still parses reads as a smaller but legal\n    // answer — three steps asked for, one step delivered — and passes every\n    // check there is. Tested after the success path, \"cut off wins\" then\n    // fires only where the check ALREADY failed, and the half-answer is\n    // handed over with no re-ask spent on it. So the ceiling is tested first,\n    // and a cut-off answer is refused whatever its prefix reads as. This is\n    // not particular to one kind: any door that can read a partial answer as\n    // a whole one has the same hole.\n    const cutOff = aiStoppedAtCeiling(result.stopReason)\n    const checked = answer ? check(answer) : null\n    if (!cutOff && checked && checked.value !== null && checked.violations.length === 0) {\n      return { ...spend, status: 'ok', value: checked.value }\n    }\n    const found = checked?.violations ?? []\n    refused = answer\n    if (cutOff) {\n      rawOutput = result.rawOutput ?? null\n      // WHERE THE OUTPUT WENT (AGL-3143). The shapes a cut-off answer comes\n      // in are told apart by these figures. Thinking tokens account for the\n      // spend first, because the thinking budget is drawn from the same\n      // ceiling as the answer: a generation can spend nearly all of one\n      // thinking and be cut off mid-call with a correct, tiny tool input, and\n      // that is a ceiling to raise rather than a decoder to fix. What thinking\n      // does not account for is told apart by the raw output — long, and a\n      // runaway string the partial parse discarded; short, and decoding wrote\n      // nothing usable. The bytes themselves are the model's own words, which\n      // is the site's content, so they travel on the result for a trace to\n      // keep and never into the log.\n      console.warn('ai answer cut off at its ceiling', {\n        kind,\n        model,\n        maxTokens,\n        ...aiCutOffFigures({ usage: spend.usage, parsed: answer, rawOutput }),\n      })\n    }\n    violations = cutOff\n      ? [cutOffAnswer(kind, input.cutOff), ...found.filter((violation) => violation.rule !== null)]\n      : found.length\n        ? found\n        : [unreadableAnswer(input.tool.name)]\n    const offending = cutOff && violations.length === 1 ? undefined : checked?.offending\n    // The re-ask continues the turn rather than replacing it, so whatever the\n    // model looked up is still in front of it and is not asked for twice.\n    messages = [\n      ...messages,\n      { role: 'assistant', content: `Submitted the ${kind} with ${input.tool.name}.` },\n      {\n        role: 'user',\n        content: aiReaskMessage(kind, input.tool.name, violations, offending),\n      },\n    ]\n  }\n  return {\n    ...spend,\n    status: 'needs_input',\n    violations,\n    message: aiDoctrineNeedsInputMessage(violations),\n    answer: refused,\n    rawOutput,\n  }\n}\n\n// ── An answer that streamed ──────────────────────────────────────────────\n\n/** What a streamed answer came to: a value with what its check left out, or the reasons there is none. */\nexport type AiStreamedGeneration<T> =\n  | { status: 'ok'; value: T; violations: AiDoctrineViolation[] }\n  /** No value, or a numbered rule broken. `message` is customer-safe. */\n  | { status: 'needs_input'; violations: AiDoctrineViolation[]; message: string }\n\n/**\n * An answer a door has already received, held to the doctrine without a\n * request. A door that streams its reply to the reader as it arrives — the\n * chat door's edit rung — can read the answer only once it is on screen, with\n * no turn left to re-ask in, so the loop above cannot carry it.\n *\n * The check is the loop's for a kind the doctrine has no reader for: the\n * door's own, with rule 13 held on the answer. So are the verdicts, less the\n * re-ask. No value, or a numbered rule broken, is `needs_input` with the\n * reasons. A value is `ok` with the door's own findings beside it — what its\n * check already left out of the value, such as the changes an edit could not\n * make. A plan or a palette kind is refused here: the loop reads those, and a\n * broken rule in one is asked for again, never kept.\n */\nexport function validateStreamedGeneration<T>(\n  kind: string,\n  input: { answer: Record<string, unknown>; check: AiGenerationCheck<T> },\n): AiStreamedGeneration<T> {\n  if (kind === 'plan' || isAiOutputKind(kind)) {\n    throw new Error(\n      `validateStreamedGeneration: a ${kind} is generated through runValidatedGeneration, which can re-ask`,\n    )\n  }\n  const { value, violations } = withDraftsOnly(input.check)(input.answer)\n  if (value === null || violations.some((violation) => violation.rule !== null)) {\n    return { status: 'needs_input', violations, message: aiDoctrineNeedsInputMessage(violations) }\n  }\n  return { status: 'ok', value, violations }\n}\n"],"names":["parseAiBuildPlan","AI_INVENTORY_KINDS","AI_INVENTORY_KIND_HEADINGS","AI_SITE_INVENTORY_LISTED_PER_KIND","AI_SITE_INVENTORY_MAX_CHARS","aiHomeScreenIds","aiInventoryLine","aiInventoryRows","aiCutOffFigures","aiStoppedAtCeiling","AI_ROUTING_TABLE","aiModelForStep","AI_ACCEPTABLE_USE_BLOCK","runAiRequest","AI_SIMILAR_PAGES_MIN","aiDoctrineViolationText","detectPublishIntent","validateAiBuildPlan","validateAiDoctrineTree","AI_INVENTORY_LOOKUP_MAX_ROUNDS","AI_INVENTORY_LOOKUP_TOOL_NAME","aiInventoryLookupTool","answerAiInventoryLookup","AI_GENERATION_MAX_ATTEMPTS","AI_OUTPUT_BUDGETS","AI_OUTPUT_KINDS","AI_OUTPUT_SURFACE","AI_PALETTE_CATALOG","kilobytes","bytes","toLocaleString","maximumFractionDigits","Math","round","budgetLine","kind","budget","parts","nodes","imageBytes","embeds","emailHtmlBytes","push","test","join","DOCUMENTS","EVERY_SCOPE","AI_DOCTRINE_RULE_TEXT","n","scopes","text","map","SCOPE_OPENING","documents","fields","SCOPE_CLOSING","aiBuildingDoctrine","scope","closing","filter","rule","includes","AI_BUILDING_DOCTRINE","AI_DOCTRINE_SCOPE_BLOCKS","cacheBreakpoint","AI_DOCTRINE_SYSTEM_BLOCK","aiDoctrineSystemBlock","AI_DOCTRINE_KIND_SCOPE","aiDoctrineScopeFor","aiSiteInventoryBlock","inventory","lines","Object","fromEntries","slice","row","truncated","Set","length","render","line","theme","summary","colors","entries","path","value","fonts","size","has","block","longest","reduce","a","b","add","aiNodeTreeContextFromInventory","screenIds","screens","screen","id","componentIds","components","component","componentProps","props","formIds","forms","form","datasetIds","datasets","dataset","aiDoctrineCatalog","surface","aiDoctrineSystemBlocks","options","instructions","catalog","last","volatile","some","undefined","AI_GENERATION_MAX_TOKENS","plan","maxTokens","page","template","layout","email","AI_CUSTOM_GENERATION_MAX_TOKENS","AI_REASK_OFFENDING_MAX_CHARS","isAiOutputKind","isRecord","Array","isArray","aiDoctrineTreeTool","name","description","strict","inputSchema","type","additionalProperties","required","properties","tree","aiAnswerTree","answer","JSON","parse","answerOf","result","toolName","call","toolUse","find","use","input","trim","fenced","exec","candidate","parsed","capped","out","used","key","stringify","keys","valueAtPath","root","part","match","Number","aiDoctrineTreeCheck","context","otherPages","violation","report","score","violations","sourceIds","nodeIds","rawNodes","quoted","seen","quote","node","child","rootId","repairs","load","offending","aiDoctrinePlanCheck","framing","capabilities","publish","ok","code","message","detail","error","paths","flatMap","AI_ANSWER_CUT_OFF_CODE","cutOffAnswer","cutOff","noun","smaller","unreadableAnswer","aiReaskMessage","broken","where","aiDoctrineNeedsInputMessage","first","others","withExtension","check","extend","withDraftsOnly","aiDoctrineTreeContext","extra","brand","homeScreenIds","checkFor","custom","Error","runValidatedGeneration","model","step","settings","system","spend","attempts","usage","inputTokens","outputTokens","cacheReadTokens","cacheWriteTokens","estCostUsd","stopReason","effort","lookup","tools","tool","messages","refused","rawOutput","answers","lookups","allowance","spent","left","isFinite","min","stream","thinking","signal","provider","thinkingTokens","status","asked","role","content","checked","found","console","warn","validateStreamedGeneration"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC;AAGD,SAASA,gBAAgB,QAA0B,4BAAwB;AAE3E,SACEC,kBAAkB,EAClBC,0BAA0B,EAC1BC,iCAAiC,EACjCC,2BAA2B,EAC3BC,eAAe,EACfC,eAAe,EACfC,eAAe,QAGV,gCAA4B;AAEnC,SAASC,eAAe,EAAEC,kBAAkB,QAAyB,2BAAuB;AAC5F,SAASC,gBAAgB,EAAEC,cAAc,QAA+B,0BAAsB;AAC9F,SACEC,uBAAuB,EACvBC,YAAY,QAQP,kBAAc;AACrB,SACEC,oBAAoB,EACpBC,uBAAuB,EACvBC,mBAAmB,EACnBC,mBAAmB,EACnBC,sBAAsB,QAMjB,8BAA0B;AACjC,SACEC,8BAA8B,EAC9BC,6BAA6B,EAC7BC,qBAAqB,EACrBC,uBAAuB,QAClB,uCAAmC;AAC1C,SAASC,0BAA0B,QAAQ,4BAAwB;AAEnE,SACEC,iBAAiB,EACjBC,eAAe,EACfC,iBAAiB,QAIZ,kBAAc;AACrB,SAASC,kBAAkB,QAAQ,4BAAwB;AAE3D;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAqCC,GAED,4EAA4E;AAE5E,SAASC,UAAUC,KAAa;IAC9B,OAAOA,SAAS,UACZ,GAAG,AAACA,CAAAA,QAAQ,OAAQ,EAAGC,cAAc,CAAC,SAAS;QAAEC,uBAAuB;IAAE,GAAG,GAAG,CAAC,GACjF,GAAGC,KAAKC,KAAK,CAACJ,QAAQ,MAAO,GAAG,CAAC;AACvC;AAEA,SAASK,WAAWC,IAAkB;IACpC,MAAMC,SAASZ,iBAAiB,CAACW,KAAK;IACtC,MAAME,QAAQ;QACZ,GAAGD,OAAOE,KAAK,CAAC,SAAS,CAAC;QAC1B,GAAGV,UAAUQ,OAAOP,KAAK,EAAE,OAAO,CAAC;QACnCO,OAAOG,UAAU,GAAG,GAAGX,UAAUQ,OAAOG,UAAU,EAAE,UAAU,CAAC,GAAG;QAClEH,OAAOI,MAAM,GAAG,GAAGJ,OAAOI,MAAM,CAAC,MAAM,CAAC,GAAG;KAC5C;IACD,IAAIJ,OAAOK,cAAc,EAAEJ,MAAMK,IAAI,CAAC,GAAGd,UAAUQ,OAAOK,cAAc,EAAE,iBAAiB,CAAC;IAC5F,OAAO,GAAG,WAAWE,IAAI,CAACR,QAAQ,OAAO,IAAI,CAAC,EAAEA,KAAK,SAAS,EAAEE,MAAMO,IAAI,CAAC,OAAO;AACpF;AAsCA,MAAMC,YAAwC;IAAC;CAAY;AAC3D,MAAMC,cAA0C;IAAC;IAAa;CAAS;AAEvE,MAAMC,wBAAuD;IAC3D;QAAEC,GAAG;QAAGC,QAAQJ;QAAWK,MAAM;IAA2lB;IAC5nB;QAAEF,GAAG;QAAGC,QAAQJ;QAAWK,MAAM;IAAmP;IACpR;QAAEF,GAAG;QAAGC,QAAQJ;QAAWK,MAAM;IAAygB;IAC1iB;QAAEF,GAAG;QAAGC,QAAQJ;QAAWK,MAAM,CAAC,uCAAuC,EAAEpC,qBAAqB,uNAAuN,EAAEA,qBAAqB,mBAAmB,CAAC;IAAC;IACnW;QAAEkC,GAAG;QAAGC,QAAQJ;QAAWK,MAAM;IAA8W;IAC/Y;QAAEF,GAAG;QAAGC,QAAQJ;QAAWK,MAAM;IAA2K;IAC5M;QAAEF,GAAG;QAAGC,QAAQJ;QAAWK,MAAM;IAA+X;IACha;QAAEF,GAAG;QAAGC,QAAQJ;QAAWK,MAAM;IAAgM;IACjO;QAAEF,GAAG;QAAGC,QAAQJ;QAAWK,MAAM;IAAmO;IACpQ;QAAEF,GAAG;QAAIC,QAAQJ;QAAWK,MAAM;IAAqV;IACvX;QAAEF,GAAG;QAAIC,QAAQJ;QAAWK,MAAM;IAAuT;IACzV;QAAEF,GAAG;QAAIC,QAAQJ;QAAWK,MAAM;IAA2M;IAC7O;QAAEF,GAAG;QAAIC,QAAQH;QAAaI,MAAM;IAAyJ;IAC7L;QAAEF,GAAG;QAAIC,QAAQJ;QAAWK,MAAM;IAA6U;IAC/W;QAAEF,GAAG;QAAIC,QAAQJ;QAAWK,MAAM;IAAwL;IAC1N;QAAEF,GAAG;QAAIC,QAAQJ;QAAWK,MAAM;IAA8Y;IAChb;QAAEF,GAAG;QAAIC,QAAQJ;QAAWK,MAAM,CAAC,2FAA2F,EAAEzB,gBAAgB0B,GAAG,CAACjB,YAAYU,IAAI,CAAC,MAAM,CAAC,CAAC;IAAC;CAC/K;AAED,wDAAwD,GACxD,MAAMQ,gBAA2D;IAC/DC,WACE;IACFC,QACE;AACJ;AAEA;;;;;CAKC,GACD,MAAMC,gBAAkE;IACtEF,WACE;IACFC,QAAQ;AACV;AAEA;;;;CAIC,GACD,OAAO,SAASE,mBAAmBC,KAAsB;IACvD,MAAMC,UAAUH,aAAa,CAACE,MAAM;IACpC,OAAO;QACLL,aAAa,CAACK,MAAM;QACpB;WACGV,sBAAsBY,MAAM,CAAC,CAACC,OAASA,KAAKX,MAAM,CAACY,QAAQ,CAACJ,QAAQN,GAAG,CACxE,CAACS,OAAS,GAAGA,KAAKZ,CAAC,CAAC,EAAE,EAAEY,KAAKV,IAAI,EAAE;WAEjCQ,UAAU;YAAC;YAAIA;SAAQ,GAAG,EAAE;KACjC,CAACd,IAAI,CAAC;AACT;AAEA,oEAAoE,GACpE,OAAO,MAAMkB,uBAAuBN,mBAAmB,aAAY;AAEnE;;;;;;;;;;;;;CAaC,GACD,MAAMO,2BAA6E;IACjFV,WAAW;QACTH,MAAM,GAAGM,mBAAmB,aAAa,IAAI,EAAE5C,yBAAyB;QACxEoD,iBAAiB;IACnB;IACAV,QAAQ;QACNJ,MAAM,GAAGM,mBAAmB,UAAU,IAAI,EAAE5C,yBAAyB;QACrEoD,iBAAiB;IACnB;AACF;AAEA,gEAAgE,GAChE,OAAO,MAAMC,2BAA0CF,yBAAyBV,SAAS,CAAA;AAEzF,sCAAsC,GACtC,OAAO,SAASa,sBAAsBT,KAAsB;IAC1D,OAAOM,wBAAwB,CAACN,MAAM;AACxC;AAEA;;;;;CAKC,GACD,OAAO,MAAMU,yBAAoE;IAC/E,cAAc;IACd,YAAY;IACZ,aAAa;IACb,wEAAwE;IACxE,uEAAuE;IACvE,aAAa;IACb,eAAe;IACf,cAAc;AAChB,EAAC;AAED,qEAAqE,GACrE,OAAO,SAASC,mBAAmBjC,IAAY;QACtCgC;IAAP,QAAOA,+BAAAA,sBAAsB,CAAChC,KAAK,YAA5BgC,+BAAgC;AACzC;AAEA,4EAA4E;AAE5E;;;;;;;;;;;;;;CAcC,GACD,OAAO,SAASE,qBAAqBC,SAAiC;IACpE,IAAI,CAACA,WAAW;QACd,OAAO;IACT;IACA,yEAAyE;IACzE,uEAAuE;IACvE,wBAAwB;IACxB,MAAMC,QAAQC,OAAOC,WAAW,CAC9BxE,mBAAmBkD,GAAG,CAAC,CAAChB,OAAS;YAC/BA;YACA5B,gBAAgB+D,WAAWnC,MACxBuC,KAAK,CAAC,GAAGvE,mCACTgD,GAAG,CAAC,CAACwB,MAAQrE,gBAAgB6B,MAAMwC;SACvC;IAEH,MAAMC,YAAY,IAAIC,IAAI;WACrBP,UAAUM,SAAS;WACnB3E,mBAAmB0D,MAAM,CAC1B,CAACxB,OAAS5B,gBAAgB+D,WAAWnC,MAAM2C,MAAM,GAAG3E;KAEvD;IACD,MAAM4E,SAAS;QACb,MAAM1C,QAAQ;YACZ;SACD;QACD,KAAK,MAAMF,QAAQlC,mBAAoB;YACrCoC,MAAMK,IAAI,CAAC,GAAGxC,0BAA0B,CAACiC,KAAK,CAAC,CAAC,CAAC;YACjDE,MAAMK,IAAI,IAAK6B,KAAK,CAACpC,KAAK,CAAC2C,MAAM,GAAGP,KAAK,CAACpC,KAAK,CAACgB,GAAG,CAAC,CAAC6B,OAAS,CAAC,EAAE,EAAEA,MAAM,IAAI;gBAAC;aAAS;QACzF;QACA,IAAIV,UAAUW,KAAK,EAAE;YACnB5C,MAAMK,IAAI,CAAC,CAAC,OAAO,EAAE4B,UAAUW,KAAK,CAACC,OAAO,CAACtC,IAAI,CAAC,SAAS,uBAAuB,CAAC,CAAC;YACpF,MAAMuC,SAASX,OAAOY,OAAO,CAACd,UAAUW,KAAK,CAACE,MAAM,EACjDhC,GAAG,CAAC,CAAC,CAACkC,MAAMC,MAAM,GAAK,GAAGD,KAAK,CAAC,EAAEC,OAAO,EACzC1C,IAAI,CAAC;YACR,IAAIuC,QAAQ9C,MAAMK,IAAI,CAAC,CAAC,6BAA6B,EAAEyC,QAAQ;YAC/D,IAAIb,UAAUW,KAAK,CAACM,KAAK,CAACT,MAAM,EAAE;gBAChCzC,MAAMK,IAAI,CAAC,CAAC,aAAa,EAAE4B,UAAUW,KAAK,CAACM,KAAK,CAAC3C,IAAI,CAAC,OAAO;YAC/D;QACF;QACA,IAAIgC,UAAUY,IAAI,EAAE;YAClBnD,MAAMK,IAAI,CACR,CAAC,gCAAgC,EAAEzC,mBAAmB0D,MAAM,CAAC,CAACxB,OAASyC,UAAUa,GAAG,CAACtD,OAAOS,IAAI,CAAC,MAAM,+DAA+D,EAAExB,8BAA8B,YAAY,CAAC;QAEvN;QACA,OAAOiB,MAAMO,IAAI,CAAC;IACpB;IACA,IAAI8C,QAAQX;IACZ,MAAOW,MAAMZ,MAAM,GAAG1E,4BAA6B;QACjD,MAAMuF,UAAU1F,mBAAmB2F,MAAM,CAAC,CAACC,GAAGC,IAC5CvB,KAAK,CAACuB,EAAE,CAAChB,MAAM,GAAGP,KAAK,CAACsB,EAAE,CAACf,MAAM,GAAGgB,IAAID;QAE1C,IAAI,CAACtB,KAAK,CAACoB,QAAQ,CAACb,MAAM,EAAE;QAC5BP,KAAK,CAACoB,QAAQ,GAAGpB,KAAK,CAACoB,QAAQ,CAACjB,KAAK,CAAC,GAAG,CAAC;QAC1CE,UAAUmB,GAAG,CAACJ;QACdD,QAAQX;IACV;IACA,OAAOW,MAAMZ,MAAM,GAAG1E,8BAClBsF,MAAMhB,KAAK,CAAC,GAAGtE,+BACfsF;AACN;AAEA,0FAA0F,GAC1F,OAAO,SAASM,+BACd1B,SAAiC;IAEjC,IAAI,CAACA,WAAW,OAAO,CAAC;IACxB,OAAO;QACL2B,WAAW3B,UAAU4B,OAAO,CAAC/C,GAAG,CAAC,CAACgD,SAAWA,OAAOC,EAAE;QACtDC,cAAc/B,UAAUgC,UAAU,CAACnD,GAAG,CAAC,CAACoD,YAAcA,UAAUH,EAAE;QAClEI,gBAAgBhC,OAAOC,WAAW,CAChCH,UAAUgC,UAAU,CAACnD,GAAG,CAAC,CAACoD,YAAc;gBAACA,UAAUH,EAAE;gBAAEG,UAAUE,KAAK;aAAC;QAEzEC,SAASpC,UAAUqC,KAAK,CAACxD,GAAG,CAAC,CAACyD,OAASA,KAAKR,EAAE;QAC9CS,YAAYvC,UAAUwC,QAAQ,CAAC3D,GAAG,CAAC,CAAC4D,UAAYA,QAAQX,EAAE;IAC5D;AACF;AAWA;;;;;CAKC,GACD,OAAO,SAASY,kBAAkBC,OAAkB;IAClD,OAAOtF,kBAAkB,CAACsF,QAAQ;AACpC;AAEA;;;;;;;;;;CAUC,GACD,OAAO,SAASC,uBACd5C,SAA6C,EAC7C6C,UAAmC,CAAC,CAAC;QAEXA,uBAcFA;IAdxB,MAAMC,eAAe;YAAKD,wBAAAA,QAAQC,YAAY,YAApBD,wBAAwB,EAAE;KAAE;IACtD,MAAME,UAA2BF,QAAQF,OAAO,GAC5C;QAAC;YAAE/D,MAAM8D,kBAAkBG,QAAQF,OAAO;YAAGjD,iBAAiB;QAAK;KAAE,GACrE,EAAE;IACN,MAAMsD,OAAOF,aAAatC,MAAM,GAAG;IACnC,IACE,CAACuC,QAAQvC,MAAM,IACfwC,QAAQ,KACR,CAACF,YAAY,CAACE,KAAK,CAACC,QAAQ,IAC5B,CAACH,aAAaI,IAAI,CAAC,CAAC9B,QAAUA,MAAM1B,eAAe,GACnD;QACAoD,YAAY,CAACE,KAAK,GAAG,aAAKF,YAAY,CAACE,KAAK;YAAEtD,iBAAiB;;IACjE;IACA,OAAO;QACLE,uBAAsBiD,iBAAAA,QAAQ1D,KAAK,YAAb0D,iBAAiB;WACpCC;WACAC;WACC/C,cAAcmD,YACd,EAAE,GACF;YAAC;gBAAEvE,MAAMmB,qBAAqBC;gBAAYiD,UAAU;YAAc;SAAE;KACzE;AACH;AAOA;;;;;CAKC,GACD,OAAO,MAAMG,2BAA6D;IACxEC,MAAMjH,gBAAgB,CAAC,WAAW,CAACkH,SAAS;IAC5CC,MAAM;IACNC,UAAU;IACVvB,WAAW;IACXwB,QAAQ;IACRnB,MAAM;IACNoB,OAAO;AACT,EAAC;AAED,OAAO,MAAMC,kCAAkC,KAAK;AAEpD,0DAA0D,GAC1D,SAAS1G,0BAA0B,GAAE;AAErC,qDAAqD,GACrD,OAAO,MAAM2G,+BAA+B,KAAK;AAEjD,OAAO,SAASC,eAAehG,IAAY;IACzC,OAAO,AAACV,gBAAsCoC,QAAQ,CAAC1B;AACzD;AA4BA,SAASiG,SAAS9C,KAAc;IAC9B,OAAO,OAAOA,UAAU,YAAYA,UAAU,QAAQ,CAAC+C,MAAMC,OAAO,CAAChD;AACvE;AAEA;;;;CAIC,GACD,OAAO,SAASiD,mBAAmBpG,IAAkB;IACnD,OAAO;QACLqG,MAAM,CAAC,OAAO,EAAErG,MAAM;QACtBsG,aAAa,CAAC,WAAW,EAAEtG,KAAK,sBAAsB,CAAC;QACvDuG,QAAQ;QACRC,aAAa;YACXC,MAAM;YACNC,sBAAsB;YACtBC,UAAU;gBAAC;aAAO;YAClBC,YAAY;gBACVC,MAAM;oBACJJ,MAAM;oBACNH,aACE;gBACJ;YACF;QACF;IACF;AACF;AAEA,8FAA8F,GAC9F,OAAO,SAASQ,aAAaC,MAA+B;IAC1D,MAAMF,OAAOE,MAAM,CAAC,OAAO;IAC3B,IAAI,OAAOF,SAAS,UAAU;QAC5B,IAAI;YACF,OAAOG,KAAKC,KAAK,CAACJ;QACpB,EAAE,eAAM;YACN,OAAOA;QACT;IACF;IACA,OAAOZ,SAASY,QAAQA,OAAOE;AACjC;AAEA;;;CAGC,GACD,SAASG,SAASC,MAAoB,EAAEC,QAAgB;QAIvC;IAHf,MAAMC,OAAOF,OAAOG,OAAO,CAACC,IAAI,CAAC,CAACC,MAAQA,IAAInB,IAAI,KAAKe;IACvD,IAAIC,MAAM,OAAOA,KAAKI,KAAK;IAC3B,MAAM1G,OAAOoG,OAAOpG,IAAI,CAAC2G,IAAI;IAC7B,MAAMC,UAAS,QAAA,+BAA+BC,IAAI,CAAC7G,0BAApC,KAA2C,CAAC,EAAE;IAC7D,KAAK,MAAM8G,aAAa;QAAC9G;QAAM4G;KAAO,CAAE;QACtC,IAAI,CAACE,WAAW;QAChB,IAAI;YACF,MAAMC,SAASd,KAAKC,KAAK,CAACY;YAC1B,IAAI5B,SAAS6B,SAAS,OAAOA;QAC/B,EAAE,eAAM;QACN,8CAA8C;QAChD;IACF;IACA,OAAO;AACT;AAEA,+DAA+D,GAC/D,SAASC,OAAO9E,OAAiC;IAC/C,MAAM+E,MAA+B,CAAC;IACtC,IAAIC,OAAO;IACX,KAAK,MAAM,CAACC,KAAK/E,MAAM,IAAIF,QAAS;QAClC,MAAMI,OAAO2D,KAAKmB,SAAS,CAAChF,gBAAAA,QAAS,MAAMR,MAAM,GAAGuF,IAAIvF,MAAM,GAAG;QACjE,IAAIsF,OAAO5E,OAAO0C,8BAA8B;QAChDiC,GAAG,CAACE,IAAI,GAAG/E;QACX8E,QAAQ5E;IACV;IACA,OAAOhB,OAAO+F,IAAI,CAACJ,KAAKrF,MAAM,GAAGqF,MAAM1C;AACzC;AAEA,0DAA0D,GAC1D,SAAS+C,YAAYC,IAAa,EAAEpF,IAAY;QAE3BA;IADnB,IAAIC,QAAiBmF;IACrB,KAAK,MAAMC,SAAQrF,cAAAA,KAAKsF,KAAK,CAAC,wBAAXtF,cAA2B,EAAE,CAAE;QAChD,IAAIgD,MAAMC,OAAO,CAAChD,QAAQA,QAAQA,KAAK,CAACsF,OAAOF,MAAM;aAChD,IAAItC,SAAS9C,QAAQA,QAAQA,KAAK,CAACoF,KAAK;aACxC,OAAOjD;IACd;IACA,OAAOnC;AACT;AAEA;;;;CAIC,GACD,OAAO,SAASuF,oBACd1I,IAAkB,EAClB2I,UAAiC,CAAC,CAAC,EACnCC,aAAwC,EAAE;IAE1C,OAAO,CAAC7B;YAwB+C8B;QAvBrD,MAAMpB,QAAQX,aAAaC;QAC3B,MAAM+B,SAAS/J,uBAAuB0I,OAAOzH,MAAM2I,SAASC;QAC5D,IAAI,CAACE,OAAOjC,IAAI,IAAI,CAACiC,OAAOC,KAAK,EAAE;YACjC,OAAO;gBAAE5F,OAAO;gBAAM6F,YAAYF,OAAOE,UAAU;YAAC;QACtD;QACA,MAAM,EAAEC,SAAS,EAAE,GAAGH,OAAOjC,IAAI;QACjC,MAAMmC,aAAaF,OAAOE,UAAU,CAAChI,GAAG,CAAC,CAAC6H,YACxCA,UAAUK,OAAO,GACb,aAAKL;gBAAWK,SAASL,UAAUK,OAAO,CAAClI,GAAG,CAAC,CAACiD;wBAAOgF;4BAAAA,gBAAAA,SAAS,CAAChF,GAAG,YAAbgF,gBAAiBhF;;iBACxE4E;QAEN,MAAMM,WAAWlD,SAASwB,UAAUxB,SAASwB,KAAK,CAAC,QAAQ,IAAIA,KAAK,CAAC,QAAQ,GAAG,CAAC;QACjF,MAAM2B,SAAmC,EAAE;QAC3C,MAAMC,OAAO,IAAI3G;QACjB,MAAM4G,QAAQ,CAACrF;YACb,MAAMsF,OAAOJ,QAAQ,CAAClF,GAAG;YACzB,IAAIoF,KAAK/F,GAAG,CAACW,OAAO,CAACgC,SAASsD,OAAO;YACrCF,KAAKzF,GAAG,CAACK;YACTmF,OAAO7I,IAAI,CAAC;gBAAC0D;gBAAIsF;aAAK;YACtB,KAAK,MAAMC,SAAStD,MAAMC,OAAO,CAACoD,IAAI,CAAC,QAAQ,IAAIA,IAAI,CAAC,QAAQ,GAAG,EAAE,CAAE;gBACrE,IAAI,OAAOC,UAAU,UAAUF,MAAME;YACvC;QACF;QACA,KAAK,MAAMX,aAAaG,WAAY,KAAK,MAAM/E,OAAM4E,qBAAAA,UAAUK,OAAO,YAAjBL,qBAAqB,EAAE,CAAES,MAAMrF;QACpF,OAAO;YACLd,OAAO;gBACLsG,QAAQX,OAAOjC,IAAI,CAAC4C,MAAM;gBAC1BtJ,OAAO2I,OAAOjC,IAAI,CAAC1G,KAAK;gBACxBuJ,SAASZ,OAAOjC,IAAI,CAAC6C,OAAO;gBAC5BT;gBACAF,OAAOD,OAAOC,KAAK;gBACnBY,MAAMb,OAAOa,IAAI;YACnB;YACAX;YACAY,WAAW7B,OAAOqB;QACpB;IACF;AACF;AAEA;;;;CAIC,GACD,OAAO,SAASS,oBACd1H,SAAiC,EACjC2H,UAAyB,IAAI,EAC7BC,eAA0C,IAAI;IAE9C,OAAO,CAAChD;QACN,MAAMiD,UAAUnL,oBAAoBkI;QACpC,MAAMe,SAASjK,iBAAiBkJ;QAChC,IAAIe,OAAOmC,EAAE,KAAK,OAAO;YACvB,OAAO;gBACL9G,OAAO;gBACP6F,YAAY;oBACV;wBACEvH,MAAM;wBACNyI,MAAM;wBACNC,SAAS;wBACTC,QAAQtC,OAAOuC,KAAK;oBACtB;uBACGL;iBACJ;YACH;QACF;QACA,MAAMhB,aAAa;eACdgB;eACAlL,oBAAoBgJ,OAAOtC,IAAI,EAAErD,WAAW2H,SAASC;SACzD;QACD,MAAMO,QAAQ;eAAI,IAAI5H,IAAIsG,WAAWuB,OAAO,CAAC,CAAC1B;oBAAcA;wBAAAA,mBAAAA,UAAUyB,KAAK,YAAfzB,mBAAmB,EAAE;;SAAG;QACpF,OAAO;YACL1F,OAAO2E,OAAOtC,IAAI;YAClBwD;YACAY,WAAW7B,OAAOuC,MAAMtJ,GAAG,CAAC,CAACkC,OAAS;oBAACA;oBAAMmF,YAAYP,OAAOtC,IAAI,EAAEtC;iBAAM;QAC9E;IACF;AACF;AAEA,4EAA4E;AAE5E,sFAAsF,GACtF,OAAO,MAAMsH,yBAAyB,iBAAgB;AAEtD;;;;;CAKC,GACD,SAASlM,kBAAkB,GAAE;AAiB7B;;;;;CAKC,GACD,SAASmM,aAAazK,IAAY,EAAE0K,MAAsC;;IACxE,MAAMC,eAAOD,0BAAAA,OAAQC,IAAI,mBAAK3K,SAAS,UAAUgG,eAAehG,QAAQA,OAAO;IAC/E,OAAO;QACLyB,MAAM;QACNyI,MAAMM;QACNL,SAAS,CAAC,KAAK,EAAEQ,KAAK,uEAAuE,CAAC;QAC9FP,MAAM,WAAEM,0BAAAA,OAAQE,OAAO,oBAAI,CAAC,gBAAgB,EAAE5K,KAAK,CAAC,CAAC;IACvD;AACF;AAEA,SAAS6K,iBAAiBzD,QAAgB;IACxC,OAAO;QACL3F,MAAM;QACNyI,MAAM;QACNC,SAAS,CAAC,gCAAgC,EAAE/C,SAAS,CAAC,CAAC;IACzD;AACF;AAEA;;;;;CAKC,GACD,OAAO,SAAS0D,eACd9K,IAAY,EACZoH,QAAgB,EAChB4B,UAA0C,EAC1CY,SAAmC;IAEnC,MAAMc,SAAS1B,WAAWzB,IAAI,CAAC,CAACsB,YAAcA,UAAUqB,IAAI,KAAKM;IACjE,MAAMO,SAASL,SAAS1B,WAAWxH,MAAM,CAAC,CAACqH,YAAcA,cAAc6B,UAAU1B;IACjF,MAAM5G,QAAQsI,SACV;QACE,CAAC,KAAK,EAAE1K,KAAK,6FAA6F,CAAC;WACvG0K,OAAON,MAAM,GAAG;YAACM,OAAON,MAAM;SAAC,GAAG,EAAE;WACpCW,OAAOpI,MAAM,GAAG;YAAC;SAAuC,GAAG,EAAE;KAClE,GACD;QAAC,CAAC,KAAK,EAAE3C,KAAK,sDAAsD,CAAC;KAAC;IAC1E,KAAK,MAAM6I,aAAakC,OAAQ;YAChBlC,oBAEVA;QAFJ,MAAMmC,QAAQnC,EAAAA,qBAAAA,UAAUK,OAAO,qBAAjBL,mBAAmBlG,MAAM,IACnC,CAAC,QAAQ,EAAEkG,UAAUK,OAAO,CAACzI,IAAI,CAAC,MAAM,CAAC,CAAC,GAC1CoI,EAAAA,mBAAAA,UAAUyB,KAAK,qBAAfzB,iBAAiBlG,MAAM,IACrB,CAAC,KAAK,EAAEkG,UAAUyB,KAAK,CAAC7J,IAAI,CAAC,MAAM,CAAC,CAAC,GACrC;QACN,MAAM2J,SAASvB,UAAUuB,MAAM,GAAG,CAAC,CAAC,EAAEvB,UAAUuB,MAAM,EAAE,GAAG;QAC3DhI,MAAM7B,IAAI,CAAC,CAAC,EAAE,EAAE3B,wBAAwBiK,aAAauB,SAASY,OAAO;IACvE;IACA,IAAIpB,aAAavH,OAAO+F,IAAI,CAACwB,WAAWjH,MAAM,EAAE;QAC9CP,MAAM7B,IAAI,CAAC,IAAI,0CAA0CyG,KAAKmB,SAAS,CAACyB;IAC1E;IACAxH,MAAM7B,IAAI,CACR,IACAmK,SACI,CAAC,kBAAkB,EAAEtD,SAAS,YAAY,EAAEpH,KAAK,uCAAuC,EACtF+K,OAAOpI,MAAM,GAAG,sDAAsD,GACvE,CAAC,CAAC,GACH,CAAC,kBAAkB,EAAEyE,SAAS,YAAY,EAAEpH,KAAK,8CAA8C,CAAC;IAEtG,OAAOoC,MAAM3B,IAAI,CAAC;AACpB;AAEA;;;;CAIC,GACD,OAAO,SAASwK,4BAA4BjC,UAA0C;QAGtEA;IAFd,MAAM0B,SAAS1B,WAAWzB,IAAI,CAAC,CAACsB,YAAcA,UAAUqB,IAAI,KAAKM;IACjE,IAAIE,QAAQ,OAAOA,OAAOP,OAAO;IACjC,MAAMe,SAAQlC,mBAAAA,WAAWzB,IAAI,CAAC,CAACsB,YAAcA,UAAUpH,IAAI,KAAK,iBAAlDuH,mBAA2DA,UAAU,CAAC,EAAE;IACtF,IAAI,CAACkC,OAAO,OAAO;IACnB,MAAMC,SAASnC,WAAWrG,MAAM,GAAG;IACnC,OAAO,CAAC,mDAAmD,EAAE/D,wBAAwBsM,SACnFC,SAAS,IAAI,CAAC,EAAE,EAAEA,OAAO,MAAM,EAAEA,WAAW,IAAI,aAAa,aAAa,cAAc,CAAC,GAAG,IAC5F;AACJ;AAwHA,SAASC,cACPC,KAA2B,EAC3BC,MAA0F;IAE1F,IAAI,CAACA,QAAQ,OAAOD;IACpB,OAAO,CAACtE;QACN,MAAMI,SAASkE,MAAMtE;QACrB,OAAOI,OAAOhE,KAAK,KAAK,OACpBgE,SACA,aAAKA;YAAQ6B,YAAY;mBAAI7B,OAAO6B,UAAU;mBAAKsC,OAAOnE,OAAOhE,KAAK,EAAE4D;aAAQ;;IACtF;AACF;AAEA,oEAAoE,GACpE,SAASwE,eAAkBF,KAA2B;IACpD,OAAO,CAACtE;QACN,MAAMI,SAASkE,MAAMtE;QACrB,OAAO,aAAKI;YAAQ6B,YAAY;mBAAInK,oBAAoBkI;mBAAYI,OAAO6B,UAAU;aAAC;;IACxF;AACF;AAEA;;;;CAIC,GACD,OAAO,SAASwC,sBACdrJ,SAAiC,EACjCsJ,QAA+B,CAAC,CAAC;IAEjC,OAAO;QACLC,OAAOvJ,CAAAA,6BAAAA,UAAWW,KAAK,IACnB;YAAEE,QAAQb,UAAUW,KAAK,CAACE,MAAM;YAAEI,OAAOjB,UAAUW,KAAK,CAACM,KAAK;QAAC,IAC/D;OACDS,+BAA+B1B;QAClCwJ,eAAezN,gBAAgBiE;OAC5BsJ;AAEP;AAEA,SAASG,SAAS5L,IAAY,EAAEyH,KAAa;IAC3C,IAAIzH,SAAS,QAAQ;YAGmBwF,eAAsBA;QAF5D,MAAMA,OAAOiC;QACb,OAAO2D,cACLvB,oBAAoBrE,KAAKrD,SAAS,GAAEqD,gBAAAA,KAAKsE,OAAO,YAAZtE,gBAAgB,OAAMA,qBAAAA,KAAKuE,YAAY,YAAjBvE,qBAAqB,OAC/EA,KAAK8F,MAAM;IAEf;IACA,IAAItF,eAAehG,OAAO;QACxB,MAAM6G,OAAOY;QACb,OAAO2D,cACL1C,oBAAoB1I,MAAMwL,sBAAsB3E,KAAK1E,SAAS,EAAE0E,KAAK8B,OAAO,GAAG9B,KAAK+B,UAAU,GAC9F/B,KAAKyE,MAAM;IAEf;IACA,MAAMO,SAAS,AAACpE,MAAoD4D,KAAK;IACzE,IAAI,CAACQ,QAAQ;QACX,MAAM,IAAIC,MAAM,CAAC,wDAAwD,EAAE9L,KAAK,aAAa,CAAC;IAChG;IACA,OAAOuL,eAAeM;AACxB;AAwBA,OAAO,eAAeE,uBACpB/L,IAAY,EACZyH,KAAwF;QAItFA,cAUAA,MAAAA,kBASQA;IArBV,MAAM4D,QAAQO,SAAS5L,MAAMyH;IAC7B,MAAMuE,SACJvE,eAAAA,MAAMuE,KAAK,YAAXvE,eAAgBA,MAAMwE,IAAI,GAAGzN,eAAeiJ,MAAMwE,IAAI,EAAExE,MAAMyE,QAAQ,IAAI5G;IAC5E,IAAI,CAAC0G,OAAO;QACV,MAAM,IAAIF,MAAM,CAAC,0BAA0B,EAAE9L,KAAK,qCAAqC,CAAC;IAC1F;IACA,MAAMmM,SAASpH,uBAAuB0C,MAAMtF,SAAS,EAAE;QACrD8C,cAAcwC,MAAMxC,YAAY;QAChC3D,OAAOW,mBAAmBjC;OACtBgG,eAAehG,QAAQ;QAAE8E,SAASvF,iBAAiB,CAACS,KAAK;IAAC,IAAI,CAAC;IAErE,MAAMyF,aACJgC,QAAAA,mBAAAA,MAAMhC,SAAS,YAAfgC,mBACAlC,wBAAwB,CAACvF,KAAyB,YADlDyH,OAEA3B;IACF,MAAMsG,QAA2B;QAC/BC,UAAU;QACVC,OAAO;YAAEC,aAAa;YAAGC,cAAc;YAAGC,iBAAiB;YAAGC,kBAAkB;QAAE;QAClFC,YAAY;QACZX;QACAY,YAAY;QACZC,MAAM,GAAEpF,gBAAAA,MAAMoF,MAAM,YAAZpF,gBAAgB;IAC1B;IACA,wEAAwE;IACxE,yEAAyE;IACzE,yEAAyE;IACzE,4EAA4E;IAC5E,2EAA2E;IAC3E,2EAA2E;IAC3E,0BAA0B;IAC1B,MAAMqF,SAASrF,MAAMtF,SAAS,KAAKmD,YAAY,OAAOpG;IACtD,MAAM6N,QAAQD,SAAS;QAACrF,MAAMuF,IAAI;QAAEF;KAAO,GAAG;QAACrF,MAAMuF,IAAI;KAAC;IAC1D,IAAIC,WAAwB;WAAIxF,MAAMwF,QAAQ;KAAC;IAC/C,IAAIjE,aAAoC,EAAE;IAC1C,wEAAwE;IACxE,IAAIkE,UAA0C;IAC9C,0EAA0E;IAC1E,IAAIC,YAA2B;IAC/B,yEAAyE;IACzE,mCAAmC;IACnC,IAAIC,UAAU;IACd,IAAIC,UAAU;IACd,yEAAyE;IACzE,4EAA4E;IAC5E,4EAA4E;IAC5E,0EAA0E;IAC1E,qEAAqE;IACrE,2EAA2E;IAC3E,4EAA4E;IAC5E,0EAA0E;IAC1E,+DAA+D;IAC/D,MAAMC,YAAYlO,6BAA6BqG;IAC/C,MAAO2H,UAAUhO,2BAA4B;YA2BpCgN;QA1BP,MAAMmB,QAAQ9E,OAAO2D,MAAME,KAAK,CAACE,YAAY;QAC7C,MAAMgB,OAAOF,YAAa7E,CAAAA,OAAOgF,QAAQ,CAACF,SAASA,QAAQ,CAAA;QAC3D,IAAIC,QAAQ,GAAG;YACb,IAAI,CAACxE,WAAWrG,MAAM,EAAEqG,aAAa;gBAACyB,aAAazK,MAAMyH,MAAMiD,MAAM;aAAE;YACvE;QACF;QACA0B,MAAMC,QAAQ,IAAI;QAClB,MAAMlF,SAAS,MAAMzI,aAAa;YAChCsN;YACAG;YACAc;YACAF;YACAtH,WAAW5F,KAAK6N,GAAG,CAACjI,WAAW+H;YAC/BG,QAAQ;WACJlG,MAAMmG,QAAQ,GAAG;YAAEA,UAAUnG,MAAMmG,QAAQ;QAAC,IAAI,CAAC,GACjDnG,MAAMoF,MAAM,GAAG;YAAEA,QAAQpF,MAAMoF,MAAM;QAAC,IAAI,CAAC,GAC3CpF,MAAMoG,MAAM,GAAG;YAAEA,QAAQpG,MAAMoG,MAAM;QAAC,IAAI,CAAC,GAC3CpG,MAAMyE,QAAQ,GAAG;YAAEA,UAAUzE,MAAMyE,QAAQ;QAAC,IAAI,CAAC,GACjDzE,MAAMqG,QAAQ,GAAG;YAAEA,UAAUrG,MAAMqG,QAAQ;QAAC,IAAI,CAAC;QAEvD,oEAAoE;QACpE,0EAA0E;QAC1E,uEAAuE;QACvE,MAAMF,WACJzG,OAAOmF,KAAK,CAACyB,cAAc,KAAKzI,YAC5B8G,MAAME,KAAK,CAACyB,cAAc,GAC1B,EAAC3B,8BAAAA,MAAME,KAAK,CAACyB,cAAc,YAA1B3B,8BAA8B,KAAKjF,OAAOmF,KAAK,CAACyB,cAAc;QACrE3B,MAAME,KAAK,GAAG;YACZC,aAAaH,MAAME,KAAK,CAACC,WAAW,GAAGpF,OAAOmF,KAAK,CAACC,WAAW;YAC/DC,cAAcJ,MAAME,KAAK,CAACE,YAAY,GAAGrF,OAAOmF,KAAK,CAACE,YAAY;YAClEC,iBAAiBL,MAAME,KAAK,CAACG,eAAe,GAAGtF,OAAOmF,KAAK,CAACG,eAAe;YAC3EC,kBAAkBN,MAAME,KAAK,CAACI,gBAAgB,GAAGvF,OAAOmF,KAAK,CAACI,gBAAgB;WAC1EkB,aAAatI,YAAY,CAAC,IAAI;YAAEyI,gBAAgBH;QAAS;QAE/DxB,MAAMO,UAAU,GAAG9M,KAAKC,KAAK,CAAC,AAACsM,CAAAA,MAAMO,UAAU,GAAGxF,OAAOwF,UAAU,AAAD,IAAK,WAAa;QACpFP,MAAMQ,UAAU,GAAGzF,OAAOyF,UAAU;QACpC,IAAIzF,OAAOnH,IAAI,KAAK,WAAW,OAAO,aAAKoM;YAAO4B,QAAQ;;QAE1D,MAAMjH,SAASG,SAASC,QAAQM,MAAMuF,IAAI,CAAC3G,IAAI;QAC/C,yEAAyE;QACzE,uEAAuE;QACvE,wEAAwE;QACxE,uEAAuE;QACvE,wBAAwB;QACxB,MAAM4H,QAAQlH,SAASzB,YAAY6B,OAAOG,OAAO,CAACC,IAAI,CAAC,CAACC,MAAQA,IAAInB,IAAI,MAAKyG,0BAAAA,OAAQzG,IAAI;QACzF,IAAI4H,SAASZ,UAAUrO,gCAAgC;gBAWbyI;YAVxC4F,WAAW;YACX,MAAMlI,OACJkI,YAAYrO,iCACR,CAAC,0CAA0C,EAAEyI,MAAMuF,IAAI,CAAC3G,IAAI,CAAC,KAAK,CAAC,GACnE;YACN4G,WAAW;mBACNA;gBACH;oBAAEiB,MAAM;oBAAaC,SAAS,CAAC,OAAO,EAAElP,8BAA8B,CAAC,CAAC;gBAAC;gBACzE;oBACEiP,MAAM;oBACNC,SAAS,GAAGhP,yBAAwBsI,mBAAAA,MAAMtF,SAAS,YAAfsF,mBAAmB,MAAMwG,MAAMxG,KAAK,IAAItC,MAAM;gBACpF;aACD;YACD;QACF;QACAiI,WAAW;QACX,yEAAyE;QACzE,uEAAuE;QACvE,yEAAyE;QACzE,qEAAqE;QACrE,oEAAoE;QACpE,qEAAqE;QACrE,uEAAuE;QACvE,4CAA4C;QAC5C,EAAE;QACF,0EAA0E;QAC1E,yEAAyE;QACzE,wEAAwE;QACxE,qEAAqE;QACrE,oEAAoE;QACpE,0EAA0E;QAC1E,wEAAwE;QACxE,yEAAyE;QACzE,iCAAiC;QACjC,MAAM1C,SAASpM,mBAAmB6I,OAAOyF,UAAU;QACnD,MAAMwB,UAAUrH,SAASsE,MAAMtE,UAAU;QACzC,IAAI,CAAC2D,UAAU0D,WAAWA,QAAQjL,KAAK,KAAK,QAAQiL,QAAQpF,UAAU,CAACrG,MAAM,KAAK,GAAG;YACnF,OAAO,aAAKyJ;gBAAO4B,QAAQ;gBAAM7K,OAAOiL,QAAQjL,KAAK;;QACvD;QACA,MAAMkL,iBAAQD,2BAAAA,QAASpF,UAAU,oBAAI,EAAE;QACvCkE,UAAUnG;QACV,IAAI2D,QAAQ;gBACEvD;YAAZgG,aAAYhG,oBAAAA,OAAOgG,SAAS,YAAhBhG,oBAAoB;YAChC,sEAAsE;YACtE,sEAAsE;YACtE,kEAAkE;YAClE,kEAAkE;YAClE,wEAAwE;YACxE,yEAAyE;YACzE,qEAAqE;YACrE,wEAAwE;YACxE,wEAAwE;YACxE,qEAAqE;YACrE,+BAA+B;YAC/BmH,QAAQC,IAAI,CAAC,oCAAoC;gBAC/CvO;gBACAgM;gBACAvG;eACGpH,gBAAgB;gBAAEiO,OAAOF,MAAME,KAAK;gBAAExE,QAAQf;gBAAQoG;YAAU;QAEvE;QACAnE,aAAa0B,SACT;YAACD,aAAazK,MAAMyH,MAAMiD,MAAM;eAAM2D,MAAM7M,MAAM,CAAC,CAACqH,YAAcA,UAAUpH,IAAI,KAAK;SAAM,GAC3F4M,MAAM1L,MAAM,GACV0L,QACA;YAACxD,iBAAiBpD,MAAMuF,IAAI,CAAC3G,IAAI;SAAE;QACzC,MAAMuD,YAAYc,UAAU1B,WAAWrG,MAAM,KAAK,IAAI2C,YAAY8I,2BAAAA,QAASxE,SAAS;QACpF,0EAA0E;QAC1E,sEAAsE;QACtEqD,WAAW;eACNA;YACH;gBAAEiB,MAAM;gBAAaC,SAAS,CAAC,cAAc,EAAEnO,KAAK,MAAM,EAAEyH,MAAMuF,IAAI,CAAC3G,IAAI,CAAC,CAAC,CAAC;YAAC;YAC/E;gBACE6H,MAAM;gBACNC,SAASrD,eAAe9K,MAAMyH,MAAMuF,IAAI,CAAC3G,IAAI,EAAE2C,YAAYY;YAC7D;SACD;IACH;IACA,OAAO,aACFwC;QACH4B,QAAQ;QACRhF;QACAmB,SAASc,4BAA4BjC;QACrCjC,QAAQmG;QACRC;;AAEJ;AAUA;;;;;;;;;;;;;CAaC,GACD,OAAO,SAASqB,2BACdxO,IAAY,EACZyH,KAAuE;IAEvE,IAAIzH,SAAS,UAAUgG,eAAehG,OAAO;QAC3C,MAAM,IAAI8L,MACR,CAAC,8BAA8B,EAAE9L,KAAK,8DAA8D,CAAC;IAEzG;IACA,MAAM,EAAEmD,KAAK,EAAE6F,UAAU,EAAE,GAAGuC,eAAe9D,MAAM4D,KAAK,EAAE5D,MAAMV,MAAM;IACtE,IAAI5D,UAAU,QAAQ6F,WAAW3D,IAAI,CAAC,CAACwD,YAAcA,UAAUpH,IAAI,KAAK,OAAO;QAC7E,OAAO;YAAEuM,QAAQ;YAAehF;YAAYmB,SAASc,4BAA4BjC;QAAY;IAC/F;IACA,OAAO;QAAEgF,QAAQ;QAAM7K;QAAO6F;IAAW;AAC3C"}

package/src/lib/runtime/ai-eval-live.d.ts

@@ -0,0 +1,321 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import type { AiJob } from '../model/ai-jobs.types';
+import { type AiProductsProposal } from '../model/ai-products';
+import type { AiImagePart, AiProvider, AiSystemBlock, AiTool } from '../providers/contract';
+import { type AiCustomGenerationInput } from './ai-doctrine';
+import { type AiEvalCandidate, type AiEvalCase, type AiEvalKind, type AiEvalRubric } from './ai-eval';
+/**
+ * THE EVAL HARNESS, LIVE (AGL-2937): recording new answers from the model.
+ *
+ * Offline scoring reads fixtures and costs nothing. A live run asks the
+ * provider for real answers to the golden briefs, grades each with a
+ * stronger model, and hands back recordings the offline harness then scores
+ * like any fixture. It spends real money, so it runs only when
+ * `AI_EVAL_LIVE=1` names it, and it is never part of CI or a deployment.
+ *
+ * A recording is only worth having if it measures what production sends. So
+ * each recorder answers a brief through the door that answers that kind in
+ * production — the plan step's runner, the text step's runner, the products
+ * step's runner, the theme and workflow steps' own generation calls — with
+ * the case's site handed in where the door would read one. Nothing here
+ * writes a prompt of its own for a kind.
+ *
+ * A kind with no recorder is skipped before any request, saying where
+ * production answers it (`AI_EVAL_UNRECORDED_DOORS`): a request route no job
+ * runs (the copy assistant's section, element and blog modes, the chat door),
+ * or a job step no recorder drives yet. A planned kind's document records the
+ * plan alone until its generator is recorded. A door that gains a recorder
+ * registers it with `registerAiEvalRecorder`.
+ *
+ * An automation brief is recorded through the workflow step's own generation
+ * call (AGL-3074) — a draft from the workspace's reach and the site's records,
+ * an explanation from the outline of the saved automation — because the
+ * step's runner keeps the tool's input nowhere: it writes the draft it makes
+ * of it, or the text it reads out of it, and the harness scores the input. A
+ * product brief is recorded through the products step's runner, against the
+ * case's store in memory, its photo read from the case's fixtures through the
+ * step's own resize-and-strip path, and its answer read back off the proposal
+ * the runner makes.
+ *
+ * A page brief is recorded END TO END (AGL-3030): the plan step's runner,
+ * the plan confirmed as a member confirms it, and every pass of the page
+ * step's runner against a site kept in memory — the layout, forms and
+ * components its plan creates built first by their own steps (AGL-3031) —
+ * each exchange's spend kept as the machine meters it. That is what proves
+ * what one page costs, on the workspace the case describes. Beside the page's
+ * tree it keeps the draft's screen — its address, its listing and the layout
+ * it renders inside — which the page's grader is shown with the plan
+ * (AGL-3073).
+ */
+/** The environment variable a live run must be named by. */
+export declare const AI_EVAL_LIVE_ENV = "AI_EVAL_LIVE";
+export declare const AI_EVAL_LIVE_REFUSAL = "A live eval run asks the AI provider for real answers and spends real money. It runs only when AI_EVAL_LIVE=1 is set, from a machine that holds a provider key, and never in CI or on a deployment.";
+export declare class AiEvalLiveRefusedError extends Error {
+    constructor();
+}
+/** Whether the environment names a live run. */
+export declare function aiEvalLiveAllowed(env: Record<string, string | undefined>): boolean;
+/**
+ * The variable a live run names the briefs it records by: case ids, comma
+ * separated. Unset records every brief a recorder covers.
+ */
+export declare const AI_EVAL_CASES_ENV = "AI_EVAL_CASES";
+/** The briefs a run records: the ones `AI_EVAL_CASES` names, else every one. */
+export declare function aiEvalCasesNamed<T extends {
+    id: string;
+}>(cases: readonly T[], env: Record<string, string | undefined>): T[];
+export interface AiEvalLiveOptions {
+    env: Record<string, string | undefined>;
+    /** A provider chosen ahead of the registered ones; specs use it. */
+    provider?: AiProvider;
+    /** The model every recorder asks, in place of the routing table's answer. */
+    model?: string;
+    /** The grader's model; the provider's deepest tier when absent. */
+    graderModel?: string;
+    now?: Date;
+    /**
+     * Reads a file a case's `media` names, by its path under
+     * `tools/ai-eval/fixtures` (AGL-3074). A run that records a case naming
+     * media is refused without one, before any request.
+     */
+    readFixture?: (file: string) => Promise<Buffer>;
+}
+/** An answer to one brief, before it is graded. */
+export type AiEvalRecordedAnswer = Omit<AiEvalCandidate, 'rubric'>;
+export type AiEvalRecorder = (evalCase: AiEvalCase, options: AiEvalLiveOptions) => Promise<AiEvalRecordedAnswer>;
+/** Idempotent per kind; last registration wins. */
+export declare function registerAiEvalRecorder(kind: AiEvalKind, recorder: AiEvalRecorder): void;
+export declare function aiEvalRecorderFor(kind: AiEvalKind): AiEvalRecorder | null;
+/**
+ * The workflow step's generation for an automation brief (AGL-3074), from
+ * the case as the step's runner builds it from a site: a draft from what the
+ * workspace can run and the site's forms and datasets; or, for a brief about
+ * a saved action, an explanation from the action's outline, told whether the
+ * records its steps name exist as the runner reads only those, with a failed
+ * run's outline where the case gives one.
+ */
+export declare function aiEvalWorkflowGeneration(evalCase: AiEvalCase, model: string): AiCustomGenerationInput<unknown>;
+/**
+ * A product case's photo, as the products step sends it (AGL-3074): read
+ * through `ai-product-image.ts` from the case's fixtures. `null` for a case
+ * whose product has none, or whose photo cannot be read.
+ */
+export declare function aiEvalCasePhoto(evalCase: AiEvalCase, options: AiEvalLiveOptions): Promise<AiImagePart | null>;
+/**
+ * A products proposal read back as the tool input the harness scores
+ * (AGL-3074): a product's copy as its check kept it, a catalog's products,
+ * and categories with each discount in the tool's own terms — a percentage or
+ * dollars, a minimum order in dollars, and an empty code for a discount that
+ * applies on its own.
+ */
+export declare function aiEvalProductsAnswer(proposal: AiProductsProposal): Record<string, unknown> | null;
+/** Where production answers a kind no recorder covers. */
+export type AiEvalUnrecordedDoor = 
+/** A request route no job runs, by what it is and the module that answers it. */
+{
+    route: string;
+    file: string;
+}
+/** A job step no recorder drives yet, by its job kind and module. */
+ | {
+    step: AiJob['kind'];
+    file: string;
+};
+/**
+ * Every kind no recorder covers, and the door that answers it in production
+ * (AGL-3074), so a skipped brief says why truthfully. Modules are named from
+ * the plugin's `src/lib`.
+ */
+export declare const AI_EVAL_UNRECORDED_DOORS: Readonly<Partial<Record<AiEvalKind, AiEvalUnrecordedDoor>>>;
+/** Why a brief of this kind is skipped: where its door is, and that no recorder drives it. */
+export declare function aiEvalSkipReason(kind: AiEvalKind): string;
+export declare const AI_EVAL_RUBRIC_TOOL: AiTool;
+export declare const AI_EVAL_GRADER_INSTRUCTIONS: readonly AiSystemBlock[];
+/**
+ * What a build plan is, for the grader that grades one (AGL-3022).
+ *
+ * A plan is the proposal a member confirms, not the document the generation
+ * step writes afterwards, and `AI_BUILD_PLAN_TOOL` gives it nowhere to put a
+ * node tree, a heading order, a landmark or a line of body copy. Graded
+ * against a finished page it loses marks for every one of those, on structure
+ * and on copy alike, and the grade then measures the schema rather than the
+ * answer. So the grader is told the shape it is reading, and that the only
+ * words a plan writes are the ones `aiPlanCopy` collects.
+ *
+ * Two facts it cannot read off the schema are stated as well. Only a page or
+ * site job plans screens: the plan step tells a component, layout, template,
+ * form or email job to plan none, so an empty `screens` on one of those is the
+ * answer working, and a grader that does not know it marks the plan down for
+ * doing what it was told. And a search is an element, never a form: a form
+ * collects submissions, and a grader that does not know the platform has
+ * search elements rewards a plan for creating a form to search with.
+ */
+export declare const AI_EVAL_PLAN_GRADER_NOTE: string;
+/**
+ * What the grader of a case with capabilities is told beside them (AGL-3040).
+ *
+ * A case that describes its workspace had its plan told what that workspace
+ * may create, and a workspace that keeps no reusable components or saved
+ * forms builds the only way it can: a list's repeated items drawn in one
+ * section, the form carried by the page. A grader told none of that grades
+ * the doctrine whole, and marks reuse down for exactly the build the workspace
+ * required, as it marked down the first live recording of the Free brief.
+ */
+export declare const AI_EVAL_CAPABILITIES_GRADER_NOTE = "Grade reuse against what this workspace may create, as listed above: never mark an output down for not creating what the workspace may not make.";
+/**
+ * Beside that, where the workspace keeps no reusable components or saved
+ * forms, which the capability lines have already said.
+ */
+export declare const AI_EVAL_INLINE_GRADER_NOTE = "On this workspace, a list's repeated items drawn in one section and a form drawn on the page, as a Form element holding its Form Fields, are the correct build and never a missed reuse.";
+/**
+ * What a section's `uses` can hold on such a workspace (AGL-3143).
+ *
+ * A section's `uses` names what the section PLACES, and the only things it
+ * can name are an inventory id and a `new:<name>` creation. A workspace that
+ * keeps no reusable components or saved forms has neither to name, and the
+ * capability lines above have already refused the job the creations — so
+ * every inline section leaves `uses` empty because it is the only answer it
+ * can give. A grader that does not know it reads the empty list as a section
+ * that places nothing and marks the plan down for being correct, which drags
+ * the floors down for a reason that has nothing to do with the answer.
+ */
+export declare const AI_EVAL_INLINE_USES_GRADER_NOTE = "A section's `uses` names what it places, and can name only an inventory id or a creation. This workspace has neither to place and may create neither, so an empty `uses` on a section drawn inline is the only answer there is: never mark a plan or a section down for it.";
+/**
+ * The workspace a case describes, as its grader reads it: the capability
+ * lines the plan step was sent, narrowed to what the job builds the way the
+ * step narrows them, and the notes on grading against them. `null` for a
+ * case that describes no workspace, whose output is held to the doctrine
+ * whole.
+ */
+export declare function aiEvalGraderCapabilities(evalCase: AiEvalCase): string | null;
+/**
+ * What the grader of a built page is told beside it (AGL-3073).
+ *
+ * A page's tree holds only what the page adds. The site's header, navigation
+ * and footer are its layout's; the one main landmark is placed when the page
+ * is composed (`stampDocumentLandmark`), on the layout's slot where the page
+ * renders, or on the page's root when it renders inside none; and its address
+ * and listing are fields of its screen. A grader shown the tree alone marks a
+ * page down for a layout, a landmark and a listing the page has.
+ */
+export declare const AI_EVAL_PAGE_GRADER_NOTE: string;
+/** The most elements a layout's outline lists; the rest are counted. */
+export declare const AI_EVAL_LAYOUT_OUTLINE_MAX_LINES = 40;
+/**
+ * A layout as its page's grader reads it (AGL-3073): an element a line,
+ * indented by depth, named by the element it renders as and its component,
+ * with its own text quoted short. The main landmark is placed where a
+ * published page places it, by the function that places it there.
+ */
+export declare function aiEvalLayoutOutline(tree: {
+    rootId: string;
+    nodes: Record<string, unknown>;
+}): string;
+/**
+ * The plan a built answer came from, as its grader reads it (AGL-3073): what
+ * it reuses and creates, and each screen's sections in order, with what each
+ * places and how many items it shows. `null` for an answer with no plan.
+ */
+export declare function aiEvalPlanOutline(plan: unknown): string | null;
+/**
+ * A built page's screen and layout, as its grader reads them (AGL-3073). A
+ * recording that kept the draft's screen gives its stored address and listing
+ * and the layout it renders inside, outlined from its tree. One made before
+ * that was kept gives its plan's screen instead, which is what the page step
+ * builds from, and says so.
+ */
+export declare function aiEvalBuiltPage(answer: AiEvalRecordedAnswer): string | null;
+/**
+ * An answer's output as its grader reads it: copy as written, and anything
+ * else as JSON, a tree's nodes without the keys the store keeps for itself
+ * (AGL-3073). Those are about a third of a recorded page, and a grade reads
+ * none of them: a node's id is its key and its parent is the node that lists
+ * it.
+ */
+export declare function aiEvalGraderOutput(output: unknown): string;
+/**
+ * What the grader of an answer written from more than its brief is shown of
+ * the request (AGL-3074): the user turn the kind's step sends, built from the
+ * case by the step's own prompt builder — a product and the categories it may
+ * go in, the categories a store already has, or what an automation draft or
+ * explanation was asked from. A grader that is not shown them grades copy
+ * against a product it never saw, and an explanation against an automation it
+ * never read. `null` for a kind whose request is its brief and its site.
+ */
+export declare function aiEvalGraderRequest(evalCase: AiEvalCase, answer: AiEvalRecordedAnswer): string | null;
+/** What the grader of product copy written with its photo in view is told beside the photo (AGL-3074). */
+export declare const AI_EVAL_PHOTO_GRADER_NOTE = "The product's photo is attached, as the job sent it. Copy may state what the photo plainly shows and is never marked down for it; it is marked down for what neither the photo nor the product's words show.";
+/** What the grader is told when the photo the copy was written with cannot be shown to it. */
+export declare const AI_EVAL_PHOTO_UNSHOWN_GRADER_NOTE = "The copy was written with the product's photo in view, and this grader is not shown it: never mark copy down for a detail only the photo could show.";
+/**
+ * The grader's user turn: the brief, its site, the workspace where the case
+ * describes one, the request beyond the brief, the plan a built answer came
+ * from, the screen and layout a built page was built as, and the answer.
+ * `shown.photo` says the product's photo rides beside this turn.
+ */
+export declare function aiEvalGraderPrompt(evalCase: AiEvalCase, answer: AiEvalRecordedAnswer, shown?: {
+    photo?: boolean;
+}): string;
+/** A grade tool call read as a rubric; `null` when a grade is missing. */
+export declare function readAiEvalGrade(answer: Record<string, unknown>, grader: string): AiEvalRubric | null;
+/** Grade one recorded answer with a stronger model, through the doctrine's loop. */
+export declare function gradeAiEvalCandidate(evalCase: AiEvalCase, answer: AiEvalRecordedAnswer, options: AiEvalLiveOptions): Promise<AiEvalRubric>;
+/** Which half of a case's run threw: asking for the answer, or grading it. */
+export type AiEvalLiveStep = 'record' | 'grade';
+/** A brief whose run threw, as the report keeps it. */
+export interface AiEvalLiveFailure {
+    caseId: string;
+    kind: AiEvalKind;
+    step: AiEvalLiveStep;
+    /** What was thrown, as a sentence. */
+    error: string;
+    /** The provider's request id, when the throw carried one — the vendor log's join key. */
+    requestId: string | null;
+}
+export interface AiEvalLiveReport {
+    recorded: Array<{
+        caseId: string;
+        kind: AiEvalKind;
+        candidate: AiEvalCandidate;
+    }>;
+    skipped: Array<{
+        caseId: string;
+        kind: AiEvalKind;
+        why: string;
+    }>;
+    /** The briefs whose run threw; empty when every brief a recorder covers came back. */
+    failed: AiEvalLiveFailure[];
+}
+/**
+ * Record and grade an answer for every brief a recorder covers. Refused
+ * before anything else unless `AI_EVAL_LIVE=1` names the run, and before any
+ * request when a brief it would record names media the run cannot read.
+ *
+ * ONE BRIEF'S FAILURE IS NOT THE RUN'S (AGL-3143). A run is owner-approved
+ * spend, and a provider that refuses one brief — a tool it will not compile,
+ * a rate limit — used to end the whole run with the answers already paid for
+ * still in memory and never written. Each brief is run on its own instead:
+ * one that throws is kept as a failure naming what was thrown, the vendor's
+ * request id and which half of its run threw, and the briefs behind it are
+ * still recorded. The caller writes what came back and decides what a
+ * non-empty `failed` means for its exit status.
+ *
+ * A brief whose GRADE threw is in both halves: recorded, with its grade
+ * marked missing, and failed, naming what the grader threw.
+ */
+export declare function recordAiEvalLive(cases: readonly AiEvalCase[], options: AiEvalLiveOptions): Promise<AiEvalLiveReport>;