@friggframework/admin-scripts 2.0.0--canary.517.f8e0cc1.0 → 2.0.0--canary.517.44c158e.0

package/README.md

@@ -1,6 +1,6 @@
 # @friggframework/admin-scripts
 
-Admin Script Runner for Frigg — write and run operational/maintenance scripts inside your deployed Frigg app, with VPC/KMS-secured database access, the same repositories your integrations use, sync or async (queued) execution, dry-run validation, and optional cron scheduling via AWS EventBridge Scheduler.
+Admin Script Runner for Frigg — write and run operational/maintenance scripts inside your deployed Frigg app, with VPC/KMS-secured database access through the same Frigg commands your integrations use, sync or async (queued) execution, dry-run validation, and optional cron scheduling via AWS EventBridge Scheduler.
 
 Typical use cases:
 
@@ -87,12 +87,17 @@ class AttioHealingScript extends AdminScriptBase {
 
         this.context.log('info', 'Starting Attio healing', { integrationId });
 
+        // Read persisted data through Frigg commands (never repositories).
+        // Commands return the data on success, or an { error, reason } object
+        // on failure — check `.error` yourself.
         const integration =
-            await this.context.integrationRepository.findIntegrationById(
+            await this.context.commands.integrations.findIntegrationById(
                 integrationId
             );
-        if (!integration) {
-            throw new Error(`Integration ${integrationId} not found`);
+        if (integration.error) {
+            throw new Error(
+                `Integration ${integrationId} not found: ${integration.reason}`
+            );
         }
 
         // Call the live integration when you need to hit an external API.
@@ -117,16 +122,16 @@ module.exports = { AttioHealingScript };
 | Member                       | Description                                                                                                                    |
 | ---------------------------- | ------------------------------------------------------------------------------------------------------------------------------ |
 | `log(level, message, data?)` | Records a structured log entry (`level`: `debug`/`info`/`warn`/`error`). Logs are persisted to the execution's `results.logs`. |
-| `integrationRepository`      | Read/query integrations.                                                                                                       |
-| `userRepository`             | Read/query users.                                                                                                              |
-| `moduleRepository`           | Read/query modules.                                                                                                            |
-| `credentialRepository`       | Read credentials (decrypted transparently).                                                                                    |
+| `commands.users`             | User commands (`findIndividualUserById`, `createUser`, `updateUser`, …).                                                       |
+| `commands.credentials`       | Credential commands (`findCredential`, `updateCredential`, …); secrets decrypted transparently.                               |
+| `commands.entities`          | Entity/module commands (`findEntityById`, `findEntitiesByUserId`, …).                                                          |
+| `commands.integrations`      | Integration reads (`findIntegrationById`, `listIntegrations({ type, status })`).                                               |
 | `instantiate(integrationId)` | Returns a hydrated integration instance for calling external APIs. Requires `config.requireIntegrationInstance: true`.         |
 | `queueScript(name, params?)` | Enqueue another script as a follow-up (tracked as a child of the current execution).                                           |
 | `queueScriptBatch(entries)`  | Enqueue many follow-up scripts at once.                                                                                        |
 | `getExecutionId()`           | The current `AdminProcess` record id.                                                                                          |
 
-Repositories return **plain, decrypted data** — field-level encryption is handled transparently.
+Commands return **plain, decrypted data** on success (field-level encryption is handled transparently) or an `{ error, reason, code }` object on failure — scripts check `.error` themselves. Scripts have no direct repository access; all database interaction goes through the command layer.
 
 ---
 

package/index.js

@@ -6,10 +6,7 @@
  */
 
 // Application Services
-const {
-    ScriptFactory,
-    getScriptFactory,
-} = require('./src/application/script-factory');
+const { ScriptFactory } = require('./src/application/script-factory');
 const { AdminScriptBase } = require('./src/application/admin-script-base');
 const {
     AdminScriptContext,
@@ -47,7 +44,6 @@ module.exports = {
     // Application layer
     AdminScriptBase,
     ScriptFactory,
-    getScriptFactory,
     AdminScriptContext,
     createAdminScriptContext,
     ScriptRunner,

package/package.json

@@ -1,19 +1,19 @@
 {
     "name": "@friggframework/admin-scripts",
     "prettier": "@friggframework/prettier-config",
-    "version": "2.0.0--canary.517.f8e0cc1.0",
+    "version": "2.0.0--canary.517.44c158e.0",
     "description": "Admin Script Runner for Frigg - Execute maintenance and operational scripts in hosted environments",
     "dependencies": {
         "@aws-sdk/client-scheduler": "^3.588.0",
-        "@friggframework/core": "2.0.0--canary.517.f8e0cc1.0",
+        "@friggframework/core": "2.0.0--canary.517.44c158e.0",
         "@hapi/boom": "^10.0.1",
         "express": "^4.18.2",
         "serverless-http": "^3.2.0"
     },
     "devDependencies": {
-        "@friggframework/eslint-config": "2.0.0--canary.517.f8e0cc1.0",
-        "@friggframework/prettier-config": "2.0.0--canary.517.f8e0cc1.0",
-        "@friggframework/test": "2.0.0--canary.517.f8e0cc1.0",
+        "@friggframework/eslint-config": "2.0.0--canary.517.44c158e.0",
+        "@friggframework/prettier-config": "2.0.0--canary.517.44c158e.0",
+        "@friggframework/test": "2.0.0--canary.517.44c158e.0",
         "eslint": "^8.22.0",
         "jest": "^29.7.0",
         "prettier": "^2.7.1",
@@ -44,5 +44,5 @@
         "maintenance",
         "operations"
     ],
-    "gitHead": "f8e0cc122e1580a8fe61fa3fb9b2b9f39f461e61"
+    "gitHead": "44c158e7a3bbeaac4b410c1062b0ce209bffd7f0"
 }

package/src/application/__tests__/admin-script-context.test.js

@@ -1,80 +1,24 @@
+const fs = require('fs');
+const path = require('path');
 const {
     AdminScriptContext,
     createAdminScriptContext,
 } = require('../admin-script-context');
 
-// Mock all repository factories
-jest.mock(
-    '@friggframework/core/integrations/repositories/integration-repository-factory'
-);
-jest.mock('@friggframework/core/user/repositories/user-repository-factory');
-jest.mock(
-    '@friggframework/core/modules/repositories/module-repository-factory'
-);
-jest.mock(
-    '@friggframework/core/credential/repositories/credential-repository-factory'
-);
 jest.mock('@friggframework/core/queues');
 
 describe('AdminScriptContext', () => {
-    let mockIntegrationRepo;
-    let mockUserRepo;
-    let mockModuleRepo;
-    let mockCredentialRepo;
     let mockQueuerUtil;
 
     beforeEach(() => {
         jest.clearAllMocks();
 
-        mockIntegrationRepo = {
-            findIntegrations: jest.fn(),
-            findIntegrationById: jest.fn(),
-            findIntegrationsByUserId: jest.fn(),
-            updateIntegrationConfig: jest.fn(),
-            updateIntegrationStatus: jest.fn(),
-        };
-
-        mockUserRepo = {
-            findIndividualUserById: jest.fn(),
-            findIndividualUserByAppUserId: jest.fn(),
-            findIndividualUserByUsername: jest.fn(),
-        };
-
-        mockModuleRepo = {
-            findEntity: jest.fn(),
-            findEntityById: jest.fn(),
-            findEntitiesByUserId: jest.fn(),
-        };
-
-        mockCredentialRepo = {
-            findCredential: jest.fn(),
-            updateCredential: jest.fn(),
-        };
-
         mockQueuerUtil = {
             send: jest.fn().mockResolvedValue(undefined),
             batchSend: jest.fn().mockResolvedValue(undefined),
         };
 
-        const {
-            createIntegrationRepository,
-        } = require('@friggframework/core/integrations/repositories/integration-repository-factory');
-        const {
-            createUserRepository,
-        } = require('@friggframework/core/user/repositories/user-repository-factory');
-        const {
-            createModuleRepository,
-        } = require('@friggframework/core/modules/repositories/module-repository-factory');
-        const {
-            createCredentialRepository,
-        } = require('@friggframework/core/credential/repositories/credential-repository-factory');
         const { QueuerUtil } = require('@friggframework/core/queues');
-
-        createIntegrationRepository.mockReturnValue(mockIntegrationRepo);
-        createUserRepository.mockReturnValue(mockUserRepo);
-        createModuleRepository.mockReturnValue(mockModuleRepo);
-        createCredentialRepository.mockReturnValue(mockCredentialRepo);
-
         QueuerUtil.send = mockQueuerUtil.send;
         QueuerUtil.batchSend = mockQueuerUtil.batchSend;
     });
@@ -86,6 +30,19 @@ describe('AdminScriptContext', () => {
             expect(ctx.executionId).toBe('exec_123');
             expect(ctx.logs).toEqual([]);
             expect(ctx.integrationFactory).toBeNull();
+            expect(ctx.commands).toBeNull();
+        });
+
+        it('exposes the injected command bundle as context.commands', () => {
+            const commands = {
+                users: {},
+                credentials: {},
+                entities: {},
+                integrations: {},
+            };
+            const ctx = new AdminScriptContext({ commands });
+
+            expect(ctx.commands).toBe(commands);
         });
 
         it('creates with integrationFactory', () => {
@@ -106,71 +63,23 @@ describe('AdminScriptContext', () => {
         });
     });
 
-    describe('Lazy Repository Loading', () => {
-        it('creates integrationRepository on first access', () => {
+    describe('command surface (no direct repository access)', () => {
+        it('does not expose repository getters', () => {
             const ctx = new AdminScriptContext();
-            const {
-                createIntegrationRepository,
-            } = require('@friggframework/core/integrations/repositories/integration-repository-factory');
-
-            expect(createIntegrationRepository).not.toHaveBeenCalled();
 
-            const repo = ctx.integrationRepository;
-
-            expect(createIntegrationRepository).toHaveBeenCalledTimes(1);
-            expect(repo).toBe(mockIntegrationRepo);
+            expect(ctx.integrationRepository).toBeUndefined();
+            expect(ctx.userRepository).toBeUndefined();
+            expect(ctx.moduleRepository).toBeUndefined();
+            expect(ctx.credentialRepository).toBeUndefined();
         });
 
-        it('returns same instance on subsequent access', () => {
-            const ctx = new AdminScriptContext();
-
-            const repo1 = ctx.integrationRepository;
-            const repo2 = ctx.integrationRepository;
-
-            expect(repo1).toBe(repo2);
-            expect(repo1).toBe(mockIntegrationRepo);
-        });
-
-        it('creates userRepository on first access', () => {
-            const ctx = new AdminScriptContext();
-            const {
-                createUserRepository,
-            } = require('@friggframework/core/user/repositories/user-repository-factory');
-
-            expect(createUserRepository).not.toHaveBeenCalled();
-
-            const repo = ctx.userRepository;
-
-            expect(createUserRepository).toHaveBeenCalledTimes(1);
-            expect(repo).toBe(mockUserRepo);
-        });
-
-        it('creates moduleRepository on first access', () => {
-            const ctx = new AdminScriptContext();
-            const {
-                createModuleRepository,
-            } = require('@friggframework/core/modules/repositories/module-repository-factory');
-
-            expect(createModuleRepository).not.toHaveBeenCalled();
-
-            const repo = ctx.moduleRepository;
-
-            expect(createModuleRepository).toHaveBeenCalledTimes(1);
-            expect(repo).toBe(mockModuleRepo);
-        });
-
-        it('creates credentialRepository on first access', () => {
-            const ctx = new AdminScriptContext();
-            const {
-                createCredentialRepository,
-            } = require('@friggframework/core/credential/repositories/credential-repository-factory');
-
-            expect(createCredentialRepository).not.toHaveBeenCalled();
-
-            const repo = ctx.credentialRepository;
+        it('the context module never imports a repository factory', () => {
+            const source = fs.readFileSync(
+                path.join(__dirname, '..', 'admin-script-context.js'),
+                'utf8'
+            );
 
-            expect(createCredentialRepository).toHaveBeenCalledTimes(1);
-            expect(repo).toBe(mockCredentialRepo);
+            expect(source).not.toMatch(/repository-factory/);
         });
     });
 

package/src/application/__tests__/script-factory.test.js

@@ -1,4 +1,4 @@
-const { ScriptFactory, getScriptFactory } = require('../script-factory');
+const { ScriptFactory } = require('../script-factory');
 const { AdminScriptBase } = require('../admin-script-base');
 
 describe('ScriptFactory', () => {
@@ -333,15 +333,32 @@ describe('ScriptFactory', () => {
         });
     });
 
-    describe('Global factory functions', () => {
-        it('getScriptFactory() should return singleton instance', () => {
-            const factory1 = getScriptFactory();
-            const factory2 = getScriptFactory();
+    describe('constructor', () => {
+        it('registers scripts passed to the constructor', () => {
+            class ScriptOne extends AdminScriptBase {
+                static Definition = {
+                    name: 'script-one',
+                    version: '1.0.0',
+                    description: 'One',
+                };
+            }
+            class ScriptTwo extends AdminScriptBase {
+                static Definition = {
+                    name: 'script-two',
+                    version: '1.0.0',
+                    description: 'Two',
+                };
+            }
 
-            expect(factory1).toBe(factory2);
-            expect(factory1).toBeInstanceOf(ScriptFactory);
+            const factory = new ScriptFactory([ScriptOne, ScriptTwo]);
+
+            expect(factory.size).toBe(2);
+            expect(factory.has('script-one')).toBe(true);
+            expect(factory.has('script-two')).toBe(true);
         });
+    });
 
+    describe('Instance independence', () => {
         it('new ScriptFactory() creates independent instances', () => {
             const factory1 = new ScriptFactory();
             const factory2 = new ScriptFactory();
@@ -351,7 +368,7 @@ describe('ScriptFactory', () => {
             expect(factory2).toBeInstanceOf(ScriptFactory);
         });
 
-        it('global factory should be independent from created instances', () => {
+        it('registering into one factory does not affect another', () => {
             class TestScript extends AdminScriptBase {
                 static Definition = {
                     name: 'test',
@@ -360,18 +377,12 @@ describe('ScriptFactory', () => {
                 };
             }
 
-            const customFactory = new ScriptFactory();
-            customFactory.register(TestScript);
-
-            const globalFactory = getScriptFactory();
-
-            // Custom factory has the script
-            expect(customFactory.has('test')).toBe(true);
+            const factoryA = new ScriptFactory();
+            const factoryB = new ScriptFactory();
+            factoryA.register(TestScript);
 
-            // Global factory doesn't (assuming it's empty or has different scripts)
-            // We can't make assumptions about global factory state in tests
-            // so we just verify they're different instances
-            expect(customFactory).not.toBe(globalFactory);
+            expect(factoryA.has('test')).toBe(true);
+            expect(factoryB.has('test')).toBe(false);
         });
     });
 

package/src/application/__tests__/script-runner.test.js

@@ -292,12 +292,13 @@ describe('ScriptRunner', () => {
     });
 
     describe('createScriptRunner()', () => {
-        it('should create runner with default factory', () => {
-            const runner = createScriptRunner();
-            expect(runner).toBeInstanceOf(ScriptRunner);
+        it('should throw when no scriptFactory is provided', () => {
+            expect(() => createScriptRunner()).toThrow(
+                'ScriptRunner requires a scriptFactory'
+            );
         });
 
-        it('should create runner with custom params', () => {
+        it('should create runner with an injected factory', () => {
             const customFactory = new ScriptFactory();
             const runner = createScriptRunner({ scriptFactory: customFactory });
             expect(runner).toBeInstanceOf(ScriptRunner);

package/src/application/admin-script-context.js

@@ -3,23 +3,27 @@ const { QueuerUtil } = require('@friggframework/core/queues');
 /**
  * AdminScriptContext - Execution environment for admin scripts
  *
- * Provides a controlled surface area for scripts to interact with
- * the Frigg platform. Unique capabilities vs direct repo access:
+ * Provides a controlled surface area for scripts to interact with the Frigg
+ * platform. Scripts touch the database only through injected Frigg commands
+ * (`context.commands`) — never through repositories directly. Capabilities:
  *
+ * - **Frigg commands**: `commands.users`, `commands.credentials`,
+ *   `commands.entities`, and `commands.integrations` expose the framework's
+ *   command layer. Each command returns data on success or an `{ error }`
+ *   object on failure — scripts check `.error` themselves.
  * - **Admin bypass**: `instantiate()` passes `_isAdminContext: true` to
  *   skip user-ownership checks when loading integration instances
  * - **Script chaining**: `queueScript()` / `queueScriptBatch()` let scripts
  *   enqueue follow-up work with parent execution tracking
  * - **Execution-scoped logging**: `log()` collects structured entries tied
  *   to the current execution for post-run inspection
- * - **Lazy-loaded repositories**: Repos are exposed directly as getters
- *   so scripts can query any data they need without wrapper indirection
  */
 class AdminScriptContext {
     /**
      * @param {Object} [params={}] - Context configuration
      * @param {string|number|null} [params.executionId] - ID of the AdminProcess record this context is scoped to (used for log persistence and script chaining)
      * @param {Object|null} [params.integrationFactory] - Factory used to hydrate integration instances; required for scripts that call instantiate()
+     * @param {Object|null} [params.commands] - Frigg command bundle ({ users, credentials, entities, integrations }) injected by the composition root and exposed to scripts as context.commands
      */
     constructor(params = {}) {
         this.executionId = params.executionId || null;
@@ -27,54 +31,10 @@ class AdminScriptContext {
 
         this.integrationFactory = params.integrationFactory || null;
 
-        // Repositories are created on first use so the Prisma client is only
-        // initialized (and only for the repos a script actually touches) when needed.
-        this._integrationRepository = null;
-        this._userRepository = null;
-        this._moduleRepository = null;
-        this._credentialRepository = null;
-    }
-
-    // ==================== LAZY-LOADED REPOSITORIES ====================
-
-    get integrationRepository() {
-        if (!this._integrationRepository) {
-            const {
-                createIntegrationRepository,
-            } = require('@friggframework/core/integrations/repositories/integration-repository-factory');
-            this._integrationRepository = createIntegrationRepository();
-        }
-        return this._integrationRepository;
-    }
-
-    get userRepository() {
-        if (!this._userRepository) {
-            const {
-                createUserRepository,
-            } = require('@friggframework/core/user/repositories/user-repository-factory');
-            this._userRepository = createUserRepository();
-        }
-        return this._userRepository;
-    }
-
-    get moduleRepository() {
-        if (!this._moduleRepository) {
-            const {
-                createModuleRepository,
-            } = require('@friggframework/core/modules/repositories/module-repository-factory');
-            this._moduleRepository = createModuleRepository();
-        }
-        return this._moduleRepository;
-    }
-
-    get credentialRepository() {
-        if (!this._credentialRepository) {
-            const {
-                createCredentialRepository,
-            } = require('@friggframework/core/credential/repositories/credential-repository-factory');
-            this._credentialRepository = createCredentialRepository();
-        }
-        return this._credentialRepository;
+        // Scripts interact with the database only through these Frigg commands.
+        // Injected by bootstrap.js — the context never reaches for repositories
+        // or command factories itself.
+        this.commands = params.commands || null;
     }
 
     // ==================== INTEGRATION INSTANTIATION ====================

package/src/application/script-factory.js

@@ -4,11 +4,18 @@
  * Registry and factory for admin scripts.
  * Manages script registration, validation, and instantiation.
  *
+ * Instances are created and owned by the caller (see bootstrap.js, which builds
+ * one per process and injects it into the runner and router). There is no global
+ * instance — pass a factory explicitly wherever one is needed.
+ *
  * Usage:
  * ```javascript
- * const factory = new ScriptFactory();
- * factory.register(MyScript);
- * const script = factory.createInstance('my-script', { executionId: '123' });
+ * const factory = new ScriptFactory([MyScript]);
+ * const script = factory.createInstance('my-script', {
+ *     context,
+ *     executionId,
+ *     integrationFactory,
+ * });
  * ```
  */
 class ScriptFactory {
@@ -137,18 +144,4 @@ class ScriptFactory {
     }
 }
 
-// Singleton instance for global use
-let globalFactory = null;
-
-/**
- * Get global script factory instance
- * @returns {ScriptFactory} Global factory
- */
-function getScriptFactory() {
-    if (!globalFactory) {
-        globalFactory = new ScriptFactory();
-    }
-    return globalFactory;
-}
-
-module.exports = { ScriptFactory, getScriptFactory };
+module.exports = { ScriptFactory };

package/src/application/script-runner.js

@@ -1,4 +1,3 @@
-const { getScriptFactory } = require('./script-factory');
 const { createAdminScriptContext } = require('./admin-script-context');
 const {
     createAdminScriptCommands,
@@ -14,10 +13,25 @@ const {
  * - Status updates
  */
 class ScriptRunner {
+    /**
+     * @param {Object} params
+     * @param {ScriptFactory} params.scriptFactory - Required. The registry used
+     *   to resolve and instantiate scripts by name (built by bootstrap.js).
+     * @param {Object} [params.commands] - Admin process command layer; defaults
+     *   to a fresh createAdminScriptCommands().
+     * @param {Object} [params.integrationFactory] - Hydrates integration
+     *   instances for scripts that need them.
+     * @param {Object} [params.scriptCommands] - Frigg command bundle exposed to
+     *   scripts as context.commands (built by bootstrap.js).
+     */
     constructor(params = {}) {
-        this.scriptFactory = params.scriptFactory || getScriptFactory();
+        if (!params.scriptFactory) {
+            throw new Error('ScriptRunner requires a scriptFactory');
+        }
+        this.scriptFactory = params.scriptFactory;
         this.commands = params.commands || createAdminScriptCommands();
         this.integrationFactory = params.integrationFactory || null;
+        this.scriptCommands = params.scriptCommands || null;
     }
 
     /**
@@ -89,6 +103,7 @@ class ScriptRunner {
         const context = createAdminScriptContext({
             executionId,
             integrationFactory: this.integrationFactory,
+            commands: this.scriptCommands,
         });
 
         let output;

package/src/infrastructure/__tests__/admin-script-router.test.js

@@ -10,16 +10,13 @@ jest.mock('../admin-auth-middleware', () => ({
     },
 }));
 
-jest.mock('../../application/script-factory');
 jest.mock('../../application/script-runner');
 jest.mock('@friggframework/core/application/commands/admin-script-commands');
 jest.mock('@friggframework/core/queues');
 jest.mock('../../adapters/scheduler-adapter-factory');
-jest.mock('../bootstrap', () => ({
-    bootstrapAdminScripts: () => ({ integrationFactory: {} }),
-}));
+jest.mock('../bootstrap');
 
-const { getScriptFactory } = require('../../application/script-factory');
+const { bootstrapAdminScripts } = require('../bootstrap');
 const { createScriptRunner } = require('../../application/script-runner');
 const {
     createAdminScriptCommands,
@@ -72,7 +69,11 @@ describe('Admin Script Router', () => {
             setScheduleEnabled: jest.fn(),
         };
 
-        getScriptFactory.mockReturnValue(mockFactory);
+        bootstrapAdminScripts.mockReturnValue({
+            scriptFactory: mockFactory,
+            integrationFactory: {},
+            scriptCommands: {},
+        });
         createScriptRunner.mockReturnValue(mockRunner);
         createAdminScriptCommands.mockReturnValue(mockCommands);
         createSchedulerAdapter.mockReturnValue(mockSchedulerAdapter);
@@ -174,6 +175,11 @@ describe('Admin Script Router', () => {
                     mode: 'sync',
                 })
             );
+            expect(createScriptRunner).toHaveBeenCalledWith({
+                scriptFactory: mockFactory,
+                integrationFactory: {},
+                scriptCommands: {},
+            });
         });
 
         it('should queue script for async execution', async () => {

package/src/infrastructure/__tests__/bootstrap.test.js

@@ -0,0 +1,113 @@
+const { ScriptFactory } = require('../../application/script-factory');
+const { AdminScriptBase } = require('../../application/admin-script-base');
+
+jest.mock('@friggframework/core/handlers/app-definition-loader');
+
+// The command bundle is built from these factories; mock them so bootstrap
+// doesn't need a configured database to construct the command groups.
+jest.mock('@friggframework/core/application/commands/user-commands', () => ({
+    createUserCommands: jest.fn(() => ({ __kind: 'users' })),
+}));
+jest.mock(
+    '@friggframework/core/application/commands/credential-commands',
+    () => ({
+        createCredentialCommands: jest.fn(() => ({ __kind: 'credentials' })),
+    })
+);
+jest.mock('@friggframework/core/application/commands/entity-commands', () => ({
+    createEntityCommands: jest.fn(() => ({ __kind: 'entities' })),
+}));
+jest.mock(
+    '@friggframework/core/application/commands/integration-commands',
+    () => ({
+        createIntegrationCommands: jest.fn(() => ({ __kind: 'integrations' })),
+    })
+);
+
+const {
+    loadAppDefinition,
+} = require('@friggframework/core/handlers/app-definition-loader');
+const {
+    bootstrapAdminScripts,
+    _resetBootstrapForTests,
+} = require('../bootstrap');
+
+class TestScript extends AdminScriptBase {
+    static Definition = {
+        name: 'test-script',
+        version: '1.0.0',
+        description: 'Test script',
+    };
+}
+
+describe('bootstrapAdminScripts', () => {
+    beforeEach(() => {
+        _resetBootstrapForTests();
+        jest.clearAllMocks();
+        jest.spyOn(console, 'error').mockImplementation(() => {});
+    });
+
+    afterEach(() => {
+        console.error.mockRestore();
+    });
+
+    it('registers the app definition admin scripts into the returned factory', () => {
+        loadAppDefinition.mockReturnValue({ adminScripts: [TestScript] });
+
+        const { scriptFactory, integrationFactory } = bootstrapAdminScripts();
+
+        expect(scriptFactory).toBeInstanceOf(ScriptFactory);
+        expect(scriptFactory.has('test-script')).toBe(true);
+        expect(integrationFactory).toBeTruthy();
+    });
+
+    it('never throws and returns an empty factory when the app definition cannot load', () => {
+        loadAppDefinition.mockImplementation(() => {
+            throw new Error('cannot load app definition');
+        });
+
+        let result;
+        expect(() => {
+            result = bootstrapAdminScripts();
+        }).not.toThrow();
+
+        expect(result.scriptFactory).toBeInstanceOf(ScriptFactory);
+        expect(result.scriptFactory.size).toBe(0);
+        expect(result.integrationFactory).toBeTruthy();
+        expect(console.error).toHaveBeenCalled();
+    });
+
+    it('memoizes: repeated calls reuse the same factory and load the definition once', () => {
+        loadAppDefinition.mockReturnValue({ adminScripts: [TestScript] });
+
+        const first = bootstrapAdminScripts();
+        const second = bootstrapAdminScripts();
+
+        expect(second.scriptFactory).toBe(first.scriptFactory);
+        expect(second.integrationFactory).toBe(first.integrationFactory);
+        expect(second.scriptCommands).toBe(first.scriptCommands);
+        expect(loadAppDefinition).toHaveBeenCalledTimes(1);
+    });
+
+    it('builds the injectable command bundle (users, credentials, entities, integrations)', () => {
+        loadAppDefinition.mockReturnValue({ adminScripts: [] });
+
+        const { scriptCommands } = bootstrapAdminScripts();
+
+        expect(scriptCommands).toEqual({
+            users: { __kind: 'users' },
+            credentials: { __kind: 'credentials' },
+            entities: { __kind: 'entities' },
+            integrations: { __kind: 'integrations' },
+        });
+    });
+
+    it('tolerates an app definition with no adminScripts', () => {
+        loadAppDefinition.mockReturnValue({});
+
+        const { scriptFactory } = bootstrapAdminScripts();
+
+        expect(scriptFactory).toBeInstanceOf(ScriptFactory);
+        expect(scriptFactory.size).toBe(0);
+    });
+});

package/src/infrastructure/__tests__/script-executor-handler.test.js

@@ -0,0 +1,168 @@
+jest.mock('../bootstrap');
+jest.mock('../../application/script-runner');
+jest.mock('@friggframework/core/application/commands/admin-script-commands');
+
+const { bootstrapAdminScripts } = require('../bootstrap');
+const { createScriptRunner } = require('../../application/script-runner');
+const {
+    createAdminScriptCommands,
+} = require('@friggframework/core/application/commands/admin-script-commands');
+const { handler } = require('../script-executor-handler');
+
+describe('Admin Script Executor Handler', () => {
+    let mockScriptFactory;
+    let mockIntegrationFactory;
+    let mockScriptCommands;
+    let mockRunner;
+    let mockCommands;
+
+    beforeEach(() => {
+        mockScriptFactory = { id: 'script-factory' };
+        mockIntegrationFactory = { id: 'integration-factory' };
+        mockScriptCommands = { id: 'script-commands' };
+        mockRunner = { execute: jest.fn() };
+        mockCommands = {
+            completeAdminProcess: jest.fn().mockResolvedValue({}),
+        };
+
+        bootstrapAdminScripts.mockReturnValue({
+            scriptFactory: mockScriptFactory,
+            integrationFactory: mockIntegrationFactory,
+            scriptCommands: mockScriptCommands,
+        });
+        createScriptRunner.mockReturnValue(mockRunner);
+        createAdminScriptCommands.mockReturnValue(mockCommands);
+
+        jest.spyOn(console, 'log').mockImplementation(() => {});
+        jest.spyOn(console, 'error').mockImplementation(() => {});
+    });
+
+    afterEach(() => {
+        console.log.mockRestore();
+        console.error.mockRestore();
+        jest.clearAllMocks();
+    });
+
+    describe('EventBridge Scheduler direct invoke (no Records)', () => {
+        it('injects the bootstrapped factory into the runner and reports the result', async () => {
+            mockRunner.execute.mockResolvedValue({
+                status: 'COMPLETED',
+                executionId: 'exec-1',
+            });
+
+            const response = await handler({
+                scriptName: 'my-script',
+                trigger: 'SCHEDULED',
+                params: { foo: 'bar' },
+            });
+
+            expect(createScriptRunner).toHaveBeenCalledWith({
+                scriptFactory: mockScriptFactory,
+                integrationFactory: mockIntegrationFactory,
+                scriptCommands: mockScriptCommands,
+            });
+            expect(mockRunner.execute).toHaveBeenCalledWith(
+                'my-script',
+                { foo: 'bar' },
+                expect.objectContaining({ trigger: 'SCHEDULED', mode: 'async' })
+            );
+
+            expect(response.statusCode).toBe(200);
+            const body = JSON.parse(response.body);
+            expect(body.processed).toBe(1);
+            expect(body.results[0]).toEqual({
+                scriptName: 'my-script',
+                status: 'COMPLETED',
+                executionId: 'exec-1',
+            });
+        });
+
+        it('marks the execution FAILED when the runner throws', async () => {
+            mockRunner.execute.mockRejectedValue(new Error('boom'));
+
+            const response = await handler({
+                scriptName: 'my-script',
+                executionId: 'exec-2',
+                trigger: 'SCHEDULED',
+            });
+
+            expect(response.statusCode).toBe(200);
+            const body = JSON.parse(response.body);
+            expect(body.results[0].status).toBe('FAILED');
+            expect(mockCommands.completeAdminProcess).toHaveBeenCalledWith(
+                'exec-2',
+                expect.objectContaining({ state: 'FAILED' })
+            );
+        });
+    });
+
+    describe('SQS batch (Records[])', () => {
+        it('injects the bootstrapped factory and processes each record', async () => {
+            mockRunner.execute.mockResolvedValue({
+                status: 'COMPLETED',
+                executionId: 'exec-3',
+            });
+
+            const response = await handler({
+                Records: [
+                    {
+                        body: JSON.stringify({
+                            scriptName: 'my-script',
+                            executionId: 'exec-3',
+                            params: {},
+                        }),
+                    },
+                ],
+            });
+
+            expect(createScriptRunner).toHaveBeenCalledWith({
+                scriptFactory: mockScriptFactory,
+                integrationFactory: mockIntegrationFactory,
+                scriptCommands: mockScriptCommands,
+            });
+            expect(mockRunner.execute).toHaveBeenCalledWith(
+                'my-script',
+                {},
+                expect.objectContaining({
+                    trigger: 'QUEUE',
+                    executionId: 'exec-3',
+                })
+            );
+
+            expect(response.statusCode).toBe(200);
+            const body = JSON.parse(response.body);
+            expect(body.processed).toBe(1);
+            expect(body.results[0].status).toBe('COMPLETED');
+        });
+
+        it('isolates a bad record without dropping the rest of the batch', async () => {
+            mockRunner.execute.mockResolvedValue({
+                status: 'COMPLETED',
+                executionId: 'exec-4',
+            });
+
+            const response = await handler({
+                Records: [
+                    // Missing scriptName -> runMessage throws before the runner
+                    { body: JSON.stringify({ executionId: 'exec-bad' }) },
+                    {
+                        body: JSON.stringify({
+                            scriptName: 'my-script',
+                            executionId: 'exec-4',
+                            params: {},
+                        }),
+                    },
+                ],
+            });
+
+            const body = JSON.parse(response.body);
+            expect(body.processed).toBe(2);
+            expect(body.results[0].status).toBe('FAILED');
+            expect(body.results[1].status).toBe('COMPLETED');
+            expect(mockCommands.completeAdminProcess).toHaveBeenCalledWith(
+                'exec-bad',
+                expect.objectContaining({ state: 'FAILED' })
+            );
+        });
+    });
+});

package/src/infrastructure/admin-script-router.js

@@ -2,7 +2,6 @@ const express = require('express');
 const serverless = require('serverless-http');
 const Boom = require('@hapi/boom');
 const { validateAdminApiKey } = require('./admin-auth-middleware');
-const { getScriptFactory } = require('../application/script-factory');
 const { createScriptRunner } = require('../application/script-runner');
 const {
     validateScriptInput,
@@ -24,16 +23,12 @@ const {
 
 const router = express.Router();
 
-// Apply auth middleware to all admin routes
+// Apply auth middleware to all admin routes. Each handler then calls
+// bootstrapAdminScripts() (memoized, so it runs once per process) to obtain the
+// scriptFactory / integrationFactory / scriptCommands it needs — no global, and
+// endpoints that don't touch scripts skip the work entirely.
 router.use(validateAdminApiKey);
 
-// Register the host app's admin scripts before handling requests.
-// Memoized, so this only does work on the first request per process.
-router.use((_req, _res, next) => {
-    bootstrapAdminScripts();
-    next();
-});
-
 /**
  * Translate a thrown error into an HTTP response. Boom errors (thrown by the
  * schedule use cases) carry their own status code; anything else is an
@@ -42,7 +37,9 @@ router.use((_req, _res, next) => {
  */
 function sendError(res, error, fallbackMessage) {
     if (error.isBoom) {
-        return res.status(error.output.statusCode).json({ error: error.message });
+        return res
+            .status(error.output.statusCode)
+            .json({ error: error.message });
     }
     console.error(fallbackMessage, error);
     return res.status(500).json({ error: fallbackMessage });
@@ -65,9 +62,10 @@ function buildAudit(req) {
 
 /**
  * Create schedule use case instances
+ * @param {ScriptFactory} scriptFactory - Registry injected from the request.
  * @private
  */
-function createScheduleUseCases() {
+function createScheduleUseCases(scriptFactory) {
     const commands = createAdminScriptCommands();
 
     // The local adapter is in-memory only (schedules vanish on cold start), so it
@@ -88,7 +86,6 @@ function createScheduleUseCases() {
         scheduleGroupName: process.env.ADMIN_SCRIPT_SCHEDULE_GROUP,
         roleArn: process.env.SCHEDULER_ROLE_ARN,
     });
-    const scriptFactory = getScriptFactory();
 
     return {
         getEffectiveSchedule: new GetEffectiveScheduleUseCase({
@@ -112,9 +109,9 @@ function createScheduleUseCases() {
  * GET /admin/scripts
  * List all registered scripts
  */
-router.get('/scripts', async (req, res) => {
+router.get('/scripts', async (_req, res) => {
     try {
-        const factory = getScriptFactory();
+        const { scriptFactory: factory } = bootstrapAdminScripts();
         const scripts = factory.getAll();
 
         res.json({
@@ -140,7 +137,7 @@ router.get('/scripts', async (req, res) => {
 router.get('/scripts/:scriptName', async (req, res) => {
     try {
         const { scriptName } = req.params;
-        const factory = getScriptFactory();
+        const { scriptFactory: factory } = bootstrapAdminScripts();
 
         if (!factory.has(scriptName)) {
             return res.status(404).json({
@@ -175,7 +172,7 @@ router.post('/scripts/:scriptName/validate', async (req, res) => {
     try {
         const { scriptName } = req.params;
         const { params = {} } = req.body;
-        const factory = getScriptFactory();
+        const { scriptFactory: factory } = bootstrapAdminScripts();
 
         if (!factory.has(scriptName)) {
             return res.status(404).json({
@@ -200,7 +197,11 @@ router.post('/scripts/:scriptName', async (req, res) => {
     try {
         const { scriptName } = req.params;
         const { params = {}, mode = 'async' } = req.body;
-        const factory = getScriptFactory();
+        const {
+            scriptFactory: factory,
+            integrationFactory,
+            scriptCommands,
+        } = bootstrapAdminScripts();
 
         if (!factory.has(scriptName)) {
             return res.status(404).json({
@@ -237,8 +238,11 @@ router.post('/scripts/:scriptName', async (req, res) => {
                 });
             }
 
-            const { integrationFactory } = bootstrapAdminScripts();
-            const runner = createScriptRunner({ integrationFactory });
+            const runner = createScriptRunner({
+                scriptFactory: factory,
+                integrationFactory,
+                scriptCommands,
+            });
             const result = await runner.execute(scriptName, params, {
                 trigger: 'MANUAL',
                 mode: 'sync',
@@ -355,7 +359,8 @@ router.get('/scripts/:scriptName/executions', async (req, res) => {
 router.get('/scripts/:scriptName/schedule', async (req, res) => {
     try {
         const { scriptName } = req.params;
-        const { getEffectiveSchedule } = createScheduleUseCases();
+        const { scriptFactory } = bootstrapAdminScripts();
+        const { getEffectiveSchedule } = createScheduleUseCases(scriptFactory);
 
         const result = await getEffectiveSchedule.execute(scriptName);
 
@@ -377,7 +382,8 @@ router.put('/scripts/:scriptName/schedule', async (req, res) => {
     try {
         const { scriptName } = req.params;
         const { enabled, cronExpression, timezone } = req.body;
-        const { upsertSchedule } = createScheduleUseCases();
+        const { scriptFactory } = bootstrapAdminScripts();
+        const { upsertSchedule } = createScheduleUseCases(scriptFactory);
 
         const result = await upsertSchedule.execute(scriptName, {
             enabled,
@@ -407,7 +413,8 @@ router.put('/scripts/:scriptName/schedule', async (req, res) => {
 router.delete('/scripts/:scriptName/schedule', async (req, res) => {
     try {
         const { scriptName } = req.params;
-        const { deleteSchedule } = createScheduleUseCases();
+        const { scriptFactory } = bootstrapAdminScripts();
+        const { deleteSchedule } = createScheduleUseCases(scriptFactory);
 
         const result = await deleteSchedule.execute(scriptName);
 

package/src/infrastructure/bootstrap.js

@@ -1,18 +1,21 @@
-const { getScriptFactory } = require('../application/script-factory');
+const { ScriptFactory } = require('../application/script-factory');
 
 /**
  * Admin Script Bootstrap
  *
- * Loads the host app's definition at Lambda runtime and registers its admin
- * scripts (and the built-ins, when enabled) into the global ScriptFactory, so
- * the router and SQS worker can resolve scripts by name. Also constructs the
- * integrationFactory used by scripts that need hydrated integration instances.
+ * Composition root for the admin-scripts runtime. Loads the host app's
+ * definition at Lambda runtime, builds a ScriptFactory, and registers the app's
+ * admin scripts into it so the router and SQS worker can resolve scripts by
+ * name. Also constructs the integrationFactory used by scripts that need
+ * hydrated integration instances. Both are returned for the caller to inject.
  *
  * Runs once per process (memoized) and never throws — a missing/unloadable app
  * definition is logged and leaves the factory empty rather than crashing the
  * Lambda cold start.
  */
 let bootstrapped = false;
+let scriptFactory = null;
+let scriptCommands = null;
 let integrationFactory = null;
 
 function registerScripts(factory, scriptClasses) {
@@ -43,22 +46,56 @@ function createIntegrationFactory() {
 }
 
 /**
- * @returns {{ integrationFactory: object }}
+ * Build the command bundle injected into every AdminScriptContext. Scripts
+ * interact with the database only through these Frigg commands — never through
+ * repositories directly. The require is lazy so the package keeps no load-time
+ * coupling to core's command/repository modules.
+ */
+function buildScriptCommands() {
+    const {
+        createUserCommands,
+    } = require('@friggframework/core/application/commands/user-commands');
+    const {
+        createCredentialCommands,
+    } = require('@friggframework/core/application/commands/credential-commands');
+    const {
+        createEntityCommands,
+    } = require('@friggframework/core/application/commands/entity-commands');
+    const {
+        createIntegrationCommands,
+    } = require('@friggframework/core/application/commands/integration-commands');
+
+    return {
+        users: createUserCommands(),
+        credentials: createCredentialCommands(),
+        entities: createEntityCommands(),
+        // Class-agnostic reads (findIntegrationById, listIntegrations). Scripts
+        // that need class-scoped integration ops build their own commands.
+        integrations: createIntegrationCommands(),
+    };
+}
+
+/**
+ * @returns {{ scriptFactory: ScriptFactory, scriptCommands: object, integrationFactory: object }}
  */
 function bootstrapAdminScripts() {
     if (bootstrapped) {
-        return { integrationFactory };
+        return { scriptFactory, scriptCommands, integrationFactory };
     }
     bootstrapped = true;
 
+    // Create the registry up front so consumers always get a (possibly empty)
+    // factory even when the app definition can't be loaded — mirrors the
+    // never-throw contract above.
+    scriptFactory = new ScriptFactory();
+
     try {
         const {
             loadAppDefinition,
         } = require('@friggframework/core/handlers/app-definition-loader');
         const { adminScripts = [] } = loadAppDefinition();
 
-        const factory = getScriptFactory();
-        registerScripts(factory, adminScripts);
+        registerScripts(scriptFactory, adminScripts);
     } catch (error) {
         console.error(
             '[admin-scripts] bootstrap: could not load app definition:',
@@ -66,13 +103,26 @@ function bootstrapAdminScripts() {
         );
     }
 
+    // Built in its own try so a command-layer failure never blocks script
+    // registration (and vice versa) — both honor the never-throw contract.
+    try {
+        scriptCommands = buildScriptCommands();
+    } catch (error) {
+        console.error(
+            '[admin-scripts] bootstrap: could not build command bundle:',
+            error.message
+        );
+    }
+
     integrationFactory = createIntegrationFactory();
-    return { integrationFactory };
+    return { scriptFactory, scriptCommands, integrationFactory };
 }
 
 /** Test-only: reset memoized bootstrap state. */
 function _resetBootstrapForTests() {
     bootstrapped = false;
+    scriptFactory = null;
+    scriptCommands = null;
     integrationFactory = null;
 }
 

package/src/infrastructure/script-executor-handler.js

@@ -6,9 +6,24 @@ const { bootstrapAdminScripts } = require('./bootstrap');
 
 /**
  * Run a single execution message through the ScriptRunner.
+ * @param {Object} message - Parsed execution message.
+ * @param {string} message.scriptName - Name of the registered script to run (required).
+ * @param {string} [message.executionId] - Existing AdminProcess id to resume; when
+ *   absent, ScriptRunner creates a new record.
+ * @param {string} [message.trigger] - Execution trigger; defaults to 'QUEUE'.
+ * @param {Object} [message.params] - Parameters passed to the script.
+ * @param {string} [message.parentExecutionId] - Parent execution id for queueScript continuations.
+ * @param {Object} deps
+ * @param {ScriptFactory} deps.scriptFactory - Registry used to resolve and instantiate the script.
+ * @param {Object} deps.integrationFactory - Hydrates integration instances for scripts that need them.
+ * @param {Object} deps.scriptCommands - Frigg command bundle exposed to the script as context.commands.
+ * @returns {Promise<{ scriptName: string, status: string, executionId: string }>}
  * @private
  */
-async function runMessage(message, integrationFactory) {
+async function runMessage(
+    message,
+    { scriptFactory, integrationFactory, scriptCommands }
+) {
     const { scriptName, executionId, trigger, params, parentExecutionId } =
         message;
 
@@ -22,7 +37,11 @@ async function runMessage(message, integrationFactory) {
         }`
     );
 
-    const runner = createScriptRunner({ integrationFactory });
+    const runner = createScriptRunner({
+        scriptFactory,
+        integrationFactory,
+        scriptCommands,
+    });
     const result = await runner.execute(scriptName, params, {
         trigger: trigger || 'QUEUE',
         mode: 'async',
@@ -66,59 +85,58 @@ async function markFailed(executionId, error) {
 }
 
 /**
- * Admin Script Executor Lambda Handler
- *
- * Handles two invocation shapes:
- * - SQS: `event.Records[]` — each record body is a JSON execution message
- *   (manual async executions and queueScript continuations).
- * - EventBridge Scheduler direct invoke: the event itself is the message
- *   (`{ scriptName, trigger: 'SCHEDULED', params }`) with no `Records` wrapper.
- *
- * Thin adapter: parses the event and delegates to ScriptRunner, which owns
- * execution tracking, error recording, and status updates.
+ * Handle an EventBridge Scheduler direct invoke: the event itself is a single
+ * execution message (no `Records` wrapper).
+ * @param {Object} event - The execution message.
+ * @param {{ scriptFactory: ScriptFactory, integrationFactory: object, scriptCommands: object }} deps
+ * @returns {Promise<{ statusCode: number, body: string }>}
+ * @private
  */
-async function handler(event) {
-    const { integrationFactory } = bootstrapAdminScripts();
-
-    // EventBridge Scheduler invokes the Lambda directly (no Records wrapper)
-    if (!event.Records) {
-        try {
-            const result = await runMessage(event, integrationFactory);
-            console.log(
-                `Script completed: ${result.scriptName}, status: ${result.status}`
-            );
-            return {
-                statusCode: 200,
-                body: JSON.stringify({ processed: 1, results: [result] }),
-            };
-        } catch (error) {
-            console.error(
-                'Unexpected error processing scheduled invoke:',
-                error
-            );
-            await markFailed(event.executionId, error);
-            return {
-                statusCode: 200,
-                body: JSON.stringify({
-                    processed: 1,
-                    results: [
-                        {
-                            scriptName: event.scriptName || 'unknown',
-                            status: 'FAILED',
-                            error: error.message,
-                        },
-                    ],
-                }),
-            };
-        }
+async function handleScheduledInvoke(event, deps) {
+    try {
+        const result = await runMessage(event, deps);
+        console.log(
+            `Script completed: ${result.scriptName}, status: ${result.status}`
+        );
+        return {
+            statusCode: 200,
+            body: JSON.stringify({ processed: 1, results: [result] }),
+        };
+    } catch (error) {
+        console.error('Unexpected error processing scheduled invoke:', error);
+        await markFailed(event.executionId, error);
+        return {
+            statusCode: 200,
+            body: JSON.stringify({
+                processed: 1,
+                results: [
+                    {
+                        scriptName: event.scriptName || 'unknown',
+                        status: 'FAILED',
+                        error: error.message,
+                    },
+                ],
+            }),
+        };
     }
+}
 
+/**
+ * Handle an SQS batch: each `event.Records[].body` is a JSON execution message
+ * (manual async executions and queueScript continuations). Failures are isolated
+ * per record so one bad message doesn't drop the rest of the batch.
+ * @param {Object} event - The SQS event with a `Records` array.
+ * @param {{ scriptFactory: ScriptFactory, integrationFactory: object, scriptCommands: object }} deps
+ * @returns {Promise<{ statusCode: number, body: string }>}
+ * @private
+ */
+async function handleSqsBatch(event, deps) {
     const results = [];
     for (const record of event.Records) {
         let message = {};
         try {
             message = JSON.parse(record.body);
-            const result = await runMessage(message, integrationFactory);
+            const result = await runMessage(message, deps);
             console.log(
                 `Script completed: ${result.scriptName}, status: ${result.status}`
             );
@@ -143,4 +161,24 @@ async function handler(event) {
     };
 }
 
+/**
+ * Admin Script Executor Lambda Handler
+ *
+ * Handles two invocation shapes:
+ * - SQS: `event.Records[]` — each record body is a JSON execution message
+ *   (manual async executions and queueScript continuations).
+ * - EventBridge Scheduler direct invoke: the event itself is the message
+ *   (`{ scriptName, trigger: 'SCHEDULED', params }`) with no `Records` wrapper.
+ *
+ * Thin adapter: parses the event and delegates to ScriptRunner, which owns
+ * execution tracking, error recording, and status updates.
+ */
+async function handler(event) {
+    const deps = bootstrapAdminScripts();
+
+    return event.Records
+        ? handleSqsBatch(event, deps)
+        : handleScheduledInvoke(event, deps);
+}
+
 module.exports = { handler };