npm - @wildo-ai/saas-backend-lib - Versions diffs - 1.1.12 → 1.1.13 - Mend

@wildo-ai/saas-backend-lib 1.1.12 → 1.1.13

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (226) hide show

package/dist/esm/flows-actors/content-guardrails/record-owner-policy.backend.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"record-owner-policy.backend.js","sourceRoot":"","sources":["../../../../src/flows-actors/content-guardrails/record-owner-policy.backend.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwEG;AACH,OAAO,EACL,wBAAwB,EACxB,yCAAyC,EACzC,yBAAyB,EACzB,uBAAuB,EAEvB,aAAa,EACb,+BAA+B,GAGhC,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,0BAA0B,EAAE,0BAA0B,EAAE,MAAM,sCAAsC,CAAC;AAG9G,OAAO,EAAE,UAAU,EAA6B,MAAM,oFAAoF,CAAC;AAC3I,OAAO,EAAE,kCAAkC,EAAqB,MAAM,2EAA2E,CAAC;AAElJ,OAAO,EAAE,kBAAkB,EAAE,MAAM,sFAAsF,CAAC;AAE1H,OAAO,EAAE,2BAA2B,EAAE,MAAM,8EAA8E,CAAC;AAiD3H;;GAEG;AACH,MAAM,CAAN,IAAY,wBAYX;AAZD,WAAY,wBAAwB;IAClC;;;OAGG;IACH,uEAA2C,CAAA;IAC3C,wHAAwH;IACxH,uEAA2C,CAAA;IAC3C,kIAAkI;IAClI,yFAA6D,CAAA;IAC7D,yFAAyF;IACzF,2DAA+B,CAAA;AACjC,CAAC,EAZW,wBAAwB,KAAxB,wBAAwB,QAYnC;AAED;;;GAGG;AACH,MAAM,UAAU,0BAA0B,CAAC,IAAiF;IAC1H,IAAI,IAAI,CAAC,gBAAgB,KAAK,SAAS,IAAI,IAAI,CAAC,gBAAgB,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,wBAAwB,CAAC,mBAAmB,CAAC;IACjI,IAAI,IAAI,CAAC,SAAS,EAAE,IAAI,KAAK,yBAAyB,CAAC,4BAA4B;QAAE,OAAO,wBAAwB,CAAC,mBAAmB,CAAC;IACzI,IAAI,IAAI,CAAC,kBAAkB,EAAE,IAAI,KAAK,kCAAkC,CAAC,mBAAmB,IAAI,IAAI,CAAC,kBAAkB,CAAC,yBAAyB,KAAK,IAAI,EAAE,CAAC;QAC3J,OAAO,wBAAwB,CAAC,4BAA4B,CAAC;IAC/D,CAAC;IACD,OAAO,wBAAwB,CAAC,aAAa,CAAC;AAChD,CAAC;AAcD;;;GAGG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAiD,MAAM,CAAC,MAAM,CAAC;IACrG,qBAAqB,EAAE,aAAa,CAAC,MAAM;IAC3C,wBAAwB,EAAE,yCAAyC,CAAC,mBAAmB;IACvF,8BAA8B,EAAE,IAAI;IACpC,gBAAgB,EAAE,MAAM,CAAC,MAAM,CAAC,0BAA0B,CAAC,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,cAAc,EAAE,0BAA0B,CAAC,GAAG,EAAE,CAAC,CAAC;CAC9I,CAAC,CAAC;AAEH,oGAAoG;AACpG,SAAS,SAAS,CAAC,MAAe;IAChC,IAAI,MAAM,KAAK,IAAI,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC9D,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,OAAO,CAAE,MAA6B,CAAC,IAAI,CAAC;QAAE,OAAQ,MAA8B,CAAC,IAAI,CAAC;IAC5J,OAAO,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACrF,CAAC;AAED,kIAAkI;AAClI,KAAK,UAAU,gBAAgB,CAAC,MAAyB,EAAE,OAAiC;IAC1F,MAAM,KAAK,GAAG,IAAI,GAAG,EAAoE,CAAC;IAC1F,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACtC,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;IAClD,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,UAAU,KAAK,SAAS;YAC9C,CAAC,CAAC,2BAA2B;YAC7B,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAE,SAAyC,CAAC,cAAc,KAAK,KAAK,CAAC,CAAC,CAAC;IAChH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;GAIG;AACH,SAAS,WAAW,CAAC,WAAoE;IACvF,IAAI,SAA6D,CAAC;IAClE,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;QACrC,MAAM,SAAS,GAAG,UAAU,CAAC,qBAAqB,IAAI,SAAS,CAAC;QAChE,IAAI,+BAA+B,CAAC,SAAS,EAAE,SAAS,CAAC;YAAE,SAAS,GAAG,SAAS,CAAC;IACnF,CAAC;IACD,MAAM,SAAS,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,wBAAwB,CAAC,EAAE,wBAAwB,CAAC;IAClH,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,8BAA8B,KAAK,IAAI,CAAC,CAAC;IAClG,MAAM,UAAU,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,gBAAgB,IAAI,EAAE,CAAC,CAAC;IAC1F,MAAM,SAAS,GAAiD;QAC9D,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,qBAAqB,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1D,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,wBAAwB,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7D,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,8BAA8B,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzD,GAAG,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACnE,CAAC;IACF,OAAO,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;AACnE,CAAC;AAUD;;;GAGG;AACH,SAAS,gBAAgB,CAAC,OAAiC,EAAE,IAAyB;IACpF,IAAI,OAAO,CAAC,oBAAoB,KAAK,SAAS;QAAE,OAAO,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC;IACtF,QAAQ,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAC9B,sGAAsG;QACtG,KAAK,wBAAwB,CAAC,mBAAmB,CAAC,CAAC,OAAO,IAAI,CAAC,cAAc,EAAE,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;QACnJ,KAAK,wBAAwB,CAAC,mBAAmB,CAAC,CAAC,OAAO,OAAO,CAAC,4BAA4B,EAAE,CAAC;QACjG,KAAK,wBAAwB,CAAC,4BAA4B,CAAC;QAC3D,KAAK,wBAAwB,CAAC,aAAa;YACzC,OAAO,SAAS,CAAC;IACrB,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,qBAAqB,CAAC,OAAiC,EAAE,IAAyB,EAAE,aAAsB;IACvH,MAAM,QAAQ,GAAG,gBAAgB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACjD,IAAI,QAAQ,KAAK,SAAS,IAAI,CAAC,aAAa,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC;QAAE,OAAO,EAAE,UAAU,EAAE,2BAA2B,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC3I,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC;IACxD,MAAM,MAAM,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACpF,MAAM,KAAK,GAAG,CAAC,GAAG,CAAC,MAAM,gBAAgB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,EAA0D,EAAE,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC;IACvK,OAAO,EAAE,UAAU,EAAE,WAAW,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAC3D,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,eAAe,CAC5B,IAAe,EAAE,OAA0B,EAAE,OAAiC,EAAE,IAAyB;IAEzG,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,GAAG,EAAE,EAAE,CAAC;IAC/D,wHAAwH;IACxH,2FAA2F;IAC3F,yHAAyH;IACzH,sDAAsD;IACtD,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,OAAO,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACvI,IAAI,CAAC,QAAQ;QAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,GAAG,EAAE,EAAE,CAAC;IACpD,MAAM,QAAQ,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC;IAC3B,KAAK,MAAM,KAAK,IAAI,OAAO;QAAE,QAAQ,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC;IAC5D,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;AACxD,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,MAAe,EACf,YAAoB,EACpB,SAAwC,EACxC,OAAiC,EACjC,IAAyB;IAEzB,MAAM,QAAQ,GAAG,GAAG,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IAClG,IAAI,MAAM,KAAK,IAAI,IAAI,MAAM,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,mBAAmB,CAAC,YAAY,CAAC;QAAE,OAAO,QAAQ,EAAE,CAAC;IAC7G,MAAM,oBAAoB,GAAG,OAAO,CAAC,oBAAoB,KAAK,SAAS,CAAC;IACxE,MAAM,OAAO,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;IAClC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,oHAAoH;QACpH,iGAAiG;QACjG,0DAA0D;QAC1D,OAAO,SAAS,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IACzG,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC;IACxD,sGAAsG;IACtG,MAAM,UAAU,GAAG,CAAC,MAAe,EAAsB,EAAE;QACzD,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;QACpD,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,KAAK,CAAC;QACtC,MAAM,EAAE,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;QAC9B,OAAO,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,EAAE,aAAa,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;IAC7F,CAAC,CAAC;IACF,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACvC,MAAM,SAAS,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC7H,MAAM,gBAAgB,GAAG,oBAAoB,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IACzG,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,IAAI,gBAAgB,KAAK,CAAC;QAAE,OAAO,QAAQ,EAAE,CAAC;IAExE,MAAM,KAAK,GAAG,MAAM,gBAAgB,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IACzD,MAAM,YAAY,GAAG,gBAAgB,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,qBAAqB,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACzG,IAAI,YAAY,IAAI,CAAC,YAAY,CAAC,OAAO;QAAE,OAAO,CAAC,mBAAmB,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;IAC/F,sHAAsH;IACtH,MAAM,YAAY,GAAG,CAAC,MAAe,EAAE,KAAa,EAA4D,EAAE;QAChH,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;QAC5B,4GAA4G;QAC5G,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,oBAAoB,CAAC,CAAC,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;QAC5F,OAAO,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAC3D,CAAC,CAAC;IAEF,MAAM,QAAQ,GAAG,CAAC,MAAe,EAAE,KAAa,EAAW,EAAE;QAC3D,MAAM,UAAU,GAAG,YAAY,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAC/C,MAAM,SAAS,GAAuD,UAAU,EAAE,qBAAqB,IAAI,SAAS,CAAC;QACrH,qGAAqG;QACrG,MAAM,sBAAsB,GAAG,UAAU,EAAE,8BAA8B,KAAK,IAAI,CAAC;QACnF,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC5B,OAAO,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,WAAW,CAAC,MAAM,EAAE,SAAS,CAAC,gBAAgB,CAAC,YAAY,CAAC,EAAE,SAAS,EAAE,SAAS,CAAC,SAAS,EAAE,sBAAsB,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;QAC9J,CAAC;QACD,+FAA+F;QAC/F,MAAM,KAAK,GAAG,SAAS,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;QAChD,OAAO,KAAK,CAAC,WAAW,CAAC,MAAM,EAAE,KAAK,CAAC,gBAAgB,CAAC,YAAY,CAAC,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC,MAAM,EAAE,sBAAsB,CAAC,CAAC;IAC1J,CAAC,CAAC;IAEF,kHAAkH;IAClH,MAAM,aAAa,GAAG,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,wBAAwB,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC;IACvL,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,MAAM,eAAe,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,aAAa,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;IAE/G,iHAAiH;IACjH,oGAAoG;IACpG,OAAO,CAAC,oBAAoB,CAAC,OAAO;SACjC,GAAG,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;SACvF,MAAM,CAAC,CAAC,UAAU,EAA8D,EAAE,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC;IAEjH,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,OAAO,CAAE,MAA6B,CAAC,IAAI,CAAC,EAAE,CAAC;QACjF,OAAO,EAAE,GAAI,MAAiB,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;IAClD,CAAC;IACD,OAAO,OAAO,CAAC,CAAC,CAAC,CAAC;AACpB,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,sCAAsC,CAC1D,MAAe,EACf,KAA6D,EAC7D,SAAwC,EACxC,OAAiC,EACjC,IAAyB;IAEzB,gHAAgH;IAChH,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,MAAM,qBAAqB,CAAC,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IAClF,IAAI,CAAC,OAAO;QAAE,OAAO,CAAC,mBAAmB,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IACnD,MAAM,WAAW,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACnD,MAAM,OAAO,GAAG,SAAS;QACvB,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,SAAS,CAAC;QAC1B,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IACtH,yFAAyF;IACzF,IAAI,CAAC,IAAI,CAAC,iBAAiB,IAAI,WAAW,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,wBAAwB,CAAC,EAAE,CAAC;QACrG,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,OAAO,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC3G,kFAAkF;QAClF,IAAI,QAAQ;YAAE,OAAO,MAAM,CAAC,KAAK,CAAC;IACpC,CAAC;IACD,mGAAmG;IACnG,OAAO,CAAC,oBAAoB,CAAC,WAAW,CAAC,CAAC;IAC1C,OAAO,OAAO,CAAC;AACjB,CAAC;AAWD;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,wCAAwC,CAAC,KAOxD;IACC,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,IAAI,GAAG,EAAuB,CAAC;QACjD,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,UAAU,EAAE,EAAE,CAAC;YACvC,IAAI,KAAK,CAAC,MAAM,KAAK,wBAAwB,CAAC,MAAM,IAAI,CAAC,uBAAuB,CAAC,KAAK,CAAC,MAAM,CAAC;gBAAE,SAAS;YACzG,KAAK,MAAM,WAAW,IAAI,KAAK,CAAC,YAAY,EAAE,KAAK,EAAE,YAAY,IAAI,EAAE,EAAE,CAAC;gBACxE,SAAS,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,IAAI,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;YACvF,CAAC;QACH,CAAC;QACD,MAAM,QAAQ,GAAmC,EAAE,CAAC;QACpD,KAAK,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACpG,MAAM,IAAI,GAAG,KAAK,CAAC,gBAAgB,CAAC,WAAW,CAAC,CAAC;YACjD,MAAM,MAAM,GAAG,IAAI,EAAE,kBAAkB,CAAC;YACxC,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,KAAK,kCAAkC,CAAC,gBAAgB;gBAAE,SAAS;YACtG,IAAI,MAAM,CAAC,IAAI,KAAK,kCAAkC,CAAC,mBAAmB,IAAI,CAAC,KAAK,CAAC,mBAAmB,CAAC,MAAM,CAAC,YAAY,CAAC;gBAAE,SAAS;YACxI,IAAI,0BAA0B,CAAC,IAAI,CAAC,KAAK,wBAAwB,CAAC,aAAa;gBAAE,SAAS;YAC1F,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,KAAK,kCAAkC,CAAC,mBAAmB,CAAC,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9H,MAAM,OAAO,GAAiC,EAAE,WAAW,EAAE,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,GAAG,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;YACxI,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACvB,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,oCAAoC,CAAC,OAAO,CAAC,EAAE,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC;QACnF,CAAC;QACD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1B,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,qIAAqI,CAAC,CAAC;QAC5J,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,mHAAmH;QACnH,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,uHAAuH,EACvI,2BAA2B,CAAC,KAAK,CAAC,CAAC,CAAC;QACtC,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,uHAAuH;AACvH,SAAS,oCAAoC,CAAC,OAAqC;IACjF,MAAM,OAAO,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,YAAY,OAAO,CAAC,YAAY,WAAW,CAAC,CAAC,CAAC,uBAAuB,CAAC;IAC7G,OAAO,SAAS,OAAO,CAAC,WAAW,KAAK,OAAO,kFAAkF;UAC7H,8GAA8G;UAC9G,IAAI,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,kFAAkF;UAClH,6GAA6G;UAC7G,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,sGAAsG,CAAC,CAAC,CAAC,QAAQ,CAAC;UAC1I,0GAA0G,CAAC;AACjH,CAAC","sourcesContent":["/*\n #2877 — a record a guarded tool returns is treated under the agent policy of the ORGANIZATION THAT OWNS IT, tightened\n * over the call's own.\n \n The call's guardrails come from the organizations the call works for (`agent-policy.backend.ts`). That covers every\n * row a tenant-scoped turn can read, and none of the rows a turn working for NO organization reads: an application-scope\n * caller (an operator's agent, an application-scoped autonomous agent) reading an organization's records through an\n * application-level read tool sent them under the agent's own declaration only, and an organization that asked for its\n * records to reach a model only as placeholders was not honoured there.\n \n Decided by this repository's principles rather than asked:\n * - The policy is the owner's. The application has no content policy of its own to fall back on: the application agent\n * policy (`applicationAgentPolicies`) records suspensions only, and the agent's declaration IS the application's\n * content decision, already applied to every call. So no application-level policy was being skipped; what was missing\n * is the owning organization's.\n * - Per row, at the model boundary. One read can return rows of several organizations, so the treatment is chosen per\n * row. Rows of the organizations the call already works for are treated as before; only the others are looked up.\n * - Tighten-only. A row is treated under the stricter of the call's treatment and its owner's\n * (`isStricterPersonalDataTreatment`); an owner policy can never loosen the call.\n * - Fail closed. An owner policy that cannot be read is treated as asking for every guardrail at its strictest\n * (`UNREADABLE_OWNER_TIGHTENING`). Output that is not a record at all, from an organization-owned resource on tools\n * acting in no organization, is withheld whole. Tools acting IN an organization (an acting tenant) read only that\n * tenant's rows, so a row naming no owner there is treated by the call's guard as before.\n \n Whose row it is, when the row does not say (#3369). Measured before this was written: the engine's read and write\n * tools return the response DTO of the operation they dispatch, and every organization-owned core resource's default\n * READ / LIST / SEARCH / CREATE / UPDATE keeps `organizationId` (581 operations carry it; the 177 that do not are deletes,\n * counts, custom answers and summary variants, which no engine tool dispatches). So the rows that name no owner are the\n * application's hand-written tools that return the fields they need (`{ todoId, title }`). The owner is derived, in order:\n * 1. the row's own scope field (`organizationNamedByRecord`): `organizationId`, the organization row's `_id`;\n * 2. the row's `_id`, when a dispatch of this call returned that row (`ToolCallRecordOwners.ownerOfRecord`);\n * 3. the organizations the call's dispatches reached, for a tool whose every access is a dispatch\n * (`UnattributedRowOwnership.OBSERVED_DISPATCHES`) and whose dispatches' results each named their owners\n * (`ToolCallRecordOwners.complete`): its true owner is one of them, so the strictest of their policies is never looser\n * than its own, and exact when they are one. A dispatch whose result names no owner (a custom operation's answer, a\n * count) leaves the set incomplete, and the row falls to 4;\n * 4. otherwise nothing can say, and the row is treated under the strictest policy (`UNREADABLE_OWNER_TIGHTENING`) and\n * counted on the call's operation record (`rowsOwnerNotDerived`). Startup names every tool in that position\n * (`reportToolsWhoseRowOwnersCannotBeDerived`).\n * Rejected: the caller's memberships as the possible owners, which #3364 used. A caller with none (an operator at\n * application scope) had no possible owner, and a read under a platform-access grant reaches outside them, so the real\n * owner's policy was missed in exactly the cases this module exists for. Also rejected: every guardrail at its strictest\n * for every row naming no owner (#3364 review F1), which would leave an application-scope agent using such a tool unable\n * to answer where no classifier is configured; it now applies only where the owner cannot be derived, and startup says\n * which tools those are. A retrieval result names no owner either; its search is confined to the caller's organizations\n * (`resolveRetrievalOrganizationIds`), so they are its possible owners (`RETRIEVAL_NARROWING`).\n * - No placeholder an unguarded call cannot put back. A call whose agent declares no treatment was built without\n * re-identification (its tools accept no placeholder, its stream restores none), so a row needing a treatment there is\n * treated `REMOVE` even when its owner asked for `TOKENIZE`. Stricter than asked, never looser. Such a call's writes\n * refuse a withheld marker (`argumentsAToolRunsWith`), including after an approval pause.\n \n *The reply is moderated under the strictest output policy of every organization whose rows reached the model in the\n turn, and the turn's own (#3364 step 3).** Output moderation judges what the model WRITES, not a row, so it cannot be\n * applied per row; but a reply drawn from an organization's records is that organization's content as much as the turn's.\n * The owners' policies are recorded as the rows enter (`rowsReachedModelFrom`), the call's guard is tightened (lower\n * severity wins, per category), and every later model step is judged under it. Rejected: moderating under the turn's\n * policy only, which is what applied before, so an operator's agent could write about an organization's records anything\n * that organization asked its agents never to write. Also rejected: a per-row category list attached to the reply, which\n * nothing can apply, since a reply cannot be split back into the rows it came from. An unreadable owner counts as asking\n * for every category at its lowest severity (fail closed), and a classifier that cannot judge what is asked withholds\n * the reply (`OUTPUT_NOT_MODERATED`).\n \n Machine readers keep an owner's placeholders when the owner asked (#3364 step 2). A placeholder minted for a row whose\n * owner set `machineReadersKeepPlaceholders` is marked (`keptFromMachineReaders`), and a turn read by a machine (A2A,\n * autonomous) never gets that value back, even when the agent re-identifies for machine readers. The person whose turn\n * it is still reads it. The mark is per value and never removed, so when owners disagree the stricter answer holds.\n \n Prompt-injection screening is decided per row too (#3364 step 1). A row whose owner switched screening on is screened before\n * the model reads it, even when the call screens nothing: the rows that need it are screened together, in one request,\n * and replaced by the withheld notice when the screen does not find them clean. A call that screens its results screens\n * every row already. An owner whose policy cannot be read is treated as screening (fail closed), and a classifier that\n * cannot serve withholds the rows (`NOT_SCREENED`).\n /\nimport {\n FlowsActors_Agent_Status,\n FlowsActors_PromptInjectionScreeningScope,\n FunctionToolAuthorityKind,\n isLLMAgentConfiguration,\n type FlowsActors_Agent,\n RedactionType,\n isStricterPersonalDataTreatment,\n type FlowsActors_AgentContentGuardrailsTightening,\n type FlowsActors_PersonalDataModelTreatment,\n} from '@wildo-ai/saas-models';\nimport { ContentSafety_HarmCategory, ContentSafety_HarmSeverity } from '@wildo-ai/external-connectors-models';\n\nimport type { AgentPolicyLookup } from '~wildo-backend-lib/flows-actors/content-guardrails/agent-policy.backend';\nimport { recordIdOf, type ToolCallRecordOwners } from '~wildo-backend-lib/flows-actors/content-guardrails/tool-call-record-owners.backend';\nimport { FunctionToolPersonalDataOutputKind, type FunctionTool } from '~wildo-backend-lib/flows-actors/models/function-tools.backend.definitions';\nimport type { PersonalDataGuard } from '~wildo-backend-lib/flows-actors/content-guardrails/personal-data-guard.backend.utils';\nimport { treatRecordsResult } from '~wildo-backend-lib/flows-actors/content-guardrails/personal-data-guard.backend.utils';\nimport type { ToolResultScreen } from '~wildo-backend-lib/flows-actors/content-guardrails/tool-result-screen.backend.utils';\nimport { projectCaughtErrorLogFields } from '~wildo-backend-lib/errors/utils/error-log-level-classification.backend.utils';\nimport type { LoggerService } from '~wildo-backend-lib/monitoring/logger/services/logger.service';\n\n/* What treating a result by its rows' owners needs from the call. /\nexport interface RecordOwnerPolicyContext {\n /* The organizations whose policies the call already applies (its scope). Their rows are treated by the call's guard. /\n readonly coveredOrganizationIds: readonly string[];\n /\n The organization the call's tools act in (`auth.initiatorIds.organizationId`), which confines what they read. Absent\n * when they act in none: an application-scope caller, whose reads can reach any organization its authority admits.\n /\n readonly actingOrganizationId?: string;\n /* Reads the agent policies of organizations outside the call's scope. /\n readonly readPolicies: (organizationIds: readonly string[]) => Promise<AgentPolicyLookup>;\n /* Whether a resource's rows belong to an organization (its primary scope is ORGANIZATIONS). /\n readonly isOrganizationOwned: (resourceType: string) => boolean;\n /\n The organization owning one row of an organization-owned resource: its scope field (`organizationId`), or its own id\n * when the resource IS the organization (the scope root). `undefined` when the row does not say.\n /\n readonly ownerOf: (resourceType: string, record: unknown) => string \| undefined;\n /\n The guard that treats a row needing it when the call has none: created once per call, over the call's table, and\n * recorded on the call like a declared one. Its treatment is `REMOVE`.\n /\n readonly ownerGuard: () => PersonalDataGuard;\n /\n The organizations whose rows a tool acting with the caller's authority can return: the acting tenant when there is\n * one, else the caller's organization-wide memberships (`resolveCallerOrganizationIds`). The set retrieval narrows to\n * (`resolveRetrievalOrganizationIds`), which is what a tool treating its own unattributed output is judged against.\n /\n readonly possibleOwnerOrganizationIds: () => readonly string[];\n /\n #3369: `rows` rows of one call's result named no organization and nothing could derive whose they were, so they were\n * treated under the strictest policy. Recorded on the call's operation record. Must not throw.\n /\n readonly rowsOwnerNotDerived: (call: RecordOwnerToolCall, rows: number) => void;\n /\n The screen that screens rows whose owner asked when the call itself screens nothing (#3364): created once per call,\n * recording each withholding as the call's own screen does. When no classifier can serve, it answers `NOT_SCREENED`.\n /\n readonly ownerScreen: () => ToolResultScreen;\n /\n #3364 step 3: told the policies of the organizations whose rows reached the model (beyond the call's own), as they\n * enter, so the reply can be judged under the strictest of them and the call's own. Must not throw.\n /\n readonly rowsReachedModelFrom: (tightenings: readonly FlowsActors_AgentContentGuardrailsTightening[]) => void;\n}\n\n/\n How the owner of a result row that names none can be known, from the tool's declaration (#3369). See the module header.\n /\nexport enum UnattributedRowOwnership {\n /\n Every access is `dispatchResourceOperationAsTool` (`PRINCIPAL_RESOURCE_OPERATION`), which records the owners of the rows\n * it returns: the row is one of theirs, provided every result named its owners (`ToolCallRecordOwners.complete`).\n /\n OBSERVED_DISPATCHES = 'observed_dispatches',\n /* The engine's retrieval tool: its search is confined to the caller's organizations, which are the possible owners. /\n RETRIEVAL_NARROWING = 'retrieval_narrowing',\n /* The tool declares that its rows carry `organizationId` (`rowsNameTheirOrganization`). A row that does not is not derivable. /\n ROWS_NAME_THEIR_ORGANIZATION = 'rows_name_their_organization',\n /* Nothing the engine sees can say: such a row is treated under the strictest policy. /\n NOT_DERIVABLE = 'not_derivable',\n}\n\n/\n How `tool`'s rows that name no organization are attributed (#3369). One reading of the declaration, shared by the\n * runtime and the startup report, so the two cannot disagree.\n /\nexport function unattributedRowOwnershipOf(tool: Pick<FunctionTool, 'authority' \| 'retrievalSources' \| 'personalDataOutput'>): UnattributedRowOwnership {\n if (tool.retrievalSources !== undefined && tool.retrievalSources.length > 0) return UnattributedRowOwnership.RETRIEVAL_NARROWING;\n if (tool.authority?.kind === FunctionToolAuthorityKind.PRINCIPAL_RESOURCE_OPERATION) return UnattributedRowOwnership.OBSERVED_DISPATCHES;\n if (tool.personalDataOutput?.kind === FunctionToolPersonalDataOutputKind.RECORDS_OF_RESOURCE && tool.personalDataOutput.rowsNameTheirOrganization === true) {\n return UnattributedRowOwnership.ROWS_NAME_THEIR_ORGANIZATION;\n }\n return UnattributedRowOwnership.NOT_DERIVABLE;\n}\n\n/* The tool call a result came from, and whether the call screens every result itself. /\nexport interface RecordOwnerToolCall {\n readonly toolCallId: string;\n readonly toolName: string;\n /* The call's own screen covers this result (its agent screens, and the result is not the person's own words). /\n readonly callScreensResult: boolean;\n /* #3369: how the owner of a row naming none is known, from the tool's declaration (`unattributedRowOwnershipOf`). /\n readonly unattributedRows: UnattributedRowOwnership;\n /* #3369: what the call's dispatches reached, when its `execute` was observed (`observingRecordOwners`). /\n readonly observedOwners?: ToolCallRecordOwners;\n}\n\n/\n The tightening an owner whose policy cannot be read is treated as asking for (fail closed): every guardrail at its\n * strictest. Also what a row whose owner cannot be derived is treated under (#3369).\n /\nexport const UNREADABLE_OWNER_TIGHTENING: FlowsActors_AgentContentGuardrailsTightening = Object.freeze({\n personalDataTreatment: RedactionType.REMOVE,\n promptInjectionScreening: FlowsActors_PromptInjectionScreeningScope.THIRD_PARTY_CONTENT,\n machineReadersKeepPlaceholders: true,\n outputModeration: Object.values(ContentSafety_HarmCategory).map((category) => ({ category, blockAtOrAbove: ContentSafety_HarmSeverity.LOW })),\n});\n\n/* The rows of a records result: `{ data: [...] }` or one record; `undefined` for anything else. /\nfunction recordsOf(output: unknown): unknown[] \| undefined {\n if (output === null \|\| output === undefined) return undefined;\n if (typeof output === 'object' && !Array.isArray(output) && Array.isArray((output as { data?: unknown }).data)) return (output as { data: unknown[] }).data;\n return typeof output === 'object' && !Array.isArray(output) ? [output] : undefined;\n}\n\n/* What each listed owner's policy tightens: its row (none = nothing), or {@link UNREADABLE_OWNER_TIGHTENING} when unreadable. /\nasync function ownerTightenings(owners: readonly string[], context: RecordOwnerPolicyContext): Promise<Map<string, FlowsActors_AgentContentGuardrailsTightening \| undefined>> {\n const asked = new Map<string, FlowsActors_AgentContentGuardrailsTightening \| undefined>();\n if (owners.length === 0) return asked;\n const lookup = await context.readPolicies(owners);\n for (const owner of owners) {\n asked.set(owner, lookup.unreadable !== undefined\n ? UNREADABLE_OWNER_TIGHTENING\n : lookup.policies.find((candidate) => (candidate as { organizationId?: string }).organizationId === owner));\n }\n return asked;\n}\n\n/\n The strictest of several organizations' tightenings, for a row that may be any of theirs (#3369): the strongest\n * treatment, placeholders kept from machine readers when any asks, screening when any screens, and every moderation entry\n * (the call's guard keeps the lower severity per category). `undefined` when none asks for anything.\n /\nfunction strictestOf(tightenings: readonly FlowsActors_AgentContentGuardrailsTightening[]): FlowsActors_AgentContentGuardrailsTightening \| undefined {\n let treatment: FlowsActors_PersonalDataModelTreatment \| undefined;\n for (const tightening of tightenings) {\n const candidate = tightening.personalDataTreatment ?? undefined;\n if (isStricterPersonalDataTreatment(candidate, treatment)) treatment = candidate;\n }\n const screening = tightenings.find((tightening) => tightening.promptInjectionScreening)?.promptInjectionScreening;\n const keep = tightenings.some((tightening) => tightening.machineReadersKeepPlaceholders === true);\n const moderation = tightenings.flatMap((tightening) => tightening.outputModeration ?? []);\n const strictest: FlowsActors_AgentContentGuardrailsTightening = {\n ...(treatment ? { personalDataTreatment: treatment } : {}),\n ...(screening ? { promptInjectionScreening: screening } : {}),\n ...(keep ? { machineReadersKeepPlaceholders: true } : {}),\n ...(moderation.length > 0 ? { outputModeration: moderation } : {}),\n };\n return Object.keys(strictest).length > 0 ? strictest : undefined;\n}\n\n/* What a result whose rows name no owner is treated under, and whether its owners were derived at all. /\ninterface UnattributedTreatment {\n /* The strictest of its possible owners' policies beyond the call's own; `undefined` when none asks for more. /\n readonly tightening: FlowsActors_AgentContentGuardrailsTightening \| undefined;\n /* False when nothing could say whose it is: `tightening` is then {@link UNREADABLE_OWNER_TIGHTENING}. /\n readonly derived: boolean;\n}\n\n/\n The organizations a result naming no owner can belong to (#3369), from what the call observed and the tool declares;\n * `undefined` when nothing can say. Tools acting in an organization read only that tenant's rows.\n /\nfunction possibleOwnersOf(context: RecordOwnerPolicyContext, call: RecordOwnerToolCall): readonly string[] \| undefined {\n if (context.actingOrganizationId !== undefined) return [context.actingOrganizationId];\n switch (call.unattributedRows) {\n // Complete only when every organization-owned result the call's dispatches returned named its owners.\n case UnattributedRowOwnership.OBSERVED_DISPATCHES: return call.observedOwners?.complete === true ? call.observedOwners.organizations() : undefined;\n case UnattributedRowOwnership.RETRIEVAL_NARROWING: return context.possibleOwnerOrganizationIds();\n case UnattributedRowOwnership.ROWS_NAME_THEIR_ORGANIZATION:\n case UnattributedRowOwnership.NOT_DERIVABLE:\n return undefined;\n }\n}\n\n/\n What an UNATTRIBUTED row (an organization-owned resource's row naming no owner, and none known for its id) is treated\n * under (#3369): the strictest policy of the organizations it can belong to (`possibleOwnersOf`) beyond those the call\n * covers, or every guardrail at its strictest when nothing can say. `requireOwners` says whether an empty possible set is\n * underivable (a row of an organization-owned resource is somebody's) or simply nobody's (a tool-treated result that\n * reached no organization's rows).\n /\nasync function unattributedTreatment(context: RecordOwnerPolicyContext, call: RecordOwnerToolCall, requireOwners: boolean): Promise<UnattributedTreatment> {\n const possible = possibleOwnersOf(context, call);\n if (possible === undefined \|\| (requireOwners && possible.length === 0)) return { tightening: UNREADABLE_OWNER_TIGHTENING, derived: false };\n const covered = new Set(context.coveredOrganizationIds);\n const owners = [...new Set(possible)].filter((owner) => !covered.has(owner)).sort();\n const asked = [...(await ownerTightenings(owners, context)).values()].filter((policy): policy is FlowsActors_AgentContentGuardrailsTightening => policy !== undefined);\n return { tightening: strictestOf(asked), derived: true };\n}\n\n/\n The model-side rows at `indices`, screened together through the owner screen (#3364): unchanged when clean, each\n * replaced by the withheld notice otherwise. One request for all of them, so a page of rows costs one screening.\n /\nasync function screenOwnerRows(\n rows: unknown[], indices: readonly number[], context: RecordOwnerPolicyContext, call: RecordOwnerToolCall,\n): Promise<{ readonly rows: unknown[]; readonly withheld: ReadonlySet<number> }> {\n if (indices.length === 0) return { rows, withheld: new Set() };\n // The real tool call id: the owner screen is its own instance and a result goes through one screen or the other, so the\n // verdict, the audit row and the operation record all name the call the result belongs to.\n // Withheld is the screen's own answer, never inferred from the output (#3364 review R2): a clean string result is `text`\n // too, and a record could even hold a notice's words.\n const { output, withheld } = await context.ownerScreen().screened(call.toolCallId, call.toolName, indices.map((index) => rows[index]));\n if (!withheld) return { rows, withheld: new Set() };\n const screened = [...rows];\n for (const index of indices) screened[index] = output.value;\n return { rows: screened, withheld: new Set(indices) };\n}\n\n/\n The result of a tool returning records of `resourceType`, as the model may read it: each row under the stricter of the\n * call's treatment (`callGuard`, absent for an unguarded call) and the treatment its owning organization asked for,\n * with its placeholders kept from machine readers when the owner asked, and screened when the owner screens and the call\n * does not (#3364). Side effect: tells `context.rowsReachedModelFrom` the owners of the rows that reached the model, so\n * the call's moderation is tightened. Equal to `treatRecordsResult` when every row's owner is one the call works for, and\n * to `output` itself on an unguarded call whose rows need nothing.\n /\nexport async function treatRecordsResultByOwner(\n output: unknown,\n resourceType: string,\n callGuard: PersonalDataGuard \| undefined,\n context: RecordOwnerPolicyContext,\n call: RecordOwnerToolCall,\n): Promise<unknown> {\n const callOnly = () => (callGuard ? treatRecordsResult(output, callGuard, resourceType) : output);\n if (output === null \|\| output === undefined \|\| !context.isOrganizationOwned(resourceType)) return callOnly();\n const actsInNoOrganization = context.actingOrganizationId === undefined;\n const records = recordsOf(output);\n if (!records) {\n // Not a record and not `{ data: [...] }`: its rows cannot be attributed. A guarded call withholds it whole already;\n // an unguarded one acting in no organization does too, since nobody can say whose rows they are.\n // Withheld whole, it carries nothing a screen would read.\n return callGuard ? callOnly() : (actsInNoOrganization ? context.ownerGuard().withholdWhole() : output);\n }\n\n const covered = new Set(context.coveredOrganizationIds);\n // #3369: the row's own scope field, else the owner a dispatch of this call recorded for the row's id.\n const ownerOfRow = (record: unknown): string \| undefined => {\n const named = context.ownerOf(resourceType, record);\n if (named !== undefined) return named;\n const id = recordIdOf(record);\n return id === undefined ? undefined : call.observedOwners?.ownerOfRecord(resourceType, id);\n };\n const owners = records.map(ownerOfRow);\n const uncovered = [...new Set(owners.filter((owner): owner is string => owner !== undefined && !covered.has(owner)))].sort();\n const unattributedRows = actsInNoOrganization ? owners.filter((owner) => owner === undefined).length : 0;\n if (uncovered.length === 0 && unattributedRows === 0) return callOnly();\n\n const asked = await ownerTightenings(uncovered, context);\n const unattributed = unattributedRows > 0 ? await unattributedTreatment(context, call, true) : undefined;\n if (unattributed && !unattributed.derived) context.rowsOwnerNotDerived(call, unattributedRows);\n /* What the row's owner asks beyond the call: `undefined` for a row of an organization the call already works for. /\n const tighteningOf = (record: unknown, index: number): FlowsActors_AgentContentGuardrailsTightening \| undefined => {\n const owner = owners[index];\n // A row naming no owner read by tools acting in no organization: the strictest of whoever it can belong to.\n if (owner === undefined) return actsInNoOrganization ? unattributed?.tightening : undefined;\n return covered.has(owner) ? undefined : asked.get(owner);\n };\n\n const treatRow = (record: unknown, index: number): unknown => {\n const tightening = tighteningOf(record, index);\n const treatment: FlowsActors_PersonalDataModelTreatment \| undefined = tightening?.personalDataTreatment ?? undefined;\n // #3364 step 2: a placeholder minted for this row is kept from machine readers when its owner asked.\n const keptFromMachineReaders = tightening?.machineReadersKeepPlaceholders === true;\n if (treatment === undefined) {\n return callGuard ? callGuard.treatRecord(record, callGuard.personalFieldsOf(resourceType), undefined, callGuard.treatment, keptFromMachineReaders) : record;\n }\n // An unguarded call puts no placeholder back, so it withholds instead (see the module header).\n const guard = callGuard ?? context.ownerGuard();\n return guard.treatRecord(record, guard.personalFieldsOf(resourceType), undefined, callGuard ? treatment : RedactionType.REMOVE, keptFromMachineReaders);\n };\n\n // Screened after the treatment, so a classifier reads placeholders, never values (as the call's own screen does).\n const screenIndices = call.callScreensResult ? [] : records.map((record, index) => (tighteningOf(record, index)?.promptInjectionScreening ? index : -1)).filter((index) => index >= 0);\n const { rows: treated, withheld } = await screenOwnerRows(records.map(treatRow), screenIndices, context, call);\n\n // #3364 step 3: the rows that reached the model (a row only stripped of personal fields did; one replaced by the\n // screen's notice did not), so their owners' moderation applies to the reply from the next step on.\n context.rowsReachedModelFrom(records\n .map((record, index) => (withheld.has(index) ? undefined : tighteningOf(record, index)))\n .filter((tightening): tightening is FlowsActors_AgentContentGuardrailsTightening => tightening !== undefined));\n\n if (!Array.isArray(output) && Array.isArray((output as { data?: unknown }).data)) {\n return { ...(output as object), data: treated };\n }\n return treated[0];\n}\n\n/\n The result of a tool that treats its own output (`TREATED_BY_TOOL`, retrieval), whose rows do not say which organization\n * owns them: on an unguarded call, treated through `treat` and the call's owner guard when any organization it can belong\n * to (`possibleOwnersOf`) and the call does not already cover asked for a treatment (the strictest of several possible\n * owners is never looser than the actual one). Unreadable is treated as asking (fail closed), and a tool whose possible\n * owners nothing can say is treated under the strictest policy, counted as one result (#3369). A guarded call is treated by its own\n * guard, as before: the retrieval tool's treatment withholds a personal passage whole under any treatment. Screened\n * whole when a possible owner screens and the call does not; when it reached the model, tells\n * `context.rowsReachedModelFrom` every possible owner's policy (#3364).\n /\nexport async function treatToolTreatedResultByPossibleOwners(\n output: unknown,\n treat: (output: unknown, guard: PersonalDataGuard) => unknown,\n callGuard: PersonalDataGuard \| undefined,\n context: RecordOwnerPolicyContext,\n call: RecordOwnerToolCall,\n): Promise<unknown> {\n // #3369: its possible owners from what the call observed and the tool declares; strictest when nothing can say.\n const { tightening, derived } = await unattributedTreatment(context, call, false);\n if (!derived) context.rowsOwnerNotDerived(call, 1);\n const tightenings = tightening ? [tightening] : [];\n const treated = callGuard\n ? treat(output, callGuard)\n : tightenings.some((tightening) => tightening.personalDataTreatment) ? treat(output, context.ownerGuard()) : output;\n // Its rows name no owner, so the whole result is screened when any possible owner asked.\n if (!call.callScreensResult && tightenings.some((tightening) => tightening.promptInjectionScreening)) {\n const { output, withheld } = await context.ownerScreen().screened(call.toolCallId, call.toolName, treated);\n // Withheld whole: nothing of it reached the model, so nothing tightens the reply.\n if (withheld) return output.value;\n }\n // #3364 step 3: its rows name no owner, so every possible owner's moderation applies to the reply.\n context.rowsReachedModelFrom(tightenings);\n return treated;\n}\n\n/* One tool whose returned rows' owners the engine cannot derive (#3369), and the agents offered it. /\nexport interface ToolWithUnderivableRowOwners {\n readonly functionRef: string;\n /* The records it returns, for a `RECORDS_OF_RESOURCE` tool; absent for a tool that treats its own output. /\n readonly resourceType?: string;\n /* The ACTIVE language-model agents offered it, sorted. /\n readonly agentRefs: readonly string[];\n}\n\n/\n The boot report (#3369): every tool offered to an ACTIVE language-model agent whose result rows of an\n * organization-owned resource the engine cannot attribute when they name no organization (`NOT_DERIVABLE` in\n * `unattributedRowOwnershipOf`). One WARN per tool, naming it, its resource, the agents offered it, what happens to such\n * a row, and the remedy. Returns the findings; NEVER throws, because a diagnostic must never be why startup fails (the\n * remedy is an edit to the tool, and every other tool runs as before).\n \n Total over what is registered: it reads the agents, their tools and each tool's resource scope live, so a tool or a\n * resource added tomorrow is reported by the same run. Not reported, because their owners are derived: an\n * application-owned resource (no organization's policy applies), a tool whose every access is a dispatch (each records\n * its rows' owners), the engine's retrieval tool (its search is confined to the caller's organizations), and a tool\n * declaring `rowsNameTheirOrganization` (each row is checked at run time). A dispatching tool is attributed only as far\n * as its dispatches' results name their owners, which no declaration says in advance: one whose operation answers\n * without them (a custom operation's answer) is treated under the strictest policy and counted on the operation record\n * at run time, not here. A WARN, not a refusal: the rows are still\n * treated, under the strictest policy, and an agent acting IN an organization never meets the case.\n /\nexport function reportToolsWhoseRowOwnersCannotBeDerived(input: {\n /* The registered agents. A function, so a registry that cannot be read is reported here rather than thrown at startup. /\n readonly readAgents: () => readonly FlowsActors_Agent[];\n readonly readFunctionTool: (functionRef: string) => FunctionTool \| undefined;\n /* Whether a resource's rows belong to an organization; an unregistered resource counts as one (fail closed). /\n readonly isOrganizationOwned: (resourceType: string) => boolean;\n readonly logger: Pick<LoggerService, 'warn' \| 'debug'>;\n}): ToolWithUnderivableRowOwners[] {\n try {\n const offeredTo = new Map<string, Set<string>>();\n for (const agent of input.readAgents()) {\n if (agent.status !== FlowsActors_Agent_Status.ACTIVE \|\| !isLLMAgentConfiguration(agent.config)) continue;\n for (const functionRef of agent.capabilities?.tools?.functionRefs ?? []) {\n offeredTo.set(functionRef, (offeredTo.get(functionRef) ?? new Set()).add(agent.ref));\n }\n }\n const findings: ToolWithUnderivableRowOwners[] = [];\n for (const [functionRef, agents] of [...offeredTo.entries()].sort(([a], [b]) => a.localeCompare(b))) {\n const tool = input.readFunctionTool(functionRef);\n const output = tool?.personalDataOutput;\n if (!tool \|\| !output \|\| output.kind === FunctionToolPersonalDataOutputKind.NOT_FROM_RECORDS) continue;\n if (output.kind === FunctionToolPersonalDataOutputKind.RECORDS_OF_RESOURCE && !input.isOrganizationOwned(output.resourceType)) continue;\n if (unattributedRowOwnershipOf(tool) !== UnattributedRowOwnership.NOT_DERIVABLE) continue;\n const resourceType = output.kind === FunctionToolPersonalDataOutputKind.RECORDS_OF_RESOURCE ? output.resourceType : undefined;\n const finding: ToolWithUnderivableRowOwners = { functionRef, ...(resourceType ? { resourceType } : {}), agentRefs: [...agents].sort() };\n findings.push(finding);\n input.logger.warn(describeToolWithUnderivableRowOwners(finding), { ...finding });\n }\n if (findings.length === 0) {\n input.logger.debug('Every agent tool returning records of an organization-owned resource names, or lets the engine derive, the organization of each row');\n }\n return findings;\n } catch (error) {\n // WARN, not debug: a report that did not run says nothing, and silence here reads as \"every row owner is derived\".\n input.logger.warn('The tool row-owner report could not run, so tools whose rows are treated under the strictest policy may be unreported',\n projectCaughtErrorLogFields(error));\n return [];\n }\n}\n\n/* The WARN line for one tool: what it returns, what happens to a row naming no organization, and the two remedies. */\nfunction describeToolWithUnderivableRowOwners(finding: ToolWithUnderivableRowOwners): string {\n const returns = finding.resourceType ? `returns \"${finding.resourceType}\" records` : 'treats its own output';\n return `Tool '${finding.functionRef}' ${returns} and reaches them without dispatchResourceOperationAsTool, so the engine cannot `\n + `tell whose a returned row is when the row names no organization. Read by an agent acting in no organization `\n + `(${finding.agentRefs.join(', ')}), such a row reaches the model under the strictest agent policy (personal data `\n + `withheld, screened, its reply moderated in every category), and is counted on the call's operation record. `\n + (finding.resourceType ? `Return each row's organizationId and declare personalDataOutput.rowsNameTheirOrganization, or reach ` : 'Reach ')\n + `the rows through dispatchResourceOperationAsTool and declare the PRINCIPAL_RESOURCE_OPERATION authority.`;\n}\n"]}
1	+ {"version":3,"file":"record-owner-policy.backend.js","sourceRoot":"","sources":["../../../../src/flows-actors/content-guardrails/record-owner-policy.backend.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwEG;AACH,OAAO,EACL,wBAAwB,EACxB,yCAAyC,EACzC,yBAAyB,EACzB,uBAAuB,EAEvB,aAAa,EACb,+BAA+B,GAGhC,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,0BAA0B,EAAE,0BAA0B,EAAE,MAAM,sCAAsC,CAAC;AAG9G,OAAO,EAAE,UAAU,EAA6B,MAAM,oFAAoF,CAAC;AAC3I,OAAO,EAAE,kCAAkC,EAAqB,MAAM,2EAA2E,CAAC;AAElJ,OAAO,EAAE,kBAAkB,EAAE,MAAM,sFAAsF,CAAC;AAE1H,OAAO,EAAE,2BAA2B,EAAE,MAAM,8EAA8E,CAAC;AAmD3H;;GAEG;AACH,MAAM,CAAN,IAAY,wBAYX;AAZD,WAAY,wBAAwB;IAClC;;;OAGG;IACH,uEAA2C,CAAA;IAC3C,wHAAwH;IACxH,uEAA2C,CAAA;IAC3C,kIAAkI;IAClI,yFAA6D,CAAA;IAC7D,yFAAyF;IACzF,2DAA+B,CAAA;AACjC,CAAC,EAZW,wBAAwB,KAAxB,wBAAwB,QAYnC;AAED;;;GAGG;AACH,MAAM,UAAU,0BAA0B,CAAC,IAAiF;IAC1H,IAAI,IAAI,CAAC,gBAAgB,KAAK,SAAS,IAAI,IAAI,CAAC,gBAAgB,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,wBAAwB,CAAC,mBAAmB,CAAC;IACjI,IAAI,IAAI,CAAC,SAAS,EAAE,IAAI,KAAK,yBAAyB,CAAC,4BAA4B;QAAE,OAAO,wBAAwB,CAAC,mBAAmB,CAAC;IACzI,IAAI,IAAI,CAAC,kBAAkB,EAAE,IAAI,KAAK,kCAAkC,CAAC,mBAAmB,IAAI,IAAI,CAAC,kBAAkB,CAAC,yBAAyB,KAAK,IAAI,EAAE,CAAC;QAC3J,OAAO,wBAAwB,CAAC,4BAA4B,CAAC;IAC/D,CAAC;IACD,OAAO,wBAAwB,CAAC,aAAa,CAAC;AAChD,CAAC;AAcD;;;GAGG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAiD,MAAM,CAAC,MAAM,CAAC;IACrG,qBAAqB,EAAE,aAAa,CAAC,MAAM;IAC3C,wBAAwB,EAAE,yCAAyC,CAAC,mBAAmB;IACvF,8BAA8B,EAAE,IAAI;IACpC,gBAAgB,EAAE,MAAM,CAAC,MAAM,CAAC,0BAA0B,CAAC,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,cAAc,EAAE,0BAA0B,CAAC,GAAG,EAAE,CAAC,CAAC;CAC9I,CAAC,CAAC;AAEH,oGAAoG;AACpG,SAAS,SAAS,CAAC,MAAe;IAChC,IAAI,MAAM,KAAK,IAAI,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC9D,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,OAAO,CAAE,MAA6B,CAAC,IAAI,CAAC;QAAE,OAAQ,MAA8B,CAAC,IAAI,CAAC;IAC5J,OAAO,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACrF,CAAC;AAED,kIAAkI;AAClI,KAAK,UAAU,gBAAgB,CAAC,MAAyB,EAAE,OAAiC;IAC1F,MAAM,KAAK,GAAG,IAAI,GAAG,EAAoE,CAAC;IAC1F,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACtC,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;IAClD,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,UAAU,KAAK,SAAS;YAC9C,CAAC,CAAC,2BAA2B;YAC7B,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAE,SAAyC,CAAC,cAAc,KAAK,KAAK,CAAC,CAAC,CAAC;IAChH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;GAIG;AACH,SAAS,WAAW,CAAC,WAAoE;IACvF,IAAI,SAA6D,CAAC;IAClE,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;QACrC,MAAM,SAAS,GAAG,UAAU,CAAC,qBAAqB,IAAI,SAAS,CAAC;QAChE,IAAI,+BAA+B,CAAC,SAAS,EAAE,SAAS,CAAC;YAAE,SAAS,GAAG,SAAS,CAAC;IACnF,CAAC;IACD,MAAM,SAAS,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,wBAAwB,CAAC,EAAE,wBAAwB,CAAC;IAClH,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,8BAA8B,KAAK,IAAI,CAAC,CAAC;IAClG,MAAM,UAAU,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,gBAAgB,IAAI,EAAE,CAAC,CAAC;IAC1F,MAAM,SAAS,GAAiD;QAC9D,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,qBAAqB,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1D,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,wBAAwB,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7D,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,8BAA8B,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzD,GAAG,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACnE,CAAC;IACF,OAAO,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;AACnE,CAAC;AAUD;;;GAGG;AACH,SAAS,gBAAgB,CAAC,OAAiC,EAAE,IAAyB;IACpF,IAAI,OAAO,CAAC,oBAAoB,KAAK,SAAS;QAAE,OAAO,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC;IACtF,QAAQ,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAC9B,sGAAsG;QACtG,KAAK,wBAAwB,CAAC,mBAAmB,CAAC,CAAC,OAAO,IAAI,CAAC,cAAc,EAAE,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;QACnJ,KAAK,wBAAwB,CAAC,mBAAmB,CAAC,CAAC,OAAO,OAAO,CAAC,4BAA4B,EAAE,CAAC;QACjG,KAAK,wBAAwB,CAAC,4BAA4B,CAAC;QAC3D,KAAK,wBAAwB,CAAC,aAAa;YACzC,OAAO,SAAS,CAAC;IACrB,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,qBAAqB,CAAC,OAAiC,EAAE,IAAyB,EAAE,aAAsB;IACvH,MAAM,QAAQ,GAAG,gBAAgB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACjD,IAAI,QAAQ,KAAK,SAAS,IAAI,CAAC,aAAa,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC;QAAE,OAAO,EAAE,UAAU,EAAE,2BAA2B,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC3I,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC;IACxD,MAAM,MAAM,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACpF,MAAM,KAAK,GAAG,CAAC,GAAG,CAAC,MAAM,gBAAgB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,EAA0D,EAAE,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC;IACvK,OAAO,EAAE,UAAU,EAAE,WAAW,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAC3D,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,eAAe,CAC5B,IAAe,EAAE,OAA0B,EAAE,OAAiC,EAAE,IAAyB;IAEzG,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,GAAG,EAAE,EAAE,CAAC;IAC/D,wHAAwH;IACxH,2FAA2F;IAC3F,yHAAyH;IACzH,sDAAsD;IACtD,MAAM,MAAM,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;IACrC,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,GAAG,EAAE,EAAE,CAAC;IAC/D,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACxH,IAAI,CAAC,QAAQ;QAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,GAAG,EAAE,EAAE,CAAC;IACpD,MAAM,QAAQ,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC;IAC3B,KAAK,MAAM,KAAK,IAAI,OAAO;QAAE,QAAQ,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC;IAC5D,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;AACxD,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,MAAe,EACf,YAAoB,EACpB,SAAwC,EACxC,OAAiC,EACjC,IAAyB;IAEzB,MAAM,QAAQ,GAAG,GAAG,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IAClG,IAAI,MAAM,KAAK,IAAI,IAAI,MAAM,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,mBAAmB,CAAC,YAAY,CAAC;QAAE,OAAO,QAAQ,EAAE,CAAC;IAC7G,MAAM,oBAAoB,GAAG,OAAO,CAAC,oBAAoB,KAAK,SAAS,CAAC;IACxE,MAAM,OAAO,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;IAClC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,oHAAoH;QACpH,iGAAiG;QACjG,0DAA0D;QAC1D,OAAO,SAAS,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IACzG,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC;IACxD,sGAAsG;IACtG,MAAM,UAAU,GAAG,CAAC,MAAe,EAAsB,EAAE;QACzD,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;QACpD,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,KAAK,CAAC;QACtC,MAAM,EAAE,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;QAC9B,OAAO,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,EAAE,aAAa,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;IAC7F,CAAC,CAAC;IACF,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACvC,MAAM,SAAS,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC7H,MAAM,gBAAgB,GAAG,oBAAoB,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IACzG,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,IAAI,gBAAgB,KAAK,CAAC;QAAE,OAAO,QAAQ,EAAE,CAAC;IAExE,MAAM,KAAK,GAAG,MAAM,gBAAgB,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IACzD,MAAM,YAAY,GAAG,gBAAgB,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,qBAAqB,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACzG,IAAI,YAAY,IAAI,CAAC,YAAY,CAAC,OAAO;QAAE,OAAO,CAAC,mBAAmB,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;IAC/F,sHAAsH;IACtH,MAAM,YAAY,GAAG,CAAC,MAAe,EAAE,KAAa,EAA4D,EAAE;QAChH,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;QAC5B,4GAA4G;QAC5G,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,oBAAoB,CAAC,CAAC,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;QAC5F,OAAO,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAC3D,CAAC,CAAC;IAEF,MAAM,QAAQ,GAAG,CAAC,MAAe,EAAE,KAAa,EAAW,EAAE;QAC3D,MAAM,UAAU,GAAG,YAAY,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAC/C,MAAM,SAAS,GAAuD,UAAU,EAAE,qBAAqB,IAAI,SAAS,CAAC;QACrH,qGAAqG;QACrG,MAAM,sBAAsB,GAAG,UAAU,EAAE,8BAA8B,KAAK,IAAI,CAAC;QACnF,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC5B,OAAO,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,WAAW,CAAC,MAAM,EAAE,SAAS,CAAC,gBAAgB,CAAC,YAAY,CAAC,EAAE,SAAS,EAAE,SAAS,CAAC,SAAS,EAAE,sBAAsB,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;QAC9J,CAAC;QACD,+FAA+F;QAC/F,MAAM,KAAK,GAAG,SAAS,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;QAChD,OAAO,KAAK,CAAC,WAAW,CAAC,MAAM,EAAE,KAAK,CAAC,gBAAgB,CAAC,YAAY,CAAC,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC,MAAM,EAAE,sBAAsB,CAAC,CAAC;IAC1J,CAAC,CAAC;IAEF,kHAAkH;IAClH,MAAM,aAAa,GAAG,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,wBAAwB,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC;IACvL,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,MAAM,eAAe,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,aAAa,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;IAE/G,iHAAiH;IACjH,oGAAoG;IACpG,OAAO,CAAC,oBAAoB,CAAC,OAAO;SACjC,GAAG,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;SACvF,MAAM,CAAC,CAAC,UAAU,EAA8D,EAAE,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC;IAEjH,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,OAAO,CAAE,MAA6B,CAAC,IAAI,CAAC,EAAE,CAAC;QACjF,OAAO,EAAE,GAAI,MAAiB,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;IAClD,CAAC;IACD,OAAO,OAAO,CAAC,CAAC,CAAC,CAAC;AACpB,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,sCAAsC,CAC1D,MAAe,EACf,KAA6D,EAC7D,SAAwC,EACxC,OAAiC,EACjC,IAAyB;IAEzB,gHAAgH;IAChH,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,MAAM,qBAAqB,CAAC,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IAClF,IAAI,CAAC,OAAO;QAAE,OAAO,CAAC,mBAAmB,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IACnD,MAAM,WAAW,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACnD,MAAM,OAAO,GAAG,SAAS;QACvB,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,SAAS,CAAC;QAC1B,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IACtH,yFAAyF;IACzF,IAAI,CAAC,IAAI,CAAC,iBAAiB,IAAI,WAAW,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,wBAAwB,CAAC,EAAE,CAAC;QACrG,MAAM,MAAM,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;QACrC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,KAAK,SAAS;YAC/C,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE;YACjD,CAAC,CAAC,MAAM,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QACnE,kFAAkF;QAClF,IAAI,QAAQ;YAAE,OAAO,MAAM,CAAC,KAAK,CAAC;IACpC,CAAC;IACD,mGAAmG;IACnG,OAAO,CAAC,oBAAoB,CAAC,WAAW,CAAC,CAAC;IAC1C,OAAO,OAAO,CAAC;AACjB,CAAC;AAWD;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,wCAAwC,CAAC,KAOxD;IACC,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,IAAI,GAAG,EAAuB,CAAC;QACjD,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,UAAU,EAAE,EAAE,CAAC;YACvC,IAAI,KAAK,CAAC,MAAM,KAAK,wBAAwB,CAAC,MAAM,IAAI,CAAC,uBAAuB,CAAC,KAAK,CAAC,MAAM,CAAC;gBAAE,SAAS;YACzG,KAAK,MAAM,WAAW,IAAI,KAAK,CAAC,YAAY,EAAE,KAAK,EAAE,YAAY,IAAI,EAAE,EAAE,CAAC;gBACxE,SAAS,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,IAAI,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;YACvF,CAAC;QACH,CAAC;QACD,MAAM,QAAQ,GAAmC,EAAE,CAAC;QACpD,KAAK,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACpG,MAAM,IAAI,GAAG,KAAK,CAAC,gBAAgB,CAAC,WAAW,CAAC,CAAC;YACjD,MAAM,MAAM,GAAG,IAAI,EAAE,kBAAkB,CAAC;YACxC,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,KAAK,kCAAkC,CAAC,gBAAgB;gBAAE,SAAS;YACtG,IAAI,MAAM,CAAC,IAAI,KAAK,kCAAkC,CAAC,mBAAmB,IAAI,CAAC,KAAK,CAAC,mBAAmB,CAAC,MAAM,CAAC,YAAY,CAAC;gBAAE,SAAS;YACxI,IAAI,0BAA0B,CAAC,IAAI,CAAC,KAAK,wBAAwB,CAAC,aAAa;gBAAE,SAAS;YAC1F,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,KAAK,kCAAkC,CAAC,mBAAmB,CAAC,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9H,MAAM,OAAO,GAAiC,EAAE,WAAW,EAAE,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,GAAG,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;YACxI,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACvB,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,oCAAoC,CAAC,OAAO,CAAC,EAAE,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC;QACnF,CAAC;QACD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1B,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,qIAAqI,CAAC,CAAC;QAC5J,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,mHAAmH;QACnH,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,uHAAuH,EACvI,2BAA2B,CAAC,KAAK,CAAC,CAAC,CAAC;QACtC,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,uHAAuH;AACvH,SAAS,oCAAoC,CAAC,OAAqC;IACjF,MAAM,OAAO,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,YAAY,OAAO,CAAC,YAAY,WAAW,CAAC,CAAC,CAAC,uBAAuB,CAAC;IAC7G,OAAO,SAAS,OAAO,CAAC,WAAW,KAAK,OAAO,kFAAkF;UAC7H,8GAA8G;UAC9G,IAAI,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,kFAAkF;UAClH,6GAA6G;UAC7G,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,sGAAsG,CAAC,CAAC,CAAC,QAAQ,CAAC;UAC1I,0GAA0G,CAAC;AACjH,CAAC","sourcesContent":["/*\n #2877 — a record a guarded tool returns is treated under the agent policy of the ORGANIZATION THAT OWNS IT, tightened\n * over the call's own.\n \n The call's guardrails come from the organizations the call works for (`agent-policy.backend.ts`). That covers every\n * row a tenant-scoped turn can read, and none of the rows a turn working for NO organization reads: an application-scope\n * caller (an operator's agent, an application-scoped autonomous agent) reading an organization's records through an\n * application-level read tool sent them under the agent's own declaration only, and an organization that asked for its\n * records to reach a model only as placeholders was not honoured there.\n \n Decided by this repository's principles rather than asked:\n * - The policy is the owner's. The application has no content policy of its own to fall back on: the application agent\n * policy (`applicationAgentPolicies`) records suspensions only, and the agent's declaration IS the application's\n * content decision, already applied to every call. So no application-level policy was being skipped; what was missing\n * is the owning organization's.\n * - Per row, at the model boundary. One read can return rows of several organizations, so the treatment is chosen per\n * row. Rows of the organizations the call already works for are treated as before; only the others are looked up.\n * - Tighten-only. A row is treated under the stricter of the call's treatment and its owner's\n * (`isStricterPersonalDataTreatment`); an owner policy can never loosen the call.\n * - Fail closed. An owner policy that cannot be read is treated as asking for every guardrail at its strictest\n * (`UNREADABLE_OWNER_TIGHTENING`). Output that is not a record at all, from an organization-owned resource on tools\n * acting in no organization, is withheld whole. Tools acting IN an organization (an acting tenant) read only that\n * tenant's rows, so a row naming no owner there is treated by the call's guard as before.\n \n Whose row it is, when the row does not say (#3369). Measured before this was written: the engine's read and write\n * tools return the response DTO of the operation they dispatch, and every organization-owned core resource's default\n * READ / LIST / SEARCH / CREATE / UPDATE keeps `organizationId` (581 operations carry it; the 177 that do not are deletes,\n * counts, custom answers and summary variants, which no engine tool dispatches). So the rows that name no owner are the\n * application's hand-written tools that return the fields they need (`{ todoId, title }`). The owner is derived, in order:\n * 1. the row's own scope field (`organizationNamedByRecord`): `organizationId`, the organization row's `_id`;\n * 2. the row's `_id`, when a dispatch of this call returned that row (`ToolCallRecordOwners.ownerOfRecord`);\n * 3. the organizations the call's dispatches reached, for a tool whose every access is a dispatch\n * (`UnattributedRowOwnership.OBSERVED_DISPATCHES`) and whose dispatches' results each named their owners\n * (`ToolCallRecordOwners.complete`): its true owner is one of them, so the strictest of their policies is never looser\n * than its own, and exact when they are one. A dispatch whose result names no owner (a custom operation's answer, a\n * count) leaves the set incomplete, and the row falls to 4;\n * 4. otherwise nothing can say, and the row is treated under the strictest policy (`UNREADABLE_OWNER_TIGHTENING`) and\n * counted on the call's operation record (`rowsOwnerNotDerived`). Startup names every tool in that position\n * (`reportToolsWhoseRowOwnersCannotBeDerived`).\n * Rejected: the caller's memberships as the possible owners, which #3364 used. A caller with none (an operator at\n * application scope) had no possible owner, and a read under a platform-access grant reaches outside them, so the real\n * owner's policy was missed in exactly the cases this module exists for. Also rejected: every guardrail at its strictest\n * for every row naming no owner (#3364 review F1), which would leave an application-scope agent using such a tool unable\n * to answer where no classifier is configured; it now applies only where the owner cannot be derived, and startup says\n * which tools those are. A retrieval result names no owner either; its search is confined to the caller's organizations\n * (`resolveRetrievalOrganizationIds`), so they are its possible owners (`RETRIEVAL_NARROWING`).\n * - No placeholder an unguarded call cannot put back. A call whose agent declares no treatment was built without\n * re-identification (its tools accept no placeholder, its stream restores none), so a row needing a treatment there is\n * treated `REMOVE` even when its owner asked for `TOKENIZE`. Stricter than asked, never looser. Such a call's writes\n * refuse a withheld marker (`argumentsAToolRunsWith`), including after an approval pause.\n \n *The reply is moderated under the strictest output policy of every organization whose rows reached the model in the\n turn, and the turn's own (#3364 step 3).** Output moderation judges what the model WRITES, not a row, so it cannot be\n * applied per row; but a reply drawn from an organization's records is that organization's content as much as the turn's.\n * The owners' policies are recorded as the rows enter (`rowsReachedModelFrom`), the call's guard is tightened (lower\n * severity wins, per category), and every later model step is judged under it. Rejected: moderating under the turn's\n * policy only, which is what applied before, so an operator's agent could write about an organization's records anything\n * that organization asked its agents never to write. Also rejected: a per-row category list attached to the reply, which\n * nothing can apply, since a reply cannot be split back into the rows it came from. An unreadable owner counts as asking\n * for every category at its lowest severity (fail closed), and a classifier that cannot judge what is asked withholds\n * the reply (`OUTPUT_NOT_MODERATED`).\n \n Machine readers keep an owner's placeholders when the owner asked (#3364 step 2). A placeholder minted for a row whose\n * owner set `machineReadersKeepPlaceholders` is marked (`keptFromMachineReaders`), and a turn read by a machine (A2A,\n * autonomous) never gets that value back, even when the agent re-identifies for machine readers. The person whose turn\n * it is still reads it. The mark is per value and never removed, so when owners disagree the stricter answer holds.\n \n Prompt-injection screening is decided per row too (#3364 step 1). A row whose owner switched screening on is screened before\n * the model reads it, even when the call screens nothing: the rows that need it are screened together, in one request,\n * and replaced by the withheld notice when the screen does not find them clean. A call that screens its results screens\n * every row already. An owner whose policy cannot be read is treated as screening (fail closed), and a classifier that\n * cannot serve withholds the rows (`NOT_SCREENED`).\n /\nimport {\n FlowsActors_Agent_Status,\n FlowsActors_PromptInjectionScreeningScope,\n FunctionToolAuthorityKind,\n isLLMAgentConfiguration,\n type FlowsActors_Agent,\n RedactionType,\n isStricterPersonalDataTreatment,\n type FlowsActors_AgentContentGuardrailsTightening,\n type FlowsActors_PersonalDataModelTreatment,\n} from '@wildo-ai/saas-models';\nimport { ContentSafety_HarmCategory, ContentSafety_HarmSeverity } from '@wildo-ai/external-connectors-models';\n\nimport type { AgentPolicyLookup } from '~wildo-backend-lib/flows-actors/content-guardrails/agent-policy.backend';\nimport { recordIdOf, type ToolCallRecordOwners } from '~wildo-backend-lib/flows-actors/content-guardrails/tool-call-record-owners.backend';\nimport { FunctionToolPersonalDataOutputKind, type FunctionTool } from '~wildo-backend-lib/flows-actors/models/function-tools.backend.definitions';\nimport type { PersonalDataGuard } from '~wildo-backend-lib/flows-actors/content-guardrails/personal-data-guard.backend.utils';\nimport { treatRecordsResult } from '~wildo-backend-lib/flows-actors/content-guardrails/personal-data-guard.backend.utils';\nimport type { ToolResultScreen } from '~wildo-backend-lib/flows-actors/content-guardrails/tool-result-screen.backend.utils';\nimport { projectCaughtErrorLogFields } from '~wildo-backend-lib/errors/utils/error-log-level-classification.backend.utils';\nimport type { LoggerService } from '~wildo-backend-lib/monitoring/logger/services/logger.service';\n\n/* What treating a result by its rows' owners needs from the call. /\nexport interface RecordOwnerPolicyContext {\n /* The organizations whose policies the call already applies (its scope). Their rows are treated by the call's guard. /\n readonly coveredOrganizationIds: readonly string[];\n /\n The organization the call's tools act in (`auth.initiatorIds.organizationId`), which confines what they read. Absent\n * when they act in none: an application-scope caller, whose reads can reach any organization its authority admits.\n /\n readonly actingOrganizationId?: string;\n /* Reads the agent policies of organizations outside the call's scope. /\n readonly readPolicies: (organizationIds: readonly string[]) => Promise<AgentPolicyLookup>;\n /* Whether a resource's rows belong to an organization (its primary scope is ORGANIZATIONS). /\n readonly isOrganizationOwned: (resourceType: string) => boolean;\n /\n The organization owning one row of an organization-owned resource: its scope field (`organizationId`), or its own id\n * when the resource IS the organization (the scope root). `undefined` when the row does not say.\n /\n readonly ownerOf: (resourceType: string, record: unknown) => string \| undefined;\n /\n The guard that treats a row needing it when the call has none: created once per call, over the call's table, and\n * recorded on the call like a declared one. Its treatment is `REMOVE`.\n /\n readonly ownerGuard: () => PersonalDataGuard;\n /\n The organizations whose rows a tool acting with the caller's authority can return: the acting tenant when there is\n * one, else the caller's organization-wide memberships (`resolveCallerOrganizationIds`). The set retrieval narrows to\n * (`resolveRetrievalOrganizationIds`), which is what a tool treating its own unattributed output is judged against.\n /\n readonly possibleOwnerOrganizationIds: () => readonly string[];\n /\n #3369: `rows` rows of one call's result named no organization and nothing could derive whose they were, so they were\n * treated under the strictest policy. Recorded on the call's operation record. Must not throw.\n /\n readonly rowsOwnerNotDerived: (call: RecordOwnerToolCall, rows: number) => void;\n /\n The screen that screens rows whose owner asked when the call itself screens nothing (#3364): created once per call,\n * recording each withholding as the call's own screen does. When no classifier can serve, it answers `NOT_SCREENED`.\n * `undefined` where the environment declares its agents run unguarded and no classifier offers screening: the rows then\n * reach the model unscreened, as the call's own results do there.\n /\n readonly ownerScreen: () => ToolResultScreen \| undefined;\n /\n #3364 step 3: told the policies of the organizations whose rows reached the model (beyond the call's own), as they\n * enter, so the reply can be judged under the strictest of them and the call's own. Must not throw.\n /\n readonly rowsReachedModelFrom: (tightenings: readonly FlowsActors_AgentContentGuardrailsTightening[]) => void;\n}\n\n/\n How the owner of a result row that names none can be known, from the tool's declaration (#3369). See the module header.\n /\nexport enum UnattributedRowOwnership {\n /\n Every access is `dispatchResourceOperationAsTool` (`PRINCIPAL_RESOURCE_OPERATION`), which records the owners of the rows\n * it returns: the row is one of theirs, provided every result named its owners (`ToolCallRecordOwners.complete`).\n /\n OBSERVED_DISPATCHES = 'observed_dispatches',\n /* The engine's retrieval tool: its search is confined to the caller's organizations, which are the possible owners. /\n RETRIEVAL_NARROWING = 'retrieval_narrowing',\n /* The tool declares that its rows carry `organizationId` (`rowsNameTheirOrganization`). A row that does not is not derivable. /\n ROWS_NAME_THEIR_ORGANIZATION = 'rows_name_their_organization',\n /* Nothing the engine sees can say: such a row is treated under the strictest policy. /\n NOT_DERIVABLE = 'not_derivable',\n}\n\n/\n How `tool`'s rows that name no organization are attributed (#3369). One reading of the declaration, shared by the\n * runtime and the startup report, so the two cannot disagree.\n /\nexport function unattributedRowOwnershipOf(tool: Pick<FunctionTool, 'authority' \| 'retrievalSources' \| 'personalDataOutput'>): UnattributedRowOwnership {\n if (tool.retrievalSources !== undefined && tool.retrievalSources.length > 0) return UnattributedRowOwnership.RETRIEVAL_NARROWING;\n if (tool.authority?.kind === FunctionToolAuthorityKind.PRINCIPAL_RESOURCE_OPERATION) return UnattributedRowOwnership.OBSERVED_DISPATCHES;\n if (tool.personalDataOutput?.kind === FunctionToolPersonalDataOutputKind.RECORDS_OF_RESOURCE && tool.personalDataOutput.rowsNameTheirOrganization === true) {\n return UnattributedRowOwnership.ROWS_NAME_THEIR_ORGANIZATION;\n }\n return UnattributedRowOwnership.NOT_DERIVABLE;\n}\n\n/* The tool call a result came from, and whether the call screens every result itself. /\nexport interface RecordOwnerToolCall {\n readonly toolCallId: string;\n readonly toolName: string;\n /* The call's own screen covers this result (its agent screens, and the result is not the person's own words). /\n readonly callScreensResult: boolean;\n /* #3369: how the owner of a row naming none is known, from the tool's declaration (`unattributedRowOwnershipOf`). /\n readonly unattributedRows: UnattributedRowOwnership;\n /* #3369: what the call's dispatches reached, when its `execute` was observed (`observingRecordOwners`). /\n readonly observedOwners?: ToolCallRecordOwners;\n}\n\n/\n The tightening an owner whose policy cannot be read is treated as asking for (fail closed): every guardrail at its\n * strictest. Also what a row whose owner cannot be derived is treated under (#3369).\n /\nexport const UNREADABLE_OWNER_TIGHTENING: FlowsActors_AgentContentGuardrailsTightening = Object.freeze({\n personalDataTreatment: RedactionType.REMOVE,\n promptInjectionScreening: FlowsActors_PromptInjectionScreeningScope.THIRD_PARTY_CONTENT,\n machineReadersKeepPlaceholders: true,\n outputModeration: Object.values(ContentSafety_HarmCategory).map((category) => ({ category, blockAtOrAbove: ContentSafety_HarmSeverity.LOW })),\n});\n\n/* The rows of a records result: `{ data: [...] }` or one record; `undefined` for anything else. /\nfunction recordsOf(output: unknown): unknown[] \| undefined {\n if (output === null \|\| output === undefined) return undefined;\n if (typeof output === 'object' && !Array.isArray(output) && Array.isArray((output as { data?: unknown }).data)) return (output as { data: unknown[] }).data;\n return typeof output === 'object' && !Array.isArray(output) ? [output] : undefined;\n}\n\n/* What each listed owner's policy tightens: its row (none = nothing), or {@link UNREADABLE_OWNER_TIGHTENING} when unreadable. /\nasync function ownerTightenings(owners: readonly string[], context: RecordOwnerPolicyContext): Promise<Map<string, FlowsActors_AgentContentGuardrailsTightening \| undefined>> {\n const asked = new Map<string, FlowsActors_AgentContentGuardrailsTightening \| undefined>();\n if (owners.length === 0) return asked;\n const lookup = await context.readPolicies(owners);\n for (const owner of owners) {\n asked.set(owner, lookup.unreadable !== undefined\n ? UNREADABLE_OWNER_TIGHTENING\n : lookup.policies.find((candidate) => (candidate as { organizationId?: string }).organizationId === owner));\n }\n return asked;\n}\n\n/\n The strictest of several organizations' tightenings, for a row that may be any of theirs (#3369): the strongest\n * treatment, placeholders kept from machine readers when any asks, screening when any screens, and every moderation entry\n * (the call's guard keeps the lower severity per category). `undefined` when none asks for anything.\n /\nfunction strictestOf(tightenings: readonly FlowsActors_AgentContentGuardrailsTightening[]): FlowsActors_AgentContentGuardrailsTightening \| undefined {\n let treatment: FlowsActors_PersonalDataModelTreatment \| undefined;\n for (const tightening of tightenings) {\n const candidate = tightening.personalDataTreatment ?? undefined;\n if (isStricterPersonalDataTreatment(candidate, treatment)) treatment = candidate;\n }\n const screening = tightenings.find((tightening) => tightening.promptInjectionScreening)?.promptInjectionScreening;\n const keep = tightenings.some((tightening) => tightening.machineReadersKeepPlaceholders === true);\n const moderation = tightenings.flatMap((tightening) => tightening.outputModeration ?? []);\n const strictest: FlowsActors_AgentContentGuardrailsTightening = {\n ...(treatment ? { personalDataTreatment: treatment } : {}),\n ...(screening ? { promptInjectionScreening: screening } : {}),\n ...(keep ? { machineReadersKeepPlaceholders: true } : {}),\n ...(moderation.length > 0 ? { outputModeration: moderation } : {}),\n };\n return Object.keys(strictest).length > 0 ? strictest : undefined;\n}\n\n/* What a result whose rows name no owner is treated under, and whether its owners were derived at all. /\ninterface UnattributedTreatment {\n /* The strictest of its possible owners' policies beyond the call's own; `undefined` when none asks for more. /\n readonly tightening: FlowsActors_AgentContentGuardrailsTightening \| undefined;\n /* False when nothing could say whose it is: `tightening` is then {@link UNREADABLE_OWNER_TIGHTENING}. /\n readonly derived: boolean;\n}\n\n/\n The organizations a result naming no owner can belong to (#3369), from what the call observed and the tool declares;\n * `undefined` when nothing can say. Tools acting in an organization read only that tenant's rows.\n /\nfunction possibleOwnersOf(context: RecordOwnerPolicyContext, call: RecordOwnerToolCall): readonly string[] \| undefined {\n if (context.actingOrganizationId !== undefined) return [context.actingOrganizationId];\n switch (call.unattributedRows) {\n // Complete only when every organization-owned result the call's dispatches returned named its owners.\n case UnattributedRowOwnership.OBSERVED_DISPATCHES: return call.observedOwners?.complete === true ? call.observedOwners.organizations() : undefined;\n case UnattributedRowOwnership.RETRIEVAL_NARROWING: return context.possibleOwnerOrganizationIds();\n case UnattributedRowOwnership.ROWS_NAME_THEIR_ORGANIZATION:\n case UnattributedRowOwnership.NOT_DERIVABLE:\n return undefined;\n }\n}\n\n/\n What an UNATTRIBUTED row (an organization-owned resource's row naming no owner, and none known for its id) is treated\n * under (#3369): the strictest policy of the organizations it can belong to (`possibleOwnersOf`) beyond those the call\n * covers, or every guardrail at its strictest when nothing can say. `requireOwners` says whether an empty possible set is\n * underivable (a row of an organization-owned resource is somebody's) or simply nobody's (a tool-treated result that\n * reached no organization's rows).\n /\nasync function unattributedTreatment(context: RecordOwnerPolicyContext, call: RecordOwnerToolCall, requireOwners: boolean): Promise<UnattributedTreatment> {\n const possible = possibleOwnersOf(context, call);\n if (possible === undefined \|\| (requireOwners && possible.length === 0)) return { tightening: UNREADABLE_OWNER_TIGHTENING, derived: false };\n const covered = new Set(context.coveredOrganizationIds);\n const owners = [...new Set(possible)].filter((owner) => !covered.has(owner)).sort();\n const asked = [...(await ownerTightenings(owners, context)).values()].filter((policy): policy is FlowsActors_AgentContentGuardrailsTightening => policy !== undefined);\n return { tightening: strictestOf(asked), derived: true };\n}\n\n/\n The model-side rows at `indices`, screened together through the owner screen (#3364): unchanged when clean, each\n * replaced by the withheld notice otherwise. One request for all of them, so a page of rows costs one screening.\n /\nasync function screenOwnerRows(\n rows: unknown[], indices: readonly number[], context: RecordOwnerPolicyContext, call: RecordOwnerToolCall,\n): Promise<{ readonly rows: unknown[]; readonly withheld: ReadonlySet<number> }> {\n if (indices.length === 0) return { rows, withheld: new Set() };\n // The real tool call id: the owner screen is its own instance and a result goes through one screen or the other, so the\n // verdict, the audit row and the operation record all name the call the result belongs to.\n // Withheld is the screen's own answer, never inferred from the output (#3364 review R2): a clean string result is `text`\n // too, and a record could even hold a notice's words.\n const screen = context.ownerScreen();\n if (screen === undefined) return { rows, withheld: new Set() };\n const { output, withheld } = await screen.screened(call.toolCallId, call.toolName, indices.map((index) => rows[index]));\n if (!withheld) return { rows, withheld: new Set() };\n const screened = [...rows];\n for (const index of indices) screened[index] = output.value;\n return { rows: screened, withheld: new Set(indices) };\n}\n\n/\n The result of a tool returning records of `resourceType`, as the model may read it: each row under the stricter of the\n * call's treatment (`callGuard`, absent for an unguarded call) and the treatment its owning organization asked for,\n * with its placeholders kept from machine readers when the owner asked, and screened when the owner screens and the call\n * does not (#3364). Side effect: tells `context.rowsReachedModelFrom` the owners of the rows that reached the model, so\n * the call's moderation is tightened. Equal to `treatRecordsResult` when every row's owner is one the call works for, and\n * to `output` itself on an unguarded call whose rows need nothing.\n /\nexport async function treatRecordsResultByOwner(\n output: unknown,\n resourceType: string,\n callGuard: PersonalDataGuard \| undefined,\n context: RecordOwnerPolicyContext,\n call: RecordOwnerToolCall,\n): Promise<unknown> {\n const callOnly = () => (callGuard ? treatRecordsResult(output, callGuard, resourceType) : output);\n if (output === null \|\| output === undefined \|\| !context.isOrganizationOwned(resourceType)) return callOnly();\n const actsInNoOrganization = context.actingOrganizationId === undefined;\n const records = recordsOf(output);\n if (!records) {\n // Not a record and not `{ data: [...] }`: its rows cannot be attributed. A guarded call withholds it whole already;\n // an unguarded one acting in no organization does too, since nobody can say whose rows they are.\n // Withheld whole, it carries nothing a screen would read.\n return callGuard ? callOnly() : (actsInNoOrganization ? context.ownerGuard().withholdWhole() : output);\n }\n\n const covered = new Set(context.coveredOrganizationIds);\n // #3369: the row's own scope field, else the owner a dispatch of this call recorded for the row's id.\n const ownerOfRow = (record: unknown): string \| undefined => {\n const named = context.ownerOf(resourceType, record);\n if (named !== undefined) return named;\n const id = recordIdOf(record);\n return id === undefined ? undefined : call.observedOwners?.ownerOfRecord(resourceType, id);\n };\n const owners = records.map(ownerOfRow);\n const uncovered = [...new Set(owners.filter((owner): owner is string => owner !== undefined && !covered.has(owner)))].sort();\n const unattributedRows = actsInNoOrganization ? owners.filter((owner) => owner === undefined).length : 0;\n if (uncovered.length === 0 && unattributedRows === 0) return callOnly();\n\n const asked = await ownerTightenings(uncovered, context);\n const unattributed = unattributedRows > 0 ? await unattributedTreatment(context, call, true) : undefined;\n if (unattributed && !unattributed.derived) context.rowsOwnerNotDerived(call, unattributedRows);\n /* What the row's owner asks beyond the call: `undefined` for a row of an organization the call already works for. /\n const tighteningOf = (record: unknown, index: number): FlowsActors_AgentContentGuardrailsTightening \| undefined => {\n const owner = owners[index];\n // A row naming no owner read by tools acting in no organization: the strictest of whoever it can belong to.\n if (owner === undefined) return actsInNoOrganization ? unattributed?.tightening : undefined;\n return covered.has(owner) ? undefined : asked.get(owner);\n };\n\n const treatRow = (record: unknown, index: number): unknown => {\n const tightening = tighteningOf(record, index);\n const treatment: FlowsActors_PersonalDataModelTreatment \| undefined = tightening?.personalDataTreatment ?? undefined;\n // #3364 step 2: a placeholder minted for this row is kept from machine readers when its owner asked.\n const keptFromMachineReaders = tightening?.machineReadersKeepPlaceholders === true;\n if (treatment === undefined) {\n return callGuard ? callGuard.treatRecord(record, callGuard.personalFieldsOf(resourceType), undefined, callGuard.treatment, keptFromMachineReaders) : record;\n }\n // An unguarded call puts no placeholder back, so it withholds instead (see the module header).\n const guard = callGuard ?? context.ownerGuard();\n return guard.treatRecord(record, guard.personalFieldsOf(resourceType), undefined, callGuard ? treatment : RedactionType.REMOVE, keptFromMachineReaders);\n };\n\n // Screened after the treatment, so a classifier reads placeholders, never values (as the call's own screen does).\n const screenIndices = call.callScreensResult ? [] : records.map((record, index) => (tighteningOf(record, index)?.promptInjectionScreening ? index : -1)).filter((index) => index >= 0);\n const { rows: treated, withheld } = await screenOwnerRows(records.map(treatRow), screenIndices, context, call);\n\n // #3364 step 3: the rows that reached the model (a row only stripped of personal fields did; one replaced by the\n // screen's notice did not), so their owners' moderation applies to the reply from the next step on.\n context.rowsReachedModelFrom(records\n .map((record, index) => (withheld.has(index) ? undefined : tighteningOf(record, index)))\n .filter((tightening): tightening is FlowsActors_AgentContentGuardrailsTightening => tightening !== undefined));\n\n if (!Array.isArray(output) && Array.isArray((output as { data?: unknown }).data)) {\n return { ...(output as object), data: treated };\n }\n return treated[0];\n}\n\n/\n The result of a tool that treats its own output (`TREATED_BY_TOOL`, retrieval), whose rows do not say which organization\n * owns them: on an unguarded call, treated through `treat` and the call's owner guard when any organization it can belong\n * to (`possibleOwnersOf`) and the call does not already cover asked for a treatment (the strictest of several possible\n * owners is never looser than the actual one). Unreadable is treated as asking (fail closed), and a tool whose possible\n * owners nothing can say is treated under the strictest policy, counted as one result (#3369). A guarded call is treated by its own\n * guard, as before: the retrieval tool's treatment withholds a personal passage whole under any treatment. Screened\n * whole when a possible owner screens and the call does not; when it reached the model, tells\n * `context.rowsReachedModelFrom` every possible owner's policy (#3364).\n /\nexport async function treatToolTreatedResultByPossibleOwners(\n output: unknown,\n treat: (output: unknown, guard: PersonalDataGuard) => unknown,\n callGuard: PersonalDataGuard \| undefined,\n context: RecordOwnerPolicyContext,\n call: RecordOwnerToolCall,\n): Promise<unknown> {\n // #3369: its possible owners from what the call observed and the tool declares; strictest when nothing can say.\n const { tightening, derived } = await unattributedTreatment(context, call, false);\n if (!derived) context.rowsOwnerNotDerived(call, 1);\n const tightenings = tightening ? [tightening] : [];\n const treated = callGuard\n ? treat(output, callGuard)\n : tightenings.some((tightening) => tightening.personalDataTreatment) ? treat(output, context.ownerGuard()) : output;\n // Its rows name no owner, so the whole result is screened when any possible owner asked.\n if (!call.callScreensResult && tightenings.some((tightening) => tightening.promptInjectionScreening)) {\n const screen = context.ownerScreen();\n const { output, withheld } = screen === undefined\n ? { output: { value: treated }, withheld: false }\n : await screen.screened(call.toolCallId, call.toolName, treated);\n // Withheld whole: nothing of it reached the model, so nothing tightens the reply.\n if (withheld) return output.value;\n }\n // #3364 step 3: its rows name no owner, so every possible owner's moderation applies to the reply.\n context.rowsReachedModelFrom(tightenings);\n return treated;\n}\n\n/* One tool whose returned rows' owners the engine cannot derive (#3369), and the agents offered it. /\nexport interface ToolWithUnderivableRowOwners {\n readonly functionRef: string;\n /* The records it returns, for a `RECORDS_OF_RESOURCE` tool; absent for a tool that treats its own output. /\n readonly resourceType?: string;\n /* The ACTIVE language-model agents offered it, sorted. /\n readonly agentRefs: readonly string[];\n}\n\n/\n The boot report (#3369): every tool offered to an ACTIVE language-model agent whose result rows of an\n * organization-owned resource the engine cannot attribute when they name no organization (`NOT_DERIVABLE` in\n * `unattributedRowOwnershipOf`). One WARN per tool, naming it, its resource, the agents offered it, what happens to such\n * a row, and the remedy. Returns the findings; NEVER throws, because a diagnostic must never be why startup fails (the\n * remedy is an edit to the tool, and every other tool runs as before).\n \n Total over what is registered: it reads the agents, their tools and each tool's resource scope live, so a tool or a\n * resource added tomorrow is reported by the same run. Not reported, because their owners are derived: an\n * application-owned resource (no organization's policy applies), a tool whose every access is a dispatch (each records\n * its rows' owners), the engine's retrieval tool (its search is confined to the caller's organizations), and a tool\n * declaring `rowsNameTheirOrganization` (each row is checked at run time). A dispatching tool is attributed only as far\n * as its dispatches' results name their owners, which no declaration says in advance: one whose operation answers\n * without them (a custom operation's answer) is treated under the strictest policy and counted on the operation record\n * at run time, not here. A WARN, not a refusal: the rows are still\n * treated, under the strictest policy, and an agent acting IN an organization never meets the case.\n /\nexport function reportToolsWhoseRowOwnersCannotBeDerived(input: {\n /* The registered agents. A function, so a registry that cannot be read is reported here rather than thrown at startup. /\n readonly readAgents: () => readonly FlowsActors_Agent[];\n readonly readFunctionTool: (functionRef: string) => FunctionTool \| undefined;\n /* Whether a resource's rows belong to an organization; an unregistered resource counts as one (fail closed). /\n readonly isOrganizationOwned: (resourceType: string) => boolean;\n readonly logger: Pick<LoggerService, 'warn' \| 'debug'>;\n}): ToolWithUnderivableRowOwners[] {\n try {\n const offeredTo = new Map<string, Set<string>>();\n for (const agent of input.readAgents()) {\n if (agent.status !== FlowsActors_Agent_Status.ACTIVE \|\| !isLLMAgentConfiguration(agent.config)) continue;\n for (const functionRef of agent.capabilities?.tools?.functionRefs ?? []) {\n offeredTo.set(functionRef, (offeredTo.get(functionRef) ?? new Set()).add(agent.ref));\n }\n }\n const findings: ToolWithUnderivableRowOwners[] = [];\n for (const [functionRef, agents] of [...offeredTo.entries()].sort(([a], [b]) => a.localeCompare(b))) {\n const tool = input.readFunctionTool(functionRef);\n const output = tool?.personalDataOutput;\n if (!tool \|\| !output \|\| output.kind === FunctionToolPersonalDataOutputKind.NOT_FROM_RECORDS) continue;\n if (output.kind === FunctionToolPersonalDataOutputKind.RECORDS_OF_RESOURCE && !input.isOrganizationOwned(output.resourceType)) continue;\n if (unattributedRowOwnershipOf(tool) !== UnattributedRowOwnership.NOT_DERIVABLE) continue;\n const resourceType = output.kind === FunctionToolPersonalDataOutputKind.RECORDS_OF_RESOURCE ? output.resourceType : undefined;\n const finding: ToolWithUnderivableRowOwners = { functionRef, ...(resourceType ? { resourceType } : {}), agentRefs: [...agents].sort() };\n findings.push(finding);\n input.logger.warn(describeToolWithUnderivableRowOwners(finding), { ...finding });\n }\n if (findings.length === 0) {\n input.logger.debug('Every agent tool returning records of an organization-owned resource names, or lets the engine derive, the organization of each row');\n }\n return findings;\n } catch (error) {\n // WARN, not debug: a report that did not run says nothing, and silence here reads as \"every row owner is derived\".\n input.logger.warn('The tool row-owner report could not run, so tools whose rows are treated under the strictest policy may be unreported',\n projectCaughtErrorLogFields(error));\n return [];\n }\n}\n\n/* The WARN line for one tool: what it returns, what happens to a row naming no organization, and the two remedies. */\nfunction describeToolWithUnderivableRowOwners(finding: ToolWithUnderivableRowOwners): string {\n const returns = finding.resourceType ? `returns \"${finding.resourceType}\" records` : 'treats its own output';\n return `Tool '${finding.functionRef}' ${returns} and reaches them without dispatchResourceOperationAsTool, so the engine cannot `\n + `tell whose a returned row is when the row names no organization. Read by an agent acting in no organization `\n + `(${finding.agentRefs.join(', ')}), such a row reaches the model under the strictest agent policy (personal data `\n + `withheld, screened, its reply moderated in every category), and is counted on the call's operation record. `\n + (finding.resourceType ? `Return each row's organizationId and declare personalDataOutput.rowsNameTheirOrganization, or reach ` : 'Reach ')\n + `the rows through dispatchResourceOperationAsTool and declare the PRINCIPAL_RESOURCE_OPERATION authority.`;\n}\n"]}

package/dist/esm/flows-actors/models/function-tools.backend.definitions.d.ts CHANGED Viewed

@@ -358,6 +358,42 @@ export interface FunctionTool {
      * has no top-level string argument of that name. A tool without it is unaffected.
      */
     deliverableFileArgument?: string;
+    /**
+     * The fields of the row the call acts on that the approval COVERS (#2914): the record's SEALED FIELD SET. Declare it
+     * on an approval-gated tool whose approval is a statement about a record's values (a month's figures signed off, an
+     * invoice's amounts approved), so that whether the approval still holds can be answered later:
+     *
+     * - the decision's card shows these values of the row named by `argumentsResource.rowIdArgument`, read as the system
+     *   when the card is built, so the person approves what they read; a card read before one of them changed is refused
+     *   as stale;
+     * - the approval's seal commits to them inside its presentation, and the currency check
+     *   (`approvalSealSubjectCurrencyOf`, the operator door `POST /internal/admin/approval-seals/currency`, and
+     *   `wildo seal verify --subject-record`) compares them with the record as it is: CURRENT right after the approval,
+     *   NO_LONGER_CURRENT once one of them changes.
+     *
+     * Name only what the approval is ABOUT. Never a lifecycle or approval field (a status, `updatedAt`, the column the
+     * approved call writes the seal's id or the signer into): the approved call's own write would otherwise make its own
+     * seal look stale. A row of another organization than the decision's, or one that cannot be read, is shown and sealed
+     * with no record values, and so is an answer given on a chat card: no notice card shows the row, so its SENT seal
+     * claims none of it (its currency reads NO_SEALED_FIELD_SET).
+     *
+     * Registration refuses it on a tool that is not approval-gated, on a question tool, without
+     * `argumentsResource.rowIdArgument`, and when it names no field, a field twice, or a field the resource's main schema
+     * does not declare (checked when the resource is registered).
+     */
+    sealedRecordFields?: readonly string[];
+    /**
+     * An approval of this tool on a row REPLACES the latest earlier approval of this tool on the same row (#2914): its seal
+     * names that earlier seal as the one it supersedes, as a decision answered again supersedes its own earlier seal. For a
+     * decision that is taken again on the same record after the record was reopened (a month signed off, reopened and
+     * signed off again): the two are different decisions, and without this the second seal names no predecessor, so a
+     * verifier sees two approvals of one record and nothing saying which one stands.
+     *
+     * Only the latest seal of the same source, the same record (`argumentsResource.rowIdArgument`) and the same tool is
+     * superseded, never an approval made through another tool on that row; a decision answered again still supersedes its
+     * own earlier answer first. Requires an approval gate and `argumentsResource.rowIdArgument`.
+     */
+    approvalReplacesEarlierApprovalOfRow?: boolean;
     /**
      * The electronic signature the file deliverable needs once the person approved it (#2293): after the approval's seal is
      * SEALED, the engine sends the approved file (`deliverableFileArgument`, bound by its hash) to the vendor selected for
@@ -808,6 +844,13 @@ export declare function functionToolElectronicSignatureDeclarationProblems(tool:
  * (after `bindToResources`), so the argument the engine binds is the one the model is offered.
  */
 export declare function functionToolDeliverableDeclarationProblems(tool: Pick<FunctionTool, 'functionRef' | 'deliverableFileArgument' | 'inputSchema' | 'requiresHumanApproval' | 'humanApproval' | 'asksThePerson'>): string[];
+/**
+ * What is wrong with a tool's record-approval declarations (`sealedRecordFields`, `approvalReplacesEarlierApprovalOfRow`,
+ * #2914), one sentence per problem with its remedy; empty when they are sound or absent. `declaredFieldsOf` answers the
+ * fields the resource's main schema declares, or undefined when the resource is not registered (its fields are then not
+ * checked here: a field the row does not hold is shown and sealed as absent).
+ */
+export declare function functionToolRecordApprovalDeclarationProblems(tool: Pick<FunctionTool, 'functionRef' | 'sealedRecordFields' | 'approvalReplacesEarlierApprovalOfRow' | 'argumentsResource' | 'requiresHumanApproval' | 'humanApproval' | 'asksThePerson'>, declaredFieldsOf?: (resourceType: string) => readonly string[] | undefined): string[];
 /**
  * The name a `functionRef` is exposed to the model under.
  *

package/dist/esm/flows-actors/models/function-tools.backend.definitions.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"function-tools.backend.definitions.d.ts","sourceRoot":"","sources":["../../../../src/flows-actors/models/function-tools.backend.definitions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,KAAK,sCAAsC,EAC3C,KAAK,kCAAkC,EACvC,qBAAqB,EAMrB,KAAK,YAAY,EACjB,KAAK,+BAA+B,EAKpC,KAAK,0BAA0B,EAC/B,uBAAuB,EAEvB,KAAK,gCAAgC,EACrC,qBAAqB,EACrB,0BAA0B,EAC1B,0BAA0B,EAE1B,KAAK,mBAAmB,EACxB,KAAK,0BAA0B,EAC/B,KAAK,4BAA4B,EACjC,KAAK,+BAA+B,EAKpC,KAAK,WAAW,EAUhB,KAAK,wBAAwB,EAC7B,2BAA2B,EAC3B,wBAAwB,EACxB,sBAAsB,EAIvB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,yBAAyB,EAAE,MAAM,sCAAsC,CAAC;AAUjF,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,gFAAgF,CAAC;AAC9H,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,oFAAoF,CAAC;AACvI,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,qEAAqE,CAAC;AAE5G,OAAO,KAAK,EAAE,qCAAqC,EAAE,MAAM,+EAA+E,CAAC;AAE3I,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,+DAA+D,CAAC;AAC7G,OAAO,KAAK,EAAE,+BAA+B,EAAE,MAAM,0EAA0E,CAAC;AAChI,OAAO,KAAK,EAAE,qCAAqC,EAAE,MAAM,6FAA6F,CAAC;AACzJ,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,qEAAqE,CAAC;AAC5G,OAAO,KAAK,EAAE,0BAA0B,EAAE,kBAAkB,EAAE,MAAM,+DAA+D,CAAC;AAEpI,OAAO,EAAoG,KAAK,iBAAiB,EAAE,KAAK,4BAA4B,EAAyB,MAAM,sFAAsF,CAAC;AAE1R;;;;;;;;;;;;;;;GAeG;AAEH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;AACH,MAAM,WAAW,6BAA6B;IAC5C,iBAAiB,EAAE,+BAA+B,CAAC;IACnD,uBAAuB,EAAE,qCAAqC,CAAC;IAC/D,uBAAuB,EAAE,qCAAqC,CAAC;IAC/D;;;;;;;;;;OAUG;IACH,gBAAgB,EAAE,uBAAuB,CAAC;IAC1C;;;;;;;;;;;;;;;OAeG;IACH,UAAU,EAAE,4BAA4B,CAAC;IACzC;;;;;;OAMG;IACH,SAAS,CAAC,EAAE,IAAI,CAAC,uBAAuB,EAAE,8BAA8B,CAAC,CAAC;IAC1E;;;;;OAKG;IACH,YAAY,CAAC,EAAE,IAAI,CAAC,0BAA0B,EAAE,UAAU,CAAC,CAAC;CAC7D;AACD,iFAAiF;AAEjF;;;;;;;;;;;;GAYG;AACH,MAAM,WAAW,4BAA4B;IAC3C,mEAAmE;IACnE,IAAI,EAAE,gBAAgB,CAAC;IACvB,+DAA+D;IAC/D,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB;;;;OAIG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;OAIG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,yCAAyC;IACzC,QAAQ,EAAE,6BAA6B,CAAC;IACxC;;;;OAIG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;;;OAMG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB;;;;OAIG;IACH,cAAc,CAAC,EAAE,0BAA0B,GAAG,IAAI,CAAC;IACnD;;;;OAIG;IACH,iBAAiB,CAAC,EAAE,qBAAqB,CAAC;IAC1C;;;OAGG;IACH,wBAAwB,CAAC,EAAE,4BAA4B,CAAC;IACxD;;;;;OAKG;IACH,yBAAyB,CAAC,EAAE,sCAAsC,CAAC;IACnE;;;;OAIG;IACH,oBAAoB,CAAC,EAAE,kCAAkC,CAAC;IAC1D;;;;;OAKG;IACH,uBAAuB,CAAC,EAAE,CAAC,UAAU,EAAE,MAAM,KAAK,IAAI,CAAC;CACxD;AAED;;;;GAIG;AACH,oBAAY,kBAAkB;IAC5B,kDAAkD;IAClD,IAAI,SAAS;IACb;;;;OAIG;IACH,KAAK,UAAU;CAChB;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,WAAW,YAAY;IAC3B,yEAAyE;IACzE,WAAW,EAAE,MAAM,CAAC;IACpB;;;;;;OAMG;IACH,WAAW,EAAE,MAAM,CAAC;IACpB,kEAAkE;IAClE,WAAW,EAAE,CAAC,CAAC,UAAU,CAAC;IAC1B;;;;;;;OAOG;IACH,eAAe,CAAC,EAAE,CAAC,SAAS,EAAE,gCAAgC,KAAK,IAAI,CAAC,YAAY,EAAE,aAAa,GAAG,aAAa,CAAC,GAAG,SAAS,CAAC;IACjI,uEAAuE;IACvE,OAAO,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,4BAA4B,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAChF;;;;;;;;;;;;;;;;;;;;;;;OAuBG;IACH,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC;;;;;;;;;;;;;;;OAeG;IACH,aAAa,CAAC,EAAE,8BAA8B,CAAC;IAC/C;;;;;;;OAOG;IACH,MAAM,CAAC,EAAE,kBAAkB,CAAC;IAC5B;;;;;;;;;;;;;;;;;;;;;;OAsBG;IACH,iBAAiB,CAAC,EAAE,8BAA8B,CAAC;IACnD;;;;;;;;;;;;;;;;;OAiBG;IACH,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC;;;;;;;;;;;;OAYG;IACH,mBAAmB,CAAC,EAAE,2CAA2C,CAAC;IAClE;;;;;;;;;OASG;IACH,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB;;;;;OAKG;IACH,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B;;;;OAIG;IACH,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC;;;;OAIG;IACH,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B;;;;OAIG;IACH,gBAAgB,CAAC,EAAE,SAAS,YAAY,EAAE,CAAC;IAC3C;;;;;;;;;;;;;;;;;;;;;;OAsBG;IACH,kBAAkB,CAAC,EAAE,+BAA+B,CAAC;IACrD;;;;;;;;;;;;;;;OAeG;IACH,SAAS,CAAC,EAAE,gCAAgC,CAAC;IAC7C;;;;;;OAMG;IACH,yBAAyB,CAAC,EAAE,IAAI,CAAC;CAClC;AAED,iGAAiG;AACjG,oBAAY,kCAAkC;IAC5C,mEAAmE;IACnE,mBAAmB,wBAAwB;IAC3C,8CAA8C;IAC9C,gBAAgB,qBAAqB;IACrC,sCAAsC;IACtC,eAAe,oBAAoB;CACpC;AAED,mDAAmD;AACnD,MAAM,MAAM,+BAA+B,GACvC;IACA,QAAQ,CAAC,IAAI,EAAE,kCAAkC,CAAC,mBAAmB,CAAC;IACtE,QAAQ,CAAC,YAAY,EAAE,YAAY,CAAC;IACpC;;;;;OAKG;IACH,QAAQ,CAAC,yBAAyB,CAAC,EAAE,IAAI,CAAC;CAC3C,GACC;IAAE,QAAQ,CAAC,IAAI,EAAE,kCAAkC,CAAC,gBAAgB,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAC/F;IACA,QAAQ,CAAC,IAAI,EAAE,kCAAkC,CAAC,eAAe,CAAC;IAClE,0FAA0F;IAC1F,QAAQ,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,iBAAiB,KAAK,OAAO,CAAC;CACxE,CAAC;AAEJ,4FAA4F;AAC5F,MAAM,WAAW,8BAA8B;IAC7C,YAAY,EAAE,YAAY,CAAC;IAC3B,kFAAkF;IAClF,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED;;GAEG;AACH,MAAM,WAAW,8BAA8B;IAC7C,KAAK,EAAE,uBAAuB,CAAC;IAC/B;;;;;;;;;;;;;;;OAeG;IACH,SAAS,CAAC,EAAE,0BAA0B,CAAC;IACvC;;;;OAIG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;;;;;;;;;;;;;OAcG;IACH,0BAA0B,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC/C;;;;;;;;OAQG;IACH,4BAA4B,CAAC,EAAE,OAAO,CAAC;IACvC;;;;;;;;;;;;;;OAcG;IACH,MAAM,CAAC,EAAE,+BAA+B,CAAC;IACzC;;;;;OAKG;IACH,cAAc,CAAC,EAAE,4BAA4B,CAAC;IAC9C;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,4BAA4B,KAAK,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACjG;;;;OAIG;IACH,UAAU,CAAC,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,4BAA4B,KAAK,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACnG;;;;;;;;;;;;;;;;;;;;;;;;OAwBG;IACH,SAAS,CAAC,EAAE,mCAAmC,CAAC;IAChD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA2CG;IACH,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,4BAA4B,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CACpF;AAED;;;GAGG;AACH,MAAM,WAAW,mCAAoC,SAAQ,IAAI,CAAC,0BAA0B,EAAE,OAAO,CAAC;IACpG,KAAK,CAAC,EAAE,iCAAiC,EAAE,CAAC;CAC7C;AAED,kFAAkF;AAClF,MAAM,WAAW,iCAAiC;IAChD,KAAK,EAAE,mBAAmB,CAAC;IAC3B,MAAM,EAAE,0BAA0B,CAAC;IACnC;;;;;;OAMG;IACH,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,4BAA4B,KAAK,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;CAChG;AAED;;;;;;;;;;;;GAYG;AAEH,wBAAgB,2BAA2B,CACzC,IAAI,EAAE,IAAI,CAAC,YAAY,EAAE,aAAa,GAAG,uBAAuB,GAAG,eAAe,GAAG,QAAQ,GAAG,iBAAiB,CAAC,EAClH,iBAAiB,EAAE,qBAAqB,GAAG,SAAS,EACpD,cAAc,CAAC,EAAE,0BAA0B,GAAG,IAAI,GACjD,OAAO,CAMT;AAED;;;;;;;;GAQG;AACH,wBAAgB,+BAA+B,CAAC,IAAI,EAAE,IAAI,CAAC,YAAY,EAAE,mBAAmB,GAAG,oBAAoB,CAAC,GAAG,YAAY,GAAG,SAAS,CAG9I;AAED;;;;;;;;GAQG;AAEH,wBAAgB,+BAA+B,CAAC,IAAI,EAAE,IAAI,CAAC,YAAY,EAAE,QAAQ,GAAG,mBAAmB,GAAG,oBAAoB,CAAC,GAAG,OAAO,CAExI;AAmBD;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC,UAAU,CAkBnE;AAED;;;;;;;;;GASG;AACH,wBAAgB,4BAA4B,CAC1C,IAAI,EAAE,IAAI,CAAC,YAAY,EAAE,aAAa,GAAG,QAAQ,GAAG,mBAAmB,GAAG,oBAAoB,CAAC,EAC/F,KAAK,EAAE,iBAAiB,GAAG,SAAS,GACnC,CAAC,CAAC,UAAU,CAKd;AASD;;;;;;;;GAQG;AACH,wBAAsB,sBAAsB,CAC1C,IAAI,EAAE,IAAI,CAAC,YAAY,EAAE,aAAa,GAAG,QAAQ,GAAG,mBAAmB,GAAG,oBAAoB,CAAC,EAC/F,KAAK,EAAE,iBAAiB,GAAG,SAAS,EACpC,IAAI,EAAE,OAAO,GACZ,OAAO,CAAC,OAAO,CAAC,CAkBlB;AAED;;;;;GAKG;AACH,wBAAsB,0BAA0B,CAC9C,IAAI,EAAE,IAAI,CAAC,YAAY,EAAE,aAAa,GAAG,QAAQ,GAAG,mBAAmB,GAAG,oBAAoB,CAAC,EAC/F,KAAK,EAAE,iBAAiB,GAAG,SAAS,EACpC,IAAI,EAAE,OAAO,GACZ,OAAO,CAAC,OAAO,CAAC,CAElB;AAOD;;;;;GAKG;AACH,wBAAsB,sBAAsB,CAC1C,IAAI,EAAE,IAAI,CAAC,YAAY,EAAE,aAAa,GAAG,QAAQ,GAAG,mBAAmB,GAAG,oBAAoB,CAAC,EAC/F,KAAK,EAAE,iBAAiB,GAAG,SAAS,EACpC,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GACpC,OAAO,CAAC;IAAE,GAAG,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,OAAO,CAAA;CAAE,GAAG;IAAE,gBAAgB,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC,CAkB7E;AAkBD,6EAA6E;AAC7E,qBAAa,6BAA8B,SAAQ,KAAK;CAAG;AAE3D;;;;;;GAMG;AAEH,wBAAgB,+BAA+B,CAAC,IAAI,EAAE,IAAI,CAAC,YAAY,EAAE,aAAa,GAAG,uBAAuB,GAAG,eAAe,GAAG,eAAe,CAAC,GAAG,8BAA8B,GAAG,SAAS,CA6CjM;AACD;;;GAGG;AACH,oBAAY,yBAAyB;IACnC,+FAA+F;IAC/F,QAAQ,aAAa;CACtB;AAED,sHAAsH;AACtH,MAAM,WAAW,2CAA2C;IAC1D,QAAQ,CAAC,aAAa,EAAE,yBAAyB,CAAC;IAClD,mEAAmE;IACnE,QAAQ,CAAC,OAAO,EAAE,SAAS,yBAAyB,EAAE,CAAC;CACxD;AAED;;;GAGG;AACH,wBAAgB,kDAAkD,CAChE,IAAI,EAAE,IAAI,CAAC,YAAY,EAAE,aAAa,GAAG,qBAAqB,GAAG,yBAAyB,CAAC,GAC1F,MAAM,EAAE,CAYV;AAED;;;;GAIG;AACH,wBAAgB,0CAA0C,CACxD,IAAI,EAAE,IAAI,CAAC,YAAY,EAAE,aAAa,GAAG,yBAAyB,GAAG,aAAa,GAAG,uBAAuB,GAAG,eAAe,GAAG,eAAe,CAAC,GAChJ,MAAM,EAAE,CAkBV;AA0CD;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,2BAA2B,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAEvE;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,wBAAwB,GAAG,MAAM,CAEhG;AAED;;;;GAIG;AACH,wBAAgB,yBAAyB,CAAC,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,GAAG,MAAM,GAAG,SAAS,CAGtG;AAsGD;;;;;GAKG;AACH,MAAM,WAAW,gCAAgC;IAC/C,uBAAuB,CAAC,YAAY,EAAE,YAAY,EAAE,mBAAmB,EAAE,MAAM,GAAG,+BAA+B,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,SAAS,CAAC;IAC7I;;;;;OAKG;IACH,mBAAmB,CAAC,YAAY,EAAE,YAAY,GAAG,MAAM,GAAG,SAAS,CAAC;CACrE;AAsWD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgDG;AACH,wBAAsB,+BAA+B,CAAC,OAAO,GAAG,GAAG,EAAE,KAAK,EAAE;IAC1E,GAAG,EAAE,4BAA4B,CAAC;IAClC,YAAY,EAAE,YAAY,CAAC;IAC3B,gGAAgG;IAChG,mBAAmB,EAAE,MAAM,CAAC;IAC5B,2GAA2G;IAC3G,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,8FAA8F;IAC9F,cAAc,CAAC,EAAE,GAAG,CAAC;IACrB;;;;OAIG;IACH,UAAU,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAC9C,kFAAkF;IAClF,IAAI,CAAC,EAAE,GAAG,CAAC;IACX,yFAAyF;IACzF,OAAO,CAAC,EAAE,GAAG,CAAC;CACf,GAAG,OAAO,CAAC,OAAO,CAAC,CAInB;AAED;;;;;;;;;;;GAWG;AACH,MAAM,MAAM,0BAA0B,GAAG,OAAO,CAAC,sBAAsB,EAAE,sBAAsB,CAAC,QAAQ,GAAG,sBAAsB,CAAC,UAAU,CAAC,CAAC;AAE9I;;;GAGG;AACH,MAAM,MAAM,kCAAkC,GAAG,IAAI,CAAC,4BAA4B,EAAE,MAAM,GAAG,gBAAgB,GAAG,UAAU,CAAC,CAAC;AAE5H;;;;;GAKG;AACH,MAAM,WAAW,iCAAiC,CAAC,OAAO,GAAG,GAAG;IAC9D,uDAAuD;IACvD,QAAQ,CAAC,SAAS,EAAE,+BAA+B,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;IACnE,gGAAgG;IAChG,QAAQ,CAAC,gBAAgB,EAAE,gBAAgB,CAAC,GAAG,CAAC,CAAC;IACjD;;;OAGG;IACH,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CAC/D;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,4CAA4C,CAAC,OAAO,GAAG,GAAG,EAAE,KAAK,EAAE;IACvF,QAAQ,CAAC,KAAK,EAAE,0BAA0B,CAAC;IAC3C,QAAQ,CAAC,SAAS,EAAE,kCAAkC,CAAC;IACvD,QAAQ,CAAC,YAAY,EAAE,YAAY,CAAC;IACpC,gGAAgG;IAChG,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;IACrC,2GAA2G;IAC3G,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,8FAA8F;IAC9F,QAAQ,CAAC,cAAc,CAAC,EAAE,GAAG,CAAC;IAC9B,oHAAoH;IACpH,QAAQ,CAAC,UAAU,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CACxD,GAAG,OAAO,CAAC,iCAAiC,CAAC,OAAO,CAAC,CAAC,CAsDtD;AAED,4HAA4H;AAC5H,wBAAsB,qCAAqC,CAAC,OAAO,GAAG,GAAG,EAAE,KAAK,EAAE,UAAU,CAAC,OAAO,4CAA4C,CAAC,CAAC,CAAC,CAAC,GAAG;IACrJ,kFAAkF;IAClF,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC;IACxB,gHAAgH;IAChH,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;CAC5B,GAAG,OAAO,CAAC,OAAO,CAAC,CAInB;AAsBD;;;;GAIG;AACH,eAAO,MAAM,uBAAuB,sBAAsB,CAAC;AAE3D;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,wBAAgB,aAAa,CAAC,OAAO,CAAC,EAAE;IACtC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,sHAAsH;IACtH,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,wGAAwG;IACxG,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB,GAAG,YAAY,CA2Bf;AACD,uEAAuE;AAEvE;;;;GAIG;AACH,eAAO,MAAM,4BAA4B,2BAA2B,CAAC;AAErE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE;IAC1C,aAAa,EAAE,SAAS,CAAC,YAAY,EAAE,GAAG,YAAY,EAAE,CAAC,CAAC;IAC1D,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB,GAAG,YAAY,CA6Cf;AACD,4EAA4E;AAE5E;;;;GAIG;AACH,eAAO,MAAM,sBAAsB,oBAAoB,CAAC;AAExD,qGAAqG;AACrG,eAAO,MAAM,yBAAyB;;;iBAGpC,CAAC;AACH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAE5E;;;;;GAKG;AACH,oBAAY,oBAAoB;IAC9B,mFAAmF;IACnF,OAAO,YAAY;IACnB,iFAAiF;IACjF,eAAe,oBAAoB;IACnC,wGAAwG;IACxG,OAAO,YAAY;IACnB,0CAA0C;IAC1C,WAAW,gBAAgB;IAC3B,oFAAoF;IACpF,UAAU,eAAe;CAC1B;AAED;;;;GAIG;AACH,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,oBAAoB,CAAC;IAC9B,OAAO,EAAE,KAAK,CAAC;QACb,YAAY,EAAE,YAAY,CAAC;QAC3B,QAAQ,EAAE,MAAM,CAAC;QACjB,iEAAiE;QACjE,KAAK,EAAE,MAAM,CAAC;QACd,QAAQ,EAAE,KAAK,CAAC;YAAE,KAAK,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;KAClD,CAAC,CAAC;IACH,WAAW,EAAE,KAAK,CAAC;QAAE,YAAY,EAAE,YAAY,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACnE,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,YAAY,EAAE,wBAAwB,CAAC;IACvC,eAAe,EAAE,2BAA2B,CAAC;CAC9C;AAED;;;GAGG;AACH,eAAO,MAAM,0BAA0B,QAMsD,CAAC;AAE9F;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,aAAa,CAAC,OAAO,EAAE;IACrC,aAAa,EAAE,SAAS,CAAC,YAAY,EAAE,GAAG,YAAY,EAAE,CAAC,CAAC;IAC1D,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,sGAAsG;IACtG,oBAAoB,CAAC,EAAE,MAAM,CAAC;CAC/B,GAAG,YAAY,CA8Bf;AA2BD;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,kBAAkB,GAAG,oBAAoB,CAwCtF;AACD,sEAAsE;AAEtE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuDG;AACH,wBAAgB,gBAAgB,CAC9B,YAAY,EAAE,YAAY,EAC1B,OAAO,CAAC,EAAE;IAAE,WAAW,CAAC,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAE,GACjG,YAAY,CAmLd;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuDG;AACH,wBAAgB,iBAAiB,CAC/B,YAAY,EAAE,YAAY,EAC1B,EAAE,EAAE,qBAAqB,CAAC,MAAM,GAAG,qBAAqB,CAAC,MAAM,EAC/D,OAAO,EAAE;IACP,WAAW,EAAE,CAAC,CAAC,UAAU,CAAC;IAC1B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;;;;;OAQG;IACH,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC,0FAA0F;IAC1F,aAAa,CAAC,EAAE,8BAA8B,CAAC;CAChD,GACA,YAAY,CA4Ed"}
1	+ {"version":3,"file":"function-tools.backend.definitions.d.ts","sourceRoot":"","sources":["../../../../src/flows-actors/models/function-tools.backend.definitions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,KAAK,sCAAsC,EAC3C,KAAK,kCAAkC,EACvC,qBAAqB,EAMrB,KAAK,YAAY,EACjB,KAAK,+BAA+B,EAKpC,KAAK,0BAA0B,EAC/B,uBAAuB,EAEvB,KAAK,gCAAgC,EACrC,qBAAqB,EACrB,0BAA0B,EAC1B,0BAA0B,EAE1B,KAAK,mBAAmB,EACxB,KAAK,0BAA0B,EAC/B,KAAK,4BAA4B,EACjC,KAAK,+BAA+B,EAKpC,KAAK,WAAW,EAUhB,KAAK,wBAAwB,EAC7B,2BAA2B,EAC3B,wBAAwB,EACxB,sBAAsB,EAIvB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,yBAAyB,EAAE,MAAM,sCAAsC,CAAC;AAUjF,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,gFAAgF,CAAC;AAC9H,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,oFAAoF,CAAC;AACvI,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,qEAAqE,CAAC;AAE5G,OAAO,KAAK,EAAE,qCAAqC,EAAE,MAAM,+EAA+E,CAAC;AAE3I,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,+DAA+D,CAAC;AAC7G,OAAO,KAAK,EAAE,+BAA+B,EAAE,MAAM,0EAA0E,CAAC;AAChI,OAAO,KAAK,EAAE,qCAAqC,EAAE,MAAM,6FAA6F,CAAC;AACzJ,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,qEAAqE,CAAC;AAC5G,OAAO,KAAK,EAAE,0BAA0B,EAAE,kBAAkB,EAAE,MAAM,+DAA+D,CAAC;AAEpI,OAAO,EAAoG,KAAK,iBAAiB,EAAE,KAAK,4BAA4B,EAAyB,MAAM,sFAAsF,CAAC;AAE1R;;;;;;;;;;;;;;;GAeG;AAEH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;AACH,MAAM,WAAW,6BAA6B;IAC5C,iBAAiB,EAAE,+BAA+B,CAAC;IACnD,uBAAuB,EAAE,qCAAqC,CAAC;IAC/D,uBAAuB,EAAE,qCAAqC,CAAC;IAC/D;;;;;;;;;;OAUG;IACH,gBAAgB,EAAE,uBAAuB,CAAC;IAC1C;;;;;;;;;;;;;;;OAeG;IACH,UAAU,EAAE,4BAA4B,CAAC;IACzC;;;;;;OAMG;IACH,SAAS,CAAC,EAAE,IAAI,CAAC,uBAAuB,EAAE,8BAA8B,CAAC,CAAC;IAC1E;;;;;OAKG;IACH,YAAY,CAAC,EAAE,IAAI,CAAC,0BAA0B,EAAE,UAAU,CAAC,CAAC;CAC7D;AACD,iFAAiF;AAEjF;;;;;;;;;;;;GAYG;AACH,MAAM,WAAW,4BAA4B;IAC3C,mEAAmE;IACnE,IAAI,EAAE,gBAAgB,CAAC;IACvB,+DAA+D;IAC/D,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB;;;;OAIG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;OAIG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,yCAAyC;IACzC,QAAQ,EAAE,6BAA6B,CAAC;IACxC;;;;OAIG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;;;OAMG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB;;;;OAIG;IACH,cAAc,CAAC,EAAE,0BAA0B,GAAG,IAAI,CAAC;IACnD;;;;OAIG;IACH,iBAAiB,CAAC,EAAE,qBAAqB,CAAC;IAC1C;;;OAGG;IACH,wBAAwB,CAAC,EAAE,4BAA4B,CAAC;IACxD;;;;;OAKG;IACH,yBAAyB,CAAC,EAAE,sCAAsC,CAAC;IACnE;;;;OAIG;IACH,oBAAoB,CAAC,EAAE,kCAAkC,CAAC;IAC1D;;;;;OAKG;IACH,uBAAuB,CAAC,EAAE,CAAC,UAAU,EAAE,MAAM,KAAK,IAAI,CAAC;CACxD;AAED;;;;GAIG;AACH,oBAAY,kBAAkB;IAC5B,kDAAkD;IAClD,IAAI,SAAS;IACb;;;;OAIG;IACH,KAAK,UAAU;CAChB;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,WAAW,YAAY;IAC3B,yEAAyE;IACzE,WAAW,EAAE,MAAM,CAAC;IACpB;;;;;;OAMG;IACH,WAAW,EAAE,MAAM,CAAC;IACpB,kEAAkE;IAClE,WAAW,EAAE,CAAC,CAAC,UAAU,CAAC;IAC1B;;;;;;;OAOG;IACH,eAAe,CAAC,EAAE,CAAC,SAAS,EAAE,gCAAgC,KAAK,IAAI,CAAC,YAAY,EAAE,aAAa,GAAG,aAAa,CAAC,GAAG,SAAS,CAAC;IACjI,uEAAuE;IACvE,OAAO,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,4BAA4B,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAChF;;;;;;;;;;;;;;;;;;;;;;;OAuBG;IACH,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC;;;;;;;;;;;;;;;OAeG;IACH,aAAa,CAAC,EAAE,8BAA8B,CAAC;IAC/C;;;;;;;OAOG;IACH,MAAM,CAAC,EAAE,kBAAkB,CAAC;IAC5B;;;;;;;;;;;;;;;;;;;;;;OAsBG;IACH,iBAAiB,CAAC,EAAE,8BAA8B,CAAC;IACnD;;;;;;;;;;;;;;;;;OAiBG;IACH,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC;;;;;;;;;;;;;;;;;;;;;;OAsBG;IACH,kBAAkB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACvC;;;;;;;;;;OAUG;IACH,oCAAoC,CAAC,EAAE,OAAO,CAAC;IAC/C;;;;;;;;;;;;OAYG;IACH,mBAAmB,CAAC,EAAE,2CAA2C,CAAC;IAClE;;;;;;;;;OASG;IACH,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB;;;;;OAKG;IACH,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B;;;;OAIG;IACH,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC;;;;OAIG;IACH,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B;;;;OAIG;IACH,gBAAgB,CAAC,EAAE,SAAS,YAAY,EAAE,CAAC;IAC3C;;;;;;;;;;;;;;;;;;;;;;OAsBG;IACH,kBAAkB,CAAC,EAAE,+BAA+B,CAAC;IACrD;;;;;;;;;;;;;;;OAeG;IACH,SAAS,CAAC,EAAE,gCAAgC,CAAC;IAC7C;;;;;;OAMG;IACH,yBAAyB,CAAC,EAAE,IAAI,CAAC;CAClC;AAED,iGAAiG;AACjG,oBAAY,kCAAkC;IAC5C,mEAAmE;IACnE,mBAAmB,wBAAwB;IAC3C,8CAA8C;IAC9C,gBAAgB,qBAAqB;IACrC,sCAAsC;IACtC,eAAe,oBAAoB;CACpC;AAED,mDAAmD;AACnD,MAAM,MAAM,+BAA+B,GACvC;IACA,QAAQ,CAAC,IAAI,EAAE,kCAAkC,CAAC,mBAAmB,CAAC;IACtE,QAAQ,CAAC,YAAY,EAAE,YAAY,CAAC;IACpC;;;;;OAKG;IACH,QAAQ,CAAC,yBAAyB,CAAC,EAAE,IAAI,CAAC;CAC3C,GACC;IAAE,QAAQ,CAAC,IAAI,EAAE,kCAAkC,CAAC,gBAAgB,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAC/F;IACA,QAAQ,CAAC,IAAI,EAAE,kCAAkC,CAAC,eAAe,CAAC;IAClE,0FAA0F;IAC1F,QAAQ,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,iBAAiB,KAAK,OAAO,CAAC;CACxE,CAAC;AAEJ,4FAA4F;AAC5F,MAAM,WAAW,8BAA8B;IAC7C,YAAY,EAAE,YAAY,CAAC;IAC3B,kFAAkF;IAClF,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED;;GAEG;AACH,MAAM,WAAW,8BAA8B;IAC7C,KAAK,EAAE,uBAAuB,CAAC;IAC/B;;;;;;;;;;;;;;;OAeG;IACH,SAAS,CAAC,EAAE,0BAA0B,CAAC;IACvC;;;;OAIG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;;;;;;;;;;;;;OAcG;IACH,0BAA0B,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC/C;;;;;;;;OAQG;IACH,4BAA4B,CAAC,EAAE,OAAO,CAAC;IACvC;;;;;;;;;;;;;;OAcG;IACH,MAAM,CAAC,EAAE,+BAA+B,CAAC;IACzC;;;;;OAKG;IACH,cAAc,CAAC,EAAE,4BAA4B,CAAC;IAC9C;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,4BAA4B,KAAK,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACjG;;;;OAIG;IACH,UAAU,CAAC,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,4BAA4B,KAAK,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACnG;;;;;;;;;;;;;;;;;;;;;;;;OAwBG;IACH,SAAS,CAAC,EAAE,mCAAmC,CAAC;IAChD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA2CG;IACH,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,4BAA4B,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CACpF;AAED;;;GAGG;AACH,MAAM,WAAW,mCAAoC,SAAQ,IAAI,CAAC,0BAA0B,EAAE,OAAO,CAAC;IACpG,KAAK,CAAC,EAAE,iCAAiC,EAAE,CAAC;CAC7C;AAED,kFAAkF;AAClF,MAAM,WAAW,iCAAiC;IAChD,KAAK,EAAE,mBAAmB,CAAC;IAC3B,MAAM,EAAE,0BAA0B,CAAC;IACnC;;;;;;OAMG;IACH,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,4BAA4B,KAAK,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;CAChG;AAED;;;;;;;;;;;;GAYG;AAEH,wBAAgB,2BAA2B,CACzC,IAAI,EAAE,IAAI,CAAC,YAAY,EAAE,aAAa,GAAG,uBAAuB,GAAG,eAAe,GAAG,QAAQ,GAAG,iBAAiB,CAAC,EAClH,iBAAiB,EAAE,qBAAqB,GAAG,SAAS,EACpD,cAAc,CAAC,EAAE,0BAA0B,GAAG,IAAI,GACjD,OAAO,CAMT;AAED;;;;;;;;GAQG;AACH,wBAAgB,+BAA+B,CAAC,IAAI,EAAE,IAAI,CAAC,YAAY,EAAE,mBAAmB,GAAG,oBAAoB,CAAC,GAAG,YAAY,GAAG,SAAS,CAG9I;AAED;;;;;;;;GAQG;AAEH,wBAAgB,+BAA+B,CAAC,IAAI,EAAE,IAAI,CAAC,YAAY,EAAE,QAAQ,GAAG,mBAAmB,GAAG,oBAAoB,CAAC,GAAG,OAAO,CAExI;AAmBD;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC,UAAU,CAkBnE;AAED;;;;;;;;;GASG;AACH,wBAAgB,4BAA4B,CAC1C,IAAI,EAAE,IAAI,CAAC,YAAY,EAAE,aAAa,GAAG,QAAQ,GAAG,mBAAmB,GAAG,oBAAoB,CAAC,EAC/F,KAAK,EAAE,iBAAiB,GAAG,SAAS,GACnC,CAAC,CAAC,UAAU,CAKd;AASD;;;;;;;;GAQG;AACH,wBAAsB,sBAAsB,CAC1C,IAAI,EAAE,IAAI,CAAC,YAAY,EAAE,aAAa,GAAG,QAAQ,GAAG,mBAAmB,GAAG,oBAAoB,CAAC,EAC/F,KAAK,EAAE,iBAAiB,GAAG,SAAS,EACpC,IAAI,EAAE,OAAO,GACZ,OAAO,CAAC,OAAO,CAAC,CAkBlB;AAED;;;;;GAKG;AACH,wBAAsB,0BAA0B,CAC9C,IAAI,EAAE,IAAI,CAAC,YAAY,EAAE,aAAa,GAAG,QAAQ,GAAG,mBAAmB,GAAG,oBAAoB,CAAC,EAC/F,KAAK,EAAE,iBAAiB,GAAG,SAAS,EACpC,IAAI,EAAE,OAAO,GACZ,OAAO,CAAC,OAAO,CAAC,CAElB;AAOD;;;;;GAKG;AACH,wBAAsB,sBAAsB,CAC1C,IAAI,EAAE,IAAI,CAAC,YAAY,EAAE,aAAa,GAAG,QAAQ,GAAG,mBAAmB,GAAG,oBAAoB,CAAC,EAC/F,KAAK,EAAE,iBAAiB,GAAG,SAAS,EACpC,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GACpC,OAAO,CAAC;IAAE,GAAG,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,OAAO,CAAA;CAAE,GAAG;IAAE,gBAAgB,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC,CAkB7E;AAkBD,6EAA6E;AAC7E,qBAAa,6BAA8B,SAAQ,KAAK;CAAG;AAE3D;;;;;;GAMG;AAEH,wBAAgB,+BAA+B,CAAC,IAAI,EAAE,IAAI,CAAC,YAAY,EAAE,aAAa,GAAG,uBAAuB,GAAG,eAAe,GAAG,eAAe,CAAC,GAAG,8BAA8B,GAAG,SAAS,CA6CjM;AACD;;;GAGG;AACH,oBAAY,yBAAyB;IACnC,+FAA+F;IAC/F,QAAQ,aAAa;CACtB;AAED,sHAAsH;AACtH,MAAM,WAAW,2CAA2C;IAC1D,QAAQ,CAAC,aAAa,EAAE,yBAAyB,CAAC;IAClD,mEAAmE;IACnE,QAAQ,CAAC,OAAO,EAAE,SAAS,yBAAyB,EAAE,CAAC;CACxD;AAED;;;GAGG;AACH,wBAAgB,kDAAkD,CAChE,IAAI,EAAE,IAAI,CAAC,YAAY,EAAE,aAAa,GAAG,qBAAqB,GAAG,yBAAyB,CAAC,GAC1F,MAAM,EAAE,CAYV;AAED;;;;GAIG;AACH,wBAAgB,0CAA0C,CACxD,IAAI,EAAE,IAAI,CAAC,YAAY,EAAE,aAAa,GAAG,yBAAyB,GAAG,aAAa,GAAG,uBAAuB,GAAG,eAAe,GAAG,eAAe,CAAC,GAChJ,MAAM,EAAE,CAkBV;AAED;;;;;GAKG;AACH,wBAAgB,6CAA6C,CAC3D,IAAI,EAAE,IAAI,CAAC,YAAY,EAAE,aAAa,GAAG,oBAAoB,GAAG,sCAAsC,GAAG,mBAAmB,GAAG,uBAAuB,GAAG,eAAe,GAAG,eAAe,CAAC,EAC3L,gBAAgB,CAAC,EAAE,CAAC,YAAY,EAAE,MAAM,KAAK,SAAS,MAAM,EAAE,GAAG,SAAS,GACzE,MAAM,EAAE,CAyBV;AA0CD;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,2BAA2B,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAEvE;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,wBAAwB,GAAG,MAAM,CAEhG;AAED;;;;GAIG;AACH,wBAAgB,yBAAyB,CAAC,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,GAAG,MAAM,GAAG,SAAS,CAGtG;AAsGD;;;;;GAKG;AACH,MAAM,WAAW,gCAAgC;IAC/C,uBAAuB,CAAC,YAAY,EAAE,YAAY,EAAE,mBAAmB,EAAE,MAAM,GAAG,+BAA+B,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,SAAS,CAAC;IAC7I;;;;;OAKG;IACH,mBAAmB,CAAC,YAAY,EAAE,YAAY,GAAG,MAAM,GAAG,SAAS,CAAC;CACrE;AAsWD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgDG;AACH,wBAAsB,+BAA+B,CAAC,OAAO,GAAG,GAAG,EAAE,KAAK,EAAE;IAC1E,GAAG,EAAE,4BAA4B,CAAC;IAClC,YAAY,EAAE,YAAY,CAAC;IAC3B,gGAAgG;IAChG,mBAAmB,EAAE,MAAM,CAAC;IAC5B,2GAA2G;IAC3G,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,8FAA8F;IAC9F,cAAc,CAAC,EAAE,GAAG,CAAC;IACrB;;;;OAIG;IACH,UAAU,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAC9C,kFAAkF;IAClF,IAAI,CAAC,EAAE,GAAG,CAAC;IACX,yFAAyF;IACzF,OAAO,CAAC,EAAE,GAAG,CAAC;CACf,GAAG,OAAO,CAAC,OAAO,CAAC,CAInB;AAED;;;;;;;;;;;GAWG;AACH,MAAM,MAAM,0BAA0B,GAAG,OAAO,CAAC,sBAAsB,EAAE,sBAAsB,CAAC,QAAQ,GAAG,sBAAsB,CAAC,UAAU,CAAC,CAAC;AAE9I;;;GAGG;AACH,MAAM,MAAM,kCAAkC,GAAG,IAAI,CAAC,4BAA4B,EAAE,MAAM,GAAG,gBAAgB,GAAG,UAAU,CAAC,CAAC;AAE5H;;;;;GAKG;AACH,MAAM,WAAW,iCAAiC,CAAC,OAAO,GAAG,GAAG;IAC9D,uDAAuD;IACvD,QAAQ,CAAC,SAAS,EAAE,+BAA+B,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;IACnE,gGAAgG;IAChG,QAAQ,CAAC,gBAAgB,EAAE,gBAAgB,CAAC,GAAG,CAAC,CAAC;IACjD;;;OAGG;IACH,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CAC/D;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,4CAA4C,CAAC,OAAO,GAAG,GAAG,EAAE,KAAK,EAAE;IACvF,QAAQ,CAAC,KAAK,EAAE,0BAA0B,CAAC;IAC3C,QAAQ,CAAC,SAAS,EAAE,kCAAkC,CAAC;IACvD,QAAQ,CAAC,YAAY,EAAE,YAAY,CAAC;IACpC,gGAAgG;IAChG,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;IACrC,2GAA2G;IAC3G,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,8FAA8F;IAC9F,QAAQ,CAAC,cAAc,CAAC,EAAE,GAAG,CAAC;IAC9B,oHAAoH;IACpH,QAAQ,CAAC,UAAU,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CACxD,GAAG,OAAO,CAAC,iCAAiC,CAAC,OAAO,CAAC,CAAC,CAsDtD;AAED,4HAA4H;AAC5H,wBAAsB,qCAAqC,CAAC,OAAO,GAAG,GAAG,EAAE,KAAK,EAAE,UAAU,CAAC,OAAO,4CAA4C,CAAC,CAAC,CAAC,CAAC,GAAG;IACrJ,kFAAkF;IAClF,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC;IACxB,gHAAgH;IAChH,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;CAC5B,GAAG,OAAO,CAAC,OAAO,CAAC,CAInB;AAsBD;;;;GAIG;AACH,eAAO,MAAM,uBAAuB,sBAAsB,CAAC;AAE3D;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,wBAAgB,aAAa,CAAC,OAAO,CAAC,EAAE;IACtC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,sHAAsH;IACtH,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,wGAAwG;IACxG,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB,GAAG,YAAY,CA2Bf;AACD,uEAAuE;AAEvE;;;;GAIG;AACH,eAAO,MAAM,4BAA4B,2BAA2B,CAAC;AAErE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE;IAC1C,aAAa,EAAE,SAAS,CAAC,YAAY,EAAE,GAAG,YAAY,EAAE,CAAC,CAAC;IAC1D,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB,GAAG,YAAY,CA6Cf;AACD,4EAA4E;AAE5E;;;;GAIG;AACH,eAAO,MAAM,sBAAsB,oBAAoB,CAAC;AAExD,qGAAqG;AACrG,eAAO,MAAM,yBAAyB;;;iBAGpC,CAAC;AACH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAE5E;;;;;GAKG;AACH,oBAAY,oBAAoB;IAC9B,mFAAmF;IACnF,OAAO,YAAY;IACnB,iFAAiF;IACjF,eAAe,oBAAoB;IACnC,wGAAwG;IACxG,OAAO,YAAY;IACnB,0CAA0C;IAC1C,WAAW,gBAAgB;IAC3B,oFAAoF;IACpF,UAAU,eAAe;CAC1B;AAED;;;;GAIG;AACH,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,oBAAoB,CAAC;IAC9B,OAAO,EAAE,KAAK,CAAC;QACb,YAAY,EAAE,YAAY,CAAC;QAC3B,QAAQ,EAAE,MAAM,CAAC;QACjB,iEAAiE;QACjE,KAAK,EAAE,MAAM,CAAC;QACd,QAAQ,EAAE,KAAK,CAAC;YAAE,KAAK,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;KAClD,CAAC,CAAC;IACH,WAAW,EAAE,KAAK,CAAC;QAAE,YAAY,EAAE,YAAY,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACnE,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,YAAY,EAAE,wBAAwB,CAAC;IACvC,eAAe,EAAE,2BAA2B,CAAC;CAC9C;AAED;;;GAGG;AACH,eAAO,MAAM,0BAA0B,QAMsD,CAAC;AAE9F;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,aAAa,CAAC,OAAO,EAAE;IACrC,aAAa,EAAE,SAAS,CAAC,YAAY,EAAE,GAAG,YAAY,EAAE,CAAC,CAAC;IAC1D,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,sGAAsG;IACtG,oBAAoB,CAAC,EAAE,MAAM,CAAC;CAC/B,GAAG,YAAY,CA8Bf;AA2BD;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,kBAAkB,GAAG,oBAAoB,CAwCtF;AACD,sEAAsE;AAEtE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuDG;AACH,wBAAgB,gBAAgB,CAC9B,YAAY,EAAE,YAAY,EAC1B,OAAO,CAAC,EAAE;IAAE,WAAW,CAAC,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAE,GACjG,YAAY,CAmLd;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuDG;AACH,wBAAgB,iBAAiB,CAC/B,YAAY,EAAE,YAAY,EAC1B,EAAE,EAAE,qBAAqB,CAAC,MAAM,GAAG,qBAAqB,CAAC,MAAM,EAC/D,OAAO,EAAE;IACP,WAAW,EAAE,CAAC,CAAC,UAAU,CAAC;IAC1B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;;;;;OAQG;IACH,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC,0FAA0F;IAC1F,aAAa,CAAC,EAAE,8BAA8B,CAAC;CAChD,GACA,YAAY,CA4Ed"}

package/dist/esm/flows-actors/models/function-tools.backend.definitions.js CHANGED Viewed

@@ -378,6 +378,43 @@ export function functionToolDeliverableDeclarationProblems(tool) {
     }
     return problems;
 }
+/**
+ * What is wrong with a tool's record-approval declarations (`sealedRecordFields`, `approvalReplacesEarlierApprovalOfRow`,
+ * #2914), one sentence per problem with its remedy; empty when they are sound or absent. `declaredFieldsOf` answers the
+ * fields the resource's main schema declares, or undefined when the resource is not registered (its fields are then not
+ * checked here: a field the row does not hold is shown and sealed as absent).
+ */
+export function functionToolRecordApprovalDeclarationProblems(tool, declaredFieldsOf) {
+    const fields = tool.sealedRecordFields;
+    const replaces = tool.approvalReplacesEarlierApprovalOfRow === true;
+    if (fields === undefined && !replaces)
+        return [];
+    const problems = [];
+    const named = `Function tool "${tool.functionRef}" declares ${fields !== undefined ? 'sealedRecordFields' : 'approvalReplacesEarlierApprovalOfRow'}`;
+    if (!tool.humanApproval && !tool.requiresHumanApproval) {
+        problems.push(`${named} and is not approval-gated: it describes what an approval covers, so gate it (humanApproval or requiresHumanApproval).`);
+    }
+    if (tool.asksThePerson)
+        problems.push(`${named} and asks the person: a question approves no record.`);
+    if (!tool.argumentsResource?.rowIdArgument) {
+        problems.push(`${named} without argumentsResource.rowIdArgument: name the argument holding the id of the row the approval is about.`);
+    }
+    if (fields !== undefined) {
+        if (!Array.isArray(fields) || fields.length === 0 || fields.some((field) => typeof field !== 'string' || field.trim().length === 0)) {
+            problems.push(`${named}, which names no field: list the fields of the row the approval covers.`);
+        }
+        else {
+            const duplicated = fields.filter((field, index) => fields.indexOf(field) !== index);
+            if (duplicated.length > 0)
+                problems.push(`${named}, which names ${[...new Set(duplicated)].join(', ')} more than once.`);
+            const declared = tool.argumentsResource ? declaredFieldsOf?.(tool.argumentsResource.resourceType) : undefined;
+            const unknown = declared ? fields.filter((field) => !declared.includes(field)) : [];
+            if (unknown.length > 0)
+                problems.push(`${named}, naming ${unknown.join(', ')}, which ${tool.argumentsResource.resourceType} does not declare.`);
+        }
+    }
+    return problems;
+}
 /** Whether an argument schema is a string once its optional, nullable and default wrappers are removed. */
 function isStringArgumentSchema(schema) {
     let current = schema;