@constructive-io/graphql-server 5.14.6 → 5.15.1

package/middleware/captcha.d.ts

@@ -1,5 +1,5 @@
-import type { RequestHandler } from 'express';
 import './types';
+import type { RequestHandler } from 'express';
 /**
  * Creates a CAPTCHA verification middleware.
  *

package/middleware/captcha.js

@@ -1,10 +1,10 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.createCaptchaMiddleware = void 0;
+require("./types"); // for Request type
 const errors_1 = require("@constructive-io/errors");
 const logger_1 = require("@pgpmjs/logger");
 const graphql_response_1 = require("../errors/graphql-response");
-require("./types"); // for Request type
 const log = new logger_1.Logger('captcha');
 /** Google reCAPTCHA verification endpoint */
 const RECAPTCHA_VERIFY_URL = 'https://www.google.com/recaptcha/api/siteverify';

package/middleware/cors.d.ts

@@ -1,5 +1,5 @@
-import type { RequestHandler } from 'express';
 import './types';
+import type { RequestHandler } from 'express';
 /**
  * Unified CORS middleware for Constructive API
  *

package/middleware/cors.js

@@ -4,9 +4,9 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.cors = void 0;
+require("./types"); // for Request type
 const url_domains_1 = require("@constructive-io/url-domains");
 const cors_1 = __importDefault(require("cors"));
-require("./types"); // for Request type
 /**
  * Unified CORS middleware for Constructive API
  *

package/middleware/error-handler.d.ts

@@ -1,4 +1,4 @@
-import type { ErrorRequestHandler, NextFunction, Request, Response } from 'express';
 import './types';
+import type { ErrorRequestHandler, NextFunction, Request, Response } from 'express';
 export declare const errorHandler: ErrorRequestHandler;
 export declare const notFoundHandler: (req: Request, res: Response, _next: NextFunction) => void;

package/middleware/error-handler.js

@@ -4,12 +4,12 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.notFoundHandler = exports.errorHandler = void 0;
+require("./types");
 const env_1 = require("@pgpmjs/env");
 const logger_1 = require("@pgpmjs/logger");
-const api_errors_1 = require("../errors/api-errors");
-const _404_message_1 = __importDefault(require("../errors/404-message"));
 const _50x_1 = __importDefault(require("../errors/50x"));
-require("./types");
+const _404_message_1 = __importDefault(require("../errors/404-message"));
+const api_errors_1 = require("../errors/api-errors");
 const log = new logger_1.Logger('error-handler');
 const isDevelopment = () => (0, env_1.getNodeEnv)() === 'development';
 const wantsJson = (req) => {

package/middleware/fn.js

@@ -53,9 +53,9 @@ var __importStar = (this && this.__importStar) || (function () {
 })();
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.createFnRouter = createFnRouter;
+const query_builder_1 = require("@constructive-io/query-builder");
 const logger_1 = require("@pgpmjs/logger");
 const server_utils_1 = require("@pgpmjs/server-utils");
-const query_builder_1 = require("@constructive-io/query-builder");
 const express_1 = __importStar(require("express"));
 const log = new logger_1.Logger('fn');
 const notFound = (res) => {

package/middleware/observability/request-logger.js

@@ -1,8 +1,8 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.createRequestLogger = void 0;
-const crypto_1 = require("crypto");
 const logger_1 = require("@pgpmjs/logger");
+const crypto_1 = require("crypto");
 const log = new logger_1.Logger('server');
 const SAFE_REQUEST_ID = /^[a-zA-Z0-9\-_]{1,128}$/;
 const createRequestLogger = ({ observabilityEnabled }) => {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@constructive-io/graphql-server",
-  "version": "5.14.6",
+  "version": "5.15.1",
   "author": "Constructive <developers@constructive.io>",
   "description": "Constructive GraphQL Server",
   "main": "index.js",
@@ -41,20 +41,21 @@
     "backend"
   ],
   "dependencies": {
-    "@constructive-io/csrf": "^0.26.2",
+    "@agentic-kit/ollama": "2.12.2",
+    "@constructive-io/csrf": "^0.26.3",
     "@constructive-io/errors": "^0.8.2",
-    "@constructive-io/express-context": "^0.23.2",
-    "@constructive-io/graphql-env": "^3.28.2",
-    "@constructive-io/graphql-types": "^3.27.2",
-    "@constructive-io/query-builder": "^3.9.4",
-    "@constructive-io/s3-utils": "^2.29.2",
+    "@constructive-io/express-context": "^0.23.3",
+    "@constructive-io/graphql-env": "^3.28.3",
+    "@constructive-io/graphql-types": "^3.27.3",
+    "@constructive-io/llm-env": "^0.12.3",
+    "@constructive-io/query-builder": "^3.9.5",
+    "@constructive-io/s3-utils": "^2.29.3",
     "@constructive-io/url-domains": "^2.28.2",
     "@graphile-contrib/pg-many-to-many": "2.0.0-rc.2",
-    "@pgpmjs/env": "^2.40.2",
-    "@pgpmjs/logger": "^2.23.2",
-    "@pgpmjs/server-utils": "^3.24.2",
-    "@pgpmjs/types": "^2.49.2",
-    "agentic-server": "0.21.2",
+    "@pgpmjs/env": "^2.40.3",
+    "@pgpmjs/logger": "^2.23.3",
+    "@pgpmjs/server-utils": "^3.24.3",
+    "@pgpmjs/types": "^2.49.3",
     "cors": "^2.8.6",
     "deepmerge": "^4.3.1",
     "express": "^5.2.1",
@@ -63,16 +64,16 @@
     "grafserv": "1.0.0",
     "graphile-build": "5.0.2",
     "graphile-build-pg": "5.0.2",
-    "graphile-cache": "^4.9.2",
+    "graphile-cache": "^4.9.3",
     "graphile-config": "1.0.1",
-    "graphile-function-bindings": "^1.10.6",
-    "graphile-settings": "^6.11.6",
+    "graphile-function-bindings": "^1.10.8",
+    "graphile-settings": "^6.11.8",
     "graphile-utils": "5.0.1",
     "graphql": "16.13.0",
     "graphql-upload": "^13.0.0",
     "lru-cache": "^11.2.7",
     "pg": "^8.21.0",
-    "pg-cache": "^3.24.2",
+    "pg-cache": "^3.24.3",
     "pg-env": "^1.27.2",
     "pg-query-context": "^2.28.2",
     "pg-sql2": "5.0.1",
@@ -87,11 +88,13 @@
     "@types/graphql-upload": "^8.0.12",
     "@types/pg": "^8.20.0",
     "@types/request-ip": "^0.0.41",
+    "@types/supertest": "^7.2.0",
     "cookie-parser": "^1.4.7",
-    "graphile-test": "5.10.6",
+    "graphile-test": "5.10.8",
     "makage": "^0.3.0",
     "nodemon": "^3.1.14",
+    "supertest": "^7.2.2",
     "ts-node": "^10.9.2"
   },
-  "gitHead": "45cd961cf956d2d28e4d09b20db4204982c33593"
+  "gitHead": "c20b6be96b39bf71c0e2df0f4b51e05deacd006b"
 }

package/plugins/auth-cookie-plugin.d.ts

@@ -1,5 +1,5 @@
-import type { GraphileConfig } from 'graphile-config';
 import '../middleware/types';
+import type { GraphileConfig } from 'graphile-config';
 /**
  * AuthCookiePlugin - grafserv middleware plugin that handles auth cookie lifecycle.
  *

package/plugins/auth-cookie-plugin.js

@@ -1,8 +1,8 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.AuthCookiePlugin = void 0;
-const logger_1 = require("@pgpmjs/logger");
 require("../middleware/types");
+const logger_1 = require("@pgpmjs/logger");
 const cookie_1 = require("../middleware/cookie");
 const log = new logger_1.Logger('auth-cookie');
 /**

package/server.js

@@ -10,13 +10,13 @@ const graphql_env_1 = require("@constructive-io/graphql-env");
 const url_domains_1 = require("@constructive-io/url-domains");
 const logger_1 = require("@pgpmjs/logger");
 const server_utils_1 = require("@pgpmjs/server-utils");
-const agentic_server_1 = require("agentic-server");
 const cookie_parser_1 = __importDefault(require("cookie-parser"));
 const express_1 = __importDefault(require("express"));
 const graphile_cache_1 = require("graphile-cache");
 const graphql_upload_1 = __importDefault(require("graphql-upload"));
 const pg_cache_1 = require("pg-cache");
 const request_ip_1 = __importDefault(require("request-ip"));
+const agentic_1 = require("./agentic");
 const debug_db_snapshot_1 = require("./diagnostics/debug-db-snapshot");
 const debug_sampler_1 = require("./diagnostics/debug-sampler");
 const observability_1 = require("./diagnostics/observability");
@@ -180,7 +180,7 @@ class Server {
         app.use('/graphql', csrfProtect); // Enforce CSRF on GraphQL mutations
         // LLM Agent REST API — mounted before graphile so SSE streaming
         // routes are handled without going through PostGraphile
-        app.use((0, agentic_server_1.createAgenticRouter)());
+        app.use((0, agentic_1.createAgenticRouter)());
         // REST function invocation routes (POST /fn/:alias, GET /fn/invocations/:id)
         app.use((0, fn_1.createFnRouter)());
         app.use((0, graphile_1.graphile)(effectiveOpts));

package/types.d.ts

@@ -1,5 +1,5 @@
-import type { PgpmOptions } from '@pgpmjs/types';
 import type { ApiOptions as ApiConfig } from '@constructive-io/graphql-types';
+import type { PgpmOptions } from '@pgpmjs/types';
 export type { ApiConfigResult, ApiError, ApiStructure, AuthSettings, DatabaseSettings, PubkeyChallengeSettings, RlsModule, WebauthnSettings, } from '@constructive-io/express-context';
 export type ApiOptions = PgpmOptions & {
     api?: ApiConfig;