@aglyn/plugins-ai 1.0.0-beta.143

package/src/lib/tools/ai-workflow-tool.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../libs/plugins/ai/src/lib/tools/ai-workflow-tool.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport {\n  ACTION_MAX_CONDITIONS,\n  ACTION_MAX_STEPS,\n  CONTACT_TAG_MAX_LENGTH,\n  FLOW_TIMED_OUT_FIELD,\n  FLOW_WAIT_MAX_MINUTES,\n  FLOW_WAIT_MIN_MINUTES,\n  HOST_ACTION_STEP_LABELS,\n  TRIGGER_COMBINATORS,\n  TRIGGER_CONDITION_OPS,\n  type TriggerCombinator,\n  type TriggerConditionOp,\n} from '@aglyn/aglyn/app-utils/actions'\nimport {\n  CONTACT_LIFECYCLE_STAGE_LABELS,\n  CONTACT_LIFECYCLE_STAGES,\n  CRM_ACTIVITY_KINDS,\n  CRM_TASK_KINDS,\n  CRM_TASK_MAX_DUE_DAYS,\n  type ContactLifecycleStage,\n  type CrmActivityKind,\n  type CrmTaskKind,\n} from '@aglyn/aglyn/app-utils/crm'\nimport {\n  HOST_EVENT_PAYLOAD_KEYS,\n  HOST_EVENT_TYPES,\n  type HostEventType,\n} from '@aglyn/aglyn/app-utils/workflows'\nimport {\n  AI_AUTOMATION_NEED_LABELS,\n  AI_AUTOMATION_STEP_NEEDS,\n  AI_AUTOMATION_STEP_TYPES,\n  AI_AUTOMATION_TRIGGER_NEEDS,\n  AI_AUTOMATION_UNSUPPORTED,\n  AI_AUTOMATION_UNSUPPORTED_NEED,\n  aiAutomationTriggerLabel,\n  type AiAutomationCapabilities,\n  type AiAutomationStepType,\n  type AiAutomationUnsupported,\n} from '../model/ai-workflow-job'\nimport type { AiTool } from '../providers/contract'\nimport type { AiGenerationCheckResult } from '../runtime/ai-doctrine'\nimport type { AiDoctrineViolation } from '../runtime/ai-doctrine-validators'\nimport { HOSTILE_TEXT } from '../runtime/ai-node-tree'\n\n/**\n * The two tools a `workflow` job answers through (AGL-2919).\n *\n * `submit_automation` carries one automation in the Actions editor's own\n * vocabulary — a trigger from the host events, conditions over the fields the\n * trigger carries, and steps from the automation step types — with every\n * record it names written as WORDS. The step resolves those words against the\n * site after the answer, so the model is never shown the site's lists,\n * campaigns, workflows, webhooks or pipeline stages, and never writes an id it\n * could only have invented.\n *\n * `submit_explanation` carries a plain-words account of one automation, or of\n * why one of its runs failed.\n *\n * Both schemas are strict: every object forbids extra keys and requires every\n * key it has, and nothing in either is a `null`. Where a step may go without\n * something, the absence is an empty list or an empty string: a step that\n * always runs has an empty `when`, a notEmpty condition compares against\n * nothing, and an answer that builds an automation leaves `unsupported`\n * empty. Bounds a strict schema cannot state are stated in the descriptions\n * and held by the readers below, whose refusals name the field so the one\n * re-ask can fix it.\n *\n * A provider that constrains decoding compiles every strict schema of a\n * request into a grammar, and refuses one whose grammar grows past its size\n * (`AiToolSchemaLimits`). So the steps' union carries as little repetition as\n * a grammar can be made to hold:\n *\n *  - a step is its guard and its action, `{ when, action }`, so the condition\n *    is compiled once for the whole union instead of once per variant;\n *  - a variant serves every step type that carries the same fields, named for\n *    what they hold: the six steps that name a record share `reference`, and\n *    the three that carry one line share `text`;\n *  - every field stays required and every vocabulary stays an enum, so the\n *    model is still decoded into the Actions editor's words.\n *\n * Ten variants carry all seventeen step types, and the reader below maps the\n * shared fields back onto the step's own key.\n */\n\nexport const AI_AUTOMATION_TOOL_NAME = 'submit_automation'\nexport const AI_WORKFLOW_EXPLANATION_TOOL_NAME = 'submit_explanation'\n\n/** The longest automation name the Actions editor stores. */\nexport const AI_AUTOMATION_NAME_MAX_CHARS = 60\n/** The longest subject the executor sends. */\nexport const AI_AUTOMATION_SUBJECT_MAX_CHARS = 200\n/** The longest email text the executor sends. */\nexport const AI_AUTOMATION_BODY_MAX_CHARS = 5_000\n/** The longest title, message or record name a step carries. */\nexport const AI_AUTOMATION_TEXT_MAX_CHARS = 300\n/** The longest words naming a record. */\nexport const AI_AUTOMATION_REFERENCE_MAX_CHARS = 100\n/** The longest condition value. */\nexport const AI_AUTOMATION_VALUE_MAX_CHARS = 200\n/** The most notes an answer keeps, and the longest. */\nexport const AI_AUTOMATION_NOTES_MAX = 3\nexport const AI_AUTOMATION_NOTE_MAX_CHARS = 300\n/**\n * The longest a whole answer may be, written out as JSON: what the routing\n * ceiling for `job.workflow` holds at three characters a token with as much\n * again to think in (`ai-job-workflow-step.spec.ts` measures it). Ten steps\n * with two emails of a paragraph or two each come to about 2,400, each step\n * carrying only its own fields.\n */\nexport const AI_AUTOMATION_ANSWER_MAX_CHARS = 6_000\n\n/** The explanation's bounds. */\nexport const AI_WORKFLOW_SUMMARY_MAX_CHARS = 400\nexport const AI_WORKFLOW_POINTS_MAX = 8\nexport const AI_WORKFLOW_SUGGESTIONS_MAX = 4\nexport const AI_WORKFLOW_LINE_MAX_CHARS = 300\n\nconst SEVERITIES = ['info', 'success', 'warning', 'error'] as const\ntype Severity = (typeof SEVERITIES)[number]\n\ntype Schema = Record<string, unknown>\n\n/**\n * What the schema defines once and refers to where it is used: a condition,\n * which the trigger and every step's guard share, and the guard itself.\n */\nconst DEFINITIONS: Schema = {\n  condition: {\n    type: 'object',\n    additionalProperties: false,\n    required: ['field', 'op', 'value'],\n    properties: {\n      field: {\n        type: 'string',\n        description: 'The field of the event the condition reads, as the trigger lists its fields.',\n      },\n      op: { type: 'string', enum: [...TRIGGER_CONDITION_OPS] },\n      value: {\n        type: 'string',\n        description: 'What equals or contains compares against; empty for notEmpty.',\n      },\n    },\n  },\n  event: {\n    type: 'string',\n    enum: [...HOST_EVENT_TYPES],\n    description: 'One of the things that happen on a site.',\n  },\n  // A list rather than a condition or `null`: a step goes without one by an\n  // empty list, which costs no union.\n  when: {\n    type: 'array',\n    description: 'At most one condition: the step runs only when it holds. Empty when the step always runs.',\n    items: { $ref: '#/$defs/condition' },\n  },\n}\n\n/** The steps that name one of the site's records, which they all name the same way. */\nconst REFERENCE_STEPS = [\n  'enrollList',\n  'assignCampaign',\n  'runWorkflow',\n  'datasetAppend',\n  'updateDataset',\n  'webhookPost',\n] as const satisfies readonly AiAutomationStepType[]\n\n/** The steps whose only field is the one line they carry. */\nconst TEXT_STEPS = [\n  'notifyAdmins',\n  'addContactTag',\n  'assignContactOwner',\n] as const satisfies readonly AiAutomationStepType[]\n\n/** The key each `reference` step fills in the answer the reader gives back. */\nconst REFERENCE_KEY = {\n  enrollList: 'list',\n  assignCampaign: 'campaign',\n  runWorkflow: 'workflow',\n  datasetAppend: 'dataset',\n  updateDataset: 'dataset',\n  webhookPost: 'webhook',\n} as const satisfies Readonly<Record<(typeof REFERENCE_STEPS)[number], keyof AiAutomationAnswerStep>>\n\n/**\n * The key each step's one line fills in the answer the reader gives back. Six\n * step types carry one line between them, so the schema asks for all six\n * under `text` and the reader puts each back where the automation keeps it.\n */\nconst TEXT_KEY = {\n  notifyAdmins: 'title',\n  addContactTag: 'tag',\n  assignContactOwner: 'owner',\n  siteAlert: 'message',\n  createCrmTask: 'title',\n  logCrmActivity: 'body',\n} as const satisfies Readonly<Partial<Record<AiAutomationStepType, keyof AiAutomationAnswerStep>>>\n\nconst minutes = (what: string): Schema => ({\n  type: 'integer',\n  description: `${what}, in whole minutes from ${FLOW_WAIT_MIN_MINUTES} to ${FLOW_WAIT_MAX_MINUTES}; an hour is 60 and a day 1440.`,\n})\n\n/**\n * One variant of the steps' union: the step types it serves, and the fields\n * every one of them carries, each required and never nullable. A type belongs\n * to exactly one variant, so the type a step names settles which fields it\n * writes.\n */\nfunction stepVariant(\n  types: readonly AiAutomationStepType[],\n  fields: Readonly<Record<string, Schema>>,\n): Schema {\n  return {\n    type: 'object',\n    additionalProperties: false,\n    required: ['type', ...Object.keys(fields)],\n    properties: { type: { type: 'string', enum: [...types] }, ...fields },\n  }\n}\n\n/** Every step type an automation may carry, grouped by the fields it needs. */\nexport const AI_AUTOMATION_STEP_VARIANTS: readonly Schema[] = [\n  stepVariant([...REFERENCE_STEPS], {\n    reference: {\n      type: 'string',\n      description:\n        'The record the step acts on — the email list, campaign, workflow, dataset or outbound webhook — in the words of the description, such as \"newsletter\". Never an id.',\n    },\n  }),\n  stepVariant([...TEXT_STEPS], {\n    text: {\n      type: 'string',\n      description: `The one line the step carries: for notifyAdmins what the admins read, for addContactTag the tag (at most ${CONTACT_TAG_MAX_LENGTH} characters), and for assignContactOwner \"round robin\" or the teammate’s email address the description gives.`,\n    },\n  }),\n  stepVariant(['sendEmail'], {\n    subject: { type: 'string', description: 'The subject line.' },\n    body: { type: 'string', description: 'The email, as plain text.' },\n    toField: {\n      type: 'string',\n      description: 'The event field holding the address: \"email\" unless the description names another.',\n    },\n  }),\n  stepVariant(['siteAlert'], {\n    text: { type: 'string', description: 'What the visitor reads.' },\n    severity: { type: 'string', enum: [...SEVERITIES] },\n  }),\n  stepVariant(['wait'], { minutes: minutes('How long to wait') }),\n  stepVariant(['waitForEvent'], {\n    event: { $ref: '#/$defs/event' },\n    minutes: minutes('When to give up'),\n  }),\n  stepVariant(['exitFlow'], {}),\n  stepVariant(['setContactStage'], { stage: { type: 'string', enum: [...CONTACT_LIFECYCLE_STAGES] } }),\n  stepVariant(['createCrmTask'], {\n    text: { type: 'string', description: 'The task.' },\n    taskKind: { type: 'string', enum: [...CRM_TASK_KINDS] },\n    dueInDays: {\n      type: 'integer',\n      description: `Days from the run, 0 for today, at most ${CRM_TASK_MAX_DUE_DAYS}.`,\n    },\n  }),\n  stepVariant(['logCrmActivity'], {\n    activityKind: { type: 'string', enum: [...CRM_ACTIVITY_KINDS] },\n    text: { type: 'string', description: 'What happened.' },\n  }),\n]\n\n/** The automation tool. The same bytes on every request, so it sits inside the cached prefix. */\nexport function aiAutomationTool(): AiTool {\n  return {\n    name: AI_AUTOMATION_TOOL_NAME,\n    description: `Submit one automation: its trigger, the conditions on it, and its steps in order. Written out, the whole automation is at most ${AI_AUTOMATION_ANSWER_MAX_CHARS} characters, so keep its emails short.`,\n    strict: true,\n    inputSchema: {\n      type: 'object',\n      additionalProperties: false,\n      required: ['name', 'trigger', 'steps', 'notes', 'unsupported'],\n      properties: {\n        name: {\n          type: 'string',\n          description: `A short name for the automation, at most ${AI_AUTOMATION_NAME_MAX_CHARS} characters.`,\n        },\n        trigger: {\n          type: 'object',\n          additionalProperties: false,\n          required: ['event', 'conditions', 'combinator'],\n          properties: {\n            event: { $ref: '#/$defs/event' },\n            conditions: {\n              type: 'array',\n              description: `What the event must meet: at most ${ACTION_MAX_CONDITIONS} conditions, empty when it runs every time.`,\n              items: { $ref: '#/$defs/condition' },\n            },\n            combinator: { type: 'string', enum: [...TRIGGER_COMBINATORS] },\n          },\n        },\n        steps: {\n          type: 'array',\n          description: `The steps in order, at most ${ACTION_MAX_STEPS}. Each is when it runs and what it does, and the action carries only the fields its type takes. Empty only with unsupported.`,\n          items: {\n            type: 'object',\n            additionalProperties: false,\n            required: ['when', 'action'],\n            properties: {\n              when: { $ref: '#/$defs/when' },\n              action: { anyOf: AI_AUTOMATION_STEP_VARIANTS },\n            },\n          },\n        },\n        notes: {\n          type: 'array',\n          description: `What the person must decide that the automation cannot hold; at most ${AI_AUTOMATION_NOTES_MAX} short sentences.`,\n          items: { type: 'string' },\n        },\n        unsupported: {\n          type: 'string',\n          enum: ['', ...AI_AUTOMATION_UNSUPPORTED],\n          description: 'Why no automation can be built from this description; empty when one is built.',\n        },\n      },\n      $defs: DEFINITIONS,\n    },\n  }\n}\n\n/** The explanation tool. */\nexport function aiWorkflowExplanationTool(): AiTool {\n  return {\n    name: AI_WORKFLOW_EXPLANATION_TOOL_NAME,\n    description: 'Submit the explanation, in plain words for someone who does not write code.',\n    strict: true,\n    inputSchema: {\n      type: 'object',\n      additionalProperties: false,\n      required: ['summary', 'points', 'suggestions'],\n      properties: {\n        summary: {\n          type: 'string',\n          description: `One or two sentences, at most ${AI_WORKFLOW_SUMMARY_MAX_CHARS} characters.`,\n        },\n        points: {\n          type: 'array',\n          description: `At most ${AI_WORKFLOW_POINTS_MAX}, one sentence each.`,\n          items: { type: 'string' },\n        },\n        suggestions: {\n          type: 'array',\n          description: `At most ${AI_WORKFLOW_SUGGESTIONS_MAX}, one sentence each; empty when there is nothing to suggest.`,\n          items: { type: 'string' },\n        },\n      },\n    },\n  }\n}\n\n// ── Reading an automation ─────────────────────────────────────────────────\n\nexport interface AiAutomationCondition {\n  field: string\n  op: TriggerConditionOp\n  /** `null` for `notEmpty`. */\n  value: string | null\n}\n\n/** One step as the reader gives it back, every field the step does not use `null`. */\nexport interface AiAutomationAnswerStep {\n  type: AiAutomationStepType\n  when: AiAutomationCondition | null\n  list: string | null\n  campaign: string | null\n  workflow: string | null\n  webhook: string | null\n  dataset: string | null\n  subject: string | null\n  body: string | null\n  toField: string | null\n  title: string | null\n  message: string | null\n  severity: Severity | null\n  minutes: number | null\n  event: HostEventType | null\n  stage: ContactLifecycleStage | null\n  tag: string | null\n  owner: string | null\n  taskKind: CrmTaskKind | null\n  dueInDays: number | null\n  activityKind: CrmActivityKind | null\n}\n\nexport interface AiAutomationAnswer {\n  name: string\n  trigger: {\n    event: HostEventType\n    conditions: AiAutomationCondition[]\n    combinator: TriggerCombinator\n  }\n  steps: AiAutomationAnswerStep[]\n  notes: string[]\n  unsupported: AiAutomationUnsupported | null\n}\n\n/** The codes that say an answer could not be read as an automation at all. */\nexport const AI_AUTOMATION_UNREADABLE_CODES: readonly string[] = [\n  'automation-shape',\n  'automation-trigger',\n  'automation-step-type',\n]\n\n/** The codes that say an answer is larger than an automation may be. */\nexport const AI_AUTOMATION_OVERSIZE_CODES: readonly string[] = [\n  'automation-too-many-steps',\n  'automation-too-many-conditions',\n  'automation-too-long',\n]\n\n/** The address field a step reads when it names none. */\nconst DEFAULT_TO_FIELD = 'email'\nconst FIELD_NAME = /^[A-Za-z_][A-Za-z0-9_.-]{0,63}$/\nconst EMAIL_ADDRESS = /^[^\\s@]+@[^\\s@]+\\.[^\\s@]+$/\nconst ROUND_ROBIN = /^\\s*round[\\s-]*robin\\s*$/i\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return typeof value === 'object' && value !== null && !Array.isArray(value)\n}\n\n/** A string trimmed to one space between words, or `null` for none. */\nfunction textOf(value: unknown): string | null {\n  if (typeof value !== 'string') return null\n  const clean = value.replace(/[ \\t]+/g, ' ').trim()\n  return clean ? clean : null\n}\n\n/** The fields a trigger's conditions and its steps' guards may read. */\nfunction fieldsFor(event: HostEventType): readonly string[] | null {\n  // A form submission carries every field the form collects, which no fixed\n  // list names, so any field name is readable on it.\n  if (event === 'formSubmission') return null\n  const keys = HOST_EVENT_PAYLOAD_KEYS[event]\n  return keys?.length ? keys : null\n}\n\ninterface Reader {\n  violations: AiDoctrineViolation[]\n  offending: Array<[string, unknown]>\n}\n\nfunction refuse(\n  reader: Reader,\n  code: string,\n  message: string,\n  path: string,\n  value: unknown,\n): void {\n  reader.violations.push({ rule: null, code, message, paths: [path] })\n  if (reader.offending.length < 6) reader.offending.push([path, value])\n}\n\nfunction readCondition(\n  reader: Reader,\n  raw: unknown,\n  path: string,\n  event: HostEventType,\n  guard: boolean,\n): AiAutomationCondition | null {\n  if (!isRecord(raw)) {\n    refuse(reader, 'automation-shape', 'A condition is not an object with a field, an op and a value.', path, raw)\n    return null\n  }\n  const field = textOf(raw['field'])\n  const op = raw['op']\n  if (!field || !FIELD_NAME.test(field)) {\n    refuse(reader, 'automation-condition', 'Name the event field the condition reads.', path, raw)\n    return null\n  }\n  if (!(TRIGGER_CONDITION_OPS as readonly unknown[]).includes(op)) {\n    refuse(reader, 'automation-condition', `The condition on \"${field}\" needs equals, contains or notEmpty.`, path, raw)\n    return null\n  }\n  if (event === 'formSubmission' && field === 'formId') {\n    refuse(\n      reader,\n      'automation-condition',\n      'A form submission names its form by formName, the form’s name as the site lists it.',\n      path,\n      raw,\n    )\n    return null\n  }\n  // A step's guard may also read whether the wait before it ran out of time.\n  const readable = fieldsFor(event)\n  if (readable && !readable.includes(field) && !(guard && field === FLOW_TIMED_OUT_FIELD)) {\n    refuse(\n      reader,\n      'automation-condition',\n      `The trigger \"${aiAutomationTriggerLabel(event)}\" does not carry \"${field}\". It carries: ${readable.join(', ')}.`,\n      path,\n      raw,\n    )\n    return null\n  }\n  const value = textOf(raw['value'])\n  if (op !== 'notEmpty' && !value) {\n    refuse(reader, 'automation-condition', `The condition on \"${field}\" needs the value it compares against.`, path, raw)\n    return null\n  }\n  if (value && value.length > AI_AUTOMATION_VALUE_MAX_CHARS) {\n    refuse(reader, 'automation-too-long', `The value the condition on \"${field}\" compares against is too long.`, path, raw)\n    return null\n  }\n  if (field === 'lifecycleStage' || field === 'previousStage') {\n    const stage = value ? lifecycleStageOf(value) : null\n    if (op !== 'notEmpty' && !stage) {\n      refuse(\n        reader,\n        'automation-condition',\n        `A lifecycle stage is one of: ${CONTACT_LIFECYCLE_STAGES.join(', ')}.`,\n        path,\n        raw,\n      )\n      return null\n    }\n    return { field, op: op as TriggerConditionOp, value: op === 'notEmpty' ? null : stage }\n  }\n  return { field, op: op as TriggerConditionOp, value: op === 'notEmpty' ? null : value }\n}\n\n/** A lifecycle stage by its id or its label, case aside. */\nexport function lifecycleStageOf(value: string): ContactLifecycleStage | null {\n  const wanted = value.trim().toLowerCase()\n  return (\n    CONTACT_LIFECYCLE_STAGES.find(\n      (stage) => stage === wanted || CONTACT_LIFECYCLE_STAGE_LABELS[stage].toLowerCase() === wanted,\n    ) ?? null\n  )\n}\n\nfunction requireText(\n  reader: Reader,\n  step: Record<string, unknown>,\n  key: string,\n  max: number,\n  path: string,\n  what: string,\n): string | null {\n  const value = textOf(step[key])\n  if (!value) {\n    refuse(reader, 'automation-step-field', `${what} needs ${key}.`, path, step)\n    return null\n  }\n  if (value.length > max) {\n    refuse(reader, 'automation-too-long', `${what}: ${key} is longer than ${max} characters.`, path, step)\n    return null\n  }\n  if (HOSTILE_TEXT.test(value)) {\n    refuse(reader, 'automation-markup', `${what}: write ${key} as plain text, with no HTML or script.`, path, step)\n    return null\n  }\n  return value\n}\n\nfunction wholeNumber(value: unknown): number | null {\n  return typeof value === 'number' && Number.isInteger(value) ? value : null\n}\n\nfunction readStep(\n  reader: Reader,\n  raw: unknown,\n  index: number,\n  event: HostEventType,\n  capabilities: AiAutomationCapabilities,\n): AiAutomationAnswerStep | null {\n  const path = `steps[${index}]`\n  if (!isRecord(raw)) {\n    refuse(reader, 'automation-shape', `Step ${index + 1} is not an object.`, path, raw)\n    return null\n  }\n  // A step is its guard and its action: `{ when, action }`. An answer that\n  // writes the action's own fields beside `when` reads the same, so a model\n  // that flattens the step does not spend the one re-ask.\n  const action = raw['action']\n  const fields: Record<string, unknown> = isRecord(action) ? { ...action, when: raw['when'] } : raw\n  const type = fields['type']\n  if (!(AI_AUTOMATION_STEP_TYPES as readonly unknown[]).includes(type)) {\n    refuse(\n      reader,\n      'automation-step-type',\n      `Step ${index + 1} is not one of the steps offered: ${AI_AUTOMATION_STEP_TYPES.join(', ')}.`,\n      path,\n      fields,\n    )\n    return null\n  }\n  const stepType = type as AiAutomationStepType\n  const what = `Step ${index + 1} (${HOST_ACTION_STEP_LABELS[stepType]})`\n  const need = AI_AUTOMATION_STEP_NEEDS[stepType]\n  if (need && !capabilities[need]) {\n    refuse(\n      reader,\n      'automation-plan',\n      `${what} needs ${AI_AUTOMATION_NEED_LABELS[need]}, which this workspace does not have. Leave it out, or answer with unsupported \"needs-${need}\".`,\n      path,\n      fields,\n    )\n    return null\n  }\n  const before = reader.violations.length\n  const step: AiAutomationAnswerStep = {\n    type: stepType,\n    when: null,\n    list: null,\n    campaign: null,\n    workflow: null,\n    webhook: null,\n    dataset: null,\n    subject: null,\n    body: null,\n    toField: null,\n    title: null,\n    message: null,\n    severity: null,\n    minutes: null,\n    event: null,\n    stage: null,\n    tag: null,\n    owner: null,\n    taskKind: null,\n    dueInDays: null,\n    activityKind: null,\n  }\n  // A step's `when` is a list of at most one condition; a lone condition, or\n  // none, reads as the list it stands for.\n  const when = fields['when']\n  const guards = Array.isArray(when) ? when : when === null || when === undefined ? [] : [when]\n  if (guards.length > 1) {\n    refuse(reader, 'automation-condition', `${what}: when holds one condition at most.`, `${path}.when`, when)\n  } else if (guards.length === 1) {\n    step.when = readCondition(reader, guards[0], `${path}.when`, event, true)\n  }\n  // The six steps that name a record share `reference`, and the three that\n  // carry one line share `text`; an answer that writes the step's own key\n  // instead — `list`, `tag`, `owner` — reads the same.\n  const shared = (key: 'reference' | 'text', own: keyof AiAutomationAnswerStep): unknown =>\n    fields[key] ?? fields[own]\n  const own = TEXT_KEY[stepType as keyof typeof TEXT_KEY]\n  const text: Record<string, unknown> = own ? { text: shared('text', own) } : fields\n  switch (stepType) {\n    case 'sendEmail': {\n      step.subject = requireText(reader, fields, 'subject', AI_AUTOMATION_SUBJECT_MAX_CHARS, path, what)\n      step.body = requireText(reader, fields, 'body', AI_AUTOMATION_BODY_MAX_CHARS, path, what)\n      const toField = textOf(fields['toField'])\n      if (toField && !FIELD_NAME.test(toField)) {\n        refuse(reader, 'automation-step-field', `${what}: toField names the event field holding the address.`, path, fields)\n      } else {\n        step.toField = toField && toField !== DEFAULT_TO_FIELD ? toField : null\n      }\n      break\n    }\n    case 'notifyAdmins':\n      step.title = requireText(reader, text, 'text', AI_AUTOMATION_SUBJECT_MAX_CHARS, path, what)\n      break\n    case 'enrollList':\n    case 'assignCampaign':\n    case 'runWorkflow':\n    case 'webhookPost':\n    case 'datasetAppend':\n    case 'updateDataset':\n      step[REFERENCE_KEY[stepType]] = requireText(\n        reader,\n        { reference: shared('reference', REFERENCE_KEY[stepType]) },\n        'reference',\n        AI_AUTOMATION_REFERENCE_MAX_CHARS,\n        path,\n        what,\n      )\n      break\n    case 'siteAlert': {\n      step.message = requireText(reader, text, 'text', AI_AUTOMATION_TEXT_MAX_CHARS, path, what)\n      const severity = fields['severity']\n      step.severity = (SEVERITIES as readonly unknown[]).includes(severity) ? (severity as Severity) : 'info'\n      break\n    }\n    case 'wait':\n    case 'waitForEvent': {\n      const minutes = wholeNumber(fields['minutes'])\n      if (minutes === null || minutes < FLOW_WAIT_MIN_MINUTES || minutes > FLOW_WAIT_MAX_MINUTES) {\n        refuse(\n          reader,\n          'automation-step-field',\n          `${what} needs minutes, a whole number from ${FLOW_WAIT_MIN_MINUTES} to ${FLOW_WAIT_MAX_MINUTES}.`,\n          path,\n          fields,\n        )\n      } else {\n        step.minutes = minutes\n      }\n      if (stepType === 'waitForEvent') {\n        const waited = fields['event']\n        if (!(HOST_EVENT_TYPES as readonly unknown[]).includes(waited)) {\n          refuse(reader, 'automation-step-field', `${what} needs the event it waits for.`, path, fields)\n        } else {\n          step.event = waited as HostEventType\n        }\n      }\n      break\n    }\n    case 'exitFlow':\n      break\n    case 'setContactStage': {\n      const stage = fields['stage']\n      if (!(CONTACT_LIFECYCLE_STAGES as readonly unknown[]).includes(stage)) {\n        refuse(reader, 'automation-step-field', `${what} needs the lifecycle stage to set.`, path, fields)\n      } else {\n        step.stage = stage as ContactLifecycleStage\n      }\n      break\n    }\n    case 'addContactTag':\n      step.tag = requireText(reader, text, 'text', CONTACT_TAG_MAX_LENGTH, path, what)\n      break\n    case 'assignContactOwner': {\n      const owner = textOf(text['text'])\n      if (!owner || !(ROUND_ROBIN.test(owner) || EMAIL_ADDRESS.test(owner))) {\n        refuse(\n          reader,\n          'automation-owner',\n          `${what}: give the owner as \"round robin\", or as the teammate’s email address the description gives. A teammate named without one goes in notes, not in a step.`,\n          path,\n          fields,\n        )\n      } else {\n        step.owner = ROUND_ROBIN.test(owner) ? 'round robin' : owner\n      }\n      break\n    }\n    case 'createCrmTask': {\n      step.title = requireText(reader, text, 'text', AI_AUTOMATION_SUBJECT_MAX_CHARS, path, what)\n      const kind = fields['taskKind']\n      const due = wholeNumber(fields['dueInDays'])\n      if (!(CRM_TASK_KINDS as readonly unknown[]).includes(kind)) {\n        refuse(reader, 'automation-step-field', `${what} needs taskKind.`, path, fields)\n      } else {\n        step.taskKind = kind as CrmTaskKind\n      }\n      if (due === null || due < 0 || due > CRM_TASK_MAX_DUE_DAYS) {\n        refuse(reader, 'automation-step-field', `${what} needs dueInDays, from 0 to ${CRM_TASK_MAX_DUE_DAYS}.`, path, fields)\n      } else {\n        step.dueInDays = due\n      }\n      break\n    }\n    case 'logCrmActivity': {\n      const kind = fields['activityKind']\n      if (!(CRM_ACTIVITY_KINDS as readonly unknown[]).includes(kind)) {\n        refuse(reader, 'automation-step-field', `${what} needs activityKind.`, path, fields)\n      } else {\n        step.activityKind = kind as CrmActivityKind\n      }\n      step.body = requireText(reader, text, 'text', AI_AUTOMATION_TEXT_MAX_CHARS, path, what)\n      break\n    }\n  }\n  return reader.violations.length === before ? step : null\n}\n\n/**\n * The automation tool's answer read and held to the vocabulary and to what\n * this workspace can run — the check the doctrine's loop runs on each answer,\n * beside rule 13. `value` is the automation when nothing is refused.\n */\nexport function readAiAutomationAnswer(\n  answer: Record<string, unknown>,\n  capabilities: AiAutomationCapabilities,\n): AiGenerationCheckResult<AiAutomationAnswer> {\n  const reader: Reader = { violations: [], offending: [] }\n  const done = (value: AiAutomationAnswer | null): AiGenerationCheckResult<AiAutomationAnswer> => ({\n    value: reader.violations.length ? null : value,\n    violations: reader.violations,\n    ...(reader.offending.length ? { offending: Object.fromEntries(reader.offending) } : {}),\n  })\n  const notes = (Array.isArray(answer['notes']) ? answer['notes'] : [])\n    .map(textOf)\n    .filter((note): note is string => note !== null && !HOSTILE_TEXT.test(note))\n    .slice(0, AI_AUTOMATION_NOTES_MAX)\n    .map((note) => note.slice(0, AI_AUTOMATION_NOTE_MAX_CHARS))\n  const name = (textOf(answer['name']) ?? '').slice(0, AI_AUTOMATION_NAME_MAX_CHARS)\n  const written = JSON.stringify(answer).length\n  if (written > AI_AUTOMATION_ANSWER_MAX_CHARS) {\n    refuse(\n      reader,\n      'automation-too-long',\n      `Written out, the automation is ${written} characters, over the ${AI_AUTOMATION_ANSWER_MAX_CHARS} it may be. Shorten its emails and messages, or use fewer steps.`,\n      'steps',\n      written,\n    )\n    return done(null)\n  }\n\n  // An answer that builds an automation leaves `unsupported` empty, which the\n  // schema states as an empty string rather than a `null`.\n  const unsupported = answer['unsupported']\n  if (unsupported !== null && unsupported !== undefined && unsupported !== '') {\n    if (!(AI_AUTOMATION_UNSUPPORTED as readonly unknown[]).includes(unsupported)) {\n      refuse(reader, 'automation-shape', 'unsupported is empty, or one of the reasons offered.', 'unsupported', unsupported)\n      return done(null)\n    }\n    const need = AI_AUTOMATION_UNSUPPORTED_NEED[unsupported as AiAutomationUnsupported]\n    if (need && capabilities[need]) {\n      refuse(\n        reader,\n        'automation-unsupported',\n        `This workspace has ${AI_AUTOMATION_NEED_LABELS[need]}: build the automation with it.`,\n        'unsupported',\n        unsupported,\n      )\n      return done(null)\n    }\n    return done({\n      name,\n      trigger: { event: HOST_EVENT_TYPES[0], conditions: [], combinator: 'and' },\n      steps: [],\n      notes,\n      unsupported: unsupported as AiAutomationUnsupported,\n    })\n  }\n\n  const trigger = answer['trigger']\n  const steps = answer['steps']\n  if (!isRecord(trigger) || !Array.isArray(steps)) {\n    refuse(reader, 'automation-shape', 'The answer has no trigger and steps.', 'trigger', trigger)\n    return done(null)\n  }\n  const event = trigger['event']\n  if (!(HOST_EVENT_TYPES as readonly unknown[]).includes(event)) {\n    refuse(reader, 'automation-trigger', 'The trigger is not one of the events offered.', 'trigger.event', event)\n    return done(null)\n  }\n  const hostEvent = event as HostEventType\n  const need = AI_AUTOMATION_TRIGGER_NEEDS[hostEvent]\n  if (need && !capabilities[need]) {\n    refuse(\n      reader,\n      'automation-plan',\n      `The trigger \"${aiAutomationTriggerLabel(hostEvent)}\" needs ${AI_AUTOMATION_NEED_LABELS[need]}, which this workspace does not have. Pick another trigger, or answer with unsupported \"needs-${need}\".`,\n      'trigger.event',\n      event,\n    )\n    return done(null)\n  }\n  const rawConditions = Array.isArray(trigger['conditions']) ? trigger['conditions'] : []\n  if (rawConditions.length > ACTION_MAX_CONDITIONS) {\n    refuse(\n      reader,\n      'automation-too-many-conditions',\n      `A trigger holds at most ${ACTION_MAX_CONDITIONS} conditions.`,\n      'trigger.conditions',\n      rawConditions.length,\n    )\n  }\n  const conditions = rawConditions\n    .slice(0, ACTION_MAX_CONDITIONS)\n    .map((raw, index) => readCondition(reader, raw, `trigger.conditions[${index}]`, hostEvent, false))\n    .filter((condition): condition is AiAutomationCondition => condition !== null)\n  const combinator = (TRIGGER_COMBINATORS as readonly unknown[]).includes(trigger['combinator'])\n    ? (trigger['combinator'] as TriggerCombinator)\n    : 'and'\n\n  if (!steps.length) {\n    refuse(reader, 'automation-shape', 'An automation has at least one step; answer unsupported when none fits.', 'steps', steps)\n  }\n  if (steps.length > ACTION_MAX_STEPS) {\n    refuse(reader, 'automation-too-many-steps', `An automation holds at most ${ACTION_MAX_STEPS} steps.`, 'steps', steps.length)\n  }\n  const read = steps\n    .slice(0, ACTION_MAX_STEPS)\n    .map((raw, index) => readStep(reader, raw, index, hostEvent, capabilities))\n    .filter((step): step is AiAutomationAnswerStep => step !== null)\n\n  return done({\n    name,\n    trigger: { event: hostEvent, conditions, combinator },\n    steps: read,\n    notes,\n    unsupported: null,\n  })\n}\n\n// ── Reading an explanation ────────────────────────────────────────────────\n\nexport interface AiWorkflowExplanation {\n  summary: string\n  points: string[]\n  suggestions: string[]\n}\n\n/** Whether a line carries an email address, which nothing an explanation was shown holds. */\nconst CARRIES_ADDRESS = /[^\\s@]+@[^\\s@]+\\.[^\\s@]+/\n\nfunction lines(value: unknown, max: number): string[] {\n  return (Array.isArray(value) ? value : [])\n    .map(textOf)\n    .filter((line): line is string => line !== null)\n    .slice(0, max)\n    .map((line) => line.slice(0, AI_WORKFLOW_LINE_MAX_CHARS))\n}\n\n/**\n * The explanation tool's answer: a summary, and at most so many points and\n * suggestions, each cut to a line. Refused when it has no summary, or carries\n * markup or an address — plain words for a person, about a record whose\n * personal details were removed before the model saw it.\n */\nexport function readAiWorkflowExplanation(\n  answer: Record<string, unknown>,\n): AiGenerationCheckResult<AiWorkflowExplanation> {\n  const summary = (textOf(answer['summary']) ?? '').slice(0, AI_WORKFLOW_SUMMARY_MAX_CHARS)\n  const value: AiWorkflowExplanation = {\n    summary,\n    points: lines(answer['points'], AI_WORKFLOW_POINTS_MAX),\n    suggestions: lines(answer['suggestions'], AI_WORKFLOW_SUGGESTIONS_MAX),\n  }\n  const violations: AiDoctrineViolation[] = []\n  if (!summary) {\n    violations.push({ rule: null, code: 'explanation-shape', message: 'The explanation has no summary.' })\n  }\n  const all = [value.summary, ...value.points, ...value.suggestions]\n  if (all.some((line) => HOSTILE_TEXT.test(line))) {\n    violations.push({\n      rule: null,\n      code: 'explanation-markup',\n      message: 'Write the explanation as plain text, with no HTML or script.',\n    })\n  }\n  if (all.some((line) => CARRIES_ADDRESS.test(line))) {\n    violations.push({\n      rule: null,\n      code: 'explanation-address',\n      message: 'The explanation names an email address. Describe the person or the teammate instead.',\n    })\n  }\n  return { value: violations.length ? null : value, violations }\n}\n"],"names":["ACTION_MAX_CONDITIONS","ACTION_MAX_STEPS","CONTACT_TAG_MAX_LENGTH","FLOW_TIMED_OUT_FIELD","FLOW_WAIT_MAX_MINUTES","FLOW_WAIT_MIN_MINUTES","HOST_ACTION_STEP_LABELS","TRIGGER_COMBINATORS","TRIGGER_CONDITION_OPS","CONTACT_LIFECYCLE_STAGE_LABELS","CONTACT_LIFECYCLE_STAGES","CRM_ACTIVITY_KINDS","CRM_TASK_KINDS","CRM_TASK_MAX_DUE_DAYS","HOST_EVENT_PAYLOAD_KEYS","HOST_EVENT_TYPES","AI_AUTOMATION_NEED_LABELS","AI_AUTOMATION_STEP_NEEDS","AI_AUTOMATION_STEP_TYPES","AI_AUTOMATION_TRIGGER_NEEDS","AI_AUTOMATION_UNSUPPORTED","AI_AUTOMATION_UNSUPPORTED_NEED","aiAutomationTriggerLabel","HOSTILE_TEXT","AI_AUTOMATION_TOOL_NAME","AI_WORKFLOW_EXPLANATION_TOOL_NAME","AI_AUTOMATION_NAME_MAX_CHARS","AI_AUTOMATION_SUBJECT_MAX_CHARS","AI_AUTOMATION_BODY_MAX_CHARS","AI_AUTOMATION_TEXT_MAX_CHARS","AI_AUTOMATION_REFERENCE_MAX_CHARS","AI_AUTOMATION_VALUE_MAX_CHARS","AI_AUTOMATION_NOTES_MAX","AI_AUTOMATION_NOTE_MAX_CHARS","AI_AUTOMATION_ANSWER_MAX_CHARS","AI_WORKFLOW_SUMMARY_MAX_CHARS","AI_WORKFLOW_POINTS_MAX","AI_WORKFLOW_SUGGESTIONS_MAX","AI_WORKFLOW_LINE_MAX_CHARS","SEVERITIES","DEFINITIONS","condition","type","additionalProperties","required","properties","field","description","op","enum","value","event","when","items","$ref","REFERENCE_STEPS","TEXT_STEPS","REFERENCE_KEY","enrollList","assignCampaign","runWorkflow","datasetAppend","updateDataset","webhookPost","TEXT_KEY","notifyAdmins","addContactTag","assignContactOwner","siteAlert","createCrmTask","logCrmActivity","minutes","what","stepVariant","types","fields","Object","keys","AI_AUTOMATION_STEP_VARIANTS","reference","text","subject","body","toField","severity","stage","taskKind","dueInDays","activityKind","aiAutomationTool","name","strict","inputSchema","trigger","conditions","combinator","steps","action","anyOf","notes","unsupported","$defs","aiWorkflowExplanationTool","summary","points","suggestions","AI_AUTOMATION_UNREADABLE_CODES","AI_AUTOMATION_OVERSIZE_CODES","DEFAULT_TO_FIELD","FIELD_NAME","EMAIL_ADDRESS","ROUND_ROBIN","isRecord","Array","isArray","textOf","clean","replace","trim","fieldsFor","length","refuse","reader","code","message","path","violations","push","rule","paths","offending","readCondition","raw","guard","test","includes","readable","join","lifecycleStageOf","wanted","toLowerCase","find","requireText","step","key","max","wholeNumber","Number","isInteger","readStep","index","capabilities","stepType","need","before","list","campaign","workflow","webhook","dataset","title","tag","owner","guards","undefined","shared","own","waited","kind","due","readAiAutomationAnswer","answer","done","fromEntries","map","filter","note","slice","written","JSON","stringify","hostEvent","rawConditions","read","CARRIES_ADDRESS","lines","line","readAiWorkflowExplanation","all","some"],"mappings":";AAAA;;;;;;;;;;;;;;;CAeC,GAED,SACEA,qBAAqB,EACrBC,gBAAgB,EAChBC,sBAAsB,EACtBC,oBAAoB,EACpBC,qBAAqB,EACrBC,qBAAqB,EACrBC,uBAAuB,EACvBC,mBAAmB,EACnBC,qBAAqB,QAGhB,iCAAgC;AACvC,SACEC,8BAA8B,EAC9BC,wBAAwB,EACxBC,kBAAkB,EAClBC,cAAc,EACdC,qBAAqB,QAIhB,6BAA4B;AACnC,SACEC,uBAAuB,EACvBC,gBAAgB,QAEX,mCAAkC;AACzC,SACEC,yBAAyB,EACzBC,wBAAwB,EACxBC,wBAAwB,EACxBC,2BAA2B,EAC3BC,yBAAyB,EACzBC,8BAA8B,EAC9BC,wBAAwB,QAInB,8BAA0B;AAIjC,SAASC,YAAY,QAAQ,6BAAyB;AAEtD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAsCC,GAED,OAAO,MAAMC,0BAA0B,oBAAmB;AAC1D,OAAO,MAAMC,oCAAoC,qBAAoB;AAErE,2DAA2D,GAC3D,OAAO,MAAMC,+BAA+B,GAAE;AAC9C,4CAA4C,GAC5C,OAAO,MAAMC,kCAAkC,IAAG;AAClD,+CAA+C,GAC/C,OAAO,MAAMC,+BAA+B,KAAK;AACjD,8DAA8D,GAC9D,OAAO,MAAMC,+BAA+B,IAAG;AAC/C,uCAAuC,GACvC,OAAO,MAAMC,oCAAoC,IAAG;AACpD,iCAAiC,GACjC,OAAO,MAAMC,gCAAgC,IAAG;AAChD,qDAAqD,GACrD,OAAO,MAAMC,0BAA0B,EAAC;AACxC,OAAO,MAAMC,+BAA+B,IAAG;AAC/C;;;;;;CAMC,GACD,OAAO,MAAMC,iCAAiC,KAAK;AAEnD,8BAA8B,GAC9B,OAAO,MAAMC,gCAAgC,IAAG;AAChD,OAAO,MAAMC,yBAAyB,EAAC;AACvC,OAAO,MAAMC,8BAA8B,EAAC;AAC5C,OAAO,MAAMC,6BAA6B,IAAG;AAE7C,MAAMC,aAAa;IAAC;IAAQ;IAAW;IAAW;CAAQ;AAK1D;;;CAGC,GACD,MAAMC,cAAsB;IAC1BC,WAAW;QACTC,MAAM;QACNC,sBAAsB;QACtBC,UAAU;YAAC;YAAS;YAAM;SAAQ;QAClCC,YAAY;YACVC,OAAO;gBACLJ,MAAM;gBACNK,aAAa;YACf;YACAC,IAAI;gBAAEN,MAAM;gBAAUO,MAAM;uBAAIzC;iBAAsB;YAAC;YACvD0C,OAAO;gBACLR,MAAM;gBACNK,aAAa;YACf;QACF;IACF;IACAI,OAAO;QACLT,MAAM;QACNO,MAAM;eAAIlC;SAAiB;QAC3BgC,aAAa;IACf;IACA,0EAA0E;IAC1E,oCAAoC;IACpCK,MAAM;QACJV,MAAM;QACNK,aAAa;QACbM,OAAO;YAAEC,MAAM;QAAoB;IACrC;AACF;AAEA,qFAAqF,GACrF,MAAMC,kBAAkB;IACtB;IACA;IACA;IACA;IACA;IACA;CACD;AAED,2DAA2D,GAC3D,MAAMC,aAAa;IACjB;IACA;IACA;CACD;AAED,6EAA6E,GAC7E,MAAMC,gBAAgB;IACpBC,YAAY;IACZC,gBAAgB;IAChBC,aAAa;IACbC,eAAe;IACfC,eAAe;IACfC,aAAa;AACf;AAEA;;;;CAIC,GACD,MAAMC,WAAW;IACfC,cAAc;IACdC,eAAe;IACfC,oBAAoB;IACpBC,WAAW;IACXC,eAAe;IACfC,gBAAgB;AAClB;AAEA,MAAMC,UAAU,CAACC,OAA0B,CAAA;QACzC9B,MAAM;QACNK,aAAa,GAAGyB,KAAK,wBAAwB,EAAEnE,sBAAsB,IAAI,EAAED,sBAAsB,+BAA+B,CAAC;IACnI,CAAA;AAEA;;;;;CAKC,GACD,SAASqE,YACPC,KAAsC,EACtCC,MAAwC;IAExC,OAAO;QACLjC,MAAM;QACNC,sBAAsB;QACtBC,UAAU;YAAC;eAAWgC,OAAOC,IAAI,CAACF;SAAQ;QAC1C9B,YAAY;YAAEH,MAAM;gBAAEA,MAAM;gBAAUO,MAAM;uBAAIyB;iBAAM;YAAC;WAAMC;IAC/D;AACF;AAEA,6EAA6E,GAC7E,OAAO,MAAMG,8BAAiD;IAC5DL,YAAY;WAAIlB;KAAgB,EAAE;QAChCwB,WAAW;YACTrC,MAAM;YACNK,aACE;QACJ;IACF;IACA0B,YAAY;WAAIjB;KAAW,EAAE;QAC3BwB,MAAM;YACJtC,MAAM;YACNK,aAAa,CAAC,yGAAyG,EAAE7C,uBAAuB,6GAA6G,CAAC;QAChQ;IACF;IACAuE,YAAY;QAAC;KAAY,EAAE;QACzBQ,SAAS;YAAEvC,MAAM;YAAUK,aAAa;QAAoB;QAC5DmC,MAAM;YAAExC,MAAM;YAAUK,aAAa;QAA4B;QACjEoC,SAAS;YACPzC,MAAM;YACNK,aAAa;QACf;IACF;IACA0B,YAAY;QAAC;KAAY,EAAE;QACzBO,MAAM;YAAEtC,MAAM;YAAUK,aAAa;QAA0B;QAC/DqC,UAAU;YAAE1C,MAAM;YAAUO,MAAM;mBAAIV;aAAW;QAAC;IACpD;IACAkC,YAAY;QAAC;KAAO,EAAE;QAAEF,SAASA,QAAQ;IAAoB;IAC7DE,YAAY;QAAC;KAAe,EAAE;QAC5BtB,OAAO;YAAEG,MAAM;QAAgB;QAC/BiB,SAASA,QAAQ;IACnB;IACAE,YAAY;QAAC;KAAW,EAAE,CAAC;IAC3BA,YAAY;QAAC;KAAkB,EAAE;QAAEY,OAAO;YAAE3C,MAAM;YAAUO,MAAM;mBAAIvC;aAAyB;QAAC;IAAE;IAClG+D,YAAY;QAAC;KAAgB,EAAE;QAC7BO,MAAM;YAAEtC,MAAM;YAAUK,aAAa;QAAY;QACjDuC,UAAU;YAAE5C,MAAM;YAAUO,MAAM;mBAAIrC;aAAe;QAAC;QACtD2E,WAAW;YACT7C,MAAM;YACNK,aAAa,CAAC,wCAAwC,EAAElC,sBAAsB,CAAC,CAAC;QAClF;IACF;IACA4D,YAAY;QAAC;KAAiB,EAAE;QAC9Be,cAAc;YAAE9C,MAAM;YAAUO,MAAM;mBAAItC;aAAmB;QAAC;QAC9DqE,MAAM;YAAEtC,MAAM;YAAUK,aAAa;QAAiB;IACxD;CACD,CAAA;AAED,+FAA+F,GAC/F,OAAO,SAAS0C;IACd,OAAO;QACLC,MAAMlE;QACNuB,aAAa,CAAC,+HAA+H,EAAEb,+BAA+B,sCAAsC,CAAC;QACrNyD,QAAQ;QACRC,aAAa;YACXlD,MAAM;YACNC,sBAAsB;YACtBC,UAAU;gBAAC;gBAAQ;gBAAW;gBAAS;gBAAS;aAAc;YAC9DC,YAAY;gBACV6C,MAAM;oBACJhD,MAAM;oBACNK,aAAa,CAAC,yCAAyC,EAAErB,6BAA6B,YAAY,CAAC;gBACrG;gBACAmE,SAAS;oBACPnD,MAAM;oBACNC,sBAAsB;oBACtBC,UAAU;wBAAC;wBAAS;wBAAc;qBAAa;oBAC/CC,YAAY;wBACVM,OAAO;4BAAEG,MAAM;wBAAgB;wBAC/BwC,YAAY;4BACVpD,MAAM;4BACNK,aAAa,CAAC,kCAAkC,EAAE/C,sBAAsB,2CAA2C,CAAC;4BACpHqD,OAAO;gCAAEC,MAAM;4BAAoB;wBACrC;wBACAyC,YAAY;4BAAErD,MAAM;4BAAUO,MAAM;mCAAI1C;6BAAoB;wBAAC;oBAC/D;gBACF;gBACAyF,OAAO;oBACLtD,MAAM;oBACNK,aAAa,CAAC,4BAA4B,EAAE9C,iBAAiB,4HAA4H,CAAC;oBAC1LoD,OAAO;wBACLX,MAAM;wBACNC,sBAAsB;wBACtBC,UAAU;4BAAC;4BAAQ;yBAAS;wBAC5BC,YAAY;4BACVO,MAAM;gCAAEE,MAAM;4BAAe;4BAC7B2C,QAAQ;gCAAEC,OAAOpB;4BAA4B;wBAC/C;oBACF;gBACF;gBACAqB,OAAO;oBACLzD,MAAM;oBACNK,aAAa,CAAC,qEAAqE,EAAEf,wBAAwB,iBAAiB,CAAC;oBAC/HqB,OAAO;wBAAEX,MAAM;oBAAS;gBAC1B;gBACA0D,aAAa;oBACX1D,MAAM;oBACNO,MAAM;wBAAC;2BAAO7B;qBAA0B;oBACxC2B,aAAa;gBACf;YACF;YACAsD,OAAO7D;QACT;IACF;AACF;AAEA,0BAA0B,GAC1B,OAAO,SAAS8D;IACd,OAAO;QACLZ,MAAMjE;QACNsB,aAAa;QACb4C,QAAQ;QACRC,aAAa;YACXlD,MAAM;YACNC,sBAAsB;YACtBC,UAAU;gBAAC;gBAAW;gBAAU;aAAc;YAC9CC,YAAY;gBACV0D,SAAS;oBACP7D,MAAM;oBACNK,aAAa,CAAC,8BAA8B,EAAEZ,8BAA8B,YAAY,CAAC;gBAC3F;gBACAqE,QAAQ;oBACN9D,MAAM;oBACNK,aAAa,CAAC,QAAQ,EAAEX,uBAAuB,oBAAoB,CAAC;oBACpEiB,OAAO;wBAAEX,MAAM;oBAAS;gBAC1B;gBACA+D,aAAa;oBACX/D,MAAM;oBACNK,aAAa,CAAC,QAAQ,EAAEV,4BAA4B,4DAA4D,CAAC;oBACjHgB,OAAO;wBAAEX,MAAM;oBAAS;gBAC1B;YACF;QACF;IACF;AACF;AAgDA,4EAA4E,GAC5E,OAAO,MAAMgE,iCAAoD;IAC/D;IACA;IACA;CACD,CAAA;AAED,sEAAsE,GACtE,OAAO,MAAMC,+BAAkD;IAC7D;IACA;IACA;CACD,CAAA;AAED,uDAAuD,GACvD,MAAMC,mBAAmB;AACzB,MAAMC,aAAa;AACnB,MAAMC,gBAAgB;AACtB,MAAMC,cAAc;AAEpB,SAASC,SAAS9D,KAAc;IAC9B,OAAO,OAAOA,UAAU,YAAYA,UAAU,QAAQ,CAAC+D,MAAMC,OAAO,CAAChE;AACvE;AAEA,qEAAqE,GACrE,SAASiE,OAAOjE,KAAc;IAC5B,IAAI,OAAOA,UAAU,UAAU,OAAO;IACtC,MAAMkE,QAAQlE,MAAMmE,OAAO,CAAC,WAAW,KAAKC,IAAI;IAChD,OAAOF,QAAQA,QAAQ;AACzB;AAEA,sEAAsE,GACtE,SAASG,UAAUpE,KAAoB;IACrC,0EAA0E;IAC1E,mDAAmD;IACnD,IAAIA,UAAU,kBAAkB,OAAO;IACvC,MAAM0B,OAAO/D,uBAAuB,CAACqC,MAAM;IAC3C,OAAO0B,CAAAA,wBAAAA,KAAM2C,MAAM,IAAG3C,OAAO;AAC/B;AAOA,SAAS4C,OACPC,MAAc,EACdC,IAAY,EACZC,OAAe,EACfC,IAAY,EACZ3E,KAAc;IAEdwE,OAAOI,UAAU,CAACC,IAAI,CAAC;QAAEC,MAAM;QAAML;QAAMC;QAASK,OAAO;YAACJ;SAAK;IAAC;IAClE,IAAIH,OAAOQ,SAAS,CAACV,MAAM,GAAG,GAAGE,OAAOQ,SAAS,CAACH,IAAI,CAAC;QAACF;QAAM3E;KAAM;AACtE;AAEA,SAASiF,cACPT,MAAc,EACdU,GAAY,EACZP,IAAY,EACZ1E,KAAoB,EACpBkF,KAAc;IAEd,IAAI,CAACrB,SAASoB,MAAM;QAClBX,OAAOC,QAAQ,oBAAoB,iEAAiEG,MAAMO;QAC1G,OAAO;IACT;IACA,MAAMtF,QAAQqE,OAAOiB,GAAG,CAAC,QAAQ;IACjC,MAAMpF,KAAKoF,GAAG,CAAC,KAAK;IACpB,IAAI,CAACtF,SAAS,CAAC+D,WAAWyB,IAAI,CAACxF,QAAQ;QACrC2E,OAAOC,QAAQ,wBAAwB,6CAA6CG,MAAMO;QAC1F,OAAO;IACT;IACA,IAAI,CAAC,AAAC5H,sBAA6C+H,QAAQ,CAACvF,KAAK;QAC/DyE,OAAOC,QAAQ,wBAAwB,CAAC,kBAAkB,EAAE5E,MAAM,qCAAqC,CAAC,EAAE+E,MAAMO;QAChH,OAAO;IACT;IACA,IAAIjF,UAAU,oBAAoBL,UAAU,UAAU;QACpD2E,OACEC,QACA,wBACA,uFACAG,MACAO;QAEF,OAAO;IACT;IACA,2EAA2E;IAC3E,MAAMI,WAAWjB,UAAUpE;IAC3B,IAAIqF,YAAY,CAACA,SAASD,QAAQ,CAACzF,UAAU,CAAEuF,CAAAA,SAASvF,UAAU3C,oBAAmB,GAAI;QACvFsH,OACEC,QACA,wBACA,CAAC,aAAa,EAAEpG,yBAAyB6B,OAAO,kBAAkB,EAAEL,MAAM,eAAe,EAAE0F,SAASC,IAAI,CAAC,MAAM,CAAC,CAAC,EACjHZ,MACAO;QAEF,OAAO;IACT;IACA,MAAMlF,QAAQiE,OAAOiB,GAAG,CAAC,QAAQ;IACjC,IAAIpF,OAAO,cAAc,CAACE,OAAO;QAC/BuE,OAAOC,QAAQ,wBAAwB,CAAC,kBAAkB,EAAE5E,MAAM,sCAAsC,CAAC,EAAE+E,MAAMO;QACjH,OAAO;IACT;IACA,IAAIlF,SAASA,MAAMsE,MAAM,GAAGzF,+BAA+B;QACzD0F,OAAOC,QAAQ,uBAAuB,CAAC,4BAA4B,EAAE5E,MAAM,+BAA+B,CAAC,EAAE+E,MAAMO;QACnH,OAAO;IACT;IACA,IAAItF,UAAU,oBAAoBA,UAAU,iBAAiB;QAC3D,MAAMuC,QAAQnC,QAAQwF,iBAAiBxF,SAAS;QAChD,IAAIF,OAAO,cAAc,CAACqC,OAAO;YAC/BoC,OACEC,QACA,wBACA,CAAC,6BAA6B,EAAEhH,yBAAyB+H,IAAI,CAAC,MAAM,CAAC,CAAC,EACtEZ,MACAO;YAEF,OAAO;QACT;QACA,OAAO;YAAEtF;YAAOE,IAAIA;YAA0BE,OAAOF,OAAO,aAAa,OAAOqC;QAAM;IACxF;IACA,OAAO;QAAEvC;QAAOE,IAAIA;QAA0BE,OAAOF,OAAO,aAAa,OAAOE;IAAM;AACxF;AAEA,0DAA0D,GAC1D,OAAO,SAASwF,iBAAiBxF,KAAa;QAG1CxC;IAFF,MAAMiI,SAASzF,MAAMoE,IAAI,GAAGsB,WAAW;IACvC,QACElI,iCAAAA,yBAAyBmI,IAAI,CAC3B,CAACxD,QAAUA,UAAUsD,UAAUlI,8BAA8B,CAAC4E,MAAM,CAACuD,WAAW,OAAOD,mBADzFjI,iCAEK;AAET;AAEA,SAASoI,YACPpB,MAAc,EACdqB,IAA6B,EAC7BC,GAAW,EACXC,GAAW,EACXpB,IAAY,EACZrD,IAAY;IAEZ,MAAMtB,QAAQiE,OAAO4B,IAAI,CAACC,IAAI;IAC9B,IAAI,CAAC9F,OAAO;QACVuE,OAAOC,QAAQ,yBAAyB,GAAGlD,KAAK,OAAO,EAAEwE,IAAI,CAAC,CAAC,EAAEnB,MAAMkB;QACvE,OAAO;IACT;IACA,IAAI7F,MAAMsE,MAAM,GAAGyB,KAAK;QACtBxB,OAAOC,QAAQ,uBAAuB,GAAGlD,KAAK,EAAE,EAAEwE,IAAI,gBAAgB,EAAEC,IAAI,YAAY,CAAC,EAAEpB,MAAMkB;QACjG,OAAO;IACT;IACA,IAAIxH,aAAa+G,IAAI,CAACpF,QAAQ;QAC5BuE,OAAOC,QAAQ,qBAAqB,GAAGlD,KAAK,QAAQ,EAAEwE,IAAI,uCAAuC,CAAC,EAAEnB,MAAMkB;QAC1G,OAAO;IACT;IACA,OAAO7F;AACT;AAEA,SAASgG,YAAYhG,KAAc;IACjC,OAAO,OAAOA,UAAU,YAAYiG,OAAOC,SAAS,CAAClG,SAASA,QAAQ;AACxE;AAEA,SAASmG,SACP3B,MAAc,EACdU,GAAY,EACZkB,KAAa,EACbnG,KAAoB,EACpBoG,YAAsC;IAEtC,MAAM1B,OAAO,CAAC,MAAM,EAAEyB,MAAM,CAAC,CAAC;IAC9B,IAAI,CAACtC,SAASoB,MAAM;QAClBX,OAAOC,QAAQ,oBAAoB,CAAC,KAAK,EAAE4B,QAAQ,EAAE,kBAAkB,CAAC,EAAEzB,MAAMO;QAChF,OAAO;IACT;IACA,yEAAyE;IACzE,0EAA0E;IAC1E,wDAAwD;IACxD,MAAMnC,SAASmC,GAAG,CAAC,SAAS;IAC5B,MAAMzD,SAAkCqC,SAASf,UAAU,aAAKA;QAAQ7C,MAAMgF,GAAG,CAAC,OAAO;SAAKA;IAC9F,MAAM1F,OAAOiC,MAAM,CAAC,OAAO;IAC3B,IAAI,CAAC,AAACzD,yBAAgDqH,QAAQ,CAAC7F,OAAO;QACpE+E,OACEC,QACA,wBACA,CAAC,KAAK,EAAE4B,QAAQ,EAAE,kCAAkC,EAAEpI,yBAAyBuH,IAAI,CAAC,MAAM,CAAC,CAAC,EAC5FZ,MACAlD;QAEF,OAAO;IACT;IACA,MAAM6E,WAAW9G;IACjB,MAAM8B,OAAO,CAAC,KAAK,EAAE8E,QAAQ,EAAE,EAAE,EAAEhJ,uBAAuB,CAACkJ,SAAS,CAAC,CAAC,CAAC;IACvE,MAAMC,OAAOxI,wBAAwB,CAACuI,SAAS;IAC/C,IAAIC,QAAQ,CAACF,YAAY,CAACE,KAAK,EAAE;QAC/BhC,OACEC,QACA,mBACA,GAAGlD,KAAK,OAAO,EAAExD,yBAAyB,CAACyI,KAAK,CAAC,sFAAsF,EAAEA,KAAK,EAAE,CAAC,EACjJ5B,MACAlD;QAEF,OAAO;IACT;IACA,MAAM+E,SAAShC,OAAOI,UAAU,CAACN,MAAM;IACvC,MAAMuB,OAA+B;QACnCrG,MAAM8G;QACNpG,MAAM;QACNuG,MAAM;QACNC,UAAU;QACVC,UAAU;QACVC,SAAS;QACTC,SAAS;QACT9E,SAAS;QACTC,MAAM;QACNC,SAAS;QACT6E,OAAO;QACPpC,SAAS;QACTxC,UAAU;QACVb,SAAS;QACTpB,OAAO;QACPkC,OAAO;QACP4E,KAAK;QACLC,OAAO;QACP5E,UAAU;QACVC,WAAW;QACXC,cAAc;IAChB;IACA,2EAA2E;IAC3E,yCAAyC;IACzC,MAAMpC,OAAOuB,MAAM,CAAC,OAAO;IAC3B,MAAMwF,SAASlD,MAAMC,OAAO,CAAC9D,QAAQA,OAAOA,SAAS,QAAQA,SAASgH,YAAY,EAAE,GAAG;QAAChH;KAAK;IAC7F,IAAI+G,OAAO3C,MAAM,GAAG,GAAG;QACrBC,OAAOC,QAAQ,wBAAwB,GAAGlD,KAAK,mCAAmC,CAAC,EAAE,GAAGqD,KAAK,KAAK,CAAC,EAAEzE;IACvG,OAAO,IAAI+G,OAAO3C,MAAM,KAAK,GAAG;QAC9BuB,KAAK3F,IAAI,GAAG+E,cAAcT,QAAQyC,MAAM,CAAC,EAAE,EAAE,GAAGtC,KAAK,KAAK,CAAC,EAAE1E,OAAO;IACtE;IACA,yEAAyE;IACzE,wEAAwE;IACxE,qDAAqD;IACrD,MAAMkH,SAAS,CAACrB,KAA2BsB;YACzC3F;gBAAAA,cAAAA,MAAM,CAACqE,IAAI,YAAXrE,cAAeA,MAAM,CAAC2F,IAAI;;IAC5B,MAAMA,MAAMtG,QAAQ,CAACwF,SAAkC;IACvD,MAAMxE,OAAgCsF,MAAM;QAAEtF,MAAMqF,OAAO,QAAQC;IAAK,IAAI3F;IAC5E,OAAQ6E;QACN,KAAK;YAAa;gBAChBT,KAAK9D,OAAO,GAAG6D,YAAYpB,QAAQ/C,QAAQ,WAAWhD,iCAAiCkG,MAAMrD;gBAC7FuE,KAAK7D,IAAI,GAAG4D,YAAYpB,QAAQ/C,QAAQ,QAAQ/C,8BAA8BiG,MAAMrD;gBACpF,MAAMW,UAAUgC,OAAOxC,MAAM,CAAC,UAAU;gBACxC,IAAIQ,WAAW,CAAC0B,WAAWyB,IAAI,CAACnD,UAAU;oBACxCsC,OAAOC,QAAQ,yBAAyB,GAAGlD,KAAK,oDAAoD,CAAC,EAAEqD,MAAMlD;gBAC/G,OAAO;oBACLoE,KAAK5D,OAAO,GAAGA,WAAWA,YAAYyB,mBAAmBzB,UAAU;gBACrE;gBACA;YACF;QACA,KAAK;YACH4D,KAAKiB,KAAK,GAAGlB,YAAYpB,QAAQ1C,MAAM,QAAQrD,iCAAiCkG,MAAMrD;YACtF;QACF,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;YACHuE,IAAI,CAACtF,aAAa,CAAC+F,SAAS,CAAC,GAAGV,YAC9BpB,QACA;gBAAE3C,WAAWsF,OAAO,aAAa5G,aAAa,CAAC+F,SAAS;YAAE,GAC1D,aACA1H,mCACA+F,MACArD;YAEF;QACF,KAAK;YAAa;gBAChBuE,KAAKnB,OAAO,GAAGkB,YAAYpB,QAAQ1C,MAAM,QAAQnD,8BAA8BgG,MAAMrD;gBACrF,MAAMY,WAAWT,MAAM,CAAC,WAAW;gBACnCoE,KAAK3D,QAAQ,GAAG,AAAC7C,WAAkCgG,QAAQ,CAACnD,YAAaA,WAAwB;gBACjG;YACF;QACA,KAAK;QACL,KAAK;YAAgB;gBACnB,MAAMb,UAAU2E,YAAYvE,MAAM,CAAC,UAAU;gBAC7C,IAAIJ,YAAY,QAAQA,UAAUlE,yBAAyBkE,UAAUnE,uBAAuB;oBAC1FqH,OACEC,QACA,yBACA,GAAGlD,KAAK,oCAAoC,EAAEnE,sBAAsB,IAAI,EAAED,sBAAsB,CAAC,CAAC,EAClGyH,MACAlD;gBAEJ,OAAO;oBACLoE,KAAKxE,OAAO,GAAGA;gBACjB;gBACA,IAAIiF,aAAa,gBAAgB;oBAC/B,MAAMe,SAAS5F,MAAM,CAAC,QAAQ;oBAC9B,IAAI,CAAC,AAAC5D,iBAAwCwH,QAAQ,CAACgC,SAAS;wBAC9D9C,OAAOC,QAAQ,yBAAyB,GAAGlD,KAAK,8BAA8B,CAAC,EAAEqD,MAAMlD;oBACzF,OAAO;wBACLoE,KAAK5F,KAAK,GAAGoH;oBACf;gBACF;gBACA;YACF;QACA,KAAK;YACH;QACF,KAAK;YAAmB;gBACtB,MAAMlF,QAAQV,MAAM,CAAC,QAAQ;gBAC7B,IAAI,CAAC,AAACjE,yBAAgD6H,QAAQ,CAAClD,QAAQ;oBACrEoC,OAAOC,QAAQ,yBAAyB,GAAGlD,KAAK,kCAAkC,CAAC,EAAEqD,MAAMlD;gBAC7F,OAAO;oBACLoE,KAAK1D,KAAK,GAAGA;gBACf;gBACA;YACF;QACA,KAAK;YACH0D,KAAKkB,GAAG,GAAGnB,YAAYpB,QAAQ1C,MAAM,QAAQ9E,wBAAwB2H,MAAMrD;YAC3E;QACF,KAAK;YAAsB;gBACzB,MAAM0F,QAAQ/C,OAAOnC,IAAI,CAAC,OAAO;gBACjC,IAAI,CAACkF,SAAS,CAAEnD,CAAAA,YAAYuB,IAAI,CAAC4B,UAAUpD,cAAcwB,IAAI,CAAC4B,MAAK,GAAI;oBACrEzC,OACEC,QACA,oBACA,GAAGlD,KAAK,uJAAuJ,CAAC,EAChKqD,MACAlD;gBAEJ,OAAO;oBACLoE,KAAKmB,KAAK,GAAGnD,YAAYuB,IAAI,CAAC4B,SAAS,gBAAgBA;gBACzD;gBACA;YACF;QACA,KAAK;YAAiB;gBACpBnB,KAAKiB,KAAK,GAAGlB,YAAYpB,QAAQ1C,MAAM,QAAQrD,iCAAiCkG,MAAMrD;gBACtF,MAAMgG,OAAO7F,MAAM,CAAC,WAAW;gBAC/B,MAAM8F,MAAMvB,YAAYvE,MAAM,CAAC,YAAY;gBAC3C,IAAI,CAAC,AAAC/D,eAAsC2H,QAAQ,CAACiC,OAAO;oBAC1D/C,OAAOC,QAAQ,yBAAyB,GAAGlD,KAAK,gBAAgB,CAAC,EAAEqD,MAAMlD;gBAC3E,OAAO;oBACLoE,KAAKzD,QAAQ,GAAGkF;gBAClB;gBACA,IAAIC,QAAQ,QAAQA,MAAM,KAAKA,MAAM5J,uBAAuB;oBAC1D4G,OAAOC,QAAQ,yBAAyB,GAAGlD,KAAK,4BAA4B,EAAE3D,sBAAsB,CAAC,CAAC,EAAEgH,MAAMlD;gBAChH,OAAO;oBACLoE,KAAKxD,SAAS,GAAGkF;gBACnB;gBACA;YACF;QACA,KAAK;YAAkB;gBACrB,MAAMD,OAAO7F,MAAM,CAAC,eAAe;gBACnC,IAAI,CAAC,AAAChE,mBAA0C4H,QAAQ,CAACiC,OAAO;oBAC9D/C,OAAOC,QAAQ,yBAAyB,GAAGlD,KAAK,oBAAoB,CAAC,EAAEqD,MAAMlD;gBAC/E,OAAO;oBACLoE,KAAKvD,YAAY,GAAGgF;gBACtB;gBACAzB,KAAK7D,IAAI,GAAG4D,YAAYpB,QAAQ1C,MAAM,QAAQnD,8BAA8BgG,MAAMrD;gBAClF;YACF;IACF;IACA,OAAOkD,OAAOI,UAAU,CAACN,MAAM,KAAKkC,SAASX,OAAO;AACtD;AAEA;;;;CAIC,GACD,OAAO,SAAS2B,uBACdC,MAA+B,EAC/BpB,YAAsC;QAaxBpC;IAXd,MAAMO,SAAiB;QAAEI,YAAY,EAAE;QAAEI,WAAW,EAAE;IAAC;IACvD,MAAM0C,OAAO,CAAC1H,QAAmF;YAC/FA,OAAOwE,OAAOI,UAAU,CAACN,MAAM,GAAG,OAAOtE;YACzC4E,YAAYJ,OAAOI,UAAU;WACzBJ,OAAOQ,SAAS,CAACV,MAAM,GAAG;YAAEU,WAAWtD,OAAOiG,WAAW,CAACnD,OAAOQ,SAAS;QAAE,IAAI,CAAC;IAEvF,MAAM/B,QAAQ,AAACc,CAAAA,MAAMC,OAAO,CAACyD,MAAM,CAAC,QAAQ,IAAIA,MAAM,CAAC,QAAQ,GAAG,EAAE,AAAD,EAChEG,GAAG,CAAC3D,QACJ4D,MAAM,CAAC,CAACC,OAAyBA,SAAS,QAAQ,CAACzJ,aAAa+G,IAAI,CAAC0C,OACrEC,KAAK,CAAC,GAAGjJ,yBACT8I,GAAG,CAAC,CAACE,OAASA,KAAKC,KAAK,CAAC,GAAGhJ;IAC/B,MAAMyD,OAAO,EAACyB,UAAAA,OAAOwD,MAAM,CAAC,OAAO,aAArBxD,UAA0B,IAAI8D,KAAK,CAAC,GAAGvJ;IACrD,MAAMwJ,UAAUC,KAAKC,SAAS,CAACT,QAAQnD,MAAM;IAC7C,IAAI0D,UAAUhJ,gCAAgC;QAC5CuF,OACEC,QACA,uBACA,CAAC,+BAA+B,EAAEwD,QAAQ,sBAAsB,EAAEhJ,+BAA+B,gEAAgE,CAAC,EAClK,SACAgJ;QAEF,OAAON,KAAK;IACd;IAEA,4EAA4E;IAC5E,yDAAyD;IACzD,MAAMxE,cAAcuE,MAAM,CAAC,cAAc;IACzC,IAAIvE,gBAAgB,QAAQA,gBAAgBgE,aAAahE,gBAAgB,IAAI;QAC3E,IAAI,CAAC,AAAChF,0BAAiDmH,QAAQ,CAACnC,cAAc;YAC5EqB,OAAOC,QAAQ,oBAAoB,wDAAwD,eAAetB;YAC1G,OAAOwE,KAAK;QACd;QACA,MAAMnB,OAAOpI,8BAA8B,CAAC+E,YAAuC;QACnF,IAAIqD,QAAQF,YAAY,CAACE,KAAK,EAAE;YAC9BhC,OACEC,QACA,0BACA,CAAC,mBAAmB,EAAE1G,yBAAyB,CAACyI,KAAK,CAAC,+BAA+B,CAAC,EACtF,eACArD;YAEF,OAAOwE,KAAK;QACd;QACA,OAAOA,KAAK;YACVlF;YACAG,SAAS;gBAAE1C,OAAOpC,gBAAgB,CAAC,EAAE;gBAAE+E,YAAY,EAAE;gBAAEC,YAAY;YAAM;YACzEC,OAAO,EAAE;YACTG;YACAC,aAAaA;QACf;IACF;IAEA,MAAMP,UAAU8E,MAAM,CAAC,UAAU;IACjC,MAAM3E,QAAQ2E,MAAM,CAAC,QAAQ;IAC7B,IAAI,CAAC3D,SAASnB,YAAY,CAACoB,MAAMC,OAAO,CAAClB,QAAQ;QAC/CyB,OAAOC,QAAQ,oBAAoB,wCAAwC,WAAW7B;QACtF,OAAO+E,KAAK;IACd;IACA,MAAMzH,QAAQ0C,OAAO,CAAC,QAAQ;IAC9B,IAAI,CAAC,AAAC9E,iBAAwCwH,QAAQ,CAACpF,QAAQ;QAC7DsE,OAAOC,QAAQ,sBAAsB,iDAAiD,iBAAiBvE;QACvG,OAAOyH,KAAK;IACd;IACA,MAAMS,YAAYlI;IAClB,MAAMsG,OAAOtI,2BAA2B,CAACkK,UAAU;IACnD,IAAI5B,QAAQ,CAACF,YAAY,CAACE,KAAK,EAAE;QAC/BhC,OACEC,QACA,mBACA,CAAC,aAAa,EAAEpG,yBAAyB+J,WAAW,QAAQ,EAAErK,yBAAyB,CAACyI,KAAK,CAAC,8FAA8F,EAAEA,KAAK,EAAE,CAAC,EACtM,iBACAtG;QAEF,OAAOyH,KAAK;IACd;IACA,MAAMU,gBAAgBrE,MAAMC,OAAO,CAACrB,OAAO,CAAC,aAAa,IAAIA,OAAO,CAAC,aAAa,GAAG,EAAE;IACvF,IAAIyF,cAAc9D,MAAM,GAAGxH,uBAAuB;QAChDyH,OACEC,QACA,kCACA,CAAC,wBAAwB,EAAE1H,sBAAsB,YAAY,CAAC,EAC9D,sBACAsL,cAAc9D,MAAM;IAExB;IACA,MAAM1B,aAAawF,cAChBL,KAAK,CAAC,GAAGjL,uBACT8K,GAAG,CAAC,CAAC1C,KAAKkB,QAAUnB,cAAcT,QAAQU,KAAK,CAAC,mBAAmB,EAAEkB,MAAM,CAAC,CAAC,EAAE+B,WAAW,QAC1FN,MAAM,CAAC,CAACtI,YAAkDA,cAAc;IAC3E,MAAMsD,aAAa,AAACxF,oBAA2CgI,QAAQ,CAAC1C,OAAO,CAAC,aAAa,IACxFA,OAAO,CAAC,aAAa,GACtB;IAEJ,IAAI,CAACG,MAAMwB,MAAM,EAAE;QACjBC,OAAOC,QAAQ,oBAAoB,2EAA2E,SAAS1B;IACzH;IACA,IAAIA,MAAMwB,MAAM,GAAGvH,kBAAkB;QACnCwH,OAAOC,QAAQ,6BAA6B,CAAC,4BAA4B,EAAEzH,iBAAiB,OAAO,CAAC,EAAE,SAAS+F,MAAMwB,MAAM;IAC7H;IACA,MAAM+D,OAAOvF,MACViF,KAAK,CAAC,GAAGhL,kBACT6K,GAAG,CAAC,CAAC1C,KAAKkB,QAAUD,SAAS3B,QAAQU,KAAKkB,OAAO+B,WAAW9B,eAC5DwB,MAAM,CAAC,CAAChC,OAAyCA,SAAS;IAE7D,OAAO6B,KAAK;QACVlF;QACAG,SAAS;YAAE1C,OAAOkI;YAAWvF;YAAYC;QAAW;QACpDC,OAAOuF;QACPpF;QACAC,aAAa;IACf;AACF;AAUA,2FAA2F,GAC3F,MAAMoF,kBAAkB;AAExB,SAASC,MAAMvI,KAAc,EAAE+F,GAAW;IACxC,OAAO,AAAChC,CAAAA,MAAMC,OAAO,CAAChE,SAASA,QAAQ,EAAE,AAAD,EACrC4H,GAAG,CAAC3D,QACJ4D,MAAM,CAAC,CAACW,OAAyBA,SAAS,MAC1CT,KAAK,CAAC,GAAGhC,KACT6B,GAAG,CAAC,CAACY,OAASA,KAAKT,KAAK,CAAC,GAAG3I;AACjC;AAEA;;;;;CAKC,GACD,OAAO,SAASqJ,0BACdhB,MAA+B;QAEdxD;IAAjB,MAAMZ,UAAU,EAACY,UAAAA,OAAOwD,MAAM,CAAC,UAAU,aAAxBxD,UAA6B,IAAI8D,KAAK,CAAC,GAAG9I;IAC3D,MAAMe,QAA+B;QACnCqD;QACAC,QAAQiF,MAAMd,MAAM,CAAC,SAAS,EAAEvI;QAChCqE,aAAagF,MAAMd,MAAM,CAAC,cAAc,EAAEtI;IAC5C;IACA,MAAMyF,aAAoC,EAAE;IAC5C,IAAI,CAACvB,SAAS;QACZuB,WAAWC,IAAI,CAAC;YAAEC,MAAM;YAAML,MAAM;YAAqBC,SAAS;QAAkC;IACtG;IACA,MAAMgE,MAAM;QAAC1I,MAAMqD,OAAO;WAAKrD,MAAMsD,MAAM;WAAKtD,MAAMuD,WAAW;KAAC;IAClE,IAAImF,IAAIC,IAAI,CAAC,CAACH,OAASnK,aAAa+G,IAAI,CAACoD,QAAQ;QAC/C5D,WAAWC,IAAI,CAAC;YACdC,MAAM;YACNL,MAAM;YACNC,SAAS;QACX;IACF;IACA,IAAIgE,IAAIC,IAAI,CAAC,CAACH,OAASF,gBAAgBlD,IAAI,CAACoD,QAAQ;QAClD5D,WAAWC,IAAI,CAAC;YACdC,MAAM;YACNL,MAAM;YACNC,SAAS;QACX;IACF;IACA,OAAO;QAAE1E,OAAO4E,WAAWN,MAAM,GAAG,OAAOtE;QAAO4E;IAAW;AAC/D"}

package/src/lib/usage/ai-allotment-alerts.d.ts

@@ -0,0 +1,72 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import { sendEmail } from '@aglyn/shared-util-email';
+import { meterPlatformEmail } from '@aglyn/tenant-data-admin/server/email-metering';
+import { filterSuppressedEmails } from '@aglyn/tenant-data-admin/server/email-suppression';
+import { notifyUsers } from '@aglyn/tenant-data-admin/server/notifications';
+import { type AiAllotmentStanding, type AiAllotmentThreshold } from '../model/ai-allotments';
+/**
+ * A SOFT allotment's 80% and 100% (AGL-2942), through the alert pipeline's
+ * two channels: the console notification every usage threshold writes
+ * (`billing.usage`, to `users/{uid}/notifications`) and the email beside it,
+ * sent past the platform suppression list and metered as platform mail —
+ * the same primitives the usage-alert sweep composes.
+ *
+ * Told when the request that finds the subject at a threshold is admitted,
+ * rather than on the next daily sweep: an allotment is a line a manager drew
+ * for one person or one site, and a day's delay is most of what a soft line
+ * is for. The sweep is untouched.
+ *
+ * ## Who is told
+ *
+ * The workspace's owners and admins — the audience of every usage alert —
+ * and, for a member's or a collaborator's allotment, the person it is for.
+ * The person gets the words without the Billing link, which a collaborator
+ * cannot open.
+ *
+ * ## Once per threshold per month
+ *
+ * The marker is `alerted: { month, threshold }` on the allotment itself,
+ * claimed in a transaction before anything is sent, so two requests at the
+ * line cannot both announce it. A write to the allotment clears the marker,
+ * so a raised allotment announces its own next crossing.
+ */
+/** A crossing to announce, as the reservation measured it. */
+export interface AiAllotmentAlertInput {
+    orgId: string;
+    /** The workspace's slug, for the Billing link; `null` omits the link. */
+    orgSlug: string | null;
+    month: string;
+    alerts: ReadonlyArray<{
+        standing: AiAllotmentStanding;
+        threshold: AiAllotmentThreshold;
+    }>;
+}
+/** The pipeline's primitives, replaceable in a spec. */
+export interface AiAllotmentAlertChannels {
+    notify: typeof notifyUsers;
+    send: typeof sendEmail;
+    filter: typeof filterSuppressedEmails;
+    meter: typeof meterPlatformEmail;
+}
+/** Take the marker for `threshold` this month; `false` when it was taken. */
+export declare function claimAiAllotmentAlert(firestore: FirebaseFirestore.Firestore, orgId: string, subject: string, month: string, threshold: AiAllotmentThreshold): Promise<boolean>;
+/**
+ * Announce every crossing the reservation found. Never throws, and answers
+ * how many were announced — one failing crossing does not stop the next.
+ */
+export declare function announceAiAllotmentAlerts(firestore: FirebaseFirestore.Firestore, input: AiAllotmentAlertInput, channels?: Partial<AiAllotmentAlertChannels>): Promise<number>;

package/src/lib/usage/ai-allotment-alerts.js

@@ -0,0 +1,157 @@
+import { _ as _extends } from "@swc/helpers/_/_extends";
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ import { buildRoute, Route } from "@aglyn/aglyn/app-utils/console-routes";
+import { sendEmail } from "@aglyn/shared-util-email";
+import { meterPlatformEmail } from "@aglyn/tenant-data-admin/server/email-metering";
+import { filterSuppressedEmails } from "@aglyn/tenant-data-admin/server/email-suppression";
+import { notifyUsers } from "@aglyn/tenant-data-admin/server/notifications";
+import { aiAllotmentAlertCopy } from "../model/ai-allotments.js";
+import { aiAllotmentRef } from "./ai-allotments.js";
+const DEFAULT_CHANNELS = {
+    notify: notifyUsers,
+    send: sendEmail,
+    filter: filterSuppressedEmails,
+    meter: meterPlatformEmail
+};
+/** The console's absolute origin for an email link, or `''` when unset. */ function consoleOrigin() {
+    var _process_env_NEXT_PUBLIC_CONSOLE_URL;
+    return ((_process_env_NEXT_PUBLIC_CONSOLE_URL = process.env.NEXT_PUBLIC_CONSOLE_URL) != null ? _process_env_NEXT_PUBLIC_CONSOLE_URL : '').trim().replace(/\/+$/, '');
+}
+/** Take the marker for `threshold` this month; `false` when it was taken. */ export async function claimAiAllotmentAlert(firestore, orgId, subject, month, threshold) {
+    const ref = aiAllotmentRef(firestore.collection('orgs').doc(orgId), subject);
+    return firestore.runTransaction(async (tx)=>{
+        const snapshot = await tx.get(ref);
+        if (!snapshot.exists) return false;
+        const alerted = snapshot.get('alerted');
+        if ((alerted == null ? void 0 : alerted.month) === month && Number(alerted == null ? void 0 : alerted.threshold) >= threshold) return false;
+        tx.set(ref, {
+            alerted: {
+                month,
+                threshold
+            }
+        }, {
+            merge: true
+        });
+        return true;
+    });
+}
+async function recipientsFor(firestore, orgId, standing) {
+    const orgRef = firestore.collection('orgs').doc(orgId);
+    const members = await orgRef.collection('members').get();
+    const managerUids = [];
+    const managerEmails = [];
+    let subjectEmail = null;
+    let subjectName = '';
+    for (const member of members.docs){
+        var _member_get;
+        const role = member.get('role');
+        const email = String((_member_get = member.get('email')) != null ? _member_get : '').trim();
+        if (role === 'owner' || role === 'admin') {
+            managerUids.push(member.id);
+            if (email.includes('@')) managerEmails.push(email);
+        }
+        if (standing.uid && member.id === standing.uid) {
+            var _member_get1;
+            subjectEmail = email.includes('@') ? email : null;
+            subjectName = String((_member_get1 = member.get('displayName')) != null ? _member_get1 : '').trim() || email;
+        }
+    }
+    if (standing.scope === 'host' && standing.hostId) {
+        var _host_get, _host_get1;
+        const host = await firestore.collection('hosts').doc(standing.hostId).get();
+        subjectName = String((_host_get = host.get('displayName')) != null ? _host_get : '').trim() || String((_host_get1 = host.get('subdomain')) != null ? _host_get1 : '').trim();
+    }
+    return {
+        managerUids,
+        managerEmails,
+        subjectUid: standing.scope === 'host' ? null : standing.uid,
+        subjectEmail: standing.scope === 'host' ? null : subjectEmail,
+        subjectName: subjectName || (standing.scope === 'host' ? 'this' : 'A member')
+    };
+}
+/**
+ * Announce every crossing the reservation found. Never throws, and answers
+ * how many were announced — one failing crossing does not stop the next.
+ */ export async function announceAiAllotmentAlerts(firestore, input, channels = {}) {
+    const { notify, send, filter, meter } = _extends({}, DEFAULT_CHANNELS, channels);
+    let announced = 0;
+    for (const { standing, threshold } of input.alerts){
+        try {
+            const claimed = await claimAiAllotmentAlert(firestore, input.orgId, standing.subject, input.month, threshold);
+            if (!claimed) continue;
+            const recipients = await recipientsFor(firestore, input.orgId, standing);
+            const copy = aiAllotmentAlertCopy({
+                scope: standing.scope,
+                threshold,
+                used: standing.used,
+                credits: standing.credits,
+                name: recipients.subjectName
+            });
+            const link = input.orgSlug ? `${buildRoute(Route.MANAGE_BILLING_USAGE, {
+                orgSlug: input.orgSlug
+            })}#ai-allotments` : null;
+            await notify(recipients.managerUids, _extends({
+                type: 'billing.usage',
+                title: copy.title,
+                body: copy.body,
+                orgId: input.orgId
+            }, link ? {
+                link
+            } : {}));
+            if (recipients.subjectUid && !recipients.managerUids.includes(recipients.subjectUid)) {
+                await notify([
+                    recipients.subjectUid
+                ], {
+                    type: 'billing.usage',
+                    title: copy.title,
+                    body: copy.body,
+                    orgId: input.orgId
+                });
+            }
+            const origin = consoleOrigin();
+            const managerText = link && origin ? `${copy.body}\n\n${origin}${link}` : copy.body;
+            const managers = await filter(recipients.managerEmails);
+            if (managers.length) {
+                const result = await send({
+                    to: managers,
+                    subject: copy.title,
+                    text: managerText,
+                    context: 'ai-allotment-alert'
+                });
+                if (result.sent) await meter().catch(()=>undefined);
+            }
+            const subjectAddress = recipients.subjectEmail ? (await filter([
+                recipients.subjectEmail
+            ])).filter((address)=>!managers.includes(address)) : [];
+            if (subjectAddress.length) {
+                const result = await send({
+                    to: subjectAddress,
+                    subject: copy.title,
+                    text: copy.body,
+                    context: 'ai-allotment-alert'
+                });
+                if (result.sent) await meter().catch(()=>undefined);
+            }
+            announced += 1;
+        } catch (error) {
+            console.error('[ai-allotments] announcing a crossing failed', input.orgId, standing.subject, error);
+        }
+    }
+    return announced;
+}
+
+//# sourceMappingURL=ai-allotment-alerts.js.map

package/src/lib/usage/ai-allotment-alerts.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../libs/plugins/ai/src/lib/usage/ai-allotment-alerts.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { buildRoute, Route } from '@aglyn/aglyn/app-utils/console-routes'\nimport { sendEmail } from '@aglyn/shared-util-email'\nimport { meterPlatformEmail } from '@aglyn/tenant-data-admin/server/email-metering'\nimport { filterSuppressedEmails } from '@aglyn/tenant-data-admin/server/email-suppression'\nimport { notifyUsers } from '@aglyn/tenant-data-admin/server/notifications'\nimport {\n  aiAllotmentAlertCopy,\n  type AiAllotmentStanding,\n  type AiAllotmentThreshold,\n} from '../model/ai-allotments'\nimport { aiAllotmentRef } from './ai-allotments'\n\n/**\n * A SOFT allotment's 80% and 100% (AGL-2942), through the alert pipeline's\n * two channels: the console notification every usage threshold writes\n * (`billing.usage`, to `users/{uid}/notifications`) and the email beside it,\n * sent past the platform suppression list and metered as platform mail —\n * the same primitives the usage-alert sweep composes.\n *\n * Told when the request that finds the subject at a threshold is admitted,\n * rather than on the next daily sweep: an allotment is a line a manager drew\n * for one person or one site, and a day's delay is most of what a soft line\n * is for. The sweep is untouched.\n *\n * ## Who is told\n *\n * The workspace's owners and admins — the audience of every usage alert —\n * and, for a member's or a collaborator's allotment, the person it is for.\n * The person gets the words without the Billing link, which a collaborator\n * cannot open.\n *\n * ## Once per threshold per month\n *\n * The marker is `alerted: { month, threshold }` on the allotment itself,\n * claimed in a transaction before anything is sent, so two requests at the\n * line cannot both announce it. A write to the allotment clears the marker,\n * so a raised allotment announces its own next crossing.\n */\n\n/** A crossing to announce, as the reservation measured it. */\nexport interface AiAllotmentAlertInput {\n  orgId: string\n  /** The workspace's slug, for the Billing link; `null` omits the link. */\n  orgSlug: string | null\n  month: string\n  alerts: ReadonlyArray<{ standing: AiAllotmentStanding; threshold: AiAllotmentThreshold }>\n}\n\n/** The pipeline's primitives, replaceable in a spec. */\nexport interface AiAllotmentAlertChannels {\n  notify: typeof notifyUsers\n  send: typeof sendEmail\n  filter: typeof filterSuppressedEmails\n  meter: typeof meterPlatformEmail\n}\n\nconst DEFAULT_CHANNELS: AiAllotmentAlertChannels = {\n  notify: notifyUsers,\n  send: sendEmail,\n  filter: filterSuppressedEmails,\n  meter: meterPlatformEmail,\n}\n\n/** The console's absolute origin for an email link, or `''` when unset. */\nfunction consoleOrigin(): string {\n  return (process.env.NEXT_PUBLIC_CONSOLE_URL ?? '').trim().replace(/\\/+$/, '')\n}\n\n/** Take the marker for `threshold` this month; `false` when it was taken. */\nexport async function claimAiAllotmentAlert(\n  firestore: FirebaseFirestore.Firestore,\n  orgId: string,\n  subject: string,\n  month: string,\n  threshold: AiAllotmentThreshold,\n): Promise<boolean> {\n  const ref = aiAllotmentRef(firestore.collection('orgs').doc(orgId), subject)\n  return firestore.runTransaction(async (tx) => {\n    const snapshot = await tx.get(ref)\n    if (!snapshot.exists) return false\n    const alerted = snapshot.get('alerted') as { month?: unknown; threshold?: unknown } | null\n    if (alerted?.month === month && Number(alerted?.threshold) >= threshold) return false\n    tx.set(ref, { alerted: { month, threshold } }, { merge: true })\n    return true\n  })\n}\n\ninterface Recipients {\n  managerUids: string[]\n  managerEmails: string[]\n  subjectUid: string | null\n  subjectEmail: string | null\n  subjectName: string\n}\n\nasync function recipientsFor(\n  firestore: FirebaseFirestore.Firestore,\n  orgId: string,\n  standing: AiAllotmentStanding,\n): Promise<Recipients> {\n  const orgRef = firestore.collection('orgs').doc(orgId)\n  const members = await orgRef.collection('members').get()\n  const managerUids: string[] = []\n  const managerEmails: string[] = []\n  let subjectEmail: string | null = null\n  let subjectName = ''\n  for (const member of members.docs) {\n    const role = member.get('role')\n    const email = String(member.get('email') ?? '').trim()\n    if (role === 'owner' || role === 'admin') {\n      managerUids.push(member.id)\n      if (email.includes('@')) managerEmails.push(email)\n    }\n    if (standing.uid && member.id === standing.uid) {\n      subjectEmail = email.includes('@') ? email : null\n      subjectName = String(member.get('displayName') ?? '').trim() || email\n    }\n  }\n  if (standing.scope === 'host' && standing.hostId) {\n    const host = await firestore.collection('hosts').doc(standing.hostId).get()\n    subjectName =\n      String(host.get('displayName') ?? '').trim() ||\n      String(host.get('subdomain') ?? '').trim()\n  }\n  return {\n    managerUids,\n    managerEmails,\n    subjectUid: standing.scope === 'host' ? null : standing.uid,\n    subjectEmail: standing.scope === 'host' ? null : subjectEmail,\n    subjectName: subjectName || (standing.scope === 'host' ? 'this' : 'A member'),\n  }\n}\n\n/**\n * Announce every crossing the reservation found. Never throws, and answers\n * how many were announced — one failing crossing does not stop the next.\n */\nexport async function announceAiAllotmentAlerts(\n  firestore: FirebaseFirestore.Firestore,\n  input: AiAllotmentAlertInput,\n  channels: Partial<AiAllotmentAlertChannels> = {},\n): Promise<number> {\n  const { notify, send, filter, meter } = { ...DEFAULT_CHANNELS, ...channels }\n  let announced = 0\n  for (const { standing, threshold } of input.alerts) {\n    try {\n      const claimed = await claimAiAllotmentAlert(\n        firestore,\n        input.orgId,\n        standing.subject,\n        input.month,\n        threshold,\n      )\n      if (!claimed) continue\n      const recipients = await recipientsFor(firestore, input.orgId, standing)\n      const copy = aiAllotmentAlertCopy({\n        scope: standing.scope,\n        threshold,\n        used: standing.used,\n        credits: standing.credits,\n        name: recipients.subjectName,\n      })\n      const link = input.orgSlug\n        ? `${buildRoute(Route.MANAGE_BILLING_USAGE, { orgSlug: input.orgSlug })}#ai-allotments`\n        : null\n      await notify(recipients.managerUids, {\n        type: 'billing.usage',\n        title: copy.title,\n        body: copy.body,\n        orgId: input.orgId,\n        ...(link ? { link } : {}),\n      })\n      if (recipients.subjectUid && !recipients.managerUids.includes(recipients.subjectUid)) {\n        await notify([recipients.subjectUid], {\n          type: 'billing.usage',\n          title: copy.title,\n          body: copy.body,\n          orgId: input.orgId,\n        })\n      }\n      const origin = consoleOrigin()\n      const managerText = link && origin ? `${copy.body}\\n\\n${origin}${link}` : copy.body\n      const managers = await filter(recipients.managerEmails)\n      if (managers.length) {\n        const result = await send({\n          to: managers,\n          subject: copy.title,\n          text: managerText,\n          context: 'ai-allotment-alert',\n        })\n        if (result.sent) await meter().catch(() => undefined)\n      }\n      const subjectAddress = recipients.subjectEmail\n        ? (await filter([recipients.subjectEmail])).filter(\n            (address) => !managers.includes(address),\n          )\n        : []\n      if (subjectAddress.length) {\n        const result = await send({\n          to: subjectAddress,\n          subject: copy.title,\n          text: copy.body,\n          context: 'ai-allotment-alert',\n        })\n        if (result.sent) await meter().catch(() => undefined)\n      }\n      announced += 1\n    } catch (error) {\n      console.error('[ai-allotments] announcing a crossing failed', input.orgId, standing.subject, error)\n    }\n  }\n  return announced\n}\n"],"names":["buildRoute","Route","sendEmail","meterPlatformEmail","filterSuppressedEmails","notifyUsers","aiAllotmentAlertCopy","aiAllotmentRef","DEFAULT_CHANNELS","notify","send","filter","meter","consoleOrigin","process","env","NEXT_PUBLIC_CONSOLE_URL","trim","replace","claimAiAllotmentAlert","firestore","orgId","subject","month","threshold","ref","collection","doc","runTransaction","tx","snapshot","get","exists","alerted","Number","set","merge","recipientsFor","standing","orgRef","members","managerUids","managerEmails","subjectEmail","subjectName","member","docs","role","email","String","push","id","includes","uid","scope","hostId","host","subjectUid","announceAiAllotmentAlerts","input","channels","announced","alerts","claimed","recipients","copy","used","credits","name","link","orgSlug","MANAGE_BILLING_USAGE","type","title","body","origin","managerText","managers","length","result","to","text","context","sent","catch","undefined","subjectAddress","address","error","console"],"mappings":";AAAA;;;;;;;;;;;;;;;CAeC,GAED,SAASA,UAAU,EAAEC,KAAK,QAAQ,wCAAuC;AACzE,SAASC,SAAS,QAAQ,2BAA0B;AACpD,SAASC,kBAAkB,QAAQ,iDAAgD;AACnF,SAASC,sBAAsB,QAAQ,oDAAmD;AAC1F,SAASC,WAAW,QAAQ,gDAA+C;AAC3E,SACEC,oBAAoB,QAGf,4BAAwB;AAC/B,SAASC,cAAc,QAAQ,qBAAiB;AA8ChD,MAAMC,mBAA6C;IACjDC,QAAQJ;IACRK,MAAMR;IACNS,QAAQP;IACRQ,OAAOT;AACT;AAEA,yEAAyE,GACzE,SAASU;QACCC;IAAR,OAAO,EAACA,uCAAAA,QAAQC,GAAG,CAACC,uBAAuB,YAAnCF,uCAAuC,IAAIG,IAAI,GAAGC,OAAO,CAAC,QAAQ;AAC5E;AAEA,2EAA2E,GAC3E,OAAO,eAAeC,sBACpBC,SAAsC,EACtCC,KAAa,EACbC,OAAe,EACfC,KAAa,EACbC,SAA+B;IAE/B,MAAMC,MAAMlB,eAAea,UAAUM,UAAU,CAAC,QAAQC,GAAG,CAACN,QAAQC;IACpE,OAAOF,UAAUQ,cAAc,CAAC,OAAOC;QACrC,MAAMC,WAAW,MAAMD,GAAGE,GAAG,CAACN;QAC9B,IAAI,CAACK,SAASE,MAAM,EAAE,OAAO;QAC7B,MAAMC,UAAUH,SAASC,GAAG,CAAC;QAC7B,IAAIE,CAAAA,2BAAAA,QAASV,KAAK,MAAKA,SAASW,OAAOD,2BAAAA,QAAST,SAAS,KAAKA,WAAW,OAAO;QAChFK,GAAGM,GAAG,CAACV,KAAK;YAAEQ,SAAS;gBAAEV;gBAAOC;YAAU;QAAE,GAAG;YAAEY,OAAO;QAAK;QAC7D,OAAO;IACT;AACF;AAUA,eAAeC,cACbjB,SAAsC,EACtCC,KAAa,EACbiB,QAA6B;IAE7B,MAAMC,SAASnB,UAAUM,UAAU,CAAC,QAAQC,GAAG,CAACN;IAChD,MAAMmB,UAAU,MAAMD,OAAOb,UAAU,CAAC,WAAWK,GAAG;IACtD,MAAMU,cAAwB,EAAE;IAChC,MAAMC,gBAA0B,EAAE;IAClC,IAAIC,eAA8B;IAClC,IAAIC,cAAc;IAClB,KAAK,MAAMC,UAAUL,QAAQM,IAAI,CAAE;YAEZD;QADrB,MAAME,OAAOF,OAAOd,GAAG,CAAC;QACxB,MAAMiB,QAAQC,QAAOJ,cAAAA,OAAOd,GAAG,CAAC,oBAAXc,cAAuB,IAAI5B,IAAI;QACpD,IAAI8B,SAAS,WAAWA,SAAS,SAAS;YACxCN,YAAYS,IAAI,CAACL,OAAOM,EAAE;YAC1B,IAAIH,MAAMI,QAAQ,CAAC,MAAMV,cAAcQ,IAAI,CAACF;QAC9C;QACA,IAAIV,SAASe,GAAG,IAAIR,OAAOM,EAAE,KAAKb,SAASe,GAAG,EAAE;gBAEzBR;YADrBF,eAAeK,MAAMI,QAAQ,CAAC,OAAOJ,QAAQ;YAC7CJ,cAAcK,QAAOJ,eAAAA,OAAOd,GAAG,CAAC,0BAAXc,eAA6B,IAAI5B,IAAI,MAAM+B;QAClE;IACF;IACA,IAAIV,SAASgB,KAAK,KAAK,UAAUhB,SAASiB,MAAM,EAAE;YAGvCC,WACAA;QAHT,MAAMA,OAAO,MAAMpC,UAAUM,UAAU,CAAC,SAASC,GAAG,CAACW,SAASiB,MAAM,EAAExB,GAAG;QACzEa,cACEK,QAAOO,YAAAA,KAAKzB,GAAG,CAAC,0BAATyB,YAA2B,IAAIvC,IAAI,MAC1CgC,QAAOO,aAAAA,KAAKzB,GAAG,CAAC,wBAATyB,aAAyB,IAAIvC,IAAI;IAC5C;IACA,OAAO;QACLwB;QACAC;QACAe,YAAYnB,SAASgB,KAAK,KAAK,SAAS,OAAOhB,SAASe,GAAG;QAC3DV,cAAcL,SAASgB,KAAK,KAAK,SAAS,OAAOX;QACjDC,aAAaA,eAAgBN,CAAAA,SAASgB,KAAK,KAAK,SAAS,SAAS,UAAS;IAC7E;AACF;AAEA;;;CAGC,GACD,OAAO,eAAeI,0BACpBtC,SAAsC,EACtCuC,KAA4B,EAC5BC,WAA8C,CAAC,CAAC;IAEhD,MAAM,EAAEnD,MAAM,EAAEC,IAAI,EAAEC,MAAM,EAAEC,KAAK,EAAE,GAAG,aAAKJ,kBAAqBoD;IAClE,IAAIC,YAAY;IAChB,KAAK,MAAM,EAAEvB,QAAQ,EAAEd,SAAS,EAAE,IAAImC,MAAMG,MAAM,CAAE;QAClD,IAAI;YACF,MAAMC,UAAU,MAAM5C,sBACpBC,WACAuC,MAAMtC,KAAK,EACXiB,SAAShB,OAAO,EAChBqC,MAAMpC,KAAK,EACXC;YAEF,IAAI,CAACuC,SAAS;YACd,MAAMC,aAAa,MAAM3B,cAAcjB,WAAWuC,MAAMtC,KAAK,EAAEiB;YAC/D,MAAM2B,OAAO3D,qBAAqB;gBAChCgD,OAAOhB,SAASgB,KAAK;gBACrB9B;gBACA0C,MAAM5B,SAAS4B,IAAI;gBACnBC,SAAS7B,SAAS6B,OAAO;gBACzBC,MAAMJ,WAAWpB,WAAW;YAC9B;YACA,MAAMyB,OAAOV,MAAMW,OAAO,GACtB,GAAGtE,WAAWC,MAAMsE,oBAAoB,EAAE;gBAAED,SAASX,MAAMW,OAAO;YAAC,GAAG,cAAc,CAAC,GACrF;YACJ,MAAM7D,OAAOuD,WAAWvB,WAAW,EAAE;gBACnC+B,MAAM;gBACNC,OAAOR,KAAKQ,KAAK;gBACjBC,MAAMT,KAAKS,IAAI;gBACfrD,OAAOsC,MAAMtC,KAAK;eACdgD,OAAO;gBAAEA;YAAK,IAAI,CAAC;YAEzB,IAAIL,WAAWP,UAAU,IAAI,CAACO,WAAWvB,WAAW,CAACW,QAAQ,CAACY,WAAWP,UAAU,GAAG;gBACpF,MAAMhD,OAAO;oBAACuD,WAAWP,UAAU;iBAAC,EAAE;oBACpCe,MAAM;oBACNC,OAAOR,KAAKQ,KAAK;oBACjBC,MAAMT,KAAKS,IAAI;oBACfrD,OAAOsC,MAAMtC,KAAK;gBACpB;YACF;YACA,MAAMsD,SAAS9D;YACf,MAAM+D,cAAcP,QAAQM,SAAS,GAAGV,KAAKS,IAAI,CAAC,IAAI,EAAEC,SAASN,MAAM,GAAGJ,KAAKS,IAAI;YACnF,MAAMG,WAAW,MAAMlE,OAAOqD,WAAWtB,aAAa;YACtD,IAAImC,SAASC,MAAM,EAAE;gBACnB,MAAMC,SAAS,MAAMrE,KAAK;oBACxBsE,IAAIH;oBACJvD,SAAS2C,KAAKQ,KAAK;oBACnBQ,MAAML;oBACNM,SAAS;gBACX;gBACA,IAAIH,OAAOI,IAAI,EAAE,MAAMvE,QAAQwE,KAAK,CAAC,IAAMC;YAC7C;YACA,MAAMC,iBAAiBtB,WAAWrB,YAAY,GAC1C,AAAC,CAAA,MAAMhC,OAAO;gBAACqD,WAAWrB,YAAY;aAAC,CAAA,EAAGhC,MAAM,CAC9C,CAAC4E,UAAY,CAACV,SAASzB,QAAQ,CAACmC,YAElC,EAAE;YACN,IAAID,eAAeR,MAAM,EAAE;gBACzB,MAAMC,SAAS,MAAMrE,KAAK;oBACxBsE,IAAIM;oBACJhE,SAAS2C,KAAKQ,KAAK;oBACnBQ,MAAMhB,KAAKS,IAAI;oBACfQ,SAAS;gBACX;gBACA,IAAIH,OAAOI,IAAI,EAAE,MAAMvE,QAAQwE,KAAK,CAAC,IAAMC;YAC7C;YACAxB,aAAa;QACf,EAAE,OAAO2B,OAAO;YACdC,QAAQD,KAAK,CAAC,gDAAgD7B,MAAMtC,KAAK,EAAEiB,SAAShB,OAAO,EAAEkE;QAC/F;IACF;IACA,OAAO3B;AACT"}

package/src/lib/usage/ai-allotments.d.ts

@@ -0,0 +1,125 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import { type AiAllotment, type AiAllotmentMode, type AiAllotmentStanding, type AiAllotmentSubject, type AiAllotmentVerdict } from '../model/ai-allotments';
+/**
+ * AI ALLOTMENTS (AGL-2942): the reads the gate takes and the writes the
+ * route makes. The shape and the arithmetic are `model/ai-allotments.ts`.
+ *
+ * ## What the gate reads, and where the figures come from
+ *
+ * One request by `uid`, naming `hostId` or not, is measured against every
+ * allotment that applies to it:
+ *
+ *   member:{uid}           the person's credits this month, every site —
+ *                          `aiUsageByUser/{uid}/months/{month}.credits`
+ *   collab:{hostId}:{uid}  the person's credits on that site —
+ *                          the same document's `byHost.{hostId}`
+ *   host:{hostId}          the SITE's credits, everyone on it — the org
+ *                          rollup's `assistUsage/{month}.byHost.{hostId}`
+ *   org                    no credits: the model restriction
+ *
+ * The per-person figures are the AGL-2928 rollup. The site figure is a map
+ * the meter writes on the org's month in the same batch, because summing the
+ * roster's months on every request would be one read per collaborator.
+ *
+ * Read inside the reservation's transaction, after the workspace's own
+ * ceilings admitted the request, so a refusal at the band costs no allotment
+ * read at all and an allotment is only ever consulted inside the band.
+ *
+ * ## Written only here, never by a client
+ *
+ * The rules deny every client write: an allotment is a spend control, and a
+ * collaborator who could write their own could lift it.
+ */
+/** The org month map a site's credits accumulate in. */
+export declare const AI_HOST_CREDITS_FIELD = "byHost";
+export declare function aiAllotmentsCollection(orgRef: FirebaseFirestore.DocumentReference): FirebaseFirestore.CollectionReference;
+export declare function aiAllotmentRef(orgRef: FirebaseFirestore.DocumentReference, subject: string): FirebaseFirestore.DocumentReference;
+/** Who a request is, for the allotments that apply to it. */
+export interface AiAllotmentRequestSubject {
+    /** The person asking; a request with none is measured against no allotment. */
+    uid?: string | null;
+    /** The site the request named, when it named one. */
+    hostId?: string | null;
+}
+/** Everything the reservation learned about allotments, carried to the door. */
+export interface AiAllotmentGate extends AiAllotmentVerdict {
+    /** The caller's own credits this month, before this request. */
+    personalCredits: number;
+    /** Every allotment of credits that applied, measured. */
+    standings: AiAllotmentStanding[];
+    /** The allotment allowlists that applied, intersected; `null` for none. */
+    models: string[] | null;
+    /** The org-wide model restriction; `null` for none. */
+    orgModels: string[] | null;
+}
+/** A document read, from a transaction or a plain Firestore. */
+export type AiAllotmentDocReader = (ref: FirebaseFirestore.DocumentReference) => Promise<FirebaseFirestore.DocumentSnapshot>;
+/** A site's credits this month off the org rollup's month document. */
+export declare function aiHostMonthCredits(orgMonth: FirebaseFirestore.DocumentSnapshot | null | undefined, hostId: string): number;
+/**
+ * Read and measure the allotments that apply to one request. `null` when
+ * the request names nobody — a meter that cannot say who asked meets no
+ * allotment, as it attributes to nobody.
+ *
+ * `orgMonth` is the org's month document when the caller already read it —
+ * the reservation reads it for an entitled workspace anyway — so a site
+ * allotment costs no second read of it.
+ */
+export declare function readAiAllotmentGate(read: AiAllotmentDocReader, orgRef: FirebaseFirestore.DocumentReference, subject: AiAllotmentRequestSubject, month: string, orgMonth?: FirebaseFirestore.DocumentSnapshot | null): Promise<AiAllotmentGate | null>;
+/** Every allotment in an org, optionally narrowed to one person or one site. */
+export declare function listAiAllotments(firestore: FirebaseFirestore.Firestore, orgId: string, filter?: {
+    uid?: string;
+    hostId?: string;
+}): Promise<AiAllotment[]>;
+/** One allotment a write sets. */
+export interface AiAllotmentWrite {
+    subject: AiAllotmentSubject;
+    credits: number | null;
+    mode: AiAllotmentMode;
+    models: string[] | null;
+}
+/**
+ * Set and remove allotments in one batch. A set REPLACES the document —
+ * credits, mode and allowlist together — and clears the alert marker, so a
+ * raised allotment announces its next crossing rather than inheriting the
+ * last one's.
+ */
+export declare function applyAiAllotmentWrites(firestore: FirebaseFirestore.Firestore, orgId: string, change: {
+    set: readonly AiAllotmentWrite[];
+    remove: readonly string[];
+}, actorUid: string): Promise<void>;
+/**
+ * Give a site's month its credits so far, once, when an allotment on the site
+ * is set before the site's map has a key for it.
+ *
+ * The map is written by the meter from the day the field shipped; a month
+ * already in progress has spend the map never saw. The roster's own months
+ * carry the same figure per person (`byHost`), so the first allotment set on
+ * a site sums them and writes the total — inside a transaction that writes
+ * nothing when the key is already there, so a request metered in between is
+ * counted once, by the meter.
+ */
+export declare function seedAiHostMonthCredits(firestore: FirebaseFirestore.Firestore, orgId: string, hostIds: readonly string[], month: string, personCredits: (hostId: string) => number): Promise<void>;
+/**
+ * Remove a person's allotments on account erasure: `member:{uid}` and every
+ * `collab:{hostId}:{uid}`, in each org the erasure names. By path and by a
+ * collection-scope equality, so neither needs an index; an org the person
+ * had already left keeps a configuration document that names a uid and
+ * nothing else, which the next write to that subject replaces.
+ */
+export declare function eraseAiAllotmentsForUser(firestore: FirebaseFirestore.Firestore, uid: string, orgIds: readonly string[]): Promise<number>;