@friggframework/core 2.0.0--canary.704.79d9a63.0 → 2.0.0--canary.686.e94de4d.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (207) hide show
  1. package/CLAUDE.md +28 -40
  2. package/README.md +105 -0
  3. package/application/commands/entity-commands.js +60 -18
  4. package/application/commands/integration-commands.js +20 -73
  5. package/application/commands/scheduler-commands.js +11 -7
  6. package/application/commands/user-commands.js +17 -5
  7. package/application/index.js +6 -2
  8. package/core/Worker.js +31 -7
  9. package/core/create-handler.js +9 -0
  10. package/credential/repositories/credential-repository-documentdb.js +34 -0
  11. package/credential/repositories/credential-repository-interface.js +15 -0
  12. package/credential/repositories/credential-repository-mongo.js +23 -0
  13. package/credential/repositories/credential-repository-postgres.js +28 -0
  14. package/credential/use-cases/credential-operations-for-user.js +202 -0
  15. package/credential/use-cases/reauthorize-credential-for-user.js +73 -0
  16. package/database/config.js +48 -24
  17. package/database/documentdb-encryption-service.js +9 -22
  18. package/database/documentdb-utils.js +2 -0
  19. package/database/encryption/README.md +76 -14
  20. package/database/encryption/documentdb-encryption-service.md +78 -1
  21. package/database/encryption/encryption-config.js +219 -0
  22. package/database/encryption/encryption-schema-registry.js +93 -12
  23. package/database/encryption/integration-mapping-encryption.js +1 -1
  24. package/database/organization-where.js +18 -0
  25. package/database/prisma.js +15 -38
  26. package/database/unique-violation.js +25 -0
  27. package/database/use-cases/check-encryption-health-use-case.js +43 -52
  28. package/errors/index.js +0 -4
  29. package/extensions/bootstrap-runner.js +43 -0
  30. package/extensions/extension-loader.js +187 -0
  31. package/extensions/index.js +41 -0
  32. package/extensions/initialize-app.js +123 -0
  33. package/extensions/route-mounter.js +103 -0
  34. package/extensions/schema-composer.js +188 -0
  35. package/generated/prisma-mongodb/edge.js +43 -4
  36. package/generated/prisma-mongodb/index-browser.js +40 -1
  37. package/generated/prisma-mongodb/index.d.ts +4761 -133
  38. package/generated/prisma-mongodb/index.js +43 -4
  39. package/generated/prisma-mongodb/package.json +1 -1
  40. package/generated/prisma-mongodb/schema.prisma +92 -0
  41. package/generated/prisma-mongodb/wasm.js +43 -4
  42. package/generated/prisma-postgresql/edge.js +43 -4
  43. package/generated/prisma-postgresql/index-browser.js +40 -1
  44. package/generated/prisma-postgresql/index.d.ts +4961 -28
  45. package/generated/prisma-postgresql/index.js +43 -4
  46. package/generated/prisma-postgresql/package.json +1 -1
  47. package/generated/prisma-postgresql/schema.prisma +87 -0
  48. package/generated/prisma-postgresql/wasm.js +43 -4
  49. package/handlers/WEBHOOKS.md +0 -29
  50. package/handlers/app-definition-loader.js +121 -19
  51. package/handlers/app-handler-helpers.js +25 -3
  52. package/handlers/backend-utils.js +31 -25
  53. package/handlers/middleware/admin-auth.js +14 -1
  54. package/handlers/routers/auth.js +46 -10
  55. package/handlers/routers/health.js +13 -4
  56. package/handlers/routers/integration-defined-routers.js +144 -92
  57. package/handlers/routers/integration-webhook-routers.js +102 -64
  58. package/handlers/workers/integration-defined-workers.js +5 -2
  59. package/index.js +65 -3
  60. package/infrastructure/scheduler/index.js +19 -6
  61. package/infrastructure/scheduler/netlify-scheduler-adapter.js +216 -0
  62. package/infrastructure/scheduler/scheduled-job-repository.js +118 -0
  63. package/infrastructure/scheduler/scheduler-service-factory.js +55 -7
  64. package/integrations/index.js +1 -0
  65. package/integrations/integration-base.js +0 -29
  66. package/integrations/integration-router.js +131 -96
  67. package/integrations/repositories/integration-mapping-repository-documentdb.js +0 -50
  68. package/integrations/repositories/integration-mapping-repository-interface.js +0 -15
  69. package/integrations/repositories/integration-mapping-repository-mongo.js +0 -29
  70. package/integrations/repositories/integration-mapping-repository-postgres.js +0 -30
  71. package/integrations/repositories/integration-mapping-repository.js +0 -29
  72. package/integrations/repositories/integration-not-found.js +14 -0
  73. package/integrations/repositories/integration-repository-documentdb.js +35 -35
  74. package/integrations/repositories/integration-repository-interface.js +17 -31
  75. package/integrations/repositories/integration-repository-mongo.js +60 -129
  76. package/integrations/repositories/integration-repository-postgres.js +62 -134
  77. package/integrations/repositories/process-repository-mongo.js +1 -1
  78. package/integrations/schedule-config.js +80 -0
  79. package/integrations/tests/doubles/test-integration-repository.js +12 -1
  80. package/integrations/use-cases/create-integration.js +72 -75
  81. package/integrations/use-cases/dispatch-ongoing-syncs.js +100 -0
  82. package/integrations/use-cases/get-integrations-for-user.js +80 -40
  83. package/integrations/use-cases/index.js +7 -1
  84. package/integrations/use-cases/integration-operations-for-user.js +256 -0
  85. package/integrations/use-cases/resolve-integration-ownership.js +177 -0
  86. package/integrations/utils/map-integration-dto.js +43 -14
  87. package/management-api/create-management-api-router.js +49 -0
  88. package/management-api/error-response.js +116 -0
  89. package/management-api/management-api-config.js +151 -0
  90. package/management-api/meta-router.js +76 -0
  91. package/management-api/openapi/build-openapi.js +144 -0
  92. package/management-api/openapi/components.js +408 -0
  93. package/management-api/openapi/v1-operations.js +83 -0
  94. package/management-api/openapi/v2-operations.js +264 -0
  95. package/management-api/route-registry.js +411 -0
  96. package/management-api/test-support/http-client.js +39 -0
  97. package/management-api/use-cases/get-management-api-meta.js +57 -0
  98. package/management-api/v1-deprecation.js +120 -0
  99. package/management-api/v2/create-v2-router.js +85 -0
  100. package/management-api/v2/dependencies.js +281 -0
  101. package/management-api/v2/dto.js +143 -0
  102. package/management-api/v2/handlers/authorization.js +94 -0
  103. package/management-api/v2/handlers/credentials.js +33 -0
  104. package/management-api/v2/handlers/entities.js +77 -0
  105. package/management-api/v2/handlers/integrations.js +128 -0
  106. package/management-api/v2/handlers/proxy.js +34 -0
  107. package/management-api/v2/request.js +85 -0
  108. package/management-api/v2/test-support/fake-dependencies.js +103 -0
  109. package/modules/domain/authorization-session.js +144 -0
  110. package/modules/entity-scope.js +15 -0
  111. package/modules/entity-type-registry.js +311 -0
  112. package/modules/index.js +14 -0
  113. package/modules/module-factory.js +12 -0
  114. package/modules/module.js +53 -2
  115. package/modules/proxy/proxy-errors.js +20 -0
  116. package/modules/proxy/proxy-path.js +179 -0
  117. package/modules/proxy/proxy-policy.js +248 -0
  118. package/modules/repositories/authorization-session-repository-documentdb.js +112 -0
  119. package/modules/repositories/authorization-session-repository-factory.js +31 -0
  120. package/modules/repositories/authorization-session-repository-interface.js +47 -0
  121. package/modules/repositories/authorization-session-repository-prisma.js +87 -0
  122. package/modules/repositories/entity-not-found.js +18 -0
  123. package/modules/repositories/module-repository-documentdb.js +51 -6
  124. package/modules/repositories/module-repository-interface.js +19 -2
  125. package/modules/repositories/module-repository-mongo.js +67 -74
  126. package/modules/repositories/module-repository-postgres.js +66 -74
  127. package/modules/repositories/module-repository.js +2 -1
  128. package/modules/requester/proxy-request.js +244 -0
  129. package/modules/requester/requester.js +27 -2
  130. package/modules/scope-config.js +192 -0
  131. package/modules/scope-policy.js +112 -0
  132. package/modules/scope-resolution.js +288 -0
  133. package/modules/scope-visibility.js +247 -0
  134. package/modules/tests/doubles/in-memory-authorization-session-repository.js +45 -0
  135. package/modules/tests/doubles/ownership-matching.js +18 -0
  136. package/modules/use-cases/authorize-entity-for-user.js +61 -0
  137. package/modules/use-cases/create-entity-from-credential.js +113 -0
  138. package/modules/use-cases/entity-operations-for-user.js +162 -0
  139. package/modules/use-cases/entity-types.js +139 -0
  140. package/modules/use-cases/execute-entity-proxy-request.js +286 -0
  141. package/modules/use-cases/get-authorization-requirements.js +100 -0
  142. package/modules/use-cases/get-entities-for-user.js +26 -13
  143. package/modules/use-cases/get-entity-module-for-user.js +113 -0
  144. package/modules/use-cases/get-entity-options-by-id.js +10 -4
  145. package/modules/use-cases/get-entity-options-by-type.js +1 -1
  146. package/modules/use-cases/get-module-instance-from-type.js +1 -1
  147. package/modules/use-cases/get-module.js +10 -4
  148. package/modules/use-cases/manage-access.js +21 -0
  149. package/modules/use-cases/multi-step-authorization.js +329 -0
  150. package/modules/use-cases/process-authorization-callback.js +53 -19
  151. package/modules/use-cases/refresh-entity-options.js +10 -4
  152. package/modules/use-cases/test-module-auth.js +10 -4
  153. package/modules/utils/map-module-dto.js +3 -5
  154. package/package.json +6 -5
  155. package/prisma-mongodb/schema.prisma +92 -0
  156. package/prisma-postgresql/migrations/20261003000000_add_authorization_session/migration.sql +28 -0
  157. package/prisma-postgresql/migrations/20261015000000_add_organization_membership/migration.sql +26 -0
  158. package/prisma-postgresql/migrations/20261016000000_add_entity_integration_organization/migration.sql +25 -0
  159. package/prisma-postgresql/migrations/20261017000000_add_scheduled_job/migration.sql +28 -0
  160. package/prisma-postgresql/schema.prisma +87 -0
  161. package/providers/index.js +23 -0
  162. package/providers/resolve-provider.js +93 -0
  163. package/providers/runtime-detection.js +124 -0
  164. package/queues/index.js +25 -0
  165. package/queues/providers/index.js +11 -0
  166. package/queues/providers/netlify-background-provider.js +150 -0
  167. package/queues/providers/qstash-queue-provider.js +219 -0
  168. package/queues/providers/sqs-queue-provider.js +70 -0
  169. package/queues/queue-client-interface.js +55 -0
  170. package/queues/queue-message-auth.js +193 -0
  171. package/queues/queue-provider-factory.js +101 -0
  172. package/queues/queue-provider.js +65 -0
  173. package/queues/sqs-queue-client.js +81 -0
  174. package/types/index.d.ts +2 -0
  175. package/types/modules/index.d.ts +197 -0
  176. package/types/user/index.d.ts +134 -0
  177. package/user/adopter-jwt-config.js +177 -0
  178. package/user/adopter-jwt-errors.js +59 -0
  179. package/user/adopter-token-verifier.js +122 -0
  180. package/user/app-user-helpers.js +97 -0
  181. package/user/create-user-authentication.js +64 -0
  182. package/user/membership.js +51 -0
  183. package/user/repositories/organization-membership-record.js +19 -0
  184. package/user/repositories/organization-membership-repository-documentdb.js +106 -0
  185. package/user/repositories/organization-membership-repository-factory.js +42 -0
  186. package/user/repositories/organization-membership-repository-interface.js +57 -0
  187. package/user/repositories/organization-membership-repository-mongo.js +13 -0
  188. package/user/repositories/organization-membership-repository-postgres.js +29 -0
  189. package/user/repositories/organization-membership-repository-prisma.js +81 -0
  190. package/user/repositories/user-repository-documentdb.js +27 -2
  191. package/user/repositories/user-repository-interface.js +18 -0
  192. package/user/repositories/user-repository-mongo.js +24 -0
  193. package/user/repositories/user-repository-postgres.js +18 -0
  194. package/user/tests/doubles/adopter-jwt-fixtures.js +220 -0
  195. package/user/tests/doubles/test-user-repository.js +1 -1
  196. package/user/use-cases/authenticate-user.js +7 -1
  197. package/user/use-cases/ensure-organization-membership.js +92 -0
  198. package/user/use-cases/find-individual-users-by-organization.js +54 -0
  199. package/user/use-cases/get-user-from-adopter-jwt.js +95 -124
  200. package/user/use-cases/get-user-from-bearer-token.js +2 -7
  201. package/user/use-cases/get-user-from-x-frigg-headers.js +83 -80
  202. package/user/user.js +64 -1
  203. package/errors/mapping-already-exists-error.js +0 -14
  204. package/integrations/use-cases/add-entities-to-integration.js +0 -92
  205. package/integrations/use-cases/remove-entities-from-integration.js +0 -70
  206. package/integrations/utils/assert-entity-ids-input.js +0 -42
  207. package/modules/utils/to-credential-id.js +0 -14
@@ -0,0 +1,103 @@
1
+ /**
2
+ * Route Mounter
3
+ *
4
+ * Mounts extension-defined Express routers onto the main app.
5
+ * Each extension can declare routes with a base path and a handler factory.
6
+ *
7
+ * The handler factory receives (prisma, appDefinition) and returns an Express Router.
8
+ * Routes are protected by the admin auth middleware by default.
9
+ *
10
+ * @example
11
+ * mountExtensionRoutes(app, extensions, { prisma, appDefinition });
12
+ */
13
+
14
+ const { validateAdminApiKey } = require('../handlers/middleware/admin-auth');
15
+
16
+ /**
17
+ * Mounts all extension routes onto an Express app.
18
+ *
19
+ * @param {import('express').Express} app - Express app or router to mount on
20
+ * @param {Array<Object>} extensions - Normalized extensions (from extension-loader)
21
+ * @param {Object} context
22
+ * @param {Object} context.prisma - Prisma client instance
23
+ * @param {Object} context.appDefinition - Full app definition
24
+ * @param {Function} [context.authMiddleware] - Override admin auth middleware
25
+ */
26
+ function mountExtensionRoutes(app, extensions, context = {}) {
27
+ if (!extensions || extensions.length === 0) return;
28
+
29
+ const { prisma, appDefinition, authMiddleware } = context;
30
+ const adminAuth = authMiddleware || validateAdminApiKey;
31
+
32
+ for (const ext of extensions) {
33
+ if (!ext.routes) continue;
34
+
35
+ const { path: basePath, handler } = ext.routes;
36
+
37
+ let router;
38
+ if (typeof handler === 'function') {
39
+ // Handler factory: (prisma, appDefinition) => Router
40
+ router = handler(prisma, appDefinition);
41
+ } else if (handler && handler.router) {
42
+ // Direct router object export pattern: { router }
43
+ router = handler.router;
44
+ } else if (handler && handler.default && typeof handler.default === 'function') {
45
+ // ES module default export
46
+ router = handler.default(prisma, appDefinition);
47
+ } else {
48
+ console.warn(
49
+ `Extension "${ext.name}": routes.handler is not a function or router object, skipping`
50
+ );
51
+ continue;
52
+ }
53
+
54
+ // Mount with admin auth middleware
55
+ app.use(basePath, adminAuth, router);
56
+ }
57
+ }
58
+
59
+ module.exports = { mountExtensionRoutes };
60
+
61
+ /**
62
+ * Builds one router serving every app-level extension's routes
63
+ * (`appDefinition.coreExtensions[].routes`), each behind the admin API key.
64
+ *
65
+ * Lazy by design: the extensions, their route factories and the Prisma
66
+ * client are only touched on the first request, so requiring a handler
67
+ * module never connects anything.
68
+ *
69
+ * @param {Object} [params]
70
+ * @param {Object} [params.appDefinition] - raw app Definition; defaults to
71
+ * loadAppDefinition().appDefinition on first request.
72
+ * @param {Object} [params.prisma] - defaults to core's Prisma client.
73
+ * @returns {import('express').Router}
74
+ */
75
+ function createExtensionRoutesRouter({ appDefinition, prisma } = {}) {
76
+ const express = require('express');
77
+ const outer = express.Router();
78
+ let inner = null;
79
+
80
+ outer.use((req, res, next) => {
81
+ if (!inner) {
82
+ const definition =
83
+ appDefinition ||
84
+ require('../handlers/app-definition-loader').loadAppDefinition()
85
+ .appDefinition;
86
+ const { loadExtensions } = require('./extension-loader');
87
+ const extensions = loadExtensions(definition);
88
+ const built = express.Router();
89
+ if (extensions.some((ext) => ext.routes)) {
90
+ mountExtensionRoutes(built, extensions, {
91
+ prisma: prisma || require('../database/prisma').prisma,
92
+ appDefinition: definition,
93
+ });
94
+ }
95
+ inner = built;
96
+ }
97
+ return inner(req, res, next);
98
+ });
99
+
100
+ return outer;
101
+ }
102
+
103
+ module.exports.createExtensionRoutesRouter = createExtensionRoutesRouter;
@@ -0,0 +1,188 @@
1
+ /**
2
+ * Schema Composer
3
+ *
4
+ * Merges extension .prisma schema fragments with a base Prisma schema.
5
+ * Extensions can add new models/enums that get composed into the final schema
6
+ * used for `prisma generate` and migrations.
7
+ *
8
+ * Two approaches are supported:
9
+ * 1. Build-time merge: Concatenate model definitions from extension files
10
+ * into the base schema and write a merged output file.
11
+ * 2. Multi-file schema (Prisma 5.15+): Return a list of schema paths for
12
+ * Prisma's native `prismaSchemaFolder` feature.
13
+ *
14
+ * @example
15
+ * const { composeSchemas } = require('@friggframework/core/extensions/schema-composer');
16
+ *
17
+ * // Build-time merge — writes a merged schema file
18
+ * await composeSchemas({
19
+ * baseSchemaPath: '/path/to/prisma-postgresql/schema.prisma',
20
+ * extensionSchemaPaths: ['/path/to/extensions/db-credentials/schema.prisma'],
21
+ * outputPath: '/path/to/prisma-postgresql/schema.composed.prisma',
22
+ * });
23
+ */
24
+
25
+ const fs = require('fs');
26
+ const path = require('path');
27
+
28
+ /**
29
+ * Extracts model/enum blocks from a .prisma file, stripping out
30
+ * generator and datasource blocks (which should only appear in the base schema).
31
+ *
32
+ * @param {string} schemaContent - Raw .prisma file content
33
+ * @returns {string} Only model/enum/type definitions
34
+ */
35
+ function extractModelBlocks(schemaContent) {
36
+ const lines = schemaContent.split('\n');
37
+ const result = [];
38
+ let depth = 0;
39
+ let inBlock = false;
40
+ let blockType = null;
41
+
42
+ for (const line of lines) {
43
+ const trimmed = line.trim();
44
+
45
+ // Detect block start
46
+ if (depth === 0 && !inBlock) {
47
+ const blockMatch = trimmed.match(
48
+ /^(model|enum|type)\s+\w+\s*\{/
49
+ );
50
+ if (blockMatch) {
51
+ inBlock = true;
52
+ blockType = blockMatch[1];
53
+ result.push(line);
54
+ depth += (line.match(/\{/g) || []).length;
55
+ depth -= (line.match(/\}/g) || []).length;
56
+ continue;
57
+ }
58
+
59
+ // Skip generator/datasource blocks
60
+ const skipMatch = trimmed.match(
61
+ /^(generator|datasource)\s+\w+\s*\{/
62
+ );
63
+ if (skipMatch) {
64
+ inBlock = true;
65
+ blockType = 'skip';
66
+ depth += (line.match(/\{/g) || []).length;
67
+ depth -= (line.match(/\}/g) || []).length;
68
+ continue;
69
+ }
70
+
71
+ // Keep standalone comments between blocks
72
+ if (trimmed.startsWith('//') || trimmed === '') {
73
+ // Only keep if we've already accumulated some model blocks
74
+ if (result.length > 0) {
75
+ result.push(line);
76
+ }
77
+ continue;
78
+ }
79
+ } else if (inBlock) {
80
+ depth += (line.match(/\{/g) || []).length;
81
+ depth -= (line.match(/\}/g) || []).length;
82
+
83
+ if (blockType !== 'skip') {
84
+ result.push(line);
85
+ }
86
+
87
+ if (depth <= 0) {
88
+ inBlock = false;
89
+ blockType = null;
90
+ depth = 0;
91
+ if (result.length > 0) {
92
+ result.push(''); // blank line between blocks
93
+ }
94
+ }
95
+ }
96
+ }
97
+
98
+ return result.join('\n').trim();
99
+ }
100
+
101
+ /**
102
+ * Composes a merged Prisma schema from a base schema + extension fragments.
103
+ *
104
+ * @param {Object} options
105
+ * @param {string} options.baseSchemaPath - Absolute path to the core .prisma file
106
+ * @param {string[]} options.extensionSchemaPaths - Absolute paths to extension .prisma files
107
+ * @param {string} [options.outputPath] - Where to write the merged schema.
108
+ * Defaults to `<baseDir>/schema.composed.prisma`
109
+ * @returns {string} The merged schema content
110
+ */
111
+ function composeSchemas({ baseSchemaPath, extensionSchemaPaths, outputPath }) {
112
+ if (!baseSchemaPath) {
113
+ throw new Error('baseSchemaPath is required');
114
+ }
115
+
116
+ if (
117
+ !extensionSchemaPaths ||
118
+ !Array.isArray(extensionSchemaPaths) ||
119
+ extensionSchemaPaths.length === 0
120
+ ) {
121
+ // No extensions — just return base schema as-is
122
+ const baseContent = fs.readFileSync(baseSchemaPath, 'utf-8');
123
+ return baseContent;
124
+ }
125
+
126
+ const baseContent = fs.readFileSync(baseSchemaPath, 'utf-8');
127
+
128
+ // Collect model blocks from each extension
129
+ const extensionBlocks = [];
130
+ for (const extPath of extensionSchemaPaths) {
131
+ if (!fs.existsSync(extPath)) {
132
+ throw new Error(
133
+ `Extension schema not found: ${extPath}`
134
+ );
135
+ }
136
+ const extContent = fs.readFileSync(extPath, 'utf-8');
137
+ const models = extractModelBlocks(extContent);
138
+ if (models) {
139
+ extensionBlocks.push(
140
+ `// --- Extension schema from: ${path.basename(path.dirname(extPath))}/${path.basename(extPath)} ---`,
141
+ models
142
+ );
143
+ }
144
+ }
145
+
146
+ if (extensionBlocks.length === 0) {
147
+ return baseContent;
148
+ }
149
+
150
+ // Append extension models to the base schema
151
+ const merged = [
152
+ baseContent.trimEnd(),
153
+ '',
154
+ '// =========================================================================',
155
+ '// Extension Models (auto-composed — do not edit manually)',
156
+ '// =========================================================================',
157
+ '',
158
+ ...extensionBlocks,
159
+ '',
160
+ ].join('\n');
161
+
162
+ // Write the merged schema if outputPath is specified
163
+ const resolvedOutput =
164
+ outputPath ||
165
+ path.join(path.dirname(baseSchemaPath), 'schema.composed.prisma');
166
+
167
+ fs.writeFileSync(resolvedOutput, merged, 'utf-8');
168
+
169
+ return merged;
170
+ }
171
+
172
+ /**
173
+ * Returns schema paths suitable for Prisma's native multi-file schema support
174
+ * (prismaSchemaFolder feature, Prisma 5.15+).
175
+ *
176
+ * @param {string} baseSchemaPath - Path to the core schema
177
+ * @param {string[]} extensionSchemaPaths - Paths to extension schemas
178
+ * @returns {string[]} All schema file paths
179
+ */
180
+ function getSchemaFilePaths(baseSchemaPath, extensionSchemaPaths) {
181
+ return [baseSchemaPath, ...(extensionSchemaPaths || [])];
182
+ }
183
+
184
+ module.exports = {
185
+ composeSchemas,
186
+ extractModelBlocks,
187
+ getSchemaFilePaths,
188
+ };