@humaan/payload-plugin-ai-assistant 0.0.0-stage → 0.1.0

package/dist/endpoints/access.js

@@ -0,0 +1,28 @@
+import { aiAssistantGlobalSlug } from '../constants.js';
+import { canUseAssistant, parseSettings } from '../settings.js';
+/** The stored settings when the user may run the assistant, otherwise the response to send. */ export async function allowAssistant(req, fallback) {
+    if (!req.user) {
+        return Response.json({
+            message: 'You need to be logged in.'
+        }, {
+            status: 401
+        });
+    }
+    const stored = await req.payload.findGlobal({
+        slug: aiAssistantGlobalSlug,
+        depth: 0,
+        overrideAccess: true,
+        req
+    });
+    const settings = parseSettings(stored, fallback);
+    if (!canUseAssistant(req.user, settings)) {
+        return Response.json({
+            message: 'You do not have access to the assistant.'
+        }, {
+            status: 403
+        });
+    }
+    return settings;
+}
+
+//# sourceMappingURL=access.js.map

package/dist/endpoints/access.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/endpoints/access.ts"],"sourcesContent":["import type { GlobalSlug, PayloadRequest } from 'payload'\n\nimport type { AssistantSettings } from '../types.js'\n\nimport { aiAssistantGlobalSlug } from '../constants.js'\nimport { canUseAssistant, parseSettings } from '../settings.js'\n\n/** The stored settings when the user may run the assistant, otherwise the response to send. */\nexport async function allowAssistant(\n  req: PayloadRequest,\n  fallback: AssistantSettings,\n): Promise<AssistantSettings | Response> {\n  if (!req.user) {\n    return Response.json({ message: 'You need to be logged in.' }, { status: 401 })\n  }\n  const stored = await req.payload.findGlobal({\n    slug: aiAssistantGlobalSlug as GlobalSlug,\n    depth: 0,\n    overrideAccess: true,\n    req,\n  })\n  const settings = parseSettings(stored, fallback)\n  if (!canUseAssistant(req.user, settings)) {\n    return Response.json({ message: 'You do not have access to the assistant.' }, { status: 403 })\n  }\n  return settings\n}\n"],"names":["aiAssistantGlobalSlug","canUseAssistant","parseSettings","allowAssistant","req","fallback","user","Response","json","message","status","stored","payload","findGlobal","slug","depth","overrideAccess","settings"],"mappings":"AAIA,SAASA,qBAAqB,QAAQ,kBAAiB;AACvD,SAASC,eAAe,EAAEC,aAAa,QAAQ,iBAAgB;AAE/D,6FAA6F,GAC7F,OAAO,eAAeC,eACpBC,GAAmB,EACnBC,QAA2B;IAE3B,IAAI,CAACD,IAAIE,IAAI,EAAE;QACb,OAAOC,SAASC,IAAI,CAAC;YAAEC,SAAS;QAA4B,GAAG;YAAEC,QAAQ;QAAI;IAC/E;IACA,MAAMC,SAAS,MAAMP,IAAIQ,OAAO,CAACC,UAAU,CAAC;QAC1CC,MAAMd;QACNe,OAAO;QACPC,gBAAgB;QAChBZ;IACF;IACA,MAAMa,WAAWf,cAAcS,QAAQN;IACvC,IAAI,CAACJ,gBAAgBG,IAAIE,IAAI,EAAEW,WAAW;QACxC,OAAOV,SAASC,IAAI,CAAC;YAAEC,SAAS;QAA2C,GAAG;YAAEC,QAAQ;QAAI;IAC9F;IACA,OAAOO;AACT"}

package/dist/endpoints/allowance.d.ts

@@ -0,0 +1,22 @@
+import type { PayloadRequest } from 'payload';
+import type { BudgetView } from '../types.js';
+import type { ProjectBudget } from './budget.js';
+/** The project's AI Gateway budget for the current period, which the percentages in the settings are shares of. */
+export type Allowance = ProjectBudget;
+/**
+ * The project's budget, or a reason it could not be read, in words for an admin. In US dollars; never sent to the
+ * browser. There is no fallback: the team's credit is shared with every other project, so it would mislead.
+ */
+export declare function accountAllowance(req: PayloadRequest): Promise<Allowance | string>;
+/** What is left as a share of the budget. Low once `lowBudgetUsedShare` of it is used. */
+export declare function budgetView(allowance: Allowance): BudgetView;
+/**
+ * Each editor's daily cap in US dollars: the cap's share of the budget. Undefined when there is no cap, because it is
+ * set to 0 or the budget could not be read.
+ */
+export declare function dailyCapUsd(dailySpendCapPercent: number, allowance: Allowance | string): number | undefined;
+/**
+ * A budget rejection from the gateway, reworded without its dollar amounts. Undefined for any other error.
+ * The gateway answers 402 with `quota_for_entity_exceeded` and a message naming the spend and limit.
+ */
+export declare function budgetExceededMessage(message: string, allowance: Allowance | string, timeZone: string): string | undefined;

package/dist/endpoints/allowance.js

@@ -0,0 +1,37 @@
+import { lowBudgetUsedShare } from '../constants.js';
+import { formatReset, nextReset, projectBudget } from './budget.js';
+/**
+ * The project's budget, or a reason it could not be read, in words for an admin. In US dollars; never sent to the
+ * browser. There is no fallback: the team's credit is shared with every other project, so it would mislead.
+ */ export async function accountAllowance(req) {
+    return projectBudget(req);
+}
+/** What is left as a share of the budget. Low once `lowBudgetUsedShare` of it is used. */ export function budgetView(allowance) {
+    const remainingShare = allowance.limit > 0 ? Math.max(allowance.limit - allowance.spent, 0) / allowance.limit : 0;
+    const low = allowance.limit > 0 && allowance.spent / allowance.limit >= lowBudgetUsedShare;
+    return {
+        remainingShare,
+        low
+    };
+}
+/**
+ * Each editor's daily cap in US dollars: the cap's share of the budget. Undefined when there is no cap, because it is
+ * set to 0 or the budget could not be read.
+ */ export function dailyCapUsd(dailySpendCapPercent, allowance) {
+    if (!(dailySpendCapPercent > 0) || typeof allowance === 'string' || !(allowance.limit > 0)) {
+        return undefined;
+    }
+    return allowance.limit * dailySpendCapPercent / 100;
+}
+/**
+ * A budget rejection from the gateway, reworded without its dollar amounts. Undefined for any other error.
+ * The gateway answers 402 with `quota_for_entity_exceeded` and a message naming the spend and limit.
+ */ export function budgetExceededMessage(message, allowance, timeZone) {
+    if (!/quota_for_entity_exceeded|quota limit exceeded|budget exceeded/i.test(message)) {
+        return undefined;
+    }
+    const reset = typeof allowance === 'string' ? undefined : nextReset(allowance.refreshPeriod);
+    return reset ? `Humaan AI has used its AI Gateway budget. It resets on ${formatReset(reset, timeZone)}.` : 'Humaan AI has used its AI Gateway budget. An admin can raise it in Vercel.';
+}
+
+//# sourceMappingURL=allowance.js.map

package/dist/endpoints/allowance.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/endpoints/allowance.ts"],"sourcesContent":["import type { PayloadRequest } from 'payload'\n\nimport type { BudgetView } from '../types.js'\nimport type { ProjectBudget } from './budget.js'\n\nimport { lowBudgetUsedShare } from '../constants.js'\nimport { formatReset, nextReset, projectBudget } from './budget.js'\n\n/** The project's AI Gateway budget for the current period, which the percentages in the settings are shares of. */\nexport type Allowance = ProjectBudget\n\n/**\n * The project's budget, or a reason it could not be read, in words for an admin. In US dollars; never sent to the\n * browser. There is no fallback: the team's credit is shared with every other project, so it would mislead.\n */\nexport async function accountAllowance(req: PayloadRequest): Promise<Allowance | string> {\n  return projectBudget(req)\n}\n\n/** What is left as a share of the budget. Low once `lowBudgetUsedShare` of it is used. */\nexport function budgetView(allowance: Allowance): BudgetView {\n  const remainingShare =\n    allowance.limit > 0 ? Math.max(allowance.limit - allowance.spent, 0) / allowance.limit : 0\n  const low = allowance.limit > 0 && allowance.spent / allowance.limit >= lowBudgetUsedShare\n  return { remainingShare, low }\n}\n\n/**\n * Each editor's daily cap in US dollars: the cap's share of the budget. Undefined when there is no cap, because it is\n * set to 0 or the budget could not be read.\n */\nexport function dailyCapUsd(\n  dailySpendCapPercent: number,\n  allowance: Allowance | string,\n): number | undefined {\n  if (!(dailySpendCapPercent > 0) || typeof allowance === 'string' || !(allowance.limit > 0)) {\n    return undefined\n  }\n  return (allowance.limit * dailySpendCapPercent) / 100\n}\n\n/**\n * A budget rejection from the gateway, reworded without its dollar amounts. Undefined for any other error.\n * The gateway answers 402 with `quota_for_entity_exceeded` and a message naming the spend and limit.\n */\nexport function budgetExceededMessage(\n  message: string,\n  allowance: Allowance | string,\n  timeZone: string,\n): string | undefined {\n  if (!/quota_for_entity_exceeded|quota limit exceeded|budget exceeded/i.test(message)) {\n    return undefined\n  }\n  const reset = typeof allowance === 'string' ? undefined : nextReset(allowance.refreshPeriod)\n  return reset\n    ? `Humaan AI has used its AI Gateway budget. It resets on ${formatReset(reset, timeZone)}.`\n    : 'Humaan AI has used its AI Gateway budget. An admin can raise it in Vercel.'\n}\n"],"names":["lowBudgetUsedShare","formatReset","nextReset","projectBudget","accountAllowance","req","budgetView","allowance","remainingShare","limit","Math","max","spent","low","dailyCapUsd","dailySpendCapPercent","undefined","budgetExceededMessage","message","timeZone","test","reset","refreshPeriod"],"mappings":"AAKA,SAASA,kBAAkB,QAAQ,kBAAiB;AACpD,SAASC,WAAW,EAAEC,SAAS,EAAEC,aAAa,QAAQ,cAAa;AAKnE;;;CAGC,GACD,OAAO,eAAeC,iBAAiBC,GAAmB;IACxD,OAAOF,cAAcE;AACvB;AAEA,wFAAwF,GACxF,OAAO,SAASC,WAAWC,SAAoB;IAC7C,MAAMC,iBACJD,UAAUE,KAAK,GAAG,IAAIC,KAAKC,GAAG,CAACJ,UAAUE,KAAK,GAAGF,UAAUK,KAAK,EAAE,KAAKL,UAAUE,KAAK,GAAG;IAC3F,MAAMI,MAAMN,UAAUE,KAAK,GAAG,KAAKF,UAAUK,KAAK,GAAGL,UAAUE,KAAK,IAAIT;IACxE,OAAO;QAAEQ;QAAgBK;IAAI;AAC/B;AAEA;;;CAGC,GACD,OAAO,SAASC,YACdC,oBAA4B,EAC5BR,SAA6B;IAE7B,IAAI,CAAEQ,CAAAA,uBAAuB,CAAA,KAAM,OAAOR,cAAc,YAAY,CAAEA,CAAAA,UAAUE,KAAK,GAAG,CAAA,GAAI;QAC1F,OAAOO;IACT;IACA,OAAO,AAACT,UAAUE,KAAK,GAAGM,uBAAwB;AACpD;AAEA;;;CAGC,GACD,OAAO,SAASE,sBACdC,OAAe,EACfX,SAA6B,EAC7BY,QAAgB;IAEhB,IAAI,CAAC,kEAAkEC,IAAI,CAACF,UAAU;QACpF,OAAOF;IACT;IACA,MAAMK,QAAQ,OAAOd,cAAc,WAAWS,YAAYd,UAAUK,UAAUe,aAAa;IAC3F,OAAOD,QACH,CAAC,uDAAuD,EAAEpB,YAAYoB,OAAOF,UAAU,CAAC,CAAC,GACzF;AACN"}

package/dist/endpoints/applyEndpoint.d.ts

@@ -0,0 +1,12 @@
+import type { PayloadRequest } from 'payload';
+import type { AssistantSettings } from '../types.js';
+export declare function applyEndpoint(fallback: AssistantSettings): {
+    path: string;
+    method: "post";
+    handler: (req: PayloadRequest) => Promise<Response>;
+};
+export declare function cancelEndpoint(fallback: AssistantSettings): {
+    path: string;
+    method: "post";
+    handler: (req: PayloadRequest) => Promise<Response>;
+};

package/dist/endpoints/applyEndpoint.js

@@ -0,0 +1,170 @@
+import { markPlanInThread } from '../chat/threads.js';
+import { aiAssistantPlanSlug, applyEndpointPath, cancelEndpointPath } from '../constants.js';
+import { notAllowed } from '../plan/allowed.js';
+import { applyStoredPlan } from '../plan/applyPlan.js';
+import { userIdOf } from '../settings.js';
+import { allowAssistant } from './access.js';
+import { errorMessage, readPlanRequest } from './form.js';
+function isRecord(value) {
+    return Boolean(value) && typeof value === 'object' && !Array.isArray(value);
+}
+export function applyEndpoint(fallback) {
+    return {
+        path: applyEndpointPath,
+        method: 'post',
+        handler: async (req)=>{
+            const allowed = await allowAssistant(req, fallback);
+            if (allowed instanceof Response) {
+                return allowed;
+            }
+            const form = await readPlanRequest(req);
+            if (form instanceof Response) {
+                return form;
+            }
+            const loaded = await loadPlan(req, form.planId);
+            if (loaded instanceof Response) {
+                return loaded;
+            }
+            if (loaded.status !== 'proposed') {
+                return Response.json({
+                    message: 'This plan can no longer be applied.'
+                }, {
+                    status: 400
+                });
+            }
+            const refused = notAllowed(loaded.plan, req.payload.config);
+            if (refused) {
+                return Response.json({
+                    message: refused
+                }, {
+                    status: 403
+                });
+            }
+            try {
+                const adminRoute = req.payload.config.routes?.admin ?? '/admin';
+                const changes = await applyStoredPlan({
+                    req,
+                    plan: loaded.plan,
+                    planId: form.planId,
+                    adminRoute
+                });
+                await recordOutcome(req, loaded.thread, form.planId, {
+                    status: 'applied',
+                    changes
+                });
+                return Response.json({
+                    changes
+                });
+            } catch (error) {
+                const message = errorMessage(error);
+                req.payload.logger.error({
+                    message,
+                    planId: form.planId
+                }, 'Humaan AI apply failed');
+                return Response.json({
+                    message
+                }, {
+                    status: 400
+                });
+            }
+        }
+    };
+}
+export function cancelEndpoint(fallback) {
+    return {
+        path: cancelEndpointPath,
+        method: 'post',
+        handler: async (req)=>{
+            const allowed = await allowAssistant(req, fallback);
+            if (allowed instanceof Response) {
+                return allowed;
+            }
+            const form = await readPlanRequest(req);
+            if (form instanceof Response) {
+                return form;
+            }
+            const { planId } = form;
+            const loaded = await loadPlan(req, planId);
+            if (loaded instanceof Response) {
+                return loaded;
+            }
+            if (loaded.status === 'applied') {
+                return Response.json({
+                    message: 'This plan has already been applied.'
+                }, {
+                    status: 400
+                });
+            }
+            await req.payload.update({
+                collection: aiAssistantPlanSlug,
+                id: planId,
+                data: {
+                    status: 'cancelled'
+                },
+                req
+            });
+            await recordOutcome(req, loaded.thread, planId, {
+                status: 'cancelled'
+            });
+            return Response.json({
+                cancelled: true
+            });
+        }
+    };
+}
+/** The plan is already saved, so a failure here only leaves the card in the conversation out of date. */ async function recordOutcome(req, chatId, planId, update) {
+    if (!chatId) {
+        return;
+    }
+    try {
+        await markPlanInThread(req, chatId, planId, update);
+    } catch (error) {
+        req.payload.logger.error({
+            err: error,
+            planId
+        }, 'Humaan AI could not update the conversation');
+    }
+}
+async function loadPlan(req, id) {
+    let doc;
+    try {
+        doc = await req.payload.findByID({
+            collection: aiAssistantPlanSlug,
+            id,
+            depth: 0,
+            overrideAccess: false,
+            req,
+            user: req.user
+        });
+    } catch  {
+        return Response.json({
+            message: 'That plan could not be found.'
+        }, {
+            status: 404
+        });
+    }
+    if (!isRecord(doc) || !isRecord(doc.plan)) {
+        return Response.json({
+            message: 'That plan could not be read.'
+        }, {
+            status: 400
+        });
+    }
+    const owner = typeof doc.owner === 'string' ? doc.owner : isRecord(doc.owner) ? doc.owner.id : undefined;
+    if (String(owner ?? '') !== userIdOf(req.user)) {
+        return Response.json({
+            message: 'That plan belongs to someone else.'
+        }, {
+            status: 403
+        });
+    }
+    const status = typeof doc.status === 'string' ? doc.status : '';
+    const thread = typeof doc.thread === 'string' && doc.thread ? doc.thread : undefined;
+    return {
+        status,
+        thread,
+        plan: doc.plan
+    };
+}
+
+//# sourceMappingURL=applyEndpoint.js.map

package/dist/endpoints/applyEndpoint.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/endpoints/applyEndpoint.ts"],"sourcesContent":["import type { CollectionSlug, PayloadRequest } from 'payload'\n\nimport type { StoredPlan } from '../plan/stored.js'\nimport type { AssistantChange, AssistantSettings, PlanStatus } from '../types.js'\n\nimport { markPlanInThread } from '../chat/threads.js'\nimport { aiAssistantPlanSlug, applyEndpointPath, cancelEndpointPath } from '../constants.js'\nimport { notAllowed } from '../plan/allowed.js'\nimport { applyStoredPlan } from '../plan/applyPlan.js'\nimport { userIdOf } from '../settings.js'\nimport { allowAssistant } from './access.js'\nimport { errorMessage, readPlanRequest } from './form.js'\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return Boolean(value) && typeof value === 'object' && !Array.isArray(value)\n}\n\nexport function applyEndpoint(fallback: AssistantSettings) {\n  return {\n    path: applyEndpointPath,\n    method: 'post' as const,\n    handler: async (req: PayloadRequest) => {\n      const allowed = await allowAssistant(req, fallback)\n      if (allowed instanceof Response) {\n        return allowed\n      }\n\n      const form = await readPlanRequest(req)\n      if (form instanceof Response) {\n        return form\n      }\n\n      const loaded = await loadPlan(req, form.planId)\n      if (loaded instanceof Response) {\n        return loaded\n      }\n      if (loaded.status !== 'proposed') {\n        return Response.json({ message: 'This plan can no longer be applied.' }, { status: 400 })\n      }\n      const refused = notAllowed(loaded.plan, req.payload.config)\n      if (refused) {\n        return Response.json({ message: refused }, { status: 403 })\n      }\n\n      try {\n        const adminRoute = req.payload.config.routes?.admin ?? '/admin'\n        const changes = await applyStoredPlan({\n          req,\n          plan: loaded.plan,\n          planId: form.planId,\n          adminRoute,\n        })\n        await recordOutcome(req, loaded.thread, form.planId, { status: 'applied', changes })\n        return Response.json({ changes })\n      } catch (error) {\n        const message = errorMessage(error)\n        req.payload.logger.error({ message, planId: form.planId }, 'Humaan AI apply failed')\n        return Response.json({ message }, { status: 400 })\n      }\n    },\n  }\n}\n\nexport function cancelEndpoint(fallback: AssistantSettings) {\n  return {\n    path: cancelEndpointPath,\n    method: 'post' as const,\n    handler: async (req: PayloadRequest) => {\n      const allowed = await allowAssistant(req, fallback)\n      if (allowed instanceof Response) {\n        return allowed\n      }\n      const form = await readPlanRequest(req)\n      if (form instanceof Response) {\n        return form\n      }\n      const { planId } = form\n      const loaded = await loadPlan(req, planId)\n      if (loaded instanceof Response) {\n        return loaded\n      }\n      if (loaded.status === 'applied') {\n        return Response.json({ message: 'This plan has already been applied.' }, { status: 400 })\n      }\n      await req.payload.update({\n        collection: aiAssistantPlanSlug as CollectionSlug,\n        id: planId,\n        data: { status: 'cancelled' } as never,\n        req,\n      })\n      await recordOutcome(req, loaded.thread, planId, { status: 'cancelled' })\n      return Response.json({ cancelled: true })\n    },\n  }\n}\n\n/** The plan is already saved, so a failure here only leaves the card in the conversation out of date. */\nasync function recordOutcome(\n  req: PayloadRequest,\n  chatId: string | undefined,\n  planId: string,\n  update: { changes?: AssistantChange[]; status: PlanStatus },\n): Promise<void> {\n  if (!chatId) {\n    return\n  }\n  try {\n    await markPlanInThread(req, chatId, planId, update)\n  } catch (error) {\n    req.payload.logger.error({ err: error, planId }, 'Humaan AI could not update the conversation')\n  }\n}\n\nasync function loadPlan(\n  req: PayloadRequest,\n  id: string,\n): Promise<{ plan: StoredPlan; status: string; thread?: string } | Response> {\n  let doc: unknown\n  try {\n    doc = await req.payload.findByID({\n      collection: aiAssistantPlanSlug as CollectionSlug,\n      id,\n      depth: 0,\n      overrideAccess: false,\n      req,\n      user: req.user,\n    })\n  } catch {\n    return Response.json({ message: 'That plan could not be found.' }, { status: 404 })\n  }\n  if (!isRecord(doc) || !isRecord(doc.plan)) {\n    return Response.json({ message: 'That plan could not be read.' }, { status: 400 })\n  }\n  const owner =\n    typeof doc.owner === 'string'\n      ? doc.owner\n      : isRecord(doc.owner)\n        ? (doc.owner.id as number | string)\n        : undefined\n  if (String(owner ?? '') !== userIdOf(req.user)) {\n    return Response.json({ message: 'That plan belongs to someone else.' }, { status: 403 })\n  }\n  const status = typeof doc.status === 'string' ? doc.status : ''\n  const thread = typeof doc.thread === 'string' && doc.thread ? doc.thread : undefined\n  return { status, thread, plan: doc.plan as unknown as StoredPlan }\n}\n"],"names":["markPlanInThread","aiAssistantPlanSlug","applyEndpointPath","cancelEndpointPath","notAllowed","applyStoredPlan","userIdOf","allowAssistant","errorMessage","readPlanRequest","isRecord","value","Boolean","Array","isArray","applyEndpoint","fallback","path","method","handler","req","allowed","Response","form","loaded","loadPlan","planId","status","json","message","refused","plan","payload","config","adminRoute","routes","admin","changes","recordOutcome","thread","error","logger","cancelEndpoint","update","collection","id","data","cancelled","chatId","err","doc","findByID","depth","overrideAccess","user","owner","undefined","String"],"mappings":"AAKA,SAASA,gBAAgB,QAAQ,qBAAoB;AACrD,SAASC,mBAAmB,EAAEC,iBAAiB,EAAEC,kBAAkB,QAAQ,kBAAiB;AAC5F,SAASC,UAAU,QAAQ,qBAAoB;AAC/C,SAASC,eAAe,QAAQ,uBAAsB;AACtD,SAASC,QAAQ,QAAQ,iBAAgB;AACzC,SAASC,cAAc,QAAQ,cAAa;AAC5C,SAASC,YAAY,EAAEC,eAAe,QAAQ,YAAW;AAEzD,SAASC,SAASC,KAAc;IAC9B,OAAOC,QAAQD,UAAU,OAAOA,UAAU,YAAY,CAACE,MAAMC,OAAO,CAACH;AACvE;AAEA,OAAO,SAASI,cAAcC,QAA2B;IACvD,OAAO;QACLC,MAAMf;QACNgB,QAAQ;QACRC,SAAS,OAAOC;YACd,MAAMC,UAAU,MAAMd,eAAea,KAAKJ;YAC1C,IAAIK,mBAAmBC,UAAU;gBAC/B,OAAOD;YACT;YAEA,MAAME,OAAO,MAAMd,gBAAgBW;YACnC,IAAIG,gBAAgBD,UAAU;gBAC5B,OAAOC;YACT;YAEA,MAAMC,SAAS,MAAMC,SAASL,KAAKG,KAAKG,MAAM;YAC9C,IAAIF,kBAAkBF,UAAU;gBAC9B,OAAOE;YACT;YACA,IAAIA,OAAOG,MAAM,KAAK,YAAY;gBAChC,OAAOL,SAASM,IAAI,CAAC;oBAAEC,SAAS;gBAAsC,GAAG;oBAAEF,QAAQ;gBAAI;YACzF;YACA,MAAMG,UAAU1B,WAAWoB,OAAOO,IAAI,EAAEX,IAAIY,OAAO,CAACC,MAAM;YAC1D,IAAIH,SAAS;gBACX,OAAOR,SAASM,IAAI,CAAC;oBAAEC,SAASC;gBAAQ,GAAG;oBAAEH,QAAQ;gBAAI;YAC3D;YAEA,IAAI;gBACF,MAAMO,aAAad,IAAIY,OAAO,CAACC,MAAM,CAACE,MAAM,EAAEC,SAAS;gBACvD,MAAMC,UAAU,MAAMhC,gBAAgB;oBACpCe;oBACAW,MAAMP,OAAOO,IAAI;oBACjBL,QAAQH,KAAKG,MAAM;oBACnBQ;gBACF;gBACA,MAAMI,cAAclB,KAAKI,OAAOe,MAAM,EAAEhB,KAAKG,MAAM,EAAE;oBAAEC,QAAQ;oBAAWU;gBAAQ;gBAClF,OAAOf,SAASM,IAAI,CAAC;oBAAES;gBAAQ;YACjC,EAAE,OAAOG,OAAO;gBACd,MAAMX,UAAUrB,aAAagC;gBAC7BpB,IAAIY,OAAO,CAACS,MAAM,CAACD,KAAK,CAAC;oBAAEX;oBAASH,QAAQH,KAAKG,MAAM;gBAAC,GAAG;gBAC3D,OAAOJ,SAASM,IAAI,CAAC;oBAAEC;gBAAQ,GAAG;oBAAEF,QAAQ;gBAAI;YAClD;QACF;IACF;AACF;AAEA,OAAO,SAASe,eAAe1B,QAA2B;IACxD,OAAO;QACLC,MAAMd;QACNe,QAAQ;QACRC,SAAS,OAAOC;YACd,MAAMC,UAAU,MAAMd,eAAea,KAAKJ;YAC1C,IAAIK,mBAAmBC,UAAU;gBAC/B,OAAOD;YACT;YACA,MAAME,OAAO,MAAMd,gBAAgBW;YACnC,IAAIG,gBAAgBD,UAAU;gBAC5B,OAAOC;YACT;YACA,MAAM,EAAEG,MAAM,EAAE,GAAGH;YACnB,MAAMC,SAAS,MAAMC,SAASL,KAAKM;YACnC,IAAIF,kBAAkBF,UAAU;gBAC9B,OAAOE;YACT;YACA,IAAIA,OAAOG,MAAM,KAAK,WAAW;gBAC/B,OAAOL,SAASM,IAAI,CAAC;oBAAEC,SAAS;gBAAsC,GAAG;oBAAEF,QAAQ;gBAAI;YACzF;YACA,MAAMP,IAAIY,OAAO,CAACW,MAAM,CAAC;gBACvBC,YAAY3C;gBACZ4C,IAAInB;gBACJoB,MAAM;oBAAEnB,QAAQ;gBAAY;gBAC5BP;YACF;YACA,MAAMkB,cAAclB,KAAKI,OAAOe,MAAM,EAAEb,QAAQ;gBAAEC,QAAQ;YAAY;YACtE,OAAOL,SAASM,IAAI,CAAC;gBAAEmB,WAAW;YAAK;QACzC;IACF;AACF;AAEA,uGAAuG,GACvG,eAAeT,cACblB,GAAmB,EACnB4B,MAA0B,EAC1BtB,MAAc,EACdiB,MAA2D;IAE3D,IAAI,CAACK,QAAQ;QACX;IACF;IACA,IAAI;QACF,MAAMhD,iBAAiBoB,KAAK4B,QAAQtB,QAAQiB;IAC9C,EAAE,OAAOH,OAAO;QACdpB,IAAIY,OAAO,CAACS,MAAM,CAACD,KAAK,CAAC;YAAES,KAAKT;YAAOd;QAAO,GAAG;IACnD;AACF;AAEA,eAAeD,SACbL,GAAmB,EACnByB,EAAU;IAEV,IAAIK;IACJ,IAAI;QACFA,MAAM,MAAM9B,IAAIY,OAAO,CAACmB,QAAQ,CAAC;YAC/BP,YAAY3C;YACZ4C;YACAO,OAAO;YACPC,gBAAgB;YAChBjC;YACAkC,MAAMlC,IAAIkC,IAAI;QAChB;IACF,EAAE,OAAM;QACN,OAAOhC,SAASM,IAAI,CAAC;YAAEC,SAAS;QAAgC,GAAG;YAAEF,QAAQ;QAAI;IACnF;IACA,IAAI,CAACjB,SAASwC,QAAQ,CAACxC,SAASwC,IAAInB,IAAI,GAAG;QACzC,OAAOT,SAASM,IAAI,CAAC;YAAEC,SAAS;QAA+B,GAAG;YAAEF,QAAQ;QAAI;IAClF;IACA,MAAM4B,QACJ,OAAOL,IAAIK,KAAK,KAAK,WACjBL,IAAIK,KAAK,GACT7C,SAASwC,IAAIK,KAAK,IACfL,IAAIK,KAAK,CAACV,EAAE,GACbW;IACR,IAAIC,OAAOF,SAAS,QAAQjD,SAASc,IAAIkC,IAAI,GAAG;QAC9C,OAAOhC,SAASM,IAAI,CAAC;YAAEC,SAAS;QAAqC,GAAG;YAAEF,QAAQ;QAAI;IACxF;IACA,MAAMA,SAAS,OAAOuB,IAAIvB,MAAM,KAAK,WAAWuB,IAAIvB,MAAM,GAAG;IAC7D,MAAMY,SAAS,OAAOW,IAAIX,MAAM,KAAK,YAAYW,IAAIX,MAAM,GAAGW,IAAIX,MAAM,GAAGiB;IAC3E,OAAO;QAAE7B;QAAQY;QAAQR,MAAMmB,IAAInB,IAAI;IAA0B;AACnE"}

package/dist/endpoints/budget.d.ts

@@ -0,0 +1,30 @@
+import type { PayloadRequest } from 'payload';
+export type RefreshPeriod = 'daily' | 'monthly' | 'none' | 'weekly';
+/** The Vercel project's AI Gateway budget for the current period, in US dollars. */
+export interface ProjectBudget {
+    limit: number;
+    refreshPeriod: RefreshPeriod;
+    spent: number;
+}
+/** The deployment's project and the team that owns it, from its OIDC token. */
+export interface OidcClaims {
+    projectId: string;
+    teamId?: string;
+}
+/**
+ * The budget of the Vercel project this site runs as, or a reason it could not be read, in words for an admin.
+ * The project comes from the deployment's OIDC token, the same token the gateway bills to that project.
+ * The access token comes from the environment, so it is never stored in the database, logged, or returned.
+ */
+export declare function projectBudget(req: PayloadRequest): Promise<ProjectBudget | string>;
+/**
+ * Reads the `project_id` and `owner_id` claims. The token is not verified here: it only chooses which budget to show.
+ * The team id is passed to Vercel as well, so a token that can reach several teams still reads the right one.
+ */
+export declare function claimsFromOidcToken(token: string): OidcClaims | undefined;
+/** The project's active budget from a budgets list, including one inherited from the team's project default. */
+export declare function findProjectBudget(body: unknown, projectId: string): ProjectBudget | undefined;
+/** When the budget next resets. Vercel resets at the start of each period in UTC. A period of none never resets. */
+export declare function nextReset(period: RefreshPeriod, now?: Date): Date | undefined;
+/** A long date and 24-hour time in the site's time zone, such as `1 November 2026, 0800`. */
+export declare function formatReset(date: Date, timeZone: string): string;

package/dist/endpoints/budget.js

@@ -0,0 +1,153 @@
+import { getVercelOidcToken } from '@vercel/oidc';
+import { amount } from '../chat/usage.js';
+import { budgetTokenEnvVar } from '../constants.js';
+const budgetsUrl = 'https://api.vercel.com/ai-gateway/budgets/list';
+const cacheMs = 60_000;
+/** One cached budget per project and token, so each message and each panel open does not call Vercel. */ let cached;
+/**
+ * The budget of the Vercel project this site runs as, or a reason it could not be read, in words for an admin.
+ * The project comes from the deployment's OIDC token, the same token the gateway bills to that project.
+ * The access token comes from the environment, so it is never stored in the database, logged, or returned.
+ */ export async function projectBudget(req) {
+    const claims = await currentClaims();
+    if (!claims) {
+        return 'This site has no Vercel OIDC token. On Vercel it is issued to each deployment; locally, link the project with the Vercel CLI.';
+    }
+    const accessToken = process.env[budgetTokenEnvVar]?.trim();
+    if (!accessToken) {
+        return `Set ${budgetTokenEnvVar} to read the project's budget.`;
+    }
+    const id = `${claims.projectId}:${accessToken}`;
+    if (cached && cached.id === id && Date.now() - cached.at < cacheMs) {
+        return cached.result;
+    }
+    let result;
+    try {
+        const query = new URLSearchParams({
+            scopeType: 'project',
+            ...claims.teamId ? {
+                teamId: claims.teamId
+            } : {}
+        });
+        const response = await fetch(`${budgetsUrl}?${query}`, {
+            headers: {
+                Authorization: `Bearer ${accessToken}`
+            }
+        });
+        if (!response.ok) {
+            req.payload.logger.error({
+                status: response.status
+            }, 'Humaan AI could not read the project budget');
+            // Vercel answers 404 rather than 403 for a token scoped to another team.
+            result = response.status === 401 || response.status === 403 || response.status === 404 ? `Vercel refused ${budgetTokenEnvVar}. Check it is scoped to the team that owns this project and has not expired.` : "Vercel's budget API did not respond as expected.";
+        } else {
+            result = findProjectBudget(await response.json(), claims.projectId) ?? 'This Vercel project has no AI Gateway budget.';
+        }
+    } catch (error) {
+        req.payload.logger.error({
+            err: error
+        }, "Humaan AI could not reach Vercel's budget API");
+        result = "Vercel's budget API could not be reached.";
+    }
+    cached = {
+        id,
+        at: Date.now(),
+        result
+    };
+    return result;
+}
+/** The OIDC token's project and team, or undefined when there is no token. */ async function currentClaims() {
+    try {
+        return claimsFromOidcToken(await getVercelOidcToken());
+    } catch  {
+        return undefined;
+    }
+}
+/**
+ * Reads the `project_id` and `owner_id` claims. The token is not verified here: it only chooses which budget to show.
+ * The team id is passed to Vercel as well, so a token that can reach several teams still reads the right one.
+ */ export function claimsFromOidcToken(token) {
+    const payload = token.split('.')[1];
+    if (!payload) {
+        return undefined;
+    }
+    try {
+        const claims = JSON.parse(Buffer.from(payload, 'base64url').toString('utf8'));
+        if (!isRecord(claims) || typeof claims.project_id !== 'string') {
+            return undefined;
+        }
+        return {
+            projectId: claims.project_id,
+            ...typeof claims.owner_id === 'string' ? {
+                teamId: claims.owner_id
+            } : {}
+        };
+    } catch  {
+        return undefined;
+    }
+}
+/** The project's active budget from a budgets list, including one inherited from the team's project default. */ export function findProjectBudget(body, projectId) {
+    const budgets = isRecord(body) && Array.isArray(body.budgets) ? body.budgets : [];
+    for (const row of budgets){
+        if (!isRecord(row) || row.scopeType !== 'project' || isTrue(row.archived)) {
+            continue;
+        }
+        if (row.scopeId !== projectId && row.quotaEntityId !== projectId) {
+            continue;
+        }
+        const limit = amount(row.limitAmount);
+        const spent = amount(row.currentSpend);
+        if (limit === undefined || spent === undefined) {
+            return undefined;
+        }
+        return {
+            limit,
+            spent,
+            refreshPeriod: refreshPeriodOf(row.refreshPeriod)
+        };
+    }
+    return undefined;
+}
+/** When the budget next resets. Vercel resets at the start of each period in UTC. A period of none never resets. */ export function nextReset(period, now = new Date()) {
+    const year = now.getUTCFullYear();
+    const month = now.getUTCMonth();
+    const day = now.getUTCDate();
+    if (period === 'daily') {
+        return new Date(Date.UTC(year, month, day + 1));
+    }
+    if (period === 'weekly') {
+        // getUTCDay: Sunday 0, Monday 1. Always the coming Monday, a full week ahead when today is Monday.
+        const daysToMonday = (8 - now.getUTCDay()) % 7 || 7;
+        return new Date(Date.UTC(year, month, day + daysToMonday));
+    }
+    if (period === 'monthly') {
+        return new Date(Date.UTC(year, month + 1, 1));
+    }
+    return undefined;
+}
+/** A long date and 24-hour time in the site's time zone, such as `1 November 2026, 0800`. */ export function formatReset(date, timeZone) {
+    const parts = Object.fromEntries(new Intl.DateTimeFormat('en-AU', {
+        timeZone,
+        day: 'numeric',
+        month: 'long',
+        year: 'numeric',
+        hour: '2-digit',
+        minute: '2-digit',
+        hourCycle: 'h23'
+    }).formatToParts(date).map((part)=>[
+            part.type,
+            part.value
+        ]));
+    return `${parts.day} ${parts.month} ${parts.year}, ${parts.hour}${parts.minute}`;
+}
+function refreshPeriodOf(value) {
+    return value === 'daily' || value === 'weekly' || value === 'monthly' ? value : 'none';
+}
+/** Vercel documents booleans but its examples send strings. */ function isTrue(value) {
+    return value === true || value === 'true';
+}
+function isRecord(value) {
+    return Boolean(value) && typeof value === 'object' && !Array.isArray(value);
+}
+
+//# sourceMappingURL=budget.js.map

package/dist/endpoints/budget.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/endpoints/budget.ts"],"sourcesContent":["import type { PayloadRequest } from 'payload'\n\nimport { getVercelOidcToken } from '@vercel/oidc'\n\nimport { amount } from '../chat/usage.js'\nimport { budgetTokenEnvVar } from '../constants.js'\n\nexport type RefreshPeriod = 'daily' | 'monthly' | 'none' | 'weekly'\n\n/** The Vercel project's AI Gateway budget for the current period, in US dollars. */\nexport interface ProjectBudget {\n  limit: number\n  refreshPeriod: RefreshPeriod\n  spent: number\n}\n\nconst budgetsUrl = 'https://api.vercel.com/ai-gateway/budgets/list'\nconst cacheMs = 60_000\n\n/** One cached budget per project and token, so each message and each panel open does not call Vercel. */\nlet cached: { at: number; id: string; result: ProjectBudget | string } | undefined\n\n/** The deployment's project and the team that owns it, from its OIDC token. */\nexport interface OidcClaims {\n  projectId: string\n  teamId?: string\n}\n\n/**\n * The budget of the Vercel project this site runs as, or a reason it could not be read, in words for an admin.\n * The project comes from the deployment's OIDC token, the same token the gateway bills to that project.\n * The access token comes from the environment, so it is never stored in the database, logged, or returned.\n */\nexport async function projectBudget(req: PayloadRequest): Promise<ProjectBudget | string> {\n  const claims = await currentClaims()\n  if (!claims) {\n    return 'This site has no Vercel OIDC token. On Vercel it is issued to each deployment; locally, link the project with the Vercel CLI.'\n  }\n  const accessToken = process.env[budgetTokenEnvVar]?.trim()\n  if (!accessToken) {\n    return `Set ${budgetTokenEnvVar} to read the project's budget.`\n  }\n\n  const id = `${claims.projectId}:${accessToken}`\n  if (cached && cached.id === id && Date.now() - cached.at < cacheMs) {\n    return cached.result\n  }\n\n  let result: ProjectBudget | string\n  try {\n    const query = new URLSearchParams({\n      scopeType: 'project',\n      ...(claims.teamId ? { teamId: claims.teamId } : {}),\n    })\n    const response = await fetch(`${budgetsUrl}?${query}`, {\n      headers: { Authorization: `Bearer ${accessToken}` },\n    })\n    if (!response.ok) {\n      req.payload.logger.error(\n        { status: response.status },\n        'Humaan AI could not read the project budget',\n      )\n      // Vercel answers 404 rather than 403 for a token scoped to another team.\n      result =\n        response.status === 401 || response.status === 403 || response.status === 404\n          ? `Vercel refused ${budgetTokenEnvVar}. Check it is scoped to the team that owns this project and has not expired.`\n          : \"Vercel's budget API did not respond as expected.\"\n    } else {\n      result =\n        findProjectBudget(await response.json(), claims.projectId) ??\n        'This Vercel project has no AI Gateway budget.'\n    }\n  } catch (error) {\n    req.payload.logger.error({ err: error }, \"Humaan AI could not reach Vercel's budget API\")\n    result = \"Vercel's budget API could not be reached.\"\n  }\n  cached = { id, at: Date.now(), result }\n  return result\n}\n\n/** The OIDC token's project and team, or undefined when there is no token. */\nasync function currentClaims(): Promise<OidcClaims | undefined> {\n  try {\n    return claimsFromOidcToken(await getVercelOidcToken())\n  } catch {\n    return undefined\n  }\n}\n\n/**\n * Reads the `project_id` and `owner_id` claims. The token is not verified here: it only chooses which budget to show.\n * The team id is passed to Vercel as well, so a token that can reach several teams still reads the right one.\n */\nexport function claimsFromOidcToken(token: string): OidcClaims | undefined {\n  const payload = token.split('.')[1]\n  if (!payload) {\n    return undefined\n  }\n  try {\n    const claims: unknown = JSON.parse(Buffer.from(payload, 'base64url').toString('utf8'))\n    if (!isRecord(claims) || typeof claims.project_id !== 'string') {\n      return undefined\n    }\n    return {\n      projectId: claims.project_id,\n      ...(typeof claims.owner_id === 'string' ? { teamId: claims.owner_id } : {}),\n    }\n  } catch {\n    return undefined\n  }\n}\n\n/** The project's active budget from a budgets list, including one inherited from the team's project default. */\nexport function findProjectBudget(body: unknown, projectId: string): ProjectBudget | undefined {\n  const budgets = isRecord(body) && Array.isArray(body.budgets) ? body.budgets : []\n  for (const row of budgets) {\n    if (!isRecord(row) || row.scopeType !== 'project' || isTrue(row.archived)) {\n      continue\n    }\n    if (row.scopeId !== projectId && row.quotaEntityId !== projectId) {\n      continue\n    }\n    const limit = amount(row.limitAmount)\n    const spent = amount(row.currentSpend)\n    if (limit === undefined || spent === undefined) {\n      return undefined\n    }\n    return { limit, spent, refreshPeriod: refreshPeriodOf(row.refreshPeriod) }\n  }\n  return undefined\n}\n\n/** When the budget next resets. Vercel resets at the start of each period in UTC. A period of none never resets. */\nexport function nextReset(period: RefreshPeriod, now = new Date()): Date | undefined {\n  const year = now.getUTCFullYear()\n  const month = now.getUTCMonth()\n  const day = now.getUTCDate()\n  if (period === 'daily') {\n    return new Date(Date.UTC(year, month, day + 1))\n  }\n  if (period === 'weekly') {\n    // getUTCDay: Sunday 0, Monday 1. Always the coming Monday, a full week ahead when today is Monday.\n    const daysToMonday = (8 - now.getUTCDay()) % 7 || 7\n    return new Date(Date.UTC(year, month, day + daysToMonday))\n  }\n  if (period === 'monthly') {\n    return new Date(Date.UTC(year, month + 1, 1))\n  }\n  return undefined\n}\n\n/** A long date and 24-hour time in the site's time zone, such as `1 November 2026, 0800`. */\nexport function formatReset(date: Date, timeZone: string): string {\n  const parts = Object.fromEntries(\n    new Intl.DateTimeFormat('en-AU', {\n      timeZone,\n      day: 'numeric',\n      month: 'long',\n      year: 'numeric',\n      hour: '2-digit',\n      minute: '2-digit',\n      hourCycle: 'h23',\n    })\n      .formatToParts(date)\n      .map((part) => [part.type, part.value]),\n  )\n  return `${parts.day} ${parts.month} ${parts.year}, ${parts.hour}${parts.minute}`\n}\n\nfunction refreshPeriodOf(value: unknown): RefreshPeriod {\n  return value === 'daily' || value === 'weekly' || value === 'monthly' ? value : 'none'\n}\n\n/** Vercel documents booleans but its examples send strings. */\nfunction isTrue(value: unknown): boolean {\n  return value === true || value === 'true'\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return Boolean(value) && typeof value === 'object' && !Array.isArray(value)\n}\n"],"names":["getVercelOidcToken","amount","budgetTokenEnvVar","budgetsUrl","cacheMs","cached","projectBudget","req","claims","currentClaims","accessToken","process","env","trim","id","projectId","Date","now","at","result","query","URLSearchParams","scopeType","teamId","response","fetch","headers","Authorization","ok","payload","logger","error","status","findProjectBudget","json","err","claimsFromOidcToken","undefined","token","split","JSON","parse","Buffer","from","toString","isRecord","project_id","owner_id","body","budgets","Array","isArray","row","isTrue","archived","scopeId","quotaEntityId","limit","limitAmount","spent","currentSpend","refreshPeriod","refreshPeriodOf","nextReset","period","year","getUTCFullYear","month","getUTCMonth","day","getUTCDate","UTC","daysToMonday","getUTCDay","formatReset","date","timeZone","parts","Object","fromEntries","Intl","DateTimeFormat","hour","minute","hourCycle","formatToParts","map","part","type","value","Boolean"],"mappings":"AAEA,SAASA,kBAAkB,QAAQ,eAAc;AAEjD,SAASC,MAAM,QAAQ,mBAAkB;AACzC,SAASC,iBAAiB,QAAQ,kBAAiB;AAWnD,MAAMC,aAAa;AACnB,MAAMC,UAAU;AAEhB,uGAAuG,GACvG,IAAIC;AAQJ;;;;CAIC,GACD,OAAO,eAAeC,cAAcC,GAAmB;IACrD,MAAMC,SAAS,MAAMC;IACrB,IAAI,CAACD,QAAQ;QACX,OAAO;IACT;IACA,MAAME,cAAcC,QAAQC,GAAG,CAACV,kBAAkB,EAAEW;IACpD,IAAI,CAACH,aAAa;QAChB,OAAO,CAAC,IAAI,EAAER,kBAAkB,8BAA8B,CAAC;IACjE;IAEA,MAAMY,KAAK,GAAGN,OAAOO,SAAS,CAAC,CAAC,EAAEL,aAAa;IAC/C,IAAIL,UAAUA,OAAOS,EAAE,KAAKA,MAAME,KAAKC,GAAG,KAAKZ,OAAOa,EAAE,GAAGd,SAAS;QAClE,OAAOC,OAAOc,MAAM;IACtB;IAEA,IAAIA;IACJ,IAAI;QACF,MAAMC,QAAQ,IAAIC,gBAAgB;YAChCC,WAAW;YACX,GAAId,OAAOe,MAAM,GAAG;gBAAEA,QAAQf,OAAOe,MAAM;YAAC,IAAI,CAAC,CAAC;QACpD;QACA,MAAMC,WAAW,MAAMC,MAAM,GAAGtB,WAAW,CAAC,EAAEiB,OAAO,EAAE;YACrDM,SAAS;gBAAEC,eAAe,CAAC,OAAO,EAAEjB,aAAa;YAAC;QACpD;QACA,IAAI,CAACc,SAASI,EAAE,EAAE;YAChBrB,IAAIsB,OAAO,CAACC,MAAM,CAACC,KAAK,CACtB;gBAAEC,QAAQR,SAASQ,MAAM;YAAC,GAC1B;YAEF,yEAAyE;YACzEb,SACEK,SAASQ,MAAM,KAAK,OAAOR,SAASQ,MAAM,KAAK,OAAOR,SAASQ,MAAM,KAAK,MACtE,CAAC,eAAe,EAAE9B,kBAAkB,4EAA4E,CAAC,GACjH;QACR,OAAO;YACLiB,SACEc,kBAAkB,MAAMT,SAASU,IAAI,IAAI1B,OAAOO,SAAS,KACzD;QACJ;IACF,EAAE,OAAOgB,OAAO;QACdxB,IAAIsB,OAAO,CAACC,MAAM,CAACC,KAAK,CAAC;YAAEI,KAAKJ;QAAM,GAAG;QACzCZ,SAAS;IACX;IACAd,SAAS;QAAES;QAAII,IAAIF,KAAKC,GAAG;QAAIE;IAAO;IACtC,OAAOA;AACT;AAEA,4EAA4E,GAC5E,eAAeV;IACb,IAAI;QACF,OAAO2B,oBAAoB,MAAMpC;IACnC,EAAE,OAAM;QACN,OAAOqC;IACT;AACF;AAEA;;;CAGC,GACD,OAAO,SAASD,oBAAoBE,KAAa;IAC/C,MAAMT,UAAUS,MAAMC,KAAK,CAAC,IAAI,CAAC,EAAE;IACnC,IAAI,CAACV,SAAS;QACZ,OAAOQ;IACT;IACA,IAAI;QACF,MAAM7B,SAAkBgC,KAAKC,KAAK,CAACC,OAAOC,IAAI,CAACd,SAAS,aAAae,QAAQ,CAAC;QAC9E,IAAI,CAACC,SAASrC,WAAW,OAAOA,OAAOsC,UAAU,KAAK,UAAU;YAC9D,OAAOT;QACT;QACA,OAAO;YACLtB,WAAWP,OAAOsC,UAAU;YAC5B,GAAI,OAAOtC,OAAOuC,QAAQ,KAAK,WAAW;gBAAExB,QAAQf,OAAOuC,QAAQ;YAAC,IAAI,CAAC,CAAC;QAC5E;IACF,EAAE,OAAM;QACN,OAAOV;IACT;AACF;AAEA,8GAA8G,GAC9G,OAAO,SAASJ,kBAAkBe,IAAa,EAAEjC,SAAiB;IAChE,MAAMkC,UAAUJ,SAASG,SAASE,MAAMC,OAAO,CAACH,KAAKC,OAAO,IAAID,KAAKC,OAAO,GAAG,EAAE;IACjF,KAAK,MAAMG,OAAOH,QAAS;QACzB,IAAI,CAACJ,SAASO,QAAQA,IAAI9B,SAAS,KAAK,aAAa+B,OAAOD,IAAIE,QAAQ,GAAG;YACzE;QACF;QACA,IAAIF,IAAIG,OAAO,KAAKxC,aAAaqC,IAAII,aAAa,KAAKzC,WAAW;YAChE;QACF;QACA,MAAM0C,QAAQxD,OAAOmD,IAAIM,WAAW;QACpC,MAAMC,QAAQ1D,OAAOmD,IAAIQ,YAAY;QACrC,IAAIH,UAAUpB,aAAasB,UAAUtB,WAAW;YAC9C,OAAOA;QACT;QACA,OAAO;YAAEoB;YAAOE;YAAOE,eAAeC,gBAAgBV,IAAIS,aAAa;QAAE;IAC3E;IACA,OAAOxB;AACT;AAEA,kHAAkH,GAClH,OAAO,SAAS0B,UAAUC,MAAqB,EAAE/C,MAAM,IAAID,MAAM;IAC/D,MAAMiD,OAAOhD,IAAIiD,cAAc;IAC/B,MAAMC,QAAQlD,IAAImD,WAAW;IAC7B,MAAMC,MAAMpD,IAAIqD,UAAU;IAC1B,IAAIN,WAAW,SAAS;QACtB,OAAO,IAAIhD,KAAKA,KAAKuD,GAAG,CAACN,MAAME,OAAOE,MAAM;IAC9C;IACA,IAAIL,WAAW,UAAU;QACvB,mGAAmG;QACnG,MAAMQ,eAAe,AAAC,CAAA,IAAIvD,IAAIwD,SAAS,EAAC,IAAK,KAAK;QAClD,OAAO,IAAIzD,KAAKA,KAAKuD,GAAG,CAACN,MAAME,OAAOE,MAAMG;IAC9C;IACA,IAAIR,WAAW,WAAW;QACxB,OAAO,IAAIhD,KAAKA,KAAKuD,GAAG,CAACN,MAAME,QAAQ,GAAG;IAC5C;IACA,OAAO9B;AACT;AAEA,2FAA2F,GAC3F,OAAO,SAASqC,YAAYC,IAAU,EAAEC,QAAgB;IACtD,MAAMC,QAAQC,OAAOC,WAAW,CAC9B,IAAIC,KAAKC,cAAc,CAAC,SAAS;QAC/BL;QACAP,KAAK;QACLF,OAAO;QACPF,MAAM;QACNiB,MAAM;QACNC,QAAQ;QACRC,WAAW;IACb,GACGC,aAAa,CAACV,MACdW,GAAG,CAAC,CAACC,OAAS;YAACA,KAAKC,IAAI;YAAED,KAAKE,KAAK;SAAC;IAE1C,OAAO,GAAGZ,MAAMR,GAAG,CAAC,CAAC,EAAEQ,MAAMV,KAAK,CAAC,CAAC,EAAEU,MAAMZ,IAAI,CAAC,EAAE,EAAEY,MAAMK,IAAI,GAAGL,MAAMM,MAAM,EAAE;AAClF;AAEA,SAASrB,gBAAgB2B,KAAc;IACrC,OAAOA,UAAU,WAAWA,UAAU,YAAYA,UAAU,YAAYA,QAAQ;AAClF;AAEA,6DAA6D,GAC7D,SAASpC,OAAOoC,KAAc;IAC5B,OAAOA,UAAU,QAAQA,UAAU;AACrC;AAEA,SAAS5C,SAAS4C,KAAc;IAC9B,OAAOC,QAAQD,UAAU,OAAOA,UAAU,YAAY,CAACvC,MAAMC,OAAO,CAACsC;AACvE"}

package/dist/endpoints/chatEndpoint.d.ts

@@ -0,0 +1,12 @@
+import type { PayloadRequest } from 'payload';
+import type { OwnKey } from '../billing.js';
+import type { AiAssistantPluginOptions, AssistantSettings } from '../types.js';
+/**
+ * One turn of a conversation. The drawer sends the new message; the history comes from the stored thread,
+ * so a client cannot rewrite what the assistant said earlier. The reply streams back as UI message parts.
+ */
+export declare function chatEndpoint(options: AiAssistantPluginOptions, fallback: AssistantSettings, siteKey: OwnKey | undefined): {
+    path: string;
+    method: "post";
+    handler: (req: PayloadRequest) => Promise<Response>;
+};