@aglyn/plugins-ai 1.0.0-beta.218 → 1.0.0-beta.220

package/src/lib/server/billing-overage.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../../../../libs/plugins/ai/src/lib/server/billing-overage.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { pluginRequestFromWeb } from '@aglyn/aglyn/server'\nimport {\n  ASSIST_HARD_CAP_CONTROL_LABEL,\n  ASSIST_OVERAGE_CAP_CONTROL_LABEL,\n  ASSIST_OVERAGE_CAP_MAX_USD,\n  ASSIST_OVERAGE_CAP_MIN_USD,\n  resolveAssistCreditBudget,\n  resolveAssistHardCap,\n  resolveAssistOverageCapUsd,\n  resolveAssistOverageRateUsdPer1k,\n} from '@aglyn/aglyn/app-utils/assist-credits'\nimport {\n  emailUnverifiedResponse,\n  firebaseAdmin,\n  isImpersonationSession,\n  memberHasOrgPermission,\n  resolveOrgMembership,\n} from '@aglyn/tenant-data-admin'\nimport { logAiOverageControl } from '../activity/ai-activity'\nimport { assistMonthOverage } from '@aglyn/aglyn/app-utils/assist-credits'\nimport { assistUsageMonth } from '../usage/assist-usage'\nimport { aiOverageBillsByInvoice } from '../billing/ai-overage-cutover'\nimport { aiOverageNextChargeUsd } from '../billing/ai-overage-gate'\nimport {\n  AI_BILLING_STANDING_DOC,\n  AI_BILLING_SUBCOLLECTION,\n  readAiOverageMonthLedger,\n} from '../billing/ai-overage-ledger'\nimport {\n  AI_OVERAGE_THRESHOLD_USD,\n  aiOverageCardOnFile,\n  aiOverageEffectiveCeilingUsd,\n  aiOverageStandingCeilingUsd,\n  aiOverageStep,\n  readAiOverageStanding,\n} from '../billing/ai-overage-standing'\nimport { FieldValue } from 'firebase-admin/firestore'\nimport { invalidIdTokenResponse } from '@aglyn/tenant-data-admin/server/id-token-refusal'\nimport { addAdminAudit } from '@aglyn/tenant-data-admin/server/admin-audit-write'\n\n// lockdown-423: exempt — self-serve billing surface, same posture as\n// billing/storage-overage beside it. AGL-1501 keeps billing-locked sessions\n// alive precisely so members can reach Billing, and this is the control that\n// stops an org accruing assist charges, so a 423 would trap it accruing them.\n\n/**\n * Read or set the org's own assist controls: the hard-cap switch (AGL-2653)\n * and the dollar ceiling on overage (AGL-2898).\n *\n * Credits past the plan's assist band are SOLD by default, at the rate\n * `resolveAssistOverageRateUsdPer1k` answers — the plan's listed\n * `extraAssistCreditsUsdPer1k`, or the add-on's rate on a plan that carries\n * its band only with the add-on. This route holds the two\n * controls a customer has over that, and nothing else — it is not a consent\n * surface, and there is nothing here an org must do before assist works.\n *\n *   `get`        → whether the switch is on, the ceiling if any, the band,\n *                  the rate the overage bills at, and whether the plan sells\n *                  overage at all\n *   `setHardCap` → store `hardCap: true | false`\n *   `setCap`     → store `capUsd: number`, or `null` to clear the ceiling\n *\n * `billing.manage`-gated, because both controls bound spend in both\n * directions: lifting either is what lets the org be invoiced further past\n * its band, and setting either is what stops a workspace's assistant.\n * Admin-SDK-only by construction — `assistOverage` is denied to every client\n * in the rules, so a member cannot lift their own ceiling or lower somebody\n * else's.\n *\n * TURNING THE SWITCH OFF AND CLEARING THE CEILING ARE ALWAYS AVAILABLE, on\n * any plan and at any usage level: an org that wants the sale back on must\n * not have to argue with a precondition. Turning the switch on, or setting a\n * ceiling, is refused, 409, on a plan that sells no overage — there the band\n * is already the wall (`assistBandRefuses`), and storing a control that\n * changes nothing would read as protection the org does not have.\n */\n/**\n * What the overage card needs to say about Aglyn's own limit (AGL-3011).\n *\n * Every figure is `null` before the cutover month. That is not a missing\n * value: it is the honest answer while overage still bills on the monthly\n * invoice, and rendering a ceiling and a \"next charge\" figure that nothing\n * enforces would be a promise the platform is not yet keeping.\n */\nasync function readAiOverageStandingForCard(\n  orgRef: FirebaseFirestore.DocumentReference,\n  org: Parameters<typeof aiOverageEffectiveCeilingUsd>[0],\n): Promise<{\n  aglynCeilingUsd: number | null\n  overageStep: number | null\n  overageThresholdUsd: number | null\n  overageChargedUsd: number | null\n  overageChargeCount: number | null\n  overageNextChargeUsd: number | null\n  overagePaused: string | null\n  overageCardOnFile: boolean | null\n  overageBillsByInvoice: boolean\n}> {\n  const now = new Date()\n  const month = assistUsageMonth(now)\n  const empty = {\n    aglynCeilingUsd: null,\n    overageStep: null,\n    overageThresholdUsd: null,\n    overageChargedUsd: null,\n    overageChargeCount: null,\n    overageNextChargeUsd: null,\n    overagePaused: null,\n    overageCardOnFile: null,\n    overageBillsByInvoice: false,\n  }\n  if (!aiOverageBillsByInvoice(month)) return empty\n  const [standingSnapshot, usageSnapshot] = await Promise.all([\n    orgRef.collection(AI_BILLING_SUBCOLLECTION).doc(AI_BILLING_STANDING_DOC).get(),\n    orgRef.collection('assistUsage').doc(month).get(),\n  ])\n  const standing = readAiOverageStanding(\n    standingSnapshot.exists ? (standingSnapshot.data() ?? null) : null,\n  )\n  const ledger = readAiOverageMonthLedger(\n    usageSnapshot.exists ? (usageSnapshot.data() ?? null) : null,\n  )\n  const priced = assistMonthOverage(org, Number(usageSnapshot.get('estCostUsd') ?? 0))\n  return {\n    aglynCeilingUsd: aiOverageStandingCeilingUsd(standing, now),\n    overageStep: aiOverageStep(standing),\n    overageThresholdUsd: AI_OVERAGE_THRESHOLD_USD,\n    overageChargedUsd: ledger.paidUsd,\n    overageChargeCount: ledger.charges,\n    overageNextChargeUsd: aiOverageNextChargeUsd(\n      priced.overageMonthlyUsd,\n      ledger.invoicedUsd,\n    ),\n    overagePaused: standing.pause?.reason ?? null,\n    overageCardOnFile: aiOverageCardOnFile(standing) ?? null,\n    overageBillsByInvoice: true,\n  }\n}\n\nasync function handler(request: Request): Promise<Response> {\n  const { method, body, headers: rawHeaders } = await pluginRequestFromWeb(request)\n  const headers = rawHeaders as Partial<Record<string, string>>\n  if (method !== 'POST') {\n    return Response.json({ error: 'Method not allowed' }, { status: 405 })\n  }\n  const authorization = headers.authorization ?? ''\n  const idToken = authorization.startsWith('Bearer ')\n    ? authorization.slice('Bearer '.length)\n    : undefined\n  if (!idToken) return Response.json({ error: 'Unauthenticated' }, { status: 401 })\n  const orgId = String(body?.orgId ?? '')\n  const action = String(body?.action ?? '')\n  if (!orgId || !['get', 'setHardCap', 'setCap'].includes(action)) {\n    return Response.json({ error: 'Bad request' }, { status: 400 })\n  }\n\n  try {\n    const decoded = await firebaseAdmin.app().auth().verifyIdToken(idToken)\n    if (!decoded.email_verified && !isImpersonationSession(decoded)) {\n      return emailUnverifiedResponse()\n    }\n    const isStaff = decoded['staff'] === true\n    const actor = await resolveOrgMembership(decoded.uid, orgId)\n    if (\n      !isStaff &&\n      !(await memberHasOrgPermission(orgId, actor?.member, 'billing.manage'))\n    ) {\n      return Response.json({ error: 'billing.manage required' }, { status: 403 })\n    }\n\n    const orgRef = firebaseAdmin.app().firestore().collection('orgs').doc(orgId)\n    const orgSnapshot = await orgRef.get()\n    if (!orgSnapshot.exists) {\n      return Response.json({ error: 'Unknown organization' }, { status: 404 })\n    }\n    const org = (orgSnapshot.data() ?? {}) as Record<string, unknown>\n    const hardCap = resolveAssistHardCap(org as never)\n    const capUsd = resolveAssistOverageCapUsd(org as never)\n    const bandCredits = resolveAssistCreditBudget(org as never)\n    // The rate the card quotes must be the rate the rollup bills, so it is\n    // read through the one resolver every reader of the rate goes through.\n    // That mattered acutely under AGL-3014, when Starter's rate lived off\n    // `PLAN_PRICING` and reading the table directly quoted $0.00 on an org\n    // that was really being invoiced. AGL-3203 put the rate on Starter's own\n    // row and deleted the exception, so the table and the resolver now agree\n    // — and this still reads the resolver, because a comp is priced at\n    // nothing and only `resolvePlanPricing` knows that.\n    const overageRateUsdPer1k = resolveAssistOverageRateUsdPer1k(org as never)\n    const sellsOverage = bandCredits !== null && overageRateUsdPer1k !== null\n\n    if (action === 'get') {\n      // AGLYN'S OWN LIMIT BESIDE THE WORKSPACE'S (AGL-3011). The card shows\n      // both because the LOWER of the two binds, and a card that showed only\n      // the figure the workspace set would explain neither the refusal it\n      // gets at Aglyn's nor the charge it sees before its own is reached.\n      //\n      // `null` for every figure while the platform still bills overage on\n      // the monthly invoice, so the card keeps saying what is true today\n      // rather than describing a mechanism that is not running.\n      const overage = await readAiOverageStandingForCard(orgRef, org as never)\n      return Response.json(\n        {\n          hardCap,\n          capUsd,\n          bandCredits,\n          overageRateUsdPer1k,\n          sellsOverage,\n          ...overage,\n          label: ASSIST_HARD_CAP_CONTROL_LABEL,\n          capLabel: ASSIST_OVERAGE_CAP_CONTROL_LABEL,\n          minCapUsd: ASSIST_OVERAGE_CAP_MIN_USD,\n          maxCapUsd: ASSIST_OVERAGE_CAP_MAX_USD,\n        },\n        { status: 200 },\n      )\n    }\n\n    if (action === 'setCap') {\n      const raw = body?.capUsd\n      // `null` clears; anything else must be a real number in a real range.\n      // A string \"25\" is refused rather than coerced, the way the switch\n      // refuses a string \"false\": the resolver reads the field strictly, so\n      // a value that reached the document as a string would be no ceiling\n      // at all while the card said one was set.\n      const clearing = raw === null\n      if (\n        !clearing &&\n        (typeof raw !== 'number' ||\n          !Number.isFinite(raw) ||\n          raw < ASSIST_OVERAGE_CAP_MIN_USD ||\n          raw > ASSIST_OVERAGE_CAP_MAX_USD)\n      ) {\n        return Response.json(\n          {\n            error:\n              `Set a monthly AI overage ceiling between ` +\n              `$${ASSIST_OVERAGE_CAP_MIN_USD} and ` +\n              `$${ASSIST_OVERAGE_CAP_MAX_USD.toLocaleString('en-US')}, ` +\n              `or clear it.`,\n            code: 'invalid_cap',\n          },\n          { status: 400 },\n        )\n      }\n      if (!clearing && !sellsOverage) {\n        return Response.json(\n          {\n            error:\n              bandCredits === null\n                ? 'Your plan includes no AI assist credits, so there is no ' +\n                  'overage to cap. Upgrade in Billing to add AI assist.'\n                : 'Your plan already stops AI assist at its included band — ' +\n                  'it sells no credits past it, so there is no overage to cap.',\n            code: 'not_sold',\n          },\n          { status: 409 },\n        )\n      }\n      const requestedCap = clearing ? null : (raw as number)\n      await orgRef.set(\n        {\n          assistOverage: {\n            capUsd: requestedCap,\n            capSetAt: FieldValue.serverTimestamp(),\n            capSetBy: decoded.uid,\n          },\n        },\n        { merge: true },\n      )\n      await addAdminAudit(firebaseAdmin.app().firestore(), {\n        actorUid: decoded.uid,\n        actorEmail: decoded.email ?? null,\n        action: 'billing.assistOverage.setCap',\n        target: `orgs/${orgId}`,\n        before: { capUsd },\n        after: { capUsd: requestedCap },\n        at: FieldValue.serverTimestamp(),\n      })\n        .catch(() => undefined)\n      // The customer's own feed (AGL-2929): `adminAudit` is staff-only, and\n      // the workspace should see who set its ceiling. Nothing when the value\n      // did not move.\n      await logAiOverageControl(\n        orgId,\n        { uid: decoded.uid, email: decoded.email ?? null },\n        { control: 'cap', before: capUsd, after: requestedCap },\n      )\n      return Response.json({ ok: true, capUsd: requestedCap }, { status: 200 })\n    }\n\n    // Strictly a boolean, the same way the resolver reads it strictly: a\n    // string \"false\" arriving here would otherwise be stored as `true`.\n    if (typeof body?.hardCap !== 'boolean') {\n      return Response.json(\n        { error: 'hardCap must be true or false', code: 'invalid_value' },\n        { status: 400 },\n      )\n    }\n    const requested = body.hardCap as boolean\n\n    if (requested && !sellsOverage) {\n      return Response.json(\n        {\n          error:\n            bandCredits === null\n              ? 'Your plan includes no AI assist credits, so there is no band ' +\n                'to stop at. Upgrade in Billing to add AI assist.'\n              : 'Your plan already stops AI assist at its included band — ' +\n                'it sells no credits past it, so there is nothing to switch off.',\n          code: 'not_sold',\n        },\n        { status: 409 },\n      )\n    }\n\n    await orgRef.set(\n      {\n        assistOverage: {\n          hardCap: requested,\n          hardCapSetAt: FieldValue.serverTimestamp(),\n          hardCapSetBy: decoded.uid,\n        },\n      },\n      { merge: true },\n    )\n    await addAdminAudit(firebaseAdmin.app().firestore(), {\n      actorUid: decoded.uid,\n      actorEmail: decoded.email ?? null,\n      action: 'billing.assistOverage.setHardCap',\n      target: `orgs/${orgId}`,\n      before: { hardCap },\n      after: { hardCap: requested },\n      at: FieldValue.serverTimestamp(),\n    })\n      .catch(() => undefined)\n    await logAiOverageControl(\n      orgId,\n      { uid: decoded.uid, email: decoded.email ?? null },\n      { control: 'hardCap', before: hardCap, after: requested },\n    )\n\n    return Response.json({ ok: true, hardCap: requested }, { status: 200 })\n  } catch (error) {\n    // A refused credential is a 401, not a fault of ours (AGL-1993). Null\n    // for anything else, so a real failure keeps the answer below.\n    const unauthenticated = invalidIdTokenResponse(error)\n    if (unauthenticated) return unauthenticated\n    console.error(error)\n    return Response.json(\n      { error: 'Assist overage update failed' },\n      { status: 500 },\n    )\n  }\n}\n\nexport const dynamic = 'force-dynamic'\nexport { handler as POST }\n"],"names":["pluginRequestFromWeb","ASSIST_HARD_CAP_CONTROL_LABEL","ASSIST_OVERAGE_CAP_CONTROL_LABEL","ASSIST_OVERAGE_CAP_MAX_USD","ASSIST_OVERAGE_CAP_MIN_USD","resolveAssistCreditBudget","resolveAssistHardCap","resolveAssistOverageCapUsd","resolveAssistOverageRateUsdPer1k","emailUnverifiedResponse","firebaseAdmin","isImpersonationSession","memberHasOrgPermission","resolveOrgMembership","logAiOverageControl","assistMonthOverage","assistUsageMonth","aiOverageBillsByInvoice","aiOverageNextChargeUsd","AI_BILLING_STANDING_DOC","AI_BILLING_SUBCOLLECTION","readAiOverageMonthLedger","AI_OVERAGE_THRESHOLD_USD","aiOverageCardOnFile","aiOverageStandingCeilingUsd","aiOverageStep","readAiOverageStanding","FieldValue","invalidIdTokenResponse","addAdminAudit","readAiOverageStandingForCard","orgRef","org","standingSnapshot","usageSnapshot","standing","now","Date","month","empty","aglynCeilingUsd","overageStep","overageThresholdUsd","overageChargedUsd","overageChargeCount","overageNextChargeUsd","overagePaused","overageCardOnFile","overageBillsByInvoice","Promise","all","collection","doc","get","exists","data","ledger","priced","Number","paidUsd","charges","overageMonthlyUsd","invoicedUsd","pause","reason","handler","request","headers","method","body","rawHeaders","Response","json","error","status","authorization","idToken","startsWith","slice","length","undefined","orgId","String","action","includes","orgSnapshot","decoded","app","auth","verifyIdToken","email_verified","isStaff","actor","uid","member","firestore","hardCap","capUsd","bandCredits","overageRateUsdPer1k","sellsOverage","overage","label","capLabel","minCapUsd","maxCapUsd","raw","clearing","isFinite","toLocaleString","code","requestedCap","set","assistOverage","capSetAt","serverTimestamp","capSetBy","merge","actorUid","actorEmail","email","target","before","after","at","catch","control","ok","requested","hardCapSetAt","hardCapSetBy","unauthenticated","console","dynamic","POST"],"mappings":";AAAA;;;;;;;;;;;;;;;CAeC,GAED,SAASA,oBAAoB,QAAQ,sBAAqB;AAC1D,SACEC,6BAA6B,EAC7BC,gCAAgC,EAChCC,0BAA0B,EAC1BC,0BAA0B,EAC1BC,yBAAyB,EACzBC,oBAAoB,EACpBC,0BAA0B,EAC1BC,gCAAgC,QAC3B,wCAAuC;AAC9C,SACEC,uBAAuB,EACvBC,aAAa,EACbC,sBAAsB,EACtBC,sBAAsB,EACtBC,oBAAoB,QACf,2BAA0B;AACjC,SAASC,mBAAmB,QAAQ,6BAAyB;AAC7D,SAASC,kBAAkB,QAAQ,wCAAuC;AAC1E,SAASC,gBAAgB,QAAQ,2BAAuB;AACxD,SAASC,uBAAuB,QAAQ,mCAA+B;AACvE,SAASC,sBAAsB,QAAQ,gCAA4B;AACnE,SACEC,uBAAuB,EACvBC,wBAAwB,EACxBC,wBAAwB,QACnB,kCAA8B;AACrC,SACEC,wBAAwB,EACxBC,mBAAmB,EAEnBC,2BAA2B,EAC3BC,aAAa,EACbC,qBAAqB,QAChB,oCAAgC;AACvC,SAASC,UAAU,QAAQ,2BAA0B;AACrD,SAASC,sBAAsB,QAAQ,mDAAkD;AACzF,SAASC,aAAa,QAAQ,oDAAmD;AAEjF,qEAAqE;AACrE,4EAA4E;AAC5E,6EAA6E;AAC7E,8EAA8E;AAE9E;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA8BC,GACD;;;;;;;CAOC,GACD,eAAeC,6BACbC,MAA2C,EAC3CC,GAAuD;QA+B1BC,wBAGHC,qBAEoBA,0BAYzBX;QADJY;IAnCjB,MAAMC,MAAM,IAAIC;IAChB,MAAMC,QAAQtB,iBAAiBoB;IAC/B,MAAMG,QAAQ;QACZC,iBAAiB;QACjBC,aAAa;QACbC,qBAAqB;QACrBC,mBAAmB;QACnBC,oBAAoB;QACpBC,sBAAsB;QACtBC,eAAe;QACfC,mBAAmB;QACnBC,uBAAuB;IACzB;IACA,IAAI,CAAC/B,wBAAwBqB,QAAQ,OAAOC;IAC5C,MAAM,CAACN,kBAAkBC,cAAc,GAAG,MAAMe,QAAQC,GAAG,CAAC;QAC1DnB,OAAOoB,UAAU,CAAC/B,0BAA0BgC,GAAG,CAACjC,yBAAyBkC,GAAG;QAC5EtB,OAAOoB,UAAU,CAAC,eAAeC,GAAG,CAACd,OAAOe,GAAG;KAChD;IACD,MAAMlB,WAAWT,sBACfO,iBAAiBqB,MAAM,IAAIrB,yBAAAA,iBAAiBsB,IAAI,cAArBtB,yBAA2B,OAAQ;IAEhE,MAAMuB,SAASnC,yBACba,cAAcoB,MAAM,IAAIpB,sBAAAA,cAAcqB,IAAI,cAAlBrB,sBAAwB,OAAQ;IAE1D,MAAMuB,SAAS1C,mBAAmBiB,KAAK0B,QAAOxB,qBAAAA,cAAcmB,GAAG,CAAC,yBAAlBnB,qBAAmC;IACjF,OAAO;QACLM,iBAAiBhB,4BAA4BW,UAAUC;QACvDK,aAAahB,cAAcU;QAC3BO,qBAAqBpB;QACrBqB,mBAAmBa,OAAOG,OAAO;QACjCf,oBAAoBY,OAAOI,OAAO;QAClCf,sBAAsB3B,uBACpBuC,OAAOI,iBAAiB,EACxBL,OAAOM,WAAW;QAEpBhB,aAAa,WAAEX,kBAAAA,SAAS4B,KAAK,qBAAd5B,gBAAgB6B,MAAM,mBAAI;QACzCjB,iBAAiB,GAAExB,uBAAAA,oBAAoBY,qBAApBZ,uBAAiC;QACpDyB,uBAAuB;IACzB;AACF;AAEA,eAAeiB,QAAQC,OAAgB;QAMfC;IALtB,MAAM,EAAEC,MAAM,EAAEC,IAAI,EAAEF,SAASG,UAAU,EAAE,GAAG,MAAMtE,qBAAqBkE;IACzE,MAAMC,UAAUG;IAChB,IAAIF,WAAW,QAAQ;QACrB,OAAOG,SAASC,IAAI,CAAC;YAAEC,OAAO;QAAqB,GAAG;YAAEC,QAAQ;QAAI;IACtE;IACA,MAAMC,iBAAgBR,yBAAAA,QAAQQ,aAAa,YAArBR,yBAAyB;IAC/C,MAAMS,UAAUD,cAAcE,UAAU,CAAC,aACrCF,cAAcG,KAAK,CAAC,UAAUC,MAAM,IACpCC;IACJ,IAAI,CAACJ,SAAS,OAAOL,SAASC,IAAI,CAAC;QAAEC,OAAO;IAAkB,GAAG;QAAEC,QAAQ;IAAI;IAC/E,MAAMO,QAAQC,eAAOb,wBAAAA,KAAMY,KAAK,mBAAI;IACpC,MAAME,SAASD,gBAAOb,wBAAAA,KAAMc,MAAM,oBAAI;IACtC,IAAI,CAACF,SAAS,CAAC;QAAC;QAAO;QAAc;KAAS,CAACG,QAAQ,CAACD,SAAS;QAC/D,OAAOZ,SAASC,IAAI,CAAC;YAAEC,OAAO;QAAc,GAAG;YAAEC,QAAQ;QAAI;IAC/D;IAEA,IAAI;YAmBWW,mBAwJCC,gBAUeA;QApL7B,MAAMA,UAAU,MAAM5E,cAAc6E,GAAG,GAAGC,IAAI,GAAGC,aAAa,CAACb;QAC/D,IAAI,CAACU,QAAQI,cAAc,IAAI,CAAC/E,uBAAuB2E,UAAU;YAC/D,OAAO7E;QACT;QACA,MAAMkF,UAAUL,OAAO,CAAC,QAAQ,KAAK;QACrC,MAAMM,QAAQ,MAAM/E,qBAAqByE,QAAQO,GAAG,EAAEZ;QACtD,IACE,CAACU,WACD,CAAE,MAAM/E,uBAAuBqE,OAAOW,yBAAAA,MAAOE,MAAM,EAAE,mBACrD;YACA,OAAOvB,SAASC,IAAI,CAAC;gBAAEC,OAAO;YAA0B,GAAG;gBAAEC,QAAQ;YAAI;QAC3E;QAEA,MAAM3C,SAASrB,cAAc6E,GAAG,GAAGQ,SAAS,GAAG5C,UAAU,CAAC,QAAQC,GAAG,CAAC6B;QACtE,MAAMI,cAAc,MAAMtD,OAAOsB,GAAG;QACpC,IAAI,CAACgC,YAAY/B,MAAM,EAAE;YACvB,OAAOiB,SAASC,IAAI,CAAC;gBAAEC,OAAO;YAAuB,GAAG;gBAAEC,QAAQ;YAAI;QACxE;QACA,MAAM1C,OAAOqD,oBAAAA,YAAY9B,IAAI,cAAhB8B,oBAAsB,CAAC;QACpC,MAAMW,UAAU1F,qBAAqB0B;QACrC,MAAMiE,SAAS1F,2BAA2ByB;QAC1C,MAAMkE,cAAc7F,0BAA0B2B;QAC9C,uEAAuE;QACvE,uEAAuE;QACvE,sEAAsE;QACtE,uEAAuE;QACvE,yEAAyE;QACzE,yEAAyE;QACzE,mEAAmE;QACnE,oDAAoD;QACpD,MAAMmE,sBAAsB3F,iCAAiCwB;QAC7D,MAAMoE,eAAeF,gBAAgB,QAAQC,wBAAwB;QAErE,IAAIhB,WAAW,OAAO;YACpB,sEAAsE;YACtE,uEAAuE;YACvE,oEAAoE;YACpE,oEAAoE;YACpE,EAAE;YACF,oEAAoE;YACpE,mEAAmE;YACnE,0DAA0D;YAC1D,MAAMkB,UAAU,MAAMvE,6BAA6BC,QAAQC;YAC3D,OAAOuC,SAASC,IAAI,CAClB;gBACEwB;gBACAC;gBACAC;gBACAC;gBACAC;eACGC;gBACHC,OAAOrG;gBACPsG,UAAUrG;gBACVsG,WAAWpG;gBACXqG,WAAWtG;gBAEb;gBAAEuE,QAAQ;YAAI;QAElB;QAEA,IAAIS,WAAW,UAAU;gBAsDTG,iBAaeA;YAlE7B,MAAMoB,MAAMrC,wBAAAA,KAAM4B,MAAM;YACxB,sEAAsE;YACtE,mEAAmE;YACnE,sEAAsE;YACtE,oEAAoE;YACpE,0CAA0C;YAC1C,MAAMU,WAAWD,QAAQ;YACzB,IACE,CAACC,YACA,CAAA,OAAOD,QAAQ,YACd,CAAChD,OAAOkD,QAAQ,CAACF,QACjBA,MAAMtG,8BACNsG,MAAMvG,0BAAyB,GACjC;gBACA,OAAOoE,SAASC,IAAI,CAClB;oBACEC,OACE,CAAC,yCAAyC,CAAC,GAC3C,CAAC,CAAC,EAAErE,2BAA2B,KAAK,CAAC,GACrC,CAAC,CAAC,EAAED,2BAA2B0G,cAAc,CAAC,SAAS,EAAE,CAAC,GAC1D,CAAC,YAAY,CAAC;oBAChBC,MAAM;gBACR,GACA;oBAAEpC,QAAQ;gBAAI;YAElB;YACA,IAAI,CAACiC,YAAY,CAACP,cAAc;gBAC9B,OAAO7B,SAASC,IAAI,CAClB;oBACEC,OACEyB,gBAAgB,OACZ,6DACA,yDACA,8DACA;oBACNY,MAAM;gBACR,GACA;oBAAEpC,QAAQ;gBAAI;YAElB;YACA,MAAMqC,eAAeJ,WAAW,OAAQD;YACxC,MAAM3E,OAAOiF,GAAG,CACd;gBACEC,eAAe;oBACbhB,QAAQc;oBACRG,UAAUvF,WAAWwF,eAAe;oBACpCC,UAAU9B,QAAQO,GAAG;gBACvB;YACF,GACA;gBAAEwB,OAAO;YAAK;YAEhB,MAAMxF,cAAcnB,cAAc6E,GAAG,GAAGQ,SAAS,IAAI;gBACnDuB,UAAUhC,QAAQO,GAAG;gBACrB0B,UAAU,GAAEjC,kBAAAA,QAAQkC,KAAK,YAAblC,kBAAiB;gBAC7BH,QAAQ;gBACRsC,QAAQ,CAAC,KAAK,EAAExC,OAAO;gBACvByC,QAAQ;oBAAEzB;gBAAO;gBACjB0B,OAAO;oBAAE1B,QAAQc;gBAAa;gBAC9Ba,IAAIjG,WAAWwF,eAAe;YAChC,GACGU,KAAK,CAAC,IAAM7C;YACf,sEAAsE;YACtE,uEAAuE;YACvE,gBAAgB;YAChB,MAAMlE,oBACJmE,OACA;gBAAEY,KAAKP,QAAQO,GAAG;gBAAE2B,KAAK,GAAElC,kBAAAA,QAAQkC,KAAK,YAAblC,kBAAiB;YAAK,GACjD;gBAAEwC,SAAS;gBAAOJ,QAAQzB;gBAAQ0B,OAAOZ;YAAa;YAExD,OAAOxC,SAASC,IAAI,CAAC;gBAAEuD,IAAI;gBAAM9B,QAAQc;YAAa,GAAG;gBAAErC,QAAQ;YAAI;QACzE;QAEA,qEAAqE;QACrE,oEAAoE;QACpE,IAAI,QAAOL,wBAAAA,KAAM2B,OAAO,MAAK,WAAW;YACtC,OAAOzB,SAASC,IAAI,CAClB;gBAAEC,OAAO;gBAAiCqC,MAAM;YAAgB,GAChE;gBAAEpC,QAAQ;YAAI;QAElB;QACA,MAAMsD,YAAY3D,KAAK2B,OAAO;QAE9B,IAAIgC,aAAa,CAAC5B,cAAc;YAC9B,OAAO7B,SAASC,IAAI,CAClB;gBACEC,OACEyB,gBAAgB,OACZ,kEACA,qDACA,8DACA;gBACNY,MAAM;YACR,GACA;gBAAEpC,QAAQ;YAAI;QAElB;QAEA,MAAM3C,OAAOiF,GAAG,CACd;YACEC,eAAe;gBACbjB,SAASgC;gBACTC,cAActG,WAAWwF,eAAe;gBACxCe,cAAc5C,QAAQO,GAAG;YAC3B;QACF,GACA;YAAEwB,OAAO;QAAK;QAEhB,MAAMxF,cAAcnB,cAAc6E,GAAG,GAAGQ,SAAS,IAAI;YACnDuB,UAAUhC,QAAQO,GAAG;YACrB0B,UAAU,GAAEjC,iBAAAA,QAAQkC,KAAK,YAAblC,iBAAiB;YAC7BH,QAAQ;YACRsC,QAAQ,CAAC,KAAK,EAAExC,OAAO;YACvByC,QAAQ;gBAAE1B;YAAQ;YAClB2B,OAAO;gBAAE3B,SAASgC;YAAU;YAC5BJ,IAAIjG,WAAWwF,eAAe;QAChC,GACGU,KAAK,CAAC,IAAM7C;QACf,MAAMlE,oBACJmE,OACA;YAAEY,KAAKP,QAAQO,GAAG;YAAE2B,KAAK,GAAElC,kBAAAA,QAAQkC,KAAK,YAAblC,kBAAiB;QAAK,GACjD;YAAEwC,SAAS;YAAWJ,QAAQ1B;YAAS2B,OAAOK;QAAU;QAG1D,OAAOzD,SAASC,IAAI,CAAC;YAAEuD,IAAI;YAAM/B,SAASgC;QAAU,GAAG;YAAEtD,QAAQ;QAAI;IACvE,EAAE,OAAOD,OAAO;QACd,sEAAsE;QACtE,+DAA+D;QAC/D,MAAM0D,kBAAkBvG,uBAAuB6C;QAC/C,IAAI0D,iBAAiB,OAAOA;QAC5BC,QAAQ3D,KAAK,CAACA;QACd,OAAOF,SAASC,IAAI,CAClB;YAAEC,OAAO;QAA+B,GACxC;YAAEC,QAAQ;QAAI;IAElB;AACF;AAEA,OAAO,MAAM2D,UAAU,gBAAe;AACtC,SAASpE,WAAWqE,IAAI,GAAE"}
+{"version":3,"sources":["../../../../../../../libs/plugins/ai/src/lib/server/billing-overage.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { pluginRequestFromWeb } from '@aglyn/aglyn/server'\nimport {\n  ASSIST_HARD_CAP_CONTROL_LABEL,\n  ASSIST_OVERAGE_CAP_CONTROL_LABEL,\n  ASSIST_OVERAGE_CAP_MAX_USD,\n  ASSIST_OVERAGE_CAP_MIN_USD,\n  resolveAssistCreditBudget,\n  resolveAssistHardCap,\n  resolveAssistOverageCapUsd,\n  resolveAssistOverageRateUsdPer1k,\n} from '../usage/assist-credits'\nimport {\n  emailUnverifiedResponse,\n  firebaseAdmin,\n  isImpersonationSession,\n  memberHasOrgPermission,\n  resolveOrgMembership,\n} from '@aglyn/tenant-data-admin'\nimport { logAiOverageControl } from '../activity/ai-activity'\nimport { assistMonthOverage } from '../usage/assist-credits'\nimport { assistUsageMonth } from '../usage/assist-usage'\nimport { aiOverageBillsByInvoice } from '../billing/ai-overage-cutover'\nimport { aiOverageNextChargeUsd } from '../billing/ai-overage-gate'\nimport {\n  AI_BILLING_STANDING_DOC,\n  AI_BILLING_SUBCOLLECTION,\n  readAiOverageMonthLedger,\n} from '../billing/ai-overage-ledger'\nimport {\n  AI_OVERAGE_THRESHOLD_USD,\n  aiOverageCardOnFile,\n  aiOverageEffectiveCeilingUsd,\n  aiOverageStandingCeilingUsd,\n  aiOverageStep,\n  readAiOverageStanding,\n} from '../billing/ai-overage-standing'\nimport { FieldValue } from 'firebase-admin/firestore'\nimport { invalidIdTokenResponse } from '@aglyn/tenant-data-admin/server/id-token-refusal'\nimport { addAdminAudit } from '@aglyn/tenant-data-admin/server/admin-audit-write'\n\n// lockdown-423: exempt — self-serve billing surface, same posture as\n// billing/storage-overage beside it. AGL-1501 keeps billing-locked sessions\n// alive precisely so members can reach Billing, and this is the control that\n// stops an org accruing assist charges, so a 423 would trap it accruing them.\n\n/**\n * Read or set the org's own assist controls: the hard-cap switch (AGL-2653)\n * and the dollar ceiling on overage (AGL-2898).\n *\n * Credits past the plan's assist band are SOLD by default, at the rate\n * `resolveAssistOverageRateUsdPer1k` answers — the plan's listed\n * `extraAssistCreditsUsdPer1k`, or the add-on's rate on a plan that carries\n * its band only with the add-on. This route holds the two\n * controls a customer has over that, and nothing else — it is not a consent\n * surface, and there is nothing here an org must do before assist works.\n *\n *   `get`        → whether the switch is on, the ceiling if any, the band,\n *                  the rate the overage bills at, and whether the plan sells\n *                  overage at all\n *   `setHardCap` → store `hardCap: true | false`\n *   `setCap`     → store `capUsd: number`, or `null` to clear the ceiling\n *\n * `billing.manage`-gated, because both controls bound spend in both\n * directions: lifting either is what lets the org be invoiced further past\n * its band, and setting either is what stops a workspace's assistant.\n * Admin-SDK-only by construction — `assistOverage` is denied to every client\n * in the rules, so a member cannot lift their own ceiling or lower somebody\n * else's.\n *\n * TURNING THE SWITCH OFF AND CLEARING THE CEILING ARE ALWAYS AVAILABLE, on\n * any plan and at any usage level: an org that wants the sale back on must\n * not have to argue with a precondition. Turning the switch on, or setting a\n * ceiling, is refused, 409, on a plan that sells no overage — there the band\n * is already the wall (`assistBandRefuses`), and storing a control that\n * changes nothing would read as protection the org does not have.\n */\n/**\n * What the overage card needs to say about Aglyn's own limit (AGL-3011).\n *\n * Every figure is `null` before the cutover month. That is not a missing\n * value: it is the honest answer while overage still bills on the monthly\n * invoice, and rendering a ceiling and a \"next charge\" figure that nothing\n * enforces would be a promise the platform is not yet keeping.\n */\nasync function readAiOverageStandingForCard(\n  orgRef: FirebaseFirestore.DocumentReference,\n  org: Parameters<typeof aiOverageEffectiveCeilingUsd>[0],\n): Promise<{\n  aglynCeilingUsd: number | null\n  overageStep: number | null\n  overageThresholdUsd: number | null\n  overageChargedUsd: number | null\n  overageChargeCount: number | null\n  overageNextChargeUsd: number | null\n  overagePaused: string | null\n  overageCardOnFile: boolean | null\n  overageBillsByInvoice: boolean\n}> {\n  const now = new Date()\n  const month = assistUsageMonth(now)\n  const empty = {\n    aglynCeilingUsd: null,\n    overageStep: null,\n    overageThresholdUsd: null,\n    overageChargedUsd: null,\n    overageChargeCount: null,\n    overageNextChargeUsd: null,\n    overagePaused: null,\n    overageCardOnFile: null,\n    overageBillsByInvoice: false,\n  }\n  if (!aiOverageBillsByInvoice(month)) return empty\n  const [standingSnapshot, usageSnapshot] = await Promise.all([\n    orgRef.collection(AI_BILLING_SUBCOLLECTION).doc(AI_BILLING_STANDING_DOC).get(),\n    orgRef.collection('assistUsage').doc(month).get(),\n  ])\n  const standing = readAiOverageStanding(\n    standingSnapshot.exists ? (standingSnapshot.data() ?? null) : null,\n  )\n  const ledger = readAiOverageMonthLedger(\n    usageSnapshot.exists ? (usageSnapshot.data() ?? null) : null,\n  )\n  const priced = assistMonthOverage(org, Number(usageSnapshot.get('estCostUsd') ?? 0))\n  return {\n    aglynCeilingUsd: aiOverageStandingCeilingUsd(standing, now),\n    overageStep: aiOverageStep(standing),\n    overageThresholdUsd: AI_OVERAGE_THRESHOLD_USD,\n    overageChargedUsd: ledger.paidUsd,\n    overageChargeCount: ledger.charges,\n    overageNextChargeUsd: aiOverageNextChargeUsd(\n      priced.overageMonthlyUsd,\n      ledger.invoicedUsd,\n    ),\n    overagePaused: standing.pause?.reason ?? null,\n    overageCardOnFile: aiOverageCardOnFile(standing) ?? null,\n    overageBillsByInvoice: true,\n  }\n}\n\nasync function handler(request: Request): Promise<Response> {\n  const { method, body, headers: rawHeaders } = await pluginRequestFromWeb(request)\n  const headers = rawHeaders as Partial<Record<string, string>>\n  if (method !== 'POST') {\n    return Response.json({ error: 'Method not allowed' }, { status: 405 })\n  }\n  const authorization = headers.authorization ?? ''\n  const idToken = authorization.startsWith('Bearer ')\n    ? authorization.slice('Bearer '.length)\n    : undefined\n  if (!idToken) return Response.json({ error: 'Unauthenticated' }, { status: 401 })\n  const orgId = String(body?.orgId ?? '')\n  const action = String(body?.action ?? '')\n  if (!orgId || !['get', 'setHardCap', 'setCap'].includes(action)) {\n    return Response.json({ error: 'Bad request' }, { status: 400 })\n  }\n\n  try {\n    const decoded = await firebaseAdmin.app().auth().verifyIdToken(idToken)\n    if (!decoded.email_verified && !isImpersonationSession(decoded)) {\n      return emailUnverifiedResponse()\n    }\n    const isStaff = decoded['staff'] === true\n    const actor = await resolveOrgMembership(decoded.uid, orgId)\n    if (\n      !isStaff &&\n      !(await memberHasOrgPermission(orgId, actor?.member, 'billing.manage'))\n    ) {\n      return Response.json({ error: 'billing.manage required' }, { status: 403 })\n    }\n\n    const orgRef = firebaseAdmin.app().firestore().collection('orgs').doc(orgId)\n    const orgSnapshot = await orgRef.get()\n    if (!orgSnapshot.exists) {\n      return Response.json({ error: 'Unknown organization' }, { status: 404 })\n    }\n    const org = (orgSnapshot.data() ?? {}) as Record<string, unknown>\n    const hardCap = resolveAssistHardCap(org as never)\n    const capUsd = resolveAssistOverageCapUsd(org as never)\n    const bandCredits = resolveAssistCreditBudget(org as never)\n    // The rate the card quotes must be the rate the rollup bills, so it is\n    // read through the one resolver every reader of the rate goes through.\n    // That mattered acutely under AGL-3014, when Starter's rate lived off\n    // `PLAN_PRICING` and reading the table directly quoted $0.00 on an org\n    // that was really being invoiced. AGL-3203 put the rate on Starter's own\n    // row and deleted the exception, so the table and the resolver now agree\n    // — and this still reads the resolver, because a comp is priced at\n    // nothing and only `resolvePlanPricing` knows that.\n    const overageRateUsdPer1k = resolveAssistOverageRateUsdPer1k(org as never)\n    const sellsOverage = bandCredits !== null && overageRateUsdPer1k !== null\n\n    if (action === 'get') {\n      // AGLYN'S OWN LIMIT BESIDE THE WORKSPACE'S (AGL-3011). The card shows\n      // both because the LOWER of the two binds, and a card that showed only\n      // the figure the workspace set would explain neither the refusal it\n      // gets at Aglyn's nor the charge it sees before its own is reached.\n      //\n      // `null` for every figure while the platform still bills overage on\n      // the monthly invoice, so the card keeps saying what is true today\n      // rather than describing a mechanism that is not running.\n      const overage = await readAiOverageStandingForCard(orgRef, org as never)\n      return Response.json(\n        {\n          hardCap,\n          capUsd,\n          bandCredits,\n          overageRateUsdPer1k,\n          sellsOverage,\n          ...overage,\n          label: ASSIST_HARD_CAP_CONTROL_LABEL,\n          capLabel: ASSIST_OVERAGE_CAP_CONTROL_LABEL,\n          minCapUsd: ASSIST_OVERAGE_CAP_MIN_USD,\n          maxCapUsd: ASSIST_OVERAGE_CAP_MAX_USD,\n        },\n        { status: 200 },\n      )\n    }\n\n    if (action === 'setCap') {\n      const raw = body?.capUsd\n      // `null` clears; anything else must be a real number in a real range.\n      // A string \"25\" is refused rather than coerced, the way the switch\n      // refuses a string \"false\": the resolver reads the field strictly, so\n      // a value that reached the document as a string would be no ceiling\n      // at all while the card said one was set.\n      const clearing = raw === null\n      if (\n        !clearing &&\n        (typeof raw !== 'number' ||\n          !Number.isFinite(raw) ||\n          raw < ASSIST_OVERAGE_CAP_MIN_USD ||\n          raw > ASSIST_OVERAGE_CAP_MAX_USD)\n      ) {\n        return Response.json(\n          {\n            error:\n              `Set a monthly AI overage ceiling between ` +\n              `$${ASSIST_OVERAGE_CAP_MIN_USD} and ` +\n              `$${ASSIST_OVERAGE_CAP_MAX_USD.toLocaleString('en-US')}, ` +\n              `or clear it.`,\n            code: 'invalid_cap',\n          },\n          { status: 400 },\n        )\n      }\n      if (!clearing && !sellsOverage) {\n        return Response.json(\n          {\n            error:\n              bandCredits === null\n                ? 'Your plan includes no AI assist credits, so there is no ' +\n                  'overage to cap. Upgrade in Billing to add AI assist.'\n                : 'Your plan already stops AI assist at its included band — ' +\n                  'it sells no credits past it, so there is no overage to cap.',\n            code: 'not_sold',\n          },\n          { status: 409 },\n        )\n      }\n      const requestedCap = clearing ? null : (raw as number)\n      await orgRef.set(\n        {\n          assistOverage: {\n            capUsd: requestedCap,\n            capSetAt: FieldValue.serverTimestamp(),\n            capSetBy: decoded.uid,\n          },\n        },\n        { merge: true },\n      )\n      await addAdminAudit(firebaseAdmin.app().firestore(), {\n        actorUid: decoded.uid,\n        actorEmail: decoded.email ?? null,\n        action: 'billing.assistOverage.setCap',\n        target: `orgs/${orgId}`,\n        before: { capUsd },\n        after: { capUsd: requestedCap },\n        at: FieldValue.serverTimestamp(),\n      })\n        .catch(() => undefined)\n      // The customer's own feed (AGL-2929): `adminAudit` is staff-only, and\n      // the workspace should see who set its ceiling. Nothing when the value\n      // did not move.\n      await logAiOverageControl(\n        orgId,\n        { uid: decoded.uid, email: decoded.email ?? null },\n        { control: 'cap', before: capUsd, after: requestedCap },\n      )\n      return Response.json({ ok: true, capUsd: requestedCap }, { status: 200 })\n    }\n\n    // Strictly a boolean, the same way the resolver reads it strictly: a\n    // string \"false\" arriving here would otherwise be stored as `true`.\n    if (typeof body?.hardCap !== 'boolean') {\n      return Response.json(\n        { error: 'hardCap must be true or false', code: 'invalid_value' },\n        { status: 400 },\n      )\n    }\n    const requested = body.hardCap as boolean\n\n    if (requested && !sellsOverage) {\n      return Response.json(\n        {\n          error:\n            bandCredits === null\n              ? 'Your plan includes no AI assist credits, so there is no band ' +\n                'to stop at. Upgrade in Billing to add AI assist.'\n              : 'Your plan already stops AI assist at its included band — ' +\n                'it sells no credits past it, so there is nothing to switch off.',\n          code: 'not_sold',\n        },\n        { status: 409 },\n      )\n    }\n\n    await orgRef.set(\n      {\n        assistOverage: {\n          hardCap: requested,\n          hardCapSetAt: FieldValue.serverTimestamp(),\n          hardCapSetBy: decoded.uid,\n        },\n      },\n      { merge: true },\n    )\n    await addAdminAudit(firebaseAdmin.app().firestore(), {\n      actorUid: decoded.uid,\n      actorEmail: decoded.email ?? null,\n      action: 'billing.assistOverage.setHardCap',\n      target: `orgs/${orgId}`,\n      before: { hardCap },\n      after: { hardCap: requested },\n      at: FieldValue.serverTimestamp(),\n    })\n      .catch(() => undefined)\n    await logAiOverageControl(\n      orgId,\n      { uid: decoded.uid, email: decoded.email ?? null },\n      { control: 'hardCap', before: hardCap, after: requested },\n    )\n\n    return Response.json({ ok: true, hardCap: requested }, { status: 200 })\n  } catch (error) {\n    // A refused credential is a 401, not a fault of ours (AGL-1993). Null\n    // for anything else, so a real failure keeps the answer below.\n    const unauthenticated = invalidIdTokenResponse(error)\n    if (unauthenticated) return unauthenticated\n    console.error(error)\n    return Response.json(\n      { error: 'Assist overage update failed' },\n      { status: 500 },\n    )\n  }\n}\n\nexport const dynamic = 'force-dynamic'\nexport { handler as POST }\n"],"names":["pluginRequestFromWeb","ASSIST_HARD_CAP_CONTROL_LABEL","ASSIST_OVERAGE_CAP_CONTROL_LABEL","ASSIST_OVERAGE_CAP_MAX_USD","ASSIST_OVERAGE_CAP_MIN_USD","resolveAssistCreditBudget","resolveAssistHardCap","resolveAssistOverageCapUsd","resolveAssistOverageRateUsdPer1k","emailUnverifiedResponse","firebaseAdmin","isImpersonationSession","memberHasOrgPermission","resolveOrgMembership","logAiOverageControl","assistMonthOverage","assistUsageMonth","aiOverageBillsByInvoice","aiOverageNextChargeUsd","AI_BILLING_STANDING_DOC","AI_BILLING_SUBCOLLECTION","readAiOverageMonthLedger","AI_OVERAGE_THRESHOLD_USD","aiOverageCardOnFile","aiOverageStandingCeilingUsd","aiOverageStep","readAiOverageStanding","FieldValue","invalidIdTokenResponse","addAdminAudit","readAiOverageStandingForCard","orgRef","org","standingSnapshot","usageSnapshot","standing","now","Date","month","empty","aglynCeilingUsd","overageStep","overageThresholdUsd","overageChargedUsd","overageChargeCount","overageNextChargeUsd","overagePaused","overageCardOnFile","overageBillsByInvoice","Promise","all","collection","doc","get","exists","data","ledger","priced","Number","paidUsd","charges","overageMonthlyUsd","invoicedUsd","pause","reason","handler","request","headers","method","body","rawHeaders","Response","json","error","status","authorization","idToken","startsWith","slice","length","undefined","orgId","String","action","includes","orgSnapshot","decoded","app","auth","verifyIdToken","email_verified","isStaff","actor","uid","member","firestore","hardCap","capUsd","bandCredits","overageRateUsdPer1k","sellsOverage","overage","label","capLabel","minCapUsd","maxCapUsd","raw","clearing","isFinite","toLocaleString","code","requestedCap","set","assistOverage","capSetAt","serverTimestamp","capSetBy","merge","actorUid","actorEmail","email","target","before","after","at","catch","control","ok","requested","hardCapSetAt","hardCapSetBy","unauthenticated","console","dynamic","POST"],"mappings":";AAAA;;;;;;;;;;;;;;;CAeC,GAED,SAASA,oBAAoB,QAAQ,sBAAqB;AAC1D,SACEC,6BAA6B,EAC7BC,gCAAgC,EAChCC,0BAA0B,EAC1BC,0BAA0B,EAC1BC,yBAAyB,EACzBC,oBAAoB,EACpBC,0BAA0B,EAC1BC,gCAAgC,QAC3B,6BAAyB;AAChC,SACEC,uBAAuB,EACvBC,aAAa,EACbC,sBAAsB,EACtBC,sBAAsB,EACtBC,oBAAoB,QACf,2BAA0B;AACjC,SAASC,mBAAmB,QAAQ,6BAAyB;AAC7D,SAASC,kBAAkB,QAAQ,6BAAyB;AAC5D,SAASC,gBAAgB,QAAQ,2BAAuB;AACxD,SAASC,uBAAuB,QAAQ,mCAA+B;AACvE,SAASC,sBAAsB,QAAQ,gCAA4B;AACnE,SACEC,uBAAuB,EACvBC,wBAAwB,EACxBC,wBAAwB,QACnB,kCAA8B;AACrC,SACEC,wBAAwB,EACxBC,mBAAmB,EAEnBC,2BAA2B,EAC3BC,aAAa,EACbC,qBAAqB,QAChB,oCAAgC;AACvC,SAASC,UAAU,QAAQ,2BAA0B;AACrD,SAASC,sBAAsB,QAAQ,mDAAkD;AACzF,SAASC,aAAa,QAAQ,oDAAmD;AAEjF,qEAAqE;AACrE,4EAA4E;AAC5E,6EAA6E;AAC7E,8EAA8E;AAE9E;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA8BC,GACD;;;;;;;CAOC,GACD,eAAeC,6BACbC,MAA2C,EAC3CC,GAAuD;QA+B1BC,wBAGHC,qBAEoBA,0BAYzBX;QADJY;IAnCjB,MAAMC,MAAM,IAAIC;IAChB,MAAMC,QAAQtB,iBAAiBoB;IAC/B,MAAMG,QAAQ;QACZC,iBAAiB;QACjBC,aAAa;QACbC,qBAAqB;QACrBC,mBAAmB;QACnBC,oBAAoB;QACpBC,sBAAsB;QACtBC,eAAe;QACfC,mBAAmB;QACnBC,uBAAuB;IACzB;IACA,IAAI,CAAC/B,wBAAwBqB,QAAQ,OAAOC;IAC5C,MAAM,CAACN,kBAAkBC,cAAc,GAAG,MAAMe,QAAQC,GAAG,CAAC;QAC1DnB,OAAOoB,UAAU,CAAC/B,0BAA0BgC,GAAG,CAACjC,yBAAyBkC,GAAG;QAC5EtB,OAAOoB,UAAU,CAAC,eAAeC,GAAG,CAACd,OAAOe,GAAG;KAChD;IACD,MAAMlB,WAAWT,sBACfO,iBAAiBqB,MAAM,IAAIrB,yBAAAA,iBAAiBsB,IAAI,cAArBtB,yBAA2B,OAAQ;IAEhE,MAAMuB,SAASnC,yBACba,cAAcoB,MAAM,IAAIpB,sBAAAA,cAAcqB,IAAI,cAAlBrB,sBAAwB,OAAQ;IAE1D,MAAMuB,SAAS1C,mBAAmBiB,KAAK0B,QAAOxB,qBAAAA,cAAcmB,GAAG,CAAC,yBAAlBnB,qBAAmC;IACjF,OAAO;QACLM,iBAAiBhB,4BAA4BW,UAAUC;QACvDK,aAAahB,cAAcU;QAC3BO,qBAAqBpB;QACrBqB,mBAAmBa,OAAOG,OAAO;QACjCf,oBAAoBY,OAAOI,OAAO;QAClCf,sBAAsB3B,uBACpBuC,OAAOI,iBAAiB,EACxBL,OAAOM,WAAW;QAEpBhB,aAAa,WAAEX,kBAAAA,SAAS4B,KAAK,qBAAd5B,gBAAgB6B,MAAM,mBAAI;QACzCjB,iBAAiB,GAAExB,uBAAAA,oBAAoBY,qBAApBZ,uBAAiC;QACpDyB,uBAAuB;IACzB;AACF;AAEA,eAAeiB,QAAQC,OAAgB;QAMfC;IALtB,MAAM,EAAEC,MAAM,EAAEC,IAAI,EAAEF,SAASG,UAAU,EAAE,GAAG,MAAMtE,qBAAqBkE;IACzE,MAAMC,UAAUG;IAChB,IAAIF,WAAW,QAAQ;QACrB,OAAOG,SAASC,IAAI,CAAC;YAAEC,OAAO;QAAqB,GAAG;YAAEC,QAAQ;QAAI;IACtE;IACA,MAAMC,iBAAgBR,yBAAAA,QAAQQ,aAAa,YAArBR,yBAAyB;IAC/C,MAAMS,UAAUD,cAAcE,UAAU,CAAC,aACrCF,cAAcG,KAAK,CAAC,UAAUC,MAAM,IACpCC;IACJ,IAAI,CAACJ,SAAS,OAAOL,SAASC,IAAI,CAAC;QAAEC,OAAO;IAAkB,GAAG;QAAEC,QAAQ;IAAI;IAC/E,MAAMO,QAAQC,eAAOb,wBAAAA,KAAMY,KAAK,mBAAI;IACpC,MAAME,SAASD,gBAAOb,wBAAAA,KAAMc,MAAM,oBAAI;IACtC,IAAI,CAACF,SAAS,CAAC;QAAC;QAAO;QAAc;KAAS,CAACG,QAAQ,CAACD,SAAS;QAC/D,OAAOZ,SAASC,IAAI,CAAC;YAAEC,OAAO;QAAc,GAAG;YAAEC,QAAQ;QAAI;IAC/D;IAEA,IAAI;YAmBWW,mBAwJCC,gBAUeA;QApL7B,MAAMA,UAAU,MAAM5E,cAAc6E,GAAG,GAAGC,IAAI,GAAGC,aAAa,CAACb;QAC/D,IAAI,CAACU,QAAQI,cAAc,IAAI,CAAC/E,uBAAuB2E,UAAU;YAC/D,OAAO7E;QACT;QACA,MAAMkF,UAAUL,OAAO,CAAC,QAAQ,KAAK;QACrC,MAAMM,QAAQ,MAAM/E,qBAAqByE,QAAQO,GAAG,EAAEZ;QACtD,IACE,CAACU,WACD,CAAE,MAAM/E,uBAAuBqE,OAAOW,yBAAAA,MAAOE,MAAM,EAAE,mBACrD;YACA,OAAOvB,SAASC,IAAI,CAAC;gBAAEC,OAAO;YAA0B,GAAG;gBAAEC,QAAQ;YAAI;QAC3E;QAEA,MAAM3C,SAASrB,cAAc6E,GAAG,GAAGQ,SAAS,GAAG5C,UAAU,CAAC,QAAQC,GAAG,CAAC6B;QACtE,MAAMI,cAAc,MAAMtD,OAAOsB,GAAG;QACpC,IAAI,CAACgC,YAAY/B,MAAM,EAAE;YACvB,OAAOiB,SAASC,IAAI,CAAC;gBAAEC,OAAO;YAAuB,GAAG;gBAAEC,QAAQ;YAAI;QACxE;QACA,MAAM1C,OAAOqD,oBAAAA,YAAY9B,IAAI,cAAhB8B,oBAAsB,CAAC;QACpC,MAAMW,UAAU1F,qBAAqB0B;QACrC,MAAMiE,SAAS1F,2BAA2ByB;QAC1C,MAAMkE,cAAc7F,0BAA0B2B;QAC9C,uEAAuE;QACvE,uEAAuE;QACvE,sEAAsE;QACtE,uEAAuE;QACvE,yEAAyE;QACzE,yEAAyE;QACzE,mEAAmE;QACnE,oDAAoD;QACpD,MAAMmE,sBAAsB3F,iCAAiCwB;QAC7D,MAAMoE,eAAeF,gBAAgB,QAAQC,wBAAwB;QAErE,IAAIhB,WAAW,OAAO;YACpB,sEAAsE;YACtE,uEAAuE;YACvE,oEAAoE;YACpE,oEAAoE;YACpE,EAAE;YACF,oEAAoE;YACpE,mEAAmE;YACnE,0DAA0D;YAC1D,MAAMkB,UAAU,MAAMvE,6BAA6BC,QAAQC;YAC3D,OAAOuC,SAASC,IAAI,CAClB;gBACEwB;gBACAC;gBACAC;gBACAC;gBACAC;eACGC;gBACHC,OAAOrG;gBACPsG,UAAUrG;gBACVsG,WAAWpG;gBACXqG,WAAWtG;gBAEb;gBAAEuE,QAAQ;YAAI;QAElB;QAEA,IAAIS,WAAW,UAAU;gBAsDTG,iBAaeA;YAlE7B,MAAMoB,MAAMrC,wBAAAA,KAAM4B,MAAM;YACxB,sEAAsE;YACtE,mEAAmE;YACnE,sEAAsE;YACtE,oEAAoE;YACpE,0CAA0C;YAC1C,MAAMU,WAAWD,QAAQ;YACzB,IACE,CAACC,YACA,CAAA,OAAOD,QAAQ,YACd,CAAChD,OAAOkD,QAAQ,CAACF,QACjBA,MAAMtG,8BACNsG,MAAMvG,0BAAyB,GACjC;gBACA,OAAOoE,SAASC,IAAI,CAClB;oBACEC,OACE,CAAC,yCAAyC,CAAC,GAC3C,CAAC,CAAC,EAAErE,2BAA2B,KAAK,CAAC,GACrC,CAAC,CAAC,EAAED,2BAA2B0G,cAAc,CAAC,SAAS,EAAE,CAAC,GAC1D,CAAC,YAAY,CAAC;oBAChBC,MAAM;gBACR,GACA;oBAAEpC,QAAQ;gBAAI;YAElB;YACA,IAAI,CAACiC,YAAY,CAACP,cAAc;gBAC9B,OAAO7B,SAASC,IAAI,CAClB;oBACEC,OACEyB,gBAAgB,OACZ,6DACA,yDACA,8DACA;oBACNY,MAAM;gBACR,GACA;oBAAEpC,QAAQ;gBAAI;YAElB;YACA,MAAMqC,eAAeJ,WAAW,OAAQD;YACxC,MAAM3E,OAAOiF,GAAG,CACd;gBACEC,eAAe;oBACbhB,QAAQc;oBACRG,UAAUvF,WAAWwF,eAAe;oBACpCC,UAAU9B,QAAQO,GAAG;gBACvB;YACF,GACA;gBAAEwB,OAAO;YAAK;YAEhB,MAAMxF,cAAcnB,cAAc6E,GAAG,GAAGQ,SAAS,IAAI;gBACnDuB,UAAUhC,QAAQO,GAAG;gBACrB0B,UAAU,GAAEjC,kBAAAA,QAAQkC,KAAK,YAAblC,kBAAiB;gBAC7BH,QAAQ;gBACRsC,QAAQ,CAAC,KAAK,EAAExC,OAAO;gBACvByC,QAAQ;oBAAEzB;gBAAO;gBACjB0B,OAAO;oBAAE1B,QAAQc;gBAAa;gBAC9Ba,IAAIjG,WAAWwF,eAAe;YAChC,GACGU,KAAK,CAAC,IAAM7C;YACf,sEAAsE;YACtE,uEAAuE;YACvE,gBAAgB;YAChB,MAAMlE,oBACJmE,OACA;gBAAEY,KAAKP,QAAQO,GAAG;gBAAE2B,KAAK,GAAElC,kBAAAA,QAAQkC,KAAK,YAAblC,kBAAiB;YAAK,GACjD;gBAAEwC,SAAS;gBAAOJ,QAAQzB;gBAAQ0B,OAAOZ;YAAa;YAExD,OAAOxC,SAASC,IAAI,CAAC;gBAAEuD,IAAI;gBAAM9B,QAAQc;YAAa,GAAG;gBAAErC,QAAQ;YAAI;QACzE;QAEA,qEAAqE;QACrE,oEAAoE;QACpE,IAAI,QAAOL,wBAAAA,KAAM2B,OAAO,MAAK,WAAW;YACtC,OAAOzB,SAASC,IAAI,CAClB;gBAAEC,OAAO;gBAAiCqC,MAAM;YAAgB,GAChE;gBAAEpC,QAAQ;YAAI;QAElB;QACA,MAAMsD,YAAY3D,KAAK2B,OAAO;QAE9B,IAAIgC,aAAa,CAAC5B,cAAc;YAC9B,OAAO7B,SAASC,IAAI,CAClB;gBACEC,OACEyB,gBAAgB,OACZ,kEACA,qDACA,8DACA;gBACNY,MAAM;YACR,GACA;gBAAEpC,QAAQ;YAAI;QAElB;QAEA,MAAM3C,OAAOiF,GAAG,CACd;YACEC,eAAe;gBACbjB,SAASgC;gBACTC,cAActG,WAAWwF,eAAe;gBACxCe,cAAc5C,QAAQO,GAAG;YAC3B;QACF,GACA;YAAEwB,OAAO;QAAK;QAEhB,MAAMxF,cAAcnB,cAAc6E,GAAG,GAAGQ,SAAS,IAAI;YACnDuB,UAAUhC,QAAQO,GAAG;YACrB0B,UAAU,GAAEjC,iBAAAA,QAAQkC,KAAK,YAAblC,iBAAiB;YAC7BH,QAAQ;YACRsC,QAAQ,CAAC,KAAK,EAAExC,OAAO;YACvByC,QAAQ;gBAAE1B;YAAQ;YAClB2B,OAAO;gBAAE3B,SAASgC;YAAU;YAC5BJ,IAAIjG,WAAWwF,eAAe;QAChC,GACGU,KAAK,CAAC,IAAM7C;QACf,MAAMlE,oBACJmE,OACA;YAAEY,KAAKP,QAAQO,GAAG;YAAE2B,KAAK,GAAElC,kBAAAA,QAAQkC,KAAK,YAAblC,kBAAiB;QAAK,GACjD;YAAEwC,SAAS;YAAWJ,QAAQ1B;YAAS2B,OAAOK;QAAU;QAG1D,OAAOzD,SAASC,IAAI,CAAC;YAAEuD,IAAI;YAAM/B,SAASgC;QAAU,GAAG;YAAEtD,QAAQ;QAAI;IACvE,EAAE,OAAOD,OAAO;QACd,sEAAsE;QACtE,+DAA+D;QAC/D,MAAM0D,kBAAkBvG,uBAAuB6C;QAC/C,IAAI0D,iBAAiB,OAAOA;QAC5BC,QAAQ3D,KAAK,CAACA;QACd,OAAOF,SAASC,IAAI,CAClB;YAAEC,OAAO;QAA+B,GACxC;YAAEC,QAAQ;QAAI;IAElB;AACF;AAEA,OAAO,MAAM2D,UAAU,gBAAe;AACtC,SAASpE,WAAWqE,IAAI,GAAE"}

package/src/lib/server.d.ts

@@ -30,3 +30,4 @@ export * from './runtime/ai-runtime';
  * `AI_JOBS_BEAT_PATH` gives.
  */
 export declare function registerAiConsoleApi(): void;
+export type { aiPlanEntitlements } from './plan-entitlements';

package/src/lib/server.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../../../libs/plugins/ai/src/lib/server.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { registerPluginApiRoute } from '@aglyn/aglyn/server'\nimport { registerAiDeclarations } from './declarations'\nimport { AI_JOBS_BEAT_PATH } from './jobs/ai-jobs-beat'\nimport { registerAiJobPlan } from './jobs/ai-job-plan-step'\nimport { registerAiJobsPause } from './jobs/ai-jobs-pause'\nimport { registerAiComponentJob } from './jobs/ai-job-component-step'\nimport { registerAiCrmJob } from './jobs/ai-job-crm-step'\nimport { registerAiLayoutJob } from './jobs/ai-job-layout-step'\nimport { registerAiTemplateJob } from './jobs/ai-job-template-step'\nimport { registerAiExperimentJob } from './jobs/ai-job-experiment-step'\nimport { registerAiFormJob } from './jobs/ai-job-form-step'\nimport { registerAiPageJob } from './jobs/ai-job-page-step'\nimport { registerAiProductsJob } from './jobs/ai-job-products-step'\nimport { registerAiEmailJob } from './jobs/ai-job-email-step'\nimport { registerAiCampaignJob } from './jobs/ai-job-campaign-step'\nimport { registerAiSiteJob } from './jobs/ai-job-site-step'\nimport { registerAiWorkflowJob } from './jobs/ai-job-workflow-step'\nimport { registerAiInsightJob } from './jobs/ai-job-insight-step'\nimport { registerAiFigureReaders } from './insights/ai-figure-readers'\nimport { registerAiTextGenerator } from './server/plugin-text-generation'\nimport { firebaseAdmin } from '@aglyn/tenant-data-admin/server/firebase-admin'\nimport { ensureFirstPartyAiProviders } from './providers/registry'\nimport { aiAssistHandler } from './server/ai-assist'\nimport { GET as aiCrmAnswer } from './server/ai-crm-answer'\nimport { POST as runAiJobsBeat } from './server/ai-jobs-beat-route'\nimport { POST as cancelAiJob } from './server/ai-jobs-cancel'\nimport { GET as aiJobEvents } from './server/ai-jobs-events-route'\nimport { POST as createAiSiteBatch } from './server/ai-jobs-batch'\nimport { GET as listAiJobs, POST as createAiJob } from './server/ai-jobs-route'\nimport { POST as resumeAiJob } from './server/ai-jobs-resume'\nimport { POST as aiGenerateComponent } from './server/ai-generate-component'\nimport { POST as applyAiSeoAudit } from './server/ai-seo-apply'\nimport { POST as assistChat } from './server/assist-chat'\nimport { POST as assistEditApplied } from './server/assist-edit-applied'\nimport { POST as assistFeedback } from './server/assist-feedback'\nimport { PATCH as aiHostPermissions } from './server/ai-host-permissions'\nimport { GET as aiAdminOrg } from './server/ai-admin-org'\nimport { GET as aiAdminOrgsSpend } from './server/ai-admin-orgs-spend'\nimport { GET as aiAdminSignals } from './server/ai-admin-signals'\nimport { GET as aiAdminUser } from './server/ai-admin-user'\nimport { POST as aiAdminOverage } from './server/ai-admin-overage'\nimport { GET as aiUsage } from './server/ai-usage'\nimport { GET as aiAllotments } from './server/ai-allotments'\nimport { GET as aiInsightAnswer } from './server/ai-insight-answer'\nimport { POST as runAiInsightsDigest } from './server/ai-insight-digest-route'\nimport { AI_INSIGHTS_DIGEST_PATH } from './insights/ai-insight-digest'\nimport { GET as aiModels } from './server/ai-models'\nimport { GET as billingCredits } from './server/billing-credits'\nimport { POST as billingOverage } from './server/billing-overage'\n\nexport * from './providers/contract'\nexport * from './providers/catalog'\nexport * from './providers/registry'\nexport * from './providers/routing'\nexport * from './runtime/ai-runtime'\n\n/**\n * The two first-party adapters, registered once per process. A marketplace\n * plugin registers its own against `AI_PROVIDER_CONTRACT` from its own\n * entry and never touches this.\n */\nconst registerFirstPartyProviders = ensureFirstPartyAiProviders\n\n/**\n * Every job kind this plugin runs beyond the three the machine registers\n * itself (AGL-3025). Each is a CALL, never an import made for what the\n * module does as it loads: this package declares only this file\n * effect-ful, so a bundler honoring `sideEffects` deletes an import whose\n * exports go unused — and a step registered that way ran in every spec and\n * in neither app. `registrations-survive-a-bundler.spec.ts` holds this.\n *\n * The console surface is the only caller (AGL-3026): its doors run a job's\n * first step inline, and its beat runs every step after it. The tenant app\n * loads no server surface of this plugin at all, so nothing that serves a\n * published site can reach a provider.\n */\nfunction registerAiJobKinds(): void {\n  // The workspace AI pause the machine asks before it claims any step, so a\n  // paused workspace's queued jobs spend nothing (AGL-3037).\n  registerAiJobsPause()\n  // The plan step every planned kind runs first (AGL-2935).\n  registerAiJobPlan()\n  // Components, layouts and templates (AGL-2908, AGL-2909).\n  registerAiComponentJob()\n  registerAiLayoutJob()\n  registerAiTemplateJob()\n  // Forms (AGL-2913).\n  registerAiExperimentJob()\n  registerAiFormJob()\n  // Pages, with the least time one pass needs (AGL-2907).\n  registerAiPageJob()\n  // Email designs and campaigns, whose drafts the email and marketing\n  // plugins write on the resource-draft seam (AGL-2912).\n  registerAiEmailJob()\n  registerAiCampaignJob()\n  // Automations drafted from a description, and explained, whose drafts the\n  // workflows plugin writes on the resource-draft seam (AGL-2919).\n  registerAiWorkflowJob()\n  // Product copy, and a store's products, categories and discounts from a\n  // brief, as proposals the commerce plugin's surfaces apply (AGL-2916).\n  registerAiProductsJob()\n  // The site scaffold, which builds a whole site through the steps above\n  // (AGL-2911).\n  registerAiSiteJob()\n  // Insights (AGL-2915): a question about a site's figures, answered from\n  // tables the figure readers return, and the weekly digest. The readers for\n  // the platform's own records — page views, forms, datasets — are this\n  // plugin's; every other plugin registers its own from its console surface.\n  registerAiFigureReaders(() => firebaseAdmin.app().firestore())\n  registerAiInsightJob()\n  // CRM by AI (AGL-2917): a record's summary and next step, an email draft\n  // and an import's column matches, read through the CRM's facts readers.\n  registerAiCrmJob()\n}\n\n/**\n * The console-side API (AGL-2939): every AI door, under the `ai` and\n * `assist` prefixes the plugin owns. The URLs the panel and the besigner\n * call are unchanged — `/api/assist/chat`, `/api/ai/assist`,\n * `/api/ai/jobs` — because the dispatcher serves them from the registry\n * exactly where the named routes used to; the two billing doors and the\n * per-member usage read (`ai/usage`) live under the plugin's own prefix.\n * The jobs beat is the one path outside them, for the reason\n * `AI_JOBS_BEAT_PATH` gives.\n */\nexport function registerAiConsoleApi(): void {\n  registerAiDeclarations()\n  registerFirstPartyProviders()\n  registerAiJobKinds()\n  // This plugin as the workspace's text generator on the core's seam\n  // (AGL-3324): another plugin drafts a paragraph through it under the\n  // generation doors' own rules, metered as a text job is.\n  registerAiTextGenerator()\n  registerPluginApiRoute('assist/chat', { web: assistChat })\n  registerPluginApiRoute('assist/feedback', { web: assistFeedback })\n  // The applied-edit record (AGL-2906): counts of a proposal the author\n  // applied in their editor, written to the site's activity log.\n  registerPluginApiRoute('assist/edit-applied', { web: assistEditApplied })\n  // A collaborator's AI toggles on one site (AGL-2927), set from the site's\n  // collaborators card through this plugin's column there.\n  registerPluginApiRoute('ai/host-permissions', { web: aiHostPermissions })\n  registerPluginApiRoute('ai/assist', aiAssistHandler)\n  registerPluginApiRoute('ai/jobs', {\n    web: (request) => (request.method === 'GET' ? listAiJobs(request) : createAiJob(request)),\n  })\n  // The agency batch (AGL-2911): one brief, one `site` job per named site,\n  // under one batch id. Before the `:jobId` routes, which it is not one of.\n  registerPluginApiRoute('ai/jobs/batch', { web: createAiSiteBatch })\n  registerPluginApiRoute('ai/jobs/:jobId/cancel', {\n    web: (request, context) =>\n      cancelAiJob(request, { params: Promise.resolve({ jobId: String(context.params['jobId']) }) }),\n  })\n  registerPluginApiRoute('ai/jobs/:jobId/resume', {\n    web: (request, context) =>\n      resumeAiJob(request, { params: Promise.resolve({ jobId: String(context.params['jobId']) }) }),\n  })\n  // An insight job's answer (AGL-2915), which is kept off the job document\n  // and served only to the member who asked, or for a digest to the site's\n  // members.\n  registerPluginApiRoute('ai/insights/:jobId', {\n    web: (request, context) =>\n      aiInsightAnswer(request, { params: Promise.resolve({ jobId: String(context.params['jobId']) }) }),\n  })\n  // A CRM job's answer (AGL-2917), which is kept off the job document and\n  // served only to a member the CRM still lets read the record.\n  registerPluginApiRoute('ai/crm/:jobId', {\n    web: (request, context) =>\n      aiCrmAnswer(request, { params: Promise.resolve({ jobId: String(context.params['jobId']) }) }),\n  })\n  registerPluginApiRoute('ai/jobs/:jobId/events', {\n    web: (request, context) =>\n      aiJobEvents(request, { params: Promise.resolve({ jobId: String(context.params['jobId']) }) }),\n  })\n  // The jobs beat (AGL-3026): every step the doors leave queued, run every\n  // minute by the console's scheduler on the cron secret, on the one surface\n  // that holds the provider's key.\n  registerPluginApiRoute(AI_JOBS_BEAT_PATH, { web: runAiJobsBeat })\n  // The weekly insights (AGL-2915): Monday's digests made for the people who\n  // asked for them, and delivered once the beat has written them. Beside the\n  // beat under `/api/admin/`, where the console's scheduled sweeps live.\n  registerPluginApiRoute(AI_INSIGHTS_DIGEST_PATH, { web: runAiInsightsDigest })\n  // A site SEO audit's \"Apply all\" (AGL-2910): content fixes as new\n  // unpublished versions, listing values staged for their SEO cards.\n  registerPluginApiRoute('ai/seo/apply', { web: applyAiSeoAudit })\n  // Save the selection as a reusable component, with AI (AGL-2908): the\n  // second entry point of the component job, from the besigner's Attributes\n  // panel. It proposes, and the person's Apply writes.\n  registerPluginApiRoute('ai/generate/component', { web: aiGenerateComponent })\n  registerPluginApiRoute('ai/billing/credits', { web: billingCredits })\n  registerPluginApiRoute('ai/billing/overage', { web: billingOverage })\n  registerPluginApiRoute('ai/usage', { web: aiUsage })\n  // The allotments a manager sets, and the options the model switch lists\n  // (AGL-2942). One handler answers the allotments' GET and POST.\n  registerPluginApiRoute('ai/allotments', { web: aiAllotments })\n  registerPluginApiRoute('ai/models', { web: aiModels })\n  // The staff doors (AGL-2928, AGL-2930, AGL-2252): one org's AI in full,\n  // one account's usage across its workspaces, and the fleet's Assist\n  // signals behind the Assist signal staff page.\n  registerPluginApiRoute('ai/admin/org', { web: aiAdminOrg })\n  registerPluginApiRoute('ai/admin/orgs-spend', { web: aiAdminOrgsSpend })\n  registerPluginApiRoute('ai/admin/user', { web: aiAdminUser })\n  registerPluginApiRoute('ai/admin/signals', { web: aiAdminSignals })\n  // One workspace's overage standing and the four acts staff have over it\n  // (AGL-3011): the ceiling override, lifting a pause — the only way a\n  // dispute pause comes off — and resetting the step. Every act audited.\n  registerPluginApiRoute('ai/admin/overage', { web: aiAdminOverage })\n}\n"],"names":["registerPluginApiRoute","registerAiDeclarations","AI_JOBS_BEAT_PATH","registerAiJobPlan","registerAiJobsPause","registerAiComponentJob","registerAiCrmJob","registerAiLayoutJob","registerAiTemplateJob","registerAiExperimentJob","registerAiFormJob","registerAiPageJob","registerAiProductsJob","registerAiEmailJob","registerAiCampaignJob","registerAiSiteJob","registerAiWorkflowJob","registerAiInsightJob","registerAiFigureReaders","registerAiTextGenerator","firebaseAdmin","ensureFirstPartyAiProviders","aiAssistHandler","GET","aiCrmAnswer","POST","runAiJobsBeat","cancelAiJob","aiJobEvents","createAiSiteBatch","listAiJobs","createAiJob","resumeAiJob","aiGenerateComponent","applyAiSeoAudit","assistChat","assistEditApplied","assistFeedback","PATCH","aiHostPermissions","aiAdminOrg","aiAdminOrgsSpend","aiAdminSignals","aiAdminUser","aiAdminOverage","aiUsage","aiAllotments","aiInsightAnswer","runAiInsightsDigest","AI_INSIGHTS_DIGEST_PATH","aiModels","billingCredits","billingOverage","registerFirstPartyProviders","registerAiJobKinds","app","firestore","registerAiConsoleApi","web","request","method","context","params","Promise","resolve","jobId","String"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED,SAASA,sBAAsB,QAAQ,sBAAqB;AAC5D,SAASC,sBAAsB,QAAQ,oBAAgB;AACvD,SAASC,iBAAiB,QAAQ,yBAAqB;AACvD,SAASC,iBAAiB,QAAQ,6BAAyB;AAC3D,SAASC,mBAAmB,QAAQ,0BAAsB;AAC1D,SAASC,sBAAsB,QAAQ,kCAA8B;AACrE,SAASC,gBAAgB,QAAQ,4BAAwB;AACzD,SAASC,mBAAmB,QAAQ,+BAA2B;AAC/D,SAASC,qBAAqB,QAAQ,iCAA6B;AACnE,SAASC,uBAAuB,QAAQ,mCAA+B;AACvE,SAASC,iBAAiB,QAAQ,6BAAyB;AAC3D,SAASC,iBAAiB,QAAQ,6BAAyB;AAC3D,SAASC,qBAAqB,QAAQ,iCAA6B;AACnE,SAASC,kBAAkB,QAAQ,8BAA0B;AAC7D,SAASC,qBAAqB,QAAQ,iCAA6B;AACnE,SAASC,iBAAiB,QAAQ,6BAAyB;AAC3D,SAASC,qBAAqB,QAAQ,iCAA6B;AACnE,SAASC,oBAAoB,QAAQ,gCAA4B;AACjE,SAASC,uBAAuB,QAAQ,kCAA8B;AACtE,SAASC,uBAAuB,QAAQ,qCAAiC;AACzE,SAASC,aAAa,QAAQ,iDAAgD;AAC9E,SAASC,2BAA2B,QAAQ,0BAAsB;AAClE,SAASC,eAAe,QAAQ,wBAAoB;AACpD,SAASC,OAAOC,WAAW,QAAQ,4BAAwB;AAC3D,SAASC,QAAQC,aAAa,QAAQ,iCAA6B;AACnE,SAASD,QAAQE,WAAW,QAAQ,6BAAyB;AAC7D,SAASJ,OAAOK,WAAW,QAAQ,mCAA+B;AAClE,SAASH,QAAQI,iBAAiB,QAAQ,4BAAwB;AAClE,SAASN,OAAOO,UAAU,EAAEL,QAAQM,WAAW,QAAQ,4BAAwB;AAC/E,SAASN,QAAQO,WAAW,QAAQ,6BAAyB;AAC7D,SAASP,QAAQQ,mBAAmB,QAAQ,oCAAgC;AAC5E,SAASR,QAAQS,eAAe,QAAQ,2BAAuB;AAC/D,SAAST,QAAQU,UAAU,QAAQ,0BAAsB;AACzD,SAASV,QAAQW,iBAAiB,QAAQ,kCAA8B;AACxE,SAASX,QAAQY,cAAc,QAAQ,8BAA0B;AACjE,SAASC,SAASC,iBAAiB,QAAQ,kCAA8B;AACzE,SAAShB,OAAOiB,UAAU,QAAQ,2BAAuB;AACzD,SAASjB,OAAOkB,gBAAgB,QAAQ,kCAA8B;AACtE,SAASlB,OAAOmB,cAAc,QAAQ,+BAA2B;AACjE,SAASnB,OAAOoB,WAAW,QAAQ,4BAAwB;AAC3D,SAASlB,QAAQmB,cAAc,QAAQ,+BAA2B;AAClE,SAASrB,OAAOsB,OAAO,QAAQ,uBAAmB;AAClD,SAAStB,OAAOuB,YAAY,QAAQ,4BAAwB;AAC5D,SAASvB,OAAOwB,eAAe,QAAQ,gCAA4B;AACnE,SAAStB,QAAQuB,mBAAmB,QAAQ,sCAAkC;AAC9E,SAASC,uBAAuB,QAAQ,kCAA8B;AACtE,SAAS1B,OAAO2B,QAAQ,QAAQ,wBAAoB;AACpD,SAAS3B,OAAO4B,cAAc,QAAQ,8BAA0B;AAChE,SAAS1B,QAAQ2B,cAAc,QAAQ,8BAA0B;AAEjE,cAAc,0BAAsB;AACpC,cAAc,yBAAqB;AACnC,cAAc,0BAAsB;AACpC,cAAc,yBAAqB;AACnC,cAAc,0BAAsB;AAEpC;;;;CAIC,GACD,MAAMC,8BAA8BhC;AAEpC;;;;;;;;;;;;CAYC,GACD,SAASiC;IACP,0EAA0E;IAC1E,2DAA2D;IAC3DlD;IACA,0DAA0D;IAC1DD;IACA,0DAA0D;IAC1DE;IACAE;IACAC;IACA,oBAAoB;IACpBC;IACAC;IACA,wDAAwD;IACxDC;IACA,oEAAoE;IACpE,uDAAuD;IACvDE;IACAC;IACA,0EAA0E;IAC1E,iEAAiE;IACjEE;IACA,wEAAwE;IACxE,uEAAuE;IACvEJ;IACA,uEAAuE;IACvE,cAAc;IACdG;IACA,wEAAwE;IACxE,2EAA2E;IAC3E,sEAAsE;IACtE,2EAA2E;IAC3EG,wBAAwB,IAAME,cAAcmC,GAAG,GAAGC,SAAS;IAC3DvC;IACA,yEAAyE;IACzE,wEAAwE;IACxEX;AACF;AAEA;;;;;;;;;CASC,GACD,OAAO,SAASmD;IACdxD;IACAoD;IACAC;IACA,mEAAmE;IACnE,qEAAqE;IACrE,yDAAyD;IACzDnC;IACAnB,uBAAuB,eAAe;QAAE0D,KAAKvB;IAAW;IACxDnC,uBAAuB,mBAAmB;QAAE0D,KAAKrB;IAAe;IAChE,sEAAsE;IACtE,+DAA+D;IAC/DrC,uBAAuB,uBAAuB;QAAE0D,KAAKtB;IAAkB;IACvE,0EAA0E;IAC1E,yDAAyD;IACzDpC,uBAAuB,uBAAuB;QAAE0D,KAAKnB;IAAkB;IACvEvC,uBAAuB,aAAasB;IACpCtB,uBAAuB,WAAW;QAChC0D,KAAK,CAACC,UAAaA,QAAQC,MAAM,KAAK,QAAQ9B,WAAW6B,WAAW5B,YAAY4B;IAClF;IACA,yEAAyE;IACzE,0EAA0E;IAC1E3D,uBAAuB,iBAAiB;QAAE0D,KAAK7B;IAAkB;IACjE7B,uBAAuB,yBAAyB;QAC9C0D,KAAK,CAACC,SAASE,UACblC,YAAYgC,SAAS;gBAAEG,QAAQC,QAAQC,OAAO,CAAC;oBAAEC,OAAOC,OAAOL,QAAQC,MAAM,CAAC,QAAQ;gBAAE;YAAG;IAC/F;IACA9D,uBAAuB,yBAAyB;QAC9C0D,KAAK,CAACC,SAASE,UACb7B,YAAY2B,SAAS;gBAAEG,QAAQC,QAAQC,OAAO,CAAC;oBAAEC,OAAOC,OAAOL,QAAQC,MAAM,CAAC,QAAQ;gBAAE;YAAG;IAC/F;IACA,yEAAyE;IACzE,yEAAyE;IACzE,WAAW;IACX9D,uBAAuB,sBAAsB;QAC3C0D,KAAK,CAACC,SAASE,UACbd,gBAAgBY,SAAS;gBAAEG,QAAQC,QAAQC,OAAO,CAAC;oBAAEC,OAAOC,OAAOL,QAAQC,MAAM,CAAC,QAAQ;gBAAE;YAAG;IACnG;IACA,wEAAwE;IACxE,8DAA8D;IAC9D9D,uBAAuB,iBAAiB;QACtC0D,KAAK,CAACC,SAASE,UACbrC,YAAYmC,SAAS;gBAAEG,QAAQC,QAAQC,OAAO,CAAC;oBAAEC,OAAOC,OAAOL,QAAQC,MAAM,CAAC,QAAQ;gBAAE;YAAG;IAC/F;IACA9D,uBAAuB,yBAAyB;QAC9C0D,KAAK,CAACC,SAASE,UACbjC,YAAY+B,SAAS;gBAAEG,QAAQC,QAAQC,OAAO,CAAC;oBAAEC,OAAOC,OAAOL,QAAQC,MAAM,CAAC,QAAQ;gBAAE;YAAG;IAC/F;IACA,yEAAyE;IACzE,2EAA2E;IAC3E,iCAAiC;IACjC9D,uBAAuBE,mBAAmB;QAAEwD,KAAKhC;IAAc;IAC/D,2EAA2E;IAC3E,2EAA2E;IAC3E,uEAAuE;IACvE1B,uBAAuBiD,yBAAyB;QAAES,KAAKV;IAAoB;IAC3E,kEAAkE;IAClE,mEAAmE;IACnEhD,uBAAuB,gBAAgB;QAAE0D,KAAKxB;IAAgB;IAC9D,sEAAsE;IACtE,0EAA0E;IAC1E,qDAAqD;IACrDlC,uBAAuB,yBAAyB;QAAE0D,KAAKzB;IAAoB;IAC3EjC,uBAAuB,sBAAsB;QAAE0D,KAAKP;IAAe;IACnEnD,uBAAuB,sBAAsB;QAAE0D,KAAKN;IAAe;IACnEpD,uBAAuB,YAAY;QAAE0D,KAAKb;IAAQ;IAClD,wEAAwE;IACxE,gEAAgE;IAChE7C,uBAAuB,iBAAiB;QAAE0D,KAAKZ;IAAa;IAC5D9C,uBAAuB,aAAa;QAAE0D,KAAKR;IAAS;IACpD,wEAAwE;IACxE,oEAAoE;IACpE,+CAA+C;IAC/ClD,uBAAuB,gBAAgB;QAAE0D,KAAKlB;IAAW;IACzDxC,uBAAuB,uBAAuB;QAAE0D,KAAKjB;IAAiB;IACtEzC,uBAAuB,iBAAiB;QAAE0D,KAAKf;IAAY;IAC3D3C,uBAAuB,oBAAoB;QAAE0D,KAAKhB;IAAe;IACjE,wEAAwE;IACxE,qEAAqE;IACrE,uEAAuE;IACvE1C,uBAAuB,oBAAoB;QAAE0D,KAAKd;IAAe;AACnE"}
+{"version":3,"sources":["../../../../../../libs/plugins/ai/src/lib/server.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { registerPluginApiRoute } from '@aglyn/aglyn/server'\nimport { registerAiDeclarations } from './declarations'\nimport { AI_JOBS_BEAT_PATH } from './jobs/ai-jobs-beat'\nimport { registerAiJobPlan } from './jobs/ai-job-plan-step'\nimport { registerAiJobsPause } from './jobs/ai-jobs-pause'\nimport { registerAiComponentJob } from './jobs/ai-job-component-step'\nimport { registerAiCrmJob } from './jobs/ai-job-crm-step'\nimport { registerAiLayoutJob } from './jobs/ai-job-layout-step'\nimport { registerAiTemplateJob } from './jobs/ai-job-template-step'\nimport { registerAiExperimentJob } from './jobs/ai-job-experiment-step'\nimport { registerAiFormJob } from './jobs/ai-job-form-step'\nimport { registerAiPageJob } from './jobs/ai-job-page-step'\nimport { registerAiProductsJob } from './jobs/ai-job-products-step'\nimport { registerAiEmailJob } from './jobs/ai-job-email-step'\nimport { registerAiCampaignJob } from './jobs/ai-job-campaign-step'\nimport { registerAiSiteJob } from './jobs/ai-job-site-step'\nimport { registerAiWorkflowJob } from './jobs/ai-job-workflow-step'\nimport { registerAiInsightJob } from './jobs/ai-job-insight-step'\nimport { registerAiFigureReaders } from './insights/ai-figure-readers'\nimport { registerAiTextGenerator } from './server/plugin-text-generation'\nimport { firebaseAdmin } from '@aglyn/tenant-data-admin/server/firebase-admin'\nimport { ensureFirstPartyAiProviders } from './providers/registry'\nimport { aiAssistHandler } from './server/ai-assist'\nimport { GET as aiCrmAnswer } from './server/ai-crm-answer'\nimport { POST as runAiJobsBeat } from './server/ai-jobs-beat-route'\nimport { POST as cancelAiJob } from './server/ai-jobs-cancel'\nimport { GET as aiJobEvents } from './server/ai-jobs-events-route'\nimport { POST as createAiSiteBatch } from './server/ai-jobs-batch'\nimport { GET as listAiJobs, POST as createAiJob } from './server/ai-jobs-route'\nimport { POST as resumeAiJob } from './server/ai-jobs-resume'\nimport { POST as aiGenerateComponent } from './server/ai-generate-component'\nimport { POST as applyAiSeoAudit } from './server/ai-seo-apply'\nimport { POST as assistChat } from './server/assist-chat'\nimport { POST as assistEditApplied } from './server/assist-edit-applied'\nimport { POST as assistFeedback } from './server/assist-feedback'\nimport { PATCH as aiHostPermissions } from './server/ai-host-permissions'\nimport { GET as aiAdminOrg } from './server/ai-admin-org'\nimport { GET as aiAdminOrgsSpend } from './server/ai-admin-orgs-spend'\nimport { GET as aiAdminSignals } from './server/ai-admin-signals'\nimport { GET as aiAdminUser } from './server/ai-admin-user'\nimport { POST as aiAdminOverage } from './server/ai-admin-overage'\nimport { GET as aiUsage } from './server/ai-usage'\nimport { GET as aiAllotments } from './server/ai-allotments'\nimport { GET as aiInsightAnswer } from './server/ai-insight-answer'\nimport { POST as runAiInsightsDigest } from './server/ai-insight-digest-route'\nimport { AI_INSIGHTS_DIGEST_PATH } from './insights/ai-insight-digest'\nimport { GET as aiModels } from './server/ai-models'\nimport { GET as billingCredits } from './server/billing-credits'\nimport { POST as billingOverage } from './server/billing-overage'\n\nexport * from './providers/contract'\nexport * from './providers/catalog'\nexport * from './providers/registry'\nexport * from './providers/routing'\nexport * from './runtime/ai-runtime'\n\n/**\n * The two first-party adapters, registered once per process. A marketplace\n * plugin registers its own against `AI_PROVIDER_CONTRACT` from its own\n * entry and never touches this.\n */\nconst registerFirstPartyProviders = ensureFirstPartyAiProviders\n\n/**\n * Every job kind this plugin runs beyond the three the machine registers\n * itself (AGL-3025). Each is a CALL, never an import made for what the\n * module does as it loads: this package declares only this file\n * effect-ful, so a bundler honoring `sideEffects` deletes an import whose\n * exports go unused — and a step registered that way ran in every spec and\n * in neither app. `registrations-survive-a-bundler.spec.ts` holds this.\n *\n * The console surface is the only caller (AGL-3026): its doors run a job's\n * first step inline, and its beat runs every step after it. The tenant app\n * loads no server surface of this plugin at all, so nothing that serves a\n * published site can reach a provider.\n */\nfunction registerAiJobKinds(): void {\n  // The workspace AI pause the machine asks before it claims any step, so a\n  // paused workspace's queued jobs spend nothing (AGL-3037).\n  registerAiJobsPause()\n  // The plan step every planned kind runs first (AGL-2935).\n  registerAiJobPlan()\n  // Components, layouts and templates (AGL-2908, AGL-2909).\n  registerAiComponentJob()\n  registerAiLayoutJob()\n  registerAiTemplateJob()\n  // Forms (AGL-2913).\n  registerAiExperimentJob()\n  registerAiFormJob()\n  // Pages, with the least time one pass needs (AGL-2907).\n  registerAiPageJob()\n  // Email designs and campaigns, whose drafts the email and marketing\n  // plugins write on the resource-draft seam (AGL-2912).\n  registerAiEmailJob()\n  registerAiCampaignJob()\n  // Automations drafted from a description, and explained, whose drafts the\n  // workflows plugin writes on the resource-draft seam (AGL-2919).\n  registerAiWorkflowJob()\n  // Product copy, and a store's products, categories and discounts from a\n  // brief, as proposals the commerce plugin's surfaces apply (AGL-2916).\n  registerAiProductsJob()\n  // The site scaffold, which builds a whole site through the steps above\n  // (AGL-2911).\n  registerAiSiteJob()\n  // Insights (AGL-2915): a question about a site's figures, answered from\n  // tables the figure readers return, and the weekly digest. The readers for\n  // the platform's own records — page views, forms, datasets — are this\n  // plugin's; every other plugin registers its own from its console surface.\n  registerAiFigureReaders(() => firebaseAdmin.app().firestore())\n  registerAiInsightJob()\n  // CRM by AI (AGL-2917): a record's summary and next step, an email draft\n  // and an import's column matches, read through the CRM's facts readers.\n  registerAiCrmJob()\n}\n\n/**\n * The console-side API (AGL-2939): every AI door, under the `ai` and\n * `assist` prefixes the plugin owns. The URLs the panel and the besigner\n * call are unchanged — `/api/assist/chat`, `/api/ai/assist`,\n * `/api/ai/jobs` — because the dispatcher serves them from the registry\n * exactly where the named routes used to; the two billing doors and the\n * per-member usage read (`ai/usage`) live under the plugin's own prefix.\n * The jobs beat is the one path outside them, for the reason\n * `AI_JOBS_BEAT_PATH` gives.\n */\nexport function registerAiConsoleApi(): void {\n  registerAiDeclarations()\n  registerFirstPartyProviders()\n  registerAiJobKinds()\n  // This plugin as the workspace's text generator on the core's seam\n  // (AGL-3324): another plugin drafts a paragraph through it under the\n  // generation doors' own rules, metered as a text job is.\n  registerAiTextGenerator()\n  registerPluginApiRoute('assist/chat', { web: assistChat })\n  registerPluginApiRoute('assist/feedback', { web: assistFeedback })\n  // The applied-edit record (AGL-2906): counts of a proposal the author\n  // applied in their editor, written to the site's activity log.\n  registerPluginApiRoute('assist/edit-applied', { web: assistEditApplied })\n  // A collaborator's AI toggles on one site (AGL-2927), set from the site's\n  // collaborators card through this plugin's column there.\n  registerPluginApiRoute('ai/host-permissions', { web: aiHostPermissions })\n  registerPluginApiRoute('ai/assist', aiAssistHandler)\n  registerPluginApiRoute('ai/jobs', {\n    web: (request) => (request.method === 'GET' ? listAiJobs(request) : createAiJob(request)),\n  })\n  // The agency batch (AGL-2911): one brief, one `site` job per named site,\n  // under one batch id. Before the `:jobId` routes, which it is not one of.\n  registerPluginApiRoute('ai/jobs/batch', { web: createAiSiteBatch })\n  registerPluginApiRoute('ai/jobs/:jobId/cancel', {\n    web: (request, context) =>\n      cancelAiJob(request, { params: Promise.resolve({ jobId: String(context.params['jobId']) }) }),\n  })\n  registerPluginApiRoute('ai/jobs/:jobId/resume', {\n    web: (request, context) =>\n      resumeAiJob(request, { params: Promise.resolve({ jobId: String(context.params['jobId']) }) }),\n  })\n  // An insight job's answer (AGL-2915), which is kept off the job document\n  // and served only to the member who asked, or for a digest to the site's\n  // members.\n  registerPluginApiRoute('ai/insights/:jobId', {\n    web: (request, context) =>\n      aiInsightAnswer(request, { params: Promise.resolve({ jobId: String(context.params['jobId']) }) }),\n  })\n  // A CRM job's answer (AGL-2917), which is kept off the job document and\n  // served only to a member the CRM still lets read the record.\n  registerPluginApiRoute('ai/crm/:jobId', {\n    web: (request, context) =>\n      aiCrmAnswer(request, { params: Promise.resolve({ jobId: String(context.params['jobId']) }) }),\n  })\n  registerPluginApiRoute('ai/jobs/:jobId/events', {\n    web: (request, context) =>\n      aiJobEvents(request, { params: Promise.resolve({ jobId: String(context.params['jobId']) }) }),\n  })\n  // The jobs beat (AGL-3026): every step the doors leave queued, run every\n  // minute by the console's scheduler on the cron secret, on the one surface\n  // that holds the provider's key.\n  registerPluginApiRoute(AI_JOBS_BEAT_PATH, { web: runAiJobsBeat })\n  // The weekly insights (AGL-2915): Monday's digests made for the people who\n  // asked for them, and delivered once the beat has written them. Beside the\n  // beat under `/api/admin/`, where the console's scheduled sweeps live.\n  registerPluginApiRoute(AI_INSIGHTS_DIGEST_PATH, { web: runAiInsightsDigest })\n  // A site SEO audit's \"Apply all\" (AGL-2910): content fixes as new\n  // unpublished versions, listing values staged for their SEO cards.\n  registerPluginApiRoute('ai/seo/apply', { web: applyAiSeoAudit })\n  // Save the selection as a reusable component, with AI (AGL-2908): the\n  // second entry point of the component job, from the besigner's Attributes\n  // panel. It proposes, and the person's Apply writes.\n  registerPluginApiRoute('ai/generate/component', { web: aiGenerateComponent })\n  registerPluginApiRoute('ai/billing/credits', { web: billingCredits })\n  registerPluginApiRoute('ai/billing/overage', { web: billingOverage })\n  registerPluginApiRoute('ai/usage', { web: aiUsage })\n  // The allotments a manager sets, and the options the model switch lists\n  // (AGL-2942). One handler answers the allotments' GET and POST.\n  registerPluginApiRoute('ai/allotments', { web: aiAllotments })\n  registerPluginApiRoute('ai/models', { web: aiModels })\n  // The staff doors (AGL-2928, AGL-2930, AGL-2252): one org's AI in full,\n  // one account's usage across its workspaces, and the fleet's Assist\n  // signals behind the Assist signal staff page.\n  registerPluginApiRoute('ai/admin/org', { web: aiAdminOrg })\n  registerPluginApiRoute('ai/admin/orgs-spend', { web: aiAdminOrgsSpend })\n  registerPluginApiRoute('ai/admin/user', { web: aiAdminUser })\n  registerPluginApiRoute('ai/admin/signals', { web: aiAdminSignals })\n  // One workspace's overage standing and the four acts staff have over it\n  // (AGL-3011): the ceiling override, lifting a pause — the only way a\n  // dispute pause comes off — and resetting the step. Every act audited.\n  registerPluginApiRoute('ai/admin/overage', { web: aiAdminOverage })\n}\n\n// Type-only (AGL-3080): the plugin's entitlement keys, declared by module\n// augmentation, for every program that loads this entry point.\nexport type { aiPlanEntitlements } from './plan-entitlements'\n"],"names":["registerPluginApiRoute","registerAiDeclarations","AI_JOBS_BEAT_PATH","registerAiJobPlan","registerAiJobsPause","registerAiComponentJob","registerAiCrmJob","registerAiLayoutJob","registerAiTemplateJob","registerAiExperimentJob","registerAiFormJob","registerAiPageJob","registerAiProductsJob","registerAiEmailJob","registerAiCampaignJob","registerAiSiteJob","registerAiWorkflowJob","registerAiInsightJob","registerAiFigureReaders","registerAiTextGenerator","firebaseAdmin","ensureFirstPartyAiProviders","aiAssistHandler","GET","aiCrmAnswer","POST","runAiJobsBeat","cancelAiJob","aiJobEvents","createAiSiteBatch","listAiJobs","createAiJob","resumeAiJob","aiGenerateComponent","applyAiSeoAudit","assistChat","assistEditApplied","assistFeedback","PATCH","aiHostPermissions","aiAdminOrg","aiAdminOrgsSpend","aiAdminSignals","aiAdminUser","aiAdminOverage","aiUsage","aiAllotments","aiInsightAnswer","runAiInsightsDigest","AI_INSIGHTS_DIGEST_PATH","aiModels","billingCredits","billingOverage","registerFirstPartyProviders","registerAiJobKinds","app","firestore","registerAiConsoleApi","web","request","method","context","params","Promise","resolve","jobId","String"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED,SAASA,sBAAsB,QAAQ,sBAAqB;AAC5D,SAASC,sBAAsB,QAAQ,oBAAgB;AACvD,SAASC,iBAAiB,QAAQ,yBAAqB;AACvD,SAASC,iBAAiB,QAAQ,6BAAyB;AAC3D,SAASC,mBAAmB,QAAQ,0BAAsB;AAC1D,SAASC,sBAAsB,QAAQ,kCAA8B;AACrE,SAASC,gBAAgB,QAAQ,4BAAwB;AACzD,SAASC,mBAAmB,QAAQ,+BAA2B;AAC/D,SAASC,qBAAqB,QAAQ,iCAA6B;AACnE,SAASC,uBAAuB,QAAQ,mCAA+B;AACvE,SAASC,iBAAiB,QAAQ,6BAAyB;AAC3D,SAASC,iBAAiB,QAAQ,6BAAyB;AAC3D,SAASC,qBAAqB,QAAQ,iCAA6B;AACnE,SAASC,kBAAkB,QAAQ,8BAA0B;AAC7D,SAASC,qBAAqB,QAAQ,iCAA6B;AACnE,SAASC,iBAAiB,QAAQ,6BAAyB;AAC3D,SAASC,qBAAqB,QAAQ,iCAA6B;AACnE,SAASC,oBAAoB,QAAQ,gCAA4B;AACjE,SAASC,uBAAuB,QAAQ,kCAA8B;AACtE,SAASC,uBAAuB,QAAQ,qCAAiC;AACzE,SAASC,aAAa,QAAQ,iDAAgD;AAC9E,SAASC,2BAA2B,QAAQ,0BAAsB;AAClE,SAASC,eAAe,QAAQ,wBAAoB;AACpD,SAASC,OAAOC,WAAW,QAAQ,4BAAwB;AAC3D,SAASC,QAAQC,aAAa,QAAQ,iCAA6B;AACnE,SAASD,QAAQE,WAAW,QAAQ,6BAAyB;AAC7D,SAASJ,OAAOK,WAAW,QAAQ,mCAA+B;AAClE,SAASH,QAAQI,iBAAiB,QAAQ,4BAAwB;AAClE,SAASN,OAAOO,UAAU,EAAEL,QAAQM,WAAW,QAAQ,4BAAwB;AAC/E,SAASN,QAAQO,WAAW,QAAQ,6BAAyB;AAC7D,SAASP,QAAQQ,mBAAmB,QAAQ,oCAAgC;AAC5E,SAASR,QAAQS,eAAe,QAAQ,2BAAuB;AAC/D,SAAST,QAAQU,UAAU,QAAQ,0BAAsB;AACzD,SAASV,QAAQW,iBAAiB,QAAQ,kCAA8B;AACxE,SAASX,QAAQY,cAAc,QAAQ,8BAA0B;AACjE,SAASC,SAASC,iBAAiB,QAAQ,kCAA8B;AACzE,SAAShB,OAAOiB,UAAU,QAAQ,2BAAuB;AACzD,SAASjB,OAAOkB,gBAAgB,QAAQ,kCAA8B;AACtE,SAASlB,OAAOmB,cAAc,QAAQ,+BAA2B;AACjE,SAASnB,OAAOoB,WAAW,QAAQ,4BAAwB;AAC3D,SAASlB,QAAQmB,cAAc,QAAQ,+BAA2B;AAClE,SAASrB,OAAOsB,OAAO,QAAQ,uBAAmB;AAClD,SAAStB,OAAOuB,YAAY,QAAQ,4BAAwB;AAC5D,SAASvB,OAAOwB,eAAe,QAAQ,gCAA4B;AACnE,SAAStB,QAAQuB,mBAAmB,QAAQ,sCAAkC;AAC9E,SAASC,uBAAuB,QAAQ,kCAA8B;AACtE,SAAS1B,OAAO2B,QAAQ,QAAQ,wBAAoB;AACpD,SAAS3B,OAAO4B,cAAc,QAAQ,8BAA0B;AAChE,SAAS1B,QAAQ2B,cAAc,QAAQ,8BAA0B;AAEjE,cAAc,0BAAsB;AACpC,cAAc,yBAAqB;AACnC,cAAc,0BAAsB;AACpC,cAAc,yBAAqB;AACnC,cAAc,0BAAsB;AAEpC;;;;CAIC,GACD,MAAMC,8BAA8BhC;AAEpC;;;;;;;;;;;;CAYC,GACD,SAASiC;IACP,0EAA0E;IAC1E,2DAA2D;IAC3DlD;IACA,0DAA0D;IAC1DD;IACA,0DAA0D;IAC1DE;IACAE;IACAC;IACA,oBAAoB;IACpBC;IACAC;IACA,wDAAwD;IACxDC;IACA,oEAAoE;IACpE,uDAAuD;IACvDE;IACAC;IACA,0EAA0E;IAC1E,iEAAiE;IACjEE;IACA,wEAAwE;IACxE,uEAAuE;IACvEJ;IACA,uEAAuE;IACvE,cAAc;IACdG;IACA,wEAAwE;IACxE,2EAA2E;IAC3E,sEAAsE;IACtE,2EAA2E;IAC3EG,wBAAwB,IAAME,cAAcmC,GAAG,GAAGC,SAAS;IAC3DvC;IACA,yEAAyE;IACzE,wEAAwE;IACxEX;AACF;AAEA;;;;;;;;;CASC,GACD,OAAO,SAASmD;IACdxD;IACAoD;IACAC;IACA,mEAAmE;IACnE,qEAAqE;IACrE,yDAAyD;IACzDnC;IACAnB,uBAAuB,eAAe;QAAE0D,KAAKvB;IAAW;IACxDnC,uBAAuB,mBAAmB;QAAE0D,KAAKrB;IAAe;IAChE,sEAAsE;IACtE,+DAA+D;IAC/DrC,uBAAuB,uBAAuB;QAAE0D,KAAKtB;IAAkB;IACvE,0EAA0E;IAC1E,yDAAyD;IACzDpC,uBAAuB,uBAAuB;QAAE0D,KAAKnB;IAAkB;IACvEvC,uBAAuB,aAAasB;IACpCtB,uBAAuB,WAAW;QAChC0D,KAAK,CAACC,UAAaA,QAAQC,MAAM,KAAK,QAAQ9B,WAAW6B,WAAW5B,YAAY4B;IAClF;IACA,yEAAyE;IACzE,0EAA0E;IAC1E3D,uBAAuB,iBAAiB;QAAE0D,KAAK7B;IAAkB;IACjE7B,uBAAuB,yBAAyB;QAC9C0D,KAAK,CAACC,SAASE,UACblC,YAAYgC,SAAS;gBAAEG,QAAQC,QAAQC,OAAO,CAAC;oBAAEC,OAAOC,OAAOL,QAAQC,MAAM,CAAC,QAAQ;gBAAE;YAAG;IAC/F;IACA9D,uBAAuB,yBAAyB;QAC9C0D,KAAK,CAACC,SAASE,UACb7B,YAAY2B,SAAS;gBAAEG,QAAQC,QAAQC,OAAO,CAAC;oBAAEC,OAAOC,OAAOL,QAAQC,MAAM,CAAC,QAAQ;gBAAE;YAAG;IAC/F;IACA,yEAAyE;IACzE,yEAAyE;IACzE,WAAW;IACX9D,uBAAuB,sBAAsB;QAC3C0D,KAAK,CAACC,SAASE,UACbd,gBAAgBY,SAAS;gBAAEG,QAAQC,QAAQC,OAAO,CAAC;oBAAEC,OAAOC,OAAOL,QAAQC,MAAM,CAAC,QAAQ;gBAAE;YAAG;IACnG;IACA,wEAAwE;IACxE,8DAA8D;IAC9D9D,uBAAuB,iBAAiB;QACtC0D,KAAK,CAACC,SAASE,UACbrC,YAAYmC,SAAS;gBAAEG,QAAQC,QAAQC,OAAO,CAAC;oBAAEC,OAAOC,OAAOL,QAAQC,MAAM,CAAC,QAAQ;gBAAE;YAAG;IAC/F;IACA9D,uBAAuB,yBAAyB;QAC9C0D,KAAK,CAACC,SAASE,UACbjC,YAAY+B,SAAS;gBAAEG,QAAQC,QAAQC,OAAO,CAAC;oBAAEC,OAAOC,OAAOL,QAAQC,MAAM,CAAC,QAAQ;gBAAE;YAAG;IAC/F;IACA,yEAAyE;IACzE,2EAA2E;IAC3E,iCAAiC;IACjC9D,uBAAuBE,mBAAmB;QAAEwD,KAAKhC;IAAc;IAC/D,2EAA2E;IAC3E,2EAA2E;IAC3E,uEAAuE;IACvE1B,uBAAuBiD,yBAAyB;QAAES,KAAKV;IAAoB;IAC3E,kEAAkE;IAClE,mEAAmE;IACnEhD,uBAAuB,gBAAgB;QAAE0D,KAAKxB;IAAgB;IAC9D,sEAAsE;IACtE,0EAA0E;IAC1E,qDAAqD;IACrDlC,uBAAuB,yBAAyB;QAAE0D,KAAKzB;IAAoB;IAC3EjC,uBAAuB,sBAAsB;QAAE0D,KAAKP;IAAe;IACnEnD,uBAAuB,sBAAsB;QAAE0D,KAAKN;IAAe;IACnEpD,uBAAuB,YAAY;QAAE0D,KAAKb;IAAQ;IAClD,wEAAwE;IACxE,gEAAgE;IAChE7C,uBAAuB,iBAAiB;QAAE0D,KAAKZ;IAAa;IAC5D9C,uBAAuB,aAAa;QAAE0D,KAAKR;IAAS;IACpD,wEAAwE;IACxE,oEAAoE;IACpE,+CAA+C;IAC/ClD,uBAAuB,gBAAgB;QAAE0D,KAAKlB;IAAW;IACzDxC,uBAAuB,uBAAuB;QAAE0D,KAAKjB;IAAiB;IACtEzC,uBAAuB,iBAAiB;QAAE0D,KAAKf;IAAY;IAC3D3C,uBAAuB,oBAAoB;QAAE0D,KAAKhB;IAAe;IACjE,wEAAwE;IACxE,qEAAqE;IACrE,uEAAuE;IACvE1C,uBAAuB,oBAAoB;QAAE0D,KAAKd;IAAe;AACnE"}

package/src/lib/testing/stand-in-automation-index.d.ts

@@ -0,0 +1,20 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+/** Registers all three, reading through `firestore`. */
+export declare function standInAutomationIndexes(firestore: FirebaseFirestore.Firestore): void;
+/** Forgets all three, so the next spec starts with no plugin keeping automations. */
+export declare function removeStandInAutomationIndexes(): void;

package/src/lib/testing/stand-in-automation-index.js

@@ -0,0 +1,102 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ import { registerPluginRecordIndex } from "@aglyn/aglyn/plugin-manager/plugin-record-index";
+import { unregisterPluginServices } from "@aglyn/aglyn/plugin-manager/plugin-services";
+/**
+ * The workflow, webhook and action indexes the plugin that keeps a site's
+ * automations publishes (AGL-3080), stood in over a spec's own Firestore
+ * double — this plugin may not load the workflows plugin that registers the
+ * real ones. It answers in the shape the workflows plugin's
+ * `automation-record-index.ts` documents: live records only, an unnamed
+ * workflow or webhook left out, an unnamed action named by its id, and a
+ * webhook's direction and switch but never its URL or secret. What the
+ * workflows plugin itself answers is held in its own spec.
+ */ const OWNER = 'workflows';
+const COLLECTION = {
+    workflow: 'workflows',
+    webhook: 'webhooks',
+    action: 'actions'
+};
+const str = (value)=>typeof value === 'string' ? value.trim() : '';
+function record(kind, id, data) {
+    var _data_trigger;
+    if (!data || data['deletedAt'] != null) return null;
+    const name = str(data['name']);
+    const steps = Array.isArray(data['steps']) ? data['steps'] : [];
+    if (kind === 'action') {
+        var _data_trigger1;
+        return {
+            id,
+            name: name || id,
+            facts: {
+                trigger: (_data_trigger1 = data['trigger']) != null ? _data_trigger1 : null,
+                steps,
+                enabled: data['enabled'] !== false
+            }
+        };
+    }
+    if (!name) return null;
+    if (kind === 'webhook') {
+        return {
+            id,
+            name,
+            facts: {
+                direction: data['direction'],
+                enabled: data['enabled'] !== false
+            }
+        };
+    }
+    return {
+        id,
+        name,
+        facts: {
+            steps,
+            returnValue: str(data['returnValue']) || null,
+            trigger: (_data_trigger = data['trigger']) != null ? _data_trigger : null
+        }
+    };
+}
+/** Registers all three, reading through `firestore`. */ export function standInAutomationIndexes(firestore) {
+    for (const kind of Object.keys(COLLECTION)){
+        const site = (hostId)=>firestore.collection('hosts').doc(hostId).collection(COLLECTION[kind]);
+        registerPluginRecordIndex(kind, {
+            async list ({ hostId, limit }) {
+                if (!hostId) return {
+                    records: [],
+                    truncated: false
+                };
+                const snapshot = await site(hostId).limit(limit + 1).get();
+                const records = snapshot.docs.map((doc)=>record(kind, doc.id, doc.data())).filter((one)=>one !== null);
+                return {
+                    records: records.slice(0, limit),
+                    truncated: snapshot.docs.length > limit
+                };
+            },
+            async get ({ hostId, id }) {
+                if (!hostId) return null;
+                const snapshot = await site(hostId).doc(id).get();
+                return snapshot.exists ? record(kind, snapshot.id, snapshot.data()) : null;
+            }
+        }, {
+            pluginId: OWNER
+        });
+    }
+}
+/** Forgets all three, so the next spec starts with no plugin keeping automations. */ export function removeStandInAutomationIndexes() {
+    unregisterPluginServices(OWNER);
+}
+
+//# sourceMappingURL=stand-in-automation-index.js.map

package/src/lib/testing/stand-in-automation-index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../libs/plugins/ai/src/lib/testing/stand-in-automation-index.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport {\n  registerPluginRecordIndex,\n  type PluginIndexedRecord,\n} from '@aglyn/aglyn/plugin-manager/plugin-record-index'\nimport { unregisterPluginServices } from '@aglyn/aglyn/plugin-manager/plugin-services'\n\n/**\n * The workflow, webhook and action indexes the plugin that keeps a site's\n * automations publishes (AGL-3080), stood in over a spec's own Firestore\n * double — this plugin may not load the workflows plugin that registers the\n * real ones. It answers in the shape the workflows plugin's\n * `automation-record-index.ts` documents: live records only, an unnamed\n * workflow or webhook left out, an unnamed action named by its id, and a\n * webhook's direction and switch but never its URL or secret. What the\n * workflows plugin itself answers is held in its own spec.\n */\n\nconst OWNER = 'workflows'\n\ntype Kind = 'workflow' | 'webhook' | 'action'\n\nconst COLLECTION: Record<Kind, string> = { workflow: 'workflows', webhook: 'webhooks', action: 'actions' }\n\nconst str = (value: unknown): string => (typeof value === 'string' ? value.trim() : '')\n\nfunction record(kind: Kind, id: string, data: Record<string, unknown> | undefined): PluginIndexedRecord | null {\n  if (!data || data['deletedAt'] != null) return null\n  const name = str(data['name'])\n  const steps = Array.isArray(data['steps']) ? data['steps'] : []\n  if (kind === 'action') {\n    return { id, name: name || id, facts: { trigger: data['trigger'] ?? null, steps, enabled: data['enabled'] !== false } }\n  }\n  if (!name) return null\n  if (kind === 'webhook') {\n    return { id, name, facts: { direction: data['direction'], enabled: data['enabled'] !== false } }\n  }\n  return { id, name, facts: { steps, returnValue: str(data['returnValue']) || null, trigger: data['trigger'] ?? null } }\n}\n\n/** Registers all three, reading through `firestore`. */\nexport function standInAutomationIndexes(firestore: FirebaseFirestore.Firestore): void {\n  for (const kind of Object.keys(COLLECTION) as Kind[]) {\n    const site = (hostId: string) => firestore.collection('hosts').doc(hostId).collection(COLLECTION[kind])\n    registerPluginRecordIndex(\n      kind,\n      {\n        async list({ hostId, limit }) {\n          if (!hostId) return { records: [], truncated: false }\n          const snapshot = await site(hostId).limit(limit + 1).get()\n          const records = snapshot.docs\n            .map((doc) => record(kind, doc.id, doc.data()))\n            .filter((one): one is PluginIndexedRecord => one !== null)\n          return { records: records.slice(0, limit), truncated: snapshot.docs.length > limit }\n        },\n        async get({ hostId, id }) {\n          if (!hostId) return null\n          const snapshot = await site(hostId).doc(id).get()\n          return snapshot.exists ? record(kind, snapshot.id, snapshot.data()) : null\n        },\n      },\n      { pluginId: OWNER },\n    )\n  }\n}\n\n/** Forgets all three, so the next spec starts with no plugin keeping automations. */\nexport function removeStandInAutomationIndexes(): void {\n  unregisterPluginServices(OWNER)\n}\n"],"names":["registerPluginRecordIndex","unregisterPluginServices","OWNER","COLLECTION","workflow","webhook","action","str","value","trim","record","kind","id","data","name","steps","Array","isArray","facts","trigger","enabled","direction","returnValue","standInAutomationIndexes","firestore","Object","keys","site","hostId","collection","doc","list","limit","records","truncated","snapshot","get","docs","map","filter","one","slice","length","exists","pluginId","removeStandInAutomationIndexes"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED,SACEA,yBAAyB,QAEpB,kDAAiD;AACxD,SAASC,wBAAwB,QAAQ,8CAA6C;AAEtF;;;;;;;;;CASC,GAED,MAAMC,QAAQ;AAId,MAAMC,aAAmC;IAAEC,UAAU;IAAaC,SAAS;IAAYC,QAAQ;AAAU;AAEzG,MAAMC,MAAM,CAACC,QAA4B,OAAOA,UAAU,WAAWA,MAAMC,IAAI,KAAK;AAEpF,SAASC,OAAOC,IAAU,EAAEC,EAAU,EAAEC,IAAyC;QAWYA;IAV3F,IAAI,CAACA,QAAQA,IAAI,CAAC,YAAY,IAAI,MAAM,OAAO;IAC/C,MAAMC,OAAOP,IAAIM,IAAI,CAAC,OAAO;IAC7B,MAAME,QAAQC,MAAMC,OAAO,CAACJ,IAAI,CAAC,QAAQ,IAAIA,IAAI,CAAC,QAAQ,GAAG,EAAE;IAC/D,IAAIF,SAAS,UAAU;YAC4BE;QAAjD,OAAO;YAAED;YAAIE,MAAMA,QAAQF;YAAIM,OAAO;gBAAEC,OAAO,GAAEN,iBAAAA,IAAI,CAAC,UAAU,YAAfA,iBAAmB;gBAAME;gBAAOK,SAASP,IAAI,CAAC,UAAU,KAAK;YAAM;QAAE;IACxH;IACA,IAAI,CAACC,MAAM,OAAO;IAClB,IAAIH,SAAS,WAAW;QACtB,OAAO;YAAEC;YAAIE;YAAMI,OAAO;gBAAEG,WAAWR,IAAI,CAAC,YAAY;gBAAEO,SAASP,IAAI,CAAC,UAAU,KAAK;YAAM;QAAE;IACjG;IACA,OAAO;QAAED;QAAIE;QAAMI,OAAO;YAAEH;YAAOO,aAAaf,IAAIM,IAAI,CAAC,cAAc,KAAK;YAAMM,OAAO,GAAEN,gBAAAA,IAAI,CAAC,UAAU,YAAfA,gBAAmB;QAAK;IAAE;AACvH;AAEA,sDAAsD,GACtD,OAAO,SAASU,yBAAyBC,SAAsC;IAC7E,KAAK,MAAMb,QAAQc,OAAOC,IAAI,CAACvB,YAAuB;QACpD,MAAMwB,OAAO,CAACC,SAAmBJ,UAAUK,UAAU,CAAC,SAASC,GAAG,CAACF,QAAQC,UAAU,CAAC1B,UAAU,CAACQ,KAAK;QACtGX,0BACEW,MACA;YACE,MAAMoB,MAAK,EAAEH,MAAM,EAAEI,KAAK,EAAE;gBAC1B,IAAI,CAACJ,QAAQ,OAAO;oBAAEK,SAAS,EAAE;oBAAEC,WAAW;gBAAM;gBACpD,MAAMC,WAAW,MAAMR,KAAKC,QAAQI,KAAK,CAACA,QAAQ,GAAGI,GAAG;gBACxD,MAAMH,UAAUE,SAASE,IAAI,CAC1BC,GAAG,CAAC,CAACR,MAAQpB,OAAOC,MAAMmB,IAAIlB,EAAE,EAAEkB,IAAIjB,IAAI,KAC1C0B,MAAM,CAAC,CAACC,MAAoCA,QAAQ;gBACvD,OAAO;oBAAEP,SAASA,QAAQQ,KAAK,CAAC,GAAGT;oBAAQE,WAAWC,SAASE,IAAI,CAACK,MAAM,GAAGV;gBAAM;YACrF;YACA,MAAMI,KAAI,EAAER,MAAM,EAAEhB,EAAE,EAAE;gBACtB,IAAI,CAACgB,QAAQ,OAAO;gBACpB,MAAMO,WAAW,MAAMR,KAAKC,QAAQE,GAAG,CAAClB,IAAIwB,GAAG;gBAC/C,OAAOD,SAASQ,MAAM,GAAGjC,OAAOC,MAAMwB,SAASvB,EAAE,EAAEuB,SAAStB,IAAI,MAAM;YACxE;QACF,GACA;YAAE+B,UAAU1C;QAAM;IAEtB;AACF;AAEA,mFAAmF,GACnF,OAAO,SAAS2C;IACd5C,yBAAyBC;AAC3B"}

package/src/lib/testing/stand-in-dataset-index.d.ts

@@ -0,0 +1,20 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+/** Registers it, reading through `firestore`. */
+export declare function standInDatasetIndex(firestore: FirebaseFirestore.Firestore): void;
+/** Forgets it, so the next spec starts with nothing keeping datasets. */
+export declare function removeStandInDatasetIndex(): void;

package/src/lib/testing/stand-in-dataset-index.js

@@ -0,0 +1,80 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ import { effectiveDatasetModel } from "@aglyn/aglyn/app-utils/dataset-models";
+import { datasetDisplayName } from "@aglyn/aglyn/app-utils/datasets";
+import { visibleToHost } from "@aglyn/aglyn/app-utils/scope-tokens";
+import { registerPluginRecordIndex } from "@aglyn/aglyn/plugin-manager/plugin-record-index";
+import { unregisterPluginServices } from "@aglyn/aglyn/plugin-manager/plugin-services";
+/**
+ * The `dataset` index the plugin that keeps the workspace's datasets
+ * publishes (AGL-3080), stood in over a spec's own Firestore double — this
+ * plugin may not load the data plugin that registers the real one. It answers
+ * in the shape the data plugin's `dataset-record-index.ts` documents: live
+ * datasets only, narrowed to a site to those shared with it, each with its
+ * fields (`{ id, name, type }`, in the dataset page's order) and its
+ * `visibleTo`. What the data plugin itself answers is held in its own spec.
+ */ const OWNER = 'data';
+const str = (value)=>typeof value === 'string' ? value.trim() : '';
+function record(id, data) {
+    if (!data || data['deletedAt'] != null) return null;
+    const model = effectiveDatasetModel(data);
+    return {
+        id,
+        name: datasetDisplayName(data) || id,
+        facts: {
+            fields: model.order.map((fieldId)=>{
+                var _ref;
+                var _model_fields_fieldId, _model_fields_fieldId1;
+                return {
+                    id: fieldId,
+                    name: str((_model_fields_fieldId = model.fields[fieldId]) == null ? void 0 : _model_fields_fieldId.name) || fieldId,
+                    type: String((_ref = (_model_fields_fieldId1 = model.fields[fieldId]) == null ? void 0 : _model_fields_fieldId1.type) != null ? _ref : 'text')
+                };
+            }),
+            visibleTo: Array.isArray(data['visibleTo']) ? data['visibleTo'] : []
+        }
+    };
+}
+/** Registers it, reading through `firestore`. */ export function standInDatasetIndex(firestore) {
+    const datasets = (orgId)=>firestore.collection('orgs').doc(orgId).collection('datasets');
+    const shared = (one, hostId)=>one && (!hostId || visibleToHost(one.facts['visibleTo'], hostId)) ? one : null;
+    registerPluginRecordIndex('dataset', {
+        async list ({ orgId, hostId, limit }) {
+            if (!orgId) return {
+                records: [],
+                truncated: false
+            };
+            const snapshot = await datasets(orgId).get();
+            const records = snapshot.docs.map((doc)=>shared(record(doc.id, doc.data()), hostId)).filter((one)=>one !== null);
+            return {
+                records: records.slice(0, limit),
+                truncated: records.length > limit
+            };
+        },
+        async get ({ orgId, hostId, id }) {
+            if (!orgId) return null;
+            const snapshot = await datasets(orgId).doc(id).get();
+            return snapshot.exists ? shared(record(snapshot.id, snapshot.data()), hostId) : null;
+        }
+    }, {
+        pluginId: OWNER
+    });
+}
+/** Forgets it, so the next spec starts with nothing keeping datasets. */ export function removeStandInDatasetIndex() {
+    unregisterPluginServices(OWNER);
+}
+
+//# sourceMappingURL=stand-in-dataset-index.js.map

package/src/lib/testing/stand-in-dataset-index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../libs/plugins/ai/src/lib/testing/stand-in-dataset-index.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { effectiveDatasetModel, type DatasetModel } from '@aglyn/aglyn/app-utils/dataset-models'\nimport { datasetDisplayName } from '@aglyn/aglyn/app-utils/datasets'\nimport { visibleToHost } from '@aglyn/aglyn/app-utils/scope-tokens'\nimport {\n  registerPluginRecordIndex,\n  type PluginIndexedRecord,\n} from '@aglyn/aglyn/plugin-manager/plugin-record-index'\nimport { unregisterPluginServices } from '@aglyn/aglyn/plugin-manager/plugin-services'\n\n/**\n * The `dataset` index the plugin that keeps the workspace's datasets\n * publishes (AGL-3080), stood in over a spec's own Firestore double — this\n * plugin may not load the data plugin that registers the real one. It answers\n * in the shape the data plugin's `dataset-record-index.ts` documents: live\n * datasets only, narrowed to a site to those shared with it, each with its\n * fields (`{ id, name, type }`, in the dataset page's order) and its\n * `visibleTo`. What the data plugin itself answers is held in its own spec.\n */\n\nconst OWNER = 'data'\n\nconst str = (value: unknown): string => (typeof value === 'string' ? value.trim() : '')\n\nfunction record(id: string, data: Record<string, unknown> | undefined): PluginIndexedRecord | null {\n  if (!data || data['deletedAt'] != null) return null\n  const model = effectiveDatasetModel(data as { model?: DatasetModel; fields?: string[] })\n  return {\n    id,\n    name: datasetDisplayName(data) || id,\n    facts: {\n      fields: model.order.map((fieldId) => ({\n        id: fieldId,\n        name: str(model.fields[fieldId]?.name) || fieldId,\n        type: String(model.fields[fieldId]?.type ?? 'text'),\n      })),\n      visibleTo: Array.isArray(data['visibleTo']) ? data['visibleTo'] : [],\n    },\n  }\n}\n\n/** Registers it, reading through `firestore`. */\nexport function standInDatasetIndex(firestore: FirebaseFirestore.Firestore): void {\n  const datasets = (orgId: string) => firestore.collection('orgs').doc(orgId).collection('datasets')\n  const shared = (one: PluginIndexedRecord | null, hostId: string | null | undefined) =>\n    one && (!hostId || visibleToHost(one.facts['visibleTo'] as string[], hostId)) ? one : null\n  registerPluginRecordIndex(\n    'dataset',\n    {\n      async list({ orgId, hostId, limit }) {\n        if (!orgId) return { records: [], truncated: false }\n        const snapshot = await datasets(orgId).get()\n        const records = snapshot.docs\n          .map((doc) => shared(record(doc.id, doc.data()), hostId))\n          .filter((one): one is PluginIndexedRecord => one !== null)\n        return { records: records.slice(0, limit), truncated: records.length > limit }\n      },\n      async get({ orgId, hostId, id }) {\n        if (!orgId) return null\n        const snapshot = await datasets(orgId).doc(id).get()\n        return snapshot.exists ? shared(record(snapshot.id, snapshot.data()), hostId) : null\n      },\n    },\n    { pluginId: OWNER },\n  )\n}\n\n/** Forgets it, so the next spec starts with nothing keeping datasets. */\nexport function removeStandInDatasetIndex(): void {\n  unregisterPluginServices(OWNER)\n}\n"],"names":["effectiveDatasetModel","datasetDisplayName","visibleToHost","registerPluginRecordIndex","unregisterPluginServices","OWNER","str","value","trim","record","id","data","model","name","facts","fields","order","map","fieldId","type","String","visibleTo","Array","isArray","standInDatasetIndex","firestore","datasets","orgId","collection","doc","shared","one","hostId","list","limit","records","truncated","snapshot","get","docs","filter","slice","length","exists","pluginId","removeStandInDatasetIndex"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED,SAASA,qBAAqB,QAA2B,wCAAuC;AAChG,SAASC,kBAAkB,QAAQ,kCAAiC;AACpE,SAASC,aAAa,QAAQ,sCAAqC;AACnE,SACEC,yBAAyB,QAEpB,kDAAiD;AACxD,SAASC,wBAAwB,QAAQ,8CAA6C;AAEtF;;;;;;;;CAQC,GAED,MAAMC,QAAQ;AAEd,MAAMC,MAAM,CAACC,QAA4B,OAAOA,UAAU,WAAWA,MAAMC,IAAI,KAAK;AAEpF,SAASC,OAAOC,EAAU,EAAEC,IAAyC;IACnE,IAAI,CAACA,QAAQA,IAAI,CAAC,YAAY,IAAI,MAAM,OAAO;IAC/C,MAAMC,QAAQZ,sBAAsBW;IACpC,OAAO;QACLD;QACAG,MAAMZ,mBAAmBU,SAASD;QAClCI,OAAO;YACLC,QAAQH,MAAMI,KAAK,CAACC,GAAG,CAAC,CAACC;;oBAEbN,uBACGA;uBAHuB;oBACpCF,IAAIQ;oBACJL,MAAMP,KAAIM,wBAAAA,MAAMG,MAAM,CAACG,QAAQ,qBAArBN,sBAAuBC,IAAI,KAAKK;oBAC1CC,MAAMC,gBAAOR,yBAAAA,MAAMG,MAAM,CAACG,QAAQ,qBAArBN,uBAAuBO,IAAI,mBAAI;gBAC9C;;YACAE,WAAWC,MAAMC,OAAO,CAACZ,IAAI,CAAC,YAAY,IAAIA,IAAI,CAAC,YAAY,GAAG,EAAE;QACtE;IACF;AACF;AAEA,+CAA+C,GAC/C,OAAO,SAASa,oBAAoBC,SAAsC;IACxE,MAAMC,WAAW,CAACC,QAAkBF,UAAUG,UAAU,CAAC,QAAQC,GAAG,CAACF,OAAOC,UAAU,CAAC;IACvF,MAAME,SAAS,CAACC,KAAiCC,SAC/CD,OAAQ,CAAA,CAACC,UAAU9B,cAAc6B,IAAIjB,KAAK,CAAC,YAAY,EAAckB,OAAM,IAAKD,MAAM;IACxF5B,0BACE,WACA;QACE,MAAM8B,MAAK,EAAEN,KAAK,EAAEK,MAAM,EAAEE,KAAK,EAAE;YACjC,IAAI,CAACP,OAAO,OAAO;gBAAEQ,SAAS,EAAE;gBAAEC,WAAW;YAAM;YACnD,MAAMC,WAAW,MAAMX,SAASC,OAAOW,GAAG;YAC1C,MAAMH,UAAUE,SAASE,IAAI,CAC1BtB,GAAG,CAAC,CAACY,MAAQC,OAAOrB,OAAOoB,IAAInB,EAAE,EAAEmB,IAAIlB,IAAI,KAAKqB,SAChDQ,MAAM,CAAC,CAACT,MAAoCA,QAAQ;YACvD,OAAO;gBAAEI,SAASA,QAAQM,KAAK,CAAC,GAAGP;gBAAQE,WAAWD,QAAQO,MAAM,GAAGR;YAAM;QAC/E;QACA,MAAMI,KAAI,EAAEX,KAAK,EAAEK,MAAM,EAAEtB,EAAE,EAAE;YAC7B,IAAI,CAACiB,OAAO,OAAO;YACnB,MAAMU,WAAW,MAAMX,SAASC,OAAOE,GAAG,CAACnB,IAAI4B,GAAG;YAClD,OAAOD,SAASM,MAAM,GAAGb,OAAOrB,OAAO4B,SAAS3B,EAAE,EAAE2B,SAAS1B,IAAI,KAAKqB,UAAU;QAClF;IACF,GACA;QAAEY,UAAUvC;IAAM;AAEtB;AAEA,uEAAuE,GACvE,OAAO,SAASwC;IACdzC,yBAAyBC;AAC3B"}

package/src/lib/testing/stand-in-list-send-time.d.ts

@@ -0,0 +1,4 @@
+/** Registers the reader, reading through `firestore`. */
+export declare function standInListSendTime(firestore: FirebaseFirestore.Firestore): void;
+/** Forgets it, so the next spec starts with nothing keeping sends. */
+export declare function removeStandInListSendTime(): void;

package/src/lib/testing/stand-in-list-send-time.js

@@ -0,0 +1,77 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ import { registerPluginRecordFactsReader } from "@aglyn/aglyn/plugin-manager/plugin-record-facts";
+import { unregisterPluginServices } from "@aglyn/aglyn/plugin-manager/plugin-services";
+import { AI_LIST_SEND_TIME_RESOURCE } from "../jobs/ai-email-bindings.js";
+/**
+ * A list's send time, as the plugin that keeps a site's sends answers it
+ * (AGL-3080), stood in over a spec's own Firestore double — this plugin may
+ * not load the marketing plugin that registers the real reader. It answers in
+ * the shape that reader documents, `{ label, measured }`, from the sends to
+ * the list AS the site asked about. Which slot the real rule picks, and why,
+ * is held in the marketing plugin's own spec; this answers the slot of the
+ * first measurable send, with three of them the least it suggests from.
+ */ const OWNER = 'stand-in-send-history';
+const WEEKDAYS = [
+    'Sunday',
+    'Monday',
+    'Tuesday',
+    'Wednesday',
+    'Thursday',
+    'Friday',
+    'Saturday'
+];
+const millisOf = (value)=>value instanceof Date ? value.getTime() : typeof value === 'number' ? value : 0;
+/** Registers the reader, reading through `firestore`. */ export function standInListSendTime(firestore) {
+    registerPluginRecordFactsReader(AI_LIST_SEND_TIME_RESOURCE, {
+        async read ({ orgId, hostId, id }) {
+            if (!hostId) return {
+                ok: false,
+                status: 400,
+                error: 'A send time is read for one site.'
+            };
+            const snapshot = await firestore.collection('orgs').doc(orgId).collection('campaigns').where('hostId', '==', hostId).where('listId', '==', id).where('status', '==', 'sent').get();
+            const measured = snapshot.docs.filter((doc)=>{
+                var _doc_get;
+                return Number((_doc_get = doc.get('stats.delivered')) != null ? _doc_get : 0) >= 20;
+            });
+            if (measured.length < 3) return {
+                ok: true,
+                facts: {
+                    label: null,
+                    measured: 0
+                }
+            };
+            const at = new Date(millisOf(measured[0].get('sentAt')));
+            const hour = at.getUTCHours();
+            const label = `${WEEKDAYS[at.getUTCDay()]}s around ${hour % 12 || 12} ${hour < 12 ? 'AM' : 'PM'} (UTC)`;
+            return {
+                ok: true,
+                facts: {
+                    label,
+                    measured: measured.length
+                }
+            };
+        }
+    }, {
+        pluginId: OWNER
+    });
+}
+/** Forgets it, so the next spec starts with nothing keeping sends. */ export function removeStandInListSendTime() {
+    unregisterPluginServices(OWNER);
+}
+
+//# sourceMappingURL=stand-in-list-send-time.js.map

package/src/lib/testing/stand-in-list-send-time.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../libs/plugins/ai/src/lib/testing/stand-in-list-send-time.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\nimport { registerPluginRecordFactsReader } from '@aglyn/aglyn/plugin-manager/plugin-record-facts'\nimport { unregisterPluginServices } from '@aglyn/aglyn/plugin-manager/plugin-services'\nimport { AI_LIST_SEND_TIME_RESOURCE } from '../jobs/ai-email-bindings'\n\n/**\n * A list's send time, as the plugin that keeps a site's sends answers it\n * (AGL-3080), stood in over a spec's own Firestore double — this plugin may\n * not load the marketing plugin that registers the real reader. It answers in\n * the shape that reader documents, `{ label, measured }`, from the sends to\n * the list AS the site asked about. Which slot the real rule picks, and why,\n * is held in the marketing plugin's own spec; this answers the slot of the\n * first measurable send, with three of them the least it suggests from.\n */\n\nconst OWNER = 'stand-in-send-history'\n\nconst WEEKDAYS = ['Sunday', 'Monday', 'Tuesday', 'Wednesday', 'Thursday', 'Friday', 'Saturday']\n\nconst millisOf = (value: unknown): number =>\n  value instanceof Date ? value.getTime() : typeof value === 'number' ? value : 0\n\n/** Registers the reader, reading through `firestore`. */\nexport function standInListSendTime(firestore: FirebaseFirestore.Firestore): void {\n  registerPluginRecordFactsReader(\n    AI_LIST_SEND_TIME_RESOURCE,\n    {\n      async read({ orgId, hostId, id }) {\n        if (!hostId) return { ok: false, status: 400, error: 'A send time is read for one site.' }\n        const snapshot = await firestore\n          .collection('orgs')\n          .doc(orgId)\n          .collection('campaigns')\n          .where('hostId', '==', hostId)\n          .where('listId', '==', id)\n          .where('status', '==', 'sent')\n          .get()\n        const measured = snapshot.docs.filter((doc) => Number(doc.get('stats.delivered') ?? 0) >= 20)\n        if (measured.length < 3) return { ok: true, facts: { label: null, measured: 0 } }\n        const at = new Date(millisOf(measured[0].get('sentAt')))\n        const hour = at.getUTCHours()\n        const label = `${WEEKDAYS[at.getUTCDay()]}s around ${hour % 12 || 12} ${hour < 12 ? 'AM' : 'PM'} (UTC)`\n        return { ok: true, facts: { label, measured: measured.length } }\n      },\n    },\n    { pluginId: OWNER },\n  )\n}\n\n/** Forgets it, so the next spec starts with nothing keeping sends. */\nexport function removeStandInListSendTime(): void {\n  unregisterPluginServices(OWNER)\n}\n"],"names":["registerPluginRecordFactsReader","unregisterPluginServices","AI_LIST_SEND_TIME_RESOURCE","OWNER","WEEKDAYS","millisOf","value","Date","getTime","standInListSendTime","firestore","read","orgId","hostId","id","ok","status","error","snapshot","collection","doc","where","get","measured","docs","filter","Number","length","facts","label","at","hour","getUTCHours","getUTCDay","pluginId","removeStandInListSendTime"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GACD,SAASA,+BAA+B,QAAQ,kDAAiD;AACjG,SAASC,wBAAwB,QAAQ,8CAA6C;AACtF,SAASC,0BAA0B,QAAQ,+BAA2B;AAEtE;;;;;;;;CAQC,GAED,MAAMC,QAAQ;AAEd,MAAMC,WAAW;IAAC;IAAU;IAAU;IAAW;IAAa;IAAY;IAAU;CAAW;AAE/F,MAAMC,WAAW,CAACC,QAChBA,iBAAiBC,OAAOD,MAAME,OAAO,KAAK,OAAOF,UAAU,WAAWA,QAAQ;AAEhF,uDAAuD,GACvD,OAAO,SAASG,oBAAoBC,SAAsC;IACxEV,gCACEE,4BACA;QACE,MAAMS,MAAK,EAAEC,KAAK,EAAEC,MAAM,EAAEC,EAAE,EAAE;YAC9B,IAAI,CAACD,QAAQ,OAAO;gBAAEE,IAAI;gBAAOC,QAAQ;gBAAKC,OAAO;YAAoC;YACzF,MAAMC,WAAW,MAAMR,UACpBS,UAAU,CAAC,QACXC,GAAG,CAACR,OACJO,UAAU,CAAC,aACXE,KAAK,CAAC,UAAU,MAAMR,QACtBQ,KAAK,CAAC,UAAU,MAAMP,IACtBO,KAAK,CAAC,UAAU,MAAM,QACtBC,GAAG;YACN,MAAMC,WAAWL,SAASM,IAAI,CAACC,MAAM,CAAC,CAACL;oBAAeA;uBAAPM,QAAON,WAAAA,IAAIE,GAAG,CAAC,8BAARF,WAA8B,MAAM;;YAC1F,IAAIG,SAASI,MAAM,GAAG,GAAG,OAAO;gBAAEZ,IAAI;gBAAMa,OAAO;oBAAEC,OAAO;oBAAMN,UAAU;gBAAE;YAAE;YAChF,MAAMO,KAAK,IAAIvB,KAAKF,SAASkB,QAAQ,CAAC,EAAE,CAACD,GAAG,CAAC;YAC7C,MAAMS,OAAOD,GAAGE,WAAW;YAC3B,MAAMH,QAAQ,GAAGzB,QAAQ,CAAC0B,GAAGG,SAAS,GAAG,CAAC,SAAS,EAAEF,OAAO,MAAM,GAAG,CAAC,EAAEA,OAAO,KAAK,OAAO,KAAK,MAAM,CAAC;YACvG,OAAO;gBAAEhB,IAAI;gBAAMa,OAAO;oBAAEC;oBAAON,UAAUA,SAASI,MAAM;gBAAC;YAAE;QACjE;IACF,GACA;QAAEO,UAAU/B;IAAM;AAEtB;AAEA,oEAAoE,GACpE,OAAO,SAASgC;IACdlC,yBAAyBE;AAC3B"}

package/src/lib/testing/stand-in-pipeline-index.d.ts

@@ -0,0 +1,32 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import { type PluginRecordIndexScope } from '@aglyn/aglyn/plugin-manager/plugin-record-index';
+export interface StoodInPipelineIndex {
+    /** Every `list` and `get` asked, in order. */
+    asked: Array<PluginRecordIndexScope & {
+        limit?: number;
+        id?: string;
+    }>;
+}
+/** Registers the index, answering `pipelines` to every site of every org. */
+export declare function standInPipelineIndex(pipelines: ReadonlyArray<{
+    id: string;
+    name: string;
+    stages: ReadonlyArray<Record<string, unknown>>;
+}>): StoodInPipelineIndex;
+/** Forgets it, so the next spec starts with no plugin keeping pipelines. */
+export declare function removeStandInPipelineIndex(): void;