feat: add generic scope-aware module loader package

- ModuleConfigLoader<T> base class with TTL caching + scope resolution
- 5 concrete loaders: function, namespace, secrets, storage, invocation
- ModuleLoader facade composing all sub-loaders
- No hardcoded defaults — throws ModuleNotProvisionedError or AmbiguousScopeError
- Integration tests via pgsql-test with metaschema seed adapter
- CI workflow using constructiveio/postgres-plus:18

Author: pyramation

.github/workflows/test-module-loader.yaml

@@ -0,0 +1,60 @@
+name: Module Loader Tests
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+    branches: [main]
+  workflow_dispatch: {}
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  test:
+    name: Module loader integration tests
+    runs-on: ubuntu-latest
+
+    env:
+      PGHOST: localhost
+      PGPORT: 5432
+      PGUSER: postgres
+      PGPASSWORD: password
+      PGDATABASE: postgres
+
+    services:
+      pg_db:
+        image: constructiveio/postgres-plus:18
+        env:
+          POSTGRES_USER: postgres
+          POSTGRES_PASSWORD: password
+        ports:
+          - 5432:5432
+        options: >-
+          --health-cmd "pg_isready -U postgres"
+          --health-interval 10s
+          --health-timeout 5s
+          --health-retries 5
+
+    steps:
+      - uses: actions/checkout@v5
+
+      - uses: pnpm/action-setup@v6
+
+      - uses: actions/setup-node@v5
+        with:
+          node-version: '22'
+          cache: 'pnpm'
+
+      - name: Generate function packages
+        run: node --experimental-strip-types scripts/generate.ts
+
+      - name: Install dependencies
+        run: pnpm install --frozen-lockfile
+
+      - name: Build module-loader
+        run: pnpm --filter @constructive-io/module-loader build
+
+      - name: Run module-loader tests
+        run: pnpm --filter @constructive-io/module-loader test

packages/module-loader/README.md

@@ -0,0 +1,30 @@
+# @constructive-io/module-loader
+
+Generic scope-aware MetaSchema module resolution for constructive-functions.
+
+Queries `metaschema_modules_public.*_module` tables to resolve schema/table locations dynamically. No hardcoded defaults — throws explicitly if a module is not provisioned.
+
+## Usage
+
+```typescript
+import { ModuleLoader } from '@constructive-io/module-loader';
+
+const loader = new ModuleLoader({ pool });
+
+// Resolve function module config for a database
+const fnConfig = await loader.function.load(databaseId);
+// → { scope, publicSchema, privateSchema, definitionsTable, secretDefinitionsTable }
+
+// With explicit scope (when multiple instances exist)
+const orgConfig = await loader.function.load(databaseId, 'org');
+
+// Enumerate all instances
+const all = await loader.function.loadAll(databaseId);
+```
+
+## Scope Resolution
+
+- `scope` provided → filter by it; throw `ModuleNotProvisionedError` if not found
+- `scope` null + 1 instance → return it (unambiguous)
+- `scope` null + 0 instances → throw `ModuleNotProvisionedError`
+- `scope` null + 2+ instances → throw `AmbiguousScopeError`