@oneuptime/common 12.0.5 → 12.0.7

package/build/dist/Server/Utils/DataSource/SqlQueryGuard.js

@@ -0,0 +1,331 @@
+import BadDataException from "../../../Types/Exception/BadDataException";
+/*
+ * Read-only guard + time-macro interpolation for SQL sent to external Data
+ * Sources (PostgreSQL, MySQL, SQL Server, ClickHouse).
+ *
+ * Defense in depth: this classifier is the FIRST layer, applied identically
+ * to every engine; connectors add server-enforced layers where the engine
+ * supports them (pg `default_transaction_read_only=on`, MySQL
+ * `SET SESSION TRANSACTION READ ONLY` + single-statement driver mode,
+ * ClickHouse `readonly=1`). SQL Server has no session read-only mode, so
+ * this classifier — plus the recommendation to connect with a read-only
+ * login — is its enforcement, and the classifier is written to be sound
+ * for T-SQL specifically:
+ *
+ *  - `#` is NOT treated as a comment. It is one in MySQL, but in T-SQL
+ *    `#name` is a temp table — blanking from `#` to end-of-line would hide
+ *    a smuggled `; DROP ...` from the classifier while SQL Server executed
+ *    it. MySQL users must write `--` comments instead (false-rejection is
+ *    the safe failure mode).
+ *  - Backslash-quote (`\'`) is REJECTED outright rather than parsed:
+ *    MySQL/ClickHouse treat it as an escaped quote, PostgreSQL (standard
+ *    conforming strings) as a literal backslash ending the string — two
+ *    engines, two parse trees, and whichever one the classifier picked
+ *    would be exploitable on the other. Users write `''` instead, which
+ *    every engine accepts.
+ *
+ * The classifier works on a STRIPPED copy of the query: contents of string
+ * literals, quoted identifiers and comments are blanked first, so
+ * `SELECT 'DROP TABLE x'` passes while comment-smuggling cannot. A column
+ * literally named `delete` must be quoted — an accepted false-positive
+ * cost. Divergences that remain (e.g. MySQL not nesting block comments)
+ * are contained by that engine's server-enforced layer.
+ */
+const ALLOWED_HEAD_KEYWORDS = [
+    "SELECT",
+    "WITH",
+    "SHOW",
+    "EXPLAIN",
+    "DESCRIBE",
+    "DESC",
+];
+/*
+ * Any of these appearing ANYWHERE (outside strings/comments/quoted
+ * identifiers) rejects the query. Notes:
+ *  - INTO catches `SELECT ... INTO table` (pg/mssql) and MySQL's
+ *    `SELECT ... INTO OUTFILE`.
+ *  - WITH ... DELETE/INSERT data-modifying CTEs are caught by the DML
+ *    words themselves, which is why the head check alone is not enough.
+ *  - SET catches session tampering (`SET GLOBAL`, `SET ROLE`).
+ *  - ANALYZE is intentionally allowed so `EXPLAIN ANALYZE SELECT ...`
+ *    works; under a read-only transaction it cannot write.
+ *  - SYSTEM is intentionally NOT listed: `system.*` tables are the most
+ *    common ClickHouse introspection target and the head check already
+ *    stops `SYSTEM ...` commands.
+ */
+const FORBIDDEN_KEYWORDS = [
+    "INSERT",
+    "UPDATE",
+    "DELETE",
+    "MERGE",
+    "UPSERT",
+    "REPLACE",
+    "DROP",
+    "ALTER",
+    "CREATE",
+    "TRUNCATE",
+    "RENAME",
+    "GRANT",
+    "REVOKE",
+    "EXEC",
+    "EXECUTE",
+    "CALL",
+    "DO",
+    "COPY",
+    "INTO",
+    "SET",
+    "LOCK",
+    "UNLOCK",
+    "PREPARE",
+    "DEALLOCATE",
+    "BEGIN",
+    "COMMIT",
+    "ROLLBACK",
+    "SAVEPOINT",
+    "VACUUM",
+    "REINDEX",
+    "CLUSTER",
+    "CHECKPOINT",
+    "LISTEN",
+    "NOTIFY",
+    "REFRESH",
+    "LOAD",
+    "HANDLER",
+    "OUTFILE",
+    "DUMPFILE",
+    "SHUTDOWN",
+    "KILL",
+    "USE",
+    "ATTACH",
+    "DETACH",
+    "OPTIMIZE",
+    // T-SQL specifics (SQL Server batches don't even need semicolons).
+    "BACKUP",
+    "RESTORE",
+    "DBCC",
+    "RECONFIGURE",
+    "WAITFOR",
+    "OPENQUERY",
+    "OPENROWSET",
+    "OPENDATASOURCE",
+    "OPENXML",
+];
+/*
+ * SQL Server system / extended stored procedures (sp_configure,
+ * xp_cmdshell, ...) — callable without EXEC in some positions, so they get
+ * their own pattern instead of a keyword entry.
+ */
+const FORBIDDEN_PATTERNS = [
+    {
+        pattern: /\b(?:xp_|sp_)\w+/i,
+        description: "system stored procedures (sp_*/xp_*)",
+    },
+];
+/*
+ * A backslash immediately followed by a quote — the escape style whose
+ * meaning differs per engine (see the header comment), so it is rejected
+ * outright.
+ */
+const BACKSLASH_ESCAPED_QUOTE_REGEX = /\\['"]/;
+export default class SqlQueryGuard {
+    /*
+     * Blank the contents of comments, string literals and quoted identifiers
+     * (replaced by spaces so token boundaries survive). Handles:
+     *   -- line comments
+     *   slash-star block comments (nested, as PostgreSQL and T-SQL allow)
+     *   'single quotes'          with '' escaping
+     *   "double-quoted idents"   with "" escaping
+     *   `backtick idents`        (MySQL/ClickHouse)
+     *   [bracket idents]         (SQL Server)
+     *   $tag$ dollar quotes $tag$ (PostgreSQL/ClickHouse)
+     *
+     * Unterminated regions blank to end-of-input, which fails safe: content
+     * is hidden from the ENGINE too or the engine errors on parse.
+     */
+    static stripLiteralsAndComments(sql) {
+        const output = [];
+        const length = sql.length;
+        let index = 0;
+        const blank = (count) => {
+            for (let blanked = 0; blanked < count; blanked++) {
+                output.push(" ");
+            }
+            index += count;
+        };
+        while (index < length) {
+            const char = sql[index];
+            const next = index + 1 < length ? sql[index + 1] : "";
+            // Line comments: --
+            if (char === "-" && next === "-") {
+                while (index < length && sql[index] !== "\n") {
+                    blank(1);
+                }
+                continue;
+            }
+            // Block comments, nested (PostgreSQL and T-SQL nest).
+            if (char === "/" && next === "*") {
+                let depth = 0;
+                while (index < length) {
+                    if (sql[index] === "/" && sql[index + 1] === "*") {
+                        depth++;
+                        blank(2);
+                        continue;
+                    }
+                    if (sql[index] === "*" && sql[index + 1] === "/") {
+                        depth--;
+                        blank(2);
+                        if (depth === 0) {
+                            break;
+                        }
+                        continue;
+                    }
+                    blank(1);
+                }
+                continue;
+            }
+            // Single-quoted string; '' escape only (see \' rejection above).
+            if (char === "'") {
+                blank(1);
+                while (index < length) {
+                    if (sql[index] === "'" && sql[index + 1] === "'") {
+                        blank(2);
+                        continue;
+                    }
+                    if (sql[index] === "'") {
+                        blank(1);
+                        break;
+                    }
+                    blank(1);
+                }
+                continue;
+            }
+            // Double-quoted identifier; "" escape.
+            if (char === '"') {
+                blank(1);
+                while (index < length) {
+                    if (sql[index] === '"' && sql[index + 1] === '"') {
+                        blank(2);
+                        continue;
+                    }
+                    if (sql[index] === '"') {
+                        blank(1);
+                        break;
+                    }
+                    blank(1);
+                }
+                continue;
+            }
+            // Backtick identifier (MySQL/ClickHouse); `` escape.
+            if (char === "`") {
+                blank(1);
+                while (index < length) {
+                    if (sql[index] === "`" && sql[index + 1] === "`") {
+                        blank(2);
+                        continue;
+                    }
+                    if (sql[index] === "`") {
+                        blank(1);
+                        break;
+                    }
+                    blank(1);
+                }
+                continue;
+            }
+            // Bracket identifier (SQL Server); ]] escape.
+            if (char === "[") {
+                blank(1);
+                while (index < length) {
+                    if (sql[index] === "]" && sql[index + 1] === "]") {
+                        blank(2);
+                        continue;
+                    }
+                    if (sql[index] === "]") {
+                        blank(1);
+                        break;
+                    }
+                    blank(1);
+                }
+                continue;
+            }
+            // Dollar-quoted string (PostgreSQL/ClickHouse): $$..$$ or $tag$..$tag$.
+            if (char === "$") {
+                const tagMatch = sql
+                    .substring(index)
+                    .match(/^\$[A-Za-z_]*\$/);
+                if (tagMatch) {
+                    const tag = tagMatch[0];
+                    const closeIndex = sql.indexOf(tag, index + tag.length);
+                    const end = closeIndex === -1 ? length : closeIndex + tag.length;
+                    blank(end - index);
+                    continue;
+                }
+            }
+            output.push(char);
+            index++;
+        }
+        return output.join("");
+    }
+    /*
+     * Throws BadDataException unless the query is a single read-only
+     * statement.
+     */
+    static assertReadOnlyQuery(sql) {
+        if (!sql || sql.trim().length === 0) {
+            throw new BadDataException("Query is required.");
+        }
+        /*
+         * Backslash-escaped quotes parse differently across engines (see the
+         * header comment) — reject rather than guess.
+         */
+        if (BACKSLASH_ESCAPED_QUOTE_REGEX.test(sql)) {
+            throw new BadDataException("Backslash-escaped quotes are not allowed in data source queries. Use doubled quotes ('') to escape a quote character.");
+        }
+        const stripped = this.stripLiteralsAndComments(sql);
+        // Single statement only: any ';' other than trailing rejects.
+        const withoutTrailingSemicolon = stripped.replace(/;\s*$/, "");
+        if (withoutTrailingSemicolon.includes(";")) {
+            throw new BadDataException("Only a single SQL statement is allowed per query.");
+        }
+        const firstWordMatch = withoutTrailingSemicolon.match(/[A-Za-z_]+/);
+        const firstWord = firstWordMatch
+            ? firstWordMatch[0].toUpperCase()
+            : "";
+        if (!ALLOWED_HEAD_KEYWORDS.includes(firstWord)) {
+            throw new BadDataException(`Only read-only queries are allowed (must start with ${ALLOWED_HEAD_KEYWORDS.join(", ")}).`);
+        }
+        for (const keyword of FORBIDDEN_KEYWORDS) {
+            const pattern = new RegExp(`\\b${keyword}\\b`, "i");
+            if (pattern.test(withoutTrailingSemicolon)) {
+                throw new BadDataException(`Query contains a keyword that is not allowed in read-only data source queries: ${keyword}. Quote it if it is a column or table name.`);
+            }
+        }
+        for (const forbidden of FORBIDDEN_PATTERNS) {
+            if (forbidden.pattern.test(withoutTrailingSemicolon)) {
+                throw new BadDataException(`Query contains ${forbidden.description}, which is not allowed in read-only data source queries.`);
+            }
+        }
+    }
+    static formatUtcDateTime(date) {
+        const pad = (value) => {
+            return value.toString().padStart(2, "0");
+        };
+        return `${date.getUTCFullYear()}-${pad(date.getUTCMonth() + 1)}-${pad(date.getUTCDate())} ${pad(date.getUTCHours())}:${pad(date.getUTCMinutes())}:${pad(date.getUTCSeconds())}`;
+    }
+    /*
+     * Replace dashboard time macros with concrete values. Longer tokens are
+     * replaced first so $__startTimeMs is not corrupted by the $__startTime
+     * replacement. Timestamp literals are quoted 'YYYY-MM-DD HH:MM:SS' in
+     * UTC — every supported engine parses that form; sessions are expected
+     * to run in UTC (documented in the query editor help text).
+     */
+    static applyTimeMacros(sql, startDate, endDate) {
+        const rangeSeconds = Math.max(Math.floor((endDate.getTime() - startDate.getTime()) / 1000), 0);
+        return sql
+            .replace(/\$__startTimeMs\b/g, startDate.getTime().toString())
+            .replace(/\$__endTimeMs\b/g, endDate.getTime().toString())
+            .replace(/\$__startTime\b/g, `'${this.formatUtcDateTime(startDate)}'`)
+            .replace(/\$__endTime\b/g, `'${this.formatUtcDateTime(endDate)}'`)
+            .replace(/\$__rangeSeconds\b/g, rangeSeconds.toString());
+    }
+}
+//# sourceMappingURL=SqlQueryGuard.js.map

package/build/dist/Server/Utils/DataSource/SqlQueryGuard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SqlQueryGuard.js","sourceRoot":"","sources":["../../../../../Server/Utils/DataSource/SqlQueryGuard.ts"],"names":[],"mappings":"AAAA,OAAO,gBAAgB,MAAM,2CAA2C,CAAC;AAEzE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAEH,MAAM,qBAAqB,GAAkB;IAC3C,QAAQ;IACR,MAAM;IACN,MAAM;IACN,SAAS;IACT,UAAU;IACV,MAAM;CACP,CAAC;AAEF;;;;;;;;;;;;;GAaG;AACH,MAAM,kBAAkB,GAAkB;IACxC,QAAQ;IACR,QAAQ;IACR,QAAQ;IACR,OAAO;IACP,QAAQ;IACR,SAAS;IACT,MAAM;IACN,OAAO;IACP,QAAQ;IACR,UAAU;IACV,QAAQ;IACR,OAAO;IACP,QAAQ;IACR,MAAM;IACN,SAAS;IACT,MAAM;IACN,IAAI;IACJ,MAAM;IACN,MAAM;IACN,KAAK;IACL,MAAM;IACN,QAAQ;IACR,SAAS;IACT,YAAY;IACZ,OAAO;IACP,QAAQ;IACR,UAAU;IACV,WAAW;IACX,QAAQ;IACR,SAAS;IACT,SAAS;IACT,YAAY;IACZ,QAAQ;IACR,QAAQ;IACR,SAAS;IACT,MAAM;IACN,SAAS;IACT,SAAS;IACT,UAAU;IACV,UAAU;IACV,MAAM;IACN,KAAK;IACL,QAAQ;IACR,QAAQ;IACR,UAAU;IACV,mEAAmE;IACnE,QAAQ;IACR,SAAS;IACT,MAAM;IACN,aAAa;IACb,SAAS;IACT,WAAW;IACX,YAAY;IACZ,gBAAgB;IAChB,SAAS;CACV,CAAC;AAEF;;;;GAIG;AACH,MAAM,kBAAkB,GAAoD;IAC1E;QACE,OAAO,EAAE,mBAAmB;QAC5B,WAAW,EAAE,sCAAsC;KACpD;CACF,CAAC;AAEF;;;;GAIG;AACH,MAAM,6BAA6B,GAAW,QAAQ,CAAC;AAEvD,MAAM,CAAC,OAAO,OAAO,aAAa;IAChC;;;;;;;;;;;;;OAaG;IACI,MAAM,CAAC,wBAAwB,CAAC,GAAW;QAChD,MAAM,MAAM,GAAkB,EAAE,CAAC;QACjC,MAAM,MAAM,GAAW,GAAG,CAAC,MAAM,CAAC;QAClC,IAAI,KAAK,GAAW,CAAC,CAAC;QAEtB,MAAM,KAAK,GAA4B,CAAC,KAAa,EAAQ,EAAE;YAC7D,KAAK,IAAI,OAAO,GAAW,CAAC,EAAE,OAAO,GAAG,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC;gBACzD,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACnB,CAAC;YACD,KAAK,IAAI,KAAK,CAAC;QACjB,CAAC,CAAC;QAEF,OAAO,KAAK,GAAG,MAAM,EAAE,CAAC;YACtB,MAAM,IAAI,GAAW,GAAG,CAAC,KAAK,CAAE,CAAC;YACjC,MAAM,IAAI,GAAW,KAAK,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,GAAG,CAAC,CAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAE/D,oBAAoB;YACpB,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;gBACjC,OAAO,KAAK,GAAG,MAAM,IAAI,GAAG,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC;oBAC7C,KAAK,CAAC,CAAC,CAAC,CAAC;gBACX,CAAC;gBACD,SAAS;YACX,CAAC;YAED,sDAAsD;YACtD,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;gBACjC,IAAI,KAAK,GAAW,CAAC,CAAC;gBACtB,OAAO,KAAK,GAAG,MAAM,EAAE,CAAC;oBACtB,IAAI,GAAG,CAAC,KAAK,CAAC,KAAK,GAAG,IAAI,GAAG,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;wBACjD,KAAK,EAAE,CAAC;wBACR,KAAK,CAAC,CAAC,CAAC,CAAC;wBACT,SAAS;oBACX,CAAC;oBACD,IAAI,GAAG,CAAC,KAAK,CAAC,KAAK,GAAG,IAAI,GAAG,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;wBACjD,KAAK,EAAE,CAAC;wBACR,KAAK,CAAC,CAAC,CAAC,CAAC;wBACT,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;4BAChB,MAAM;wBACR,CAAC;wBACD,SAAS;oBACX,CAAC;oBACD,KAAK,CAAC,CAAC,CAAC,CAAC;gBACX,CAAC;gBACD,SAAS;YACX,CAAC;YAED,iEAAiE;YACjE,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;gBACjB,KAAK,CAAC,CAAC,CAAC,CAAC;gBACT,OAAO,KAAK,GAAG,MAAM,EAAE,CAAC;oBACtB,IAAI,GAAG,CAAC,KAAK,CAAC,KAAK,GAAG,IAAI,GAAG,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;wBACjD,KAAK,CAAC,CAAC,CAAC,CAAC;wBACT,SAAS;oBACX,CAAC;oBACD,IAAI,GAAG,CAAC,KAAK,CAAC,KAAK,GAAG,EAAE,CAAC;wBACvB,KAAK,CAAC,CAAC,CAAC,CAAC;wBACT,MAAM;oBACR,CAAC;oBACD,KAAK,CAAC,CAAC,CAAC,CAAC;gBACX,CAAC;gBACD,SAAS;YACX,CAAC;YAED,uCAAuC;YACvC,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;gBACjB,KAAK,CAAC,CAAC,CAAC,CAAC;gBACT,OAAO,KAAK,GAAG,MAAM,EAAE,CAAC;oBACtB,IAAI,GAAG,CAAC,KAAK,CAAC,KAAK,GAAG,IAAI,GAAG,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;wBACjD,KAAK,CAAC,CAAC,CAAC,CAAC;wBACT,SAAS;oBACX,CAAC;oBACD,IAAI,GAAG,CAAC,KAAK,CAAC,KAAK,GAAG,EAAE,CAAC;wBACvB,KAAK,CAAC,CAAC,CAAC,CAAC;wBACT,MAAM;oBACR,CAAC;oBACD,KAAK,CAAC,CAAC,CAAC,CAAC;gBACX,CAAC;gBACD,SAAS;YACX,CAAC;YAED,qDAAqD;YACrD,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;gBACjB,KAAK,CAAC,CAAC,CAAC,CAAC;gBACT,OAAO,KAAK,GAAG,MAAM,EAAE,CAAC;oBACtB,IAAI,GAAG,CAAC,KAAK,CAAC,KAAK,GAAG,IAAI,GAAG,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;wBACjD,KAAK,CAAC,CAAC,CAAC,CAAC;wBACT,SAAS;oBACX,CAAC;oBACD,IAAI,GAAG,CAAC,KAAK,CAAC,KAAK,GAAG,EAAE,CAAC;wBACvB,KAAK,CAAC,CAAC,CAAC,CAAC;wBACT,MAAM;oBACR,CAAC;oBACD,KAAK,CAAC,CAAC,CAAC,CAAC;gBACX,CAAC;gBACD,SAAS;YACX,CAAC;YAED,8CAA8C;YAC9C,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;gBACjB,KAAK,CAAC,CAAC,CAAC,CAAC;gBACT,OAAO,KAAK,GAAG,MAAM,EAAE,CAAC;oBACtB,IAAI,GAAG,CAAC,KAAK,CAAC,KAAK,GAAG,IAAI,GAAG,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;wBACjD,KAAK,CAAC,CAAC,CAAC,CAAC;wBACT,SAAS;oBACX,CAAC;oBACD,IAAI,GAAG,CAAC,KAAK,CAAC,KAAK,GAAG,EAAE,CAAC;wBACvB,KAAK,CAAC,CAAC,CAAC,CAAC;wBACT,MAAM;oBACR,CAAC;oBACD,KAAK,CAAC,CAAC,CAAC,CAAC;gBACX,CAAC;gBACD,SAAS;YACX,CAAC;YAED,wEAAwE;YACxE,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;gBACjB,MAAM,QAAQ,GAA4B,GAAG;qBAC1C,SAAS,CAAC,KAAK,CAAC;qBAChB,KAAK,CAAC,iBAAiB,CAAC,CAAC;gBAC5B,IAAI,QAAQ,EAAE,CAAC;oBACb,MAAM,GAAG,GAAW,QAAQ,CAAC,CAAC,CAAC,CAAC;oBAChC,MAAM,UAAU,GAAW,GAAG,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC;oBAChE,MAAM,GAAG,GACP,UAAU,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,GAAG,GAAG,CAAC,MAAM,CAAC;oBACvD,KAAK,CAAC,GAAG,GAAG,KAAK,CAAC,CAAC;oBACnB,SAAS;gBACX,CAAC;YACH,CAAC;YAED,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAClB,KAAK,EAAE,CAAC;QACV,CAAC;QAED,OAAO,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACzB,CAAC;IAED;;;OAGG;IACI,MAAM,CAAC,mBAAmB,CAAC,GAAW;QAC3C,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACpC,MAAM,IAAI,gBAAgB,CAAC,oBAAoB,CAAC,CAAC;QACnD,CAAC;QAED;;;WAGG;QACH,IAAI,6BAA6B,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAC5C,MAAM,IAAI,gBAAgB,CACxB,uHAAuH,CACxH,CAAC;QACJ,CAAC;QAED,MAAM,QAAQ,GAAW,IAAI,CAAC,wBAAwB,CAAC,GAAG,CAAC,CAAC;QAE5D,8DAA8D;QAC9D,MAAM,wBAAwB,GAAW,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QACvE,IAAI,wBAAwB,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YAC3C,MAAM,IAAI,gBAAgB,CACxB,mDAAmD,CACpD,CAAC;QACJ,CAAC;QAED,MAAM,cAAc,GAClB,wBAAwB,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QAC/C,MAAM,SAAS,GAAW,cAAc;YACtC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE;YACjC,CAAC,CAAC,EAAE,CAAC;QAEP,IAAI,CAAC,qBAAqB,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;YAC/C,MAAM,IAAI,gBAAgB,CACxB,uDAAuD,qBAAqB,CAAC,IAAI,CAC/E,IAAI,CACL,IAAI,CACN,CAAC;QACJ,CAAC;QAED,KAAK,MAAM,OAAO,IAAI,kBAAkB,EAAE,CAAC;YACzC,MAAM,OAAO,GAAW,IAAI,MAAM,CAAC,MAAM,OAAO,KAAK,EAAE,GAAG,CAAC,CAAC;YAC5D,IAAI,OAAO,CAAC,IAAI,CAAC,wBAAwB,CAAC,EAAE,CAAC;gBAC3C,MAAM,IAAI,gBAAgB,CACxB,kFAAkF,OAAO,6CAA6C,CACvI,CAAC;YACJ,CAAC;QACH,CAAC;QAED,KAAK,MAAM,SAAS,IAAI,kBAAkB,EAAE,CAAC;YAC3C,IAAI,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,wBAAwB,CAAC,EAAE,CAAC;gBACrD,MAAM,IAAI,gBAAgB,CACxB,kBAAkB,SAAS,CAAC,WAAW,0DAA0D,CAClG,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAEO,MAAM,CAAC,iBAAiB,CAAC,IAAU;QACzC,MAAM,GAAG,GAA8B,CAAC,KAAa,EAAU,EAAE;YAC/D,OAAO,KAAK,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QAC3C,CAAC,CAAC;QACF,OAAO,GAAG,IAAI,CAAC,cAAc,EAAE,IAAI,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,IAAI,GAAG,CACnE,IAAI,CAAC,UAAU,EAAE,CAClB,IAAI,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC,IAAI,GAAG,CAC9D,IAAI,CAAC,aAAa,EAAE,CACrB,EAAE,CAAC;IACN,CAAC;IAED;;;;;;OAMG;IACI,MAAM,CAAC,eAAe,CAC3B,GAAW,EACX,SAAe,EACf,OAAa;QAEb,MAAM,YAAY,GAAW,IAAI,CAAC,GAAG,CACnC,IAAI,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,SAAS,CAAC,OAAO,EAAE,CAAC,GAAG,IAAI,CAAC,EAC5D,CAAC,CACF,CAAC;QAEF,OAAO,GAAG;aACP,OAAO,CAAC,oBAAoB,EAAE,SAAS,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC;aAC7D,OAAO,CAAC,kBAAkB,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC;aACzD,OAAO,CAAC,kBAAkB,EAAE,IAAI,IAAI,CAAC,iBAAiB,CAAC,SAAS,CAAC,GAAG,CAAC;aACrE,OAAO,CAAC,gBAAgB,EAAE,IAAI,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,GAAG,CAAC;aACjE,OAAO,CAAC,qBAAqB,EAAE,YAAY,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC7D,CAAC;CACF"}

package/build/dist/Server/Utils/DataSource/SqlResultShaper.js

@@ -0,0 +1,280 @@
+import { DataSourceTableColumnType, } from "../../../Types/DataSource/DataSourceTableResult";
+import BadDataException from "../../../Types/Exception/BadDataException";
+/*
+ * Shared row → chart/table shaping for every SQL-family connector
+ * (PostgreSQL, MySQL, SQL Server, ClickHouse). One implementation means one
+ * behavior: the same query against any engine renders the same chart.
+ *
+ * Time-series convention (Grafana-compatible):
+ *  - a TIME column named time / timestamp / date / ts (case-insensitive);
+ *  - a numeric VALUE column named value (or the first numeric non-time
+ *    column);
+ *  - every OTHER column becomes a series label — rows sharing the same
+ *    label values merge into one series. The chart layer groups on the
+ *    `attributes` object of each data point.
+ */
+const TIME_COLUMN_NAMES = ["time", "timestamp", "date", "ts"];
+const VALUE_COLUMN_NAME = "value";
+/*
+ * A 9-19 digit unsigned integer string — an epoch in seconds through
+ * nanoseconds. Shorter numeric strings (bare years, YYYYMMDD) stay on the
+ * Date-parse path.
+ */
+const NUMERIC_EPOCH_STRING_REGEX = /^\d{9,19}$/;
+export default class SqlResultShaper {
+    /*
+     * Clamp raw driver rows to the cap. Connectors fetch cap+1 so the shaper
+     * can tell "exactly cap" apart from "more than cap".
+     */
+    static clampRows(rows, maxRows) {
+        if (rows.length > maxRows) {
+            return { rows: rows.slice(0, maxRows), truncated: true };
+        }
+        return { rows: rows, truncated: false };
+    }
+    /*
+     * Copy of the probe SqlMonitor's cell coercion semantics: keep JSON-safe
+     * primitives, ISO-ify dates, never ship raw binary.
+     */
+    static coerceCell(value) {
+        if (value === null || value === undefined) {
+            return null;
+        }
+        if (typeof value === "number" ||
+            typeof value === "boolean" ||
+            typeof value === "string") {
+            return value;
+        }
+        if (value instanceof Date) {
+            return value.toISOString();
+        }
+        if (Buffer.isBuffer(value)) {
+            return "[binary]";
+        }
+        if (typeof value === "bigint") {
+            return value.toString();
+        }
+        try {
+            return JSON.stringify(value);
+        }
+        catch (_a) {
+            return String(value);
+        }
+    }
+    static findTimeColumn(columnNames) {
+        return columnNames.find((name) => {
+            return TIME_COLUMN_NAMES.includes(name.toLowerCase());
+        });
+    }
+    static findValueColumn(columnNames, timeColumn, firstRow) {
+        const explicit = columnNames.find((name) => {
+            return name.toLowerCase() === VALUE_COLUMN_NAME;
+        });
+        if (explicit) {
+            return explicit;
+        }
+        // First numeric non-time column.
+        return columnNames.find((name) => {
+            if (name === timeColumn) {
+                return false;
+            }
+            const cell = firstRow[name];
+            return (typeof cell === "number" ||
+                typeof cell === "bigint" ||
+                (typeof cell === "string" &&
+                    cell.trim() !== "" &&
+                    Number.isFinite(Number(cell))));
+        });
+    }
+    /*
+     * Parse a SQL time cell: Date object, ISO-ish string, or epoch number
+     * (ms when >= 1e12, seconds when >= 1e9). Returns null when
+     * unparseable.
+     */
+    static coerceTimestamp(value) {
+        if (value instanceof Date) {
+            return isNaN(value.getTime()) ? null : value;
+        }
+        if (typeof value === "number" || typeof value === "bigint") {
+            const numeric = Number(value);
+            if (!Number.isFinite(numeric) || numeric <= 0) {
+                return null;
+            }
+            if (numeric >= 1e12) {
+                return new Date(numeric);
+            }
+            if (numeric >= 1e9) {
+                return new Date(numeric * 1000);
+            }
+            return null;
+        }
+        if (typeof value === "string" && value.trim() !== "") {
+            const trimmed = value.trim();
+            /*
+             * Numeric-string epochs: ClickHouse's JSON format serializes
+             * 64-bit integers as strings, and REST payloads routinely quote
+             * epoch numbers — route them through the same epoch heuristic as
+             * native numbers instead of letting new Date('1700000000000')
+             * produce Invalid Date and silently drop the row. 9+ digits only,
+             * so short numeric strings (bare years) keep the Date-parse path.
+             */
+            if (NUMERIC_EPOCH_STRING_REGEX.test(trimmed)) {
+                return this.coerceTimestamp(Number(trimmed));
+            }
+            /*
+             * Engines commonly return 'YYYY-MM-DD HH:MM:SS' with no zone —
+             * treat it as UTC (the macros are UTC, and Date.parse would
+             * otherwise apply the server's local zone).
+             */
+            const spaceSeparated = trimmed.match(/^(\d{4}-\d{2}-\d{2}) (\d{2}:\d{2}:\d{2}(?:\.\d+)?)$/);
+            const normalized = spaceSeparated
+                ? `${spaceSeparated[1]}T${spaceSeparated[2]}Z`
+                : trimmed;
+            const parsed = new Date(normalized);
+            return isNaN(parsed.getTime()) ? null : parsed;
+        }
+        return null;
+    }
+    static coerceValue(value) {
+        if (typeof value === "number") {
+            return Number.isFinite(value) ? value : null;
+        }
+        if (typeof value === "bigint") {
+            return Number(value);
+        }
+        if (typeof value === "string" && value.trim() !== "") {
+            const numeric = Number(value);
+            return Number.isFinite(numeric) ? numeric : null;
+        }
+        return null;
+    }
+    static rowsToTimeSeries(rows, options) {
+        const clamped = this.clampRows(rows, options.maxRows);
+        if (clamped.rows.length === 0) {
+            return { data: [], truncated: false };
+        }
+        const firstRow = clamped.rows[0];
+        const columnNames = Object.keys(firstRow);
+        const timeColumn = this.findTimeColumn(columnNames);
+        if (!timeColumn) {
+            throw new BadDataException(`Time-series queries must return a time column named one of: ${TIME_COLUMN_NAMES.join(", ")}. Got columns: ${columnNames.join(", ")}. Use the Table widget for non-time-series results.`);
+        }
+        const valueColumn = this.findValueColumn(columnNames, timeColumn, firstRow);
+        if (!valueColumn) {
+            throw new BadDataException(`Time-series queries must return a numeric column (name it "value"). Got columns: ${columnNames.join(", ")}.`);
+        }
+        const labelColumns = columnNames.filter((name) => {
+            return name !== timeColumn && name !== valueColumn;
+        });
+        const data = [];
+        for (const row of clamped.rows) {
+            const timestamp = this.coerceTimestamp(row[timeColumn]);
+            const value = this.coerceValue(row[valueColumn]);
+            if (timestamp === null || value === null) {
+                continue; // skip unplottable rows rather than failing the chart.
+            }
+            const point = {
+                timestamp: timestamp,
+                value: value,
+            };
+            if (labelColumns.length > 0) {
+                const attributes = {};
+                for (const labelColumn of labelColumns) {
+                    const cell = this.coerceCell(row[labelColumn]);
+                    attributes[labelColumn] = cell === null ? "(unset)" : String(cell);
+                }
+                point["attributes"] = attributes;
+            }
+            data.push(point);
+        }
+        return { data: data, truncated: clamped.truncated };
+    }
+    static sniffColumnType(value) {
+        if (typeof value === "number" || typeof value === "bigint") {
+            return DataSourceTableColumnType.Number;
+        }
+        if (typeof value === "boolean") {
+            return DataSourceTableColumnType.Boolean;
+        }
+        if (value instanceof Date) {
+            return DataSourceTableColumnType.Date;
+        }
+        if (value !== null && typeof value === "object") {
+            return DataSourceTableColumnType.Json;
+        }
+        return DataSourceTableColumnType.Text;
+    }
+    static rowsToTable(rows, options) {
+        const clamped = this.clampRows(rows, options.maxRows);
+        if (clamped.rows.length === 0) {
+            return { columns: [], rows: [], truncated: false };
+        }
+        /*
+         * Column set = union across rows (drivers can omit NULL columns in
+         * some row formats); type sniffed from the first non-null cell.
+         */
+        const columnNames = [];
+        for (const row of clamped.rows) {
+            for (const name of Object.keys(row)) {
+                if (!columnNames.includes(name)) {
+                    columnNames.push(name);
+                }
+            }
+        }
+        const columns = columnNames.map((name) => {
+            const sampleRow = clamped.rows.find((row) => {
+                return row[name] !== null && row[name] !== undefined;
+            });
+            return {
+                key: name,
+                title: name,
+                type: this.sniffColumnType(sampleRow ? sampleRow[name] : null),
+            };
+        });
+        const shapedRows = clamped.rows.map((row) => {
+            const shaped = {};
+            for (const name of columnNames) {
+                shaped[name] = this.coerceCell(row[name]);
+            }
+            return shaped;
+        });
+        return {
+            columns: columns,
+            rows: shapedRows,
+            truncated: clamped.truncated,
+        };
+    }
+    /*
+     * Redact credentials and connection internals from driver errors before
+     * they reach API responses (probe SqlMonitor semantics).
+     */
+    /*
+     * Every user-supplied credential on a connection-settings object,
+     * including custom header VALUES (write-only in the model, so they can
+     * carry tokens) — the standard secret list for sanitizeError so no
+     * connector forgets one.
+     */
+    static collectSecrets(settings) {
+        return [
+            settings.password,
+            settings.apiToken,
+            settings.username,
+            settings.databaseHost,
+            ...Object.values(settings.customHeaders || {}),
+        ];
+    }
+    static sanitizeError(error, secrets) {
+        let message = error instanceof Error ? error.message : String(error);
+        for (const secret of secrets) {
+            if (secret && secret.length >= 4) {
+                message = message.split(secret).join("***");
+            }
+        }
+        // DSNs with embedded credentials.
+        message = message.replace(/[a-zA-Z]+:\/\/[^\s]*@[^\s]*/g, "[redacted-dsn]");
+        // Connection-string password pairs.
+        message = message.replace(/(password|pwd)\s*[=:]\s*(\{[^}]*\}|"[^"]*"|'[^']*'|[^;\r\n]+)/gi, "$1=***");
+        return message;
+    }
+}
+//# sourceMappingURL=SqlResultShaper.js.map

package/build/dist/Server/Utils/DataSource/SqlResultShaper.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SqlResultShaper.js","sourceRoot":"","sources":["../../../../../Server/Utils/DataSource/SqlResultShaper.ts"],"names":[],"mappings":"AAEA,OAA8B,EAE5B,yBAAyB,GAC1B,MAAM,iDAAiD,CAAC;AACzD,OAAO,gBAAgB,MAAM,2CAA2C,CAAC;AAGzE;;;;;;;;;;;;GAYG;AAEH,MAAM,iBAAiB,GAAkB,CAAC,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;AAC7E,MAAM,iBAAiB,GAAW,OAAO,CAAC;AAO1C;;;;GAIG;AACH,MAAM,0BAA0B,GAAW,YAAY,CAAC;AAExD,MAAM,CAAC,OAAO,OAAO,eAAe;IAClC;;;OAGG;IACI,MAAM,CAAC,SAAS,CACrB,IAAoC,EACpC,OAAe;QAEf,IAAI,IAAI,CAAC,MAAM,GAAG,OAAO,EAAE,CAAC;YAC1B,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;QAC3D,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IAC1C,CAAC;IAED;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,KAAc;QACrC,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YAC1C,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IACE,OAAO,KAAK,KAAK,QAAQ;YACzB,OAAO,KAAK,KAAK,SAAS;YAC1B,OAAO,KAAK,KAAK,QAAQ,EACzB,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,KAAK,YAAY,IAAI,EAAE,CAAC;YAC1B,OAAO,KAAK,CAAC,WAAW,EAAE,CAAC;QAC7B,CAAC;QACD,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YAC3B,OAAO,UAAU,CAAC;QACpB,CAAC;QACD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,OAAO,KAAK,CAAC,QAAQ,EAAE,CAAC;QAC1B,CAAC;QACD,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAC/B,CAAC;QAAC,WAAM,CAAC;YACP,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;QACvB,CAAC;IACH,CAAC;IAEO,MAAM,CAAC,cAAc,CAC3B,WAA0B;QAE1B,OAAO,WAAW,CAAC,IAAI,CAAC,CAAC,IAAY,EAAE,EAAE;YACvC,OAAO,iBAAiB,CAAC,QAAQ,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;QACxD,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,MAAM,CAAC,eAAe,CAC5B,WAA0B,EAC1B,UAAkB,EAClB,QAAiC;QAEjC,MAAM,QAAQ,GAAuB,WAAW,CAAC,IAAI,CAAC,CAAC,IAAY,EAAE,EAAE;YACrE,OAAO,IAAI,CAAC,WAAW,EAAE,KAAK,iBAAiB,CAAC;QAClD,CAAC,CAAC,CAAC;QACH,IAAI,QAAQ,EAAE,CAAC;YACb,OAAO,QAAQ,CAAC;QAClB,CAAC;QACD,iCAAiC;QACjC,OAAO,WAAW,CAAC,IAAI,CAAC,CAAC,IAAY,EAAE,EAAE;YACvC,IAAI,IAAI,KAAK,UAAU,EAAE,CAAC;gBACxB,OAAO,KAAK,CAAC;YACf,CAAC;YACD,MAAM,IAAI,GAAY,QAAQ,CAAC,IAAI,CAAC,CAAC;YACrC,OAAO,CACL,OAAO,IAAI,KAAK,QAAQ;gBACxB,OAAO,IAAI,KAAK,QAAQ;gBACxB,CAAC,OAAO,IAAI,KAAK,QAAQ;oBACvB,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE;oBAClB,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CACjC,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;;;OAIG;IACI,MAAM,CAAC,eAAe,CAAC,KAAc;QAC1C,IAAI,KAAK,YAAY,IAAI,EAAE,CAAC;YAC1B,OAAO,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC;QAC/C,CAAC;QACD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC3D,MAAM,OAAO,GAAW,MAAM,CAAC,KAAK,CAAC,CAAC;YACtC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,OAAO,IAAI,CAAC,EAAE,CAAC;gBAC9C,OAAO,IAAI,CAAC;YACd,CAAC;YACD,IAAI,OAAO,IAAI,IAAI,EAAE,CAAC;gBACpB,OAAO,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC;YAC3B,CAAC;YACD,IAAI,OAAO,IAAI,GAAG,EAAE,CAAC;gBACnB,OAAO,IAAI,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;YAClC,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YACrD,MAAM,OAAO,GAAW,KAAK,CAAC,IAAI,EAAE,CAAC;YACrC;;;;;;;eAOG;YACH,IAAI,0BAA0B,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC7C,OAAO,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;YAC/C,CAAC;YACD;;;;eAIG;YACH,MAAM,cAAc,GAA4B,OAAO,CAAC,KAAK,CAC3D,qDAAqD,CACtD,CAAC;YACF,MAAM,UAAU,GAAW,cAAc;gBACvC,CAAC,CAAC,GAAG,cAAc,CAAC,CAAC,CAAC,IAAI,cAAc,CAAC,CAAC,CAAC,GAAG;gBAC9C,CAAC,CAAC,OAAO,CAAC;YACZ,MAAM,MAAM,GAAS,IAAI,IAAI,CAAC,UAAU,CAAC,CAAC;YAC1C,OAAO,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC;QACjD,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,MAAM,CAAC,WAAW,CAAC,KAAc;QACvC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,OAAO,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;QAC/C,CAAC;QACD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;QACvB,CAAC;QACD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YACrD,MAAM,OAAO,GAAW,MAAM,CAAC,KAAK,CAAC,CAAC;YACtC,OAAO,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;QACnD,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAEM,MAAM,CAAC,gBAAgB,CAC5B,IAAoC,EACpC,OAA4B;QAE5B,MAAM,OAAO,GAAe,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;QAElE,IAAI,OAAO,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC9B,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;QACxC,CAAC;QAED,MAAM,QAAQ,GAA4B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC;QAC3D,MAAM,WAAW,GAAkB,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAEzD,MAAM,UAAU,GAAuB,IAAI,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC;QACxE,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,MAAM,IAAI,gBAAgB,CACxB,+DAA+D,iBAAiB,CAAC,IAAI,CACnF,IAAI,CACL,kBAAkB,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,qDAAqD,CAC/F,CAAC;QACJ,CAAC;QAED,MAAM,WAAW,GAAuB,IAAI,CAAC,eAAe,CAC1D,WAAW,EACX,UAAU,EACV,QAAQ,CACT,CAAC;QACF,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,MAAM,IAAI,gBAAgB,CACxB,oFAAoF,WAAW,CAAC,IAAI,CAClG,IAAI,CACL,GAAG,CACL,CAAC;QACJ,CAAC;QAED,MAAM,YAAY,GAAkB,WAAW,CAAC,MAAM,CAAC,CAAC,IAAY,EAAE,EAAE;YACtE,OAAO,IAAI,KAAK,UAAU,IAAI,IAAI,KAAK,WAAW,CAAC;QACrD,CAAC,CAAC,CAAC;QAEH,MAAM,IAAI,GAA2B,EAAE,CAAC;QACxC,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;YAC/B,MAAM,SAAS,GAAgB,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC;YACrE,MAAM,KAAK,GAAkB,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC;YAChE,IAAI,SAAS,KAAK,IAAI,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;gBACzC,SAAS,CAAC,uDAAuD;YACnE,CAAC;YAED,MAAM,KAAK,GAAoB;gBAC7B,SAAS,EAAE,SAAS;gBACpB,KAAK,EAAE,KAAK;aACM,CAAC;YAErB,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC5B,MAAM,UAAU,GAA2B,EAAE,CAAC;gBAC9C,KAAK,MAAM,WAAW,IAAI,YAAY,EAAE,CAAC;oBACvC,MAAM,IAAI,GAAc,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC;oBAC1D,UAAU,CAAC,WAAW,CAAC,GAAG,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;gBACrE,CAAC;gBACA,KAAiC,CAAC,YAAY,CAAC,GAAG,UAAU,CAAC;YAChE,CAAC;YAED,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnB,CAAC;QAED,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC;IACtD,CAAC;IAEO,MAAM,CAAC,eAAe,CAAC,KAAc;QAC3C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC3D,OAAO,yBAAyB,CAAC,MAAM,CAAC;QAC1C,CAAC;QACD,IAAI,OAAO,KAAK,KAAK,SAAS,EAAE,CAAC;YAC/B,OAAO,yBAAyB,CAAC,OAAO,CAAC;QAC3C,CAAC;QACD,IAAI,KAAK,YAAY,IAAI,EAAE,CAAC;YAC1B,OAAO,yBAAyB,CAAC,IAAI,CAAC;QACxC,CAAC;QACD,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAChD,OAAO,yBAAyB,CAAC,IAAI,CAAC;QACxC,CAAC;QACD,OAAO,yBAAyB,CAAC,IAAI,CAAC;IACxC,CAAC;IAEM,MAAM,CAAC,WAAW,CACvB,IAAoC,EACpC,OAA4B;QAE5B,MAAM,OAAO,GAAe,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;QAElE,IAAI,OAAO,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC9B,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;QACrD,CAAC;QAED;;;WAGG;QACH,MAAM,WAAW,GAAkB,EAAE,CAAC;QACtC,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;YAC/B,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;gBACpC,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;oBAChC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACzB,CAAC;YACH,CAAC;QACH,CAAC;QAED,MAAM,OAAO,GAAiC,WAAW,CAAC,GAAG,CAC3D,CAAC,IAAY,EAAE,EAAE;YACf,MAAM,SAAS,GACb,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAA4B,EAAE,EAAE;gBACjD,OAAO,GAAG,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI,GAAG,CAAC,IAAI,CAAC,KAAK,SAAS,CAAC;YACvD,CAAC,CAAC,CAAC;YACL,OAAO;gBACL,GAAG,EAAE,IAAI;gBACT,KAAK,EAAE,IAAI;gBACX,IAAI,EAAE,IAAI,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;aAC/D,CAAC;QACJ,CAAC,CACF,CAAC;QAEF,MAAM,UAAU,GAAwC,OAAO,CAAC,IAAI,CAAC,GAAG,CACtE,CAAC,GAA4B,EAAE,EAAE;YAC/B,MAAM,MAAM,GAAiC,EAAE,CAAC;YAChD,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;gBAC/B,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;YAC5C,CAAC;YACD,OAAO,MAAM,CAAC;QAChB,CAAC,CACF,CAAC;QAEF,OAAO;YACL,OAAO,EAAE,OAAO;YAChB,IAAI,EAAE,UAAU;YAChB,SAAS,EAAE,OAAO,CAAC,SAAS;SAC7B,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH;;;;;OAKG;IACI,MAAM,CAAC,cAAc,CAAC,QAM5B;QACC,OAAO;YACL,QAAQ,CAAC,QAAQ;YACjB,QAAQ,CAAC,QAAQ;YACjB,QAAQ,CAAC,QAAQ;YACjB,QAAQ,CAAC,YAAY;YACrB,GAAG,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,aAAa,IAAI,EAAE,CAAC;SAC/C,CAAC;IACJ,CAAC;IAEM,MAAM,CAAC,aAAa,CACzB,KAAc,EACd,OAAkC;QAElC,IAAI,OAAO,GACT,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAEzD,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,IAAI,MAAM,IAAI,MAAM,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;gBACjC,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC9C,CAAC;QACH,CAAC;QAED,kCAAkC;QAClC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,8BAA8B,EAAE,gBAAgB,CAAC,CAAC;QAC5E,oCAAoC;QACpC,OAAO,GAAG,OAAO,CAAC,OAAO,CACvB,iEAAiE,EACjE,QAAQ,CACT,CAAC;QAEF,OAAO,OAAO,CAAC;IACjB,CAAC;CACF"}

package/build/dist/Server/Utils/DataSource/Types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=Types.js.map

package/build/dist/Server/Utils/DataSource/Types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Types.js","sourceRoot":"","sources":["../../../../../Server/Utils/DataSource/Types.ts"],"names":[],"mappings":""}