@constructive-io/graphql-server 4.36.1 → 4.36.3

package/middleware/llm-api.js

@@ -1,575 +0,0 @@
-"use strict";
-/**
- * LLM API Router
- *
- * Express router providing REST streaming endpoints for AI agent conversations.
- * Uses the agent tables (agent_thread, agent_message) discovered from the
- * agent_chat_module config table at runtime.
- *
- * Hybrid architecture:
- *   - GraphQL handles CRUD (threads, messages, tasks) via PostGraphile
- *   - REST handles SSE streaming for chat completions (what GraphQL can't do)
- *
- * Routes (entity-scoped):
- *   POST /v1/orgs/:entity_id/threads                    → create thread
- *   POST /v1/orgs/:entity_id/threads/:thread_id/messages → send message + stream response
- *
- * Routes (global — bills to actor_id from JWT):
- *   POST /v1/threads                    → create thread (entity_id = user_id)
- *   POST /v1/threads/:thread_id/messages → send message + stream response
- *
- * Auth: JWT from the auth middleware (req.token) → pg SET LOCAL context for RLS
- * Metering: check_billing_quota → LLM call → record_usage with real token counts
- *
- * Context: Uses `req.constructive` from @constructive-io/express-context
- * for tenant-scoped database access, pgSettings, and withPgClient.
- */
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || (function () {
-    var ownKeys = function(o) {
-        ownKeys = Object.getOwnPropertyNames || function (o) {
-            var ar = [];
-            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
-            return ar;
-        };
-        return ownKeys(o);
-    };
-    return function (mod) {
-        if (mod && mod.__esModule) return mod;
-        var result = {};
-        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
-        __setModuleDefault(result, mod);
-        return result;
-    };
-})();
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.createLlmApiRouter = createLlmApiRouter;
-const express_1 = __importStar(require("express"));
-const logger_1 = require("@pgpmjs/logger");
-const ollama_1 = require("@agentic-kit/ollama");
-const graphile_cache_1 = require("graphile-cache");
-const graphile_llm_1 = require("graphile-llm");
-const log = new logger_1.Logger('llm-api');
-// ─── Helpers ────────────────────────────────────────────────────────────────
-function resolveOllamaAdapter() {
-    const { chat } = (0, graphile_llm_1.getLlmEnvOptions)();
-    if (chat.provider === 'ollama') {
-        return {
-            adapter: new ollama_1.OllamaAdapter(chat.baseUrl),
-            model: chat.model,
-            baseUrl: chat.baseUrl,
-        };
-    }
-    return null;
-}
-// ─── Billing Helpers ────────────────────────────────────────────────────────
-async function checkQuota(ctx, billing, entityId, meterSlug) {
-    try {
-        return await ctx.withPgClient(async (client) => {
-            const sql = `SELECT "${billing.privateSchema}"."${billing.checkBillingQuotaFunction}"($1, $2::uuid, $3) AS allowed`;
-            const result = await client.query(sql, [meterSlug, entityId, 1]);
-            return result.rows[0]?.allowed !== false;
-        });
-    }
-    catch (e) {
-        const message = e instanceof Error ? e.message : String(e);
-        log.warn(`[llm-api] check_billing_quota failed (allowing): ${message}`);
-        return true;
-    }
-}
-async function recordUsage(ctx, billing, entityId, meterSlug, amount, metadata) {
-    try {
-        await ctx.withPgClient(async (client) => {
-            const sql = `SELECT "${billing.privateSchema}"."${billing.recordUsageFunction}"($1, $2::uuid, $3, $4::jsonb)`;
-            await client.query(sql, [meterSlug, entityId, amount, JSON.stringify(metadata)]);
-        });
-    }
-    catch (e) {
-        const message = e instanceof Error ? e.message : String(e);
-        log.warn(`[llm-api] record_usage failed (non-fatal): ${message}`);
-    }
-}
-async function resolveBilling(ctx) {
-    if (!ctx.databaseId)
-        return null;
-    try {
-        let billing = null;
-        await ctx.withPgClient(async (client) => {
-            const entry = await (0, graphile_llm_1.getLlmBillingConfig)(client, ctx.databaseId);
-            billing = entry.billing;
-        });
-        return billing;
-    }
-    catch {
-        return null;
-    }
-}
-const INFERENCE_LOG_DISCOVERY_SQL = `
-  SELECT s.schema_name, ilm.inference_log_table_name
-  FROM metaschema_modules_public.inference_log_module ilm
-  JOIN metaschema_public.schema s ON s.id = ilm.schema_id
-  LIMIT 1
-`;
-const inferenceLogCache = new graphile_cache_1.ModuleConfigCache({
-    name: 'inference-log',
-    ttlMs: 60_000,
-});
-async function getInferenceLogInfo(pool, dbname) {
-    const cached = inferenceLogCache.get(dbname);
-    if (cached !== undefined)
-        return cached;
-    let info = null;
-    try {
-        const { rows } = await pool.query(INFERENCE_LOG_DISCOVERY_SQL);
-        if (rows.length > 0) {
-            info = {
-                schemaName: rows[0].schema_name,
-                tableName: rows[0].inference_log_table_name,
-            };
-        }
-    }
-    catch {
-        // Module not provisioned
-    }
-    inferenceLogCache.set(dbname, info);
-    return info;
-}
-async function logInference(ctx, logInfo, data) {
-    try {
-        await ctx.withPgClient(async (client) => {
-            await client.query(`INSERT INTO "${logInfo.schemaName}"."${logInfo.tableName}"
-         (entity_id, actor_id, model, provider, service, operation, input_tokens, output_tokens, total_tokens, latency_ms, status)
-         VALUES ($1, $2, $3, $4, $5, $6, $7, $8, $9, $10, $11)`, [
-                data.entityId,
-                data.actorId,
-                data.model,
-                data.provider,
-                data.service,
-                data.operation,
-                data.inputTokens,
-                data.outputTokens,
-                data.totalTokens,
-                data.latencyMs,
-                data.status,
-            ]);
-        });
-    }
-    catch (e) {
-        const message = e instanceof Error ? e.message : String(e);
-        log.warn(`[llm-api] inference log INSERT failed (non-fatal): ${message}`);
-    }
-}
-// ─── Route Handlers ─────────────────────────────────────────────────────────
-async function handleCreateThread(req, res, entityId) {
-    const ctx = req.constructive;
-    if (!ctx?.userId) {
-        res.status(401).json({ error: 'Authentication required' });
-        return;
-    }
-    if (!ctx.api.dbname) {
-        res.status(400).json({ error: 'Database not resolved' });
-        return;
-    }
-    const discovery = await (0, graphile_llm_1.getAgentDiscovery)(ctx.pool, ctx.api.dbname);
-    if (!discovery?.thread) {
-        res.status(404).json({ error: 'Agent module not provisioned for this database' });
-        return;
-    }
-    const body = req.body || {};
-    const { thread } = discovery;
-    const result = await ctx.withPgClient(async (client) => {
-        const { rows } = await client.query(`INSERT INTO "${thread.schemaName}"."${thread.tableName}"
-       (entity_id, owner_id, mode, model, system_prompt, title)
-       VALUES ($1, $2, $3, $4, $5, $6)
-       RETURNING id, mode, model, system_prompt, status, created_at`, [
-            entityId,
-            ctx.userId,
-            body.mode ?? 'ask',
-            body.model ?? null,
-            body.system_prompt ?? null,
-            body.title ?? null,
-        ]);
-        return rows[0];
-    });
-    res.status(201).json({
-        id: result.id,
-        mode: result.mode,
-        model: result.model,
-        system_prompt: result.system_prompt,
-        status: result.status,
-        created_at: result.created_at,
-    });
-}
-async function handleSendMessage(req, res, entityId) {
-    const ctx = req.constructive;
-    if (!ctx?.userId) {
-        res.status(401).json({ error: 'Authentication required' });
-        return;
-    }
-    if (!ctx.api.dbname) {
-        res.status(400).json({ error: 'Database not resolved' });
-        return;
-    }
-    const discovery = await (0, graphile_llm_1.getAgentDiscovery)(ctx.pool, ctx.api.dbname);
-    if (!discovery?.thread || !discovery?.message) {
-        res.status(404).json({ error: 'Agent module not provisioned for this database' });
-        return;
-    }
-    const body = req.body || {};
-    if (!body.messages?.length) {
-        res.status(400).json({ error: 'messages[] is required and must not be empty' });
-        return;
-    }
-    const { thread, message: msgTable } = discovery;
-    const threadId = req.params.thread_id;
-    const userId = ctx.userId;
-    // 1. Verify thread exists and user owns it (RLS enforced)
-    const threadRow = await ctx.withPgClient(async (client) => {
-        const { rows } = await client.query(`SELECT id, mode, model, system_prompt, status
-       FROM "${thread.schemaName}"."${thread.tableName}"
-       WHERE id = $1`, [threadId]);
-        return rows[0];
-    });
-    if (!threadRow) {
-        res.status(404).json({ error: 'Thread not found' });
-        return;
-    }
-    // 2. Resolve billing config + inference log discovery
-    const billing = await resolveBilling(ctx);
-    const inferenceLog = await getInferenceLogInfo(ctx.pool, ctx.api.dbname);
-    const ollama = resolveOllamaAdapter();
-    if (!ollama) {
-        res.status(503).json({ error: 'No LLM provider configured' });
-        return;
-    }
-    const model = body.model ?? threadRow.model ?? ollama.model;
-    const meterSlug = model;
-    if (billing) {
-        const allowed = await checkQuota(ctx, billing, entityId, meterSlug);
-        if (!allowed) {
-            res.status(429).json({
-                error: 'Token quota exceeded',
-                meter: meterSlug,
-                entity_id: entityId,
-            });
-            return;
-        }
-    }
-    // 3. Persist user message(s)
-    await ctx.withPgClient(async (client) => {
-        for (const msg of body.messages) {
-            if (msg.role === 'user') {
-                await client.query(`INSERT INTO "${msgTable.schemaName}"."${msgTable.tableName}"
-           (thread_id, owner_id, entity_id, author_role, parts)
-           VALUES ($1, $2, (SELECT entity_id FROM "${thread.schemaName}"."${thread.tableName}" WHERE id = $1), $3, $4)`, [
-                    threadId,
-                    userId,
-                    'user',
-                    JSON.stringify([{ type: 'text', text: msg.content }]),
-                ]);
-            }
-        }
-    });
-    // 4. Load full thread history for context
-    const history = await ctx.withPgClient(async (client) => {
-        const { rows } = await client.query(`SELECT author_role, parts, created_at
-       FROM "${msgTable.schemaName}"."${msgTable.tableName}"
-       WHERE thread_id = $1
-       ORDER BY created_at ASC`, [threadId]);
-        return rows;
-    });
-    const llmMessages = [];
-    const systemPrompt = threadRow.system_prompt;
-    if (systemPrompt) {
-        llmMessages.push({ role: 'system', content: systemPrompt });
-    }
-    for (const row of history) {
-        const parts = Array.isArray(row.parts) ? row.parts : [];
-        const textContent = parts
-            .filter((p) => p.type === 'text')
-            .map((p) => p.text)
-            .join('');
-        if (textContent) {
-            llmMessages.push({
-                role: row.author_role === 'user' ? 'user' : 'assistant',
-                content: textContent,
-            });
-        }
-    }
-    // 5. Call LLM with token usage tracking
-    const shouldStream = body.stream !== false;
-    const startTime = Date.now();
-    if (shouldStream) {
-        // ── SSE Streaming via OllamaAdapter ─────────────────────────────────
-        res.writeHead(200, {
-            'Content-Type': 'text/event-stream',
-            'Cache-Control': 'no-cache',
-            'Connection': 'keep-alive',
-            'X-Accel-Buffering': 'no',
-        });
-        const messageId = `msg_${Date.now()}`;
-        try {
-            const systemMsg = llmMessages.find(m => m.role === 'system');
-            const nonSystem = llmMessages.filter(m => m.role !== 'system');
-            const modelDesc = ollama.adapter.createModel(model, {
-                maxOutputTokens: undefined,
-            });
-            const context = {
-                systemPrompt: systemMsg?.content,
-                messages: nonSystem.map((m) => ({
-                    role: m.role,
-                    content: m.content,
-                    timestamp: Date.now(),
-                })),
-            };
-            const stream = ollama.adapter.stream(modelDesc, context, {
-                temperature: body.temperature,
-            });
-            let streamedContent = '';
-            for await (const event of stream) {
-                if (event.type === 'text_delta') {
-                    streamedContent += event.delta;
-                    const sseEvent = {
-                        id: messageId,
-                        choices: [{
-                                index: 0,
-                                delta: { content: event.delta, role: 'assistant' },
-                                finish_reason: null,
-                            }],
-                        model,
-                    };
-                    res.write(`data: ${JSON.stringify(sseEvent)}\n\n`);
-                }
-            }
-            const result = await stream.result();
-            const content = streamedContent;
-            const latencyMs = Date.now() - startTime;
-            const usage = {
-                input: result.usage.input,
-                output: result.usage.output,
-                reasoning: result.usage.reasoning,
-                cacheRead: result.usage.cacheRead,
-                cacheWrite: result.usage.cacheWrite,
-                totalTokens: result.usage.totalTokens,
-            };
-            // Send [DONE] marker
-            res.write('data: [DONE]\n\n');
-            res.end();
-            // 6. Persist assistant message with model (fire-and-forget)
-            if (content) {
-                ctx.withPgClient(async (client) => {
-                    await client.query(`INSERT INTO "${msgTable.schemaName}"."${msgTable.tableName}"
-             (thread_id, owner_id, entity_id, author_role, parts, model)
-             VALUES ($1, $2, (SELECT entity_id FROM "${thread.schemaName}"."${thread.tableName}" WHERE id = $1), $3, $4, $5)`, [
-                        threadId,
-                        userId,
-                        'assistant',
-                        JSON.stringify([{ type: 'text', text: content }]),
-                        model,
-                    ]);
-                }).catch((err) => {
-                    log.error('[llm-api] Failed to persist assistant message:', err);
-                });
-            }
-            // 7. Record billing usage (fire-and-forget)
-            if (billing && usage.totalTokens > 0) {
-                recordUsage(ctx, billing, entityId, meterSlug, usage.totalTokens, {
-                    input_tokens: usage.input,
-                    output_tokens: usage.output,
-                    cache_read_tokens: usage.cacheRead,
-                    cache_write_tokens: usage.cacheWrite,
-                    model,
-                    latency_ms: latencyMs,
-                    stream: true,
-                }).catch(() => { });
-            }
-            // 8. Inference log (fire-and-forget)
-            if (inferenceLog) {
-                logInference(ctx, inferenceLog, {
-                    entityId,
-                    actorId: userId,
-                    model,
-                    provider: 'ollama',
-                    service: 'llm',
-                    operation: 'chat',
-                    inputTokens: usage.input,
-                    outputTokens: usage.output,
-                    totalTokens: usage.totalTokens,
-                    latencyMs,
-                    status: 'ok',
-                }).catch(() => { });
-            }
-        }
-        catch (streamErr) {
-            log.error('[llm-api] Streaming error:', streamErr);
-            const errorEvent = { error: { message: streamErr.message, type: 'stream_error' } };
-            res.write(`data: ${JSON.stringify(errorEvent)}\n\n`);
-            res.write('data: [DONE]\n\n');
-            res.end();
-        }
-    }
-    else {
-        // ── Non-streaming (batch) via OllamaAdapter ─────────────────────────
-        const systemMsg = llmMessages.find(m => m.role === 'system');
-        const nonSystem = llmMessages.filter(m => m.role !== 'system');
-        const modelDesc = ollama.adapter.createModel(model, {
-            maxOutputTokens: undefined,
-        });
-        const context = {
-            systemPrompt: systemMsg?.content,
-            messages: nonSystem.map((m) => ({
-                role: m.role,
-                content: m.content,
-                timestamp: Date.now(),
-            })),
-        };
-        const stream = ollama.adapter.stream(modelDesc, context, {
-            temperature: body.temperature,
-        });
-        const result = await stream.result();
-        const content = result.content
-            .filter((block) => block.type === 'text')
-            .map((block) => block.text)
-            .join('');
-        const latencyMs = Date.now() - startTime;
-        const usage = {
-            input: result.usage.input,
-            output: result.usage.output,
-            reasoning: result.usage.reasoning,
-            cacheRead: result.usage.cacheRead,
-            cacheWrite: result.usage.cacheWrite,
-            totalTokens: result.usage.totalTokens,
-        };
-        // Persist assistant message with model
-        await ctx.withPgClient(async (client) => {
-            await client.query(`INSERT INTO "${msgTable.schemaName}"."${msgTable.tableName}"
-         (thread_id, owner_id, entity_id, author_role, parts, model)
-         VALUES ($1, $2, (SELECT entity_id FROM "${thread.schemaName}"."${thread.tableName}" WHERE id = $1), $3, $4, $5)`, [
-                threadId,
-                userId,
-                'assistant',
-                JSON.stringify([{ type: 'text', text: content }]),
-                model,
-            ]);
-        });
-        // Record billing usage
-        if (billing && usage.totalTokens > 0) {
-            recordUsage(ctx, billing, entityId, meterSlug, usage.totalTokens, {
-                input_tokens: usage.input,
-                output_tokens: usage.output,
-                cache_read_tokens: usage.cacheRead,
-                cache_write_tokens: usage.cacheWrite,
-                model,
-                latency_ms: latencyMs,
-                stream: false,
-            }).catch(() => { });
-        }
-        // Inference log
-        if (inferenceLog) {
-            logInference(ctx, inferenceLog, {
-                entityId,
-                actorId: userId,
-                model,
-                provider: 'ollama',
-                service: 'llm',
-                operation: 'chat',
-                inputTokens: usage.input,
-                outputTokens: usage.output,
-                totalTokens: usage.totalTokens,
-                latencyMs,
-                status: 'ok',
-            }).catch(() => { });
-        }
-        res.json({
-            id: `msg_${Date.now()}`,
-            choices: [{
-                    index: 0,
-                    message: { role: 'assistant', content },
-                    finish_reason: 'stop',
-                }],
-            model,
-            usage: {
-                prompt_tokens: usage.input,
-                completion_tokens: usage.output,
-                total_tokens: usage.totalTokens,
-            },
-        });
-    }
-}
-// ─── Router Factory ─────────────────────────────────────────────────────────
-function createLlmApiRouter() {
-    const router = (0, express_1.Router)();
-    router.use(express_1.default.json());
-    // ── Entity-scoped routes ─────────────────────────────────────────────────
-    router.post('/v1/orgs/:entity_id/threads', async (req, res) => {
-        try {
-            await handleCreateThread(req, res, req.params.entity_id);
-        }
-        catch (err) {
-            log.error('[llm-api] Error creating thread:', err);
-            if (!res.headersSent) {
-                res.status(500).json({ error: 'Internal server error' });
-            }
-        }
-    });
-    router.post('/v1/orgs/:entity_id/threads/:thread_id/messages', async (req, res) => {
-        try {
-            await handleSendMessage(req, res, req.params.entity_id);
-        }
-        catch (err) {
-            log.error('[llm-api] Error in messages endpoint:', err);
-            if (!res.headersSent) {
-                res.status(500).json({ error: 'Internal server error' });
-            }
-        }
-    });
-    // ── Global routes (no entity_id — bills to actor_id from JWT) ────────────
-    router.post('/v1/threads', async (req, res) => {
-        try {
-            const userId = req.constructive?.userId;
-            if (!userId) {
-                res.status(401).json({ error: 'Authentication required' });
-                return;
-            }
-            await handleCreateThread(req, res, userId);
-        }
-        catch (err) {
-            log.error('[llm-api] Error creating thread:', err);
-            if (!res.headersSent) {
-                res.status(500).json({ error: 'Internal server error' });
-            }
-        }
-    });
-    router.post('/v1/threads/:thread_id/messages', async (req, res) => {
-        try {
-            const userId = req.constructive?.userId;
-            if (!userId) {
-                res.status(401).json({ error: 'Authentication required' });
-                return;
-            }
-            await handleSendMessage(req, res, userId);
-        }
-        catch (err) {
-            log.error('[llm-api] Error in messages endpoint:', err);
-            if (!res.headersSent) {
-                res.status(500).json({ error: 'Internal server error' });
-            }
-        }
-    });
-    return router;
-}

package/middleware/upload.d.ts

@@ -1,20 +0,0 @@
-import type { PgpmOptions } from '@pgpmjs/types';
-import type { RequestHandler } from 'express';
-import './types';
-/**
- * Upload-specific authentication middleware.
- *
- * This middleware enforces strict auth semantics for `POST /upload` while
- * preserving existing GraphQL auth behavior for other routes.
- */
-export declare const createUploadAuthenticateMiddleware: (opts: PgpmOptions) => RequestHandler;
-/**
- * REST file upload endpoint.
- *
- * Accepts a single file via multipart/form-data, streams it to S3/MinIO,
- * and returns file metadata. The frontend uses this in a two-step flow:
- *
- * 1. POST /upload  -> { url, filename, mime, size }
- * 2. GraphQL mutation -> patch row with the returned metadata
- */
-export declare const uploadRoute: RequestHandler[];