@aglyn/plugins-ai 1.0.0-beta.143

package/src/lib/usage/ai-allotments.js

@@ -0,0 +1,239 @@
+import { _ as _extends } from "@swc/helpers/_/_extends";
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ // Straight from the SDK, not the admin lib, for the reason `assist-usage.ts`
+// gives at its head: the statics need no app, and the reservation that reads
+// allotments runs in every unit test that touches a counter.
+import { FieldValue } from "firebase-admin/firestore";
+import { AI_ALLOTMENTS_COLLECTION, AI_ALLOTMENT_ORG_SUBJECT, aiAllotmentFrom, aiAllotmentModelsAllowed, aiAllotmentSubjectId, aiAllotmentVerdict } from "../model/ai-allotments.js";
+import { aiUsageByUserMonthFrom } from "../model/ai-usage-by-user.js";
+import { userAiUsageMonthRef } from "./ai-usage-by-user.js";
+/**
+ * AI ALLOTMENTS (AGL-2942): the reads the gate takes and the writes the
+ * route makes. The shape and the arithmetic are `model/ai-allotments.ts`.
+ *
+ * ## What the gate reads, and where the figures come from
+ *
+ * One request by `uid`, naming `hostId` or not, is measured against every
+ * allotment that applies to it:
+ *
+ *   member:{uid}           the person's credits this month, every site —
+ *                          `aiUsageByUser/{uid}/months/{month}.credits`
+ *   collab:{hostId}:{uid}  the person's credits on that site —
+ *                          the same document's `byHost.{hostId}`
+ *   host:{hostId}          the SITE's credits, everyone on it — the org
+ *                          rollup's `assistUsage/{month}.byHost.{hostId}`
+ *   org                    no credits: the model restriction
+ *
+ * The per-person figures are the AGL-2928 rollup. The site figure is a map
+ * the meter writes on the org's month in the same batch, because summing the
+ * roster's months on every request would be one read per collaborator.
+ *
+ * Read inside the reservation's transaction, after the workspace's own
+ * ceilings admitted the request, so a refusal at the band costs no allotment
+ * read at all and an allotment is only ever consulted inside the band.
+ *
+ * ## Written only here, never by a client
+ *
+ * The rules deny every client write: an allotment is a spend control, and a
+ * collaborator who could write their own could lift it.
+ */ /** The org month map a site's credits accumulate in. */ export const AI_HOST_CREDITS_FIELD = 'byHost';
+export function aiAllotmentsCollection(orgRef) {
+    return orgRef.collection(AI_ALLOTMENTS_COLLECTION);
+}
+export function aiAllotmentRef(orgRef, subject) {
+    return aiAllotmentsCollection(orgRef).doc(subject);
+}
+const trimmed = (value)=>typeof value === 'string' ? value.trim() : '';
+/** An allotment read by the subject the reader ADDRESSED, not the one it echoes. */ const allotmentOf = (snapshot, subject)=>(snapshot == null ? void 0 : snapshot.exists) && subject ? aiAllotmentFrom(snapshot.data(), subject) : null;
+/**
+ * A subject id, or `null` when a segment is not an id. A request's site comes
+ * from its body, and a value that could never name a site names no
+ * allotment rather than failing the reservation it rides in.
+ */ function subjectIdOrNull(input) {
+    try {
+        return aiAllotmentSubjectId(input);
+    } catch (unused) {
+        return null;
+    }
+}
+/** A site's credits this month off the org rollup's month document. */ export function aiHostMonthCredits(orgMonth, hostId) {
+    var _ref;
+    const map = (orgMonth == null ? void 0 : orgMonth.exists) ? orgMonth.get(AI_HOST_CREDITS_FIELD) : null;
+    const value = Number((_ref = map == null ? void 0 : map[hostId]) != null ? _ref : 0);
+    return Number.isFinite(value) && value > 0 ? Math.floor(value) : 0;
+}
+/**
+ * Read and measure the allotments that apply to one request. `null` when
+ * the request names nobody — a meter that cannot say who asked meets no
+ * allotment, as it attributes to nobody.
+ *
+ * `orgMonth` is the org's month document when the caller already read it —
+ * the reservation reads it for an entitled workspace anyway — so a site
+ * allotment costs no second read of it.
+ */ export async function readAiAllotmentGate(read, orgRef, subject, month, orgMonth = null) {
+    var _personal_byHost_hostId, _ref;
+    var _allotmentOf;
+    const uid = trimmed(subject.uid);
+    const memberId = uid ? subjectIdOrNull({
+        scope: 'member',
+        uid
+    }) : null;
+    if (!uid || !memberId) return null;
+    const requestedHost = trimmed(subject.hostId);
+    const hostSubjectId = requestedHost ? subjectIdOrNull({
+        scope: 'host',
+        hostId: requestedHost
+    }) : null;
+    const hostId = hostSubjectId ? requestedHost : '';
+    const collabId = hostId ? subjectIdOrNull({
+        scope: 'collab',
+        hostId,
+        uid
+    }) : null;
+    const subjectRef = (id)=>aiAllotmentRef(orgRef, id);
+    const [orgDoc, memberDoc, collabDoc, hostDoc, monthDoc] = await Promise.all([
+        read(subjectRef(AI_ALLOTMENT_ORG_SUBJECT)),
+        read(subjectRef(memberId)),
+        collabId ? read(subjectRef(collabId)) : null,
+        hostSubjectId ? read(subjectRef(hostSubjectId)) : null,
+        read(userAiUsageMonthRef(orgRef, uid, month))
+    ]);
+    const member = allotmentOf(memberDoc, memberId);
+    const collab = allotmentOf(collabDoc, collabId);
+    const host = allotmentOf(hostDoc, hostSubjectId);
+    const personal = aiUsageByUserMonthFrom((monthDoc == null ? void 0 : monthDoc.exists) ? monthDoc.data() : null, uid, month);
+    let siteMonth = orgMonth;
+    if ((host == null ? void 0 : host.credits) && !siteMonth) {
+        siteMonth = await read(orgRef.collection('assistUsage').doc(month));
+    }
+    const standings = [];
+    const measure = (allotment, used)=>{
+        if (!allotment || allotment.credits === null || allotment.scope === 'org') return;
+        standings.push({
+            subject: allotment.subject,
+            scope: allotment.scope,
+            uid: allotment.uid,
+            hostId: allotment.hostId,
+            credits: allotment.credits,
+            used,
+            mode: allotment.mode
+        });
+    };
+    measure(member, personal.credits);
+    measure(collab, hostId ? (_personal_byHost_hostId = personal.byHost[hostId]) != null ? _personal_byHost_hostId : 0 : 0);
+    measure(host, hostId ? aiHostMonthCredits(siteMonth, hostId) : 0);
+    return _extends({}, aiAllotmentVerdict(standings), {
+        personalCredits: personal.credits,
+        standings,
+        models: aiAllotmentModelsAllowed([
+            member,
+            collab,
+            host
+        ]),
+        orgModels: (_ref = (_allotmentOf = allotmentOf(orgDoc, AI_ALLOTMENT_ORG_SUBJECT)) == null ? void 0 : _allotmentOf.models) != null ? _ref : null
+    });
+}
+/** Every allotment in an org, optionally narrowed to one person or one site. */ export async function listAiAllotments(firestore, orgId, filter = {}) {
+    let query = aiAllotmentsCollection(firestore.collection('orgs').doc(orgId));
+    // Single-field equality on fields every write stores, so neither needs a
+    // composite index.
+    if (filter.uid) query = query.where('uid', '==', filter.uid);
+    else if (filter.hostId) query = query.where('hostId', '==', filter.hostId);
+    const snapshot = await query.get();
+    return snapshot.docs.map((doc)=>aiAllotmentFrom(doc.data(), doc.id)).filter((allotment)=>allotment !== null);
+}
+/**
+ * Set and remove allotments in one batch. A set REPLACES the document —
+ * credits, mode and allowlist together — and clears the alert marker, so a
+ * raised allotment announces its next crossing rather than inheriting the
+ * last one's.
+ */ export async function applyAiAllotmentWrites(firestore, orgId, change, actorUid) {
+    const orgRef = firestore.collection('orgs').doc(orgId);
+    const batch = firestore.batch();
+    for (const write of change.set){
+        batch.set(aiAllotmentRef(orgRef, write.subject.id), {
+            subject: write.subject.id,
+            scope: write.subject.scope,
+            uid: write.subject.uid,
+            hostId: write.subject.hostId,
+            credits: write.subject.scope === 'org' ? null : write.credits,
+            mode: write.mode,
+            models: write.models,
+            setBy: actorUid,
+            updatedAt: FieldValue.serverTimestamp(),
+            alerted: null
+        });
+    }
+    for (const subject of change.remove){
+        batch.delete(aiAllotmentRef(orgRef, subject));
+    }
+    await batch.commit();
+}
+/**
+ * Give a site's month its credits so far, once, when an allotment on the site
+ * is set before the site's map has a key for it.
+ *
+ * The map is written by the meter from the day the field shipped; a month
+ * already in progress has spend the map never saw. The roster's own months
+ * carry the same figure per person (`byHost`), so the first allotment set on
+ * a site sums them and writes the total — inside a transaction that writes
+ * nothing when the key is already there, so a request metered in between is
+ * counted once, by the meter.
+ */ export async function seedAiHostMonthCredits(firestore, orgId, hostIds, month, personCredits) {
+    if (!hostIds.length) return;
+    const monthRef = firestore.collection('orgs').doc(orgId).collection('assistUsage').doc(month);
+    await firestore.runTransaction(async (tx)=>{
+        const snapshot = await tx.get(monthRef);
+        const map = snapshot.exists ? snapshot.get(AI_HOST_CREDITS_FIELD) : null;
+        const missing = hostIds.filter((hostId)=>(map == null ? void 0 : map[hostId]) === undefined);
+        if (!missing.length) return;
+        tx.set(monthRef, {
+            month,
+            [AI_HOST_CREDITS_FIELD]: Object.fromEntries(missing.map((hostId)=>[
+                    hostId,
+                    personCredits(hostId)
+                ]))
+        }, {
+            merge: true
+        });
+    });
+}
+/**
+ * Remove a person's allotments on account erasure: `member:{uid}` and every
+ * `collab:{hostId}:{uid}`, in each org the erasure names. By path and by a
+ * collection-scope equality, so neither needs an index; an org the person
+ * had already left keeps a configuration document that names a uid and
+ * nothing else, which the next write to that subject replaces.
+ */ export async function eraseAiAllotmentsForUser(firestore, uid, orgIds) {
+    let removed = 0;
+    for (const orgId of orgIds){
+        const allotments = await listAiAllotments(firestore, orgId, {
+            uid
+        });
+        if (!allotments.length) continue;
+        const orgRef = firestore.collection('orgs').doc(orgId);
+        const batch = firestore.batch();
+        for (const allotment of allotments){
+            batch.delete(aiAllotmentRef(orgRef, allotment.subject));
+            removed += 1;
+        }
+        await batch.commit();
+    }
+    return removed;
+}
+
+//# sourceMappingURL=ai-allotments.js.map

package/src/lib/usage/ai-allotments.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../libs/plugins/ai/src/lib/usage/ai-allotments.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n// Straight from the SDK, not the admin lib, for the reason `assist-usage.ts`\n// gives at its head: the statics need no app, and the reservation that reads\n// allotments runs in every unit test that touches a counter.\nimport { FieldValue } from 'firebase-admin/firestore'\nimport {\n  AI_ALLOTMENTS_COLLECTION,\n  AI_ALLOTMENT_ORG_SUBJECT,\n  aiAllotmentFrom,\n  aiAllotmentModelsAllowed,\n  aiAllotmentSubjectId,\n  aiAllotmentVerdict,\n  type AiAllotment,\n  type AiAllotmentMode,\n  type AiAllotmentStanding,\n  type AiAllotmentSubject,\n  type AiAllotmentVerdict,\n} from '../model/ai-allotments'\nimport { aiUsageByUserMonthFrom } from '../model/ai-usage-by-user'\nimport { userAiUsageMonthRef } from './ai-usage-by-user'\n\n/**\n * AI ALLOTMENTS (AGL-2942): the reads the gate takes and the writes the\n * route makes. The shape and the arithmetic are `model/ai-allotments.ts`.\n *\n * ## What the gate reads, and where the figures come from\n *\n * One request by `uid`, naming `hostId` or not, is measured against every\n * allotment that applies to it:\n *\n *   member:{uid}           the person's credits this month, every site —\n *                          `aiUsageByUser/{uid}/months/{month}.credits`\n *   collab:{hostId}:{uid}  the person's credits on that site —\n *                          the same document's `byHost.{hostId}`\n *   host:{hostId}          the SITE's credits, everyone on it — the org\n *                          rollup's `assistUsage/{month}.byHost.{hostId}`\n *   org                    no credits: the model restriction\n *\n * The per-person figures are the AGL-2928 rollup. The site figure is a map\n * the meter writes on the org's month in the same batch, because summing the\n * roster's months on every request would be one read per collaborator.\n *\n * Read inside the reservation's transaction, after the workspace's own\n * ceilings admitted the request, so a refusal at the band costs no allotment\n * read at all and an allotment is only ever consulted inside the band.\n *\n * ## Written only here, never by a client\n *\n * The rules deny every client write: an allotment is a spend control, and a\n * collaborator who could write their own could lift it.\n */\n\n/** The org month map a site's credits accumulate in. */\nexport const AI_HOST_CREDITS_FIELD = 'byHost'\n\nexport function aiAllotmentsCollection(\n  orgRef: FirebaseFirestore.DocumentReference,\n): FirebaseFirestore.CollectionReference {\n  return orgRef.collection(AI_ALLOTMENTS_COLLECTION)\n}\n\nexport function aiAllotmentRef(\n  orgRef: FirebaseFirestore.DocumentReference,\n  subject: string,\n): FirebaseFirestore.DocumentReference {\n  return aiAllotmentsCollection(orgRef).doc(subject)\n}\n\n/** Who a request is, for the allotments that apply to it. */\nexport interface AiAllotmentRequestSubject {\n  /** The person asking; a request with none is measured against no allotment. */\n  uid?: string | null\n  /** The site the request named, when it named one. */\n  hostId?: string | null\n}\n\n/** Everything the reservation learned about allotments, carried to the door. */\nexport interface AiAllotmentGate extends AiAllotmentVerdict {\n  /** The caller's own credits this month, before this request. */\n  personalCredits: number\n  /** Every allotment of credits that applied, measured. */\n  standings: AiAllotmentStanding[]\n  /** The allotment allowlists that applied, intersected; `null` for none. */\n  models: string[] | null\n  /** The org-wide model restriction; `null` for none. */\n  orgModels: string[] | null\n}\n\n/** A document read, from a transaction or a plain Firestore. */\nexport type AiAllotmentDocReader = (\n  ref: FirebaseFirestore.DocumentReference,\n) => Promise<FirebaseFirestore.DocumentSnapshot>\n\nconst trimmed = (value: unknown): string =>\n  typeof value === 'string' ? value.trim() : ''\n\n/** An allotment read by the subject the reader ADDRESSED, not the one it echoes. */\nconst allotmentOf = (\n  snapshot: FirebaseFirestore.DocumentSnapshot | null | undefined,\n  subject: string | null,\n): AiAllotment | null =>\n  snapshot?.exists && subject\n    ? aiAllotmentFrom(snapshot.data() as Record<string, unknown>, subject)\n    : null\n\n/**\n * A subject id, or `null` when a segment is not an id. A request's site comes\n * from its body, and a value that could never name a site names no\n * allotment rather than failing the reservation it rides in.\n */\nfunction subjectIdOrNull(input: Parameters<typeof aiAllotmentSubjectId>[0]): string | null {\n  try {\n    return aiAllotmentSubjectId(input)\n  } catch {\n    return null\n  }\n}\n\n/** A site's credits this month off the org rollup's month document. */\nexport function aiHostMonthCredits(\n  orgMonth: FirebaseFirestore.DocumentSnapshot | null | undefined,\n  hostId: string,\n): number {\n  const map = (orgMonth?.exists ? orgMonth.get(AI_HOST_CREDITS_FIELD) : null) as\n    | Record<string, unknown>\n    | null\n    | undefined\n  const value = Number(map?.[hostId] ?? 0)\n  return Number.isFinite(value) && value > 0 ? Math.floor(value) : 0\n}\n\n/**\n * Read and measure the allotments that apply to one request. `null` when\n * the request names nobody — a meter that cannot say who asked meets no\n * allotment, as it attributes to nobody.\n *\n * `orgMonth` is the org's month document when the caller already read it —\n * the reservation reads it for an entitled workspace anyway — so a site\n * allotment costs no second read of it.\n */\nexport async function readAiAllotmentGate(\n  read: AiAllotmentDocReader,\n  orgRef: FirebaseFirestore.DocumentReference,\n  subject: AiAllotmentRequestSubject,\n  month: string,\n  orgMonth: FirebaseFirestore.DocumentSnapshot | null = null,\n): Promise<AiAllotmentGate | null> {\n  const uid = trimmed(subject.uid)\n  const memberId = uid ? subjectIdOrNull({ scope: 'member', uid }) : null\n  if (!uid || !memberId) return null\n  const requestedHost = trimmed(subject.hostId)\n  const hostSubjectId = requestedHost\n    ? subjectIdOrNull({ scope: 'host', hostId: requestedHost })\n    : null\n  const hostId = hostSubjectId ? requestedHost : ''\n  const collabId = hostId ? subjectIdOrNull({ scope: 'collab', hostId, uid }) : null\n  const subjectRef = (id: string) => aiAllotmentRef(orgRef, id)\n  const [orgDoc, memberDoc, collabDoc, hostDoc, monthDoc] = await Promise.all([\n    read(subjectRef(AI_ALLOTMENT_ORG_SUBJECT)),\n    read(subjectRef(memberId)),\n    collabId ? read(subjectRef(collabId)) : null,\n    hostSubjectId ? read(subjectRef(hostSubjectId)) : null,\n    read(userAiUsageMonthRef(orgRef, uid, month)),\n  ])\n  const member = allotmentOf(memberDoc, memberId)\n  const collab = allotmentOf(collabDoc, collabId)\n  const host = allotmentOf(hostDoc, hostSubjectId)\n  const personal = aiUsageByUserMonthFrom(\n    monthDoc?.exists ? (monthDoc.data() as Record<string, unknown>) : null,\n    uid,\n    month,\n  )\n\n  let siteMonth = orgMonth\n  if (host?.credits && !siteMonth) {\n    siteMonth = await read(orgRef.collection('assistUsage').doc(month))\n  }\n\n  const standings: AiAllotmentStanding[] = []\n  const measure = (allotment: AiAllotment | null, used: number) => {\n    if (!allotment || allotment.credits === null || allotment.scope === 'org') return\n    standings.push({\n      subject: allotment.subject,\n      scope: allotment.scope,\n      uid: allotment.uid,\n      hostId: allotment.hostId,\n      credits: allotment.credits,\n      used,\n      mode: allotment.mode,\n    })\n  }\n  measure(member, personal.credits)\n  measure(collab, hostId ? (personal.byHost[hostId] ?? 0) : 0)\n  measure(host, hostId ? aiHostMonthCredits(siteMonth, hostId) : 0)\n\n  return {\n    ...aiAllotmentVerdict(standings),\n    personalCredits: personal.credits,\n    standings,\n    models: aiAllotmentModelsAllowed([member, collab, host]),\n    orgModels: allotmentOf(orgDoc, AI_ALLOTMENT_ORG_SUBJECT)?.models ?? null,\n  }\n}\n\n/** Every allotment in an org, optionally narrowed to one person or one site. */\nexport async function listAiAllotments(\n  firestore: FirebaseFirestore.Firestore,\n  orgId: string,\n  filter: { uid?: string; hostId?: string } = {},\n): Promise<AiAllotment[]> {\n  let query: FirebaseFirestore.Query = aiAllotmentsCollection(\n    firestore.collection('orgs').doc(orgId),\n  )\n  // Single-field equality on fields every write stores, so neither needs a\n  // composite index.\n  if (filter.uid) query = query.where('uid', '==', filter.uid)\n  else if (filter.hostId) query = query.where('hostId', '==', filter.hostId)\n  const snapshot = await query.get()\n  return snapshot.docs\n    .map((doc) => aiAllotmentFrom(doc.data() as Record<string, unknown>, doc.id))\n    .filter((allotment): allotment is AiAllotment => allotment !== null)\n}\n\n/** One allotment a write sets. */\nexport interface AiAllotmentWrite {\n  subject: AiAllotmentSubject\n  credits: number | null\n  mode: AiAllotmentMode\n  models: string[] | null\n}\n\n/**\n * Set and remove allotments in one batch. A set REPLACES the document —\n * credits, mode and allowlist together — and clears the alert marker, so a\n * raised allotment announces its next crossing rather than inheriting the\n * last one's.\n */\nexport async function applyAiAllotmentWrites(\n  firestore: FirebaseFirestore.Firestore,\n  orgId: string,\n  change: { set: readonly AiAllotmentWrite[]; remove: readonly string[] },\n  actorUid: string,\n): Promise<void> {\n  const orgRef = firestore.collection('orgs').doc(orgId)\n  const batch = firestore.batch()\n  for (const write of change.set) {\n    batch.set(aiAllotmentRef(orgRef, write.subject.id), {\n      subject: write.subject.id,\n      scope: write.subject.scope,\n      uid: write.subject.uid,\n      hostId: write.subject.hostId,\n      credits: write.subject.scope === 'org' ? null : write.credits,\n      mode: write.mode,\n      models: write.models,\n      setBy: actorUid,\n      updatedAt: FieldValue.serverTimestamp(),\n      alerted: null,\n    })\n  }\n  for (const subject of change.remove) {\n    batch.delete(aiAllotmentRef(orgRef, subject))\n  }\n  await batch.commit()\n}\n\n/**\n * Give a site's month its credits so far, once, when an allotment on the site\n * is set before the site's map has a key for it.\n *\n * The map is written by the meter from the day the field shipped; a month\n * already in progress has spend the map never saw. The roster's own months\n * carry the same figure per person (`byHost`), so the first allotment set on\n * a site sums them and writes the total — inside a transaction that writes\n * nothing when the key is already there, so a request metered in between is\n * counted once, by the meter.\n */\nexport async function seedAiHostMonthCredits(\n  firestore: FirebaseFirestore.Firestore,\n  orgId: string,\n  hostIds: readonly string[],\n  month: string,\n  personCredits: (hostId: string) => number,\n): Promise<void> {\n  if (!hostIds.length) return\n  const monthRef = firestore\n    .collection('orgs')\n    .doc(orgId)\n    .collection('assistUsage')\n    .doc(month)\n  await firestore.runTransaction(async (tx) => {\n    const snapshot = await tx.get(monthRef)\n    const map = (snapshot.exists ? snapshot.get(AI_HOST_CREDITS_FIELD) : null) as\n      | Record<string, unknown>\n      | null\n    const missing = hostIds.filter((hostId) => map?.[hostId] === undefined)\n    if (!missing.length) return\n    tx.set(\n      monthRef,\n      {\n        month,\n        [AI_HOST_CREDITS_FIELD]: Object.fromEntries(\n          missing.map((hostId) => [hostId, personCredits(hostId)]),\n        ),\n      },\n      { merge: true },\n    )\n  })\n}\n\n/**\n * Remove a person's allotments on account erasure: `member:{uid}` and every\n * `collab:{hostId}:{uid}`, in each org the erasure names. By path and by a\n * collection-scope equality, so neither needs an index; an org the person\n * had already left keeps a configuration document that names a uid and\n * nothing else, which the next write to that subject replaces.\n */\nexport async function eraseAiAllotmentsForUser(\n  firestore: FirebaseFirestore.Firestore,\n  uid: string,\n  orgIds: readonly string[],\n): Promise<number> {\n  let removed = 0\n  for (const orgId of orgIds) {\n    const allotments = await listAiAllotments(firestore, orgId, { uid })\n    if (!allotments.length) continue\n    const orgRef = firestore.collection('orgs').doc(orgId)\n    const batch = firestore.batch()\n    for (const allotment of allotments) {\n      batch.delete(aiAllotmentRef(orgRef, allotment.subject))\n      removed += 1\n    }\n    await batch.commit()\n  }\n  return removed\n}\n"],"names":["FieldValue","AI_ALLOTMENTS_COLLECTION","AI_ALLOTMENT_ORG_SUBJECT","aiAllotmentFrom","aiAllotmentModelsAllowed","aiAllotmentSubjectId","aiAllotmentVerdict","aiUsageByUserMonthFrom","userAiUsageMonthRef","AI_HOST_CREDITS_FIELD","aiAllotmentsCollection","orgRef","collection","aiAllotmentRef","subject","doc","trimmed","value","trim","allotmentOf","snapshot","exists","data","subjectIdOrNull","input","aiHostMonthCredits","orgMonth","hostId","map","get","Number","isFinite","Math","floor","readAiAllotmentGate","read","month","personal","uid","memberId","scope","requestedHost","hostSubjectId","collabId","subjectRef","id","orgDoc","memberDoc","collabDoc","hostDoc","monthDoc","Promise","all","member","collab","host","siteMonth","credits","standings","measure","allotment","used","push","mode","byHost","personalCredits","models","orgModels","listAiAllotments","firestore","orgId","filter","query","where","docs","applyAiAllotmentWrites","change","actorUid","batch","write","set","setBy","updatedAt","serverTimestamp","alerted","remove","delete","commit","seedAiHostMonthCredits","hostIds","personCredits","length","monthRef","runTransaction","tx","missing","undefined","Object","fromEntries","merge","eraseAiAllotmentsForUser","orgIds","removed","allotments"],"mappings":";AAAA;;;;;;;;;;;;;;;CAeC,GAED,6EAA6E;AAC7E,6EAA6E;AAC7E,6DAA6D;AAC7D,SAASA,UAAU,QAAQ,2BAA0B;AACrD,SACEC,wBAAwB,EACxBC,wBAAwB,EACxBC,eAAe,EACfC,wBAAwB,EACxBC,oBAAoB,EACpBC,kBAAkB,QAMb,4BAAwB;AAC/B,SAASC,sBAAsB,QAAQ,+BAA2B;AAClE,SAASC,mBAAmB,QAAQ,wBAAoB;AAExD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA6BC,GAED,sDAAsD,GACtD,OAAO,MAAMC,wBAAwB,SAAQ;AAE7C,OAAO,SAASC,uBACdC,MAA2C;IAE3C,OAAOA,OAAOC,UAAU,CAACX;AAC3B;AAEA,OAAO,SAASY,eACdF,MAA2C,EAC3CG,OAAe;IAEf,OAAOJ,uBAAuBC,QAAQI,GAAG,CAACD;AAC5C;AA2BA,MAAME,UAAU,CAACC,QACf,OAAOA,UAAU,WAAWA,MAAMC,IAAI,KAAK;AAE7C,kFAAkF,GAClF,MAAMC,cAAc,CAClBC,UACAN,UAEAM,CAAAA,4BAAAA,SAAUC,MAAM,KAAIP,UAChBX,gBAAgBiB,SAASE,IAAI,IAA+BR,WAC5D;AAEN;;;;CAIC,GACD,SAASS,gBAAgBC,KAAiD;IACxE,IAAI;QACF,OAAOnB,qBAAqBmB;IAC9B,EAAE,eAAM;QACN,OAAO;IACT;AACF;AAEA,qEAAqE,GACrE,OAAO,SAASC,mBACdC,QAA+D,EAC/DC,MAAc;;IAEd,MAAMC,MAAOF,CAAAA,4BAAAA,SAAUL,MAAM,IAAGK,SAASG,GAAG,CAACpB,yBAAyB;IAItE,MAAMQ,QAAQa,eAAOF,uBAAAA,GAAK,CAACD,OAAO,mBAAI;IACtC,OAAOG,OAAOC,QAAQ,CAACd,UAAUA,QAAQ,IAAIe,KAAKC,KAAK,CAAChB,SAAS;AACnE;AAEA;;;;;;;;CAQC,GACD,OAAO,eAAeiB,oBACpBC,IAA0B,EAC1BxB,MAA2C,EAC3CG,OAAkC,EAClCsB,KAAa,EACbV,WAAsD,IAAI;QA+ChCW;QAQblB;IArDb,MAAMmB,MAAMtB,QAAQF,QAAQwB,GAAG;IAC/B,MAAMC,WAAWD,MAAMf,gBAAgB;QAAEiB,OAAO;QAAUF;IAAI,KAAK;IACnE,IAAI,CAACA,OAAO,CAACC,UAAU,OAAO;IAC9B,MAAME,gBAAgBzB,QAAQF,QAAQa,MAAM;IAC5C,MAAMe,gBAAgBD,gBAClBlB,gBAAgB;QAAEiB,OAAO;QAAQb,QAAQc;IAAc,KACvD;IACJ,MAAMd,SAASe,gBAAgBD,gBAAgB;IAC/C,MAAME,WAAWhB,SAASJ,gBAAgB;QAAEiB,OAAO;QAAUb;QAAQW;IAAI,KAAK;IAC9E,MAAMM,aAAa,CAACC,KAAehC,eAAeF,QAAQkC;IAC1D,MAAM,CAACC,QAAQC,WAAWC,WAAWC,SAASC,SAAS,GAAG,MAAMC,QAAQC,GAAG,CAAC;QAC1EjB,KAAKS,WAAW1C;QAChBiC,KAAKS,WAAWL;QAChBI,WAAWR,KAAKS,WAAWD,aAAa;QACxCD,gBAAgBP,KAAKS,WAAWF,kBAAkB;QAClDP,KAAK3B,oBAAoBG,QAAQ2B,KAAKF;KACvC;IACD,MAAMiB,SAASlC,YAAY4B,WAAWR;IACtC,MAAMe,SAASnC,YAAY6B,WAAWL;IACtC,MAAMY,OAAOpC,YAAY8B,SAASP;IAClC,MAAML,WAAW9B,uBACf2C,CAAAA,4BAAAA,SAAU7B,MAAM,IAAI6B,SAAS5B,IAAI,KAAiC,MAClEgB,KACAF;IAGF,IAAIoB,YAAY9B;IAChB,IAAI6B,CAAAA,wBAAAA,KAAME,OAAO,KAAI,CAACD,WAAW;QAC/BA,YAAY,MAAMrB,KAAKxB,OAAOC,UAAU,CAAC,eAAeG,GAAG,CAACqB;IAC9D;IAEA,MAAMsB,YAAmC,EAAE;IAC3C,MAAMC,UAAU,CAACC,WAA+BC;QAC9C,IAAI,CAACD,aAAaA,UAAUH,OAAO,KAAK,QAAQG,UAAUpB,KAAK,KAAK,OAAO;QAC3EkB,UAAUI,IAAI,CAAC;YACbhD,SAAS8C,UAAU9C,OAAO;YAC1B0B,OAAOoB,UAAUpB,KAAK;YACtBF,KAAKsB,UAAUtB,GAAG;YAClBX,QAAQiC,UAAUjC,MAAM;YACxB8B,SAASG,UAAUH,OAAO;YAC1BI;YACAE,MAAMH,UAAUG,IAAI;QACtB;IACF;IACAJ,QAAQN,QAAQhB,SAASoB,OAAO;IAChCE,QAAQL,QAAQ3B,UAAUU,0BAAAA,SAAS2B,MAAM,CAACrC,OAAO,YAAvBU,0BAA2B,IAAK;IAC1DsB,QAAQJ,MAAM5B,SAASF,mBAAmB+B,WAAW7B,UAAU;IAE/D,OAAO,aACFrB,mBAAmBoD;QACtBO,iBAAiB5B,SAASoB,OAAO;QACjCC;QACAQ,QAAQ9D,yBAAyB;YAACiD;YAAQC;YAAQC;SAAK;QACvDY,SAAS,WAAEhD,eAAAA,YAAY2B,QAAQ5C,8CAApBiB,aAA+C+C,MAAM,mBAAI;;AAExE;AAEA,8EAA8E,GAC9E,OAAO,eAAeE,iBACpBC,SAAsC,EACtCC,KAAa,EACbC,SAA4C,CAAC,CAAC;IAE9C,IAAIC,QAAiC9D,uBACnC2D,UAAUzD,UAAU,CAAC,QAAQG,GAAG,CAACuD;IAEnC,yEAAyE;IACzE,mBAAmB;IACnB,IAAIC,OAAOjC,GAAG,EAAEkC,QAAQA,MAAMC,KAAK,CAAC,OAAO,MAAMF,OAAOjC,GAAG;SACtD,IAAIiC,OAAO5C,MAAM,EAAE6C,QAAQA,MAAMC,KAAK,CAAC,UAAU,MAAMF,OAAO5C,MAAM;IACzE,MAAMP,WAAW,MAAMoD,MAAM3C,GAAG;IAChC,OAAOT,SAASsD,IAAI,CACjB9C,GAAG,CAAC,CAACb,MAAQZ,gBAAgBY,IAAIO,IAAI,IAA+BP,IAAI8B,EAAE,GAC1E0B,MAAM,CAAC,CAACX,YAAwCA,cAAc;AACnE;AAUA;;;;;CAKC,GACD,OAAO,eAAee,uBACpBN,SAAsC,EACtCC,KAAa,EACbM,MAAuE,EACvEC,QAAgB;IAEhB,MAAMlE,SAAS0D,UAAUzD,UAAU,CAAC,QAAQG,GAAG,CAACuD;IAChD,MAAMQ,QAAQT,UAAUS,KAAK;IAC7B,KAAK,MAAMC,SAASH,OAAOI,GAAG,CAAE;QAC9BF,MAAME,GAAG,CAACnE,eAAeF,QAAQoE,MAAMjE,OAAO,CAAC+B,EAAE,GAAG;YAClD/B,SAASiE,MAAMjE,OAAO,CAAC+B,EAAE;YACzBL,OAAOuC,MAAMjE,OAAO,CAAC0B,KAAK;YAC1BF,KAAKyC,MAAMjE,OAAO,CAACwB,GAAG;YACtBX,QAAQoD,MAAMjE,OAAO,CAACa,MAAM;YAC5B8B,SAASsB,MAAMjE,OAAO,CAAC0B,KAAK,KAAK,QAAQ,OAAOuC,MAAMtB,OAAO;YAC7DM,MAAMgB,MAAMhB,IAAI;YAChBG,QAAQa,MAAMb,MAAM;YACpBe,OAAOJ;YACPK,WAAWlF,WAAWmF,eAAe;YACrCC,SAAS;QACX;IACF;IACA,KAAK,MAAMtE,WAAW8D,OAAOS,MAAM,CAAE;QACnCP,MAAMQ,MAAM,CAACzE,eAAeF,QAAQG;IACtC;IACA,MAAMgE,MAAMS,MAAM;AACpB;AAEA;;;;;;;;;;CAUC,GACD,OAAO,eAAeC,uBACpBnB,SAAsC,EACtCC,KAAa,EACbmB,OAA0B,EAC1BrD,KAAa,EACbsD,aAAyC;IAEzC,IAAI,CAACD,QAAQE,MAAM,EAAE;IACrB,MAAMC,WAAWvB,UACdzD,UAAU,CAAC,QACXG,GAAG,CAACuD,OACJ1D,UAAU,CAAC,eACXG,GAAG,CAACqB;IACP,MAAMiC,UAAUwB,cAAc,CAAC,OAAOC;QACpC,MAAM1E,WAAW,MAAM0E,GAAGjE,GAAG,CAAC+D;QAC9B,MAAMhE,MAAOR,SAASC,MAAM,GAAGD,SAASS,GAAG,CAACpB,yBAAyB;QAGrE,MAAMsF,UAAUN,QAAQlB,MAAM,CAAC,CAAC5C,SAAWC,CAAAA,uBAAAA,GAAK,CAACD,OAAO,MAAKqE;QAC7D,IAAI,CAACD,QAAQJ,MAAM,EAAE;QACrBG,GAAGd,GAAG,CACJY,UACA;YACExD;YACA,CAAC3B,sBAAsB,EAAEwF,OAAOC,WAAW,CACzCH,QAAQnE,GAAG,CAAC,CAACD,SAAW;oBAACA;oBAAQ+D,cAAc/D;iBAAQ;QAE3D,GACA;YAAEwE,OAAO;QAAK;IAElB;AACF;AAEA;;;;;;CAMC,GACD,OAAO,eAAeC,yBACpB/B,SAAsC,EACtC/B,GAAW,EACX+D,MAAyB;IAEzB,IAAIC,UAAU;IACd,KAAK,MAAMhC,SAAS+B,OAAQ;QAC1B,MAAME,aAAa,MAAMnC,iBAAiBC,WAAWC,OAAO;YAAEhC;QAAI;QAClE,IAAI,CAACiE,WAAWZ,MAAM,EAAE;QACxB,MAAMhF,SAAS0D,UAAUzD,UAAU,CAAC,QAAQG,GAAG,CAACuD;QAChD,MAAMQ,QAAQT,UAAUS,KAAK;QAC7B,KAAK,MAAMlB,aAAa2C,WAAY;YAClCzB,MAAMQ,MAAM,CAACzE,eAAeF,QAAQiD,UAAU9C,OAAO;YACrDwF,WAAW;QACb;QACA,MAAMxB,MAAMS,MAAM;IACpB;IACA,OAAOe;AACT"}

package/src/lib/usage/ai-model-sample.d.ts

@@ -0,0 +1,36 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import { type AiStepKind } from '../providers/catalog';
+import type { AiUsage } from '../providers/contract';
+/**
+ * The workspace's own typical exchange per step kind (AGL-2942), for the
+ * price beside each option in the model switch.
+ *
+ * Read from `orgs/{orgId}/assistSignals` — the derived half of every metered
+ * turn, which carries its route, its model and its tokens and no prose and no
+ * uid — newest first, bounded, and only when the switch is opened. A signal
+ * is matched to a step kind by the route it was metered under, docs answers
+ * and cache hits are left out because no model ran, and the median needs
+ * `AI_MEASURED_MEDIAN_MIN_SAMPLES` exchanges before it replaces the nominal
+ * figure.
+ */
+/** Signals one read considers. */
+export declare const AI_MODEL_SAMPLE_SIGNALS = 60;
+/** Whether a signal's route is the door a step kind is served through. */
+export declare function signalRouteMatchesStep(route: string, kind: AiStepKind): boolean;
+/** The measured median exchange for a step kind, or `null` too few. */
+export declare function readMeasuredStepUsage(firestore: FirebaseFirestore.Firestore, orgId: string, kind: AiStepKind): Promise<AiUsage | null>;

package/src/lib/usage/ai-model-sample.js

@@ -0,0 +1,68 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ import { AI_METER_SENTINELS } from "../providers/catalog.js";
+import { aiMedianUsage } from "../providers/model-choice.js";
+/**
+ * The workspace's own typical exchange per step kind (AGL-2942), for the
+ * price beside each option in the model switch.
+ *
+ * Read from `orgs/{orgId}/assistSignals` — the derived half of every metered
+ * turn, which carries its route, its model and its tokens and no prose and no
+ * uid — newest first, bounded, and only when the switch is opened. A signal
+ * is matched to a step kind by the route it was metered under, docs answers
+ * and cache hits are left out because no model ran, and the median needs
+ * `AI_MEASURED_MEDIAN_MIN_SAMPLES` exchanges before it replaces the nominal
+ * figure.
+ */ /** Signals one read considers. */ export const AI_MODEL_SAMPLE_SIGNALS = 60;
+const COPY_ROUTE = '/api/ai/assist/';
+const JOBS_ROUTE = 'ai/jobs';
+/** Whether a signal's route is the door a step kind is served through. */ export function signalRouteMatchesStep(route, kind) {
+    switch(kind){
+        case 'copy.element':
+            return route === `${COPY_ROUTE}element`;
+        case 'copy.blog':
+            return route === `${COPY_ROUTE}blog`;
+        case 'copy.section':
+        case 'generate.section':
+            return route === `${COPY_ROUTE}section`;
+        case 'job.text':
+            return route === JOBS_ROUTE;
+        default:
+            // A chat turn is metered under the console route it was asked from.
+            return !route.startsWith(COPY_ROUTE) && route !== JOBS_ROUTE;
+    }
+}
+const SENTINELS = new Set(Object.values(AI_METER_SENTINELS));
+/** The measured median exchange for a step kind, or `null` too few. */ export async function readMeasuredStepUsage(firestore, orgId, kind) {
+    const snapshot = await firestore.collection('orgs').doc(orgId).collection('assistSignals').orderBy('createdAt', 'desc').limit(AI_MODEL_SAMPLE_SIGNALS).get();
+    const samples = [];
+    for (const doc of snapshot.docs){
+        var _data_model, _data_route, _data_inputTokens, _data_outputTokens, _data_cacheReadTokens, _data_cacheWriteTokens;
+        const data = doc.data();
+        if (data['deflected'] === true) continue;
+        if (SENTINELS.has(String((_data_model = data['model']) != null ? _data_model : ''))) continue;
+        if (!signalRouteMatchesStep(String((_data_route = data['route']) != null ? _data_route : ''), kind)) continue;
+        samples.push({
+            inputTokens: Number((_data_inputTokens = data['inputTokens']) != null ? _data_inputTokens : 0),
+            outputTokens: Number((_data_outputTokens = data['outputTokens']) != null ? _data_outputTokens : 0),
+            cacheReadTokens: Number((_data_cacheReadTokens = data['cacheReadTokens']) != null ? _data_cacheReadTokens : 0),
+            cacheWriteTokens: Number((_data_cacheWriteTokens = data['cacheWriteTokens']) != null ? _data_cacheWriteTokens : 0)
+        });
+    }
+    return aiMedianUsage(samples);
+}
+
+//# sourceMappingURL=ai-model-sample.js.map

package/src/lib/usage/ai-model-sample.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../libs/plugins/ai/src/lib/usage/ai-model-sample.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { AI_METER_SENTINELS, type AiStepKind } from '../providers/catalog'\nimport type { AiUsage } from '../providers/contract'\nimport { aiMedianUsage } from '../providers/model-choice'\n\n/**\n * The workspace's own typical exchange per step kind (AGL-2942), for the\n * price beside each option in the model switch.\n *\n * Read from `orgs/{orgId}/assistSignals` — the derived half of every metered\n * turn, which carries its route, its model and its tokens and no prose and no\n * uid — newest first, bounded, and only when the switch is opened. A signal\n * is matched to a step kind by the route it was metered under, docs answers\n * and cache hits are left out because no model ran, and the median needs\n * `AI_MEASURED_MEDIAN_MIN_SAMPLES` exchanges before it replaces the nominal\n * figure.\n */\n\n/** Signals one read considers. */\nexport const AI_MODEL_SAMPLE_SIGNALS = 60\n\nconst COPY_ROUTE = '/api/ai/assist/'\nconst JOBS_ROUTE = 'ai/jobs'\n\n/** Whether a signal's route is the door a step kind is served through. */\nexport function signalRouteMatchesStep(route: string, kind: AiStepKind): boolean {\n  switch (kind) {\n    case 'copy.element':\n      return route === `${COPY_ROUTE}element`\n    case 'copy.blog':\n      return route === `${COPY_ROUTE}blog`\n    case 'copy.section':\n    case 'generate.section':\n      return route === `${COPY_ROUTE}section`\n    case 'job.text':\n      return route === JOBS_ROUTE\n    default:\n      // A chat turn is metered under the console route it was asked from.\n      return !route.startsWith(COPY_ROUTE) && route !== JOBS_ROUTE\n  }\n}\n\nconst SENTINELS = new Set<string>(Object.values(AI_METER_SENTINELS))\n\n/** The measured median exchange for a step kind, or `null` too few. */\nexport async function readMeasuredStepUsage(\n  firestore: FirebaseFirestore.Firestore,\n  orgId: string,\n  kind: AiStepKind,\n): Promise<AiUsage | null> {\n  const snapshot = await firestore\n    .collection('orgs')\n    .doc(orgId)\n    .collection('assistSignals')\n    .orderBy('createdAt', 'desc')\n    .limit(AI_MODEL_SAMPLE_SIGNALS)\n    .get()\n  const samples: AiUsage[] = []\n  for (const doc of snapshot.docs) {\n    const data = doc.data() as Record<string, unknown>\n    if (data['deflected'] === true) continue\n    if (SENTINELS.has(String(data['model'] ?? ''))) continue\n    if (!signalRouteMatchesStep(String(data['route'] ?? ''), kind)) continue\n    samples.push({\n      inputTokens: Number(data['inputTokens'] ?? 0),\n      outputTokens: Number(data['outputTokens'] ?? 0),\n      cacheReadTokens: Number(data['cacheReadTokens'] ?? 0),\n      cacheWriteTokens: Number(data['cacheWriteTokens'] ?? 0),\n    })\n  }\n  return aiMedianUsage(samples)\n}\n"],"names":["AI_METER_SENTINELS","aiMedianUsage","AI_MODEL_SAMPLE_SIGNALS","COPY_ROUTE","JOBS_ROUTE","signalRouteMatchesStep","route","kind","startsWith","SENTINELS","Set","Object","values","readMeasuredStepUsage","firestore","orgId","snapshot","collection","doc","orderBy","limit","get","samples","docs","data","has","String","push","inputTokens","Number","outputTokens","cacheReadTokens","cacheWriteTokens"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED,SAASA,kBAAkB,QAAyB,0BAAsB;AAE1E,SAASC,aAAa,QAAQ,+BAA2B;AAEzD;;;;;;;;;;;CAWC,GAED,gCAAgC,GAChC,OAAO,MAAMC,0BAA0B,GAAE;AAEzC,MAAMC,aAAa;AACnB,MAAMC,aAAa;AAEnB,wEAAwE,GACxE,OAAO,SAASC,uBAAuBC,KAAa,EAAEC,IAAgB;IACpE,OAAQA;QACN,KAAK;YACH,OAAOD,UAAU,GAAGH,WAAW,OAAO,CAAC;QACzC,KAAK;YACH,OAAOG,UAAU,GAAGH,WAAW,IAAI,CAAC;QACtC,KAAK;QACL,KAAK;YACH,OAAOG,UAAU,GAAGH,WAAW,OAAO,CAAC;QACzC,KAAK;YACH,OAAOG,UAAUF;QACnB;YACE,oEAAoE;YACpE,OAAO,CAACE,MAAME,UAAU,CAACL,eAAeG,UAAUF;IACtD;AACF;AAEA,MAAMK,YAAY,IAAIC,IAAYC,OAAOC,MAAM,CAACZ;AAEhD,qEAAqE,GACrE,OAAO,eAAea,sBACpBC,SAAsC,EACtCC,KAAa,EACbR,IAAgB;IAEhB,MAAMS,WAAW,MAAMF,UACpBG,UAAU,CAAC,QACXC,GAAG,CAACH,OACJE,UAAU,CAAC,iBACXE,OAAO,CAAC,aAAa,QACrBC,KAAK,CAAClB,yBACNmB,GAAG;IACN,MAAMC,UAAqB,EAAE;IAC7B,KAAK,MAAMJ,OAAOF,SAASO,IAAI,CAAE;YAGNC,aACUA,aAEbA,mBACCA,oBACGA,uBACCA;QAR3B,MAAMA,OAAON,IAAIM,IAAI;QACrB,IAAIA,IAAI,CAAC,YAAY,KAAK,MAAM;QAChC,IAAIf,UAAUgB,GAAG,CAACC,QAAOF,cAAAA,IAAI,CAAC,QAAQ,YAAbA,cAAiB,MAAM;QAChD,IAAI,CAACnB,uBAAuBqB,QAAOF,cAAAA,IAAI,CAAC,QAAQ,YAAbA,cAAiB,KAAKjB,OAAO;QAChEe,QAAQK,IAAI,CAAC;YACXC,aAAaC,QAAOL,oBAAAA,IAAI,CAAC,cAAc,YAAnBA,oBAAuB;YAC3CM,cAAcD,QAAOL,qBAAAA,IAAI,CAAC,eAAe,YAApBA,qBAAwB;YAC7CO,iBAAiBF,QAAOL,wBAAAA,IAAI,CAAC,kBAAkB,YAAvBA,wBAA2B;YACnDQ,kBAAkBH,QAAOL,yBAAAA,IAAI,CAAC,mBAAmB,YAAxBA,yBAA4B;QACvD;IACF;IACA,OAAOvB,cAAcqB;AACvB"}

package/src/lib/usage/ai-usage-alerts.d.ts

@@ -0,0 +1,55 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import type { UsageAlertContext } from '@aglyn/aglyn/plugin-manager/usage-alert-contributors';
+/**
+ * The AI plugin's staff alerts on provider spend (AGL-2984), evaluated for
+ * every org by the usage-alerts sweep through its usage alert contributor
+ * seam. Two alerts, in this order, each deduped under its own guard key:
+ *
+ * - THE MARGIN GUARD warns. The meter caps an entitled org by MESSAGE count,
+ *   and a month of long, cache-cold exchanges on a large model is a
+ *   three-figure provider bill against a subscription that did not move. One
+ *   org's spend crossing the review threshold tells staff, and every further
+ *   whole multiple of the threshold tells them again, so an escalating cost
+ *   never goes quiet because it already spoke.
+ * - THE HARD CEILING reports a stop. Past the monthly spend ceiling the
+ *   reservation refuses every assist request from the org, so its assistant
+ *   has stopped answering, and staff are told so in those words. It cannot
+ *   ride the margin guard: that one speaks in whole multiples of its
+ *   threshold, so an org climbing from the threshold to the ceiling is still
+ *   at 1x and says nothing. Announced once a month, because crossing is a
+ *   state rather than an escalating sum.
+ *
+ *   The ceiling is the one THIS org's reservations refuse at —
+ *   `assistBackstopCeilingUsd` — not the repo default for everyone. That
+ *   default binds only a workspace with no band of its own; a band sold past,
+ *   a band that is a wall, and an uncapped staff comp are each measured
+ *   against something else, and announcing a $40 stop the reservation never
+ *   makes would send staff after an assistant that is still answering.
+ *
+ * Both are STAFF alerts. The org is not charged for this spend and has done
+ * nothing wrong, so mailing the customer about our cost would be alarming and
+ * meaningless. Both read the spend figure the sweep built, record through the
+ * sweep's guard and send through the sweep's senders, so the first-sweep
+ * seeding and the run's report apply to them exactly as to core's alerts.
+ */
+/** The margin guard's key: the whole multiples announced this month. */
+export declare const AI_MARGIN_GUARD_KEY = "assistCogs";
+/** The hard ceiling's key: announced once for the month. */
+export declare const AI_CEILING_GUARD_KEY = "assistCeiling";
+/** Evaluates one org: the margin guard, then the hard ceiling. */
+export declare function evaluateAiUsageAlerts(context: UsageAlertContext): Promise<void>;

package/src/lib/usage/ai-usage-alerts.js

@@ -0,0 +1,114 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ import { resolveAssistCreditBudget } from "@aglyn/aglyn/app-utils/assist-credits";
+import { aiAddonName, hasAiAddon, isUncappedPlanComp } from "@aglyn/aglyn/app-utils/plan-entitlements";
+import { PLATFORM_BRAND_NAME } from "@aglyn/aglyn/app-utils/platform-brand";
+import { assistCeilingBreach, assistCogsAlertThresholdUsd, assistMarginBreach, assistMarginMultiple } from "@aglyn/aglyn/app-utils/usage-budget";
+import { assistBackstopCeilingUsd } from "./assist-ceiling.js";
+/**
+ * The AI plugin's staff alerts on provider spend (AGL-2984), evaluated for
+ * every org by the usage-alerts sweep through its usage alert contributor
+ * seam. Two alerts, in this order, each deduped under its own guard key:
+ *
+ * - THE MARGIN GUARD warns. The meter caps an entitled org by MESSAGE count,
+ *   and a month of long, cache-cold exchanges on a large model is a
+ *   three-figure provider bill against a subscription that did not move. One
+ *   org's spend crossing the review threshold tells staff, and every further
+ *   whole multiple of the threshold tells them again, so an escalating cost
+ *   never goes quiet because it already spoke.
+ * - THE HARD CEILING reports a stop. Past the monthly spend ceiling the
+ *   reservation refuses every assist request from the org, so its assistant
+ *   has stopped answering, and staff are told so in those words. It cannot
+ *   ride the margin guard: that one speaks in whole multiples of its
+ *   threshold, so an org climbing from the threshold to the ceiling is still
+ *   at 1x and says nothing. Announced once a month, because crossing is a
+ *   state rather than an escalating sum.
+ *
+ *   The ceiling is the one THIS org's reservations refuse at —
+ *   `assistBackstopCeilingUsd` — not the repo default for everyone. That
+ *   default binds only a workspace with no band of its own; a band sold past,
+ *   a band that is a wall, and an uncapped staff comp are each measured
+ *   against something else, and announcing a $40 stop the reservation never
+ *   makes would send staff after an assistant that is still answering.
+ *
+ * Both are STAFF alerts. The org is not charged for this spend and has done
+ * nothing wrong, so mailing the customer about our cost would be alarming and
+ * meaningless. Both read the spend figure the sweep built, record through the
+ * sweep's guard and send through the sweep's senders, so the first-sweep
+ * seeding and the run's report apply to them exactly as to core's alerts.
+ */ /** The margin guard's key: the whole multiples announced this month. */ export const AI_MARGIN_GUARD_KEY = 'assistCogs';
+/** The hard ceiling's key: announced once for the month. */ export const AI_CEILING_GUARD_KEY = 'assistCeiling';
+/** Both alerts send staff to the org list. */ const STAFF_ORGS_LINK = '/admin/orgs';
+/** Evaluates one org: the margin guard, then the hard ceiling. */ export async function evaluateAiUsageAlerts(context) {
+    await alertOnMarginGuard(context);
+    await alertOnHardCeiling(context);
+}
+/** How both alerts name the org: its slug, or its id when it has none. */ function orgName({ orgSlug, orgId }) {
+    return orgSlug != null ? orgSlug : orgId;
+}
+async function alertOnMarginGuard(context) {
+    const { org, month, spend } = context;
+    const thresholdUsd = assistCogsAlertThresholdUsd(process.env.ASSIST_ORG_MONTHLY_COGS_ALERT_USD);
+    // The guard records the whole multiple announced, which is 0 for a zero or
+    // non-finite threshold — a reading the breach predicate never agrees to.
+    const multiple = assistMarginMultiple(spend.assistUsd, thresholdUsd);
+    const due = assistMarginBreach({
+        assistUsd: spend.assistUsd,
+        thresholdUsd,
+        guard: context.guards[AI_MARGIN_GUARD_KEY],
+        month
+    });
+    if (!due || !context.recordAlert(AI_MARGIN_GUARD_KEY, multiple)) return;
+    const title = `Assist token spend is $${spend.assistUsd.toFixed(2)} for one org this month`;
+    // The add-on state and the band: the same dollar figure is a finding on an
+    // org paying for the add-on and an incident on one that is not, and the
+    // reader should not have to open the console to know which.
+    const addonClause = hasAiAddon(org) ? `The ${aiAddonName()} add-on is on` : `The ${aiAddonName()} add-on is off`;
+    const bandCredits = resolveAssistCreditBudget(org);
+    const bandClause = bandCredits !== null ? `an AI credit band of ${bandCredits.toLocaleString()}` : isUncappedPlanComp(org) ? 'no AI credit band (an uncapped staff comp)' : 'no AI credit band';
+    await context.alertStaff({
+        quota: AI_MARGIN_GUARD_KEY,
+        threshold: multiple,
+        title,
+        body: `${orgName(context)} has run about ` + `$${spend.assistUsd.toFixed(2)} of ${PLATFORM_BRAND_NAME} Assist ` + `tokens in ${month}, past the $${thresholdUsd.toFixed(0)} review ` + 'threshold. Assist is a plan entitlement with no per-token ' + 'price, so this is margin, not revenue. ' + `${addonClause}, with ${bandClause}.`,
+        link: STAFF_ORGS_LINK,
+        emailContext: 'assist-margin'
+    });
+}
+async function alertOnHardCeiling(context) {
+    const { org, month, spend } = context;
+    // The same composition the reservation refuses on, for this org, so the
+    // figure announced and the figure enforced cannot drift apart.
+    const ceilingUsd = assistBackstopCeilingUsd(org);
+    const due = assistCeilingBreach({
+        assistUsd: spend.assistUsd,
+        ceilingUsd,
+        guard: context.guards[AI_CEILING_GUARD_KEY],
+        month
+    });
+    if (!due || !context.recordAlert(AI_CEILING_GUARD_KEY, 1)) return;
+    const ceiling = `$${Number(ceilingUsd).toFixed(0)}`;
+    await context.alertStaff({
+        quota: AI_CEILING_GUARD_KEY,
+        threshold: 1,
+        title: `Assist is REFUSING ${orgName(context)} — the ` + `${ceiling} monthly spend ceiling is crossed`,
+        body: `${orgName(context)} has run about ` + `$${spend.assistUsd.toFixed(2)} of ${PLATFORM_BRAND_NAME} Assist ` + `tokens in ${month}, past the ` + `${ceiling} ceiling. Every further ` + 'Assist request from this organization is refused until the month ' + 'rolls over — the assistant is not degraded or slowed, it is off. ' + 'The customer keeps whatever messages their plan has left, and the ' + 'refusal says so in its own words.',
+        link: STAFF_ORGS_LINK,
+        emailContext: 'assist-ceiling'
+    });
+}
+
+//# sourceMappingURL=ai-usage-alerts.js.map

package/src/lib/usage/ai-usage-alerts.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../libs/plugins/ai/src/lib/usage/ai-usage-alerts.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { resolveAssistCreditBudget } from '@aglyn/aglyn/app-utils/assist-credits'\nimport {\n  aiAddonName,\n  hasAiAddon,\n  isUncappedPlanComp,\n} from '@aglyn/aglyn/app-utils/plan-entitlements'\nimport { PLATFORM_BRAND_NAME } from '@aglyn/aglyn/app-utils/platform-brand'\nimport {\n  assistCeilingBreach,\n  assistCogsAlertThresholdUsd,\n  assistMarginBreach,\n  assistMarginMultiple,\n} from '@aglyn/aglyn/app-utils/usage-budget'\nimport type { UsageAlertContext } from '@aglyn/aglyn/plugin-manager/usage-alert-contributors'\nimport { assistBackstopCeilingUsd } from './assist-ceiling'\n\n/**\n * The AI plugin's staff alerts on provider spend (AGL-2984), evaluated for\n * every org by the usage-alerts sweep through its usage alert contributor\n * seam. Two alerts, in this order, each deduped under its own guard key:\n *\n * - THE MARGIN GUARD warns. The meter caps an entitled org by MESSAGE count,\n *   and a month of long, cache-cold exchanges on a large model is a\n *   three-figure provider bill against a subscription that did not move. One\n *   org's spend crossing the review threshold tells staff, and every further\n *   whole multiple of the threshold tells them again, so an escalating cost\n *   never goes quiet because it already spoke.\n * - THE HARD CEILING reports a stop. Past the monthly spend ceiling the\n *   reservation refuses every assist request from the org, so its assistant\n *   has stopped answering, and staff are told so in those words. It cannot\n *   ride the margin guard: that one speaks in whole multiples of its\n *   threshold, so an org climbing from the threshold to the ceiling is still\n *   at 1x and says nothing. Announced once a month, because crossing is a\n *   state rather than an escalating sum.\n *\n *   The ceiling is the one THIS org's reservations refuse at —\n *   `assistBackstopCeilingUsd` — not the repo default for everyone. That\n *   default binds only a workspace with no band of its own; a band sold past,\n *   a band that is a wall, and an uncapped staff comp are each measured\n *   against something else, and announcing a $40 stop the reservation never\n *   makes would send staff after an assistant that is still answering.\n *\n * Both are STAFF alerts. The org is not charged for this spend and has done\n * nothing wrong, so mailing the customer about our cost would be alarming and\n * meaningless. Both read the spend figure the sweep built, record through the\n * sweep's guard and send through the sweep's senders, so the first-sweep\n * seeding and the run's report apply to them exactly as to core's alerts.\n */\n\n/** The margin guard's key: the whole multiples announced this month. */\nexport const AI_MARGIN_GUARD_KEY = 'assistCogs'\n\n/** The hard ceiling's key: announced once for the month. */\nexport const AI_CEILING_GUARD_KEY = 'assistCeiling'\n\n/** Both alerts send staff to the org list. */\nconst STAFF_ORGS_LINK = '/admin/orgs'\n\n/** Evaluates one org: the margin guard, then the hard ceiling. */\nexport async function evaluateAiUsageAlerts(\n  context: UsageAlertContext,\n): Promise<void> {\n  await alertOnMarginGuard(context)\n  await alertOnHardCeiling(context)\n}\n\n/** How both alerts name the org: its slug, or its id when it has none. */\nfunction orgName({ orgSlug, orgId }: UsageAlertContext): string {\n  return orgSlug ?? orgId\n}\n\nasync function alertOnMarginGuard(context: UsageAlertContext): Promise<void> {\n  const { org, month, spend } = context\n  const thresholdUsd = assistCogsAlertThresholdUsd(\n    process.env.ASSIST_ORG_MONTHLY_COGS_ALERT_USD,\n  )\n  // The guard records the whole multiple announced, which is 0 for a zero or\n  // non-finite threshold — a reading the breach predicate never agrees to.\n  const multiple = assistMarginMultiple(spend.assistUsd, thresholdUsd)\n  const due = assistMarginBreach({\n    assistUsd: spend.assistUsd,\n    thresholdUsd,\n    guard: context.guards[AI_MARGIN_GUARD_KEY],\n    month,\n  })\n  if (!due || !context.recordAlert(AI_MARGIN_GUARD_KEY, multiple)) return\n\n  const title = `Assist token spend is $${spend.assistUsd.toFixed(2)} for one org this month`\n  // The add-on state and the band: the same dollar figure is a finding on an\n  // org paying for the add-on and an incident on one that is not, and the\n  // reader should not have to open the console to know which.\n  const addonClause = hasAiAddon(org as never)\n    ? `The ${aiAddonName()} add-on is on`\n    : `The ${aiAddonName()} add-on is off`\n  const bandCredits = resolveAssistCreditBudget(org as never)\n  const bandClause =\n    bandCredits !== null\n      ? `an AI credit band of ${bandCredits.toLocaleString()}`\n      : isUncappedPlanComp(org as never)\n        ? 'no AI credit band (an uncapped staff comp)'\n        : 'no AI credit band'\n  await context.alertStaff({\n    quota: AI_MARGIN_GUARD_KEY,\n    threshold: multiple,\n    title,\n    body:\n      `${orgName(context)} has run about ` +\n      `$${spend.assistUsd.toFixed(2)} of ${PLATFORM_BRAND_NAME} Assist ` +\n      `tokens in ${month}, past the $${thresholdUsd.toFixed(0)} review ` +\n      'threshold. Assist is a plan entitlement with no per-token ' +\n      'price, so this is margin, not revenue. ' +\n      `${addonClause}, with ${bandClause}.`,\n    link: STAFF_ORGS_LINK,\n    emailContext: 'assist-margin',\n  })\n}\n\nasync function alertOnHardCeiling(context: UsageAlertContext): Promise<void> {\n  const { org, month, spend } = context\n  // The same composition the reservation refuses on, for this org, so the\n  // figure announced and the figure enforced cannot drift apart.\n  const ceilingUsd = assistBackstopCeilingUsd(org as never)\n  const due = assistCeilingBreach({\n    assistUsd: spend.assistUsd,\n    ceilingUsd,\n    guard: context.guards[AI_CEILING_GUARD_KEY],\n    month,\n  })\n  if (!due || !context.recordAlert(AI_CEILING_GUARD_KEY, 1)) return\n\n  const ceiling = `$${Number(ceilingUsd).toFixed(0)}`\n  await context.alertStaff({\n    quota: AI_CEILING_GUARD_KEY,\n    threshold: 1,\n    title:\n      `Assist is REFUSING ${orgName(context)} — the ` +\n      `${ceiling} monthly spend ceiling is crossed`,\n    body:\n      `${orgName(context)} has run about ` +\n      `$${spend.assistUsd.toFixed(2)} of ${PLATFORM_BRAND_NAME} Assist ` +\n      `tokens in ${month}, past the ` +\n      `${ceiling} ceiling. Every further ` +\n      'Assist request from this organization is refused until the month ' +\n      'rolls over — the assistant is not degraded or slowed, it is off. ' +\n      'The customer keeps whatever messages their plan has left, and the ' +\n      'refusal says so in its own words.',\n    link: STAFF_ORGS_LINK,\n    emailContext: 'assist-ceiling',\n  })\n}\n"],"names":["resolveAssistCreditBudget","aiAddonName","hasAiAddon","isUncappedPlanComp","PLATFORM_BRAND_NAME","assistCeilingBreach","assistCogsAlertThresholdUsd","assistMarginBreach","assistMarginMultiple","assistBackstopCeilingUsd","AI_MARGIN_GUARD_KEY","AI_CEILING_GUARD_KEY","STAFF_ORGS_LINK","evaluateAiUsageAlerts","context","alertOnMarginGuard","alertOnHardCeiling","orgName","orgSlug","orgId","org","month","spend","thresholdUsd","process","env","ASSIST_ORG_MONTHLY_COGS_ALERT_USD","multiple","assistUsd","due","guard","guards","recordAlert","title","toFixed","addonClause","bandCredits","bandClause","toLocaleString","alertStaff","quota","threshold","body","link","emailContext","ceilingUsd","ceiling","Number"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED,SAASA,yBAAyB,QAAQ,wCAAuC;AACjF,SACEC,WAAW,EACXC,UAAU,EACVC,kBAAkB,QACb,2CAA0C;AACjD,SAASC,mBAAmB,QAAQ,wCAAuC;AAC3E,SACEC,mBAAmB,EACnBC,2BAA2B,EAC3BC,kBAAkB,EAClBC,oBAAoB,QACf,sCAAqC;AAE5C,SAASC,wBAAwB,QAAQ,sBAAkB;AAE3D;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA+BC,GAED,sEAAsE,GACtE,OAAO,MAAMC,sBAAsB,aAAY;AAE/C,0DAA0D,GAC1D,OAAO,MAAMC,uBAAuB,gBAAe;AAEnD,4CAA4C,GAC5C,MAAMC,kBAAkB;AAExB,gEAAgE,GAChE,OAAO,eAAeC,sBACpBC,OAA0B;IAE1B,MAAMC,mBAAmBD;IACzB,MAAME,mBAAmBF;AAC3B;AAEA,wEAAwE,GACxE,SAASG,QAAQ,EAAEC,OAAO,EAAEC,KAAK,EAAqB;IACpD,OAAOD,kBAAAA,UAAWC;AACpB;AAEA,eAAeJ,mBAAmBD,OAA0B;IAC1D,MAAM,EAAEM,GAAG,EAAEC,KAAK,EAAEC,KAAK,EAAE,GAAGR;IAC9B,MAAMS,eAAejB,4BACnBkB,QAAQC,GAAG,CAACC,iCAAiC;IAE/C,2EAA2E;IAC3E,yEAAyE;IACzE,MAAMC,WAAWnB,qBAAqBc,MAAMM,SAAS,EAAEL;IACvD,MAAMM,MAAMtB,mBAAmB;QAC7BqB,WAAWN,MAAMM,SAAS;QAC1BL;QACAO,OAAOhB,QAAQiB,MAAM,CAACrB,oBAAoB;QAC1CW;IACF;IACA,IAAI,CAACQ,OAAO,CAACf,QAAQkB,WAAW,CAACtB,qBAAqBiB,WAAW;IAEjE,MAAMM,QAAQ,CAAC,uBAAuB,EAAEX,MAAMM,SAAS,CAACM,OAAO,CAAC,GAAG,uBAAuB,CAAC;IAC3F,2EAA2E;IAC3E,wEAAwE;IACxE,4DAA4D;IAC5D,MAAMC,cAAcjC,WAAWkB,OAC3B,CAAC,IAAI,EAAEnB,cAAc,aAAa,CAAC,GACnC,CAAC,IAAI,EAAEA,cAAc,cAAc,CAAC;IACxC,MAAMmC,cAAcpC,0BAA0BoB;IAC9C,MAAMiB,aACJD,gBAAgB,OACZ,CAAC,qBAAqB,EAAEA,YAAYE,cAAc,IAAI,GACtDnC,mBAAmBiB,OACjB,+CACA;IACR,MAAMN,QAAQyB,UAAU,CAAC;QACvBC,OAAO9B;QACP+B,WAAWd;QACXM;QACAS,MACE,GAAGzB,QAAQH,SAAS,eAAe,CAAC,GACpC,CAAC,CAAC,EAAEQ,MAAMM,SAAS,CAACM,OAAO,CAAC,GAAG,IAAI,EAAE9B,oBAAoB,QAAQ,CAAC,GAClE,CAAC,UAAU,EAAEiB,MAAM,YAAY,EAAEE,aAAaW,OAAO,CAAC,GAAG,QAAQ,CAAC,GAClE,+DACA,4CACA,GAAGC,YAAY,OAAO,EAAEE,WAAW,CAAC,CAAC;QACvCM,MAAM/B;QACNgC,cAAc;IAChB;AACF;AAEA,eAAe5B,mBAAmBF,OAA0B;IAC1D,MAAM,EAAEM,GAAG,EAAEC,KAAK,EAAEC,KAAK,EAAE,GAAGR;IAC9B,wEAAwE;IACxE,+DAA+D;IAC/D,MAAM+B,aAAapC,yBAAyBW;IAC5C,MAAMS,MAAMxB,oBAAoB;QAC9BuB,WAAWN,MAAMM,SAAS;QAC1BiB;QACAf,OAAOhB,QAAQiB,MAAM,CAACpB,qBAAqB;QAC3CU;IACF;IACA,IAAI,CAACQ,OAAO,CAACf,QAAQkB,WAAW,CAACrB,sBAAsB,IAAI;IAE3D,MAAMmC,UAAU,CAAC,CAAC,EAAEC,OAAOF,YAAYX,OAAO,CAAC,IAAI;IACnD,MAAMpB,QAAQyB,UAAU,CAAC;QACvBC,OAAO7B;QACP8B,WAAW;QACXR,OACE,CAAC,mBAAmB,EAAEhB,QAAQH,SAAS,OAAO,CAAC,GAC/C,GAAGgC,QAAQ,iCAAiC,CAAC;QAC/CJ,MACE,GAAGzB,QAAQH,SAAS,eAAe,CAAC,GACpC,CAAC,CAAC,EAAEQ,MAAMM,SAAS,CAACM,OAAO,CAAC,GAAG,IAAI,EAAE9B,oBAAoB,QAAQ,CAAC,GAClE,CAAC,UAAU,EAAEiB,MAAM,WAAW,CAAC,GAC/B,GAAGyB,QAAQ,wBAAwB,CAAC,GACpC,sEACA,sEACA,uEACA;QACFH,MAAM/B;QACNgC,cAAc;IAChB;AACF"}