@solidxai/core 0.1.12 → 0.1.13-beta.10

package/src/constants/user.constants.ts

@@ -0,0 +1,13 @@
+/**
+ * The columns of a `User` that are safe to embed in another entity's API response.
+ *
+ * Whenever a user is attached to a record the caller asked for - a `createdBy` /
+ * `updatedBy` populate, a chatter message author - the caller wants to display who it
+ * was, not to read their profile. Everything else on `User` is PII (email, mobile),
+ * authz metadata (roles, apiKeys) or secret, and the embedded user is frequently
+ * someone the viewer has no other visibility of.
+ *
+ * `fullName` is nullable; consumers that need a fallback should use the record's own
+ * context rather than widening this list.
+ */
+export const USER_SUMMARY_FIELDS = ['id', 'fullName'] as const;

package/src/controllers/chatter-message.controller.ts

@@ -95,6 +95,14 @@ export class ChatterMessageController {
     return this.service.find(query);  
   }
 
+  @ApiBearerAuth("jwt")
+  @ApiQuery({ name: 'search', required: false, type: String })
+  @ApiQuery({ name: 'limit', required: false, type: Number })
+  @Get('mentionable-users')
+  async getMentionableUsers(@Query() query: any) {
+    return this.service.getMentionableUsers(query?.search, query?.limit ? +query.limit : undefined);
+  }
+
   @ApiBearerAuth("jwt")
   @Get(':id')
   async findOne(@Param('id') id: string, @Query() query: any) {

package/src/controllers/export-template.controller.ts

@@ -8,6 +8,7 @@ import { Response } from 'express';
 import { StartExportSyncDto } from 'src/dtos/export.dto';
 import { ActiveUser } from 'src/decorators/active-user.decorator';
 import { ActiveUserData } from 'src/interfaces/active-user-data.interface';
+import { setFileDownloadHeaders } from 'src/helpers/file-download.helper';
 
 @ApiTags('Solid Core') 
 @Controller('export-template') //FIXME: Change this to the model plural name 
@@ -91,9 +92,10 @@ export class ExportTemplateController {
       throw new InternalServerErrorException("Export stream is null");
     }
     // ✅ Set response headers for streaming
-    res.setHeader('Content-Disposition', `attachment; filename="${exportFileInfo.fileName}"`);
-    res.setHeader('Content-Type', exportFileInfo.mimeType);
-    res.setHeader('Access-Control-Expose-Headers', 'Content-Disposition, Content-Type');
+    setFileDownloadHeaders(res, {
+      fileName: exportFileInfo.fileName,
+      mimeType: exportFileInfo.mimeType,
+    });
     // Pipe the strea to the response as an excel file
     exportFileInfo.exportStream.pipe(res);
   }

package/src/controllers/import-transaction.controller.ts

@@ -7,6 +7,7 @@ import { UpdateImportTransactionDto } from '../dtos/update-import-transaction.dt
 import { Response } from 'express';
 import { ActiveUser } from 'src/decorators/active-user.decorator';
 import { ActiveUserData } from 'src/interfaces/active-user-data.interface';
+import { setFileDownloadHeaders } from 'src/helpers/file-download.helper';
 
 enum ShowSoftDeleted {
   INCLUSIVE = "inclusive",
@@ -27,9 +28,10 @@ export class ImportTransactionController {
     }
 
     // ✅ Set response headers for streaming
-    res.setHeader('Content-Disposition', `attachment; filename="${importTemplateFileInfo.fileName}"`);
-    res.setHeader('Content-Type', importTemplateFileInfo.mimeType);
-    res.setHeader('Access-Control-Expose-Headers', 'Content-Disposition, Content-Type');
+    setFileDownloadHeaders(res, {
+      fileName: importTemplateFileInfo.fileName,
+      mimeType: importTemplateFileInfo.mimeType,
+    });
     // Pipe the stream to the response as an excel file
     importTemplateFileInfo.stream.pipe(res);
   }
@@ -117,9 +119,7 @@ export class ImportTransactionController {
       throw new InternalServerErrorException("Failed records stream is null");
     }
     // ✅ Set response headers for streaming
-    res.setHeader('Content-Disposition', `attachment; filename="${fileName}"`);
-    res.setHeader('Content-Type', mimeType);
-    res.setHeader('Access-Control-Expose-Headers', 'Content-Disposition, Content-Type');
+    setFileDownloadHeaders(res, { fileName, mimeType });
     // Pipe the strea to the response as an excel file
     stream.pipe(res);
   }

package/src/controllers/media.controller.ts

@@ -9,6 +9,8 @@ import { SolidRequestContextDto } from 'src/dtos/solid-request-context.dto';
 import { UpdateMediaDto } from 'src/dtos/update-media.dto';
 import { MediaService } from 'src/services/media.service';
 import { Response } from 'express';
+import { getLowercaseFileExtension, INLINE_SAFE_EXTENSIONS } from 'src/constants/media-file-types';
+import { setFileDownloadHeaders } from 'src/helpers/file-download.helper';
 
 enum ShowSoftDeleted {
   INCLUSIVE = "inclusive",
@@ -91,17 +93,26 @@ export class MediaController {
 
   @Auth(AuthType.MediaSignedUrl)
   @ApiQuery({ name: 'token', required: true, type: String, description: "Short-lived signed token obtained from a private Media record's URL - not entered manually." })
-  @ApiQuery({ name: 'disposition', required: false, enum: ['inline', 'attachment'], description: "'inline' (default) renders/previews in the browser, matching public media. Pass 'attachment' to force a browser download (e.g. from a download button)." })
+  @ApiQuery({ name: 'disposition', required: false, enum: ['inline', 'attachment'], description: "'inline' (default) renders/previews in the browser, matching public media - it applies only to types safe to render inline (images, audio, video, pdf); anything else is always downloaded. Pass 'attachment' to force a browser download (e.g. from a download button)." })
   @Get(':id/download')
   async download(@Param('id') id: string, @Query('disposition') disposition: string, @Res() res: Response, @SolidRequestContextDecorator() solidRequestContext: SolidRequestContextDto) {
     const media = await this.service.findOne(+id, {}, solidRequestContext);
     const { stream, fileName, mimeType } = await this.service.fileDownloadStream(media);
 
-    const contentDisposition = disposition === 'attachment' ? 'attachment' : 'inline';
-    res.setHeader('Content-Disposition', `${contentDisposition}; filename="${fileName}"`);
-    res.setHeader('Content-Type', mimeType);
-    res.setHeader('Cross-Origin-Resource-Policy', 'cross-origin');
-    res.setHeader('Access-Control-Expose-Headers', 'Content-Disposition, Content-Type');
+    // Mirror the static-serve hardening in SolidCoreModule: only a small allowlist of media
+    // types is ever safe to render inline. Anything else is forced to download rather than be
+    // displayed/executed, regardless of the mimetype the record was stored with - nosniff
+    // alone would not help here, since it faithfully honours a declared text/html.
+    const isInlineSafe = INLINE_SAFE_EXTENSIONS.has(getLowercaseFileExtension(fileName) ?? '');
+    const requestedInline = disposition !== 'attachment';
+
+    setFileDownloadHeaders(res, {
+      fileName,
+      mimeType: isInlineSafe ? mimeType : 'application/octet-stream',
+      disposition: requestedInline && isInlineSafe ? 'inline' : 'attachment',
+      crossOriginResourcePolicy: true,
+    });
+
     stream.pipe(res);
   }
 

package/src/controllers/module-package.controller.ts

@@ -13,6 +13,7 @@ import { ApiBearerAuth, ApiTags } from '@nestjs/swagger';
 import { Response } from 'express';
 import { ConfirmModulePackageImportDto } from 'src/dtos/confirm-module-package-import.dto';
 import { RunModulePackageBuildDto } from 'src/dtos/run-module-package-build.dto';
+import { setFileDownloadHeaders } from 'src/helpers/file-download.helper';
 import { RunModulePackageSeedDto } from 'src/dtos/run-module-package-seed.dto';
 import { ModulePackageService } from 'src/services/module-package.service';
 
@@ -39,9 +40,7 @@ export class ModulePackageController {
         @Res() res: Response,
     ) {
         const archive = await this.modulePackageService.exportModulePackage(moduleName);
-        res.setHeader('Content-Disposition', `attachment; filename="${archive.fileName}"`);
-        res.setHeader('Content-Type', archive.mimeType);
-        res.setHeader('Access-Control-Expose-Headers', 'Content-Disposition, Content-Type');
+        setFileDownloadHeaders(res, { fileName: archive.fileName, mimeType: archive.mimeType });
         res.sendFile(archive.filePath);
     }
 

package/src/controllers/workflow-definition.controller.ts

@@ -0,0 +1,141 @@
+import { Controller, Post, Body, Param, UploadedFiles, UseInterceptors, Put, Get, Query, Delete, Patch } from '@nestjs/common';
+import { AnyFilesInterceptor } from "@nestjs/platform-express";
+import { ApiBearerAuth, ApiQuery, ApiTags } from '@nestjs/swagger';
+import { WorkflowDefinitionService } from '../services/workflow-definition.service';
+import { CreateWorkflowDefinitionDto } from '../dtos/create-workflow-definition.dto';
+import { UpdateWorkflowDefinitionDto } from '../dtos/update-workflow-definition.dto';
+import { ExecuteWorkflowDto } from '../dtos/execute-workflow.dto';
+import { WorkflowNodeRegistryService } from '../services/workflow/workflow-node-registry.service';
+import { ValidateWorkflowDefinitionDto } from '../dtos/validate-workflow-definition.dto';
+
+enum ShowSoftDeleted {
+  INCLUSIVE = "inclusive",
+  EXCLUSIVE = "exclusive",
+}
+
+@ApiTags('Solid Core')
+@Controller('workflow-definition')
+export class WorkflowDefinitionController {
+  constructor(
+    private readonly service: WorkflowDefinitionService,
+    private readonly workflowNodeRegistry: WorkflowNodeRegistryService,
+  ) {}
+
+  @ApiBearerAuth("jwt")
+  @Post()
+  @UseInterceptors(AnyFilesInterceptor())
+  create(@Body() createDto: CreateWorkflowDefinitionDto, @UploadedFiles() files: Array<Express.Multer.File>) {
+    return this.service.create(createDto, files);
+  }
+
+  @ApiBearerAuth("jwt")
+  @Post('/bulk')
+  @UseInterceptors(AnyFilesInterceptor())
+  insertMany(@Body() createDtos: CreateWorkflowDefinitionDto[], @UploadedFiles() filesArray: Express.Multer.File[][] = []) {
+    return this.service.insertMany(createDtos, filesArray);
+  }
+
+  @ApiBearerAuth("jwt")
+  @Post('by-key/:key/execute')
+  executeByKey(@Param('key') key: string, @Body() executeDto: ExecuteWorkflowDto) {
+    return this.service.executeWorkflowByKey(key, executeDto);
+  }
+
+  @ApiBearerAuth("jwt")
+  @Post('by-key/:key/execute-async')
+  executeByKeyAsync(@Param('key') key: string, @Body() executeDto: ExecuteWorkflowDto) {
+    return this.service.executeWorkflowByKeyAsync(key, executeDto);
+  }
+
+  @ApiBearerAuth("jwt")
+  @Post('webhook/:reference')
+  executeWebhook(@Param('reference') reference: string, @Body() executeDto: ExecuteWorkflowDto) {
+    return this.service.executeWorkflowWebhook(reference, executeDto);
+  }
+
+  @ApiBearerAuth("jwt")
+  @Post(':id/execute')
+  execute(@Param('id') id: string, @Body() executeDto: ExecuteWorkflowDto) {
+    return this.service.executeWorkflow(+id, executeDto);
+  }
+
+  @ApiBearerAuth("jwt")
+  @Post(':id/execute-async')
+  executeAsync(@Param('id') id: string, @Body() executeDto: ExecuteWorkflowDto) {
+    return this.service.executeWorkflowAsync(+id, executeDto);
+  }
+
+  @ApiBearerAuth("jwt")
+  @Get('node-types')
+  listNodeTypes() {
+    return this.workflowNodeRegistry.list();
+  }
+
+  @ApiBearerAuth("jwt")
+  @Post('validate')
+  validate(@Body() validateDto: ValidateWorkflowDefinitionDto) {
+    return this.service.validateWorkflowDefinition(validateDto.definitionYaml);
+  }
+
+
+  @ApiBearerAuth("jwt")
+  @Put(':id')
+  @UseInterceptors(AnyFilesInterceptor())
+  update(@Param('id') id: number, @Body() updateDto: UpdateWorkflowDefinitionDto, @UploadedFiles() files: Array<Express.Multer.File>) {
+    return this.service.update(id, updateDto, files);
+  }
+
+  @ApiBearerAuth("jwt")
+  @Patch(':id')
+  @UseInterceptors(AnyFilesInterceptor())
+  partialUpdate(@Param('id') id: number, @Body() updateDto: UpdateWorkflowDefinitionDto, @UploadedFiles() files: Array<Express.Multer.File>) {
+    return this.service.update(id, updateDto, files, true);
+  }
+
+  @ApiBearerAuth("jwt")
+  @Post('/bulk-recover')
+  async recoverMany(@Body() ids: number[]) {
+    return this.service.recoverMany(ids);
+  }
+
+  @ApiBearerAuth("jwt")
+  @Get('/recover/:id')
+  async recover(@Param('id') id: number) {
+    return this.service.recover(id);
+  }
+    
+  @ApiBearerAuth("jwt")
+  @ApiQuery({ name: 'showSoftDeleted', required: false, enum: ShowSoftDeleted })
+  @ApiQuery({ name: 'limit', required: false, type: Number })
+  @ApiQuery({ name: 'offset', required: false, type: Number })
+  @ApiQuery({ name: 'fields', required: false, type: Array })
+  @ApiQuery({ name: 'sort', required: false, type: Array }) 
+  @ApiQuery({ name: 'groupBy', required: false, type: Array })
+  @ApiQuery({ name: 'populate', required: false, type: Array })
+  @ApiQuery({ name: 'populateMedia', required: false, type: Array })
+  @ApiQuery({ name: 'filters', required: false, type: Array })
+  @Get()
+  async findMany(@Query() query: any) { 
+    return this.service.find(query);  
+  }
+
+  @ApiBearerAuth("jwt")
+  @Get(':id')
+  async findOne(@Param('id') id: string, @Query() query: any) {
+    return this.service.findOne(+id, query);
+  }
+
+  @ApiBearerAuth("jwt")
+  @Delete('/bulk')
+  async deleteMany(@Body() ids: number[]) {
+    return this.service.deleteMany(ids);
+  }
+
+  @ApiBearerAuth("jwt")
+  @Delete(':id')
+  async delete(@Param('id') id: number) {
+    return this.service.delete(id);
+  }
+
+
+}

package/src/controllers/workflow-execution-artifact.controller.ts

@@ -0,0 +1,93 @@
+import { Controller, Post, Body, Param, UploadedFiles, UseInterceptors, Put, Get, Query, Delete, Patch } from '@nestjs/common';
+import { AnyFilesInterceptor } from "@nestjs/platform-express";
+import { ApiBearerAuth, ApiQuery, ApiTags } from '@nestjs/swagger';
+import { WorkflowExecutionArtifactService } from '../services/workflow-execution-artifact.service';
+import { CreateWorkflowExecutionArtifactDto } from '../dtos/create-workflow-execution-artifact.dto';
+import { UpdateWorkflowExecutionArtifactDto } from '../dtos/update-workflow-execution-artifact.dto';
+
+enum ShowSoftDeleted {
+  INCLUSIVE = "inclusive",
+  EXCLUSIVE = "exclusive",
+}
+
+@ApiTags('Solid Core')
+@Controller('workflow-execution-artifact')
+export class WorkflowExecutionArtifactController {
+  constructor(private readonly service: WorkflowExecutionArtifactService) {}
+
+  @ApiBearerAuth("jwt")
+  @Post()
+  @UseInterceptors(AnyFilesInterceptor())
+  create(@Body() createDto: CreateWorkflowExecutionArtifactDto, @UploadedFiles() files: Array<Express.Multer.File>) {
+    return this.service.create(createDto, files);
+  }
+
+  @ApiBearerAuth("jwt")
+  @Post('/bulk')
+  @UseInterceptors(AnyFilesInterceptor())
+  insertMany(@Body() createDtos: CreateWorkflowExecutionArtifactDto[], @UploadedFiles() filesArray: Express.Multer.File[][] = []) {
+    return this.service.insertMany(createDtos, filesArray);
+  }
+
+
+  @ApiBearerAuth("jwt")
+  @Put(':id')
+  @UseInterceptors(AnyFilesInterceptor())
+  update(@Param('id') id: number, @Body() updateDto: UpdateWorkflowExecutionArtifactDto, @UploadedFiles() files: Array<Express.Multer.File>) {
+    return this.service.update(id, updateDto, files);
+  }
+
+  @ApiBearerAuth("jwt")
+  @Patch(':id')
+  @UseInterceptors(AnyFilesInterceptor())
+  partialUpdate(@Param('id') id: number, @Body() updateDto: UpdateWorkflowExecutionArtifactDto, @UploadedFiles() files: Array<Express.Multer.File>) {
+    return this.service.update(id, updateDto, files, true);
+  }
+
+  @ApiBearerAuth("jwt")
+  @Post('/bulk-recover')
+  async recoverMany(@Body() ids: number[]) {
+    return this.service.recoverMany(ids);
+  }
+
+  @ApiBearerAuth("jwt")
+  @Get('/recover/:id')
+  async recover(@Param('id') id: number) {
+    return this.service.recover(id);
+  }
+    
+  @ApiBearerAuth("jwt")
+  @ApiQuery({ name: 'showSoftDeleted', required: false, enum: ShowSoftDeleted })
+  @ApiQuery({ name: 'limit', required: false, type: Number })
+  @ApiQuery({ name: 'offset', required: false, type: Number })
+  @ApiQuery({ name: 'fields', required: false, type: Array })
+  @ApiQuery({ name: 'sort', required: false, type: Array }) 
+  @ApiQuery({ name: 'groupBy', required: false, type: Array })
+  @ApiQuery({ name: 'populate', required: false, type: Array })
+  @ApiQuery({ name: 'populateMedia', required: false, type: Array })
+  @ApiQuery({ name: 'filters', required: false, type: Array })
+  @Get()
+  async findMany(@Query() query: any) { 
+    return this.service.find(query);  
+  }
+
+  @ApiBearerAuth("jwt")
+  @Get(':id')
+  async findOne(@Param('id') id: string, @Query() query: any) {
+    return this.service.findOne(+id, query);
+  }
+
+  @ApiBearerAuth("jwt")
+  @Delete('/bulk')
+  async deleteMany(@Body() ids: number[]) {
+    return this.service.deleteMany(ids);
+  }
+
+  @ApiBearerAuth("jwt")
+  @Delete(':id')
+  async delete(@Param('id') id: number) {
+    return this.service.delete(id);
+  }
+
+
+}

package/src/controllers/workflow-execution-log.controller.ts

@@ -0,0 +1,93 @@
+import { Controller, Post, Body, Param, UploadedFiles, UseInterceptors, Put, Get, Query, Delete, Patch } from '@nestjs/common';
+import { AnyFilesInterceptor } from "@nestjs/platform-express";
+import { ApiBearerAuth, ApiQuery, ApiTags } from '@nestjs/swagger';
+import { WorkflowExecutionLogService } from '../services/workflow-execution-log.service';
+import { CreateWorkflowExecutionLogDto } from '../dtos/create-workflow-execution-log.dto';
+import { UpdateWorkflowExecutionLogDto } from '../dtos/update-workflow-execution-log.dto';
+
+enum ShowSoftDeleted {
+  INCLUSIVE = "inclusive",
+  EXCLUSIVE = "exclusive",
+}
+
+@ApiTags('Solid Core')
+@Controller('workflow-execution-log')
+export class WorkflowExecutionLogController {
+  constructor(private readonly service: WorkflowExecutionLogService) {}
+
+  @ApiBearerAuth("jwt")
+  @Post()
+  @UseInterceptors(AnyFilesInterceptor())
+  create(@Body() createDto: CreateWorkflowExecutionLogDto, @UploadedFiles() files: Array<Express.Multer.File>) {
+    return this.service.create(createDto, files);
+  }
+
+  @ApiBearerAuth("jwt")
+  @Post('/bulk')
+  @UseInterceptors(AnyFilesInterceptor())
+  insertMany(@Body() createDtos: CreateWorkflowExecutionLogDto[], @UploadedFiles() filesArray: Express.Multer.File[][] = []) {
+    return this.service.insertMany(createDtos, filesArray);
+  }
+
+
+  @ApiBearerAuth("jwt")
+  @Put(':id')
+  @UseInterceptors(AnyFilesInterceptor())
+  update(@Param('id') id: number, @Body() updateDto: UpdateWorkflowExecutionLogDto, @UploadedFiles() files: Array<Express.Multer.File>) {
+    return this.service.update(id, updateDto, files);
+  }
+
+  @ApiBearerAuth("jwt")
+  @Patch(':id')
+  @UseInterceptors(AnyFilesInterceptor())
+  partialUpdate(@Param('id') id: number, @Body() updateDto: UpdateWorkflowExecutionLogDto, @UploadedFiles() files: Array<Express.Multer.File>) {
+    return this.service.update(id, updateDto, files, true);
+  }
+
+  @ApiBearerAuth("jwt")
+  @Post('/bulk-recover')
+  async recoverMany(@Body() ids: number[]) {
+    return this.service.recoverMany(ids);
+  }
+
+  @ApiBearerAuth("jwt")
+  @Get('/recover/:id')
+  async recover(@Param('id') id: number) {
+    return this.service.recover(id);
+  }
+    
+  @ApiBearerAuth("jwt")
+  @ApiQuery({ name: 'showSoftDeleted', required: false, enum: ShowSoftDeleted })
+  @ApiQuery({ name: 'limit', required: false, type: Number })
+  @ApiQuery({ name: 'offset', required: false, type: Number })
+  @ApiQuery({ name: 'fields', required: false, type: Array })
+  @ApiQuery({ name: 'sort', required: false, type: Array }) 
+  @ApiQuery({ name: 'groupBy', required: false, type: Array })
+  @ApiQuery({ name: 'populate', required: false, type: Array })
+  @ApiQuery({ name: 'populateMedia', required: false, type: Array })
+  @ApiQuery({ name: 'filters', required: false, type: Array })
+  @Get()
+  async findMany(@Query() query: any) { 
+    return this.service.find(query);  
+  }
+
+  @ApiBearerAuth("jwt")
+  @Get(':id')
+  async findOne(@Param('id') id: string, @Query() query: any) {
+    return this.service.findOne(+id, query);
+  }
+
+  @ApiBearerAuth("jwt")
+  @Delete('/bulk')
+  async deleteMany(@Body() ids: number[]) {
+    return this.service.deleteMany(ids);
+  }
+
+  @ApiBearerAuth("jwt")
+  @Delete(':id')
+  async delete(@Param('id') id: number) {
+    return this.service.delete(id);
+  }
+
+
+}

package/src/controllers/workflow-execution.controller.ts

@@ -0,0 +1,126 @@
+import { Controller, Post, Body, Param, UploadedFiles, UseInterceptors, Put, Get, Query, Delete, Patch } from '@nestjs/common';
+import { AnyFilesInterceptor } from "@nestjs/platform-express";
+import { ApiBearerAuth, ApiQuery, ApiTags } from '@nestjs/swagger';
+import { WorkflowExecutionService } from '../services/workflow-execution.service';
+import { CreateWorkflowExecutionDto } from '../dtos/create-workflow-execution.dto';
+import { UpdateWorkflowExecutionDto } from '../dtos/update-workflow-execution.dto';
+import { WorkflowRuntimeService } from '../services/workflow/workflow-runtime.service';
+
+enum ShowSoftDeleted {
+  INCLUSIVE = "inclusive",
+  EXCLUSIVE = "exclusive",
+}
+
+@ApiTags('Solid Core')
+@Controller('workflow-execution')
+export class WorkflowExecutionController {
+  constructor(
+    private readonly service: WorkflowExecutionService,
+    private readonly workflowRuntimeService: WorkflowRuntimeService,
+  ) {}
+
+  @ApiBearerAuth("jwt")
+  @Post()
+  @UseInterceptors(AnyFilesInterceptor())
+  create(@Body() createDto: CreateWorkflowExecutionDto, @UploadedFiles() files: Array<Express.Multer.File>) {
+    return this.service.create(createDto, files);
+  }
+
+  @ApiBearerAuth("jwt")
+  @Post('/bulk')
+  @UseInterceptors(AnyFilesInterceptor())
+  insertMany(@Body() createDtos: CreateWorkflowExecutionDto[], @UploadedFiles() filesArray: Express.Multer.File[][] = []) {
+    return this.service.insertMany(createDtos, filesArray);
+  }
+
+
+  @ApiBearerAuth("jwt")
+  @Put(':id')
+  @UseInterceptors(AnyFilesInterceptor())
+  update(@Param('id') id: number, @Body() updateDto: UpdateWorkflowExecutionDto, @UploadedFiles() files: Array<Express.Multer.File>) {
+    return this.service.update(id, updateDto, files);
+  }
+
+  @ApiBearerAuth("jwt")
+  @Patch(':id')
+  @UseInterceptors(AnyFilesInterceptor())
+  partialUpdate(@Param('id') id: number, @Body() updateDto: UpdateWorkflowExecutionDto, @UploadedFiles() files: Array<Express.Multer.File>) {
+    return this.service.update(id, updateDto, files, true);
+  }
+
+  @ApiBearerAuth("jwt")
+  @Post('/bulk-recover')
+  async recoverMany(@Body() ids: number[]) {
+    return this.service.recoverMany(ids);
+  }
+
+  @ApiBearerAuth("jwt")
+  @Get('/recover/:id')
+  async recover(@Param('id') id: number) {
+    return this.service.recover(id);
+  }
+
+  @ApiBearerAuth("jwt")
+  @Get(':id/status')
+  async getExecutionStatus(@Param('id') id: string) {
+    return this.workflowRuntimeService.getExecutionStatus(+id);
+  }
+
+  @ApiBearerAuth("jwt")
+  @Get(':id/output/last-step')
+  async getLastStepOutput(@Param('id') id: string) {
+    return this.workflowRuntimeService.getLastStepOutput(+id);
+  }
+
+  @ApiBearerAuth("jwt")
+  @ApiQuery({ name: 'latest', required: false, type: Boolean })
+  @ApiQuery({ name: 'limit', required: false, type: Number })
+  @ApiQuery({ name: 'offset', required: false, type: Number })
+  @Get(':id/output/step/:stepNameOrId')
+  async getStepOutput(
+    @Param('id') id: string,
+    @Param('stepNameOrId') stepNameOrId: string,
+    @Query() query: any,
+  ) {
+    return this.workflowRuntimeService.getStepOutput(+id, stepNameOrId, {
+      latest: query.latest !== undefined ? query.latest !== 'false' : undefined,
+      limit: query.limit !== undefined ? Number(query.limit) : undefined,
+      offset: query.offset !== undefined ? Number(query.offset) : undefined,
+    });
+  }
+    
+  @ApiBearerAuth("jwt")
+  @ApiQuery({ name: 'showSoftDeleted', required: false, enum: ShowSoftDeleted })
+  @ApiQuery({ name: 'limit', required: false, type: Number })
+  @ApiQuery({ name: 'offset', required: false, type: Number })
+  @ApiQuery({ name: 'fields', required: false, type: Array })
+  @ApiQuery({ name: 'sort', required: false, type: Array }) 
+  @ApiQuery({ name: 'groupBy', required: false, type: Array })
+  @ApiQuery({ name: 'populate', required: false, type: Array })
+  @ApiQuery({ name: 'populateMedia', required: false, type: Array })
+  @ApiQuery({ name: 'filters', required: false, type: Array })
+  @Get()
+  async findMany(@Query() query: any) { 
+    return this.service.find(query);  
+  }
+
+  @ApiBearerAuth("jwt")
+  @Get(':id')
+  async findOne(@Param('id') id: string, @Query() query: any) {
+    return this.service.findOne(+id, query);
+  }
+
+  @ApiBearerAuth("jwt")
+  @Delete('/bulk')
+  async deleteMany(@Body() ids: number[]) {
+    return this.service.deleteMany(ids);
+  }
+
+  @ApiBearerAuth("jwt")
+  @Delete(':id')
+  async delete(@Param('id') id: number) {
+    return this.service.delete(id);
+  }
+
+
+}