@wildo-ai/saas-models 1.1.5 → 1.1.7

package/dist/esm/flows-actors/agent-work-decisions.shared.schemas.d.ts

@@ -0,0 +1,468 @@
+/**
+ * # Agent-work decisions: what an expert did with an agent's proposal (#1599)
+ *
+ * An AI-native service firm's moat is its experts' corrections to agent work. This file is the record of them: one
+ * row per decision a person took on something an agent PROPOSED (a tool call, an actor's reviewable output, a drafted
+ * row), in two resources split by what the law asks of each half:
+ *
+ * - `agentWorkDecisions` — the METADATA, always written: who decided what, on which agent's proposal, for which case,
+ *   when, and how far the final version is from the proposal (paths, an edit distance, two tenant-keyed digests).
+ *   Bound to `AUDIT_LOGS`: it is the operator's evidence of how agent work was supervised, and it must outlive the
+ *   content it describes.
+ * - `agentWorkDecisionContents` — the CONTENT (proposal, final, the JSON Patch between them, a reason text), written
+ *   ONLY when the tenant opted in (`CorrectionContentCapture.WITH_CONTENT`). Bound to `RESOURCE_DATA`: it is the
+ *   client's material, kept only as long as the rest of the tenant's data.
+ *
+ * One resource would have forced one retention period on both halves; the record of a decision must be kept longer
+ * than the words it decided on (#1613 binds one class per resource).
+ *
+ * Two organization settings govern the second half and its reuse: `agentWorkCaptureSettings` (the opt-in, with its
+ * stated purpose and the role that may read content) and `evaluationExportAuthorizations` (the basis on which a
+ * tenant's decisions may be exported as evaluation data). Every export is recorded in `evaluationDatasetExports`.
+ *
+ * ## Why not the audit trail
+ *
+ * The decision is audited once, by #1594's `HUMAN_DECISION_RESOLVED`. The trail replicates to a SIEM and an immutable
+ * ledger, so it is metadata-only by design and can never hold a proposal or a final version, nor be scrubbed when the
+ * case is erased. These rows can.
+ *
+ * ## What is never stored here
+ *
+ * - The FINAL work product: the record POINTS at it (`finalWorkProductRef`); the row lives in the application's own
+ *   table, whose erasure and retention already apply.
+ * - An unkeyed digest of content: `proposedDigest` / `finalDigest` are HMAC-SHA256 under a key derived per tenant from
+ *   the application's primary secret. An unkeyed hash of low-entropy content (a status, a title) is reversed by
+ *   enumeration, even in an erasable resource.
+ * - Free-text reasons in the metadata: `reasonCode` is a value of the application-declared vocabulary; free text goes
+ *   to the opt-in content only.
+ */
+import { z } from 'zod';
+import { AgentWorkDecisionSurface, HumanDecision_Outcome } from './human-decision.shared.schemas';
+import { type PolymorphicVariantDefinition } from '../resources/utils/resource-polymorphism.schemas';
+/**
+ * @wildo_source:part:start saas.models.agent-work-decision-vocabulary facet:layer:shared facet:family:flows-actors facet:audience:app-developer
+ *
+ * How a decision record came to be written.
+ */
+export declare enum AgentWorkDecisionRecordSource {
+    /** Written by the settle that won the decision, right after its compare-and-swap. */
+    SETTLEMENT = "settlement",
+    /**
+     * Written by the repair sweep from the execution row's resolution columns, because the process died between the
+     * settle and the write. Metadata only: content captured in the lost window is not reconstructed.
+     */
+    ROW_REPAIR = "row_repair"
+}
+/** Why an evaluation-dataset export was refused (#1599 I7). */
+export declare enum EvaluationDatasetExportRefusalReason {
+    /** The organization has recorded no export authorisation. */
+    NO_AUTHORIZATION = "no_authorization",
+    /** The organization's authorisation is revoked. */
+    AUTHORIZATION_REVOKED = "authorization_revoked"
+}
+/** What an override-rate summary groups by. */
+export declare enum AgentWorkDecisionGrouping {
+    AGENT = "agent",
+    TOOL = "tool",
+    CASE = "case",
+    DECIDER = "decider"
+}
+/**
+ * Whether a tenant keeps the CONTENT of its experts' corrections. OFF by default (GDPR Art. 25(2) data protection by
+ * default; the OpenTelemetry GenAI conventions ask instrumentations not to capture content by default): the override
+ * rate needs only the outcome.
+ */
+export declare enum CorrectionContentCapture {
+    /** Outcome, timestamps, paths and digests only. The default, and what an organization with no setting gets. */
+    METADATA_ONLY = "metadata_only",
+    /** Also the proposal, the final version, the diff and a reason text, in `agentWorkDecisionContents`. */
+    WITH_CONTENT = "with_content"
+}
+/**
+ * The legal basis a tenant records for exporting its experts' corrections as evaluation data. There is no third
+ * member: an export with no recorded basis is refused.
+ */
+export declare enum EvaluationExportBasis {
+    /**
+     * The firm acts as PROCESSOR and the controller (its client) documented the instruction to improve the firm's
+     * agents on this data (GDPR Art. 28(3)(a)).
+     */
+    PROCESSOR_DOCUMENTED_INSTRUCTION = "processor_documented_instruction",
+    /**
+     * The firm acts as CONTROLLER and assessed the further use as compatible with the original purpose (GDPR
+     * Art. 5(1)(b), Art. 6(4)), with pseudonymisation as a safeguard.
+     */
+    CONTROLLER_COMPATIBILITY_ASSESSED = "controller_compatibility_assessed"
+}
+/** Whether an export authorisation currently admits an export. */
+export declare enum EvaluationExportAuthorizationStatus {
+    /**
+     * Nobody granted one. The state the organization's row is created in when its settings page is first read (the row
+     * records that no decision was taken; it is not one). Exports are refused. Only a row that was never ACTIVE may hold
+     * it: withdrawing a grant is REVOKED, which marks the datasets built under it.
+     */
+    NOT_GRANTED = "not_granted",
+    /** Granted, on the recorded basis. Exports are admitted. */
+    ACTIVE = "active",
+    /** Withdrawn by the organization. Exports are refused, and datasets built under it are marked. */
+    REVOKED = "revoked"
+}
+/** Why an exported dataset may no longer be used. */
+export declare enum EvaluationDatasetInvalidationReason {
+    /** A case it contains was erased. */
+    SUBJECT_ERASURE = "subject_erasure",
+    /** The authorisation it was exported under was revoked. */
+    CONSENT_WITHDRAWN = "consent_withdrawn"
+}
+/**
+ * The outcomes a person actually DECIDED. The override rate counts only these: a lapse, a withdrawal or a lapsed
+ * authority is nobody's judgement on the proposal, and counting it would move the rate without any expert having
+ * looked.
+ */
+export declare const AGENT_WORK_DECISION_RATED_OUTCOMES: readonly HumanDecision_Outcome[];
+/** The outcomes that OVERRIDE the proposal: the numerator of the override rate. */
+export declare const AGENT_WORK_DECISION_OVERRIDE_OUTCOMES: readonly HumanDecision_Outcome[];
+/** @wildo_source:part:end saas.models.agent-work-decision-vocabulary */
+/** A pointer at a row of the application: the final work product, never a copy of it. */
+export declare const AgentWorkProductRefSchema: z.ZodObject<{
+    resourceType: z.ZodString;
+    resourceId: z.ZodString;
+}, z.core.$strict>;
+export type AgentWorkProductRef = z.infer<typeof AgentWorkProductRefSchema>;
+/**
+ * @wildo_source:part:start saas.models.agent-work-review-config facet:layer:shared facet:family:flows-actors facet:audience:app-developer
+ *
+ * `agentWorkReview` in the backend configuration (#1599): the application's reason-code vocabulary for corrections,
+ * and the case resources whose work is privileged (an export of such a case needs its client's recorded consent).
+ * Optional: absent, reason codes are refused and no case is treated as privileged.
+ */
+export declare const AgentWorkReviewConfigSchema: z.ZodObject<{
+    /** The reason codes an expert may give for a correction. A code outside this list is refused, never stored. */
+    reasonCodes: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    /** Work-unit resource types whose cases are privileged or confidential (a matter, a patient file). */
+    privilegedCaseResourceTypes: z.ZodDefault<z.ZodArray<z.ZodString>>;
+}, z.core.$strict>;
+export type AgentWorkReviewConfig = z.infer<typeof AgentWorkReviewConfigSchema>;
+export declare const AgentWorkDecisionBaseSchema: z.ZodObject<{
+    _id: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>;
+    decisionRef: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>>;
+    surface: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodEnum<typeof AgentWorkDecisionSurface>>>>;
+    outcome: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodEnum<typeof HumanDecision_Outcome>>>>;
+    workOrganizationId: z.ZodOptional<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>;
+    agentRef: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>;
+    agentVersion: z.ZodOptional<z.ZodString>;
+    toolName: z.ZodOptional<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>;
+    caseRef: z.ZodOptional<z.ZodObject<{
+        resourceType: z.ZodString;
+        resourceId: z.ZodString;
+    }, z.core.$strict>>;
+    executionRef: z.ZodOptional<z.ZodObject<{
+        kind: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodEnum<typeof import("./work-attribution.shared.schemas").ExecutionRefKind>>;
+        id: z.ZodString;
+    }, z.core.$strict>>;
+    taskRef: z.ZodOptional<z.ZodString>;
+    finalWorkProductRef: z.ZodOptional<z.ZodObject<{
+        resourceType: z.ZodString;
+        resourceId: z.ZodString;
+    }, z.core.$strict>>;
+    modifiedPaths: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    editDistance: z.ZodOptional<z.ZodNumber>;
+    proposedDigest: z.ZodOptional<z.ZodString>;
+    finalDigest: z.ZodOptional<z.ZodString>;
+    reasonCode: z.ZodOptional<z.ZodString>;
+    deciderUserId: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodOptional<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>>;
+    admittedByRole: z.ZodOptional<z.ZodString>;
+    presentedAt: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDate>;
+    decidedAt: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDate>>;
+    recordSource: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodEnum<typeof AgentWorkDecisionRecordSource>>;
+    contentRecorded: z.ZodDefault<z.ZodBoolean>;
+    createdAt: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodDate>>>>;
+}, z.core.$strip>;
+export type AgentWorkDecision = z.infer<typeof AgentWorkDecisionBaseSchema>;
+export declare const AgentWorkDecisionContentBaseSchema: z.ZodObject<{
+    _id: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>;
+    decisionRef: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>>;
+    caseRef: z.ZodOptional<z.ZodObject<{
+        resourceType: z.ZodString;
+        resourceId: z.ZodString;
+    }, z.core.$strict>>;
+    workOrganizationId: z.ZodOptional<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>;
+    proposalJson: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodOptional<z.ZodString>>;
+    finalJson: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodOptional<z.ZodString>>;
+    diffJson: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodOptional<z.ZodString>>;
+    reasonText: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodOptional<z.ZodString>>;
+    createdAt: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodDate>>>>;
+}, z.core.$strip>;
+export type AgentWorkDecisionContent = z.infer<typeof AgentWorkDecisionContentBaseSchema>;
+/**
+ * The three owner scopes a decision is recorded in: the scope of the execution it paused (a user's own chat, an
+ * organization's machine turn, an application's), or the organization of an output review. Multi-row per scope, so
+ * the injected owner FK is not a business key.
+ */
+export declare const AGENT_WORK_DECISION_SCOPE_VARIANTS: PolymorphicVariantDefinition[];
+/** `userAgentWorkDecisions` / `organizationAgentWorkDecisions` / `applicationAgentWorkDecisions`. */
+export declare const agentWorkDecisionsPolymorphicDeclaration: import("..").PolymorphicSchemaDeclaration<z.ZodObject<{
+    _id: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>;
+    decisionRef: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>>;
+    surface: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodEnum<typeof AgentWorkDecisionSurface>>>>;
+    outcome: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodEnum<typeof HumanDecision_Outcome>>>>;
+    workOrganizationId: z.ZodOptional<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>;
+    agentRef: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>;
+    agentVersion: z.ZodOptional<z.ZodString>;
+    toolName: z.ZodOptional<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>;
+    caseRef: z.ZodOptional<z.ZodObject<{
+        resourceType: z.ZodString;
+        resourceId: z.ZodString;
+    }, z.core.$strict>>;
+    executionRef: z.ZodOptional<z.ZodObject<{
+        kind: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodEnum<typeof import("./work-attribution.shared.schemas").ExecutionRefKind>>;
+        id: z.ZodString;
+    }, z.core.$strict>>;
+    taskRef: z.ZodOptional<z.ZodString>;
+    finalWorkProductRef: z.ZodOptional<z.ZodObject<{
+        resourceType: z.ZodString;
+        resourceId: z.ZodString;
+    }, z.core.$strict>>;
+    modifiedPaths: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    editDistance: z.ZodOptional<z.ZodNumber>;
+    proposedDigest: z.ZodOptional<z.ZodString>;
+    finalDigest: z.ZodOptional<z.ZodString>;
+    reasonCode: z.ZodOptional<z.ZodString>;
+    deciderUserId: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodOptional<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>>;
+    admittedByRole: z.ZodOptional<z.ZodString>;
+    presentedAt: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDate>;
+    decidedAt: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDate>>;
+    recordSource: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodEnum<typeof AgentWorkDecisionRecordSource>>;
+    contentRecorded: z.ZodDefault<z.ZodBoolean>;
+    createdAt: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodDate>>>>;
+}, z.core.$strip>>;
+/** `userAgentWorkDecisionContents` / `organizationAgentWorkDecisionContents` / `applicationAgentWorkDecisionContents`. */
+export declare const agentWorkDecisionContentsPolymorphicDeclaration: import("..").PolymorphicSchemaDeclaration<z.ZodObject<{
+    _id: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>;
+    decisionRef: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>>;
+    caseRef: z.ZodOptional<z.ZodObject<{
+        resourceType: z.ZodString;
+        resourceId: z.ZodString;
+    }, z.core.$strict>>;
+    workOrganizationId: z.ZodOptional<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>;
+    proposalJson: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodOptional<z.ZodString>>;
+    finalJson: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodOptional<z.ZodString>>;
+    diffJson: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodOptional<z.ZodString>>;
+    reasonText: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodOptional<z.ZodString>>;
+    createdAt: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodDate>>>>;
+}, z.core.$strip>>;
+/**
+ * @wildo_source:part:start saas.models.agent-work-capture-settings facet:layer:shared facet:family:flows-actors facet:audience:app-developer
+ *
+ * One organization's choice to keep the CONTENT of its experts' corrections (#1599 D5). No row means
+ * `METADATA_ONLY`. Every change is audited (`CORRECTION_CAPTURE_SETTING_CHANGED`). Keeping content needs a stated
+ * purpose; the engine refuses `WITH_CONTENT` without one.
+ */
+export declare const AgentWorkCaptureSettingsSchema: z.ZodObject<{
+    _id: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>;
+    organizationId: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>>>>;
+    contentCapture: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodEnum<typeof CorrectionContentCapture>>>>;
+    purpose: z.ZodOptional<z.ZodString>;
+    contentReaderRole: z.ZodOptional<z.ZodString>;
+    narrowToCaseRefs: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        resourceType: z.ZodString;
+        resourceId: z.ZodString;
+    }, z.core.$strict>>>;
+    createdAt: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodDate>>>;
+    updatedAt: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodDate>>>;
+}, z.core.$strip>;
+export type AgentWorkCaptureSettings = z.infer<typeof AgentWorkCaptureSettingsSchema>;
+/** @wildo_source:part:end saas.models.agent-work-capture-settings */
+/** One client consent an export may rely on, for privileged or confidential work on one case. */
+export declare const EvaluationExportConsentSchema: z.ZodObject<{
+    caseRef: z.ZodObject<{
+        resourceType: z.ZodString;
+        resourceId: z.ZodString;
+    }, z.core.$strict>;
+    /** Where the consent is recorded (an engagement-letter clause, a signed form): a reference, never the text. */
+    consentRef: z.ZodString;
+    recordedAt: z.ZodISODateTime;
+}, z.core.$strict>;
+export type EvaluationExportConsent = z.infer<typeof EvaluationExportConsentSchema>;
+/**
+ * @wildo_source:part:start saas.models.evaluation-export-authorization facet:layer:shared facet:family:flows-actors facet:audience:app-developer
+ *
+ * One organization's recorded authorisation to export its experts' corrections as evaluation data (#1599 D7). No row,
+ * NOT_GRANTED or REVOKED: every export is refused. Every change is audited (`EVALUATION_EXPORT_AUTHORIZATION_CHANGED`).
+ *
+ * `basis` and `basisReference` are optional in the shape because a NOT_GRANTED row has neither, and required of every
+ * ACTIVE row: the write that would leave the row ACTIVE without both is refused.
+ */
+export declare const EvaluationExportAuthorizationSchema: z.ZodObject<{
+    _id: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>;
+    organizationId: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>>>>;
+    status: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodEnum<typeof EvaluationExportAuthorizationStatus>>>>;
+    basis: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodOptional<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodEnum<typeof EvaluationExportBasis>>>>;
+    basisReference: z.ZodOptional<z.ZodString>;
+    clientConsents: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        caseRef: z.ZodObject<{
+            resourceType: z.ZodString;
+            resourceId: z.ZodString;
+        }, z.core.$strict>;
+        /** Where the consent is recorded (an engagement-letter clause, a signed form): a reference, never the text. */
+        consentRef: z.ZodString;
+        recordedAt: z.ZodISODateTime;
+    }, z.core.$strict>>>;
+    excludedCaseRefs: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        resourceType: z.ZodString;
+        resourceId: z.ZodString;
+    }, z.core.$strict>>>;
+    createdAt: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodDate>>>;
+    updatedAt: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodDate>>>;
+}, z.core.$strip>;
+export type EvaluationExportAuthorization = z.infer<typeof EvaluationExportAuthorizationSchema>;
+/** @wildo_source:part:end saas.models.evaluation-export-authorization */
+/** One export of a tenant's corrections: the ledger an auditor and an erasure both read (#1599 D7). */
+export declare const EvaluationDatasetExportSchema: z.ZodObject<{
+    _id: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>;
+    organizationId: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>>>;
+    exportedByUserId: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodOptional<z.ZodString>>;
+    exportedAt: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDate>>;
+    authorizationId: z.ZodString;
+    basis: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodEnum<typeof EvaluationExportBasis>>;
+    agentRef: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>;
+    windowFrom: z.ZodDate;
+    windowTo: z.ZodDate;
+    decisionRefs: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    caseKeys: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    recordCount: z.ZodNumber;
+    pseudonymisationVersion: z.ZodString;
+    destination: z.ZodString;
+    invalidatedAt: z.ZodOptional<z.ZodDate>;
+    invalidationReason: z.ZodOptional<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodEnum<typeof EvaluationDatasetInvalidationReason>>>;
+    createdAt: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodDate>>>;
+}, z.core.$strip>;
+export type EvaluationDatasetExport = z.infer<typeof EvaluationDatasetExportSchema>;
+/**
+ * @wildo_source:part:start saas.models.agent-work-output-review facet:layer:shared facet:family:flows-actors facet:audience:app-developer
+ *
+ * `recordOutputReview` — the application tells the engine an expert reviewed output an agent drafted into the
+ * application's own rows (the main case in a service firm: an agent drafts a letter, a lawyer edits it). The
+ * application supplies `decisionRef` (opaque, unique per review), so a retried call records once.
+ */
+export declare const AgentWorkOutputReviewInputSchema: z.ZodObject<{
+    decisionRef: z.ZodString;
+    outcome: z.ZodEnum<{
+        accepted: HumanDecision_Outcome.ACCEPTED;
+        accepted_with_modifications: HumanDecision_Outcome.ACCEPTED_WITH_MODIFICATIONS;
+        rejected: HumanDecision_Outcome.REJECTED;
+    }>;
+    agentRef: z.ZodString;
+    agentVersion: z.ZodOptional<z.ZodString>;
+    /** The case the output is for. Admitted only if it is a readable row of a `workUnit` resource. */
+    caseRef: z.ZodOptional<z.ZodObject<{
+        resourceType: z.ZodString;
+        resourceId: z.ZodString;
+    }, z.core.$strict>>;
+    taskRef: z.ZodOptional<z.ZodString>;
+    /** The row the reviewed output now lives in. */
+    finalWorkProductRef: z.ZodOptional<z.ZodObject<{
+        resourceType: z.ZodString;
+        resourceId: z.ZodString;
+    }, z.core.$strict>>;
+    /** What the agent proposed, and what the expert kept. Used for the diff; stored only under the tenant's opt-in. */
+    proposal: z.ZodOptional<z.ZodUnknown>;
+    final: z.ZodOptional<z.ZodUnknown>;
+    reasonCode: z.ZodOptional<z.ZodString>;
+    reasonText: z.ZodOptional<z.ZodString>;
+    /** When the draft was put before the expert (defaults to the review instant when the application does not know). */
+    presentedAt: z.ZodOptional<z.ZodISODateTime>;
+}, z.core.$strict>;
+export type AgentWorkOutputReviewInput = z.infer<typeof AgentWorkOutputReviewInputSchema>;
+/** @wildo_source:part:end saas.models.agent-work-output-review */
+/** The longest window one override-rate summary or export may cover. */
+export declare const AGENT_WORK_MAX_WINDOW_DAYS = 366;
+/**
+ * @wildo_source:part:start saas.models.agent-work-override-rate facet:layer:shared facet:family:flows-actors facet:audience:app-developer
+ *
+ * The override rate: (ACCEPTED_WITH_MODIFICATIONS + REJECTED) / (ACCEPTED + ACCEPTED_WITH_MODIFICATIONS + REJECTED)
+ * per group, over a window. Lapsed, withdrawn and authority-lapsed decisions are counted apart and never enter the
+ * rate. Computed from metadata only: no export authorisation is needed.
+ */
+export declare const AgentWorkOverrideRateRequestSchema: z.ZodObject<{
+    from: z.ZodISODateTime;
+    to: z.ZodISODateTime;
+    groupBy: z.ZodEnum<typeof AgentWorkDecisionGrouping>;
+    /** The tenant. Required for an organization administrator; an application administrator may omit it. */
+    organizationId: z.ZodOptional<z.ZodString>;
+    agentRef: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>;
+export type AgentWorkOverrideRateRequest = z.infer<typeof AgentWorkOverrideRateRequestSchema>;
+export declare const AgentWorkOverrideRateGroupSchema: z.ZodObject<{
+    key: z.ZodObject<{
+        agentRef: z.ZodOptional<z.ZodString>;
+        toolName: z.ZodOptional<z.ZodString>;
+        caseRef: z.ZodOptional<z.ZodObject<{
+            resourceType: z.ZodString;
+            resourceId: z.ZodString;
+        }, z.core.$strict>>;
+        deciderUserId: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>;
+    accepted: z.ZodNumber;
+    acceptedWithModifications: z.ZodNumber;
+    rejected: z.ZodNumber;
+    notDecided: z.ZodNumber;
+    overrideRate: z.ZodNullable<z.ZodNumber>;
+}, z.core.$strip>;
+export type AgentWorkOverrideRateGroup = z.infer<typeof AgentWorkOverrideRateGroupSchema>;
+export declare const AgentWorkOverrideRateSchema: z.ZodObject<{
+    window: z.ZodObject<{
+        from: z.ZodString;
+        to: z.ZodString;
+    }, z.core.$strip>;
+    groupBy: z.ZodEnum<typeof AgentWorkDecisionGrouping>;
+    groups: z.ZodArray<z.ZodObject<{
+        key: z.ZodObject<{
+            agentRef: z.ZodOptional<z.ZodString>;
+            toolName: z.ZodOptional<z.ZodString>;
+            caseRef: z.ZodOptional<z.ZodObject<{
+                resourceType: z.ZodString;
+                resourceId: z.ZodString;
+            }, z.core.$strict>>;
+            deciderUserId: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>;
+        accepted: z.ZodNumber;
+        acceptedWithModifications: z.ZodNumber;
+        rejected: z.ZodNumber;
+        notDecided: z.ZodNumber;
+        overrideRate: z.ZodNullable<z.ZodNumber>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export type AgentWorkOverrideRate = z.infer<typeof AgentWorkOverrideRateSchema>;
+/** @wildo_source:part:end saas.models.agent-work-override-rate */
+/**
+ * @wildo_source:part:start saas.models.evaluation-dataset-export facet:layer:shared facet:family:flows-actors facet:audience:app-developer
+ *
+ * `POST /agent-work/evaluation-exports` — export one tenant's decisions on ONE agent's proposals over a window, as
+ * pseudonymised JSON Lines. Refused (and audited) without an ACTIVE authorisation of that organization. Never pools
+ * tenants: one organization per export.
+ */
+export declare const EvaluationDatasetExportRequestSchema: z.ZodObject<{
+    organizationId: z.ZodString;
+    agentRef: z.ZodString;
+    from: z.ZodISODateTime;
+    to: z.ZodISODateTime;
+    /** Where the dataset goes (an evaluation store, a bucket path): recorded on the ledger. */
+    destination: z.ZodString;
+}, z.core.$strict>;
+export type EvaluationDatasetExportRequest = z.infer<typeof EvaluationDatasetExportRequestSchema>;
+export declare const EvaluationDatasetExportResultSchema: z.ZodObject<{
+    exportId: z.ZodString;
+    recordCount: z.ZodNumber;
+    jsonl: z.ZodString;
+    pseudonymisationVersion: z.ZodString;
+}, z.core.$strip>;
+export type EvaluationDatasetExportResult = z.infer<typeof EvaluationDatasetExportResultSchema>;
+/** @wildo_source:part:end saas.models.evaluation-dataset-export */
+/** The override rate of counted outcomes; `null` when nothing was decided. */
+export declare function agentWorkOverrideRate(counts: {
+    accepted: number;
+    acceptedWithModifications: number;
+    rejected: number;
+}): number | null;
+//# sourceMappingURL=agent-work-decisions.shared.schemas.d.ts.map

package/dist/esm/flows-actors/agent-work-decisions.shared.schemas.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-work-decisions.shared.schemas.d.ts","sourceRoot":"","sources":["../../../src/flows-actors/agent-work-decisions.shared.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,EAAE,wBAAwB,EAA6B,qBAAqB,EAAE,MAAM,iCAAiC,CAAC;AAM7H,OAAO,EAGL,KAAK,4BAA4B,EAClC,MAAM,kDAAkD,CAAC;AAI1D;;;;GAIG;AACH,oBAAY,6BAA6B;IACvC,qFAAqF;IACrF,UAAU,eAAe;IACzB;;;OAGG;IACH,UAAU,eAAe;CAC1B;AAED,+DAA+D;AAC/D,oBAAY,oCAAoC;IAC9C,6DAA6D;IAC7D,gBAAgB,qBAAqB;IACrC,mDAAmD;IACnD,qBAAqB,0BAA0B;CAChD;AAED,+CAA+C;AAC/C,oBAAY,yBAAyB;IACnC,KAAK,UAAU;IACf,IAAI,SAAS;IACb,IAAI,SAAS;IACb,OAAO,YAAY;CACpB;AAED;;;;GAIG;AACH,oBAAY,wBAAwB;IAClC,+GAA+G;IAC/G,aAAa,kBAAkB;IAC/B,wGAAwG;IACxG,YAAY,iBAAiB;CAC9B;AAED;;;GAGG;AACH,oBAAY,qBAAqB;IAC/B;;;OAGG;IACH,gCAAgC,qCAAqC;IACrE;;;OAGG;IACH,iCAAiC,sCAAsC;CACxE;AAED,kEAAkE;AAClE,oBAAY,mCAAmC;IAC7C;;;;OAIG;IACH,WAAW,gBAAgB;IAC3B,4DAA4D;IAC5D,MAAM,WAAW;IACjB,kGAAkG;IAClG,OAAO,YAAY;CACpB;AAED,qDAAqD;AACrD,oBAAY,mCAAmC;IAC7C,qCAAqC;IACrC,eAAe,oBAAoB;IACnC,2DAA2D;IAC3D,iBAAiB,sBAAsB;CACxC;AAED;;;;GAIG;AACH,eAAO,MAAM,kCAAkC,EAAE,SAAS,qBAAqB,EAI7E,CAAC;AACH,mFAAmF;AACnF,eAAO,MAAM,qCAAqC,EAAE,SAAS,qBAAqB,EAGhF,CAAC;AACH,wEAAwE;AAExE,yFAAyF;AACzF,eAAO,MAAM,yBAAyB;;;kBAGpC,CAAC;AACH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAE5E;;;;;;GAMG;AACH,eAAO,MAAM,2BAA2B;IACtC,+GAA+G;;IAE/G,sGAAsG;;kBAEtG,CAAC;AACH,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAUhF,eAAO,MAAM,2BAA2B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAuEtC,CAAC;AACH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAM5E,eAAO,MAAM,kCAAkC;;;;;;;;;;;;;iBAiB7C,CAAC;AACH,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kCAAkC,CAAC,CAAC;AAM1F;;;;GAIG;AACH,eAAO,MAAM,kCAAkC,EAAE,4BAA4B,EAItC,CAAC;AAExC,qGAAqG;AACrG,eAAO,MAAM,wCAAwC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAMnD,CAAC;AAEH,0HAA0H;AAC1H,eAAO,MAAM,+CAA+C;;;;;;;;;;;;;kBAM1D,CAAC;AAMH;;;;;;GAMG;AACH,eAAO,MAAM,8BAA8B;;;;;;;;;;;;iBAezC,CAAC;AACH,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,8BAA8B,CAAC,CAAC;AACtF,qEAAqE;AAErE,iGAAiG;AACjG,eAAO,MAAM,6BAA6B;;;;;IAExC,+GAA+G;;;kBAG/G,CAAC;AACH,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AAEpF;;;;;;;;GAQG;AACH,eAAO,MAAM,mCAAmC;;;;;;;;;;;QAf9C,+GAA+G;;;;;;;;;;iBAgC/G,CAAC;AACH,MAAM,MAAM,6BAA6B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mCAAmC,CAAC,CAAC;AAChG,yEAAyE;AAEzE,uGAAuG;AACvG,eAAO,MAAM,6BAA6B;;;;;;;;;;;;;;;;;;iBAsBxC,CAAC;AACH,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AAMpF;;;;;;GAMG;AACH,eAAO,MAAM,gCAAgC;;;;;;;;;IAK3C,kGAAkG;;;;;;IAGlG,gDAAgD;;;;;IAEhD,mHAAmH;;;;;IAKnH,oHAAoH;;kBAEpH,CAAC;AACH,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gCAAgC,CAAC,CAAC;AAC1F,kEAAkE;AAElE,wEAAwE;AACxE,eAAO,MAAM,0BAA0B,MAAM,CAAC;AAO9C;;;;;;GAMG;AACH,eAAO,MAAM,kCAAkC;;;;IAI7C,wGAAwG;;;kBAGW,CAAC;AACtH,MAAM,MAAM,4BAA4B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kCAAkC,CAAC,CAAC;AAE9F,eAAO,MAAM,gCAAgC;;;;;;;;;;;;;;;iBAc3C,CAAC;AACH,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gCAAgC,CAAC,CAAC;AAE1F,eAAO,MAAM,2BAA2B;;;;;;;;;;;;;;;;;;;;;;iBAItC,CAAC;AACH,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAChF,kEAAkE;AAElE;;;;;;GAMG;AACH,eAAO,MAAM,oCAAoC;;;;;IAK/C,2FAA2F;;kBAEwB,CAAC;AACtH,MAAM,MAAM,8BAA8B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oCAAoC,CAAC,CAAC;AAElG,eAAO,MAAM,mCAAmC;;;;;iBAU9C,CAAC;AACH,MAAM,MAAM,6BAA6B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mCAAmC,CAAC,CAAC;AAChG,mEAAmE;AAEnE,8EAA8E;AAC9E,wBAAgB,qBAAqB,CAAC,MAAM,EAAE;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,yBAAyB,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,GAAG,IAAI,CAGtI"}