npm - @constructive-io/graphql-server - Versions diffs - 5.7.4 → 5.9.0 - Mend

@constructive-io/graphql-server 5.7.4 → 5.9.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (4) hide show

package/README.md +1 -0
package/esm/middleware/graphile.js +58 -114
package/middleware/graphile.js +58 -114
package/package.json +23 -22

package/README.md CHANGED Viewed

@@ -182,6 +182,7 @@ Common issues and solutions for pgpm, PostgreSQL, and testing.
 ### 🧪 Testing
 * [pgsql-test](https://github.com/constructive-io/constructive/tree/main/postgres/pgsql-test): **📊 Isolated testing environments** with per-test transaction rollbacks—ideal for integration tests, complex migrations, and RLS simulation.
+* [pglite-test](https://github.com/constructive-io/constructive/tree/main/postgres/pglite-test): **🪶 Drop-in pgsql-test replacement backed by PGlite** — in-process Postgres, no server required, instance-per-suite isolation.
 * [pgsql-seed](https://github.com/constructive-io/constructive/tree/main/postgres/pgsql-seed): **🌱 PostgreSQL seeding utilities** for CSV, JSON, SQL data loading, and pgpm deployment.
 * [supabase-test](https://github.com/constructive-io/constructive/tree/main/postgres/supabase-test): **🧪 Supabase-native test harness** preconfigured for the local Supabase stack—per-test rollbacks, JWT/role context helpers, and CI/GitHub Actions ready.
 * [graphile-test](https://github.com/constructive-io/constructive/tree/main/graphile/graphile-test): **🔐 Authentication mocking** for Graphile-focused test helpers and emulating row-level security contexts.

package/esm/middleware/graphile.js CHANGED Viewed

@@ -1,5 +1,6 @@
 import './types'; // for Request type
 import crypto from 'node:crypto';
+import { classify, parse } from '@constructive-io/errors';
 import { getNodeEnv } from '@pgpmjs/env';
 import { Logger } from '@pgpmjs/logger';
 import { createGraphileInstance, graphileCache } from 'graphile-cache';
@@ -12,130 +13,73 @@ import { HandlerCreationError } from '../errors/api-errors';
 import { AuthCookiePlugin } from '../plugins/auth-cookie-plugin';
 import { observeGraphileBuild } from './observability/graphile-build-stats';
 const maskErrorLog = new Logger('graphile:maskError');
-const SAFE_ERROR_CODES = new Set([
-    // GraphQL standard
+/**
+ * GraphQL framework protocol codes. These originate in the GraphQL/grafast
+ * transport layer (not in constructive-db), so they are not Constructive domain
+ * codes in the `@constructive-io/errors` registry. They are always safe to
+ * surface — they carry no sensitive detail. Everything else (auth, account,
+ * resource, constraint, and every constructive-db code) is classified by the
+ * registry, which is the single source of truth for public vs. internal.
+ */
+const GRAPHQL_PROTOCOL_CODES = new Set([
     'GRAPHQL_VALIDATION_FAILED',
     'GRAPHQL_PARSE_FAILED',
     'PERSISTED_QUERY_NOT_FOUND',
-    'PERSISTED_QUERY_NOT_SUPPORTED',
-    // Auth
-    'UNAUTHENTICATED',
-    'NOT_AUTHENTICATED',
-    'USER_NOT_AUTHENTICATED',
-    'FORBIDDEN',
-    'BAD_USER_INPUT',
-    'INCORRECT_PASSWORD',
-    'PASSWORD_INSECURE',
-    'ACCOUNT_LOCKED',
-    'ACCOUNT_LOCKED_EXCEED_ATTEMPTS',
-    'ACCOUNT_DISABLED',
-    'ACCOUNT_EXISTS',
-    'ACCOUNT_NOT_FOUND',
-    'USER_NOT_FOUND',
-    'INVALID_USER',
-    'INVALID_TOKEN',
-    'INVALID_CODE',
-    'NO_PRIMARY_EMAIL',
-    'NO_CREDENTIALS',
-    'PASSWORD_LEN',
-    'INVITE_NOT_FOUND',
-    'INVITE_LIMIT',
-    'INVITE_EMAIL_NOT_FOUND',
-    'EMAIL_NOT_VERIFIED',
-    'PROFILE_ASSIGNMENT_REQUIRES_EMAIL_INVITE',
-    'ASSIGN_PROFILES_PERMISSION_REQUIRED',
-    'PROFILE_NOT_FOUND',
-    'PROFILE_EXCEEDS_PERMISSIONS',
-    'MEMBERSHIP_NOT_FOUND',
-    'INVALID_CREDENTIALS',
-    // Auth method toggles (app-level allow_* settings)
-    'SIGN_UP_DISABLED',
-    'PASSWORD_SIGN_IN_DISABLED',
-    'PASSWORD_SIGN_UP_DISABLED',
-    'SSO_SIGN_IN_DISABLED',
-    'SSO_SIGN_UP_DISABLED',
-    'SSO_ACCOUNT_NOT_FOUND',
-    'CONNECTED_ACCOUNT_NOT_FOUND',
-    'MAGIC_LINK_SIGN_IN_DISABLED',
-    'MAGIC_LINK_SIGN_UP_DISABLED',
-    'EMAIL_OTP_SIGN_IN_DISABLED',
-    'SMS_SIGN_IN_DISABLED',
-    'SMS_SIGN_UP_DISABLED',
-    // CSRF
-    'CSRF_TOKEN_REQUIRED',
-    'INVALID_CSRF_TOKEN',
-    // Rate limiting / throttling
-    'TOO_MANY_REQUESTS',
-    'PASSWORD_RESET_LOCKED_EXCEED_ATTEMPTS',
-    // TOTP / MFA / step-up
-    'TOTP_NOT_ENABLED',
-    'TOTP_ALREADY_ENABLED',
-    'TOTP_SETUP_NOT_INITIATED',
-    'MFA_REQUIRED',
-    'MFA_CHALLENGE_EXPIRED',
-    'INVALID_MFA_CHALLENGE',
-    'STEP_UP_REQUIRED',
-    'STEP_UP_REQUIRED_PASSWORD',
-    'STEP_UP_REQUIRED_PASSWORD_OR_MFA',
-    // Sessions / API keys
-    'SESSION_NOT_FOUND',
-    'API_KEY_NOT_FOUND',
-    'CANNOT_DISCONNECT_LAST_AUTH_METHOD',
-    'CANNOT_REVOKE_CURRENT_SESSION',
-    // Account / resource operations
-    'NOT_FOUND',
-    'NULL_VALUES_DISALLOWED',
-    'OBJECT_NOT_FOUND',
-    'OBJECT_NO_UPDATE',
-    'LIMIT_REACHED',
-    'REQUIRES_ONE_OWNER',
-    'DELETE_FIRST',
-    'REF_NOT_FOUND',
-    'CROSS_DATABASE_REF',
-    'GROUPS_REQ_ENTITIES',
-    'ALREADY_SCHEDULED',
-    'SINGLETON_TABLE',
-    // Entity/field immutability
-    'IMMUTABLE_FIELD',
-    'IMMUTABLE_PROPS',
-    'IMMUTABLE_PEOPLESTAMPS',
-    'IMMUTABLE_TIMESTAMPS',
-    'CONST_TYPE_FIELDS_IMMUTABLE',
-    // PublicKeySignature
-    'FEATURE_DISABLED',
-    'INVALID_PUBLIC_KEY',
-    'INVALID_MESSAGE',
-    'INVALID_SIGNATURE',
-    'NO_ACCOUNT_EXISTS',
-    'BAD_SIGNIN',
-    // Upload
-    'UPLOAD_MIMETYPE',
-    // PostgreSQL constraint violations (surfaced by PostGraphile)
-    '23505', // unique_violation
-    '23503', // foreign_key_violation
-    '23502', // not_null_violation
-    '23514', // check_violation
-    '23P01' // exclusion_violation
+    'PERSISTED_QUERY_NOT_SUPPORTED'
 ]);
+/** A code is safe to surface when the registry classifies it public, or it is a
+ * GraphQL framework protocol code. */
+const isPublicCode = (code) => Boolean(code) && (classify(code) === 'public' || GRAPHQL_PROTOCOL_CODES.has(code));
 /**
- * Production-aware error masking function.
+ * Normalize any GraphQL/database error into a canonical Constructive shape.
  *
- * In development: returns errors as-is for debugging.
- * In production: returns errors with explicit codes from the SAFE_ERROR_CODES
- * allowlist as-is, but masks unexpected/database errors with a reference ID
- * and logs the original.
+ * Database errors surface through Grafast without a populated `extensions.code`
+ * (the semantic code lives in the message, and any SQLSTATE/DETAIL lives on the
+ * underlying pg error at `originalError`). We parse `originalError` first so we
+ * can recover the structured code, then fall back to the GraphQL error itself.
+ */
+const normalizeError = (error) => {
+    const original = error.originalError;
+    const fromOriginal = original ? parse(original) : null;
+    const parsed = fromOriginal?.code ? fromOriginal : parse(error);
+    return { code: parsed.code, context: parsed.context, class: parsed.class };
+};
+/**
+ * Production-aware error handling backed by `@constructive-io/errors`.
+ *
+ * 1. Enrich `extensions.code`/`class`/`context` from the parsed error so clients
+ *    always receive a machine-readable code (fixing the gap where database
+ *    errors reached clients as a bare message with empty `extensions`).
+ * 2. Surface public (registered/allowlisted) errors as-is.
+ * 3. In development, pass everything through (enriched) for debugging.
+ * 4. In production, mask internal/unknown errors behind a reference ID and log
+ *    the original.
  */
 const maskError = (error) => {
-    if (getNodeEnv() === 'development') {
-        return error;
+    const { code, context, class: errorClass } = normalizeError(error);
+    // Lift the structured code onto extensions for every recognized error so
+    // clients always receive a machine-readable code (`extensions` is read-only
+    // on GraphQLError, so we build a formatted error rather than mutating it).
+    const extensions = { ...error.extensions };
+    if (code) {
+        extensions.code = code;
+        extensions.class = errorClass;
+        if (Object.keys(context).length > 0) {
+            extensions.context = context;
+        }
     }
-    // Only expose errors with codes on the safe allowlist.
-    // Note: grafserv strips originalError and internal extensions before
-    // serializing to the client, so returning the full error object is safe here.
-    if (error.extensions?.code && SAFE_ERROR_CODES.has(error.extensions.code)) {
-        return error;
+    const effectiveCode = code ?? error.extensions?.code;
+    if (isPublicCode(effectiveCode) || getNodeEnv() === 'development') {
+        // Note: grafserv strips originalError and internal extensions before
+        // serializing to the client, so returning the enriched error is safe.
+        return {
+            message: error.message,
+            ...(error.locations ? { locations: error.locations } : {}),
+            ...(error.path ? { path: error.path } : {}),
+            extensions,
+        };
     }
-    // Mask unexpected/database errors with a reference ID
+    // Mask internal/unknown errors with a reference ID.
     const errorId = crypto.randomBytes(8).toString('hex');
     maskErrorLog.error(`[masked-error:${errorId}]`, error);
     return {

package/middleware/graphile.js CHANGED Viewed

@@ -9,6 +9,7 @@ exports.getInFlightKeys = getInFlightKeys;
 exports.clearInFlightMap = clearInFlightMap;
 require("./types"); // for Request type
 const node_crypto_1 = __importDefault(require("node:crypto"));
+const errors_1 = require("@constructive-io/errors");
 const env_1 = require("@pgpmjs/env");
 const logger_1 = require("@pgpmjs/logger");
 const graphile_cache_1 = require("graphile-cache");
@@ -21,130 +22,73 @@ const api_errors_1 = require("../errors/api-errors");
 const auth_cookie_plugin_1 = require("../plugins/auth-cookie-plugin");
 const graphile_build_stats_1 = require("./observability/graphile-build-stats");
 const maskErrorLog = new logger_1.Logger('graphile:maskError');
-const SAFE_ERROR_CODES = new Set([
-    // GraphQL standard
+/**
+ * GraphQL framework protocol codes. These originate in the GraphQL/grafast
+ * transport layer (not in constructive-db), so they are not Constructive domain
+ * codes in the `@constructive-io/errors` registry. They are always safe to
+ * surface — they carry no sensitive detail. Everything else (auth, account,
+ * resource, constraint, and every constructive-db code) is classified by the
+ * registry, which is the single source of truth for public vs. internal.
+ */
+const GRAPHQL_PROTOCOL_CODES = new Set([
     'GRAPHQL_VALIDATION_FAILED',
     'GRAPHQL_PARSE_FAILED',
     'PERSISTED_QUERY_NOT_FOUND',
-    'PERSISTED_QUERY_NOT_SUPPORTED',
-    // Auth
-    'UNAUTHENTICATED',
-    'NOT_AUTHENTICATED',
-    'USER_NOT_AUTHENTICATED',
-    'FORBIDDEN',
-    'BAD_USER_INPUT',
-    'INCORRECT_PASSWORD',
-    'PASSWORD_INSECURE',
-    'ACCOUNT_LOCKED',
-    'ACCOUNT_LOCKED_EXCEED_ATTEMPTS',
-    'ACCOUNT_DISABLED',
-    'ACCOUNT_EXISTS',
-    'ACCOUNT_NOT_FOUND',
-    'USER_NOT_FOUND',
-    'INVALID_USER',
-    'INVALID_TOKEN',
-    'INVALID_CODE',
-    'NO_PRIMARY_EMAIL',
-    'NO_CREDENTIALS',
-    'PASSWORD_LEN',
-    'INVITE_NOT_FOUND',
-    'INVITE_LIMIT',
-    'INVITE_EMAIL_NOT_FOUND',
-    'EMAIL_NOT_VERIFIED',
-    'PROFILE_ASSIGNMENT_REQUIRES_EMAIL_INVITE',
-    'ASSIGN_PROFILES_PERMISSION_REQUIRED',
-    'PROFILE_NOT_FOUND',
-    'PROFILE_EXCEEDS_PERMISSIONS',
-    'MEMBERSHIP_NOT_FOUND',
-    'INVALID_CREDENTIALS',
-    // Auth method toggles (app-level allow_* settings)
-    'SIGN_UP_DISABLED',
-    'PASSWORD_SIGN_IN_DISABLED',
-    'PASSWORD_SIGN_UP_DISABLED',
-    'SSO_SIGN_IN_DISABLED',
-    'SSO_SIGN_UP_DISABLED',
-    'SSO_ACCOUNT_NOT_FOUND',
-    'CONNECTED_ACCOUNT_NOT_FOUND',
-    'MAGIC_LINK_SIGN_IN_DISABLED',
-    'MAGIC_LINK_SIGN_UP_DISABLED',
-    'EMAIL_OTP_SIGN_IN_DISABLED',
-    'SMS_SIGN_IN_DISABLED',
-    'SMS_SIGN_UP_DISABLED',
-    // CSRF
-    'CSRF_TOKEN_REQUIRED',
-    'INVALID_CSRF_TOKEN',
-    // Rate limiting / throttling
-    'TOO_MANY_REQUESTS',
-    'PASSWORD_RESET_LOCKED_EXCEED_ATTEMPTS',
-    // TOTP / MFA / step-up
-    'TOTP_NOT_ENABLED',
-    'TOTP_ALREADY_ENABLED',
-    'TOTP_SETUP_NOT_INITIATED',
-    'MFA_REQUIRED',
-    'MFA_CHALLENGE_EXPIRED',
-    'INVALID_MFA_CHALLENGE',
-    'STEP_UP_REQUIRED',
-    'STEP_UP_REQUIRED_PASSWORD',
-    'STEP_UP_REQUIRED_PASSWORD_OR_MFA',
-    // Sessions / API keys
-    'SESSION_NOT_FOUND',
-    'API_KEY_NOT_FOUND',
-    'CANNOT_DISCONNECT_LAST_AUTH_METHOD',
-    'CANNOT_REVOKE_CURRENT_SESSION',
-    // Account / resource operations
-    'NOT_FOUND',
-    'NULL_VALUES_DISALLOWED',
-    'OBJECT_NOT_FOUND',
-    'OBJECT_NO_UPDATE',
-    'LIMIT_REACHED',
-    'REQUIRES_ONE_OWNER',
-    'DELETE_FIRST',
-    'REF_NOT_FOUND',
-    'CROSS_DATABASE_REF',
-    'GROUPS_REQ_ENTITIES',
-    'ALREADY_SCHEDULED',
-    'SINGLETON_TABLE',
-    // Entity/field immutability
-    'IMMUTABLE_FIELD',
-    'IMMUTABLE_PROPS',
-    'IMMUTABLE_PEOPLESTAMPS',
-    'IMMUTABLE_TIMESTAMPS',
-    'CONST_TYPE_FIELDS_IMMUTABLE',
-    // PublicKeySignature
-    'FEATURE_DISABLED',
-    'INVALID_PUBLIC_KEY',
-    'INVALID_MESSAGE',
-    'INVALID_SIGNATURE',
-    'NO_ACCOUNT_EXISTS',
-    'BAD_SIGNIN',
-    // Upload
-    'UPLOAD_MIMETYPE',
-    // PostgreSQL constraint violations (surfaced by PostGraphile)
-    '23505', // unique_violation
-    '23503', // foreign_key_violation
-    '23502', // not_null_violation
-    '23514', // check_violation
-    '23P01' // exclusion_violation
+    'PERSISTED_QUERY_NOT_SUPPORTED'
 ]);
+/** A code is safe to surface when the registry classifies it public, or it is a
+ * GraphQL framework protocol code. */
+const isPublicCode = (code) => Boolean(code) && ((0, errors_1.classify)(code) === 'public' || GRAPHQL_PROTOCOL_CODES.has(code));
 /**
- * Production-aware error masking function.
+ * Normalize any GraphQL/database error into a canonical Constructive shape.
  *
- * In development: returns errors as-is for debugging.
- * In production: returns errors with explicit codes from the SAFE_ERROR_CODES
- * allowlist as-is, but masks unexpected/database errors with a reference ID
- * and logs the original.
+ * Database errors surface through Grafast without a populated `extensions.code`
+ * (the semantic code lives in the message, and any SQLSTATE/DETAIL lives on the
+ * underlying pg error at `originalError`). We parse `originalError` first so we
+ * can recover the structured code, then fall back to the GraphQL error itself.
+ */
+const normalizeError = (error) => {
+    const original = error.originalError;
+    const fromOriginal = original ? (0, errors_1.parse)(original) : null;
+    const parsed = fromOriginal?.code ? fromOriginal : (0, errors_1.parse)(error);
+    return { code: parsed.code, context: parsed.context, class: parsed.class };
+};
+/**
+ * Production-aware error handling backed by `@constructive-io/errors`.
+ *
+ * 1. Enrich `extensions.code`/`class`/`context` from the parsed error so clients
+ *    always receive a machine-readable code (fixing the gap where database
+ *    errors reached clients as a bare message with empty `extensions`).
+ * 2. Surface public (registered/allowlisted) errors as-is.
+ * 3. In development, pass everything through (enriched) for debugging.
+ * 4. In production, mask internal/unknown errors behind a reference ID and log
+ *    the original.
  */
 const maskError = (error) => {
-    if ((0, env_1.getNodeEnv)() === 'development') {
-        return error;
+    const { code, context, class: errorClass } = normalizeError(error);
+    // Lift the structured code onto extensions for every recognized error so
+    // clients always receive a machine-readable code (`extensions` is read-only
+    // on GraphQLError, so we build a formatted error rather than mutating it).
+    const extensions = { ...error.extensions };
+    if (code) {
+        extensions.code = code;
+        extensions.class = errorClass;
+        if (Object.keys(context).length > 0) {
+            extensions.context = context;
+        }
     }
-    // Only expose errors with codes on the safe allowlist.
-    // Note: grafserv strips originalError and internal extensions before
-    // serializing to the client, so returning the full error object is safe here.
-    if (error.extensions?.code && SAFE_ERROR_CODES.has(error.extensions.code)) {
-        return error;
+    const effectiveCode = code ?? error.extensions?.code;
+    if (isPublicCode(effectiveCode) || (0, env_1.getNodeEnv)() === 'development') {
+        // Note: grafserv strips originalError and internal extensions before
+        // serializing to the client, so returning the enriched error is safe.
+        return {
+            message: error.message,
+            ...(error.locations ? { locations: error.locations } : {}),
+            ...(error.path ? { path: error.path } : {}),
+            extensions,
+        };
     }
-    // Mask unexpected/database errors with a reference ID
+    // Mask internal/unknown errors with a reference ID.
     const errorId = node_crypto_1.default.randomBytes(8).toString('hex');
     maskErrorLog.error(`[masked-error:${errorId}]`, error);
     return {

package/package.json CHANGED Viewed

@@ -1,6 +1,6 @@
 {
   "name": "@constructive-io/graphql-server",
-  "version": "5.7.4",
+  "version": "5.9.0",
   "author": "Constructive <developers@constructive.io>",
   "description": "Constructive GraphQL Server",
   "main": "index.js",
@@ -41,39 +41,40 @@
     "backend"
   ],
   "dependencies": {
-    "@constructive-io/csrf": "^0.21.0",
-    "@constructive-io/express-context": "^0.18.0",
-    "@constructive-io/graphql-env": "^3.23.0",
-    "@constructive-io/graphql-types": "^3.22.0",
-    "@constructive-io/query-builder": "^3.4.0",
-    "@constructive-io/s3-utils": "^2.24.0",
-    "@constructive-io/url-domains": "^2.23.0",
+    "@constructive-io/csrf": "^0.22.0",
+    "@constructive-io/errors": "^0.3.0",
+    "@constructive-io/express-context": "^0.19.0",
+    "@constructive-io/graphql-env": "^3.24.0",
+    "@constructive-io/graphql-types": "^3.23.0",
+    "@constructive-io/query-builder": "^3.5.0",
+    "@constructive-io/s3-utils": "^2.25.0",
+    "@constructive-io/url-domains": "^2.24.0",
     "@graphile-contrib/pg-many-to-many": "2.0.0-rc.2",
-    "@pgpmjs/env": "^2.33.0",
-    "@pgpmjs/logger": "^2.18.0",
-    "@pgpmjs/server-utils": "^3.19.0",
-    "@pgpmjs/types": "^2.40.0",
-    "agentic-server": "0.16.1",
+    "@pgpmjs/env": "^2.34.0",
+    "@pgpmjs/logger": "^2.19.0",
+    "@pgpmjs/server-utils": "^3.20.0",
+    "@pgpmjs/types": "^2.42.0",
+    "agentic-server": "0.17.0",
     "cors": "^2.8.6",
     "deepmerge": "^4.3.1",
     "express": "^5.2.1",
-    "gql-ast": "^3.17.0",
+    "gql-ast": "^3.18.0",
     "grafast": "1.0.2",
     "grafserv": "1.0.0",
     "graphile-build": "5.0.2",
     "graphile-build-pg": "5.0.2",
-    "graphile-cache": "^4.4.0",
+    "graphile-cache": "^4.5.0",
     "graphile-config": "1.0.1",
-    "graphile-function-bindings": "^1.5.2",
-    "graphile-settings": "^6.5.4",
+    "graphile-function-bindings": "^1.6.0",
+    "graphile-settings": "^6.6.0",
     "graphile-utils": "5.0.1",
     "graphql": "16.13.0",
     "graphql-upload": "^13.0.0",
     "lru-cache": "^11.2.7",
     "pg": "^8.21.0",
-    "pg-cache": "^3.19.0",
-    "pg-env": "^1.22.0",
-    "pg-query-context": "^2.23.0",
+    "pg-cache": "^3.20.0",
+    "pg-env": "^1.23.0",
+    "pg-query-context": "^2.24.0",
     "pg-sql2": "5.0.1",
     "postgraphile": "5.0.3",
     "request-ip": "^3.3.0"
@@ -87,10 +88,10 @@
     "@types/pg": "^8.20.0",
     "@types/request-ip": "^0.0.41",
     "cookie-parser": "^1.4.7",
-    "graphile-test": "5.5.2",
+    "graphile-test": "5.6.0",
     "makage": "^0.3.0",
     "nodemon": "^3.1.14",
     "ts-node": "^10.9.2"
   },
-  "gitHead": "31f7cd3d3cc28cf069056eae5b2a0d4198d154a1"
+  "gitHead": "bb3269d48cdf2bc8f361bdd79b4833c921c13ec3"
 }