@oneuptime/common 12.0.5 → 12.0.6

package/build/dist/Server/Utils/DataSource/Connectors/LokiConnector.js

@@ -0,0 +1,399 @@
+import { DATA_SOURCE_CONNECT_TIMEOUT_IN_MS, DATA_SOURCE_MAX_SERIES, DATA_SOURCE_MAX_TABLE_ROWS, DATA_SOURCE_MAX_TIME_SERIES_ROWS, DATA_SOURCE_QUERY_TIMEOUT_IN_MS, DataSourceLimitsUtil, } from "../../../../Types/DataSource/DataSourceLimits";
+import DataSourceType from "../../../../Types/DataSource/DataSourceType";
+import BadDataException from "../../../../Types/Exception/BadDataException";
+import DataSourceHttpFetch from "../HttpFetch";
+import SqlResultShaper from "../SqlResultShaper";
+const NANOSECONDS_PER_MILLISECOND = BigInt(1000000);
+// Optionally-signed base-10 integer string, the shape BigInt() accepts.
+const INTEGER_STRING_REGEX = /^-?\d+$/;
+/*
+ * Exact unix-nanosecond string for a Date. BigInt math keeps every digit:
+ * 1699999999999 ms * 1e6 is above 2^53, where float multiplication would
+ * round the tail off.
+ */
+export function toLokiNanoseconds(date) {
+    return (BigInt(date.getTime()) * NANOSECONDS_PER_MILLISECOND).toString();
+}
+/*
+ * Parse a Loki nanosecond timestamp (string in stream entries; tolerate a
+ * number for robustness). Returns null when unparseable. Strings are kept
+ * out of Number() entirely — 19-digit nanosecond epochs do not fit in a
+ * float.
+ */
+export function parseLokiNanoseconds(raw) {
+    if (typeof raw === "number" && Number.isFinite(raw)) {
+        return BigInt(Math.trunc(raw));
+    }
+    if (typeof raw !== "string") {
+        return null;
+    }
+    const trimmed = raw.trim();
+    if (!INTEGER_STRING_REGEX.test(trimmed)) {
+        return null;
+    }
+    return BigInt(trimmed);
+}
+/*
+ * Nanosecond epoch -> Date (millisecond precision; sub-millisecond digits
+ * are truncated). Division happens in BigInt space BEFORE converting to a
+ * Number so the millisecond value is exact.
+ */
+export function lokiNanosecondsToDate(raw) {
+    const nanoseconds = parseLokiNanoseconds(raw);
+    if (nanoseconds === null) {
+        return null;
+    }
+    const date = new Date(Number(nanoseconds / NANOSECONDS_PER_MILLISECOND));
+    return isNaN(date.getTime()) ? null : date;
+}
+/*
+ * Validate the Loki response envelope ({ status: "success", data:
+ * { resultType, result } }) and return the data section. Throws
+ * operator-actionable BadDataExceptions for every malformed shape.
+ */
+export function parseLokiResponseData(bodyJson) {
+    if (bodyJson === null ||
+        bodyJson === undefined ||
+        typeof bodyJson !== "object" ||
+        Array.isArray(bodyJson)) {
+        throw new BadDataException("Loki did not return a JSON object. Check that the data source URL points at a Grafana Loki endpoint.");
+    }
+    const body = bodyJson;
+    if (body["status"] !== "success") {
+        const errorDetail = typeof body["error"] === "string" ? `: ${body["error"]}` : ".";
+        throw new BadDataException(`Loki query failed with status "${String(body["status"])}"${errorDetail}`);
+    }
+    const dataRaw = body["data"];
+    if (dataRaw === null ||
+        dataRaw === undefined ||
+        typeof dataRaw !== "object" ||
+        Array.isArray(dataRaw)) {
+        throw new BadDataException("Loki response is missing the data object. Check that the data source URL points at a Grafana Loki endpoint.");
+    }
+    const data = dataRaw;
+    const resultType = data["resultType"];
+    const result = data["result"];
+    if (typeof resultType !== "string" || !Array.isArray(result)) {
+        throw new BadDataException("Loki response is missing data.resultType or data.result.");
+    }
+    return { resultType: resultType, result: result };
+}
+/*
+ * Extract string labels from a metric/stream label object, skipping the
+ * given keys. Non-object inputs yield an empty label set.
+ */
+function extractLabels(raw, excludeKeys) {
+    const labels = {};
+    if (raw === null ||
+        raw === undefined ||
+        typeof raw !== "object" ||
+        Array.isArray(raw)) {
+        return labels;
+    }
+    const rawRecord = raw;
+    for (const key of Object.keys(rawRecord)) {
+        if (excludeKeys.includes(key)) {
+            continue;
+        }
+        const value = rawRecord[key];
+        if (value === null || value === undefined) {
+            continue;
+        }
+        labels[key] = String(value);
+    }
+    return labels;
+}
+/*
+ * One matrix sample: [unixSeconds (may be fractional), "value"]. Returns
+ * null for malformed or unplottable (NaN/Inf) samples so single bad points
+ * do not fail the whole chart.
+ */
+export function parseLokiMatrixPoint(raw) {
+    if (!Array.isArray(raw) || raw.length < 2) {
+        return null;
+    }
+    const timestampRaw = raw[0];
+    const valueRaw = raw[1];
+    let seconds = null;
+    if (typeof timestampRaw === "number" && Number.isFinite(timestampRaw)) {
+        seconds = timestampRaw;
+    }
+    else if (typeof timestampRaw === "string" &&
+        timestampRaw.trim() !== "" &&
+        Number.isFinite(Number(timestampRaw))) {
+        seconds = Number(timestampRaw);
+    }
+    if (seconds === null || seconds <= 0) {
+        return null;
+    }
+    let value = null;
+    if (typeof valueRaw === "number") {
+        value = valueRaw;
+    }
+    else if (typeof valueRaw === "string" && valueRaw.trim() !== "") {
+        value = Number(valueRaw);
+    }
+    if (value === null || !Number.isFinite(value)) {
+        return null;
+    }
+    return { timestamp: new Date(Math.round(seconds * 1000)), value: value };
+}
+/*
+ * "matrix" result -> AggregatedResult. Labels (minus __name__) become the
+ * per-point `attributes` object the chart layer groups series on; series
+ * without labels omit `attributes` entirely (single unnamed series).
+ * Applies the series cap and the total-point cap, flagging `truncated`.
+ */
+export function lokiMatrixToTimeSeries(result) {
+    const data = [];
+    let truncated = false;
+    let seriesUsed = 0;
+    let rowCapHit = false;
+    for (const rawSeries of result) {
+        if (rawSeries === null ||
+            typeof rawSeries !== "object" ||
+            Array.isArray(rawSeries)) {
+            continue;
+        }
+        if (seriesUsed >= DATA_SOURCE_MAX_SERIES) {
+            truncated = true;
+            break;
+        }
+        seriesUsed += 1;
+        const series = rawSeries;
+        const labels = extractLabels(series["metric"], [
+            "__name__",
+        ]);
+        const values = series["values"];
+        if (!Array.isArray(values)) {
+            continue;
+        }
+        for (const rawPoint of values) {
+            const parsed = parseLokiMatrixPoint(rawPoint);
+            if (!parsed) {
+                continue;
+            }
+            if (data.length >= DATA_SOURCE_MAX_TIME_SERIES_ROWS) {
+                truncated = true;
+                rowCapHit = true;
+                break;
+            }
+            const point = {
+                timestamp: parsed.timestamp,
+                value: parsed.value,
+            };
+            if (Object.keys(labels).length > 0) {
+                point["attributes"] = Object.assign({}, labels);
+            }
+            data.push(point);
+        }
+        if (rowCapHit) {
+            break;
+        }
+    }
+    return { data: data, truncated: truncated };
+}
+/*
+ * "streams" result -> flat table rows { timestamp: Date, line, ...stream
+ * labels }, sorted newest-first (interleaved across streams, the way a log
+ * table reads). The `timestamp` and `line` cells always hold the entry's
+ * real values — stream labels that happen to use those names are dropped
+ * rather than allowed to clobber them. Rows are NOT capped here; the caller
+ * clamps via SqlResultShaper so cap+1 fetches surface `truncated`.
+ */
+export function lokiStreamsToTableRows(result) {
+    const entries = [];
+    for (const rawStream of result) {
+        if (rawStream === null ||
+            typeof rawStream !== "object" ||
+            Array.isArray(rawStream)) {
+            continue;
+        }
+        const stream = rawStream;
+        const labels = extractLabels(stream["stream"], []);
+        const values = stream["values"];
+        if (!Array.isArray(values)) {
+            continue;
+        }
+        for (const rawEntry of values) {
+            if (!Array.isArray(rawEntry) || rawEntry.length < 2) {
+                continue;
+            }
+            const nanoseconds = parseLokiNanoseconds(rawEntry[0]);
+            if (nanoseconds === null) {
+                continue;
+            }
+            const timestamp = new Date(Number(nanoseconds / NANOSECONDS_PER_MILLISECOND));
+            if (isNaN(timestamp.getTime())) {
+                continue;
+            }
+            const lineRaw = rawEntry[1];
+            const row = {
+                timestamp: timestamp,
+                line: typeof lineRaw === "string" ? lineRaw : String(lineRaw !== null && lineRaw !== void 0 ? lineRaw : ""),
+            };
+            for (const key of Object.keys(labels)) {
+                if (key !== "timestamp" && key !== "line") {
+                    row[key] = labels[key];
+                }
+            }
+            entries.push({ order: nanoseconds, row: row });
+        }
+    }
+    entries.sort((a, b) => {
+        if (a.order === b.order) {
+            return 0;
+        }
+        return a.order < b.order ? 1 : -1;
+    });
+    return entries.map((entry) => {
+        return entry.row;
+    });
+}
+/*
+ * "matrix" result -> flat table rows { timestamp: Date, value, ...labels }.
+ * As with streams, the reserved `timestamp`/`value` cells win over labels
+ * with the same name, and capping is left to the caller's SqlResultShaper
+ * pass.
+ */
+export function lokiMatrixToTableRows(result) {
+    const rows = [];
+    for (const rawSeries of result) {
+        if (rawSeries === null ||
+            typeof rawSeries !== "object" ||
+            Array.isArray(rawSeries)) {
+            continue;
+        }
+        const series = rawSeries;
+        const labels = extractLabels(series["metric"], [
+            "__name__",
+        ]);
+        const values = series["values"];
+        if (!Array.isArray(values)) {
+            continue;
+        }
+        for (const rawPoint of values) {
+            const parsed = parseLokiMatrixPoint(rawPoint);
+            if (!parsed) {
+                continue;
+            }
+            const row = {
+                timestamp: parsed.timestamp,
+                value: parsed.value,
+            };
+            for (const key of Object.keys(labels)) {
+                if (key !== "timestamp" && key !== "value") {
+                    row[key] = labels[key];
+                }
+            }
+            rows.push(row);
+        }
+    }
+    return rows;
+}
+export default class LokiConnector {
+    /*
+     * The optional fetchFunction is a DI seam for tests. The default wrapper
+     * resolves DataSourceHttpFetch.fetch at CALL time so jest.spyOn on the
+     * static method also intercepts connectors constructed earlier.
+     */
+    constructor(fetchFunction) {
+        this.dataSourceType = DataSourceType.Loki;
+        this.fetchFunction =
+            fetchFunction ||
+                ((request) => {
+                    return DataSourceHttpFetch.fetch(request);
+                });
+    }
+    getBaseUrl(settings) {
+        if (!settings.url || settings.url.trim() === "") {
+            throw new BadDataException("Loki data source requires a URL (e.g. http://loki.example.com:3100).");
+        }
+        return settings.url.trim().replace(/\/+$/, "");
+    }
+    /*
+     * All egress goes through DataSourceHttpFetch, which runs the SSRF egress
+     * guard and pins validated addresses before dialing. Errors are
+     * sanitized so credentials can never surface in an API response.
+     */
+    async fetchSanitized(settings, request) {
+        try {
+            return await this.fetchFunction(request);
+        }
+        catch (error) {
+            throw new BadDataException(SqlResultShaper.sanitizeError(error, SqlResultShaper.collectSecrets(settings)));
+        }
+    }
+    async testConnection(settings) {
+        const baseUrl = this.getBaseUrl(settings);
+        const endDate = new Date();
+        const startDate = new Date(endDate.getTime() - 60 * 60 * 1000);
+        const params = new URLSearchParams();
+        params.set("start", toLokiNanoseconds(startDate));
+        params.set("end", toLokiNanoseconds(endDate));
+        const headers = DataSourceHttpFetch.buildAuthHeaders(settings);
+        const response = await this.fetchSanitized(settings, {
+            method: "GET",
+            url: `${baseUrl}/loki/api/v1/labels?${params.toString()}`,
+            headers: headers,
+            timeoutInMs: DATA_SOURCE_CONNECT_TIMEOUT_IN_MS,
+        });
+        const body = response.bodyJson;
+        if (body === null ||
+            body === undefined ||
+            typeof body !== "object" ||
+            Array.isArray(body) ||
+            body["status"] !== "success") {
+            throw new BadDataException('Connected to the host, but it did not respond like a Grafana Loki API (expected { "status": "success" } from /loki/api/v1/labels). Check the URL — it should be the Loki base URL, e.g. http://loki.example.com:3100.');
+        }
+    }
+    async runRangeQuery(settings, query, window, limit) {
+        var _a;
+        if (!query || query.trim() === "") {
+            throw new BadDataException("Query is required.");
+        }
+        const baseUrl = this.getBaseUrl(settings);
+        const stepInSeconds = (_a = window.stepInSeconds) !== null && _a !== void 0 ? _a : DataSourceLimitsUtil.getStepInSeconds(window.startDate, window.endDate);
+        const params = new URLSearchParams();
+        params.set("query", query);
+        params.set("start", toLokiNanoseconds(window.startDate));
+        params.set("end", toLokiNanoseconds(window.endDate));
+        params.set("step", `${stepInSeconds}s`);
+        params.set("limit", limit.toString());
+        const headers = DataSourceHttpFetch.buildAuthHeaders(settings);
+        const response = await this.fetchSanitized(settings, {
+            method: "GET",
+            url: `${baseUrl}/loki/api/v1/query_range?${params.toString()}`,
+            headers: headers,
+            timeoutInMs: DATA_SOURCE_QUERY_TIMEOUT_IN_MS,
+        });
+        return parseLokiResponseData(response.bodyJson);
+    }
+    async queryTimeSeries(settings, query, window) {
+        const data = await this.runRangeQuery(settings, query, window, DATA_SOURCE_MAX_TIME_SERIES_ROWS + 1);
+        if (data.resultType === "streams") {
+            throw new BadDataException('This LogQL query returns raw log streams, which cannot be charted. Wrap it in a LogQL metric function such as rate() or count_over_time() — e.g. sum(rate({app="api"} [5m])) — or use the Table widget to view the log lines.');
+        }
+        if (data.resultType !== "matrix") {
+            throw new BadDataException(`Loki returned an unexpected result type "${data.resultType}" for a range query. Charts require a LogQL metric query that produces a matrix result.`);
+        }
+        return lokiMatrixToTimeSeries(data.result);
+    }
+    async queryTable(settings, query, window) {
+        const data = await this.runRangeQuery(settings, query, window, DATA_SOURCE_MAX_TABLE_ROWS + 1);
+        let rows;
+        if (data.resultType === "streams") {
+            rows = lokiStreamsToTableRows(data.result);
+        }
+        else if (data.resultType === "matrix") {
+            rows = lokiMatrixToTableRows(data.result);
+        }
+        else {
+            throw new BadDataException(`Loki returned an unexpected result type "${data.resultType}" for a range query. Expected "streams" (raw logs) or "matrix" (metric query).`);
+        }
+        return SqlResultShaper.rowsToTable(rows, {
+            maxRows: DATA_SOURCE_MAX_TABLE_ROWS,
+        });
+    }
+}
+//# sourceMappingURL=LokiConnector.js.map

package/build/dist/Server/Utils/DataSource/Connectors/LokiConnector.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"LokiConnector.js","sourceRoot":"","sources":["../../../../../../Server/Utils/DataSource/Connectors/LokiConnector.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,iCAAiC,EACjC,sBAAsB,EACtB,0BAA0B,EAC1B,gCAAgC,EAChC,+BAA+B,EAC/B,oBAAoB,GACrB,MAAM,+CAA+C,CAAC;AAEvD,OAAO,cAAc,MAAM,6CAA6C,CAAC;AACzE,OAAO,gBAAgB,MAAM,8CAA8C,CAAC;AAE5E,OAAO,mBAGN,MAAM,cAAc,CAAC;AACtB,OAAO,eAAe,MAAM,oBAAoB,CAAC;AAqCjD,MAAM,2BAA2B,GAAW,MAAM,CAAC,OAAO,CAAC,CAAC;AAE5D,wEAAwE;AACxE,MAAM,oBAAoB,GAAW,SAAS,CAAC;AAE/C;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAU;IAC1C,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,GAAG,2BAA2B,CAAC,CAAC,QAAQ,EAAE,CAAC;AAC3E,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAAC,GAAY;IAC/C,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACpD,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;IACjC,CAAC;IACD,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QAC5B,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,OAAO,GAAW,GAAG,CAAC,IAAI,EAAE,CAAC;IACnC,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACxC,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC;AACzB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CAAC,GAAY;IAChD,MAAM,WAAW,GAAkB,oBAAoB,CAAC,GAAG,CAAC,CAAC;IAC7D,IAAI,WAAW,KAAK,IAAI,EAAE,CAAC;QACzB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,IAAI,GAAS,IAAI,IAAI,CACzB,MAAM,CAAC,WAAW,GAAG,2BAA2B,CAAC,CAClD,CAAC;IACF,OAAO,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;AAC7C,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CAAC,QAAiB;IACrD,IACE,QAAQ,KAAK,IAAI;QACjB,QAAQ,KAAK,SAAS;QACtB,OAAO,QAAQ,KAAK,QAAQ;QAC5B,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EACvB,CAAC;QACD,MAAM,IAAI,gBAAgB,CACxB,sGAAsG,CACvG,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAA4B,QAAmC,CAAC;IAE1E,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,SAAS,EAAE,CAAC;QACjC,MAAM,WAAW,GACf,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;QACjE,MAAM,IAAI,gBAAgB,CACxB,kCAAkC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,WAAW,EAAE,CAC1E,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAY,IAAI,CAAC,MAAM,CAAC,CAAC;IACtC,IACE,OAAO,KAAK,IAAI;QAChB,OAAO,KAAK,SAAS;QACrB,OAAO,OAAO,KAAK,QAAQ;QAC3B,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EACtB,CAAC;QACD,MAAM,IAAI,gBAAgB,CACxB,6GAA6G,CAC9G,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAA4B,OAAkC,CAAC;IACzE,MAAM,UAAU,GAAY,IAAI,CAAC,YAAY,CAAC,CAAC;IAC/C,MAAM,MAAM,GAAY,IAAI,CAAC,QAAQ,CAAC,CAAC;IAEvC,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC7D,MAAM,IAAI,gBAAgB,CACxB,0DAA0D,CAC3D,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;AACpD,CAAC;AAED;;;GAGG;AACH,SAAS,aAAa,CACpB,GAAY,EACZ,WAA0B;IAE1B,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,IACE,GAAG,KAAK,IAAI;QACZ,GAAG,KAAK,SAAS;QACjB,OAAO,GAAG,KAAK,QAAQ;QACvB,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAClB,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,MAAM,SAAS,GAA4B,GAA8B,CAAC;IAC1E,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QACzC,IAAI,WAAW,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YAC9B,SAAS;QACX,CAAC;QACD,MAAM,KAAK,GAAY,SAAS,CAAC,GAAG,CAAC,CAAC;QACtC,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YAC1C,SAAS;QACX,CAAC;QACD,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC9B,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAAC,GAAY;IAC/C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1C,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,YAAY,GAAY,GAAG,CAAC,CAAC,CAAC,CAAC;IACrC,MAAM,QAAQ,GAAY,GAAG,CAAC,CAAC,CAAC,CAAC;IAEjC,IAAI,OAAO,GAAkB,IAAI,CAAC;IAClC,IAAI,OAAO,YAAY,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;QACtE,OAAO,GAAG,YAAY,CAAC;IACzB,CAAC;SAAM,IACL,OAAO,YAAY,KAAK,QAAQ;QAChC,YAAY,CAAC,IAAI,EAAE,KAAK,EAAE;QAC1B,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,EACrC,CAAC;QACD,OAAO,GAAG,MAAM,CAAC,YAAY,CAAC,CAAC;IACjC,CAAC;IACD,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,IAAI,CAAC,EAAE,CAAC;QACrC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,KAAK,GAAkB,IAAI,CAAC;IAChC,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACjC,KAAK,GAAG,QAAQ,CAAC;IACnB,CAAC;SAAM,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QAClE,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC3B,CAAC;IACD,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAC9C,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,EAAE,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;AAC3E,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB,CACpC,MAAsB;IAEtB,MAAM,IAAI,GAA2B,EAAE,CAAC;IACxC,IAAI,SAAS,GAAY,KAAK,CAAC;IAC/B,IAAI,UAAU,GAAW,CAAC,CAAC;IAC3B,IAAI,SAAS,GAAY,KAAK,CAAC;IAE/B,KAAK,MAAM,SAAS,IAAI,MAAM,EAAE,CAAC;QAC/B,IACE,SAAS,KAAK,IAAI;YAClB,OAAO,SAAS,KAAK,QAAQ;YAC7B,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,EACxB,CAAC;YACD,SAAS;QACX,CAAC;QAED,IAAI,UAAU,IAAI,sBAAsB,EAAE,CAAC;YACzC,SAAS,GAAG,IAAI,CAAC;YACjB,MAAM;QACR,CAAC;QACD,UAAU,IAAI,CAAC,CAAC;QAEhB,MAAM,MAAM,GAA4B,SAGvC,CAAC;QACF,MAAM,MAAM,GAA2B,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE;YACrE,UAAU;SACX,CAAC,CAAC;QACH,MAAM,MAAM,GAAY,MAAM,CAAC,QAAQ,CAAC,CAAC;QACzC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAC3B,SAAS;QACX,CAAC;QAED,KAAK,MAAM,QAAQ,IAAI,MAAM,EAAE,CAAC;YAC9B,MAAM,MAAM,GAA2B,oBAAoB,CAAC,QAAQ,CAAC,CAAC;YACtE,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,SAAS;YACX,CAAC;YACD,IAAI,IAAI,CAAC,MAAM,IAAI,gCAAgC,EAAE,CAAC;gBACpD,SAAS,GAAG,IAAI,CAAC;gBACjB,SAAS,GAAG,IAAI,CAAC;gBACjB,MAAM;YACR,CAAC;YACD,MAAM,KAAK,GAAoB;gBAC7B,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,KAAK,EAAE,MAAM,CAAC,KAAK;aACD,CAAC;YACrB,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAClC,KAAiC,CAAC,YAAY,CAAC,qBAAQ,MAAM,CAAE,CAAC;YACnE,CAAC;YACD,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnB,CAAC;QAED,IAAI,SAAS,EAAE,CAAC;YACd,MAAM;QACR,CAAC;IACH,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC;AAC9C,CAAC;AAOD;;;;;;;GAOG;AACH,MAAM,UAAU,sBAAsB,CACpC,MAAsB;IAEtB,MAAM,OAAO,GAAwB,EAAE,CAAC;IAExC,KAAK,MAAM,SAAS,IAAI,MAAM,EAAE,CAAC;QAC/B,IACE,SAAS,KAAK,IAAI;YAClB,OAAO,SAAS,KAAK,QAAQ;YAC7B,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,EACxB,CAAC;YACD,SAAS;QACX,CAAC;QACD,MAAM,MAAM,GAA4B,SAGvC,CAAC;QACF,MAAM,MAAM,GAA2B,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAC;QAC3E,MAAM,MAAM,GAAY,MAAM,CAAC,QAAQ,CAAC,CAAC;QACzC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAC3B,SAAS;QACX,CAAC;QAED,KAAK,MAAM,QAAQ,IAAI,MAAM,EAAE,CAAC;YAC9B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACpD,SAAS;YACX,CAAC;YACD,MAAM,WAAW,GAAkB,oBAAoB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;YACrE,IAAI,WAAW,KAAK,IAAI,EAAE,CAAC;gBACzB,SAAS;YACX,CAAC;YACD,MAAM,SAAS,GAAS,IAAI,IAAI,CAC9B,MAAM,CAAC,WAAW,GAAG,2BAA2B,CAAC,CAClD,CAAC;YACF,IAAI,KAAK,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC;gBAC/B,SAAS;YACX,CAAC;YACD,MAAM,OAAO,GAAY,QAAQ,CAAC,CAAC,CAAC,CAAC;YACrC,MAAM,GAAG,GAA4B;gBACnC,SAAS,EAAE,SAAS;gBACpB,IAAI,EAAE,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,aAAP,OAAO,cAAP,OAAO,GAAI,EAAE,CAAC;aACpE,CAAC;YACF,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;gBACtC,IAAI,GAAG,KAAK,WAAW,IAAI,GAAG,KAAK,MAAM,EAAE,CAAC;oBAC1C,GAAG,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;gBACzB,CAAC;YACH,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;QACjD,CAAC;IACH,CAAC;IAED,OAAO,CAAC,IAAI,CAAC,CAAC,CAAe,EAAE,CAAe,EAAU,EAAE;QACxD,IAAI,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,KAAK,EAAE,CAAC;YACxB,OAAO,CAAC,CAAC;QACX,CAAC;QACD,OAAO,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;IAEH,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,KAAmB,EAA2B,EAAE;QAClE,OAAO,KAAK,CAAC,GAAG,CAAC;IACnB,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CACnC,MAAsB;IAEtB,MAAM,IAAI,GAAmC,EAAE,CAAC;IAEhD,KAAK,MAAM,SAAS,IAAI,MAAM,EAAE,CAAC;QAC/B,IACE,SAAS,KAAK,IAAI;YAClB,OAAO,SAAS,KAAK,QAAQ;YAC7B,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,EACxB,CAAC;YACD,SAAS;QACX,CAAC;QACD,MAAM,MAAM,GAA4B,SAGvC,CAAC;QACF,MAAM,MAAM,GAA2B,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE;YACrE,UAAU;SACX,CAAC,CAAC;QACH,MAAM,MAAM,GAAY,MAAM,CAAC,QAAQ,CAAC,CAAC;QACzC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAC3B,SAAS;QACX,CAAC;QAED,KAAK,MAAM,QAAQ,IAAI,MAAM,EAAE,CAAC;YAC9B,MAAM,MAAM,GAA2B,oBAAoB,CAAC,QAAQ,CAAC,CAAC;YACtE,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,SAAS;YACX,CAAC;YACD,MAAM,GAAG,GAA4B;gBACnC,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,KAAK,EAAE,MAAM,CAAC,KAAK;aACpB,CAAC;YACF,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;gBACtC,IAAI,GAAG,KAAK,WAAW,IAAI,GAAG,KAAK,OAAO,EAAE,CAAC;oBAC3C,GAAG,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;gBACzB,CAAC;YACH,CAAC;YACD,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACjB,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,CAAC,OAAO,OAAO,aAAa;IAKhC;;;;OAIG;IACH,YAAmB,aAA6C;QATzD,mBAAc,GAAmB,cAAc,CAAC,IAAI,CAAC;QAU1D,IAAI,CAAC,aAAa;YAChB,aAAa;gBACb,CAAC,CAAC,OAA8B,EAAmC,EAAE;oBACnE,OAAO,mBAAmB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;gBAC5C,CAAC,CAAC,CAAC;IACP,CAAC;IAEO,UAAU,CAAC,QAAsC;QACvD,IAAI,CAAC,QAAQ,CAAC,GAAG,IAAI,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YAChD,MAAM,IAAI,gBAAgB,CACxB,sEAAsE,CACvE,CAAC;QACJ,CAAC;QACD,OAAO,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACjD,CAAC;IAED;;;;OAIG;IACK,KAAK,CAAC,cAAc,CAC1B,QAAsC,EACtC,OAA8B;QAE9B,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;QAC3C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,gBAAgB,CACxB,eAAe,CAAC,aAAa,CAC3B,KAAK,EACL,eAAe,CAAC,cAAc,CAAC,QAAQ,CAAC,CACzC,CACF,CAAC;QACJ,CAAC;IACH,CAAC;IAEM,KAAK,CAAC,cAAc,CACzB,QAAsC;QAEtC,MAAM,OAAO,GAAW,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;QAElD,MAAM,OAAO,GAAS,IAAI,IAAI,EAAE,CAAC;QACjC,MAAM,SAAS,GAAS,IAAI,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QAErE,MAAM,MAAM,GAAoB,IAAI,eAAe,EAAE,CAAC;QACtD,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,iBAAiB,CAAC,SAAS,CAAC,CAAC,CAAC;QAClD,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,iBAAiB,CAAC,OAAO,CAAC,CAAC,CAAC;QAE9C,MAAM,OAAO,GACX,mBAAmB,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QAEjD,MAAM,QAAQ,GAA2B,MAAM,IAAI,CAAC,cAAc,CAChE,QAAQ,EACR;YACE,MAAM,EAAE,KAAK;YACb,GAAG,EAAE,GAAG,OAAO,uBAAuB,MAAM,CAAC,QAAQ,EAAE,EAAE;YACzD,OAAO,EAAE,OAAO;YAChB,WAAW,EAAE,iCAAiC;SAC/C,CACF,CAAC;QAEF,MAAM,IAAI,GAAY,QAAQ,CAAC,QAAQ,CAAC;QACxC,IACE,IAAI,KAAK,IAAI;YACb,IAAI,KAAK,SAAS;YAClB,OAAO,IAAI,KAAK,QAAQ;YACxB,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;YAClB,IAAgC,CAAC,QAAQ,CAAC,KAAK,SAAS,EACzD,CAAC;YACD,MAAM,IAAI,gBAAgB,CACxB,uNAAuN,CACxN,CAAC;QACJ,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,aAAa,CACzB,QAAsC,EACtC,KAAa,EACb,MAA6B,EAC7B,KAAa;;QAEb,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YAClC,MAAM,IAAI,gBAAgB,CAAC,oBAAoB,CAAC,CAAC;QACnD,CAAC;QAED,MAAM,OAAO,GAAW,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;QAElD,MAAM,aAAa,GACjB,MAAA,MAAM,CAAC,aAAa,mCACpB,oBAAoB,CAAC,gBAAgB,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;QAE1E,MAAM,MAAM,GAAoB,IAAI,eAAe,EAAE,CAAC;QACtD,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAC3B,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,iBAAiB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;QACzD,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,iBAAiB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;QACrD,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,aAAa,GAAG,CAAC,CAAC;QACxC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;QAEtC,MAAM,OAAO,GACX,mBAAmB,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QAEjD,MAAM,QAAQ,GAA2B,MAAM,IAAI,CAAC,cAAc,CAChE,QAAQ,EACR;YACE,MAAM,EAAE,KAAK;YACb,GAAG,EAAE,GAAG,OAAO,4BAA4B,MAAM,CAAC,QAAQ,EAAE,EAAE;YAC9D,OAAO,EAAE,OAAO;YAChB,WAAW,EAAE,+BAA+B;SAC7C,CACF,CAAC;QAEF,OAAO,qBAAqB,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAClD,CAAC;IAEM,KAAK,CAAC,eAAe,CAC1B,QAAsC,EACtC,KAAa,EACb,MAA6B;QAE7B,MAAM,IAAI,GAAuB,MAAM,IAAI,CAAC,aAAa,CACvD,QAAQ,EACR,KAAK,EACL,MAAM,EACN,gCAAgC,GAAG,CAAC,CACrC,CAAC;QAEF,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;YAClC,MAAM,IAAI,gBAAgB,CACxB,+NAA+N,CAChO,CAAC;QACJ,CAAC;QAED,IAAI,IAAI,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;YACjC,MAAM,IAAI,gBAAgB,CACxB,4CAA4C,IAAI,CAAC,UAAU,yFAAyF,CACrJ,CAAC;QACJ,CAAC;QAED,OAAO,sBAAsB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC7C,CAAC;IAEM,KAAK,CAAC,UAAU,CACrB,QAAsC,EACtC,KAAa,EACb,MAA6B;QAE7B,MAAM,IAAI,GAAuB,MAAM,IAAI,CAAC,aAAa,CACvD,QAAQ,EACR,KAAK,EACL,MAAM,EACN,0BAA0B,GAAG,CAAC,CAC/B,CAAC;QAEF,IAAI,IAAoC,CAAC;QACzC,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;YAClC,IAAI,GAAG,sBAAsB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC7C,CAAC;aAAM,IAAI,IAAI,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;YACxC,IAAI,GAAG,qBAAqB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC5C,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,gBAAgB,CACxB,4CAA4C,IAAI,CAAC,UAAU,gFAAgF,CAC5I,CAAC;QACJ,CAAC;QAED,OAAO,eAAe,CAAC,WAAW,CAAC,IAAI,EAAE;YACvC,OAAO,EAAE,0BAA0B;SACpC,CAAC,CAAC;IACL,CAAC;CACF"}

package/build/dist/Server/Utils/DataSource/Connectors/MySqlConnector.js

@@ -0,0 +1,195 @@
+import { createConnection, } from "mysql2/promise";
+import { DATA_SOURCE_CONNECT_TIMEOUT_IN_MS, DATA_SOURCE_MAX_TABLE_ROWS, DATA_SOURCE_MAX_TIME_SERIES_ROWS, DATA_SOURCE_QUERY_TIMEOUT_IN_MS, } from "../../../../Types/DataSource/DataSourceLimits";
+import DataSourceType from "../../../../Types/DataSource/DataSourceType";
+import BadDataException from "../../../../Types/Exception/BadDataException";
+import DataSourceEgressGuard from "../EgressGuard";
+import SqlQueryGuard from "../SqlQueryGuard";
+import SqlResultShaper from "../SqlResultShaper";
+const defaultConnectionFactory = async (options) => {
+    const connection = await createConnection(options);
+    return {
+        query: async (sql) => {
+            const result = (await connection.query(sql));
+            return result;
+        },
+        end: () => {
+            return connection.end();
+        },
+        destroy: () => {
+            connection.destroy();
+        },
+    };
+};
+export default class MySqlConnector {
+    constructor(connectionFactory) {
+        this.dataSourceType = DataSourceType.MySQL;
+        this.connectionFactory = connectionFactory || defaultConnectionFactory;
+    }
+    async testConnection(settings) {
+        const connection = await this.connect(settings);
+        try {
+            await connection.query("SELECT 1");
+        }
+        catch (error) {
+            throw new BadDataException(SqlResultShaper.sanitizeError(error, this.getSecrets(settings)));
+        }
+        finally {
+            await this.closeConnection(connection);
+        }
+    }
+    async queryTimeSeries(settings, query, window) {
+        const rows = await this.runReadOnlyQuery(settings, query, window, DATA_SOURCE_MAX_TIME_SERIES_ROWS);
+        return SqlResultShaper.rowsToTimeSeries(rows, {
+            maxRows: DATA_SOURCE_MAX_TIME_SERIES_ROWS,
+        });
+    }
+    async queryTable(settings, query, window) {
+        const rows = await this.runReadOnlyQuery(settings, query, window, DATA_SOURCE_MAX_TABLE_ROWS);
+        return SqlResultShaper.rowsToTable(rows, {
+            maxRows: DATA_SOURCE_MAX_TABLE_ROWS,
+        });
+    }
+    getSecrets(settings) {
+        return [
+            settings.password,
+            settings.apiToken,
+            settings.databaseHost,
+            settings.username,
+        ];
+    }
+    buildConnectionOptions(settings) {
+        var _a, _b, _c;
+        const options = {
+            host: settings.databaseHost,
+            port: (_a = settings.databasePort) !== null && _a !== void 0 ? _a : 3306,
+            connectTimeout: DATA_SOURCE_CONNECT_TIMEOUT_IN_MS,
+            /*
+             * NEVER true: stacked statements ("SELECT 1; DROP TABLE x") must be
+             * impossible at the driver level, as defense in depth beneath the
+             * SqlQueryGuard classifier and the read-only transaction.
+             */
+            multipleStatements: false,
+        };
+        if (settings.databaseName !== undefined) {
+            options.database = settings.databaseName;
+        }
+        if (settings.username !== undefined) {
+            options.user = settings.username;
+        }
+        if (settings.password !== undefined) {
+            options.password = settings.password;
+        }
+        if (((_b = settings.additionalOptions) === null || _b === void 0 ? void 0 : _b["sslEnabled"]) === true) {
+            /*
+             * Certificate verification stays ON by default; only an explicit
+             * sslRejectUnauthorized === false disables it.
+             */
+            options.ssl = {
+                rejectUnauthorized: ((_c = settings.additionalOptions) === null || _c === void 0 ? void 0 : _c["sslRejectUnauthorized"]) !== false,
+            };
+        }
+        return options;
+    }
+    /*
+     * Egress-validate the host, then open a driver connection. Called only
+     * after the query (when there is one) has already passed the read-only
+     * guard, so a rejected query never even dials the server.
+     */
+    async connect(settings) {
+        if (!settings.databaseHost) {
+            throw new BadDataException("MySQL data source is missing a database host. Set the host in the data source settings.");
+        }
+        /*
+         * SSRF guard — must pass BEFORE any socket is opened towards the
+         * configured host.
+         */
+        await DataSourceEgressGuard.assertHostnameAllowed(settings.databaseHost);
+        const options = this.buildConnectionOptions(settings);
+        try {
+            return await this.connectionFactory(options);
+        }
+        catch (error) {
+            throw new BadDataException(SqlResultShaper.sanitizeError(error, this.getSecrets(settings)));
+        }
+    }
+    /*
+     * Teardown: roll the read-only transaction back (harmless when none is
+     * open), then close. Every step is guarded — a wedged server must not
+     * turn cleanup into an unhandled rejection — with destroy() as the
+     * hard fallback when a graceful end() fails.
+     */
+    async closeConnection(connection) {
+        try {
+            await connection.query("ROLLBACK");
+        }
+        catch (_a) {
+            /* Best effort — the transaction may already be gone. */
+        }
+        try {
+            await connection.end();
+        }
+        catch (_b) {
+            try {
+                connection.destroy();
+            }
+            catch (_c) {
+                /* Best effort — the socket may already be gone. */
+            }
+        }
+    }
+    async runReadOnlyQuery(settings, query, window, maxRows) {
+        const withMacros = SqlQueryGuard.applyTimeMacros(query, window.startDate, window.endDate);
+        /*
+         * The read-only classifier runs on the USER's query only. The session
+         * SET statements issued below are our own fixed strings and never pass
+         * through this guard — the guard's ban on the SET keyword applies to
+         * user queries, not to the connector's session setup.
+         */
+        SqlQueryGuard.assertReadOnlyQuery(withMacros);
+        /* Drop a trailing semicolon; the statement runs bare. */
+        const finalSql = withMacros.replace(/;\s*$/, "");
+        const connection = await this.connect(settings);
+        try {
+            /*
+             * Best-effort server-side statement timeout. MAX_EXECUTION_TIME
+             * (milliseconds, SELECT-only) exists on MySQL 5.7.8+; MariaDB uses
+             * max_statement_time in seconds instead, so this statement can fail
+             * there — swallow the error and rely on the engine defaults rather
+             * than failing the query.
+             */
+            try {
+                await connection.query(`SET SESSION MAX_EXECUTION_TIME = ${DATA_SOURCE_QUERY_TIMEOUT_IN_MS}`);
+            }
+            catch (_a) {
+                /* Non-fatal — variable unknown on MariaDB and older MySQL. */
+            }
+            /*
+             * Server-side row bound at cap+1 so the shaper can detect truncation.
+             * An explicit LIMIT in the user's query takes precedence over
+             * SQL_SELECT_LIMIT; the shaper's maxRows clamp is the authoritative
+             * cap either way.
+             */
+            await connection.query(`SET SESSION SQL_SELECT_LIMIT = ${maxRows + 1}`);
+            /*
+             * Server-enforced read-only guarantee, independent of the query text
+             * classifier.
+             */
+            await connection.query("START TRANSACTION READ ONLY");
+            const result = await connection.query(finalSql);
+            const rows = result[0];
+            return Array.isArray(rows)
+                ? rows
+                : [];
+        }
+        catch (error) {
+            if (error instanceof BadDataException) {
+                throw error;
+            }
+            throw new BadDataException(SqlResultShaper.sanitizeError(error, this.getSecrets(settings)));
+        }
+        finally {
+            await this.closeConnection(connection);
+        }
+    }
+}
+//# sourceMappingURL=MySqlConnector.js.map

package/build/dist/Server/Utils/DataSource/Connectors/MySqlConnector.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"MySqlConnector.js","sourceRoot":"","sources":["../../../../../../Server/Utils/DataSource/Connectors/MySqlConnector.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,gBAAgB,GAEjB,MAAM,gBAAgB,CAAC;AAExB,OAAO,EACL,iCAAiC,EACjC,0BAA0B,EAC1B,gCAAgC,EAChC,+BAA+B,GAChC,MAAM,+CAA+C,CAAC;AAEvD,OAAO,cAAc,MAAM,6CAA6C,CAAC;AACzE,OAAO,gBAAgB,MAAM,8CAA8C,CAAC;AAC5E,OAAO,qBAAqB,MAAM,gBAAgB,CAAC;AACnD,OAAO,aAAa,MAAM,kBAAkB,CAAC;AAC7C,OAAO,eAAe,MAAM,oBAAoB,CAAC;AAkCjD,MAAM,wBAAwB,GAA2B,KAAK,EAC5D,OAA0B,EACI,EAAE;IAChC,MAAM,UAAU,GAAe,MAAM,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAC/D,OAAO;QACL,KAAK,EAAE,KAAK,EAAE,GAAW,EAA+B,EAAE;YACxD,MAAM,MAAM,GAAuB,CAAC,MAAM,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAG9D,CAAC;YACF,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,GAAG,EAAE,GAAkB,EAAE;YACvB,OAAO,UAAU,CAAC,GAAG,EAAE,CAAC;QAC1B,CAAC;QACD,OAAO,EAAE,GAAS,EAAE;YAClB,UAAU,CAAC,OAAO,EAAE,CAAC;QACvB,CAAC;KACF,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,CAAC,OAAO,OAAO,cAAc;IAKjC,YAAmB,iBAA0C;QAJtD,mBAAc,GAAmB,cAAc,CAAC,KAAK,CAAC;QAK3D,IAAI,CAAC,iBAAiB,GAAG,iBAAiB,IAAI,wBAAwB,CAAC;IACzE,CAAC;IAEM,KAAK,CAAC,cAAc,CACzB,QAAsC;QAEtC,MAAM,UAAU,GAAwB,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACrE,IAAI,CAAC;YACH,MAAM,UAAU,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QACrC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,gBAAgB,CACxB,eAAe,CAAC,aAAa,CAAC,KAAK,EAAE,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAChE,CAAC;QACJ,CAAC;gBAAS,CAAC;YACT,MAAM,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC;QACzC,CAAC;IACH,CAAC;IAEM,KAAK,CAAC,eAAe,CAC1B,QAAsC,EACtC,KAAa,EACb,MAA6B;QAE7B,MAAM,IAAI,GAAmC,MAAM,IAAI,CAAC,gBAAgB,CACtE,QAAQ,EACR,KAAK,EACL,MAAM,EACN,gCAAgC,CACjC,CAAC;QACF,OAAO,eAAe,CAAC,gBAAgB,CAAC,IAAI,EAAE;YAC5C,OAAO,EAAE,gCAAgC;SAC1C,CAAC,CAAC;IACL,CAAC;IAEM,KAAK,CAAC,UAAU,CACrB,QAAsC,EACtC,KAAa,EACb,MAA6B;QAE7B,MAAM,IAAI,GAAmC,MAAM,IAAI,CAAC,gBAAgB,CACtE,QAAQ,EACR,KAAK,EACL,MAAM,EACN,0BAA0B,CAC3B,CAAC;QACF,OAAO,eAAe,CAAC,WAAW,CAAC,IAAI,EAAE;YACvC,OAAO,EAAE,0BAA0B;SACpC,CAAC,CAAC;IACL,CAAC;IAEO,UAAU,CAChB,QAAsC;QAEtC,OAAO;YACL,QAAQ,CAAC,QAAQ;YACjB,QAAQ,CAAC,QAAQ;YACjB,QAAQ,CAAC,YAAY;YACrB,QAAQ,CAAC,QAAQ;SAClB,CAAC;IACJ,CAAC;IAEO,sBAAsB,CAC5B,QAAsC;;QAEtC,MAAM,OAAO,GAAsB;YACjC,IAAI,EAAE,QAAQ,CAAC,YAAa;YAC5B,IAAI,EAAE,MAAA,QAAQ,CAAC,YAAY,mCAAI,IAAI;YACnC,cAAc,EAAE,iCAAiC;YACjD;;;;eAIG;YACH,kBAAkB,EAAE,KAAK;SAC1B,CAAC;QAEF,IAAI,QAAQ,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;YACxC,OAAO,CAAC,QAAQ,GAAG,QAAQ,CAAC,YAAY,CAAC;QAC3C,CAAC;QACD,IAAI,QAAQ,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;YACpC,OAAO,CAAC,IAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC;QACnC,CAAC;QACD,IAAI,QAAQ,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;YACpC,OAAO,CAAC,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC;QACvC,CAAC;QAED,IAAI,CAAA,MAAA,QAAQ,CAAC,iBAAiB,0CAAG,YAAY,CAAC,MAAK,IAAI,EAAE,CAAC;YACxD;;;eAGG;YACH,OAAO,CAAC,GAAG,GAAG;gBACZ,kBAAkB,EAChB,CAAA,MAAA,QAAQ,CAAC,iBAAiB,0CAAG,uBAAuB,CAAC,MAAK,KAAK;aAClE,CAAC;QACJ,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;;;OAIG;IACK,KAAK,CAAC,OAAO,CACnB,QAAsC;QAEtC,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,CAAC;YAC3B,MAAM,IAAI,gBAAgB,CACxB,yFAAyF,CAC1F,CAAC;QACJ,CAAC;QAED;;;WAGG;QACH,MAAM,qBAAqB,CAAC,qBAAqB,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;QAEzE,MAAM,OAAO,GAAsB,IAAI,CAAC,sBAAsB,CAAC,QAAQ,CAAC,CAAC;QAEzE,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC;QAC/C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,gBAAgB,CACxB,eAAe,CAAC,aAAa,CAAC,KAAK,EAAE,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAChE,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACK,KAAK,CAAC,eAAe,CAC3B,UAA+B;QAE/B,IAAI,CAAC;YACH,MAAM,UAAU,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QACrC,CAAC;QAAC,WAAM,CAAC;YACP,wDAAwD;QAC1D,CAAC;QAED,IAAI,CAAC;YACH,MAAM,UAAU,CAAC,GAAG,EAAE,CAAC;QACzB,CAAC;QAAC,WAAM,CAAC;YACP,IAAI,CAAC;gBACH,UAAU,CAAC,OAAO,EAAE,CAAC;YACvB,CAAC;YAAC,WAAM,CAAC;gBACP,mDAAmD;YACrD,CAAC;QACH,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,gBAAgB,CAC5B,QAAsC,EACtC,KAAa,EACb,MAA6B,EAC7B,OAAe;QAEf,MAAM,UAAU,GAAW,aAAa,CAAC,eAAe,CACtD,KAAK,EACL,MAAM,CAAC,SAAS,EAChB,MAAM,CAAC,OAAO,CACf,CAAC;QAEF;;;;;WAKG;QACH,aAAa,CAAC,mBAAmB,CAAC,UAAU,CAAC,CAAC;QAE9C,yDAAyD;QACzD,MAAM,QAAQ,GAAW,UAAU,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QAEzD,MAAM,UAAU,GAAwB,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAErE,IAAI,CAAC;YACH;;;;;;eAMG;YACH,IAAI,CAAC;gBACH,MAAM,UAAU,CAAC,KAAK,CACpB,oCAAoC,+BAA+B,EAAE,CACtE,CAAC;YACJ,CAAC;YAAC,WAAM,CAAC;gBACP,8DAA8D;YAChE,CAAC;YAED;;;;;eAKG;YACH,MAAM,UAAU,CAAC,KAAK,CAAC,kCAAkC,OAAO,GAAG,CAAC,EAAE,CAAC,CAAC;YAExE;;;eAGG;YACH,MAAM,UAAU,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAC;YAEtD,MAAM,MAAM,GAAuB,MAAM,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YACpE,MAAM,IAAI,GAAY,MAAM,CAAC,CAAC,CAAC,CAAC;YAChC,OAAO,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;gBACxB,CAAC,CAAE,IAAuC;gBAC1C,CAAC,CAAC,EAAE,CAAC;QACT,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,gBAAgB,EAAE,CAAC;gBACtC,MAAM,KAAK,CAAC;YACd,CAAC;YACD,MAAM,IAAI,gBAAgB,CACxB,eAAe,CAAC,aAAa,CAAC,KAAK,EAAE,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAChE,CAAC;QACJ,CAAC;gBAAS,CAAC;YACT,MAAM,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC;QACzC,CAAC;IACH,CAAC;CACF"}