@aglyn/plugins-ai 1.0.0-beta.256 → 1.0.0-beta.258

package/src/lib/runtime/ai-runtime.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../../../../libs/plugins/ai/src/lib/runtime/ai-runtime.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { aiCatalogEntry, aiModelCacheMinTokens } from '../providers/catalog'\nimport {\n  AI_IMAGE_MAX_BYTES,\n  AI_IMAGE_MEDIA_TYPES,\n  AI_REQUEST_MAX_IMAGES,\n  AiRequestShapeError,\n  AiUpstreamError,\n  aiBase64Bytes,\n  aiMessageImages,\n  type AiMessage,\n  type AiProvider,\n  type AiProviderRequest,\n  type AiRequestBase,\n  type AiResult,\n  type AiStreamEvent,\n  type AiSystemBlock,\n  type AiTool,\n} from '../providers/contract'\nimport { resolveAiProvider, type AiPluginSettings } from '../providers/routing'\nimport {\n  aiDevCacheTtl,\n  aiDevReplayMode,\n  aiIsDeployedRuntime,\n  aiLiveBatchWanted,\n  aiUnderLiveRun,\n  aiWarnIfReplayAskedInDeployment,\n} from './ai-dev-env'\nimport { aiAnsweredOutsideBatch, aiCompleteInBatch } from './ai-live-batch'\n\nexport {\n  AI_UPSTREAM_FAILURE_COPY,\n  AiRequestShapeError,\n  AiUpstreamError,\n  type AiCompletion,\n  type AiEffort,\n  type AiImagePart,\n  type AiMessage,\n  type AiMessagePart,\n  type AiRefusal,\n  type AiRequestBase,\n  type AiResult,\n  type AiStreamEvent,\n  type AiSystemBlock,\n  type AiThinking,\n  type AiTool,\n  type AiToolUse,\n  type AiUsage,\n} from '../providers/contract'\n\n/**\n * The one runtime every AI door calls (AGL-2903), provider-generic since\n * AGL-2939.\n *\n * `/api/assist/chat` and `/api/ai/assist` each carried their own `fetch` to\n * one vendor, their own SSE parser and their own usage extraction, and a\n * third door would have been a third copy. This module owns the request\n * shape, the cache-prefix rule, the provider resolution and the error\n * boundary; an adapter owns one vendor's wire protocol; a door owns its\n * prompt, its gate ladder and its wire format.\n *\n * The cache-prefix rule (AGL-2352) is enforced HERE, before any adapter:\n * a block marked `volatile` may not sit at or before the last\n * `cacheBreakpoint`, and more breakpoints than any provider caches are\n * refused. A provider without a cache ignores the markers and keeps the\n * order, so a request that is right for the caching adapter is right for\n * every adapter.\n *\n * The picture rule (AGL-2916) is enforced here too, and for the same reason:\n * a picture on an assistant turn, a picture for a model whose provider does\n * not say it reads one, or a picture past the bounds is refused before any\n * adapter is reached, so no door can send one a provider would reject.\n */\n\n/** The most `cacheBreakpoint` markers a request may carry. */\nexport const AI_MAX_CACHE_BREAKPOINTS = 4\n\n/**\n * The acceptable-use rules every generation prompt carries (AGL-2925).\n *\n * ONE constant, appended to each door's STATIC system text — inside the\n * cached prefix on the console chat, ahead of the mode prompt on the copy\n * assistant — so the rules the model is held to are the same at every\n * door and carry no per-org byte. The Free taste is what makes them worth\n * stating: a generated page that nobody paid for is the cheapest phishing\n * kit there is, and the model declining it is the first line, ahead of the\n * abuse-report route and the lockdown key.\n *\n * The categories are the platform's own Acceptable Use Policy, restated in\n * the second person for the model. A decline from the model's safety layer\n * arrives as a refusal, which the meter counts against the account's daily\n * pause and never against its credits.\n */\nexport const AI_ACCEPTABLE_USE_BLOCK = `Acceptable use — decline these rather than write them, and say briefly why:\n- Pages, emails or copy that harvest credentials, payment details or personal data by deception (phishing, fake sign-in or checkout pages, fake \"verify your account\" notices).\n- Impersonating a real business, brand, public body or person you were not told the user represents — their name, logo, sign-in page or voice — or copy that claims an endorsement, certification or partnership that was not given to you as a fact.\n- Content that promotes or sells prohibited goods and services: weapons, illegal drugs, counterfeit goods, malware or deceptive downloads, unlicensed gambling, or adult content involving minors.\n- Scams and fraud: fake investment or crypto schemes, advance-fee offers, tech-support scams, fake charities, deceptive \"you have won\" pages, or copy built to defraud.\n- Harassment, threats, or hateful content targeting a person or a group.\n- Spam farms: bulk near-duplicate pages or copy whose only purpose is to game search engines or send unsolicited mail.\nWhen a brief is ordinary business content, write it well and do not lecture.`\n\n/** A door's request, with the org's settings when the door knows the org. */\ninterface AiRuntimeOptions {\n  /** The org's resolved `pluginSettings/ai`, for its provider and model choices. */\n  settings?: AiPluginSettings\n  /** A provider chosen by the caller, ahead of every setting; specs use it. */\n  provider?: AiProvider\n}\n\nexport interface AiRequest extends AiRequestBase, AiRuntimeOptions {\n  stream: false\n}\n\nexport interface AiStreamRequest extends AiRequestBase, AiRuntimeOptions {\n  stream: true\n}\n\n/**\n * The cache guard, applied to the system blocks before any adapter sees\n * them. Exported so a spec and a door can assert a prompt's shape without\n * a provider.\n */\nexport function validateAiSystemBlocks(system: readonly AiSystemBlock[]): void {\n  const breakpoints = system.filter((block) => block.cacheBreakpoint)\n  if (breakpoints.length > AI_MAX_CACHE_BREAKPOINTS) {\n    throw new AiRequestShapeError(\n      `${breakpoints.length} cache breakpoints; at most ${AI_MAX_CACHE_BREAKPOINTS} are cached`,\n    )\n  }\n  // Caching is a prefix match, so the LAST breakpoint decides what is\n  // cached, and every block at or before it is inside the cached prefix. A\n  // volatile block anywhere in that span — including one that is itself\n  // the breakpoint — puts a per-request byte into the prefix (AGL-2352).\n  const lastBreakpoint = system.reduce(\n    (last, block, index) => (block.cacheBreakpoint ? index : last),\n    -1,\n  )\n  system.forEach((block, index) => {\n    if (block.volatile && index <= lastBreakpoint) {\n      throw new AiRequestShapeError(\n        `system block ${index} is volatile but sits inside the cached prefix (last breakpoint at block ${lastBreakpoint})`,\n      )\n    }\n  })\n  // A site's block is cached per site (AGL-3661), so it closes the cached\n  // span: a platform-wide breakpoint after it would be keyed on the site too,\n  // and every workspace would warm its own copy of a shared prompt.\n  const firstSite = system.findIndex((block) => block.site && block.cacheBreakpoint)\n  if (firstSite >= 0 && firstSite !== lastBreakpoint) {\n    throw new AiRequestShapeError(\n      `system block ${firstSite} is a site's cached block but breakpoint ${lastBreakpoint} follows it`,\n    )\n  }\n}\n\n/**\n * Whether a request may also cache its conversation (AGL-3809): the\n * conversation's breakpoint is one more marker, so it fits only where the\n * system blocks leave one of the provider's four free.\n */\nexport function aiConversationCacheFits(system: readonly AiSystemBlock[]): boolean {\n  return system.filter((block) => block.cacheBreakpoint).length < AI_MAX_CACHE_BREAKPOINTS\n}\n\n/**\n * Whether a provider's model reads a picture in a user turn (AGL-2916): what\n * the provider's own descriptor of the model says. A model the provider does\n * not describe reads none, so an adopter's provider is never sent a picture\n * it did not say it can take.\n */\nexport function aiModelReadsImages(provider: AiProvider, model: string): boolean {\n  return provider\n    .models()\n    .some((descriptor) => descriptor.id === model && descriptor.capabilities.vision === true)\n}\n\n/**\n * Whether a model a door resolved reads pictures on the provider that would\n * serve the request: what a door asks before it attaches one, so a model that\n * does not is sent the text alone rather than refused.\n */\nexport function aiRouteReadsImages(model: string, settings?: AiPluginSettings): boolean {\n  const provider = resolveAiProvider(settings)\n  return provider ? aiModelReadsImages(provider, model) : false\n}\n\n/** A character standard base64 does not use, outside its padding. */\nconst NOT_BASE64 = /[^A-Za-z0-9+/]/\n\n/**\n * Whether `data` is standard base64 and nothing else: its alphabet, then at\n * most two `=` of padding; no `data:` prefix, no line breaks.\n *\n * Scanned for a character outside the alphabet rather than matched whole: a\n * picture is megabytes of base64, and a whole-string pattern with a greedy\n * loop can exhaust the regular expression engine's backtrack stack on input\n * that large, which throws a RangeError instead of answering.\n */\nfunction isBareBase64(data: string): boolean {\n  const body = data.endsWith('==') ? data.slice(0, -2) : data.endsWith('=') ? data.slice(0, -1) : data\n  return body.length > 0 && !NOT_BASE64.test(body)\n}\n\n/**\n * The picture guard (AGL-2916), applied to the messages before any adapter\n * sees them. A picture rides only a user turn, only to a model that reads\n * pictures, only in a format every such model takes, as bare base64 within\n * the size a provider accepts, and no more of them than a request may carry.\n * `readsImages` is asked only when a turn carries a picture. Exported so a\n * spec and a door can assert a request's shape without a provider.\n */\nexport function validateAiMessages(messages: readonly AiMessage[], readsImages: () => boolean): void {\n  messages.forEach((message, index) => {\n    if (typeof message.content === 'string') return\n    if (!Array.isArray(message.content) || message.content.length === 0) {\n      throw new AiRequestShapeError(`message ${index} has neither text nor parts`)\n    }\n    for (const part of message.content) {\n      if (part.type === 'text') {\n        if (typeof part.text !== 'string') {\n          throw new AiRequestShapeError(`message ${index} has a text part with no text`)\n        }\n        continue\n      }\n      if (part.type !== 'image') {\n        throw new AiRequestShapeError(`message ${index} has a part of an unknown type`)\n      }\n      if (message.role !== 'user') {\n        throw new AiRequestShapeError(`message ${index} is an assistant turn and carries a picture`)\n      }\n      if (!(AI_IMAGE_MEDIA_TYPES as readonly string[]).includes(part.mediaType)) {\n        throw new AiRequestShapeError(`message ${index} carries a picture of an unsupported type`)\n      }\n      if (typeof part.data !== 'string') {\n        throw new AiRequestShapeError(`message ${index} carries a picture that is not bare base64`)\n      }\n      // The size first: it needs only the length, so an oversized picture is\n      // refused without reading its bytes.\n      if (aiBase64Bytes(part.data) > AI_IMAGE_MAX_BYTES) {\n        throw new AiRequestShapeError(\n          `message ${index} carries a picture over ${AI_IMAGE_MAX_BYTES} bytes`,\n        )\n      }\n      if (!isBareBase64(part.data)) {\n        throw new AiRequestShapeError(`message ${index} carries a picture that is not bare base64`)\n      }\n    }\n  })\n  const images = aiMessageImages(messages).length\n  if (images > AI_REQUEST_MAX_IMAGES) {\n    throw new AiRequestShapeError(`${images} pictures; a request carries at most ${AI_REQUEST_MAX_IMAGES}`)\n  }\n  if (images > 0 && !readsImages()) {\n    throw new AiRequestShapeError('the request carries a picture and its model does not read pictures')\n  }\n}\n\n/**\n * Characters to a token when a prompt is measured rather than tokenized\n * (AGL-2937). Four is the high end of English prose, so reading a prefix\n * through it errs LOW on the token count — and a prefix counts as cached\n * only when it clears its model's minimum even at that reading. Erring the\n * other way would let a prompt claim a cache it does not get.\n */\nexport const AI_CACHE_PREFIX_TOKEN_CHARS = 4\n\n/**\n * The characters inside the cached span of a request: the tools, which a\n * provider renders ahead of the system blocks and which therefore sit in\n * every prefix, plus every system block up to and including the last\n * breakpoint. Zero when the request marks no breakpoint at all.\n */\nexport function aiCachedPrefixChars(\n  system: readonly AiSystemBlock[],\n  tools: readonly AiTool[] = [],\n): number {\n  const lastBreakpoint = system.reduce(\n    (last, block, index) => (block.cacheBreakpoint ? index : last),\n    -1,\n  )\n  if (lastBreakpoint < 0) return 0\n  const toolChars = tools.reduce((total, tool) => total + JSON.stringify(tool).length, 0)\n  return system\n    .slice(0, lastBreakpoint + 1)\n    .reduce((total, block) => total + block.text.length, toolChars)\n}\n\n/**\n * Whether this request's cached span is long enough for the model to cache\n * it at all (AGL-2937). A prefix under the model's `cacheMinTokens` is\n * served with the breakpoints honored and nothing cached — no error, and a\n * usage report that reads as a permanent miss — so a door designed around a\n * cache has to answer this question before it believes its own markers, and\n * `runtime/ai-prompt-cache.spec.ts` answers it for every door at once.\n */\nexport function aiCachedPrefixCaches(\n  model: string,\n  system: readonly AiSystemBlock[],\n  tools: readonly AiTool[] = [],\n): boolean {\n  const chars = aiCachedPrefixChars(system, tools)\n  return chars / AI_CACHE_PREFIX_TOKEN_CHARS >= aiModelCacheMinTokens(model)\n}\n\n/**\n * Whether a provider is configured to answer: registered, and its key\n * present. Every door asks this before it spends a reservation, and\n * answers 501 (or the docs fallback) when it is false.\n */\nexport function aiProviderReady(settings?: AiPluginSettings): boolean {\n  return Boolean(resolveAiProvider(settings)?.readApiKey())\n}\n\n/** The provider that would answer, for a door that names it in its logs or its inventory. */\nexport function aiActiveProvider(settings?: AiPluginSettings): AiProvider | undefined {\n  return resolveAiProvider(settings)\n}\n\nfunction providerFor(input: AiRuntimeOptions): { provider: AiProvider; apiKey: string } {\n  const provider = input.provider ?? resolveAiProvider(input.settings)\n  if (!provider) throw new Error('no AI provider is registered')\n  const apiKey = provider.readApiKey()\n  if (!apiKey) {\n    // Every door gates on `aiProviderReady` before it gets here, so this is\n    // a wiring fault rather than a customer path.\n    throw new Error(`${provider.apiKeyEnv} is not set`)\n  }\n  return { provider, apiKey }\n}\n\n/**\n * Send one request through the resolved provider.\n *\n * Streaming: resolves once the provider has ACCEPTED the request — after\n * the headers, before the first token — with an iterator of simplified\n * events the caller wraps in its own wire format. A non-2xx answer rejects\n * with `AiUpstreamError` before the iterator exists, so a door can still\n * send a plain error status and hand back its reservation.\n *\n * Non-streaming: resolves with the parsed result, a decline typed as\n * `AiRefusal` rather than thrown.\n */\nexport async function runAiRequest(\n  input: AiStreamRequest,\n): Promise<AsyncIterable<AiStreamEvent>>\nexport async function runAiRequest(input: AiRequest): Promise<AiResult>\nexport async function runAiRequest(\n  input: AiRequest | AiStreamRequest,\n): Promise<AsyncIterable<AiStreamEvent> | AiResult> {\n  validateAiSystemBlocks(input.system)\n  if (input.cacheConversation && !aiConversationCacheFits(input.system)) {\n    throw new AiRequestShapeError(\n      `the conversation's breakpoint would be the ${AI_MAX_CACHE_BREAKPOINTS + 1}th; at most ${AI_MAX_CACHE_BREAKPOINTS} are cached`,\n    )\n  }\n  refuseRetiredModelInLiveRun(input.model)\n  const { provider, apiKey } = providerFor(input)\n  validateAiMessages(input.messages, () => aiModelReadsImages(provider, input.model))\n  const { stream, settings: _settings, provider: _provider, ...request } = input\n  aiWarnIfReplayAskedInDeployment()\n  const cacheTtl = request.cacheTtl ?? aiDevCacheTtl()\n  const providerRequest: AiProviderRequest = { ...request, ...(cacheTtl ? { cacheTtl } : {}), apiKey }\n  try {\n    if (aiIsDeployedRuntime()) {\n      return await (stream ? provider.stream(providerRequest) : provider.complete(providerRequest))\n    }\n    return await runInDevelopment(provider, providerRequest, stream)\n  } catch (error) {\n    await reportAccountProblem(provider, error)\n    throw error\n  }\n}\n\n/**\n * A live development run that names a retired model is refused before it\n * spends (AGL-3781). Routing serves a retired id's successor wherever a\n * setting or an override names it, so a retired id reaching here was asked\n * for by name — an override left in a run, or a comparison a spec kept — and\n * would bill a model production no longer serves.\n */\nfunction refuseRetiredModelInLiveRun(model: string): void {\n  if (!aiUnderLiveRun()) return\n  const successor = aiCatalogEntry(model)?.successor\n  if (successor) {\n    throw new AiRequestShapeError(`${model} is retired; ${successor} serves in its place`)\n  }\n}\n\n/**\n * A request in a development process (AGL-3660): through the replay cache,\n * batch mode and the first-request-warms-the-prefix rule when this process\n * asked for them (`ai-dev-env.ts`), straight to the provider when it asked\n * for none. The file-backed half is loaded only when a layer is on, so a dev\n * server that never asked loads nothing it did not before.\n */\nasync function runInDevelopment(\n  provider: AiProvider,\n  request: AiProviderRequest,\n  stream: boolean,\n): Promise<AsyncIterable<AiStreamEvent> | AiResult> {\n  const mode = aiDevReplayMode()\n  const batch = !stream && aiLiveBatchWanted() && Boolean(provider.completeBatch)\n  if (mode === 'off' && !batch) {\n    return stream ? provider.stream(request) : provider.complete(request)\n  }\n  const dev = await import('./ai-dev-replay')\n  const ttlMs = request.cacheTtl === '1h' ? 60 * 60_000 : 5 * 60_000\n  const prefix = dev.aiCachedPrefixKey(request)\n  if (stream) {\n    const live = () => dev.aiDevWarmPrefixFirst(prefix, ttlMs, () => provider.stream(request))\n    return mode === 'off' ? live() : dev.aiDevReplayStream(provider, request, mode, live)\n  }\n  const live = async (): Promise<AiResult> => {\n    const result = batch\n      ? await aiCompleteInBatch(provider, request)\n      : await dev.aiDevWarmPrefixFirst(prefix, ttlMs, () => provider.complete(request))\n    // A request its batch left unanswered was asked on its own, at full price (AGL-3781).\n    const discounted = batch && !aiAnsweredOutsideBatch(result)\n    dev.aiDevCountLive(result.usage, request.model, discounted ? AI_BATCH_PRICE_FACTOR : 1)\n    return result\n  }\n  return mode === 'off' ? live() : dev.aiDevReplayComplete(provider, request, mode, live)\n}\n\n/** What a batch's discount leaves of a request's price, for the development count. */\nconst AI_BATCH_PRICE_FACTOR = 0.5\n\n/**\n * Tells the operator when the failure is the platform's provider account —\n * a refused key, no credit — rather than the request (AGL-3377). Once per\n * provider and problem per window; loaded lazily so the runtime pulls no\n * Admin SDK until an account is actually broken. Never throws.\n */\nasync function reportAccountProblem(provider: AiProvider, error: unknown): Promise<void> {\n  if (!(error instanceof AiUpstreamError) || !error.accountProblem) return\n  try {\n    const [{ raiseOperatorAlert }, { AI_PROVIDER_UNAVAILABLE }] = await Promise.all([\n      import('./operator-alerts-seam'),\n      import('../operator-alerts'),\n    ])\n    await raiseOperatorAlert(AI_PROVIDER_UNAVAILABLE, {\n      dedupeKey: `${provider.id}:${error.accountProblem}`,\n      context: {\n        provider: provider.label,\n        keyEnv: provider.apiKeyEnv,\n        reason:\n          error.accountProblem === 'credentials'\n            ? `its API key was refused (HTTP ${error.status ?? 'unknown'})`\n            : 'the account is out of credit',\n      },\n    })\n  } catch (alertError) {\n    console.error('[ai] the provider account alert could not be raised', alertError)\n  }\n}\n"],"names":["aiCatalogEntry","aiModelCacheMinTokens","AI_IMAGE_MAX_BYTES","AI_IMAGE_MEDIA_TYPES","AI_REQUEST_MAX_IMAGES","AiRequestShapeError","AiUpstreamError","aiBase64Bytes","aiMessageImages","resolveAiProvider","aiDevCacheTtl","aiDevReplayMode","aiIsDeployedRuntime","aiLiveBatchWanted","aiUnderLiveRun","aiWarnIfReplayAskedInDeployment","aiAnsweredOutsideBatch","aiCompleteInBatch","AI_UPSTREAM_FAILURE_COPY","AI_MAX_CACHE_BREAKPOINTS","AI_ACCEPTABLE_USE_BLOCK","validateAiSystemBlocks","system","breakpoints","filter","block","cacheBreakpoint","length","lastBreakpoint","reduce","last","index","forEach","volatile","firstSite","findIndex","site","aiConversationCacheFits","aiModelReadsImages","provider","model","models","some","descriptor","id","capabilities","vision","aiRouteReadsImages","settings","NOT_BASE64","isBareBase64","data","body","endsWith","slice","test","validateAiMessages","messages","readsImages","message","content","Array","isArray","part","type","text","role","includes","mediaType","images","AI_CACHE_PREFIX_TOKEN_CHARS","aiCachedPrefixChars","tools","toolChars","total","tool","JSON","stringify","aiCachedPrefixCaches","chars","aiProviderReady","Boolean","readApiKey","aiActiveProvider","providerFor","input","Error","apiKey","apiKeyEnv","runAiRequest","request","cacheConversation","refuseRetiredModelInLiveRun","stream","_settings","_provider","cacheTtl","providerRequest","complete","runInDevelopment","error","reportAccountProblem","successor","mode","batch","completeBatch","dev","ttlMs","prefix","aiCachedPrefixKey","live","aiDevWarmPrefixFirst","aiDevReplayStream","result","discounted","aiDevCountLive","usage","AI_BATCH_PRICE_FACTOR","aiDevReplayComplete","accountProblem","raiseOperatorAlert","AI_PROVIDER_UNAVAILABLE","Promise","all","dedupeKey","context","label","keyEnv","reason","status","alertError","console"],"mappings":";;AAAA;;;;;;;;;;;;;;;CAeC,GAED,SAASA,cAAc,EAAEC,qBAAqB,QAAQ,0BAAsB;AAC5E,SACEC,kBAAkB,EAClBC,oBAAoB,EACpBC,qBAAqB,EACrBC,mBAAmB,EACnBC,eAAe,EACfC,aAAa,EACbC,eAAe,QASV,2BAAuB;AAC9B,SAASC,iBAAiB,QAA+B,0BAAsB;AAC/E,SACEC,aAAa,EACbC,eAAe,EACfC,mBAAmB,EACnBC,iBAAiB,EACjBC,cAAc,EACdC,+BAA+B,QAC1B,kBAAc;AACrB,SAASC,sBAAsB,EAAEC,iBAAiB,QAAQ,qBAAiB;AAE3E,SACEC,wBAAwB,EACxBb,mBAAmB,EACnBC,eAAe,QAeV,2BAAuB;AAE9B;;;;;;;;;;;;;;;;;;;;;;CAsBC,GAED,4DAA4D,GAC5D,OAAO,MAAMa,2BAA2B,EAAC;AAEzC;;;;;;;;;;;;;;;CAeC,GACD,OAAO,MAAMC,0BAA0B,CAAC;;;;;;;4EAOoC,CAAC,CAAA;AAkB7E;;;;CAIC,GACD,OAAO,SAASC,uBAAuBC,MAAgC;IACrE,MAAMC,cAAcD,OAAOE,MAAM,CAAC,CAACC,QAAUA,MAAMC,eAAe;IAClE,IAAIH,YAAYI,MAAM,GAAGR,0BAA0B;QACjD,MAAM,IAAId,oBACR,GAAGkB,YAAYI,MAAM,CAAC,4BAA4B,EAAER,yBAAyB,WAAW,CAAC;IAE7F;IACA,oEAAoE;IACpE,yEAAyE;IACzE,sEAAsE;IACtE,uEAAuE;IACvE,MAAMS,iBAAiBN,OAAOO,MAAM,CAClC,CAACC,MAAML,OAAOM,QAAWN,MAAMC,eAAe,GAAGK,QAAQD,MACzD,CAAC;IAEHR,OAAOU,OAAO,CAAC,CAACP,OAAOM;QACrB,IAAIN,MAAMQ,QAAQ,IAAIF,SAASH,gBAAgB;YAC7C,MAAM,IAAIvB,oBACR,CAAC,aAAa,EAAE0B,MAAM,yEAAyE,EAAEH,eAAe,CAAC,CAAC;QAEtH;IACF;IACA,wEAAwE;IACxE,4EAA4E;IAC5E,kEAAkE;IAClE,MAAMM,YAAYZ,OAAOa,SAAS,CAAC,CAACV,QAAUA,MAAMW,IAAI,IAAIX,MAAMC,eAAe;IACjF,IAAIQ,aAAa,KAAKA,cAAcN,gBAAgB;QAClD,MAAM,IAAIvB,oBACR,CAAC,aAAa,EAAE6B,UAAU,yCAAyC,EAAEN,eAAe,WAAW,CAAC;IAEpG;AACF;AAEA;;;;CAIC,GACD,OAAO,SAASS,wBAAwBf,MAAgC;IACtE,OAAOA,OAAOE,MAAM,CAAC,CAACC,QAAUA,MAAMC,eAAe,EAAEC,MAAM,GAAGR;AAClE;AAEA;;;;;CAKC,GACD,OAAO,SAASmB,mBAAmBC,QAAoB,EAAEC,KAAa;IACpE,OAAOD,SACJE,MAAM,GACNC,IAAI,CAAC,CAACC,aAAeA,WAAWC,EAAE,KAAKJ,SAASG,WAAWE,YAAY,CAACC,MAAM,KAAK;AACxF;AAEA;;;;CAIC,GACD,OAAO,SAASC,mBAAmBP,KAAa,EAAEQ,QAA2B;IAC3E,MAAMT,WAAW9B,kBAAkBuC;IACnC,OAAOT,WAAWD,mBAAmBC,UAAUC,SAAS;AAC1D;AAEA,mEAAmE,GACnE,MAAMS,aAAa;AAEnB;;;;;;;;CAQC,GACD,SAASC,aAAaC,IAAY;IAChC,MAAMC,OAAOD,KAAKE,QAAQ,CAAC,QAAQF,KAAKG,KAAK,CAAC,GAAG,CAAC,KAAKH,KAAKE,QAAQ,CAAC,OAAOF,KAAKG,KAAK,CAAC,GAAG,CAAC,KAAKH;IAChG,OAAOC,KAAKzB,MAAM,GAAG,KAAK,CAACsB,WAAWM,IAAI,CAACH;AAC7C;AAEA;;;;;;;CAOC,GACD,OAAO,SAASI,mBAAmBC,QAA8B,EAAEC,WAA0B;IAC3FD,SAASzB,OAAO,CAAC,CAAC2B,SAAS5B;QACzB,IAAI,OAAO4B,QAAQC,OAAO,KAAK,UAAU;QACzC,IAAI,CAACC,MAAMC,OAAO,CAACH,QAAQC,OAAO,KAAKD,QAAQC,OAAO,CAACjC,MAAM,KAAK,GAAG;YACnE,MAAM,IAAItB,oBAAoB,CAAC,QAAQ,EAAE0B,MAAM,2BAA2B,CAAC;QAC7E;QACA,KAAK,MAAMgC,QAAQJ,QAAQC,OAAO,CAAE;YAClC,IAAIG,KAAKC,IAAI,KAAK,QAAQ;gBACxB,IAAI,OAAOD,KAAKE,IAAI,KAAK,UAAU;oBACjC,MAAM,IAAI5D,oBAAoB,CAAC,QAAQ,EAAE0B,MAAM,6BAA6B,CAAC;gBAC/E;gBACA;YACF;YACA,IAAIgC,KAAKC,IAAI,KAAK,SAAS;gBACzB,MAAM,IAAI3D,oBAAoB,CAAC,QAAQ,EAAE0B,MAAM,8BAA8B,CAAC;YAChF;YACA,IAAI4B,QAAQO,IAAI,KAAK,QAAQ;gBAC3B,MAAM,IAAI7D,oBAAoB,CAAC,QAAQ,EAAE0B,MAAM,2CAA2C,CAAC;YAC7F;YACA,IAAI,CAAC,AAAC5B,qBAA2CgE,QAAQ,CAACJ,KAAKK,SAAS,GAAG;gBACzE,MAAM,IAAI/D,oBAAoB,CAAC,QAAQ,EAAE0B,MAAM,yCAAyC,CAAC;YAC3F;YACA,IAAI,OAAOgC,KAAKZ,IAAI,KAAK,UAAU;gBACjC,MAAM,IAAI9C,oBAAoB,CAAC,QAAQ,EAAE0B,MAAM,0CAA0C,CAAC;YAC5F;YACA,uEAAuE;YACvE,qCAAqC;YACrC,IAAIxB,cAAcwD,KAAKZ,IAAI,IAAIjD,oBAAoB;gBACjD,MAAM,IAAIG,oBACR,CAAC,QAAQ,EAAE0B,MAAM,wBAAwB,EAAE7B,mBAAmB,MAAM,CAAC;YAEzE;YACA,IAAI,CAACgD,aAAaa,KAAKZ,IAAI,GAAG;gBAC5B,MAAM,IAAI9C,oBAAoB,CAAC,QAAQ,EAAE0B,MAAM,0CAA0C,CAAC;YAC5F;QACF;IACF;IACA,MAAMsC,SAAS7D,gBAAgBiD,UAAU9B,MAAM;IAC/C,IAAI0C,SAASjE,uBAAuB;QAClC,MAAM,IAAIC,oBAAoB,GAAGgE,OAAO,qCAAqC,EAAEjE,uBAAuB;IACxG;IACA,IAAIiE,SAAS,KAAK,CAACX,eAAe;QAChC,MAAM,IAAIrD,oBAAoB;IAChC;AACF;AAEA;;;;;;CAMC,GACD,OAAO,MAAMiE,8BAA8B,EAAC;AAE5C;;;;;CAKC,GACD,OAAO,SAASC,oBACdjD,MAAgC,EAChCkD,QAA2B,EAAE;IAE7B,MAAM5C,iBAAiBN,OAAOO,MAAM,CAClC,CAACC,MAAML,OAAOM,QAAWN,MAAMC,eAAe,GAAGK,QAAQD,MACzD,CAAC;IAEH,IAAIF,iBAAiB,GAAG,OAAO;IAC/B,MAAM6C,YAAYD,MAAM3C,MAAM,CAAC,CAAC6C,OAAOC,OAASD,QAAQE,KAAKC,SAAS,CAACF,MAAMhD,MAAM,EAAE;IACrF,OAAOL,OACJgC,KAAK,CAAC,GAAG1B,iBAAiB,GAC1BC,MAAM,CAAC,CAAC6C,OAAOjD,QAAUiD,QAAQjD,MAAMwC,IAAI,CAACtC,MAAM,EAAE8C;AACzD;AAEA;;;;;;;CAOC,GACD,OAAO,SAASK,qBACdtC,KAAa,EACblB,MAAgC,EAChCkD,QAA2B,EAAE;IAE7B,MAAMO,QAAQR,oBAAoBjD,QAAQkD;IAC1C,OAAOO,QAAQT,+BAA+BrE,sBAAsBuC;AACtE;AAEA;;;;CAIC,GACD,OAAO,SAASwC,gBAAgBhC,QAA2B;QAC1CvC;IAAf,OAAOwE,SAAQxE,qBAAAA,kBAAkBuC,8BAAlBvC,mBAA6ByE,UAAU;AACxD;AAEA,2FAA2F,GAC3F,OAAO,SAASC,iBAAiBnC,QAA2B;IAC1D,OAAOvC,kBAAkBuC;AAC3B;AAEA,SAASoC,YAAYC,KAAuB;QACzBA;IAAjB,MAAM9C,YAAW8C,kBAAAA,MAAM9C,QAAQ,YAAd8C,kBAAkB5E,kBAAkB4E,MAAMrC,QAAQ;IACnE,IAAI,CAACT,UAAU,MAAM,IAAI+C,MAAM;IAC/B,MAAMC,SAAShD,SAAS2C,UAAU;IAClC,IAAI,CAACK,QAAQ;QACX,wEAAwE;QACxE,8CAA8C;QAC9C,MAAM,IAAID,MAAM,GAAG/C,SAASiD,SAAS,CAAC,WAAW,CAAC;IACpD;IACA,OAAO;QAAEjD;QAAUgD;IAAO;AAC5B;AAkBA,OAAO,eAAeE,aACpBJ,KAAkC;QAajBK;IAXjBrE,uBAAuBgE,MAAM/D,MAAM;IACnC,IAAI+D,MAAMM,iBAAiB,IAAI,CAACtD,wBAAwBgD,MAAM/D,MAAM,GAAG;QACrE,MAAM,IAAIjB,oBACR,CAAC,2CAA2C,EAAEc,2BAA2B,EAAE,YAAY,EAAEA,yBAAyB,WAAW,CAAC;IAElI;IACAyE,4BAA4BP,MAAM7C,KAAK;IACvC,MAAM,EAAED,QAAQ,EAAEgD,MAAM,EAAE,GAAGH,YAAYC;IACzC7B,mBAAmB6B,MAAM5B,QAAQ,EAAE,IAAMnB,mBAAmBC,UAAU8C,MAAM7C,KAAK;IACjF,MAAM,EAAEqD,MAAM,EAAE7C,UAAU8C,SAAS,EAAEvD,UAAUwD,SAAS,EAAc,GAAGV,OAAZK,2CAAYL;;;;;IACzEtE;IACA,MAAMiF,YAAWN,oBAAAA,QAAQM,QAAQ,YAAhBN,oBAAoBhF;IACrC,MAAMuF,kBAAqC,aAAKP,SAAaM,WAAW;QAAEA;IAAS,IAAI,CAAC;QAAIT;;IAC5F,IAAI;QACF,IAAI3E,uBAAuB;YACzB,OAAO,MAAOiF,CAAAA,SAAStD,SAASsD,MAAM,CAACI,mBAAmB1D,SAAS2D,QAAQ,CAACD,gBAAe;QAC7F;QACA,OAAO,MAAME,iBAAiB5D,UAAU0D,iBAAiBJ;IAC3D,EAAE,OAAOO,OAAO;QACd,MAAMC,qBAAqB9D,UAAU6D;QACrC,MAAMA;IACR;AACF;AAEA;;;;;;CAMC,GACD,SAASR,4BAA4BpD,KAAa;QAE9BxC;IADlB,IAAI,CAACc,kBAAkB;IACvB,MAAMwF,aAAYtG,kBAAAA,eAAewC,2BAAfxC,gBAAuBsG,SAAS;IAClD,IAAIA,WAAW;QACb,MAAM,IAAIjG,oBAAoB,GAAGmC,MAAM,aAAa,EAAE8D,UAAU,oBAAoB,CAAC;IACvF;AACF;AAEA;;;;;;CAMC,GACD,eAAeH,iBACb5D,QAAoB,EACpBmD,OAA0B,EAC1BG,MAAe;IAEf,MAAMU,OAAO5F;IACb,MAAM6F,QAAQ,CAACX,UAAUhF,uBAAuBoE,QAAQ1C,SAASkE,aAAa;IAC9E,IAAIF,SAAS,SAAS,CAACC,OAAO;QAC5B,OAAOX,SAAStD,SAASsD,MAAM,CAACH,WAAWnD,SAAS2D,QAAQ,CAACR;IAC/D;IACA,MAAMgB,MAAM,MAAM,MAAM,CAAC;IACzB,MAAMC,QAAQjB,QAAQM,QAAQ,KAAK,OAAO,KAAK,QAAS,IAAI;IAC5D,MAAMY,SAASF,IAAIG,iBAAiB,CAACnB;IACrC,IAAIG,QAAQ;QACV,MAAMiB,OAAO,IAAMJ,IAAIK,oBAAoB,CAACH,QAAQD,OAAO,IAAMpE,SAASsD,MAAM,CAACH;QACjF,OAAOa,SAAS,QAAQO,SAASJ,IAAIM,iBAAiB,CAACzE,UAAUmD,SAASa,MAAMO;IAClF;IACA,MAAMA,OAAO;QACX,MAAMG,SAAST,QACX,MAAMvF,kBAAkBsB,UAAUmD,WAClC,MAAMgB,IAAIK,oBAAoB,CAACH,QAAQD,OAAO,IAAMpE,SAAS2D,QAAQ,CAACR;QAC1E,sFAAsF;QACtF,MAAMwB,aAAaV,SAAS,CAACxF,uBAAuBiG;QACpDP,IAAIS,cAAc,CAACF,OAAOG,KAAK,EAAE1B,QAAQlD,KAAK,EAAE0E,aAAaG,wBAAwB;QACrF,OAAOJ;IACT;IACA,OAAOV,SAAS,QAAQO,SAASJ,IAAIY,mBAAmB,CAAC/E,UAAUmD,SAASa,MAAMO;AACpF;AAEA,oFAAoF,GACpF,MAAMO,wBAAwB;AAE9B;;;;;CAKC,GACD,eAAehB,qBAAqB9D,QAAoB,EAAE6D,KAAc;IACtE,IAAI,CAAEA,CAAAA,iBAAiB9F,eAAc,KAAM,CAAC8F,MAAMmB,cAAc,EAAE;IAClE,IAAI;YAYyCnB;QAX3C,MAAM,CAAC,EAAEoB,kBAAkB,EAAE,EAAE,EAAEC,uBAAuB,EAAE,CAAC,GAAG,MAAMC,QAAQC,GAAG,CAAC;YAC9E,MAAM,CAAC;YACP,MAAM,CAAC;SACR;QACD,MAAMH,mBAAmBC,yBAAyB;YAChDG,WAAW,GAAGrF,SAASK,EAAE,CAAC,CAAC,EAAEwD,MAAMmB,cAAc,EAAE;YACnDM,SAAS;gBACPtF,UAAUA,SAASuF,KAAK;gBACxBC,QAAQxF,SAASiD,SAAS;gBAC1BwC,QACE5B,MAAMmB,cAAc,KAAK,gBACrB,CAAC,8BAA8B,GAAEnB,gBAAAA,MAAM6B,MAAM,YAAZ7B,gBAAgB,UAAU,CAAC,CAAC,GAC7D;YACR;QACF;IACF,EAAE,OAAO8B,YAAY;QACnBC,QAAQ/B,KAAK,CAAC,uDAAuD8B;IACvE;AACF"}
+{"version":3,"sources":["../../../../../../../libs/plugins/ai/src/lib/runtime/ai-runtime.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { aiCatalogEntry, aiModelCacheMinTokens } from '../providers/catalog'\nimport {\n  AI_IMAGE_MAX_BYTES,\n  AI_IMAGE_MEDIA_TYPES,\n  AI_REQUEST_MAX_IMAGES,\n  AiRequestShapeError,\n  AiUpstreamError,\n  aiBase64Bytes,\n  aiMessageImages,\n  type AiMessage,\n  type AiProvider,\n  type AiProviderRequest,\n  type AiRequestBase,\n  type AiResult,\n  type AiStreamEvent,\n  type AiSystemBlock,\n  type AiTool,\n} from '../providers/contract'\nimport { resolveAiProvider, type AiPluginSettings } from '../providers/routing'\nimport {\n  aiRequestCacheTtl,\n  aiDevReplayMode,\n  aiIsDeployedRuntime,\n  aiLiveBatchWanted,\n  aiUnderLiveRun,\n  aiWarnIfReplayAskedInDeployment,\n} from './ai-dev-env'\nimport { aiAnsweredOutsideBatch, aiCompleteInBatch } from './ai-live-batch'\n\nexport {\n  AI_UPSTREAM_FAILURE_COPY,\n  AiRequestShapeError,\n  AiUpstreamError,\n  type AiCompletion,\n  type AiEffort,\n  type AiImagePart,\n  type AiMessage,\n  type AiMessagePart,\n  type AiRefusal,\n  type AiRequestBase,\n  type AiResult,\n  type AiStreamEvent,\n  type AiSystemBlock,\n  type AiThinking,\n  type AiTool,\n  type AiToolUse,\n  type AiUsage,\n} from '../providers/contract'\n\n/**\n * The one runtime every AI door calls (AGL-2903), provider-generic since\n * AGL-2939.\n *\n * `/api/assist/chat` and `/api/ai/assist` each carried their own `fetch` to\n * one vendor, their own SSE parser and their own usage extraction, and a\n * third door would have been a third copy. This module owns the request\n * shape, the cache-prefix rule, the provider resolution and the error\n * boundary; an adapter owns one vendor's wire protocol; a door owns its\n * prompt, its gate ladder and its wire format.\n *\n * The cache-prefix rule (AGL-2352) is enforced HERE, before any adapter:\n * a block marked `volatile` may not sit at or before the last\n * `cacheBreakpoint`, and more breakpoints than any provider caches are\n * refused. A provider without a cache ignores the markers and keeps the\n * order, so a request that is right for the caching adapter is right for\n * every adapter.\n *\n * The picture rule (AGL-2916) is enforced here too, and for the same reason:\n * a picture on an assistant turn, a picture for a model whose provider does\n * not say it reads one, or a picture past the bounds is refused before any\n * adapter is reached, so no door can send one a provider would reject.\n */\n\n/** The most `cacheBreakpoint` markers a request may carry. */\nexport const AI_MAX_CACHE_BREAKPOINTS = 4\n\n/**\n * The acceptable-use rules every generation prompt carries (AGL-2925).\n *\n * ONE constant, appended to each door's STATIC system text — inside the\n * cached prefix on the console chat, ahead of the mode prompt on the copy\n * assistant — so the rules the model is held to are the same at every\n * door and carry no per-org byte. The Free taste is what makes them worth\n * stating: a generated page that nobody paid for is the cheapest phishing\n * kit there is, and the model declining it is the first line, ahead of the\n * abuse-report route and the lockdown key.\n *\n * The categories are the platform's own Acceptable Use Policy, restated in\n * the second person for the model. A decline from the model's safety layer\n * arrives as a refusal, which the meter counts against the account's daily\n * pause and never against its credits.\n */\nexport const AI_ACCEPTABLE_USE_BLOCK = `Acceptable use — decline these rather than write them, and say briefly why:\n- Pages, emails or copy that harvest credentials, payment details or personal data by deception (phishing, fake sign-in or checkout pages, fake \"verify your account\" notices).\n- Impersonating a real business, brand, public body or person you were not told the user represents — their name, logo, sign-in page or voice — or copy that claims an endorsement, certification or partnership that was not given to you as a fact.\n- Content that promotes or sells prohibited goods and services: weapons, illegal drugs, counterfeit goods, malware or deceptive downloads, unlicensed gambling, or adult content involving minors.\n- Scams and fraud: fake investment or crypto schemes, advance-fee offers, tech-support scams, fake charities, deceptive \"you have won\" pages, or copy built to defraud.\n- Harassment, threats, or hateful content targeting a person or a group.\n- Spam farms: bulk near-duplicate pages or copy whose only purpose is to game search engines or send unsolicited mail.\nWhen a brief is ordinary business content, write it well and do not lecture.`\n\n/** A door's request, with the org's settings when the door knows the org. */\ninterface AiRuntimeOptions {\n  /** The org's resolved `pluginSettings/ai`, for its provider and model choices. */\n  settings?: AiPluginSettings\n  /** A provider chosen by the caller, ahead of every setting; specs use it. */\n  provider?: AiProvider\n}\n\nexport interface AiRequest extends AiRequestBase, AiRuntimeOptions {\n  stream: false\n}\n\nexport interface AiStreamRequest extends AiRequestBase, AiRuntimeOptions {\n  stream: true\n}\n\n/**\n * The cache guard, applied to the system blocks before any adapter sees\n * them. Exported so a spec and a door can assert a prompt's shape without\n * a provider.\n */\nexport function validateAiSystemBlocks(system: readonly AiSystemBlock[]): void {\n  const breakpoints = system.filter((block) => block.cacheBreakpoint)\n  if (breakpoints.length > AI_MAX_CACHE_BREAKPOINTS) {\n    throw new AiRequestShapeError(\n      `${breakpoints.length} cache breakpoints; at most ${AI_MAX_CACHE_BREAKPOINTS} are cached`,\n    )\n  }\n  // Caching is a prefix match, so the LAST breakpoint decides what is\n  // cached, and every block at or before it is inside the cached prefix. A\n  // volatile block anywhere in that span — including one that is itself\n  // the breakpoint — puts a per-request byte into the prefix (AGL-2352).\n  const lastBreakpoint = system.reduce(\n    (last, block, index) => (block.cacheBreakpoint ? index : last),\n    -1,\n  )\n  system.forEach((block, index) => {\n    if (block.volatile && index <= lastBreakpoint) {\n      throw new AiRequestShapeError(\n        `system block ${index} is volatile but sits inside the cached prefix (last breakpoint at block ${lastBreakpoint})`,\n      )\n    }\n  })\n  // A site's block is cached per site (AGL-3661), so it closes the cached\n  // span: a platform-wide breakpoint after it would be keyed on the site too,\n  // and every workspace would warm its own copy of a shared prompt.\n  const firstSite = system.findIndex((block) => block.site && block.cacheBreakpoint)\n  if (firstSite >= 0 && firstSite !== lastBreakpoint) {\n    throw new AiRequestShapeError(\n      `system block ${firstSite} is a site's cached block but breakpoint ${lastBreakpoint} follows it`,\n    )\n  }\n}\n\n/**\n * Whether a request may also cache its conversation (AGL-3809): the\n * conversation's breakpoint is one more marker, so it fits only where the\n * system blocks leave one of the provider's four free.\n */\nexport function aiConversationCacheFits(system: readonly AiSystemBlock[]): boolean {\n  return system.filter((block) => block.cacheBreakpoint).length < AI_MAX_CACHE_BREAKPOINTS\n}\n\n/**\n * Whether a provider's model reads a picture in a user turn (AGL-2916): what\n * the provider's own descriptor of the model says. A model the provider does\n * not describe reads none, so an adopter's provider is never sent a picture\n * it did not say it can take.\n */\nexport function aiModelReadsImages(provider: AiProvider, model: string): boolean {\n  return provider\n    .models()\n    .some((descriptor) => descriptor.id === model && descriptor.capabilities.vision === true)\n}\n\n/**\n * Whether a model a door resolved reads pictures on the provider that would\n * serve the request: what a door asks before it attaches one, so a model that\n * does not is sent the text alone rather than refused.\n */\nexport function aiRouteReadsImages(model: string, settings?: AiPluginSettings): boolean {\n  const provider = resolveAiProvider(settings)\n  return provider ? aiModelReadsImages(provider, model) : false\n}\n\n/** A character standard base64 does not use, outside its padding. */\nconst NOT_BASE64 = /[^A-Za-z0-9+/]/\n\n/**\n * Whether `data` is standard base64 and nothing else: its alphabet, then at\n * most two `=` of padding; no `data:` prefix, no line breaks.\n *\n * Scanned for a character outside the alphabet rather than matched whole: a\n * picture is megabytes of base64, and a whole-string pattern with a greedy\n * loop can exhaust the regular expression engine's backtrack stack on input\n * that large, which throws a RangeError instead of answering.\n */\nfunction isBareBase64(data: string): boolean {\n  const body = data.endsWith('==') ? data.slice(0, -2) : data.endsWith('=') ? data.slice(0, -1) : data\n  return body.length > 0 && !NOT_BASE64.test(body)\n}\n\n/**\n * The picture guard (AGL-2916), applied to the messages before any adapter\n * sees them. A picture rides only a user turn, only to a model that reads\n * pictures, only in a format every such model takes, as bare base64 within\n * the size a provider accepts, and no more of them than a request may carry.\n * `readsImages` is asked only when a turn carries a picture. Exported so a\n * spec and a door can assert a request's shape without a provider.\n */\nexport function validateAiMessages(messages: readonly AiMessage[], readsImages: () => boolean): void {\n  messages.forEach((message, index) => {\n    if (typeof message.content === 'string') return\n    if (!Array.isArray(message.content) || message.content.length === 0) {\n      throw new AiRequestShapeError(`message ${index} has neither text nor parts`)\n    }\n    for (const part of message.content) {\n      if (part.type === 'text') {\n        if (typeof part.text !== 'string') {\n          throw new AiRequestShapeError(`message ${index} has a text part with no text`)\n        }\n        continue\n      }\n      if (part.type !== 'image') {\n        throw new AiRequestShapeError(`message ${index} has a part of an unknown type`)\n      }\n      if (message.role !== 'user') {\n        throw new AiRequestShapeError(`message ${index} is an assistant turn and carries a picture`)\n      }\n      if (!(AI_IMAGE_MEDIA_TYPES as readonly string[]).includes(part.mediaType)) {\n        throw new AiRequestShapeError(`message ${index} carries a picture of an unsupported type`)\n      }\n      if (typeof part.data !== 'string') {\n        throw new AiRequestShapeError(`message ${index} carries a picture that is not bare base64`)\n      }\n      // The size first: it needs only the length, so an oversized picture is\n      // refused without reading its bytes.\n      if (aiBase64Bytes(part.data) > AI_IMAGE_MAX_BYTES) {\n        throw new AiRequestShapeError(\n          `message ${index} carries a picture over ${AI_IMAGE_MAX_BYTES} bytes`,\n        )\n      }\n      if (!isBareBase64(part.data)) {\n        throw new AiRequestShapeError(`message ${index} carries a picture that is not bare base64`)\n      }\n    }\n  })\n  const images = aiMessageImages(messages).length\n  if (images > AI_REQUEST_MAX_IMAGES) {\n    throw new AiRequestShapeError(`${images} pictures; a request carries at most ${AI_REQUEST_MAX_IMAGES}`)\n  }\n  if (images > 0 && !readsImages()) {\n    throw new AiRequestShapeError('the request carries a picture and its model does not read pictures')\n  }\n}\n\n/**\n * Characters to a token when a prompt is measured rather than tokenized\n * (AGL-2937). Four is the high end of English prose, so reading a prefix\n * through it errs LOW on the token count — and a prefix counts as cached\n * only when it clears its model's minimum even at that reading. Erring the\n * other way would let a prompt claim a cache it does not get.\n */\nexport const AI_CACHE_PREFIX_TOKEN_CHARS = 4\n\n/**\n * The characters inside the cached span of a request: the tools, which a\n * provider renders ahead of the system blocks and which therefore sit in\n * every prefix, plus every system block up to and including the last\n * breakpoint. Zero when the request marks no breakpoint at all.\n */\nexport function aiCachedPrefixChars(\n  system: readonly AiSystemBlock[],\n  tools: readonly AiTool[] = [],\n): number {\n  const lastBreakpoint = system.reduce(\n    (last, block, index) => (block.cacheBreakpoint ? index : last),\n    -1,\n  )\n  if (lastBreakpoint < 0) return 0\n  const toolChars = tools.reduce((total, tool) => total + JSON.stringify(tool).length, 0)\n  return system\n    .slice(0, lastBreakpoint + 1)\n    .reduce((total, block) => total + block.text.length, toolChars)\n}\n\n/**\n * Whether this request's cached span is long enough for the model to cache\n * it at all (AGL-2937). A prefix under the model's `cacheMinTokens` is\n * served with the breakpoints honored and nothing cached — no error, and a\n * usage report that reads as a permanent miss — so a door designed around a\n * cache has to answer this question before it believes its own markers, and\n * `runtime/ai-prompt-cache.spec.ts` answers it for every door at once.\n */\nexport function aiCachedPrefixCaches(\n  model: string,\n  system: readonly AiSystemBlock[],\n  tools: readonly AiTool[] = [],\n): boolean {\n  const chars = aiCachedPrefixChars(system, tools)\n  return chars / AI_CACHE_PREFIX_TOKEN_CHARS >= aiModelCacheMinTokens(model)\n}\n\n/**\n * Whether a provider is configured to answer: registered, and its key\n * present. Every door asks this before it spends a reservation, and\n * answers 501 (or the docs fallback) when it is false.\n */\nexport function aiProviderReady(settings?: AiPluginSettings): boolean {\n  return Boolean(resolveAiProvider(settings)?.readApiKey())\n}\n\n/** The provider that would answer, for a door that names it in its logs or its inventory. */\nexport function aiActiveProvider(settings?: AiPluginSettings): AiProvider | undefined {\n  return resolveAiProvider(settings)\n}\n\nfunction providerFor(input: AiRuntimeOptions): { provider: AiProvider; apiKey: string } {\n  const provider = input.provider ?? resolveAiProvider(input.settings)\n  if (!provider) throw new Error('no AI provider is registered')\n  const apiKey = provider.readApiKey()\n  if (!apiKey) {\n    // Every door gates on `aiProviderReady` before it gets here, so this is\n    // a wiring fault rather than a customer path.\n    throw new Error(`${provider.apiKeyEnv} is not set`)\n  }\n  return { provider, apiKey }\n}\n\n/**\n * Send one request through the resolved provider.\n *\n * Streaming: resolves once the provider has ACCEPTED the request — after\n * the headers, before the first token — with an iterator of simplified\n * events the caller wraps in its own wire format. A non-2xx answer rejects\n * with `AiUpstreamError` before the iterator exists, so a door can still\n * send a plain error status and hand back its reservation.\n *\n * Non-streaming: resolves with the parsed result, a decline typed as\n * `AiRefusal` rather than thrown.\n */\nexport async function runAiRequest(\n  input: AiStreamRequest,\n): Promise<AsyncIterable<AiStreamEvent>>\nexport async function runAiRequest(input: AiRequest): Promise<AiResult>\nexport async function runAiRequest(\n  input: AiRequest | AiStreamRequest,\n): Promise<AsyncIterable<AiStreamEvent> | AiResult> {\n  validateAiSystemBlocks(input.system)\n  if (input.cacheConversation && !aiConversationCacheFits(input.system)) {\n    throw new AiRequestShapeError(\n      `the conversation's breakpoint would be the ${AI_MAX_CACHE_BREAKPOINTS + 1}th; at most ${AI_MAX_CACHE_BREAKPOINTS} are cached`,\n    )\n  }\n  refuseRetiredModelInLiveRun(input.model)\n  const { provider, apiKey } = providerFor(input)\n  validateAiMessages(input.messages, () => aiModelReadsImages(provider, input.model))\n  const { stream, settings: _settings, provider: _provider, ...request } = input\n  aiWarnIfReplayAskedInDeployment()\n  const cacheTtl = aiRequestCacheTtl(request.cacheTtl)\n  const providerRequest: AiProviderRequest = { ...request, ...(cacheTtl ? { cacheTtl } : {}), apiKey }\n  try {\n    if (aiIsDeployedRuntime()) {\n      return await (stream ? provider.stream(providerRequest) : provider.complete(providerRequest))\n    }\n    return await runInDevelopment(provider, providerRequest, stream)\n  } catch (error) {\n    await reportAccountProblem(provider, error)\n    throw error\n  }\n}\n\n/**\n * A live development run that names a retired model is refused before it\n * spends (AGL-3781). Routing serves a retired id's successor wherever a\n * setting or an override names it, so a retired id reaching here was asked\n * for by name — an override left in a run, or a comparison a spec kept — and\n * would bill a model production no longer serves.\n */\nfunction refuseRetiredModelInLiveRun(model: string): void {\n  if (!aiUnderLiveRun()) return\n  const successor = aiCatalogEntry(model)?.successor\n  if (successor) {\n    throw new AiRequestShapeError(`${model} is retired; ${successor} serves in its place`)\n  }\n}\n\n/**\n * A request in a development process (AGL-3660): through the replay cache,\n * batch mode and the first-request-warms-the-prefix rule when this process\n * asked for them (`ai-dev-env.ts`), straight to the provider when it asked\n * for none. The file-backed half is loaded only when a layer is on, so a dev\n * server that never asked loads nothing it did not before.\n */\nasync function runInDevelopment(\n  provider: AiProvider,\n  request: AiProviderRequest,\n  stream: boolean,\n): Promise<AsyncIterable<AiStreamEvent> | AiResult> {\n  const mode = aiDevReplayMode()\n  const batch = !stream && aiLiveBatchWanted() && Boolean(provider.completeBatch)\n  if (mode === 'off' && !batch) {\n    return stream ? provider.stream(request) : provider.complete(request)\n  }\n  const dev = await import('./ai-dev-replay')\n  const ttlMs = request.cacheTtl === '1h' ? 60 * 60_000 : 5 * 60_000\n  const prefix = dev.aiCachedPrefixKey(request)\n  if (stream) {\n    const live = () => dev.aiDevWarmPrefixFirst(prefix, ttlMs, () => provider.stream(request))\n    return mode === 'off' ? live() : dev.aiDevReplayStream(provider, request, mode, live)\n  }\n  const live = async (): Promise<AiResult> => {\n    const result = batch\n      ? await aiCompleteInBatch(provider, request)\n      : await dev.aiDevWarmPrefixFirst(prefix, ttlMs, () => provider.complete(request))\n    // A request its batch left unanswered was asked on its own, at full price (AGL-3781).\n    const discounted = batch && !aiAnsweredOutsideBatch(result)\n    dev.aiDevCountLive(result.usage, request.model, discounted ? AI_BATCH_PRICE_FACTOR : 1)\n    return result\n  }\n  return mode === 'off' ? live() : dev.aiDevReplayComplete(provider, request, mode, live)\n}\n\n/** What a batch's discount leaves of a request's price, for the development count. */\nconst AI_BATCH_PRICE_FACTOR = 0.5\n\n/**\n * Tells the operator when the failure is the platform's provider account —\n * a refused key, no credit — rather than the request (AGL-3377). Once per\n * provider and problem per window; loaded lazily so the runtime pulls no\n * Admin SDK until an account is actually broken. Never throws.\n */\nasync function reportAccountProblem(provider: AiProvider, error: unknown): Promise<void> {\n  if (!(error instanceof AiUpstreamError) || !error.accountProblem) return\n  try {\n    const [{ raiseOperatorAlert }, { AI_PROVIDER_UNAVAILABLE }] = await Promise.all([\n      import('./operator-alerts-seam'),\n      import('../operator-alerts'),\n    ])\n    await raiseOperatorAlert(AI_PROVIDER_UNAVAILABLE, {\n      dedupeKey: `${provider.id}:${error.accountProblem}`,\n      context: {\n        provider: provider.label,\n        keyEnv: provider.apiKeyEnv,\n        reason:\n          error.accountProblem === 'credentials'\n            ? `its API key was refused (HTTP ${error.status ?? 'unknown'})`\n            : 'the account is out of credit',\n      },\n    })\n  } catch (alertError) {\n    console.error('[ai] the provider account alert could not be raised', alertError)\n  }\n}\n"],"names":["aiCatalogEntry","aiModelCacheMinTokens","AI_IMAGE_MAX_BYTES","AI_IMAGE_MEDIA_TYPES","AI_REQUEST_MAX_IMAGES","AiRequestShapeError","AiUpstreamError","aiBase64Bytes","aiMessageImages","resolveAiProvider","aiRequestCacheTtl","aiDevReplayMode","aiIsDeployedRuntime","aiLiveBatchWanted","aiUnderLiveRun","aiWarnIfReplayAskedInDeployment","aiAnsweredOutsideBatch","aiCompleteInBatch","AI_UPSTREAM_FAILURE_COPY","AI_MAX_CACHE_BREAKPOINTS","AI_ACCEPTABLE_USE_BLOCK","validateAiSystemBlocks","system","breakpoints","filter","block","cacheBreakpoint","length","lastBreakpoint","reduce","last","index","forEach","volatile","firstSite","findIndex","site","aiConversationCacheFits","aiModelReadsImages","provider","model","models","some","descriptor","id","capabilities","vision","aiRouteReadsImages","settings","NOT_BASE64","isBareBase64","data","body","endsWith","slice","test","validateAiMessages","messages","readsImages","message","content","Array","isArray","part","type","text","role","includes","mediaType","images","AI_CACHE_PREFIX_TOKEN_CHARS","aiCachedPrefixChars","tools","toolChars","total","tool","JSON","stringify","aiCachedPrefixCaches","chars","aiProviderReady","Boolean","readApiKey","aiActiveProvider","providerFor","input","Error","apiKey","apiKeyEnv","runAiRequest","cacheConversation","refuseRetiredModelInLiveRun","stream","_settings","_provider","request","cacheTtl","providerRequest","complete","runInDevelopment","error","reportAccountProblem","successor","mode","batch","completeBatch","dev","ttlMs","prefix","aiCachedPrefixKey","live","aiDevWarmPrefixFirst","aiDevReplayStream","result","discounted","aiDevCountLive","usage","AI_BATCH_PRICE_FACTOR","aiDevReplayComplete","accountProblem","raiseOperatorAlert","AI_PROVIDER_UNAVAILABLE","Promise","all","dedupeKey","context","label","keyEnv","reason","status","alertError","console"],"mappings":";;AAAA;;;;;;;;;;;;;;;CAeC,GAED,SAASA,cAAc,EAAEC,qBAAqB,QAAQ,0BAAsB;AAC5E,SACEC,kBAAkB,EAClBC,oBAAoB,EACpBC,qBAAqB,EACrBC,mBAAmB,EACnBC,eAAe,EACfC,aAAa,EACbC,eAAe,QASV,2BAAuB;AAC9B,SAASC,iBAAiB,QAA+B,0BAAsB;AAC/E,SACEC,iBAAiB,EACjBC,eAAe,EACfC,mBAAmB,EACnBC,iBAAiB,EACjBC,cAAc,EACdC,+BAA+B,QAC1B,kBAAc;AACrB,SAASC,sBAAsB,EAAEC,iBAAiB,QAAQ,qBAAiB;AAE3E,SACEC,wBAAwB,EACxBb,mBAAmB,EACnBC,eAAe,QAeV,2BAAuB;AAE9B;;;;;;;;;;;;;;;;;;;;;;CAsBC,GAED,4DAA4D,GAC5D,OAAO,MAAMa,2BAA2B,EAAC;AAEzC;;;;;;;;;;;;;;;CAeC,GACD,OAAO,MAAMC,0BAA0B,CAAC;;;;;;;4EAOoC,CAAC,CAAA;AAkB7E;;;;CAIC,GACD,OAAO,SAASC,uBAAuBC,MAAgC;IACrE,MAAMC,cAAcD,OAAOE,MAAM,CAAC,CAACC,QAAUA,MAAMC,eAAe;IAClE,IAAIH,YAAYI,MAAM,GAAGR,0BAA0B;QACjD,MAAM,IAAId,oBACR,GAAGkB,YAAYI,MAAM,CAAC,4BAA4B,EAAER,yBAAyB,WAAW,CAAC;IAE7F;IACA,oEAAoE;IACpE,yEAAyE;IACzE,sEAAsE;IACtE,uEAAuE;IACvE,MAAMS,iBAAiBN,OAAOO,MAAM,CAClC,CAACC,MAAML,OAAOM,QAAWN,MAAMC,eAAe,GAAGK,QAAQD,MACzD,CAAC;IAEHR,OAAOU,OAAO,CAAC,CAACP,OAAOM;QACrB,IAAIN,MAAMQ,QAAQ,IAAIF,SAASH,gBAAgB;YAC7C,MAAM,IAAIvB,oBACR,CAAC,aAAa,EAAE0B,MAAM,yEAAyE,EAAEH,eAAe,CAAC,CAAC;QAEtH;IACF;IACA,wEAAwE;IACxE,4EAA4E;IAC5E,kEAAkE;IAClE,MAAMM,YAAYZ,OAAOa,SAAS,CAAC,CAACV,QAAUA,MAAMW,IAAI,IAAIX,MAAMC,eAAe;IACjF,IAAIQ,aAAa,KAAKA,cAAcN,gBAAgB;QAClD,MAAM,IAAIvB,oBACR,CAAC,aAAa,EAAE6B,UAAU,yCAAyC,EAAEN,eAAe,WAAW,CAAC;IAEpG;AACF;AAEA;;;;CAIC,GACD,OAAO,SAASS,wBAAwBf,MAAgC;IACtE,OAAOA,OAAOE,MAAM,CAAC,CAACC,QAAUA,MAAMC,eAAe,EAAEC,MAAM,GAAGR;AAClE;AAEA;;;;;CAKC,GACD,OAAO,SAASmB,mBAAmBC,QAAoB,EAAEC,KAAa;IACpE,OAAOD,SACJE,MAAM,GACNC,IAAI,CAAC,CAACC,aAAeA,WAAWC,EAAE,KAAKJ,SAASG,WAAWE,YAAY,CAACC,MAAM,KAAK;AACxF;AAEA;;;;CAIC,GACD,OAAO,SAASC,mBAAmBP,KAAa,EAAEQ,QAA2B;IAC3E,MAAMT,WAAW9B,kBAAkBuC;IACnC,OAAOT,WAAWD,mBAAmBC,UAAUC,SAAS;AAC1D;AAEA,mEAAmE,GACnE,MAAMS,aAAa;AAEnB;;;;;;;;CAQC,GACD,SAASC,aAAaC,IAAY;IAChC,MAAMC,OAAOD,KAAKE,QAAQ,CAAC,QAAQF,KAAKG,KAAK,CAAC,GAAG,CAAC,KAAKH,KAAKE,QAAQ,CAAC,OAAOF,KAAKG,KAAK,CAAC,GAAG,CAAC,KAAKH;IAChG,OAAOC,KAAKzB,MAAM,GAAG,KAAK,CAACsB,WAAWM,IAAI,CAACH;AAC7C;AAEA;;;;;;;CAOC,GACD,OAAO,SAASI,mBAAmBC,QAA8B,EAAEC,WAA0B;IAC3FD,SAASzB,OAAO,CAAC,CAAC2B,SAAS5B;QACzB,IAAI,OAAO4B,QAAQC,OAAO,KAAK,UAAU;QACzC,IAAI,CAACC,MAAMC,OAAO,CAACH,QAAQC,OAAO,KAAKD,QAAQC,OAAO,CAACjC,MAAM,KAAK,GAAG;YACnE,MAAM,IAAItB,oBAAoB,CAAC,QAAQ,EAAE0B,MAAM,2BAA2B,CAAC;QAC7E;QACA,KAAK,MAAMgC,QAAQJ,QAAQC,OAAO,CAAE;YAClC,IAAIG,KAAKC,IAAI,KAAK,QAAQ;gBACxB,IAAI,OAAOD,KAAKE,IAAI,KAAK,UAAU;oBACjC,MAAM,IAAI5D,oBAAoB,CAAC,QAAQ,EAAE0B,MAAM,6BAA6B,CAAC;gBAC/E;gBACA;YACF;YACA,IAAIgC,KAAKC,IAAI,KAAK,SAAS;gBACzB,MAAM,IAAI3D,oBAAoB,CAAC,QAAQ,EAAE0B,MAAM,8BAA8B,CAAC;YAChF;YACA,IAAI4B,QAAQO,IAAI,KAAK,QAAQ;gBAC3B,MAAM,IAAI7D,oBAAoB,CAAC,QAAQ,EAAE0B,MAAM,2CAA2C,CAAC;YAC7F;YACA,IAAI,CAAC,AAAC5B,qBAA2CgE,QAAQ,CAACJ,KAAKK,SAAS,GAAG;gBACzE,MAAM,IAAI/D,oBAAoB,CAAC,QAAQ,EAAE0B,MAAM,yCAAyC,CAAC;YAC3F;YACA,IAAI,OAAOgC,KAAKZ,IAAI,KAAK,UAAU;gBACjC,MAAM,IAAI9C,oBAAoB,CAAC,QAAQ,EAAE0B,MAAM,0CAA0C,CAAC;YAC5F;YACA,uEAAuE;YACvE,qCAAqC;YACrC,IAAIxB,cAAcwD,KAAKZ,IAAI,IAAIjD,oBAAoB;gBACjD,MAAM,IAAIG,oBACR,CAAC,QAAQ,EAAE0B,MAAM,wBAAwB,EAAE7B,mBAAmB,MAAM,CAAC;YAEzE;YACA,IAAI,CAACgD,aAAaa,KAAKZ,IAAI,GAAG;gBAC5B,MAAM,IAAI9C,oBAAoB,CAAC,QAAQ,EAAE0B,MAAM,0CAA0C,CAAC;YAC5F;QACF;IACF;IACA,MAAMsC,SAAS7D,gBAAgBiD,UAAU9B,MAAM;IAC/C,IAAI0C,SAASjE,uBAAuB;QAClC,MAAM,IAAIC,oBAAoB,GAAGgE,OAAO,qCAAqC,EAAEjE,uBAAuB;IACxG;IACA,IAAIiE,SAAS,KAAK,CAACX,eAAe;QAChC,MAAM,IAAIrD,oBAAoB;IAChC;AACF;AAEA;;;;;;CAMC,GACD,OAAO,MAAMiE,8BAA8B,EAAC;AAE5C;;;;;CAKC,GACD,OAAO,SAASC,oBACdjD,MAAgC,EAChCkD,QAA2B,EAAE;IAE7B,MAAM5C,iBAAiBN,OAAOO,MAAM,CAClC,CAACC,MAAML,OAAOM,QAAWN,MAAMC,eAAe,GAAGK,QAAQD,MACzD,CAAC;IAEH,IAAIF,iBAAiB,GAAG,OAAO;IAC/B,MAAM6C,YAAYD,MAAM3C,MAAM,CAAC,CAAC6C,OAAOC,OAASD,QAAQE,KAAKC,SAAS,CAACF,MAAMhD,MAAM,EAAE;IACrF,OAAOL,OACJgC,KAAK,CAAC,GAAG1B,iBAAiB,GAC1BC,MAAM,CAAC,CAAC6C,OAAOjD,QAAUiD,QAAQjD,MAAMwC,IAAI,CAACtC,MAAM,EAAE8C;AACzD;AAEA;;;;;;;CAOC,GACD,OAAO,SAASK,qBACdtC,KAAa,EACblB,MAAgC,EAChCkD,QAA2B,EAAE;IAE7B,MAAMO,QAAQR,oBAAoBjD,QAAQkD;IAC1C,OAAOO,QAAQT,+BAA+BrE,sBAAsBuC;AACtE;AAEA;;;;CAIC,GACD,OAAO,SAASwC,gBAAgBhC,QAA2B;QAC1CvC;IAAf,OAAOwE,SAAQxE,qBAAAA,kBAAkBuC,8BAAlBvC,mBAA6ByE,UAAU;AACxD;AAEA,2FAA2F,GAC3F,OAAO,SAASC,iBAAiBnC,QAA2B;IAC1D,OAAOvC,kBAAkBuC;AAC3B;AAEA,SAASoC,YAAYC,KAAuB;QACzBA;IAAjB,MAAM9C,YAAW8C,kBAAAA,MAAM9C,QAAQ,YAAd8C,kBAAkB5E,kBAAkB4E,MAAMrC,QAAQ;IACnE,IAAI,CAACT,UAAU,MAAM,IAAI+C,MAAM;IAC/B,MAAMC,SAAShD,SAAS2C,UAAU;IAClC,IAAI,CAACK,QAAQ;QACX,wEAAwE;QACxE,8CAA8C;QAC9C,MAAM,IAAID,MAAM,GAAG/C,SAASiD,SAAS,CAAC,WAAW,CAAC;IACpD;IACA,OAAO;QAAEjD;QAAUgD;IAAO;AAC5B;AAkBA,OAAO,eAAeE,aACpBJ,KAAkC;IAElChE,uBAAuBgE,MAAM/D,MAAM;IACnC,IAAI+D,MAAMK,iBAAiB,IAAI,CAACrD,wBAAwBgD,MAAM/D,MAAM,GAAG;QACrE,MAAM,IAAIjB,oBACR,CAAC,2CAA2C,EAAEc,2BAA2B,EAAE,YAAY,EAAEA,yBAAyB,WAAW,CAAC;IAElI;IACAwE,4BAA4BN,MAAM7C,KAAK;IACvC,MAAM,EAAED,QAAQ,EAAEgD,MAAM,EAAE,GAAGH,YAAYC;IACzC7B,mBAAmB6B,MAAM5B,QAAQ,EAAE,IAAMnB,mBAAmBC,UAAU8C,MAAM7C,KAAK;IACjF,MAAM,EAAEoD,MAAM,EAAE5C,UAAU6C,SAAS,EAAEtD,UAAUuD,SAAS,EAAc,GAAGT,OAAZU,2CAAYV;;;;;IACzEtE;IACA,MAAMiF,WAAWtF,kBAAkBqF,QAAQC,QAAQ;IACnD,MAAMC,kBAAqC,aAAKF,SAAaC,WAAW;QAAEA;IAAS,IAAI,CAAC;QAAIT;;IAC5F,IAAI;QACF,IAAI3E,uBAAuB;YACzB,OAAO,MAAOgF,CAAAA,SAASrD,SAASqD,MAAM,CAACK,mBAAmB1D,SAAS2D,QAAQ,CAACD,gBAAe;QAC7F;QACA,OAAO,MAAME,iBAAiB5D,UAAU0D,iBAAiBL;IAC3D,EAAE,OAAOQ,OAAO;QACd,MAAMC,qBAAqB9D,UAAU6D;QACrC,MAAMA;IACR;AACF;AAEA;;;;;;CAMC,GACD,SAAST,4BAA4BnD,KAAa;QAE9BxC;IADlB,IAAI,CAACc,kBAAkB;IACvB,MAAMwF,aAAYtG,kBAAAA,eAAewC,2BAAfxC,gBAAuBsG,SAAS;IAClD,IAAIA,WAAW;QACb,MAAM,IAAIjG,oBAAoB,GAAGmC,MAAM,aAAa,EAAE8D,UAAU,oBAAoB,CAAC;IACvF;AACF;AAEA;;;;;;CAMC,GACD,eAAeH,iBACb5D,QAAoB,EACpBwD,OAA0B,EAC1BH,MAAe;IAEf,MAAMW,OAAO5F;IACb,MAAM6F,QAAQ,CAACZ,UAAU/E,uBAAuBoE,QAAQ1C,SAASkE,aAAa;IAC9E,IAAIF,SAAS,SAAS,CAACC,OAAO;QAC5B,OAAOZ,SAASrD,SAASqD,MAAM,CAACG,WAAWxD,SAAS2D,QAAQ,CAACH;IAC/D;IACA,MAAMW,MAAM,MAAM,MAAM,CAAC;IACzB,MAAMC,QAAQZ,QAAQC,QAAQ,KAAK,OAAO,KAAK,QAAS,IAAI;IAC5D,MAAMY,SAASF,IAAIG,iBAAiB,CAACd;IACrC,IAAIH,QAAQ;QACV,MAAMkB,OAAO,IAAMJ,IAAIK,oBAAoB,CAACH,QAAQD,OAAO,IAAMpE,SAASqD,MAAM,CAACG;QACjF,OAAOQ,SAAS,QAAQO,SAASJ,IAAIM,iBAAiB,CAACzE,UAAUwD,SAASQ,MAAMO;IAClF;IACA,MAAMA,OAAO;QACX,MAAMG,SAAST,QACX,MAAMvF,kBAAkBsB,UAAUwD,WAClC,MAAMW,IAAIK,oBAAoB,CAACH,QAAQD,OAAO,IAAMpE,SAAS2D,QAAQ,CAACH;QAC1E,sFAAsF;QACtF,MAAMmB,aAAaV,SAAS,CAACxF,uBAAuBiG;QACpDP,IAAIS,cAAc,CAACF,OAAOG,KAAK,EAAErB,QAAQvD,KAAK,EAAE0E,aAAaG,wBAAwB;QACrF,OAAOJ;IACT;IACA,OAAOV,SAAS,QAAQO,SAASJ,IAAIY,mBAAmB,CAAC/E,UAAUwD,SAASQ,MAAMO;AACpF;AAEA,oFAAoF,GACpF,MAAMO,wBAAwB;AAE9B;;;;;CAKC,GACD,eAAehB,qBAAqB9D,QAAoB,EAAE6D,KAAc;IACtE,IAAI,CAAEA,CAAAA,iBAAiB9F,eAAc,KAAM,CAAC8F,MAAMmB,cAAc,EAAE;IAClE,IAAI;YAYyCnB;QAX3C,MAAM,CAAC,EAAEoB,kBAAkB,EAAE,EAAE,EAAEC,uBAAuB,EAAE,CAAC,GAAG,MAAMC,QAAQC,GAAG,CAAC;YAC9E,MAAM,CAAC;YACP,MAAM,CAAC;SACR;QACD,MAAMH,mBAAmBC,yBAAyB;YAChDG,WAAW,GAAGrF,SAASK,EAAE,CAAC,CAAC,EAAEwD,MAAMmB,cAAc,EAAE;YACnDM,SAAS;gBACPtF,UAAUA,SAASuF,KAAK;gBACxBC,QAAQxF,SAASiD,SAAS;gBAC1BwC,QACE5B,MAAMmB,cAAc,KAAK,gBACrB,CAAC,8BAA8B,GAAEnB,gBAAAA,MAAM6B,MAAM,YAAZ7B,gBAAgB,UAAU,CAAC,CAAC,GAC7D;YACR;QACF;IACF,EAAE,OAAO8B,YAAY;QACnBC,QAAQ/B,KAAK,CAAC,uDAAuD8B;IACvE;AACF"}

package/src/lib/server/assist-chat.js

@@ -33,7 +33,7 @@ import { composeDocsLinksAnswer, deflectToDocs, questionStandsAlone, sectionLabe
 import { ASSIST_EDIT_TOOL_NAME, assistEditDocumentOf } from "../model/assist-edit.js";
 import { ASSIST_EDIT_MAX_OUTPUT_TOKENS, assistEditTool, editCanvasBlock, editSelectionBlock, parseAssistEditContext, resolveAssistEdit } from "./assist-edit.js";
 import { ASSIST_BUILD_TOOL_NAME } from "../model/assist-build.js";
-import { assistBuildDraftsBlock, parseAssistBuildDrafts } from "../model/assist-follow-up.js";
+import { assistBuildDraftsBlock, assistDraftsForTurn, parseAssistBuildDrafts } from "../model/assist-follow-up.js";
 import { assistBuildBlock, assistBuildIntents, assistBuildIntentsBlock, assistBuildTool, resolveAssistBuild } from "./assist-build.js";
 import { describeView, extractAssistAction, finalAssistText, resolveAssistProposal, safeOrgFacts, sanitiseId, sanitiseRoute, viewFactsBlock, viewScreenBlock, visibleAssistText, withAssistOpenDraftAction } from "./assist-view-context.js";
 import { invalidIdTokenResponse } from "@aglyn/tenant-data-admin/server/id-token-refusal";
@@ -1171,8 +1171,13 @@ async function handler(request) {
             edit: Boolean(editRung)
         }) : null;
         // A follow-up on a draft this thread's build made (AGL-3616): offered on
-        // a site, where the navigation has a destination, and nowhere else.
-        const drafts = (guide == null ? void 0 : guide.scope.hostId) ? body.drafts : [];
+        // a site, where the navigation has a destination, and nowhere else. The
+        // draft marked open is believed only when this turn reads its canvas
+        // (AGL-3833).
+        const drafts = assistDraftsForTurn(body.drafts, {
+            onSite: Boolean(guide == null ? void 0 : guide.scope.hostId),
+            canvasRead: Boolean(editRung)
+        });
         const draftsBlock = assistBuildDraftsBlock(drafts);
         const proposalView = guide ? withAssistOpenDraftAction(guide.view, drafts) : null;
         // The site's business profile, status and memory (AGL-3661), for a turn