@aglyn/plugins-ai 1.0.0-beta.143

package/src/lib/jobs/ai-job-plan-step.js

@@ -0,0 +1,458 @@
+import { _ as _extends } from "@swc/helpers/_/_extends";
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ import { createHash } from "node:crypto";
+import { AI_BUILD_PLAN_TOOL, isAiPlanNewRef } from "../model/ai-build-plan.js";
+import { AI_PAGE_CREATE_KINDS, aiPagePlanShapeRefusal } from "../model/ai-page-job.js";
+import { aiPlanCapabilitiesForJob, aiPlanCapabilityLines } from "../model/ai-plan-capabilities.js";
+import { AI_SITE_CREATE_KINDS, aiSitePlanShapeRefusal } from "../model/ai-site-job.js";
+import { aiDoctrineSystemBlocks, runValidatedGeneration } from "../runtime/ai-doctrine.js";
+import { AI_STEP_TIERS } from "../providers/catalog.js";
+import { AI_ROUTING_TABLE, aiModelForStep } from "../providers/routing.js";
+import { readSiteInventory } from "../runtime/site-inventory.js";
+import { aiJobAdmissionRefusal } from "./ai-job-admission.js";
+import { readAiPlanCapabilities } from "./ai-job-drafts.js";
+import { AI_JOB_BRIEF_MAX_CHARS } from "./ai-job-text-step.js";
+import { aiJobStepBudget } from "./ai-job-budget.js";
+import { aiDoctrineReview, aiUnspentOutcome } from "./ai-job-generation.js";
+import { aiPlanWithDraftIds } from "./ai-job-draft-ids.js";
+import { AI_JOBS_COLLECTION, registerAiJobPlanStep } from "./ai-jobs.js";
+/**
+ * The plan step (AGL-2935): the first step of every job that builds site
+ * structure. Before a node is generated, the model answers with a typed plan
+ * — what the site already has that the job reuses, what it creates and why,
+ * and the screens it builds from them — held to the doctrine's plan rules
+ * against the site's inventory and re-asked once when it breaks one.
+ *
+ * A plan that passes is kept on the job, and the job stops for review: the
+ * member reads what it will build before a credit is spent building it, and
+ * confirms through the resume door. A plan that still breaks a rule on its
+ * re-ask stops the job the same way, with the rules named. Either way the
+ * step writes nothing itself; the machine records the plan, the spend and
+ * the stop, as it records every step.
+ *
+ * ── Told what it may create, refused what it cannot build (AGL-3030) ─────
+ *
+ * Before it asks, the step reads what the job may create on its site: the
+ * workspace's plan, the site's counts against its limits, and — for a kind
+ * that builds only some plans — what the job builds itself. The user turn
+ * states it, the plan rules refuse a creation outside it with the one re-ask,
+ * and where the workspace keeps no reusable components they accept the page
+ * built inline. A plan the confirm door would still refuse — the kind's own
+ * admission, handed the plan, as the resume door hands it — is refused HERE,
+ * before a member is shown a Confirm: the job fails with the door's sentence,
+ * its plan is not kept, and it holds nothing.
+ */ /** The plan step's own instructions, cached after the doctrine. */ export const AI_JOB_PLAN_INSTRUCTIONS = [
+    {
+        text: 'You plan what a website builder job will build, before anything is built. You are given the kind of job and the brief from the person who owns the site. ' + 'Answer with submit_build_plan: what the site inventory already has that the job reuses, what it must create and why nothing listed will do, and each screen it builds with its layout, template, slug, search title, search description and sections from top to bottom. ' + 'Refer to inventory records by id and to what the plan creates as new:<name>. Plan only what the brief asks for: a component, layout, template, form or email job plans no screens unless the brief asks for pages, and a page job plans exactly one screen.'
+    }
+];
+/**
+ * The plan step's time (AGL-3026, AGL-3036): its two inventory-lookup rounds,
+ * its answer and its re-ask at the routing table's ceiling for `job.plan`, on
+ * the tier that step kind is served from, with the step's reads and writes,
+ * at the rates `ai-job-budget.ts` assumes — fitted to what a beat can give a
+ * step, so the served tier asks a little under the routing ceiling.
+ */ export const AI_JOB_PLAN_STEP_BUDGET = aiJobStepBudget({
+    tier: AI_STEP_TIERS['job.plan'],
+    maxTokens: AI_ROUTING_TABLE['job.plan'].maxTokens
+});
+/**
+ * The least time a plan needs before it starts. Registered with the step, so
+ * an inline door never starts a plan. A plan thinks before it answers and
+ * routinely runs past an inline door's budget, and a provider call that
+ * budget cuts off is still generated and billed upstream while the meter
+ * records nothing. The beat starts a plan only with this much of its own
+ * budget left, and a spec holds it inside that budget.
+ */ export const AI_JOB_PLAN_STEP_MINIMUM_MS = AI_JOB_PLAN_STEP_BUDGET.minimumMs;
+/**
+ * The plan's answer ceiling on the model a job runs: the most whose worst
+ * case fits the least time the step registered, and never more than the
+ * routing table's. A model the catalog does not know is planned at the
+ * slowest.
+ */ export function aiJobPlanMaxTokens(model) {
+    return AI_JOB_PLAN_STEP_BUDGET.maxTokens(model);
+}
+/** What the member reads while a plan waits for them. */ export const AI_JOB_PLAN_REVIEW_COPY = 'The plan is ready. Review what the job will reuse and create, then confirm it to build.';
+/**
+ * The job as the plan step's user turn: its kind, its brief, its scalar
+ * inputs and, where the job read them, what it may create on its site
+ * (AGL-3030). Per workspace and per site, which is why they ride here and
+ * never in a system block the platform's cache entry is keyed on.
+ */ export function aiJobPlanPrompt(job, capabilities = null) {
+    var _job_inputs;
+    const lines = [
+        `Job kind: ${job.kind}`,
+        `Brief: ${job.brief.slice(0, AI_JOB_BRIEF_MAX_CHARS)}`
+    ];
+    for (const [key, value] of Object.entries((_job_inputs = job.inputs) != null ? _job_inputs : {})){
+        if (typeof value === 'string' || typeof value === 'number' || typeof value === 'boolean') {
+            lines.push(`${key}: ${String(value)}`);
+        }
+    }
+    if (capabilities) lines.push(...aiPlanCapabilityLines(capabilities));
+    return lines.join('\n');
+}
+/**
+ * The kinds whose confirm door builds only some plans (AGL-3030). A page job
+ * builds one screen and a scaffold four to eight; each builds only the
+ * creations its list names. Every other planned kind builds its own one
+ * output, and its plan is held to the workspace alone.
+ */ export const AI_JOB_PLAN_SCOPES = {
+    page: {
+        noun: 'a page job',
+        creates: AI_PAGE_CREATE_KINDS,
+        shapeRefusal: aiPagePlanShapeRefusal
+    },
+    site: {
+        noun: 'a site scaffold',
+        creates: AI_SITE_CREATE_KINDS,
+        shapeRefusal: aiSitePlanShapeRefusal
+    }
+};
+/** A kind's shape refusal as the violation the plan's one re-ask names. */ function shapeViolations(scope) {
+    if (!scope) return undefined;
+    return (plan)=>{
+        const message = scope.shapeRefusal(plan);
+        return message ? [
+            {
+                rule: null,
+                code: 'plan-job-shape',
+                message
+            }
+        ] : [];
+    };
+}
+/**
+ * The inventory names of every id the plan references, so the proposal reads
+ * "the Services layout" rather than an id — kept on the plan because the
+ * inventory is not read again when the member opens it.
+ */ export function aiPlanLabels(plan, inventory) {
+    const names = new Map();
+    for (const rows of [
+        inventory == null ? void 0 : inventory.components,
+        inventory == null ? void 0 : inventory.layouts,
+        inventory == null ? void 0 : inventory.templates,
+        inventory == null ? void 0 : inventory.forms,
+        inventory == null ? void 0 : inventory.datasets,
+        inventory == null ? void 0 : inventory.collections,
+        inventory == null ? void 0 : inventory.screens
+    ]){
+        for (const row of rows != null ? rows : [])names.set(row.id, row.name);
+    }
+    const refs = [
+        ...plan.reuse.map((entry)=>entry.id),
+        ...plan.create.map((entry)=>entry.duplicateOf),
+        ...plan.screens.flatMap((screen)=>[
+                screen.layout,
+                screen.template,
+                screen.duplicateOf,
+                ...screen.sections.flatMap((section)=>section.uses)
+            ])
+    ];
+    const labels = {};
+    for (const ref of refs){
+        if (!ref || isAiPlanNewRef(ref)) continue;
+        const name = names.get(ref);
+        if (name) labels[ref] = name;
+    }
+    return labels;
+}
+/* ------------------------------------------------------------------------ *
+ * Reusing an identical brief's plan
+ * ------------------------------------------------------------------------ */ /**
+ * How long a plan may be reused for (AGL-2937).
+ *
+ * The window is what makes reuse safe rather than merely cheap. The key
+ * already covers everything the request said — the brief, the inputs, the
+ * model and the prompt as rendered, site inventory included — so a plan is
+ * reused only when nothing the model was shown has changed. What the key
+ * cannot see is the world outside the request: a page published, a component
+ * renamed after the inventory was read, a member who meant something
+ * different the second time. Fifteen minutes is short enough that the answer
+ * is still the one the site would give, and long enough to cover what reuse
+ * is actually for — the same brief run twice in a sitting, a job resubmitted
+ * after a refused reservation, two members starting the same work.
+ */ export const AI_PLAN_REUSE_WINDOW_MS = 15 * 60 * 1000;
+/** Jobs one lookup reads. More than one can share a key; the newest plan wins. */ export const AI_PLAN_REUSE_CANDIDATES = 5;
+/**
+ * The digest a plan is reused by: the whole request, never the answer.
+ *
+ * It hashes what the model was asked and what it was shown — the job's kind
+ * and site, the user turn (which carries the trimmed brief and every scalar
+ * input), the model that would answer, every rendered system block including
+ * the site inventory, and the tool's schema. Two requests that hash the same
+ * would have been sent the same bytes to the same model, so the second can
+ * keep the first's answer.
+ *
+ * The version tag is the escape hatch: anything that changes what a key
+ * MEANS, rather than what it covers, bumps it and strands every old key
+ * harmlessly, since a key nothing matches simply asks the model.
+ */ export function aiJobPlanKey(input) {
+    var _input_job_hostId;
+    const digest = createHash('sha256');
+    for (const part of [
+        'plan.v1',
+        input.job.kind,
+        (_input_job_hostId = input.job.hostId) != null ? _input_job_hostId : '',
+        input.model,
+        input.prompt,
+        ...input.system.map((block)=>block.text),
+        JSON.stringify(AI_BUILD_PLAN_TOOL)
+    ]){
+        // Length-prefixed, so two different splits of the same characters cannot
+        // collide by running into one another.
+        digest.update(`${part.length}:${part}\u0000`);
+    }
+    return digest.digest('hex');
+}
+/** A job that could not have produced a reusable plan, whatever its key says. */ const UNREUSABLE = [
+    'canceled',
+    'failed'
+];
+function planMillis(plan) {
+    const at = plan.proposedAt;
+    if (at instanceof Date) return at.getTime();
+    if (at && typeof at.toMillis === 'function') {
+        return at.toMillis();
+    }
+    return null;
+}
+/**
+ * The newest plan worth reusing out of what the finder returned: another
+ * job's, still proposed or already confirmed, on a job that was neither
+ * canceled nor failed, proposed inside the window.
+ *
+ * A canceled or failed job is excluded even though its plan may be perfectly
+ * good: those are the jobs a member walked away from, and handing their plan
+ * to the next one would make a rejected answer look like a fresh one.
+ */ export function aiReusablePlan(candidates, context) {
+    const floor = context.now.getTime() - AI_PLAN_REUSE_WINDOW_MS;
+    let best = null;
+    let bestAt = -1;
+    for (const candidate of candidates){
+        if (candidate.jobId === context.jobId) continue;
+        if (UNREUSABLE.includes(candidate.status)) continue;
+        if (candidate.plan.status !== 'proposed' && candidate.plan.status !== 'confirmed') continue;
+        const at = planMillis(candidate.plan);
+        if (at === null || at < floor || at > context.now.getTime()) continue;
+        if (at > bestAt) {
+            best = candidate;
+            bestAt = at;
+        }
+    }
+    return best;
+}
+/**
+ * The finder the step uses in production: an equality on `plan.key` inside
+ * the org's own jobs.
+ *
+ * One equality on one field, with no ordering beside it, so Firestore's
+ * automatic single-field index answers it and no composite index is deployed.
+ * The window and the statuses are applied in memory instead, which is what
+ * keeps it that way.
+ */ export const findAiJobsByPlanKey = async (orgId, key, firestore)=>{
+    if (!firestore) return [];
+    const snapshot = await firestore.collection('orgs').doc(orgId).collection(AI_JOBS_COLLECTION).where('plan.key', '==', key).limit(AI_PLAN_REUSE_CANDIDATES).get();
+    return snapshot.docs.flatMap((doc)=>{
+        var _data_status;
+        const data = doc.data();
+        return data.plan ? [
+            {
+                jobId: doc.id,
+                status: (_data_status = data.status) != null ? _data_status : 'queued',
+                plan: data.plan
+            }
+        ] : [];
+    });
+};
+/** The reader the step uses in production: the draft bands' own arithmetic, for the job's site. */ export const readAiJobPlanCapabilities = async ({ job, org, firestore })=>job.hostId ? readAiPlanCapabilities(firestore, {
+        hostId: job.hostId,
+        org
+    }) : null;
+export function createAiJobPlanStep(deps = {}) {
+    var _deps_readInventory, _deps_readCapabilities, _deps_admissionRefusal;
+    const readInventory = (_deps_readInventory = deps.readInventory) != null ? _deps_readInventory : readSiteInventory;
+    const findPlansByKey = deps.findPlansByKey === undefined ? findAiJobsByPlanKey : deps.findPlansByKey;
+    const readCapabilities = (_deps_readCapabilities = deps.readCapabilities) != null ? _deps_readCapabilities : readAiJobPlanCapabilities;
+    const admissionRefusal = (_deps_admissionRefusal = deps.admissionRefusal) != null ? _deps_admissionRefusal : aiJobAdmissionRefusal;
+    return async ({ job, now, signal, firestore, modelFor, org: orgDocument })=>{
+        var _AI_JOB_PLAN_SCOPES_job_kind, _ref;
+        const org = orgDocument != null ? orgDocument : null;
+        const [inventory, workspace] = await Promise.all([
+            job.hostId ? readInventory(job.orgId, job.hostId, {
+                firestore
+            }) : Promise.resolve(null),
+            readCapabilities({
+                job,
+                org,
+                firestore
+            })
+        ]);
+        const scope = (_AI_JOB_PLAN_SCOPES_job_kind = AI_JOB_PLAN_SCOPES[job.kind]) != null ? _AI_JOB_PLAN_SCOPES_job_kind : null;
+        const capabilities = workspace ? aiPlanCapabilitiesForJob(workspace, scope) : null;
+        // The model switch's answer for this job (AGL-2942): the creator's pick
+        // where the plan, the org restriction and the allotment allowlists allow
+        // it, and Auto held to those same lists otherwise. Without a resolver the
+        // doctrine asks the routing table itself.
+        const model = modelFor == null ? void 0 : modelFor('job.plan');
+        const route = AI_ROUTING_TABLE['job.plan'];
+        const prompt = aiJobPlanPrompt(job, capabilities);
+        /**
+     * The confirm door's answer for this plan, asked before the plan is kept
+     * (AGL-3030): the kind's own admission, handed the plan as the resume
+     * door hands it. A refusal fails the job with the door's sentence; a door
+     * that could not answer keeps the plan, since the resume door asks again
+     * before anything is built.
+     */ const refusalOnKeep = async (plan, outcome)=>{
+            let refusal = null;
+            try {
+                var _job_hostId, _job_inputs;
+                refusal = await admissionRefusal(job.kind, {
+                    firestore,
+                    orgId: job.orgId,
+                    hostId: (_job_hostId = job.hostId) != null ? _job_hostId : null,
+                    inputs: (_job_inputs = job.inputs) != null ? _job_inputs : {},
+                    org,
+                    plan,
+                    uid: job.createdBy
+                });
+            } catch (error) {
+                console.error('ai plan admission failed', {
+                    orgId: job.orgId,
+                    jobId: job.$id,
+                    error
+                });
+            }
+            return refusal ? _extends({}, outcome, {
+                failure: refusal.error
+            }) : null;
+        };
+        // Reuse before asking (AGL-2937). The key covers the whole request, so a
+        // hit is a request that would have been sent the same bytes to the same
+        // model; the window covers what the key cannot see. A reused plan spends
+        // nothing, so the machine's spent-nothing branch releases the reservation
+        // and meters no credit, and the job still stops for the member to confirm
+        // — this job's plan is proposed to this member, whatever the last one did
+        // with theirs.
+        const resolved = model != null ? model : aiModelForStep('job.plan');
+        const key = aiJobPlanKey({
+            job,
+            prompt,
+            model: resolved,
+            system: aiDoctrineSystemBlocks(inventory, {
+                instructions: AI_JOB_PLAN_INSTRUCTIONS
+            })
+        });
+        const reused = findPlansByKey ? aiReusablePlan(await findPlansByKey(job.orgId, key, firestore), {
+            jobId: job.$id,
+            now
+        }) : null;
+        if (reused) {
+            var _ref1;
+            // The reused plan's draft ids name the other job's drafts; this job's are its own.
+            const plan = aiPlanWithDraftIds(job.kind, _extends({}, reused.plan, {
+                status: 'proposed',
+                labels: aiPlanLabels(reused.plan, inventory),
+                proposedAt: now,
+                confirmedAt: null,
+                confirmedBy: null,
+                key,
+                reusedFrom: reused.jobId
+            }));
+            const unspent = aiUnspentOutcome(resolved);
+            return (_ref1 = await refusalOnKeep(plan, unspent)) != null ? _ref1 : _extends({}, unspent, {
+                plan,
+                review: {
+                    reason: 'plan',
+                    message: AI_JOB_PLAN_REVIEW_COPY,
+                    findings: []
+                }
+            });
+        }
+        const result = await runValidatedGeneration('plan', _extends({
+            step: 'job.plan'
+        }, model ? {
+            model
+        } : {}, {
+            instructions: AI_JOB_PLAN_INSTRUCTIONS,
+            inventory,
+            messages: [
+                {
+                    role: 'user',
+                    content: prompt
+                }
+            ],
+            tool: AI_BUILD_PLAN_TOOL,
+            // The routing ceiling, lowered on a tier too slow to look records up,
+            // answer and ask again inside the least time the step registered.
+            maxTokens: aiJobPlanMaxTokens(resolved)
+        }, route.thinking ? {
+            thinking: route.thinking
+        } : {}, route.effort ? {
+            effort: route.effort
+        } : {}, signal ? {
+            signal
+        } : {}, {
+            capabilities,
+            extend: shapeViolations(scope)
+        }));
+        const spent = _extends({
+            outputs: [],
+            usage: result.usage,
+            estCostUsd: result.estCostUsd,
+            model: result.model,
+            stopReason: result.stopReason
+        }, result.effort ? {
+            effort: result.effort
+        } : {});
+        if (result.status === 'refused') return _extends({}, spent, {
+            refused: true
+        });
+        if (result.status === 'needs_input') return _extends({}, spent, {
+            review: aiDoctrineReview(result)
+        });
+        // Each draft the plan decides is named as the plan is kept, before anything is built (AGL-3079).
+        const plan = aiPlanWithDraftIds(job.kind, _extends({}, result.value, {
+            status: 'proposed',
+            labels: aiPlanLabels(result.value, inventory),
+            // A Date the Admin SDK stores as a timestamp, like every instant the machine writes.
+            proposedAt: now,
+            confirmedAt: null,
+            confirmedBy: null,
+            key
+        }));
+        return (_ref = await refusalOnKeep(plan, spent)) != null ? _ref : _extends({}, spent, {
+            plan,
+            review: {
+                reason: 'plan',
+                message: AI_JOB_PLAN_REVIEW_COPY,
+                findings: []
+            }
+        });
+    };
+}
+export const runAiJobPlanStep = createAiJobPlanStep();
+/**
+ * Registers the plan step every planned kind runs first, with the least time
+ * a plan needs; the plugin's console surface calls it.
+ */ export function registerAiJobPlan() {
+    registerAiJobPlanStep(runAiJobPlanStep, {
+        minimumMs: AI_JOB_PLAN_STEP_MINIMUM_MS
+    });
+}
+
+//# sourceMappingURL=ai-job-plan-step.js.map

package/src/lib/jobs/ai-job-plan-step.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../libs/plugins/ai/src/lib/jobs/ai-job-plan-step.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { createHash } from 'node:crypto'\nimport type { AglynOrgBilling } from '@aglyn/aglyn/foundation/definitions/org-billing.types'\nimport {\n  AI_BUILD_PLAN_TOOL,\n  isAiPlanNewRef,\n  type AiBuildPlan,\n} from '../model/ai-build-plan'\nimport type { AiJob, AiJobKind, AiJobPlan, AiJobStatus } from '../model/ai-jobs.types'\nimport { AI_PAGE_CREATE_KINDS, aiPagePlanShapeRefusal } from '../model/ai-page-job'\nimport {\n  aiPlanCapabilitiesForJob,\n  aiPlanCapabilityLines,\n  type AiPlanCapabilities,\n  type AiPlanJobScope,\n} from '../model/ai-plan-capabilities'\nimport type { AiSiteInventory } from '../model/ai-site-inventory'\nimport { AI_SITE_CREATE_KINDS, aiSitePlanShapeRefusal } from '../model/ai-site-job'\nimport { aiDoctrineSystemBlocks, runValidatedGeneration } from '../runtime/ai-doctrine'\nimport { AI_STEP_TIERS } from '../providers/catalog'\nimport type { AiDoctrineViolation } from '../runtime/ai-doctrine-validators'\nimport { AI_ROUTING_TABLE, aiModelForStep } from '../providers/routing'\nimport type { AiSystemBlock } from '../runtime/ai-runtime'\nimport { readSiteInventory } from '../runtime/site-inventory'\nimport { aiJobAdmissionRefusal } from './ai-job-admission'\nimport { readAiPlanCapabilities } from './ai-job-drafts'\nimport {\n  AI_JOB_BRIEF_MAX_CHARS,\n  type AiJobStepOutcome,\n  type AiJobStepRunner,\n} from './ai-job-text-step'\nimport { aiJobStepBudget } from './ai-job-budget'\nimport { aiDoctrineReview, aiUnspentOutcome } from './ai-job-generation'\nimport { aiPlanWithDraftIds } from './ai-job-draft-ids'\nimport { AI_JOBS_COLLECTION, registerAiJobPlanStep } from './ai-jobs'\n\n/**\n * The plan step (AGL-2935): the first step of every job that builds site\n * structure. Before a node is generated, the model answers with a typed plan\n * — what the site already has that the job reuses, what it creates and why,\n * and the screens it builds from them — held to the doctrine's plan rules\n * against the site's inventory and re-asked once when it breaks one.\n *\n * A plan that passes is kept on the job, and the job stops for review: the\n * member reads what it will build before a credit is spent building it, and\n * confirms through the resume door. A plan that still breaks a rule on its\n * re-ask stops the job the same way, with the rules named. Either way the\n * step writes nothing itself; the machine records the plan, the spend and\n * the stop, as it records every step.\n *\n * ── Told what it may create, refused what it cannot build (AGL-3030) ─────\n *\n * Before it asks, the step reads what the job may create on its site: the\n * workspace's plan, the site's counts against its limits, and — for a kind\n * that builds only some plans — what the job builds itself. The user turn\n * states it, the plan rules refuse a creation outside it with the one re-ask,\n * and where the workspace keeps no reusable components they accept the page\n * built inline. A plan the confirm door would still refuse — the kind's own\n * admission, handed the plan, as the resume door hands it — is refused HERE,\n * before a member is shown a Confirm: the job fails with the door's sentence,\n * its plan is not kept, and it holds nothing.\n */\n\n/** The plan step's own instructions, cached after the doctrine. */\nexport const AI_JOB_PLAN_INSTRUCTIONS: readonly AiSystemBlock[] = [\n  {\n    text:\n      'You plan what a website builder job will build, before anything is built. You are given the kind of job and the brief from the person who owns the site. ' +\n      'Answer with submit_build_plan: what the site inventory already has that the job reuses, what it must create and why nothing listed will do, and each screen it builds with its layout, template, slug, search title, search description and sections from top to bottom. ' +\n      'Refer to inventory records by id and to what the plan creates as new:<name>. Plan only what the brief asks for: a component, layout, template, form or email job plans no screens unless the brief asks for pages, and a page job plans exactly one screen.',\n  },\n]\n\n/**\n * The plan step's time (AGL-3026, AGL-3036): its two inventory-lookup rounds,\n * its answer and its re-ask at the routing table's ceiling for `job.plan`, on\n * the tier that step kind is served from, with the step's reads and writes,\n * at the rates `ai-job-budget.ts` assumes — fitted to what a beat can give a\n * step, so the served tier asks a little under the routing ceiling.\n */\nexport const AI_JOB_PLAN_STEP_BUDGET = aiJobStepBudget({\n  tier: AI_STEP_TIERS['job.plan'],\n  maxTokens: AI_ROUTING_TABLE['job.plan'].maxTokens,\n})\n\n/**\n * The least time a plan needs before it starts. Registered with the step, so\n * an inline door never starts a plan. A plan thinks before it answers and\n * routinely runs past an inline door's budget, and a provider call that\n * budget cuts off is still generated and billed upstream while the meter\n * records nothing. The beat starts a plan only with this much of its own\n * budget left, and a spec holds it inside that budget.\n */\nexport const AI_JOB_PLAN_STEP_MINIMUM_MS = AI_JOB_PLAN_STEP_BUDGET.minimumMs\n\n/**\n * The plan's answer ceiling on the model a job runs: the most whose worst\n * case fits the least time the step registered, and never more than the\n * routing table's. A model the catalog does not know is planned at the\n * slowest.\n */\nexport function aiJobPlanMaxTokens(model: string): number {\n  return AI_JOB_PLAN_STEP_BUDGET.maxTokens(model)\n}\n\n/** What the member reads while a plan waits for them. */\nexport const AI_JOB_PLAN_REVIEW_COPY =\n  'The plan is ready. Review what the job will reuse and create, then confirm it to build.'\n\n/**\n * The job as the plan step's user turn: its kind, its brief, its scalar\n * inputs and, where the job read them, what it may create on its site\n * (AGL-3030). Per workspace and per site, which is why they ride here and\n * never in a system block the platform's cache entry is keyed on.\n */\nexport function aiJobPlanPrompt(\n  job: Pick<AiJob, 'kind' | 'brief' | 'inputs'>,\n  capabilities: AiPlanCapabilities | null = null,\n): string {\n  const lines = [`Job kind: ${job.kind}`, `Brief: ${job.brief.slice(0, AI_JOB_BRIEF_MAX_CHARS)}`]\n  for (const [key, value] of Object.entries(job.inputs ?? {})) {\n    if (typeof value === 'string' || typeof value === 'number' || typeof value === 'boolean') {\n      lines.push(`${key}: ${String(value)}`)\n    }\n  }\n  if (capabilities) lines.push(...aiPlanCapabilityLines(capabilities))\n  return lines.join('\\n')\n}\n\n/** A kind that builds only some plans: the creations it makes, and the shapes it refuses. */\nexport interface AiJobPlanScope extends AiPlanJobScope {\n  /** Why a job of the kind cannot build a plan of this shape; `null` when it can. Pure. */\n  shapeRefusal: (plan: AiBuildPlan) => string | null\n}\n\n/**\n * The kinds whose confirm door builds only some plans (AGL-3030). A page job\n * builds one screen and a scaffold four to eight; each builds only the\n * creations its list names. Every other planned kind builds its own one\n * output, and its plan is held to the workspace alone.\n */\nexport const AI_JOB_PLAN_SCOPES: Readonly<Partial<Record<AiJobKind, AiJobPlanScope>>> = {\n  page: { noun: 'a page job', creates: AI_PAGE_CREATE_KINDS, shapeRefusal: aiPagePlanShapeRefusal },\n  site: { noun: 'a site scaffold', creates: AI_SITE_CREATE_KINDS, shapeRefusal: aiSitePlanShapeRefusal },\n}\n\n/** A kind's shape refusal as the violation the plan's one re-ask names. */\nfunction shapeViolations(scope: AiJobPlanScope | null): ((plan: AiBuildPlan) => AiDoctrineViolation[]) | undefined {\n  if (!scope) return undefined\n  return (plan) => {\n    const message = scope.shapeRefusal(plan)\n    return message ? [{ rule: null, code: 'plan-job-shape', message }] : []\n  }\n}\n\n/**\n * The inventory names of every id the plan references, so the proposal reads\n * \"the Services layout\" rather than an id — kept on the plan because the\n * inventory is not read again when the member opens it.\n */\nexport function aiPlanLabels(\n  plan: AiBuildPlan,\n  inventory: AiSiteInventory | null,\n): Record<string, string> {\n  const names = new Map<string, string>()\n  for (const rows of [\n    inventory?.components,\n    inventory?.layouts,\n    inventory?.templates,\n    inventory?.forms,\n    inventory?.datasets,\n    inventory?.collections,\n    inventory?.screens,\n  ]) {\n    for (const row of rows ?? []) names.set(row.id, row.name)\n  }\n  const refs = [\n    ...plan.reuse.map((entry) => entry.id),\n    ...plan.create.map((entry) => entry.duplicateOf),\n    ...plan.screens.flatMap((screen) => [\n      screen.layout,\n      screen.template,\n      screen.duplicateOf,\n      ...screen.sections.flatMap((section) => section.uses),\n    ]),\n  ]\n  const labels: Record<string, string> = {}\n  for (const ref of refs) {\n    if (!ref || isAiPlanNewRef(ref)) continue\n    const name = names.get(ref)\n    if (name) labels[ref] = name\n  }\n  return labels\n}\n\n/* ------------------------------------------------------------------------ *\n * Reusing an identical brief's plan\n * ------------------------------------------------------------------------ */\n\n/**\n * How long a plan may be reused for (AGL-2937).\n *\n * The window is what makes reuse safe rather than merely cheap. The key\n * already covers everything the request said — the brief, the inputs, the\n * model and the prompt as rendered, site inventory included — so a plan is\n * reused only when nothing the model was shown has changed. What the key\n * cannot see is the world outside the request: a page published, a component\n * renamed after the inventory was read, a member who meant something\n * different the second time. Fifteen minutes is short enough that the answer\n * is still the one the site would give, and long enough to cover what reuse\n * is actually for — the same brief run twice in a sitting, a job resubmitted\n * after a refused reservation, two members starting the same work.\n */\nexport const AI_PLAN_REUSE_WINDOW_MS = 15 * 60 * 1_000\n\n/** Jobs one lookup reads. More than one can share a key; the newest plan wins. */\nexport const AI_PLAN_REUSE_CANDIDATES = 5\n\n/** A job whose plan might be reused, as the finder reports it. */\nexport interface AiJobPlanCandidate {\n  jobId: string\n  status: AiJobStatus\n  plan: AiJobPlan\n}\n\n/**\n * The digest a plan is reused by: the whole request, never the answer.\n *\n * It hashes what the model was asked and what it was shown — the job's kind\n * and site, the user turn (which carries the trimmed brief and every scalar\n * input), the model that would answer, every rendered system block including\n * the site inventory, and the tool's schema. Two requests that hash the same\n * would have been sent the same bytes to the same model, so the second can\n * keep the first's answer.\n *\n * The version tag is the escape hatch: anything that changes what a key\n * MEANS, rather than what it covers, bumps it and strands every old key\n * harmlessly, since a key nothing matches simply asks the model.\n */\nexport function aiJobPlanKey(input: {\n  job: Pick<AiJob, 'kind' | 'hostId'>\n  prompt: string\n  model: string\n  system: readonly AiSystemBlock[]\n}): string {\n  const digest = createHash('sha256')\n  for (const part of [\n    'plan.v1',\n    input.job.kind,\n    input.job.hostId ?? '',\n    input.model,\n    input.prompt,\n    ...input.system.map((block) => block.text),\n    JSON.stringify(AI_BUILD_PLAN_TOOL),\n  ]) {\n    // Length-prefixed, so two different splits of the same characters cannot\n    // collide by running into one another.\n    digest.update(`${part.length}:${part}\\u0000`)\n  }\n  return digest.digest('hex')\n}\n\n/** A job that could not have produced a reusable plan, whatever its key says. */\nconst UNREUSABLE: readonly AiJobStatus[] = ['canceled', 'failed']\n\nfunction planMillis(plan: AiJobPlan): number | null {\n  const at = plan.proposedAt as unknown\n  if (at instanceof Date) return at.getTime()\n  if (at && typeof (at as { toMillis?: unknown }).toMillis === 'function') {\n    return (at as { toMillis(): number }).toMillis()\n  }\n  return null\n}\n\n/**\n * The newest plan worth reusing out of what the finder returned: another\n * job's, still proposed or already confirmed, on a job that was neither\n * canceled nor failed, proposed inside the window.\n *\n * A canceled or failed job is excluded even though its plan may be perfectly\n * good: those are the jobs a member walked away from, and handing their plan\n * to the next one would make a rejected answer look like a fresh one.\n */\nexport function aiReusablePlan(\n  candidates: readonly AiJobPlanCandidate[],\n  context: { jobId: string; now: Date },\n): AiJobPlanCandidate | null {\n  const floor = context.now.getTime() - AI_PLAN_REUSE_WINDOW_MS\n  let best: AiJobPlanCandidate | null = null\n  let bestAt = -1\n  for (const candidate of candidates) {\n    if (candidate.jobId === context.jobId) continue\n    if (UNREUSABLE.includes(candidate.status)) continue\n    if (candidate.plan.status !== 'proposed' && candidate.plan.status !== 'confirmed') continue\n    const at = planMillis(candidate.plan)\n    if (at === null || at < floor || at > context.now.getTime()) continue\n    if (at > bestAt) {\n      best = candidate\n      bestAt = at\n    }\n  }\n  return best\n}\n\nexport type AiJobPlanFinder = (\n  orgId: string,\n  key: string,\n  firestore?: FirebaseFirestore.Firestore,\n) => Promise<AiJobPlanCandidate[]>\n\n/**\n * The finder the step uses in production: an equality on `plan.key` inside\n * the org's own jobs.\n *\n * One equality on one field, with no ordering beside it, so Firestore's\n * automatic single-field index answers it and no composite index is deployed.\n * The window and the statuses are applied in memory instead, which is what\n * keeps it that way.\n */\nexport const findAiJobsByPlanKey: AiJobPlanFinder = async (orgId, key, firestore) => {\n  if (!firestore) return []\n  const snapshot = await firestore\n    .collection('orgs')\n    .doc(orgId)\n    .collection(AI_JOBS_COLLECTION)\n    .where('plan.key', '==', key)\n    .limit(AI_PLAN_REUSE_CANDIDATES)\n    .get()\n  return snapshot.docs.flatMap((doc) => {\n    const data = doc.data() as { status?: AiJobStatus; plan?: AiJobPlan | null }\n    return data.plan\n      ? [{ jobId: doc.id, status: data.status ?? 'queued', plan: data.plan }]\n      : []\n  })\n}\n\n/** What a job may create on its site, read for the plan step; `null` for no site. */\nexport type AiPlanCapabilitiesReader = (input: {\n  job: AiJob\n  org: Partial<AglynOrgBilling> | null\n  firestore: FirebaseFirestore.Firestore\n}) => Promise<AiPlanCapabilities | null>\n\n/** The reader the step uses in production: the draft bands' own arithmetic, for the job's site. */\nexport const readAiJobPlanCapabilities: AiPlanCapabilitiesReader = async ({ job, org, firestore }) =>\n  job.hostId ? readAiPlanCapabilities(firestore, { hostId: job.hostId, org }) : null\n\nexport interface AiJobPlanStepDeps {\n  /** The inventory reader; specs hand in a fake. */\n  readInventory?: typeof readSiteInventory\n  /** The reuse lookup; specs hand in a fake, and `null` turns reuse off. */\n  findPlansByKey?: AiJobPlanFinder | null\n  /** What the job may create on its site (AGL-3030); specs and the eval recorder hand in their own. */\n  readCapabilities?: AiPlanCapabilitiesReader\n  /** The kind's admission, asked of a plan before it is kept; the registry's otherwise. */\n  admissionRefusal?: typeof aiJobAdmissionRefusal\n}\n\nexport function createAiJobPlanStep(deps: AiJobPlanStepDeps = {}): AiJobStepRunner {\n  const readInventory = deps.readInventory ?? readSiteInventory\n  const findPlansByKey =\n    deps.findPlansByKey === undefined ? findAiJobsByPlanKey : deps.findPlansByKey\n  const readCapabilities = deps.readCapabilities ?? readAiJobPlanCapabilities\n  const admissionRefusal = deps.admissionRefusal ?? aiJobAdmissionRefusal\n  return async ({ job, now, signal, firestore, modelFor, org: orgDocument }) => {\n    const org = (orgDocument ?? null) as Partial<AglynOrgBilling> | null\n    const [inventory, workspace] = await Promise.all([\n      job.hostId ? readInventory(job.orgId, job.hostId, { firestore }) : Promise.resolve(null),\n      readCapabilities({ job, org, firestore }),\n    ])\n    const scope = AI_JOB_PLAN_SCOPES[job.kind] ?? null\n    const capabilities = workspace ? aiPlanCapabilitiesForJob(workspace, scope) : null\n    // The model switch's answer for this job (AGL-2942): the creator's pick\n    // where the plan, the org restriction and the allotment allowlists allow\n    // it, and Auto held to those same lists otherwise. Without a resolver the\n    // doctrine asks the routing table itself.\n    const model = modelFor?.('job.plan')\n    const route = AI_ROUTING_TABLE['job.plan']\n    const prompt = aiJobPlanPrompt(job, capabilities)\n\n    /**\n     * The confirm door's answer for this plan, asked before the plan is kept\n     * (AGL-3030): the kind's own admission, handed the plan as the resume\n     * door hands it. A refusal fails the job with the door's sentence; a door\n     * that could not answer keeps the plan, since the resume door asks again\n     * before anything is built.\n     */\n    const refusalOnKeep = async (plan: AiJobPlan, outcome: AiJobStepOutcome): Promise<AiJobStepOutcome | null> => {\n      let refusal: Awaited<ReturnType<typeof aiJobAdmissionRefusal>> = null\n      try {\n        refusal = await admissionRefusal(job.kind, {\n          firestore,\n          orgId: job.orgId,\n          hostId: job.hostId ?? null,\n          inputs: job.inputs ?? {},\n          org,\n          plan,\n          uid: job.createdBy,\n        })\n      } catch (error) {\n        console.error('ai plan admission failed', { orgId: job.orgId, jobId: job.$id, error })\n      }\n      return refusal ? { ...outcome, failure: refusal.error } : null\n    }\n\n    // Reuse before asking (AGL-2937). The key covers the whole request, so a\n    // hit is a request that would have been sent the same bytes to the same\n    // model; the window covers what the key cannot see. A reused plan spends\n    // nothing, so the machine's spent-nothing branch releases the reservation\n    // and meters no credit, and the job still stops for the member to confirm\n    // — this job's plan is proposed to this member, whatever the last one did\n    // with theirs.\n    const resolved = model ?? aiModelForStep('job.plan')\n    const key = aiJobPlanKey({\n      job,\n      prompt,\n      model: resolved,\n      system: aiDoctrineSystemBlocks(inventory, { instructions: AI_JOB_PLAN_INSTRUCTIONS }),\n    })\n    const reused = findPlansByKey\n      ? aiReusablePlan(await findPlansByKey(job.orgId, key, firestore), {\n          jobId: job.$id,\n          now,\n        })\n      : null\n    if (reused) {\n      // The reused plan's draft ids name the other job's drafts; this job's are its own.\n      const plan: AiJobPlan = aiPlanWithDraftIds(job.kind, {\n        ...reused.plan,\n        status: 'proposed',\n        labels: aiPlanLabels(reused.plan, inventory),\n        proposedAt: now as unknown as AiJobPlan['proposedAt'],\n        confirmedAt: null,\n        confirmedBy: null,\n        key,\n        reusedFrom: reused.jobId,\n      })\n      const unspent = aiUnspentOutcome(resolved)\n      return (\n        (await refusalOnKeep(plan, unspent)) ?? {\n          ...unspent,\n          plan,\n          review: { reason: 'plan', message: AI_JOB_PLAN_REVIEW_COPY, findings: [] },\n        }\n      )\n    }\n\n    const result = await runValidatedGeneration('plan', {\n      step: 'job.plan',\n      ...(model ? { model } : {}),\n      instructions: AI_JOB_PLAN_INSTRUCTIONS,\n      inventory,\n      messages: [{ role: 'user', content: prompt }],\n      tool: AI_BUILD_PLAN_TOOL,\n      // The routing ceiling, lowered on a tier too slow to look records up,\n      // answer and ask again inside the least time the step registered.\n      maxTokens: aiJobPlanMaxTokens(resolved),\n      ...(route.thinking ? { thinking: route.thinking } : {}),\n      ...(route.effort ? { effort: route.effort } : {}),\n      ...(signal ? { signal } : {}),\n      capabilities,\n      extend: shapeViolations(scope),\n    })\n    const spent: AiJobStepOutcome = {\n      outputs: [],\n      usage: result.usage,\n      estCostUsd: result.estCostUsd,\n      model: result.model,\n      stopReason: result.stopReason,\n      ...(result.effort ? { effort: result.effort } : {}),\n    }\n    if (result.status === 'refused') return { ...spent, refused: true }\n    if (result.status === 'needs_input') return { ...spent, review: aiDoctrineReview(result) }\n    // Each draft the plan decides is named as the plan is kept, before anything is built (AGL-3079).\n    const plan: AiJobPlan = aiPlanWithDraftIds(job.kind, {\n      ...result.value,\n      status: 'proposed',\n      labels: aiPlanLabels(result.value, inventory),\n      // A Date the Admin SDK stores as a timestamp, like every instant the machine writes.\n      proposedAt: now as unknown as AiJobPlan['proposedAt'],\n      confirmedAt: null,\n      confirmedBy: null,\n      key,\n    })\n    return (\n      (await refusalOnKeep(plan, spent)) ?? {\n        ...spent,\n        plan,\n        review: { reason: 'plan', message: AI_JOB_PLAN_REVIEW_COPY, findings: [] },\n      }\n    )\n  }\n}\n\nexport const runAiJobPlanStep = createAiJobPlanStep()\n\n/**\n * Registers the plan step every planned kind runs first, with the least time\n * a plan needs; the plugin's console surface calls it.\n */\nexport function registerAiJobPlan(): void {\n  registerAiJobPlanStep(runAiJobPlanStep, { minimumMs: AI_JOB_PLAN_STEP_MINIMUM_MS })\n}\n"],"names":["createHash","AI_BUILD_PLAN_TOOL","isAiPlanNewRef","AI_PAGE_CREATE_KINDS","aiPagePlanShapeRefusal","aiPlanCapabilitiesForJob","aiPlanCapabilityLines","AI_SITE_CREATE_KINDS","aiSitePlanShapeRefusal","aiDoctrineSystemBlocks","runValidatedGeneration","AI_STEP_TIERS","AI_ROUTING_TABLE","aiModelForStep","readSiteInventory","aiJobAdmissionRefusal","readAiPlanCapabilities","AI_JOB_BRIEF_MAX_CHARS","aiJobStepBudget","aiDoctrineReview","aiUnspentOutcome","aiPlanWithDraftIds","AI_JOBS_COLLECTION","registerAiJobPlanStep","AI_JOB_PLAN_INSTRUCTIONS","text","AI_JOB_PLAN_STEP_BUDGET","tier","maxTokens","AI_JOB_PLAN_STEP_MINIMUM_MS","minimumMs","aiJobPlanMaxTokens","model","AI_JOB_PLAN_REVIEW_COPY","aiJobPlanPrompt","job","capabilities","lines","kind","brief","slice","key","value","Object","entries","inputs","push","String","join","AI_JOB_PLAN_SCOPES","page","noun","creates","shapeRefusal","site","shapeViolations","scope","undefined","plan","message","rule","code","aiPlanLabels","inventory","names","Map","rows","components","layouts","templates","forms","datasets","collections","screens","row","set","id","name","refs","reuse","map","entry","create","duplicateOf","flatMap","screen","layout","template","sections","section","uses","labels","ref","get","AI_PLAN_REUSE_WINDOW_MS","AI_PLAN_REUSE_CANDIDATES","aiJobPlanKey","input","digest","part","hostId","prompt","system","block","JSON","stringify","update","length","UNREUSABLE","planMillis","at","proposedAt","Date","getTime","toMillis","aiReusablePlan","candidates","context","floor","now","best","bestAt","candidate","jobId","includes","status","findAiJobsByPlanKey","orgId","firestore","snapshot","collection","doc","where","limit","docs","data","readAiJobPlanCapabilities","org","createAiJobPlanStep","deps","readInventory","findPlansByKey","readCapabilities","admissionRefusal","signal","modelFor","orgDocument","workspace","Promise","all","resolve","route","refusalOnKeep","outcome","refusal","uid","createdBy","error","console","$id","failure","resolved","instructions","reused","confirmedAt","confirmedBy","reusedFrom","unspent","review","reason","findings","result","step","messages","role","content","tool","thinking","effort","extend","spent","outputs","usage","estCostUsd","stopReason","refused","runAiJobPlanStep","registerAiJobPlan"],"mappings":";AAAA;;;;;;;;;;;;;;;CAeC,GAED,SAASA,UAAU,QAAQ,cAAa;AAExC,SACEC,kBAAkB,EAClBC,cAAc,QAET,4BAAwB;AAE/B,SAASC,oBAAoB,EAAEC,sBAAsB,QAAQ,0BAAsB;AACnF,SACEC,wBAAwB,EACxBC,qBAAqB,QAGhB,mCAA+B;AAEtC,SAASC,oBAAoB,EAAEC,sBAAsB,QAAQ,0BAAsB;AACnF,SAASC,sBAAsB,EAAEC,sBAAsB,QAAQ,4BAAwB;AACvF,SAASC,aAAa,QAAQ,0BAAsB;AAEpD,SAASC,gBAAgB,EAAEC,cAAc,QAAQ,0BAAsB;AAEvE,SAASC,iBAAiB,QAAQ,+BAA2B;AAC7D,SAASC,qBAAqB,QAAQ,wBAAoB;AAC1D,SAASC,sBAAsB,QAAQ,qBAAiB;AACxD,SACEC,sBAAsB,QAGjB,wBAAoB;AAC3B,SAASC,eAAe,QAAQ,qBAAiB;AACjD,SAASC,gBAAgB,EAAEC,gBAAgB,QAAQ,yBAAqB;AACxE,SAASC,kBAAkB,QAAQ,wBAAoB;AACvD,SAASC,kBAAkB,EAAEC,qBAAqB,QAAQ,eAAW;AAErE;;;;;;;;;;;;;;;;;;;;;;;;;CAyBC,GAED,iEAAiE,GACjE,OAAO,MAAMC,2BAAqD;IAChE;QACEC,MACE,8JACA,8QACA;IACJ;CACD,CAAA;AAED;;;;;;CAMC,GACD,OAAO,MAAMC,0BAA0BR,gBAAgB;IACrDS,MAAMhB,aAAa,CAAC,WAAW;IAC/BiB,WAAWhB,gBAAgB,CAAC,WAAW,CAACgB,SAAS;AACnD,GAAE;AAEF;;;;;;;CAOC,GACD,OAAO,MAAMC,8BAA8BH,wBAAwBI,SAAS,CAAA;AAE5E;;;;;CAKC,GACD,OAAO,SAASC,mBAAmBC,KAAa;IAC9C,OAAON,wBAAwBE,SAAS,CAACI;AAC3C;AAEA,uDAAuD,GACvD,OAAO,MAAMC,0BACX,0FAAyF;AAE3F;;;;;CAKC,GACD,OAAO,SAASC,gBACdC,GAA6C,EAC7CC,eAA0C,IAAI;QAGJD;IAD1C,MAAME,QAAQ;QAAC,CAAC,UAAU,EAAEF,IAAIG,IAAI,EAAE;QAAE,CAAC,OAAO,EAAEH,IAAII,KAAK,CAACC,KAAK,CAAC,GAAGvB,yBAAyB;KAAC;IAC/F,KAAK,MAAM,CAACwB,KAAKC,MAAM,IAAIC,OAAOC,OAAO,EAACT,cAAAA,IAAIU,MAAM,YAAVV,cAAc,CAAC,GAAI;QAC3D,IAAI,OAAOO,UAAU,YAAY,OAAOA,UAAU,YAAY,OAAOA,UAAU,WAAW;YACxFL,MAAMS,IAAI,CAAC,GAAGL,IAAI,EAAE,EAAEM,OAAOL,QAAQ;QACvC;IACF;IACA,IAAIN,cAAcC,MAAMS,IAAI,IAAIxC,sBAAsB8B;IACtD,OAAOC,MAAMW,IAAI,CAAC;AACpB;AAQA;;;;;CAKC,GACD,OAAO,MAAMC,qBAA2E;IACtFC,MAAM;QAAEC,MAAM;QAAcC,SAASjD;QAAsBkD,cAAcjD;IAAuB;IAChGkD,MAAM;QAAEH,MAAM;QAAmBC,SAAS7C;QAAsB8C,cAAc7C;IAAuB;AACvG,EAAC;AAED,yEAAyE,GACzE,SAAS+C,gBAAgBC,KAA4B;IACnD,IAAI,CAACA,OAAO,OAAOC;IACnB,OAAO,CAACC;QACN,MAAMC,UAAUH,MAAMH,YAAY,CAACK;QACnC,OAAOC,UAAU;YAAC;gBAAEC,MAAM;gBAAMC,MAAM;gBAAkBF;YAAQ;SAAE,GAAG,EAAE;IACzE;AACF;AAEA;;;;CAIC,GACD,OAAO,SAASG,aACdJ,IAAiB,EACjBK,SAAiC;IAEjC,MAAMC,QAAQ,IAAIC;IAClB,KAAK,MAAMC,QAAQ;QACjBH,6BAAAA,UAAWI,UAAU;QACrBJ,6BAAAA,UAAWK,OAAO;QAClBL,6BAAAA,UAAWM,SAAS;QACpBN,6BAAAA,UAAWO,KAAK;QAChBP,6BAAAA,UAAWQ,QAAQ;QACnBR,6BAAAA,UAAWS,WAAW;QACtBT,6BAAAA,UAAWU,OAAO;KACnB,CAAE;QACD,KAAK,MAAMC,OAAOR,eAAAA,OAAQ,EAAE,CAAEF,MAAMW,GAAG,CAACD,IAAIE,EAAE,EAAEF,IAAIG,IAAI;IAC1D;IACA,MAAMC,OAAO;WACRpB,KAAKqB,KAAK,CAACC,GAAG,CAAC,CAACC,QAAUA,MAAML,EAAE;WAClClB,KAAKwB,MAAM,CAACF,GAAG,CAAC,CAACC,QAAUA,MAAME,WAAW;WAC5CzB,KAAKe,OAAO,CAACW,OAAO,CAAC,CAACC,SAAW;gBAClCA,OAAOC,MAAM;gBACbD,OAAOE,QAAQ;gBACfF,OAAOF,WAAW;mBACfE,OAAOG,QAAQ,CAACJ,OAAO,CAAC,CAACK,UAAYA,QAAQC,IAAI;aACrD;KACF;IACD,MAAMC,SAAiC,CAAC;IACxC,KAAK,MAAMC,OAAOd,KAAM;QACtB,IAAI,CAACc,OAAO1F,eAAe0F,MAAM;QACjC,MAAMf,OAAOb,MAAM6B,GAAG,CAACD;QACvB,IAAIf,MAAMc,MAAM,CAACC,IAAI,GAAGf;IAC1B;IACA,OAAOc;AACT;AAEA;;4EAE4E,GAE5E;;;;;;;;;;;;;CAaC,GACD,OAAO,MAAMG,0BAA0B,KAAK,KAAK,KAAK;AAEtD,gFAAgF,GAChF,OAAO,MAAMC,2BAA2B,EAAC;AASzC;;;;;;;;;;;;;CAaC,GACD,OAAO,SAASC,aAAaC,KAK5B;QAKGA;IAJF,MAAMC,SAASlG,WAAW;IAC1B,KAAK,MAAMmG,QAAQ;QACjB;QACAF,MAAM9D,GAAG,CAACG,IAAI;SACd2D,oBAAAA,MAAM9D,GAAG,CAACiE,MAAM,YAAhBH,oBAAoB;QACpBA,MAAMjE,KAAK;QACXiE,MAAMI,MAAM;WACTJ,MAAMK,MAAM,CAACtB,GAAG,CAAC,CAACuB,QAAUA,MAAM9E,IAAI;QACzC+E,KAAKC,SAAS,CAACxG;KAChB,CAAE;QACD,yEAAyE;QACzE,uCAAuC;QACvCiG,OAAOQ,MAAM,CAAC,GAAGP,KAAKQ,MAAM,CAAC,CAAC,EAAER,KAAK,MAAM,CAAC;IAC9C;IACA,OAAOD,OAAOA,MAAM,CAAC;AACvB;AAEA,+EAA+E,GAC/E,MAAMU,aAAqC;IAAC;IAAY;CAAS;AAEjE,SAASC,WAAWnD,IAAe;IACjC,MAAMoD,KAAKpD,KAAKqD,UAAU;IAC1B,IAAID,cAAcE,MAAM,OAAOF,GAAGG,OAAO;IACzC,IAAIH,MAAM,OAAO,AAACA,GAA8BI,QAAQ,KAAK,YAAY;QACvE,OAAO,AAACJ,GAA8BI,QAAQ;IAChD;IACA,OAAO;AACT;AAEA;;;;;;;;CAQC,GACD,OAAO,SAASC,eACdC,UAAyC,EACzCC,OAAqC;IAErC,MAAMC,QAAQD,QAAQE,GAAG,CAACN,OAAO,KAAKnB;IACtC,IAAI0B,OAAkC;IACtC,IAAIC,SAAS,CAAC;IACd,KAAK,MAAMC,aAAaN,WAAY;QAClC,IAAIM,UAAUC,KAAK,KAAKN,QAAQM,KAAK,EAAE;QACvC,IAAIf,WAAWgB,QAAQ,CAACF,UAAUG,MAAM,GAAG;QAC3C,IAAIH,UAAUhE,IAAI,CAACmE,MAAM,KAAK,cAAcH,UAAUhE,IAAI,CAACmE,MAAM,KAAK,aAAa;QACnF,MAAMf,KAAKD,WAAWa,UAAUhE,IAAI;QACpC,IAAIoD,OAAO,QAAQA,KAAKQ,SAASR,KAAKO,QAAQE,GAAG,CAACN,OAAO,IAAI;QAC7D,IAAIH,KAAKW,QAAQ;YACfD,OAAOE;YACPD,SAASX;QACX;IACF;IACA,OAAOU;AACT;AAQA;;;;;;;;CAQC,GACD,OAAO,MAAMM,sBAAuC,OAAOC,OAAOtF,KAAKuF;IACrE,IAAI,CAACA,WAAW,OAAO,EAAE;IACzB,MAAMC,WAAW,MAAMD,UACpBE,UAAU,CAAC,QACXC,GAAG,CAACJ,OACJG,UAAU,CAAC5G,oBACX8G,KAAK,CAAC,YAAY,MAAM3F,KACxB4F,KAAK,CAACtC,0BACNF,GAAG;IACN,OAAOoC,SAASK,IAAI,CAAClD,OAAO,CAAC,CAAC+C;YAGEI;QAF9B,MAAMA,OAAOJ,IAAII,IAAI;QACrB,OAAOA,KAAK7E,IAAI,GACZ;YAAC;gBAAEiE,OAAOQ,IAAIvD,EAAE;gBAAEiD,MAAM,GAAEU,eAAAA,KAAKV,MAAM,YAAXU,eAAe;gBAAU7E,MAAM6E,KAAK7E,IAAI;YAAC;SAAE,GACrE,EAAE;IACR;AACF,EAAC;AASD,iGAAiG,GACjG,OAAO,MAAM8E,4BAAsD,OAAO,EAAErG,GAAG,EAAEsG,GAAG,EAAET,SAAS,EAAE,GAC/F7F,IAAIiE,MAAM,GAAGpF,uBAAuBgH,WAAW;QAAE5B,QAAQjE,IAAIiE,MAAM;QAAEqC;IAAI,KAAK,KAAI;AAapF,OAAO,SAASC,oBAAoBC,OAA0B,CAAC,CAAC;QACxCA,qBAGGA,wBACAA;IAJzB,MAAMC,iBAAgBD,sBAAAA,KAAKC,aAAa,YAAlBD,sBAAsB7H;IAC5C,MAAM+H,iBACJF,KAAKE,cAAc,KAAKpF,YAAYqE,sBAAsBa,KAAKE,cAAc;IAC/E,MAAMC,oBAAmBH,yBAAAA,KAAKG,gBAAgB,YAArBH,yBAAyBH;IAClD,MAAMO,oBAAmBJ,yBAAAA,KAAKI,gBAAgB,YAArBJ,yBAAyB5H;IAClD,OAAO,OAAO,EAAEoB,GAAG,EAAEoF,GAAG,EAAEyB,MAAM,EAAEhB,SAAS,EAAEiB,QAAQ,EAAER,KAAKS,WAAW,EAAE;YAMzDjG,8BAmHX;QAxHH,MAAMwF,MAAOS,sBAAAA,cAAe;QAC5B,MAAM,CAACnF,WAAWoF,UAAU,GAAG,MAAMC,QAAQC,GAAG,CAAC;YAC/ClH,IAAIiE,MAAM,GAAGwC,cAAczG,IAAI4F,KAAK,EAAE5F,IAAIiE,MAAM,EAAE;gBAAE4B;YAAU,KAAKoB,QAAQE,OAAO,CAAC;YACnFR,iBAAiB;gBAAE3G;gBAAKsG;gBAAKT;YAAU;SACxC;QACD,MAAMxE,SAAQP,+BAAAA,kBAAkB,CAACd,IAAIG,IAAI,CAAC,YAA5BW,+BAAgC;QAC9C,MAAMb,eAAe+G,YAAY9I,yBAAyB8I,WAAW3F,SAAS;QAC9E,wEAAwE;QACxE,yEAAyE;QACzE,0EAA0E;QAC1E,0CAA0C;QAC1C,MAAMxB,QAAQiH,4BAAAA,SAAW;QACzB,MAAMM,QAAQ3I,gBAAgB,CAAC,WAAW;QAC1C,MAAMyF,SAASnE,gBAAgBC,KAAKC;QAEpC;;;;;;KAMC,GACD,MAAMoH,gBAAgB,OAAO9F,MAAiB+F;YAC5C,IAAIC,UAA6D;YACjE,IAAI;oBAIQvH,aACAA;gBAJVuH,UAAU,MAAMX,iBAAiB5G,IAAIG,IAAI,EAAE;oBACzC0F;oBACAD,OAAO5F,IAAI4F,KAAK;oBAChB3B,MAAM,GAAEjE,cAAAA,IAAIiE,MAAM,YAAVjE,cAAc;oBACtBU,MAAM,GAAEV,cAAAA,IAAIU,MAAM,YAAVV,cAAc,CAAC;oBACvBsG;oBACA/E;oBACAiG,KAAKxH,IAAIyH,SAAS;gBACpB;YACF,EAAE,OAAOC,OAAO;gBACdC,QAAQD,KAAK,CAAC,4BAA4B;oBAAE9B,OAAO5F,IAAI4F,KAAK;oBAAEJ,OAAOxF,IAAI4H,GAAG;oBAAEF;gBAAM;YACtF;YACA,OAAOH,UAAU,aAAKD;gBAASO,SAASN,QAAQG,KAAK;iBAAK;QAC5D;QAEA,yEAAyE;QACzE,wEAAwE;QACxE,yEAAyE;QACzE,0EAA0E;QAC1E,0EAA0E;QAC1E,0EAA0E;QAC1E,eAAe;QACf,MAAMI,WAAWjI,gBAAAA,QAASnB,eAAe;QACzC,MAAM4B,MAAMuD,aAAa;YACvB7D;YACAkE;YACArE,OAAOiI;YACP3D,QAAQ7F,uBAAuBsD,WAAW;gBAAEmG,cAAc1I;YAAyB;QACrF;QACA,MAAM2I,SAAStB,iBACX1B,eAAe,MAAM0B,eAAe1G,IAAI4F,KAAK,EAAEtF,KAAKuF,YAAY;YAC9DL,OAAOxF,IAAI4H,GAAG;YACdxC;QACF,KACA;QACJ,IAAI4C,QAAQ;gBAcP;YAbH,mFAAmF;YACnF,MAAMzG,OAAkBrC,mBAAmBc,IAAIG,IAAI,EAAE,aAChD6H,OAAOzG,IAAI;gBACdmE,QAAQ;gBACRlC,QAAQ7B,aAAaqG,OAAOzG,IAAI,EAAEK;gBAClCgD,YAAYQ;gBACZ6C,aAAa;gBACbC,aAAa;gBACb5H;gBACA6H,YAAYH,OAAOxC,KAAK;;YAE1B,MAAM4C,UAAUnJ,iBAAiB6I;YACjC,QACG,QAAA,MAAMT,cAAc9F,MAAM6G,oBAA1B,QAAuC,aACnCA;gBACH7G;gBACA8G,QAAQ;oBAAEC,QAAQ;oBAAQ9G,SAAS1B;oBAAyByI,UAAU,EAAE;gBAAC;;QAG/E;QAEA,MAAMC,SAAS,MAAMjK,uBAAuB,QAAQ;YAClDkK,MAAM;WACF5I,QAAQ;YAAEA;QAAM,IAAI,CAAC;YACzBkI,cAAc1I;YACduC;YACA8G,UAAU;gBAAC;oBAAEC,MAAM;oBAAQC,SAAS1E;gBAAO;aAAE;YAC7C2E,MAAM/K;YACN,sEAAsE;YACtE,kEAAkE;YAClE2B,WAAWG,mBAAmBkI;WAC1BV,MAAM0B,QAAQ,GAAG;YAAEA,UAAU1B,MAAM0B,QAAQ;QAAC,IAAI,CAAC,GACjD1B,MAAM2B,MAAM,GAAG;YAAEA,QAAQ3B,MAAM2B,MAAM;QAAC,IAAI,CAAC,GAC3ClC,SAAS;YAAEA;QAAO,IAAI,CAAC;YAC3B5G;YACA+I,QAAQ5H,gBAAgBC;;QAE1B,MAAM4H,QAA0B;YAC9BC,SAAS,EAAE;YACXC,OAAOX,OAAOW,KAAK;YACnBC,YAAYZ,OAAOY,UAAU;YAC7BvJ,OAAO2I,OAAO3I,KAAK;YACnBwJ,YAAYb,OAAOa,UAAU;WACzBb,OAAOO,MAAM,GAAG;YAAEA,QAAQP,OAAOO,MAAM;QAAC,IAAI,CAAC;QAEnD,IAAIP,OAAO9C,MAAM,KAAK,WAAW,OAAO,aAAKuD;YAAOK,SAAS;;QAC7D,IAAId,OAAO9C,MAAM,KAAK,eAAe,OAAO,aAAKuD;YAAOZ,QAAQrJ,iBAAiBwJ;;QACjF,iGAAiG;QACjG,MAAMjH,OAAkBrC,mBAAmBc,IAAIG,IAAI,EAAE,aAChDqI,OAAOjI,KAAK;YACfmF,QAAQ;YACRlC,QAAQ7B,aAAa6G,OAAOjI,KAAK,EAAEqB;YACnC,qFAAqF;YACrFgD,YAAYQ;YACZ6C,aAAa;YACbC,aAAa;YACb5H;;QAEF,QACG,OAAA,MAAM+G,cAAc9F,MAAM0H,kBAA1B,OAAqC,aACjCA;YACH1H;YACA8G,QAAQ;gBAAEC,QAAQ;gBAAQ9G,SAAS1B;gBAAyByI,UAAU,EAAE;YAAC;;IAG/E;AACF;AAEA,OAAO,MAAMgB,mBAAmBhD,sBAAqB;AAErD;;;CAGC,GACD,OAAO,SAASiD;IACdpK,sBAAsBmK,kBAAkB;QAAE5J,WAAWD;IAA4B;AACnF"}

package/src/lib/jobs/ai-job-plugin-drafts.d.ts

@@ -0,0 +1,76 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import { type PluginResourceDraftWriter } from '@aglyn/aglyn/plugin-manager/plugin-resource-drafts';
+import type { AiJobKind } from '../model/ai-jobs.types';
+import type { AiJobAdmissionContext, AiJobAdmissionRefusal } from './ai-job-admission';
+/**
+ * Admitting a job whose drafts ANOTHER plugin writes (AGL-2912).
+ *
+ * `aiDraftAdmissionRefusal` admits the kinds this plugin writes itself, where
+ * the allowance is one it can read. An email job writes no document of its
+ * own: the email plugin owns the email design and the marketing plugin owns
+ * the campaign, and each registers a writer on the `plugin-resource-drafts`
+ * seam. So the question this answers is different, and it is the caller's
+ * half of that seam's contract — the seam carries no authorization of the
+ * caller, so a caller establishes, before it asks for anything:
+ *
+ *  1. a site is named, and it is the job's own org's;
+ *  2. the owning plugin runs on that site — switched on for the workspace,
+ *    not switched off for the site, and past its release flag — and has
+ *    actually registered its writer in this process;
+ *  3. whatever the kind checks of its own, such as the plan a campaign needs;
+ *  4. that the member the drafts are for may create one of each, which only
+ *    the owner can answer, and does, through `refusal`.
+ *
+ * Asked at the create door before the job exists and again at the resume door
+ * before a confirmed plan runs, so a plugin switched off, or an allowance used
+ * up, in between is caught before the job spends. A refusal is the owner's own
+ * sentence wherever there is one, so a person reads what the console would
+ * have told them.
+ */
+/** How a resource's draft writer is found; the core's registry by default. */
+export type AiPluginDraftWriterLookup = (resource: string) => PluginResourceDraftWriter | null;
+/** The registered writer for a resource, or `null` when no plugin writes it here. */
+export declare const aiPluginDraftWriter: AiPluginDraftWriterLookup;
+/** One draft a job kind needs written, and who owns it. */
+export interface AiPluginDraftNeed {
+    /** The resource name the owner registered its writer under. */
+    resource: string;
+    /** The owning plugin, as `plugins.config.json` names it. */
+    pluginId: string;
+    /** What the site's plugin list calls it, for the sentence a person reads. */
+    label: string;
+}
+export interface AiPluginDraftAdmissionInput {
+    /** The job kind, named in the refusal that asks for a site. */
+    kind: AiJobKind;
+    /** Every draft the kind writes, each checked in turn. */
+    drafts: readonly AiPluginDraftNeed[];
+    /** The kind's own check, asked once the site and its plugins are known good. */
+    ownCheck?: (hostId: string) => Promise<AiJobAdmissionRefusal | null>;
+    /** How a writer is found; the registry otherwise. */
+    writerFor?: AiPluginDraftWriterLookup;
+    /** The instant the owner's allowance is read against; now otherwise. */
+    now?: Date;
+}
+/** What a person is told when the plugin that owns a draft does not run here. */
+export declare function aiPluginDraftUnavailable(label: string): string;
+/**
+ * Whether a job of this kind may start on this site for this member; `null`
+ * admits it. Nothing here writes, and nothing here spends.
+ */
+export declare function aiPluginDraftAdmissionRefusal(context: AiJobAdmissionContext, input: AiPluginDraftAdmissionInput): Promise<AiJobAdmissionRefusal | null>;