@aglyn/plugins-ai 1.0.0-beta.225 → 1.0.0-beta.227

package/src/lib/jobs/ai-job-auto-confirm.d.ts

@@ -0,0 +1,52 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import type { AiJob } from '../model/ai-jobs.types';
+import { AI_JOB_AUTO_CONFIRM_INPUT } from '../model/ai-site-job';
+/**
+ * A guided site start confirms its own plan (AGL-3594).
+ *
+ * Every planned job stops after its plan for a person to read and confirm it.
+ * For the guided start on a new site that stop read as a step nobody knew they
+ * had to take: a person who had just answered "what is your site?" was shown a
+ * plan to approve, and a site nobody approved was a site never built. So the
+ * guided start asks for its plan to be confirmed for it, with this input, and
+ * the machine confirms it the moment the plan step keeps a plan — the same
+ * confirmation the resume door makes, by the job's creator, with the same
+ * hold on what the plan is estimated to cost.
+ *
+ * Honored only where it is safe to skip the read: a `site` job, on a site
+ * that has published nothing of its own yet — the site the guided start is
+ * offered on. Everywhere else the create door drops it, so a page, a form or
+ * a site job on an established site still waits for a person. What bounds the
+ * spend is unchanged: the plan step's own checks (the Free page cap and the
+ * Free wall among them), the plan's admission, and the reservation each step
+ * takes.
+ */
+/** The job input the guided start sets. */
+export { AI_JOB_AUTO_CONFIRM_INPUT };
+/** Whether a job's plan is confirmed for it when the plan step keeps one. */
+export declare function aiJobAutoConfirms(job: Pick<AiJob, 'kind' | 'inputs'>): boolean;
+/**
+ * A job's inputs as the create door stores them: `autoConfirm` kept only on a
+ * `site` job for a site that publishes nothing of the owner's yet, and dropped
+ * from every other request, which then waits for a person as it always has.
+ */
+export declare function aiJobAdmittedInputs(firestore: FirebaseFirestore.Firestore, request: {
+    kind: string;
+    hostId: string | null;
+    inputs: Record<string, unknown>;
+}): Promise<Record<string, unknown>>;

package/src/lib/jobs/ai-job-auto-confirm.js

@@ -0,0 +1,62 @@
+import { _ as _extends } from "@swc/helpers/_/_extends";
+import { _ as _object_without_properties_loose } from "@swc/helpers/_/_object_without_properties_loose";
+import { _ as _to_property_key } from "@swc/helpers/_/_to_property_key";
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ import { isFirstPublishedRoute } from "@aglyn/aglyn/app-utils/analytics-events";
+import { AI_JOB_AUTO_CONFIRM_INPUT } from "../model/ai-site-job.js";
+/**
+ * A guided site start confirms its own plan (AGL-3594).
+ *
+ * Every planned job stops after its plan for a person to read and confirm it.
+ * For the guided start on a new site that stop read as a step nobody knew they
+ * had to take: a person who had just answered "what is your site?" was shown a
+ * plan to approve, and a site nobody approved was a site never built. So the
+ * guided start asks for its plan to be confirmed for it, with this input, and
+ * the machine confirms it the moment the plan step keeps a plan — the same
+ * confirmation the resume door makes, by the job's creator, with the same
+ * hold on what the plan is estimated to cost.
+ *
+ * Honored only where it is safe to skip the read: a `site` job, on a site
+ * that has published nothing of its own yet — the site the guided start is
+ * offered on. Everywhere else the create door drops it, so a page, a form or
+ * a site job on an established site still waits for a person. What bounds the
+ * spend is unchanged: the plan step's own checks (the Free page cap and the
+ * Free wall among them), the plan's admission, and the reservation each step
+ * takes.
+ */ /** The job input the guided start sets. */ export { AI_JOB_AUTO_CONFIRM_INPUT };
+/** Whether a job's plan is confirmed for it when the plan step keeps one. */ export function aiJobAutoConfirms(job) {
+    var _job_inputs;
+    return job.kind === 'site' && ((_job_inputs = job.inputs) != null ? _job_inputs : {})[AI_JOB_AUTO_CONFIRM_INPUT] === true;
+}
+/**
+ * A job's inputs as the create door stores them: `autoConfirm` kept only on a
+ * `site` job for a site that publishes nothing of the owner's yet, and dropped
+ * from every other request, which then waits for a person as it always has.
+ */ export async function aiJobAdmittedInputs(firestore, request) {
+    if (!(AI_JOB_AUTO_CONFIRM_INPUT in request.inputs)) return request.inputs;
+    const _request_inputs = request.inputs, { [AI_JOB_AUTO_CONFIRM_INPUT]: asked } = _request_inputs, rest = _object_without_properties_loose(_request_inputs, [
+        _to_property_key(AI_JOB_AUTO_CONFIRM_INPUT)
+    ]);
+    if (request.kind !== 'site' || asked !== true || !request.hostId) return rest;
+    const host = await firestore.collection('hosts').doc(request.hostId).get();
+    const blank = host.exists && isFirstPublishedRoute(host.get('screens'), host.get('defaultHomeScreenId'));
+    return blank ? _extends({}, rest, {
+        [AI_JOB_AUTO_CONFIRM_INPUT]: true
+    }) : rest;
+}
+
+//# sourceMappingURL=ai-job-auto-confirm.js.map

package/src/lib/jobs/ai-job-auto-confirm.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../libs/plugins/ai/src/lib/jobs/ai-job-auto-confirm.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { isFirstPublishedRoute } from '@aglyn/aglyn/app-utils/analytics-events'\nimport type { AiJob } from '../model/ai-jobs.types'\nimport { AI_JOB_AUTO_CONFIRM_INPUT } from '../model/ai-site-job'\n\n/**\n * A guided site start confirms its own plan (AGL-3594).\n *\n * Every planned job stops after its plan for a person to read and confirm it.\n * For the guided start on a new site that stop read as a step nobody knew they\n * had to take: a person who had just answered \"what is your site?\" was shown a\n * plan to approve, and a site nobody approved was a site never built. So the\n * guided start asks for its plan to be confirmed for it, with this input, and\n * the machine confirms it the moment the plan step keeps a plan — the same\n * confirmation the resume door makes, by the job's creator, with the same\n * hold on what the plan is estimated to cost.\n *\n * Honored only where it is safe to skip the read: a `site` job, on a site\n * that has published nothing of its own yet — the site the guided start is\n * offered on. Everywhere else the create door drops it, so a page, a form or\n * a site job on an established site still waits for a person. What bounds the\n * spend is unchanged: the plan step's own checks (the Free page cap and the\n * Free wall among them), the plan's admission, and the reservation each step\n * takes.\n */\n\n/** The job input the guided start sets. */\nexport { AI_JOB_AUTO_CONFIRM_INPUT }\n\n/** Whether a job's plan is confirmed for it when the plan step keeps one. */\nexport function aiJobAutoConfirms(job: Pick<AiJob, 'kind' | 'inputs'>): boolean {\n  return job.kind === 'site' && (job.inputs ?? {})[AI_JOB_AUTO_CONFIRM_INPUT] === true\n}\n\n/**\n * A job's inputs as the create door stores them: `autoConfirm` kept only on a\n * `site` job for a site that publishes nothing of the owner's yet, and dropped\n * from every other request, which then waits for a person as it always has.\n */\nexport async function aiJobAdmittedInputs(\n  firestore: FirebaseFirestore.Firestore,\n  request: { kind: string; hostId: string | null; inputs: Record<string, unknown> },\n): Promise<Record<string, unknown>> {\n  if (!(AI_JOB_AUTO_CONFIRM_INPUT in request.inputs)) return request.inputs\n  const { [AI_JOB_AUTO_CONFIRM_INPUT]: asked, ...rest } = request.inputs\n  if (request.kind !== 'site' || asked !== true || !request.hostId) return rest\n  const host = await firestore.collection('hosts').doc(request.hostId).get()\n  const blank =\n    host.exists &&\n    isFirstPublishedRoute(\n      host.get('screens') as Record<string, unknown> | undefined,\n      host.get('defaultHomeScreenId') as string | undefined,\n    )\n  return blank ? { ...rest, [AI_JOB_AUTO_CONFIRM_INPUT]: true } : rest\n}\n"],"names":["isFirstPublishedRoute","AI_JOB_AUTO_CONFIRM_INPUT","aiJobAutoConfirms","job","kind","inputs","aiJobAdmittedInputs","firestore","request","asked","rest","hostId","host","collection","doc","get","blank","exists"],"mappings":";;;AAAA;;;;;;;;;;;;;;;CAeC,GAED,SAASA,qBAAqB,QAAQ,0CAAyC;AAE/E,SAASC,yBAAyB,QAAQ,0BAAsB;AAEhE;;;;;;;;;;;;;;;;;;;CAmBC,GAED,yCAAyC,GACzC,SAASA,yBAAyB,GAAE;AAEpC,2EAA2E,GAC3E,OAAO,SAASC,kBAAkBC,GAAmC;QACpCA;IAA/B,OAAOA,IAAIC,IAAI,KAAK,UAAU,EAACD,cAAAA,IAAIE,MAAM,YAAVF,cAAc,CAAC,EAAE,CAACF,0BAA0B,KAAK;AAClF;AAEA;;;;CAIC,GACD,OAAO,eAAeK,oBACpBC,SAAsC,EACtCC,OAAiF;IAEjF,IAAI,CAAEP,CAAAA,6BAA6BO,QAAQH,MAAM,AAAD,GAAI,OAAOG,QAAQH,MAAM;IACzE,MAAwDG,kBAAAA,QAAQH,MAAM,EAAhE,EAAE,CAACJ,0BAA0B,EAAEQ,KAAK,EAAW,GAAGD,iBAATE,wCAASF;yBAA/CP;;IACT,IAAIO,QAAQJ,IAAI,KAAK,UAAUK,UAAU,QAAQ,CAACD,QAAQG,MAAM,EAAE,OAAOD;IACzE,MAAME,OAAO,MAAML,UAAUM,UAAU,CAAC,SAASC,GAAG,CAACN,QAAQG,MAAM,EAAEI,GAAG;IACxE,MAAMC,QACJJ,KAAKK,MAAM,IACXjB,sBACEY,KAAKG,GAAG,CAAC,YACTH,KAAKG,GAAG,CAAC;IAEb,OAAOC,QAAQ,aAAKN;QAAM,CAACT,0BAA0B,EAAE;SAASS;AAClE"}

package/src/lib/jobs/ai-job-plan-step.d.ts

@@ -84,7 +84,19 @@ export declare const AI_JOB_PLAN_REVIEW_COPY = "The plan is ready. Review what t
  * (AGL-3030). Per workspace and per site, which is why they ride here and
  * never in a system block the platform's cache entry is keyed on.
  */
-export declare function aiJobPlanPrompt(job: Pick<AiJob, 'kind' | 'brief' | 'inputs'>, capabilities?: AiPlanCapabilities | null): string;
+export declare function aiJobPlanPrompt(job: Pick<AiJob, 'kind' | 'brief' | 'inputs'>, capabilities?: AiPlanCapabilities | null, inventory?: AiSiteInventory | null): string;
+/**
+ * What a SITE job's plan is told beside the inventory (AGL-3594): the pages
+ * the site already has and that their addresses are taken, which one — the
+ * untouched starter home — a planned home page at `/` replaces, the Free page
+ * cap and its guidance, and that a plan is an outline.
+ *
+ * A site job only. A new site is born with a published home page at `/`
+ * (AGL-3497), and a plan that did not know it could replace it planned its own
+ * home there and was refused for the clash on every new site. Kept off a page
+ * job's turn, whose length the Free page's wall is proven at.
+ */
+export declare function aiPlanSiteLines(job: Pick<AiJob, 'kind'>, inventory: AiSiteInventory | null, capabilities: AiPlanCapabilities | null): string[];
 /**
  * What a TEMPLATE job's plan is told its creation's `fields` are (AGL-3143
  * §11): the subject's binding tokens, listed so the planner promises only
@@ -107,7 +119,9 @@ export declare function aiPlanTemplateTokenLines(job: Pick<AiJob, 'kind' | 'inpu
 /** A kind that builds only some plans: the creations it makes, and the shapes it refuses. */
 export interface AiJobPlanScope extends AiPlanJobScope {
     /** Why a job of the kind cannot build a plan of this shape; `null` when it can. Pure. */
-    shapeRefusal: (plan: AiBuildPlan) => string | null;
+    shapeRefusal: (plan: AiBuildPlan, options?: {
+        freeTaste?: boolean;
+    }) => string | null;
 }
 /**
  * The kinds whose confirm door builds only some plans (AGL-3030). A page job
@@ -211,6 +225,23 @@ export interface AiJobPlanStepDeps {
     admissionRefusal?: typeof aiJobAdmissionRefusal;
 }
 export declare function createAiJobPlanStep(deps?: AiJobPlanStepDeps): AiJobStepRunner;
+/**
+ * A site job's capabilities on the Free taste (AGL-3594): its plan holds at
+ * most the pages the member asked for within the Free band, which the Free
+ * wall then holds it to, and it changes no theme — the site was born with
+ * one (AGL-3497), and a palette pass is credits the two pages need. Every
+ * other job's capabilities pass through.
+ */
+export declare function aiSitePlanCapabilities(job: Pick<AiJob, 'kind' | 'inputs'>, capabilities: AiPlanCapabilities | null): AiPlanCapabilities | null;
+/**
+ * The model a plan runs on (AGL-3594): the resolved one, except a Free site
+ * plans on its provider's fast tier — an outline the plan rules hold and
+ * re-ask, at a fifth of the balanced tier's output rate. A model the creator
+ * picked by name stays theirs.
+ */
+export declare function aiSitePlanModel(job: Pick<AiJob, 'kind' | 'model'>, resolved: string | undefined, freeTaste: boolean): string | undefined;
+/** The plan's answer ceiling: the step's own, and a scaffold's outline ceiling under it (AGL-3594). */
+export declare function aiSitePlanMaxTokens(job: Pick<AiJob, 'kind'>, model: string, freeTaste: boolean): number;
 export declare const runAiJobPlanStep: AiJobStepRunner;
 /**
  * Registers the plan step every planned kind runs first, with the least time

package/src/lib/jobs/ai-job-plan-step.js

@@ -20,10 +20,15 @@ import { AI_TEMPLATE_SUBJECT_DEFINITIONS, aiTemplateShownTokens } from "../model
 import { AI_JOB_CREATE_KINDS, AI_JOB_CREATE_NOUNS } from "../model/ai-job-creations.js";
 import { AI_PAGE_CREATE_KINDS, aiPagePlanShapeRefusal } from "../model/ai-page-job.js";
 import { aiPlanCapabilitiesForJob, aiPlanCapabilityLines } from "../model/ai-plan-capabilities.js";
-import { AI_SITE_CREATE_KINDS, aiSitePlanShapeRefusal } from "../model/ai-site-job.js";
+import { AI_FREE_SITE_WORST_CASE_CREDITS, AI_SITE_CREATE_KINDS, AI_SITE_FREE_PAGES, AI_SITE_PLAN_MAX_TOKENS, aiFreeSiteSectionsWithin, aiSitePlanShapeRefusal } from "../model/ai-site-job.js";
+import { aiPlanFailureCopy, aiPlanRetryRefusal } from "../model/ai-job-failure-copy.js";
+import { FREE_AI_TASTE_CREDITS_PER_MONTH } from "../plan-entitlements.js";
 import { aiDoctrineSystemBlocks, runValidatedGeneration } from "../runtime/ai-doctrine.js";
-import { AI_STEP_TIERS } from "../providers/catalog.js";
-import { aiPlanEmbedBriefViolations } from "../runtime/ai-doctrine-validators.js";
+import { AI_STEP_TIERS, aiCatalogEntry, aiDefaultModelFor } from "../providers/catalog.js";
+import { AI_FREE_PAGE_WORST_CASE_CREDITS, aiPlanEmbedBriefViolations } from "../runtime/ai-doctrine-validators.js";
+import { assistCreditsFromUsd } from "../usage/assist-credits.js";
+import { ASSIST_RETURNED_USD_FIELD, assistSpendAfterReturnsUsd } from "../usage/assist-credit-returns.js";
+import { freeAccountUsageRef, freeAssistAccount } from "../usage/assist-free-taste.js";
 import { AI_ROUTING_TABLE, aiModelForStep } from "../providers/routing.js";
 import { readSiteInventory } from "../runtime/site-inventory.js";
 import { aiJobAdmissionRefusal } from "./ai-job-admission.js";
@@ -95,7 +100,7 @@ import { AI_JOBS_COLLECTION, registerAiJobPlanStep } from "./ai-jobs.js";
  * inputs and, where the job read them, what it may create on its site
  * (AGL-3030). Per workspace and per site, which is why they ride here and
  * never in a system block the platform's cache entry is keyed on.
- */ export function aiJobPlanPrompt(job, capabilities = null) {
+ */ export function aiJobPlanPrompt(job, capabilities = null, inventory = null) {
     var _job_inputs;
     const lines = [
         `Job kind: ${job.kind}`,
@@ -108,8 +113,46 @@ import { AI_JOBS_COLLECTION, registerAiJobPlanStep } from "./ai-jobs.js";
     }
     if (capabilities) lines.push(...aiPlanCapabilityLines(capabilities));
     lines.push(...aiPlanTemplateTokenLines(job));
+    lines.push(...aiPlanSiteLines(job, inventory, capabilities));
     return lines.join('\n');
 }
+/**
+ * What a SITE job's plan is told beside the inventory (AGL-3594): the pages
+ * the site already has and that their addresses are taken, which one — the
+ * untouched starter home — a planned home page at `/` replaces, the Free page
+ * cap and its guidance, and that a plan is an outline.
+ *
+ * A site job only. A new site is born with a published home page at `/`
+ * (AGL-3497), and a plan that did not know it could replace it planned its own
+ * home there and was refused for the clash on every new site. Kept off a page
+ * job's turn, whose length the Free page's wall is proven at.
+ */ export function aiPlanSiteLines(job, inventory, capabilities) {
+    var _ref;
+    if (job.kind !== 'site') return [];
+    const lines = [];
+    const pages = ((_ref = inventory == null ? void 0 : inventory.screens) != null ? _ref : []).filter((screen)=>!screen.template);
+    const starter = pages.find((screen)=>screen.replaceable);
+    if (pages.length) {
+        lines.push('Pages the site already has; their addresses are taken unless a line says otherwise:');
+        for (const page of pages){
+            lines.push(page.replaceable ? `- ${page.name} at ${page.slug}: the starter home page the site was created with. Plan this site's home page at / and it replaces this one.` : `- ${page.name} at ${page.slug}`);
+        }
+        if (!starter && pages.some((page)=>page.slug.trim() === '/' || page.slug.trim() === '')) {
+            lines.push("The home page at / is the owner's own and stays: give every page you plan another address.");
+        }
+    }
+    const cap = capabilities == null ? void 0 : capabilities.freeSitePages;
+    if (cap !== undefined) {
+        var _ref1;
+        const sections = aiFreeSiteSectionsWithin({
+            layouts: ((_ref1 = inventory == null ? void 0 : inventory.layouts.length) != null ? _ref1 : 0) ? 0 : 1,
+            pages: cap
+        }, FREE_AI_TASTE_CREDITS_PER_MONTH);
+        lines.push(`This is a Free workspace: plan at most ${cap} ${cap === 1 ? 'page' : 'pages'} — the home page at / and the one page the brief most needs, such as services, booking or contact — with at most ${sections} sections across them. Put the contact form on one of them.`);
+    }
+    lines.push("Keep the plan an outline: each page's title, address, a short search title and description, and its sections named in a few words. The build writes the copy.");
+    return lines;
+}
 /**
  * What a TEMPLATE job's plan is told its creation's `fields` are (AGL-3143
  * §11): the subject's binding tokens, listed so the planner promises only
@@ -167,10 +210,12 @@ import { AI_JOBS_COLLECTION, registerAiJobPlanStep } from "./ai-jobs.js";
  * violations the plan's one re-ask names: the players the plan lists against
  * the brief it answers (AGL-3433), which only this step reads beside the plan,
  * and a kind's shape refusal.
- */ function planViolations(scope, brief) {
+ */ function planViolations(scope, brief, freeTaste = false) {
     return (plan)=>{
         var _ref;
-        const message = (_ref = scope == null ? void 0 : scope.shapeRefusal(plan)) != null ? _ref : null;
+        const message = (_ref = scope == null ? void 0 : scope.shapeRefusal(plan, {
+            freeTaste
+        })) != null ? _ref : null;
         return [
             ...aiPlanEmbedBriefViolations(plan, brief),
             ...message ? [
@@ -350,14 +395,17 @@ export function createAiJobPlanStep(deps = {}) {
             })
         ]);
         const scope = (_AI_JOB_PLAN_SCOPES_job_kind = AI_JOB_PLAN_SCOPES[job.kind]) != null ? _AI_JOB_PLAN_SCOPES_job_kind : null;
-        const capabilities = workspace ? aiPlanCapabilitiesForJob(workspace, scope) : null;
+        const capabilities = aiSitePlanCapabilities(job, workspace ? aiPlanCapabilitiesForJob(workspace, scope) : null);
+        const freeTaste = (capabilities == null ? void 0 : capabilities.freeTaste) === true;
+        const site = job.kind === 'site';
         // The model switch's answer for this job (AGL-2942): the creator's pick
         // where the plan, the org restriction and the allotment allowlists allow
         // it, and Auto held to those same lists otherwise. Without a resolver the
-        // doctrine asks the routing table itself.
-        const model = modelFor == null ? void 0 : modelFor('job.plan');
+        // doctrine asks the routing table itself. A Free site plans on its
+        // provider's fast tier (AGL-3594), unless the creator picked a model.
+        const model = aiSitePlanModel(job, modelFor == null ? void 0 : modelFor('job.plan'), freeTaste);
         const route = AI_ROUTING_TABLE['job.plan'];
-        const prompt = aiJobPlanPrompt(job, capabilities);
+        const prompt = aiJobPlanPrompt(job, capabilities, inventory);
         /**
      * The confirm door's answer for this plan, asked before the plan is kept
      * (AGL-3030): the kind's own admission, handed the plan as the resume
@@ -452,9 +500,12 @@ export function createAiJobPlanStep(deps = {}) {
             ],
             tool,
             // The routing ceiling, lowered on a tier too slow to look records up,
-            // answer and ask again inside the least time the step registered.
-            maxTokens: aiJobPlanMaxTokens(resolved)
-        }, route.thinking ? {
+            // answer and ask again inside the least time the step registered; a
+            // scaffold's outline is held to its own, far lower ceiling (AGL-3594).
+            maxTokens: aiSitePlanMaxTokens(job, resolved, freeTaste)
+        }, site ? {
+            thinking: 'off'
+        } : route.thinking ? {
             thinking: route.thinking
         } : {}, route.effort ? {
             effort: route.effort
@@ -462,7 +513,7 @@ export function createAiJobPlanStep(deps = {}) {
             signal
         } : {}, {
             capabilities,
-            extend: planViolations(scope, job.brief)
+            extend: planViolations(scope, job.brief, freeTaste)
         }));
         const spent = _extends({
             outputs: [],
@@ -476,9 +527,34 @@ export function createAiJobPlanStep(deps = {}) {
         if (result.status === 'refused') return _extends({}, spent, {
             refused: true
         });
-        if (result.status === 'needs_input') return _extends({}, spent, {
-            review: aiDoctrineReview(result)
-        });
+        if (result.status === 'needs_input') {
+            // Refused by our own checks, after the one re-ask (AGL-3594): the member
+            // reads a sentence and an action, staff the rules; the machine gives the
+            // credits back (`uncredited`), and on the Free taste Try again says when
+            // it cannot work. Whether the give-back was made is the job's to say
+            // (`refundedCredits`), so this sentence does not promise it.
+            const review = aiDoctrineReview(result);
+            const retryRefusal = freeTaste ? await aiFreePlanRetryRefusal({
+                job,
+                org,
+                firestore,
+                now,
+                site
+            }) : null;
+            return _extends({}, spent, {
+                uncredited: true,
+                review: _extends({}, review, {
+                    message: aiPlanFailureCopy({
+                        kind: job.kind,
+                        codes: result.violations.map((violation)=>violation.code),
+                        refunded: false
+                    }),
+                    detail: review.message
+                }, retryRefusal ? {
+                    retryRefusal
+                } : {})
+            });
+        }
         // Each draft the plan decides is named as the plan is kept, before anything is built (AGL-3079).
         const plan = aiPlanWithDraftIds(job.kind, _extends({}, result.value, {
             status: 'proposed',
@@ -499,6 +575,74 @@ export function createAiJobPlanStep(deps = {}) {
         });
     };
 }
+/**
+ * A site job's capabilities on the Free taste (AGL-3594): its plan holds at
+ * most the pages the member asked for within the Free band, which the Free
+ * wall then holds it to, and it changes no theme — the site was born with
+ * one (AGL-3497), and a palette pass is credits the two pages need. Every
+ * other job's capabilities pass through.
+ */ export function aiSitePlanCapabilities(job, capabilities) {
+    var _job_inputs;
+    if (job.kind !== 'site' || !(capabilities == null ? void 0 : capabilities.freeTaste)) return capabilities;
+    const asked = Number(((_job_inputs = job.inputs) != null ? _job_inputs : {})['pages']);
+    const pages = Number.isInteger(asked) && asked >= AI_SITE_FREE_PAGES.min ? Math.min(asked, AI_SITE_FREE_PAGES.max) : AI_SITE_FREE_PAGES.max;
+    return _extends({}, capabilities, {
+        freeSitePages: pages,
+        create: _extends({}, capabilities.create, {
+            'theme-change': {
+                allowed: false,
+                left: null,
+                reason: "a Free workspace's site start keeps the theme the site was created with"
+            }
+        })
+    });
+}
+/**
+ * The model a plan runs on (AGL-3594): the resolved one, except a Free site
+ * plans on its provider's fast tier — an outline the plan rules hold and
+ * re-ask, at a fifth of the balanced tier's output rate. A model the creator
+ * picked by name stays theirs.
+ */ export function aiSitePlanModel(job, resolved, freeTaste) {
+    var _ref;
+    if (job.kind !== 'site' || !freeTaste) return resolved;
+    const picked = typeof job.model === 'string' ? job.model.trim() : '';
+    if (picked && picked !== 'auto') return resolved;
+    const entry = aiCatalogEntry(resolved != null ? resolved : aiModelForStep('job.plan'));
+    return (_ref = entry ? aiDefaultModelFor(entry.provider, 'fast') : undefined) != null ? _ref : resolved;
+}
+/** The plan's answer ceiling: the step's own, and a scaffold's outline ceiling under it (AGL-3594). */ export function aiSitePlanMaxTokens(job, model, freeTaste) {
+    const ceiling = aiJobPlanMaxTokens(model);
+    if (job.kind !== 'site') return ceiling;
+    return Math.min(ceiling, freeTaste ? AI_SITE_PLAN_MAX_TOKENS.free : AI_SITE_PLAN_MAX_TOKENS.paid);
+}
+/**
+ * Why trying a Free plan again cannot work this month, or `null` (AGL-3594):
+ * the owner's Free allowance left, read off the account month the meter
+ * writes net of give-backs, against what a plan of this kind costs at its
+ * worst. Read before this step is metered, and the machine gives a refused
+ * plan's credits back, so the figure read is the figure left. A read that fails
+ * leaves the button on: the reservation still refuses at the wall.
+ */ async function aiFreePlanRetryRefusal(input) {
+    const account = freeAssistAccount(input.org);
+    if (!(account == null ? void 0 : account.accountUid)) return null;
+    try {
+        // The meter's month key, `YYYY-MM` in UTC (`assistUsageMonth`).
+        const month = input.now.toISOString().slice(0, 7);
+        const snapshot = await freeAccountUsageRef(input.firestore, account.accountUid, month).get();
+        const spent = assistCreditsFromUsd(assistSpendAfterReturnsUsd(snapshot.get('estCostUsd'), snapshot.get(ASSIST_RETURNED_USD_FIELD)));
+        return aiPlanRetryRefusal({
+            creditsLeft: FREE_AI_TASTE_CREDITS_PER_MONTH - spent,
+            planCredits: input.site ? AI_FREE_SITE_WORST_CASE_CREDITS.plan : AI_FREE_PAGE_WORST_CASE_CREDITS.plan
+        });
+    } catch (error) {
+        console.error('ai plan retry allowance read failed', {
+            orgId: input.job.orgId,
+            jobId: input.job.$id,
+            error
+        });
+        return null;
+    }
+}
 export const runAiJobPlanStep = createAiJobPlanStep();
 /**
  * Registers the plan step every planned kind runs first, with the least time