@aglyn/plugins-ai 1.0.0-beta.143

package/src/lib/server/ai-crm-answer.js

@@ -0,0 +1,98 @@
+import { _ as _extends } from "@swc/helpers/_/_extends";
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ // lockdown-423: via libs/plugins/ai/src/lib/server/ai-jobs-gate.ts
+// The GET climbs `aiJobsGate`, whose lockdown rung is the verdict.
+import { AI_CRM_ANSWERS_COLLECTION, AI_CRM_FACTS_RESOURCES, AI_CRM_IMPORT_FACTS_RESOURCE, readAiCrmProposal } from "../model/ai-crm.js";
+import { aiCrmAccessRefusal } from "../jobs/ai-crm-access.js";
+import { aiJobsGate } from "./ai-jobs-gate.js";
+/**
+ * One CRM answer (AGL-2917): `GET /api/ai/crm/{jobId}?orgId=`.
+ *
+ * What a `crm` job wrote from a record is not on the job document, which
+ * every member of the workspace may read: it is in the org's `aiCrmAnswers`
+ * collection under the job's id, which no rule lets a client read, and this
+ * door is the one way to it. It climbs the jobs read gate — the release flag,
+ * the `aiGenerative` entitlement and the lockdown verdict — and then answers:
+ *
+ *  - a record's summary to any member the CRM lets read the record, since
+ *    the summary is the record's, asked once while its timeline is unchanged;
+ *  - an email draft or an import's matches only to the member who asked,
+ *    since each was written from what that member typed or chose;
+ *  - staff, as the CRM lets staff read a record.
+ *
+ * Either way the CRM is asked again, as the member reading, before anything
+ * is served: a member who lost the record since, or a workspace that switched
+ * the CRM off, is told the answer does not exist, as a job they cannot read is.
+ */ const ID = /^[A-Za-z0-9_-]{1,128}$/;
+const notFound = ()=>Response.json({
+        error: 'Not found'
+    }, {
+        status: 404
+    });
+/** The CRM resource and record an answer was written from, by what it answers. */ export function aiCrmAnswerSubject(proposal) {
+    return proposal.kind === 'mapping' ? {
+        resource: AI_CRM_IMPORT_FACTS_RESOURCE,
+        id: proposal.collection
+    } : {
+        resource: AI_CRM_FACTS_RESOURCES[proposal.record.kind],
+        id: proposal.record.id
+    };
+}
+/** Whether an answer of this kind may be read by anyone other than the member who asked. */ export function aiCrmAnswerShared(proposal) {
+    return proposal.kind === 'record';
+}
+export async function GET(request, context) {
+    var _url_searchParams_get, _answer_data, _record_hostId, _record_hostId1;
+    const url = new URL(request.url);
+    const gate = await aiJobsGate(request, (_url_searchParams_get = url.searchParams.get('orgId')) != null ? _url_searchParams_get : '');
+    if (gate instanceof Response) return gate;
+    const { jobId } = await context.params;
+    if (!ID.test(jobId)) return notFound();
+    const answer = await gate.firestore.collection('orgs').doc(gate.orgId).collection(AI_CRM_ANSWERS_COLLECTION).doc(jobId).get();
+    if (!answer.exists) return notFound();
+    const record = (_answer_data = answer.data()) != null ? _answer_data : {};
+    const proposal = readAiCrmProposal(record.proposal);
+    if (!proposal || typeof record.createdBy !== 'string') return notFound();
+    if (!gate.staff && !aiCrmAnswerShared(proposal) && record.createdBy !== gate.uid) return notFound();
+    const refusal = await aiCrmAccessRefusal(_extends({
+        firestore: gate.firestore,
+        orgId: gate.orgId,
+        hostId: (_record_hostId = record.hostId) != null ? _record_hostId : null
+    }, aiCrmAnswerSubject(proposal), {
+        org: gate.org,
+        uid: gate.uid,
+        staff: gate.staff
+    }));
+    if (refusal) return notFound();
+    const wire = {
+        jobId,
+        hostId: (_record_hostId1 = record.hostId) != null ? _record_hostId1 : null,
+        createdBy: record.createdBy,
+        proposal
+    };
+    return Response.json({
+        answer: wire
+    }, {
+        status: 200,
+        headers: {
+            'Cache-Control': 'no-store'
+        }
+    });
+}
+export const dynamic = 'force-dynamic';
+
+//# sourceMappingURL=ai-crm-answer.js.map

package/src/lib/server/ai-crm-answer.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../libs/plugins/ai/src/lib/server/ai-crm-answer.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n// lockdown-423: via libs/plugins/ai/src/lib/server/ai-jobs-gate.ts\n// The GET climbs `aiJobsGate`, whose lockdown rung is the verdict.\n\nimport {\n  AI_CRM_ANSWERS_COLLECTION,\n  AI_CRM_FACTS_RESOURCES,\n  AI_CRM_IMPORT_FACTS_RESOURCE,\n  readAiCrmProposal,\n  type AiCrmAnswerRecord,\n  type AiCrmAnswerWire,\n  type AiCrmProposal,\n} from '../model/ai-crm'\nimport { aiCrmAccessRefusal } from '../jobs/ai-crm-access'\nimport { aiJobsGate } from './ai-jobs-gate'\n\n/**\n * One CRM answer (AGL-2917): `GET /api/ai/crm/{jobId}?orgId=`.\n *\n * What a `crm` job wrote from a record is not on the job document, which\n * every member of the workspace may read: it is in the org's `aiCrmAnswers`\n * collection under the job's id, which no rule lets a client read, and this\n * door is the one way to it. It climbs the jobs read gate — the release flag,\n * the `aiGenerative` entitlement and the lockdown verdict — and then answers:\n *\n *  - a record's summary to any member the CRM lets read the record, since\n *    the summary is the record's, asked once while its timeline is unchanged;\n *  - an email draft or an import's matches only to the member who asked,\n *    since each was written from what that member typed or chose;\n *  - staff, as the CRM lets staff read a record.\n *\n * Either way the CRM is asked again, as the member reading, before anything\n * is served: a member who lost the record since, or a workspace that switched\n * the CRM off, is told the answer does not exist, as a job they cannot read is.\n */\n\nconst ID = /^[A-Za-z0-9_-]{1,128}$/\n\nconst notFound = () => Response.json({ error: 'Not found' }, { status: 404 })\n\n/** The CRM resource and record an answer was written from, by what it answers. */\nexport function aiCrmAnswerSubject(proposal: AiCrmProposal): { resource: string; id: string } {\n  return proposal.kind === 'mapping'\n    ? { resource: AI_CRM_IMPORT_FACTS_RESOURCE, id: proposal.collection }\n    : { resource: AI_CRM_FACTS_RESOURCES[proposal.record.kind], id: proposal.record.id }\n}\n\n/** Whether an answer of this kind may be read by anyone other than the member who asked. */\nexport function aiCrmAnswerShared(proposal: AiCrmProposal): boolean {\n  return proposal.kind === 'record'\n}\n\nexport async function GET(\n  request: Request,\n  context: { params: Promise<{ jobId: string }> },\n): Promise<Response> {\n  const url = new URL(request.url)\n  const gate = await aiJobsGate(request, url.searchParams.get('orgId') ?? '')\n  if (gate instanceof Response) return gate\n  const { jobId } = await context.params\n  if (!ID.test(jobId)) return notFound()\n  const answer = await gate.firestore\n    .collection('orgs')\n    .doc(gate.orgId)\n    .collection(AI_CRM_ANSWERS_COLLECTION)\n    .doc(jobId)\n    .get()\n  if (!answer.exists) return notFound()\n  const record = (answer.data() ?? {}) as Partial<AiCrmAnswerRecord>\n  const proposal = readAiCrmProposal(record.proposal)\n  if (!proposal || typeof record.createdBy !== 'string') return notFound()\n  if (!gate.staff && !aiCrmAnswerShared(proposal) && record.createdBy !== gate.uid) return notFound()\n  const refusal = await aiCrmAccessRefusal({\n    firestore: gate.firestore,\n    orgId: gate.orgId,\n    hostId: record.hostId ?? null,\n    ...aiCrmAnswerSubject(proposal),\n    org: gate.org,\n    uid: gate.uid,\n    staff: gate.staff,\n  })\n  if (refusal) return notFound()\n  const wire: AiCrmAnswerWire = {\n    jobId,\n    hostId: record.hostId ?? null,\n    createdBy: record.createdBy,\n    proposal,\n  }\n  return Response.json({ answer: wire }, { status: 200, headers: { 'Cache-Control': 'no-store' } })\n}\n\nexport const dynamic = 'force-dynamic'\n"],"names":["AI_CRM_ANSWERS_COLLECTION","AI_CRM_FACTS_RESOURCES","AI_CRM_IMPORT_FACTS_RESOURCE","readAiCrmProposal","aiCrmAccessRefusal","aiJobsGate","ID","notFound","Response","json","error","status","aiCrmAnswerSubject","proposal","kind","resource","id","collection","record","aiCrmAnswerShared","GET","request","context","url","answer","URL","gate","searchParams","get","jobId","params","test","firestore","doc","orgId","exists","data","createdBy","staff","uid","refusal","hostId","org","wire","headers","dynamic"],"mappings":";AAAA;;;;;;;;;;;;;;;CAeC,GAED,mEAAmE;AACnE,mEAAmE;AAEnE,SACEA,yBAAyB,EACzBC,sBAAsB,EACtBC,4BAA4B,EAC5BC,iBAAiB,QAIZ,qBAAiB;AACxB,SAASC,kBAAkB,QAAQ,2BAAuB;AAC1D,SAASC,UAAU,QAAQ,oBAAgB;AAE3C;;;;;;;;;;;;;;;;;;CAkBC,GAED,MAAMC,KAAK;AAEX,MAAMC,WAAW,IAAMC,SAASC,IAAI,CAAC;QAAEC,OAAO;IAAY,GAAG;QAAEC,QAAQ;IAAI;AAE3E,gFAAgF,GAChF,OAAO,SAASC,mBAAmBC,QAAuB;IACxD,OAAOA,SAASC,IAAI,KAAK,YACrB;QAAEC,UAAUb;QAA8Bc,IAAIH,SAASI,UAAU;IAAC,IAClE;QAAEF,UAAUd,sBAAsB,CAACY,SAASK,MAAM,CAACJ,IAAI,CAAC;QAAEE,IAAIH,SAASK,MAAM,CAACF,EAAE;IAAC;AACvF;AAEA,0FAA0F,GAC1F,OAAO,SAASG,kBAAkBN,QAAuB;IACvD,OAAOA,SAASC,IAAI,KAAK;AAC3B;AAEA,OAAO,eAAeM,IACpBC,OAAgB,EAChBC,OAA+C;QAGRC,uBAWvBC,cAONN,gBASAA;IA5BV,MAAMK,MAAM,IAAIE,IAAIJ,QAAQE,GAAG;IAC/B,MAAMG,OAAO,MAAMrB,WAAWgB,UAASE,wBAAAA,IAAII,YAAY,CAACC,GAAG,CAAC,oBAArBL,wBAAiC;IACxE,IAAIG,gBAAgBlB,UAAU,OAAOkB;IACrC,MAAM,EAAEG,KAAK,EAAE,GAAG,MAAMP,QAAQQ,MAAM;IACtC,IAAI,CAACxB,GAAGyB,IAAI,CAACF,QAAQ,OAAOtB;IAC5B,MAAMiB,SAAS,MAAME,KAAKM,SAAS,CAChCf,UAAU,CAAC,QACXgB,GAAG,CAACP,KAAKQ,KAAK,EACdjB,UAAU,CAACjB,2BACXiC,GAAG,CAACJ,OACJD,GAAG;IACN,IAAI,CAACJ,OAAOW,MAAM,EAAE,OAAO5B;IAC3B,MAAMW,UAAUM,eAAAA,OAAOY,IAAI,cAAXZ,eAAiB,CAAC;IAClC,MAAMX,WAAWV,kBAAkBe,OAAOL,QAAQ;IAClD,IAAI,CAACA,YAAY,OAAOK,OAAOmB,SAAS,KAAK,UAAU,OAAO9B;IAC9D,IAAI,CAACmB,KAAKY,KAAK,IAAI,CAACnB,kBAAkBN,aAAaK,OAAOmB,SAAS,KAAKX,KAAKa,GAAG,EAAE,OAAOhC;IACzF,MAAMiC,UAAU,MAAMpC,mBAAmB;QACvC4B,WAAWN,KAAKM,SAAS;QACzBE,OAAOR,KAAKQ,KAAK;QACjBO,MAAM,GAAEvB,iBAAAA,OAAOuB,MAAM,YAAbvB,iBAAiB;OACtBN,mBAAmBC;QACtB6B,KAAKhB,KAAKgB,GAAG;QACbH,KAAKb,KAAKa,GAAG;QACbD,OAAOZ,KAAKY,KAAK;;IAEnB,IAAIE,SAAS,OAAOjC;IACpB,MAAMoC,OAAwB;QAC5Bd;QACAY,MAAM,GAAEvB,kBAAAA,OAAOuB,MAAM,YAAbvB,kBAAiB;QACzBmB,WAAWnB,OAAOmB,SAAS;QAC3BxB;IACF;IACA,OAAOL,SAASC,IAAI,CAAC;QAAEe,QAAQmB;IAAK,GAAG;QAAEhC,QAAQ;QAAKiC,SAAS;YAAE,iBAAiB;QAAW;IAAE;AACjG;AAEA,OAAO,MAAMC,UAAU,gBAAe"}

package/src/lib/server/ai-generate-component.d.ts

@@ -0,0 +1,111 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import { type AssistEditCanvasContext, type AssistEditCanvasNode, type AssistEditComponentProp, type AssistEditPropBinding, type AssistEditProposal, type AssistEditSaveAsComponentOp } from '../model/assist-edit';
+import type { AiSystemBlock, AiTool } from '../providers/contract';
+import { type AiGenerationCheckResult } from '../runtime/ai-doctrine';
+/**
+ * Save the selection as a reusable component, with AI (AGL-2908):
+ * `POST /api/ai/generate/component { orgId, hostId, route, canvas, name }`.
+ *
+ * The second entry point of the component job. The first builds a component
+ * from a brief; this one reads a section the person already has and proposes
+ * which of its values become properties — the judgment a person makes in
+ * FILE ▸ Properties…, made from the same evidence.
+ *
+ * ## What it sends, and nothing else
+ *
+ * The outline of the open page, component or layout — its elements, their
+ * names, their shortened settings and text, and the selected element's own
+ * styles — and the name the member typed for the component. It reads no
+ * other page, no entry, no product, no contact and no site inventory, so
+ * none of them is sent. The `AI_DOORS` entry says so.
+ *
+ * ## It answers references, never a document
+ *
+ * `props[]` without defaults, and `bindings[]` of `{ nodeId, field, prop }`.
+ * The outline shortens every string, so the server has no full value to make
+ * a default out of and never invents one: the client reads each bound
+ * field's current value off the live canvas as it writes the token in, which
+ * is what makes the instance render exactly what was there.
+ *
+ * ## It writes nothing
+ *
+ * The answer is an `AssistEditProposal` carrying one `saveAsComponent` op,
+ * shown on AGL-2906's own card. The member applies it, and the apply creates
+ * the component through the host resources route and swaps the subtree for
+ * an instance on the open draft. This door touches no document at all.
+ *
+ * ## The rungs
+ *
+ * `aiGateLadder`: the `aiGenerative` entitlement, `release_ai_generative`,
+ * the `ai-generate` lockdown switch, `ai.generate` on the site the body
+ * named, a per-uid window and a reservation. A refusal before the model runs
+ * hands the reservation back.
+ */
+/** The name of the structured-output tool the proposal arrives through. */
+export declare const AI_COMPONENT_SELECTION_TOOL_NAME = "propose_component_from_selection";
+/** The doctrine kind this step runs under; it has no tree of its own to read. */
+export declare const AI_COMPONENT_SELECTION_KIND = "component-selection";
+/**
+ * The answer ceiling. A proposal is a property list and a binding list —
+ * references, never a tree — so it needs a fraction of what the from-brief
+ * step's answer does.
+ */
+export declare const AI_COMPONENT_SELECTION_MAX_TOKENS = 4000;
+/** The element ids of the selection's subtree, the selection included. */
+export declare function aiComponentSelectionIds(context: AssistEditCanvasContext, selectedId: string): Set<string>;
+/** Why this selection cannot become a component; `null` when it can. */
+export declare function aiComponentSelectionRefusal(context: AssistEditCanvasContext, selectedId: string | null): string | null;
+/**
+ * The strict tool the proposal arrives through. Every field is required and
+ * flat — optional properties are not portable across strict tool
+ * implementations — so a kind with no answers sends `[]`.
+ */
+export declare function aiComponentSelectionTool(): AiTool;
+/** What the model proposed, once it has been read and held to the selection. */
+export interface AiComponentSelectionProposal {
+    summary: string;
+    props: AssistEditComponentProp[];
+    bindings: AssistEditPropBinding[];
+}
+/**
+ * The proposal, held to the selection it was made from.
+ *
+ * A CLOSED WORLD, like the edit rung's: every element named is one the
+ * outline described, inside the selection. A binding outside it would tie a
+ * property of the new component to an element the component does not
+ * contain, and the token would render as its own marker on the page.
+ *
+ * Every other rule is the from-brief step's own, read from the same module,
+ * so the two paths cannot disagree about which property fits which field.
+ */
+export declare function checkAiComponentSelection(answer: Record<string, unknown>, context: AssistEditCanvasContext, selectedId: string): AiGenerationCheckResult<AiComponentSelectionProposal>;
+/** Byte-identical on every request, so the block caches. */
+export declare const AI_COMPONENT_SELECTION_INSTRUCTIONS: AiSystemBlock[];
+/** The outline and the selection, as the question the model answers. */
+export declare function aiComponentSelectionPrompt(context: AssistEditCanvasContext, selectedId: string, name: string): string;
+/** What the door answers on success. */
+export interface AiComponentSelectionAnswer {
+    edit: AssistEditProposal;
+    exchangeId: string | null;
+}
+/**
+ * The proposal for one selection, as the op the card applies. Exported for
+ * the spec, which drives it with a recorded answer and never a live model.
+ */
+export declare function aiComponentSelectionOp(proposal: AiComponentSelectionProposal, selection: AssistEditCanvasNode, name: string): AssistEditSaveAsComponentOp;
+export declare function POST(request: Request): Promise<Response>;