@wildo-ai/saas-models 1.1.4 → 1.1.6

package/dist/esm/flows-actors/human-decision.shared.schemas.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"human-decision.shared.schemas.js","sourceRoot":"","sources":["../../../../src/flows-actors/human-decision.shared.schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,2BAA2B,EAAE,yBAAyB,EAAE,MAAM,8CAA8C,CAAC;AACtH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,8BAA8B,EAAE,MAAM,6CAA6C,CAAC;AAE7F,iEAAiE;AACjE,qEAAqE;AACrE,EAAE;AACF,mDAAmD;AACnD,EAAE;AACF,gGAAgG;AAChG,2EAA2E;AAC3E,EAAE;AACF,oGAAoG;AACpG,qGAAqG;AACrG,wDAAwD;AACxD,EAAE;AACF,wDAAwD;AACxD,gBAAgB;AAChB,mMAAmM;AACnM,uLAAuL;AACvL,gJAAgJ;AAChJ,EAAE;AACF,qGAAqG;AACrG,mGAAmG;AACnG,6FAA6F;AAC7F,oGAAoG;AACpG,kGAAkG;AAClG,kGAAkG;AAClG,kGAAkG;AAClG,mGAAmG;AACnG,qGAAqG;AACrG,EAAE;AACF,qGAAqG;AACrG,wBAAwB;AACxB,EAAE;AACF,iGAAiG;AACjG,oGAAoG;AACpG,iGAAiG;AACjG,wEAAwE;AACxE,EAAE;AACF,uDAAuD;AACvD,EAAE;AACF,mGAAmG;AACnG,uFAAuF;AACvF,6FAA6F;AAC7F,gGAAgG;AAChG,4EAA4E;AAC5E,EAAE;AACF,0EAA0E;AAC1E,EAAE;AACF,oGAAoG;AACpG,iGAAiG;AACjG,iFAAiF;AACjF,EAAE;AACF,qGAAqG;AACrG,oGAAoG;AACpG,yCAAyC;AACzC,EAAE;AACF,2DAA2D;AAC3D,EAAE;AACF,4FAA4F;AAC5F,sGAAsG;AACtG,oGAAoG;AACpG,sGAAsG;AACtG,mGAAmG;AACnG,EAAE;AACF,qGAAqG;AACrG,6FAA6F;AAC7F,iEAAiE;AAEjE;;;;;;;GAOG;AACH,MAAM,CAAN,IAAY,uBAgBX;AAhBD,WAAY,uBAAuB;IACjC,uFAAuF;IACvF,kDAAuB,CAAA;IACvB,qGAAqG;IACrG,4CAAiB,CAAA;IACjB;;;;;;;;;OASG;IACH,8CAAmB,CAAA;AACrB,CAAC,EAhBW,uBAAuB,KAAvB,uBAAuB,QAgBlC;AAED;;;;;;;GAOG;AACH,MAAM,CAAN,IAAY,4BAcX;AAdD,WAAY,4BAA4B;IACtC,6EAA6E;IAC7E,2EAA2C,CAAA;IAC3C;;;;;;;OAOG;IACH,iFAAiD,CAAA;IACjD,wEAAwE;IACxE,+CAAe,CAAA;AACjB,CAAC,EAdW,4BAA4B,KAA5B,4BAA4B,QAcvC;AAED,4GAA4G;AAC5G,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChD,iGAAiG;IACjG,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACtB,mFAAmF;IACnF,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3B,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC;IACrC,uGAAuG;IACvG,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC9C,iGAAiG;IACjG,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CAClC,CAAC,CAAC,WAAW,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;IAChC,IAAI,KAAK,CAAC,IAAI,KAAK,uBAAuB,CAAC,MAAM;QAAE,OAAO;IAC1D,IAAI,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvC,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,UAAU,KAAK,CAAC,GAAG,gEAAgE;YAC5F,IAAI,EAAE,CAAC,SAAS,CAAC;SAClB,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC;AAGH;;;;GAIG;AACH,MAAM,CAAN,IAAY,gCAGX;AAHD,WAAY,gCAAgC;IAC1C,uDAAmB,CAAA;IACnB,iDAAa,CAAA;AACf,CAAC,EAHW,gCAAgC,KAAhC,gCAAgC,QAG3C;AAED,4EAA4E;AAC5E,MAAM,CAAC,MAAM,kCAAkC,GAAG,CAAC,CAAC,MAAM,CAAC;IACzD,+FAA+F;IAC/F,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACtB,uEAAuE;IACvE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACxB,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,4BAA4B,CAAC;IAC5C,+EAA+E;IAC/E,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CAC1C,CAAC,CAAC;AAGH;;;;;;GAMG;AACH,MAAM,CAAN,IAAY,wBAOX;AAPD,WAAY,wBAAwB;IAClC,wHAAwH;IACxH,qEAAyC,CAAA;IACzC,+FAA+F;IAC/F,yDAA6B,CAAA;IAC7B,wGAAwG;IACxG,2DAA+B,CAAA;AACjC,CAAC,EAPW,wBAAwB,KAAxB,wBAAwB,QAOnC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC;AAEpG;;;;;;GAMG;AACH,6GAA6G;AAC7G,MAAM,CAAC,MAAM,iCAAiC,GAAG,2BAA2B,CAAC,sBAAsB,CAAC;AACpG,qEAAqE;AAErE;;;;GAIG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,CAAC,MAAM,CAAC;IAClD;;;;;;OAMG;IACH,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7B,wFAAwF;IACxF,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACxB,kEAAkE;IAClE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9B,0EAA0E;IAC1E,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,yBAAyB,CAAC;IAC1C,mEAAmE;IACnE,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,kCAAkC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3D,0CAA0C;IAC1C,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9B;;;;;;;OAOG;IACH,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACvC,kJAAkJ;IAClJ;;;;OAIG;IACH,MAAM,EAAE,CAAC,CAAC,YAAY,CAAC;QACrB,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,wBAAwB,CAAC;KAC1C,CAAC,CAAC,QAAQ,EAAE;IACb,sEAAsE;CACvE,CAAC,CAAC;AAGH,8BAA8B;AAC9B,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7B,wCAAwC;IACxC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,iGAAiG;IACjG,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CACrF,CAAC,CAAC;AAGH,uEAAuE;AACvE,MAAM,OAAO,wBAAyB,SAAQ,KAAK;CAAG;AAEtD;;;;;;;;;;GAUG;AACH,MAAM,UAAU,0BAA0B,CACxC,OAA8B,EAC9B,MAA4B;IAE5B,IAAI,MAAM,CAAC,UAAU,KAAK,OAAO,CAAC,UAAU,EAAE,CAAC;QAC7C,MAAM,IAAI,wBAAwB,CAChC,0BAA0B,MAAM,CAAC,UAAU,yBAAyB,OAAO,CAAC,UAAU,IAAI,CAC3F,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,KAAK,MAAM,CAAC,SAAS,CAAC,CAAC;IACvF,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,wBAAwB,CAChC,aAAa,OAAO,CAAC,UAAU,oBAAoB,MAAM,CAAC,SAAS,eAAe,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAC1I,CAAC;IACJ,CAAC;IAED,IAAI,MAAM,CAAC,MAAM,KAAK,4BAA4B,CAAC,mBAAmB,EAAE,CAAC;QACvE,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7B,MAAM,IAAI,wBAAwB,CAChC,WAAW,MAAM,CAAC,GAAG,gCAAgC,MAAM,CAAC,MAAM,CAAC,MAAM,iBAAiB,CAC3F,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IAChC,CAAC;IAED,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;IACzE,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QAClC,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACnC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,wBAAwB,CAChC,aAAa,OAAO,CAAC,UAAU,iBAAiB,KAAK,CAAC,GAAG,aAAa,CAAC,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CACtG,CAAC;QACJ,CAAC;QACD,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;YACrC,MAAM,IAAI,wBAAwB,CAAC,UAAU,KAAK,CAAC,GAAG,gCAAgC,CAAC,CAAC;QAC1F,CAAC;QACD,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QACnC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,MAAM,IAAI,wBAAwB,CAAC,UAAU,KAAK,CAAC,GAAG,iCAAiC,CAAC,CAAC;QAC3F,CAAC;QACD,IAAI,KAAK,CAAC,IAAI,KAAK,uBAAuB,CAAC,MAAM,IAAI,CAAC,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YAC9F,MAAM,IAAI,wBAAwB,CAChC,UAAU,KAAK,CAAC,GAAG,mBAAmB,OAAO,gCAAgC,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAClH,CAAC;QACJ,CAAC;QACD,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC;IAC9B,CAAC;IAED;;;;;;;OAOG;IACH,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC9G,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,wBAAwB,CAChC,aAAa,OAAO,CAAC,UAAU,sDAAsD,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAC3G,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;AAC5B,CAAC;AAED,iEAAiE;AACjE,yEAAyE;AACzE,EAAE;AACF,kGAAkG;AAClG,iGAAiG;AACjG,sGAAsG;AACtG,mGAAmG;AACnG,mGAAmG;AACnG,yDAAyD;AACzD,iEAAiE;AAEjE,4JAA4J;AAC5J;;;;;;;GAOG;AACH,MAAM,CAAN,IAAY,qBAiBX;AAjBD,WAAY,qBAAqB;IAC/B,oCAAoC;IACpC,8CAAqB,CAAA;IACrB,4GAA4G;IAC5G,oFAA2D,CAAA;IAC3D,oDAAoD;IACpD,8CAAqB,CAAA;IACrB,+FAA+F;IAC/F,0CAAiB,CAAA;IACjB,gGAAgG;IAChG,gDAAuB,CAAA;IACvB;;;;OAIG;IACH,kFAAyD,CAAA;AAC3D,CAAC,EAjBW,qBAAqB,KAArB,qBAAqB,QAiBhC;AACD,gFAAgF;AAEhF;;;;;;GAMG;AACH,MAAM,UAAU,sBAAsB,CACpC,OAA8B,EAC9B,MAA4B,EAC5B,OAAuC;IAEvC,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,KAAK,MAAM,CAAC,SAAS,CAAC,CAAC;IACvF,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,wBAAwB,CAChC,aAAa,OAAO,CAAC,UAAU,oBAAoB,MAAM,CAAC,SAAS,eAAe,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAC1I,CAAC;IACJ,CAAC;IACD,QAAQ,MAAM,CAAC,MAAM,EAAE,CAAC;QACtB,KAAK,4BAA4B,CAAC,mBAAmB;YACnD,OAAO,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,qBAAqB,CAAC,2BAA2B,CAAC,CAAC,CAAC,qBAAqB,CAAC,QAAQ,CAAC;QAC/G,KAAK,4BAA4B,CAAC,sBAAsB,CAAC;QACzD,KAAK,4BAA4B,CAAC,KAAK;YACrC,OAAO,qBAAqB,CAAC,QAAQ,CAAC;QACxC,OAAO,CAAC,CAAC,CAAC;YACR,MAAM,QAAQ,GAAU,MAAM,CAAC,MAAM,CAAC;YACtC,MAAM,IAAI,wBAAwB,CAAC,oBAAoB,MAAM,CAAC,QAAQ,CAAC,mBAAmB,CAAC,CAAC;QAC9F,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAN,IAAY,mBAYX;AAZD,WAAY,mBAAmB;IAC7B,sGAAsG;IACtG,wDAAiC,CAAA;IACjC,iGAAiG;IACjG,oDAA6B,CAAA;IAC7B;;;;;OAKG;IACH,8FAAuE,CAAA;AACzE,CAAC,EAZW,mBAAmB,KAAnB,mBAAmB,QAY9B;AAED,4JAA4J;AAC5J,2CAA2C;AAC3C,MAAM,CAAN,IAAY,uBAOX;AAPD,WAAY,uBAAuB;IACjC,mFAAmF;IACnF,0CAAe,CAAA;IACf,uIAAuI;IACvI,gDAAqB,CAAA;IACrB,qHAAqH;IACrH,wCAAa,CAAA;AACf,CAAC,EAPW,uBAAuB,KAAvB,uBAAuB,QAOlC;AACD,gFAAgF;AAEhF,iGAAiG;AACjG,MAAM,CAAN,IAAY,2BAOX;AAPD,WAAY,2BAA2B;IACrC,6BAA6B;IAC7B,4CAAa,CAAA;IACb,iHAAiH;IACjH,kDAAmB,CAAA;IACnB,mHAAmH;IACnH,oEAAqC,CAAA;AACvC,CAAC,EAPW,2BAA2B,KAA3B,2BAA2B,QAOtC;AAED,+DAA+D;AAC/D,MAAM,CAAN,IAAY,iBAkBX;AAlBD,WAAY,iBAAiB;IAC3B,sCAAiB,CAAA;IACjB,wHAAwH;IACxH,0CAAqB,CAAA;IACrB,gDAAgD;IAChD,oCAAe,CAAA;IACf,gDAAgD;IAChD,wCAAmB,CAAA;IACnB,yGAAyG;IACzG,0CAAqB,CAAA;IACrB;;;;OAIG;IACH,gDAA2B,CAAA;IAC3B,yFAAyF;IACzF,kDAA6B,CAAA;AAC/B,CAAC,EAlBW,iBAAiB,KAAjB,iBAAiB,QAkB5B;AAED,iEAAiE;AACjE,oCAAoC;AACpC,EAAE;AACF,qGAAqG;AACrG,oGAAoG;AACpG,iGAAiG;AACjG,wGAAwG;AACxG,wEAAwE;AACxE,qMAAqM;AACrM,iEAAiE;AAEjE,6JAA6J;AAC7J;;;GAGG;AACH,MAAM,CAAN,IAAY,kBASX;AATD,WAAY,kBAAkB;IAC5B;;;;OAIG;IACH,qCAAe,CAAA;IACf,8EAA8E;IAC9E,2CAAqB,CAAA;AACvB,CAAC,EATW,kBAAkB,KAAlB,kBAAkB,QAS7B;AAED;;;;GAIG;AACH,MAAM,CAAN,IAAY,mBASX;AATD,WAAY,mBAAmB;IAC7B,qGAAqG;IACrG,sDAA+B,CAAA;IAC/B,uEAAuE;IACvE,oDAA6B,CAAA;IAC7B,2GAA2G;IAC3G,4DAAqC,CAAA;IACrC,gEAAgE;IAChE,0DAAmC,CAAA;AACrC,CAAC,EATW,mBAAmB,KAAnB,mBAAmB,QAS9B;AAED;;;GAGG;AACH,MAAM,CAAN,IAAY,0BAQX;AARD,WAAY,0BAA0B;IACpC,yGAAyG;IACzG,+CAAiB,CAAA;IACjB;;;OAGG;IACH,mDAAqB,CAAA;AACvB,CAAC,EARW,0BAA0B,KAA1B,0BAA0B,QAQrC;AAED,uFAAuF;AACvF,MAAM,CAAN,IAAY,gBAQX;AARD,WAAY,gBAAgB;IAC1B,0CAA0C;IAC1C,uCAAmB,CAAA;IACnB;;;OAGG;IACH,yCAAqB,CAAA;AACvB,CAAC,EARW,gBAAgB,KAAhB,gBAAgB,QAQ3B;AAED,4FAA4F;AAC5F,MAAM,CAAN,IAAY,qBAGX;AAHD,WAAY,qBAAqB;IAC/B,oCAAW,CAAA;IACX,0CAAiB,CAAA;AACnB,CAAC,EAHW,qBAAqB,KAArB,qBAAqB,QAGhC;AAED;;;GAGG;AACH,MAAM,CAAN,IAAY,gCAKX;AALD,WAAY,gCAAgC;IAC1C,4FAA4F;IAC5F,qDAAiB,CAAA;IACjB,+EAA+E;IAC/E,uEAAmC,CAAA;AACrC,CAAC,EALW,gCAAgC,KAAhC,gCAAgC,QAK3C;AACD,iFAAiF;AAEjF,mHAAmH;AACnH,MAAM,CAAN,IAAY,2BAyCX;AAzCD,WAAY,2BAA2B;IACrC,uGAAuG;IACvG,4EAA6C,CAAA;IAC7C,qEAAqE;IACrE,sEAAuC,CAAA;IACvC,qDAAqD;IACrD,oEAAqC,CAAA;IACrC,wFAAwF;IACxF,gFAAiD,CAAA;IACjD,wGAAwG;IACxG,8EAA+C,CAAA;IAC/C,yFAAyF;IACzF,4EAA6C,CAAA;IAC7C,+DAA+D;IAC/D,8DAA+B,CAAA;IAC/B,wDAAwD;IACxD,0DAA2B,CAAA;IAC3B,sGAAsG;IACtG,sFAAuD,CAAA;IACvD,uGAAuG;IACvG,sEAAuC,CAAA;IACvC,gFAAgF;IAChF,0DAA2B,CAAA;IAC3B;;;;OAIG;IACH,sDAAuB,CAAA;IACvB,iEAAiE;IACjE,4EAA6C,CAAA;IAC7C,2DAA2D;IAC3D,oEAAqC,CAAA;IACrC,kEAAkE;IAClE,oFAAqD,CAAA;IACrD;;;;OAIG;IACH,kEAAmC,CAAA;AACrC,CAAC,EAzCW,2BAA2B,KAA3B,2BAA2B,QAyCtC;AAED;;;GAGG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChD,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC;IACrC;;;OAGG;IACH,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC1C,+EAA+E;IAC/E,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC5C,gIAAgI;IAChI,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAChD,oDAAoD;IACpD,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC5C,yFAAyF;IACzF,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CACxC,CAAC,CAAC;AAGH,0EAA0E;AAC1E,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC,MAAM,CAAC;IACpD,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,2BAA2B,CAAC;IACzC,gFAAgF;IAChF,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACtB,0EAA0E;IAC1E,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CACvC,CAAC,CAAC;AAGH;;;;;GAKG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC,CAAC,MAAM,CAAC;IACrD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9B,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC;IACtC,+FAA+F;IAC/F,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC7C,SAAS,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE;CAC5B,CAAC,CAAC;AA0BH;;;;GAIG;AACH,MAAM,CAAN,IAAY,yBAGX;AAHD,WAAY,yBAAyB;IACnC,gDAAmB,CAAA;IACnB,gDAAmB,CAAA;AACrB,CAAC,EAHW,yBAAyB,KAAzB,yBAAyB,QAGpC;AAMD,MAAM,OAAO,GAA6B,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,yBAAyB,CAAC,OAAO,EAAE,CAAC,CAAC;AACrG,MAAM,MAAM,GAAG,CAAC,MAAmC,EAA4B,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,yBAAyB,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;AAExI,sFAAsF;AACtF,SAAS,gBAAgB,CAAC,KAA0B,EAAE,SAAkC;IACtF,OAAO,SAAS,CAAC,IAAI,KAAK,2BAA2B,CAAC,OAAO,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,GAAG,CAAC;AAClG,CAAC;AAED,8HAA8H;AAC9H,SAAS,iBAAiB,CAAC,KAA0B,EAAE,SAAkC;IACvF,IAAI,SAAS,CAAC,wBAAwB;QAAE,OAAO,IAAI,CAAC;IACpD,mGAAmG;IACnG,6BAA6B;IAC7B,OAAO,KAAK,CAAC,kBAAkB,KAAK,SAAS,IAAI,SAAS,CAAC,0BAA0B,CAAC,QAAQ,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;AAC3H,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,2BAA2B,CAAC,KAM3C;IACC,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC;IAE1D,IAAI,KAAK,CAAC,aAAa,KAAK,8BAA8B,CAAC,YAAY,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;QACzF,OAAO,MAAM,CAAC,2BAA2B,CAAC,oBAAoB,CAAC,CAAC;IAClE,CAAC;IAED,IAAI,KAAK,CAAC,IAAI,KAAK,uBAAuB,CAAC,KAAK,EAAE,CAAC;QACjD,+FAA+F;QAC/F,MAAM,UAAU,GAAG,GAAG,KAAK,iBAAiB,CAAC,MAAM,IAAI,GAAG,KAAK,iBAAiB,CAAC,WAAW,IAAI,GAAG,KAAK,iBAAiB,CAAC,YAAY,CAAC;QACvI,IAAI,CAAC,UAAU;YAAE,OAAO,MAAM,CAAC,2BAA2B,CAAC,oBAAoB,CAAC,CAAC;QACjF,IAAI,SAAS,CAAC,IAAI,KAAK,2BAA2B,CAAC,OAAO;YAAE,OAAO,MAAM,CAAC,2BAA2B,CAAC,iBAAiB,CAAC,CAAC;QACzH,OAAO,gBAAgB,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,2BAA2B,CAAC,iBAAiB,CAAC,CAAC;IAC9G,CAAC;IAED,4JAA4J;IAC5J,kGAAkG;IAClG,wEAAwE;IACxE,IAAI,gBAAgB,CAAC,KAAK,EAAE,SAAS,CAAC;QAAE,OAAO,MAAM,CAAC,2BAA2B,CAAC,qBAAqB,CAAC,CAAC;IAEzG,IAAI,CAAC,KAAK,CAAC,cAAc;QAAE,OAAO,MAAM,CAAC,2BAA2B,CAAC,yBAAyB,CAAC,CAAC;IAEhG,MAAM,SAAS,GAAG,GAA6B,EAAE;QAC/C,IAAI,KAAK,CAAC,IAAI,KAAK,uBAAuB,CAAC,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC,cAAc,EAAE,CAAC;YAC7F,OAAO,MAAM,CAAC,2BAA2B,CAAC,gBAAgB,CAAC,CAAC;QAC9D,CAAC;QACD,mGAAmG;QACnG,iDAAiD;QACjD,OAAO,iBAAiB,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,2BAA2B,CAAC,sBAAsB,CAAC,CAAC;IACpH,CAAC,CAAC;IAEF,QAAQ,GAAG,EAAE,CAAC;QACZ,KAAK,iBAAiB,CAAC,MAAM,CAAC;QAC9B,uGAAuG;QACvG,+FAA+F;QAC/F,KAAK,iBAAiB,CAAC,WAAW,CAAC;QACnC,KAAK,iBAAiB,CAAC,YAAY;YACjC,OAAO,SAAS,EAAE,CAAC;QACrB,KAAK,iBAAiB,CAAC,QAAQ,CAAC;QAChC,KAAK,iBAAiB,CAAC,QAAQ,CAAC,CAAC,CAAC;YAChC,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;YAC3B,OAAO,MAAM,CAAC,IAAI,KAAK,yBAAyB,CAAC,OAAO,IAAI,SAAS,CAAC,mBAAmB,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC;QAC/G,CAAC;QACD,KAAK,iBAAiB,CAAC,KAAK;YAC1B,IAAI,KAAK,CAAC,IAAI,KAAK,uBAAuB,CAAC,IAAI;gBAAE,OAAO,MAAM,CAAC,2BAA2B,CAAC,aAAa,CAAC,CAAC;YAC1G,OAAO,iBAAiB,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,2BAA2B,CAAC,sBAAsB,CAAC,CAAC;QACpH,KAAK,iBAAiB,CAAC,OAAO;YAC5B,IAAI,KAAK,CAAC,IAAI,KAAK,uBAAuB,CAAC,QAAQ,IAAI,CAAC,KAAK,CAAC,SAAS;gBAAE,OAAO,MAAM,CAAC,2BAA2B,CAAC,WAAW,CAAC,CAAC;YAChI,OAAO,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,2BAA2B,CAAC,gBAAgB,CAAC,CAAC;QAChH,OAAO,CAAC,CAAC,CAAC;YACR,+FAA+F;YAC/F,MAAM,QAAQ,GAAU,GAAG,CAAC;YAC5B,KAAK,QAAQ,CAAC;YACd,OAAO,MAAM,CAAC,2BAA2B,CAAC,WAAW,CAAC,CAAC;QACzD,CAAC;IACH,CAAC;AACH,CAAC;AAGD;;;;;GAKG;AACH,MAAM,CAAN,IAAY,4BA6BX;AA7BD,WAAY,4BAA4B;IACtC,gEAAgE;IAChE,mDAAmB,CAAA;IACnB;;;;OAIG;IACH,iEAAiC,CAAA;IACjC,gEAAgE;IAChE,iDAAiB,CAAA;IACjB,0GAA0G;IAC1G,yFAAyD,CAAA;IACzD,qGAAqG;IACrG,+EAA+C,CAAA;IAC/C;;;OAGG;IACH,6EAA6C,CAAA;IAC7C,iGAAiG;IACjG,qEAAqC,CAAA;IACrC,kGAAkG;IAClG,iEAAiC,CAAA;IACjC;;;OAGG;IACH,yDAAyB,CAAA;AAC3B,CAAC,EA7BW,4BAA4B,KAA5B,4BAA4B,QA6BvC;AAQD;;;;GAIG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC,CAAC,MAAM,CAAC;IACrD;;;OAGG;IACH,MAAM,EAAE,0BAA0B,CAAC,QAAQ,EAAE;IAC7C,sGAAsG;IACtG,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAChC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;IACvC,mHAAmH;IACnH,UAAU,EAAE,yBAAyB,CAAC,QAAQ,EAAE;IAChD,gBAAgB,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC9D,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC1C,iGAAiG;IACjG,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CACnD,CAAC,CAAC","sourcesContent":["import { ApplicationConfigVocabulary, LABEL_KEY_SEGMENT_PATTERN } from '../i18n/application-config-vocabulary.shared';\nimport { z } from 'zod';\nimport { ExecutionContext_ExecutionType } from '../runtime/execution-context.shared.schemas';\n\n//===============================================================\n//  HUMAN DECISION — one payload for every question a person is asked\n//\n// ## What this is, and what it deliberately is NOT\n//\n// This is the CONTRACT for \"something is waiting for a person\": what they are being asked, what\n// answers they may give, and what a given answer means. It is not a store.\n//\n// That distinction was measured rather than assumed, and it is the whole reason this file is small.\n// Three surfaces suspend on a human, and where each keeps its pending state has MOVED since this was\n// written — the table is the current state, 2026-09-20:\n//\n// | question | pending state lives in | its own shape |\n// |---|---|---|\n// | a mid-run clarification | the run's own ACTOR EXECUTION row — `suspension` (this payload) + `checkpoint` (the resume inputs), status `AWAITING_APPROVAL` | `PlaybookRunSuspensionCheckpoint` |\n// | a parked coding run | the durable actor-task row (`output.suspension`) — moves onto the same two execution fields with the coding lane (#1359) | `CodingAgent_SessionSuspension` |\n// | a playbook's up-front interview | nowhere — it is DECLARED on the playbook and asked before a run exists | `MetaWorkflow_ElicitationSpec` |\n//\n// The history, because the first line of that table was argued the other way twice. Until 2026-09-20\n// this header said \"a playbook run creates no execution row at all, so there is no single plane to\n// move them onto\" — true until #1343 gave a run an `ActorSystem_Execution`. It then said the\n// conclusion was unchanged because \"that row records the RUN, not what the run is waiting for\", and\n// that a clarification was \"a disposable checkpoint whose whole point is that it costs nothing to\n// lose\". #1360 measured that and reversed it: once the engine DRIVES the run (#1358), a wait that\n// lives beside the row needs a second handle, a second store and a second listing to say what the\n// row's own status should, and a suspended run settled `COMPLETED` on the plane while waiting on a\n// person. The row now says what the run is waiting for, and the engine resumes it under the same id.\n//\n// The up-front interview stays where it is for the reason it always had: it is answered BEFORE a run\n// exists to hang it on.\n//\n// Each host PROJECTS what it is waiting for into a `HumanDecision_Request`, and every reader — a\n// workbench panel, a CLI, a future notification — consumes only this. On the actor-system plane the\n// engine persists that projection itself (`ActorExecution_Suspension.decision`); elsewhere it is\n// built on read. What a person is being asked is everyone's either way.\n//\n// ## Why not extend the existing paused-approval state\n//\n// `FlowActorExecution_PausedApproval` looks like the obvious host and is the wrong one. It carries\n// `sdkModelMessages` (\"the AI-SDK model-message array to RESUME from — opaque to us\"),\n// `pendingToolName` and `pendingToolArgs`: it is an agent-STREAM resume contract. A playbook\n// interview has no model stream and no pending tool, so extending it would leave three required\n// fields meaningless for half its uses. Two distinct concepts, two schemas.\n//\n// ## Two lists, because one question is the special case and not the rule\n//\n// The pre-existing decision components each model exactly ONE question — an options-only choice, or\n// a single text input. A playbook interview asks fifteen at once, so neither fits, and a payload\n// built around \"the question\" would have had to grow a second shape immediately.\n//\n// So a request carries a FIELD SET and a RESPONSE SET, and every existing surface is a special case:\n// an options-only choice is fields `[]`; a single text prompt is one field with one option; a gated\n// tool call is fields plus approve/deny.\n//\n// ## The serialization trap this schema is written against\n//\n// `FlowActorExecution_PausedApproval.approvalId` was once typed as a uuid on the reasonable\n// assumption that an id is a uuid; the producing SDK emits `aitxt-…`. Serializing is `JSON.stringify`\n// and does NOT validate — only the resume's `parse` does — so every paused turn persisted perfectly\n// and became unresumable, reported as a corrupted blob naming the wrong cause. The unit fixtures used\n// real uuids and were therefore more conformant than production, so they could never reproduce it.\n//\n// Consequence, applied here: every identifier this schema BORROWS from a producer it does not own is\n// an opaque non-empty string, never a format. Assert a format only for ids this layer mints.\n//===============================================================\n\n/**\n * What a person is being asked FOR in one field.\n *\n * The one named source for this vocabulary. `MetaWorkflow_ElicitationQuestionKind` in the\n * application-creation layer is an alias of this enum rather than a second copy — the values decide\n * how an answer is validated, so two enums that drift would mean a CHOICE accepted against the wrong\n * option set.\n */\nexport enum HumanDecision_FieldKind {\n  /** Prose. The answer is whatever the person writes, trimmed, and must not be empty. */\n  FREE_TEXT = 'free_text',\n  /** One of a closed set the request states. An answer outside `options` is REFUSED, never coerced. */\n  CHOICE = 'choice',\n  /**\n   * Yes or no.\n   *\n   * The answer must resolve to an unambiguous affirmative or negative and is stored CANONICALLY, not\n   * as the person typed it — downstream readers compare a token rather than re-parsing prose. An\n   * answer that does not resolve (\"probably\") is refused rather than guessed, because these decide\n   * things: the regulated-domain screening questions are `CONFIRM`s, and one of them silently\n   * meaning \"yes\" is a compliance posture nobody chose. Resolution lives with the creation layer\n   * that owns the canonical vocabulary.\n   */\n  CONFIRM = 'confirm',\n}\n\n/**\n * What giving a particular answer MEANS for the work that is waiting.\n *\n * Closed, and deliberately three members rather than one per button. Hosts spell their buttons\n * differently — accept/decline/cancel, submit/cancel, approve/deny — and a vocabulary with one\n * member per spelling would have to grow every time a surface is added. What a reader actually needs\n * to know is whether the waiting work proceeds, and whether it proceeds WITH the values.\n */\nexport enum HumanDecision_ResponseIntent {\n  /** Proceed, using the values supplied. Fields are validated and required. */\n  PROCEED_WITH_VALUES = 'proceed_with_values',\n  /**\n   * Proceed WITHOUT values — the person declined to answer and the work continues on its own\n   * judgement, stating the assumption it made.\n   *\n   * This is also what a DENIAL is, and the distinction matters: denying a gated tool call does not\n   * abort the turn, it resumes it so the model can answer the refusal. Anything that ends the work\n   * is `ABORT`.\n   */\n  PROCEED_WITHOUT_VALUES = 'proceed_without_values',\n  /** End the waiting work. Nothing is produced and no values are read. */\n  ABORT = 'abort',\n}\n\n/** One thing a person is asked. `why` is the rationale a host may supply; an interview usually has none. */\nexport const HumanDecision_FieldSchema = z.object({\n  /** Stable id the answer is matched by. Host-minted and OPAQUE to this layer — never a format. */\n  ref: z.string().min(1),\n  /** The question, in the words the person should read. Never derived from `ref`. */\n  question: z.string().min(1),\n  kind: z.enum(HumanDecision_FieldKind),\n  /** The complete set, and REQUIRED when `kind` is CHOICE — a choice with no options is unanswerable. */\n  options: z.array(z.string().min(1)).optional(),\n  /** What the waiting work would do differently depending on the answer, when the host can say. */\n  why: z.string().min(1).optional(),\n}).superRefine((field, context) => {\n  if (field.kind !== HumanDecision_FieldKind.CHOICE) return;\n  if ((field.options ?? []).length === 0) {\n    context.addIssue({\n      code: 'custom',\n      message: `Field \"${field.ref}\" is a CHOICE and states no options, so it cannot be answered.`,\n      path: ['options'],\n    });\n  }\n});\nexport type HumanDecision_Field = z.infer<typeof HumanDecision_FieldSchema>;\n\n/**\n * The two options every TOOL APPROVAL offers (#1594 D1): approve runs the call, deny resumes the turn so the\n * agent can answer the refusal. Shared because a client answers a tool approval in the one answer shape\n * (`HumanDecision_Answer.optionRef`), and the option refs it may send are these and no others.\n */\nexport enum HumanDecision_ToolApprovalOption {\n  APPROVE = 'approve',\n  DENY = 'deny',\n}\n\n/** One answer a person may give, and what it means for the waiting work. */\nexport const HumanDecision_ResponseOptionSchema = z.object({\n  /** Host-defined id echoed back on the answer. Open by design: a host names its own buttons. */\n  ref: z.string().min(1),\n  /** What the button says. Authored text, never humanized from `ref`. */\n  label: z.string().min(1),\n  intent: z.enum(HumanDecision_ResponseIntent),\n  /** Why a person would pick this one, when it is not obvious from the label. */\n  description: z.string().min(1).optional(),\n});\nexport type HumanDecision_ResponseOption = z.infer<typeof HumanDecision_ResponseOptionSchema>;\n\n/**\n * @wildo_source:part:start saas.models.agent-work-decision-surface facet:layer:shared facet:family:flows-actors facet:audience:app-developer\n *\n * Where a decision on an AGENT'S PROPOSAL was taken (#1599). Only a decision on something an agent proposed is\n * recorded as agent-work review — a clarifying question is not, or it would inflate the override rate's denominator.\n * An actor-system question is a review only when its `HumanDecision_Request` carries `review: { surface }`.\n */\nexport enum AgentWorkDecisionSurface {\n  /** A person approved, edited or denied a tool call the agent proposed (the paused-turn approval). Always a proposal. */\n  TOOL_CALL_APPROVAL = 'tool_call_approval',\n  /** A person answered an actor-system suspension that asked them to review the actor's work. */\n  ACTOR_REVIEW = 'actor_review',\n  /** A person reviewed output an agent drafted into the application's own rows (`recordOutputReview`). */\n  OUTPUT_REVIEW = 'output_review',\n}\n\n/**\n * A reason code an expert gives for a correction (#1599): one value of the vocabulary the APPLICATION declared\n * (`agentWorkReview.reasonCodes`). A code outside that vocabulary is refused before anything moves, never stored.\n *\n * No `.` (#1921): a code is also the last segment of its label key, `system_enums.AgentWorkReasonCode.<code>`, and\n * the label tree is addressed by dotted path — a dotted code would name a label nobody could resolve, so it would\n * render as its raw code forever with nothing reporting why.\n */\nexport const AgentWorkReasonCodeSchema = z.string().min(1).max(80).regex(LABEL_KEY_SEGMENT_PATTERN);\n\n/**\n * The NAMED VOCABULARY the reason codes' words live under (#1921): `system_enums.AgentWorkReasonCode.<code>`.\n *\n * The VALUES are the application's (`agentWorkReview.reasonCodes`); the NAME is the framework's, so a reviewer surface\n * and the labelling pipeline agree on where each code's words are without either inventing them. The pipeline plans one\n * key per declared code; a code with no authored word renders as the code itself — a missing label that looks missing.\n */\n// The wire value is `'AgentWorkReasonCode'`: the words live under `system_enums.AgentWorkReasonCode.<code>`.\nexport const AGENT_WORK_REASON_CODE_VOCABULARY = ApplicationConfigVocabulary.AGENT_WORK_REASON_CODE;\n/** @wildo_source:part:end saas.models.agent-work-decision-surface */\n\n/**\n * Something is waiting for a person.\n *\n * Projected by whichever host owns the suspended work; never persisted by this layer.\n */\nexport const HumanDecision_RequestSchema = z.object({\n  /**\n   * Correlates this request with the answer that settles it.\n   *\n   * OPAQUE — hosts key it to whatever they already have (a run id, an ACP session id, an actor-task\n   * id), and this layer asserts only that it is present. See the file header for what asserting a\n   * format on a borrowed id once cost.\n   */\n  decisionId: z.string().min(1),\n  /** One line naming what is waiting, for a reader who has not been following the run. */\n  title: z.string().min(1),\n  /** What answering will cause, and what happens if nobody does. */\n  description: z.string().min(1),\n  /** May be empty: a pure approve/deny asks for a verdict and no values. */\n  fields: z.array(HumanDecision_FieldSchema),\n  /** At least one — a request nobody can answer is not a request. */\n  options: z.array(HumanDecision_ResponseOptionSchema).min(1),\n  /** ISO instant the request was raised. */\n  requestedAt: z.string().min(1),\n  /**\n   * ISO instant after which answering is refused.\n   *\n   * Optional, and ABSENT MEANS IT DOES NOT LAPSE — which is the honest reading for work that simply\n   * waits, such as a playbook checkpoint on disk. Do not default it: a deadline nothing enforces is\n   * the defect the paused-approval expiry was fixed for, where the field was declared, rendered, and\n   * never written by any producer.\n   */\n  expiresAt: z.string().min(1).optional(),\n  /** @wildo_source:part:start saas.models.human-decision-review-marker facet:layer:shared facet:family:flows-actors facet:audience:app-developer */\n  /**\n   * Marks the request as a REVIEW of an agent's proposal (#1599): its settlement is recorded as an agent-work\n   * decision on this surface. Absent for a question that asks for information rather than a verdict on work.\n   * A tool approval is always a proposal and needs no marker.\n   */\n  review: z.strictObject({\n    surface: z.enum(AgentWorkDecisionSurface),\n  }).optional(),\n  /** @wildo_source:part:end saas.models.human-decision-review-marker */\n});\nexport type HumanDecision_Request = z.infer<typeof HumanDecision_RequestSchema>;\n\n/** What a person answered. */\nexport const HumanDecision_AnswerSchema = z.object({\n  decisionId: z.string().min(1),\n  /** Which `options[].ref` was chosen. */\n  optionRef: z.string().min(1),\n  /** One entry per answered field. Empty for an option whose intent is not PROCEED_WITH_VALUES. */\n  values: z.array(z.object({ ref: z.string().min(1), value: z.string() })).default([]),\n});\nexport type HumanDecision_Answer = z.infer<typeof HumanDecision_AnswerSchema>;\n\n/** Refused because the answer does not settle the request it names. */\nexport class HumanDecisionAnswerError extends Error {}\n\n/**\n * Check an answer against the request it claims to settle, and return the values by ref.\n *\n * Refuses rather than coerces, at every branch, for the reason the CONFIRM doc gives: these answers\n * decide things, and a silently-accepted wrong one becomes the record. `CONFIRM` resolution is NOT\n * done here — this layer does not own the canonical affirmative/negative vocabulary — so a CONFIRM\n * field is validated as non-empty and the creation layer canonicalises it.\n *\n * Note what is deliberately NOT validated: an option this request never offered is refused, but the\n * INTENT is trusted, because the host authored both the option and its meaning.\n */\nexport function resolveHumanDecisionAnswer(\n  request: HumanDecision_Request,\n  answer: HumanDecision_Answer,\n): { readonly option: HumanDecision_ResponseOption; readonly values: Readonly<Record<string, string>> } {\n  if (answer.decisionId !== request.decisionId) {\n    throw new HumanDecisionAnswerError(\n      `Answer names decision \"${answer.decisionId}\" but the request is \"${request.decisionId}\".`,\n    );\n  }\n\n  const option = request.options.find((candidate) => candidate.ref === answer.optionRef);\n  if (!option) {\n    throw new HumanDecisionAnswerError(\n      `Decision \"${request.decisionId}\" never offered \"${answer.optionRef}\". Offered: ${request.options.map((entry) => entry.ref).join(', ')}.`,\n    );\n  }\n\n  if (option.intent !== HumanDecision_ResponseIntent.PROCEED_WITH_VALUES) {\n    if (answer.values.length > 0) {\n      throw new HumanDecisionAnswerError(\n        `Option \"${option.ref}\" does not carry values, but ${answer.values.length} were supplied.`,\n      );\n    }\n    return { option, values: {} };\n  }\n\n  const byRef = new Map(request.fields.map((field) => [field.ref, field]));\n  const values: Record<string, string> = {};\n  for (const entry of answer.values) {\n    const field = byRef.get(entry.ref);\n    if (!field) {\n      throw new HumanDecisionAnswerError(\n        `Decision \"${request.decisionId}\" never asks \"${entry.ref}\". Asked: ${[...byRef.keys()].join(', ')}.`,\n      );\n    }\n    if (Object.hasOwn(values, entry.ref)) {\n      throw new HumanDecisionAnswerError(`Field \"${entry.ref}\" was answered more than once.`);\n    }\n    const trimmed = entry.value.trim();\n    if (trimmed.length === 0) {\n      throw new HumanDecisionAnswerError(`Field \"${entry.ref}\" was answered with empty text.`);\n    }\n    if (field.kind === HumanDecision_FieldKind.CHOICE && !(field.options ?? []).includes(trimmed)) {\n      throw new HumanDecisionAnswerError(\n        `Field \"${entry.ref}\" is a CHOICE; \"${trimmed}\" is not one of its options (${(field.options ?? []).join(', ')}).`,\n      );\n    }\n    values[entry.ref] = trimmed;\n  }\n\n  /*\n   * Every field must be answered, and the contract declares no optional ones.\n   *\n   * A missing answer is a gap in the interview rather than an implicit \"no\" — several questions are\n   * written to be answerable when they do not apply (\"answer 'none' if there is no trigger\"), so\n   * silently proceeding is how a record acquires an empty field that later reads as a decision\n   * somebody made.\n   */\n  const missing = request.fields.filter((field) => !Object.hasOwn(values, field.ref)).map((field) => field.ref);\n  if (missing.length > 0) {\n    throw new HumanDecisionAnswerError(\n      `Decision \"${request.decisionId}\" needs an answer to every field it asks; missing: ${missing.join(', ')}.`,\n    );\n  }\n\n  return { option, values };\n}\n\n//===============================================================\n//  WHO MAY SETTLE A PENDING DECISION, AND WHAT SETTLING IT MEANT (#1594)\n//\n// Both planes that suspend on a person — the conversational tool approval (`pausedApproval` on an\n// execution row) and the actor-system suspension — describe the same three things: what is asked\n// (`HumanDecision_Request`, above), WHO may answer it (`HumanDecision_Route`), and on whose authority\n// the waiting work was raised (`HumanDecision_Requester`). Each plane stores these on the row that\n// holds its resume compare-and-swap, so a reassignment and an answer can never both win; this file\n// owns only the shapes and the pure decisions over them.\n//===============================================================\n\n/** @wildo_source:part:start saas.models.flows-actors.human-decision-vocabulary facet:layer:shared facet:family:flows-actors facet:audience:app-developer */\n/**\n * How a pending decision ended. The ONE vocabulary every outcome column, audit event and record reads\n * from — the conversational release, the lapse sweep, a withdrawn task, the actor-plane resume.\n *\n * `LAPSED` is not a refusal. Nobody said no; nobody answered in time. A report that counts it as\n * `REJECTED` overstates how often reviewers refuse agents, which is exactly the figure an auditor asks\n * for, so the two stay distinct members rather than one \"not approved\".\n */\nexport enum HumanDecision_Outcome {\n  /** A person approved, unchanged. */\n  ACCEPTED = 'accepted',\n  /** A person approved after changing what was proposed. Which arguments changed is recorded by NAME only. */\n  ACCEPTED_WITH_MODIFICATIONS = 'accepted_with_modifications',\n  /** A person declined, or ended the waiting work. */\n  REJECTED = 'rejected',\n  /** Nobody answered before `expiresAt`. Written only by the expiry path, never by an answer. */\n  LAPSED = 'lapsed',\n  /** The waiting work was withdrawn (a cancelled task, an aborted run) before anyone answered. */\n  WITHDRAWN = 'withdrawn',\n  /**\n   * A person answered, but the authority the work was raised under no longer holds (a revoked\n   * membership, a disabled credential, a revoked delegation). The work did NOT run: approving an\n   * action nobody may now perform is not an approval of anything.\n   */\n  REQUESTER_AUTHORITY_LAPSED = 'requester_authority_lapsed',\n}\n/** @wildo_source:part:end saas.models.flows-actors.human-decision-vocabulary */\n\n/**\n * The outcome an ANSWER produces. Pure; the system outcomes (LAPSED, WITHDRAWN,\n * REQUESTER_AUTHORITY_LAPSED) are never derived from an answer and are written by their own paths.\n *\n * `modified` is the host's judgement that the approved values differ from the proposal — the host\n * holds both, this layer does not.\n */\nexport function humanDecisionOutcomeOf(\n  request: HumanDecision_Request,\n  answer: HumanDecision_Answer,\n  options: { readonly modified: boolean },\n): HumanDecision_Outcome {\n  const option = request.options.find((candidate) => candidate.ref === answer.optionRef);\n  if (!option) {\n    throw new HumanDecisionAnswerError(\n      `Decision \"${request.decisionId}\" never offered \"${answer.optionRef}\". Offered: ${request.options.map((entry) => entry.ref).join(', ')}.`,\n    );\n  }\n  switch (option.intent) {\n    case HumanDecision_ResponseIntent.PROCEED_WITH_VALUES:\n      return options.modified ? HumanDecision_Outcome.ACCEPTED_WITH_MODIFICATIONS : HumanDecision_Outcome.ACCEPTED;\n    case HumanDecision_ResponseIntent.PROCEED_WITHOUT_VALUES:\n    case HumanDecision_ResponseIntent.ABORT:\n      return HumanDecision_Outcome.REJECTED;\n    default: {\n      const unmapped: never = option.intent;\n      throw new HumanDecisionAnswerError(`Response intent \"${String(unmapped)}\" has no outcome.`);\n    }\n  }\n}\n\n/**\n * Which suspension mechanism holds a decision. Both describe it with the same request, route and\n * requester; only how the waiting work resumes differs, so an audit row says which to look in.\n */\nexport enum HumanDecision_Plane {\n  /** A conversational turn paused on an approval-gated tool (`pausedApproval` on the execution row). */\n  CONVERSATIONAL = 'conversational',\n  /** An actor-system execution suspended on a person (`suspension` on the actor execution row). */\n  ACTOR_SYSTEM = 'actor_system',\n  /**\n   * A client organization's approval of one expert a service firm assigned to it (#1612). The waiting work is the\n   * firm's ASSIGNMENT (`serviceEngagementAssignments`, status `PENDING_CLIENT_APPROVAL`), which holds the decision id\n   * and is settled by a compare-and-swap on it; the route is always the client's administrator ROLE, derived from the\n   * row rather than stored beside it. No agent is involved, so audit rows name the assignment as `executionId`.\n   */\n  SERVICE_PROVIDER_EXPERT_ADMISSION = 'service_provider_expert_admission',\n}\n\n/** @wildo_source:part:start saas.models.flows-actors.human-decision-vocabulary facet:layer:shared facet:family:flows-actors facet:audience:app-developer */\n/** Who a pending decision is routed to. */\nexport enum HumanDecision_RouteKind {\n  /** The person whose turn raised it. Cannot be reassigned, claimed or escalated. */\n  OWNER = 'owner',\n  /** One named person, who must hold the route's eligible role. Set by a declared resolver, a claim, a reassignment or an escalation. */\n  ASSIGNEE = 'assignee',\n  /** Anyone holding the eligible role in the decision's organization (or in a unit containing the decision's unit). */\n  ROLE = 'role',\n}\n/** @wildo_source:part:end saas.models.flows-actors.human-decision-vocabulary */\n\n/** What kind of principal the waiting work was raised under — the authority it resumes under. */\nexport enum HumanDecision_RequesterKind {\n  /** A person, first-party. */\n  USER = 'user',\n  /** A background principal (#1611's autonomous entry point). Never routed to OWNER: a machine answers nothing. */\n  MACHINE = 'machine',\n  /** A person acting through an external OAuth client they delegated to. Resumes only while the delegation holds. */\n  DELEGATED_CLIENT = 'delegated_client',\n}\n\n/** What a person is attempting to do to a pending decision. */\nexport enum HumanDecision_Act {\n  ANSWER = 'answer',\n  /** Move it to someone else. An answerer may, and so may a holder of the org-admin anchor role (supervisor takeover). */\n  REASSIGN = 'reassign',\n  /** Take a ROLE-routed decision for yourself. */\n  CLAIM = 'claim',\n  /** Give a claimed decision back to its role. */\n  UNCLAIM = 'unclaim',\n  /** Move it up — to the gate's declared `escalateTo`, or a target the escalator names. Never a denial. */\n  ESCALATE = 'escalate',\n  /**\n   * Stop the decision's CLAIM and DECISION clocks while the reviewer waits on something outside their\n   * control, naming one of the gate's declared pause states (#1628). Never stops the lapse: a paused\n   * decision still ends LAPSED when its window closes.\n   */\n  PAUSE_CLOCK = 'pause_clock',\n  /** Restart the CLAIM and DECISION clocks; the paused time is added to both deadlines. */\n  RESUME_CLOCK = 'resume_clock',\n}\n\n//===============================================================\n//  Deadlines and escalation (#1628)\n//\n//  A pending decision has three clocks. Two are SERVICE TARGETS — CLAIM (someone should take it) and\n//  DECISION (someone should settle it) — whose breach fires reminders or a reassignment and changes\n//  nothing else. The third is the LAPSE, the hard stop, which ends the decision LAPSED. Practice\n//  converges on exactly this split: WS-HumanTask 1.1 §4.9 separates start and completion deadlines from\n//  expiration, and on a timeout \"The state of the task is not changed.\"\n//  spec-cite: OASIS WS-HumanTask 1.1 (cs-01) §4.9 \"Elements for Handling Timeouts and Escalations\", fetched 2026-09-27 from https://docs.oasis-open.org/bpel4people/ws-humantask-1.1-spec-cs-01.html\n//===============================================================\n\n/** @wildo_source:part:start saas.models.flows-actors.review-deadline-vocabulary facet:layer:shared facet:family:flows-actors facet:audience:app-developer */\n/**\n * The two service-target clocks of a pending decision. Neither ever ends it: missing one notifies\n * people, or moves the decision, and the decision stays exactly as answerable as it was.\n */\nexport enum ReviewDeadlineKind {\n  /**\n   * By when someone should have TAKEN the decision. Met by a claim or by an answer. An ASSIGNEE or\n   * OWNER route has no claim act, so there it is met only by the answer and acts as a first reminder:\n   * being assigned a task is not the same as having started it (WS-HumanTask's start deadline).\n   */\n  CLAIM = 'claim',\n  /** By when someone should have ANSWERED it. Always earlier than the lapse. */\n  DECISION = 'decision',\n}\n\n/**\n * The finite points at which a decision's deadlines fire. Each fires AT MOST ONCE per decision, across\n * every host running the sweep: its own marker is written by a compare-and-swap, and only the writer\n * that won runs the stage's actions.\n */\nexport enum ReviewDeadlineStage {\n  /** Before the CLAIM deadline, by the gate's `claim.warnBefore`. Armed only when that is declared. */\n  CLAIM_WARNING = 'claim_warning',\n  /** The CLAIM deadline passed with nobody having taken the decision. */\n  CLAIM_MISSED = 'claim_missed',\n  /** Before the DECISION deadline, by the gate's `decision.warnBefore`. Armed only when that is declared. */\n  DECISION_WARNING = 'decision_warning',\n  /** The DECISION deadline passed with nobody having answered. */\n  DECISION_MISSED = 'decision_missed',\n}\n\n/**\n * What a stage does when it fires — the two escalation actions WS-HumanTask defines, and nothing\n * else. There is no action that answers: a deadline can never approve, and never reject.\n */\nexport enum ReviewEscalationActionKind {\n  /** Tell the people who may answer it (and, at a DECISION stage, the gate's owner) that it is waiting. */\n  NOTIFY = 'notify',\n  /**\n   * Move the decision to the rule's declared target, who must be able to answer it. Opt-in per gate and\n   * never inferred; a target that cannot be resolved or may not answer falls back to NOTIFY, recorded.\n   */\n  REASSIGN = 'reassign',\n}\n\n/** How a service-target deadline counts time. The lapse always counts ELAPSED time. */\nexport enum ReviewClockBasis {\n  /** Wall-clock time, 24/7. The default. */\n  ELAPSED = 'elapsed',\n  /**\n   * Only the working hours of the application's declared `reviewCalendar`. A gate asking for it in an\n   * application that declares no calendar is refused at startup, never silently treated as ELAPSED.\n   */\n  CALENDAR = 'calendar',\n}\n\n/** Whether a service-target deadline was met, recorded on the decision's RESOLVED event. */\nexport enum ReviewDeadlineOutcome {\n  MET = 'met',\n  MISSED = 'missed',\n}\n\n/**\n * Who changed a decision's route. Carried on `HUMAN_DECISION_REASSIGNED`, so a reassignment an\n * escalation rule made is never read as one a person chose.\n */\nexport enum HumanDecision_RouteChangeTrigger {\n  /** A person reassigned it (an answerer handing it over, or a supervisor taking it over). */\n  PERSON = 'person',\n  /** A deadline stage's REASSIGN rule moved it. The actor is the application. */\n  ESCALATION_RULE = 'escalation_rule',\n}\n/** @wildo_source:part:end saas.models.flows-actors.review-deadline-vocabulary */\n\n/** Why an act was refused. Recorded on the `HUMAN_DECISION_ANSWER_REFUSED` event, so it is a closed vocabulary. */\nexport enum HumanDecision_RefusalReason {\n  /** Only a signed-in person may act on a decision; a machine, a public caller or the system may not. */\n  NOT_A_USER_PRINCIPAL = 'not_a_user_principal',\n  /** OWNER route: the actor is not the person whose turn raised it. */\n  NOT_THE_REQUESTER = 'not_the_requester',\n  /** ASSIGNEE route: the actor is not the assignee. */\n  NOT_THE_ASSIGNEE = 'not_the_assignee',\n  /** The actor does not hold the eligible role in the decision's organization or unit. */\n  ELIGIBLE_ROLE_NOT_HELD = 'eligible_role_not_held',\n  /** Separation of duties: under a non-OWNER route, the requester may never act on their own decision. */\n  REQUESTER_MAY_NOT_ACT = 'requester_may_not_act',\n  /** An OWNER route is fixed: it cannot be reassigned, claimed, unclaimed or escalated. */\n  OWNER_ROUTE_IS_FIXED = 'owner_route_is_fixed',\n  /** CLAIM on a decision that is not an unclaimed ROLE route. */\n  NOT_CLAIMABLE = 'not_claimable',\n  /** UNCLAIM on a decision nobody claimed from a role. */\n  NOT_CLAIMED = 'not_claimed',\n  /** The route names no organization, so no role can be matched. The pause should have been refused. */\n  ROUTE_HAS_NO_ORGANIZATION = 'route_has_no_organization',\n  /** A MACHINE requester on an OWNER route: nobody can answer it. The pause should have been refused. */\n  NOBODY_CAN_ANSWER = 'nobody_can_answer',\n  /** An act this build does not know — a stale client. Refused, never guessed. */\n  UNKNOWN_ACT = 'unknown_act',\n  /**\n   * A reassignment named nobody, or an escalation found no target: the gate declares no `escalateTo` and\n   * the escalator named none. A move is never a denial, so a move with nowhere to go leaves the decision\n   * exactly where it was.\n   */\n  NO_TARGET = 'no_target',\n  /** PAUSE_CLOCK on a decision whose clocks are already paused. */\n  CLOCK_ALREADY_PAUSED = 'clock_already_paused',\n  /** RESUME_CLOCK on a decision whose clocks are running. */\n  CLOCK_NOT_PAUSED = 'clock_not_paused',\n  /** PAUSE_CLOCK naming a pause state the gate does not declare. */\n  PAUSE_STATE_NOT_DECLARED = 'pause_state_not_declared',\n  /**\n   * An act this decision's plane does not offer. An expert-admission approval (#1612) is routed to the client's\n   * administrators as a ROLE and never to a named person, so it cannot be claimed, reassigned or escalated, and it\n   * arms no clocks to pause.\n   */\n  ACT_NOT_OFFERED = 'act_not_offered',\n}\n\n/**\n * Who may settle a pending decision. Stored on the row that holds the resume compare-and-swap, never\n * beside it (#1360: a second store lets a reassignment and an answer both win).\n */\nexport const HumanDecision_RouteSchema = z.object({\n  kind: z.enum(HumanDecision_RouteKind),\n  /**\n   * The role every holder must meet — the floor a reassignment, a claim or an escalation target must\n   * also meet. Required for ASSIGNEE and ROLE; meaningless for OWNER.\n   */\n  eligibleRole: z.string().min(1).optional(),\n  /** The organization the role is matched in. Required for ASSIGNEE and ROLE. */\n  organizationId: z.string().min(1).optional(),\n  /** When present, a unit-scoped holder matches only for a unit containing this one. When absent, only org-wide holders match. */\n  organizationUnitId: z.string().min(1).optional(),\n  /** ASSIGNEE only: the one person who may answer. */\n  assigneeUserId: z.string().min(1).optional(),\n  /** Set when an ASSIGNEE route came from CLAIMING a ROLE route; UNCLAIM restores ROLE. */\n  claimedAt: z.string().min(1).optional(),\n});\nexport type HumanDecision_Route = z.infer<typeof HumanDecision_RouteSchema>;\n\n/** The authority the waiting work was raised under, and resumes under. */\nexport const HumanDecision_RequesterSchema = z.object({\n  kind: z.enum(HumanDecision_RequesterKind),\n  /** The user id for USER and DELEGATED_CLIENT; the credential id for MACHINE. */\n  ref: z.string().min(1),\n  /** DELEGATED_CLIENT only: the external client the person delegated to. */\n  clientId: z.string().min(1).optional(),\n});\nexport type HumanDecision_Requester = z.infer<typeof HumanDecision_RequesterSchema>;\n\n/**\n * How a decision ENDED, written in the same statement that ends the wait (#1594 I4) — so a crash after\n * that statement still leaves who decided what. The conversational plane spreads these facts over its\n * own columns (`decidedByUserId`, `decisionOutcome`…); the actor plane carries this object on the status\n * change that took the run out of waiting.\n */\nexport const HumanDecision_ResolutionSchema = z.object({\n  decisionRef: z.string().min(1),\n  outcome: z.enum(HumanDecision_Outcome),\n  /** The person who decided. Absent when nobody did — a lapse, or a withdrawal by the system. */\n  decidedByUserId: z.string().min(1).optional(),\n  decidedAt: z.iso.datetime(),\n});\nexport type HumanDecision_Resolution = z.infer<typeof HumanDecision_ResolutionSchema>;\n\n/**\n * What the backend resolved about the actor's roles IN THE DECISION'S ORGANIZATION, at the moment they\n * act — never from a connection-time snapshot. The predicate reads nothing else, which is what keeps it\n * pure and testable as a table.\n */\nexport interface HumanDecision_RoleFacts {\n  /** Holds the route's eligible role organization-wide (directly or through the role hierarchy). */\n  readonly holdsEligibleRoleOrgWide: boolean;\n  /**\n   * Every organization unit the eligible role is held for, EXPANDED to the units those contain. The\n   * backend owns the unit tree; the predicate only asks membership.\n   */\n  readonly eligibleRoleCoveredUnitIds: readonly string[];\n  /** Holds the organization's administrative anchor role — what a supervisor takeover (REASSIGN) needs. */\n  readonly holdsOrgAdminAnchor: boolean;\n}\n\n/** The person attempting the act. Only a signed-in person (`USER_REQUEST`) may act. */\nexport interface HumanDecision_Actor {\n  readonly executionType: ExecutionContext_ExecutionType;\n  readonly userId?: string;\n}\n\n/**\n * Whether the predicate admitted the act. A named discriminant rather than an `allowed` boolean: the\n * backend packages compile with `strict: false`, where a boolean-literal discriminant narrows nothing,\n * so `if (!verdict.allowed) verdict.reason` would not type-check at the doors that need the reason.\n */\nexport enum HumanDecision_VerdictKind {\n  ALLOWED = 'allowed',\n  REFUSED = 'refused',\n}\n\nexport type HumanDecision_ActVerdict =\n  | { readonly kind: HumanDecision_VerdictKind.ALLOWED }\n  | { readonly kind: HumanDecision_VerdictKind.REFUSED; readonly reason: HumanDecision_RefusalReason };\n\nconst ALLOWED: HumanDecision_ActVerdict = Object.freeze({ kind: HumanDecision_VerdictKind.ALLOWED });\nconst refuse = (reason: HumanDecision_RefusalReason): HumanDecision_ActVerdict => ({ kind: HumanDecision_VerdictKind.REFUSED, reason });\n\n/** Is the actor the requester, as a person? A MACHINE requester is never a person. */\nfunction actorIsRequester(actor: HumanDecision_Actor, requester: HumanDecision_Requester): boolean {\n  return requester.kind !== HumanDecision_RequesterKind.MACHINE && actor.userId === requester.ref;\n}\n\n/** Holds the eligible role where the route is matched: org-wide, or unit-scoped for a unit containing the decision's unit. */\nfunction holdsEligibleRole(route: HumanDecision_Route, roleFacts: HumanDecision_RoleFacts): boolean {\n  if (roleFacts.holdsEligibleRoleOrgWide) return true;\n  // A decision with no unit admits only org-wide holders: a unit-scoped role says nothing about work\n  // raised outside every unit.\n  return route.organizationUnitId !== undefined && roleFacts.eligibleRoleCoveredUnitIds.includes(route.organizationUnitId);\n}\n\n/**\n * May this person perform this act on this pending decision?\n *\n * The ONE authorization predicate for pending decisions: every door — the WebSocket answer, the REST\n * verbs, the listing re-check, the companion's actor-plane doors, a reassignment TARGET's eligibility\n * (I8, asked with `act: ANSWER`) — calls this and nothing else. Pure: role facts arrive pre-resolved,\n * so it can be pinned as a truth table and cannot drift between doors.\n *\n * It answers WHETHER the person may act. It never lends them anything: the waiting work resumes under\n * the REQUESTER's current authority, rebuilt at resume, so a reviewer's wider rights never reach the\n * requester's agent.\n */\nexport function authorizeHumanDecisionActor(input: {\n  readonly actor: HumanDecision_Actor;\n  readonly roleFacts: HumanDecision_RoleFacts;\n  readonly route: HumanDecision_Route;\n  readonly requester: HumanDecision_Requester;\n  readonly act: HumanDecision_Act;\n}): HumanDecision_ActVerdict {\n  const { actor, roleFacts, route, requester, act } = input;\n\n  if (actor.executionType !== ExecutionContext_ExecutionType.USER_REQUEST || !actor.userId) {\n    return refuse(HumanDecision_RefusalReason.NOT_A_USER_PRINCIPAL);\n  }\n\n  if (route.kind === HumanDecision_RouteKind.OWNER) {\n    // Pausing the clocks is admitted exactly as answering is (#1628): it moves nothing and nobody.\n    const answerLike = act === HumanDecision_Act.ANSWER || act === HumanDecision_Act.PAUSE_CLOCK || act === HumanDecision_Act.RESUME_CLOCK;\n    if (!answerLike) return refuse(HumanDecision_RefusalReason.OWNER_ROUTE_IS_FIXED);\n    if (requester.kind === HumanDecision_RequesterKind.MACHINE) return refuse(HumanDecision_RefusalReason.NOBODY_CAN_ANSWER);\n    return actorIsRequester(actor, requester) ? ALLOWED : refuse(HumanDecision_RefusalReason.NOT_THE_REQUESTER);\n  }\n\n  // assurance-control: WILDO.ACCESS.SEGREGATION_OF_DUTIES — the person or principal whose turn raised a decision can never answer it under a non-OWNER route.\n  // Every act, not only ANSWER: a requester who could reassign or escalate their own decision could\n  // choose who reviews them, which defeats the separation just as surely.\n  if (actorIsRequester(actor, requester)) return refuse(HumanDecision_RefusalReason.REQUESTER_MAY_NOT_ACT);\n\n  if (!route.organizationId) return refuse(HumanDecision_RefusalReason.ROUTE_HAS_NO_ORGANIZATION);\n\n  const mayAnswer = (): HumanDecision_ActVerdict => {\n    if (route.kind === HumanDecision_RouteKind.ASSIGNEE && actor.userId !== route.assigneeUserId) {\n      return refuse(HumanDecision_RefusalReason.NOT_THE_ASSIGNEE);\n    }\n    // The eligibility floor holds for the assignee too, re-checked at the moment they act: a role lost\n    // after the assignment is a role no longer held.\n    return holdsEligibleRole(route, roleFacts) ? ALLOWED : refuse(HumanDecision_RefusalReason.ELIGIBLE_ROLE_NOT_HELD);\n  };\n\n  switch (act) {\n    case HumanDecision_Act.ANSWER:\n    // #1628: whoever may answer may stop and restart the clocks while they wait on something outside their\n    // control. It changes no route and no outcome, so it needs nothing beyond the right to answer.\n    case HumanDecision_Act.PAUSE_CLOCK:\n    case HumanDecision_Act.RESUME_CLOCK:\n      return mayAnswer();\n    case HumanDecision_Act.REASSIGN:\n    case HumanDecision_Act.ESCALATE: {\n      const answer = mayAnswer();\n      return answer.kind === HumanDecision_VerdictKind.ALLOWED || roleFacts.holdsOrgAdminAnchor ? ALLOWED : answer;\n    }\n    case HumanDecision_Act.CLAIM:\n      if (route.kind !== HumanDecision_RouteKind.ROLE) return refuse(HumanDecision_RefusalReason.NOT_CLAIMABLE);\n      return holdsEligibleRole(route, roleFacts) ? ALLOWED : refuse(HumanDecision_RefusalReason.ELIGIBLE_ROLE_NOT_HELD);\n    case HumanDecision_Act.UNCLAIM:\n      if (route.kind !== HumanDecision_RouteKind.ASSIGNEE || !route.claimedAt) return refuse(HumanDecision_RefusalReason.NOT_CLAIMED);\n      return actor.userId === route.assigneeUserId ? ALLOWED : refuse(HumanDecision_RefusalReason.NOT_THE_ASSIGNEE);\n    default: {\n      // A new act is a compile error here; at run time an unknown value (a stale client) is refused.\n      const unmapped: never = act;\n      void unmapped;\n      return refuse(HumanDecision_RefusalReason.UNKNOWN_ACT);\n    }\n  }\n}\n\n\n/**\n * What an act on a pending decision came to, as every door reports it (#1594 D6).\n *\n * One vocabulary for the WebSocket answer, the REST verbs and any future door, so a client branches on a\n * name rather than on an HTTP status that means different things on different routes.\n */\nexport enum HumanDecision_ActOutcomeKind {\n  /** The act took effect: the decision was answered, or moved. */\n  APPLIED = 'applied',\n  /**\n   * Nothing this person may act on. Deliberately ONE outcome for a decision that does not exist, one\n   * already settled, and one whose route does not admit them: telling those apart would disclose that a\n   * decision exists to someone it was not routed to.\n   */\n  NOT_ACTIONABLE = 'not_actionable',\n  /** The decision's window had closed; it is now ended LAPSED. */\n  LAPSED = 'lapsed',\n  /** The requester no longer holds the authority the work was raised under; it is ended and nothing ran. */\n  REQUESTER_AUTHORITY_LAPSED = 'requester_authority_lapsed',\n  /** Edited arguments the tool's own schema refuses. The decision still stands and can be answered. */\n  MODIFICATION_REJECTED = 'modification_rejected',\n  /**\n   * A reason code the application does not declare (`agentWorkReview.reasonCodes`, #1599). Refused before anything\n   * moves, so the decision still stands and can be answered with a declared code, or with none.\n   */\n  REASON_CODE_REJECTED = 'reason_code_rejected',\n  /** The requester has not granted a purpose the resumed turn needs. The decision still stands. */\n  CONSENT_REQUIRED = 'consent_required',\n  /** The person a move named may not answer this decision (I8). The decision stays where it was. */\n  TARGET_REFUSED = 'target_refused',\n  /**\n   * Another answer or move landed first, so this one matched nothing. Only ever returned to someone the\n   * route admitted, who therefore already knows the decision exists.\n   */\n  SUPERSEDED = 'superseded',\n}\n\n/** The result of one act, returned by the REST verbs. `reason` names why a refusal was refused. */\nexport interface HumanDecision_ActOutcome {\n  readonly kind: HumanDecision_ActOutcomeKind;\n  readonly reason?: HumanDecision_RefusalReason;\n}\n\n/**\n * The body of `POST /flows-actors/decisions/:decisionRef/:act`. Which fields mean anything depends on the\n * act: `answer` (or `approved`) and `modifiedToolArgs` answer, `targetUserId` names who a reassignment or escalation goes\n * to, and `reason` is the person's own words — sent to the model on an answer, never written to the trail.\n */\nexport const HumanDecision_ActRequestSchema = z.object({\n  /**\n   * ANSWER, in the one shape every decision is answered in (#1594 D12): the option chosen, and a value per\n   * field. Refused when it names another decision or an option this one never offered.\n   */\n  answer: HumanDecision_AnswerSchema.optional(),\n  /** ANSWER, for a tool approval: `true` approves, `false` denies. Ignored when `answer` is present. */\n  approved: z.boolean().optional(),\n  reason: z.string().max(4000).optional(),\n  /** ANSWER: a reason code of the application's declared vocabulary (#1599), recorded on the agent-work decision. */\n  reasonCode: AgentWorkReasonCodeSchema.optional(),\n  modifiedToolArgs: z.record(z.string(), z.unknown()).optional(),\n  targetUserId: z.string().min(1).optional(),\n  /** PAUSE_CLOCK: which of the gate's declared pause states the reviewer is waiting in (#1628). */\n  pauseStateRef: z.string().trim().min(1).optional(),\n});\nexport type HumanDecision_ActRequest = z.infer<typeof HumanDecision_ActRequestSchema>;\n\n/**\n * One pending decision as the inbox shows it (#1594 D6): what is being asked, of whom, by when, and what\n * this caller may do about it. The decision card and nothing more — never the conversation it came from\n * (Paul, 2026-09-25: there is no \"view conversation\" permission).\n */\nexport interface HumanDecision_PendingCard {\n  readonly decisionRef: string;\n  readonly plane: HumanDecision_Plane;\n  /** The work that is waiting: the execution on the two agent planes, the firm's assignment on the expert-admission plane. */\n  readonly executionId: string;\n  /** The actor system the work belongs to. Empty on the expert-admission plane, which runs no actor system. */\n  readonly systemRef: string;\n  /** The gated tool. Empty on the expert-admission plane. */\n  readonly toolName: string;\n  /** The call's proposed arguments — the thing being approved. Empty on the expert-admission plane. */\n  readonly toolArgs: Record<string, unknown>;\n  /**\n   * EXPERT-ADMISSION plane only (#1612): who the client is being asked to admit. What a card needs and nothing from\n   * the client's own data — the firm, the relationship's role and scope, the expert, and who at the firm assigned them.\n   */\n  readonly serviceProviderExpertAdmission?: HumanDecision_ServiceProviderExpertAdmissionSubject;\n  /** The question itself, with the options this decision offers — present on every plane whose options are not the tool approval's two. */\n  readonly request?: HumanDecision_Request;\n  /** The tool's input schema as a serialized descriptor, when the tool can still be resolved; lets an approver edit the call. */\n  readonly toolInputSchema?: Record<string, unknown>;\n  readonly requestedAt: string;\n  readonly expiresAt?: string;\n  readonly route: HumanDecision_Route;\n  /** The version an act is checked against; a move bumps it. */\n  readonly routeVersion: number;\n  readonly requesterKind: HumanDecision_RequesterKind;\n  /** The person who raised it, for USER and DELEGATED_CLIENT requesters. */\n  readonly requesterUserId?: string;\n  /** What THIS caller may do now, computed by the same predicate every act is checked with. */\n  readonly permittedActs: readonly HumanDecision_Act[];\n  /**\n   * Whether the gate declares where an escalation goes (`escalateTo`). `permittedActs` says whether this\n   * caller MAY escalate; this says whether an escalation that names nobody has anywhere to go. Without a\n   * declared target, ESCALATE must name its target, so a surface offering a one-press Escalate shows it\n   * only when this is true — otherwise the press could only ever be refused with \"no target\".\n   */\n  readonly declaresEscalationTarget: boolean;\n  /**\n   * The next service-target deadline still ahead of this decision (#1628) — the CLAIM deadline until it is\n   * claimed or missed, then the DECISION deadline. Absent while the clocks are paused, and once both have\n   * passed; `expiresAt` (the lapse) is still shown then.\n   */\n  readonly nextDeadline?: { readonly kind: ReviewDeadlineKind; readonly dueAt: string };\n  /** Set while the clocks are paused: since when, and in which of the gate's pause states. */\n  readonly clockPause?: { readonly pausedAt: string; readonly pauseStateRef: string };\n  /** The pause states the gate declares — what a Pause offers. Empty: the gate cannot be paused. */\n  readonly pauseStates: readonly string[];\n  /**\n   * The reason codes an answer to THIS decision may carry (#1921): the application's `agentWorkReview.reasonCodes` when\n   * the decision reviews an agent's proposal (its settlement is an agent-work decision), and empty on a plane that is\n   * not a review of agent work — an expert admission decides who may act, not whether an agent was right. What a\n   * reviewer's reason picker offers; the answer door refuses any other code with `REASON_CODE_REJECTED`.\n   */\n  readonly reasonCodes: readonly string[];\n}\n\n/** The subject of an expert-admission decision card (#1612): who the client is asked to admit, and through which firm. */\nexport interface HumanDecision_ServiceProviderExpertAdmissionSubject {\n  readonly relationshipId: string;\n  readonly providerOrganizationId: string;\n  /** The firm's name as the relationship snapshotted it — the client cannot read the firm's row. */\n  readonly providerOrganizationName?: string;\n  readonly expertUserId: string;\n  readonly expertName?: string;\n  readonly expertEmail?: string;\n  /** The role the relationship confers on every admitted expert. */\n  readonly role: string;\n  /** The client units the relationship is confined to; empty ⇒ organization-wide. */\n  readonly organizationUnitIds: readonly string[];\n  /** The firm administrator who assigned the expert. */\n  readonly assignedByUserId?: string;\n  readonly assignedByName?: string;\n}\n\n/** `GET /flows-actors/decisions`. */\nexport interface HumanDecision_PendingListResponse {\n  readonly decisions: readonly HumanDecision_PendingCard[];\n}\n\n/** One person a decision may be reassigned or escalated to — someone who could answer it (#1594 I8). */\nexport interface HumanDecision_ReassignCandidate {\n  readonly userId: string;\n  /** The membership's copy of the person's email — what a same-organization reviewer picks them by. */\n  readonly email?: string;\n}\n\n/**\n * `GET /flows-actors/decisions/:decisionRef/candidates`: the people a decision may be moved to, vetted by\n * the same predicate a move is (I8). A move to anyone else is refused anyway; listing them first is what\n * lets a surface offer a choice instead of a free-text id.\n */\nexport interface HumanDecision_ReassignCandidatesResponse {\n  readonly candidates: readonly HumanDecision_ReassignCandidate[];\n}\n"]}

package/dist/esm/flows-actors/mcp-servers.shared.schemas.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"mcp-servers.shared.schemas.d.ts","sourceRoot":"","sources":["../../../src/flows-actors/mcp-servers.shared.schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAMxB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH;;;;;;;;;;;GAWG;AACH,oBAAY,wBAAwB;IAClC,sEAAsE;IACtE,WAAW,gBAAgB;IAC3B,gFAAgF;IAChF,GAAG,QAAQ;CACZ;AAED;;;;;;;GAOG;AACH,oBAAY,gCAAgC;IAC1C;;;;;OAKG;IACH,sBAAsB,2BAA2B;IACjD,uGAAuG;IACvG,YAAY,iBAAiB;IAC7B,oGAAoG;IACpG,IAAI,SAAS;CACd;AAED;;;;;;;;GAQG;AACH,eAAO,MAAM,qCAAqC;;;;iBAchD,CAAC;AACH,MAAM,MAAM,+BAA+B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qCAAqC,CAAC,CAAC;AAEpG;;;;;;;GAOG;AACH,eAAO,MAAM,mCAAmC;;;iBAK9C,CAAC;AACH,MAAM,MAAM,6BAA6B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mCAAmC,CAAC,CAAC;AAEhG,eAAO,MAAM,2BAA2B;;;;;;;;;;;;;;iBAStC,CAAC;AACH,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAEhF;;;;;;GAMG;AACH,wBAAgB,6BAA6B,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAMlE;AAED;;;;;GAKG;AACH,wBAAgB,wBAAwB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAM5D"}
+{"version":3,"file":"mcp-servers.shared.schemas.d.ts","sourceRoot":"","sources":["../../../../src/flows-actors/mcp-servers.shared.schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAMxB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH;;;;;;;;;;;GAWG;AACH,oBAAY,wBAAwB;IAClC,sEAAsE;IACtE,WAAW,gBAAgB;IAC3B,gFAAgF;IAChF,GAAG,QAAQ;CACZ;AAED;;;;;;;GAOG;AACH,oBAAY,gCAAgC;IAC1C;;;;;OAKG;IACH,sBAAsB,2BAA2B;IACjD,uGAAuG;IACvG,YAAY,iBAAiB;IAC7B,oGAAoG;IACpG,IAAI,SAAS;CACd;AAED;;;;;;;;GAQG;AACH,eAAO,MAAM,qCAAqC;;;;iBAgBhD,CAAC;AACH,MAAM,MAAM,+BAA+B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qCAAqC,CAAC,CAAC;AAEpG;;;;;;;GAOG;AACH,eAAO,MAAM,mCAAmC;;;iBAK9C,CAAC;AACH,MAAM,MAAM,6BAA6B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mCAAmC,CAAC,CAAC;AAEhG,eAAO,MAAM,2BAA2B;;;;;;;;;;;;;;iBAStC,CAAC;AACH,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAEhF;;;;;;GAMG;AACH,wBAAgB,6BAA6B,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAMlE;AAED;;;;;GAKG;AACH,wBAAgB,wBAAwB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAM5D"}

package/dist/esm/flows-actors/mcp-servers.shared.schemas.js

@@ -85,8 +85,10 @@ export var FlowsActors_McpCredentialSubject;
 export const FlowsActors_McpServerCredentialSchema = z.object({
     providerRef: z.string().min(1),
     /**
-     * The slug in the provider's `secretsContract` — the same identifier the env projection names, and
-     * the one both credential resolver ports require.
+     * The provider's `secretsContract` KEY (`accessToken`) — the one both credential resolver ports
+     * require, and NOT the slot's env-var spelling (`VENDOR_ACCESS_TOKEN`) the env projection names.
+     * Stored credentials are keyed on the key (#624), and this value reaches the stores verbatim, so a
+     * spelling here misses a credential that exists.
      *
      * DECLARED rather than derived, because it is not derivable: a provider's contract may carry
      * several secrets, and which of them authorizes an MCP endpoint is a fact about that vendor's

package/dist/esm/flows-actors/mcp-servers.shared.schemas.js.map

@@ -1 +1 @@
-{"version":3,"file":"mcp-servers.shared.schemas.js","sourceRoot":"","sources":["../../../src/flows-actors/mcp-servers.shared.schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,iEAAiE;AACjE,2DAA2D;AAC3D,iEAAiE;AAEjE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH;;;;;;;;;;;GAWG;AACH,MAAM,CAAN,IAAY,wBAKX;AALD,WAAY,wBAAwB;IAClC,sEAAsE;IACtE,uDAA2B,CAAA;IAC3B,gFAAgF;IAChF,uCAAW,CAAA;AACb,CAAC,EALW,wBAAwB,KAAxB,wBAAwB,QAKnC;AAED;;;;;;;GAOG;AACH,MAAM,CAAN,IAAY,gCAYX;AAZD,WAAY,gCAAgC;IAC1C;;;;;OAKG;IACH,qFAAiD,CAAA;IACjD,uGAAuG;IACvG,iEAA6B,CAAA;IAC7B,oGAAoG;IACpG,iDAAa,CAAA;AACf,CAAC,EAZW,gCAAgC,KAAhC,gCAAgC,QAY3C;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,qCAAqC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5D,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9B;;;;;;;;;OASG;IACH,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7B,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC,OAAO,CAAC,gCAAgC,CAAC,sBAAsB,CAAC;CACnH,CAAC,CAAC;AAGH;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,mCAAmC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1D,2FAA2F;IAC3F,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACvD,sFAAsF;IACtF,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC;CACpD,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,CAAC,MAAM,CAAC;IAClD,6FAA6F;IAC7F,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACtB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9B,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,wBAAwB,CAAC;IAC3C,mGAAmG;IACnG,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IACrB,UAAU,EAAE,qCAAqC;IACjD,QAAQ,EAAE,mCAAmC,CAAC,OAAO,CAAC,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;CAC9F,CAAC,CAAC;AAGH;;;;;;GAMG;AACH,MAAM,UAAU,6BAA6B,CAAC,GAAW;IACvD,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC;IAC3C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,wBAAwB,CAAC,GAAW;IAClD,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,aAAa,CAAC;IACvB,CAAC;AACH,CAAC","sourcesContent":["import { z } from 'zod';\n\n//===============================================================\n//  MCP SERVERS — what an agent's `mcpRefs` resolve AGAINST\n//===============================================================\n\n/**\n * An MCP server an application permits its agents to reach.\n *\n * ## Why this exists (#491)\n *\n * `capabilities.tools.mcpRefs` was declared on the agent model, populated by a shipped catalog, and\n * rendered on the agent card — while nothing resolved a ref into a callable tool. The refs in that\n * catalog (`filesystem-mcp`, `git-mcp`, `browser-mcp`, `mongodb-mcp`, …) named no server anywhere;\n * they were authored against a field nothing read, so an agent card told a person the agent had a\n * reach it did not have.\n *\n * A ref must map to a transport, an endpoint and a credential. `functionRefs` have\n * `getFunctionTool`; these had no equivalent, so there was nothing to resolve against. This is that\n * equivalent, and it is what makes an `mcpRef` checkable.\n *\n * ## Why the APPLICATION declares it\n *\n * Decided 2026-09-09. An MCP tool call leaves the application's trust boundary and reaches a server\n * whose authorization is its own, so which third parties an application's agents may reach is the\n * application's decision — the same shape in which it already declares providers and capabilities.\n * Rejected: sourcing servers from the vendor provider catalogue (it describes REST operations, not\n * MCP endpoints, and would couple this to the provider architecture), and a platform-curated set an\n * application opts into (it makes the framework the gatekeeper of every application's third-party\n * reach, and needs a curation process that does not exist).\n *\n * This does not contradict the standing position that MCP is not an application's integration\n * runtime: an application calls a third-party API DIRECTLY, with typed operations. MCP is for the\n * case where an LLM agent sits between the application and the external system, which is exactly\n * what an agent's tool call is.\n */\n\n/**\n * How the runtime reaches the server.\n *\n * A closed vocabulary rather than a free string: the transport decides the whole connection\n * lifecycle — how a session opens, whether the server can push, how a stream ends — so a value\n * nobody implemented must be unrepresentable rather than discovered at the first call.\n *\n * STDIO is deliberately ABSENT. It launches a local subprocess, which is the coding-agent lane's\n * shape and not an application's: a generated application runs in a container it does not control,\n * and \"the agent may spawn a process\" is a different security decision from \"the agent may call an\n * endpoint\". Adding it later is a decision, not an omission.\n */\nexport enum FlowsActors_McpTransport {\n  /** Streamable HTTP — the current MCP transport for remote servers. */\n  HTTP_STREAM = 'http_stream',\n  /** Server-sent events — the earlier remote transport, still widely deployed. */\n  SSE = 'sse',\n}\n\n/**\n * WHOSE credential the call carries.\n *\n * The distinction is not a preference. A tool call that reaches a third party on a user's behalf\n * should be attributable to that user AT THE FAR END — that is what makes it revocable there and\n * auditable by the party being called. An application-wide service identity loses that: every\n * user's call looks identical to the server, and one leaked credential exposes every tenant.\n */\nexport enum FlowsActors_McpCredentialSubject {\n  /**\n   * The acting user's own delegated credential, falling back to the organization's connection when\n   * the user has none. The default, and the reason a fallback exists at all: an agent acting for a\n   * user who has never connected the server would otherwise have no path, which would make every\n   * unattended and batch turn impossible.\n   */\n  USER_THEN_ORGANIZATION = 'user_then_organization',\n  /** The organization's connection only — for a server the tenant connects once on everyone's behalf. */\n  ORGANIZATION = 'organization',\n  /** The acting user's own credential only. No fallback: a user who has not connected cannot call. */\n  USER = 'user',\n}\n\n/**\n * Which stored credential authorizes the call.\n *\n * `providerRef` names a provider the application has already connected, so the credential comes from\n * `organizationProviderCredentials` / `userProviderCredentials` rather than from a store invented\n * for MCP. Those exist, carry per-tenant isolation by construction, and already have the connect and\n * consent flow in front of them — a second credential store for this one call shape would be a\n * second thing to rotate, audit and leak.\n */\nexport const FlowsActors_McpServerCredentialSchema = z.object({\n  providerRef: z.string().min(1),\n  /**\n   * The slug in the provider's `secretsContract` — the same identifier the env projection names, and\n   * the one both credential resolver ports require.\n   *\n   * DECLARED rather than derived, because it is not derivable: a provider's contract may carry\n   * several secrets, and which of them authorizes an MCP endpoint is a fact about that vendor's\n   * deployment rather than anything the framework can compute. Guessing a conventional name would\n   * resolve the wrong secret silently — the resolver would find a credential, spend it, and be\n   * refused by the far server for a reason no log here would explain.\n   */\n  secretSlug: z.string().min(1),\n  subject: z.enum(FlowsActors_McpCredentialSubject).default(FlowsActors_McpCredentialSubject.USER_THEN_ORGANIZATION),\n});\nexport type FlowsActors_McpServerCredential = z.infer<typeof FlowsActors_McpServerCredentialSchema>;\n\n/**\n * Bounds on a call that leaves the trust boundary.\n *\n * Present with defaults rather than optional-and-unbounded, because an MCP call is a REMOTE call and\n * the mistake this whole issue warns against is modelling it as a second kind of local function. A\n * local function cannot hang; this can, and an unbounded tool call holds a model turn open for as\n * long as somebody else's server feels like it.\n */\nexport const FlowsActors_McpServerTimeoutsSchema = z.object({\n  /** How long tool DISCOVERY may take before the server contributes no tools to the turn. */\n  discoveryMs: z.number().int().positive().default(5_000),\n  /** How long one tool CALL may take before it returns a typed timeout to the agent. */\n  callMs: z.number().int().positive().default(30_000),\n});\nexport type FlowsActors_McpServerTimeouts = z.infer<typeof FlowsActors_McpServerTimeoutsSchema>;\n\nexport const FlowsActors_McpServerSchema = z.object({\n  /** The value an agent's `capabilities.tools.mcpRefs` names. Unique within an application. */\n  ref: z.string().min(1),\n  displayName: z.string().min(1),\n  transport: z.enum(FlowsActors_McpTransport),\n  /** The server's endpoint. `https` in every deployed environment; the runtime refuses plaintext. */\n  url: z.string().url(),\n  credential: FlowsActors_McpServerCredentialSchema,\n  timeouts: FlowsActors_McpServerTimeoutsSchema.default({ discoveryMs: 5_000, callMs: 30_000 }),\n});\nexport type FlowsActors_McpServer = z.infer<typeof FlowsActors_McpServerSchema>;\n\n/**\n * Whether an MCP endpoint is reached over plaintext.\n *\n * Exported rather than inlined because two callers need the same answer — registration, which\n * refuses, and the audit trail, which records what was refused — and a second spelling of \"is this\n * http\" is how the two come to disagree. Mirrors the webhook lane's identical predicate.\n */\nexport function mcpServerTransportIsPlaintext(url: string): boolean {\n  try {\n    return new URL(url).protocol === 'http:';\n  } catch {\n    return false;\n  }\n}\n\n/**\n * The server's host, for a log or an audit row that must NOT carry the full URL.\n *\n * An MCP endpoint routinely carries a tenant or session identifier in its path or query, so the host\n * is the part that can be recorded freely.\n */\nexport function mcpServerDestinationHost(url: string): string {\n  try {\n    return new URL(url).host;\n  } catch {\n    return 'unparseable';\n  }\n}\n"]}
+{"version":3,"file":"mcp-servers.shared.schemas.js","sourceRoot":"","sources":["../../../../src/flows-actors/mcp-servers.shared.schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,iEAAiE;AACjE,2DAA2D;AAC3D,iEAAiE;AAEjE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH;;;;;;;;;;;GAWG;AACH,MAAM,CAAN,IAAY,wBAKX;AALD,WAAY,wBAAwB;IAClC,sEAAsE;IACtE,uDAA2B,CAAA;IAC3B,gFAAgF;IAChF,uCAAW,CAAA;AACb,CAAC,EALW,wBAAwB,KAAxB,wBAAwB,QAKnC;AAED;;;;;;;GAOG;AACH,MAAM,CAAN,IAAY,gCAYX;AAZD,WAAY,gCAAgC;IAC1C;;;;;OAKG;IACH,qFAAiD,CAAA;IACjD,uGAAuG;IACvG,iEAA6B,CAAA;IAC7B,oGAAoG;IACpG,iDAAa,CAAA;AACf,CAAC,EAZW,gCAAgC,KAAhC,gCAAgC,QAY3C;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,qCAAqC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5D,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9B;;;;;;;;;;;OAWG;IACH,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7B,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC,OAAO,CAAC,gCAAgC,CAAC,sBAAsB,CAAC;CACnH,CAAC,CAAC;AAGH;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,mCAAmC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1D,2FAA2F;IAC3F,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACvD,sFAAsF;IACtF,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC;CACpD,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,CAAC,MAAM,CAAC;IAClD,6FAA6F;IAC7F,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACtB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9B,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,wBAAwB,CAAC;IAC3C,mGAAmG;IACnG,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IACrB,UAAU,EAAE,qCAAqC;IACjD,QAAQ,EAAE,mCAAmC,CAAC,OAAO,CAAC,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;CAC9F,CAAC,CAAC;AAGH;;;;;;GAMG;AACH,MAAM,UAAU,6BAA6B,CAAC,GAAW;IACvD,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC;IAC3C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,wBAAwB,CAAC,GAAW;IAClD,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,aAAa,CAAC;IACvB,CAAC;AACH,CAAC","sourcesContent":["import { z } from 'zod';\n\n//===============================================================\n//  MCP SERVERS — what an agent's `mcpRefs` resolve AGAINST\n//===============================================================\n\n/**\n * An MCP server an application permits its agents to reach.\n *\n * ## Why this exists (#491)\n *\n * `capabilities.tools.mcpRefs` was declared on the agent model, populated by a shipped catalog, and\n * rendered on the agent card — while nothing resolved a ref into a callable tool. The refs in that\n * catalog (`filesystem-mcp`, `git-mcp`, `browser-mcp`, `mongodb-mcp`, …) named no server anywhere;\n * they were authored against a field nothing read, so an agent card told a person the agent had a\n * reach it did not have.\n *\n * A ref must map to a transport, an endpoint and a credential. `functionRefs` have\n * `getFunctionTool`; these had no equivalent, so there was nothing to resolve against. This is that\n * equivalent, and it is what makes an `mcpRef` checkable.\n *\n * ## Why the APPLICATION declares it\n *\n * Decided 2026-09-09. An MCP tool call leaves the application's trust boundary and reaches a server\n * whose authorization is its own, so which third parties an application's agents may reach is the\n * application's decision — the same shape in which it already declares providers and capabilities.\n * Rejected: sourcing servers from the vendor provider catalogue (it describes REST operations, not\n * MCP endpoints, and would couple this to the provider architecture), and a platform-curated set an\n * application opts into (it makes the framework the gatekeeper of every application's third-party\n * reach, and needs a curation process that does not exist).\n *\n * This does not contradict the standing position that MCP is not an application's integration\n * runtime: an application calls a third-party API DIRECTLY, with typed operations. MCP is for the\n * case where an LLM agent sits between the application and the external system, which is exactly\n * what an agent's tool call is.\n */\n\n/**\n * How the runtime reaches the server.\n *\n * A closed vocabulary rather than a free string: the transport decides the whole connection\n * lifecycle — how a session opens, whether the server can push, how a stream ends — so a value\n * nobody implemented must be unrepresentable rather than discovered at the first call.\n *\n * STDIO is deliberately ABSENT. It launches a local subprocess, which is the coding-agent lane's\n * shape and not an application's: a generated application runs in a container it does not control,\n * and \"the agent may spawn a process\" is a different security decision from \"the agent may call an\n * endpoint\". Adding it later is a decision, not an omission.\n */\nexport enum FlowsActors_McpTransport {\n  /** Streamable HTTP — the current MCP transport for remote servers. */\n  HTTP_STREAM = 'http_stream',\n  /** Server-sent events — the earlier remote transport, still widely deployed. */\n  SSE = 'sse',\n}\n\n/**\n * WHOSE credential the call carries.\n *\n * The distinction is not a preference. A tool call that reaches a third party on a user's behalf\n * should be attributable to that user AT THE FAR END — that is what makes it revocable there and\n * auditable by the party being called. An application-wide service identity loses that: every\n * user's call looks identical to the server, and one leaked credential exposes every tenant.\n */\nexport enum FlowsActors_McpCredentialSubject {\n  /**\n   * The acting user's own delegated credential, falling back to the organization's connection when\n   * the user has none. The default, and the reason a fallback exists at all: an agent acting for a\n   * user who has never connected the server would otherwise have no path, which would make every\n   * unattended and batch turn impossible.\n   */\n  USER_THEN_ORGANIZATION = 'user_then_organization',\n  /** The organization's connection only — for a server the tenant connects once on everyone's behalf. */\n  ORGANIZATION = 'organization',\n  /** The acting user's own credential only. No fallback: a user who has not connected cannot call. */\n  USER = 'user',\n}\n\n/**\n * Which stored credential authorizes the call.\n *\n * `providerRef` names a provider the application has already connected, so the credential comes from\n * `organizationProviderCredentials` / `userProviderCredentials` rather than from a store invented\n * for MCP. Those exist, carry per-tenant isolation by construction, and already have the connect and\n * consent flow in front of them — a second credential store for this one call shape would be a\n * second thing to rotate, audit and leak.\n */\nexport const FlowsActors_McpServerCredentialSchema = z.object({\n  providerRef: z.string().min(1),\n  /**\n   * The provider's `secretsContract` KEY (`accessToken`) — the one both credential resolver ports\n   * require, and NOT the slot's env-var spelling (`VENDOR_ACCESS_TOKEN`) the env projection names.\n   * Stored credentials are keyed on the key (#624), and this value reaches the stores verbatim, so a\n   * spelling here misses a credential that exists.\n   *\n   * DECLARED rather than derived, because it is not derivable: a provider's contract may carry\n   * several secrets, and which of them authorizes an MCP endpoint is a fact about that vendor's\n   * deployment rather than anything the framework can compute. Guessing a conventional name would\n   * resolve the wrong secret silently — the resolver would find a credential, spend it, and be\n   * refused by the far server for a reason no log here would explain.\n   */\n  secretSlug: z.string().min(1),\n  subject: z.enum(FlowsActors_McpCredentialSubject).default(FlowsActors_McpCredentialSubject.USER_THEN_ORGANIZATION),\n});\nexport type FlowsActors_McpServerCredential = z.infer<typeof FlowsActors_McpServerCredentialSchema>;\n\n/**\n * Bounds on a call that leaves the trust boundary.\n *\n * Present with defaults rather than optional-and-unbounded, because an MCP call is a REMOTE call and\n * the mistake this whole issue warns against is modelling it as a second kind of local function. A\n * local function cannot hang; this can, and an unbounded tool call holds a model turn open for as\n * long as somebody else's server feels like it.\n */\nexport const FlowsActors_McpServerTimeoutsSchema = z.object({\n  /** How long tool DISCOVERY may take before the server contributes no tools to the turn. */\n  discoveryMs: z.number().int().positive().default(5_000),\n  /** How long one tool CALL may take before it returns a typed timeout to the agent. */\n  callMs: z.number().int().positive().default(30_000),\n});\nexport type FlowsActors_McpServerTimeouts = z.infer<typeof FlowsActors_McpServerTimeoutsSchema>;\n\nexport const FlowsActors_McpServerSchema = z.object({\n  /** The value an agent's `capabilities.tools.mcpRefs` names. Unique within an application. */\n  ref: z.string().min(1),\n  displayName: z.string().min(1),\n  transport: z.enum(FlowsActors_McpTransport),\n  /** The server's endpoint. `https` in every deployed environment; the runtime refuses plaintext. */\n  url: z.string().url(),\n  credential: FlowsActors_McpServerCredentialSchema,\n  timeouts: FlowsActors_McpServerTimeoutsSchema.default({ discoveryMs: 5_000, callMs: 30_000 }),\n});\nexport type FlowsActors_McpServer = z.infer<typeof FlowsActors_McpServerSchema>;\n\n/**\n * Whether an MCP endpoint is reached over plaintext.\n *\n * Exported rather than inlined because two callers need the same answer — registration, which\n * refuses, and the audit trail, which records what was refused — and a second spelling of \"is this\n * http\" is how the two come to disagree. Mirrors the webhook lane's identical predicate.\n */\nexport function mcpServerTransportIsPlaintext(url: string): boolean {\n  try {\n    return new URL(url).protocol === 'http:';\n  } catch {\n    return false;\n  }\n}\n\n/**\n * The server's host, for a log or an audit row that must NOT carry the full URL.\n *\n * An MCP endpoint routinely carries a tenant or session identifier in its path or query, so the host\n * is the part that can be recorded freely.\n */\nexport function mcpServerDestinationHost(url: string): string {\n  try {\n    return new URL(url).host;\n  } catch {\n    return 'unparseable';\n  }\n}\n"]}

package/dist/esm/flows-actors/model-call-attributions.shared.resources-config.schemas.d.ts

@@ -0,0 +1,46 @@
+import { CoreResourceOperation } from '../resources/resources.shared.core.definitions';
+import { type ResourceRelationship } from '../resources/resources.shared.schemas';
+export declare const modelCallAttributionsResourceConfiguration_InitializationFactory: (resourcesRelationships: ResourceRelationship[]) => import("..").ResourceConfiguration<undefined, CoreResourceOperation.READ | CoreResourceOperation.DELETE_MANY | CoreResourceOperation.CREATE | CoreResourceOperation.LIST, import("zod").ZodObject<{
+    _id: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("zod").ZodString>>;
+    applicationId: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("zod").ZodString>;
+    providerCallRecordId: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("zod").ZodString>;
+    agentRef: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("zod").ZodString>>;
+    kind: import("zod").ZodDefault<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("zod").ZodEnum<typeof import("./agent-traceability.shared.schemas").AgentCallTraceKind>>>;
+    provider: import("zod").ZodOptional<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("zod").ZodString>>;
+    model: import("zod").ZodOptional<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("zod").ZodString>>;
+    calledAt: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("zod").ZodDate>>;
+    correlationId: import("zod").ZodOptional<import("zod").ZodString>;
+    organizationId: import("zod").ZodOptional<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("zod").ZodString>>;
+    caseRef: import("zod").ZodOptional<import("zod").ZodObject<{
+        resourceType: import("zod").ZodString;
+        resourceId: import("zod").ZodString;
+    }, import("zod/v4/core").$strict>>;
+    executionRef: import("zod").ZodOptional<import("zod").ZodObject<{
+        kind: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("zod").ZodEnum<typeof import("./work-attribution.shared.schemas").ExecutionRefKind>>;
+        id: import("zod").ZodString;
+    }, import("zod/v4/core").$strict>>;
+    taskRef: import("zod").ZodOptional<import("zod").ZodString>;
+    attributionSource: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("zod").ZodEnum<typeof import("./work-attribution.shared.schemas").ModelCallAttributionSource>>>;
+    share: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("zod").ZodEnum<typeof import("./work-attribution.shared.schemas").ModelCallAttributionShare>>;
+    shareNumerator: import("zod").ZodNumber;
+    shareDenominator: import("zod").ZodNumber;
+    promptTokens: import("zod").ZodNumber;
+    completionTokens: import("zod").ZodNumber;
+    totalTokens: import("zod").ZodNumber;
+    noCacheTokens: import("zod").ZodOptional<import("zod").ZodNumber>;
+    cacheReadTokens: import("zod").ZodOptional<import("zod").ZodNumber>;
+    cacheWriteTokens: import("zod").ZodOptional<import("zod").ZodNumber>;
+    textTokens: import("zod").ZodOptional<import("zod").ZodNumber>;
+    reasoningTokens: import("zod").ZodOptional<import("zod").ZodNumber>;
+    reasoningUsage: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("zod").ZodEnum<typeof import("./work-attribution.shared.schemas").ReasoningUsageReporting>>;
+    pricingStatus: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("zod").ZodEnum<typeof import("./work-attribution.shared.schemas").ModelCallPricingStatus>>>;
+    pricingAuthorityRef: import("zod").ZodOptional<import("zod").ZodString>;
+    pricingAuthorityVersion: import("zod").ZodOptional<import("zod").ZodNumber>;
+    currency: import("zod").ZodOptional<import("zod").ZodString>;
+    callCostMinorNumerator: import("zod").ZodOptional<import("zod").ZodString>;
+    callCostUnitsDenominator: import("zod").ZodOptional<import("zod").ZodNumber>;
+    reportedCostAmount: import("zod").ZodOptional<import("zod").ZodNumber>;
+    reportedCurrency: import("zod").ZodOptional<import("zod").ZodString>;
+    createdAt: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("zod").ZodDefault<import("zod").ZodDate>>>>;
+}, import("zod/v4/core").$strip>>;
+//# sourceMappingURL=model-call-attributions.shared.resources-config.schemas.d.ts.map

package/dist/esm/flows-actors/model-call-attributions.shared.resources-config.schemas.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"model-call-attributions.shared.resources-config.schemas.d.ts","sourceRoot":"","sources":["../../../../src/flows-actors/model-call-attributions.shared.resources-config.schemas.ts"],"names":[],"mappings":"AAeA,OAAO,EAAE,qBAAqB,EAAwD,MAAM,gDAAgD,CAAC;AAC7I,OAAO,EAA4D,KAAK,oBAAoB,EAAE,MAAM,uCAAuC,CAAC;AAI5I,eAAO,MAAM,gEAAgE,GAC3E,wBAAwB,oBAAoB,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iCAmD9C,CAAC"}

package/dist/esm/flows-actors/model-call-attributions.shared.resources-config.schemas.js

@@ -0,0 +1,65 @@
+/**
+ * Model-call attributions: resource configuration (#1598). Engine-internal, no HTTP surface.
+ *
+ * The `providerCallRecords` shape: every variant is route-less. The ONE writer is the engine's provider-call
+ * recorder (through the repository, like the evidence row: a `createAsSystem` audit row per model call would
+ * double the volume and say nothing the row does not). The readers are the cost summary behind its APP_ADMIN
+ * route and the period close, both engine services.
+ *
+ * APPEND-ONLY: no UPDATE. `DELETE_MANY` is route-less and serves the retention-class sweep (OPERATIONAL_LOGS
+ * from creation) and the tenant teardown, whose `organizations → modelCallAttributions` edge deletes a tenant's
+ * rows with it (after the period close has aggregated its open period).
+ */
+import { createResourceConfiguration_Initialization } from '../resources/resources-config.shared.factory.js';
+import { ResourceSystemAccessMode } from '../resources/resources-config.shared.schemas.js';
+import { DataRetentionClass, RetentionStartPoint } from '../compliance/privacy/retention-schedule.shared.schemas.js';
+import { CoreResourceOperation, CoreResourceType, coreResourceShared_FieldIdentifier } from '../resources/resources.shared.core.definitions.js';
+import { ResourceOperationRiskLevel, ResourceOperationVariantType } from '../resources/resources.shared.schemas.js';
+import { CORE_APP_ROLES } from '../security/authorizations/roles.shared.schemas.js';
+import { ModelCallAttributionSchema } from './model-call-attributions.shared.schemas.js';
+export const modelCallAttributionsResourceConfiguration_InitializationFactory = (resourcesRelationships) => createResourceConfiguration_Initialization({
+    mainSchema: ModelCallAttributionSchema,
+    resourceIdentifier: CoreResourceType.MODEL_CALL_ATTRIBUTIONS,
+    resourceFieldIdentifier: coreResourceShared_FieldIdentifier[CoreResourceType.MODEL_CALL_ATTRIBUTIONS],
+    resourceRelationships: resourcesRelationships,
+    isSystemResource: true,
+    /*
+     * Subject-export FORBIDDEN, and no `retentionPolicy`: a row holds identifiers and counts, never content, and
+     * it has no relationship to USERS. It is "a financial row that POINTS at" a case, not data about a person.
+     * FORBIDDEN rather than undeclared so the decision is visible.
+     *
+     * assurance-control: WILDO.PRIVACY.DATA_MINIMIZATION — a closed projection: no prompt, output, error message or userId.
+     */
+    systemAccessPolicy: { exportSubject: ResourceSystemAccessMode.FORBIDDEN },
+    /*
+     * assurance-control: WILDO.PRIVACY.STORAGE_LIMITATION — kept for the declared OPERATIONAL_LOGS period from
+     * creation, never a number of this resource's own. The durable invoice-backing record is the aggregate.
+     */
+    retentionBinding: {
+        retentionClass: DataRetentionClass.OPERATIONAL_LOGS,
+        startPoint: RetentionStartPoint.CREATED,
+    },
+    coreOperations: [
+        CoreResourceOperation.CREATE,
+        CoreResourceOperation.READ,
+        CoreResourceOperation.LIST,
+        CoreResourceOperation.DELETE_MANY,
+    ],
+    operationsConfiguration: {
+        [CoreResourceOperation.CREATE]: {
+            variants: [{ variantType: ResourceOperationVariantType.REPOSITORY_ONLY, isDefault: true, roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN], riskLevel: ResourceOperationRiskLevel.LOW }],
+        },
+        [CoreResourceOperation.READ]: {
+            variants: [{ variantType: ResourceOperationVariantType.REPOSITORY_ONLY, isDefault: true, roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN], riskLevel: ResourceOperationRiskLevel.LOW }],
+        },
+        [CoreResourceOperation.LIST]: {
+            variants: [{ variantType: ResourceOperationVariantType.REPOSITORY_ONLY, isDefault: true, roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN], riskLevel: ResourceOperationRiskLevel.LOW }],
+        },
+        // INTERNAL_CALL: the retention sweep and the tenant cascade delete through the service layer, which
+        // resolves only INTERNAL_CALL. Route-less, so no client can delete a row.
+        [CoreResourceOperation.DELETE_MANY]: {
+            variants: [{ variantType: ResourceOperationVariantType.INTERNAL_CALL, isDefault: true, roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN], riskLevel: ResourceOperationRiskLevel.HIGH }],
+        },
+    },
+});
+//# sourceMappingURL=model-call-attributions.shared.resources-config.schemas.js.map

package/dist/esm/flows-actors/model-call-attributions.shared.resources-config.schemas.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"model-call-attributions.shared.resources-config.schemas.js","sourceRoot":"","sources":["../../../../src/flows-actors/model-call-attributions.shared.resources-config.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,EAAE,0CAA0C,EAAE,MAAM,8CAA8C,CAAC;AAC1G,OAAO,EAAE,wBAAwB,EAAE,MAAM,8CAA8C,CAAC;AACxF,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,yDAAyD,CAAC;AAClH,OAAO,EAAE,qBAAqB,EAAE,gBAAgB,EAAE,kCAAkC,EAAE,MAAM,gDAAgD,CAAC;AAC7I,OAAO,EAAE,0BAA0B,EAAE,4BAA4B,EAA6B,MAAM,uCAAuC,CAAC;AAC5I,OAAO,EAAE,cAAc,EAAE,MAAM,iDAAiD,CAAC;AACjF,OAAO,EAAE,0BAA0B,EAAE,MAAM,0CAA0C,CAAC;AAEtF,MAAM,CAAC,MAAM,gEAAgE,GAAG,CAC9E,sBAA8C,EAC9C,EAAE,CAAC,0CAA0C,CAG7C;IACA,UAAU,EAAE,0BAA0B;IACtC,kBAAkB,EAAE,gBAAgB,CAAC,uBAAuB;IAC5D,uBAAuB,EAAE,kCAAkC,CAAC,gBAAgB,CAAC,uBAAuB,CAAC;IACrG,qBAAqB,EAAE,sBAAsB;IAC7C,gBAAgB,EAAE,IAAI;IAEtB;;;;;;OAMG;IACH,kBAAkB,EAAE,EAAE,aAAa,EAAE,wBAAwB,CAAC,SAAS,EAAE;IAEzE;;;OAGG;IACH,gBAAgB,EAAE;QAChB,cAAc,EAAE,kBAAkB,CAAC,gBAAgB;QACnD,UAAU,EAAE,mBAAmB,CAAC,OAAO;KACxC;IAED,cAAc,EAAE;QACd,qBAAqB,CAAC,MAAM;QAC5B,qBAAqB,CAAC,IAAI;QAC1B,qBAAqB,CAAC,IAAI;QAC1B,qBAAqB,CAAC,WAAW;KAClC;IACD,uBAAuB,EAAE;QACvB,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE,CAAC,EAAE,WAAW,EAAE,4BAA4B,CAAC,eAAe,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC,EAAE,SAAS,EAAE,0BAA0B,CAAC,GAAG,EAAE,CAAC;SACrL;QACD,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE;YAC5B,QAAQ,EAAE,CAAC,EAAE,WAAW,EAAE,4BAA4B,CAAC,eAAe,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC,EAAE,SAAS,EAAE,0BAA0B,CAAC,GAAG,EAAE,CAAC;SACrL;QACD,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE;YAC5B,QAAQ,EAAE,CAAC,EAAE,WAAW,EAAE,4BAA4B,CAAC,eAAe,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC,EAAE,SAAS,EAAE,0BAA0B,CAAC,GAAG,EAAE,CAAC;SACrL;QACD,oGAAoG;QACpG,0EAA0E;QAC1E,CAAC,qBAAqB,CAAC,WAAW,CAAC,EAAE;YACnC,QAAQ,EAAE,CAAC,EAAE,WAAW,EAAE,4BAA4B,CAAC,aAAa,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC,EAAE,SAAS,EAAE,0BAA0B,CAAC,IAAI,EAAE,CAAC;SACpL;KACF;CACF,CAAC,CAAC","sourcesContent":["/**\n * Model-call attributions: resource configuration (#1598). Engine-internal, no HTTP surface.\n *\n * The `providerCallRecords` shape: every variant is route-less. The ONE writer is the engine's provider-call\n * recorder (through the repository, like the evidence row: a `createAsSystem` audit row per model call would\n * double the volume and say nothing the row does not). The readers are the cost summary behind its APP_ADMIN\n * route and the period close, both engine services.\n *\n * APPEND-ONLY: no UPDATE. `DELETE_MANY` is route-less and serves the retention-class sweep (OPERATIONAL_LOGS\n * from creation) and the tenant teardown, whose `organizations → modelCallAttributions` edge deletes a tenant's\n * rows with it (after the period close has aggregated its open period).\n */\nimport { createResourceConfiguration_Initialization } from '../resources/resources-config.shared.factory';\nimport { ResourceSystemAccessMode } from '../resources/resources-config.shared.schemas';\nimport { DataRetentionClass, RetentionStartPoint } from '../compliance/privacy/retention-schedule.shared.schemas';\nimport { CoreResourceOperation, CoreResourceType, coreResourceShared_FieldIdentifier } from '../resources/resources.shared.core.definitions';\nimport { ResourceOperationRiskLevel, ResourceOperationVariantType, type ResourceRelationship } from '../resources/resources.shared.schemas';\nimport { CORE_APP_ROLES } from '../security/authorizations/roles.shared.schemas';\nimport { ModelCallAttributionSchema } from './model-call-attributions.shared.schemas';\n\nexport const modelCallAttributionsResourceConfiguration_InitializationFactory = (\n  resourcesRelationships: ResourceRelationship[],\n) => createResourceConfiguration_Initialization<undefined,\n  CoreResourceOperation.CREATE | CoreResourceOperation.READ | CoreResourceOperation.LIST | CoreResourceOperation.DELETE_MANY,\n  typeof ModelCallAttributionSchema\n>({\n  mainSchema: ModelCallAttributionSchema,\n  resourceIdentifier: CoreResourceType.MODEL_CALL_ATTRIBUTIONS,\n  resourceFieldIdentifier: coreResourceShared_FieldIdentifier[CoreResourceType.MODEL_CALL_ATTRIBUTIONS],\n  resourceRelationships: resourcesRelationships,\n  isSystemResource: true,\n\n  /*\n   * Subject-export FORBIDDEN, and no `retentionPolicy`: a row holds identifiers and counts, never content, and\n   * it has no relationship to USERS. It is \"a financial row that POINTS at\" a case, not data about a person.\n   * FORBIDDEN rather than undeclared so the decision is visible.\n   *\n   * assurance-control: WILDO.PRIVACY.DATA_MINIMIZATION — a closed projection: no prompt, output, error message or userId.\n   */\n  systemAccessPolicy: { exportSubject: ResourceSystemAccessMode.FORBIDDEN },\n\n  /*\n   * assurance-control: WILDO.PRIVACY.STORAGE_LIMITATION — kept for the declared OPERATIONAL_LOGS period from\n   * creation, never a number of this resource's own. The durable invoice-backing record is the aggregate.\n   */\n  retentionBinding: {\n    retentionClass: DataRetentionClass.OPERATIONAL_LOGS,\n    startPoint: RetentionStartPoint.CREATED,\n  },\n\n  coreOperations: [\n    CoreResourceOperation.CREATE,\n    CoreResourceOperation.READ,\n    CoreResourceOperation.LIST,\n    CoreResourceOperation.DELETE_MANY,\n  ],\n  operationsConfiguration: {\n    [CoreResourceOperation.CREATE]: {\n      variants: [{ variantType: ResourceOperationVariantType.REPOSITORY_ONLY, isDefault: true, roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN], riskLevel: ResourceOperationRiskLevel.LOW }],\n    },\n    [CoreResourceOperation.READ]: {\n      variants: [{ variantType: ResourceOperationVariantType.REPOSITORY_ONLY, isDefault: true, roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN], riskLevel: ResourceOperationRiskLevel.LOW }],\n    },\n    [CoreResourceOperation.LIST]: {\n      variants: [{ variantType: ResourceOperationVariantType.REPOSITORY_ONLY, isDefault: true, roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN], riskLevel: ResourceOperationRiskLevel.LOW }],\n    },\n    // INTERNAL_CALL: the retention sweep and the tenant cascade delete through the service layer, which\n    // resolves only INTERNAL_CALL. Route-less, so no client can delete a row.\n    [CoreResourceOperation.DELETE_MANY]: {\n      variants: [{ variantType: ResourceOperationVariantType.INTERNAL_CALL, isDefault: true, roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN], riskLevel: ResourceOperationRiskLevel.HIGH }],\n    },\n  },\n});\n"]}

package/dist/esm/flows-actors/model-call-attributions.shared.schemas.d.ts

@@ -0,0 +1,120 @@
+/**
+ * # Model-call attributions: which tenant and which case a model call served, and what it cost (#1598)
+ *
+ * One row per (provider call × unit of work). Most calls produce exactly one row (share `WHOLE_CALL`); an
+ * embedding call that served several source rows of one tenant produces one row per source, each carrying
+ * its `APPORTIONED_BY_INPUT_LENGTH` share. A call made outside any work frame produces one `UNATTRIBUTED`
+ * row, so "every call is accounted for" stays a countable statement.
+ *
+ * ## Why a separate table, and not an `organizationId` on `providerCallRecords`
+ *
+ * `providerCallRecords` is operator EVIDENCE about what the application sent to which vendor; it names no
+ * customer on purpose. An organization id there would turn every evidence row into a statement about a
+ * customer, with the erasure and retention obligations that follow. The attribution is a separate fact with
+ * its own owner (the tenant it names) and its own teardown: these rows are deleted with the tenant.
+ *
+ * ## A closed projection, like the evidence row
+ *
+ * {@link projectModelCallAttribution} is the only producer, and it names every field it copies. No prompt,
+ * no output, no error message, no `userId` and nothing from the trace's free-form `attributes` can reach
+ * the table: the row holds identifiers and counts. That is also why it is `exportSubject: FORBIDDEN` with no
+ * relationship to USERS: it is "a financial row that POINTS at a case", not data about a person. A case row's
+ * erasure does not touch it; its `caseRef` then points at an impersonalized or absent row.
+ *
+ * ## Cost, exact and unrounded
+ *
+ * When a registered authority priced the call, the row stores the WHOLE call's exact cost as
+ * `callCostMinorNumerator / callCostUnitsDenominator` minor units. A reader applies the row's share and
+ * rounds once per reported total (`ExactMinorCostTotal`). A provider-reported cost (an ACP coding agent's
+ * `cost`) is kept apart, verbatim, and never mixed into the computed one.
+ *
+ * ## Retention
+ *
+ * Bound to the application's `OPERATIONAL_LOGS` period from creation (#1613). The durable record behind an
+ * invoice is the per-period aggregate (`modelCostPeriodAggregates`), not these rows.
+ */
+import { z } from 'zod';
+import '@wildo-ai/zod-decorators';
+import { AgentCallTraceKind, type AgentCallTrace } from './agent-traceability.shared.schemas';
+import { ModelCallAttributionShare, ModelCallAttributionSource, ModelCallPricingStatus, ReasoningUsageReporting, type ModelCallAttributionInput } from './work-attribution.shared.schemas';
+import type { ProviderCallRecord } from './provider-call-records.shared.schemas';
+import type { ProviderUsageCostResult } from '../external-providers/provider-usage-pricing.shared.schemas';
+export declare const ModelCallAttributionSchema: z.ZodObject<{
+    _id: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>;
+    applicationId: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>;
+    providerCallRecordId: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>;
+    agentRef: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>;
+    kind: z.ZodDefault<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodEnum<typeof AgentCallTraceKind>>>;
+    provider: z.ZodOptional<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>;
+    model: z.ZodOptional<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>;
+    calledAt: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDate>>;
+    correlationId: z.ZodOptional<z.ZodString>;
+    organizationId: z.ZodOptional<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>;
+    caseRef: z.ZodOptional<z.ZodObject<{
+        resourceType: z.ZodString;
+        resourceId: z.ZodString;
+    }, z.core.$strict>>;
+    executionRef: z.ZodOptional<z.ZodObject<{
+        kind: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodEnum<typeof import("./work-attribution.shared.schemas").ExecutionRefKind>>;
+        id: z.ZodString;
+    }, z.core.$strict>>;
+    taskRef: z.ZodOptional<z.ZodString>;
+    attributionSource: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodEnum<typeof ModelCallAttributionSource>>>;
+    share: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodEnum<typeof ModelCallAttributionShare>>;
+    shareNumerator: z.ZodNumber;
+    shareDenominator: z.ZodNumber;
+    promptTokens: z.ZodNumber;
+    completionTokens: z.ZodNumber;
+    totalTokens: z.ZodNumber;
+    noCacheTokens: z.ZodOptional<z.ZodNumber>;
+    cacheReadTokens: z.ZodOptional<z.ZodNumber>;
+    cacheWriteTokens: z.ZodOptional<z.ZodNumber>;
+    textTokens: z.ZodOptional<z.ZodNumber>;
+    reasoningTokens: z.ZodOptional<z.ZodNumber>;
+    reasoningUsage: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodEnum<typeof ReasoningUsageReporting>>;
+    pricingStatus: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodEnum<typeof ModelCallPricingStatus>>>;
+    pricingAuthorityRef: z.ZodOptional<z.ZodString>;
+    pricingAuthorityVersion: z.ZodOptional<z.ZodNumber>;
+    currency: z.ZodOptional<z.ZodString>;
+    callCostMinorNumerator: z.ZodOptional<z.ZodString>;
+    callCostUnitsDenominator: z.ZodOptional<z.ZodNumber>;
+    reportedCostAmount: z.ZodOptional<z.ZodNumber>;
+    reportedCurrency: z.ZodOptional<z.ZodString>;
+    createdAt: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodDate>>>>;
+}, z.core.$strip>;
+export type ModelCallAttribution = z.infer<typeof ModelCallAttributionSchema>;
+/** One unit of work a provider call served, with its share of the call. */
+export interface ModelCallAttributionTarget {
+    readonly attribution: ModelCallAttributionInput;
+    readonly source: ModelCallAttributionSource;
+    readonly share: ModelCallAttributionShare;
+    readonly shareNumerator: number;
+    readonly shareDenominator: number;
+}
+/**
+ * The ONLY way an attribution row is built: a closed projection of the provider-call record already
+ * written for the call, the resolved attribution, and the computed cost.
+ *
+ * It reads the RECORD (already a closed projection of the trace) rather than the trace, so the two tables
+ * cannot disagree about a call's provider, model or tokens, and nothing the record deliberately dropped
+ * (prompt, output, error message) can come back here. The reported provider cost is the one value read
+ * from the trace, and only its numeric amount and currency code.
+ */
+export declare function projectModelCallAttribution(input: {
+    readonly providerCallRecordId: string;
+    readonly record: Omit<ProviderCallRecord, '_id' | 'createdAt'>;
+    readonly target: ModelCallAttributionTarget;
+    readonly cost: ProviderUsageCostResult | undefined;
+    readonly reasoningUsage: ReasoningUsageReporting;
+    readonly correlationId?: string;
+    readonly reportedCost?: {
+        readonly amount: number;
+        readonly currency: string;
+    };
+}): Omit<ModelCallAttribution, '_id' | 'createdAt'>;
+/** Read an ACP-style provider-reported cost off a trace's usage, when there is one. Numeric fields only. */
+export declare function readReportedProviderCost(trace: AgentCallTrace): {
+    amount: number;
+    currency: string;
+} | undefined;
+//# sourceMappingURL=model-call-attributions.shared.schemas.d.ts.map

package/dist/esm/flows-actors/model-call-attributions.shared.schemas.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"model-call-attributions.shared.schemas.d.ts","sourceRoot":"","sources":["../../../../src/flows-actors/model-call-attributions.shared.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,0BAA0B,CAAC;AAElC,OAAO,EAAE,kBAAkB,EAAE,KAAK,cAAc,EAAE,MAAM,qCAAqC,CAAC;AAE9F,OAAO,EAEL,yBAAyB,EACzB,0BAA0B,EAC1B,sBAAsB,EACtB,uBAAuB,EACvB,KAAK,yBAAyB,EAC/B,MAAM,mCAAmC,CAAC;AAC3C,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,wCAAwC,CAAC;AACjF,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,6DAA6D,CAAC;AAE3G,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAmErC,CAAC;AACH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAE9E,2EAA2E;AAC3E,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,WAAW,EAAE,yBAAyB,CAAC;IAChD,QAAQ,CAAC,MAAM,EAAE,0BAA0B,CAAC;IAC5C,QAAQ,CAAC,KAAK,EAAE,yBAAyB,CAAC;IAC1C,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;CACnC;AAED;;;;;;;;GAQG;AACH,wBAAgB,2BAA2B,CAAC,KAAK,EAAE;IACjD,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC;IACtC,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,kBAAkB,EAAE,KAAK,GAAG,WAAW,CAAC,CAAC;IAC/D,QAAQ,CAAC,MAAM,EAAE,0BAA0B,CAAC;IAC5C,QAAQ,CAAC,IAAI,EAAE,uBAAuB,GAAG,SAAS,CAAC;IACnD,QAAQ,CAAC,cAAc,EAAE,uBAAuB,CAAC;IACjD,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,YAAY,CAAC,EAAE;QAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC;CAChF,GAAG,IAAI,CAAC,oBAAoB,EAAE,KAAK,GAAG,WAAW,CAAC,CA4ClD;AAED,4GAA4G;AAC5G,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,cAAc,GAAG;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GAAG,SAAS,CAKhH"}