@dudousxd/nestjs-catalog 0.5.0 → 0.6.0

package/dist/catalog.service.js

@@ -14,6 +14,7 @@ var __param = (this && this.__param) || function (paramIndex, decorator) {
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.CatalogService = void 0;
 const common_1 = require("@nestjs/common");
+const catalog_events_1 = require("./catalog.events");
 const catalog_options_1 = require("./catalog.options");
 const catalog_query_1 = require("./catalog.query");
 const catalog_query_cache_1 = require("./catalog.query-cache");
@@ -79,6 +80,17 @@ let CatalogService = class CatalogService {
     visibleColumns(type) {
         return type.properties.filter((p) => !p.hidden && p.type !== 'json');
     }
+    /**
+     * Rows of one type, paged.
+     *
+     * **No principal, and so no access control.** This applies the guardrails that
+     * hold for every caller — the type exists, the page is bounded, the sort names
+     * a real column — and none that depend on who is asking: a classified column
+     * comes back to whoever the host's guard let through the door. That is the
+     * library's declare-and-enforce split, written out at length above `mayWrite`
+     * in `catalog.principal.ts`. A host that wants per-principal reads passes this
+     * page through `readableObjectPage`.
+     */
     async readObjects(typeName, query) {
         const type = this.registry.getType(typeName);
         if (!type)
@@ -213,23 +225,120 @@ let CatalogService = class CatalogService {
             throw new common_1.NotFoundException(`No saved query ${id}`);
         return found;
     }
-    saveQuery(input, createdBy) {
+    // ---------------------------------------------------------------------------
+    // Sharing is audited, and the six methods below are where.
+    //
+    // `shared` on a saved query or a dashboard is the entire embed boundary: it is
+    // the one field that hands another company's frontend rows out of this
+    // catalog, and it is set by a person clicking a toggle. So it is emitted the
+    // way every other governance decision here is — `type.curated`,
+    // `transform.changed` — rather than being the one that is not.
+    //
+    // Two rules hold across all six, and both are load-bearing:
+    //
+    // *On the transition, never on the write.* A save that leaves the flag where
+    // it was is not a sharing decision. A trail that recorded one per keystroke
+    // would be a trail people learn to scroll past, which costs more than the
+    // entries are worth. Un-sharing is emitted too, under the same event name with
+    // `shared: false` — a trail that records only grants cannot answer "was this
+    // still shared last Tuesday".
+    //
+    // *Against what the store returned, never against what the caller asked for.*
+    // A store that ignores `shared` must not produce an entry claiming access was
+    // granted when nothing was.
+    //
+    // **Deleting is a transition.** For a while the first rule was applied only to
+    // the writes, so revoking access with the delete button — which is how it
+    // actually gets revoked — left nothing at all, and the only way to date the
+    // revocation was to notice that a thing had stopped appearing. Deleting
+    // something shared now emits `shared: false` with `deleted: true`, under the
+    // same event name, so the one filter anybody runs answers the whole question.
+    //
+    // Deleting something *un*shared emits nothing, and that is the first rule
+    // rather than an exception to it: an unshared query was not reachable from
+    // outside before and is not reachable after, so no access changed. Recording
+    // it would put entries carrying no grant and no revocation on the one channel
+    // whose entries all carry one. A host that wants every deletion in the trail
+    // wants a workspace-lifecycle event, which is a different event and not this
+    // one.
+    // ---------------------------------------------------------------------------
+    /**
+     * @param createdBy who saved it — the row's author and the audit entry's
+     * actor. The host's resolved principal id where the host resolves one; see
+     * the enforcement note in `catalog.principal.ts` for why this library cannot
+     * work it out itself.
+     */
+    async saveQuery(input, createdBy) {
         if (!input?.name?.trim()) {
             throw new common_1.BadRequestException('A saved query needs a name.');
         }
         (0, catalog_query_1.assertReadOnlyShape)(input.sql ?? '');
-        return this.requireWorkspace().saveQuery(input, createdBy);
+        const saved = await this.requireWorkspace().saveQuery(input, createdBy);
+        // Born shared is a grant with nothing to transition from: an outside
+        // application can fetch it the moment this returns. Born unshared is not an
+        // event at all.
+        if (saved.shared) {
+            (0, catalog_events_1.emitCatalog)('query.shared', {
+                savedQueryId: saved.id,
+                name: saved.name,
+                shared: true,
+                principalId: createdBy,
+            });
+        }
+        return saved;
     }
-    async updateSavedQuery(id, input) {
+    /** @param changedBy who made the change, for the audit trail. */
+    async updateSavedQuery(id, input, changedBy) {
         if (input.sql !== undefined)
             (0, catalog_query_1.assertReadOnlyShape)(input.sql);
+        // Read the old value only when the flag is in play. A transition needs both
+        // ends, and every other edit — a rename, a new chart type — should not pay
+        // for a round trip it does not need.
+        const before = input.shared === undefined ? undefined : await this.requireWorkspace().getSavedQuery(id);
         const updated = await this.requireWorkspace().updateSavedQuery(id, input);
         if (!updated)
             throw new common_1.NotFoundException(`No saved query ${id}`);
+        // `before` missing while the update succeeded means a store that disagrees
+        // with itself about whether this query exists. The transition is then
+        // unknowable, and an audit trail should over-record a grant rather than
+        // miss one, so it is emitted.
+        if (input.shared !== undefined && before?.shared !== updated.shared) {
+            (0, catalog_events_1.emitCatalog)('query.shared', {
+                savedQueryId: updated.id,
+                name: updated.name,
+                shared: updated.shared,
+                principalId: changedBy,
+            });
+        }
         return updated;
     }
-    deleteSavedQuery(id) {
-        return this.requireWorkspace().deleteSavedQuery(id);
+    /**
+     * @param deletedBy who deleted it, for the audit trail. Required rather than
+     * defaulted, matching `saveQuery` and `updateSavedQuery`: a default would
+     * quietly attribute revocations to nobody in every caller that was not
+     * updated, and the trail's whole value here is that it names somebody.
+     */
+    async deleteSavedQuery(id, deletedBy) {
+        // Read unconditionally, unlike `updateSavedQuery` which reads only when the
+        // flag is in play. A delete carries no statement of intent about `shared`,
+        // so there is nothing to branch on — whether this revokes access is a
+        // property of the row, and the row is about to stop existing.
+        const before = await this.requireWorkspace().getSavedQuery(id);
+        const deleted = await this.requireWorkspace().deleteSavedQuery(id);
+        // Only when the store says it went, and only when it was reachable from
+        // outside beforehand. A delete that removed nothing revoked nothing, and an
+        // unshared query's deletion is not an access event.
+        if (deleted && before?.shared) {
+            (0, catalog_events_1.emitCatalog)('query.shared', {
+                savedQueryId: before.id,
+                // The name as it last read. Nothing can look it up after this.
+                name: before.name,
+                shared: false,
+                principalId: deletedBy,
+                deleted: true,
+            });
+        }
+        return deleted;
     }
     /** Runs a saved query, honouring the TTL it was saved with. */
     async runSavedQuery(id, maxRows) {
@@ -250,20 +359,61 @@ let CatalogService = class CatalogService {
             throw new common_1.NotFoundException(`No dashboard ${id}`);
         return found;
     }
-    saveDashboard(input, createdBy) {
+    /**
+     * `shared` is declared here, and that is not cosmetic.
+     *
+     * The store has always accepted it, so it worked as long as the body reached
+     * the store untouched. A host with a whitelisting `ValidationPipe` — the
+     * normal, recommended configuration — strips a property no type declares, and
+     * the symptom is a dashboard that cannot be shared with no error anywhere:
+     * the toggle saves, the response says `shared: false`, and the embed API
+     * keeps answering 403 for a board somebody just shared.
+     */
+    async saveDashboard(input, createdBy) {
         if (!input?.name?.trim()) {
             throw new common_1.BadRequestException('A dashboard needs a name.');
         }
-        return this.requireWorkspace().saveDashboard(input, createdBy);
+        const saved = await this.requireWorkspace().saveDashboard(input, createdBy);
+        if (saved.shared) {
+            (0, catalog_events_1.emitCatalog)('dashboard.shared', {
+                dashboardId: saved.id,
+                name: saved.name,
+                shared: true,
+                principalId: createdBy,
+            });
+        }
+        return saved;
     }
-    async updateDashboard(id, input) {
+    /** @param changedBy who made the change, for the audit trail. */
+    async updateDashboard(id, input, changedBy) {
+        const before = input.shared === undefined ? undefined : await this.requireWorkspace().getDashboard(id);
         const updated = await this.requireWorkspace().updateDashboard(id, input);
         if (!updated)
             throw new common_1.NotFoundException(`No dashboard ${id}`);
+        if (input.shared !== undefined && before?.shared !== updated.shared) {
+            (0, catalog_events_1.emitCatalog)('dashboard.shared', {
+                dashboardId: updated.id,
+                name: updated.name,
+                shared: updated.shared,
+                principalId: changedBy,
+            });
+        }
         return updated;
     }
-    deleteDashboard(id) {
-        return this.requireWorkspace().deleteDashboard(id);
+    /** @param deletedBy who deleted it. See {@link deleteSavedQuery}. */
+    async deleteDashboard(id, deletedBy) {
+        const before = await this.requireWorkspace().getDashboard(id);
+        const deleted = await this.requireWorkspace().deleteDashboard(id);
+        if (deleted && before?.shared) {
+            (0, catalog_events_1.emitCatalog)('dashboard.shared', {
+                dashboardId: before.id,
+                name: before.name,
+                shared: false,
+                principalId: deletedBy,
+                deleted: true,
+            });
+        }
+        return deleted;
     }
     // ---------------------------------------------------------------------------
     // Embed: what another application's frontend gets.
@@ -298,8 +448,16 @@ let CatalogService = class CatalogService {
             })),
         };
     }
-    /** One chart, rendered. */
-    async embedChart(savedQueryId, layout) {
+    /**
+     * One chart, rendered.
+     *
+     * `placement` is what the dashboard card said, and it is honoured rather than
+     * merely carried: a card's `title` and `library` exist to override the saved
+     * query on THIS board, so an embed that ignored them would show a different
+     * heading and a different chart from the console for the same dashboard —
+     * silently, with nothing thrown and nothing logged.
+     */
+    async embedChart(savedQueryId, placement) {
         const saved = await this.getSavedQuery(savedQueryId);
         if (!saved.shared) {
             throw new common_1.ForbiddenException(`"${saved.name}" has not been shared. Mark it shared in the console to make it embeddable.`);
@@ -308,12 +466,15 @@ let CatalogService = class CatalogService {
             sql: saved.sql,
             cacheTtlSeconds: saved.cacheTtlSeconds,
         });
+        // A card whose title was cleared falls back to the query's name rather than
+        // embedding a blank heading — an empty override is the absence of one.
+        const overridden = placement?.title?.trim();
         return {
             id: saved.id,
-            title: saved.name,
+            title: overridden ? overridden : saved.name,
             description: saved.description,
-            visualization: saved.visualization,
-            layout,
+            visualization: (0, catalog_workspace_1.embeddedVisualization)(saved.visualization, placement?.library),
+            layout: placement ? { width: placement.width, position: placement.position } : undefined,
             columns: result.columns,
             rows: result.rows,
             rowCount: result.rowCount,
@@ -336,6 +497,10 @@ let CatalogService = class CatalogService {
                 charts.push(await this.embedChart(card.savedQueryId, {
                     width: card.width,
                     position: card.position,
+                    // Everything the card says about this chart, not only where it
+                    // sits. See `EmbeddedChartPlacement`.
+                    ...(card.title !== undefined ? { title: card.title } : {}),
+                    ...(card.library !== undefined ? { library: card.library } : {}),
                 }));
             }
             catch {

package/dist/catalog.types.d.ts

@@ -166,7 +166,13 @@ export interface CatalogObjectPage {
     size: number;
     total: number;
     pages: number;
-    /** Only the visible, non-redacted columns, in overlay order. */
+    /**
+     * The visible, non-blob columns, in overlay order.
+     *
+     * Visible means "not hidden by the overlay". It does **not** mean redacted for
+     * a caller: a classified column is here, with its `classification` on it, and
+     * dropping it is the host's move — see `readableObjectPage`.
+     */
     columns: Array<{
         name: string;
         displayName: string;

package/dist/catalog.workspace.d.ts

@@ -34,8 +34,16 @@ export interface SavedQuery {
      * relations, so working out "which types does this touch" means parsing the
      * statement — and a permission derived from a parser is a permission that
      * silently widens the day the parser meets a query it did not expect. Marking
-     * it shared is a decision a person made, and it shows up in the audit trail
-     * as one.
+     * it shared is a decision a person made, and it shows up in the audit trail as
+     * one: `CatalogService` emits `query.shared` on the transition, in both
+     * directions, naming whoever made it. Deleting a shared query is one of those
+     * directions — it revokes outside access as surely as the toggle does — and is
+     * emitted the same way, with `deleted: true` to say which ending it was.
+     *
+     * That last sentence was a claim before it was true — the event did not exist
+     * and the one act that hands an outside application data left no trace at all.
+     * Anything written here about what is recorded should be checkable against
+     * `CATALOG_EVENTS` and an emit site.
      */
     shared: boolean;
 }
@@ -71,7 +79,11 @@ export interface Dashboard {
     createdAt: string;
     updatedAt: string;
     cards: DashboardCard[];
-    /** Fetchable through the embed API by an application with `catalog:embed`. */
+    /**
+     * Fetchable through the embed API by an application with `catalog:embed`.
+     *
+     * Audited the same way {@link SavedQuery.shared} is, as `dashboard.shared`.
+     */
     shared: boolean;
 }
 export interface DashboardCard {
@@ -225,11 +237,17 @@ export interface CatalogTrace {
     /**
      * True when the whole story fits inside one tick of the recorder's clock.
      *
-     * Worth saying out loud rather than quietly drawing zero-width bars: with a
-     * second-resolution timestamp column a fast load has no measurable internal
-     * timing at all, and a waterfall drawn from it would be a picture of rounding
-     * error. Ordering is still correct — see the lifecycle rank the store sorts
-     * by — but proportions are not, and a consumer should say so.
+     * Worth saying out loud rather than quietly drawing zero-width bars: when a
+     * load finishes inside one tick it has no measurable internal timing at all,
+     * and a waterfall drawn from it would be a picture of rounding error.
+     * Ordering is still correct — see the lifecycle rank the store sorts by — but
+     * proportions are not, and a consumer should say so.
+     *
+     * How coarse a tick is belongs to the store, not to this field: read
+     * `clockResolutionMs` rather than assuming. The bundled MySQL store keeps
+     * milliseconds, so this is now true only of loads that really did finish
+     * inside one — and of rows written before that column was widened, which
+     * collapse onto a whole second and are honestly still coarse.
      */
     coarse: boolean;
     /** Ordered: what started it first, how it ended last. */
@@ -414,11 +432,53 @@ export interface EmbeddedDashboard {
     charts: EmbeddedChart[];
     generatedAt: string;
 }
+/**
+ * What the *card* says about a chart, as opposed to what the saved query says.
+ *
+ * A card carries two kinds of statement and they are easy to conflate. Width
+ * and position are a hint about the grid, which a consumer may ignore. `title`
+ * and `library` are overrides — the board's answer to a question the query has
+ * already answered — and dropping them is not a hint being ignored, it is the
+ * embed disagreeing with the console about the same dashboard.
+ */
+export interface EmbeddedChartPlacement {
+    width: number;
+    position: number;
+    /** The card's title override. Blank or absent falls back to the query's name. */
+    title?: string;
+    /** The card's library override. Absent falls back to the query's own. */
+    library?: string;
+}
+/**
+ * Which library draws an embedded chart, given the two places that can say.
+ *
+ * The server twin of `visualizationFor` in the React package, and it must stay
+ * the same rule: the card wins, then the query, then the built-in renderer. Two
+ * different precedences for one field would mean the console and an embedding
+ * application draw the same board differently, which is exactly the bug the
+ * override exists to prevent.
+ *
+ * Restated here rather than imported, because a server package must not depend
+ * on a React one. Kept as a named function rather than two lines inside
+ * `embedChart` for the same reason the React side did: a precedence a test can
+ * hold by name cannot drift silently.
+ *
+ * When neither chose, the key is ABSENT rather than explicitly undefined — this
+ * shape is serialised to a consumer, and "the key is there and empty" is a
+ * different statement from "nobody chose".
+ */
+export declare function embeddedVisualization(saved: QueryVisualization | undefined, cardLibrary: string | undefined): QueryVisualization;
 export interface CatalogWorkspaceStore {
     listSavedQueries(): Promise<SavedQuery[]>;
     getSavedQuery(id: string): Promise<SavedQuery | undefined>;
     saveQuery(input: SaveQueryInput, createdBy: string): Promise<SavedQuery>;
     updateSavedQuery(id: string, input: Partial<SaveQueryInput>): Promise<SavedQuery | undefined>;
+    /**
+     * Unchanged by the audit work above it: the *store* takes no actor, because a
+     * store that emitted would emit on every path into it and could not tell a
+     * revocation from a cascade. `CatalogService.deleteSavedQuery` reads the row
+     * first and decides.
+     */
     deleteSavedQuery(id: string): Promise<boolean>;
     listDashboards(): Promise<Dashboard[]>;
     getDashboard(id: string): Promise<Dashboard | undefined>;

package/dist/catalog.workspace.js

@@ -13,6 +13,7 @@ exports.CATALOG_WORKSPACE_STORE = exports.CATALOG_TRACE_STORE = exports.CATALOG_
 exports.isCatalogTraceOutcome = isCatalogTraceOutcome;
 exports.traceOutcomeFilter = traceOutcomeFilter;
 exports.isTraceStore = isTraceStore;
+exports.embeddedVisualization = embeddedVisualization;
 exports.isWorkspaceStore = isWorkspaceStore;
 /**
  * The same events, told as stories instead of as a list.
@@ -79,6 +80,28 @@ function isTraceStore(store) {
         store !== null &&
         typeof Reflect.get(store, 'listTraces') === 'function');
 }
+/**
+ * Which library draws an embedded chart, given the two places that can say.
+ *
+ * The server twin of `visualizationFor` in the React package, and it must stay
+ * the same rule: the card wins, then the query, then the built-in renderer. Two
+ * different precedences for one field would mean the console and an embedding
+ * application draw the same board differently, which is exactly the bug the
+ * override exists to prevent.
+ *
+ * Restated here rather than imported, because a server package must not depend
+ * on a React one. Kept as a named function rather than two lines inside
+ * `embedChart` for the same reason the React side did: a precedence a test can
+ * hold by name cannot drift silently.
+ *
+ * When neither chose, the key is ABSENT rather than explicitly undefined — this
+ * shape is serialised to a consumer, and "the key is there and empty" is a
+ * different statement from "nobody chose".
+ */
+function embeddedVisualization(saved, cardLibrary) {
+    const base = saved ?? { kind: 'table' };
+    return cardLibrary ? { ...base, library: cardLibrary } : base;
+}
 function isWorkspaceStore(store) {
     return (typeof store === 'object' &&
         store !== null &&

package/dist/index.d.ts

@@ -12,8 +12,8 @@ export * from './catalog.environment';
 export { QueryCache, toCsv } from './catalog.query-cache';
 export { SubprocessTransformRunner, type TransformRunnerOptions, } from './transform-runner';
 export { CatalogService } from './catalog.service';
-export { type AuditQuery, CATALOG_TRACE_OUTCOMES, CATALOG_TRACE_STORE, CATALOG_WORKSPACE_STORE, type CatalogAuditEvent, type CatalogTrace, type CatalogTraceList, type CatalogTraceOutcome, type CatalogTraceSpan, type CatalogTraceStore, type CatalogTraceTotals, type CatalogUnlinkedList, type CatalogWorkspaceStore, type Dashboard, type DashboardCard, isCatalogTraceOutcome, isTraceStore, isWorkspaceStore, type QueryVisualization, type SaveQueryInput, type SavedQuery, type TraceQuery, traceOutcomeFilter, } from './catalog.workspace';
-export { CATALOG_PRINCIPAL_RESOLVER, type CatalogActor, type CatalogGrants, type CatalogPrincipal, type CatalogPrincipalResolver, type CatalogScope, composePrincipalId, delegatePrincipal, expandScopes, hasScope, parsePrincipalId, PRINCIPAL_ACTOR_SEPARATOR, maySeeClassification, mayRead, mayWrite, StaticKeyPrincipalResolver, } from './catalog.principal';
+export { type AuditQuery, CATALOG_TRACE_OUTCOMES, CATALOG_TRACE_STORE, CATALOG_WORKSPACE_STORE, type CatalogAuditEvent, type CatalogTrace, type CatalogTraceList, type CatalogTraceOutcome, type CatalogTraceSpan, type CatalogTraceStore, type CatalogTraceTotals, type CatalogUnlinkedList, type CatalogWorkspaceStore, type Dashboard, type DashboardCard, type EmbeddedChart, type EmbeddedChartPlacement, type EmbeddedDashboard, embeddedVisualization, isCatalogTraceOutcome, isTraceStore, isWorkspaceStore, type QueryVisualization, type SaveQueryInput, type SavedQuery, type TraceQuery, traceOutcomeFilter, } from './catalog.workspace';
+export { CATALOG_PRINCIPAL_RESOLVER, type CatalogActor, type CatalogGrants, type CatalogPrincipal, type CatalogPrincipalResolver, type CatalogScope, composePrincipalId, delegatePrincipal, expandScopes, hasScope, parsePrincipalId, PRINCIPAL_ACTOR_SEPARATOR, maySeeClassification, mayRead, mayWrite, readableObjectPage, StaticKeyPrincipalResolver, } from './catalog.principal';
 export * from './catalog.access';
 export { assertNoColumnCollisions, CATALOG_RESERVED_COLUMNS, CATALOG_SNAPSHOT_MODES, CATALOG_STORE, type CarryForwardResult, type CatalogColumnCollision, CatalogColumnCollisionError, type CatalogMergeStore, type CatalogReadQuery, type CatalogReadResult, type CatalogReadStore, type CatalogReservedColumn, type CatalogSnapshotMode, type CatalogStoreCapabilities, type CatalogWriteStore, type ColumnCollisionOptions, findColumnCollisions, isCatalogStoreCapabilities, isReservedColumn, isWriteStore, type SnapshotRef, supportsCarryForward, } from './catalog.store';
 export { MikroOrmReadStore } from './stores/mikro-orm-read.store';

package/dist/index.js

@@ -14,8 +14,8 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
     for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.CATALOG_PRINCIPAL_RESOLVER = exports.traceOutcomeFilter = exports.isWorkspaceStore = exports.isTraceStore = exports.isCatalogTraceOutcome = exports.CATALOG_WORKSPACE_STORE = exports.CATALOG_TRACE_STORE = exports.CATALOG_TRACE_OUTCOMES = exports.CatalogService = exports.SubprocessTransformRunner = exports.toCsv = exports.QueryCache = exports.workflowRunOrder = exports.workflowGraphHash = exports.WORKFLOW_NODE_KINDS = exports.WORKFLOW_NODE_ID_PATTERN = exports.WORKFLOW_ISSUE_CODES = exports.WORKFLOW_EXECUTION_MODES = exports.validateWorkflow = exports.TRANSFORM_LANGUAGES = exports.TRANSFORM_RUNNER = exports.supportsWorkflowStages = exports.supportsWorkflows = exports.isWorkflowNodeKind = exports.isWorkflowNode = exports.isWorkflowExecutionMode = exports.isWorkflowEdge = exports.isTransformLanguage = exports.isPipelineStore = exports.isConnectorKind = exports.CONNECTOR_KINDS = exports.CATALOG_PIPELINE_STORE = exports.CatalogRegistry = exports.MikroOrmCatalogRegistry = exports.CATALOG_OVERLAY_STORE = exports.InMemoryCatalogOverlayStore = exports.FileCatalogOverlayStore = exports.CATALOG_OPTIONS = exports.isQueryStore = exports.assertReadOnlyShape = exports.CatalogModule = exports.emitCatalog = exports.channelNameFor = exports.catalogEventPhase = exports.CATALOG_LIB = exports.CATALOG_EVENTS = exports.CATALOG_EVENT_PHASE_FALLBACK = exports.CATALOG_EVENT_PHASE = exports.CatalogType = exports.CatalogProperty = void 0;
-exports.RequireScopes = exports.RequireHuman = exports.REQUIRES_HUMAN = exports.REQUIRED_SCOPES = exports.MikroOrmReadStore = exports.supportsCarryForward = exports.isWriteStore = exports.isReservedColumn = exports.isCatalogStoreCapabilities = exports.findColumnCollisions = exports.CatalogColumnCollisionError = exports.CATALOG_STORE = exports.CATALOG_SNAPSHOT_MODES = exports.CATALOG_RESERVED_COLUMNS = exports.assertNoColumnCollisions = exports.StaticKeyPrincipalResolver = exports.mayWrite = exports.mayRead = exports.maySeeClassification = exports.PRINCIPAL_ACTOR_SEPARATOR = exports.parsePrincipalId = exports.hasScope = exports.expandScopes = exports.delegatePrincipal = exports.composePrincipalId = void 0;
+exports.traceOutcomeFilter = exports.isWorkspaceStore = exports.isTraceStore = exports.isCatalogTraceOutcome = exports.embeddedVisualization = exports.CATALOG_WORKSPACE_STORE = exports.CATALOG_TRACE_STORE = exports.CATALOG_TRACE_OUTCOMES = exports.CatalogService = exports.SubprocessTransformRunner = exports.toCsv = exports.QueryCache = exports.workflowRunOrder = exports.workflowGraphHash = exports.WORKFLOW_NODE_KINDS = exports.WORKFLOW_NODE_ID_PATTERN = exports.WORKFLOW_ISSUE_CODES = exports.WORKFLOW_EXECUTION_MODES = exports.validateWorkflow = exports.TRANSFORM_LANGUAGES = exports.TRANSFORM_RUNNER = exports.supportsWorkflowStages = exports.supportsWorkflows = exports.isWorkflowNodeKind = exports.isWorkflowNode = exports.isWorkflowExecutionMode = exports.isWorkflowEdge = exports.isTransformLanguage = exports.isPipelineStore = exports.isConnectorKind = exports.CONNECTOR_KINDS = exports.CATALOG_PIPELINE_STORE = exports.CatalogRegistry = exports.MikroOrmCatalogRegistry = exports.CATALOG_OVERLAY_STORE = exports.InMemoryCatalogOverlayStore = exports.FileCatalogOverlayStore = exports.CATALOG_OPTIONS = exports.isQueryStore = exports.assertReadOnlyShape = exports.CatalogModule = exports.emitCatalog = exports.channelNameFor = exports.catalogEventPhase = exports.CATALOG_LIB = exports.CATALOG_EVENTS = exports.CATALOG_EVENT_PHASE_FALLBACK = exports.CATALOG_EVENT_PHASE = exports.CatalogType = exports.CatalogProperty = void 0;
+exports.RequireScopes = exports.RequireHuman = exports.REQUIRES_HUMAN = exports.REQUIRED_SCOPES = exports.MikroOrmReadStore = exports.supportsCarryForward = exports.isWriteStore = exports.isReservedColumn = exports.isCatalogStoreCapabilities = exports.findColumnCollisions = exports.CatalogColumnCollisionError = exports.CATALOG_STORE = exports.CATALOG_SNAPSHOT_MODES = exports.CATALOG_RESERVED_COLUMNS = exports.assertNoColumnCollisions = exports.StaticKeyPrincipalResolver = exports.readableObjectPage = exports.mayWrite = exports.mayRead = exports.maySeeClassification = exports.PRINCIPAL_ACTOR_SEPARATOR = exports.parsePrincipalId = exports.hasScope = exports.expandScopes = exports.delegatePrincipal = exports.composePrincipalId = exports.CATALOG_PRINCIPAL_RESOLVER = void 0;
 var catalog_decorators_1 = require("./catalog.decorators");
 Object.defineProperty(exports, "CatalogProperty", { enumerable: true, get: function () { return catalog_decorators_1.CatalogProperty; } });
 Object.defineProperty(exports, "CatalogType", { enumerable: true, get: function () { return catalog_decorators_1.CatalogType; } });
@@ -78,6 +78,7 @@ var catalog_workspace_1 = require("./catalog.workspace");
 Object.defineProperty(exports, "CATALOG_TRACE_OUTCOMES", { enumerable: true, get: function () { return catalog_workspace_1.CATALOG_TRACE_OUTCOMES; } });
 Object.defineProperty(exports, "CATALOG_TRACE_STORE", { enumerable: true, get: function () { return catalog_workspace_1.CATALOG_TRACE_STORE; } });
 Object.defineProperty(exports, "CATALOG_WORKSPACE_STORE", { enumerable: true, get: function () { return catalog_workspace_1.CATALOG_WORKSPACE_STORE; } });
+Object.defineProperty(exports, "embeddedVisualization", { enumerable: true, get: function () { return catalog_workspace_1.embeddedVisualization; } });
 Object.defineProperty(exports, "isCatalogTraceOutcome", { enumerable: true, get: function () { return catalog_workspace_1.isCatalogTraceOutcome; } });
 Object.defineProperty(exports, "isTraceStore", { enumerable: true, get: function () { return catalog_workspace_1.isTraceStore; } });
 Object.defineProperty(exports, "isWorkspaceStore", { enumerable: true, get: function () { return catalog_workspace_1.isWorkspaceStore; } });
@@ -93,6 +94,7 @@ Object.defineProperty(exports, "PRINCIPAL_ACTOR_SEPARATOR", { enumerable: true,
 Object.defineProperty(exports, "maySeeClassification", { enumerable: true, get: function () { return catalog_principal_1.maySeeClassification; } });
 Object.defineProperty(exports, "mayRead", { enumerable: true, get: function () { return catalog_principal_1.mayRead; } });
 Object.defineProperty(exports, "mayWrite", { enumerable: true, get: function () { return catalog_principal_1.mayWrite; } });
+Object.defineProperty(exports, "readableObjectPage", { enumerable: true, get: function () { return catalog_principal_1.readableObjectPage; } });
 Object.defineProperty(exports, "StaticKeyPrincipalResolver", { enumerable: true, get: function () { return catalog_principal_1.StaticKeyPrincipalResolver; } });
 // Everything, deliberately. The last release exported the directory interface
 // but not the two types its one method takes and returns, so the seam could be

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dudousxd/nestjs-catalog",
-  "version": "0.5.0",
+  "version": "0.6.0",
   "description": "A metadata registry for NestJS: object types, properties and relations, derived from your ORM and enriched with decorators.",
   "license": "MIT",
   "author": "Davide Carvalho",