@wildo-ai/saas-models 1.1.3 → 1.1.5

package/dist/esm/flows-actors/execution-plan-readiness.shared.utils.js

@@ -0,0 +1,51 @@
+import { FlowsActors_ElementKind, FlowsActors_Relation } from './flows-actors.commons.shared.schemas.js';
+/**
+ * WHICH STEPS OF A PLAN CAN START — the one reader of `FlowsActors_Relation.DEPENDS_ON` (#1359).
+ *
+ * ## Why this exists
+ *
+ * The engine modelled step dependencies for as long as it has had plans, and read none of them:
+ * until 2026-09-20 `DEPENDS_ON` appeared exactly once repository-wide, in its own declaration. Every
+ * consumer that needed "what can run next" therefore computed it beside the model — the app-creation
+ * build plan with a one-line filter over its own `prerequisiteTaskRefs`. A dependency edge nothing
+ * reads is a field an author can fill in and be silently ignored.
+ *
+ * ## What it decides, and what it deliberately does not
+ *
+ * A step is READY when it is not done and every step it `DEPENDS_ON` is done. That is the whole rule,
+ * and it is the engine's. **What "done" means is the caller's**, injected as a predicate: a build-plan
+ * task is done when its declared products are committed, which is a fact about a git tree the engine
+ * knows nothing of; a flow step might be done when its task row is `COMPLETED`. Putting either reading
+ * here would make this a scheduler for one consumer wearing a generic name.
+ *
+ * - **Fails closed on a dependency outside the plan.** A `DEPENDS_ON` naming a step the plan does not
+ *   contain is "done" only if the predicate says so, and a predicate that has never heard of it
+ *   answers no — so the dependent waits rather than starting on an edge nobody can satisfy.
+ * - **Order is the plan's.** The result keeps the order the steps were given in. Choosing among ready
+ *   steps would be a second scheduler disagreeing with the plan's author.
+ * - **`BLOCKED_BY` is not read.** It has no writer, and a runtime impediment is a different statement
+ *   from an authored dependency; giving it a meaning here by analogy would invent one.
+ *
+ * Pure and total: no I/O, no clock, the same answer for the same inputs.
+ */
+export function selectReadyExecutionPlanSteps(steps, isStepDone) {
+    return steps.filter((step) => !isStepDone(step._id)
+        && listExecutionPlanStepDependencies(step).every((dependency) => isStepDone(dependency)));
+}
+/** The plan-step ids one step `DEPENDS_ON`, in authored order. */
+export function listExecutionPlanStepDependencies(step) {
+    return step.relationships.flatMap((relationship) => relationship.kind === FlowsActors_ElementKind.PLAN_STEP && relationship.relation === FlowsActors_Relation.DEPENDS_ON
+        ? [relationship.planStepId]
+        : []);
+}
+/** The edge an author writes to say "this step needs that one done first". */
+export function buildExecutionPlanStepDependency(target) {
+    return {
+        kind: FlowsActors_ElementKind.PLAN_STEP,
+        relation: FlowsActors_Relation.DEPENDS_ON,
+        planId: target.planId,
+        planStepId: target.planStepId,
+        actorSystemId: target.actorSystemId,
+    };
+}
+//# sourceMappingURL=execution-plan-readiness.shared.utils.js.map

package/dist/esm/flows-actors/execution-plan-readiness.shared.utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"execution-plan-readiness.shared.utils.js","sourceRoot":"","sources":["../../../../src/flows-actors/execution-plan-readiness.shared.utils.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,oBAAoB,EAAiC,MAAM,uCAAuC,CAAC;AAErI;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,MAAM,UAAU,6BAA6B,CAC3C,KAAuB,EACvB,UAA2C;IAE3C,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAC3B,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC;WAClB,iCAAiC,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;AAC9F,CAAC;AAQD,kEAAkE;AAClE,MAAM,UAAU,iCAAiC,CAAC,IAAgC;IAChF,OAAO,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,YAAY,EAAE,EAAE,CACjD,YAAY,CAAC,IAAI,KAAK,uBAAuB,CAAC,SAAS,IAAI,YAAY,CAAC,QAAQ,KAAK,oBAAoB,CAAC,UAAU;QAClH,CAAC,CAAC,CAAC,YAAY,CAAC,UAAU,CAAC;QAC3B,CAAC,CAAC,EAAE,CAAC,CAAC;AACZ,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,gCAAgC,CAAC,MAIhD;IACC,OAAO;QACL,IAAI,EAAE,uBAAuB,CAAC,SAAS;QACvC,QAAQ,EAAE,oBAAoB,CAAC,UAAU;QACzC,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,aAAa,EAAE,MAAM,CAAC,aAAa;KACpC,CAAC;AACJ,CAAC","sourcesContent":["import { FlowsActors_ElementKind, FlowsActors_Relation, type FlowsActors_Relationship } from './flows-actors.commons.shared.schemas';\n\n/**\n * WHICH STEPS OF A PLAN CAN START — the one reader of `FlowsActors_Relation.DEPENDS_ON` (#1359).\n *\n * ## Why this exists\n *\n * The engine modelled step dependencies for as long as it has had plans, and read none of them:\n * until 2026-09-20 `DEPENDS_ON` appeared exactly once repository-wide, in its own declaration. Every\n * consumer that needed \"what can run next\" therefore computed it beside the model — the app-creation\n * build plan with a one-line filter over its own `prerequisiteTaskRefs`. A dependency edge nothing\n * reads is a field an author can fill in and be silently ignored.\n *\n * ## What it decides, and what it deliberately does not\n *\n * A step is READY when it is not done and every step it `DEPENDS_ON` is done. That is the whole rule,\n * and it is the engine's. **What \"done\" means is the caller's**, injected as a predicate: a build-plan\n * task is done when its declared products are committed, which is a fact about a git tree the engine\n * knows nothing of; a flow step might be done when its task row is `COMPLETED`. Putting either reading\n * here would make this a scheduler for one consumer wearing a generic name.\n *\n * - **Fails closed on a dependency outside the plan.** A `DEPENDS_ON` naming a step the plan does not\n *   contain is \"done\" only if the predicate says so, and a predicate that has never heard of it\n *   answers no — so the dependent waits rather than starting on an edge nobody can satisfy.\n * - **Order is the plan's.** The result keeps the order the steps were given in. Choosing among ready\n *   steps would be a second scheduler disagreeing with the plan's author.\n * - **`BLOCKED_BY` is not read.** It has no writer, and a runtime impediment is a different statement\n *   from an authored dependency; giving it a meaning here by analogy would invent one.\n *\n * Pure and total: no I/O, no clock, the same answer for the same inputs.\n */\nexport function selectReadyExecutionPlanSteps<TStep extends ExecutionPlanReadinessStep>(\n  steps: readonly TStep[],\n  isStepDone: (planStepId: string) => boolean,\n): readonly TStep[] {\n  return steps.filter((step) =>\n    !isStepDone(step._id)\n    && listExecutionPlanStepDependencies(step).every((dependency) => isStepDone(dependency)));\n}\n\n/** What readiness needs of a step — its identity and its edges. A full `ActorsSystem_ExecutionPlan_Step` satisfies it. */\nexport interface ExecutionPlanReadinessStep {\n  readonly _id: string;\n  readonly relationships: readonly FlowsActors_Relationship[];\n}\n\n/** The plan-step ids one step `DEPENDS_ON`, in authored order. */\nexport function listExecutionPlanStepDependencies(step: ExecutionPlanReadinessStep): readonly string[] {\n  return step.relationships.flatMap((relationship) =>\n    relationship.kind === FlowsActors_ElementKind.PLAN_STEP && relationship.relation === FlowsActors_Relation.DEPENDS_ON\n      ? [relationship.planStepId]\n      : []);\n}\n\n/** The edge an author writes to say \"this step needs that one done first\". */\nexport function buildExecutionPlanStepDependency(target: {\n  readonly planId: string;\n  readonly planStepId: string;\n  readonly actorSystemId: string;\n}): FlowsActors_Relationship {\n  return {\n    kind: FlowsActors_ElementKind.PLAN_STEP,\n    relation: FlowsActors_Relation.DEPENDS_ON,\n    planId: target.planId,\n    planStepId: target.planStepId,\n    actorSystemId: target.actorSystemId,\n  };\n}\n"]}

package/dist/esm/flows-actors/flows-actors-execution.shared.schemas.d.ts

@@ -106,6 +106,26 @@ export declare function serializeFlowActorPausedApproval(state: FlowActorExecuti
  * never silently resume from garbage.
  */
 export declare function parseFlowActorPausedApproval(raw: string): FlowActorExecution_PausedApproval;
+/**
+ * Whether a paused turn's approval window has CLOSED at `now` — the ONE definition of "lapsed".
+ *
+ * Two consumers act on it and neither may re-derive it (#484): the approval-response path, which
+ * refuses a decision that arrives too late, and the scheduled sweep that fails a pause nobody ever
+ * answered. Written twice, they would drift at exactly the boundary that matters — one inclusive,
+ * one exclusive — and a decision arriving on the instant would be refused by one and resumed by the
+ * other.
+ *
+ * - **Inclusive at the instant.** `expiresAt` is the moment after which the turn "must not be
+ *   resumed", so at `expiresAt` itself the window is already closed.
+ * - **An absent expiry never lapses.** A suspension persisted before #465 carries none, and those
+ *   turns were paused under a contract with no timeout. Inventing one retroactively would fail them
+ *   on a rule they were never given.
+ * - **An unparseable instant never lapses.** `new Date('garbage')` is `NaN`, every comparison with
+ *   which is false. Failing a turn on a value nobody can read would turn a corrupted field into a
+ *   destroyed conversation; leaving it paused keeps it recoverable, and the resume path already
+ *   refuses a blob it cannot parse.
+ */
+export declare function isFlowActorPausedApprovalLapsed(paused: Pick<FlowActorExecution_PausedApproval, 'expiresAt'>, now: Date): boolean;
 /**
  * The conversation envelope shared by every scope variant. It carries NO owner
  * scope FK: `declarePolymorphicSchemas()` injects exactly ONE (`userId` /
@@ -123,6 +143,7 @@ export declare const FlowActorExecutionBaseSchema: z.ZodObject<{
     kind: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodEnum<typeof FlowActorSystem_Kind>>>>;
     resourceServerInstanceRef: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>;
     machineCredentialId: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>;
+    contextRef: z.ZodDefault<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>>;
     status: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodEnum<typeof FlowsActors_Status>>>;
     statusChanges: z.ZodDefault<z.ZodArray<z.ZodObject<{
         status: z.ZodEnum<typeof FlowsActors_Status>;
@@ -165,6 +186,7 @@ export declare const flowActorExecutionsPolymorphicDeclaration: import("..").Pol
     kind: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodEnum<typeof FlowActorSystem_Kind>>>>;
     resourceServerInstanceRef: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>;
     machineCredentialId: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>;
+    contextRef: z.ZodDefault<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>>;
     status: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodEnum<typeof FlowsActors_Status>>>;
     statusChanges: z.ZodDefault<z.ZodArray<z.ZodObject<{
         status: z.ZodEnum<typeof FlowsActors_Status>;
@@ -211,4 +233,13 @@ export declare const FlowActorExecutionUpdateInternalSchema: z.ZodObject<{
  * the concrete variant; the conversational runtime supplies it explicitly on create.
  */
 export type FlowActorExecution = z.infer<typeof FlowActorExecutionBaseSchema>;
+/**
+ * One string for a set of context resource identifiers — `key=value` pairs sorted by key, joined
+ * with `;`. Deterministic, so the transport that opens a conversation and the surface that lists
+ * history compute the same value from the same identifiers; `''` for none.
+ *
+ * Keys and values carry no `=` or `;` in practice (they are resource types and ids); the function
+ * does not escape, so a value that did would fold two contexts into one, never split one in two.
+ */
+export declare function canonicalizeFlowsActorsContextRef(identifiers: Readonly<Record<string, string>> | undefined): string;
 //# sourceMappingURL=flows-actors-execution.shared.schemas.d.ts.map

package/dist/esm/flows-actors/flows-actors-execution.shared.schemas.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"flows-actors-execution.shared.schemas.d.ts","sourceRoot":"","sources":["../../../../src/flows-actors/flows-actors-execution.shared.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,EAA2E,kBAAkB,EAAE,MAAM,uCAAuC,CAAC;AAGpJ,OAAO,EAAE,oBAAoB,EAAE,MAAM,sCAAsC,CAAC;AAM5E,OAAO,EAGL,KAAK,4BAA4B,EAClC,MAAM,kDAAkD,CAAC;AAQ1D;;;;;GAKG;AACH,oBAAY,4BAA4B;IACtC,IAAI,SAAS;IACb,SAAS,cAAc;IACvB,MAAM,WAAW;IACjB,IAAI,SAAS;CACd;AAED;;;;;GAKG;AACH,oBAAY,8BAA8B;IACxC,IAAI,SAAS;IACb,QAAQ,aAAa;IACrB,QAAQ,aAAa;IACrB,IAAI,SAAS;CACd;AAED,eAAO,MAAM,gCAAgC;;;;;;;iBAwB3C,CAAC;AACH,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gCAAgC,CAAC,CAAC;AAE1F;;;;;;;GAOG;AACH,eAAO,MAAM,uCAAuC;;;;;;;iBA4ClD,CAAC;AACH,MAAM,MAAM,iCAAiC,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uCAAuC,CAAC,CAAC;AAExG;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,sCAAsC,QAAsB,CAAC;AAE1E,qFAAqF;AACrF,wBAAgB,gCAAgC,CAAC,KAAK,EAAE,iCAAiC,GAAG,MAAM,CAEjG;AAED;;;;GAIG;AACH,wBAAgB,4BAA4B,CAAC,GAAG,EAAE,MAAM,GAAG,iCAAiC,CAE3F;AAuBD;;;;;;;;;GASG;AACH,eAAO,MAAM,4BAA4B;;;;;;;;;;;;;;;;;;;;;;;;iBAoIvC,CAAC;AACH,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAMlF;;;;;;;;GAQG;AACH,eAAO,MAAM,mCAAmC,EAAE,4BAA4B,EAIvC,CAAC;AAExC;;;;;GAKG;AACH,eAAO,MAAM,yCAAyC;;;;;;;;;;;;;;;;;;;;;;;;kBAMpD,CAAC;AAEH;;;;GAIG;AACH,eAAO,MAAM,sCAAsC;;;;;;;;;;;;;;;;iBAqBjD,CAAC;AAMH;;;;GAIG;AACH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC"}
+{"version":3,"file":"flows-actors-execution.shared.schemas.d.ts","sourceRoot":"","sources":["../../../../src/flows-actors/flows-actors-execution.shared.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,EAA2E,kBAAkB,EAAE,MAAM,uCAAuC,CAAC;AAGpJ,OAAO,EAAE,oBAAoB,EAAE,MAAM,sCAAsC,CAAC;AAM5E,OAAO,EAGL,KAAK,4BAA4B,EAClC,MAAM,kDAAkD,CAAC;AAQ1D;;;;;GAKG;AACH,oBAAY,4BAA4B;IACtC,IAAI,SAAS;IACb,SAAS,cAAc;IACvB,MAAM,WAAW;IACjB,IAAI,SAAS;CACd;AAED;;;;;GAKG;AACH,oBAAY,8BAA8B;IACxC,IAAI,SAAS;IACb,QAAQ,aAAa;IACrB,QAAQ,aAAa;IACrB,IAAI,SAAS;CACd;AAED,eAAO,MAAM,gCAAgC;;;;;;;iBAwB3C,CAAC;AACH,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gCAAgC,CAAC,CAAC;AAE1F;;;;;;;GAOG;AACH,eAAO,MAAM,uCAAuC;;;;;;;iBAgDlD,CAAC;AACH,MAAM,MAAM,iCAAiC,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uCAAuC,CAAC,CAAC;AAExG;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,sCAAsC,QAAsB,CAAC;AAE1E,qFAAqF;AACrF,wBAAgB,gCAAgC,CAAC,KAAK,EAAE,iCAAiC,GAAG,MAAM,CAEjG;AAED;;;;GAIG;AACH,wBAAgB,4BAA4B,CAAC,GAAG,EAAE,MAAM,GAAG,iCAAiC,CAE3F;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,+BAA+B,CAAC,MAAM,EAAE,IAAI,CAAC,iCAAiC,EAAE,WAAW,CAAC,EAAE,GAAG,EAAE,IAAI,GAAG,OAAO,CAIhI;AAuBD;;;;;;;;;GASG;AACH,eAAO,MAAM,4BAA4B;;;;;;;;;;;;;;;;;;;;;;;;;iBAkJvC,CAAC;AACH,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAMlF;;;;;;;;GAQG;AACH,eAAO,MAAM,mCAAmC,EAAE,4BAA4B,EAIvC,CAAC;AAExC;;;;;GAKG;AACH,eAAO,MAAM,yCAAyC;;;;;;;;;;;;;;;;;;;;;;;;;kBAMpD,CAAC;AAEH;;;;GAIG;AACH,eAAO,MAAM,sCAAsC;;;;;;;;;;;;;;;;iBAqBjD,CAAC;AAMH;;;;GAIG;AACH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAE9E;;;;;;;GAOG;AACH,wBAAgB,iCAAiC,CAAC,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAAG,SAAS,GAAG,MAAM,CAMnH"}

package/dist/esm/flows-actors/flows-actors-execution.shared.schemas.js

@@ -135,8 +135,12 @@ export const FlowActorExecution_PausedApprovalSchema = z.object({
      * IT — so a pending approval never expired and the field described a timeout that did not exist.
      *
      * The terminal state on expiry is `FlowsActors_Status.FAILED`, which the status vocabulary already
-     * named ("resolves to PROCESSING→COMPLETED on approval, or a terminal state on denial/expiry").
-     * Nothing new was invented for it.
+     * names for it. Nothing new was invented. Two producers write it and both read "lapsed" from
+     * {@link isFlowActorPausedApprovalLapsed}: the refusal of a decision that arrives too late, and the
+     * hourly sweep that fails a pause nobody answered (#484).
+     *
+     * (That vocabulary's doc used to say a DENIAL was terminal too. It is not — a denial resumes the
+     * turn so the model can answer the refusal — and the doc was corrected in the same change.)
      *
      * Still optional: a suspension persisted before that date carries none, and an absent expiry means
      * the pause does not lapse — which is what those turns were paused under.
@@ -169,6 +173,31 @@ export function serializeFlowActorPausedApproval(state) {
 export function parseFlowActorPausedApproval(raw) {
     return FlowActorExecution_PausedApprovalSchema.parse(JSON.parse(raw));
 }
+/**
+ * Whether a paused turn's approval window has CLOSED at `now` — the ONE definition of "lapsed".
+ *
+ * Two consumers act on it and neither may re-derive it (#484): the approval-response path, which
+ * refuses a decision that arrives too late, and the scheduled sweep that fails a pause nobody ever
+ * answered. Written twice, they would drift at exactly the boundary that matters — one inclusive,
+ * one exclusive — and a decision arriving on the instant would be refused by one and resumed by the
+ * other.
+ *
+ * - **Inclusive at the instant.** `expiresAt` is the moment after which the turn "must not be
+ *   resumed", so at `expiresAt` itself the window is already closed.
+ * - **An absent expiry never lapses.** A suspension persisted before #465 carries none, and those
+ *   turns were paused under a contract with no timeout. Inventing one retroactively would fail them
+ *   on a rule they were never given.
+ * - **An unparseable instant never lapses.** `new Date('garbage')` is `NaN`, every comparison with
+ *   which is false. Failing a turn on a value nobody can read would turn a corrupted field into a
+ *   destroyed conversation; leaving it paused keeps it recoverable, and the resume path already
+ *   refuses a blob it cannot parse.
+ */
+export function isFlowActorPausedApprovalLapsed(paused, now) {
+    if (paused.expiresAt === undefined)
+        return false;
+    const expiresAtMs = new Date(paused.expiresAt).getTime();
+    return Number.isFinite(expiresAtMs) && expiresAtMs <= now.getTime();
+}
 //===============================================================
 //  Per-kind execution state (reused from the shared execution types)
 //===============================================================
@@ -177,7 +206,7 @@ export function parseFlowActorPausedApproval(raw) {
 // per-kind graph-state slots (`flowState` node-states / `actorState` plan+tasks,
 // sliced from `FlowSystem_Execution` / `ActorSystem_Execution`) are intentionally
 // NOT persisted yet: the v1 conversational runtime never writes them, and those
-// heavy nested sub-structures (required `plan`/`walkthrough`/`standaloneTasks`
+// heavy nested sub-structures (required `plan`/`standaloneTasks`
 // with embedded `_id`s) do not round-trip through the Zod→Mongoose embedded-
 // subdocument conversion as optional slots (empty subdocs get instantiated and
 // fail required-path validation). When the flow/actor orchestration runtime
@@ -239,6 +268,19 @@ export const FlowActorExecutionBaseSchema = z.object({
      * principal there and the `userId` owner FK already discriminates.
      */
     machineCredentialId: z.string().min(1).isDBIndexed(),
+    /**
+     * WHICH context this conversation was opened in — the client's `contextResourceIdentifiers` on
+     * `FLOWS_ACTORS_START`, folded into one indexed string by {@link canonicalizeFlowsActorsContextRef}
+     * so history can list by it with plain equality on every adapter. Set on create, immutable.
+     *
+     * It is a PARTITION, not an access filter: the owner FK, the agent instance and the machine
+     * credential above decide who may read a row; this decides which of a caller's own threads belong
+     * to the surface asking. Without it every thread a user ever opened against a system lists
+     * together, whatever it was about — measured 2026-09-22 on a tool that hosts one system for
+     * several applications sharing one database, where the threads of one application appeared in
+     * the next (#1454). `''` is "no context", never absent, so the equality filter can name it.
+     */
+    contextRef: z.string().isDBIndexed().excludeFromUpdate().default(''),
     status: z.enum(FlowsActors_Status).isDBIndexed().isSummaryField(),
     statusChanges: z.array(z.object({
         status: z.enum(FlowsActors_Status),
@@ -376,4 +418,20 @@ export const FlowActorExecutionUpdateInternalSchema = z.object({
      */
     pausedApproval: FlowActorExecutionBaseSchema.shape.pausedApproval.nullish(),
 });
+/**
+ * One string for a set of context resource identifiers — `key=value` pairs sorted by key, joined
+ * with `;`. Deterministic, so the transport that opens a conversation and the surface that lists
+ * history compute the same value from the same identifiers; `''` for none.
+ *
+ * Keys and values carry no `=` or `;` in practice (they are resource types and ids); the function
+ * does not escape, so a value that did would fold two contexts into one, never split one in two.
+ */
+export function canonicalizeFlowsActorsContextRef(identifiers) {
+    if (!identifiers)
+        return '';
+    return Object.keys(identifiers)
+        .sort()
+        .map((key) => `${key}=${identifiers[key]}`)
+        .join(';');
+}
 //# sourceMappingURL=flows-actors-execution.shared.schemas.js.map

package/dist/esm/flows-actors/flows-actors-execution.shared.schemas.js.map

@@ -1 +1 @@
-{"version":3,"file":"flows-actors-execution.shared.schemas.js","sourceRoot":"","sources":["../../../../src/flows-actors/flows-actors-execution.shared.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAEnF,OAAO,EAA2E,kBAAkB,EAAE,MAAM,uCAAuC,CAAC;AACpJ,OAAO,EAAE,yBAAyB,EAAE,MAAM,qDAAqD,CAAC;AAChG,OAAO,EAAE,oBAAoB,EAAE,MAAM,6DAA6D,CAAC;AACnG,OAAO,EAAE,oBAAoB,EAAE,MAAM,sCAAsC,CAAC;AAC5E,OAAO,EAAE,aAAa,EAAE,MAAM,gDAAgD,CAAC;AAC/E,OAAO,EACL,gBAAgB,EAChB,kCAAkC,GACnC,MAAM,gDAAgD,CAAC;AACxD,OAAO,EACL,yBAAyB,EACzB,gCAAgC,GAEjC,MAAM,kDAAkD,CAAC;AAE1D,iBAAiB,CAAC,CAAC,CAAC,CAAC;AAErB,iEAAiE;AACjE,8BAA8B;AAC9B,iEAAiE;AAEjE;;;;;GAKG;AACH,MAAM,CAAN,IAAY,4BAKX;AALD,WAAY,4BAA4B;IACtC,6CAAa,CAAA;IACb,uDAAuB,CAAA;IACvB,iDAAiB,CAAA;IACjB,6CAAa,CAAA;AACf,CAAC,EALW,4BAA4B,KAA5B,4BAA4B,QAKvC;AAED;;;;;GAKG;AACH,MAAM,CAAN,IAAY,8BAKX;AALD,WAAY,8BAA8B;IACxC,+CAAa,CAAA;IACb,uDAAqB,CAAA;IACrB,uDAAqB,CAAA;IACrB,+CAAa,CAAA;AACf,CAAC,EALW,8BAA8B,KAA9B,8BAA8B,QAKzC;AAED,MAAM,CAAC,MAAM,gCAAgC,GAAG,CAAC,CAAC,MAAM,CAAC;IACvD,wEAAwE;IACxE,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE;IACZ,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,4BAA4B,CAAC;SACvC,QAAQ,CACP,yCAAyC;UACvC,wDAAwD;UACxD,6BAA6B;UAC7B,6FAA6F;UAC7F,qDAAqD,CACxD;IACH,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC,OAAO,CAAC,8BAA8B,CAAC,IAAI,CAAC;SAC7F,QAAQ,CACP,uCAAuC;UACrC,yBAAyB;UACzB,gDAAgD;UAChD,kFAAkF;UAClF,+EAA+E,CAClF;IACH,qEAAqE;IACrE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,kFAAkF;IAClF,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;IAClD,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC;CAC9C,CAAC,CAAC;AAGH;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,uCAAuC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9D;;;;;;;;;;;;;;OAcG;IACH,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7B;;;;OAIG;IACH,gBAAgB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;IAC5D,wFAAwF;IACxF,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE;IAC3B,sFAAsF;IACtF,eAAe,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC7D,qDAAqD;IACrD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;IACvB;;;;;;;;;;;;;OAaG;IACH,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACjC,CAAC,CAAC;AAGH;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,sCAAsC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAE1E,qFAAqF;AACrF,MAAM,UAAU,gCAAgC,CAAC,KAAwC;IACvF,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;AAC/B,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,4BAA4B,CAAC,GAAW;IACtD,OAAO,uCAAuC,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;AACxE,CAAC;AAED,iEAAiE;AACjE,qEAAqE;AACrE,iEAAiE;AAEjE,8EAA8E;AAC9E,4EAA4E;AAC5E,iFAAiF;AACjF,kFAAkF;AAClF,gFAAgF;AAChF,+EAA+E;AAC/E,6EAA6E;AAC7E,+EAA+E;AAC/E,4EAA4E;AAC5E,kFAAkF;AAClF,kFAAkF;AAClF,+EAA+E;AAE/E,iEAAiE;AACjE,oEAAoE;AACpE,iEAAiE;AAEjE;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,CAAC,MAAM,CAAC;IACnD,kFAAkF;IAClF,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,EAAE;IAErC;;;;;OAKG;IACH,WAAW,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,iBAAiB,EAAE,CAAC,cAAc,EAAE;IAEvG,qDAAqD;IACrD,qEAAqE;IACrE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE,CAAC,iBAAiB,EAAE,CAAC,cAAc,EAAE;IACxE,4DAA4D;IAC5D,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC,WAAW,EAAE,CAAC,iBAAiB,EAAE,CAAC,cAAc,EAAE;IAErF,yBAAyB;IACzB;;;;;;;;;;;OAWG;IACH,yBAAyB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE;IAE1D;;;;;;;;;;;OAWG;IACH,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE;IAEpD,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,WAAW,EAAE,CAAC,cAAc,EAAE;IACjE,aAAa,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;QAC9B,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC;QAClC,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE;KACpB,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAEf,4CAA4C;IAC5C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAgCG;IACH,iGAAiG;IACjG,iGAAiG;IACjG,iGAAiG;IACjG,wFAAwF;IACxF,QAAQ,EAAE,oBAAoB,CAC9B,gCAAgC,CAAC,KAAK,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;SAC/C,qBAAqB,CAAC,yBAAyB,CAAC,gBAAgB,CAAC;QAClE,iGAAiG;QACjG,8FAA8F;SAC7F,cAAc,CAAC,oBAAoB,CAAC,YAAY,CAAC,EACpD,aAAa,CAAC,KAAK,CACpB;IAED,8CAA8C;IAC9C;;;;;OAKG;IACH;;;;;;;;;;;;;OAaG;IACH,2EAA2E;IAC3E,8EAA8E;IAC9E,8DAA8D;IAC9D,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE,CAAC,iBAAiB,EAAE,CAAC,aAAa,EAAE;IAExE,8EAA8E;IAC9E,+EAA+E;IAC/E,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,iBAAiB,EAAE,CAAC,iBAAiB,EAAE;IACrF,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,iBAAiB,EAAE,CAAC,iBAAiB,EAAE,CAAC,cAAc,EAAE;IACtG,gEAAgE;IAChE,UAAU,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE,CAAC,iBAAiB,EAAE,CAAC,cAAc,EAAE;CACrE,CAAC,CAAC;AAGH,iEAAiE;AACjE,+DAA+D;AAC/D,iEAAiE;AAEjE;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,mCAAmC,GAAmC;IACjF,EAAE,kBAAkB,EAAE,gBAAgB,CAAC,KAAK,EAAU,qBAAqB,EAAE,kCAAkC,CAAC,gBAAgB,CAAC,KAAK,CAAC,EAAU,cAAc,EAAE,IAAI,EAAE;IACvK,EAAE,kBAAkB,EAAE,gBAAgB,CAAC,aAAa,EAAE,qBAAqB,EAAE,kCAAkC,CAAC,gBAAgB,CAAC,aAAa,CAAC,EAAE,cAAc,EAAE,IAAI,EAAE;IACvK,EAAE,kBAAkB,EAAE,gBAAgB,CAAC,WAAW,EAAI,qBAAqB,EAAE,kCAAkC,CAAC,gBAAgB,CAAC,WAAW,CAAC,EAAI,cAAc,EAAE,IAAI,EAAE;CACxK,CAAC,GAAG,CAAC,gCAAgC,CAAC,CAAC;AAExC;;;;;GAKG;AACH,MAAM,CAAC,MAAM,yCAAyC,GAAG,yBAAyB,CAAC;IACjF,gBAAgB,EAAE,qBAAqB;IACvC,mBAAmB,EAAE,sBAAsB;IAC3C,WAAW,EAAE,uBAAuB;IACpC,UAAU,EAAE,4BAA4B;IACxC,QAAQ,EAAE,mCAAmC;CAC9C,CAAC,CAAC;AAEH;;;;GAIG;AACH,MAAM,CAAC,MAAM,sCAAsC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7D,MAAM,EAAE,4BAA4B,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE;IAC5D,aAAa,EAAE,4BAA4B,CAAC,KAAK,CAAC,aAAa,CAAC,QAAQ,EAAE;IAC1E,QAAQ,EAAE,4BAA4B,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,EAAE;IAChE,UAAU,EAAE,4BAA4B,CAAC,KAAK,CAAC,UAAU;IACzD;;;;;;;;;;;;;;OAcG;IACH,cAAc,EAAE,4BAA4B,CAAC,KAAK,CAAC,cAAc,CAAC,OAAO,EAAE;CAC5E,CAAC,CAAC","sourcesContent":["/**\n * Flows-Actors Execution — Persisted Resource Schema (POLYMORPHIC)\n * ================================================================\n *\n * A persisted record of a single flow/actor **system execution** — in v1 the\n * durable source of truth for a conversational chat log (`messages[]`) plus the\n * execution's lifecycle status.\n *\n * POLYMORPHIC ACROSS OWNER SCOPE. The SAME base envelope is stamped out as THREE\n * genuine single-scope resources by `declarePolymorphicSchemas()`, one owner FK\n * injected per variant:\n *   - `userFlowActorExecutions`         (USER_SELF     — `userId`)         ← WS chat + user-delegated A2A\n *   - `organizationFlowActorExecutions` (ORGANIZATIONS — `organizationId`) ← org-machine A2A\n *   - `applicationFlowActorExecutions`  (APPLICATION   — `applicationId`)  ← app-machine A2A\n *\n * A conversation is owned by EXACTLY ONE scope (its injected owner FK). There is\n * no cross-scope audit dimension on the base — ownership IS the scope. This is the\n * honest \"one concept, N owners\" model (mirrors billing accounts / subscriptions)\n * and needs ZERO core-authorizer change: each variant satisfies its own scope\n * authorizer, and `polymorphicRole` resolves the operation roles per scope. A\n * machine (API key / OIDC client) reaches its org/app variant exactly as it\n * reaches any other org/app resource — standard RBAC via its granted roles.\n *\n * KIND-AGNOSTIC BY DESIGN. A `FlowActorSystem_Kind` discriminant lets the SAME\n * resource persist both flow and actor executions. v1 implements the ACTOR\n * conversational path; the FLOW path drops in without reshaping the base envelope.\n *\n * @see flows-actors.system.shared.schemas.ts — the base execution envelope\n * @see billing-account.shared.schemas.ts — the polymorphic-scope precedent\n * @see requests/websocket.shared.schemas.ts — the streamed message payload this\n *   log mirrors (`WS_FlowsActorsMessagePayloadSchema`)\n */\n\nimport { z } from 'zod';\nimport { initZodDecorators, addImpersonalizeWith } from '@wildo-ai/zod-decorators';\n\nimport { FLOWS_ACTORS_DEFAULT_AGENT_INSTANCE, FLOWS_ACTORS_NO_MACHINE_CREDENTIAL, FlowsActors_Status } from './flows-actors.commons.shared.schemas';\nimport { DataPortabilityProvenance } from '../compliance/privacy/subject-export.shared.schemas';\nimport { PersonalDataCategory } from '../compliance/privacy/personal-data-category.shared.schemas';\nimport { FlowActorSystem_Kind } from './flows-actors.system.shared.schemas';\nimport { RedactionType } from '../compliance/privacy/redaction.shared.schemas';\nimport {\n  CoreResourceType,\n  coreResourceShared_FieldIdentifier,\n} from '../resources/resources.shared.core.definitions';\nimport {\n  declarePolymorphicSchemas,\n  optOutPolymorphicAutoBusinessKey,\n  type PolymorphicVariantDefinition,\n} from '../resources/utils/resource-polymorphism.schemas';\n\ninitZodDecorators(z);\n\n//===============================================================\n//  Conversational message log\n//===============================================================\n\n/**\n * Author of a persisted conversational message. `TOOL` records a tool-call /\n * tool-result turn (grounding retrieval); `SYSTEM` records a system/status note.\n * WS-streamed messages are always server→client, so the transport shape carries\n * no role — the persisted log adds it to reconstruct a full transcript.\n */\nexport enum FlowsActors_ConversationRole {\n  USER = 'user',\n  ASSISTANT = 'assistant',\n  SYSTEM = 'system',\n  TOOL = 'tool',\n}\n\n/**\n * Rendering hint for a message body. Mirrors the streamed\n * `WS_FlowsActorsMessagePayloadSchema.messageType` literal union exactly\n * (`text | markdown | progress | data`) as an enum so the persisted log and the\n * live stream share one vocabulary (framework rule: enums over literal unions).\n */\nexport enum FlowsActors_MessageContentType {\n  TEXT = 'text',\n  MARKDOWN = 'markdown',\n  PROGRESS = 'progress',\n  DATA = 'data',\n}\n\nexport const FlowActorExecution_MessageSchema = z.object({\n  /** Stable per-message id (client-correlatable across stream deltas). */\n  id: z.uuid(),\n  role: z.enum(FlowsActors_ConversationRole)\n    .describe(\n      'Who produced this message.\\n\\nValues:\\n'\n      + '- `user`: the person, or the client acting for them.\\n'\n      + '- `assistant`: the agent.\\n'\n      + '- `system`: instructions the agent was given, not part of the conversation a person sees.\\n'\n      + '- `tool`: the result of something the agent called.',\n    ),\n  contentType: z.enum(FlowsActors_MessageContentType).default(FlowsActors_MessageContentType.TEXT)\n    .describe(\n      'How to render `content`.\\n\\nValues:\\n'\n      + '- `text`: plain text.\\n'\n      + '- `markdown`: text with Markdown formatting.\\n'\n      + '- `progress`: an interim note about work in flight; `data` carries the detail.\\n'\n      + '- `data`: a structured payload rather than prose; read `data`, not `content`.',\n    ),\n  /** Rendered text content (may be assembled from streamed deltas). */\n  content: z.string(),\n  /** Structured payload for `DATA`/`PROGRESS` messages (tool results, progress). */\n  data: z.record(z.string(), z.unknown()).optional(),\n  createdAt: z.date().default(() => new Date()),\n});\nexport type FlowActorExecution_Message = z.infer<typeof FlowActorExecution_MessageSchema>;\n\n/**\n * The SUSPENDED-TURN state persisted when an agent turn pauses at a human-in-the-loop\n * approval boundary (execution `status` = `AWAITING_APPROVAL`). It is stored SERIALIZED as a\n * JSON string in the `pausedApproval` scalar field — NOT as a nested Zod object — because heavy\n * nested sub-structures do not round-trip through the Zod→Mongoose embedded-subdocument\n * conversion (see the per-kind state note below). Parse/serialize ONLY via the helpers below at\n * the persistence boundary; the record column itself stays a plain string.\n */\nexport const FlowActorExecution_PausedApprovalSchema = z.object({\n  /**\n   * Correlates the emitted approval REQUEST with the inbound decision (idempotency key).\n   *\n   * An OPAQUE identifier minted by the model SDK — NOT a Wildo id and NOT a UUID. It was typed\n   * `z.uuid()` on the reasonable-looking assumption that an id is a uuid, and the SDK produces\n   * values like `aitxt-3Xfhq68r7GTRXEuV1YzU4eEc`.\n   *\n   * That single wrong assumption made EVERY paused turn unresumable, and hid completely: serializing\n   * is `JSON.stringify` and does not validate, so the pause persisted perfectly; only the resume's\n   * `parse` rejected it, as a CORRUPTED blob. The turn then stayed paused forever with a\n   * \"state is unreadable\" error naming the wrong cause. Unit fixtures used a real uuid, so they were\n   * more conformant than production and could never reproduce it — the live lane found it.\n   *\n   * Validate it as an opaque non-empty string. We do not own the format and must not assert one.\n   */\n  approvalId: z.string().min(1),\n  /**\n   * The AI-SDK model-message array to RESUME from — opaque to us (the SDK's own resume\n   * contract). Captured when the approval-gated tool call suspended the stream; on the human\n   * decision the runtime appends a tool-approval-response and re-invokes with these messages.\n   */\n  sdkModelMessages: z.array(z.record(z.string(), z.unknown())),\n  /** The approval-gated tool the model wants to call (drives the human-facing prompt). */\n  pendingToolName: z.string(),\n  /** The pending tool call's arguments (drives the human-facing action description). */\n  pendingToolArgs: z.record(z.string(), z.unknown()).optional(),\n  /** ISO timestamp when the approval was requested. */\n  requestedAt: z.string(),\n  /**\n   * ISO instant after which the paused turn must not be resumed.\n   *\n   * SET ON EVERY SUSPENSION since 2026-09-08 (#465). It was declared here, carried on the\n   * approval-request WebSocket payload and read and converted by the browser, and NO WRITER EVER SET\n   * IT — so a pending approval never expired and the field described a timeout that did not exist.\n   *\n   * The terminal state on expiry is `FlowsActors_Status.FAILED`, which the status vocabulary already\n   * named (\"resolves to PROCESSING→COMPLETED on approval, or a terminal state on denial/expiry\").\n   * Nothing new was invented for it.\n   *\n   * Still optional: a suspension persisted before that date carries none, and an absent expiry means\n   * the pause does not lapse — which is what those turns were paused under.\n   */\n  expiresAt: z.string().optional(),\n});\nexport type FlowActorExecution_PausedApproval = z.infer<typeof FlowActorExecution_PausedApprovalSchema>;\n\n/**\n * How long a human has to answer an approval-gated tool call before the turn is refused.\n *\n * **24 hours.** An agent pausing for a person should span a working day plus a night, so a request\n * raised late in the afternoon is still answerable the next morning. Much beyond that and the\n * decision stops being meaningful rather than merely late: the person is approving a tool call made\n * against a conversation, a world and an intent that have all moved on, and \"do you approve this?\"\n * with no memory of the question is a prompt people click through.\n *\n * A framework default rather than an operator knob, for now. If an application ever needs its own,\n * the knob goes beside the consent lifetime in the auth config — but nobody has asked, and a\n * timeout that every application authors identically is a default wearing a config field.\n */\nexport const FLOW_ACTOR_APPROVAL_DEFAULT_TIMEOUT_MS = 24 * 60 * 60 * 1000;\n\n/** Serialize paused-approval state for the scalar `pausedApproval` string column. */\nexport function serializeFlowActorPausedApproval(state: FlowActorExecution_PausedApproval): string {\n  return JSON.stringify(state);\n}\n\n/**\n * Parse the scalar `pausedApproval` string column back to typed state. Throws (ZodError /\n * SyntaxError) on a malformed blob — a corrupted paused record must fail loudly at resume,\n * never silently resume from garbage.\n */\nexport function parseFlowActorPausedApproval(raw: string): FlowActorExecution_PausedApproval {\n  return FlowActorExecution_PausedApprovalSchema.parse(JSON.parse(raw));\n}\n\n//===============================================================\n//  Per-kind execution state (reused from the shared execution types)\n//===============================================================\n\n// NOTE (v1 scope): the persisted record is the CONVERSATIONAL envelope only —\n// `kind` + `status`/`statusChanges` + the `messages[]` chat log. The richer\n// per-kind graph-state slots (`flowState` node-states / `actorState` plan+tasks,\n// sliced from `FlowSystem_Execution` / `ActorSystem_Execution`) are intentionally\n// NOT persisted yet: the v1 conversational runtime never writes them, and those\n// heavy nested sub-structures (required `plan`/`walkthrough`/`standaloneTasks`\n// with embedded `_id`s) do not round-trip through the Zod→Mongoose embedded-\n// subdocument conversion as optional slots (empty subdocs get instantiated and\n// fail required-path validation). When the flow/actor orchestration runtime\n// actually produces graph state, add typed `flowState`/`actorState` back WITH the\n// embedded-subdocument treatment (see the zod↔mongoose nested-union / embedded-id\n// notes) rather than a raw `.pick()`. `kind` already preserves discrimination.\n\n//===============================================================\n//  Base execution record — NO owner scope FK (injected per variant)\n//===============================================================\n\n/**\n * The conversation envelope shared by every scope variant. It carries NO owner\n * scope FK: `declarePolymorphicSchemas()` injects exactly ONE (`userId` /\n * `organizationId` / `applicationId`) per variant. Do NOT add an `initiator`\n * snapshot here — a nested `initiator.userId`/`.organizationId` collides with the\n * contextual scope filter (it matches the field identifier at every schema path\n * and injects an exact-subdocument clause that never equals the stored snapshot,\n * so every scoped read/update silently matches zero rows). Ownership lives ONLY on\n * the single injected top-level owner FK.\n */\nexport const FlowActorExecutionBaseSchema = z.object({\n  /** MongoDB document id — auto-generated / auto-managed (excluded from create). */\n  _id: z.string().min(1).isPrimaryKey(),\n\n  /**\n   * Stable business id of the execution, generated by the conversational runtime\n   * and echoed over the WebSocket channel (`WS_FlowsActors*.executionId`). Unique\n   * per variant collection (a UUID — no cross-collection collision). Immutable\n   * once created.\n   */\n  executionId: z.uuid().isUnique({ scope: 'global', sparse: false }).excludeFromUpdate().isSummaryField(),\n\n  // === System identity (set on create, immutable) ===\n  /** Ref of the executed flow/actor system (`FlowActorSystem.ref`). */\n  systemRef: z.string().isDBIndexed().excludeFromUpdate().isSummaryField(),\n  /** Discriminant selecting which state slot is populated. */\n  kind: z.enum(FlowActorSystem_Kind).isDBIndexed().excludeFromUpdate().isSummaryField(),\n\n  // === Runtime status ===\n  /**\n   * WHICH agent this conversation was opened through — part of the read filter, not metadata.\n   *\n   * The task family carried this from gate #3; executions did not, so a caller holding a\n   * `contextId` could continue that thread through a DIFFERENT declared agent and load the prior\n   * transcript into the other agent's context. A2A agents are declared as separate resource servers\n   * with per-instance token audiences, and the plane at risk here holds the full message log — not\n   * a 120-character title (review finding G5-8).\n   *\n   * The WebSocket surface has no agent, and the default A2A agent is an identity of its own; both\n   * store {@link FLOWS_ACTORS_DEFAULT_AGENT_INSTANCE}.\n   */\n  resourceServerInstanceRef: z.string().min(1).isDBIndexed(),\n\n  /**\n   * WHICH machine credential opened this conversation — part of the read filter, not metadata.\n   *\n   * Identical axis and identical reasoning to the task family: the injected scope FK does not\n   * identify the principal on the machine variants (`applicationId` is a deployment singleton;\n   * `organizationId` is shared by every machine client of one tenant), so without it a\n   * separately-credentialed client could read and continue another client's conversation — which\n   * carries the full message log, not merely a title.\n   *\n   * User-delegated turns store {@link FLOWS_ACTORS_NO_MACHINE_CREDENTIAL}: the human is the\n   * principal there and the `userId` owner FK already discriminates.\n   */\n  machineCredentialId: z.string().min(1).isDBIndexed(),\n\n  status: z.enum(FlowsActors_Status).isDBIndexed().isSummaryField(),\n  statusChanges: z.array(z.object({\n    status: z.enum(FlowsActors_Status),\n    timestamp: z.date(),\n  })).default([]),\n\n  // === Conversational log (chat history) ===\n  /**\n   * The conversation transcript.\n   *\n   * ## Provenance: SUBJECT_PROVIDED, and the asymmetry is the reason (review finding F5-6)\n   *\n   * This array MIXES subject-authored turns (`role: USER`) with model-generated ones\n   * (`role: ASSISTANT`), and provenance is declared per FIELD — there is no per-element mechanism,\n   * so one classification must cover both. The two ways of being wrong are not equally bad:\n   *\n   *   • Classifying DERIVED would EXCLUDE the subject's own words from an Art. 20 bundle. That is a\n   *     failure of the right the article exists to serve.\n   *   • Classifying SUBJECT_PROVIDED includes the assistant's replies alongside them. That is\n   *     over-delivery — but of a transcript the subject was a party to and already saw, which is the\n   *     natural unit a person means by \"my conversation\".\n   *\n   * So the classification follows the ASYMMETRY, not a per-element truth we cannot express. Revisit\n   * only if per-element provenance ever exists; splitting the array by role at export time was\n   * considered and rejected as inventing a second mechanism for one field.\n   *\n   * ⚠️ **This is a LABELLING change, not a behaviour change**, and the first version of this note\n   * failed to say so. `resolvePortabilityFieldScope` maps `SUBJECT_PROVIDED` *and* `OBSERVED` to\n   * `INCLUDED`, and the resource default was already `OBSERVED` — so `messages` was in the Art. 20\n   * bundle before and after. Nothing about an export changes.\n   *\n   * The rejected alternative the first version omitted is the one that was actually in force:\n   * **`OBSERVED`** — \"data generated by the subject's USE of the service\", a defensible reading of a\n   * mixed transcript. It is rejected for precision rather than effect: the USER turns are authored\n   * BY the subject, not merely observed of them, and a classification should say the truest thing\n   * available even when two values resolve alike today.\n   *\n   * The task family's `output`/`artifacts` are DERIVED by contrast, and that is not an\n   * inconsistency: those are model output ABOUT the work, with no subject-authored content mixed in.\n   */\n  // RESET on erasure — returns this field to its schema default. It holds the conversation itself,\n  // which the category above correctly declares as personal data. RESET rather than REMOVE or MASK\n  // because the field is non-nullable WITH a `.default()`: REMOVE needs a clearable field and MASK\n  // needs a string. The value comes from the schema, so there is no second copy to drift.\n  messages: addImpersonalizeWith(\n  FlowActorExecution_MessageSchema.array().default([])\n      .portabilityProvenance(DataPortabilityProvenance.SUBJECT_PROVIDED)\n      // The conversation itself. Category as well as provenance, so a notice can enumerate it: the two\n      // axes answer different questions and a provenance alone leaves the field an OUTSTANDING gap.\n      .dataCategories(PersonalDataCategory.USER_CONTENT),\n    RedactionType.RESET,\n  ),\n\n  // === HITL (human-in-the-loop) suspension ===\n  /**\n   * Serialized {@link FlowActorExecution_PausedApproval} — present ONLY while `status` is\n   * `AWAITING_APPROVAL`. A scalar JSON string (see that schema's doc for why it is NOT a nested\n   * object: the Zod→Mongoose round-trip). Set on pause, cleared on resume / terminal completion;\n   * never authored on create.\n   */\n  /**\n   * Serialized suspended-turn state; `null` once a decision releases the pause.\n   *\n   * `.nullish()`, not `.optional()`, and the difference is load-bearing at the READ. Clearing writes\n   * an explicit `null`; the write then re-parses the row to project its response, and under\n   * `.optional()` that projection throws `expected string, received null`. The clear PERSISTS (there\n   * is no transaction to roll back) and the operation still fails — so the pause was released and\n   * the resume aborted, leaving the turn `failed` with its work never done, reported as a resource\n   * transformation error that names nothing about approvals.\n   *\n   * The input contract needing `.nullish()` (see `FlowActorExecutionUpdateInternalSchema`) is a\n   * SEPARATE surface from this one. Fixing only that gets the value written and still throws on the\n   * way out — both must admit null or neither does.\n   */\n  // This blob contains SDK resume messages and pending tool arguments. It is\n  // runtime continuation state, not conversation content: generic client reads,\n  // summaries and generated API schemas must never disclose it.\n  pausedApproval: z.string().nullish().excludeFromCreate().isBackendOnly(),\n\n  // === Timing (system-managed; defaults are load-bearing — the create pipeline\n  //     strips these then date-coerces, so a missing default → Invalid Date) ===\n  createdAt: z.date().default(() => new Date()).excludeFromCreate().excludeFromUpdate(),\n  updatedAt: z.date().default(() => new Date()).excludeFromCreate().excludeFromUpdate().isSummaryField(),\n  /** Set on terminal completion (via UPDATE); never on create. */\n  finishedAt: z.date().optional().excludeFromCreate().isSummaryField(),\n});\nexport type FlowActorExecutionBase = z.infer<typeof FlowActorExecutionBaseSchema>;\n\n//===============================================================\n//  Polymorphic declaration — one owner-scope variant per scope\n//===============================================================\n\n/**\n * The three owner-scope variants a flows-actors execution is stamped out for.\n * Each is `isPrimaryScope: true` (the injected owner FK is the primary scope), and\n * each opts OUT of the singleton auto-business-key: a conversation is MULTI-ROW\n * per scope (many discussions per user/org/app), so the injected owner FK must NOT\n * be marked `.isUnique()` — otherwise the second conversation per scope would fail\n * with a duplicate-key error. Mirrors subscriptions / usage-records / SSO\n * connections (all multi-row polymorphic resources).\n */\nexport const FLOW_ACTOR_EXECUTION_SCOPE_VARIANTS: PolymorphicVariantDefinition[] = [\n  { parentResourceType: CoreResourceType.USERS,         parentFieldIdentifier: coreResourceShared_FieldIdentifier[CoreResourceType.USERS],         isPrimaryScope: true },\n  { parentResourceType: CoreResourceType.ORGANIZATIONS, parentFieldIdentifier: coreResourceShared_FieldIdentifier[CoreResourceType.ORGANIZATIONS], isPrimaryScope: true },\n  { parentResourceType: CoreResourceType.APPLICATION,   parentFieldIdentifier: coreResourceShared_FieldIdentifier[CoreResourceType.APPLICATION],   isPrimaryScope: true },\n].map(optOutPolymorphicAutoBusinessKey);\n\n/**\n * Polymorphic declaration for flows-actors executions. Produces 3 variants:\n *   - users        → `userFlowActorExecutions`         (`userId` injected)\n *   - organizations→ `organizationFlowActorExecutions` (`organizationId` injected)\n *   - applications → `applicationFlowActorExecutions`   (`applicationId` injected)\n */\nexport const flowActorExecutionsPolymorphicDeclaration = declarePolymorphicSchemas({\n  baseResourceType: 'flowActorExecutions',\n  baseFieldIdentifier: 'flowActorExecutionId',\n  baseEnumKey: 'FLOW_ACTOR_EXECUTIONS',\n  baseSchema: FlowActorExecutionBaseSchema,\n  variants: FLOW_ACTOR_EXECUTION_SCOPE_VARIANTS,\n});\n\n/**\n * Owner-agnostic UPDATE DTO — status transitions, appended messages, completion\n * time. Shared across all variants because it references NO owner FK (owner is\n * immutable). `updatedAt` is system-managed; identity fields are `.excludeFromUpdate()`.\n */\nexport const FlowActorExecutionUpdateInternalSchema = z.object({\n  status: FlowActorExecutionBaseSchema.shape.status.optional(),\n  statusChanges: FlowActorExecutionBaseSchema.shape.statusChanges.optional(),\n  messages: FlowActorExecutionBaseSchema.shape.messages.optional(),\n  finishedAt: FlowActorExecutionBaseSchema.shape.finishedAt,\n  /**\n   * The suspended-turn state, written when a turn pauses for a human decision and cleared when one\n   * arrives.\n   *\n   * ⚠️ THIS SCHEMA IS AN ALLOW-LIST, and omitting a field here does not fail — it makes the write\n   * SUCCEED and persist nothing. `pausedApproval` was added to the base envelope when the column was\n   * introduced but never here, so every approval pause wrote its status and its messages and\n   * silently dropped the one field that makes the turn resumable. The row read back as\n   * `AWAITING_APPROVAL` with no state to resume from: a turn stuck forever, with no error anywhere.\n   * Adding a persisted field is therefore never done without adding it to this contract.\n   *\n   * `.nullish()` rather than `.optional()` because clearing is a real transition: the resume writes\n   * an explicit `null` to release the pause, and under `.optional()` that null is rejected — which\n   * would leave a resumed turn still advertising a decision nobody can answer.\n   */\n  pausedApproval: FlowActorExecutionBaseSchema.shape.pausedApproval.nullish(),\n});\n\n//===============================================================\n//  Exported runtime type\n//===============================================================\n\n/**\n * Runtime shape of a persisted execution (the base envelope). The owner FK is\n * variant-specific (`userId` | `organizationId` | `applicationId`) and read from\n * the concrete variant; the conversational runtime supplies it explicitly on create.\n */\nexport type FlowActorExecution = z.infer<typeof FlowActorExecutionBaseSchema>;\n"]}
+{"version":3,"file":"flows-actors-execution.shared.schemas.js","sourceRoot":"","sources":["../../../../src/flows-actors/flows-actors-execution.shared.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAEnF,OAAO,EAA2E,kBAAkB,EAAE,MAAM,uCAAuC,CAAC;AACpJ,OAAO,EAAE,yBAAyB,EAAE,MAAM,qDAAqD,CAAC;AAChG,OAAO,EAAE,oBAAoB,EAAE,MAAM,6DAA6D,CAAC;AACnG,OAAO,EAAE,oBAAoB,EAAE,MAAM,sCAAsC,CAAC;AAC5E,OAAO,EAAE,aAAa,EAAE,MAAM,gDAAgD,CAAC;AAC/E,OAAO,EACL,gBAAgB,EAChB,kCAAkC,GACnC,MAAM,gDAAgD,CAAC;AACxD,OAAO,EACL,yBAAyB,EACzB,gCAAgC,GAEjC,MAAM,kDAAkD,CAAC;AAE1D,iBAAiB,CAAC,CAAC,CAAC,CAAC;AAErB,iEAAiE;AACjE,8BAA8B;AAC9B,iEAAiE;AAEjE;;;;;GAKG;AACH,MAAM,CAAN,IAAY,4BAKX;AALD,WAAY,4BAA4B;IACtC,6CAAa,CAAA;IACb,uDAAuB,CAAA;IACvB,iDAAiB,CAAA;IACjB,6CAAa,CAAA;AACf,CAAC,EALW,4BAA4B,KAA5B,4BAA4B,QAKvC;AAED;;;;;GAKG;AACH,MAAM,CAAN,IAAY,8BAKX;AALD,WAAY,8BAA8B;IACxC,+CAAa,CAAA;IACb,uDAAqB,CAAA;IACrB,uDAAqB,CAAA;IACrB,+CAAa,CAAA;AACf,CAAC,EALW,8BAA8B,KAA9B,8BAA8B,QAKzC;AAED,MAAM,CAAC,MAAM,gCAAgC,GAAG,CAAC,CAAC,MAAM,CAAC;IACvD,wEAAwE;IACxE,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE;IACZ,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,4BAA4B,CAAC;SACvC,QAAQ,CACP,yCAAyC;UACvC,wDAAwD;UACxD,6BAA6B;UAC7B,6FAA6F;UAC7F,qDAAqD,CACxD;IACH,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC,OAAO,CAAC,8BAA8B,CAAC,IAAI,CAAC;SAC7F,QAAQ,CACP,uCAAuC;UACrC,yBAAyB;UACzB,gDAAgD;UAChD,kFAAkF;UAClF,+EAA+E,CAClF;IACH,qEAAqE;IACrE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,kFAAkF;IAClF,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;IAClD,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC;CAC9C,CAAC,CAAC;AAGH;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,uCAAuC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9D;;;;;;;;;;;;;;OAcG;IACH,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7B;;;;OAIG;IACH,gBAAgB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;IAC5D,wFAAwF;IACxF,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE;IAC3B,sFAAsF;IACtF,eAAe,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC7D,qDAAqD;IACrD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;IACvB;;;;;;;;;;;;;;;;;OAiBG;IACH,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACjC,CAAC,CAAC;AAGH;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,sCAAsC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAE1E,qFAAqF;AACrF,MAAM,UAAU,gCAAgC,CAAC,KAAwC;IACvF,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;AAC/B,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,4BAA4B,CAAC,GAAW;IACtD,OAAO,uCAAuC,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;AACxE,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,UAAU,+BAA+B,CAAC,MAA4D,EAAE,GAAS;IACrH,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACjD,MAAM,WAAW,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC;IACzD,OAAO,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,WAAW,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;AACtE,CAAC;AAED,iEAAiE;AACjE,qEAAqE;AACrE,iEAAiE;AAEjE,8EAA8E;AAC9E,4EAA4E;AAC5E,iFAAiF;AACjF,kFAAkF;AAClF,gFAAgF;AAChF,iEAAiE;AACjE,6EAA6E;AAC7E,+EAA+E;AAC/E,4EAA4E;AAC5E,kFAAkF;AAClF,kFAAkF;AAClF,+EAA+E;AAE/E,iEAAiE;AACjE,oEAAoE;AACpE,iEAAiE;AAEjE;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,CAAC,MAAM,CAAC;IACnD,kFAAkF;IAClF,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,EAAE;IAErC;;;;;OAKG;IACH,WAAW,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,iBAAiB,EAAE,CAAC,cAAc,EAAE;IAEvG,qDAAqD;IACrD,qEAAqE;IACrE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE,CAAC,iBAAiB,EAAE,CAAC,cAAc,EAAE;IACxE,4DAA4D;IAC5D,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC,WAAW,EAAE,CAAC,iBAAiB,EAAE,CAAC,cAAc,EAAE;IAErF,yBAAyB;IACzB;;;;;;;;;;;OAWG;IACH,yBAAyB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE;IAE1D;;;;;;;;;;;OAWG;IACH,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE;IAEpD;;;;;;;;;;;OAWG;IACH,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE,CAAC,iBAAiB,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;IAEpE,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,WAAW,EAAE,CAAC,cAAc,EAAE;IACjE,aAAa,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;QAC9B,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC;QAClC,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE;KACpB,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAEf,4CAA4C;IAC5C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAgCG;IACH,iGAAiG;IACjG,iGAAiG;IACjG,iGAAiG;IACjG,wFAAwF;IACxF,QAAQ,EAAE,oBAAoB,CAC9B,gCAAgC,CAAC,KAAK,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;SAC/C,qBAAqB,CAAC,yBAAyB,CAAC,gBAAgB,CAAC;QAClE,iGAAiG;QACjG,8FAA8F;SAC7F,cAAc,CAAC,oBAAoB,CAAC,YAAY,CAAC,EACpD,aAAa,CAAC,KAAK,CACpB;IAED,8CAA8C;IAC9C;;;;;OAKG;IACH;;;;;;;;;;;;;OAaG;IACH,2EAA2E;IAC3E,8EAA8E;IAC9E,8DAA8D;IAC9D,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE,CAAC,iBAAiB,EAAE,CAAC,aAAa,EAAE;IAExE,8EAA8E;IAC9E,+EAA+E;IAC/E,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,iBAAiB,EAAE,CAAC,iBAAiB,EAAE;IACrF,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,iBAAiB,EAAE,CAAC,iBAAiB,EAAE,CAAC,cAAc,EAAE;IACtG,gEAAgE;IAChE,UAAU,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE,CAAC,iBAAiB,EAAE,CAAC,cAAc,EAAE;CACrE,CAAC,CAAC;AAGH,iEAAiE;AACjE,+DAA+D;AAC/D,iEAAiE;AAEjE;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,mCAAmC,GAAmC;IACjF,EAAE,kBAAkB,EAAE,gBAAgB,CAAC,KAAK,EAAU,qBAAqB,EAAE,kCAAkC,CAAC,gBAAgB,CAAC,KAAK,CAAC,EAAU,cAAc,EAAE,IAAI,EAAE;IACvK,EAAE,kBAAkB,EAAE,gBAAgB,CAAC,aAAa,EAAE,qBAAqB,EAAE,kCAAkC,CAAC,gBAAgB,CAAC,aAAa,CAAC,EAAE,cAAc,EAAE,IAAI,EAAE;IACvK,EAAE,kBAAkB,EAAE,gBAAgB,CAAC,WAAW,EAAI,qBAAqB,EAAE,kCAAkC,CAAC,gBAAgB,CAAC,WAAW,CAAC,EAAI,cAAc,EAAE,IAAI,EAAE;CACxK,CAAC,GAAG,CAAC,gCAAgC,CAAC,CAAC;AAExC;;;;;GAKG;AACH,MAAM,CAAC,MAAM,yCAAyC,GAAG,yBAAyB,CAAC;IACjF,gBAAgB,EAAE,qBAAqB;IACvC,mBAAmB,EAAE,sBAAsB;IAC3C,WAAW,EAAE,uBAAuB;IACpC,UAAU,EAAE,4BAA4B;IACxC,QAAQ,EAAE,mCAAmC;CAC9C,CAAC,CAAC;AAEH;;;;GAIG;AACH,MAAM,CAAC,MAAM,sCAAsC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7D,MAAM,EAAE,4BAA4B,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE;IAC5D,aAAa,EAAE,4BAA4B,CAAC,KAAK,CAAC,aAAa,CAAC,QAAQ,EAAE;IAC1E,QAAQ,EAAE,4BAA4B,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,EAAE;IAChE,UAAU,EAAE,4BAA4B,CAAC,KAAK,CAAC,UAAU;IACzD;;;;;;;;;;;;;;OAcG;IACH,cAAc,EAAE,4BAA4B,CAAC,KAAK,CAAC,cAAc,CAAC,OAAO,EAAE;CAC5E,CAAC,CAAC;AAaH;;;;;;;GAOG;AACH,MAAM,UAAU,iCAAiC,CAAC,WAAyD;IACzG,IAAI,CAAC,WAAW;QAAE,OAAO,EAAE,CAAC;IAC5B,OAAO,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC;SAC5B,IAAI,EAAE;SACN,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,GAAG,IAAI,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;SAC1C,IAAI,CAAC,GAAG,CAAC,CAAC;AACf,CAAC","sourcesContent":["/**\n * Flows-Actors Execution — Persisted Resource Schema (POLYMORPHIC)\n * ================================================================\n *\n * A persisted record of a single flow/actor **system execution** — in v1 the\n * durable source of truth for a conversational chat log (`messages[]`) plus the\n * execution's lifecycle status.\n *\n * POLYMORPHIC ACROSS OWNER SCOPE. The SAME base envelope is stamped out as THREE\n * genuine single-scope resources by `declarePolymorphicSchemas()`, one owner FK\n * injected per variant:\n *   - `userFlowActorExecutions`         (USER_SELF     — `userId`)         ← WS chat + user-delegated A2A\n *   - `organizationFlowActorExecutions` (ORGANIZATIONS — `organizationId`) ← org-machine A2A\n *   - `applicationFlowActorExecutions`  (APPLICATION   — `applicationId`)  ← app-machine A2A\n *\n * A conversation is owned by EXACTLY ONE scope (its injected owner FK). There is\n * no cross-scope audit dimension on the base — ownership IS the scope. This is the\n * honest \"one concept, N owners\" model (mirrors billing accounts / subscriptions)\n * and needs ZERO core-authorizer change: each variant satisfies its own scope\n * authorizer, and `polymorphicRole` resolves the operation roles per scope. A\n * machine (API key / OIDC client) reaches its org/app variant exactly as it\n * reaches any other org/app resource — standard RBAC via its granted roles.\n *\n * KIND-AGNOSTIC BY DESIGN. A `FlowActorSystem_Kind` discriminant lets the SAME\n * resource persist both flow and actor executions. v1 implements the ACTOR\n * conversational path; the FLOW path drops in without reshaping the base envelope.\n *\n * @see flows-actors.system.shared.schemas.ts — the base execution envelope\n * @see billing-account.shared.schemas.ts — the polymorphic-scope precedent\n * @see requests/websocket.shared.schemas.ts — the streamed message payload this\n *   log mirrors (`WS_FlowsActorsMessagePayloadSchema`)\n */\n\nimport { z } from 'zod';\nimport { initZodDecorators, addImpersonalizeWith } from '@wildo-ai/zod-decorators';\n\nimport { FLOWS_ACTORS_DEFAULT_AGENT_INSTANCE, FLOWS_ACTORS_NO_MACHINE_CREDENTIAL, FlowsActors_Status } from './flows-actors.commons.shared.schemas';\nimport { DataPortabilityProvenance } from '../compliance/privacy/subject-export.shared.schemas';\nimport { PersonalDataCategory } from '../compliance/privacy/personal-data-category.shared.schemas';\nimport { FlowActorSystem_Kind } from './flows-actors.system.shared.schemas';\nimport { RedactionType } from '../compliance/privacy/redaction.shared.schemas';\nimport {\n  CoreResourceType,\n  coreResourceShared_FieldIdentifier,\n} from '../resources/resources.shared.core.definitions';\nimport {\n  declarePolymorphicSchemas,\n  optOutPolymorphicAutoBusinessKey,\n  type PolymorphicVariantDefinition,\n} from '../resources/utils/resource-polymorphism.schemas';\n\ninitZodDecorators(z);\n\n//===============================================================\n//  Conversational message log\n//===============================================================\n\n/**\n * Author of a persisted conversational message. `TOOL` records a tool-call /\n * tool-result turn (grounding retrieval); `SYSTEM` records a system/status note.\n * WS-streamed messages are always server→client, so the transport shape carries\n * no role — the persisted log adds it to reconstruct a full transcript.\n */\nexport enum FlowsActors_ConversationRole {\n  USER = 'user',\n  ASSISTANT = 'assistant',\n  SYSTEM = 'system',\n  TOOL = 'tool',\n}\n\n/**\n * Rendering hint for a message body. Mirrors the streamed\n * `WS_FlowsActorsMessagePayloadSchema.messageType` literal union exactly\n * (`text | markdown | progress | data`) as an enum so the persisted log and the\n * live stream share one vocabulary (framework rule: enums over literal unions).\n */\nexport enum FlowsActors_MessageContentType {\n  TEXT = 'text',\n  MARKDOWN = 'markdown',\n  PROGRESS = 'progress',\n  DATA = 'data',\n}\n\nexport const FlowActorExecution_MessageSchema = z.object({\n  /** Stable per-message id (client-correlatable across stream deltas). */\n  id: z.uuid(),\n  role: z.enum(FlowsActors_ConversationRole)\n    .describe(\n      'Who produced this message.\\n\\nValues:\\n'\n      + '- `user`: the person, or the client acting for them.\\n'\n      + '- `assistant`: the agent.\\n'\n      + '- `system`: instructions the agent was given, not part of the conversation a person sees.\\n'\n      + '- `tool`: the result of something the agent called.',\n    ),\n  contentType: z.enum(FlowsActors_MessageContentType).default(FlowsActors_MessageContentType.TEXT)\n    .describe(\n      'How to render `content`.\\n\\nValues:\\n'\n      + '- `text`: plain text.\\n'\n      + '- `markdown`: text with Markdown formatting.\\n'\n      + '- `progress`: an interim note about work in flight; `data` carries the detail.\\n'\n      + '- `data`: a structured payload rather than prose; read `data`, not `content`.',\n    ),\n  /** Rendered text content (may be assembled from streamed deltas). */\n  content: z.string(),\n  /** Structured payload for `DATA`/`PROGRESS` messages (tool results, progress). */\n  data: z.record(z.string(), z.unknown()).optional(),\n  createdAt: z.date().default(() => new Date()),\n});\nexport type FlowActorExecution_Message = z.infer<typeof FlowActorExecution_MessageSchema>;\n\n/**\n * The SUSPENDED-TURN state persisted when an agent turn pauses at a human-in-the-loop\n * approval boundary (execution `status` = `AWAITING_APPROVAL`). It is stored SERIALIZED as a\n * JSON string in the `pausedApproval` scalar field — NOT as a nested Zod object — because heavy\n * nested sub-structures do not round-trip through the Zod→Mongoose embedded-subdocument\n * conversion (see the per-kind state note below). Parse/serialize ONLY via the helpers below at\n * the persistence boundary; the record column itself stays a plain string.\n */\nexport const FlowActorExecution_PausedApprovalSchema = z.object({\n  /**\n   * Correlates the emitted approval REQUEST with the inbound decision (idempotency key).\n   *\n   * An OPAQUE identifier minted by the model SDK — NOT a Wildo id and NOT a UUID. It was typed\n   * `z.uuid()` on the reasonable-looking assumption that an id is a uuid, and the SDK produces\n   * values like `aitxt-3Xfhq68r7GTRXEuV1YzU4eEc`.\n   *\n   * That single wrong assumption made EVERY paused turn unresumable, and hid completely: serializing\n   * is `JSON.stringify` and does not validate, so the pause persisted perfectly; only the resume's\n   * `parse` rejected it, as a CORRUPTED blob. The turn then stayed paused forever with a\n   * \"state is unreadable\" error naming the wrong cause. Unit fixtures used a real uuid, so they were\n   * more conformant than production and could never reproduce it — the live lane found it.\n   *\n   * Validate it as an opaque non-empty string. We do not own the format and must not assert one.\n   */\n  approvalId: z.string().min(1),\n  /**\n   * The AI-SDK model-message array to RESUME from — opaque to us (the SDK's own resume\n   * contract). Captured when the approval-gated tool call suspended the stream; on the human\n   * decision the runtime appends a tool-approval-response and re-invokes with these messages.\n   */\n  sdkModelMessages: z.array(z.record(z.string(), z.unknown())),\n  /** The approval-gated tool the model wants to call (drives the human-facing prompt). */\n  pendingToolName: z.string(),\n  /** The pending tool call's arguments (drives the human-facing action description). */\n  pendingToolArgs: z.record(z.string(), z.unknown()).optional(),\n  /** ISO timestamp when the approval was requested. */\n  requestedAt: z.string(),\n  /**\n   * ISO instant after which the paused turn must not be resumed.\n   *\n   * SET ON EVERY SUSPENSION since 2026-09-08 (#465). It was declared here, carried on the\n   * approval-request WebSocket payload and read and converted by the browser, and NO WRITER EVER SET\n   * IT — so a pending approval never expired and the field described a timeout that did not exist.\n   *\n   * The terminal state on expiry is `FlowsActors_Status.FAILED`, which the status vocabulary already\n   * names for it. Nothing new was invented. Two producers write it and both read \"lapsed\" from\n   * {@link isFlowActorPausedApprovalLapsed}: the refusal of a decision that arrives too late, and the\n   * hourly sweep that fails a pause nobody answered (#484).\n   *\n   * (That vocabulary's doc used to say a DENIAL was terminal too. It is not — a denial resumes the\n   * turn so the model can answer the refusal — and the doc was corrected in the same change.)\n   *\n   * Still optional: a suspension persisted before that date carries none, and an absent expiry means\n   * the pause does not lapse — which is what those turns were paused under.\n   */\n  expiresAt: z.string().optional(),\n});\nexport type FlowActorExecution_PausedApproval = z.infer<typeof FlowActorExecution_PausedApprovalSchema>;\n\n/**\n * How long a human has to answer an approval-gated tool call before the turn is refused.\n *\n * **24 hours.** An agent pausing for a person should span a working day plus a night, so a request\n * raised late in the afternoon is still answerable the next morning. Much beyond that and the\n * decision stops being meaningful rather than merely late: the person is approving a tool call made\n * against a conversation, a world and an intent that have all moved on, and \"do you approve this?\"\n * with no memory of the question is a prompt people click through.\n *\n * A framework default rather than an operator knob, for now. If an application ever needs its own,\n * the knob goes beside the consent lifetime in the auth config — but nobody has asked, and a\n * timeout that every application authors identically is a default wearing a config field.\n */\nexport const FLOW_ACTOR_APPROVAL_DEFAULT_TIMEOUT_MS = 24 * 60 * 60 * 1000;\n\n/** Serialize paused-approval state for the scalar `pausedApproval` string column. */\nexport function serializeFlowActorPausedApproval(state: FlowActorExecution_PausedApproval): string {\n  return JSON.stringify(state);\n}\n\n/**\n * Parse the scalar `pausedApproval` string column back to typed state. Throws (ZodError /\n * SyntaxError) on a malformed blob — a corrupted paused record must fail loudly at resume,\n * never silently resume from garbage.\n */\nexport function parseFlowActorPausedApproval(raw: string): FlowActorExecution_PausedApproval {\n  return FlowActorExecution_PausedApprovalSchema.parse(JSON.parse(raw));\n}\n\n/**\n * Whether a paused turn's approval window has CLOSED at `now` — the ONE definition of \"lapsed\".\n *\n * Two consumers act on it and neither may re-derive it (#484): the approval-response path, which\n * refuses a decision that arrives too late, and the scheduled sweep that fails a pause nobody ever\n * answered. Written twice, they would drift at exactly the boundary that matters — one inclusive,\n * one exclusive — and a decision arriving on the instant would be refused by one and resumed by the\n * other.\n *\n * - **Inclusive at the instant.** `expiresAt` is the moment after which the turn \"must not be\n *   resumed\", so at `expiresAt` itself the window is already closed.\n * - **An absent expiry never lapses.** A suspension persisted before #465 carries none, and those\n *   turns were paused under a contract with no timeout. Inventing one retroactively would fail them\n *   on a rule they were never given.\n * - **An unparseable instant never lapses.** `new Date('garbage')` is `NaN`, every comparison with\n *   which is false. Failing a turn on a value nobody can read would turn a corrupted field into a\n *   destroyed conversation; leaving it paused keeps it recoverable, and the resume path already\n *   refuses a blob it cannot parse.\n */\nexport function isFlowActorPausedApprovalLapsed(paused: Pick<FlowActorExecution_PausedApproval, 'expiresAt'>, now: Date): boolean {\n  if (paused.expiresAt === undefined) return false;\n  const expiresAtMs = new Date(paused.expiresAt).getTime();\n  return Number.isFinite(expiresAtMs) && expiresAtMs <= now.getTime();\n}\n\n//===============================================================\n//  Per-kind execution state (reused from the shared execution types)\n//===============================================================\n\n// NOTE (v1 scope): the persisted record is the CONVERSATIONAL envelope only —\n// `kind` + `status`/`statusChanges` + the `messages[]` chat log. The richer\n// per-kind graph-state slots (`flowState` node-states / `actorState` plan+tasks,\n// sliced from `FlowSystem_Execution` / `ActorSystem_Execution`) are intentionally\n// NOT persisted yet: the v1 conversational runtime never writes them, and those\n// heavy nested sub-structures (required `plan`/`standaloneTasks`\n// with embedded `_id`s) do not round-trip through the Zod→Mongoose embedded-\n// subdocument conversion as optional slots (empty subdocs get instantiated and\n// fail required-path validation). When the flow/actor orchestration runtime\n// actually produces graph state, add typed `flowState`/`actorState` back WITH the\n// embedded-subdocument treatment (see the zod↔mongoose nested-union / embedded-id\n// notes) rather than a raw `.pick()`. `kind` already preserves discrimination.\n\n//===============================================================\n//  Base execution record — NO owner scope FK (injected per variant)\n//===============================================================\n\n/**\n * The conversation envelope shared by every scope variant. It carries NO owner\n * scope FK: `declarePolymorphicSchemas()` injects exactly ONE (`userId` /\n * `organizationId` / `applicationId`) per variant. Do NOT add an `initiator`\n * snapshot here — a nested `initiator.userId`/`.organizationId` collides with the\n * contextual scope filter (it matches the field identifier at every schema path\n * and injects an exact-subdocument clause that never equals the stored snapshot,\n * so every scoped read/update silently matches zero rows). Ownership lives ONLY on\n * the single injected top-level owner FK.\n */\nexport const FlowActorExecutionBaseSchema = z.object({\n  /** MongoDB document id — auto-generated / auto-managed (excluded from create). */\n  _id: z.string().min(1).isPrimaryKey(),\n\n  /**\n   * Stable business id of the execution, generated by the conversational runtime\n   * and echoed over the WebSocket channel (`WS_FlowsActors*.executionId`). Unique\n   * per variant collection (a UUID — no cross-collection collision). Immutable\n   * once created.\n   */\n  executionId: z.uuid().isUnique({ scope: 'global', sparse: false }).excludeFromUpdate().isSummaryField(),\n\n  // === System identity (set on create, immutable) ===\n  /** Ref of the executed flow/actor system (`FlowActorSystem.ref`). */\n  systemRef: z.string().isDBIndexed().excludeFromUpdate().isSummaryField(),\n  /** Discriminant selecting which state slot is populated. */\n  kind: z.enum(FlowActorSystem_Kind).isDBIndexed().excludeFromUpdate().isSummaryField(),\n\n  // === Runtime status ===\n  /**\n   * WHICH agent this conversation was opened through — part of the read filter, not metadata.\n   *\n   * The task family carried this from gate #3; executions did not, so a caller holding a\n   * `contextId` could continue that thread through a DIFFERENT declared agent and load the prior\n   * transcript into the other agent's context. A2A agents are declared as separate resource servers\n   * with per-instance token audiences, and the plane at risk here holds the full message log — not\n   * a 120-character title (review finding G5-8).\n   *\n   * The WebSocket surface has no agent, and the default A2A agent is an identity of its own; both\n   * store {@link FLOWS_ACTORS_DEFAULT_AGENT_INSTANCE}.\n   */\n  resourceServerInstanceRef: z.string().min(1).isDBIndexed(),\n\n  /**\n   * WHICH machine credential opened this conversation — part of the read filter, not metadata.\n   *\n   * Identical axis and identical reasoning to the task family: the injected scope FK does not\n   * identify the principal on the machine variants (`applicationId` is a deployment singleton;\n   * `organizationId` is shared by every machine client of one tenant), so without it a\n   * separately-credentialed client could read and continue another client's conversation — which\n   * carries the full message log, not merely a title.\n   *\n   * User-delegated turns store {@link FLOWS_ACTORS_NO_MACHINE_CREDENTIAL}: the human is the\n   * principal there and the `userId` owner FK already discriminates.\n   */\n  machineCredentialId: z.string().min(1).isDBIndexed(),\n\n  /**\n   * WHICH context this conversation was opened in — the client's `contextResourceIdentifiers` on\n   * `FLOWS_ACTORS_START`, folded into one indexed string by {@link canonicalizeFlowsActorsContextRef}\n   * so history can list by it with plain equality on every adapter. Set on create, immutable.\n   *\n   * It is a PARTITION, not an access filter: the owner FK, the agent instance and the machine\n   * credential above decide who may read a row; this decides which of a caller's own threads belong\n   * to the surface asking. Without it every thread a user ever opened against a system lists\n   * together, whatever it was about — measured 2026-09-22 on a tool that hosts one system for\n   * several applications sharing one database, where the threads of one application appeared in\n   * the next (#1454). `''` is \"no context\", never absent, so the equality filter can name it.\n   */\n  contextRef: z.string().isDBIndexed().excludeFromUpdate().default(''),\n\n  status: z.enum(FlowsActors_Status).isDBIndexed().isSummaryField(),\n  statusChanges: z.array(z.object({\n    status: z.enum(FlowsActors_Status),\n    timestamp: z.date(),\n  })).default([]),\n\n  // === Conversational log (chat history) ===\n  /**\n   * The conversation transcript.\n   *\n   * ## Provenance: SUBJECT_PROVIDED, and the asymmetry is the reason (review finding F5-6)\n   *\n   * This array MIXES subject-authored turns (`role: USER`) with model-generated ones\n   * (`role: ASSISTANT`), and provenance is declared per FIELD — there is no per-element mechanism,\n   * so one classification must cover both. The two ways of being wrong are not equally bad:\n   *\n   *   • Classifying DERIVED would EXCLUDE the subject's own words from an Art. 20 bundle. That is a\n   *     failure of the right the article exists to serve.\n   *   • Classifying SUBJECT_PROVIDED includes the assistant's replies alongside them. That is\n   *     over-delivery — but of a transcript the subject was a party to and already saw, which is the\n   *     natural unit a person means by \"my conversation\".\n   *\n   * So the classification follows the ASYMMETRY, not a per-element truth we cannot express. Revisit\n   * only if per-element provenance ever exists; splitting the array by role at export time was\n   * considered and rejected as inventing a second mechanism for one field.\n   *\n   * ⚠️ **This is a LABELLING change, not a behaviour change**, and the first version of this note\n   * failed to say so. `resolvePortabilityFieldScope` maps `SUBJECT_PROVIDED` *and* `OBSERVED` to\n   * `INCLUDED`, and the resource default was already `OBSERVED` — so `messages` was in the Art. 20\n   * bundle before and after. Nothing about an export changes.\n   *\n   * The rejected alternative the first version omitted is the one that was actually in force:\n   * **`OBSERVED`** — \"data generated by the subject's USE of the service\", a defensible reading of a\n   * mixed transcript. It is rejected for precision rather than effect: the USER turns are authored\n   * BY the subject, not merely observed of them, and a classification should say the truest thing\n   * available even when two values resolve alike today.\n   *\n   * The task family's `output`/`artifacts` are DERIVED by contrast, and that is not an\n   * inconsistency: those are model output ABOUT the work, with no subject-authored content mixed in.\n   */\n  // RESET on erasure — returns this field to its schema default. It holds the conversation itself,\n  // which the category above correctly declares as personal data. RESET rather than REMOVE or MASK\n  // because the field is non-nullable WITH a `.default()`: REMOVE needs a clearable field and MASK\n  // needs a string. The value comes from the schema, so there is no second copy to drift.\n  messages: addImpersonalizeWith(\n  FlowActorExecution_MessageSchema.array().default([])\n      .portabilityProvenance(DataPortabilityProvenance.SUBJECT_PROVIDED)\n      // The conversation itself. Category as well as provenance, so a notice can enumerate it: the two\n      // axes answer different questions and a provenance alone leaves the field an OUTSTANDING gap.\n      .dataCategories(PersonalDataCategory.USER_CONTENT),\n    RedactionType.RESET,\n  ),\n\n  // === HITL (human-in-the-loop) suspension ===\n  /**\n   * Serialized {@link FlowActorExecution_PausedApproval} — present ONLY while `status` is\n   * `AWAITING_APPROVAL`. A scalar JSON string (see that schema's doc for why it is NOT a nested\n   * object: the Zod→Mongoose round-trip). Set on pause, cleared on resume / terminal completion;\n   * never authored on create.\n   */\n  /**\n   * Serialized suspended-turn state; `null` once a decision releases the pause.\n   *\n   * `.nullish()`, not `.optional()`, and the difference is load-bearing at the READ. Clearing writes\n   * an explicit `null`; the write then re-parses the row to project its response, and under\n   * `.optional()` that projection throws `expected string, received null`. The clear PERSISTS (there\n   * is no transaction to roll back) and the operation still fails — so the pause was released and\n   * the resume aborted, leaving the turn `failed` with its work never done, reported as a resource\n   * transformation error that names nothing about approvals.\n   *\n   * The input contract needing `.nullish()` (see `FlowActorExecutionUpdateInternalSchema`) is a\n   * SEPARATE surface from this one. Fixing only that gets the value written and still throws on the\n   * way out — both must admit null or neither does.\n   */\n  // This blob contains SDK resume messages and pending tool arguments. It is\n  // runtime continuation state, not conversation content: generic client reads,\n  // summaries and generated API schemas must never disclose it.\n  pausedApproval: z.string().nullish().excludeFromCreate().isBackendOnly(),\n\n  // === Timing (system-managed; defaults are load-bearing — the create pipeline\n  //     strips these then date-coerces, so a missing default → Invalid Date) ===\n  createdAt: z.date().default(() => new Date()).excludeFromCreate().excludeFromUpdate(),\n  updatedAt: z.date().default(() => new Date()).excludeFromCreate().excludeFromUpdate().isSummaryField(),\n  /** Set on terminal completion (via UPDATE); never on create. */\n  finishedAt: z.date().optional().excludeFromCreate().isSummaryField(),\n});\nexport type FlowActorExecutionBase = z.infer<typeof FlowActorExecutionBaseSchema>;\n\n//===============================================================\n//  Polymorphic declaration — one owner-scope variant per scope\n//===============================================================\n\n/**\n * The three owner-scope variants a flows-actors execution is stamped out for.\n * Each is `isPrimaryScope: true` (the injected owner FK is the primary scope), and\n * each opts OUT of the singleton auto-business-key: a conversation is MULTI-ROW\n * per scope (many discussions per user/org/app), so the injected owner FK must NOT\n * be marked `.isUnique()` — otherwise the second conversation per scope would fail\n * with a duplicate-key error. Mirrors subscriptions / usage-records / SSO\n * connections (all multi-row polymorphic resources).\n */\nexport const FLOW_ACTOR_EXECUTION_SCOPE_VARIANTS: PolymorphicVariantDefinition[] = [\n  { parentResourceType: CoreResourceType.USERS,         parentFieldIdentifier: coreResourceShared_FieldIdentifier[CoreResourceType.USERS],         isPrimaryScope: true },\n  { parentResourceType: CoreResourceType.ORGANIZATIONS, parentFieldIdentifier: coreResourceShared_FieldIdentifier[CoreResourceType.ORGANIZATIONS], isPrimaryScope: true },\n  { parentResourceType: CoreResourceType.APPLICATION,   parentFieldIdentifier: coreResourceShared_FieldIdentifier[CoreResourceType.APPLICATION],   isPrimaryScope: true },\n].map(optOutPolymorphicAutoBusinessKey);\n\n/**\n * Polymorphic declaration for flows-actors executions. Produces 3 variants:\n *   - users        → `userFlowActorExecutions`         (`userId` injected)\n *   - organizations→ `organizationFlowActorExecutions` (`organizationId` injected)\n *   - applications → `applicationFlowActorExecutions`   (`applicationId` injected)\n */\nexport const flowActorExecutionsPolymorphicDeclaration = declarePolymorphicSchemas({\n  baseResourceType: 'flowActorExecutions',\n  baseFieldIdentifier: 'flowActorExecutionId',\n  baseEnumKey: 'FLOW_ACTOR_EXECUTIONS',\n  baseSchema: FlowActorExecutionBaseSchema,\n  variants: FLOW_ACTOR_EXECUTION_SCOPE_VARIANTS,\n});\n\n/**\n * Owner-agnostic UPDATE DTO — status transitions, appended messages, completion\n * time. Shared across all variants because it references NO owner FK (owner is\n * immutable). `updatedAt` is system-managed; identity fields are `.excludeFromUpdate()`.\n */\nexport const FlowActorExecutionUpdateInternalSchema = z.object({\n  status: FlowActorExecutionBaseSchema.shape.status.optional(),\n  statusChanges: FlowActorExecutionBaseSchema.shape.statusChanges.optional(),\n  messages: FlowActorExecutionBaseSchema.shape.messages.optional(),\n  finishedAt: FlowActorExecutionBaseSchema.shape.finishedAt,\n  /**\n   * The suspended-turn state, written when a turn pauses for a human decision and cleared when one\n   * arrives.\n   *\n   * ⚠️ THIS SCHEMA IS AN ALLOW-LIST, and omitting a field here does not fail — it makes the write\n   * SUCCEED and persist nothing. `pausedApproval` was added to the base envelope when the column was\n   * introduced but never here, so every approval pause wrote its status and its messages and\n   * silently dropped the one field that makes the turn resumable. The row read back as\n   * `AWAITING_APPROVAL` with no state to resume from: a turn stuck forever, with no error anywhere.\n   * Adding a persisted field is therefore never done without adding it to this contract.\n   *\n   * `.nullish()` rather than `.optional()` because clearing is a real transition: the resume writes\n   * an explicit `null` to release the pause, and under `.optional()` that null is rejected — which\n   * would leave a resumed turn still advertising a decision nobody can answer.\n   */\n  pausedApproval: FlowActorExecutionBaseSchema.shape.pausedApproval.nullish(),\n});\n\n//===============================================================\n//  Exported runtime type\n//===============================================================\n\n/**\n * Runtime shape of a persisted execution (the base envelope). The owner FK is\n * variant-specific (`userId` | `organizationId` | `applicationId`) and read from\n * the concrete variant; the conversational runtime supplies it explicitly on create.\n */\nexport type FlowActorExecution = z.infer<typeof FlowActorExecutionBaseSchema>;\n\n/**\n * One string for a set of context resource identifiers — `key=value` pairs sorted by key, joined\n * with `;`. Deterministic, so the transport that opens a conversation and the surface that lists\n * history compute the same value from the same identifiers; `''` for none.\n *\n * Keys and values carry no `=` or `;` in practice (they are resource types and ids); the function\n * does not escape, so a value that did would fold two contexts into one, never split one in two.\n */\nexport function canonicalizeFlowsActorsContextRef(identifiers: Readonly<Record<string, string>> | undefined): string {\n  if (!identifiers) return '';\n  return Object.keys(identifiers)\n    .sort()\n    .map((key) => `${key}=${identifiers[key]}`)\n    .join(';');\n}\n"]}

package/dist/esm/flows-actors/flows-actors-task.shared.schemas.d.ts

@@ -48,7 +48,7 @@ import { FlowsActors_Status } from './flows-actors.commons.shared.schemas';
 import { type PolymorphicVariantDefinition } from '../resources/utils/resource-polymorphism.schemas';
 export declare const FlowActorTaskBaseSchema: z.ZodObject<{
     description: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodOptional<z.ZodString>>>;
-    topic: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodOptional<z.ZodEnum<typeof import("./tasks.actors.shared.schemas").Actor_Task_Topics>>>>;
+    topic: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodOptional<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodEnum<typeof import("./tasks.actors.shared.schemas").Actor_Task_Topics>>>>>;
     input: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodOptional<z.ZodAny>>>;
     output: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodOptional<z.ZodOptional<z.ZodAny>>>>;
     artifacts: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodOptional<z.ZodOptional<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
@@ -182,7 +182,7 @@ export declare const FLOW_ACTOR_TASK_SCOPE_VARIANTS: PolymorphicVariantDefinitio
  */
 export declare const flowActorTasksPolymorphicDeclaration: import("..").PolymorphicSchemaDeclaration<z.ZodObject<{
     description: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodOptional<z.ZodString>>>;
-    topic: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodOptional<z.ZodEnum<typeof import("./tasks.actors.shared.schemas").Actor_Task_Topics>>>>;
+    topic: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodOptional<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodEnum<typeof import("./tasks.actors.shared.schemas").Actor_Task_Topics>>>>>;
     input: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodOptional<z.ZodAny>>>;
     output: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodOptional<z.ZodOptional<z.ZodAny>>>>;
     artifacts: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodOptional<z.ZodOptional<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{

package/dist/esm/flows-actors/flows-actors.commons.shared.schemas.d.ts

@@ -17,9 +17,23 @@ export declare enum FlowsActors_Status {
      * an approval-gated tool, the run state is persisted (see `pausedApproval` on the
      * execution record), and the runtime is waiting for a decision — a
      * `FLOWS_ACTORS_APPROVAL_RESPONSE` over WebSocket, or an A2A `input-required` task
-     * resolution. NON-terminal: resolves to PROCESSING→COMPLETED on approval, or a
-     * terminal state on denial/expiry. Machine (org/app) turns never enter this state —
+     * resolution. NON-terminal. A decision — approval OR denial — resumes it to PROCESSING
+     * (a denial resumes so the agent can answer the refusal; it is not a cancellation). A
+     * pause whose `expiresAt` passes unanswered becomes FAILED: refused at a late decision,
+     * or failed by the hourly `approval-pause-expiry-sweep` (#484). Machine (org/app) turns never enter this state —
      * approval-gated tools are auto-denied for them (HITL is user-delegated-only in v1).
+     *
+     * ## The same status on the ACTOR-SYSTEM plane, where the decision is a `HumanDecision_Request` (#1360)
+     *
+     * An actor-system execution the engine's driver runs may also stop to ask a person — a mid-run
+     * clarification, a parked question — and it waits in THIS status, with the pending decision and the
+     * resume inputs on the row (`ActorSystem_Execution.suspension` / `.checkpoint`). It is one concept,
+     * not two: an approval is the special case of a human decision with no fields and approve/deny
+     * options (#1269), and A2A already projects this member to `input-required`, which is the general
+     * meaning. What differs by plane is the MECHANISM, not the state: the conversational plane resumes
+     * an agent stream from `pausedApproval` and sweeps lapsed windows hourly; the actor-system plane
+     * resumes a host executor from a checkpoint and is swept by nothing, because its decisions carry no
+     * window unless the request declares one. The member's NAME is narrower than its meaning.
      */
     AWAITING_APPROVAL = "awaiting_approval",
     COMPLETED = "completed",
@@ -204,11 +218,6 @@ export declare const FlowsActors_Event_TemplateSchema: z.ZodObject<{
     payloadMapping: z.ZodRecord<z.ZodString, z.ZodString>;
 }, z.core.$strip>;
 export type FlowsActors_Event_Template = z.infer<typeof FlowsActors_Event_TemplateSchema>;
-export declare enum FlowsActors_CircuitBreaker_Status {
-    CLOSED = "closed",// circuit is closed, requests are allowed
-    OPEN = "open",// circuit is open, requests are blocked
-    HALF_OPEN = "half_open"
-}
 export declare const FlowsActors_Checkpoint_Schema: z.ZodObject<{
     point: z.ZodDiscriminatedUnion<[z.ZodObject<{
         kind: z.ZodLiteral<FlowsActors_ElementKind.ACTOR>;
@@ -233,7 +242,6 @@ export declare const FlowsActors_Checkpoint_Schema: z.ZodObject<{
 }, z.core.$strip>;
 export type FlowsActors_Checkpoint = z.infer<typeof FlowsActors_Checkpoint_Schema>;
 export declare const FlowsActors_Error_State_BaseSchema: z.ZodObject<{
-    circuitBreakerStatus: z.ZodOptional<z.ZodEnum<typeof FlowsActors_CircuitBreaker_Status>>;
     error: z.ZodOptional<z.ZodObject<{
         type: z.ZodEnum<typeof import("..").ErrorType>;
         severity: z.ZodEnum<typeof import("..").ErrorSeverity>;

package/dist/esm/flows-actors/flows-actors.commons.shared.schemas.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"flows-actors.commons.shared.schemas.d.ts","sourceRoot":"","sources":["../../../../src/flows-actors/flows-actors.commons.shared.schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AASxB,oBAAY,uBAAuB;IACjC,IAAI,SAAS;IACb,KAAK,UAAU;IACf,YAAY,iBAAiB;IAC7B,SAAS,cAAc;IACvB,IAAI,eAAe;IACnB,IAAI,eAAe;IACnB,SAAS,oBAAoB;CAC9B;AAED,oBAAY,kBAAkB;IAC5B,KAAK,UAAU;IACf,OAAO,YAAY;IACnB,UAAU,eAAe;IACzB;;;;;;;;OAQG;IACH,iBAAiB,sBAAsB;IACvC,SAAS,cAAc;IACvB,MAAM,WAAW;IACjB,SAAS,cAAc;IACvB,OAAO,YAAY;CACpB;AAED;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,4BAA4B,EAAE,QAAQ,CAAC,MAAM,CAAC,kBAAkB,EAAE,MAAM,CAAC,CASrF,CAAC;AAEF;;;GAGG;AACH,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAK9D;AAOD,eAAO,MAAM,2CAA2C;;;;;;;;;;;;;;;;;2BAsBtD,CAAC;AACH,MAAM,MAAM,qCAAqC,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2CAA2C,CAAC,CAAC;AAGhH,eAAO,MAAM,oCAAoC;;;;;;;;;;;;;;;;;;;;;;;;;;;2BAoC/C,CAAC;AACH,MAAM,MAAM,8BAA8B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oCAAoC,CAAC,CAAC;AAGlG,oBAAY,oBAAoB;IAC9B,UAAU,eAAe;IACzB,SAAS,cAAc;IACvB,QAAQ,aAAa;IACrB,OAAO,YAAY;IACnB,WAAW,gBAAgB;IAC3B,UAAU,eAAe;IACzB,UAAU,eAAe;CAC1B;AAED,eAAO,MAAM,8BAA8B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;2BA0CzC,CAAC;AACH,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,8BAA8B,CAAC,CAAC;AAYtF,oBAAY,gCAAgC;IAC1C,OAAO,YAAY;IACnB,SAAS,cAAc;IACvB,MAAM,WAAW;IACjB,WAAW,gBAAgB;CAC5B;AAED,oBAAY,sBAAsB;IAEhC,SAAS,cAAc;IACvB,MAAM,WAAW;IACjB,SAAS,cAAc;IACvB,OAAO,YAAY;IACnB,SAAS,cAAc;IACvB,QAAQ,aAAa;CACtB;AAED,eAAO,MAAM,+BAA+B,gCAAe,CAAC;AAC5D,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,+BAA+B,CAAC,CAAC;AAExF,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAgBlC,CAAC;AACH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAExE,eAAO,MAAM,gCAAgC;;;;;iBAM3C,CAAC;AACH,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gCAAgC,CAAC,CAAC;AAK1F,oBAAY,iCAAiC;IAC3C,MAAM,WAAW,CAAE,0CAA0C;IAC7D,IAAI,SAAS,CAAE,wCAAwC;IACvD,SAAS,cAAc;CACxB;AAED,eAAO,MAAM,6BAA6B;;;;;;;;;;;;;;;;;;;;;iBAIxC,CAAC;AACH,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AAEnF,eAAO,MAAM,kCAAkC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAI7C,CAAC;AACH,MAAM,MAAM,4BAA4B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kCAAkC,CAAC,CAAC;AAI9F;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,eAAO,MAAM,kCAAkC,qBAAqB,CAAC;AAErE;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,mCAAmC,cAAc,CAAC"}
+{"version":3,"file":"flows-actors.commons.shared.schemas.d.ts","sourceRoot":"","sources":["../../../../src/flows-actors/flows-actors.commons.shared.schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AASxB,oBAAY,uBAAuB;IACjC,IAAI,SAAS;IACb,KAAK,UAAU;IACf,YAAY,iBAAiB;IAC7B,SAAS,cAAc;IACvB,IAAI,eAAe;IACnB,IAAI,eAAe;IACnB,SAAS,oBAAoB;CAC9B;AAED,oBAAY,kBAAkB;IAC5B,KAAK,UAAU;IACf,OAAO,YAAY;IACnB,UAAU,eAAe;IACzB;;;;;;;;;;;;;;;;;;;;;;OAsBG;IACH,iBAAiB,sBAAsB;IACvC,SAAS,cAAc;IACvB,MAAM,WAAW;IACjB,SAAS,cAAc;IACvB,OAAO,YAAY;CACpB;AAED;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,4BAA4B,EAAE,QAAQ,CAAC,MAAM,CAAC,kBAAkB,EAAE,MAAM,CAAC,CASrF,CAAC;AAEF;;;GAGG;AACH,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAK9D;AAOD,eAAO,MAAM,2CAA2C;;;;;;;;;;;;;;;;;2BAsBtD,CAAC;AACH,MAAM,MAAM,qCAAqC,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2CAA2C,CAAC,CAAC;AAGhH,eAAO,MAAM,oCAAoC;;;;;;;;;;;;;;;;;;;;;;;;;;;2BAoC/C,CAAC;AACH,MAAM,MAAM,8BAA8B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oCAAoC,CAAC,CAAC;AAGlG,oBAAY,oBAAoB;IAC9B,UAAU,eAAe;IACzB,SAAS,cAAc;IACvB,QAAQ,aAAa;IACrB,OAAO,YAAY;IACnB,WAAW,gBAAgB;IAC3B,UAAU,eAAe;IACzB,UAAU,eAAe;CAC1B;AAED,eAAO,MAAM,8BAA8B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;2BA0CzC,CAAC;AACH,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,8BAA8B,CAAC,CAAC;AAYtF,oBAAY,gCAAgC;IAC1C,OAAO,YAAY;IACnB,SAAS,cAAc;IACvB,MAAM,WAAW;IACjB,WAAW,gBAAgB;CAC5B;AAED,oBAAY,sBAAsB;IAEhC,SAAS,cAAc;IACvB,MAAM,WAAW;IACjB,SAAS,cAAc;IACvB,OAAO,YAAY;IACnB,SAAS,cAAc;IACvB,QAAQ,aAAa;CACtB;AAED,eAAO,MAAM,+BAA+B,gCAAe,CAAC;AAC5D,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,+BAA+B,CAAC,CAAC;AAExF,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAgBlC,CAAC;AACH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAExE,eAAO,MAAM,gCAAgC;;;;;iBAM3C,CAAC;AACH,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gCAAgC,CAAC,CAAC;AAW1F,eAAO,MAAM,6BAA6B;;;;;;;;;;;;;;;;;;;;;iBAIxC,CAAC;AACH,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AAEnF,eAAO,MAAM,kCAAkC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAG7C,CAAC;AACH,MAAM,MAAM,4BAA4B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kCAAkC,CAAC,CAAC;AAI9F;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,eAAO,MAAM,kCAAkC,qBAAqB,CAAC;AAErE;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,mCAAmC,cAAc,CAAC"}

package/dist/esm/flows-actors/flows-actors.commons.shared.schemas.js

@@ -23,9 +23,23 @@ export var FlowsActors_Status;
      * an approval-gated tool, the run state is persisted (see `pausedApproval` on the
      * execution record), and the runtime is waiting for a decision — a
      * `FLOWS_ACTORS_APPROVAL_RESPONSE` over WebSocket, or an A2A `input-required` task
-     * resolution. NON-terminal: resolves to PROCESSING→COMPLETED on approval, or a
-     * terminal state on denial/expiry. Machine (org/app) turns never enter this state —
+     * resolution. NON-terminal. A decision — approval OR denial — resumes it to PROCESSING
+     * (a denial resumes so the agent can answer the refusal; it is not a cancellation). A
+     * pause whose `expiresAt` passes unanswered becomes FAILED: refused at a late decision,
+     * or failed by the hourly `approval-pause-expiry-sweep` (#484). Machine (org/app) turns never enter this state —
      * approval-gated tools are auto-denied for them (HITL is user-delegated-only in v1).
+     *
+     * ## The same status on the ACTOR-SYSTEM plane, where the decision is a `HumanDecision_Request` (#1360)
+     *
+     * An actor-system execution the engine's driver runs may also stop to ask a person — a mid-run
+     * clarification, a parked question — and it waits in THIS status, with the pending decision and the
+     * resume inputs on the row (`ActorSystem_Execution.suspension` / `.checkpoint`). It is one concept,
+     * not two: an approval is the special case of a human decision with no fields and approve/deny
+     * options (#1269), and A2A already projects this member to `input-required`, which is the general
+     * meaning. What differs by plane is the MECHANISM, not the state: the conversational plane resumes
+     * an agent stream from `pausedApproval` and sweeps lapsed windows hourly; the actor-system plane
+     * resumes a host executor from a checkpoint and is swept by nothing, because its decisions carry no
+     * window unless the request declares one. The member's NAME is narrower than its meaning.
      */
     FlowsActors_Status["AWAITING_APPROVAL"] = "awaiting_approval";
     FlowsActors_Status["COMPLETED"] = "completed";
@@ -50,11 +64,11 @@ export const FLOWS_ACTORS_STATUS_MEANINGS = {
     [FlowsActors_Status.READY]: 'Created and ready to start; no work has been done yet.',
     [FlowsActors_Status.PENDING]: 'Accepted and queued, waiting for a runner to pick it up.',
     [FlowsActors_Status.PROCESSING]: 'Running now.',
-    [FlowsActors_Status.AWAITING_APPROVAL]: 'Paused at an approval point: it called something a person must authorize, and it resumes or ends when that decision arrives.',
+    [FlowsActors_Status.AWAITING_APPROVAL]: 'Paused on a person\'s decision — the authorization of something it called, or an answer it asked for — and it resumes when that decision arrives. One that carries an approval window fails if nobody decides before it closes.',
     [FlowsActors_Status.COMPLETED]: 'Finished, and did what it set out to do.',
     [FlowsActors_Status.FAILED]: 'Stopped because something went wrong.',
     [FlowsActors_Status.CANCELLED]: 'Stopped because somebody asked it to stop.',
-    [FlowsActors_Status.ABORTED]: 'Stopped by the system rather than by a person — a shutdown, a timeout, a lost runner.',
+    [FlowsActors_Status.ABORTED]: 'Stopped by the system rather than by a person — a shutdown, a timeout, a lost runner, or a run the system declined to start.',
 };
 /**
  * One `Values:` legend, in the shape the generated API reference already uses for a described enum,
@@ -230,19 +244,17 @@ export const FlowsActors_Event_TemplateSchema = z.object({
 //===============================================================
 //  State
 //===============================================================
-export var FlowsActors_CircuitBreaker_Status;
-(function (FlowsActors_CircuitBreaker_Status) {
-    FlowsActors_CircuitBreaker_Status["CLOSED"] = "closed";
-    FlowsActors_CircuitBreaker_Status["OPEN"] = "open";
-    FlowsActors_CircuitBreaker_Status["HALF_OPEN"] = "half_open";
-})(FlowsActors_CircuitBreaker_Status || (FlowsActors_CircuitBreaker_Status = {}));
+/*
+ * `FlowsActors_CircuitBreaker_Status` and the `circuitBreakerStatus` key every error-state object
+ * carried were removed on 2026-09-20 (#1363): no writer, no reader, and the circuit-breaker
+ * CONFIGURATION they would have reported on was removed in the same change for having no runtime.
+ */
 export const FlowsActors_Checkpoint_Schema = z.object({
     point: FlowsActors_LeafElements_RelationshipSchema,
     timestamp: z.string().refine((val) => !isNaN(Date.parse(val)), { error: 'Invalid datetime string' }),
     context: z.any().optional(),
 });
 export const FlowsActors_Error_State_BaseSchema = z.object({
-    circuitBreakerStatus: z.enum(FlowsActors_CircuitBreaker_Status).optional(),
     error: WildoError_BackendSchema.optional(),
     checkpoints: FlowsActors_Checkpoint_Schema.array().optional(),
 });