@nocobase/plugin-data-visualization 2.1.0-alpha.12 → 2.1.0-alpha.14

package/dist/externalVersion.js

@@ -8,18 +8,18 @@
  */
 
 module.exports = {
-  "@nocobase/client": "2.1.0-alpha.12",
+  "@nocobase/client": "2.1.0-alpha.14",
   "@formily/react": "2.3.7",
-  "@nocobase/plugin-ai": "2.1.0-alpha.12",
-  "@nocobase/flow-engine": "2.1.0-alpha.12",
+  "@nocobase/plugin-ai": "2.1.0-alpha.14",
+  "@nocobase/flow-engine": "2.1.0-alpha.14",
   "react-i18next": "11.18.6",
   "dayjs": "1.11.13",
   "@formily/shared": "2.3.7",
   "lodash": "4.17.21",
-  "@nocobase/cache": "2.1.0-alpha.12",
-  "@nocobase/server": "2.1.0-alpha.12",
-  "@nocobase/test": "2.1.0-alpha.12",
-  "@nocobase/utils": "2.1.0-alpha.12",
+  "@nocobase/cache": "2.1.0-alpha.14",
+  "@nocobase/server": "2.1.0-alpha.14",
+  "@nocobase/test": "2.1.0-alpha.14",
+  "@nocobase/utils": "2.1.0-alpha.14",
   "react": "18.2.0",
   "@emotion/css": "11.13.0",
   "@ant-design/icons": "5.6.1",
@@ -27,9 +27,10 @@ module.exports = {
   "antd": "5.24.2",
   "@formily/antd-v5": "1.2.3",
   "@formily/core": "2.3.7",
-  "@nocobase/actions": "2.1.0-alpha.12",
-  "@nocobase/database": "2.1.0-alpha.12",
-  "@nocobase/acl": "2.1.0-alpha.12",
-  "sequelize": "6.35.2",
+  "@nocobase/actions": "2.1.0-alpha.14",
+  "@nocobase/acl": "2.1.0-alpha.14",
+  "@nocobase/plugin-acl": "2.1.0-alpha.14",
+  "@nocobase/plugin-flow-engine": "2.1.0-alpha.14",
+  "@nocobase/database": "2.1.0-alpha.14",
   "@formily/reactive": "2.3.7"
 };

package/dist/node_modules/koa-compose/package.json

@@ -1 +1 @@
-{"name":"koa-compose","description":"compose Koa middleware","repository":"koajs/compose","version":"4.1.0","keywords":["koa","middleware","compose"],"files":["index.js"],"dependencies":{},"devDependencies":{"codecov":"^3.0.0","jest":"^21.0.0","matcha":"^0.7.0","standard":"^10.0.3"},"scripts":{"bench":"matcha bench/bench.js","lint":"standard --fix .","test":"jest --forceExit --coverage"},"jest":{"testEnvironment":"node"},"license":"MIT","_lastModified":"2026-03-25T14:11:41.249Z"}
+{"name":"koa-compose","description":"compose Koa middleware","repository":"koajs/compose","version":"4.1.0","keywords":["koa","middleware","compose"],"files":["index.js"],"dependencies":{},"devDependencies":{"codecov":"^3.0.0","jest":"^21.0.0","matcha":"^0.7.0","standard":"^10.0.3"},"scripts":{"bench":"matcha bench/bench.js","lint":"standard --fix .","test":"jest --forceExit --coverage"},"jest":{"testEnvironment":"node"},"license":"MIT","_lastModified":"2026-04-07T15:55:45.644Z"}

package/dist/server/actions/query.d.ts

@@ -7,10 +7,8 @@
  * For more information, please refer to: https://www.nocobase.com/agreement.
  */
 import { Context, Next } from '@nocobase/actions';
-export declare const postProcess: (ctx: Context, next: Next) => Promise<void>;
+export declare const checkPermission: (ctx: Context, next: Next) => Promise<void>;
 export declare const queryData: (ctx: Context, next: Next) => Promise<void>;
-export declare const parseFieldAndAssociations: (ctx: Context, next: Next) => Promise<void>;
 export declare const parseVariables: (ctx: Context, next: Next) => Promise<void>;
 export declare const cacheMiddleware: (ctx: Context, next: Next) => Promise<void>;
-export declare const checkPermission: (ctx: Context, next: Next) => Promise<any>;
-export declare const query: (ctx: Context, next: Next) => Promise<void>;
+export declare const queryDataAction: (ctx: Context, next: Next) => Promise<void>;

package/dist/server/actions/query.js

@@ -38,164 +38,69 @@ var query_exports = {};
 __export(query_exports, {
   cacheMiddleware: () => cacheMiddleware,
   checkPermission: () => checkPermission,
-  parseFieldAndAssociations: () => parseFieldAndAssociations,
   parseVariables: () => parseVariables,
-  postProcess: () => postProcess,
-  query: () => query,
-  queryData: () => queryData
+  queryData: () => queryData,
+  queryDataAction: () => queryDataAction
 });
 module.exports = __toCommonJS(query_exports);
-var import_database = require("@nocobase/database");
 var import_koa_compose = __toESM(require("koa-compose"));
-var import_server = require("@nocobase/server");
-var import_query_parser = require("../query-parser");
-var import_utils = require("@nocobase/utils");
 var import_acl = require("@nocobase/acl");
+var import_plugin_acl = require("@nocobase/plugin-acl");
+var import_server = require("@nocobase/server");
+var import_plugin_flow_engine = require("@nocobase/plugin-flow-engine");
 const getDB = (ctx, dataSource) => {
   const ds = ctx.app.dataSourceManager.dataSources.get(dataSource);
   return ds == null ? void 0 : ds.collectionManager.db;
 };
-const postProcess = async (ctx, next) => {
-  const { data, fieldMap } = ctx.action.params.values;
-  ctx.body = data.map((record) => {
-    Object.entries(record).forEach(([key, value]) => {
-      if (!value) {
-        return;
-      }
-      const { type } = fieldMap[key] || {};
-      switch (type) {
-        case "bigInt":
-        case "integer":
-        case "float":
-        case "double":
-        case "decimal":
-          record[key] = Number(value);
-          break;
-      }
+const getTimezone = (ctx) => {
+  var _a, _b, _c, _d, _e, _f;
+  return ((_b = (_a = ctx == null ? void 0 : ctx.request) == null ? void 0 : _a.get) == null ? void 0 : _b.call(_a, "x-timezone")) ?? ((_d = (_c = ctx == null ? void 0 : ctx.request) == null ? void 0 : _c.header) == null ? void 0 : _d["x-timezone"]) ?? ((_f = (_e = ctx == null ? void 0 : ctx.req) == null ? void 0 : _e.headers) == null ? void 0 : _f["x-timezone"]);
+};
+const checkPermission = async (ctx, next) => {
+  var _a, _b, _c, _d;
+  const values = ctx.action.params.values || {};
+  const acl = ((_a = ctx.app.dataSourceManager.get(values.dataSource)) == null ? void 0 : _a.acl) || ctx.app.acl;
+  try {
+    const result = await (0, import_plugin_acl.applyQueryPermission)({
+      acl,
+      db: getDB(ctx, values.dataSource) || ctx.db,
+      resourceName: values.collection,
+      query: values,
+      currentUser: (_b = ctx.state) == null ? void 0 : _b.currentUser,
+      currentRole: (_c = ctx.state) == null ? void 0 : _c.currentRole,
+      currentRoles: (_d = ctx.state) == null ? void 0 : _d.currentRoles,
+      timezone: getTimezone(ctx),
+      state: ctx.state
     });
-    return record;
-  });
+    ctx.action.params.values = result.query;
+  } catch (err) {
+    if (!(err instanceof import_acl.NoPermissionError)) {
+      throw err;
+    }
+    ctx.throw(403, "No permissions");
+  }
   await next();
 };
 const queryData = async (ctx, next) => {
-  const { dataSource, collection, queryParams, fieldMap } = ctx.action.params.values;
-  const db = getDB(ctx, dataSource) || ctx.db;
-  const model = db.getModel(collection);
-  const data = await model.findAll(queryParams);
-  ctx.action.params.values = {
-    data,
-    fieldMap
-  };
-  await next();
-};
-const parseFieldAndAssociations = async (ctx, next) => {
   var _a;
-  const {
-    dataSource,
-    collection: collectionName,
-    measures,
-    dimensions,
-    orders,
-    filter
-  } = ctx.action.params.values;
+  const { dataSource, collection, ...queryOptions } = ctx.action.params.values;
   const db = getDB(ctx, dataSource) || ctx.db;
-  const collection = db.getCollection(collectionName);
-  const fields = collection.fields;
-  const associations = collection.model.associations;
-  const models = {};
-  const parseField = (selected) => {
-    var _a2, _b, _c, _d, _e, _f;
-    let target;
-    let name;
-    if (!Array.isArray(selected.field)) {
-      name = selected.field;
-    } else if (selected.field.length === 1) {
-      name = selected.field[0];
-    } else if (selected.field.length > 1) {
-      [target, name] = selected.field;
-    }
-    const rawAttributes = collection.model.getAttributes();
-    let field = ((_a2 = rawAttributes[name]) == null ? void 0 : _a2.field) || name;
-    let fieldType = (_b = fields.get(name)) == null ? void 0 : _b.type;
-    let fieldOptions = (_c = fields.get(name)) == null ? void 0 : _c.options;
-    if (target) {
-      const targetField = fields.get(target);
-      const targetCollection = db.getCollection(targetField.target);
-      const targetFields = targetCollection.fields;
-      fieldType = (_d = targetFields.get(name)) == null ? void 0 : _d.type;
-      fieldOptions = (_e = targetFields.get(name)) == null ? void 0 : _e.options;
-      field = `${target}.${field}`;
-      name = `${target}.${name}`;
-      const targetType = (_f = fields.get(target)) == null ? void 0 : _f.type;
-      if (!models[target]) {
-        models[target] = { type: targetType };
-      }
-    } else {
-      field = `${collectionName}.${field}`;
-    }
-    return {
-      ...selected,
-      field,
-      name,
-      type: fieldType,
-      options: fieldOptions,
-      alias: selected.alias || name
-    };
-  };
-  const parsedMeasures = (measures == null ? void 0 : measures.map(parseField)) || [];
-  const parsedDimensions = (dimensions == null ? void 0 : dimensions.map(parseField)) || [];
-  const parsedOrders = (orders == null ? void 0 : orders.map(parseField)) || [];
-  const include = Object.entries(models).map(([target, { type }]) => {
-    let options = {
-      association: target,
-      attributes: []
-    };
-    if (type === "belongsToMany") {
-      options["through"] = { attributes: [] };
-    }
-    if (type === "belongsToArray") {
-      const association = associations[target];
-      if (association) {
-        options = {
-          ...options,
-          ...association.generateInclude()
-        };
-      }
-    }
-    return options;
-  });
-  const filterParser = new import_database.FilterParser(filter, {
-    collection
+  const repository = db.getRepository(collection);
+  ctx.body = await repository.query({
+    ...queryOptions,
+    timezone: (_a = ctx.get) == null ? void 0 : _a.call(ctx, "x-timezone")
   });
-  const { where, include: filterInclude } = filterParser.toSequelizeParams();
-  if (filterInclude) {
-    const stack = [...filterInclude];
-    while (stack.length) {
-      const item = stack.pop();
-      const parentCollection = db.getCollection(item.parentCollection || collectionName);
-      const field = parentCollection.fields.get(item.association);
-      if ((field == null ? void 0 : field.type) === "belongsToMany") {
-        item.through = { attributes: [] };
-      }
-      if ((field == null ? void 0 : field.target) && ((_a = item.include) == null ? void 0 : _a.length)) {
-        for (const child of item.include) {
-          child.parentCollection = field.target;
-          stack.push(child);
-        }
-      }
-    }
-  }
-  ctx.action.params.values = {
-    ...ctx.action.params.values,
-    where,
-    measures: parsedMeasures,
-    dimensions: parsedDimensions,
-    orders: parsedOrders,
-    include: [...include, ...filterInclude || []]
-  };
   await next();
 };
 const parseVariables = async (ctx, next) => {
+  const { mode, contextParams, ...values } = ctx.action.params.values;
+  if (mode !== "sql") {
+    const resolvedValues = await (0, import_plugin_flow_engine.resolveVariablesTemplate)(ctx, values, contextParams || {});
+    ctx.action.params.values = {
+      ...ctx.action.params.values,
+      ...resolvedValues
+    };
+  }
   const { filter } = ctx.action.params.values;
   ctx.action.params.filter = filter;
   await import_server.middlewares.parseVariables(ctx, async () => {
@@ -219,47 +124,9 @@ const cacheMiddleware = async (ctx, next) => {
     await cache.set(uid, ctx.body, (cacheConfig == null ? void 0 : cacheConfig.ttl) * 1e3);
   }
 };
-const checkPermission = async (ctx, next) => {
-  var _a, _b, _c;
-  const { collection, dataSource } = ctx.action.params.values;
-  const roleNames = ctx.state.currentRoles || ["anonymous"];
-  const acl = ((_a = ctx.app.dataSourceManager.get(dataSource)) == null ? void 0 : _a.acl) || ctx.app.acl;
-  const can = acl.can({ roles: roleNames, resource: collection, action: "list" });
-  if (!can && !roleNames.includes("root")) {
-    ctx.throw(403, "No permissions");
-  }
-  if ((_b = can == null ? void 0 : can.params) == null ? void 0 : _b.filter) {
-    try {
-      (0, import_acl.checkFilterParams)(ctx.database.getCollection(collection), (_c = can.params) == null ? void 0 : _c.filter);
-    } catch (e) {
-      if (e instanceof import_acl.NoPermissionError) {
-        ctx.throw(403, "No permissions");
-      }
-    }
-    const filter = ctx.action.params.values.filter || {};
-    ctx.action.params.values = {
-      ...ctx.action.params.values,
-      filter: (0, import_utils.assign)(filter, can == null ? void 0 : can.params.filter, {
-        filter: "andMerge"
-      })
-    };
-  }
-  return next();
-};
-const query = async (ctx, next) => {
-  const { dataSource } = ctx.action.params.values;
-  const db = getDB(ctx, dataSource) || ctx.db;
-  const queryParser = (0, import_query_parser.createQueryParser)(db);
+const queryDataAction = async (ctx, next) => {
   try {
-    await (0, import_koa_compose.default)([
-      checkPermission,
-      cacheMiddleware,
-      parseVariables,
-      parseFieldAndAssociations,
-      queryParser.parse(),
-      queryData,
-      postProcess
-    ])(ctx, next);
+    await (0, import_koa_compose.default)([checkPermission, cacheMiddleware, parseVariables, queryData])(ctx, next);
   } catch (err) {
     ctx.throw(500, err);
   }
@@ -268,9 +135,7 @@ const query = async (ctx, next) => {
 0 && (module.exports = {
   cacheMiddleware,
   checkPermission,
-  parseFieldAndAssociations,
   parseVariables,
-  postProcess,
-  query,
-  queryData
+  queryData,
+  queryDataAction
 });

package/dist/server/plugin.d.ts

@@ -7,11 +7,9 @@
  * For more information, please refer to: https://www.nocobase.com/agreement.
  */
 import { Cache } from '@nocobase/cache';
-import type { FlowSchemaContribution } from '@nocobase/flow-engine';
 import { InstallOptions, Plugin } from '@nocobase/server';
 export declare class PluginDataVisualizationServer extends Plugin {
     cache: Cache;
-    getFlowSchemaContributions(): FlowSchemaContribution;
     afterAdd(): void;
     beforeLoad(): void;
     load(): Promise<void>;

package/dist/server/plugin.js

@@ -32,22 +32,18 @@ __export(plugin_exports, {
 module.exports = __toCommonJS(plugin_exports);
 var import_server = require("@nocobase/server");
 var import_query = require("./actions/query");
-var import_flow_schema_contributions = require("./flow-schema-contributions");
 class PluginDataVisualizationServer extends import_server.Plugin {
   cache;
-  getFlowSchemaContributions() {
-    return import_flow_schema_contributions.flowSchemaContribution;
-  }
   afterAdd() {
   }
   beforeLoad() {
     this.app.resourceManager.define({
       name: "charts",
       actions: {
-        query: import_query.query
+        queryData: import_query.queryDataAction
       }
     });
-    this.app.acl.allow("charts", "query", "loggedIn");
+    this.app.acl.allow("charts", "queryData", "loggedIn");
   }
   async load() {
     this.cache = await this.app.cacheManager.createCache({

package/dist/server/types.d.ts

@@ -28,12 +28,15 @@ export type OrderProps = {
 };
 export type QueryParams = Partial<{
     uid: string;
+    mode: 'builder' | 'sql';
     dataSource: string;
     collection: string;
     measures: MeasureProps[];
     dimensions: DimensionProps[];
     orders: OrderProps[];
     filter: any;
+    having: any;
+    contextParams: Record<string, unknown>;
     limit: number;
     offset: number;
     sql: {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nocobase/plugin-data-visualization",
-  "version": "2.1.0-alpha.12",
+  "version": "2.1.0-alpha.14",
   "displayName": "Data visualization",
   "displayName.ru-RU": "Визуализация данных",
   "displayName.zh-CN": "数据可视化",
@@ -40,13 +40,15 @@
     "@nocobase/cache": "2.x",
     "@nocobase/client": "2.x",
     "@nocobase/database": "2.x",
+    "@nocobase/plugin-acl": "2.x",
     "@nocobase/plugin-ai": "2.x",
     "@nocobase/plugin-data-source-main": "2.x",
+    "@nocobase/plugin-flow-engine": "2.x",
     "@nocobase/server": "2.x",
     "@nocobase/test": "2.x",
     "@nocobase/utils": "2.x"
   },
-  "gitHead": "f12c4a75470590b1670ce54510b96ef94c2cd7a2",
+  "gitHead": "d8735b541de0ff9557bba704de49c799b4962672",
   "keywords": [
     "Blocks"
   ],

package/dist/client/flow/components/AntdFilterSelector.d.ts

@@ -1,35 +0,0 @@
-/**
- * This file is part of the NocoBase (R) project.
- * Copyright (c) 2020-2024 NocoBase Co., Ltd.
- * Authors: NocoBase Team.
- *
- * This project is dual-licensed under AGPL-3.0 and NocoBase Commercial License.
- * For more information, please refer to: https://www.nocobase.com/agreement.
- */
-import React from 'react';
-import type { CSSProperties } from 'react';
-import type { VariableFilterItemValue } from '@nocobase/client';
-import type { FlowModel } from '@nocobase/flow-engine';
-type LogicOp = '$and' | '$or';
-export type FilterCondition = VariableFilterItemValue;
-export type FilterGroupValue = {
-    logic: LogicOp;
-    items: Array<FilterCondition | FilterGroupValue>;
-};
-export interface AntdFilterSelectorProps {
-    value?: FilterGroupValue;
-    onChange?: (next: FilterGroupValue) => void;
-    model: FlowModel;
-    rightAsVariable?: boolean;
-    collectionPath?: string[];
-    className?: string;
-    style?: CSSProperties;
-}
-/**
- * AntdFilterSelector
- * - antd Form.Item 子组件
- * - 内部用响应式对象驱动 FilterGroup/VariableFilterItem
- * - reaction 桥接所有深层变更为 antd 的 onChange
- */
-export declare const AntdFilterSelector: React.FC<AntdFilterSelectorProps>;
-export default AntdFilterSelector;

package/dist/node_modules/moment-timezone/LICENSE

@@ -1,20 +0,0 @@
-The MIT License (MIT)
-
-Copyright (c) JS Foundation and other contributors
-
-Permission is hereby granted, free of charge, to any person obtaining a copy of
-this software and associated documentation files (the "Software"), to deal in
-the Software without restriction, including without limitation the rights to
-use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of
-the Software, and to permit persons to whom the Software is furnished to do so,
-subject to the following conditions:
-
-The above copyright notice and this permission notice shall be included in all
-copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS
-FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR
-COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER
-IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
-CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.