@constructive-io/graphql-server 4.36.1 → 4.36.2

package/esm/index.js

@@ -2,7 +2,6 @@ export * from './server';
 // Export middleware for use in testing packages
 export { createApiMiddleware, getSubdomain, getApiConfig } from './middleware/api';
 export { createAuthenticateMiddleware } from './middleware/auth';
-export { createUploadAuthenticateMiddleware } from './middleware/upload';
 export { cors } from './middleware/cors';
 export { graphile } from './middleware/graphile';
 export { flush, flushService } from './middleware/flush';

package/esm/server.js

@@ -26,8 +26,7 @@ import { createRequestLogger } from './middleware/observability/request-logger';
 // Auth cookie handling is done via AuthCookiePlugin in grafserv
 import { createCaptchaMiddleware } from './middleware/captcha';
 import { parseCookieValue, SESSION_COOKIE_NAME } from './middleware/cookie';
-import { createUploadAuthenticateMiddleware, uploadRoute } from './middleware/upload';
-import { createLlmApiRouter } from './middleware/llm-api';
+import { createAgenticRouter } from 'agentic-server';
 import { createContextMiddleware, requestIdMiddleware } from '@constructive-io/express-context';
 import { startDebugSampler } from './diagnostics/debug-sampler';
 const log = new Logger('server');
@@ -75,7 +74,6 @@ class Server {
         const app = express();
         const api = createApiMiddleware(effectiveOpts);
         const authenticate = createAuthenticateMiddleware(effectiveOpts);
-        const uploadAuthenticate = createUploadAuthenticateMiddleware(effectiveOpts);
         const requestLogger = createRequestLogger({ observabilityEnabled });
         // Log startup configuration (non-sensitive values only)
         const apiOpts = effectiveOpts.api || {};
@@ -139,7 +137,6 @@ class Server {
         app.use(requestIdMiddleware());
         app.use(requestLogger);
         app.use(api);
-        app.post('/upload', uploadAuthenticate, ...uploadRoute);
         app.use(authenticate);
         app.use(createContextMiddleware({ pg: effectiveOpts.pg }));
         app.use(createCaptchaMiddleware());
@@ -173,7 +170,7 @@ class Server {
         app.use('/graphql', csrfProtect); // Enforce CSRF on GraphQL mutations
         // LLM Agent REST API — mounted before graphile so SSE streaming
         // routes are handled without going through PostGraphile
-        app.use(createLlmApiRouter());
+        app.use(createAgenticRouter());
         app.use(graphile(effectiveOpts));
         app.use(flush);
         // Error handling - MUST be LAST

package/index.d.ts

@@ -1,7 +1,6 @@
 export * from './server';
 export { createApiMiddleware, getSubdomain, getApiConfig } from './middleware/api';
 export { createAuthenticateMiddleware } from './middleware/auth';
-export { createUploadAuthenticateMiddleware } from './middleware/upload';
 export { cors } from './middleware/cors';
 export { graphile } from './middleware/graphile';
 export { flush, flushService } from './middleware/flush';

package/index.js

@@ -14,7 +14,7 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
     for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.flushService = exports.flush = exports.graphile = exports.cors = exports.createUploadAuthenticateMiddleware = exports.createAuthenticateMiddleware = exports.getApiConfig = exports.getSubdomain = exports.createApiMiddleware = void 0;
+exports.flushService = exports.flush = exports.graphile = exports.cors = exports.createAuthenticateMiddleware = exports.getApiConfig = exports.getSubdomain = exports.createApiMiddleware = void 0;
 __exportStar(require("./server"), exports);
 // Export middleware for use in testing packages
 var api_1 = require("./middleware/api");
@@ -23,8 +23,6 @@ Object.defineProperty(exports, "getSubdomain", { enumerable: true, get: function
 Object.defineProperty(exports, "getApiConfig", { enumerable: true, get: function () { return api_1.getApiConfig; } });
 var auth_1 = require("./middleware/auth");
 Object.defineProperty(exports, "createAuthenticateMiddleware", { enumerable: true, get: function () { return auth_1.createAuthenticateMiddleware; } });
-var upload_1 = require("./middleware/upload");
-Object.defineProperty(exports, "createUploadAuthenticateMiddleware", { enumerable: true, get: function () { return upload_1.createUploadAuthenticateMiddleware; } });
 var cors_1 = require("./middleware/cors");
 Object.defineProperty(exports, "cors", { enumerable: true, get: function () { return cors_1.cors; } });
 var graphile_1 = require("./middleware/graphile");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@constructive-io/graphql-server",
-  "version": "4.36.1",
+  "version": "4.36.2",
   "author": "Constructive <developers@constructive.io>",
   "description": "Constructive GraphQL Server",
   "main": "index.js",
@@ -41,20 +41,18 @@
     "backend"
   ],
   "dependencies": {
-    "@agentic-kit/ollama": "2.1.0",
     "@constructive-io/csrf": "^0.15.0",
     "@constructive-io/express-context": "^0.6.0",
     "@constructive-io/graphql-env": "^3.13.0",
     "@constructive-io/graphql-types": "^3.12.0",
     "@constructive-io/s3-utils": "^2.18.0",
-    "@constructive-io/upload-names": "^2.17.0",
     "@constructive-io/url-domains": "^2.17.0",
     "@graphile-contrib/pg-many-to-many": "2.0.0-rc.2",
     "@pgpmjs/env": "^2.25.0",
     "@pgpmjs/logger": "^2.12.0",
     "@pgpmjs/server-utils": "^3.13.0",
     "@pgpmjs/types": "^2.29.0",
-    "@pgsql/quotes": "^17.1.0",
+    "agentic-server": "0.6.0",
     "cors": "^2.8.6",
     "deepmerge": "^4.3.1",
     "express": "^5.2.1",
@@ -65,13 +63,11 @@
     "graphile-build-pg": "5.0.2",
     "graphile-cache": "^3.13.1",
     "graphile-config": "1.0.1",
-    "graphile-llm": "^0.12.1",
-    "graphile-settings": "^5.7.1",
+    "graphile-settings": "^5.8.0",
     "graphile-utils": "5.0.1",
     "graphql": "16.13.0",
     "graphql-upload": "^13.0.0",
     "lru-cache": "^11.2.7",
-    "multer": "^2.1.1",
     "pg": "^8.21.0",
     "pg-cache": "^3.12.0",
     "pg-env": "^1.16.0",
@@ -86,7 +82,6 @@
     "@types/cors": "^2.8.17",
     "@types/express": "^5.0.6",
     "@types/graphql-upload": "^8.0.12",
-    "@types/multer": "^2.1.0",
     "@types/pg": "^8.20.0",
     "@types/request-ip": "^0.0.41",
     "cookie-parser": "^1.4.7",
@@ -95,5 +90,5 @@
     "nodemon": "^3.1.14",
     "ts-node": "^10.9.2"
   },
-  "gitHead": "fc6f9780ea1cab2c9344c2e392649ae644e84849"
+  "gitHead": "57edf07742a20d72cda7a3c8a3bb1745afbf3a27"
 }

package/server.js

@@ -32,8 +32,7 @@ const request_logger_1 = require("./middleware/observability/request-logger");
 // Auth cookie handling is done via AuthCookiePlugin in grafserv
 const captcha_1 = require("./middleware/captcha");
 const cookie_1 = require("./middleware/cookie");
-const upload_1 = require("./middleware/upload");
-const llm_api_1 = require("./middleware/llm-api");
+const agentic_server_1 = require("agentic-server");
 const express_context_1 = require("@constructive-io/express-context");
 const debug_sampler_1 = require("./diagnostics/debug-sampler");
 const log = new logger_1.Logger('server');
@@ -82,7 +81,6 @@ class Server {
         const app = (0, express_1.default)();
         const api = (0, api_1.createApiMiddleware)(effectiveOpts);
         const authenticate = (0, auth_1.createAuthenticateMiddleware)(effectiveOpts);
-        const uploadAuthenticate = (0, upload_1.createUploadAuthenticateMiddleware)(effectiveOpts);
         const requestLogger = (0, request_logger_1.createRequestLogger)({ observabilityEnabled });
         // Log startup configuration (non-sensitive values only)
         const apiOpts = effectiveOpts.api || {};
@@ -146,7 +144,6 @@ class Server {
         app.use((0, express_context_1.requestIdMiddleware)());
         app.use(requestLogger);
         app.use(api);
-        app.post('/upload', uploadAuthenticate, ...upload_1.uploadRoute);
         app.use(authenticate);
         app.use((0, express_context_1.createContextMiddleware)({ pg: effectiveOpts.pg }));
         app.use((0, captcha_1.createCaptchaMiddleware)());
@@ -180,7 +177,7 @@ class Server {
         app.use('/graphql', csrfProtect); // Enforce CSRF on GraphQL mutations
         // LLM Agent REST API — mounted before graphile so SSE streaming
         // routes are handled without going through PostGraphile
-        app.use((0, llm_api_1.createLlmApiRouter)());
+        app.use((0, agentic_server_1.createAgenticRouter)());
         app.use((0, graphile_1.graphile)(effectiveOpts));
         app.use(flush_1.flush);
         // Error handling - MUST be LAST