@aglyn/plugins-ai 1.0.0-beta.143

package/src/lib/server/billing-overage.js

@@ -0,0 +1,337 @@
+import { _ as _extends } from "@swc/helpers/_/_extends";
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ import { pluginRequestFromWeb } from "@aglyn/aglyn/server";
+import { ASSIST_HARD_CAP_CONTROL_LABEL, ASSIST_OVERAGE_CAP_CONTROL_LABEL, ASSIST_OVERAGE_CAP_MAX_USD, ASSIST_OVERAGE_CAP_MIN_USD, resolveAssistCreditBudget, resolveAssistHardCap, resolveAssistOverageCapUsd, resolveAssistOverageRateUsdPer1k } from "@aglyn/aglyn/app-utils/assist-credits";
+import { emailUnverifiedResponse, firebaseAdmin, isImpersonationSession, memberHasOrgPermission, resolveOrgMembership } from "@aglyn/tenant-data-admin";
+import { logAiOverageControl } from "../activity/ai-activity.js";
+import { assistMonthOverage } from "@aglyn/aglyn/app-utils/assist-credits";
+import { assistUsageMonth } from "../usage/assist-usage.js";
+import { aiOverageBillsByInvoice } from "../billing/ai-overage-cutover.js";
+import { aiOverageNextChargeUsd } from "../billing/ai-overage-gate.js";
+import { AI_BILLING_STANDING_DOC, AI_BILLING_SUBCOLLECTION, readAiOverageMonthLedger } from "../billing/ai-overage-ledger.js";
+import { AI_OVERAGE_THRESHOLD_USD, aiOverageCardOnFile, aiOverageStandingCeilingUsd, aiOverageStep, readAiOverageStanding } from "../billing/ai-overage-standing.js";
+import { FieldValue } from "firebase-admin/firestore";
+import { invalidIdTokenResponse } from "@aglyn/tenant-data-admin/server/id-token-refusal";
+// lockdown-423: exempt — self-serve billing surface, same posture as
+// billing/storage-overage beside it. AGL-1501 keeps billing-locked sessions
+// alive precisely so members can reach Billing, and this is the control that
+// stops an org accruing assist charges, so a 423 would trap it accruing them.
+/**
+ * Read or set the org's own assist controls: the hard-cap switch (AGL-2653)
+ * and the dollar ceiling on overage (AGL-2898).
+ *
+ * Credits past the plan's assist band are SOLD by default, at the rate
+ * `resolveAssistOverageRateUsdPer1k` answers — the plan's listed
+ * `extraAssistCreditsUsdPer1k`, or the add-on's rate on a plan that carries
+ * its band only with the add-on. This route holds the two
+ * controls a customer has over that, and nothing else — it is not a consent
+ * surface, and there is nothing here an org must do before assist works.
+ *
+ *   `get`        → whether the switch is on, the ceiling if any, the band,
+ *                  the rate the overage bills at, and whether the plan sells
+ *                  overage at all
+ *   `setHardCap` → store `hardCap: true | false`
+ *   `setCap`     → store `capUsd: number`, or `null` to clear the ceiling
+ *
+ * `billing.manage`-gated, because both controls bound spend in both
+ * directions: lifting either is what lets the org be invoiced further past
+ * its band, and setting either is what stops a workspace's assistant.
+ * Admin-SDK-only by construction — `assistOverage` is denied to every client
+ * in the rules, so a member cannot lift their own ceiling or lower somebody
+ * else's.
+ *
+ * TURNING THE SWITCH OFF AND CLEARING THE CEILING ARE ALWAYS AVAILABLE, on
+ * any plan and at any usage level: an org that wants the sale back on must
+ * not have to argue with a precondition. Turning the switch on, or setting a
+ * ceiling, is refused, 409, on a plan that sells no overage — there the band
+ * is already the wall (`assistBandRefuses`), and storing a control that
+ * changes nothing would read as protection the org does not have.
+ */ /**
+ * What the overage card needs to say about Aglyn's own limit (AGL-3011).
+ *
+ * Every figure is `null` before the cutover month. That is not a missing
+ * value: it is the honest answer while overage still bills on the monthly
+ * invoice, and rendering a ceiling and a "next charge" figure that nothing
+ * enforces would be a promise the platform is not yet keeping.
+ */ async function readAiOverageStandingForCard(orgRef, org) {
+    var _standingSnapshot_data, _usageSnapshot_data, _usageSnapshot_get, _ref, _aiOverageCardOnFile;
+    var _standing_pause;
+    const now = new Date();
+    const month = assistUsageMonth(now);
+    const empty = {
+        aglynCeilingUsd: null,
+        overageStep: null,
+        overageThresholdUsd: null,
+        overageChargedUsd: null,
+        overageChargeCount: null,
+        overageNextChargeUsd: null,
+        overagePaused: null,
+        overageCardOnFile: null,
+        overageBillsByInvoice: false
+    };
+    if (!aiOverageBillsByInvoice(month)) return empty;
+    const [standingSnapshot, usageSnapshot] = await Promise.all([
+        orgRef.collection(AI_BILLING_SUBCOLLECTION).doc(AI_BILLING_STANDING_DOC).get(),
+        orgRef.collection('assistUsage').doc(month).get()
+    ]);
+    const standing = readAiOverageStanding(standingSnapshot.exists ? (_standingSnapshot_data = standingSnapshot.data()) != null ? _standingSnapshot_data : null : null);
+    const ledger = readAiOverageMonthLedger(usageSnapshot.exists ? (_usageSnapshot_data = usageSnapshot.data()) != null ? _usageSnapshot_data : null : null);
+    const priced = assistMonthOverage(org, Number((_usageSnapshot_get = usageSnapshot.get('estCostUsd')) != null ? _usageSnapshot_get : 0));
+    return {
+        aglynCeilingUsd: aiOverageStandingCeilingUsd(standing, now),
+        overageStep: aiOverageStep(standing),
+        overageThresholdUsd: AI_OVERAGE_THRESHOLD_USD,
+        overageChargedUsd: ledger.paidUsd,
+        overageChargeCount: ledger.charges,
+        overageNextChargeUsd: aiOverageNextChargeUsd(priced.overageMonthlyUsd, ledger.invoicedUsd),
+        overagePaused: (_ref = (_standing_pause = standing.pause) == null ? void 0 : _standing_pause.reason) != null ? _ref : null,
+        overageCardOnFile: (_aiOverageCardOnFile = aiOverageCardOnFile(standing)) != null ? _aiOverageCardOnFile : null,
+        overageBillsByInvoice: true
+    };
+}
+async function handler(request) {
+    var _headers_authorization, _ref, _ref1;
+    const { method, body, headers: rawHeaders } = await pluginRequestFromWeb(request);
+    const headers = rawHeaders;
+    if (method !== 'POST') {
+        return Response.json({
+            error: 'Method not allowed'
+        }, {
+            status: 405
+        });
+    }
+    const authorization = (_headers_authorization = headers.authorization) != null ? _headers_authorization : '';
+    const idToken = authorization.startsWith('Bearer ') ? authorization.slice('Bearer '.length) : undefined;
+    if (!idToken) return Response.json({
+        error: 'Unauthenticated'
+    }, {
+        status: 401
+    });
+    const orgId = String((_ref = body == null ? void 0 : body.orgId) != null ? _ref : '');
+    const action = String((_ref1 = body == null ? void 0 : body.action) != null ? _ref1 : '');
+    if (!orgId || ![
+        'get',
+        'setHardCap',
+        'setCap'
+    ].includes(action)) {
+        return Response.json({
+            error: 'Bad request'
+        }, {
+            status: 400
+        });
+    }
+    try {
+        var _orgSnapshot_data, _decoded_email, _decoded_email1;
+        const decoded = await firebaseAdmin.app().auth().verifyIdToken(idToken);
+        if (!decoded.email_verified && !isImpersonationSession(decoded)) {
+            return emailUnverifiedResponse();
+        }
+        const isStaff = decoded['staff'] === true;
+        const actor = await resolveOrgMembership(decoded.uid, orgId);
+        if (!isStaff && !await memberHasOrgPermission(orgId, actor == null ? void 0 : actor.member, 'billing.manage')) {
+            return Response.json({
+                error: 'billing.manage required'
+            }, {
+                status: 403
+            });
+        }
+        const orgRef = firebaseAdmin.app().firestore().collection('orgs').doc(orgId);
+        const orgSnapshot = await orgRef.get();
+        if (!orgSnapshot.exists) {
+            return Response.json({
+                error: 'Unknown organization'
+            }, {
+                status: 404
+            });
+        }
+        const org = (_orgSnapshot_data = orgSnapshot.data()) != null ? _orgSnapshot_data : {};
+        const hardCap = resolveAssistHardCap(org);
+        const capUsd = resolveAssistOverageCapUsd(org);
+        const bandCredits = resolveAssistCreditBudget(org);
+        // The rate the card quotes must be the rate the rollup bills, so it is
+        // read through the one resolver every reader of the rate goes through.
+        // That mattered acutely under AGL-3014, when Starter's rate lived off
+        // `PLAN_PRICING` and reading the table directly quoted $0.00 on an org
+        // that was really being invoiced. AGL-3203 put the rate on Starter's own
+        // row and deleted the exception, so the table and the resolver now agree
+        // — and this still reads the resolver, because a comp is priced at
+        // nothing and only `resolvePlanPricing` knows that.
+        const overageRateUsdPer1k = resolveAssistOverageRateUsdPer1k(org);
+        const sellsOverage = bandCredits !== null && overageRateUsdPer1k !== null;
+        if (action === 'get') {
+            // AGLYN'S OWN LIMIT BESIDE THE WORKSPACE'S (AGL-3011). The card shows
+            // both because the LOWER of the two binds, and a card that showed only
+            // the figure the workspace set would explain neither the refusal it
+            // gets at Aglyn's nor the charge it sees before its own is reached.
+            //
+            // `null` for every figure while the platform still bills overage on
+            // the monthly invoice, so the card keeps saying what is true today
+            // rather than describing a mechanism that is not running.
+            const overage = await readAiOverageStandingForCard(orgRef, org);
+            return Response.json(_extends({
+                hardCap,
+                capUsd,
+                bandCredits,
+                overageRateUsdPer1k,
+                sellsOverage
+            }, overage, {
+                label: ASSIST_HARD_CAP_CONTROL_LABEL,
+                capLabel: ASSIST_OVERAGE_CAP_CONTROL_LABEL,
+                minCapUsd: ASSIST_OVERAGE_CAP_MIN_USD,
+                maxCapUsd: ASSIST_OVERAGE_CAP_MAX_USD
+            }), {
+                status: 200
+            });
+        }
+        if (action === 'setCap') {
+            var _decoded_email2, _decoded_email3;
+            const raw = body == null ? void 0 : body.capUsd;
+            // `null` clears; anything else must be a real number in a real range.
+            // A string "25" is refused rather than coerced, the way the switch
+            // refuses a string "false": the resolver reads the field strictly, so
+            // a value that reached the document as a string would be no ceiling
+            // at all while the card said one was set.
+            const clearing = raw === null;
+            if (!clearing && (typeof raw !== 'number' || !Number.isFinite(raw) || raw < ASSIST_OVERAGE_CAP_MIN_USD || raw > ASSIST_OVERAGE_CAP_MAX_USD)) {
+                return Response.json({
+                    error: `Set a monthly AI overage ceiling between ` + `$${ASSIST_OVERAGE_CAP_MIN_USD} and ` + `$${ASSIST_OVERAGE_CAP_MAX_USD.toLocaleString('en-US')}, ` + `or clear it.`,
+                    code: 'invalid_cap'
+                }, {
+                    status: 400
+                });
+            }
+            if (!clearing && !sellsOverage) {
+                return Response.json({
+                    error: bandCredits === null ? 'Your plan includes no AI assist credits, so there is no ' + 'overage to cap. Upgrade in Billing to add AI assist.' : 'Your plan already stops AI assist at its included band — ' + 'it sells no credits past it, so there is no overage to cap.',
+                    code: 'not_sold'
+                }, {
+                    status: 409
+                });
+            }
+            const requestedCap = clearing ? null : raw;
+            await orgRef.set({
+                assistOverage: {
+                    capUsd: requestedCap,
+                    capSetAt: FieldValue.serverTimestamp(),
+                    capSetBy: decoded.uid
+                }
+            }, {
+                merge: true
+            });
+            await firebaseAdmin.app().firestore().collection('adminAudit').add({
+                actorUid: decoded.uid,
+                actorEmail: (_decoded_email2 = decoded.email) != null ? _decoded_email2 : null,
+                action: 'billing.assistOverage.setCap',
+                target: `orgs/${orgId}`,
+                before: {
+                    capUsd
+                },
+                after: {
+                    capUsd: requestedCap
+                },
+                at: FieldValue.serverTimestamp()
+            }).catch(()=>undefined);
+            // The customer's own feed (AGL-2929): `adminAudit` is staff-only, and
+            // the workspace should see who set its ceiling. Nothing when the value
+            // did not move.
+            await logAiOverageControl(orgId, {
+                uid: decoded.uid,
+                email: (_decoded_email3 = decoded.email) != null ? _decoded_email3 : null
+            }, {
+                control: 'cap',
+                before: capUsd,
+                after: requestedCap
+            });
+            return Response.json({
+                ok: true,
+                capUsd: requestedCap
+            }, {
+                status: 200
+            });
+        }
+        // Strictly a boolean, the same way the resolver reads it strictly: a
+        // string "false" arriving here would otherwise be stored as `true`.
+        if (typeof (body == null ? void 0 : body.hardCap) !== 'boolean') {
+            return Response.json({
+                error: 'hardCap must be true or false',
+                code: 'invalid_value'
+            }, {
+                status: 400
+            });
+        }
+        const requested = body.hardCap;
+        if (requested && !sellsOverage) {
+            return Response.json({
+                error: bandCredits === null ? 'Your plan includes no AI assist credits, so there is no band ' + 'to stop at. Upgrade in Billing to add AI assist.' : 'Your plan already stops AI assist at its included band — ' + 'it sells no credits past it, so there is nothing to switch off.',
+                code: 'not_sold'
+            }, {
+                status: 409
+            });
+        }
+        await orgRef.set({
+            assistOverage: {
+                hardCap: requested,
+                hardCapSetAt: FieldValue.serverTimestamp(),
+                hardCapSetBy: decoded.uid
+            }
+        }, {
+            merge: true
+        });
+        await firebaseAdmin.app().firestore().collection('adminAudit').add({
+            actorUid: decoded.uid,
+            actorEmail: (_decoded_email = decoded.email) != null ? _decoded_email : null,
+            action: 'billing.assistOverage.setHardCap',
+            target: `orgs/${orgId}`,
+            before: {
+                hardCap
+            },
+            after: {
+                hardCap: requested
+            },
+            at: FieldValue.serverTimestamp()
+        }).catch(()=>undefined);
+        await logAiOverageControl(orgId, {
+            uid: decoded.uid,
+            email: (_decoded_email1 = decoded.email) != null ? _decoded_email1 : null
+        }, {
+            control: 'hardCap',
+            before: hardCap,
+            after: requested
+        });
+        return Response.json({
+            ok: true,
+            hardCap: requested
+        }, {
+            status: 200
+        });
+    } catch (error) {
+        // A refused credential is a 401, not a fault of ours (AGL-1993). Null
+        // for anything else, so a real failure keeps the answer below.
+        const unauthenticated = invalidIdTokenResponse(error);
+        if (unauthenticated) return unauthenticated;
+        console.error(error);
+        return Response.json({
+            error: 'Assist overage update failed'
+        }, {
+            status: 500
+        });
+    }
+}
+export const dynamic = 'force-dynamic';
+export { handler as POST };
+
+//# sourceMappingURL=billing-overage.js.map

package/src/lib/server/billing-overage.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../libs/plugins/ai/src/lib/server/billing-overage.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { pluginRequestFromWeb } from '@aglyn/aglyn/server'\nimport {\n  ASSIST_HARD_CAP_CONTROL_LABEL,\n  ASSIST_OVERAGE_CAP_CONTROL_LABEL,\n  ASSIST_OVERAGE_CAP_MAX_USD,\n  ASSIST_OVERAGE_CAP_MIN_USD,\n  resolveAssistCreditBudget,\n  resolveAssistHardCap,\n  resolveAssistOverageCapUsd,\n  resolveAssistOverageRateUsdPer1k,\n} from '@aglyn/aglyn/app-utils/assist-credits'\nimport {\n  emailUnverifiedResponse,\n  firebaseAdmin,\n  isImpersonationSession,\n  memberHasOrgPermission,\n  resolveOrgMembership,\n} from '@aglyn/tenant-data-admin'\nimport { logAiOverageControl } from '../activity/ai-activity'\nimport { assistMonthOverage } from '@aglyn/aglyn/app-utils/assist-credits'\nimport { assistUsageMonth } from '../usage/assist-usage'\nimport { aiOverageBillsByInvoice } from '../billing/ai-overage-cutover'\nimport { aiOverageNextChargeUsd } from '../billing/ai-overage-gate'\nimport {\n  AI_BILLING_STANDING_DOC,\n  AI_BILLING_SUBCOLLECTION,\n  readAiOverageMonthLedger,\n} from '../billing/ai-overage-ledger'\nimport {\n  AI_OVERAGE_THRESHOLD_USD,\n  aiOverageCardOnFile,\n  aiOverageEffectiveCeilingUsd,\n  aiOverageStandingCeilingUsd,\n  aiOverageStep,\n  readAiOverageStanding,\n} from '../billing/ai-overage-standing'\nimport { FieldValue } from 'firebase-admin/firestore'\nimport { invalidIdTokenResponse } from '@aglyn/tenant-data-admin/server/id-token-refusal'\n\n// lockdown-423: exempt — self-serve billing surface, same posture as\n// billing/storage-overage beside it. AGL-1501 keeps billing-locked sessions\n// alive precisely so members can reach Billing, and this is the control that\n// stops an org accruing assist charges, so a 423 would trap it accruing them.\n\n/**\n * Read or set the org's own assist controls: the hard-cap switch (AGL-2653)\n * and the dollar ceiling on overage (AGL-2898).\n *\n * Credits past the plan's assist band are SOLD by default, at the rate\n * `resolveAssistOverageRateUsdPer1k` answers — the plan's listed\n * `extraAssistCreditsUsdPer1k`, or the add-on's rate on a plan that carries\n * its band only with the add-on. This route holds the two\n * controls a customer has over that, and nothing else — it is not a consent\n * surface, and there is nothing here an org must do before assist works.\n *\n *   `get`        → whether the switch is on, the ceiling if any, the band,\n *                  the rate the overage bills at, and whether the plan sells\n *                  overage at all\n *   `setHardCap` → store `hardCap: true | false`\n *   `setCap`     → store `capUsd: number`, or `null` to clear the ceiling\n *\n * `billing.manage`-gated, because both controls bound spend in both\n * directions: lifting either is what lets the org be invoiced further past\n * its band, and setting either is what stops a workspace's assistant.\n * Admin-SDK-only by construction — `assistOverage` is denied to every client\n * in the rules, so a member cannot lift their own ceiling or lower somebody\n * else's.\n *\n * TURNING THE SWITCH OFF AND CLEARING THE CEILING ARE ALWAYS AVAILABLE, on\n * any plan and at any usage level: an org that wants the sale back on must\n * not have to argue with a precondition. Turning the switch on, or setting a\n * ceiling, is refused, 409, on a plan that sells no overage — there the band\n * is already the wall (`assistBandRefuses`), and storing a control that\n * changes nothing would read as protection the org does not have.\n */\n/**\n * What the overage card needs to say about Aglyn's own limit (AGL-3011).\n *\n * Every figure is `null` before the cutover month. That is not a missing\n * value: it is the honest answer while overage still bills on the monthly\n * invoice, and rendering a ceiling and a \"next charge\" figure that nothing\n * enforces would be a promise the platform is not yet keeping.\n */\nasync function readAiOverageStandingForCard(\n  orgRef: FirebaseFirestore.DocumentReference,\n  org: Parameters<typeof aiOverageEffectiveCeilingUsd>[0],\n): Promise<{\n  aglynCeilingUsd: number | null\n  overageStep: number | null\n  overageThresholdUsd: number | null\n  overageChargedUsd: number | null\n  overageChargeCount: number | null\n  overageNextChargeUsd: number | null\n  overagePaused: string | null\n  overageCardOnFile: boolean | null\n  overageBillsByInvoice: boolean\n}> {\n  const now = new Date()\n  const month = assistUsageMonth(now)\n  const empty = {\n    aglynCeilingUsd: null,\n    overageStep: null,\n    overageThresholdUsd: null,\n    overageChargedUsd: null,\n    overageChargeCount: null,\n    overageNextChargeUsd: null,\n    overagePaused: null,\n    overageCardOnFile: null,\n    overageBillsByInvoice: false,\n  }\n  if (!aiOverageBillsByInvoice(month)) return empty\n  const [standingSnapshot, usageSnapshot] = await Promise.all([\n    orgRef.collection(AI_BILLING_SUBCOLLECTION).doc(AI_BILLING_STANDING_DOC).get(),\n    orgRef.collection('assistUsage').doc(month).get(),\n  ])\n  const standing = readAiOverageStanding(\n    standingSnapshot.exists ? (standingSnapshot.data() ?? null) : null,\n  )\n  const ledger = readAiOverageMonthLedger(\n    usageSnapshot.exists ? (usageSnapshot.data() ?? null) : null,\n  )\n  const priced = assistMonthOverage(org, Number(usageSnapshot.get('estCostUsd') ?? 0))\n  return {\n    aglynCeilingUsd: aiOverageStandingCeilingUsd(standing, now),\n    overageStep: aiOverageStep(standing),\n    overageThresholdUsd: AI_OVERAGE_THRESHOLD_USD,\n    overageChargedUsd: ledger.paidUsd,\n    overageChargeCount: ledger.charges,\n    overageNextChargeUsd: aiOverageNextChargeUsd(\n      priced.overageMonthlyUsd,\n      ledger.invoicedUsd,\n    ),\n    overagePaused: standing.pause?.reason ?? null,\n    overageCardOnFile: aiOverageCardOnFile(standing) ?? null,\n    overageBillsByInvoice: true,\n  }\n}\n\nasync function handler(request: Request): Promise<Response> {\n  const { method, body, headers: rawHeaders } = await pluginRequestFromWeb(request)\n  const headers = rawHeaders as Partial<Record<string, string>>\n  if (method !== 'POST') {\n    return Response.json({ error: 'Method not allowed' }, { status: 405 })\n  }\n  const authorization = headers.authorization ?? ''\n  const idToken = authorization.startsWith('Bearer ')\n    ? authorization.slice('Bearer '.length)\n    : undefined\n  if (!idToken) return Response.json({ error: 'Unauthenticated' }, { status: 401 })\n  const orgId = String(body?.orgId ?? '')\n  const action = String(body?.action ?? '')\n  if (!orgId || !['get', 'setHardCap', 'setCap'].includes(action)) {\n    return Response.json({ error: 'Bad request' }, { status: 400 })\n  }\n\n  try {\n    const decoded = await firebaseAdmin.app().auth().verifyIdToken(idToken)\n    if (!decoded.email_verified && !isImpersonationSession(decoded)) {\n      return emailUnverifiedResponse()\n    }\n    const isStaff = decoded['staff'] === true\n    const actor = await resolveOrgMembership(decoded.uid, orgId)\n    if (\n      !isStaff &&\n      !(await memberHasOrgPermission(orgId, actor?.member, 'billing.manage'))\n    ) {\n      return Response.json({ error: 'billing.manage required' }, { status: 403 })\n    }\n\n    const orgRef = firebaseAdmin.app().firestore().collection('orgs').doc(orgId)\n    const orgSnapshot = await orgRef.get()\n    if (!orgSnapshot.exists) {\n      return Response.json({ error: 'Unknown organization' }, { status: 404 })\n    }\n    const org = (orgSnapshot.data() ?? {}) as Record<string, unknown>\n    const hardCap = resolveAssistHardCap(org as never)\n    const capUsd = resolveAssistOverageCapUsd(org as never)\n    const bandCredits = resolveAssistCreditBudget(org as never)\n    // The rate the card quotes must be the rate the rollup bills, so it is\n    // read through the one resolver every reader of the rate goes through.\n    // That mattered acutely under AGL-3014, when Starter's rate lived off\n    // `PLAN_PRICING` and reading the table directly quoted $0.00 on an org\n    // that was really being invoiced. AGL-3203 put the rate on Starter's own\n    // row and deleted the exception, so the table and the resolver now agree\n    // — and this still reads the resolver, because a comp is priced at\n    // nothing and only `resolvePlanPricing` knows that.\n    const overageRateUsdPer1k = resolveAssistOverageRateUsdPer1k(org as never)\n    const sellsOverage = bandCredits !== null && overageRateUsdPer1k !== null\n\n    if (action === 'get') {\n      // AGLYN'S OWN LIMIT BESIDE THE WORKSPACE'S (AGL-3011). The card shows\n      // both because the LOWER of the two binds, and a card that showed only\n      // the figure the workspace set would explain neither the refusal it\n      // gets at Aglyn's nor the charge it sees before its own is reached.\n      //\n      // `null` for every figure while the platform still bills overage on\n      // the monthly invoice, so the card keeps saying what is true today\n      // rather than describing a mechanism that is not running.\n      const overage = await readAiOverageStandingForCard(orgRef, org as never)\n      return Response.json(\n        {\n          hardCap,\n          capUsd,\n          bandCredits,\n          overageRateUsdPer1k,\n          sellsOverage,\n          ...overage,\n          label: ASSIST_HARD_CAP_CONTROL_LABEL,\n          capLabel: ASSIST_OVERAGE_CAP_CONTROL_LABEL,\n          minCapUsd: ASSIST_OVERAGE_CAP_MIN_USD,\n          maxCapUsd: ASSIST_OVERAGE_CAP_MAX_USD,\n        },\n        { status: 200 },\n      )\n    }\n\n    if (action === 'setCap') {\n      const raw = body?.capUsd\n      // `null` clears; anything else must be a real number in a real range.\n      // A string \"25\" is refused rather than coerced, the way the switch\n      // refuses a string \"false\": the resolver reads the field strictly, so\n      // a value that reached the document as a string would be no ceiling\n      // at all while the card said one was set.\n      const clearing = raw === null\n      if (\n        !clearing &&\n        (typeof raw !== 'number' ||\n          !Number.isFinite(raw) ||\n          raw < ASSIST_OVERAGE_CAP_MIN_USD ||\n          raw > ASSIST_OVERAGE_CAP_MAX_USD)\n      ) {\n        return Response.json(\n          {\n            error:\n              `Set a monthly AI overage ceiling between ` +\n              `$${ASSIST_OVERAGE_CAP_MIN_USD} and ` +\n              `$${ASSIST_OVERAGE_CAP_MAX_USD.toLocaleString('en-US')}, ` +\n              `or clear it.`,\n            code: 'invalid_cap',\n          },\n          { status: 400 },\n        )\n      }\n      if (!clearing && !sellsOverage) {\n        return Response.json(\n          {\n            error:\n              bandCredits === null\n                ? 'Your plan includes no AI assist credits, so there is no ' +\n                  'overage to cap. Upgrade in Billing to add AI assist.'\n                : 'Your plan already stops AI assist at its included band — ' +\n                  'it sells no credits past it, so there is no overage to cap.',\n            code: 'not_sold',\n          },\n          { status: 409 },\n        )\n      }\n      const requestedCap = clearing ? null : (raw as number)\n      await orgRef.set(\n        {\n          assistOverage: {\n            capUsd: requestedCap,\n            capSetAt: FieldValue.serverTimestamp(),\n            capSetBy: decoded.uid,\n          },\n        },\n        { merge: true },\n      )\n      await firebaseAdmin\n        .app()\n        .firestore()\n        .collection('adminAudit')\n        .add({\n          actorUid: decoded.uid,\n          actorEmail: decoded.email ?? null,\n          action: 'billing.assistOverage.setCap',\n          target: `orgs/${orgId}`,\n          before: { capUsd },\n          after: { capUsd: requestedCap },\n          at: FieldValue.serverTimestamp(),\n        })\n        .catch(() => undefined)\n      // The customer's own feed (AGL-2929): `adminAudit` is staff-only, and\n      // the workspace should see who set its ceiling. Nothing when the value\n      // did not move.\n      await logAiOverageControl(\n        orgId,\n        { uid: decoded.uid, email: decoded.email ?? null },\n        { control: 'cap', before: capUsd, after: requestedCap },\n      )\n      return Response.json({ ok: true, capUsd: requestedCap }, { status: 200 })\n    }\n\n    // Strictly a boolean, the same way the resolver reads it strictly: a\n    // string \"false\" arriving here would otherwise be stored as `true`.\n    if (typeof body?.hardCap !== 'boolean') {\n      return Response.json(\n        { error: 'hardCap must be true or false', code: 'invalid_value' },\n        { status: 400 },\n      )\n    }\n    const requested = body.hardCap as boolean\n\n    if (requested && !sellsOverage) {\n      return Response.json(\n        {\n          error:\n            bandCredits === null\n              ? 'Your plan includes no AI assist credits, so there is no band ' +\n                'to stop at. Upgrade in Billing to add AI assist.'\n              : 'Your plan already stops AI assist at its included band — ' +\n                'it sells no credits past it, so there is nothing to switch off.',\n          code: 'not_sold',\n        },\n        { status: 409 },\n      )\n    }\n\n    await orgRef.set(\n      {\n        assistOverage: {\n          hardCap: requested,\n          hardCapSetAt: FieldValue.serverTimestamp(),\n          hardCapSetBy: decoded.uid,\n        },\n      },\n      { merge: true },\n    )\n    await firebaseAdmin\n      .app()\n      .firestore()\n      .collection('adminAudit')\n      .add({\n        actorUid: decoded.uid,\n        actorEmail: decoded.email ?? null,\n        action: 'billing.assistOverage.setHardCap',\n        target: `orgs/${orgId}`,\n        before: { hardCap },\n        after: { hardCap: requested },\n        at: FieldValue.serverTimestamp(),\n      })\n      .catch(() => undefined)\n    await logAiOverageControl(\n      orgId,\n      { uid: decoded.uid, email: decoded.email ?? null },\n      { control: 'hardCap', before: hardCap, after: requested },\n    )\n\n    return Response.json({ ok: true, hardCap: requested }, { status: 200 })\n  } catch (error) {\n    // A refused credential is a 401, not a fault of ours (AGL-1993). Null\n    // for anything else, so a real failure keeps the answer below.\n    const unauthenticated = invalidIdTokenResponse(error)\n    if (unauthenticated) return unauthenticated\n    console.error(error)\n    return Response.json(\n      { error: 'Assist overage update failed' },\n      { status: 500 },\n    )\n  }\n}\n\nexport const dynamic = 'force-dynamic'\nexport { handler as POST }\n"],"names":["pluginRequestFromWeb","ASSIST_HARD_CAP_CONTROL_LABEL","ASSIST_OVERAGE_CAP_CONTROL_LABEL","ASSIST_OVERAGE_CAP_MAX_USD","ASSIST_OVERAGE_CAP_MIN_USD","resolveAssistCreditBudget","resolveAssistHardCap","resolveAssistOverageCapUsd","resolveAssistOverageRateUsdPer1k","emailUnverifiedResponse","firebaseAdmin","isImpersonationSession","memberHasOrgPermission","resolveOrgMembership","logAiOverageControl","assistMonthOverage","assistUsageMonth","aiOverageBillsByInvoice","aiOverageNextChargeUsd","AI_BILLING_STANDING_DOC","AI_BILLING_SUBCOLLECTION","readAiOverageMonthLedger","AI_OVERAGE_THRESHOLD_USD","aiOverageCardOnFile","aiOverageStandingCeilingUsd","aiOverageStep","readAiOverageStanding","FieldValue","invalidIdTokenResponse","readAiOverageStandingForCard","orgRef","org","standingSnapshot","usageSnapshot","standing","now","Date","month","empty","aglynCeilingUsd","overageStep","overageThresholdUsd","overageChargedUsd","overageChargeCount","overageNextChargeUsd","overagePaused","overageCardOnFile","overageBillsByInvoice","Promise","all","collection","doc","get","exists","data","ledger","priced","Number","paidUsd","charges","overageMonthlyUsd","invoicedUsd","pause","reason","handler","request","headers","method","body","rawHeaders","Response","json","error","status","authorization","idToken","startsWith","slice","length","undefined","orgId","String","action","includes","orgSnapshot","decoded","app","auth","verifyIdToken","email_verified","isStaff","actor","uid","member","firestore","hardCap","capUsd","bandCredits","overageRateUsdPer1k","sellsOverage","overage","label","capLabel","minCapUsd","maxCapUsd","raw","clearing","isFinite","toLocaleString","code","requestedCap","set","assistOverage","capSetAt","serverTimestamp","capSetBy","merge","add","actorUid","actorEmail","email","target","before","after","at","catch","control","ok","requested","hardCapSetAt","hardCapSetBy","unauthenticated","console","dynamic","POST"],"mappings":";AAAA;;;;;;;;;;;;;;;CAeC,GAED,SAASA,oBAAoB,QAAQ,sBAAqB;AAC1D,SACEC,6BAA6B,EAC7BC,gCAAgC,EAChCC,0BAA0B,EAC1BC,0BAA0B,EAC1BC,yBAAyB,EACzBC,oBAAoB,EACpBC,0BAA0B,EAC1BC,gCAAgC,QAC3B,wCAAuC;AAC9C,SACEC,uBAAuB,EACvBC,aAAa,EACbC,sBAAsB,EACtBC,sBAAsB,EACtBC,oBAAoB,QACf,2BAA0B;AACjC,SAASC,mBAAmB,QAAQ,6BAAyB;AAC7D,SAASC,kBAAkB,QAAQ,wCAAuC;AAC1E,SAASC,gBAAgB,QAAQ,2BAAuB;AACxD,SAASC,uBAAuB,QAAQ,mCAA+B;AACvE,SAASC,sBAAsB,QAAQ,gCAA4B;AACnE,SACEC,uBAAuB,EACvBC,wBAAwB,EACxBC,wBAAwB,QACnB,kCAA8B;AACrC,SACEC,wBAAwB,EACxBC,mBAAmB,EAEnBC,2BAA2B,EAC3BC,aAAa,EACbC,qBAAqB,QAChB,oCAAgC;AACvC,SAASC,UAAU,QAAQ,2BAA0B;AACrD,SAASC,sBAAsB,QAAQ,mDAAkD;AAEzF,qEAAqE;AACrE,4EAA4E;AAC5E,6EAA6E;AAC7E,8EAA8E;AAE9E;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA8BC,GACD;;;;;;;CAOC,GACD,eAAeC,6BACbC,MAA2C,EAC3CC,GAAuD;QA+B1BC,wBAGHC,qBAEoBA,0BAYzBV;QADJW;IAnCjB,MAAMC,MAAM,IAAIC;IAChB,MAAMC,QAAQrB,iBAAiBmB;IAC/B,MAAMG,QAAQ;QACZC,iBAAiB;QACjBC,aAAa;QACbC,qBAAqB;QACrBC,mBAAmB;QACnBC,oBAAoB;QACpBC,sBAAsB;QACtBC,eAAe;QACfC,mBAAmB;QACnBC,uBAAuB;IACzB;IACA,IAAI,CAAC9B,wBAAwBoB,QAAQ,OAAOC;IAC5C,MAAM,CAACN,kBAAkBC,cAAc,GAAG,MAAMe,QAAQC,GAAG,CAAC;QAC1DnB,OAAOoB,UAAU,CAAC9B,0BAA0B+B,GAAG,CAAChC,yBAAyBiC,GAAG;QAC5EtB,OAAOoB,UAAU,CAAC,eAAeC,GAAG,CAACd,OAAOe,GAAG;KAChD;IACD,MAAMlB,WAAWR,sBACfM,iBAAiBqB,MAAM,IAAIrB,yBAAAA,iBAAiBsB,IAAI,cAArBtB,yBAA2B,OAAQ;IAEhE,MAAMuB,SAASlC,yBACbY,cAAcoB,MAAM,IAAIpB,sBAAAA,cAAcqB,IAAI,cAAlBrB,sBAAwB,OAAQ;IAE1D,MAAMuB,SAASzC,mBAAmBgB,KAAK0B,QAAOxB,qBAAAA,cAAcmB,GAAG,CAAC,yBAAlBnB,qBAAmC;IACjF,OAAO;QACLM,iBAAiBf,4BAA4BU,UAAUC;QACvDK,aAAaf,cAAcS;QAC3BO,qBAAqBnB;QACrBoB,mBAAmBa,OAAOG,OAAO;QACjCf,oBAAoBY,OAAOI,OAAO;QAClCf,sBAAsB1B,uBACpBsC,OAAOI,iBAAiB,EACxBL,OAAOM,WAAW;QAEpBhB,aAAa,WAAEX,kBAAAA,SAAS4B,KAAK,qBAAd5B,gBAAgB6B,MAAM,mBAAI;QACzCjB,iBAAiB,GAAEvB,uBAAAA,oBAAoBW,qBAApBX,uBAAiC;QACpDwB,uBAAuB;IACzB;AACF;AAEA,eAAeiB,QAAQC,OAAgB;QAMfC;IALtB,MAAM,EAAEC,MAAM,EAAEC,IAAI,EAAEF,SAASG,UAAU,EAAE,GAAG,MAAMrE,qBAAqBiE;IACzE,MAAMC,UAAUG;IAChB,IAAIF,WAAW,QAAQ;QACrB,OAAOG,SAASC,IAAI,CAAC;YAAEC,OAAO;QAAqB,GAAG;YAAEC,QAAQ;QAAI;IACtE;IACA,MAAMC,iBAAgBR,yBAAAA,QAAQQ,aAAa,YAArBR,yBAAyB;IAC/C,MAAMS,UAAUD,cAAcE,UAAU,CAAC,aACrCF,cAAcG,KAAK,CAAC,UAAUC,MAAM,IACpCC;IACJ,IAAI,CAACJ,SAAS,OAAOL,SAASC,IAAI,CAAC;QAAEC,OAAO;IAAkB,GAAG;QAAEC,QAAQ;IAAI;IAC/E,MAAMO,QAAQC,eAAOb,wBAAAA,KAAMY,KAAK,mBAAI;IACpC,MAAME,SAASD,gBAAOb,wBAAAA,KAAMc,MAAM,oBAAI;IACtC,IAAI,CAACF,SAAS,CAAC;QAAC;QAAO;QAAc;KAAS,CAACG,QAAQ,CAACD,SAAS;QAC/D,OAAOZ,SAASC,IAAI,CAAC;YAAEC,OAAO;QAAc,GAAG;YAAEC,QAAQ;QAAI;IAC/D;IAEA,IAAI;YAmBWW,mBAgKGC,gBAUaA;QA5L7B,MAAMA,UAAU,MAAM3E,cAAc4E,GAAG,GAAGC,IAAI,GAAGC,aAAa,CAACb;QAC/D,IAAI,CAACU,QAAQI,cAAc,IAAI,CAAC9E,uBAAuB0E,UAAU;YAC/D,OAAO5E;QACT;QACA,MAAMiF,UAAUL,OAAO,CAAC,QAAQ,KAAK;QACrC,MAAMM,QAAQ,MAAM9E,qBAAqBwE,QAAQO,GAAG,EAAEZ;QACtD,IACE,CAACU,WACD,CAAE,MAAM9E,uBAAuBoE,OAAOW,yBAAAA,MAAOE,MAAM,EAAE,mBACrD;YACA,OAAOvB,SAASC,IAAI,CAAC;gBAAEC,OAAO;YAA0B,GAAG;gBAAEC,QAAQ;YAAI;QAC3E;QAEA,MAAM3C,SAASpB,cAAc4E,GAAG,GAAGQ,SAAS,GAAG5C,UAAU,CAAC,QAAQC,GAAG,CAAC6B;QACtE,MAAMI,cAAc,MAAMtD,OAAOsB,GAAG;QACpC,IAAI,CAACgC,YAAY/B,MAAM,EAAE;YACvB,OAAOiB,SAASC,IAAI,CAAC;gBAAEC,OAAO;YAAuB,GAAG;gBAAEC,QAAQ;YAAI;QACxE;QACA,MAAM1C,OAAOqD,oBAAAA,YAAY9B,IAAI,cAAhB8B,oBAAsB,CAAC;QACpC,MAAMW,UAAUzF,qBAAqByB;QACrC,MAAMiE,SAASzF,2BAA2BwB;QAC1C,MAAMkE,cAAc5F,0BAA0B0B;QAC9C,uEAAuE;QACvE,uEAAuE;QACvE,sEAAsE;QACtE,uEAAuE;QACvE,yEAAyE;QACzE,yEAAyE;QACzE,mEAAmE;QACnE,oDAAoD;QACpD,MAAMmE,sBAAsB1F,iCAAiCuB;QAC7D,MAAMoE,eAAeF,gBAAgB,QAAQC,wBAAwB;QAErE,IAAIhB,WAAW,OAAO;YACpB,sEAAsE;YACtE,uEAAuE;YACvE,oEAAoE;YACpE,oEAAoE;YACpE,EAAE;YACF,oEAAoE;YACpE,mEAAmE;YACnE,0DAA0D;YAC1D,MAAMkB,UAAU,MAAMvE,6BAA6BC,QAAQC;YAC3D,OAAOuC,SAASC,IAAI,CAClB;gBACEwB;gBACAC;gBACAC;gBACAC;gBACAC;eACGC;gBACHC,OAAOpG;gBACPqG,UAAUpG;gBACVqG,WAAWnG;gBACXoG,WAAWrG;gBAEb;gBAAEsE,QAAQ;YAAI;QAElB;QAEA,IAAIS,WAAW,UAAU;gBA0DPG,iBAaaA;YAtE7B,MAAMoB,MAAMrC,wBAAAA,KAAM4B,MAAM;YACxB,sEAAsE;YACtE,mEAAmE;YACnE,sEAAsE;YACtE,oEAAoE;YACpE,0CAA0C;YAC1C,MAAMU,WAAWD,QAAQ;YACzB,IACE,CAACC,YACA,CAAA,OAAOD,QAAQ,YACd,CAAChD,OAAOkD,QAAQ,CAACF,QACjBA,MAAMrG,8BACNqG,MAAMtG,0BAAyB,GACjC;gBACA,OAAOmE,SAASC,IAAI,CAClB;oBACEC,OACE,CAAC,yCAAyC,CAAC,GAC3C,CAAC,CAAC,EAAEpE,2BAA2B,KAAK,CAAC,GACrC,CAAC,CAAC,EAAED,2BAA2ByG,cAAc,CAAC,SAAS,EAAE,CAAC,GAC1D,CAAC,YAAY,CAAC;oBAChBC,MAAM;gBACR,GACA;oBAAEpC,QAAQ;gBAAI;YAElB;YACA,IAAI,CAACiC,YAAY,CAACP,cAAc;gBAC9B,OAAO7B,SAASC,IAAI,CAClB;oBACEC,OACEyB,gBAAgB,OACZ,6DACA,yDACA,8DACA;oBACNY,MAAM;gBACR,GACA;oBAAEpC,QAAQ;gBAAI;YAElB;YACA,MAAMqC,eAAeJ,WAAW,OAAQD;YACxC,MAAM3E,OAAOiF,GAAG,CACd;gBACEC,eAAe;oBACbhB,QAAQc;oBACRG,UAAUtF,WAAWuF,eAAe;oBACpCC,UAAU9B,QAAQO,GAAG;gBACvB;YACF,GACA;gBAAEwB,OAAO;YAAK;YAEhB,MAAM1G,cACH4E,GAAG,GACHQ,SAAS,GACT5C,UAAU,CAAC,cACXmE,GAAG,CAAC;gBACHC,UAAUjC,QAAQO,GAAG;gBACrB2B,UAAU,GAAElC,kBAAAA,QAAQmC,KAAK,YAAbnC,kBAAiB;gBAC7BH,QAAQ;gBACRuC,QAAQ,CAAC,KAAK,EAAEzC,OAAO;gBACvB0C,QAAQ;oBAAE1B;gBAAO;gBACjB2B,OAAO;oBAAE3B,QAAQc;gBAAa;gBAC9Bc,IAAIjG,WAAWuF,eAAe;YAChC,GACCW,KAAK,CAAC,IAAM9C;YACf,sEAAsE;YACtE,uEAAuE;YACvE,gBAAgB;YAChB,MAAMjE,oBACJkE,OACA;gBAAEY,KAAKP,QAAQO,GAAG;gBAAE4B,KAAK,GAAEnC,kBAAAA,QAAQmC,KAAK,YAAbnC,kBAAiB;YAAK,GACjD;gBAAEyC,SAAS;gBAAOJ,QAAQ1B;gBAAQ2B,OAAOb;YAAa;YAExD,OAAOxC,SAASC,IAAI,CAAC;gBAAEwD,IAAI;gBAAM/B,QAAQc;YAAa,GAAG;gBAAErC,QAAQ;YAAI;QACzE;QAEA,qEAAqE;QACrE,oEAAoE;QACpE,IAAI,QAAOL,wBAAAA,KAAM2B,OAAO,MAAK,WAAW;YACtC,OAAOzB,SAASC,IAAI,CAClB;gBAAEC,OAAO;gBAAiCqC,MAAM;YAAgB,GAChE;gBAAEpC,QAAQ;YAAI;QAElB;QACA,MAAMuD,YAAY5D,KAAK2B,OAAO;QAE9B,IAAIiC,aAAa,CAAC7B,cAAc;YAC9B,OAAO7B,SAASC,IAAI,CAClB;gBACEC,OACEyB,gBAAgB,OACZ,kEACA,qDACA,8DACA;gBACNY,MAAM;YACR,GACA;gBAAEpC,QAAQ;YAAI;QAElB;QAEA,MAAM3C,OAAOiF,GAAG,CACd;YACEC,eAAe;gBACbjB,SAASiC;gBACTC,cAActG,WAAWuF,eAAe;gBACxCgB,cAAc7C,QAAQO,GAAG;YAC3B;QACF,GACA;YAAEwB,OAAO;QAAK;QAEhB,MAAM1G,cACH4E,GAAG,GACHQ,SAAS,GACT5C,UAAU,CAAC,cACXmE,GAAG,CAAC;YACHC,UAAUjC,QAAQO,GAAG;YACrB2B,UAAU,GAAElC,iBAAAA,QAAQmC,KAAK,YAAbnC,iBAAiB;YAC7BH,QAAQ;YACRuC,QAAQ,CAAC,KAAK,EAAEzC,OAAO;YACvB0C,QAAQ;gBAAE3B;YAAQ;YAClB4B,OAAO;gBAAE5B,SAASiC;YAAU;YAC5BJ,IAAIjG,WAAWuF,eAAe;QAChC,GACCW,KAAK,CAAC,IAAM9C;QACf,MAAMjE,oBACJkE,OACA;YAAEY,KAAKP,QAAQO,GAAG;YAAE4B,KAAK,GAAEnC,kBAAAA,QAAQmC,KAAK,YAAbnC,kBAAiB;QAAK,GACjD;YAAEyC,SAAS;YAAWJ,QAAQ3B;YAAS4B,OAAOK;QAAU;QAG1D,OAAO1D,SAASC,IAAI,CAAC;YAAEwD,IAAI;YAAMhC,SAASiC;QAAU,GAAG;YAAEvD,QAAQ;QAAI;IACvE,EAAE,OAAOD,OAAO;QACd,sEAAsE;QACtE,+DAA+D;QAC/D,MAAM2D,kBAAkBvG,uBAAuB4C;QAC/C,IAAI2D,iBAAiB,OAAOA;QAC5BC,QAAQ5D,KAAK,CAACA;QACd,OAAOF,SAASC,IAAI,CAClB;YAAEC,OAAO;QAA+B,GACxC;YAAEC,QAAQ;QAAI;IAElB;AACF;AAEA,OAAO,MAAM4D,UAAU,gBAAe;AACtC,SAASrE,WAAWsE,IAAI,GAAE"}

package/src/lib/server.d.ts

@@ -0,0 +1,32 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+export * from './providers/contract';
+export * from './providers/catalog';
+export * from './providers/registry';
+export * from './providers/routing';
+export * from './runtime/ai-runtime';
+/**
+ * The console-side API (AGL-2939): every AI door, under the `ai` and
+ * `assist` prefixes the plugin owns. The URLs the panel and the besigner
+ * call are unchanged — `/api/assist/chat`, `/api/ai/assist`,
+ * `/api/ai/jobs` — because the dispatcher serves them from the registry
+ * exactly where the named routes used to; the two billing doors and the
+ * per-member usage read (`ai/usage`) live under the plugin's own prefix.
+ * The jobs beat is the one path outside them, for the reason
+ * `AI_JOBS_BEAT_PATH` gives.
+ */
+export declare function registerAiConsoleApi(): void;