@dataramen/cli 0.0.38 → 0.0.40

package/dist/code/server.js

@@ -1,9 +1,9 @@
-"use strict";var Lt=Object.create;var ge=Object.defineProperty;var qt=Object.getOwnPropertyDescriptor;var Ft=Object.getOwnPropertyNames;var Qt=Object.getPrototypeOf,kt=Object.prototype.hasOwnProperty;var Bt=(e,t,r,o)=>{if(t&&typeof t=="object"||typeof t=="function")for(let a of Ft(t))!kt.call(e,a)&&a!==r&&ge(e,a,{get:()=>t[a],enumerable:!(o=qt(t,a))||o.enumerable});return e};var A=(e,t,r)=>(r=e!=null?Lt(Qt(e)):{},Bt(t||!e||!e.__esModule?ge(r,"default",{value:e,enumerable:!0}):r,e));var K=require("dotenv"),G=require("node:path"),we=require("node:fs"),$t=(()=>{try{let e=(0,we.readFileSync)((0,G.join)(__dirname,"..","package.json"),"utf8");return JSON.parse(e)}catch{return{version:"0.0.0"}}})();(0,K.config)({path:[(0,G.join)(__dirname,"..","env",".env"),(0,G.join)(__dirname,"..","env",".env.default")]});(0,K.populate)(process.env,{SERVER_VERSION:$t.version});var Ht=["SYMM_ENCRYPTION_KEY","JWT_SECRET","JWT_REFRESH_SECRET"],Ee=()=>{let e=[];for(let t of Ht)process.env[t]||e.push(t);if(e.length>0)throw new Error("Following env variables are required but not provided: "+e.join(", "))};function Yt(e,t=void 0){return process.env[e]||t}function Wt(e,t=void 0){let r=process.env[e];if(!r)return t;let o=Number(r);return!isNaN(o)&&r.trim()!==""?o:t}function Gt(e){return process.env[e]==="true"||process.env[e]==="TRUE"}var m={str:Yt,num:Wt,bool:Gt};var ns=require("reflect-metadata"),_t=A(require("fastify")),Pt=A(require("@fastify/cors")),Dt=A(require("@fastify/static"));var s=class extends Error{constructor(r,o){super(o);this.status=r;this.message=o}};var Ae=require("typeorm");var Re=require("typeorm");var T=m.str("APP_DB_TYPE")==="sqlite"?"datetime":"timestamp";var oe=new Re.EntitySchema({name:"DatabaseInspection",tableName:"db_inspection",columns:{id:{type:String,unique:!0,primary:!0,generated:"uuid"},tableName:{nullable:!0,type:String},columns:{type:"json",nullable:!0},createdAt:{type:T,default:()=>"CURRENT_TIMESTAMP"},updatedAt:{type:T,default:()=>"CURRENT_TIMESTAMP"}},relations:{datasource:{target:()=>"DataSource",type:"many-to-one",joinTable:!1,cascade:!0}}});var Se=require("typeorm");var ae=new Se.EntitySchema({name:"Team",tableName:"teams",columns:{id:{type:"uuid",primary:!0,generated:"uuid"},name:{type:String},createdAt:{type:T,default:()=>"CURRENT_TIMESTAMP"},updatedAt:{type:T,default:()=>"CURRENT_TIMESTAMP"}},relations:{users:{type:"one-to-many",target:()=>"UsersToTeams",inverseSide:"team"},queries:{type:"one-to-many",target:()=>"Query",inverseSide:"team"},datasources:{type:"one-to-many",target:()=>"DataSource",inverseSide:"team"}}});var be=require("typeorm");var ne=new be.EntitySchema({name:"User",tableName:"users",columns:{id:{type:"uuid",primary:!0,generated:"uuid"},createdAt:{type:T,default:()=>"CURRENT_TIMESTAMP"},updatedAt:{type:T,default:()=>"CURRENT_TIMESTAMP"},username:{type:String,unique:!0},password:{type:String}},relations:{teams:{type:"one-to-many",target:()=>"UsersToTeams",inverseSide:"user"},settings:{type:"one-to-one",target:()=>"UserSettings",inverseSide:"user"},currentTeam:{type:"one-to-one",target:()=>"UsersToTeams",inverseSide:"user",joinColumn:!0}}});var Ne=require("typeorm");var se=new Ne.EntitySchema({name:"UserSettings",tableName:"user_settings",columns:{id:{type:"uuid",primary:!0,generated:"uuid"},createdAt:{type:T,default:()=>"CURRENT_TIMESTAMP"},updatedAt:{type:T,default:()=>"CURRENT_TIMESTAMP"}},relations:{user:{type:"one-to-one",target:()=>"User",inverseSide:"settings",joinColumn:!0}}});var Ce=require("typeorm");var ie=new Ce.EntitySchema({name:"DataSource",tableName:"data_sources",columns:{id:{type:"uuid",primary:!0,generated:"uuid"},dbUrl:{type:String},dbPort:{type:Number,nullable:!0},dbUser:{type:String},dbPassword:{type:String,nullable:!0,select:!1},dbPasswordIv:{type:String,nullable:!0,select:!1},dbPasswordTag:{type:String,nullable:!0,select:!1},dbType:{type:String},createdAt:{type:T,default:()=>"CURRENT_TIMESTAMP"},updatedAt:{type:T,default:()=>"CURRENT_TIMESTAMP"},name:{type:String},description:{type:String,nullable:!0},dbDatabase:{type:String},dbSchema:{type:String,nullable:!0},allowInsert:{type:Boolean,default:!1},allowUpdate:{type:Boolean,default:!1},lastInspected:{type:T,nullable:!0,default:null},status:{type:String,nullable:!0}},relations:{team:{type:"many-to-one",target:()=>"Team",inverseSide:"datasources",joinColumn:!0},inspections:{type:"one-to-many",target:()=>"DatabaseInspection",inverseSide:"datasource"},queries:{type:"one-to-many",target:()=>"Query",inverseSide:"dataSource"},owner:{type:"many-to-one",target:()=>"User",joinColumn:!0}}});var _e=A(require("node:os")),Pe=require("node:path");var Ie=require("typeorm");var ue=new Ie.EntitySchema({name:"Query",tableName:"query",columns:{id:{type:"uuid",primary:!0,generated:"uuid"},name:{type:String},opts:{type:"json",default:"{}"},isTrash:{type:Boolean,default:!1,nullable:!0},createdAt:{type:T,default:()=>"CURRENT_TIMESTAMP"},updatedAt:{type:T,default:()=>"CURRENT_TIMESTAMP",onUpdate:"CURRENT_TIMESTAMP"}},relations:{team:{type:"many-to-one",target:()=>"Team",inverseSide:"queries",joinColumn:!0},dataSource:{type:"many-to-one",target:()=>"DataSource",inverseSide:"datasources",joinColumn:!0}}});var Oe=require("typeorm"),ce=new Oe.EntitySchema({name:"UsersToTeams",tableName:"users_to_teams",columns:{id:{type:"uuid",primary:!0,generated:"uuid"},role:{type:"varchar",default:"admin",nullable:!1}},relations:{team:{type:"many-to-one",target:()=>"Team",inverseSide:"users"},user:{type:"many-to-one",target:()=>"User",inverseSide:"teams"}}});function Kt(){let e=m.str("APP_DB_DATABASE");if(!e)throw new Error("Bad value for TYPEORM_DATABASE. Please check your config!");return e.startsWith("<home>")&&(e=e.replace("<home>",_e.default.homedir())),e}var E=new Ae.DataSource({type:m.str("APP_DB_TYPE"),database:Kt(),host:m.str("APP_DB_HOST"),username:m.str("APP_DB_USERNAME"),password:m.str("APP_DB_PASSWORD"),port:m.num("APP_DB_PORT"),schema:m.str("APP_DB_SCHEMA"),logging:m.bool("APP_DB_LOGGING"),migrationsRun:!0,migrations:[Pe.posix.join(__dirname,"migrations","*.js")],entities:[oe,ie,ae,ne,ce,se,ue]}),De=async()=>{if(!E.isInitialized)return E.initialize();throw new Error("Already initialized")},P=E.getRepository(oe),f=E.getRepository(ie),x=E.getRepository(ae),S=E.getRepository(ne),N=E.getRepository(ce),q=E.getRepository(se),O=E.getRepository(ue);var me=A(require("node:fs/promises")),Ue=require("node:path"),xe=A(require("node:os")),jt=xe.default.homedir(),ve=(0,Ue.join)(jt,".dataramen",".runtime","files"),Me=async()=>{await Vt()||await me.default.mkdir(ve,{recursive:!0})};async function Vt(){try{return(await me.default.lstat(ve)).isDirectory()}catch{return!1}}var R=e=>(t,r,o)=>{e(t),o()};var k=require("jose");var Le=new TextEncoder,qe=Le.encode(m.str("JWT_SECRET")),Fe=Le.encode(m.str("JWT_REFRESH_SECRET")),le=async({userId:e})=>new k.SignJWT({sub:e}).setProtectedHeader({alg:"HS256"}).setExpirationTime("1h").sign(qe),de=async({userId:e})=>new k.SignJWT({sub:e}).setProtectedHeader({alg:"HS256"}).setExpirationTime("10d").sign(Fe),Qe=async(e,t)=>{try{let{payload:r}=await(0,k.jwtVerify)(e,t);if(!r.sub)throw new s(401,"Failed to verify access token");return{userId:r.sub}}catch(r){throw r instanceof s?r:r instanceof Error?new s(401,r.message):new s(401,"Failed to verify refresh token")}},ke=async e=>Qe(e,qe),Be=async e=>Qe(e,Fe);var y=(e,t)=>{let r=e.body;return t&&t(r),r},v=(e,t)=>{let r=e.query;return t&&t(r),r},b=(e,t)=>{let r=e.params;return t&&t(r),r};var He=A(require("bcryptjs"));var $e=e=>{if(!e?.username)throw new s(400,"Username is required");if(!e?.password)throw new s(400,"Password is required")};var j="DATARAMEN_refresh_token",pe={httpOnly:!0,secure:m.bool("PROD"),sameSite:m.bool("PROD"),path:"/",maxAge:10*24*60*60},Ye=R(e=>{e.route({method:"post",url:"/login",config:{isPublic:!0},handler:async(t,r)=>{let{username:o,password:a}=y(t,$e),n=await S.findOne({where:{username:o}});if(!n||!He.default.compareSync(a,n.password))throw new s(401,"Invalid credentials");let[i,u]=await Promise.all([le({userId:n?.id}),de({userId:n?.id})]);return r.setCookie(j,u,pe),{data:{accessToken:i}}}}),e.route({method:"post",url:"/refresh",config:{isPublic:!0},handler:async(t,r)=>{let o=t.cookies[j];if(!o)return r.code(401).send({message:"Missing refresh token"});let{userId:a}=await Be(o),[n,i]=await Promise.all([le({userId:a}),de({userId:a})]);return r.setCookie(j,i,pe),{data:{accessToken:n}}}}),e.route({method:"post",url:"/logout",config:{isPublic:!0},handler:async(t,r)=>(r.clearCookie(j,pe),{data:!0})})});var We=e=>{if(!e.dbUrl)throw new s(400,"url is required");if(!e.dbUser)throw new s(400,"user is required");if(!e.dbType)throw new s(400,"type is required");if(!e.name)throw new s(400,"name is required");if(!e.dbDatabase)throw new s(400,"database is required")};var Ke=A(require("mysql2/promise"));var Jt=({database:e,password:t,user:r,url:o})=>Ke.default.createConnection({host:o,user:r,database:e,password:t}),zt=async e=>{let t=`
+"use strict";var Bt=Object.create;var Se=Object.defineProperty;var kt=Object.getOwnPropertyDescriptor;var $t=Object.getOwnPropertyNames;var Ht=Object.getPrototypeOf,Yt=Object.prototype.hasOwnProperty;var Wt=(e,t,r,o)=>{if(t&&typeof t=="object"||typeof t=="function")for(let a of $t(t))!Yt.call(e,a)&&a!==r&&Se(e,a,{get:()=>t[a],enumerable:!(o=kt(t,a))||o.enumerable});return e};var O=(e,t,r)=>(r=e!=null?Bt(Ht(e)):{},Wt(t||!e||!e.__esModule?Se(r,"default",{value:e,enumerable:!0}):r,e));var K=require("dotenv"),j=require("node:path"),be=require("node:fs"),Gt=(()=>{try{let e=(0,be.readFileSync)((0,j.join)(__dirname,"..","package.json"),"utf8");return JSON.parse(e)}catch{return{version:"0.0.0"}}})();(0,K.config)({path:[(0,j.join)(__dirname,"..","env",".env"),(0,j.join)(__dirname,"..","env",".env.default")]});(0,K.populate)(process.env,{SERVER_VERSION:Gt.version});var jt=["SYMM_ENCRYPTION_KEY","JWT_SECRET","JWT_REFRESH_SECRET"],Ce=()=>{let e=[];for(let t of jt)process.env[t]||e.push(t);if(e.length>0)throw new Error("Following env variables are required but not provided: "+e.join(", "))};function Kt(e,t=void 0){return process.env[e]||t}function Vt(e,t=void 0){let r=process.env[e];if(!r)return t;let o=Number(r);return!isNaN(o)&&r.trim()!==""?o:t}function zt(e){return process.env[e]==="true"||process.env[e]==="TRUE"}var d={str:Kt,num:Vt,bool:zt};var ls=require("reflect-metadata"),xt=O(require("fastify")),vt=O(require("@fastify/cors")),Mt=O(require("@fastify/static"));var s=class extends Error{constructor(r,o){super(o);this.status=r;this.message=o}};var Ue=require("typeorm");var Ne=require("typeorm");var h=d.str("APP_DB_TYPE")==="sqlite"?"datetime":"timestamp";var ae=new Ne.EntitySchema({name:"DatabaseInspection",tableName:"db_inspection",columns:{id:{type:String,unique:!0,primary:!0,generated:"uuid"},tableName:{nullable:!0,type:String},columns:{type:"json",nullable:!0},createdAt:{type:h,default:()=>"CURRENT_TIMESTAMP"},updatedAt:{type:h,default:()=>"CURRENT_TIMESTAMP"}},relations:{datasource:{target:()=>"DataSource",type:"many-to-one",joinTable:!1,cascade:!0}}});var Ie=require("typeorm");var ne=new Ie.EntitySchema({name:"Team",tableName:"teams",columns:{id:{type:"uuid",primary:!0,generated:"uuid"},name:{type:String},createdAt:{type:h,default:()=>"CURRENT_TIMESTAMP"},updatedAt:{type:h,default:()=>"CURRENT_TIMESTAMP"}},relations:{users:{type:"one-to-many",target:()=>"UsersToTeams",inverseSide:"team"},queries:{type:"one-to-many",target:()=>"Query",inverseSide:"team"},datasources:{type:"one-to-many",target:()=>"DataSource",inverseSide:"team"}}});var Oe=require("typeorm");var se=new Oe.EntitySchema({name:"User",tableName:"users",columns:{id:{type:"uuid",primary:!0,generated:"uuid"},createdAt:{type:h,default:()=>"CURRENT_TIMESTAMP"},updatedAt:{type:h,default:()=>"CURRENT_TIMESTAMP"},username:{type:String,unique:!0},password:{type:String}},relations:{teams:{type:"one-to-many",target:()=>"UsersToTeams",inverseSide:"user"},settings:{type:"one-to-one",target:()=>"UserSettings",inverseSide:"user"},currentTeam:{type:"one-to-one",target:()=>"UsersToTeams",inverseSide:"user",joinColumn:!0}}});var Ae=require("typeorm");var ie=new Ae.EntitySchema({name:"UserSettings",tableName:"user_settings",columns:{id:{type:"uuid",primary:!0,generated:"uuid"},createdAt:{type:h,default:()=>"CURRENT_TIMESTAMP"},updatedAt:{type:h,default:()=>"CURRENT_TIMESTAMP"}},relations:{user:{type:"one-to-one",target:()=>"User",inverseSide:"settings",joinColumn:!0}}});var _e=require("typeorm");var ue=new _e.EntitySchema({name:"DataSource",tableName:"data_sources",columns:{id:{type:"uuid",primary:!0,generated:"uuid"},dbUrl:{type:String},dbPort:{type:Number,nullable:!0},dbUser:{type:String},dbPassword:{type:String,nullable:!0,select:!1},dbPasswordIv:{type:String,nullable:!0,select:!1},dbPasswordTag:{type:String,nullable:!0,select:!1},dbType:{type:String},createdAt:{type:h,default:()=>"CURRENT_TIMESTAMP"},updatedAt:{type:h,default:()=>"CURRENT_TIMESTAMP"},name:{type:String},description:{type:String,nullable:!0},dbDatabase:{type:String},dbSchema:{type:String,nullable:!0},allowInsert:{type:Boolean,default:!1},allowUpdate:{type:Boolean,default:!1},lastInspected:{type:h,nullable:!0,default:null},status:{type:String,nullable:!0}},relations:{team:{type:"many-to-one",target:()=>"Team",inverseSide:"datasources",joinColumn:!0},inspections:{type:"one-to-many",target:()=>"DatabaseInspection",inverseSide:"datasource"},queries:{type:"one-to-many",target:()=>"Query",inverseSide:"dataSource"},owner:{type:"many-to-one",target:()=>"User",joinColumn:!0}}});var xe=O(require("node:os")),ve=require("node:path");var Pe=require("typeorm");var ce=new Pe.EntitySchema({name:"Query",tableName:"query",columns:{id:{type:"uuid",primary:!0,generated:"uuid"},name:{type:String},opts:{type:"json",default:"{}"},isTrash:{type:Boolean,default:!1,nullable:!0},createdAt:{type:h,default:()=>"CURRENT_TIMESTAMP"},updatedAt:{type:h,default:()=>"CURRENT_TIMESTAMP",onUpdate:"CURRENT_TIMESTAMP"}},relations:{team:{type:"many-to-one",target:()=>"Team",inverseSide:"queries",joinColumn:!0},dataSource:{type:"many-to-one",target:()=>"DataSource",inverseSide:"datasources",joinColumn:!0}}});var De=require("typeorm"),le=new De.EntitySchema({name:"UsersToTeams",tableName:"users_to_teams",columns:{id:{type:"uuid",primary:!0,generated:"uuid"},role:{type:"varchar",default:"admin",nullable:!1}},relations:{team:{type:"many-to-one",target:()=>"Team",inverseSide:"users"},user:{type:"many-to-one",target:()=>"User",inverseSide:"teams"}}});function Jt(){let e=d.str("APP_DB_DATABASE");if(!e)throw new Error("Bad value for TYPEORM_DATABASE. Please check your config!");return e.startsWith("<home>")&&(e=e.replace("<home>",xe.default.homedir())),e}var g=new Ue.DataSource({type:d.str("APP_DB_TYPE"),database:Jt(),host:d.str("APP_DB_HOST"),username:d.str("APP_DB_USERNAME"),password:d.str("APP_DB_PASSWORD"),port:d.num("APP_DB_PORT"),schema:d.str("APP_DB_SCHEMA"),logging:d.bool("APP_DB_LOGGING"),migrationsRun:!0,migrations:[ve.posix.join(__dirname,"migrations","*.js")],entities:[ae,ue,ne,se,le,ie,ce]}),Me=async()=>{if(!g.isInitialized)return g.initialize();throw new Error("Already initialized")},P=g.getRepository(ae),f=g.getRepository(ue),x=g.getRepository(ne),R=g.getRepository(se),b=g.getRepository(le),F=g.getRepository(ie),I=g.getRepository(ce);var me=O(require("node:fs/promises")),Le=require("node:path"),qe=O(require("node:os")),Xt=qe.default.homedir(),Fe=(0,Le.join)(Xt,".dataramen",".runtime","files"),Qe=async()=>{await Zt()||await me.default.mkdir(Fe,{recursive:!0})};async function Zt(){try{return(await me.default.lstat(Fe)).isDirectory()}catch{return!1}}var w=e=>(t,r,o)=>{e(t),o()};var k=require("jose");var Be=new TextEncoder,ke=Be.encode(d.str("JWT_SECRET")),$e=Be.encode(d.str("JWT_REFRESH_SECRET")),de=async({userId:e})=>new k.SignJWT({sub:e}).setProtectedHeader({alg:"HS256"}).setExpirationTime("1h").sign(ke),pe=async({userId:e})=>new k.SignJWT({sub:e}).setProtectedHeader({alg:"HS256"}).setExpirationTime("10d").sign($e),He=async(e,t)=>{try{let{payload:r}=await(0,k.jwtVerify)(e,t);if(!r.sub)throw new s(401,"Failed to verify access token");return{userId:r.sub}}catch(r){throw r instanceof s?r:r instanceof Error?new s(401,r.message):new s(401,"Failed to verify refresh token")}},Ye=async e=>He(e,ke),We=async e=>He(e,$e);var y=(e,t)=>{let r=e.body;return t&&t(r),r},v=(e,t)=>{let r=e.query;return t&&t(r),r},S=(e,t)=>{let r=e.params;return t&&t(r),r};var je=O(require("bcryptjs"));var Ge=e=>{if(!e?.username)throw new s(400,"Username is required");if(!e?.password)throw new s(400,"Password is required")};var V="DATARAMEN_refresh_token",fe={httpOnly:!0,secure:d.bool("PROD"),sameSite:d.bool("PROD"),path:"/",maxAge:10*24*60*60},Ke=w(e=>{e.route({method:"post",url:"/login",config:{isPublic:!0},handler:async(t,r)=>{let{username:o,password:a}=y(t,Ge),n=await R.findOne({where:{username:o}});if(!n||!je.default.compareSync(a,n.password))throw new s(401,"Invalid credentials");let[i,u]=await Promise.all([de({userId:n?.id}),pe({userId:n?.id})]);return r.setCookie(V,u,fe),{data:{accessToken:i}}}}),e.route({method:"post",url:"/refresh",config:{isPublic:!0},handler:async(t,r)=>{let o=t.cookies[V];if(!o)return r.code(401).send({message:"Missing refresh token"});let{userId:a}=await We(o),[n,i]=await Promise.all([de({userId:a}),pe({userId:a})]);return r.setCookie(V,i,fe),{data:{accessToken:n}}}}),e.route({method:"post",url:"/logout",config:{isPublic:!0},handler:async(t,r)=>(r.clearCookie(V,fe),{data:!0})})});var Ve=e=>{if(!e.dbUrl)throw new s(400,"url is required");if(!e.dbUser)throw new s(400,"user is required");if(!e.dbType)throw new s(400,"type is required");if(!e.name)throw new s(400,"name is required");if(!e.dbDatabase)throw new s(400,"database is required")};var Je=O(require("mysql2/promise"));var er=({database:e,password:t,user:r,url:o})=>Je.default.createConnection({host:o,user:r,database:e,password:t}),tr=async e=>{let t=`
       SELECT TABLE_NAME, COLUMN_NAME, ORDINAL_POSITION
       FROM INFORMATION_SCHEMA.KEY_COLUMN_USAGE
       WHERE CONSTRAINT_NAME = 'PRIMARY'
       ORDER BY TABLE_NAME, ORDINAL_POSITION;
-  `,[r]=await e.execute(t),o={};return r.forEach(a=>{let n=a.TABLE_NAME,i=a.COLUMN_NAME;o[n]||(o[n]=[]),o[n].push(i)}),o},Xt=async e=>{let t=`
+  `,[r]=await e.execute(t),o={};return r.forEach(a=>{let n=a.TABLE_NAME,i=a.COLUMN_NAME;o[n]||(o[n]=[]),o[n].push(i)}),o},rr=async e=>{let t=`
       SELECT
           TABLE_NAME AS table_name,
           COLUMN_NAME AS field,
@@ -14,7 +14,7 @@
       WHERE
           REFERENCED_TABLE_NAME IS NOT NULL
         AND CONSTRAINT_SCHEMA = DATABASE();
-  `,[r]=await e.execute(t),o={};return Array.isArray(r)&&r.forEach(a=>{o[a.table_name]||(o[a.table_name]={}),o[a.table_name][a.field]={refTable:a.referenced_table,refField:a.referenced_field}}),o},Zt=async(e,t)=>{let o=(await t.query("SHOW TABLES"))[0],a=await Xt(t),n=await zt(t),i=o.map(async u=>{let l=Object.values(u)[0],c=`select COLUMN_NAME, DATA_TYPE from information_schema.columns where table_schema = '${e.database}' and table_name = '${l}'`,[h]=await t.query(c),g=a[l];return{columns:h.map(p=>({name:p.COLUMN_NAME,type:p.DATA_TYPE,isPrimary:n[l]?.includes(p.COLUMN_NAME),ref:g?.[p.COLUMN_NAME]?{table:g[p.COLUMN_NAME].refTable,field:g[p.COLUMN_NAME].refField}:void 0})).sort((p,w)=>p.isPrimary&&w.isPrimary?p.name.localeCompare(w.name):p.isPrimary?-1:1),createdAt:new Date,tableName:l,updatedAt:new Date}});return Promise.all(i)},Ge=async(e,t,r)=>{try{console.log(`[MYSQL CONN] Query: ${e}`);let[o,a]=await t.query({sql:e,rowsAsArray:!0}),n=o?.constructor?.name;if(n==="ResultSetHeader"){let i=o;if(i.affectedRows>1&&r.allowBulkUpdate!==!0)throw new Error("[MYSQL CONN] Bulk update performed without permission.");return{columns:[{column:"affectedRows",alias:"Affected rows",full:"affectedRows"}],rows:[[i.affectedRows]],query:e}}else if(n==="Array"){let i=o;return{columns:a?.map(u=>({column:u.orgName||u.name,table:u.orgTable,alias:u.name,full:u.orgTable?u.orgTable+"."+u.orgName:u.name}))||[],rows:i,query:e}}throw new Error(`[MYSQL CONN] Unknown result type: ${n}`)}catch(o){throw console.error(o),o instanceof s?o:new s(400,o.message)}},er=async(e,t)=>{await e.beginTransaction();try{let r=await t();return await e.commit(),console.log("[MYSQL CONN] Commit"),r}catch(r){throw await e.rollback(),console.warn(r.message),console.log("[MYSQL CONN] Rollback"),r}},tr=async(e,t)=>{await e.query("START TRANSACTION READ ONLY");try{let r=await t();return console.log("[MYSQL CONN] Read only rollback"),await e.query("ROLLBACK"),r}catch(r){throw console.warn(r.message),await e.query("ROLLBACK"),r}},je=async e=>{let t=await Jt(e),r=!1;return{dbType:"mysql",dataSource:e,inspectSchema:()=>Zt(e,t),executeQuery:(o,a)=>a.type==="SELECT"?tr(t,()=>Ge(o,t,a)):er(t,()=>Ge(o,t,a)),checkConnection:async()=>t.ping(),isClosed:()=>r,close:async()=>{if(!r)return r=!0,t.destroy()}}};var Je=A(require("pg"));var rr=async({database:e,password:t,user:r,url:o,port:a})=>{let n=new Je.default.Client({host:o,user:r,database:e,password:t,port:a,query_timeout:1e4});return await n.connect(),n},or=async e=>{let r=await e.query(`
+  `,[r]=await e.execute(t),o={};return Array.isArray(r)&&r.forEach(a=>{o[a.table_name]||(o[a.table_name]={}),o[a.table_name][a.field]={refTable:a.referenced_table,refField:a.referenced_field}}),o},or=async(e,t)=>{let o=(await t.query("SHOW TABLES"))[0],a=await rr(t),n=await tr(t),i=o.map(async u=>{let p=Object.values(u)[0],c=`select COLUMN_NAME, DATA_TYPE from information_schema.columns where table_schema = '${e.database}' and table_name = '${p}'`,[T]=await t.query(c),N=a[p];return{columns:T.map(l=>({name:l.COLUMN_NAME,type:l.DATA_TYPE,isPrimary:n[p]?.includes(l.COLUMN_NAME),ref:N?.[l.COLUMN_NAME]?{table:N[l.COLUMN_NAME].refTable,field:N[l.COLUMN_NAME].refField}:void 0})).sort((l,E)=>l.isPrimary&&E.isPrimary?l.name.localeCompare(E.name):l.isPrimary?-1:1),createdAt:new Date,tableName:p,updatedAt:new Date}});return Promise.all(i)},ze=async(e,t,r)=>{try{console.log(`[MYSQL CONN] Query: ${e}`);let[o,a]=await t.query({sql:e,rowsAsArray:!0}),n=o?.constructor?.name;if(n==="ResultSetHeader"){let i=o;if(i.affectedRows>1&&r.allowBulkUpdate!==!0)throw new Error("[MYSQL CONN] Bulk update performed without permission.");return{columns:[{column:"affectedRows",alias:"Affected rows",full:"affectedRows"}],rows:[[i.affectedRows]],query:e}}else if(n==="Array"){let i=o;return{columns:a?.map(u=>({column:u.orgName||u.name,table:u.orgTable,alias:u.name,full:u.orgTable?u.orgTable+"."+u.orgName:u.name}))||[],rows:i,query:e}}throw new Error(`[MYSQL CONN] Unknown result type: ${n}`)}catch(o){throw console.error(o),o instanceof s?o:new s(400,o.message)}},ar=async(e,t)=>{await e.beginTransaction();try{let r=await t();return await e.commit(),console.log("[MYSQL CONN] Commit"),r}catch(r){throw await e.rollback(),console.warn(r.message),console.log("[MYSQL CONN] Rollback"),r}},nr=async(e,t)=>{await e.query("START TRANSACTION READ ONLY");try{let r=await t();return console.log("[MYSQL CONN] Read only rollback"),await e.query("ROLLBACK"),r}catch(r){throw console.warn(r.message),await e.query("ROLLBACK"),r}},Xe=async e=>{let t=await er(e),r=!1;return{dbType:"mysql",dataSource:e,inspectSchema:()=>or(e,t),executeQuery:(o,a)=>a.type==="SELECT"?nr(t,()=>ze(o,t,a)):ar(t,()=>ze(o,t,a)),checkConnection:async()=>t.ping(),isClosed:()=>r,close:async()=>{if(!r)return r=!0,t.destroy()}}};var et=O(require("pg"));var sr=async({database:e,password:t,user:r,url:o,port:a})=>{let n=new et.default.Client({host:o,user:r,database:e,password:t,port:a,query_timeout:1e4});return await n.connect(),n},ir=async e=>{let r=await e.query(`
       SELECT
           kcu.table_name,
           kcu.column_name,
@@ -28,7 +28,7 @@
           tc.constraint_type = 'PRIMARY KEY'
       ORDER BY
           kcu.table_name, kcu.ordinal_position;
-  `),o={};return r.rows.forEach(a=>{let n=a.table_name,i=a.column_name;o[n]||(o[n]=[]),o[n].push(i)}),o},ar=async e=>{let r=await e.query(`
+  `),o={};return r.rows.forEach(a=>{let n=a.table_name,i=a.column_name;o[n]||(o[n]=[]),o[n].push(i)}),o},ur=async e=>{let r=await e.query(`
     SELECT
       tc.table_name AS table_name,
       kcu.column_name AS field,
@@ -43,15 +43,15 @@
         ON ccu.constraint_name = tc.constraint_name
         AND ccu.table_schema = tc.table_schema
     WHERE tc.constraint_type = 'FOREIGN KEY';
-  `),o={};return r.rows.forEach(a=>{o[a.table_name]||(o[a.table_name]={}),o[a.table_name][a.field]={refTable:a.referenced_table,refField:a.referenced_field}}),o},nr=async(e,t)=>{let r=`SELECT tablename FROM pg_catalog.pg_tables WHERE schemaname = '${e.schema}'`,a=(await t.query(r)).rows,n=await ar(t),i=await or(t),u=a.map(async l=>{let c=Object.values(l)[0],h=`
+  `),o={};return r.rows.forEach(a=>{o[a.table_name]||(o[a.table_name]={}),o[a.table_name][a.field]={refTable:a.referenced_table,refField:a.referenced_field}}),o},cr=async(e,t)=>{let r=`SELECT tablename FROM pg_catalog.pg_tables WHERE schemaname = '${e.schema}'`,a=(await t.query(r)).rows,n=await ur(t),i=await ir(t),u=a.map(async p=>{let c=Object.values(p)[0],T=`
         SELECT column_name, data_type
         FROM information_schema.columns
         WHERE
             table_name = '${c}' and
             table_schema = '${e.schema}'
-    `,{rows:g}=await t.query(h),p=n[c];return{columns:g.map(w=>({name:w.column_name,type:w.data_type,isPrimary:i[c]?.includes(w.column_name),ref:p?.[w.column_name]?{table:p[w.column_name].refTable,field:p[w.column_name].refField}:void 0})).sort((w,I)=>w.isPrimary&&I.isPrimary?w.name.localeCompare(I.name):w.isPrimary?-1:1),createdAt:new Date,tableName:c,updatedAt:new Date}});return Promise.all(u)},sr=async(e,t)=>{let r=`select relname, attname, concat(pg_class.oid, '-', attnum) as row_key
+    `,{rows:N}=await t.query(T),l=n[c];return{columns:N.map(E=>({name:E.column_name,type:E.data_type,isPrimary:i[c]?.includes(E.column_name),ref:l?.[E.column_name]?{table:l[E.column_name].refTable,field:l[E.column_name].refField}:void 0})).sort((E,M)=>E.isPrimary&&M.isPrimary?E.name.localeCompare(M.name):E.isPrimary?-1:1),createdAt:new Date,tableName:c,updatedAt:new Date}});return Promise.all(u)},lr=async(e,t)=>{let r=`select relname, attname, concat(pg_class.oid, '-', attnum) as row_key
    from pg_attribute
       left join pg_class on pg_attribute.attrelid = pg_class.oid
    where
      concat(pg_class.oid, '-', attnum) IN (${e.join(", ")})
-     limit 25;`;return(await t.query(r)).rows.reduce((a,n)=>(a[n.row_key]={table:n.relname,column:n.attname},a),{})},Ve=async(e,t,r)=>{try{console.log(`[PG CONN] Query: ${e}`);let{rows:o,fields:a,command:n,rowCount:i}=await t.query({text:e,rowMode:"array"});if(n==="UPDATE"||n==="INSERT"||n==="DELETE"){if(i!=null&&i>1&&r.allowBulkUpdate!==!0)throw new Error("[PG CONN] Bulk update performed without permission.");return{columns:[{column:"affectedRows",alias:"Affected rows",full:"affectedRows"}],rows:[[i]],query:e}}if(n==="SELECT"){let u=a.map(c=>`'${c.tableID}-${c.columnID}'`),l=await sr(u,t);return{columns:a.map(c=>{let h=l[`${c.tableID}-${c.columnID}`];return{column:h?.column||c.name,alias:c.name,table:h?.table||"",full:h?h.table+"."+h.column:c.name}}),rows:o,query:e}}throw new Error(`[PG CONN] Unsupported command: ${n}`)}catch(o){throw o instanceof s?o:new s(400,o.message)}},ir=async(e,t)=>{await e.query("BEGIN");try{let r=await t();return await e.query("COMMIT"),console.log("[PG CONN] Commit"),r}catch(r){throw await e.query("ROLLBACK"),console.log("[PG CONN] Rollback"),r}},ur=async(e,t)=>{await e.query("BEGIN READ ONLY");try{let r=await t();return console.log("[PG CONN] Read only rollback"),await e.query("ROLLBACK"),r}catch(r){throw console.log("[PG CONN] Rollback"),await e.query("ROLLBACK"),r}},ze=async e=>{let t=await rr(e),r=!1,o=!1,a=async n=>(o||await t.query(`SET search_path TO ${e.schema}`),n());return{dbType:"postgres",dataSource:e,inspectSchema:()=>nr(e,t),executeQuery:(n,i)=>a(()=>i.type==="SELECT"?ur(t,()=>Ve(n,t,i)):ir(t,()=>Ve(n,t,i))),checkConnection:async()=>{},isClosed:()=>r,close:async()=>{if(!r)return r=!0,t.end()}}};var M=async(e,t,r)=>{try{let o;if(t==="mysql")o=await je(e);else if(t==="postgres")o=await ze(e);else throw new s(500,`Connection manager for ${t} not found`);return r.__connections?r.__connections.push(o):r.__connections=[o],o}catch(o){throw console.error(o),o instanceof s?o:o?.code==="ECONNREFUSED"?new s(500,"Failed to connect to the database"):new s(500,o.message)}};var V=A(require("node:crypto"));var Xe="aes-256-gcm",cr=12,Ze=()=>{let e=m.str("SYMM_ENCRYPTION_KEY");if(!e)throw new Error("Missing ENCRYPTION_KEY in environment variables.");let t=Buffer.from(e,"hex");if(t.length!==32)throw new Error("ENCRYPTION_KEY must be a 64-character hex string (256 bits).");return t},mr=e=>{let t=V.default.randomBytes(cr),r=Ze(),o=V.default.createCipheriv(Xe,r,t),a=o.update(e,"utf8","hex");a+=o.final("hex");let n=o.getAuthTag();return{encrypted:a,iv:t.toString("hex"),tag:n.toString("hex")}},lr=({encrypted:e,iv:t,tag:r})=>{let o=Ze(),a=V.default.createDecipheriv(Xe,o,Buffer.from(t,"hex"));a.setAuthTag(Buffer.from(r,"hex"));let n=a.update(e,"hex","utf8");return n+=a.final("utf8"),n},J={encrypt:mr,decrypt:lr};var L=(e,t=!1)=>{if(t){let r=J.decrypt({encrypted:e.dbPassword,tag:e.dbPasswordTag,iv:e.dbPasswordIv});return{url:e.dbUrl,user:e.dbUser,database:e.dbDatabase,password:r,port:e.dbPort,schema:e.dbSchema}}return{url:e.dbUrl,user:e.dbUser,database:e.dbDatabase,password:e.dbPassword,port:e.dbPort,schema:e.dbSchema}};var et=[{value:"=",label:"equals"},{value:"<>",label:"not equal"},{value:">",label:"greater than"},{value:">=",label:"greater than or equal"},{value:"<",label:"less than"},{value:"<=",label:"less than or equal"},{value:"LIKE",label:"contains"},{value:"NOT LIKE",label:"not contains"},{value:"IN",label:"in list"},{value:"NOT IN",label:"not in list"},{value:"IS NULL",label:"is null"},{value:"IS NOT NULL",label:"is not null"}],dr=et.reduce((e,t)=>(e[t.value]=t.label,e),{}),Bo=et.reduce((e,t)=>(e[t.label]=t.value,e),{}),F=e=>e.map(t=>({label:dr[t],value:t})),$o=F(["=","<>",">",">=","<","<=","IN","NOT IN","IS NULL","IS NOT NULL"]),Ho=F(["=","<>","LIKE","NOT LIKE","IN","NOT IN","IS NULL","IS NOT NULL"]),Yo=F(["=","<>","IS NULL","IS NOT NULL"]),Wo=F(["=","<>",">",">=","<","<=","IS NULL","IS NOT NULL"]),Go=F(["IS NULL","IS NOT NULL"]),Ko=F(["IN","NOT IN"]);var tt=["char","varchar","binary","varbinary","blob","text","enum","set","character","character varying","text","citext","uuid","xml","json","jsonb"];var jo=["date","datetime","timestamp","timestamptz"].reduce((e,t)=>(e[t]=!0,e),{});var rt=e=>e.fn?e.distinct===!0?`${e.fn} distinct ${e.value}`:`${e.fn} ${e.value}`:e.value;var fe={read_only:10,editor:20,admin:30,owner:40};var C=e=>{let t=fe[e];return r=>fe[r]>=t},ot=async e=>{let t=e.routeOptions.config.requireRole;if(t&&!t(e.user.currentTeamRole))throw new s(403,"You are not authorized to perform this action")};var at=R(e=>{e.route({method:"get",url:"/:id",handler:async t=>{let{id:r}=b(t),o=await f.findOne({where:{id:r}});if(!o)throw new s(404,"Data source not found");return{data:o}}}),e.route({method:"get",url:"/",handler:async t=>{let{teamId:r}=v(t);return{data:await f.find({where:{team:{id:r}},order:{createdAt:"DESC"}})}}}),e.route({url:"/",method:"post",config:{requireRole:C("admin")},handler:async t=>{let{teamId:r,ownerId:o,...a}=y(t,We),n=f.create({...a,allowUpdate:!!a.allowUpdate,allowInsert:!!a.allowInsert,team:{id:r},owner:{id:o}}),i=await M(L(n),n.dbType,t);try{await i.checkConnection()}catch{throw new s(400,"Cannot connect to the database, please check datasource configuration")}let{tag:u,iv:l,encrypted:c}=J.encrypt(n.dbPassword);return n.dbPassword=c,n.dbPasswordIv=l,n.dbPasswordTag=u,{data:await f.save(n)}}}),e.route({method:"put",url:"/:id",config:{requireRole:C("admin")},handler:async t=>{let{id:r}=b(t),o=y(t),a=await f.findOneBy({id:r});if(!a)throw new s(404,"Data source not found");let n=f.merge(a,o);return await f.save(n),{data:n}}}),e.route({method:"delete",url:"/:id",config:{requireRole:C("admin")},handler:async(t,r)=>E.transaction(async()=>{let{id:o}=b(t);await Promise.all([P.delete({datasource:{id:o}}),O.delete({dataSource:{id:o}})]),await f.delete({id:o})})}),e.route({method:"post",url:"/:id/inspect",handler:async(t,r)=>{let{id:o}=b(t),a=await f.findOne({where:{id:o},select:["id","dbType","dbDatabase","dbPassword","dbPasswordTag","dbPasswordIv","dbPort","dbUrl","dbSchema","dbUser"]});if(!a)throw new Error("Data source not found");a.status="INSPECTING",await f.save(a);let i=await(await M(L(a,!0),a.dbType,t)).inspectSchema();await P.delete({datasource:{id:o}}),await P.insert(i.sort().map(u=>P.create({tableName:u.tableName,columns:u.columns,datasource:{id:o}}))),a.status="READY",a.lastInspected=new Date,await f.save(a)}}),e.route({method:"get",url:"/:id/inspections",handler:async t=>{let{id:r}=b(t);return{data:await P.find({where:{datasource:{id:r}}})}}})});var ye=require("typeorm"),nt=R(e=>{e.route({method:"get",url:"/team/:teamId/files",handler:async(t,r)=>{let{teamId:o}=b(t),a={where:{team:{id:o}},order:{name:"ASC"},select:{id:!0,name:!0,updatedAt:!0}},[n=[],i=[]]=await Promise.all([f.find(a),O.find({...a,where:{...a.where,isTrash:!1}})]);return{data:[...n.map(u=>({...u,type:"dataSource"})),...i.map(u=>({...u,type:"query"}))]}}}),e.route({method:"get",url:"/team/:teamId/query",handler:async t=>{let{teamId:r}=b(t),{search:o,size:a}=v(t),n=(parseInt(a)||20)/2,[i,u]=await Promise.all([P.find({where:{tableName:(0,ye.Like)(`%${o}%`),datasource:{team:{id:r}}},relations:{datasource:!0},select:{id:!0,tableName:!0,datasource:{name:!0,id:!0}},order:{tableName:"ASC"},take:n}),O.find({where:{name:(0,ye.Like)(`%${o}%`),isTrash:!1,dataSource:{team:{id:r}}},relations:{dataSource:!0},select:{id:!0,name:!0,dataSource:{name:!0,id:!0}},order:{name:"ASC"},take:n})]),l=[];return i.forEach(c=>{l.push({name:c.tableName,id:c.id,dataSourceName:c.datasource?.name||"--",dataSourceId:c.datasource?.id||"--",type:"table"})}),u.forEach(c=>{l.push({name:c.name,id:c.id,dataSourceName:c.dataSource?.name||"--",dataSourceId:c.dataSource?.id||"--",type:"query"})}),{data:l}}})});function st(e,t=void 0){try{if(e){let r=e.split("&"),o={};for(let a of r){let n=a.split(":");o[n[0]]=n[1]}return o}}catch{}return t}var it=require("typeorm");var ut=R(e=>{e.route({method:"get",url:"/",handler:async t=>{let{dataSourceId:r,teamId:o,limit:a,orderBy:n,name:i}=v(t);if(!r&&!o)throw new s(400,"Either dsId or teamId is required");let u={isTrash:!1};return r&&(u.dataSource={id:r}),o&&(u.team={id:o}),i&&(u.name=(0,it.Like)(`%${i}%`)),{data:await O.find({where:u,take:a,order:st(n,{createdAt:"DESC"})})}}}),e.route({method:"get",url:"/:id",handler:async t=>{let{id:r}=b(t),o=await O.findOne({where:{id:r},select:{dataSource:{id:!0}},relations:{dataSource:!0}});return o?{data:o}:{status:404,data:"Query not found"}}}),e.route({method:"post",url:"/",config:{requireRole:C("editor")},handler:async t=>{let r=y(t),o=await f.findOne({where:{id:r.dataSourceId},relations:{team:!0}}),a=await O.save(O.create({name:r.name,isTrash:!1,opts:r.opts,team:{id:o?.team.id},dataSource:{id:r.dataSourceId}}));return console.log("Created query!"),{data:a}}}),e.route({method:"patch",url:"/:id",config:{requireRole:C("editor")},handler:async t=>{let{id:r}=b(t),o=y(t);if(!(await O.update(r,o)).affected)throw new s(404,"Query not found");return{data:await O.findOneBy({id:r})}}}),e.route({method:"delete",url:"/:id",config:{requireRole:C("editor")},handler:async t=>E.transaction(async()=>{let{id:r}=b(t);if(!(await O.delete({id:r})).affected)return{status:404,data:"Query not found"}})})});var z=e=>{let t=e.distinct===!0?"distinct ":"";return`${e.fn}(${t}${e.value})`},B={YEAR:e=>`EXTRACT(YEAR FROM ${e.value})`,MONTH:e=>`EXTRACT(MONTH FROM ${e.value})`,DAY:e=>`EXTRACT(DAY FROM ${e.value})`,SUM:e=>`COALESCE(SUM(${e.distinct===!0?"distinct ":""}${e.value}), 0)`,AVG:z,MAX:z,MIN:z,COUNT:z};var X=e=>{let t=e.distinct===!0?"distinct ":"";return`${e.fn}(${t}${e.value})`},$={YEAR:e=>`YEAR(${e.value})`,MONTH:e=>`MONTH(${e.value})`,DAY:e=>`DAY(${e.value})`,SUM:e=>{let t=e.distinct===!0?"distinct ":"";return`coalesce(${e.fn}(${t}${e.value}), 0)`},AVG:X,MAX:X,MIN:X,COUNT:X};var ct=["SUM","COUNT","AVG","MAX","MIN"],pr=["YEAR","MONTH","DAY",...ct],fr=pr.reduce((e,t)=>(e[t]=!0,e),{}),yr=ct.reduce((e,t)=>(e[t]=!0,e),{}),Z=e=>fr[e],mt=e=>yr[e],lt=(e,t)=>e.fn&&Z(e.fn)?(t==="postgres"?B:$)[e.fn](e):e.value;var ee=e=>typeof e=="string",dt=e=>{let t="SELECT ";if(e.columns&&e.columns.length>0?t+=e.columns.join(", "):t+="*",e.table&&(t+=` FROM ${e.table}`),e.joins&&e.joins.length>0&&e.joins.forEach(r=>{t+=` ${r.type} JOIN ${r.table} ON ${r.on}`}),e.where&&(t+=` WHERE ${e.where}`),e.groupBy&&e.groupBy.length>0&&(t+=` GROUP BY ${e.groupBy.join(", ")}`),e.having&&(t+=` HAVING ${e.having}`),e.orderBy&&e.orderBy.length>0){let r=e.orderBy.reduce((a,n)=>(a[n.column]=n.direction,a),{}),o=Object.entries(r).map(([a,n])=>`${a} ${n}`);t+=` ORDER BY ${o.join(", ")}`}return e.limit!==void 0&&(t+=` LIMIT ${e.limit}`),e.offset!==void 0&&(t+=` OFFSET ${e.offset}`),t},H=(e,t)=>{let{column:r,operator:o,value:a,fn:n}=e,i=lt({value:r,fn:n},t);switch(o){case"IS NULL":case"IS NOT NULL":return`${i} ${o}`;case"IN":case"NOT IN":let u=a?.map(p=>ee(p.value)?`'${p.value}'`:p.value).join(", ");return`${i} ${o} (${u})`;case"LIKE":return`${i} ${t==="postgres"?"ILIKE":"LIKE"} '%${a?.[0].value}%'`;case"NOT LIKE":return`${i} ${t==="postgres"?"NOT ILIKE":"LIKE"} '%${a?.[0].value}%'`;default:let h=a?.[0],g;return ee(h?.value)&&h?.isColumn!==!0?g=`'${h?.value}'`:g=h?.value,`${i} ${o} ${g}`}};var te=class{constructor(t="mysql"){this.dialect=t,this.skeleton={type:"SELECT"}}addWhere(t){let r=H(t,this.dialect);if(this.skeleton.where){let o=t.connector||"AND";this.skeleton.where+=` ${o} ${r}`}else this.skeleton.where=r;return this}addWhereRaw(t,r="AND"){return this.skeleton.where?this.skeleton.where+=` ${r} ${t}`:this.skeleton.where=t,this}clearWhere(){return this.skeleton.where=void 0,this}addHaving(t){let r=H(t,this.dialect);if(this.skeleton.having){let o=t.connector||"AND";this.skeleton.having+=` ${o} ${r}`}else this.skeleton.having=r;return this}clearHaving(){return this.skeleton.having=void 0,this}addOrderBy(...t){return this.skeleton.orderBy||(this.skeleton.orderBy=[]),this.skeleton.orderBy.push(...t),this}clearOrderBy(){return this.skeleton.orderBy=void 0,this}setLimit(t){return this.skeleton.limit=t,this}setOffset(t){return this.skeleton.offset=t,this}addGroupBy(t){this.skeleton.groupBy||(this.skeleton.groupBy=[]);let r=this.skeleton.groupBy.findIndex(o=>o===t);return r>-1?this.skeleton.groupBy[r]=t:this.skeleton.groupBy.push(t),this}setTable(t){return this.skeleton.table=t,this}addJoin(...t){return this.skeleton.joins||(this.skeleton.joins=[]),this.skeleton.joins.push(...t),this}selectColumns(t){if(this.skeleton.type!=="SELECT")throw new Error("Column selection is only supported for SELECT queries");return this.skeleton.columns=t,this}toSQL(){return dt(this.skeleton)}};var pt=require("typeorm");var ft=async(e,{table:t,datasourceId:r,filters:o,joins:a,orderBy:n,size:i,page:u,columns:l,groupBy:c,searchAll:h})=>{let g=await f.findOne({where:{id:r},select:["id","dbType","dbDatabase","dbPassword","dbPasswordTag","dbPasswordIv","dbPort","dbUrl","dbSchema","dbUser"]}),p=[t],w=[];if(!g)throw new s(404,"Data source not found");let I=new te(g.dbType);I.setTable(t),I.setLimit(i||20),I.setOffset(i*u),o?.forEach(d=>{d.fn&&mt(d.fn)?I.addHaving(d):I.addWhere(d)}),a&&(I.addJoin(...a),a.forEach(d=>{p.push(d.table)})),n&&I.addOrderBy(...n.map(d=>({...d,column:wr(d.column,g.dbType)}))),c&&c.length>0&&c.forEach(d=>I.addGroupBy(gr(d,g.dbType)));let Mt=await P.find({where:{tableName:(0,pt.In)(p),datasource:{id:r}}});for(let d of Mt)if(d.columns)for(let U of d.columns)w.push({column:U.name,table:d.tableName||"",full:`${d.tableName}.${U.name}`,type:U.type});let W;if(l&&l.length>0?W=l.map(d=>hr(d,g.dbType)):W=w.map(d=>`${d.full} as "${d.full}"`),I.selectColumns(W),h){let d=w.filter(U=>tt.includes(U.type)&&W.some(re=>re.startsWith(U.full)));if(d.length>0){let U=d.map(re=>`LOWER(${re.full}) LIKE '%${h.toLowerCase()}%'`);I.addWhereRaw(`(${U.join(" OR ")})`,"AND")}}return{...await(await M(L(g,!0),g.dbType,e)).executeQuery(I.toSQL(),{type:"SELECT",allowBulkUpdate:!1}),tables:p,allColumns:w}},yt=async(e,t)=>{let r=await f.findOne({where:{id:t.datasourceId},select:["id","dbType","dbDatabase","dbPassword","dbPasswordTag","dbPasswordIv","dbPort","dbUrl","dbSchema","dbUser","allowUpdate"]});if(!r)throw new s(404,"Data source not found");if(!r.allowUpdate)throw new s(403,"This datasource does not allow update operations");let o=t.values.map(({value:u,column:l})=>typeof u=="string"?u&&u.startsWith("=")?`${l}=${u.substring(1)}`:`${l}='${u}'`:`${l}='${u}'`).join(", "),a=t.filters.map(u=>H(u,r.dbType)).join(" AND "),n=`UPDATE ${t.table} SET ${o} WHERE ${a}`;return(await M(L(r,!0),r.dbType,e)).executeQuery(n,{type:"UPDATE",allowBulkUpdate:!1})},Tt=async(e,t)=>{let r=await f.findOne({where:{id:t.datasourceId},select:["id","dbType","dbDatabase","dbPassword","dbPasswordTag","dbPasswordIv","dbPort","dbUrl","dbSchema","dbUser","allowInsert"]});if(!r)throw new s(404,"Data source not found");if(!r.allowInsert)throw new s(403,"This datasource does not allow insert operations");let{keys:o,values:a}=Tr(t.values),n=`INSERT INTO ${t.table} (${o}) VALUES (${a})`;return(await M(L(r,!0),r.dbType,e)).executeQuery(n,{type:"INSERT",allowBulkUpdate:!1})},Tr=e=>{let t=e.map(({column:o})=>o).join(", "),r=e.map(({value:o})=>typeof o=="string"?o&&o.startsWith("=")?o.substring(1):`'${o}'`:o).join(", ");return{keys:t,values:r}},hr=(e,t)=>{if(e.fn){if(Z(e.fn))return`${(t==="postgres"?B:$)[e.fn](e)} as "${rt(e)}"`;throw new Error("Function not allowed: "+e.fn)}return`${e.value} as "${e.value}"`},gr=(e,t)=>{if(e.fn){if(Z(e.fn))return(t==="postgres"?B:$)[e.fn](e);throw new Error("Function not allowed: "+e.fn)}return e.value},wr=(e,t)=>t==="postgres"?`"${e}"`:t==="mysql"?`\`${e}\``:e;var ht=e=>{if(!e.table)throw new s(400,"Table is required")},Er=["--",";","DROP","drop"],gt=e=>{if(ee(e.value)&&e.value.startsWith("=")){let t=e.value;Er.forEach(r=>{if(t.includes(r))throw new s(400,"Invalid input value for "+e.column)})}},wt=e=>{if(!e.table)throw new s(400,"Table is required");e.values.forEach(gt)},Et=e=>{if(!e.table)throw new s(400,"Table is required");e.values.forEach(gt)};var Rt=R(e=>{e.route({method:"post",url:"/select",handler:async t=>{let r=y(t,ht);return{data:await ft(t,r)}}}),e.route({method:"post",url:"/insert",config:{requireRole:C("editor")},handler:async t=>{let r=y(t,wt);return{data:await Tt(t,r)}}}),e.route({method:"post",url:"/update",config:{requireRole:C("editor")},handler:async t=>{let r=y(t,Et);return{data:await yt(t,r)}}})});var St=R(e=>{e.get("/",{config:{isPublic:!0}},async()=>({data:{active:!0,version:m.str("SERVER_VERSION")}}))});var bt=R(e=>{e.route({method:"get",url:"/:id/users",handler:async t=>{let{id:r}=b(t),o=await x.findOne({where:{id:r},relations:{users:{user:!0}}});if(!o)throw new s(404,"Team not found");return{data:o.users.map(a=>({role:a.role,id:a.user.id,name:a.user.username}))}}}),e.route({method:"post",url:"/",config:{requireRole:C("editor")},handler:async t=>E.transaction(async()=>{let r=t.user.id,o=y(t),a=S.create();a.id=r;let n=x.create(o);await x.save(n);let i=N.create({user:a,team:n});return await N.save(i),{data:n}})}),e.route({method:"patch",url:"/:id/user-role",config:{requireRole:C("admin")},handler:async t=>{let{id:r}=b(t),{role:o,userId:a}=y(t,({role:i})=>{if(i==="owner")throw new s(400,"Only one owner is allowed")});if((await N.findOneBy({user:{id:a},team:{id:r}}))?.role==="owner")throw new s(400,"Cannot change owner role");await N.update({user:{id:a},team:{id:r}},{role:o})}}),e.route({method:"delete",url:"/:id",config:{requireRole:C("admin")},handler:async t=>E.transaction(async()=>{let{id:r}=b(t),{userId:o}=v(t);if((await N.findOneBy({user:{id:o},team:{id:r}}))?.role==="owner")throw new s(400,"Cannot delete team owner");await S.update(o,{currentTeam:null}),await N.delete({user:{id:o},team:{id:r}}),await S.delete({id:o})})})});var Te=A(require("bcryptjs")),Y=async e=>{let t=await Te.default.genSalt(10);return Te.default.hash(e,t)};var Nt=R(e=>{e.route({method:"get",url:"/",handler:async t=>{let r=await S.findOne({where:{id:t.user.id},relations:{currentTeam:{team:!0}}});if(!r)throw new s(404,"User not found");return{data:{id:r.id,teamId:r.currentTeam?.team.id,teamName:r.currentTeam?.team.name,teamRole:r.currentTeam?.role,username:r.username}}}}),e.route({method:"patch",url:"/",handler:async t=>{let r=t.user.id,o=y(t);if(o.password&&(o.password=await Y(o.password)),!(await S.update(r,o)).affected)throw new s(404,"User not found");let n=await S.findOne({where:{id:r},relations:{currentTeam:{team:!0}}});return{data:{id:n?.id,teamId:n?.currentTeam?.team.id,teamName:n?.currentTeam?.team.name,teamRole:n?.currentTeam?.role,username:n?.username}}}}),e.route({method:"post",url:"/",handler:async t=>E.transaction(async()=>{let r=y(t),o=await Y(r.password),a=await S.save(S.create({username:r.username,password:o})),n=await N.save(N.create({role:"read_only",team:{id:r.teamId},user:{id:a.id}}));await S.update(a.id,{currentTeam:{id:n.id}})})})});var Ct=R(e=>{e.route({method:"get",url:"/",handler:async t=>{let r=t.user.id,o=await q.findOneBy({user:{id:r}});return o||(o=await q.save(q.create({user:{id:r}}))),{data:o}}}),e.route({method:"patch",url:"/",handler:async t=>{let{settings:r}=y(t);if(!r.id)throw new s(400,"Settings id is required!");if(!(await q.update(r.id,r)).affected)throw new s(404,"You do not own these settings!");return{data:await q.findOneBy({id:r.id})}}})});var Ut=require("node:path");var Rr=e=>e.routeOptions.config.isPublic?!0:!e.url.startsWith("/api/"),It=async e=>{if(Rr(e))return;let t=e.headers.authorization;if(!t)throw new s(401,"Missing auth token");let[r,o]=t.split(" ");try{let{userId:a}=await ke(o),n=await N.findOneBy({user:{id:a}});if(!n)throw new s(401,"User is not part of a team");e.user={id:a,currentTeamRole:n.role}}catch{throw new s(401,"Unauthorized")}};var Ot=(e,t)=>{e.__connections&&e.__connections.forEach(r=>{r.close()})};var xt=A(require("@fastify/cookie"));var he={teamName:"Default Team",username:"admin",password:"admin"},Sr=async()=>{let e=await x.findOneBy({});return e||x.save(x.create({name:he.teamName}))},At=async()=>{let e=await N.findOne({where:{role:"owner"},relations:{user:!0}});if(e)return e.user;let t=await Sr(),r=await Y(he.password),o=await S.save(S.create({username:he.username,password:r})),a=await N.save(N.create({user:o,team:t,role:"owner"}));return await S.update(o.id,{currentTeam:a}),o};var _=(0,_t.default)(),vt=m.num("PORT",4466),br=m.bool("HOST")?"0.0.0.0":"127.0.0.1",Nr=m.str("ALLOWED_ORIGINS","").split(",").map(e=>e.trim()),Cr=["https://app.dataramen.xyz","https://dataramen.xyz",`http://localhost:${vt}`,...Nr];function D(e,t){_.register(e,{prefix:t}),console.log("Registered "+t)}(async function(){Ee(),await Me(),await _.register(xt.default,{}),await _.register(Pt.default,{origin:(t,r)=>{!t||Cr.includes(t)?r(null,!0):r(new Error("Not allowed by CORS"),!1)},methods:["GET","POST","PUT","PATCH","DELETE","OPTIONS"],credentials:!0}),await _.register(Dt.default,{root:(0,Ut.join)(__dirname,"web")}),_.get("/",(t,r)=>{r.sendFile("index.html")}),_.addHook("onRequest",It),_.addHook("onRequest",ot),_.addHook("onResponse",Ot),D(Ye,"/api/auth"),D(at,"/api/data-sources"),D(nt,"/api/project"),D(ut,"/api/queries"),D(Rt,"/api/runner"),D(St,"/api/status"),D(bt,"/api/teams"),D(Nt,"/api/users"),D(Ct,"/api/user-settings"),_.setNotFoundHandler((t,r)=>{if(t.raw.url?.startsWith("/api/")){r.code(404).send({error:"API route not found"});return}r.sendFile("index.html")}),_.setErrorHandler((t,r,o)=>{if(console.error(t),t instanceof s){o.status(t.status).send({error:t.message});return}else o.status(500).send({error:"Internal Server Error"})}),await _.after(),await De(),await At(),_.listen({port:vt,host:br},(t,r)=>{t&&(console.error(t),process.exit(1)),console.log(`Server listening at ${r}`)})})();
+     limit 25;`;return(await t.query(r)).rows.reduce((a,n)=>(a[n.row_key]={table:n.relname,column:n.attname},a),{})},Ze=async(e,t,r)=>{try{console.log(`[PG CONN] Query: ${e}`);let{rows:o,fields:a,command:n,rowCount:i}=await t.query({text:e,rowMode:"array"});if(n==="UPDATE"||n==="INSERT"||n==="DELETE"){if(i!=null&&i>1&&r.allowBulkUpdate!==!0)throw new Error("[PG CONN] Bulk update performed without permission.");return{columns:[{column:"affectedRows",alias:"Affected rows",full:"affectedRows"}],rows:[[i]],query:e}}if(n==="SELECT"){let u=a.map(c=>`'${c.tableID}-${c.columnID}'`),p=await lr(u,t);return{columns:a.map(c=>{let T=p[`${c.tableID}-${c.columnID}`];return{column:T?.column||c.name,alias:c.name,table:T?.table||"",full:T?T.table+"."+T.column:c.name}}),rows:o,query:e}}throw new Error(`[PG CONN] Unsupported command: ${n}`)}catch(o){throw o instanceof s?o:new s(400,o.message)}},mr=async(e,t)=>{await e.query("BEGIN");try{let r=await t();return await e.query("COMMIT"),console.log("[PG CONN] Commit"),r}catch(r){throw await e.query("ROLLBACK"),console.log("[PG CONN] Rollback"),r}},dr=async(e,t)=>{await e.query("BEGIN READ ONLY");try{let r=await t();return console.log("[PG CONN] Read only rollback"),await e.query("ROLLBACK"),r}catch(r){throw console.log("[PG CONN] Rollback"),await e.query("ROLLBACK"),r}},tt=async e=>{let t=await sr(e),r=!1,o=!1,a=async n=>(o||await t.query(`SET search_path TO ${e.schema}`),n());return{dbType:"postgres",dataSource:e,inspectSchema:()=>cr(e,t),executeQuery:(n,i)=>a(()=>i.type==="SELECT"?dr(t,()=>Ze(n,t,i)):mr(t,()=>Ze(n,t,i))),checkConnection:async()=>{},isClosed:()=>r,close:async()=>{if(!r)return r=!0,t.end()}}};var L=async(e,t,r)=>{try{let o;if(t==="mysql")o=await Xe(e);else if(t==="postgres")o=await tt(e);else throw new s(500,`Connection manager for ${t} not found`);return r.__connections?r.__connections.push(o):r.__connections=[o],o}catch(o){throw console.error(o),o instanceof s?o:o?.code==="ECONNREFUSED"?new s(500,"Failed to connect to the database"):new s(500,o.message)}};var z=O(require("node:crypto"));var rt="aes-256-gcm",pr=12,ot=()=>{let e=d.str("SYMM_ENCRYPTION_KEY");if(!e)throw new Error("Missing ENCRYPTION_KEY in environment variables.");let t=Buffer.from(e,"hex");if(t.length!==32)throw new Error("ENCRYPTION_KEY must be a 64-character hex string (256 bits).");return t},fr=e=>{let t=z.default.randomBytes(pr),r=ot(),o=z.default.createCipheriv(rt,r,t),a=o.update(e,"utf8","hex");a+=o.final("hex");let n=o.getAuthTag();return{encrypted:a,iv:t.toString("hex"),tag:n.toString("hex")}},yr=({encrypted:e,iv:t,tag:r})=>{let o=ot(),a=z.default.createDecipheriv(rt,o,Buffer.from(t,"hex"));a.setAuthTag(Buffer.from(r,"hex"));let n=a.update(e,"hex","utf8");return n+=a.final("utf8"),n},J={encrypt:fr,decrypt:yr};var q=(e,t=!1)=>{if(t){let r=J.decrypt({encrypted:e.dbPassword,tag:e.dbPasswordTag,iv:e.dbPasswordIv});return{url:e.dbUrl,user:e.dbUser,database:e.dbDatabase,password:r,port:e.dbPort,schema:e.dbSchema}}return{url:e.dbUrl,user:e.dbUser,database:e.dbDatabase,password:e.dbPassword,port:e.dbPort,schema:e.dbSchema}};var at=[{value:"=",label:"equals"},{value:"<>",label:"not equal"},{value:">",label:"greater than"},{value:">=",label:"greater than or equal"},{value:"<",label:"less than"},{value:"<=",label:"less than or equal"},{value:"LIKE",label:"contains"},{value:"NOT LIKE",label:"not contains"},{value:"IN",label:"in list"},{value:"NOT IN",label:"not in list"},{value:"IS NULL",label:"is null"},{value:"IS NOT NULL",label:"is not null"}],Tr=at.reduce((e,t)=>(e[t.value]=t.label,e),{}),Wo=at.reduce((e,t)=>(e[t.label]=t.value,e),{}),Q=e=>e.map(t=>({label:Tr[t],value:t})),Go=Q(["=","<>",">",">=","<","<=","IN","NOT IN","IS NULL","IS NOT NULL"]),jo=Q(["=","<>","LIKE","NOT LIKE","IN","NOT IN","IS NULL","IS NOT NULL"]),Ko=Q(["=","<>","IS NULL","IS NOT NULL"]),Vo=Q(["=","<>",">",">=","<","<=","IS NULL","IS NOT NULL"]),zo=Q(["IS NULL","IS NOT NULL"]),Jo=Q(["IN","NOT IN"]);var nt=["char","varchar","binary","varbinary","blob","text","enum","set","character","character varying","text","citext","uuid","xml","json","jsonb"];var Xo=["date","datetime","timestamp","timestamptz"].reduce((e,t)=>(e[t]=!0,e),{});var ye=e=>e.fn?e.distinct===!0?`${e.fn} distinct ${e.value}`:`${e.fn} ${e.value}`:e.value;var Te={read_only:10,editor:20,admin:30,owner:40};var C=e=>{let t=Te[e];return r=>Te[r]>=t},st=async e=>{let t=e.routeOptions.config.requireRole;if(t&&!t(e.user.currentTeamRole))throw new s(403,"You are not authorized to perform this action")};var it=w(e=>{e.route({method:"get",url:"/:id",handler:async t=>{let{id:r}=S(t),o=await f.findOne({where:{id:r}});if(!o)throw new s(404,"Data source not found");return{data:o}}}),e.route({method:"get",url:"/",handler:async t=>{let{teamId:r}=v(t);return{data:await f.find({where:{team:{id:r}},order:{createdAt:"DESC"}})}}}),e.route({url:"/",method:"post",config:{requireRole:C("admin")},handler:async t=>{let{teamId:r,ownerId:o,...a}=y(t,Ve),n=f.create({...a,allowUpdate:!!a.allowUpdate,allowInsert:!!a.allowInsert,team:{id:r},owner:{id:o}}),i=await L(q(n),n.dbType,t);try{await i.checkConnection()}catch{throw new s(400,"Cannot connect to the database, please check datasource configuration")}let{tag:u,iv:p,encrypted:c}=J.encrypt(n.dbPassword);return n.dbPassword=c,n.dbPasswordIv=p,n.dbPasswordTag=u,{data:await f.save(n)}}}),e.route({method:"put",url:"/:id",config:{requireRole:C("admin")},handler:async t=>{let{id:r}=S(t),o=y(t),a=await f.findOneBy({id:r});if(!a)throw new s(404,"Data source not found");let n=f.merge(a,o);return await f.save(n),{data:n}}}),e.route({method:"delete",url:"/:id",config:{requireRole:C("admin")},handler:async(t,r)=>g.transaction(async()=>{let{id:o}=S(t);await Promise.all([P.delete({datasource:{id:o}}),I.delete({dataSource:{id:o}})]),await f.delete({id:o})})}),e.route({method:"post",url:"/:id/inspect",handler:async(t,r)=>{let{id:o}=S(t),a=await f.findOne({where:{id:o},select:["id","dbType","dbDatabase","dbPassword","dbPasswordTag","dbPasswordIv","dbPort","dbUrl","dbSchema","dbUser"]});if(!a)throw new Error("Data source not found");a.status="INSPECTING",await f.save(a);let i=await(await L(q(a,!0),a.dbType,t)).inspectSchema();await P.delete({datasource:{id:o}}),await P.insert(i.sort().map(u=>P.create({tableName:u.tableName,columns:u.columns,datasource:{id:o}}))),a.status="READY",a.lastInspected=new Date,await f.save(a)}}),e.route({method:"get",url:"/:id/inspections",handler:async t=>{let{id:r}=S(t);return{data:await P.find({where:{datasource:{id:r}}})}}})});var he=require("typeorm"),ut=w(e=>{e.route({method:"get",url:"/team/:teamId/files",handler:async(t,r)=>{let{teamId:o}=S(t),a={where:{team:{id:o}},order:{name:"ASC"},select:{id:!0,name:!0,updatedAt:!0}},[n=[],i=[]]=await Promise.all([f.find(a),I.find({...a,where:{...a.where,isTrash:!1}})]);return{data:[...n.map(u=>({...u,type:"dataSource"})),...i.map(u=>({...u,type:"query"}))]}}}),e.route({method:"get",url:"/team/:teamId/query",handler:async t=>{let{teamId:r}=S(t),{search:o,size:a}=v(t),n=(parseInt(a)||20)/2,[i,u]=await Promise.all([P.find({where:{tableName:(0,he.Like)(`%${o}%`),datasource:{team:{id:r}}},relations:{datasource:!0},select:{id:!0,tableName:!0,datasource:{name:!0,id:!0}},order:{tableName:"ASC"},take:n}),I.find({where:{name:(0,he.Like)(`%${o}%`),isTrash:!1,dataSource:{team:{id:r}}},relations:{dataSource:!0},select:{id:!0,name:!0,dataSource:{name:!0,id:!0}},order:{name:"ASC"},take:n})]),p=[];return i.forEach(c=>{p.push({name:c.tableName,id:c.id,dataSourceName:c.datasource?.name||"--",dataSourceId:c.datasource?.id||"--",type:"table"})}),u.forEach(c=>{p.push({name:c.name,id:c.id,dataSourceName:c.dataSource?.name||"--",dataSourceId:c.dataSource?.id||"--",type:"query"})}),{data:p}}})});function ct(e,t=void 0){try{if(e){let r=e.split("&"),o={};for(let a of r){let n=a.split(":");o[n[0]]=n[1]}return o}}catch{}return t}var lt=require("typeorm");var mt=w(e=>{e.route({method:"get",url:"/",handler:async t=>{let{dataSourceId:r,teamId:o,limit:a,orderBy:n,name:i}=v(t);if(!r&&!o)throw new s(400,"Either dsId or teamId is required");let u={isTrash:!1};return r&&(u.dataSource={id:r}),o&&(u.team={id:o}),i&&(u.name=(0,lt.Like)(`%${i}%`)),{data:await I.find({where:u,take:a,order:ct(n,{createdAt:"DESC"})})}}}),e.route({method:"get",url:"/:id",handler:async t=>{let{id:r}=S(t),o=await I.findOne({where:{id:r},select:{dataSource:{id:!0}},relations:{dataSource:!0}});return o?{data:o}:{status:404,data:"Query not found"}}}),e.route({method:"post",url:"/",config:{requireRole:C("editor")},handler:async t=>{let r=y(t),o=await f.findOne({where:{id:r.dataSourceId},relations:{team:!0}}),a=await I.save(I.create({name:r.name,isTrash:!1,opts:r.opts,team:{id:o?.team.id},dataSource:{id:r.dataSourceId}}));return console.log("Created query!"),{data:a}}}),e.route({method:"patch",url:"/:id",config:{requireRole:C("editor")},handler:async t=>{let{id:r}=S(t),o=y(t);if(!(await I.update(r,o)).affected)throw new s(404,"Query not found");return{data:await I.findOneBy({id:r})}}}),e.route({method:"delete",url:"/:id",config:{requireRole:C("editor")},handler:async t=>g.transaction(async()=>{let{id:r}=S(t);if(!(await I.delete({id:r})).affected)return{status:404,data:"Query not found"}})})});var X=e=>{let t=e.distinct===!0?"distinct ":"";return`${e.fn}(${t}${e.value})`},$={YEAR:e=>`EXTRACT(YEAR FROM ${e.value})`,MONTH:e=>`EXTRACT(MONTH FROM ${e.value})`,DAY:e=>`EXTRACT(DAY FROM ${e.value})`,SUM:e=>`COALESCE(SUM(${e.distinct===!0?"distinct ":""}${e.value}), 0)`,AVG:X,MAX:X,MIN:X,COUNT:X};var Z=e=>{let t=e.distinct===!0?"distinct ":"";return`${e.fn}(${t}${e.value})`},H={YEAR:e=>`YEAR(${e.value})`,MONTH:e=>`MONTH(${e.value})`,DAY:e=>`DAY(${e.value})`,SUM:e=>{let t=e.distinct===!0?"distinct ":"";return`coalesce(${e.fn}(${t}${e.value}), 0)`},AVG:Z,MAX:Z,MIN:Z,COUNT:Z};var dt=["SUM","COUNT","AVG","MAX","MIN"],hr=["YEAR","MONTH","DAY",...dt],gr=hr.reduce((e,t)=>(e[t]=!0,e),{}),wr=dt.reduce((e,t)=>(e[t]=!0,e),{}),ee=e=>gr[e],pt=e=>wr[e],ft=(e,t)=>e.fn&&ee(e.fn)?(t==="postgres"?$:H)[e.fn](e):e.value;var te=e=>typeof e=="string",yt=e=>{let t="SELECT ";if(e.columns&&e.columns.length>0?t+=e.columns.join(", "):t+="*",e.table&&(t+=` FROM ${e.table}`),e.joins&&e.joins.length>0&&e.joins.forEach(r=>{t+=` ${r.type} JOIN ${r.table} ON ${r.on}`}),e.where&&(t+=` WHERE ${e.where}`),e.groupBy&&e.groupBy.length>0&&(t+=` GROUP BY ${e.groupBy.join(", ")}`),e.having&&(t+=` HAVING ${e.having}`),e.orderBy&&e.orderBy.length>0){let r=e.orderBy.reduce((a,n)=>(a[n.column]=n.direction,a),{}),o=Object.entries(r).map(([a,n])=>`${a} ${n}`);t+=` ORDER BY ${o.join(", ")}`}return e.limit!==void 0&&(t+=` LIMIT ${e.limit}`),e.offset!==void 0&&(t+=` OFFSET ${e.offset}`),t},Y=(e,t)=>{let{column:r,operator:o,value:a,fn:n}=e,i=ft({value:r,fn:n},t);switch(o){case"IS NULL":case"IS NOT NULL":return`${i} ${o}`;case"IN":case"NOT IN":let u=a?.map(l=>te(l.value)?`'${l.value}'`:l.value).join(", ");return`${i} ${o} (${u})`;case"LIKE":return`${i} ${t==="postgres"?"ILIKE":"LIKE"} '%${a?.[0].value}%'`;case"NOT LIKE":return`${i} ${t==="postgres"?"NOT ILIKE":"NOT LIKE"} '%${a?.[0].value}%'`;default:let T=a?.[0],N;return te(T?.value)&&T?.isColumn!==!0?N=`'${T?.value}'`:N=T?.value,`${i} ${o} ${N}`}};var re=class{constructor(t="mysql"){this.dialect=t,this.skeleton={type:"SELECT"}}addWhere(t){let r=Y(t,this.dialect);if(this.skeleton.where){let o=t.connector||"AND";this.skeleton.where+=` ${o} ${r}`}else this.skeleton.where=r;return this}addWhereRaw(t,r="AND"){return this.skeleton.where?this.skeleton.where+=` ${r} ${t}`:this.skeleton.where=t,this}clearWhere(){return this.skeleton.where=void 0,this}addHaving(t){let r=Y(t,this.dialect);if(this.skeleton.having){let o=t.connector||"AND";this.skeleton.having+=` ${o} ${r}`}else this.skeleton.having=r;return this}clearHaving(){return this.skeleton.having=void 0,this}addOrderBy(...t){return this.skeleton.orderBy||(this.skeleton.orderBy=[]),this.skeleton.orderBy.push(...t),this}clearOrderBy(){return this.skeleton.orderBy=void 0,this}setLimit(t){return this.skeleton.limit=t,this}setOffset(t){return this.skeleton.offset=t,this}addGroupBy(t){this.skeleton.groupBy||(this.skeleton.groupBy=[]);let r=this.skeleton.groupBy.findIndex(o=>o===t);return r>-1?this.skeleton.groupBy[r]=t:this.skeleton.groupBy.push(t),this}setTable(t){return this.skeleton.table=t,this}addJoin(...t){return this.skeleton.joins||(this.skeleton.joins=[]),this.skeleton.joins.push(...t),this}selectColumns(t){if(this.skeleton.type!=="SELECT")throw new Error("Column selection is only supported for SELECT queries");return this.skeleton.columns=t,this}toSQL(){return yt(this.skeleton)}};var ht=require("typeorm");var gt=async(e,t)=>{let{table:r,datasourceId:o,filters:a,joins:n,orderBy:i,size:u,page:p,columns:c,groupBy:T,searchAll:N}=t,l=await f.findOne({where:{id:o},select:["id","dbType","dbDatabase","dbPassword","dbPasswordTag","dbPasswordIv","dbPort","dbUrl","dbSchema","dbUser"]}),E=[r],M=[];if(!l)throw new s(404,"Data source not found");let _=new re(l.dbType);_.setTable(r),_.setLimit(u||20),_.setOffset(u*p),a?.forEach(m=>{m.fn&&pt(m.fn)?_.addHaving(m):_.addWhere(m)}),n&&(_.addJoin(...n),n.forEach(m=>{E.push(m.table)}));let Re=br(t);Re&&_.addOrderBy(...Re.map(m=>({direction:m.direction,column:ge(m.column,l.dbType)}))),T&&T.length>0&&T.forEach(m=>_.addGroupBy(Sr(m,l.dbType)));let Qt=await P.find({where:{tableName:(0,ht.In)(E),datasource:{id:o}}});for(let m of Qt)if(m.columns)for(let U of m.columns)M.push({column:U.name,table:m.tableName||"",full:`${m.tableName}.${U.name}`,type:U.type});let G;if(c&&c.length>0?G=c.map(m=>Rr(m,l.dbType)):G=M.map(m=>`${m.full} as "${m.column}"`),_.selectColumns(G),N){let m=M.filter(U=>nt.includes(U.type)&&G.some(oe=>oe.startsWith(U.full)));if(m.length>0){let U=m.map(oe=>`LOWER(${oe.full}) LIKE '%${N.toLowerCase()}%'`);_.addWhereRaw(`(${U.join(" OR ")})`,"AND")}}return{...await(await L(q(l,!0),l.dbType,e)).executeQuery(_.toSQL(),{type:"SELECT",allowBulkUpdate:!1}),tables:E,allColumns:M}},wt=async(e,t)=>{let r=await f.findOne({where:{id:t.datasourceId},select:["id","dbType","dbDatabase","dbPassword","dbPasswordTag","dbPasswordIv","dbPort","dbUrl","dbSchema","dbUser","allowUpdate"]});if(!r)throw new s(404,"Data source not found");if(!r.allowUpdate)throw new s(403,"This datasource does not allow update operations");let o=t.values.map(({value:u,column:p})=>typeof u=="string"?u&&u.startsWith("=")?`${p}=${u.substring(1)}`:`${p}='${u}'`:`${p}='${u}'`).join(", "),a=t.filters.map(u=>Y(u,r.dbType)).join(" AND "),n=`UPDATE ${t.table} SET ${o} WHERE ${a}`;return(await L(q(r,!0),r.dbType,e)).executeQuery(n,{type:"UPDATE",allowBulkUpdate:!1})},Et=async(e,t)=>{let r=await f.findOne({where:{id:t.datasourceId},select:["id","dbType","dbDatabase","dbPassword","dbPasswordTag","dbPasswordIv","dbPort","dbUrl","dbSchema","dbUser","allowInsert"]});if(!r)throw new s(404,"Data source not found");if(!r.allowInsert)throw new s(403,"This datasource does not allow insert operations");let{keys:o,values:a}=Er(t.values),n=`INSERT INTO ${t.table} (${o}) VALUES (${a})`;return(await L(q(r,!0),r.dbType,e)).executeQuery(n,{type:"INSERT",allowBulkUpdate:!1})},Er=e=>{let t=e.map(({column:o})=>o).join(", "),r=e.map(({value:o})=>typeof o=="string"?o&&o.startsWith("=")?o.substring(1):`'${o}'`:o).join(", ");return{keys:t,values:r}},Rr=(e,t)=>{if(e.fn){if(ee(e.fn))return`${(t==="postgres"?$:H)[e.fn](e)} as "${ye(e)}"`;throw new Error("Function not allowed: "+e.fn)}return`${e.value} as "${e.value}"`},Sr=(e,t)=>{if(e.fn){if(ee(e.fn))return(t==="postgres"?$:H)[e.fn]({...e,value:Tt(e.value,t)});throw new Error("Function not allowed: "+e.fn)}return Tt(e.value,t)},ge=(e,t)=>t==="postgres"?`"${e}"`:t==="mysql"?`\`${e}\``:e,Tt=(e,t)=>{let[r,o]=e.split(".");return ge(r,t)+"."+ge(o,t)},br=e=>{if(e.orderBy){if(e.columns&&e.columns.length>0){let t=e.columns.reduce((r,o)=>(r.add(ye(o)),r),new Set);return e.orderBy.filter(r=>t.has(r.column))}return e.orderBy}};var Rt=e=>{if(!e.table)throw new s(400,"Table is required")},Cr=["--",";","DROP","drop"],St=e=>{if(te(e.value)&&e.value.startsWith("=")){let t=e.value;Cr.forEach(r=>{if(t.includes(r))throw new s(400,"Invalid input value for "+e.column)})}},bt=e=>{if(!e.table)throw new s(400,"Table is required");e.values.forEach(St)},Ct=e=>{if(!e.table)throw new s(400,"Table is required");e.values.forEach(St)};var Nt=w(e=>{e.route({method:"post",url:"/select",handler:async t=>{let r=y(t,Rt);return{data:await gt(t,r)}}}),e.route({method:"post",url:"/insert",config:{requireRole:C("editor")},handler:async t=>{let r=y(t,bt);return{data:await Et(t,r)}}}),e.route({method:"post",url:"/update",config:{requireRole:C("editor")},handler:async t=>{let r=y(t,Ct);return{data:await wt(t,r)}}})});var It=w(e=>{e.get("/",{config:{isPublic:!0}},async()=>({data:{active:!0,version:d.str("SERVER_VERSION")}}))});var Ot=w(e=>{e.route({method:"get",url:"/:id/users",handler:async t=>{let{id:r}=S(t),o=await x.findOne({where:{id:r},relations:{users:{user:!0}}});if(!o)throw new s(404,"Team not found");return{data:o.users.map(a=>({role:a.role,id:a.user.id,name:a.user.username}))}}}),e.route({method:"post",url:"/",config:{requireRole:C("editor")},handler:async t=>g.transaction(async()=>{let r=t.user.id,o=y(t),a=R.create();a.id=r;let n=x.create(o);await x.save(n);let i=b.create({user:a,team:n});return await b.save(i),{data:n}})}),e.route({method:"patch",url:"/:id/user-role",config:{requireRole:C("admin")},handler:async t=>{let{id:r}=S(t),{role:o,userId:a}=y(t,({role:i})=>{if(i==="owner")throw new s(400,"Only one owner is allowed")});if((await b.findOneBy({user:{id:a},team:{id:r}}))?.role==="owner")throw new s(400,"Cannot change owner role");await b.update({user:{id:a},team:{id:r}},{role:o})}}),e.route({method:"delete",url:"/:id",config:{requireRole:C("admin")},handler:async t=>g.transaction(async()=>{let{id:r}=S(t),{userId:o}=v(t);if((await b.findOneBy({user:{id:o},team:{id:r}}))?.role==="owner")throw new s(400,"Cannot delete team owner");await R.update(o,{currentTeam:null}),await b.delete({user:{id:o},team:{id:r}}),await R.delete({id:o})})})});var we=O(require("bcryptjs")),W=async e=>{let t=await we.default.genSalt(10);return we.default.hash(e,t)};var At=w(e=>{e.route({method:"get",url:"/",handler:async t=>{let r=await R.findOne({where:{id:t.user.id},relations:{currentTeam:{team:!0}}});if(!r)throw new s(404,"User not found");return{data:{id:r.id,teamId:r.currentTeam?.team.id,teamName:r.currentTeam?.team.name,teamRole:r.currentTeam?.role,username:r.username}}}}),e.route({method:"patch",url:"/",handler:async t=>{let r=t.user.id,o=y(t);if(o.password&&(o.password=await W(o.password)),!(await R.update(r,o)).affected)throw new s(404,"User not found");let n=await R.findOne({where:{id:r},relations:{currentTeam:{team:!0}}});return{data:{id:n?.id,teamId:n?.currentTeam?.team.id,teamName:n?.currentTeam?.team.name,teamRole:n?.currentTeam?.role,username:n?.username}}}}),e.route({method:"post",url:"/",handler:async t=>g.transaction(async()=>{let r=y(t),o=await W(r.password),a=await R.save(R.create({username:r.username,password:o})),n=await b.save(b.create({role:"read_only",team:{id:r.teamId},user:{id:a.id}}));await R.update(a.id,{currentTeam:{id:n.id}})})})});var _t=w(e=>{e.route({method:"get",url:"/",handler:async t=>{let r=t.user.id,o=await F.findOneBy({user:{id:r}});return o||(o=await F.save(F.create({user:{id:r}}))),{data:o}}}),e.route({method:"patch",url:"/",handler:async t=>{let{settings:r}=y(t);if(!r.id)throw new s(400,"Settings id is required!");if(!(await F.update(r.id,r)).affected)throw new s(404,"You do not own these settings!");return{data:await F.findOneBy({id:r.id})}}})});var Lt=require("node:path");var Nr=e=>e.routeOptions.config.isPublic?!0:!e.url.startsWith("/api/"),Pt=async e=>{if(Nr(e))return;let t=e.headers.authorization;if(!t)throw new s(401,"Missing auth token");let[r,o]=t.split(" ");try{let{userId:a}=await Ye(o),n=await b.findOneBy({user:{id:a}});if(!n)throw new s(401,"User is not part of a team");e.user={id:a,currentTeamRole:n.role}}catch{throw new s(401,"Unauthorized")}};var Dt=(e,t)=>{e.__connections&&e.__connections.forEach(r=>{r.close()})};var qt=O(require("@fastify/cookie"));var Ee={teamName:"Default Team",username:"admin",password:"admin"},Ir=async()=>{let e=await x.findOneBy({});return e||x.save(x.create({name:Ee.teamName}))},Ut=async()=>{let e=await b.findOne({where:{role:"owner"},relations:{user:!0}});if(e)return e.user;let t=await Ir(),r=await W(Ee.password),o=await R.save(R.create({username:Ee.username,password:r})),a=await b.save(b.create({user:o,team:t,role:"owner"}));return await R.update(o.id,{currentTeam:a}),o};var A=(0,xt.default)(),Ft=d.num("PORT",4466),Or=d.str("ALLOWED_ORIGINS","").split(",").map(e=>e.trim()),Ar="0.0.0.0",_r=[`http://localhost:${Ft}`,...Or];function D(e,t){A.register(e,{prefix:t}),console.log("Registered "+t)}(async function(){Ce(),await Qe(),await A.register(qt.default,{}),await A.register(vt.default,{origin:(t,r)=>{!t||_r.includes(t)?r(null,!0):r(new Error("Not allowed by CORS"),!1)},methods:["GET","POST","PUT","PATCH","DELETE","OPTIONS"],credentials:!0}),await A.register(Mt.default,{root:(0,Lt.join)(__dirname,"web")}),A.get("/",(t,r)=>{r.sendFile("index.html")}),A.addHook("onRequest",Pt),A.addHook("onRequest",st),A.addHook("onResponse",Dt),D(Ke,"/api/auth"),D(it,"/api/data-sources"),D(ut,"/api/project"),D(mt,"/api/queries"),D(Nt,"/api/runner"),D(It,"/api/status"),D(Ot,"/api/teams"),D(At,"/api/users"),D(_t,"/api/user-settings"),A.setNotFoundHandler((t,r)=>{if(t.raw.url?.startsWith("/api/")){r.code(404).send({error:"API route not found"});return}r.sendFile("index.html")}),A.setErrorHandler((t,r,o)=>{if(console.error(t),t instanceof s){o.status(t.status).send({error:t.message});return}else o.status(500).send({error:"Internal Server Error"})}),await A.after(),await Me(),await Ut(),A.listen({port:Ft,host:Ar},(t,r)=>{t&&(console.error(t),process.exit(1)),console.log(`Server listening at ${r}`)})})();