@aglyn/plugins-ai 1.0.0-beta.266 → 1.0.0-beta.269

package/src/lib/model/ai-jobs.types.d.ts

@@ -492,6 +492,20 @@ export interface AiJob {
      * `canceled` at its next write. Absent on a job nobody canceled.
      */
     cancelRequested?: AiJobCancelRequest | null;
+    /**
+     * The empty site this guided start was for was removed (AGL-3936): the
+     * job was cancelled or failed before it built anything, nobody chose what
+     * to do next within the grace period, and the AI jobs beat deleted the
+     * site. Written once, by the beat, after the site is gone. Absent on every
+     * other job.
+     */
+    siteRemoved?: AiJobSiteRemoved | null;
+}
+/** When the AI jobs beat removed a guided start's empty site, and which (AGL-3936). */
+export interface AiJobSiteRemoved {
+    at: ITimestamp;
+    /** The site's name as it was, for a sentence that names it. */
+    name: string | null;
 }
 /** Who asked to cancel a job, and when (AGL-3616). */
 export interface AiJobCancelRequest {
@@ -619,4 +633,10 @@ export interface AiJobSummary {
      * the job is terminal, and on every job nobody canceled.
      */
     cancelRequested?: boolean;
+    /**
+     * The empty site this guided start was for was removed (AGL-3936): its
+     * page is gone, and Start again opens Create site with the same answers.
+     * Absent on every other job.
+     */
+    siteRemoved?: boolean;
 }

package/src/lib/model/ai-jobs.types.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../../../../libs/plugins/ai/src/lib/model/ai-jobs.types.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport type { ITimestamp } from '@aglyn/shared-util-timestamp'\nimport type { AiEffort } from '../providers/contract'\nimport type { AiLoadEstimate } from '../runtime/ai-palette'\nimport type { AiBuildPlan } from './ai-build-plan'\nimport type { AiFreeCreditsLeft } from './ai-site-job'\nimport type { AiJobCreditsConfirmation } from './ai-credit-estimate'\n\n/**\n * AI generation jobs (AGL-2904).\n *\n * A job is one customer brief carried through one or more model steps by a\n * Firestore state machine, so that work longer than a request can survive\n * the request: the console route runs what it can inline, and the platform\n * job beat resumes whatever is left. The document is the whole state — no\n * process holds anything the next beat cannot read back.\n *\n * ── Outputs are drafts, never a publish ──────────────────────────────────\n *\n * Every output a job produces is a NEW draft or a new unpublished version of\n * an existing resource. A job never flips a version pointer, never registers\n * a route and never sends anything; a person opens the draft the job names\n * and publishes it through the door that already exists for that resource.\n * That is what lets a job run with no visitor, no session and no confirm\n * gate — the thing it writes cannot be seen by anyone but the workspace\n * until a member chooses otherwise.\n *\n * ── The lease ────────────────────────────────────────────────────────────\n *\n * A step runs under a lease: an owner id and an `until` instant. Two beats\n * fire a minute apart against a 120 s function timeout, and a console route\n * may still be running the first step when the first beat looks, so the\n * lease is what stops the same step being run — and metered — twice. A\n * claim is a transaction that refuses while another owner's lease is live;\n * an expired lease is simply claimable, which is also how a step abandoned\n * by a frozen process is recovered.\n */\n\n/**\n * What a job produces. `text` and `theme` have runners; every other kind is\n * registered and refuses with \"not available yet\" until its own issue lands,\n * so a kind's presence in the union says the job model accepts it, not that\n * a runner exists.\n */\nexport type AiJobKind =\n  | 'page'\n  | 'component'\n  | 'layout'\n  | 'template'\n  | 'edit'\n  | 'seo'\n  | 'site'\n  | 'email'\n  | 'campaign'\n  | 'form'\n  | 'experiment'\n  | 'insight'\n  | 'products'\n  | 'crm'\n  | 'onboarding'\n  | 'workflow'\n  | 'logic'\n  | 'text'\n  | 'theme'\n  | 'build'\n  /** A change to a site's header or footer menu, made by code (AGL-3728). */\n  | 'navigation'\n  /** A copy of something a site already has, made by core's duplicate (AGL-3740). */\n  | 'duplicate'\n  /** A change to a site's settings, made by code and saved live (AGL-3748). */\n  | 'settings'\n  /** Folders, tags, alt text and names in a site's media library, made by code and saved live (AGL-3752). */\n  | 'media'\n  /** A change to a site's analytics and advertising tags, made by code and saved live (AGL-3751). */\n  | 'tracking'\n\n/** The union as a value, so a route can validate a body against it. */\nexport const AI_JOB_KINDS: readonly AiJobKind[] = [\n  'page',\n  'component',\n  'layout',\n  'template',\n  'edit',\n  'seo',\n  'site',\n  'email',\n  'campaign',\n  'form',\n  'experiment',\n  'insight',\n  'products',\n  'crm',\n  'onboarding',\n  'workflow',\n  'logic',\n  'text',\n  'theme',\n  'build',\n  'navigation',\n  'duplicate',\n  'settings',\n  'media',\n  'tracking',\n]\n\n/**\n * `queued` — waiting for a runner; `running` — a step holds the lease;\n * `needs_input` — the job stopped for something only the workspace can\n * change (credits, a cap, a switch), and the beat tries it again once that\n * may have changed; `needs_review` — the job stopped for a person's decision\n * (AGL-2935): its plan is ready to confirm, or an answer broke a building\n * rule on its re-ask. No timer can make that decision, so neither the beat\n * nor anything but that person resumes it. The last three are terminal.\n */\nexport type AiJobStatus =\n  | 'queued'\n  | 'running'\n  | 'needs_input'\n  | 'needs_review'\n  | 'done'\n  | 'failed'\n  | 'canceled'\n\nexport const AI_JOB_TERMINAL_STATUSES: readonly AiJobStatus[] = [\n  'done',\n  'failed',\n  'canceled',\n]\n\nexport type AiJobStepStatus = 'pending' | 'running' | 'done' | 'failed'\n\n/** The step a planned kind runs first (AGL-2935): its plan, before anything is built. */\nexport const AI_JOB_PLAN_STEP = 'plan'\n\nexport interface AiJobStep {\n  /** Stable within the job (`plan`, `draft`, `generate`), unique per job. */\n  name: string\n  status: AiJobStepStatus\n  startedAt?: ITimestamp | null\n  endedAt?: ITimestamp | null\n  /** Credits this step has actually cost, at the plan's credit rate. */\n  creditsSpent: number\n  /** Customer-safe only; provider detail goes to the server log. */\n  error?: string | null\n  /**\n   * How many times a runner has been handed this step. A retryable provider\n   * failure hands the step back as `pending`; the count is what stops a\n   * provider outage re-running a step forever.\n   */\n  attempts?: number\n  /**\n   * Passes of a step that works through a list (AGL-2910): each one a\n   * recorded, metered exchange that asked to continue. Attempts count again\n   * from zero after a pass; this count is what bounds the step.\n   */\n  passes?: number\n  /**\n   * What the step's model calls cost in tokens and time (AGL-2937), summed\n   * over every run that reached the provider. Absent on a step none has.\n   */\n  tokens?: AiJobStepTokens\n  /**\n   * The ids the step writes its drafts under, by draft (AGL-3079): minted\n   * when the job is created, so every run of the step names the same drafts.\n   * Absent on a step that writes none; a step that records none names its\n   * drafts by the job's own id.\n   */\n  draftIds?: Partial<Record<AiJobDraftSlot, string>>\n}\n\n/**\n * A draft a job's kind always writes (AGL-3079): a screen, layout, template,\n * form or component; an email design; a campaign; an automation.\n */\nexport type AiJobDraftSlot =\n  | 'screen'\n  | 'layout'\n  | 'template'\n  | 'form'\n  | 'component'\n  | 'email'\n  | 'campaign'\n  | 'workflow'\n\n/**\n * A step's measure (AGL-2937): the four token counts the meter prices, the\n * time spent in the runner, and the model and thinking effort of the last\n * run. The machine writes it beside `creditsSpent`, so what a kind of step\n * costs in tokens is read off the job rather than inferred from the month.\n */\nexport interface AiJobStepTokens {\n  /** Prompt tokens sent uncached. */\n  input: number\n  /** Prompt tokens read from the prompt cache. */\n  cachedRead: number\n  /** Prompt tokens written to the prompt cache. */\n  cacheWrite: number\n  /** Tokens generated, thinking included. */\n  output: number\n  /** The model the last run was served by. */\n  model: string | null\n  /** The thinking effort the last run asked for; `null` when it named none. */\n  effort: AiEffort | null\n  /** Milliseconds spent in the runner, summed over runs. */\n  latencyMs: number\n  /** Runs that reached the provider. */\n  runs: number\n  /**\n   * Why the step's latest runs stopped (AGL-3042), oldest first and the last\n   * run last: each run's stop reason and the tokens it generated, so a pass\n   * cut off at its ceiling reads off the job rather than out of the sums. At\n   * most `AI_JOB_STEP_LAST_RUNS` are kept; absent on a step measured before.\n   */\n  lastRuns?: AiJobStepRunStop[]\n}\n\n/** One run of a step, by why it stopped (AGL-3042). */\nexport interface AiJobStepRunStop {\n  /**\n   * The stop reason of the run's last model call — `tool_use` or `end_turn`\n   * for an answer, `max_tokens` for one cut off at its ceiling, `refusal` —\n   * and `null` when the provider named none.\n   */\n  stopReason: string | null\n  /** Tokens the run generated, over every model call it made. */\n  output: number\n}\n\nexport type AiJobOutputResource =\n  | 'screen'\n  | 'reusableComponent'\n  | 'layout'\n  | 'template'\n  | 'form'\n  | 'emailScreen'\n  | 'campaign'\n  | 'product'\n  | 'experiment'\n  | 'workflow'\n  | 'text'\n  | 'theme'\n  | 'seo'\n  | 'insight'\n  | 'crm'\n  /** A draft another plugin wrote for a build (AGL-3616), named by `draftResource`. */\n  | 'draft'\n  | 'logic'\n  | 'orgAutomation'\n  /** A post a guided start wrote into the site's blog (AGL-3676): a content collection entry. */\n  | 'entry'\n  /** A site's settings a build changed (AGL-3748): saved live, on the host document. */\n  | 'settings'\n  /** Files in a site's media library a build organized (AGL-3752): saved live, on their documents. */\n  | 'media'\n  /** A site's tracking tags a build changed (AGL-3751): saved live, on the host document. */\n  | 'tracking'\n\n/**\n * One thing a job wrote. Addressed by resource and id so the console can\n * build the \"open draft\" link without knowing what the runner did; `text`\n * has no document of its own, so its body rides on the output itself.\n *\n * A `theme` output is a proposal rather than a document (AGL-2938). A site's\n * theme is fields on its host document, and writing those fields is the save\n * the Theme section's editor performs, which a job never does. So the change\n * set rides on the output as `proposal`, and a person puts it in the editor\n * and saves it there, or does not.\n *\n * An `seo` output is a proposal rather than a document (AGL-2910): search\n * listing values for a page or a product, or a site audit's findings and\n * fixes. A screen's listing is served from the screen document itself, so a\n * job never writes it; the values ride on the output as `proposal`, a person\n * puts them in the editor and saves them there, and an audit's content fixes\n * become new versions only when a person applies them.\n *\n * A `crm` output is a proposal too (AGL-2917): a record's summary and next\n * step, an email draft, or an import's column matches. The CRM's own task\n * form, stage route, composer and import drawer are the writes, and a person\n * makes each of them, or does not.\n *\n * A `logic` output is a proposal too (AGL-3603): a site function or variable\n * the Functions & Variables editor opens unsaved. Saving it is the editor's\n * write, which a person makes, or does not.\n *\n * An `orgAutomation` output is a proposal too (AGL-3603): one of the\n * workspace's automations, which the Org automations editor opens unsaved and\n * switched off. `hostId` is `null`: it belongs to no one site.\n */\nexport interface AiJobOutput {\n  resource: AiJobOutputResource\n  id: string\n  /** The unpublished version the job created, where the resource has versions. */\n  versionId?: string | null\n  /** `null` for an output that belongs to the org rather than one site. */\n  hostId: string | null\n  /**\n   * The site's subdomain, which is what a console URL names a site by: the\n   * `[host]` segment resolves by subdomain, so a link built from `hostId`\n   * names no site the console can open.\n   */\n  hostSubdomain?: string | null\n  label: string\n  /** The body of a `text` output. Absent on every other resource. */\n  text?: string\n  /**\n   * The change set of an output a person applies rather than opens — a\n   * `theme` or `seo` proposal — in the shape its job kind's runner defines.\n   */\n  proposal?: Record<string, unknown>\n  /**\n   * What the person decides next about this output, in customer-safe words:\n   * a routing the draft could not store, or part of the brief it could not\n   * build. Absent when there is nothing to decide.\n   */\n  note?: string | null\n  /**\n   * What a first visit is estimated to transfer, as the doctrine measured\n   * the generated document (AGL-2935) — the weight the proposal shows before\n   * anything is applied. Absent where the output is not a page's document.\n   */\n  load?: AiLoadEstimate | null\n  /**\n   * For a `draft` output (AGL-3616): the resource whose owner wrote it, as\n   * its writer is registered on the resource-draft seam.\n   */\n  draftResource?: string\n}\n\nexport interface AiJobLease {\n  /** The process that holds the step: a route request id or a beat id. */\n  owner: string\n  until: ITimestamp\n}\n\n/** Why a job stopped for a person (AGL-2935). */\nexport type AiJobReviewReason =\n  /** The plan step proposed a plan; generation waits for it to be confirmed. */\n  | 'plan'\n  /** An answer broke a building rule, and so did the answer to the re-ask. */\n  | 'doctrine'\n  /**\n   * The site is at an allowance its plan sets for what the step writes, such\n   * as its shared layouts or its templates (AGL-2909). Freeing one, or a plan\n   * that holds more, is the member's decision; trying again runs the step\n   * again.\n   */\n  | 'limit'\n\n/**\n * A building rule an answer broke, as the job keeps it: the number, the code,\n * the sentence, and where in the answer it was broken (AGL-3078).\n */\nexport interface AiJobRuleFinding {\n  rule: number | null\n  code: string\n  /** Customer-safe. */\n  message: string\n  /** The nodes the finding names, by the ids the refused answer gave them. Absent when it names none. */\n  nodeIds?: string[]\n  /** The plan entries or answer fields it names, as `screens[0].sections[2]`. Absent when it names none. */\n  paths?: string[]\n}\n\n/**\n * One node of the parts of a refused answer its findings name (AGL-3078), as\n * the review keeps it: the node's place, its element and the names of what it\n * sets, and never its copy. A Grid keeps the values of its layout props as\n * they were written, so a review can tell a shape the rules refuse from one\n * the model was asked to mend and did not.\n */\nexport interface AiJobReviewOutlineNode {\n  /** The node's id, as the refused answer wrote it. */\n  id: string\n  /** How far below a node a finding names it sits: 0 for that node. */\n  depth: number\n  componentId: string\n  /** The props it sets, by name only. */\n  props: string[]\n  /** The `sx` keys it sets, by name only; absent when it sets none. */\n  sx?: string[]\n  /** A Grid's layout props, `container`, `size`, `direction`, `spacing` and the rest, as written. */\n  grid?: Record<string, string | number | boolean | null>\n  /** Its children's element ids, in order. */\n  children: string[]\n}\n\nexport interface AiJobReview {\n  reason: AiJobReviewReason\n  /** Customer-safe: what the person is asked to decide. */\n  message: string\n  /** The rules the last answer broke; empty for a plan. */\n  findings: AiJobRuleFinding[]\n  /**\n   * The parts of the refused answer its findings name, each node with the\n   * nodes below it (AGL-3078); absent when they name none. Kept with the job\n   * for diagnosis, and shown to staff.\n   */\n  outline?: AiJobReviewOutlineNode[]\n  /**\n   * The checks' own sentence, where `message` was written for the member\n   * instead (AGL-3594): rule numbers and all, for staff. Its presence is what\n   * tells the drawer the findings are staff reading too.\n   */\n  detail?: string\n  /**\n   * Why trying again cannot work yet (AGL-3594) — the Free allowance left is\n   * less than the step can cost — or absent when it can. The button is drawn\n   * disabled with this beside it.\n   */\n  retryRefusal?: string\n  /**\n   * What a Free workspace had left when a build's plan was kept (AGL-3722),\n   * so its plan card says, before Confirm, whether the build fits and offers\n   * the go-ahead or a smaller first build when it does not. The confirm door\n   * reads what is left again; this is what the card shows.\n   */\n  freeCredits?: AiFreeCreditsLeft\n}\n\nexport type AiJobPlanStatus = 'proposed' | 'confirmed'\n\n/** The plan a job builds from, as the job keeps it once its plan step proposed it. */\nexport interface AiJobPlan extends AiBuildPlan {\n  status: AiJobPlanStatus\n  /** Names for the inventory ids the plan references, read when it was made. */\n  labels: Record<string, string>\n  proposedAt: ITimestamp\n  confirmedAt: ITimestamp | null\n  /** The member who confirmed it. */\n  confirmedBy: string | null\n  /**\n   * A digest of the whole request that produced this plan (AGL-2937): the\n   * job's kind, site, brief and scalar inputs, the model that answered, and\n   * the prompt as it was rendered — the site inventory included. A later job\n   * whose request hashes the same reuses this plan rather than paying for the\n   * same answer again. A hash of the request, never of the answer, and no\n   * part of the brief is recoverable from it.\n   */\n  key?: string\n  /** The job this plan was reused from, when it was not asked for again. */\n  reusedFrom?: string\n}\n\n/**\n * Where one item of a `build` job stands (AGL-3616). A build settles item by\n * item: a failed item gives back its own spend and the rest of the plan still\n * runs, so the job keeps one row per item, written only by the machine's\n * `recordStep` — in the same transaction as the spend it accounts for — and\n * by the resume door's retry.\n */\nexport type AiJobItemStatus = 'pending' | 'running' | 'succeeded' | 'degraded' | 'failed' | 'skipped'\n\n/** Why an item failed: a give-back reason when it was ours, else the model's refusal or a review. */\nexport type AiJobItemFailureReason =\n  | 'plan-refused'\n  | 'doctrine-refused'\n  | 'provider'\n  | 'timeout'\n  | 'step-failure'\n  | 'unavailable'\n  | 'refused'\n  | 'review'\n\nexport interface AiJobItemFailure {\n  /** Whether the failure was on our side: only then is the item's spend given back. */\n  ours: boolean\n  reason: AiJobItemFailureReason\n  /** Customer-safe. */\n  message: string\n  /**\n   * The checks' own sentence behind a `doctrine-refused` failure (AGL-3596),\n   * rule numbers and all: kept on the job for staff and debugging, never on\n   * the wire a customer reads.\n   */\n  detail?: string\n}\n\nexport interface AiJobItemLedger {\n  /** The unit's slot within the plan: `c0` a creation, `p0` a page, `i0` an item. */\n  slot: string\n  /** The capability operation that builds it: `page`, `form`, or an owner's op. */\n  op: string\n  /** What a person reads: the page's title, the creation's or item's name. */\n  label: string\n  status: AiJobItemStatus\n  /** Bumped by Try again; the refund key names it, so each attempt gives back once. */\n  attempt: number\n  /** What this item's passes cost, every attempt. */\n  creditsSpent: number\n  /** What this attempt's passes cost so far: what a failure of this attempt gives back. */\n  attemptCredits?: number\n  /** What was given back for this item's failures. */\n  creditsRefunded: number\n  /** The key the latest give-back for this item was made under. */\n  refundKey?: string\n  failure?: AiJobItemFailure | null\n  /** The ids of the outputs this item produced. */\n  outputs: string[]\n  /** The slots whose failure changed how this item was built. */\n  degradedBy?: string[]\n  /** Customer-safe: what the person should know about this item. */\n  note?: string | null\n  /**\n   * When this attempt settled, as an ISO string (AGL-3596): the moment the\n   * next item started, which is what its progress row counts from. Absent\n   * while the item is open, and on a ledger written before it was kept.\n   */\n  settledAt?: string | null\n}\n\n/** Whether a build's own planning was charged or given back (AGL-3616). */\nexport interface AiJobOrchestration {\n  /** What the plan step spent. */\n  creditsSpent: number\n  /** `charged` once anything was delivered; `refunded` when nothing was. */\n  settled: 'pending' | 'charged' | 'refunded'\n}\n\nexport interface AiJob {\n  $id: string\n  orgId: string\n  hostId?: string | null\n  kind: AiJobKind\n  status: AiJobStatus\n  /** The customer's brief, verbatim. Expires with the document. */\n  brief: string\n  /** Kind-specific inputs the runner reads (a screen id to edit, a tone). */\n  inputs: Record<string, unknown>\n  /**\n   * The model the creator picked for the job's steps (AGL-2942), or `null`\n   * for Auto. Each step honors it only where the plan and the allotment\n   * allowlists allow it, and runs on the routing table otherwise.\n   */\n  model?: string | null\n  steps: AiJobStep[]\n  outputs: AiJobOutput[]\n  /**\n   * The nominal credit figure held against the job while steps are\n   * outstanding. The meter's real bound is the per-step message reservation\n   * and the org's monthly ceiling; this is the number the console shows so\n   * a running job is not read as free.\n   */\n  creditsReserved: number\n  creditsSpent: number\n  /**\n   * Credits the job gave back because it failed on our side (AGL-3594),\n   * summed over its give-backs; absent when it gave none. `creditsSpent`\n   * stays what ran, so what the job cost is the one less the other.\n   */\n  refundedCredits?: number\n  /** Why the latest give-back was made (`AiJobRefundReason`). */\n  refundReason?: string\n  /** How many give-backs the job has had: the next one's key. */\n  refunds?: number\n  createdBy: string\n  createdAt: ITimestamp\n  updatedAt: ITimestamp\n  /** TTL — the brief is verbatim customer text and expires like an exchange. */\n  expiresAt: ITimestamp\n  /** Customer-safe only. */\n  error?: string | null\n  lease?: AiJobLease | null\n  /** The plan the job builds from, once its plan step proposed one. */\n  plan?: AiJobPlan | null\n  /** What the person is asked to decide while the job is `needs_review`. */\n  review?: AiJobReview | null\n  /**\n   * What a person applied from the job's outputs (AGL-2910). Written by the\n   * door that applied them, never by a step runner, and absent until then.\n   */\n  applied?: AiJobApplied | null\n  /**\n   * What a guided site start put live when it finished (AGL-3596): written\n   * once by the site step's last pass, never by a person. Absent on every\n   * other job, which leaves its pages as drafts.\n   */\n  sitePublish?: AiJobSitePublish | null\n  /** A `build` job's items, one row each (AGL-3616); absent on every other kind. */\n  items?: AiJobItemLedger[] | null\n  /** A `build` job's planning spend and how it settled (AGL-3616). */\n  orchestration?: AiJobOrchestration | null\n  /**\n   * A Free job started past what was left (AGL-3722): the person chose to\n   * build what fits, knowing it pauses where the credits run out. Who, when,\n   * what was left and the range they were shown; absent on every job that fit.\n   */\n  creditsConfirmed?: AiJobCreditsConfirmation | null\n  /**\n   * A person asked to stop the job (AGL-3616): written only by the cancel\n   * door, in the transaction that decides it. A job no step holds ends\n   * `canceled` in that same write; a job whose step holds a live lease keeps\n   * running until the step finishes or aborts, and the machine ends it\n   * `canceled` at its next write. Absent on a job nobody canceled.\n   */\n  cancelRequested?: AiJobCancelRequest | null\n}\n\n/** Who asked to cancel a job, and when (AGL-3616). */\nexport interface AiJobCancelRequest {\n  at: ITimestamp\n  /** The member or staff account that asked; `null` when nobody was named. */\n  by: string | null\n}\n\n/**\n * A guided site start's publish (AGL-3596): the pages that went live, with\n * the address each answers, and the pages that stayed drafts, each with the\n * plain sentence for why. A page that stayed a draft never fails the job.\n */\nexport interface AiJobSitePublish {\n  /** The site's live address, `https://<subdomain>.aglyn.app/`; `null` when the site has no subdomain. */\n  liveUrl: string | null\n  published: Array<{ id: string; label: string; path: string }>\n  drafts: Array<{ id: string; label: string; reason: string }>\n}\n\n/**\n * The record of an apply (AGL-2910): what became a new unpublished version,\n * and what waits in its editor for a person to save.\n */\nexport interface AiJobApplied {\n  at: ITimestamp\n  /** The member who applied. */\n  by: string\n  /** The new version opened for each resource, by resource id. */\n  versions: Record<string, string>\n  /** Resource ids whose proposed values wait in their editor, unsaved. */\n  staged: string[]\n}\n\n/** The plan on the wire: every instant an ISO string. */\nexport interface AiJobPlanSummary extends AiBuildPlan {\n  status: AiJobPlanStatus\n  labels: Record<string, string>\n  proposedAt: string | null\n  confirmedAt: string | null\n  confirmedBy: string | null\n  key?: string\n  reusedFrom?: string\n}\n\n/**\n * The wire form the console reads: every instant an ISO string, the lease\n * reduced to whether a runner holds the job. The brief and the outputs\n * travel as they are — the reader is a member of the org that wrote them.\n */\nexport interface AiJobSummary {\n  id: string\n  orgId: string\n  hostId: string | null\n  kind: AiJobKind\n  status: AiJobStatus\n  brief: string\n  /**\n   * The batch a door created this job as one of (AGL-2911), read off the\n   * job's inputs; `null` for a job created on its own. The console groups a\n   * run of jobs by it, which is the one thing it cannot do from a list whose\n   * rows carry no inputs — and the only input the wire form carries, because\n   * a batch id names nothing the member wrote.\n   */\n  batch: string | null\n  steps: Array<{\n    name: string\n    status: AiJobStepStatus\n    startedAt: string | null\n    endedAt: string | null\n    creditsSpent: number\n    error: string | null\n  }>\n  outputs: AiJobOutput[]\n  creditsReserved: number\n  creditsSpent: number\n  /** Credits given back for a failure on our side (AGL-3594); 0 when none. */\n  refundedCredits?: number\n  createdBy: string\n  createdAt: string\n  updatedAt: string\n  error: string | null\n  running: boolean\n  plan: AiJobPlanSummary | null\n  review: AiJobReview | null\n  /** What a person applied from the outputs (AGL-2910); instants as ISO strings. */\n  applied?: {\n    at: string | null\n    by: string\n    versions: Record<string, string>\n    staged: string[]\n  } | null\n  /** What a guided site start put live (AGL-3596); absent on every other job. */\n  sitePublish?: AiJobSitePublish | null\n  /**\n   * A site job's answers (AGL-3596): the guided start's questions as the person\n   * answered them, so a failed start's Try again reopens them filled in. The\n   * scalar site inputs only, never anything else a job's inputs carry; absent\n   * on every other kind.\n   */\n  siteInputs?: Record<string, unknown> | null\n  /**\n   * Whether the machine confirms this job's plan itself (AGL-3594): a guided\n   * site start. Its plan parks for the instant the confirmation takes, and a\n   * surface reads that park as the build going on (AGL-3596). Absent on every\n   * other job.\n   */\n  autoConfirm?: boolean\n  /** A `build` job's items (AGL-3616); absent on every other job. */\n  items?: AiJobItemLedger[]\n  /**\n   * Whether a build's request asked to publish (AGL-3616), so its plan card\n   * offers the box that confirms it. Absent on every other job.\n   */\n  publishAsked?: boolean\n  /** A `build` job's planning spend and how it settled (AGL-3616). */\n  orchestration?: AiJobOrchestration\n  /**\n   * A cancel was asked and the job has not ended yet (AGL-3616): the step in\n   * flight is finishing or aborting, and nothing after it runs. Absent once\n   * the job is terminal, and on every job nobody canceled.\n   */\n  cancelRequested?: boolean\n}\n"],"names":["AI_JOB_KINDS","AI_JOB_TERMINAL_STATUSES","AI_JOB_PLAN_STEP"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GA6ED,qEAAqE,GACrE,OAAO,MAAMA,eAAqC;IAChD;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;CACD,CAAA;AAoBD,OAAO,MAAMC,2BAAmD;IAC9D;IACA;IACA;CACD,CAAA;AAID,uFAAuF,GACvF,OAAO,MAAMC,mBAAmB,OAAM"}
+{"version":3,"sources":["../../../../../../../libs/plugins/ai/src/lib/model/ai-jobs.types.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport type { ITimestamp } from '@aglyn/shared-util-timestamp'\nimport type { AiEffort } from '../providers/contract'\nimport type { AiLoadEstimate } from '../runtime/ai-palette'\nimport type { AiBuildPlan } from './ai-build-plan'\nimport type { AiFreeCreditsLeft } from './ai-site-job'\nimport type { AiJobCreditsConfirmation } from './ai-credit-estimate'\n\n/**\n * AI generation jobs (AGL-2904).\n *\n * A job is one customer brief carried through one or more model steps by a\n * Firestore state machine, so that work longer than a request can survive\n * the request: the console route runs what it can inline, and the platform\n * job beat resumes whatever is left. The document is the whole state — no\n * process holds anything the next beat cannot read back.\n *\n * ── Outputs are drafts, never a publish ──────────────────────────────────\n *\n * Every output a job produces is a NEW draft or a new unpublished version of\n * an existing resource. A job never flips a version pointer, never registers\n * a route and never sends anything; a person opens the draft the job names\n * and publishes it through the door that already exists for that resource.\n * That is what lets a job run with no visitor, no session and no confirm\n * gate — the thing it writes cannot be seen by anyone but the workspace\n * until a member chooses otherwise.\n *\n * ── The lease ────────────────────────────────────────────────────────────\n *\n * A step runs under a lease: an owner id and an `until` instant. Two beats\n * fire a minute apart against a 120 s function timeout, and a console route\n * may still be running the first step when the first beat looks, so the\n * lease is what stops the same step being run — and metered — twice. A\n * claim is a transaction that refuses while another owner's lease is live;\n * an expired lease is simply claimable, which is also how a step abandoned\n * by a frozen process is recovered.\n */\n\n/**\n * What a job produces. `text` and `theme` have runners; every other kind is\n * registered and refuses with \"not available yet\" until its own issue lands,\n * so a kind's presence in the union says the job model accepts it, not that\n * a runner exists.\n */\nexport type AiJobKind =\n  | 'page'\n  | 'component'\n  | 'layout'\n  | 'template'\n  | 'edit'\n  | 'seo'\n  | 'site'\n  | 'email'\n  | 'campaign'\n  | 'form'\n  | 'experiment'\n  | 'insight'\n  | 'products'\n  | 'crm'\n  | 'onboarding'\n  | 'workflow'\n  | 'logic'\n  | 'text'\n  | 'theme'\n  | 'build'\n  /** A change to a site's header or footer menu, made by code (AGL-3728). */\n  | 'navigation'\n  /** A copy of something a site already has, made by core's duplicate (AGL-3740). */\n  | 'duplicate'\n  /** A change to a site's settings, made by code and saved live (AGL-3748). */\n  | 'settings'\n  /** Folders, tags, alt text and names in a site's media library, made by code and saved live (AGL-3752). */\n  | 'media'\n  /** A change to a site's analytics and advertising tags, made by code and saved live (AGL-3751). */\n  | 'tracking'\n\n/** The union as a value, so a route can validate a body against it. */\nexport const AI_JOB_KINDS: readonly AiJobKind[] = [\n  'page',\n  'component',\n  'layout',\n  'template',\n  'edit',\n  'seo',\n  'site',\n  'email',\n  'campaign',\n  'form',\n  'experiment',\n  'insight',\n  'products',\n  'crm',\n  'onboarding',\n  'workflow',\n  'logic',\n  'text',\n  'theme',\n  'build',\n  'navigation',\n  'duplicate',\n  'settings',\n  'media',\n  'tracking',\n]\n\n/**\n * `queued` — waiting for a runner; `running` — a step holds the lease;\n * `needs_input` — the job stopped for something only the workspace can\n * change (credits, a cap, a switch), and the beat tries it again once that\n * may have changed; `needs_review` — the job stopped for a person's decision\n * (AGL-2935): its plan is ready to confirm, or an answer broke a building\n * rule on its re-ask. No timer can make that decision, so neither the beat\n * nor anything but that person resumes it. The last three are terminal.\n */\nexport type AiJobStatus =\n  | 'queued'\n  | 'running'\n  | 'needs_input'\n  | 'needs_review'\n  | 'done'\n  | 'failed'\n  | 'canceled'\n\nexport const AI_JOB_TERMINAL_STATUSES: readonly AiJobStatus[] = [\n  'done',\n  'failed',\n  'canceled',\n]\n\nexport type AiJobStepStatus = 'pending' | 'running' | 'done' | 'failed'\n\n/** The step a planned kind runs first (AGL-2935): its plan, before anything is built. */\nexport const AI_JOB_PLAN_STEP = 'plan'\n\nexport interface AiJobStep {\n  /** Stable within the job (`plan`, `draft`, `generate`), unique per job. */\n  name: string\n  status: AiJobStepStatus\n  startedAt?: ITimestamp | null\n  endedAt?: ITimestamp | null\n  /** Credits this step has actually cost, at the plan's credit rate. */\n  creditsSpent: number\n  /** Customer-safe only; provider detail goes to the server log. */\n  error?: string | null\n  /**\n   * How many times a runner has been handed this step. A retryable provider\n   * failure hands the step back as `pending`; the count is what stops a\n   * provider outage re-running a step forever.\n   */\n  attempts?: number\n  /**\n   * Passes of a step that works through a list (AGL-2910): each one a\n   * recorded, metered exchange that asked to continue. Attempts count again\n   * from zero after a pass; this count is what bounds the step.\n   */\n  passes?: number\n  /**\n   * What the step's model calls cost in tokens and time (AGL-2937), summed\n   * over every run that reached the provider. Absent on a step none has.\n   */\n  tokens?: AiJobStepTokens\n  /**\n   * The ids the step writes its drafts under, by draft (AGL-3079): minted\n   * when the job is created, so every run of the step names the same drafts.\n   * Absent on a step that writes none; a step that records none names its\n   * drafts by the job's own id.\n   */\n  draftIds?: Partial<Record<AiJobDraftSlot, string>>\n}\n\n/**\n * A draft a job's kind always writes (AGL-3079): a screen, layout, template,\n * form or component; an email design; a campaign; an automation.\n */\nexport type AiJobDraftSlot =\n  | 'screen'\n  | 'layout'\n  | 'template'\n  | 'form'\n  | 'component'\n  | 'email'\n  | 'campaign'\n  | 'workflow'\n\n/**\n * A step's measure (AGL-2937): the four token counts the meter prices, the\n * time spent in the runner, and the model and thinking effort of the last\n * run. The machine writes it beside `creditsSpent`, so what a kind of step\n * costs in tokens is read off the job rather than inferred from the month.\n */\nexport interface AiJobStepTokens {\n  /** Prompt tokens sent uncached. */\n  input: number\n  /** Prompt tokens read from the prompt cache. */\n  cachedRead: number\n  /** Prompt tokens written to the prompt cache. */\n  cacheWrite: number\n  /** Tokens generated, thinking included. */\n  output: number\n  /** The model the last run was served by. */\n  model: string | null\n  /** The thinking effort the last run asked for; `null` when it named none. */\n  effort: AiEffort | null\n  /** Milliseconds spent in the runner, summed over runs. */\n  latencyMs: number\n  /** Runs that reached the provider. */\n  runs: number\n  /**\n   * Why the step's latest runs stopped (AGL-3042), oldest first and the last\n   * run last: each run's stop reason and the tokens it generated, so a pass\n   * cut off at its ceiling reads off the job rather than out of the sums. At\n   * most `AI_JOB_STEP_LAST_RUNS` are kept; absent on a step measured before.\n   */\n  lastRuns?: AiJobStepRunStop[]\n}\n\n/** One run of a step, by why it stopped (AGL-3042). */\nexport interface AiJobStepRunStop {\n  /**\n   * The stop reason of the run's last model call — `tool_use` or `end_turn`\n   * for an answer, `max_tokens` for one cut off at its ceiling, `refusal` —\n   * and `null` when the provider named none.\n   */\n  stopReason: string | null\n  /** Tokens the run generated, over every model call it made. */\n  output: number\n}\n\nexport type AiJobOutputResource =\n  | 'screen'\n  | 'reusableComponent'\n  | 'layout'\n  | 'template'\n  | 'form'\n  | 'emailScreen'\n  | 'campaign'\n  | 'product'\n  | 'experiment'\n  | 'workflow'\n  | 'text'\n  | 'theme'\n  | 'seo'\n  | 'insight'\n  | 'crm'\n  /** A draft another plugin wrote for a build (AGL-3616), named by `draftResource`. */\n  | 'draft'\n  | 'logic'\n  | 'orgAutomation'\n  /** A post a guided start wrote into the site's blog (AGL-3676): a content collection entry. */\n  | 'entry'\n  /** A site's settings a build changed (AGL-3748): saved live, on the host document. */\n  | 'settings'\n  /** Files in a site's media library a build organized (AGL-3752): saved live, on their documents. */\n  | 'media'\n  /** A site's tracking tags a build changed (AGL-3751): saved live, on the host document. */\n  | 'tracking'\n\n/**\n * One thing a job wrote. Addressed by resource and id so the console can\n * build the \"open draft\" link without knowing what the runner did; `text`\n * has no document of its own, so its body rides on the output itself.\n *\n * A `theme` output is a proposal rather than a document (AGL-2938). A site's\n * theme is fields on its host document, and writing those fields is the save\n * the Theme section's editor performs, which a job never does. So the change\n * set rides on the output as `proposal`, and a person puts it in the editor\n * and saves it there, or does not.\n *\n * An `seo` output is a proposal rather than a document (AGL-2910): search\n * listing values for a page or a product, or a site audit's findings and\n * fixes. A screen's listing is served from the screen document itself, so a\n * job never writes it; the values ride on the output as `proposal`, a person\n * puts them in the editor and saves them there, and an audit's content fixes\n * become new versions only when a person applies them.\n *\n * A `crm` output is a proposal too (AGL-2917): a record's summary and next\n * step, an email draft, or an import's column matches. The CRM's own task\n * form, stage route, composer and import drawer are the writes, and a person\n * makes each of them, or does not.\n *\n * A `logic` output is a proposal too (AGL-3603): a site function or variable\n * the Functions & Variables editor opens unsaved. Saving it is the editor's\n * write, which a person makes, or does not.\n *\n * An `orgAutomation` output is a proposal too (AGL-3603): one of the\n * workspace's automations, which the Org automations editor opens unsaved and\n * switched off. `hostId` is `null`: it belongs to no one site.\n */\nexport interface AiJobOutput {\n  resource: AiJobOutputResource\n  id: string\n  /** The unpublished version the job created, where the resource has versions. */\n  versionId?: string | null\n  /** `null` for an output that belongs to the org rather than one site. */\n  hostId: string | null\n  /**\n   * The site's subdomain, which is what a console URL names a site by: the\n   * `[host]` segment resolves by subdomain, so a link built from `hostId`\n   * names no site the console can open.\n   */\n  hostSubdomain?: string | null\n  label: string\n  /** The body of a `text` output. Absent on every other resource. */\n  text?: string\n  /**\n   * The change set of an output a person applies rather than opens — a\n   * `theme` or `seo` proposal — in the shape its job kind's runner defines.\n   */\n  proposal?: Record<string, unknown>\n  /**\n   * What the person decides next about this output, in customer-safe words:\n   * a routing the draft could not store, or part of the brief it could not\n   * build. Absent when there is nothing to decide.\n   */\n  note?: string | null\n  /**\n   * What a first visit is estimated to transfer, as the doctrine measured\n   * the generated document (AGL-2935) — the weight the proposal shows before\n   * anything is applied. Absent where the output is not a page's document.\n   */\n  load?: AiLoadEstimate | null\n  /**\n   * For a `draft` output (AGL-3616): the resource whose owner wrote it, as\n   * its writer is registered on the resource-draft seam.\n   */\n  draftResource?: string\n}\n\nexport interface AiJobLease {\n  /** The process that holds the step: a route request id or a beat id. */\n  owner: string\n  until: ITimestamp\n}\n\n/** Why a job stopped for a person (AGL-2935). */\nexport type AiJobReviewReason =\n  /** The plan step proposed a plan; generation waits for it to be confirmed. */\n  | 'plan'\n  /** An answer broke a building rule, and so did the answer to the re-ask. */\n  | 'doctrine'\n  /**\n   * The site is at an allowance its plan sets for what the step writes, such\n   * as its shared layouts or its templates (AGL-2909). Freeing one, or a plan\n   * that holds more, is the member's decision; trying again runs the step\n   * again.\n   */\n  | 'limit'\n\n/**\n * A building rule an answer broke, as the job keeps it: the number, the code,\n * the sentence, and where in the answer it was broken (AGL-3078).\n */\nexport interface AiJobRuleFinding {\n  rule: number | null\n  code: string\n  /** Customer-safe. */\n  message: string\n  /** The nodes the finding names, by the ids the refused answer gave them. Absent when it names none. */\n  nodeIds?: string[]\n  /** The plan entries or answer fields it names, as `screens[0].sections[2]`. Absent when it names none. */\n  paths?: string[]\n}\n\n/**\n * One node of the parts of a refused answer its findings name (AGL-3078), as\n * the review keeps it: the node's place, its element and the names of what it\n * sets, and never its copy. A Grid keeps the values of its layout props as\n * they were written, so a review can tell a shape the rules refuse from one\n * the model was asked to mend and did not.\n */\nexport interface AiJobReviewOutlineNode {\n  /** The node's id, as the refused answer wrote it. */\n  id: string\n  /** How far below a node a finding names it sits: 0 for that node. */\n  depth: number\n  componentId: string\n  /** The props it sets, by name only. */\n  props: string[]\n  /** The `sx` keys it sets, by name only; absent when it sets none. */\n  sx?: string[]\n  /** A Grid's layout props, `container`, `size`, `direction`, `spacing` and the rest, as written. */\n  grid?: Record<string, string | number | boolean | null>\n  /** Its children's element ids, in order. */\n  children: string[]\n}\n\nexport interface AiJobReview {\n  reason: AiJobReviewReason\n  /** Customer-safe: what the person is asked to decide. */\n  message: string\n  /** The rules the last answer broke; empty for a plan. */\n  findings: AiJobRuleFinding[]\n  /**\n   * The parts of the refused answer its findings name, each node with the\n   * nodes below it (AGL-3078); absent when they name none. Kept with the job\n   * for diagnosis, and shown to staff.\n   */\n  outline?: AiJobReviewOutlineNode[]\n  /**\n   * The checks' own sentence, where `message` was written for the member\n   * instead (AGL-3594): rule numbers and all, for staff. Its presence is what\n   * tells the drawer the findings are staff reading too.\n   */\n  detail?: string\n  /**\n   * Why trying again cannot work yet (AGL-3594) — the Free allowance left is\n   * less than the step can cost — or absent when it can. The button is drawn\n   * disabled with this beside it.\n   */\n  retryRefusal?: string\n  /**\n   * What a Free workspace had left when a build's plan was kept (AGL-3722),\n   * so its plan card says, before Confirm, whether the build fits and offers\n   * the go-ahead or a smaller first build when it does not. The confirm door\n   * reads what is left again; this is what the card shows.\n   */\n  freeCredits?: AiFreeCreditsLeft\n}\n\nexport type AiJobPlanStatus = 'proposed' | 'confirmed'\n\n/** The plan a job builds from, as the job keeps it once its plan step proposed it. */\nexport interface AiJobPlan extends AiBuildPlan {\n  status: AiJobPlanStatus\n  /** Names for the inventory ids the plan references, read when it was made. */\n  labels: Record<string, string>\n  proposedAt: ITimestamp\n  confirmedAt: ITimestamp | null\n  /** The member who confirmed it. */\n  confirmedBy: string | null\n  /**\n   * A digest of the whole request that produced this plan (AGL-2937): the\n   * job's kind, site, brief and scalar inputs, the model that answered, and\n   * the prompt as it was rendered — the site inventory included. A later job\n   * whose request hashes the same reuses this plan rather than paying for the\n   * same answer again. A hash of the request, never of the answer, and no\n   * part of the brief is recoverable from it.\n   */\n  key?: string\n  /** The job this plan was reused from, when it was not asked for again. */\n  reusedFrom?: string\n}\n\n/**\n * Where one item of a `build` job stands (AGL-3616). A build settles item by\n * item: a failed item gives back its own spend and the rest of the plan still\n * runs, so the job keeps one row per item, written only by the machine's\n * `recordStep` — in the same transaction as the spend it accounts for — and\n * by the resume door's retry.\n */\nexport type AiJobItemStatus = 'pending' | 'running' | 'succeeded' | 'degraded' | 'failed' | 'skipped'\n\n/** Why an item failed: a give-back reason when it was ours, else the model's refusal or a review. */\nexport type AiJobItemFailureReason =\n  | 'plan-refused'\n  | 'doctrine-refused'\n  | 'provider'\n  | 'timeout'\n  | 'step-failure'\n  | 'unavailable'\n  | 'refused'\n  | 'review'\n\nexport interface AiJobItemFailure {\n  /** Whether the failure was on our side: only then is the item's spend given back. */\n  ours: boolean\n  reason: AiJobItemFailureReason\n  /** Customer-safe. */\n  message: string\n  /**\n   * The checks' own sentence behind a `doctrine-refused` failure (AGL-3596),\n   * rule numbers and all: kept on the job for staff and debugging, never on\n   * the wire a customer reads.\n   */\n  detail?: string\n}\n\nexport interface AiJobItemLedger {\n  /** The unit's slot within the plan: `c0` a creation, `p0` a page, `i0` an item. */\n  slot: string\n  /** The capability operation that builds it: `page`, `form`, or an owner's op. */\n  op: string\n  /** What a person reads: the page's title, the creation's or item's name. */\n  label: string\n  status: AiJobItemStatus\n  /** Bumped by Try again; the refund key names it, so each attempt gives back once. */\n  attempt: number\n  /** What this item's passes cost, every attempt. */\n  creditsSpent: number\n  /** What this attempt's passes cost so far: what a failure of this attempt gives back. */\n  attemptCredits?: number\n  /** What was given back for this item's failures. */\n  creditsRefunded: number\n  /** The key the latest give-back for this item was made under. */\n  refundKey?: string\n  failure?: AiJobItemFailure | null\n  /** The ids of the outputs this item produced. */\n  outputs: string[]\n  /** The slots whose failure changed how this item was built. */\n  degradedBy?: string[]\n  /** Customer-safe: what the person should know about this item. */\n  note?: string | null\n  /**\n   * When this attempt settled, as an ISO string (AGL-3596): the moment the\n   * next item started, which is what its progress row counts from. Absent\n   * while the item is open, and on a ledger written before it was kept.\n   */\n  settledAt?: string | null\n}\n\n/** Whether a build's own planning was charged or given back (AGL-3616). */\nexport interface AiJobOrchestration {\n  /** What the plan step spent. */\n  creditsSpent: number\n  /** `charged` once anything was delivered; `refunded` when nothing was. */\n  settled: 'pending' | 'charged' | 'refunded'\n}\n\nexport interface AiJob {\n  $id: string\n  orgId: string\n  hostId?: string | null\n  kind: AiJobKind\n  status: AiJobStatus\n  /** The customer's brief, verbatim. Expires with the document. */\n  brief: string\n  /** Kind-specific inputs the runner reads (a screen id to edit, a tone). */\n  inputs: Record<string, unknown>\n  /**\n   * The model the creator picked for the job's steps (AGL-2942), or `null`\n   * for Auto. Each step honors it only where the plan and the allotment\n   * allowlists allow it, and runs on the routing table otherwise.\n   */\n  model?: string | null\n  steps: AiJobStep[]\n  outputs: AiJobOutput[]\n  /**\n   * The nominal credit figure held against the job while steps are\n   * outstanding. The meter's real bound is the per-step message reservation\n   * and the org's monthly ceiling; this is the number the console shows so\n   * a running job is not read as free.\n   */\n  creditsReserved: number\n  creditsSpent: number\n  /**\n   * Credits the job gave back because it failed on our side (AGL-3594),\n   * summed over its give-backs; absent when it gave none. `creditsSpent`\n   * stays what ran, so what the job cost is the one less the other.\n   */\n  refundedCredits?: number\n  /** Why the latest give-back was made (`AiJobRefundReason`). */\n  refundReason?: string\n  /** How many give-backs the job has had: the next one's key. */\n  refunds?: number\n  createdBy: string\n  createdAt: ITimestamp\n  updatedAt: ITimestamp\n  /** TTL — the brief is verbatim customer text and expires like an exchange. */\n  expiresAt: ITimestamp\n  /** Customer-safe only. */\n  error?: string | null\n  lease?: AiJobLease | null\n  /** The plan the job builds from, once its plan step proposed one. */\n  plan?: AiJobPlan | null\n  /** What the person is asked to decide while the job is `needs_review`. */\n  review?: AiJobReview | null\n  /**\n   * What a person applied from the job's outputs (AGL-2910). Written by the\n   * door that applied them, never by a step runner, and absent until then.\n   */\n  applied?: AiJobApplied | null\n  /**\n   * What a guided site start put live when it finished (AGL-3596): written\n   * once by the site step's last pass, never by a person. Absent on every\n   * other job, which leaves its pages as drafts.\n   */\n  sitePublish?: AiJobSitePublish | null\n  /** A `build` job's items, one row each (AGL-3616); absent on every other kind. */\n  items?: AiJobItemLedger[] | null\n  /** A `build` job's planning spend and how it settled (AGL-3616). */\n  orchestration?: AiJobOrchestration | null\n  /**\n   * A Free job started past what was left (AGL-3722): the person chose to\n   * build what fits, knowing it pauses where the credits run out. Who, when,\n   * what was left and the range they were shown; absent on every job that fit.\n   */\n  creditsConfirmed?: AiJobCreditsConfirmation | null\n  /**\n   * A person asked to stop the job (AGL-3616): written only by the cancel\n   * door, in the transaction that decides it. A job no step holds ends\n   * `canceled` in that same write; a job whose step holds a live lease keeps\n   * running until the step finishes or aborts, and the machine ends it\n   * `canceled` at its next write. Absent on a job nobody canceled.\n   */\n  cancelRequested?: AiJobCancelRequest | null\n  /**\n   * The empty site this guided start was for was removed (AGL-3936): the\n   * job was cancelled or failed before it built anything, nobody chose what\n   * to do next within the grace period, and the AI jobs beat deleted the\n   * site. Written once, by the beat, after the site is gone. Absent on every\n   * other job.\n   */\n  siteRemoved?: AiJobSiteRemoved | null\n}\n\n/** When the AI jobs beat removed a guided start's empty site, and which (AGL-3936). */\nexport interface AiJobSiteRemoved {\n  at: ITimestamp\n  /** The site's name as it was, for a sentence that names it. */\n  name: string | null\n}\n\n/** Who asked to cancel a job, and when (AGL-3616). */\nexport interface AiJobCancelRequest {\n  at: ITimestamp\n  /** The member or staff account that asked; `null` when nobody was named. */\n  by: string | null\n}\n\n/**\n * A guided site start's publish (AGL-3596): the pages that went live, with\n * the address each answers, and the pages that stayed drafts, each with the\n * plain sentence for why. A page that stayed a draft never fails the job.\n */\nexport interface AiJobSitePublish {\n  /** The site's live address, `https://<subdomain>.aglyn.app/`; `null` when the site has no subdomain. */\n  liveUrl: string | null\n  published: Array<{ id: string; label: string; path: string }>\n  drafts: Array<{ id: string; label: string; reason: string }>\n}\n\n/**\n * The record of an apply (AGL-2910): what became a new unpublished version,\n * and what waits in its editor for a person to save.\n */\nexport interface AiJobApplied {\n  at: ITimestamp\n  /** The member who applied. */\n  by: string\n  /** The new version opened for each resource, by resource id. */\n  versions: Record<string, string>\n  /** Resource ids whose proposed values wait in their editor, unsaved. */\n  staged: string[]\n}\n\n/** The plan on the wire: every instant an ISO string. */\nexport interface AiJobPlanSummary extends AiBuildPlan {\n  status: AiJobPlanStatus\n  labels: Record<string, string>\n  proposedAt: string | null\n  confirmedAt: string | null\n  confirmedBy: string | null\n  key?: string\n  reusedFrom?: string\n}\n\n/**\n * The wire form the console reads: every instant an ISO string, the lease\n * reduced to whether a runner holds the job. The brief and the outputs\n * travel as they are — the reader is a member of the org that wrote them.\n */\nexport interface AiJobSummary {\n  id: string\n  orgId: string\n  hostId: string | null\n  kind: AiJobKind\n  status: AiJobStatus\n  brief: string\n  /**\n   * The batch a door created this job as one of (AGL-2911), read off the\n   * job's inputs; `null` for a job created on its own. The console groups a\n   * run of jobs by it, which is the one thing it cannot do from a list whose\n   * rows carry no inputs — and the only input the wire form carries, because\n   * a batch id names nothing the member wrote.\n   */\n  batch: string | null\n  steps: Array<{\n    name: string\n    status: AiJobStepStatus\n    startedAt: string | null\n    endedAt: string | null\n    creditsSpent: number\n    error: string | null\n  }>\n  outputs: AiJobOutput[]\n  creditsReserved: number\n  creditsSpent: number\n  /** Credits given back for a failure on our side (AGL-3594); 0 when none. */\n  refundedCredits?: number\n  createdBy: string\n  createdAt: string\n  updatedAt: string\n  error: string | null\n  running: boolean\n  plan: AiJobPlanSummary | null\n  review: AiJobReview | null\n  /** What a person applied from the outputs (AGL-2910); instants as ISO strings. */\n  applied?: {\n    at: string | null\n    by: string\n    versions: Record<string, string>\n    staged: string[]\n  } | null\n  /** What a guided site start put live (AGL-3596); absent on every other job. */\n  sitePublish?: AiJobSitePublish | null\n  /**\n   * A site job's answers (AGL-3596): the guided start's questions as the person\n   * answered them, so a failed start's Try again reopens them filled in. The\n   * scalar site inputs only, never anything else a job's inputs carry; absent\n   * on every other kind.\n   */\n  siteInputs?: Record<string, unknown> | null\n  /**\n   * Whether the machine confirms this job's plan itself (AGL-3594): a guided\n   * site start. Its plan parks for the instant the confirmation takes, and a\n   * surface reads that park as the build going on (AGL-3596). Absent on every\n   * other job.\n   */\n  autoConfirm?: boolean\n  /** A `build` job's items (AGL-3616); absent on every other job. */\n  items?: AiJobItemLedger[]\n  /**\n   * Whether a build's request asked to publish (AGL-3616), so its plan card\n   * offers the box that confirms it. Absent on every other job.\n   */\n  publishAsked?: boolean\n  /** A `build` job's planning spend and how it settled (AGL-3616). */\n  orchestration?: AiJobOrchestration\n  /**\n   * A cancel was asked and the job has not ended yet (AGL-3616): the step in\n   * flight is finishing or aborting, and nothing after it runs. Absent once\n   * the job is terminal, and on every job nobody canceled.\n   */\n  cancelRequested?: boolean\n  /**\n   * The empty site this guided start was for was removed (AGL-3936): its\n   * page is gone, and Start again opens Create site with the same answers.\n   * Absent on every other job.\n   */\n  siteRemoved?: boolean\n}\n"],"names":["AI_JOB_KINDS","AI_JOB_TERMINAL_STATUSES","AI_JOB_PLAN_STEP"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GA6ED,qEAAqE,GACrE,OAAO,MAAMA,eAAqC;IAChD;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;CACD,CAAA;AAoBD,OAAO,MAAMC,2BAAmD;IAC9D;IACA;IACA;CACD,CAAA;AAID,uFAAuF,GACvF,OAAO,MAAMC,mBAAmB,OAAM"}

package/src/lib/model/ai-site-look.d.ts

@@ -15,6 +15,7 @@
  * limitations under the License.
  */
 import type { HostTheme, HostThemeSchemeColors } from '@aglyn/shared-data-types';
+import { type AiSiteMotionStyle } from '../layout-language/ai-layout-motion';
 import type { AiTool } from '../runtime/ai-runtime';
 import { type AiSiteBase, type AiSiteButtons, type AiSiteChroma, type AiSiteCorners, type AiSiteDensity, type AiSiteGround, type AiSiteKind, type AiSiteRhythm } from './ai-site-kinds';
 /**
@@ -85,9 +86,15 @@ export interface AiSiteStyle {
     density: AiSiteDensity;
     /** A brand color the brief gave, used as the primary color. */
     brand: string | null;
+    /**
+     * How the site's pages arrive (AGL-3941), from `ai-layout-motion.ts`'s
+     * vocabulary. Absent on a style stored before the look chose motion, whose
+     * pages move in its kind's mood.
+     */
+    motion?: AiSiteMotionStyle;
 }
 /** What the model may choose, every field optional. */
-export type AiSiteLookAnswer = Partial<Pick<AiSiteStyle, 'base' | 'hue' | 'accent' | 'ground' | 'fonts' | 'corners' | 'buttons' | 'cards' | 'fields' | 'eyebrow' | 'header' | 'brand'>>;
+export type AiSiteLookAnswer = Partial<Pick<AiSiteStyle, 'base' | 'hue' | 'accent' | 'ground' | 'fonts' | 'corners' | 'buttons' | 'cards' | 'fields' | 'eyebrow' | 'header' | 'brand' | 'motion'>>;
 /** A job's seed: FNV-1a over its id. */
 export declare function aiSiteSeed(jobId: string): number;
 export declare const AI_SITE_LOOK_TOOL_NAME = "submit_site_look";
@@ -128,6 +135,8 @@ export declare function aiSiteStyleFor(input: {
 export declare const AI_SITE_LOOK_DRAWS = 32;
 /** The fewest tracked dimensions in which two of a workspace's sites differ. */
 export declare const AI_SITE_LOOK_LEAST_DIFFERENCES = 3;
+/** The chance a look keeps the motion style the model chose (AGL-3941). */
+export declare const AI_SITE_MOTION_KEEP = 0.6;
 /** An OKLCH color as hex, its chroma reduced until it fits sRGB. */
 export declare function aiOklchHex(L: number, C: number, h: number): string;
 /** A hex color in OKLCH. */

package/src/lib/model/ai-site-look.js

@@ -17,6 +17,7 @@ import { _ as _extends } from "@swc/helpers/_/_extends";
  */ import { contrastRatio, validateThemeForPublish } from "@aglyn/aglyn/app-utils/site-theme";
 import { DEFAULT_SITE_THEME } from "@aglyn/aglyn/app-utils/default-site";
 import { writeThemeFonts } from "@aglyn/shared-ui-theme/util/theme-editor-fields";
+import { AI_SITE_MOTION_STYLES, aiSiteMotionStyle, aiSiteMotionStylesFor } from "../layout-language/ai-layout-motion.js";
 import { AI_SITE_BASES, AI_SITE_CORNERS, AI_SITE_FONT_PAIRINGS, AI_SITE_GROUNDS, AI_SITE_RHYTHMS, aiSiteFontPairing } from "./ai-site-kinds.js";
 /**
  * A site's look (AGL-3660): one of the platform's base themes, and this
@@ -126,7 +127,8 @@ const enumOf = (values, description)=>({
             'fields',
             'eyebrow',
             'header',
-            'brand'
+            'brand',
+            'motion'
         ],
         properties: {
             base: enumOf(AI_SITE_BASES, 'The base theme to start from, from the list in the request.'),
@@ -156,7 +158,8 @@ const enumOf = (values, description)=>({
                     }
                 ],
                 description: 'A hex brand color the brief gives, exactly as written, or null.'
-            }
+            },
+            motion: enumOf(AI_SITE_MOTION_STYLES, 'How the pages arrive as a visitor scrolls, from the motion list in the request.')
         }
     }
 };
@@ -198,6 +201,8 @@ const hueOf = (value)=>typeof value === 'number' && Number.isFinite(value) ? (Ma
     if (header) look.header = header;
     const brand = aiSiteBrandHex(raw['brand']);
     if (brand) look.brand = brand;
+    const motion = aiSiteMotionStyle(raw['motion']);
+    if (motion) look.motion = motion;
     return look;
 }
 // ── Kind, model and seed into tokens ─────────────────────────────────────
@@ -609,9 +614,15 @@ function styleOnce(input, seed) {
         rhythm: pick(next, (_family_rhythms = family.rhythms) != null ? _family_rhythms : AI_SITE_RHYTHMS),
         headingScale: Math.round(family.headingScale * (0.94 + next() * 0.12) * 100) / 100,
         density: family.density === 'regular' && next() < 0.25 ? pick(next, DENSITIES) : family.density,
-        brand: (_ref = (_aiSiteBrandHex = aiSiteBrandHex(input.brand)) != null ? _aiSiteBrandHex : answer.brand) != null ? _ref : null
+        brand: (_ref = (_aiSiteBrandHex = aiSiteBrandHex(input.brand)) != null ? _aiSiteBrandHex : answer.brand) != null ? _ref : null,
+        // Drawn last, so every dimension above is drawn the same whether or not
+        // the answer chose a motion. The model's choice is kept more often than
+        // the other dimensions', because nothing else of the site says how it
+        // moves; the seed's draw is among the styles that suit the kind.
+        motion: choose(answer.motion, aiSiteMotionStylesFor(kind.id), AI_SITE_MOTION_KEEP)
     };
 }
+/** The chance a look keeps the motion style the model chose (AGL-3941). */ export const AI_SITE_MOTION_KEEP = 0.6;
 function oklabToLinear(L, a, b) {
     const l = (L + 0.3963377774 * a + 0.2158037573 * b) ** 3;
     const m = (L - 0.1055613458 * a - 0.0638541728 * b) ** 3;