@aglyn/plugins-ai 1.0.0-beta.143

package/src/lib/server/ai-assist.js

@@ -0,0 +1,517 @@
+import { _ as _extends } from "@swc/helpers/_/_extends";
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ import { checkEntitlement } from "@aglyn/aglyn/server";
+import { assistCreditsFromUsd, assistFreeTasteRefusalText, assistOwnControlRefusalText } from "@aglyn/aglyn/app-utils/assist-credits";
+import { resolveEffectivePlan } from "@aglyn/aglyn/app-utils/plan-entitlements";
+import { aiAllotmentRefusalText } from "../model/ai-allotments.js";
+import { resolveAiModelChoice } from "../providers/model-choice.js";
+import { aiUsageMeter } from "../usage/ai-usage-meter.js";
+import { permissionRefusal, checkRateLimit, featureLockdownRefusal, firebaseAdmin, getOrgForUser, lockdownRefusal, memberHasPermissionOnHost, rateLimitHeaders } from "@aglyn/tenant-data-admin";
+import { aiOverageReservationRefusal } from "../billing/ai-overage-gate.js";
+import { recordUserAiRefusal } from "../usage/ai-usage-by-user.js";
+import { estimateAssistCostUsd, publicAssistQuota, recordAssistCost, releaseAssistMessage, reserveAssistMessage } from "../usage/assist-usage.js";
+import { logAiAssistSection } from "../activity/ai-activity.js";
+// By its own entry point rather than the barrel (AGL-2903): this handler's
+// spec replaces the barrel with a closed-world factory, and nothing replaces
+// the entry point, so the spec exercises the real request shape and the real
+// error boundary rather than a stub that agrees with the handler.
+import { AI_ROUTING_TABLE, aiModelForStep } from "../providers/routing.js";
+import { AiUpstreamError, aiProviderReady, runAiRequest } from "../runtime/ai-runtime.js";
+import { assistModeSystemBlocks, assistSectionTool, readAssistSection } from "./ai-assist-prompts.js";
+// By its own entry point for the same reason (AGL-2925): the per-address
+// rung is real in the spec, keyed on whatever address the harness sends.
+import { checkAiClientIpRateLimit } from "../runtime/ai-abuse-guards.js";
+/**
+ * The model each mode is served by, through the routing table — tiered by
+ * what the mode actually asks for (AGL-2486), not one model for all three.
+ *
+ * - **element** → the fast tier (`copy.element`). Rewriting one button label
+ *   or one heading to an instruction is a short, bounded transformation with
+ *   the source text supplied: the least model-shaped work on this route and
+ *   the highest-volume (a user clicking "improve this" runs it repeatedly on
+ *   the same element).
+ * - **blog** → the balanced tier (`copy.blog`). A post body is real long-form
+ *   writing, and the difference between tiers is legible to the reader.
+ * - **section** → the balanced tier (`copy.section`). A constrained-JSON node
+ *   subtree over the published-component allowlist is a structured-generation
+ *   task with a schema the sanitizer will reject if it is got wrong, and a
+ *   rejected generation costs the whole request rather than part of it.
+ *
+ * ⚠️ NO PROMPT CACHING IS LOST BY THE FAST RUNG. Each mode's static text now
+ * carries a breakpoint (`assistModeSystemBlocks`), but none of the three is
+ * long enough for its model to cache: the catalog states each model's
+ * minimum and `runtime/ai-prompt-cache.spec.ts` measures every door against
+ * it. That is why the tier drop is free here and NOT free on
+ * `/api/assist/chat`, whose ~1,030-token prefix clears the balanced tier's
+ * minimum and would stop caching entirely on the fast tier's — cheaper per
+ * token, dearer per request, and invisible either way without that
+ * measurement. See the header of `assist-chat.ts`.
+ *
+ * The cost meter prices by model id, so the value returned here MUST be the
+ * one passed to `recordAssistCost` — same call, same variable. A tiering
+ * change that updates the request and not the meter reports one tier's money
+ * for another tier's tokens, which is the failure the by-model rate table
+ * exists to stop.
+ */ export function assistModelForMode(mode) {
+    return aiModelForStep(assistStepKindForMode(mode));
+}
+/** The routing table's step kind for each mode. */ export function assistStepKindForMode(mode) {
+    return mode === 'element' ? 'copy.element' : mode === 'blog' ? 'copy.blog' : 'copy.section';
+}
+/**
+ * Per-uid burst limit, matched to `/api/assist/chat`'s 20/min so a client
+ * cannot arbitrage the two assist doors against each other.
+ */ const ASSIST_RATE_LIMIT = 20;
+const ASSIST_RATE_WINDOW_MS = 60000;
+const SECTION_MAX_TOKENS = AI_ROUTING_TABLE['copy.section'].maxTokens;
+const BLOG_MAX_TOKENS = AI_ROUTING_TABLE['copy.blog'].maxTokens;
+const ELEMENT_MAX_TOKENS = AI_ROUTING_TABLE['copy.element'].maxTokens;
+/**
+ * What a `refusal` stop is answered with. The model declined the brief —
+ * a policy verdict on the instruction, not a fault — so the sentence asks
+ * for a different one rather than a retry. The tokens were spent and are
+ * metered before this is sent.
+ */ const REFUSED = {
+    error: 'The AI declined that instruction — try a different one.'
+};
+/**
+ * AI assist (AGL-89/130/169), the besigner copy assistant's door — the
+ * section mode composes over the published-component allowlist and every
+ * generated subtree passes the node-definition sanitizer a marketplace
+ * install passes, before it reaches a canvas. `/api/ai/assist` is served by
+ * the plugin API dispatcher under the `ai` prefix. Gated on a ready provider,
+ * one registered with its key set (501 without, the same degrade pattern as
+ * Stripe); auth via Firebase ID token.
+ *
+ * The provider call is `runAiRequest`, the runtime every AI door shares
+ * (AGL-2903). This handler owns the ladder below and the response shapes;
+ * `ai-assist-prompts.ts` owns the three prompts and the section tool; the
+ * runtime owns the wire, the usage arithmetic and the error boundary. The
+ * request keeps the model per mode, the `max_tokens` and the absent
+ * `thinking` field it has always had — a fast-tier model rejects an explicit
+ * one, and the balanced modes keep the model default.
+ *
+ * A section arrives through a strict tool (AGL-2937). It used to be asked
+ * for as bare JSON and parsed: a parse that failed answered 502 with the
+ * tokens already spent, so the whole request bought nothing and the member's
+ * next move was to spend it again. The text parse is kept behind the tool,
+ * for a provider whose adapter has none.
+ *
+ * ── The spend ladder (AGL-2073) ────────────────────────────────────────────
+ *
+ * This route reached the provider behind nothing but an entitlement check. Free
+ * orgs could not get in, so the free tier was safe — but for any Pro org it
+ * had no rate limit, no quota, no per-org cost telemetry, and it resolved the
+ * org from the USER rather than the request, so someone with one paid org got
+ * assist charged against whichever org `getOrgForUser` happened to return. One
+ * subscription, unbounded and unmeasured provider spend.
+ *
+ * The ladder now, in order, each rung able to go red on its own:
+ * 405 → 501 no ready provider → 401 no token → 400 bad body (the request
+ * must NAME the org it is metered against) → 403 not a member of that org →
+ * 423 the workspace's AI pause → 403 the member's role lacks `ai.use`, or
+ * `ai.generate` for a section (AGL-2927; staff pass) → 403 no `aiAssist`
+ * entitlement → 423 org lockdown → 429 rate limit → 429 quota → the model
+ * call → meter.
+ *
+ * Two deliberate choices about which way each rung fails:
+ *
+ * - **The rate limiter fails SOFT and is not the spend bound.** It is a
+ *   per-instance in-memory window, so N serverless instances admit N × 20/min;
+ *   it smooths bursts and nothing more. Treating it as the cap would be the
+ *   fail-open this issue is about.
+ * - **The reservation fails CLOSED.** It is the only global, atomic bound on
+ *   provider spend, so a reservation that cannot be taken — a Firestore
+ *   outage, a contended transaction — refuses the request with 503 rather than
+ *   calling the provider uncapped. An unavailable meter must stop the spending,
+ *   not wave it through.
+ *
+ * The reservation is `reserveAssistMessage` — the same shared counter the
+ * console chat route moves (AGL-2057), not a second mechanism. That is what
+ * closes the "uncapped for paid" hole the earlier audit named: an entitled org
+ * carries the monthly runaway guard, and because both doors move the SAME
+ * counter, an org's monthly assist budget is shared across them rather than
+ * doubled by having two.
+ *
+ * Metering is `recordAssistCost`, the signal + rollup half of the assist
+ * meters WITHOUT the verbatim half: what a customer types here is their own
+ * site copy and blog bodies, and retaining that for 180 days is a data flow
+ * the published privacy disclosure does not describe. The margin question is
+ * answered by the signal alone.
+ */ export const aiAssistHandler = async (req, res)=>{
+    var _headers_authorization, _req_body, _ref, _ref1, _ref2, _ref3, _ref4, _ref5;
+    if (req.method !== 'POST') {
+        return res.status(405).json({
+            error: 'Method not allowed'
+        });
+    }
+    if (!aiProviderReady()) {
+        return res.status(501).json({
+            error: 'AI assist is not configured (no AI provider key).'
+        });
+    }
+    const headers = req.headers;
+    const authorization = (_headers_authorization = headers.authorization) != null ? _headers_authorization : '';
+    const idToken = authorization.startsWith('Bearer ') ? authorization.slice('Bearer '.length) : undefined;
+    if (!idToken) return res.status(401).json({
+        error: 'Unauthenticated'
+    });
+    const body = (_req_body = req.body) != null ? _req_body : {};
+    const text = String((_ref = body == null ? void 0 : body.text) != null ? _ref : '').slice(0, 12000);
+    const instruction = String((_ref1 = body == null ? void 0 : body.instruction) != null ? _ref1 : '').slice(0, 500);
+    // Modes (AGL-130): 'element' rewrites short copy; 'blog' writes or
+    // improves markdown-lite entry bodies with title/excerpt context.
+    const mode = (body == null ? void 0 : body.mode) === 'blog' ? 'blog' : (body == null ? void 0 : body.mode) === 'section' ? 'section' : 'element';
+    const title = String((_ref2 = body == null ? void 0 : body.title) != null ? _ref2 : '').slice(0, 200);
+    const excerpt = String((_ref3 = body == null ? void 0 : body.excerpt) != null ? _ref3 : '').slice(0, 500);
+    // The request must NAME the org it is about to be metered against
+    // (AGL-2073, the AGL-1934 rule applied to this door). Resolving the org
+    // from the user alone charged a multi-org user's assist to whichever org
+    // came back first — and handed their free workspaces a paid feature.
+    const orgId = String((_ref4 = body == null ? void 0 : body.orgId) != null ? _ref4 : '').trim();
+    const hostId = String((_ref5 = body == null ? void 0 : body.hostId) != null ? _ref5 : '').trim().slice(0, 128);
+    if (!instruction) {
+        return res.status(400).json({
+            error: 'Missing instruction'
+        });
+    }
+    if (!orgId) {
+        return res.status(400).json({
+            error: 'Open a workspace before using AI assist'
+        });
+    }
+    let reservation = null;
+    let providerAnswered = false;
+    let firestore = null;
+    try {
+        var _resolved_org, _ref6, _ref7, _ref8, _ref9;
+        var _held_allotment, _held_allotment1;
+        const app = firebaseAdmin.app();
+        firestore = app.firestore();
+        const decoded = await app.auth().verifyIdToken(idToken);
+        // Plan gate (AGL-469): AI assist is a Pro+ entitlement with real token
+        // cost — resolve the caller's org and check it server-side; a plan-less
+        // org resolves as `free` and is denied. Scoped to the NAMED org, so
+        // membership of some other paid org is not a key to this one.
+        const resolved = await getOrgForUser(decoded.uid, orgId);
+        if (!resolved || resolved.orgId !== orgId) {
+            return res.status(403).json({
+                error: 'You are not a member of that organization'
+            });
+        }
+        const org = (_resolved_org = resolved.org) != null ? _resolved_org : {};
+        // Permission (AGL-2927), directly after membership. The element and
+        // blog modes are assistance and sell under `ai.use`; a generated
+        // section is a generation and sells under `ai.generate`. Decided on the
+        // caller's own axis — the org catalog for an org-wide member, the site
+        // the body named for a collaborator, who is refused when it named none.
+        // A fact about the caller, so it is answered before the plan is. Staff
+        // pass, as at every other org route. Beside it, the workspace-scoped
+        // pause on `ai-assist`: the dispatcher already applied the platform-wide
+        // switch by path, before it knew which org the body would name.
+        const staff = decoded['staff'] === true;
+        const aiPaused = await featureLockdownRefusal({
+            feature: 'ai-assist',
+            staff,
+            orgId
+        });
+        if (aiPaused) return forwardRefusal(res, aiPaused);
+        const permission = mode === 'section' ? 'ai.generate' : 'ai.use';
+        if (!staff && !await memberHasPermissionOnHost(orgId, hostId, resolved.member, permission)) {
+            return forwardRefusal(res, permissionRefusal(permission));
+        }
+        const entitled = checkEntitlement(org, 'aiAssist');
+        if (!entitled) {
+            return res.status(403).json({
+                error: 'AI assist requires a Pro plan'
+            });
+        }
+        // Org-scoped lockdown. The dispatcher already evaluates platform and user
+        // scope plus the `ai-assist` feature kill switch, but its org scope needs
+        // a `hostId` this route's callers do not send — so a suspended workspace
+        // kept spending. The org doc is already in hand, so the verdict is free.
+        const locked = await lockdownRefusal({
+            request: {
+                method: req.method
+            },
+            staff,
+            uid: decoded.uid,
+            org: org
+        });
+        if (locked) return forwardRefusal(res, locked);
+        const rate = checkRateLimit(`ai-assist:${decoded.uid}`, {
+            limit: ASSIST_RATE_LIMIT,
+            windowMs: ASSIST_RATE_WINDOW_MS
+        });
+        if (!rate.allowed) {
+            for (const [name, value] of Object.entries(rateLimitHeaders(rate))){
+                res.setHeader(name, value);
+            }
+            return res.status(429).json({
+                error: 'Too many AI requests — slow down a moment'
+            });
+        }
+        // The same window keyed on the trusted-hop client address (AGL-2925):
+        // accounts rotated behind one address share one budget.
+        const ipRate = checkAiClientIpRateLimit(headers);
+        if (ipRate && !ipRate.allowed) {
+            for (const [name, value] of Object.entries(rateLimitHeaders(ipRate))){
+                res.setHeader(name, value);
+            }
+            return res.status(429).json({
+                error: 'Too many AI requests — slow down a moment'
+            });
+        }
+        // RESERVED, not merely checked (AGL-2057/2073). Read-and-increment in one
+        // transaction, BEFORE a single token is spent, so N concurrent requests
+        // cannot all read the same "under the cap" and a client that drops the
+        // connection has already been counted.
+        try {
+            // `org` is the document `entitled` came from, and it is what makes
+            // the plan's own assist band bind rather than the operator backstop
+            // alone. Generative building is the dearest thing this route serves,
+            // so the band it spends against has to be the one that was sold.
+            reservation = await reserveAssistMessage(firestore, orgId, entitled, new Date(), org, // The allotments that apply (AGL-2942): the asker's own, theirs on
+            // the canvas's site, and the site's.
+            {
+                uid: decoded.uid,
+                hostId: hostId || null
+            });
+        } catch (error) {
+            // FAIL CLOSED. The reservation is the only global bound on what this
+            // route can spend at the provider; if it cannot be taken there is no cap,
+            // and no cap is worse than no answer.
+            console.error('assist reservation failed', error);
+            return res.status(503).json({
+                error: 'AI assist is temporarily unavailable'
+            });
+        }
+        // A refusal is the asker's as well as the workspace's (AGL-2928): their
+        // month counts it beside the org counter the reservation moved.
+        recordUserAiRefusal(firestore, orgId, decoded.uid, reservation);
+        if (!reservation.allowed) {
+            var _ref10;
+            const refusedBy = reservation.refusedBy;
+            // A hard allotment (AGL-2942): the monthly line a manager drew for
+            // the asker or the site, with the sentence naming who can raise it.
+            if (refusedBy === 'allotment') {
+                var _reservation_allotment_refusal, _reservation_allotment;
+                return res.status(429).json({
+                    error: aiAllotmentRefusalText((_reservation_allotment = reservation.allotment) == null ? void 0 : (_reservation_allotment_refusal = _reservation_allotment.refusal) == null ? void 0 : _reservation_allotment_refusal.scope),
+                    reason: 'quota',
+                    quota: publicAssistQuota(reservation),
+                    meter: aiUsageMeter(reservation)
+                });
+            }
+            // The org's own controls are a 402, not a 429: credits past the band
+            // are for sale and this workspace either switched the sale off
+            // (AGL-2653) or capped what it would buy (AGL-2898), so the sentence
+            // names the control that refused — the same sentence the console
+            // assistant gives, from the same helper. Every other refusal keeps
+            // the 429.
+            // AGLYN'S OWN OVERAGE GUARDS (AGL-3011): a card, a pause, this
+            // month's ceiling or a settling balance, each with the status that
+            // says whether the workspace can act on it. Before the workspace's
+            // own controls, which answer only for the controls it set itself.
+            const overage = aiOverageReservationRefusal(reservation);
+            if (overage) {
+                return res.status(overage.status).json({
+                    error: overage.text,
+                    reason: 'quota',
+                    quota: publicAssistQuota(reservation),
+                    meter: aiUsageMeter(reservation)
+                });
+            }
+            const ownControl = assistOwnControlRefusalText(org, refusedBy);
+            return res.status(ownControl ? 402 : 429).json({
+                error: (_ref10 = ownControl != null ? ownControl : // The Free taste's own precautions (AGL-2925), in the sentences
+                // the console assistant uses.
+                assistFreeTasteRefusalText(refusedBy)) != null ? _ref10 : 'This workspace reached its AI assist limit for the month — contact support if you need a higher cap',
+                // CREDITS, never the reservation itself — see `publicAssistQuota`.
+                quota: publicAssistQuota(reservation),
+                meter: aiUsageMeter(reservation)
+            });
+        }
+        const tier = entitled ? 'entitled' : 'free';
+        // ONE resolution, read by both the request and the meter — see
+        // `assistModelForMode`. Two call sites would let them drift. A model the
+        // asker picked (AGL-2942) replaces the routing table's answer only when
+        // the plan, the org's restriction and the allotment allowlists all allow
+        // it; anything else runs on Auto.
+        const held = reservation;
+        const choice = resolveAiModelChoice(assistStepKindForMode(mode), body == null ? void 0 : body.model, {
+            plan: resolveEffectivePlan(org),
+            allotmentModels: (_ref6 = (_held_allotment = held.allotment) == null ? void 0 : _held_allotment.models) != null ? _ref6 : null,
+            orgModels: (_ref7 = (_held_allotment1 = held.allotment) == null ? void 0 : _held_allotment1.orgModels) != null ? _ref7 : null
+        });
+        const model = (_ref8 = choice == null ? void 0 : choice.model) != null ? _ref8 : assistModelForMode(mode);
+        /** The usage strip's envelope for an answered request (AGL-2942). */ const meterFor = (result)=>{
+            var _ref;
+            return aiUsageMeter(held, {
+                lastCredits: assistCreditsFromUsd(estimateAssistCostUsd(result.usage, model)),
+                model: {
+                    id: model,
+                    auto: (_ref = choice == null ? void 0 : choice.auto) != null ? _ref : true
+                }
+            });
+        };
+        /** Meter what the provider actually charged us for, per org. */ // The account the reservation drew on (AGL-2925), read once here: the
+        // closure below runs after `reservation` may have been cleared by a
+        // refund, and a refund never reaches the meter.
+        const free = (_ref9 = reservation == null ? void 0 : reservation.free) != null ? _ref9 : null;
+        const meter = (result)=>recordAssistCost(firestore, orgId, {
+                route: `/api/ai/assist/${mode}`,
+                hostId: hostId || null,
+                model,
+                tier,
+                usage: result.usage,
+                docsPaths: [],
+                stopReason: result.stopReason,
+                free
+            }).catch((error)=>console.error('assist cost metering failed', error));
+        /**
+     * One provider call, with the refund decided at the boundary: a refused
+     * request (a non-2xx answer) spent nothing, so the reservation goes back
+     * — against the keys it RECORDED, never against "now" — and the caller
+     * gets the runtime's fixed sentence, never the provider's (AGL-2815).
+     * A result, even a refusal, means the tokens ARE spent: every exit after
+     * it meters and none refunds. Anything else thrown never reached the
+     * provider and is left to the outer catch, which refunds too.
+     */ const ask = async (content, maxTokens, tools)=>{
+            try {
+                const result = await runAiRequest(_extends({
+                    model,
+                    maxTokens,
+                    stream: false,
+                    // The mode's prompt with the acceptable-use rules ahead of it
+                    // (AGL-2925), from `ai-assist-prompts.ts` so a spec can read what
+                    // this route sends without standing up the route.
+                    system: assistModeSystemBlocks(mode),
+                    messages: [
+                        {
+                            role: 'user',
+                            content
+                        }
+                    ]
+                }, tools ? {
+                    tools
+                } : {}));
+                providerAnswered = true;
+                await meter(result);
+                return result;
+            } catch (error) {
+                if (!(error instanceof AiUpstreamError)) throw error;
+                providerAnswered = true;
+                await releaseReservation(firestore, orgId, reservation);
+                reservation = null;
+                res.status(502).json({
+                    error: error.message
+                });
+                return null;
+            }
+        };
+        // Generate section (AGL-169): a constrained-JSON node subtree over the
+        // marketplace component allowlist; the response passes the same
+        // sanitizer as marketplace installs before it ever reaches a canvas.
+        if (mode === 'section') {
+            var _decoded_email;
+            const result = await ask(`Section to design: ${instruction}`, SECTION_MAX_TOKENS, [
+                assistSectionTool()
+            ]);
+            if (!result) return;
+            if (result.kind === 'refusal') {
+                return res.status(502).json(_extends({}, REFUSED, {
+                    meter: meterFor(result)
+                }));
+            }
+            const read = readAssistSection(result);
+            if (read.status !== 'ok') {
+                // Unreadable is the provider's fault and rejected is the answer's,
+                // the two statuses this route has always drawn that line between.
+                return res.status(read.status === 'unreadable' ? 502 : 422).json({
+                    error: read.error
+                });
+            }
+            // A subtree is going back (AGL-2929): the act, its size and its site in
+            // the customer's feed — never the instruction or the copy generated.
+            await logAiAssistSection({
+                uid: decoded.uid,
+                email: (_decoded_email = decoded.email) != null ? _decoded_email : null
+            }, {
+                orgId,
+                hostId: hostId || null,
+                nodeCount: Object.keys(read.section.nodes).length
+            });
+            return res.status(200).json({
+                section: read.section,
+                meter: meterFor(result)
+            });
+        }
+        const result = await ask(mode === 'blog' ? [
+            title && `Title: ${title}`,
+            excerpt && `Excerpt: ${excerpt}`,
+            text && `Current body:\n${text}`,
+            `Instruction: ${instruction}`
+        ].filter(Boolean).join('\n\n') : text ? `Current element text:\n${text}\n\nInstruction: ${instruction}` : `Write website element text. Instruction: ${instruction}`, mode === 'blog' ? BLOG_MAX_TOKENS : ELEMENT_MAX_TOKENS);
+        if (!result) return;
+        if (result.kind === 'refusal') {
+            return res.status(502).json(_extends({}, REFUSED, {
+                meter: meterFor(result)
+            }));
+        }
+        const output = result.text.trim();
+        if (!output) {
+            return res.status(502).json({
+                error: 'Empty AI response',
+                meter: meterFor(result)
+            });
+        }
+        return res.status(200).json({
+            text: output,
+            meter: meterFor(result)
+        });
+    } catch (error) {
+        console.error(error);
+        // The provider was never reached — a token verification failure, a DNS
+        // error, a socket reset before any response. Nothing was spent, so the
+        // reservation must not be. If the provider DID answer, the tokens are
+        // real and the reservation stays consumed however the request ends.
+        if (firestore && reservation && !providerAnswered) {
+            await releaseReservation(firestore, orgId, reservation);
+        }
+        return res.status(500).json({
+            error: 'Assist failed'
+        });
+    }
+};
+/**
+ * Hand a reservation back, never letting the refund itself fail the request.
+ * Released against the keys the RESERVATION recorded — a reservation taken at
+ * 23:59:59 and released at 00:00:01 must not credit the next day.
+ */ async function releaseReservation(firestore, orgId, reservation) {
+    await releaseAssistMessage(firestore, orgId, reservation).catch((error)=>console.error('assist reservation release failed', error));
+}
+/** Re-emit a lockdown `Response` through the plugin API's res object. */ async function forwardRefusal(res, refusal) {
+    const retryAfter = refusal.headers.get('Retry-After');
+    if (retryAfter) res.setHeader('Retry-After', retryAfter);
+    const body = await refusal.json().catch(()=>({
+            error: 'locked'
+        }));
+    res.status(refusal.status).json(body);
+}
+
+//# sourceMappingURL=ai-assist.js.map

package/src/lib/server/ai-assist.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../libs/plugins/ai/src/lib/server/ai-assist.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport {\n  checkEntitlement,\n  type PluginApiHandler,\n  type PluginApiResponse,\n} from '@aglyn/aglyn/server'\nimport {\n  assistCreditsFromUsd,\n  assistFreeTasteRefusalText,\n  assistOwnControlRefusalText,\n} from '@aglyn/aglyn/app-utils/assist-credits'\nimport { resolveEffectivePlan } from '@aglyn/aglyn/app-utils/plan-entitlements'\nimport { aiAllotmentRefusalText } from '../model/ai-allotments'\nimport { resolveAiModelChoice } from '../providers/model-choice'\nimport { aiUsageMeter } from '../usage/ai-usage-meter'\nimport {\n  permissionRefusal,\n  checkRateLimit,\n  featureLockdownRefusal,\n  firebaseAdmin,\n  getOrgForUser,\n  lockdownRefusal,\n  memberHasPermissionOnHost,\n  rateLimitHeaders,\n} from '@aglyn/tenant-data-admin'\nimport { aiOverageReservationRefusal } from '../billing/ai-overage-gate'\nimport { recordUserAiRefusal } from '../usage/ai-usage-by-user'\nimport {\n  estimateAssistCostUsd,\n  publicAssistQuota,\n  recordAssistCost,\n  releaseAssistMessage,\n  reserveAssistMessage,\n  type AssistReservation,\n} from '../usage/assist-usage'\nimport { logAiAssistSection } from '../activity/ai-activity'\n// By its own entry point rather than the barrel (AGL-2903): this handler's\n// spec replaces the barrel with a closed-world factory, and nothing replaces\n// the entry point, so the spec exercises the real request shape and the real\n// error boundary rather than a stub that agrees with the handler.\nimport { AI_ROUTING_TABLE, aiModelForStep } from '../providers/routing'\nimport {\n  AiUpstreamError,\n  aiProviderReady,\n  runAiRequest,\n  type AiResult,\n  type AiTool,\n} from '../runtime/ai-runtime'\nimport {\n  ASSIST_SECTION_TOOL_NAME,\n  assistModeSystemBlocks,\n  assistSectionTool,\n  readAssistSection,\n  type AiAssistMode,\n} from './ai-assist-prompts'\n// By its own entry point for the same reason (AGL-2925): the per-address\n// rung is real in the spec, keyed on whatever address the harness sends.\nimport { checkAiClientIpRateLimit } from '../runtime/ai-abuse-guards'\n\n/**\n * The model each mode is served by, through the routing table — tiered by\n * what the mode actually asks for (AGL-2486), not one model for all three.\n *\n * - **element** → the fast tier (`copy.element`). Rewriting one button label\n *   or one heading to an instruction is a short, bounded transformation with\n *   the source text supplied: the least model-shaped work on this route and\n *   the highest-volume (a user clicking \"improve this\" runs it repeatedly on\n *   the same element).\n * - **blog** → the balanced tier (`copy.blog`). A post body is real long-form\n *   writing, and the difference between tiers is legible to the reader.\n * - **section** → the balanced tier (`copy.section`). A constrained-JSON node\n *   subtree over the published-component allowlist is a structured-generation\n *   task with a schema the sanitizer will reject if it is got wrong, and a\n *   rejected generation costs the whole request rather than part of it.\n *\n * ⚠️ NO PROMPT CACHING IS LOST BY THE FAST RUNG. Each mode's static text now\n * carries a breakpoint (`assistModeSystemBlocks`), but none of the three is\n * long enough for its model to cache: the catalog states each model's\n * minimum and `runtime/ai-prompt-cache.spec.ts` measures every door against\n * it. That is why the tier drop is free here and NOT free on\n * `/api/assist/chat`, whose ~1,030-token prefix clears the balanced tier's\n * minimum and would stop caching entirely on the fast tier's — cheaper per\n * token, dearer per request, and invisible either way without that\n * measurement. See the header of `assist-chat.ts`.\n *\n * The cost meter prices by model id, so the value returned here MUST be the\n * one passed to `recordAssistCost` — same call, same variable. A tiering\n * change that updates the request and not the meter reports one tier's money\n * for another tier's tokens, which is the failure the by-model rate table\n * exists to stop.\n */\nexport function assistModelForMode(mode: AiAssistMode): string {\n  return aiModelForStep(assistStepKindForMode(mode))\n}\n\n/** The routing table's step kind for each mode. */\nexport function assistStepKindForMode(\n  mode: AiAssistMode,\n): 'copy.element' | 'copy.blog' | 'copy.section' {\n  return mode === 'element' ? 'copy.element' : mode === 'blog' ? 'copy.blog' : 'copy.section'\n}\n\n/**\n * Per-uid burst limit, matched to `/api/assist/chat`'s 20/min so a client\n * cannot arbitrage the two assist doors against each other.\n */\nconst ASSIST_RATE_LIMIT = 20\nconst ASSIST_RATE_WINDOW_MS = 60_000\n\nconst SECTION_MAX_TOKENS = AI_ROUTING_TABLE['copy.section'].maxTokens\nconst BLOG_MAX_TOKENS = AI_ROUTING_TABLE['copy.blog'].maxTokens\nconst ELEMENT_MAX_TOKENS = AI_ROUTING_TABLE['copy.element'].maxTokens\n\n/**\n * What a `refusal` stop is answered with. The model declined the brief —\n * a policy verdict on the instruction, not a fault — so the sentence asks\n * for a different one rather than a retry. The tokens were spent and are\n * metered before this is sent.\n */\nconst REFUSED = {\n  error: 'The AI declined that instruction — try a different one.',\n}\n\n/**\n * AI assist (AGL-89/130/169), the besigner copy assistant's door — the\n * section mode composes over the published-component allowlist and every\n * generated subtree passes the node-definition sanitizer a marketplace\n * install passes, before it reaches a canvas. `/api/ai/assist` is served by\n * the plugin API dispatcher under the `ai` prefix. Gated on a ready provider,\n * one registered with its key set (501 without, the same degrade pattern as\n * Stripe); auth via Firebase ID token.\n *\n * The provider call is `runAiRequest`, the runtime every AI door shares\n * (AGL-2903). This handler owns the ladder below and the response shapes;\n * `ai-assist-prompts.ts` owns the three prompts and the section tool; the\n * runtime owns the wire, the usage arithmetic and the error boundary. The\n * request keeps the model per mode, the `max_tokens` and the absent\n * `thinking` field it has always had — a fast-tier model rejects an explicit\n * one, and the balanced modes keep the model default.\n *\n * A section arrives through a strict tool (AGL-2937). It used to be asked\n * for as bare JSON and parsed: a parse that failed answered 502 with the\n * tokens already spent, so the whole request bought nothing and the member's\n * next move was to spend it again. The text parse is kept behind the tool,\n * for a provider whose adapter has none.\n *\n * ── The spend ladder (AGL-2073) ────────────────────────────────────────────\n *\n * This route reached the provider behind nothing but an entitlement check. Free\n * orgs could not get in, so the free tier was safe — but for any Pro org it\n * had no rate limit, no quota, no per-org cost telemetry, and it resolved the\n * org from the USER rather than the request, so someone with one paid org got\n * assist charged against whichever org `getOrgForUser` happened to return. One\n * subscription, unbounded and unmeasured provider spend.\n *\n * The ladder now, in order, each rung able to go red on its own:\n * 405 → 501 no ready provider → 401 no token → 400 bad body (the request\n * must NAME the org it is metered against) → 403 not a member of that org →\n * 423 the workspace's AI pause → 403 the member's role lacks `ai.use`, or\n * `ai.generate` for a section (AGL-2927; staff pass) → 403 no `aiAssist`\n * entitlement → 423 org lockdown → 429 rate limit → 429 quota → the model\n * call → meter.\n *\n * Two deliberate choices about which way each rung fails:\n *\n * - **The rate limiter fails SOFT and is not the spend bound.** It is a\n *   per-instance in-memory window, so N serverless instances admit N × 20/min;\n *   it smooths bursts and nothing more. Treating it as the cap would be the\n *   fail-open this issue is about.\n * - **The reservation fails CLOSED.** It is the only global, atomic bound on\n *   provider spend, so a reservation that cannot be taken — a Firestore\n *   outage, a contended transaction — refuses the request with 503 rather than\n *   calling the provider uncapped. An unavailable meter must stop the spending,\n *   not wave it through.\n *\n * The reservation is `reserveAssistMessage` — the same shared counter the\n * console chat route moves (AGL-2057), not a second mechanism. That is what\n * closes the \"uncapped for paid\" hole the earlier audit named: an entitled org\n * carries the monthly runaway guard, and because both doors move the SAME\n * counter, an org's monthly assist budget is shared across them rather than\n * doubled by having two.\n *\n * Metering is `recordAssistCost`, the signal + rollup half of the assist\n * meters WITHOUT the verbatim half: what a customer types here is their own\n * site copy and blog bodies, and retaining that for 180 days is a data flow\n * the published privacy disclosure does not describe. The margin question is\n * answered by the signal alone.\n */\nexport const aiAssistHandler: PluginApiHandler = async (req, res) => {\n  if (req.method !== 'POST') {\n    return res.status(405).json({ error: 'Method not allowed' })\n  }\n  if (!aiProviderReady()) {\n    return res\n      .status(501)\n      .json({ error: 'AI assist is not configured (no AI provider key).' })\n  }\n\n  const headers = req.headers as Partial<Record<string, string>>\n  const authorization = headers.authorization ?? ''\n  const idToken = authorization.startsWith('Bearer ')\n    ? authorization.slice('Bearer '.length)\n    : undefined\n  if (!idToken) return res.status(401).json({ error: 'Unauthenticated' })\n\n  const body = req.body ?? {}\n  const text = String(body?.text ?? '').slice(0, 12000)\n  const instruction = String(body?.instruction ?? '').slice(0, 500)\n  // Modes (AGL-130): 'element' rewrites short copy; 'blog' writes or\n  // improves markdown-lite entry bodies with title/excerpt context.\n  const mode =\n    body?.mode === 'blog'\n      ? 'blog'\n      : body?.mode === 'section'\n        ? 'section'\n        : 'element'\n  const title = String(body?.title ?? '').slice(0, 200)\n  const excerpt = String(body?.excerpt ?? '').slice(0, 500)\n  // The request must NAME the org it is about to be metered against\n  // (AGL-2073, the AGL-1934 rule applied to this door). Resolving the org\n  // from the user alone charged a multi-org user's assist to whichever org\n  // came back first — and handed their free workspaces a paid feature.\n  const orgId = String(body?.orgId ?? '').trim()\n  const hostId = String(body?.hostId ?? '')\n    .trim()\n    .slice(0, 128)\n  if (!instruction) {\n    return res.status(400).json({ error: 'Missing instruction' })\n  }\n  if (!orgId) {\n    return res\n      .status(400)\n      .json({ error: 'Open a workspace before using AI assist' })\n  }\n\n  let reservation: AssistReservation | null = null\n  let providerAnswered = false\n  let firestore: FirebaseFirestore.Firestore | null = null\n\n  try {\n    const app = firebaseAdmin.app()\n    firestore = app.firestore()\n    const decoded = await app.auth().verifyIdToken(idToken)\n\n    // Plan gate (AGL-469): AI assist is a Pro+ entitlement with real token\n    // cost — resolve the caller's org and check it server-side; a plan-less\n    // org resolves as `free` and is denied. Scoped to the NAMED org, so\n    // membership of some other paid org is not a key to this one.\n    const resolved = await getOrgForUser(decoded.uid, orgId)\n    if (!resolved || resolved.orgId !== orgId) {\n      return res\n        .status(403)\n        .json({ error: 'You are not a member of that organization' })\n    }\n    const org = resolved.org ?? {}\n\n    // Permission (AGL-2927), directly after membership. The element and\n    // blog modes are assistance and sell under `ai.use`; a generated\n    // section is a generation and sells under `ai.generate`. Decided on the\n    // caller's own axis — the org catalog for an org-wide member, the site\n    // the body named for a collaborator, who is refused when it named none.\n    // A fact about the caller, so it is answered before the plan is. Staff\n    // pass, as at every other org route. Beside it, the workspace-scoped\n    // pause on `ai-assist`: the dispatcher already applied the platform-wide\n    // switch by path, before it knew which org the body would name.\n    const staff = decoded['staff'] === true\n    const aiPaused = await featureLockdownRefusal({\n      feature: 'ai-assist',\n      staff,\n      orgId,\n    })\n    if (aiPaused) return forwardRefusal(res, aiPaused)\n    const permission = mode === 'section' ? 'ai.generate' : 'ai.use'\n    if (\n      !staff &&\n      !(await memberHasPermissionOnHost(orgId, hostId, resolved.member, permission))\n    ) {\n      return forwardRefusal(res, permissionRefusal(permission))\n    }\n\n    const entitled = checkEntitlement(org, 'aiAssist')\n    if (!entitled) {\n      return res.status(403).json({ error: 'AI assist requires a Pro plan' })\n    }\n\n    // Org-scoped lockdown. The dispatcher already evaluates platform and user\n    // scope plus the `ai-assist` feature kill switch, but its org scope needs\n    // a `hostId` this route's callers do not send — so a suspended workspace\n    // kept spending. The org doc is already in hand, so the verdict is free.\n    const locked = await lockdownRefusal({\n      request: { method: req.method },\n      staff,\n      uid: decoded.uid,\n      org: org as Record<string, unknown>,\n    })\n    if (locked) return forwardRefusal(res, locked)\n\n    const rate = checkRateLimit(`ai-assist:${decoded.uid}`, {\n      limit: ASSIST_RATE_LIMIT,\n      windowMs: ASSIST_RATE_WINDOW_MS,\n    })\n    if (!rate.allowed) {\n      for (const [name, value] of Object.entries(rateLimitHeaders(rate))) {\n        res.setHeader(name, value)\n      }\n      return res\n        .status(429)\n        .json({ error: 'Too many AI requests — slow down a moment' })\n    }\n    // The same window keyed on the trusted-hop client address (AGL-2925):\n    // accounts rotated behind one address share one budget.\n    const ipRate = checkAiClientIpRateLimit(headers)\n    if (ipRate && !ipRate.allowed) {\n      for (const [name, value] of Object.entries(rateLimitHeaders(ipRate))) {\n        res.setHeader(name, value)\n      }\n      return res\n        .status(429)\n        .json({ error: 'Too many AI requests — slow down a moment' })\n    }\n\n    // RESERVED, not merely checked (AGL-2057/2073). Read-and-increment in one\n    // transaction, BEFORE a single token is spent, so N concurrent requests\n    // cannot all read the same \"under the cap\" and a client that drops the\n    // connection has already been counted.\n    try {\n      // `org` is the document `entitled` came from, and it is what makes\n      // the plan's own assist band bind rather than the operator backstop\n      // alone. Generative building is the dearest thing this route serves,\n      // so the band it spends against has to be the one that was sold.\n      reservation = await reserveAssistMessage(\n        firestore,\n        orgId,\n        entitled,\n        new Date(),\n        org,\n        // The allotments that apply (AGL-2942): the asker's own, theirs on\n        // the canvas's site, and the site's.\n        { uid: decoded.uid, hostId: hostId || null },\n      )\n    } catch (error) {\n      // FAIL CLOSED. The reservation is the only global bound on what this\n      // route can spend at the provider; if it cannot be taken there is no cap,\n      // and no cap is worse than no answer.\n      console.error('assist reservation failed', error)\n      return res\n        .status(503)\n        .json({ error: 'AI assist is temporarily unavailable' })\n    }\n    // A refusal is the asker's as well as the workspace's (AGL-2928): their\n    // month counts it beside the org counter the reservation moved.\n    recordUserAiRefusal(firestore, orgId, decoded.uid, reservation)\n    if (!reservation.allowed) {\n      const refusedBy = reservation.refusedBy\n      // A hard allotment (AGL-2942): the monthly line a manager drew for\n      // the asker or the site, with the sentence naming who can raise it.\n      if (refusedBy === 'allotment') {\n        return res.status(429).json({\n          error: aiAllotmentRefusalText(reservation.allotment?.refusal?.scope),\n          reason: 'quota',\n          quota: publicAssistQuota(reservation),\n          meter: aiUsageMeter(reservation),\n        })\n      }\n      // The org's own controls are a 402, not a 429: credits past the band\n      // are for sale and this workspace either switched the sale off\n      // (AGL-2653) or capped what it would buy (AGL-2898), so the sentence\n      // names the control that refused — the same sentence the console\n      // assistant gives, from the same helper. Every other refusal keeps\n      // the 429.\n      // AGLYN'S OWN OVERAGE GUARDS (AGL-3011): a card, a pause, this\n      // month's ceiling or a settling balance, each with the status that\n      // says whether the workspace can act on it. Before the workspace's\n      // own controls, which answer only for the controls it set itself.\n      const overage = aiOverageReservationRefusal(reservation)\n      if (overage) {\n        return res.status(overage.status).json({\n          error: overage.text,\n          reason: 'quota',\n          quota: publicAssistQuota(reservation),\n          meter: aiUsageMeter(reservation),\n        })\n      }\n      const ownControl = assistOwnControlRefusalText(org, refusedBy)\n      return res.status(ownControl ? 402 : 429).json({\n        error:\n          ownControl ??\n          // The Free taste's own precautions (AGL-2925), in the sentences\n          // the console assistant uses.\n          assistFreeTasteRefusalText(refusedBy) ??\n          'This workspace reached its AI assist limit for the month — contact support if you need a higher cap',\n        // CREDITS, never the reservation itself — see `publicAssistQuota`.\n        quota: publicAssistQuota(reservation),\n        meter: aiUsageMeter(reservation),\n      })\n    }\n\n    const tier: 'free' | 'entitled' = entitled ? 'entitled' : 'free'\n    // ONE resolution, read by both the request and the meter — see\n    // `assistModelForMode`. Two call sites would let them drift. A model the\n    // asker picked (AGL-2942) replaces the routing table's answer only when\n    // the plan, the org's restriction and the allotment allowlists all allow\n    // it; anything else runs on Auto.\n    const held = reservation\n    const choice = resolveAiModelChoice(assistStepKindForMode(mode), body?.model, {\n      plan: resolveEffectivePlan(org),\n      allotmentModels: held.allotment?.models ?? null,\n      orgModels: held.allotment?.orgModels ?? null,\n    })\n    const model = choice?.model ?? assistModelForMode(mode)\n    /** The usage strip's envelope for an answered request (AGL-2942). */\n    const meterFor = (result: AiResult) =>\n      aiUsageMeter(held, {\n        lastCredits: assistCreditsFromUsd(estimateAssistCostUsd(result.usage, model)),\n        model: { id: model, auto: choice?.auto ?? true },\n      })\n    /** Meter what the provider actually charged us for, per org. */\n    // The account the reservation drew on (AGL-2925), read once here: the\n    // closure below runs after `reservation` may have been cleared by a\n    // refund, and a refund never reaches the meter.\n    const free = reservation?.free ?? null\n    const meter = (result: AiResult): Promise<unknown> =>\n      recordAssistCost(firestore, orgId, {\n        route: `/api/ai/assist/${mode}`,\n        hostId: hostId || null,\n        model,\n        tier,\n        usage: result.usage,\n        docsPaths: [],\n        stopReason: result.stopReason,\n        free,\n      }).catch((error) => console.error('assist cost metering failed', error))\n\n    /**\n     * One provider call, with the refund decided at the boundary: a refused\n     * request (a non-2xx answer) spent nothing, so the reservation goes back\n     * — against the keys it RECORDED, never against \"now\" — and the caller\n     * gets the runtime's fixed sentence, never the provider's (AGL-2815).\n     * A result, even a refusal, means the tokens ARE spent: every exit after\n     * it meters and none refunds. Anything else thrown never reached the\n     * provider and is left to the outer catch, which refunds too.\n     */\n    const ask = async (\n      content: string,\n      maxTokens: number,\n      tools?: AiTool[],\n    ): Promise<AiResult | null> => {\n      try {\n        const result = await runAiRequest({\n          model,\n          maxTokens,\n          stream: false,\n          // The mode's prompt with the acceptable-use rules ahead of it\n          // (AGL-2925), from `ai-assist-prompts.ts` so a spec can read what\n          // this route sends without standing up the route.\n          system: assistModeSystemBlocks(mode),\n          messages: [{ role: 'user', content }],\n          ...(tools ? { tools } : {}),\n        })\n        providerAnswered = true\n        await meter(result)\n        return result\n      } catch (error) {\n        if (!(error instanceof AiUpstreamError)) throw error\n        providerAnswered = true\n        await releaseReservation(firestore, orgId, reservation as AssistReservation)\n        reservation = null\n        res.status(502).json({ error: error.message })\n        return null\n      }\n    }\n\n    // Generate section (AGL-169): a constrained-JSON node subtree over the\n    // marketplace component allowlist; the response passes the same\n    // sanitizer as marketplace installs before it ever reaches a canvas.\n    if (mode === 'section') {\n      const result = await ask(\n        `Section to design: ${instruction}`,\n        SECTION_MAX_TOKENS,\n        [assistSectionTool()],\n      )\n      if (!result) return\n      if (result.kind === 'refusal') {\n        return res.status(502).json({ ...REFUSED, meter: meterFor(result) })\n      }\n      const read = readAssistSection(result)\n      if (read.status !== 'ok') {\n        // Unreadable is the provider's fault and rejected is the answer's,\n        // the two statuses this route has always drawn that line between.\n        return res.status(read.status === 'unreadable' ? 502 : 422).json({ error: read.error })\n      }\n      // A subtree is going back (AGL-2929): the act, its size and its site in\n      // the customer's feed — never the instruction or the copy generated.\n      await logAiAssistSection(\n        { uid: decoded.uid, email: decoded.email ?? null },\n        {\n          orgId,\n          hostId: hostId || null,\n          nodeCount: Object.keys(read.section.nodes).length,\n        },\n      )\n      return res.status(200).json({ section: read.section, meter: meterFor(result) })\n    }\n\n    const result = await ask(\n      mode === 'blog'\n        ? [\n            title && `Title: ${title}`,\n            excerpt && `Excerpt: ${excerpt}`,\n            text && `Current body:\\n${text}`,\n            `Instruction: ${instruction}`,\n          ]\n            .filter(Boolean)\n            .join('\\n\\n')\n        : text\n          ? `Current element text:\\n${text}\\n\\nInstruction: ${instruction}`\n          : `Write website element text. Instruction: ${instruction}`,\n      mode === 'blog' ? BLOG_MAX_TOKENS : ELEMENT_MAX_TOKENS,\n    )\n    if (!result) return\n    if (result.kind === 'refusal') {\n      return res.status(502).json({ ...REFUSED, meter: meterFor(result) })\n    }\n    const output = result.text.trim()\n    if (!output) {\n      return res.status(502).json({ error: 'Empty AI response', meter: meterFor(result) })\n    }\n    return res.status(200).json({ text: output, meter: meterFor(result) })\n  } catch (error) {\n    console.error(error)\n    // The provider was never reached — a token verification failure, a DNS\n    // error, a socket reset before any response. Nothing was spent, so the\n    // reservation must not be. If the provider DID answer, the tokens are\n    // real and the reservation stays consumed however the request ends.\n    if (firestore && reservation && !providerAnswered) {\n      await releaseReservation(firestore, orgId, reservation)\n    }\n    return res.status(500).json({ error: 'Assist failed' })\n  }\n}\n\n/**\n * Hand a reservation back, never letting the refund itself fail the request.\n * Released against the keys the RESERVATION recorded — a reservation taken at\n * 23:59:59 and released at 00:00:01 must not credit the next day.\n */\nasync function releaseReservation(\n  firestore: FirebaseFirestore.Firestore,\n  orgId: string,\n  reservation: AssistReservation,\n): Promise<void> {\n  await releaseAssistMessage(firestore, orgId, reservation).catch((error) =>\n    console.error('assist reservation release failed', error),\n  )\n}\n\n/** Re-emit a lockdown `Response` through the plugin API's res object. */\nasync function forwardRefusal(\n  res: PluginApiResponse,\n  refusal: Response,\n): Promise<void> {\n  const retryAfter = refusal.headers.get('Retry-After')\n  if (retryAfter) res.setHeader('Retry-After', retryAfter)\n  const body = await refusal.json().catch(() => ({ error: 'locked' }))\n  res.status(refusal.status).json(body)\n}\n"],"names":["checkEntitlement","assistCreditsFromUsd","assistFreeTasteRefusalText","assistOwnControlRefusalText","resolveEffectivePlan","aiAllotmentRefusalText","resolveAiModelChoice","aiUsageMeter","permissionRefusal","checkRateLimit","featureLockdownRefusal","firebaseAdmin","getOrgForUser","lockdownRefusal","memberHasPermissionOnHost","rateLimitHeaders","aiOverageReservationRefusal","recordUserAiRefusal","estimateAssistCostUsd","publicAssistQuota","recordAssistCost","releaseAssistMessage","reserveAssistMessage","logAiAssistSection","AI_ROUTING_TABLE","aiModelForStep","AiUpstreamError","aiProviderReady","runAiRequest","assistModeSystemBlocks","assistSectionTool","readAssistSection","checkAiClientIpRateLimit","assistModelForMode","mode","assistStepKindForMode","ASSIST_RATE_LIMIT","ASSIST_RATE_WINDOW_MS","SECTION_MAX_TOKENS","maxTokens","BLOG_MAX_TOKENS","ELEMENT_MAX_TOKENS","REFUSED","error","aiAssistHandler","req","res","headers","method","status","json","authorization","idToken","startsWith","slice","length","undefined","body","text","String","instruction","title","excerpt","orgId","trim","hostId","reservation","providerAnswered","firestore","resolved","held","app","decoded","auth","verifyIdToken","uid","org","staff","aiPaused","feature","forwardRefusal","permission","member","entitled","locked","request","rate","limit","windowMs","allowed","name","value","Object","entries","setHeader","ipRate","Date","console","ownControl","refusedBy","allotment","refusal","scope","reason","quota","meter","overage","tier","choice","model","plan","allotmentModels","models","orgModels","meterFor","result","lastCredits","usage","id","auto","free","route","docsPaths","stopReason","catch","ask","content","tools","stream","system","messages","role","releaseReservation","message","kind","read","email","nodeCount","keys","section","nodes","filter","Boolean","join","output","retryAfter","get"],"mappings":";AAAA;;;;;;;;;;;;;;;CAeC,GAED,SACEA,gBAAgB,QAGX,sBAAqB;AAC5B,SACEC,oBAAoB,EACpBC,0BAA0B,EAC1BC,2BAA2B,QACtB,wCAAuC;AAC9C,SAASC,oBAAoB,QAAQ,2CAA0C;AAC/E,SAASC,sBAAsB,QAAQ,4BAAwB;AAC/D,SAASC,oBAAoB,QAAQ,+BAA2B;AAChE,SAASC,YAAY,QAAQ,6BAAyB;AACtD,SACEC,iBAAiB,EACjBC,cAAc,EACdC,sBAAsB,EACtBC,aAAa,EACbC,aAAa,EACbC,eAAe,EACfC,yBAAyB,EACzBC,gBAAgB,QACX,2BAA0B;AACjC,SAASC,2BAA2B,QAAQ,gCAA4B;AACxE,SAASC,mBAAmB,QAAQ,+BAA2B;AAC/D,SACEC,qBAAqB,EACrBC,iBAAiB,EACjBC,gBAAgB,EAChBC,oBAAoB,EACpBC,oBAAoB,QAEf,2BAAuB;AAC9B,SAASC,kBAAkB,QAAQ,6BAAyB;AAC5D,2EAA2E;AAC3E,6EAA6E;AAC7E,6EAA6E;AAC7E,kEAAkE;AAClE,SAASC,gBAAgB,EAAEC,cAAc,QAAQ,0BAAsB;AACvE,SACEC,eAAe,EACfC,eAAe,EACfC,YAAY,QAGP,2BAAuB;AAC9B,SAEEC,sBAAsB,EACtBC,iBAAiB,EACjBC,iBAAiB,QAEZ,yBAAqB;AAC5B,yEAAyE;AACzE,yEAAyE;AACzE,SAASC,wBAAwB,QAAQ,gCAA4B;AAErE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA+BC,GACD,OAAO,SAASC,mBAAmBC,IAAkB;IACnD,OAAOT,eAAeU,sBAAsBD;AAC9C;AAEA,iDAAiD,GACjD,OAAO,SAASC,sBACdD,IAAkB;IAElB,OAAOA,SAAS,YAAY,iBAAiBA,SAAS,SAAS,cAAc;AAC/E;AAEA;;;CAGC,GACD,MAAME,oBAAoB;AAC1B,MAAMC,wBAAwB;AAE9B,MAAMC,qBAAqBd,gBAAgB,CAAC,eAAe,CAACe,SAAS;AACrE,MAAMC,kBAAkBhB,gBAAgB,CAAC,YAAY,CAACe,SAAS;AAC/D,MAAME,qBAAqBjB,gBAAgB,CAAC,eAAe,CAACe,SAAS;AAErE;;;;;CAKC,GACD,MAAMG,UAAU;IACdC,OAAO;AACT;AAEA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAgEC,GACD,OAAO,MAAMC,kBAAoC,OAAOC,KAAKC;QAWrCC,wBAMTF;IAhBb,IAAIA,IAAIG,MAAM,KAAK,QAAQ;QACzB,OAAOF,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEP,OAAO;QAAqB;IAC5D;IACA,IAAI,CAAChB,mBAAmB;QACtB,OAAOmB,IACJG,MAAM,CAAC,KACPC,IAAI,CAAC;YAAEP,OAAO;QAAoD;IACvE;IAEA,MAAMI,UAAUF,IAAIE,OAAO;IAC3B,MAAMI,iBAAgBJ,yBAAAA,QAAQI,aAAa,YAArBJ,yBAAyB;IAC/C,MAAMK,UAAUD,cAAcE,UAAU,CAAC,aACrCF,cAAcG,KAAK,CAAC,UAAUC,MAAM,IACpCC;IACJ,IAAI,CAACJ,SAAS,OAAON,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;QAAEP,OAAO;IAAkB;IAErE,MAAMc,QAAOZ,YAAAA,IAAIY,IAAI,YAARZ,YAAY,CAAC;IAC1B,MAAMa,OAAOC,eAAOF,wBAAAA,KAAMC,IAAI,mBAAI,IAAIJ,KAAK,CAAC,GAAG;IAC/C,MAAMM,cAAcD,gBAAOF,wBAAAA,KAAMG,WAAW,oBAAI,IAAIN,KAAK,CAAC,GAAG;IAC7D,mEAAmE;IACnE,kEAAkE;IAClE,MAAMpB,OACJuB,CAAAA,wBAAAA,KAAMvB,IAAI,MAAK,SACX,SACAuB,CAAAA,wBAAAA,KAAMvB,IAAI,MAAK,YACb,YACA;IACR,MAAM2B,QAAQF,gBAAOF,wBAAAA,KAAMI,KAAK,oBAAI,IAAIP,KAAK,CAAC,GAAG;IACjD,MAAMQ,UAAUH,gBAAOF,wBAAAA,KAAMK,OAAO,oBAAI,IAAIR,KAAK,CAAC,GAAG;IACrD,kEAAkE;IAClE,wEAAwE;IACxE,yEAAyE;IACzE,qEAAqE;IACrE,MAAMS,QAAQJ,gBAAOF,wBAAAA,KAAMM,KAAK,oBAAI,IAAIC,IAAI;IAC5C,MAAMC,SAASN,gBAAOF,wBAAAA,KAAMQ,MAAM,oBAAI,IACnCD,IAAI,GACJV,KAAK,CAAC,GAAG;IACZ,IAAI,CAACM,aAAa;QAChB,OAAOd,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEP,OAAO;QAAsB;IAC7D;IACA,IAAI,CAACoB,OAAO;QACV,OAAOjB,IACJG,MAAM,CAAC,KACPC,IAAI,CAAC;YAAEP,OAAO;QAA0C;IAC7D;IAEA,IAAIuB,cAAwC;IAC5C,IAAIC,mBAAmB;IACvB,IAAIC,YAAgD;IAEpD,IAAI;YAeUC;YAwJOC,iBACNA;QAvKb,MAAMC,MAAM5D,cAAc4D,GAAG;QAC7BH,YAAYG,IAAIH,SAAS;QACzB,MAAMI,UAAU,MAAMD,IAAIE,IAAI,GAAGC,aAAa,CAACtB;QAE/C,uEAAuE;QACvE,wEAAwE;QACxE,oEAAoE;QACpE,8DAA8D;QAC9D,MAAMiB,WAAW,MAAMzD,cAAc4D,QAAQG,GAAG,EAAEZ;QAClD,IAAI,CAACM,YAAYA,SAASN,KAAK,KAAKA,OAAO;YACzC,OAAOjB,IACJG,MAAM,CAAC,KACPC,IAAI,CAAC;gBAAEP,OAAO;YAA4C;QAC/D;QACA,MAAMiC,OAAMP,gBAAAA,SAASO,GAAG,YAAZP,gBAAgB,CAAC;QAE7B,oEAAoE;QACpE,iEAAiE;QACjE,wEAAwE;QACxE,uEAAuE;QACvE,wEAAwE;QACxE,uEAAuE;QACvE,qEAAqE;QACrE,yEAAyE;QACzE,gEAAgE;QAChE,MAAMQ,QAAQL,OAAO,CAAC,QAAQ,KAAK;QACnC,MAAMM,WAAW,MAAMpE,uBAAuB;YAC5CqE,SAAS;YACTF;YACAd;QACF;QACA,IAAIe,UAAU,OAAOE,eAAelC,KAAKgC;QACzC,MAAMG,aAAa/C,SAAS,YAAY,gBAAgB;QACxD,IACE,CAAC2C,SACD,CAAE,MAAM/D,0BAA0BiD,OAAOE,QAAQI,SAASa,MAAM,EAAED,aAClE;YACA,OAAOD,eAAelC,KAAKtC,kBAAkByE;QAC/C;QAEA,MAAME,WAAWnF,iBAAiB4E,KAAK;QACvC,IAAI,CAACO,UAAU;YACb,OAAOrC,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;gBAAEP,OAAO;YAAgC;QACvE;QAEA,0EAA0E;QAC1E,0EAA0E;QAC1E,yEAAyE;QACzE,yEAAyE;QACzE,MAAMyC,SAAS,MAAMvE,gBAAgB;YACnCwE,SAAS;gBAAErC,QAAQH,IAAIG,MAAM;YAAC;YAC9B6B;YACAF,KAAKH,QAAQG,GAAG;YAChBC,KAAKA;QACP;QACA,IAAIQ,QAAQ,OAAOJ,eAAelC,KAAKsC;QAEvC,MAAME,OAAO7E,eAAe,CAAC,UAAU,EAAE+D,QAAQG,GAAG,EAAE,EAAE;YACtDY,OAAOnD;YACPoD,UAAUnD;QACZ;QACA,IAAI,CAACiD,KAAKG,OAAO,EAAE;YACjB,KAAK,MAAM,CAACC,MAAMC,MAAM,IAAIC,OAAOC,OAAO,CAAC9E,iBAAiBuE,OAAQ;gBAClExC,IAAIgD,SAAS,CAACJ,MAAMC;YACtB;YACA,OAAO7C,IACJG,MAAM,CAAC,KACPC,IAAI,CAAC;gBAAEP,OAAO;YAA4C;QAC/D;QACA,sEAAsE;QACtE,wDAAwD;QACxD,MAAMoD,SAAS/D,yBAAyBe;QACxC,IAAIgD,UAAU,CAACA,OAAON,OAAO,EAAE;YAC7B,KAAK,MAAM,CAACC,MAAMC,MAAM,IAAIC,OAAOC,OAAO,CAAC9E,iBAAiBgF,SAAU;gBACpEjD,IAAIgD,SAAS,CAACJ,MAAMC;YACtB;YACA,OAAO7C,IACJG,MAAM,CAAC,KACPC,IAAI,CAAC;gBAAEP,OAAO;YAA4C;QAC/D;QAEA,0EAA0E;QAC1E,wEAAwE;QACxE,uEAAuE;QACvE,uCAAuC;QACvC,IAAI;YACF,mEAAmE;YACnE,oEAAoE;YACpE,qEAAqE;YACrE,iEAAiE;YACjEuB,cAAc,MAAM5C,qBAClB8C,WACAL,OACAoB,UACA,IAAIa,QACJpB,KACA,mEAAmE;YACnE,qCAAqC;YACrC;gBAAED,KAAKH,QAAQG,GAAG;gBAAEV,QAAQA,UAAU;YAAK;QAE/C,EAAE,OAAOtB,OAAO;YACd,qEAAqE;YACrE,0EAA0E;YAC1E,sCAAsC;YACtCsD,QAAQtD,KAAK,CAAC,6BAA6BA;YAC3C,OAAOG,IACJG,MAAM,CAAC,KACPC,IAAI,CAAC;gBAAEP,OAAO;YAAuC;QAC1D;QACA,wEAAwE;QACxE,gEAAgE;QAChE1B,oBAAoBmD,WAAWL,OAAOS,QAAQG,GAAG,EAAET;QACnD,IAAI,CAACA,YAAYuB,OAAO,EAAE;gBAkCpBS;YAjCJ,MAAMC,YAAYjC,YAAYiC,SAAS;YACvC,mEAAmE;YACnE,oEAAoE;YACpE,IAAIA,cAAc,aAAa;oBAEGjC,gCAAAA;gBADhC,OAAOpB,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;oBAC1BP,OAAOtC,wBAAuB6D,yBAAAA,YAAYkC,SAAS,sBAArBlC,iCAAAA,uBAAuBmC,OAAO,qBAA9BnC,+BAAgCoC,KAAK;oBACnEC,QAAQ;oBACRC,OAAOrF,kBAAkB+C;oBACzBuC,OAAOlG,aAAa2D;gBACtB;YACF;YACA,qEAAqE;YACrE,+DAA+D;YAC/D,qEAAqE;YACrE,iEAAiE;YACjE,mEAAmE;YACnE,WAAW;YACX,+DAA+D;YAC/D,mEAAmE;YACnE,mEAAmE;YACnE,kEAAkE;YAClE,MAAMwC,UAAU1F,4BAA4BkD;YAC5C,IAAIwC,SAAS;gBACX,OAAO5D,IAAIG,MAAM,CAACyD,QAAQzD,MAAM,EAAEC,IAAI,CAAC;oBACrCP,OAAO+D,QAAQhD,IAAI;oBACnB6C,QAAQ;oBACRC,OAAOrF,kBAAkB+C;oBACzBuC,OAAOlG,aAAa2D;gBACtB;YACF;YACA,MAAMgC,aAAa/F,4BAA4ByE,KAAKuB;YACpD,OAAOrD,IAAIG,MAAM,CAACiD,aAAa,MAAM,KAAKhD,IAAI,CAAC;gBAC7CP,KAAK,GACHuD,SAAAA,qBAAAA,aACA,gEAAgE;gBAChE,8BAA8B;gBAC9BhG,2BAA2BiG,sBAH3BD,SAIA;gBACF,mEAAmE;gBACnEM,OAAOrF,kBAAkB+C;gBACzBuC,OAAOlG,aAAa2D;YACtB;QACF;QAEA,MAAMyC,OAA4BxB,WAAW,aAAa;QAC1D,+DAA+D;QAC/D,yEAAyE;QACzE,wEAAwE;QACxE,yEAAyE;QACzE,kCAAkC;QAClC,MAAMb,OAAOJ;QACb,MAAM0C,SAAStG,qBAAqB6B,sBAAsBD,OAAOuB,wBAAAA,KAAMoD,KAAK,EAAE;YAC5EC,MAAM1G,qBAAqBwE;YAC3BmC,eAAe,YAAEzC,kBAAAA,KAAK8B,SAAS,qBAAd9B,gBAAgB0C,MAAM,oBAAI;YAC3CC,SAAS,YAAE3C,mBAAAA,KAAK8B,SAAS,qBAAd9B,iBAAgB2C,SAAS,oBAAI;QAC1C;QACA,MAAMJ,iBAAQD,0BAAAA,OAAQC,KAAK,oBAAI5E,mBAAmBC;QAClD,mEAAmE,GACnE,MAAMgF,WAAW,CAACC;;mBAChB5G,aAAa+D,MAAM;gBACjB8C,aAAanH,qBAAqBiB,sBAAsBiG,OAAOE,KAAK,EAAER;gBACtEA,OAAO;oBAAES,IAAIT;oBAAOU,IAAI,UAAEX,0BAAAA,OAAQW,IAAI,mBAAI;gBAAK;YACjD;;QACF,8DAA8D,GAC9D,sEAAsE;QACtE,oEAAoE;QACpE,gDAAgD;QAChD,MAAMC,gBAAOtD,+BAAAA,YAAasD,IAAI,oBAAI;QAClC,MAAMf,QAAQ,CAACU,SACb/F,iBAAiBgD,WAAWL,OAAO;gBACjC0D,OAAO,CAAC,eAAe,EAAEvF,MAAM;gBAC/B+B,QAAQA,UAAU;gBAClB4C;gBACAF;gBACAU,OAAOF,OAAOE,KAAK;gBACnBK,WAAW,EAAE;gBACbC,YAAYR,OAAOQ,UAAU;gBAC7BH;YACF,GAAGI,KAAK,CAAC,CAACjF,QAAUsD,QAAQtD,KAAK,CAAC,+BAA+BA;QAEnE;;;;;;;;KAQC,GACD,MAAMkF,MAAM,OACVC,SACAvF,WACAwF;YAEA,IAAI;gBACF,MAAMZ,SAAS,MAAMvF,aAAa;oBAChCiF;oBACAtE;oBACAyF,QAAQ;oBACR,8DAA8D;oBAC9D,kEAAkE;oBAClE,kDAAkD;oBAClDC,QAAQpG,uBAAuBK;oBAC/BgG,UAAU;wBAAC;4BAAEC,MAAM;4BAAQL;wBAAQ;qBAAE;mBACjCC,QAAQ;oBAAEA;gBAAM,IAAI,CAAC;gBAE3B5D,mBAAmB;gBACnB,MAAMsC,MAAMU;gBACZ,OAAOA;YACT,EAAE,OAAOxE,OAAO;gBACd,IAAI,CAAEA,CAAAA,iBAAiBjB,eAAc,GAAI,MAAMiB;gBAC/CwB,mBAAmB;gBACnB,MAAMiE,mBAAmBhE,WAAWL,OAAOG;gBAC3CA,cAAc;gBACdpB,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;oBAAEP,OAAOA,MAAM0F,OAAO;gBAAC;gBAC5C,OAAO;YACT;QACF;QAEA,uEAAuE;QACvE,gEAAgE;QAChE,qEAAqE;QACrE,IAAInG,SAAS,WAAW;gBAmBOsC;YAlB7B,MAAM2C,SAAS,MAAMU,IACnB,CAAC,mBAAmB,EAAEjE,aAAa,EACnCtB,oBACA;gBAACR;aAAoB;YAEvB,IAAI,CAACqF,QAAQ;YACb,IAAIA,OAAOmB,IAAI,KAAK,WAAW;gBAC7B,OAAOxF,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC,aAAKR;oBAAS+D,OAAOS,SAASC;;YAC5D;YACA,MAAMoB,OAAOxG,kBAAkBoF;YAC/B,IAAIoB,KAAKtF,MAAM,KAAK,MAAM;gBACxB,mEAAmE;gBACnE,kEAAkE;gBAClE,OAAOH,IAAIG,MAAM,CAACsF,KAAKtF,MAAM,KAAK,eAAe,MAAM,KAAKC,IAAI,CAAC;oBAAEP,OAAO4F,KAAK5F,KAAK;gBAAC;YACvF;YACA,wEAAwE;YACxE,qEAAqE;YACrE,MAAMpB,mBACJ;gBAAEoD,KAAKH,QAAQG,GAAG;gBAAE6D,KAAK,GAAEhE,iBAAAA,QAAQgE,KAAK,YAAbhE,iBAAiB;YAAK,GACjD;gBACET;gBACAE,QAAQA,UAAU;gBAClBwE,WAAW7C,OAAO8C,IAAI,CAACH,KAAKI,OAAO,CAACC,KAAK,EAAErF,MAAM;YACnD;YAEF,OAAOT,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;gBAAEyF,SAASJ,KAAKI,OAAO;gBAAElC,OAAOS,SAASC;YAAQ;QAC/E;QAEA,MAAMA,SAAS,MAAMU,IACnB3F,SAAS,SACL;YACE2B,SAAS,CAAC,OAAO,EAAEA,OAAO;YAC1BC,WAAW,CAAC,SAAS,EAAEA,SAAS;YAChCJ,QAAQ,CAAC,eAAe,EAAEA,MAAM;YAChC,CAAC,aAAa,EAAEE,aAAa;SAC9B,CACEiF,MAAM,CAACC,SACPC,IAAI,CAAC,UACRrF,OACE,CAAC,uBAAuB,EAAEA,KAAK,iBAAiB,EAAEE,aAAa,GAC/D,CAAC,yCAAyC,EAAEA,aAAa,EAC/D1B,SAAS,SAASM,kBAAkBC;QAEtC,IAAI,CAAC0E,QAAQ;QACb,IAAIA,OAAOmB,IAAI,KAAK,WAAW;YAC7B,OAAOxF,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC,aAAKR;gBAAS+D,OAAOS,SAASC;;QAC5D;QACA,MAAM6B,SAAS7B,OAAOzD,IAAI,CAACM,IAAI;QAC/B,IAAI,CAACgF,QAAQ;YACX,OAAOlG,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;gBAAEP,OAAO;gBAAqB8D,OAAOS,SAASC;YAAQ;QACpF;QACA,OAAOrE,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEQ,MAAMsF;YAAQvC,OAAOS,SAASC;QAAQ;IACtE,EAAE,OAAOxE,OAAO;QACdsD,QAAQtD,KAAK,CAACA;QACd,uEAAuE;QACvE,uEAAuE;QACvE,sEAAsE;QACtE,oEAAoE;QACpE,IAAIyB,aAAaF,eAAe,CAACC,kBAAkB;YACjD,MAAMiE,mBAAmBhE,WAAWL,OAAOG;QAC7C;QACA,OAAOpB,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEP,OAAO;QAAgB;IACvD;AACF,EAAC;AAED;;;;CAIC,GACD,eAAeyF,mBACbhE,SAAsC,EACtCL,KAAa,EACbG,WAA8B;IAE9B,MAAM7C,qBAAqB+C,WAAWL,OAAOG,aAAa0D,KAAK,CAAC,CAACjF,QAC/DsD,QAAQtD,KAAK,CAAC,qCAAqCA;AAEvD;AAEA,uEAAuE,GACvE,eAAeqC,eACblC,GAAsB,EACtBuD,OAAiB;IAEjB,MAAM4C,aAAa5C,QAAQtD,OAAO,CAACmG,GAAG,CAAC;IACvC,IAAID,YAAYnG,IAAIgD,SAAS,CAAC,eAAemD;IAC7C,MAAMxF,OAAO,MAAM4C,QAAQnD,IAAI,GAAG0E,KAAK,CAAC,IAAO,CAAA;YAAEjF,OAAO;QAAS,CAAA;IACjEG,IAAIG,MAAM,CAACoD,QAAQpD,MAAM,EAAEC,IAAI,CAACO;AAClC"}

package/src/lib/server/ai-crm-answer.d.ts

@@ -0,0 +1,30 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import { type AiCrmProposal } from '../model/ai-crm';
+/** The CRM resource and record an answer was written from, by what it answers. */
+export declare function aiCrmAnswerSubject(proposal: AiCrmProposal): {
+    resource: string;
+    id: string;
+};
+/** Whether an answer of this kind may be read by anyone other than the member who asked. */
+export declare function aiCrmAnswerShared(proposal: AiCrmProposal): boolean;
+export declare function GET(request: Request, context: {
+    params: Promise<{
+        jobId: string;
+    }>;
+}): Promise<Response>;
+export declare const dynamic = "force-dynamic";