@marinoscar/platform-api 0.0.0-stage → 0.1.0-next.3

package/dist/telemetry/connection/telemetry-connection.service.js

@@ -0,0 +1,461 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+var TelemetryConnectionService_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TelemetryConnectionService = exports.TELEMETRY_CONNECTION_REFRESH_MS = exports.DEPLOYMENT_ADMIN_MISSING_MESSAGE = exports.DEPLOYMENT_READER_MISSING_MESSAGE = void 0;
+const common_1 = require("@nestjs/common");
+const config_1 = require("@nestjs/config");
+const ports_1 = require("../ports");
+const telemetry_connection_schema_1 = require("./telemetry-connection.schema");
+// =============================================================================
+// TelemetryConnectionService — THE resolver of the GreptimeDB connection
+// (issue #558, epic #528)
+// =============================================================================
+//
+// ONE PRECEDENCE RULE, NO PER-FIELD MERGE — THE HOST MODE DECIDES WHO OWNS
+// THE WHOLE CONNECTION (issue #570):
+//
+//   1. a connection is STORED with a CUSTOM host (a literal an administrator
+//      typed: GreptimeDB lives somewhere this deployment did not put it)
+//        → the row is the connection, wholly: host, port, database, both
+//          users, and the two passwords from the credential store. Nothing is
+//          borrowed from the environment, field by field or otherwise.
+//   2. a connection is STORED with an AUTOMATIC host (`host: null`) — "the
+//      GreptimeDB deployed with this application" (issues #562, #570)
+//        → the DEPLOYMENT is the connection, wholly: the deployment host
+//          (`GREPTIME_HOST` when non-blank, else `TELEMETRY_DEFAULT_HOST`, the
+//          compose service name), `GREPTIME_PG_PORT`, `GREPTIME_DB`, and the
+//          `GREPTIME_READER_*` / `GREPTIME_ADMIN_*` logins. The deployment
+//          provisioned that GreptimeDB's users, so it is the only party that
+//          knows their passwords; an administrator never supplies them. Any
+//          port, database, user or credential-store password attached to
+//          such a row (rows saved before #570 carry them) is IGNORED here —
+//          not deleted: the next save in automatic mode deletes the stored
+//          passwords. The source still reads `stored` (a row exists, it has a
+//          version, "revert" applies) with `hostMode: 'auto'` and
+//          `deploymentManaged: true`.
+//   3. nothing is stored → the DEPLOYMENT DEFAULT, derived from `GREPTIME_*`
+//      (the `greptime` block of `config/configuration.ts`), when it names a
+//      host. Also automatic and deployment-managed: it is the same GreptimeDB
+//      rule 2 resolves to (source `environment`).
+//   4. otherwise none — telemetry is not available.
+//
+// The fingerprint carries the EFFECTIVE host and the version of the password
+// actually used (the credential's `updatedAt` for rule 1, a constant for the
+// environment), so moving between a custom and an automatic connection, or the
+// deployment host moving, rebuilds the pools.
+//
+// WHY THE ENVIRONMENT IS STILL A SOURCE AT ALL. The `GREPTIME_*` variables
+// cannot go away: the telemetry overlay provisions the GreptimeDB container's
+// users and the OTel collector's writer login from them. They describe the
+// GreptimeDB the deployment runs, so they ARE its connection; the admin page
+// only overrides them by pointing at a different (custom) host.
+// A per-field merge was rejected: "host from the form, password from the
+// environment" is a connection nobody configured, and it is impossible to
+// explain on a status page.
+//
+// WHAT IS CACHED, AND WHAT IS NOT
+// -----------------------------------------------------------------------------
+//
+// `GreptimeClient.isConfigured()` and friends are SYNCHRONOUS (the export
+// gate, the explorer's preconditions and the retention job all ask them
+// without awaiting), so this service keeps a SNAPSHOT: the non-secret half of
+// the resolved connection, plus, per login, whether a password is present and
+// a version marker (the credential's `updatedAt` when stored; a constant for
+// the environment). The snapshot is refreshed once at boot (awaited, errors
+// swallowed — boot never fails on it), every `TELEMETRY_CONNECTION_REFRESH_MS`
+// on an unref'd interval, and immediately after an admin save on this
+// instance. So a save reaches every instance within one interval, no restart.
+//
+// ⚠ PASSWORDS ARE NEVER CACHED HERE. `resolveCredentials` reads the password
+// from the credential store at the moment a pool is built and hands it
+// straight to `pg` — the `CredentialsService.getSecret` contract, and the same
+// trade `StorageConfigService` documents. The refresh itself only calls
+// `CredentialsService.describe`, which cannot decrypt anything.
+//
+// A FAILED REFRESH KEEPS THE LAST SNAPSHOT (and logs once per outage), for the
+// reason `TelemetrySettingsService` keeps the gate: flipping to "not
+// configured" on a database blip would drop telemetry exactly when an
+// operator needs it most.
+//
+// ⚠ NEVER LOG A CREDENTIAL. Nothing here logs a password or a connection
+// string; the snapshot does not hold one.
+// =============================================================================
+/**
+ * What an administrator is told when the GreptimeDB deployed with this
+ * application lacks a login. Administrator language: no file, variable or
+ * command names — fixing it is an application update, not a form field.
+ */
+exports.DEPLOYMENT_READER_MISSING_MESSAGE = 'The GreptimeDB deployed with this application has no reader login configured. ' +
+    'Update the application to provision it.';
+exports.DEPLOYMENT_ADMIN_MISSING_MESSAGE = 'The GreptimeDB deployed with this application has no admin login configured, so retention ' +
+    'cannot be applied. Update the application to provision it.';
+/** How often every instance re-reads the stored connection. */
+exports.TELEMETRY_CONNECTION_REFRESH_MS = 5_000;
+/** Version marker of an environment-supplied password: it cannot change without a restart. */
+const ENVIRONMENT_CREDENTIAL_VERSION = 'environment';
+const DEFAULT_PG_PORT = telemetry_connection_schema_1.TELEMETRY_DEFAULT_PG_PORT;
+const DEFAULT_DATABASE = telemetry_connection_schema_1.TELEMETRY_DEFAULT_DATABASE;
+let TelemetryConnectionService = TelemetryConnectionService_1 = class TelemetryConnectionService {
+    settingsStore;
+    credentials;
+    logger = new common_1.Logger(TelemetryConnectionService_1.name);
+    environment;
+    /**
+     * Seeded from the environment so the sync accessors have an answer before
+     * the first refresh (and so a unit test can build a client with no
+     * database). `onModuleInit` replaces it with the real resolution.
+     */
+    snapshot;
+    refreshTimer = null;
+    refreshFailing = false;
+    lastInvalidRowWarned = false;
+    constructor(configService, settingsStore, credentials) {
+        this.settingsStore = settingsStore;
+        this.credentials = credentials;
+        const raw = configService.get('greptime') ?? {};
+        this.environment = {
+            host: (raw.host ?? '').trim(),
+            pgPort: raw.pgPort ?? DEFAULT_PG_PORT,
+            database: raw.database || DEFAULT_DATABASE,
+            readerUser: raw.readerUser ?? '',
+            readerPassword: raw.readerPassword ?? '',
+            adminUser: raw.adminUser ?? '',
+            adminPassword: raw.adminPassword ?? '',
+            available: raw.available ?? false,
+        };
+        this.snapshot = this.environmentSnapshot();
+    }
+    /** One awaited refresh (never throws), then the interval. */
+    async onModuleInit() {
+        await this.refreshSafely();
+        this.refreshTimer = setInterval(() => {
+            void this.refreshSafely();
+        }, exports.TELEMETRY_CONNECTION_REFRESH_MS);
+        // Never the reason a process (or a test run) stays alive.
+        this.refreshTimer.unref?.();
+    }
+    onModuleDestroy() {
+        if (this.refreshTimer) {
+            clearInterval(this.refreshTimer);
+            this.refreshTimer = null;
+        }
+    }
+    // ---------------------------------------------------------------------------
+    // Synchronous accessors, answered from the snapshot
+    // ---------------------------------------------------------------------------
+    /** Where the connection in force came from. */
+    get source() {
+        return this.snapshot.source;
+    }
+    /**
+     * Where GreptimeDB is in this deployment: `GREPTIME_HOST` when non-blank,
+     * else `TELEMETRY_DEFAULT_HOST`. What an automatic (null) host resolves to.
+     */
+    get deploymentHost() {
+        return (0, telemetry_connection_schema_1.telemetryDeploymentHost)(this.environment.host);
+    }
+    /** The deployment's own GreptimeDB connection (non-secret), whatever is in force. */
+    describeDeployment() {
+        const env = this.environment;
+        return {
+            host: this.deploymentHost,
+            pgPort: env.pgPort,
+            database: env.database,
+            readerUser: env.readerUser,
+            adminUser: env.adminUser || null,
+            readerConfigured: Boolean(env.readerUser && env.readerPassword),
+            adminConfigured: Boolean(env.adminUser && env.adminPassword),
+        };
+    }
+    /**
+     * Why the connection in force cannot be used, in administrator language, or
+     * null. Only a deployment-managed connection has an answer here: its gaps
+     * are the deployment's, which nothing on the admin page can fill. `role`
+     * `admin` also reports a missing admin login (retention).
+     */
+    configurationProblem(role = 'reader') {
+        const { deploymentManaged, reader, admin } = this.snapshot;
+        if (!deploymentManaged)
+            return null;
+        if (!(reader.user && reader.passwordSet))
+            return exports.DEPLOYMENT_READER_MISSING_MESSAGE;
+        if (role === 'admin' && !(admin && admin.user && admin.passwordSet))
+            return exports.DEPLOYMENT_ADMIN_MISSING_MESSAGE;
+        return null;
+    }
+    /** The GreptimeDB database telemetry is written to. */
+    get database() {
+        return this.snapshot.database;
+    }
+    /** A host, a reader login and its password — i.e. telemetry can be read. */
+    isConfigured() {
+        const { source, host, reader } = this.snapshot;
+        return source !== 'none' && Boolean(host && reader.user && reader.passwordSet);
+    }
+    /** The admin login (retention, `SHOW CREATE DATABASE`) is usable as well. */
+    isAdminConfigured() {
+        const { admin } = this.snapshot;
+        return this.isConfigured() && Boolean(admin && admin.user && admin.passwordSet);
+    }
+    /**
+     * An opaque identity of the connection a login would use right now, or
+     * null when that login is not configured. `GreptimeClient` keys its pools by
+     * it: a different answer means the pool it holds is stale.
+     */
+    fingerprint(role) {
+        if (role === 'reader' ? !this.isConfigured() : !this.isAdminConfigured()) {
+            return null;
+        }
+        return fingerprintOf(this.snapshot, role);
+    }
+    /** A copy of the snapshot. Non-secret. */
+    describeSnapshot() {
+        return structuredClone(this.snapshot);
+    }
+    // ---------------------------------------------------------------------------
+    // Credentials, at the moment of use
+    // ---------------------------------------------------------------------------
+    /**
+     * The full connection for one login, password included, or null when that
+     * login is not configured (or its stored password has since gone).
+     *
+     * ⚠ Holds a plaintext password. Call it when building a pool and let the
+     * result go out of scope; never cache it, never log it.
+     */
+    async resolveCredentials(role) {
+        const snapshot = this.snapshot;
+        const fingerprint = this.fingerprint(role);
+        const login = role === 'reader' ? snapshot.reader : snapshot.admin;
+        if (!fingerprint || !login)
+            return null;
+        const password = await this.passwordOf(role, snapshot);
+        if (!password)
+            return null;
+        return {
+            host: snapshot.host,
+            automaticHost: snapshot.hostMode === 'auto',
+            port: snapshot.pgPort,
+            database: snapshot.database,
+            user: login.user,
+            password,
+            fingerprint,
+        };
+    }
+    /**
+     * The password the connection IN FORCE would use for this login — the
+     * deployment's when it is deployment-managed (the environment source, or a
+     * stored automatic host), the credential store's for a custom host, none
+     * when there is no connection. For the connection test's "blank means the
+     * current one".
+     *
+     * ⚠ Plaintext. Same rules as `resolveCredentials`.
+     */
+    async currentPassword(role) {
+        return this.passwordOf(role, this.snapshot);
+    }
+    /**
+     * The deployment's own password for this login (`GREPTIME_*`), or null when
+     * it provisions none. What an automatic connection uses — and the only
+     * password a connection test of an automatic host may use.
+     *
+     * ⚠ Plaintext. Same rules as `resolveCredentials`.
+     */
+    deploymentPassword(role) {
+        const value = role === 'reader' ? this.environment.readerPassword : this.environment.adminPassword;
+        return value || null;
+    }
+    async passwordOf(role, snapshot) {
+        if (snapshot.deploymentManaged)
+            return this.deploymentPassword(role);
+        if (snapshot.source === 'none')
+            return null;
+        return this.credentials.getSecret(telemetry_connection_schema_1.TELEMETRY_GREPTIME_CREDENTIAL_PURPOSE, role);
+    }
+    // ---------------------------------------------------------------------------
+    // Refresh
+    // ---------------------------------------------------------------------------
+    /**
+     * Re-reads the stored row and the credentials' metadata, replaces the
+     * snapshot, and returns the full (non-secret) state. THROWS on a failed
+     * read, leaving the snapshot as it was — for a caller that must know (an
+     * admin read or write). The background refresh uses `refreshSafely`.
+     */
+    async refresh() {
+        const [row, reader, admin] = await Promise.all([
+            this.settingsStore.readRow(telemetry_connection_schema_1.TELEMETRY_CONNECTION_SETTINGS_KEY),
+            this.credentials.describe(telemetry_connection_schema_1.TELEMETRY_GREPTIME_CREDENTIAL_PURPOSE, 'reader'),
+            this.credentials.describe(telemetry_connection_schema_1.TELEMETRY_GREPTIME_CREDENTIAL_PURPOSE, 'admin'),
+        ]);
+        const credentials = { reader, admin };
+        let stored = null;
+        let snapshot;
+        if (!row) {
+            snapshot = this.environmentSnapshot();
+            this.lastInvalidRowWarned = false;
+        }
+        else {
+            const parsed = telemetry_connection_schema_1.telemetryConnectionValueSchema.safeParse(row.value);
+            if (parsed.success) {
+                stored = parsed.data;
+                snapshot =
+                    parsed.data.host === null
+                        ? // Automatic: the deployment, wholly. Stored credentials are ignored (issue #570).
+                            this.deploymentSnapshot('stored', this.deploymentHost)
+                        : storedSnapshot(parsed.data, credentials);
+                this.lastInvalidRowWarned = false;
+            }
+            else {
+                // A row exists but does not validate (hand-edited). It is still "the
+                // stored connection" — silently falling back to the environment would
+                // put telemetry on a connection nobody chose — so it resolves as
+                // stored-and-unusable until an administrator saves or resets it.
+                if (!this.lastInvalidRowWarned) {
+                    this.lastInvalidRowWarned = true;
+                    this.logger.warn('The stored telemetry connection does not validate ' +
+                        `(${parsed.error.issues.map((issue) => issue.path.join('.') || '(root)').join(', ')}); ` +
+                        'telemetry is unavailable until it is saved again or reset at /admin/settings/telemetry.');
+                }
+                snapshot = unusableStoredSnapshot();
+            }
+        }
+        const before = this.snapshot;
+        this.snapshot = snapshot;
+        if (before.source !== snapshot.source) {
+            this.logger.log(`Telemetry connection source is now "${snapshot.source}"`);
+        }
+        return {
+            snapshot: structuredClone(snapshot),
+            stored,
+            row: row ? { version: row.version, updatedAt: row.updatedAt, updatedByUser: row.updatedBy } : null,
+            credentials,
+        };
+    }
+    /** `refresh`, but never throws: a failure keeps the last snapshot and logs once per outage. */
+    async refreshSafely() {
+        try {
+            await this.refresh();
+            if (this.refreshFailing) {
+                this.refreshFailing = false;
+                this.logger.log('Telemetry connection readable again');
+            }
+            return true;
+        }
+        catch (error) {
+            if (!this.refreshFailing) {
+                this.refreshFailing = true;
+                this.logger.warn(`Could not read the telemetry connection; keeping the last known one (source "${this.snapshot.source}"): ` +
+                    `${error instanceof Error ? error.message : String(error)}`);
+            }
+            return false;
+        }
+    }
+    /** The deployment default, as a snapshot (source `none` when it names no host). */
+    environmentSnapshot() {
+        const env = this.environment;
+        if (!env.host) {
+            return {
+                source: 'none',
+                host: '',
+                hostMode: 'auto',
+                deploymentManaged: false,
+                pgPort: env.pgPort,
+                database: env.database,
+                reader: { user: '', passwordSet: false, version: null },
+                admin: null,
+            };
+        }
+        // `GREPTIME_HOST` IS the deployment host, so this is an automatic host too.
+        return this.deploymentSnapshot('environment', env.host);
+    }
+    /**
+     * The deployment's GreptimeDB, every field from `GREPTIME_*`: what the
+     * environment source and a stored automatic host both resolve to.
+     */
+    deploymentSnapshot(source, host) {
+        const env = this.environment;
+        return {
+            source,
+            host,
+            hostMode: 'auto',
+            deploymentManaged: true,
+            pgPort: env.pgPort,
+            database: env.database,
+            reader: {
+                user: env.readerUser,
+                passwordSet: Boolean(env.readerPassword),
+                version: env.readerPassword ? ENVIRONMENT_CREDENTIAL_VERSION : null,
+            },
+            admin: env.adminUser
+                ? {
+                    user: env.adminUser,
+                    passwordSet: Boolean(env.adminPassword),
+                    version: env.adminPassword ? ENVIRONMENT_CREDENTIAL_VERSION : null,
+                }
+                : null,
+        };
+    }
+};
+exports.TelemetryConnectionService = TelemetryConnectionService;
+exports.TelemetryConnectionService = TelemetryConnectionService = TelemetryConnectionService_1 = __decorate([
+    (0, common_1.Injectable)(),
+    __param(1, (0, common_1.Inject)(ports_1.TELEMETRY_SETTINGS_STORE)),
+    __param(2, (0, common_1.Inject)(ports_1.TELEMETRY_CREDENTIAL_STORE)),
+    __metadata("design:paramtypes", [config_1.ConfigService, Object, Object])
+], TelemetryConnectionService);
+/** A stored CUSTOM connection: the row and the credential store, wholly. */
+function storedSnapshot(value, credentials) {
+    const login = (user, info) => ({
+        user,
+        passwordSet: info !== null,
+        version: info ? info.updatedAt.toISOString() : null,
+    });
+    return {
+        source: 'stored',
+        host: value.host,
+        hostMode: 'custom',
+        deploymentManaged: false,
+        pgPort: value.pgPort,
+        database: value.database,
+        reader: login(value.readerUser, credentials.reader),
+        admin: value.adminUser ? login(value.adminUser, credentials.admin) : null,
+    };
+}
+function unusableStoredSnapshot() {
+    return {
+        source: 'stored',
+        host: '',
+        hostMode: 'auto',
+        deploymentManaged: false,
+        pgPort: DEFAULT_PG_PORT,
+        database: DEFAULT_DATABASE,
+        reader: { user: '', passwordSet: false, version: null },
+        admin: null,
+    };
+}
+function fingerprintOf(snapshot, role) {
+    const login = role === 'reader' ? snapshot.reader : snapshot.admin;
+    return JSON.stringify([
+        snapshot.source,
+        snapshot.hostMode,
+        // The EFFECTIVE host, so an automatic host whose deployment host changed
+        // yields a new fingerprint (and new pools).
+        snapshot.host,
+        snapshot.pgPort,
+        snapshot.database,
+        login?.user ?? '',
+        login?.version ?? '',
+    ]);
+}
+//# sourceMappingURL=telemetry-connection.service.js.map

package/dist/telemetry/connection/telemetry-connection.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"telemetry-connection.service.js","sourceRoot":"","sources":["../../../src/telemetry/connection/telemetry-connection.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,2CAA2F;AAC3F,2CAA+C;AAE/C,oCAMkB;AAClB,+EAUuC;AAEvC,gFAAgF;AAChF,yEAAyE;AACzE,0BAA0B;AAC1B,gFAAgF;AAChF,EAAE;AACF,2EAA2E;AAC3E,qCAAqC;AACrC,EAAE;AACF,6EAA6E;AAC7E,yEAAyE;AACzE,yEAAyE;AACzE,8EAA8E;AAC9E,uEAAuE;AACvE,2EAA2E;AAC3E,sEAAsE;AACtE,yEAAyE;AACzE,+EAA+E;AAC/E,6EAA6E;AAC7E,2EAA2E;AAC3E,6EAA6E;AAC7E,4EAA4E;AAC5E,yEAAyE;AACzE,4EAA4E;AAC5E,2EAA2E;AAC3E,8EAA8E;AAC9E,kEAAkE;AAClE,sCAAsC;AACtC,6EAA6E;AAC7E,4EAA4E;AAC5E,8EAA8E;AAC9E,kDAAkD;AAClD,oDAAoD;AACpD,EAAE;AACF,6EAA6E;AAC7E,6EAA6E;AAC7E,+EAA+E;AAC/E,8CAA8C;AAC9C,EAAE;AACF,2EAA2E;AAC3E,8EAA8E;AAC9E,2EAA2E;AAC3E,6EAA6E;AAC7E,gEAAgE;AAChE,yEAAyE;AACzE,0EAA0E;AAC1E,4BAA4B;AAC5B,EAAE;AACF,kCAAkC;AAClC,gFAAgF;AAChF,EAAE;AACF,0EAA0E;AAC1E,wEAAwE;AACxE,8EAA8E;AAC9E,8EAA8E;AAC9E,6EAA6E;AAC7E,4EAA4E;AAC5E,+EAA+E;AAC/E,sEAAsE;AACtE,8EAA8E;AAC9E,EAAE;AACF,6EAA6E;AAC7E,uEAAuE;AACvE,+EAA+E;AAC/E,wEAAwE;AACxE,gEAAgE;AAChE,EAAE;AACF,+EAA+E;AAC/E,qEAAqE;AACrE,sEAAsE;AACtE,0BAA0B;AAC1B,EAAE;AACF,yEAAyE;AACzE,0CAA0C;AAC1C,gFAAgF;AAEhF;;;;GAIG;AACU,QAAA,iCAAiC,GAC5C,gFAAgF;IAChF,yCAAyC,CAAC;AAC/B,QAAA,gCAAgC,GAC3C,4FAA4F;IAC5F,4DAA4D,CAAC;AAE/D,+DAA+D;AAClD,QAAA,+BAA+B,GAAG,KAAK,CAAC;AAErD,8FAA8F;AAC9F,MAAM,8BAA8B,GAAG,aAAa,CAAC;AAErD,MAAM,eAAe,GAAG,uDAAyB,CAAC;AAClD,MAAM,gBAAgB,GAAG,wDAA0B,CAAC;AA8F7C,IAAM,0BAA0B,kCAAhC,MAAM,0BAA0B;IAgBgB;IACE;IAhBtC,MAAM,GAAG,IAAI,eAAM,CAAC,4BAA0B,CAAC,IAAI,CAAC,CAAC;IACrD,WAAW,CAA4B;IAExD;;;;OAIG;IACK,QAAQ,CAA8B;IACtC,YAAY,GAA0B,IAAI,CAAC;IAC3C,cAAc,GAAG,KAAK,CAAC;IACvB,oBAAoB,GAAG,KAAK,CAAC;IAErC,YACE,aAA4B,EACuB,aAAqC,EACnC,WAAqC;QADvC,kBAAa,GAAb,aAAa,CAAwB;QACnC,gBAAW,GAAX,WAAW,CAA0B;QAE1F,MAAM,GAAG,GAAG,aAAa,CAAC,GAAG,CAAqC,UAAU,CAAC,IAAI,EAAE,CAAC;QAEpF,IAAI,CAAC,WAAW,GAAG;YACjB,IAAI,EAAE,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE;YAC7B,MAAM,EAAE,GAAG,CAAC,MAAM,IAAI,eAAe;YACrC,QAAQ,EAAE,GAAG,CAAC,QAAQ,IAAI,gBAAgB;YAC1C,UAAU,EAAE,GAAG,CAAC,UAAU,IAAI,EAAE;YAChC,cAAc,EAAE,GAAG,CAAC,cAAc,IAAI,EAAE;YACxC,SAAS,EAAE,GAAG,CAAC,SAAS,IAAI,EAAE;YAC9B,aAAa,EAAE,GAAG,CAAC,aAAa,IAAI,EAAE;YACtC,SAAS,EAAE,GAAG,CAAC,SAAS,IAAI,KAAK;SAClC,CAAC;QACF,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,mBAAmB,EAAE,CAAC;IAC7C,CAAC;IAED,6DAA6D;IAC7D,KAAK,CAAC,YAAY;QAChB,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC;QAE3B,IAAI,CAAC,YAAY,GAAG,WAAW,CAAC,GAAG,EAAE;YACnC,KAAK,IAAI,CAAC,aAAa,EAAE,CAAC;QAC5B,CAAC,EAAE,uCAA+B,CAAC,CAAC;QACpC,0DAA0D;QAC1D,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,EAAE,CAAC;IAC9B,CAAC;IAED,eAAe;QACb,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YACtB,aAAa,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YACjC,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;QAC3B,CAAC;IACH,CAAC;IAED,8EAA8E;IAC9E,oDAAoD;IACpD,8EAA8E;IAE9E,+CAA+C;IAC/C,IAAI,MAAM;QACR,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;IAC9B,CAAC;IAED;;;OAGG;IACH,IAAI,cAAc;QAChB,OAAO,IAAA,qDAAuB,EAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;IACxD,CAAC;IAED,qFAAqF;IACrF,kBAAkB;QAChB,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC;QAE7B,OAAO;YACL,IAAI,EAAE,IAAI,CAAC,cAAc;YACzB,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,QAAQ,EAAE,GAAG,CAAC,QAAQ;YACtB,UAAU,EAAE,GAAG,CAAC,UAAU;YAC1B,SAAS,EAAE,GAAG,CAAC,SAAS,IAAI,IAAI;YAChC,gBAAgB,EAAE,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,GAAG,CAAC,cAAc,CAAC;YAC/D,eAAe,EAAE,OAAO,CAAC,GAAG,CAAC,SAAS,IAAI,GAAG,CAAC,aAAa,CAAC;SAC7D,CAAC;IACJ,CAAC;IAED;;;;;OAKG;IACH,oBAAoB,CAAC,OAAgC,QAAQ;QAC3D,MAAM,EAAE,iBAAiB,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC;QAE3D,IAAI,CAAC,iBAAiB;YAAE,OAAO,IAAI,CAAC;QACpC,IAAI,CAAC,CAAC,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,WAAW,CAAC;YAAE,OAAO,yCAAiC,CAAC;QACnF,IAAI,IAAI,KAAK,OAAO,IAAI,CAAC,CAAC,KAAK,IAAI,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,WAAW,CAAC;YAAE,OAAO,wCAAgC,CAAC;QAE7G,OAAO,IAAI,CAAC;IACd,CAAC;IAED,uDAAuD;IACvD,IAAI,QAAQ;QACV,OAAO,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;IAChC,CAAC;IAED,4EAA4E;IAC5E,YAAY;QACV,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC;QAE/C,OAAO,MAAM,KAAK,MAAM,IAAI,OAAO,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,WAAW,CAAC,CAAC;IACjF,CAAC;IAED,6EAA6E;IAC7E,iBAAiB;QACf,MAAM,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC;QAEhC,OAAO,IAAI,CAAC,YAAY,EAAE,IAAI,OAAO,CAAC,KAAK,IAAI,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,WAAW,CAAC,CAAC;IAClF,CAAC;IAED;;;;OAIG;IACH,WAAW,CAAC,IAA6B;QACvC,IAAI,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,EAAE,EAAE,CAAC;YACzE,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO,aAAa,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAC5C,CAAC;IAED,0CAA0C;IAC1C,gBAAgB;QACd,OAAO,eAAe,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACxC,CAAC;IAED,8EAA8E;IAC9E,oCAAoC;IACpC,8EAA8E;IAE9E;;;;;;OAMG;IACH,KAAK,CAAC,kBAAkB,CAAC,IAA6B;QACpD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC/B,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QAC3C,MAAM,KAAK,GAAG,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;QAEnE,IAAI,CAAC,WAAW,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC;QAExC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QACvD,IAAI,CAAC,QAAQ;YAAE,OAAO,IAAI,CAAC;QAE3B,OAAO;YACL,IAAI,EAAE,QAAQ,CAAC,IAAI;YACnB,aAAa,EAAE,QAAQ,CAAC,QAAQ,KAAK,MAAM;YAC3C,IAAI,EAAE,QAAQ,CAAC,MAAM;YACrB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;YAC3B,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,QAAQ;YACR,WAAW;SACZ,CAAC;IACJ,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,eAAe,CAAC,IAA6B;QACjD,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC9C,CAAC;IAED;;;;;;OAMG;IACH,kBAAkB,CAAC,IAA6B;QAC9C,MAAM,KAAK,GAAG,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,aAAa,CAAC;QAEnG,OAAO,KAAK,IAAI,IAAI,CAAC;IACvB,CAAC;IAEO,KAAK,CAAC,UAAU,CACtB,IAA6B,EAC7B,QAAqC;QAErC,IAAI,QAAQ,CAAC,iBAAiB;YAAE,OAAO,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC;QACrE,IAAI,QAAQ,CAAC,MAAM,KAAK,MAAM;YAAE,OAAO,IAAI,CAAC;QAE5C,OAAO,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,mEAAqC,EAAE,IAAI,CAAC,CAAC;IACjF,CAAC;IAED,8EAA8E;IAC9E,UAAU;IACV,8EAA8E;IAE9E;;;;;OAKG;IACH,KAAK,CAAC,OAAO;QACX,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YAC7C,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,+DAAiC,CAAC;YAC7D,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,mEAAqC,EAAE,QAAQ,CAAC;YAC1E,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,mEAAqC,EAAE,OAAO,CAAC;SAC1E,CAAC,CAAC;QAEH,MAAM,WAAW,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;QACtC,IAAI,MAAM,GAAoC,IAAI,CAAC;QACnD,IAAI,QAAqC,CAAC;QAE1C,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,QAAQ,GAAG,IAAI,CAAC,mBAAmB,EAAE,CAAC;YACtC,IAAI,CAAC,oBAAoB,GAAG,KAAK,CAAC;QACpC,CAAC;aAAM,CAAC;YACN,MAAM,MAAM,GAAG,4DAA8B,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YAEnE,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;gBACnB,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC;gBACrB,QAAQ;oBACN,MAAM,CAAC,IAAI,CAAC,IAAI,KAAK,IAAI;wBACvB,CAAC,CAAC,kFAAkF;4BAClF,IAAI,CAAC,kBAAkB,CAAC,QAAQ,EAAE,IAAI,CAAC,cAAc,CAAC;wBACxD,CAAC,CAAC,cAAc,CAAC,MAAM,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;gBAC/C,IAAI,CAAC,oBAAoB,GAAG,KAAK,CAAC;YACpC,CAAC;iBAAM,CAAC;gBACN,qEAAqE;gBACrE,sEAAsE;gBACtE,iEAAiE;gBACjE,iEAAiE;gBACjE,IAAI,CAAC,IAAI,CAAC,oBAAoB,EAAE,CAAC;oBAC/B,IAAI,CAAC,oBAAoB,GAAG,IAAI,CAAC;oBACjC,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,oDAAoD;wBAClD,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK;wBACxF,yFAAyF,CAC5F,CAAC;gBACJ,CAAC;gBACD,QAAQ,GAAG,sBAAsB,EAAE,CAAC;YACtC,CAAC;QACH,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC7B,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QAEzB,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,EAAE,CAAC;YACtC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,uCAAuC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;QAC7E,CAAC;QAED,OAAO;YACL,QAAQ,EAAE,eAAe,CAAC,QAAQ,CAAC;YACnC,MAAM;YACN,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,aAAa,EAAE,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,IAAI;YAClG,WAAW;SACZ,CAAC;IACJ,CAAC;IAED,+FAA+F;IAC/F,KAAK,CAAC,aAAa;QACjB,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;YAErB,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;gBACxB,IAAI,CAAC,cAAc,GAAG,KAAK,CAAC;gBAC5B,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,qCAAqC,CAAC,CAAC;YACzD,CAAC;YAED,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;gBACzB,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC;gBAC3B,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,gFAAgF,IAAI,CAAC,QAAQ,CAAC,MAAM,MAAM;oBACxG,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAC9D,CAAC;YACJ,CAAC;YAED,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,mFAAmF;IACnF,mBAAmB;QACjB,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC;QAE7B,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;YACd,OAAO;gBACL,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,EAAE;gBACR,QAAQ,EAAE,MAAM;gBAChB,iBAAiB,EAAE,KAAK;gBACxB,MAAM,EAAE,GAAG,CAAC,MAAM;gBAClB,QAAQ,EAAE,GAAG,CAAC,QAAQ;gBACtB,MAAM,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE;gBACvD,KAAK,EAAE,IAAI;aACZ,CAAC;QACJ,CAAC;QAED,4EAA4E;QAC5E,OAAO,IAAI,CAAC,kBAAkB,CAAC,aAAa,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;IAC1D,CAAC;IAED;;;OAGG;IACK,kBAAkB,CAAC,MAAgC,EAAE,IAAY;QACvE,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC;QAE7B,OAAO;YACL,MAAM;YACN,IAAI;YACJ,QAAQ,EAAE,MAAM;YAChB,iBAAiB,EAAE,IAAI;YACvB,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,QAAQ,EAAE,GAAG,CAAC,QAAQ;YACtB,MAAM,EAAE;gBACN,IAAI,EAAE,GAAG,CAAC,UAAU;gBACpB,WAAW,EAAE,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;gBACxC,OAAO,EAAE,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,8BAA8B,CAAC,CAAC,CAAC,IAAI;aACpE;YACD,KAAK,EAAE,GAAG,CAAC,SAAS;gBAClB,CAAC,CAAC;oBACE,IAAI,EAAE,GAAG,CAAC,SAAS;oBACnB,WAAW,EAAE,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC;oBACvC,OAAO,EAAE,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,8BAA8B,CAAC,CAAC,CAAC,IAAI;iBACnE;gBACH,CAAC,CAAC,IAAI;SACT,CAAC;IACJ,CAAC;CACF,CAAA;AAzVY,gEAA0B;qCAA1B,0BAA0B;IADtC,IAAA,mBAAU,GAAE;IAiBR,WAAA,IAAA,eAAM,EAAC,gCAAwB,CAAC,CAAA;IAChC,WAAA,IAAA,eAAM,EAAC,kCAA0B,CAAC,CAAA;qCAFpB,sBAAa;GAfnB,0BAA0B,CAyVtC;AAED,4EAA4E;AAC5E,SAAS,cAAc,CACrB,KAAqC,EACrC,WAAmE;IAEnE,MAAM,KAAK,GAAG,CAAC,IAAY,EAAE,IAA2B,EAAiB,EAAE,CAAC,CAAC;QAC3E,IAAI;QACJ,WAAW,EAAE,IAAI,KAAK,IAAI;QAC1B,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI;KACpD,CAAC,CAAC;IAEH,OAAO;QACL,MAAM,EAAE,QAAQ;QAChB,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,QAAQ,EAAE,QAAQ;QAClB,iBAAiB,EAAE,KAAK;QACxB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,MAAM,EAAE,KAAK,CAAC,KAAK,CAAC,UAAU,EAAE,WAAW,CAAC,MAAM,CAAC;QACnD,KAAK,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,EAAE,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI;KAC1E,CAAC;AACJ,CAAC;AAED,SAAS,sBAAsB;IAC7B,OAAO;QACL,MAAM,EAAE,QAAQ;QAChB,IAAI,EAAE,EAAE;QACR,QAAQ,EAAE,MAAM;QAChB,iBAAiB,EAAE,KAAK;QACxB,MAAM,EAAE,eAAe;QACvB,QAAQ,EAAE,gBAAgB;QAC1B,MAAM,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE;QACvD,KAAK,EAAE,IAAI;KACZ,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,QAAqC,EAAE,IAA6B;IACzF,MAAM,KAAK,GAAG,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;IAEnE,OAAO,IAAI,CAAC,SAAS,CAAC;QACpB,QAAQ,CAAC,MAAM;QACf,QAAQ,CAAC,QAAQ;QACjB,yEAAyE;QACzE,4CAA4C;QAC5C,QAAQ,CAAC,IAAI;QACb,QAAQ,CAAC,MAAM;QACf,QAAQ,CAAC,QAAQ;QACjB,KAAK,EAAE,IAAI,IAAI,EAAE;QACjB,KAAK,EAAE,OAAO,IAAI,EAAE;KACrB,CAAC,CAAC;AACL,CAAC"}

package/dist/telemetry/dashboard/sql-literals.d.ts

@@ -0,0 +1,19 @@
+/** Allowed bucket sizes, ascending. A span/buckets quotient is rounded UP to one of these. */
+export declare const BUCKET_SIZES_SECONDS: readonly [10, 30, 60, 300, 600, 900, 1800, 3600, 10800, 21600];
+/** Double-quotes an identifier (doubling `"`). Only ever called with server-side constants or discovered column names. */
+export declare function ident(name: string): string;
+/** Single-quotes a string literal (doubling `'`). Callers validate the value first. */
+export declare function literal(value: string): string;
+/** An ISO timestamp literal from a validated Date. */
+export declare function timestampLiteral(date: Date): string;
+/** `INTERVAL 'n seconds'` for an allowed bucket size. */
+export declare function bucketInterval(bucketSeconds: number): string;
+/** The bucket size for a span: span/buckets rounded UP to an allowed size (the largest when above all). */
+export declare function bucketSecondsFor(spanMs: number, buckets: number): number;
+/** Rows a bucketed series over `[from, to)` can produce, plus alignment slack. */
+export declare function bucketRowLimit(from: Date, to: Date, bucketSeconds: number): number;
+/** `"column" >= '<from>' AND "column" < '<to>'`. */
+export declare function between(column: string, from: Date, to: Date): string;
+/** A literal row cap: a positive safe integer, or a RangeError. */
+export declare function positive(limit: number): number;
+//# sourceMappingURL=sql-literals.d.ts.map

package/dist/telemetry/dashboard/sql-literals.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sql-literals.d.ts","sourceRoot":"","sources":["../../../src/telemetry/dashboard/sql-literals.ts"],"names":[],"mappings":"AAoBA,8FAA8F;AAC9F,eAAO,MAAM,oBAAoB,gEAAiE,CAAC;AAEnG,0HAA0H;AAC1H,wBAAgB,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAE1C;AAED,uFAAuF;AACvF,wBAAgB,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAE7C;AAED,sDAAsD;AACtD,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,IAAI,GAAG,MAAM,CAKnD;AAED,yDAAyD;AACzD,wBAAgB,cAAc,CAAC,aAAa,EAAE,MAAM,GAAG,MAAM,CAK5D;AAED,2GAA2G;AAC3G,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAMxE;AAED,kFAAkF;AAClF,wBAAgB,cAAc,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,GAAG,MAAM,CAElF;AAED,oDAAoD;AACpD,wBAAgB,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,GAAG,MAAM,CAEpE;AAED,mEAAmE;AACnE,wBAAgB,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAI9C"}

package/dist/telemetry/dashboard/sql-literals.js

@@ -0,0 +1,75 @@
+"use strict";
+// =============================================================================
+// Literal helpers shared by every server-authored telemetry statement
+// (issues #577, #601)
+// =============================================================================
+//
+// The dashboard templates (`telemetry-dashboard.sql.ts`) and the metric
+// catalog builders (`../metrics/metric-sql.ts`) render statements from:
+//
+//   - fixed identifiers, quoted with doubled `"` (`ident`);
+//   - values the caller has already validated, single-quoted with doubled `'`
+//     (`literal`);
+//   - `Date`s the request validation produced, as ISO literals
+//     (`timestampLiteral`);
+//   - bucket sizes from a closed list (`bucketInterval`);
+//   - literal row caps (`positive`).
+//
+// NO BIND PARAMETERS: GreptimeDB's Postgres wire refuses `$1` (spike #529).
+// Pure functions; no Nest, no I/O.
+// =============================================================================
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.BUCKET_SIZES_SECONDS = void 0;
+exports.ident = ident;
+exports.literal = literal;
+exports.timestampLiteral = timestampLiteral;
+exports.bucketInterval = bucketInterval;
+exports.bucketSecondsFor = bucketSecondsFor;
+exports.bucketRowLimit = bucketRowLimit;
+exports.between = between;
+exports.positive = positive;
+/** Allowed bucket sizes, ascending. A span/buckets quotient is rounded UP to one of these. */
+exports.BUCKET_SIZES_SECONDS = [10, 30, 60, 300, 600, 900, 1800, 3600, 10800, 21600];
+/** Double-quotes an identifier (doubling `"`). Only ever called with server-side constants or discovered column names. */
+function ident(name) {
+    return `"${name.replace(/"/g, '""')}"`;
+}
+/** Single-quotes a string literal (doubling `'`). Callers validate the value first. */
+function literal(value) {
+    return `'${value.replace(/'/g, "''")}'`;
+}
+/** An ISO timestamp literal from a validated Date. */
+function timestampLiteral(date) {
+    if (!(date instanceof Date) || !Number.isFinite(date.getTime())) {
+        throw new RangeError('timestampLiteral needs a valid Date');
+    }
+    return `'${date.toISOString()}'`;
+}
+/** `INTERVAL 'n seconds'` for an allowed bucket size. */
+function bucketInterval(bucketSeconds) {
+    if (!exports.BUCKET_SIZES_SECONDS.includes(bucketSeconds)) {
+        throw new RangeError(`bucketSeconds must be one of ${exports.BUCKET_SIZES_SECONDS.join(', ')}`);
+    }
+    return `INTERVAL '${bucketSeconds} seconds'`;
+}
+/** The bucket size for a span: span/buckets rounded UP to an allowed size (the largest when above all). */
+function bucketSecondsFor(spanMs, buckets) {
+    const wanted = spanMs / 1000 / buckets;
+    return (exports.BUCKET_SIZES_SECONDS.find((size) => size >= wanted) ??
+        exports.BUCKET_SIZES_SECONDS[exports.BUCKET_SIZES_SECONDS.length - 1]);
+}
+/** Rows a bucketed series over `[from, to)` can produce, plus alignment slack. */
+function bucketRowLimit(from, to, bucketSeconds) {
+    return Math.ceil((to.getTime() - from.getTime()) / 1000 / bucketSeconds) + 2;
+}
+/** `"column" >= '<from>' AND "column" < '<to>'`. */
+function between(column, from, to) {
+    return `${ident(column)} >= ${timestampLiteral(from)} AND ${ident(column)} < ${timestampLiteral(to)}`;
+}
+/** A literal row cap: a positive safe integer, or a RangeError. */
+function positive(limit) {
+    if (!Number.isSafeInteger(limit) || limit < 1)
+        throw new RangeError(`limit must be a positive integer, got ${limit}`);
+    return limit;
+}
+//# sourceMappingURL=sql-literals.js.map

package/dist/telemetry/dashboard/sql-literals.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sql-literals.js","sourceRoot":"","sources":["../../../src/telemetry/dashboard/sql-literals.ts"],"names":[],"mappings":";AAAA,gFAAgF;AAChF,sEAAsE;AACtE,sBAAsB;AACtB,gFAAgF;AAChF,EAAE;AACF,wEAAwE;AACxE,wEAAwE;AACxE,EAAE;AACF,4DAA4D;AAC5D,8EAA8E;AAC9E,mBAAmB;AACnB,+DAA+D;AAC/D,4BAA4B;AAC5B,0DAA0D;AAC1D,qCAAqC;AACrC,EAAE;AACF,4EAA4E;AAC5E,mCAAmC;AACnC,gFAAgF;;;AAMhF,sBAEC;AAGD,0BAEC;AAGD,4CAKC;AAGD,wCAKC;AAGD,4CAMC;AAGD,wCAEC;AAGD,0BAEC;AAGD,4BAIC;AArDD,8FAA8F;AACjF,QAAA,oBAAoB,GAAG,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,CAAU,CAAC;AAEnG,0HAA0H;AAC1H,SAAgB,KAAK,CAAC,IAAY;IAChC,OAAO,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC;AACzC,CAAC;AAED,uFAAuF;AACvF,SAAgB,OAAO,CAAC,KAAa;IACnC,OAAO,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC;AAC1C,CAAC;AAED,sDAAsD;AACtD,SAAgB,gBAAgB,CAAC,IAAU;IACzC,IAAI,CAAC,CAAC,IAAI,YAAY,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC;QAChE,MAAM,IAAI,UAAU,CAAC,qCAAqC,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO,IAAI,IAAI,CAAC,WAAW,EAAE,GAAG,CAAC;AACnC,CAAC;AAED,yDAAyD;AACzD,SAAgB,cAAc,CAAC,aAAqB;IAClD,IAAI,CAAE,4BAA0C,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC;QACzE,MAAM,IAAI,UAAU,CAAC,gCAAgC,4BAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC1F,CAAC;IACD,OAAO,aAAa,aAAa,WAAW,CAAC;AAC/C,CAAC;AAED,2GAA2G;AAC3G,SAAgB,gBAAgB,CAAC,MAAc,EAAE,OAAe;IAC9D,MAAM,MAAM,GAAG,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC;IACvC,OAAO,CACL,4BAAoB,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,IAAI,MAAM,CAAC;QACnD,4BAAoB,CAAC,4BAAoB,CAAC,MAAM,GAAG,CAAC,CAAC,CACtD,CAAC;AACJ,CAAC;AAED,kFAAkF;AAClF,SAAgB,cAAc,CAAC,IAAU,EAAE,EAAQ,EAAE,aAAqB;IACxE,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC,GAAG,IAAI,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;AAC/E,CAAC;AAED,oDAAoD;AACpD,SAAgB,OAAO,CAAC,MAAc,EAAE,IAAU,EAAE,EAAQ;IAC1D,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,OAAO,gBAAgB,CAAC,IAAI,CAAC,QAAQ,KAAK,CAAC,MAAM,CAAC,MAAM,gBAAgB,CAAC,EAAE,CAAC,EAAE,CAAC;AACxG,CAAC;AAED,mEAAmE;AACnE,SAAgB,QAAQ,CAAC,KAAa;IACpC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC;QAC3C,MAAM,IAAI,UAAU,CAAC,yCAAyC,KAAK,EAAE,CAAC,CAAC;IACzE,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/telemetry/dashboard/telemetry-dashboard.controller.d.ts

@@ -0,0 +1,14 @@
+import { Type } from '@nestjs/common';
+import type { ResolvedTelemetryModuleOptions } from '../telemetry.options';
+/**
+ * Creates the `TelemetryDashboardController` class for one set of module options: its routes
+ * guarded by the app's access decorators (`options.host.access`), the caller
+ * resolved by `options.actorId`. `TelemetryModule.forRoot()` calls it.
+ *
+ * @param options - the resolved module options.
+ * @returns the controller class.
+ *
+ * @stability experimental
+ */
+export declare function createTelemetryDashboardController(options: ResolvedTelemetryModuleOptions): Type<unknown>;
+//# sourceMappingURL=telemetry-dashboard.controller.d.ts.map

package/dist/telemetry/dashboard/telemetry-dashboard.controller.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"telemetry-dashboard.controller.d.ts","sourceRoot":"","sources":["../../../src/telemetry/dashboard/telemetry-dashboard.controller.ts"],"names":[],"mappings":"AAAA,OAAO,EAAkC,IAAI,EAAE,MAAM,gBAAgB,CAAC;AA0BtE,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,sBAAsB,CAAC;AAqD3E;;;;;;;;;GASG;AACH,wBAAgB,kCAAkC,CAAC,OAAO,EAAE,8BAA8B,GAAG,IAAI,CAAC,OAAO,CAAC,CA4JzG"}