@decaf-ts/integrations 0.8.0 → 0.9.0

package/lib/cjs/nest/graph/GraphExecutorRegistryFactory.cjs

@@ -1,76 +1,84 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.createGraphNodeCatalogue = createGraphNodeCatalogue;
 exports.createGraphExecutorRegistry = createGraphExecutorRegistry;
+exports.registerEngineBoundGraphNodes = registerEngineBoundGraphNodes;
 exports.createDemoEngineConfig = createDemoEngineConfig;
 /**
  * @module integrations/nest/graph/GraphExecutorRegistryFactory
- * @summary Factory that builds a populated {@link GraphNodeExecutorRegistry}.
- * @description Creates a registry pre-loaded with the demo executors used by
- * the graph execution backend's sample workflows. The executors cover the
- * flow-control kinds (including Code, Log, and Switch with code conditions),
- * the DECAF-48 `core.utility.log` Log node, the agent kind, and the loop
- * kinds. Additional executors can be registered on the returned registry
- * before it is handed to the {@link GraphExecutionEngine}.
+ * @summary Factory that builds a populated {@link GraphNodeCatalogue} and its
+ * {@link GraphNodeExecutorRegistry} compatibility facade.
+ * @description Creates a catalogue pre-loaded with the DECAF-50 built-in
+ * manifest+executor registrations plus the demo executors used by the graph
+ * execution backend's sample workflows. The catalogue is the single
+ * kind→registration map (DECAF-50 §4.7); the returned registry is a facade
+ * over it, so no second executor map exists.
  */
 const index_js_1 = require("./../../graph/index.cjs");
-const GraphBreakSignal_js_1 = require("./../../graph/engine/errors/GraphBreakSignal.cjs");
-const executorMap = {
-    "math.add": (input) => ({ sum: Number(input.a) + Number(input.b) }),
-    "math.multiply": (input) => ({ product: Number(input.x) * 2 }),
-    "core.flow.map": (input) => ({ result: { mapped: input["value"] ?? input } }),
-    "core.flow.delay": (input) => ({ valueOut: input["value"] ?? input }),
-    "core.flow.return": (input) => ({ result: input["value"] ?? input }),
-    "core.flow.merge": (input) => ({ merged: input["values"] ?? input }),
-    "core.flow.if": (input) => ({ then: input["value"] ?? input }),
-    "core.flow.parallel": (input) => ({ branches: [input["value"] ?? input] }),
-    "core.flow.errorBoundary": (input) => ({ result: input["value"] ?? input }),
-    "core.flow.humanApproval": (input) => ({ approved: input["value"] ?? input }),
-    "core.flow.break": (input) => {
-        throw new GraphBreakSignal_js_1.GraphBreakSignal(input["value"]);
-    },
-    "core.agent": (input) => ({
-        response: `[Agent response] ${String(input["prompt"] ?? "")}`,
-        actions: [],
+const demoExecutorMap = {
+    "math.add": (request) => ({
+        sum: Number(request.inputs.a) + Number(request.inputs.b),
+    }),
+    "math.multiply": (request) => ({
+        product: Number(request.inputs.x) * 2,
     }),
 };
 /**
- * Builds a {@link GraphNodeExecutorRegistry} populated with the demo executors.
- *
- * Executors are registered by **node kind** (the same key the engine uses to
- * resolve executors at runtime). The for-angular demo nodes use the kind as
- * their tag, so the same key works for both dispatch-by-kind and
- * dispatch-by-tag.
+ * Builds a {@link GraphNodeCatalogue} populated with the built-in
+ * manifest+executor registrations and the arithmetic demo executors, wrapped
+ * with its {@link GraphNodeExecutorRegistry} facade.
  *
- * Registered kinds:
- * - `math.add`, `math.multiply` — arithmetic demo executors.
- * - `core.flow.*` — flow-control kinds (map, delay, return, merge, if,
- *   parallel, errorBoundary, humanApproval). The `core.flow.code`,
- *   `core.flow.log`, and `core.flow.switch` kinds are registered in
- *   `onEngineCreated` via their real executors because Code and Switch
- *   need the engine's `codeSandboxEvaluator`.
- * - `core.agent` — agent node.
- * - `core.loop.foreach`, `core.loop.while`, `core.loop.until` — loop executors
- *   (registered after the engine is created via `onEngineCreated`).
+ * The built-in kinds whose executors need the engine instance (loops, Code,
+ * Switch) are only registered by {@link createDemoEngineConfig}'s
+ * `onEngineCreated` hook via {@link registerEngineBoundGraphNodes}.
  *
- * @param extra - Additional executors to merge into the registry.
- * @returns A populated registry ready for use with {@link GraphExecutionEngine}.
+ * @param extra - Additional executor registrations to merge into the catalogue.
+ * @returns The populated catalogue and its registry facade.
  */
-function createGraphExecutorRegistry(extra) {
-    const registry = new index_js_1.GraphNodeExecutorRegistry();
-    for (const [kind, fn] of Object.entries(executorMap)) {
-        registry.register(kind, { execute: fn });
+function createGraphNodeCatalogue(extra) {
+    const catalogue = new index_js_1.GraphNodeCatalogue();
+    (0, index_js_1.registerBuiltInGraphNodes)(catalogue);
+    for (const [kind, fn] of Object.entries(demoExecutorMap)) {
+        catalogue.registerExecutor(kind, { execute: fn });
     }
     if (extra) {
         for (const [kind, executor] of Object.entries(extra)) {
-            registry.register(kind, executor);
+            catalogue.registerExecutor(kind, executor);
         }
     }
-    return registry;
+    return { catalogue, registry: new index_js_1.GraphNodeExecutorRegistry(catalogue) };
+}
+/**
+ * Builds a {@link GraphNodeExecutorRegistry} facade over a populated
+ * {@link GraphNodeCatalogue} (compatibility entry point).
+ *
+ * @param extra - Additional executor registrations to merge into the catalogue.
+ * @returns The registry facade; the underlying catalogue is available as
+ * `registry.catalog`.
+ */
+function createGraphExecutorRegistry(extra) {
+    return createGraphNodeCatalogue(extra).registry;
+}
+/**
+ * Registers the engine-bound built-in kinds (loops, Code, Switch) on an
+ * existing catalogue, replacing their placeholder-free entries with the real
+ * engine-bound executors.
+ *
+ * @param catalogue - The catalogue receiving the registrations.
+ * @param engine - The engine instance the loop/Code/Switch executors bind to.
+ * @returns The catalogue with the engine-bound registrations applied.
+ */
+function registerEngineBoundGraphNodes(catalogue, engine) {
+    for (const registration of (0, index_js_1.builtInGraphNodeRegistrations)(engine)) {
+        catalogue.register(registration, { replace: true });
+    }
+    return catalogue;
 }
 /**
- * Builds a {@link GraphExecutionEngineConfig} populated with all demo executors
- * including loop executors that need a back-reference to the engine and the
- * Code node executor that needs the engine's `codeSandboxEvaluator`.
+ * Builds a `GraphExecutionEngineConfig` populated with all built-in
+ * registrations including loop executors that need a back-reference to the
+ * engine and the Code node executor that needs the engine's
+ * `codeSandboxEvaluator`.
  *
  * The config wires an {@link IsolatedVmCodeSandboxEvaluator} (backed by
  * `isolated-vm`) so the Code Node runs in a truly isolated V8 sandbox.
@@ -78,21 +86,15 @@ function createGraphExecutorRegistry(extra) {
  * @returns A config object ready for `new GraphExecutionEngine(config)`.
  */
 function createDemoEngineConfig() {
-    const registry = createGraphExecutorRegistry();
+    const { catalogue, registry } = createGraphNodeCatalogue();
     const codeSandboxEvaluator = new index_js_1.IsolatedVmCodeSandboxEvaluator();
     return {
+        catalogue,
         registry,
         defaultOptions: { failFast: false },
         codeSandboxEvaluator,
         onEngineCreated: (engine) => {
-            registry.register("core.loop.foreach", new index_js_1.ForeachGraphNodeExecutor(engine));
-            registry.register("core.loop.while", new index_js_1.WhileGraphNodeExecutor(engine));
-            registry.register("core.loop.until", new index_js_1.UntilGraphNodeExecutor(engine));
-            registry.register("core.flow.code", new index_js_1.CodeGraphNodeExecutor(engine));
-            registry.register("core.flow.log", new index_js_1.LogGraphNodeExecutor());
-            registry.register("core.utility.log", new index_js_1.LogGraphNodeExecutor());
-            registry.register("core.flow.switch", new index_js_1.SwitchGraphNodeExecutor(engine));
-            registry.register("core.flow.break", new index_js_1.BreakGraphNodeExecutor());
+            registerEngineBoundGraphNodes(catalogue, engine);
         },
     };
 }

package/lib/cjs/nest/graph/GraphExecutorRegistryFactory.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"nest/graph/GraphExecutorRegistryFactory.cjs","sourceRoot":"","sources":["nest/graph/GraphExecutorRegistryFactory.js"],"names":[],"mappings":";;AAqDA,kEAWC;AAWD,wDAkBC;AA7FD;;;;;;;;;GASG;AACH,qDAA4Q;AAC5Q,yFAAmF;AACnF,MAAM,WAAW,GAAG;IAChB,UAAU,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IACnE,eAAe,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;IAC9D,eAAe,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,IAAI,KAAK,EAAE,EAAE,CAAC;IAC7E,iBAAiB,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,IAAI,KAAK,EAAE,CAAC;IACrE,kBAAkB,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,IAAI,KAAK,EAAE,CAAC;IACpE,iBAAiB,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,IAAI,KAAK,EAAE,CAAC;IACpE,cAAc,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,IAAI,KAAK,EAAE,CAAC;IAC9D,oBAAoB,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;IAC1E,yBAAyB,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,IAAI,KAAK,EAAE,CAAC;IAC3E,yBAAyB,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,IAAI,KAAK,EAAE,CAAC;IAC7E,iBAAiB,EAAE,CAAC,KAAK,EAAE,EAAE;QACzB,MAAM,IAAI,sCAAgB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;IAC/C,CAAC;IACD,YAAY,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACtB,QAAQ,EAAE,oBAAoB,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,EAAE;QAC7D,OAAO,EAAE,EAAE;KACd,CAAC;CACL,CAAC;AACF;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,SAAgB,2BAA2B,CAAC,KAAK;IAC7C,MAAM,QAAQ,GAAG,IAAI,oCAAyB,EAAE,CAAC;IACjD,KAAK,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;QACnD,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;IAC7C,CAAC;IACD,IAAI,KAAK,EAAE,CAAC;QACR,KAAK,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACnD,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QACtC,CAAC;IACL,CAAC;IACD,OAAO,QAAQ,CAAC;AACpB,CAAC;AACD;;;;;;;;;GASG;AACH,SAAgB,sBAAsB;IAClC,MAAM,QAAQ,GAAG,2BAA2B,EAAE,CAAC;IAC/C,MAAM,oBAAoB,GAAG,IAAI,yCAA8B,EAAE,CAAC;IAClE,OAAO;QACH,QAAQ;QACR,cAAc,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE;QACnC,oBAAoB;QACpB,eAAe,EAAE,CAAC,MAAM,EAAE,EAAE;YACxB,QAAQ,CAAC,QAAQ,CAAC,mBAAmB,EAAE,IAAI,mCAAwB,CAAC,MAAM,CAAC,CAAC,CAAC;YAC7E,QAAQ,CAAC,QAAQ,CAAC,iBAAiB,EAAE,IAAI,iCAAsB,CAAC,MAAM,CAAC,CAAC,CAAC;YACzE,QAAQ,CAAC,QAAQ,CAAC,iBAAiB,EAAE,IAAI,iCAAsB,CAAC,MAAM,CAAC,CAAC,CAAC;YACzE,QAAQ,CAAC,QAAQ,CAAC,gBAAgB,EAAE,IAAI,gCAAqB,CAAC,MAAM,CAAC,CAAC,CAAC;YACvE,QAAQ,CAAC,QAAQ,CAAC,eAAe,EAAE,IAAI,+BAAoB,EAAE,CAAC,CAAC;YAC/D,QAAQ,CAAC,QAAQ,CAAC,kBAAkB,EAAE,IAAI,+BAAoB,EAAE,CAAC,CAAC;YAClE,QAAQ,CAAC,QAAQ,CAAC,kBAAkB,EAAE,IAAI,kCAAuB,CAAC,MAAM,CAAC,CAAC,CAAC;YAC3E,QAAQ,CAAC,QAAQ,CAAC,iBAAiB,EAAE,IAAI,iCAAsB,EAAE,CAAC,CAAC;QACvE,CAAC;KACJ,CAAC;AACN,CAAC;AACD,wDAAwD"}
+{"version":3,"file":"nest/graph/GraphExecutorRegistryFactory.cjs","sourceRoot":"","sources":["nest/graph/GraphExecutorRegistryFactory.js"],"names":[],"mappings":";;AA+BA,4DAYC;AASD,kEAEC;AAUD,sEAKC;AAYD,wDAYC;AA7FD;;;;;;;;;GASG;AACH,qDAAkL;AAClL,MAAM,eAAe,GAAG;IACpB,UAAU,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QACtB,GAAG,EAAE,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;KAC3D,CAAC;IACF,eAAe,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QAC3B,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC;KACxC,CAAC;CACL,CAAC;AACF;;;;;;;;;;;GAWG;AACH,SAAgB,wBAAwB,CAAC,KAAK;IAC1C,MAAM,SAAS,GAAG,IAAI,6BAAkB,EAAE,CAAC;IAC3C,IAAA,oCAAyB,EAAC,SAAS,CAAC,CAAC;IACrC,KAAK,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE,CAAC;QACvD,SAAS,CAAC,gBAAgB,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;IACtD,CAAC;IACD,IAAI,KAAK,EAAE,CAAC;QACR,KAAK,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACnD,SAAS,CAAC,gBAAgB,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QAC/C,CAAC;IACL,CAAC;IACD,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,oCAAyB,CAAC,SAAS,CAAC,EAAE,CAAC;AAC7E,CAAC;AACD;;;;;;;GAOG;AACH,SAAgB,2BAA2B,CAAC,KAAK;IAC7C,OAAO,wBAAwB,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC;AACpD,CAAC;AACD;;;;;;;;GAQG;AACH,SAAgB,6BAA6B,CAAC,SAAS,EAAE,MAAM;IAC3D,KAAK,MAAM,YAAY,IAAI,IAAA,wCAA6B,EAAC,MAAM,CAAC,EAAE,CAAC;QAC/D,SAAS,CAAC,QAAQ,CAAC,YAAY,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;IACxD,CAAC;IACD,OAAO,SAAS,CAAC;AACrB,CAAC;AACD;;;;;;;;;;GAUG;AACH,SAAgB,sBAAsB;IAClC,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,wBAAwB,EAAE,CAAC;IAC3D,MAAM,oBAAoB,GAAG,IAAI,yCAA8B,EAAE,CAAC;IAClE,OAAO;QACH,SAAS;QACT,QAAQ;QACR,cAAc,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE;QACnC,oBAAoB;QACpB,eAAe,EAAE,CAAC,MAAM,EAAE,EAAE;YACxB,6BAA6B,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QACrD,CAAC;KACJ,CAAC;AACN,CAAC;AACD,wDAAwD"}

package/lib/cjs/nest/graph/GraphNodeCatalogueController.cjs

@@ -0,0 +1,270 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.GraphNodeCatalogueController = exports.GRAPH_CATALOGUE_CONTROLLER_OPTIONS = void 0;
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function")
+        r = Reflect.decorate(decorators, target, key, desc);
+    else
+        for (var i = decorators.length - 1; i >= 0; i--)
+            if (d = decorators[i])
+                r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function")
+        return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); };
+};
+/**
+ * @module integrations/nest/graph/GraphNodeCatalogueController
+ * @summary Catalogue HTTP API (DECAF-50 §4.12–§4.13).
+ * @description Serves the trusted node catalogue over HTTP — manifest
+ * listing (`node-types`), per-kind manifests/icons, parameterized `resolve`,
+ * and node-method invocation — with optional authentication and per-user
+ * rate limits on the expensive `resolve`/`methods` operations; non-JSON-safe
+ * request bodies are rejected.
+ */
+const common_1 = require("@nestjs/common");
+const node_crypto_1 = require("node:crypto");
+const for_nest_1 = require("@decaf-ts/for-nest");
+const graph_1 = require("@decaf-ts/ui-decorators/graph");
+const index_js_1 = require("./../../graph/index.cjs");
+const GraphWorkflowService_js_1 = require("./GraphWorkflowService.cjs");
+/** DI token for {@link GraphCatalogueControllerOptions}. */
+exports.GRAPH_CATALOGUE_CONTROLLER_OPTIONS = "GRAPH_CATALOGUE_CONTROLLER_OPTIONS";
+const DEFAULT_RATE_LIMIT = {
+    windowMs: 60_000,
+    maxRequests: 60,
+};
+function sanitizeGraphJsonInput(value, scope) {
+    if (!(0, graph_1.isGraphJsonSafeValue)(value)) {
+        throw new common_1.HttpException(`${scope} must be JSON-safe: functions, class instances, undefined, NaN/Infinity, symbol keys and unsafe prototype keys (__proto__/prototype/constructor) are not allowed`, common_1.HttpStatus.UNPROCESSABLE_ENTITY);
+    }
+    return (0, graph_1.cloneGraphJsonValue)(value);
+}
+function manifestDigest(payload) {
+    return `"${(0, node_crypto_1.createHash)("sha1")
+        .update(JSON.stringify(payload))
+        .digest("base64url")}"`;
+}
+/**
+ * Catalogue HTTP API (DECAF-50 §4.13): serves registered node manifests as
+ * data (never constructors), resolves effective manifests for node
+ * instances, and invokes declared node methods. Enforces configured
+ * authentication and per-user rate limits on the expensive
+ * `resolve`/`methods` operations, and rejects non-JSON-safe request bodies.
+ */
+let GraphNodeCatalogueController = class GraphNodeCatalogueController {
+    constructor(catalogue, requestContext, options = {}) {
+        this.catalogue = catalogue;
+        this.requestContext = requestContext;
+        this.options = options;
+        this.rateBuckets = new Map();
+    }
+    requireAuthenticatedContext() {
+        if ((this.options.auth ?? "required") !== "required") {
+            return this.requestContext;
+        }
+        if (!this.requestContext) {
+            throw new common_1.HttpException("Graph node catalogue access requires an authenticated request context", common_1.HttpStatus.UNAUTHORIZED);
+        }
+        return this.requestContext;
+    }
+    /**
+     * Builds the rate-limit bucket key for an operation: the authenticated
+     * owner resolved via {@link graphWorkflowOwnerOf} (SAA-595 F6), falling
+     * back to the context `user.id`, then the request IP, then a shared
+     * `"anonymous"` bucket.
+     */
+    rateLimitKey(operation) {
+        const context = this.requestContext;
+        const user = context?.["user"];
+        const identity = (0, GraphWorkflowService_js_1.graphWorkflowOwnerOf)(context) ||
+            (typeof user?.["id"] === "string" && user["id"]) ||
+            context?.request
+                ?.ip ||
+            "anonymous";
+        return `${operation}:${identity}`;
+    }
+    enforceRateLimit(operation, limits) {
+        const config = { ...DEFAULT_RATE_LIMIT, ...limits };
+        const now = Date.now();
+        const key = this.rateLimitKey(operation);
+        const bucket = this.rateBuckets.get(key);
+        if (!bucket || bucket.resetAt <= now) {
+            this.rateBuckets.set(key, { count: 1, resetAt: now + config.windowMs });
+            return;
+        }
+        if (bucket.count >= config.maxRequests) {
+            throw new common_1.HttpException(`Rate limit exceeded for graph catalogue operation '${operation}' (max ${config.maxRequests} per ${config.windowMs}ms)`, common_1.HttpStatus.TOO_MANY_REQUESTS);
+        }
+        bucket.count += 1;
+    }
+    async listNodeTypes(ifNoneMatch, res) {
+        this.requireAuthenticatedContext();
+        const manifests = this.catalogue.listManifests();
+        const etag = manifestDigest(manifests);
+        res.setHeader("ETag", etag);
+        if (ifNoneMatch && ifNoneMatch === etag) {
+            res.status(common_1.HttpStatus.NOT_MODIFIED);
+            return;
+        }
+        return manifests;
+    }
+    async getNodeType(kind) {
+        this.requireAuthenticatedContext();
+        this.assertKnownKind(kind);
+        return this.catalogue.getManifest(kind);
+    }
+    async getNodeTypeIcon(kind) {
+        this.requireAuthenticatedContext();
+        this.assertKnownKind(kind);
+        const manifest = this.catalogue.getManifest(kind);
+        return { kind, icon: manifest.display.icon ?? null };
+    }
+    async resolveNodeType(kind, body = {}) {
+        this.requireAuthenticatedContext();
+        this.enforceRateLimit("resolve", this.options.resolveRateLimit);
+        this.assertKnownKind(kind);
+        const parameters = body?.parameters
+            ? sanitizeGraphJsonInput(body.parameters, "resolve parameters")
+            : {};
+        const metadata = body?.metadata
+            ? sanitizeGraphJsonInput(body.metadata, "resolve metadata")
+            : undefined;
+        const instance = {
+            id: `resolve:${kind}`,
+            kind,
+            parameters,
+            ...(metadata ? { metadata } : {}),
+        };
+        const context = {
+            requestContext: this.requestContext,
+        };
+        return this.catalogue.resolveManifest(kind, instance, context);
+    }
+    async invokeNodeMethod(kind, method, body = {}) {
+        this.requireAuthenticatedContext();
+        this.enforceRateLimit("methods", this.options.methodsRateLimit);
+        this.assertKnownKind(kind);
+        this.declaredMethod(kind, method, body?.methodType);
+        const parameters = body?.parameters
+            ? sanitizeGraphJsonInput(body.parameters, "method parameters")
+            : {};
+        const payload = body?.payload !== undefined
+            ? sanitizeGraphJsonInput(body.payload, "method payload")
+            : undefined;
+        const credentials = this.authorizeCredentials(kind, body?.credentials);
+        const nodeMethod = this.catalogue.getMethod(kind, method);
+        return nodeMethod({
+            kind,
+            method,
+            parameters,
+            ...(payload !== undefined ? { payload } : {}),
+        }, {
+            requestContext: this.requestContext,
+            ...(credentials.length ? { credentials } : {}),
+        });
+    }
+    assertKnownKind(kind) {
+        if (!this.catalogue.has(kind)) {
+            throw new common_1.HttpException(`No graph node kind '${kind}' is registered in the catalogue`, common_1.HttpStatus.NOT_FOUND);
+        }
+    }
+    declaredMethod(kind, method, expectedType) {
+        let declaration;
+        try {
+            declaration = this.catalogue.getMethodDeclaration(kind, method);
+        }
+        catch {
+            throw new common_1.HttpException(`Graph node kind '${kind}' does not declare method '${method}'`, common_1.HttpStatus.NOT_FOUND);
+        }
+        if (!(0, graph_1.isGraphNodeMethodType)(declaration.type)) {
+            throw new common_1.HttpException(`Graph node kind '${kind}' declares method '${method}' with an invalid type '${String(declaration.type)}'`, common_1.HttpStatus.INTERNAL_SERVER_ERROR);
+        }
+        if (expectedType && expectedType !== declaration.type) {
+            throw new common_1.HttpException(`Method '${method}' on kind '${kind}' has type '${declaration.type}', not '${expectedType}'`, common_1.HttpStatus.BAD_REQUEST);
+        }
+        return declaration;
+    }
+    authorizeCredentials(kind, provided) {
+        const requirements = this.catalogue.getManifest(kind).credentials ?? [];
+        const references = provided ?? [];
+        for (const reference of references) {
+            if (!reference ||
+                typeof reference.credentialId !== "string" ||
+                !reference.credentialId ||
+                typeof reference.credentialType !== "string" ||
+                !reference.credentialType) {
+                throw new common_1.HttpException("Credential references must carry a credentialId and a credentialType", common_1.HttpStatus.BAD_REQUEST);
+            }
+            const declared = requirements.some((requirement) => requirement.type === reference.credentialType);
+            if (!declared) {
+                throw new common_1.HttpException(`Graph node kind '${kind}' does not accept credentials of type '${reference.credentialType}'`, common_1.HttpStatus.FORBIDDEN);
+            }
+        }
+        for (const requirement of requirements) {
+            if (!requirement.required)
+                continue;
+            const satisfied = references.some((reference) => reference.credentialType === requirement.type);
+            if (!satisfied) {
+                throw new common_1.HttpException(`Graph node kind '${kind}' requires a credential of type '${requirement.type}'`, common_1.HttpStatus.UNAUTHORIZED);
+            }
+        }
+        return references;
+    }
+};
+exports.GraphNodeCatalogueController = GraphNodeCatalogueController;
+__decorate([
+    (0, common_1.Get)("node-types"),
+    __param(0, (0, common_1.Headers)("if-none-match")),
+    __param(1, (0, common_1.Res)({ passthrough: true })),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, Object]),
+    __metadata("design:returntype", Promise)
+], GraphNodeCatalogueController.prototype, "listNodeTypes", null);
+__decorate([
+    (0, common_1.Get)("node-types/:kind"),
+    __param(0, (0, common_1.Param)("kind")),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String]),
+    __metadata("design:returntype", Promise)
+], GraphNodeCatalogueController.prototype, "getNodeType", null);
+__decorate([
+    (0, common_1.Get)("node-types/:kind/icon"),
+    __param(0, (0, common_1.Param)("kind")),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String]),
+    __metadata("design:returntype", Promise)
+], GraphNodeCatalogueController.prototype, "getNodeTypeIcon", null);
+__decorate([
+    (0, common_1.Post)("node-types/:kind/resolve"),
+    __param(0, (0, common_1.Param)("kind")),
+    __param(1, (0, common_1.Body)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, Object]),
+    __metadata("design:returntype", Promise)
+], GraphNodeCatalogueController.prototype, "resolveNodeType", null);
+__decorate([
+    (0, common_1.Post)("node-types/:kind/methods/:method"),
+    __param(0, (0, common_1.Param)("kind")),
+    __param(1, (0, common_1.Param)("method")),
+    __param(2, (0, common_1.Body)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, String, Object]),
+    __metadata("design:returntype", Promise)
+], GraphNodeCatalogueController.prototype, "invokeNodeMethod", null);
+exports.GraphNodeCatalogueController = GraphNodeCatalogueController = __decorate([
+    (0, common_1.Controller)("graph"),
+    __param(1, (0, common_1.Optional)()),
+    __param(1, (0, common_1.Inject)(for_nest_1.DecafRequestContext)),
+    __param(2, (0, common_1.Optional)()),
+    __param(2, (0, common_1.Inject)(exports.GRAPH_CATALOGUE_CONTROLLER_OPTIONS)),
+    __metadata("design:paramtypes", [index_js_1.GraphNodeCatalogue,
+        for_nest_1.DecafRequestContext, Object])
+], GraphNodeCatalogueController);
+//# sourceMappingURL=GraphNodeCatalogueController.js.map
+//# sourceMappingURL=GraphNodeCatalogueController.cjs.map

package/lib/cjs/nest/graph/GraphNodeCatalogueController.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"nest/graph/GraphNodeCatalogueController.cjs","sourceRoot":"","sources":["nest/graph/GraphNodeCatalogueController.js"],"names":[],"mappings":";;;AAAA,IAAI,UAAU,GAAG,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,UAAU,UAAU,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI;IACjF,IAAI,CAAC,GAAG,SAAS,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG,MAAM,CAAC,wBAAwB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IAC7H,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,OAAO,CAAC,QAAQ,KAAK,UAAU;QAAE,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;;QAC1H,KAAK,IAAI,CAAC,GAAG,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE;YAAE,IAAI,CAAC,GAAG,UAAU,CAAC,CAAC,CAAC;gBAAE,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC;IAClJ,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;AAClE,CAAC,CAAC;AACF,IAAI,UAAU,GAAG,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC;IACxD,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,OAAO,CAAC,QAAQ,KAAK,UAAU;QAAE,OAAO,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AAC7G,CAAC,CAAC;AACF,IAAI,OAAO,GAAG,CAAC,IAAI,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,UAAU,UAAU,EAAE,SAAS;IACnE,OAAO,UAAU,MAAM,EAAE,GAAG,IAAI,SAAS,CAAC,MAAM,EAAE,GAAG,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,CAAA;AACzE,CAAC,CAAC;AACF;;;;;;;;GAQG;AACH,2CAAgI;AAChI,6CAAyC;AACzC,iDAAyD;AACzD,yDAAkH;AAClH,qDAA4D;AAC5D,uEAAiE;AACjE,4DAA4D;AAC/C,QAAA,kCAAkC,GAAG,oCAAoC,CAAC;AACvF,MAAM,kBAAkB,GAAG;IACvB,QAAQ,EAAE,MAAM;IAChB,WAAW,EAAE,EAAE;CAClB,CAAC;AACF,SAAS,sBAAsB,CAAC,KAAK,EAAE,KAAK;IACxC,IAAI,CAAC,IAAA,4BAAoB,EAAC,KAAK,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,sBAAa,CAAC,GAAG,KAAK,kKAAkK,EAAE,mBAAU,CAAC,oBAAoB,CAAC,CAAC;IACzO,CAAC;IACD,OAAO,IAAA,2BAAmB,EAAC,KAAK,CAAC,CAAC;AACtC,CAAC;AACD,SAAS,cAAc,CAAC,OAAO;IAC3B,OAAO,IAAI,IAAA,wBAAU,EAAC,MAAM,CAAC;SACxB,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;SAC/B,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC;AAChC,CAAC;AACD;;;;;;GAMG;AACH,IAAI,4BAA4B,GAAG,MAAM,4BAA4B;IACjE,YAAY,SAAS,EAAE,cAAc,EAAE,OAAO,GAAG,EAAE;QAC/C,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,cAAc,GAAG,cAAc,CAAC;QACrC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,WAAW,GAAG,IAAI,GAAG,EAAE,CAAC;IACjC,CAAC;IACD,2BAA2B;QACvB,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,UAAU,CAAC,KAAK,UAAU,EAAE,CAAC;YACnD,OAAO,IAAI,CAAC,cAAc,CAAC;QAC/B,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;YACvB,MAAM,IAAI,sBAAa,CAAC,uEAAuE,EAAE,mBAAU,CAAC,YAAY,CAAC,CAAC;QAC9H,CAAC;QACD,OAAO,IAAI,CAAC,cAAc,CAAC;IAC/B,CAAC;IACD;;;;;OAKG;IACH,YAAY,CAAC,SAAS;QAClB,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC;QACpC,MAAM,IAAI,GAAG,OAAO,EAAE,CAAC,MAAM,CAAC,CAAC;QAC/B,MAAM,QAAQ,GAAG,IAAA,8CAAoB,EAAC,OAAO,CAAC;YAC1C,CAAC,OAAO,IAAI,EAAE,CAAC,IAAI,CAAC,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC;YAChD,OAAO,EAAE,OAAO;gBACZ,EAAE,EAAE;YACR,WAAW,CAAC;QAChB,OAAO,GAAG,SAAS,IAAI,QAAQ,EAAE,CAAC;IACtC,CAAC;IACD,gBAAgB,CAAC,SAAS,EAAE,MAAM;QAC9B,MAAM,MAAM,GAAG,EAAE,GAAG,kBAAkB,EAAE,GAAG,MAAM,EAAE,CAAC;QACpD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,GAAG,GAAG,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;QACzC,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACzC,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,OAAO,IAAI,GAAG,EAAE,CAAC;YACnC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,GAAG,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;YACxE,OAAO;QACX,CAAC;QACD,IAAI,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;YACrC,MAAM,IAAI,sBAAa,CAAC,sDAAsD,SAAS,UAAU,MAAM,CAAC,WAAW,QAAQ,MAAM,CAAC,QAAQ,KAAK,EAAE,mBAAU,CAAC,iBAAiB,CAAC,CAAC;QACnL,CAAC;QACD,MAAM,CAAC,KAAK,IAAI,CAAC,CAAC;IACtB,CAAC;IACD,KAAK,CAAC,aAAa,CAAC,WAAW,EAAE,GAAG;QAChC,IAAI,CAAC,2BAA2B,EAAE,CAAC;QACnC,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,aAAa,EAAE,CAAC;QACjD,MAAM,IAAI,GAAG,cAAc,CAAC,SAAS,CAAC,CAAC;QACvC,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAC5B,IAAI,WAAW,IAAI,WAAW,KAAK,IAAI,EAAE,CAAC;YACtC,GAAG,CAAC,MAAM,CAAC,mBAAU,CAAC,YAAY,CAAC,CAAC;YACpC,OAAO;QACX,CAAC;QACD,OAAO,SAAS,CAAC;IACrB,CAAC;IACD,KAAK,CAAC,WAAW,CAAC,IAAI;QAClB,IAAI,CAAC,2BAA2B,EAAE,CAAC;QACnC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;QAC3B,OAAO,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;IAC5C,CAAC;IACD,KAAK,CAAC,eAAe,CAAC,IAAI;QACtB,IAAI,CAAC,2BAA2B,EAAE,CAAC;QACnC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;QAC3B,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QAClD,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,CAAC,OAAO,CAAC,IAAI,IAAI,IAAI,EAAE,CAAC;IACzD,CAAC;IACD,KAAK,CAAC,eAAe,CAAC,IAAI,EAAE,IAAI,GAAG,EAAE;QACjC,IAAI,CAAC,2BAA2B,EAAE,CAAC;QACnC,IAAI,CAAC,gBAAgB,CAAC,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;QAChE,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;QAC3B,MAAM,UAAU,GAAG,IAAI,EAAE,UAAU;YAC/B,CAAC,CAAC,sBAAsB,CAAC,IAAI,CAAC,UAAU,EAAE,oBAAoB,CAAC;YAC/D,CAAC,CAAC,EAAE,CAAC;QACT,MAAM,QAAQ,GAAG,IAAI,EAAE,QAAQ;YAC3B,CAAC,CAAC,sBAAsB,CAAC,IAAI,CAAC,QAAQ,EAAE,kBAAkB,CAAC;YAC3D,CAAC,CAAC,SAAS,CAAC;QAChB,MAAM,QAAQ,GAAG;YACb,EAAE,EAAE,WAAW,IAAI,EAAE;YACrB,IAAI;YACJ,UAAU;YACV,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACpC,CAAC;QACF,MAAM,OAAO,GAAG;YACZ,cAAc,EAAE,IAAI,CAAC,cAAc;SACtC,CAAC;QACF,OAAO,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,IAAI,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;IACnE,CAAC;IACD,KAAK,CAAC,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,GAAG,EAAE;QAC1C,IAAI,CAAC,2BAA2B,EAAE,CAAC;QACnC,IAAI,CAAC,gBAAgB,CAAC,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;QAChE,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;QAC3B,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC;QACpD,MAAM,UAAU,GAAG,IAAI,EAAE,UAAU;YAC/B,CAAC,CAAC,sBAAsB,CAAC,IAAI,CAAC,UAAU,EAAE,mBAAmB,CAAC;YAC9D,CAAC,CAAC,EAAE,CAAC;QACT,MAAM,OAAO,GAAG,IAAI,EAAE,OAAO,KAAK,SAAS;YACvC,CAAC,CAAC,sBAAsB,CAAC,IAAI,CAAC,OAAO,EAAE,gBAAgB,CAAC;YACxD,CAAC,CAAC,SAAS,CAAC;QAChB,MAAM,WAAW,GAAG,IAAI,CAAC,oBAAoB,CAAC,IAAI,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC;QACvE,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC1D,OAAO,UAAU,CAAC;YACd,IAAI;YACJ,MAAM;YACN,UAAU;YACV,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAChD,EAAE;YACC,cAAc,EAAE,IAAI,CAAC,cAAc;YACnC,GAAG,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACjD,CAAC,CAAC;IACP,CAAC;IACD,eAAe,CAAC,IAAI;QAChB,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,sBAAa,CAAC,uBAAuB,IAAI,kCAAkC,EAAE,mBAAU,CAAC,SAAS,CAAC,CAAC;QACjH,CAAC;IACL,CAAC;IACD,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,YAAY;QACrC,IAAI,WAAW,CAAC;QAChB,IAAI,CAAC;YACD,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC,oBAAoB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACpE,CAAC;QACD,MAAM,CAAC;YACH,MAAM,IAAI,sBAAa,CAAC,oBAAoB,IAAI,8BAA8B,MAAM,GAAG,EAAE,mBAAU,CAAC,SAAS,CAAC,CAAC;QACnH,CAAC;QACD,IAAI,CAAC,IAAA,6BAAqB,EAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3C,MAAM,IAAI,sBAAa,CAAC,oBAAoB,IAAI,sBAAsB,MAAM,2BAA2B,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,EAAE,mBAAU,CAAC,qBAAqB,CAAC,CAAC;QAC1K,CAAC;QACD,IAAI,YAAY,IAAI,YAAY,KAAK,WAAW,CAAC,IAAI,EAAE,CAAC;YACpD,MAAM,IAAI,sBAAa,CAAC,WAAW,MAAM,cAAc,IAAI,eAAe,WAAW,CAAC,IAAI,WAAW,YAAY,GAAG,EAAE,mBAAU,CAAC,WAAW,CAAC,CAAC;QAClJ,CAAC;QACD,OAAO,WAAW,CAAC;IACvB,CAAC;IACD,oBAAoB,CAAC,IAAI,EAAE,QAAQ;QAC/B,MAAM,YAAY,GAAG,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,WAAW,IAAI,EAAE,CAAC;QACxE,MAAM,UAAU,GAAG,QAAQ,IAAI,EAAE,CAAC;QAClC,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;YACjC,IAAI,CAAC,SAAS;gBACV,OAAO,SAAS,CAAC,YAAY,KAAK,QAAQ;gBAC1C,CAAC,SAAS,CAAC,YAAY;gBACvB,OAAO,SAAS,CAAC,cAAc,KAAK,QAAQ;gBAC5C,CAAC,SAAS,CAAC,cAAc,EAAE,CAAC;gBAC5B,MAAM,IAAI,sBAAa,CAAC,sEAAsE,EAAE,mBAAU,CAAC,WAAW,CAAC,CAAC;YAC5H,CAAC;YACD,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,KAAK,SAAS,CAAC,cAAc,CAAC,CAAC;YACnG,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACZ,MAAM,IAAI,sBAAa,CAAC,oBAAoB,IAAI,0CAA0C,SAAS,CAAC,cAAc,GAAG,EAAE,mBAAU,CAAC,SAAS,CAAC,CAAC;YACjJ,CAAC;QACL,CAAC;QACD,KAAK,MAAM,WAAW,IAAI,YAAY,EAAE,CAAC;YACrC,IAAI,CAAC,WAAW,CAAC,QAAQ;gBACrB,SAAS;YACb,MAAM,SAAS,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,cAAc,KAAK,WAAW,CAAC,IAAI,CAAC,CAAC;YAChG,IAAI,CAAC,SAAS,EAAE,CAAC;gBACb,MAAM,IAAI,sBAAa,CAAC,oBAAoB,IAAI,oCAAoC,WAAW,CAAC,IAAI,GAAG,EAAE,mBAAU,CAAC,YAAY,CAAC,CAAC;YACtI,CAAC;QACL,CAAC;QACD,OAAO,UAAU,CAAC;IACtB,CAAC;CACJ,CAAC;AAiDO,oEAA4B;AAhDrC,UAAU,CAAC;IACP,IAAA,YAAG,EAAC,YAAY,CAAC;IACjB,OAAO,CAAC,CAAC,EAAE,IAAA,gBAAO,EAAC,eAAe,CAAC,CAAC;IACpC,OAAO,CAAC,CAAC,EAAE,IAAA,YAAG,EAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;IACtC,UAAU,CAAC,aAAa,EAAE,QAAQ,CAAC;IACnC,UAAU,CAAC,mBAAmB,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjD,UAAU,CAAC,mBAAmB,EAAE,OAAO,CAAC;CAC3C,EAAE,4BAA4B,CAAC,SAAS,EAAE,eAAe,EAAE,IAAI,CAAC,CAAC;AAClE,UAAU,CAAC;IACP,IAAA,YAAG,EAAC,kBAAkB,CAAC;IACvB,OAAO,CAAC,CAAC,EAAE,IAAA,cAAK,EAAC,MAAM,CAAC,CAAC;IACzB,UAAU,CAAC,aAAa,EAAE,QAAQ,CAAC;IACnC,UAAU,CAAC,mBAAmB,EAAE,CAAC,MAAM,CAAC,CAAC;IACzC,UAAU,CAAC,mBAAmB,EAAE,OAAO,CAAC;CAC3C,EAAE,4BAA4B,CAAC,SAAS,EAAE,aAAa,EAAE,IAAI,CAAC,CAAC;AAChE,UAAU,CAAC;IACP,IAAA,YAAG,EAAC,uBAAuB,CAAC;IAC5B,OAAO,CAAC,CAAC,EAAE,IAAA,cAAK,EAAC,MAAM,CAAC,CAAC;IACzB,UAAU,CAAC,aAAa,EAAE,QAAQ,CAAC;IACnC,UAAU,CAAC,mBAAmB,EAAE,CAAC,MAAM,CAAC,CAAC;IACzC,UAAU,CAAC,mBAAmB,EAAE,OAAO,CAAC;CAC3C,EAAE,4BAA4B,CAAC,SAAS,EAAE,iBAAiB,EAAE,IAAI,CAAC,CAAC;AACpE,UAAU,CAAC;IACP,IAAA,aAAI,EAAC,0BAA0B,CAAC;IAChC,OAAO,CAAC,CAAC,EAAE,IAAA,cAAK,EAAC,MAAM,CAAC,CAAC;IACzB,OAAO,CAAC,CAAC,EAAE,IAAA,aAAI,GAAE,CAAC;IAClB,UAAU,CAAC,aAAa,EAAE,QAAQ,CAAC;IACnC,UAAU,CAAC,mBAAmB,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjD,UAAU,CAAC,mBAAmB,EAAE,OAAO,CAAC;CAC3C,EAAE,4BAA4B,CAAC,SAAS,EAAE,iBAAiB,EAAE,IAAI,CAAC,CAAC;AACpE,UAAU,CAAC;IACP,IAAA,aAAI,EAAC,kCAAkC,CAAC;IACxC,OAAO,CAAC,CAAC,EAAE,IAAA,cAAK,EAAC,MAAM,CAAC,CAAC;IACzB,OAAO,CAAC,CAAC,EAAE,IAAA,cAAK,EAAC,QAAQ,CAAC,CAAC;IAC3B,OAAO,CAAC,CAAC,EAAE,IAAA,aAAI,GAAE,CAAC;IAClB,UAAU,CAAC,aAAa,EAAE,QAAQ,CAAC;IACnC,UAAU,CAAC,mBAAmB,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;IACzD,UAAU,CAAC,mBAAmB,EAAE,OAAO,CAAC;CAC3C,EAAE,4BAA4B,CAAC,SAAS,EAAE,kBAAkB,EAAE,IAAI,CAAC,CAAC;AACrE,uCAAA,4BAA4B,GAAG,UAAU,CAAC;IACtC,IAAA,mBAAU,EAAC,OAAO,CAAC;IACnB,OAAO,CAAC,CAAC,EAAE,IAAA,iBAAQ,GAAE,CAAC;IACtB,OAAO,CAAC,CAAC,EAAE,IAAA,eAAM,EAAC,8BAAmB,CAAC,CAAC;IACvC,OAAO,CAAC,CAAC,EAAE,IAAA,iBAAQ,GAAE,CAAC;IACtB,OAAO,CAAC,CAAC,EAAE,IAAA,eAAM,EAAC,0CAAkC,CAAC,CAAC;IACtD,UAAU,CAAC,mBAAmB,EAAE,CAAC,6BAAkB;QAC/C,8BAAmB,EAAE,MAAM,CAAC,CAAC;CACpC,EAAE,4BAA4B,CAAC,CAAC;AAEjC,wDAAwD"}

package/lib/cjs/nest/graph/GraphResultService.cjs

@@ -17,15 +17,29 @@ var __metadata = (this && this.__metadata) || function (k, v) {
 };
 const core_1 = require("@decaf-ts/core");
 const GraphExecutionResultModel_js_1 = require("./GraphExecutionResultModel.cjs");
+const GraphWorkflowService_js_1 = require("./GraphWorkflowService.cjs");
+/**
+ * Model-backed persistence for {@link GraphExecutionResultModel} rows: the
+ * terminal snapshot the (deprecated) synchronous `POST /graph/execute`
+ * surface persists after a run completes. Access control lives at the
+ * controller/route layer, which gates reads through the run ownership check.
+ */
 let GraphResultService = class GraphResultService extends core_1.ModelService {
     constructor() {
         super(GraphExecutionResultModel_js_1.GraphExecutionResultModel);
     }
+    /**
+     * Persists a finished run's result, stamping the owning user resolved
+     * from the request context onto the `owner` column (SAA-595 F1); results
+     * saved without a resolved identity carry no owner.
+     */
     async saveResult(result, ...args) {
-        const { ctxArgs } = (await this.logCtx(args, "saveResult", true)).for(this.saveResult);
+        const { ctx, ctxArgs } = (await this.logCtx(args, "saveResult", true)).for(this.saveResult);
+        const owner = (0, GraphWorkflowService_js_1.graphWorkflowOwnerOf)(ctx);
         const model = new GraphExecutionResultModel_js_1.GraphExecutionResultModel({
             runId: result.runId,
             workflowId: result.workflowId,
+            ...(owner ? { owner } : {}),
             status: result.status,
             inputs: result.inputs,
             outputs: result.outputs,
@@ -35,6 +49,7 @@ let GraphResultService = class GraphResultService extends core_1.ModelService {
         });
         return this.create(model, ...ctxArgs);
     }
+    /** Reads a result row by run id; returns `null` when no result was persisted (never throws). */
     async findByRunId(runId, ...args) {
         const { ctxArgs } = (await this.logCtx(args, "findByRunId", true)).for(this.findByRunId);
         try {

package/lib/cjs/nest/graph/GraphResultService.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"nest/graph/GraphResultService.cjs","sourceRoot":"","sources":["nest/graph/GraphResultService.js"],"names":[],"mappings":";;;AAAA,IAAI,UAAU,GAAG,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,UAAU,UAAU,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI;IACjF,IAAI,CAAC,GAAG,SAAS,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG,MAAM,CAAC,wBAAwB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IAC7H,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,OAAO,CAAC,QAAQ,KAAK,UAAU;QAAE,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;;QAC1H,KAAK,IAAI,CAAC,GAAG,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE;YAAE,IAAI,CAAC,GAAG,UAAU,CAAC,CAAC,CAAC;gBAAE,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC;IAClJ,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;AAClE,CAAC,CAAC;AACF,IAAI,UAAU,GAAG,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC;IACxD,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,OAAO,CAAC,QAAQ,KAAK,UAAU;QAAE,OAAO,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AAC7G,CAAC,CAAC;AACF,yCAAuD;AACvD,iFAA2E;AAC3E,IAAI,kBAAkB,GAAG,MAAM,kBAAmB,SAAQ,mBAAY;IAClE;QACI,KAAK,CAAC,wDAAyB,CAAC,CAAC;IACrC,CAAC;IACD,KAAK,CAAC,UAAU,CAAC,MAAM,EAAE,GAAG,IAAI;QAC5B,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,YAAY,EAAE,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACvF,MAAM,KAAK,GAAG,IAAI,wDAAyB,CAAC;YACxC,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,UAAU,EAAE,MAAM,CAAC,UAAU;SAChC,CAAC,CAAC;QACH,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,OAAO,CAAC,CAAC;IAC1C,CAAC;IACD,KAAK,CAAC,WAAW,CAAC,KAAK,EAAE,GAAG,IAAI;QAC5B,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,aAAa,EAAE,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACzF,IAAI,CAAC;YACD,OAAO,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,OAAO,CAAC,CAAC,CAAC;QAChD,CAAC;QACD,MAAM,CAAC;YACH,OAAO,IAAI,CAAC;QAChB,CAAC;IACL,CAAC;CACJ,CAAC;AAKO,gDAAkB;AAJ3B,6BAAA,kBAAkB,GAAG,UAAU,CAAC;IAC5B,IAAA,cAAO,EAAC,wDAAyB,CAAC;IAClC,UAAU,CAAC,mBAAmB,EAAE,EAAE,CAAC;CACtC,EAAE,kBAAkB,CAAC,CAAC;AAEvB,8CAA8C"}
+{"version":3,"file":"nest/graph/GraphResultService.cjs","sourceRoot":"","sources":["nest/graph/GraphResultService.js"],"names":[],"mappings":";;;AAAA,IAAI,UAAU,GAAG,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,UAAU,UAAU,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI;IACjF,IAAI,CAAC,GAAG,SAAS,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG,MAAM,CAAC,wBAAwB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IAC7H,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,OAAO,CAAC,QAAQ,KAAK,UAAU;QAAE,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;;QAC1H,KAAK,IAAI,CAAC,GAAG,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE;YAAE,IAAI,CAAC,GAAG,UAAU,CAAC,CAAC,CAAC;gBAAE,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC;IAClJ,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;AAClE,CAAC,CAAC;AACF,IAAI,UAAU,GAAG,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC;IACxD,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,OAAO,CAAC,QAAQ,KAAK,UAAU;QAAE,OAAO,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AAC7G,CAAC,CAAC;AACF,yCAAuD;AACvD,iFAA2E;AAC3E,uEAAiE;AACjE;;;;;GAKG;AACH,IAAI,kBAAkB,GAAG,MAAM,kBAAmB,SAAQ,mBAAY;IAClE;QACI,KAAK,CAAC,wDAAyB,CAAC,CAAC;IACrC,CAAC;IACD;;;;OAIG;IACH,KAAK,CAAC,UAAU,CAAC,MAAM,EAAE,GAAG,IAAI;QAC5B,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,YAAY,EAAE,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC5F,MAAM,KAAK,GAAG,IAAA,8CAAoB,EAAC,GAAG,CAAC,CAAC;QACxC,MAAM,KAAK,GAAG,IAAI,wDAAyB,CAAC;YACxC,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3B,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,UAAU,EAAE,MAAM,CAAC,UAAU;SAChC,CAAC,CAAC;QACH,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,OAAO,CAAC,CAAC;IAC1C,CAAC;IACD,gGAAgG;IAChG,KAAK,CAAC,WAAW,CAAC,KAAK,EAAE,GAAG,IAAI;QAC5B,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,aAAa,EAAE,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACzF,IAAI,CAAC;YACD,OAAO,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,OAAO,CAAC,CAAC,CAAC;QAChD,CAAC;QACD,MAAM,CAAC;YACH,OAAO,IAAI,CAAC;QAChB,CAAC;IACL,CAAC;CACJ,CAAC;AAKO,gDAAkB;AAJ3B,6BAAA,kBAAkB,GAAG,UAAU,CAAC;IAC5B,IAAA,cAAO,EAAC,wDAAyB,CAAC;IAClC,UAAU,CAAC,mBAAmB,EAAE,EAAE,CAAC;CACtC,EAAE,kBAAkB,CAAC,CAAC;AAEvB,8CAA8C"}