@aglyn/plugins-ai 1.0.0-beta.270 → 1.0.0-beta.272

package/src/lib/runtime/ai-node-tree.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../../../../libs/plugins/ai/src/lib/runtime/ai-node-tree.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport {\n  AI_TEXT_LIMITS,\n  isHeadlineVariant,\n  nodeCapabilityProps,\n  type AiPaletteEntry,\n  type AiPropSchema,\n  type AiSurface,\n} from './ai-palette'\nimport {\n  AI_NODE_CAPABILITIES,\n  AI_PALETTE,\n  AI_SURFACES,\n  AI_SX_TOKENS,\n} from './ai-palette.generated'\nimport { linealRelationshipPermits } from '@aglyn/aglyn/app-utils/lineal-order'\nimport {\n  NODE_MAP_MAX_BYTES,\n  nodeMapBytes,\n} from '@aglyn/aglyn/app-utils/measure-node-map'\nimport { parseMediaRef } from '@aglyn/aglyn/app-utils/media-ref'\nimport {\n  COMPONENT_PROP_NAME_PATTERN,\n  REUSABLE_INSTANCE_COMPONENT_ID,\n  REUSABLE_INSTANCE_PROP_VALUES_KEY,\n} from '@aglyn/aglyn/app-utils/reusable-component-keys'\nimport { createIdUrlSafe } from '@aglyn/aglyn/foundation/constants/app'\nimport { CANVAS_ROOT_ELEMENT_ID } from '@aglyn/aglyn/foundation/constants/canvas'\nimport { NodeType, type NodesMap } from '@aglyn/aglyn/types/nodes'\nimport type { AiComponentPropTypes } from '../model/ai-site-inventory'\nimport { AI_ICON_COMPONENT_ID, aiIconOfId } from './ai-icon-library'\nimport {\n  AI_COMPONENT_VISIBILITY_PROPS,\n  isAiComponentPropToken,\n} from './ai-component-bindings'\n\nimport { sanitizePortableDefinition } from '@aglyn/aglyn/app-utils/node-definition-sanitizer'\n\n/**\n * The one path an AI-emitted node tree takes into storage (AGL-2905).\n *\n * A model answers with a flat node map in the shape the canvas persists.\n * Nothing about that map is trusted: the component ids, the parent/child\n * pairs, every prop and every `sx` key are what the model chose to write,\n * and the renderer spreads props onto the DOM. So the tree is first held to\n * the same sanitizer a marketplace install passes — reachability from the\n * root, the surface's component allowlist, the persisted node keys, `href`\n * and `src` protocols, a size cap — and then to what a listing never needed\n * checking because a human authored it in the editor:\n *\n * - the parent/child restrictions the besigner enforces on drop\n *   (`restrictChildren` / `restrictParent`), and whether an element can hold\n *   children at all;\n * - every prop against the generated palette's schema — unknown props are\n *   dropped, enum values coerced case-insensitively, a required prop that is\n *   missing refuses the tree;\n * - `sx` against a fixed key set and a value grammar of theme tokens, numbers\n *   and CSS lengths or keywords, with nothing that can reach a URL or a\n *   stylesheet;\n * - copy length by role — a headline, a paragraph, a button label;\n * - links to a screen the host has, a root-relative path or an `https:` URL,\n *   and media to a DAM reference or an `https:` URL;\n * - the stored-node-map byte ceiling, measured the way the save measures it.\n *\n * ## The site's own records, when the caller names them (AGL-2935)\n *\n * A reusable-component instance, a form picked on the Forms page and a\n * dataset are each \"a reference into another document\", which is why the\n * palette leaves them off: from a description alone a model can only invent\n * an id. A generator that has read the site's inventory can name real ones,\n * and the building doctrine requires it to — a repeat is placed as\n * instances of one component, and a form is bound by id rather than drawn\n * inline. So the three are admitted exactly as screen links are: only\n * against the ids the caller supplies. With no `componentIds` an instance is\n * still refused; with no `formIds` or `datasetIds` the binding is dropped.\n *\n * What comes out is the flat `NodesMap` `encodeStoredNodes` takes, with every\n * id minted fresh the way a preset graft mints them, so nothing the model\n * wrote can collide with a node already on the canvas. `sourceIds` maps each\n * minted id back to the id the model wrote, so a caller can quote a refused\n * subtree in the model's own words. Every drop is listed in `repairs`; every\n * refusal names its `code`. The function never throws.\n */\n\nexport type AiNodeTreeRefusalCode =\n  /** Not an object with a `rootId` and a `nodes` map, or an unknown surface. */\n  | 'invalid-input'\n  /** The root node carries a component the surface does not start with. */\n  | 'root'\n  /** A structural failure the sanitizer named: missing node, empty tree. */\n  | 'structure'\n  /** A component id outside the surface's allowlist. */\n  | 'component'\n  /** A parent/child pair the besigner would refuse on drop. */\n  | 'lineage'\n  /** A prop the palette marks required is absent. */\n  | 'required-prop'\n  /** Over the sanitizer's or the stored-node-map's byte ceiling. */\n  | 'too-large'\n  /** A component instance naming a component the site does not have. */\n  | 'reference'\n\nexport type AiNodeTreeResult =\n  | {\n      ok: true\n      rootId: string\n      nodes: NodesMap\n      repairs: string[]\n      /** Each minted id → the id the model wrote for that node. */\n      sourceIds: Record<string, string>\n    }\n  | { ok: false; error: string; code: AiNodeTreeRefusalCode }\n\nexport interface AiNodeTreeContext {\n  /** Screen ids a `screen` prop may name. Absent: any well-formed id. */\n  screenIds?: Iterable<string>\n  /** DAM media ids a `media` prop may reference. Absent: any well-formed reference. */\n  assetIds?: Iterable<string>\n  /**\n   * Reusable components an instance may place. Absent: no instance is\n   * admitted, which is the palette's own rule for a tree nobody grounded.\n   */\n  componentIds?: Iterable<string>\n  /** Declared props per component id, which an instance's values are held to. */\n  componentProps?: Record<string, AiComponentPropTypes>\n  /** Forms on the Forms page a Form element may bind by `formId`. */\n  formIds?: Iterable<string>\n  /** Datasets a Form element may write to by `datasetId`. */\n  datasetIds?: Iterable<string>\n  /**\n   * Binding tokens a `url` or `media` prop may hold whole — an Image whose\n   * `src` is `{{entry.coverImage}}` on a page template, filled per record\n   * when the page renders (AGL-2909). Absent: a token in either role is\n   * dropped like any other value that is not an address.\n   */\n  bindingTokens?: Iterable<string>\n  /**\n   * The tree defines a reusable component (AGL-2908). A field that is not\n   * copy — a switch, a dropdown, a screen, an address, a picture, a number —\n   * and the `hideIf` and `hideUnless` directives may then hold one of the\n   * component's own `{{prop.<name>}}` tokens as their whole value, and a\n   * placed component may be handed one in its `propValues`; each is kept as\n   * written. Which property a token names, and whether its kind binds to that\n   * field, is the component step's check (`ai-component-bindings.ts`).\n   * Absent: such a token is dropped like any value the field cannot hold.\n   */\n  definesComponent?: boolean\n  /**\n   * The tree was composed by the platform's own code — the layout language\n   * compiler (AGL-3660) — and not written by a model. The surface's code-only\n   * elements are then admitted (an Icon, and a layout's Drawer with its Menu\n   * Button), and an Icon keeps the id and the path the icon library gives\n   * the id it names (`ai-icon-library.ts`): the path is the library's, never\n   * the tree's. Absent: a model's tree, held to the surface's catalog.\n   */\n  codeBuilt?: boolean\n}\n\n/**\n * `sx` keys a model may set: spacing, color, typography, layout, borders,\n * display, flex and grid. Fixed rather than derived — MUI's system accepts\n * far more (pseudo-selectors, nested selectors, arbitrary CSS properties)\n * and every one of those is a way to reach outside the element.\n */\nexport const AI_SX_ALLOWED_KEYS: ReadonlySet<string> = new Set([\n  // spacing\n  'm',\n  'mt',\n  'mr',\n  'mb',\n  'ml',\n  'mx',\n  'my',\n  'margin',\n  'marginTop',\n  'marginRight',\n  'marginBottom',\n  'marginLeft',\n  'p',\n  'pt',\n  'pr',\n  'pb',\n  'pl',\n  'px',\n  'py',\n  'padding',\n  'paddingTop',\n  'paddingRight',\n  'paddingBottom',\n  'paddingLeft',\n  'gap',\n  'rowGap',\n  'columnGap',\n  // color\n  'color',\n  'bgcolor',\n  'backgroundColor',\n  'borderColor',\n  'opacity',\n  // typography\n  'typography',\n  'fontSize',\n  'fontWeight',\n  'fontFamily',\n  'fontStyle',\n  'lineHeight',\n  'letterSpacing',\n  'textAlign',\n  'textTransform',\n  'textDecoration',\n  'whiteSpace',\n  'textOverflow',\n  'overflowWrap',\n  'wordBreak',\n  // layout\n  'width',\n  'minWidth',\n  'maxWidth',\n  'height',\n  'minHeight',\n  'maxHeight',\n  'boxSizing',\n  'overflow',\n  'overflowX',\n  'overflowY',\n  'position',\n  'top',\n  'right',\n  'bottom',\n  'left',\n  'zIndex',\n  'aspectRatio',\n  'objectFit',\n  // borders\n  'border',\n  'borderTop',\n  'borderRight',\n  'borderBottom',\n  'borderLeft',\n  'borderWidth',\n  'borderStyle',\n  'borderRadius',\n  'boxShadow',\n  // display\n  'display',\n  'visibility',\n  // flex\n  'flexDirection',\n  'flexWrap',\n  'justifyContent',\n  'alignItems',\n  'alignContent',\n  'alignSelf',\n  'justifySelf',\n  'flex',\n  'flexGrow',\n  'flexShrink',\n  'flexBasis',\n  'order',\n  // grid\n  'gridTemplateColumns',\n  'gridTemplateRows',\n  'gridColumn',\n  'gridRow',\n  'gridArea',\n  'gridAutoFlow',\n  'gridAutoColumns',\n  'gridAutoRows',\n  'justifyItems',\n  'placeItems',\n  'placeContent',\n])\n\n/**\n * Substrings no string a model wrote may carry, in a prop or an `sx` value.\n * Exported for the theme tool's component style values (AGL-2938), which are\n * the same kind of CSS value written into a theme instead of a node.\n */\nexport const HOSTILE_TEXT =\n  /<\\s*\\/?\\s*(script|iframe|object|embed|svg|style|link|meta|base|frame|form|input|img)\\b|javascript:|vbscript:|data:text\\/html|expression\\s*\\(|url\\s*\\(|@import|!important|\\bon[a-z]+\\s*=/i\n\n/**\n * A CSS value a model may write into `sx`: lengths, numbers, keywords,\n * shorthands (`1px solid`), functions with plain arguments (`repeat(3, 1fr)`,\n * `rgba(0, 0, 0, 0.2)`), hex colors and theme tokens. No quotes, no\n * semicolons, no braces, no angle brackets, no colons — which is what keeps\n * a `url(`, a selector or a second declaration out.\n */\nexport const SX_VALUE = /^[A-Za-z0-9#.,%()\\s\\-_/+*]{1,100}$/\n\n/**\n * Node fields the sanitizer strips that a model has no business writing —\n * each is a way to reach past the node's own box, and each is named in\n * `repairs` so a route can tell the model what it lost.\n */\nconst STRIPPED_NODE_KEYS = [\n  'className',\n  'interactions',\n  'styleOverrides',\n  'attrOverrides',\n  'presetRef',\n] as const\n\nconst SCREEN_ID = /^[A-Za-z0-9_-]{1,64}$/\n/** The field an icon is picked with; its value carries a drawing no model can write. */\nconst ICON_PICKER_FIELD = 'icon-picker'\nconst MAX_SX_KEYS = 40\n/** A string prop with no role of its own — a color, a CSS length, an icon id. */\nconst PLAIN_STRING_MAX = 500\n\nconst paletteTokens = new Set<string>(AI_SX_TOKENS.palette)\nconst breakpoints = new Set<string>(AI_SX_TOKENS.breakpoints)\nconst typographyVariants = new Set<string>(AI_SX_TOKENS.typographyVariants)\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return typeof value === 'object' && value !== null && !Array.isArray(value)\n}\n\n/** An `https:` address that parses as one. */\nexport function isHttpsUrl(value: string): boolean {\n  if (!/^https:\\/\\//i.test(value)) return false\n  try {\n    return new URL(value).protocol === 'https:'\n  } catch {\n    return false\n  }\n}\n\n/** A path on this site: one leading slash, never a scheme-relative `//`. */\nexport function isRootRelativePath(value: string): boolean {\n  return /^\\/(?!\\/)[^\\s<>\"'`\\\\]*$/.test(value)\n}\n\nfunction sxValueAllowed(key: string, value: unknown): boolean {\n  if (typeof value === 'number') return Number.isFinite(value)\n  if (typeof value !== 'string') return false\n  const trimmed = value.trim()\n  if (!trimmed || HOSTILE_TEXT.test(trimmed)) return false\n  if (paletteTokens.has(trimmed)) return true\n  if (key === 'typography' && typographyVariants.has(trimmed)) return true\n  return SX_VALUE.test(trimmed)\n}\n\n/**\n * The allowed slice of an `sx` object, with a line per key or value dropped.\n * Responsive objects keep only breakpoint keys; anything deeper — a\n * pseudo-selector, a nested selector, an array — is not a value at all.\n */\nfunction sanitizeSx(\n  nodeId: string,\n  sx: unknown,\n  repairs: string[],\n): Record<string, unknown> | undefined {\n  if (!isRecord(sx)) {\n    if (sx !== undefined)\n      repairs.push(`${nodeId}: sx is not an object; dropped`)\n    return undefined\n  }\n  const out: Record<string, unknown> = {}\n  let kept = 0\n  for (const [key, value] of Object.entries(sx)) {\n    if (!AI_SX_ALLOWED_KEYS.has(key)) {\n      repairs.push(`${nodeId}: sx.${key} is not an allowed style; dropped`)\n      continue\n    }\n    if (kept >= MAX_SX_KEYS) {\n      repairs.push(\n        `${nodeId}: sx.${key} is past the ${MAX_SX_KEYS}-key ceiling; dropped`,\n      )\n      continue\n    }\n    if (isRecord(value)) {\n      const responsive: Record<string, unknown> = {}\n      for (const [breakpoint, inner] of Object.entries(value)) {\n        if (!breakpoints.has(breakpoint)) {\n          repairs.push(\n            `${nodeId}: sx.${key}.${breakpoint} is not a breakpoint; dropped`,\n          )\n          continue\n        }\n        if (!sxValueAllowed(key, inner)) {\n          repairs.push(\n            `${nodeId}: sx.${key}.${breakpoint} is not an allowed value; dropped`,\n          )\n          continue\n        }\n        responsive[breakpoint] =\n          typeof inner === 'string' ? inner.trim() : inner\n      }\n      if (Object.keys(responsive).length) {\n        out[key] = responsive\n        kept += 1\n      }\n      continue\n    }\n    if (!sxValueAllowed(key, value)) {\n      repairs.push(`${nodeId}: sx.${key} is not an allowed value; dropped`)\n      continue\n    }\n    out[key] = typeof value === 'string' ? value.trim() : value\n    kept += 1\n  }\n  return kept ? out : undefined\n}\n\nfunction coerceEnum(schema: AiPropSchema, value: unknown): string | undefined {\n  if (typeof value !== 'string' || !schema.enum) return undefined\n  const wanted = value.trim().toLowerCase()\n  return schema.enum.find((option) => option.toLowerCase() === wanted)\n}\n\nfunction coerceBoolean(value: unknown): boolean | undefined {\n  if (typeof value === 'boolean') return value\n  if (value === 'true') return true\n  if (value === 'false') return false\n  return undefined\n}\n\nfunction coerceNumber(\n  schema: AiPropSchema,\n  value: unknown,\n): number | undefined {\n  const parsed =\n    typeof value === 'number'\n      ? value\n      : typeof value === 'string' && value.trim() !== ''\n        ? Number(value)\n        : NaN\n  if (!Number.isFinite(parsed)) return undefined\n  if (schema.type === 'integer' && !Number.isInteger(parsed)) return undefined\n  if (schema.minimum !== undefined && parsed < schema.minimum) return undefined\n  if (schema.maximum !== undefined && parsed > schema.maximum) return undefined\n  return parsed\n}\n\nfunction textLimitFor(\n  entry: AiPaletteEntry,\n  name: string,\n  props: Record<string, unknown>,\n): number {\n  const declared = entry.textLimits[name]\n  // A heading's copy is held to the headline ceiling, decided by the variant\n  // the same node carries; anything else keeps the ceiling the palette\n  // assigned to the prop.\n  if (name === 'children' && isHeadlineVariant(props.variant)) {\n    return Math.min(declared ?? AI_TEXT_LIMITS.body, AI_TEXT_LIMITS.headline)\n  }\n  return declared ?? AI_TEXT_LIMITS.body\n}\n\n/**\n * One string prop against its role. Returns the value to store, or\n * `undefined` with the reason pushed to `repairs`. A binding token the\n * caller admitted passes a `url` or `media` role whole.\n */\nfunction sanitizeString(\n  nodeId: string,\n  entry: AiPaletteEntry,\n  name: string,\n  schema: AiPropSchema,\n  raw: string,\n  props: Record<string, unknown>,\n  screenIds: Set<string> | null,\n  assetIds: Set<string> | null,\n  repairs: string[],\n  bindingTokens: ReadonlySet<string> | null = null,\n): string | undefined {\n  let value = raw.trim()\n  if (HOSTILE_TEXT.test(value)) {\n    repairs.push(`${nodeId}.${name} carried markup or script; dropped`)\n    return undefined\n  }\n  // An icon is drawn from the path its picker stores beside the id, which a\n  // model can never supply, so an icon a model names draws nothing where the\n  // page is published (AGL-3054). The site owner picks it.\n  if (entry.propFields[name] === ICON_PICKER_FIELD) {\n    repairs.push(`${nodeId}.${name} is an icon, which the site owner picks from the library; dropped`)\n    return undefined\n  }\n  const role = entry.propRoles[name]\n  switch (role) {\n    case 'text': {\n      const limit = textLimitFor(entry, name, props)\n      if (value.length > limit) {\n        value = value.slice(0, limit).trimEnd()\n        repairs.push(\n          `${nodeId}.${name} was over ${limit} characters; truncated`,\n        )\n      }\n      break\n    }\n    case 'url': {\n      if (bindingTokens?.has(value)) break\n      if (!isHttpsUrl(value) && !isRootRelativePath(value)) {\n        repairs.push(\n          `${nodeId}.${name} is neither an https: URL nor a path on this site; dropped`,\n        )\n        return undefined\n      }\n      break\n    }\n    case 'screen': {\n      if (screenIds ? !screenIds.has(value) : !SCREEN_ID.test(value)) {\n        repairs.push(\n          `${nodeId}.${name} names a page this site does not have; dropped`,\n        )\n        return undefined\n      }\n      break\n    }\n    case 'media': {\n      if (bindingTokens?.has(value)) break\n      if (isHttpsUrl(value)) break\n      const ref = parseMediaRef(value)\n      if (!ref || (assetIds && !assetIds.has(ref.mediaId))) {\n        repairs.push(\n          `${nodeId}.${name} is neither a media reference this site holds nor an https: URL; dropped`,\n        )\n        return undefined\n      }\n      break\n    }\n    default: {\n      if (value.length > PLAIN_STRING_MAX) {\n        repairs.push(\n          `${nodeId}.${name} is over ${PLAIN_STRING_MAX} characters; dropped`,\n        )\n        return undefined\n      }\n    }\n  }\n  if (schema.pattern && !new RegExp(schema.pattern).test(value)) {\n    repairs.push(`${nodeId}.${name} does not match its pattern; dropped`)\n    return undefined\n  }\n  if (schema.minLength !== undefined && value.length < schema.minLength) {\n    repairs.push(\n      `${nodeId}.${name} is shorter than ${schema.minLength} characters; dropped`,\n    )\n    return undefined\n  }\n  if (schema.maxLength !== undefined && value.length > schema.maxLength) {\n    value = value.slice(0, schema.maxLength).trimEnd()\n    repairs.push(\n      `${nodeId}.${name} was over ${schema.maxLength} characters; truncated`,\n    )\n  }\n  return value\n}\n\n/**\n * The element's own declarations plus the node capabilities every element\n * carries (AGL-3156) — repeating, today. Two shapes only, so they are built\n * once each rather than per node: a capability prop is the same on every\n * element with the same child contract.\n *\n * The element wins a name collision. A component that declared a prop of its\n * own under a capability's name would be describing its own attribute, and the\n * validator has to hold it to that.\n */\nconst CAPABLE_ENTRIES = new WeakMap<AiPaletteEntry, AiPaletteEntry>()\n\nfunction withNodeCapabilities(entry: AiPaletteEntry): AiPaletteEntry {\n  const cached = CAPABLE_ENTRIES.get(entry)\n  if (cached) return cached\n  const capability = nodeCapabilityProps(\n    AI_NODE_CAPABILITIES,\n    entry.acceptsChildren,\n  )\n  const merged: AiPaletteEntry = {\n    ...entry,\n    propsSchema: {\n      ...entry.propsSchema,\n      properties: {\n        ...capability.properties,\n        ...entry.propsSchema.properties,\n      },\n    },\n    propRoles: { ...capability.propRoles, ...entry.propRoles },\n    textLimits: { ...capability.textLimits, ...entry.textLimits },\n  }\n  CAPABLE_ENTRIES.set(entry, merged)\n  return merged\n}\n\n/**\n * Plugins whose elements play audio (AGL-3716): the Music player. A model\n * never sources a recording and never vouches for one, so on their elements\n * `rightsConfirmed` is always dropped and `src` is kept only as a reference\n * to a file in the site's own library (which the asset check grounds) or a\n * binding. Named by plugin id, as the listings name their elements: a plugin\n * never imports another.\n */\nexport const AI_OWNER_AUDIO_PLUGIN_IDS: ReadonlySet<string> = new Set(['music'])\n\n/** Why an audio element's prop a model wrote is dropped, or null to keep it. */\nexport function aiOwnerAudioRefusal(\n  pluginId: string | undefined,\n  name: string,\n  value: unknown,\n  bindingTokens: ReadonlySet<string> | null = null,\n): string | null {\n  if (!pluginId || !AI_OWNER_AUDIO_PLUGIN_IDS.has(pluginId)) return null\n  if (name === 'rightsConfirmed') {\n    return 'only the site owner can confirm they hold the rights to a recording'\n  }\n  if (name !== 'src') return null\n  const text = typeof value === 'string' ? value.trim() : ''\n  if (!text || parseMediaRef(text) || bindingTokens?.has(text)) return null\n  return 'a player plays only audio from the owner’s own media library, never a recording from elsewhere'\n}\n\nfunction sanitizeProps(\n  nodeId: string,\n  paletteEntry: AiPaletteEntry,\n  raw: unknown,\n  screenIds: Set<string> | null,\n  assetIds: Set<string> | null,\n  repairs: string[],\n  bindingTokens: ReadonlySet<string> | null = null,\n): { props: Record<string, unknown> } | { missing: string } {\n  const entry = withNodeCapabilities(paletteEntry)\n  const source = isRecord(raw) ? raw : {}\n  const props: Record<string, unknown> = {}\n  const declared = entry.propsSchema.properties\n  for (const [name, value] of Object.entries(source)) {\n    // `sx` is read off the node instead; a model that put it here meant the\n    // same thing, and the caller has already moved it.\n    if (name === 'sx' || value === undefined || value === null) continue\n    // Audio is the owner's own, always (AGL-3716).\n    const audioRefusal = aiOwnerAudioRefusal(entry.pluginId, name, value, bindingTokens)\n    if (audioRefusal) {\n      repairs.push(`${nodeId}.${name}: ${audioRefusal}; dropped`)\n      continue\n    }\n    const schema = declared[name]\n    if (!schema) {\n      repairs.push(\n        `${nodeId}.${name} is not a prop of ${entry.displayName}; dropped`,\n      )\n      continue\n    }\n    if (schema.enum) {\n      const coerced = coerceEnum(schema, value)\n      if (coerced === undefined) {\n        repairs.push(\n          `${nodeId}.${name} is not one of ${schema.enum.join('|')}; dropped`,\n        )\n        continue\n      }\n      if (coerced !== value) {\n        repairs.push(\n          `${nodeId}.${name} was spelled \"${String(value)}\"; normalized to \"${coerced}\"`,\n        )\n      }\n      props[name] = coerced\n      continue\n    }\n    switch (schema.type) {\n      case 'boolean': {\n        const coerced = coerceBoolean(value)\n        if (coerced === undefined) {\n          repairs.push(`${nodeId}.${name} is not a boolean; dropped`)\n          continue\n        }\n        props[name] = coerced\n        break\n      }\n      case 'number':\n      case 'integer': {\n        const coerced = coerceNumber(schema, value)\n        if (coerced === undefined) {\n          repairs.push(`${nodeId}.${name} is not a number in range; dropped`)\n          continue\n        }\n        props[name] = coerced\n        break\n      }\n      default: {\n        const text =\n          typeof value === 'string'\n            ? value\n            : typeof value === 'number' || typeof value === 'boolean'\n              ? String(value)\n              : undefined\n        if (text === undefined) {\n          repairs.push(`${nodeId}.${name} is not text; dropped`)\n          continue\n        }\n        const cleaned = sanitizeString(\n          nodeId,\n          entry,\n          name,\n          schema,\n          text,\n          source,\n          screenIds,\n          assetIds,\n          repairs,\n          bindingTokens,\n        )\n        if (cleaned === undefined) continue\n        props[name] = cleaned\n      }\n    }\n  }\n  for (const name of entry.propsSchema.required) {\n    if (props[name] === undefined) return { missing: name }\n  }\n  return { props }\n}\n\n/** Surfaces that compose page elements, and so may place a component instance. */\nconst INSTANCE_SURFACES: ReadonlySet<AiSurface> = new Set([\n  'screen',\n  'layout',\n  'component',\n])\n\nconst FORM_COMPONENT_ID = 'form'\n\n/** The prop a repeat over a dataset is stored under (the data plugin's `repeatDataset`). Persisted — never rename. */\nexport const AI_REPEAT_DATASET_PROP = 'repeatDataset'\n\n/** The instance prop naming the component it places; stored on every instance node. */\nexport const AI_INSTANCE_REF_PROP = 'refId'\n\ninterface ReferenceSets {\n  componentIds: Set<string> | null\n  componentProps: Record<string, AiComponentPropTypes>\n  formIds: Set<string> | null\n  datasetIds: Set<string> | null\n  assetIds: Set<string> | null\n  /** The tree defines a reusable component, which may hand its own property tokens on. */\n  definesComponent: boolean\n}\n\n/**\n * One value an instance fills in for a declared prop, held to what the\n * declaration's type can hold: a picture from the library, a link, a number,\n * a switch, or copy.\n */\nfunction instancePropValue(\n  nodeId: string,\n  name: string,\n  type: string,\n  raw: unknown,\n  assetIds: Set<string> | null,\n  repairs: string[],\n): unknown {\n  if (type === 'number') {\n    const parsed = typeof raw === 'number' ? raw : Number(raw)\n    if (raw === '' || !Number.isFinite(parsed)) {\n      repairs.push(`${nodeId}.propValues.${name} is not a number; dropped`)\n      return undefined\n    }\n    return parsed\n  }\n  if (type === 'boolean') {\n    const coerced = coerceBoolean(raw)\n    if (coerced === undefined) {\n      repairs.push(`${nodeId}.propValues.${name} is not a boolean; dropped`)\n    }\n    return coerced\n  }\n  if (type === 'icon') {\n    // A page cannot fill an icon: the pick is an id and the path drawn from\n    // it, and a word in its place draws nothing (AGL-3054). The property is\n    // left for the site owner to pick.\n    repairs.push(`${nodeId}.propValues.${name} is an icon, which the site owner picks from the library; dropped`)\n    return undefined\n  }\n  if (typeof raw !== 'string' && typeof raw !== 'number' && typeof raw !== 'boolean') {\n    repairs.push(`${nodeId}.propValues.${name} is not a value; dropped`)\n    return undefined\n  }\n  const value = String(raw).trim()\n  if (HOSTILE_TEXT.test(value)) {\n    repairs.push(`${nodeId}.propValues.${name} carried markup or script; dropped`)\n    return undefined\n  }\n  if (type === 'image') {\n    if (isHttpsUrl(value)) return value\n    const ref = parseMediaRef(value)\n    if (!ref || (assetIds && !assetIds.has(ref.mediaId))) {\n      repairs.push(\n        `${nodeId}.propValues.${name} is neither a media reference this site holds nor an https: URL; dropped`,\n      )\n      return undefined\n    }\n    return value\n  }\n  if (type === 'href') {\n    if (isHttpsUrl(value) || isRootRelativePath(value)) return value\n    repairs.push(\n      `${nodeId}.propValues.${name} is neither an https: URL nor a path on this site; dropped`,\n    )\n    return undefined\n  }\n  if (value.length > AI_TEXT_LIMITS.body) {\n    repairs.push(\n      `${nodeId}.propValues.${name} was over ${AI_TEXT_LIMITS.body} characters; truncated`,\n    )\n    return value.slice(0, AI_TEXT_LIMITS.body).trimEnd()\n  }\n  return value\n}\n\n/**\n * The site-record props of one node — an instance's `refId` and\n * `propValues`, a Form's `formId` and `datasetId` — checked against the ids\n * the caller supplied. They leave `props` before the palette pass, which\n * would drop them as undeclared, and come back in `kept` once checked.\n */\nfunction sanitizeReferenceProps(\n  nodeId: string,\n  componentId: string,\n  props: Record<string, unknown>,\n  refs: ReferenceSets,\n  repairs: string[],\n): { props: Record<string, unknown>; kept: Record<string, unknown> } | { refusal: string } {\n  const rest: Record<string, unknown> = { ...props }\n  const kept: Record<string, unknown> = {}\n  // A repeat over one of the site's datasets (AGL-3616), on any element: the\n  // platform's own repeat, admitted against the datasets the caller supplies,\n  // as a Form's dataset binding is. The palette leaves it off, since from a\n  // description alone a model can only invent a dataset's id.\n  if (AI_REPEAT_DATASET_PROP in rest) {\n    const raw = rest[AI_REPEAT_DATASET_PROP]\n    delete rest[AI_REPEAT_DATASET_PROP]\n    const id = typeof raw === 'string' ? raw.trim() : ''\n    if (id && refs.datasetIds?.has(id)) {\n      kept[AI_REPEAT_DATASET_PROP] = id\n    } else if (raw !== undefined && raw !== null && raw !== '') {\n      repairs.push(`${nodeId}.${AI_REPEAT_DATASET_PROP} names a dataset this site does not have; dropped`)\n    }\n  }\n  if (componentId === REUSABLE_INSTANCE_COMPONENT_ID) {\n    const refId = typeof rest[AI_INSTANCE_REF_PROP] === 'string' ? String(rest[AI_INSTANCE_REF_PROP]).trim() : ''\n    delete rest[AI_INSTANCE_REF_PROP]\n    if (!refId || !refs.componentIds?.has(refId)) {\n      return {\n        refusal: `Reusable Component (${nodeId}) names a component this site does not have`,\n      }\n    }\n    kept[AI_INSTANCE_REF_PROP] = refId\n    const rawValues = rest[REUSABLE_INSTANCE_PROP_VALUES_KEY]\n    delete rest[REUSABLE_INSTANCE_PROP_VALUES_KEY]\n    if (rawValues !== undefined && !isRecord(rawValues)) {\n      repairs.push(`${nodeId}.propValues is not an object; dropped`)\n    }\n    const declared = refs.componentProps[refId]\n    const values: Record<string, unknown> = {}\n    for (const [name, raw] of Object.entries(isRecord(rawValues) ? rawValues : {})) {\n      if (raw === undefined || raw === null) continue\n      if (!COMPONENT_PROP_NAME_PATTERN.test(name)) {\n        repairs.push(`${nodeId}.propValues.${name} is not a prop name; dropped`)\n        continue\n      }\n      if (declared && !(name in declared)) {\n        repairs.push(`${nodeId}.propValues.${name} is not a prop of that component; dropped`)\n        continue\n      }\n      if (refs.definesComponent && isAiComponentPropToken(raw)) {\n        // A property of the component being defined, handed on whole; the\n        // component step's check holds it to the kind this prop declares.\n        values[name] = raw.trim()\n        continue\n      }\n      const value = instancePropValue(\n        nodeId,\n        name,\n        declared?.[name] ?? 'text',\n        raw,\n        refs.assetIds,\n        repairs,\n      )\n      if (value !== undefined) values[name] = value\n    }\n    if (Object.keys(values).length) kept[REUSABLE_INSTANCE_PROP_VALUES_KEY] = values\n    return { props: rest, kept }\n  }\n  if (componentId === FORM_COMPONENT_ID) {\n    const bindings: Array<[prop: string, ids: Set<string> | null, record: string]> = [\n      ['formId', refs.formIds, 'form'],\n      ['datasetId', refs.datasetIds, 'dataset'],\n    ]\n    for (const [prop, ids, record] of bindings) {\n      const raw = rest[prop]\n      delete rest[prop]\n      if (raw === undefined || raw === null || raw === '') continue\n      const id = typeof raw === 'string' ? raw.trim() : ''\n      if (id && ids?.has(id)) {\n        kept[prop] = id\n      } else {\n        repairs.push(`${nodeId}.${prop} names a ${record} this site does not have; dropped`)\n      }\n    }\n  }\n  return { props: rest, kept }\n}\n\nfunction refusalCode(error: string): AiNodeTreeRefusalCode {\n  if (/too large/i.test(error)) return 'too-large'\n  if (/cannot be published/i.test(error)) return 'component'\n  return 'structure'\n}\n\n/**\n * Whether the root the model wrote is the surface's root: the canvas wrapper\n * for a document surface (which the sanitizer exempts by the same shape), or\n * the named component otherwise.\n */\nfunction rootMatches(surfaceRoot: string, componentId: unknown): boolean {\n  if (surfaceRoot === 'div') {\n    return componentId == null || componentId === '' || componentId === 'div'\n  }\n  return componentId === surfaceRoot\n}\n\nexport function validateAiNodeTree(\n  input: unknown,\n  surface: AiSurface,\n  context?: AiNodeTreeContext,\n): AiNodeTreeResult {\n  try {\n    return validate(input, surface, context)\n  } catch (error) {\n    return {\n      ok: false,\n      code: 'invalid-input',\n      error: `The tree could not be read: ${error instanceof Error ? error.message : String(error)}`,\n    }\n  }\n}\n\nexport type AiNodePatchResult =\n  | {\n      ok: true\n      props: Record<string, unknown>\n      sx: Record<string, unknown> | undefined\n      repairs: string[]\n    }\n  | { ok: false; error: string; code: AiNodeTreeRefusalCode }\n\n/**\n * One element's prop and style patch, held to the rules `validateAiNodeTree`\n * holds an element it places — for an edit to an element already on the\n * canvas, where there is no tree to validate.\n *\n * The same passes run: unknown props dropped, enums coerced, every string\n * held to its role and screened for markup, `sx` held to the key set and the\n * value grammar. The one difference is `required`: a patch is merged over the\n * props the element already has, so a required prop the patch does not name\n * is not missing.\n */\nexport function validateAiNodePatch(\n  componentId: string,\n  patch: { props?: unknown; sx?: unknown },\n  context?: AiNodeTreeContext,\n): AiNodePatchResult {\n  const entry = AI_PALETTE[componentId]\n  if (!entry) {\n    return {\n      ok: false,\n      code: 'component',\n      error: `Component \"${componentId}\" is not in the palette`,\n    }\n  }\n  const repairs: string[] = []\n  const props = sanitizeProps(\n    componentId,\n    { ...entry, propsSchema: { ...entry.propsSchema, required: [] } },\n    patch.props,\n    context?.screenIds ? new Set(context.screenIds) : null,\n    context?.assetIds ? new Set(context.assetIds) : null,\n    repairs,\n  )\n  const sx =\n    patch.sx === undefined ? undefined : sanitizeSx(componentId, patch.sx, repairs)\n  return {\n    ok: true,\n    props: 'props' in props ? props.props : {},\n    sx,\n    repairs,\n  }\n}\n\nfunction validate(\n  input: unknown,\n  surface: AiSurface,\n  context: AiNodeTreeContext | undefined,\n): AiNodeTreeResult {\n  const definition = AI_SURFACES[surface]\n  if (!definition) {\n    return {\n      ok: false,\n      code: 'invalid-input',\n      error: `Unknown surface \"${surface}\"`,\n    }\n  }\n  if (\n    !isRecord(input) ||\n    typeof input.rootId !== 'string' ||\n    !isRecord(input.nodes)\n  ) {\n    return {\n      ok: false,\n      code: 'invalid-input',\n      error: 'Expected an object with a string rootId and a nodes map',\n    }\n  }\n  const rootId = input.rootId\n  const nodes = input.nodes as Record<string, unknown>\n  const root = nodes[rootId]\n  if (!isRecord(root)) {\n    return {\n      ok: false,\n      code: 'structure',\n      error: 'Definition has no root node',\n    }\n  }\n  if (!rootMatches(definition.root, root.componentId)) {\n    return {\n      ok: false,\n      code: 'root',\n      error: `A ${surface} starts with ${definition.root === 'div' ? 'the document wrapper' : `\"${definition.root}\"`}, not \"${String(root.componentId)}\"`,\n    }\n  }\n\n  // The sanitizer keeps only the persisted node keys, and `sx` is not one of\n  // them for a listing. Read it off every node first — from the node field\n  // or from `props.sx`, which a model writes just as readily — and put it\n  // back, checked, on the nodes that survive.\n  const sxByNodeId = new Map<string, unknown>()\n  const hiddenByNodeId = new Set<string>()\n  for (const [id, node] of Object.entries(nodes)) {\n    if (!isRecord(node)) continue\n    const sx =\n      node.sx !== undefined\n        ? node.sx\n        : isRecord(node.props)\n          ? node.props.sx\n          : undefined\n    if (sx !== undefined) sxByNodeId.set(id, sx)\n    if (node.hidden === true) hiddenByNodeId.add(id)\n  }\n\n  // A DAM reference (a `media:` value) is not a URL the sanitizer's\n  // `src` policy admits — a listing must not carry another tenant's asset —\n  // but on the tenant's own page it is exactly what an image should name.\n  // Lift those values out before sanitizing and hand them back to the prop\n  // pass, which holds them to the asset set the caller supplied.\n  // A binding token the caller admitted (AGL-2909) is lifted the same way:\n  // `{{entry.coverImage}}` is no address the sanitizer knows, and the prop\n  // pass holds it to the tokens the caller named.\n  const bindingTokens = context?.bindingTokens ? new Set(context.bindingTokens) : null\n  // A reusable component's own property tokens (AGL-2908) are lifted too, and\n  // kept as written rather than handed back to the prop pass: `{{prop.variant}}`\n  // is no value a dropdown, a switch, an address or a visibility directive\n  // admits. Copy keeps its tokens without lifting, as the text they are.\n  const definesComponent = context?.definesComponent === true\n  const codeBuilt = context?.codeBuilt === true\n  const mediaByNodeId = new Map<string, Record<string, string>>()\n  const boundByNodeId = new Map<string, Record<string, string>>()\n  // A code-built Icon's drawing, from the library by the id it names (AGL-3660).\n  const iconByNodeId = new Map<string, { iconId: string; iconPath: string }>()\n  const forSanitizer: Record<string, unknown> = {}\n  for (const [id, node] of Object.entries(nodes)) {\n    if (!isRecord(node) || !isRecord(node.props)) {\n      forSanitizer[id] = node\n      continue\n    }\n    if (codeBuilt && node.componentId === AI_ICON_COMPONENT_ID) {\n      const { iconId, ...props } = node.props\n      const rest = { ...props }\n      delete rest['iconPath']\n      const icon = aiIconOfId(iconId)\n      if (icon) iconByNodeId.set(id, { iconId: icon.id, iconPath: icon.path })\n      forSanitizer[id] = { ...node, props: rest }\n      continue\n    }\n    const entry = AI_PALETTE[String(node.componentId)]\n    const roles = entry?.propRoles ?? {}\n    const props: Record<string, unknown> = { ...node.props }\n    const lifted: Record<string, string> = {}\n    const bound: Record<string, string> = {}\n    for (const [key, value] of Object.entries(props)) {\n      if (typeof value !== 'string') continue\n      const role = roles[key]\n      if (\n        definesComponent &&\n        isAiComponentPropToken(value) &&\n        (AI_COMPONENT_VISIBILITY_PROPS.includes(key) ||\n          (entry?.propsSchema.properties[key] !== undefined && role !== 'text'))\n      ) {\n        bound[key] = value.trim()\n        delete props[key]\n        continue\n      }\n      if (\n        (role === 'media' && parseMediaRef(value.trim())) ||\n        ((role === 'media' || role === 'url') && bindingTokens?.has(value.trim()))\n      ) {\n        lifted[key] = value\n        delete props[key]\n      }\n    }\n    if (Object.keys(lifted).length) mediaByNodeId.set(id, lifted)\n    if (Object.keys(bound).length) boundByNodeId.set(id, bound)\n    forSanitizer[id] = { ...node, props }\n  }\n\n  const refs: ReferenceSets = {\n    componentIds: context?.componentIds ? new Set(context.componentIds) : null,\n    componentProps: context?.componentProps ?? {},\n    formIds: context?.formIds ? new Set(context.formIds) : null,\n    datasetIds: context?.datasetIds ? new Set(context.datasetIds) : null,\n    assetIds: context?.assetIds ? new Set(context.assetIds) : null,\n    definesComponent,\n  }\n  // An instance is admitted only where the caller grounded it in the site's\n  // components; the reference itself is checked on the node below.\n  const surfaceAllow = codeBuilt ? [...definition.allow, ...(definition.codeOnly ?? [])] : definition.allow\n  const allow =\n    refs.componentIds && INSTANCE_SURFACES.has(surface)\n      ? [...surfaceAllow, REUSABLE_INSTANCE_COMPONENT_ID]\n      : surfaceAllow\n  const sanitized = sanitizePortableDefinition(\n    { rootId, nodes: forSanitizer },\n    { componentIds: allow },\n  )\n  if (sanitized.ok === false) {\n    return {\n      ok: false,\n      code: refusalCode(sanitized.error),\n      error: sanitized.error,\n    }\n  }\n\n  const screenIds = context?.screenIds ? new Set(context.screenIds) : null\n  const assetIds = refs.assetIds\n  const repairs: string[] = []\n  const output: NodesMap = {}\n  const rootIsWrapper =\n    rootMatches('div', root.componentId) && definition.root === 'div'\n  const minted = new Map<string, string>()\n  const mint = (id: string): string => {\n    const fresh =\n      id === rootId && rootIsWrapper\n        ? CANVAS_ROOT_ELEMENT_ID\n        : createIdUrlSafe()\n    minted.set(id, fresh)\n    return fresh\n  }\n\n  /** Each visited node's parent by the model's own ids, for the parentId check. */\n  const parentOf = new Map<string, string>()\n  const queue: Array<{ id: string; parentId: string | null }> = [\n    { id: rootId, parentId: null },\n  ]\n  mint(rootId)\n  while (queue.length) {\n    const { id, parentId } = queue.shift() as {\n      id: string\n      parentId: string | null\n    }\n    const node = sanitized.nodes[id]\n    const entry = AI_PALETTE[node.componentId]\n    if (!entry) {\n      return {\n        ok: false,\n        code: 'component',\n        error: `Component \"${node.componentId}\" is not in the palette`,\n      }\n    }\n    const newId = minted.get(id) as string\n    const raw = nodes[id]\n    if (isRecord(raw)) {\n      // The sanitizer drops silently; the model is told what went.\n      for (const key of STRIPPED_NODE_KEYS) {\n        if (raw[key] !== undefined) {\n          repairs.push(\n            `${id}.${key} is not something a generated node may set; dropped`,\n          )\n        }\n      }\n      if (raw.hidden !== undefined && typeof raw.hidden !== 'boolean') {\n        repairs.push(`${id}.hidden is not a boolean; dropped`)\n      }\n      if (raw.nodes !== undefined && !Array.isArray(raw.nodes)) {\n        repairs.push(\n          `${id}.nodes is not a list of child ids; its children were dropped`,\n        )\n      }\n      if (\n        raw.parentId !== undefined &&\n        raw.parentId !== null &&\n        raw.parentId !== (parentId === null ? null : parentOf.get(id))\n      ) {\n        repairs.push(\n          `${id}.parentId disagreed with where the tree places it; recomputed`,\n        )\n      }\n      if (isRecord(raw.props)) {\n        const lifted = mediaByNodeId.get(id) ?? {}\n        const kept = boundByNodeId.get(id) ?? {}\n        for (const key of Object.keys(raw.props)) {\n          if (iconByNodeId.has(id) && (key === 'iconId' || key === 'iconPath')) continue\n          if (\n            key !== 'sx' &&\n            lifted[key] === undefined &&\n            kept[key] === undefined &&\n            node.props?.[key] === undefined &&\n            raw.props[key] !== undefined\n          ) {\n            repairs.push(\n              `${id}.${key} was an unsafe handler, address or markup; dropped`,\n            )\n          }\n        }\n      }\n    }\n    const children: string[] = []\n    for (const childId of node.nodes ?? []) {\n      if (minted.has(childId)) {\n        repairs.push(\n          `${childId} was listed under more than one parent; the later listing was dropped`,\n        )\n        continue\n      }\n      const child = sanitized.nodes[childId]\n      if (!child) continue\n      const childEntry = AI_PALETTE[child.componentId]\n      if (!childEntry) {\n        return {\n          ok: false,\n          code: 'component',\n          error: `Component \"${child.componentId}\" is not in the palette`,\n        }\n      }\n      if (!entry.acceptsChildren) {\n        return {\n          ok: false,\n          code: 'lineage',\n          error: `${entry.displayName} (${id}) cannot hold other elements, but lists ${childId}`,\n        }\n      }\n      if (\n        !linealRelationshipPermits(\n          {\n            componentId: child.componentId,\n            pluginId: childEntry.pluginId,\n            restrictParent: childEntry.restrictParent,\n          },\n          {\n            componentId: node.componentId,\n            pluginId: entry.pluginId,\n            restrictChildren: entry.restrictChildren,\n          },\n        )\n      ) {\n        return {\n          ok: false,\n          code: 'lineage',\n          error: `${childEntry.displayName} (${childId}) cannot be placed inside ${entry.displayName} (${id})`,\n        }\n      }\n      children.push(mint(childId))\n      parentOf.set(childId, id)\n      queue.push({ id: childId, parentId: newId })\n    }\n\n    const reference = sanitizeReferenceProps(\n      id,\n      node.componentId,\n      { ...node.props, ...mediaByNodeId.get(id) },\n      refs,\n      repairs,\n    )\n    if ('refusal' in reference) {\n      return { ok: false, code: 'reference', error: reference.refusal }\n    }\n    // A required prop the component binds is present: its value is the token.\n    const boundProps = boundByNodeId.get(id)\n    const propsResult = sanitizeProps(\n      id,\n      boundProps\n        ? {\n            ...entry,\n            propsSchema: {\n              ...entry.propsSchema,\n              required: entry.propsSchema.required.filter((name) => boundProps[name] === undefined),\n            },\n          }\n        : entry,\n      reference.props,\n      screenIds,\n      assetIds,\n      repairs,\n      bindingTokens,\n    )\n    if ('missing' in propsResult) {\n      return {\n        ok: false,\n        code: 'required-prop',\n        error: `${entry.displayName} (${id}) is missing its required \"${propsResult.missing}\" prop`,\n      }\n    }\n    const sx = sanitizeSx(id, sxByNodeId.get(id), repairs)\n    output[newId] = {\n      $id: newId,\n      type: NodeType.NODE,\n      componentId: node.componentId,\n      pluginId: entry.pluginId,\n      parentId,\n      nodes: children,\n      props: { ...propsResult.props, ...reference.kept, ...boundProps, ...iconByNodeId.get(id) },\n      ...(sx ? { sx } : {}),\n      ...(hiddenByNodeId.has(id) ? { hidden: true } : {}),\n    }\n  }\n\n  // The save's own measurement (msgpack), not a JSON string length: the\n  // ceiling is stated in those bytes, and a UTF-16 length reads multi-byte\n  // copy as smaller than the document the save will refuse.\n  const bytes = nodeMapBytes(output)\n  if (bytes > NODE_MAP_MAX_BYTES) {\n    return {\n      ok: false,\n      code: 'too-large',\n      error: `The tree is ${bytes} bytes; the stored ceiling is ${NODE_MAP_MAX_BYTES}`,\n    }\n  }\n  const sourceIds: Record<string, string> = {}\n  for (const [source, fresh] of minted) sourceIds[fresh] = source\n  return {\n    ok: true,\n    rootId: minted.get(rootId) as string,\n    nodes: output,\n    repairs,\n    sourceIds,\n  }\n}\n"],"names":["AI_TEXT_LIMITS","isHeadlineVariant","nodeCapabilityProps","AI_NODE_CAPABILITIES","AI_PALETTE","AI_SURFACES","AI_SX_TOKENS","linealRelationshipPermits","NODE_MAP_MAX_BYTES","nodeMapBytes","parseMediaRef","COMPONENT_PROP_NAME_PATTERN","REUSABLE_INSTANCE_COMPONENT_ID","REUSABLE_INSTANCE_PROP_VALUES_KEY","createIdUrlSafe","CANVAS_ROOT_ELEMENT_ID","NodeType","AI_ICON_COMPONENT_ID","aiIconOfId","AI_COMPONENT_VISIBILITY_PROPS","isAiComponentPropToken","sanitizePortableDefinition","AI_SX_ALLOWED_KEYS","Set","HOSTILE_TEXT","SX_VALUE","STRIPPED_NODE_KEYS","SCREEN_ID","ICON_PICKER_FIELD","MAX_SX_KEYS","PLAIN_STRING_MAX","paletteTokens","palette","breakpoints","typographyVariants","isRecord","value","Array","isArray","isHttpsUrl","test","URL","protocol","isRootRelativePath","sxValueAllowed","key","Number","isFinite","trimmed","trim","has","sanitizeSx","nodeId","sx","repairs","undefined","push","out","kept","Object","entries","responsive","breakpoint","inner","keys","length","coerceEnum","schema","enum","wanted","toLowerCase","find","option","coerceBoolean","coerceNumber","parsed","NaN","type","isInteger","minimum","maximum","textLimitFor","entry","name","props","declared","textLimits","variant","Math","min","body","headline","sanitizeString","raw","screenIds","assetIds","bindingTokens","propFields","role","propRoles","limit","slice","trimEnd","ref","mediaId","pattern","RegExp","minLength","maxLength","CAPABLE_ENTRIES","WeakMap","withNodeCapabilities","cached","get","capability","acceptsChildren","merged","propsSchema","properties","set","AI_OWNER_AUDIO_PLUGIN_IDS","aiOwnerAudioRefusal","pluginId","text","sanitizeProps","paletteEntry","source","audioRefusal","displayName","coerced","join","String","cleaned","required","missing","INSTANCE_SURFACES","FORM_COMPONENT_ID","AI_REPEAT_DATASET_PROP","AI_INSTANCE_REF_PROP","instancePropValue","sanitizeReferenceProps","componentId","refs","rest","id","datasetIds","refId","componentIds","refusal","rawValues","componentProps","values","definesComponent","bindings","formIds","prop","ids","record","refusalCode","error","rootMatches","surfaceRoot","validateAiNodeTree","input","surface","context","validate","ok","code","Error","message","validateAiNodePatch","patch","definition","rootId","nodes","root","sxByNodeId","Map","hiddenByNodeId","node","hidden","add","codeBuilt","mediaByNodeId","boundByNodeId","iconByNodeId","forSanitizer","iconId","icon","iconPath","path","roles","lifted","bound","includes","surfaceAllow","allow","codeOnly","sanitized","output","rootIsWrapper","minted","mint","fresh","parentOf","queue","parentId","shift","newId","children","childId","child","childEntry","restrictParent","restrictChildren","reference","boundProps","propsResult","filter","$id","NODE","bytes","sourceIds"],"mappings":";;AAAA;;;;;;;;;;;;;;;CAeC,GAED,SACEA,cAAc,EACdC,iBAAiB,EACjBC,mBAAmB,QAId,kBAAc;AACrB,SACEC,oBAAoB,EACpBC,UAAU,EACVC,WAAW,EACXC,YAAY,QACP,4BAAwB;AAC/B,SAASC,yBAAyB,QAAQ,sCAAqC;AAC/E,SACEC,kBAAkB,EAClBC,YAAY,QACP,0CAAyC;AAChD,SAASC,aAAa,QAAQ,mCAAkC;AAChE,SACEC,2BAA2B,EAC3BC,8BAA8B,EAC9BC,iCAAiC,QAC5B,iDAAgD;AACvD,SAASC,eAAe,QAAQ,wCAAuC;AACvE,SAASC,sBAAsB,QAAQ,2CAA0C;AACjF,SAASC,QAAQ,QAAuB,2BAA0B;AAElE,SAASC,oBAAoB,EAAEC,UAAU,QAAQ,uBAAmB;AACpE,SACEC,6BAA6B,EAC7BC,sBAAsB,QACjB,6BAAyB;AAEhC,SAASC,0BAA0B,QAAQ,mDAAkD;AA0H7F;;;;;CAKC,GACD,OAAO,MAAMC,qBAA0C,IAAIC,IAAI;IAC7D,UAAU;IACV;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA,QAAQ;IACR;IACA;IACA;IACA;IACA;IACA,aAAa;IACb;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA,SAAS;IACT;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA,UAAU;IACV;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA,UAAU;IACV;IACA;IACA,OAAO;IACP;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA,OAAO;IACP;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;CACD,EAAC;AAEF;;;;CAIC,GACD,OAAO,MAAMC,eACX,2LAA0L;AAE5L;;;;;;CAMC,GACD,OAAO,MAAMC,WAAW,qCAAoC;AAE5D;;;;CAIC,GACD,MAAMC,qBAAqB;IACzB;IACA;IACA;IACA;IACA;CACD;AAED,MAAMC,YAAY;AAClB,sFAAsF,GACtF,MAAMC,oBAAoB;AAC1B,MAAMC,cAAc;AACpB,+EAA+E,GAC/E,MAAMC,mBAAmB;AAEzB,MAAMC,gBAAgB,IAAIR,IAAYjB,aAAa0B,OAAO;AAC1D,MAAMC,cAAc,IAAIV,IAAYjB,aAAa2B,WAAW;AAC5D,MAAMC,qBAAqB,IAAIX,IAAYjB,aAAa4B,kBAAkB;AAE1E,SAASC,SAASC,KAAc;IAC9B,OAAO,OAAOA,UAAU,YAAYA,UAAU,QAAQ,CAACC,MAAMC,OAAO,CAACF;AACvE;AAEA,4CAA4C,GAC5C,OAAO,SAASG,WAAWH,KAAa;IACtC,IAAI,CAAC,eAAeI,IAAI,CAACJ,QAAQ,OAAO;IACxC,IAAI;QACF,OAAO,IAAIK,IAAIL,OAAOM,QAAQ,KAAK;IACrC,EAAE,eAAM;QACN,OAAO;IACT;AACF;AAEA,0EAA0E,GAC1E,OAAO,SAASC,mBAAmBP,KAAa;IAC9C,OAAO,0BAA0BI,IAAI,CAACJ;AACxC;AAEA,SAASQ,eAAeC,GAAW,EAAET,KAAc;IACjD,IAAI,OAAOA,UAAU,UAAU,OAAOU,OAAOC,QAAQ,CAACX;IACtD,IAAI,OAAOA,UAAU,UAAU,OAAO;IACtC,MAAMY,UAAUZ,MAAMa,IAAI;IAC1B,IAAI,CAACD,WAAWxB,aAAagB,IAAI,CAACQ,UAAU,OAAO;IACnD,IAAIjB,cAAcmB,GAAG,CAACF,UAAU,OAAO;IACvC,IAAIH,QAAQ,gBAAgBX,mBAAmBgB,GAAG,CAACF,UAAU,OAAO;IACpE,OAAOvB,SAASe,IAAI,CAACQ;AACvB;AAEA;;;;CAIC,GACD,SAASG,WACPC,MAAc,EACdC,EAAW,EACXC,OAAiB;IAEjB,IAAI,CAACnB,SAASkB,KAAK;QACjB,IAAIA,OAAOE,WACTD,QAAQE,IAAI,CAAC,GAAGJ,OAAO,8BAA8B,CAAC;QACxD,OAAOG;IACT;IACA,MAAME,MAA+B,CAAC;IACtC,IAAIC,OAAO;IACX,KAAK,MAAM,CAACb,KAAKT,MAAM,IAAIuB,OAAOC,OAAO,CAACP,IAAK;QAC7C,IAAI,CAAC/B,mBAAmB4B,GAAG,CAACL,MAAM;YAChCS,QAAQE,IAAI,CAAC,GAAGJ,OAAO,KAAK,EAAEP,IAAI,iCAAiC,CAAC;YACpE;QACF;QACA,IAAIa,QAAQ7B,aAAa;YACvByB,QAAQE,IAAI,CACV,GAAGJ,OAAO,KAAK,EAAEP,IAAI,aAAa,EAAEhB,YAAY,qBAAqB,CAAC;YAExE;QACF;QACA,IAAIM,SAASC,QAAQ;YACnB,MAAMyB,aAAsC,CAAC;YAC7C,KAAK,MAAM,CAACC,YAAYC,MAAM,IAAIJ,OAAOC,OAAO,CAACxB,OAAQ;gBACvD,IAAI,CAACH,YAAYiB,GAAG,CAACY,aAAa;oBAChCR,QAAQE,IAAI,CACV,GAAGJ,OAAO,KAAK,EAAEP,IAAI,CAAC,EAAEiB,WAAW,6BAA6B,CAAC;oBAEnE;gBACF;gBACA,IAAI,CAAClB,eAAeC,KAAKkB,QAAQ;oBAC/BT,QAAQE,IAAI,CACV,GAAGJ,OAAO,KAAK,EAAEP,IAAI,CAAC,EAAEiB,WAAW,iCAAiC,CAAC;oBAEvE;gBACF;gBACAD,UAAU,CAACC,WAAW,GACpB,OAAOC,UAAU,WAAWA,MAAMd,IAAI,KAAKc;YAC/C;YACA,IAAIJ,OAAOK,IAAI,CAACH,YAAYI,MAAM,EAAE;gBAClCR,GAAG,CAACZ,IAAI,GAAGgB;gBACXH,QAAQ;YACV;YACA;QACF;QACA,IAAI,CAACd,eAAeC,KAAKT,QAAQ;YAC/BkB,QAAQE,IAAI,CAAC,GAAGJ,OAAO,KAAK,EAAEP,IAAI,iCAAiC,CAAC;YACpE;QACF;QACAY,GAAG,CAACZ,IAAI,GAAG,OAAOT,UAAU,WAAWA,MAAMa,IAAI,KAAKb;QACtDsB,QAAQ;IACV;IACA,OAAOA,OAAOD,MAAMF;AACtB;AAEA,SAASW,WAAWC,MAAoB,EAAE/B,KAAc;IACtD,IAAI,OAAOA,UAAU,YAAY,CAAC+B,OAAOC,IAAI,EAAE,OAAOb;IACtD,MAAMc,SAASjC,MAAMa,IAAI,GAAGqB,WAAW;IACvC,OAAOH,OAAOC,IAAI,CAACG,IAAI,CAAC,CAACC,SAAWA,OAAOF,WAAW,OAAOD;AAC/D;AAEA,SAASI,cAAcrC,KAAc;IACnC,IAAI,OAAOA,UAAU,WAAW,OAAOA;IACvC,IAAIA,UAAU,QAAQ,OAAO;IAC7B,IAAIA,UAAU,SAAS,OAAO;IAC9B,OAAOmB;AACT;AAEA,SAASmB,aACPP,MAAoB,EACpB/B,KAAc;IAEd,MAAMuC,SACJ,OAAOvC,UAAU,WACbA,QACA,OAAOA,UAAU,YAAYA,MAAMa,IAAI,OAAO,KAC5CH,OAAOV,SACPwC;IACR,IAAI,CAAC9B,OAAOC,QAAQ,CAAC4B,SAAS,OAAOpB;IACrC,IAAIY,OAAOU,IAAI,KAAK,aAAa,CAAC/B,OAAOgC,SAAS,CAACH,SAAS,OAAOpB;IACnE,IAAIY,OAAOY,OAAO,KAAKxB,aAAaoB,SAASR,OAAOY,OAAO,EAAE,OAAOxB;IACpE,IAAIY,OAAOa,OAAO,KAAKzB,aAAaoB,SAASR,OAAOa,OAAO,EAAE,OAAOzB;IACpE,OAAOoB;AACT;AAEA,SAASM,aACPC,KAAqB,EACrBC,IAAY,EACZC,KAA8B;IAE9B,MAAMC,WAAWH,MAAMI,UAAU,CAACH,KAAK;IACvC,2EAA2E;IAC3E,qEAAqE;IACrE,wBAAwB;IACxB,IAAIA,SAAS,cAAclF,kBAAkBmF,MAAMG,OAAO,GAAG;QAC3D,OAAOC,KAAKC,GAAG,CAACJ,mBAAAA,WAAYrF,eAAe0F,IAAI,EAAE1F,eAAe2F,QAAQ;IAC1E;IACA,OAAON,mBAAAA,WAAYrF,eAAe0F,IAAI;AACxC;AAEA;;;;CAIC,GACD,SAASE,eACPxC,MAAc,EACd8B,KAAqB,EACrBC,IAAY,EACZhB,MAAoB,EACpB0B,GAAW,EACXT,KAA8B,EAC9BU,SAA6B,EAC7BC,QAA4B,EAC5BzC,OAAiB,EACjB0C,gBAA4C,IAAI;IAEhD,IAAI5D,QAAQyD,IAAI5C,IAAI;IACpB,IAAIzB,aAAagB,IAAI,CAACJ,QAAQ;QAC5BkB,QAAQE,IAAI,CAAC,GAAGJ,OAAO,CAAC,EAAE+B,KAAK,kCAAkC,CAAC;QAClE,OAAO5B;IACT;IACA,0EAA0E;IAC1E,2EAA2E;IAC3E,yDAAyD;IACzD,IAAI2B,MAAMe,UAAU,CAACd,KAAK,KAAKvD,mBAAmB;QAChD0B,QAAQE,IAAI,CAAC,GAAGJ,OAAO,CAAC,EAAE+B,KAAK,iEAAiE,CAAC;QACjG,OAAO5B;IACT;IACA,MAAM2C,OAAOhB,MAAMiB,SAAS,CAAChB,KAAK;IAClC,OAAQe;QACN,KAAK;YAAQ;gBACX,MAAME,QAAQnB,aAAaC,OAAOC,MAAMC;gBACxC,IAAIhD,MAAM6B,MAAM,GAAGmC,OAAO;oBACxBhE,QAAQA,MAAMiE,KAAK,CAAC,GAAGD,OAAOE,OAAO;oBACrChD,QAAQE,IAAI,CACV,GAAGJ,OAAO,CAAC,EAAE+B,KAAK,UAAU,EAAEiB,MAAM,sBAAsB,CAAC;gBAE/D;gBACA;YACF;QACA,KAAK;YAAO;gBACV,IAAIJ,iCAAAA,cAAe9C,GAAG,CAACd,QAAQ;gBAC/B,IAAI,CAACG,WAAWH,UAAU,CAACO,mBAAmBP,QAAQ;oBACpDkB,QAAQE,IAAI,CACV,GAAGJ,OAAO,CAAC,EAAE+B,KAAK,0DAA0D,CAAC;oBAE/E,OAAO5B;gBACT;gBACA;YACF;QACA,KAAK;YAAU;gBACb,IAAIuC,YAAY,CAACA,UAAU5C,GAAG,CAACd,SAAS,CAACT,UAAUa,IAAI,CAACJ,QAAQ;oBAC9DkB,QAAQE,IAAI,CACV,GAAGJ,OAAO,CAAC,EAAE+B,KAAK,8CAA8C,CAAC;oBAEnE,OAAO5B;gBACT;gBACA;YACF;QACA,KAAK;YAAS;gBACZ,IAAIyC,iCAAAA,cAAe9C,GAAG,CAACd,QAAQ;gBAC/B,IAAIG,WAAWH,QAAQ;gBACvB,MAAMmE,MAAM7F,cAAc0B;gBAC1B,IAAI,CAACmE,OAAQR,YAAY,CAACA,SAAS7C,GAAG,CAACqD,IAAIC,OAAO,GAAI;oBACpDlD,QAAQE,IAAI,CACV,GAAGJ,OAAO,CAAC,EAAE+B,KAAK,wEAAwE,CAAC;oBAE7F,OAAO5B;gBACT;gBACA;YACF;QACA;YAAS;gBACP,IAAInB,MAAM6B,MAAM,GAAGnC,kBAAkB;oBACnCwB,QAAQE,IAAI,CACV,GAAGJ,OAAO,CAAC,EAAE+B,KAAK,SAAS,EAAErD,iBAAiB,oBAAoB,CAAC;oBAErE,OAAOyB;gBACT;YACF;IACF;IACA,IAAIY,OAAOsC,OAAO,IAAI,CAAC,IAAIC,OAAOvC,OAAOsC,OAAO,EAAEjE,IAAI,CAACJ,QAAQ;QAC7DkB,QAAQE,IAAI,CAAC,GAAGJ,OAAO,CAAC,EAAE+B,KAAK,oCAAoC,CAAC;QACpE,OAAO5B;IACT;IACA,IAAIY,OAAOwC,SAAS,KAAKpD,aAAanB,MAAM6B,MAAM,GAAGE,OAAOwC,SAAS,EAAE;QACrErD,QAAQE,IAAI,CACV,GAAGJ,OAAO,CAAC,EAAE+B,KAAK,iBAAiB,EAAEhB,OAAOwC,SAAS,CAAC,oBAAoB,CAAC;QAE7E,OAAOpD;IACT;IACA,IAAIY,OAAOyC,SAAS,KAAKrD,aAAanB,MAAM6B,MAAM,GAAGE,OAAOyC,SAAS,EAAE;QACrExE,QAAQA,MAAMiE,KAAK,CAAC,GAAGlC,OAAOyC,SAAS,EAAEN,OAAO;QAChDhD,QAAQE,IAAI,CACV,GAAGJ,OAAO,CAAC,EAAE+B,KAAK,UAAU,EAAEhB,OAAOyC,SAAS,CAAC,sBAAsB,CAAC;IAE1E;IACA,OAAOxE;AACT;AAEA;;;;;;;;;CASC,GACD,MAAMyE,kBAAkB,IAAIC;AAE5B,SAASC,qBAAqB7B,KAAqB;IACjD,MAAM8B,SAASH,gBAAgBI,GAAG,CAAC/B;IACnC,IAAI8B,QAAQ,OAAOA;IACnB,MAAME,aAAahH,oBACjBC,sBACA+E,MAAMiC,eAAe;IAEvB,MAAMC,SAAyB,aAC1BlC;QACHmC,aAAa,aACRnC,MAAMmC,WAAW;YACpBC,YAAY,aACPJ,WAAWI,UAAU,EACrBpC,MAAMmC,WAAW,CAACC,UAAU;;QAGnCnB,WAAW,aAAKe,WAAWf,SAAS,EAAKjB,MAAMiB,SAAS;QACxDb,YAAY,aAAK4B,WAAW5B,UAAU,EAAKJ,MAAMI,UAAU;;IAE7DuB,gBAAgBU,GAAG,CAACrC,OAAOkC;IAC3B,OAAOA;AACT;AAEA;;;;;;;CAOC,GACD,OAAO,MAAMI,4BAAiD,IAAIjG,IAAI;IAAC;CAAQ,EAAC;AAEhF,8EAA8E,GAC9E,OAAO,SAASkG,oBACdC,QAA4B,EAC5BvC,IAAY,EACZ/C,KAAc,EACd4D,gBAA4C,IAAI;IAEhD,IAAI,CAAC0B,YAAY,CAACF,0BAA0BtE,GAAG,CAACwE,WAAW,OAAO;IAClE,IAAIvC,SAAS,mBAAmB;QAC9B,OAAO;IACT;IACA,IAAIA,SAAS,OAAO,OAAO;IAC3B,MAAMwC,OAAO,OAAOvF,UAAU,WAAWA,MAAMa,IAAI,KAAK;IACxD,IAAI,CAAC0E,QAAQjH,cAAciH,UAAS3B,iCAAAA,cAAe9C,GAAG,CAACyE,QAAO,OAAO;IACrE,OAAO;AACT;AAEA,SAASC,cACPxE,MAAc,EACdyE,YAA4B,EAC5BhC,GAAY,EACZC,SAA6B,EAC7BC,QAA4B,EAC5BzC,OAAiB,EACjB0C,gBAA4C,IAAI;IAEhD,MAAMd,QAAQ6B,qBAAqBc;IACnC,MAAMC,SAAS3F,SAAS0D,OAAOA,MAAM,CAAC;IACtC,MAAMT,QAAiC,CAAC;IACxC,MAAMC,WAAWH,MAAMmC,WAAW,CAACC,UAAU;IAC7C,KAAK,MAAM,CAACnC,MAAM/C,MAAM,IAAIuB,OAAOC,OAAO,CAACkE,QAAS;QAClD,wEAAwE;QACxE,mDAAmD;QACnD,IAAI3C,SAAS,QAAQ/C,UAAUmB,aAAanB,UAAU,MAAM;QAC5D,+CAA+C;QAC/C,MAAM2F,eAAeN,oBAAoBvC,MAAMwC,QAAQ,EAAEvC,MAAM/C,OAAO4D;QACtE,IAAI+B,cAAc;YAChBzE,QAAQE,IAAI,CAAC,GAAGJ,OAAO,CAAC,EAAE+B,KAAK,EAAE,EAAE4C,aAAa,SAAS,CAAC;YAC1D;QACF;QACA,MAAM5D,SAASkB,QAAQ,CAACF,KAAK;QAC7B,IAAI,CAAChB,QAAQ;YACXb,QAAQE,IAAI,CACV,GAAGJ,OAAO,CAAC,EAAE+B,KAAK,kBAAkB,EAAED,MAAM8C,WAAW,CAAC,SAAS,CAAC;YAEpE;QACF;QACA,IAAI7D,OAAOC,IAAI,EAAE;YACf,MAAM6D,UAAU/D,WAAWC,QAAQ/B;YACnC,IAAI6F,YAAY1E,WAAW;gBACzBD,QAAQE,IAAI,CACV,GAAGJ,OAAO,CAAC,EAAE+B,KAAK,eAAe,EAAEhB,OAAOC,IAAI,CAAC8D,IAAI,CAAC,KAAK,SAAS,CAAC;gBAErE;YACF;YACA,IAAID,YAAY7F,OAAO;gBACrBkB,QAAQE,IAAI,CACV,GAAGJ,OAAO,CAAC,EAAE+B,KAAK,cAAc,EAAEgD,OAAO/F,OAAO,kBAAkB,EAAE6F,QAAQ,CAAC,CAAC;YAElF;YACA7C,KAAK,CAACD,KAAK,GAAG8C;YACd;QACF;QACA,OAAQ9D,OAAOU,IAAI;YACjB,KAAK;gBAAW;oBACd,MAAMoD,UAAUxD,cAAcrC;oBAC9B,IAAI6F,YAAY1E,WAAW;wBACzBD,QAAQE,IAAI,CAAC,GAAGJ,OAAO,CAAC,EAAE+B,KAAK,0BAA0B,CAAC;wBAC1D;oBACF;oBACAC,KAAK,CAACD,KAAK,GAAG8C;oBACd;gBACF;YACA,KAAK;YACL,KAAK;gBAAW;oBACd,MAAMA,UAAUvD,aAAaP,QAAQ/B;oBACrC,IAAI6F,YAAY1E,WAAW;wBACzBD,QAAQE,IAAI,CAAC,GAAGJ,OAAO,CAAC,EAAE+B,KAAK,kCAAkC,CAAC;wBAClE;oBACF;oBACAC,KAAK,CAACD,KAAK,GAAG8C;oBACd;gBACF;YACA;gBAAS;oBACP,MAAMN,OACJ,OAAOvF,UAAU,WACbA,QACA,OAAOA,UAAU,YAAY,OAAOA,UAAU,YAC5C+F,OAAO/F,SACPmB;oBACR,IAAIoE,SAASpE,WAAW;wBACtBD,QAAQE,IAAI,CAAC,GAAGJ,OAAO,CAAC,EAAE+B,KAAK,qBAAqB,CAAC;wBACrD;oBACF;oBACA,MAAMiD,UAAUxC,eACdxC,QACA8B,OACAC,MACAhB,QACAwD,MACAG,QACAhC,WACAC,UACAzC,SACA0C;oBAEF,IAAIoC,YAAY7E,WAAW;oBAC3B6B,KAAK,CAACD,KAAK,GAAGiD;gBAChB;QACF;IACF;IACA,KAAK,MAAMjD,QAAQD,MAAMmC,WAAW,CAACgB,QAAQ,CAAE;QAC7C,IAAIjD,KAAK,CAACD,KAAK,KAAK5B,WAAW,OAAO;YAAE+E,SAASnD;QAAK;IACxD;IACA,OAAO;QAAEC;IAAM;AACjB;AAEA,gFAAgF,GAChF,MAAMmD,oBAA4C,IAAIhH,IAAI;IACxD;IACA;IACA;CACD;AAED,MAAMiH,oBAAoB;AAE1B,oHAAoH,GACpH,OAAO,MAAMC,yBAAyB,gBAAe;AAErD,qFAAqF,GACrF,OAAO,MAAMC,uBAAuB,QAAO;AAY3C;;;;CAIC,GACD,SAASC,kBACPvF,MAAc,EACd+B,IAAY,EACZN,IAAY,EACZgB,GAAY,EACZE,QAA4B,EAC5BzC,OAAiB;IAEjB,IAAIuB,SAAS,UAAU;QACrB,MAAMF,SAAS,OAAOkB,QAAQ,WAAWA,MAAM/C,OAAO+C;QACtD,IAAIA,QAAQ,MAAM,CAAC/C,OAAOC,QAAQ,CAAC4B,SAAS;YAC1CrB,QAAQE,IAAI,CAAC,GAAGJ,OAAO,YAAY,EAAE+B,KAAK,yBAAyB,CAAC;YACpE,OAAO5B;QACT;QACA,OAAOoB;IACT;IACA,IAAIE,SAAS,WAAW;QACtB,MAAMoD,UAAUxD,cAAcoB;QAC9B,IAAIoC,YAAY1E,WAAW;YACzBD,QAAQE,IAAI,CAAC,GAAGJ,OAAO,YAAY,EAAE+B,KAAK,0BAA0B,CAAC;QACvE;QACA,OAAO8C;IACT;IACA,IAAIpD,SAAS,QAAQ;QACnB,wEAAwE;QACxE,wEAAwE;QACxE,mCAAmC;QACnCvB,QAAQE,IAAI,CAAC,GAAGJ,OAAO,YAAY,EAAE+B,KAAK,iEAAiE,CAAC;QAC5G,OAAO5B;IACT;IACA,IAAI,OAAOsC,QAAQ,YAAY,OAAOA,QAAQ,YAAY,OAAOA,QAAQ,WAAW;QAClFvC,QAAQE,IAAI,CAAC,GAAGJ,OAAO,YAAY,EAAE+B,KAAK,wBAAwB,CAAC;QACnE,OAAO5B;IACT;IACA,MAAMnB,QAAQ+F,OAAOtC,KAAK5C,IAAI;IAC9B,IAAIzB,aAAagB,IAAI,CAACJ,QAAQ;QAC5BkB,QAAQE,IAAI,CAAC,GAAGJ,OAAO,YAAY,EAAE+B,KAAK,kCAAkC,CAAC;QAC7E,OAAO5B;IACT;IACA,IAAIsB,SAAS,SAAS;QACpB,IAAItC,WAAWH,QAAQ,OAAOA;QAC9B,MAAMmE,MAAM7F,cAAc0B;QAC1B,IAAI,CAACmE,OAAQR,YAAY,CAACA,SAAS7C,GAAG,CAACqD,IAAIC,OAAO,GAAI;YACpDlD,QAAQE,IAAI,CACV,GAAGJ,OAAO,YAAY,EAAE+B,KAAK,wEAAwE,CAAC;YAExG,OAAO5B;QACT;QACA,OAAOnB;IACT;IACA,IAAIyC,SAAS,QAAQ;QACnB,IAAItC,WAAWH,UAAUO,mBAAmBP,QAAQ,OAAOA;QAC3DkB,QAAQE,IAAI,CACV,GAAGJ,OAAO,YAAY,EAAE+B,KAAK,0DAA0D,CAAC;QAE1F,OAAO5B;IACT;IACA,IAAInB,MAAM6B,MAAM,GAAGjE,eAAe0F,IAAI,EAAE;QACtCpC,QAAQE,IAAI,CACV,GAAGJ,OAAO,YAAY,EAAE+B,KAAK,UAAU,EAAEnF,eAAe0F,IAAI,CAAC,sBAAsB,CAAC;QAEtF,OAAOtD,MAAMiE,KAAK,CAAC,GAAGrG,eAAe0F,IAAI,EAAEY,OAAO;IACpD;IACA,OAAOlE;AACT;AAEA;;;;;CAKC,GACD,SAASwG,uBACPxF,MAAc,EACdyF,WAAmB,EACnBzD,KAA8B,EAC9B0D,IAAmB,EACnBxF,OAAiB;IAEjB,MAAMyF,OAAgC,aAAK3D;IAC3C,MAAM1B,OAAgC,CAAC;IACvC,2EAA2E;IAC3E,4EAA4E;IAC5E,0EAA0E;IAC1E,4DAA4D;IAC5D,IAAI+E,0BAA0BM,MAAM;YAIxBD;QAHV,MAAMjD,MAAMkD,IAAI,CAACN,uBAAuB;QACxC,OAAOM,IAAI,CAACN,uBAAuB;QACnC,MAAMO,KAAK,OAAOnD,QAAQ,WAAWA,IAAI5C,IAAI,KAAK;QAClD,IAAI+F,QAAMF,mBAAAA,KAAKG,UAAU,qBAAfH,iBAAiB5F,GAAG,CAAC8F,MAAK;YAClCtF,IAAI,CAAC+E,uBAAuB,GAAGO;QACjC,OAAO,IAAInD,QAAQtC,aAAasC,QAAQ,QAAQA,QAAQ,IAAI;YAC1DvC,QAAQE,IAAI,CAAC,GAAGJ,OAAO,CAAC,EAAEqF,uBAAuB,iDAAiD,CAAC;QACrG;IACF;IACA,IAAII,gBAAgBjI,gCAAgC;YAGnCkI;QAFf,MAAMI,QAAQ,OAAOH,IAAI,CAACL,qBAAqB,KAAK,WAAWP,OAAOY,IAAI,CAACL,qBAAqB,EAAEzF,IAAI,KAAK;QAC3G,OAAO8F,IAAI,CAACL,qBAAqB;QACjC,IAAI,CAACQ,SAAS,GAACJ,qBAAAA,KAAKK,YAAY,qBAAjBL,mBAAmB5F,GAAG,CAACgG,SAAQ;YAC5C,OAAO;gBACLE,SAAS,CAAC,oBAAoB,EAAEhG,OAAO,2CAA2C,CAAC;YACrF;QACF;QACAM,IAAI,CAACgF,qBAAqB,GAAGQ;QAC7B,MAAMG,YAAYN,IAAI,CAAClI,kCAAkC;QACzD,OAAOkI,IAAI,CAAClI,kCAAkC;QAC9C,IAAIwI,cAAc9F,aAAa,CAACpB,SAASkH,YAAY;YACnD/F,QAAQE,IAAI,CAAC,GAAGJ,OAAO,qCAAqC,CAAC;QAC/D;QACA,MAAMiC,WAAWyD,KAAKQ,cAAc,CAACJ,MAAM;QAC3C,MAAMK,SAAkC,CAAC;QACzC,KAAK,MAAM,CAACpE,MAAMU,IAAI,IAAIlC,OAAOC,OAAO,CAACzB,SAASkH,aAAaA,YAAY,CAAC,GAAI;;YAC9E,IAAIxD,QAAQtC,aAAasC,QAAQ,MAAM;YACvC,IAAI,CAAClF,4BAA4B6B,IAAI,CAAC2C,OAAO;gBAC3C7B,QAAQE,IAAI,CAAC,GAAGJ,OAAO,YAAY,EAAE+B,KAAK,4BAA4B,CAAC;gBACvE;YACF;YACA,IAAIE,YAAY,CAAEF,CAAAA,QAAQE,QAAO,GAAI;gBACnC/B,QAAQE,IAAI,CAAC,GAAGJ,OAAO,YAAY,EAAE+B,KAAK,yCAAyC,CAAC;gBACpF;YACF;YACA,IAAI2D,KAAKU,gBAAgB,IAAIpI,uBAAuByE,MAAM;gBACxD,kEAAkE;gBAClE,kEAAkE;gBAClE0D,MAAM,CAACpE,KAAK,GAAGU,IAAI5C,IAAI;gBACvB;YACF;YACA,MAAMb,QAAQuG,kBACZvF,QACA+B,cACAE,4BAAAA,QAAU,CAACF,KAAK,mBAAI,QACpBU,KACAiD,KAAK/C,QAAQ,EACbzC;YAEF,IAAIlB,UAAUmB,WAAWgG,MAAM,CAACpE,KAAK,GAAG/C;QAC1C;QACA,IAAIuB,OAAOK,IAAI,CAACuF,QAAQtF,MAAM,EAAEP,IAAI,CAAC7C,kCAAkC,GAAG0I;QAC1E,OAAO;YAAEnE,OAAO2D;YAAMrF;QAAK;IAC7B;IACA,IAAImF,gBAAgBL,mBAAmB;QACrC,MAAMiB,WAA2E;YAC/E;gBAAC;gBAAUX,KAAKY,OAAO;gBAAE;aAAO;YAChC;gBAAC;gBAAaZ,KAAKG,UAAU;gBAAE;aAAU;SAC1C;QACD,KAAK,MAAM,CAACU,MAAMC,KAAKC,OAAO,IAAIJ,SAAU;YAC1C,MAAM5D,MAAMkD,IAAI,CAACY,KAAK;YACtB,OAAOZ,IAAI,CAACY,KAAK;YACjB,IAAI9D,QAAQtC,aAAasC,QAAQ,QAAQA,QAAQ,IAAI;YACrD,MAAMmD,KAAK,OAAOnD,QAAQ,WAAWA,IAAI5C,IAAI,KAAK;YAClD,IAAI+F,OAAMY,uBAAAA,IAAK1G,GAAG,CAAC8F,MAAK;gBACtBtF,IAAI,CAACiG,KAAK,GAAGX;YACf,OAAO;gBACL1F,QAAQE,IAAI,CAAC,GAAGJ,OAAO,CAAC,EAAEuG,KAAK,SAAS,EAAEE,OAAO,iCAAiC,CAAC;YACrF;QACF;IACF;IACA,OAAO;QAAEzE,OAAO2D;QAAMrF;IAAK;AAC7B;AAEA,SAASoG,YAAYC,KAAa;IAChC,IAAI,aAAavH,IAAI,CAACuH,QAAQ,OAAO;IACrC,IAAI,uBAAuBvH,IAAI,CAACuH,QAAQ,OAAO;IAC/C,OAAO;AACT;AAEA;;;;CAIC,GACD,SAASC,YAAYC,WAAmB,EAAEpB,WAAoB;IAC5D,IAAIoB,gBAAgB,OAAO;QACzB,OAAOpB,eAAe,QAAQA,gBAAgB,MAAMA,gBAAgB;IACtE;IACA,OAAOA,gBAAgBoB;AACzB;AAEA,OAAO,SAASC,mBACdC,KAAc,EACdC,OAAkB,EAClBC,OAA2B;IAE3B,IAAI;QACF,OAAOC,SAASH,OAAOC,SAASC;IAClC,EAAE,OAAON,OAAO;QACd,OAAO;YACLQ,IAAI;YACJC,MAAM;YACNT,OAAO,CAAC,4BAA4B,EAAEA,iBAAiBU,QAAQV,MAAMW,OAAO,GAAGvC,OAAO4B,QAAQ;QAChG;IACF;AACF;AAWA;;;;;;;;;;CAUC,GACD,OAAO,SAASY,oBACd9B,WAAmB,EACnB+B,KAAwC,EACxCP,OAA2B;IAE3B,MAAMnF,QAAQ9E,UAAU,CAACyI,YAAY;IACrC,IAAI,CAAC3D,OAAO;QACV,OAAO;YACLqF,IAAI;YACJC,MAAM;YACNT,OAAO,CAAC,WAAW,EAAElB,YAAY,uBAAuB,CAAC;QAC3D;IACF;IACA,MAAMvF,UAAoB,EAAE;IAC5B,MAAM8B,QAAQwC,cACZiB,aACA,aAAK3D;QAAOmC,aAAa,aAAKnC,MAAMmC,WAAW;YAAEgB,UAAU,EAAE;;QAC7DuC,MAAMxF,KAAK,EACXiF,CAAAA,2BAAAA,QAASvE,SAAS,IAAG,IAAIvE,IAAI8I,QAAQvE,SAAS,IAAI,MAClDuE,CAAAA,2BAAAA,QAAStE,QAAQ,IAAG,IAAIxE,IAAI8I,QAAQtE,QAAQ,IAAI,MAChDzC;IAEF,MAAMD,KACJuH,MAAMvH,EAAE,KAAKE,YAAYA,YAAYJ,WAAW0F,aAAa+B,MAAMvH,EAAE,EAAEC;IACzE,OAAO;QACLiH,IAAI;QACJnF,OAAO,WAAWA,QAAQA,MAAMA,KAAK,GAAG,CAAC;QACzC/B;QACAC;IACF;AACF;AAEA,SAASgH,SACPH,KAAc,EACdC,OAAkB,EAClBC,OAAsC;cAoIqBQ;IAlI3D,MAAMA,aAAaxK,WAAW,CAAC+J,QAAQ;IACvC,IAAI,CAACS,YAAY;QACf,OAAO;YACLN,IAAI;YACJC,MAAM;YACNT,OAAO,CAAC,iBAAiB,EAAEK,QAAQ,CAAC,CAAC;QACvC;IACF;IACA,IACE,CAACjI,SAASgI,UACV,OAAOA,MAAMW,MAAM,KAAK,YACxB,CAAC3I,SAASgI,MAAMY,KAAK,GACrB;QACA,OAAO;YACLR,IAAI;YACJC,MAAM;YACNT,OAAO;QACT;IACF;IACA,MAAMe,SAASX,MAAMW,MAAM;IAC3B,MAAMC,QAAQZ,MAAMY,KAAK;IACzB,MAAMC,OAAOD,KAAK,CAACD,OAAO;IAC1B,IAAI,CAAC3I,SAAS6I,OAAO;QACnB,OAAO;YACLT,IAAI;YACJC,MAAM;YACNT,OAAO;QACT;IACF;IACA,IAAI,CAACC,YAAYa,WAAWG,IAAI,EAAEA,KAAKnC,WAAW,GAAG;QACnD,OAAO;YACL0B,IAAI;YACJC,MAAM;YACNT,OAAO,CAAC,EAAE,EAAEK,QAAQ,aAAa,EAAES,WAAWG,IAAI,KAAK,QAAQ,yBAAyB,CAAC,CAAC,EAAEH,WAAWG,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE7C,OAAO6C,KAAKnC,WAAW,EAAE,CAAC,CAAC;QACrJ;IACF;IAEA,2EAA2E;IAC3E,yEAAyE;IACzE,wEAAwE;IACxE,4CAA4C;IAC5C,MAAMoC,aAAa,IAAIC;IACvB,MAAMC,iBAAiB,IAAI5J;IAC3B,KAAK,MAAM,CAACyH,IAAIoC,KAAK,IAAIzH,OAAOC,OAAO,CAACmH,OAAQ;QAC9C,IAAI,CAAC5I,SAASiJ,OAAO;QACrB,MAAM/H,KACJ+H,KAAK/H,EAAE,KAAKE,YACR6H,KAAK/H,EAAE,GACPlB,SAASiJ,KAAKhG,KAAK,IACjBgG,KAAKhG,KAAK,CAAC/B,EAAE,GACbE;QACR,IAAIF,OAAOE,WAAW0H,WAAW1D,GAAG,CAACyB,IAAI3F;QACzC,IAAI+H,KAAKC,MAAM,KAAK,MAAMF,eAAeG,GAAG,CAACtC;IAC/C;IAEA,kEAAkE;IAClE,0EAA0E;IAC1E,wEAAwE;IACxE,yEAAyE;IACzE,+DAA+D;IAC/D,yEAAyE;IACzE,yEAAyE;IACzE,gDAAgD;IAChD,MAAMhD,gBAAgBqE,CAAAA,2BAAAA,QAASrE,aAAa,IAAG,IAAIzE,IAAI8I,QAAQrE,aAAa,IAAI;IAChF,4EAA4E;IAC5E,+EAA+E;IAC/E,yEAAyE;IACzE,uEAAuE;IACvE,MAAMwD,mBAAmBa,CAAAA,2BAAAA,QAASb,gBAAgB,MAAK;IACvD,MAAM+B,YAAYlB,CAAAA,2BAAAA,QAASkB,SAAS,MAAK;IACzC,MAAMC,gBAAgB,IAAIN;IAC1B,MAAMO,gBAAgB,IAAIP;IAC1B,+EAA+E;IAC/E,MAAMQ,eAAe,IAAIR;IACzB,MAAMS,eAAwC,CAAC;IAC/C,KAAK,MAAM,CAAC3C,IAAIoC,KAAK,IAAIzH,OAAOC,OAAO,CAACmH,OAAQ;;QAC9C,IAAI,CAAC5I,SAASiJ,SAAS,CAACjJ,SAASiJ,KAAKhG,KAAK,GAAG;YAC5CuG,YAAY,CAAC3C,GAAG,GAAGoC;YACnB;QACF;QACA,IAAIG,aAAaH,KAAKvC,WAAW,KAAK5H,sBAAsB;YAC1D,MAA6BmK,cAAAA,KAAKhG,KAAK,EAAjC,EAAEwG,MAAM,EAAY,GAAGR,aAAVhG,yCAAUgG;;;YAC7B,MAAMrC,OAAO,aAAK3D;YAClB,OAAO2D,IAAI,CAAC,WAAW;YACvB,MAAM8C,OAAO3K,WAAW0K;YACxB,IAAIC,MAAMH,aAAanE,GAAG,CAACyB,IAAI;gBAAE4C,QAAQC,KAAK7C,EAAE;gBAAE8C,UAAUD,KAAKE,IAAI;YAAC;YACtEJ,YAAY,CAAC3C,GAAG,GAAG,aAAKoC;gBAAMhG,OAAO2D;;YACrC;QACF;QACA,MAAM7D,QAAQ9E,UAAU,CAAC+H,OAAOiD,KAAKvC,WAAW,EAAE;QAClD,MAAMmD,iBAAQ9G,yBAAAA,MAAOiB,SAAS,oBAAI,CAAC;QACnC,MAAMf,QAAiC,aAAKgG,KAAKhG,KAAK;QACtD,MAAM6G,SAAiC,CAAC;QACxC,MAAMC,QAAgC,CAAC;QACvC,KAAK,MAAM,CAACrJ,KAAKT,MAAM,IAAIuB,OAAOC,OAAO,CAACwB,OAAQ;YAChD,IAAI,OAAOhD,UAAU,UAAU;YAC/B,MAAM8D,OAAO8F,KAAK,CAACnJ,IAAI;YACvB,IACE2G,oBACApI,uBAAuBgB,UACtBjB,CAAAA,8BAA8BgL,QAAQ,CAACtJ,QACrCqC,CAAAA,yBAAAA,MAAOmC,WAAW,CAACC,UAAU,CAACzE,IAAI,MAAKU,aAAa2C,SAAS,MAAM,GACtE;gBACAgG,KAAK,CAACrJ,IAAI,GAAGT,MAAMa,IAAI;gBACvB,OAAOmC,KAAK,CAACvC,IAAI;gBACjB;YACF;YACA,IACE,AAACqD,SAAS,WAAWxF,cAAc0B,MAAMa,IAAI,OAC5C,AAACiD,CAAAA,SAAS,WAAWA,SAAS,KAAI,MAAMF,iCAAAA,cAAe9C,GAAG,CAACd,MAAMa,IAAI,MACtE;gBACAgJ,MAAM,CAACpJ,IAAI,GAAGT;gBACd,OAAOgD,KAAK,CAACvC,IAAI;YACnB;QACF;QACA,IAAIc,OAAOK,IAAI,CAACiI,QAAQhI,MAAM,EAAEuH,cAAcjE,GAAG,CAACyB,IAAIiD;QACtD,IAAItI,OAAOK,IAAI,CAACkI,OAAOjI,MAAM,EAAEwH,cAAclE,GAAG,CAACyB,IAAIkD;QACrDP,YAAY,CAAC3C,GAAG,GAAG,aAAKoC;YAAMhG;;IAChC;IAEA,MAAM0D,OAAsB;QAC1BK,cAAckB,CAAAA,2BAAAA,QAASlB,YAAY,IAAG,IAAI5H,IAAI8I,QAAQlB,YAAY,IAAI;QACtEG,cAAc,UAAEe,2BAAAA,QAASf,cAAc,mBAAI,CAAC;QAC5CI,SAASW,CAAAA,2BAAAA,QAASX,OAAO,IAAG,IAAInI,IAAI8I,QAAQX,OAAO,IAAI;QACvDT,YAAYoB,CAAAA,2BAAAA,QAASpB,UAAU,IAAG,IAAI1H,IAAI8I,QAAQpB,UAAU,IAAI;QAChElD,UAAUsE,CAAAA,2BAAAA,QAAStE,QAAQ,IAAG,IAAIxE,IAAI8I,QAAQtE,QAAQ,IAAI;QAC1DyD;IACF;IACA,0EAA0E;IAC1E,iEAAiE;IACjE,MAAM4C,eAAeb,YAAY;WAAIV,WAAWwB,KAAK;YAAMxB,uBAAAA,WAAWyB,QAAQ,YAAnBzB,uBAAuB,EAAE;KAAE,GAAGA,WAAWwB,KAAK;IACzG,MAAMA,QACJvD,KAAKK,YAAY,IAAIZ,kBAAkBrF,GAAG,CAACkH,WACvC;WAAIgC;QAAcxL;KAA+B,GACjDwL;IACN,MAAMG,YAAYlL,2BAChB;QAAEyJ;QAAQC,OAAOY;IAAa,GAC9B;QAAExC,cAAckD;IAAM;IAExB,IAAIE,UAAUhC,EAAE,KAAK,OAAO;QAC1B,OAAO;YACLA,IAAI;YACJC,MAAMV,YAAYyC,UAAUxC,KAAK;YACjCA,OAAOwC,UAAUxC,KAAK;QACxB;IACF;IAEA,MAAMjE,YAAYuE,CAAAA,2BAAAA,QAASvE,SAAS,IAAG,IAAIvE,IAAI8I,QAAQvE,SAAS,IAAI;IACpE,MAAMC,WAAW+C,KAAK/C,QAAQ;IAC9B,MAAMzC,UAAoB,EAAE;IAC5B,MAAMkJ,SAAmB,CAAC;IAC1B,MAAMC,gBACJzC,YAAY,OAAOgB,KAAKnC,WAAW,KAAKgC,WAAWG,IAAI,KAAK;IAC9D,MAAM0B,SAAS,IAAIxB;IACnB,MAAMyB,OAAO,CAAC3D;QACZ,MAAM4D,QACJ5D,OAAO8B,UAAU2B,gBACb1L,yBACAD;QACN4L,OAAOnF,GAAG,CAACyB,IAAI4D;QACf,OAAOA;IACT;IAEA,+EAA+E,GAC/E,MAAMC,WAAW,IAAI3B;IACrB,MAAM4B,QAAwD;QAC5D;YAAE9D,IAAI8B;YAAQiC,UAAU;QAAK;KAC9B;IACDJ,KAAK7B;IACL,MAAOgC,MAAM7I,MAAM,CAAE;YA8DGmH;QA7DtB,MAAM,EAAEpC,EAAE,EAAE+D,QAAQ,EAAE,GAAGD,MAAME,KAAK;QAIpC,MAAM5B,OAAOmB,UAAUxB,KAAK,CAAC/B,GAAG;QAChC,MAAM9D,QAAQ9E,UAAU,CAACgL,KAAKvC,WAAW,CAAC;QAC1C,IAAI,CAAC3D,OAAO;YACV,OAAO;gBACLqF,IAAI;gBACJC,MAAM;gBACNT,OAAO,CAAC,WAAW,EAAEqB,KAAKvC,WAAW,CAAC,uBAAuB,CAAC;YAChE;QACF;QACA,MAAMoE,QAAQP,OAAOzF,GAAG,CAAC+B;QACzB,MAAMnD,MAAMkF,KAAK,CAAC/B,GAAG;QACrB,IAAI7G,SAAS0D,MAAM;YACjB,6DAA6D;YAC7D,KAAK,MAAMhD,OAAOnB,mBAAoB;gBACpC,IAAImE,GAAG,CAAChD,IAAI,KAAKU,WAAW;oBAC1BD,QAAQE,IAAI,CACV,GAAGwF,GAAG,CAAC,EAAEnG,IAAI,mDAAmD,CAAC;gBAErE;YACF;YACA,IAAIgD,IAAIwF,MAAM,KAAK9H,aAAa,OAAOsC,IAAIwF,MAAM,KAAK,WAAW;gBAC/D/H,QAAQE,IAAI,CAAC,GAAGwF,GAAG,iCAAiC,CAAC;YACvD;YACA,IAAInD,IAAIkF,KAAK,KAAKxH,aAAa,CAAClB,MAAMC,OAAO,CAACuD,IAAIkF,KAAK,GAAG;gBACxDzH,QAAQE,IAAI,CACV,GAAGwF,GAAG,4DAA4D,CAAC;YAEvE;YACA,IACEnD,IAAIkH,QAAQ,KAAKxJ,aACjBsC,IAAIkH,QAAQ,KAAK,QACjBlH,IAAIkH,QAAQ,KAAMA,CAAAA,aAAa,OAAO,OAAOF,SAAS5F,GAAG,CAAC+B,GAAE,GAC5D;gBACA1F,QAAQE,IAAI,CACV,GAAGwF,GAAG,6DAA6D,CAAC;YAExE;YACA,IAAI7G,SAAS0D,IAAIT,KAAK,GAAG;oBACRoG,oBACFC;gBADb,MAAMQ,UAAST,qBAAAA,cAAcvE,GAAG,CAAC+B,eAAlBwC,qBAAyB,CAAC;gBACzC,MAAM9H,QAAO+H,qBAAAA,cAAcxE,GAAG,CAAC+B,eAAlByC,qBAAyB,CAAC;gBACvC,KAAK,MAAM5I,OAAOc,OAAOK,IAAI,CAAC6B,IAAIT,KAAK,EAAG;wBAMtCgG;oBALF,IAAIM,aAAaxI,GAAG,CAAC8F,OAAQnG,CAAAA,QAAQ,YAAYA,QAAQ,UAAS,GAAI;oBACtE,IACEA,QAAQ,QACRoJ,MAAM,CAACpJ,IAAI,KAAKU,aAChBG,IAAI,CAACb,IAAI,KAAKU,aACd6H,EAAAA,cAAAA,KAAKhG,KAAK,qBAAVgG,WAAY,CAACvI,IAAI,MAAKU,aACtBsC,IAAIT,KAAK,CAACvC,IAAI,KAAKU,WACnB;wBACAD,QAAQE,IAAI,CACV,GAAGwF,GAAG,CAAC,EAAEnG,IAAI,kDAAkD,CAAC;oBAEpE;gBACF;YACF;QACF;QACA,MAAMqK,WAAqB,EAAE;QAC7B,KAAK,MAAMC,YAAW/B,cAAAA,KAAKL,KAAK,YAAVK,cAAc,EAAE,CAAE;YACtC,IAAIsB,OAAOxJ,GAAG,CAACiK,UAAU;gBACvB7J,QAAQE,IAAI,CACV,GAAG2J,QAAQ,qEAAqE,CAAC;gBAEnF;YACF;YACA,MAAMC,QAAQb,UAAUxB,KAAK,CAACoC,QAAQ;YACtC,IAAI,CAACC,OAAO;YACZ,MAAMC,aAAajN,UAAU,CAACgN,MAAMvE,WAAW,CAAC;YAChD,IAAI,CAACwE,YAAY;gBACf,OAAO;oBACL9C,IAAI;oBACJC,MAAM;oBACNT,OAAO,CAAC,WAAW,EAAEqD,MAAMvE,WAAW,CAAC,uBAAuB,CAAC;gBACjE;YACF;YACA,IAAI,CAAC3D,MAAMiC,eAAe,EAAE;gBAC1B,OAAO;oBACLoD,IAAI;oBACJC,MAAM;oBACNT,OAAO,GAAG7E,MAAM8C,WAAW,CAAC,EAAE,EAAEgB,GAAG,wCAAwC,EAAEmE,SAAS;gBACxF;YACF;YACA,IACE,CAAC5M,0BACC;gBACEsI,aAAauE,MAAMvE,WAAW;gBAC9BnB,UAAU2F,WAAW3F,QAAQ;gBAC7B4F,gBAAgBD,WAAWC,cAAc;YAC3C,GACA;gBACEzE,aAAauC,KAAKvC,WAAW;gBAC7BnB,UAAUxC,MAAMwC,QAAQ;gBACxB6F,kBAAkBrI,MAAMqI,gBAAgB;YAC1C,IAEF;gBACA,OAAO;oBACLhD,IAAI;oBACJC,MAAM;oBACNT,OAAO,GAAGsD,WAAWrF,WAAW,CAAC,EAAE,EAAEmF,QAAQ,0BAA0B,EAAEjI,MAAM8C,WAAW,CAAC,EAAE,EAAEgB,GAAG,CAAC,CAAC;gBACtG;YACF;YACAkE,SAAS1J,IAAI,CAACmJ,KAAKQ;YACnBN,SAAStF,GAAG,CAAC4F,SAASnE;YACtB8D,MAAMtJ,IAAI,CAAC;gBAAEwF,IAAImE;gBAASJ,UAAUE;YAAM;QAC5C;QAEA,MAAMO,YAAY5E,uBAChBI,IACAoC,KAAKvC,WAAW,EAChB,aAAKuC,KAAKhG,KAAK,EAAKoG,cAAcvE,GAAG,CAAC+B,MACtCF,MACAxF;QAEF,IAAI,aAAakK,WAAW;YAC1B,OAAO;gBAAEjD,IAAI;gBAAOC,MAAM;gBAAaT,OAAOyD,UAAUpE,OAAO;YAAC;QAClE;QACA,0EAA0E;QAC1E,MAAMqE,aAAahC,cAAcxE,GAAG,CAAC+B;QACrC,MAAM0E,cAAc9F,cAClBoB,IACAyE,aACI,aACKvI;YACHmC,aAAa,aACRnC,MAAMmC,WAAW;gBACpBgB,UAAUnD,MAAMmC,WAAW,CAACgB,QAAQ,CAACsF,MAAM,CAAC,CAACxI,OAASsI,UAAU,CAACtI,KAAK,KAAK5B;;aAG/E2B,OACJsI,UAAUpI,KAAK,EACfU,WACAC,UACAzC,SACA0C;QAEF,IAAI,aAAa0H,aAAa;YAC5B,OAAO;gBACLnD,IAAI;gBACJC,MAAM;gBACNT,OAAO,GAAG7E,MAAM8C,WAAW,CAAC,EAAE,EAAEgB,GAAG,2BAA2B,EAAE0E,YAAYpF,OAAO,CAAC,MAAM,CAAC;YAC7F;QACF;QACA,MAAMjF,KAAKF,WAAW6F,IAAIiC,WAAWhE,GAAG,CAAC+B,KAAK1F;QAC9CkJ,MAAM,CAACS,MAAM,GAAG;YACdW,KAAKX;YACLpI,MAAM7D,SAAS6M,IAAI;YACnBhF,aAAauC,KAAKvC,WAAW;YAC7BnB,UAAUxC,MAAMwC,QAAQ;YACxBqF;YACAhC,OAAOmC;YACP9H,OAAO,aAAKsI,YAAYtI,KAAK,EAAKoI,UAAU9J,IAAI,EAAK+J,YAAe/B,aAAazE,GAAG,CAAC+B;WACjF3F,KAAK;YAAEA;QAAG,IAAI,CAAC,GACf8H,eAAejI,GAAG,CAAC8F,MAAM;YAAEqC,QAAQ;QAAK,IAAI,CAAC;IAErD;IAEA,sEAAsE;IACtE,yEAAyE;IACzE,0DAA0D;IAC1D,MAAMyC,QAAQrN,aAAa+L;IAC3B,IAAIsB,QAAQtN,oBAAoB;QAC9B,OAAO;YACL+J,IAAI;YACJC,MAAM;YACNT,OAAO,CAAC,YAAY,EAAE+D,MAAM,8BAA8B,EAAEtN,oBAAoB;QAClF;IACF;IACA,MAAMuN,YAAoC,CAAC;IAC3C,KAAK,MAAM,CAACjG,QAAQ8E,MAAM,IAAIF,OAAQqB,SAAS,CAACnB,MAAM,GAAG9E;IACzD,OAAO;QACLyC,IAAI;QACJO,QAAQ4B,OAAOzF,GAAG,CAAC6D;QACnBC,OAAOyB;QACPlJ;QACAyK;IACF;AACF"}
+{"version":3,"sources":["../../../../../../../libs/plugins/ai/src/lib/runtime/ai-node-tree.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport {\n  AI_TEXT_LIMITS,\n  isHeadlineVariant,\n  nodeCapabilityProps,\n  type AiPaletteEntry,\n  type AiPropSchema,\n  type AiSurface,\n} from './ai-palette'\nimport {\n  AI_NODE_CAPABILITIES,\n  AI_PALETTE,\n  AI_SURFACES,\n  AI_SX_TOKENS,\n} from './ai-palette.generated'\nimport { linealRelationshipPermits } from '@aglyn/aglyn/app-utils/lineal-order'\nimport {\n  NODE_MAP_MAX_BYTES,\n  nodeMapBytes,\n} from '@aglyn/aglyn/app-utils/measure-node-map'\nimport { parseMediaRef } from '@aglyn/aglyn/app-utils/media-ref'\nimport {\n  COMPONENT_PROP_NAME_PATTERN,\n  REUSABLE_INSTANCE_COMPONENT_ID,\n  REUSABLE_INSTANCE_PROP_VALUES_KEY,\n} from '@aglyn/aglyn/app-utils/reusable-component-keys'\nimport { createIdUrlSafe } from '@aglyn/aglyn/foundation/constants/app'\nimport { CANVAS_ROOT_ELEMENT_ID } from '@aglyn/aglyn/foundation/constants/canvas'\nimport { NodeType, type NodesMap } from '@aglyn/aglyn/types/nodes'\nimport type { AiComponentPropTypes } from '../model/ai-site-inventory'\nimport { AI_ICON_COMPONENT_ID, aiIconOfId } from './ai-icon-library'\nimport {\n  AI_COMPONENT_VISIBILITY_PROPS,\n  isAiComponentPropToken,\n} from './ai-component-bindings'\n\nimport { sanitizePortableDefinition } from '@aglyn/aglyn/app-utils/node-definition-sanitizer'\n\n/**\n * The one path an AI-emitted node tree takes into storage (AGL-2905).\n *\n * A model answers with a flat node map in the shape the canvas persists.\n * Nothing about that map is trusted: the component ids, the parent/child\n * pairs, every prop and every `sx` key are what the model chose to write,\n * and the renderer spreads props onto the DOM. So the tree is first held to\n * the same sanitizer a marketplace install passes — reachability from the\n * root, the surface's component allowlist, the persisted node keys, `href`\n * and `src` protocols, a size cap — and then to what a listing never needed\n * checking because a human authored it in the editor:\n *\n * - the parent/child restrictions the besigner enforces on drop\n *   (`restrictChildren` / `restrictParent`), and whether an element can hold\n *   children at all;\n * - every prop against the generated palette's schema — unknown props are\n *   dropped, enum values coerced case-insensitively, a required prop that is\n *   missing refuses the tree;\n * - `sx` against a fixed key set and a value grammar of theme tokens, numbers\n *   and CSS lengths or keywords, with nothing that can reach a URL or a\n *   stylesheet;\n * - copy length by role — a headline, a paragraph, a button label;\n * - links to a screen the host has, a root-relative path or an `https:` URL,\n *   and media to a DAM reference or an `https:` URL;\n * - the stored-node-map byte ceiling, measured the way the save measures it.\n *\n * ## The site's own records, when the caller names them (AGL-2935)\n *\n * A reusable-component instance, a form picked on the Forms page and a\n * dataset are each \"a reference into another document\", which is why the\n * palette leaves them off: from a description alone a model can only invent\n * an id. A generator that has read the site's inventory can name real ones,\n * and the building doctrine requires it to — a repeat is placed as\n * instances of one component, and a form is bound by id rather than drawn\n * inline. So the three are admitted exactly as screen links are: only\n * against the ids the caller supplies. With no `componentIds` an instance is\n * still refused; with no `formIds` or `datasetIds` the binding is dropped.\n *\n * What comes out is the flat `NodesMap` `encodeStoredNodes` takes, with every\n * id minted fresh the way a preset graft mints them, so nothing the model\n * wrote can collide with a node already on the canvas. `sourceIds` maps each\n * minted id back to the id the model wrote, so a caller can quote a refused\n * subtree in the model's own words. Every drop is listed in `repairs`; every\n * refusal names its `code`. The function never throws.\n */\n\nexport type AiNodeTreeRefusalCode =\n  /** Not an object with a `rootId` and a `nodes` map, or an unknown surface. */\n  | 'invalid-input'\n  /** The root node carries a component the surface does not start with. */\n  | 'root'\n  /** A structural failure the sanitizer named: missing node, empty tree. */\n  | 'structure'\n  /** A component id outside the surface's allowlist. */\n  | 'component'\n  /** A parent/child pair the besigner would refuse on drop. */\n  | 'lineage'\n  /** A prop the palette marks required is absent. */\n  | 'required-prop'\n  /** Over the sanitizer's or the stored-node-map's byte ceiling. */\n  | 'too-large'\n  /** A component instance naming a component the site does not have. */\n  | 'reference'\n\nexport type AiNodeTreeResult =\n  | {\n      ok: true\n      rootId: string\n      nodes: NodesMap\n      repairs: string[]\n      /** Each minted id → the id the model wrote for that node. */\n      sourceIds: Record<string, string>\n    }\n  | { ok: false; error: string; code: AiNodeTreeRefusalCode }\n\nexport interface AiNodeTreeContext {\n  /** Screen ids a `screen` prop may name. Absent: any well-formed id. */\n  screenIds?: Iterable<string>\n  /** DAM media ids a `media` prop may reference. Absent: any well-formed reference. */\n  assetIds?: Iterable<string>\n  /**\n   * Reusable components an instance may place. Absent: no instance is\n   * admitted, which is the palette's own rule for a tree nobody grounded.\n   */\n  componentIds?: Iterable<string>\n  /** Declared props per component id, which an instance's values are held to. */\n  componentProps?: Record<string, AiComponentPropTypes>\n  /** Forms on the Forms page a Form element may bind by `formId`. */\n  formIds?: Iterable<string>\n  /** Datasets a Form element may write to by `datasetId`. */\n  datasetIds?: Iterable<string>\n  /**\n   * Binding tokens a `url` or `media` prop may hold whole — an Image whose\n   * `src` is `{{entry.coverImage}}` on a page template, filled per record\n   * when the page renders (AGL-2909). Absent: a token in either role is\n   * dropped like any other value that is not an address.\n   */\n  bindingTokens?: Iterable<string>\n  /**\n   * The tree defines a reusable component (AGL-2908). A field that is not\n   * copy — a switch, a dropdown, a screen, an address, a picture, a number —\n   * and the `hideIf` and `hideUnless` directives may then hold one of the\n   * component's own `{{prop.<name>}}` tokens as their whole value, and a\n   * placed component may be handed one in its `propValues`; each is kept as\n   * written. Which property a token names, and whether its kind binds to that\n   * field, is the component step's check (`ai-component-bindings.ts`).\n   * Absent: such a token is dropped like any value the field cannot hold.\n   */\n  definesComponent?: boolean\n  /**\n   * The tree was composed by the platform's own code — the layout language\n   * compiler (AGL-3660) — and not written by a model. The surface's code-only\n   * elements are then admitted (an Icon, and a layout's Drawer with its Menu\n   * Button), and an Icon keeps the id and the path the icon library gives\n   * the id it names (`ai-icon-library.ts`): the path is the library's, never\n   * the tree's. Absent: a model's tree, held to the surface's catalog.\n   */\n  codeBuilt?: boolean\n}\n\n/**\n * `sx` keys a model may set: spacing, color, typography, layout, borders,\n * display, flex and grid. Fixed rather than derived — MUI's system accepts\n * far more (pseudo-selectors, nested selectors, arbitrary CSS properties)\n * and every one of those is a way to reach outside the element.\n */\nexport const AI_SX_ALLOWED_KEYS: ReadonlySet<string> = new Set([\n  // spacing\n  'm',\n  'mt',\n  'mr',\n  'mb',\n  'ml',\n  'mx',\n  'my',\n  'margin',\n  'marginTop',\n  'marginRight',\n  'marginBottom',\n  'marginLeft',\n  'p',\n  'pt',\n  'pr',\n  'pb',\n  'pl',\n  'px',\n  'py',\n  'padding',\n  'paddingTop',\n  'paddingRight',\n  'paddingBottom',\n  'paddingLeft',\n  'gap',\n  'rowGap',\n  'columnGap',\n  // color\n  'color',\n  'bgcolor',\n  'backgroundColor',\n  'borderColor',\n  'opacity',\n  // typography\n  'typography',\n  'fontSize',\n  'fontWeight',\n  'fontFamily',\n  'fontStyle',\n  'lineHeight',\n  'letterSpacing',\n  'textAlign',\n  'textTransform',\n  'textDecoration',\n  'whiteSpace',\n  'textOverflow',\n  'overflowWrap',\n  'wordBreak',\n  // layout\n  'width',\n  'minWidth',\n  'maxWidth',\n  'height',\n  'minHeight',\n  'maxHeight',\n  'boxSizing',\n  'overflow',\n  'overflowX',\n  'overflowY',\n  'position',\n  'top',\n  'right',\n  'bottom',\n  'left',\n  'zIndex',\n  'aspectRatio',\n  'objectFit',\n  // borders\n  'border',\n  'borderTop',\n  'borderRight',\n  'borderBottom',\n  'borderLeft',\n  'borderWidth',\n  'borderStyle',\n  'borderRadius',\n  'boxShadow',\n  // display\n  'display',\n  'visibility',\n  // flex\n  'flexDirection',\n  'flexWrap',\n  'justifyContent',\n  'alignItems',\n  'alignContent',\n  'alignSelf',\n  'justifySelf',\n  'flex',\n  'flexGrow',\n  'flexShrink',\n  'flexBasis',\n  'order',\n  // grid\n  'gridTemplateColumns',\n  'gridTemplateRows',\n  'gridColumn',\n  'gridRow',\n  'gridArea',\n  'gridAutoFlow',\n  'gridAutoColumns',\n  'gridAutoRows',\n  'justifyItems',\n  'placeItems',\n  'placeContent',\n])\n\n/**\n * Substrings no string a model wrote may carry, in a prop or an `sx` value.\n * Exported for the theme tool's component style values (AGL-2938), which are\n * the same kind of CSS value written into a theme instead of a node.\n */\nexport const HOSTILE_TEXT =\n  /<\\s*\\/?\\s*(script|iframe|object|embed|svg|style|link|meta|base|frame|form|input|img)\\b|javascript:|vbscript:|data:text\\/html|expression\\s*\\(|url\\s*\\(|@import|!important|\\bon[a-z]+\\s*=/i\n\n/**\n * A CSS value a model may write into `sx`: lengths, numbers, keywords,\n * shorthands (`1px solid`), functions with plain arguments (`repeat(3, 1fr)`,\n * `rgba(0, 0, 0, 0.2)`), hex colors and theme tokens. No quotes, no\n * semicolons, no braces, no angle brackets, no colons — which is what keeps\n * a `url(`, a selector or a second declaration out.\n */\nexport const SX_VALUE = /^[A-Za-z0-9#.,%()\\s\\-_/+*]{1,100}$/\n\n/**\n * Node fields the sanitizer strips that a model has no business writing —\n * each is a way to reach past the node's own box, and each is named in\n * `repairs` so a route can tell the model what it lost.\n */\nconst STRIPPED_NODE_KEYS = [\n  'className',\n  'interactions',\n  'styleOverrides',\n  'attrOverrides',\n  'presetRef',\n] as const\n\nconst SCREEN_ID = /^[A-Za-z0-9_-]{1,64}$/\n/** The field an icon is picked with; its value carries a drawing no model can write. */\nconst ICON_PICKER_FIELD = 'icon-picker'\nconst MAX_SX_KEYS = 40\n/** A string prop with no role of its own — a color, a CSS length, an icon id. */\nconst PLAIN_STRING_MAX = 500\n\nconst paletteTokens = new Set<string>(AI_SX_TOKENS.palette)\nconst breakpoints = new Set<string>(AI_SX_TOKENS.breakpoints)\nconst typographyVariants = new Set<string>(AI_SX_TOKENS.typographyVariants)\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return typeof value === 'object' && value !== null && !Array.isArray(value)\n}\n\n/** An `https:` address that parses as one. */\nexport function isHttpsUrl(value: string): boolean {\n  if (!/^https:\\/\\//i.test(value)) return false\n  try {\n    return new URL(value).protocol === 'https:'\n  } catch {\n    return false\n  }\n}\n\n/**\n * A link that calls or writes (AGL-3979): `tel:` and a phone number's digits,\n * a `+` only first, or `mailto:` and one address with nothing after it. The\n * number or address itself is held to the facts the job was given by the\n * layout's own contact check, which reads every prop.\n */\nexport function isContactHref(value: string): boolean {\n  return /^tel:\\+?\\d{7,15}$/.test(value) || /^mailto:[^\\s@<>?#\"]+@[^\\s@<>?#\"]+\\.[^\\s@<>?#\".]{2,}$/i.test(value)\n}\n\n/** A path on this site: one leading slash, never a scheme-relative `//`. */\nexport function isRootRelativePath(value: string): boolean {\n  return /^\\/(?!\\/)[^\\s<>\"'`\\\\]*$/.test(value)\n}\n\nfunction sxValueAllowed(key: string, value: unknown): boolean {\n  if (typeof value === 'number') return Number.isFinite(value)\n  if (typeof value !== 'string') return false\n  const trimmed = value.trim()\n  if (!trimmed || HOSTILE_TEXT.test(trimmed)) return false\n  if (paletteTokens.has(trimmed)) return true\n  if (key === 'typography' && typographyVariants.has(trimmed)) return true\n  return SX_VALUE.test(trimmed)\n}\n\n/**\n * The allowed slice of an `sx` object, with a line per key or value dropped.\n * Responsive objects keep only breakpoint keys; anything deeper — a\n * pseudo-selector, a nested selector, an array — is not a value at all.\n */\nfunction sanitizeSx(\n  nodeId: string,\n  sx: unknown,\n  repairs: string[],\n): Record<string, unknown> | undefined {\n  if (!isRecord(sx)) {\n    if (sx !== undefined)\n      repairs.push(`${nodeId}: sx is not an object; dropped`)\n    return undefined\n  }\n  const out: Record<string, unknown> = {}\n  let kept = 0\n  for (const [key, value] of Object.entries(sx)) {\n    if (!AI_SX_ALLOWED_KEYS.has(key)) {\n      repairs.push(`${nodeId}: sx.${key} is not an allowed style; dropped`)\n      continue\n    }\n    if (kept >= MAX_SX_KEYS) {\n      repairs.push(\n        `${nodeId}: sx.${key} is past the ${MAX_SX_KEYS}-key ceiling; dropped`,\n      )\n      continue\n    }\n    if (isRecord(value)) {\n      const responsive: Record<string, unknown> = {}\n      for (const [breakpoint, inner] of Object.entries(value)) {\n        if (!breakpoints.has(breakpoint)) {\n          repairs.push(\n            `${nodeId}: sx.${key}.${breakpoint} is not a breakpoint; dropped`,\n          )\n          continue\n        }\n        if (!sxValueAllowed(key, inner)) {\n          repairs.push(\n            `${nodeId}: sx.${key}.${breakpoint} is not an allowed value; dropped`,\n          )\n          continue\n        }\n        responsive[breakpoint] =\n          typeof inner === 'string' ? inner.trim() : inner\n      }\n      if (Object.keys(responsive).length) {\n        out[key] = responsive\n        kept += 1\n      }\n      continue\n    }\n    if (!sxValueAllowed(key, value)) {\n      repairs.push(`${nodeId}: sx.${key} is not an allowed value; dropped`)\n      continue\n    }\n    out[key] = typeof value === 'string' ? value.trim() : value\n    kept += 1\n  }\n  return kept ? out : undefined\n}\n\nfunction coerceEnum(schema: AiPropSchema, value: unknown): string | undefined {\n  if (typeof value !== 'string' || !schema.enum) return undefined\n  const wanted = value.trim().toLowerCase()\n  return schema.enum.find((option) => option.toLowerCase() === wanted)\n}\n\nfunction coerceBoolean(value: unknown): boolean | undefined {\n  if (typeof value === 'boolean') return value\n  if (value === 'true') return true\n  if (value === 'false') return false\n  return undefined\n}\n\nfunction coerceNumber(\n  schema: AiPropSchema,\n  value: unknown,\n): number | undefined {\n  const parsed =\n    typeof value === 'number'\n      ? value\n      : typeof value === 'string' && value.trim() !== ''\n        ? Number(value)\n        : NaN\n  if (!Number.isFinite(parsed)) return undefined\n  if (schema.type === 'integer' && !Number.isInteger(parsed)) return undefined\n  if (schema.minimum !== undefined && parsed < schema.minimum) return undefined\n  if (schema.maximum !== undefined && parsed > schema.maximum) return undefined\n  return parsed\n}\n\nfunction textLimitFor(\n  entry: AiPaletteEntry,\n  name: string,\n  props: Record<string, unknown>,\n): number {\n  const declared = entry.textLimits[name]\n  // A heading's copy is held to the headline ceiling, decided by the variant\n  // the same node carries; anything else keeps the ceiling the palette\n  // assigned to the prop.\n  if (name === 'children' && isHeadlineVariant(props.variant)) {\n    return Math.min(declared ?? AI_TEXT_LIMITS.body, AI_TEXT_LIMITS.headline)\n  }\n  return declared ?? AI_TEXT_LIMITS.body\n}\n\n/**\n * One string prop against its role. Returns the value to store, or\n * `undefined` with the reason pushed to `repairs`. A binding token the\n * caller admitted passes a `url` or `media` role whole.\n */\nfunction sanitizeString(\n  nodeId: string,\n  entry: AiPaletteEntry,\n  name: string,\n  schema: AiPropSchema,\n  raw: string,\n  props: Record<string, unknown>,\n  screenIds: Set<string> | null,\n  assetIds: Set<string> | null,\n  repairs: string[],\n  bindingTokens: ReadonlySet<string> | null = null,\n): string | undefined {\n  let value = raw.trim()\n  if (HOSTILE_TEXT.test(value)) {\n    repairs.push(`${nodeId}.${name} carried markup or script; dropped`)\n    return undefined\n  }\n  // An icon is drawn from the path its picker stores beside the id, which a\n  // model can never supply, so an icon a model names draws nothing where the\n  // page is published (AGL-3054). The site owner picks it.\n  if (entry.propFields[name] === ICON_PICKER_FIELD) {\n    repairs.push(`${nodeId}.${name} is an icon, which the site owner picks from the library; dropped`)\n    return undefined\n  }\n  const role = entry.propRoles[name]\n  switch (role) {\n    case 'text': {\n      const limit = textLimitFor(entry, name, props)\n      if (value.length > limit) {\n        value = value.slice(0, limit).trimEnd()\n        repairs.push(\n          `${nodeId}.${name} was over ${limit} characters; truncated`,\n        )\n      }\n      break\n    }\n    case 'url': {\n      if (bindingTokens?.has(value)) break\n      if (!isHttpsUrl(value) && !isRootRelativePath(value) && !isContactHref(value)) {\n        repairs.push(\n          `${nodeId}.${name} is neither an https: URL nor a path on this site; dropped`,\n        )\n        return undefined\n      }\n      break\n    }\n    case 'screen': {\n      if (screenIds ? !screenIds.has(value) : !SCREEN_ID.test(value)) {\n        repairs.push(\n          `${nodeId}.${name} names a page this site does not have; dropped`,\n        )\n        return undefined\n      }\n      break\n    }\n    case 'media': {\n      if (bindingTokens?.has(value)) break\n      if (isHttpsUrl(value)) break\n      const ref = parseMediaRef(value)\n      if (!ref || (assetIds && !assetIds.has(ref.mediaId))) {\n        repairs.push(\n          `${nodeId}.${name} is neither a media reference this site holds nor an https: URL; dropped`,\n        )\n        return undefined\n      }\n      break\n    }\n    default: {\n      if (value.length > PLAIN_STRING_MAX) {\n        repairs.push(\n          `${nodeId}.${name} is over ${PLAIN_STRING_MAX} characters; dropped`,\n        )\n        return undefined\n      }\n    }\n  }\n  if (schema.pattern && !new RegExp(schema.pattern).test(value)) {\n    repairs.push(`${nodeId}.${name} does not match its pattern; dropped`)\n    return undefined\n  }\n  if (schema.minLength !== undefined && value.length < schema.minLength) {\n    repairs.push(\n      `${nodeId}.${name} is shorter than ${schema.minLength} characters; dropped`,\n    )\n    return undefined\n  }\n  if (schema.maxLength !== undefined && value.length > schema.maxLength) {\n    value = value.slice(0, schema.maxLength).trimEnd()\n    repairs.push(\n      `${nodeId}.${name} was over ${schema.maxLength} characters; truncated`,\n    )\n  }\n  return value\n}\n\n/**\n * The element's own declarations plus the node capabilities every element\n * carries (AGL-3156) — repeating, today. Two shapes only, so they are built\n * once each rather than per node: a capability prop is the same on every\n * element with the same child contract.\n *\n * The element wins a name collision. A component that declared a prop of its\n * own under a capability's name would be describing its own attribute, and the\n * validator has to hold it to that.\n */\nconst CAPABLE_ENTRIES = new WeakMap<AiPaletteEntry, AiPaletteEntry>()\n\nfunction withNodeCapabilities(entry: AiPaletteEntry): AiPaletteEntry {\n  const cached = CAPABLE_ENTRIES.get(entry)\n  if (cached) return cached\n  const capability = nodeCapabilityProps(\n    AI_NODE_CAPABILITIES,\n    entry.acceptsChildren,\n  )\n  const merged: AiPaletteEntry = {\n    ...entry,\n    propsSchema: {\n      ...entry.propsSchema,\n      properties: {\n        ...capability.properties,\n        ...entry.propsSchema.properties,\n      },\n    },\n    propRoles: { ...capability.propRoles, ...entry.propRoles },\n    textLimits: { ...capability.textLimits, ...entry.textLimits },\n  }\n  CAPABLE_ENTRIES.set(entry, merged)\n  return merged\n}\n\n/**\n * Plugins whose elements play audio (AGL-3716): the Music player. A model\n * never sources a recording and never vouches for one, so on their elements\n * `rightsConfirmed` is always dropped and `src` is kept only as a reference\n * to a file in the site's own library (which the asset check grounds) or a\n * binding. Named by plugin id, as the listings name their elements: a plugin\n * never imports another.\n */\nexport const AI_OWNER_AUDIO_PLUGIN_IDS: ReadonlySet<string> = new Set(['music'])\n\n/** Why an audio element's prop a model wrote is dropped, or null to keep it. */\nexport function aiOwnerAudioRefusal(\n  pluginId: string | undefined,\n  name: string,\n  value: unknown,\n  bindingTokens: ReadonlySet<string> | null = null,\n): string | null {\n  if (!pluginId || !AI_OWNER_AUDIO_PLUGIN_IDS.has(pluginId)) return null\n  if (name === 'rightsConfirmed') {\n    return 'only the site owner can confirm they hold the rights to a recording'\n  }\n  if (name !== 'src') return null\n  const text = typeof value === 'string' ? value.trim() : ''\n  if (!text || parseMediaRef(text) || bindingTokens?.has(text)) return null\n  return 'a player plays only audio from the owner’s own media library, never a recording from elsewhere'\n}\n\nfunction sanitizeProps(\n  nodeId: string,\n  paletteEntry: AiPaletteEntry,\n  raw: unknown,\n  screenIds: Set<string> | null,\n  assetIds: Set<string> | null,\n  repairs: string[],\n  bindingTokens: ReadonlySet<string> | null = null,\n): { props: Record<string, unknown> } | { missing: string } {\n  const entry = withNodeCapabilities(paletteEntry)\n  const source = isRecord(raw) ? raw : {}\n  const props: Record<string, unknown> = {}\n  const declared = entry.propsSchema.properties\n  for (const [name, value] of Object.entries(source)) {\n    // `sx` is read off the node instead; a model that put it here meant the\n    // same thing, and the caller has already moved it.\n    if (name === 'sx' || value === undefined || value === null) continue\n    // Audio is the owner's own, always (AGL-3716).\n    const audioRefusal = aiOwnerAudioRefusal(entry.pluginId, name, value, bindingTokens)\n    if (audioRefusal) {\n      repairs.push(`${nodeId}.${name}: ${audioRefusal}; dropped`)\n      continue\n    }\n    const schema = declared[name]\n    if (!schema) {\n      repairs.push(\n        `${nodeId}.${name} is not a prop of ${entry.displayName}; dropped`,\n      )\n      continue\n    }\n    if (schema.enum) {\n      const coerced = coerceEnum(schema, value)\n      if (coerced === undefined) {\n        repairs.push(\n          `${nodeId}.${name} is not one of ${schema.enum.join('|')}; dropped`,\n        )\n        continue\n      }\n      if (coerced !== value) {\n        repairs.push(\n          `${nodeId}.${name} was spelled \"${String(value)}\"; normalized to \"${coerced}\"`,\n        )\n      }\n      props[name] = coerced\n      continue\n    }\n    switch (schema.type) {\n      case 'boolean': {\n        const coerced = coerceBoolean(value)\n        if (coerced === undefined) {\n          repairs.push(`${nodeId}.${name} is not a boolean; dropped`)\n          continue\n        }\n        props[name] = coerced\n        break\n      }\n      case 'number':\n      case 'integer': {\n        const coerced = coerceNumber(schema, value)\n        if (coerced === undefined) {\n          repairs.push(`${nodeId}.${name} is not a number in range; dropped`)\n          continue\n        }\n        props[name] = coerced\n        break\n      }\n      default: {\n        const text =\n          typeof value === 'string'\n            ? value\n            : typeof value === 'number' || typeof value === 'boolean'\n              ? String(value)\n              : undefined\n        if (text === undefined) {\n          repairs.push(`${nodeId}.${name} is not text; dropped`)\n          continue\n        }\n        const cleaned = sanitizeString(\n          nodeId,\n          entry,\n          name,\n          schema,\n          text,\n          source,\n          screenIds,\n          assetIds,\n          repairs,\n          bindingTokens,\n        )\n        if (cleaned === undefined) continue\n        props[name] = cleaned\n      }\n    }\n  }\n  for (const name of entry.propsSchema.required) {\n    if (props[name] === undefined) return { missing: name }\n  }\n  return { props }\n}\n\n/** Surfaces that compose page elements, and so may place a component instance. */\nconst INSTANCE_SURFACES: ReadonlySet<AiSurface> = new Set([\n  'screen',\n  'layout',\n  'component',\n])\n\nconst FORM_COMPONENT_ID = 'form'\n\n/** The prop a repeat over a dataset is stored under (the data plugin's `repeatDataset`). Persisted — never rename. */\nexport const AI_REPEAT_DATASET_PROP = 'repeatDataset'\n\n/** The instance prop naming the component it places; stored on every instance node. */\nexport const AI_INSTANCE_REF_PROP = 'refId'\n\ninterface ReferenceSets {\n  componentIds: Set<string> | null\n  componentProps: Record<string, AiComponentPropTypes>\n  formIds: Set<string> | null\n  datasetIds: Set<string> | null\n  assetIds: Set<string> | null\n  /** The tree defines a reusable component, which may hand its own property tokens on. */\n  definesComponent: boolean\n}\n\n/**\n * One value an instance fills in for a declared prop, held to what the\n * declaration's type can hold: a picture from the library, a link, a number,\n * a switch, or copy.\n */\nfunction instancePropValue(\n  nodeId: string,\n  name: string,\n  type: string,\n  raw: unknown,\n  assetIds: Set<string> | null,\n  repairs: string[],\n): unknown {\n  if (type === 'number') {\n    const parsed = typeof raw === 'number' ? raw : Number(raw)\n    if (raw === '' || !Number.isFinite(parsed)) {\n      repairs.push(`${nodeId}.propValues.${name} is not a number; dropped`)\n      return undefined\n    }\n    return parsed\n  }\n  if (type === 'boolean') {\n    const coerced = coerceBoolean(raw)\n    if (coerced === undefined) {\n      repairs.push(`${nodeId}.propValues.${name} is not a boolean; dropped`)\n    }\n    return coerced\n  }\n  if (type === 'icon') {\n    // A page cannot fill an icon: the pick is an id and the path drawn from\n    // it, and a word in its place draws nothing (AGL-3054). The property is\n    // left for the site owner to pick.\n    repairs.push(`${nodeId}.propValues.${name} is an icon, which the site owner picks from the library; dropped`)\n    return undefined\n  }\n  if (typeof raw !== 'string' && typeof raw !== 'number' && typeof raw !== 'boolean') {\n    repairs.push(`${nodeId}.propValues.${name} is not a value; dropped`)\n    return undefined\n  }\n  const value = String(raw).trim()\n  if (HOSTILE_TEXT.test(value)) {\n    repairs.push(`${nodeId}.propValues.${name} carried markup or script; dropped`)\n    return undefined\n  }\n  if (type === 'image') {\n    if (isHttpsUrl(value)) return value\n    const ref = parseMediaRef(value)\n    if (!ref || (assetIds && !assetIds.has(ref.mediaId))) {\n      repairs.push(\n        `${nodeId}.propValues.${name} is neither a media reference this site holds nor an https: URL; dropped`,\n      )\n      return undefined\n    }\n    return value\n  }\n  if (type === 'href') {\n    if (isHttpsUrl(value) || isRootRelativePath(value)) return value\n    repairs.push(\n      `${nodeId}.propValues.${name} is neither an https: URL nor a path on this site; dropped`,\n    )\n    return undefined\n  }\n  if (value.length > AI_TEXT_LIMITS.body) {\n    repairs.push(\n      `${nodeId}.propValues.${name} was over ${AI_TEXT_LIMITS.body} characters; truncated`,\n    )\n    return value.slice(0, AI_TEXT_LIMITS.body).trimEnd()\n  }\n  return value\n}\n\n/**\n * The site-record props of one node — an instance's `refId` and\n * `propValues`, a Form's `formId` and `datasetId` — checked against the ids\n * the caller supplied. They leave `props` before the palette pass, which\n * would drop them as undeclared, and come back in `kept` once checked.\n */\nfunction sanitizeReferenceProps(\n  nodeId: string,\n  componentId: string,\n  props: Record<string, unknown>,\n  refs: ReferenceSets,\n  repairs: string[],\n): { props: Record<string, unknown>; kept: Record<string, unknown> } | { refusal: string } {\n  const rest: Record<string, unknown> = { ...props }\n  const kept: Record<string, unknown> = {}\n  // A repeat over one of the site's datasets (AGL-3616), on any element: the\n  // platform's own repeat, admitted against the datasets the caller supplies,\n  // as a Form's dataset binding is. The palette leaves it off, since from a\n  // description alone a model can only invent a dataset's id.\n  if (AI_REPEAT_DATASET_PROP in rest) {\n    const raw = rest[AI_REPEAT_DATASET_PROP]\n    delete rest[AI_REPEAT_DATASET_PROP]\n    const id = typeof raw === 'string' ? raw.trim() : ''\n    if (id && refs.datasetIds?.has(id)) {\n      kept[AI_REPEAT_DATASET_PROP] = id\n    } else if (raw !== undefined && raw !== null && raw !== '') {\n      repairs.push(`${nodeId}.${AI_REPEAT_DATASET_PROP} names a dataset this site does not have; dropped`)\n    }\n  }\n  if (componentId === REUSABLE_INSTANCE_COMPONENT_ID) {\n    const refId = typeof rest[AI_INSTANCE_REF_PROP] === 'string' ? String(rest[AI_INSTANCE_REF_PROP]).trim() : ''\n    delete rest[AI_INSTANCE_REF_PROP]\n    if (!refId || !refs.componentIds?.has(refId)) {\n      return {\n        refusal: `Reusable Component (${nodeId}) names a component this site does not have`,\n      }\n    }\n    kept[AI_INSTANCE_REF_PROP] = refId\n    const rawValues = rest[REUSABLE_INSTANCE_PROP_VALUES_KEY]\n    delete rest[REUSABLE_INSTANCE_PROP_VALUES_KEY]\n    if (rawValues !== undefined && !isRecord(rawValues)) {\n      repairs.push(`${nodeId}.propValues is not an object; dropped`)\n    }\n    const declared = refs.componentProps[refId]\n    const values: Record<string, unknown> = {}\n    for (const [name, raw] of Object.entries(isRecord(rawValues) ? rawValues : {})) {\n      if (raw === undefined || raw === null) continue\n      if (!COMPONENT_PROP_NAME_PATTERN.test(name)) {\n        repairs.push(`${nodeId}.propValues.${name} is not a prop name; dropped`)\n        continue\n      }\n      if (declared && !(name in declared)) {\n        repairs.push(`${nodeId}.propValues.${name} is not a prop of that component; dropped`)\n        continue\n      }\n      if (refs.definesComponent && isAiComponentPropToken(raw)) {\n        // A property of the component being defined, handed on whole; the\n        // component step's check holds it to the kind this prop declares.\n        values[name] = raw.trim()\n        continue\n      }\n      const value = instancePropValue(\n        nodeId,\n        name,\n        declared?.[name] ?? 'text',\n        raw,\n        refs.assetIds,\n        repairs,\n      )\n      if (value !== undefined) values[name] = value\n    }\n    if (Object.keys(values).length) kept[REUSABLE_INSTANCE_PROP_VALUES_KEY] = values\n    return { props: rest, kept }\n  }\n  if (componentId === FORM_COMPONENT_ID) {\n    const bindings: Array<[prop: string, ids: Set<string> | null, record: string]> = [\n      ['formId', refs.formIds, 'form'],\n      ['datasetId', refs.datasetIds, 'dataset'],\n    ]\n    for (const [prop, ids, record] of bindings) {\n      const raw = rest[prop]\n      delete rest[prop]\n      if (raw === undefined || raw === null || raw === '') continue\n      const id = typeof raw === 'string' ? raw.trim() : ''\n      if (id && ids?.has(id)) {\n        kept[prop] = id\n      } else {\n        repairs.push(`${nodeId}.${prop} names a ${record} this site does not have; dropped`)\n      }\n    }\n  }\n  return { props: rest, kept }\n}\n\nfunction refusalCode(error: string): AiNodeTreeRefusalCode {\n  if (/too large/i.test(error)) return 'too-large'\n  if (/cannot be published/i.test(error)) return 'component'\n  return 'structure'\n}\n\n/**\n * Whether the root the model wrote is the surface's root: the canvas wrapper\n * for a document surface (which the sanitizer exempts by the same shape), or\n * the named component otherwise.\n */\nfunction rootMatches(surfaceRoot: string, componentId: unknown): boolean {\n  if (surfaceRoot === 'div') {\n    return componentId == null || componentId === '' || componentId === 'div'\n  }\n  return componentId === surfaceRoot\n}\n\nexport function validateAiNodeTree(\n  input: unknown,\n  surface: AiSurface,\n  context?: AiNodeTreeContext,\n): AiNodeTreeResult {\n  try {\n    return validate(input, surface, context)\n  } catch (error) {\n    return {\n      ok: false,\n      code: 'invalid-input',\n      error: `The tree could not be read: ${error instanceof Error ? error.message : String(error)}`,\n    }\n  }\n}\n\nexport type AiNodePatchResult =\n  | {\n      ok: true\n      props: Record<string, unknown>\n      sx: Record<string, unknown> | undefined\n      repairs: string[]\n    }\n  | { ok: false; error: string; code: AiNodeTreeRefusalCode }\n\n/**\n * One element's prop and style patch, held to the rules `validateAiNodeTree`\n * holds an element it places — for an edit to an element already on the\n * canvas, where there is no tree to validate.\n *\n * The same passes run: unknown props dropped, enums coerced, every string\n * held to its role and screened for markup, `sx` held to the key set and the\n * value grammar. The one difference is `required`: a patch is merged over the\n * props the element already has, so a required prop the patch does not name\n * is not missing.\n */\nexport function validateAiNodePatch(\n  componentId: string,\n  patch: { props?: unknown; sx?: unknown },\n  context?: AiNodeTreeContext,\n): AiNodePatchResult {\n  const entry = AI_PALETTE[componentId]\n  if (!entry) {\n    return {\n      ok: false,\n      code: 'component',\n      error: `Component \"${componentId}\" is not in the palette`,\n    }\n  }\n  const repairs: string[] = []\n  const props = sanitizeProps(\n    componentId,\n    { ...entry, propsSchema: { ...entry.propsSchema, required: [] } },\n    patch.props,\n    context?.screenIds ? new Set(context.screenIds) : null,\n    context?.assetIds ? new Set(context.assetIds) : null,\n    repairs,\n  )\n  const sx =\n    patch.sx === undefined ? undefined : sanitizeSx(componentId, patch.sx, repairs)\n  return {\n    ok: true,\n    props: 'props' in props ? props.props : {},\n    sx,\n    repairs,\n  }\n}\n\nfunction validate(\n  input: unknown,\n  surface: AiSurface,\n  context: AiNodeTreeContext | undefined,\n): AiNodeTreeResult {\n  const definition = AI_SURFACES[surface]\n  if (!definition) {\n    return {\n      ok: false,\n      code: 'invalid-input',\n      error: `Unknown surface \"${surface}\"`,\n    }\n  }\n  if (\n    !isRecord(input) ||\n    typeof input.rootId !== 'string' ||\n    !isRecord(input.nodes)\n  ) {\n    return {\n      ok: false,\n      code: 'invalid-input',\n      error: 'Expected an object with a string rootId and a nodes map',\n    }\n  }\n  const rootId = input.rootId\n  const nodes = input.nodes as Record<string, unknown>\n  const root = nodes[rootId]\n  if (!isRecord(root)) {\n    return {\n      ok: false,\n      code: 'structure',\n      error: 'Definition has no root node',\n    }\n  }\n  if (!rootMatches(definition.root, root.componentId)) {\n    return {\n      ok: false,\n      code: 'root',\n      error: `A ${surface} starts with ${definition.root === 'div' ? 'the document wrapper' : `\"${definition.root}\"`}, not \"${String(root.componentId)}\"`,\n    }\n  }\n\n  // The sanitizer keeps only the persisted node keys, and `sx` is not one of\n  // them for a listing. Read it off every node first — from the node field\n  // or from `props.sx`, which a model writes just as readily — and put it\n  // back, checked, on the nodes that survive.\n  const sxByNodeId = new Map<string, unknown>()\n  const hiddenByNodeId = new Set<string>()\n  for (const [id, node] of Object.entries(nodes)) {\n    if (!isRecord(node)) continue\n    const sx =\n      node.sx !== undefined\n        ? node.sx\n        : isRecord(node.props)\n          ? node.props.sx\n          : undefined\n    if (sx !== undefined) sxByNodeId.set(id, sx)\n    if (node.hidden === true) hiddenByNodeId.add(id)\n  }\n\n  // A DAM reference (a `media:` value) is not a URL the sanitizer's\n  // `src` policy admits — a listing must not carry another tenant's asset —\n  // but on the tenant's own page it is exactly what an image should name.\n  // Lift those values out before sanitizing and hand them back to the prop\n  // pass, which holds them to the asset set the caller supplied.\n  // A binding token the caller admitted (AGL-2909) is lifted the same way:\n  // `{{entry.coverImage}}` is no address the sanitizer knows, and the prop\n  // pass holds it to the tokens the caller named.\n  const bindingTokens = context?.bindingTokens ? new Set(context.bindingTokens) : null\n  // A reusable component's own property tokens (AGL-2908) are lifted too, and\n  // kept as written rather than handed back to the prop pass: `{{prop.variant}}`\n  // is no value a dropdown, a switch, an address or a visibility directive\n  // admits. Copy keeps its tokens without lifting, as the text they are.\n  const definesComponent = context?.definesComponent === true\n  const codeBuilt = context?.codeBuilt === true\n  const mediaByNodeId = new Map<string, Record<string, string>>()\n  const boundByNodeId = new Map<string, Record<string, string>>()\n  // A code-built Icon's drawing, from the library by the id it names (AGL-3660).\n  const iconByNodeId = new Map<string, { iconId: string; iconPath: string }>()\n  const forSanitizer: Record<string, unknown> = {}\n  for (const [id, node] of Object.entries(nodes)) {\n    if (!isRecord(node) || !isRecord(node.props)) {\n      forSanitizer[id] = node\n      continue\n    }\n    if (codeBuilt && node.componentId === AI_ICON_COMPONENT_ID) {\n      const { iconId, ...props } = node.props\n      const rest = { ...props }\n      delete rest['iconPath']\n      const icon = aiIconOfId(iconId)\n      if (icon) iconByNodeId.set(id, { iconId: icon.id, iconPath: icon.path })\n      forSanitizer[id] = { ...node, props: rest }\n      continue\n    }\n    const entry = AI_PALETTE[String(node.componentId)]\n    const roles = entry?.propRoles ?? {}\n    const props: Record<string, unknown> = { ...node.props }\n    const lifted: Record<string, string> = {}\n    const bound: Record<string, string> = {}\n    for (const [key, value] of Object.entries(props)) {\n      if (typeof value !== 'string') continue\n      const role = roles[key]\n      if (\n        definesComponent &&\n        isAiComponentPropToken(value) &&\n        (AI_COMPONENT_VISIBILITY_PROPS.includes(key) ||\n          (entry?.propsSchema.properties[key] !== undefined && role !== 'text'))\n      ) {\n        bound[key] = value.trim()\n        delete props[key]\n        continue\n      }\n      if (\n        (role === 'media' && parseMediaRef(value.trim())) ||\n        ((role === 'media' || role === 'url') && bindingTokens?.has(value.trim()))\n      ) {\n        lifted[key] = value\n        delete props[key]\n      }\n    }\n    if (Object.keys(lifted).length) mediaByNodeId.set(id, lifted)\n    if (Object.keys(bound).length) boundByNodeId.set(id, bound)\n    forSanitizer[id] = { ...node, props }\n  }\n\n  const refs: ReferenceSets = {\n    componentIds: context?.componentIds ? new Set(context.componentIds) : null,\n    componentProps: context?.componentProps ?? {},\n    formIds: context?.formIds ? new Set(context.formIds) : null,\n    datasetIds: context?.datasetIds ? new Set(context.datasetIds) : null,\n    assetIds: context?.assetIds ? new Set(context.assetIds) : null,\n    definesComponent,\n  }\n  // An instance is admitted only where the caller grounded it in the site's\n  // components; the reference itself is checked on the node below.\n  const surfaceAllow = codeBuilt ? [...definition.allow, ...(definition.codeOnly ?? [])] : definition.allow\n  const allow =\n    refs.componentIds && INSTANCE_SURFACES.has(surface)\n      ? [...surfaceAllow, REUSABLE_INSTANCE_COMPONENT_ID]\n      : surfaceAllow\n  const sanitized = sanitizePortableDefinition(\n    { rootId, nodes: forSanitizer },\n    { componentIds: allow },\n  )\n  if (sanitized.ok === false) {\n    return {\n      ok: false,\n      code: refusalCode(sanitized.error),\n      error: sanitized.error,\n    }\n  }\n\n  const screenIds = context?.screenIds ? new Set(context.screenIds) : null\n  const assetIds = refs.assetIds\n  const repairs: string[] = []\n  const output: NodesMap = {}\n  const rootIsWrapper =\n    rootMatches('div', root.componentId) && definition.root === 'div'\n  const minted = new Map<string, string>()\n  const mint = (id: string): string => {\n    const fresh =\n      id === rootId && rootIsWrapper\n        ? CANVAS_ROOT_ELEMENT_ID\n        : createIdUrlSafe()\n    minted.set(id, fresh)\n    return fresh\n  }\n\n  /** Each visited node's parent by the model's own ids, for the parentId check. */\n  const parentOf = new Map<string, string>()\n  const queue: Array<{ id: string; parentId: string | null }> = [\n    { id: rootId, parentId: null },\n  ]\n  mint(rootId)\n  while (queue.length) {\n    const { id, parentId } = queue.shift() as {\n      id: string\n      parentId: string | null\n    }\n    const node = sanitized.nodes[id]\n    const entry = AI_PALETTE[node.componentId]\n    if (!entry) {\n      return {\n        ok: false,\n        code: 'component',\n        error: `Component \"${node.componentId}\" is not in the palette`,\n      }\n    }\n    const newId = minted.get(id) as string\n    const raw = nodes[id]\n    if (isRecord(raw)) {\n      // The sanitizer drops silently; the model is told what went.\n      for (const key of STRIPPED_NODE_KEYS) {\n        if (raw[key] !== undefined) {\n          repairs.push(\n            `${id}.${key} is not something a generated node may set; dropped`,\n          )\n        }\n      }\n      if (raw.hidden !== undefined && typeof raw.hidden !== 'boolean') {\n        repairs.push(`${id}.hidden is not a boolean; dropped`)\n      }\n      if (raw.nodes !== undefined && !Array.isArray(raw.nodes)) {\n        repairs.push(\n          `${id}.nodes is not a list of child ids; its children were dropped`,\n        )\n      }\n      if (\n        raw.parentId !== undefined &&\n        raw.parentId !== null &&\n        raw.parentId !== (parentId === null ? null : parentOf.get(id))\n      ) {\n        repairs.push(\n          `${id}.parentId disagreed with where the tree places it; recomputed`,\n        )\n      }\n      if (isRecord(raw.props)) {\n        const lifted = mediaByNodeId.get(id) ?? {}\n        const kept = boundByNodeId.get(id) ?? {}\n        for (const key of Object.keys(raw.props)) {\n          if (iconByNodeId.has(id) && (key === 'iconId' || key === 'iconPath')) continue\n          if (\n            key !== 'sx' &&\n            lifted[key] === undefined &&\n            kept[key] === undefined &&\n            node.props?.[key] === undefined &&\n            raw.props[key] !== undefined\n          ) {\n            repairs.push(\n              `${id}.${key} was an unsafe handler, address or markup; dropped`,\n            )\n          }\n        }\n      }\n    }\n    const children: string[] = []\n    for (const childId of node.nodes ?? []) {\n      if (minted.has(childId)) {\n        repairs.push(\n          `${childId} was listed under more than one parent; the later listing was dropped`,\n        )\n        continue\n      }\n      const child = sanitized.nodes[childId]\n      if (!child) continue\n      const childEntry = AI_PALETTE[child.componentId]\n      if (!childEntry) {\n        return {\n          ok: false,\n          code: 'component',\n          error: `Component \"${child.componentId}\" is not in the palette`,\n        }\n      }\n      if (!entry.acceptsChildren) {\n        return {\n          ok: false,\n          code: 'lineage',\n          error: `${entry.displayName} (${id}) cannot hold other elements, but lists ${childId}`,\n        }\n      }\n      if (\n        !linealRelationshipPermits(\n          {\n            componentId: child.componentId,\n            pluginId: childEntry.pluginId,\n            restrictParent: childEntry.restrictParent,\n          },\n          {\n            componentId: node.componentId,\n            pluginId: entry.pluginId,\n            restrictChildren: entry.restrictChildren,\n          },\n        )\n      ) {\n        return {\n          ok: false,\n          code: 'lineage',\n          error: `${childEntry.displayName} (${childId}) cannot be placed inside ${entry.displayName} (${id})`,\n        }\n      }\n      children.push(mint(childId))\n      parentOf.set(childId, id)\n      queue.push({ id: childId, parentId: newId })\n    }\n\n    const reference = sanitizeReferenceProps(\n      id,\n      node.componentId,\n      { ...node.props, ...mediaByNodeId.get(id) },\n      refs,\n      repairs,\n    )\n    if ('refusal' in reference) {\n      return { ok: false, code: 'reference', error: reference.refusal }\n    }\n    // A required prop the component binds is present: its value is the token.\n    const boundProps = boundByNodeId.get(id)\n    const propsResult = sanitizeProps(\n      id,\n      boundProps\n        ? {\n            ...entry,\n            propsSchema: {\n              ...entry.propsSchema,\n              required: entry.propsSchema.required.filter((name) => boundProps[name] === undefined),\n            },\n          }\n        : entry,\n      reference.props,\n      screenIds,\n      assetIds,\n      repairs,\n      bindingTokens,\n    )\n    if ('missing' in propsResult) {\n      return {\n        ok: false,\n        code: 'required-prop',\n        error: `${entry.displayName} (${id}) is missing its required \"${propsResult.missing}\" prop`,\n      }\n    }\n    const sx = sanitizeSx(id, sxByNodeId.get(id), repairs)\n    output[newId] = {\n      $id: newId,\n      type: NodeType.NODE,\n      componentId: node.componentId,\n      pluginId: entry.pluginId,\n      parentId,\n      nodes: children,\n      props: { ...propsResult.props, ...reference.kept, ...boundProps, ...iconByNodeId.get(id) },\n      ...(sx ? { sx } : {}),\n      ...(hiddenByNodeId.has(id) ? { hidden: true } : {}),\n    }\n  }\n\n  // The save's own measurement (msgpack), not a JSON string length: the\n  // ceiling is stated in those bytes, and a UTF-16 length reads multi-byte\n  // copy as smaller than the document the save will refuse.\n  const bytes = nodeMapBytes(output)\n  if (bytes > NODE_MAP_MAX_BYTES) {\n    return {\n      ok: false,\n      code: 'too-large',\n      error: `The tree is ${bytes} bytes; the stored ceiling is ${NODE_MAP_MAX_BYTES}`,\n    }\n  }\n  const sourceIds: Record<string, string> = {}\n  for (const [source, fresh] of minted) sourceIds[fresh] = source\n  return {\n    ok: true,\n    rootId: minted.get(rootId) as string,\n    nodes: output,\n    repairs,\n    sourceIds,\n  }\n}\n"],"names":["AI_TEXT_LIMITS","isHeadlineVariant","nodeCapabilityProps","AI_NODE_CAPABILITIES","AI_PALETTE","AI_SURFACES","AI_SX_TOKENS","linealRelationshipPermits","NODE_MAP_MAX_BYTES","nodeMapBytes","parseMediaRef","COMPONENT_PROP_NAME_PATTERN","REUSABLE_INSTANCE_COMPONENT_ID","REUSABLE_INSTANCE_PROP_VALUES_KEY","createIdUrlSafe","CANVAS_ROOT_ELEMENT_ID","NodeType","AI_ICON_COMPONENT_ID","aiIconOfId","AI_COMPONENT_VISIBILITY_PROPS","isAiComponentPropToken","sanitizePortableDefinition","AI_SX_ALLOWED_KEYS","Set","HOSTILE_TEXT","SX_VALUE","STRIPPED_NODE_KEYS","SCREEN_ID","ICON_PICKER_FIELD","MAX_SX_KEYS","PLAIN_STRING_MAX","paletteTokens","palette","breakpoints","typographyVariants","isRecord","value","Array","isArray","isHttpsUrl","test","URL","protocol","isContactHref","isRootRelativePath","sxValueAllowed","key","Number","isFinite","trimmed","trim","has","sanitizeSx","nodeId","sx","repairs","undefined","push","out","kept","Object","entries","responsive","breakpoint","inner","keys","length","coerceEnum","schema","enum","wanted","toLowerCase","find","option","coerceBoolean","coerceNumber","parsed","NaN","type","isInteger","minimum","maximum","textLimitFor","entry","name","props","declared","textLimits","variant","Math","min","body","headline","sanitizeString","raw","screenIds","assetIds","bindingTokens","propFields","role","propRoles","limit","slice","trimEnd","ref","mediaId","pattern","RegExp","minLength","maxLength","CAPABLE_ENTRIES","WeakMap","withNodeCapabilities","cached","get","capability","acceptsChildren","merged","propsSchema","properties","set","AI_OWNER_AUDIO_PLUGIN_IDS","aiOwnerAudioRefusal","pluginId","text","sanitizeProps","paletteEntry","source","audioRefusal","displayName","coerced","join","String","cleaned","required","missing","INSTANCE_SURFACES","FORM_COMPONENT_ID","AI_REPEAT_DATASET_PROP","AI_INSTANCE_REF_PROP","instancePropValue","sanitizeReferenceProps","componentId","refs","rest","id","datasetIds","refId","componentIds","refusal","rawValues","componentProps","values","definesComponent","bindings","formIds","prop","ids","record","refusalCode","error","rootMatches","surfaceRoot","validateAiNodeTree","input","surface","context","validate","ok","code","Error","message","validateAiNodePatch","patch","definition","rootId","nodes","root","sxByNodeId","Map","hiddenByNodeId","node","hidden","add","codeBuilt","mediaByNodeId","boundByNodeId","iconByNodeId","forSanitizer","iconId","icon","iconPath","path","roles","lifted","bound","includes","surfaceAllow","allow","codeOnly","sanitized","output","rootIsWrapper","minted","mint","fresh","parentOf","queue","parentId","shift","newId","children","childId","child","childEntry","restrictParent","restrictChildren","reference","boundProps","propsResult","filter","$id","NODE","bytes","sourceIds"],"mappings":";;AAAA;;;;;;;;;;;;;;;CAeC,GAED,SACEA,cAAc,EACdC,iBAAiB,EACjBC,mBAAmB,QAId,kBAAc;AACrB,SACEC,oBAAoB,EACpBC,UAAU,EACVC,WAAW,EACXC,YAAY,QACP,4BAAwB;AAC/B,SAASC,yBAAyB,QAAQ,sCAAqC;AAC/E,SACEC,kBAAkB,EAClBC,YAAY,QACP,0CAAyC;AAChD,SAASC,aAAa,QAAQ,mCAAkC;AAChE,SACEC,2BAA2B,EAC3BC,8BAA8B,EAC9BC,iCAAiC,QAC5B,iDAAgD;AACvD,SAASC,eAAe,QAAQ,wCAAuC;AACvE,SAASC,sBAAsB,QAAQ,2CAA0C;AACjF,SAASC,QAAQ,QAAuB,2BAA0B;AAElE,SAASC,oBAAoB,EAAEC,UAAU,QAAQ,uBAAmB;AACpE,SACEC,6BAA6B,EAC7BC,sBAAsB,QACjB,6BAAyB;AAEhC,SAASC,0BAA0B,QAAQ,mDAAkD;AA0H7F;;;;;CAKC,GACD,OAAO,MAAMC,qBAA0C,IAAIC,IAAI;IAC7D,UAAU;IACV;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA,QAAQ;IACR;IACA;IACA;IACA;IACA;IACA,aAAa;IACb;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA,SAAS;IACT;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA,UAAU;IACV;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA,UAAU;IACV;IACA;IACA,OAAO;IACP;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA,OAAO;IACP;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;CACD,EAAC;AAEF;;;;CAIC,GACD,OAAO,MAAMC,eACX,2LAA0L;AAE5L;;;;;;CAMC,GACD,OAAO,MAAMC,WAAW,qCAAoC;AAE5D;;;;CAIC,GACD,MAAMC,qBAAqB;IACzB;IACA;IACA;IACA;IACA;CACD;AAED,MAAMC,YAAY;AAClB,sFAAsF,GACtF,MAAMC,oBAAoB;AAC1B,MAAMC,cAAc;AACpB,+EAA+E,GAC/E,MAAMC,mBAAmB;AAEzB,MAAMC,gBAAgB,IAAIR,IAAYjB,aAAa0B,OAAO;AAC1D,MAAMC,cAAc,IAAIV,IAAYjB,aAAa2B,WAAW;AAC5D,MAAMC,qBAAqB,IAAIX,IAAYjB,aAAa4B,kBAAkB;AAE1E,SAASC,SAASC,KAAc;IAC9B,OAAO,OAAOA,UAAU,YAAYA,UAAU,QAAQ,CAACC,MAAMC,OAAO,CAACF;AACvE;AAEA,4CAA4C,GAC5C,OAAO,SAASG,WAAWH,KAAa;IACtC,IAAI,CAAC,eAAeI,IAAI,CAACJ,QAAQ,OAAO;IACxC,IAAI;QACF,OAAO,IAAIK,IAAIL,OAAOM,QAAQ,KAAK;IACrC,EAAE,eAAM;QACN,OAAO;IACT;AACF;AAEA;;;;;CAKC,GACD,OAAO,SAASC,cAAcP,KAAa;IACzC,OAAO,oBAAoBI,IAAI,CAACJ,UAAU,wDAAwDI,IAAI,CAACJ;AACzG;AAEA,0EAA0E,GAC1E,OAAO,SAASQ,mBAAmBR,KAAa;IAC9C,OAAO,0BAA0BI,IAAI,CAACJ;AACxC;AAEA,SAASS,eAAeC,GAAW,EAAEV,KAAc;IACjD,IAAI,OAAOA,UAAU,UAAU,OAAOW,OAAOC,QAAQ,CAACZ;IACtD,IAAI,OAAOA,UAAU,UAAU,OAAO;IACtC,MAAMa,UAAUb,MAAMc,IAAI;IAC1B,IAAI,CAACD,WAAWzB,aAAagB,IAAI,CAACS,UAAU,OAAO;IACnD,IAAIlB,cAAcoB,GAAG,CAACF,UAAU,OAAO;IACvC,IAAIH,QAAQ,gBAAgBZ,mBAAmBiB,GAAG,CAACF,UAAU,OAAO;IACpE,OAAOxB,SAASe,IAAI,CAACS;AACvB;AAEA;;;;CAIC,GACD,SAASG,WACPC,MAAc,EACdC,EAAW,EACXC,OAAiB;IAEjB,IAAI,CAACpB,SAASmB,KAAK;QACjB,IAAIA,OAAOE,WACTD,QAAQE,IAAI,CAAC,GAAGJ,OAAO,8BAA8B,CAAC;QACxD,OAAOG;IACT;IACA,MAAME,MAA+B,CAAC;IACtC,IAAIC,OAAO;IACX,KAAK,MAAM,CAACb,KAAKV,MAAM,IAAIwB,OAAOC,OAAO,CAACP,IAAK;QAC7C,IAAI,CAAChC,mBAAmB6B,GAAG,CAACL,MAAM;YAChCS,QAAQE,IAAI,CAAC,GAAGJ,OAAO,KAAK,EAAEP,IAAI,iCAAiC,CAAC;YACpE;QACF;QACA,IAAIa,QAAQ9B,aAAa;YACvB0B,QAAQE,IAAI,CACV,GAAGJ,OAAO,KAAK,EAAEP,IAAI,aAAa,EAAEjB,YAAY,qBAAqB,CAAC;YAExE;QACF;QACA,IAAIM,SAASC,QAAQ;YACnB,MAAM0B,aAAsC,CAAC;YAC7C,KAAK,MAAM,CAACC,YAAYC,MAAM,IAAIJ,OAAOC,OAAO,CAACzB,OAAQ;gBACvD,IAAI,CAACH,YAAYkB,GAAG,CAACY,aAAa;oBAChCR,QAAQE,IAAI,CACV,GAAGJ,OAAO,KAAK,EAAEP,IAAI,CAAC,EAAEiB,WAAW,6BAA6B,CAAC;oBAEnE;gBACF;gBACA,IAAI,CAAClB,eAAeC,KAAKkB,QAAQ;oBAC/BT,QAAQE,IAAI,CACV,GAAGJ,OAAO,KAAK,EAAEP,IAAI,CAAC,EAAEiB,WAAW,iCAAiC,CAAC;oBAEvE;gBACF;gBACAD,UAAU,CAACC,WAAW,GACpB,OAAOC,UAAU,WAAWA,MAAMd,IAAI,KAAKc;YAC/C;YACA,IAAIJ,OAAOK,IAAI,CAACH,YAAYI,MAAM,EAAE;gBAClCR,GAAG,CAACZ,IAAI,GAAGgB;gBACXH,QAAQ;YACV;YACA;QACF;QACA,IAAI,CAACd,eAAeC,KAAKV,QAAQ;YAC/BmB,QAAQE,IAAI,CAAC,GAAGJ,OAAO,KAAK,EAAEP,IAAI,iCAAiC,CAAC;YACpE;QACF;QACAY,GAAG,CAACZ,IAAI,GAAG,OAAOV,UAAU,WAAWA,MAAMc,IAAI,KAAKd;QACtDuB,QAAQ;IACV;IACA,OAAOA,OAAOD,MAAMF;AACtB;AAEA,SAASW,WAAWC,MAAoB,EAAEhC,KAAc;IACtD,IAAI,OAAOA,UAAU,YAAY,CAACgC,OAAOC,IAAI,EAAE,OAAOb;IACtD,MAAMc,SAASlC,MAAMc,IAAI,GAAGqB,WAAW;IACvC,OAAOH,OAAOC,IAAI,CAACG,IAAI,CAAC,CAACC,SAAWA,OAAOF,WAAW,OAAOD;AAC/D;AAEA,SAASI,cAActC,KAAc;IACnC,IAAI,OAAOA,UAAU,WAAW,OAAOA;IACvC,IAAIA,UAAU,QAAQ,OAAO;IAC7B,IAAIA,UAAU,SAAS,OAAO;IAC9B,OAAOoB;AACT;AAEA,SAASmB,aACPP,MAAoB,EACpBhC,KAAc;IAEd,MAAMwC,SACJ,OAAOxC,UAAU,WACbA,QACA,OAAOA,UAAU,YAAYA,MAAMc,IAAI,OAAO,KAC5CH,OAAOX,SACPyC;IACR,IAAI,CAAC9B,OAAOC,QAAQ,CAAC4B,SAAS,OAAOpB;IACrC,IAAIY,OAAOU,IAAI,KAAK,aAAa,CAAC/B,OAAOgC,SAAS,CAACH,SAAS,OAAOpB;IACnE,IAAIY,OAAOY,OAAO,KAAKxB,aAAaoB,SAASR,OAAOY,OAAO,EAAE,OAAOxB;IACpE,IAAIY,OAAOa,OAAO,KAAKzB,aAAaoB,SAASR,OAAOa,OAAO,EAAE,OAAOzB;IACpE,OAAOoB;AACT;AAEA,SAASM,aACPC,KAAqB,EACrBC,IAAY,EACZC,KAA8B;IAE9B,MAAMC,WAAWH,MAAMI,UAAU,CAACH,KAAK;IACvC,2EAA2E;IAC3E,qEAAqE;IACrE,wBAAwB;IACxB,IAAIA,SAAS,cAAcnF,kBAAkBoF,MAAMG,OAAO,GAAG;QAC3D,OAAOC,KAAKC,GAAG,CAACJ,mBAAAA,WAAYtF,eAAe2F,IAAI,EAAE3F,eAAe4F,QAAQ;IAC1E;IACA,OAAON,mBAAAA,WAAYtF,eAAe2F,IAAI;AACxC;AAEA;;;;CAIC,GACD,SAASE,eACPxC,MAAc,EACd8B,KAAqB,EACrBC,IAAY,EACZhB,MAAoB,EACpB0B,GAAW,EACXT,KAA8B,EAC9BU,SAA6B,EAC7BC,QAA4B,EAC5BzC,OAAiB,EACjB0C,gBAA4C,IAAI;IAEhD,IAAI7D,QAAQ0D,IAAI5C,IAAI;IACpB,IAAI1B,aAAagB,IAAI,CAACJ,QAAQ;QAC5BmB,QAAQE,IAAI,CAAC,GAAGJ,OAAO,CAAC,EAAE+B,KAAK,kCAAkC,CAAC;QAClE,OAAO5B;IACT;IACA,0EAA0E;IAC1E,2EAA2E;IAC3E,yDAAyD;IACzD,IAAI2B,MAAMe,UAAU,CAACd,KAAK,KAAKxD,mBAAmB;QAChD2B,QAAQE,IAAI,CAAC,GAAGJ,OAAO,CAAC,EAAE+B,KAAK,iEAAiE,CAAC;QACjG,OAAO5B;IACT;IACA,MAAM2C,OAAOhB,MAAMiB,SAAS,CAAChB,KAAK;IAClC,OAAQe;QACN,KAAK;YAAQ;gBACX,MAAME,QAAQnB,aAAaC,OAAOC,MAAMC;gBACxC,IAAIjD,MAAM8B,MAAM,GAAGmC,OAAO;oBACxBjE,QAAQA,MAAMkE,KAAK,CAAC,GAAGD,OAAOE,OAAO;oBACrChD,QAAQE,IAAI,CACV,GAAGJ,OAAO,CAAC,EAAE+B,KAAK,UAAU,EAAEiB,MAAM,sBAAsB,CAAC;gBAE/D;gBACA;YACF;QACA,KAAK;YAAO;gBACV,IAAIJ,iCAAAA,cAAe9C,GAAG,CAACf,QAAQ;gBAC/B,IAAI,CAACG,WAAWH,UAAU,CAACQ,mBAAmBR,UAAU,CAACO,cAAcP,QAAQ;oBAC7EmB,QAAQE,IAAI,CACV,GAAGJ,OAAO,CAAC,EAAE+B,KAAK,0DAA0D,CAAC;oBAE/E,OAAO5B;gBACT;gBACA;YACF;QACA,KAAK;YAAU;gBACb,IAAIuC,YAAY,CAACA,UAAU5C,GAAG,CAACf,SAAS,CAACT,UAAUa,IAAI,CAACJ,QAAQ;oBAC9DmB,QAAQE,IAAI,CACV,GAAGJ,OAAO,CAAC,EAAE+B,KAAK,8CAA8C,CAAC;oBAEnE,OAAO5B;gBACT;gBACA;YACF;QACA,KAAK;YAAS;gBACZ,IAAIyC,iCAAAA,cAAe9C,GAAG,CAACf,QAAQ;gBAC/B,IAAIG,WAAWH,QAAQ;gBACvB,MAAMoE,MAAM9F,cAAc0B;gBAC1B,IAAI,CAACoE,OAAQR,YAAY,CAACA,SAAS7C,GAAG,CAACqD,IAAIC,OAAO,GAAI;oBACpDlD,QAAQE,IAAI,CACV,GAAGJ,OAAO,CAAC,EAAE+B,KAAK,wEAAwE,CAAC;oBAE7F,OAAO5B;gBACT;gBACA;YACF;QACA;YAAS;gBACP,IAAIpB,MAAM8B,MAAM,GAAGpC,kBAAkB;oBACnCyB,QAAQE,IAAI,CACV,GAAGJ,OAAO,CAAC,EAAE+B,KAAK,SAAS,EAAEtD,iBAAiB,oBAAoB,CAAC;oBAErE,OAAO0B;gBACT;YACF;IACF;IACA,IAAIY,OAAOsC,OAAO,IAAI,CAAC,IAAIC,OAAOvC,OAAOsC,OAAO,EAAElE,IAAI,CAACJ,QAAQ;QAC7DmB,QAAQE,IAAI,CAAC,GAAGJ,OAAO,CAAC,EAAE+B,KAAK,oCAAoC,CAAC;QACpE,OAAO5B;IACT;IACA,IAAIY,OAAOwC,SAAS,KAAKpD,aAAapB,MAAM8B,MAAM,GAAGE,OAAOwC,SAAS,EAAE;QACrErD,QAAQE,IAAI,CACV,GAAGJ,OAAO,CAAC,EAAE+B,KAAK,iBAAiB,EAAEhB,OAAOwC,SAAS,CAAC,oBAAoB,CAAC;QAE7E,OAAOpD;IACT;IACA,IAAIY,OAAOyC,SAAS,KAAKrD,aAAapB,MAAM8B,MAAM,GAAGE,OAAOyC,SAAS,EAAE;QACrEzE,QAAQA,MAAMkE,KAAK,CAAC,GAAGlC,OAAOyC,SAAS,EAAEN,OAAO;QAChDhD,QAAQE,IAAI,CACV,GAAGJ,OAAO,CAAC,EAAE+B,KAAK,UAAU,EAAEhB,OAAOyC,SAAS,CAAC,sBAAsB,CAAC;IAE1E;IACA,OAAOzE;AACT;AAEA;;;;;;;;;CASC,GACD,MAAM0E,kBAAkB,IAAIC;AAE5B,SAASC,qBAAqB7B,KAAqB;IACjD,MAAM8B,SAASH,gBAAgBI,GAAG,CAAC/B;IACnC,IAAI8B,QAAQ,OAAOA;IACnB,MAAME,aAAajH,oBACjBC,sBACAgF,MAAMiC,eAAe;IAEvB,MAAMC,SAAyB,aAC1BlC;QACHmC,aAAa,aACRnC,MAAMmC,WAAW;YACpBC,YAAY,aACPJ,WAAWI,UAAU,EACrBpC,MAAMmC,WAAW,CAACC,UAAU;;QAGnCnB,WAAW,aAAKe,WAAWf,SAAS,EAAKjB,MAAMiB,SAAS;QACxDb,YAAY,aAAK4B,WAAW5B,UAAU,EAAKJ,MAAMI,UAAU;;IAE7DuB,gBAAgBU,GAAG,CAACrC,OAAOkC;IAC3B,OAAOA;AACT;AAEA;;;;;;;CAOC,GACD,OAAO,MAAMI,4BAAiD,IAAIlG,IAAI;IAAC;CAAQ,EAAC;AAEhF,8EAA8E,GAC9E,OAAO,SAASmG,oBACdC,QAA4B,EAC5BvC,IAAY,EACZhD,KAAc,EACd6D,gBAA4C,IAAI;IAEhD,IAAI,CAAC0B,YAAY,CAACF,0BAA0BtE,GAAG,CAACwE,WAAW,OAAO;IAClE,IAAIvC,SAAS,mBAAmB;QAC9B,OAAO;IACT;IACA,IAAIA,SAAS,OAAO,OAAO;IAC3B,MAAMwC,OAAO,OAAOxF,UAAU,WAAWA,MAAMc,IAAI,KAAK;IACxD,IAAI,CAAC0E,QAAQlH,cAAckH,UAAS3B,iCAAAA,cAAe9C,GAAG,CAACyE,QAAO,OAAO;IACrE,OAAO;AACT;AAEA,SAASC,cACPxE,MAAc,EACdyE,YAA4B,EAC5BhC,GAAY,EACZC,SAA6B,EAC7BC,QAA4B,EAC5BzC,OAAiB,EACjB0C,gBAA4C,IAAI;IAEhD,MAAMd,QAAQ6B,qBAAqBc;IACnC,MAAMC,SAAS5F,SAAS2D,OAAOA,MAAM,CAAC;IACtC,MAAMT,QAAiC,CAAC;IACxC,MAAMC,WAAWH,MAAMmC,WAAW,CAACC,UAAU;IAC7C,KAAK,MAAM,CAACnC,MAAMhD,MAAM,IAAIwB,OAAOC,OAAO,CAACkE,QAAS;QAClD,wEAAwE;QACxE,mDAAmD;QACnD,IAAI3C,SAAS,QAAQhD,UAAUoB,aAAapB,UAAU,MAAM;QAC5D,+CAA+C;QAC/C,MAAM4F,eAAeN,oBAAoBvC,MAAMwC,QAAQ,EAAEvC,MAAMhD,OAAO6D;QACtE,IAAI+B,cAAc;YAChBzE,QAAQE,IAAI,CAAC,GAAGJ,OAAO,CAAC,EAAE+B,KAAK,EAAE,EAAE4C,aAAa,SAAS,CAAC;YAC1D;QACF;QACA,MAAM5D,SAASkB,QAAQ,CAACF,KAAK;QAC7B,IAAI,CAAChB,QAAQ;YACXb,QAAQE,IAAI,CACV,GAAGJ,OAAO,CAAC,EAAE+B,KAAK,kBAAkB,EAAED,MAAM8C,WAAW,CAAC,SAAS,CAAC;YAEpE;QACF;QACA,IAAI7D,OAAOC,IAAI,EAAE;YACf,MAAM6D,UAAU/D,WAAWC,QAAQhC;YACnC,IAAI8F,YAAY1E,WAAW;gBACzBD,QAAQE,IAAI,CACV,GAAGJ,OAAO,CAAC,EAAE+B,KAAK,eAAe,EAAEhB,OAAOC,IAAI,CAAC8D,IAAI,CAAC,KAAK,SAAS,CAAC;gBAErE;YACF;YACA,IAAID,YAAY9F,OAAO;gBACrBmB,QAAQE,IAAI,CACV,GAAGJ,OAAO,CAAC,EAAE+B,KAAK,cAAc,EAAEgD,OAAOhG,OAAO,kBAAkB,EAAE8F,QAAQ,CAAC,CAAC;YAElF;YACA7C,KAAK,CAACD,KAAK,GAAG8C;YACd;QACF;QACA,OAAQ9D,OAAOU,IAAI;YACjB,KAAK;gBAAW;oBACd,MAAMoD,UAAUxD,cAActC;oBAC9B,IAAI8F,YAAY1E,WAAW;wBACzBD,QAAQE,IAAI,CAAC,GAAGJ,OAAO,CAAC,EAAE+B,KAAK,0BAA0B,CAAC;wBAC1D;oBACF;oBACAC,KAAK,CAACD,KAAK,GAAG8C;oBACd;gBACF;YACA,KAAK;YACL,KAAK;gBAAW;oBACd,MAAMA,UAAUvD,aAAaP,QAAQhC;oBACrC,IAAI8F,YAAY1E,WAAW;wBACzBD,QAAQE,IAAI,CAAC,GAAGJ,OAAO,CAAC,EAAE+B,KAAK,kCAAkC,CAAC;wBAClE;oBACF;oBACAC,KAAK,CAACD,KAAK,GAAG8C;oBACd;gBACF;YACA;gBAAS;oBACP,MAAMN,OACJ,OAAOxF,UAAU,WACbA,QACA,OAAOA,UAAU,YAAY,OAAOA,UAAU,YAC5CgG,OAAOhG,SACPoB;oBACR,IAAIoE,SAASpE,WAAW;wBACtBD,QAAQE,IAAI,CAAC,GAAGJ,OAAO,CAAC,EAAE+B,KAAK,qBAAqB,CAAC;wBACrD;oBACF;oBACA,MAAMiD,UAAUxC,eACdxC,QACA8B,OACAC,MACAhB,QACAwD,MACAG,QACAhC,WACAC,UACAzC,SACA0C;oBAEF,IAAIoC,YAAY7E,WAAW;oBAC3B6B,KAAK,CAACD,KAAK,GAAGiD;gBAChB;QACF;IACF;IACA,KAAK,MAAMjD,QAAQD,MAAMmC,WAAW,CAACgB,QAAQ,CAAE;QAC7C,IAAIjD,KAAK,CAACD,KAAK,KAAK5B,WAAW,OAAO;YAAE+E,SAASnD;QAAK;IACxD;IACA,OAAO;QAAEC;IAAM;AACjB;AAEA,gFAAgF,GAChF,MAAMmD,oBAA4C,IAAIjH,IAAI;IACxD;IACA;IACA;CACD;AAED,MAAMkH,oBAAoB;AAE1B,oHAAoH,GACpH,OAAO,MAAMC,yBAAyB,gBAAe;AAErD,qFAAqF,GACrF,OAAO,MAAMC,uBAAuB,QAAO;AAY3C;;;;CAIC,GACD,SAASC,kBACPvF,MAAc,EACd+B,IAAY,EACZN,IAAY,EACZgB,GAAY,EACZE,QAA4B,EAC5BzC,OAAiB;IAEjB,IAAIuB,SAAS,UAAU;QACrB,MAAMF,SAAS,OAAOkB,QAAQ,WAAWA,MAAM/C,OAAO+C;QACtD,IAAIA,QAAQ,MAAM,CAAC/C,OAAOC,QAAQ,CAAC4B,SAAS;YAC1CrB,QAAQE,IAAI,CAAC,GAAGJ,OAAO,YAAY,EAAE+B,KAAK,yBAAyB,CAAC;YACpE,OAAO5B;QACT;QACA,OAAOoB;IACT;IACA,IAAIE,SAAS,WAAW;QACtB,MAAMoD,UAAUxD,cAAcoB;QAC9B,IAAIoC,YAAY1E,WAAW;YACzBD,QAAQE,IAAI,CAAC,GAAGJ,OAAO,YAAY,EAAE+B,KAAK,0BAA0B,CAAC;QACvE;QACA,OAAO8C;IACT;IACA,IAAIpD,SAAS,QAAQ;QACnB,wEAAwE;QACxE,wEAAwE;QACxE,mCAAmC;QACnCvB,QAAQE,IAAI,CAAC,GAAGJ,OAAO,YAAY,EAAE+B,KAAK,iEAAiE,CAAC;QAC5G,OAAO5B;IACT;IACA,IAAI,OAAOsC,QAAQ,YAAY,OAAOA,QAAQ,YAAY,OAAOA,QAAQ,WAAW;QAClFvC,QAAQE,IAAI,CAAC,GAAGJ,OAAO,YAAY,EAAE+B,KAAK,wBAAwB,CAAC;QACnE,OAAO5B;IACT;IACA,MAAMpB,QAAQgG,OAAOtC,KAAK5C,IAAI;IAC9B,IAAI1B,aAAagB,IAAI,CAACJ,QAAQ;QAC5BmB,QAAQE,IAAI,CAAC,GAAGJ,OAAO,YAAY,EAAE+B,KAAK,kCAAkC,CAAC;QAC7E,OAAO5B;IACT;IACA,IAAIsB,SAAS,SAAS;QACpB,IAAIvC,WAAWH,QAAQ,OAAOA;QAC9B,MAAMoE,MAAM9F,cAAc0B;QAC1B,IAAI,CAACoE,OAAQR,YAAY,CAACA,SAAS7C,GAAG,CAACqD,IAAIC,OAAO,GAAI;YACpDlD,QAAQE,IAAI,CACV,GAAGJ,OAAO,YAAY,EAAE+B,KAAK,wEAAwE,CAAC;YAExG,OAAO5B;QACT;QACA,OAAOpB;IACT;IACA,IAAI0C,SAAS,QAAQ;QACnB,IAAIvC,WAAWH,UAAUQ,mBAAmBR,QAAQ,OAAOA;QAC3DmB,QAAQE,IAAI,CACV,GAAGJ,OAAO,YAAY,EAAE+B,KAAK,0DAA0D,CAAC;QAE1F,OAAO5B;IACT;IACA,IAAIpB,MAAM8B,MAAM,GAAGlE,eAAe2F,IAAI,EAAE;QACtCpC,QAAQE,IAAI,CACV,GAAGJ,OAAO,YAAY,EAAE+B,KAAK,UAAU,EAAEpF,eAAe2F,IAAI,CAAC,sBAAsB,CAAC;QAEtF,OAAOvD,MAAMkE,KAAK,CAAC,GAAGtG,eAAe2F,IAAI,EAAEY,OAAO;IACpD;IACA,OAAOnE;AACT;AAEA;;;;;CAKC,GACD,SAASyG,uBACPxF,MAAc,EACdyF,WAAmB,EACnBzD,KAA8B,EAC9B0D,IAAmB,EACnBxF,OAAiB;IAEjB,MAAMyF,OAAgC,aAAK3D;IAC3C,MAAM1B,OAAgC,CAAC;IACvC,2EAA2E;IAC3E,4EAA4E;IAC5E,0EAA0E;IAC1E,4DAA4D;IAC5D,IAAI+E,0BAA0BM,MAAM;YAIxBD;QAHV,MAAMjD,MAAMkD,IAAI,CAACN,uBAAuB;QACxC,OAAOM,IAAI,CAACN,uBAAuB;QACnC,MAAMO,KAAK,OAAOnD,QAAQ,WAAWA,IAAI5C,IAAI,KAAK;QAClD,IAAI+F,QAAMF,mBAAAA,KAAKG,UAAU,qBAAfH,iBAAiB5F,GAAG,CAAC8F,MAAK;YAClCtF,IAAI,CAAC+E,uBAAuB,GAAGO;QACjC,OAAO,IAAInD,QAAQtC,aAAasC,QAAQ,QAAQA,QAAQ,IAAI;YAC1DvC,QAAQE,IAAI,CAAC,GAAGJ,OAAO,CAAC,EAAEqF,uBAAuB,iDAAiD,CAAC;QACrG;IACF;IACA,IAAII,gBAAgBlI,gCAAgC;YAGnCmI;QAFf,MAAMI,QAAQ,OAAOH,IAAI,CAACL,qBAAqB,KAAK,WAAWP,OAAOY,IAAI,CAACL,qBAAqB,EAAEzF,IAAI,KAAK;QAC3G,OAAO8F,IAAI,CAACL,qBAAqB;QACjC,IAAI,CAACQ,SAAS,GAACJ,qBAAAA,KAAKK,YAAY,qBAAjBL,mBAAmB5F,GAAG,CAACgG,SAAQ;YAC5C,OAAO;gBACLE,SAAS,CAAC,oBAAoB,EAAEhG,OAAO,2CAA2C,CAAC;YACrF;QACF;QACAM,IAAI,CAACgF,qBAAqB,GAAGQ;QAC7B,MAAMG,YAAYN,IAAI,CAACnI,kCAAkC;QACzD,OAAOmI,IAAI,CAACnI,kCAAkC;QAC9C,IAAIyI,cAAc9F,aAAa,CAACrB,SAASmH,YAAY;YACnD/F,QAAQE,IAAI,CAAC,GAAGJ,OAAO,qCAAqC,CAAC;QAC/D;QACA,MAAMiC,WAAWyD,KAAKQ,cAAc,CAACJ,MAAM;QAC3C,MAAMK,SAAkC,CAAC;QACzC,KAAK,MAAM,CAACpE,MAAMU,IAAI,IAAIlC,OAAOC,OAAO,CAAC1B,SAASmH,aAAaA,YAAY,CAAC,GAAI;;YAC9E,IAAIxD,QAAQtC,aAAasC,QAAQ,MAAM;YACvC,IAAI,CAACnF,4BAA4B6B,IAAI,CAAC4C,OAAO;gBAC3C7B,QAAQE,IAAI,CAAC,GAAGJ,OAAO,YAAY,EAAE+B,KAAK,4BAA4B,CAAC;gBACvE;YACF;YACA,IAAIE,YAAY,CAAEF,CAAAA,QAAQE,QAAO,GAAI;gBACnC/B,QAAQE,IAAI,CAAC,GAAGJ,OAAO,YAAY,EAAE+B,KAAK,yCAAyC,CAAC;gBACpF;YACF;YACA,IAAI2D,KAAKU,gBAAgB,IAAIrI,uBAAuB0E,MAAM;gBACxD,kEAAkE;gBAClE,kEAAkE;gBAClE0D,MAAM,CAACpE,KAAK,GAAGU,IAAI5C,IAAI;gBACvB;YACF;YACA,MAAMd,QAAQwG,kBACZvF,QACA+B,cACAE,4BAAAA,QAAU,CAACF,KAAK,mBAAI,QACpBU,KACAiD,KAAK/C,QAAQ,EACbzC;YAEF,IAAInB,UAAUoB,WAAWgG,MAAM,CAACpE,KAAK,GAAGhD;QAC1C;QACA,IAAIwB,OAAOK,IAAI,CAACuF,QAAQtF,MAAM,EAAEP,IAAI,CAAC9C,kCAAkC,GAAG2I;QAC1E,OAAO;YAAEnE,OAAO2D;YAAMrF;QAAK;IAC7B;IACA,IAAImF,gBAAgBL,mBAAmB;QACrC,MAAMiB,WAA2E;YAC/E;gBAAC;gBAAUX,KAAKY,OAAO;gBAAE;aAAO;YAChC;gBAAC;gBAAaZ,KAAKG,UAAU;gBAAE;aAAU;SAC1C;QACD,KAAK,MAAM,CAACU,MAAMC,KAAKC,OAAO,IAAIJ,SAAU;YAC1C,MAAM5D,MAAMkD,IAAI,CAACY,KAAK;YACtB,OAAOZ,IAAI,CAACY,KAAK;YACjB,IAAI9D,QAAQtC,aAAasC,QAAQ,QAAQA,QAAQ,IAAI;YACrD,MAAMmD,KAAK,OAAOnD,QAAQ,WAAWA,IAAI5C,IAAI,KAAK;YAClD,IAAI+F,OAAMY,uBAAAA,IAAK1G,GAAG,CAAC8F,MAAK;gBACtBtF,IAAI,CAACiG,KAAK,GAAGX;YACf,OAAO;gBACL1F,QAAQE,IAAI,CAAC,GAAGJ,OAAO,CAAC,EAAEuG,KAAK,SAAS,EAAEE,OAAO,iCAAiC,CAAC;YACrF;QACF;IACF;IACA,OAAO;QAAEzE,OAAO2D;QAAMrF;IAAK;AAC7B;AAEA,SAASoG,YAAYC,KAAa;IAChC,IAAI,aAAaxH,IAAI,CAACwH,QAAQ,OAAO;IACrC,IAAI,uBAAuBxH,IAAI,CAACwH,QAAQ,OAAO;IAC/C,OAAO;AACT;AAEA;;;;CAIC,GACD,SAASC,YAAYC,WAAmB,EAAEpB,WAAoB;IAC5D,IAAIoB,gBAAgB,OAAO;QACzB,OAAOpB,eAAe,QAAQA,gBAAgB,MAAMA,gBAAgB;IACtE;IACA,OAAOA,gBAAgBoB;AACzB;AAEA,OAAO,SAASC,mBACdC,KAAc,EACdC,OAAkB,EAClBC,OAA2B;IAE3B,IAAI;QACF,OAAOC,SAASH,OAAOC,SAASC;IAClC,EAAE,OAAON,OAAO;QACd,OAAO;YACLQ,IAAI;YACJC,MAAM;YACNT,OAAO,CAAC,4BAA4B,EAAEA,iBAAiBU,QAAQV,MAAMW,OAAO,GAAGvC,OAAO4B,QAAQ;QAChG;IACF;AACF;AAWA;;;;;;;;;;CAUC,GACD,OAAO,SAASY,oBACd9B,WAAmB,EACnB+B,KAAwC,EACxCP,OAA2B;IAE3B,MAAMnF,QAAQ/E,UAAU,CAAC0I,YAAY;IACrC,IAAI,CAAC3D,OAAO;QACV,OAAO;YACLqF,IAAI;YACJC,MAAM;YACNT,OAAO,CAAC,WAAW,EAAElB,YAAY,uBAAuB,CAAC;QAC3D;IACF;IACA,MAAMvF,UAAoB,EAAE;IAC5B,MAAM8B,QAAQwC,cACZiB,aACA,aAAK3D;QAAOmC,aAAa,aAAKnC,MAAMmC,WAAW;YAAEgB,UAAU,EAAE;;QAC7DuC,MAAMxF,KAAK,EACXiF,CAAAA,2BAAAA,QAASvE,SAAS,IAAG,IAAIxE,IAAI+I,QAAQvE,SAAS,IAAI,MAClDuE,CAAAA,2BAAAA,QAAStE,QAAQ,IAAG,IAAIzE,IAAI+I,QAAQtE,QAAQ,IAAI,MAChDzC;IAEF,MAAMD,KACJuH,MAAMvH,EAAE,KAAKE,YAAYA,YAAYJ,WAAW0F,aAAa+B,MAAMvH,EAAE,EAAEC;IACzE,OAAO;QACLiH,IAAI;QACJnF,OAAO,WAAWA,QAAQA,MAAMA,KAAK,GAAG,CAAC;QACzC/B;QACAC;IACF;AACF;AAEA,SAASgH,SACPH,KAAc,EACdC,OAAkB,EAClBC,OAAsC;cAoIqBQ;IAlI3D,MAAMA,aAAazK,WAAW,CAACgK,QAAQ;IACvC,IAAI,CAACS,YAAY;QACf,OAAO;YACLN,IAAI;YACJC,MAAM;YACNT,OAAO,CAAC,iBAAiB,EAAEK,QAAQ,CAAC,CAAC;QACvC;IACF;IACA,IACE,CAAClI,SAASiI,UACV,OAAOA,MAAMW,MAAM,KAAK,YACxB,CAAC5I,SAASiI,MAAMY,KAAK,GACrB;QACA,OAAO;YACLR,IAAI;YACJC,MAAM;YACNT,OAAO;QACT;IACF;IACA,MAAMe,SAASX,MAAMW,MAAM;IAC3B,MAAMC,QAAQZ,MAAMY,KAAK;IACzB,MAAMC,OAAOD,KAAK,CAACD,OAAO;IAC1B,IAAI,CAAC5I,SAAS8I,OAAO;QACnB,OAAO;YACLT,IAAI;YACJC,MAAM;YACNT,OAAO;QACT;IACF;IACA,IAAI,CAACC,YAAYa,WAAWG,IAAI,EAAEA,KAAKnC,WAAW,GAAG;QACnD,OAAO;YACL0B,IAAI;YACJC,MAAM;YACNT,OAAO,CAAC,EAAE,EAAEK,QAAQ,aAAa,EAAES,WAAWG,IAAI,KAAK,QAAQ,yBAAyB,CAAC,CAAC,EAAEH,WAAWG,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE7C,OAAO6C,KAAKnC,WAAW,EAAE,CAAC,CAAC;QACrJ;IACF;IAEA,2EAA2E;IAC3E,yEAAyE;IACzE,wEAAwE;IACxE,4CAA4C;IAC5C,MAAMoC,aAAa,IAAIC;IACvB,MAAMC,iBAAiB,IAAI7J;IAC3B,KAAK,MAAM,CAAC0H,IAAIoC,KAAK,IAAIzH,OAAOC,OAAO,CAACmH,OAAQ;QAC9C,IAAI,CAAC7I,SAASkJ,OAAO;QACrB,MAAM/H,KACJ+H,KAAK/H,EAAE,KAAKE,YACR6H,KAAK/H,EAAE,GACPnB,SAASkJ,KAAKhG,KAAK,IACjBgG,KAAKhG,KAAK,CAAC/B,EAAE,GACbE;QACR,IAAIF,OAAOE,WAAW0H,WAAW1D,GAAG,CAACyB,IAAI3F;QACzC,IAAI+H,KAAKC,MAAM,KAAK,MAAMF,eAAeG,GAAG,CAACtC;IAC/C;IAEA,kEAAkE;IAClE,0EAA0E;IAC1E,wEAAwE;IACxE,yEAAyE;IACzE,+DAA+D;IAC/D,yEAAyE;IACzE,yEAAyE;IACzE,gDAAgD;IAChD,MAAMhD,gBAAgBqE,CAAAA,2BAAAA,QAASrE,aAAa,IAAG,IAAI1E,IAAI+I,QAAQrE,aAAa,IAAI;IAChF,4EAA4E;IAC5E,+EAA+E;IAC/E,yEAAyE;IACzE,uEAAuE;IACvE,MAAMwD,mBAAmBa,CAAAA,2BAAAA,QAASb,gBAAgB,MAAK;IACvD,MAAM+B,YAAYlB,CAAAA,2BAAAA,QAASkB,SAAS,MAAK;IACzC,MAAMC,gBAAgB,IAAIN;IAC1B,MAAMO,gBAAgB,IAAIP;IAC1B,+EAA+E;IAC/E,MAAMQ,eAAe,IAAIR;IACzB,MAAMS,eAAwC,CAAC;IAC/C,KAAK,MAAM,CAAC3C,IAAIoC,KAAK,IAAIzH,OAAOC,OAAO,CAACmH,OAAQ;;QAC9C,IAAI,CAAC7I,SAASkJ,SAAS,CAAClJ,SAASkJ,KAAKhG,KAAK,GAAG;YAC5CuG,YAAY,CAAC3C,GAAG,GAAGoC;YACnB;QACF;QACA,IAAIG,aAAaH,KAAKvC,WAAW,KAAK7H,sBAAsB;YAC1D,MAA6BoK,cAAAA,KAAKhG,KAAK,EAAjC,EAAEwG,MAAM,EAAY,GAAGR,aAAVhG,yCAAUgG;;;YAC7B,MAAMrC,OAAO,aAAK3D;YAClB,OAAO2D,IAAI,CAAC,WAAW;YACvB,MAAM8C,OAAO5K,WAAW2K;YACxB,IAAIC,MAAMH,aAAanE,GAAG,CAACyB,IAAI;gBAAE4C,QAAQC,KAAK7C,EAAE;gBAAE8C,UAAUD,KAAKE,IAAI;YAAC;YACtEJ,YAAY,CAAC3C,GAAG,GAAG,aAAKoC;gBAAMhG,OAAO2D;;YACrC;QACF;QACA,MAAM7D,QAAQ/E,UAAU,CAACgI,OAAOiD,KAAKvC,WAAW,EAAE;QAClD,MAAMmD,iBAAQ9G,yBAAAA,MAAOiB,SAAS,oBAAI,CAAC;QACnC,MAAMf,QAAiC,aAAKgG,KAAKhG,KAAK;QACtD,MAAM6G,SAAiC,CAAC;QACxC,MAAMC,QAAgC,CAAC;QACvC,KAAK,MAAM,CAACrJ,KAAKV,MAAM,IAAIwB,OAAOC,OAAO,CAACwB,OAAQ;YAChD,IAAI,OAAOjD,UAAU,UAAU;YAC/B,MAAM+D,OAAO8F,KAAK,CAACnJ,IAAI;YACvB,IACE2G,oBACArI,uBAAuBgB,UACtBjB,CAAAA,8BAA8BiL,QAAQ,CAACtJ,QACrCqC,CAAAA,yBAAAA,MAAOmC,WAAW,CAACC,UAAU,CAACzE,IAAI,MAAKU,aAAa2C,SAAS,MAAM,GACtE;gBACAgG,KAAK,CAACrJ,IAAI,GAAGV,MAAMc,IAAI;gBACvB,OAAOmC,KAAK,CAACvC,IAAI;gBACjB;YACF;YACA,IACE,AAACqD,SAAS,WAAWzF,cAAc0B,MAAMc,IAAI,OAC5C,AAACiD,CAAAA,SAAS,WAAWA,SAAS,KAAI,MAAMF,iCAAAA,cAAe9C,GAAG,CAACf,MAAMc,IAAI,MACtE;gBACAgJ,MAAM,CAACpJ,IAAI,GAAGV;gBACd,OAAOiD,KAAK,CAACvC,IAAI;YACnB;QACF;QACA,IAAIc,OAAOK,IAAI,CAACiI,QAAQhI,MAAM,EAAEuH,cAAcjE,GAAG,CAACyB,IAAIiD;QACtD,IAAItI,OAAOK,IAAI,CAACkI,OAAOjI,MAAM,EAAEwH,cAAclE,GAAG,CAACyB,IAAIkD;QACrDP,YAAY,CAAC3C,GAAG,GAAG,aAAKoC;YAAMhG;;IAChC;IAEA,MAAM0D,OAAsB;QAC1BK,cAAckB,CAAAA,2BAAAA,QAASlB,YAAY,IAAG,IAAI7H,IAAI+I,QAAQlB,YAAY,IAAI;QACtEG,cAAc,UAAEe,2BAAAA,QAASf,cAAc,mBAAI,CAAC;QAC5CI,SAASW,CAAAA,2BAAAA,QAASX,OAAO,IAAG,IAAIpI,IAAI+I,QAAQX,OAAO,IAAI;QACvDT,YAAYoB,CAAAA,2BAAAA,QAASpB,UAAU,IAAG,IAAI3H,IAAI+I,QAAQpB,UAAU,IAAI;QAChElD,UAAUsE,CAAAA,2BAAAA,QAAStE,QAAQ,IAAG,IAAIzE,IAAI+I,QAAQtE,QAAQ,IAAI;QAC1DyD;IACF;IACA,0EAA0E;IAC1E,iEAAiE;IACjE,MAAM4C,eAAeb,YAAY;WAAIV,WAAWwB,KAAK;YAAMxB,uBAAAA,WAAWyB,QAAQ,YAAnBzB,uBAAuB,EAAE;KAAE,GAAGA,WAAWwB,KAAK;IACzG,MAAMA,QACJvD,KAAKK,YAAY,IAAIZ,kBAAkBrF,GAAG,CAACkH,WACvC;WAAIgC;QAAczL;KAA+B,GACjDyL;IACN,MAAMG,YAAYnL,2BAChB;QAAE0J;QAAQC,OAAOY;IAAa,GAC9B;QAAExC,cAAckD;IAAM;IAExB,IAAIE,UAAUhC,EAAE,KAAK,OAAO;QAC1B,OAAO;YACLA,IAAI;YACJC,MAAMV,YAAYyC,UAAUxC,KAAK;YACjCA,OAAOwC,UAAUxC,KAAK;QACxB;IACF;IAEA,MAAMjE,YAAYuE,CAAAA,2BAAAA,QAASvE,SAAS,IAAG,IAAIxE,IAAI+I,QAAQvE,SAAS,IAAI;IACpE,MAAMC,WAAW+C,KAAK/C,QAAQ;IAC9B,MAAMzC,UAAoB,EAAE;IAC5B,MAAMkJ,SAAmB,CAAC;IAC1B,MAAMC,gBACJzC,YAAY,OAAOgB,KAAKnC,WAAW,KAAKgC,WAAWG,IAAI,KAAK;IAC9D,MAAM0B,SAAS,IAAIxB;IACnB,MAAMyB,OAAO,CAAC3D;QACZ,MAAM4D,QACJ5D,OAAO8B,UAAU2B,gBACb3L,yBACAD;QACN6L,OAAOnF,GAAG,CAACyB,IAAI4D;QACf,OAAOA;IACT;IAEA,+EAA+E,GAC/E,MAAMC,WAAW,IAAI3B;IACrB,MAAM4B,QAAwD;QAC5D;YAAE9D,IAAI8B;YAAQiC,UAAU;QAAK;KAC9B;IACDJ,KAAK7B;IACL,MAAOgC,MAAM7I,MAAM,CAAE;YA8DGmH;QA7DtB,MAAM,EAAEpC,EAAE,EAAE+D,QAAQ,EAAE,GAAGD,MAAME,KAAK;QAIpC,MAAM5B,OAAOmB,UAAUxB,KAAK,CAAC/B,GAAG;QAChC,MAAM9D,QAAQ/E,UAAU,CAACiL,KAAKvC,WAAW,CAAC;QAC1C,IAAI,CAAC3D,OAAO;YACV,OAAO;gBACLqF,IAAI;gBACJC,MAAM;gBACNT,OAAO,CAAC,WAAW,EAAEqB,KAAKvC,WAAW,CAAC,uBAAuB,CAAC;YAChE;QACF;QACA,MAAMoE,QAAQP,OAAOzF,GAAG,CAAC+B;QACzB,MAAMnD,MAAMkF,KAAK,CAAC/B,GAAG;QACrB,IAAI9G,SAAS2D,MAAM;YACjB,6DAA6D;YAC7D,KAAK,MAAMhD,OAAOpB,mBAAoB;gBACpC,IAAIoE,GAAG,CAAChD,IAAI,KAAKU,WAAW;oBAC1BD,QAAQE,IAAI,CACV,GAAGwF,GAAG,CAAC,EAAEnG,IAAI,mDAAmD,CAAC;gBAErE;YACF;YACA,IAAIgD,IAAIwF,MAAM,KAAK9H,aAAa,OAAOsC,IAAIwF,MAAM,KAAK,WAAW;gBAC/D/H,QAAQE,IAAI,CAAC,GAAGwF,GAAG,iCAAiC,CAAC;YACvD;YACA,IAAInD,IAAIkF,KAAK,KAAKxH,aAAa,CAACnB,MAAMC,OAAO,CAACwD,IAAIkF,KAAK,GAAG;gBACxDzH,QAAQE,IAAI,CACV,GAAGwF,GAAG,4DAA4D,CAAC;YAEvE;YACA,IACEnD,IAAIkH,QAAQ,KAAKxJ,aACjBsC,IAAIkH,QAAQ,KAAK,QACjBlH,IAAIkH,QAAQ,KAAMA,CAAAA,aAAa,OAAO,OAAOF,SAAS5F,GAAG,CAAC+B,GAAE,GAC5D;gBACA1F,QAAQE,IAAI,CACV,GAAGwF,GAAG,6DAA6D,CAAC;YAExE;YACA,IAAI9G,SAAS2D,IAAIT,KAAK,GAAG;oBACRoG,oBACFC;gBADb,MAAMQ,UAAST,qBAAAA,cAAcvE,GAAG,CAAC+B,eAAlBwC,qBAAyB,CAAC;gBACzC,MAAM9H,QAAO+H,qBAAAA,cAAcxE,GAAG,CAAC+B,eAAlByC,qBAAyB,CAAC;gBACvC,KAAK,MAAM5I,OAAOc,OAAOK,IAAI,CAAC6B,IAAIT,KAAK,EAAG;wBAMtCgG;oBALF,IAAIM,aAAaxI,GAAG,CAAC8F,OAAQnG,CAAAA,QAAQ,YAAYA,QAAQ,UAAS,GAAI;oBACtE,IACEA,QAAQ,QACRoJ,MAAM,CAACpJ,IAAI,KAAKU,aAChBG,IAAI,CAACb,IAAI,KAAKU,aACd6H,EAAAA,cAAAA,KAAKhG,KAAK,qBAAVgG,WAAY,CAACvI,IAAI,MAAKU,aACtBsC,IAAIT,KAAK,CAACvC,IAAI,KAAKU,WACnB;wBACAD,QAAQE,IAAI,CACV,GAAGwF,GAAG,CAAC,EAAEnG,IAAI,kDAAkD,CAAC;oBAEpE;gBACF;YACF;QACF;QACA,MAAMqK,WAAqB,EAAE;QAC7B,KAAK,MAAMC,YAAW/B,cAAAA,KAAKL,KAAK,YAAVK,cAAc,EAAE,CAAE;YACtC,IAAIsB,OAAOxJ,GAAG,CAACiK,UAAU;gBACvB7J,QAAQE,IAAI,CACV,GAAG2J,QAAQ,qEAAqE,CAAC;gBAEnF;YACF;YACA,MAAMC,QAAQb,UAAUxB,KAAK,CAACoC,QAAQ;YACtC,IAAI,CAACC,OAAO;YACZ,MAAMC,aAAalN,UAAU,CAACiN,MAAMvE,WAAW,CAAC;YAChD,IAAI,CAACwE,YAAY;gBACf,OAAO;oBACL9C,IAAI;oBACJC,MAAM;oBACNT,OAAO,CAAC,WAAW,EAAEqD,MAAMvE,WAAW,CAAC,uBAAuB,CAAC;gBACjE;YACF;YACA,IAAI,CAAC3D,MAAMiC,eAAe,EAAE;gBAC1B,OAAO;oBACLoD,IAAI;oBACJC,MAAM;oBACNT,OAAO,GAAG7E,MAAM8C,WAAW,CAAC,EAAE,EAAEgB,GAAG,wCAAwC,EAAEmE,SAAS;gBACxF;YACF;YACA,IACE,CAAC7M,0BACC;gBACEuI,aAAauE,MAAMvE,WAAW;gBAC9BnB,UAAU2F,WAAW3F,QAAQ;gBAC7B4F,gBAAgBD,WAAWC,cAAc;YAC3C,GACA;gBACEzE,aAAauC,KAAKvC,WAAW;gBAC7BnB,UAAUxC,MAAMwC,QAAQ;gBACxB6F,kBAAkBrI,MAAMqI,gBAAgB;YAC1C,IAEF;gBACA,OAAO;oBACLhD,IAAI;oBACJC,MAAM;oBACNT,OAAO,GAAGsD,WAAWrF,WAAW,CAAC,EAAE,EAAEmF,QAAQ,0BAA0B,EAAEjI,MAAM8C,WAAW,CAAC,EAAE,EAAEgB,GAAG,CAAC,CAAC;gBACtG;YACF;YACAkE,SAAS1J,IAAI,CAACmJ,KAAKQ;YACnBN,SAAStF,GAAG,CAAC4F,SAASnE;YACtB8D,MAAMtJ,IAAI,CAAC;gBAAEwF,IAAImE;gBAASJ,UAAUE;YAAM;QAC5C;QAEA,MAAMO,YAAY5E,uBAChBI,IACAoC,KAAKvC,WAAW,EAChB,aAAKuC,KAAKhG,KAAK,EAAKoG,cAAcvE,GAAG,CAAC+B,MACtCF,MACAxF;QAEF,IAAI,aAAakK,WAAW;YAC1B,OAAO;gBAAEjD,IAAI;gBAAOC,MAAM;gBAAaT,OAAOyD,UAAUpE,OAAO;YAAC;QAClE;QACA,0EAA0E;QAC1E,MAAMqE,aAAahC,cAAcxE,GAAG,CAAC+B;QACrC,MAAM0E,cAAc9F,cAClBoB,IACAyE,aACI,aACKvI;YACHmC,aAAa,aACRnC,MAAMmC,WAAW;gBACpBgB,UAAUnD,MAAMmC,WAAW,CAACgB,QAAQ,CAACsF,MAAM,CAAC,CAACxI,OAASsI,UAAU,CAACtI,KAAK,KAAK5B;;aAG/E2B,OACJsI,UAAUpI,KAAK,EACfU,WACAC,UACAzC,SACA0C;QAEF,IAAI,aAAa0H,aAAa;YAC5B,OAAO;gBACLnD,IAAI;gBACJC,MAAM;gBACNT,OAAO,GAAG7E,MAAM8C,WAAW,CAAC,EAAE,EAAEgB,GAAG,2BAA2B,EAAE0E,YAAYpF,OAAO,CAAC,MAAM,CAAC;YAC7F;QACF;QACA,MAAMjF,KAAKF,WAAW6F,IAAIiC,WAAWhE,GAAG,CAAC+B,KAAK1F;QAC9CkJ,MAAM,CAACS,MAAM,GAAG;YACdW,KAAKX;YACLpI,MAAM9D,SAAS8M,IAAI;YACnBhF,aAAauC,KAAKvC,WAAW;YAC7BnB,UAAUxC,MAAMwC,QAAQ;YACxBqF;YACAhC,OAAOmC;YACP9H,OAAO,aAAKsI,YAAYtI,KAAK,EAAKoI,UAAU9J,IAAI,EAAK+J,YAAe/B,aAAazE,GAAG,CAAC+B;WACjF3F,KAAK;YAAEA;QAAG,IAAI,CAAC,GACf8H,eAAejI,GAAG,CAAC8F,MAAM;YAAEqC,QAAQ;QAAK,IAAI,CAAC;IAErD;IAEA,sEAAsE;IACtE,yEAAyE;IACzE,0DAA0D;IAC1D,MAAMyC,QAAQtN,aAAagM;IAC3B,IAAIsB,QAAQvN,oBAAoB;QAC9B,OAAO;YACLgK,IAAI;YACJC,MAAM;YACNT,OAAO,CAAC,YAAY,EAAE+D,MAAM,8BAA8B,EAAEvN,oBAAoB;QAClF;IACF;IACA,MAAMwN,YAAoC,CAAC;IAC3C,KAAK,MAAM,CAACjG,QAAQ8E,MAAM,IAAIF,OAAQqB,SAAS,CAACnB,MAAM,GAAG9E;IACzD,OAAO;QACLyC,IAAI;QACJO,QAAQ4B,OAAOzF,GAAG,CAAC6D;QACnBC,OAAOyB;QACPlJ;QACAyK;IACF;AACF"}

package/src/lib/server/ai-create-route.d.ts

@@ -18,7 +18,7 @@ import type { AglynOrganization } from '@aglyn/aglyn/foundation/definitions/orga
 /**
  * Whether an add-on this workspace can buy grants `aiGenerative`: the
  * console's `entitlementPurchasable`, over the add-ons the AI plugin declares
- * on the server.
+ * on the server (`pluginSeatAddonSoldOn`).
  */
 export declare function aiGenerativePurchasable(org: Partial<AglynOrganization>): boolean;
 /** The door: whether a list draws Create with AI, as what, and every word its brief says. */

package/src/lib/server/ai-create-route.js

@@ -21,7 +21,7 @@ import { _ as _extends } from "@swc/helpers/_/_extends";
 import { checkEntitlement } from "@aglyn/aglyn/server";
 import { COLLECTIONS_MAX_PER_HOST } from "@aglyn/aglyn/app-utils/collection-entries";
 import { aiAddonName, isUncappedPlanComp, orgSubscriptionState, resolveEffectivePlan } from "@aglyn/aglyn/app-utils/plan-entitlements";
-import { listPluginSeatAddons } from "@aglyn/aglyn/plugin-manager/plugin-entitlements";
+import { listPluginSeatAddons, pluginSeatAddonSoldOn } from "@aglyn/aglyn/plugin-manager/plugin-entitlements";
 import { emailUnverifiedResponse, firebaseAdmin, isImpersonationSession } from "@aglyn/tenant-data-admin/server/firebase-admin";
 import { invalidIdTokenResponse } from "@aglyn/tenant-data-admin/server/id-token-refusal";
 import { getOrgForUser, memberHasPermissionOnHost } from "@aglyn/tenant-data-admin/server/organizations";
@@ -92,15 +92,14 @@ async function doorCaller(request, orgId) {
 /**
  * Whether an add-on this workspace can buy grants `aiGenerative`: the
  * console's `entitlementPurchasable`, over the add-ons the AI plugin declares
- * on the server.
+ * on the server (`pluginSeatAddonSoldOn`).
  */ export function aiGenerativePurchasable(org) {
     const billing = org;
     if (orgSubscriptionState(billing) !== 'live') return false;
     const plan = resolveEffectivePlan(billing);
     return listPluginSeatAddons().some((addon)=>{
-        var _addon_quota_perUnitByPlan_plan;
         var _addon_features;
-        return ((_addon_features = addon.features) == null ? void 0 : _addon_features.includes('aiGenerative')) && (!addon.quota || ((_addon_quota_perUnitByPlan_plan = addon.quota.perUnitByPlan[plan]) != null ? _addon_quota_perUnitByPlan_plan : 0) > 0);
+        return ((_addon_features = addon.features) == null ? void 0 : _addon_features.includes('aiGenerative')) && pluginSeatAddonSoldOn(addon, plan);
     });
 }
 /** What is left of the month's credits, as the AI credits meter reads it. */ async function creditsFacts(firestore, orgId, org, now) {

package/src/lib/server/ai-create-route.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../../../../libs/plugins/ai/src/lib/server/ai-create-route.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n\n// lockdown-423: via libs/plugins/ai/src/lib/server/ai-jobs-gate.ts\n// The follow view climbs `aiJobsGate`, whose lockdown rung is the verdict. The\n// door answers what a list draws and starts nothing: a locked workspace's\n// start is refused by the jobs route's own ladder, in its own words.\n\nimport type { DecodedIdToken } from 'firebase-admin/auth'\nimport { checkEntitlement } from '@aglyn/aglyn/server'\nimport { COLLECTIONS_MAX_PER_HOST } from '@aglyn/aglyn/app-utils/collection-entries'\nimport {\n  aiAddonName,\n  isUncappedPlanComp,\n  orgSubscriptionState,\n  resolveEffectivePlan,\n} from '@aglyn/aglyn/app-utils/plan-entitlements'\nimport { listPluginSeatAddons } from '@aglyn/aglyn/plugin-manager/plugin-entitlements'\nimport type { AglynOrganization, AglynOrgMember } from '@aglyn/aglyn/foundation/definitions/organization.types'\nimport {\n  emailUnverifiedResponse,\n  firebaseAdmin,\n  isImpersonationSession,\n} from '@aglyn/tenant-data-admin/server/firebase-admin'\nimport { invalidIdTokenResponse } from '@aglyn/tenant-data-admin/server/id-token-refusal'\nimport { getOrgForUser, memberHasPermissionOnHost } from '@aglyn/tenant-data-admin/server/organizations'\nimport { isServerReleaseFlagOnForOrg } from '@aglyn/tenant-data-admin/server/release-flags'\nimport { aiJobSiteRefusal } from '../jobs/ai-job-admission'\nimport { aiJobSummary, getAiJob, listAiJobs } from '../jobs/ai-jobs'\nimport {\n  aiCreateDoorView,\n  aiJobFollowView,\n  isAiCreateKind,\n  type AiCreateCreditsFacts,\n  type AiCreateKind,\n} from '../model/ai-create-view'\nimport { AI_JOB_ACTIVE_STATUSES, AI_PAGE_BUILDING_JOB_KINDS, aiSiteBuildInFlight } from '../model/ai-job-activity'\nimport { aiTemplateCollectionOptions } from '../model/ai-template-collections'\nimport { assistSpendAfterReturnsUsd, ASSIST_RETURNED_USD_FIELD } from '../usage/assist-credit-returns'\nimport { assistBandRefuses, publicAssistCredits, resolveAssistBudgetUsd } from '../usage/assist-credits'\nimport { readFreeAiCreditsLeft } from '../usage/free-ai-credits-left'\nimport { aiJobsGate } from './ai-jobs-gate'\n\n/**\n * `GET /api/ai/create?orgId&hostId&kind` — the door one list's \"Create with\n * AI\" reads in the apps (AGL-3854), and `GET /api/ai/create/:jobId?orgId` —\n * the job it started, as the dialog's follow card reads it.\n *\n * The console draws each entry from its shell's gates and its own components\n * (`ai-describe-button`, `ai-brief-dialog`, `ai-job-follow`); the apps have\n * neither, so these answer the same verdicts and the same words as data\n * (`model/ai-create-view.ts`). Both only read. Starting, confirming and\n * canceling go through the jobs routes the console calls, whose ladder decides\n * every request exactly as it does for the console.\n */\n\nfunction bearerToken(request: Request): string | undefined {\n  const authorization = request.headers.get('authorization') ?? ''\n  return authorization.startsWith('Bearer ') ? authorization.slice('Bearer '.length) : undefined\n}\n\n/** Every rung the console's shell climbs before it draws the entry, in the jobs gate's order. */\ninterface DoorCaller {\n  decoded: DecodedIdToken\n  staff: boolean\n  orgId: string\n  org: Partial<AglynOrganization>\n  member: AglynOrgMember | null\n}\n\nasync function doorCaller(request: Request, orgId: string): Promise<Response | DoorCaller> {\n  const idToken = bearerToken(request)\n  if (!idToken) return Response.json({ error: 'Unauthenticated' }, { status: 401 })\n  let decoded: DecodedIdToken\n  try {\n    decoded = await firebaseAdmin.app().auth().verifyIdToken(idToken)\n  } catch (error) {\n    const unauthenticated = invalidIdTokenResponse(error)\n    if (unauthenticated) return unauthenticated\n    throw error\n  }\n  if (!decoded.email_verified && !isImpersonationSession(decoded)) return emailUnverifiedResponse()\n  if (!orgId) return Response.json({ error: 'Open a workspace before using this feature' }, { status: 400 })\n  const resolved = await getOrgForUser(decoded.uid, orgId)\n  if (!resolved || resolved.orgId !== orgId) {\n    return Response.json({ error: 'You are not a member of that organization' }, { status: 403 })\n  }\n  return {\n    decoded,\n    staff: decoded['staff'] === true,\n    orgId,\n    org: resolved.org ?? {},\n    member: resolved.member ?? null,\n  }\n}\n\n/**\n * Whether an add-on this workspace can buy grants `aiGenerative`: the\n * console's `entitlementPurchasable`, over the add-ons the AI plugin declares\n * on the server.\n */\nexport function aiGenerativePurchasable(org: Partial<AglynOrganization>): boolean {\n  const billing = org as Parameters<typeof checkEntitlement>[0]\n  if (orgSubscriptionState(billing as never) !== 'live') return false\n  const plan = resolveEffectivePlan(billing as never)\n  return listPluginSeatAddons().some(\n    (addon) =>\n      addon.features?.includes('aiGenerative') && (!addon.quota || (addon.quota.perUnitByPlan[plan] ?? 0) > 0),\n  )\n}\n\n/** What is left of the month's credits, as the AI credits meter reads it. */\nasync function creditsFacts(\n  firestore: FirebaseFirestore.Firestore,\n  orgId: string,\n  org: Partial<AglynOrganization>,\n  now: Date,\n): Promise<AiCreateCreditsFacts> {\n  if (resolveEffectivePlan(org as never) === 'free') {\n    const left = await readFreeAiCreditsLeft(firestore, { orgId, org: org as object, now })\n    return left ? { kind: 'free', left } : { kind: 'none' }\n  }\n  const budgetUsd = resolveAssistBudgetUsd(org as never)\n  if (budgetUsd === null) return isUncappedPlanComp(org as never) ? { kind: 'unlimited' } : { kind: 'none' }\n  const usage = await firestore\n    .collection('orgs')\n    .doc(orgId)\n    .collection('assistUsage')\n    .doc(now.toISOString().slice(0, 7))\n    .get()\n  const credits = publicAssistCredits(\n    assistSpendAfterReturnsUsd(usage.get('estCostUsd'), usage.get(ASSIST_RETURNED_USD_FIELD)),\n    budgetUsd,\n  )\n  if (credits.limit === null || credits.remaining === null) return { kind: 'none' }\n  return {\n    kind: 'band',\n    used: credits.used,\n    limit: credits.limit,\n    remaining: credits.remaining,\n    stopsAtBand: assistBandRefuses(org as never),\n  }\n}\n\nconst ID_CHARS = /^[A-Za-z0-9_-]{1,100}$/\n\n/** The door: whether a list draws Create with AI, as what, and every word its brief says. */\nexport async function GET(request: Request): Promise<Response> {\n  const url = new URL(request.url)\n  const kind = url.searchParams.get('kind') ?? ''\n  if (!isAiCreateKind(kind)) {\n    return Response.json({ error: 'kind must be one of page, template, layout, form, component' }, { status: 400 })\n  }\n  const hostId = url.searchParams.get('hostId') ?? ''\n  if (!ID_CHARS.test(hostId)) return Response.json({ error: 'hostId is not a site id' }, { status: 400 })\n  const caller = await doorCaller(request, (url.searchParams.get('orgId') ?? '').trim())\n  if (caller instanceof Response) return caller\n  const { staff, orgId, org, member } = caller\n  const firestore = firebaseAdmin.app().firestore()\n  const now = new Date()\n  const hidden = () =>\n    Response.json(\n      aiCreateDoorView({\n        kind,\n        shown: false,\n        entitled: false,\n        purchasable: false,\n        canManageBilling: false,\n        credits: { kind: 'none' },\n        addonName: aiAddonName(),\n      }),\n      { headers: { 'Cache-Control': 'no-store' } },\n    )\n\n  // The shell's rungs, in the jobs gate's order: the reader's `ai.generate`\n  // on this site, the release flag, then the site's own AI switch. Any of\n  // them draws no entry at all; staff pass the first two, as they do there.\n  if (!staff && !(await memberHasPermissionOnHost(orgId, hostId, member, 'ai.generate'))) return hidden()\n  if (!staff && !(await isServerReleaseFlagOnForOrg('release_ai_generative', orgId))) return hidden()\n  if (await aiJobSiteRefusal({ firestore, org, hostId })) return hidden()\n\n  const entitled = checkEntitlement(org as never, 'aiGenerative')\n  if (!entitled) {\n    // Its own upsell where only the add-on is missing (AGL-3601): the add-on\n    // store open to this workspace, and an add-on it can buy that grants it.\n    const storeOpen = staff || (await isServerReleaseFlagOnForOrg('release_addon_store', orgId))\n    const purchasable = !staff && storeOpen && aiGenerativePurchasable(org)\n    const canManageBilling = purchasable && (await memberHasPermissionOnHost(orgId, null, member, 'billing.manage'))\n    return Response.json(\n      aiCreateDoorView({\n        kind,\n        shown: true,\n        entitled: false,\n        purchasable,\n        canManageBilling,\n        credits: { kind: 'none' },\n        addonName: aiAddonName(),\n      }),\n      { headers: { 'Cache-Control': 'no-store' } },\n    )\n  }\n\n  const [credits, collections, buildInFlight] = await Promise.all([\n    creditsFacts(firestore, orgId, org, now).catch((error) => {\n      console.error('[ai-create] credits read failed', orgId, error)\n      return { kind: 'none' } as const\n    }),\n    kind === 'template'\n      ? firestore\n          .collection('hosts')\n          .doc(hostId)\n          .collection('collections')\n          .limit(COLLECTIONS_MAX_PER_HOST)\n          .get()\n          .then((snapshot) => ({\n            status: 'success' as const,\n            options: aiTemplateCollectionOptions(\n              snapshot.docs.map((doc) => ({ ...(doc.data() as Record<string, unknown>), $id: doc.id })),\n            ),\n          }))\n          .catch(() => ({ status: 'error' as const, options: [] }))\n      : Promise.resolve(null),\n    kind === 'page'\n      ? listAiJobs(firestore, orgId, { statuses: AI_JOB_ACTIVE_STATUSES })\n          .then((jobs) => aiSiteBuildInFlight(jobs.map((job) => aiJobSummary(job, now)), { hostId }) !== null)\n          .catch(() => false)\n      : Promise.resolve(false),\n  ])\n  return Response.json(\n    aiCreateDoorView({\n      kind: kind as AiCreateKind,\n      shown: true,\n      entitled: true,\n      purchasable: false,\n      canManageBilling: false,\n      credits,\n      collections,\n      buildInFlight,\n      addonName: aiAddonName(),\n    }),\n    { headers: { 'Cache-Control': 'no-store' } },\n  )\n}\n\n/** The follow view: one job of the workspace's, as the dialog that started it reads it. */\nexport async function GET_FOLLOW(request: Request, { params }: { params: Promise<{ jobId: string }> }): Promise<Response> {\n  const { jobId } = await params\n  if (!ID_CHARS.test(jobId ?? '')) return Response.json({ error: 'Not found' }, { status: 404 })\n  const url = new URL(request.url)\n  const gate = await aiJobsGate(request, url.searchParams.get('orgId') ?? '')\n  if (gate instanceof Response) return gate\n  const now = new Date()\n  const job = await getAiJob(gate.firestore, gate.orgId, jobId)\n  if (!job) return Response.json({ error: 'Not found' }, { status: 404 })\n  const summary = aiJobSummary(job, now)\n  // Confirming builds pages while another job is building on the site\n  // (AGL-3765): asked only while this one waits on its plan.\n  const askInFlight =\n    summary.status === 'needs_review' &&\n    summary.review?.reason === 'plan' &&\n    AI_PAGE_BUILDING_JOB_KINDS.includes(summary.kind)\n  const buildInFlight = askInFlight\n    ? await listAiJobs(gate.firestore, gate.orgId, { statuses: AI_JOB_ACTIVE_STATUSES })\n        .then(\n          (jobs) =>\n            aiSiteBuildInFlight(\n              jobs.map((one) => aiJobSummary(one, now)),\n              { hostId: summary.hostId, exceptJobId: summary.id },\n            ) !== null,\n        )\n        .catch(() => false)\n    : false\n  return Response.json(\n    {\n      job: summary,\n      view: aiJobFollowView(summary, {\n        // Console addresses name the workspace by its slug, as every link the apps resolve does.\n        orgSlug: typeof gate.org.slug === 'string' ? gate.org.slug : null,\n        staff: gate.staff,\n        buildInFlight,\n        now: now.getTime(),\n      }),\n    },\n    { status: 200, headers: { 'Cache-Control': 'no-store' } },\n  )\n}\n\nexport const dynamic = 'force-dynamic'\n"],"names":["checkEntitlement","COLLECTIONS_MAX_PER_HOST","aiAddonName","isUncappedPlanComp","orgSubscriptionState","resolveEffectivePlan","listPluginSeatAddons","emailUnverifiedResponse","firebaseAdmin","isImpersonationSession","invalidIdTokenResponse","getOrgForUser","memberHasPermissionOnHost","isServerReleaseFlagOnForOrg","aiJobSiteRefusal","aiJobSummary","getAiJob","listAiJobs","aiCreateDoorView","aiJobFollowView","isAiCreateKind","AI_JOB_ACTIVE_STATUSES","AI_PAGE_BUILDING_JOB_KINDS","aiSiteBuildInFlight","aiTemplateCollectionOptions","assistSpendAfterReturnsUsd","ASSIST_RETURNED_USD_FIELD","assistBandRefuses","publicAssistCredits","resolveAssistBudgetUsd","readFreeAiCreditsLeft","aiJobsGate","bearerToken","request","authorization","headers","get","startsWith","slice","length","undefined","doorCaller","orgId","resolved","idToken","Response","json","error","status","decoded","app","auth","verifyIdToken","unauthenticated","email_verified","uid","staff","org","member","aiGenerativePurchasable","billing","plan","some","addon","features","includes","quota","perUnitByPlan","creditsFacts","firestore","now","left","kind","budgetUsd","usage","collection","doc","toISOString","credits","limit","remaining","used","stopsAtBand","ID_CHARS","GET","url","URL","searchParams","hostId","test","caller","trim","Date","hidden","shown","entitled","purchasable","canManageBilling","addonName","storeOpen","collections","buildInFlight","Promise","all","catch","console","then","snapshot","options","docs","map","data","$id","id","resolve","statuses","jobs","job","GET_FOLLOW","params","summary","jobId","gate","askInFlight","review","reason","one","exceptJobId","view","orgSlug","slug","getTime","dynamic"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAGD,mEAAmE;AACnE,+EAA+E;AAC/E,0EAA0E;AAC1E,qEAAqE;;AAGrE,SAASA,gBAAgB,QAAQ,sBAAqB;AACtD,SAASC,wBAAwB,QAAQ,4CAA2C;AACpF,SACEC,WAAW,EACXC,kBAAkB,EAClBC,oBAAoB,EACpBC,oBAAoB,QACf,2CAA0C;AACjD,SAASC,oBAAoB,QAAQ,kDAAiD;AAEtF,SACEC,uBAAuB,EACvBC,aAAa,EACbC,sBAAsB,QACjB,iDAAgD;AACvD,SAASC,sBAAsB,QAAQ,mDAAkD;AACzF,SAASC,aAAa,EAAEC,yBAAyB,QAAQ,gDAA+C;AACxG,SAASC,2BAA2B,QAAQ,gDAA+C;AAC3F,SAASC,gBAAgB,QAAQ,8BAA0B;AAC3D,SAASC,YAAY,EAAEC,QAAQ,EAAEC,UAAU,QAAQ,qBAAiB;AACpE,SACEC,gBAAgB,EAChBC,eAAe,EACfC,cAAc,QAGT,6BAAyB;AAChC,SAASC,sBAAsB,EAAEC,0BAA0B,EAAEC,mBAAmB,QAAQ,8BAA0B;AAClH,SAASC,2BAA2B,QAAQ,sCAAkC;AAC9E,SAASC,0BAA0B,EAAEC,yBAAyB,QAAQ,oCAAgC;AACtG,SAASC,iBAAiB,EAAEC,mBAAmB,EAAEC,sBAAsB,QAAQ,6BAAyB;AACxG,SAASC,qBAAqB,QAAQ,mCAA+B;AACrE,SAASC,UAAU,QAAQ,oBAAgB;AAE3C;;;;;;;;;;;CAWC,GAED,SAASC,YAAYC,OAAgB;QACbA;IAAtB,MAAMC,iBAAgBD,uBAAAA,QAAQE,OAAO,CAACC,GAAG,CAAC,4BAApBH,uBAAwC;IAC9D,OAAOC,cAAcG,UAAU,CAAC,aAAaH,cAAcI,KAAK,CAAC,UAAUC,MAAM,IAAIC;AACvF;AAWA,eAAeC,WAAWR,OAAgB,EAAES,KAAa;QAqBhDC,eACGA;IArBV,MAAMC,UAAUZ,YAAYC;IAC5B,IAAI,CAACW,SAAS,OAAOC,SAASC,IAAI,CAAC;QAAEC,OAAO;IAAkB,GAAG;QAAEC,QAAQ;IAAI;IAC/E,IAAIC;IACJ,IAAI;QACFA,UAAU,MAAMzC,cAAc0C,GAAG,GAAGC,IAAI,GAAGC,aAAa,CAACR;IAC3D,EAAE,OAAOG,OAAO;QACd,MAAMM,kBAAkB3C,uBAAuBqC;QAC/C,IAAIM,iBAAiB,OAAOA;QAC5B,MAAMN;IACR;IACA,IAAI,CAACE,QAAQK,cAAc,IAAI,CAAC7C,uBAAuBwC,UAAU,OAAO1C;IACxE,IAAI,CAACmC,OAAO,OAAOG,SAASC,IAAI,CAAC;QAAEC,OAAO;IAA6C,GAAG;QAAEC,QAAQ;IAAI;IACxG,MAAML,WAAW,MAAMhC,cAAcsC,QAAQM,GAAG,EAAEb;IAClD,IAAI,CAACC,YAAYA,SAASD,KAAK,KAAKA,OAAO;QACzC,OAAOG,SAASC,IAAI,CAAC;YAAEC,OAAO;QAA4C,GAAG;YAAEC,QAAQ;QAAI;IAC7F;IACA,OAAO;QACLC;QACAO,OAAOP,OAAO,CAAC,QAAQ,KAAK;QAC5BP;QACAe,GAAG,GAAEd,gBAAAA,SAASc,GAAG,YAAZd,gBAAgB,CAAC;QACtBe,MAAM,GAAEf,mBAAAA,SAASe,MAAM,YAAff,mBAAmB;IAC7B;AACF;AAEA;;;;CAIC,GACD,OAAO,SAASgB,wBAAwBF,GAA+B;IACrE,MAAMG,UAAUH;IAChB,IAAIrD,qBAAqBwD,aAAsB,QAAQ,OAAO;IAC9D,MAAMC,OAAOxD,qBAAqBuD;IAClC,OAAOtD,uBAAuBwD,IAAI,CAChC,CAACC;YAC+DA;YAA9DA;eAAAA,EAAAA,kBAAAA,MAAMC,QAAQ,qBAAdD,gBAAgBE,QAAQ,CAAC,oBAAoB,CAAA,CAACF,MAAMG,KAAK,IAAI,EAACH,kCAAAA,MAAMG,KAAK,CAACC,aAAa,CAACN,KAAK,YAA/BE,kCAAmC,KAAK,CAAA;;AAE5G;AAEA,2EAA2E,GAC3E,eAAeK,aACbC,SAAsC,EACtC3B,KAAa,EACbe,GAA+B,EAC/Ba,GAAS;IAET,IAAIjE,qBAAqBoD,SAAkB,QAAQ;QACjD,MAAMc,OAAO,MAAMzC,sBAAsBuC,WAAW;YAAE3B;YAAOe,KAAKA;YAAea;QAAI;QACrF,OAAOC,OAAO;YAAEC,MAAM;YAAQD;QAAK,IAAI;YAAEC,MAAM;QAAO;IACxD;IACA,MAAMC,YAAY5C,uBAAuB4B;IACzC,IAAIgB,cAAc,MAAM,OAAOtE,mBAAmBsD,OAAgB;QAAEe,MAAM;IAAY,IAAI;QAAEA,MAAM;IAAO;IACzG,MAAME,QAAQ,MAAML,UACjBM,UAAU,CAAC,QACXC,GAAG,CAAClC,OACJiC,UAAU,CAAC,eACXC,GAAG,CAACN,IAAIO,WAAW,GAAGvC,KAAK,CAAC,GAAG,IAC/BF,GAAG;IACN,MAAM0C,UAAUlD,oBACdH,2BAA2BiD,MAAMtC,GAAG,CAAC,eAAesC,MAAMtC,GAAG,CAACV,6BAC9D+C;IAEF,IAAIK,QAAQC,KAAK,KAAK,QAAQD,QAAQE,SAAS,KAAK,MAAM,OAAO;QAAER,MAAM;IAAO;IAChF,OAAO;QACLA,MAAM;QACNS,MAAMH,QAAQG,IAAI;QAClBF,OAAOD,QAAQC,KAAK;QACpBC,WAAWF,QAAQE,SAAS;QAC5BE,aAAavD,kBAAkB8B;IACjC;AACF;AAEA,MAAM0B,WAAW;AAEjB,2FAA2F,GAC3F,OAAO,eAAeC,IAAInD,OAAgB;QAE3BoD,uBAIEA,wBAE2BA;IAP1C,MAAMA,MAAM,IAAIC,IAAIrD,QAAQoD,GAAG;IAC/B,MAAMb,QAAOa,wBAAAA,IAAIE,YAAY,CAACnD,GAAG,CAAC,mBAArBiD,wBAAgC;IAC7C,IAAI,CAACjE,eAAeoD,OAAO;QACzB,OAAO3B,SAASC,IAAI,CAAC;YAAEC,OAAO;QAA8D,GAAG;YAAEC,QAAQ;QAAI;IAC/G;IACA,MAAMwC,UAASH,yBAAAA,IAAIE,YAAY,CAACnD,GAAG,CAAC,qBAArBiD,yBAAkC;IACjD,IAAI,CAACF,SAASM,IAAI,CAACD,SAAS,OAAO3C,SAASC,IAAI,CAAC;QAAEC,OAAO;IAA0B,GAAG;QAAEC,QAAQ;IAAI;IACrG,MAAM0C,SAAS,MAAMjD,WAAWR,SAAS,EAACoD,yBAAAA,IAAIE,YAAY,CAACnD,GAAG,CAAC,oBAArBiD,yBAAiC,IAAIM,IAAI;IACnF,IAAID,kBAAkB7C,UAAU,OAAO6C;IACvC,MAAM,EAAElC,KAAK,EAAEd,KAAK,EAAEe,GAAG,EAAEC,MAAM,EAAE,GAAGgC;IACtC,MAAMrB,YAAY7D,cAAc0C,GAAG,GAAGmB,SAAS;IAC/C,MAAMC,MAAM,IAAIsB;IAChB,MAAMC,SAAS,IACbhD,SAASC,IAAI,CACX5B,iBAAiB;YACfsD;YACAsB,OAAO;YACPC,UAAU;YACVC,aAAa;YACbC,kBAAkB;YAClBnB,SAAS;gBAAEN,MAAM;YAAO;YACxB0B,WAAWhG;QACb,IACA;YAAEiC,SAAS;gBAAE,iBAAiB;YAAW;QAAE;IAG/C,0EAA0E;IAC1E,wEAAwE;IACxE,0EAA0E;IAC1E,IAAI,CAACqB,SAAS,CAAE,MAAM5C,0BAA0B8B,OAAO8C,QAAQ9B,QAAQ,gBAAiB,OAAOmC;IAC/F,IAAI,CAACrC,SAAS,CAAE,MAAM3C,4BAA4B,yBAAyB6B,QAAS,OAAOmD;IAC3F,IAAI,MAAM/E,iBAAiB;QAAEuD;QAAWZ;QAAK+B;IAAO,IAAI,OAAOK;IAE/D,MAAME,WAAW/F,iBAAiByD,KAAc;IAChD,IAAI,CAACsC,UAAU;QACb,yEAAyE;QACzE,yEAAyE;QACzE,MAAMI,YAAY3C,SAAU,MAAM3C,4BAA4B,uBAAuB6B;QACrF,MAAMsD,cAAc,CAACxC,SAAS2C,aAAaxC,wBAAwBF;QACnE,MAAMwC,mBAAmBD,eAAgB,MAAMpF,0BAA0B8B,OAAO,MAAMgB,QAAQ;QAC9F,OAAOb,SAASC,IAAI,CAClB5B,iBAAiB;YACfsD;YACAsB,OAAO;YACPC,UAAU;YACVC;YACAC;YACAnB,SAAS;gBAAEN,MAAM;YAAO;YACxB0B,WAAWhG;QACb,IACA;YAAEiC,SAAS;gBAAE,iBAAiB;YAAW;QAAE;IAE/C;IAEA,MAAM,CAAC2C,SAASsB,aAAaC,cAAc,GAAG,MAAMC,QAAQC,GAAG,CAAC;QAC9DnC,aAAaC,WAAW3B,OAAOe,KAAKa,KAAKkC,KAAK,CAAC,CAACzD;YAC9C0D,QAAQ1D,KAAK,CAAC,mCAAmCL,OAAOK;YACxD,OAAO;gBAAEyB,MAAM;YAAO;QACxB;QACAA,SAAS,aACLH,UACGM,UAAU,CAAC,SACXC,GAAG,CAACY,QACJb,UAAU,CAAC,eACXI,KAAK,CAAC9E,0BACNmC,GAAG,GACHsE,IAAI,CAAC,CAACC,WAAc,CAAA;gBACnB3D,QAAQ;gBACR4D,SAASpF,4BACPmF,SAASE,IAAI,CAACC,GAAG,CAAC,CAAClC,MAAS,aAAMA,IAAImC,IAAI;wBAAgCC,KAAKpC,IAAIqC,EAAE;;YAEzF,CAAA,GACCT,KAAK,CAAC,IAAO,CAAA;gBAAExD,QAAQ;gBAAkB4D,SAAS,EAAE;YAAC,CAAA,KACxDN,QAAQY,OAAO,CAAC;QACpB1C,SAAS,SACLvD,WAAWoD,WAAW3B,OAAO;YAAEyE,UAAU9F;QAAuB,GAC7DqF,IAAI,CAAC,CAACU,OAAS7F,oBAAoB6F,KAAKN,GAAG,CAAC,CAACO,MAAQtG,aAAasG,KAAK/C,OAAO;gBAAEkB;YAAO,OAAO,MAC9FgB,KAAK,CAAC,IAAM,SACfF,QAAQY,OAAO,CAAC;KACrB;IACD,OAAOrE,SAASC,IAAI,CAClB5B,iBAAiB;QACfsD,MAAMA;QACNsB,OAAO;QACPC,UAAU;QACVC,aAAa;QACbC,kBAAkB;QAClBnB;QACAsB;QACAC;QACAH,WAAWhG;IACb,IACA;QAAEiC,SAAS;YAAE,iBAAiB;QAAW;IAAE;AAE/C;AAEA,yFAAyF,GACzF,OAAO,eAAemF,WAAWrF,OAAgB,EAAE,EAAEsF,MAAM,EAA0C;QAI5DlC;QAUrCmC;IAbF,MAAM,EAAEC,KAAK,EAAE,GAAG,MAAMF;IACxB,IAAI,CAACpC,SAASM,IAAI,CAACgC,gBAAAA,QAAS,KAAK,OAAO5E,SAASC,IAAI,CAAC;QAAEC,OAAO;IAAY,GAAG;QAAEC,QAAQ;IAAI;IAC5F,MAAMqC,MAAM,IAAIC,IAAIrD,QAAQoD,GAAG;IAC/B,MAAMqC,OAAO,MAAM3F,WAAWE,UAASoD,wBAAAA,IAAIE,YAAY,CAACnD,GAAG,CAAC,oBAArBiD,wBAAiC;IACxE,IAAIqC,gBAAgB7E,UAAU,OAAO6E;IACrC,MAAMpD,MAAM,IAAIsB;IAChB,MAAMyB,MAAM,MAAMrG,SAAS0G,KAAKrD,SAAS,EAAEqD,KAAKhF,KAAK,EAAE+E;IACvD,IAAI,CAACJ,KAAK,OAAOxE,SAASC,IAAI,CAAC;QAAEC,OAAO;IAAY,GAAG;QAAEC,QAAQ;IAAI;IACrE,MAAMwE,UAAUzG,aAAasG,KAAK/C;IAClC,oEAAoE;IACpE,2DAA2D;IAC3D,MAAMqD,cACJH,QAAQxE,MAAM,KAAK,kBACnBwE,EAAAA,kBAAAA,QAAQI,MAAM,qBAAdJ,gBAAgBK,MAAM,MAAK,UAC3BvG,2BAA2B2C,QAAQ,CAACuD,QAAQhD,IAAI;IAClD,MAAM6B,gBAAgBsB,cAClB,MAAM1G,WAAWyG,KAAKrD,SAAS,EAAEqD,KAAKhF,KAAK,EAAE;QAAEyE,UAAU9F;IAAuB,GAC7EqF,IAAI,CACH,CAACU,OACC7F,oBACE6F,KAAKN,GAAG,CAAC,CAACgB,MAAQ/G,aAAa+G,KAAKxD,OACpC;YAAEkB,QAAQgC,QAAQhC,MAAM;YAAEuC,aAAaP,QAAQP,EAAE;QAAC,OAC9C,MAETT,KAAK,CAAC,IAAM,SACf;IACJ,OAAO3D,SAASC,IAAI,CAClB;QACEuE,KAAKG;QACLQ,MAAM7G,gBAAgBqG,SAAS;YAC7B,yFAAyF;YACzFS,SAAS,OAAOP,KAAKjE,GAAG,CAACyE,IAAI,KAAK,WAAWR,KAAKjE,GAAG,CAACyE,IAAI,GAAG;YAC7D1E,OAAOkE,KAAKlE,KAAK;YACjB6C;YACA/B,KAAKA,IAAI6D,OAAO;QAClB;IACF,GACA;QAAEnF,QAAQ;QAAKb,SAAS;YAAE,iBAAiB;QAAW;IAAE;AAE5D;AAEA,OAAO,MAAMiG,UAAU,gBAAe"}
+{"version":3,"sources":["../../../../../../../libs/plugins/ai/src/lib/server/ai-create-route.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n\n// lockdown-423: via libs/plugins/ai/src/lib/server/ai-jobs-gate.ts\n// The follow view climbs `aiJobsGate`, whose lockdown rung is the verdict. The\n// door answers what a list draws and starts nothing: a locked workspace's\n// start is refused by the jobs route's own ladder, in its own words.\n\nimport type { DecodedIdToken } from 'firebase-admin/auth'\nimport { checkEntitlement } from '@aglyn/aglyn/server'\nimport { COLLECTIONS_MAX_PER_HOST } from '@aglyn/aglyn/app-utils/collection-entries'\nimport {\n  aiAddonName,\n  isUncappedPlanComp,\n  orgSubscriptionState,\n  resolveEffectivePlan,\n} from '@aglyn/aglyn/app-utils/plan-entitlements'\nimport { listPluginSeatAddons, pluginSeatAddonSoldOn } from '@aglyn/aglyn/plugin-manager/plugin-entitlements'\nimport type { AglynOrganization, AglynOrgMember } from '@aglyn/aglyn/foundation/definitions/organization.types'\nimport {\n  emailUnverifiedResponse,\n  firebaseAdmin,\n  isImpersonationSession,\n} from '@aglyn/tenant-data-admin/server/firebase-admin'\nimport { invalidIdTokenResponse } from '@aglyn/tenant-data-admin/server/id-token-refusal'\nimport { getOrgForUser, memberHasPermissionOnHost } from '@aglyn/tenant-data-admin/server/organizations'\nimport { isServerReleaseFlagOnForOrg } from '@aglyn/tenant-data-admin/server/release-flags'\nimport { aiJobSiteRefusal } from '../jobs/ai-job-admission'\nimport { aiJobSummary, getAiJob, listAiJobs } from '../jobs/ai-jobs'\nimport {\n  aiCreateDoorView,\n  aiJobFollowView,\n  isAiCreateKind,\n  type AiCreateCreditsFacts,\n  type AiCreateKind,\n} from '../model/ai-create-view'\nimport { AI_JOB_ACTIVE_STATUSES, AI_PAGE_BUILDING_JOB_KINDS, aiSiteBuildInFlight } from '../model/ai-job-activity'\nimport { aiTemplateCollectionOptions } from '../model/ai-template-collections'\nimport { assistSpendAfterReturnsUsd, ASSIST_RETURNED_USD_FIELD } from '../usage/assist-credit-returns'\nimport { assistBandRefuses, publicAssistCredits, resolveAssistBudgetUsd } from '../usage/assist-credits'\nimport { readFreeAiCreditsLeft } from '../usage/free-ai-credits-left'\nimport { aiJobsGate } from './ai-jobs-gate'\n\n/**\n * `GET /api/ai/create?orgId&hostId&kind` — the door one list's \"Create with\n * AI\" reads in the apps (AGL-3854), and `GET /api/ai/create/:jobId?orgId` —\n * the job it started, as the dialog's follow card reads it.\n *\n * The console draws each entry from its shell's gates and its own components\n * (`ai-describe-button`, `ai-brief-dialog`, `ai-job-follow`); the apps have\n * neither, so these answer the same verdicts and the same words as data\n * (`model/ai-create-view.ts`). Both only read. Starting, confirming and\n * canceling go through the jobs routes the console calls, whose ladder decides\n * every request exactly as it does for the console.\n */\n\nfunction bearerToken(request: Request): string | undefined {\n  const authorization = request.headers.get('authorization') ?? ''\n  return authorization.startsWith('Bearer ') ? authorization.slice('Bearer '.length) : undefined\n}\n\n/** Every rung the console's shell climbs before it draws the entry, in the jobs gate's order. */\ninterface DoorCaller {\n  decoded: DecodedIdToken\n  staff: boolean\n  orgId: string\n  org: Partial<AglynOrganization>\n  member: AglynOrgMember | null\n}\n\nasync function doorCaller(request: Request, orgId: string): Promise<Response | DoorCaller> {\n  const idToken = bearerToken(request)\n  if (!idToken) return Response.json({ error: 'Unauthenticated' }, { status: 401 })\n  let decoded: DecodedIdToken\n  try {\n    decoded = await firebaseAdmin.app().auth().verifyIdToken(idToken)\n  } catch (error) {\n    const unauthenticated = invalidIdTokenResponse(error)\n    if (unauthenticated) return unauthenticated\n    throw error\n  }\n  if (!decoded.email_verified && !isImpersonationSession(decoded)) return emailUnverifiedResponse()\n  if (!orgId) return Response.json({ error: 'Open a workspace before using this feature' }, { status: 400 })\n  const resolved = await getOrgForUser(decoded.uid, orgId)\n  if (!resolved || resolved.orgId !== orgId) {\n    return Response.json({ error: 'You are not a member of that organization' }, { status: 403 })\n  }\n  return {\n    decoded,\n    staff: decoded['staff'] === true,\n    orgId,\n    org: resolved.org ?? {},\n    member: resolved.member ?? null,\n  }\n}\n\n/**\n * Whether an add-on this workspace can buy grants `aiGenerative`: the\n * console's `entitlementPurchasable`, over the add-ons the AI plugin declares\n * on the server (`pluginSeatAddonSoldOn`).\n */\nexport function aiGenerativePurchasable(org: Partial<AglynOrganization>): boolean {\n  const billing = org as Parameters<typeof checkEntitlement>[0]\n  if (orgSubscriptionState(billing as never) !== 'live') return false\n  const plan = resolveEffectivePlan(billing as never)\n  return listPluginSeatAddons().some(\n    (addon) => addon.features?.includes('aiGenerative') && pluginSeatAddonSoldOn(addon, plan),\n  )\n}\n\n/** What is left of the month's credits, as the AI credits meter reads it. */\nasync function creditsFacts(\n  firestore: FirebaseFirestore.Firestore,\n  orgId: string,\n  org: Partial<AglynOrganization>,\n  now: Date,\n): Promise<AiCreateCreditsFacts> {\n  if (resolveEffectivePlan(org as never) === 'free') {\n    const left = await readFreeAiCreditsLeft(firestore, { orgId, org: org as object, now })\n    return left ? { kind: 'free', left } : { kind: 'none' }\n  }\n  const budgetUsd = resolveAssistBudgetUsd(org as never)\n  if (budgetUsd === null) return isUncappedPlanComp(org as never) ? { kind: 'unlimited' } : { kind: 'none' }\n  const usage = await firestore\n    .collection('orgs')\n    .doc(orgId)\n    .collection('assistUsage')\n    .doc(now.toISOString().slice(0, 7))\n    .get()\n  const credits = publicAssistCredits(\n    assistSpendAfterReturnsUsd(usage.get('estCostUsd'), usage.get(ASSIST_RETURNED_USD_FIELD)),\n    budgetUsd,\n  )\n  if (credits.limit === null || credits.remaining === null) return { kind: 'none' }\n  return {\n    kind: 'band',\n    used: credits.used,\n    limit: credits.limit,\n    remaining: credits.remaining,\n    stopsAtBand: assistBandRefuses(org as never),\n  }\n}\n\nconst ID_CHARS = /^[A-Za-z0-9_-]{1,100}$/\n\n/** The door: whether a list draws Create with AI, as what, and every word its brief says. */\nexport async function GET(request: Request): Promise<Response> {\n  const url = new URL(request.url)\n  const kind = url.searchParams.get('kind') ?? ''\n  if (!isAiCreateKind(kind)) {\n    return Response.json({ error: 'kind must be one of page, template, layout, form, component' }, { status: 400 })\n  }\n  const hostId = url.searchParams.get('hostId') ?? ''\n  if (!ID_CHARS.test(hostId)) return Response.json({ error: 'hostId is not a site id' }, { status: 400 })\n  const caller = await doorCaller(request, (url.searchParams.get('orgId') ?? '').trim())\n  if (caller instanceof Response) return caller\n  const { staff, orgId, org, member } = caller\n  const firestore = firebaseAdmin.app().firestore()\n  const now = new Date()\n  const hidden = () =>\n    Response.json(\n      aiCreateDoorView({\n        kind,\n        shown: false,\n        entitled: false,\n        purchasable: false,\n        canManageBilling: false,\n        credits: { kind: 'none' },\n        addonName: aiAddonName(),\n      }),\n      { headers: { 'Cache-Control': 'no-store' } },\n    )\n\n  // The shell's rungs, in the jobs gate's order: the reader's `ai.generate`\n  // on this site, the release flag, then the site's own AI switch. Any of\n  // them draws no entry at all; staff pass the first two, as they do there.\n  if (!staff && !(await memberHasPermissionOnHost(orgId, hostId, member, 'ai.generate'))) return hidden()\n  if (!staff && !(await isServerReleaseFlagOnForOrg('release_ai_generative', orgId))) return hidden()\n  if (await aiJobSiteRefusal({ firestore, org, hostId })) return hidden()\n\n  const entitled = checkEntitlement(org as never, 'aiGenerative')\n  if (!entitled) {\n    // Its own upsell where only the add-on is missing (AGL-3601): the add-on\n    // store open to this workspace, and an add-on it can buy that grants it.\n    const storeOpen = staff || (await isServerReleaseFlagOnForOrg('release_addon_store', orgId))\n    const purchasable = !staff && storeOpen && aiGenerativePurchasable(org)\n    const canManageBilling = purchasable && (await memberHasPermissionOnHost(orgId, null, member, 'billing.manage'))\n    return Response.json(\n      aiCreateDoorView({\n        kind,\n        shown: true,\n        entitled: false,\n        purchasable,\n        canManageBilling,\n        credits: { kind: 'none' },\n        addonName: aiAddonName(),\n      }),\n      { headers: { 'Cache-Control': 'no-store' } },\n    )\n  }\n\n  const [credits, collections, buildInFlight] = await Promise.all([\n    creditsFacts(firestore, orgId, org, now).catch((error) => {\n      console.error('[ai-create] credits read failed', orgId, error)\n      return { kind: 'none' } as const\n    }),\n    kind === 'template'\n      ? firestore\n          .collection('hosts')\n          .doc(hostId)\n          .collection('collections')\n          .limit(COLLECTIONS_MAX_PER_HOST)\n          .get()\n          .then((snapshot) => ({\n            status: 'success' as const,\n            options: aiTemplateCollectionOptions(\n              snapshot.docs.map((doc) => ({ ...(doc.data() as Record<string, unknown>), $id: doc.id })),\n            ),\n          }))\n          .catch(() => ({ status: 'error' as const, options: [] }))\n      : Promise.resolve(null),\n    kind === 'page'\n      ? listAiJobs(firestore, orgId, { statuses: AI_JOB_ACTIVE_STATUSES })\n          .then((jobs) => aiSiteBuildInFlight(jobs.map((job) => aiJobSummary(job, now)), { hostId }) !== null)\n          .catch(() => false)\n      : Promise.resolve(false),\n  ])\n  return Response.json(\n    aiCreateDoorView({\n      kind: kind as AiCreateKind,\n      shown: true,\n      entitled: true,\n      purchasable: false,\n      canManageBilling: false,\n      credits,\n      collections,\n      buildInFlight,\n      addonName: aiAddonName(),\n    }),\n    { headers: { 'Cache-Control': 'no-store' } },\n  )\n}\n\n/** The follow view: one job of the workspace's, as the dialog that started it reads it. */\nexport async function GET_FOLLOW(request: Request, { params }: { params: Promise<{ jobId: string }> }): Promise<Response> {\n  const { jobId } = await params\n  if (!ID_CHARS.test(jobId ?? '')) return Response.json({ error: 'Not found' }, { status: 404 })\n  const url = new URL(request.url)\n  const gate = await aiJobsGate(request, url.searchParams.get('orgId') ?? '')\n  if (gate instanceof Response) return gate\n  const now = new Date()\n  const job = await getAiJob(gate.firestore, gate.orgId, jobId)\n  if (!job) return Response.json({ error: 'Not found' }, { status: 404 })\n  const summary = aiJobSummary(job, now)\n  // Confirming builds pages while another job is building on the site\n  // (AGL-3765): asked only while this one waits on its plan.\n  const askInFlight =\n    summary.status === 'needs_review' &&\n    summary.review?.reason === 'plan' &&\n    AI_PAGE_BUILDING_JOB_KINDS.includes(summary.kind)\n  const buildInFlight = askInFlight\n    ? await listAiJobs(gate.firestore, gate.orgId, { statuses: AI_JOB_ACTIVE_STATUSES })\n        .then(\n          (jobs) =>\n            aiSiteBuildInFlight(\n              jobs.map((one) => aiJobSummary(one, now)),\n              { hostId: summary.hostId, exceptJobId: summary.id },\n            ) !== null,\n        )\n        .catch(() => false)\n    : false\n  return Response.json(\n    {\n      job: summary,\n      view: aiJobFollowView(summary, {\n        // Console addresses name the workspace by its slug, as every link the apps resolve does.\n        orgSlug: typeof gate.org.slug === 'string' ? gate.org.slug : null,\n        staff: gate.staff,\n        buildInFlight,\n        now: now.getTime(),\n      }),\n    },\n    { status: 200, headers: { 'Cache-Control': 'no-store' } },\n  )\n}\n\nexport const dynamic = 'force-dynamic'\n"],"names":["checkEntitlement","COLLECTIONS_MAX_PER_HOST","aiAddonName","isUncappedPlanComp","orgSubscriptionState","resolveEffectivePlan","listPluginSeatAddons","pluginSeatAddonSoldOn","emailUnverifiedResponse","firebaseAdmin","isImpersonationSession","invalidIdTokenResponse","getOrgForUser","memberHasPermissionOnHost","isServerReleaseFlagOnForOrg","aiJobSiteRefusal","aiJobSummary","getAiJob","listAiJobs","aiCreateDoorView","aiJobFollowView","isAiCreateKind","AI_JOB_ACTIVE_STATUSES","AI_PAGE_BUILDING_JOB_KINDS","aiSiteBuildInFlight","aiTemplateCollectionOptions","assistSpendAfterReturnsUsd","ASSIST_RETURNED_USD_FIELD","assistBandRefuses","publicAssistCredits","resolveAssistBudgetUsd","readFreeAiCreditsLeft","aiJobsGate","bearerToken","request","authorization","headers","get","startsWith","slice","length","undefined","doorCaller","orgId","resolved","idToken","Response","json","error","status","decoded","app","auth","verifyIdToken","unauthenticated","email_verified","uid","staff","org","member","aiGenerativePurchasable","billing","plan","some","addon","features","includes","creditsFacts","firestore","now","left","kind","budgetUsd","usage","collection","doc","toISOString","credits","limit","remaining","used","stopsAtBand","ID_CHARS","GET","url","URL","searchParams","hostId","test","caller","trim","Date","hidden","shown","entitled","purchasable","canManageBilling","addonName","storeOpen","collections","buildInFlight","Promise","all","catch","console","then","snapshot","options","docs","map","data","$id","id","resolve","statuses","jobs","job","GET_FOLLOW","params","summary","jobId","gate","askInFlight","review","reason","one","exceptJobId","view","orgSlug","slug","getTime","dynamic"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAGD,mEAAmE;AACnE,+EAA+E;AAC/E,0EAA0E;AAC1E,qEAAqE;;AAGrE,SAASA,gBAAgB,QAAQ,sBAAqB;AACtD,SAASC,wBAAwB,QAAQ,4CAA2C;AACpF,SACEC,WAAW,EACXC,kBAAkB,EAClBC,oBAAoB,EACpBC,oBAAoB,QACf,2CAA0C;AACjD,SAASC,oBAAoB,EAAEC,qBAAqB,QAAQ,kDAAiD;AAE7G,SACEC,uBAAuB,EACvBC,aAAa,EACbC,sBAAsB,QACjB,iDAAgD;AACvD,SAASC,sBAAsB,QAAQ,mDAAkD;AACzF,SAASC,aAAa,EAAEC,yBAAyB,QAAQ,gDAA+C;AACxG,SAASC,2BAA2B,QAAQ,gDAA+C;AAC3F,SAASC,gBAAgB,QAAQ,8BAA0B;AAC3D,SAASC,YAAY,EAAEC,QAAQ,EAAEC,UAAU,QAAQ,qBAAiB;AACpE,SACEC,gBAAgB,EAChBC,eAAe,EACfC,cAAc,QAGT,6BAAyB;AAChC,SAASC,sBAAsB,EAAEC,0BAA0B,EAAEC,mBAAmB,QAAQ,8BAA0B;AAClH,SAASC,2BAA2B,QAAQ,sCAAkC;AAC9E,SAASC,0BAA0B,EAAEC,yBAAyB,QAAQ,oCAAgC;AACtG,SAASC,iBAAiB,EAAEC,mBAAmB,EAAEC,sBAAsB,QAAQ,6BAAyB;AACxG,SAASC,qBAAqB,QAAQ,mCAA+B;AACrE,SAASC,UAAU,QAAQ,oBAAgB;AAE3C;;;;;;;;;;;CAWC,GAED,SAASC,YAAYC,OAAgB;QACbA;IAAtB,MAAMC,iBAAgBD,uBAAAA,QAAQE,OAAO,CAACC,GAAG,CAAC,4BAApBH,uBAAwC;IAC9D,OAAOC,cAAcG,UAAU,CAAC,aAAaH,cAAcI,KAAK,CAAC,UAAUC,MAAM,IAAIC;AACvF;AAWA,eAAeC,WAAWR,OAAgB,EAAES,KAAa;QAqBhDC,eACGA;IArBV,MAAMC,UAAUZ,YAAYC;IAC5B,IAAI,CAACW,SAAS,OAAOC,SAASC,IAAI,CAAC;QAAEC,OAAO;IAAkB,GAAG;QAAEC,QAAQ;IAAI;IAC/E,IAAIC;IACJ,IAAI;QACFA,UAAU,MAAMzC,cAAc0C,GAAG,GAAGC,IAAI,GAAGC,aAAa,CAACR;IAC3D,EAAE,OAAOG,OAAO;QACd,MAAMM,kBAAkB3C,uBAAuBqC;QAC/C,IAAIM,iBAAiB,OAAOA;QAC5B,MAAMN;IACR;IACA,IAAI,CAACE,QAAQK,cAAc,IAAI,CAAC7C,uBAAuBwC,UAAU,OAAO1C;IACxE,IAAI,CAACmC,OAAO,OAAOG,SAASC,IAAI,CAAC;QAAEC,OAAO;IAA6C,GAAG;QAAEC,QAAQ;IAAI;IACxG,MAAML,WAAW,MAAMhC,cAAcsC,QAAQM,GAAG,EAAEb;IAClD,IAAI,CAACC,YAAYA,SAASD,KAAK,KAAKA,OAAO;QACzC,OAAOG,SAASC,IAAI,CAAC;YAAEC,OAAO;QAA4C,GAAG;YAAEC,QAAQ;QAAI;IAC7F;IACA,OAAO;QACLC;QACAO,OAAOP,OAAO,CAAC,QAAQ,KAAK;QAC5BP;QACAe,GAAG,GAAEd,gBAAAA,SAASc,GAAG,YAAZd,gBAAgB,CAAC;QACtBe,MAAM,GAAEf,mBAAAA,SAASe,MAAM,YAAff,mBAAmB;IAC7B;AACF;AAEA;;;;CAIC,GACD,OAAO,SAASgB,wBAAwBF,GAA+B;IACrE,MAAMG,UAAUH;IAChB,IAAItD,qBAAqByD,aAAsB,QAAQ,OAAO;IAC9D,MAAMC,OAAOzD,qBAAqBwD;IAClC,OAAOvD,uBAAuByD,IAAI,CAChC,CAACC;YAAUA;eAAAA,EAAAA,kBAAAA,MAAMC,QAAQ,qBAAdD,gBAAgBE,QAAQ,CAAC,oBAAmB3D,sBAAsByD,OAAOF;;AAExF;AAEA,2EAA2E,GAC3E,eAAeK,aACbC,SAAsC,EACtCzB,KAAa,EACbe,GAA+B,EAC/BW,GAAS;IAET,IAAIhE,qBAAqBqD,SAAkB,QAAQ;QACjD,MAAMY,OAAO,MAAMvC,sBAAsBqC,WAAW;YAAEzB;YAAOe,KAAKA;YAAeW;QAAI;QACrF,OAAOC,OAAO;YAAEC,MAAM;YAAQD;QAAK,IAAI;YAAEC,MAAM;QAAO;IACxD;IACA,MAAMC,YAAY1C,uBAAuB4B;IACzC,IAAIc,cAAc,MAAM,OAAOrE,mBAAmBuD,OAAgB;QAAEa,MAAM;IAAY,IAAI;QAAEA,MAAM;IAAO;IACzG,MAAME,QAAQ,MAAML,UACjBM,UAAU,CAAC,QACXC,GAAG,CAAChC,OACJ+B,UAAU,CAAC,eACXC,GAAG,CAACN,IAAIO,WAAW,GAAGrC,KAAK,CAAC,GAAG,IAC/BF,GAAG;IACN,MAAMwC,UAAUhD,oBACdH,2BAA2B+C,MAAMpC,GAAG,CAAC,eAAeoC,MAAMpC,GAAG,CAACV,6BAC9D6C;IAEF,IAAIK,QAAQC,KAAK,KAAK,QAAQD,QAAQE,SAAS,KAAK,MAAM,OAAO;QAAER,MAAM;IAAO;IAChF,OAAO;QACLA,MAAM;QACNS,MAAMH,QAAQG,IAAI;QAClBF,OAAOD,QAAQC,KAAK;QACpBC,WAAWF,QAAQE,SAAS;QAC5BE,aAAarD,kBAAkB8B;IACjC;AACF;AAEA,MAAMwB,WAAW;AAEjB,2FAA2F,GAC3F,OAAO,eAAeC,IAAIjD,OAAgB;QAE3BkD,uBAIEA,wBAE2BA;IAP1C,MAAMA,MAAM,IAAIC,IAAInD,QAAQkD,GAAG;IAC/B,MAAMb,QAAOa,wBAAAA,IAAIE,YAAY,CAACjD,GAAG,CAAC,mBAArB+C,wBAAgC;IAC7C,IAAI,CAAC/D,eAAekD,OAAO;QACzB,OAAOzB,SAASC,IAAI,CAAC;YAAEC,OAAO;QAA8D,GAAG;YAAEC,QAAQ;QAAI;IAC/G;IACA,MAAMsC,UAASH,yBAAAA,IAAIE,YAAY,CAACjD,GAAG,CAAC,qBAArB+C,yBAAkC;IACjD,IAAI,CAACF,SAASM,IAAI,CAACD,SAAS,OAAOzC,SAASC,IAAI,CAAC;QAAEC,OAAO;IAA0B,GAAG;QAAEC,QAAQ;IAAI;IACrG,MAAMwC,SAAS,MAAM/C,WAAWR,SAAS,EAACkD,yBAAAA,IAAIE,YAAY,CAACjD,GAAG,CAAC,oBAArB+C,yBAAiC,IAAIM,IAAI;IACnF,IAAID,kBAAkB3C,UAAU,OAAO2C;IACvC,MAAM,EAAEhC,KAAK,EAAEd,KAAK,EAAEe,GAAG,EAAEC,MAAM,EAAE,GAAG8B;IACtC,MAAMrB,YAAY3D,cAAc0C,GAAG,GAAGiB,SAAS;IAC/C,MAAMC,MAAM,IAAIsB;IAChB,MAAMC,SAAS,IACb9C,SAASC,IAAI,CACX5B,iBAAiB;YACfoD;YACAsB,OAAO;YACPC,UAAU;YACVC,aAAa;YACbC,kBAAkB;YAClBnB,SAAS;gBAAEN,MAAM;YAAO;YACxB0B,WAAW/F;QACb,IACA;YAAEkC,SAAS;gBAAE,iBAAiB;YAAW;QAAE;IAG/C,0EAA0E;IAC1E,wEAAwE;IACxE,0EAA0E;IAC1E,IAAI,CAACqB,SAAS,CAAE,MAAM5C,0BAA0B8B,OAAO4C,QAAQ5B,QAAQ,gBAAiB,OAAOiC;IAC/F,IAAI,CAACnC,SAAS,CAAE,MAAM3C,4BAA4B,yBAAyB6B,QAAS,OAAOiD;IAC3F,IAAI,MAAM7E,iBAAiB;QAAEqD;QAAWV;QAAK6B;IAAO,IAAI,OAAOK;IAE/D,MAAME,WAAW9F,iBAAiB0D,KAAc;IAChD,IAAI,CAACoC,UAAU;QACb,yEAAyE;QACzE,yEAAyE;QACzE,MAAMI,YAAYzC,SAAU,MAAM3C,4BAA4B,uBAAuB6B;QACrF,MAAMoD,cAAc,CAACtC,SAASyC,aAAatC,wBAAwBF;QACnE,MAAMsC,mBAAmBD,eAAgB,MAAMlF,0BAA0B8B,OAAO,MAAMgB,QAAQ;QAC9F,OAAOb,SAASC,IAAI,CAClB5B,iBAAiB;YACfoD;YACAsB,OAAO;YACPC,UAAU;YACVC;YACAC;YACAnB,SAAS;gBAAEN,MAAM;YAAO;YACxB0B,WAAW/F;QACb,IACA;YAAEkC,SAAS;gBAAE,iBAAiB;YAAW;QAAE;IAE/C;IAEA,MAAM,CAACyC,SAASsB,aAAaC,cAAc,GAAG,MAAMC,QAAQC,GAAG,CAAC;QAC9DnC,aAAaC,WAAWzB,OAAOe,KAAKW,KAAKkC,KAAK,CAAC,CAACvD;YAC9CwD,QAAQxD,KAAK,CAAC,mCAAmCL,OAAOK;YACxD,OAAO;gBAAEuB,MAAM;YAAO;QACxB;QACAA,SAAS,aACLH,UACGM,UAAU,CAAC,SACXC,GAAG,CAACY,QACJb,UAAU,CAAC,eACXI,KAAK,CAAC7E,0BACNoC,GAAG,GACHoE,IAAI,CAAC,CAACC,WAAc,CAAA;gBACnBzD,QAAQ;gBACR0D,SAASlF,4BACPiF,SAASE,IAAI,CAACC,GAAG,CAAC,CAAClC,MAAS,aAAMA,IAAImC,IAAI;wBAAgCC,KAAKpC,IAAIqC,EAAE;;YAEzF,CAAA,GACCT,KAAK,CAAC,IAAO,CAAA;gBAAEtD,QAAQ;gBAAkB0D,SAAS,EAAE;YAAC,CAAA,KACxDN,QAAQY,OAAO,CAAC;QACpB1C,SAAS,SACLrD,WAAWkD,WAAWzB,OAAO;YAAEuE,UAAU5F;QAAuB,GAC7DmF,IAAI,CAAC,CAACU,OAAS3F,oBAAoB2F,KAAKN,GAAG,CAAC,CAACO,MAAQpG,aAAaoG,KAAK/C,OAAO;gBAAEkB;YAAO,OAAO,MAC9FgB,KAAK,CAAC,IAAM,SACfF,QAAQY,OAAO,CAAC;KACrB;IACD,OAAOnE,SAASC,IAAI,CAClB5B,iBAAiB;QACfoD,MAAMA;QACNsB,OAAO;QACPC,UAAU;QACVC,aAAa;QACbC,kBAAkB;QAClBnB;QACAsB;QACAC;QACAH,WAAW/F;IACb,IACA;QAAEkC,SAAS;YAAE,iBAAiB;QAAW;IAAE;AAE/C;AAEA,yFAAyF,GACzF,OAAO,eAAeiF,WAAWnF,OAAgB,EAAE,EAAEoF,MAAM,EAA0C;QAI5DlC;QAUrCmC;IAbF,MAAM,EAAEC,KAAK,EAAE,GAAG,MAAMF;IACxB,IAAI,CAACpC,SAASM,IAAI,CAACgC,gBAAAA,QAAS,KAAK,OAAO1E,SAASC,IAAI,CAAC;QAAEC,OAAO;IAAY,GAAG;QAAEC,QAAQ;IAAI;IAC5F,MAAMmC,MAAM,IAAIC,IAAInD,QAAQkD,GAAG;IAC/B,MAAMqC,OAAO,MAAMzF,WAAWE,UAASkD,wBAAAA,IAAIE,YAAY,CAACjD,GAAG,CAAC,oBAArB+C,wBAAiC;IACxE,IAAIqC,gBAAgB3E,UAAU,OAAO2E;IACrC,MAAMpD,MAAM,IAAIsB;IAChB,MAAMyB,MAAM,MAAMnG,SAASwG,KAAKrD,SAAS,EAAEqD,KAAK9E,KAAK,EAAE6E;IACvD,IAAI,CAACJ,KAAK,OAAOtE,SAASC,IAAI,CAAC;QAAEC,OAAO;IAAY,GAAG;QAAEC,QAAQ;IAAI;IACrE,MAAMsE,UAAUvG,aAAaoG,KAAK/C;IAClC,oEAAoE;IACpE,2DAA2D;IAC3D,MAAMqD,cACJH,QAAQtE,MAAM,KAAK,kBACnBsE,EAAAA,kBAAAA,QAAQI,MAAM,qBAAdJ,gBAAgBK,MAAM,MAAK,UAC3BrG,2BAA2B2C,QAAQ,CAACqD,QAAQhD,IAAI;IAClD,MAAM6B,gBAAgBsB,cAClB,MAAMxG,WAAWuG,KAAKrD,SAAS,EAAEqD,KAAK9E,KAAK,EAAE;QAAEuE,UAAU5F;IAAuB,GAC7EmF,IAAI,CACH,CAACU,OACC3F,oBACE2F,KAAKN,GAAG,CAAC,CAACgB,MAAQ7G,aAAa6G,KAAKxD,OACpC;YAAEkB,QAAQgC,QAAQhC,MAAM;YAAEuC,aAAaP,QAAQP,EAAE;QAAC,OAC9C,MAETT,KAAK,CAAC,IAAM,SACf;IACJ,OAAOzD,SAASC,IAAI,CAClB;QACEqE,KAAKG;QACLQ,MAAM3G,gBAAgBmG,SAAS;YAC7B,yFAAyF;YACzFS,SAAS,OAAOP,KAAK/D,GAAG,CAACuE,IAAI,KAAK,WAAWR,KAAK/D,GAAG,CAACuE,IAAI,GAAG;YAC7DxE,OAAOgE,KAAKhE,KAAK;YACjB2C;YACA/B,KAAKA,IAAI6D,OAAO;QAClB;IACF,GACA;QAAEjF,QAAQ;QAAKb,SAAS;YAAE,iBAAiB;QAAW;IAAE;AAE5D;AAEA,OAAO,MAAM+F,UAAU,gBAAe"}

package/src/lib/server/ai-jobs-resume.js

@@ -22,12 +22,15 @@ import { AI_JOB_INLINE_BUDGET_MS, aiJobNextStepMinimumMs, aiJobSummary, getAiJob
 import { aiBuildFreeCreditsRefusal, aiBuildFreeTaste } from "../jobs/ai-job-build-step.js";
 import { aiBuildCreditRange, aiBuildFirstPagePlan, aiBuildRetryLedger, aiBuildUnits, aiLedgerUnits } from "../model/ai-build-job.js";
 import { aiCreditsConfirmation } from "../model/ai-credit-estimate.js";
+import { aiJobInputProblems } from "../model/ai-job-input.js";
 import { FREE_AI_TASTE_CREDITS_PER_MONTH } from "../plan-entitlements.js";
 import { aiGateLadder } from "../runtime/ai-gate.js";
 import { releaseAssistMessage } from "../usage/assist-usage.js";
 /**
  * Resume a job that stopped for a person (AGL-2935): confirm its plan, or
- * try again the step whose answer broke a building rule on its re-ask.
+ * try again the step whose answer broke a building rule on its re-ask — or
+ * answer what a job waiting in `needs_input` asks (`input`, AGL-3978), which
+ * returns it to its plan card, or a 400 with `fieldErrors` by field.
  *
  * A door that SPENDS — the next step calls the provider — so it climbs the
  * whole ladder the create door climbs: `aiGenerative`,
@@ -46,7 +49,7 @@ import { releaseAssistMessage } from "../usage/assist-usage.js";
 };
 export async function POST(request, context) {
     var _ref, _existing_hostId, _gate_decoded_email, _ref1, _gate_decoded_email1;
-    var _existing_review;
+    var _existing_input_fields, _existing_input, _existing_review;
     let payload;
     try {
         payload = await request.json();
@@ -167,6 +170,25 @@ export async function POST(request, context) {
             return refused(refusal);
         }
     }
+    // A job waiting for a person's answer (AGL-3978): every field must read
+    // before anything changes, and a refusal names each field it is about.
+    const answering = existing.status === 'needs_input' && Boolean((_existing_input = existing.input) == null ? void 0 : (_existing_input_fields = _existing_input.fields) == null ? void 0 : _existing_input_fields.length);
+    const rawInput = payload == null ? void 0 : payload['input'];
+    const answers = rawInput && typeof rawInput === 'object' && !Array.isArray(rawInput) ? rawInput : null;
+    if (answering && existing.input) {
+        const fieldErrors = aiJobInputProblems(existing.input, answers);
+        const first = Object.values(fieldErrors)[0];
+        if (first) {
+            await release();
+            return Response.json({
+                error: first,
+                fieldErrors,
+                job: aiJobSummary(existing, new Date())
+            }, {
+                status: 400
+            });
+        }
+    }
     // A confirmed plan runs the step that writes, and an allowance free when the
     // job was created may be used by now (AGL-2909): the kind is asked again
     // before anything runs, and a refusal leaves the job waiting for review.
@@ -218,6 +240,8 @@ export async function POST(request, context) {
         creditsConfirmed: confirmation
     }, reduced ? {
         reducePlan: aiBuildFirstPagePlan
+    } : {}, answering ? {
+        input: answers
     } : {}));
     if (!changed) {
         await release();
@@ -236,7 +260,7 @@ export async function POST(request, context) {
         jobId,
         after: {
             status: job.status,
-            reason: retryFailedItems ? 'retry-failed-items' : (_ref1 = (_existing_review = existing.review) == null ? void 0 : _existing_review.reason) != null ? _ref1 : null,
+            reason: retryFailedItems ? 'retry-failed-items' : answering ? 'input' : (_ref1 = (_existing_review = existing.review) == null ? void 0 : _existing_review.reason) != null ? _ref1 : null,
             kind: existing.kind
         }
     });