@wildo-ai/saas-backend-lib 1.1.2 → 1.1.3

package/dist/esm/flows-actors/services/conversational-execution.backend.service.d.ts

@@ -5,6 +5,8 @@ import { ServicesRegistryHandlerBackendService } from '../../base-classes/servic
 import { SystemAccessBackendService } from '../../base-classes/services/services/system-access.backend.service';
 import { ExecutionContextCreatorBackendService } from '../../runtime/services/execution-context-creator.backend.service';
 import type { SocketAuthResult } from '../../runtime/models/execution-context.backend.schemas';
+import type { RateLimitBackendService } from '../../errors/services/rate-limit.backend.service';
+import type { AuthorizationsBackendService } from '../../security/authorizations/services/authorizations.backend.service';
 import { FlowsActorsRegistryService } from './flows-actors-registry.service';
 import { AgentsBackendService } from './agents.backend.service';
 import { CoreResourceType, CoreWebSocketEvent, FlowsActors_Status, type ExecutionContext_InitiatorIds, type FlowActorExecution_Message } from '@wildo-ai/saas-models';
@@ -143,7 +145,9 @@ export declare class ConversationalExecutionBackendService {
     private readonly servicesRegistryHandler;
     private readonly executionContextCreator;
     private readonly systemAccess;
-    constructor(logger: LoggerService, flowsActorsRegistry: FlowsActorsRegistryService, agentsBackend: AgentsBackendService, resourcesRegistry: ResourcesRegistryBackendService, servicesRegistryHandler: ServicesRegistryHandlerBackendService, executionContextCreator: ExecutionContextCreatorBackendService, systemAccess: SystemAccessBackendService);
+    private readonly rateLimitService;
+    private readonly authorizer;
+    constructor(logger: LoggerService, flowsActorsRegistry: FlowsActorsRegistryService, agentsBackend: AgentsBackendService, resourcesRegistry: ResourcesRegistryBackendService, servicesRegistryHandler: ServicesRegistryHandlerBackendService, executionContextCreator: ExecutionContextCreatorBackendService, systemAccess: SystemAccessBackendService, rateLimitService: RateLimitBackendService, authorizer: AuthorizationsBackendService);
     /**
      * Resolve the owner scope to its persisted polymorphic variant: the concrete
      * `CoreResourceType`, the single owner FK to write on create, and the `*AsSystem`

package/dist/esm/flows-actors/services/conversational-execution.backend.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"conversational-execution.backend.service.d.ts","sourceRoot":"","sources":["../../../../../src/flows-actors/services/conversational-execution.backend.service.ts"],"names":[],"mappings":"AAAA,OAAO,kBAAkB,CAAC;AAK1B,OAAO,EAAE,aAAa,EAAE,MAAM,8DAA8D,CAAC;AAE7F,OAAO,EAAE,+BAA+B,EAAE,MAAM,0EAA0E,CAAC;AAC3H,OAAO,EAAE,qCAAqC,EAAE,MAAM,6FAA6F,CAAC;AACpJ,OAAO,EAAE,0BAA0B,EAAE,MAAM,iFAAiF,CAAC;AAC7H,OAAO,EAAE,qCAAqC,EAAE,MAAM,+EAA+E,CAAC;AACtI,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,qEAAqE,CAAC;AAE5G,OAAO,EAAE,0BAA0B,EAAE,MAAM,iCAAiC,CAAC;AAC7E,OAAO,EAAE,oBAAoB,EAAgE,MAAM,0BAA0B,CAAC;AAC9H,OAAO,EAEL,gBAAgB,EAChB,kBAAkB,EASlB,kBAAkB,EAGlB,KAAK,6BAA6B,EAElC,KAAK,0BAA0B,EAEhC,MAAM,uBAAuB,CAAC;AAE/B;;;;;;;;;;GAUG;AACH,MAAM,MAAM,2BAA2B,GAAG,CAAC,KAAK,EAAE,kBAAkB,EAAE,OAAO,EAAE,OAAO,KAAK,IAAI,CAAC;AAEhG;;;;;;;;;;GAUG;AACH,MAAM,MAAM,wBAAwB,GAChC;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,GAClB;IAAE,cAAc,EAAE,MAAM,CAAA;CAAE,GAC1B;IAAE,aAAa,EAAE,MAAM,CAAA;CAAE,CAAC;AAE9B,2FAA2F;AAC3F,MAAM,WAAW,oBAAoB;IACnC,YAAY,EAAE,gBAAgB,CAAC;IAC/B,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACpC,YAAY,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,cAAc,CAAC,EAAE,MAAM,CAAC;QAAC,aAAa,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CACpF;AAED,2EAA2E;AAC3E,MAAM,WAAW,kCAAkC;IACjD;;;;;OAKG;IACH,yBAAyB,CAAC,EAAE,MAAM,CAAC;IACnC,qDAAqD;IACrD,SAAS,EAAE,MAAM,CAAC;IAClB,qEAAqE;IACrE,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,8EAA8E;IAC9E,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACvC,qEAAqE;IACrE,SAAS,EAAE,6BAA6B,CAAC;IACzC;;;;;OAKG;IACH,IAAI,EAAE,gBAAgB,CAAC;IACvB,+EAA+E;IAC/E,YAAY,EAAE,wBAAwB,CAAC;IACvC,2DAA2D;IAC3D,OAAO,EAAE,2BAA2B,CAAC;IACrC;;;;OAIG;IACH,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B;;;;;;OAMG;IACH,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE;QAAE,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,CAAC;CACrD;AAED;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,iCAAiC,CAC/C,QAAQ,EAAE,SAAS,0BAA0B,EAAE,GAC9C,0BAA0B,EAAE,CAE9B;AAwBD,qBACa,qCAAqC;IAEX,OAAO,CAAC,QAAQ,CAAC,MAAM;IACH,OAAO,CAAC,QAAQ,CAAC,mBAAmB;IAC1C,OAAO,CAAC,QAAQ,CAAC,aAAa;IAC3B,OAAO,CAAC,QAAQ,CAAC,iBAAiB;IAC3B,OAAO,CAAC,QAAQ,CAAC,uBAAuB;IACjC,OAAO,CAAC,QAAQ,CAAC,uBAAuB;IAC1D,OAAO,CAAC,QAAQ,CAAC,YAAY;gBANzB,MAAM,EAAE,aAAa,EACD,mBAAmB,EAAE,0BAA0B,EACrD,aAAa,EAAE,oBAAoB,EAChC,iBAAiB,EAAE,+BAA+B,EAC3C,uBAAuB,EAAE,qCAAqC,EACvD,uBAAuB,EAAE,qCAAqC,EAChF,YAAY,EAAE,0BAA0B;IAG3G;;;;;;;OAOG;IACH,OAAO,CAAC,mBAAmB;IAc3B;;;;OAIG;IACU,4BAA4B,CAAC,MAAM,EAAE,kCAAkC,GAAG,OAAO,CAAC,IAAI,CAAC;IA8XpG;;;;;OAKG;IACH;;;;;;;OAOG;YACW,gBAAgB;IAyB9B;;;;;;;;;;;;;;OAcG;YACW,yBAAyB;IA0EvC;;;;;;;;;;;;;;;OAeG;IACH;;;;;;;;;;;;;;OAcG;IACH,OAAO,CAAC,yBAAyB;IAejC;;;;;;;;;;;;;;;;;;OAkBG;IACU,mBAAmB,CAAC,MAAM,EAAE;QACvC,WAAW,EAAE,MAAM,CAAC;QACpB,YAAY,EAAE,wBAAwB,CAAC;QACvC,IAAI,CAAC,EAAE,gBAAgB,CAAC;QACxB,yBAAyB,CAAC,EAAE,MAAM,CAAC;KACpC,GAAG,OAAO,CAAC,kBAAkB,GAAG,SAAS,CAAC;IA8B9B,iBAAiB,CAAC,MAAM,EAAE;QACrC,SAAS,EAAE,MAAM,CAAC;QAClB,WAAW,EAAE,MAAM,CAAC;QACpB,UAAU,EAAE,MAAM,CAAC;QACnB,QAAQ,EAAE,OAAO,CAAC;QAClB,YAAY,EAAE,wBAAwB,CAAC;QACvC,IAAI,CAAC,EAAE,gBAAgB,CAAC;QACxB,yBAAyB,CAAC,EAAE,MAAM,CAAC;QACnC,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,OAAO,CAAC,EAAE,2BAA2B,CAAC;KACvC,GAAG,OAAO,CAAC,IAAI,CAAC;IA2EjB;;;;;;OAMG;YACW,mBAAmB;IAiHjC;;;;OAIG;IACH,OAAO,CAAC,gCAAgC;IAgBxC,2FAA2F;IAC3F,OAAO,CAAC,mBAAmB;IAO3B,mFAAmF;IACnF,OAAO,CAAC,eAAe;IAOvB;;;;OAIG;IACH,OAAO,CAAC,kBAAkB;IAS1B;;;;;;;OAOG;IACH,OAAO,CAAC,WAAW;IAanB,4FAA4F;IAC5F,OAAO,CAAC,oBAAoB;IAa5B,2CAA2C;IAC3C,OAAO,CAAC,SAAS;CAelB"}
+{"version":3,"file":"conversational-execution.backend.service.d.ts","sourceRoot":"","sources":["../../../../../src/flows-actors/services/conversational-execution.backend.service.ts"],"names":[],"mappings":"AAAA,OAAO,kBAAkB,CAAC;AAK1B,OAAO,EAAE,aAAa,EAAE,MAAM,8DAA8D,CAAC;AAE7F,OAAO,EAAE,+BAA+B,EAAE,MAAM,0EAA0E,CAAC;AAC3H,OAAO,EAAE,qCAAqC,EAAE,MAAM,6FAA6F,CAAC;AACpJ,OAAO,EAAE,0BAA0B,EAAE,MAAM,iFAAiF,CAAC;AAC7H,OAAO,EAAE,qCAAqC,EAAE,MAAM,+EAA+E,CAAC;AACtI,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,qEAAqE,CAAC;AAE5G,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,+DAA+D,CAAC;AAC7G,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,oFAAoF,CAAC;AACvI,OAAO,EAAE,0BAA0B,EAAE,MAAM,iCAAiC,CAAC;AAC7E,OAAO,EAAE,oBAAoB,EAAgE,MAAM,0BAA0B,CAAC;AAC9H,OAAO,EAEL,gBAAgB,EAChB,kBAAkB,EAUlB,kBAAkB,EAGlB,KAAK,6BAA6B,EAElC,KAAK,0BAA0B,EAGhC,MAAM,uBAAuB,CAAC;AAE/B;;;;;;;;;;GAUG;AACH,MAAM,MAAM,2BAA2B,GAAG,CAAC,KAAK,EAAE,kBAAkB,EAAE,OAAO,EAAE,OAAO,KAAK,IAAI,CAAC;AAEhG;;;;;;;;;;GAUG;AACH,MAAM,MAAM,wBAAwB,GAChC;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,GAClB;IAAE,cAAc,EAAE,MAAM,CAAA;CAAE,GAC1B;IAAE,aAAa,EAAE,MAAM,CAAA;CAAE,CAAC;AAE9B,2FAA2F;AAC3F,MAAM,WAAW,oBAAoB;IACnC,YAAY,EAAE,gBAAgB,CAAC;IAC/B,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACpC,YAAY,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,cAAc,CAAC,EAAE,MAAM,CAAC;QAAC,aAAa,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CACpF;AAED,2EAA2E;AAC3E,MAAM,WAAW,kCAAkC;IACjD;;;;;OAKG;IACH,yBAAyB,CAAC,EAAE,MAAM,CAAC;IACnC,qDAAqD;IACrD,SAAS,EAAE,MAAM,CAAC;IAClB,qEAAqE;IACrE,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,8EAA8E;IAC9E,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACvC,qEAAqE;IACrE,SAAS,EAAE,6BAA6B,CAAC;IACzC;;;;;OAKG;IACH,IAAI,EAAE,gBAAgB,CAAC;IACvB,+EAA+E;IAC/E,YAAY,EAAE,wBAAwB,CAAC;IACvC,2DAA2D;IAC3D,OAAO,EAAE,2BAA2B,CAAC;IACrC;;;;OAIG;IACH,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B;;;;;;OAMG;IACH,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE;QAAE,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,CAAC;CACrD;AAED;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,iCAAiC,CAC/C,QAAQ,EAAE,SAAS,0BAA0B,EAAE,GAC9C,0BAA0B,EAAE,CAE9B;AAwBD,qBACa,qCAAqC;IAEX,OAAO,CAAC,QAAQ,CAAC,MAAM;IACH,OAAO,CAAC,QAAQ,CAAC,mBAAmB;IAC1C,OAAO,CAAC,QAAQ,CAAC,aAAa;IAC3B,OAAO,CAAC,QAAQ,CAAC,iBAAiB;IAC3B,OAAO,CAAC,QAAQ,CAAC,uBAAuB;IACjC,OAAO,CAAC,QAAQ,CAAC,uBAAuB;IAC1D,OAAO,CAAC,QAAQ,CAAC,YAAY;IACzB,OAAO,CAAC,QAAQ,CAAC,gBAAgB;IAInC,OAAO,CAAC,QAAQ,CAAC,UAAU;gBAXzB,MAAM,EAAE,aAAa,EACD,mBAAmB,EAAE,0BAA0B,EACrD,aAAa,EAAE,oBAAoB,EAChC,iBAAiB,EAAE,+BAA+B,EAC3C,uBAAuB,EAAE,qCAAqC,EACvD,uBAAuB,EAAE,qCAAqC,EAChF,YAAY,EAAE,0BAA0B,EACpC,gBAAgB,EAAE,uBAAuB,EAI3C,UAAU,EAAE,4BAA4B;IAG7G;;;;;;;OAOG;IACH,OAAO,CAAC,mBAAmB;IAc3B;;;;OAIG;IACU,4BAA4B,CAAC,MAAM,EAAE,kCAAkC,GAAG,OAAO,CAAC,IAAI,CAAC;IA8XpG;;;;;OAKG;IACH;;;;;;;OAOG;YACW,gBAAgB;IAyB9B;;;;;;;;;;;;;;OAcG;YACW,yBAAyB;IA8FvC;;;;;;;;;;;;;;;OAeG;IACH;;;;;;;;;;;;;;OAcG;IACH,OAAO,CAAC,yBAAyB;IAuBjC;;;;;;;;;;;;;;;;;;OAkBG;IACU,mBAAmB,CAAC,MAAM,EAAE;QACvC,WAAW,EAAE,MAAM,CAAC;QACpB,YAAY,EAAE,wBAAwB,CAAC;QACvC,IAAI,CAAC,EAAE,gBAAgB,CAAC;QACxB,yBAAyB,CAAC,EAAE,MAAM,CAAC;KACpC,GAAG,OAAO,CAAC,kBAAkB,GAAG,SAAS,CAAC;IA8B9B,iBAAiB,CAAC,MAAM,EAAE;QACrC,SAAS,EAAE,MAAM,CAAC;QAClB,WAAW,EAAE,MAAM,CAAC;QACpB,UAAU,EAAE,MAAM,CAAC;QACnB,QAAQ,EAAE,OAAO,CAAC;QAClB,YAAY,EAAE,wBAAwB,CAAC;QACvC,IAAI,CAAC,EAAE,gBAAgB,CAAC;QACxB,yBAAyB,CAAC,EAAE,MAAM,CAAC;QACnC,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,OAAO,CAAC,EAAE,2BAA2B,CAAC;KACvC,GAAG,OAAO,CAAC,IAAI,CAAC;IA0GjB;;;;;;OAMG;YACW,mBAAmB;IAiHjC;;;;OAIG;IACH,OAAO,CAAC,gCAAgC;IAgBxC,2FAA2F;IAC3F,OAAO,CAAC,mBAAmB;IAO3B,mFAAmF;IACnF,OAAO,CAAC,eAAe;IAOvB;;;;OAIG;IACH,OAAO,CAAC,kBAAkB;IAS1B;;;;;;;OAOG;IACH,OAAO,CAAC,WAAW;IAanB,4FAA4F;IAC5F,OAAO,CAAC,oBAAoB;IAa5B,2CAA2C;IAC3C,OAAO,CAAC,SAAS;CAelB"}

package/dist/esm/flows-actors/services/conversational-execution.backend.service.js

@@ -22,7 +22,7 @@ import { SystemAccessBackendService } from '../../base-classes/services/services
 import { ExecutionContextCreatorBackendService } from '../../runtime/services/execution-context-creator.backend.service.js';
 import { FlowsActorsRegistryService } from './flows-actors-registry.service.js';
 import { AgentsBackendService, AgentStreamingUnsupportedError } from './agents.backend.service.js';
-import { Actor_ExecutionMode, CoreResourceType, CoreWebSocketEvent, FlowActorSystem_Kind, FlowsActors_ConversationRole, FlowsActors_MessageContentType, FLOWS_ACTORS_DEFAULT_AGENT_INSTANCE, parseFlowActorPausedApproval, serializeFlowActorPausedApproval, FLOWS_ACTORS_NO_MACHINE_CREDENTIAL, FlowsActors_Status, } from '@wildo-ai/saas-models';
+import { Actor_ExecutionMode, CoreResourceType, CoreWebSocketEvent, FlowActorSystem_Kind, FlowsActors_ConversationRole, FlowsActors_MessageContentType, FLOWS_ACTORS_DEFAULT_AGENT_INSTANCE, FLOW_ACTOR_APPROVAL_DEFAULT_TIMEOUT_MS, parseFlowActorPausedApproval, serializeFlowActorPausedApproval, FLOWS_ACTORS_NO_MACHINE_CREDENTIAL, FlowsActors_Status, } from '@wildo-ai/saas-models';
 /**
  * Drives a **conversational execution** of a flows-actors system: resolve the
  * system, find its chat actor's agent, stream the agent's token-by-token answer
@@ -95,7 +95,9 @@ let ConversationalExecutionBackendService = class ConversationalExecutionBackend
     servicesRegistryHandler;
     executionContextCreator;
     systemAccess;
-    constructor(logger, flowsActorsRegistry, agentsBackend, resourcesRegistry, servicesRegistryHandler, executionContextCreator, systemAccess) {
+    rateLimitService;
+    authorizer;
+    constructor(logger, flowsActorsRegistry, agentsBackend, resourcesRegistry, servicesRegistryHandler, executionContextCreator, systemAccess, rateLimitService, authorizer) {
         this.logger = logger;
         this.flowsActorsRegistry = flowsActorsRegistry;
         this.agentsBackend = agentsBackend;
@@ -103,6 +105,8 @@ let ConversationalExecutionBackendService = class ConversationalExecutionBackend
         this.servicesRegistryHandler = servicesRegistryHandler;
         this.executionContextCreator = executionContextCreator;
         this.systemAccess = systemAccess;
+        this.rateLimitService = rateLimitService;
+        this.authorizer = authorizer;
     }
     /**
      * Resolve the owner scope to its persisted polymorphic variant: the concrete
@@ -551,12 +555,19 @@ let ConversationalExecutionBackendService = class ConversationalExecutionBackend
     async persistApprovalSuspension(params) {
         const { systemRef, executionId, owner, suspension, emitter } = params;
         const requestedAt = new Date().toISOString();
+        const pausedApprovalExpiresAt = new Date(Date.now() + FLOW_ACTOR_APPROVAL_DEFAULT_TIMEOUT_MS).toISOString();
         const pausedApproval = serializeFlowActorPausedApproval({
             approvalId: suspension.approvalId,
             sdkModelMessages: suspension.sdkModelMessages,
             pendingToolName: suspension.toolName,
             pendingToolArgs: suspension.toolArgs,
             requestedAt,
+            // #465: the suspension carries its own expiry. The field was declared, sent to the browser and
+            // read there, and never written — so a pending approval never expired.
+            //
+            // Computed ONCE, above, and shared with the announcement below: two `Date.now()` calls would
+            // let the row and the message a client is shown disagree about when the pause lapses.
+            expiresAt: pausedApprovalExpiresAt,
         });
         try {
             const paused = await this.systemAccess.updateAsSystem(owner.resourceType, {
@@ -584,24 +595,36 @@ let ConversationalExecutionBackendService = class ConversationalExecutionBackend
         }
         // Only announce a pause that was actually RECORDED. Emitting first would invite a client to
         // answer a decision no row can accept.
+        /*
+         * Built through the NAMED schema rather than as an anonymous `data` bag. The bag is
+         * `Record<string, unknown>` on the wire, so nothing typed this announcement and the browser
+         * ended up listening on `FLOWS_ACTORS_APPROVAL_REQUEST` — an event no code has ever emitted
+         * — which meant no shipped screen could observe a paused turn at all (#528). Typing the
+         * producer is what lets the consumer parse it instead of guessing at keys.
+         *
+         * `expiresAt` travels here and nowhere else: since #465 the suspension genuinely carries an
+         * expiry, and this block is the only path by which a client can learn it.
+         */
+        const announcement = {
+            approvalRequested: true,
+            approvalId: suspension.approvalId,
+            toolName: suspension.toolName,
+            toolArgs: suspension.toolArgs,
+            requestedAt,
+            expiresAt: pausedApprovalExpiresAt,
+            // The isolation axis the DECISION must carry back. Without it a responder can only be
+            // filtered against the default-instance sentinel, so an approval raised on a named agent
+            // instance is unresumable — the read matches no row and the decision is dropped silently.
+            // Emitted even when it is the default, so a client echoes one field unconditionally rather
+            // than branching on whether the value is meaningful.
+            resourceServerInstanceRef: agentInstanceOf(params.resourceServerInstanceRef),
+        };
         emitter(CoreWebSocketEvent.FLOWS_ACTORS_MESSAGE, {
             systemRef,
             executionId,
             messageType: FlowsActors_MessageContentType.PROGRESS,
             content: `Waiting for approval to run "${suspension.toolName}".`,
-            data: {
-                approvalRequested: true,
-                approvalId: suspension.approvalId,
-                toolName: suspension.toolName,
-                toolArgs: suspension.toolArgs,
-                requestedAt,
-                // The isolation axis the DECISION must carry back. Without it a responder can only be
-                // filtered against the default-instance sentinel, so an approval raised on a named agent
-                // instance is unresumable — the read matches no row and the decision is dropped silently.
-                // Emitted even when it is the default, so a client echoes one field unconditionally rather
-                // than branching on whether the value is meaningful.
-                resourceServerInstanceRef: agentInstanceOf(params.resourceServerInstanceRef),
-            },
+            data: announcement,
             timestamp: new Date(),
         });
     }
@@ -647,6 +670,14 @@ let ConversationalExecutionBackendService = class ConversationalExecutionBackend
                 resourcesRegistry: this.resourcesRegistry,
                 servicesRegistryHandler: this.servicesRegistryHandler,
                 executionContextCreator: this.executionContextCreator,
+                // A tool dispatches a resource operation while bypassing Express, so the operation's own
+                // authored `rateLimit?` — whose other consumers are the HTTP controller pre-flight and the
+                // MCP tool plane — has no enforcer on this plane unless one is supplied here.
+                rateLimitService: this.rateLimitService,
+                // Same reason, for the operation's `roles` ACL: bypassing Express also bypasses the
+                // CONTROLLER tier, which is the only place that ACL is read. Supplying the authorizer here
+                // is what lets the tool factories apply it themselves.
+                authorizer: this.authorizer,
             },
         };
     }
@@ -736,6 +767,36 @@ let ConversationalExecutionBackendService = class ConversationalExecutionBackend
             });
             return;
         }
+        /*
+         * #465: an EXPIRED approval is refused, and the turn becomes terminal.
+         *
+         * This is the half that matters for safety rather than hygiene: honouring a decision on a tool
+         * call raised days ago would execute it against a conversation, a world and an intent that have
+         * all moved on, and the person answering has no memory of the question. `FAILED` is the terminal
+         * state the status vocabulary already named for expiry — nothing new was invented.
+         *
+         * Placed AFTER the approvalId match so a mismatched id keeps its own diagnosis; an expired
+         * approval and a wrong one are different facts and an operator reading the log needs both.
+         *
+         * KNOWN GAP, stated rather than implied: nothing sweeps. A turn nobody answers stays
+         * `AWAITING_APPROVAL` until a late decision arrives and is refused here, rather than lapsing on
+         * its own. That makes this a guard at USE, not the unattended auto-fail the schema describes —
+         * closing it needs a scheduled sweep, which is deliberately not built here.
+         */
+        if (paused.expiresAt !== undefined && new Date(paused.expiresAt).getTime() <= Date.now()) {
+            this.logger.warn('[ConversationalExecution] Approval decision arrived after the pause expired; refusing and failing the turn', {
+                systemRef, executionId, approvalId, expiresAt: paused.expiresAt, toolName: paused.pendingToolName,
+            });
+            await this.systemAccess.updateAsSystem(owner.resourceType, ownerFilter, {
+                status: FlowsActors_Status.FAILED,
+                pausedApproval: null,
+            }, { scopeContext: owner.scopeContext }).catch((error) => {
+                this.logger.error('[ConversationalExecution] Could not fail an expired approval pause', {
+                    systemRef, executionId, ...projectCaughtErrorLogFields(error),
+                });
+            });
+            return;
+        }
         this.logger.info('[ConversationalExecution] Resuming a suspended turn on a human decision', {
             systemRef, executionId, approvalId, approved, toolName: paused.pendingToolName,
         });
@@ -956,13 +1017,15 @@ ConversationalExecutionBackendService = __decorate([
     __param(4, inject(SAAS_SERVICE_TYPES.ServicesRegistryHandlerService)),
     __param(5, inject(SAAS_SERVICE_TYPES.ExecutionContextCreatorBackendService)),
     __param(6, inject(SAAS_SERVICE_TYPES.SystemAccessService)),
+    __param(7, inject(SAAS_SERVICE_TYPES.RateLimitBackendService)),
+    __param(8, inject(SAAS_SERVICE_TYPES.AuthorizationsService)),
     __metadata("design:paramtypes", [LoggerService,
         FlowsActorsRegistryService,
         AgentsBackendService,
         ResourcesRegistryBackendService,
         ServicesRegistryHandlerBackendService,
         ExecutionContextCreatorBackendService,
-        SystemAccessBackendService])
+        SystemAccessBackendService, Function, Function])
 ], ConversationalExecutionBackendService);
 export { ConversationalExecutionBackendService };
 //# sourceMappingURL=conversational-execution.backend.service.js.map