@decaf-ts/integrations 0.8.0 → 0.9.0

package/lib/esm/nest/graph/GraphExecutionController.js

@@ -10,19 +10,43 @@ var __metadata = (this && this.__metadata) || function (k, v) {
 var __param = (this && this.__param) || function (paramIndex, decorator) {
     return function (target, key) { decorator(target, key, paramIndex); }
 };
-import { Controller, Post, Put, Get, Body, Param, Sse, Optional, Inject, NotFoundException, } from "@nestjs/common";
+/**
+ * @module integrations/nest/graph/GraphExecutionController
+ * @summary Legacy synchronous graph execution surface (SAA-595).
+ * @description The deprecated `POST /graph/execute` endpoint, the deprecated
+ * global `SSE /graph/events` stream, plus the run-result read and workflow
+ * persistence endpoints. All execution now flows through
+ * {@link GraphRunService}; only canonical documents are accepted (inline
+ * node/definition/executor/ports/component fields are rejected at the
+ * boundary) and the global stream is disabled unless explicitly enabled.
+ */
+import { Controller, Post, Put, Get, Body, Param, Sse, Optional, Inject, NotFoundException, HttpException, HttpStatus, } from "@nestjs/common";
 import { Subject, Observable } from "rxjs";
-import { map } from "rxjs/operators";
-import { GraphExecutionEngine, } from "./../../graph/index.js";
+import { concatMap, filter } from "rxjs/operators";
+import { GraphExecutionEngine, GraphRunService, } from "./../../graph/index.js";
+import { isGraphWorkflowDocumentShape, } from "@decaf-ts/ui-decorators/graph";
+import { ValidationError, NotFoundError } from "@decaf-ts/db-decorators";
+import { AuthorizationError, ForbiddenError } from "@decaf-ts/core";
 import { DecafRequestContext } from "@decaf-ts/for-nest";
 import { GraphResultService } from "./GraphResultService.js";
-import { GraphWorkflowService } from "./GraphWorkflowService.js";
+import { GraphWorkflowService, graphWorkflowOwnerOf } from "./GraphWorkflowService.js";
+/** DI token for {@link GraphExecutionControllerOptions}. */
+export const GRAPH_EXECUTION_OPTIONS = "GRAPH_EXECUTION_OPTIONS";
+/**
+ * Legacy synchronous graph execution surface (DECAF-50 §4.14/§4.18): the
+ * `POST /graph/execute` endpoint (deprecated in favour of the run lifecycle
+ * at `POST /graph/runs`), the legacy `PUT /graph/:id/execute` alias, and the
+ * deprecated global SSE event stream. All execution now flows through
+ * {@link GraphRunService}; only canonical documents are accepted.
+ */
 let GraphExecutionController = class GraphExecutionController {
-    constructor(engine, resultService, workflowService, requestContext) {
+    constructor(engine, resultService, workflowService, runService, requestContext, options = {}) {
         this.engine = engine;
         this.resultService = resultService;
         this.workflowService = workflowService;
+        this.runService = runService;
         this.requestContext = requestContext;
+        this.options = options;
         this.eventSubject = new Subject();
         this.engine.observe({
             refresh: async (event) => {
@@ -30,22 +54,67 @@ let GraphExecutionController = class GraphExecutionController {
             },
         });
     }
+    /**
+     * @deprecated DECAF-50 §4.14/§4.18 cutover: the synchronous execution
+     * endpoint is deprecated in favour of the asynchronous run lifecycle
+     * (`POST /graph/runs`). It is kept, not removed, within this
+     * specification. Only canonical {@link GraphWorkflowDocument} payloads are
+     * accepted; legacy definition/snapshot payloads and inline
+     * node/definition/executor/ports/component fields are rejected (§4.16).
+     */
     async execute(body) {
-        const result = await this.engine.execute(body.workflow, body.inputs ?? {});
-        try {
-            await this.resultService.saveResult(result, this.requestContext);
-        }
-        catch {
-            // persistence failures must not mask a successful execution result
+        const document = this.requireCanonicalDocument(body.workflow);
+        const owner = graphWorkflowOwnerOf(this.requestContext) ?? null;
+        const run = await this.runService.executeAndWait({ workflow: document, inputs: body.inputs ?? {} }, owner, this.concurrencyKeyOf(owner), this.requestContext);
+        if (run.result) {
+            try {
+                await this.resultService.saveResult(run.result, this.requestContext);
+            }
+            catch {
+                // persistence failures must not mask a successful execution result
+            }
         }
         return {
-            runId: result.runId,
-            status: result.status,
-            outputs: result.outputs,
+            runId: run.runId,
+            status: run.status,
+            outputs: (run.result?.outputs ?? {}),
         };
     }
+    /**
+     * DECAF-50 §4.16 cutover: only a canonical {@link GraphWorkflowDocument}
+     * is accepted. Payloads resembling legacy decorated definitions, snapshot
+     * wrappers, or any other non-canonical shape are rejected with a Decaf
+     * {@link ValidationError} before the engine or planner sees them.
+     */
+    requireCanonicalDocument(workflow) {
+        if (isGraphWorkflowDocumentShape(workflow)) {
+            return workflow;
+        }
+        throw new ValidationError("Execution payload must be a canonical GraphWorkflowDocument: legacy workflow definitions, snapshot wrappers and inline node/definition/executor/ports/component payloads are rejected; compile decorated workflows client-side via GraphDecoratedWorkflowCompiler or use POST /graph/runs");
+    }
+    /**
+     * @deprecated DECAF-50 §4.15 cutover (SAA-595 F2): the global `/graph/events`
+     * stream is disabled by default — the run-scoped, authorized, replayable
+     * `GET /graph/runs/{runId}/events` transport is the canonical stream. Hosts
+     * with a residual transition need may re-enable it explicitly via
+     * {@link GraphExecutionControllerOptions.enableGlobalEventStream}; every
+     * event is then ownership-gated at emit: a connected caller only ever
+     * receives events for runs they own.
+     */
     events() {
-        return this.eventSubject.asObservable().pipe(map((event) => ({
+        if (this.options.enableGlobalEventStream !== true) {
+            throw new HttpException("The global graph event stream is disabled; use the run-scoped GET /graph/runs/{runId}/events transport", HttpStatus.NOT_FOUND);
+        }
+        const caller = graphWorkflowOwnerOf(this.requestContext) ?? null;
+        return this.eventSubject.asObservable().pipe(concatMap(async (event) => {
+            return (await this.callerOwnsRun(caller, event.runId))
+                ? this.messageOf(event)
+                : null;
+        }), filter((message) => message !== null));
+    }
+    /** Encodes one engine event in the global stream's wire format: a `["graph", type, runId, envelope]` SSE message tuple. */
+    messageOf(event) {
+        return {
             type: "message",
             data: JSON.stringify([
                 "graph",
@@ -69,9 +138,32 @@ let GraphExecutionController = class GraphExecutionController {
                     timestamp: event.timestamp.toISOString(),
                 },
             ]),
-        })));
+        };
     }
+    /** Strict ownership gate for the global stream: only run owners see their runs' events. */
+    async callerOwnsRun(caller, runId) {
+        try {
+            const run = await this.runService.getRun(runId, caller, this.requestContext);
+            return (run.ownerUser ?? null) === caller;
+        }
+        catch {
+            return false;
+        }
+    }
+    /**
+     * Reads a persisted execution result by run id (DECAF-50 §4.18). Gated
+     * through the centralized run ownership check first (SAA-595 F1): a
+     * cross-user or anonymous caller gets `403` for a run owned by another
+     * user before any result data is read.
+     */
     async getResult(runId) {
+        const owner = graphWorkflowOwnerOf(this.requestContext) ?? null;
+        try {
+            await this.runService.getRun(runId, owner, this.requestContext);
+        }
+        catch (e) {
+            throw graphExecutionHttpErrorOf(e, runId);
+        }
         const model = await this.resultService.findByRunId(runId, this.requestContext);
         if (!model) {
             throw new NotFoundException(`No graph execution result found for runId '${runId}'`);
@@ -87,6 +179,13 @@ let GraphExecutionController = class GraphExecutionController {
             finishedAt: model.finishedAt,
         };
     }
+    /** Concurrency-bucket key for the per-caller run cap: the owner, else the request IP, else a shared anonymous bucket. */
+    concurrencyKeyOf(owner) {
+        if (owner)
+            return owner;
+        const ip = this.requestContext?.request?.ip;
+        return ip ? `ip:${ip}` : "anonymous";
+    }
     async saveWorkflow(id, snapshot) {
         const model = await this.workflowService.saveSnapshot(id, snapshot, this.requestContext);
         return { workflowId: id, savedAt: model.updatedAt.toISOString() };
@@ -122,12 +221,37 @@ __decorate([
 ], GraphExecutionController.prototype, "saveWorkflow", null);
 GraphExecutionController = __decorate([
     Controller("graph"),
-    __param(3, Optional()),
-    __param(3, Inject(DecafRequestContext)),
+    __param(4, Optional()),
+    __param(4, Inject(DecafRequestContext)),
+    __param(5, Optional()),
+    __param(5, Inject(GRAPH_EXECUTION_OPTIONS)),
     __metadata("design:paramtypes", [GraphExecutionEngine,
         GraphResultService,
         GraphWorkflowService,
-        DecafRequestContext])
+        GraphRunService,
+        DecafRequestContext, Object])
 ], GraphExecutionController);
 export { GraphExecutionController };
+/**
+ * Maps a thrown Decaf error to the Nest HTTP equivalent for the execution
+ * surface: ownership/authorization failures become `403` (naming the run),
+ * missing resources `404`, validation failures `400`, and anything else
+ * surfaces as `500` with its message. Nest {@link HttpException}s pass
+ * through unchanged.
+ */
+function graphExecutionHttpErrorOf(e, runId) {
+    if (e instanceof ForbiddenError || e instanceof AuthorizationError) {
+        return new HttpException(runId ? `Graph run '${runId}' is owned by another user` : e.message, HttpStatus.FORBIDDEN);
+    }
+    if (e instanceof NotFoundError) {
+        return new NotFoundException(e.message);
+    }
+    if (e instanceof ValidationError) {
+        return new HttpException(e.message, HttpStatus.BAD_REQUEST);
+    }
+    if (e instanceof HttpException)
+        return e;
+    const message = e instanceof Error ? e.message : String(e);
+    return new HttpException(message, HttpStatus.INTERNAL_SERVER_ERROR);
+}
 //# sourceMappingURL=GraphExecutionController.js.map

package/lib/esm/nest/graph/GraphExecutionController.js.map

@@ -1 +1 @@
-{"version":3,"file":"GraphExecutionController.js","sourceRoot":"","sources":["../../../../src/nest/graph/GraphExecutionController.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,OAAO,EACL,UAAU,EACV,IAAI,EACJ,GAAG,EACH,GAAG,EACH,IAAI,EACJ,KAAK,EACL,GAAG,EAEH,QAAQ,EACR,MAAM,EACN,iBAAiB,GAClB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,MAAM,CAAC;AAC3C,OAAO,EAAE,GAAG,EAAE,MAAM,gBAAgB,CAAC;AAErC,OAAO,EACL,oBAAoB,GAGrB,+BAAoB;AAErB,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAEzD,OAAO,EAAE,kBAAkB,EAAE,gCAA6B;AAC1D,OAAO,EAAE,oBAAoB,EAAE,kCAA+B;AAcvD,IAAM,wBAAwB,GAA9B,MAAM,wBAAwB;IAGnC,YACmB,MAA4B,EAC5B,aAAiC,EACjC,eAAqC,EACb,cAAqD;QAH7E,WAAM,GAAN,MAAM,CAAsB;QAC5B,kBAAa,GAAb,aAAa,CAAoB;QACjC,oBAAe,GAAf,eAAe,CAAsB;QACI,mBAAc,GAAd,cAAc,CAAsB;QAN/E,iBAAY,GAAG,IAAI,OAAO,EAAuB,CAAC;QAQjE,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;YAClB,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE;gBACvB,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAChC,CAAC;SACF,CAAC,CAAC;IACL,CAAC;IAGK,AAAN,KAAK,CAAC,OAAO,CACH,IAAyB;QAEjC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;QAE3E,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC;QACnE,CAAC;QAAC,MAAM,CAAC;YACP,mEAAmE;QACrE,CAAC;QAED,OAAO;YACL,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,OAAO,EAAE,MAAM,CAAC,OAAO;SACxB,CAAC;IACJ,CAAC;IAGD,MAAM;QACJ,OAAO,IAAI,CAAC,YAAY,CAAC,YAAY,EAAE,CAAC,IAAI,CAC1C,GAAG,CACD,CAAC,KAA0B,EAAgB,EAAE,CAAC,CAAC;YAC7C,IAAI,EAAE,SAAS;YACf,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,OAAO;gBACP,KAAK,CAAC,IAAI;gBACV,KAAK,CAAC,KAAK;gBACX;oBACE,EAAE,EAAE,KAAK,CAAC,EAAE;oBACZ,QAAQ,EAAE,KAAK,CAAC,QAAQ;oBACxB,IAAI,EAAE,KAAK,CAAC,IAAI;oBAChB,KAAK,EAAE,KAAK,CAAC,KAAK;oBAClB,WAAW,EAAE,KAAK,CAAC,WAAW;oBAC9B,UAAU,EAAE,KAAK,CAAC,UAAU;oBAC5B,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,IAAI,EAAE,KAAK,CAAC,IAAI;oBAChB,SAAS,EAAE,KAAK,CAAC,SAAS;oBAC1B,IAAI,EAAE,KAAK,CAAC,IAAI;oBAChB,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,OAAO,EAAE,KAAK,CAAC,OAAO;oBACtB,KAAK,EAAE,KAAK,CAAC,KAAK;oBAClB,SAAS,EAAE,KAAK,CAAC,SAAS,CAAC,WAAW,EAAE;iBACzC;aACF,CAAC;SACH,CAAC,CACH,CACF,CAAC;IACJ,CAAC;IAGK,AAAN,KAAK,CAAC,SAAS,CAAiB,KAAa;QAC3C,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC,KAAK,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC;QAC/E,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,iBAAiB,CACzB,8CAA8C,KAAK,GAAG,CACvD,CAAC;QACJ,CAAC;QACD,OAAO;YACL,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,UAAU,EAAE,KAAK,CAAC,UAAU;SAC7B,CAAC;IACJ,CAAC;IAGK,AAAN,KAAK,CAAC,YAAY,CACH,EAAU,EACf,QAAiC;QAEzC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,YAAY,CAAC,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC;QACzF,OAAO,EAAE,UAAU,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,CAAC,SAAS,CAAC,WAAW,EAAE,EAAE,CAAC;IACpE,CAAC;CACF,CAAA;AA/EO;IADL,IAAI,CAAC,SAAS,CAAC;IAEb,WAAA,IAAI,EAAE,CAAA;;;;uDAeR;AAGD;IADC,GAAG,CAAC,QAAQ,CAAC;;;oCACJ,UAAU;sDA8BnB;AAGK;IADL,GAAG,CAAC,gBAAgB,CAAC;IACL,WAAA,KAAK,CAAC,OAAO,CAAC,CAAA;;;;yDAiB9B;AAGK;IADL,GAAG,CAAC,cAAc,CAAC;IAEjB,WAAA,KAAK,CAAC,IAAI,CAAC,CAAA;IACX,WAAA,IAAI,EAAE,CAAA;;;;4DAIR;AA/FU,wBAAwB;IADpC,UAAU,CAAC,OAAO,CAAC;IAQf,WAAA,QAAQ,EAAE,CAAA;IAAE,WAAA,MAAM,CAAC,mBAAmB,CAAC,CAAA;qCAHf,oBAAoB;QACb,kBAAkB;QAChB,oBAAoB;QACqB,mBAAmB;GAPrF,wBAAwB,CAgGpC"}
+{"version":3,"file":"GraphExecutionController.js","sourceRoot":"","sources":["../../../../src/nest/graph/GraphExecutionController.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA;;;;;;;;;GASG;AACH,OAAO,EACL,UAAU,EACV,IAAI,EACJ,GAAG,EACH,GAAG,EACH,IAAI,EACJ,KAAK,EACL,GAAG,EAEH,QAAQ,EACR,MAAM,EACN,iBAAiB,EACjB,aAAa,EACb,UAAU,GACX,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,MAAM,CAAC;AAC3C,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAC;AAGnD,OAAO,EACL,oBAAoB,EACpB,eAAe,GAEhB,+BAAoB;AACrB,OAAO,EACL,4BAA4B,GAE7B,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AACzE,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AACpE,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAEzD,OAAO,EAAE,kBAAkB,EAAE,gCAA6B;AAC1D,OAAO,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,kCAA+B;AAEpF,4DAA4D;AAC5D,MAAM,CAAC,MAAM,uBAAuB,GAAG,yBAAyB,CAAC;AAoCjE;;;;;;GAMG;AAEI,IAAM,wBAAwB,GAA9B,MAAM,wBAAwB;IAGnC,YACmB,MAA4B,EAC5B,aAAiC,EACjC,eAAqC,EACrC,UAA2B,EACH,cAAqD,EAE9F,UAA4D,EAAE;QAN7C,WAAM,GAAN,MAAM,CAAsB;QAC5B,kBAAa,GAAb,aAAa,CAAoB;QACjC,oBAAe,GAAf,eAAe,CAAsB;QACrC,eAAU,GAAV,UAAU,CAAiB;QACc,mBAAc,GAAd,cAAc,CAAsB;QAE7E,YAAO,GAAP,OAAO,CAAsC;QAT/C,iBAAY,GAAG,IAAI,OAAO,EAAuB,CAAC;QAWjE,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;YAClB,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE;gBACvB,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAChC,CAAC;SACF,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;OAOG;IAEG,AAAN,KAAK,CAAC,OAAO,CACH,IAAyB;QAEjC,MAAM,QAAQ,GAAG,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC9D,MAAM,KAAK,GAAG,oBAAoB,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,IAAI,CAAC;QAChE,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,cAAc,CAC9C,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,EAAE,EAAE,EACjD,KAAK,EACL,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,EAC5B,IAAI,CAAC,cAAc,CACpB,CAAC;QAEF,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;YACf,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC;YACvE,CAAC;YAAC,MAAM,CAAC;gBACP,mEAAmE;YACrE,CAAC;QACH,CAAC;QAED,OAAO;YACL,KAAK,EAAE,GAAG,CAAC,KAAK;YAChB,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,OAAO,EAAE,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,IAAI,EAAE,CAA4B;SAChE,CAAC;IACJ,CAAC;IAED;;;;;OAKG;IACK,wBAAwB,CAC9B,QAA+B;QAE/B,IAAI,4BAA4B,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC3C,OAAO,QAAQ,CAAC;QAClB,CAAC;QACD,MAAM,IAAI,eAAe,CACvB,2RAA2R,CAC5R,CAAC;IACJ,CAAC;IAED;;;;;;;;OAQG;IAEH,MAAM;QACJ,IAAI,IAAI,CAAC,OAAO,CAAC,uBAAuB,KAAK,IAAI,EAAE,CAAC;YAClD,MAAM,IAAI,aAAa,CACrB,wGAAwG,EACxG,UAAU,CAAC,SAAS,CACrB,CAAC;QACJ,CAAC;QACD,MAAM,MAAM,GAAG,oBAAoB,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,IAAI,CAAC;QACjE,OAAO,IAAI,CAAC,YAAY,CAAC,YAAY,EAAE,CAAC,IAAI,CAC1C,SAAS,CAAC,KAAK,EAAE,KAA0B,EAAE,EAAE;YAC7C,OAAO,CAAC,MAAM,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;gBACpD,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;gBACvB,CAAC,CAAC,IAAI,CAAC;QACX,CAAC,CAAC,EACF,MAAM,CAAC,CAAC,OAAO,EAA2B,EAAE,CAAC,OAAO,KAAK,IAAI,CAAC,CAC/D,CAAC;IACJ,CAAC;IAED,2HAA2H;IACnH,SAAS,CAAC,KAA0B;QAC1C,OAAO;YACL,IAAI,EAAE,SAAS;YACf,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,OAAO;gBACP,KAAK,CAAC,IAAI;gBACV,KAAK,CAAC,KAAK;gBACX;oBACE,EAAE,EAAE,KAAK,CAAC,EAAE;oBACZ,QAAQ,EAAE,KAAK,CAAC,QAAQ;oBACxB,IAAI,EAAE,KAAK,CAAC,IAAI;oBAChB,KAAK,EAAE,KAAK,CAAC,KAAK;oBAClB,WAAW,EAAE,KAAK,CAAC,WAAW;oBAC9B,UAAU,EAAE,KAAK,CAAC,UAAU;oBAC5B,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,IAAI,EAAE,KAAK,CAAC,IAAI;oBAChB,SAAS,EAAE,KAAK,CAAC,SAAS;oBAC1B,IAAI,EAAE,KAAK,CAAC,IAAI;oBAChB,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,OAAO,EAAE,KAAK,CAAC,OAAO;oBACtB,KAAK,EAAE,KAAK,CAAC,KAAK;oBAClB,SAAS,EAAE,KAAK,CAAC,SAAS,CAAC,WAAW,EAAE;iBACzC;aACF,CAAC;SACH,CAAC;IACJ,CAAC;IAED,2FAA2F;IACnF,KAAK,CAAC,aAAa,CACzB,MAAqB,EACrB,KAAa;QAEb,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CACtC,KAAK,EACL,MAAM,EACN,IAAI,CAAC,cAAc,CACpB,CAAC;YACF,OAAO,CAAC,GAAG,CAAC,SAAS,IAAI,IAAI,CAAC,KAAK,MAAM,CAAC;QAC5C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED;;;;;OAKG;IAEG,AAAN,KAAK,CAAC,SAAS,CAAiB,KAAa;QAC3C,MAAM,KAAK,GAAG,oBAAoB,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,IAAI,CAAC;QAChE,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC;QAClE,CAAC;QAAC,OAAO,CAAU,EAAE,CAAC;YACpB,MAAM,yBAAyB,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QAC5C,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC,KAAK,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC;QAC/E,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,iBAAiB,CACzB,8CAA8C,KAAK,GAAG,CACvD,CAAC;QACJ,CAAC;QACD,OAAO;YACL,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,UAAU,EAAE,KAAK,CAAC,UAAU;SAC7B,CAAC;IACJ,CAAC;IAED,yHAAyH;IACjH,gBAAgB,CAAC,KAAoB;QAC3C,IAAI,KAAK;YAAE,OAAO,KAAK,CAAC;QACxB,MAAM,EAAE,GACN,IAAI,CAAC,cAGN,EAAE,OAAO,EAAE,EAAE,CAAC;QACf,OAAO,EAAE,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC;IACvC,CAAC;IAGK,AAAN,KAAK,CAAC,YAAY,CACH,EAAU,EACf,QAAiC;QAEzC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,YAAY,CAAC,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC;QACzF,OAAO,EAAE,UAAU,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,CAAC,SAAS,CAAC,WAAW,EAAE,EAAE,CAAC;IACpE,CAAC;CACF,CAAA;AAzKO;IADL,IAAI,CAAC,SAAS,CAAC;IAEb,WAAA,IAAI,EAAE,CAAA;;;;uDAwBR;AA6BD;IADC,GAAG,CAAC,QAAQ,CAAC;;;oCACJ,UAAU;sDAgBnB;AAuDK;IADL,GAAG,CAAC,gBAAgB,CAAC;IACL,WAAA,KAAK,CAAC,OAAO,CAAC,CAAA;;;;yDAuB9B;AAcK;IADL,GAAG,CAAC,cAAc,CAAC;IAEjB,WAAA,KAAK,CAAC,IAAI,CAAC,CAAA;IACX,WAAA,IAAI,EAAE,CAAA;;;;4DAIR;AApMU,wBAAwB;IADpC,UAAU,CAAC,OAAO,CAAC;IASf,WAAA,QAAQ,EAAE,CAAA;IAAE,WAAA,MAAM,CAAC,mBAAmB,CAAC,CAAA;IACvC,WAAA,QAAQ,EAAE,CAAA;IAAE,WAAA,MAAM,CAAC,uBAAuB,CAAC,CAAA;qCALnB,oBAAoB;QACb,kBAAkB;QAChB,oBAAoB;QACzB,eAAe;QAC+B,mBAAmB;GARrF,wBAAwB,CAqMpC;;AAED;;;;;;GAMG;AACH,SAAS,yBAAyB,CAAC,CAAU,EAAE,KAAc;IAC3D,IAAI,CAAC,YAAY,cAAc,IAAI,CAAC,YAAY,kBAAkB,EAAE,CAAC;QACnE,OAAO,IAAI,aAAa,CACtB,KAAK,CAAC,CAAC,CAAC,cAAc,KAAK,4BAA4B,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,EACnE,UAAU,CAAC,SAAS,CACrB,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,YAAY,aAAa,EAAE,CAAC;QAC/B,OAAO,IAAI,iBAAiB,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IAC1C,CAAC;IACD,IAAI,CAAC,YAAY,eAAe,EAAE,CAAC;QACjC,OAAO,IAAI,aAAa,CAAC,CAAC,CAAC,OAAO,EAAE,UAAU,CAAC,WAAW,CAAC,CAAC;IAC9D,CAAC;IACD,IAAI,CAAC,YAAY,aAAa;QAAE,OAAO,CAAC,CAAC;IACzC,MAAM,OAAO,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAC3D,OAAO,IAAI,aAAa,CAAC,OAAO,EAAE,UAAU,CAAC,qBAAqB,CAAC,CAAC;AACtE,CAAC"}

package/lib/esm/nest/graph/GraphExecutionModule.js

@@ -5,16 +5,46 @@ var __decorate = (this && this.__decorate) || function (decorators, target, key,
     return c > 3 && r && Object.defineProperty(target, key, r), r;
 };
 var GraphExecutionModule_1;
+/**
+ * @module integrations/nest/graph/GraphExecutionModule
+ * @summary NestJS graph backend module wiring (DECAF-50 §4.10–§4.16).
+ * @description The dynamic module assembling the graph backend: the
+ * {@link GraphExecutionEngine}, the trusted {@link GraphNodeCatalogue} with
+ * built-in registrations, the run lifecycle services and stores, and the
+ * HTTP/SSE controllers (catalogue, workflows, runs, legacy execution) — each
+ * configurable with authentication enforcement and backend-enforced
+ * resource limits via {@link GraphExecutionModuleOptions}.
+ */
 import { Module } from "@nestjs/common";
-import { GraphExecutionEngine } from "./../../graph/index.js";
+import { GraphExecutionEngine, GraphNodeCatalogue, GraphRunService, InMemoryGraphRunEventStore, } from "./../../graph/index.js";
 import { createDemoEngineConfig } from "./GraphExecutorRegistryFactory.js";
-import { GraphExecutionController } from "./GraphExecutionController.js";
+import { GraphExecutionController, GRAPH_EXECUTION_OPTIONS } from "./GraphExecutionController.js";
+import { GraphNodeCatalogueController, GRAPH_CATALOGUE_CONTROLLER_OPTIONS, } from "./GraphNodeCatalogueController.js";
 import { GraphResultService } from "./GraphResultService.js";
-import { GraphWorkflowService } from "./GraphWorkflowService.js";
+import { GraphRunModelService } from "./GraphRunModelService.js";
+import { GraphRunController, GRAPH_RUN_OPTIONS, } from "./GraphRunController.js";
+import { GraphWorkflowService, GRAPH_WORKFLOW_OPTIONS, } from "./GraphWorkflowService.js";
+import { GraphWorkflowController, } from "./GraphWorkflowController.js";
+/**
+ * NestJS module wiring the graph execution stack (DECAF-50 §4.13–§4.16): the
+ * engine, catalogue, workflow persistence, run lifecycle/SSE controllers,
+ * and their services. Configure via {@link GraphExecutionModule.forRoot}.
+ */
 let GraphExecutionModule = GraphExecutionModule_1 = class GraphExecutionModule {
+    /**
+     * Creates the dynamic module. Boots a default RamAdapter for standalone
+     * development unless `initAdapter` is `false`. Wires the optional
+     * {@link GraphCredentialAuthorizer} into the engine's stage-8 validator
+     * (SAA-595 F8), and applies the workflow options to the
+     * {@link GraphWorkflowService} singleton via its {@link
+     * GraphWorkflowService.configure} method, since `@service` constructor
+     * injection does not forward provider options reliably.
+     */
     static forRoot(options = {}) {
         const initAdapter = options.initAdapter ?? true;
         const adapterUser = options.adapterUser ?? "graph-engine";
+        let engineConfig;
+        const sharedConfig = () => (engineConfig ??= createDemoEngineConfig());
         const providers = [
             {
                 provide: GraphExecutionEngine,
@@ -26,20 +56,77 @@ let GraphExecutionModule = GraphExecutionModule_1 = class GraphExecutionModule {
                         Adapter.setCurrent(RamFlavour);
                         new RamAdapter({ user: adapterUser });
                     }
-                    const config = createDemoEngineConfig();
-                    const engine = new GraphExecutionEngine(config);
-                    config.onEngineCreated(engine);
-                    return engine;
+                    const config = sharedConfig();
+                    return new GraphExecutionEngine(options.credentialAuthorizer
+                        ? { ...config, credentialAuthorizer: options.credentialAuthorizer }
+                        : config);
                 },
             },
+            {
+                provide: GraphNodeCatalogue,
+                useFactory: () => sharedConfig().catalogue,
+            },
+            {
+                provide: GRAPH_CATALOGUE_CONTROLLER_OPTIONS,
+                useValue: options.catalogue ?? {},
+            },
+            {
+                provide: GRAPH_WORKFLOW_OPTIONS,
+                useValue: (options.workflows ?? {}),
+            },
+            {
+                provide: GRAPH_RUN_OPTIONS,
+                useValue: (options.runs ?? {}),
+            },
+            {
+                provide: GRAPH_EXECUTION_OPTIONS,
+                useValue: (options.execution ?? {}),
+            },
+            {
+                provide: InMemoryGraphRunEventStore,
+                useFactory: () => new InMemoryGraphRunEventStore(options.runs?.limits ?? {}),
+            },
             GraphResultService,
-            GraphWorkflowService,
+            GraphRunModelService,
+            {
+                provide: GraphWorkflowService,
+                useFactory: (workflowOptions) => new GraphWorkflowService().configure(workflowOptions),
+                inject: [GRAPH_WORKFLOW_OPTIONS],
+            },
+            {
+                provide: GraphRunService,
+                useFactory: (engine, runStore, eventStore, workflowService) => new GraphRunService(engine, runStore, eventStore, {
+                    limits: (options.runs?.limits ?? {}),
+                    allowAnonymousAccess: options.runs?.allowAnonymousAccess === true,
+                    documentResolver: {
+                        resolve: async (workflowId, _ownerUser, ...args) => workflowService.getDocument(workflowId, ...args),
+                    },
+                }),
+                inject: [
+                    GraphExecutionEngine,
+                    GraphRunModelService,
+                    InMemoryGraphRunEventStore,
+                    GraphWorkflowService,
+                ],
+            },
         ];
         return {
             module: GraphExecutionModule_1,
-            controllers: [GraphExecutionController],
+            controllers: [
+                GraphExecutionController,
+                GraphNodeCatalogueController,
+                GraphWorkflowController,
+                GraphRunController,
+            ],
             providers,
-            exports: [GraphExecutionEngine, GraphResultService, GraphWorkflowService],
+            exports: [
+                GraphExecutionEngine,
+                GraphNodeCatalogue,
+                GraphResultService,
+                GraphRunModelService,
+                GraphRunService,
+                GraphWorkflowService,
+            ],
         };
     }
 };

package/lib/esm/nest/graph/GraphExecutionModule.js.map

@@ -1 +1 @@
-{"version":3,"file":"GraphExecutionModule.js","sourceRoot":"","sources":["../../../../src/nest/graph/GraphExecutionModule.ts"],"names":[],"mappings":";;;;;;;AAAA,OAAO,EAAiB,MAAM,EAAY,MAAM,gBAAgB,CAAC;AAEjE,OAAO,EAAE,oBAAoB,EAAE,+BAAoB;AACnD,OAAO,EAAE,sBAAsB,EAAE,0CAAuC;AACxE,OAAO,EAAE,wBAAwB,EAAE,sCAAmC;AACtE,OAAO,EAAE,kBAAkB,EAAE,gCAA6B;AAC1D,OAAO,EAAE,oBAAoB,EAAE,kCAA+B;AAmBvD,IAAM,oBAAoB,4BAA1B,MAAM,oBAAoB;IAC/B,MAAM,CAAC,OAAO,CACZ,UAAuC,EAAE;QAEzC,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,IAAI,CAAC;QAChD,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,cAAc,CAAC;QAE1D,MAAM,SAAS,GAAe;YAC5B;gBACE,OAAO,EAAE,oBAAoB;gBAC7B,UAAU,EAAE,KAAK,IAAI,EAAE;oBACrB,IAAI,WAAW,EAAE,CAAC;wBAChB,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;wBACtE,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,MAAM,CAAC,gBAAgB,CAAC,CAAC;wBACnD,UAAU,CAAC,UAAU,EAAE,CAAC;wBACxB,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;wBAC/B,IAAI,UAAU,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;oBACxC,CAAC;oBACD,MAAM,MAAM,GAAG,sBAAsB,EAAE,CAAC;oBACxC,MAAM,MAAM,GAAG,IAAI,oBAAoB,CAAC,MAAM,CAAC,CAAC;oBAChD,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;oBAC/B,OAAO,MAAM,CAAC;gBAChB,CAAC;aACF;YACD,kBAAkB;YAClB,oBAAoB;SACrB,CAAC;QAEF,OAAO;YACL,MAAM,EAAE,sBAAoB;YAC5B,WAAW,EAAE,CAAC,wBAAwB,CAAC;YACvC,SAAS;YACT,OAAO,EAAE,CAAC,oBAAoB,EAAE,kBAAkB,EAAE,oBAAoB,CAAC;SAC1E,CAAC;IACJ,CAAC;CACF,CAAA;AAnCY,oBAAoB;IADhC,MAAM,CAAC,EAAE,CAAC;GACE,oBAAoB,CAmChC"}
+{"version":3,"file":"GraphExecutionModule.js","sourceRoot":"","sources":["../../../../src/nest/graph/GraphExecutionModule.ts"],"names":[],"mappings":";;;;;;;AAAA;;;;;;;;;GASG;AACH,OAAO,EAAiB,MAAM,EAAY,MAAM,gBAAgB,CAAC;AAGjE,OAAO,EACL,oBAAoB,EACpB,kBAAkB,EAClB,eAAe,EACf,0BAA0B,GAE3B,+BAAoB;AACrB,OAAO,EAAE,sBAAsB,EAAE,0CAAuC;AACxE,OAAO,EAAE,wBAAwB,EAAE,uBAAuB,EAAwC,sCAAmC;AACrI,OAAO,EACL,4BAA4B,EAC5B,kCAAkC,GAEnC,0CAAuC;AACxC,OAAO,EAAE,kBAAkB,EAAE,gCAA6B;AAC1D,OAAO,EAAE,oBAAoB,EAAE,kCAA+B;AAC9D,OAAO,EACL,kBAAkB,EAClB,iBAAiB,GAElB,gCAA6B;AAC9B,OAAO,EACL,oBAAoB,EACpB,sBAAsB,GAEvB,kCAA+B;AAChC,OAAO,EACL,uBAAuB,GAExB,qCAAkC;AAoDnC;;;;GAIG;AAEI,IAAM,oBAAoB,4BAA1B,MAAM,oBAAoB;IAC/B;;;;;;;;OAQG;IACH,MAAM,CAAC,OAAO,CACZ,UAAuC,EAAE;QAEzC,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,IAAI,CAAC;QAChD,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,cAAc,CAAC;QAE1D,IAAI,YAAmE,CAAC;QACxE,MAAM,YAAY,GAAG,GAAG,EAAE,CAAC,CAAC,YAAY,KAAK,sBAAsB,EAAE,CAAC,CAAC;QAEvE,MAAM,SAAS,GAAe;YAC5B;gBACE,OAAO,EAAE,oBAAoB;gBAC7B,UAAU,EAAE,KAAK,IAAI,EAAE;oBACrB,IAAI,WAAW,EAAE,CAAC;wBAChB,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;wBACtE,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,MAAM,CAAC,gBAAgB,CAAC,CAAC;wBACnD,UAAU,CAAC,UAAU,EAAE,CAAC;wBACxB,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;wBAC/B,IAAI,UAAU,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;oBACxC,CAAC;oBACD,MAAM,MAAM,GAAG,YAAY,EAAE,CAAC;oBAC9B,OAAO,IAAI,oBAAoB,CAC7B,OAAO,CAAC,oBAAoB;wBAC1B,CAAC,CAAC,EAAE,GAAG,MAAM,EAAE,oBAAoB,EAAE,OAAO,CAAC,oBAAoB,EAAE;wBACnE,CAAC,CAAC,MAAM,CACX,CAAC;gBACJ,CAAC;aACF;YACD;gBACE,OAAO,EAAE,kBAAkB;gBAC3B,UAAU,EAAE,GAAG,EAAE,CAAC,YAAY,EAAE,CAAC,SAAS;aAC3C;YACD;gBACE,OAAO,EAAE,kCAAkC;gBAC3C,QAAQ,EAAE,OAAO,CAAC,SAAS,IAAI,EAAE;aAClC;YACD;gBACE,OAAO,EAAE,sBAAsB;gBAC/B,QAAQ,EAAE,CAAC,OAAO,CAAC,SAAS,IAAI,EAAE,CACF;aACjC;YACD;gBACE,OAAO,EAAE,iBAAiB;gBAC1B,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAA8B;aAC5D;YACD;gBACE,OAAO,EAAE,uBAAuB;gBAChC,QAAQ,EAAE,CAAC,OAAO,CAAC,SAAS,IAAI,EAAE,CAAoC;aACvE;YACD;gBACE,OAAO,EAAE,0BAA0B;gBACnC,UAAU,EAAE,GAAG,EAAE,CACf,IAAI,0BAA0B,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,IAAI,EAAE,CAAC;aAC7D;YACD,kBAAkB;YAClB,oBAAoB;YACpB;gBACE,OAAO,EAAE,oBAAoB;gBAC7B,UAAU,EAAE,CACV,eACgC,EAChC,EAAE,CAAC,IAAI,oBAAoB,EAAE,CAAC,SAAS,CAAC,eAAe,CAAC;gBAC1D,MAAM,EAAE,CAAC,sBAAsB,CAAC;aACjC;YACD;gBACE,OAAO,EAAE,eAAe;gBACxB,UAAU,EAAE,CACV,MAA4B,EAC5B,QAA8B,EAC9B,UAAsC,EACtC,eAAqC,EACrC,EAAE,CACF,IAAI,eAAe,CAAC,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE;oBAChD,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,IAAI,EAAE,CAAmB;oBACtD,oBAAoB,EAAE,OAAO,CAAC,IAAI,EAAE,oBAAoB,KAAK,IAAI;oBACjE,gBAAgB,EAAE;wBAChB,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,UAAU,EAAE,GAAG,IAAI,EAAE,EAAE,CACjD,eAAe,CAAC,WAAW,CAAC,UAAU,EAAE,GAAG,IAAI,CAAC;qBACnD;iBACF,CAAC;gBACJ,MAAM,EAAE;oBACN,oBAAoB;oBACpB,oBAAoB;oBACpB,0BAA0B;oBAC1B,oBAAoB;iBACrB;aACF;SACF,CAAC;QAEF,OAAO;YACL,MAAM,EAAE,sBAAoB;YAC5B,WAAW,EAAE;gBACX,wBAAwB;gBACxB,4BAA4B;gBAC5B,uBAAuB;gBACvB,kBAAkB;aACnB;YACD,SAAS;YACT,OAAO,EAAE;gBACP,oBAAoB;gBACpB,kBAAkB;gBAClB,kBAAkB;gBAClB,oBAAoB;gBACpB,eAAe;gBACf,oBAAoB;aACrB;SACF,CAAC;IACJ,CAAC;CACF,CAAA;AAtHY,oBAAoB;IADhC,MAAM,CAAC,EAAE,CAAC;GACE,oBAAoB,CAsHhC"}

package/lib/esm/nest/graph/GraphExecutionResultModel.js

@@ -9,6 +9,13 @@ var __metadata = (this && this.__metadata) || function (k, v) {
 };
 import { model } from "@decaf-ts/decorator-validation";
 import { BaseModel, column, pk, table } from "@decaf-ts/core";
+/**
+ * Persisted terminal snapshot of one graph run (written by
+ * {@link GraphResultService} after the deprecated synchronous execute
+ * endpoint completes). Keyed by `runId`; the optional `owner` column (added
+ * by SAA-595 F1) records the run's owning user so result reads can be
+ * ownership-gated at the route layer.
+ */
 let GraphExecutionResultModel = class GraphExecutionResultModel extends BaseModel {
     constructor(arg) {
         super(arg);
@@ -22,6 +29,10 @@ __decorate([
     column(),
     __metadata("design:type", String)
 ], GraphExecutionResultModel.prototype, "workflowId", void 0);
+__decorate([
+    column(),
+    __metadata("design:type", String)
+], GraphExecutionResultModel.prototype, "owner", void 0);
 __decorate([
     column(),
     __metadata("design:type", String)

package/lib/esm/nest/graph/GraphExecutionResultModel.js.map

@@ -1 +1 @@
-{"version":3,"file":"GraphExecutionResultModel.js","sourceRoot":"","sources":["../../../../src/nest/graph/GraphExecutionResultModel.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,gCAAgC,CAAC;AACvD,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,gBAAgB,CAAC;AAIvD,IAAM,yBAAyB,GAA/B,MAAM,yBAA0B,SAAQ,SAAS;IAyBtD,YAAY,GAAwC;QAClD,KAAK,CAAC,GAAG,CAAC,CAAC;IACb,CAAC;CACF,CAAA;AA1BC;IADC,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;;wDACxB;AAGf;IADC,MAAM,EAAE;;6DACW;AAGpB;IADC,MAAM,EAAE;;yDACO;AAGhB;IADC,MAAM,EAAE;;yDACwB;AAGjC;IADC,MAAM,EAAE;;0DACyB;AAGlC;IADC,MAAM,EAAE;;8DAC6B;AAGtC;IADC,MAAM,EAAE;8BACG,IAAI;4DAAC;AAGjB;IADC,MAAM,EAAE;8BACI,IAAI;6DAAC;AAvBP,yBAAyB;IAFrC,KAAK,CAAC,wBAAwB,CAAC;IAC/B,KAAK,EAAE;;GACK,yBAAyB,CA4BrC"}
+{"version":3,"file":"GraphExecutionResultModel.js","sourceRoot":"","sources":["../../../../src/nest/graph/GraphExecutionResultModel.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,gCAAgC,CAAC;AACvD,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,gBAAgB,CAAC;AAE9D;;;;;;GAMG;AAGI,IAAM,yBAAyB,GAA/B,MAAM,yBAA0B,SAAQ,SAAS;IAgCtD,YAAY,GAAwC;QAClD,KAAK,CAAC,GAAG,CAAC,CAAC;IACb,CAAC;CACF,CAAA;AAjCC;IADC,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;;wDACxB;AAGf;IADC,MAAM,EAAE;;6DACW;AAOpB;IADC,MAAM,EAAE;;wDACM;AAGf;IADC,MAAM,EAAE;;yDACO;AAGhB;IADC,MAAM,EAAE;;yDACwB;AAGjC;IADC,MAAM,EAAE;;0DACyB;AAGlC;IADC,MAAM,EAAE;;8DAC6B;AAGtC;IADC,MAAM,EAAE;8BACG,IAAI;4DAAC;AAGjB;IADC,MAAM,EAAE;8BACI,IAAI;6DAAC;AA9BP,yBAAyB;IAFrC,KAAK,CAAC,wBAAwB,CAAC;IAC/B,KAAK,EAAE;;GACK,yBAAyB,CAmCrC"}

package/lib/esm/nest/graph/GraphExecutorRegistryFactory.js

@@ -1,72 +1,78 @@
 /**
  * @module integrations/nest/graph/GraphExecutorRegistryFactory
- * @summary Factory that builds a populated {@link GraphNodeExecutorRegistry}.
- * @description Creates a registry pre-loaded with the demo executors used by
- * the graph execution backend's sample workflows. The executors cover the
- * flow-control kinds (including Code, Log, and Switch with code conditions),
- * the DECAF-48 `core.utility.log` Log node, the agent kind, and the loop
- * kinds. Additional executors can be registered on the returned registry
- * before it is handed to the {@link GraphExecutionEngine}.
+ * @summary Factory that builds a populated {@link GraphNodeCatalogue} and its
+ * {@link GraphNodeExecutorRegistry} compatibility facade.
+ * @description Creates a catalogue pre-loaded with the DECAF-50 built-in
+ * manifest+executor registrations plus the demo executors used by the graph
+ * execution backend's sample workflows. The catalogue is the single
+ * kind→registration map (DECAF-50 §4.7); the returned registry is a facade
+ * over it, so no second executor map exists.
  */
-import { GraphNodeExecutorRegistry, ForeachGraphNodeExecutor, WhileGraphNodeExecutor, UntilGraphNodeExecutor, CodeGraphNodeExecutor, LogGraphNodeExecutor, SwitchGraphNodeExecutor, BreakGraphNodeExecutor, IsolatedVmCodeSandboxEvaluator, } from "./../../graph/index.js";
-import { GraphBreakSignal } from "./../../graph/engine/errors/GraphBreakSignal.js";
-const executorMap = {
-    "math.add": (input) => ({ sum: Number(input.a) + Number(input.b) }),
-    "math.multiply": (input) => ({ product: Number(input.x) * 2 }),
-    "core.flow.map": (input) => ({ result: { mapped: input["value"] ?? input } }),
-    "core.flow.delay": (input) => ({ valueOut: input["value"] ?? input }),
-    "core.flow.return": (input) => ({ result: input["value"] ?? input }),
-    "core.flow.merge": (input) => ({ merged: input["values"] ?? input }),
-    "core.flow.if": (input) => ({ then: input["value"] ?? input }),
-    "core.flow.parallel": (input) => ({ branches: [input["value"] ?? input] }),
-    "core.flow.errorBoundary": (input) => ({ result: input["value"] ?? input }),
-    "core.flow.humanApproval": (input) => ({ approved: input["value"] ?? input }),
-    "core.flow.break": (input) => {
-        throw new GraphBreakSignal(input["value"]);
-    },
-    "core.agent": (input) => ({
-        response: `[Agent response] ${String(input["prompt"] ?? "")}`,
-        actions: [],
+import { GraphNodeCatalogue, GraphNodeExecutorRegistry, builtInGraphNodeRegistrations, registerBuiltInGraphNodes, IsolatedVmCodeSandboxEvaluator, } from "./../../graph/index.js";
+const demoExecutorMap = {
+    "math.add": (request) => ({
+        sum: Number(request.inputs.a) + Number(request.inputs.b),
+    }),
+    "math.multiply": (request) => ({
+        product: Number(request.inputs.x) * 2,
     }),
 };
 /**
- * Builds a {@link GraphNodeExecutorRegistry} populated with the demo executors.
- *
- * Executors are registered by **node kind** (the same key the engine uses to
- * resolve executors at runtime). The for-angular demo nodes use the kind as
- * their tag, so the same key works for both dispatch-by-kind and
- * dispatch-by-tag.
+ * Builds a {@link GraphNodeCatalogue} populated with the built-in
+ * manifest+executor registrations and the arithmetic demo executors, wrapped
+ * with its {@link GraphNodeExecutorRegistry} facade.
  *
- * Registered kinds:
- * - `math.add`, `math.multiply` — arithmetic demo executors.
- * - `core.flow.*` — flow-control kinds (map, delay, return, merge, if,
- *   parallel, errorBoundary, humanApproval). The `core.flow.code`,
- *   `core.flow.log`, and `core.flow.switch` kinds are registered in
- *   `onEngineCreated` via their real executors because Code and Switch
- *   need the engine's `codeSandboxEvaluator`.
- * - `core.agent` — agent node.
- * - `core.loop.foreach`, `core.loop.while`, `core.loop.until` — loop executors
- *   (registered after the engine is created via `onEngineCreated`).
+ * The built-in kinds whose executors need the engine instance (loops, Code,
+ * Switch) are only registered by {@link createDemoEngineConfig}'s
+ * `onEngineCreated` hook via {@link registerEngineBoundGraphNodes}.
  *
- * @param extra - Additional executors to merge into the registry.
- * @returns A populated registry ready for use with {@link GraphExecutionEngine}.
+ * @param extra - Additional executor registrations to merge into the catalogue.
+ * @returns The populated catalogue and its registry facade.
  */
-export function createGraphExecutorRegistry(extra) {
-    const registry = new GraphNodeExecutorRegistry();
-    for (const [kind, fn] of Object.entries(executorMap)) {
-        registry.register(kind, { execute: fn });
+export function createGraphNodeCatalogue(extra) {
+    const catalogue = new GraphNodeCatalogue();
+    registerBuiltInGraphNodes(catalogue);
+    for (const [kind, fn] of Object.entries(demoExecutorMap)) {
+        catalogue.registerExecutor(kind, { execute: fn });
     }
     if (extra) {
         for (const [kind, executor] of Object.entries(extra)) {
-            registry.register(kind, executor);
+            catalogue.registerExecutor(kind, executor);
         }
     }
-    return registry;
+    return { catalogue, registry: new GraphNodeExecutorRegistry(catalogue) };
+}
+/**
+ * Builds a {@link GraphNodeExecutorRegistry} facade over a populated
+ * {@link GraphNodeCatalogue} (compatibility entry point).
+ *
+ * @param extra - Additional executor registrations to merge into the catalogue.
+ * @returns The registry facade; the underlying catalogue is available as
+ * `registry.catalog`.
+ */
+export function createGraphExecutorRegistry(extra) {
+    return createGraphNodeCatalogue(extra).registry;
+}
+/**
+ * Registers the engine-bound built-in kinds (loops, Code, Switch) on an
+ * existing catalogue, replacing their placeholder-free entries with the real
+ * engine-bound executors.
+ *
+ * @param catalogue - The catalogue receiving the registrations.
+ * @param engine - The engine instance the loop/Code/Switch executors bind to.
+ * @returns The catalogue with the engine-bound registrations applied.
+ */
+export function registerEngineBoundGraphNodes(catalogue, engine) {
+    for (const registration of builtInGraphNodeRegistrations(engine)) {
+        catalogue.register(registration, { replace: true });
+    }
+    return catalogue;
 }
 /**
- * Builds a {@link GraphExecutionEngineConfig} populated with all demo executors
- * including loop executors that need a back-reference to the engine and the
- * Code node executor that needs the engine's `codeSandboxEvaluator`.
+ * Builds a `GraphExecutionEngineConfig` populated with all built-in
+ * registrations including loop executors that need a back-reference to the
+ * engine and the Code node executor that needs the engine's
+ * `codeSandboxEvaluator`.
  *
  * The config wires an {@link IsolatedVmCodeSandboxEvaluator} (backed by
  * `isolated-vm`) so the Code Node runs in a truly isolated V8 sandbox.
@@ -74,21 +80,15 @@ export function createGraphExecutorRegistry(extra) {
  * @returns A config object ready for `new GraphExecutionEngine(config)`.
  */
 export function createDemoEngineConfig() {
-    const registry = createGraphExecutorRegistry();
+    const { catalogue, registry } = createGraphNodeCatalogue();
     const codeSandboxEvaluator = new IsolatedVmCodeSandboxEvaluator();
     return {
+        catalogue,
         registry,
         defaultOptions: { failFast: false },
         codeSandboxEvaluator,
         onEngineCreated: (engine) => {
-            registry.register("core.loop.foreach", new ForeachGraphNodeExecutor(engine));
-            registry.register("core.loop.while", new WhileGraphNodeExecutor(engine));
-            registry.register("core.loop.until", new UntilGraphNodeExecutor(engine));
-            registry.register("core.flow.code", new CodeGraphNodeExecutor(engine));
-            registry.register("core.flow.log", new LogGraphNodeExecutor());
-            registry.register("core.utility.log", new LogGraphNodeExecutor());
-            registry.register("core.flow.switch", new SwitchGraphNodeExecutor(engine));
-            registry.register("core.flow.break", new BreakGraphNodeExecutor());
+            registerEngineBoundGraphNodes(catalogue, engine);
         },
     };
 }

package/lib/esm/nest/graph/GraphExecutorRegistryFactory.js.map

@@ -1 +1 @@
-{"version":3,"file":"GraphExecutorRegistryFactory.js","sourceRoot":"","sources":["../../../../src/nest/graph/GraphExecutorRegistryFactory.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EACL,yBAAyB,EAKzB,wBAAwB,EACxB,sBAAsB,EACtB,sBAAsB,EACtB,qBAAqB,EACrB,oBAAoB,EACpB,uBAAuB,EACvB,sBAAsB,EACtB,8BAA8B,GAC/B,+BAAoB;AACrB,OAAO,EAAE,gBAAgB,EAAE,wDAAmD;AAO9E,MAAM,WAAW,GAA+B;IAC9C,UAAU,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IACnE,eAAe,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;IAC9D,eAAe,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,IAAI,KAAK,EAAE,EAAE,CAAC;IAC7E,iBAAiB,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,IAAI,KAAK,EAAE,CAAC;IACrE,kBAAkB,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,IAAI,KAAK,EAAE,CAAC;IACpE,iBAAiB,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,IAAI,KAAK,EAAE,CAAC;IACpE,cAAc,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,IAAI,KAAK,EAAE,CAAC;IAC9D,oBAAoB,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;IAC1E,yBAAyB,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,IAAI,KAAK,EAAE,CAAC;IAC3E,yBAAyB,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,IAAI,KAAK,EAAE,CAAC;IAC7E,iBAAiB,EAAE,CAAC,KAAK,EAAE,EAAE;QAC3B,MAAM,IAAI,gBAAgB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;IAC7C,CAAC;IACD,YAAY,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACxB,QAAQ,EAAE,oBAAoB,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,EAAE;QAC7D,OAAO,EAAE,EAAE;KACZ,CAAC;CACH,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,UAAU,2BAA2B,CACzC,KAAyC;IAEzC,MAAM,QAAQ,GAAG,IAAI,yBAAyB,EAAE,CAAC;IAEjD,KAAK,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;QACrD,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;IAC3C,CAAC;IAED,IAAI,KAAK,EAAE,CAAC;QACV,KAAK,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACrD,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QACpC,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,sBAAsB;IAMpC,MAAM,QAAQ,GAAG,2BAA2B,EAAE,CAAC;IAC/C,MAAM,oBAAoB,GAAG,IAAI,8BAA8B,EAAE,CAAC;IAElE,OAAO;QACL,QAAQ;QACR,cAAc,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE;QACnC,oBAAoB;QACpB,eAAe,EAAE,CAAC,MAA4B,EAAE,EAAE;YAChD,QAAQ,CAAC,QAAQ,CAAC,mBAAmB,EAAE,IAAI,wBAAwB,CAAC,MAAM,CAAC,CAAC,CAAC;YAC7E,QAAQ,CAAC,QAAQ,CAAC,iBAAiB,EAAE,IAAI,sBAAsB,CAAC,MAAM,CAAC,CAAC,CAAC;YACzE,QAAQ,CAAC,QAAQ,CAAC,iBAAiB,EAAE,IAAI,sBAAsB,CAAC,MAAM,CAAC,CAAC,CAAC;YACzE,QAAQ,CAAC,QAAQ,CAAC,gBAAgB,EAAE,IAAI,qBAAqB,CAAC,MAAM,CAAC,CAAC,CAAC;YACvE,QAAQ,CAAC,QAAQ,CAAC,eAAe,EAAE,IAAI,oBAAoB,EAAE,CAAC,CAAC;YAC/D,QAAQ,CAAC,QAAQ,CAAC,kBAAkB,EAAE,IAAI,oBAAoB,EAAE,CAAC,CAAC;YAClE,QAAQ,CAAC,QAAQ,CAAC,kBAAkB,EAAE,IAAI,uBAAuB,CAAC,MAAM,CAAC,CAAC,CAAC;YAC3E,QAAQ,CAAC,QAAQ,CAAC,iBAAiB,EAAE,IAAI,sBAAsB,EAAE,CAAC,CAAC;QACrE,CAAC;KACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"GraphExecutorRegistryFactory.js","sourceRoot":"","sources":["../../../../src/nest/graph/GraphExecutorRegistryFactory.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EACL,kBAAkB,EAClB,yBAAyB,EAEzB,6BAA6B,EAC7B,yBAAyB,EAGzB,8BAA8B,GAC/B,+BAAoB;AAOrB,MAAM,eAAe,GAA+B;IAClD,UAAU,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QACxB,GAAG,EAAE,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;KACzD,CAAC;IACF,eAAe,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QAC7B,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC;KACtC,CAAC;CACH,CAAC;AAEF;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,wBAAwB,CACtC,KAAyC;IAEzC,MAAM,SAAS,GAAG,IAAI,kBAAkB,EAAE,CAAC;IAC3C,yBAAyB,CAAC,SAAS,CAAC,CAAC;IAErC,KAAK,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE,CAAC;QACzD,SAAS,CAAC,gBAAgB,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;IACpD,CAAC;IAED,IAAI,KAAK,EAAE,CAAC;QACV,KAAK,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACrD,SAAS,CAAC,gBAAgB,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QAC7C,CAAC;IACH,CAAC;IAED,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,yBAAyB,CAAC,SAAS,CAAC,EAAE,CAAC;AAC3E,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,2BAA2B,CACzC,KAAyC;IAEzC,OAAO,wBAAwB,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC;AAClD,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,6BAA6B,CAC3C,SAA6B,EAC7B,MAA4B;IAE5B,KAAK,MAAM,YAAY,IAAI,6BAA6B,CAAC,MAAM,CAAC,EAAE,CAAC;QACjE,SAAS,CAAC,QAAQ,CAAC,YAAY,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,sBAAsB;IAOpC,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,wBAAwB,EAAE,CAAC;IAC3D,MAAM,oBAAoB,GAAG,IAAI,8BAA8B,EAAE,CAAC;IAElE,OAAO;QACL,SAAS;QACT,QAAQ;QACR,cAAc,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE;QACnC,oBAAoB;QACpB,eAAe,EAAE,CAAC,MAA4B,EAAE,EAAE;YAChD,6BAA6B,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QACnD,CAAC;KACF,CAAC;AACJ,CAAC"}