@friggframework/core 2.0.0--canary.550.b8b9a2b.0 → 2.0.0--canary.545.e256e95.0

package/handlers/routers/middleware/loadUser.js

@@ -0,0 +1,39 @@
+const catchAsyncError = require('express-async-handler');
+const {
+    GetUserFromBearerToken,
+} = require('../../../user/use-cases/get-user-from-bearer-token');
+const {
+    createUserRepository,
+} = require('../../../user/repositories/user-repository-factory');
+const { loadAppDefinition } = require('../../app-definition-loader');
+
+/**
+ * Load user from bearer token middleware
+ * Uses DDD pattern: Handler → Use Case → Repository
+ */
+module.exports = catchAsyncError(async (req, res, next) => {
+    const authorizationHeader = req.headers.authorization;
+
+    if (authorizationHeader) {
+        // Initialize dependencies following DDD pattern
+        const { userConfig } = loadAppDefinition();
+        const userRepository = createUserRepository({ userConfig });
+        const getUserFromBearerToken = new GetUserFromBearerToken({
+            userRepository,
+            userConfig,
+        });
+
+        try {
+            // Execute use case to load user
+            req.user = await getUserFromBearerToken.execute(
+                authorizationHeader
+            );
+        } catch (error) {
+            // Don't fail - just leave req.user undefined
+            // Let requireLoggedInUser middleware handle auth failures
+            console.debug('Failed to load user from token:', error.message);
+        }
+    }
+
+    return next();
+});

package/handlers/routers/middleware/requireAdmin.js

@@ -0,0 +1,43 @@
+/**
+ * Middleware to require admin API key authentication.
+ * Checks for x-frigg-admin-api-key header matching ADMIN_API_KEY environment variable.
+ * In non-production environments, allows all requests through for easier development.
+ *
+ * Uses the same header convention as validateAdminApiKey (handlers/middleware/admin-auth.js).
+ *
+ * @param {import('express').Request} req - Express request object
+ * @param {import('express').Response} res - Express response object
+ * @param {import('express').NextFunction} next - Express next middleware function
+ */
+const requireAdmin = (req, res, next) => {
+    // Allow access in local development (when NODE_ENV is not production)
+    if (process.env.NODE_ENV !== 'production') {
+        console.log('[requireAdmin] Development mode - bypassing admin auth');
+        return next();
+    }
+
+    const apiKey = req.headers['x-frigg-admin-api-key'];
+
+    if (!apiKey) {
+        console.error('[requireAdmin] Missing x-frigg-admin-api-key header');
+        return res.status(401).json({
+            status: 'error',
+            message: 'Unauthorized - Admin API key required',
+            code: 'MISSING_API_KEY',
+        });
+    }
+
+    if (apiKey !== process.env.ADMIN_API_KEY) {
+        console.error('[requireAdmin] Invalid API key provided');
+        return res.status(401).json({
+            status: 'error',
+            message: 'Unauthorized - Invalid admin API key',
+            code: 'INVALID_API_KEY',
+        });
+    }
+
+    console.log('[requireAdmin] Admin authentication successful');
+    next();
+};
+
+module.exports = { requireAdmin };

package/handlers/routers/middleware/requireLoggedInUser.js

@@ -0,0 +1,19 @@
+const Boom = require('@hapi/boom');
+
+/**
+ * Require logged in user middleware
+ * Ensures req.user was successfully loaded by loadUser middleware
+ *
+ * Uses DDD pattern: Middleware checks domain entity existence
+ * req.user is populated by loadUser middleware using GetUserFromBearerToken use case
+ */
+const requireLoggedInUser = (req, res, next) => {
+    // Check if user was successfully loaded by loadUser middleware
+    if (!req.user || !req.user.getId()) {
+        throw Boom.unauthorized('Invalid Token');
+    }
+
+    next();
+};
+
+module.exports = { requireLoggedInUser };

package/handlers/routers/user.js

@@ -15,17 +15,33 @@ const catchAsyncError = require('express-async-handler');
 const { loadAppDefinition } = require('../app-definition-loader');
 
 const router = express();
-const { userConfig } = loadAppDefinition();
-const userRepository = createUserRepository();
-const createIndividualUser = new CreateIndividualUser({
-    userRepository,
-    userConfig,
-});
-const loginUser = new LoginUser({
-    userRepository,
-    userConfig,
+
+// Lazy-initialized repositories and use cases (deferred until first request)
+let _userRepository, _createIndividualUser, _loginUser, _createTokenForUserId;
+
+function ensureInitialized() {
+    if (!_userRepository) {
+        const { userConfig } = loadAppDefinition();
+        _userRepository = createUserRepository();
+        _createIndividualUser = new CreateIndividualUser({
+            userRepository: _userRepository,
+            userConfig,
+        });
+        _loginUser = new LoginUser({
+            userRepository: _userRepository,
+            userConfig,
+        });
+        _createTokenForUserId = new CreateTokenForUserId({
+            userRepository: _userRepository,
+        });
+    }
+}
+
+// Lazy initialization middleware — runs once on first request
+router.use((req, res, next) => {
+    ensureInitialized();
+    next();
 });
-const createTokenForUserId = new CreateTokenForUserId({ userRepository });
 
 // define the login endpoint
 router.route('/user/login').post(
@@ -34,8 +50,8 @@ router.route('/user/login').post(
             'username',
             'password',
         ]);
-        const user = await loginUser.execute({ username, password });
-        const token = await createTokenForUserId.execute(user.getId(), 120);
+        const user = await _loginUser.execute({ username, password });
+        const token = await _createTokenForUserId.execute(user.getId(), 120);
         res.status(201);
         res.json({ token });
     })
@@ -48,11 +64,11 @@ router.route('/user/create').post(
             'password',
         ]);
 
-        const user = await createIndividualUser.execute({
+        const user = await _createIndividualUser.execute({
             username,
             password,
         });
-        const token = await createTokenForUserId.execute(user.getId(), 120);
+        const token = await _createTokenForUserId.execute(user.getId(), 120);
         res.status(201);
         res.json({ token });
     })

package/handlers/routers/websocket.js

@@ -1,7 +1,17 @@
 const { createHandler } = require('@friggframework/core');
-const { createWebsocketConnectionRepository } = require('../../database/websocket-connection-repository-factory');
+const {
+    createWebsocketConnectionRepository,
+} = require('../../database/websocket-connection-repository-factory');
 
-const websocketConnectionRepository = createWebsocketConnectionRepository();
+let _websocketConnectionRepository;
+
+function getRepository() {
+    if (!_websocketConnectionRepository) {
+        _websocketConnectionRepository =
+            createWebsocketConnectionRepository();
+    }
+    return _websocketConnectionRepository;
+}
 
 const handleWebSocketConnection = async (event, context) => {
     // Handle different WebSocket events
@@ -10,7 +20,9 @@ const handleWebSocketConnection = async (event, context) => {
             // Handle new connection
             try {
                 const connectionId = event.requestContext.connectionId;
-                await websocketConnectionRepository.createConnection(connectionId);
+                await getRepository().createConnection(
+                    connectionId
+                );
                 console.log(`Stored new connection: ${connectionId}`);
                 return { statusCode: 200, body: 'Connected.' };
             } catch (error) {
@@ -22,7 +34,9 @@ const handleWebSocketConnection = async (event, context) => {
             // Handle disconnection
             try {
                 const connectionId = event.requestContext.connectionId;
-                await websocketConnectionRepository.deleteConnection(connectionId);
+                await getRepository().deleteConnection(
+                    connectionId
+                );
                 console.log(`Removed connection: ${connectionId}`);
                 return { statusCode: 200, body: 'Disconnected.' };
             } catch (error) {

package/handlers/use-cases/check-integrations-health-use-case.js

@@ -5,9 +5,10 @@ class CheckIntegrationsHealthUseCase {
     }
 
     execute() {
-        const moduleDefinitions = (this.moduleFactory && this.moduleFactory.moduleDefinitions)
-            ? this.moduleFactory.moduleDefinitions
-            : [];
+        const moduleDefinitions =
+            this.moduleFactory && this.moduleFactory.moduleDefinitions
+                ? this.moduleFactory.moduleDefinitions
+                : [];
 
         const integrationClasses = Array.isArray(this.integrationClasses)
             ? this.integrationClasses
@@ -15,13 +16,19 @@ class CheckIntegrationsHealthUseCase {
 
         // Extract module names from definitions
         const moduleTypes = Array.isArray(moduleDefinitions)
-            ? moduleDefinitions.map(def => def.moduleName || def.name || def.label || 'Unknown')
+            ? moduleDefinitions.map(
+                  (def) => def.moduleName || def.name || def.label || 'Unknown'
+              )
             : [];
 
         // Extract integration names from classes
-        const integrationNames = integrationClasses.map(IntegrationClass => {
+        const integrationNames = integrationClasses.map((IntegrationClass) => {
             try {
-                return IntegrationClass.Definition?.name || IntegrationClass.name || 'Unknown';
+                return (
+                    IntegrationClass.Definition?.name ||
+                    IntegrationClass.name ||
+                    'Unknown'
+                );
             } catch {
                 return 'Unknown';
             }

package/handlers/workers/db-migration.js

@@ -49,16 +49,28 @@ const {
 const {
     CheckDatabaseStateUseCase,
 } = require('../../database/use-cases/check-database-state-use-case');
-const {
-    MigrationStatusRepositoryS3,
-} = require('../../database/repositories/migration-status-repository-s3');
-
 // Inject prisma-runner as dependency
 const prismaRunner = require('../../database/utils/prisma-runner');
 
-// Use S3 repository for migration status tracking (no User table dependency)
-const bucketName = process.env.S3_BUCKET_NAME || process.env.MIGRATION_STATUS_BUCKET;
-const migrationStatusRepository = new MigrationStatusRepositoryS3(bucketName);
+// Migration status repository is loaded from the resolved provider.
+const { resolveProvider } = require('../../providers/resolve-provider');
+
+let _migrationStatusRepository = null;
+function getMigrationStatusRepository() {
+    if (!_migrationStatusRepository) {
+        const provider = resolveProvider();
+        const MigrationStatusRepository = provider.MigrationStatusRepositoryS3;
+        if (!MigrationStatusRepository) {
+            throw new Error(
+                `Provider '${provider.name}' does not export a MigrationStatusRepository`
+            );
+        }
+        const bucketName =
+            process.env.S3_BUCKET_NAME || process.env.MIGRATION_STATUS_BUCKET;
+        _migrationStatusRepository = new MigrationStatusRepository(bucketName);
+    }
+    return _migrationStatusRepository;
+}
 
 /**
  * Sanitizes error messages to prevent credential leaks
@@ -68,19 +80,27 @@ const migrationStatusRepository = new MigrationStatusRepositoryS3(bucketName);
 function sanitizeError(errorMessage) {
     if (!errorMessage) return 'Unknown error';
 
-    return String(errorMessage)
-        // Remove PostgreSQL connection strings
-        .replace(/postgresql:\/\/[^@\s]+@[^\s/]+/gi, 'postgresql://***:***@***')
-        // Remove MongoDB connection strings
-        .replace(/mongodb(\+srv)?:\/\/[^@\s]+@[^\s/]+/gi, 'mongodb$1://***:***@***')
-        // Remove password parameters
-        .replace(/password[=:]\s*[^\s,;)]+/gi, 'password=***')
-        // Remove API keys
-        .replace(/apikey[=:]\s*[^\s,;)]+/gi, 'apikey=***')
-        .replace(/api[_-]?key[=:]\s*[^\s,;)]+/gi, 'api_key=***')
-        // Remove tokens
-        .replace(/token[=:]\s*[^\s,;)]+/gi, 'token=***')
-        .replace(/bearer\s+[^\s,;)]+/gi, 'bearer ***');
+    return (
+        String(errorMessage)
+            // Remove PostgreSQL connection strings
+            .replace(
+                /postgresql:\/\/[^@\s]+@[^\s/]+/gi,
+                'postgresql://***:***@***'
+            )
+            // Remove MongoDB connection strings
+            .replace(
+                /mongodb(\+srv)?:\/\/[^@\s]+@[^\s/]+/gi,
+                'mongodb$1://***:***@***'
+            )
+            // Remove password parameters
+            .replace(/password[=:]\s*[^\s,;)]+/gi, 'password=***')
+            // Remove API keys
+            .replace(/apikey[=:]\s*[^\s,;)]+/gi, 'apikey=***')
+            .replace(/api[_-]?key[=:]\s*[^\s,;)]+/gi, 'api_key=***')
+            // Remove tokens
+            .replace(/token[=:]\s*[^\s,;)]+/gi, 'token=***')
+            .replace(/bearer\s+[^\s,;)]+/gi, 'bearer ***')
+    );
 }
 
 /**
@@ -145,11 +165,18 @@ exports.handler = async (event, context) => {
     console.log('Database Migration Lambda Started');
     console.log('========================================');
     console.log('Event:', JSON.stringify(event, null, 2));
-    console.log('Context:', JSON.stringify({
-        requestId: context.requestId,
-        functionName: context.functionName,
-        remainingTimeInMillis: context.getRemainingTimeInMillis(),
-    }, null, 2));
+    console.log(
+        'Context:',
+        JSON.stringify(
+            {
+                requestId: context.requestId,
+                functionName: context.functionName,
+                remainingTimeInMillis: context.getRemainingTimeInMillis(),
+            },
+            null,
+            2
+        )
+    );
 
     // Extract migration parameters from event
     const { migrationId, dbType, stage } = extractMigrationParams(event);
@@ -164,7 +191,9 @@ exports.handler = async (event, context) => {
         console.log(`========================================`);
 
         try {
-            const checkDbStateUseCase = new CheckDatabaseStateUseCase({ prismaRunner });
+            const checkDbStateUseCase = new CheckDatabaseStateUseCase({
+                prismaRunner,
+            });
             const status = await checkDbStateUseCase.execute(dbType, stage);
 
             console.log('✓ Database state check completed');
@@ -217,8 +246,10 @@ exports.handler = async (event, context) => {
 
         // Update migration status to RUNNING (if migrationId provided)
         if (migrationId) {
-            console.log(`\n✓ Updating migration status to RUNNING: ${migrationId}`);
-            await migrationStatusRepository.update({
+            console.log(
+                `\n✓ Updating migration status to RUNNING: ${migrationId}`
+            );
+            await getMigrationStatusRepository().update({
                 migrationId,
                 stage,
                 state: 'RUNNING',
@@ -255,8 +286,10 @@ exports.handler = async (event, context) => {
 
         // Update migration status to COMPLETED (if migrationId provided)
         if (migrationId) {
-            console.log(`\n✓ Updating migration status to COMPLETED: ${migrationId}`);
-            await migrationStatusRepository.update({
+            console.log(
+                `\n✓ Updating migration status to COMPLETED: ${migrationId}`
+            );
+            await getMigrationStatusRepository().update({
                 migrationId,
                 stage,
                 state: 'COMPLETED',
@@ -284,7 +317,6 @@ exports.handler = async (event, context) => {
             statusCode: 200,
             body: JSON.stringify(responseBody),
         };
-
     } catch (error) {
         console.error('\n========================================');
         console.error('Migration Failed');
@@ -317,8 +349,10 @@ exports.handler = async (event, context) => {
         // Update migration status to FAILED (if migrationId provided)
         if (migrationId) {
             try {
-                console.log(`\n✓ Updating migration status to FAILED: ${migrationId}`);
-                await migrationStatusRepository.update({
+                console.log(
+                    `\n✓ Updating migration status to FAILED: ${migrationId}`
+                );
+                await getMigrationStatusRepository().update({
                     migrationId,
                     stage,
                     state: 'FAILED',
@@ -327,7 +361,10 @@ exports.handler = async (event, context) => {
                     failedAt: new Date().toISOString(),
                 });
             } catch (updateError) {
-                console.error('Failed to update migration status:', updateError.message);
+                console.error(
+                    'Failed to update migration status:',
+                    updateError.message
+                );
                 // Continue - don't let status update failure block error response
             }
         }
@@ -337,7 +374,9 @@ exports.handler = async (event, context) => {
             error: sanitizedError,
             errorType: error.name || 'Error',
             // Only include stack traces in development environments
-            ...(stage === 'dev' || stage === 'local' || stage === 'test' ? { stack: error.stack } : {}),
+            ...(stage === 'dev' || stage === 'local' || stage === 'test'
+                ? { stack: error.stack }
+                : {}),
         };
 
         if (migrationId) {

package/handlers/workers/integration-defined-workers.js

@@ -2,26 +2,37 @@ const { createHandler } = require('@friggframework/core');
 const { loadAppDefinition } = require('../app-definition-loader');
 const { createQueueWorker } = require('../backend-utils');
 
-const handlers = {};
-const { integrations: integrationClasses } = loadAppDefinition();
+let _handlers;
 
-integrationClasses.forEach((IntegrationClass) => {
-    const defaultQueueWorker = createQueueWorker(IntegrationClass);
+function ensureHandlers() {
+    if (!_handlers) {
+        _handlers = {};
+        const { integrations: integrationClasses } = loadAppDefinition();
 
-    handlers[`${IntegrationClass.Definition.name}`] = {
-        queueWorker: createHandler({
-            eventName: `Queue Worker for ${IntegrationClass.Definition.name}`,
-            isUserFacingResponse: false,
-            method: async (event, context) => {
-                const worker = new defaultQueueWorker();
-                await worker.run(event, context);
-                return {
-                    message: 'Successfully processed the Generic Queue Worker',
-                    input: event,
-                };
-            },
-        }),
-    };
-});
+        integrationClasses.forEach((IntegrationClass) => {
+            const defaultQueueWorker = createQueueWorker(IntegrationClass);
 
-module.exports = { handlers };
+            _handlers[`${IntegrationClass.Definition.name}`] = {
+                queueWorker: createHandler({
+                    eventName: `Queue Worker for ${IntegrationClass.Definition.name}`,
+                    isUserFacingResponse: false,
+                    method: async (event, context) => {
+                        const worker = new defaultQueueWorker();
+                        await worker.run(event, context);
+                        return {
+                            message: 'Successfully processed the Generic Queue Worker',
+                            input: event,
+                        };
+                    },
+                }),
+            };
+        });
+    }
+    return _handlers;
+}
+
+module.exports = {
+    get handlers() {
+        return ensureHandlers();
+    },
+};

package/index.js

@@ -21,7 +21,6 @@ const {
 } = require('./database/index');
 const {
     createUserRepository,
-    UserRepositoryMongo,
     UserRepositoryPostgres,
 } = require('./user/repositories/user-repository-factory');
 const {
@@ -30,9 +29,7 @@ const {
 const {
     GetUserFromAdopterJwt,
 } = require('./user/use-cases/get-user-from-adopter-jwt');
-const {
-    AuthenticateUser,
-} = require('./user/use-cases/authenticate-user');
+const { AuthenticateUser } = require('./user/use-cases/authenticate-user');
 
 const {
     CredentialRepository,
@@ -43,18 +40,14 @@ const {
 const {
     IntegrationMappingRepository,
 } = require('./integrations/repositories/integration-mapping-repository');
-const {
-    CreateProcess,
-} = require('./integrations/use-cases/create-process');
+const { CreateProcess } = require('./integrations/use-cases/create-process');
 const {
     UpdateProcessState,
 } = require('./integrations/use-cases/update-process-state');
 const {
     UpdateProcessMetrics,
 } = require('./integrations/use-cases/update-process-metrics');
-const {
-    GetProcess,
-} = require('./integrations/use-cases/get-process');
+const { GetProcess } = require('./integrations/use-cases/get-process');
 const { Cryptor } = require('./encrypt');
 const {
     BaseError,
@@ -70,12 +63,11 @@ const {
     checkRequiredParams,
     getModulesDefinitionFromIntegrationClasses,
     LoadIntegrationContextUseCase,
+    createProcessRepository,
 } = require('./integrations/index');
 const { TimeoutCatcher } = require('./lambda/index');
 const { debug, initDebugLog, flushDebugLog } = require('./logs/index');
 const {
-    Credential,
-    Entity,
     ApiKeyRequester,
     BasicAuthRequester,
     OAuth2Requester,
@@ -86,7 +78,33 @@ const {
 const application = require('./application');
 const utils = require('./utils');
 
-const { QueuerUtil } = require('./queues');
+const {
+    QueuerUtil,
+    QueueProvider,
+    QueueClientInterface,
+    createQueueProvider,
+    QUEUE_PROVIDERS,
+} = require('./queues');
+
+const {
+    EncryptionKeyProviderInterface,
+} = require('./encrypt/encryption-key-provider-interface');
+const {
+    AesEncryptionKeyProvider,
+} = require('./encrypt/aes-encryption-key-provider');
+const {
+    WebSocketMessageSenderInterface,
+    StaleConnectionError,
+} = require('./websocket/websocket-message-sender-interface');
+
+const {
+    resolveProvider,
+    determineProviderName,
+    providerPackageName,
+    KNOWN_PROVIDERS,
+} = require('./providers');
+
+const extensions = require('./extensions');
 
 module.exports = {
     // assertions
@@ -110,7 +128,7 @@ module.exports = {
     TokenRepository,
     WebsocketConnectionRepository,
     createUserRepository,
-    UserRepositoryMongo,
+    get UserRepositoryMongo() { return require('./user/repositories/user-repository-factory').UserRepositoryMongo; },
     UserRepositoryPostgres,
     GetUserFromXFriggHeaders,
     GetUserFromAdopterJwt,
@@ -138,6 +156,7 @@ module.exports = {
     UpdateProcessState,
     UpdateProcessMetrics,
     GetProcess,
+    createProcessRepository,
 
     // application - Command factories for integration developers
     application,
@@ -147,6 +166,7 @@ module.exports = {
     createEntityCommands: application.createEntityCommands,
     createCredentialCommands: application.createCredentialCommands,
     createSchedulerCommands: application.createSchedulerCommands,
+    createAdminScriptCommands: application.createAdminScriptCommands,
     findIntegrationContextByExternalEntityId:
         application.findIntegrationContextByExternalEntityId,
     integrationCommands: application.integrationCommands,
@@ -160,8 +180,6 @@ module.exports = {
     flushDebugLog,
 
     // module plugin
-    Credential,
-    Entity,
     ApiKeyRequester,
     BasicAuthRequester,
     OAuth2Requester,
@@ -170,6 +188,32 @@ module.exports = {
     ModuleFactory,
     // queues
     QueuerUtil,
+    QueueProvider,
+    QueueClientInterface,
+    createQueueProvider,
+    QUEUE_PROVIDERS,
+
+    // encryption interfaces
+    EncryptionKeyProviderInterface,
+    AesEncryptionKeyProvider,
+
+    // websocket interfaces
+    WebSocketMessageSenderInterface,
+    StaleConnectionError,
+
+    // providers
+    resolveProvider,
+    determineProviderName,
+    providerPackageName,
+    KNOWN_PROVIDERS,
+
+    // extensions
+    extensions,
+    loadExtensions: extensions.loadExtensions,
+    composeSchemas: extensions.composeSchemas,
+    mountExtensionRoutes: extensions.mountExtensionRoutes,
+    runExtensionBootstraps: extensions.runExtensionBootstraps,
+    initializeApp: extensions.initializeApp,
 
     // utils
     ...utils,