npm - @wildo-ai/saas-models - Versions diffs - 1.1.4 → 1.1.5 - Mend

@wildo-ai/saas-models 1.1.4 → 1.1.5

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (1032) hide show

package/dist/esm/flows-actors/flows-actors-execution.shared.schemas.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"flows-actors-execution.shared.schemas.js","sourceRoot":"","sources":["../../../src/flows-actors/flows-actors-execution.shared.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAEnF,OAAO,EAA2E,kBAAkB,EAAE,MAAM,uCAAuC,CAAC;AACpJ,OAAO,EAAE,yBAAyB,EAAE,MAAM,qDAAqD,CAAC;AAChG,OAAO,EAAE,oBAAoB,EAAE,MAAM,6DAA6D,CAAC;AACnG,OAAO,EAAE,oBAAoB,EAAE,MAAM,sCAAsC,CAAC;AAC5E,OAAO,EAAE,aAAa,EAAE,MAAM,gDAAgD,CAAC;AAC/E,OAAO,EACL,gBAAgB,EAChB,kCAAkC,GACnC,MAAM,gDAAgD,CAAC;AACxD,OAAO,EACL,yBAAyB,EACzB,gCAAgC,GAEjC,MAAM,kDAAkD,CAAC;AAE1D,iBAAiB,CAAC,CAAC,CAAC,CAAC;AAErB,iEAAiE;AACjE,8BAA8B;AAC9B,iEAAiE;AAEjE;;;;;GAKG;AACH,MAAM,CAAN,IAAY,4BAKX;AALD,WAAY,4BAA4B;IACtC,6CAAa,CAAA;IACb,uDAAuB,CAAA;IACvB,iDAAiB,CAAA;IACjB,6CAAa,CAAA;AACf,CAAC,EALW,4BAA4B,KAA5B,4BAA4B,QAKvC;AAED;;;;;GAKG;AACH,MAAM,CAAN,IAAY,8BAKX;AALD,WAAY,8BAA8B;IACxC,+CAAa,CAAA;IACb,uDAAqB,CAAA;IACrB,uDAAqB,CAAA;IACrB,+CAAa,CAAA;AACf,CAAC,EALW,8BAA8B,KAA9B,8BAA8B,QAKzC;AAED,MAAM,CAAC,MAAM,gCAAgC,GAAG,CAAC,CAAC,MAAM,CAAC;IACvD,wEAAwE;IACxE,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE;IACZ,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,4BAA4B,CAAC;SACvC,QAAQ,CACP,yCAAyC;UACvC,wDAAwD;UACxD,6BAA6B;UAC7B,6FAA6F;UAC7F,qDAAqD,CACxD;IACH,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC,OAAO,CAAC,8BAA8B,CAAC,IAAI,CAAC;SAC7F,QAAQ,CACP,uCAAuC;UACrC,yBAAyB;UACzB,gDAAgD;UAChD,kFAAkF;UAClF,+EAA+E,CAClF;IACH,qEAAqE;IACrE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,kFAAkF;IAClF,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;IAClD,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC;CAC9C,CAAC,CAAC;AAGH;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,uCAAuC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9D;;;;;;;;;;;;;;OAcG;IACH,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7B;;;;OAIG;IACH,gBAAgB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;IAC5D,wFAAwF;IACxF,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE;IAC3B,sFAAsF;IACtF,eAAe,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC7D,qDAAqD;IACrD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;IACvB;;;;;;;;;;;;;OAaG;IACH,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACjC,CAAC,CAAC;AAGH;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,sCAAsC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAE1E,qFAAqF;AACrF,MAAM,UAAU,gCAAgC,CAAC,KAAwC;IACvF,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;AAC/B,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,4BAA4B,CAAC,GAAW;IACtD,OAAO,uCAAuC,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;AACxE,CAAC;AAED,iEAAiE;AACjE,qEAAqE;AACrE,iEAAiE;AAEjE,8EAA8E;AAC9E,4EAA4E;AAC5E,iFAAiF;AACjF,kFAAkF;AAClF,gFAAgF;AAChF,+EAA+E;AAC/E,6EAA6E;AAC7E,+EAA+E;AAC/E,4EAA4E;AAC5E,kFAAkF;AAClF,kFAAkF;AAClF,+EAA+E;AAE/E,iEAAiE;AACjE,oEAAoE;AACpE,iEAAiE;AAEjE;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,CAAC,MAAM,CAAC;IACnD,kFAAkF;IAClF,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,EAAE;IAErC;;;;;OAKG;IACH,WAAW,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,iBAAiB,EAAE,CAAC,cAAc,EAAE;IAEvG,qDAAqD;IACrD,qEAAqE;IACrE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE,CAAC,iBAAiB,EAAE,CAAC,cAAc,EAAE;IACxE,4DAA4D;IAC5D,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC,WAAW,EAAE,CAAC,iBAAiB,EAAE,CAAC,cAAc,EAAE;IAErF,yBAAyB;IACzB;;;;;;;;;;;OAWG;IACH,yBAAyB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE;IAE1D;;;;;;;;;;;OAWG;IACH,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE;IAEpD,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,WAAW,EAAE,CAAC,cAAc,EAAE;IACjE,aAAa,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;QAC9B,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC;QAClC,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE;KACpB,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAEf,4CAA4C;IAC5C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAgCG;IACH,iGAAiG;IACjG,iGAAiG;IACjG,iGAAiG;IACjG,wFAAwF;IACxF,QAAQ,EAAE,oBAAoB,CAC9B,gCAAgC,CAAC,KAAK,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;SAC/C,qBAAqB,CAAC,yBAAyB,CAAC,gBAAgB,CAAC;QAClE,iGAAiG;QACjG,8FAA8F;SAC7F,cAAc,CAAC,oBAAoB,CAAC,YAAY,CAAC,EACpD,aAAa,CAAC,KAAK,CACpB;IAED,8CAA8C;IAC9C;;;;;OAKG;IACH;;;;;;;;;;;;;OAaG;IACH,2EAA2E;IAC3E,8EAA8E;IAC9E,8DAA8D;IAC9D,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE,CAAC,iBAAiB,EAAE,CAAC,aAAa,EAAE;IAExE,8EAA8E;IAC9E,+EAA+E;IAC/E,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,iBAAiB,EAAE,CAAC,iBAAiB,EAAE;IACrF,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,iBAAiB,EAAE,CAAC,iBAAiB,EAAE,CAAC,cAAc,EAAE;IACtG,gEAAgE;IAChE,UAAU,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE,CAAC,iBAAiB,EAAE,CAAC,cAAc,EAAE;CACrE,CAAC,CAAC;AAGH,iEAAiE;AACjE,+DAA+D;AAC/D,iEAAiE;AAEjE;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,mCAAmC,GAAmC;IACjF,EAAE,kBAAkB,EAAE,gBAAgB,CAAC,KAAK,EAAU,qBAAqB,EAAE,kCAAkC,CAAC,gBAAgB,CAAC,KAAK,CAAC,EAAU,cAAc,EAAE,IAAI,EAAE;IACvK,EAAE,kBAAkB,EAAE,gBAAgB,CAAC,aAAa,EAAE,qBAAqB,EAAE,kCAAkC,CAAC,gBAAgB,CAAC,aAAa,CAAC,EAAE,cAAc,EAAE,IAAI,EAAE;IACvK,EAAE,kBAAkB,EAAE,gBAAgB,CAAC,WAAW,EAAI,qBAAqB,EAAE,kCAAkC,CAAC,gBAAgB,CAAC,WAAW,CAAC,EAAI,cAAc,EAAE,IAAI,EAAE;CACxK,CAAC,GAAG,CAAC,gCAAgC,CAAC,CAAC;AAExC;;;;;GAKG;AACH,MAAM,CAAC,MAAM,yCAAyC,GAAG,yBAAyB,CAAC;IACjF,gBAAgB,EAAE,qBAAqB;IACvC,mBAAmB,EAAE,sBAAsB;IAC3C,WAAW,EAAE,uBAAuB;IACpC,UAAU,EAAE,4BAA4B;IACxC,QAAQ,EAAE,mCAAmC;CAC9C,CAAC,CAAC;AAEH;;;;GAIG;AACH,MAAM,CAAC,MAAM,sCAAsC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7D,MAAM,EAAE,4BAA4B,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE;IAC5D,aAAa,EAAE,4BAA4B,CAAC,KAAK,CAAC,aAAa,CAAC,QAAQ,EAAE;IAC1E,QAAQ,EAAE,4BAA4B,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,EAAE;IAChE,UAAU,EAAE,4BAA4B,CAAC,KAAK,CAAC,UAAU;IACzD;;;;;;;;;;;;;;OAcG;IACH,cAAc,EAAE,4BAA4B,CAAC,KAAK,CAAC,cAAc,CAAC,OAAO,EAAE;CAC5E,CAAC,CAAC","sourcesContent":["/*\n Flows-Actors Execution — Persisted Resource Schema (POLYMORPHIC)\n * ================================================================\n \n A persisted record of a single flow/actor system execution — in v1 the\n * durable source of truth for a conversational chat log (`messages[]`) plus the\n * execution's lifecycle status.\n \n POLYMORPHIC ACROSS OWNER SCOPE. The SAME base envelope is stamped out as THREE\n * genuine single-scope resources by `declarePolymorphicSchemas()`, one owner FK\n * injected per variant:\n * - `userFlowActorExecutions` (USER_SELF — `userId`) ← WS chat + user-delegated A2A\n * - `organizationFlowActorExecutions` (ORGANIZATIONS — `organizationId`) ← org-machine A2A\n * - `applicationFlowActorExecutions` (APPLICATION — `applicationId`) ← app-machine A2A\n \n A conversation is owned by EXACTLY ONE scope (its injected owner FK). There is\n * no cross-scope audit dimension on the base — ownership IS the scope. This is the\n * honest \"one concept, N owners\" model (mirrors billing accounts / subscriptions)\n * and needs ZERO core-authorizer change: each variant satisfies its own scope\n * authorizer, and `polymorphicRole` resolves the operation roles per scope. A\n * machine (API key / OIDC client) reaches its org/app variant exactly as it\n * reaches any other org/app resource — standard RBAC via its granted roles.\n \n KIND-AGNOSTIC BY DESIGN. A `FlowActorSystem_Kind` discriminant lets the SAME\n * resource persist both flow and actor executions. v1 implements the ACTOR\n * conversational path; the FLOW path drops in without reshaping the base envelope.\n \n @see flows-actors.system.shared.schemas.ts — the base execution envelope\n * @see billing-account.shared.schemas.ts — the polymorphic-scope precedent\n * @see requests/websocket.shared.schemas.ts — the streamed message payload this\n * log mirrors (`WS_FlowsActorsMessagePayloadSchema`)\n /\n\nimport { z } from 'zod';\nimport { initZodDecorators, addImpersonalizeWith } from '@wildo-ai/zod-decorators';\n\nimport { FLOWS_ACTORS_DEFAULT_AGENT_INSTANCE, FLOWS_ACTORS_NO_MACHINE_CREDENTIAL, FlowsActors_Status } from './flows-actors.commons.shared.schemas';\nimport { DataPortabilityProvenance } from '../compliance/privacy/subject-export.shared.schemas';\nimport { PersonalDataCategory } from '../compliance/privacy/personal-data-category.shared.schemas';\nimport { FlowActorSystem_Kind } from './flows-actors.system.shared.schemas';\nimport { RedactionType } from '../compliance/privacy/redaction.shared.schemas';\nimport {\n CoreResourceType,\n coreResourceShared_FieldIdentifier,\n} from '../resources/resources.shared.core.definitions';\nimport {\n declarePolymorphicSchemas,\n optOutPolymorphicAutoBusinessKey,\n type PolymorphicVariantDefinition,\n} from '../resources/utils/resource-polymorphism.schemas';\n\ninitZodDecorators(z);\n\n//===============================================================\n// Conversational message log\n//===============================================================\n\n/\n Author of a persisted conversational message. `TOOL` records a tool-call /\n * tool-result turn (grounding retrieval); `SYSTEM` records a system/status note.\n * WS-streamed messages are always server→client, so the transport shape carries\n * no role — the persisted log adds it to reconstruct a full transcript.\n /\nexport enum FlowsActors_ConversationRole {\n USER = 'user',\n ASSISTANT = 'assistant',\n SYSTEM = 'system',\n TOOL = 'tool',\n}\n\n/\n Rendering hint for a message body. Mirrors the streamed\n * `WS_FlowsActorsMessagePayloadSchema.messageType` literal union exactly\n * (`text \| markdown \| progress \| data`) as an enum so the persisted log and the\n * live stream share one vocabulary (framework rule: enums over literal unions).\n /\nexport enum FlowsActors_MessageContentType {\n TEXT = 'text',\n MARKDOWN = 'markdown',\n PROGRESS = 'progress',\n DATA = 'data',\n}\n\nexport const FlowActorExecution_MessageSchema = z.object({\n /* Stable per-message id (client-correlatable across stream deltas). /\n id: z.uuid(),\n role: z.enum(FlowsActors_ConversationRole)\n .describe(\n 'Who produced this message.\\n\\nValues:\\n'\n + '- `user`: the person, or the client acting for them.\\n'\n + '- `assistant`: the agent.\\n'\n + '- `system`: instructions the agent was given, not part of the conversation a person sees.\\n'\n + '- `tool`: the result of something the agent called.',\n ),\n contentType: z.enum(FlowsActors_MessageContentType).default(FlowsActors_MessageContentType.TEXT)\n .describe(\n 'How to render `content`.\\n\\nValues:\\n'\n + '- `text`: plain text.\\n'\n + '- `markdown`: text with Markdown formatting.\\n'\n + '- `progress`: an interim note about work in flight; `data` carries the detail.\\n'\n + '- `data`: a structured payload rather than prose; read `data`, not `content`.',\n ),\n /* Rendered text content (may be assembled from streamed deltas). /\n content: z.string(),\n /* Structured payload for `DATA`/`PROGRESS` messages (tool results, progress). /\n data: z.record(z.string(), z.unknown()).optional(),\n createdAt: z.date().default(() => new Date()),\n});\nexport type FlowActorExecution_Message = z.infer<typeof FlowActorExecution_MessageSchema>;\n\n/\n The SUSPENDED-TURN state persisted when an agent turn pauses at a human-in-the-loop\n * approval boundary (execution `status` = `AWAITING_APPROVAL`). It is stored SERIALIZED as a\n * JSON string in the `pausedApproval` scalar field — NOT as a nested Zod object — because heavy\n * nested sub-structures do not round-trip through the Zod→Mongoose embedded-subdocument\n * conversion (see the per-kind state note below). Parse/serialize ONLY via the helpers below at\n * the persistence boundary; the record column itself stays a plain string.\n /\nexport const FlowActorExecution_PausedApprovalSchema = z.object({\n /\n Correlates the emitted approval REQUEST with the inbound decision (idempotency key).\n \n An OPAQUE identifier minted by the model SDK — NOT a Wildo id and NOT a UUID. It was typed\n * `z.uuid()` on the reasonable-looking assumption that an id is a uuid, and the SDK produces\n * values like `aitxt-3Xfhq68r7GTRXEuV1YzU4eEc`.\n \n That single wrong assumption made EVERY paused turn unresumable, and hid completely: serializing\n * is `JSON.stringify` and does not validate, so the pause persisted perfectly; only the resume's\n * `parse` rejected it, as a CORRUPTED blob. The turn then stayed paused forever with a\n * \"state is unreadable\" error naming the wrong cause. Unit fixtures used a real uuid, so they were\n * more conformant than production and could never reproduce it — the live lane found it.\n \n Validate it as an opaque non-empty string. We do not own the format and must not assert one.\n /\n approvalId: z.string().min(1),\n /\n The AI-SDK model-message array to RESUME from — opaque to us (the SDK's own resume\n * contract). Captured when the approval-gated tool call suspended the stream; on the human\n * decision the runtime appends a tool-approval-response and re-invokes with these messages.\n /\n sdkModelMessages: z.array(z.record(z.string(), z.unknown())),\n /* The approval-gated tool the model wants to call (drives the human-facing prompt). /\n pendingToolName: z.string(),\n /* The pending tool call's arguments (drives the human-facing action description). /\n pendingToolArgs: z.record(z.string(), z.unknown()).optional(),\n /* ISO timestamp when the approval was requested. /\n requestedAt: z.string(),\n /\n ISO instant after which the paused turn must not be resumed.\n \n SET ON EVERY SUSPENSION since 2026-09-08 (#465). It was declared here, carried on the\n * approval-request WebSocket payload and read and converted by the browser, and NO WRITER EVER SET\n * IT — so a pending approval never expired and the field described a timeout that did not exist.\n \n The terminal state on expiry is `FlowsActors_Status.FAILED`, which the status vocabulary already\n * named (\"resolves to PROCESSING→COMPLETED on approval, or a terminal state on denial/expiry\").\n * Nothing new was invented for it.\n \n Still optional: a suspension persisted before that date carries none, and an absent expiry means\n * the pause does not lapse — which is what those turns were paused under.\n /\n expiresAt: z.string().optional(),\n});\nexport type FlowActorExecution_PausedApproval = z.infer<typeof FlowActorExecution_PausedApprovalSchema>;\n\n/\n How long a human has to answer an approval-gated tool call before the turn is refused.\n \n 24 hours. An agent pausing for a person should span a working day plus a night, so a request\n * raised late in the afternoon is still answerable the next morning. Much beyond that and the\n * decision stops being meaningful rather than merely late: the person is approving a tool call made\n * against a conversation, a world and an intent that have all moved on, and \"do you approve this?\"\n * with no memory of the question is a prompt people click through.\n \n A framework default rather than an operator knob, for now. If an application ever needs its own,\n * the knob goes beside the consent lifetime in the auth config — but nobody has asked, and a\n * timeout that every application authors identically is a default wearing a config field.\n /\nexport const FLOW_ACTOR_APPROVAL_DEFAULT_TIMEOUT_MS = 24 60 * 60 * 1000;\n\n/** Serialize paused-approval state for the scalar `pausedApproval` string column. /\nexport function serializeFlowActorPausedApproval(state: FlowActorExecution_PausedApproval): string {\n return JSON.stringify(state);\n}\n\n/\n Parse the scalar `pausedApproval` string column back to typed state. Throws (ZodError /\n * SyntaxError) on a malformed blob — a corrupted paused record must fail loudly at resume,\n * never silently resume from garbage.\n /\nexport function parseFlowActorPausedApproval(raw: string): FlowActorExecution_PausedApproval {\n return FlowActorExecution_PausedApprovalSchema.parse(JSON.parse(raw));\n}\n\n//===============================================================\n// Per-kind execution state (reused from the shared execution types)\n//===============================================================\n\n// NOTE (v1 scope): the persisted record is the CONVERSATIONAL envelope only —\n// `kind` + `status`/`statusChanges` + the `messages[]` chat log. The richer\n// per-kind graph-state slots (`flowState` node-states / `actorState` plan+tasks,\n// sliced from `FlowSystem_Execution` / `ActorSystem_Execution`) are intentionally\n// NOT persisted yet: the v1 conversational runtime never writes them, and those\n// heavy nested sub-structures (required `plan`/`walkthrough`/`standaloneTasks`\n// with embedded `_id`s) do not round-trip through the Zod→Mongoose embedded-\n// subdocument conversion as optional slots (empty subdocs get instantiated and\n// fail required-path validation). When the flow/actor orchestration runtime\n// actually produces graph state, add typed `flowState`/`actorState` back WITH the\n// embedded-subdocument treatment (see the zod↔mongoose nested-union / embedded-id\n// notes) rather than a raw `.pick()`. `kind` already preserves discrimination.\n\n//===============================================================\n// Base execution record — NO owner scope FK (injected per variant)\n//===============================================================\n\n/\n The conversation envelope shared by every scope variant. It carries NO owner\n * scope FK: `declarePolymorphicSchemas()` injects exactly ONE (`userId` /\n * `organizationId` / `applicationId`) per variant. Do NOT add an `initiator`\n * snapshot here — a nested `initiator.userId`/`.organizationId` collides with the\n * contextual scope filter (it matches the field identifier at every schema path\n * and injects an exact-subdocument clause that never equals the stored snapshot,\n * so every scoped read/update silently matches zero rows). Ownership lives ONLY on\n * the single injected top-level owner FK.\n /\nexport const FlowActorExecutionBaseSchema = z.object({\n /* MongoDB document id — auto-generated / auto-managed (excluded from create). /\n _id: z.string().min(1).isPrimaryKey(),\n\n /\n Stable business id of the execution, generated by the conversational runtime\n * and echoed over the WebSocket channel (`WS_FlowsActors.executionId`). Unique\n per variant collection (a UUID — no cross-collection collision). Immutable\n * once created.\n /\n executionId: z.uuid().isUnique({ scope: 'global', sparse: false }).excludeFromUpdate().isSummaryField(),\n\n // === System identity (set on create, immutable) ===\n /* Ref of the executed flow/actor system (`FlowActorSystem.ref`). /\n systemRef: z.string().isDBIndexed().excludeFromUpdate().isSummaryField(),\n /* Discriminant selecting which state slot is populated. /\n kind: z.enum(FlowActorSystem_Kind).isDBIndexed().excludeFromUpdate().isSummaryField(),\n\n // === Runtime status ===\n /\n WHICH agent this conversation was opened through — part of the read filter, not metadata.\n \n The task family carried this from gate #3; executions did not, so a caller holding a\n * `contextId` could continue that thread through a DIFFERENT declared agent and load the prior\n * transcript into the other agent's context. A2A agents are declared as separate resource servers\n * with per-instance token audiences, and the plane at risk here holds the full message log — not\n * a 120-character title (review finding G5-8).\n \n The WebSocket surface has no agent, and the default A2A agent is an identity of its own; both\n * store {@link FLOWS_ACTORS_DEFAULT_AGENT_INSTANCE}.\n /\n resourceServerInstanceRef: z.string().min(1).isDBIndexed(),\n\n /\n WHICH machine credential opened this conversation — part of the read filter, not metadata.\n \n Identical axis and identical reasoning to the task family: the injected scope FK does not\n * identify the principal on the machine variants (`applicationId` is a deployment singleton;\n * `organizationId` is shared by every machine client of one tenant), so without it a\n * separately-credentialed client could read and continue another client's conversation — which\n * carries the full message log, not merely a title.\n \n User-delegated turns store {@link FLOWS_ACTORS_NO_MACHINE_CREDENTIAL}: the human is the\n * principal there and the `userId` owner FK already discriminates.\n /\n machineCredentialId: z.string().min(1).isDBIndexed(),\n\n status: z.enum(FlowsActors_Status).isDBIndexed().isSummaryField(),\n statusChanges: z.array(z.object({\n status: z.enum(FlowsActors_Status),\n timestamp: z.date(),\n })).default([]),\n\n // === Conversational log (chat history) ===\n /\n The conversation transcript.\n \n ## Provenance: SUBJECT_PROVIDED, and the asymmetry is the reason (review finding F5-6)\n \n This array MIXES subject-authored turns (`role: USER`) with model-generated ones\n * (`role: ASSISTANT`), and provenance is declared per FIELD — there is no per-element mechanism,\n * so one classification must cover both. The two ways of being wrong are not equally bad:\n \n • Classifying DERIVED would EXCLUDE the subject's own words from an Art. 20 bundle. That is a\n * failure of the right the article exists to serve.\n * • Classifying SUBJECT_PROVIDED includes the assistant's replies alongside them. That is\n * over-delivery — but of a transcript the subject was a party to and already saw, which is the\n * natural unit a person means by \"my conversation\".\n \n So the classification follows the ASYMMETRY, not a per-element truth we cannot express. Revisit\n * only if per-element provenance ever exists; splitting the array by role at export time was\n * considered and rejected as inventing a second mechanism for one field.\n \n ⚠️ This is a LABELLING change, not a behaviour change, and the first version of this note\n * failed to say so. `resolvePortabilityFieldScope` maps `SUBJECT_PROVIDED` and `OBSERVED` to\n * `INCLUDED`, and the resource default was already `OBSERVED` — so `messages` was in the Art. 20\n * bundle before and after. Nothing about an export changes.\n \n The rejected alternative the first version omitted is the one that was actually in force:\n * `OBSERVED` — \"data generated by the subject's USE of the service\", a defensible reading of a\n * mixed transcript. It is rejected for precision rather than effect: the USER turns are authored\n * BY the subject, not merely observed of them, and a classification should say the truest thing\n * available even when two values resolve alike today.\n \n The task family's `output`/`artifacts` are DERIVED by contrast, and that is not an\n * inconsistency: those are model output ABOUT the work, with no subject-authored content mixed in.\n /\n // RESET on erasure — returns this field to its schema default. It holds the conversation itself,\n // which the category above correctly declares as personal data. RESET rather than REMOVE or MASK\n // because the field is non-nullable WITH a `.default()`: REMOVE needs a clearable field and MASK\n // needs a string. The value comes from the schema, so there is no second copy to drift.\n messages: addImpersonalizeWith(\n FlowActorExecution_MessageSchema.array().default([])\n .portabilityProvenance(DataPortabilityProvenance.SUBJECT_PROVIDED)\n // The conversation itself. Category as well as provenance, so a notice can enumerate it: the two\n // axes answer different questions and a provenance alone leaves the field an OUTSTANDING gap.\n .dataCategories(PersonalDataCategory.USER_CONTENT),\n RedactionType.RESET,\n ),\n\n // === HITL (human-in-the-loop) suspension ===\n /\n Serialized {@link FlowActorExecution_PausedApproval} — present ONLY while `status` is\n * `AWAITING_APPROVAL`. A scalar JSON string (see that schema's doc for why it is NOT a nested\n * object: the Zod→Mongoose round-trip). Set on pause, cleared on resume / terminal completion;\n * never authored on create.\n /\n /\n Serialized suspended-turn state; `null` once a decision releases the pause.\n \n `.nullish()`, not `.optional()`, and the difference is load-bearing at the READ. Clearing writes\n * an explicit `null`; the write then re-parses the row to project its response, and under\n * `.optional()` that projection throws `expected string, received null`. The clear PERSISTS (there\n * is no transaction to roll back) and the operation still fails — so the pause was released and\n * the resume aborted, leaving the turn `failed` with its work never done, reported as a resource\n * transformation error that names nothing about approvals.\n \n The input contract needing `.nullish()` (see `FlowActorExecutionUpdateInternalSchema`) is a\n * SEPARATE surface from this one. Fixing only that gets the value written and still throws on the\n * way out — both must admit null or neither does.\n /\n // This blob contains SDK resume messages and pending tool arguments. It is\n // runtime continuation state, not conversation content: generic client reads,\n // summaries and generated API schemas must never disclose it.\n pausedApproval: z.string().nullish().excludeFromCreate().isBackendOnly(),\n\n // === Timing (system-managed; defaults are load-bearing — the create pipeline\n // strips these then date-coerces, so a missing default → Invalid Date) ===\n createdAt: z.date().default(() => new Date()).excludeFromCreate().excludeFromUpdate(),\n updatedAt: z.date().default(() => new Date()).excludeFromCreate().excludeFromUpdate().isSummaryField(),\n /* Set on terminal completion (via UPDATE); never on create. /\n finishedAt: z.date().optional().excludeFromCreate().isSummaryField(),\n});\nexport type FlowActorExecutionBase = z.infer<typeof FlowActorExecutionBaseSchema>;\n\n//===============================================================\n// Polymorphic declaration — one owner-scope variant per scope\n//===============================================================\n\n/\n The three owner-scope variants a flows-actors execution is stamped out for.\n * Each is `isPrimaryScope: true` (the injected owner FK is the primary scope), and\n * each opts OUT of the singleton auto-business-key: a conversation is MULTI-ROW\n * per scope (many discussions per user/org/app), so the injected owner FK must NOT\n * be marked `.isUnique()` — otherwise the second conversation per scope would fail\n * with a duplicate-key error. Mirrors subscriptions / usage-records / SSO\n * connections (all multi-row polymorphic resources).\n /\nexport const FLOW_ACTOR_EXECUTION_SCOPE_VARIANTS: PolymorphicVariantDefinition[] = [\n { parentResourceType: CoreResourceType.USERS, parentFieldIdentifier: coreResourceShared_FieldIdentifier[CoreResourceType.USERS], isPrimaryScope: true },\n { parentResourceType: CoreResourceType.ORGANIZATIONS, parentFieldIdentifier: coreResourceShared_FieldIdentifier[CoreResourceType.ORGANIZATIONS], isPrimaryScope: true },\n { parentResourceType: CoreResourceType.APPLICATION, parentFieldIdentifier: coreResourceShared_FieldIdentifier[CoreResourceType.APPLICATION], isPrimaryScope: true },\n].map(optOutPolymorphicAutoBusinessKey);\n\n/\n Polymorphic declaration for flows-actors executions. Produces 3 variants:\n * - users → `userFlowActorExecutions` (`userId` injected)\n * - organizations→ `organizationFlowActorExecutions` (`organizationId` injected)\n * - applications → `applicationFlowActorExecutions` (`applicationId` injected)\n /\nexport const flowActorExecutionsPolymorphicDeclaration = declarePolymorphicSchemas({\n baseResourceType: 'flowActorExecutions',\n baseFieldIdentifier: 'flowActorExecutionId',\n baseEnumKey: 'FLOW_ACTOR_EXECUTIONS',\n baseSchema: FlowActorExecutionBaseSchema,\n variants: FLOW_ACTOR_EXECUTION_SCOPE_VARIANTS,\n});\n\n/\n Owner-agnostic UPDATE DTO — status transitions, appended messages, completion\n * time. Shared across all variants because it references NO owner FK (owner is\n * immutable). `updatedAt` is system-managed; identity fields are `.excludeFromUpdate()`.\n /\nexport const FlowActorExecutionUpdateInternalSchema = z.object({\n status: FlowActorExecutionBaseSchema.shape.status.optional(),\n statusChanges: FlowActorExecutionBaseSchema.shape.statusChanges.optional(),\n messages: FlowActorExecutionBaseSchema.shape.messages.optional(),\n finishedAt: FlowActorExecutionBaseSchema.shape.finishedAt,\n /\n The suspended-turn state, written when a turn pauses for a human decision and cleared when one\n * arrives.\n \n ⚠️ THIS SCHEMA IS AN ALLOW-LIST, and omitting a field here does not fail — it makes the write\n * SUCCEED and persist nothing. `pausedApproval` was added to the base envelope when the column was\n * introduced but never here, so every approval pause wrote its status and its messages and\n * silently dropped the one field that makes the turn resumable. The row read back as\n * `AWAITING_APPROVAL` with no state to resume from: a turn stuck forever, with no error anywhere.\n * Adding a persisted field is therefore never done without adding it to this contract.\n \n `.nullish()` rather than `.optional()` because clearing is a real transition: the resume writes\n * an explicit `null` to release the pause, and under `.optional()` that null is rejected — which\n * would leave a resumed turn still advertising a decision nobody can answer.\n /\n pausedApproval: FlowActorExecutionBaseSchema.shape.pausedApproval.nullish(),\n});\n\n//===============================================================\n// Exported runtime type\n//===============================================================\n\n/\n Runtime shape of a persisted execution (the base envelope). The owner FK is\n * variant-specific (`userId` \| `organizationId` \| `applicationId`) and read from\n * the concrete variant; the conversational runtime supplies it explicitly on create.\n */\nexport type FlowActorExecution = z.infer<typeof FlowActorExecutionBaseSchema>;\n"]}
1	+ {"version":3,"file":"flows-actors-execution.shared.schemas.js","sourceRoot":"","sources":["../../../../src/flows-actors/flows-actors-execution.shared.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAEnF,OAAO,EAA2E,kBAAkB,EAAE,MAAM,uCAAuC,CAAC;AACpJ,OAAO,EAAE,yBAAyB,EAAE,MAAM,qDAAqD,CAAC;AAChG,OAAO,EAAE,oBAAoB,EAAE,MAAM,6DAA6D,CAAC;AACnG,OAAO,EAAE,oBAAoB,EAAE,MAAM,sCAAsC,CAAC;AAC5E,OAAO,EAAE,aAAa,EAAE,MAAM,gDAAgD,CAAC;AAC/E,OAAO,EACL,gBAAgB,EAChB,kCAAkC,GACnC,MAAM,gDAAgD,CAAC;AACxD,OAAO,EACL,yBAAyB,EACzB,gCAAgC,GAEjC,MAAM,kDAAkD,CAAC;AAE1D,iBAAiB,CAAC,CAAC,CAAC,CAAC;AAErB,iEAAiE;AACjE,8BAA8B;AAC9B,iEAAiE;AAEjE;;;;;GAKG;AACH,MAAM,CAAN,IAAY,4BAKX;AALD,WAAY,4BAA4B;IACtC,6CAAa,CAAA;IACb,uDAAuB,CAAA;IACvB,iDAAiB,CAAA;IACjB,6CAAa,CAAA;AACf,CAAC,EALW,4BAA4B,KAA5B,4BAA4B,QAKvC;AAED;;;;;GAKG;AACH,MAAM,CAAN,IAAY,8BAKX;AALD,WAAY,8BAA8B;IACxC,+CAAa,CAAA;IACb,uDAAqB,CAAA;IACrB,uDAAqB,CAAA;IACrB,+CAAa,CAAA;AACf,CAAC,EALW,8BAA8B,KAA9B,8BAA8B,QAKzC;AAED,MAAM,CAAC,MAAM,gCAAgC,GAAG,CAAC,CAAC,MAAM,CAAC;IACvD,wEAAwE;IACxE,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE;IACZ,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,4BAA4B,CAAC;SACvC,QAAQ,CACP,yCAAyC;UACvC,wDAAwD;UACxD,6BAA6B;UAC7B,6FAA6F;UAC7F,qDAAqD,CACxD;IACH,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC,OAAO,CAAC,8BAA8B,CAAC,IAAI,CAAC;SAC7F,QAAQ,CACP,uCAAuC;UACrC,yBAAyB;UACzB,gDAAgD;UAChD,kFAAkF;UAClF,+EAA+E,CAClF;IACH,qEAAqE;IACrE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,kFAAkF;IAClF,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;IAClD,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC;CAC9C,CAAC,CAAC;AAGH;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,uCAAuC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9D;;;;;;;;;;;;;;OAcG;IACH,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7B;;;;OAIG;IACH,gBAAgB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;IAC5D,wFAAwF;IACxF,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE;IAC3B,sFAAsF;IACtF,eAAe,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC7D,qDAAqD;IACrD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;IACvB;;;;;;;;;;;;;;;;;OAiBG;IACH,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACjC,CAAC,CAAC;AAGH;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,sCAAsC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAE1E,qFAAqF;AACrF,MAAM,UAAU,gCAAgC,CAAC,KAAwC;IACvF,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;AAC/B,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,4BAA4B,CAAC,GAAW;IACtD,OAAO,uCAAuC,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;AACxE,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,UAAU,+BAA+B,CAAC,MAA4D,EAAE,GAAS;IACrH,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACjD,MAAM,WAAW,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC;IACzD,OAAO,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,WAAW,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;AACtE,CAAC;AAED,iEAAiE;AACjE,qEAAqE;AACrE,iEAAiE;AAEjE,8EAA8E;AAC9E,4EAA4E;AAC5E,iFAAiF;AACjF,kFAAkF;AAClF,gFAAgF;AAChF,iEAAiE;AACjE,6EAA6E;AAC7E,+EAA+E;AAC/E,4EAA4E;AAC5E,kFAAkF;AAClF,kFAAkF;AAClF,+EAA+E;AAE/E,iEAAiE;AACjE,oEAAoE;AACpE,iEAAiE;AAEjE;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,CAAC,MAAM,CAAC;IACnD,kFAAkF;IAClF,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,EAAE;IAErC;;;;;OAKG;IACH,WAAW,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,iBAAiB,EAAE,CAAC,cAAc,EAAE;IAEvG,qDAAqD;IACrD,qEAAqE;IACrE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE,CAAC,iBAAiB,EAAE,CAAC,cAAc,EAAE;IACxE,4DAA4D;IAC5D,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC,WAAW,EAAE,CAAC,iBAAiB,EAAE,CAAC,cAAc,EAAE;IAErF,yBAAyB;IACzB;;;;;;;;;;;OAWG;IACH,yBAAyB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE;IAE1D;;;;;;;;;;;OAWG;IACH,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE;IAEpD;;;;;;;;;;;OAWG;IACH,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE,CAAC,iBAAiB,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;IAEpE,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,WAAW,EAAE,CAAC,cAAc,EAAE;IACjE,aAAa,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;QAC9B,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC;QAClC,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE;KACpB,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAEf,4CAA4C;IAC5C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAgCG;IACH,iGAAiG;IACjG,iGAAiG;IACjG,iGAAiG;IACjG,wFAAwF;IACxF,QAAQ,EAAE,oBAAoB,CAC9B,gCAAgC,CAAC,KAAK,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;SAC/C,qBAAqB,CAAC,yBAAyB,CAAC,gBAAgB,CAAC;QAClE,iGAAiG;QACjG,8FAA8F;SAC7F,cAAc,CAAC,oBAAoB,CAAC,YAAY,CAAC,EACpD,aAAa,CAAC,KAAK,CACpB;IAED,8CAA8C;IAC9C;;;;;OAKG;IACH;;;;;;;;;;;;;OAaG;IACH,2EAA2E;IAC3E,8EAA8E;IAC9E,8DAA8D;IAC9D,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE,CAAC,iBAAiB,EAAE,CAAC,aAAa,EAAE;IAExE,8EAA8E;IAC9E,+EAA+E;IAC/E,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,iBAAiB,EAAE,CAAC,iBAAiB,EAAE;IACrF,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,iBAAiB,EAAE,CAAC,iBAAiB,EAAE,CAAC,cAAc,EAAE;IACtG,gEAAgE;IAChE,UAAU,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE,CAAC,iBAAiB,EAAE,CAAC,cAAc,EAAE;CACrE,CAAC,CAAC;AAGH,iEAAiE;AACjE,+DAA+D;AAC/D,iEAAiE;AAEjE;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,mCAAmC,GAAmC;IACjF,EAAE,kBAAkB,EAAE,gBAAgB,CAAC,KAAK,EAAU,qBAAqB,EAAE,kCAAkC,CAAC,gBAAgB,CAAC,KAAK,CAAC,EAAU,cAAc,EAAE,IAAI,EAAE;IACvK,EAAE,kBAAkB,EAAE,gBAAgB,CAAC,aAAa,EAAE,qBAAqB,EAAE,kCAAkC,CAAC,gBAAgB,CAAC,aAAa,CAAC,EAAE,cAAc,EAAE,IAAI,EAAE;IACvK,EAAE,kBAAkB,EAAE,gBAAgB,CAAC,WAAW,EAAI,qBAAqB,EAAE,kCAAkC,CAAC,gBAAgB,CAAC,WAAW,CAAC,EAAI,cAAc,EAAE,IAAI,EAAE;CACxK,CAAC,GAAG,CAAC,gCAAgC,CAAC,CAAC;AAExC;;;;;GAKG;AACH,MAAM,CAAC,MAAM,yCAAyC,GAAG,yBAAyB,CAAC;IACjF,gBAAgB,EAAE,qBAAqB;IACvC,mBAAmB,EAAE,sBAAsB;IAC3C,WAAW,EAAE,uBAAuB;IACpC,UAAU,EAAE,4BAA4B;IACxC,QAAQ,EAAE,mCAAmC;CAC9C,CAAC,CAAC;AAEH;;;;GAIG;AACH,MAAM,CAAC,MAAM,sCAAsC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7D,MAAM,EAAE,4BAA4B,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE;IAC5D,aAAa,EAAE,4BAA4B,CAAC,KAAK,CAAC,aAAa,CAAC,QAAQ,EAAE;IAC1E,QAAQ,EAAE,4BAA4B,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,EAAE;IAChE,UAAU,EAAE,4BAA4B,CAAC,KAAK,CAAC,UAAU;IACzD;;;;;;;;;;;;;;OAcG;IACH,cAAc,EAAE,4BAA4B,CAAC,KAAK,CAAC,cAAc,CAAC,OAAO,EAAE;CAC5E,CAAC,CAAC;AAaH;;;;;;;GAOG;AACH,MAAM,UAAU,iCAAiC,CAAC,WAAyD;IACzG,IAAI,CAAC,WAAW;QAAE,OAAO,EAAE,CAAC;IAC5B,OAAO,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC;SAC5B,IAAI,EAAE;SACN,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,GAAG,IAAI,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;SAC1C,IAAI,CAAC,GAAG,CAAC,CAAC;AACf,CAAC","sourcesContent":["/*\n Flows-Actors Execution — Persisted Resource Schema (POLYMORPHIC)\n * ================================================================\n \n A persisted record of a single flow/actor system execution — in v1 the\n * durable source of truth for a conversational chat log (`messages[]`) plus the\n * execution's lifecycle status.\n \n POLYMORPHIC ACROSS OWNER SCOPE. The SAME base envelope is stamped out as THREE\n * genuine single-scope resources by `declarePolymorphicSchemas()`, one owner FK\n * injected per variant:\n * - `userFlowActorExecutions` (USER_SELF — `userId`) ← WS chat + user-delegated A2A\n * - `organizationFlowActorExecutions` (ORGANIZATIONS — `organizationId`) ← org-machine A2A\n * - `applicationFlowActorExecutions` (APPLICATION — `applicationId`) ← app-machine A2A\n \n A conversation is owned by EXACTLY ONE scope (its injected owner FK). There is\n * no cross-scope audit dimension on the base — ownership IS the scope. This is the\n * honest \"one concept, N owners\" model (mirrors billing accounts / subscriptions)\n * and needs ZERO core-authorizer change: each variant satisfies its own scope\n * authorizer, and `polymorphicRole` resolves the operation roles per scope. A\n * machine (API key / OIDC client) reaches its org/app variant exactly as it\n * reaches any other org/app resource — standard RBAC via its granted roles.\n \n KIND-AGNOSTIC BY DESIGN. A `FlowActorSystem_Kind` discriminant lets the SAME\n * resource persist both flow and actor executions. v1 implements the ACTOR\n * conversational path; the FLOW path drops in without reshaping the base envelope.\n \n @see flows-actors.system.shared.schemas.ts — the base execution envelope\n * @see billing-account.shared.schemas.ts — the polymorphic-scope precedent\n * @see requests/websocket.shared.schemas.ts — the streamed message payload this\n * log mirrors (`WS_FlowsActorsMessagePayloadSchema`)\n /\n\nimport { z } from 'zod';\nimport { initZodDecorators, addImpersonalizeWith } from '@wildo-ai/zod-decorators';\n\nimport { FLOWS_ACTORS_DEFAULT_AGENT_INSTANCE, FLOWS_ACTORS_NO_MACHINE_CREDENTIAL, FlowsActors_Status } from './flows-actors.commons.shared.schemas';\nimport { DataPortabilityProvenance } from '../compliance/privacy/subject-export.shared.schemas';\nimport { PersonalDataCategory } from '../compliance/privacy/personal-data-category.shared.schemas';\nimport { FlowActorSystem_Kind } from './flows-actors.system.shared.schemas';\nimport { RedactionType } from '../compliance/privacy/redaction.shared.schemas';\nimport {\n CoreResourceType,\n coreResourceShared_FieldIdentifier,\n} from '../resources/resources.shared.core.definitions';\nimport {\n declarePolymorphicSchemas,\n optOutPolymorphicAutoBusinessKey,\n type PolymorphicVariantDefinition,\n} from '../resources/utils/resource-polymorphism.schemas';\n\ninitZodDecorators(z);\n\n//===============================================================\n// Conversational message log\n//===============================================================\n\n/\n Author of a persisted conversational message. `TOOL` records a tool-call /\n * tool-result turn (grounding retrieval); `SYSTEM` records a system/status note.\n * WS-streamed messages are always server→client, so the transport shape carries\n * no role — the persisted log adds it to reconstruct a full transcript.\n /\nexport enum FlowsActors_ConversationRole {\n USER = 'user',\n ASSISTANT = 'assistant',\n SYSTEM = 'system',\n TOOL = 'tool',\n}\n\n/\n Rendering hint for a message body. Mirrors the streamed\n * `WS_FlowsActorsMessagePayloadSchema.messageType` literal union exactly\n * (`text \| markdown \| progress \| data`) as an enum so the persisted log and the\n * live stream share one vocabulary (framework rule: enums over literal unions).\n /\nexport enum FlowsActors_MessageContentType {\n TEXT = 'text',\n MARKDOWN = 'markdown',\n PROGRESS = 'progress',\n DATA = 'data',\n}\n\nexport const FlowActorExecution_MessageSchema = z.object({\n /* Stable per-message id (client-correlatable across stream deltas). /\n id: z.uuid(),\n role: z.enum(FlowsActors_ConversationRole)\n .describe(\n 'Who produced this message.\\n\\nValues:\\n'\n + '- `user`: the person, or the client acting for them.\\n'\n + '- `assistant`: the agent.\\n'\n + '- `system`: instructions the agent was given, not part of the conversation a person sees.\\n'\n + '- `tool`: the result of something the agent called.',\n ),\n contentType: z.enum(FlowsActors_MessageContentType).default(FlowsActors_MessageContentType.TEXT)\n .describe(\n 'How to render `content`.\\n\\nValues:\\n'\n + '- `text`: plain text.\\n'\n + '- `markdown`: text with Markdown formatting.\\n'\n + '- `progress`: an interim note about work in flight; `data` carries the detail.\\n'\n + '- `data`: a structured payload rather than prose; read `data`, not `content`.',\n ),\n /* Rendered text content (may be assembled from streamed deltas). /\n content: z.string(),\n /* Structured payload for `DATA`/`PROGRESS` messages (tool results, progress). /\n data: z.record(z.string(), z.unknown()).optional(),\n createdAt: z.date().default(() => new Date()),\n});\nexport type FlowActorExecution_Message = z.infer<typeof FlowActorExecution_MessageSchema>;\n\n/\n The SUSPENDED-TURN state persisted when an agent turn pauses at a human-in-the-loop\n * approval boundary (execution `status` = `AWAITING_APPROVAL`). It is stored SERIALIZED as a\n * JSON string in the `pausedApproval` scalar field — NOT as a nested Zod object — because heavy\n * nested sub-structures do not round-trip through the Zod→Mongoose embedded-subdocument\n * conversion (see the per-kind state note below). Parse/serialize ONLY via the helpers below at\n * the persistence boundary; the record column itself stays a plain string.\n /\nexport const FlowActorExecution_PausedApprovalSchema = z.object({\n /\n Correlates the emitted approval REQUEST with the inbound decision (idempotency key).\n \n An OPAQUE identifier minted by the model SDK — NOT a Wildo id and NOT a UUID. It was typed\n * `z.uuid()` on the reasonable-looking assumption that an id is a uuid, and the SDK produces\n * values like `aitxt-3Xfhq68r7GTRXEuV1YzU4eEc`.\n \n That single wrong assumption made EVERY paused turn unresumable, and hid completely: serializing\n * is `JSON.stringify` and does not validate, so the pause persisted perfectly; only the resume's\n * `parse` rejected it, as a CORRUPTED blob. The turn then stayed paused forever with a\n * \"state is unreadable\" error naming the wrong cause. Unit fixtures used a real uuid, so they were\n * more conformant than production and could never reproduce it — the live lane found it.\n \n Validate it as an opaque non-empty string. We do not own the format and must not assert one.\n /\n approvalId: z.string().min(1),\n /\n The AI-SDK model-message array to RESUME from — opaque to us (the SDK's own resume\n * contract). Captured when the approval-gated tool call suspended the stream; on the human\n * decision the runtime appends a tool-approval-response and re-invokes with these messages.\n /\n sdkModelMessages: z.array(z.record(z.string(), z.unknown())),\n /* The approval-gated tool the model wants to call (drives the human-facing prompt). /\n pendingToolName: z.string(),\n /* The pending tool call's arguments (drives the human-facing action description). /\n pendingToolArgs: z.record(z.string(), z.unknown()).optional(),\n /* ISO timestamp when the approval was requested. /\n requestedAt: z.string(),\n /\n ISO instant after which the paused turn must not be resumed.\n \n SET ON EVERY SUSPENSION since 2026-09-08 (#465). It was declared here, carried on the\n * approval-request WebSocket payload and read and converted by the browser, and NO WRITER EVER SET\n * IT — so a pending approval never expired and the field described a timeout that did not exist.\n \n The terminal state on expiry is `FlowsActors_Status.FAILED`, which the status vocabulary already\n * names for it. Nothing new was invented. Two producers write it and both read \"lapsed\" from\n * {@link isFlowActorPausedApprovalLapsed}: the refusal of a decision that arrives too late, and the\n * hourly sweep that fails a pause nobody answered (#484).\n \n (That vocabulary's doc used to say a DENIAL was terminal too. It is not — a denial resumes the\n * turn so the model can answer the refusal — and the doc was corrected in the same change.)\n \n Still optional: a suspension persisted before that date carries none, and an absent expiry means\n * the pause does not lapse — which is what those turns were paused under.\n /\n expiresAt: z.string().optional(),\n});\nexport type FlowActorExecution_PausedApproval = z.infer<typeof FlowActorExecution_PausedApprovalSchema>;\n\n/\n How long a human has to answer an approval-gated tool call before the turn is refused.\n \n 24 hours. An agent pausing for a person should span a working day plus a night, so a request\n * raised late in the afternoon is still answerable the next morning. Much beyond that and the\n * decision stops being meaningful rather than merely late: the person is approving a tool call made\n * against a conversation, a world and an intent that have all moved on, and \"do you approve this?\"\n * with no memory of the question is a prompt people click through.\n \n A framework default rather than an operator knob, for now. If an application ever needs its own,\n * the knob goes beside the consent lifetime in the auth config — but nobody has asked, and a\n * timeout that every application authors identically is a default wearing a config field.\n /\nexport const FLOW_ACTOR_APPROVAL_DEFAULT_TIMEOUT_MS = 24 60 * 60 * 1000;\n\n/** Serialize paused-approval state for the scalar `pausedApproval` string column. /\nexport function serializeFlowActorPausedApproval(state: FlowActorExecution_PausedApproval): string {\n return JSON.stringify(state);\n}\n\n/\n Parse the scalar `pausedApproval` string column back to typed state. Throws (ZodError /\n * SyntaxError) on a malformed blob — a corrupted paused record must fail loudly at resume,\n * never silently resume from garbage.\n /\nexport function parseFlowActorPausedApproval(raw: string): FlowActorExecution_PausedApproval {\n return FlowActorExecution_PausedApprovalSchema.parse(JSON.parse(raw));\n}\n\n/\n Whether a paused turn's approval window has CLOSED at `now` — the ONE definition of \"lapsed\".\n \n Two consumers act on it and neither may re-derive it (#484): the approval-response path, which\n * refuses a decision that arrives too late, and the scheduled sweep that fails a pause nobody ever\n * answered. Written twice, they would drift at exactly the boundary that matters — one inclusive,\n * one exclusive — and a decision arriving on the instant would be refused by one and resumed by the\n * other.\n \n - Inclusive at the instant. `expiresAt` is the moment after which the turn \"must not be\n * resumed\", so at `expiresAt` itself the window is already closed.\n * - An absent expiry never lapses. A suspension persisted before #465 carries none, and those\n * turns were paused under a contract with no timeout. Inventing one retroactively would fail them\n * on a rule they were never given.\n * - An unparseable instant never lapses. `new Date('garbage')` is `NaN`, every comparison with\n * which is false. Failing a turn on a value nobody can read would turn a corrupted field into a\n * destroyed conversation; leaving it paused keeps it recoverable, and the resume path already\n * refuses a blob it cannot parse.\n /\nexport function isFlowActorPausedApprovalLapsed(paused: Pick<FlowActorExecution_PausedApproval, 'expiresAt'>, now: Date): boolean {\n if (paused.expiresAt === undefined) return false;\n const expiresAtMs = new Date(paused.expiresAt).getTime();\n return Number.isFinite(expiresAtMs) && expiresAtMs <= now.getTime();\n}\n\n//===============================================================\n// Per-kind execution state (reused from the shared execution types)\n//===============================================================\n\n// NOTE (v1 scope): the persisted record is the CONVERSATIONAL envelope only —\n// `kind` + `status`/`statusChanges` + the `messages[]` chat log. The richer\n// per-kind graph-state slots (`flowState` node-states / `actorState` plan+tasks,\n// sliced from `FlowSystem_Execution` / `ActorSystem_Execution`) are intentionally\n// NOT persisted yet: the v1 conversational runtime never writes them, and those\n// heavy nested sub-structures (required `plan`/`standaloneTasks`\n// with embedded `_id`s) do not round-trip through the Zod→Mongoose embedded-\n// subdocument conversion as optional slots (empty subdocs get instantiated and\n// fail required-path validation). When the flow/actor orchestration runtime\n// actually produces graph state, add typed `flowState`/`actorState` back WITH the\n// embedded-subdocument treatment (see the zod↔mongoose nested-union / embedded-id\n// notes) rather than a raw `.pick()`. `kind` already preserves discrimination.\n\n//===============================================================\n// Base execution record — NO owner scope FK (injected per variant)\n//===============================================================\n\n/\n The conversation envelope shared by every scope variant. It carries NO owner\n * scope FK: `declarePolymorphicSchemas()` injects exactly ONE (`userId` /\n * `organizationId` / `applicationId`) per variant. Do NOT add an `initiator`\n * snapshot here — a nested `initiator.userId`/`.organizationId` collides with the\n * contextual scope filter (it matches the field identifier at every schema path\n * and injects an exact-subdocument clause that never equals the stored snapshot,\n * so every scoped read/update silently matches zero rows). Ownership lives ONLY on\n * the single injected top-level owner FK.\n /\nexport const FlowActorExecutionBaseSchema = z.object({\n /* MongoDB document id — auto-generated / auto-managed (excluded from create). /\n _id: z.string().min(1).isPrimaryKey(),\n\n /\n Stable business id of the execution, generated by the conversational runtime\n * and echoed over the WebSocket channel (`WS_FlowsActors.executionId`). Unique\n per variant collection (a UUID — no cross-collection collision). Immutable\n * once created.\n /\n executionId: z.uuid().isUnique({ scope: 'global', sparse: false }).excludeFromUpdate().isSummaryField(),\n\n // === System identity (set on create, immutable) ===\n /* Ref of the executed flow/actor system (`FlowActorSystem.ref`). /\n systemRef: z.string().isDBIndexed().excludeFromUpdate().isSummaryField(),\n /* Discriminant selecting which state slot is populated. /\n kind: z.enum(FlowActorSystem_Kind).isDBIndexed().excludeFromUpdate().isSummaryField(),\n\n // === Runtime status ===\n /\n WHICH agent this conversation was opened through — part of the read filter, not metadata.\n \n The task family carried this from gate #3; executions did not, so a caller holding a\n * `contextId` could continue that thread through a DIFFERENT declared agent and load the prior\n * transcript into the other agent's context. A2A agents are declared as separate resource servers\n * with per-instance token audiences, and the plane at risk here holds the full message log — not\n * a 120-character title (review finding G5-8).\n \n The WebSocket surface has no agent, and the default A2A agent is an identity of its own; both\n * store {@link FLOWS_ACTORS_DEFAULT_AGENT_INSTANCE}.\n /\n resourceServerInstanceRef: z.string().min(1).isDBIndexed(),\n\n /\n WHICH machine credential opened this conversation — part of the read filter, not metadata.\n \n Identical axis and identical reasoning to the task family: the injected scope FK does not\n * identify the principal on the machine variants (`applicationId` is a deployment singleton;\n * `organizationId` is shared by every machine client of one tenant), so without it a\n * separately-credentialed client could read and continue another client's conversation — which\n * carries the full message log, not merely a title.\n \n User-delegated turns store {@link FLOWS_ACTORS_NO_MACHINE_CREDENTIAL}: the human is the\n * principal there and the `userId` owner FK already discriminates.\n /\n machineCredentialId: z.string().min(1).isDBIndexed(),\n\n /\n WHICH context this conversation was opened in — the client's `contextResourceIdentifiers` on\n * `FLOWS_ACTORS_START`, folded into one indexed string by {@link canonicalizeFlowsActorsContextRef}\n * so history can list by it with plain equality on every adapter. Set on create, immutable.\n \n It is a PARTITION, not an access filter: the owner FK, the agent instance and the machine\n * credential above decide who may read a row; this decides which of a caller's own threads belong\n * to the surface asking. Without it every thread a user ever opened against a system lists\n * together, whatever it was about — measured 2026-09-22 on a tool that hosts one system for\n * several applications sharing one database, where the threads of one application appeared in\n * the next (#1454). `''` is \"no context\", never absent, so the equality filter can name it.\n /\n contextRef: z.string().isDBIndexed().excludeFromUpdate().default(''),\n\n status: z.enum(FlowsActors_Status).isDBIndexed().isSummaryField(),\n statusChanges: z.array(z.object({\n status: z.enum(FlowsActors_Status),\n timestamp: z.date(),\n })).default([]),\n\n // === Conversational log (chat history) ===\n /\n The conversation transcript.\n \n ## Provenance: SUBJECT_PROVIDED, and the asymmetry is the reason (review finding F5-6)\n \n This array MIXES subject-authored turns (`role: USER`) with model-generated ones\n * (`role: ASSISTANT`), and provenance is declared per FIELD — there is no per-element mechanism,\n * so one classification must cover both. The two ways of being wrong are not equally bad:\n \n • Classifying DERIVED would EXCLUDE the subject's own words from an Art. 20 bundle. That is a\n * failure of the right the article exists to serve.\n * • Classifying SUBJECT_PROVIDED includes the assistant's replies alongside them. That is\n * over-delivery — but of a transcript the subject was a party to and already saw, which is the\n * natural unit a person means by \"my conversation\".\n \n So the classification follows the ASYMMETRY, not a per-element truth we cannot express. Revisit\n * only if per-element provenance ever exists; splitting the array by role at export time was\n * considered and rejected as inventing a second mechanism for one field.\n \n ⚠️ This is a LABELLING change, not a behaviour change, and the first version of this note\n * failed to say so. `resolvePortabilityFieldScope` maps `SUBJECT_PROVIDED` and `OBSERVED` to\n * `INCLUDED`, and the resource default was already `OBSERVED` — so `messages` was in the Art. 20\n * bundle before and after. Nothing about an export changes.\n \n The rejected alternative the first version omitted is the one that was actually in force:\n * `OBSERVED` — \"data generated by the subject's USE of the service\", a defensible reading of a\n * mixed transcript. It is rejected for precision rather than effect: the USER turns are authored\n * BY the subject, not merely observed of them, and a classification should say the truest thing\n * available even when two values resolve alike today.\n \n The task family's `output`/`artifacts` are DERIVED by contrast, and that is not an\n * inconsistency: those are model output ABOUT the work, with no subject-authored content mixed in.\n /\n // RESET on erasure — returns this field to its schema default. It holds the conversation itself,\n // which the category above correctly declares as personal data. RESET rather than REMOVE or MASK\n // because the field is non-nullable WITH a `.default()`: REMOVE needs a clearable field and MASK\n // needs a string. The value comes from the schema, so there is no second copy to drift.\n messages: addImpersonalizeWith(\n FlowActorExecution_MessageSchema.array().default([])\n .portabilityProvenance(DataPortabilityProvenance.SUBJECT_PROVIDED)\n // The conversation itself. Category as well as provenance, so a notice can enumerate it: the two\n // axes answer different questions and a provenance alone leaves the field an OUTSTANDING gap.\n .dataCategories(PersonalDataCategory.USER_CONTENT),\n RedactionType.RESET,\n ),\n\n // === HITL (human-in-the-loop) suspension ===\n /\n Serialized {@link FlowActorExecution_PausedApproval} — present ONLY while `status` is\n * `AWAITING_APPROVAL`. A scalar JSON string (see that schema's doc for why it is NOT a nested\n * object: the Zod→Mongoose round-trip). Set on pause, cleared on resume / terminal completion;\n * never authored on create.\n /\n /\n Serialized suspended-turn state; `null` once a decision releases the pause.\n \n `.nullish()`, not `.optional()`, and the difference is load-bearing at the READ. Clearing writes\n * an explicit `null`; the write then re-parses the row to project its response, and under\n * `.optional()` that projection throws `expected string, received null`. The clear PERSISTS (there\n * is no transaction to roll back) and the operation still fails — so the pause was released and\n * the resume aborted, leaving the turn `failed` with its work never done, reported as a resource\n * transformation error that names nothing about approvals.\n \n The input contract needing `.nullish()` (see `FlowActorExecutionUpdateInternalSchema`) is a\n * SEPARATE surface from this one. Fixing only that gets the value written and still throws on the\n * way out — both must admit null or neither does.\n /\n // This blob contains SDK resume messages and pending tool arguments. It is\n // runtime continuation state, not conversation content: generic client reads,\n // summaries and generated API schemas must never disclose it.\n pausedApproval: z.string().nullish().excludeFromCreate().isBackendOnly(),\n\n // === Timing (system-managed; defaults are load-bearing — the create pipeline\n // strips these then date-coerces, so a missing default → Invalid Date) ===\n createdAt: z.date().default(() => new Date()).excludeFromCreate().excludeFromUpdate(),\n updatedAt: z.date().default(() => new Date()).excludeFromCreate().excludeFromUpdate().isSummaryField(),\n /* Set on terminal completion (via UPDATE); never on create. /\n finishedAt: z.date().optional().excludeFromCreate().isSummaryField(),\n});\nexport type FlowActorExecutionBase = z.infer<typeof FlowActorExecutionBaseSchema>;\n\n//===============================================================\n// Polymorphic declaration — one owner-scope variant per scope\n//===============================================================\n\n/\n The three owner-scope variants a flows-actors execution is stamped out for.\n * Each is `isPrimaryScope: true` (the injected owner FK is the primary scope), and\n * each opts OUT of the singleton auto-business-key: a conversation is MULTI-ROW\n * per scope (many discussions per user/org/app), so the injected owner FK must NOT\n * be marked `.isUnique()` — otherwise the second conversation per scope would fail\n * with a duplicate-key error. Mirrors subscriptions / usage-records / SSO\n * connections (all multi-row polymorphic resources).\n /\nexport const FLOW_ACTOR_EXECUTION_SCOPE_VARIANTS: PolymorphicVariantDefinition[] = [\n { parentResourceType: CoreResourceType.USERS, parentFieldIdentifier: coreResourceShared_FieldIdentifier[CoreResourceType.USERS], isPrimaryScope: true },\n { parentResourceType: CoreResourceType.ORGANIZATIONS, parentFieldIdentifier: coreResourceShared_FieldIdentifier[CoreResourceType.ORGANIZATIONS], isPrimaryScope: true },\n { parentResourceType: CoreResourceType.APPLICATION, parentFieldIdentifier: coreResourceShared_FieldIdentifier[CoreResourceType.APPLICATION], isPrimaryScope: true },\n].map(optOutPolymorphicAutoBusinessKey);\n\n/\n Polymorphic declaration for flows-actors executions. Produces 3 variants:\n * - users → `userFlowActorExecutions` (`userId` injected)\n * - organizations→ `organizationFlowActorExecutions` (`organizationId` injected)\n * - applications → `applicationFlowActorExecutions` (`applicationId` injected)\n /\nexport const flowActorExecutionsPolymorphicDeclaration = declarePolymorphicSchemas({\n baseResourceType: 'flowActorExecutions',\n baseFieldIdentifier: 'flowActorExecutionId',\n baseEnumKey: 'FLOW_ACTOR_EXECUTIONS',\n baseSchema: FlowActorExecutionBaseSchema,\n variants: FLOW_ACTOR_EXECUTION_SCOPE_VARIANTS,\n});\n\n/\n Owner-agnostic UPDATE DTO — status transitions, appended messages, completion\n * time. Shared across all variants because it references NO owner FK (owner is\n * immutable). `updatedAt` is system-managed; identity fields are `.excludeFromUpdate()`.\n /\nexport const FlowActorExecutionUpdateInternalSchema = z.object({\n status: FlowActorExecutionBaseSchema.shape.status.optional(),\n statusChanges: FlowActorExecutionBaseSchema.shape.statusChanges.optional(),\n messages: FlowActorExecutionBaseSchema.shape.messages.optional(),\n finishedAt: FlowActorExecutionBaseSchema.shape.finishedAt,\n /\n The suspended-turn state, written when a turn pauses for a human decision and cleared when one\n * arrives.\n \n ⚠️ THIS SCHEMA IS AN ALLOW-LIST, and omitting a field here does not fail — it makes the write\n * SUCCEED and persist nothing. `pausedApproval` was added to the base envelope when the column was\n * introduced but never here, so every approval pause wrote its status and its messages and\n * silently dropped the one field that makes the turn resumable. The row read back as\n * `AWAITING_APPROVAL` with no state to resume from: a turn stuck forever, with no error anywhere.\n * Adding a persisted field is therefore never done without adding it to this contract.\n \n `.nullish()` rather than `.optional()` because clearing is a real transition: the resume writes\n * an explicit `null` to release the pause, and under `.optional()` that null is rejected — which\n * would leave a resumed turn still advertising a decision nobody can answer.\n /\n pausedApproval: FlowActorExecutionBaseSchema.shape.pausedApproval.nullish(),\n});\n\n//===============================================================\n// Exported runtime type\n//===============================================================\n\n/\n Runtime shape of a persisted execution (the base envelope). The owner FK is\n * variant-specific (`userId` \| `organizationId` \| `applicationId`) and read from\n * the concrete variant; the conversational runtime supplies it explicitly on create.\n /\nexport type FlowActorExecution = z.infer<typeof FlowActorExecutionBaseSchema>;\n\n/\n One string for a set of context resource identifiers — `key=value` pairs sorted by key, joined\n * with `;`. Deterministic, so the transport that opens a conversation and the surface that lists\n * history compute the same value from the same identifiers; `''` for none.\n \n Keys and values carry no `=` or `;` in practice (they are resource types and ids); the function\n * does not escape, so a value that did would fold two contexts into one, never split one in two.\n */\nexport function canonicalizeFlowsActorsContextRef(identifiers: Readonly<Record<string, string>> \| undefined): string {\n if (!identifiers) return '';\n return Object.keys(identifiers)\n .sort()\n .map((key) => `${key}=${identifiers[key]}`)\n .join(';');\n}\n"]}

package/dist/esm/flows-actors/flows-actors-task.shared.resources-config.schemas.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"flows-actors-task.shared.resources-config.schemas.d.ts","sourceRoot":"","sources":["~~../../../~~src/flows-actors/flows-actors-task.shared.resources-config.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6CG;AAGH,OAAO,EAAE,qBAAqB,EAAoB,MAAM,gDAAgD,CAAC;AA4DzG;;;;;;;;;GASG;AACH,eAAO,MAAM,kCAAkC,oRAgL9C,CAAC"}
1	+ {"version":3,"file":"flows-actors-task.shared.resources-config.schemas.d.ts","sourceRoot":"","sources":["../../../../src/flows-actors/flows-actors-task.shared.resources-config.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6CG;AAGH,OAAO,EAAE,qBAAqB,EAAoB,MAAM,gDAAgD,CAAC;AA4DzG;;;;;;;;;GASG;AACH,eAAO,MAAM,kCAAkC,oRAgL9C,CAAC"}

package/dist/esm/flows-actors/flows-actors-task.shared.schemas.d.ts CHANGED Viewed

@@ -48,7 +48,7 @@ import { FlowsActors_Status } from './flows-actors.commons.shared.schemas';
 import { type PolymorphicVariantDefinition } from '../resources/utils/resource-polymorphism.schemas';
 export declare const FlowActorTaskBaseSchema: z.ZodObject<{
     description: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodOptional<z.ZodString>>>;
-    topic: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodOptional<z.ZodEnum<typeof import("./tasks.actors.shared.schemas").Actor_Task_Topics>>>>;
+    topic: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodOptional<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodEnum<typeof import("./tasks.actors.shared.schemas").Actor_Task_Topics>>>>>;
     input: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodOptional<z.ZodAny>>>;
     output: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodOptional<z.ZodOptional<z.ZodAny>>>>;
     artifacts: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodOptional<z.ZodOptional<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
@@ -182,7 +182,7 @@ export declare const FLOW_ACTOR_TASK_SCOPE_VARIANTS: PolymorphicVariantDefinitio
  */
 export declare const flowActorTasksPolymorphicDeclaration: import("..").PolymorphicSchemaDeclaration<z.ZodObject<{
     description: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodOptional<z.ZodString>>>;
-    topic: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodOptional<z.ZodEnum<typeof import("./tasks.actors.shared.schemas").Actor_Task_Topics>>>>;
+    topic: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodOptional<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodEnum<typeof import("./tasks.actors.shared.schemas").Actor_Task_Topics>>>>>;
     input: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodOptional<z.ZodAny>>>;
     output: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodOptional<z.ZodOptional<z.ZodAny>>>>;
     artifacts: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodOptional<z.ZodOptional<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{

package/dist/esm/flows-actors/flows-actors-task.shared.schemas.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"flows-actors-task.shared.schemas.d.ts","sourceRoot":"","sources":["~~../../../~~src/flows-actors/flows-actors-task.shared.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4CG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,EAAsC,kBAAkB,EAAE,MAAM,uCAAuC,CAAC;AAS/G,OAAO,EAGL,KAAK,4BAA4B,EAClC,MAAM,kDAAkD,CAAC;AAkB1D,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBA8OlC,CAAC;AACH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAMxE;;;;;;GAMG;AACH,eAAO,MAAM,8BAA8B,EAAE,4BAA4B,EAIlC,CAAC;AAExC;;;;;GAKG;AACH,eAAO,MAAM,oCAAoC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAM/C,CAAC;AAEH;;;GAGG;AACH,eAAO,MAAM,iCAAiC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAe5C,CAAC;AAEH;;;;GAIG;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC"}
1	+ {"version":3,"file":"flows-actors-task.shared.schemas.d.ts","sourceRoot":"","sources":["../../../../src/flows-actors/flows-actors-task.shared.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4CG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,EAAsC,kBAAkB,EAAE,MAAM,uCAAuC,CAAC;AAS/G,OAAO,EAGL,KAAK,4BAA4B,EAClC,MAAM,kDAAkD,CAAC;AAkB1D,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBA8OlC,CAAC;AACH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAMxE;;;;;;GAMG;AACH,eAAO,MAAM,8BAA8B,EAAE,4BAA4B,EAIlC,CAAC;AAExC;;;;;GAKG;AACH,eAAO,MAAM,oCAAoC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAM/C,CAAC;AAEH;;;GAGG;AACH,eAAO,MAAM,iCAAiC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAe5C,CAAC;AAEH;;;;GAIG;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC"}

package/dist/esm/flows-actors/flows-actors.commons.shared.schemas.d.ts CHANGED Viewed

@@ -17,9 +17,23 @@ export declare enum FlowsActors_Status {
      * an approval-gated tool, the run state is persisted (see `pausedApproval` on the
      * execution record), and the runtime is waiting for a decision — a
      * `FLOWS_ACTORS_APPROVAL_RESPONSE` over WebSocket, or an A2A `input-required` task
-     * resolution. NON-terminal: resolves to PROCESSING→COMPLETED on approval, or a
-     * terminal state on denial/expiry. Machine (org/app) turns never enter this state —
+     * resolution. NON-terminal. A decision — approval OR denial — resumes it to PROCESSING
+     * (a denial resumes so the agent can answer the refusal; it is not a cancellation). A
+     * pause whose `expiresAt` passes unanswered becomes FAILED: refused at a late decision,
+     * or failed by the hourly `approval-pause-expiry-sweep` (#484). Machine (org/app) turns never enter this state —
      * approval-gated tools are auto-denied for them (HITL is user-delegated-only in v1).
+     *
+     * ## The same status on the ACTOR-SYSTEM plane, where the decision is a `HumanDecision_Request` (#1360)
+     *
+     * An actor-system execution the engine's driver runs may also stop to ask a person — a mid-run
+     * clarification, a parked question — and it waits in THIS status, with the pending decision and the
+     * resume inputs on the row (`ActorSystem_Execution.suspension` / `.checkpoint`). It is one concept,
+     * not two: an approval is the special case of a human decision with no fields and approve/deny
+     * options (#1269), and A2A already projects this member to `input-required`, which is the general
+     * meaning. What differs by plane is the MECHANISM, not the state: the conversational plane resumes
+     * an agent stream from `pausedApproval` and sweeps lapsed windows hourly; the actor-system plane
+     * resumes a host executor from a checkpoint and is swept by nothing, because its decisions carry no
+     * window unless the request declares one. The member's NAME is narrower than its meaning.
      */
     AWAITING_APPROVAL = "awaiting_approval",
     COMPLETED = "completed",
@@ -204,11 +218,6 @@ export declare const FlowsActors_Event_TemplateSchema: z.ZodObject<{
     payloadMapping: z.ZodRecord<z.ZodString, z.ZodString>;
 }, z.core.$strip>;
 export type FlowsActors_Event_Template = z.infer<typeof FlowsActors_Event_TemplateSchema>;
-export declare enum FlowsActors_CircuitBreaker_Status {
-    CLOSED = "closed",// circuit is closed, requests are allowed
-    OPEN = "open",// circuit is open, requests are blocked
-    HALF_OPEN = "half_open"
-}
 export declare const FlowsActors_Checkpoint_Schema: z.ZodObject<{
     point: z.ZodDiscriminatedUnion<[z.ZodObject<{
         kind: z.ZodLiteral<FlowsActors_ElementKind.ACTOR>;
@@ -233,7 +242,6 @@ export declare const FlowsActors_Checkpoint_Schema: z.ZodObject<{
 }, z.core.$strip>;
 export type FlowsActors_Checkpoint = z.infer<typeof FlowsActors_Checkpoint_Schema>;
 export declare const FlowsActors_Error_State_BaseSchema: z.ZodObject<{
-    circuitBreakerStatus: z.ZodOptional<z.ZodEnum<typeof FlowsActors_CircuitBreaker_Status>>;
     error: z.ZodOptional<z.ZodObject<{
         type: z.ZodEnum<typeof import("..").ErrorType>;
         severity: z.ZodEnum<typeof import("..").ErrorSeverity>;

package/dist/esm/flows-actors/flows-actors.commons.shared.schemas.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"flows-actors.commons.shared.schemas.d.ts","sourceRoot":"","sources":["~~../../../~~src/flows-actors/flows-actors.commons.shared.schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AASxB,oBAAY,uBAAuB;IACjC,IAAI,SAAS;IACb,KAAK,UAAU;IACf,YAAY,iBAAiB;IAC7B,SAAS,cAAc;IACvB,IAAI,eAAe;IACnB,IAAI,eAAe;IACnB,SAAS,oBAAoB;CAC9B;AAED,oBAAY,kBAAkB;IAC5B,KAAK,UAAU;IACf,OAAO,YAAY;IACnB,UAAU,eAAe;IACzB~~;;;;;;;;OAQG~~;IACH,iBAAiB,sBAAsB;IACvC,SAAS,cAAc;IACvB,MAAM,WAAW;IACjB,SAAS,cAAc;IACvB,OAAO,YAAY;CACpB;AAED;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,4BAA4B,EAAE,QAAQ,CAAC,MAAM,CAAC,kBAAkB,EAAE,MAAM,CAAC,CASrF,CAAC;AAEF;;;GAGG;AACH,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAK9D;AAOD,eAAO,MAAM,2CAA2C;;;;;;;;;;;;;;;;;2BAsBtD,CAAC;AACH,MAAM,MAAM,qCAAqC,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2CAA2C,CAAC,CAAC;AAGhH,eAAO,MAAM,oCAAoC;;;;;;;;;;;;;;;;;;;;;;;;;;;2BAoC/C,CAAC;AACH,MAAM,MAAM,8BAA8B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oCAAoC,CAAC,CAAC;AAGlG,oBAAY,oBAAoB;IAC9B,UAAU,eAAe;IACzB,SAAS,cAAc;IACvB,QAAQ,aAAa;IACrB,OAAO,YAAY;IACnB,WAAW,gBAAgB;IAC3B,UAAU,eAAe;IACzB,UAAU,eAAe;CAC1B;AAED,eAAO,MAAM,8BAA8B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;2BA0CzC,CAAC;AACH,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,8BAA8B,CAAC,CAAC;AAYtF,oBAAY,gCAAgC;IAC1C,OAAO,YAAY;IACnB,SAAS,cAAc;IACvB,MAAM,WAAW;IACjB,WAAW,gBAAgB;CAC5B;AAED,oBAAY,sBAAsB;IAEhC,SAAS,cAAc;IACvB,MAAM,WAAW;IACjB,SAAS,cAAc;IACvB,OAAO,YAAY;IACnB,SAAS,cAAc;IACvB,QAAQ,aAAa;CACtB;AAED,eAAO,MAAM,+BAA+B,gCAAe,CAAC;AAC5D,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,+BAA+B,CAAC,CAAC;AAExF,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAgBlC,CAAC;AACH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAExE,eAAO,MAAM,gCAAgC;;;;;iBAM3C,CAAC;AACH,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gCAAgC,CAAC,CAAC;~~AAK1F~~,~~oBAAY,iCAAiC;IAC3C,MAAM,WAAW,CAAE,0CAA0C;IAC7D,IAAI,SAAS,CAAE,wCAAwC;IACvD,SAAS,cAAc;CACxB;AAED,~~eAAO,MAAM,6BAA6B;;;;;;;;;;;;;;;;;;;;;iBAIxC,CAAC;AACH,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AAEnF,eAAO,MAAM,kCAAkC~~;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAI7C~~,CAAC;AACH,MAAM,MAAM,4BAA4B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kCAAkC,CAAC,CAAC;AAI9F;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,eAAO,MAAM,kCAAkC,qBAAqB,CAAC;AAErE;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,mCAAmC,cAAc,CAAC"}
1	+ {"version":3,"file":"flows-actors.commons.shared.schemas.d.ts","sourceRoot":"","sources":["../../../../src/flows-actors/flows-actors.commons.shared.schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AASxB,oBAAY,uBAAuB;IACjC,IAAI,SAAS;IACb,KAAK,UAAU;IACf,YAAY,iBAAiB;IAC7B,SAAS,cAAc;IACvB,IAAI,eAAe;IACnB,IAAI,eAAe;IACnB,SAAS,oBAAoB;CAC9B;AAED,oBAAY,kBAAkB;IAC5B,KAAK,UAAU;IACf,OAAO,YAAY;IACnB,UAAU,eAAe;IACzB;;;;;;;;;;;;;;;;;;;;;;OAsBG;IACH,iBAAiB,sBAAsB;IACvC,SAAS,cAAc;IACvB,MAAM,WAAW;IACjB,SAAS,cAAc;IACvB,OAAO,YAAY;CACpB;AAED;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,4BAA4B,EAAE,QAAQ,CAAC,MAAM,CAAC,kBAAkB,EAAE,MAAM,CAAC,CASrF,CAAC;AAEF;;;GAGG;AACH,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAK9D;AAOD,eAAO,MAAM,2CAA2C;;;;;;;;;;;;;;;;;2BAsBtD,CAAC;AACH,MAAM,MAAM,qCAAqC,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2CAA2C,CAAC,CAAC;AAGhH,eAAO,MAAM,oCAAoC;;;;;;;;;;;;;;;;;;;;;;;;;;;2BAoC/C,CAAC;AACH,MAAM,MAAM,8BAA8B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oCAAoC,CAAC,CAAC;AAGlG,oBAAY,oBAAoB;IAC9B,UAAU,eAAe;IACzB,SAAS,cAAc;IACvB,QAAQ,aAAa;IACrB,OAAO,YAAY;IACnB,WAAW,gBAAgB;IAC3B,UAAU,eAAe;IACzB,UAAU,eAAe;CAC1B;AAED,eAAO,MAAM,8BAA8B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;2BA0CzC,CAAC;AACH,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,8BAA8B,CAAC,CAAC;AAYtF,oBAAY,gCAAgC;IAC1C,OAAO,YAAY;IACnB,SAAS,cAAc;IACvB,MAAM,WAAW;IACjB,WAAW,gBAAgB;CAC5B;AAED,oBAAY,sBAAsB;IAEhC,SAAS,cAAc;IACvB,MAAM,WAAW;IACjB,SAAS,cAAc;IACvB,OAAO,YAAY;IACnB,SAAS,cAAc;IACvB,QAAQ,aAAa;CACtB;AAED,eAAO,MAAM,+BAA+B,gCAAe,CAAC;AAC5D,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,+BAA+B,CAAC,CAAC;AAExF,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAgBlC,CAAC;AACH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAExE,eAAO,MAAM,gCAAgC;;;;;iBAM3C,CAAC;AACH,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gCAAgC,CAAC,CAAC;AAW1F,eAAO,MAAM,6BAA6B;;;;;;;;;;;;;;;;;;;;;iBAIxC,CAAC;AACH,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AAEnF,eAAO,MAAM,kCAAkC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAG7C,CAAC;AACH,MAAM,MAAM,4BAA4B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kCAAkC,CAAC,CAAC;AAI9F;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,eAAO,MAAM,kCAAkC,qBAAqB,CAAC;AAErE;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,mCAAmC,cAAc,CAAC"}

package/dist/esm/flows-actors/flows-actors.commons.shared.schemas.js CHANGED Viewed

@@ -23,9 +23,23 @@ export var FlowsActors_Status;
      * an approval-gated tool, the run state is persisted (see `pausedApproval` on the
      * execution record), and the runtime is waiting for a decision — a
      * `FLOWS_ACTORS_APPROVAL_RESPONSE` over WebSocket, or an A2A `input-required` task
-     * resolution. NON-terminal: resolves to PROCESSING→COMPLETED on approval, or a
-     * terminal state on denial/expiry. Machine (org/app) turns never enter this state —
+     * resolution. NON-terminal. A decision — approval OR denial — resumes it to PROCESSING
+     * (a denial resumes so the agent can answer the refusal; it is not a cancellation). A
+     * pause whose `expiresAt` passes unanswered becomes FAILED: refused at a late decision,
+     * or failed by the hourly `approval-pause-expiry-sweep` (#484). Machine (org/app) turns never enter this state —
      * approval-gated tools are auto-denied for them (HITL is user-delegated-only in v1).
+     *
+     * ## The same status on the ACTOR-SYSTEM plane, where the decision is a `HumanDecision_Request` (#1360)
+     *
+     * An actor-system execution the engine's driver runs may also stop to ask a person — a mid-run
+     * clarification, a parked question — and it waits in THIS status, with the pending decision and the
+     * resume inputs on the row (`ActorSystem_Execution.suspension` / `.checkpoint`). It is one concept,
+     * not two: an approval is the special case of a human decision with no fields and approve/deny
+     * options (#1269), and A2A already projects this member to `input-required`, which is the general
+     * meaning. What differs by plane is the MECHANISM, not the state: the conversational plane resumes
+     * an agent stream from `pausedApproval` and sweeps lapsed windows hourly; the actor-system plane
+     * resumes a host executor from a checkpoint and is swept by nothing, because its decisions carry no
+     * window unless the request declares one. The member's NAME is narrower than its meaning.
      */
     FlowsActors_Status["AWAITING_APPROVAL"] = "awaiting_approval";
     FlowsActors_Status["COMPLETED"] = "completed";
@@ -50,11 +64,11 @@ export const FLOWS_ACTORS_STATUS_MEANINGS = {
     [FlowsActors_Status.READY]: 'Created and ready to start; no work has been done yet.',
     [FlowsActors_Status.PENDING]: 'Accepted and queued, waiting for a runner to pick it up.',
     [FlowsActors_Status.PROCESSING]: 'Running now.',
-    [FlowsActors_Status.AWAITING_APPROVAL]: 'Paused at an approval point: it called something a person must authorize, and it resumes or ends when that decision arrives.',
+    [FlowsActors_Status.AWAITING_APPROVAL]: 'Paused on a person\'s decision — the authorization of something it called, or an answer it asked for — and it resumes when that decision arrives. One that carries an approval window fails if nobody decides before it closes.',
     [FlowsActors_Status.COMPLETED]: 'Finished, and did what it set out to do.',
     [FlowsActors_Status.FAILED]: 'Stopped because something went wrong.',
     [FlowsActors_Status.CANCELLED]: 'Stopped because somebody asked it to stop.',
-    [FlowsActors_Status.ABORTED]: 'Stopped by the system rather than by a person — a shutdown, a timeout, a lost runner.',
+    [FlowsActors_Status.ABORTED]: 'Stopped by the system rather than by a person — a shutdown, a timeout, a lost runner, or a run the system declined to start.',
 };
 /**
  * One `Values:` legend, in the shape the generated API reference already uses for a described enum,
@@ -230,19 +244,17 @@ export const FlowsActors_Event_TemplateSchema = z.object({
 //===============================================================
 //  State
 //===============================================================
-export var FlowsActors_CircuitBreaker_Status;
-(function (FlowsActors_CircuitBreaker_Status) {
-    FlowsActors_CircuitBreaker_Status["CLOSED"] = "closed";
-    FlowsActors_CircuitBreaker_Status["OPEN"] = "open";
-    FlowsActors_CircuitBreaker_Status["HALF_OPEN"] = "half_open";
-})(FlowsActors_CircuitBreaker_Status || (FlowsActors_CircuitBreaker_Status = {}));
+/*
+ * `FlowsActors_CircuitBreaker_Status` and the `circuitBreakerStatus` key every error-state object
+ * carried were removed on 2026-09-20 (#1363): no writer, no reader, and the circuit-breaker
+ * CONFIGURATION they would have reported on was removed in the same change for having no runtime.
+ */
 export const FlowsActors_Checkpoint_Schema = z.object({
     point: FlowsActors_LeafElements_RelationshipSchema,
     timestamp: z.string().refine((val) => !isNaN(Date.parse(val)), { error: 'Invalid datetime string' }),
     context: z.any().optional(),
 });
 export const FlowsActors_Error_State_BaseSchema = z.object({
-    circuitBreakerStatus: z.enum(FlowsActors_CircuitBreaker_Status).optional(),
     error: WildoError_BackendSchema.optional(),
     checkpoints: FlowsActors_Checkpoint_Schema.array().optional(),
 });

package/dist/esm/flows-actors/flows-actors.commons.shared.schemas.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"flows-actors.commons.shared.schemas.js","sourceRoot":"","sources":["../../../src/flows-actors/flows-actors.commons.shared.schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,EAAE,wBAAwB,EAAE,MAAM,iCAAiC,CAAC;AAE3E,iEAAiE;AACjE,WAAW;AACX,iEAAiE;AAEjE,MAAM,CAAN,IAAY,uBAQX;AARD,WAAY,uBAAuB;IACjC,wCAAa,CAAA;IACb,0CAAe,CAAA;IACf,wDAA6B,CAAA;IAC7B,kDAAuB,CAAA;IACvB,8CAAmB,CAAA;IACnB,8CAAmB,CAAA;IACnB,wDAA6B,CAAA;AAC/B,CAAC,EARW,uBAAuB,KAAvB,uBAAuB,QAQlC;AAED,MAAM,CAAN,IAAY,kBAkBX;AAlBD,WAAY,kBAAkB;IAC5B,qCAAe,CAAA;IACf,yCAAmB,CAAA;IACnB,+CAAyB,CAAA;IACzB;;;;;;;;OAQG;IACH,6DAAuC,CAAA;IACvC,6CAAuB,CAAA;IACvB,uCAAiB,CAAA;IACjB,6CAAuB,CAAA;IACvB,yCAAmB,CAAA;AACrB,CAAC,EAlBW,kBAAkB,KAAlB,kBAAkB,QAkB7B;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAiD;IACxF,CAAC,kBAAkB,CAAC,KAAK,CAAC,EAAE,wDAAwD;IACpF,CAAC,kBAAkB,CAAC,OAAO,CAAC,EAAE,0DAA0D;IACxF,CAAC,kBAAkB,CAAC,UAAU,CAAC,EAAE,cAAc;IAC/C,CAAC,kBAAkB,CAAC,iBAAiB,CAAC,EAAE,8HAA8H;IACtK,CAAC,kBAAkB,CAAC,SAAS,CAAC,EAAE,0CAA0C;IAC1E,CAAC,kBAAkB,CAAC,MAAM,CAAC,EAAE,uCAAuC;IACpE,CAAC,kBAAkB,CAAC,SAAS,CAAC,EAAE,4CAA4C;IAC5E,CAAC,kBAAkB,CAAC,OAAO,CAAC,EAAE,uFAAuF;CACtH,CAAC;AAEF;;;GAGG;AACH,MAAM,UAAU,yBAAyB,CAAC,IAAY;IACpD,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,4BAA4B,CAAC;SACxD,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,OAAO,KAAK,OAAO,OAAO,EAAE,CAAC;SACvD,IAAI,CAAC,IAAI,CAAC,CAAC;IACd,OAAO,GAAG,IAAI,gBAAgB,MAAM,EAAE,CAAC;AACzC,CAAC;AAED,iEAAiE;AACjE,gBAAgB;AAChB,iEAAiE;AAGjE,MAAM,CAAC,MAAM,2CAA2C,GAAG,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IACtF,CAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,uBAAuB,CAAC,KAAK,CAAC;QAC9C,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;QACnB,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE;KAC1B,CAAC;IACF,CAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,uBAAuB,CAAC,SAAS,CAAC;QAClD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;QAClB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;KACnB,CAAC;IACF,CAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,uBAAuB,CAAC,IAAI,CAAC;QAC7C,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;QAClB,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE;KAC1B,CAAC;IACF,CAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,uBAAuB,CAAC,SAAS,CAAC;QAClD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;QAClB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;QACtB,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE;KAC1B,CAAC;CACH,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,oCAAoC,GAAG,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IAC/E,CAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,uBAAuB,CAAC,KAAK,CAAC;QAC9C,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;QACnB,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE;KAC1B,CAAC;IACF,CAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,uBAAuB,CAAC,IAAI,CAAC;QAC7C,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;KACnB,CAAC;IACF,CAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,uBAAuB,CAAC,SAAS,CAAC;QAClD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;QAClB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;KACnB,CAAC;IAEF,CAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,uBAAuB,CAAC,IAAI,CAAC;QAC7C,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;QAClB,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE;KAC1B,CAAC;IACF,CAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,uBAAuB,CAAC,IAAI,CAAC;QAC7C,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;QAClB,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE;KAC1B,CAAC;IACF,CAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,uBAAuB,CAAC,YAAY,CAAC;QACrD,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE;KAC1B,CAAC;IACF,CAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,uBAAuB,CAAC,SAAS,CAAC;QAClD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;QAClB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;QACtB,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE;KAC1B,CAAC;CACH,CAAC,CAAC;AAIH,MAAM,CAAN,IAAY,oBAQX;AARD,WAAY,oBAAoB;IAC9B,iDAAyB,CAAA;IACzB,+CAAuB,CAAA;IACvB,6CAAqB,CAAA;IACrB,2CAAmB,CAAA;IACnB,mDAA2B,CAAA;IAC3B,iDAAyB,CAAA;IACzB,iDAAyB,CAAA;AAC3B,CAAC,EARW,oBAAoB,KAApB,oBAAoB,QAQ/B;AAED,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IACzE,CAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,uBAAuB,CAAC,IAAI,CAAC;QAC7C,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC;QACtC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;KACnB,CAAC;IACF,CAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,uBAAuB,CAAC,KAAK,CAAC;QAC9C,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC;QACtC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;QACnB,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE;KAC1B,CAAC;IACF,CAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,uBAAuB,CAAC,SAAS,CAAC;QAClD,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC;QACtC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;QAClB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;KACnB,CAAC;IACF,CAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,uBAAuB,CAAC,IAAI,CAAC;QAC7C,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC;QACtC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;QAClB,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE;KAC1B,CAAC;IACF,CAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,uBAAuB,CAAC,IAAI,CAAC;QAC7C,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC;QACtC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;QAClB,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE;KAC1B,CAAC;IACF,CAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,uBAAuB,CAAC,SAAS,CAAC;QAClD,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC;QACtC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;QAClB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;QACtB,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE;KAC1B,CAAC;IACF,CAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,uBAAuB,CAAC,YAAY,CAAC;QACrD,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC;QACtC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE;KAC1B,CAAC;CACH,CAAC,CAAC;AAGH,iEAAiE;AACjE,qBAAqB;AACrB,WAAW;AACX,iFAAiF;AACjF,gEAAgE;AAChE,+DAA+D;AAC/D,+DAA+D;AAC/D,+CAA+C;AAC/C,iEAAiE;AAEjE,MAAM,CAAN,IAAY,gCAKX;AALD,WAAY,gCAAgC;IAC1C,uDAAmB,CAAA;IACnB,2DAAuB,CAAA;IACvB,qDAAiB,CAAA;IACjB,+DAA2B,CAAA;AAC7B,CAAC,EALW,gCAAgC,KAAhC,gCAAgC,QAK3C;AAED,MAAM,CAAN,IAAY,sBAQX;AARD,WAAY,sBAAsB;IAEhC,iDAAuB,CAAA;IACvB,2CAAiB,CAAA;IACjB,iDAAuB,CAAA;IACvB,6CAAmB,CAAA;IACnB,iDAAuB,CAAA;IACvB,+CAAqB,CAAA;AACvB,CAAC,EARW,sBAAsB,KAAtB,sBAAsB,QAQjC;AAED,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AAG5D,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC1B,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC;IACzC,MAAM,EAAG,oCAAoC,CAAC,QAAQ,EAAE;IACxD,YAAY,EAAE,+BAA+B,CAAC,QAAQ,EAAE;IAExD,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,OAAO,EAAE,CAAC,CAAC,GAAG,EAAE;IAEhB,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACrC,QAAQ,EAAG,CAAC,CAAC,MAAM,CAAC;QAClB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;QAErB,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QACpC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KACnC,CAAC;CACH,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,gCAAgC,GAAG,CAAC,CAAC,MAAM,CAAC;IACvD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,YAAY,EAAE,+BAA+B,CAAC,QAAQ,EAAE;IACxD,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IAEjB,cAAc,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;CACjD,CAAC,CAAC;AAGH,iEAAiE;AACjE,SAAS;AACT,iEAAiE;AACjE,MAAM,CAAN,IAAY,iCAIX;AAJD,WAAY,iCAAiC;IAC3C,sDAAiB,CAAA;IACjB,kDAAa,CAAA;IACb,4DAAuB,CAAA;AACzB,CAAC,EAJW,iCAAiC,KAAjC,iCAAiC,QAI5C;AAED,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC,MAAM,CAAC;IACpD,KAAK,EAAG,2CAA2C;IACnD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC;IACpG,OAAO,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;CAC5B,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,kCAAkC,GAAG,CAAC,CAAC,MAAM,CAAC;IACzD,oBAAoB,EAAE,CAAC,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC,QAAQ,EAAE;IAC1E,KAAK,EAAE,wBAAwB,CAAC,QAAQ,EAAE;IAC1C,WAAW,EAAE,6BAA6B,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE;CAC9D,CAAC,CAAC;AAKH;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,CAAC,MAAM,kCAAkC,GAAG,kBAAkB,CAAC;AAErE;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,mCAAmC,GAAG,WAAW,CAAC","sourcesContent":["import { z } from \"zod\";\nimport { ResourcePrimaryScope } from \"../resources/resources.shared.schemas\";\nimport { RolesSchema } from \"../security/authorizations/roles.shared.schemas\";\nimport { WildoError_BackendSchema } from \"../errors/errors.shared.schemas\";\n\n//===============================================================\n// General\n//===============================================================\n\nexport enum FlowsActors_ElementKind {\n FLOW = \"flow\",\n ACTOR = \"actor\",\n ACTOR_SYSTEM = \"actor.system\",\n FLOW_STEP = \"flow.step\",\n TASK = \"actor.task\",\n PLAN = \"actor.plan\",\n PLAN_STEP = \"actor.plan.step\",\n}\n\nexport enum FlowsActors_Status {\n READY = \"ready\",\n PENDING = \"pending\",\n PROCESSING = \"processing\",\n /*\n The turn is SUSPENDED at a human-in-the-loop approval boundary: the agent called\n * an approval-gated tool, the run state is persisted (see `pausedApproval` on the\n * execution record), and the runtime is waiting for a decision — a\n * `FLOWS_ACTORS_APPROVAL_RESPONSE` over WebSocket, or an A2A `input-required` task\n * resolution. NON-terminal: resolves to PROCESSING→COMPLETED on approval, or a\n * terminal state on denial/expiry. Machine (org/app) turns never enter this state —\n * approval-gated tools are auto-denied for them (HITL is user-delegated-only in v1).\n /\n AWAITING_APPROVAL = \"awaiting_approval\",\n COMPLETED = \"completed\",\n FAILED = \"failed\",\n CANCELLED = \"cancelled\",\n ABORTED = \"aborted\",\n}\n\n/\n What each run state MEANS to somebody watching a run — the words, made reachable.\n \n The members carry their meanings in JSDoc, which no runtime surface can read, so every surface\n * that had to SHOW one either invented words or printed a bare token. The published API reference\n * did the second: the top-level `status` field carries a description from its resource\n * specification, and the identical enum one level down in `statusChanges[]` carried nothing,\n * because field-doc injection reaches top-level properties only.\n \n Authored once here and rendered into every `.describe()` that needs it, so three schemas cannot\n * drift into three accounts of one vocabulary. Exhaustive by type: a tenth state does not compile\n * until it has been worded.\n /\nexport const FLOWS_ACTORS_STATUS_MEANINGS: Readonly<Record<FlowsActors_Status, string>> = {\n [FlowsActors_Status.READY]: 'Created and ready to start; no work has been done yet.',\n [FlowsActors_Status.PENDING]: 'Accepted and queued, waiting for a runner to pick it up.',\n [FlowsActors_Status.PROCESSING]: 'Running now.',\n [FlowsActors_Status.AWAITING_APPROVAL]: 'Paused at an approval point: it called something a person must authorize, and it resumes or ends when that decision arrives.',\n [FlowsActors_Status.COMPLETED]: 'Finished, and did what it set out to do.',\n [FlowsActors_Status.FAILED]: 'Stopped because something went wrong.',\n [FlowsActors_Status.CANCELLED]: 'Stopped because somebody asked it to stop.',\n [FlowsActors_Status.ABORTED]: 'Stopped by the system rather than by a person — a shutdown, a timeout, a lost runner.',\n};\n\n/\n One `Values:` legend, in the shape the generated API reference already uses for a described enum,\n * so a NESTED field reads exactly like a top-level one rather than like a second convention.\n /\nexport function describeFlowsActorsStatus(lead: string): string {\n const legend = Object.entries(FLOWS_ACTORS_STATUS_MEANINGS)\n .map(([value, meaning]) => `- \\`${value}\\`: ${meaning}`)\n .join('\\n');\n return `${lead}\\n\\nValues:\\n${legend}`;\n}\n\n//===============================================================\n// Relationship\n//===============================================================\n\n\nexport const FlowsActors_LeafElements_RelationshipSchema = z.discriminatedUnion(\"kind\", [\n z.object({\n kind: z.literal(FlowsActors_ElementKind.ACTOR),\n actorId: z.string(),\n actorSystemId: z.string(),\n }),\n z.object({\n kind: z.literal(FlowsActors_ElementKind.FLOW_STEP),\n flowId: z.string(),\n stepId: z.string(),\n }),\n z.object({\n kind: z.literal(FlowsActors_ElementKind.TASK),\n taskId: z.string(),\n actorSystemId: z.string(),\n }),\n z.object({\n kind: z.literal(FlowsActors_ElementKind.PLAN_STEP),\n planId: z.string(),\n planStepId: z.string(),\n actorSystemId: z.string(),\n }),\n]);\nexport type FlowsActors_LeafElements_Relationship = z.infer<typeof FlowsActors_LeafElements_RelationshipSchema>;\n\n\nexport const FlowsActors_SimpleRelationshipSchema = z.discriminatedUnion(\"kind\", [\n z.object({\n kind: z.literal(FlowsActors_ElementKind.ACTOR),\n actorId: z.string(),\n actorSystemId: z.string(),\n }),\n z.object({\n kind: z.literal(FlowsActors_ElementKind.FLOW),\n flowId: z.string(),\n }),\n z.object({\n kind: z.literal(FlowsActors_ElementKind.FLOW_STEP),\n flowId: z.string(),\n stepId: z.string(),\n }),\n\n z.object({\n kind: z.literal(FlowsActors_ElementKind.TASK),\n taskId: z.string(),\n actorSystemId: z.string(),\n }),\n z.object({\n kind: z.literal(FlowsActors_ElementKind.PLAN),\n planId: z.string(),\n actorSystemId: z.string(),\n }),\n z.object({\n kind: z.literal(FlowsActors_ElementKind.ACTOR_SYSTEM),\n actorSystemId: z.string(),\n }),\n z.object({\n kind: z.literal(FlowsActors_ElementKind.PLAN_STEP),\n planId: z.string(),\n planStepId: z.string(),\n actorSystemId: z.string(),\n }),\n]);\nexport type FlowsActors_SimpleRelationship = z.infer<typeof FlowsActors_SimpleRelationshipSchema>;\n\n\nexport enum FlowsActors_Relation {\n CREATED_BY = \"created_by\",\n PARENT_OF = \"parent_of\",\n CHILD_OF = \"child_of\",\n PART_OF = \"part_of\",\n IS_FALLBACK = \"is_fallback\",\n DEPENDS_ON = \"depends_on\",\n BLOCKED_BY = \"blocked_by\",\n}\n\nexport const FlowsActors_RelationshipSchema = z.discriminatedUnion(\"kind\", [\n z.object({\n kind: z.literal(FlowsActors_ElementKind.FLOW),\n relation: z.enum(FlowsActors_Relation),\n flowId: z.string(),\n }),\n z.object({\n kind: z.literal(FlowsActors_ElementKind.ACTOR),\n relation: z.enum(FlowsActors_Relation),\n actorId: z.string(),\n actorSystemId: z.string(),\n }),\n z.object({\n kind: z.literal(FlowsActors_ElementKind.FLOW_STEP),\n relation: z.enum(FlowsActors_Relation),\n flowId: z.string(),\n stepId: z.string(),\n }),\n z.object({\n kind: z.literal(FlowsActors_ElementKind.TASK),\n relation: z.enum(FlowsActors_Relation),\n taskId: z.string(),\n actorSystemId: z.string(),\n }),\n z.object({\n kind: z.literal(FlowsActors_ElementKind.PLAN),\n relation: z.enum(FlowsActors_Relation),\n planId: z.string(),\n actorSystemId: z.string(),\n }),\n z.object({\n kind: z.literal(FlowsActors_ElementKind.PLAN_STEP),\n relation: z.enum(FlowsActors_Relation),\n planId: z.string(),\n planStepId: z.string(),\n actorSystemId: z.string(),\n }),\n z.object({\n kind: z.literal(FlowsActors_ElementKind.ACTOR_SYSTEM),\n relation: z.enum(FlowsActors_Relation),\n actorSystemId: z.string(),\n }),\n]);\nexport type FlowsActors_Relationship = z.infer<typeof FlowsActors_RelationshipSchema>;\n\n//===============================================================\n// FlowsActors_Event\n// --------\n// FlowsActors_Events are immutable messages that flow through the system topics,\n// carrying payloads and metadata between flows and actors. They\n// enable loose coupling, traceability through correlation IDs,\n// and event sourcing patterns for building scalable, resilient\n// distributed systems with clear audit trails.\n//===============================================================\n\nexport enum FlowsActors_Event_DeliveryStatus {\n PENDING = \"pending\",\n DELIVERED = \"delivered\",\n FAILED = \"failed\",\n DEAD_LETTER = \"dead_letter\",\n}\n\nexport enum FlowsActors_Event_Type {\n\n COMPLETED = \"completed\",\n FAILED = \"failed\",\n CANCELLED = \"cancelled\",\n ABORTED = \"aborted\",\n REQUESTED = \"requested\",\n ACTIONED = \"actioned\",\n}\n\nexport const FlowsActors_Event_ContextSchema = z.object({});\nexport type FlowsActors_Event_Context = z.infer<typeof FlowsActors_Event_ContextSchema>;\n\nexport const FlowsActors_EventSchema = z.object({\n _id: z.string().optional(),\n eventType: z.enum(FlowsActors_Event_Type),\n origin : FlowsActors_SimpleRelationshipSchema.optional(),\n eventContext: FlowsActors_Event_ContextSchema.optional(),\n\n topic: z.string(),\n payload: z.any(),\n\n sequenceNumber: z.number().optional(),\n tracking : z.object({\n timestamp: z.string(),\n\n correlationId: z.string().optional(),\n causationId: z.string().optional(),\n }),\n});\nexport type FlowsActors_Event = z.infer<typeof FlowsActors_EventSchema>;\n\nexport const FlowsActors_Event_TemplateSchema = z.object({\n eventType: z.string(),\n eventContext: FlowsActors_Event_ContextSchema.optional(),\n topic: z.string(),\n\n payloadMapping: z.record(z.string(), z.string()),\n});\nexport type FlowsActors_Event_Template = z.infer<typeof FlowsActors_Event_TemplateSchema>;\n\n//===============================================================\n// State\n//===============================================================\nexport enum FlowsActors_CircuitBreaker_Status {\n CLOSED = \"closed\", // circuit is closed, requests are allowed\n OPEN = \"open\", // circuit is open, requests are blocked\n HALF_OPEN = \"half_open\", // circuit is half-open, requests are allowed after a timeout\n}\n\nexport const FlowsActors_Checkpoint_Schema = z.object({\n point : FlowsActors_LeafElements_RelationshipSchema,\n timestamp: z.string().refine((val) => !isNaN(Date.parse(val)), { error: 'Invalid datetime string' }),\n context: z.any().optional(),\n});\nexport type FlowsActors_Checkpoint = z.infer<typeof FlowsActors_Checkpoint_Schema>;\n\nexport const FlowsActors_Error_State_BaseSchema = z.object({\n circuitBreakerStatus: z.enum(FlowsActors_CircuitBreaker_Status).optional(),\n error: WildoError_BackendSchema.optional(),\n checkpoints: FlowsActors_Checkpoint_Schema.array().optional(),\n});\nexport type FlowsActors_Error_State_Base = z.infer<typeof FlowsActors_Error_State_BaseSchema>;\n\n\n\n/\n The stored `machineCredentialId` of a turn that had NO machine credential — i.e. a\n * user-delegated turn, where the human IS the principal and `userId` already discriminates.\n \n ## Why a sentinel rather than an absent field\n \n Both flows-actors families (executions and tasks) are owned by an injected scope FK, and for the\n * MACHINE variants that FK does not identify the principal:\n \n - `applicationId` is a DEPLOYMENT SINGLETON, so every app-scope OAuth client resolves to the\n * same owner filter — client B could read and cancel client A's work.\n * - `organizationId` is shared by every machine client of one tenant, with the same consequence\n * inside that tenant.\n \n Since the conversation title / task title carries the opening characters of the originating\n * prompt, that is a cross-client disclosure of prompt text between separately-credentialed\n * principals — the harm the per-agent axis was added to prevent, one axis short.\n \n Storing a normalised value on EVERY row (rather than leaving user-delegated rows null) keeps the\n * filter a plain equality on both persistence adapters, instead of depending on how each one\n * matches an absent field. The `` characters cannot occur in a credential id.\n /\nexport const FLOWS_ACTORS_NO_MACHINE_CREDENTIAL = 'user-delegated';\n\n/*\n The stored agent identity of the DEFAULT (unnamed) A2A agent, and of any transport that has no\n * agent at all — the WebSocket conversation surface.\n \n Declared A2A instance refs are constrained to `^[a-z0-9][a-z0-9-]$`, so the `` characters make\n * this unreachable by any real ref. Storing a normalised value on EVERY row keeps the read filter a\n * plain equality on both persistence adapters rather than depending on how each matches an absent\n * field.\n \n ONE source for both families: `A2A_DEFAULT_INSTANCE_REF` aliases this rather than restating it,\n * because two constants with the same literal are exactly how the task and execution planes would\n * drift apart.\n /\nexport const FLOWS_ACTORS_DEFAULT_AGENT_INSTANCE = 'default*';\n"]}
1	+ {"version":3,"file":"flows-actors.commons.shared.schemas.js","sourceRoot":"","sources":["../../../../src/flows-actors/flows-actors.commons.shared.schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,EAAE,wBAAwB,EAAE,MAAM,iCAAiC,CAAC;AAE3E,iEAAiE;AACjE,WAAW;AACX,iEAAiE;AAEjE,MAAM,CAAN,IAAY,uBAQX;AARD,WAAY,uBAAuB;IACjC,wCAAa,CAAA;IACb,0CAAe,CAAA;IACf,wDAA6B,CAAA;IAC7B,kDAAuB,CAAA;IACvB,8CAAmB,CAAA;IACnB,8CAAmB,CAAA;IACnB,wDAA6B,CAAA;AAC/B,CAAC,EARW,uBAAuB,KAAvB,uBAAuB,QAQlC;AAED,MAAM,CAAN,IAAY,kBAgCX;AAhCD,WAAY,kBAAkB;IAC5B,qCAAe,CAAA;IACf,yCAAmB,CAAA;IACnB,+CAAyB,CAAA;IACzB;;;;;;;;;;;;;;;;;;;;;;OAsBG;IACH,6DAAuC,CAAA;IACvC,6CAAuB,CAAA;IACvB,uCAAiB,CAAA;IACjB,6CAAuB,CAAA;IACvB,yCAAmB,CAAA;AACrB,CAAC,EAhCW,kBAAkB,KAAlB,kBAAkB,QAgC7B;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAiD;IACxF,CAAC,kBAAkB,CAAC,KAAK,CAAC,EAAE,wDAAwD;IACpF,CAAC,kBAAkB,CAAC,OAAO,CAAC,EAAE,0DAA0D;IACxF,CAAC,kBAAkB,CAAC,UAAU,CAAC,EAAE,cAAc;IAC/C,CAAC,kBAAkB,CAAC,iBAAiB,CAAC,EAAE,iOAAiO;IACzQ,CAAC,kBAAkB,CAAC,SAAS,CAAC,EAAE,0CAA0C;IAC1E,CAAC,kBAAkB,CAAC,MAAM,CAAC,EAAE,uCAAuC;IACpE,CAAC,kBAAkB,CAAC,SAAS,CAAC,EAAE,4CAA4C;IAC5E,CAAC,kBAAkB,CAAC,OAAO,CAAC,EAAE,8HAA8H;CAC7J,CAAC;AAEF;;;GAGG;AACH,MAAM,UAAU,yBAAyB,CAAC,IAAY;IACpD,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,4BAA4B,CAAC;SACxD,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,OAAO,KAAK,OAAO,OAAO,EAAE,CAAC;SACvD,IAAI,CAAC,IAAI,CAAC,CAAC;IACd,OAAO,GAAG,IAAI,gBAAgB,MAAM,EAAE,CAAC;AACzC,CAAC;AAED,iEAAiE;AACjE,gBAAgB;AAChB,iEAAiE;AAGjE,MAAM,CAAC,MAAM,2CAA2C,GAAG,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IACtF,CAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,uBAAuB,CAAC,KAAK,CAAC;QAC9C,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;QACnB,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE;KAC1B,CAAC;IACF,CAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,uBAAuB,CAAC,SAAS,CAAC;QAClD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;QAClB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;KACnB,CAAC;IACF,CAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,uBAAuB,CAAC,IAAI,CAAC;QAC7C,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;QAClB,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE;KAC1B,CAAC;IACF,CAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,uBAAuB,CAAC,SAAS,CAAC;QAClD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;QAClB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;QACtB,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE;KAC1B,CAAC;CACH,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,oCAAoC,GAAG,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IAC/E,CAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,uBAAuB,CAAC,KAAK,CAAC;QAC9C,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;QACnB,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE;KAC1B,CAAC;IACF,CAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,uBAAuB,CAAC,IAAI,CAAC;QAC7C,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;KACnB,CAAC;IACF,CAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,uBAAuB,CAAC,SAAS,CAAC;QAClD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;QAClB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;KACnB,CAAC;IAEF,CAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,uBAAuB,CAAC,IAAI,CAAC;QAC7C,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;QAClB,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE;KAC1B,CAAC;IACF,CAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,uBAAuB,CAAC,IAAI,CAAC;QAC7C,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;QAClB,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE;KAC1B,CAAC;IACF,CAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,uBAAuB,CAAC,YAAY,CAAC;QACrD,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE;KAC1B,CAAC;IACF,CAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,uBAAuB,CAAC,SAAS,CAAC;QAClD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;QAClB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;QACtB,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE;KAC1B,CAAC;CACH,CAAC,CAAC;AAIH,MAAM,CAAN,IAAY,oBAQX;AARD,WAAY,oBAAoB;IAC9B,iDAAyB,CAAA;IACzB,+CAAuB,CAAA;IACvB,6CAAqB,CAAA;IACrB,2CAAmB,CAAA;IACnB,mDAA2B,CAAA;IAC3B,iDAAyB,CAAA;IACzB,iDAAyB,CAAA;AAC3B,CAAC,EARW,oBAAoB,KAApB,oBAAoB,QAQ/B;AAED,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IACzE,CAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,uBAAuB,CAAC,IAAI,CAAC;QAC7C,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC;QACtC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;KACnB,CAAC;IACF,CAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,uBAAuB,CAAC,KAAK,CAAC;QAC9C,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC;QACtC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;QACnB,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE;KAC1B,CAAC;IACF,CAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,uBAAuB,CAAC,SAAS,CAAC;QAClD,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC;QACtC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;QAClB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;KACnB,CAAC;IACF,CAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,uBAAuB,CAAC,IAAI,CAAC;QAC7C,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC;QACtC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;QAClB,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE;KAC1B,CAAC;IACF,CAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,uBAAuB,CAAC,IAAI,CAAC;QAC7C,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC;QACtC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;QAClB,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE;KAC1B,CAAC;IACF,CAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,uBAAuB,CAAC,SAAS,CAAC;QAClD,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC;QACtC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;QAClB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;QACtB,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE;KAC1B,CAAC;IACF,CAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,uBAAuB,CAAC,YAAY,CAAC;QACrD,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC;QACtC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE;KAC1B,CAAC;CACH,CAAC,CAAC;AAGH,iEAAiE;AACjE,qBAAqB;AACrB,WAAW;AACX,iFAAiF;AACjF,gEAAgE;AAChE,+DAA+D;AAC/D,+DAA+D;AAC/D,+CAA+C;AAC/C,iEAAiE;AAEjE,MAAM,CAAN,IAAY,gCAKX;AALD,WAAY,gCAAgC;IAC1C,uDAAmB,CAAA;IACnB,2DAAuB,CAAA;IACvB,qDAAiB,CAAA;IACjB,+DAA2B,CAAA;AAC7B,CAAC,EALW,gCAAgC,KAAhC,gCAAgC,QAK3C;AAED,MAAM,CAAN,IAAY,sBAQX;AARD,WAAY,sBAAsB;IAEhC,iDAAuB,CAAA;IACvB,2CAAiB,CAAA;IACjB,iDAAuB,CAAA;IACvB,6CAAmB,CAAA;IACnB,iDAAuB,CAAA;IACvB,+CAAqB,CAAA;AACvB,CAAC,EARW,sBAAsB,KAAtB,sBAAsB,QAQjC;AAED,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AAG5D,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC1B,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC;IACzC,MAAM,EAAG,oCAAoC,CAAC,QAAQ,EAAE;IACxD,YAAY,EAAE,+BAA+B,CAAC,QAAQ,EAAE;IAExD,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,OAAO,EAAE,CAAC,CAAC,GAAG,EAAE;IAEhB,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACrC,QAAQ,EAAG,CAAC,CAAC,MAAM,CAAC;QAClB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;QAErB,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QACpC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KACnC,CAAC;CACH,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,gCAAgC,GAAG,CAAC,CAAC,MAAM,CAAC;IACvD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,YAAY,EAAE,+BAA+B,CAAC,QAAQ,EAAE;IACxD,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IAEjB,cAAc,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;CACjD,CAAC,CAAC;AAGH,iEAAiE;AACjE,SAAS;AACT,iEAAiE;AACjE;;;;GAIG;AAEH,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC,MAAM,CAAC;IACpD,KAAK,EAAG,2CAA2C;IACnD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC;IACpG,OAAO,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;CAC5B,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,kCAAkC,GAAG,CAAC,CAAC,MAAM,CAAC;IACzD,KAAK,EAAE,wBAAwB,CAAC,QAAQ,EAAE;IAC1C,WAAW,EAAE,6BAA6B,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE;CAC9D,CAAC,CAAC;AAKH;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,CAAC,MAAM,kCAAkC,GAAG,kBAAkB,CAAC;AAErE;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,mCAAmC,GAAG,WAAW,CAAC","sourcesContent":["import { z } from \"zod\";\nimport { ResourcePrimaryScope } from \"../resources/resources.shared.schemas\";\nimport { RolesSchema } from \"../security/authorizations/roles.shared.schemas\";\nimport { WildoError_BackendSchema } from \"../errors/errors.shared.schemas\";\n\n//===============================================================\n// General\n//===============================================================\n\nexport enum FlowsActors_ElementKind {\n FLOW = \"flow\",\n ACTOR = \"actor\",\n ACTOR_SYSTEM = \"actor.system\",\n FLOW_STEP = \"flow.step\",\n TASK = \"actor.task\",\n PLAN = \"actor.plan\",\n PLAN_STEP = \"actor.plan.step\",\n}\n\nexport enum FlowsActors_Status {\n READY = \"ready\",\n PENDING = \"pending\",\n PROCESSING = \"processing\",\n /*\n The turn is SUSPENDED at a human-in-the-loop approval boundary: the agent called\n * an approval-gated tool, the run state is persisted (see `pausedApproval` on the\n * execution record), and the runtime is waiting for a decision — a\n * `FLOWS_ACTORS_APPROVAL_RESPONSE` over WebSocket, or an A2A `input-required` task\n * resolution. NON-terminal. A decision — approval OR denial — resumes it to PROCESSING\n * (a denial resumes so the agent can answer the refusal; it is not a cancellation). A\n * pause whose `expiresAt` passes unanswered becomes FAILED: refused at a late decision,\n * or failed by the hourly `approval-pause-expiry-sweep` (#484). Machine (org/app) turns never enter this state —\n * approval-gated tools are auto-denied for them (HITL is user-delegated-only in v1).\n \n ## The same status on the ACTOR-SYSTEM plane, where the decision is a `HumanDecision_Request` (#1360)\n \n An actor-system execution the engine's driver runs may also stop to ask a person — a mid-run\n * clarification, a parked question — and it waits in THIS status, with the pending decision and the\n * resume inputs on the row (`ActorSystem_Execution.suspension` / `.checkpoint`). It is one concept,\n * not two: an approval is the special case of a human decision with no fields and approve/deny\n * options (#1269), and A2A already projects this member to `input-required`, which is the general\n * meaning. What differs by plane is the MECHANISM, not the state: the conversational plane resumes\n * an agent stream from `pausedApproval` and sweeps lapsed windows hourly; the actor-system plane\n * resumes a host executor from a checkpoint and is swept by nothing, because its decisions carry no\n * window unless the request declares one. The member's NAME is narrower than its meaning.\n /\n AWAITING_APPROVAL = \"awaiting_approval\",\n COMPLETED = \"completed\",\n FAILED = \"failed\",\n CANCELLED = \"cancelled\",\n ABORTED = \"aborted\",\n}\n\n/\n What each run state MEANS to somebody watching a run — the words, made reachable.\n \n The members carry their meanings in JSDoc, which no runtime surface can read, so every surface\n * that had to SHOW one either invented words or printed a bare token. The published API reference\n * did the second: the top-level `status` field carries a description from its resource\n * specification, and the identical enum one level down in `statusChanges[]` carried nothing,\n * because field-doc injection reaches top-level properties only.\n \n Authored once here and rendered into every `.describe()` that needs it, so three schemas cannot\n * drift into three accounts of one vocabulary. Exhaustive by type: a tenth state does not compile\n * until it has been worded.\n /\nexport const FLOWS_ACTORS_STATUS_MEANINGS: Readonly<Record<FlowsActors_Status, string>> = {\n [FlowsActors_Status.READY]: 'Created and ready to start; no work has been done yet.',\n [FlowsActors_Status.PENDING]: 'Accepted and queued, waiting for a runner to pick it up.',\n [FlowsActors_Status.PROCESSING]: 'Running now.',\n [FlowsActors_Status.AWAITING_APPROVAL]: 'Paused on a person\\'s decision — the authorization of something it called, or an answer it asked for — and it resumes when that decision arrives. One that carries an approval window fails if nobody decides before it closes.',\n [FlowsActors_Status.COMPLETED]: 'Finished, and did what it set out to do.',\n [FlowsActors_Status.FAILED]: 'Stopped because something went wrong.',\n [FlowsActors_Status.CANCELLED]: 'Stopped because somebody asked it to stop.',\n [FlowsActors_Status.ABORTED]: 'Stopped by the system rather than by a person — a shutdown, a timeout, a lost runner, or a run the system declined to start.',\n};\n\n/\n One `Values:` legend, in the shape the generated API reference already uses for a described enum,\n * so a NESTED field reads exactly like a top-level one rather than like a second convention.\n /\nexport function describeFlowsActorsStatus(lead: string): string {\n const legend = Object.entries(FLOWS_ACTORS_STATUS_MEANINGS)\n .map(([value, meaning]) => `- \\`${value}\\`: ${meaning}`)\n .join('\\n');\n return `${lead}\\n\\nValues:\\n${legend}`;\n}\n\n//===============================================================\n// Relationship\n//===============================================================\n\n\nexport const FlowsActors_LeafElements_RelationshipSchema = z.discriminatedUnion(\"kind\", [\n z.object({\n kind: z.literal(FlowsActors_ElementKind.ACTOR),\n actorId: z.string(),\n actorSystemId: z.string(),\n }),\n z.object({\n kind: z.literal(FlowsActors_ElementKind.FLOW_STEP),\n flowId: z.string(),\n stepId: z.string(),\n }),\n z.object({\n kind: z.literal(FlowsActors_ElementKind.TASK),\n taskId: z.string(),\n actorSystemId: z.string(),\n }),\n z.object({\n kind: z.literal(FlowsActors_ElementKind.PLAN_STEP),\n planId: z.string(),\n planStepId: z.string(),\n actorSystemId: z.string(),\n }),\n]);\nexport type FlowsActors_LeafElements_Relationship = z.infer<typeof FlowsActors_LeafElements_RelationshipSchema>;\n\n\nexport const FlowsActors_SimpleRelationshipSchema = z.discriminatedUnion(\"kind\", [\n z.object({\n kind: z.literal(FlowsActors_ElementKind.ACTOR),\n actorId: z.string(),\n actorSystemId: z.string(),\n }),\n z.object({\n kind: z.literal(FlowsActors_ElementKind.FLOW),\n flowId: z.string(),\n }),\n z.object({\n kind: z.literal(FlowsActors_ElementKind.FLOW_STEP),\n flowId: z.string(),\n stepId: z.string(),\n }),\n\n z.object({\n kind: z.literal(FlowsActors_ElementKind.TASK),\n taskId: z.string(),\n actorSystemId: z.string(),\n }),\n z.object({\n kind: z.literal(FlowsActors_ElementKind.PLAN),\n planId: z.string(),\n actorSystemId: z.string(),\n }),\n z.object({\n kind: z.literal(FlowsActors_ElementKind.ACTOR_SYSTEM),\n actorSystemId: z.string(),\n }),\n z.object({\n kind: z.literal(FlowsActors_ElementKind.PLAN_STEP),\n planId: z.string(),\n planStepId: z.string(),\n actorSystemId: z.string(),\n }),\n]);\nexport type FlowsActors_SimpleRelationship = z.infer<typeof FlowsActors_SimpleRelationshipSchema>;\n\n\nexport enum FlowsActors_Relation {\n CREATED_BY = \"created_by\",\n PARENT_OF = \"parent_of\",\n CHILD_OF = \"child_of\",\n PART_OF = \"part_of\",\n IS_FALLBACK = \"is_fallback\",\n DEPENDS_ON = \"depends_on\",\n BLOCKED_BY = \"blocked_by\",\n}\n\nexport const FlowsActors_RelationshipSchema = z.discriminatedUnion(\"kind\", [\n z.object({\n kind: z.literal(FlowsActors_ElementKind.FLOW),\n relation: z.enum(FlowsActors_Relation),\n flowId: z.string(),\n }),\n z.object({\n kind: z.literal(FlowsActors_ElementKind.ACTOR),\n relation: z.enum(FlowsActors_Relation),\n actorId: z.string(),\n actorSystemId: z.string(),\n }),\n z.object({\n kind: z.literal(FlowsActors_ElementKind.FLOW_STEP),\n relation: z.enum(FlowsActors_Relation),\n flowId: z.string(),\n stepId: z.string(),\n }),\n z.object({\n kind: z.literal(FlowsActors_ElementKind.TASK),\n relation: z.enum(FlowsActors_Relation),\n taskId: z.string(),\n actorSystemId: z.string(),\n }),\n z.object({\n kind: z.literal(FlowsActors_ElementKind.PLAN),\n relation: z.enum(FlowsActors_Relation),\n planId: z.string(),\n actorSystemId: z.string(),\n }),\n z.object({\n kind: z.literal(FlowsActors_ElementKind.PLAN_STEP),\n relation: z.enum(FlowsActors_Relation),\n planId: z.string(),\n planStepId: z.string(),\n actorSystemId: z.string(),\n }),\n z.object({\n kind: z.literal(FlowsActors_ElementKind.ACTOR_SYSTEM),\n relation: z.enum(FlowsActors_Relation),\n actorSystemId: z.string(),\n }),\n]);\nexport type FlowsActors_Relationship = z.infer<typeof FlowsActors_RelationshipSchema>;\n\n//===============================================================\n// FlowsActors_Event\n// --------\n// FlowsActors_Events are immutable messages that flow through the system topics,\n// carrying payloads and metadata between flows and actors. They\n// enable loose coupling, traceability through correlation IDs,\n// and event sourcing patterns for building scalable, resilient\n// distributed systems with clear audit trails.\n//===============================================================\n\nexport enum FlowsActors_Event_DeliveryStatus {\n PENDING = \"pending\",\n DELIVERED = \"delivered\",\n FAILED = \"failed\",\n DEAD_LETTER = \"dead_letter\",\n}\n\nexport enum FlowsActors_Event_Type {\n\n COMPLETED = \"completed\",\n FAILED = \"failed\",\n CANCELLED = \"cancelled\",\n ABORTED = \"aborted\",\n REQUESTED = \"requested\",\n ACTIONED = \"actioned\",\n}\n\nexport const FlowsActors_Event_ContextSchema = z.object({});\nexport type FlowsActors_Event_Context = z.infer<typeof FlowsActors_Event_ContextSchema>;\n\nexport const FlowsActors_EventSchema = z.object({\n _id: z.string().optional(),\n eventType: z.enum(FlowsActors_Event_Type),\n origin : FlowsActors_SimpleRelationshipSchema.optional(),\n eventContext: FlowsActors_Event_ContextSchema.optional(),\n\n topic: z.string(),\n payload: z.any(),\n\n sequenceNumber: z.number().optional(),\n tracking : z.object({\n timestamp: z.string(),\n\n correlationId: z.string().optional(),\n causationId: z.string().optional(),\n }),\n});\nexport type FlowsActors_Event = z.infer<typeof FlowsActors_EventSchema>;\n\nexport const FlowsActors_Event_TemplateSchema = z.object({\n eventType: z.string(),\n eventContext: FlowsActors_Event_ContextSchema.optional(),\n topic: z.string(),\n\n payloadMapping: z.record(z.string(), z.string()),\n});\nexport type FlowsActors_Event_Template = z.infer<typeof FlowsActors_Event_TemplateSchema>;\n\n//===============================================================\n// State\n//===============================================================\n/\n * `FlowsActors_CircuitBreaker_Status` and the `circuitBreakerStatus` key every error-state object\n * carried were removed on 2026-09-20 (#1363): no writer, no reader, and the circuit-breaker\n * CONFIGURATION they would have reported on was removed in the same change for having no runtime.\n /\n\nexport const FlowsActors_Checkpoint_Schema = z.object({\n point : FlowsActors_LeafElements_RelationshipSchema,\n timestamp: z.string().refine((val) => !isNaN(Date.parse(val)), { error: 'Invalid datetime string' }),\n context: z.any().optional(),\n});\nexport type FlowsActors_Checkpoint = z.infer<typeof FlowsActors_Checkpoint_Schema>;\n\nexport const FlowsActors_Error_State_BaseSchema = z.object({\n error: WildoError_BackendSchema.optional(),\n checkpoints: FlowsActors_Checkpoint_Schema.array().optional(),\n});\nexport type FlowsActors_Error_State_Base = z.infer<typeof FlowsActors_Error_State_BaseSchema>;\n\n\n\n/\n The stored `machineCredentialId` of a turn that had NO machine credential — i.e. a\n * user-delegated turn, where the human IS the principal and `userId` already discriminates.\n \n ## Why a sentinel rather than an absent field\n \n Both flows-actors families (executions and tasks) are owned by an injected scope FK, and for the\n * MACHINE variants that FK does not identify the principal:\n \n - `applicationId` is a DEPLOYMENT SINGLETON, so every app-scope OAuth client resolves to the\n * same owner filter — client B could read and cancel client A's work.\n * - `organizationId` is shared by every machine client of one tenant, with the same consequence\n * inside that tenant.\n \n Since the conversation title / task title carries the opening characters of the originating\n * prompt, that is a cross-client disclosure of prompt text between separately-credentialed\n * principals — the harm the per-agent axis was added to prevent, one axis short.\n \n Storing a normalised value on EVERY row (rather than leaving user-delegated rows null) keeps the\n * filter a plain equality on both persistence adapters, instead of depending on how each one\n * matches an absent field. The `` characters cannot occur in a credential id.\n /\nexport const FLOWS_ACTORS_NO_MACHINE_CREDENTIAL = 'user-delegated';\n\n/*\n The stored agent identity of the DEFAULT (unnamed) A2A agent, and of any transport that has no\n * agent at all — the WebSocket conversation surface.\n \n Declared A2A instance refs are constrained to `^[a-z0-9][a-z0-9-]$`, so the `` characters make\n * this unreachable by any real ref. Storing a normalised value on EVERY row keeps the read filter a\n * plain equality on both persistence adapters rather than depending on how each matches an absent\n * field.\n \n ONE source for both families: `A2A_DEFAULT_INSTANCE_REF` aliases this rather than restating it,\n * because two constants with the same literal are exactly how the task and execution planes would\n * drift apart.\n /\nexport const FLOWS_ACTORS_DEFAULT_AGENT_INSTANCE = 'default*';\n"]}