drizzle-cube 0.7.1 → 0.8.0

package/dist/adapters/core/http-port.d.ts

@@ -7,8 +7,16 @@
  * (Hono/Next.js). Implementations are constructed per request by each adapter.
  *
  * This interface is public — third parties implement it to build adapters for
- * other frameworks. Add new capabilities as optional members or via a separate
- * extension interface; a new required member is a breaking change.
+ * other frameworks. Prefer optional members or a separate extension interface
+ * for new capabilities, because a new required member is a breaking change for
+ * those adapters.
+ *
+ * `setHeader` was promoted from {@link McpHttpPort} to this interface in the
+ * per-tenant cube sets release, so that the core can stamp `Cache-Control` on
+ * every REST response (see {@link withRestCacheHeaders}). Every REST body is now
+ * tenant-scoped, and that guarantee cannot be left to each adapter. The break is
+ * accepted for this release: third-party REST-only adapters must add
+ * `setHeader`, which all four first-party adapters already implemented.
  */
 export interface HttpPort<TRes> {
     /** Read a request header by (case-insensitive) name. Synchronous. */
@@ -17,23 +25,42 @@ export interface HttpPort<TRes> {
     getBody(): Promise<unknown>;
     /** Read a raw query-string value by name (used by GET). */
     getQueryParam(name: string): string | undefined;
+    /** Set a response header. Must be called before `send`/`sendSse`/`sendEmpty`. */
+    setHeader(name: string, value: string): void;
     /** Send a response with the given status and JSON body; returns the framework's response value. */
     send(status: number, body: unknown): TRes;
 }
 /**
- * Extension of {@link HttpPort} for the MCP POST handler, which needs to set
- * response headers (WWW-Authenticate, MCP-Session-Id), emit a single-event SSE
- * response, and send an empty-body acknowledgement (202 for notifications).
+ * Extension of {@link HttpPort} for the MCP POST handler, which needs to emit a
+ * single-event SSE response and send an empty-body acknowledgement (202 for
+ * notifications).
  *
  * Kept separate from the minimal REST port so third-party adapters only
  * implement these when they wire up MCP. New required members on this interface
  * are still a breaking change for MCP-capable adapters.
  */
 export interface McpHttpPort<TRes> extends HttpPort<TRes> {
-    /** Set a response header. Must be called before `send`/`sendSse`/`sendEmpty`. */
-    setHeader(name: string, value: string): void;
     /** Send a single-event SSE response (status 200): write the pre-serialized body, then end. */
     sendSse(status: number, body: string): TRes;
     /** Send an empty-body response (no JSON), e.g. a 202 notification acknowledgement. */
     sendEmpty(status: number): TRes;
 }
+/**
+ * `Cache-Control` stamped on every REST response.
+ *
+ * Every REST body varies by tenant: `/meta` returns the caller's cube set, and
+ * `/load`, `/sql`, `/dry-run`, `/batch` and `/explain` return that tenant's data
+ * or SQL. With no `Cache-Control` a shared cache may store and reuse these
+ * responses heuristically, which would cross-serve one tenant's cubes to
+ * another. `private` bars shared caches; `no-store` bars storage entirely.
+ */
+export declare const REST_CACHE_CONTROL = "private, no-store";
+/**
+ * Wrap a port so every response it sends carries {@link REST_CACHE_CONTROL}.
+ *
+ * Applied once over the whole REST surface in `createCubeHttpHandler`, not per
+ * route, so no endpoint can forget it — including the 400/500 error paths.
+ * Deliberately NOT applied to MCP: its SSE responses set their own
+ * `Cache-Control`, and JSON-RPC POSTs are not heuristically cacheable.
+ */
+export declare function withRestCacheHeaders<TRes>(port: HttpPort<TRes>): HttpPort<TRes>;

package/dist/adapters/core/index.cjs

@@ -1 +1 @@
-Object.defineProperty(exports,Symbol.toStringTag,{value:`Module`});const e=require("../core-CzFfrJzu.cjs");exports.createCubeHttpHandler=e.t,exports.resolveSecurityContext=e.n,exports.withLocaleFromHeaders=e.r;
+Object.defineProperty(exports,Symbol.toStringTag,{value:`Module`});const e=require("../core-DgTGXxDu.cjs");exports.REST_CACHE_CONTROL=e.i,exports.createCubeHttpHandler=e.t,exports.resolveSecurityContext=e.n,exports.withLocaleFromHeaders=e.r,exports.withRestCacheHeaders=e.a;

package/dist/adapters/core/index.d.ts

@@ -6,6 +6,7 @@
  * {@link createCubeHttpHandler}.
  */
 export type { HttpPort, McpHttpPort } from './http-port.js';
+export { withRestCacheHeaders, REST_CACHE_CONTROL } from './http-port.js';
 export { withLocaleFromHeaders, resolveSecurityContext, type HeaderReader, type BaseSecurityContextThunk } from './security-context.js';
 export { createCubeHttpHandler, type CubeHttpHandler, type CubeHttpHandlerOptions } from './cube-http-handler.js';
 export type { RestHandlers } from './rest-handlers.js';

package/dist/adapters/core/index.js

@@ -1,2 +1,2 @@
-import { n as e, r as t, t as n } from "../core-BOPRmxPc.js";
-export { n as createCubeHttpHandler, e as resolveSecurityContext, t as withLocaleFromHeaders };
+import { a as e, i as t, n, r, t as i } from "../core-DXkuSUBg.js";
+export { t as REST_CACHE_CONTROL, i as createCubeHttpHandler, n as resolveSecurityContext, r as withLocaleFromHeaders, e as withRestCacheHeaders };

package/dist/adapters/core/rest-handlers.d.ts

@@ -3,7 +3,7 @@ import { HttpPort } from './http-port.js';
 import { BaseSecurityContextThunk } from './security-context.js';
 /** REST handlers keyed by endpoint; each closes over the shared semantic layer. */
 export interface RestHandlers {
-    handleMetaGet<TRes>(port: HttpPort<TRes>): TRes;
+    handleMetaGet<TRes>(port: HttpPort<TRes>, getBaseSecurityContext: BaseSecurityContextThunk): Promise<TRes>;
     handleSqlGet<TRes>(port: HttpPort<TRes>, getBaseSecurityContext: BaseSecurityContextThunk): Promise<TRes>;
     handleSqlPost<TRes>(port: HttpPort<TRes>, getBaseSecurityContext: BaseSecurityContextThunk): Promise<TRes>;
     handleDryRunGet<TRes>(port: HttpPort<TRes>, getBaseSecurityContext: BaseSecurityContextThunk): Promise<TRes>;

package/dist/adapters/{core-BOPRmxPc.js → core-DXkuSUBg.js}

@@ -1,5 +1,5 @@
-import { a as e, i as t, l as n, o as r, r as i, u as a } from "./utils-DboNUT3A.js";
-import { C as o, S as s, _ as c, a as l, b as u, c as d, g as f, h as p, i as m, l as h, m as g, o as _, r as v, u as y, v as b, w as x, x as S, y as C } from "./mcp-transport-BXyA4dTk.js";
+import { a as e, i as t, l as n, o as r, r as i, u as a } from "./utils-DkmShl5f.js";
+import { C as o, S as s, _ as c, a as l, b as u, c as d, g as f, h as p, i as m, l as h, m as g, p as _, r as v, s as y, v as b, w as x, x as S, y as C } from "./mcp-transport-fJud19xz.js";
 //#region src/adapters/locale.ts
 var w = "x-dc-locale";
 function T(e) {
@@ -22,30 +22,43 @@ function O(e) {
 	return t.some((e) => e.toLowerCase() === "x-dc-locale") || t.push("X-DC-Locale"), t;
 }
 //#endregion
+//#region src/adapters/core/http-port.ts
+var k = "private, no-store";
+function A(e) {
+	return {
+		getHeader: (t) => e.getHeader(t),
+		getBody: () => e.getBody(),
+		getQueryParam: (t) => e.getQueryParam(t),
+		setHeader: (t, n) => e.setHeader(t, n),
+		send: (t, n) => (e.setHeader("Cache-Control", k), e.send(t, n))
+	};
+}
+//#endregion
 //#region src/adapters/core/security-context.ts
-function k(e, t) {
+function j(e, t) {
 	return D(e, E(t));
 }
-async function A(e, t) {
-	return k(await e(), t);
+async function M(e, t) {
+	return j(await e(), t);
 }
-function j(e) {
+function N(e) {
 	return String(e).replace(/\n|\r/g, "");
 }
 //#endregion
 //#region src/adapters/core/rest-handlers.ts
-function M(i) {
+function P(i) {
 	async function o(e, n, a) {
-		let o = i.validateQuery(e);
+		let o = i.validateQuery(e, n);
 		if (!o.isValid) return a.send(400, t(`Query validation failed: ${o.errors.join(", ")}`, 400));
 		let s = e.measures?.[0] || e.dimensions?.[0];
 		if (!s) return a.send(400, t("No measures or dimensions specified", 400));
 		let c = s.split(".")[0], l = await i.generateSQL(c, e, n);
 		return a.send(200, r(e, l));
 	}
-	function s(n) {
+	async function s(n, r) {
 		try {
-			return n.send(200, e(i.getMetadata()));
+			let t = await M(r, (e) => n.getHeader(e));
+			return n.send(200, e(i.getMetadata(t)));
 		} catch (e) {
 			return console.error("Metadata error:", e), n.send(500, t(e instanceof Error ? e.message : "Failed to fetch metadata", 500));
 		}
@@ -53,9 +66,9 @@ function M(i) {
 	async function c(e, n) {
 		try {
 			let t = await e.getBody();
-			return await o(t?.query || t, await A(n, (t) => e.getHeader(t)), e);
+			return await o(t?.query || t, await M(n, (t) => e.getHeader(t)), e);
 		} catch (n) {
-			return console.error("SQL generation error:", j(n)), e.send(500, t(n instanceof Error ? n.message : "SQL generation failed", 500));
+			return console.error("SQL generation error:", N(n)), e.send(500, t(n instanceof Error ? n.message : "SQL generation failed", 500));
 		}
 	}
 	async function l(e, n) {
@@ -68,15 +81,15 @@ function M(i) {
 			} catch {
 				return e.send(400, t("Invalid JSON in query parameter", 400));
 			}
-			let a = await A(n, (t) => e.getHeader(t));
+			let a = await M(n, (t) => e.getHeader(t));
 			return await o(i, a, e);
 		} catch (n) {
-			return console.error("SQL generation error:", j(n)), e.send(500, t(n instanceof Error ? n.message : "SQL generation failed", 500));
+			return console.error("SQL generation error:", N(n)), e.send(500, t(n instanceof Error ? n.message : "SQL generation failed", 500));
 		}
 	}
 	async function u(e, t) {
 		try {
-			let n = await e.getBody(), r = n?.query || n, o = await A(t, (t) => e.getHeader(t)), s = await a(r, o, i);
+			let n = await e.getBody(), r = n?.query || n, o = await M(t, (t) => e.getHeader(t)), s = await a(r, o, i);
 			return e.send(200, s);
 		} catch (t) {
 			return console.error("Dry-run error:", t), e.send(400, {
@@ -92,7 +105,7 @@ function M(i) {
 				error: "Query parameter is required",
 				valid: !1
 			});
-			let r = JSON.parse(n), o = await A(t, (t) => e.getHeader(t)), s = await a(r, o, i);
+			let r = JSON.parse(n), o = await M(t, (t) => e.getHeader(t)), s = await a(r, o, i);
 			return e.send(200, s);
 		} catch (t) {
 			return console.error("Dry-run error:", t), e.send(400, {
@@ -106,7 +119,7 @@ function M(i) {
 			let a = (await e.getBody())?.queries;
 			if (!a || !Array.isArray(a)) return e.send(400, t("Request body must contain a \"queries\" array", 400));
 			if (a.length === 0) return e.send(400, t("Queries array cannot be empty", 400));
-			let o = await A(r, (t) => e.getHeader(t)), s = e.getHeader("x-cache-control") === "no-cache", c = await n(a, o, i, { skipCache: s });
+			let o = await M(r, (t) => e.getHeader(t)), s = e.getHeader("x-cache-control") === "no-cache", c = await n(a, o, i, { skipCache: s });
 			return e.send(200, c);
 		} catch (n) {
 			return console.error("Batch execution error:", n), e.send(500, t(n instanceof Error ? n.message : "Batch execution failed", 500));
@@ -114,7 +127,7 @@ function M(i) {
 	}
 	async function p(e, t) {
 		try {
-			let n = await e.getBody(), r = n?.query || n, a = n?.options || {}, o = await A(t, (t) => e.getHeader(t)), s = i.validateQuery(r);
+			let n = await e.getBody(), r = n?.query || n, a = n?.options || {}, o = await M(t, (t) => e.getHeader(t)), s = i.validateQuery(r, o);
 			if (!s.isValid) return e.send(400, { error: `Query validation failed: ${s.errors.join(", ")}` });
 			let c = await i.explainQuery(r, o, a);
 			return e.send(200, c);
@@ -134,78 +147,75 @@ function M(i) {
 }
 //#endregion
 //#region src/adapters/core/mcp-handler.ts
-function N(e, t) {
+function F(e, t) {
 	let n = e?.code ?? -32603, r = e?.data, i = e.message || "MCP request failed";
 	return m(t ?? null, n, i, r);
 }
-function P(e, t) {
-	let n = !!t.app, r = typeof t.app == "object" ? t.app : void 0, i;
-	function a() {
-		return i ||= {
-			resources: _(e, t.resources),
-			prompts: u(t.prompts),
-			instructions: C(t.instructions)
-		}, i;
-	}
-	async function w(i, u) {
-		if (t.resourceMetadataUrl && !y(i.getHeader("authorization"))) return i.setHeader("WWW-Authenticate", d(t.resourceMetadataUrl)), i.send(401, { error: "Bearer token required" });
-		let _ = o(i.getHeader("origin"), f(t));
-		if (!_.valid) return i.send(403, m(null, -32600, _.reason));
-		let C = i.getHeader("accept");
-		if (!s(C)) return i.send(400, m(null, -32600, "Accept header must include both application/json and text/event-stream"));
-		let w = p({ "mcp-protocol-version": i.getHeader("mcp-protocol-version") });
-		if (!w.ok) return i.send(426, {
+function I(e, t) {
+	let n = !!t.app, r = typeof t.app == "object" ? t.app : void 0, i = {
+		resources: u(t.resources),
+		prompts: C(t.prompts),
+		instructions: b(t.instructions)
+	};
+	async function a(a, u) {
+		if (t.resourceMetadataUrl && !h(a.getHeader("authorization"))) return a.setHeader("WWW-Authenticate", y(t.resourceMetadataUrl)), a.send(401, { error: "Bearer token required" });
+		let b = o(a.getHeader("origin"), p(t));
+		if (!b.valid) return a.send(403, m(null, -32600, b.reason));
+		let C = a.getHeader("accept");
+		if (!s(C)) return a.send(400, m(null, -32600, "Accept header must include both application/json and text/event-stream"));
+		let w = g({ "mcp-protocol-version": a.getHeader("mcp-protocol-version") });
+		if (!w.ok) return a.send(426, {
 			error: "Unsupported MCP protocol version",
 			supported: w.supported
 		});
-		let T = c(await i.getBody());
-		if (!T) return i.send(400, m(null, -32600, "Invalid JSON-RPC 2.0 request"));
-		let E = x(C), D = T.method === "initialize", { resources: O, prompts: k, instructions: M } = a();
+		let T = f(await a.getBody());
+		if (!T) return a.send(400, m(null, -32600, "Invalid JSON-RPC 2.0 request"));
+		let E = x(C), D = T.method === "initialize", { resources: O, prompts: k, instructions: A } = i;
 		try {
-			let a = await h(T.method, T.params, {
+			let i = await d(T.method, T.params, {
 				semanticLayer: e,
-				extractSecurityContext: () => A(u, (e) => i.getHeader(e)),
+				extractSecurityContext: () => M(u, (e) => a.getHeader(e)),
 				rawRequest: void 0,
 				rawResponse: void 0,
 				negotiatedProtocol: w.negotiated,
 				resources: O,
 				prompts: k,
-				instructions: M,
+				instructions: A,
 				appEnabled: n,
 				appConfig: r,
 				serverName: t.serverName
 			});
-			if (g(T)) return i.sendEmpty(202);
-			let o = D && a && typeof a == "object" && "sessionId" in a ? a.sessionId : void 0;
-			o && i.setHeader(v, o);
-			let s = l(T.id ?? null, a);
+			if (_(T)) return a.sendEmpty(202);
+			let o = D && i && typeof i == "object" && "sessionId" in i ? i.sessionId : void 0;
+			o && a.setHeader(v, o);
+			let s = l(T.id ?? null, i);
 			if (E) {
-				let e = b();
-				return i.sendSse(200, `id: ${e}\n\n` + S(s, e));
+				let e = c();
+				return a.sendSse(200, `id: ${e}\n\n` + S(s, e));
 			}
-			return i.send(200, s);
+			return a.send(200, s);
 		} catch (e) {
-			if (g(T)) return console.error("MCP notification processing error:", j(e)), i.sendEmpty(202);
-			console.error("MCP RPC error:", j(e));
-			let t = N(e, T.id);
+			if (_(T)) return console.error("MCP notification processing error:", N(e)), a.sendEmpty(202);
+			console.error("MCP RPC error:", N(e));
+			let t = F(e, T.id);
 			if (E) {
-				let e = b();
-				return i.sendSse(200, `id: ${e}\n\n` + S(t, e));
+				let e = c();
+				return a.sendSse(200, `id: ${e}\n\n` + S(t, e));
 			}
-			return i.send(200, t);
+			return a.send(200, t);
 		}
 	}
-	return { handleMcpPost: w };
+	return { handleMcpPost: a };
 }
 //#endregion
 //#region src/adapters/core/cube-http-handler.ts
-function F(e) {
-	let { semanticLayer: n, onError: r, mcp: a = {} } = e, o = M(n), { handleMcpPost: s } = P(n, a);
+function L(e) {
+	let { semanticLayer: n, onError: r, mcp: a = {} } = e, o = P(n), { handleMcpPost: s } = I(n, a);
 	function c(e, n) {
 		return r(e), n.send(500, t(e instanceof Error ? e.message : "Query execution failed", 500));
 	}
 	async function l(e, r, a) {
-		let o = await A(a, (e) => r.getHeader(e)), s = n.validateQuery(e);
+		let o = await M(a, (e) => r.getHeader(e)), s = n.validateQuery(e, o);
 		if (!s.isValid) return r.send(400, t(`Query validation failed: ${s.errors.join(", ")}`, 400));
 		let c = r.getHeader("x-cache-control") === "no-cache", l = await n.executeMultiCubeQuery(e, o, { skipCache: c });
 		return r.send(200, i(e, l, n));
@@ -234,11 +244,17 @@ function F(e) {
 		}
 	}
 	return {
-		handleLoadGet: d,
-		handleLoadPost: u,
-		handleMcpPost: s,
-		...o
+		handleLoadGet: (e, t) => d(A(e), t),
+		handleLoadPost: (e, t) => u(A(e), t),
+		handleMetaGet: (e, t) => o.handleMetaGet(A(e), t),
+		handleSqlGet: (e, t) => o.handleSqlGet(A(e), t),
+		handleSqlPost: (e, t) => o.handleSqlPost(A(e), t),
+		handleDryRunGet: (e, t) => o.handleDryRunGet(A(e), t),
+		handleDryRunPost: (e, t) => o.handleDryRunPost(A(e), t),
+		handleBatchPost: (e, t) => o.handleBatchPost(A(e), t),
+		handleExplainPost: (e, t) => o.handleExplainPost(A(e), t),
+		handleMcpPost: s
 	};
 }
 //#endregion
-export { E as a, O as i, A as n, D as o, k as r, F as t };
+export { A as a, D as c, k as i, M as n, O as o, j as r, E as s, L as t };

package/dist/adapters/core-DgTGXxDu.cjs

@@ -0,0 +1 @@
+const e=require("./utils-BY0-KFyI.cjs"),t=require("./mcp-transport-BGkSz-ZT.cjs");var n=`x-dc-locale`;function r(e){if(!e)return;let t=(Array.isArray(e)?e[0]:e).split(`,`)[0]?.trim();if(t&&/^[A-Za-z0-9-]{2,35}$/.test(t))return t}function i(e){return r(e(n))}function a(e,t){let n=e&&typeof e==`object`?e:{},r=typeof n.locale==`string`?n.locale:void 0,i=t??r??`en-GB`;return r===i?n:{...n,locale:i}}function o(e){let t=Array.isArray(e)?[...e]:(e??``).split(`,`).map(e=>e.trim()).filter(Boolean);return t.some(e=>e.toLowerCase()===`x-dc-locale`)||t.push(`X-DC-Locale`),t}var s=`private, no-store`;function c(e){return{getHeader:t=>e.getHeader(t),getBody:()=>e.getBody(),getQueryParam:t=>e.getQueryParam(t),setHeader:(t,n)=>e.setHeader(t,n),send:(t,n)=>(e.setHeader(`Cache-Control`,s),e.send(t,n))}}function l(e,t){return a(e,i(t))}async function u(e,t){return l(await e(),t)}function d(e){return String(e).replace(/\n|\r/g,``)}function f(t){async function n(n,r,i){let a=t.validateQuery(n,r);if(!a.isValid)return i.send(400,e.i(`Query validation failed: ${a.errors.join(`, `)}`,400));let o=n.measures?.[0]||n.dimensions?.[0];if(!o)return i.send(400,e.i(`No measures or dimensions specified`,400));let s=o.split(`.`)[0],c=await t.generateSQL(s,n,r);return i.send(200,e.o(n,c))}async function r(n,r){try{let i=await u(r,e=>n.getHeader(e));return n.send(200,e.a(t.getMetadata(i)))}catch(t){return console.error(`Metadata error:`,t),n.send(500,e.i(t instanceof Error?t.message:`Failed to fetch metadata`,500))}}async function i(t,r){try{let e=await t.getBody();return await n(e?.query||e,await u(r,e=>t.getHeader(e)),t)}catch(n){return console.error(`SQL generation error:`,d(n)),t.send(500,e.i(n instanceof Error?n.message:`SQL generation failed`,500))}}async function a(t,r){try{let i=t.getQueryParam(`query`);if(!i)return t.send(400,e.i(`Query parameter is required`,400));let a;try{a=JSON.parse(i)}catch{return t.send(400,e.i(`Invalid JSON in query parameter`,400))}let o=await u(r,e=>t.getHeader(e));return await n(a,o,t)}catch(n){return console.error(`SQL generation error:`,d(n)),t.send(500,e.i(n instanceof Error?n.message:`SQL generation failed`,500))}}async function o(n,r){try{let i=await n.getBody(),a=i?.query||i,o=await u(r,e=>n.getHeader(e)),s=await e.u(a,o,t);return n.send(200,s)}catch(e){return console.error(`Dry-run error:`,e),n.send(400,{error:e instanceof Error?e.message:`Dry-run validation failed`,valid:!1})}}async function s(n,r){try{let i=n.getQueryParam(`query`);if(!i)return n.send(400,{error:`Query parameter is required`,valid:!1});let a=JSON.parse(i),o=await u(r,e=>n.getHeader(e)),s=await e.u(a,o,t);return n.send(200,s)}catch(e){return console.error(`Dry-run error:`,e),n.send(400,{error:e instanceof Error?e.message:`Dry-run validation failed`,valid:!1})}}async function c(n,r){try{let i=(await n.getBody())?.queries;if(!i||!Array.isArray(i))return n.send(400,e.i(`Request body must contain a "queries" array`,400));if(i.length===0)return n.send(400,e.i(`Queries array cannot be empty`,400));let a=await u(r,e=>n.getHeader(e)),o=n.getHeader(`x-cache-control`)===`no-cache`,s=await e.l(i,a,t,{skipCache:o});return n.send(200,s)}catch(t){return console.error(`Batch execution error:`,t),n.send(500,e.i(t instanceof Error?t.message:`Batch execution failed`,500))}}async function l(e,n){try{let r=await e.getBody(),i=r?.query||r,a=r?.options||{},o=await u(n,t=>e.getHeader(t)),s=t.validateQuery(i,o);if(!s.isValid)return e.send(400,{error:`Query validation failed: ${s.errors.join(`, `)}`});let c=await t.explainQuery(i,o,a);return e.send(200,c)}catch(t){return console.error(`Explain error:`,t),e.send(500,{error:t instanceof Error?t.message:`Explain query failed`})}}return{handleMetaGet:r,handleSqlGet:a,handleSqlPost:i,handleDryRunGet:s,handleDryRunPost:o,handleBatchPost:c,handleExplainPost:l}}function p(e,n){let r=e?.code??-32603,i=e?.data,a=e.message||`MCP request failed`;return t.i(n??null,r,a,i)}function m(e,n){let r=!!n.app,i=typeof n.app==`object`?n.app:void 0,a={resources:t.b(n.resources),prompts:t.y(n.prompts),instructions:t.v(n.instructions)};async function o(o,s){if(n.resourceMetadataUrl&&!t.l(o.getHeader(`authorization`)))return o.setHeader(`WWW-Authenticate`,t.s(n.resourceMetadataUrl)),o.send(401,{error:`Bearer token required`});let c=t.C(o.getHeader(`origin`),t.h(n));if(!c.valid)return o.send(403,t.i(null,-32600,c.reason));let l=o.getHeader(`accept`);if(!t.S(l))return o.send(400,t.i(null,-32600,`Accept header must include both application/json and text/event-stream`));let f=t.m({"mcp-protocol-version":o.getHeader(`mcp-protocol-version`)});if(!f.ok)return o.send(426,{error:`Unsupported MCP protocol version`,supported:f.supported});let m=t.g(await o.getBody());if(!m)return o.send(400,t.i(null,-32600,`Invalid JSON-RPC 2.0 request`));let h=t.w(l),g=m.method===`initialize`,{resources:_,prompts:v,instructions:y}=a;try{let a=await t.c(m.method,m.params,{semanticLayer:e,extractSecurityContext:()=>u(s,e=>o.getHeader(e)),rawRequest:void 0,rawResponse:void 0,negotiatedProtocol:f.negotiated,resources:_,prompts:v,instructions:y,appEnabled:r,appConfig:i,serverName:n.serverName});if(t.p(m))return o.sendEmpty(202);let c=g&&a&&typeof a==`object`&&`sessionId`in a?a.sessionId:void 0;c&&o.setHeader(t.r,c);let l=t.a(m.id??null,a);if(h){let e=t._();return o.sendSse(200,`id: ${e}\n\n`+t.x(l,e))}return o.send(200,l)}catch(e){if(t.p(m))return console.error(`MCP notification processing error:`,d(e)),o.sendEmpty(202);console.error(`MCP RPC error:`,d(e));let n=p(e,m.id);if(h){let e=t._();return o.sendSse(200,`id: ${e}\n\n`+t.x(n,e))}return o.send(200,n)}}return{handleMcpPost:o}}function h(t){let{semanticLayer:n,onError:r,mcp:i={}}=t,a=f(n),{handleMcpPost:o}=m(n,i);function s(t,n){return r(t),n.send(500,e.i(t instanceof Error?t.message:`Query execution failed`,500))}async function l(t,r,i){let a=await u(i,e=>r.getHeader(e)),o=n.validateQuery(t,a);if(!o.isValid)return r.send(400,e.i(`Query validation failed: ${o.errors.join(`, `)}`,400));let s=r.getHeader(`x-cache-control`)===`no-cache`,c=await n.executeMultiCubeQuery(t,a,{skipCache:s});return r.send(200,e.r(t,c,n))}async function d(e,t){try{let n=await e.getBody();return await l(n?.query||n,e,t)}catch(t){return s(t,e)}}async function p(t,n){try{let r=t.getQueryParam(`query`);if(!r)return t.send(400,e.i(`Query parameter is required`,400));let i;try{i=JSON.parse(r)}catch{return t.send(400,e.i(`Invalid JSON in query parameter`,400))}return await l(i,t,n)}catch(e){return s(e,t)}}return{handleLoadGet:(e,t)=>p(c(e),t),handleLoadPost:(e,t)=>d(c(e),t),handleMetaGet:(e,t)=>a.handleMetaGet(c(e),t),handleSqlGet:(e,t)=>a.handleSqlGet(c(e),t),handleSqlPost:(e,t)=>a.handleSqlPost(c(e),t),handleDryRunGet:(e,t)=>a.handleDryRunGet(c(e),t),handleDryRunPost:(e,t)=>a.handleDryRunPost(c(e),t),handleBatchPost:(e,t)=>a.handleBatchPost(c(e),t),handleExplainPost:(e,t)=>a.handleExplainPost(c(e),t),handleMcpPost:o}}Object.defineProperty(exports,"a",{enumerable:!0,get:function(){return c}}),Object.defineProperty(exports,"c",{enumerable:!0,get:function(){return a}}),Object.defineProperty(exports,"i",{enumerable:!0,get:function(){return s}}),Object.defineProperty(exports,"n",{enumerable:!0,get:function(){return u}}),Object.defineProperty(exports,"o",{enumerable:!0,get:function(){return o}}),Object.defineProperty(exports,"r",{enumerable:!0,get:function(){return l}}),Object.defineProperty(exports,"s",{enumerable:!0,get:function(){return i}}),Object.defineProperty(exports,"t",{enumerable:!0,get:function(){return h}});

package/dist/adapters/express/index.cjs

@@ -1,3 +1,3 @@
-Object.defineProperty(exports,Symbol.toStringTag,{value:`Module`});const e=require("../utils-BoOeig94.cjs"),t=require("../compiler-BNjqYdmc.cjs"),n=require("../mcp-transport-B0b27YUB.cjs"),r=require("../core-CzFfrJzu.cjs");let i=require("express");i=e.j(i,1);let a=require("cors");a=e.j(a,1);function o(e,t){return{getHeader:t=>e.get(t),getBody:async()=>e.body,getQueryParam:t=>e.query[t],send:(e,n)=>t.status(e).json(n),setHeader:(e,n)=>{t.setHeader(e,n)},sendEmpty:e=>t.status(e).end(),sendSse:(e,n)=>(t.status(e),t.setHeader(`Content-Type`,`text/event-stream`),t.setHeader(`Cache-Control`,`no-cache`),t.setHeader(`Connection`,`keep-alive`),t.write(n),t.end())}}function s(s){let{cubes:c,drizzle:l,schema:u,extractSecurityContext:d,engineType:f,cors:p,basePath:m=`/cubejs-api/v1`,jsonLimit:h=`10mb`,cache:g,mcp:_={enabled:!0},agent:v}=s;if(!c||c.length===0)throw Error(`At least one cube must be provided in the cubes array`);let y=(0,i.Router)();if(p){let e={...p,allowedHeaders:r.i(p.allowedHeaders)};y.use((0,a.default)(e))}y.use(i.default.json({limit:h})),y.use(i.default.urlencoded({extended:!0,limit:h}));let b=new t.t({drizzle:l,schema:u,engineType:f,cache:g,rlsSetup:s.rlsSetup});c.forEach(e=>{b.registerCube(e)});let x=r.t({semanticLayer:b,onError:e=>console.error(`Query execution error:`,e),mcp:_}),S=(e,t)=>()=>d(e,t);if(y.post(`${m}/load`,async(e,t)=>{await x.handleLoadPost(o(e,t),S(e,t))}),y.get(`${m}/load`,async(e,t)=>{await x.handleLoadGet(o(e,t),S(e,t))}),y.post(`${m}/batch`,async(e,t)=>{await x.handleBatchPost(o(e,t),S(e,t))}),y.get(`${m}/meta`,(e,t)=>{x.handleMetaGet(o(e,t))}),y.post(`${m}/sql`,async(e,t)=>{await x.handleSqlPost(o(e,t),S(e,t))}),y.get(`${m}/sql`,async(e,t)=>{await x.handleSqlGet(o(e,t),S(e,t))}),y.post(`${m}/dry-run`,async(e,t)=>{await x.handleDryRunPost(o(e,t),S(e,t))}),y.get(`${m}/dry-run`,async(e,t)=>{await x.handleDryRunGet(o(e,t),S(e,t))}),y.post(`${m}/explain`,async(e,t)=>{await x.handleExplainPost(o(e,t),S(e,t))}),v&&y.post(`${m}/agent/chat`,async(e,t)=>{try{let{handleAgentChat:n}=await Promise.resolve().then(()=>require("../handler-m6WgA9xu.cjs")),{message:i,sessionId:a,history:o}=e.body;if(!i||typeof i!=`string`)return t.status(400).json({error:`message is required and must be a string`});let s=(v.apiKey||``).trim();if(v.allowClientApiKey){let t=e.headers[`x-agent-api-key`];t&&(s=t.trim())}if(!s)return t.status(401).json({error:`No API key configured. Set agent.apiKey in server config or send X-Agent-Api-Key header.`});let c=v.allowClientApiKey?e.headers[`x-agent-provider`]:void 0,l=v.allowClientApiKey?e.headers[`x-agent-model`]:void 0,u=v.allowClientApiKey?e.headers[`x-agent-provider-endpoint`]:void 0,f=r.r(await d(e,t),t=>e.get(t)),p=v.buildSystemContext?.(f);t.writeHead(200,{"Content-Type":`text/event-stream`,"Cache-Control":`no-cache`,Connection:`keep-alive`});try{let e=n({message:i,sessionId:a,history:o,semanticLayer:b,securityContext:f,agentConfig:v,apiKey:s,systemContext:p,providerOverride:c,modelOverride:l,baseURLOverride:u});for await(let n of e)t.write(`data: ${JSON.stringify(n)}\n\n`)}catch(e){let n={type:`error`,data:{message:e instanceof Error?e.message:`Stream failed`}};t.write(`data: ${JSON.stringify(n)}\n\n`)}finally{t.end()}}catch(e){console.error(`Agent chat error:`,e),t.headersSent||t.status(500).json({error:e instanceof Error?e.message:`Agent chat failed`})}}),_.enabled!==!1){let e=_.basePath??`/mcp`;y.post(`${e}`,async(e,t)=>{await x.handleMcpPost(o(e,t),S(e,t))}),y.get(`${e}`,async(e,t)=>{let r=n.C(e.headers.origin,n.g(_));if(!r.valid)return t.status(403).json({error:r.reason});if(_.resourceMetadataUrl&&!n.u(e.headers.authorization))return t.setHeader(`WWW-Authenticate`,n.c(_.resourceMetadataUrl)),t.status(401).json({error:`Bearer token required`});let i=n.v();t.status(200),t.setHeader(`Content-Type`,`text/event-stream`),t.setHeader(`Cache-Control`,`no-cache`),t.setHeader(`Connection`,`keep-alive`),t.write(n.x({jsonrpc:`2.0`,method:`mcp/ready`,params:{protocol:`streamable-http`}},i,15e3));let a=setInterval(()=>{t.write(`: keep-alive
+Object.defineProperty(exports,Symbol.toStringTag,{value:`Module`});const e=require("../utils-BY0-KFyI.cjs"),t=require("../compiler-BaLO10VN.cjs"),n=require("../mcp-transport-BGkSz-ZT.cjs"),r=require("../core-DgTGXxDu.cjs");let i=require("express");i=e.j(i,1);let a=require("cors");a=e.j(a,1);function o(e,t){return{getHeader:t=>e.get(t),getBody:async()=>e.body,getQueryParam:t=>e.query[t],send:(e,n)=>t.status(e).json(n),setHeader:(e,n)=>{t.setHeader(e,n)},sendEmpty:e=>t.status(e).end(),sendSse:(e,n)=>(t.status(e),t.setHeader(`Content-Type`,`text/event-stream`),t.setHeader(`Cache-Control`,`no-cache`),t.setHeader(`Connection`,`keep-alive`),t.write(n),t.end())}}function s(s){let{cubes:c,drizzle:l,schema:u,extractSecurityContext:d,engineType:f,cors:p,basePath:m=`/cubejs-api/v1`,jsonLimit:h=`10mb`,cache:g,mcp:_={enabled:!0},agent:v}=s;if(!s.semanticLayer&&(!c||c.length===0))throw Error(`At least one cube must be provided in the cubes array, or pass a pre-configured semanticLayer`);let y=(0,i.Router)();if(p){let e={...p,allowedHeaders:r.o(p.allowedHeaders)};y.use((0,a.default)(e))}y.use(i.default.json({limit:h})),y.use(i.default.urlencoded({extended:!0,limit:h}));let b=s.semanticLayer??new t.t({drizzle:l,schema:u,engineType:f,cache:g,rlsSetup:s.rlsSetup});!s.semanticLayer&&c&&c.forEach(e=>{b.registerCube(e)});let x=r.t({semanticLayer:b,onError:e=>console.error(`Query execution error:`,e),mcp:_}),S=(e,t)=>()=>d(e,t);if(y.post(`${m}/load`,async(e,t)=>{await x.handleLoadPost(o(e,t),S(e,t))}),y.get(`${m}/load`,async(e,t)=>{await x.handleLoadGet(o(e,t),S(e,t))}),y.post(`${m}/batch`,async(e,t)=>{await x.handleBatchPost(o(e,t),S(e,t))}),y.get(`${m}/meta`,async(e,t)=>{await x.handleMetaGet(o(e,t),S(e,t))}),y.post(`${m}/sql`,async(e,t)=>{await x.handleSqlPost(o(e,t),S(e,t))}),y.get(`${m}/sql`,async(e,t)=>{await x.handleSqlGet(o(e,t),S(e,t))}),y.post(`${m}/dry-run`,async(e,t)=>{await x.handleDryRunPost(o(e,t),S(e,t))}),y.get(`${m}/dry-run`,async(e,t)=>{await x.handleDryRunGet(o(e,t),S(e,t))}),y.post(`${m}/explain`,async(e,t)=>{await x.handleExplainPost(o(e,t),S(e,t))}),v&&y.post(`${m}/agent/chat`,async(e,t)=>{try{let{handleAgentChat:n}=await Promise.resolve().then(()=>require("../handler-DrRT6c14.cjs")),{message:i,sessionId:a,history:o}=e.body;if(!i||typeof i!=`string`)return t.status(400).json({error:`message is required and must be a string`});let s=(v.apiKey||``).trim();if(v.allowClientApiKey){let t=e.headers[`x-agent-api-key`];t&&(s=t.trim())}if(!s)return t.status(401).json({error:`No API key configured. Set agent.apiKey in server config or send X-Agent-Api-Key header.`});let c=v.allowClientApiKey?e.headers[`x-agent-provider`]:void 0,l=v.allowClientApiKey?e.headers[`x-agent-model`]:void 0,u=v.allowClientApiKey?e.headers[`x-agent-provider-endpoint`]:void 0,f=r.r(await d(e,t),t=>e.get(t)),p=v.buildSystemContext?.(f);t.writeHead(200,{"Content-Type":`text/event-stream`,"Cache-Control":`no-cache`,Connection:`keep-alive`});try{let e=n({message:i,sessionId:a,history:o,semanticLayer:b,securityContext:f,agentConfig:v,apiKey:s,systemContext:p,providerOverride:c,modelOverride:l,baseURLOverride:u});for await(let n of e)t.write(`data: ${JSON.stringify(n)}\n\n`)}catch(e){let n={type:`error`,data:{message:e instanceof Error?e.message:`Stream failed`}};t.write(`data: ${JSON.stringify(n)}\n\n`)}finally{t.end()}}catch(e){console.error(`Agent chat error:`,e),t.headersSent||t.status(500).json({error:e instanceof Error?e.message:`Agent chat failed`})}}),_.enabled!==!1){let e=_.basePath??`/mcp`;y.post(`${e}`,async(e,t)=>{await x.handleMcpPost(o(e,t),S(e,t))}),y.get(`${e}`,async(e,t)=>{let r=n.C(e.headers.origin,n.h(_));if(!r.valid)return t.status(403).json({error:r.reason});if(_.resourceMetadataUrl&&!n.l(e.headers.authorization))return t.setHeader(`WWW-Authenticate`,n.s(_.resourceMetadataUrl)),t.status(401).json({error:`Bearer token required`});let i=n._();t.status(200),t.setHeader(`Content-Type`,`text/event-stream`),t.setHeader(`Cache-Control`,`no-cache`),t.setHeader(`Connection`,`keep-alive`),t.write(n.x({jsonrpc:`2.0`,method:`mcp/ready`,params:{protocol:`streamable-http`}},i,15e3));let a=setInterval(()=>{t.write(`: keep-alive
 
-`)},15e3);e.on(`close`,()=>{clearInterval(a)})}),y.delete(`${e}`,(e,t)=>{let r=n.C(e.headers.origin,n.g(_));return r.valid?_.resourceMetadataUrl&&!n.u(e.headers.authorization)?(t.setHeader(`WWW-Authenticate`,n.c(_.resourceMetadataUrl)),t.status(401).json({error:`Bearer token required`})):t.status(405).json({error:`Session termination not supported`}):t.status(403).json({error:r.reason})})}return y.use((t,n,r,i)=>{console.error(`Express adapter error:`,t),r.headersSent||r.status(500).json(e.i(t,500))}),y}function c(e,t){let n=s(t);return e.use(`/`,n),e}function l(e){return c((0,i.default)(),e)}exports.createCubeApp=l,exports.createCubeRouter=s,exports.mountCubeRoutes=c;
+`)},15e3);e.on(`close`,()=>{clearInterval(a)})}),y.delete(`${e}`,(e,t)=>{let r=n.C(e.headers.origin,n.h(_));return r.valid?_.resourceMetadataUrl&&!n.l(e.headers.authorization)?(t.setHeader(`WWW-Authenticate`,n.s(_.resourceMetadataUrl)),t.status(401).json({error:`Bearer token required`})):t.status(405).json({error:`Session termination not supported`}):t.status(403).json({error:r.reason})})}return y.use((t,n,r,i)=>{console.error(`Express adapter error:`,t),r.headersSent||r.status(500).json(e.i(t,500))}),y}function c(e,t){let n=s(t);return e.use(`/`,n),e}function l(e){return c((0,i.default)(),e)}exports.createCubeApp=l,exports.createCubeRouter=s,exports.mountCubeRoutes=c;

package/dist/adapters/express/index.d.ts

@@ -2,15 +2,24 @@ import { Router, Request, Response, Express } from 'express';
 import { CorsOptions } from 'cors';
 import { SemanticQuery, SecurityContext, DatabaseExecutor, DrizzleDatabase, Cube, CacheConfig, RLSSetupFn } from '../../server/index.js';
 import { AgentConfig } from '../../server/agent/types.js';
+import { SemanticLayerCompiler } from '../../server/compiler.js';
 import { PostgresJsDatabase } from 'drizzle-orm/postgres-js';
 import { MySql2Database } from 'drizzle-orm/mysql2';
 import { BetterSQLite3Database } from 'drizzle-orm/better-sqlite3';
 import { MCPOptions } from '../utils.js';
 export interface ExpressAdapterOptions {
     /**
-     * Array of cube definitions to register
+     * Pre-configured SemanticLayerCompiler instance.
+     * When provided, skips creating a new compiler and cube registration (caller
+     * manages it). Required to use per-tenant cube sets, since the caller must own
+     * the compiler to call `registerCubeSet` — see docs/per-tenant-cube-sets.md.
      */
-    cubes: Cube[];
+    semanticLayer?: SemanticLayerCompiler;
+    /**
+     * Array of cube definitions to register.
+     * Required unless `semanticLayer` is provided.
+     */
+    cubes?: Cube[];
     /**
      * Drizzle database instance (REQUIRED)
      * This is the core of drizzle-cube - Drizzle ORM integration

package/dist/adapters/express/index.js

@@ -1,7 +1,7 @@
-import { i as e } from "../utils-DboNUT3A.js";
-import { t } from "../compiler-DiYxWAKg.js";
-import { C as n, c as r, g as i, u as a, v as o, x as s } from "../mcp-transport-BXyA4dTk.js";
-import { i as c, r as l, t as u } from "../core-BOPRmxPc.js";
+import { i as e } from "../utils-DkmShl5f.js";
+import { t } from "../compiler-CQJ5GOwF.js";
+import { C as n, _ as r, h as i, l as a, s as o, x as s } from "../mcp-transport-fJud19xz.js";
+import { o as c, r as l, t as u } from "../core-DXkuSUBg.js";
 import d, { Router as f } from "express";
 import p from "cors";
 //#region src/adapters/express/index.ts
@@ -20,7 +20,7 @@ function m(e, t) {
 }
 function h(h) {
 	let { cubes: g, drizzle: _, schema: v, extractSecurityContext: y, engineType: b, cors: x, basePath: S = "/cubejs-api/v1", jsonLimit: C = "10mb", cache: w, mcp: T = { enabled: !0 }, agent: E } = h;
-	if (!g || g.length === 0) throw Error("At least one cube must be provided in the cubes array");
+	if (!h.semanticLayer && (!g || g.length === 0)) throw Error("At least one cube must be provided in the cubes array, or pass a pre-configured semanticLayer");
 	let D = f();
 	if (x) {
 		let e = {
@@ -33,14 +33,14 @@ function h(h) {
 		extended: !0,
 		limit: C
 	}));
-	let O = new t({
+	let O = h.semanticLayer ?? new t({
 		drizzle: _,
 		schema: v,
 		engineType: b,
 		cache: w,
 		rlsSetup: h.rlsSetup
 	});
-	g.forEach((e) => {
+	!h.semanticLayer && g && g.forEach((e) => {
 		O.registerCube(e);
 	});
 	let k = u({
@@ -54,8 +54,8 @@ function h(h) {
 		await k.handleLoadGet(m(e, t), A(e, t));
 	}), D.post(`${S}/batch`, async (e, t) => {
 		await k.handleBatchPost(m(e, t), A(e, t));
-	}), D.get(`${S}/meta`, (e, t) => {
-		k.handleMetaGet(m(e, t));
+	}), D.get(`${S}/meta`, async (e, t) => {
+		await k.handleMetaGet(m(e, t), A(e, t));
 	}), D.post(`${S}/sql`, async (e, t) => {
 		await k.handleSqlPost(m(e, t), A(e, t));
 	}), D.get(`${S}/sql`, async (e, t) => {
@@ -68,7 +68,7 @@ function h(h) {
 		await k.handleExplainPost(m(e, t), A(e, t));
 	}), E && D.post(`${S}/agent/chat`, async (e, t) => {
 		try {
-			let { handleAgentChat: n } = await import("../handler-DGud-C-w.js"), { message: r, sessionId: i, history: a } = e.body;
+			let { handleAgentChat: n } = await import("../handler-CphYSZRh.js"), { message: r, sessionId: i, history: a } = e.body;
 			if (!r || typeof r != "string") return t.status(400).json({ error: "message is required and must be a string" });
 			let o = (E.apiKey || "").trim();
 			if (E.allowClientApiKey) {
@@ -116,8 +116,8 @@ function h(h) {
 		}), D.get(`${e}`, async (e, t) => {
 			let c = n(e.headers.origin, i(T));
 			if (!c.valid) return t.status(403).json({ error: c.reason });
-			if (T.resourceMetadataUrl && !a(e.headers.authorization)) return t.setHeader("WWW-Authenticate", r(T.resourceMetadataUrl)), t.status(401).json({ error: "Bearer token required" });
-			let l = o();
+			if (T.resourceMetadataUrl && !a(e.headers.authorization)) return t.setHeader("WWW-Authenticate", o(T.resourceMetadataUrl)), t.status(401).json({ error: "Bearer token required" });
+			let l = r();
 			t.status(200), t.setHeader("Content-Type", "text/event-stream"), t.setHeader("Cache-Control", "no-cache"), t.setHeader("Connection", "keep-alive"), t.write(s({
 				jsonrpc: "2.0",
 				method: "mcp/ready",
@@ -130,8 +130,8 @@ function h(h) {
 				clearInterval(u);
 			});
 		}), D.delete(`${e}`, (e, t) => {
-			let o = n(e.headers.origin, i(T));
-			return o.valid ? T.resourceMetadataUrl && !a(e.headers.authorization) ? (t.setHeader("WWW-Authenticate", r(T.resourceMetadataUrl)), t.status(401).json({ error: "Bearer token required" })) : t.status(405).json({ error: "Session termination not supported" }) : t.status(403).json({ error: o.reason });
+			let r = n(e.headers.origin, i(T));
+			return r.valid ? T.resourceMetadataUrl && !a(e.headers.authorization) ? (t.setHeader("WWW-Authenticate", o(T.resourceMetadataUrl)), t.status(401).json({ error: "Bearer token required" })) : t.status(405).json({ error: "Session termination not supported" }) : t.status(403).json({ error: r.reason });
 		});
 	}
 	return D.use((t, n, r, i) => {

package/dist/adapters/fastify/index.cjs

@@ -1,3 +1,3 @@
-Object.defineProperty(exports,Symbol.toStringTag,{value:`Module`});const e=require("../utils-BoOeig94.cjs"),t=require("../compiler-BNjqYdmc.cjs"),n=require("../mcp-transport-B0b27YUB.cjs"),r=require("../core-CzFfrJzu.cjs");function i(e,t){let n=e.headers[t.toLowerCase()];return Array.isArray(n)?n[0]:n}function a(e,t){return{getHeader:t=>i(e,t),getBody:async()=>e.body,getQueryParam:t=>e.query?.[t],send:(e,n)=>t.status(e).send(n),setHeader:(e,n)=>{t.header(e,n)},sendEmpty:e=>t.status(e).send(),sendSse:(e,n)=>(t.header(`Content-Type`,`text/event-stream`),t.header(`Cache-Control`,`no-cache`),t.header(`Connection`,`keep-alive`),t.status(e).send(n))}}var o=function(o,s,c){let{cubes:l,drizzle:u,schema:d,extractSecurityContext:f,engineType:p,cors:m,basePath:h=`/cubejs-api/v1`,bodyLimit:g=10485760,cache:_,mcp:v={enabled:!0},agent:y}=s;if(!l||l.length===0)return c(Error(`At least one cube must be provided in the cubes array`));if(m){let e={...m,allowedHeaders:r.i(m.allowedHeaders)};o.register(import(`@fastify/cors`),e)}o.addHook(`onRequest`,async(e,t)=>{e.method===`POST`&&(e.body=void 0)});let b=new t.t({drizzle:u,schema:d,engineType:p,cache:_,rlsSetup:s.rlsSetup});l.forEach(e=>{b.registerCube(e)});let x=r.t({semanticLayer:b,onError:e=>o.log.error(e,`Query execution error`),mcp:v}),S=e=>()=>f(e),C={bodyLimit:g,schema:{body:{type:`object`,additionalProperties:!0}}},w={schema:{querystring:{type:`object`,properties:{query:{type:`string`}},required:[`query`]}}};if(o.post(`${h}/load`,C,(e,t)=>x.handleLoadPost(a(e,t),S(e))),o.get(`${h}/load`,w,(e,t)=>x.handleLoadGet(a(e,t),S(e))),o.post(`${h}/batch`,{bodyLimit:g,schema:{body:{type:`object`,required:[`queries`],properties:{queries:{type:`array`,items:{type:`object`}}}}}},(e,t)=>x.handleBatchPost(a(e,t),S(e))),o.get(`${h}/meta`,(e,t)=>x.handleMetaGet(a(e,t))),o.post(`${h}/sql`,C,(e,t)=>x.handleSqlPost(a(e,t),S(e))),o.get(`${h}/sql`,w,(e,t)=>x.handleSqlGet(a(e,t),S(e))),o.post(`${h}/dry-run`,C,(e,t)=>x.handleDryRunPost(a(e,t),S(e))),o.get(`${h}/dry-run`,w,(e,t)=>x.handleDryRunGet(a(e,t),S(e))),o.post(`${h}/explain`,C,(e,t)=>x.handleExplainPost(a(e,t),S(e))),y&&o.post(`${h}/agent/chat`,{bodyLimit:g,schema:{body:{type:`object`,additionalProperties:!0}}},async(e,t)=>{try{let{handleAgentChat:n}=await Promise.resolve().then(()=>require("../handler-m6WgA9xu.cjs")),{message:a,sessionId:o,history:s}=e.body;if(!a||typeof a!=`string`)return t.status(400).send({error:`message is required and must be a string`});let c=(y.apiKey||``).trim();if(y.allowClientApiKey){let t=i(e,`x-agent-api-key`);t&&(c=t.trim())}if(!c)return t.status(401).send({error:`No API key configured. Set agent.apiKey in server config or send X-Agent-Api-Key header.`});let l=y.allowClientApiKey?i(e,`x-agent-provider`):void 0,u=y.allowClientApiKey?i(e,`x-agent-model`):void 0,d=y.allowClientApiKey?i(e,`x-agent-provider-endpoint`):void 0,p=r.r(await f(e),t=>i(e,t)),m=y.buildSystemContext?.(p);t.raw.writeHead(200,{"Content-Type":`text/event-stream`,"Cache-Control":`no-cache`,Connection:`keep-alive`});try{let e=n({message:a,sessionId:o,history:s,semanticLayer:b,securityContext:p,agentConfig:y,apiKey:c,systemContext:m,providerOverride:l,modelOverride:u,baseURLOverride:d});for await(let n of e)t.raw.write(`data: ${JSON.stringify(n)}\n\n`)}catch(e){let n={type:`error`,data:{message:e instanceof Error?e.message:`Stream failed`}};t.raw.write(`data: ${JSON.stringify(n)}\n\n`)}finally{t.raw.end()}}catch(n){if(e.log.error(n,`Agent chat error`),!t.raw.headersSent)return t.status(500).send({error:n instanceof Error?n.message:`Agent chat failed`})}}),v.enabled!==!1){let e=v.basePath??`/mcp`;o.post(`${e}`,{bodyLimit:g,schema:{body:{type:`object`,additionalProperties:!0}}},(e,t)=>x.handleMcpPost(a(e,t),S(e))),o.get(`${e}`,async(e,t)=>{let r=n.C(e.headers.origin,n.g(v));if(!r.valid)return t.status(403).send({error:r.reason});if(v.resourceMetadataUrl&&!n.u(e.headers.authorization))return t.header(`WWW-Authenticate`,n.c(v.resourceMetadataUrl)),t.status(401).send({error:`Bearer token required`});let i=n.v();t.raw.writeHead(200,{"Content-Type":`text/event-stream`,"Cache-Control":`no-cache`,Connection:`keep-alive`}),t.raw.write(n.x({jsonrpc:`2.0`,method:`mcp/ready`,params:{protocol:`streamable-http`}},i,15e3));let a=setInterval(()=>{t.raw.write(`: keep-alive
+Object.defineProperty(exports,Symbol.toStringTag,{value:`Module`});const e=require("../utils-BY0-KFyI.cjs"),t=require("../compiler-BaLO10VN.cjs"),n=require("../mcp-transport-BGkSz-ZT.cjs"),r=require("../core-DgTGXxDu.cjs");function i(e,t){let n=e.headers[t.toLowerCase()];return Array.isArray(n)?n[0]:n}function a(e,t){return{getHeader:t=>i(e,t),getBody:async()=>e.body,getQueryParam:t=>e.query?.[t],send:(e,n)=>t.status(e).send(n),setHeader:(e,n)=>{t.header(e,n)},sendEmpty:e=>t.status(e).send(),sendSse:(e,n)=>(t.header(`Content-Type`,`text/event-stream`),t.header(`Cache-Control`,`no-cache`),t.header(`Connection`,`keep-alive`),t.status(e).send(n))}}var o=function(o,s,c){let{cubes:l,drizzle:u,schema:d,extractSecurityContext:f,engineType:p,cors:m,basePath:h=`/cubejs-api/v1`,bodyLimit:g=10485760,cache:_,mcp:v={enabled:!0},agent:y}=s;if(!s.semanticLayer&&(!l||l.length===0))return c(Error(`At least one cube must be provided in the cubes array, or pass a pre-configured semanticLayer`));if(m){let e={...m,allowedHeaders:r.o(m.allowedHeaders)};o.register(import(`@fastify/cors`),e)}o.addHook(`onRequest`,async(e,t)=>{e.method===`POST`&&(e.body=void 0)});let b=s.semanticLayer??new t.t({drizzle:u,schema:d,engineType:p,cache:_,rlsSetup:s.rlsSetup});!s.semanticLayer&&l&&l.forEach(e=>{b.registerCube(e)});let x=r.t({semanticLayer:b,onError:e=>o.log.error(e,`Query execution error`),mcp:v}),S=e=>()=>f(e),C={bodyLimit:g,schema:{body:{type:`object`,additionalProperties:!0}}},w={schema:{querystring:{type:`object`,properties:{query:{type:`string`}},required:[`query`]}}};if(o.post(`${h}/load`,C,(e,t)=>x.handleLoadPost(a(e,t),S(e))),o.get(`${h}/load`,w,(e,t)=>x.handleLoadGet(a(e,t),S(e))),o.post(`${h}/batch`,{bodyLimit:g,schema:{body:{type:`object`,required:[`queries`],properties:{queries:{type:`array`,items:{type:`object`}}}}}},(e,t)=>x.handleBatchPost(a(e,t),S(e))),o.get(`${h}/meta`,(e,t)=>x.handleMetaGet(a(e,t),S(e))),o.post(`${h}/sql`,C,(e,t)=>x.handleSqlPost(a(e,t),S(e))),o.get(`${h}/sql`,w,(e,t)=>x.handleSqlGet(a(e,t),S(e))),o.post(`${h}/dry-run`,C,(e,t)=>x.handleDryRunPost(a(e,t),S(e))),o.get(`${h}/dry-run`,w,(e,t)=>x.handleDryRunGet(a(e,t),S(e))),o.post(`${h}/explain`,C,(e,t)=>x.handleExplainPost(a(e,t),S(e))),y&&o.post(`${h}/agent/chat`,{bodyLimit:g,schema:{body:{type:`object`,additionalProperties:!0}}},async(e,t)=>{try{let{handleAgentChat:n}=await Promise.resolve().then(()=>require("../handler-DrRT6c14.cjs")),{message:a,sessionId:o,history:s}=e.body;if(!a||typeof a!=`string`)return t.status(400).send({error:`message is required and must be a string`});let c=(y.apiKey||``).trim();if(y.allowClientApiKey){let t=i(e,`x-agent-api-key`);t&&(c=t.trim())}if(!c)return t.status(401).send({error:`No API key configured. Set agent.apiKey in server config or send X-Agent-Api-Key header.`});let l=y.allowClientApiKey?i(e,`x-agent-provider`):void 0,u=y.allowClientApiKey?i(e,`x-agent-model`):void 0,d=y.allowClientApiKey?i(e,`x-agent-provider-endpoint`):void 0,p=r.r(await f(e),t=>i(e,t)),m=y.buildSystemContext?.(p);t.raw.writeHead(200,{"Content-Type":`text/event-stream`,"Cache-Control":`no-cache`,Connection:`keep-alive`});try{let e=n({message:a,sessionId:o,history:s,semanticLayer:b,securityContext:p,agentConfig:y,apiKey:c,systemContext:m,providerOverride:l,modelOverride:u,baseURLOverride:d});for await(let n of e)t.raw.write(`data: ${JSON.stringify(n)}\n\n`)}catch(e){let n={type:`error`,data:{message:e instanceof Error?e.message:`Stream failed`}};t.raw.write(`data: ${JSON.stringify(n)}\n\n`)}finally{t.raw.end()}}catch(n){if(e.log.error(n,`Agent chat error`),!t.raw.headersSent)return t.status(500).send({error:n instanceof Error?n.message:`Agent chat failed`})}}),v.enabled!==!1){let e=v.basePath??`/mcp`;o.post(`${e}`,{bodyLimit:g,schema:{body:{type:`object`,additionalProperties:!0}}},(e,t)=>x.handleMcpPost(a(e,t),S(e))),o.get(`${e}`,async(e,t)=>{let r=n.C(e.headers.origin,n.h(v));if(!r.valid)return t.status(403).send({error:r.reason});if(v.resourceMetadataUrl&&!n.l(e.headers.authorization))return t.header(`WWW-Authenticate`,n.s(v.resourceMetadataUrl)),t.status(401).send({error:`Bearer token required`});let i=n._();t.raw.writeHead(200,{"Content-Type":`text/event-stream`,"Cache-Control":`no-cache`,Connection:`keep-alive`}),t.raw.write(n.x({jsonrpc:`2.0`,method:`mcp/ready`,params:{protocol:`streamable-http`}},i,15e3));let a=setInterval(()=>{t.raw.write(`: keep-alive
 
-`)},15e3);e.raw.on(`close`,()=>{clearInterval(a)})}),o.delete(`${e}`,async(e,t)=>{let r=n.C(e.headers.origin,n.g(v));return r.valid?v.resourceMetadataUrl&&!n.u(e.headers.authorization)?(t.header(`WWW-Authenticate`,n.c(v.resourceMetadataUrl)),t.status(401).send({error:`Bearer token required`})):t.status(405).send({error:`Session termination not supported`}):t.status(403).send({error:r.reason})})}o.setErrorHandler(async(t,n,r)=>{n.log.error(t,`Fastify cube adapter error`),r.statusCode<400&&r.status(500);let i=t instanceof Error?t:String(t);return e.i(i,r.statusCode)}),c()};async function s(e,t){await e.register(o,t)}function c(e){let t=require("fastify")({logger:!0});return t.register(o,e),t}exports.createCubeApp=c,exports.cubePlugin=o,exports.registerCubeRoutes=s;
+`)},15e3);e.raw.on(`close`,()=>{clearInterval(a)})}),o.delete(`${e}`,async(e,t)=>{let r=n.C(e.headers.origin,n.h(v));return r.valid?v.resourceMetadataUrl&&!n.l(e.headers.authorization)?(t.header(`WWW-Authenticate`,n.s(v.resourceMetadataUrl)),t.status(401).send({error:`Bearer token required`})):t.status(405).send({error:`Session termination not supported`}):t.status(403).send({error:r.reason})})}o.setErrorHandler(async(t,n,r)=>{n.log.error(t,`Fastify cube adapter error`),r.statusCode<400&&r.status(500);let i=t instanceof Error?t:String(t);return e.i(i,r.statusCode)}),c()};async function s(e,t){await e.register(o,t)}function c(e){let t=require("fastify")({logger:!0});return t.register(o,e),t}exports.createCubeApp=c,exports.cubePlugin=o,exports.registerCubeRoutes=s;

package/dist/adapters/fastify/index.d.ts

@@ -2,15 +2,24 @@ import { FastifyPluginCallback, FastifyRequest, FastifyInstance } from 'fastify'
 import { FastifyCorsOptions } from '@fastify/cors';
 import { SemanticQuery, SecurityContext, DatabaseExecutor, DrizzleDatabase, Cube, CacheConfig, RLSSetupFn } from '../../server/index.js';
 import { AgentConfig } from '../../server/agent/types.js';
+import { SemanticLayerCompiler } from '../../server/compiler.js';
 import { PostgresJsDatabase } from 'drizzle-orm/postgres-js';
 import { MySql2Database } from 'drizzle-orm/mysql2';
 import { BetterSQLite3Database } from 'drizzle-orm/better-sqlite3';
 import { MCPOptions } from '../utils.js';
 export interface FastifyAdapterOptions {
     /**
-     * Array of cube definitions to register
+     * Pre-configured SemanticLayerCompiler instance.
+     * When provided, skips creating a new compiler and cube registration (caller
+     * manages it). Required to use per-tenant cube sets, since the caller must own
+     * the compiler to call `registerCubeSet` — see docs/per-tenant-cube-sets.md.
      */
-    cubes: Cube[];
+    semanticLayer?: SemanticLayerCompiler;
+    /**
+     * Array of cube definitions to register.
+     * Required unless `semanticLayer` is provided.
+     */
+    cubes?: Cube[];
     /**
      * Drizzle database instance (REQUIRED)
      * This is the core of drizzle-cube - Drizzle ORM integration