@wildo-ai/saas-backend-lib 1.1.2 → 1.1.4

package/dist/esm/flows-actors/models/core-facets.backend.definitions.js

@@ -6,7 +6,7 @@
  * - Compliance: AuditTrailFacet, ConfirmationGateFacet
  * - Quality/Behavior: HighPrecisionFacet, ConservativeFacet, ThinkingModeFacet
  * - Output: VerboseFacet, SuccinctFacet
- * - Domain/Tooling: SecurityAnalysisFacet, MCPCodeAssistantFacet
+ * - Domain/Tooling: SecurityAnalysisFacet
  *
  * Presets (named facet arrays):
  * - CriticalOperationPreset
@@ -17,7 +17,7 @@
  */
 import { FacetCategory } from './agent-facets.backend.definitions.js';
 import { AgentFacetsBackendService } from '../../flows-actors/services/agent-facets.backend.service.js';
-import { ConstraintsCatalog, InstructionsCatalog, HintsCatalog, OutOfScopeCatalog, ModelPresetsCatalog, ToolBundlesCatalog, MCPBundlesCatalog, } from './agent-catalogs.backend.definitions.js';
+import { ConstraintsCatalog, InstructionsCatalog, HintsCatalog, OutOfScopeCatalog, ModelPresetsCatalog, ToolBundlesCatalog, } from './agent-catalogs.backend.definitions.js';
 import { FlowsActors_Agent_UncertaintyPolicy, FlowsActors_Agent_Verbosity, } from '@wildo-ai/saas-models';
 //===============================================================
 // SECURITY FACETS
@@ -235,17 +235,22 @@ export const SecurityAnalysisFacet = {
     },
 };
 AgentFacetsBackendService.registerFacet(SecurityAnalysisFacet);
-export const MCPCodeAssistantFacet = {
-    id: "mcp-code-assistant",
-    name: "MCP Code Assistant",
-    description: "Code editing and filesystem tools via MCP",
-    category: FacetCategory.TOOLING,
-    capabilities: {
-        tools: MCPBundlesCatalog.CODE_ASSISTANT,
-    },
-    config: ModelPresetsCatalog.TOOLING_ENABLED,
-};
-AgentFacetsBackendService.registerFacet(MCPCodeAssistantFacet);
+/*
+ * `MCPCodeAssistantFacet` was WITHDRAWN 2026-09-09 (#491), with `MCPBundlesCatalog` beside it.
+ *
+ * It composed `mcpRefs: ["filesystem-mcp", "code-editor-mcp", "git-mcp"]` — three strings that named
+ * no server anywhere. Nothing resolved them, and the agent card rendered them, so any agent carrying
+ * this facet advertised a reach it did not have. That is the whole of #491.
+ *
+ * It is not restored as an empty shell. An `mcpRef` now names a server the APPLICATION declared, so
+ * a facet shipped by the engine cannot supply one: the engine does not know which third parties an
+ * application permits its agents to reach, and that is the decision the declaration exists to hold.
+ * A code-assistant facet becomes meaningful again when an application declares a code-assistant MCP
+ * server and references it by ref — at which point it is that application's facet, not this file's.
+ *
+ * The names also described a CODING agent's reach — a filesystem, a git checkout — which is the ACP
+ * coding-agent lane rather than anything a generated business application's agent calls.
+ */
 export const DataAnalysisFacet = {
     id: "data-analysis",
     name: "Data Analysis",
@@ -288,10 +293,15 @@ export const SecurityReviewerPreset = [
 ];
 /**
  * Code Assistant Preset
- * Use for: Development assistance with MCP tools
+ * Use for: careful, deliberate assistance on precise work.
+ *
+ * `MCPCodeAssistantFacet` was removed from this preset 2026-09-09 (#491) — see its withdrawal note
+ * above. The preset is KEPT rather than deleted with it: what it composes now is a real posture
+ * (deliberate reasoning at high precision) that an application can use today, whereas the removed
+ * facet contributed only refs to servers that did not exist. Keeping the preset and dropping the
+ * facet is the honest split — nothing here ever supplied the tools, so nothing is lost by saying so.
  */
 export const CodeAssistantPreset = [
-    MCPCodeAssistantFacet,
     ThinkingModeFacet,
     HighPrecisionFacet,
 ];

package/dist/esm/flows-actors/models/core-facets.backend.definitions.js.map

@@ -1 +1 @@
-{"version":3,"file":"core-facets.backend.definitions.js","sourceRoot":"","sources":["../../../../../src/flows-actors/models/core-facets.backend.definitions.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAc,aAAa,EAAE,MAAM,oCAAoC,CAAC;AAC/E,OAAO,EAAE,yBAAyB,EAAE,MAAM,uEAAuE,CAAC;AAClH,OAAO,EACL,kBAAkB,EAClB,mBAAmB,EACnB,YAAY,EACZ,iBAAiB,EACjB,mBAAmB,EACnB,kBAAkB,EAClB,iBAAiB,GAClB,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EACL,mCAAmC,EACnC,2BAA2B,GAC5B,MAAM,uBAAuB,CAAC;AAG/B,iEAAiE;AACjE,kBAAkB;AAClB,iEAAiE;AAEjE,MAAM,CAAC,MAAM,aAAa,GAAe;IACvC,EAAE,EAAE,eAAe;IACnB,IAAI,EAAE,eAAe;IACrB,WAAW,EAAE,4DAA4D;IACzE,QAAQ,EAAE,aAAa,CAAC,QAAQ;IAChC,UAAU,EAAE;QACV,WAAW,EAAE;YACX,kBAAkB,CAAC,sBAAsB;YACzC,kBAAkB,CAAC,iBAAiB;SACrC;QACD,UAAU,EAAE;YACV,iBAAiB,CAAC,yBAAyB;SAC5C;KACF;CACF,CAAC;AACF,yBAAyB,CAAC,aAAa,CAAC,aAAa,CAAC,CAAC;AAEvD,MAAM,CAAC,MAAM,mBAAmB,GAAe;IAC7C,EAAE,EAAE,iBAAiB;IACrB,IAAI,EAAE,iBAAiB;IACvB,WAAW,EAAE,uDAAuD;IACpE,QAAQ,EAAE,aAAa,CAAC,QAAQ;IAChC,OAAO,EAAE,eAAe;IACxB,UAAU,EAAE;QACV,WAAW,EAAE;YACX,kBAAkB,CAAC,aAAa;YAChC,kBAAkB,CAAC,kBAAkB;SACtC;QACD,WAAW,EAAE;YACX,MAAM,EAAE,mCAAmC,CAAC,IAAI;SACjD;KACF;IACD,MAAM,EAAE,mBAAmB,CAAC,aAAa;CAC1C,CAAC;AACF,yBAAyB,CAAC,aAAa,CAAC,mBAAmB,CAAC,CAAC;AAE7D,MAAM,CAAC,MAAM,mBAAmB,GAAe;IAC7C,EAAE,EAAE,gBAAgB;IACpB,IAAI,EAAE,gBAAgB;IACtB,WAAW,EAAE,0DAA0D;IACvE,QAAQ,EAAE,aAAa,CAAC,QAAQ;IAChC,UAAU,EAAE;QACV,WAAW,EAAE;YACX,kBAAkB,CAAC,aAAa;YAChC,kBAAkB,CAAC,kBAAkB;SACtC;QACD,YAAY,EAAE;YACZ,mBAAmB,CAAC,oBAAoB;SACzC;KACF;CACF,CAAC;AACF,yBAAyB,CAAC,aAAa,CAAC,mBAAmB,CAAC,CAAC;AAG7D,iEAAiE;AACjE,oBAAoB;AACpB,iEAAiE;AAEjE,MAAM,CAAC,MAAM,eAAe,GAAe;IACzC,EAAE,EAAE,aAAa;IACjB,IAAI,EAAE,aAAa;IACnB,WAAW,EAAE,mDAAmD;IAChE,QAAQ,EAAE,aAAa,CAAC,UAAU;IAClC,UAAU,EAAE;QACV,WAAW,EAAE;YACX,kBAAkB,CAAC,oBAAoB;SACxC;QACD,YAAY,EAAE;YACZ,mBAAmB,CAAC,sBAAsB;SAC3C;QACD,MAAM,EAAE;YACN,gBAAgB,EAAE,IAAI;YACtB,gBAAgB,EAAE,CAAC,eAAe,EAAE,WAAW,CAAC;SACjD;KACF;CACF,CAAC;AACF,yBAAyB,CAAC,aAAa,CAAC,eAAe,CAAC,CAAC;AAEzD,MAAM,CAAC,MAAM,qBAAqB,GAAe;IAC/C,EAAE,EAAE,mBAAmB;IACvB,IAAI,EAAE,mBAAmB;IACzB,WAAW,EAAE,6DAA6D;IAC1E,QAAQ,EAAE,aAAa,CAAC,UAAU;IAClC,UAAU,EAAE;QACV,WAAW,EAAE;YACX,kBAAkB,CAAC,0BAA0B;SAC9C;QACD,WAAW,EAAE;YACX,MAAM,EAAE,mCAAmC,CAAC,GAAG;SAChD;QACD,UAAU,EAAE;YACV,iBAAiB,CAAC,eAAe;SAClC;KACF;CACF,CAAC;AACF,yBAAyB,CAAC,aAAa,CAAC,qBAAqB,CAAC,CAAC;AAG/D,iEAAiE;AACjE,4BAA4B;AAC5B,iEAAiE;AAEjE,MAAM,CAAC,MAAM,kBAAkB,GAAe;IAC5C,EAAE,EAAE,gBAAgB;IACpB,IAAI,EAAE,gBAAgB;IACtB,WAAW,EAAE,qDAAqD;IAClE,QAAQ,EAAE,aAAa,CAAC,OAAO;IAC/B,UAAU,EAAE;QACV,WAAW,EAAE;YACX,MAAM,EAAE,mCAAmC,CAAC,YAAY;YACxD,mBAAmB,EAAE,GAAG;SACzB;QACD,KAAK,EAAE;YACL,YAAY,CAAC,0BAA0B;YACvC,YAAY,CAAC,qBAAqB;SACnC;KACF;IACD,MAAM,EAAE,mBAAmB,CAAC,aAAa;CAC1C,CAAC;AACF,yBAAyB,CAAC,aAAa,CAAC,kBAAkB,CAAC,CAAC;AAE5D,MAAM,CAAC,MAAM,iBAAiB,GAAe;IAC3C,EAAE,EAAE,cAAc;IAClB,IAAI,EAAE,uBAAuB;IAC7B,WAAW,EAAE,yDAAyD;IACtE,QAAQ,EAAE,aAAa,CAAC,QAAQ;IAChC,UAAU,EAAE;QACV,WAAW,EAAE;YACX,MAAM,EAAE,mCAAmC,CAAC,IAAI;SACjD;QACD,KAAK,EAAE;YACL,YAAY,CAAC,yBAAyB;YACtC,YAAY,CAAC,wBAAwB;YACrC,YAAY,CAAC,sBAAsB;SACpC;KACF;IACD,aAAa,EAAE,CAAC,YAAY,CAAC;CAC9B,CAAC;AACF,yBAAyB,CAAC,aAAa,CAAC,iBAAiB,CAAC,CAAC;AAE3D,MAAM,CAAC,MAAM,iBAAiB,GAAe;IAC3C,EAAE,EAAE,eAAe;IACnB,IAAI,EAAE,mBAAmB;IACzB,WAAW,EAAE,qDAAqD;IAClE,QAAQ,EAAE,aAAa,CAAC,QAAQ;IAChC,MAAM,EAAE,mBAAmB,CAAC,aAAa;IACzC,UAAU,EAAE;QACV,MAAM,EAAE;YACN,gBAAgB,EAAE,IAAI;SACvB;QACD,YAAY,EAAE;YACZ,mBAAmB,CAAC,cAAc;SACnC;QACD,KAAK,EAAE;YACL,SAAS,EAAE,2BAA2B,CAAC,IAAI;SAC5C;KACF;CACF,CAAC;AACF,yBAAyB,CAAC,aAAa,CAAC,iBAAiB,CAAC,CAAC;AAG3D,iEAAiE;AACjE,gBAAgB;AAChB,iEAAiE;AAEjE,MAAM,CAAC,MAAM,YAAY,GAAe;IACtC,EAAE,EAAE,SAAS;IAEb,IAAI,EAAE,iBAAiB;IACvB,WAAW,EAAE,4CAA4C;IACzD,QAAQ,EAAE,aAAa,CAAC,MAAM;IAC9B,UAAU,EAAE;QACV,KAAK,EAAE;YACL,SAAS,EAAE,2BAA2B,CAAC,IAAI;SAC5C;QACD,MAAM,EAAE;YACN,gBAAgB,EAAE,IAAI;SACvB;KACF;IACD,aAAa,EAAE,CAAC,UAAU,CAAC;CAC5B,CAAC;AACF,yBAAyB,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC;AAEtD,MAAM,CAAC,MAAM,aAAa,GAAe;IACvC,EAAE,EAAE,UAAU;IACd,IAAI,EAAE,iBAAiB;IACvB,WAAW,EAAE,oCAAoC;IACjD,QAAQ,EAAE,aAAa,CAAC,MAAM;IAC9B,UAAU,EAAE;QACV,KAAK,EAAE;YACL,SAAS,EAAE,2BAA2B,CAAC,GAAG;SAC3C;QACD,MAAM,EAAE;YACN,gBAAgB,EAAE,KAAK;SACxB;QACD,KAAK,EAAE;YACL,YAAY,CAAC,SAAS;SACvB;KACF;IACD,aAAa,EAAE,CAAC,SAAS,CAAC;CAC3B,CAAC;AACF,yBAAyB,CAAC,aAAa,CAAC,aAAa,CAAC,CAAC;AAGvD,iEAAiE;AACjE,0BAA0B;AAC1B,iEAAiE;AAEjE,MAAM,CAAC,MAAM,qBAAqB,GAAe;IAC/C,EAAE,EAAE,mBAAmB;IACvB,IAAI,EAAE,mBAAmB;IACzB,WAAW,EAAE,6CAA6C;IAC1D,QAAQ,EAAE,aAAa,CAAC,MAAM;IAC9B,UAAU,EAAE;QACV,WAAW,EAAE;YACX,kBAAkB,CAAC,aAAa;SACjC;QACD,YAAY,EAAE;YACZ,mBAAmB,CAAC,kBAAkB;YACtC,mBAAmB,CAAC,aAAa;YACjC,mBAAmB,CAAC,mBAAmB;SACxC;QACD,UAAU,EAAE;YACV,iBAAiB,CAAC,eAAe;YACjC,iBAAiB,CAAC,eAAe;SAClC;KACF;IACD,YAAY,EAAE;QACZ,KAAK,EAAE,kBAAkB,CAAC,iBAAiB;KAC5C;CACF,CAAC;AACF,yBAAyB,CAAC,aAAa,CAAC,qBAAqB,CAAC,CAAC;AAE/D,MAAM,CAAC,MAAM,qBAAqB,GAAe;IAC/C,EAAE,EAAE,oBAAoB;IACxB,IAAI,EAAE,oBAAoB;IAC1B,WAAW,EAAE,2CAA2C;IACxD,QAAQ,EAAE,aAAa,CAAC,OAAO;IAC/B,YAAY,EAAE;QACZ,KAAK,EAAE,iBAAiB,CAAC,cAAc;KACxC;IACD,MAAM,EAAE,mBAAmB,CAAC,eAAe;CAC5C,CAAC;AACF,yBAAyB,CAAC,aAAa,CAAC,qBAAqB,CAAC,CAAC;AAE/D,MAAM,CAAC,MAAM,iBAAiB,GAAe;IAC3C,EAAE,EAAE,eAAe;IACnB,IAAI,EAAE,eAAe;IACrB,WAAW,EAAE,wCAAwC;IACrD,QAAQ,EAAE,aAAa,CAAC,MAAM;IAC9B,UAAU,EAAE;QACV,YAAY,EAAE;YACZ,mBAAmB,CAAC,iBAAiB;YACrC,mBAAmB,CAAC,sBAAsB;YAC1C,mBAAmB,CAAC,eAAe;SACpC;KACF;IACD,YAAY,EAAE;QACZ,KAAK,EAAE,kBAAkB,CAAC,aAAa;KACxC;CACF,CAAC;AACF,yBAAyB,CAAC,aAAa,CAAC,iBAAiB,CAAC,CAAC;AAG3D,iEAAiE;AACjE,gDAAgD;AAChD,iEAAiE;AAEjE;;;GAGG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAiB;IACnD,aAAa;IACb,eAAe;IACf,qBAAqB;IACrB,kBAAkB;CACnB,CAAC;AAEF;;;GAGG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAiB;IAClD,mBAAmB;IACnB,qBAAqB;IACrB,eAAe;IACf,YAAY;CACb,CAAC;AAEF;;;GAGG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAiB;IAC/C,qBAAqB;IACrB,iBAAiB;IACjB,kBAAkB;CACnB,CAAC;AAEF;;;GAGG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAiB;IAC7C,mBAAmB;IACnB,iBAAiB;IACjB,kBAAkB;CACnB,CAAC","sourcesContent":["/**\n * Core Facets - Pre-built facets for common agent patterns\n * \n * Categories:\n * - Security: SecurityFacet, StrictSecurityFacet, PII_ProtectionFacet\n * - Compliance: AuditTrailFacet, ConfirmationGateFacet\n * - Quality/Behavior: HighPrecisionFacet, ConservativeFacet, ThinkingModeFacet\n * - Output: VerboseFacet, SuccinctFacet\n * - Domain/Tooling: SecurityAnalysisFacet, MCPCodeAssistantFacet\n * \n * Presets (named facet arrays):\n * - CriticalOperationPreset\n * - SecurityReviewerPreset\n * - CodeAssistantPreset\n * \n * @see AGENT_FACETS_AND_CATALOGS.md for design documentation\n */\n\nimport { AgentFacet, FacetCategory } from './agent-facets.backend.definitions';\nimport { AgentFacetsBackendService } from '~wildo-backend-lib/flows-actors/services/agent-facets.backend.service';\nimport { \n  ConstraintsCatalog, \n  InstructionsCatalog, \n  HintsCatalog,\n  OutOfScopeCatalog,\n  ModelPresetsCatalog,\n  ToolBundlesCatalog,\n  MCPBundlesCatalog,\n} from './agent-catalogs.backend.definitions';\nimport { \n  FlowsActors_Agent_UncertaintyPolicy,\n  FlowsActors_Agent_Verbosity,\n} from '@wildo-ai/saas-models';\n\n\n//===============================================================\n// SECURITY FACETS\n//===============================================================\n\nexport const SecurityFacet: AgentFacet = {\n  id: \"security-core\",\n  name: \"Security Core\",\n  description: \"Baseline security constraints for all sensitive operations\",\n  category: FacetCategory.SECURITY,\n  promptSpec: {\n    constraints: [\n      ConstraintsCatalog.NO_CREDENTIAL_EXPOSURE,\n      ConstraintsCatalog.NO_SECRET_LOGGING,\n    ],\n    outOfScope: [\n      OutOfScopeCatalog.NO_SECURITY_BYPASS_ADVICE,\n    ],\n  },\n};\nAgentFacetsBackendService.registerFacet(SecurityFacet);\n\nexport const StrictSecurityFacet: AgentFacet = {\n  id: \"strict-security\",\n  name: \"Strict Security\",\n  description: \"Extended security with zero-tolerance for uncertainty\",\n  category: FacetCategory.SECURITY,\n  extends: \"security-core\",\n  promptSpec: {\n    constraints: [\n      ConstraintsCatalog.ANALYSIS_ONLY,\n      ConstraintsCatalog.NO_BYPASS_SECURITY,\n    ],\n    uncertainty: {\n      policy: FlowsActors_Agent_UncertaintyPolicy.FAIL,\n    },\n  },\n  config: ModelPresetsCatalog.DETERMINISTIC,\n};\nAgentFacetsBackendService.registerFacet(StrictSecurityFacet);\n\nexport const PII_ProtectionFacet: AgentFacet = {\n  id: \"pii-protection\",\n  name: \"PII Protection\",\n  description: \"Prevents exposure of personally identifiable information\",\n  category: FacetCategory.SECURITY,\n  promptSpec: {\n    constraints: [\n      ConstraintsCatalog.NO_PII_OUTPUT,\n      ConstraintsCatalog.ANONYMIZE_EXAMPLES,\n    ],\n    instructions: [\n      InstructionsCatalog.REDACT_PII_IN_OUTPUT,\n    ],\n  },\n};\nAgentFacetsBackendService.registerFacet(PII_ProtectionFacet);\n\n\n//===============================================================\n// COMPLIANCE FACETS\n//===============================================================\n\nexport const AuditTrailFacet: AgentFacet = {\n  id: \"audit-trail\",\n  name: \"Audit Trail\",\n  description: \"Ensures all actions are documented for compliance\",\n  category: FacetCategory.COMPLIANCE,\n  promptSpec: {\n    constraints: [\n      ConstraintsCatalog.DOCUMENT_ALL_ACTIONS,\n    ],\n    instructions: [\n      InstructionsCatalog.LOG_DECISION_RATIONALE,\n    ],\n    output: {\n      includeReasoning: true,\n      requiredSections: [\"actions_taken\", \"rationale\"],\n    },\n  },\n};\nAgentFacetsBackendService.registerFacet(AuditTrailFacet);\n\nexport const ConfirmationGateFacet: AgentFacet = {\n  id: \"confirmation-gate\",\n  name: \"Confirmation Gate\",\n  description: \"Requires explicit user confirmation for destructive actions\",\n  category: FacetCategory.COMPLIANCE,\n  promptSpec: {\n    constraints: [\n      ConstraintsCatalog.CONFIRM_BEFORE_DESTRUCTIVE,\n    ],\n    uncertainty: {\n      policy: FlowsActors_Agent_UncertaintyPolicy.ASK,\n    },\n    outOfScope: [\n      OutOfScopeCatalog.NO_AUTO_EXECUTE,\n    ],\n  },\n};\nAgentFacetsBackendService.registerFacet(ConfirmationGateFacet);\n\n\n//===============================================================\n// QUALITY / BEHAVIOR FACETS\n//===============================================================\n\nexport const HighPrecisionFacet: AgentFacet = {\n  id: \"high-precision\",\n  name: \"High Precision\",\n  description: \"Deterministic, accurate outputs with low creativity\",\n  category: FacetCategory.QUALITY,\n  promptSpec: {\n    uncertainty: {\n      policy: FlowsActors_Agent_UncertaintyPolicy.CONSERVATIVE,\n      confidenceThreshold: 0.9,\n    },\n    hints: [\n      HintsCatalog.PREFER_ACCURACY_OVER_SPEED,\n      HintsCatalog.DOUBLE_CHECK_CRITICAL,\n    ],\n  },\n  config: ModelPresetsCatalog.DETERMINISTIC,\n};\nAgentFacetsBackendService.registerFacet(HighPrecisionFacet);\n\nexport const ConservativeFacet: AgentFacet = {\n  id: \"conservative\",\n  name: \"Conservative Behavior\",\n  description: \"Fails safely when uncertain, prefers reversible actions\",\n  category: FacetCategory.BEHAVIOR,\n  promptSpec: {\n    uncertainty: {\n      policy: FlowsActors_Agent_UncertaintyPolicy.FAIL,\n    },\n    hints: [\n      HintsCatalog.PREFER_REVERSIBLE_ACTIONS,\n      HintsCatalog.FAIL_SAFE_ON_UNCERTAINTY,\n      HintsCatalog.ASK_RATHER_THAN_ASSUME,\n    ],\n  },\n  conflictsWith: [\"aggressive\"],\n};\nAgentFacetsBackendService.registerFacet(ConservativeFacet);\n\nexport const ThinkingModeFacet: AgentFacet = {\n  id: \"thinking-mode\",\n  name: \"Extended Thinking\",\n  description: \"Enable deep reasoning with visible chain-of-thought\",\n  category: FacetCategory.BEHAVIOR,\n  config: ModelPresetsCatalog.THINKING_MODE,\n  promptSpec: {\n    output: {\n      includeReasoning: true,\n    },\n    instructions: [\n      InstructionsCatalog.SHOW_REASONING,\n    ],\n    style: {\n      verbosity: FlowsActors_Agent_Verbosity.HIGH,\n    },\n  },\n};\nAgentFacetsBackendService.registerFacet(ThinkingModeFacet);\n\n\n//===============================================================\n// OUTPUT FACETS\n//===============================================================\n\nexport const VerboseFacet: AgentFacet = {\n  id: \"verbose\",\n\n  name: \"Verbose Outputs\",\n  description: \"Produces detailed, comprehensive responses\",\n  category: FacetCategory.OUTPUT,\n  promptSpec: {\n    style: {\n      verbosity: FlowsActors_Agent_Verbosity.HIGH,\n    },\n    output: {\n      includeReasoning: true,\n    },\n  },\n  conflictsWith: [\"succinct\"],\n};\nAgentFacetsBackendService.registerFacet(VerboseFacet);\n\nexport const SuccinctFacet: AgentFacet = {\n  id: \"succinct\",\n  name: \"Succinct Output\",\n  description: \"Produces minimal, direct responses\",\n  category: FacetCategory.OUTPUT,\n  promptSpec: {\n    style: {\n      verbosity: FlowsActors_Agent_Verbosity.LOW,\n    },\n    output: {\n      includeReasoning: false,\n    },\n    hints: [\n      HintsCatalog.BE_DIRECT,\n    ],\n  },\n  conflictsWith: [\"verbose\"],\n};\nAgentFacetsBackendService.registerFacet(SuccinctFacet);\n\n\n//===============================================================\n// DOMAIN / TOOLING FACETS\n//===============================================================\n\nexport const SecurityAnalysisFacet: AgentFacet = {\n  id: \"security-analysis\",\n  name: \"Security Analysis\",\n  description: \"Security code review with specialized tools\",\n  category: FacetCategory.DOMAIN,\n  promptSpec: {\n    constraints: [\n      ConstraintsCatalog.ANALYSIS_ONLY,\n    ],\n    instructions: [\n      InstructionsCatalog.FOCUS_OWASP_TOP_10,\n      InstructionsCatalog.RATE_SEVERITY,\n      InstructionsCatalog.PROVIDE_REMEDIATION,\n    ],\n    outOfScope: [\n      OutOfScopeCatalog.NO_EXPLOIT_CODE,\n      OutOfScopeCatalog.NO_EXECUTE_CODE,\n    ],\n  },\n  capabilities: {\n    tools: ToolBundlesCatalog.SECURITY_ANALYSIS,\n  },\n};\nAgentFacetsBackendService.registerFacet(SecurityAnalysisFacet);\n\nexport const MCPCodeAssistantFacet: AgentFacet = {\n  id: \"mcp-code-assistant\",\n  name: \"MCP Code Assistant\",\n  description: \"Code editing and filesystem tools via MCP\",\n  category: FacetCategory.TOOLING,\n  capabilities: {\n    tools: MCPBundlesCatalog.CODE_ASSISTANT,\n  },\n  config: ModelPresetsCatalog.TOOLING_ENABLED,\n};\nAgentFacetsBackendService.registerFacet(MCPCodeAssistantFacet);\n\nexport const DataAnalysisFacet: AgentFacet = {\n  id: \"data-analysis\",\n  name: \"Data Analysis\",\n  description: \"Data analysis with visualization tools\",\n  category: FacetCategory.DOMAIN,\n  promptSpec: {\n    instructions: [\n      InstructionsCatalog.IDENTIFY_PATTERNS,\n      InstructionsCatalog.QUANTIFY_WHEN_POSSIBLE,\n      InstructionsCatalog.SUMMARIZE_FIRST,\n    ],\n  },\n  capabilities: {\n    tools: ToolBundlesCatalog.DATA_ANALYSIS,\n  },\n};\nAgentFacetsBackendService.registerFacet(DataAnalysisFacet);\n\n\n//===============================================================\n// PRESETS (Named Facet Arrays - NOT a new type)\n//===============================================================\n\n/**\n * Critical Operation Preset\n * Use for: Production deployments, security reviews, financial decisions\n */\nexport const CriticalOperationPreset: AgentFacet[] = [\n  SecurityFacet,\n  AuditTrailFacet,\n  ConfirmationGateFacet,\n  HighPrecisionFacet,\n];\n\n/**\n * Security Reviewer Preset\n * Use for: Code security analysis, vulnerability assessment\n */\nexport const SecurityReviewerPreset: AgentFacet[] = [\n  StrictSecurityFacet,\n  SecurityAnalysisFacet,\n  AuditTrailFacet,\n  VerboseFacet,\n];\n\n/**\n * Code Assistant Preset\n * Use for: Development assistance with MCP tools\n */\nexport const CodeAssistantPreset: AgentFacet[] = [\n  MCPCodeAssistantFacet,\n  ThinkingModeFacet,\n  HighPrecisionFacet,\n];\n\n/**\n * Data Analyst Preset\n * Use for: Business intelligence, data exploration\n */\nexport const DataAnalystPreset: AgentFacet[] = [\n  PII_ProtectionFacet,\n  DataAnalysisFacet,\n  HighPrecisionFacet,\n];\n"]}
+{"version":3,"file":"core-facets.backend.definitions.js","sourceRoot":"","sources":["../../../../src/flows-actors/models/core-facets.backend.definitions.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAc,aAAa,EAAE,MAAM,oCAAoC,CAAC;AAC/E,OAAO,EAAE,yBAAyB,EAAE,MAAM,uEAAuE,CAAC;AAClH,OAAO,EACL,kBAAkB,EAClB,mBAAmB,EACnB,YAAY,EACZ,iBAAiB,EACjB,mBAAmB,EACnB,kBAAkB,GACnB,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EACL,mCAAmC,EACnC,2BAA2B,GAC5B,MAAM,uBAAuB,CAAC;AAG/B,iEAAiE;AACjE,kBAAkB;AAClB,iEAAiE;AAEjE,MAAM,CAAC,MAAM,aAAa,GAAe;IACvC,EAAE,EAAE,eAAe;IACnB,IAAI,EAAE,eAAe;IACrB,WAAW,EAAE,4DAA4D;IACzE,QAAQ,EAAE,aAAa,CAAC,QAAQ;IAChC,UAAU,EAAE;QACV,WAAW,EAAE;YACX,kBAAkB,CAAC,sBAAsB;YACzC,kBAAkB,CAAC,iBAAiB;SACrC;QACD,UAAU,EAAE;YACV,iBAAiB,CAAC,yBAAyB;SAC5C;KACF;CACF,CAAC;AACF,yBAAyB,CAAC,aAAa,CAAC,aAAa,CAAC,CAAC;AAEvD,MAAM,CAAC,MAAM,mBAAmB,GAAe;IAC7C,EAAE,EAAE,iBAAiB;IACrB,IAAI,EAAE,iBAAiB;IACvB,WAAW,EAAE,uDAAuD;IACpE,QAAQ,EAAE,aAAa,CAAC,QAAQ;IAChC,OAAO,EAAE,eAAe;IACxB,UAAU,EAAE;QACV,WAAW,EAAE;YACX,kBAAkB,CAAC,aAAa;YAChC,kBAAkB,CAAC,kBAAkB;SACtC;QACD,WAAW,EAAE;YACX,MAAM,EAAE,mCAAmC,CAAC,IAAI;SACjD;KACF;IACD,MAAM,EAAE,mBAAmB,CAAC,aAAa;CAC1C,CAAC;AACF,yBAAyB,CAAC,aAAa,CAAC,mBAAmB,CAAC,CAAC;AAE7D,MAAM,CAAC,MAAM,mBAAmB,GAAe;IAC7C,EAAE,EAAE,gBAAgB;IACpB,IAAI,EAAE,gBAAgB;IACtB,WAAW,EAAE,0DAA0D;IACvE,QAAQ,EAAE,aAAa,CAAC,QAAQ;IAChC,UAAU,EAAE;QACV,WAAW,EAAE;YACX,kBAAkB,CAAC,aAAa;YAChC,kBAAkB,CAAC,kBAAkB;SACtC;QACD,YAAY,EAAE;YACZ,mBAAmB,CAAC,oBAAoB;SACzC;KACF;CACF,CAAC;AACF,yBAAyB,CAAC,aAAa,CAAC,mBAAmB,CAAC,CAAC;AAG7D,iEAAiE;AACjE,oBAAoB;AACpB,iEAAiE;AAEjE,MAAM,CAAC,MAAM,eAAe,GAAe;IACzC,EAAE,EAAE,aAAa;IACjB,IAAI,EAAE,aAAa;IACnB,WAAW,EAAE,mDAAmD;IAChE,QAAQ,EAAE,aAAa,CAAC,UAAU;IAClC,UAAU,EAAE;QACV,WAAW,EAAE;YACX,kBAAkB,CAAC,oBAAoB;SACxC;QACD,YAAY,EAAE;YACZ,mBAAmB,CAAC,sBAAsB;SAC3C;QACD,MAAM,EAAE;YACN,gBAAgB,EAAE,IAAI;YACtB,gBAAgB,EAAE,CAAC,eAAe,EAAE,WAAW,CAAC;SACjD;KACF;CACF,CAAC;AACF,yBAAyB,CAAC,aAAa,CAAC,eAAe,CAAC,CAAC;AAEzD,MAAM,CAAC,MAAM,qBAAqB,GAAe;IAC/C,EAAE,EAAE,mBAAmB;IACvB,IAAI,EAAE,mBAAmB;IACzB,WAAW,EAAE,6DAA6D;IAC1E,QAAQ,EAAE,aAAa,CAAC,UAAU;IAClC,UAAU,EAAE;QACV,WAAW,EAAE;YACX,kBAAkB,CAAC,0BAA0B;SAC9C;QACD,WAAW,EAAE;YACX,MAAM,EAAE,mCAAmC,CAAC,GAAG;SAChD;QACD,UAAU,EAAE;YACV,iBAAiB,CAAC,eAAe;SAClC;KACF;CACF,CAAC;AACF,yBAAyB,CAAC,aAAa,CAAC,qBAAqB,CAAC,CAAC;AAG/D,iEAAiE;AACjE,4BAA4B;AAC5B,iEAAiE;AAEjE,MAAM,CAAC,MAAM,kBAAkB,GAAe;IAC5C,EAAE,EAAE,gBAAgB;IACpB,IAAI,EAAE,gBAAgB;IACtB,WAAW,EAAE,qDAAqD;IAClE,QAAQ,EAAE,aAAa,CAAC,OAAO;IAC/B,UAAU,EAAE;QACV,WAAW,EAAE;YACX,MAAM,EAAE,mCAAmC,CAAC,YAAY;YACxD,mBAAmB,EAAE,GAAG;SACzB;QACD,KAAK,EAAE;YACL,YAAY,CAAC,0BAA0B;YACvC,YAAY,CAAC,qBAAqB;SACnC;KACF;IACD,MAAM,EAAE,mBAAmB,CAAC,aAAa;CAC1C,CAAC;AACF,yBAAyB,CAAC,aAAa,CAAC,kBAAkB,CAAC,CAAC;AAE5D,MAAM,CAAC,MAAM,iBAAiB,GAAe;IAC3C,EAAE,EAAE,cAAc;IAClB,IAAI,EAAE,uBAAuB;IAC7B,WAAW,EAAE,yDAAyD;IACtE,QAAQ,EAAE,aAAa,CAAC,QAAQ;IAChC,UAAU,EAAE;QACV,WAAW,EAAE;YACX,MAAM,EAAE,mCAAmC,CAAC,IAAI;SACjD;QACD,KAAK,EAAE;YACL,YAAY,CAAC,yBAAyB;YACtC,YAAY,CAAC,wBAAwB;YACrC,YAAY,CAAC,sBAAsB;SACpC;KACF;IACD,aAAa,EAAE,CAAC,YAAY,CAAC;CAC9B,CAAC;AACF,yBAAyB,CAAC,aAAa,CAAC,iBAAiB,CAAC,CAAC;AAE3D,MAAM,CAAC,MAAM,iBAAiB,GAAe;IAC3C,EAAE,EAAE,eAAe;IACnB,IAAI,EAAE,mBAAmB;IACzB,WAAW,EAAE,qDAAqD;IAClE,QAAQ,EAAE,aAAa,CAAC,QAAQ;IAChC,MAAM,EAAE,mBAAmB,CAAC,aAAa;IACzC,UAAU,EAAE;QACV,MAAM,EAAE;YACN,gBAAgB,EAAE,IAAI;SACvB;QACD,YAAY,EAAE;YACZ,mBAAmB,CAAC,cAAc;SACnC;QACD,KAAK,EAAE;YACL,SAAS,EAAE,2BAA2B,CAAC,IAAI;SAC5C;KACF;CACF,CAAC;AACF,yBAAyB,CAAC,aAAa,CAAC,iBAAiB,CAAC,CAAC;AAG3D,iEAAiE;AACjE,gBAAgB;AAChB,iEAAiE;AAEjE,MAAM,CAAC,MAAM,YAAY,GAAe;IACtC,EAAE,EAAE,SAAS;IAEb,IAAI,EAAE,iBAAiB;IACvB,WAAW,EAAE,4CAA4C;IACzD,QAAQ,EAAE,aAAa,CAAC,MAAM;IAC9B,UAAU,EAAE;QACV,KAAK,EAAE;YACL,SAAS,EAAE,2BAA2B,CAAC,IAAI;SAC5C;QACD,MAAM,EAAE;YACN,gBAAgB,EAAE,IAAI;SACvB;KACF;IACD,aAAa,EAAE,CAAC,UAAU,CAAC;CAC5B,CAAC;AACF,yBAAyB,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC;AAEtD,MAAM,CAAC,MAAM,aAAa,GAAe;IACvC,EAAE,EAAE,UAAU;IACd,IAAI,EAAE,iBAAiB;IACvB,WAAW,EAAE,oCAAoC;IACjD,QAAQ,EAAE,aAAa,CAAC,MAAM;IAC9B,UAAU,EAAE;QACV,KAAK,EAAE;YACL,SAAS,EAAE,2BAA2B,CAAC,GAAG;SAC3C;QACD,MAAM,EAAE;YACN,gBAAgB,EAAE,KAAK;SACxB;QACD,KAAK,EAAE;YACL,YAAY,CAAC,SAAS;SACvB;KACF;IACD,aAAa,EAAE,CAAC,SAAS,CAAC;CAC3B,CAAC;AACF,yBAAyB,CAAC,aAAa,CAAC,aAAa,CAAC,CAAC;AAGvD,iEAAiE;AACjE,0BAA0B;AAC1B,iEAAiE;AAEjE,MAAM,CAAC,MAAM,qBAAqB,GAAe;IAC/C,EAAE,EAAE,mBAAmB;IACvB,IAAI,EAAE,mBAAmB;IACzB,WAAW,EAAE,6CAA6C;IAC1D,QAAQ,EAAE,aAAa,CAAC,MAAM;IAC9B,UAAU,EAAE;QACV,WAAW,EAAE;YACX,kBAAkB,CAAC,aAAa;SACjC;QACD,YAAY,EAAE;YACZ,mBAAmB,CAAC,kBAAkB;YACtC,mBAAmB,CAAC,aAAa;YACjC,mBAAmB,CAAC,mBAAmB;SACxC;QACD,UAAU,EAAE;YACV,iBAAiB,CAAC,eAAe;YACjC,iBAAiB,CAAC,eAAe;SAClC;KACF;IACD,YAAY,EAAE;QACZ,KAAK,EAAE,kBAAkB,CAAC,iBAAiB;KAC5C;CACF,CAAC;AACF,yBAAyB,CAAC,aAAa,CAAC,qBAAqB,CAAC,CAAC;AAE/D;;;;;;;;;;;;;;;GAeG;AAEH,MAAM,CAAC,MAAM,iBAAiB,GAAe;IAC3C,EAAE,EAAE,eAAe;IACnB,IAAI,EAAE,eAAe;IACrB,WAAW,EAAE,wCAAwC;IACrD,QAAQ,EAAE,aAAa,CAAC,MAAM;IAC9B,UAAU,EAAE;QACV,YAAY,EAAE;YACZ,mBAAmB,CAAC,iBAAiB;YACrC,mBAAmB,CAAC,sBAAsB;YAC1C,mBAAmB,CAAC,eAAe;SACpC;KACF;IACD,YAAY,EAAE;QACZ,KAAK,EAAE,kBAAkB,CAAC,aAAa;KACxC;CACF,CAAC;AACF,yBAAyB,CAAC,aAAa,CAAC,iBAAiB,CAAC,CAAC;AAG3D,iEAAiE;AACjE,gDAAgD;AAChD,iEAAiE;AAEjE;;;GAGG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAiB;IACnD,aAAa;IACb,eAAe;IACf,qBAAqB;IACrB,kBAAkB;CACnB,CAAC;AAEF;;;GAGG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAiB;IAClD,mBAAmB;IACnB,qBAAqB;IACrB,eAAe;IACf,YAAY;CACb,CAAC;AAEF;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAiB;IAC/C,iBAAiB;IACjB,kBAAkB;CACnB,CAAC;AAEF;;;GAGG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAiB;IAC7C,mBAAmB;IACnB,iBAAiB;IACjB,kBAAkB;CACnB,CAAC","sourcesContent":["/**\n * Core Facets - Pre-built facets for common agent patterns\n * \n * Categories:\n * - Security: SecurityFacet, StrictSecurityFacet, PII_ProtectionFacet\n * - Compliance: AuditTrailFacet, ConfirmationGateFacet\n * - Quality/Behavior: HighPrecisionFacet, ConservativeFacet, ThinkingModeFacet\n * - Output: VerboseFacet, SuccinctFacet\n * - Domain/Tooling: SecurityAnalysisFacet\n * \n * Presets (named facet arrays):\n * - CriticalOperationPreset\n * - SecurityReviewerPreset\n * - CodeAssistantPreset\n * \n * @see AGENT_FACETS_AND_CATALOGS.md for design documentation\n */\n\nimport { AgentFacet, FacetCategory } from './agent-facets.backend.definitions';\nimport { AgentFacetsBackendService } from '~wildo-backend-lib/flows-actors/services/agent-facets.backend.service';\nimport { \n  ConstraintsCatalog, \n  InstructionsCatalog, \n  HintsCatalog,\n  OutOfScopeCatalog,\n  ModelPresetsCatalog,\n  ToolBundlesCatalog,\n} from './agent-catalogs.backend.definitions';\nimport { \n  FlowsActors_Agent_UncertaintyPolicy,\n  FlowsActors_Agent_Verbosity,\n} from '@wildo-ai/saas-models';\n\n\n//===============================================================\n// SECURITY FACETS\n//===============================================================\n\nexport const SecurityFacet: AgentFacet = {\n  id: \"security-core\",\n  name: \"Security Core\",\n  description: \"Baseline security constraints for all sensitive operations\",\n  category: FacetCategory.SECURITY,\n  promptSpec: {\n    constraints: [\n      ConstraintsCatalog.NO_CREDENTIAL_EXPOSURE,\n      ConstraintsCatalog.NO_SECRET_LOGGING,\n    ],\n    outOfScope: [\n      OutOfScopeCatalog.NO_SECURITY_BYPASS_ADVICE,\n    ],\n  },\n};\nAgentFacetsBackendService.registerFacet(SecurityFacet);\n\nexport const StrictSecurityFacet: AgentFacet = {\n  id: \"strict-security\",\n  name: \"Strict Security\",\n  description: \"Extended security with zero-tolerance for uncertainty\",\n  category: FacetCategory.SECURITY,\n  extends: \"security-core\",\n  promptSpec: {\n    constraints: [\n      ConstraintsCatalog.ANALYSIS_ONLY,\n      ConstraintsCatalog.NO_BYPASS_SECURITY,\n    ],\n    uncertainty: {\n      policy: FlowsActors_Agent_UncertaintyPolicy.FAIL,\n    },\n  },\n  config: ModelPresetsCatalog.DETERMINISTIC,\n};\nAgentFacetsBackendService.registerFacet(StrictSecurityFacet);\n\nexport const PII_ProtectionFacet: AgentFacet = {\n  id: \"pii-protection\",\n  name: \"PII Protection\",\n  description: \"Prevents exposure of personally identifiable information\",\n  category: FacetCategory.SECURITY,\n  promptSpec: {\n    constraints: [\n      ConstraintsCatalog.NO_PII_OUTPUT,\n      ConstraintsCatalog.ANONYMIZE_EXAMPLES,\n    ],\n    instructions: [\n      InstructionsCatalog.REDACT_PII_IN_OUTPUT,\n    ],\n  },\n};\nAgentFacetsBackendService.registerFacet(PII_ProtectionFacet);\n\n\n//===============================================================\n// COMPLIANCE FACETS\n//===============================================================\n\nexport const AuditTrailFacet: AgentFacet = {\n  id: \"audit-trail\",\n  name: \"Audit Trail\",\n  description: \"Ensures all actions are documented for compliance\",\n  category: FacetCategory.COMPLIANCE,\n  promptSpec: {\n    constraints: [\n      ConstraintsCatalog.DOCUMENT_ALL_ACTIONS,\n    ],\n    instructions: [\n      InstructionsCatalog.LOG_DECISION_RATIONALE,\n    ],\n    output: {\n      includeReasoning: true,\n      requiredSections: [\"actions_taken\", \"rationale\"],\n    },\n  },\n};\nAgentFacetsBackendService.registerFacet(AuditTrailFacet);\n\nexport const ConfirmationGateFacet: AgentFacet = {\n  id: \"confirmation-gate\",\n  name: \"Confirmation Gate\",\n  description: \"Requires explicit user confirmation for destructive actions\",\n  category: FacetCategory.COMPLIANCE,\n  promptSpec: {\n    constraints: [\n      ConstraintsCatalog.CONFIRM_BEFORE_DESTRUCTIVE,\n    ],\n    uncertainty: {\n      policy: FlowsActors_Agent_UncertaintyPolicy.ASK,\n    },\n    outOfScope: [\n      OutOfScopeCatalog.NO_AUTO_EXECUTE,\n    ],\n  },\n};\nAgentFacetsBackendService.registerFacet(ConfirmationGateFacet);\n\n\n//===============================================================\n// QUALITY / BEHAVIOR FACETS\n//===============================================================\n\nexport const HighPrecisionFacet: AgentFacet = {\n  id: \"high-precision\",\n  name: \"High Precision\",\n  description: \"Deterministic, accurate outputs with low creativity\",\n  category: FacetCategory.QUALITY,\n  promptSpec: {\n    uncertainty: {\n      policy: FlowsActors_Agent_UncertaintyPolicy.CONSERVATIVE,\n      confidenceThreshold: 0.9,\n    },\n    hints: [\n      HintsCatalog.PREFER_ACCURACY_OVER_SPEED,\n      HintsCatalog.DOUBLE_CHECK_CRITICAL,\n    ],\n  },\n  config: ModelPresetsCatalog.DETERMINISTIC,\n};\nAgentFacetsBackendService.registerFacet(HighPrecisionFacet);\n\nexport const ConservativeFacet: AgentFacet = {\n  id: \"conservative\",\n  name: \"Conservative Behavior\",\n  description: \"Fails safely when uncertain, prefers reversible actions\",\n  category: FacetCategory.BEHAVIOR,\n  promptSpec: {\n    uncertainty: {\n      policy: FlowsActors_Agent_UncertaintyPolicy.FAIL,\n    },\n    hints: [\n      HintsCatalog.PREFER_REVERSIBLE_ACTIONS,\n      HintsCatalog.FAIL_SAFE_ON_UNCERTAINTY,\n      HintsCatalog.ASK_RATHER_THAN_ASSUME,\n    ],\n  },\n  conflictsWith: [\"aggressive\"],\n};\nAgentFacetsBackendService.registerFacet(ConservativeFacet);\n\nexport const ThinkingModeFacet: AgentFacet = {\n  id: \"thinking-mode\",\n  name: \"Extended Thinking\",\n  description: \"Enable deep reasoning with visible chain-of-thought\",\n  category: FacetCategory.BEHAVIOR,\n  config: ModelPresetsCatalog.THINKING_MODE,\n  promptSpec: {\n    output: {\n      includeReasoning: true,\n    },\n    instructions: [\n      InstructionsCatalog.SHOW_REASONING,\n    ],\n    style: {\n      verbosity: FlowsActors_Agent_Verbosity.HIGH,\n    },\n  },\n};\nAgentFacetsBackendService.registerFacet(ThinkingModeFacet);\n\n\n//===============================================================\n// OUTPUT FACETS\n//===============================================================\n\nexport const VerboseFacet: AgentFacet = {\n  id: \"verbose\",\n\n  name: \"Verbose Outputs\",\n  description: \"Produces detailed, comprehensive responses\",\n  category: FacetCategory.OUTPUT,\n  promptSpec: {\n    style: {\n      verbosity: FlowsActors_Agent_Verbosity.HIGH,\n    },\n    output: {\n      includeReasoning: true,\n    },\n  },\n  conflictsWith: [\"succinct\"],\n};\nAgentFacetsBackendService.registerFacet(VerboseFacet);\n\nexport const SuccinctFacet: AgentFacet = {\n  id: \"succinct\",\n  name: \"Succinct Output\",\n  description: \"Produces minimal, direct responses\",\n  category: FacetCategory.OUTPUT,\n  promptSpec: {\n    style: {\n      verbosity: FlowsActors_Agent_Verbosity.LOW,\n    },\n    output: {\n      includeReasoning: false,\n    },\n    hints: [\n      HintsCatalog.BE_DIRECT,\n    ],\n  },\n  conflictsWith: [\"verbose\"],\n};\nAgentFacetsBackendService.registerFacet(SuccinctFacet);\n\n\n//===============================================================\n// DOMAIN / TOOLING FACETS\n//===============================================================\n\nexport const SecurityAnalysisFacet: AgentFacet = {\n  id: \"security-analysis\",\n  name: \"Security Analysis\",\n  description: \"Security code review with specialized tools\",\n  category: FacetCategory.DOMAIN,\n  promptSpec: {\n    constraints: [\n      ConstraintsCatalog.ANALYSIS_ONLY,\n    ],\n    instructions: [\n      InstructionsCatalog.FOCUS_OWASP_TOP_10,\n      InstructionsCatalog.RATE_SEVERITY,\n      InstructionsCatalog.PROVIDE_REMEDIATION,\n    ],\n    outOfScope: [\n      OutOfScopeCatalog.NO_EXPLOIT_CODE,\n      OutOfScopeCatalog.NO_EXECUTE_CODE,\n    ],\n  },\n  capabilities: {\n    tools: ToolBundlesCatalog.SECURITY_ANALYSIS,\n  },\n};\nAgentFacetsBackendService.registerFacet(SecurityAnalysisFacet);\n\n/*\n * `MCPCodeAssistantFacet` was WITHDRAWN 2026-09-09 (#491), with `MCPBundlesCatalog` beside it.\n *\n * It composed `mcpRefs: [\"filesystem-mcp\", \"code-editor-mcp\", \"git-mcp\"]` — three strings that named\n * no server anywhere. Nothing resolved them, and the agent card rendered them, so any agent carrying\n * this facet advertised a reach it did not have. That is the whole of #491.\n *\n * It is not restored as an empty shell. An `mcpRef` now names a server the APPLICATION declared, so\n * a facet shipped by the engine cannot supply one: the engine does not know which third parties an\n * application permits its agents to reach, and that is the decision the declaration exists to hold.\n * A code-assistant facet becomes meaningful again when an application declares a code-assistant MCP\n * server and references it by ref — at which point it is that application's facet, not this file's.\n *\n * The names also described a CODING agent's reach — a filesystem, a git checkout — which is the ACP\n * coding-agent lane rather than anything a generated business application's agent calls.\n */\n\nexport const DataAnalysisFacet: AgentFacet = {\n  id: \"data-analysis\",\n  name: \"Data Analysis\",\n  description: \"Data analysis with visualization tools\",\n  category: FacetCategory.DOMAIN,\n  promptSpec: {\n    instructions: [\n      InstructionsCatalog.IDENTIFY_PATTERNS,\n      InstructionsCatalog.QUANTIFY_WHEN_POSSIBLE,\n      InstructionsCatalog.SUMMARIZE_FIRST,\n    ],\n  },\n  capabilities: {\n    tools: ToolBundlesCatalog.DATA_ANALYSIS,\n  },\n};\nAgentFacetsBackendService.registerFacet(DataAnalysisFacet);\n\n\n//===============================================================\n// PRESETS (Named Facet Arrays - NOT a new type)\n//===============================================================\n\n/**\n * Critical Operation Preset\n * Use for: Production deployments, security reviews, financial decisions\n */\nexport const CriticalOperationPreset: AgentFacet[] = [\n  SecurityFacet,\n  AuditTrailFacet,\n  ConfirmationGateFacet,\n  HighPrecisionFacet,\n];\n\n/**\n * Security Reviewer Preset\n * Use for: Code security analysis, vulnerability assessment\n */\nexport const SecurityReviewerPreset: AgentFacet[] = [\n  StrictSecurityFacet,\n  SecurityAnalysisFacet,\n  AuditTrailFacet,\n  VerboseFacet,\n];\n\n/**\n * Code Assistant Preset\n * Use for: careful, deliberate assistance on precise work.\n *\n * `MCPCodeAssistantFacet` was removed from this preset 2026-09-09 (#491) — see its withdrawal note\n * above. The preset is KEPT rather than deleted with it: what it composes now is a real posture\n * (deliberate reasoning at high precision) that an application can use today, whereas the removed\n * facet contributed only refs to servers that did not exist. Keeping the preset and dropping the\n * facet is the honest split — nothing here ever supplied the tools, so nothing is lost by saying so.\n */\nexport const CodeAssistantPreset: AgentFacet[] = [\n  ThinkingModeFacet,\n  HighPrecisionFacet,\n];\n\n/**\n * Data Analyst Preset\n * Use for: Business intelligence, data exploration\n */\nexport const DataAnalystPreset: AgentFacet[] = [\n  PII_ProtectionFacet,\n  DataAnalysisFacet,\n  HighPrecisionFacet,\n];\n"]}

package/dist/esm/flows-actors/models/flows-actors.backend.definitions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"flows-actors.backend.definitions.d.ts","sourceRoot":"","sources":["../../../../../src/flows-actors/models/flows-actors.backend.definitions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,wCAAwC,EAAE,MAAM,gCAAgC,CAAC;AAC1F,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,sCAAsC,CAAC;AACzE,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAE1D;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,eAAO,MAAM,sCAAsC,EAAE;IACnD,0BAA0B,EAAE,wCAAwC,CAAC;IACrE,MAAM,EAAE,iBAAiB,EAAE,CAAC;IAC5B,aAAa,EAAE,YAAY,EAAE,CAAC;CAK/B,CAAC"}
+{"version":3,"file":"flows-actors.backend.definitions.d.ts","sourceRoot":"","sources":["../../../../src/flows-actors/models/flows-actors.backend.definitions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,wCAAwC,EAAE,MAAM,gCAAgC,CAAC;AAC1F,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,sCAAsC,CAAC;AACzE,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAE1D;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,eAAO,MAAM,sCAAsC,EAAE;IACnD,0BAA0B,EAAE,wCAAwC,CAAC;IACrE,MAAM,EAAE,iBAAiB,EAAE,CAAC;IAC5B,aAAa,EAAE,YAAY,EAAE,CAAC;CAK/B,CAAC"}

package/dist/esm/flows-actors/models/flows-actors.backend.schemas.d.ts

@@ -1,5 +1,5 @@
 import { LLMProvider_OperationKey } from "@wildo-ai/external-connectors-models";
-import { FlowActorSystem, FlowsActors_Agent, FlowSystem, ActorSystem } from "@wildo-ai/saas-models";
+import { FlowActorSystem, FlowsActors_Agent, FlowsActors_McpServer, FlowSystem, ActorSystem } from "@wildo-ai/saas-models";
 import type { FunctionTool } from "./function-tools.backend.definitions";
 /**
  * Produces one fully-authored system at registry initialization.
@@ -41,5 +41,17 @@ export type FlowsActorsRegistry = {
     functionTools: {
         [ref: string]: FunctionTool;
     };
+    /**
+     * MCP servers the application permits its agents to reach, indexed by the ref an agent's
+     * `capabilities.tools.mcpRefs` names (#491).
+     *
+     * This is the resolution target `mcpRefs` never had. `functionRefs` resolve through
+     * `functionTools`; `mcpRefs` resolved through nothing, which is how a shipped catalog came to
+     * carry seven refs (`filesystem-mcp`, `git-mcp`, `browser-mcp`, …) that named no server anywhere
+     * while the agent card rendered them as capabilities.
+     */
+    mcpServers: {
+        [ref: string]: FlowsActors_McpServer;
+    };
 };
 //# sourceMappingURL=flows-actors.backend.schemas.d.ts.map

package/dist/esm/flows-actors/models/flows-actors.backend.schemas.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"flows-actors.backend.schemas.d.ts","sourceRoot":"","sources":["../../../../../src/flows-actors/models/flows-actors.backend.schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,wBAAwB,EAAE,MAAM,sCAAsC,CAAC;AAChF,OAAO,EACL,eAAe,EAEf,iBAAiB,EACjB,UAAU,EACV,WAAW,EACZ,MAAM,uBAAuB,CAAC;AAC/B,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,sCAAsC,CAAC;AASzE;;;;;;;;;GASG;AACH,MAAM,MAAM,qCAAqC,GAAG,MAAM,eAAe,CAAC;AAE1E,MAAM,MAAM,wCAAwC,GAAG;IACrD,CAAC,GAAG,EAAE,MAAM,GAAG,qCAAqC,CAAC;CACtD,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG;IAC/B,MAAM,EAAE;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,iBAAiB,CAAA;KAAE,CAAC;IAC7C,gBAAgB,EAAE;QAAE,CAAC,WAAW,EAAE,MAAM,GAAG,iBAAiB,EAAE,CAAA;KAAE,CAAC;IACjE,iBAAiB,EAAE;SAAG,YAAY,IAAI,wBAAwB,CAAC,CAAC,EAAE,iBAAiB,EAAE;KAAE,CAAC;CACzF,CAAC;AAGF,MAAM,MAAM,mBAAmB,GAAG;IAChC,MAAM,EAAE;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,iBAAiB,CAAA;KAAE,CAAC;IAC7C,KAAK,EAAE;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,UAAU,CAAA;KAAE,CAAC;IACrC,MAAM,EAAE;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,WAAW,CAAA;KAAE,CAAC;IACvC,kBAAkB,EAAE,kBAAkB,CAAC;IACvC,oEAAoE;IACpE,aAAa,EAAE;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,YAAY,CAAA;KAAE,CAAC;CAChD,CAAC"}
+{"version":3,"file":"flows-actors.backend.schemas.d.ts","sourceRoot":"","sources":["../../../../src/flows-actors/models/flows-actors.backend.schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,wBAAwB,EAAE,MAAM,sCAAsC,CAAC;AAChF,OAAO,EACL,eAAe,EAEf,iBAAiB,EACjB,qBAAqB,EACrB,UAAU,EACV,WAAW,EACZ,MAAM,uBAAuB,CAAC;AAC/B,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,sCAAsC,CAAC;AASzE;;;;;;;;;GASG;AACH,MAAM,MAAM,qCAAqC,GAAG,MAAM,eAAe,CAAC;AAE1E,MAAM,MAAM,wCAAwC,GAAG;IACrD,CAAC,GAAG,EAAE,MAAM,GAAG,qCAAqC,CAAC;CACtD,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG;IAC/B,MAAM,EAAE;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,iBAAiB,CAAA;KAAE,CAAC;IAC7C,gBAAgB,EAAE;QAAE,CAAC,WAAW,EAAE,MAAM,GAAG,iBAAiB,EAAE,CAAA;KAAE,CAAC;IACjE,iBAAiB,EAAE;SAAG,YAAY,IAAI,wBAAwB,CAAC,CAAC,EAAE,iBAAiB,EAAE;KAAE,CAAC;CACzF,CAAC;AAGF,MAAM,MAAM,mBAAmB,GAAG;IAChC,MAAM,EAAE;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,iBAAiB,CAAA;KAAE,CAAC;IAC7C,KAAK,EAAE;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,UAAU,CAAA;KAAE,CAAC;IACrC,MAAM,EAAE;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,WAAW,CAAA;KAAE,CAAC;IACvC,kBAAkB,EAAE,kBAAkB,CAAC;IACvC,oEAAoE;IACpE,aAAa,EAAE;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,YAAY,CAAA;KAAE,CAAC;IAC/C;;;;;;;;OAQG;IACH,UAAU,EAAE;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,qBAAqB,CAAA;KAAE,CAAC;CACtD,CAAC"}

package/dist/esm/flows-actors/models/flows-actors.backend.schemas.js.map

@@ -1 +1 @@
-{"version":3,"file":"flows-actors.backend.schemas.js","sourceRoot":"","sources":["../../../../../src/flows-actors/models/flows-actors.backend.schemas.ts"],"names":[],"mappings":"AAiDA,iEAAiE;AACjE,6BAA6B;AAC7B,WAAW;AACX,6DAA6D;AAC7D,sEAAsE;AACtE,iEAAiE","sourcesContent":["import { LLMProvider_OperationKey } from \"@wildo-ai/external-connectors-models\";\nimport {\n  FlowActorSystem,\n  FlowActorSystem_Kind,\n  FlowsActors_Agent,\n  FlowSystem,\n  ActorSystem\n} from \"@wildo-ai/saas-models\";\nimport type { FunctionTool } from \"./function-tools.backend.definitions\";\n\n//===============================================================\n// FlowActorSystem Registry Definitions\n// --------\n// Backend-specific factory pattern for initializing flow-actor systems.\n// Uses existing FlowActorSystem type from saas-models.\n//===============================================================\n\n/**\n * Produces one fully-authored system at registry initialization.\n *\n * The return type is the `ActorSystem | FlowSystem` union, NOT the base field\n * set: a factory always emits a kind specialization, and every real one in the\n * framework and in applications already declares itself as such. Naming the\n * base here erased the kind-specific members — most visibly `actors` — from\n * every consumer of a factory result while they stayed present at runtime, so\n * `registerSystem` had to assert its way back to the type the registry stores.\n */\nexport type FlowActorSystem_InitializationFactory = () => FlowActorSystem;\n\nexport type FlowActorSystem_InitializationFactoryMap = {\n  [key: string]: FlowActorSystem_InitializationFactory;\n};\n\nexport type AgentRegistryIndex = {\n  agents: { [ref: string]: FlowsActors_Agent };\n  agentsByProvider: { [providerRef: string]: FlowsActors_Agent[] };\n  agentsByOperation: { [operationKey in LLMProvider_OperationKey]?: FlowsActors_Agent[] };\n};\n\n\nexport type FlowsActorsRegistry = {\n  agents: { [ref: string]: FlowsActors_Agent };\n  flows: { [ref: string]: FlowSystem };\n  actors: { [ref: string]: ActorSystem };\n  agentRegistryIndex: AgentRegistryIndex;\n  /** Executable tools an agent can call, indexed by `functionRef`. */\n  functionTools: { [ref: string]: FunctionTool };\n};\n\n//===============================================================\n// Agent Registry Definitions\n// --------\n// Backend-specific indexing structure for quick agent lookup\n// by provider and operation. Uses FlowsActors_Agent from saas-models.\n//===============================================================\n\n\n"]}
+{"version":3,"file":"flows-actors.backend.schemas.js","sourceRoot":"","sources":["../../../../src/flows-actors/models/flows-actors.backend.schemas.ts"],"names":[],"mappings":"AA4DA,iEAAiE;AACjE,6BAA6B;AAC7B,WAAW;AACX,6DAA6D;AAC7D,sEAAsE;AACtE,iEAAiE","sourcesContent":["import { LLMProvider_OperationKey } from \"@wildo-ai/external-connectors-models\";\nimport {\n  FlowActorSystem,\n  FlowActorSystem_Kind,\n  FlowsActors_Agent,\n  FlowsActors_McpServer,\n  FlowSystem,\n  ActorSystem\n} from \"@wildo-ai/saas-models\";\nimport type { FunctionTool } from \"./function-tools.backend.definitions\";\n\n//===============================================================\n// FlowActorSystem Registry Definitions\n// --------\n// Backend-specific factory pattern for initializing flow-actor systems.\n// Uses existing FlowActorSystem type from saas-models.\n//===============================================================\n\n/**\n * Produces one fully-authored system at registry initialization.\n *\n * The return type is the `ActorSystem | FlowSystem` union, NOT the base field\n * set: a factory always emits a kind specialization, and every real one in the\n * framework and in applications already declares itself as such. Naming the\n * base here erased the kind-specific members — most visibly `actors` — from\n * every consumer of a factory result while they stayed present at runtime, so\n * `registerSystem` had to assert its way back to the type the registry stores.\n */\nexport type FlowActorSystem_InitializationFactory = () => FlowActorSystem;\n\nexport type FlowActorSystem_InitializationFactoryMap = {\n  [key: string]: FlowActorSystem_InitializationFactory;\n};\n\nexport type AgentRegistryIndex = {\n  agents: { [ref: string]: FlowsActors_Agent };\n  agentsByProvider: { [providerRef: string]: FlowsActors_Agent[] };\n  agentsByOperation: { [operationKey in LLMProvider_OperationKey]?: FlowsActors_Agent[] };\n};\n\n\nexport type FlowsActorsRegistry = {\n  agents: { [ref: string]: FlowsActors_Agent };\n  flows: { [ref: string]: FlowSystem };\n  actors: { [ref: string]: ActorSystem };\n  agentRegistryIndex: AgentRegistryIndex;\n  /** Executable tools an agent can call, indexed by `functionRef`. */\n  functionTools: { [ref: string]: FunctionTool };\n  /**\n   * MCP servers the application permits its agents to reach, indexed by the ref an agent's\n   * `capabilities.tools.mcpRefs` names (#491).\n   *\n   * This is the resolution target `mcpRefs` never had. `functionRefs` resolve through\n   * `functionTools`; `mcpRefs` resolved through nothing, which is how a shipped catalog came to\n   * carry seven refs (`filesystem-mcp`, `git-mcp`, `browser-mcp`, …) that named no server anywhere\n   * while the agent card rendered them as capabilities.\n   */\n  mcpServers: { [ref: string]: FlowsActors_McpServer };\n};\n\n//===============================================================\n// Agent Registry Definitions\n// --------\n// Backend-specific indexing structure for quick agent lookup\n// by provider and operation. Uses FlowsActors_Agent from saas-models.\n//===============================================================\n\n\n"]}

package/dist/esm/flows-actors/models/function-tools.backend.definitions.d.ts

@@ -1,6 +1,8 @@
 import { z } from 'zod';
 import { CoreResourceOperation, type ResourceType } from '@wildo-ai/saas-models';
+import type { AuthorizationsBackendService } from '../../security/authorizations/services/authorizations.backend.service';
 import type { ExecutionContextCreatorBackendService } from '../../runtime/services/execution-context-creator.backend.service';
+import type { RateLimitBackendService } from '../../errors/services/rate-limit.backend.service';
 import type { ResourcesRegistryBackendService } from '../../resources/services/resources-registry.backend.service';
 import type { ServicesRegistryHandlerBackendService } from '../../base-classes/services/services/services-registry-handler.backend.service';
 import type { SocketAuthResult } from '../../runtime/models/execution-context.backend.schemas';
@@ -20,12 +22,81 @@ import type { SocketAuthResult } from '../../runtime/models/execution-context.ba
  * engine supplies the execution *context* (caller identity + backend services)
  * at call time; the tool itself stays a pure, reusable declaration.
  */
-/** Backend services a tool may use at execution time (supplied by the caller). */
+/**
+ * @wildo_source:part:start saas.backend.flows-actors.tool-dispatch-obligations facet:layer:backend facet:audience:app-developer
+ *
+ * Backend services a tool may use at execution time (supplied by the caller).
+ *
+ * ⚠️ **If your tool DISPATCHES a resource operation, call `dispatchResourceOperationAsTool` — do not
+ * reach for these services yourself.**
+ *
+ * A tool enters at the SERVICE tier, bypassing Express, so two gates that live on the HTTP
+ * controller never run for it: the operation's declared `roles` ACL and its authored `rateLimit?`.
+ * `dispatchResourceOperationAsTool` resolves the operation, builds the scoped execution context,
+ * applies both gates in the right order and dispatches — one exported call, and the same one
+ * `resourceReadTool` and `resourceWriteTool` use.
+ *
+ * ```ts
+ * const rows = await dispatchResourceOperationAsTool({
+ *   ctx, resourceType: 'todos', operationIdentifier: CoreResourceOperation.LIST,
+ *   data: { filter: undefined, page: 1, limit: 20 }, options: { paginated: true },
+ * });
+ * ```
+ *
+ * **This prose used to name two calls a hand-written tool owed, and both were module-private (#556)
+ * — so an author who read it and agreed could not discharge the obligation.** Naming ONE importable
+ * call replaces that: the correct path is now also the shortest, which is the only mechanism that
+ * survives an author who has not read this paragraph.
+ *
+ * Skipping the gates means a caller whose roles the operation REFUSES, but whose tenancy admits the
+ * row, succeeds — the operation's `accessControl` simply unenforced on this plane. It is quiet:
+ * tenancy still applies, so the tool returns the caller's own tenant's rows and LOOKS like it works.
+ * That is right for a framework-internal caller and wrong here, where the caller is an external
+ * principal naming an operation on their own authority.
+ *
+ * The services below remain on this interface because the seam is built from them, and because a
+ * tool that dispatches NOTHING — a calculator, a formatter, a unit converter — is a legitimate shape
+ * that needs neither gate.
+ *
+ * What you still get for free, on every tool: the repository's contextual filter in full — tenancy,
+ * relationship narrowing, organization-unit narrowing, the anonymous guard and the retention hide,
+ * all fail-closed — plus the whole operation pipeline of validation, enabled conditions, custom
+ * implementation and hooks.
+ */
 export interface FunctionToolExecutionServices {
     resourcesRegistry: ResourcesRegistryBackendService;
     servicesRegistryHandler: ServicesRegistryHandlerBackendService;
     executionContextCreator: ExecutionContextCreatorBackendService;
+    /**
+     * Enforces an operation's OWN authored `rateLimit?` policy on this plane.
+     *
+     * Present because a tool DISPATCHES A RESOURCE OPERATION while bypassing Express, so the
+     * declared policy's only other consumer — the HTTP controller pre-flight — never runs. A
+     * hand-written {@link FunctionTool} that dispatches an operation itself owes the same charge —
+     * call `checkPolicyForSubject(...)` on THIS service. (The factories below wrap it in the
+     * module-private `assertDeclaredOperationRateLimit`, which is not importable from outside this
+     * file; the service on this interface is the reachable path.)
+     */
+    rateLimitService: RateLimitBackendService;
+    /**
+     * Applies the dispatched operation's own declared `roles` ACL.
+     *
+     * Present because a tool enters at the SERVICE tier, and **the role gate is a CONTROLLER-tier
+     * gate** — `ServicesRegistryHandlerBackendService`'s verbs apply the repository's contextual
+     * filter and the whole operation pipeline, and deliberately apply no role check, because their
+     * dominant population is the authentication reads that run before a role-bearing principal
+     * exists. That is right for a framework-internal caller and wrong for this plane, whose caller is
+     * an external principal (an A2A agent, or a user's own WebSocket) naming an operation on their
+     * own authority. Without this the operation's `accessControl` was simply unenforced here: a
+     * caller whose roles the operation refuses, but whose tenancy admits the row, succeeded.
+     *
+     * A hand-written {@link FunctionTool} that dispatches a resource operation owes the same call —
+     * `authorizeInController(idOrIds, executionContext)` on THIS service. (The factories below wrap it
+     * in the module-private `authorizeToolDispatch`, which is not importable from outside this file.)
+     */
+    authorizer: AuthorizationsBackendService;
 }
+/** @wildo_source:part:end saas.backend.flows-actors.tool-dispatch-obligations */
 /**
  * @wildo_source:part:start saas.backend.flows-actors.function-tool facet:layer:backend facet:family:flows-actors
  *
@@ -97,6 +168,87 @@ export interface FunctionTool {
      */
     requiresHumanApproval?: boolean;
 }
+/** @wildo_source:part:end saas.backend.flows-actors.function-tool */
+/**
+ * The name a `functionRef` is exposed to the model under.
+ *
+ * Provider tool names must be identifier-safe and a `functionRef` uses dots, so the two differ for
+ * every tool. ONE definition, because the mapping is used in opposite directions by two sites: the
+ * turn BUILDS the tool set from refs, and a resume that re-signs a modified approval must find the
+ * FunctionTool behind a name it reads back out of the model SDK's own message array. A second copy
+ * of this expression would make an approval unmodifiable for exactly the refs the two spelled
+ * differently.
+ *
+ * Not injective by construction (`a.b` and `a_b` collapse), and deliberately not made so: the
+ * forward direction is what the model sees, and a reverse lookup resolves against ONE agent's
+ * declared refs, where a collision would already be an authoring defect.
+ */
+export declare function modelToolNameForFunctionRef(functionRef: string): string;
+/**
+ * Dispatch a resource operation from a function tool, carrying BOTH gates the service tier skips.
+ *
+ * ## What this exists to prevent (#556)
+ *
+ * A `FunctionTool` enters at the SERVICE tier. It never passes through Express, so two
+ * controller-tier gates are simply absent from its path — the operation's declared `roles` ACL and
+ * its declared `rateLimit?`. That skip is CORRECT for the service tier's intended caller (the
+ * authentication reads that run before a role-bearing principal exists) and wrong for this plane,
+ * whose caller is an external principal naming an operation on their own authority.
+ *
+ * The failure is quiet, which is what makes it worth a seam. Tenancy still applies — the
+ * repository's contextual filter runs regardless — so an unauthorized tool returns the caller's own
+ * tenant's rows and LOOKS like it works. Nothing throws and nothing logs. What is missing is only
+ * the row-level `roles` ACL: a caller whose roles the operation refuses, but whose tenancy admits
+ * the row, succeeds.
+ *
+ * Until this existed the two gates were applied by hand at three sites in this file, and both helpers
+ * were module-private — so an application author writing their own tool could not discharge the
+ * obligation even after reading about it. The engine's own rule
+ * (`invariant-call-site-enumeration.md`) asks for the opposite: prefer making the invariant
+ * unbypassable over applying it N times. **This is the shortest path to a dispatch, so the correct
+ * path is also the easy one.**
+ *
+ * ## The order is authorize → charge → dispatch, and it is not arbitrary
+ *
+ * Authorization first, so an unauthorized caller cannot spend an authorized caller's quota. The
+ * charge before the dispatch, so a refused budget costs no work. This is the same order the MCP
+ * plane uses, deliberately — one refusal vocabulary across every plane that enters here.
+ *
+ * ## One id, two uses, and why that is safer than two parameters
+ *
+ * `recordId` addresses the row AND is the authorization subject, because at every existing call site
+ * those are the same value: an UPDATE passes the id to both, a CREATE/LIST/SEARCH passes it to
+ * neither. Splitting them into two parameters would make it possible to authorize a collection call
+ * while dispatching a row call — a question nobody asked, failing for the wrong reason. A bulk
+ * operation addressed by a FILTER passes `dispatchFilter` instead, which is never an authorization
+ * subject because a filter-addressed operation IS a collection call.
+ *
+ * assurance-control: WILDO.ACCESS.LEAST_PRIVILEGE — an external caller reaching a resource operation
+ * off the HTTP plane is held to that operation's own declared authority, through the same predicate.
+ *
+ * @throws AUTHORIZATION when the operation's roles refuse the caller — surfaced to the model as a
+ *   tool error, so the agent can say it was refused. Recorded by the authorizer's own denial-audit
+ *   funnel, so the evidence matches a denied HTTP request.
+ * @throws RATE_LIMIT (429) carrying `context.retryAfterSeconds`, the same envelope the HTTP and MCP
+ *   seams throw.
+ * @throws NOT_FOUND when the resource declares no dispatchable operation under that identifier.
+ */
+export declare function dispatchResourceOperationAsTool<TResult = any>(input: {
+    ctx: FunctionToolExecutionContext;
+    resourceType: ResourceType;
+    /** A `CoreResourceOperation` member, or a custom operation identifier the resource declares. */
+    operationIdentifier: string;
+    /** The addressed row, for a row-scoped operation. Authorizes AND addresses; omit for a collection call. */
+    recordId?: string;
+    /** A filter addressing a COLLECTION, for a bulk operation. Never an authorization subject. */
+    dispatchFilter?: any;
+    /** Parent / context resource ids used to build the scoped execution context. */
+    contextIds?: any;
+    /** The operation payload — the body for a write, the query options for a read. */
+    data?: any;
+    /** Repository options passed through, e.g. `{ paginated: true }` for a LIST envelope. */
+    options?: any;
+}): Promise<TResult>;
 /**
  * @wildo_source:part:start saas.backend.flows-actors.resource-read-tool facet:layer:backend facet:family:flows-actors
  *
@@ -106,9 +258,16 @@ export interface FunctionTool {
  * it per resource an agent should be able to read (e.g. `resourceReadTool(TODOS)`),
  * making any registered resource agent-readable without hand-writing a tool.
  *
- * The tool reads through the normal service path under a user `ExecutionContext`
- * rebuilt from the caller's socket auth, so the framework's contextual filter +
- * role ACL apply exactly as for the user's own request. Identity is NEVER taken
+ * The tool dispatches the resource's PUBLIC, URL-bearing default LIST / SEARCH — the same
+ * operation a REST client reaches — under a user `ExecutionContext` rebuilt from the caller's
+ * socket auth, and applies that operation's own declared `roles` ACL through
+ * `AuthorizationsBackendService.authorizeInController` before dispatching it. So the framework's
+ * contextual filter AND the role ACL apply exactly as for the user's own request. (The role gate
+ * is named explicitly because it does NOT come free with the service path: the service tier
+ * applies tenancy and the operation pipeline and no role check, so a tool that merely dispatched
+ * would run with the ACL unread — which is what this factory did until 2026-09-08.) A resource
+ * that declares no URL-bearing default for the operation is REFUSED rather than served through its
+ * route-less internal variant. Identity is NEVER taken
  * from the model — only the `searchQuery` / `limit` args are. Its `functionRef`
  * defaults to `resource.<resourceType>.read` — reference that exact string from
  * your agent's `capabilities.tools.functionRefs`. Import path:
@@ -135,10 +294,22 @@ export declare function resourceReadTool(resourceType: ResourceType, options?: {
  * Produces a {@link FunctionTool} that lets an agent CREATE or UPDATE ONE resource
  * type **as the calling user**, under the caller's own `ExecutionContext` rebuilt
  * from their verified socket auth — no `systemAccessPolicy` bypass, and identity is
- * NEVER taken from the model. The resource's own CREATE / UPDATE `accessControl`
- * (roles + parent scope) is enforced by the service tier exactly as for the user's
- * own HTTP request, so authorization is **fail-closed**: a caller lacking the
- * operation's role gets a thrown authz error, not a silent write. Owner FKs and
+ * NEVER taken from the model. It dispatches the resource's PUBLIC, URL-bearing default CREATE /
+ * UPDATE — the same operation a REST client reaches, with the same request DTO validating the
+ * model's arguments and the same prefix / postfix side effects — and applies that operation's own
+ * `accessControl` (roles + parent scope, plus per-row access on UPDATE) through
+ * `AuthorizationsBackendService.authorizeInController` before the write. Authorization is therefore
+ * **fail-closed**: a caller lacking the operation's role gets a thrown authz error, not a silent
+ * write.
+ *
+ * Both halves of that are load-bearing and neither came free, so do not simplify them away. The
+ * service tier applies tenancy and the operation pipeline and NO role check, and the service
+ * layer's own default resolver PREFERS a route-less `INTERNAL_CALL` variant over the public one —
+ * so before 2026-09-08 this factory dispatched a different operation from the one it advertises,
+ * with the ACL unread. On `organizations` CREATE that combination created ownerless tenants.
+ *
+ * A resource that declares no URL-bearing default for the operation is REFUSED rather than written
+ * through its internal variant. Owner FKs and
  * other server-set fields are EC-injected / `excludeFromCreate`, so the model can
  * never spoof ownership through the tool arguments.
  *

package/dist/esm/flows-actors/models/function-tools.backend.definitions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"function-tools.backend.definitions.d.ts","sourceRoot":"","sources":["../../../../../src/flows-actors/models/function-tools.backend.definitions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,qBAAqB,EAAE,KAAK,YAAY,EAAwC,MAAM,uBAAuB,CAAC;AAGvH,OAAO,KAAK,EAAE,qCAAqC,EAAE,MAAM,+EAA+E,CAAC;AAC3I,OAAO,KAAK,EAAE,+BAA+B,EAAE,MAAM,0EAA0E,CAAC;AAChI,OAAO,KAAK,EAAE,qCAAqC,EAAE,MAAM,6FAA6F,CAAC;AACzJ,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,qEAAqE,CAAC;AAE5G;;;;;;;;;;;;;;;GAeG;AAEH,kFAAkF;AAClF,MAAM,WAAW,6BAA6B;IAC5C,iBAAiB,EAAE,+BAA+B,CAAC;IACnD,uBAAuB,EAAE,qCAAqC,CAAC;IAC/D,uBAAuB,EAAE,qCAAqC,CAAC;CAChE;AAED;;;;;;;;;;GAUG;AACH,MAAM,WAAW,4BAA4B;IAC3C,mEAAmE;IACnE,IAAI,EAAE,gBAAgB,CAAC;IACvB,+DAA+D;IAC/D,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,yCAAyC;IACzC,QAAQ,EAAE,6BAA6B,CAAC;CACzC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,WAAW,YAAY;IAC3B,yEAAyE;IACzE,WAAW,EAAE,MAAM,CAAC;IACpB,mFAAmF;IACnF,WAAW,EAAE,MAAM,CAAC;IACpB,kEAAkE;IAClE,WAAW,EAAE,CAAC,CAAC,UAAU,CAAC;IAC1B,uEAAuE;IACvE,OAAO,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,4BAA4B,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAChF;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,qBAAqB,CAAC,EAAE,OAAO,CAAC;CACjC;AAsBD;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,wBAAgB,gBAAgB,CAC9B,YAAY,EAAE,YAAY,EAC1B,OAAO,CAAC,EAAE;IAAE,WAAW,CAAC,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAE,GACjG,YAAY,CA4Dd;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AACH,wBAAgB,iBAAiB,CAC/B,YAAY,EAAE,YAAY,EAC1B,EAAE,EAAE,qBAAqB,CAAC,MAAM,GAAG,qBAAqB,CAAC,MAAM,EAC/D,OAAO,EAAE;IACP,WAAW,EAAE,CAAC,CAAC,UAAU,CAAC;IAC1B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;;;;;OAQG;IACH,qBAAqB,CAAC,EAAE,OAAO,CAAC;CACjC,GACA,YAAY,CAyCd"}
+{"version":3,"file":"function-tools.backend.definitions.d.ts","sourceRoot":"","sources":["../../../../src/flows-actors/models/function-tools.backend.definitions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,qBAAqB,EAKrB,KAAK,YAAY,EAGlB,MAAM,uBAAuB,CAAC;AAI/B,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,oFAAoF,CAAC;AAEvI,OAAO,KAAK,EAAE,qCAAqC,EAAE,MAAM,+EAA+E,CAAC;AAC3I,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,+DAA+D,CAAC;AAC7G,OAAO,KAAK,EAAE,+BAA+B,EAAE,MAAM,0EAA0E,CAAC;AAChI,OAAO,KAAK,EAAE,qCAAqC,EAAE,MAAM,6FAA6F,CAAC;AACzJ,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,qEAAqE,CAAC;AAE5G;;;;;;;;;;;;;;;GAeG;AAEH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;AACH,MAAM,WAAW,6BAA6B;IAC5C,iBAAiB,EAAE,+BAA+B,CAAC;IACnD,uBAAuB,EAAE,qCAAqC,CAAC;IAC/D,uBAAuB,EAAE,qCAAqC,CAAC;IAC/D;;;;;;;;;OASG;IACH,gBAAgB,EAAE,uBAAuB,CAAC;IAC1C;;;;;;;;;;;;;;;OAeG;IACH,UAAU,EAAE,4BAA4B,CAAC;CAC1C;AACD,iFAAiF;AAEjF;;;;;;;;;;GAUG;AACH,MAAM,WAAW,4BAA4B;IAC3C,mEAAmE;IACnE,IAAI,EAAE,gBAAgB,CAAC;IACvB,+DAA+D;IAC/D,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,yCAAyC;IACzC,QAAQ,EAAE,6BAA6B,CAAC;CACzC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,WAAW,YAAY;IAC3B,yEAAyE;IACzE,WAAW,EAAE,MAAM,CAAC;IACpB,mFAAmF;IACnF,WAAW,EAAE,MAAM,CAAC;IACpB,kEAAkE;IAClE,WAAW,EAAE,CAAC,CAAC,UAAU,CAAC;IAC1B,uEAAuE;IACvE,OAAO,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,4BAA4B,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAChF;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,qBAAqB,CAAC,EAAE,OAAO,CAAC;CACjC;AACD,qEAAqE;AAErE;;;;;;;;;;;;;GAaG;AACH,wBAAgB,2BAA2B,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAEvE;AA8RD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgDG;AACH,wBAAsB,+BAA+B,CAAC,OAAO,GAAG,GAAG,EAAE,KAAK,EAAE;IAC1E,GAAG,EAAE,4BAA4B,CAAC;IAClC,YAAY,EAAE,YAAY,CAAC;IAC3B,gGAAgG;IAChG,mBAAmB,EAAE,MAAM,CAAC;IAC5B,2GAA2G;IAC3G,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,8FAA8F;IAC9F,cAAc,CAAC,EAAE,GAAG,CAAC;IACrB,gFAAgF;IAChF,UAAU,CAAC,EAAE,GAAG,CAAC;IACjB,kFAAkF;IAClF,IAAI,CAAC,EAAE,GAAG,CAAC;IACX,yFAAyF;IACzF,OAAO,CAAC,EAAE,GAAG,CAAC;CACf,GAAG,OAAO,CAAC,OAAO,CAAC,CA2BnB;AAsBD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,wBAAgB,gBAAgB,CAC9B,YAAY,EAAE,YAAY,EAC1B,OAAO,CAAC,EAAE;IAAE,WAAW,CAAC,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAE,GACjG,YAAY,CAoFd;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiDG;AACH,wBAAgB,iBAAiB,CAC/B,YAAY,EAAE,YAAY,EAC1B,EAAE,EAAE,qBAAqB,CAAC,MAAM,GAAG,qBAAqB,CAAC,MAAM,EAC/D,OAAO,EAAE;IACP,WAAW,EAAE,CAAC,CAAC,UAAU,CAAC;IAC1B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;;;;;OAQG;IACH,qBAAqB,CAAC,EAAE,OAAO,CAAC;CACjC,GACA,YAAY,CAsDd"}