@aglyn/plugins-ai 1.0.0-beta.228 → 1.0.0-beta.230

package/src/lib/providers/routing.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../../../../libs/plugins/ai/src/lib/providers/routing.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { AI_SETTING_PLATFORM, AI_STEP_MODEL_SETTING } from '../plugin-config'\nimport {\n  AI_STEP_TIERS,\n  aiCatalogEntry,\n  aiDefaultModelFor,\n  type AiStepKind,\n} from './catalog'\nimport type { AiEvalKind } from '../runtime/ai-eval'\nimport type { AiEffort, AiProvider, AiThinking } from './contract'\nimport { aiProviderById, defaultAiProvider } from './registry'\n\n/**\n * The routing table (AGL-2937, AGL-2939): step kind → provider and model,\n * through the catalog and never a vendor literal.\n *\n * Precedence, dearest override first:\n *\n * 1. the org's `pluginSettings/ai` — a provider, and a model per step kind\n *    that must be one the provider serves;\n * 2. the deployment's environment — `AI_PROVIDER` for the provider,\n *    `AI_DEFAULT_MODEL` for every step, and `ASSIST_MODEL` for the\n *    assistant alone (the incident-response override the chat door has\n *    always honored);\n * 3. the catalog's tier for the step kind on the resolved provider.\n */\n\n/** The environment override for every step kind. */\nexport const AI_DEFAULT_MODEL_ENV = 'AI_DEFAULT_MODEL'\n/** The assistant's own override, honored before the general one. */\nexport const ASSIST_MODEL_ENV = 'ASSIST_MODEL'\n\n/** The org's resolved `pluginSettings/ai` values, as `getPluginConfig` merges them. */\nexport type AiPluginSettings = Record<string, unknown>\n\nexport interface AiRoute {\n  provider: AiProvider\n  model: string\n}\n\n/** A settings value that names a real choice, or `undefined` for the platform default. */\nfunction chosen(settings: AiPluginSettings | undefined, key: string): string | undefined {\n  const value = settings?.[key]\n  return typeof value === 'string' && value && value !== AI_SETTING_PLATFORM\n    ? value\n    : undefined\n}\n\n/** The provider a workspace runs on: its own choice when registered, else the platform's. */\nexport function resolveAiProvider(settings?: AiPluginSettings): AiProvider | undefined {\n  const wanted = chosen(settings, 'provider')\n  if (wanted) {\n    const named = aiProviderById(wanted)\n    if (named) return named\n  }\n  return defaultAiProvider()\n}\n\n/**\n * The model a step kind runs on for a workspace, on the resolved provider.\n * A chosen model on another provider is not served — the provider decides\n * what it can run — and falls back to the provider's default for the tier.\n */\nexport function resolveAiRoute(\n  kind: AiStepKind,\n  settings?: AiPluginSettings,\n): AiRoute | undefined {\n  const provider = resolveAiProvider(settings)\n  if (!provider) return undefined\n  const servedBy = (modelId: string | undefined): string | undefined =>\n    modelId && aiCatalogEntry(modelId)?.provider === provider.id ? modelId : undefined\n  const model =\n    servedBy(chosen(settings, AI_STEP_MODEL_SETTING[kind])) ??\n    (kind === 'assist.chat' ? servedBy(process.env[ASSIST_MODEL_ENV]?.trim()) : undefined) ??\n    servedBy(process.env[AI_DEFAULT_MODEL_ENV]?.trim()) ??\n    aiDefaultModelFor(provider.id, AI_STEP_TIERS[kind])\n  return model ? { provider, model } : undefined\n}\n\n/**\n * What one step kind asks of its model, beside the tier it is served from\n * (`AI_STEP_TIERS` in the catalog): whether it thinks and how hard, its\n * answer ceiling, and the eval score that tier holds on the step's golden\n * briefs (AGL-2937).\n */\nexport interface AiRoutingRow {\n  /** `null` sends no setting: the model's own default, and all a fast-tier model accepts. */\n  thinking: AiThinking | null\n  effort: AiEffort | null\n  /** The answer ceiling, thinking included. */\n  maxTokens: number\n  /** What the ceiling is sized from. */\n  maxTokensBasis: string\n  eval: AiRoutingEval\n}\n\nexport interface AiRoutingEval {\n  /** The golden-brief kinds the step answers. */\n  kinds: readonly AiEvalKind[]\n  /** `answers` scores the step's answers; `plans` scores the plans those kinds' answers carry. */\n  scores: 'answers' | 'plans'\n  /** `authored` while the score is the hand-written references'; `recorded` once a live run records answers. */\n  source: 'authored' | 'recorded'\n  passRate: number\n  /** The mean answer score; `null` for a plan score, which passes or fails. */\n  meanScore: number | null\n}\n\n/**\n * THE ROUTING TABLE (AGL-2937): what each step kind asks of the model, in one\n * place, with the evidence beside it.\n *\n * A step runs on the smallest tier that holds its eval floor. A row moves to a\n * cheaper tier, or a lower effort, only when a recorded eval\n * (`npm run eval:ai-live`) holds the floor there; while a row's score is the\n * authored references', it says so, and the row stays where production has\n * run it. `runtime/ai-eval.spec.ts` recomputes every row's score from the\n * harness, so a row cannot claim a score its briefs do not hold.\n *\n * A ceiling is sized from the p95 output the staff signals page reports for\n * the kind once production has served it; until then `maxTokensBasis` names\n * what it is sized from. The same spec holds every reference answer under its\n * row's ceiling at three characters a token, a reading that errs high for a\n * tokenizer that splits finer than four.\n */\nexport const AI_ROUTING_TABLE: Readonly<Record<AiStepKind, AiRoutingRow>> = {\n  'assist.chat': {\n    // A scoped, latency-sensitive chat turn: no thinking, the low effort rung.\n    thinking: 'off',\n    effort: 'low',\n    maxTokens: 1024,\n    maxTokensBasis:\n      'a docs-grounded answer of a few short paragraphs; the edit rung raises it for its tool call',\n    eval: { kinds: ['chat'], scores: 'answers', source: 'authored', passRate: 1, meanScore: 0.9688 },\n  },\n  'copy.element': {\n    thinking: null,\n    effort: null,\n    maxTokens: 1024,\n    maxTokensBasis: 'one element of copy, about the length of the text it replaces',\n    eval: { kinds: ['element'], scores: 'answers', source: 'authored', passRate: 1, meanScore: 0.9688 },\n  },\n  'copy.section': {\n    thinking: null,\n    effort: null,\n    maxTokens: 3000,\n    maxTokensBasis: 'a section of four to twelve nodes written as JSON',\n    eval: { kinds: ['section'], scores: 'answers', source: 'authored', passRate: 1, meanScore: 0.9688 },\n  },\n  'copy.blog': {\n    thinking: null,\n    effort: null,\n    maxTokens: 2048,\n    maxTokensBasis: 'one blog post body in markdown-lite',\n    eval: { kinds: ['blog'], scores: 'answers', source: 'authored', passRate: 1, meanScore: 0.9688 },\n  },\n  'generate.section': {\n    thinking: null,\n    effort: null,\n    maxTokens: 3000,\n    maxTokensBasis: 'a section of four to twelve nodes written as JSON',\n    eval: { kinds: ['section'], scores: 'answers', source: 'authored', passRate: 1, meanScore: 0.9688 },\n  },\n  'job.layout': {\n    // The plan was reasoned out and confirmed before the step, so it writes without thinking.\n    thinking: 'off',\n    effort: null,\n    maxTokens: 8000,\n    maxTokensBasis:\n      \"tighter than the doctrine's default for a layout, so one step and its re-ask fit the job beat's budget; the tree is held to its rule 17 budget either way\",\n    eval: { kinds: ['layout'], scores: 'answers', source: 'authored', passRate: 1, meanScore: 0.9833 },\n  },\n  'job.template': {\n    thinking: 'off',\n    effort: null,\n    maxTokens: 8000,\n    maxTokensBasis:\n      \"tighter than the doctrine's default for a template, so one step and its re-ask fit the job beat's budget; the tree is held to its rule 17 budget either way\",\n    eval: { kinds: ['template'], scores: 'answers', source: 'authored', passRate: 1, meanScore: 0.9833 },\n  },\n  'job.component': {\n    // A component's tree and the properties it declares, in one answer, from a\n    // plan reasoned out and confirmed before the step (AGL-2908).\n    thinking: 'off',\n    effort: null,\n    maxTokens: 8000,\n    maxTokensBasis:\n      \"the ceiling the layout and template steps keep, so one step and its re-ask fit the job beat's budget; the tree is held to its rule 17 budget either way\",\n    eval: { kinds: ['component'], scores: 'answers', source: 'authored', passRate: 1, meanScore: 0.9833 },\n  },\n  'job.crm': {\n    // CRM by AI (AGL-2917): short answers through a strict tool, written from\n    // the facts the CRM reports about the record the member opened, with no\n    // thinking. The ceiling fits an inline door, so a member is answered in\n    // the request that asked.\n    thinking: null,\n    effort: null,\n    maxTokens: 700,\n    maxTokensBasis:\n      \"the largest answer a CRM tool accepts: sixty columns matched to fields by number, or an email draft at its length limits, at three characters a token with room, as ai-job-crm-step.spec.ts measures it\",\n    eval: { kinds: ['crm'], scores: 'answers', source: 'authored', passRate: 1, meanScore: 0.9938 },\n  },\n  'job.experiment': {\n    // Variants of one piece of copy, or a result explained against a verdict\n    // code reached before the request was made (AGL-2914). The judgment is\n    // already made either way, so it writes without thinking.\n    thinking: 'off',\n    effort: null,\n    maxTokens: 1500,\n    maxTokensBasis:\n      \"four variants at the tool's own lengths — a name, a headline, a body and a rationale each — written as JSON, about 3,000 characters at three characters a token with room; an explanation is a headline, four sentences and a next step, well under it, as ai-job-experiment-step.spec.ts measures both\",\n    eval: { kinds: ['experiment'], scores: 'answers', source: 'authored', passRate: 1, meanScore: 1 },\n  },\n  'job.form': {\n    // A form's two halves in one answer: the field declaration and the design\n    // that renders it, as JSON, with no extended thinking (AGL-2913). The step\n    // asks this ceiling, which is the doctrine's own for a form, and registers\n    // the time it takes (AGL-3035).\n    thinking: 'off',\n    effort: null,\n    maxTokens: 6000,\n    maxTokensBasis:\n      \"the largest form the doctrine's output budget admits, a form's fields, its consent and routing declaration and the design that renders them written as JSON at the wordiest golden's characters a stored byte, under it with room; ai-job-form-step.spec.ts measures it\",\n    eval: { kinds: ['form'], scores: 'answers', source: 'authored', passRate: 1, meanScore: 0.9833 },\n  },\n  'job.insight': {\n    // Readers chosen, then their tables phrased (AGL-2915): short sentences\n    // over figures code computed, each held to the rows it cites, so no\n    // extended thinking. The read call before the answer asks for at most\n    // `AI_INSIGHT_READ_MAX_TOKENS` of the same allowance.\n    thinking: 'off',\n    effort: null,\n    maxTokens: 1500,\n    maxTokensBasis:\n      'five insights at their 280-character bound, each citing three tables of ten rows, and the gap sentence, written as JSON: about 2,700 characters, under 1,000 tokens at three characters a token, with room',\n    eval: { kinds: ['insight'], scores: 'answers', source: 'authored', passRate: 1, meanScore: 0.9688 },\n  },\n  'job.page': {\n    // One section of a page, written against a plan a member already\n    // confirmed, so it writes without thinking (AGL-2907). The ceiling here\n    // is the MOST a pass may ask for; each pass sizes its own down from it to\n    // what fits the time the job beat can give the step, which on the\n    // balanced tier is about half of this.\n    thinking: 'off',\n    effort: null,\n    maxTokens: 2000,\n    maxTokensBasis:\n      \"a section of a page written as JSON, about forty elements at the step's measured 45 tokens an element; a pass lowers it to the worst case that fits AI_JOB_PAGE_STEP_MINIMUM_MS on the model it runs\",\n    eval: { kinds: ['page'], scores: 'answers', source: 'authored', passRate: 1, meanScore: 0.9833 },\n  },\n  'job.products': {\n    // A product's copy from its name, text and photo, or a store's first\n    // products, categories and discounts from a brief (AGL-2916): answers held\n    // to the storefront claim rules, written with no extended thinking.\n    thinking: 'off',\n    effort: null,\n    maxTokens: 8000,\n    maxTokensBasis:\n      \"the largest catalog the tool accepts, twelve proposed products at every bound written as JSON, which the balanced tier asks as much of as fits a beat; one product's copy asks 1,500 and categories with discounts 2,000, as ai-job-products-step.spec.ts measures them\",\n    eval: {\n      kinds: ['product', 'catalog', 'categories'],\n      scores: 'answers',\n      source: 'authored',\n      passRate: 1,\n      meanScore: 0.9922,\n    },\n  },\n  'job.email': {\n    // One email design from the email palette, written against the brief with\n    // no extended thinking (AGL-2912). A campaign job runs the same\n    // generation, so it carries the same ceiling.\n    thinking: 'off',\n    effort: null,\n    maxTokens: 6000,\n    maxTokensBasis:\n      \"an email's node map written as JSON, with three subject lines and three preheaders beside it\",\n    eval: { kinds: ['email'], scores: 'answers', source: 'authored', passRate: 1, meanScore: 0.9688 },\n  },\n  'job.campaign': {\n    // The campaign job generates its email through the email step, so it is\n    // routed identically; the draft campaign it also writes asks nothing of\n    // the model (AGL-2912).\n    thinking: 'off',\n    effort: null,\n    maxTokens: 6000,\n    maxTokensBasis:\n      \"an email's node map written as JSON, with three subject lines and three preheaders beside it\",\n    eval: { kinds: ['email'], scores: 'answers', source: 'authored', passRate: 1, meanScore: 0.9688 },\n  },\n  'job.workflow': {\n    // An automation drafted from a description, or one explained (AGL-2919):\n    // which trigger and which steps a description means is the judgment the\n    // step sells, so it thinks before it answers.\n    thinking: 'adaptive',\n    effort: null,\n    maxTokens: 4000,\n    maxTokensBasis:\n      'the largest automation the tool accepts, 6,000 characters written out as JSON, at three characters a token with as much again to think in, as ai-job-workflow-step.spec.ts measures it',\n    eval: { kinds: ['workflow'], scores: 'answers', source: 'authored', passRate: 1, meanScore: 0.9688 },\n  },\n  'job.seo': {\n    thinking: null,\n    effort: null,\n    maxTokens: 1024,\n    maxTokensBasis:\n      \"the largest listing the tool accepts, at three characters a token with a quarter again, as ai-job-seo-step.spec.ts measures it; an audit's site proposal and fix batches keep ceilings of their own, measured the same way\",\n    eval: { kinds: ['seo'], scores: 'answers', source: 'authored', passRate: 1, meanScore: 1 },\n  },\n  'job.text': {\n    thinking: 'adaptive',\n    effort: null,\n    maxTokens: 1024,\n    maxTokensBasis: 'a few paragraphs of copy; a brief asking for more gets a draft to extend',\n    eval: { kinds: ['text'], scores: 'answers', source: 'authored', passRate: 1, meanScore: 1 },\n  },\n  'job.theme': {\n    thinking: 'adaptive',\n    effort: null,\n    maxTokens: 8000,\n    maxTokensBasis:\n      'the largest answer the theme tool accepts, about 2,500 tokens of JSON as ai-job-theme-step.spec.ts measures it, with as much again to think in',\n    eval: { kinds: ['theme'], scores: 'answers', source: 'authored', passRate: 1, meanScore: 0.9688 },\n  },\n  'job.plan': {\n    thinking: 'adaptive',\n    effort: null,\n    maxTokens: 8000,\n    maxTokensBasis: 'a plan of up to twelve screens with sixteen sections each, with room to think',\n    eval: {\n      kinds: ['page', 'template', 'component', 'layout', 'form'],\n      scores: 'plans',\n      source: 'authored',\n      passRate: 1,\n      meanScore: null,\n    },\n  },\n}\n\n/** The model id alone — what a door records on the meter and the job. */\nexport function aiModelForStep(kind: AiStepKind, settings?: AiPluginSettings): string {\n  const route = resolveAiRoute(kind, settings)\n  if (!route) {\n    // Every door gates on the provider being configured before it asks\n    // for a model, so this is a wiring fault rather than a customer path.\n    throw new Error('no AI provider is registered')\n  }\n  return route.model\n}\n"],"names":["AI_SETTING_PLATFORM","AI_STEP_MODEL_SETTING","AI_STEP_TIERS","aiCatalogEntry","aiDefaultModelFor","aiProviderById","defaultAiProvider","AI_DEFAULT_MODEL_ENV","ASSIST_MODEL_ENV","chosen","settings","key","value","undefined","resolveAiProvider","wanted","named","resolveAiRoute","kind","servedBy","process","provider","modelId","id","model","env","trim","AI_ROUTING_TABLE","thinking","effort","maxTokens","maxTokensBasis","eval","kinds","scores","source","passRate","meanScore","aiModelForStep","route","Error"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED,SAASA,mBAAmB,EAAEC,qBAAqB,QAAQ,sBAAkB;AAC7E,SACEC,aAAa,EACbC,cAAc,EACdC,iBAAiB,QAEZ,eAAW;AAGlB,SAASC,cAAc,EAAEC,iBAAiB,QAAQ,gBAAY;AAE9D;;;;;;;;;;;;;CAaC,GAED,kDAAkD,GAClD,OAAO,MAAMC,uBAAuB,mBAAkB;AACtD,kEAAkE,GAClE,OAAO,MAAMC,mBAAmB,eAAc;AAU9C,wFAAwF,GACxF,SAASC,OAAOC,QAAsC,EAAEC,GAAW;IACjE,MAAMC,QAAQF,4BAAAA,QAAU,CAACC,IAAI;IAC7B,OAAO,OAAOC,UAAU,YAAYA,SAASA,UAAUZ,sBACnDY,QACAC;AACN;AAEA,2FAA2F,GAC3F,OAAO,SAASC,kBAAkBJ,QAA2B;IAC3D,MAAMK,SAASN,OAAOC,UAAU;IAChC,IAAIK,QAAQ;QACV,MAAMC,QAAQX,eAAeU;QAC7B,IAAIC,OAAO,OAAOA;IACpB;IACA,OAAOV;AACT;AAEA;;;;CAIC,GACD,OAAO,SAASW,eACdC,IAAgB,EAChBR,QAA2B;QAOzBS,MAAAA,OAAAA;QACmCC,+BAC1BA;IAPX,MAAMC,WAAWP,kBAAkBJ;IACnC,IAAI,CAACW,UAAU,OAAOR;IACtB,MAAMM,WAAW,CAACG;YACLnB;eAAXmB,WAAWnB,EAAAA,kBAAAA,eAAemB,6BAAfnB,gBAAyBkB,QAAQ,MAAKA,SAASE,EAAE,GAAGD,UAAUT;;IAC3E,MAAMW,SACJL,QAAAA,SAAAA,YAAAA,SAASV,OAAOC,UAAUT,qBAAqB,CAACiB,KAAK,cAArDC,YACCD,SAAS,gBAAgBC,UAASC,gCAAAA,QAAQK,GAAG,CAACjB,iBAAiB,qBAA7BY,8BAA+BM,IAAI,MAAMb,qBAD5EM,QAEAA,UAASC,oCAAAA,QAAQK,GAAG,CAAClB,qBAAqB,qBAAjCa,kCAAmCM,IAAI,eAFhDP,OAGAf,kBAAkBiB,SAASE,EAAE,EAAErB,aAAa,CAACgB,KAAK;IACpD,OAAOM,QAAQ;QAAEH;QAAUG;IAAM,IAAIX;AACvC;AA+BA;;;;;;;;;;;;;;;;CAgBC,GACD,OAAO,MAAMc,mBAA+D;IAC1E,eAAe;QACb,2EAA2E;QAC3EC,UAAU;QACVC,QAAQ;QACRC,WAAW;QACXC,gBACE;QACFC,MAAM;YAAEC,OAAO;gBAAC;aAAO;YAAEC,QAAQ;YAAWC,QAAQ;YAAYC,UAAU;YAAGC,WAAW;QAAO;IACjG;IACA,gBAAgB;QACdT,UAAU;QACVC,QAAQ;QACRC,WAAW;QACXC,gBAAgB;QAChBC,MAAM;YAAEC,OAAO;gBAAC;aAAU;YAAEC,QAAQ;YAAWC,QAAQ;YAAYC,UAAU;YAAGC,WAAW;QAAO;IACpG;IACA,gBAAgB;QACdT,UAAU;QACVC,QAAQ;QACRC,WAAW;QACXC,gBAAgB;QAChBC,MAAM;YAAEC,OAAO;gBAAC;aAAU;YAAEC,QAAQ;YAAWC,QAAQ;YAAYC,UAAU;YAAGC,WAAW;QAAO;IACpG;IACA,aAAa;QACXT,UAAU;QACVC,QAAQ;QACRC,WAAW;QACXC,gBAAgB;QAChBC,MAAM;YAAEC,OAAO;gBAAC;aAAO;YAAEC,QAAQ;YAAWC,QAAQ;YAAYC,UAAU;YAAGC,WAAW;QAAO;IACjG;IACA,oBAAoB;QAClBT,UAAU;QACVC,QAAQ;QACRC,WAAW;QACXC,gBAAgB;QAChBC,MAAM;YAAEC,OAAO;gBAAC;aAAU;YAAEC,QAAQ;YAAWC,QAAQ;YAAYC,UAAU;YAAGC,WAAW;QAAO;IACpG;IACA,cAAc;QACZ,0FAA0F;QAC1FT,UAAU;QACVC,QAAQ;QACRC,WAAW;QACXC,gBACE;QACFC,MAAM;YAAEC,OAAO;gBAAC;aAAS;YAAEC,QAAQ;YAAWC,QAAQ;YAAYC,UAAU;YAAGC,WAAW;QAAO;IACnG;IACA,gBAAgB;QACdT,UAAU;QACVC,QAAQ;QACRC,WAAW;QACXC,gBACE;QACFC,MAAM;YAAEC,OAAO;gBAAC;aAAW;YAAEC,QAAQ;YAAWC,QAAQ;YAAYC,UAAU;YAAGC,WAAW;QAAO;IACrG;IACA,iBAAiB;QACf,2EAA2E;QAC3E,8DAA8D;QAC9DT,UAAU;QACVC,QAAQ;QACRC,WAAW;QACXC,gBACE;QACFC,MAAM;YAAEC,OAAO;gBAAC;aAAY;YAAEC,QAAQ;YAAWC,QAAQ;YAAYC,UAAU;YAAGC,WAAW;QAAO;IACtG;IACA,WAAW;QACT,0EAA0E;QAC1E,wEAAwE;QACxE,wEAAwE;QACxE,0BAA0B;QAC1BT,UAAU;QACVC,QAAQ;QACRC,WAAW;QACXC,gBACE;QACFC,MAAM;YAAEC,OAAO;gBAAC;aAAM;YAAEC,QAAQ;YAAWC,QAAQ;YAAYC,UAAU;YAAGC,WAAW;QAAO;IAChG;IACA,kBAAkB;QAChB,yEAAyE;QACzE,uEAAuE;QACvE,0DAA0D;QAC1DT,UAAU;QACVC,QAAQ;QACRC,WAAW;QACXC,gBACE;QACFC,MAAM;YAAEC,OAAO;gBAAC;aAAa;YAAEC,QAAQ;YAAWC,QAAQ;YAAYC,UAAU;YAAGC,WAAW;QAAE;IAClG;IACA,YAAY;QACV,0EAA0E;QAC1E,2EAA2E;QAC3E,2EAA2E;QAC3E,gCAAgC;QAChCT,UAAU;QACVC,QAAQ;QACRC,WAAW;QACXC,gBACE;QACFC,MAAM;YAAEC,OAAO;gBAAC;aAAO;YAAEC,QAAQ;YAAWC,QAAQ;YAAYC,UAAU;YAAGC,WAAW;QAAO;IACjG;IACA,eAAe;QACb,wEAAwE;QACxE,oEAAoE;QACpE,sEAAsE;QACtE,sDAAsD;QACtDT,UAAU;QACVC,QAAQ;QACRC,WAAW;QACXC,gBACE;QACFC,MAAM;YAAEC,OAAO;gBAAC;aAAU;YAAEC,QAAQ;YAAWC,QAAQ;YAAYC,UAAU;YAAGC,WAAW;QAAO;IACpG;IACA,YAAY;QACV,iEAAiE;QACjE,wEAAwE;QACxE,0EAA0E;QAC1E,kEAAkE;QAClE,uCAAuC;QACvCT,UAAU;QACVC,QAAQ;QACRC,WAAW;QACXC,gBACE;QACFC,MAAM;YAAEC,OAAO;gBAAC;aAAO;YAAEC,QAAQ;YAAWC,QAAQ;YAAYC,UAAU;YAAGC,WAAW;QAAO;IACjG;IACA,gBAAgB;QACd,qEAAqE;QACrE,2EAA2E;QAC3E,oEAAoE;QACpET,UAAU;QACVC,QAAQ;QACRC,WAAW;QACXC,gBACE;QACFC,MAAM;YACJC,OAAO;gBAAC;gBAAW;gBAAW;aAAa;YAC3CC,QAAQ;YACRC,QAAQ;YACRC,UAAU;YACVC,WAAW;QACb;IACF;IACA,aAAa;QACX,0EAA0E;QAC1E,gEAAgE;QAChE,8CAA8C;QAC9CT,UAAU;QACVC,QAAQ;QACRC,WAAW;QACXC,gBACE;QACFC,MAAM;YAAEC,OAAO;gBAAC;aAAQ;YAAEC,QAAQ;YAAWC,QAAQ;YAAYC,UAAU;YAAGC,WAAW;QAAO;IAClG;IACA,gBAAgB;QACd,wEAAwE;QACxE,wEAAwE;QACxE,wBAAwB;QACxBT,UAAU;QACVC,QAAQ;QACRC,WAAW;QACXC,gBACE;QACFC,MAAM;YAAEC,OAAO;gBAAC;aAAQ;YAAEC,QAAQ;YAAWC,QAAQ;YAAYC,UAAU;YAAGC,WAAW;QAAO;IAClG;IACA,gBAAgB;QACd,yEAAyE;QACzE,wEAAwE;QACxE,8CAA8C;QAC9CT,UAAU;QACVC,QAAQ;QACRC,WAAW;QACXC,gBACE;QACFC,MAAM;YAAEC,OAAO;gBAAC;aAAW;YAAEC,QAAQ;YAAWC,QAAQ;YAAYC,UAAU;YAAGC,WAAW;QAAO;IACrG;IACA,WAAW;QACTT,UAAU;QACVC,QAAQ;QACRC,WAAW;QACXC,gBACE;QACFC,MAAM;YAAEC,OAAO;gBAAC;aAAM;YAAEC,QAAQ;YAAWC,QAAQ;YAAYC,UAAU;YAAGC,WAAW;QAAE;IAC3F;IACA,YAAY;QACVT,UAAU;QACVC,QAAQ;QACRC,WAAW;QACXC,gBAAgB;QAChBC,MAAM;YAAEC,OAAO;gBAAC;aAAO;YAAEC,QAAQ;YAAWC,QAAQ;YAAYC,UAAU;YAAGC,WAAW;QAAE;IAC5F;IACA,aAAa;QACXT,UAAU;QACVC,QAAQ;QACRC,WAAW;QACXC,gBACE;QACFC,MAAM;YAAEC,OAAO;gBAAC;aAAQ;YAAEC,QAAQ;YAAWC,QAAQ;YAAYC,UAAU;YAAGC,WAAW;QAAO;IAClG;IACA,YAAY;QACVT,UAAU;QACVC,QAAQ;QACRC,WAAW;QACXC,gBAAgB;QAChBC,MAAM;YACJC,OAAO;gBAAC;gBAAQ;gBAAY;gBAAa;gBAAU;aAAO;YAC1DC,QAAQ;YACRC,QAAQ;YACRC,UAAU;YACVC,WAAW;QACb;IACF;AACF,EAAC;AAED,uEAAuE,GACvE,OAAO,SAASC,eAAepB,IAAgB,EAAER,QAA2B;IAC1E,MAAM6B,QAAQtB,eAAeC,MAAMR;IACnC,IAAI,CAAC6B,OAAO;QACV,mEAAmE;QACnE,sEAAsE;QACtE,MAAM,IAAIC,MAAM;IAClB;IACA,OAAOD,MAAMf,KAAK;AACpB"}
+{"version":3,"sources":["../../../../../../../libs/plugins/ai/src/lib/providers/routing.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { AI_SETTING_PLATFORM, AI_STEP_MODEL_SETTING } from '../plugin-config'\nimport {\n  AI_STEP_TIERS,\n  aiCatalogEntry,\n  aiDefaultModelFor,\n  type AiStepKind,\n} from './catalog'\nimport type { AiEvalKind } from '../runtime/ai-eval'\nimport type { AiEffort, AiProvider, AiThinking } from './contract'\nimport { aiProviderById, defaultAiProvider } from './registry'\n\n/**\n * The routing table (AGL-2937, AGL-2939): step kind → provider and model,\n * through the catalog and never a vendor literal.\n *\n * Precedence, dearest override first:\n *\n * 1. the org's `pluginSettings/ai` — a provider, and a model per step kind\n *    that must be one the provider serves;\n * 2. the deployment's environment — `AI_PROVIDER` for the provider,\n *    `AI_DEFAULT_MODEL` for every step, and `ASSIST_MODEL` for the\n *    assistant alone (the incident-response override the chat door has\n *    always honored);\n * 3. the catalog's tier for the step kind on the resolved provider.\n */\n\n/** The environment override for every step kind. */\nexport const AI_DEFAULT_MODEL_ENV = 'AI_DEFAULT_MODEL'\n/** The assistant's own override, honored before the general one. */\nexport const ASSIST_MODEL_ENV = 'ASSIST_MODEL'\n\n/** The org's resolved `pluginSettings/ai` values, as `getPluginConfig` merges them. */\nexport type AiPluginSettings = Record<string, unknown>\n\nexport interface AiRoute {\n  provider: AiProvider\n  model: string\n}\n\n/** A settings value that names a real choice, or `undefined` for the platform default. */\nfunction chosen(settings: AiPluginSettings | undefined, key: string): string | undefined {\n  const value = settings?.[key]\n  return typeof value === 'string' && value && value !== AI_SETTING_PLATFORM\n    ? value\n    : undefined\n}\n\n/** The provider a workspace runs on: its own choice when registered, else the platform's. */\nexport function resolveAiProvider(settings?: AiPluginSettings): AiProvider | undefined {\n  const wanted = chosen(settings, 'provider')\n  if (wanted) {\n    const named = aiProviderById(wanted)\n    if (named) return named\n  }\n  return defaultAiProvider()\n}\n\n/**\n * The model a step kind runs on for a workspace, on the resolved provider.\n * A chosen model on another provider is not served — the provider decides\n * what it can run — and falls back to the provider's default for the tier.\n */\nexport function resolveAiRoute(\n  kind: AiStepKind,\n  settings?: AiPluginSettings,\n): AiRoute | undefined {\n  const provider = resolveAiProvider(settings)\n  if (!provider) return undefined\n  const servedBy = (modelId: string | undefined): string | undefined =>\n    modelId && aiCatalogEntry(modelId)?.provider === provider.id ? modelId : undefined\n  const model =\n    servedBy(chosen(settings, AI_STEP_MODEL_SETTING[kind])) ??\n    (kind === 'assist.chat' ? servedBy(process.env[ASSIST_MODEL_ENV]?.trim()) : undefined) ??\n    servedBy(process.env[AI_DEFAULT_MODEL_ENV]?.trim()) ??\n    aiDefaultModelFor(provider.id, AI_STEP_TIERS[kind])\n  return model ? { provider, model } : undefined\n}\n\n/**\n * What one step kind asks of its model, beside the tier it is served from\n * (`AI_STEP_TIERS` in the catalog): whether it thinks and how hard, its\n * answer ceiling, and the eval score that tier holds on the step's golden\n * briefs (AGL-2937).\n */\nexport interface AiRoutingRow {\n  /** `null` sends no setting: the model's own default, and all a fast-tier model accepts. */\n  thinking: AiThinking | null\n  effort: AiEffort | null\n  /** The answer ceiling, thinking included. */\n  maxTokens: number\n  /** What the ceiling is sized from. */\n  maxTokensBasis: string\n  eval: AiRoutingEval\n}\n\nexport interface AiRoutingEval {\n  /** The golden-brief kinds the step answers. */\n  kinds: readonly AiEvalKind[]\n  /** `answers` scores the step's answers; `plans` scores the plans those kinds' answers carry. */\n  scores: 'answers' | 'plans'\n  /** `authored` while the score is the hand-written references'; `recorded` once a live run records answers. */\n  source: 'authored' | 'recorded'\n  passRate: number\n  /** The mean answer score; `null` for a plan score, which passes or fails. */\n  meanScore: number | null\n}\n\n/**\n * THE ROUTING TABLE (AGL-2937): what each step kind asks of the model, in one\n * place, with the evidence beside it.\n *\n * A step runs on the smallest tier that holds its eval floor. A row moves to a\n * cheaper tier, or a lower effort, only when a recorded eval\n * (`npm run eval:ai-live`) holds the floor there; while a row's score is the\n * authored references', it says so, and the row stays where production has\n * run it. `runtime/ai-eval.spec.ts` recomputes every row's score from the\n * harness, so a row cannot claim a score its briefs do not hold.\n *\n * A ceiling is sized from the p95 output the staff signals page reports for\n * the kind once production has served it; until then `maxTokensBasis` names\n * what it is sized from. The same spec holds every reference answer under its\n * row's ceiling at three characters a token, a reading that errs high for a\n * tokenizer that splits finer than four.\n */\nexport const AI_ROUTING_TABLE: Readonly<Record<AiStepKind, AiRoutingRow>> = {\n  'assist.chat': {\n    // A scoped, latency-sensitive chat turn: no thinking, the low effort rung.\n    thinking: 'off',\n    effort: 'low',\n    maxTokens: 1024,\n    maxTokensBasis:\n      'a docs-grounded answer of a few short paragraphs; the edit rung raises it for its tool call',\n    eval: { kinds: ['chat'], scores: 'answers', source: 'authored', passRate: 1, meanScore: 0.9688 },\n  },\n  'copy.element': {\n    thinking: null,\n    effort: null,\n    maxTokens: 1024,\n    maxTokensBasis: 'one element of copy, about the length of the text it replaces',\n    eval: { kinds: ['element'], scores: 'answers', source: 'authored', passRate: 1, meanScore: 0.9688 },\n  },\n  'copy.section': {\n    thinking: null,\n    effort: null,\n    maxTokens: 3000,\n    maxTokensBasis: 'a section of four to twelve nodes written as JSON',\n    eval: { kinds: ['section'], scores: 'answers', source: 'authored', passRate: 1, meanScore: 0.9688 },\n  },\n  'copy.blog': {\n    thinking: null,\n    effort: null,\n    maxTokens: 2048,\n    maxTokensBasis: 'one blog post body in markdown-lite',\n    eval: { kinds: ['blog'], scores: 'answers', source: 'authored', passRate: 1, meanScore: 0.9688 },\n  },\n  'generate.section': {\n    thinking: null,\n    effort: null,\n    maxTokens: 3000,\n    maxTokensBasis: 'a section of four to twelve nodes written as JSON',\n    eval: { kinds: ['section'], scores: 'answers', source: 'authored', passRate: 1, meanScore: 0.9688 },\n  },\n  'job.layout': {\n    // The plan was reasoned out and confirmed before the step, so it writes without thinking.\n    thinking: 'off',\n    effort: null,\n    maxTokens: 8000,\n    maxTokensBasis:\n      \"tighter than the doctrine's default for a layout, so one step and its re-ask fit the job beat's budget; the tree is held to its rule 17 budget either way\",\n    eval: { kinds: ['layout'], scores: 'answers', source: 'authored', passRate: 1, meanScore: 0.9833 },\n  },\n  'job.template': {\n    thinking: 'off',\n    effort: null,\n    maxTokens: 8000,\n    maxTokensBasis:\n      \"tighter than the doctrine's default for a template, so one step and its re-ask fit the job beat's budget; the tree is held to its rule 17 budget either way\",\n    eval: { kinds: ['template'], scores: 'answers', source: 'authored', passRate: 1, meanScore: 0.9833 },\n  },\n  'job.component': {\n    // A component's tree and the properties it declares, in one answer, from a\n    // plan reasoned out and confirmed before the step (AGL-2908).\n    thinking: 'off',\n    effort: null,\n    maxTokens: 8000,\n    maxTokensBasis:\n      \"the ceiling the layout and template steps keep, so one step and its re-ask fit the job beat's budget; the tree is held to its rule 17 budget either way\",\n    eval: { kinds: ['component'], scores: 'answers', source: 'authored', passRate: 1, meanScore: 0.9833 },\n  },\n  'job.crm': {\n    // CRM by AI (AGL-2917): short answers through a strict tool, written from\n    // the facts the CRM reports about the record the member opened, with no\n    // thinking. The ceiling fits an inline door, so a member is answered in\n    // the request that asked.\n    thinking: null,\n    effort: null,\n    maxTokens: 700,\n    maxTokensBasis:\n      \"the largest answer a CRM tool accepts: sixty columns matched to fields by number, or an email draft at its length limits, at three characters a token with room, as ai-job-crm-step.spec.ts measures it\",\n    eval: { kinds: ['crm'], scores: 'answers', source: 'authored', passRate: 1, meanScore: 0.9938 },\n  },\n  'job.experiment': {\n    // Variants of one piece of copy, or a result explained against a verdict\n    // code reached before the request was made (AGL-2914). The judgment is\n    // already made either way, so it writes without thinking.\n    thinking: 'off',\n    effort: null,\n    maxTokens: 1500,\n    maxTokensBasis:\n      \"four variants at the tool's own lengths — a name, a headline, a body and a rationale each — written as JSON, about 3,000 characters at three characters a token with room; an explanation is a headline, four sentences and a next step, well under it, as ai-job-experiment-step.spec.ts measures both\",\n    eval: { kinds: ['experiment'], scores: 'answers', source: 'authored', passRate: 1, meanScore: 1 },\n  },\n  'job.form': {\n    // A form's two halves in one answer: the field declaration and the design\n    // that renders it, as JSON, with no extended thinking (AGL-2913). The step\n    // asks this ceiling, which is the doctrine's own for a form, and registers\n    // the time it takes (AGL-3035).\n    thinking: 'off',\n    effort: null,\n    maxTokens: 6000,\n    maxTokensBasis:\n      \"the largest form the doctrine's output budget admits, a form's fields, its consent and routing declaration and the design that renders them written as JSON at the wordiest golden's characters a stored byte, under it with room; ai-job-form-step.spec.ts measures it\",\n    eval: { kinds: ['form'], scores: 'answers', source: 'authored', passRate: 1, meanScore: 0.9833 },\n  },\n  'job.insight': {\n    // Readers chosen, then their tables phrased (AGL-2915): short sentences\n    // over figures code computed, each held to the rows it cites, so no\n    // extended thinking. The read call before the answer asks for at most\n    // `AI_INSIGHT_READ_MAX_TOKENS` of the same allowance.\n    thinking: 'off',\n    effort: null,\n    maxTokens: 1500,\n    maxTokensBasis:\n      'five insights at their 280-character bound, each citing three tables of ten rows, and the gap sentence, written as JSON: about 2,700 characters, under 1,000 tokens at three characters a token, with room',\n    eval: { kinds: ['insight'], scores: 'answers', source: 'authored', passRate: 1, meanScore: 0.9688 },\n  },\n  'job.page': {\n    // One section of a page, written against a plan a member already\n    // confirmed, so it writes without thinking (AGL-2907). The ceiling here\n    // is the MOST a pass may ask for; each pass sizes its own down from it to\n    // what fits the time the job beat can give the step, which on the\n    // balanced tier is about half of this.\n    thinking: 'off',\n    effort: null,\n    maxTokens: 2000,\n    maxTokensBasis:\n      \"a section of a page written as JSON, about forty elements at the step's measured 45 tokens an element; a pass lowers it to the worst case that fits AI_JOB_PAGE_STEP_MINIMUM_MS on the model it runs\",\n    eval: { kinds: ['page'], scores: 'answers', source: 'authored', passRate: 1, meanScore: 0.9833 },\n  },\n  'job.products': {\n    // A product's copy from its name, text and photo, or a store's first\n    // products, categories and discounts from a brief (AGL-2916): answers held\n    // to the storefront claim rules, written with no extended thinking.\n    thinking: 'off',\n    effort: null,\n    maxTokens: 8000,\n    maxTokensBasis:\n      \"the largest catalog the tool accepts, twelve proposed products at every bound written as JSON, which the balanced tier asks as much of as fits a beat; one product's copy asks 1,500 and categories with discounts 2,000, as ai-job-products-step.spec.ts measures them\",\n    eval: {\n      kinds: ['product', 'catalog', 'categories'],\n      scores: 'answers',\n      source: 'authored',\n      passRate: 1,\n      meanScore: 0.9922,\n    },\n  },\n  'job.email': {\n    // One email design from the email palette, written against the brief with\n    // no extended thinking (AGL-2912). A campaign job runs the same\n    // generation, so it carries the same ceiling.\n    thinking: 'off',\n    effort: null,\n    maxTokens: 6000,\n    maxTokensBasis:\n      \"an email's node map written as JSON, with three subject lines and three preheaders beside it\",\n    eval: { kinds: ['email'], scores: 'answers', source: 'authored', passRate: 1, meanScore: 0.9688 },\n  },\n  'job.campaign': {\n    // The campaign job generates its email through the email step, so it is\n    // routed identically; the draft campaign it also writes asks nothing of\n    // the model (AGL-2912).\n    thinking: 'off',\n    effort: null,\n    maxTokens: 6000,\n    maxTokensBasis:\n      \"an email's node map written as JSON, with three subject lines and three preheaders beside it\",\n    eval: { kinds: ['email'], scores: 'answers', source: 'authored', passRate: 1, meanScore: 0.9688 },\n  },\n  'job.workflow': {\n    // An automation drafted from a description, or one explained (AGL-2919):\n    // which trigger and which steps a description means is the judgment the\n    // step sells, so it thinks before it answers.\n    thinking: 'adaptive',\n    effort: null,\n    maxTokens: 4000,\n    maxTokensBasis:\n      'the largest automation the tool accepts, 6,000 characters written out as JSON, at three characters a token with as much again to think in, as ai-job-workflow-step.spec.ts measures it',\n    eval: { kinds: ['workflow'], scores: 'answers', source: 'authored', passRate: 1, meanScore: 0.9688 },\n  },\n  'job.logic': {\n    // A site function or variable proposed, or a function explained\n    // (AGL-3603): which conditions and arithmetic a description means is the\n    // judgment the step sells, so it thinks before it answers.\n    thinking: 'adaptive',\n    effort: null,\n    maxTokens: 3000,\n    maxTokensBasis:\n      'the largest function the tool accepts — twelve parameters, twenty-four operations — is far past any description; a function of eight operations is about 2,400 characters of JSON, at three characters a token with as much again to think in, as ai-job-logic-step.spec.ts measures it',\n    eval: { kinds: ['logic'], scores: 'answers', source: 'authored', passRate: 1, meanScore: 1 },\n  },\n  'job.seo': {\n    thinking: null,\n    effort: null,\n    maxTokens: 1024,\n    maxTokensBasis:\n      \"the largest listing the tool accepts, at three characters a token with a quarter again, as ai-job-seo-step.spec.ts measures it; an audit's site proposal and fix batches keep ceilings of their own, measured the same way\",\n    eval: { kinds: ['seo'], scores: 'answers', source: 'authored', passRate: 1, meanScore: 1 },\n  },\n  'job.text': {\n    thinking: 'adaptive',\n    effort: null,\n    maxTokens: 1024,\n    maxTokensBasis: 'a few paragraphs of copy; a brief asking for more gets a draft to extend',\n    eval: { kinds: ['text'], scores: 'answers', source: 'authored', passRate: 1, meanScore: 1 },\n  },\n  'job.theme': {\n    thinking: 'adaptive',\n    effort: null,\n    maxTokens: 8000,\n    maxTokensBasis:\n      'the largest answer the theme tool accepts, about 2,500 tokens of JSON as ai-job-theme-step.spec.ts measures it, with as much again to think in',\n    eval: { kinds: ['theme'], scores: 'answers', source: 'authored', passRate: 1, meanScore: 0.9688 },\n  },\n  'job.plan': {\n    thinking: 'adaptive',\n    effort: null,\n    maxTokens: 8000,\n    maxTokensBasis: 'a plan of up to twelve screens with sixteen sections each, with room to think',\n    eval: {\n      kinds: ['page', 'template', 'component', 'layout', 'form'],\n      scores: 'plans',\n      source: 'authored',\n      passRate: 1,\n      meanScore: null,\n    },\n  },\n}\n\n/** The model id alone — what a door records on the meter and the job. */\nexport function aiModelForStep(kind: AiStepKind, settings?: AiPluginSettings): string {\n  const route = resolveAiRoute(kind, settings)\n  if (!route) {\n    // Every door gates on the provider being configured before it asks\n    // for a model, so this is a wiring fault rather than a customer path.\n    throw new Error('no AI provider is registered')\n  }\n  return route.model\n}\n"],"names":["AI_SETTING_PLATFORM","AI_STEP_MODEL_SETTING","AI_STEP_TIERS","aiCatalogEntry","aiDefaultModelFor","aiProviderById","defaultAiProvider","AI_DEFAULT_MODEL_ENV","ASSIST_MODEL_ENV","chosen","settings","key","value","undefined","resolveAiProvider","wanted","named","resolveAiRoute","kind","servedBy","process","provider","modelId","id","model","env","trim","AI_ROUTING_TABLE","thinking","effort","maxTokens","maxTokensBasis","eval","kinds","scores","source","passRate","meanScore","aiModelForStep","route","Error"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED,SAASA,mBAAmB,EAAEC,qBAAqB,QAAQ,sBAAkB;AAC7E,SACEC,aAAa,EACbC,cAAc,EACdC,iBAAiB,QAEZ,eAAW;AAGlB,SAASC,cAAc,EAAEC,iBAAiB,QAAQ,gBAAY;AAE9D;;;;;;;;;;;;;CAaC,GAED,kDAAkD,GAClD,OAAO,MAAMC,uBAAuB,mBAAkB;AACtD,kEAAkE,GAClE,OAAO,MAAMC,mBAAmB,eAAc;AAU9C,wFAAwF,GACxF,SAASC,OAAOC,QAAsC,EAAEC,GAAW;IACjE,MAAMC,QAAQF,4BAAAA,QAAU,CAACC,IAAI;IAC7B,OAAO,OAAOC,UAAU,YAAYA,SAASA,UAAUZ,sBACnDY,QACAC;AACN;AAEA,2FAA2F,GAC3F,OAAO,SAASC,kBAAkBJ,QAA2B;IAC3D,MAAMK,SAASN,OAAOC,UAAU;IAChC,IAAIK,QAAQ;QACV,MAAMC,QAAQX,eAAeU;QAC7B,IAAIC,OAAO,OAAOA;IACpB;IACA,OAAOV;AACT;AAEA;;;;CAIC,GACD,OAAO,SAASW,eACdC,IAAgB,EAChBR,QAA2B;QAOzBS,MAAAA,OAAAA;QACmCC,+BAC1BA;IAPX,MAAMC,WAAWP,kBAAkBJ;IACnC,IAAI,CAACW,UAAU,OAAOR;IACtB,MAAMM,WAAW,CAACG;YACLnB;eAAXmB,WAAWnB,EAAAA,kBAAAA,eAAemB,6BAAfnB,gBAAyBkB,QAAQ,MAAKA,SAASE,EAAE,GAAGD,UAAUT;;IAC3E,MAAMW,SACJL,QAAAA,SAAAA,YAAAA,SAASV,OAAOC,UAAUT,qBAAqB,CAACiB,KAAK,cAArDC,YACCD,SAAS,gBAAgBC,UAASC,gCAAAA,QAAQK,GAAG,CAACjB,iBAAiB,qBAA7BY,8BAA+BM,IAAI,MAAMb,qBAD5EM,QAEAA,UAASC,oCAAAA,QAAQK,GAAG,CAAClB,qBAAqB,qBAAjCa,kCAAmCM,IAAI,eAFhDP,OAGAf,kBAAkBiB,SAASE,EAAE,EAAErB,aAAa,CAACgB,KAAK;IACpD,OAAOM,QAAQ;QAAEH;QAAUG;IAAM,IAAIX;AACvC;AA+BA;;;;;;;;;;;;;;;;CAgBC,GACD,OAAO,MAAMc,mBAA+D;IAC1E,eAAe;QACb,2EAA2E;QAC3EC,UAAU;QACVC,QAAQ;QACRC,WAAW;QACXC,gBACE;QACFC,MAAM;YAAEC,OAAO;gBAAC;aAAO;YAAEC,QAAQ;YAAWC,QAAQ;YAAYC,UAAU;YAAGC,WAAW;QAAO;IACjG;IACA,gBAAgB;QACdT,UAAU;QACVC,QAAQ;QACRC,WAAW;QACXC,gBAAgB;QAChBC,MAAM;YAAEC,OAAO;gBAAC;aAAU;YAAEC,QAAQ;YAAWC,QAAQ;YAAYC,UAAU;YAAGC,WAAW;QAAO;IACpG;IACA,gBAAgB;QACdT,UAAU;QACVC,QAAQ;QACRC,WAAW;QACXC,gBAAgB;QAChBC,MAAM;YAAEC,OAAO;gBAAC;aAAU;YAAEC,QAAQ;YAAWC,QAAQ;YAAYC,UAAU;YAAGC,WAAW;QAAO;IACpG;IACA,aAAa;QACXT,UAAU;QACVC,QAAQ;QACRC,WAAW;QACXC,gBAAgB;QAChBC,MAAM;YAAEC,OAAO;gBAAC;aAAO;YAAEC,QAAQ;YAAWC,QAAQ;YAAYC,UAAU;YAAGC,WAAW;QAAO;IACjG;IACA,oBAAoB;QAClBT,UAAU;QACVC,QAAQ;QACRC,WAAW;QACXC,gBAAgB;QAChBC,MAAM;YAAEC,OAAO;gBAAC;aAAU;YAAEC,QAAQ;YAAWC,QAAQ;YAAYC,UAAU;YAAGC,WAAW;QAAO;IACpG;IACA,cAAc;QACZ,0FAA0F;QAC1FT,UAAU;QACVC,QAAQ;QACRC,WAAW;QACXC,gBACE;QACFC,MAAM;YAAEC,OAAO;gBAAC;aAAS;YAAEC,QAAQ;YAAWC,QAAQ;YAAYC,UAAU;YAAGC,WAAW;QAAO;IACnG;IACA,gBAAgB;QACdT,UAAU;QACVC,QAAQ;QACRC,WAAW;QACXC,gBACE;QACFC,MAAM;YAAEC,OAAO;gBAAC;aAAW;YAAEC,QAAQ;YAAWC,QAAQ;YAAYC,UAAU;YAAGC,WAAW;QAAO;IACrG;IACA,iBAAiB;QACf,2EAA2E;QAC3E,8DAA8D;QAC9DT,UAAU;QACVC,QAAQ;QACRC,WAAW;QACXC,gBACE;QACFC,MAAM;YAAEC,OAAO;gBAAC;aAAY;YAAEC,QAAQ;YAAWC,QAAQ;YAAYC,UAAU;YAAGC,WAAW;QAAO;IACtG;IACA,WAAW;QACT,0EAA0E;QAC1E,wEAAwE;QACxE,wEAAwE;QACxE,0BAA0B;QAC1BT,UAAU;QACVC,QAAQ;QACRC,WAAW;QACXC,gBACE;QACFC,MAAM;YAAEC,OAAO;gBAAC;aAAM;YAAEC,QAAQ;YAAWC,QAAQ;YAAYC,UAAU;YAAGC,WAAW;QAAO;IAChG;IACA,kBAAkB;QAChB,yEAAyE;QACzE,uEAAuE;QACvE,0DAA0D;QAC1DT,UAAU;QACVC,QAAQ;QACRC,WAAW;QACXC,gBACE;QACFC,MAAM;YAAEC,OAAO;gBAAC;aAAa;YAAEC,QAAQ;YAAWC,QAAQ;YAAYC,UAAU;YAAGC,WAAW;QAAE;IAClG;IACA,YAAY;QACV,0EAA0E;QAC1E,2EAA2E;QAC3E,2EAA2E;QAC3E,gCAAgC;QAChCT,UAAU;QACVC,QAAQ;QACRC,WAAW;QACXC,gBACE;QACFC,MAAM;YAAEC,OAAO;gBAAC;aAAO;YAAEC,QAAQ;YAAWC,QAAQ;YAAYC,UAAU;YAAGC,WAAW;QAAO;IACjG;IACA,eAAe;QACb,wEAAwE;QACxE,oEAAoE;QACpE,sEAAsE;QACtE,sDAAsD;QACtDT,UAAU;QACVC,QAAQ;QACRC,WAAW;QACXC,gBACE;QACFC,MAAM;YAAEC,OAAO;gBAAC;aAAU;YAAEC,QAAQ;YAAWC,QAAQ;YAAYC,UAAU;YAAGC,WAAW;QAAO;IACpG;IACA,YAAY;QACV,iEAAiE;QACjE,wEAAwE;QACxE,0EAA0E;QAC1E,kEAAkE;QAClE,uCAAuC;QACvCT,UAAU;QACVC,QAAQ;QACRC,WAAW;QACXC,gBACE;QACFC,MAAM;YAAEC,OAAO;gBAAC;aAAO;YAAEC,QAAQ;YAAWC,QAAQ;YAAYC,UAAU;YAAGC,WAAW;QAAO;IACjG;IACA,gBAAgB;QACd,qEAAqE;QACrE,2EAA2E;QAC3E,oEAAoE;QACpET,UAAU;QACVC,QAAQ;QACRC,WAAW;QACXC,gBACE;QACFC,MAAM;YACJC,OAAO;gBAAC;gBAAW;gBAAW;aAAa;YAC3CC,QAAQ;YACRC,QAAQ;YACRC,UAAU;YACVC,WAAW;QACb;IACF;IACA,aAAa;QACX,0EAA0E;QAC1E,gEAAgE;QAChE,8CAA8C;QAC9CT,UAAU;QACVC,QAAQ;QACRC,WAAW;QACXC,gBACE;QACFC,MAAM;YAAEC,OAAO;gBAAC;aAAQ;YAAEC,QAAQ;YAAWC,QAAQ;YAAYC,UAAU;YAAGC,WAAW;QAAO;IAClG;IACA,gBAAgB;QACd,wEAAwE;QACxE,wEAAwE;QACxE,wBAAwB;QACxBT,UAAU;QACVC,QAAQ;QACRC,WAAW;QACXC,gBACE;QACFC,MAAM;YAAEC,OAAO;gBAAC;aAAQ;YAAEC,QAAQ;YAAWC,QAAQ;YAAYC,UAAU;YAAGC,WAAW;QAAO;IAClG;IACA,gBAAgB;QACd,yEAAyE;QACzE,wEAAwE;QACxE,8CAA8C;QAC9CT,UAAU;QACVC,QAAQ;QACRC,WAAW;QACXC,gBACE;QACFC,MAAM;YAAEC,OAAO;gBAAC;aAAW;YAAEC,QAAQ;YAAWC,QAAQ;YAAYC,UAAU;YAAGC,WAAW;QAAO;IACrG;IACA,aAAa;QACX,gEAAgE;QAChE,yEAAyE;QACzE,2DAA2D;QAC3DT,UAAU;QACVC,QAAQ;QACRC,WAAW;QACXC,gBACE;QACFC,MAAM;YAAEC,OAAO;gBAAC;aAAQ;YAAEC,QAAQ;YAAWC,QAAQ;YAAYC,UAAU;YAAGC,WAAW;QAAE;IAC7F;IACA,WAAW;QACTT,UAAU;QACVC,QAAQ;QACRC,WAAW;QACXC,gBACE;QACFC,MAAM;YAAEC,OAAO;gBAAC;aAAM;YAAEC,QAAQ;YAAWC,QAAQ;YAAYC,UAAU;YAAGC,WAAW;QAAE;IAC3F;IACA,YAAY;QACVT,UAAU;QACVC,QAAQ;QACRC,WAAW;QACXC,gBAAgB;QAChBC,MAAM;YAAEC,OAAO;gBAAC;aAAO;YAAEC,QAAQ;YAAWC,QAAQ;YAAYC,UAAU;YAAGC,WAAW;QAAE;IAC5F;IACA,aAAa;QACXT,UAAU;QACVC,QAAQ;QACRC,WAAW;QACXC,gBACE;QACFC,MAAM;YAAEC,OAAO;gBAAC;aAAQ;YAAEC,QAAQ;YAAWC,QAAQ;YAAYC,UAAU;YAAGC,WAAW;QAAO;IAClG;IACA,YAAY;QACVT,UAAU;QACVC,QAAQ;QACRC,WAAW;QACXC,gBAAgB;QAChBC,MAAM;YACJC,OAAO;gBAAC;gBAAQ;gBAAY;gBAAa;gBAAU;aAAO;YAC1DC,QAAQ;YACRC,QAAQ;YACRC,UAAU;YACVC,WAAW;QACb;IACF;AACF,EAAC;AAED,uEAAuE,GACvE,OAAO,SAASC,eAAepB,IAAgB,EAAER,QAA2B;IAC1E,MAAM6B,QAAQtB,eAAeC,MAAMR;IACnC,IAAI,CAAC6B,OAAO;QACV,mEAAmE;QACnE,sEAAsE;QACtE,MAAM,IAAIC,MAAM;IAClB;IACA,OAAOD,MAAMf,KAAK;AACpB"}

package/src/lib/providers/vertex-image.d.ts

@@ -0,0 +1,121 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import { type AiUsage } from './contract';
+import { type AiGeneratedImage, type AiImageProvider, type AiImageRequest } from './image-contract';
+/**
+ * Google's Gemini image models on Vertex AI (AGL-3602), behind the image
+ * contract: `POST https://aiplatform.googleapis.com/v1/projects/{project}/
+ * locations/global/publishers/google/models/{model}:generateContent`.
+ *
+ * Gemini, not Imagen: Google discontinued the Imagen endpoints on Vertex AI
+ * in 2026 and names `gemini-3.1-flash-image` as Imagen 4's replacement, at
+ * the HIGH thinking level for the standard Imagen 4 model.
+ *
+ * ## No key of its own
+ *
+ * It authenticates as the service account firebase-admin already runs as,
+ * through that credential's `getAccessToken()` — whose scopes include
+ * `cloud-platform`, the scope Vertex AI asks for — the way the Web Risk and
+ * reCAPTCHA admin calls do. The account needs the Vertex AI User role
+ * (`roles/aiplatform.user`) on the project named below.
+ *
+ * ## Off unless an operator turns it on
+ *
+ * `AI_IMAGE_VERTEX_PROJECT` names the Google Cloud project the requests are
+ * billed to, and is the switch: unset, `configured()` is false and the Media
+ * door answers that photos are not made here. The console offers the photo
+ * mode only when `NEXT_PUBLIC_AI_IMAGE_PHOTOS` is `on`, which a deployment
+ * sets beside it. A self-hosted deployment is therefore off until its
+ * operator chooses a project.
+ *
+ * ⛔ THE ORDER FOR AGLYN'S OWN PRODUCTION, and no check can see it, so this
+ * paragraph is the gate: a description reaching Vertex AI makes Google LLC a
+ * recipient of customer content for a purpose `/legal/subprocessors` does not
+ * name today (its Google rows say database, storage, authentication, backups
+ * and logging). Publish that row first — the master, then the page, with a
+ * change-log line; the wording is drafted in
+ * `docs/legal-drafts/AGL-3602-subprocessors.md` — then declare the host in
+ * the AI catalog with that date as `publishedOn`, and only then set the two
+ * variables in production.
+ *
+ * ## What is sent, and nothing else
+ *
+ * The description the member typed and the shape. No account, site,
+ * organization or member identifier, no other content of the site and no
+ * image. One request per picture (`candidateCount` 1), each asking for:
+ *
+ * - `responseModalities: ['IMAGE']` — a picture and no prose, which is also
+ *   what lets the model render at the size asked for;
+ * - `imageConfig: { aspectRatio, imageSize: '1K' }` — the shape, at the
+ *   1K size the per-picture rate is priced at;
+ * - `thinkingConfig: { thinkingLevel: 'HIGH' }` — Google's mapping for the
+ *   Imagen 4 model this replaces;
+ * - `safetySettings` at `BLOCK_MEDIUM_AND_ABOVE` on harassment, hate,
+ *   sexually explicit and dangerous content — the "block some" Imagen
+ *   defaulted to.
+ *
+ * Google marks every Gemini image with its invisible SynthID watermark, and
+ * its own filters refuse what its policies do not allow — among them
+ * photorealistic depictions of children or celebrities that violate them —
+ * whatever is asked. Neither is a setting here.
+ */
+export declare const VERTEX_IMAGE_PROJECT_ENV = "AI_IMAGE_VERTEX_PROJECT";
+export declare const VERTEX_IMAGE_LOCATION_ENV = "AI_IMAGE_VERTEX_LOCATION";
+export declare const VERTEX_IMAGE_MODEL_ENV = "AI_IMAGE_MODEL";
+/** The location requests go to when the operator names none: Google's global endpoint. */
+export declare const VERTEX_IMAGE_DEFAULT_LOCATION = "global";
+/** The model a request runs on when the operator names none. */
+export declare const VERTEX_IMAGE_DEFAULT_MODEL = "gemini-3.1-flash-image";
+/** How long one picture may take, thinking included. */
+export declare const VERTEX_IMAGE_TIMEOUT_MS = 50000;
+/** The harm categories every request filters at "block some". */
+export declare const VERTEX_IMAGE_SAFETY_CATEGORIES: readonly ["HARM_CATEGORY_HARASSMENT", "HARM_CATEGORY_HATE_SPEECH", "HARM_CATEGORY_SEXUALLY_EXPLICIT", "HARM_CATEGORY_DANGEROUS_CONTENT"];
+/** The configured project, or `null` when the provider is off. */
+export declare function vertexImageProject(): string | null;
+/** The configured location; the global endpoint when unset or malformed. */
+export declare function vertexImageLocation(): string;
+/** The configured model; the default when unset or malformed. */
+export declare function vertexImageModel(): string;
+/** The host a request goes to: the global endpoint's, or a region's. */
+export declare function vertexImageHost(location?: string): string;
+/** The `:generateContent` address for a model. */
+export declare function vertexImageUrl(project: string, location: string, model: string): string;
+/** The request body for one picture, exactly as it is sent. */
+export declare function vertexImageRequestBody(request: Pick<AiImageRequest, 'prompt' | 'aspectRatio'>): Record<string, unknown>;
+/** One answer, read: its picture, why it was withheld, and what it spent. */
+export interface VertexImageAnswer {
+    image: AiGeneratedImage | null;
+    /** The finish or block reason, when no picture came back. */
+    withheld: string | null;
+    usage: AiUsage;
+}
+/**
+ * The picture in a `:generateContent` answer. A prompt the filter blocked
+ * carries `promptFeedback.blockReason`; a picture the filter withheld carries
+ * a finish reason such as `IMAGE_SAFETY`; a model that declined answers in
+ * text with `STOP` and no picture. All three are a withheld picture.
+ */
+export declare function parseVertexImageAnswer(body: unknown): VertexImageAnswer;
+export interface VertexImageProviderOptions {
+    fetch?: typeof fetch;
+    accessToken?: () => Promise<string | null>;
+    timeoutMs?: number;
+}
+/** The adapter, with its network and its credential injectable for a spec. */
+export declare function createVertexImageProvider(options?: VertexImageProviderOptions): AiImageProvider;
+/** The adapter the Media door uses. */
+export declare const vertexImageProvider: AiImageProvider;

package/src/lib/providers/vertex-image.js

@@ -0,0 +1,312 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ import { firebaseAdmin } from "@aglyn/tenant-data-admin/server/firebase-admin";
+import { getApp } from "firebase-admin/app";
+import { AI_IMAGE_DEFAULT_MODEL, AI_IMAGE_VERTEX_PROVIDER_ID } from "./catalog.js";
+import { aiTokenCount, AiUpstreamError } from "./contract.js";
+import { AI_IMAGE_MAX_COUNT, AiImageSafetyRefusal } from "./image-contract.js";
+/**
+ * Google's Gemini image models on Vertex AI (AGL-3602), behind the image
+ * contract: `POST https://aiplatform.googleapis.com/v1/projects/{project}/
+ * locations/global/publishers/google/models/{model}:generateContent`.
+ *
+ * Gemini, not Imagen: Google discontinued the Imagen endpoints on Vertex AI
+ * in 2026 and names `gemini-3.1-flash-image` as Imagen 4's replacement, at
+ * the HIGH thinking level for the standard Imagen 4 model.
+ *
+ * ## No key of its own
+ *
+ * It authenticates as the service account firebase-admin already runs as,
+ * through that credential's `getAccessToken()` — whose scopes include
+ * `cloud-platform`, the scope Vertex AI asks for — the way the Web Risk and
+ * reCAPTCHA admin calls do. The account needs the Vertex AI User role
+ * (`roles/aiplatform.user`) on the project named below.
+ *
+ * ## Off unless an operator turns it on
+ *
+ * `AI_IMAGE_VERTEX_PROJECT` names the Google Cloud project the requests are
+ * billed to, and is the switch: unset, `configured()` is false and the Media
+ * door answers that photos are not made here. The console offers the photo
+ * mode only when `NEXT_PUBLIC_AI_IMAGE_PHOTOS` is `on`, which a deployment
+ * sets beside it. A self-hosted deployment is therefore off until its
+ * operator chooses a project.
+ *
+ * ⛔ THE ORDER FOR AGLYN'S OWN PRODUCTION, and no check can see it, so this
+ * paragraph is the gate: a description reaching Vertex AI makes Google LLC a
+ * recipient of customer content for a purpose `/legal/subprocessors` does not
+ * name today (its Google rows say database, storage, authentication, backups
+ * and logging). Publish that row first — the master, then the page, with a
+ * change-log line; the wording is drafted in
+ * `docs/legal-drafts/AGL-3602-subprocessors.md` — then declare the host in
+ * the AI catalog with that date as `publishedOn`, and only then set the two
+ * variables in production.
+ *
+ * ## What is sent, and nothing else
+ *
+ * The description the member typed and the shape. No account, site,
+ * organization or member identifier, no other content of the site and no
+ * image. One request per picture (`candidateCount` 1), each asking for:
+ *
+ * - `responseModalities: ['IMAGE']` — a picture and no prose, which is also
+ *   what lets the model render at the size asked for;
+ * - `imageConfig: { aspectRatio, imageSize: '1K' }` — the shape, at the
+ *   1K size the per-picture rate is priced at;
+ * - `thinkingConfig: { thinkingLevel: 'HIGH' }` — Google's mapping for the
+ *   Imagen 4 model this replaces;
+ * - `safetySettings` at `BLOCK_MEDIUM_AND_ABOVE` on harassment, hate,
+ *   sexually explicit and dangerous content — the "block some" Imagen
+ *   defaulted to.
+ *
+ * Google marks every Gemini image with its invisible SynthID watermark, and
+ * its own filters refuse what its policies do not allow — among them
+ * photorealistic depictions of children or celebrities that violate them —
+ * whatever is asked. Neither is a setting here.
+ */ export const VERTEX_IMAGE_PROJECT_ENV = 'AI_IMAGE_VERTEX_PROJECT';
+export const VERTEX_IMAGE_LOCATION_ENV = 'AI_IMAGE_VERTEX_LOCATION';
+export const VERTEX_IMAGE_MODEL_ENV = 'AI_IMAGE_MODEL';
+/** The location requests go to when the operator names none: Google's global endpoint. */ export const VERTEX_IMAGE_DEFAULT_LOCATION = 'global';
+/** The model a request runs on when the operator names none. */ export const VERTEX_IMAGE_DEFAULT_MODEL = AI_IMAGE_DEFAULT_MODEL;
+/** How long one picture may take, thinking included. */ export const VERTEX_IMAGE_TIMEOUT_MS = 50000;
+/** The harm categories every request filters at "block some". */ export const VERTEX_IMAGE_SAFETY_CATEGORIES = [
+    'HARM_CATEGORY_HARASSMENT',
+    'HARM_CATEGORY_HATE_SPEECH',
+    'HARM_CATEGORY_SEXUALLY_EXPLICIT',
+    'HARM_CATEGORY_DANGEROUS_CONTENT'
+];
+/** A Google Cloud project id: 6–30 lowercase letters, digits and hyphens. */ const PROJECT_ID = /^[a-z][a-z0-9-]{4,28}[a-z0-9]$/;
+/** `global`, or a Vertex AI region such as `us-central1`. */ const LOCATION = /^(global|[a-z]+-[a-z]+[0-9]+)$/;
+/** A publisher model id, `gemini-3.1-flash-image`. */ const MODEL_ID = /^[a-z0-9][a-z0-9.-]{1,62}$/;
+/** The finish reasons that mean the picture was withheld rather than failed. */ const WITHHELD_FINISH = new Set([
+    'SAFETY',
+    'IMAGE_SAFETY',
+    'PROHIBITED_CONTENT',
+    'IMAGE_PROHIBITED_CONTENT',
+    'BLOCKLIST',
+    'SPII',
+    'RECITATION',
+    'IMAGE_RECITATION',
+    'IMAGE_OTHER',
+    'NO_IMAGE'
+]);
+function envValue(name) {
+    var _ref;
+    var _process_env_name;
+    return (_ref = (_process_env_name = process.env[name]) == null ? void 0 : _process_env_name.trim()) != null ? _ref : '';
+}
+/** The configured project, or `null` when the provider is off. */ export function vertexImageProject() {
+    const project = envValue(VERTEX_IMAGE_PROJECT_ENV);
+    return PROJECT_ID.test(project) ? project : null;
+}
+/** The configured location; the global endpoint when unset or malformed. */ export function vertexImageLocation() {
+    const location = envValue(VERTEX_IMAGE_LOCATION_ENV);
+    return LOCATION.test(location) ? location : VERTEX_IMAGE_DEFAULT_LOCATION;
+}
+/** The configured model; the default when unset or malformed. */ export function vertexImageModel() {
+    const model = envValue(VERTEX_IMAGE_MODEL_ENV);
+    return MODEL_ID.test(model) ? model : VERTEX_IMAGE_DEFAULT_MODEL;
+}
+/** The host a request goes to: the global endpoint's, or a region's. */ export function vertexImageHost(location = vertexImageLocation()) {
+    return location === 'global' ? 'aiplatform.googleapis.com' : `${location}-aiplatform.googleapis.com`;
+}
+/** The `:generateContent` address for a model. */ export function vertexImageUrl(project, location, model) {
+    return `https://${vertexImageHost(location)}/v1/projects/${project}/locations/${location}` + `/publishers/google/models/${model}:generateContent`;
+}
+/** The request body for one picture, exactly as it is sent. */ export function vertexImageRequestBody(request) {
+    return {
+        contents: [
+            {
+                role: 'USER',
+                parts: [
+                    {
+                        text: request.prompt
+                    }
+                ]
+            }
+        ],
+        generationConfig: {
+            responseModalities: [
+                'IMAGE'
+            ],
+            candidateCount: 1,
+            imageConfig: {
+                aspectRatio: request.aspectRatio,
+                imageSize: '1K'
+            },
+            thinkingConfig: {
+                thinkingLevel: 'HIGH'
+            }
+        },
+        safetySettings: VERTEX_IMAGE_SAFETY_CATEGORIES.map((category)=>({
+                category,
+                threshold: 'BLOCK_MEDIUM_AND_ABOVE'
+            }))
+    };
+}
+const IMAGE_TYPES = new Set([
+    'image/jpeg',
+    'image/png',
+    'image/webp'
+]);
+/**
+ * The picture in a `:generateContent` answer. A prompt the filter blocked
+ * carries `promptFeedback.blockReason`; a picture the filter withheld carries
+ * a finish reason such as `IMAGE_SAFETY`; a model that declined answers in
+ * text with `STOP` and no picture. All three are a withheld picture.
+ */ export function parseVertexImageAnswer(body) {
+    var _answer_usageMetadata;
+    var _answer_promptFeedback, _candidate_content;
+    const answer = body != null ? body : {};
+    const meta = (_answer_usageMetadata = answer['usageMetadata']) != null ? _answer_usageMetadata : {};
+    const usage = {
+        inputTokens: aiTokenCount(meta['promptTokenCount']),
+        // The thinking only: the picture's own tokens are priced per picture.
+        outputTokens: aiTokenCount(meta['thoughtsTokenCount']),
+        cacheReadTokens: 0,
+        cacheWriteTokens: 0
+    };
+    const blocked = (_answer_promptFeedback = answer['promptFeedback']) == null ? void 0 : _answer_promptFeedback['blockReason'];
+    if (typeof blocked === 'string' && blocked) {
+        return {
+            image: null,
+            withheld: blocked,
+            usage
+        };
+    }
+    const candidate = Array.isArray(answer['candidates']) ? answer['candidates'][0] : null;
+    const parts = Array.isArray(candidate == null ? void 0 : (_candidate_content = candidate.content) == null ? void 0 : _candidate_content.parts) ? candidate.content.parts : [];
+    for (const part of parts){
+        const inline = part == null ? void 0 : part.inlineData;
+        const data = typeof (inline == null ? void 0 : inline.data) === 'string' ? inline.data : '';
+        const mimeType = typeof (inline == null ? void 0 : inline.mimeType) === 'string' ? inline.mimeType : '';
+        if (data && IMAGE_TYPES.has(mimeType)) {
+            return {
+                image: {
+                    base64: data,
+                    mimeType
+                },
+                withheld: null,
+                usage
+            };
+        }
+    }
+    const finish = typeof (candidate == null ? void 0 : candidate.finishReason) === 'string' ? candidate.finishReason : '';
+    return {
+        image: null,
+        withheld: WITHHELD_FINISH.has(finish) ? finish : finish ? `${finish}_NO_IMAGE` : 'NO_IMAGE',
+        usage
+    };
+}
+/** An access token for the platform's own service account, or `null`. */ async function serviceAccountAccessToken() {
+    var _ref;
+    // The default app, initialized by the platform's firebase-admin module on
+    // first use; its credential is the one Web Risk's token comes from.
+    firebaseAdmin.app();
+    const credential = getApp().options.credential;
+    if (!credential) return null;
+    const token = await credential.getAccessToken();
+    return (_ref = token == null ? void 0 : token.access_token) != null ? _ref : null;
+}
+const addUsage = (a, b)=>({
+        inputTokens: a.inputTokens + b.inputTokens,
+        outputTokens: a.outputTokens + b.outputTokens,
+        cacheReadTokens: 0,
+        cacheWriteTokens: 0
+    });
+/** The adapter, with its network and its credential injectable for a spec. */ export function createVertexImageProvider(options = {}) {
+    async function one(url, token, request) {
+        var _response_headers_get;
+        let response;
+        try {
+            var _options_fetch, _options_timeoutMs;
+            response = await ((_options_fetch = options.fetch) != null ? _options_fetch : fetch)(url, {
+                method: 'POST',
+                headers: {
+                    Authorization: `Bearer ${token}`,
+                    'Content-Type': 'application/json; charset=utf-8'
+                },
+                body: JSON.stringify(vertexImageRequestBody(request)),
+                signal: AbortSignal.timeout((_options_timeoutMs = options.timeoutMs) != null ? _options_timeoutMs : VERTEX_IMAGE_TIMEOUT_MS)
+            });
+        } catch (unused) {
+            // No answer at all — a timeout or a network fault — is ours to retry.
+            throw new AiUpstreamError(null, true, null);
+        }
+        const requestId = (_response_headers_get = response.headers.get('x-goog-request-id')) != null ? _response_headers_get : null;
+        if (!response.ok) {
+            const status = response.status;
+            const detail = await response.text().catch(()=>'');
+            console.error('vertex image request failed', {
+                status,
+                requestId,
+                detail: detail.slice(0, 500)
+            });
+            throw new AiUpstreamError(status, status === 429 || status >= 500, requestId, status === 401 || status === 403 ? 'credentials' : null);
+        }
+        return parseVertexImageAnswer(await response.json().catch(()=>null));
+    }
+    return {
+        id: AI_IMAGE_VERTEX_PROVIDER_ID,
+        label: 'Google Vertex AI',
+        defaultModel: vertexImageModel,
+        configured: ()=>vertexImageProject() !== null,
+        endpointHost: ()=>vertexImageHost(),
+        async generate (request) {
+            var _options_accessToken;
+            const project = vertexImageProject();
+            if (!project) throw new AiUpstreamError(null, false, null, 'credentials');
+            const token = await ((_options_accessToken = options.accessToken) != null ? _options_accessToken : serviceAccountAccessToken)();
+            if (!token) throw new AiUpstreamError(null, false, null, 'credentials');
+            const url = vertexImageUrl(project, vertexImageLocation(), request.model);
+            const count = Math.min(AI_IMAGE_MAX_COUNT, Math.max(1, Math.floor(request.count)));
+            // One request per picture, side by side: a Gemini image request answers
+            // with one picture, and four in a row would outlast the door.
+            const settled = await Promise.allSettled(Array.from({
+                length: count
+            }, ()=>one(url, token, request)));
+            const answers = settled.flatMap((entry)=>entry.status === 'fulfilled' ? [
+                    entry.value
+                ] : []);
+            const failure = settled.find((entry)=>entry.status === 'rejected');
+            const images = answers.flatMap((answer)=>answer.image ? [
+                    answer.image
+                ] : []);
+            const withheld = answers.flatMap((answer)=>answer.withheld ? [
+                    answer.withheld
+                ] : []);
+            const usage = answers.reduce((sum, answer)=>addUsage(sum, answer.usage), {
+                inputTokens: 0,
+                outputTokens: 0,
+                cacheReadTokens: 0,
+                cacheWriteTokens: 0
+            });
+            if (!images.length) {
+                // Every picture failed for us: the fault is the answer. Every picture
+                // was withheld: the filter's decline is.
+                if (failure && !withheld.length) throw failure.reason;
+                throw new AiImageSafetyRefusal(withheld);
+            }
+            return {
+                model: request.model,
+                images,
+                filtered: count - images.length,
+                usage
+            };
+        }
+    };
+}
+/** The adapter the Media door uses. */ export const vertexImageProvider = createVertexImageProvider();
+
+//# sourceMappingURL=vertex-image.js.map

package/src/lib/providers/vertex-image.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../libs/plugins/ai/src/lib/providers/vertex-image.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { firebaseAdmin } from '@aglyn/tenant-data-admin/server/firebase-admin'\nimport { getApp } from 'firebase-admin/app'\nimport { AI_IMAGE_DEFAULT_MODEL, AI_IMAGE_VERTEX_PROVIDER_ID } from './catalog'\nimport { aiTokenCount, AiUpstreamError, type AiUsage } from './contract'\nimport {\n  AI_IMAGE_MAX_COUNT,\n  AiImageSafetyRefusal,\n  type AiGeneratedImage,\n  type AiImageProvider,\n  type AiImageRequest,\n  type AiImageResult,\n} from './image-contract'\n\n/**\n * Google's Gemini image models on Vertex AI (AGL-3602), behind the image\n * contract: `POST https://aiplatform.googleapis.com/v1/projects/{project}/\n * locations/global/publishers/google/models/{model}:generateContent`.\n *\n * Gemini, not Imagen: Google discontinued the Imagen endpoints on Vertex AI\n * in 2026 and names `gemini-3.1-flash-image` as Imagen 4's replacement, at\n * the HIGH thinking level for the standard Imagen 4 model.\n *\n * ## No key of its own\n *\n * It authenticates as the service account firebase-admin already runs as,\n * through that credential's `getAccessToken()` — whose scopes include\n * `cloud-platform`, the scope Vertex AI asks for — the way the Web Risk and\n * reCAPTCHA admin calls do. The account needs the Vertex AI User role\n * (`roles/aiplatform.user`) on the project named below.\n *\n * ## Off unless an operator turns it on\n *\n * `AI_IMAGE_VERTEX_PROJECT` names the Google Cloud project the requests are\n * billed to, and is the switch: unset, `configured()` is false and the Media\n * door answers that photos are not made here. The console offers the photo\n * mode only when `NEXT_PUBLIC_AI_IMAGE_PHOTOS` is `on`, which a deployment\n * sets beside it. A self-hosted deployment is therefore off until its\n * operator chooses a project.\n *\n * ⛔ THE ORDER FOR AGLYN'S OWN PRODUCTION, and no check can see it, so this\n * paragraph is the gate: a description reaching Vertex AI makes Google LLC a\n * recipient of customer content for a purpose `/legal/subprocessors` does not\n * name today (its Google rows say database, storage, authentication, backups\n * and logging). Publish that row first — the master, then the page, with a\n * change-log line; the wording is drafted in\n * `docs/legal-drafts/AGL-3602-subprocessors.md` — then declare the host in\n * the AI catalog with that date as `publishedOn`, and only then set the two\n * variables in production.\n *\n * ## What is sent, and nothing else\n *\n * The description the member typed and the shape. No account, site,\n * organization or member identifier, no other content of the site and no\n * image. One request per picture (`candidateCount` 1), each asking for:\n *\n * - `responseModalities: ['IMAGE']` — a picture and no prose, which is also\n *   what lets the model render at the size asked for;\n * - `imageConfig: { aspectRatio, imageSize: '1K' }` — the shape, at the\n *   1K size the per-picture rate is priced at;\n * - `thinkingConfig: { thinkingLevel: 'HIGH' }` — Google's mapping for the\n *   Imagen 4 model this replaces;\n * - `safetySettings` at `BLOCK_MEDIUM_AND_ABOVE` on harassment, hate,\n *   sexually explicit and dangerous content — the \"block some\" Imagen\n *   defaulted to.\n *\n * Google marks every Gemini image with its invisible SynthID watermark, and\n * its own filters refuse what its policies do not allow — among them\n * photorealistic depictions of children or celebrities that violate them —\n * whatever is asked. Neither is a setting here.\n */\n\nexport const VERTEX_IMAGE_PROJECT_ENV = 'AI_IMAGE_VERTEX_PROJECT'\nexport const VERTEX_IMAGE_LOCATION_ENV = 'AI_IMAGE_VERTEX_LOCATION'\nexport const VERTEX_IMAGE_MODEL_ENV = 'AI_IMAGE_MODEL'\n\n/** The location requests go to when the operator names none: Google's global endpoint. */\nexport const VERTEX_IMAGE_DEFAULT_LOCATION = 'global'\n\n/** The model a request runs on when the operator names none. */\nexport const VERTEX_IMAGE_DEFAULT_MODEL = AI_IMAGE_DEFAULT_MODEL\n\n/** How long one picture may take, thinking included. */\nexport const VERTEX_IMAGE_TIMEOUT_MS = 50_000\n\n/** The harm categories every request filters at \"block some\". */\nexport const VERTEX_IMAGE_SAFETY_CATEGORIES = [\n  'HARM_CATEGORY_HARASSMENT',\n  'HARM_CATEGORY_HATE_SPEECH',\n  'HARM_CATEGORY_SEXUALLY_EXPLICIT',\n  'HARM_CATEGORY_DANGEROUS_CONTENT',\n] as const\n\n/** A Google Cloud project id: 6–30 lowercase letters, digits and hyphens. */\nconst PROJECT_ID = /^[a-z][a-z0-9-]{4,28}[a-z0-9]$/\n/** `global`, or a Vertex AI region such as `us-central1`. */\nconst LOCATION = /^(global|[a-z]+-[a-z]+[0-9]+)$/\n/** A publisher model id, `gemini-3.1-flash-image`. */\nconst MODEL_ID = /^[a-z0-9][a-z0-9.-]{1,62}$/\n\n/** The finish reasons that mean the picture was withheld rather than failed. */\nconst WITHHELD_FINISH = new Set([\n  'SAFETY',\n  'IMAGE_SAFETY',\n  'PROHIBITED_CONTENT',\n  'IMAGE_PROHIBITED_CONTENT',\n  'BLOCKLIST',\n  'SPII',\n  'RECITATION',\n  'IMAGE_RECITATION',\n  'IMAGE_OTHER',\n  'NO_IMAGE',\n])\n\nfunction envValue(name: string): string {\n  return process.env[name]?.trim() ?? ''\n}\n\n/** The configured project, or `null` when the provider is off. */\nexport function vertexImageProject(): string | null {\n  const project = envValue(VERTEX_IMAGE_PROJECT_ENV)\n  return PROJECT_ID.test(project) ? project : null\n}\n\n/** The configured location; the global endpoint when unset or malformed. */\nexport function vertexImageLocation(): string {\n  const location = envValue(VERTEX_IMAGE_LOCATION_ENV)\n  return LOCATION.test(location) ? location : VERTEX_IMAGE_DEFAULT_LOCATION\n}\n\n/** The configured model; the default when unset or malformed. */\nexport function vertexImageModel(): string {\n  const model = envValue(VERTEX_IMAGE_MODEL_ENV)\n  return MODEL_ID.test(model) ? model : VERTEX_IMAGE_DEFAULT_MODEL\n}\n\n/** The host a request goes to: the global endpoint's, or a region's. */\nexport function vertexImageHost(location = vertexImageLocation()): string {\n  return location === 'global' ? 'aiplatform.googleapis.com' : `${location}-aiplatform.googleapis.com`\n}\n\n/** The `:generateContent` address for a model. */\nexport function vertexImageUrl(project: string, location: string, model: string): string {\n  return (\n    `https://${vertexImageHost(location)}/v1/projects/${project}/locations/${location}` +\n    `/publishers/google/models/${model}:generateContent`\n  )\n}\n\n/** The request body for one picture, exactly as it is sent. */\nexport function vertexImageRequestBody(\n  request: Pick<AiImageRequest, 'prompt' | 'aspectRatio'>,\n): Record<string, unknown> {\n  return {\n    contents: [{ role: 'USER', parts: [{ text: request.prompt }] }],\n    generationConfig: {\n      responseModalities: ['IMAGE'],\n      candidateCount: 1,\n      imageConfig: { aspectRatio: request.aspectRatio, imageSize: '1K' },\n      thinkingConfig: { thinkingLevel: 'HIGH' },\n    },\n    safetySettings: VERTEX_IMAGE_SAFETY_CATEGORIES.map((category) => ({\n      category,\n      threshold: 'BLOCK_MEDIUM_AND_ABOVE',\n    })),\n  }\n}\n\nconst IMAGE_TYPES = new Set(['image/jpeg', 'image/png', 'image/webp'])\n\n/** One answer, read: its picture, why it was withheld, and what it spent. */\nexport interface VertexImageAnswer {\n  image: AiGeneratedImage | null\n  /** The finish or block reason, when no picture came back. */\n  withheld: string | null\n  usage: AiUsage\n}\n\n/**\n * The picture in a `:generateContent` answer. A prompt the filter blocked\n * carries `promptFeedback.blockReason`; a picture the filter withheld carries\n * a finish reason such as `IMAGE_SAFETY`; a model that declined answers in\n * text with `STOP` and no picture. All three are a withheld picture.\n */\nexport function parseVertexImageAnswer(body: unknown): VertexImageAnswer {\n  const answer = (body ?? {}) as Record<string, any>\n  const meta = (answer['usageMetadata'] ?? {}) as Record<string, unknown>\n  const usage: AiUsage = {\n    inputTokens: aiTokenCount(meta['promptTokenCount']),\n    // The thinking only: the picture's own tokens are priced per picture.\n    outputTokens: aiTokenCount(meta['thoughtsTokenCount']),\n    cacheReadTokens: 0,\n    cacheWriteTokens: 0,\n  }\n  const blocked = answer['promptFeedback']?.['blockReason']\n  if (typeof blocked === 'string' && blocked) {\n    return { image: null, withheld: blocked, usage }\n  }\n  const candidate = Array.isArray(answer['candidates']) ? answer['candidates'][0] : null\n  const parts = Array.isArray(candidate?.content?.parts) ? candidate.content.parts : []\n  for (const part of parts) {\n    const inline = part?.inlineData\n    const data = typeof inline?.data === 'string' ? inline.data : ''\n    const mimeType = typeof inline?.mimeType === 'string' ? inline.mimeType : ''\n    if (data && IMAGE_TYPES.has(mimeType)) {\n      return { image: { base64: data, mimeType }, withheld: null, usage }\n    }\n  }\n  const finish = typeof candidate?.finishReason === 'string' ? candidate.finishReason : ''\n  return {\n    image: null,\n    withheld: WITHHELD_FINISH.has(finish) ? finish : finish ? `${finish}_NO_IMAGE` : 'NO_IMAGE',\n    usage,\n  }\n}\n\n/** An access token for the platform's own service account, or `null`. */\nasync function serviceAccountAccessToken(): Promise<string | null> {\n  // The default app, initialized by the platform's firebase-admin module on\n  // first use; its credential is the one Web Risk's token comes from.\n  firebaseAdmin.app()\n  const credential = getApp().options.credential\n  if (!credential) return null\n  const token = await credential.getAccessToken()\n  return token?.access_token ?? null\n}\n\nexport interface VertexImageProviderOptions {\n  fetch?: typeof fetch\n  accessToken?: () => Promise<string | null>\n  timeoutMs?: number\n}\n\nconst addUsage = (a: AiUsage, b: AiUsage): AiUsage => ({\n  inputTokens: a.inputTokens + b.inputTokens,\n  outputTokens: a.outputTokens + b.outputTokens,\n  cacheReadTokens: 0,\n  cacheWriteTokens: 0,\n})\n\n/** The adapter, with its network and its credential injectable for a spec. */\nexport function createVertexImageProvider(\n  options: VertexImageProviderOptions = {},\n): AiImageProvider {\n  async function one(\n    url: string,\n    token: string,\n    request: AiImageRequest,\n  ): Promise<VertexImageAnswer> {\n    let response: Response\n    try {\n      response = await (options.fetch ?? fetch)(url, {\n        method: 'POST',\n        headers: {\n          Authorization: `Bearer ${token}`,\n          'Content-Type': 'application/json; charset=utf-8',\n        },\n        body: JSON.stringify(vertexImageRequestBody(request)),\n        signal: AbortSignal.timeout(options.timeoutMs ?? VERTEX_IMAGE_TIMEOUT_MS),\n      })\n    } catch {\n      // No answer at all — a timeout or a network fault — is ours to retry.\n      throw new AiUpstreamError(null, true, null)\n    }\n    const requestId = response.headers.get('x-goog-request-id') ?? null\n    if (!response.ok) {\n      const status = response.status\n      const detail = await response.text().catch(() => '')\n      console.error('vertex image request failed', {\n        status,\n        requestId,\n        detail: detail.slice(0, 500),\n      })\n      throw new AiUpstreamError(\n        status,\n        status === 429 || status >= 500,\n        requestId,\n        status === 401 || status === 403 ? 'credentials' : null,\n      )\n    }\n    return parseVertexImageAnswer(await response.json().catch(() => null))\n  }\n\n  return {\n    id: AI_IMAGE_VERTEX_PROVIDER_ID,\n    label: 'Google Vertex AI',\n    defaultModel: vertexImageModel,\n    configured: () => vertexImageProject() !== null,\n    endpointHost: () => vertexImageHost(),\n    async generate(request: AiImageRequest): Promise<AiImageResult> {\n      const project = vertexImageProject()\n      if (!project) throw new AiUpstreamError(null, false, null, 'credentials')\n      const token = await (options.accessToken ?? serviceAccountAccessToken)()\n      if (!token) throw new AiUpstreamError(null, false, null, 'credentials')\n      const url = vertexImageUrl(project, vertexImageLocation(), request.model)\n      const count = Math.min(AI_IMAGE_MAX_COUNT, Math.max(1, Math.floor(request.count)))\n      // One request per picture, side by side: a Gemini image request answers\n      // with one picture, and four in a row would outlast the door.\n      const settled = await Promise.allSettled(\n        Array.from({ length: count }, () => one(url, token, request)),\n      )\n      const answers = settled.flatMap((entry) => (entry.status === 'fulfilled' ? [entry.value] : []))\n      const failure = settled.find((entry) => entry.status === 'rejected') as\n        | PromiseRejectedResult\n        | undefined\n      const images = answers.flatMap((answer) => (answer.image ? [answer.image] : []))\n      const withheld = answers.flatMap((answer) => (answer.withheld ? [answer.withheld] : []))\n      const usage = answers.reduce<AiUsage>((sum, answer) => addUsage(sum, answer.usage), {\n        inputTokens: 0,\n        outputTokens: 0,\n        cacheReadTokens: 0,\n        cacheWriteTokens: 0,\n      })\n      if (!images.length) {\n        // Every picture failed for us: the fault is the answer. Every picture\n        // was withheld: the filter's decline is.\n        if (failure && !withheld.length) throw failure.reason\n        throw new AiImageSafetyRefusal(withheld)\n      }\n      return {\n        model: request.model,\n        images,\n        filtered: count - images.length,\n        usage,\n      }\n    },\n  }\n}\n\n/** The adapter the Media door uses. */\nexport const vertexImageProvider: AiImageProvider = createVertexImageProvider()\n"],"names":["firebaseAdmin","getApp","AI_IMAGE_DEFAULT_MODEL","AI_IMAGE_VERTEX_PROVIDER_ID","aiTokenCount","AiUpstreamError","AI_IMAGE_MAX_COUNT","AiImageSafetyRefusal","VERTEX_IMAGE_PROJECT_ENV","VERTEX_IMAGE_LOCATION_ENV","VERTEX_IMAGE_MODEL_ENV","VERTEX_IMAGE_DEFAULT_LOCATION","VERTEX_IMAGE_DEFAULT_MODEL","VERTEX_IMAGE_TIMEOUT_MS","VERTEX_IMAGE_SAFETY_CATEGORIES","PROJECT_ID","LOCATION","MODEL_ID","WITHHELD_FINISH","Set","envValue","name","process","env","trim","vertexImageProject","project","test","vertexImageLocation","location","vertexImageModel","model","vertexImageHost","vertexImageUrl","vertexImageRequestBody","request","contents","role","parts","text","prompt","generationConfig","responseModalities","candidateCount","imageConfig","aspectRatio","imageSize","thinkingConfig","thinkingLevel","safetySettings","map","category","threshold","IMAGE_TYPES","parseVertexImageAnswer","body","answer","candidate","meta","usage","inputTokens","outputTokens","cacheReadTokens","cacheWriteTokens","blocked","image","withheld","Array","isArray","content","part","inline","inlineData","data","mimeType","has","base64","finish","finishReason","serviceAccountAccessToken","app","credential","options","token","getAccessToken","access_token","addUsage","a","b","createVertexImageProvider","one","url","response","fetch","method","headers","Authorization","JSON","stringify","signal","AbortSignal","timeout","timeoutMs","requestId","get","ok","status","detail","catch","console","error","slice","json","id","label","defaultModel","configured","endpointHost","generate","accessToken","count","Math","min","max","floor","settled","Promise","allSettled","from","length","answers","flatMap","entry","value","failure","find","images","reduce","sum","reason","filtered","vertexImageProvider"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED,SAASA,aAAa,QAAQ,iDAAgD;AAC9E,SAASC,MAAM,QAAQ,qBAAoB;AAC3C,SAASC,sBAAsB,EAAEC,2BAA2B,QAAQ,eAAW;AAC/E,SAASC,YAAY,EAAEC,eAAe,QAAsB,gBAAY;AACxE,SACEC,kBAAkB,EAClBC,oBAAoB,QAKf,sBAAkB;AAEzB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAwDC,GAED,OAAO,MAAMC,2BAA2B,0BAAyB;AACjE,OAAO,MAAMC,4BAA4B,2BAA0B;AACnE,OAAO,MAAMC,yBAAyB,iBAAgB;AAEtD,wFAAwF,GACxF,OAAO,MAAMC,gCAAgC,SAAQ;AAErD,8DAA8D,GAC9D,OAAO,MAAMC,6BAA6BV,uBAAsB;AAEhE,sDAAsD,GACtD,OAAO,MAAMW,0BAA0B,MAAM;AAE7C,+DAA+D,GAC/D,OAAO,MAAMC,iCAAiC;IAC5C;IACA;IACA;IACA;CACD,CAAS;AAEV,2EAA2E,GAC3E,MAAMC,aAAa;AACnB,2DAA2D,GAC3D,MAAMC,WAAW;AACjB,oDAAoD,GACpD,MAAMC,WAAW;AAEjB,8EAA8E,GAC9E,MAAMC,kBAAkB,IAAIC,IAAI;IAC9B;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;CACD;AAED,SAASC,SAASC,IAAY;;QACrBC;IAAP,gBAAOA,oBAAAA,QAAQC,GAAG,CAACF,KAAK,qBAAjBC,kBAAmBE,IAAI,qBAAM;AACtC;AAEA,gEAAgE,GAChE,OAAO,SAASC;IACd,MAAMC,UAAUN,SAASZ;IACzB,OAAOO,WAAWY,IAAI,CAACD,WAAWA,UAAU;AAC9C;AAEA,0EAA0E,GAC1E,OAAO,SAASE;IACd,MAAMC,WAAWT,SAASX;IAC1B,OAAOO,SAASW,IAAI,CAACE,YAAYA,WAAWlB;AAC9C;AAEA,+DAA+D,GAC/D,OAAO,SAASmB;IACd,MAAMC,QAAQX,SAASV;IACvB,OAAOO,SAASU,IAAI,CAACI,SAASA,QAAQnB;AACxC;AAEA,sEAAsE,GACtE,OAAO,SAASoB,gBAAgBH,WAAWD,qBAAqB;IAC9D,OAAOC,aAAa,WAAW,8BAA8B,GAAGA,SAAS,0BAA0B,CAAC;AACtG;AAEA,gDAAgD,GAChD,OAAO,SAASI,eAAeP,OAAe,EAAEG,QAAgB,EAAEE,KAAa;IAC7E,OACE,CAAC,QAAQ,EAAEC,gBAAgBH,UAAU,aAAa,EAAEH,QAAQ,WAAW,EAAEG,UAAU,GACnF,CAAC,0BAA0B,EAAEE,MAAM,gBAAgB,CAAC;AAExD;AAEA,6DAA6D,GAC7D,OAAO,SAASG,uBACdC,OAAuD;IAEvD,OAAO;QACLC,UAAU;YAAC;gBAAEC,MAAM;gBAAQC,OAAO;oBAAC;wBAAEC,MAAMJ,QAAQK,MAAM;oBAAC;iBAAE;YAAC;SAAE;QAC/DC,kBAAkB;YAChBC,oBAAoB;gBAAC;aAAQ;YAC7BC,gBAAgB;YAChBC,aAAa;gBAAEC,aAAaV,QAAQU,WAAW;gBAAEC,WAAW;YAAK;YACjEC,gBAAgB;gBAAEC,eAAe;YAAO;QAC1C;QACAC,gBAAgBnC,+BAA+BoC,GAAG,CAAC,CAACC,WAAc,CAAA;gBAChEA;gBACAC,WAAW;YACb,CAAA;IACF;AACF;AAEA,MAAMC,cAAc,IAAIlC,IAAI;IAAC;IAAc;IAAa;CAAa;AAUrE;;;;;CAKC,GACD,OAAO,SAASmC,uBAAuBC,IAAa;QAEpCC;QAQEA,wBAKYC;IAd5B,MAAMD,SAAUD,eAAAA,OAAQ,CAAC;IACzB,MAAMG,QAAQF,wBAAAA,MAAM,CAAC,gBAAgB,YAAvBA,wBAA2B,CAAC;IAC1C,MAAMG,QAAiB;QACrBC,aAAaxD,aAAasD,IAAI,CAAC,mBAAmB;QAClD,sEAAsE;QACtEG,cAAczD,aAAasD,IAAI,CAAC,qBAAqB;QACrDI,iBAAiB;QACjBC,kBAAkB;IACpB;IACA,MAAMC,WAAUR,yBAAAA,MAAM,CAAC,iBAAiB,qBAAxBA,sBAA0B,CAAC,cAAc;IACzD,IAAI,OAAOQ,YAAY,YAAYA,SAAS;QAC1C,OAAO;YAAEC,OAAO;YAAMC,UAAUF;YAASL;QAAM;IACjD;IACA,MAAMF,YAAYU,MAAMC,OAAO,CAACZ,MAAM,CAAC,aAAa,IAAIA,MAAM,CAAC,aAAa,CAAC,EAAE,GAAG;IAClF,MAAMlB,QAAQ6B,MAAMC,OAAO,CAACX,8BAAAA,qBAAAA,UAAWY,OAAO,qBAAlBZ,mBAAoBnB,KAAK,IAAImB,UAAUY,OAAO,CAAC/B,KAAK,GAAG,EAAE;IACrF,KAAK,MAAMgC,QAAQhC,MAAO;QACxB,MAAMiC,SAASD,wBAAAA,KAAME,UAAU;QAC/B,MAAMC,OAAO,QAAOF,0BAAAA,OAAQE,IAAI,MAAK,WAAWF,OAAOE,IAAI,GAAG;QAC9D,MAAMC,WAAW,QAAOH,0BAAAA,OAAQG,QAAQ,MAAK,WAAWH,OAAOG,QAAQ,GAAG;QAC1E,IAAID,QAAQpB,YAAYsB,GAAG,CAACD,WAAW;YACrC,OAAO;gBAAET,OAAO;oBAAEW,QAAQH;oBAAMC;gBAAS;gBAAGR,UAAU;gBAAMP;YAAM;QACpE;IACF;IACA,MAAMkB,SAAS,QAAOpB,6BAAAA,UAAWqB,YAAY,MAAK,WAAWrB,UAAUqB,YAAY,GAAG;IACtF,OAAO;QACLb,OAAO;QACPC,UAAUhD,gBAAgByD,GAAG,CAACE,UAAUA,SAASA,SAAS,GAAGA,OAAO,SAAS,CAAC,GAAG;QACjFlB;IACF;AACF;AAEA,uEAAuE,GACvE,eAAeoB;;IACb,0EAA0E;IAC1E,oEAAoE;IACpE/E,cAAcgF,GAAG;IACjB,MAAMC,aAAahF,SAASiF,OAAO,CAACD,UAAU;IAC9C,IAAI,CAACA,YAAY,OAAO;IACxB,MAAME,QAAQ,MAAMF,WAAWG,cAAc;IAC7C,eAAOD,yBAAAA,MAAOE,YAAY,mBAAI;AAChC;AAQA,MAAMC,WAAW,CAACC,GAAYC,IAAyB,CAAA;QACrD5B,aAAa2B,EAAE3B,WAAW,GAAG4B,EAAE5B,WAAW;QAC1CC,cAAc0B,EAAE1B,YAAY,GAAG2B,EAAE3B,YAAY;QAC7CC,iBAAiB;QACjBC,kBAAkB;IACpB,CAAA;AAEA,4EAA4E,GAC5E,OAAO,SAAS0B,0BACdP,UAAsC,CAAC,CAAC;IAExC,eAAeQ,IACbC,GAAW,EACXR,KAAa,EACbhD,OAAuB;YAiBLyD;QAflB,IAAIA;QACJ,IAAI;gBACgBV,gBAOYA;YAP9BU,WAAW,MAAM,EAACV,iBAAAA,QAAQW,KAAK,YAAbX,iBAAiBW,OAAOF,KAAK;gBAC7CG,QAAQ;gBACRC,SAAS;oBACPC,eAAe,CAAC,OAAO,EAAEb,OAAO;oBAChC,gBAAgB;gBAClB;gBACA5B,MAAM0C,KAAKC,SAAS,CAAChE,uBAAuBC;gBAC5CgE,QAAQC,YAAYC,OAAO,EAACnB,qBAAAA,QAAQoB,SAAS,YAAjBpB,qBAAqBrE;YACnD;QACF,EAAE,eAAM;YACN,sEAAsE;YACtE,MAAM,IAAIR,gBAAgB,MAAM,MAAM;QACxC;QACA,MAAMkG,aAAYX,wBAAAA,SAASG,OAAO,CAACS,GAAG,CAAC,gCAArBZ,wBAA6C;QAC/D,IAAI,CAACA,SAASa,EAAE,EAAE;YAChB,MAAMC,SAASd,SAASc,MAAM;YAC9B,MAAMC,SAAS,MAAMf,SAASrD,IAAI,GAAGqE,KAAK,CAAC,IAAM;YACjDC,QAAQC,KAAK,CAAC,+BAA+B;gBAC3CJ;gBACAH;gBACAI,QAAQA,OAAOI,KAAK,CAAC,GAAG;YAC1B;YACA,MAAM,IAAI1G,gBACRqG,QACAA,WAAW,OAAOA,UAAU,KAC5BH,WACAG,WAAW,OAAOA,WAAW,MAAM,gBAAgB;QAEvD;QACA,OAAOpD,uBAAuB,MAAMsC,SAASoB,IAAI,GAAGJ,KAAK,CAAC,IAAM;IAClE;IAEA,OAAO;QACLK,IAAI9G;QACJ+G,OAAO;QACPC,cAAcrF;QACdsF,YAAY,IAAM3F,yBAAyB;QAC3C4F,cAAc,IAAMrF;QACpB,MAAMsF,UAASnF,OAAuB;gBAGf+C;YAFrB,MAAMxD,UAAUD;YAChB,IAAI,CAACC,SAAS,MAAM,IAAIrB,gBAAgB,MAAM,OAAO,MAAM;YAC3D,MAAM8E,QAAQ,MAAM,EAACD,uBAAAA,QAAQqC,WAAW,YAAnBrC,uBAAuBH;YAC5C,IAAI,CAACI,OAAO,MAAM,IAAI9E,gBAAgB,MAAM,OAAO,MAAM;YACzD,MAAMsF,MAAM1D,eAAeP,SAASE,uBAAuBO,QAAQJ,KAAK;YACxE,MAAMyF,QAAQC,KAAKC,GAAG,CAACpH,oBAAoBmH,KAAKE,GAAG,CAAC,GAAGF,KAAKG,KAAK,CAACzF,QAAQqF,KAAK;YAC/E,wEAAwE;YACxE,8DAA8D;YAC9D,MAAMK,UAAU,MAAMC,QAAQC,UAAU,CACtC5D,MAAM6D,IAAI,CAAC;gBAAEC,QAAQT;YAAM,GAAG,IAAM9B,IAAIC,KAAKR,OAAOhD;YAEtD,MAAM+F,UAAUL,QAAQM,OAAO,CAAC,CAACC,QAAWA,MAAM1B,MAAM,KAAK,cAAc;oBAAC0B,MAAMC,KAAK;iBAAC,GAAG,EAAE;YAC7F,MAAMC,UAAUT,QAAQU,IAAI,CAAC,CAACH,QAAUA,MAAM1B,MAAM,KAAK;YAGzD,MAAM8B,SAASN,QAAQC,OAAO,CAAC,CAAC3E,SAAYA,OAAOS,KAAK,GAAG;oBAACT,OAAOS,KAAK;iBAAC,GAAG,EAAE;YAC9E,MAAMC,WAAWgE,QAAQC,OAAO,CAAC,CAAC3E,SAAYA,OAAOU,QAAQ,GAAG;oBAACV,OAAOU,QAAQ;iBAAC,GAAG,EAAE;YACtF,MAAMP,QAAQuE,QAAQO,MAAM,CAAU,CAACC,KAAKlF,SAAW8B,SAASoD,KAAKlF,OAAOG,KAAK,GAAG;gBAClFC,aAAa;gBACbC,cAAc;gBACdC,iBAAiB;gBACjBC,kBAAkB;YACpB;YACA,IAAI,CAACyE,OAAOP,MAAM,EAAE;gBAClB,sEAAsE;gBACtE,yCAAyC;gBACzC,IAAIK,WAAW,CAACpE,SAAS+D,MAAM,EAAE,MAAMK,QAAQK,MAAM;gBACrD,MAAM,IAAIpI,qBAAqB2D;YACjC;YACA,OAAO;gBACLnC,OAAOI,QAAQJ,KAAK;gBACpByG;gBACAI,UAAUpB,QAAQgB,OAAOP,MAAM;gBAC/BtE;YACF;QACF;IACF;AACF;AAEA,qCAAqC,GACrC,OAAO,MAAMkF,sBAAuCpD,4BAA2B"}

package/src/lib/runtime/ai-doctrine-validators.d.ts

@@ -621,6 +621,25 @@ export declare const AI_SPLIT_LIST_MIN_SECTIONS = 2;
  * are two lists, and rule 8 counts each within its own section (AGL-3061).
  */
 export declare function detectPlanSplitLists(plan: AiBuildPlan, inventory: AiSiteInventory | null, capabilities?: AiPlanCapabilities | null): AiDoctrineViolation[];
+/**
+ * A `new:` reference that spells a creation differently — `new:cake-order-form`
+ * for "Cake order form" (a live bakery plan, 2026-10-07) — is pointed at that
+ * creation before the rules read the plan, when exactly one creation matches
+ * it with case, spaces and punctuation ignored. Two that match, or none, are
+ * left for the rules to ask about.
+ */
+export declare function aiSettlePlanRefs(plan: AiBuildPlan): AiBuildPlan;
+/**
+ * A page that names no layout, on a site where only one layout can frame it,
+ * is put in that layout before the rules read the plan (2026-10-07). The
+ * model sometimes leaves one page's layout empty — a live run's bookkeeper
+ * plan did, beside a layout it created — and rule 2 refused the whole plan
+ * for a choice with one answer. That answer exists only on a site with no
+ * layout whose plan creates exactly one, which is every guided start. Where
+ * the site has a layout of its own, a page that names none may mean another,
+ * so the rule still asks.
+ */
+export declare function aiSettlePlanLayouts(plan: AiBuildPlan, inventory: AiSiteInventory | null, capabilities?: AiPlanCapabilities | null): AiBuildPlan;
 /**
  * Rule 2 (plan): every screen declares a layout, no section is a copy of a
  * layout region, and no section places a layout, which frames a whole screen