@constructive-io/express-context 0.9.0 → 0.10.0

package/esm/index.js

@@ -41,6 +41,6 @@ export { withPgClient } from './pg-client';
 // Request ID middleware
 export { requestIdMiddleware } from './request-id';
 export { buildContext, createContextMiddleware } from './context';
-export { agentChatLoader, authSettingsLoader, billingLoader, corsLoader, createDefaultRegistry, createLoaderRegistry, createModuleLoader, databaseSettingsLoader, inferenceLogLoader, pubkeyLoader, rlsLoader, llmLoader, webauthnLoader, } from './loaders';
+export { agentChatLoader, authSettingsLoader, billingLoader, computeLoader, corsLoader, createDefaultRegistry, createLoaderRegistry, createModuleLoader, databaseSettingsLoader, inferenceLogLoader, pubkeyLoader, rlsLoader, llmLoader, webauthnLoader, } from './loaders';
 // Side-effect: Express type augmentation
 import './types';

package/esm/loaders/compute.js

@@ -0,0 +1,57 @@
+/**
+ * Compute Module Loader
+ *
+ * Resolves per-database compute (functions) config from
+ * metaschema_modules_public.function_module and function_invocation_module.
+ * Returns the schema and table names for function definitions, API bindings,
+ * and invocations so REST routes can address the generated tables.
+ *
+ * Function modules are scoped: a database may provision one per scope, each
+ * with its own schema and tables. All of them are returned — REST routes and
+ * the GraphQL bindings plugin expose bindings from every module, and RLS on
+ * the underlying tables governs access.
+ */
+import { createModuleLoader } from './create-loader';
+// ─── SQL ────────────────────────────────────────────────────────────────────
+const COMPUTE_MODULE_SQL = `
+  SELECT
+    fs.schema_name AS functions_schema_name,
+    fm.definitions_table_name,
+    fm.bindings_table_name,
+    ivs.schema_name AS invocations_schema_name,
+    ivm.invocations_table_name,
+    ivm.entity_field AS invocations_entity_field
+  FROM metaschema_modules_public.function_module fm
+  JOIN metaschema_public.schema fs ON fs.id = fm.schema_id
+  JOIN metaschema_modules_public.function_invocation_module ivm
+    ON ivm.database_id = fm.database_id AND ivm.scope = fm.scope
+  JOIN metaschema_public.schema ivs ON ivs.id = ivm.schema_id
+  WHERE fm.database_id = $1
+  ORDER BY fs.schema_name
+`;
+// ─── Loader ─────────────────────────────────────────────────────────────────
+export const computeLoader = createModuleLoader({
+    name: 'compute',
+    ttlMs: 60_000,
+    async resolve(ctx) {
+        const { tenantPool, databaseId } = ctx;
+        const result = await tenantPool.query(COMPUTE_MODULE_SQL, [databaseId]);
+        if (result.rows.length === 0)
+            return undefined;
+        return {
+            modules: result.rows.map((row) => ({
+                schemaName: row.functions_schema_name,
+                definitionsTableName: row.definitions_table_name,
+                // Physical bindings table name, recorded by the metaschema generator
+                // on the function_module config row — read as a fact, never derived
+                // from the definitions table name.
+                bindingsTableName: row.bindings_table_name,
+                invocationsSchemaName: row.invocations_schema_name,
+                invocationsTableName: row.invocations_table_name,
+                // Scope-key column of the invocations table (entity_field), or NULL
+                // for global scopes. Consumers set this column on inserts.
+                invocationsEntityField: row.invocations_entity_field,
+            })),
+        };
+    },
+});

package/esm/loaders/create-loader.js

@@ -26,14 +26,23 @@ export function createModuleLoader(opts) {
                 return cache.get(key);
             }
             log.debug(`Cache MISS databaseId=${key}, resolving`);
+            // "Not provisioned" is expressed by the loader returning undefined, or
+            // by the module's tables not existing at all (42P01 undefined_table).
+            // Any other resolution error (bad query, ambiguous config) propagates —
+            // never silently coerced into "module absent".
             try {
                 const value = await opts.resolve(ctx);
                 cache.set(key, value);
                 return value;
             }
             catch (e) {
+                if (e.code === '42P01') {
+                    log.debug(`Module tables absent for databaseId=${key}: ${e.message}`);
+                    cache.set(key, undefined);
+                    return undefined;
+                }
                 log.warn(`Failed to resolve databaseId=${key}: ${e.message}`);
-                return undefined;
+                throw e;
             }
         },
         invalidate(databaseId) {

package/esm/loaders/index.js

@@ -38,6 +38,7 @@ export { billingLoader } from './billing';
 export { inferenceLogLoader } from './inference-log';
 export { agentChatLoader } from './agent-chat';
 export { llmLoader } from './llm';
+export { computeLoader } from './compute';
 /**
  * Convenience: create a registry pre-loaded with all built-in loaders.
  */
@@ -52,6 +53,7 @@ import { billingLoader } from './billing';
 import { inferenceLogLoader } from './inference-log';
 import { agentChatLoader } from './agent-chat';
 import { llmLoader } from './llm';
+import { computeLoader } from './compute';
 export function createDefaultRegistry() {
     const registry = createLoaderRegistry();
     registry.register(rlsLoader);
@@ -64,5 +66,6 @@ export function createDefaultRegistry() {
     registry.register(inferenceLogLoader);
     registry.register(agentChatLoader);
     registry.register(llmLoader);
+    registry.register(computeLoader);
     return registry;
 }

package/esm/pg-settings.js

@@ -38,6 +38,12 @@ export function buildPgSettings(input) {
     if (api.databaseId) {
         settings['jwt.claims.database_id'] = api.databaseId;
     }
+    // API provenance — which API surface this request arrived through.
+    // Derived server-side from hostname -> services_public.domains -> api_id;
+    // never taken from client-supplied headers, body, or token payload.
+    if (api.apiId) {
+        settings['jwt.claims.api_id'] = api.apiId;
+    }
     // Distributed tracing
     settings['request.id'] = requestId;
     // Client metadata (for audit functions)

package/index.d.ts

@@ -34,7 +34,7 @@
  * });
  * ```
  */
-export type { AgentChatConfig, ApiConfigResult, ApiError, ApiModule, ApiStructure, AuthSettings, BillingConfig, BuiltinModuleMap, ConstructiveAPIToken, ConstructiveContext, CorsModuleData, DatabaseSettings, GenericModuleData, InferenceLogConfig, LlmConfig, PublicKeyChallengeData, PubkeyChallengeSettings, RlsModule, WebauthnSettings, WithPgClient, } from './types';
+export type { AgentChatConfig, ApiConfigResult, ApiError, ApiModule, ApiStructure, AuthSettings, BillingConfig, BuiltinModuleMap, ComputeConfig, ComputeModuleConfig, ConstructiveAPIToken, ConstructiveContext, CorsModuleData, DatabaseSettings, GenericModuleData, InferenceLogConfig, LlmConfig, PublicKeyChallengeData, PubkeyChallengeSettings, RlsModule, WebauthnSettings, WithPgClient, } from './types';
 export type { BillingClient, InferenceLogEntry } from './billing-client';
 export { createBillingClient } from './billing-client';
 export type { PgSettingsInput } from './pg-settings';
@@ -44,5 +44,5 @@ export { requestIdMiddleware } from './request-id';
 export type { ContextMiddlewareOptions } from './context';
 export { buildContext, createContextMiddleware } from './context';
 export type { CreateLoaderOptions, LoaderContext, LoaderRegistry, ModuleLoader, } from './loaders';
-export { agentChatLoader, authSettingsLoader, billingLoader, corsLoader, createDefaultRegistry, createLoaderRegistry, createModuleLoader, databaseSettingsLoader, inferenceLogLoader, pubkeyLoader, rlsLoader, llmLoader, webauthnLoader, } from './loaders';
+export { agentChatLoader, authSettingsLoader, billingLoader, computeLoader, corsLoader, createDefaultRegistry, createLoaderRegistry, createModuleLoader, databaseSettingsLoader, inferenceLogLoader, pubkeyLoader, rlsLoader, llmLoader, webauthnLoader, } from './loaders';
 import './types';

package/index.js

@@ -36,7 +36,7 @@
  * ```
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.webauthnLoader = exports.llmLoader = exports.rlsLoader = exports.pubkeyLoader = exports.inferenceLogLoader = exports.databaseSettingsLoader = exports.createModuleLoader = exports.createLoaderRegistry = exports.createDefaultRegistry = exports.corsLoader = exports.billingLoader = exports.authSettingsLoader = exports.agentChatLoader = exports.createContextMiddleware = exports.buildContext = exports.requestIdMiddleware = exports.withPgClient = exports.buildPgSettings = exports.createBillingClient = void 0;
+exports.webauthnLoader = exports.llmLoader = exports.rlsLoader = exports.pubkeyLoader = exports.inferenceLogLoader = exports.databaseSettingsLoader = exports.createModuleLoader = exports.createLoaderRegistry = exports.createDefaultRegistry = exports.corsLoader = exports.computeLoader = exports.billingLoader = exports.authSettingsLoader = exports.agentChatLoader = exports.createContextMiddleware = exports.buildContext = exports.requestIdMiddleware = exports.withPgClient = exports.buildPgSettings = exports.createBillingClient = void 0;
 var billing_client_1 = require("./billing-client");
 Object.defineProperty(exports, "createBillingClient", { enumerable: true, get: function () { return billing_client_1.createBillingClient; } });
 var pg_settings_1 = require("./pg-settings");
@@ -54,6 +54,7 @@ var loaders_1 = require("./loaders");
 Object.defineProperty(exports, "agentChatLoader", { enumerable: true, get: function () { return loaders_1.agentChatLoader; } });
 Object.defineProperty(exports, "authSettingsLoader", { enumerable: true, get: function () { return loaders_1.authSettingsLoader; } });
 Object.defineProperty(exports, "billingLoader", { enumerable: true, get: function () { return loaders_1.billingLoader; } });
+Object.defineProperty(exports, "computeLoader", { enumerable: true, get: function () { return loaders_1.computeLoader; } });
 Object.defineProperty(exports, "corsLoader", { enumerable: true, get: function () { return loaders_1.corsLoader; } });
 Object.defineProperty(exports, "createDefaultRegistry", { enumerable: true, get: function () { return loaders_1.createDefaultRegistry; } });
 Object.defineProperty(exports, "createLoaderRegistry", { enumerable: true, get: function () { return loaders_1.createLoaderRegistry; } });

package/loaders/compute.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Compute Module Loader
+ *
+ * Resolves per-database compute (functions) config from
+ * metaschema_modules_public.function_module and function_invocation_module.
+ * Returns the schema and table names for function definitions, API bindings,
+ * and invocations so REST routes can address the generated tables.
+ *
+ * Function modules are scoped: a database may provision one per scope, each
+ * with its own schema and tables. All of them are returned — REST routes and
+ * the GraphQL bindings plugin expose bindings from every module, and RLS on
+ * the underlying tables governs access.
+ */
+import type { ComputeConfig } from '../types';
+import type { ModuleLoader } from './types';
+export declare const computeLoader: ModuleLoader<ComputeConfig>;

package/loaders/compute.js

@@ -0,0 +1,60 @@
+"use strict";
+/**
+ * Compute Module Loader
+ *
+ * Resolves per-database compute (functions) config from
+ * metaschema_modules_public.function_module and function_invocation_module.
+ * Returns the schema and table names for function definitions, API bindings,
+ * and invocations so REST routes can address the generated tables.
+ *
+ * Function modules are scoped: a database may provision one per scope, each
+ * with its own schema and tables. All of them are returned — REST routes and
+ * the GraphQL bindings plugin expose bindings from every module, and RLS on
+ * the underlying tables governs access.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.computeLoader = void 0;
+const create_loader_1 = require("./create-loader");
+// ─── SQL ────────────────────────────────────────────────────────────────────
+const COMPUTE_MODULE_SQL = `
+  SELECT
+    fs.schema_name AS functions_schema_name,
+    fm.definitions_table_name,
+    fm.bindings_table_name,
+    ivs.schema_name AS invocations_schema_name,
+    ivm.invocations_table_name,
+    ivm.entity_field AS invocations_entity_field
+  FROM metaschema_modules_public.function_module fm
+  JOIN metaschema_public.schema fs ON fs.id = fm.schema_id
+  JOIN metaschema_modules_public.function_invocation_module ivm
+    ON ivm.database_id = fm.database_id AND ivm.scope = fm.scope
+  JOIN metaschema_public.schema ivs ON ivs.id = ivm.schema_id
+  WHERE fm.database_id = $1
+  ORDER BY fs.schema_name
+`;
+// ─── Loader ─────────────────────────────────────────────────────────────────
+exports.computeLoader = (0, create_loader_1.createModuleLoader)({
+    name: 'compute',
+    ttlMs: 60_000,
+    async resolve(ctx) {
+        const { tenantPool, databaseId } = ctx;
+        const result = await tenantPool.query(COMPUTE_MODULE_SQL, [databaseId]);
+        if (result.rows.length === 0)
+            return undefined;
+        return {
+            modules: result.rows.map((row) => ({
+                schemaName: row.functions_schema_name,
+                definitionsTableName: row.definitions_table_name,
+                // Physical bindings table name, recorded by the metaschema generator
+                // on the function_module config row — read as a fact, never derived
+                // from the definitions table name.
+                bindingsTableName: row.bindings_table_name,
+                invocationsSchemaName: row.invocations_schema_name,
+                invocationsTableName: row.invocations_table_name,
+                // Scope-key column of the invocations table (entity_field), or NULL
+                // for global scopes. Consumers set this column on inserts.
+                invocationsEntityField: row.invocations_entity_field,
+            })),
+        };
+    },
+});

package/loaders/create-loader.js

@@ -29,14 +29,23 @@ function createModuleLoader(opts) {
                 return cache.get(key);
             }
             log.debug(`Cache MISS databaseId=${key}, resolving`);
+            // "Not provisioned" is expressed by the loader returning undefined, or
+            // by the module's tables not existing at all (42P01 undefined_table).
+            // Any other resolution error (bad query, ambiguous config) propagates —
+            // never silently coerced into "module absent".
             try {
                 const value = await opts.resolve(ctx);
                 cache.set(key, value);
                 return value;
             }
             catch (e) {
+                if (e.code === '42P01') {
+                    log.debug(`Module tables absent for databaseId=${key}: ${e.message}`);
+                    cache.set(key, undefined);
+                    return undefined;
+                }
                 log.warn(`Failed to resolve databaseId=${key}: ${e.message}`);
-                return undefined;
+                throw e;
             }
         },
         invalidate(databaseId) {

package/loaders/index.d.ts

@@ -40,4 +40,5 @@ export { billingLoader } from './billing';
 export { inferenceLogLoader } from './inference-log';
 export { agentChatLoader } from './agent-chat';
 export { llmLoader } from './llm';
+export { computeLoader } from './compute';
 export declare function createDefaultRegistry(): import("./registry").LoaderRegistry;

package/loaders/index.js

@@ -27,7 +27,7 @@
  *   registry.register(myLoader);
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.llmLoader = exports.agentChatLoader = exports.inferenceLogLoader = exports.billingLoader = exports.authSettingsLoader = exports.webauthnLoader = exports.pubkeyLoader = exports.databaseSettingsLoader = exports.corsLoader = exports.rlsLoader = exports.createLoaderRegistry = exports.createModuleLoader = void 0;
+exports.computeLoader = exports.llmLoader = exports.agentChatLoader = exports.inferenceLogLoader = exports.billingLoader = exports.authSettingsLoader = exports.webauthnLoader = exports.pubkeyLoader = exports.databaseSettingsLoader = exports.corsLoader = exports.rlsLoader = exports.createLoaderRegistry = exports.createModuleLoader = void 0;
 exports.createDefaultRegistry = createDefaultRegistry;
 var create_loader_1 = require("./create-loader");
 Object.defineProperty(exports, "createModuleLoader", { enumerable: true, get: function () { return create_loader_1.createModuleLoader; } });
@@ -54,6 +54,8 @@ var agent_chat_1 = require("./agent-chat");
 Object.defineProperty(exports, "agentChatLoader", { enumerable: true, get: function () { return agent_chat_1.agentChatLoader; } });
 var llm_1 = require("./llm");
 Object.defineProperty(exports, "llmLoader", { enumerable: true, get: function () { return llm_1.llmLoader; } });
+var compute_1 = require("./compute");
+Object.defineProperty(exports, "computeLoader", { enumerable: true, get: function () { return compute_1.computeLoader; } });
 /**
  * Convenience: create a registry pre-loaded with all built-in loaders.
  */
@@ -68,6 +70,7 @@ const billing_2 = require("./billing");
 const inference_log_2 = require("./inference-log");
 const agent_chat_2 = require("./agent-chat");
 const llm_2 = require("./llm");
+const compute_2 = require("./compute");
 function createDefaultRegistry() {
     const registry = (0, registry_2.createLoaderRegistry)();
     registry.register(rls_2.rlsLoader);
@@ -80,5 +83,6 @@ function createDefaultRegistry() {
     registry.register(inference_log_2.inferenceLogLoader);
     registry.register(agent_chat_2.agentChatLoader);
     registry.register(llm_2.llmLoader);
+    registry.register(compute_2.computeLoader);
     return registry;
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@constructive-io/express-context",
-  "version": "0.9.0",
+  "version": "0.10.0",
   "description": "Extractable Express middleware for Constructive tenant context — domain resolution, JWT auth, pgSettings, and withPgClient",
   "author": "Constructive <developers@constructive.io>",
   "homepage": "https://github.com/constructive-io/constructive",
@@ -32,7 +32,7 @@
     "@constructive-io/url-domains": "^2.19.0",
     "@pgpmjs/env": "^2.27.0",
     "@pgpmjs/logger": "^2.14.0",
-    "@pgpmjs/server-utils": "^3.15.0",
+    "@pgpmjs/server-utils": "^3.15.1",
     "@pgpmjs/types": "^2.34.0",
     "lru-cache": "^11.2.7",
     "pg": "^8.21.0",
@@ -59,5 +59,5 @@
     "jwt",
     "pgSettings"
   ],
-  "gitHead": "7eb34a3baa10ba3476575967b87ff51b606e042a"
+  "gitHead": "cd21f62bb64bdc7f4f40f6cef6af73f8f1c8f8dc"
 }

package/pg-settings.js

@@ -41,6 +41,12 @@ function buildPgSettings(input) {
     if (api.databaseId) {
         settings['jwt.claims.database_id'] = api.databaseId;
     }
+    // API provenance — which API surface this request arrived through.
+    // Derived server-side from hostname -> services_public.domains -> api_id;
+    // never taken from client-supplied headers, body, or token payload.
+    if (api.apiId) {
+        settings['jwt.claims.api_id'] = api.apiId;
+    }
     // Distributed tracing
     settings['request.id'] = requestId;
     // Client metadata (for audit functions)

package/types.d.ts

@@ -138,6 +138,29 @@ export interface AgentChatConfig {
     messageTableName: string | null;
     taskTableName: string | null;
 }
+/** One provisioned function-module scope's compute table names. */
+export interface ComputeModuleConfig {
+    schemaName: string;
+    definitionsTableName: string;
+    bindingsTableName: string;
+    invocationsSchemaName: string;
+    invocationsTableName: string;
+    /**
+     * Scope-key column of the invocations table, read from the metaschema
+     * (`function_invocation_module.entity_field`): `database_id` for the
+     * database scope, `NULL` for global scopes (platform/app), or the entity
+     * key column for entity scopes. Consumers set this column on invocation
+     * inserts instead of switching on scope name.
+     */
+    invocationsEntityField: string | null;
+}
+/**
+ * All function modules provisioned on the database. A database may have one
+ * per scope; every module is exposed and RLS governs access to each.
+ */
+export interface ComputeConfig {
+    modules: ComputeModuleConfig[];
+}
 export interface LlmConfig {
     embeddingProvider: string;
     embeddingModel: string;
@@ -169,6 +192,7 @@ export interface BuiltinModuleMap {
     inferenceLog: InferenceLogConfig;
     agentChat: AgentChatConfig;
     llm: LlmConfig;
+    compute: ComputeConfig;
 }
 /**
  * Callback for executing queries within a tenant-scoped transaction