@aglyn/plugins-ai 1.0.0-beta.225 → 1.0.0-beta.227

package/src/lib/plan-entitlements.d.ts

@@ -131,9 +131,9 @@ export declare const ENTERPRISE_ASSIST_CREDITS_PER_MONTH = 116000;
  *  - it is metered per ACCOUNT as well as per workspace, so the three free
  *    workspaces an account may hold (AGL-2265) share one 300-credit
  *    allowance rather than tripling it (`reserveAssistMessage`);
- *  - a fresh account waits `AI_FREE_MIN_ACCOUNT_AGE_HOURS` before it can
- *    spend, and every free request is bounded per IP, per uid and per
- *    account per day;
+ *  - every free request is bounded per IP, per uid and per account per
+ *    day (a minimum account age, `AI_FREE_MIN_ACCOUNT_AGE_HOURS`, is
+ *    available and off by default — AGL-3591);
  *  - a platform-wide daily ceiling on free spend pauses the taste for
  *    everyone until the UTC day rolls, paid workspaces untouched.
  *

package/src/lib/plan-entitlements.js

@@ -78,9 +78,9 @@
  *  - it is metered per ACCOUNT as well as per workspace, so the three free
  *    workspaces an account may hold (AGL-2265) share one 300-credit
  *    allowance rather than tripling it (`reserveAssistMessage`);
- *  - a fresh account waits `AI_FREE_MIN_ACCOUNT_AGE_HOURS` before it can
- *    spend, and every free request is bounded per IP, per uid and per
- *    account per day;
+ *  - every free request is bounded per IP, per uid and per account per
+ *    day (a minimum account age, `AI_FREE_MIN_ACCOUNT_AGE_HOURS`, is
+ *    available and off by default — AGL-3591);
  *  - a platform-wide daily ceiling on free spend pauses the taste for
  *    everyone until the UTC day rolls, paid workspaces untouched.
  *

package/src/lib/plan-entitlements.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../../../libs/plugins/ai/src/lib/plan-entitlements.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n// Types only: the manifest generator loads this module on its own to compile\n// the plan figures, before the catalog file core reads them from exists in\n// its new shape, so nothing here may reach a core module at runtime.\nimport type { OrgPlan } from '@aglyn/aglyn/foundation/definitions/org-billing.types'\nimport type { PluginPlanEntitlementsDeclaration } from '@aglyn/aglyn/plugin-manager/plugin-plan-entitlements'\n\n/**\n * THE AI PLUGIN'S PLAN BAND (AGL-3080): how many AI credits each plan\n * includes a month. Compiled into core's `PLAN_ENTITLEMENTS` by the manifest\n * generator (`register.planEntitlements`), so `/pricing`, the plan comparison\n * and every gate read the same figure they always have; this is where it is\n * written, beside the reasoning that sized it.\n */\ndeclare module '@aglyn/aglyn/plugin-manager/plugin-entitlement-keys' {\n  interface PluginEntitlementQuotas {\n    /**\n     * AI credits per calendar month — the band assist spends against.\n     *\n     * A CREDIT IS A UNIT OF MODEL COST, not a message. One assist action can\n     * cost two orders of magnitude more than another: a question is a few\n     * thousand tokens, while generating a screen carries the node tree, the\n     * component catalog and the theme tokens in, structured markup out, and\n     * iterates. A message allowance would price those the same, so one\n     * workspace's ten screen builds would outspend another's thousand\n     * questions and both would read as \"within allowance\".\n     *\n     * The unit is defined by `ASSIST_CREDIT_COST_USD` and the conversion\n     * lives in `assist-credits.ts`. Only that module turns credits into\n     * dollars; everything a customer sees counts credits, because the dollar\n     * figure behind them is our provider bill and not a price.\n     *\n     * ## HOW THE BAND IS SIZED, and why it is not a share of the price\n     *\n     * A credit is a dollar of provider spend at `ASSIST_CREDIT_COST_USD`, so\n     * the band IS a liability figure: the plan's whole assist give is\n     * `assistCreditsPerMonth / 1000` dollars. Credits past it are not a give\n     * — since AGL-2653 they are SOLD at `extraAssistCreditsUsdPer1k`, unless\n     * the org's `assistOverage.hardCap` asks `reserveAssistMessage` to refuse\n     * at the band instead. Sizing it as a share of the subscription price\n     * says nothing about whether the tier can afford it, because the price is\n     * also carrying storage, bandwidth, form submissions, dataset storage,\n     * API requests, contacts and email.\n     *\n     * So each band is sized against what those SEVEN other terms leave.\n     * Every paid band takes between a quarter and a third of that remainder,\n     * which keeps the tier's worst case positive and keeps the ladder's\n     * shape: the margin each tier holds at 100% of every band stays in\n     * proportion to what it held before assist was sold at all.\n     * `tier-margin-floor.spec.ts` is the model, and it pins both the rule and\n     * the resulting figures.\n     *\n     * The Aglyn AI add-on (AGL-2896) adds `AI_ADDON_CREDITS_PER_MONTH[plan]`\n     * to this band in `resolveOrgEntitlements` — one pool, widened, rather\n     * than a second meter.\n     */\n    assistCreditsPerMonth?: number\n  }\n}\n\n/**\n * AI credits an Enterprise agreement includes per month, before the contract\n * says otherwise.\n *\n * ## Never `UNLIMITED`, and the reason is not stylistic\n *\n * `UNLIMITED` is `Number.POSITIVE_INFINITY`, `JSON.stringify(Infinity)` is\n * `null`, and `Number(null)` is `0`. An unbounded assist band therefore\n * serialises to a band of ZERO through every route that does not also send\n * the explicit flag `restoreQuotaLimit` rebuilds from — which would hand the\n * only customers with a signed contract the one budget that refuses\n * everything. A finite number crosses the wire as itself.\n *\n * The band is also a real liability rather than a capacity we already own.\n * Storage and page views are infrastructure metered into the deal; assist is\n * a per-token charge from a third party, and generative building spends it in\n * units two orders of magnitude apart.\n *\n * ## Why this number\n *\n * Enterprise carries no list price, so the band cannot be sized the way every\n * self-serve tier's is — against what that tier's other cost terms leave out\n * of a known price. It is anchored to the top of the ladder instead: 116,000\n * credits is twice Agency's band, the rule every Enterprise fallback follows\n * since the 2026-09-07 pricing decision (see the `enterprise` row of\n * `PLAN_ENTITLEMENTS`). In cost that is $116 of provider spend a month, or\n * under 9% of any deal priced at or above the self-serve top. A deal below\n * that is sold as Agency, not written as an Enterprise agreement.\n *\n * ## It is a DEFAULT, and a contract raises it\n *\n * `resolveOrgEntitlements` applies a per-org\n * `entitlements.assistCreditsPerMonth` override ahead of this, so a deal that\n * buys more assist buys it on that org without moving the figure every other\n * agreement is measured against — the same mechanism the other contracted\n * bands use.\n */\nexport const ENTERPRISE_ASSIST_CREDITS_PER_MONTH = 116_000\n\n/**\n * The Free AI taste (AGL-2925): the credits a Free workspace draws on each\n * month, behind a hard wall.\n *\n * ## Why it exists\n *\n * So the AI landing pages can say \"generate your first page free\" and mean\n * it. Three hundred credits is one or two generated sections or a handful of\n * copy rewrites — enough to see what the assistant does, not enough to build\n * a site on. The band is a WALL: `PLAN_PRICING.free\n * .extraAssistCreditsUsdPer1k` stays `null`, so `assistBandRefuses` answers\n * true and the reservation refuses at 100% with no overage, no switch and no\n * invoice. Nothing about a Free workspace can produce a charge.\n *\n * ## What it costs, and why that is the number\n *\n * A credit is `ASSIST_CREDIT_COST_USD` of provider spend, so the band costs\n * at most **$0.30 per Free workspace per month** — asserted by\n * `apps/console/specs/tier-margin-floor.spec.ts`. It is the one AI band with\n * no invoice behind it, which is why the same issue closes every multiplier\n * a script could use before the flag flips:\n *\n *  - it is metered per ACCOUNT as well as per workspace, so the three free\n *    workspaces an account may hold (AGL-2265) share one 300-credit\n *    allowance rather than tripling it (`reserveAssistMessage`);\n *  - a fresh account waits `AI_FREE_MIN_ACCOUNT_AGE_HOURS` before it can\n *    spend, and every free request is bounded per IP, per uid and per\n *    account per day;\n *  - a platform-wide daily ceiling on free spend pauses the taste for\n *    everyone until the UTC day rolls, paid workspaces untouched.\n *\n * The account allowance reads THIS constant rather than the workspace's\n * resolved band, because a staff override that widens one workspace's band\n * is a decision about that workspace, not about how much one person may draw\n * across all of theirs.\n */\nexport const FREE_AI_TASTE_CREDITS_PER_MONTH = 300\n\n/** The AI credits each plan includes a month — see the key's own docblock. */\nexport const AI_CREDITS_BY_PLAN: Readonly<Record<OrgPlan, number>> = {\n  // The Free AI taste (AGL-2925): a real band, and a wall. See the constant\n  // for what it buys, what it costs and the precautions that keep one person\n  // from drawing it three times over.\n  free: FREE_AI_TASTE_CREDITS_PER_MONTH,\n  // The first paid rung of the assist ladder (AGL-3203). Starter banded at 0\n  // until 2026-09-20, which put a PAYING workspace below the Free taste's 300\n  // on the one axis a visitor compares straight down the column — the\n  // `/pricing` row read `300 / mo` for Free and `—` for Starter. A paid plan\n  // that includes less of something than the free plan is not a packaging\n  // subtlety; it is the comparison table arguing against the upgrade.\n  //\n  // 750 is deliberately small: 2.5x the taste, enough that the assistant is a\n  // thing the tier HAS rather than a thing it is shown, and $0.75 of provider\n  // spend a month at `ASSIST_CREDIT_COST_USD` against a $16 annual price — a\n  // twentieth of the $8.81 the tier's other metered bands already cost, and\n  // the widest margin on the ladder absorbs it with room left\n  // (`tier-margin-floor.spec.ts` carries the arithmetic).\n  //\n  // It is NOT a wall, unlike Free's: `PLAN_PRICING.starter\n  // .extraAssistCreditsUsdPer1k` is $3.00, so past 750 the tier meters and\n  // bills like every paid plan above it. The two fields move together by rule\n  // — a positive band with no rate beside it is usage past a bound that is\n  // silently free, which `plan-entitlements.spec.ts` forbids.\n  //\n  // `features.aiAssist` is TRUE, and AGL-3203 shipping it false was the\n  // defect AGL-3207 closes. The reasoning then was \"the band is credits, not\n  // the guided rung, exactly as on Free\" — but on Free the band IS spendable,\n  // through `aiGenerative`, which is the door the taste exists for. Starter\n  // carried neither flag, so it was the only row on the ladder sold a band\n  // with nothing to spend it through: 750 credits reachable only by buying\n  // the $9 add-on that was also the only thing that made them usable. \"No\n  // plan bands at zero any more\" was true of the number and false of the\n  // capability.\n  //\n  // It opens `aiAssist` rather than `aiGenerative` because that is the shape\n  // of every paid rung above it — the included band funds the guided\n  // assistant and generation is the add-on. Opening the generative door here\n  // instead would hand the FIRST paid rung a door Pro through Agency have to\n  // buy.\n  //\n  // No cost moves: `tier-margin-floor.spec.ts` already prices this tier's\n  // assist term at 100% burn of the 750 credits, 75¢/mo. A door does not\n  // widen a band; it only makes spend that was already modeled reachable.\n  //\n  // The AI add-on adds `AI_ADDON_CREDITS_PER_MONTH.starter` on top and\n  // switches `aiGenerative` on as well.\n  starter: 750,\n  // $2.75 of provider spend, against the $8.35 the tier's other seven cost\n  // terms leave out of $56. See the key's docblock for why the remainder and\n  // not the price is what sizes this.\n  pro: 2_750,\n  // $7.50, against the $22.69 the other seven terms leave out of $139.\n  business: 7_500,\n  // $10.00, against the $30.62 the other seven terms leave out of $249.\n  scale: 10_000,\n  // $13.00, against the $39.74 the other seven terms leave out of $399 — the\n  // thinnest remainder on the ladder, and the tier that binds the whole\n  // assist ladder's share of it.\n  advanced: 13_000,\n  // $58.00, against the $176.71 the other seven terms leave out of $1,299.\n  agency: 58_000,\n  enterprise: ENTERPRISE_ASSIST_CREDITS_PER_MONTH,\n}\n\n/** The AI plugin's plan figures, for the manifest generator. */\nexport function aiPlanEntitlements(): PluginPlanEntitlementsDeclaration {\n  return {\n    quotas: [\n      {\n        key: 'assistCreditsPerMonth',\n        label: 'AI credits / mo',\n        byPlan: AI_CREDITS_BY_PLAN,\n      },\n    ],\n  }\n}\n"],"names":["ENTERPRISE_ASSIST_CREDITS_PER_MONTH","FREE_AI_TASTE_CREDITS_PER_MONTH","AI_CREDITS_BY_PLAN","free","starter","pro","business","scale","advanced","agency","enterprise","aiPlanEntitlements","quotas","key","label","byPlan"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED,6EAA6E;AAC7E,2EAA2E;AAC3E,qEAAqE;AAyDrE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAoCC,GACD,OAAO,MAAMA,sCAAsC,OAAO;AAE1D;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAmCC,GACD,OAAO,MAAMC,kCAAkC,IAAG;AAElD,4EAA4E,GAC5E,OAAO,MAAMC,qBAAwD;IACnE,0EAA0E;IAC1E,2EAA2E;IAC3E,oCAAoC;IACpCC,MAAMF;IACN,2EAA2E;IAC3E,4EAA4E;IAC5E,oEAAoE;IACpE,2EAA2E;IAC3E,wEAAwE;IACxE,oEAAoE;IACpE,EAAE;IACF,4EAA4E;IAC5E,4EAA4E;IAC5E,2EAA2E;IAC3E,0EAA0E;IAC1E,4DAA4D;IAC5D,wDAAwD;IACxD,EAAE;IACF,yDAAyD;IACzD,yEAAyE;IACzE,4EAA4E;IAC5E,yEAAyE;IACzE,4DAA4D;IAC5D,EAAE;IACF,sEAAsE;IACtE,2EAA2E;IAC3E,4EAA4E;IAC5E,0EAA0E;IAC1E,yEAAyE;IACzE,yEAAyE;IACzE,wEAAwE;IACxE,uEAAuE;IACvE,cAAc;IACd,EAAE;IACF,2EAA2E;IAC3E,mEAAmE;IACnE,2EAA2E;IAC3E,2EAA2E;IAC3E,OAAO;IACP,EAAE;IACF,wEAAwE;IACxE,uEAAuE;IACvE,wEAAwE;IACxE,EAAE;IACF,qEAAqE;IACrE,sCAAsC;IACtCG,SAAS;IACT,yEAAyE;IACzE,2EAA2E;IAC3E,oCAAoC;IACpCC,KAAK;IACL,qEAAqE;IACrEC,UAAU;IACV,sEAAsE;IACtEC,OAAO;IACP,2EAA2E;IAC3E,sEAAsE;IACtE,+BAA+B;IAC/BC,UAAU;IACV,yEAAyE;IACzEC,QAAQ;IACRC,YAAYV;AACd,EAAC;AAED,8DAA8D,GAC9D,OAAO,SAASW;IACd,OAAO;QACLC,QAAQ;YACN;gBACEC,KAAK;gBACLC,OAAO;gBACPC,QAAQb;YACV;SACD;IACH;AACF"}
+{"version":3,"sources":["../../../../../../libs/plugins/ai/src/lib/plan-entitlements.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n// Types only: the manifest generator loads this module on its own to compile\n// the plan figures, before the catalog file core reads them from exists in\n// its new shape, so nothing here may reach a core module at runtime.\nimport type { OrgPlan } from '@aglyn/aglyn/foundation/definitions/org-billing.types'\nimport type { PluginPlanEntitlementsDeclaration } from '@aglyn/aglyn/plugin-manager/plugin-plan-entitlements'\n\n/**\n * THE AI PLUGIN'S PLAN BAND (AGL-3080): how many AI credits each plan\n * includes a month. Compiled into core's `PLAN_ENTITLEMENTS` by the manifest\n * generator (`register.planEntitlements`), so `/pricing`, the plan comparison\n * and every gate read the same figure they always have; this is where it is\n * written, beside the reasoning that sized it.\n */\ndeclare module '@aglyn/aglyn/plugin-manager/plugin-entitlement-keys' {\n  interface PluginEntitlementQuotas {\n    /**\n     * AI credits per calendar month — the band assist spends against.\n     *\n     * A CREDIT IS A UNIT OF MODEL COST, not a message. One assist action can\n     * cost two orders of magnitude more than another: a question is a few\n     * thousand tokens, while generating a screen carries the node tree, the\n     * component catalog and the theme tokens in, structured markup out, and\n     * iterates. A message allowance would price those the same, so one\n     * workspace's ten screen builds would outspend another's thousand\n     * questions and both would read as \"within allowance\".\n     *\n     * The unit is defined by `ASSIST_CREDIT_COST_USD` and the conversion\n     * lives in `assist-credits.ts`. Only that module turns credits into\n     * dollars; everything a customer sees counts credits, because the dollar\n     * figure behind them is our provider bill and not a price.\n     *\n     * ## HOW THE BAND IS SIZED, and why it is not a share of the price\n     *\n     * A credit is a dollar of provider spend at `ASSIST_CREDIT_COST_USD`, so\n     * the band IS a liability figure: the plan's whole assist give is\n     * `assistCreditsPerMonth / 1000` dollars. Credits past it are not a give\n     * — since AGL-2653 they are SOLD at `extraAssistCreditsUsdPer1k`, unless\n     * the org's `assistOverage.hardCap` asks `reserveAssistMessage` to refuse\n     * at the band instead. Sizing it as a share of the subscription price\n     * says nothing about whether the tier can afford it, because the price is\n     * also carrying storage, bandwidth, form submissions, dataset storage,\n     * API requests, contacts and email.\n     *\n     * So each band is sized against what those SEVEN other terms leave.\n     * Every paid band takes between a quarter and a third of that remainder,\n     * which keeps the tier's worst case positive and keeps the ladder's\n     * shape: the margin each tier holds at 100% of every band stays in\n     * proportion to what it held before assist was sold at all.\n     * `tier-margin-floor.spec.ts` is the model, and it pins both the rule and\n     * the resulting figures.\n     *\n     * The Aglyn AI add-on (AGL-2896) adds `AI_ADDON_CREDITS_PER_MONTH[plan]`\n     * to this band in `resolveOrgEntitlements` — one pool, widened, rather\n     * than a second meter.\n     */\n    assistCreditsPerMonth?: number\n  }\n}\n\n/**\n * AI credits an Enterprise agreement includes per month, before the contract\n * says otherwise.\n *\n * ## Never `UNLIMITED`, and the reason is not stylistic\n *\n * `UNLIMITED` is `Number.POSITIVE_INFINITY`, `JSON.stringify(Infinity)` is\n * `null`, and `Number(null)` is `0`. An unbounded assist band therefore\n * serialises to a band of ZERO through every route that does not also send\n * the explicit flag `restoreQuotaLimit` rebuilds from — which would hand the\n * only customers with a signed contract the one budget that refuses\n * everything. A finite number crosses the wire as itself.\n *\n * The band is also a real liability rather than a capacity we already own.\n * Storage and page views are infrastructure metered into the deal; assist is\n * a per-token charge from a third party, and generative building spends it in\n * units two orders of magnitude apart.\n *\n * ## Why this number\n *\n * Enterprise carries no list price, so the band cannot be sized the way every\n * self-serve tier's is — against what that tier's other cost terms leave out\n * of a known price. It is anchored to the top of the ladder instead: 116,000\n * credits is twice Agency's band, the rule every Enterprise fallback follows\n * since the 2026-09-07 pricing decision (see the `enterprise` row of\n * `PLAN_ENTITLEMENTS`). In cost that is $116 of provider spend a month, or\n * under 9% of any deal priced at or above the self-serve top. A deal below\n * that is sold as Agency, not written as an Enterprise agreement.\n *\n * ## It is a DEFAULT, and a contract raises it\n *\n * `resolveOrgEntitlements` applies a per-org\n * `entitlements.assistCreditsPerMonth` override ahead of this, so a deal that\n * buys more assist buys it on that org without moving the figure every other\n * agreement is measured against — the same mechanism the other contracted\n * bands use.\n */\nexport const ENTERPRISE_ASSIST_CREDITS_PER_MONTH = 116_000\n\n/**\n * The Free AI taste (AGL-2925): the credits a Free workspace draws on each\n * month, behind a hard wall.\n *\n * ## Why it exists\n *\n * So the AI landing pages can say \"generate your first page free\" and mean\n * it. Three hundred credits is one or two generated sections or a handful of\n * copy rewrites — enough to see what the assistant does, not enough to build\n * a site on. The band is a WALL: `PLAN_PRICING.free\n * .extraAssistCreditsUsdPer1k` stays `null`, so `assistBandRefuses` answers\n * true and the reservation refuses at 100% with no overage, no switch and no\n * invoice. Nothing about a Free workspace can produce a charge.\n *\n * ## What it costs, and why that is the number\n *\n * A credit is `ASSIST_CREDIT_COST_USD` of provider spend, so the band costs\n * at most **$0.30 per Free workspace per month** — asserted by\n * `apps/console/specs/tier-margin-floor.spec.ts`. It is the one AI band with\n * no invoice behind it, which is why the same issue closes every multiplier\n * a script could use before the flag flips:\n *\n *  - it is metered per ACCOUNT as well as per workspace, so the three free\n *    workspaces an account may hold (AGL-2265) share one 300-credit\n *    allowance rather than tripling it (`reserveAssistMessage`);\n *  - every free request is bounded per IP, per uid and per account per\n *    day (a minimum account age, `AI_FREE_MIN_ACCOUNT_AGE_HOURS`, is\n *    available and off by default — AGL-3591);\n *  - a platform-wide daily ceiling on free spend pauses the taste for\n *    everyone until the UTC day rolls, paid workspaces untouched.\n *\n * The account allowance reads THIS constant rather than the workspace's\n * resolved band, because a staff override that widens one workspace's band\n * is a decision about that workspace, not about how much one person may draw\n * across all of theirs.\n */\nexport const FREE_AI_TASTE_CREDITS_PER_MONTH = 300\n\n/** The AI credits each plan includes a month — see the key's own docblock. */\nexport const AI_CREDITS_BY_PLAN: Readonly<Record<OrgPlan, number>> = {\n  // The Free AI taste (AGL-2925): a real band, and a wall. See the constant\n  // for what it buys, what it costs and the precautions that keep one person\n  // from drawing it three times over.\n  free: FREE_AI_TASTE_CREDITS_PER_MONTH,\n  // The first paid rung of the assist ladder (AGL-3203). Starter banded at 0\n  // until 2026-09-20, which put a PAYING workspace below the Free taste's 300\n  // on the one axis a visitor compares straight down the column — the\n  // `/pricing` row read `300 / mo` for Free and `—` for Starter. A paid plan\n  // that includes less of something than the free plan is not a packaging\n  // subtlety; it is the comparison table arguing against the upgrade.\n  //\n  // 750 is deliberately small: 2.5x the taste, enough that the assistant is a\n  // thing the tier HAS rather than a thing it is shown, and $0.75 of provider\n  // spend a month at `ASSIST_CREDIT_COST_USD` against a $16 annual price — a\n  // twentieth of the $8.81 the tier's other metered bands already cost, and\n  // the widest margin on the ladder absorbs it with room left\n  // (`tier-margin-floor.spec.ts` carries the arithmetic).\n  //\n  // It is NOT a wall, unlike Free's: `PLAN_PRICING.starter\n  // .extraAssistCreditsUsdPer1k` is $3.00, so past 750 the tier meters and\n  // bills like every paid plan above it. The two fields move together by rule\n  // — a positive band with no rate beside it is usage past a bound that is\n  // silently free, which `plan-entitlements.spec.ts` forbids.\n  //\n  // `features.aiAssist` is TRUE, and AGL-3203 shipping it false was the\n  // defect AGL-3207 closes. The reasoning then was \"the band is credits, not\n  // the guided rung, exactly as on Free\" — but on Free the band IS spendable,\n  // through `aiGenerative`, which is the door the taste exists for. Starter\n  // carried neither flag, so it was the only row on the ladder sold a band\n  // with nothing to spend it through: 750 credits reachable only by buying\n  // the $9 add-on that was also the only thing that made them usable. \"No\n  // plan bands at zero any more\" was true of the number and false of the\n  // capability.\n  //\n  // It opens `aiAssist` rather than `aiGenerative` because that is the shape\n  // of every paid rung above it — the included band funds the guided\n  // assistant and generation is the add-on. Opening the generative door here\n  // instead would hand the FIRST paid rung a door Pro through Agency have to\n  // buy.\n  //\n  // No cost moves: `tier-margin-floor.spec.ts` already prices this tier's\n  // assist term at 100% burn of the 750 credits, 75¢/mo. A door does not\n  // widen a band; it only makes spend that was already modeled reachable.\n  //\n  // The AI add-on adds `AI_ADDON_CREDITS_PER_MONTH.starter` on top and\n  // switches `aiGenerative` on as well.\n  starter: 750,\n  // $2.75 of provider spend, against the $8.35 the tier's other seven cost\n  // terms leave out of $56. See the key's docblock for why the remainder and\n  // not the price is what sizes this.\n  pro: 2_750,\n  // $7.50, against the $22.69 the other seven terms leave out of $139.\n  business: 7_500,\n  // $10.00, against the $30.62 the other seven terms leave out of $249.\n  scale: 10_000,\n  // $13.00, against the $39.74 the other seven terms leave out of $399 — the\n  // thinnest remainder on the ladder, and the tier that binds the whole\n  // assist ladder's share of it.\n  advanced: 13_000,\n  // $58.00, against the $176.71 the other seven terms leave out of $1,299.\n  agency: 58_000,\n  enterprise: ENTERPRISE_ASSIST_CREDITS_PER_MONTH,\n}\n\n/** The AI plugin's plan figures, for the manifest generator. */\nexport function aiPlanEntitlements(): PluginPlanEntitlementsDeclaration {\n  return {\n    quotas: [\n      {\n        key: 'assistCreditsPerMonth',\n        label: 'AI credits / mo',\n        byPlan: AI_CREDITS_BY_PLAN,\n      },\n    ],\n  }\n}\n"],"names":["ENTERPRISE_ASSIST_CREDITS_PER_MONTH","FREE_AI_TASTE_CREDITS_PER_MONTH","AI_CREDITS_BY_PLAN","free","starter","pro","business","scale","advanced","agency","enterprise","aiPlanEntitlements","quotas","key","label","byPlan"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED,6EAA6E;AAC7E,2EAA2E;AAC3E,qEAAqE;AAyDrE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAoCC,GACD,OAAO,MAAMA,sCAAsC,OAAO;AAE1D;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAmCC,GACD,OAAO,MAAMC,kCAAkC,IAAG;AAElD,4EAA4E,GAC5E,OAAO,MAAMC,qBAAwD;IACnE,0EAA0E;IAC1E,2EAA2E;IAC3E,oCAAoC;IACpCC,MAAMF;IACN,2EAA2E;IAC3E,4EAA4E;IAC5E,oEAAoE;IACpE,2EAA2E;IAC3E,wEAAwE;IACxE,oEAAoE;IACpE,EAAE;IACF,4EAA4E;IAC5E,4EAA4E;IAC5E,2EAA2E;IAC3E,0EAA0E;IAC1E,4DAA4D;IAC5D,wDAAwD;IACxD,EAAE;IACF,yDAAyD;IACzD,yEAAyE;IACzE,4EAA4E;IAC5E,yEAAyE;IACzE,4DAA4D;IAC5D,EAAE;IACF,sEAAsE;IACtE,2EAA2E;IAC3E,4EAA4E;IAC5E,0EAA0E;IAC1E,yEAAyE;IACzE,yEAAyE;IACzE,wEAAwE;IACxE,uEAAuE;IACvE,cAAc;IACd,EAAE;IACF,2EAA2E;IAC3E,mEAAmE;IACnE,2EAA2E;IAC3E,2EAA2E;IAC3E,OAAO;IACP,EAAE;IACF,wEAAwE;IACxE,uEAAuE;IACvE,wEAAwE;IACxE,EAAE;IACF,qEAAqE;IACrE,sCAAsC;IACtCG,SAAS;IACT,yEAAyE;IACzE,2EAA2E;IAC3E,oCAAoC;IACpCC,KAAK;IACL,qEAAqE;IACrEC,UAAU;IACV,sEAAsE;IACtEC,OAAO;IACP,2EAA2E;IAC3E,sEAAsE;IACtE,+BAA+B;IAC/BC,UAAU;IACV,yEAAyE;IACzEC,QAAQ;IACRC,YAAYV;AACd,EAAC;AAED,8DAA8D,GAC9D,OAAO,SAASW;IACd,OAAO;QACLC,QAAQ;YACN;gBACEC,KAAK;gBACLC,OAAO;gBACPC,QAAQb;YACV;SACD;IACH;AACF"}

package/src/lib/plugin.js

@@ -19,6 +19,7 @@ import { AiSaveAsComponent } from "./components/ai-save-as-component.component.j
 import { AiGenerateSectionControl, AiRewriteControl } from "./components/besigner-ai-controls.component.js";
 import { AiAssistProviderOnHost, AssistPanelOnHost } from "./components/ai-permissions-on-host.component.js";
 import AiCreditsCard from "./components/ai-credits-card.component.js";
+import AiJobsTopBarIndicator from "./components/ai-jobs-indicator.component.js";
 import { AiCollaboratorCreditsCell, AiCollaboratorCreditsHeader, AiMemberCreditsCell, AiMemberCreditsHeader } from "./components/ai-credits-columns.component.js";
 import { AssistSignalsPage } from "./components/assist-signals-page.component.js";
 import BillingAssistOverageCard from "./components/billing-assist-overage-card.component.js";
@@ -48,6 +49,8 @@ import { AiExplainAutomation, AiExplainRunFailure } from "./components/ai-explai
 import AiProductCopyCard from "./components/ai-product-copy-card.component.js";
 import AiProductImportOption from "./components/ai-product-import-option.component.js";
 import AiProductsHubCard from "./components/ai-products-hub-card.component.js";
+import AiSiteBuildPage from "./components/ai-site-build-page.component.js";
+import { AI_SITE_BUILD_HREF } from "./components/ai-job-links.js";
 import { AI_PLUGIN_ID } from "./constants.js";
 import { registerAiDeclarations } from "./declarations.js";
 /**
@@ -87,6 +90,19 @@ import { registerAiDeclarations } from "./declarations.js";
                 Component: AssistSignalsPage
             }
         ],
+        // "Building your site" (AGL-3594): where the guided start lands a person,
+        // and where a site job's notification opens. An address under the site
+        // and no tab — `/ai-jobs/{jobId}`.
+        navItems: [
+            {
+                label: 'Building your site',
+                href: AI_SITE_BUILD_HREF,
+                unlisted: true,
+                ownsSubtree: true,
+                permission: 'ai.generate',
+                Component: AiSiteBuildPage
+            }
+        ],
         widgets: [
             {
                 slot: 'consoleDock',
@@ -94,6 +110,18 @@ import { registerAiDeclarations } from "./declarations.js";
                 title: 'Assistant',
                 Component: AssistPanelOnHost
             },
+            // The AI jobs indicator (AGL-3593), beside the notifications bell on
+            // every page: what the workspace's jobs are doing, and the way to them.
+            // Gated as the other generative widgets are; it asks the shell for the
+            // release flags of the jobs and of the panel it opens.
+            {
+                slot: 'consoleTopBar',
+                widgetId: 'ai-jobs-indicator',
+                title: 'AI jobs',
+                featureFlag: 'aiGenerative',
+                permission: 'ai.generate',
+                Component: AiJobsTopBarIndicator
+            },
             {
                 slot: 'orgBillingUsage',
                 widgetId: 'ai-credits-meter',

package/src/lib/plugin.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../../../libs/plugins/ai/src/lib/plugin.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { PLATFORM_BRAND_NAME, registerConsoleExtension } from '@aglyn/aglyn'\nimport { AiCollaboratorPermissionsCell } from './components/ai-collaborator-permissions-column.component'\nimport { AiSaveAsComponent } from './components/ai-save-as-component.component'\nimport {\n  AiGenerateSectionControl,\n  AiRewriteControl,\n} from './components/besigner-ai-controls.component'\nimport {\n  AiAssistProviderOnHost,\n  AssistPanelOnHost,\n} from './components/ai-permissions-on-host.component'\nimport AiCreditsCard from './components/ai-credits-card.component'\nimport {\n  AiCollaboratorCreditsCell,\n  AiCollaboratorCreditsHeader,\n  AiMemberCreditsCell,\n  AiMemberCreditsHeader,\n} from './components/ai-credits-columns.component'\nimport { AssistSignalsPage } from './components/assist-signals-page.component'\nimport BillingAssistOverageCard from './components/billing-assist-overage-card.component'\nimport { AiTopUsersCard } from './components/billing-ai-top-users.component'\nimport { AiAllotmentsCard } from './components/billing-ai-allotments.component'\nimport {\n  AiCollaboratorAllotmentCell,\n  AiCollaboratorAllotmentHeader,\n  AiSiteAllotmentCard,\n} from './components/host-ai-allotments.component'\nimport MemberAiAllotmentCard from './components/member-ai-allotment-card.component'\nimport MemberAiUsageCard from './components/member-ai-usage-card.component'\nimport AiThemeProposalCard from './components/ai-theme-proposal-card.component'\nimport StaffOrgAiCard from './components/staff-org-ai-card.component'\nimport {\n  StaffOrgUsageAiCreditsCell,\n  StaffOrgUsageAiOverageCell,\n  StaffOrgUsageAiPool,\n  StaffOrgUsageAssistCell,\n} from './components/staff-org-usage-ai-columns.component'\nimport {\n  StaffOrgsAiSpendCell,\n  StaffOrgsAiSpendHeader,\n} from './components/staff-orgs-ai-spend-column.component'\nimport StaffUserAiUsageCard from './components/staff-user-ai-usage-card.component'\nimport AiSeoAuditCard from './components/ai-seo-audit-card.component'\nimport AiSiteBatchCard from './components/ai-site-batch-card.component'\nimport AiSiteSeoStartCard from './components/ai-site-seo-start-card.component'\nimport AiSiteStartCard from './components/ai-site-start-card.component'\nimport AiSeoFieldsCard from './components/ai-seo-fields-card.component'\nimport AiDescribeAutomationButton from './components/ai-describe-automation.component'\nimport AiCrmEmailDraft from './components/ai-crm-email-draft.component'\nimport AiCrmImportMapping from './components/ai-crm-import-mapping.component'\nimport AiCrmRecordCard from './components/ai-crm-record-card.component'\nimport AiDescribePageButton from './components/ai-describe-page.component'\nimport {\n  AiDescribeComponentButton,\n  AiDescribeFormButton,\n  AiDescribeLayoutButton,\n  AiDescribeTemplateButton,\n} from './components/ai-describe-button.component'\nimport {\n  AiExperimentResultCard,\n  AiExperimentVariantsCard,\n} from './components/ai-experiment-cards.component'\nimport {\n  AiExplainAutomation,\n  AiExplainRunFailure,\n} from './components/ai-explain-automation.component'\nimport AiProductCopyCard from './components/ai-product-copy-card.component'\nimport AiProductImportOption from './components/ai-product-import-option.component'\nimport AiProductsHubCard from './components/ai-products-hub-card.component'\nimport { AI_PLUGIN_ID } from './constants'\nimport { registerAiDeclarations } from './declarations'\n\n/**\n * The Aglyn AI plugin's console half (AGL-2939): the assistant dock, the\n * besigner copy assistant's provider, the billing, member and staff cards,\n * the member tables' credit columns and the Assist signal staff page — each\n * mounted through a shell-owned zone (AGL-2940) or the staff area's generic\n * route, so no console page imports this plugin.\n *\n * No `featureFlag` on the extension: the plugin's doors are gated one by\n * one — the dock reads the `release_assist` verdict the shell hands it, the\n * generative doors answer 404 behind `release_ai_generative`, the billing\n * cards render only where the plan sells a band — and a flag here would\n * switch off the released doors with the unreleased ones.\n */\nexport function registerAiConsole(): void {\n  registerAiDeclarations()\n  registerConsoleExtension({\n    pluginId: AI_PLUGIN_ID,\n    displayName: 'AI',\n    // The besigner copy assistant (AGL-89/419): mounted by the shell around\n    // every console page, and opened by this plugin's besigner controls.\n    providers: [AiAssistProviderOnHost],\n    // The Assist docs-gap and cost board (AGL-1860, AGL-2252), at the staff\n    // URL and under the tab it has always had.\n    staffPages: [\n      {\n        id: 'assist-signals',\n        label: 'Assist signal',\n        header: {\n          // The configured brand, not ours (AGL-2153/2260): a white-label\n          // deployment and a self-host operator both read this header.\n          title: `${PLATFORM_BRAND_NAME} Assist Signal`,\n          docsTopic: 'assistSignals',\n        },\n        Component: AssistSignalsPage,\n      },\n    ],\n    widgets: [\n      {\n        slot: 'consoleDock',\n        widgetId: 'ai-assist-dock',\n        title: 'Assistant',\n        Component: AssistPanelOnHost,\n      },\n      {\n        slot: 'orgBillingUsage',\n        widgetId: 'ai-credits-meter',\n        title: 'AI credits',\n        Component: AiCreditsCard,\n      },\n      {\n        slot: 'orgBillingUsage',\n        widgetId: 'ai-credits-overage',\n        title: 'AI credits overage',\n        Component: BillingAssistOverageCard,\n      },\n      // The per-member usage (AGL-2928): who drew the credits the meter\n      // counts, on Billing → Usage, on each member's page, on the staff\n      // user page, and as a column of both member tables.\n      {\n        slot: 'orgBillingUsage',\n        widgetId: 'ai-usage-by-member',\n        title: 'Who is generating what',\n        permission: 'billing.view',\n        Component: AiTopUsersCard,\n      },\n      // The collaborators table's AI column (AGL-2927): whether each person\n      // may open the AI doors on the site, per site, ahead of the columns\n      // that report what they drew.\n      {\n        slot: 'hostMembers',\n        widgetId: 'ai-collaborator-permissions',\n        title: 'AI',\n        column: { header: 'AI' },\n        Component: AiCollaboratorPermissionsCell,\n      },\n      // The copy assistant's besigner controls (AGL-89, AGL-169): Generate a\n      // section on every editor's toolbar, and Rewrite with AI under the\n      // selected element's fields. Each opens the provider's dialog, and is\n      // drawn only while the reader holds the door's permission.\n      {\n        slot: 'besignerToolbar',\n        widgetId: 'ai-generate-section',\n        title: 'Generate a section with AI',\n        Component: AiGenerateSectionControl,\n      },\n      {\n        slot: 'besignerInspector',\n        widgetId: 'ai-rewrite-copy',\n        title: 'Rewrite with AI',\n        Component: AiRewriteControl,\n      },\n      // Save the selection as a reusable component (AGL-2908): the component\n      // job's second entry point, which proposes the properties a section\n      // should declare and applies them as the manual promote does.\n      {\n        slot: 'besignerInspector',\n        widgetId: 'ai-save-as-component',\n        title: 'Make a reusable component with AI',\n        permission: 'ai.generate',\n        Component: AiSaveAsComponent,\n      },\n      {\n        slot: 'orgMember',\n        widgetId: 'ai-member-usage',\n        title: 'AI usage',\n        Component: MemberAiUsageCard,\n      },\n      // The allotments (AGL-2942): a member's or a site's monthly share of\n      // the pool, set on Billing → Usage, on each member's page and on a\n      // site's collaborators card — each card asks the route what its\n      // reader may see and change.\n      {\n        slot: 'orgBillingUsage',\n        widgetId: 'ai-allotments',\n        title: 'AI allotments',\n        permission: 'billing.view',\n        Component: AiAllotmentsCard,\n      },\n      {\n        slot: 'orgMember',\n        widgetId: 'ai-member-allotment',\n        title: 'AI allotment',\n        Component: MemberAiAllotmentCard,\n      },\n      {\n        slot: 'hostMembers',\n        widgetId: 'ai-collaborator-allotment',\n        title: 'AI allotment',\n        column: {\n          header: 'AI allotment',\n          align: 'right',\n          Header: AiCollaboratorAllotmentHeader,\n        },\n        Component: AiCollaboratorAllotmentCell,\n      },\n      {\n        slot: 'hostMembers',\n        widgetId: 'ai-site-allotment',\n        title: 'Site AI allotment',\n        Component: AiSiteAllotmentCard,\n      },\n      // Themes by AI (AGL-2938): a brief on the site's Theme section, a\n      // proposal previewed before and after, and the editor's own Save to\n      // keep it. Generation is sold as `aiGenerative` and held by\n      // `ai.generate`, so the shell withholds the card from a plan or a\n      // member without either; the card itself asks the route about the\n      // release flag before it shows anything.\n      {\n        slot: 'hostTheme',\n        widgetId: 'ai-theme-proposal',\n        title: 'Theme assistant',\n        featureFlag: 'aiGenerative',\n        permission: 'ai.generate',\n        Component: AiThemeProposalCard,\n      },\n      {\n        slot: 'staffOrg',\n        widgetId: 'ai-org-usage',\n        title: 'AI usage',\n        Component: StaffOrgAiCard,\n      },\n      {\n        slot: 'staffUser',\n        widgetId: 'ai-account-usage',\n        title: 'AI usage across organizations',\n        Component: StaffUserAiUsageCard,\n      },\n      // The staff tables' AI figures (AGL-2984): the Organizations list's\n      // spend column, and the usage table's three columns with the credit\n      // pool line the org page draws above it.\n      {\n        slot: 'staffOrgsListColumn',\n        widgetId: 'ai-orgs-spend',\n        title: 'AI spend (month)',\n        column: {\n          header: 'AI spend (month)',\n          align: 'right',\n          Header: StaffOrgsAiSpendHeader,\n        },\n        Component: StaffOrgsAiSpendCell,\n      },\n      {\n        slot: 'staffOrgUsageColumn',\n        widgetId: 'ai-usage-assist-cost',\n        title: 'Assist',\n        column: { header: 'Assist', align: 'right' },\n        Component: StaffOrgUsageAssistCell,\n      },\n      {\n        slot: 'staffOrgUsageColumn',\n        widgetId: 'ai-usage-credits',\n        title: 'AI credits used',\n        column: { header: 'AI credits used', align: 'right' },\n        Component: StaffOrgUsageAiCreditsCell,\n      },\n      {\n        slot: 'staffOrgUsageColumn',\n        widgetId: 'ai-usage-overage',\n        title: 'AI overage billed ($)',\n        column: { header: 'AI overage billed ($)', align: 'right' },\n        Component: StaffOrgUsageAiOverageCell,\n      },\n      {\n        slot: 'staffOrgUsageColumn',\n        widgetId: 'ai-usage-pool',\n        title: 'AI credit pool',\n        Component: StaffOrgUsageAiPool,\n      },\n      {\n        slot: 'orgMembersListColumn',\n        widgetId: 'ai-member-credits',\n        title: 'AI credits (month)',\n        column: { header: 'AI credits (month)', align: 'right', Header: AiMemberCreditsHeader },\n        Component: AiMemberCreditsCell,\n      },\n      {\n        slot: 'hostMembers',\n        widgetId: 'ai-collaborator-credits',\n        title: 'AI credits (site, month)',\n        column: {\n          header: 'AI credits (site, month)',\n          align: 'right',\n          Header: AiCollaboratorCreditsHeader,\n        },\n        Component: AiCollaboratorCreditsCell,\n      },\n      // SEO by AI (AGL-2910): \"Write SEO\" inside every search listing editor\n      // — a page's SEO card and a product's listing — and the site audit on\n      // the site's SEO section. Generation is sold as `aiGenerative` and held\n      // by `ai.generate`, so the shell withholds both from a plan or a member\n      // without either; each card asks the jobs route about the release flag\n      // before it shows anything, and neither ever writes what it proposes.\n      {\n        slot: 'seoFields',\n        widgetId: 'ai-seo-fields',\n        title: 'SEO assistant',\n        featureFlag: 'aiGenerative',\n        permission: 'ai.generate',\n        Component: AiSeoFieldsCard,\n      },\n      {\n        slot: 'hostSeo',\n        widgetId: 'ai-seo-audit',\n        title: 'SEO audit',\n        featureFlag: 'aiGenerative',\n        permission: 'ai.generate',\n        Component: AiSeoAuditCard,\n      },\n      // A page from a brief (AGL-2907): \"Describe it\" beside Templates and\n      // Create New Screen. Gated as the other generative widgets are, and it\n      // asks the jobs route about the release flag before it shows anything.\n      {\n        slot: 'hostScreens',\n        widgetId: 'ai-describe-page',\n        title: 'Describe a page',\n        featureFlag: 'aiGenerative',\n        permission: 'ai.generate',\n        Component: AiDescribePageButton,\n      },\n      // The same entry for a page template, a layout and a form (AGL-3043),\n      // beside the create action of the page that lists each: the same\n      // dialog, the same gates, and the same question to the jobs route\n      // before it shows anything.\n      {\n        slot: 'hostTemplates',\n        widgetId: 'ai-describe-template',\n        title: 'Describe a page template',\n        featureFlag: 'aiGenerative',\n        permission: 'ai.generate',\n        Component: AiDescribeTemplateButton,\n      },\n      {\n        slot: 'hostLayouts',\n        widgetId: 'ai-describe-layout',\n        title: 'Describe a layout',\n        featureFlag: 'aiGenerative',\n        permission: 'ai.generate',\n        Component: AiDescribeLayoutButton,\n      },\n      {\n        slot: 'hostForms',\n        widgetId: 'ai-describe-form',\n        title: 'Describe a form',\n        featureFlag: 'aiGenerative',\n        permission: 'ai.generate',\n        Component: AiDescribeFormButton,\n      },\n      // And a reusable component from a brief (AGL-3051), beside Templates\n      // and Create Component: the component job's first entry point, which\n      // had none in the console.\n      {\n        slot: 'hostComponents',\n        widgetId: 'ai-describe-component',\n        title: 'Describe a reusable component',\n        featureFlag: 'aiGenerative',\n        permission: 'ai.generate',\n        Component: AiDescribeComponentButton,\n      },\n      // Automations by AI (AGL-2919), in the zones the workflows plugin hosts\n      // on its Automation page: \"Describe it\" beside Add action and Recipes,\n      // \"Explain it\" in the editor of a saved automation, and \"Why did this\n      // fail?\" on a failed run. Gated as the other generative widgets are;\n      // each asks the jobs route about the release flag before it shows\n      // anything, and none of them changes an automation.\n      {\n        slot: 'hostAutomations',\n        widgetId: 'ai-describe-automation',\n        title: 'Describe an automation',\n        featureFlag: 'aiGenerative',\n        permission: 'ai.generate',\n        Component: AiDescribeAutomationButton,\n      },\n      {\n        slot: 'automationEditor',\n        widgetId: 'ai-explain-automation',\n        title: 'Explain this automation',\n        featureFlag: 'aiGenerative',\n        permission: 'ai.generate',\n        Component: AiExplainAutomation,\n      },\n      {\n        slot: 'automationRun',\n        widgetId: 'ai-explain-run-failure',\n        title: 'Why did this run fail?',\n        featureFlag: 'aiGenerative',\n        permission: 'ai.generate',\n        Component: AiExplainRunFailure,\n      },\n      // CRM by AI (AGL-2917): a record's summary and next step on its page,\n      // a draft in the one-to-one composer, and an import's column matches.\n      // The CRM hosts each zone, so it is drawn only where the CRM is; the\n      // shell holds the plan and `ai.generate`, each card asks the jobs route\n      // about the release flag before it shows anything, and none writes what\n      // it proposes.\n      {\n        slot: 'recordInsights',\n        widgetId: 'ai-crm-record',\n        title: 'AI summary',\n        featureFlag: 'aiGenerative',\n        permission: 'ai.generate',\n        Component: AiCrmRecordCard,\n      },\n      {\n        slot: 'recordEmail',\n        widgetId: 'ai-crm-email',\n        title: 'Draft with AI',\n        featureFlag: 'aiGenerative',\n        permission: 'ai.generate',\n        Component: AiCrmEmailDraft,\n      },\n      {\n        slot: 'importMapping',\n        widgetId: 'ai-crm-import-mapping',\n        title: 'Match columns with AI',\n        featureFlag: 'aiGenerative',\n        permission: 'ai.generate',\n        Component: AiCrmImportMapping,\n      },\n      // The guided start (AGL-2918), on the page a newly created site lands\n      // on: a few questions that become a site scaffold. Gated as the other\n      // generative widgets are, and it asks the jobs route about the release\n      // flag before it shows anything — so a workspace the feature is not\n      // released to gets the blank page and nothing else. Skipping is the\n      // zone's own `startBlank`, which creates nothing.\n      {\n        slot: 'hostFirstRun',\n        widgetId: 'ai-site-start',\n        title: 'Start this site with AI',\n        featureFlag: 'aiGenerative',\n        permission: 'ai.generate',\n        Component: AiSiteStartCard,\n      },\n      // The listing those answers describe (AGL-2918), on the site's SEO\n      // section: the site-wide search title and description the guided start\n      // implies, offered where they are edited. The same gates as every\n      // generative widget, and it stages into the SEO form rather than\n      // writing it — a person's Update is the write, as it is for the audit\n      // card beside it.\n      {\n        slot: 'hostSeo',\n        widgetId: 'ai-site-seo-start',\n        title: 'The listing your answers describe',\n        featureFlag: 'aiGenerative',\n        permission: 'ai.generate',\n        Component: AiSiteSeoStartCard,\n      },\n      // The agency batch (AGL-2911): one brief across many of the org's\n      // sites, from the page that lists them. The card asks the jobs route\n      // about the release flag before it shows anything, and its own door\n      // holds the plan band and the caller's permission on every site it is\n      // pointed at.\n      {\n        slot: 'orgSites',\n        widgetId: 'ai-site-batch',\n        title: 'Generate sites with AI',\n        featureFlag: 'aiGenerative',\n        permission: 'ai.generate',\n        Component: AiSiteBatchCard,\n      },\n      // Commerce by AI (AGL-2916): product copy in the product editor, the\n      // catalog, categories and discounts on the products hub, and copy for\n      // an import as it lands. The commerce plugin hosts the zones and makes\n      // every write; each card asks the jobs route about the release flag\n      // before it shows anything.\n      {\n        slot: 'productEditor',\n        widgetId: 'ai-product-copy',\n        title: 'Product copy assistant',\n        featureFlag: 'aiGenerative',\n        permission: 'ai.generate',\n        Component: AiProductCopyCard,\n      },\n      {\n        slot: 'productsHub',\n        widgetId: 'ai-products-hub',\n        title: 'Build your catalog with AI',\n        featureFlag: 'aiGenerative',\n        permission: 'ai.generate',\n        Component: AiProductsHubCard,\n      },\n      {\n        slot: 'productImport',\n        widgetId: 'ai-product-import',\n        title: 'Write imported product copy with AI',\n        featureFlag: 'aiGenerative',\n        permission: 'ai.generate',\n        Component: AiProductImportOption,\n      },\n      // A/B tests by AI (AGL-2914): variants written in the experiment\n      // editor, and one test's result read in plain words below its figures.\n      // The A/B testing card hosts both zones, so they are drawn only where\n      // that card is and only on a site with A/B testing; the shell holds the\n      // plan band and `ai.generate`, and each card asks the jobs route about\n      // the release flag before it shows anything. Neither writes: the\n      // experiment editor's Save is the only write, and an explanation has\n      // nothing to apply.\n      {\n        slot: 'experimentVariants',\n        widgetId: 'ai-experiment-variants',\n        title: 'Write variants with AI',\n        featureFlag: 'aiGenerative',\n        permission: 'ai.generate',\n        Component: AiExperimentVariantsCard,\n      },\n      {\n        slot: 'experimentResult',\n        widgetId: 'ai-experiment-result',\n        title: 'Explain this result with AI',\n        featureFlag: 'aiGenerative',\n        permission: 'ai.generate',\n        Component: AiExperimentResultCard,\n      },\n    ],\n  })\n}\n"],"names":["PLATFORM_BRAND_NAME","registerConsoleExtension","AiCollaboratorPermissionsCell","AiSaveAsComponent","AiGenerateSectionControl","AiRewriteControl","AiAssistProviderOnHost","AssistPanelOnHost","AiCreditsCard","AiCollaboratorCreditsCell","AiCollaboratorCreditsHeader","AiMemberCreditsCell","AiMemberCreditsHeader","AssistSignalsPage","BillingAssistOverageCard","AiTopUsersCard","AiAllotmentsCard","AiCollaboratorAllotmentCell","AiCollaboratorAllotmentHeader","AiSiteAllotmentCard","MemberAiAllotmentCard","MemberAiUsageCard","AiThemeProposalCard","StaffOrgAiCard","StaffOrgUsageAiCreditsCell","StaffOrgUsageAiOverageCell","StaffOrgUsageAiPool","StaffOrgUsageAssistCell","StaffOrgsAiSpendCell","StaffOrgsAiSpendHeader","StaffUserAiUsageCard","AiSeoAuditCard","AiSiteBatchCard","AiSiteSeoStartCard","AiSiteStartCard","AiSeoFieldsCard","AiDescribeAutomationButton","AiCrmEmailDraft","AiCrmImportMapping","AiCrmRecordCard","AiDescribePageButton","AiDescribeComponentButton","AiDescribeFormButton","AiDescribeLayoutButton","AiDescribeTemplateButton","AiExperimentResultCard","AiExperimentVariantsCard","AiExplainAutomation","AiExplainRunFailure","AiProductCopyCard","AiProductImportOption","AiProductsHubCard","AI_PLUGIN_ID","registerAiDeclarations","registerAiConsole","pluginId","displayName","providers","staffPages","id","label","header","title","docsTopic","Component","widgets","slot","widgetId","permission","column","align","Header","featureFlag"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED,SAASA,mBAAmB,EAAEC,wBAAwB,QAAQ,eAAc;AAC5E,SAASC,6BAA6B,QAAQ,+DAA2D;AACzG,SAASC,iBAAiB,QAAQ,iDAA6C;AAC/E,SACEC,wBAAwB,EACxBC,gBAAgB,QACX,iDAA6C;AACpD,SACEC,sBAAsB,EACtBC,iBAAiB,QACZ,mDAA+C;AACtD,OAAOC,mBAAmB,4CAAwC;AAClE,SACEC,yBAAyB,EACzBC,2BAA2B,EAC3BC,mBAAmB,EACnBC,qBAAqB,QAChB,+CAA2C;AAClD,SAASC,iBAAiB,QAAQ,gDAA4C;AAC9E,OAAOC,8BAA8B,wDAAoD;AACzF,SAASC,cAAc,QAAQ,iDAA6C;AAC5E,SAASC,gBAAgB,QAAQ,kDAA8C;AAC/E,SACEC,2BAA2B,EAC3BC,6BAA6B,EAC7BC,mBAAmB,QACd,+CAA2C;AAClD,OAAOC,2BAA2B,qDAAiD;AACnF,OAAOC,uBAAuB,iDAA6C;AAC3E,OAAOC,yBAAyB,mDAA+C;AAC/E,OAAOC,oBAAoB,8CAA0C;AACrE,SACEC,0BAA0B,EAC1BC,0BAA0B,EAC1BC,mBAAmB,EACnBC,uBAAuB,QAClB,uDAAmD;AAC1D,SACEC,oBAAoB,EACpBC,sBAAsB,QACjB,uDAAmD;AAC1D,OAAOC,0BAA0B,qDAAiD;AAClF,OAAOC,oBAAoB,8CAA0C;AACrE,OAAOC,qBAAqB,+CAA2C;AACvE,OAAOC,wBAAwB,mDAA+C;AAC9E,OAAOC,qBAAqB,+CAA2C;AACvE,OAAOC,qBAAqB,+CAA2C;AACvE,OAAOC,gCAAgC,mDAA+C;AACtF,OAAOC,qBAAqB,+CAA2C;AACvE,OAAOC,wBAAwB,kDAA8C;AAC7E,OAAOC,qBAAqB,+CAA2C;AACvE,OAAOC,0BAA0B,6CAAyC;AAC1E,SACEC,yBAAyB,EACzBC,oBAAoB,EACpBC,sBAAsB,EACtBC,wBAAwB,QACnB,+CAA2C;AAClD,SACEC,sBAAsB,EACtBC,wBAAwB,QACnB,gDAA4C;AACnD,SACEC,mBAAmB,EACnBC,mBAAmB,QACd,kDAA8C;AACrD,OAAOC,uBAAuB,iDAA6C;AAC3E,OAAOC,2BAA2B,qDAAiD;AACnF,OAAOC,uBAAuB,iDAA6C;AAC3E,SAASC,YAAY,QAAQ,iBAAa;AAC1C,SAASC,sBAAsB,QAAQ,oBAAgB;AAEvD;;;;;;;;;;;;CAYC,GACD,OAAO,SAASC;IACdD;IACApD,yBAAyB;QACvBsD,UAAUH;QACVI,aAAa;QACb,wEAAwE;QACxE,qEAAqE;QACrEC,WAAW;YAACnD;SAAuB;QACnC,wEAAwE;QACxE,2CAA2C;QAC3CoD,YAAY;YACV;gBACEC,IAAI;gBACJC,OAAO;gBACPC,QAAQ;oBACN,gEAAgE;oBAChE,6DAA6D;oBAC7DC,OAAO,GAAG9D,oBAAoB,cAAc,CAAC;oBAC7C+D,WAAW;gBACb;gBACAC,WAAWnD;YACb;SACD;QACDoD,SAAS;YACP;gBACEC,MAAM;gBACNC,UAAU;gBACVL,OAAO;gBACPE,WAAWzD;YACb;YACA;gBACE2D,MAAM;gBACNC,UAAU;gBACVL,OAAO;gBACPE,WAAWxD;YACb;YACA;gBACE0D,MAAM;gBACNC,UAAU;gBACVL,OAAO;gBACPE,WAAWlD;YACb;YACA,kEAAkE;YAClE,kEAAkE;YAClE,oDAAoD;YACpD;gBACEoD,MAAM;gBACNC,UAAU;gBACVL,OAAO;gBACPM,YAAY;gBACZJ,WAAWjD;YACb;YACA,sEAAsE;YACtE,oEAAoE;YACpE,8BAA8B;YAC9B;gBACEmD,MAAM;gBACNC,UAAU;gBACVL,OAAO;gBACPO,QAAQ;oBAAER,QAAQ;gBAAK;gBACvBG,WAAW9D;YACb;YACA,uEAAuE;YACvE,mEAAmE;YACnE,sEAAsE;YACtE,2DAA2D;YAC3D;gBACEgE,MAAM;gBACNC,UAAU;gBACVL,OAAO;gBACPE,WAAW5D;YACb;YACA;gBACE8D,MAAM;gBACNC,UAAU;gBACVL,OAAO;gBACPE,WAAW3D;YACb;YACA,uEAAuE;YACvE,oEAAoE;YACpE,8DAA8D;YAC9D;gBACE6D,MAAM;gBACNC,UAAU;gBACVL,OAAO;gBACPM,YAAY;gBACZJ,WAAW7D;YACb;YACA;gBACE+D,MAAM;gBACNC,UAAU;gBACVL,OAAO;gBACPE,WAAW3C;YACb;YACA,qEAAqE;YACrE,mEAAmE;YACnE,gEAAgE;YAChE,6BAA6B;YAC7B;gBACE6C,MAAM;gBACNC,UAAU;gBACVL,OAAO;gBACPM,YAAY;gBACZJ,WAAWhD;YACb;YACA;gBACEkD,MAAM;gBACNC,UAAU;gBACVL,OAAO;gBACPE,WAAW5C;YACb;YACA;gBACE8C,MAAM;gBACNC,UAAU;gBACVL,OAAO;gBACPO,QAAQ;oBACNR,QAAQ;oBACRS,OAAO;oBACPC,QAAQrD;gBACV;gBACA8C,WAAW/C;YACb;YACA;gBACEiD,MAAM;gBACNC,UAAU;gBACVL,OAAO;gBACPE,WAAW7C;YACb;YACA,kEAAkE;YAClE,oEAAoE;YACpE,4DAA4D;YAC5D,kEAAkE;YAClE,kEAAkE;YAClE,yCAAyC;YACzC;gBACE+C,MAAM;gBACNC,UAAU;gBACVL,OAAO;gBACPU,aAAa;gBACbJ,YAAY;gBACZJ,WAAW1C;YACb;YACA;gBACE4C,MAAM;gBACNC,UAAU;gBACVL,OAAO;gBACPE,WAAWzC;YACb;YACA;gBACE2C,MAAM;gBACNC,UAAU;gBACVL,OAAO;gBACPE,WAAWlC;YACb;YACA,oEAAoE;YACpE,oEAAoE;YACpE,yCAAyC;YACzC;gBACEoC,MAAM;gBACNC,UAAU;gBACVL,OAAO;gBACPO,QAAQ;oBACNR,QAAQ;oBACRS,OAAO;oBACPC,QAAQ1C;gBACV;gBACAmC,WAAWpC;YACb;YACA;gBACEsC,MAAM;gBACNC,UAAU;gBACVL,OAAO;gBACPO,QAAQ;oBAAER,QAAQ;oBAAUS,OAAO;gBAAQ;gBAC3CN,WAAWrC;YACb;YACA;gBACEuC,MAAM;gBACNC,UAAU;gBACVL,OAAO;gBACPO,QAAQ;oBAAER,QAAQ;oBAAmBS,OAAO;gBAAQ;gBACpDN,WAAWxC;YACb;YACA;gBACE0C,MAAM;gBACNC,UAAU;gBACVL,OAAO;gBACPO,QAAQ;oBAAER,QAAQ;oBAAyBS,OAAO;gBAAQ;gBAC1DN,WAAWvC;YACb;YACA;gBACEyC,MAAM;gBACNC,UAAU;gBACVL,OAAO;gBACPE,WAAWtC;YACb;YACA;gBACEwC,MAAM;gBACNC,UAAU;gBACVL,OAAO;gBACPO,QAAQ;oBAAER,QAAQ;oBAAsBS,OAAO;oBAASC,QAAQ3D;gBAAsB;gBACtFoD,WAAWrD;YACb;YACA;gBACEuD,MAAM;gBACNC,UAAU;gBACVL,OAAO;gBACPO,QAAQ;oBACNR,QAAQ;oBACRS,OAAO;oBACPC,QAAQ7D;gBACV;gBACAsD,WAAWvD;YACb;YACA,uEAAuE;YACvE,sEAAsE;YACtE,wEAAwE;YACxE,wEAAwE;YACxE,uEAAuE;YACvE,sEAAsE;YACtE;gBACEyD,MAAM;gBACNC,UAAU;gBACVL,OAAO;gBACPU,aAAa;gBACbJ,YAAY;gBACZJ,WAAW7B;YACb;YACA;gBACE+B,MAAM;gBACNC,UAAU;gBACVL,OAAO;gBACPU,aAAa;gBACbJ,YAAY;gBACZJ,WAAWjC;YACb;YACA,qEAAqE;YACrE,uEAAuE;YACvE,uEAAuE;YACvE;gBACEmC,MAAM;gBACNC,UAAU;gBACVL,OAAO;gBACPU,aAAa;gBACbJ,YAAY;gBACZJ,WAAWxB;YACb;YACA,sEAAsE;YACtE,iEAAiE;YACjE,kEAAkE;YAClE,4BAA4B;YAC5B;gBACE0B,MAAM;gBACNC,UAAU;gBACVL,OAAO;gBACPU,aAAa;gBACbJ,YAAY;gBACZJ,WAAWpB;YACb;YACA;gBACEsB,MAAM;gBACNC,UAAU;gBACVL,OAAO;gBACPU,aAAa;gBACbJ,YAAY;gBACZJ,WAAWrB;YACb;YACA;gBACEuB,MAAM;gBACNC,UAAU;gBACVL,OAAO;gBACPU,aAAa;gBACbJ,YAAY;gBACZJ,WAAWtB;YACb;YACA,qEAAqE;YACrE,qEAAqE;YACrE,2BAA2B;YAC3B;gBACEwB,MAAM;gBACNC,UAAU;gBACVL,OAAO;gBACPU,aAAa;gBACbJ,YAAY;gBACZJ,WAAWvB;YACb;YACA,wEAAwE;YACxE,uEAAuE;YACvE,sEAAsE;YACtE,qEAAqE;YACrE,kEAAkE;YAClE,oDAAoD;YACpD;gBACEyB,MAAM;gBACNC,UAAU;gBACVL,OAAO;gBACPU,aAAa;gBACbJ,YAAY;gBACZJ,WAAW5B;YACb;YACA;gBACE8B,MAAM;gBACNC,UAAU;gBACVL,OAAO;gBACPU,aAAa;gBACbJ,YAAY;gBACZJ,WAAWjB;YACb;YACA;gBACEmB,MAAM;gBACNC,UAAU;gBACVL,OAAO;gBACPU,aAAa;gBACbJ,YAAY;gBACZJ,WAAWhB;YACb;YACA,sEAAsE;YACtE,sEAAsE;YACtE,qEAAqE;YACrE,wEAAwE;YACxE,wEAAwE;YACxE,eAAe;YACf;gBACEkB,MAAM;gBACNC,UAAU;gBACVL,OAAO;gBACPU,aAAa;gBACbJ,YAAY;gBACZJ,WAAWzB;YACb;YACA;gBACE2B,MAAM;gBACNC,UAAU;gBACVL,OAAO;gBACPU,aAAa;gBACbJ,YAAY;gBACZJ,WAAW3B;YACb;YACA;gBACE6B,MAAM;gBACNC,UAAU;gBACVL,OAAO;gBACPU,aAAa;gBACbJ,YAAY;gBACZJ,WAAW1B;YACb;YACA,sEAAsE;YACtE,sEAAsE;YACtE,uEAAuE;YACvE,oEAAoE;YACpE,oEAAoE;YACpE,kDAAkD;YAClD;gBACE4B,MAAM;gBACNC,UAAU;gBACVL,OAAO;gBACPU,aAAa;gBACbJ,YAAY;gBACZJ,WAAW9B;YACb;YACA,mEAAmE;YACnE,uEAAuE;YACvE,kEAAkE;YAClE,iEAAiE;YACjE,sEAAsE;YACtE,kBAAkB;YAClB;gBACEgC,MAAM;gBACNC,UAAU;gBACVL,OAAO;gBACPU,aAAa;gBACbJ,YAAY;gBACZJ,WAAW/B;YACb;YACA,kEAAkE;YAClE,qEAAqE;YACrE,oEAAoE;YACpE,sEAAsE;YACtE,cAAc;YACd;gBACEiC,MAAM;gBACNC,UAAU;gBACVL,OAAO;gBACPU,aAAa;gBACbJ,YAAY;gBACZJ,WAAWhC;YACb;YACA,qEAAqE;YACrE,sEAAsE;YACtE,uEAAuE;YACvE,oEAAoE;YACpE,4BAA4B;YAC5B;gBACEkC,MAAM;gBACNC,UAAU;gBACVL,OAAO;gBACPU,aAAa;gBACbJ,YAAY;gBACZJ,WAAWf;YACb;YACA;gBACEiB,MAAM;gBACNC,UAAU;gBACVL,OAAO;gBACPU,aAAa;gBACbJ,YAAY;gBACZJ,WAAWb;YACb;YACA;gBACEe,MAAM;gBACNC,UAAU;gBACVL,OAAO;gBACPU,aAAa;gBACbJ,YAAY;gBACZJ,WAAWd;YACb;YACA,iEAAiE;YACjE,uEAAuE;YACvE,sEAAsE;YACtE,wEAAwE;YACxE,uEAAuE;YACvE,iEAAiE;YACjE,qEAAqE;YACrE,oBAAoB;YACpB;gBACEgB,MAAM;gBACNC,UAAU;gBACVL,OAAO;gBACPU,aAAa;gBACbJ,YAAY;gBACZJ,WAAWlB;YACb;YACA;gBACEoB,MAAM;gBACNC,UAAU;gBACVL,OAAO;gBACPU,aAAa;gBACbJ,YAAY;gBACZJ,WAAWnB;YACb;SACD;IACH;AACF"}
+{"version":3,"sources":["../../../../../../libs/plugins/ai/src/lib/plugin.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { PLATFORM_BRAND_NAME, registerConsoleExtension } from '@aglyn/aglyn'\nimport { AiCollaboratorPermissionsCell } from './components/ai-collaborator-permissions-column.component'\nimport { AiSaveAsComponent } from './components/ai-save-as-component.component'\nimport {\n  AiGenerateSectionControl,\n  AiRewriteControl,\n} from './components/besigner-ai-controls.component'\nimport {\n  AiAssistProviderOnHost,\n  AssistPanelOnHost,\n} from './components/ai-permissions-on-host.component'\nimport AiCreditsCard from './components/ai-credits-card.component'\nimport AiJobsTopBarIndicator from './components/ai-jobs-indicator.component'\nimport {\n  AiCollaboratorCreditsCell,\n  AiCollaboratorCreditsHeader,\n  AiMemberCreditsCell,\n  AiMemberCreditsHeader,\n} from './components/ai-credits-columns.component'\nimport { AssistSignalsPage } from './components/assist-signals-page.component'\nimport BillingAssistOverageCard from './components/billing-assist-overage-card.component'\nimport { AiTopUsersCard } from './components/billing-ai-top-users.component'\nimport { AiAllotmentsCard } from './components/billing-ai-allotments.component'\nimport {\n  AiCollaboratorAllotmentCell,\n  AiCollaboratorAllotmentHeader,\n  AiSiteAllotmentCard,\n} from './components/host-ai-allotments.component'\nimport MemberAiAllotmentCard from './components/member-ai-allotment-card.component'\nimport MemberAiUsageCard from './components/member-ai-usage-card.component'\nimport AiThemeProposalCard from './components/ai-theme-proposal-card.component'\nimport StaffOrgAiCard from './components/staff-org-ai-card.component'\nimport {\n  StaffOrgUsageAiCreditsCell,\n  StaffOrgUsageAiOverageCell,\n  StaffOrgUsageAiPool,\n  StaffOrgUsageAssistCell,\n} from './components/staff-org-usage-ai-columns.component'\nimport {\n  StaffOrgsAiSpendCell,\n  StaffOrgsAiSpendHeader,\n} from './components/staff-orgs-ai-spend-column.component'\nimport StaffUserAiUsageCard from './components/staff-user-ai-usage-card.component'\nimport AiSeoAuditCard from './components/ai-seo-audit-card.component'\nimport AiSiteBatchCard from './components/ai-site-batch-card.component'\nimport AiSiteSeoStartCard from './components/ai-site-seo-start-card.component'\nimport AiSiteStartCard from './components/ai-site-start-card.component'\nimport AiSeoFieldsCard from './components/ai-seo-fields-card.component'\nimport AiDescribeAutomationButton from './components/ai-describe-automation.component'\nimport AiCrmEmailDraft from './components/ai-crm-email-draft.component'\nimport AiCrmImportMapping from './components/ai-crm-import-mapping.component'\nimport AiCrmRecordCard from './components/ai-crm-record-card.component'\nimport AiDescribePageButton from './components/ai-describe-page.component'\nimport {\n  AiDescribeComponentButton,\n  AiDescribeFormButton,\n  AiDescribeLayoutButton,\n  AiDescribeTemplateButton,\n} from './components/ai-describe-button.component'\nimport {\n  AiExperimentResultCard,\n  AiExperimentVariantsCard,\n} from './components/ai-experiment-cards.component'\nimport {\n  AiExplainAutomation,\n  AiExplainRunFailure,\n} from './components/ai-explain-automation.component'\nimport AiProductCopyCard from './components/ai-product-copy-card.component'\nimport AiProductImportOption from './components/ai-product-import-option.component'\nimport AiProductsHubCard from './components/ai-products-hub-card.component'\nimport AiSiteBuildPage from './components/ai-site-build-page.component'\nimport { AI_SITE_BUILD_HREF } from './components/ai-job-links'\nimport { AI_PLUGIN_ID } from './constants'\nimport { registerAiDeclarations } from './declarations'\n\n/**\n * The Aglyn AI plugin's console half (AGL-2939): the assistant dock, the\n * besigner copy assistant's provider, the billing, member and staff cards,\n * the member tables' credit columns and the Assist signal staff page — each\n * mounted through a shell-owned zone (AGL-2940) or the staff area's generic\n * route, so no console page imports this plugin.\n *\n * No `featureFlag` on the extension: the plugin's doors are gated one by\n * one — the dock reads the `release_assist` verdict the shell hands it, the\n * generative doors answer 404 behind `release_ai_generative`, the billing\n * cards render only where the plan sells a band — and a flag here would\n * switch off the released doors with the unreleased ones.\n */\nexport function registerAiConsole(): void {\n  registerAiDeclarations()\n  registerConsoleExtension({\n    pluginId: AI_PLUGIN_ID,\n    displayName: 'AI',\n    // The besigner copy assistant (AGL-89/419): mounted by the shell around\n    // every console page, and opened by this plugin's besigner controls.\n    providers: [AiAssistProviderOnHost],\n    // The Assist docs-gap and cost board (AGL-1860, AGL-2252), at the staff\n    // URL and under the tab it has always had.\n    staffPages: [\n      {\n        id: 'assist-signals',\n        label: 'Assist signal',\n        header: {\n          // The configured brand, not ours (AGL-2153/2260): a white-label\n          // deployment and a self-host operator both read this header.\n          title: `${PLATFORM_BRAND_NAME} Assist Signal`,\n          docsTopic: 'assistSignals',\n        },\n        Component: AssistSignalsPage,\n      },\n    ],\n    // \"Building your site\" (AGL-3594): where the guided start lands a person,\n    // and where a site job's notification opens. An address under the site\n    // and no tab — `/ai-jobs/{jobId}`.\n    navItems: [\n      {\n        label: 'Building your site',\n        href: AI_SITE_BUILD_HREF,\n        unlisted: true,\n        ownsSubtree: true,\n        permission: 'ai.generate',\n        Component: AiSiteBuildPage,\n      },\n    ],\n    widgets: [\n      {\n        slot: 'consoleDock',\n        widgetId: 'ai-assist-dock',\n        title: 'Assistant',\n        Component: AssistPanelOnHost,\n      },\n      // The AI jobs indicator (AGL-3593), beside the notifications bell on\n      // every page: what the workspace's jobs are doing, and the way to them.\n      // Gated as the other generative widgets are; it asks the shell for the\n      // release flags of the jobs and of the panel it opens.\n      {\n        slot: 'consoleTopBar',\n        widgetId: 'ai-jobs-indicator',\n        title: 'AI jobs',\n        featureFlag: 'aiGenerative',\n        permission: 'ai.generate',\n        Component: AiJobsTopBarIndicator,\n      },\n      {\n        slot: 'orgBillingUsage',\n        widgetId: 'ai-credits-meter',\n        title: 'AI credits',\n        Component: AiCreditsCard,\n      },\n      {\n        slot: 'orgBillingUsage',\n        widgetId: 'ai-credits-overage',\n        title: 'AI credits overage',\n        Component: BillingAssistOverageCard,\n      },\n      // The per-member usage (AGL-2928): who drew the credits the meter\n      // counts, on Billing → Usage, on each member's page, on the staff\n      // user page, and as a column of both member tables.\n      {\n        slot: 'orgBillingUsage',\n        widgetId: 'ai-usage-by-member',\n        title: 'Who is generating what',\n        permission: 'billing.view',\n        Component: AiTopUsersCard,\n      },\n      // The collaborators table's AI column (AGL-2927): whether each person\n      // may open the AI doors on the site, per site, ahead of the columns\n      // that report what they drew.\n      {\n        slot: 'hostMembers',\n        widgetId: 'ai-collaborator-permissions',\n        title: 'AI',\n        column: { header: 'AI' },\n        Component: AiCollaboratorPermissionsCell,\n      },\n      // The copy assistant's besigner controls (AGL-89, AGL-169): Generate a\n      // section on every editor's toolbar, and Rewrite with AI under the\n      // selected element's fields. Each opens the provider's dialog, and is\n      // drawn only while the reader holds the door's permission.\n      {\n        slot: 'besignerToolbar',\n        widgetId: 'ai-generate-section',\n        title: 'Generate a section with AI',\n        Component: AiGenerateSectionControl,\n      },\n      {\n        slot: 'besignerInspector',\n        widgetId: 'ai-rewrite-copy',\n        title: 'Rewrite with AI',\n        Component: AiRewriteControl,\n      },\n      // Save the selection as a reusable component (AGL-2908): the component\n      // job's second entry point, which proposes the properties a section\n      // should declare and applies them as the manual promote does.\n      {\n        slot: 'besignerInspector',\n        widgetId: 'ai-save-as-component',\n        title: 'Make a reusable component with AI',\n        permission: 'ai.generate',\n        Component: AiSaveAsComponent,\n      },\n      {\n        slot: 'orgMember',\n        widgetId: 'ai-member-usage',\n        title: 'AI usage',\n        Component: MemberAiUsageCard,\n      },\n      // The allotments (AGL-2942): a member's or a site's monthly share of\n      // the pool, set on Billing → Usage, on each member's page and on a\n      // site's collaborators card — each card asks the route what its\n      // reader may see and change.\n      {\n        slot: 'orgBillingUsage',\n        widgetId: 'ai-allotments',\n        title: 'AI allotments',\n        permission: 'billing.view',\n        Component: AiAllotmentsCard,\n      },\n      {\n        slot: 'orgMember',\n        widgetId: 'ai-member-allotment',\n        title: 'AI allotment',\n        Component: MemberAiAllotmentCard,\n      },\n      {\n        slot: 'hostMembers',\n        widgetId: 'ai-collaborator-allotment',\n        title: 'AI allotment',\n        column: {\n          header: 'AI allotment',\n          align: 'right',\n          Header: AiCollaboratorAllotmentHeader,\n        },\n        Component: AiCollaboratorAllotmentCell,\n      },\n      {\n        slot: 'hostMembers',\n        widgetId: 'ai-site-allotment',\n        title: 'Site AI allotment',\n        Component: AiSiteAllotmentCard,\n      },\n      // Themes by AI (AGL-2938): a brief on the site's Theme section, a\n      // proposal previewed before and after, and the editor's own Save to\n      // keep it. Generation is sold as `aiGenerative` and held by\n      // `ai.generate`, so the shell withholds the card from a plan or a\n      // member without either; the card itself asks the route about the\n      // release flag before it shows anything.\n      {\n        slot: 'hostTheme',\n        widgetId: 'ai-theme-proposal',\n        title: 'Theme assistant',\n        featureFlag: 'aiGenerative',\n        permission: 'ai.generate',\n        Component: AiThemeProposalCard,\n      },\n      {\n        slot: 'staffOrg',\n        widgetId: 'ai-org-usage',\n        title: 'AI usage',\n        Component: StaffOrgAiCard,\n      },\n      {\n        slot: 'staffUser',\n        widgetId: 'ai-account-usage',\n        title: 'AI usage across organizations',\n        Component: StaffUserAiUsageCard,\n      },\n      // The staff tables' AI figures (AGL-2984): the Organizations list's\n      // spend column, and the usage table's three columns with the credit\n      // pool line the org page draws above it.\n      {\n        slot: 'staffOrgsListColumn',\n        widgetId: 'ai-orgs-spend',\n        title: 'AI spend (month)',\n        column: {\n          header: 'AI spend (month)',\n          align: 'right',\n          Header: StaffOrgsAiSpendHeader,\n        },\n        Component: StaffOrgsAiSpendCell,\n      },\n      {\n        slot: 'staffOrgUsageColumn',\n        widgetId: 'ai-usage-assist-cost',\n        title: 'Assist',\n        column: { header: 'Assist', align: 'right' },\n        Component: StaffOrgUsageAssistCell,\n      },\n      {\n        slot: 'staffOrgUsageColumn',\n        widgetId: 'ai-usage-credits',\n        title: 'AI credits used',\n        column: { header: 'AI credits used', align: 'right' },\n        Component: StaffOrgUsageAiCreditsCell,\n      },\n      {\n        slot: 'staffOrgUsageColumn',\n        widgetId: 'ai-usage-overage',\n        title: 'AI overage billed ($)',\n        column: { header: 'AI overage billed ($)', align: 'right' },\n        Component: StaffOrgUsageAiOverageCell,\n      },\n      {\n        slot: 'staffOrgUsageColumn',\n        widgetId: 'ai-usage-pool',\n        title: 'AI credit pool',\n        Component: StaffOrgUsageAiPool,\n      },\n      {\n        slot: 'orgMembersListColumn',\n        widgetId: 'ai-member-credits',\n        title: 'AI credits (month)',\n        column: { header: 'AI credits (month)', align: 'right', Header: AiMemberCreditsHeader },\n        Component: AiMemberCreditsCell,\n      },\n      {\n        slot: 'hostMembers',\n        widgetId: 'ai-collaborator-credits',\n        title: 'AI credits (site, month)',\n        column: {\n          header: 'AI credits (site, month)',\n          align: 'right',\n          Header: AiCollaboratorCreditsHeader,\n        },\n        Component: AiCollaboratorCreditsCell,\n      },\n      // SEO by AI (AGL-2910): \"Write SEO\" inside every search listing editor\n      // — a page's SEO card and a product's listing — and the site audit on\n      // the site's SEO section. Generation is sold as `aiGenerative` and held\n      // by `ai.generate`, so the shell withholds both from a plan or a member\n      // without either; each card asks the jobs route about the release flag\n      // before it shows anything, and neither ever writes what it proposes.\n      {\n        slot: 'seoFields',\n        widgetId: 'ai-seo-fields',\n        title: 'SEO assistant',\n        featureFlag: 'aiGenerative',\n        permission: 'ai.generate',\n        Component: AiSeoFieldsCard,\n      },\n      {\n        slot: 'hostSeo',\n        widgetId: 'ai-seo-audit',\n        title: 'SEO audit',\n        featureFlag: 'aiGenerative',\n        permission: 'ai.generate',\n        Component: AiSeoAuditCard,\n      },\n      // A page from a brief (AGL-2907): \"Describe it\" beside Templates and\n      // Create New Screen. Gated as the other generative widgets are, and it\n      // asks the jobs route about the release flag before it shows anything.\n      {\n        slot: 'hostScreens',\n        widgetId: 'ai-describe-page',\n        title: 'Describe a page',\n        featureFlag: 'aiGenerative',\n        permission: 'ai.generate',\n        Component: AiDescribePageButton,\n      },\n      // The same entry for a page template, a layout and a form (AGL-3043),\n      // beside the create action of the page that lists each: the same\n      // dialog, the same gates, and the same question to the jobs route\n      // before it shows anything.\n      {\n        slot: 'hostTemplates',\n        widgetId: 'ai-describe-template',\n        title: 'Describe a page template',\n        featureFlag: 'aiGenerative',\n        permission: 'ai.generate',\n        Component: AiDescribeTemplateButton,\n      },\n      {\n        slot: 'hostLayouts',\n        widgetId: 'ai-describe-layout',\n        title: 'Describe a layout',\n        featureFlag: 'aiGenerative',\n        permission: 'ai.generate',\n        Component: AiDescribeLayoutButton,\n      },\n      {\n        slot: 'hostForms',\n        widgetId: 'ai-describe-form',\n        title: 'Describe a form',\n        featureFlag: 'aiGenerative',\n        permission: 'ai.generate',\n        Component: AiDescribeFormButton,\n      },\n      // And a reusable component from a brief (AGL-3051), beside Templates\n      // and Create Component: the component job's first entry point, which\n      // had none in the console.\n      {\n        slot: 'hostComponents',\n        widgetId: 'ai-describe-component',\n        title: 'Describe a reusable component',\n        featureFlag: 'aiGenerative',\n        permission: 'ai.generate',\n        Component: AiDescribeComponentButton,\n      },\n      // Automations by AI (AGL-2919), in the zones the workflows plugin hosts\n      // on its Automation page: \"Describe it\" beside Add action and Recipes,\n      // \"Explain it\" in the editor of a saved automation, and \"Why did this\n      // fail?\" on a failed run. Gated as the other generative widgets are;\n      // each asks the jobs route about the release flag before it shows\n      // anything, and none of them changes an automation.\n      {\n        slot: 'hostAutomations',\n        widgetId: 'ai-describe-automation',\n        title: 'Describe an automation',\n        featureFlag: 'aiGenerative',\n        permission: 'ai.generate',\n        Component: AiDescribeAutomationButton,\n      },\n      {\n        slot: 'automationEditor',\n        widgetId: 'ai-explain-automation',\n        title: 'Explain this automation',\n        featureFlag: 'aiGenerative',\n        permission: 'ai.generate',\n        Component: AiExplainAutomation,\n      },\n      {\n        slot: 'automationRun',\n        widgetId: 'ai-explain-run-failure',\n        title: 'Why did this run fail?',\n        featureFlag: 'aiGenerative',\n        permission: 'ai.generate',\n        Component: AiExplainRunFailure,\n      },\n      // CRM by AI (AGL-2917): a record's summary and next step on its page,\n      // a draft in the one-to-one composer, and an import's column matches.\n      // The CRM hosts each zone, so it is drawn only where the CRM is; the\n      // shell holds the plan and `ai.generate`, each card asks the jobs route\n      // about the release flag before it shows anything, and none writes what\n      // it proposes.\n      {\n        slot: 'recordInsights',\n        widgetId: 'ai-crm-record',\n        title: 'AI summary',\n        featureFlag: 'aiGenerative',\n        permission: 'ai.generate',\n        Component: AiCrmRecordCard,\n      },\n      {\n        slot: 'recordEmail',\n        widgetId: 'ai-crm-email',\n        title: 'Draft with AI',\n        featureFlag: 'aiGenerative',\n        permission: 'ai.generate',\n        Component: AiCrmEmailDraft,\n      },\n      {\n        slot: 'importMapping',\n        widgetId: 'ai-crm-import-mapping',\n        title: 'Match columns with AI',\n        featureFlag: 'aiGenerative',\n        permission: 'ai.generate',\n        Component: AiCrmImportMapping,\n      },\n      // The guided start (AGL-2918), on the page a newly created site lands\n      // on: a few questions that become a site scaffold. Gated as the other\n      // generative widgets are, and it asks the jobs route about the release\n      // flag before it shows anything — so a workspace the feature is not\n      // released to gets the blank page and nothing else. Skipping is the\n      // zone's own `startBlank`, which creates nothing.\n      {\n        slot: 'hostFirstRun',\n        widgetId: 'ai-site-start',\n        title: 'Start this site with AI',\n        featureFlag: 'aiGenerative',\n        permission: 'ai.generate',\n        Component: AiSiteStartCard,\n      },\n      // The listing those answers describe (AGL-2918), on the site's SEO\n      // section: the site-wide search title and description the guided start\n      // implies, offered where they are edited. The same gates as every\n      // generative widget, and it stages into the SEO form rather than\n      // writing it — a person's Update is the write, as it is for the audit\n      // card beside it.\n      {\n        slot: 'hostSeo',\n        widgetId: 'ai-site-seo-start',\n        title: 'The listing your answers describe',\n        featureFlag: 'aiGenerative',\n        permission: 'ai.generate',\n        Component: AiSiteSeoStartCard,\n      },\n      // The agency batch (AGL-2911): one brief across many of the org's\n      // sites, from the page that lists them. The card asks the jobs route\n      // about the release flag before it shows anything, and its own door\n      // holds the plan band and the caller's permission on every site it is\n      // pointed at.\n      {\n        slot: 'orgSites',\n        widgetId: 'ai-site-batch',\n        title: 'Generate sites with AI',\n        featureFlag: 'aiGenerative',\n        permission: 'ai.generate',\n        Component: AiSiteBatchCard,\n      },\n      // Commerce by AI (AGL-2916): product copy in the product editor, the\n      // catalog, categories and discounts on the products hub, and copy for\n      // an import as it lands. The commerce plugin hosts the zones and makes\n      // every write; each card asks the jobs route about the release flag\n      // before it shows anything.\n      {\n        slot: 'productEditor',\n        widgetId: 'ai-product-copy',\n        title: 'Product copy assistant',\n        featureFlag: 'aiGenerative',\n        permission: 'ai.generate',\n        Component: AiProductCopyCard,\n      },\n      {\n        slot: 'productsHub',\n        widgetId: 'ai-products-hub',\n        title: 'Build your catalog with AI',\n        featureFlag: 'aiGenerative',\n        permission: 'ai.generate',\n        Component: AiProductsHubCard,\n      },\n      {\n        slot: 'productImport',\n        widgetId: 'ai-product-import',\n        title: 'Write imported product copy with AI',\n        featureFlag: 'aiGenerative',\n        permission: 'ai.generate',\n        Component: AiProductImportOption,\n      },\n      // A/B tests by AI (AGL-2914): variants written in the experiment\n      // editor, and one test's result read in plain words below its figures.\n      // The A/B testing card hosts both zones, so they are drawn only where\n      // that card is and only on a site with A/B testing; the shell holds the\n      // plan band and `ai.generate`, and each card asks the jobs route about\n      // the release flag before it shows anything. Neither writes: the\n      // experiment editor's Save is the only write, and an explanation has\n      // nothing to apply.\n      {\n        slot: 'experimentVariants',\n        widgetId: 'ai-experiment-variants',\n        title: 'Write variants with AI',\n        featureFlag: 'aiGenerative',\n        permission: 'ai.generate',\n        Component: AiExperimentVariantsCard,\n      },\n      {\n        slot: 'experimentResult',\n        widgetId: 'ai-experiment-result',\n        title: 'Explain this result with AI',\n        featureFlag: 'aiGenerative',\n        permission: 'ai.generate',\n        Component: AiExperimentResultCard,\n      },\n    ],\n  })\n}\n"],"names":["PLATFORM_BRAND_NAME","registerConsoleExtension","AiCollaboratorPermissionsCell","AiSaveAsComponent","AiGenerateSectionControl","AiRewriteControl","AiAssistProviderOnHost","AssistPanelOnHost","AiCreditsCard","AiJobsTopBarIndicator","AiCollaboratorCreditsCell","AiCollaboratorCreditsHeader","AiMemberCreditsCell","AiMemberCreditsHeader","AssistSignalsPage","BillingAssistOverageCard","AiTopUsersCard","AiAllotmentsCard","AiCollaboratorAllotmentCell","AiCollaboratorAllotmentHeader","AiSiteAllotmentCard","MemberAiAllotmentCard","MemberAiUsageCard","AiThemeProposalCard","StaffOrgAiCard","StaffOrgUsageAiCreditsCell","StaffOrgUsageAiOverageCell","StaffOrgUsageAiPool","StaffOrgUsageAssistCell","StaffOrgsAiSpendCell","StaffOrgsAiSpendHeader","StaffUserAiUsageCard","AiSeoAuditCard","AiSiteBatchCard","AiSiteSeoStartCard","AiSiteStartCard","AiSeoFieldsCard","AiDescribeAutomationButton","AiCrmEmailDraft","AiCrmImportMapping","AiCrmRecordCard","AiDescribePageButton","AiDescribeComponentButton","AiDescribeFormButton","AiDescribeLayoutButton","AiDescribeTemplateButton","AiExperimentResultCard","AiExperimentVariantsCard","AiExplainAutomation","AiExplainRunFailure","AiProductCopyCard","AiProductImportOption","AiProductsHubCard","AiSiteBuildPage","AI_SITE_BUILD_HREF","AI_PLUGIN_ID","registerAiDeclarations","registerAiConsole","pluginId","displayName","providers","staffPages","id","label","header","title","docsTopic","Component","navItems","href","unlisted","ownsSubtree","permission","widgets","slot","widgetId","featureFlag","column","align","Header"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED,SAASA,mBAAmB,EAAEC,wBAAwB,QAAQ,eAAc;AAC5E,SAASC,6BAA6B,QAAQ,+DAA2D;AACzG,SAASC,iBAAiB,QAAQ,iDAA6C;AAC/E,SACEC,wBAAwB,EACxBC,gBAAgB,QACX,iDAA6C;AACpD,SACEC,sBAAsB,EACtBC,iBAAiB,QACZ,mDAA+C;AACtD,OAAOC,mBAAmB,4CAAwC;AAClE,OAAOC,2BAA2B,8CAA0C;AAC5E,SACEC,yBAAyB,EACzBC,2BAA2B,EAC3BC,mBAAmB,EACnBC,qBAAqB,QAChB,+CAA2C;AAClD,SAASC,iBAAiB,QAAQ,gDAA4C;AAC9E,OAAOC,8BAA8B,wDAAoD;AACzF,SAASC,cAAc,QAAQ,iDAA6C;AAC5E,SAASC,gBAAgB,QAAQ,kDAA8C;AAC/E,SACEC,2BAA2B,EAC3BC,6BAA6B,EAC7BC,mBAAmB,QACd,+CAA2C;AAClD,OAAOC,2BAA2B,qDAAiD;AACnF,OAAOC,uBAAuB,iDAA6C;AAC3E,OAAOC,yBAAyB,mDAA+C;AAC/E,OAAOC,oBAAoB,8CAA0C;AACrE,SACEC,0BAA0B,EAC1BC,0BAA0B,EAC1BC,mBAAmB,EACnBC,uBAAuB,QAClB,uDAAmD;AAC1D,SACEC,oBAAoB,EACpBC,sBAAsB,QACjB,uDAAmD;AAC1D,OAAOC,0BAA0B,qDAAiD;AAClF,OAAOC,oBAAoB,8CAA0C;AACrE,OAAOC,qBAAqB,+CAA2C;AACvE,OAAOC,wBAAwB,mDAA+C;AAC9E,OAAOC,qBAAqB,+CAA2C;AACvE,OAAOC,qBAAqB,+CAA2C;AACvE,OAAOC,gCAAgC,mDAA+C;AACtF,OAAOC,qBAAqB,+CAA2C;AACvE,OAAOC,wBAAwB,kDAA8C;AAC7E,OAAOC,qBAAqB,+CAA2C;AACvE,OAAOC,0BAA0B,6CAAyC;AAC1E,SACEC,yBAAyB,EACzBC,oBAAoB,EACpBC,sBAAsB,EACtBC,wBAAwB,QACnB,+CAA2C;AAClD,SACEC,sBAAsB,EACtBC,wBAAwB,QACnB,gDAA4C;AACnD,SACEC,mBAAmB,EACnBC,mBAAmB,QACd,kDAA8C;AACrD,OAAOC,uBAAuB,iDAA6C;AAC3E,OAAOC,2BAA2B,qDAAiD;AACnF,OAAOC,uBAAuB,iDAA6C;AAC3E,OAAOC,qBAAqB,+CAA2C;AACvE,SAASC,kBAAkB,QAAQ,+BAA2B;AAC9D,SAASC,YAAY,QAAQ,iBAAa;AAC1C,SAASC,sBAAsB,QAAQ,oBAAgB;AAEvD;;;;;;;;;;;;CAYC,GACD,OAAO,SAASC;IACdD;IACAvD,yBAAyB;QACvByD,UAAUH;QACVI,aAAa;QACb,wEAAwE;QACxE,qEAAqE;QACrEC,WAAW;YAACtD;SAAuB;QACnC,wEAAwE;QACxE,2CAA2C;QAC3CuD,YAAY;YACV;gBACEC,IAAI;gBACJC,OAAO;gBACPC,QAAQ;oBACN,gEAAgE;oBAChE,6DAA6D;oBAC7DC,OAAO,GAAGjE,oBAAoB,cAAc,CAAC;oBAC7CkE,WAAW;gBACb;gBACAC,WAAWrD;YACb;SACD;QACD,0EAA0E;QAC1E,uEAAuE;QACvE,mCAAmC;QACnCsD,UAAU;YACR;gBACEL,OAAO;gBACPM,MAAMf;gBACNgB,UAAU;gBACVC,aAAa;gBACbC,YAAY;gBACZL,WAAWd;YACb;SACD;QACDoB,SAAS;YACP;gBACEC,MAAM;gBACNC,UAAU;gBACVV,OAAO;gBACPE,WAAW5D;YACb;YACA,qEAAqE;YACrE,wEAAwE;YACxE,uEAAuE;YACvE,uDAAuD;YACvD;gBACEmE,MAAM;gBACNC,UAAU;gBACVV,OAAO;gBACPW,aAAa;gBACbJ,YAAY;gBACZL,WAAW1D;YACb;YACA;gBACEiE,MAAM;gBACNC,UAAU;gBACVV,OAAO;gBACPE,WAAW3D;YACb;YACA;gBACEkE,MAAM;gBACNC,UAAU;gBACVV,OAAO;gBACPE,WAAWpD;YACb;YACA,kEAAkE;YAClE,kEAAkE;YAClE,oDAAoD;YACpD;gBACE2D,MAAM;gBACNC,UAAU;gBACVV,OAAO;gBACPO,YAAY;gBACZL,WAAWnD;YACb;YACA,sEAAsE;YACtE,oEAAoE;YACpE,8BAA8B;YAC9B;gBACE0D,MAAM;gBACNC,UAAU;gBACVV,OAAO;gBACPY,QAAQ;oBAAEb,QAAQ;gBAAK;gBACvBG,WAAWjE;YACb;YACA,uEAAuE;YACvE,mEAAmE;YACnE,sEAAsE;YACtE,2DAA2D;YAC3D;gBACEwE,MAAM;gBACNC,UAAU;gBACVV,OAAO;gBACPE,WAAW/D;YACb;YACA;gBACEsE,MAAM;gBACNC,UAAU;gBACVV,OAAO;gBACPE,WAAW9D;YACb;YACA,uEAAuE;YACvE,oEAAoE;YACpE,8DAA8D;YAC9D;gBACEqE,MAAM;gBACNC,UAAU;gBACVV,OAAO;gBACPO,YAAY;gBACZL,WAAWhE;YACb;YACA;gBACEuE,MAAM;gBACNC,UAAU;gBACVV,OAAO;gBACPE,WAAW7C;YACb;YACA,qEAAqE;YACrE,mEAAmE;YACnE,gEAAgE;YAChE,6BAA6B;YAC7B;gBACEoD,MAAM;gBACNC,UAAU;gBACVV,OAAO;gBACPO,YAAY;gBACZL,WAAWlD;YACb;YACA;gBACEyD,MAAM;gBACNC,UAAU;gBACVV,OAAO;gBACPE,WAAW9C;YACb;YACA;gBACEqD,MAAM;gBACNC,UAAU;gBACVV,OAAO;gBACPY,QAAQ;oBACNb,QAAQ;oBACRc,OAAO;oBACPC,QAAQ5D;gBACV;gBACAgD,WAAWjD;YACb;YACA;gBACEwD,MAAM;gBACNC,UAAU;gBACVV,OAAO;gBACPE,WAAW/C;YACb;YACA,kEAAkE;YAClE,oEAAoE;YACpE,4DAA4D;YAC5D,kEAAkE;YAClE,kEAAkE;YAClE,yCAAyC;YACzC;gBACEsD,MAAM;gBACNC,UAAU;gBACVV,OAAO;gBACPW,aAAa;gBACbJ,YAAY;gBACZL,WAAW5C;YACb;YACA;gBACEmD,MAAM;gBACNC,UAAU;gBACVV,OAAO;gBACPE,WAAW3C;YACb;YACA;gBACEkD,MAAM;gBACNC,UAAU;gBACVV,OAAO;gBACPE,WAAWpC;YACb;YACA,oEAAoE;YACpE,oEAAoE;YACpE,yCAAyC;YACzC;gBACE2C,MAAM;gBACNC,UAAU;gBACVV,OAAO;gBACPY,QAAQ;oBACNb,QAAQ;oBACRc,OAAO;oBACPC,QAAQjD;gBACV;gBACAqC,WAAWtC;YACb;YACA;gBACE6C,MAAM;gBACNC,UAAU;gBACVV,OAAO;gBACPY,QAAQ;oBAAEb,QAAQ;oBAAUc,OAAO;gBAAQ;gBAC3CX,WAAWvC;YACb;YACA;gBACE8C,MAAM;gBACNC,UAAU;gBACVV,OAAO;gBACPY,QAAQ;oBAAEb,QAAQ;oBAAmBc,OAAO;gBAAQ;gBACpDX,WAAW1C;YACb;YACA;gBACEiD,MAAM;gBACNC,UAAU;gBACVV,OAAO;gBACPY,QAAQ;oBAAEb,QAAQ;oBAAyBc,OAAO;gBAAQ;gBAC1DX,WAAWzC;YACb;YACA;gBACEgD,MAAM;gBACNC,UAAU;gBACVV,OAAO;gBACPE,WAAWxC;YACb;YACA;gBACE+C,MAAM;gBACNC,UAAU;gBACVV,OAAO;gBACPY,QAAQ;oBAAEb,QAAQ;oBAAsBc,OAAO;oBAASC,QAAQlE;gBAAsB;gBACtFsD,WAAWvD;YACb;YACA;gBACE8D,MAAM;gBACNC,UAAU;gBACVV,OAAO;gBACPY,QAAQ;oBACNb,QAAQ;oBACRc,OAAO;oBACPC,QAAQpE;gBACV;gBACAwD,WAAWzD;YACb;YACA,uEAAuE;YACvE,sEAAsE;YACtE,wEAAwE;YACxE,wEAAwE;YACxE,uEAAuE;YACvE,sEAAsE;YACtE;gBACEgE,MAAM;gBACNC,UAAU;gBACVV,OAAO;gBACPW,aAAa;gBACbJ,YAAY;gBACZL,WAAW/B;YACb;YACA;gBACEsC,MAAM;gBACNC,UAAU;gBACVV,OAAO;gBACPW,aAAa;gBACbJ,YAAY;gBACZL,WAAWnC;YACb;YACA,qEAAqE;YACrE,uEAAuE;YACvE,uEAAuE;YACvE;gBACE0C,MAAM;gBACNC,UAAU;gBACVV,OAAO;gBACPW,aAAa;gBACbJ,YAAY;gBACZL,WAAW1B;YACb;YACA,sEAAsE;YACtE,iEAAiE;YACjE,kEAAkE;YAClE,4BAA4B;YAC5B;gBACEiC,MAAM;gBACNC,UAAU;gBACVV,OAAO;gBACPW,aAAa;gBACbJ,YAAY;gBACZL,WAAWtB;YACb;YACA;gBACE6B,MAAM;gBACNC,UAAU;gBACVV,OAAO;gBACPW,aAAa;gBACbJ,YAAY;gBACZL,WAAWvB;YACb;YACA;gBACE8B,MAAM;gBACNC,UAAU;gBACVV,OAAO;gBACPW,aAAa;gBACbJ,YAAY;gBACZL,WAAWxB;YACb;YACA,qEAAqE;YACrE,qEAAqE;YACrE,2BAA2B;YAC3B;gBACE+B,MAAM;gBACNC,UAAU;gBACVV,OAAO;gBACPW,aAAa;gBACbJ,YAAY;gBACZL,WAAWzB;YACb;YACA,wEAAwE;YACxE,uEAAuE;YACvE,sEAAsE;YACtE,qEAAqE;YACrE,kEAAkE;YAClE,oDAAoD;YACpD;gBACEgC,MAAM;gBACNC,UAAU;gBACVV,OAAO;gBACPW,aAAa;gBACbJ,YAAY;gBACZL,WAAW9B;YACb;YACA;gBACEqC,MAAM;gBACNC,UAAU;gBACVV,OAAO;gBACPW,aAAa;gBACbJ,YAAY;gBACZL,WAAWnB;YACb;YACA;gBACE0B,MAAM;gBACNC,UAAU;gBACVV,OAAO;gBACPW,aAAa;gBACbJ,YAAY;gBACZL,WAAWlB;YACb;YACA,sEAAsE;YACtE,sEAAsE;YACtE,qEAAqE;YACrE,wEAAwE;YACxE,wEAAwE;YACxE,eAAe;YACf;gBACEyB,MAAM;gBACNC,UAAU;gBACVV,OAAO;gBACPW,aAAa;gBACbJ,YAAY;gBACZL,WAAW3B;YACb;YACA;gBACEkC,MAAM;gBACNC,UAAU;gBACVV,OAAO;gBACPW,aAAa;gBACbJ,YAAY;gBACZL,WAAW7B;YACb;YACA;gBACEoC,MAAM;gBACNC,UAAU;gBACVV,OAAO;gBACPW,aAAa;gBACbJ,YAAY;gBACZL,WAAW5B;YACb;YACA,sEAAsE;YACtE,sEAAsE;YACtE,uEAAuE;YACvE,oEAAoE;YACpE,oEAAoE;YACpE,kDAAkD;YAClD;gBACEmC,MAAM;gBACNC,UAAU;gBACVV,OAAO;gBACPW,aAAa;gBACbJ,YAAY;gBACZL,WAAWhC;YACb;YACA,mEAAmE;YACnE,uEAAuE;YACvE,kEAAkE;YAClE,iEAAiE;YACjE,sEAAsE;YACtE,kBAAkB;YAClB;gBACEuC,MAAM;gBACNC,UAAU;gBACVV,OAAO;gBACPW,aAAa;gBACbJ,YAAY;gBACZL,WAAWjC;YACb;YACA,kEAAkE;YAClE,qEAAqE;YACrE,oEAAoE;YACpE,sEAAsE;YACtE,cAAc;YACd;gBACEwC,MAAM;gBACNC,UAAU;gBACVV,OAAO;gBACPW,aAAa;gBACbJ,YAAY;gBACZL,WAAWlC;YACb;YACA,qEAAqE;YACrE,sEAAsE;YACtE,uEAAuE;YACvE,oEAAoE;YACpE,4BAA4B;YAC5B;gBACEyC,MAAM;gBACNC,UAAU;gBACVV,OAAO;gBACPW,aAAa;gBACbJ,YAAY;gBACZL,WAAWjB;YACb;YACA;gBACEwB,MAAM;gBACNC,UAAU;gBACVV,OAAO;gBACPW,aAAa;gBACbJ,YAAY;gBACZL,WAAWf;YACb;YACA;gBACEsB,MAAM;gBACNC,UAAU;gBACVV,OAAO;gBACPW,aAAa;gBACbJ,YAAY;gBACZL,WAAWhB;YACb;YACA,iEAAiE;YACjE,uEAAuE;YACvE,sEAAsE;YACtE,wEAAwE;YACxE,uEAAuE;YACvE,iEAAiE;YACjE,qEAAqE;YACrE,oBAAoB;YACpB;gBACEuB,MAAM;gBACNC,UAAU;gBACVV,OAAO;gBACPW,aAAa;gBACbJ,YAAY;gBACZL,WAAWpB;YACb;YACA;gBACE2B,MAAM;gBACNC,UAAU;gBACVV,OAAO;gBACPW,aAAa;gBACbJ,YAAY;gBACZL,WAAWrB;YACb;SACD;IACH;AACF"}

package/src/lib/runtime/ai-abuse-guards.d.ts

@@ -50,13 +50,16 @@ export declare const AI_IP_RATE_WINDOW_MS = 60000;
 export declare function checkAiClientIpRateLimit(headers: ClientIpHeaders): RateLimitResult | null;
 /**
  * How old an account must be before a Free workspace it belongs to may
- * generate (`AI_FREE_MIN_ACCOUNT_AGE_HOURS`, default 24).
+ * generate (`AI_FREE_MIN_ACCOUNT_AGE_HOURS`, default 0 — off).
  *
- * The signup surface already costs a working inbox per account; a day of
- * age costs a day, which is the one thing a script minting accounts cannot
- * buy in bulk. Paid workspaces never consult it. Zero switches the rung
- * off, which a self-hoster running an invite-only deployment may
- * reasonably want; junk and an empty value take the default.
+ * Off by default (AGL-3591). A new site opens on Setup with the guided AI
+ * start over it, so a day-long wait refused a brand-new account at the
+ * exact moment it was invited to try the product. What bounds the Free
+ * taste's spend is the reservation — a 300-credit wall metered per account,
+ * per address and per day, under a platform-wide daily ceiling — not this
+ * rung. A deployment that wants a cooling-off period sets a positive
+ * number of hours; paid workspaces never consult it, and junk and an empty
+ * value take the default.
  */
 export declare function aiFreeMinAccountAgeHours(): number;
 /** How long one account's creation time is remembered per instance. */

package/src/lib/runtime/ai-abuse-guards.js

@@ -53,17 +53,20 @@ export const AI_IP_RATE_WINDOW_MS = 60000;
 }
 /**
  * How old an account must be before a Free workspace it belongs to may
- * generate (`AI_FREE_MIN_ACCOUNT_AGE_HOURS`, default 24).
+ * generate (`AI_FREE_MIN_ACCOUNT_AGE_HOURS`, default 0 — off).
  *
- * The signup surface already costs a working inbox per account; a day of
- * age costs a day, which is the one thing a script minting accounts cannot
- * buy in bulk. Paid workspaces never consult it. Zero switches the rung
- * off, which a self-hoster running an invite-only deployment may
- * reasonably want; junk and an empty value take the default.
+ * Off by default (AGL-3591). A new site opens on Setup with the guided AI
+ * start over it, so a day-long wait refused a brand-new account at the
+ * exact moment it was invited to try the product. What bounds the Free
+ * taste's spend is the reservation — a 300-credit wall metered per account,
+ * per address and per day, under a platform-wide daily ceiling — not this
+ * rung. A deployment that wants a cooling-off period sets a positive
+ * number of hours; paid workspaces never consult it, and junk and an empty
+ * value take the default.
  */ export function aiFreeMinAccountAgeHours() {
     const raw = process.env.AI_FREE_MIN_ACCOUNT_AGE_HOURS;
     const parsed = raw ? Number(raw) : Number.NaN;
-    return Number.isFinite(parsed) && parsed >= 0 ? parsed : 24;
+    return Number.isFinite(parsed) && parsed >= 0 ? parsed : 0;
 }
 /** How long one account's creation time is remembered per instance. */ export const ACCOUNT_AGE_CACHE_TTL_MS = 5 * 60 * 1000;
 /**

package/src/lib/runtime/ai-abuse-guards.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../../../../libs/plugins/ai/src/lib/runtime/ai-abuse-guards.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { resolveEffectivePlan } from '@aglyn/aglyn/app-utils/plan-entitlements'\nimport {\n  readClientIp,\n  type ClientIpHeaders,\n} from '@aglyn/aglyn/app-utils/request-ip'\nimport type { AglynOrgBilling } from '@aglyn/aglyn/foundation/definitions/org-billing.types'\nimport { checkRateLimit, type RateLimitResult } from '@aglyn/tenant-data-admin/server/api-http'\n\n/**\n * The request-level rungs the Free AI taste adds to every AI door\n * (AGL-2925): a per-address limiter and a minimum account age. Both are\n * small helpers a door calls from its ladder rather than rungs written\n * into each ladder, so the three doors and the shared gate cannot drift\n * into three limits.\n *\n * Neither touches Firestore. The limiter is the same per-instance window\n * as the per-uid one and carries the same caveat — it smooths bursts and is\n * not the spend bound; the reservation is. The account-age rung reads one\n * Auth record, cached per instance, and applies only to a Free workspace.\n */\n\n/** Requests one client address may make against the AI doors a minute. */\nexport const AI_IP_RATE_LIMIT = 60\nexport const AI_IP_RATE_WINDOW_MS = 60_000\n\n/**\n * The per-address window shared by every AI door.\n *\n * Keyed on the TRUSTED-HOP client address (`readClientIp`), never on a\n * header a caller can write, for the reason that module exists: on an\n * appending proxy the leftmost `x-forwarded-for` hop is whatever the caller\n * typed, and a limiter keyed on it hands out a fresh budget per request.\n * `null` when no address is readable — the caller skips the rung, because\n * keying every anonymous request under one placeholder caps the whole\n * install at sixty requests a minute.\n *\n * Sixty a minute is three times the per-uid window (20/min at each door):\n * an office NAT signing in a team of three fits under it, and a farm\n * rotating accounts behind one address does not.\n */\nexport function checkAiClientIpRateLimit(\n  headers: ClientIpHeaders,\n): RateLimitResult | null {\n  const ip = readClientIp(headers)\n  if (!ip) return null\n  return checkRateLimit(`ai-ip:${ip}`, {\n    limit: AI_IP_RATE_LIMIT,\n    windowMs: AI_IP_RATE_WINDOW_MS,\n  })\n}\n\n/**\n * How old an account must be before a Free workspace it belongs to may\n * generate (`AI_FREE_MIN_ACCOUNT_AGE_HOURS`, default 24).\n *\n * The signup surface already costs a working inbox per account; a day of\n * age costs a day, which is the one thing a script minting accounts cannot\n * buy in bulk. Paid workspaces never consult it. Zero switches the rung\n * off, which a self-hoster running an invite-only deployment may\n * reasonably want; junk and an empty value take the default.\n */\nexport function aiFreeMinAccountAgeHours(): number {\n  const raw = process.env.AI_FREE_MIN_ACCOUNT_AGE_HOURS\n  const parsed = raw ? Number(raw) : Number.NaN\n  return Number.isFinite(parsed) && parsed >= 0 ? parsed : 24\n}\n\n/** How long one account's creation time is remembered per instance. */\nexport const ACCOUNT_AGE_CACHE_TTL_MS = 5 * 60 * 1000\n\n/**\n * Entries the cache holds before it is dropped whole. A creation time is a\n * few bytes, but a limiter that can be made to remember every uid ever\n * seen is a memory leak with a use case, so the map is bounded and simply\n * forgets everything when it fills — the next request re-reads.\n */\nexport const ACCOUNT_AGE_CACHE_MAX_ENTRIES = 5_000\n\nlet accountAgeCache = new Map<string, { creationTimeMs: number; at: number }>()\n\n/** Test seam — drops the per-instance cache. */\nexport function resetAccountAgeCache(): void {\n  accountAgeCache = new Map()\n}\n\n/** The one thing this rung reads off an Auth record. */\nexport interface AccountAgeLookup {\n  (uid: string): Promise<{ metadata: { creationTime?: string | null } }>\n}\n\n/**\n * When the account was created, in epoch milliseconds, or `null` when the\n * record carries no usable creation time.\n *\n * Read through the caller's `getUser` — the Auth pool the token was minted\n * in — because the decoded token carries `auth_time` (this sign-in) and\n * not the account's creation, and a fresh account can sign in as often as\n * it likes. Cached per instance for a few minutes: the value never changes,\n * and the doors are called far more often than once per account.\n */\nexport async function accountCreationTimeMs(\n  uid: string,\n  getUser: AccountAgeLookup,\n  now = Date.now(),\n): Promise<number | null> {\n  const cached = accountAgeCache.get(uid)\n  if (cached && now - cached.at < ACCOUNT_AGE_CACHE_TTL_MS) {\n    return cached.creationTimeMs\n  }\n  const record = await getUser(uid)\n  const creationTimeMs = Date.parse(record.metadata?.creationTime ?? '')\n  if (!Number.isFinite(creationTimeMs)) return null\n  if (accountAgeCache.size >= ACCOUNT_AGE_CACHE_MAX_ENTRIES) resetAccountAgeCache()\n  accountAgeCache.set(uid, { creationTimeMs, at: now })\n  return creationTimeMs\n}\n\n/**\n * The account-age rung: the `Response` to send, or `null` to climb on.\n *\n * Applies to a FREE workspace only — `resolveEffectivePlan`, so a dead\n * subscription is Free here as everywhere — and never to staff, who are\n * the ones verifying the fix during an incident. An account younger than\n * the minimum is a 403 with `reason: 'account-age'`, and the sentence says\n * when to come back rather than hinting at a way around it.\n *\n * Fails CLOSED for a Free workspace: a record that cannot be read is a\n * 503, not an admission. The verifier just accepted this token from the\n * same Auth service, so the read failing is rare, and the rung exists\n * precisely for the request whose age cannot be vouched for. A paid\n * workspace never reaches the read.\n */\nexport async function freeAccountAgeRefusal(input: {\n  uid: string\n  org: Partial<AglynOrgBilling> | null | undefined\n  staff: boolean\n  getUser: AccountAgeLookup\n  now?: Date\n}): Promise<Response | null> {\n  if (input.staff) return null\n  if (resolveEffectivePlan(input.org) !== 'free') return null\n  const hours = aiFreeMinAccountAgeHours()\n  if (hours <= 0) return null\n  const now = input.now ?? new Date()\n  let createdMs: number | null\n  try {\n    createdMs = await accountCreationTimeMs(input.uid, input.getUser, now.getTime())\n  } catch (error) {\n    console.error('[ai-abuse-guards] account age unavailable', error)\n    return Response.json(\n      { error: 'This feature is temporarily unavailable' },\n      { status: 503 },\n    )\n  }\n  const ageMs = createdMs === null ? 0 : now.getTime() - createdMs\n  if (ageMs >= hours * 60 * 60 * 1000) return null\n  const label = hours === 1 ? '1 hour' : `${hours} hours`\n  return Response.json(\n    {\n      error:\n        `AI generation opens ${label} after an account is created — ` +\n        'come back then, or upgrade this workspace to use it now.',\n      reason: 'account-age',\n    },\n    { status: 403 },\n  )\n}\n"],"names":["resolveEffectivePlan","readClientIp","checkRateLimit","AI_IP_RATE_LIMIT","AI_IP_RATE_WINDOW_MS","checkAiClientIpRateLimit","headers","ip","limit","windowMs","aiFreeMinAccountAgeHours","raw","process","env","AI_FREE_MIN_ACCOUNT_AGE_HOURS","parsed","Number","NaN","isFinite","ACCOUNT_AGE_CACHE_TTL_MS","ACCOUNT_AGE_CACHE_MAX_ENTRIES","accountAgeCache","Map","resetAccountAgeCache","accountCreationTimeMs","uid","getUser","now","Date","record","cached","get","at","creationTimeMs","parse","metadata","creationTime","size","set","freeAccountAgeRefusal","input","staff","org","hours","createdMs","getTime","error","console","Response","json","status","ageMs","label","reason"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED,SAASA,oBAAoB,QAAQ,2CAA0C;AAC/E,SACEC,YAAY,QAEP,oCAAmC;AAE1C,SAASC,cAAc,QAA8B,2CAA0C;AAE/F;;;;;;;;;;;CAWC,GAED,wEAAwE,GACxE,OAAO,MAAMC,mBAAmB,GAAE;AAClC,OAAO,MAAMC,uBAAuB,MAAM;AAE1C;;;;;;;;;;;;;;CAcC,GACD,OAAO,SAASC,yBACdC,OAAwB;IAExB,MAAMC,KAAKN,aAAaK;IACxB,IAAI,CAACC,IAAI,OAAO;IAChB,OAAOL,eAAe,CAAC,MAAM,EAAEK,IAAI,EAAE;QACnCC,OAAOL;QACPM,UAAUL;IACZ;AACF;AAEA;;;;;;;;;CASC,GACD,OAAO,SAASM;IACd,MAAMC,MAAMC,QAAQC,GAAG,CAACC,6BAA6B;IACrD,MAAMC,SAASJ,MAAMK,OAAOL,OAAOK,OAAOC,GAAG;IAC7C,OAAOD,OAAOE,QAAQ,CAACH,WAAWA,UAAU,IAAIA,SAAS;AAC3D;AAEA,qEAAqE,GACrE,OAAO,MAAMI,2BAA2B,IAAI,KAAK,KAAI;AAErD;;;;;CAKC,GACD,OAAO,MAAMC,gCAAgC,KAAK;AAElD,IAAIC,kBAAkB,IAAIC;AAE1B,8CAA8C,GAC9C,OAAO,SAASC;IACdF,kBAAkB,IAAIC;AACxB;AAOA;;;;;;;;;CASC,GACD,OAAO,eAAeE,sBACpBC,GAAW,EACXC,OAAyB,EACzBC,MAAMC,KAAKD,GAAG,EAAE;;QAOkBE;IALlC,MAAMC,SAAST,gBAAgBU,GAAG,CAACN;IACnC,IAAIK,UAAUH,MAAMG,OAAOE,EAAE,GAAGb,0BAA0B;QACxD,OAAOW,OAAOG,cAAc;IAC9B;IACA,MAAMJ,SAAS,MAAMH,QAAQD;IAC7B,MAAMQ,iBAAiBL,KAAKM,KAAK,UAACL,mBAAAA,OAAOM,QAAQ,qBAAfN,iBAAiBO,YAAY,mBAAI;IACnE,IAAI,CAACpB,OAAOE,QAAQ,CAACe,iBAAiB,OAAO;IAC7C,IAAIZ,gBAAgBgB,IAAI,IAAIjB,+BAA+BG;IAC3DF,gBAAgBiB,GAAG,CAACb,KAAK;QAAEQ;QAAgBD,IAAIL;IAAI;IACnD,OAAOM;AACT;AAEA;;;;;;;;;;;;;;CAcC,GACD,OAAO,eAAeM,sBAAsBC,KAM3C;QAKaA;IAJZ,IAAIA,MAAMC,KAAK,EAAE,OAAO;IACxB,IAAIzC,qBAAqBwC,MAAME,GAAG,MAAM,QAAQ,OAAO;IACvD,MAAMC,QAAQjC;IACd,IAAIiC,SAAS,GAAG,OAAO;IACvB,MAAMhB,OAAMa,aAAAA,MAAMb,GAAG,YAATa,aAAa,IAAIZ;IAC7B,IAAIgB;IACJ,IAAI;QACFA,YAAY,MAAMpB,sBAAsBgB,MAAMf,GAAG,EAAEe,MAAMd,OAAO,EAAEC,IAAIkB,OAAO;IAC/E,EAAE,OAAOC,OAAO;QACdC,QAAQD,KAAK,CAAC,6CAA6CA;QAC3D,OAAOE,SAASC,IAAI,CAClB;YAAEH,OAAO;QAA0C,GACnD;YAAEI,QAAQ;QAAI;IAElB;IACA,MAAMC,QAAQP,cAAc,OAAO,IAAIjB,IAAIkB,OAAO,KAAKD;IACvD,IAAIO,SAASR,QAAQ,KAAK,KAAK,MAAM,OAAO;IAC5C,MAAMS,QAAQT,UAAU,IAAI,WAAW,GAAGA,MAAM,MAAM,CAAC;IACvD,OAAOK,SAASC,IAAI,CAClB;QACEH,OACE,CAAC,oBAAoB,EAAEM,MAAM,+BAA+B,CAAC,GAC7D;QACFC,QAAQ;IACV,GACA;QAAEH,QAAQ;IAAI;AAElB"}
+{"version":3,"sources":["../../../../../../../libs/plugins/ai/src/lib/runtime/ai-abuse-guards.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { resolveEffectivePlan } from '@aglyn/aglyn/app-utils/plan-entitlements'\nimport {\n  readClientIp,\n  type ClientIpHeaders,\n} from '@aglyn/aglyn/app-utils/request-ip'\nimport type { AglynOrgBilling } from '@aglyn/aglyn/foundation/definitions/org-billing.types'\nimport { checkRateLimit, type RateLimitResult } from '@aglyn/tenant-data-admin/server/api-http'\n\n/**\n * The request-level rungs the Free AI taste adds to every AI door\n * (AGL-2925): a per-address limiter and a minimum account age. Both are\n * small helpers a door calls from its ladder rather than rungs written\n * into each ladder, so the three doors and the shared gate cannot drift\n * into three limits.\n *\n * Neither touches Firestore. The limiter is the same per-instance window\n * as the per-uid one and carries the same caveat — it smooths bursts and is\n * not the spend bound; the reservation is. The account-age rung reads one\n * Auth record, cached per instance, and applies only to a Free workspace.\n */\n\n/** Requests one client address may make against the AI doors a minute. */\nexport const AI_IP_RATE_LIMIT = 60\nexport const AI_IP_RATE_WINDOW_MS = 60_000\n\n/**\n * The per-address window shared by every AI door.\n *\n * Keyed on the TRUSTED-HOP client address (`readClientIp`), never on a\n * header a caller can write, for the reason that module exists: on an\n * appending proxy the leftmost `x-forwarded-for` hop is whatever the caller\n * typed, and a limiter keyed on it hands out a fresh budget per request.\n * `null` when no address is readable — the caller skips the rung, because\n * keying every anonymous request under one placeholder caps the whole\n * install at sixty requests a minute.\n *\n * Sixty a minute is three times the per-uid window (20/min at each door):\n * an office NAT signing in a team of three fits under it, and a farm\n * rotating accounts behind one address does not.\n */\nexport function checkAiClientIpRateLimit(\n  headers: ClientIpHeaders,\n): RateLimitResult | null {\n  const ip = readClientIp(headers)\n  if (!ip) return null\n  return checkRateLimit(`ai-ip:${ip}`, {\n    limit: AI_IP_RATE_LIMIT,\n    windowMs: AI_IP_RATE_WINDOW_MS,\n  })\n}\n\n/**\n * How old an account must be before a Free workspace it belongs to may\n * generate (`AI_FREE_MIN_ACCOUNT_AGE_HOURS`, default 0 — off).\n *\n * Off by default (AGL-3591). A new site opens on Setup with the guided AI\n * start over it, so a day-long wait refused a brand-new account at the\n * exact moment it was invited to try the product. What bounds the Free\n * taste's spend is the reservation — a 300-credit wall metered per account,\n * per address and per day, under a platform-wide daily ceiling — not this\n * rung. A deployment that wants a cooling-off period sets a positive\n * number of hours; paid workspaces never consult it, and junk and an empty\n * value take the default.\n */\nexport function aiFreeMinAccountAgeHours(): number {\n  const raw = process.env.AI_FREE_MIN_ACCOUNT_AGE_HOURS\n  const parsed = raw ? Number(raw) : Number.NaN\n  return Number.isFinite(parsed) && parsed >= 0 ? parsed : 0\n}\n\n/** How long one account's creation time is remembered per instance. */\nexport const ACCOUNT_AGE_CACHE_TTL_MS = 5 * 60 * 1000\n\n/**\n * Entries the cache holds before it is dropped whole. A creation time is a\n * few bytes, but a limiter that can be made to remember every uid ever\n * seen is a memory leak with a use case, so the map is bounded and simply\n * forgets everything when it fills — the next request re-reads.\n */\nexport const ACCOUNT_AGE_CACHE_MAX_ENTRIES = 5_000\n\nlet accountAgeCache = new Map<string, { creationTimeMs: number; at: number }>()\n\n/** Test seam — drops the per-instance cache. */\nexport function resetAccountAgeCache(): void {\n  accountAgeCache = new Map()\n}\n\n/** The one thing this rung reads off an Auth record. */\nexport interface AccountAgeLookup {\n  (uid: string): Promise<{ metadata: { creationTime?: string | null } }>\n}\n\n/**\n * When the account was created, in epoch milliseconds, or `null` when the\n * record carries no usable creation time.\n *\n * Read through the caller's `getUser` — the Auth pool the token was minted\n * in — because the decoded token carries `auth_time` (this sign-in) and\n * not the account's creation, and a fresh account can sign in as often as\n * it likes. Cached per instance for a few minutes: the value never changes,\n * and the doors are called far more often than once per account.\n */\nexport async function accountCreationTimeMs(\n  uid: string,\n  getUser: AccountAgeLookup,\n  now = Date.now(),\n): Promise<number | null> {\n  const cached = accountAgeCache.get(uid)\n  if (cached && now - cached.at < ACCOUNT_AGE_CACHE_TTL_MS) {\n    return cached.creationTimeMs\n  }\n  const record = await getUser(uid)\n  const creationTimeMs = Date.parse(record.metadata?.creationTime ?? '')\n  if (!Number.isFinite(creationTimeMs)) return null\n  if (accountAgeCache.size >= ACCOUNT_AGE_CACHE_MAX_ENTRIES) resetAccountAgeCache()\n  accountAgeCache.set(uid, { creationTimeMs, at: now })\n  return creationTimeMs\n}\n\n/**\n * The account-age rung: the `Response` to send, or `null` to climb on.\n *\n * Applies to a FREE workspace only — `resolveEffectivePlan`, so a dead\n * subscription is Free here as everywhere — and never to staff, who are\n * the ones verifying the fix during an incident. An account younger than\n * the minimum is a 403 with `reason: 'account-age'`, and the sentence says\n * when to come back rather than hinting at a way around it.\n *\n * Fails CLOSED for a Free workspace: a record that cannot be read is a\n * 503, not an admission. The verifier just accepted this token from the\n * same Auth service, so the read failing is rare, and the rung exists\n * precisely for the request whose age cannot be vouched for. A paid\n * workspace never reaches the read.\n */\nexport async function freeAccountAgeRefusal(input: {\n  uid: string\n  org: Partial<AglynOrgBilling> | null | undefined\n  staff: boolean\n  getUser: AccountAgeLookup\n  now?: Date\n}): Promise<Response | null> {\n  if (input.staff) return null\n  if (resolveEffectivePlan(input.org) !== 'free') return null\n  const hours = aiFreeMinAccountAgeHours()\n  if (hours <= 0) return null\n  const now = input.now ?? new Date()\n  let createdMs: number | null\n  try {\n    createdMs = await accountCreationTimeMs(input.uid, input.getUser, now.getTime())\n  } catch (error) {\n    console.error('[ai-abuse-guards] account age unavailable', error)\n    return Response.json(\n      { error: 'This feature is temporarily unavailable' },\n      { status: 503 },\n    )\n  }\n  const ageMs = createdMs === null ? 0 : now.getTime() - createdMs\n  if (ageMs >= hours * 60 * 60 * 1000) return null\n  const label = hours === 1 ? '1 hour' : `${hours} hours`\n  return Response.json(\n    {\n      error:\n        `AI generation opens ${label} after an account is created — ` +\n        'come back then, or upgrade this workspace to use it now.',\n      reason: 'account-age',\n    },\n    { status: 403 },\n  )\n}\n"],"names":["resolveEffectivePlan","readClientIp","checkRateLimit","AI_IP_RATE_LIMIT","AI_IP_RATE_WINDOW_MS","checkAiClientIpRateLimit","headers","ip","limit","windowMs","aiFreeMinAccountAgeHours","raw","process","env","AI_FREE_MIN_ACCOUNT_AGE_HOURS","parsed","Number","NaN","isFinite","ACCOUNT_AGE_CACHE_TTL_MS","ACCOUNT_AGE_CACHE_MAX_ENTRIES","accountAgeCache","Map","resetAccountAgeCache","accountCreationTimeMs","uid","getUser","now","Date","record","cached","get","at","creationTimeMs","parse","metadata","creationTime","size","set","freeAccountAgeRefusal","input","staff","org","hours","createdMs","getTime","error","console","Response","json","status","ageMs","label","reason"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED,SAASA,oBAAoB,QAAQ,2CAA0C;AAC/E,SACEC,YAAY,QAEP,oCAAmC;AAE1C,SAASC,cAAc,QAA8B,2CAA0C;AAE/F;;;;;;;;;;;CAWC,GAED,wEAAwE,GACxE,OAAO,MAAMC,mBAAmB,GAAE;AAClC,OAAO,MAAMC,uBAAuB,MAAM;AAE1C;;;;;;;;;;;;;;CAcC,GACD,OAAO,SAASC,yBACdC,OAAwB;IAExB,MAAMC,KAAKN,aAAaK;IACxB,IAAI,CAACC,IAAI,OAAO;IAChB,OAAOL,eAAe,CAAC,MAAM,EAAEK,IAAI,EAAE;QACnCC,OAAOL;QACPM,UAAUL;IACZ;AACF;AAEA;;;;;;;;;;;;CAYC,GACD,OAAO,SAASM;IACd,MAAMC,MAAMC,QAAQC,GAAG,CAACC,6BAA6B;IACrD,MAAMC,SAASJ,MAAMK,OAAOL,OAAOK,OAAOC,GAAG;IAC7C,OAAOD,OAAOE,QAAQ,CAACH,WAAWA,UAAU,IAAIA,SAAS;AAC3D;AAEA,qEAAqE,GACrE,OAAO,MAAMI,2BAA2B,IAAI,KAAK,KAAI;AAErD;;;;;CAKC,GACD,OAAO,MAAMC,gCAAgC,KAAK;AAElD,IAAIC,kBAAkB,IAAIC;AAE1B,8CAA8C,GAC9C,OAAO,SAASC;IACdF,kBAAkB,IAAIC;AACxB;AAOA;;;;;;;;;CASC,GACD,OAAO,eAAeE,sBACpBC,GAAW,EACXC,OAAyB,EACzBC,MAAMC,KAAKD,GAAG,EAAE;;QAOkBE;IALlC,MAAMC,SAAST,gBAAgBU,GAAG,CAACN;IACnC,IAAIK,UAAUH,MAAMG,OAAOE,EAAE,GAAGb,0BAA0B;QACxD,OAAOW,OAAOG,cAAc;IAC9B;IACA,MAAMJ,SAAS,MAAMH,QAAQD;IAC7B,MAAMQ,iBAAiBL,KAAKM,KAAK,UAACL,mBAAAA,OAAOM,QAAQ,qBAAfN,iBAAiBO,YAAY,mBAAI;IACnE,IAAI,CAACpB,OAAOE,QAAQ,CAACe,iBAAiB,OAAO;IAC7C,IAAIZ,gBAAgBgB,IAAI,IAAIjB,+BAA+BG;IAC3DF,gBAAgBiB,GAAG,CAACb,KAAK;QAAEQ;QAAgBD,IAAIL;IAAI;IACnD,OAAOM;AACT;AAEA;;;;;;;;;;;;;;CAcC,GACD,OAAO,eAAeM,sBAAsBC,KAM3C;QAKaA;IAJZ,IAAIA,MAAMC,KAAK,EAAE,OAAO;IACxB,IAAIzC,qBAAqBwC,MAAME,GAAG,MAAM,QAAQ,OAAO;IACvD,MAAMC,QAAQjC;IACd,IAAIiC,SAAS,GAAG,OAAO;IACvB,MAAMhB,OAAMa,aAAAA,MAAMb,GAAG,YAATa,aAAa,IAAIZ;IAC7B,IAAIgB;IACJ,IAAI;QACFA,YAAY,MAAMpB,sBAAsBgB,MAAMf,GAAG,EAAEe,MAAMd,OAAO,EAAEC,IAAIkB,OAAO;IAC/E,EAAE,OAAOC,OAAO;QACdC,QAAQD,KAAK,CAAC,6CAA6CA;QAC3D,OAAOE,SAASC,IAAI,CAClB;YAAEH,OAAO;QAA0C,GACnD;YAAEI,QAAQ;QAAI;IAElB;IACA,MAAMC,QAAQP,cAAc,OAAO,IAAIjB,IAAIkB,OAAO,KAAKD;IACvD,IAAIO,SAASR,QAAQ,KAAK,KAAK,MAAM,OAAO;IAC5C,MAAMS,QAAQT,UAAU,IAAI,WAAW,GAAGA,MAAM,MAAM,CAAC;IACvD,OAAOK,SAASC,IAAI,CAClB;QACEH,OACE,CAAC,oBAAoB,EAAEM,MAAM,+BAA+B,CAAC,GAC7D;QACFC,QAAQ;IACV,GACA;QAAEH,QAAQ;IAAI;AAElB"}

package/src/lib/runtime/ai-doctrine-validators.js

@@ -24,6 +24,7 @@ import { parseBreakpointSpan } from "@aglyn/shared-data-enums/breakpoint-span";
 import { renderEmailHtml } from "@aglyn/shared-util-email/email-render";
 import { AI_BUILD_PLAN_CREATION_NOUNS, AI_BUILD_PLAN_EMBED_HOST_NAMES, AI_PLAN_ASKS_FOR_VIDEO, aiEmbedHostOf, aiEmbedVideoKey, aiPlanCreateFor, aiPlanSlugKey, aiPlanUndeclaredRefs, isAiPlanNewRef } from "../model/ai-build-plan.js";
 import { aiCreationNoun, aiPlanUncreatable, aiPlanUncreatableKind } from "../model/ai-plan-capabilities.js";
+import { aiFreeSiteSectionsWithin } from "../model/ai-site-job.js";
 import { AI_INSTANCE_REF_PROP, validateAiNodeTree } from "./ai-node-tree.js";
 import { AI_PAGE_SCROLL_TO_PROP, aiPageLinkTarget, aiStoredScrollTargets } from "./ai-page-links.js";
 import { AI_EMAIL_CLIP_BYTES, AI_OUTPUT_BUDGETS, AI_OUTPUT_SURFACE, isHeadlineVariant } from "./ai-palette.js";
@@ -2976,10 +2977,13 @@ function slugKey(slug) {
 /** Rule 10 (plan): every screen has a free, well-formed slug, an SEO title and description. */ export function detectMissingNavAndSeo(plan, inventory) {
     var _ref;
     const violations = [];
-    const taken = new Map(((_ref = inventory == null ? void 0 : inventory.screens) != null ? _ref : []).map((screen)=>[
+    // The starter home a planned home page replaces (AGL-3594) keeps no
+    // address from the plan: publishing the page planned at `/` retires it.
+    const taken = new Map(((_ref = inventory == null ? void 0 : inventory.screens) != null ? _ref : []).filter((screen)=>!screen.replaceable).map((screen)=>[
             slugKey(screen.slug),
             screen.name
         ]));
+    const clashes = new Set();
     const seen = new Set();
     const badSlugs = [];
     const collisions = [];
@@ -2990,6 +2994,7 @@ function slugKey(slug) {
             badSlugs.push(`screens[${index}].slug`);
         } else if (seen.has(key) || taken.has(key)) {
             collisions.push(`screens[${index}].slug`);
+            clashes.add(`/${key}`);
         }
         seen.add(key);
         if (!screen.seoTitle || screen.seoTitle.length > AI_SEO_TITLE_MAX) {
@@ -3011,7 +3016,10 @@ function slugKey(slug) {
         violations.push({
             rule: 10,
             code: 'plan-slug-taken',
-            message: 'A page reuses an address the site or the plan already uses. Give each page its own slug.',
+            // Names the addresses, so the one re-ask can move the page off them.
+            message: `A page reuses an address the site or the plan already uses (${[
+                ...clashes
+            ].join(', ')}). Give each page its own slug.`,
             paths: collisions
         });
     }
@@ -3061,7 +3069,8 @@ function slugKey(slug) {
             }
             return;
         }
-        const nearest = ((_ref = inventory == null ? void 0 : inventory.screens) != null ? _ref : []).find((existing)=>!existing.template && aiNamesMatch(existing.name, screen.title));
+        // A starter home is replaced, not duplicated (AGL-3594).
+        const nearest = ((_ref = inventory == null ? void 0 : inventory.screens) != null ? _ref : []).find((existing)=>!existing.template && !existing.replaceable && aiNamesMatch(existing.name, screen.title));
         if (nearest) {
             violations.push({
                 rule: 15,
@@ -3157,7 +3166,25 @@ function slugKey(slug) {
     const asked = plan.screens.reduce((sum, screen)=>sum + screen.sections.length, 0);
     const layouts = freePlanLayouts(plan, inventory, capabilities);
     const pages = Math.max(plan.screens.length, 1);
-    const fits = aiFreePageSectionsWithin({
+    // A Free site scaffold (AGL-3594) is held to its page cap first, and then to
+    // what a SITE plan's worst case leaves for sections, with room for a retry.
+    const sitePages = capabilities.freeSitePages;
+    if (sitePages !== undefined && plan.screens.length > sitePages) {
+        return [
+            {
+                rule: null,
+                code: 'plan-over-free-wall',
+                message: `This plan builds ${plan.screens.length} pages, and a Free workspace's site start builds at most ${sitePages}. Plan the home page and the one page the brief most needs.`,
+                paths: [
+                    'screens'
+                ]
+            }
+        ];
+    }
+    const fits = sitePages !== undefined ? aiFreeSiteSectionsWithin({
+        layouts,
+        pages
+    }, FREE_AI_TASTE_CREDITS_PER_MONTH) : aiFreePageSectionsWithin({
         layouts,
         pages
     });