Changeset 0.29.2 (#197)

Co-authored-by: Jeffrey Smith <jasafpro@gmail.com>
Co-committed-by: Jeffrey Smith <jasafpro@gmail.com>

server/sandbox/runner.go

@@ -9,12 +9,17 @@
 // v0.29.1 CS2: Adds RunContext for per-invocation state (user_id),
 // vault for provider key decryption, and provider.complete module.
 //
+// v0.29.2 CS1: Adds db *sql.DB for the db module. SetDB() wires it
+// at startup. db.read grants query/view/list_tables; db.write adds
+// insert/update/delete. If both are granted, db.write wins (superset).
+//
 // The runner is the bridge between the package/permission system
 // and the sandboxed Starlark interpreter.
 package sandbox
 
 import (
 	"context"
+	"database/sql"
 	"fmt"
 	"log"
 
@@ -38,10 +43,12 @@ type RunContext struct {
 
 // Runner executes Starlark package scripts with permission-gated modules.
 type Runner struct {
-	sandbox  *Sandbox
-	stores   store.Stores
-	notifier NotificationSender      // nil = notifications module unavailable
-	resolver ProviderResolver        // nil = provider module unavailable
+	sandbox    *Sandbox
+	stores     store.Stores
+	notifier   NotificationSender // nil = notifications module unavailable
+	resolver   ProviderResolver   // nil = provider module unavailable
+	db         *sql.DB            // nil = db module unavailable
+	dbPostgres bool               // true = use $N placeholders; false = use ?
 }
 
 // NewRunner creates a runner with the given sandbox and dependencies.
@@ -62,6 +69,14 @@ func (r *Runner) SetProviderResolver(pr ProviderResolver) {
 	r.resolver = pr
 }
 
+// SetDB attaches the raw database connection for the db module.
+// isPostgres controls whether $N or ? placeholders are used.
+// Call this at startup after database.Connect().
+func (r *Runner) SetDB(db *sql.DB, isPostgres bool) {
+	r.db = db
+	r.dbPostgres = isPostgres
+}
+
 // ExecPackage loads a package's script from its manifest and executes it
 // with modules gated by the package's granted permissions.
 //
@@ -98,9 +113,9 @@ func (r *Runner) ExecPackage(ctx context.Context, pkg *store.PackageRegistration
 
 // CallEntryPoint executes a package script and calls a named function.
 // This is the standard pattern for event-driven extensions:
-//   1. Exec the script (defines functions)
-//   2. Find the named entry point in globals
-//   3. Call it with the provided arguments
+//  1. Exec the script (defines functions)
+//  2. Find the named entry point in globals
+//  3. Call it with the provided arguments
 //
 // The RunContext carries per-invocation state. Pass nil if not needed.
 //
@@ -141,6 +156,9 @@ func (r *Runner) buildModules(ctx context.Context, packageID string, manifest ma
 
 	modules := make(map[string]starlark.Value)
 
+	// Track db permission level: 0=none, 1=read, 2=write
+	dbLevel := 0
+
 	for _, perm := range granted {
 		switch perm {
 		case models.ExtPermSecretsRead:
@@ -163,11 +181,25 @@ func (r *Runner) buildModules(ctx context.Context, packageID string, manifest ma
 				}
 			}
 
-		// Future permissions:
-		// case models.ExtPermDBRead, models.ExtPermDBWrite:
-		//     modules["db"] = BuildDBModule(...)
+		case models.ExtPermDBRead:
+			if dbLevel < 1 {
+				dbLevel = 1
+			}
+
+		case models.ExtPermDBWrite:
+			dbLevel = 2
 		}
 	}
 
+	// Wire db module at the highest granted level.
+	if dbLevel > 0 && r.db != nil {
+		modules["db"] = BuildDBModule(ctx, DBModuleConfig{
+			PackageID:  packageID,
+			CanWrite:   dbLevel == 2,
+			DB:         r.db,
+			IsPostgres: r.dbPostgres,
+		})
+	}
+
 	return modules, nil
 }