feat: define module database access

Introduce ModuleDatabase (a typed, restricted Drizzle query surface) and the frozen
ModuleRuntimeServices boundary in @ekklesia/contracts, and thread the same services object
through Core's module start/stop lifecycle hooks and apps/api's authorized module HTTP handler
context. apps/api builds the facade via a new core/src/modules/database.ts view (createModuleDatabaseView)
over the one existing shared PostgreSQL pool, alongside the identity and authorization views, and
wires it into startApi's fixed startup order ahead of Identity/Authorization construction.
Registration stays database-free; a module reaches its database only through an authorized start,
stop, or HTTP handler invocation.

This commit is contained in:

ekklesia

2026-07-25 20:57:32 -05:00

parent 9c9ede0418

commit 0e308eb9ad

17 changed files with 702 additions and 51 deletions

									
										core/src/modules/index.ts
									
		+1
		
												View File
												
				@@ -1,3 +1,4 @@

				export * from "./database.js";

				export * from "./discovery.js";

				export * from "./migration-discovery.js";

				export * from "./permissions.js";