@aglyn/plugins-ai 1.0.0-beta.270 → 1.0.0-beta.272

package/src/lib/server/ai-jobs-resume.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../../../../libs/plugins/ai/src/lib/server/ai-jobs-resume.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n// lockdown-423: via libs/plugins/ai/src/lib/runtime/ai-gate.ts\n// The POST climbs `aiGateLadder`, whose lockdown rung is the verdict.\n\nimport { randomUUID } from 'crypto'\nimport { aiJobAdmissionRefusal, aiJobSiteRefusal, type AiJobAdmissionRefusal } from '../jobs/ai-job-admission'\nimport {\n  AI_JOB_INLINE_BUDGET_MS,\n  aiJobNextStepMinimumMs,\n  aiJobSummary,\n  getAiJob,\n  aiBuildRetryable,\n  resumeAiJob,\n  retryAiBuildJob,\n  runAiJobStep,\n  writeAiJobAudit,\n} from '../jobs/ai-jobs'\nimport type { AiJob } from '../model/ai-jobs.types'\nimport { aiBuildFreeCreditsRefusal, aiBuildFreeTaste } from '../jobs/ai-job-build-step'\nimport {\n  aiBuildCreditRange,\n  aiBuildFirstPagePlan,\n  aiBuildRetryLedger,\n  aiBuildUnits,\n  aiLedgerUnits,\n} from '../model/ai-build-job'\nimport { aiCreditsConfirmation, type AiCreditsPrompt } from '../model/ai-credit-estimate'\nimport { FREE_AI_TASTE_CREDITS_PER_MONTH } from '../plan-entitlements'\nimport { aiGateLadder } from '../runtime/ai-gate'\nimport { releaseAssistMessage } from '../usage/assist-usage'\n\n/**\n * Resume a job that stopped for a person (AGL-2935): confirm its plan, or\n * try again the step whose answer broke a building rule on its re-ask.\n *\n * A door that SPENDS — the next step calls the provider — so it climbs the\n * whole ladder the create door climbs: `aiGenerative`,\n * `release_ai_generative`, the `ai-generate` switch, `ai.generate` on the\n * job's site, a per-uid window and a reservation. It then runs the next\n * step inline on that reservation, the way the create door runs the first,\n * and hands the reservation back whenever no step runs here.\n *\n * The body names the org and the job's site. A site that is not the job's\n * is refused, so a collaborator's permission on one site never confirms a\n * job on another. Audited per resume that changed something.\n */\n\nconst AI_JOBS_RESUME_RATE_LIMIT = { key: 'ai-jobs-resume', limit: 10, windowMs: 60_000 }\n\nexport async function POST(\n  request: Request,\n  context: { params: Promise<{ jobId: string }> },\n): Promise<Response> {\n  let payload: Record<string, unknown> | null\n  try {\n    payload = (await request.json()) as Record<string, unknown>\n  } catch {\n    payload = null\n  }\n  const rawHost = payload?.['hostId']\n  const hostId = typeof rawHost === 'string' && rawHost ? rawHost : null\n  const gate = await aiGateLadder(\n    { request, orgId: String(payload?.['orgId'] ?? ''), hostId },\n    {\n      feature: 'aiGenerative',\n      releaseFlag: 'release_ai_generative',\n      lockdownFeature: 'ai-generate',\n      permission: 'ai.generate',\n      rateLimit: AI_JOBS_RESUME_RATE_LIMIT,\n    },\n  )\n  if (gate instanceof Response) return gate\n  // No token is spent until a step runs, so every exit before one hands the\n  // message back.\n  const release = () =>\n    releaseAssistMessage(gate.firestore, gate.orgId, gate.reservation).catch(() => undefined)\n\n  const { jobId } = await context.params\n  const existing = await getAiJob(gate.firestore, gate.orgId, jobId)\n  if (!existing) {\n    await release()\n    return Response.json({ error: 'Unknown job' }, { status: 404 })\n  }\n  if ((existing.hostId ?? null) !== hostId) {\n    await release()\n    return Response.json({ error: 'That job belongs to another site' }, { status: 400 })\n  }\n  // \"Build what fits\" (AGL-3722): a Free job past what is left, started on\n  // the person's go-ahead, which the job keeps.\n  const creditsConfirmed = payload?.['creditsConfirmed'] === true\n  let confirmedCredits: AiCreditsPrompt | null = null\n  const onCreditsConfirmed = (prompt: AiCreditsPrompt) => {\n    confirmedCredits = prompt\n  }\n  // \"Build the home page first\" (AGL-3722): the plan waiting for its\n  // confirmation narrowed to its home page and what that page needs.\n  const reduceToFirstPage =\n    payload?.['reduce'] === 'first-page' && existing.kind === 'build' && existing.status === 'needs_review'\n  const reduced = reduceToFirstPage && existing.plan ? aiBuildFirstPagePlan(existing.plan) : null\n  if (reduceToFirstPage && !reduced) {\n    await release()\n    return Response.json(\n      { error: 'This plan has no smaller first build', job: aiJobSummary(existing, new Date()) },\n      { status: 409 },\n    )\n  }\n  // A refusal as the door answers it: a Free job past what is left carries\n  // its prompt, and a plan card the figures it should now show.\n  const refused = async (refusal: AiJobAdmissionRefusal) => {\n    await release()\n    const now = new Date()\n    const summary = aiJobSummary(existing, now)\n    const fresh = refusal.credits\n      ? { left: refusal.credits.left, total: FREE_AI_TASTE_CREDITS_PER_MONTH, resetsOn: refusal.credits.resetsOn }\n      : null\n    const job = fresh && summary.review ? { ...summary, review: { ...summary.review, freeCredits: fresh } } : summary\n    return Response.json(\n      {\n        error: refusal.error,\n        ...(refusal.code ? { code: refusal.code } : {}),\n        ...(refusal.credits ? { credits: refusal.credits } : {}),\n        job,\n      },\n      { status: refusal.status },\n    )\n  }\n  // Try again on a build (AGL-3616): its failed items and what they left\n  // unbuilt, never what succeeded, and never its plan again.\n  const retryFailedItems = payload?.['retry'] === 'failed-items'\n  if (retryFailedItems) {\n    const refusal = await aiBuildRetryRefusal(gate, existing, { confirmed: creditsConfirmed, onCreditsConfirmed }).catch(\n      (error: unknown) => {\n        console.error('ai build retry admission failed', { orgId: gate.orgId, jobId, error })\n        return { status: 500 as const, error: 'The AI job could not be resumed' }\n      },\n    )\n    if (refusal) {\n      if (refusal.status === 500) {\n        await release()\n        return Response.json({ error: refusal.error, job: aiJobSummary(existing, new Date()) }, { status: 500 })\n      }\n      return refused(refusal)\n    }\n  }\n  // A confirmed plan runs the step that writes, and an allowance free when the\n  // job was created may be used by now (AGL-2909): the kind is asked again\n  // before anything runs, and a refusal leaves the job waiting for review.\n  if (existing.status === 'needs_review') {\n    let refusal: Awaited<ReturnType<typeof aiJobAdmissionRefusal>>\n    try {\n      // A site that switched AI off first (AGL-3028), then the kind's own check.\n      refusal =\n        (await aiJobSiteRefusal({\n          firestore: gate.firestore,\n          org: gate.org,\n          hostId: existing.hostId ?? null,\n        })) ??\n        (await aiJobAdmissionRefusal(existing.kind, {\n          firestore: gate.firestore,\n          orgId: gate.orgId,\n          hostId: existing.hostId ?? null,\n          inputs: existing.inputs ?? {},\n          org: gate.org,\n          // The plan being confirmed, for a kind that builds only some plans —\n          // the smaller first build where the person chose it (AGL-3722).\n          plan: reduced ?? existing.plan ?? null,\n          uid: gate.uid,\n          creditsConfirmed,\n          onCreditsConfirmed,\n        }))\n    } catch (error) {\n      await release()\n      console.error('ai job admission failed', { orgId: gate.orgId, jobId, error })\n      return Response.json({ error: 'The AI job could not be resumed' }, { status: 500 })\n    }\n    if (refusal) return refused(refusal)\n  }\n  const now = new Date()\n  const confirmation = aiCreditsConfirmation(confirmedCredits, gate.uid, now)\n  const { job, changed } = retryFailedItems\n    ? await retryAiBuildJob(gate.firestore, gate.orgId, jobId, now, { creditsConfirmed: confirmation })\n    : await resumeAiJob(gate.firestore, gate.orgId, jobId, { uid: gate.uid }, now, {\n        publishConfirmed: payload?.['publish'] === true,\n        creditsConfirmed: confirmation,\n        ...(reduced ? { reducePlan: aiBuildFirstPagePlan } : {}),\n      })\n  if (!changed) {\n    await release()\n    return Response.json(\n      { error: 'This job is not waiting for review', job: aiJobSummary(job, now) },\n      { status: 409 },\n    )\n  }\n  await writeAiJobAudit(gate.firestore, {\n    action: 'ai.job.resume',\n    actorUid: gate.uid,\n    actorEmail: gate.decoded.email ?? null,\n    orgId: gate.orgId,\n    jobId,\n    after: {\n      status: job.status,\n      reason: retryFailedItems ? 'retry-failed-items' : (existing.review?.reason ?? null),\n      kind: existing.kind,\n    },\n  })\n  if (job.status !== 'queued') {\n    await release()\n    return Response.json({ job: aiJobSummary(job, now) }, { status: 200 })\n  }\n  // A step that needs more time than this request has (AGL-2907) is left\n  // queued for the beat, which starts it with a budget of its own: a provider\n  // call this request's timeout cut off would be billed upstream and metered\n  // nowhere.\n  if (aiJobNextStepMinimumMs(job) > AI_JOB_INLINE_BUDGET_MS) {\n    await release()\n    return Response.json({ job: aiJobSummary(job, now) }, { status: 200 })\n  }\n\n  const run = await runAiJobStep(gate.firestore, gate.orgId, jobId, {\n    owner: `route:${randomUUID()}`,\n    now,\n    reservation: gate.reservation,\n    org: gate.org,\n    signal: AbortSignal.timeout(AI_JOB_INLINE_BUDGET_MS),\n    actor: { uid: gate.uid, email: gate.decoded.email ?? null },\n    // The workspace's AI pause lets staff through, as the ladder above did.\n    staff: gate.staff,\n  })\n  if (run.outcome === 'not-claimable') {\n    // The beat claimed the step between the resume and this run; it runs\n    // there, on a reservation of its own.\n    await release()\n    const latest = await getAiJob(gate.firestore, gate.orgId, jobId)\n    return Response.json({ job: aiJobSummary(latest ?? job, now) }, { status: 200 })\n  }\n  return Response.json({ job: aiJobSummary(run.job) }, { status: 200 })\n}\n\n/**\n * Why a build's Try again cannot run (AGL-3616), or `null`: it is not a\n * finished build, the site switched AI off, or — on the Free taste — the\n * month's Free credits do not cover what the retried items are estimated at.\n */\nasync function aiBuildRetryRefusal(\n  gate: { firestore: FirebaseFirestore.Firestore; orgId: string; org: object | null },\n  job: AiJob,\n  credits: { confirmed: boolean; onCreditsConfirmed: (prompt: AiCreditsPrompt) => void },\n): Promise<AiJobAdmissionRefusal | null> {\n  const plan = job.plan?.status === 'confirmed' ? job.plan : null\n  if (!aiBuildRetryable(job) || !plan || !job.items?.length) {\n    return { status: 409, error: 'Only a finished build can try its failed items again' }\n  }\n  const site = await aiJobSiteRefusal({ firestore: gate.firestore, org: gate.org, hostId: job.hostId ?? null })\n  if (site) return site\n  const { retried } = aiBuildRetryLedger(job.items, job.kind === 'site' ? aiLedgerUnits(job.items) : aiBuildUnits(plan))\n  if (!retried.length) return { status: 409, error: 'Nothing in this build is left to try again' }\n  // A site's retried parts are its own pages and creations, held by the\n  // reservation each pass takes; a build's are admitted on their measured p90\n  // against the Free taste, or on the person's go-ahead (AGL-3722).\n  if (job.kind === 'site' || !aiBuildFreeTaste(gate.org)) return null\n  return aiBuildFreeCreditsRefusal({\n    firestore: gate.firestore,\n    orgId: gate.orgId,\n    org: gate.org,\n    range: aiBuildCreditRange(plan, { slots: new Set(retried) }),\n    confirmed: credits.confirmed,\n    onConfirmed: credits.onCreditsConfirmed,\n    now: new Date(),\n  })\n}\n\nexport const dynamic = 'force-dynamic'\nexport const maxDuration = 60\n"],"names":["randomUUID","aiJobAdmissionRefusal","aiJobSiteRefusal","AI_JOB_INLINE_BUDGET_MS","aiJobNextStepMinimumMs","aiJobSummary","getAiJob","aiBuildRetryable","resumeAiJob","retryAiBuildJob","runAiJobStep","writeAiJobAudit","aiBuildFreeCreditsRefusal","aiBuildFreeTaste","aiBuildCreditRange","aiBuildFirstPagePlan","aiBuildRetryLedger","aiBuildUnits","aiLedgerUnits","aiCreditsConfirmation","FREE_AI_TASTE_CREDITS_PER_MONTH","aiGateLadder","releaseAssistMessage","AI_JOBS_RESUME_RATE_LIMIT","key","limit","windowMs","POST","request","context","existing","gate","payload","json","rawHost","hostId","orgId","String","feature","releaseFlag","lockdownFeature","permission","rateLimit","Response","release","firestore","reservation","catch","undefined","jobId","params","error","status","creditsConfirmed","confirmedCredits","onCreditsConfirmed","prompt","reduceToFirstPage","kind","reduced","plan","job","Date","refused","refusal","now","summary","fresh","credits","left","total","resetsOn","review","freeCredits","code","retryFailedItems","aiBuildRetryRefusal","confirmed","console","org","inputs","uid","confirmation","changed","publishConfirmed","reducePlan","action","actorUid","actorEmail","decoded","email","after","reason","run","owner","signal","AbortSignal","timeout","actor","staff","outcome","latest","items","length","site","retried","range","slots","Set","onConfirmed","dynamic","maxDuration"],"mappings":";AAAA;;;;;;;;;;;;;;;CAeC,GAED,+DAA+D;AAC/D,sEAAsE;AAEtE,SAASA,UAAU,QAAQ,SAAQ;AACnC,SAASC,qBAAqB,EAAEC,gBAAgB,QAAoC,8BAA0B;AAC9G,SACEC,uBAAuB,EACvBC,sBAAsB,EACtBC,YAAY,EACZC,QAAQ,EACRC,gBAAgB,EAChBC,WAAW,EACXC,eAAe,EACfC,YAAY,EACZC,eAAe,QACV,qBAAiB;AAExB,SAASC,yBAAyB,EAAEC,gBAAgB,QAAQ,+BAA2B;AACvF,SACEC,kBAAkB,EAClBC,oBAAoB,EACpBC,kBAAkB,EAClBC,YAAY,EACZC,aAAa,QACR,2BAAuB;AAC9B,SAASC,qBAAqB,QAA8B,iCAA6B;AACzF,SAASC,+BAA+B,QAAQ,0BAAsB;AACtE,SAASC,YAAY,QAAQ,wBAAoB;AACjD,SAASC,oBAAoB,QAAQ,2BAAuB;AAE5D;;;;;;;;;;;;;;CAcC,GAED,MAAMC,4BAA4B;IAAEC,KAAK;IAAkBC,OAAO;IAAIC,UAAU;AAAO;AAEvF,OAAO,eAAeC,KACpBC,OAAgB,EAChBC,OAA+C;cAgC1CC,kBAiHSC,4BA4BmBA;QAvBsBD;IApJvD,IAAIE;IACJ,IAAI;QACFA,UAAW,MAAMJ,QAAQK,IAAI;IAC/B,EAAE,eAAM;QACND,UAAU;IACZ;IACA,MAAME,UAAUF,2BAAAA,OAAS,CAAC,SAAS;IACnC,MAAMG,SAAS,OAAOD,YAAY,YAAYA,UAAUA,UAAU;IAClE,MAAMH,OAAO,MAAMV,aACjB;QAAEO;QAASQ,OAAOC,eAAOL,2BAAAA,OAAS,CAAC,QAAQ,mBAAI;QAAKG;IAAO,GAC3D;QACEG,SAAS;QACTC,aAAa;QACbC,iBAAiB;QACjBC,YAAY;QACZC,WAAWnB;IACb;IAEF,IAAIQ,gBAAgBY,UAAU,OAAOZ;IACrC,0EAA0E;IAC1E,gBAAgB;IAChB,MAAMa,UAAU,IACdtB,qBAAqBS,KAAKc,SAAS,EAAEd,KAAKK,KAAK,EAAEL,KAAKe,WAAW,EAAEC,KAAK,CAAC,IAAMC;IAEjF,MAAM,EAAEC,KAAK,EAAE,GAAG,MAAMpB,QAAQqB,MAAM;IACtC,MAAMpB,WAAW,MAAMxB,SAASyB,KAAKc,SAAS,EAAEd,KAAKK,KAAK,EAAEa;IAC5D,IAAI,CAACnB,UAAU;QACb,MAAMc;QACN,OAAOD,SAASV,IAAI,CAAC;YAAEkB,OAAO;QAAc,GAAG;YAAEC,QAAQ;QAAI;IAC/D;IACA,IAAI,EAACtB,mBAAAA,SAASK,MAAM,YAAfL,mBAAmB,UAAUK,QAAQ;QACxC,MAAMS;QACN,OAAOD,SAASV,IAAI,CAAC;YAAEkB,OAAO;QAAmC,GAAG;YAAEC,QAAQ;QAAI;IACpF;IACA,yEAAyE;IACzE,8CAA8C;IAC9C,MAAMC,mBAAmBrB,CAAAA,2BAAAA,OAAS,CAAC,mBAAmB,MAAK;IAC3D,IAAIsB,mBAA2C;IAC/C,MAAMC,qBAAqB,CAACC;QAC1BF,mBAAmBE;IACrB;IACA,mEAAmE;IACnE,mEAAmE;IACnE,MAAMC,oBACJzB,CAAAA,2BAAAA,OAAS,CAAC,SAAS,MAAK,gBAAgBF,SAAS4B,IAAI,KAAK,WAAW5B,SAASsB,MAAM,KAAK;IAC3F,MAAMO,UAAUF,qBAAqB3B,SAAS8B,IAAI,GAAG7C,qBAAqBe,SAAS8B,IAAI,IAAI;IAC3F,IAAIH,qBAAqB,CAACE,SAAS;QACjC,MAAMf;QACN,OAAOD,SAASV,IAAI,CAClB;YAAEkB,OAAO;YAAwCU,KAAKxD,aAAayB,UAAU,IAAIgC;QAAQ,GACzF;YAAEV,QAAQ;QAAI;IAElB;IACA,yEAAyE;IACzE,8DAA8D;IAC9D,MAAMW,UAAU,OAAOC;QACrB,MAAMpB;QACN,MAAMqB,MAAM,IAAIH;QAChB,MAAMI,UAAU7D,aAAayB,UAAUmC;QACvC,MAAME,QAAQH,QAAQI,OAAO,GACzB;YAAEC,MAAML,QAAQI,OAAO,CAACC,IAAI;YAAEC,OAAOlD;YAAiCmD,UAAUP,QAAQI,OAAO,CAACG,QAAQ;QAAC,IACzG;QACJ,MAAMV,MAAMM,SAASD,QAAQM,MAAM,GAAG,aAAKN;YAASM,QAAQ,aAAKN,QAAQM,MAAM;gBAAEC,aAAaN;;aAAYD;QAC1G,OAAOvB,SAASV,IAAI,CAClB;YACEkB,OAAOa,QAAQb,KAAK;WAChBa,QAAQU,IAAI,GAAG;YAAEA,MAAMV,QAAQU,IAAI;QAAC,IAAI,CAAC,GACzCV,QAAQI,OAAO,GAAG;YAAEA,SAASJ,QAAQI,OAAO;QAAC,IAAI,CAAC;YACtDP;YAEF;YAAET,QAAQY,QAAQZ,MAAM;QAAC;IAE7B;IACA,uEAAuE;IACvE,2DAA2D;IAC3D,MAAMuB,mBAAmB3C,CAAAA,2BAAAA,OAAS,CAAC,QAAQ,MAAK;IAChD,IAAI2C,kBAAkB;QACpB,MAAMX,UAAU,MAAMY,oBAAoB7C,MAAMD,UAAU;YAAE+C,WAAWxB;YAAkBE;QAAmB,GAAGR,KAAK,CAClH,CAACI;YACC2B,QAAQ3B,KAAK,CAAC,mCAAmC;gBAAEf,OAAOL,KAAKK,KAAK;gBAAEa;gBAAOE;YAAM;YACnF,OAAO;gBAAEC,QAAQ;gBAAcD,OAAO;YAAkC;QAC1E;QAEF,IAAIa,SAAS;YACX,IAAIA,QAAQZ,MAAM,KAAK,KAAK;gBAC1B,MAAMR;gBACN,OAAOD,SAASV,IAAI,CAAC;oBAAEkB,OAAOa,QAAQb,KAAK;oBAAEU,KAAKxD,aAAayB,UAAU,IAAIgC;gBAAQ,GAAG;oBAAEV,QAAQ;gBAAI;YACxG;YACA,OAAOW,QAAQC;QACjB;IACF;IACA,6EAA6E;IAC7E,yEAAyE;IACzE,yEAAyE;IACzE,IAAIlC,SAASsB,MAAM,KAAK,gBAAgB;QACtC,IAAIY;QACJ,IAAI;gBAGC,OAGSlC,mBAKAA,mBACAA,kBAIF6B;YAfV,2EAA2E;YAC3EK,WACG,QAAA,MAAM9D,iBAAiB;gBACtB2C,WAAWd,KAAKc,SAAS;gBACzBkC,KAAKhD,KAAKgD,GAAG;gBACb5C,MAAM,GAAEL,oBAAAA,SAASK,MAAM,YAAfL,oBAAmB;YAC7B,cAJC,QAKA,MAAM7B,sBAAsB6B,SAAS4B,IAAI,EAAE;gBAC1Cb,WAAWd,KAAKc,SAAS;gBACzBT,OAAOL,KAAKK,KAAK;gBACjBD,MAAM,GAAEL,oBAAAA,SAASK,MAAM,YAAfL,oBAAmB;gBAC3BkD,MAAM,GAAElD,mBAAAA,SAASkD,MAAM,YAAflD,mBAAmB,CAAC;gBAC5BiD,KAAKhD,KAAKgD,GAAG;gBACb,qEAAqE;gBACrE,gEAAgE;gBAChEnB,IAAI,GAAED,QAAAA,kBAAAA,UAAW7B,SAAS8B,IAAI,YAAxBD,QAA4B;gBAClCsB,KAAKlD,KAAKkD,GAAG;gBACb5B;gBACAE;YACF;QACJ,EAAE,OAAOJ,OAAO;YACd,MAAMP;YACNkC,QAAQ3B,KAAK,CAAC,2BAA2B;gBAAEf,OAAOL,KAAKK,KAAK;gBAAEa;gBAAOE;YAAM;YAC3E,OAAOR,SAASV,IAAI,CAAC;gBAAEkB,OAAO;YAAkC,GAAG;gBAAEC,QAAQ;YAAI;QACnF;QACA,IAAIY,SAAS,OAAOD,QAAQC;IAC9B;IACA,MAAMC,MAAM,IAAIH;IAChB,MAAMoB,eAAe/D,sBAAsBmC,kBAAkBvB,KAAKkD,GAAG,EAAEhB;IACvE,MAAM,EAAEJ,GAAG,EAAEsB,OAAO,EAAE,GAAGR,mBACrB,MAAMlE,gBAAgBsB,KAAKc,SAAS,EAAEd,KAAKK,KAAK,EAAEa,OAAOgB,KAAK;QAAEZ,kBAAkB6B;IAAa,KAC/F,MAAM1E,YAAYuB,KAAKc,SAAS,EAAEd,KAAKK,KAAK,EAAEa,OAAO;QAAEgC,KAAKlD,KAAKkD,GAAG;IAAC,GAAGhB,KAAK;QAC3EmB,kBAAkBpD,CAAAA,2BAAAA,OAAS,CAAC,UAAU,MAAK;QAC3CqB,kBAAkB6B;OACdvB,UAAU;QAAE0B,YAAYtE;IAAqB,IAAI,CAAC;IAE5D,IAAI,CAACoE,SAAS;QACZ,MAAMvC;QACN,OAAOD,SAASV,IAAI,CAClB;YAAEkB,OAAO;YAAsCU,KAAKxD,aAAawD,KAAKI;QAAK,GAC3E;YAAEb,QAAQ;QAAI;IAElB;IACA,MAAMzC,gBAAgBoB,KAAKc,SAAS,EAAE;QACpCyC,QAAQ;QACRC,UAAUxD,KAAKkD,GAAG;QAClBO,UAAU,GAAEzD,sBAAAA,KAAK0D,OAAO,CAACC,KAAK,YAAlB3D,sBAAsB;QAClCK,OAAOL,KAAKK,KAAK;QACjBa;QACA0C,OAAO;YACLvC,QAAQS,IAAIT,MAAM;YAClBwC,QAAQjB,mBAAmB,iCAAwB7C,mBAAAA,SAAS0C,MAAM,qBAAf1C,iBAAiB8D,MAAM,oBAAI;YAC9ElC,MAAM5B,SAAS4B,IAAI;QACrB;IACF;IACA,IAAIG,IAAIT,MAAM,KAAK,UAAU;QAC3B,MAAMR;QACN,OAAOD,SAASV,IAAI,CAAC;YAAE4B,KAAKxD,aAAawD,KAAKI;QAAK,GAAG;YAAEb,QAAQ;QAAI;IACtE;IACA,uEAAuE;IACvE,4EAA4E;IAC5E,2EAA2E;IAC3E,WAAW;IACX,IAAIhD,uBAAuByD,OAAO1D,yBAAyB;QACzD,MAAMyC;QACN,OAAOD,SAASV,IAAI,CAAC;YAAE4B,KAAKxD,aAAawD,KAAKI;QAAK,GAAG;YAAEb,QAAQ;QAAI;IACtE;IAEA,MAAMyC,MAAM,MAAMnF,aAAaqB,KAAKc,SAAS,EAAEd,KAAKK,KAAK,EAAEa,OAAO;QAChE6C,OAAO,CAAC,MAAM,EAAE9F,cAAc;QAC9BiE;QACAnB,aAAaf,KAAKe,WAAW;QAC7BiC,KAAKhD,KAAKgD,GAAG;QACbgB,QAAQC,YAAYC,OAAO,CAAC9F;QAC5B+F,OAAO;YAAEjB,KAAKlD,KAAKkD,GAAG;YAAES,KAAK,GAAE3D,uBAAAA,KAAK0D,OAAO,CAACC,KAAK,YAAlB3D,uBAAsB;QAAK;QAC1D,wEAAwE;QACxEoE,OAAOpE,KAAKoE,KAAK;IACnB;IACA,IAAIN,IAAIO,OAAO,KAAK,iBAAiB;QACnC,qEAAqE;QACrE,sCAAsC;QACtC,MAAMxD;QACN,MAAMyD,SAAS,MAAM/F,SAASyB,KAAKc,SAAS,EAAEd,KAAKK,KAAK,EAAEa;QAC1D,OAAON,SAASV,IAAI,CAAC;YAAE4B,KAAKxD,aAAagG,iBAAAA,SAAUxC,KAAKI;QAAK,GAAG;YAAEb,QAAQ;QAAI;IAChF;IACA,OAAOT,SAASV,IAAI,CAAC;QAAE4B,KAAKxD,aAAawF,IAAIhC,GAAG;IAAE,GAAG;QAAET,QAAQ;IAAI;AACrE;AAEA;;;;CAIC,GACD,eAAewB,oBACb7C,IAAmF,EACnF8B,GAAU,EACVO,OAAsF;QAMEP;QAJ3EA,WAC2BA;IADxC,MAAMD,OAAOC,EAAAA,YAAAA,IAAID,IAAI,qBAARC,UAAUT,MAAM,MAAK,cAAcS,IAAID,IAAI,GAAG;IAC3D,IAAI,CAACrD,iBAAiBsD,QAAQ,CAACD,QAAQ,GAACC,aAAAA,IAAIyC,KAAK,qBAATzC,WAAW0C,MAAM,GAAE;QACzD,OAAO;YAAEnD,QAAQ;YAAKD,OAAO;QAAuD;IACtF;IACA,MAAMqD,OAAO,MAAMtG,iBAAiB;QAAE2C,WAAWd,KAAKc,SAAS;QAAEkC,KAAKhD,KAAKgD,GAAG;QAAE5C,MAAM,GAAE0B,cAAAA,IAAI1B,MAAM,YAAV0B,cAAc;IAAK;IAC3G,IAAI2C,MAAM,OAAOA;IACjB,MAAM,EAAEC,OAAO,EAAE,GAAGzF,mBAAmB6C,IAAIyC,KAAK,EAAEzC,IAAIH,IAAI,KAAK,SAASxC,cAAc2C,IAAIyC,KAAK,IAAIrF,aAAa2C;IAChH,IAAI,CAAC6C,QAAQF,MAAM,EAAE,OAAO;QAAEnD,QAAQ;QAAKD,OAAO;IAA6C;IAC/F,sEAAsE;IACtE,4EAA4E;IAC5E,kEAAkE;IAClE,IAAIU,IAAIH,IAAI,KAAK,UAAU,CAAC7C,iBAAiBkB,KAAKgD,GAAG,GAAG,OAAO;IAC/D,OAAOnE,0BAA0B;QAC/BiC,WAAWd,KAAKc,SAAS;QACzBT,OAAOL,KAAKK,KAAK;QACjB2C,KAAKhD,KAAKgD,GAAG;QACb2B,OAAO5F,mBAAmB8C,MAAM;YAAE+C,OAAO,IAAIC,IAAIH;QAAS;QAC1D5B,WAAWT,QAAQS,SAAS;QAC5BgC,aAAazC,QAAQb,kBAAkB;QACvCU,KAAK,IAAIH;IACX;AACF;AAEA,OAAO,MAAMgD,UAAU,gBAAe;AACtC,OAAO,MAAMC,cAAc,GAAE"}
+{"version":3,"sources":["../../../../../../../libs/plugins/ai/src/lib/server/ai-jobs-resume.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n// lockdown-423: via libs/plugins/ai/src/lib/runtime/ai-gate.ts\n// The POST climbs `aiGateLadder`, whose lockdown rung is the verdict.\n\nimport { randomUUID } from 'crypto'\nimport { aiJobAdmissionRefusal, aiJobSiteRefusal, type AiJobAdmissionRefusal } from '../jobs/ai-job-admission'\nimport {\n  AI_JOB_INLINE_BUDGET_MS,\n  aiJobNextStepMinimumMs,\n  aiJobSummary,\n  getAiJob,\n  aiBuildRetryable,\n  resumeAiJob,\n  retryAiBuildJob,\n  runAiJobStep,\n  writeAiJobAudit,\n} from '../jobs/ai-jobs'\nimport type { AiJob } from '../model/ai-jobs.types'\nimport { aiBuildFreeCreditsRefusal, aiBuildFreeTaste } from '../jobs/ai-job-build-step'\nimport {\n  aiBuildCreditRange,\n  aiBuildFirstPagePlan,\n  aiBuildRetryLedger,\n  aiBuildUnits,\n  aiLedgerUnits,\n} from '../model/ai-build-job'\nimport { aiCreditsConfirmation, type AiCreditsPrompt } from '../model/ai-credit-estimate'\nimport { aiJobInputProblems } from '../model/ai-job-input'\nimport { FREE_AI_TASTE_CREDITS_PER_MONTH } from '../plan-entitlements'\nimport { aiGateLadder } from '../runtime/ai-gate'\nimport { releaseAssistMessage } from '../usage/assist-usage'\n\n/**\n * Resume a job that stopped for a person (AGL-2935): confirm its plan, or\n * try again the step whose answer broke a building rule on its re-ask — or\n * answer what a job waiting in `needs_input` asks (`input`, AGL-3978), which\n * returns it to its plan card, or a 400 with `fieldErrors` by field.\n *\n * A door that SPENDS — the next step calls the provider — so it climbs the\n * whole ladder the create door climbs: `aiGenerative`,\n * `release_ai_generative`, the `ai-generate` switch, `ai.generate` on the\n * job's site, a per-uid window and a reservation. It then runs the next\n * step inline on that reservation, the way the create door runs the first,\n * and hands the reservation back whenever no step runs here.\n *\n * The body names the org and the job's site. A site that is not the job's\n * is refused, so a collaborator's permission on one site never confirms a\n * job on another. Audited per resume that changed something.\n */\n\nconst AI_JOBS_RESUME_RATE_LIMIT = { key: 'ai-jobs-resume', limit: 10, windowMs: 60_000 }\n\nexport async function POST(\n  request: Request,\n  context: { params: Promise<{ jobId: string }> },\n): Promise<Response> {\n  let payload: Record<string, unknown> | null\n  try {\n    payload = (await request.json()) as Record<string, unknown>\n  } catch {\n    payload = null\n  }\n  const rawHost = payload?.['hostId']\n  const hostId = typeof rawHost === 'string' && rawHost ? rawHost : null\n  const gate = await aiGateLadder(\n    { request, orgId: String(payload?.['orgId'] ?? ''), hostId },\n    {\n      feature: 'aiGenerative',\n      releaseFlag: 'release_ai_generative',\n      lockdownFeature: 'ai-generate',\n      permission: 'ai.generate',\n      rateLimit: AI_JOBS_RESUME_RATE_LIMIT,\n    },\n  )\n  if (gate instanceof Response) return gate\n  // No token is spent until a step runs, so every exit before one hands the\n  // message back.\n  const release = () =>\n    releaseAssistMessage(gate.firestore, gate.orgId, gate.reservation).catch(() => undefined)\n\n  const { jobId } = await context.params\n  const existing = await getAiJob(gate.firestore, gate.orgId, jobId)\n  if (!existing) {\n    await release()\n    return Response.json({ error: 'Unknown job' }, { status: 404 })\n  }\n  if ((existing.hostId ?? null) !== hostId) {\n    await release()\n    return Response.json({ error: 'That job belongs to another site' }, { status: 400 })\n  }\n  // \"Build what fits\" (AGL-3722): a Free job past what is left, started on\n  // the person's go-ahead, which the job keeps.\n  const creditsConfirmed = payload?.['creditsConfirmed'] === true\n  let confirmedCredits: AiCreditsPrompt | null = null\n  const onCreditsConfirmed = (prompt: AiCreditsPrompt) => {\n    confirmedCredits = prompt\n  }\n  // \"Build the home page first\" (AGL-3722): the plan waiting for its\n  // confirmation narrowed to its home page and what that page needs.\n  const reduceToFirstPage =\n    payload?.['reduce'] === 'first-page' && existing.kind === 'build' && existing.status === 'needs_review'\n  const reduced = reduceToFirstPage && existing.plan ? aiBuildFirstPagePlan(existing.plan) : null\n  if (reduceToFirstPage && !reduced) {\n    await release()\n    return Response.json(\n      { error: 'This plan has no smaller first build', job: aiJobSummary(existing, new Date()) },\n      { status: 409 },\n    )\n  }\n  // A refusal as the door answers it: a Free job past what is left carries\n  // its prompt, and a plan card the figures it should now show.\n  const refused = async (refusal: AiJobAdmissionRefusal) => {\n    await release()\n    const now = new Date()\n    const summary = aiJobSummary(existing, now)\n    const fresh = refusal.credits\n      ? { left: refusal.credits.left, total: FREE_AI_TASTE_CREDITS_PER_MONTH, resetsOn: refusal.credits.resetsOn }\n      : null\n    const job = fresh && summary.review ? { ...summary, review: { ...summary.review, freeCredits: fresh } } : summary\n    return Response.json(\n      {\n        error: refusal.error,\n        ...(refusal.code ? { code: refusal.code } : {}),\n        ...(refusal.credits ? { credits: refusal.credits } : {}),\n        job,\n      },\n      { status: refusal.status },\n    )\n  }\n  // Try again on a build (AGL-3616): its failed items and what they left\n  // unbuilt, never what succeeded, and never its plan again.\n  const retryFailedItems = payload?.['retry'] === 'failed-items'\n  if (retryFailedItems) {\n    const refusal = await aiBuildRetryRefusal(gate, existing, { confirmed: creditsConfirmed, onCreditsConfirmed }).catch(\n      (error: unknown) => {\n        console.error('ai build retry admission failed', { orgId: gate.orgId, jobId, error })\n        return { status: 500 as const, error: 'The AI job could not be resumed' }\n      },\n    )\n    if (refusal) {\n      if (refusal.status === 500) {\n        await release()\n        return Response.json({ error: refusal.error, job: aiJobSummary(existing, new Date()) }, { status: 500 })\n      }\n      return refused(refusal)\n    }\n  }\n  // A job waiting for a person's answer (AGL-3978): every field must read\n  // before anything changes, and a refusal names each field it is about.\n  const answering = existing.status === 'needs_input' && Boolean(existing.input?.fields?.length)\n  const rawInput = payload?.['input']\n  const answers = rawInput && typeof rawInput === 'object' && !Array.isArray(rawInput) ? (rawInput as Record<string, unknown>) : null\n  if (answering && existing.input) {\n    const fieldErrors = aiJobInputProblems(existing.input, answers)\n    const first = Object.values(fieldErrors)[0]\n    if (first) {\n      await release()\n      return Response.json({ error: first, fieldErrors, job: aiJobSummary(existing, new Date()) }, { status: 400 })\n    }\n  }\n  // A confirmed plan runs the step that writes, and an allowance free when the\n  // job was created may be used by now (AGL-2909): the kind is asked again\n  // before anything runs, and a refusal leaves the job waiting for review.\n  if (existing.status === 'needs_review') {\n    let refusal: Awaited<ReturnType<typeof aiJobAdmissionRefusal>>\n    try {\n      // A site that switched AI off first (AGL-3028), then the kind's own check.\n      refusal =\n        (await aiJobSiteRefusal({\n          firestore: gate.firestore,\n          org: gate.org,\n          hostId: existing.hostId ?? null,\n        })) ??\n        (await aiJobAdmissionRefusal(existing.kind, {\n          firestore: gate.firestore,\n          orgId: gate.orgId,\n          hostId: existing.hostId ?? null,\n          inputs: existing.inputs ?? {},\n          org: gate.org,\n          // The plan being confirmed, for a kind that builds only some plans —\n          // the smaller first build where the person chose it (AGL-3722).\n          plan: reduced ?? existing.plan ?? null,\n          uid: gate.uid,\n          creditsConfirmed,\n          onCreditsConfirmed,\n        }))\n    } catch (error) {\n      await release()\n      console.error('ai job admission failed', { orgId: gate.orgId, jobId, error })\n      return Response.json({ error: 'The AI job could not be resumed' }, { status: 500 })\n    }\n    if (refusal) return refused(refusal)\n  }\n  const now = new Date()\n  const confirmation = aiCreditsConfirmation(confirmedCredits, gate.uid, now)\n  const { job, changed } = retryFailedItems\n    ? await retryAiBuildJob(gate.firestore, gate.orgId, jobId, now, { creditsConfirmed: confirmation })\n    : await resumeAiJob(gate.firestore, gate.orgId, jobId, { uid: gate.uid }, now, {\n        publishConfirmed: payload?.['publish'] === true,\n        creditsConfirmed: confirmation,\n        ...(reduced ? { reducePlan: aiBuildFirstPagePlan } : {}),\n        ...(answering ? { input: answers } : {}),\n      })\n  if (!changed) {\n    await release()\n    return Response.json(\n      { error: 'This job is not waiting for review', job: aiJobSummary(job, now) },\n      { status: 409 },\n    )\n  }\n  await writeAiJobAudit(gate.firestore, {\n    action: 'ai.job.resume',\n    actorUid: gate.uid,\n    actorEmail: gate.decoded.email ?? null,\n    orgId: gate.orgId,\n    jobId,\n    after: {\n      status: job.status,\n      reason: retryFailedItems ? 'retry-failed-items' : answering ? 'input' : (existing.review?.reason ?? null),\n      kind: existing.kind,\n    },\n  })\n  if (job.status !== 'queued') {\n    await release()\n    return Response.json({ job: aiJobSummary(job, now) }, { status: 200 })\n  }\n  // A step that needs more time than this request has (AGL-2907) is left\n  // queued for the beat, which starts it with a budget of its own: a provider\n  // call this request's timeout cut off would be billed upstream and metered\n  // nowhere.\n  if (aiJobNextStepMinimumMs(job) > AI_JOB_INLINE_BUDGET_MS) {\n    await release()\n    return Response.json({ job: aiJobSummary(job, now) }, { status: 200 })\n  }\n\n  const run = await runAiJobStep(gate.firestore, gate.orgId, jobId, {\n    owner: `route:${randomUUID()}`,\n    now,\n    reservation: gate.reservation,\n    org: gate.org,\n    signal: AbortSignal.timeout(AI_JOB_INLINE_BUDGET_MS),\n    actor: { uid: gate.uid, email: gate.decoded.email ?? null },\n    // The workspace's AI pause lets staff through, as the ladder above did.\n    staff: gate.staff,\n  })\n  if (run.outcome === 'not-claimable') {\n    // The beat claimed the step between the resume and this run; it runs\n    // there, on a reservation of its own.\n    await release()\n    const latest = await getAiJob(gate.firestore, gate.orgId, jobId)\n    return Response.json({ job: aiJobSummary(latest ?? job, now) }, { status: 200 })\n  }\n  return Response.json({ job: aiJobSummary(run.job) }, { status: 200 })\n}\n\n/**\n * Why a build's Try again cannot run (AGL-3616), or `null`: it is not a\n * finished build, the site switched AI off, or — on the Free taste — the\n * month's Free credits do not cover what the retried items are estimated at.\n */\nasync function aiBuildRetryRefusal(\n  gate: { firestore: FirebaseFirestore.Firestore; orgId: string; org: object | null },\n  job: AiJob,\n  credits: { confirmed: boolean; onCreditsConfirmed: (prompt: AiCreditsPrompt) => void },\n): Promise<AiJobAdmissionRefusal | null> {\n  const plan = job.plan?.status === 'confirmed' ? job.plan : null\n  if (!aiBuildRetryable(job) || !plan || !job.items?.length) {\n    return { status: 409, error: 'Only a finished build can try its failed items again' }\n  }\n  const site = await aiJobSiteRefusal({ firestore: gate.firestore, org: gate.org, hostId: job.hostId ?? null })\n  if (site) return site\n  const { retried } = aiBuildRetryLedger(job.items, job.kind === 'site' ? aiLedgerUnits(job.items) : aiBuildUnits(plan))\n  if (!retried.length) return { status: 409, error: 'Nothing in this build is left to try again' }\n  // A site's retried parts are its own pages and creations, held by the\n  // reservation each pass takes; a build's are admitted on their measured p90\n  // against the Free taste, or on the person's go-ahead (AGL-3722).\n  if (job.kind === 'site' || !aiBuildFreeTaste(gate.org)) return null\n  return aiBuildFreeCreditsRefusal({\n    firestore: gate.firestore,\n    orgId: gate.orgId,\n    org: gate.org,\n    range: aiBuildCreditRange(plan, { slots: new Set(retried) }),\n    confirmed: credits.confirmed,\n    onConfirmed: credits.onCreditsConfirmed,\n    now: new Date(),\n  })\n}\n\nexport const dynamic = 'force-dynamic'\nexport const maxDuration = 60\n"],"names":["randomUUID","aiJobAdmissionRefusal","aiJobSiteRefusal","AI_JOB_INLINE_BUDGET_MS","aiJobNextStepMinimumMs","aiJobSummary","getAiJob","aiBuildRetryable","resumeAiJob","retryAiBuildJob","runAiJobStep","writeAiJobAudit","aiBuildFreeCreditsRefusal","aiBuildFreeTaste","aiBuildCreditRange","aiBuildFirstPagePlan","aiBuildRetryLedger","aiBuildUnits","aiLedgerUnits","aiCreditsConfirmation","aiJobInputProblems","FREE_AI_TASTE_CREDITS_PER_MONTH","aiGateLadder","releaseAssistMessage","AI_JOBS_RESUME_RATE_LIMIT","key","limit","windowMs","POST","request","context","existing","gate","payload","json","rawHost","hostId","orgId","String","feature","releaseFlag","lockdownFeature","permission","rateLimit","Response","release","firestore","reservation","catch","undefined","jobId","params","error","status","creditsConfirmed","confirmedCredits","onCreditsConfirmed","prompt","reduceToFirstPage","kind","reduced","plan","job","Date","refused","refusal","now","summary","fresh","credits","left","total","resetsOn","review","freeCredits","code","retryFailedItems","aiBuildRetryRefusal","confirmed","console","answering","Boolean","input","fields","length","rawInput","answers","Array","isArray","fieldErrors","first","Object","values","org","inputs","uid","confirmation","changed","publishConfirmed","reducePlan","action","actorUid","actorEmail","decoded","email","after","reason","run","owner","signal","AbortSignal","timeout","actor","staff","outcome","latest","items","site","retried","range","slots","Set","onConfirmed","dynamic","maxDuration"],"mappings":";AAAA;;;;;;;;;;;;;;;CAeC,GAED,+DAA+D;AAC/D,sEAAsE;AAEtE,SAASA,UAAU,QAAQ,SAAQ;AACnC,SAASC,qBAAqB,EAAEC,gBAAgB,QAAoC,8BAA0B;AAC9G,SACEC,uBAAuB,EACvBC,sBAAsB,EACtBC,YAAY,EACZC,QAAQ,EACRC,gBAAgB,EAChBC,WAAW,EACXC,eAAe,EACfC,YAAY,EACZC,eAAe,QACV,qBAAiB;AAExB,SAASC,yBAAyB,EAAEC,gBAAgB,QAAQ,+BAA2B;AACvF,SACEC,kBAAkB,EAClBC,oBAAoB,EACpBC,kBAAkB,EAClBC,YAAY,EACZC,aAAa,QACR,2BAAuB;AAC9B,SAASC,qBAAqB,QAA8B,iCAA6B;AACzF,SAASC,kBAAkB,QAAQ,2BAAuB;AAC1D,SAASC,+BAA+B,QAAQ,0BAAsB;AACtE,SAASC,YAAY,QAAQ,wBAAoB;AACjD,SAASC,oBAAoB,QAAQ,2BAAuB;AAE5D;;;;;;;;;;;;;;;;CAgBC,GAED,MAAMC,4BAA4B;IAAEC,KAAK;IAAkBC,OAAO;IAAIC,UAAU;AAAO;AAEvF,OAAO,eAAeC,KACpBC,OAAgB,EAChBC,OAA+C;cAgC1CC,kBA+HSC,4BA4BmBA;QA5F8BD,wBAAAA,iBAqEcA;IAlK7E,IAAIE;IACJ,IAAI;QACFA,UAAW,MAAMJ,QAAQK,IAAI;IAC/B,EAAE,eAAM;QACND,UAAU;IACZ;IACA,MAAME,UAAUF,2BAAAA,OAAS,CAAC,SAAS;IACnC,MAAMG,SAAS,OAAOD,YAAY,YAAYA,UAAUA,UAAU;IAClE,MAAMH,OAAO,MAAMV,aACjB;QAAEO;QAASQ,OAAOC,eAAOL,2BAAAA,OAAS,CAAC,QAAQ,mBAAI;QAAKG;IAAO,GAC3D;QACEG,SAAS;QACTC,aAAa;QACbC,iBAAiB;QACjBC,YAAY;QACZC,WAAWnB;IACb;IAEF,IAAIQ,gBAAgBY,UAAU,OAAOZ;IACrC,0EAA0E;IAC1E,gBAAgB;IAChB,MAAMa,UAAU,IACdtB,qBAAqBS,KAAKc,SAAS,EAAEd,KAAKK,KAAK,EAAEL,KAAKe,WAAW,EAAEC,KAAK,CAAC,IAAMC;IAEjF,MAAM,EAAEC,KAAK,EAAE,GAAG,MAAMpB,QAAQqB,MAAM;IACtC,MAAMpB,WAAW,MAAMzB,SAAS0B,KAAKc,SAAS,EAAEd,KAAKK,KAAK,EAAEa;IAC5D,IAAI,CAACnB,UAAU;QACb,MAAMc;QACN,OAAOD,SAASV,IAAI,CAAC;YAAEkB,OAAO;QAAc,GAAG;YAAEC,QAAQ;QAAI;IAC/D;IACA,IAAI,EAACtB,mBAAAA,SAASK,MAAM,YAAfL,mBAAmB,UAAUK,QAAQ;QACxC,MAAMS;QACN,OAAOD,SAASV,IAAI,CAAC;YAAEkB,OAAO;QAAmC,GAAG;YAAEC,QAAQ;QAAI;IACpF;IACA,yEAAyE;IACzE,8CAA8C;IAC9C,MAAMC,mBAAmBrB,CAAAA,2BAAAA,OAAS,CAAC,mBAAmB,MAAK;IAC3D,IAAIsB,mBAA2C;IAC/C,MAAMC,qBAAqB,CAACC;QAC1BF,mBAAmBE;IACrB;IACA,mEAAmE;IACnE,mEAAmE;IACnE,MAAMC,oBACJzB,CAAAA,2BAAAA,OAAS,CAAC,SAAS,MAAK,gBAAgBF,SAAS4B,IAAI,KAAK,WAAW5B,SAASsB,MAAM,KAAK;IAC3F,MAAMO,UAAUF,qBAAqB3B,SAAS8B,IAAI,GAAG9C,qBAAqBgB,SAAS8B,IAAI,IAAI;IAC3F,IAAIH,qBAAqB,CAACE,SAAS;QACjC,MAAMf;QACN,OAAOD,SAASV,IAAI,CAClB;YAAEkB,OAAO;YAAwCU,KAAKzD,aAAa0B,UAAU,IAAIgC;QAAQ,GACzF;YAAEV,QAAQ;QAAI;IAElB;IACA,yEAAyE;IACzE,8DAA8D;IAC9D,MAAMW,UAAU,OAAOC;QACrB,MAAMpB;QACN,MAAMqB,MAAM,IAAIH;QAChB,MAAMI,UAAU9D,aAAa0B,UAAUmC;QACvC,MAAME,QAAQH,QAAQI,OAAO,GACzB;YAAEC,MAAML,QAAQI,OAAO,CAACC,IAAI;YAAEC,OAAOlD;YAAiCmD,UAAUP,QAAQI,OAAO,CAACG,QAAQ;QAAC,IACzG;QACJ,MAAMV,MAAMM,SAASD,QAAQM,MAAM,GAAG,aAAKN;YAASM,QAAQ,aAAKN,QAAQM,MAAM;gBAAEC,aAAaN;;aAAYD;QAC1G,OAAOvB,SAASV,IAAI,CAClB;YACEkB,OAAOa,QAAQb,KAAK;WAChBa,QAAQU,IAAI,GAAG;YAAEA,MAAMV,QAAQU,IAAI;QAAC,IAAI,CAAC,GACzCV,QAAQI,OAAO,GAAG;YAAEA,SAASJ,QAAQI,OAAO;QAAC,IAAI,CAAC;YACtDP;YAEF;YAAET,QAAQY,QAAQZ,MAAM;QAAC;IAE7B;IACA,uEAAuE;IACvE,2DAA2D;IAC3D,MAAMuB,mBAAmB3C,CAAAA,2BAAAA,OAAS,CAAC,QAAQ,MAAK;IAChD,IAAI2C,kBAAkB;QACpB,MAAMX,UAAU,MAAMY,oBAAoB7C,MAAMD,UAAU;YAAE+C,WAAWxB;YAAkBE;QAAmB,GAAGR,KAAK,CAClH,CAACI;YACC2B,QAAQ3B,KAAK,CAAC,mCAAmC;gBAAEf,OAAOL,KAAKK,KAAK;gBAAEa;gBAAOE;YAAM;YACnF,OAAO;gBAAEC,QAAQ;gBAAcD,OAAO;YAAkC;QAC1E;QAEF,IAAIa,SAAS;YACX,IAAIA,QAAQZ,MAAM,KAAK,KAAK;gBAC1B,MAAMR;gBACN,OAAOD,SAASV,IAAI,CAAC;oBAAEkB,OAAOa,QAAQb,KAAK;oBAAEU,KAAKzD,aAAa0B,UAAU,IAAIgC;gBAAQ,GAAG;oBAAEV,QAAQ;gBAAI;YACxG;YACA,OAAOW,QAAQC;QACjB;IACF;IACA,wEAAwE;IACxE,uEAAuE;IACvE,MAAMe,YAAYjD,SAASsB,MAAM,KAAK,iBAAiB4B,SAAQlD,kBAAAA,SAASmD,KAAK,sBAAdnD,yBAAAA,gBAAgBoD,MAAM,qBAAtBpD,uBAAwBqD,MAAM;IAC7F,MAAMC,WAAWpD,2BAAAA,OAAS,CAAC,QAAQ;IACnC,MAAMqD,UAAUD,YAAY,OAAOA,aAAa,YAAY,CAACE,MAAMC,OAAO,CAACH,YAAaA,WAAuC;IAC/H,IAAIL,aAAajD,SAASmD,KAAK,EAAE;QAC/B,MAAMO,cAAcrE,mBAAmBW,SAASmD,KAAK,EAAEI;QACvD,MAAMI,QAAQC,OAAOC,MAAM,CAACH,YAAY,CAAC,EAAE;QAC3C,IAAIC,OAAO;YACT,MAAM7C;YACN,OAAOD,SAASV,IAAI,CAAC;gBAAEkB,OAAOsC;gBAAOD;gBAAa3B,KAAKzD,aAAa0B,UAAU,IAAIgC;YAAQ,GAAG;gBAAEV,QAAQ;YAAI;QAC7G;IACF;IACA,6EAA6E;IAC7E,yEAAyE;IACzE,yEAAyE;IACzE,IAAItB,SAASsB,MAAM,KAAK,gBAAgB;QACtC,IAAIY;QACJ,IAAI;gBAGC,OAGSlC,mBAKAA,mBACAA,kBAIF6B;YAfV,2EAA2E;YAC3EK,WACG,QAAA,MAAM/D,iBAAiB;gBACtB4C,WAAWd,KAAKc,SAAS;gBACzB+C,KAAK7D,KAAK6D,GAAG;gBACbzD,MAAM,GAAEL,oBAAAA,SAASK,MAAM,YAAfL,oBAAmB;YAC7B,cAJC,QAKA,MAAM9B,sBAAsB8B,SAAS4B,IAAI,EAAE;gBAC1Cb,WAAWd,KAAKc,SAAS;gBACzBT,OAAOL,KAAKK,KAAK;gBACjBD,MAAM,GAAEL,oBAAAA,SAASK,MAAM,YAAfL,oBAAmB;gBAC3B+D,MAAM,GAAE/D,mBAAAA,SAAS+D,MAAM,YAAf/D,mBAAmB,CAAC;gBAC5B8D,KAAK7D,KAAK6D,GAAG;gBACb,qEAAqE;gBACrE,gEAAgE;gBAChEhC,IAAI,GAAED,QAAAA,kBAAAA,UAAW7B,SAAS8B,IAAI,YAAxBD,QAA4B;gBAClCmC,KAAK/D,KAAK+D,GAAG;gBACbzC;gBACAE;YACF;QACJ,EAAE,OAAOJ,OAAO;YACd,MAAMP;YACNkC,QAAQ3B,KAAK,CAAC,2BAA2B;gBAAEf,OAAOL,KAAKK,KAAK;gBAAEa;gBAAOE;YAAM;YAC3E,OAAOR,SAASV,IAAI,CAAC;gBAAEkB,OAAO;YAAkC,GAAG;gBAAEC,QAAQ;YAAI;QACnF;QACA,IAAIY,SAAS,OAAOD,QAAQC;IAC9B;IACA,MAAMC,MAAM,IAAIH;IAChB,MAAMiC,eAAe7E,sBAAsBoC,kBAAkBvB,KAAK+D,GAAG,EAAE7B;IACvE,MAAM,EAAEJ,GAAG,EAAEmC,OAAO,EAAE,GAAGrB,mBACrB,MAAMnE,gBAAgBuB,KAAKc,SAAS,EAAEd,KAAKK,KAAK,EAAEa,OAAOgB,KAAK;QAAEZ,kBAAkB0C;IAAa,KAC/F,MAAMxF,YAAYwB,KAAKc,SAAS,EAAEd,KAAKK,KAAK,EAAEa,OAAO;QAAE6C,KAAK/D,KAAK+D,GAAG;IAAC,GAAG7B,KAAK;QAC3EgC,kBAAkBjE,CAAAA,2BAAAA,OAAS,CAAC,UAAU,MAAK;QAC3CqB,kBAAkB0C;OACdpC,UAAU;QAAEuC,YAAYpF;IAAqB,IAAI,CAAC,GAClDiE,YAAY;QAAEE,OAAOI;IAAQ,IAAI,CAAC;IAE5C,IAAI,CAACW,SAAS;QACZ,MAAMpD;QACN,OAAOD,SAASV,IAAI,CAClB;YAAEkB,OAAO;YAAsCU,KAAKzD,aAAayD,KAAKI;QAAK,GAC3E;YAAEb,QAAQ;QAAI;IAElB;IACA,MAAM1C,gBAAgBqB,KAAKc,SAAS,EAAE;QACpCsD,QAAQ;QACRC,UAAUrE,KAAK+D,GAAG;QAClBO,UAAU,GAAEtE,sBAAAA,KAAKuE,OAAO,CAACC,KAAK,YAAlBxE,sBAAsB;QAClCK,OAAOL,KAAKK,KAAK;QACjBa;QACAuD,OAAO;YACLpD,QAAQS,IAAIT,MAAM;YAClBqD,QAAQ9B,mBAAmB,uBAAuBI,YAAY,oBAAWjD,mBAAAA,SAAS0C,MAAM,qBAAf1C,iBAAiB2E,MAAM,oBAAI;YACpG/C,MAAM5B,SAAS4B,IAAI;QACrB;IACF;IACA,IAAIG,IAAIT,MAAM,KAAK,UAAU;QAC3B,MAAMR;QACN,OAAOD,SAASV,IAAI,CAAC;YAAE4B,KAAKzD,aAAayD,KAAKI;QAAK,GAAG;YAAEb,QAAQ;QAAI;IACtE;IACA,uEAAuE;IACvE,4EAA4E;IAC5E,2EAA2E;IAC3E,WAAW;IACX,IAAIjD,uBAAuB0D,OAAO3D,yBAAyB;QACzD,MAAM0C;QACN,OAAOD,SAASV,IAAI,CAAC;YAAE4B,KAAKzD,aAAayD,KAAKI;QAAK,GAAG;YAAEb,QAAQ;QAAI;IACtE;IAEA,MAAMsD,MAAM,MAAMjG,aAAasB,KAAKc,SAAS,EAAEd,KAAKK,KAAK,EAAEa,OAAO;QAChE0D,OAAO,CAAC,MAAM,EAAE5G,cAAc;QAC9BkE;QACAnB,aAAaf,KAAKe,WAAW;QAC7B8C,KAAK7D,KAAK6D,GAAG;QACbgB,QAAQC,YAAYC,OAAO,CAAC5G;QAC5B6G,OAAO;YAAEjB,KAAK/D,KAAK+D,GAAG;YAAES,KAAK,GAAExE,uBAAAA,KAAKuE,OAAO,CAACC,KAAK,YAAlBxE,uBAAsB;QAAK;QAC1D,wEAAwE;QACxEiF,OAAOjF,KAAKiF,KAAK;IACnB;IACA,IAAIN,IAAIO,OAAO,KAAK,iBAAiB;QACnC,qEAAqE;QACrE,sCAAsC;QACtC,MAAMrE;QACN,MAAMsE,SAAS,MAAM7G,SAAS0B,KAAKc,SAAS,EAAEd,KAAKK,KAAK,EAAEa;QAC1D,OAAON,SAASV,IAAI,CAAC;YAAE4B,KAAKzD,aAAa8G,iBAAAA,SAAUrD,KAAKI;QAAK,GAAG;YAAEb,QAAQ;QAAI;IAChF;IACA,OAAOT,SAASV,IAAI,CAAC;QAAE4B,KAAKzD,aAAasG,IAAI7C,GAAG;IAAE,GAAG;QAAET,QAAQ;IAAI;AACrE;AAEA;;;;CAIC,GACD,eAAewB,oBACb7C,IAAmF,EACnF8B,GAAU,EACVO,OAAsF;QAMEP;QAJ3EA,WAC2BA;IADxC,MAAMD,OAAOC,EAAAA,YAAAA,IAAID,IAAI,qBAARC,UAAUT,MAAM,MAAK,cAAcS,IAAID,IAAI,GAAG;IAC3D,IAAI,CAACtD,iBAAiBuD,QAAQ,CAACD,QAAQ,GAACC,aAAAA,IAAIsD,KAAK,qBAATtD,WAAWsB,MAAM,GAAE;QACzD,OAAO;YAAE/B,QAAQ;YAAKD,OAAO;QAAuD;IACtF;IACA,MAAMiE,OAAO,MAAMnH,iBAAiB;QAAE4C,WAAWd,KAAKc,SAAS;QAAE+C,KAAK7D,KAAK6D,GAAG;QAAEzD,MAAM,GAAE0B,cAAAA,IAAI1B,MAAM,YAAV0B,cAAc;IAAK;IAC3G,IAAIuD,MAAM,OAAOA;IACjB,MAAM,EAAEC,OAAO,EAAE,GAAGtG,mBAAmB8C,IAAIsD,KAAK,EAAEtD,IAAIH,IAAI,KAAK,SAASzC,cAAc4C,IAAIsD,KAAK,IAAInG,aAAa4C;IAChH,IAAI,CAACyD,QAAQlC,MAAM,EAAE,OAAO;QAAE/B,QAAQ;QAAKD,OAAO;IAA6C;IAC/F,sEAAsE;IACtE,4EAA4E;IAC5E,kEAAkE;IAClE,IAAIU,IAAIH,IAAI,KAAK,UAAU,CAAC9C,iBAAiBmB,KAAK6D,GAAG,GAAG,OAAO;IAC/D,OAAOjF,0BAA0B;QAC/BkC,WAAWd,KAAKc,SAAS;QACzBT,OAAOL,KAAKK,KAAK;QACjBwD,KAAK7D,KAAK6D,GAAG;QACb0B,OAAOzG,mBAAmB+C,MAAM;YAAE2D,OAAO,IAAIC,IAAIH;QAAS;QAC1DxC,WAAWT,QAAQS,SAAS;QAC5B4C,aAAarD,QAAQb,kBAAkB;QACvCU,KAAK,IAAIH;IACX;AACF;AAEA,OAAO,MAAM4D,UAAU,gBAAe;AACtC,OAAO,MAAMC,cAAc,GAAE"}

package/src/lib/server/ai-jobs-route.js

@@ -33,9 +33,12 @@ import { readFreeAiCreditsLeft } from "../usage/free-ai-credits-left.js";
 import { aiCreditsConfirmation } from "../model/ai-credit-estimate.js";
 import { aiUsageMeter } from "../usage/ai-usage-meter.js";
 import { aiJobsGate } from "./ai-jobs-gate.js";
+import { siteImportOfferFor } from "./ai-site-import-route.js";
 import { withoutErasedSites } from "./ai-jobs-live-sites.js";
 import { AI_JOB_ACTIVE_STATUSES } from "../model/ai-job-activity.js";
 import { reportServerError } from "@aglyn/tenant-data-admin/server/client-error-report";
+import { isServerReleaseFlagOnForOrg } from "@aglyn/tenant-data-admin/server/release-flags";
+import { AI_SITE_INSPIRATION_FLAG } from "../model/ai-site-inspiration.js";
 /**
  * A caught fault on this door, reported as well as logged (AGL-1921).
  *
@@ -396,6 +399,17 @@ export async function GET(request) {
         org: gate.org,
         now
     }) : null;
+    // Whether Create site offers "Bring my site" (AGL-3976), asked only by the
+    // guided start's own read, so the card costs no other caller anything.
+    const siteImport = url.searchParams.get('siteImport') === '1' ? await siteImportOfferFor({
+        orgId: gate.orgId,
+        staff: gate.staff,
+        org: gate.org,
+        member: gate.member
+    }) : null;
+    // Whether the guided start asks for the sites the person likes (AGL-3975):
+    // the workspace's own verdict, the one its site job reads them by.
+    const siteInspiration = await isServerReleaseFlagOnForOrg(AI_SITE_INSPIRATION_FLAG, gate.orgId).catch(()=>false);
     return Response.json(_extends({
         jobs: jobs.map((job)=>aiJobSummary(job, now)),
         // Whether the workspace spends the Free taste (AGL-3594), so the guided
@@ -403,6 +417,10 @@ export async function GET(request) {
         freeTaste
     }, freeCredits ? {
         freeCredits
+    } : {}, siteImport ? {
+        siteImport
+    } : {}, siteInspiration ? {
+        siteInspiration: true
     } : {}), {
         status: 200,
         headers: {

package/src/lib/server/ai-jobs-route.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../../../../libs/plugins/ai/src/lib/server/ai-jobs-route.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n// lockdown-423: via libs/plugins/ai/src/lib/runtime/ai-gate.ts\n// The POST climbs `aiGateLadder`, whose lockdown rung is the verdict; the\n// GET climbs `ai-jobs-gate.ts`, which carries the same rung.\n\nimport { randomUUID } from 'crypto'\nimport { resolveEffectivePlan } from '@aglyn/aglyn/app-utils/plan-entitlements'\nimport {\n  AI_JOB_KINDS,\n  type AiJobKind,\n  type AiJobStatus,\n} from '../model/ai-jobs.types'\n// By their own entry points rather than the barrel (AGL-2903): the specs\n// stub the barrel closed-world, and the ladder, the machine and the runtime\n// are the things under test here, not things to be stubbed away.\nimport { aiGateLadder } from '../runtime/ai-gate'\nimport { aiJobAdmissionRefusal, aiJobSiteRefusal } from '../jobs/ai-job-admission'\nimport { AI_JOB_BRIEF_MAX_CHARS } from '../jobs/ai-job-text-step'\nimport { aiJobAdmittedInputs } from '../jobs/ai-job-auto-confirm'\nimport {\n  AI_JOB_INLINE_BUDGET_MS,\n  aiJobNextStepMinimumMs,\n  aiJobSummary,\n  createAiJob,\n  listAiJobs,\n  runAiJobStep,\n} from '../jobs/ai-jobs'\nimport { releaseAssistMessage } from '../usage/assist-usage'\nimport { readFreeAiCreditsLeft } from '../usage/free-ai-credits-left'\nimport { aiCreditsConfirmation, type AiCreditsPrompt } from '../model/ai-credit-estimate'\nimport { aiUsageMeter } from '../usage/ai-usage-meter'\nimport { aiJobsGate } from './ai-jobs-gate'\nimport { withoutErasedSites } from './ai-jobs-live-sites'\nimport { AI_JOB_ACTIVE_STATUSES } from '../model/ai-job-activity'\nimport { reportServerError } from '@aglyn/tenant-data-admin/server/client-error-report'\n\n/**\n * A caught fault on this door, reported as well as logged (AGL-1921).\n *\n * `onRequestError` sees only an UNCAUGHT throw, and the Vercel log drain\n * forwards the status line but not a `console.error`, so the three 500s\n * this route answered on 2026-10-06 at 17:41–17:47Z reached the alert as\n * START/END/REPORT with no reason anywhere. Never throws.\n */\nasync function reportJobFault(what: string, error: unknown): Promise<void> {\n  try {\n    await reportServerError(\n      {\n        message: `${what}: ${error instanceof Error ? error.message : String(error)}`,\n        stack: error instanceof Error ? error.stack : undefined,\n        route: '/api/ai/jobs',\n        routeType: 'route',\n        method: 'POST',\n      },\n      { service: 'console-web' },\n    )\n  } catch {\n    // The console line beside each call is the record of last resort.\n  }\n}\n\n/**\n * AI generation jobs: create and list (AGL-2904).\n *\n * `POST` is a door that spends, so it climbs the whole ladder (AGL-2903) —\n * `aiGenerative`, `release_ai_generative`, the `ai-generate` switch, a\n * per-uid window, and a reservation — and then creates the job and runs\n * its first step INLINE under `AI_JOB_INLINE_BUDGET_MS`. A step that\n * finishes in time answers with the job `done` (or `queued` behind its\n * next step); one that does not is aborted, its reservation handed back,\n * and the job answers `queued` for the beat to resume. Either way the\n * caller gets the job document, and the events route is how it watches\n * from there.\n *\n * `POST` with `check: true` climbs the same ladder and asks the same\n * admission, then hands the reservation back and creates nothing: a 200\n * with `ok` true, or the refusal the create would have answered. \"Create site\"\n * asks it before it makes the site a guided start builds on (AGL-3859), so\n * a start that would be refused, or that asks for the Free go-ahead, leaves\n * no empty site behind. A checked job may name no site yet.\n *\n * `GET` lists the org's jobs, newest first, through the read gate: the\n * same rungs up to the lockdown verdict, no reservation. A job naming a\n * site that no longer exists is left out, so a page can come back shorter\n * than its `limit`.\n *\n * The request must NAME the org it is metered against (AGL-1934). There\n * is no fallback to \"the caller's first org\".\n */\n\nconst AI_JOBS_RATE_LIMIT = { key: 'ai-jobs', limit: 10, windowMs: 60_000 }\n\n/** Kind-specific inputs, bounded: a runner reads scalars, not a document. */\nconst MAX_INPUTS_JSON_CHARS = 8_000\n\n/** The admitted statuses for the list filter, as the union spells them. */\nconst AI_JOB_STATUSES: readonly AiJobStatus[] = [\n  'queued',\n  'running',\n  'needs_input',\n  'needs_review',\n  'done',\n  'failed',\n  'canceled',\n]\n\nexport interface CreateAiJobBody {\n  orgId: string\n  hostId: string | null\n  kind: AiJobKind\n  brief: string\n  inputs: Record<string, string | number | boolean>\n  /** A catalog model the creator picked (AGL-2942), or `null` for Auto. */\n  model: string | null\n}\n\nconst ID_CHARS = /^[A-Za-z0-9_-]{1,100}$/\n\n/** The longest model id a body may carry; the catalog's ids are far shorter. */\nconst MAX_MODEL_CHARS = 100\n\n/** Validate + clamp the request body; a string names what is wrong. */\nexport function parseCreateAiJobBody(payload: unknown): CreateAiJobBody | string {\n  const body = (payload ?? {}) as Record<string, unknown>\n  const orgId = String(body.orgId ?? '').trim()\n  if (!orgId) return 'Open a workspace before using this feature'\n  const kind = String(body.kind ?? '')\n  if (!(AI_JOB_KINDS as readonly string[]).includes(kind)) {\n    return `kind must be one of ${AI_JOB_KINDS.join(', ')}`\n  }\n  const brief = String(body.brief ?? '').trim()\n  if (!brief) return 'Write a brief for the job'\n  if (brief.length > AI_JOB_BRIEF_MAX_CHARS) {\n    return `Keep the brief under ${AI_JOB_BRIEF_MAX_CHARS.toLocaleString('en-US')} characters`\n  }\n  const rawHost = body.hostId\n  const hostId =\n    rawHost === undefined || rawHost === null || rawHost === ''\n      ? null\n      : typeof rawHost === 'string' && ID_CHARS.test(rawHost)\n        ? rawHost\n        : undefined\n  if (hostId === undefined) return 'hostId is not a site id'\n  // A theme is fields on one site's document, so a theme job that names no\n  // site has nothing to propose a change to (AGL-2938).\n  if (kind === 'theme' && !hostId) return 'Open a site before changing its theme'\n  const rawInputs = body.inputs\n  const inputs: Record<string, string | number | boolean> = {}\n  if (rawInputs !== undefined && rawInputs !== null) {\n    if (typeof rawInputs !== 'object' || Array.isArray(rawInputs)) {\n      return 'inputs must be an object'\n    }\n    for (const [key, value] of Object.entries(rawInputs as Record<string, unknown>)) {\n      if (\n        typeof value !== 'string' &&\n        typeof value !== 'number' &&\n        typeof value !== 'boolean'\n      ) {\n        return `inputs.${key} must be a string, number or boolean`\n      }\n      inputs[key] = value\n    }\n    if (JSON.stringify(inputs).length > MAX_INPUTS_JSON_CHARS) {\n      return 'inputs are too large'\n    }\n  }\n  const rawModel = typeof body.model === 'string' ? body.model.trim() : ''\n  if (rawModel.length > MAX_MODEL_CHARS) return 'model is not a model id'\n  // Validated against the plan and the allotment allowlists when each step\n  // runs, not here: the allowlists are read inside the step's reservation.\n  const model = rawModel && rawModel !== 'auto' ? rawModel : null\n  return { orgId, hostId, kind: kind as AiJobKind, brief, inputs, model }\n}\n\nexport async function POST(request: Request): Promise<Response> {\n  let payload: unknown\n  try {\n    payload = await request.json()\n  } catch {\n    payload = null\n  }\n  const parsed = parseCreateAiJobBody(payload)\n  // The org is parsed BEFORE the ladder so a request that named none is\n  // refused with the ladder's 400 rather than a shape error; every other\n  // shape fault waits until the caller has proven who they are.\n  const orgId = typeof parsed === 'string' ? String((payload as Record<string, unknown> | null)?.orgId ?? '') : parsed.orgId\n  // The site rides along for the same reason: a collaborator's `ai.generate`\n  // is decided per site (AGL-2927), so the ladder needs it before it can say\n  // whether this member may generate here at all.\n  const hostId = typeof parsed === 'string' ? null : parsed.hostId\n  const gate = await aiGateLadder(\n    { request, orgId, hostId },\n    {\n      feature: 'aiGenerative',\n      releaseFlag: 'release_ai_generative',\n      lockdownFeature: 'ai-generate',\n      permission: 'ai.generate',\n      rateLimit: AI_JOBS_RATE_LIMIT,\n    },\n  )\n  if (gate instanceof Response) return gate\n  if (typeof parsed === 'string') {\n    // Admitted, reserved, and then found to have sent nothing runnable: the\n    // reservation goes back, because no token was spent.\n    await releaseAssistMessage(gate.firestore, gate.orgId, gate.reservation).catch(\n      () => undefined,\n    )\n    return Response.json({ error: parsed }, { status: 400 })\n  }\n  // What only this kind can say about the request (AGL-2909): a site it\n  // needs, inputs it reads, an allowance its draft counts against. Asked\n  // before the job exists, so a refusal spends nothing.\n  let refusal: Awaited<ReturnType<typeof aiJobAdmissionRefusal>>\n  // A Free start past what is left, which the person chose to build as far as\n  // it goes (AGL-3722): the prompt they confirmed, kept on the job.\n  let confirmedCredits: AiCreditsPrompt | null = null\n  // Asked before the site exists (AGL-3859): answers, creates nothing.\n  const check = (payload as Record<string, unknown> | null)?.['check'] === true\n  try {\n    // A site that switched AI off first (AGL-3028), then the kind's own check.\n    refusal =\n      (await aiJobSiteRefusal({\n        firestore: gate.firestore,\n        org: gate.org,\n        hostId: parsed.hostId,\n      })) ??\n      (await aiJobAdmissionRefusal(parsed.kind, {\n        firestore: gate.firestore,\n        orgId: gate.orgId,\n        hostId: parsed.hostId,\n        siteToCome: check && !parsed.hostId,\n        inputs: parsed.inputs,\n        org: gate.org,\n        uid: gate.uid,\n        creditsConfirmed: (payload as Record<string, unknown> | null)?.['creditsConfirmed'] === true,\n        onCreditsConfirmed: (prompt) => {\n          confirmedCredits = prompt\n        },\n      }))\n  } catch (error) {\n    await releaseAssistMessage(gate.firestore, gate.orgId, gate.reservation).catch(\n      () => undefined,\n    )\n    console.error('ai job admission failed', { orgId: gate.orgId, kind: parsed.kind, error })\n    await reportJobFault('ai job admission failed', error)\n    return Response.json({ error: 'The AI job could not be created' }, { status: 500 })\n  }\n  if (refusal) {\n    await releaseAssistMessage(gate.firestore, gate.orgId, gate.reservation).catch(\n      () => undefined,\n    )\n    // A Free start past what is left asks before it starts (AGL-3722): the\n    // prompt rides the 409, so the dialog offers its choices.\n    return Response.json(\n      { error: refusal.error, ...(refusal.code ? { code: refusal.code } : {}), ...(refusal.credits ? { credits: refusal.credits } : {}) },\n      { status: refusal.status },\n    )\n  }\n  if (check) {\n    // Admitted, and nothing to run: the reservation goes back.\n    await releaseAssistMessage(gate.firestore, gate.orgId, gate.reservation).catch(\n      () => undefined,\n    )\n    return Response.json({ ok: true }, { status: 200 })\n  }\n\n  const now = new Date()\n  let created: Awaited<ReturnType<typeof createAiJob>>\n  try {\n    // The guided start's own plan confirmation (AGL-3594), kept only for a\n    // site job on a site that has published nothing of the owner's yet.\n    const inputs = await aiJobAdmittedInputs(gate.firestore, {\n      kind: parsed.kind,\n      hostId: parsed.hostId,\n      inputs: parsed.inputs,\n    })\n    created = await createAiJob(\n      gate.firestore,\n      {\n        orgId: gate.orgId,\n        hostId: parsed.hostId,\n        kind: parsed.kind,\n        brief: parsed.brief,\n        inputs,\n        model: parsed.model,\n        createdBy: gate.uid,\n        createdByEmail: gate.decoded.email ?? null,\n        creditsConfirmed: aiCreditsConfirmation(confirmedCredits, gate.uid, now),\n      },\n      now,\n    )\n  } catch (error) {\n    await releaseAssistMessage(gate.firestore, gate.orgId, gate.reservation).catch(\n      () => undefined,\n    )\n    console.error('ai job create failed', { orgId: gate.orgId, error })\n    await reportJobFault('ai job create failed', error)\n    return Response.json({ error: 'The AI job could not be created' }, { status: 500 })\n  }\n  const jobId = created.$id\n\n  // A first step that needs more time than this request has (AGL-2907) is left\n  // queued for the beat, which starts it with a budget of its own: a provider\n  // call this request's timeout cut off would be billed upstream and metered\n  // nowhere. Nothing ran, so the reservation goes back.\n  if (aiJobNextStepMinimumMs(created) > AI_JOB_INLINE_BUDGET_MS) {\n    await releaseAssistMessage(gate.firestore, gate.orgId, gate.reservation).catch(\n      () => undefined,\n    )\n    return Response.json(\n      {\n        job: aiJobSummary(created, now),\n        meter: aiUsageMeter(gate.reservation, { lastCredits: null }),\n      },\n      { status: 200 },\n    )\n  }\n\n  // The first step, inline, on the reservation the ladder already holds.\n  // The runner hands that reservation back itself if the provider is never\n  // reached, and re-queues the step when the budget ends first.\n  const run = await runAiJobStep(gate.firestore, gate.orgId, jobId, {\n    owner: `route:${randomUUID()}`,\n    now,\n    reservation: gate.reservation,\n    org: gate.org,\n    signal: AbortSignal.timeout(AI_JOB_INLINE_BUDGET_MS),\n    // The caller is on the request, so what the inline step produces is\n    // attributed with their address; the beat's steps carry the uid alone.\n    actor: { uid: gate.uid, email: gate.decoded.email ?? null },\n    // The workspace's AI pause lets staff through, as the ladder above did.\n    staff: gate.staff,\n  })\n  if (run.outcome === 'not-claimable') {\n    // A job created a moment ago has a claimable first step; anything else\n    // is a fault in the machine, and the reservation must not be stranded.\n    await releaseAssistMessage(gate.firestore, gate.orgId, gate.reservation).catch(\n      () => undefined,\n    )\n    console.error('ai job first step not claimable', { orgId: gate.orgId, jobId })\n    await reportJobFault('ai job first step not claimable', new Error(`job ${jobId}`))\n    return Response.json({ error: 'The AI job could not be started' }, { status: 500 })\n  }\n  return Response.json(\n    {\n      job: aiJobSummary(run.job),\n      // The usage strip's envelope (AGL-2942): the reservation the ladder\n      // took, with what the inline step spent.\n      meter: aiUsageMeter(gate.reservation, {\n        lastCredits: run.job.creditsSpent > 0 ? run.job.creditsSpent : null,\n      }),\n    },\n    { status: 200 },\n  )\n}\n\nexport async function GET(request: Request): Promise<Response> {\n  const url = new URL(request.url)\n  const gate = await aiJobsGate(request, url.searchParams.get('orgId') ?? '')\n  if (gate instanceof Response) return gate\n  const rawStatus = url.searchParams.get('status') ?? ''\n  const status = (AI_JOB_STATUSES as readonly string[]).includes(rawStatus)\n    ? (rawStatus as AiJobStatus)\n    : undefined\n  // `active` (AGL-3593): every job not yet settled, which is what the\n  // console's top-bar indicator and the Assist launcher count.\n  const active = rawStatus === 'active'\n  const limit = Number(url.searchParams.get('limit') ?? '')\n  // `hostId` (AGL-3596): one site's jobs, for the site's AI jobs page — a\n  // query on the field under the (hostId, createdAt) index, never a filter\n  // of a loaded window. An id that is not one is refused rather than ignored,\n  // which would answer with every site's jobs.\n  const rawHost = url.searchParams.get('hostId')\n  if (rawHost !== null && !ID_CHARS.test(rawHost)) {\n    return Response.json({ error: 'hostId is not a site id' }, { status: 400 })\n  }\n  const now = new Date()\n  // A job naming a site that has been deleted is not listed (AGL-3596), so\n  // no surface counts or shows work on a site nobody can open.\n  const jobs = await withoutErasedSites(\n    gate.firestore,\n    await listAiJobs(gate.firestore, gate.orgId, {\n      ...(status ? { status } : {}),\n      ...(active ? { statuses: AI_JOB_ACTIVE_STATUSES } : {}),\n      ...(rawHost ? { hostId: rawHost } : {}),\n      ...(Number.isFinite(limit) && limit > 0 ? { limit } : {}),\n    }),\n  )\n  const freeTaste = resolveEffectivePlan(gate.org as never) === 'free'\n  // What the Free workspace has left this month (AGL-3660): the less of its\n  // own band and its owner's allowance across their Free workspaces, which is\n  // what the steps' reservations refuse at — never the 300 a month starts with.\n  const freeCredits = freeTaste\n    ? await readFreeAiCreditsLeft(gate.firestore, { orgId: gate.orgId, org: gate.org as object | null, now })\n    : null\n  return Response.json(\n    {\n      jobs: jobs.map((job) => aiJobSummary(job, now)),\n      // Whether the workspace spends the Free taste (AGL-3594), so the guided\n      // start offers the Free page band from the request it already makes.\n      freeTaste,\n      ...(freeCredits ? { freeCredits } : {}),\n    },\n    { status: 200, headers: { 'Cache-Control': 'no-store' } },\n  )\n}\n\nexport const dynamic = 'force-dynamic'\nexport const maxDuration = 60\n"],"names":["randomUUID","resolveEffectivePlan","AI_JOB_KINDS","aiGateLadder","aiJobAdmissionRefusal","aiJobSiteRefusal","AI_JOB_BRIEF_MAX_CHARS","aiJobAdmittedInputs","AI_JOB_INLINE_BUDGET_MS","aiJobNextStepMinimumMs","aiJobSummary","createAiJob","listAiJobs","runAiJobStep","releaseAssistMessage","readFreeAiCreditsLeft","aiCreditsConfirmation","aiUsageMeter","aiJobsGate","withoutErasedSites","AI_JOB_ACTIVE_STATUSES","reportServerError","reportJobFault","what","error","message","Error","String","stack","undefined","route","routeType","method","service","AI_JOBS_RATE_LIMIT","key","limit","windowMs","MAX_INPUTS_JSON_CHARS","AI_JOB_STATUSES","ID_CHARS","MAX_MODEL_CHARS","parseCreateAiJobBody","payload","body","orgId","trim","kind","includes","join","brief","length","toLocaleString","rawHost","hostId","test","rawInputs","inputs","Array","isArray","value","Object","entries","JSON","stringify","rawModel","model","POST","request","gate","json","parsed","feature","releaseFlag","lockdownFeature","permission","rateLimit","Response","firestore","reservation","catch","status","refusal","confirmedCredits","check","org","siteToCome","uid","creditsConfirmed","onCreditsConfirmed","prompt","console","code","credits","ok","now","Date","created","createdBy","createdByEmail","decoded","email","jobId","$id","job","meter","lastCredits","run","owner","signal","AbortSignal","timeout","actor","staff","outcome","creditsSpent","GET","url","URL","searchParams","get","rawStatus","active","Number","jobs","statuses","isFinite","freeTaste","freeCredits","map","headers","dynamic","maxDuration"],"mappings":";AAAA;;;;;;;;;;;;;;;CAeC,GAED,+DAA+D;AAC/D,0EAA0E;AAC1E,6DAA6D;AAE7D,SAASA,UAAU,QAAQ,SAAQ;AACnC,SAASC,oBAAoB,QAAQ,2CAA0C;AAC/E,SACEC,YAAY,QAGP,4BAAwB;AAC/B,yEAAyE;AACzE,4EAA4E;AAC5E,iEAAiE;AACjE,SAASC,YAAY,QAAQ,wBAAoB;AACjD,SAASC,qBAAqB,EAAEC,gBAAgB,QAAQ,8BAA0B;AAClF,SAASC,sBAAsB,QAAQ,8BAA0B;AACjE,SAASC,mBAAmB,QAAQ,iCAA6B;AACjE,SACEC,uBAAuB,EACvBC,sBAAsB,EACtBC,YAAY,EACZC,WAAW,EACXC,UAAU,EACVC,YAAY,QACP,qBAAiB;AACxB,SAASC,oBAAoB,QAAQ,2BAAuB;AAC5D,SAASC,qBAAqB,QAAQ,mCAA+B;AACrE,SAASC,qBAAqB,QAA8B,iCAA6B;AACzF,SAASC,YAAY,QAAQ,6BAAyB;AACtD,SAASC,UAAU,QAAQ,oBAAgB;AAC3C,SAASC,kBAAkB,QAAQ,0BAAsB;AACzD,SAASC,sBAAsB,QAAQ,8BAA0B;AACjE,SAASC,iBAAiB,QAAQ,sDAAqD;AAEvF;;;;;;;CAOC,GACD,eAAeC,eAAeC,IAAY,EAAEC,KAAc;IACxD,IAAI;QACF,MAAMH,kBACJ;YACEI,SAAS,GAAGF,KAAK,EAAE,EAAEC,iBAAiBE,QAAQF,MAAMC,OAAO,GAAGE,OAAOH,QAAQ;YAC7EI,OAAOJ,iBAAiBE,QAAQF,MAAMI,KAAK,GAAGC;YAC9CC,OAAO;YACPC,WAAW;YACXC,QAAQ;QACV,GACA;YAAEC,SAAS;QAAc;IAE7B,EAAE,eAAM;IACN,kEAAkE;IACpE;AACF;AAEA;;;;;;;;;;;;;;;;;;;;;;;;;;;CA2BC,GAED,MAAMC,qBAAqB;IAAEC,KAAK;IAAWC,OAAO;IAAIC,UAAU;AAAO;AAEzE,2EAA2E,GAC3E,MAAMC,wBAAwB;AAE9B,yEAAyE,GACzE,MAAMC,kBAA0C;IAC9C;IACA;IACA;IACA;IACA;IACA;IACA;CACD;AAYD,MAAMC,WAAW;AAEjB,8EAA8E,GAC9E,MAAMC,kBAAkB;AAExB,qEAAqE,GACrE,OAAO,SAASC,qBAAqBC,OAAgB;QAE9BC,aAEDA,YAICA;IAPrB,MAAMA,OAAQD,kBAAAA,UAAW,CAAC;IAC1B,MAAME,QAAQlB,QAAOiB,cAAAA,KAAKC,KAAK,YAAVD,cAAc,IAAIE,IAAI;IAC3C,IAAI,CAACD,OAAO,OAAO;IACnB,MAAME,OAAOpB,QAAOiB,aAAAA,KAAKG,IAAI,YAATH,aAAa;IACjC,IAAI,CAAC,AAAC1C,aAAmC8C,QAAQ,CAACD,OAAO;QACvD,OAAO,CAAC,oBAAoB,EAAE7C,aAAa+C,IAAI,CAAC,OAAO;IACzD;IACA,MAAMC,QAAQvB,QAAOiB,cAAAA,KAAKM,KAAK,YAAVN,cAAc,IAAIE,IAAI;IAC3C,IAAI,CAACI,OAAO,OAAO;IACnB,IAAIA,MAAMC,MAAM,GAAG7C,wBAAwB;QACzC,OAAO,CAAC,qBAAqB,EAAEA,uBAAuB8C,cAAc,CAAC,SAAS,WAAW,CAAC;IAC5F;IACA,MAAMC,UAAUT,KAAKU,MAAM;IAC3B,MAAMA,SACJD,YAAYxB,aAAawB,YAAY,QAAQA,YAAY,KACrD,OACA,OAAOA,YAAY,YAAYb,SAASe,IAAI,CAACF,WAC3CA,UACAxB;IACR,IAAIyB,WAAWzB,WAAW,OAAO;IACjC,yEAAyE;IACzE,sDAAsD;IACtD,IAAIkB,SAAS,WAAW,CAACO,QAAQ,OAAO;IACxC,MAAME,YAAYZ,KAAKa,MAAM;IAC7B,MAAMA,SAAoD,CAAC;IAC3D,IAAID,cAAc3B,aAAa2B,cAAc,MAAM;QACjD,IAAI,OAAOA,cAAc,YAAYE,MAAMC,OAAO,CAACH,YAAY;YAC7D,OAAO;QACT;QACA,KAAK,MAAM,CAACrB,KAAKyB,MAAM,IAAIC,OAAOC,OAAO,CAACN,WAAuC;YAC/E,IACE,OAAOI,UAAU,YACjB,OAAOA,UAAU,YACjB,OAAOA,UAAU,WACjB;gBACA,OAAO,CAAC,OAAO,EAAEzB,IAAI,oCAAoC,CAAC;YAC5D;YACAsB,MAAM,CAACtB,IAAI,GAAGyB;QAChB;QACA,IAAIG,KAAKC,SAAS,CAACP,QAAQN,MAAM,GAAGb,uBAAuB;YACzD,OAAO;QACT;IACF;IACA,MAAM2B,WAAW,OAAOrB,KAAKsB,KAAK,KAAK,WAAWtB,KAAKsB,KAAK,CAACpB,IAAI,KAAK;IACtE,IAAImB,SAASd,MAAM,GAAGV,iBAAiB,OAAO;IAC9C,yEAAyE;IACzE,yEAAyE;IACzE,MAAMyB,QAAQD,YAAYA,aAAa,SAASA,WAAW;IAC3D,OAAO;QAAEpB;QAAOS;QAAQP,MAAMA;QAAmBG;QAAOO;QAAQS;IAAM;AACxE;AAEA,OAAO,eAAeC,KAAKC,OAAgB;cA2JRC;IA1JjC,IAAI1B;IACJ,IAAI;QACFA,UAAU,MAAMyB,QAAQE,IAAI;IAC9B,EAAE,eAAM;QACN3B,UAAU;IACZ;IACA,MAAM4B,SAAS7B,qBAAqBC;IACpC,sEAAsE;IACtE,uEAAuE;IACvE,8DAA8D;IAC9D,MAAME,QAAQ,OAAO0B,WAAW,WAAW5C,eAAQgB,2BAAD,AAACA,QAA4CE,KAAK,mBAAI,MAAM0B,OAAO1B,KAAK;IAC1H,2EAA2E;IAC3E,2EAA2E;IAC3E,gDAAgD;IAChD,MAAMS,SAAS,OAAOiB,WAAW,WAAW,OAAOA,OAAOjB,MAAM;IAChE,MAAMe,OAAO,MAAMlE,aACjB;QAAEiE;QAASvB;QAAOS;IAAO,GACzB;QACEkB,SAAS;QACTC,aAAa;QACbC,iBAAiB;QACjBC,YAAY;QACZC,WAAW1C;IACb;IAEF,IAAImC,gBAAgBQ,UAAU,OAAOR;IACrC,IAAI,OAAOE,WAAW,UAAU;QAC9B,wEAAwE;QACxE,qDAAqD;QACrD,MAAMzD,qBAAqBuD,KAAKS,SAAS,EAAET,KAAKxB,KAAK,EAAEwB,KAAKU,WAAW,EAAEC,KAAK,CAC5E,IAAMnD;QAER,OAAOgD,SAASP,IAAI,CAAC;YAAE9C,OAAO+C;QAAO,GAAG;YAAEU,QAAQ;QAAI;IACxD;IACA,sEAAsE;IACtE,uEAAuE;IACvE,sDAAsD;IACtD,IAAIC;IACJ,4EAA4E;IAC5E,kEAAkE;IAClE,IAAIC,mBAA2C;IAC/C,qEAAqE;IACrE,MAAMC,QAAQ,CAACzC,2BAAD,AAACA,OAA4C,CAAC,QAAQ,MAAK;IACzE,IAAI;YAGC;QAFH,2EAA2E;QAC3EuC,WACG,QAAA,MAAM7E,iBAAiB;YACtByE,WAAWT,KAAKS,SAAS;YACzBO,KAAKhB,KAAKgB,GAAG;YACb/B,QAAQiB,OAAOjB,MAAM;QACvB,cAJC,QAKA,MAAMlD,sBAAsBmE,OAAOxB,IAAI,EAAE;YACxC+B,WAAWT,KAAKS,SAAS;YACzBjC,OAAOwB,KAAKxB,KAAK;YACjBS,QAAQiB,OAAOjB,MAAM;YACrBgC,YAAYF,SAAS,CAACb,OAAOjB,MAAM;YACnCG,QAAQc,OAAOd,MAAM;YACrB4B,KAAKhB,KAAKgB,GAAG;YACbE,KAAKlB,KAAKkB,GAAG;YACbC,kBAAkB,CAAC7C,2BAAD,AAACA,OAA4C,CAAC,mBAAmB,MAAK;YACxF8C,oBAAoB,CAACC;gBACnBP,mBAAmBO;YACrB;QACF;IACJ,EAAE,OAAOlE,OAAO;QACd,MAAMV,qBAAqBuD,KAAKS,SAAS,EAAET,KAAKxB,KAAK,EAAEwB,KAAKU,WAAW,EAAEC,KAAK,CAC5E,IAAMnD;QAER8D,QAAQnE,KAAK,CAAC,2BAA2B;YAAEqB,OAAOwB,KAAKxB,KAAK;YAAEE,MAAMwB,OAAOxB,IAAI;YAAEvB;QAAM;QACvF,MAAMF,eAAe,2BAA2BE;QAChD,OAAOqD,SAASP,IAAI,CAAC;YAAE9C,OAAO;QAAkC,GAAG;YAAEyD,QAAQ;QAAI;IACnF;IACA,IAAIC,SAAS;QACX,MAAMpE,qBAAqBuD,KAAKS,SAAS,EAAET,KAAKxB,KAAK,EAAEwB,KAAKU,WAAW,EAAEC,KAAK,CAC5E,IAAMnD;QAER,uEAAuE;QACvE,0DAA0D;QAC1D,OAAOgD,SAASP,IAAI,CAClB;YAAE9C,OAAO0D,QAAQ1D,KAAK;WAAM0D,QAAQU,IAAI,GAAG;YAAEA,MAAMV,QAAQU,IAAI;QAAC,IAAI,CAAC,GAAQV,QAAQW,OAAO,GAAG;YAAEA,SAASX,QAAQW,OAAO;QAAC,IAAI,CAAC,IAC/H;YAAEZ,QAAQC,QAAQD,MAAM;QAAC;IAE7B;IACA,IAAIG,OAAO;QACT,2DAA2D;QAC3D,MAAMtE,qBAAqBuD,KAAKS,SAAS,EAAET,KAAKxB,KAAK,EAAEwB,KAAKU,WAAW,EAAEC,KAAK,CAC5E,IAAMnD;QAER,OAAOgD,SAASP,IAAI,CAAC;YAAEwB,IAAI;QAAK,GAAG;YAAEb,QAAQ;QAAI;IACnD;IAEA,MAAMc,MAAM,IAAIC;IAChB,IAAIC;IACJ,IAAI;YAkBkB5B;QAjBpB,uEAAuE;QACvE,oEAAoE;QACpE,MAAMZ,SAAS,MAAMlD,oBAAoB8D,KAAKS,SAAS,EAAE;YACvD/B,MAAMwB,OAAOxB,IAAI;YACjBO,QAAQiB,OAAOjB,MAAM;YACrBG,QAAQc,OAAOd,MAAM;QACvB;QACAwC,UAAU,MAAMtF,YACd0D,KAAKS,SAAS,EACd;YACEjC,OAAOwB,KAAKxB,KAAK;YACjBS,QAAQiB,OAAOjB,MAAM;YACrBP,MAAMwB,OAAOxB,IAAI;YACjBG,OAAOqB,OAAOrB,KAAK;YACnBO;YACAS,OAAOK,OAAOL,KAAK;YACnBgC,WAAW7B,KAAKkB,GAAG;YACnBY,cAAc,GAAE9B,uBAAAA,KAAK+B,OAAO,CAACC,KAAK,YAAlBhC,uBAAsB;YACtCmB,kBAAkBxE,sBAAsBmE,kBAAkBd,KAAKkB,GAAG,EAAEQ;QACtE,GACAA;IAEJ,EAAE,OAAOvE,OAAO;QACd,MAAMV,qBAAqBuD,KAAKS,SAAS,EAAET,KAAKxB,KAAK,EAAEwB,KAAKU,WAAW,EAAEC,KAAK,CAC5E,IAAMnD;QAER8D,QAAQnE,KAAK,CAAC,wBAAwB;YAAEqB,OAAOwB,KAAKxB,KAAK;YAAErB;QAAM;QACjE,MAAMF,eAAe,wBAAwBE;QAC7C,OAAOqD,SAASP,IAAI,CAAC;YAAE9C,OAAO;QAAkC,GAAG;YAAEyD,QAAQ;QAAI;IACnF;IACA,MAAMqB,QAAQL,QAAQM,GAAG;IAEzB,6EAA6E;IAC7E,4EAA4E;IAC5E,2EAA2E;IAC3E,sDAAsD;IACtD,IAAI9F,uBAAuBwF,WAAWzF,yBAAyB;QAC7D,MAAMM,qBAAqBuD,KAAKS,SAAS,EAAET,KAAKxB,KAAK,EAAEwB,KAAKU,WAAW,EAAEC,KAAK,CAC5E,IAAMnD;QAER,OAAOgD,SAASP,IAAI,CAClB;YACEkC,KAAK9F,aAAauF,SAASF;YAC3BU,OAAOxF,aAAaoD,KAAKU,WAAW,EAAE;gBAAE2B,aAAa;YAAK;QAC5D,GACA;YAAEzB,QAAQ;QAAI;IAElB;IAEA,uEAAuE;IACvE,yEAAyE;IACzE,8DAA8D;IAC9D,MAAM0B,MAAM,MAAM9F,aAAawD,KAAKS,SAAS,EAAET,KAAKxB,KAAK,EAAEyD,OAAO;QAChEM,OAAO,CAAC,MAAM,EAAE5G,cAAc;QAC9B+F;QACAhB,aAAaV,KAAKU,WAAW;QAC7BM,KAAKhB,KAAKgB,GAAG;QACbwB,QAAQC,YAAYC,OAAO,CAACvG;QAC5B,oEAAoE;QACpE,uEAAuE;QACvEwG,OAAO;YAAEzB,KAAKlB,KAAKkB,GAAG;YAAEc,KAAK,GAAEhC,sBAAAA,KAAK+B,OAAO,CAACC,KAAK,YAAlBhC,sBAAsB;QAAK;QAC1D,wEAAwE;QACxE4C,OAAO5C,KAAK4C,KAAK;IACnB;IACA,IAAIN,IAAIO,OAAO,KAAK,iBAAiB;QACnC,uEAAuE;QACvE,uEAAuE;QACvE,MAAMpG,qBAAqBuD,KAAKS,SAAS,EAAET,KAAKxB,KAAK,EAAEwB,KAAKU,WAAW,EAAEC,KAAK,CAC5E,IAAMnD;QAER8D,QAAQnE,KAAK,CAAC,mCAAmC;YAAEqB,OAAOwB,KAAKxB,KAAK;YAAEyD;QAAM;QAC5E,MAAMhF,eAAe,mCAAmC,IAAII,MAAM,CAAC,IAAI,EAAE4E,OAAO;QAChF,OAAOzB,SAASP,IAAI,CAAC;YAAE9C,OAAO;QAAkC,GAAG;YAAEyD,QAAQ;QAAI;IACnF;IACA,OAAOJ,SAASP,IAAI,CAClB;QACEkC,KAAK9F,aAAaiG,IAAIH,GAAG;QACzB,oEAAoE;QACpE,yCAAyC;QACzCC,OAAOxF,aAAaoD,KAAKU,WAAW,EAAE;YACpC2B,aAAaC,IAAIH,GAAG,CAACW,YAAY,GAAG,IAAIR,IAAIH,GAAG,CAACW,YAAY,GAAG;QACjE;IACF,GACA;QAAElC,QAAQ;IAAI;AAElB;AAEA,OAAO,eAAemC,IAAIhD,OAAgB;QAEDiD,uBAErBA,wBAOGA;IAVrB,MAAMA,MAAM,IAAIC,IAAIlD,QAAQiD,GAAG;IAC/B,MAAMhD,OAAO,MAAMnD,WAAWkD,UAASiD,wBAAAA,IAAIE,YAAY,CAACC,GAAG,CAAC,oBAArBH,wBAAiC;IACxE,IAAIhD,gBAAgBQ,UAAU,OAAOR;IACrC,MAAMoD,aAAYJ,yBAAAA,IAAIE,YAAY,CAACC,GAAG,CAAC,qBAArBH,yBAAkC;IACpD,MAAMpC,SAAS,AAAC1C,gBAAsCS,QAAQ,CAACyE,aAC1DA,YACD5F;IACJ,oEAAoE;IACpE,6DAA6D;IAC7D,MAAM6F,SAASD,cAAc;IAC7B,MAAMrF,QAAQuF,QAAON,yBAAAA,IAAIE,YAAY,CAACC,GAAG,CAAC,oBAArBH,yBAAiC;IACtD,wEAAwE;IACxE,yEAAyE;IACzE,4EAA4E;IAC5E,6CAA6C;IAC7C,MAAMhE,UAAUgE,IAAIE,YAAY,CAACC,GAAG,CAAC;IACrC,IAAInE,YAAY,QAAQ,CAACb,SAASe,IAAI,CAACF,UAAU;QAC/C,OAAOwB,SAASP,IAAI,CAAC;YAAE9C,OAAO;QAA0B,GAAG;YAAEyD,QAAQ;QAAI;IAC3E;IACA,MAAMc,MAAM,IAAIC;IAChB,yEAAyE;IACzE,6DAA6D;IAC7D,MAAM4B,OAAO,MAAMzG,mBACjBkD,KAAKS,SAAS,EACd,MAAMlE,WAAWyD,KAAKS,SAAS,EAAET,KAAKxB,KAAK,EAAE,aACvCoC,SAAS;QAAEA;IAAO,IAAI,CAAC,GACvByC,SAAS;QAAEG,UAAUzG;IAAuB,IAAI,CAAC,GACjDiC,UAAU;QAAEC,QAAQD;IAAQ,IAAI,CAAC,GACjCsE,OAAOG,QAAQ,CAAC1F,UAAUA,QAAQ,IAAI;QAAEA;IAAM,IAAI,CAAC;IAG3D,MAAM2F,YAAY9H,qBAAqBoE,KAAKgB,GAAG,MAAe;IAC9D,0EAA0E;IAC1E,4EAA4E;IAC5E,8EAA8E;IAC9E,MAAM2C,cAAcD,YAChB,MAAMhH,sBAAsBsD,KAAKS,SAAS,EAAE;QAAEjC,OAAOwB,KAAKxB,KAAK;QAAEwC,KAAKhB,KAAKgB,GAAG;QAAmBU;IAAI,KACrG;IACJ,OAAOlB,SAASP,IAAI,CAClB;QACEsD,MAAMA,KAAKK,GAAG,CAAC,CAACzB,MAAQ9F,aAAa8F,KAAKT;QAC1C,wEAAwE;QACxE,qEAAqE;QACrEgC;OACIC,cAAc;QAAEA;IAAY,IAAI,CAAC,IAEvC;QAAE/C,QAAQ;QAAKiD,SAAS;YAAE,iBAAiB;QAAW;IAAE;AAE5D;AAEA,OAAO,MAAMC,UAAU,gBAAe;AACtC,OAAO,MAAMC,cAAc,GAAE"}
+{"version":3,"sources":["../../../../../../../libs/plugins/ai/src/lib/server/ai-jobs-route.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n// lockdown-423: via libs/plugins/ai/src/lib/runtime/ai-gate.ts\n// The POST climbs `aiGateLadder`, whose lockdown rung is the verdict; the\n// GET climbs `ai-jobs-gate.ts`, which carries the same rung.\n\nimport { randomUUID } from 'crypto'\nimport { resolveEffectivePlan } from '@aglyn/aglyn/app-utils/plan-entitlements'\nimport {\n  AI_JOB_KINDS,\n  type AiJobKind,\n  type AiJobStatus,\n} from '../model/ai-jobs.types'\n// By their own entry points rather than the barrel (AGL-2903): the specs\n// stub the barrel closed-world, and the ladder, the machine and the runtime\n// are the things under test here, not things to be stubbed away.\nimport { aiGateLadder } from '../runtime/ai-gate'\nimport { aiJobAdmissionRefusal, aiJobSiteRefusal } from '../jobs/ai-job-admission'\nimport { AI_JOB_BRIEF_MAX_CHARS } from '../jobs/ai-job-text-step'\nimport { aiJobAdmittedInputs } from '../jobs/ai-job-auto-confirm'\nimport {\n  AI_JOB_INLINE_BUDGET_MS,\n  aiJobNextStepMinimumMs,\n  aiJobSummary,\n  createAiJob,\n  listAiJobs,\n  runAiJobStep,\n} from '../jobs/ai-jobs'\nimport { releaseAssistMessage } from '../usage/assist-usage'\nimport { readFreeAiCreditsLeft } from '../usage/free-ai-credits-left'\nimport { aiCreditsConfirmation, type AiCreditsPrompt } from '../model/ai-credit-estimate'\nimport { aiUsageMeter } from '../usage/ai-usage-meter'\nimport { aiJobsGate } from './ai-jobs-gate'\nimport { siteImportOfferFor } from './ai-site-import-route'\nimport { withoutErasedSites } from './ai-jobs-live-sites'\nimport { AI_JOB_ACTIVE_STATUSES } from '../model/ai-job-activity'\nimport { reportServerError } from '@aglyn/tenant-data-admin/server/client-error-report'\nimport { isServerReleaseFlagOnForOrg } from '@aglyn/tenant-data-admin/server/release-flags'\nimport { AI_SITE_INSPIRATION_FLAG } from '../model/ai-site-inspiration'\n\n/**\n * A caught fault on this door, reported as well as logged (AGL-1921).\n *\n * `onRequestError` sees only an UNCAUGHT throw, and the Vercel log drain\n * forwards the status line but not a `console.error`, so the three 500s\n * this route answered on 2026-10-06 at 17:41–17:47Z reached the alert as\n * START/END/REPORT with no reason anywhere. Never throws.\n */\nasync function reportJobFault(what: string, error: unknown): Promise<void> {\n  try {\n    await reportServerError(\n      {\n        message: `${what}: ${error instanceof Error ? error.message : String(error)}`,\n        stack: error instanceof Error ? error.stack : undefined,\n        route: '/api/ai/jobs',\n        routeType: 'route',\n        method: 'POST',\n      },\n      { service: 'console-web' },\n    )\n  } catch {\n    // The console line beside each call is the record of last resort.\n  }\n}\n\n/**\n * AI generation jobs: create and list (AGL-2904).\n *\n * `POST` is a door that spends, so it climbs the whole ladder (AGL-2903) —\n * `aiGenerative`, `release_ai_generative`, the `ai-generate` switch, a\n * per-uid window, and a reservation — and then creates the job and runs\n * its first step INLINE under `AI_JOB_INLINE_BUDGET_MS`. A step that\n * finishes in time answers with the job `done` (or `queued` behind its\n * next step); one that does not is aborted, its reservation handed back,\n * and the job answers `queued` for the beat to resume. Either way the\n * caller gets the job document, and the events route is how it watches\n * from there.\n *\n * `POST` with `check: true` climbs the same ladder and asks the same\n * admission, then hands the reservation back and creates nothing: a 200\n * with `ok` true, or the refusal the create would have answered. \"Create site\"\n * asks it before it makes the site a guided start builds on (AGL-3859), so\n * a start that would be refused, or that asks for the Free go-ahead, leaves\n * no empty site behind. A checked job may name no site yet.\n *\n * `GET` lists the org's jobs, newest first, through the read gate: the\n * same rungs up to the lockdown verdict, no reservation. A job naming a\n * site that no longer exists is left out, so a page can come back shorter\n * than its `limit`.\n *\n * The request must NAME the org it is metered against (AGL-1934). There\n * is no fallback to \"the caller's first org\".\n */\n\nconst AI_JOBS_RATE_LIMIT = { key: 'ai-jobs', limit: 10, windowMs: 60_000 }\n\n/** Kind-specific inputs, bounded: a runner reads scalars, not a document. */\nconst MAX_INPUTS_JSON_CHARS = 8_000\n\n/** The admitted statuses for the list filter, as the union spells them. */\nconst AI_JOB_STATUSES: readonly AiJobStatus[] = [\n  'queued',\n  'running',\n  'needs_input',\n  'needs_review',\n  'done',\n  'failed',\n  'canceled',\n]\n\nexport interface CreateAiJobBody {\n  orgId: string\n  hostId: string | null\n  kind: AiJobKind\n  brief: string\n  inputs: Record<string, string | number | boolean>\n  /** A catalog model the creator picked (AGL-2942), or `null` for Auto. */\n  model: string | null\n}\n\nconst ID_CHARS = /^[A-Za-z0-9_-]{1,100}$/\n\n/** The longest model id a body may carry; the catalog's ids are far shorter. */\nconst MAX_MODEL_CHARS = 100\n\n/** Validate + clamp the request body; a string names what is wrong. */\nexport function parseCreateAiJobBody(payload: unknown): CreateAiJobBody | string {\n  const body = (payload ?? {}) as Record<string, unknown>\n  const orgId = String(body.orgId ?? '').trim()\n  if (!orgId) return 'Open a workspace before using this feature'\n  const kind = String(body.kind ?? '')\n  if (!(AI_JOB_KINDS as readonly string[]).includes(kind)) {\n    return `kind must be one of ${AI_JOB_KINDS.join(', ')}`\n  }\n  const brief = String(body.brief ?? '').trim()\n  if (!brief) return 'Write a brief for the job'\n  if (brief.length > AI_JOB_BRIEF_MAX_CHARS) {\n    return `Keep the brief under ${AI_JOB_BRIEF_MAX_CHARS.toLocaleString('en-US')} characters`\n  }\n  const rawHost = body.hostId\n  const hostId =\n    rawHost === undefined || rawHost === null || rawHost === ''\n      ? null\n      : typeof rawHost === 'string' && ID_CHARS.test(rawHost)\n        ? rawHost\n        : undefined\n  if (hostId === undefined) return 'hostId is not a site id'\n  // A theme is fields on one site's document, so a theme job that names no\n  // site has nothing to propose a change to (AGL-2938).\n  if (kind === 'theme' && !hostId) return 'Open a site before changing its theme'\n  const rawInputs = body.inputs\n  const inputs: Record<string, string | number | boolean> = {}\n  if (rawInputs !== undefined && rawInputs !== null) {\n    if (typeof rawInputs !== 'object' || Array.isArray(rawInputs)) {\n      return 'inputs must be an object'\n    }\n    for (const [key, value] of Object.entries(rawInputs as Record<string, unknown>)) {\n      if (\n        typeof value !== 'string' &&\n        typeof value !== 'number' &&\n        typeof value !== 'boolean'\n      ) {\n        return `inputs.${key} must be a string, number or boolean`\n      }\n      inputs[key] = value\n    }\n    if (JSON.stringify(inputs).length > MAX_INPUTS_JSON_CHARS) {\n      return 'inputs are too large'\n    }\n  }\n  const rawModel = typeof body.model === 'string' ? body.model.trim() : ''\n  if (rawModel.length > MAX_MODEL_CHARS) return 'model is not a model id'\n  // Validated against the plan and the allotment allowlists when each step\n  // runs, not here: the allowlists are read inside the step's reservation.\n  const model = rawModel && rawModel !== 'auto' ? rawModel : null\n  return { orgId, hostId, kind: kind as AiJobKind, brief, inputs, model }\n}\n\nexport async function POST(request: Request): Promise<Response> {\n  let payload: unknown\n  try {\n    payload = await request.json()\n  } catch {\n    payload = null\n  }\n  const parsed = parseCreateAiJobBody(payload)\n  // The org is parsed BEFORE the ladder so a request that named none is\n  // refused with the ladder's 400 rather than a shape error; every other\n  // shape fault waits until the caller has proven who they are.\n  const orgId = typeof parsed === 'string' ? String((payload as Record<string, unknown> | null)?.orgId ?? '') : parsed.orgId\n  // The site rides along for the same reason: a collaborator's `ai.generate`\n  // is decided per site (AGL-2927), so the ladder needs it before it can say\n  // whether this member may generate here at all.\n  const hostId = typeof parsed === 'string' ? null : parsed.hostId\n  const gate = await aiGateLadder(\n    { request, orgId, hostId },\n    {\n      feature: 'aiGenerative',\n      releaseFlag: 'release_ai_generative',\n      lockdownFeature: 'ai-generate',\n      permission: 'ai.generate',\n      rateLimit: AI_JOBS_RATE_LIMIT,\n    },\n  )\n  if (gate instanceof Response) return gate\n  if (typeof parsed === 'string') {\n    // Admitted, reserved, and then found to have sent nothing runnable: the\n    // reservation goes back, because no token was spent.\n    await releaseAssistMessage(gate.firestore, gate.orgId, gate.reservation).catch(\n      () => undefined,\n    )\n    return Response.json({ error: parsed }, { status: 400 })\n  }\n  // What only this kind can say about the request (AGL-2909): a site it\n  // needs, inputs it reads, an allowance its draft counts against. Asked\n  // before the job exists, so a refusal spends nothing.\n  let refusal: Awaited<ReturnType<typeof aiJobAdmissionRefusal>>\n  // A Free start past what is left, which the person chose to build as far as\n  // it goes (AGL-3722): the prompt they confirmed, kept on the job.\n  let confirmedCredits: AiCreditsPrompt | null = null\n  // Asked before the site exists (AGL-3859): answers, creates nothing.\n  const check = (payload as Record<string, unknown> | null)?.['check'] === true\n  try {\n    // A site that switched AI off first (AGL-3028), then the kind's own check.\n    refusal =\n      (await aiJobSiteRefusal({\n        firestore: gate.firestore,\n        org: gate.org,\n        hostId: parsed.hostId,\n      })) ??\n      (await aiJobAdmissionRefusal(parsed.kind, {\n        firestore: gate.firestore,\n        orgId: gate.orgId,\n        hostId: parsed.hostId,\n        siteToCome: check && !parsed.hostId,\n        inputs: parsed.inputs,\n        org: gate.org,\n        uid: gate.uid,\n        creditsConfirmed: (payload as Record<string, unknown> | null)?.['creditsConfirmed'] === true,\n        onCreditsConfirmed: (prompt) => {\n          confirmedCredits = prompt\n        },\n      }))\n  } catch (error) {\n    await releaseAssistMessage(gate.firestore, gate.orgId, gate.reservation).catch(\n      () => undefined,\n    )\n    console.error('ai job admission failed', { orgId: gate.orgId, kind: parsed.kind, error })\n    await reportJobFault('ai job admission failed', error)\n    return Response.json({ error: 'The AI job could not be created' }, { status: 500 })\n  }\n  if (refusal) {\n    await releaseAssistMessage(gate.firestore, gate.orgId, gate.reservation).catch(\n      () => undefined,\n    )\n    // A Free start past what is left asks before it starts (AGL-3722): the\n    // prompt rides the 409, so the dialog offers its choices.\n    return Response.json(\n      { error: refusal.error, ...(refusal.code ? { code: refusal.code } : {}), ...(refusal.credits ? { credits: refusal.credits } : {}) },\n      { status: refusal.status },\n    )\n  }\n  if (check) {\n    // Admitted, and nothing to run: the reservation goes back.\n    await releaseAssistMessage(gate.firestore, gate.orgId, gate.reservation).catch(\n      () => undefined,\n    )\n    return Response.json({ ok: true }, { status: 200 })\n  }\n\n  const now = new Date()\n  let created: Awaited<ReturnType<typeof createAiJob>>\n  try {\n    // The guided start's own plan confirmation (AGL-3594), kept only for a\n    // site job on a site that has published nothing of the owner's yet.\n    const inputs = await aiJobAdmittedInputs(gate.firestore, {\n      kind: parsed.kind,\n      hostId: parsed.hostId,\n      inputs: parsed.inputs,\n    })\n    created = await createAiJob(\n      gate.firestore,\n      {\n        orgId: gate.orgId,\n        hostId: parsed.hostId,\n        kind: parsed.kind,\n        brief: parsed.brief,\n        inputs,\n        model: parsed.model,\n        createdBy: gate.uid,\n        createdByEmail: gate.decoded.email ?? null,\n        creditsConfirmed: aiCreditsConfirmation(confirmedCredits, gate.uid, now),\n      },\n      now,\n    )\n  } catch (error) {\n    await releaseAssistMessage(gate.firestore, gate.orgId, gate.reservation).catch(\n      () => undefined,\n    )\n    console.error('ai job create failed', { orgId: gate.orgId, error })\n    await reportJobFault('ai job create failed', error)\n    return Response.json({ error: 'The AI job could not be created' }, { status: 500 })\n  }\n  const jobId = created.$id\n\n  // A first step that needs more time than this request has (AGL-2907) is left\n  // queued for the beat, which starts it with a budget of its own: a provider\n  // call this request's timeout cut off would be billed upstream and metered\n  // nowhere. Nothing ran, so the reservation goes back.\n  if (aiJobNextStepMinimumMs(created) > AI_JOB_INLINE_BUDGET_MS) {\n    await releaseAssistMessage(gate.firestore, gate.orgId, gate.reservation).catch(\n      () => undefined,\n    )\n    return Response.json(\n      {\n        job: aiJobSummary(created, now),\n        meter: aiUsageMeter(gate.reservation, { lastCredits: null }),\n      },\n      { status: 200 },\n    )\n  }\n\n  // The first step, inline, on the reservation the ladder already holds.\n  // The runner hands that reservation back itself if the provider is never\n  // reached, and re-queues the step when the budget ends first.\n  const run = await runAiJobStep(gate.firestore, gate.orgId, jobId, {\n    owner: `route:${randomUUID()}`,\n    now,\n    reservation: gate.reservation,\n    org: gate.org,\n    signal: AbortSignal.timeout(AI_JOB_INLINE_BUDGET_MS),\n    // The caller is on the request, so what the inline step produces is\n    // attributed with their address; the beat's steps carry the uid alone.\n    actor: { uid: gate.uid, email: gate.decoded.email ?? null },\n    // The workspace's AI pause lets staff through, as the ladder above did.\n    staff: gate.staff,\n  })\n  if (run.outcome === 'not-claimable') {\n    // A job created a moment ago has a claimable first step; anything else\n    // is a fault in the machine, and the reservation must not be stranded.\n    await releaseAssistMessage(gate.firestore, gate.orgId, gate.reservation).catch(\n      () => undefined,\n    )\n    console.error('ai job first step not claimable', { orgId: gate.orgId, jobId })\n    await reportJobFault('ai job first step not claimable', new Error(`job ${jobId}`))\n    return Response.json({ error: 'The AI job could not be started' }, { status: 500 })\n  }\n  return Response.json(\n    {\n      job: aiJobSummary(run.job),\n      // The usage strip's envelope (AGL-2942): the reservation the ladder\n      // took, with what the inline step spent.\n      meter: aiUsageMeter(gate.reservation, {\n        lastCredits: run.job.creditsSpent > 0 ? run.job.creditsSpent : null,\n      }),\n    },\n    { status: 200 },\n  )\n}\n\nexport async function GET(request: Request): Promise<Response> {\n  const url = new URL(request.url)\n  const gate = await aiJobsGate(request, url.searchParams.get('orgId') ?? '')\n  if (gate instanceof Response) return gate\n  const rawStatus = url.searchParams.get('status') ?? ''\n  const status = (AI_JOB_STATUSES as readonly string[]).includes(rawStatus)\n    ? (rawStatus as AiJobStatus)\n    : undefined\n  // `active` (AGL-3593): every job not yet settled, which is what the\n  // console's top-bar indicator and the Assist launcher count.\n  const active = rawStatus === 'active'\n  const limit = Number(url.searchParams.get('limit') ?? '')\n  // `hostId` (AGL-3596): one site's jobs, for the site's AI jobs page — a\n  // query on the field under the (hostId, createdAt) index, never a filter\n  // of a loaded window. An id that is not one is refused rather than ignored,\n  // which would answer with every site's jobs.\n  const rawHost = url.searchParams.get('hostId')\n  if (rawHost !== null && !ID_CHARS.test(rawHost)) {\n    return Response.json({ error: 'hostId is not a site id' }, { status: 400 })\n  }\n  const now = new Date()\n  // A job naming a site that has been deleted is not listed (AGL-3596), so\n  // no surface counts or shows work on a site nobody can open.\n  const jobs = await withoutErasedSites(\n    gate.firestore,\n    await listAiJobs(gate.firestore, gate.orgId, {\n      ...(status ? { status } : {}),\n      ...(active ? { statuses: AI_JOB_ACTIVE_STATUSES } : {}),\n      ...(rawHost ? { hostId: rawHost } : {}),\n      ...(Number.isFinite(limit) && limit > 0 ? { limit } : {}),\n    }),\n  )\n  const freeTaste = resolveEffectivePlan(gate.org as never) === 'free'\n  // What the Free workspace has left this month (AGL-3660): the less of its\n  // own band and its owner's allowance across their Free workspaces, which is\n  // what the steps' reservations refuse at — never the 300 a month starts with.\n  const freeCredits = freeTaste\n    ? await readFreeAiCreditsLeft(gate.firestore, { orgId: gate.orgId, org: gate.org as object | null, now })\n    : null\n  // Whether Create site offers \"Bring my site\" (AGL-3976), asked only by the\n  // guided start's own read, so the card costs no other caller anything.\n  const siteImport =\n    url.searchParams.get('siteImport') === '1'\n      ? await siteImportOfferFor({ orgId: gate.orgId, staff: gate.staff, org: gate.org, member: gate.member })\n      : null\n  // Whether the guided start asks for the sites the person likes (AGL-3975):\n  // the workspace's own verdict, the one its site job reads them by.\n  const siteInspiration = await isServerReleaseFlagOnForOrg(AI_SITE_INSPIRATION_FLAG, gate.orgId).catch(() => false)\n  return Response.json(\n    {\n      jobs: jobs.map((job) => aiJobSummary(job, now)),\n      // Whether the workspace spends the Free taste (AGL-3594), so the guided\n      // start offers the Free page band from the request it already makes.\n      freeTaste,\n      ...(freeCredits ? { freeCredits } : {}),\n      ...(siteImport ? { siteImport } : {}),\n      ...(siteInspiration ? { siteInspiration: true } : {}),\n    },\n    { status: 200, headers: { 'Cache-Control': 'no-store' } },\n  )\n}\n\nexport const dynamic = 'force-dynamic'\nexport const maxDuration = 60\n"],"names":["randomUUID","resolveEffectivePlan","AI_JOB_KINDS","aiGateLadder","aiJobAdmissionRefusal","aiJobSiteRefusal","AI_JOB_BRIEF_MAX_CHARS","aiJobAdmittedInputs","AI_JOB_INLINE_BUDGET_MS","aiJobNextStepMinimumMs","aiJobSummary","createAiJob","listAiJobs","runAiJobStep","releaseAssistMessage","readFreeAiCreditsLeft","aiCreditsConfirmation","aiUsageMeter","aiJobsGate","siteImportOfferFor","withoutErasedSites","AI_JOB_ACTIVE_STATUSES","reportServerError","isServerReleaseFlagOnForOrg","AI_SITE_INSPIRATION_FLAG","reportJobFault","what","error","message","Error","String","stack","undefined","route","routeType","method","service","AI_JOBS_RATE_LIMIT","key","limit","windowMs","MAX_INPUTS_JSON_CHARS","AI_JOB_STATUSES","ID_CHARS","MAX_MODEL_CHARS","parseCreateAiJobBody","payload","body","orgId","trim","kind","includes","join","brief","length","toLocaleString","rawHost","hostId","test","rawInputs","inputs","Array","isArray","value","Object","entries","JSON","stringify","rawModel","model","POST","request","gate","json","parsed","feature","releaseFlag","lockdownFeature","permission","rateLimit","Response","firestore","reservation","catch","status","refusal","confirmedCredits","check","org","siteToCome","uid","creditsConfirmed","onCreditsConfirmed","prompt","console","code","credits","ok","now","Date","created","createdBy","createdByEmail","decoded","email","jobId","$id","job","meter","lastCredits","run","owner","signal","AbortSignal","timeout","actor","staff","outcome","creditsSpent","GET","url","URL","searchParams","get","rawStatus","active","Number","jobs","statuses","isFinite","freeTaste","freeCredits","siteImport","member","siteInspiration","map","headers","dynamic","maxDuration"],"mappings":";AAAA;;;;;;;;;;;;;;;CAeC,GAED,+DAA+D;AAC/D,0EAA0E;AAC1E,6DAA6D;AAE7D,SAASA,UAAU,QAAQ,SAAQ;AACnC,SAASC,oBAAoB,QAAQ,2CAA0C;AAC/E,SACEC,YAAY,QAGP,4BAAwB;AAC/B,yEAAyE;AACzE,4EAA4E;AAC5E,iEAAiE;AACjE,SAASC,YAAY,QAAQ,wBAAoB;AACjD,SAASC,qBAAqB,EAAEC,gBAAgB,QAAQ,8BAA0B;AAClF,SAASC,sBAAsB,QAAQ,8BAA0B;AACjE,SAASC,mBAAmB,QAAQ,iCAA6B;AACjE,SACEC,uBAAuB,EACvBC,sBAAsB,EACtBC,YAAY,EACZC,WAAW,EACXC,UAAU,EACVC,YAAY,QACP,qBAAiB;AACxB,SAASC,oBAAoB,QAAQ,2BAAuB;AAC5D,SAASC,qBAAqB,QAAQ,mCAA+B;AACrE,SAASC,qBAAqB,QAA8B,iCAA6B;AACzF,SAASC,YAAY,QAAQ,6BAAyB;AACtD,SAASC,UAAU,QAAQ,oBAAgB;AAC3C,SAASC,kBAAkB,QAAQ,4BAAwB;AAC3D,SAASC,kBAAkB,QAAQ,0BAAsB;AACzD,SAASC,sBAAsB,QAAQ,8BAA0B;AACjE,SAASC,iBAAiB,QAAQ,sDAAqD;AACvF,SAASC,2BAA2B,QAAQ,gDAA+C;AAC3F,SAASC,wBAAwB,QAAQ,kCAA8B;AAEvE;;;;;;;CAOC,GACD,eAAeC,eAAeC,IAAY,EAAEC,KAAc;IACxD,IAAI;QACF,MAAML,kBACJ;YACEM,SAAS,GAAGF,KAAK,EAAE,EAAEC,iBAAiBE,QAAQF,MAAMC,OAAO,GAAGE,OAAOH,QAAQ;YAC7EI,OAAOJ,iBAAiBE,QAAQF,MAAMI,KAAK,GAAGC;YAC9CC,OAAO;YACPC,WAAW;YACXC,QAAQ;QACV,GACA;YAAEC,SAAS;QAAc;IAE7B,EAAE,eAAM;IACN,kEAAkE;IACpE;AACF;AAEA;;;;;;;;;;;;;;;;;;;;;;;;;;;CA2BC,GAED,MAAMC,qBAAqB;IAAEC,KAAK;IAAWC,OAAO;IAAIC,UAAU;AAAO;AAEzE,2EAA2E,GAC3E,MAAMC,wBAAwB;AAE9B,yEAAyE,GACzE,MAAMC,kBAA0C;IAC9C;IACA;IACA;IACA;IACA;IACA;IACA;CACD;AAYD,MAAMC,WAAW;AAEjB,8EAA8E,GAC9E,MAAMC,kBAAkB;AAExB,qEAAqE,GACrE,OAAO,SAASC,qBAAqBC,OAAgB;QAE9BC,aAEDA,YAICA;IAPrB,MAAMA,OAAQD,kBAAAA,UAAW,CAAC;IAC1B,MAAME,QAAQlB,QAAOiB,cAAAA,KAAKC,KAAK,YAAVD,cAAc,IAAIE,IAAI;IAC3C,IAAI,CAACD,OAAO,OAAO;IACnB,MAAME,OAAOpB,QAAOiB,aAAAA,KAAKG,IAAI,YAATH,aAAa;IACjC,IAAI,CAAC,AAAC7C,aAAmCiD,QAAQ,CAACD,OAAO;QACvD,OAAO,CAAC,oBAAoB,EAAEhD,aAAakD,IAAI,CAAC,OAAO;IACzD;IACA,MAAMC,QAAQvB,QAAOiB,cAAAA,KAAKM,KAAK,YAAVN,cAAc,IAAIE,IAAI;IAC3C,IAAI,CAACI,OAAO,OAAO;IACnB,IAAIA,MAAMC,MAAM,GAAGhD,wBAAwB;QACzC,OAAO,CAAC,qBAAqB,EAAEA,uBAAuBiD,cAAc,CAAC,SAAS,WAAW,CAAC;IAC5F;IACA,MAAMC,UAAUT,KAAKU,MAAM;IAC3B,MAAMA,SACJD,YAAYxB,aAAawB,YAAY,QAAQA,YAAY,KACrD,OACA,OAAOA,YAAY,YAAYb,SAASe,IAAI,CAACF,WAC3CA,UACAxB;IACR,IAAIyB,WAAWzB,WAAW,OAAO;IACjC,yEAAyE;IACzE,sDAAsD;IACtD,IAAIkB,SAAS,WAAW,CAACO,QAAQ,OAAO;IACxC,MAAME,YAAYZ,KAAKa,MAAM;IAC7B,MAAMA,SAAoD,CAAC;IAC3D,IAAID,cAAc3B,aAAa2B,cAAc,MAAM;QACjD,IAAI,OAAOA,cAAc,YAAYE,MAAMC,OAAO,CAACH,YAAY;YAC7D,OAAO;QACT;QACA,KAAK,MAAM,CAACrB,KAAKyB,MAAM,IAAIC,OAAOC,OAAO,CAACN,WAAuC;YAC/E,IACE,OAAOI,UAAU,YACjB,OAAOA,UAAU,YACjB,OAAOA,UAAU,WACjB;gBACA,OAAO,CAAC,OAAO,EAAEzB,IAAI,oCAAoC,CAAC;YAC5D;YACAsB,MAAM,CAACtB,IAAI,GAAGyB;QAChB;QACA,IAAIG,KAAKC,SAAS,CAACP,QAAQN,MAAM,GAAGb,uBAAuB;YACzD,OAAO;QACT;IACF;IACA,MAAM2B,WAAW,OAAOrB,KAAKsB,KAAK,KAAK,WAAWtB,KAAKsB,KAAK,CAACpB,IAAI,KAAK;IACtE,IAAImB,SAASd,MAAM,GAAGV,iBAAiB,OAAO;IAC9C,yEAAyE;IACzE,yEAAyE;IACzE,MAAMyB,QAAQD,YAAYA,aAAa,SAASA,WAAW;IAC3D,OAAO;QAAEpB;QAAOS;QAAQP,MAAMA;QAAmBG;QAAOO;QAAQS;IAAM;AACxE;AAEA,OAAO,eAAeC,KAAKC,OAAgB;cA2JRC;IA1JjC,IAAI1B;IACJ,IAAI;QACFA,UAAU,MAAMyB,QAAQE,IAAI;IAC9B,EAAE,eAAM;QACN3B,UAAU;IACZ;IACA,MAAM4B,SAAS7B,qBAAqBC;IACpC,sEAAsE;IACtE,uEAAuE;IACvE,8DAA8D;IAC9D,MAAME,QAAQ,OAAO0B,WAAW,WAAW5C,eAAQgB,2BAAD,AAACA,QAA4CE,KAAK,mBAAI,MAAM0B,OAAO1B,KAAK;IAC1H,2EAA2E;IAC3E,2EAA2E;IAC3E,gDAAgD;IAChD,MAAMS,SAAS,OAAOiB,WAAW,WAAW,OAAOA,OAAOjB,MAAM;IAChE,MAAMe,OAAO,MAAMrE,aACjB;QAAEoE;QAASvB;QAAOS;IAAO,GACzB;QACEkB,SAAS;QACTC,aAAa;QACbC,iBAAiB;QACjBC,YAAY;QACZC,WAAW1C;IACb;IAEF,IAAImC,gBAAgBQ,UAAU,OAAOR;IACrC,IAAI,OAAOE,WAAW,UAAU;QAC9B,wEAAwE;QACxE,qDAAqD;QACrD,MAAM5D,qBAAqB0D,KAAKS,SAAS,EAAET,KAAKxB,KAAK,EAAEwB,KAAKU,WAAW,EAAEC,KAAK,CAC5E,IAAMnD;QAER,OAAOgD,SAASP,IAAI,CAAC;YAAE9C,OAAO+C;QAAO,GAAG;YAAEU,QAAQ;QAAI;IACxD;IACA,sEAAsE;IACtE,uEAAuE;IACvE,sDAAsD;IACtD,IAAIC;IACJ,4EAA4E;IAC5E,kEAAkE;IAClE,IAAIC,mBAA2C;IAC/C,qEAAqE;IACrE,MAAMC,QAAQ,CAACzC,2BAAD,AAACA,OAA4C,CAAC,QAAQ,MAAK;IACzE,IAAI;YAGC;QAFH,2EAA2E;QAC3EuC,WACG,QAAA,MAAMhF,iBAAiB;YACtB4E,WAAWT,KAAKS,SAAS;YACzBO,KAAKhB,KAAKgB,GAAG;YACb/B,QAAQiB,OAAOjB,MAAM;QACvB,cAJC,QAKA,MAAMrD,sBAAsBsE,OAAOxB,IAAI,EAAE;YACxC+B,WAAWT,KAAKS,SAAS;YACzBjC,OAAOwB,KAAKxB,KAAK;YACjBS,QAAQiB,OAAOjB,MAAM;YACrBgC,YAAYF,SAAS,CAACb,OAAOjB,MAAM;YACnCG,QAAQc,OAAOd,MAAM;YACrB4B,KAAKhB,KAAKgB,GAAG;YACbE,KAAKlB,KAAKkB,GAAG;YACbC,kBAAkB,CAAC7C,2BAAD,AAACA,OAA4C,CAAC,mBAAmB,MAAK;YACxF8C,oBAAoB,CAACC;gBACnBP,mBAAmBO;YACrB;QACF;IACJ,EAAE,OAAOlE,OAAO;QACd,MAAMb,qBAAqB0D,KAAKS,SAAS,EAAET,KAAKxB,KAAK,EAAEwB,KAAKU,WAAW,EAAEC,KAAK,CAC5E,IAAMnD;QAER8D,QAAQnE,KAAK,CAAC,2BAA2B;YAAEqB,OAAOwB,KAAKxB,KAAK;YAAEE,MAAMwB,OAAOxB,IAAI;YAAEvB;QAAM;QACvF,MAAMF,eAAe,2BAA2BE;QAChD,OAAOqD,SAASP,IAAI,CAAC;YAAE9C,OAAO;QAAkC,GAAG;YAAEyD,QAAQ;QAAI;IACnF;IACA,IAAIC,SAAS;QACX,MAAMvE,qBAAqB0D,KAAKS,SAAS,EAAET,KAAKxB,KAAK,EAAEwB,KAAKU,WAAW,EAAEC,KAAK,CAC5E,IAAMnD;QAER,uEAAuE;QACvE,0DAA0D;QAC1D,OAAOgD,SAASP,IAAI,CAClB;YAAE9C,OAAO0D,QAAQ1D,KAAK;WAAM0D,QAAQU,IAAI,GAAG;YAAEA,MAAMV,QAAQU,IAAI;QAAC,IAAI,CAAC,GAAQV,QAAQW,OAAO,GAAG;YAAEA,SAASX,QAAQW,OAAO;QAAC,IAAI,CAAC,IAC/H;YAAEZ,QAAQC,QAAQD,MAAM;QAAC;IAE7B;IACA,IAAIG,OAAO;QACT,2DAA2D;QAC3D,MAAMzE,qBAAqB0D,KAAKS,SAAS,EAAET,KAAKxB,KAAK,EAAEwB,KAAKU,WAAW,EAAEC,KAAK,CAC5E,IAAMnD;QAER,OAAOgD,SAASP,IAAI,CAAC;YAAEwB,IAAI;QAAK,GAAG;YAAEb,QAAQ;QAAI;IACnD;IAEA,MAAMc,MAAM,IAAIC;IAChB,IAAIC;IACJ,IAAI;YAkBkB5B;QAjBpB,uEAAuE;QACvE,oEAAoE;QACpE,MAAMZ,SAAS,MAAMrD,oBAAoBiE,KAAKS,SAAS,EAAE;YACvD/B,MAAMwB,OAAOxB,IAAI;YACjBO,QAAQiB,OAAOjB,MAAM;YACrBG,QAAQc,OAAOd,MAAM;QACvB;QACAwC,UAAU,MAAMzF,YACd6D,KAAKS,SAAS,EACd;YACEjC,OAAOwB,KAAKxB,KAAK;YACjBS,QAAQiB,OAAOjB,MAAM;YACrBP,MAAMwB,OAAOxB,IAAI;YACjBG,OAAOqB,OAAOrB,KAAK;YACnBO;YACAS,OAAOK,OAAOL,KAAK;YACnBgC,WAAW7B,KAAKkB,GAAG;YACnBY,cAAc,GAAE9B,uBAAAA,KAAK+B,OAAO,CAACC,KAAK,YAAlBhC,uBAAsB;YACtCmB,kBAAkB3E,sBAAsBsE,kBAAkBd,KAAKkB,GAAG,EAAEQ;QACtE,GACAA;IAEJ,EAAE,OAAOvE,OAAO;QACd,MAAMb,qBAAqB0D,KAAKS,SAAS,EAAET,KAAKxB,KAAK,EAAEwB,KAAKU,WAAW,EAAEC,KAAK,CAC5E,IAAMnD;QAER8D,QAAQnE,KAAK,CAAC,wBAAwB;YAAEqB,OAAOwB,KAAKxB,KAAK;YAAErB;QAAM;QACjE,MAAMF,eAAe,wBAAwBE;QAC7C,OAAOqD,SAASP,IAAI,CAAC;YAAE9C,OAAO;QAAkC,GAAG;YAAEyD,QAAQ;QAAI;IACnF;IACA,MAAMqB,QAAQL,QAAQM,GAAG;IAEzB,6EAA6E;IAC7E,4EAA4E;IAC5E,2EAA2E;IAC3E,sDAAsD;IACtD,IAAIjG,uBAAuB2F,WAAW5F,yBAAyB;QAC7D,MAAMM,qBAAqB0D,KAAKS,SAAS,EAAET,KAAKxB,KAAK,EAAEwB,KAAKU,WAAW,EAAEC,KAAK,CAC5E,IAAMnD;QAER,OAAOgD,SAASP,IAAI,CAClB;YACEkC,KAAKjG,aAAa0F,SAASF;YAC3BU,OAAO3F,aAAauD,KAAKU,WAAW,EAAE;gBAAE2B,aAAa;YAAK;QAC5D,GACA;YAAEzB,QAAQ;QAAI;IAElB;IAEA,uEAAuE;IACvE,yEAAyE;IACzE,8DAA8D;IAC9D,MAAM0B,MAAM,MAAMjG,aAAa2D,KAAKS,SAAS,EAAET,KAAKxB,KAAK,EAAEyD,OAAO;QAChEM,OAAO,CAAC,MAAM,EAAE/G,cAAc;QAC9BkG;QACAhB,aAAaV,KAAKU,WAAW;QAC7BM,KAAKhB,KAAKgB,GAAG;QACbwB,QAAQC,YAAYC,OAAO,CAAC1G;QAC5B,oEAAoE;QACpE,uEAAuE;QACvE2G,OAAO;YAAEzB,KAAKlB,KAAKkB,GAAG;YAAEc,KAAK,GAAEhC,sBAAAA,KAAK+B,OAAO,CAACC,KAAK,YAAlBhC,sBAAsB;QAAK;QAC1D,wEAAwE;QACxE4C,OAAO5C,KAAK4C,KAAK;IACnB;IACA,IAAIN,IAAIO,OAAO,KAAK,iBAAiB;QACnC,uEAAuE;QACvE,uEAAuE;QACvE,MAAMvG,qBAAqB0D,KAAKS,SAAS,EAAET,KAAKxB,KAAK,EAAEwB,KAAKU,WAAW,EAAEC,KAAK,CAC5E,IAAMnD;QAER8D,QAAQnE,KAAK,CAAC,mCAAmC;YAAEqB,OAAOwB,KAAKxB,KAAK;YAAEyD;QAAM;QAC5E,MAAMhF,eAAe,mCAAmC,IAAII,MAAM,CAAC,IAAI,EAAE4E,OAAO;QAChF,OAAOzB,SAASP,IAAI,CAAC;YAAE9C,OAAO;QAAkC,GAAG;YAAEyD,QAAQ;QAAI;IACnF;IACA,OAAOJ,SAASP,IAAI,CAClB;QACEkC,KAAKjG,aAAaoG,IAAIH,GAAG;QACzB,oEAAoE;QACpE,yCAAyC;QACzCC,OAAO3F,aAAauD,KAAKU,WAAW,EAAE;YACpC2B,aAAaC,IAAIH,GAAG,CAACW,YAAY,GAAG,IAAIR,IAAIH,GAAG,CAACW,YAAY,GAAG;QACjE;IACF,GACA;QAAElC,QAAQ;IAAI;AAElB;AAEA,OAAO,eAAemC,IAAIhD,OAAgB;QAEDiD,uBAErBA,wBAOGA;IAVrB,MAAMA,MAAM,IAAIC,IAAIlD,QAAQiD,GAAG;IAC/B,MAAMhD,OAAO,MAAMtD,WAAWqD,UAASiD,wBAAAA,IAAIE,YAAY,CAACC,GAAG,CAAC,oBAArBH,wBAAiC;IACxE,IAAIhD,gBAAgBQ,UAAU,OAAOR;IACrC,MAAMoD,aAAYJ,yBAAAA,IAAIE,YAAY,CAACC,GAAG,CAAC,qBAArBH,yBAAkC;IACpD,MAAMpC,SAAS,AAAC1C,gBAAsCS,QAAQ,CAACyE,aAC1DA,YACD5F;IACJ,oEAAoE;IACpE,6DAA6D;IAC7D,MAAM6F,SAASD,cAAc;IAC7B,MAAMrF,QAAQuF,QAAON,yBAAAA,IAAIE,YAAY,CAACC,GAAG,CAAC,oBAArBH,yBAAiC;IACtD,wEAAwE;IACxE,yEAAyE;IACzE,4EAA4E;IAC5E,6CAA6C;IAC7C,MAAMhE,UAAUgE,IAAIE,YAAY,CAACC,GAAG,CAAC;IACrC,IAAInE,YAAY,QAAQ,CAACb,SAASe,IAAI,CAACF,UAAU;QAC/C,OAAOwB,SAASP,IAAI,CAAC;YAAE9C,OAAO;QAA0B,GAAG;YAAEyD,QAAQ;QAAI;IAC3E;IACA,MAAMc,MAAM,IAAIC;IAChB,yEAAyE;IACzE,6DAA6D;IAC7D,MAAM4B,OAAO,MAAM3G,mBACjBoD,KAAKS,SAAS,EACd,MAAMrE,WAAW4D,KAAKS,SAAS,EAAET,KAAKxB,KAAK,EAAE,aACvCoC,SAAS;QAAEA;IAAO,IAAI,CAAC,GACvByC,SAAS;QAAEG,UAAU3G;IAAuB,IAAI,CAAC,GACjDmC,UAAU;QAAEC,QAAQD;IAAQ,IAAI,CAAC,GACjCsE,OAAOG,QAAQ,CAAC1F,UAAUA,QAAQ,IAAI;QAAEA;IAAM,IAAI,CAAC;IAG3D,MAAM2F,YAAYjI,qBAAqBuE,KAAKgB,GAAG,MAAe;IAC9D,0EAA0E;IAC1E,4EAA4E;IAC5E,8EAA8E;IAC9E,MAAM2C,cAAcD,YAChB,MAAMnH,sBAAsByD,KAAKS,SAAS,EAAE;QAAEjC,OAAOwB,KAAKxB,KAAK;QAAEwC,KAAKhB,KAAKgB,GAAG;QAAmBU;IAAI,KACrG;IACJ,2EAA2E;IAC3E,uEAAuE;IACvE,MAAMkC,aACJZ,IAAIE,YAAY,CAACC,GAAG,CAAC,kBAAkB,MACnC,MAAMxG,mBAAmB;QAAE6B,OAAOwB,KAAKxB,KAAK;QAAEoE,OAAO5C,KAAK4C,KAAK;QAAE5B,KAAKhB,KAAKgB,GAAG;QAAE6C,QAAQ7D,KAAK6D,MAAM;IAAC,KACpG;IACN,2EAA2E;IAC3E,mEAAmE;IACnE,MAAMC,kBAAkB,MAAM/G,4BAA4BC,0BAA0BgD,KAAKxB,KAAK,EAAEmC,KAAK,CAAC,IAAM;IAC5G,OAAOH,SAASP,IAAI,CAClB;QACEsD,MAAMA,KAAKQ,GAAG,CAAC,CAAC5B,MAAQjG,aAAaiG,KAAKT;QAC1C,wEAAwE;QACxE,qEAAqE;QACrEgC;OACIC,cAAc;QAAEA;IAAY,IAAI,CAAC,GACjCC,aAAa;QAAEA;IAAW,IAAI,CAAC,GAC/BE,kBAAkB;QAAEA,iBAAiB;IAAK,IAAI,CAAC,IAErD;QAAElD,QAAQ;QAAKoD,SAAS;YAAE,iBAAiB;QAAW;IAAE;AAE5D;AAEA,OAAO,MAAMC,UAAU,gBAAe;AACtC,OAAO,MAAMC,cAAc,GAAE"}

package/src/lib/server/ai-site-import-route.d.ts

@@ -0,0 +1,89 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+/**
+ * The "Bring my site" doors (AGL-3974, parent AGL-3973).
+ *
+ *   GET  /api/ai/site-import/ownership?orgId=      the org's claims
+ *   POST /api/ai/site-import/ownership             { orgId, action, domain, … }
+ *        action `claim`                             start a claim (idempotent)
+ *        action `check`, method `dns` | `meta`      look for the record or tag now
+ *        action `send-code`, email                  email a code to an address at the domain
+ *        action `confirm-code`, code                check the code
+ *   POST /api/ai/site-import/crawl                 { orgId, domain, maxPages? }
+ *        the site's inventory, for a domain the org has a CURRENT proof for
+ *
+ * The rungs, in order, each disclosing nothing a lower one would:
+ *
+ *   401  no bearer token, or a refused one
+ *   403  email unverified (an impersonation session is exempt)
+ *   400  the request did not name the org (AGL-1934)
+ *   403  not a member of that org
+ *   404  `release_ai_site_import` is off; a verified staff claim previews
+ *   403  `reason: 'role'`: the caller is not the org's owner or an admin
+ *   403  `reason: 'plan'`: the org is on the Free plan; import is for every
+ *        paid plan
+ *   423  lockdown
+ *
+ * Nothing here spends model credits: the crawl reads and returns, and the
+ * import job (another lane) decides what becomes a page.
+ */
+import type { DecodedIdToken } from 'firebase-admin/auth';
+import type { AglynOrganization, AglynOrgMember } from '@aglyn/aglyn/foundation/definitions/organization.types';
+import { type DomainOwnershipDeps } from '@aglyn/tenant-data-admin/server/domain-ownership';
+import { type SiteImportCrawlSeams } from '../site-import/site-import-crawl';
+import { SITE_IMPORT_RELEASE_FLAG } from '../site-import/site-import-flag';
+export { SITE_IMPORT_RELEASE_FLAG };
+/** Pages the crawl door reads in one request; the import job reads in waves. */
+export declare const SITE_IMPORT_DOOR_MAX_PAGES = 25;
+/** Crawls one org may run through the door in a day. */
+export declare const SITE_IMPORT_CRAWLS_PER_ORG_PER_DAY = 20;
+/** DNS and home-page checks one org may run in an hour. */
+export declare const SITE_IMPORT_CHECKS_PER_ORG_PER_HOUR = 60;
+export interface SiteImportGateContext {
+    uid: string;
+    decoded: DecodedIdToken;
+    staff: boolean;
+    orgId: string;
+    org: Partial<AglynOrganization>;
+    member: AglynOrgMember | null;
+    firestore: FirebaseFirestore.Firestore;
+}
+/** What the doors reach outside the process, replaceable in a spec. */
+export interface SiteImportRouteSeams {
+    ownership?: DomainOwnershipDeps;
+    crawl?: SiteImportCrawlSeams;
+}
+export declare function siteImportGate(request: Request, rawOrgId: string): Promise<Response | SiteImportGateContext>;
+/**
+ * Whether "Bring my site" is offered to this reader (AGL-3976), in the
+ * doors' own order, for Create site's choice card: `null` while the flag is
+ * off (the card is not drawn), `role` or `plan` for a refusal the workspace
+ * can change (the card is drawn disabled with the reason), `ready` otherwise.
+ * Read by the jobs list only when the card asks, so no other read pays for it.
+ */
+export declare function siteImportOfferFor(input: {
+    orgId: string;
+    staff: boolean;
+    org: Partial<AglynOrganization> | null;
+    member: AglynOrgMember | null;
+}): Promise<'ready' | 'role' | 'plan' | null>;
+/** `GET /api/ai/site-import/ownership?orgId=`. */
+export declare function listSiteImportOwnership(request: Request, seams?: SiteImportRouteSeams): Promise<Response>;
+/** `POST /api/ai/site-import/ownership`. */
+export declare function postSiteImportOwnership(request: Request, seams?: SiteImportRouteSeams): Promise<Response>;
+/** `POST /api/ai/site-import/crawl`. */
+export declare function postSiteImportCrawl(request: Request, seams?: SiteImportRouteSeams): Promise<Response>;