@querypanel/node-sdk 1.0.40 → 1.0.42

package/README.md

@@ -42,18 +42,26 @@ const createPostgresClient = () => async (sql: string, params?: unknown[]) => {
   }
 };
 
-qp.attachPostgres("analytics", createPostgresClient(), {
-  description: "Primary analytics warehouse",
-  tenantFieldName: "tenant_id",
-});
+	// Attach PostgreSQL database using the SDK's PostgresAdapter
+	// The SDK will automatically handle tenant isolation when tenantFieldName is provided
+	qp.attachPostgres(
+  "pg_demo",  // a uniq identifier for QueryPanel
+  createPostgresClientFn(),
+  {
+		database: "pg_demo", // database name
+		description: "PostgreSQL demo database", // some description that QueryPanel can use
+		tenantFieldName: "tenant_id", // SDK will automatically filter by tenant_id
+		enforceTenantIsolation: true, // Ensures all queries include tenant_id filter
+		allowedTables: ["orders"], // Only sync 'orders' table - 'users' will be excluded
+	});
 
 qp.attachClickhouse(
-  "clicks",
+  "clicks", // uniq identifier for QueryPanel
   (params) => clickhouse.query(params),
   {
-    database: "analytics",
-    tenantFieldName: "customer_id",
-    tenantFieldType: "String",
+    database: "analytics", // database name
+    tenantFieldName: "customer_id", // SDK will automatically filter by tenant_id
+    tenantFieldType: "String", // SDK will use it in the clickhouse query as {customer_id::String}
   },
 );
 

package/dist/index.cjs

@@ -1,7 +1,9 @@
 "use strict";
+var __create = Object.create;
 var __defProp = Object.defineProperty;
 var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
 var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
 var __hasOwnProp = Object.prototype.hasOwnProperty;
 var __export = (target, all) => {
   for (var name in all)
@@ -15,6 +17,14 @@ var __copyProps = (to, from, except, desc) => {
   }
   return to;
 };
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
+  // If the importer is in node compatibility mode or this is not an ESM
+  // file that has been converted to a CommonJS file using a Babel-
+  // compatible transform (i.e. "__esModule" has not been set), then set
+  // "default" to the CommonJS "module.exports" for node compatibility.
+  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
+  mod
+));
 var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
 
 // src/index.ts
@@ -338,8 +348,9 @@ var PostgresAdapter = class {
     const allowedSet = new Set(
       this.allowedTables.map((t) => tableKey(t.schema, t.table))
     );
+    const neutralizedSql = sql.replace(/EXTRACT\s*\([^)]*FROM\s+[^)]+\)/gi, "EXTRACT(/*neutralized*/)").replace(/SUBSTRING\s*\([^)]*FROM\s+[^)]+\)/gi, "SUBSTRING(/*neutralized*/)").replace(/TRIM\s*\([^)]*FROM\s+[^)]+\)/gi, "TRIM(/*neutralized*/)").replace(/POSITION\s*\([^)]*FROM\s+[^)]+\)/gi, "POSITION(/*neutralized*/)");
     const tablePattern = /(?:FROM|JOIN)\s+(?:ONLY\s+)?(?:([a-zA-Z_][a-zA-Z0-9_]*)\.)?(["']?[a-zA-Z_][a-zA-Z0-9_]*["']?)/gi;
-    const matches = sql.matchAll(tablePattern);
+    const matches = neutralizedSql.matchAll(tablePattern);
     for (const match of matches) {
       const schema = match[1] ?? this.defaultSchema;
       const table = match[2]?.replace(/['"]/g, "");
@@ -554,6 +565,7 @@ function sanitize2(value) {
 }
 
 // src/core/client.ts
+var import_node_crypto = __toESM(require("crypto"), 1);
 var ApiClient = class {
   baseUrl;
   privateKey;
@@ -711,7 +723,7 @@ var ApiClient = class {
     if (this.cryptoKey) {
       return this.cryptoKey;
     }
-    this.cryptoKey = await crypto.subtle.importKey(
+    this.cryptoKey = await import_node_crypto.default.subtle.importKey(
       "pkcs8",
       this.privateKeyToArrayBuffer(this.privateKey),
       {
@@ -753,7 +765,7 @@ var ApiClient = class {
     const data = `${encodedHeader}.${encodedPayload}`;
     const key = await this.getCryptoKey();
     const dataBytes = new TextEncoder().encode(data);
-    const signature = await crypto.subtle.sign(
+    const signature = await import_node_crypto.default.subtle.sign(
       {
         name: "RSASSA-PKCS1-v1_5"
       },
@@ -1092,6 +1104,7 @@ function resolveTenantId2(client, tenantId) {
 }
 
 // src/routes/ingest.ts
+var import_node_crypto2 = __toESM(require("crypto"), 1);
 async function syncSchema(client, queryEngine, databaseName, options, signal) {
   const tenantId = resolveTenantId3(client, options.tenantId);
   const adapter = queryEngine.getDatabase(databaseName);
@@ -1103,7 +1116,7 @@ async function syncSchema(client, queryEngine, databaseName, options, signal) {
   if (options.forceReindex) {
     payload.force_reindex = true;
   }
-  const sessionId = crypto.randomUUID();
+  const sessionId = import_node_crypto2.default.randomUUID();
   const response = await client.post(
     "/ingest",
     payload,
@@ -1152,22 +1165,36 @@ function buildSchemaRequest(databaseName, adapter, introspection, metadata) {
 }
 
 // src/routes/query.ts
+var import_node_crypto3 = __toESM(require("crypto"), 1);
 async function ask(client, queryEngine, question, options, signal) {
   const tenantId = resolveTenantId4(client, options.tenantId);
-  const sessionId = crypto.randomUUID();
+  const sessionId = import_node_crypto3.default.randomUUID();
   const maxRetry = options.maxRetry ?? 0;
   let attempt = 0;
   let lastError = options.lastError;
   let previousSql = options.previousSql;
   while (attempt <= maxRetry) {
     console.log({ lastError, previousSql });
+    const databaseName = options.database ?? queryEngine.getDefaultDatabase();
+    const metadata = databaseName ? queryEngine.getDatabaseMetadata(databaseName) : void 0;
+    let tenantSettings;
+    if (metadata?.tenantFieldName) {
+      tenantSettings = {
+        tenantFieldName: metadata.tenantFieldName,
+        tenantFieldType: metadata.tenantFieldType,
+        enforceTenantIsolation: metadata.enforceTenantIsolation
+      };
+    }
     const queryResponse = await client.post(
       "/query",
       {
         question,
         ...lastError ? { last_error: lastError } : {},
         ...previousSql ? { previous_sql: previousSql } : {},
-        ...options.maxRetry ? { max_retry: options.maxRetry } : {}
+        ...options.maxRetry ? { max_retry: options.maxRetry } : {},
+        ...tenantSettings ? { tenant_settings: tenantSettings } : {},
+        ...databaseName ? { database: databaseName } : {},
+        ...metadata?.dialect ? { dialect: metadata.dialect } : {}
       },
       tenantId,
       options.userId,
@@ -1175,8 +1202,8 @@ async function ask(client, queryEngine, question, options, signal) {
       signal,
       sessionId
     );
-    const databaseName = queryResponse.database ?? options.database ?? queryEngine.getDefaultDatabase();
-    if (!databaseName) {
+    const dbName = queryResponse.database ?? options.database ?? queryEngine.getDefaultDatabase();
+    if (!dbName) {
       throw new Error(
         "No database attached. Call attachPostgres/attachClickhouse first."
       );
@@ -1187,7 +1214,7 @@ async function ask(client, queryEngine, question, options, signal) {
       const execution = await queryEngine.validateAndExecute(
         queryResponse.sql,
         paramValues,
-        databaseName,
+        dbName,
         tenantId
       );
       const rows = execution.rows ?? [];
@@ -1260,7 +1287,7 @@ async function ask(client, queryEngine, question, options, signal) {
         chart,
         context: queryResponse.context,
         attempts: attempt + 1,
-        target_db: databaseName
+        target_db: dbName
       };
     } catch (error) {
       attempt++;
@@ -1299,9 +1326,10 @@ function anonymizeResults(rows) {
 }
 
 // src/routes/vizspec.ts
+var import_node_crypto4 = __toESM(require("crypto"), 1);
 async function generateVizSpec(client, input, options, signal) {
   const tenantId = resolveTenantId5(client, options?.tenantId);
-  const sessionId = crypto.randomUUID();
+  const sessionId = import_node_crypto4.default.randomUUID();
   const response = await client.post(
     "/vizspec",
     {
@@ -1361,6 +1389,7 @@ var QueryPanelSdkAPI = class {
       description: options?.description,
       tags: options?.tags,
       tenantFieldName: options?.tenantFieldName,
+      tenantFieldType: options?.tenantFieldType ?? "String",
       enforceTenantIsolation: options?.tenantFieldName ? options?.enforceTenantIsolation ?? true : void 0
     };
     this.queryEngine.attachDatabase(name, adapter, metadata);