@aglyn/plugins-ai 1.0.0-beta.143

package/src/lib/server/ai-insight-digest-route.js

@@ -0,0 +1,156 @@
+import { _ as _extends } from "@swc/helpers/_/_extends";
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ // lockdown-423: exempt — server-internal cron (x-cron-secret) with no user
+// caller; it asks each workspace's ai-generate pause before it creates a job,
+// and the jobs it creates are held by the same pause on the beat.
+import { writeCronBeat } from "@aglyn/aglyn/app-utils/health-report";
+import { rateLimitedRetryAtMs, sendEmail } from "@aglyn/shared-util-email";
+import { filterSuppressedEmails } from "@aglyn/tenant-data-admin/server/email-suppression";
+import { meterPlatformEmail } from "@aglyn/tenant-data-admin/server/email-metering";
+import { firebaseAdmin } from "@aglyn/tenant-data-admin/server/firebase-admin";
+import { featureLockdownRefusal } from "@aglyn/tenant-data-admin/server/lockdown";
+import { notifyUsers } from "@aglyn/tenant-data-admin/server/notifications";
+import { listOrgMembers, memberHasPermissionOnHost } from "@aglyn/tenant-data-admin/server/organizations";
+import { getServerReleaseFlagValues } from "@aglyn/tenant-data-admin/server/release-flags";
+import { safeEqual } from "@aglyn/tenant-data-admin/server/safe-equal";
+import { runAiInsightDigestSweep } from "../insights/ai-insight-digest.js";
+/**
+ * The weekly insights' scheduled route (AGL-2915):
+ * `POST /api/admin/ai-insights-digest`.
+ *
+ * Cloud Scheduler calls it at 06:00 and 14:00 UTC through
+ * `consoleAiInsightsDigest` in `cloud/functions`, on the console's
+ * `CRON_SECRET`: 501 while the secret is unset, 401 without it. Monday's
+ * first run makes the week's digests, which the AI jobs beat then writes, and
+ * every run after it delivers what is written — see `ai-insight-digest.ts`.
+ * `/api/admin/` is the path because the console's edge lets the cron secret's
+ * header through there. It stamps `ai-insights-digest` for
+ * `/api/health/crons` on every authorized call.
+ */ export async function POST(request) {
+    if (request.method !== 'POST') {
+        return Response.json({
+            error: 'Method not allowed'
+        }, {
+            status: 405
+        });
+    }
+    const secret = process.env.CRON_SECRET;
+    if (!secret) {
+        return Response.json({
+            error: 'The weekly insights are not configured (CRON_SECRET).'
+        }, {
+            status: 501
+        });
+    }
+    if (!safeEqual(request.headers.get('x-cron-secret'), secret) && !safeEqual(request.headers.get('authorization'), `Bearer ${secret}`)) {
+        return Response.json({
+            error: 'Unauthenticated'
+        }, {
+            status: 401
+        });
+    }
+    const firestore = firebaseAdmin.app().firestore();
+    // The inventory row's id, written out: `cron-beat-wiring.spec.ts` finds a
+    // job's stamp by the quoted id beside the call.
+    await writeCronBeat(firestore, 'ai-insights-digest');
+    let cursor = null;
+    try {
+        const body = await request.json();
+        const raw = body == null ? void 0 : body.cursor;
+        cursor = typeof raw === 'string' && raw && !raw.includes('/') ? raw : null;
+    } catch (unused) {
+    // A bodyless POST is the first call of a run.
+    }
+    try {
+        var _process_env_NEXT_PUBLIC_CONSOLE_URL;
+        // The platform switch holds the whole run, as it holds the jobs beat.
+        if (await featureLockdownRefusal({
+            feature: 'ai-generate'
+        })) {
+            return Response.json({
+                held: true,
+                done: true,
+                nextCursor: null
+            }, {
+                status: 200
+            });
+        }
+        const flags = await getServerReleaseFlagValues();
+        const deps = {
+            firestore,
+            now: new Date(),
+            flagValue: flags['release_ai_generative'],
+            listMembers: listOrgMembers,
+            mayGenerate: (orgId, hostId, member)=>memberHasPermissionOnHost(orgId, hostId, member, 'ai.generate'),
+            paused: async (orgId)=>Boolean(await featureLockdownRefusal({
+                    feature: 'ai-generate',
+                    orgId
+                })),
+            notify: (uid, payload)=>notifyUsers([
+                    uid
+                ], _extends({
+                    type: 'content.insightsDigest'
+                }, payload)),
+            send: async (email)=>{
+                const recipients = await filterSuppressedEmails([
+                    email.to
+                ], firestore);
+                if (!recipients.length) return {
+                    sent: false,
+                    rateLimited: false
+                };
+                const result = await sendEmail({
+                    to: recipients,
+                    subject: email.subject,
+                    text: email.text,
+                    fromName: email.fromName,
+                    context: 'ai-insights-digest',
+                    priority: 'bulk'
+                });
+                if (result.sent) {
+                    await meterPlatformEmail().catch(()=>undefined);
+                    return {
+                        sent: true,
+                        rateLimited: false
+                    };
+                }
+                return {
+                    sent: false,
+                    rateLimited: rateLimitedRetryAtMs(result) !== null
+                };
+            },
+            // An email link must be absolute; with no console URL configured the
+            // digest says where to look without one.
+            consoleOrigin: ((_process_env_NEXT_PUBLIC_CONSOLE_URL = process.env.NEXT_PUBLIC_CONSOLE_URL) != null ? _process_env_NEXT_PUBLIC_CONSOLE_URL : '').trim().replace(/\/+$/, '')
+        };
+        const report = await runAiInsightDigestSweep(deps, {
+            cursor
+        });
+        return Response.json(report, {
+            status: 200
+        });
+    } catch (error) {
+        console.error('ai insights digest run failed', error);
+        return Response.json({
+            error: 'The weekly insights run failed'
+        }, {
+            status: 500
+        });
+    }
+}
+
+//# sourceMappingURL=ai-insight-digest-route.js.map

package/src/lib/server/ai-insight-digest-route.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../libs/plugins/ai/src/lib/server/ai-insight-digest-route.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n// lockdown-423: exempt — server-internal cron (x-cron-secret) with no user\n// caller; it asks each workspace's ai-generate pause before it creates a job,\n// and the jobs it creates are held by the same pause on the beat.\n\nimport { writeCronBeat } from '@aglyn/aglyn/app-utils/health-report'\nimport { rateLimitedRetryAtMs, sendEmail } from '@aglyn/shared-util-email'\nimport { filterSuppressedEmails } from '@aglyn/tenant-data-admin/server/email-suppression'\nimport { meterPlatformEmail } from '@aglyn/tenant-data-admin/server/email-metering'\nimport { firebaseAdmin } from '@aglyn/tenant-data-admin/server/firebase-admin'\nimport { featureLockdownRefusal } from '@aglyn/tenant-data-admin/server/lockdown'\nimport { notifyUsers } from '@aglyn/tenant-data-admin/server/notifications'\nimport { listOrgMembers, memberHasPermissionOnHost } from '@aglyn/tenant-data-admin/server/organizations'\nimport { getServerReleaseFlagValues } from '@aglyn/tenant-data-admin/server/release-flags'\nimport { safeEqual } from '@aglyn/tenant-data-admin/server/safe-equal'\nimport {\n  AI_INSIGHTS_DIGEST_CRON_ID,\n  runAiInsightDigestSweep,\n  type AiInsightDigestDeps,\n} from '../insights/ai-insight-digest'\n\n/**\n * The weekly insights' scheduled route (AGL-2915):\n * `POST /api/admin/ai-insights-digest`.\n *\n * Cloud Scheduler calls it at 06:00 and 14:00 UTC through\n * `consoleAiInsightsDigest` in `cloud/functions`, on the console's\n * `CRON_SECRET`: 501 while the secret is unset, 401 without it. Monday's\n * first run makes the week's digests, which the AI jobs beat then writes, and\n * every run after it delivers what is written — see `ai-insight-digest.ts`.\n * `/api/admin/` is the path because the console's edge lets the cron secret's\n * header through there. It stamps `ai-insights-digest` for\n * `/api/health/crons` on every authorized call.\n */\nexport async function POST(request: Request): Promise<Response> {\n  if (request.method !== 'POST') {\n    return Response.json({ error: 'Method not allowed' }, { status: 405 })\n  }\n  const secret = process.env.CRON_SECRET\n  if (!secret) {\n    return Response.json({ error: 'The weekly insights are not configured (CRON_SECRET).' }, { status: 501 })\n  }\n  if (\n    !safeEqual(request.headers.get('x-cron-secret'), secret) &&\n    !safeEqual(request.headers.get('authorization'), `Bearer ${secret}`)\n  ) {\n    return Response.json({ error: 'Unauthenticated' }, { status: 401 })\n  }\n  const firestore = firebaseAdmin.app().firestore()\n  // The inventory row's id, written out: `cron-beat-wiring.spec.ts` finds a\n  // job's stamp by the quoted id beside the call.\n  await writeCronBeat(firestore, 'ai-insights-digest' satisfies typeof AI_INSIGHTS_DIGEST_CRON_ID)\n\n  let cursor: string | null = null\n  try {\n    const body = (await request.json()) as { cursor?: unknown } | null\n    const raw = body?.cursor\n    cursor = typeof raw === 'string' && raw && !raw.includes('/') ? raw : null\n  } catch {\n    // A bodyless POST is the first call of a run.\n  }\n\n  try {\n    // The platform switch holds the whole run, as it holds the jobs beat.\n    if (await featureLockdownRefusal({ feature: 'ai-generate' })) {\n      return Response.json({ held: true, done: true, nextCursor: null }, { status: 200 })\n    }\n    const flags = await getServerReleaseFlagValues()\n    const deps: AiInsightDigestDeps = {\n      firestore,\n      now: new Date(),\n      flagValue: flags['release_ai_generative'],\n      listMembers: listOrgMembers,\n      mayGenerate: (orgId, hostId, member) => memberHasPermissionOnHost(orgId, hostId, member, 'ai.generate'),\n      paused: async (orgId) => Boolean(await featureLockdownRefusal({ feature: 'ai-generate', orgId })),\n      notify: (uid, payload) => notifyUsers([uid], { type: 'content.insightsDigest', ...payload }),\n      send: async (email) => {\n        const recipients = await filterSuppressedEmails([email.to], firestore)\n        if (!recipients.length) return { sent: false, rateLimited: false }\n        const result = await sendEmail({\n          to: recipients,\n          subject: email.subject,\n          text: email.text,\n          fromName: email.fromName,\n          context: 'ai-insights-digest',\n          priority: 'bulk',\n        })\n        if (result.sent) {\n          await meterPlatformEmail().catch(() => undefined)\n          return { sent: true, rateLimited: false }\n        }\n        return { sent: false, rateLimited: rateLimitedRetryAtMs(result) !== null }\n      },\n      // An email link must be absolute; with no console URL configured the\n      // digest says where to look without one.\n      consoleOrigin: (process.env.NEXT_PUBLIC_CONSOLE_URL ?? '').trim().replace(/\\/+$/, ''),\n    }\n    const report = await runAiInsightDigestSweep(deps, { cursor })\n    return Response.json(report, { status: 200 })\n  } catch (error) {\n    console.error('ai insights digest run failed', error)\n    return Response.json({ error: 'The weekly insights run failed' }, { status: 500 })\n  }\n}\n"],"names":["writeCronBeat","rateLimitedRetryAtMs","sendEmail","filterSuppressedEmails","meterPlatformEmail","firebaseAdmin","featureLockdownRefusal","notifyUsers","listOrgMembers","memberHasPermissionOnHost","getServerReleaseFlagValues","safeEqual","runAiInsightDigestSweep","POST","request","method","Response","json","error","status","secret","process","env","CRON_SECRET","headers","get","firestore","app","cursor","body","raw","includes","feature","held","done","nextCursor","flags","deps","now","Date","flagValue","listMembers","mayGenerate","orgId","hostId","member","paused","Boolean","notify","uid","payload","type","send","email","recipients","to","length","sent","rateLimited","result","subject","text","fromName","context","priority","catch","undefined","consoleOrigin","NEXT_PUBLIC_CONSOLE_URL","trim","replace","report","console"],"mappings":";AAAA;;;;;;;;;;;;;;;CAeC,GAED,2EAA2E;AAC3E,8EAA8E;AAC9E,kEAAkE;AAElE,SAASA,aAAa,QAAQ,uCAAsC;AACpE,SAASC,oBAAoB,EAAEC,SAAS,QAAQ,2BAA0B;AAC1E,SAASC,sBAAsB,QAAQ,oDAAmD;AAC1F,SAASC,kBAAkB,QAAQ,iDAAgD;AACnF,SAASC,aAAa,QAAQ,iDAAgD;AAC9E,SAASC,sBAAsB,QAAQ,2CAA0C;AACjF,SAASC,WAAW,QAAQ,gDAA+C;AAC3E,SAASC,cAAc,EAAEC,yBAAyB,QAAQ,gDAA+C;AACzG,SAASC,0BAA0B,QAAQ,gDAA+C;AAC1F,SAASC,SAAS,QAAQ,6CAA4C;AACtE,SAEEC,uBAAuB,QAElB,mCAA+B;AAEtC;;;;;;;;;;;;CAYC,GACD,OAAO,eAAeC,KAAKC,OAAgB;IACzC,IAAIA,QAAQC,MAAM,KAAK,QAAQ;QAC7B,OAAOC,SAASC,IAAI,CAAC;YAAEC,OAAO;QAAqB,GAAG;YAAEC,QAAQ;QAAI;IACtE;IACA,MAAMC,SAASC,QAAQC,GAAG,CAACC,WAAW;IACtC,IAAI,CAACH,QAAQ;QACX,OAAOJ,SAASC,IAAI,CAAC;YAAEC,OAAO;QAAwD,GAAG;YAAEC,QAAQ;QAAI;IACzG;IACA,IACE,CAACR,UAAUG,QAAQU,OAAO,CAACC,GAAG,CAAC,kBAAkBL,WACjD,CAACT,UAAUG,QAAQU,OAAO,CAACC,GAAG,CAAC,kBAAkB,CAAC,OAAO,EAAEL,QAAQ,GACnE;QACA,OAAOJ,SAASC,IAAI,CAAC;YAAEC,OAAO;QAAkB,GAAG;YAAEC,QAAQ;QAAI;IACnE;IACA,MAAMO,YAAYrB,cAAcsB,GAAG,GAAGD,SAAS;IAC/C,0EAA0E;IAC1E,gDAAgD;IAChD,MAAM1B,cAAc0B,WAAW;IAE/B,IAAIE,SAAwB;IAC5B,IAAI;QACF,MAAMC,OAAQ,MAAMf,QAAQG,IAAI;QAChC,MAAMa,MAAMD,wBAAAA,KAAMD,MAAM;QACxBA,SAAS,OAAOE,QAAQ,YAAYA,OAAO,CAACA,IAAIC,QAAQ,CAAC,OAAOD,MAAM;IACxE,EAAE,eAAM;IACN,8CAA8C;IAChD;IAEA,IAAI;YAiCgBT;QAhClB,sEAAsE;QACtE,IAAI,MAAMf,uBAAuB;YAAE0B,SAAS;QAAc,IAAI;YAC5D,OAAOhB,SAASC,IAAI,CAAC;gBAAEgB,MAAM;gBAAMC,MAAM;gBAAMC,YAAY;YAAK,GAAG;gBAAEhB,QAAQ;YAAI;QACnF;QACA,MAAMiB,QAAQ,MAAM1B;QACpB,MAAM2B,OAA4B;YAChCX;YACAY,KAAK,IAAIC;YACTC,WAAWJ,KAAK,CAAC,wBAAwB;YACzCK,aAAajC;YACbkC,aAAa,CAACC,OAAOC,QAAQC,SAAWpC,0BAA0BkC,OAAOC,QAAQC,QAAQ;YACzFC,QAAQ,OAAOH,QAAUI,QAAQ,MAAMzC,uBAAuB;oBAAE0B,SAAS;oBAAeW;gBAAM;YAC9FK,QAAQ,CAACC,KAAKC,UAAY3C,YAAY;oBAAC0C;iBAAI,EAAE;oBAAEE,MAAM;mBAA6BD;YAClFE,MAAM,OAAOC;gBACX,MAAMC,aAAa,MAAMnD,uBAAuB;oBAACkD,MAAME,EAAE;iBAAC,EAAE7B;gBAC5D,IAAI,CAAC4B,WAAWE,MAAM,EAAE,OAAO;oBAAEC,MAAM;oBAAOC,aAAa;gBAAM;gBACjE,MAAMC,SAAS,MAAMzD,UAAU;oBAC7BqD,IAAID;oBACJM,SAASP,MAAMO,OAAO;oBACtBC,MAAMR,MAAMQ,IAAI;oBAChBC,UAAUT,MAAMS,QAAQ;oBACxBC,SAAS;oBACTC,UAAU;gBACZ;gBACA,IAAIL,OAAOF,IAAI,EAAE;oBACf,MAAMrD,qBAAqB6D,KAAK,CAAC,IAAMC;oBACvC,OAAO;wBAAET,MAAM;wBAAMC,aAAa;oBAAM;gBAC1C;gBACA,OAAO;oBAAED,MAAM;oBAAOC,aAAazD,qBAAqB0D,YAAY;gBAAK;YAC3E;YACA,qEAAqE;YACrE,yCAAyC;YACzCQ,eAAe,EAAC9C,uCAAAA,QAAQC,GAAG,CAAC8C,uBAAuB,YAAnC/C,uCAAuC,IAAIgD,IAAI,GAAGC,OAAO,CAAC,QAAQ;QACpF;QACA,MAAMC,SAAS,MAAM3D,wBAAwByB,MAAM;YAAET;QAAO;QAC5D,OAAOZ,SAASC,IAAI,CAACsD,QAAQ;YAAEpD,QAAQ;QAAI;IAC7C,EAAE,OAAOD,OAAO;QACdsD,QAAQtD,KAAK,CAAC,iCAAiCA;QAC/C,OAAOF,SAASC,IAAI,CAAC;YAAEC,OAAO;QAAiC,GAAG;YAAEC,QAAQ;QAAI;IAClF;AACF"}

package/src/lib/server/ai-jobs-batch.d.ts

@@ -0,0 +1,48 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import { type AiSiteSubmissions } from '../model/ai-site-job';
+export declare const AI_SITE_BATCH_PLAN_REFUSAL: string;
+export interface AiSiteBatchSite {
+    hostId: string;
+    businessName: string;
+    city: string;
+    brand: string;
+}
+export interface CreateAiSiteBatchBody {
+    orgId: string;
+    brief: string;
+    businessType: string;
+    pages: number;
+    welcomeEmail: boolean;
+    /**
+     * Where every site in the run routes its contact form's submissions
+     * (AGL-2918); `null` where the caller did not say, which leaves each form
+     * step's own proposal standing as it always did.
+     *
+     * One answer for the whole run, because a batch is one brief built again
+     * and again: the forms it makes are the same form, and twenty of them
+     * routed by a model's guess is the run where a wrong default costs most.
+     */
+    submissions: AiSiteSubmissions | null;
+    sites: AiSiteBatchSite[];
+    model: string | null;
+}
+/** Validate + clamp the request body; a string names what is wrong. */
+export declare function parseAiSiteBatchBody(payload: unknown): CreateAiSiteBatchBody | string;
+/** A batch id: a plain token the job inputs and the console group by. */
+export declare function newAiSiteBatchId(): string;
+export declare function POST(request: Request): Promise<Response>;

package/src/lib/server/ai-jobs-batch.js

@@ -0,0 +1,306 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ // lockdown-423: via libs/plugins/ai/src/lib/runtime/ai-gate.ts
+// The POST climbs `aiGateLadder`, whose lockdown rung is the verdict.
+import { randomUUID } from "crypto";
+import { resolveOrgEntitlements } from "@aglyn/aglyn/app-utils/plan-entitlements";
+import { getOrgForUser, memberHasPermissionOnHost } from "@aglyn/tenant-data-admin/server/organizations";
+import { aiJobAdmissionRefusal, aiJobSiteRefusal } from "../jobs/ai-job-admission.js";
+import { AI_JOB_BRIEF_MAX_CHARS } from "../jobs/ai-job-text-step.js";
+import { aiJobSummary, createAiJob } from "../jobs/ai-jobs.js";
+import { AI_SITE_BATCH_MAX, AI_SITE_BATCH_MIN_HOST_LIMIT, AI_SITE_INPUT_MAX_CHARS, AI_SITE_PAGES, aiSiteSubmissions } from "../model/ai-site-job.js";
+import { aiGateLadder } from "../runtime/ai-gate.js";
+import { releaseAssistMessage } from "../usage/assist-usage.js";
+/**
+ * The agency batch (AGL-2911): one brief, many sites.
+ *
+ * An agency builds the same site again and again with the business name, the
+ * city and the brand changed, so this door takes ONE brief and a list of the
+ * org's sites with those variables per site, and creates one `site` job per
+ * site under one batch id. The jobs are ordinary scaffolds — the beat runs
+ * them, each plans and waits for its own confirmation, each writes only
+ * drafts — and the batch id is what lets the org Sites page show them as one
+ * run with a link into each.
+ *
+ * ── The one answer that is not per site (AGL-2918) ───────────────────────
+ *
+ * Where a contact form's submissions go is asked once and carried onto every
+ * job, because a batch is one brief built again and again and the forms it
+ * makes are the same form. It is the one thing about a contact form a model
+ * cannot know — a note to read or a lead to chase is a decision about how the
+ * business runs — so each job binds the form step with it exactly as the
+ * guided start does, rather than twenty forms each keeping a guess.
+ *
+ * ── Why the batch has a door of its own ──────────────────────────────────
+ *
+ * Twenty-five calls to the create door would meet its per-minute window and
+ * its inline first step, and would leave the batch half made when the window
+ * closed. This door creates them in one request and runs NO step: it spends
+ * no tokens, so the message the ladder reserved goes straight back, and every
+ * job's own steps reserve and meter as they run. What the batch costs is
+ * therefore metered per step exactly as a single scaffold is, and the org's
+ * ceiling binds it the same way.
+ *
+ * ── Who may run it ───────────────────────────────────────────────────────
+ *
+ * The ladder answers for the org — `aiGenerative`, the release flag, the
+ * `ai-generate` switch and `ai.generate` on the org axis — and then each
+ * named site is asked for on its own: it must be this org's, and the caller
+ * must hold `ai.generate` THERE (AGL-2927), so a collaborator's permission on
+ * one site never starts a scaffold on another. A site the caller cannot use
+ * is reported back beside the ones that started, never silently dropped.
+ *
+ * The plan band is the issue's own: the batch is for the plans that sell
+ * enough sites to need it, which `hostLimit` is what distinguishes.
+ */ const AI_JOBS_BATCH_RATE_LIMIT = {
+    key: 'ai-jobs-batch',
+    limit: 3,
+    windowMs: 60000
+};
+const ID_CHARS = /^[A-Za-z0-9_-]{1,100}$/;
+/** The longest model id a body may carry; the catalog's ids are far shorter. */ const MAX_MODEL_CHARS = 100;
+export const AI_SITE_BATCH_PLAN_REFUSAL = 'Generating for many sites is included in the plans that hold at least ' + `${AI_SITE_BATCH_MIN_HOST_LIMIT} sites — upgrade in Billing`;
+/** Validate + clamp the request body; a string names what is wrong. */ export function parseAiSiteBatchBody(payload) {
+    var _body_orgId, _body_brief, _body_businessType;
+    const body = payload != null ? payload : {};
+    const orgId = String((_body_orgId = body['orgId']) != null ? _body_orgId : '').trim();
+    if (!orgId) return 'Open a workspace before using this feature';
+    const brief = String((_body_brief = body['brief']) != null ? _body_brief : '').trim();
+    if (!brief) return 'Write a brief for the sites';
+    if (brief.length > AI_JOB_BRIEF_MAX_CHARS) {
+        return `Keep the brief under ${AI_JOB_BRIEF_MAX_CHARS.toLocaleString('en-US')} characters`;
+    }
+    const businessType = String((_body_businessType = body['businessType']) != null ? _body_businessType : '').trim();
+    if (!businessType) return 'Say what kind of business the sites are for';
+    if (businessType.length > AI_SITE_INPUT_MAX_CHARS) {
+        return `businessType must be text under ${AI_SITE_INPUT_MAX_CHARS} characters`;
+    }
+    const rawPages = body['pages'];
+    const pages = typeof rawPages === 'number' ? rawPages : Number(rawPages != null ? rawPages : NaN);
+    if (!Number.isInteger(pages) || pages < AI_SITE_PAGES.min || pages > AI_SITE_PAGES.max) {
+        return `pages must be a whole number from ${AI_SITE_PAGES.min} to ${AI_SITE_PAGES.max}`;
+    }
+    const rawSites = body['sites'];
+    if (!Array.isArray(rawSites) || rawSites.length === 0) return 'Pick the sites to generate for';
+    if (rawSites.length > AI_SITE_BATCH_MAX) {
+        return `Generate for up to ${AI_SITE_BATCH_MAX} sites at a time`;
+    }
+    const sites = [];
+    const seen = new Set();
+    for (const raw of rawSites){
+        var _ref;
+        const hostId = String((_ref = raw == null ? void 0 : raw['hostId']) != null ? _ref : '').trim();
+        if (!ID_CHARS.test(hostId)) return 'sites[].hostId is not a site id';
+        if (seen.has(hostId)) return 'The same site is listed twice';
+        seen.add(hostId);
+        const variable = (key)=>{
+            const value = raw == null ? void 0 : raw[key];
+            if (value === undefined || value === null || value === '') return '';
+            if (typeof value !== 'string') return null;
+            const trimmed = value.trim();
+            return trimmed.length > AI_SITE_INPUT_MAX_CHARS ? null : trimmed;
+        };
+        const businessName = variable('businessName');
+        const city = variable('city');
+        const brand = variable('brand');
+        if (businessName === null || city === null || brand === null) {
+            return `Keep each site's name, city and brand under ${AI_SITE_INPUT_MAX_CHARS} characters`;
+        }
+        sites.push({
+            hostId,
+            businessName,
+            city,
+            brand
+        });
+    }
+    const rawModel = typeof body['model'] === 'string' ? body['model'].trim() : '';
+    if (rawModel.length > MAX_MODEL_CHARS) return 'model is not a model id';
+    return {
+        orgId,
+        brief,
+        businessType,
+        pages,
+        welcomeEmail: body['welcomeEmail'] !== false,
+        // Admitted only as one of the two the form step can bind, exactly as the
+        // single-site door admits it: anything else is nobody having said, and
+        // the whole run is not refused over an answer that is not a refusal.
+        submissions: aiSiteSubmissions(body),
+        sites,
+        model: rawModel && rawModel !== 'auto' ? rawModel : null
+    };
+}
+/** A batch id: a plain token the job inputs and the console group by. */ export function newAiSiteBatchId() {
+    return randomUUID().replace(/-/g, '').slice(0, 20);
+}
+export async function POST(request) {
+    var _ref;
+    let payload;
+    try {
+        payload = await request.json();
+    } catch (unused) {
+        payload = null;
+    }
+    const parsed = parseAiSiteBatchBody(payload);
+    const orgId = typeof parsed === 'string' ? String((_ref = payload == null ? void 0 : payload['orgId']) != null ? _ref : '') : parsed.orgId;
+    // The org axis: the batch belongs to no one site, and each named site is
+    // asked for on its own below.
+    const gate = await aiGateLadder({
+        request,
+        orgId,
+        hostId: null
+    }, {
+        feature: 'aiGenerative',
+        releaseFlag: 'release_ai_generative',
+        lockdownFeature: 'ai-generate',
+        permission: 'ai.generate',
+        rateLimit: AI_JOBS_BATCH_RATE_LIMIT
+    });
+    if (gate instanceof Response) return gate;
+    // No step runs here, so nothing is spent and the message goes back whatever
+    // this door answers.
+    await releaseAssistMessage(gate.firestore, gate.orgId, gate.reservation).catch(()=>undefined);
+    if (typeof parsed === 'string') {
+        return Response.json({
+            error: parsed
+        }, {
+            status: 400
+        });
+    }
+    const entitlements = resolveOrgEntitlements(gate.org);
+    if (!gate.staff && entitlements.hostLimit < AI_SITE_BATCH_MIN_HOST_LIMIT) {
+        return Response.json({
+            error: AI_SITE_BATCH_PLAN_REFUSAL,
+            reason: 'entitlement'
+        }, {
+            status: 403
+        });
+    }
+    const membership = gate.staff ? null : await getOrgForUser(gate.uid, gate.orgId);
+    if (!gate.staff && (membership == null ? void 0 : membership.orgId) !== gate.orgId) {
+        return Response.json({
+            error: 'You are not a member of that organization'
+        }, {
+            status: 403
+        });
+    }
+    const batchId = newAiSiteBatchId();
+    const now = new Date();
+    const started = [];
+    const refused = [];
+    for (const site of parsed.sites){
+        const permitted = gate.staff || await memberHasPermissionOnHost(gate.orgId, site.hostId, membership == null ? void 0 : membership.member, 'ai.generate');
+        if (!permitted) {
+            refused.push({
+                hostId: site.hostId,
+                error: 'You cannot generate on that site'
+            });
+            continue;
+        }
+        const inputs = {
+            businessType: parsed.businessType,
+            pages: parsed.pages,
+            welcomeEmail: parsed.welcomeEmail,
+            submissions: parsed.submissions,
+            businessName: site.businessName,
+            city: site.city,
+            brand: site.brand,
+            batchId
+        };
+        // What only a scaffold can say about this site (AGL-2909): its inputs, the
+        // site being this org's, and a step that can build its pages.
+        let refusal;
+        try {
+            var _ref1;
+            // A site that switched AI off is refused on its own (AGL-3028): the
+            // dispatcher cannot see a site named inside `sites[]`, and the rest of
+            // the batch still starts.
+            refusal = (_ref1 = await aiJobSiteRefusal({
+                firestore: gate.firestore,
+                org: gate.org,
+                hostId: site.hostId
+            })) != null ? _ref1 : await aiJobAdmissionRefusal('site', {
+                firestore: gate.firestore,
+                orgId: gate.orgId,
+                hostId: site.hostId,
+                inputs,
+                org: gate.org
+            });
+        } catch (error) {
+            console.error('ai site batch admission failed', {
+                orgId: gate.orgId,
+                error
+            });
+            refused.push({
+                hostId: site.hostId,
+                error: 'This site could not be started'
+            });
+            continue;
+        }
+        if (refusal) {
+            refused.push({
+                hostId: site.hostId,
+                error: refusal.error
+            });
+            continue;
+        }
+        try {
+            var _gate_decoded_email;
+            const job = await createAiJob(gate.firestore, {
+                orgId: gate.orgId,
+                hostId: site.hostId,
+                kind: 'site',
+                brief: parsed.brief,
+                inputs,
+                model: parsed.model,
+                createdBy: gate.uid,
+                createdByEmail: (_gate_decoded_email = gate.decoded.email) != null ? _gate_decoded_email : null
+            }, now);
+            started.push(aiJobSummary(job, now));
+        } catch (error) {
+            console.error('ai site batch create failed', {
+                orgId: gate.orgId,
+                error
+            });
+            refused.push({
+                hostId: site.hostId,
+                error: 'This site could not be started'
+            });
+        }
+    }
+    if (!started.length) {
+        var _ref2;
+        var _refused_;
+        return Response.json({
+            error: (_ref2 = (_refused_ = refused[0]) == null ? void 0 : _refused_.error) != null ? _ref2 : 'No site could be started',
+            batchId,
+            jobs: [],
+            refused
+        }, {
+            status: 403
+        });
+    }
+    // The jobs are queued, not run: the beat plans each one, and each waits for
+    // its own confirmation before it builds anything.
+    return Response.json({
+        batchId,
+        jobs: started,
+        refused
+    }, {
+        status: 202
+    });
+}
+
+//# sourceMappingURL=ai-jobs-batch.js.map

package/src/lib/server/ai-jobs-batch.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../libs/plugins/ai/src/lib/server/ai-jobs-batch.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n// lockdown-423: via libs/plugins/ai/src/lib/runtime/ai-gate.ts\n// The POST climbs `aiGateLadder`, whose lockdown rung is the verdict.\n\nimport { randomUUID } from 'crypto'\nimport { resolveOrgEntitlements } from '@aglyn/aglyn/app-utils/plan-entitlements'\nimport type { AglynOrgBilling } from '@aglyn/aglyn/foundation/definitions/org-billing.types'\nimport {\n  getOrgForUser,\n  memberHasPermissionOnHost,\n} from '@aglyn/tenant-data-admin/server/organizations'\nimport { aiJobAdmissionRefusal, aiJobSiteRefusal } from '../jobs/ai-job-admission'\nimport { AI_JOB_BRIEF_MAX_CHARS } from '../jobs/ai-job-text-step'\nimport { aiJobSummary, createAiJob } from '../jobs/ai-jobs'\nimport {\n  AI_SITE_BATCH_MAX,\n  AI_SITE_BATCH_MIN_HOST_LIMIT,\n  AI_SITE_INPUT_MAX_CHARS,\n  AI_SITE_PAGES,\n  aiSiteSubmissions,\n  type AiSiteSubmissions,\n} from '../model/ai-site-job'\nimport { aiGateLadder } from '../runtime/ai-gate'\nimport { releaseAssistMessage } from '../usage/assist-usage'\n\n/**\n * The agency batch (AGL-2911): one brief, many sites.\n *\n * An agency builds the same site again and again with the business name, the\n * city and the brand changed, so this door takes ONE brief and a list of the\n * org's sites with those variables per site, and creates one `site` job per\n * site under one batch id. The jobs are ordinary scaffolds — the beat runs\n * them, each plans and waits for its own confirmation, each writes only\n * drafts — and the batch id is what lets the org Sites page show them as one\n * run with a link into each.\n *\n * ── The one answer that is not per site (AGL-2918) ───────────────────────\n *\n * Where a contact form's submissions go is asked once and carried onto every\n * job, because a batch is one brief built again and again and the forms it\n * makes are the same form. It is the one thing about a contact form a model\n * cannot know — a note to read or a lead to chase is a decision about how the\n * business runs — so each job binds the form step with it exactly as the\n * guided start does, rather than twenty forms each keeping a guess.\n *\n * ── Why the batch has a door of its own ──────────────────────────────────\n *\n * Twenty-five calls to the create door would meet its per-minute window and\n * its inline first step, and would leave the batch half made when the window\n * closed. This door creates them in one request and runs NO step: it spends\n * no tokens, so the message the ladder reserved goes straight back, and every\n * job's own steps reserve and meter as they run. What the batch costs is\n * therefore metered per step exactly as a single scaffold is, and the org's\n * ceiling binds it the same way.\n *\n * ── Who may run it ───────────────────────────────────────────────────────\n *\n * The ladder answers for the org — `aiGenerative`, the release flag, the\n * `ai-generate` switch and `ai.generate` on the org axis — and then each\n * named site is asked for on its own: it must be this org's, and the caller\n * must hold `ai.generate` THERE (AGL-2927), so a collaborator's permission on\n * one site never starts a scaffold on another. A site the caller cannot use\n * is reported back beside the ones that started, never silently dropped.\n *\n * The plan band is the issue's own: the batch is for the plans that sell\n * enough sites to need it, which `hostLimit` is what distinguishes.\n */\n\nconst AI_JOBS_BATCH_RATE_LIMIT = {\n  key: 'ai-jobs-batch',\n  limit: 3,\n  windowMs: 60_000,\n}\n\nconst ID_CHARS = /^[A-Za-z0-9_-]{1,100}$/\n\n/** The longest model id a body may carry; the catalog's ids are far shorter. */\nconst MAX_MODEL_CHARS = 100\n\nexport const AI_SITE_BATCH_PLAN_REFUSAL =\n  'Generating for many sites is included in the plans that hold at least ' +\n  `${AI_SITE_BATCH_MIN_HOST_LIMIT} sites — upgrade in Billing`\n\nexport interface AiSiteBatchSite {\n  hostId: string\n  businessName: string\n  city: string\n  brand: string\n}\n\nexport interface CreateAiSiteBatchBody {\n  orgId: string\n  brief: string\n  businessType: string\n  pages: number\n  welcomeEmail: boolean\n  /**\n   * Where every site in the run routes its contact form's submissions\n   * (AGL-2918); `null` where the caller did not say, which leaves each form\n   * step's own proposal standing as it always did.\n   *\n   * One answer for the whole run, because a batch is one brief built again\n   * and again: the forms it makes are the same form, and twenty of them\n   * routed by a model's guess is the run where a wrong default costs most.\n   */\n  submissions: AiSiteSubmissions | null\n  sites: AiSiteBatchSite[]\n  model: string | null\n}\n\n/** Validate + clamp the request body; a string names what is wrong. */\nexport function parseAiSiteBatchBody(\n  payload: unknown,\n): CreateAiSiteBatchBody | string {\n  const body = (payload ?? {}) as Record<string, unknown>\n  const orgId = String(body['orgId'] ?? '').trim()\n  if (!orgId) return 'Open a workspace before using this feature'\n  const brief = String(body['brief'] ?? '').trim()\n  if (!brief) return 'Write a brief for the sites'\n  if (brief.length > AI_JOB_BRIEF_MAX_CHARS) {\n    return `Keep the brief under ${AI_JOB_BRIEF_MAX_CHARS.toLocaleString('en-US')} characters`\n  }\n  const businessType = String(body['businessType'] ?? '').trim()\n  if (!businessType) return 'Say what kind of business the sites are for'\n  if (businessType.length > AI_SITE_INPUT_MAX_CHARS) {\n    return `businessType must be text under ${AI_SITE_INPUT_MAX_CHARS} characters`\n  }\n  const rawPages = body['pages']\n  const pages =\n    typeof rawPages === 'number' ? rawPages : Number(rawPages ?? NaN)\n  if (\n    !Number.isInteger(pages) ||\n    pages < AI_SITE_PAGES.min ||\n    pages > AI_SITE_PAGES.max\n  ) {\n    return `pages must be a whole number from ${AI_SITE_PAGES.min} to ${AI_SITE_PAGES.max}`\n  }\n  const rawSites = body['sites']\n  if (!Array.isArray(rawSites) || rawSites.length === 0)\n    return 'Pick the sites to generate for'\n  if (rawSites.length > AI_SITE_BATCH_MAX) {\n    return `Generate for up to ${AI_SITE_BATCH_MAX} sites at a time`\n  }\n  const sites: AiSiteBatchSite[] = []\n  const seen = new Set<string>()\n  for (const raw of rawSites as Array<Record<string, unknown>>) {\n    const hostId = String(raw?.['hostId'] ?? '').trim()\n    if (!ID_CHARS.test(hostId)) return 'sites[].hostId is not a site id'\n    if (seen.has(hostId)) return 'The same site is listed twice'\n    seen.add(hostId)\n    const variable = (key: string): string | null => {\n      const value = raw?.[key]\n      if (value === undefined || value === null || value === '') return ''\n      if (typeof value !== 'string') return null\n      const trimmed = value.trim()\n      return trimmed.length > AI_SITE_INPUT_MAX_CHARS ? null : trimmed\n    }\n    const businessName = variable('businessName')\n    const city = variable('city')\n    const brand = variable('brand')\n    if (businessName === null || city === null || brand === null) {\n      return `Keep each site's name, city and brand under ${AI_SITE_INPUT_MAX_CHARS} characters`\n    }\n    sites.push({ hostId, businessName, city, brand })\n  }\n  const rawModel = typeof body['model'] === 'string' ? body['model'].trim() : ''\n  if (rawModel.length > MAX_MODEL_CHARS) return 'model is not a model id'\n  return {\n    orgId,\n    brief,\n    businessType,\n    pages,\n    welcomeEmail: body['welcomeEmail'] !== false,\n    // Admitted only as one of the two the form step can bind, exactly as the\n    // single-site door admits it: anything else is nobody having said, and\n    // the whole run is not refused over an answer that is not a refusal.\n    submissions: aiSiteSubmissions(body),\n    sites,\n    model: rawModel && rawModel !== 'auto' ? rawModel : null,\n  }\n}\n\n/** A batch id: a plain token the job inputs and the console group by. */\nexport function newAiSiteBatchId(): string {\n  return randomUUID().replace(/-/g, '').slice(0, 20)\n}\n\nexport async function POST(request: Request): Promise<Response> {\n  let payload: unknown\n  try {\n    payload = await request.json()\n  } catch {\n    payload = null\n  }\n  const parsed = parseAiSiteBatchBody(payload)\n  const orgId =\n    typeof parsed === 'string'\n      ? String((payload as Record<string, unknown> | null)?.['orgId'] ?? '')\n      : parsed.orgId\n  // The org axis: the batch belongs to no one site, and each named site is\n  // asked for on its own below.\n  const gate = await aiGateLadder(\n    { request, orgId, hostId: null },\n    {\n      feature: 'aiGenerative',\n      releaseFlag: 'release_ai_generative',\n      lockdownFeature: 'ai-generate',\n      permission: 'ai.generate',\n      rateLimit: AI_JOBS_BATCH_RATE_LIMIT,\n    },\n  )\n  if (gate instanceof Response) return gate\n  // No step runs here, so nothing is spent and the message goes back whatever\n  // this door answers.\n  await releaseAssistMessage(\n    gate.firestore,\n    gate.orgId,\n    gate.reservation,\n  ).catch(() => undefined)\n  if (typeof parsed === 'string') {\n    return Response.json({ error: parsed }, { status: 400 })\n  }\n  const entitlements = resolveOrgEntitlements(\n    gate.org as Partial<AglynOrgBilling>,\n  )\n  if (!gate.staff && entitlements.hostLimit < AI_SITE_BATCH_MIN_HOST_LIMIT) {\n    return Response.json(\n      { error: AI_SITE_BATCH_PLAN_REFUSAL, reason: 'entitlement' },\n      { status: 403 },\n    )\n  }\n  const membership = gate.staff\n    ? null\n    : await getOrgForUser(gate.uid, gate.orgId)\n  if (!gate.staff && membership?.orgId !== gate.orgId) {\n    return Response.json(\n      { error: 'You are not a member of that organization' },\n      { status: 403 },\n    )\n  }\n\n  const batchId = newAiSiteBatchId()\n  const now = new Date()\n  const started: ReturnType<typeof aiJobSummary>[] = []\n  const refused: Array<{ hostId: string; error: string }> = []\n  for (const site of parsed.sites) {\n    const permitted =\n      gate.staff ||\n      (await memberHasPermissionOnHost(\n        gate.orgId,\n        site.hostId,\n        membership?.member,\n        'ai.generate',\n      ))\n    if (!permitted) {\n      refused.push({\n        hostId: site.hostId,\n        error: 'You cannot generate on that site',\n      })\n      continue\n    }\n    const inputs = {\n      businessType: parsed.businessType,\n      pages: parsed.pages,\n      welcomeEmail: parsed.welcomeEmail,\n      submissions: parsed.submissions,\n      businessName: site.businessName,\n      city: site.city,\n      brand: site.brand,\n      batchId,\n    }\n    // What only a scaffold can say about this site (AGL-2909): its inputs, the\n    // site being this org's, and a step that can build its pages.\n    let refusal: Awaited<ReturnType<typeof aiJobAdmissionRefusal>>\n    try {\n      // A site that switched AI off is refused on its own (AGL-3028): the\n      // dispatcher cannot see a site named inside `sites[]`, and the rest of\n      // the batch still starts.\n      refusal =\n        (await aiJobSiteRefusal({\n          firestore: gate.firestore,\n          org: gate.org,\n          hostId: site.hostId,\n        })) ??\n        (await aiJobAdmissionRefusal('site', {\n          firestore: gate.firestore,\n          orgId: gate.orgId,\n          hostId: site.hostId,\n          inputs,\n          org: gate.org,\n        }))\n    } catch (error) {\n      console.error('ai site batch admission failed', {\n        orgId: gate.orgId,\n        error,\n      })\n      refused.push({\n        hostId: site.hostId,\n        error: 'This site could not be started',\n      })\n      continue\n    }\n    if (refusal) {\n      refused.push({ hostId: site.hostId, error: refusal.error })\n      continue\n    }\n    try {\n      const job = await createAiJob(\n        gate.firestore,\n        {\n          orgId: gate.orgId,\n          hostId: site.hostId,\n          kind: 'site',\n          brief: parsed.brief,\n          inputs,\n          model: parsed.model,\n          createdBy: gate.uid,\n          createdByEmail: gate.decoded.email ?? null,\n        },\n        now,\n      )\n      started.push(aiJobSummary(job, now))\n    } catch (error) {\n      console.error('ai site batch create failed', { orgId: gate.orgId, error })\n      refused.push({\n        hostId: site.hostId,\n        error: 'This site could not be started',\n      })\n    }\n  }\n  if (!started.length) {\n    return Response.json(\n      {\n        error: refused[0]?.error ?? 'No site could be started',\n        batchId,\n        jobs: [],\n        refused,\n      },\n      { status: 403 },\n    )\n  }\n  // The jobs are queued, not run: the beat plans each one, and each waits for\n  // its own confirmation before it builds anything.\n  return Response.json({ batchId, jobs: started, refused }, { status: 202 })\n}\n"],"names":["randomUUID","resolveOrgEntitlements","getOrgForUser","memberHasPermissionOnHost","aiJobAdmissionRefusal","aiJobSiteRefusal","AI_JOB_BRIEF_MAX_CHARS","aiJobSummary","createAiJob","AI_SITE_BATCH_MAX","AI_SITE_BATCH_MIN_HOST_LIMIT","AI_SITE_INPUT_MAX_CHARS","AI_SITE_PAGES","aiSiteSubmissions","aiGateLadder","releaseAssistMessage","AI_JOBS_BATCH_RATE_LIMIT","key","limit","windowMs","ID_CHARS","MAX_MODEL_CHARS","AI_SITE_BATCH_PLAN_REFUSAL","parseAiSiteBatchBody","payload","body","orgId","String","trim","brief","length","toLocaleString","businessType","rawPages","pages","Number","NaN","isInteger","min","max","rawSites","Array","isArray","sites","seen","Set","raw","hostId","test","has","add","variable","value","undefined","trimmed","businessName","city","brand","push","rawModel","welcomeEmail","submissions","model","newAiSiteBatchId","replace","slice","POST","request","json","parsed","gate","feature","releaseFlag","lockdownFeature","permission","rateLimit","Response","firestore","reservation","catch","error","status","entitlements","org","staff","hostLimit","reason","membership","uid","batchId","now","Date","started","refused","site","permitted","member","inputs","refusal","console","job","kind","createdBy","createdByEmail","decoded","email","jobs"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED,+DAA+D;AAC/D,sEAAsE;AAEtE,SAASA,UAAU,QAAQ,SAAQ;AACnC,SAASC,sBAAsB,QAAQ,2CAA0C;AAEjF,SACEC,aAAa,EACbC,yBAAyB,QACpB,gDAA+C;AACtD,SAASC,qBAAqB,EAAEC,gBAAgB,QAAQ,8BAA0B;AAClF,SAASC,sBAAsB,QAAQ,8BAA0B;AACjE,SAASC,YAAY,EAAEC,WAAW,QAAQ,qBAAiB;AAC3D,SACEC,iBAAiB,EACjBC,4BAA4B,EAC5BC,uBAAuB,EACvBC,aAAa,EACbC,iBAAiB,QAEZ,0BAAsB;AAC7B,SAASC,YAAY,QAAQ,wBAAoB;AACjD,SAASC,oBAAoB,QAAQ,2BAAuB;AAE5D;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAyCC,GAED,MAAMC,2BAA2B;IAC/BC,KAAK;IACLC,OAAO;IACPC,UAAU;AACZ;AAEA,MAAMC,WAAW;AAEjB,8EAA8E,GAC9E,MAAMC,kBAAkB;AAExB,OAAO,MAAMC,6BACX,2EACA,GAAGZ,6BAA6B,2BAA2B,CAAC,CAAA;AA6B9D,qEAAqE,GACrE,OAAO,SAASa,qBACdC,OAAgB;QAGKC,aAEAA,aAKOA;IAR5B,MAAMA,OAAQD,kBAAAA,UAAW,CAAC;IAC1B,MAAME,QAAQC,QAAOF,cAAAA,IAAI,CAAC,QAAQ,YAAbA,cAAiB,IAAIG,IAAI;IAC9C,IAAI,CAACF,OAAO,OAAO;IACnB,MAAMG,QAAQF,QAAOF,cAAAA,IAAI,CAAC,QAAQ,YAAbA,cAAiB,IAAIG,IAAI;IAC9C,IAAI,CAACC,OAAO,OAAO;IACnB,IAAIA,MAAMC,MAAM,GAAGxB,wBAAwB;QACzC,OAAO,CAAC,qBAAqB,EAAEA,uBAAuByB,cAAc,CAAC,SAAS,WAAW,CAAC;IAC5F;IACA,MAAMC,eAAeL,QAAOF,qBAAAA,IAAI,CAAC,eAAe,YAApBA,qBAAwB,IAAIG,IAAI;IAC5D,IAAI,CAACI,cAAc,OAAO;IAC1B,IAAIA,aAAaF,MAAM,GAAGnB,yBAAyB;QACjD,OAAO,CAAC,gCAAgC,EAAEA,wBAAwB,WAAW,CAAC;IAChF;IACA,MAAMsB,WAAWR,IAAI,CAAC,QAAQ;IAC9B,MAAMS,QACJ,OAAOD,aAAa,WAAWA,WAAWE,OAAOF,mBAAAA,WAAYG;IAC/D,IACE,CAACD,OAAOE,SAAS,CAACH,UAClBA,QAAQtB,cAAc0B,GAAG,IACzBJ,QAAQtB,cAAc2B,GAAG,EACzB;QACA,OAAO,CAAC,kCAAkC,EAAE3B,cAAc0B,GAAG,CAAC,IAAI,EAAE1B,cAAc2B,GAAG,EAAE;IACzF;IACA,MAAMC,WAAWf,IAAI,CAAC,QAAQ;IAC9B,IAAI,CAACgB,MAAMC,OAAO,CAACF,aAAaA,SAASV,MAAM,KAAK,GAClD,OAAO;IACT,IAAIU,SAASV,MAAM,GAAGrB,mBAAmB;QACvC,OAAO,CAAC,mBAAmB,EAAEA,kBAAkB,gBAAgB,CAAC;IAClE;IACA,MAAMkC,QAA2B,EAAE;IACnC,MAAMC,OAAO,IAAIC;IACjB,KAAK,MAAMC,OAAON,SAA4C;;QAC5D,MAAMO,SAASpB,eAAOmB,uBAAAA,GAAK,CAAC,SAAS,mBAAI,IAAIlB,IAAI;QACjD,IAAI,CAACR,SAAS4B,IAAI,CAACD,SAAS,OAAO;QACnC,IAAIH,KAAKK,GAAG,CAACF,SAAS,OAAO;QAC7BH,KAAKM,GAAG,CAACH;QACT,MAAMI,WAAW,CAAClC;YAChB,MAAMmC,QAAQN,uBAAAA,GAAK,CAAC7B,IAAI;YACxB,IAAImC,UAAUC,aAAaD,UAAU,QAAQA,UAAU,IAAI,OAAO;YAClE,IAAI,OAAOA,UAAU,UAAU,OAAO;YACtC,MAAME,UAAUF,MAAMxB,IAAI;YAC1B,OAAO0B,QAAQxB,MAAM,GAAGnB,0BAA0B,OAAO2C;QAC3D;QACA,MAAMC,eAAeJ,SAAS;QAC9B,MAAMK,OAAOL,SAAS;QACtB,MAAMM,QAAQN,SAAS;QACvB,IAAII,iBAAiB,QAAQC,SAAS,QAAQC,UAAU,MAAM;YAC5D,OAAO,CAAC,4CAA4C,EAAE9C,wBAAwB,WAAW,CAAC;QAC5F;QACAgC,MAAMe,IAAI,CAAC;YAAEX;YAAQQ;YAAcC;YAAMC;QAAM;IACjD;IACA,MAAME,WAAW,OAAOlC,IAAI,CAAC,QAAQ,KAAK,WAAWA,IAAI,CAAC,QAAQ,CAACG,IAAI,KAAK;IAC5E,IAAI+B,SAAS7B,MAAM,GAAGT,iBAAiB,OAAO;IAC9C,OAAO;QACLK;QACAG;QACAG;QACAE;QACA0B,cAAcnC,IAAI,CAAC,eAAe,KAAK;QACvC,yEAAyE;QACzE,uEAAuE;QACvE,qEAAqE;QACrEoC,aAAahD,kBAAkBY;QAC/BkB;QACAmB,OAAOH,YAAYA,aAAa,SAASA,WAAW;IACtD;AACF;AAEA,uEAAuE,GACvE,OAAO,SAASI;IACd,OAAO/D,aAAagE,OAAO,CAAC,MAAM,IAAIC,KAAK,CAAC,GAAG;AACjD;AAEA,OAAO,eAAeC,KAAKC,OAAgB;;IACzC,IAAI3C;IACJ,IAAI;QACFA,UAAU,MAAM2C,QAAQC,IAAI;IAC9B,EAAE,eAAM;QACN5C,UAAU;IACZ;IACA,MAAM6C,SAAS9C,qBAAqBC;IACpC,MAAME,QACJ,OAAO2C,WAAW,WACd1C,eAAQH,2BAAD,AAACA,OAA4C,CAAC,QAAQ,mBAAI,MACjE6C,OAAO3C,KAAK;IAClB,yEAAyE;IACzE,8BAA8B;IAC9B,MAAM4C,OAAO,MAAMxD,aACjB;QAAEqD;QAASzC;QAAOqB,QAAQ;IAAK,GAC/B;QACEwB,SAAS;QACTC,aAAa;QACbC,iBAAiB;QACjBC,YAAY;QACZC,WAAW3D;IACb;IAEF,IAAIsD,gBAAgBM,UAAU,OAAON;IACrC,4EAA4E;IAC5E,qBAAqB;IACrB,MAAMvD,qBACJuD,KAAKO,SAAS,EACdP,KAAK5C,KAAK,EACV4C,KAAKQ,WAAW,EAChBC,KAAK,CAAC,IAAM1B;IACd,IAAI,OAAOgB,WAAW,UAAU;QAC9B,OAAOO,SAASR,IAAI,CAAC;YAAEY,OAAOX;QAAO,GAAG;YAAEY,QAAQ;QAAI;IACxD;IACA,MAAMC,eAAejF,uBACnBqE,KAAKa,GAAG;IAEV,IAAI,CAACb,KAAKc,KAAK,IAAIF,aAAaG,SAAS,GAAG3E,8BAA8B;QACxE,OAAOkE,SAASR,IAAI,CAClB;YAAEY,OAAO1D;YAA4BgE,QAAQ;QAAc,GAC3D;YAAEL,QAAQ;QAAI;IAElB;IACA,MAAMM,aAAajB,KAAKc,KAAK,GACzB,OACA,MAAMlF,cAAcoE,KAAKkB,GAAG,EAAElB,KAAK5C,KAAK;IAC5C,IAAI,CAAC4C,KAAKc,KAAK,IAAIG,CAAAA,8BAAAA,WAAY7D,KAAK,MAAK4C,KAAK5C,KAAK,EAAE;QACnD,OAAOkD,SAASR,IAAI,CAClB;YAAEY,OAAO;QAA4C,GACrD;YAAEC,QAAQ;QAAI;IAElB;IAEA,MAAMQ,UAAU1B;IAChB,MAAM2B,MAAM,IAAIC;IAChB,MAAMC,UAA6C,EAAE;IACrD,MAAMC,UAAoD,EAAE;IAC5D,KAAK,MAAMC,QAAQzB,OAAO1B,KAAK,CAAE;QAC/B,MAAMoD,YACJzB,KAAKc,KAAK,IACT,MAAMjF,0BACLmE,KAAK5C,KAAK,EACVoE,KAAK/C,MAAM,EACXwC,8BAAAA,WAAYS,MAAM,EAClB;QAEJ,IAAI,CAACD,WAAW;YACdF,QAAQnC,IAAI,CAAC;gBACXX,QAAQ+C,KAAK/C,MAAM;gBACnBiC,OAAO;YACT;YACA;QACF;QACA,MAAMiB,SAAS;YACbjE,cAAcqC,OAAOrC,YAAY;YACjCE,OAAOmC,OAAOnC,KAAK;YACnB0B,cAAcS,OAAOT,YAAY;YACjCC,aAAaQ,OAAOR,WAAW;YAC/BN,cAAcuC,KAAKvC,YAAY;YAC/BC,MAAMsC,KAAKtC,IAAI;YACfC,OAAOqC,KAAKrC,KAAK;YACjBgC;QACF;QACA,2EAA2E;QAC3E,8DAA8D;QAC9D,IAAIS;QACJ,IAAI;gBAKC;YAJH,oEAAoE;YACpE,uEAAuE;YACvE,0BAA0B;YAC1BA,WACG,QAAA,MAAM7F,iBAAiB;gBACtBwE,WAAWP,KAAKO,SAAS;gBACzBM,KAAKb,KAAKa,GAAG;gBACbpC,QAAQ+C,KAAK/C,MAAM;YACrB,cAJC,QAKA,MAAM3C,sBAAsB,QAAQ;gBACnCyE,WAAWP,KAAKO,SAAS;gBACzBnD,OAAO4C,KAAK5C,KAAK;gBACjBqB,QAAQ+C,KAAK/C,MAAM;gBACnBkD;gBACAd,KAAKb,KAAKa,GAAG;YACf;QACJ,EAAE,OAAOH,OAAO;YACdmB,QAAQnB,KAAK,CAAC,kCAAkC;gBAC9CtD,OAAO4C,KAAK5C,KAAK;gBACjBsD;YACF;YACAa,QAAQnC,IAAI,CAAC;gBACXX,QAAQ+C,KAAK/C,MAAM;gBACnBiC,OAAO;YACT;YACA;QACF;QACA,IAAIkB,SAAS;YACXL,QAAQnC,IAAI,CAAC;gBAAEX,QAAQ+C,KAAK/C,MAAM;gBAAEiC,OAAOkB,QAAQlB,KAAK;YAAC;YACzD;QACF;QACA,IAAI;gBAWkBV;YAVpB,MAAM8B,MAAM,MAAM5F,YAChB8D,KAAKO,SAAS,EACd;gBACEnD,OAAO4C,KAAK5C,KAAK;gBACjBqB,QAAQ+C,KAAK/C,MAAM;gBACnBsD,MAAM;gBACNxE,OAAOwC,OAAOxC,KAAK;gBACnBoE;gBACAnC,OAAOO,OAAOP,KAAK;gBACnBwC,WAAWhC,KAAKkB,GAAG;gBACnBe,cAAc,GAAEjC,sBAAAA,KAAKkC,OAAO,CAACC,KAAK,YAAlBnC,sBAAsB;YACxC,GACAoB;YAEFE,QAAQlC,IAAI,CAACnD,aAAa6F,KAAKV;QACjC,EAAE,OAAOV,OAAO;YACdmB,QAAQnB,KAAK,CAAC,+BAA+B;gBAAEtD,OAAO4C,KAAK5C,KAAK;gBAAEsD;YAAM;YACxEa,QAAQnC,IAAI,CAAC;gBACXX,QAAQ+C,KAAK/C,MAAM;gBACnBiC,OAAO;YACT;QACF;IACF;IACA,IAAI,CAACY,QAAQ9D,MAAM,EAAE;;YAGR+D;QAFX,OAAOjB,SAASR,IAAI,CAClB;YACEY,KAAK,YAAEa,YAAAA,OAAO,CAAC,EAAE,qBAAVA,UAAYb,KAAK,oBAAI;YAC5BS;YACAiB,MAAM,EAAE;YACRb;QACF,GACA;YAAEZ,QAAQ;QAAI;IAElB;IACA,4EAA4E;IAC5E,kDAAkD;IAClD,OAAOL,SAASR,IAAI,CAAC;QAAEqB;QAASiB,MAAMd;QAASC;IAAQ,GAAG;QAAEZ,QAAQ;IAAI;AAC1E"}

package/src/lib/server/ai-jobs-beat-route.d.ts

@@ -0,0 +1,36 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+/**
+ * THE AI JOBS BEAT (AGL-3026): `POST /api/admin/ai-jobs-beat`.
+ *
+ * Cloud Scheduler calls it every minute through `consoleAiJobsBeat` in
+ * `cloud/functions`, carrying the console's `CRON_SECRET` as
+ * `x-cron-secret`: the same secret, headers and refusals as the console's
+ * other scheduled sweeps, so rotating the secret is still one act. It answers
+ * 405 to anything but a POST, 501 while the secret is unset, so an
+ * unconfigured deployment cannot be made to spend, and 401 for anything but
+ * the secret.
+ *
+ * The console app serves it from a route of its own at the same path, which
+ * gives a sweep the function time the slowest step needs; the plugin
+ * dispatcher's ceiling is a door's. See `AI_JOB_SWEEP_BUDGET_MS`.
+ *
+ * It answers 200 with what the beat did, a beat the switch held included:
+ * a lock is an operator's decision rather than a fault, and the caller logs
+ * every refusal it gets.
+ */
+export declare function POST(request: Request): Promise<Response>;