@decaf-ts/integrations 0.10.5 → 0.11.0

package/lib/types/nest/graph/GraphExecutionResultModel.d.mts

@@ -1,24 +0,0 @@
-import { BaseModel } from "@decaf-ts/core";
-/**
- * Persisted terminal snapshot of one graph run (written by
- * {@link GraphResultService} after the deprecated synchronous execute
- * endpoint completes). Keyed by `runId`; the optional `owner` column (added
- * by SAA-595 F1) records the run's owning user so result reads can be
- * ownership-gated at the route layer.
- */
-export declare class GraphExecutionResultModel extends BaseModel {
-    runId: string;
-    workflowId: string;
-    /**
-     * Owning user of the run this result belongs to (SAA-595 F1); absent for
-     * legacy/anonymous results, which carry no enforceable ownership.
-     */
-    owner?: string;
-    status: string;
-    inputs: Record<string, unknown>;
-    outputs: Record<string, unknown>;
-    nodeResults: Record<string, unknown>;
-    startedAt: Date;
-    finishedAt?: Date;
-    constructor(arg?: Partial<GraphExecutionResultModel>);
-}

package/lib/types/nest/graph/GraphExecutorRegistryFactory.d.cts

@@ -1,66 +0,0 @@
-/**
- * @module integrations/nest/graph/GraphExecutorRegistryFactory
- * @summary Factory that builds a populated {@link GraphNodeCatalogue} and its
- * {@link GraphNodeExecutorRegistry} compatibility facade.
- * @description Creates a catalogue pre-loaded with the DECAF-50 built-in
- * manifest+executor registrations plus the demo executors used by the graph
- * execution backend's sample workflows. The catalogue is the single
- * kind→registration map (DECAF-50 §4.7); the returned registry is a facade
- * over it, so no second executor map exists.
- */
-import { GraphNodeCatalogue, GraphNodeExecutorRegistry, GraphExecutionEngine, type GraphNodeExecutor, IsolatedVmCodeSandboxEvaluator } from "../../graph/index.d.cts";
-/**
- * Builds a {@link GraphNodeCatalogue} populated with the built-in
- * manifest+executor registrations and the arithmetic demo executors, wrapped
- * with its {@link GraphNodeExecutorRegistry} facade.
- *
- * The built-in kinds whose executors need the engine instance (loops, Code,
- * Switch) are only registered by {@link createDemoEngineConfig}'s
- * `onEngineCreated` hook via {@link registerEngineBoundGraphNodes}.
- *
- * @param extra - Additional executor registrations to merge into the catalogue.
- * @returns The populated catalogue and its registry facade.
- */
-export declare function createGraphNodeCatalogue(extra?: Record<string, GraphNodeExecutor>): {
-    catalogue: GraphNodeCatalogue;
-    registry: GraphNodeExecutorRegistry;
-};
-/**
- * Builds a {@link GraphNodeExecutorRegistry} facade over a populated
- * {@link GraphNodeCatalogue} (compatibility entry point).
- *
- * @param extra - Additional executor registrations to merge into the catalogue.
- * @returns The registry facade; the underlying catalogue is available as
- * `registry.catalog`.
- */
-export declare function createGraphExecutorRegistry(extra?: Record<string, GraphNodeExecutor>): GraphNodeExecutorRegistry;
-/**
- * Registers the engine-bound built-in kinds (loops, Code, Switch) on an
- * existing catalogue, replacing their placeholder-free entries with the real
- * engine-bound executors.
- *
- * @param catalogue - The catalogue receiving the registrations.
- * @param engine - The engine instance the loop/Code/Switch executors bind to.
- * @returns The catalogue with the engine-bound registrations applied.
- */
-export declare function registerEngineBoundGraphNodes(catalogue: GraphNodeCatalogue, engine: GraphExecutionEngine): GraphNodeCatalogue;
-/**
- * Builds a `GraphExecutionEngineConfig` populated with all built-in
- * registrations including loop executors that need a back-reference to the
- * engine and the Code node executor that needs the engine's
- * `codeSandboxEvaluator`.
- *
- * The config wires an {@link IsolatedVmCodeSandboxEvaluator} (backed by
- * `isolated-vm`) so the Code Node runs in a truly isolated V8 sandbox.
- *
- * @returns A config object ready for `new GraphExecutionEngine(config)`.
- */
-export declare function createDemoEngineConfig(): {
-    catalogue: GraphNodeCatalogue;
-    registry: GraphNodeExecutorRegistry;
-    defaultOptions: {
-        failFast: boolean;
-    };
-    codeSandboxEvaluator: IsolatedVmCodeSandboxEvaluator;
-    onEngineCreated: (engine: GraphExecutionEngine) => void;
-};

package/lib/types/nest/graph/GraphExecutorRegistryFactory.d.mts

@@ -1,66 +0,0 @@
-/**
- * @module integrations/nest/graph/GraphExecutorRegistryFactory
- * @summary Factory that builds a populated {@link GraphNodeCatalogue} and its
- * {@link GraphNodeExecutorRegistry} compatibility facade.
- * @description Creates a catalogue pre-loaded with the DECAF-50 built-in
- * manifest+executor registrations plus the demo executors used by the graph
- * execution backend's sample workflows. The catalogue is the single
- * kind→registration map (DECAF-50 §4.7); the returned registry is a facade
- * over it, so no second executor map exists.
- */
-import { GraphNodeCatalogue, GraphNodeExecutorRegistry, GraphExecutionEngine, type GraphNodeExecutor, IsolatedVmCodeSandboxEvaluator } from "../../graph/index.d.mts";
-/**
- * Builds a {@link GraphNodeCatalogue} populated with the built-in
- * manifest+executor registrations and the arithmetic demo executors, wrapped
- * with its {@link GraphNodeExecutorRegistry} facade.
- *
- * The built-in kinds whose executors need the engine instance (loops, Code,
- * Switch) are only registered by {@link createDemoEngineConfig}'s
- * `onEngineCreated` hook via {@link registerEngineBoundGraphNodes}.
- *
- * @param extra - Additional executor registrations to merge into the catalogue.
- * @returns The populated catalogue and its registry facade.
- */
-export declare function createGraphNodeCatalogue(extra?: Record<string, GraphNodeExecutor>): {
-    catalogue: GraphNodeCatalogue;
-    registry: GraphNodeExecutorRegistry;
-};
-/**
- * Builds a {@link GraphNodeExecutorRegistry} facade over a populated
- * {@link GraphNodeCatalogue} (compatibility entry point).
- *
- * @param extra - Additional executor registrations to merge into the catalogue.
- * @returns The registry facade; the underlying catalogue is available as
- * `registry.catalog`.
- */
-export declare function createGraphExecutorRegistry(extra?: Record<string, GraphNodeExecutor>): GraphNodeExecutorRegistry;
-/**
- * Registers the engine-bound built-in kinds (loops, Code, Switch) on an
- * existing catalogue, replacing their placeholder-free entries with the real
- * engine-bound executors.
- *
- * @param catalogue - The catalogue receiving the registrations.
- * @param engine - The engine instance the loop/Code/Switch executors bind to.
- * @returns The catalogue with the engine-bound registrations applied.
- */
-export declare function registerEngineBoundGraphNodes(catalogue: GraphNodeCatalogue, engine: GraphExecutionEngine): GraphNodeCatalogue;
-/**
- * Builds a `GraphExecutionEngineConfig` populated with all built-in
- * registrations including loop executors that need a back-reference to the
- * engine and the Code node executor that needs the engine's
- * `codeSandboxEvaluator`.
- *
- * The config wires an {@link IsolatedVmCodeSandboxEvaluator} (backed by
- * `isolated-vm`) so the Code Node runs in a truly isolated V8 sandbox.
- *
- * @returns A config object ready for `new GraphExecutionEngine(config)`.
- */
-export declare function createDemoEngineConfig(): {
-    catalogue: GraphNodeCatalogue;
-    registry: GraphNodeExecutorRegistry;
-    defaultOptions: {
-        failFast: boolean;
-    };
-    codeSandboxEvaluator: IsolatedVmCodeSandboxEvaluator;
-    onEngineCreated: (engine: GraphExecutionEngine) => void;
-};

package/lib/types/nest/graph/GraphNodeCatalogueController.d.cts

@@ -1,70 +0,0 @@
-import { DecafRequestContext } from "@decaf-ts/for-nest";
-import type { GraphCredentialReference, GraphJsonValue, GraphNodeMethodType } from "@decaf-ts/ui-decorators/graph";
-import { GraphNodeCatalogue } from "../../graph/index.d.cts";
-import type { GraphResolvedNodeManifest } from "@decaf-ts/ui-decorators/graph";
-/** DI token for {@link GraphCatalogueControllerOptions}. */
-export declare const GRAPH_CATALOGUE_CONTROLLER_OPTIONS = "GRAPH_CATALOGUE_CONTROLLER_OPTIONS";
-/** Rate-limit configuration for an expensive catalogue operation: sliding window length and request cap. */
-export interface GraphCatalogueRateLimitOptions {
-    windowMs?: number;
-    maxRequests?: number;
-}
-/**
- * Options for the catalogue HTTP API (DECAF-50 §4.13): authentication mode
- * and per-operation rate limits for the expensive `resolve`/`methods`
- * endpoints.
- */
-export interface GraphCatalogueControllerOptions {
-    /** Whether an authenticated request context is required (default `"required"`). */
-    auth?: "required" | "optional";
-    /** Rate limit for manifest-resolution requests. */
-    resolveRateLimit?: GraphCatalogueRateLimitOptions;
-    /** Rate limit for node-method invocations. */
-    methodsRateLimit?: GraphCatalogueRateLimitOptions;
-}
-/** Request body for resolving a node's effective manifest against instance parameters. */
-export interface GraphNodeResolveRequest {
-    parameters?: Record<string, GraphJsonValue>;
-    metadata?: Record<string, GraphJsonValue>;
-}
-/** Request body for invoking a declared node method. */
-export interface GraphNodeMethodRequestDto {
-    parameters?: Record<string, GraphJsonValue>;
-    payload?: GraphJsonValue;
-    credentials?: GraphCredentialReference[];
-    methodType?: GraphNodeMethodType;
-}
-/**
- * Catalogue HTTP API (DECAF-50 §4.13): serves registered node manifests as
- * data (never constructors), resolves effective manifests for node
- * instances, and invokes declared node methods. Enforces configured
- * authentication and per-user rate limits on the expensive
- * `resolve`/`methods` operations, and rejects non-JSON-safe request bodies.
- */
-export declare class GraphNodeCatalogueController {
-    private readonly catalogue;
-    private readonly requestContext?;
-    private readonly options;
-    private readonly rateBuckets;
-    constructor(catalogue: GraphNodeCatalogue, requestContext?: DecafRequestContext | undefined, options?: GraphCatalogueControllerOptions);
-    private requireAuthenticatedContext;
-    /**
-     * Builds the rate-limit bucket key for an operation: the authenticated
-     * owner resolved via {@link graphWorkflowOwnerOf} (SAA-595 F6), falling
-     * back to the context `user.id`, then the request IP, then a shared
-     * `"anonymous"` bucket.
-     */
-    private rateLimitKey;
-    private enforceRateLimit;
-    listNodeTypes(ifNoneMatch: string | undefined, res: {
-        setHeader(name: string, value: string): void;
-        status(code: number): void;
-    }): Promise<unknown>;
-    getNodeType(kind: string): Promise<unknown>;
-    getNodeTypeIcon(kind: string): Promise<unknown>;
-    resolveNodeType(kind: string, body?: GraphNodeResolveRequest): Promise<GraphResolvedNodeManifest>;
-    invokeNodeMethod(kind: string, method: string, body?: GraphNodeMethodRequestDto): Promise<GraphJsonValue>;
-    private assertKnownKind;
-    private declaredMethod;
-    private authorizeCredentials;
-}

package/lib/types/nest/graph/GraphNodeCatalogueController.d.mts

@@ -1,70 +0,0 @@
-import { DecafRequestContext } from "@decaf-ts/for-nest";
-import type { GraphCredentialReference, GraphJsonValue, GraphNodeMethodType } from "@decaf-ts/ui-decorators/graph";
-import { GraphNodeCatalogue } from "../../graph/index.d.mts";
-import type { GraphResolvedNodeManifest } from "@decaf-ts/ui-decorators/graph";
-/** DI token for {@link GraphCatalogueControllerOptions}. */
-export declare const GRAPH_CATALOGUE_CONTROLLER_OPTIONS = "GRAPH_CATALOGUE_CONTROLLER_OPTIONS";
-/** Rate-limit configuration for an expensive catalogue operation: sliding window length and request cap. */
-export interface GraphCatalogueRateLimitOptions {
-    windowMs?: number;
-    maxRequests?: number;
-}
-/**
- * Options for the catalogue HTTP API (DECAF-50 §4.13): authentication mode
- * and per-operation rate limits for the expensive `resolve`/`methods`
- * endpoints.
- */
-export interface GraphCatalogueControllerOptions {
-    /** Whether an authenticated request context is required (default `"required"`). */
-    auth?: "required" | "optional";
-    /** Rate limit for manifest-resolution requests. */
-    resolveRateLimit?: GraphCatalogueRateLimitOptions;
-    /** Rate limit for node-method invocations. */
-    methodsRateLimit?: GraphCatalogueRateLimitOptions;
-}
-/** Request body for resolving a node's effective manifest against instance parameters. */
-export interface GraphNodeResolveRequest {
-    parameters?: Record<string, GraphJsonValue>;
-    metadata?: Record<string, GraphJsonValue>;
-}
-/** Request body for invoking a declared node method. */
-export interface GraphNodeMethodRequestDto {
-    parameters?: Record<string, GraphJsonValue>;
-    payload?: GraphJsonValue;
-    credentials?: GraphCredentialReference[];
-    methodType?: GraphNodeMethodType;
-}
-/**
- * Catalogue HTTP API (DECAF-50 §4.13): serves registered node manifests as
- * data (never constructors), resolves effective manifests for node
- * instances, and invokes declared node methods. Enforces configured
- * authentication and per-user rate limits on the expensive
- * `resolve`/`methods` operations, and rejects non-JSON-safe request bodies.
- */
-export declare class GraphNodeCatalogueController {
-    private readonly catalogue;
-    private readonly requestContext?;
-    private readonly options;
-    private readonly rateBuckets;
-    constructor(catalogue: GraphNodeCatalogue, requestContext?: DecafRequestContext | undefined, options?: GraphCatalogueControllerOptions);
-    private requireAuthenticatedContext;
-    /**
-     * Builds the rate-limit bucket key for an operation: the authenticated
-     * owner resolved via {@link graphWorkflowOwnerOf} (SAA-595 F6), falling
-     * back to the context `user.id`, then the request IP, then a shared
-     * `"anonymous"` bucket.
-     */
-    private rateLimitKey;
-    private enforceRateLimit;
-    listNodeTypes(ifNoneMatch: string | undefined, res: {
-        setHeader(name: string, value: string): void;
-        status(code: number): void;
-    }): Promise<unknown>;
-    getNodeType(kind: string): Promise<unknown>;
-    getNodeTypeIcon(kind: string): Promise<unknown>;
-    resolveNodeType(kind: string, body?: GraphNodeResolveRequest): Promise<GraphResolvedNodeManifest>;
-    invokeNodeMethod(kind: string, method: string, body?: GraphNodeMethodRequestDto): Promise<GraphJsonValue>;
-    private assertKnownKind;
-    private declaredMethod;
-    private authorizeCredentials;
-}

package/lib/types/nest/graph/GraphResultService.d.cts

@@ -1,20 +0,0 @@
-import { ModelService, type Context, type MaybeContextualArg } from "@decaf-ts/core";
-import { GraphExecutionResultModel } from "./GraphExecutionResultModel.d.cts";
-import type { GraphExecutionResult } from "../../graph/index.d.cts";
-/**
- * Model-backed persistence for {@link GraphExecutionResultModel} rows: the
- * terminal snapshot the (deprecated) synchronous `POST /graph/execute`
- * surface persists after a run completes. Access control lives at the
- * controller/route layer, which gates reads through the run ownership check.
- */
-export declare class GraphResultService extends ModelService<GraphExecutionResultModel> {
-    constructor();
-    /**
-     * Persists a finished run's result, stamping the owning user resolved
-     * from the request context onto the `owner` column (SAA-595 F1); results
-     * saved without a resolved identity carry no owner.
-     */
-    saveResult(result: GraphExecutionResult, ...args: MaybeContextualArg<Context>): Promise<GraphExecutionResultModel>;
-    /** Reads a result row by run id; returns `null` when no result was persisted (never throws). */
-    findByRunId(runId: string, ...args: MaybeContextualArg<Context>): Promise<GraphExecutionResultModel | null>;
-}

package/lib/types/nest/graph/GraphResultService.d.mts

@@ -1,20 +0,0 @@
-import { ModelService, type Context, type MaybeContextualArg } from "@decaf-ts/core";
-import { GraphExecutionResultModel } from "./GraphExecutionResultModel.d.mts";
-import type { GraphExecutionResult } from "../../graph/index.d.mts";
-/**
- * Model-backed persistence for {@link GraphExecutionResultModel} rows: the
- * terminal snapshot the (deprecated) synchronous `POST /graph/execute`
- * surface persists after a run completes. Access control lives at the
- * controller/route layer, which gates reads through the run ownership check.
- */
-export declare class GraphResultService extends ModelService<GraphExecutionResultModel> {
-    constructor();
-    /**
-     * Persists a finished run's result, stamping the owning user resolved
-     * from the request context onto the `owner` column (SAA-595 F1); results
-     * saved without a resolved identity carry no owner.
-     */
-    saveResult(result: GraphExecutionResult, ...args: MaybeContextualArg<Context>): Promise<GraphExecutionResultModel>;
-    /** Reads a result row by run id; returns `null` when no result was persisted (never throws). */
-    findByRunId(runId: string, ...args: MaybeContextualArg<Context>): Promise<GraphExecutionResultModel | null>;
-}

package/lib/types/nest/graph/GraphRunController.d.cts

@@ -1,87 +0,0 @@
-/**
- * @module integrations/nest/graph/GraphRunController
- * @summary Asynchronous run lifecycle HTTP API (DECAF-50 §4.14–§4.15).
- * @description Creates (`POST /graph/runs`), reads
- * (`GET /graph/runs/:runId`), cancels (`DELETE /graph/runs/:runId`), and
- * replays (`SSE /graph/runs/:runId/events`) graph runs on top of
- * {@link GraphRunService}, enforcing authentication, run limits, and
- * ownership; engine errors surface as `500` with their message while Nest
- * {@link HttpException}s pass through unchanged.
- */
-import { MessageEvent } from "@nestjs/common";
-import { Observable } from "rxjs";
-import type { GraphWorkflowDocument } from "@decaf-ts/ui-decorators/graph";
-import { DecafRequestContext } from "@decaf-ts/for-nest";
-import type { GraphRunLimits } from "@decaf-ts/ui-decorators/graph";
-import type { GraphExecutionValues } from "../../graph/index.d.cts";
-import { GraphRunService } from "../../graph/index.d.cts";
-/** DI token for {@link GraphRunControllerOptions}. */
-export declare const GRAPH_RUN_OPTIONS = "GRAPH_RUN_OPTIONS";
-/** Options for the run lifecycle HTTP API (DECAF-50 §4.14–§4.15): authentication mode and run limits. */
-export interface GraphRunControllerOptions {
-    /**
-     * Whether an authenticated request context is required (default
-     * `"required"`, SAA-595 secure-defaults alignment). `"optional"` admits
-     * anonymous requests for standalone module runs (DECAF-48 §4.15) — pair it
-     * with an explicit `allowAnonymousAccess` decision.
-     */
-    auth?: "required" | "optional";
-    /**
-     * Explicit DECAF-48 §4.15 standalone tolerance: when `true`, anonymous
-     * callers are tolerated on owned runs. Defaults to `false` — ownership
-     * checks fail closed for absent identities (SAA-595 F3).
-     */
-    allowAnonymousAccess?: boolean;
-    /** Run limits forwarded to {@link GraphRunService}. */
-    limits?: GraphRunLimits;
-}
-/** Response of `POST /graph/runs`: the queued run's identity and its event/result URLs. */
-export interface GraphRunCreatedResponse {
-    runId: string;
-    workflowId: string;
-    status: "queued";
-    eventsUrl: string;
-    resultUrl: string;
-}
-/** Request body for creating a run: an inline workflow document or a saved `workflowId`, plus optional inputs. */
-export interface GraphRunRequestBody {
-    workflow?: GraphWorkflowDocument;
-    workflowId?: string;
-    inputs?: GraphExecutionValues;
-}
-/**
- * Asynchronous run lifecycle HTTP API (DECAF-50 §4.14–§4.15):
- * `POST /graph/runs` creates and schedules a run (202 Accepted), run
- * read/cancel endpoints expose lifecycle state, and
- * `GET /graph/runs/:runId/events` streams the run's sequenced event
- * envelopes over SSE until a terminal event closes the stream. Every
- * operation is ownership-checked against the requesting user.
- */
-export declare class GraphRunController {
-    private readonly runService;
-    private readonly requestContext?;
-    private readonly options;
-    constructor(runService: GraphRunService, requestContext?: DecafRequestContext | undefined, options?: GraphRunControllerOptions);
-    /**
-     * Enforces the configured authentication mode: `auth` defaults to
-     * `"required"` (SAA-595 secure-defaults alignment) and rejects
-     * unauthenticated calls with `401`; `"optional"` admits anonymous
-     * requests for standalone module runs (DECAF-48 §4.15).
-     */
-    private requireAuthenticatedContext;
-    private ownerUserOf;
-    /** Concurrency-bucket key for the per-caller run cap: the owner, else the request IP, else a shared anonymous bucket. */
-    private concurrencyKeyOf;
-    /**
-     * Creates and schedules a run (DECAF-50 §4.14): accepts an inline workflow
-     * document or a saved `workflowId` plus optional inputs, answers
-     * `202 Accepted` with the queued run's identity and its event/result URLs.
-     * The per-caller concurrency cap buckets by owner user, then request IP,
-     * then a shared anonymous bucket (SAA-595 F4).
-     */
-    createRun(body: GraphRunRequestBody): Promise<GraphRunCreatedResponse>;
-    getRun(runId: string): Promise<Record<string, unknown>>;
-    cancelRun(runId: string): Promise<Record<string, unknown>>;
-    events(runId: string, afterSequence?: string): Promise<Observable<MessageEvent>>;
-    private parseAfterSequence;
-}

package/lib/types/nest/graph/GraphRunController.d.mts

@@ -1,87 +0,0 @@
-/**
- * @module integrations/nest/graph/GraphRunController
- * @summary Asynchronous run lifecycle HTTP API (DECAF-50 §4.14–§4.15).
- * @description Creates (`POST /graph/runs`), reads
- * (`GET /graph/runs/:runId`), cancels (`DELETE /graph/runs/:runId`), and
- * replays (`SSE /graph/runs/:runId/events`) graph runs on top of
- * {@link GraphRunService}, enforcing authentication, run limits, and
- * ownership; engine errors surface as `500` with their message while Nest
- * {@link HttpException}s pass through unchanged.
- */
-import { MessageEvent } from "@nestjs/common";
-import { Observable } from "rxjs";
-import type { GraphWorkflowDocument } from "@decaf-ts/ui-decorators/graph";
-import { DecafRequestContext } from "@decaf-ts/for-nest";
-import type { GraphRunLimits } from "@decaf-ts/ui-decorators/graph";
-import type { GraphExecutionValues } from "../../graph/index.d.mts";
-import { GraphRunService } from "../../graph/index.d.mts";
-/** DI token for {@link GraphRunControllerOptions}. */
-export declare const GRAPH_RUN_OPTIONS = "GRAPH_RUN_OPTIONS";
-/** Options for the run lifecycle HTTP API (DECAF-50 §4.14–§4.15): authentication mode and run limits. */
-export interface GraphRunControllerOptions {
-    /**
-     * Whether an authenticated request context is required (default
-     * `"required"`, SAA-595 secure-defaults alignment). `"optional"` admits
-     * anonymous requests for standalone module runs (DECAF-48 §4.15) — pair it
-     * with an explicit `allowAnonymousAccess` decision.
-     */
-    auth?: "required" | "optional";
-    /**
-     * Explicit DECAF-48 §4.15 standalone tolerance: when `true`, anonymous
-     * callers are tolerated on owned runs. Defaults to `false` — ownership
-     * checks fail closed for absent identities (SAA-595 F3).
-     */
-    allowAnonymousAccess?: boolean;
-    /** Run limits forwarded to {@link GraphRunService}. */
-    limits?: GraphRunLimits;
-}
-/** Response of `POST /graph/runs`: the queued run's identity and its event/result URLs. */
-export interface GraphRunCreatedResponse {
-    runId: string;
-    workflowId: string;
-    status: "queued";
-    eventsUrl: string;
-    resultUrl: string;
-}
-/** Request body for creating a run: an inline workflow document or a saved `workflowId`, plus optional inputs. */
-export interface GraphRunRequestBody {
-    workflow?: GraphWorkflowDocument;
-    workflowId?: string;
-    inputs?: GraphExecutionValues;
-}
-/**
- * Asynchronous run lifecycle HTTP API (DECAF-50 §4.14–§4.15):
- * `POST /graph/runs` creates and schedules a run (202 Accepted), run
- * read/cancel endpoints expose lifecycle state, and
- * `GET /graph/runs/:runId/events` streams the run's sequenced event
- * envelopes over SSE until a terminal event closes the stream. Every
- * operation is ownership-checked against the requesting user.
- */
-export declare class GraphRunController {
-    private readonly runService;
-    private readonly requestContext?;
-    private readonly options;
-    constructor(runService: GraphRunService, requestContext?: DecafRequestContext | undefined, options?: GraphRunControllerOptions);
-    /**
-     * Enforces the configured authentication mode: `auth` defaults to
-     * `"required"` (SAA-595 secure-defaults alignment) and rejects
-     * unauthenticated calls with `401`; `"optional"` admits anonymous
-     * requests for standalone module runs (DECAF-48 §4.15).
-     */
-    private requireAuthenticatedContext;
-    private ownerUserOf;
-    /** Concurrency-bucket key for the per-caller run cap: the owner, else the request IP, else a shared anonymous bucket. */
-    private concurrencyKeyOf;
-    /**
-     * Creates and schedules a run (DECAF-50 §4.14): accepts an inline workflow
-     * document or a saved `workflowId` plus optional inputs, answers
-     * `202 Accepted` with the queued run's identity and its event/result URLs.
-     * The per-caller concurrency cap buckets by owner user, then request IP,
-     * then a shared anonymous bucket (SAA-595 F4).
-     */
-    createRun(body: GraphRunRequestBody): Promise<GraphRunCreatedResponse>;
-    getRun(runId: string): Promise<Record<string, unknown>>;
-    cancelRun(runId: string): Promise<Record<string, unknown>>;
-    events(runId: string, afterSequence?: string): Promise<Observable<MessageEvent>>;
-    private parseAfterSequence;
-}

package/lib/types/nest/graph/GraphRunModel.d.cts

@@ -1,22 +0,0 @@
-import { BaseModel } from "@decaf-ts/core";
-/**
- * Persistent run record for the graph run lifecycle (DECAF-50 §4.14): one
- * row per {@link GraphRun}, storing lifecycle status, the executed
- * document's fingerprint, inputs, result, and error payloads. Written and
- * read through {@link GraphRunModelService}, which adapts it to the
- * engine-side {@link GraphRun} shape.
- */
-export declare class GraphRunModel extends BaseModel {
-    runId: string;
-    workflowId: string;
-    owner?: string;
-    status: string;
-    documentFingerprint?: string;
-    inputs?: Record<string, unknown>;
-    result?: Record<string, unknown>;
-    error?: Record<string, unknown>;
-    createdAt: Date;
-    startedAt?: Date;
-    finishedAt?: Date;
-    constructor(arg?: Partial<GraphRunModel>);
-}

package/lib/types/nest/graph/GraphRunModel.d.mts

@@ -1,22 +0,0 @@
-import { BaseModel } from "@decaf-ts/core";
-/**
- * Persistent run record for the graph run lifecycle (DECAF-50 §4.14): one
- * row per {@link GraphRun}, storing lifecycle status, the executed
- * document's fingerprint, inputs, result, and error payloads. Written and
- * read through {@link GraphRunModelService}, which adapts it to the
- * engine-side {@link GraphRun} shape.
- */
-export declare class GraphRunModel extends BaseModel {
-    runId: string;
-    workflowId: string;
-    owner?: string;
-    status: string;
-    documentFingerprint?: string;
-    inputs?: Record<string, unknown>;
-    result?: Record<string, unknown>;
-    error?: Record<string, unknown>;
-    createdAt: Date;
-    startedAt?: Date;
-    finishedAt?: Date;
-    constructor(arg?: Partial<GraphRunModel>);
-}

package/lib/types/nest/graph/GraphRunModelService.d.cts

@@ -1,21 +0,0 @@
-/**
- * @module integrations/nest/graph/GraphRunModelService
- * @summary Persistent run store on the Decaf model layer.
- * @description Persists {@link GraphRun} rows as {@link GraphRunModel} via
- * the Decaf {@link ModelService}, implementing the engine-side
- * {@link GraphRunStore} and converting between the engine run shape and the
- * JSON-safe persisted columns.
- */
-import { ModelService, type Context, type MaybeContextualArg } from "@decaf-ts/core";
-import type { GraphRun, GraphRunStore } from "../../graph/engine/runs/types.d.cts";
-import { GraphRunModel } from "./GraphRunModel.d.cts";
-/**
- * Model-backed {@link GraphRunStore}: persists runs as {@link GraphRunModel}
- * rows via the Decaf ModelService, converting between the engine-side
- * {@link GraphRun} shape and the JSON-safe persisted columns.
- */
-export declare class GraphRunModelService extends ModelService<GraphRunModel> implements GraphRunStore {
-    constructor();
-    saveRun(run: GraphRun, ...args: MaybeContextualArg<Context>): Promise<void>;
-    readRun(runId: string, ...args: MaybeContextualArg<Context>): Promise<GraphRun | null>;
-}

package/lib/types/nest/graph/GraphRunModelService.d.mts

@@ -1,21 +0,0 @@
-/**
- * @module integrations/nest/graph/GraphRunModelService
- * @summary Persistent run store on the Decaf model layer.
- * @description Persists {@link GraphRun} rows as {@link GraphRunModel} via
- * the Decaf {@link ModelService}, implementing the engine-side
- * {@link GraphRunStore} and converting between the engine run shape and the
- * JSON-safe persisted columns.
- */
-import { ModelService, type Context, type MaybeContextualArg } from "@decaf-ts/core";
-import type { GraphRun, GraphRunStore } from "../../graph/engine/runs/types.d.mts";
-import { GraphRunModel } from "./GraphRunModel.d.mts";
-/**
- * Model-backed {@link GraphRunStore}: persists runs as {@link GraphRunModel}
- * rows via the Decaf ModelService, converting between the engine-side
- * {@link GraphRun} shape and the JSON-safe persisted columns.
- */
-export declare class GraphRunModelService extends ModelService<GraphRunModel> implements GraphRunStore {
-    constructor();
-    saveRun(run: GraphRun, ...args: MaybeContextualArg<Context>): Promise<void>;
-    readRun(runId: string, ...args: MaybeContextualArg<Context>): Promise<GraphRun | null>;
-}

package/lib/types/nest/graph/GraphWorkflowBoundaryValidation.d.cts

@@ -1,28 +0,0 @@
-import { type GraphWorkflowDocument } from "@decaf-ts/ui-decorators/graph";
-import type { GraphNodeCatalogue } from "../../graph/index.d.cts";
-import type { GraphWorkflowValidationResult } from "../../graph/index.d.cts";
-import { type GraphWorkflowDocumentLimits } from "./GraphWorkflowDocumentLimits.d.cts";
-/**
- * Field keys that must never appear on a submitted workflow document or any
- * of its structural records (DECAF-50 §4.16): client input resembling node,
- * definition, executor, authoritative ports, or frontend component
- * definitions is rejected at the boundary.
- */
-export declare const GRAPH_WORKFLOW_FORBIDDEN_FIELD_KEYS: readonly string[];
-/** Options for boundary validation: document resource limits and the trusted catalogue to resolve kinds against. */
-export interface GraphWorkflowBoundaryValidationOptions {
-    limits?: GraphWorkflowDocumentLimits;
-    catalogue?: GraphNodeCatalogue;
-}
-/**
- * Validates a submitted canonical workflow document at the persistence
- * boundary (DECAF-50 §4.10/§4.16): document shape, JSON safety, forbidden
- * definition/executor/component fields, duplicate ids, backend-enforced
- * resource limits, structural validity (via the shared document contract
- * assertions) and catalogue kind existence. Issues accumulate as structured
- * {@link GraphValidationIssue}s instead of failing abruptly.
- *
- * Full nine-stage document/catalogue validation (DECAF-50 §4.8) is owned by
- * the engine validation phase; this boundary pass is the persistence gate.
- */
-export declare function validateGraphWorkflowDocumentAtBoundary(document: GraphWorkflowDocument, options?: GraphWorkflowBoundaryValidationOptions): GraphWorkflowValidationResult;