@decaf-ts/integrations 0.8.0 → 0.10.0

package/lib/cjs/nest/graph/GraphWorkflowBoundaryValidation.cjs

@@ -0,0 +1,169 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.GRAPH_WORKFLOW_FORBIDDEN_FIELD_KEYS = void 0;
+exports.validateGraphWorkflowDocumentAtBoundary = validateGraphWorkflowDocumentAtBoundary;
+const db_decorators_1 = require("@decaf-ts/db-decorators");
+const graph_1 = require("@decaf-ts/ui-decorators/graph");
+const GraphWorkflowDocumentLimits_js_1 = require("./GraphWorkflowDocumentLimits.cjs");
+/**
+ * Field keys that must never appear on a submitted workflow document or any
+ * of its structural records (DECAF-50 §4.16): client input resembling node,
+ * definition, executor, authoritative ports, or frontend component
+ * definitions is rejected at the boundary.
+ */
+exports.GRAPH_WORKFLOW_FORBIDDEN_FIELD_KEYS = [
+    "node",
+    "definition",
+    "executor",
+    "execute",
+    "ports",
+    "component",
+];
+function issue(code, path, message, extra) {
+    return {
+        code,
+        path,
+        message,
+        ...(extra?.nodeId !== undefined ? { nodeId: extra.nodeId } : {}),
+        ...(extra?.edgeId !== undefined ? { edgeId: extra.edgeId } : {}),
+        ...(extra?.details ? { details: extra.details } : {}),
+    };
+}
+function forbiddenFieldIssues(record, path) {
+    const issues = [];
+    for (const key of Object.keys(record)) {
+        if (exports.GRAPH_WORKFLOW_FORBIDDEN_FIELD_KEYS.includes(key)) {
+            issues.push(issue("document.forbidden-field", `${path}.${key}`, `Field '${key}' is not accepted in a canonical workflow document: node, definition, executor, execute, ports and component fields are rejected at the boundary`, {
+                details: { field: key },
+            }));
+        }
+    }
+    return issues;
+}
+function collectForbiddenFieldIssues(document, issues) {
+    issues.push(...forbiddenFieldIssues(document, "$"));
+    document.inputs.forEach((port, index) => issues.push(...forbiddenFieldIssues(port, `inputs[${index}]`)));
+    document.outputs.forEach((port, index) => issues.push(...forbiddenFieldIssues(port, `outputs[${index}]`)));
+    for (const node of document.nodes) {
+        issues.push(...forbiddenFieldIssues(node, `nodes[${node.id}]`));
+        if (node.loop) {
+            issues.push(...forbiddenFieldIssues(node.loop, `nodes[${node.id}].loop`));
+            collectForbiddenFieldIssues(node.loop.body, issues);
+        }
+    }
+    for (const edge of document.edges) {
+        issues.push(...forbiddenFieldIssues(edge, `edges[${edge.id}]`));
+    }
+}
+function duplicateIdIssues(document) {
+    const issues = [];
+    const portIds = new Set();
+    for (const port of [...document.inputs, ...document.outputs]) {
+        if (portIds.has(port.id)) {
+            issues.push(issue("document.duplicate-port-id", `ports[${port.id}]`, `Workflow port '${port.id}' is declared more than once; workflow port ids must be unique`));
+        }
+        else {
+            portIds.add(port.id);
+        }
+    }
+    const nodeIds = new Set();
+    for (const node of document.nodes) {
+        if (nodeIds.has(node.id)) {
+            issues.push(issue("document.duplicate-node-id", `nodes[${node.id}]`, `Node '${node.id}' is declared more than once; node ids must be unique`, { nodeId: node.id }));
+        }
+        else {
+            nodeIds.add(node.id);
+        }
+    }
+    const edgeIds = new Set();
+    for (const edge of document.edges) {
+        if (edgeIds.has(edge.id)) {
+            issues.push(issue("document.duplicate-edge-id", `edges[${edge.id}]`, `Edge '${edge.id}' is declared more than once; edge ids must be unique`, { edgeId: edge.id }));
+        }
+        else {
+            edgeIds.add(edge.id);
+        }
+    }
+    return issues;
+}
+function limitIssues(document, limits) {
+    const issues = [];
+    if (document.nodes.length > limits.maxNodes) {
+        issues.push(issue("document.limit.nodes", "$.nodes", `Document declares ${document.nodes.length} nodes; at most ${limits.maxNodes} are allowed`, { details: { count: document.nodes.length, limit: limits.maxNodes } }));
+    }
+    if (document.edges.length > limits.maxEdges) {
+        issues.push(issue("document.limit.edges", "$.edges", `Document declares ${document.edges.length} edges; at most ${limits.maxEdges} are allowed`, { details: { count: document.edges.length, limit: limits.maxEdges } }));
+    }
+    const maxDepth = maxNestingDepthOf(document);
+    if (maxDepth > limits.maxNestingDepth) {
+        issues.push(issue("document.limit.depth", "$.nodes", `Document nests loop bodies ${maxDepth} levels deep; at most ${limits.maxNestingDepth} levels are allowed`, { details: { depth: maxDepth, limit: limits.maxNestingDepth } }));
+    }
+    const bytes = Buffer.byteLength(JSON.stringify(document), "utf8");
+    if (bytes > limits.maxDocumentBytes) {
+        issues.push(issue("document.limit.size", "$", `Document serializes to ${bytes} bytes; at most ${limits.maxDocumentBytes} bytes are allowed`, { details: { bytes, limit: limits.maxDocumentBytes } }));
+    }
+    return issues;
+}
+function maxNestingDepthOf(document, depth = 0) {
+    let max = depth;
+    for (const node of document.nodes) {
+        if (node.loop?.body) {
+            max = Math.max(max, maxNestingDepthOf(node.loop.body, depth + 1));
+        }
+    }
+    return max;
+}
+function kindIssues(document, catalogue) {
+    const issues = [];
+    for (const node of document.nodes) {
+        if (!catalogue.has(node.kind)) {
+            issues.push(issue("node.unknown-kind", `nodes[${node.id}].kind`, `Node '${node.id}' references kind '${node.kind}' which is not registered in the backend catalogue`, { nodeId: node.id, details: { kind: node.kind } }));
+        }
+        if (node.loop?.body) {
+            issues.push(...kindIssues(node.loop.body, catalogue));
+        }
+    }
+    return issues;
+}
+/**
+ * Validates a submitted canonical workflow document at the persistence
+ * boundary (DECAF-50 §4.10/§4.16): document shape, JSON safety, forbidden
+ * definition/executor/component fields, duplicate ids, backend-enforced
+ * resource limits, structural validity (via the shared document contract
+ * assertions) and catalogue kind existence. Issues accumulate as structured
+ * {@link GraphValidationIssue}s instead of failing abruptly.
+ *
+ * Full nine-stage document/catalogue validation (DECAF-50 §4.8) is owned by
+ * the engine validation phase; this boundary pass is the persistence gate.
+ */
+function validateGraphWorkflowDocumentAtBoundary(document, options = {}) {
+    const limits = {
+        ...GraphWorkflowDocumentLimits_js_1.DEFAULT_GRAPH_WORKFLOW_DOCUMENT_LIMITS,
+        ...options.limits,
+    };
+    const issues = [];
+    if (!(0, graph_1.isGraphWorkflowDocumentShape)(document)) {
+        issues.push(issue("document.shape", "$", "Payload is not a canonical GraphWorkflowDocument: id and name must be strings and inputs, outputs, nodes and edges must be arrays"));
+        return { valid: false, issues };
+    }
+    if (!(0, graph_1.isGraphJsonSafeValue)(document)) {
+        issues.push(issue("document.json-unsafe", "$", "Document contains JSON-unsafe values: functions, class instances, undefined, NaN/Infinity, symbol keys and unsafe prototype keys (__proto__/prototype/constructor) are rejected"));
+        return { valid: false, issues };
+    }
+    collectForbiddenFieldIssues(document, issues);
+    issues.push(...duplicateIdIssues(document));
+    issues.push(...limitIssues(document, limits));
+    try {
+        (0, graph_1.assertGraphWorkflowDocumentValid)(document);
+    }
+    catch (e) {
+        const message = e instanceof db_decorators_1.ValidationError ? e.message : String(e);
+        issues.push(issue("document.structure", "$", message));
+    }
+    if (options.catalogue) {
+        issues.push(...kindIssues(document, options.catalogue));
+    }
+    return { valid: issues.length === 0, issues };
+}
+//# sourceMappingURL=GraphWorkflowBoundaryValidation.js.map
+//# sourceMappingURL=GraphWorkflowBoundaryValidation.cjs.map

package/lib/cjs/nest/graph/GraphWorkflowBoundaryValidation.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"nest/graph/GraphWorkflowBoundaryValidation.cjs","sourceRoot":"","sources":["nest/graph/GraphWorkflowBoundaryValidation.js"],"names":[],"mappings":";;;AAsIA,0FA4BC;AAlKD,2DAA0D;AAC1D,yDAAsI;AACtI,qFAA2F;AAC3F;;;;;GAKG;AACU,QAAA,mCAAmC,GAAG;IAC/C,MAAM;IACN,YAAY;IACZ,UAAU;IACV,SAAS;IACT,OAAO;IACP,WAAW;CACd,CAAC;AACF,SAAS,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK;IACrC,OAAO;QACH,IAAI;QACJ,IAAI;QACJ,OAAO;QACP,GAAG,CAAC,KAAK,EAAE,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChE,GAAG,CAAC,KAAK,EAAE,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChE,GAAG,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACxD,CAAC;AACN,CAAC;AACD,SAAS,oBAAoB,CAAC,MAAM,EAAE,IAAI;IACtC,MAAM,MAAM,GAAG,EAAE,CAAC;IAClB,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QACpC,IAAI,2CAAmC,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YACpD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,0BAA0B,EAAE,GAAG,IAAI,IAAI,GAAG,EAAE,EAAE,UAAU,GAAG,kJAAkJ,EAAE;gBAC7N,OAAO,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE;aAC1B,CAAC,CAAC,CAAC;QACR,CAAC;IACL,CAAC;IACD,OAAO,MAAM,CAAC;AAClB,CAAC;AACD,SAAS,2BAA2B,CAAC,QAAQ,EAAE,MAAM;IACjD,MAAM,CAAC,IAAI,CAAC,GAAG,oBAAoB,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC;IACpD,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,oBAAoB,CAAC,IAAI,EAAE,UAAU,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;IACzG,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,oBAAoB,CAAC,IAAI,EAAE,WAAW,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;IAC3G,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;QAChC,MAAM,CAAC,IAAI,CAAC,GAAG,oBAAoB,CAAC,IAAI,EAAE,SAAS,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;QAChE,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACZ,MAAM,CAAC,IAAI,CAAC,GAAG,oBAAoB,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,IAAI,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC;YAC1E,2BAA2B,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACxD,CAAC;IACL,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;QAChC,MAAM,CAAC,IAAI,CAAC,GAAG,oBAAoB,CAAC,IAAI,EAAE,SAAS,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;IACpE,CAAC;AACL,CAAC;AACD,SAAS,iBAAiB,CAAC,QAAQ;IAC/B,MAAM,MAAM,GAAG,EAAE,CAAC;IAClB,MAAM,OAAO,GAAG,IAAI,GAAG,EAAE,CAAC;IAC1B,KAAK,MAAM,IAAI,IAAI,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,GAAG,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3D,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;YACvB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,4BAA4B,EAAE,SAAS,IAAI,CAAC,EAAE,GAAG,EAAE,kBAAkB,IAAI,CAAC,EAAE,gEAAgE,CAAC,CAAC,CAAC;QACrK,CAAC;aACI,CAAC;YACF,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACzB,CAAC;IACL,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,GAAG,EAAE,CAAC;IAC1B,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;QAChC,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;YACvB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,4BAA4B,EAAE,SAAS,IAAI,CAAC,EAAE,GAAG,EAAE,SAAS,IAAI,CAAC,EAAE,uDAAuD,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;QACxK,CAAC;aACI,CAAC;YACF,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACzB,CAAC;IACL,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,GAAG,EAAE,CAAC;IAC1B,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;QAChC,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;YACvB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,4BAA4B,EAAE,SAAS,IAAI,CAAC,EAAE,GAAG,EAAE,SAAS,IAAI,CAAC,EAAE,uDAAuD,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;QACxK,CAAC;aACI,CAAC;YACF,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACzB,CAAC;IACL,CAAC;IACD,OAAO,MAAM,CAAC;AAClB,CAAC;AACD,SAAS,WAAW,CAAC,QAAQ,EAAE,MAAM;IACjC,MAAM,MAAM,GAAG,EAAE,CAAC;IAClB,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC;QAC1C,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,sBAAsB,EAAE,SAAS,EAAE,qBAAqB,QAAQ,CAAC,KAAK,CAAC,MAAM,mBAAmB,MAAM,CAAC,QAAQ,cAAc,EAAE,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC;IAC7N,CAAC;IACD,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC;QAC1C,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,sBAAsB,EAAE,SAAS,EAAE,qBAAqB,QAAQ,CAAC,KAAK,CAAC,MAAM,mBAAmB,MAAM,CAAC,QAAQ,cAAc,EAAE,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC;IAC7N,CAAC;IACD,MAAM,QAAQ,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IAC7C,IAAI,QAAQ,GAAG,MAAM,CAAC,eAAe,EAAE,CAAC;QACpC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,sBAAsB,EAAE,SAAS,EAAE,8BAA8B,QAAQ,yBAAyB,MAAM,CAAC,eAAe,qBAAqB,EAAE,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC,CAAC;IACvO,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,CAAC;IAClE,IAAI,KAAK,GAAG,MAAM,CAAC,gBAAgB,EAAE,CAAC;QAClC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,qBAAqB,EAAE,GAAG,EAAE,0BAA0B,KAAK,mBAAmB,MAAM,CAAC,gBAAgB,oBAAoB,EAAE,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,gBAAgB,EAAE,EAAE,CAAC,CAAC,CAAC;IAC1M,CAAC;IACD,OAAO,MAAM,CAAC;AAClB,CAAC;AACD,SAAS,iBAAiB,CAAC,QAAQ,EAAE,KAAK,GAAG,CAAC;IAC1C,IAAI,GAAG,GAAG,KAAK,CAAC;IAChB,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;QAChC,IAAI,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC;YAClB,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;QACtE,CAAC;IACL,CAAC;IACD,OAAO,GAAG,CAAC;AACf,CAAC;AACD,SAAS,UAAU,CAAC,QAAQ,EAAE,SAAS;IACnC,MAAM,MAAM,GAAG,EAAE,CAAC;IAClB,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;QAChC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC5B,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,mBAAmB,EAAE,SAAS,IAAI,CAAC,EAAE,QAAQ,EAAE,SAAS,IAAI,CAAC,EAAE,sBAAsB,IAAI,CAAC,IAAI,oDAAoD,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC;QAC9N,CAAC;QACD,IAAI,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC;YAClB,MAAM,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC;QAC1D,CAAC;IACL,CAAC;IACD,OAAO,MAAM,CAAC;AAClB,CAAC;AACD;;;;;;;;;;GAUG;AACH,SAAgB,uCAAuC,CAAC,QAAQ,EAAE,OAAO,GAAG,EAAE;IAC1E,MAAM,MAAM,GAAG;QACX,GAAG,uEAAsC;QACzC,GAAG,OAAO,CAAC,MAAM;KACpB,CAAC;IACF,MAAM,MAAM,GAAG,EAAE,CAAC;IAClB,IAAI,CAAC,IAAA,oCAA4B,EAAC,QAAQ,CAAC,EAAE,CAAC;QAC1C,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,gBAAgB,EAAE,GAAG,EAAE,mIAAmI,CAAC,CAAC,CAAC;QAC/K,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;IACpC,CAAC;IACD,IAAI,CAAC,IAAA,4BAAoB,EAAC,QAAQ,CAAC,EAAE,CAAC;QAClC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,sBAAsB,EAAE,GAAG,EAAE,iLAAiL,CAAC,CAAC,CAAC;QACnO,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;IACpC,CAAC;IACD,2BAA2B,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC9C,MAAM,CAAC,IAAI,CAAC,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC5C,MAAM,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;IAC9C,IAAI,CAAC;QACD,IAAA,wCAAgC,EAAC,QAAQ,CAAC,CAAC;IAC/C,CAAC;IACD,OAAO,CAAC,EAAE,CAAC;QACP,MAAM,OAAO,GAAG,CAAC,YAAY,+BAAe,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACrE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,oBAAoB,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC;IAC3D,CAAC;IACD,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;QACpB,MAAM,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,QAAQ,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC;IAC5D,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;AAClD,CAAC;AACD,2DAA2D"}

package/lib/cjs/nest/graph/GraphWorkflowController.cjs

@@ -0,0 +1,162 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.GraphWorkflowController = void 0;
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function")
+        r = Reflect.decorate(decorators, target, key, desc);
+    else
+        for (var i = decorators.length - 1; i >= 0; i--)
+            if (d = decorators[i])
+                r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function")
+        return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); };
+};
+const common_1 = require("@nestjs/common");
+const db_decorators_1 = require("@decaf-ts/db-decorators");
+const core_1 = require("@decaf-ts/core");
+const for_nest_1 = require("@decaf-ts/for-nest");
+const GraphWorkflowService_js_1 = require("./GraphWorkflowService.cjs");
+const GraphWorkflowErrors_js_1 = require("./GraphWorkflowErrors.cjs");
+function graphWorkflowHttpErrorOf(e, workflowId) {
+    if (e instanceof GraphWorkflowErrors_js_1.GraphWorkflowDocumentRejectedError) {
+        return new common_1.HttpException({
+            message: "Graph workflow document rejected at the boundary",
+            issues: e.issues,
+        }, common_1.HttpStatus.UNPROCESSABLE_ENTITY);
+    }
+    if (e instanceof core_1.ForbiddenError || e instanceof core_1.AuthorizationError) {
+        return new common_1.HttpException(workflowId
+            ? `Graph workflow '${workflowId}' is owned by another user`
+            : e.message, common_1.HttpStatus.FORBIDDEN);
+    }
+    if (e instanceof db_decorators_1.NotFoundError) {
+        return new common_1.NotFoundException(e.message);
+    }
+    if (e instanceof db_decorators_1.ValidationError) {
+        return new common_1.HttpException(e.message, common_1.HttpStatus.BAD_REQUEST);
+    }
+    if (e instanceof common_1.HttpException)
+        return e;
+    const message = e instanceof Error ? e.message : String(e);
+    return new common_1.HttpException(message, common_1.HttpStatus.INTERNAL_SERVER_ERROR);
+}
+/**
+ * Canonical workflow document persistence endpoints (DECAF-50 §4.10):
+ *
+ * - `PUT   /graph/workflows/{workflowId}` — validate and persist a canonical
+ *   document (or a `{ document, editor, metadata }` snapshot wrapper, whose
+ *   editor state is preserved verbatim for lossless round trips).
+ * - `GET  /graph/workflows/{workflowId}` — load the canonical document;
+ *   legacy persisted snapshots are converted losslessly on the read path.
+ * - `POST /graph/workflows/validate` — run boundary validation and return
+ *   structured issues (`code`, `path`, `nodeId`, `edgeId`, `message`,
+ *   safe `details`).
+ *
+ * @class GraphWorkflowController
+ */
+let GraphWorkflowController = class GraphWorkflowController {
+    constructor(workflowService, requestContext, options = {}) {
+        this.workflowService = workflowService;
+        this.requestContext = requestContext;
+        this.options = options;
+    }
+    /**
+     * Enforces the configured authentication mode: `auth` defaults to
+     * `"required"` (SAA-595 secure-defaults alignment) and rejects
+     * unauthenticated calls with `401`; `"optional"` admits anonymous
+     * requests for standalone module runs (DECAF-48 §4.15).
+     */
+    requireAuthenticatedContext() {
+        if ((this.options.auth ?? "required") !== "required") {
+            return this.requestContext;
+        }
+        if (!this.requestContext) {
+            throw new common_1.HttpException("Graph workflow access requires an authenticated request context", common_1.HttpStatus.UNAUTHORIZED);
+        }
+        return this.requestContext;
+    }
+    async saveWorkflow(workflowId, body) {
+        const context = this.requireAuthenticatedContext();
+        try {
+            const model = this.isCanonicalWrapper(body)
+                ? await this.workflowService.saveSnapshot(workflowId, body, context)
+                : await this.workflowService.saveDocument(workflowId, body, context);
+            return {
+                workflowId,
+                ...(model.name ? { name: model.name } : {}),
+                savedAt: model.updatedAt.toISOString(),
+            };
+        }
+        catch (e) {
+            throw graphWorkflowHttpErrorOf(e, workflowId);
+        }
+    }
+    async getWorkflow(workflowId) {
+        const context = this.requireAuthenticatedContext();
+        try {
+            return await this.workflowService.getDocument(workflowId, context);
+        }
+        catch (e) {
+            throw graphWorkflowHttpErrorOf(e, workflowId);
+        }
+    }
+    async validateWorkflow(body) {
+        this.requireAuthenticatedContext();
+        const document = this.documentOf(body);
+        return this.workflowService.validateDocument(document, this.requestContext);
+    }
+    isCanonicalWrapper(body) {
+        return (!!body &&
+            typeof body === "object" &&
+            !Array.isArray(body) &&
+            body["document"] !== undefined &&
+            body["nodes"] === undefined);
+    }
+    documentOf(body) {
+        if (this.isCanonicalWrapper(body)) {
+            return body.document;
+        }
+        return body;
+    }
+};
+exports.GraphWorkflowController = GraphWorkflowController;
+__decorate([
+    (0, common_1.Put)("workflows/:workflowId"),
+    __param(0, (0, common_1.Param)("workflowId")),
+    __param(1, (0, common_1.Body)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, Object]),
+    __metadata("design:returntype", Promise)
+], GraphWorkflowController.prototype, "saveWorkflow", null);
+__decorate([
+    (0, common_1.Get)("workflows/:workflowId"),
+    __param(0, (0, common_1.Param)("workflowId")),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String]),
+    __metadata("design:returntype", Promise)
+], GraphWorkflowController.prototype, "getWorkflow", null);
+__decorate([
+    (0, common_1.Post)("workflows/validate"),
+    __param(0, (0, common_1.Body)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Promise)
+], GraphWorkflowController.prototype, "validateWorkflow", null);
+exports.GraphWorkflowController = GraphWorkflowController = __decorate([
+    (0, common_1.Controller)("graph"),
+    __param(1, (0, common_1.Optional)()),
+    __param(1, (0, common_1.Inject)(for_nest_1.DecafRequestContext)),
+    __param(2, (0, common_1.Optional)()),
+    __param(2, (0, common_1.Inject)(GraphWorkflowService_js_1.GRAPH_WORKFLOW_OPTIONS)),
+    __metadata("design:paramtypes", [GraphWorkflowService_js_1.GraphWorkflowService,
+        for_nest_1.DecafRequestContext, Object])
+], GraphWorkflowController);
+//# sourceMappingURL=GraphWorkflowController.js.map
+//# sourceMappingURL=GraphWorkflowController.cjs.map

package/lib/cjs/nest/graph/GraphWorkflowController.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"nest/graph/GraphWorkflowController.cjs","sourceRoot":"","sources":["nest/graph/GraphWorkflowController.js"],"names":[],"mappings":";;;AAAA,IAAI,UAAU,GAAG,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,UAAU,UAAU,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI;IACjF,IAAI,CAAC,GAAG,SAAS,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG,MAAM,CAAC,wBAAwB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IAC7H,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,OAAO,CAAC,QAAQ,KAAK,UAAU;QAAE,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;;QAC1H,KAAK,IAAI,CAAC,GAAG,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE;YAAE,IAAI,CAAC,GAAG,UAAU,CAAC,CAAC,CAAC;gBAAE,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC;IAClJ,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;AAClE,CAAC,CAAC;AACF,IAAI,UAAU,GAAG,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC;IACxD,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,OAAO,CAAC,QAAQ,KAAK,UAAU;QAAE,OAAO,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AAC7G,CAAC,CAAC;AACF,IAAI,OAAO,GAAG,CAAC,IAAI,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,UAAU,UAAU,EAAE,SAAS;IACnE,OAAO,UAAU,MAAM,EAAE,GAAG,IAAI,SAAS,CAAC,MAAM,EAAE,GAAG,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,CAAA;AACzE,CAAC,CAAC;AACF,2CAA0I;AAC1I,2DAAyE;AACzE,yCAAoE;AACpE,iDAAyD;AACzD,uEAAyF;AACzF,qEAA8E;AAC9E,SAAS,wBAAwB,CAAC,CAAC,EAAE,UAAU;IAC3C,IAAI,CAAC,YAAY,2DAAkC,EAAE,CAAC;QAClD,OAAO,IAAI,sBAAa,CAAC;YACrB,OAAO,EAAE,kDAAkD;YAC3D,MAAM,EAAE,CAAC,CAAC,MAAM;SACnB,EAAE,mBAAU,CAAC,oBAAoB,CAAC,CAAC;IACxC,CAAC;IACD,IAAI,CAAC,YAAY,qBAAc,IAAI,CAAC,YAAY,yBAAkB,EAAE,CAAC;QACjE,OAAO,IAAI,sBAAa,CAAC,UAAU;YAC/B,CAAC,CAAC,mBAAmB,UAAU,4BAA4B;YAC3D,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,mBAAU,CAAC,SAAS,CAAC,CAAC;IAC3C,CAAC;IACD,IAAI,CAAC,YAAY,6BAAa,EAAE,CAAC;QAC7B,OAAO,IAAI,0BAAiB,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IAC5C,CAAC;IACD,IAAI,CAAC,YAAY,+BAAe,EAAE,CAAC;QAC/B,OAAO,IAAI,sBAAa,CAAC,CAAC,CAAC,OAAO,EAAE,mBAAU,CAAC,WAAW,CAAC,CAAC;IAChE,CAAC;IACD,IAAI,CAAC,YAAY,sBAAa;QAC1B,OAAO,CAAC,CAAC;IACb,MAAM,OAAO,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAC3D,OAAO,IAAI,sBAAa,CAAC,OAAO,EAAE,mBAAU,CAAC,qBAAqB,CAAC,CAAC;AACxE,CAAC;AACD;;;;;;;;;;;;;GAaG;AACH,IAAI,uBAAuB,GAAG,MAAM,uBAAuB;IACvD,YAAY,eAAe,EAAE,cAAc,EAAE,OAAO,GAAG,EAAE;QACrD,IAAI,CAAC,eAAe,GAAG,eAAe,CAAC;QACvC,IAAI,CAAC,cAAc,GAAG,cAAc,CAAC;QACrC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IAC3B,CAAC;IACD;;;;;OAKG;IACH,2BAA2B;QACvB,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,UAAU,CAAC,KAAK,UAAU,EAAE,CAAC;YACnD,OAAO,IAAI,CAAC,cAAc,CAAC;QAC/B,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;YACvB,MAAM,IAAI,sBAAa,CAAC,iEAAiE,EAAE,mBAAU,CAAC,YAAY,CAAC,CAAC;QACxH,CAAC;QACD,OAAO,IAAI,CAAC,cAAc,CAAC;IAC/B,CAAC;IACD,KAAK,CAAC,YAAY,CAAC,UAAU,EAAE,IAAI;QAC/B,MAAM,OAAO,GAAG,IAAI,CAAC,2BAA2B,EAAE,CAAC;QACnD,IAAI,CAAC;YACD,MAAM,KAAK,GAAG,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC;gBACvC,CAAC,CAAC,MAAM,IAAI,CAAC,eAAe,CAAC,YAAY,CAAC,UAAU,EAAE,IAAI,EAAE,OAAO,CAAC;gBACpE,CAAC,CAAC,MAAM,IAAI,CAAC,eAAe,CAAC,YAAY,CAAC,UAAU,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;YACzE,OAAO;gBACH,UAAU;gBACV,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC3C,OAAO,EAAE,KAAK,CAAC,SAAS,CAAC,WAAW,EAAE;aACzC,CAAC;QACN,CAAC;QACD,OAAO,CAAC,EAAE,CAAC;YACP,MAAM,wBAAwB,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;QAClD,CAAC;IACL,CAAC;IACD,KAAK,CAAC,WAAW,CAAC,UAAU;QACxB,MAAM,OAAO,GAAG,IAAI,CAAC,2BAA2B,EAAE,CAAC;QACnD,IAAI,CAAC;YACD,OAAO,MAAM,IAAI,CAAC,eAAe,CAAC,WAAW,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QACvE,CAAC;QACD,OAAO,CAAC,EAAE,CAAC;YACP,MAAM,wBAAwB,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;QAClD,CAAC;IACL,CAAC;IACD,KAAK,CAAC,gBAAgB,CAAC,IAAI;QACvB,IAAI,CAAC,2BAA2B,EAAE,CAAC;QACnC,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QACvC,OAAO,IAAI,CAAC,eAAe,CAAC,gBAAgB,CAAC,QAAQ,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC;IAChF,CAAC;IACD,kBAAkB,CAAC,IAAI;QACnB,OAAO,CAAC,CAAC,CAAC,IAAI;YACV,OAAO,IAAI,KAAK,QAAQ;YACxB,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;YACpB,IAAI,CAAC,UAAU,CAAC,KAAK,SAAS;YAC9B,IAAI,CAAC,OAAO,CAAC,KAAK,SAAS,CAAC,CAAC;IACrC,CAAC;IACD,UAAU,CAAC,IAAI;QACX,IAAI,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC;YAChC,OAAO,IAAI,CAAC,QAAQ,CAAC;QACzB,CAAC;QACD,OAAO,IAAI,CAAC;IAChB,CAAC;CACJ,CAAC;AAgCO,0DAAuB;AA/BhC,UAAU,CAAC;IACP,IAAA,YAAG,EAAC,uBAAuB,CAAC;IAC5B,OAAO,CAAC,CAAC,EAAE,IAAA,cAAK,EAAC,YAAY,CAAC,CAAC;IAC/B,OAAO,CAAC,CAAC,EAAE,IAAA,aAAI,GAAE,CAAC;IAClB,UAAU,CAAC,aAAa,EAAE,QAAQ,CAAC;IACnC,UAAU,CAAC,mBAAmB,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjD,UAAU,CAAC,mBAAmB,EAAE,OAAO,CAAC;CAC3C,EAAE,uBAAuB,CAAC,SAAS,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;AAC5D,UAAU,CAAC;IACP,IAAA,YAAG,EAAC,uBAAuB,CAAC;IAC5B,OAAO,CAAC,CAAC,EAAE,IAAA,cAAK,EAAC,YAAY,CAAC,CAAC;IAC/B,UAAU,CAAC,aAAa,EAAE,QAAQ,CAAC;IACnC,UAAU,CAAC,mBAAmB,EAAE,CAAC,MAAM,CAAC,CAAC;IACzC,UAAU,CAAC,mBAAmB,EAAE,OAAO,CAAC;CAC3C,EAAE,uBAAuB,CAAC,SAAS,EAAE,aAAa,EAAE,IAAI,CAAC,CAAC;AAC3D,UAAU,CAAC;IACP,IAAA,aAAI,EAAC,oBAAoB,CAAC;IAC1B,OAAO,CAAC,CAAC,EAAE,IAAA,aAAI,GAAE,CAAC;IAClB,UAAU,CAAC,aAAa,EAAE,QAAQ,CAAC;IACnC,UAAU,CAAC,mBAAmB,EAAE,CAAC,MAAM,CAAC,CAAC;IACzC,UAAU,CAAC,mBAAmB,EAAE,OAAO,CAAC;CAC3C,EAAE,uBAAuB,CAAC,SAAS,EAAE,kBAAkB,EAAE,IAAI,CAAC,CAAC;AAChE,kCAAA,uBAAuB,GAAG,UAAU,CAAC;IACjC,IAAA,mBAAU,EAAC,OAAO,CAAC;IACnB,OAAO,CAAC,CAAC,EAAE,IAAA,iBAAQ,GAAE,CAAC;IACtB,OAAO,CAAC,CAAC,EAAE,IAAA,eAAM,EAAC,8BAAmB,CAAC,CAAC;IACvC,OAAO,CAAC,CAAC,EAAE,IAAA,iBAAQ,GAAE,CAAC;IACtB,OAAO,CAAC,CAAC,EAAE,IAAA,eAAM,EAAC,gDAAsB,CAAC,CAAC;IAC1C,UAAU,CAAC,mBAAmB,EAAE,CAAC,8CAAoB;QACjD,8BAAmB,EAAE,MAAM,CAAC,CAAC;CACpC,EAAE,uBAAuB,CAAC,CAAC;AAE5B,mDAAmD"}

package/lib/cjs/nest/graph/GraphWorkflowDocumentLimits.cjs

@@ -0,0 +1,12 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DEFAULT_GRAPH_WORKFLOW_DOCUMENT_LIMITS = void 0;
+/** Default document resource limits (§4.16): payload size, nesting depth, node and edge counts. */
+exports.DEFAULT_GRAPH_WORKFLOW_DOCUMENT_LIMITS = {
+    maxDocumentBytes: 2_000_000,
+    maxNestingDepth: 10,
+    maxNodes: 500,
+    maxEdges: 1_000,
+};
+//# sourceMappingURL=GraphWorkflowDocumentLimits.js.map
+//# sourceMappingURL=GraphWorkflowDocumentLimits.cjs.map

package/lib/cjs/nest/graph/GraphWorkflowDocumentLimits.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"nest/graph/GraphWorkflowDocumentLimits.cjs","sourceRoot":"","sources":["nest/graph/GraphWorkflowDocumentLimits.js"],"names":[],"mappings":";;;AAAA,mGAAmG;AACtF,QAAA,sCAAsC,GAAG;IAClD,gBAAgB,EAAE,SAAS;IAC3B,eAAe,EAAE,EAAE;IACnB,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,KAAK;CAClB,CAAC;AACF,uDAAuD"}

package/lib/cjs/nest/graph/GraphWorkflowErrors.cjs

@@ -0,0 +1,23 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.GraphWorkflowDocumentRejectedError = void 0;
+const db_decorators_1 = require("@decaf-ts/db-decorators");
+/**
+ * Raised when a submitted workflow document fails boundary validation and
+ * must not be persisted (DECAF-50 §4.10). Carries the structured issues so
+ * HTTP transports can surface them without re-running validation.
+ *
+ * @class GraphWorkflowDocumentRejectedError
+ */
+class GraphWorkflowDocumentRejectedError extends db_decorators_1.ValidationError {
+    constructor(issues) {
+        super(`Graph workflow document rejected with ${issues.length} issue(s): ${issues
+            .map((i) => `${i.code} at ${i.path} (${i.message})`)
+            .join("; ")}`);
+        this.name = GraphWorkflowDocumentRejectedError.name;
+        this.issues = issues;
+    }
+}
+exports.GraphWorkflowDocumentRejectedError = GraphWorkflowDocumentRejectedError;
+//# sourceMappingURL=GraphWorkflowErrors.js.map
+//# sourceMappingURL=GraphWorkflowErrors.cjs.map

package/lib/cjs/nest/graph/GraphWorkflowErrors.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"nest/graph/GraphWorkflowErrors.cjs","sourceRoot":"","sources":["nest/graph/GraphWorkflowErrors.js"],"names":[],"mappings":";;;AAAA,2DAA0D;AAC1D;;;;;;GAMG;AACH,MAAa,kCAAmC,SAAQ,+BAAe;IACnE,YAAY,MAAM;QACd,KAAK,CAAC,yCAAyC,MAAM,CAAC,MAAM,cAAc,MAAM;aAC3E,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,OAAO,GAAG,CAAC;aACnD,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACnB,IAAI,CAAC,IAAI,GAAG,kCAAkC,CAAC,IAAI,CAAC;QACpD,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACzB,CAAC;CACJ;AARD,gFAQC;AACD,+CAA+C"}

package/lib/cjs/nest/graph/GraphWorkflowModel.cjs

@@ -17,6 +17,20 @@ var __metadata = (this && this.__metadata) || function (k, v) {
 };
 const decorator_validation_1 = require("@decaf-ts/decorator-validation");
 const core_1 = require("@decaf-ts/core");
+/**
+ * Canonical workflow persistence model (DECAF-50 §4.10).
+ *
+ * `document` is the executable source of truth. `snapshot` is retained
+ * temporarily (DECAF-50 §4.18 transition) so legacy persisted snapshots keep
+ * loading through lossless read-path conversion; it must never become the
+ * executable source of truth again and is removed at cutover (P7).
+ *
+ * `owner` implements the DECAF-48 `{ workflowId, ownerUser }` ownership tuple:
+ * the authenticated user that created the workflow, or `undefined` for
+ * system/standalone saves (tolerated per DECAF-48 §4.15).
+ *
+ * @class GraphWorkflowModel
+ */
 let GraphWorkflowModel = class GraphWorkflowModel extends core_1.BaseModel {
     constructor(arg) {
         super(arg);
@@ -27,12 +41,24 @@ __decorate([
     (0, core_1.pk)({ type: String, generated: false }),
     __metadata("design:type", String)
 ], GraphWorkflowModel.prototype, "workflowId", void 0);
+__decorate([
+    (0, core_1.column)(),
+    __metadata("design:type", String)
+], GraphWorkflowModel.prototype, "name", void 0);
+__decorate([
+    (0, core_1.column)(),
+    __metadata("design:type", Object)
+], GraphWorkflowModel.prototype, "document", void 0);
+__decorate([
+    (0, core_1.column)(),
+    __metadata("design:type", String)
+], GraphWorkflowModel.prototype, "owner", void 0);
 __decorate([
     (0, core_1.column)(),
     __metadata("design:type", Object)
 ], GraphWorkflowModel.prototype, "snapshot", void 0);
 exports.GraphWorkflowModel = GraphWorkflowModel = __decorate([
-    (0, core_1.table)("graph_workflow_snapshot"),
+    (0, core_1.table)("graph_workflow"),
     (0, decorator_validation_1.model)(),
     __metadata("design:paramtypes", [Object])
 ], GraphWorkflowModel);

package/lib/cjs/nest/graph/GraphWorkflowModel.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"nest/graph/GraphWorkflowModel.cjs","sourceRoot":"","sources":["nest/graph/GraphWorkflowModel.js"],"names":[],"mappings":";;;AAAA,IAAI,UAAU,GAAG,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,UAAU,UAAU,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI;IACjF,IAAI,CAAC,GAAG,SAAS,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG,MAAM,CAAC,wBAAwB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IAC7H,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,OAAO,CAAC,QAAQ,KAAK,UAAU;QAAE,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;;QAC1H,KAAK,IAAI,CAAC,GAAG,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE;YAAE,IAAI,CAAC,GAAG,UAAU,CAAC,CAAC,CAAC;gBAAE,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC;IAClJ,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;AAClE,CAAC,CAAC;AACF,IAAI,UAAU,GAAG,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC;IACxD,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,OAAO,CAAC,QAAQ,KAAK,UAAU;QAAE,OAAO,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AAC7G,CAAC,CAAC;AACF,yEAAuD;AACvD,yCAA8D;AAC9D,IAAI,kBAAkB,GAAG,MAAM,kBAAmB,SAAQ,gBAAS;IAC/D,YAAY,GAAG;QACX,KAAK,CAAC,GAAG,CAAC,CAAC;IACf,CAAC;CACJ,CAAC;AAcO,gDAAkB;AAb3B,UAAU,CAAC;IACP,IAAA,SAAE,EAAC,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IACtC,UAAU,CAAC,aAAa,EAAE,MAAM,CAAC;CACpC,EAAE,kBAAkB,CAAC,SAAS,EAAE,YAAY,EAAE,KAAK,CAAC,CAAC,CAAC;AACvD,UAAU,CAAC;IACP,IAAA,aAAM,GAAE;IACR,UAAU,CAAC,aAAa,EAAE,MAAM,CAAC;CACpC,EAAE,kBAAkB,CAAC,SAAS,EAAE,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC;AACrD,6BAAA,kBAAkB,GAAG,UAAU,CAAC;IAC5B,IAAA,YAAK,EAAC,yBAAyB,CAAC;IAChC,IAAA,4BAAK,GAAE;IACP,UAAU,CAAC,mBAAmB,EAAE,CAAC,MAAM,CAAC,CAAC;CAC5C,EAAE,kBAAkB,CAAC,CAAC;AAEvB,8CAA8C"}
+{"version":3,"file":"nest/graph/GraphWorkflowModel.cjs","sourceRoot":"","sources":["nest/graph/GraphWorkflowModel.js"],"names":[],"mappings":";;;AAAA,IAAI,UAAU,GAAG,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,UAAU,UAAU,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI;IACjF,IAAI,CAAC,GAAG,SAAS,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG,MAAM,CAAC,wBAAwB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IAC7H,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,OAAO,CAAC,QAAQ,KAAK,UAAU;QAAE,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;;QAC1H,KAAK,IAAI,CAAC,GAAG,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE;YAAE,IAAI,CAAC,GAAG,UAAU,CAAC,CAAC,CAAC;gBAAE,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC;IAClJ,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;AAClE,CAAC,CAAC;AACF,IAAI,UAAU,GAAG,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC;IACxD,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,OAAO,CAAC,QAAQ,KAAK,UAAU;QAAE,OAAO,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AAC7G,CAAC,CAAC;AACF,yEAAuD;AACvD,yCAA8D;AAC9D;;;;;;;;;;;;;GAaG;AACH,IAAI,kBAAkB,GAAG,MAAM,kBAAmB,SAAQ,gBAAS;IAC/D,YAAY,GAAG;QACX,KAAK,CAAC,GAAG,CAAC,CAAC;IACf,CAAC;CACJ,CAAC;AA0BO,gDAAkB;AAzB3B,UAAU,CAAC;IACP,IAAA,SAAE,EAAC,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IACtC,UAAU,CAAC,aAAa,EAAE,MAAM,CAAC;CACpC,EAAE,kBAAkB,CAAC,SAAS,EAAE,YAAY,EAAE,KAAK,CAAC,CAAC,CAAC;AACvD,UAAU,CAAC;IACP,IAAA,aAAM,GAAE;IACR,UAAU,CAAC,aAAa,EAAE,MAAM,CAAC;CACpC,EAAE,kBAAkB,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;AACjD,UAAU,CAAC;IACP,IAAA,aAAM,GAAE;IACR,UAAU,CAAC,aAAa,EAAE,MAAM,CAAC;CACpC,EAAE,kBAAkB,CAAC,SAAS,EAAE,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC;AACrD,UAAU,CAAC;IACP,IAAA,aAAM,GAAE;IACR,UAAU,CAAC,aAAa,EAAE,MAAM,CAAC;CACpC,EAAE,kBAAkB,CAAC,SAAS,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;AAClD,UAAU,CAAC;IACP,IAAA,aAAM,GAAE;IACR,UAAU,CAAC,aAAa,EAAE,MAAM,CAAC;CACpC,EAAE,kBAAkB,CAAC,SAAS,EAAE,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC;AACrD,6BAAA,kBAAkB,GAAG,UAAU,CAAC;IAC5B,IAAA,YAAK,EAAC,gBAAgB,CAAC;IACvB,IAAA,4BAAK,GAAE;IACP,UAAU,CAAC,mBAAmB,EAAE,CAAC,MAAM,CAAC,CAAC;CAC5C,EAAE,kBAAkB,CAAC,CAAC;AAEvB,8CAA8C"}