drizzle-cube 0.6.2 → 0.6.4

package/dist/adapters/core/cube-http-handler.d.ts

@@ -0,0 +1,27 @@
+import { SemanticLayerCompiler } from '../../server/compiler.js';
+import { MCPOptions } from '../utils.js';
+import { HttpPort, McpHttpPort } from './http-port.js';
+import { BaseSecurityContextThunk } from './security-context.js';
+import { RestHandlers } from './rest-handlers.js';
+export type { BaseSecurityContextThunk } from './security-context.js';
+export interface CubeHttpHandlerOptions {
+    /** The semantic layer the handlers validate and execute against. */
+    semanticLayer: SemanticLayerCompiler;
+    /** Called in the REST `/load` catch-all 500 path with the thrown error (e.g. for logging). */
+    onError: (error: unknown) => void;
+    /**
+     * MCP endpoint config. Resolved once into the MCP POST handler. When omitted,
+     * MCP defaults are used; the adapter decides whether to route the MCP path.
+     */
+    mcp?: MCPOptions;
+}
+export interface CubeHttpHandler extends RestHandlers {
+    handleLoadGet<TRes>(port: HttpPort<TRes>, getBaseSecurityContext: BaseSecurityContextThunk): Promise<TRes>;
+    handleLoadPost<TRes>(port: HttpPort<TRes>, getBaseSecurityContext: BaseSecurityContextThunk): Promise<TRes>;
+    handleMcpPost<TRes>(port: McpHttpPort<TRes>, getBaseSecurityContext: BaseSecurityContextThunk): Promise<TRes>;
+}
+/**
+ * Build all HTTP handlers once. Each REST entry point owns its own request
+ * extraction, then funnels into a shared validate/execute/format tail.
+ */
+export declare function createCubeHttpHandler(options: CubeHttpHandlerOptions): CubeHttpHandler;

package/dist/adapters/core/http-port.d.ts

@@ -0,0 +1,39 @@
+/**
+ * Framework port for the HTTP handler core.
+ *
+ * Captures the minimal transport surface a handler needs, generically over the
+ * framework's response type `TRes` so the same core works for adapters that
+ * mutate a response object (Express) and adapters that return a `Response`
+ * (Hono/Next.js). Implementations are constructed per request by each adapter.
+ *
+ * This interface is public — third parties implement it to build adapters for
+ * other frameworks. Add new capabilities as optional members or via a separate
+ * extension interface; a new required member is a breaking change.
+ */
+export interface HttpPort<TRes> {
+    /** Read a request header by (case-insensitive) name. Synchronous. */
+    getHeader(name: string): string | undefined;
+    /** Resolve the parsed request body. Async (Express resolves `req.body`; others await `.json()`). */
+    getBody(): Promise<unknown>;
+    /** Read a raw query-string value by name (used by GET). */
+    getQueryParam(name: string): string | undefined;
+    /** Send a response with the given status and JSON body; returns the framework's response value. */
+    send(status: number, body: unknown): TRes;
+}
+/**
+ * Extension of {@link HttpPort} for the MCP POST handler, which needs to set
+ * response headers (WWW-Authenticate, MCP-Session-Id), emit a single-event SSE
+ * response, and send an empty-body acknowledgement (202 for notifications).
+ *
+ * Kept separate from the minimal REST port so third-party adapters only
+ * implement these when they wire up MCP. New required members on this interface
+ * are still a breaking change for MCP-capable adapters.
+ */
+export interface McpHttpPort<TRes> extends HttpPort<TRes> {
+    /** Set a response header. Must be called before `send`/`sendSse`/`sendEmpty`. */
+    setHeader(name: string, value: string): void;
+    /** Send a single-event SSE response (status 200): write the pre-serialized body, then end. */
+    sendSse(status: number, body: string): TRes;
+    /** Send an empty-body response (no JSON), e.g. a 202 notification acknowledgement. */
+    sendEmpty(status: number): TRes;
+}

package/dist/adapters/core/index.cjs

@@ -0,0 +1 @@
+Object.defineProperty(exports,Symbol.toStringTag,{value:`Module`});const e=require("../core-F1pCQPde.cjs");exports.createCubeHttpHandler=e.t,exports.resolveSecurityContext=e.n,exports.withLocaleFromHeaders=e.r;

package/dist/adapters/core/index.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Public entry point for the framework-agnostic HTTP handler core.
+ *
+ * Third parties can build adapters for other frameworks by implementing
+ * {@link HttpPort} (REST) / {@link McpHttpPort} (MCP) and driving them with
+ * {@link createCubeHttpHandler}.
+ */
+export type { HttpPort, McpHttpPort } from './http-port.js';
+export { withLocaleFromHeaders, resolveSecurityContext, type HeaderReader, type BaseSecurityContextThunk } from './security-context.js';
+export { createCubeHttpHandler, type CubeHttpHandler, type CubeHttpHandlerOptions } from './cube-http-handler.js';
+export type { RestHandlers } from './rest-handlers.js';

package/dist/adapters/core/index.js

@@ -0,0 +1,2 @@
+import { n as e, r as t, t as n } from "../core-Bbchr0ui.js";
+export { n as createCubeHttpHandler, e as resolveSecurityContext, t as withLocaleFromHeaders };

package/dist/adapters/core/mcp-handler.d.ts

@@ -0,0 +1,13 @@
+import { SemanticLayerCompiler } from '../../server/compiler.js';
+import { MCPOptions } from '../utils.js';
+import { McpHttpPort } from './http-port.js';
+import { BaseSecurityContextThunk } from './security-context.js';
+export interface McpPostHandler {
+    handleMcpPost<TRes>(port: McpHttpPort<TRes>, getBaseSecurityContext: BaseSecurityContextThunk): Promise<TRes>;
+}
+/**
+ * Build the MCP POST handler once. Resolves the static resources/prompts/
+ * instructions and app config from {@link MCPOptions} at setup time, mirroring
+ * the per-request plumbing the adapters used to do inline.
+ */
+export declare function createMcpPostHandler(semanticLayer: SemanticLayerCompiler, mcp: MCPOptions): McpPostHandler;

package/dist/adapters/core/rest-handlers.d.ts

@@ -0,0 +1,14 @@
+import { SemanticLayerCompiler } from '../../server/compiler.js';
+import { HttpPort } from './http-port.js';
+import { BaseSecurityContextThunk } from './security-context.js';
+/** REST handlers keyed by endpoint; each closes over the shared semantic layer. */
+export interface RestHandlers {
+    handleMetaGet<TRes>(port: HttpPort<TRes>): TRes;
+    handleSqlGet<TRes>(port: HttpPort<TRes>, getBaseSecurityContext: BaseSecurityContextThunk): Promise<TRes>;
+    handleSqlPost<TRes>(port: HttpPort<TRes>, getBaseSecurityContext: BaseSecurityContextThunk): Promise<TRes>;
+    handleDryRunGet<TRes>(port: HttpPort<TRes>, getBaseSecurityContext: BaseSecurityContextThunk): Promise<TRes>;
+    handleDryRunPost<TRes>(port: HttpPort<TRes>, getBaseSecurityContext: BaseSecurityContextThunk): Promise<TRes>;
+    handleBatchPost<TRes>(port: HttpPort<TRes>, getBaseSecurityContext: BaseSecurityContextThunk): Promise<TRes>;
+    handleExplainPost<TRes>(port: HttpPort<TRes>, getBaseSecurityContext: BaseSecurityContextThunk): Promise<TRes>;
+}
+export declare function createRestHandlers(semanticLayer: SemanticLayerCompiler): RestHandlers;

package/dist/adapters/core/security-context.d.ts

@@ -0,0 +1,17 @@
+import { SecurityContext } from '../../server/index.js';
+/** Returns the base (pre-locale) security context for a request. */
+export type BaseSecurityContextThunk = () => SecurityContext | Promise<SecurityContext>;
+/** Reads a request header by (case-insensitive) name. */
+export type HeaderReader = (name: string) => string | undefined;
+/**
+ * Merge the request locale (from the `X-DC-Locale` header) into a base security
+ * context. Replaces the per-adapter `extractSecurityContextWithLocale` wrappers.
+ */
+export declare function withLocaleFromHeaders(base: SecurityContext, readHeader: HeaderReader): SecurityContext;
+/**
+ * Resolve the base security context and merge the request locale in one step —
+ * the standard preamble for every authenticated core handler.
+ */
+export declare function resolveSecurityContext(getBaseSecurityContext: BaseSecurityContextThunk, readHeader: HeaderReader): Promise<SecurityContext>;
+/** Strip CR/LF from a thrown value for single-line logging (log-injection guard). */
+export declare function sanitizeForLog(error: unknown): string;

package/dist/adapters/core-Bbchr0ui.js

@@ -0,0 +1,244 @@
+import { a as e, i as t, l as n, o as r, r as i, u as a } from "./utils-BPWZsX7k.js";
+import { C as o, S as s, _ as c, a as l, b as u, c as d, g as f, h as p, i as m, l as h, m as g, o as _, r as v, u as y, v as b, x, y as S } from "./mcp-transport-Bw_zqky2.js";
+//#region src/adapters/locale.ts
+var C = "x-dc-locale";
+function w(e) {
+	if (!e) return;
+	let t = (Array.isArray(e) ? e[0] : e).split(",")[0]?.trim();
+	if (t && /^[A-Za-z0-9-]{2,35}$/.test(t)) return t;
+}
+function T(e) {
+	return w(e(C));
+}
+function E(e, t) {
+	let n = e && typeof e == "object" ? e : {}, r = typeof n.locale == "string" ? n.locale : void 0, i = t ?? r ?? "en-GB";
+	return r === i ? n : {
+		...n,
+		locale: i
+	};
+}
+function D(e) {
+	let t = Array.isArray(e) ? [...e] : (e ?? "").split(",").map((e) => e.trim()).filter(Boolean);
+	return t.some((e) => e.toLowerCase() === "x-dc-locale") || t.push("X-DC-Locale"), t;
+}
+//#endregion
+//#region src/adapters/core/security-context.ts
+function O(e, t) {
+	return E(e, T(t));
+}
+async function k(e, t) {
+	return O(await e(), t);
+}
+function A(e) {
+	return String(e).replace(/\n|\r/g, "");
+}
+//#endregion
+//#region src/adapters/core/rest-handlers.ts
+function j(i) {
+	async function o(e, n, a) {
+		let o = i.validateQuery(e);
+		if (!o.isValid) return a.send(400, t(`Query validation failed: ${o.errors.join(", ")}`, 400));
+		let s = e.measures?.[0] || e.dimensions?.[0];
+		if (!s) return a.send(400, t("No measures or dimensions specified", 400));
+		let c = s.split(".")[0], l = await i.generateSQL(c, e, n);
+		return a.send(200, r(e, l));
+	}
+	function s(n) {
+		try {
+			return n.send(200, e(i.getMetadata()));
+		} catch (e) {
+			return console.error("Metadata error:", e), n.send(500, t(e instanceof Error ? e.message : "Failed to fetch metadata", 500));
+		}
+	}
+	async function c(e, n) {
+		try {
+			let t = await e.getBody();
+			return await o(t?.query || t, await k(n, (t) => e.getHeader(t)), e);
+		} catch (n) {
+			return console.error("SQL generation error:", A(n)), e.send(500, t(n instanceof Error ? n.message : "SQL generation failed", 500));
+		}
+	}
+	async function l(e, n) {
+		try {
+			let r = e.getQueryParam("query");
+			if (!r) return e.send(400, t("Query parameter is required", 400));
+			let i;
+			try {
+				i = JSON.parse(r);
+			} catch {
+				return e.send(400, t("Invalid JSON in query parameter", 400));
+			}
+			let a = await k(n, (t) => e.getHeader(t));
+			return await o(i, a, e);
+		} catch (n) {
+			return console.error("SQL generation error:", A(n)), e.send(500, t(n instanceof Error ? n.message : "SQL generation failed", 500));
+		}
+	}
+	async function u(e, t) {
+		try {
+			let n = await e.getBody(), r = await a(n?.query || n, await k(t, (t) => e.getHeader(t)), i);
+			return e.send(200, r);
+		} catch (t) {
+			return console.error("Dry-run error:", t), e.send(400, {
+				error: t instanceof Error ? t.message : "Dry-run validation failed",
+				valid: !1
+			});
+		}
+	}
+	async function d(e, t) {
+		try {
+			let n = e.getQueryParam("query");
+			if (!n) return e.send(400, {
+				error: "Query parameter is required",
+				valid: !1
+			});
+			let r = await a(JSON.parse(n), await k(t, (t) => e.getHeader(t)), i);
+			return e.send(200, r);
+		} catch (t) {
+			return console.error("Dry-run error:", t), e.send(400, {
+				error: t instanceof Error ? t.message : "Dry-run validation failed",
+				valid: !1
+			});
+		}
+	}
+	async function f(e, r) {
+		try {
+			let a = (await e.getBody())?.queries;
+			if (!a || !Array.isArray(a)) return e.send(400, t("Request body must contain a \"queries\" array", 400));
+			if (a.length === 0) return e.send(400, t("Queries array cannot be empty", 400));
+			let o = await n(a, await k(r, (t) => e.getHeader(t)), i, { skipCache: e.getHeader("x-cache-control") === "no-cache" });
+			return e.send(200, o);
+		} catch (n) {
+			return console.error("Batch execution error:", n), e.send(500, t(n instanceof Error ? n.message : "Batch execution failed", 500));
+		}
+	}
+	async function p(e, t) {
+		try {
+			let n = await e.getBody(), r = n?.query || n, a = n?.options || {}, o = await k(t, (t) => e.getHeader(t)), s = i.validateQuery(r);
+			if (!s.isValid) return e.send(400, { error: `Query validation failed: ${s.errors.join(", ")}` });
+			let c = await i.explainQuery(r, o, a);
+			return e.send(200, c);
+		} catch (t) {
+			return console.error("Explain error:", t), e.send(500, { error: t instanceof Error ? t.message : "Explain query failed" });
+		}
+	}
+	return {
+		handleMetaGet: s,
+		handleSqlGet: l,
+		handleSqlPost: c,
+		handleDryRunGet: d,
+		handleDryRunPost: u,
+		handleBatchPost: f,
+		handleExplainPost: p
+	};
+}
+//#endregion
+//#region src/adapters/core/mcp-handler.ts
+function M(e, t) {
+	let n = e?.code ?? -32603, r = e?.data, i = e.message || "MCP request failed";
+	return m(t ?? null, n, i, r);
+}
+function N(e, t) {
+	let n = !!t.app, r = typeof t.app == "object" ? t.app : void 0, i;
+	function a() {
+		return i ||= {
+			resources: _(e, t.resources),
+			prompts: S(t.prompts),
+			instructions: b(t.instructions)
+		}, i;
+	}
+	async function C(i, _) {
+		if (t.resourceMetadataUrl && !y(i.getHeader("authorization"))) return i.setHeader("WWW-Authenticate", d(t.resourceMetadataUrl)), i.send(401, { error: "Bearer token required" });
+		let b = s(i.getHeader("origin"), t.allowedOrigins ? { allowedOrigins: t.allowedOrigins } : {});
+		if (!b.valid) return i.send(403, m(null, -32600, b.reason));
+		let S = i.getHeader("accept");
+		if (!x(S)) return i.send(400, m(null, -32600, "Accept header must include both application/json and text/event-stream"));
+		let C = p({ "mcp-protocol-version": i.getHeader("mcp-protocol-version") });
+		if (!C.ok) return i.send(426, {
+			error: "Unsupported MCP protocol version",
+			supported: C.supported
+		});
+		let w = f(await i.getBody());
+		if (!w) return i.send(400, m(null, -32600, "Invalid JSON-RPC 2.0 request"));
+		let T = o(S), E = w.method === "initialize", { resources: D, prompts: O, instructions: j } = a();
+		try {
+			let a = await h(w.method, w.params, {
+				semanticLayer: e,
+				extractSecurityContext: () => k(_, (e) => i.getHeader(e)),
+				rawRequest: void 0,
+				rawResponse: void 0,
+				negotiatedProtocol: C.negotiated,
+				resources: D,
+				prompts: O,
+				instructions: j,
+				appEnabled: n,
+				appConfig: r,
+				serverName: t.serverName
+			});
+			if (g(w)) return i.sendEmpty(202);
+			let o = E && a && typeof a == "object" && "sessionId" in a ? a.sessionId : void 0;
+			o && i.setHeader(v, o);
+			let s = l(w.id ?? null, a);
+			if (T) {
+				let e = c();
+				return i.sendSse(200, `id: ${e}\n\n` + u(s, e));
+			}
+			return i.send(200, s);
+		} catch (e) {
+			if (g(w)) return console.error("MCP notification processing error:", A(e)), i.sendEmpty(202);
+			console.error("MCP RPC error:", A(e));
+			let t = M(e, w.id);
+			if (T) {
+				let e = c();
+				return i.sendSse(200, `id: ${e}\n\n` + u(t, e));
+			}
+			return i.send(200, t);
+		}
+	}
+	return { handleMcpPost: C };
+}
+//#endregion
+//#region src/adapters/core/cube-http-handler.ts
+function P(e) {
+	let { semanticLayer: n, onError: r, mcp: a = {} } = e, o = j(n), { handleMcpPost: s } = N(n, a);
+	function c(e, n) {
+		return r(e), n.send(500, t(e instanceof Error ? e.message : "Query execution failed", 500));
+	}
+	async function l(e, r, a) {
+		let o = await k(a, (e) => r.getHeader(e)), s = n.validateQuery(e);
+		if (!s.isValid) return r.send(400, t(`Query validation failed: ${s.errors.join(", ")}`, 400));
+		let c = r.getHeader("x-cache-control") === "no-cache", l = await n.executeMultiCubeQuery(e, o, { skipCache: c });
+		return r.send(200, i(e, l, n));
+	}
+	async function u(e, t) {
+		try {
+			let n = await e.getBody();
+			return await l(n?.query || n, e, t);
+		} catch (t) {
+			return c(t, e);
+		}
+	}
+	async function d(e, n) {
+		try {
+			let r = e.getQueryParam("query");
+			if (!r) return e.send(400, t("Query parameter is required", 400));
+			let i;
+			try {
+				i = JSON.parse(r);
+			} catch {
+				return e.send(400, t("Invalid JSON in query parameter", 400));
+			}
+			return await l(i, e, n);
+		} catch (t) {
+			return c(t, e);
+		}
+	}
+	return {
+		handleLoadGet: d,
+		handleLoadPost: u,
+		handleMcpPost: s,
+		...o
+	};
+}
+//#endregion
+export { T as a, D as i, k as n, E as o, O as r, P as t };

package/dist/adapters/core-F1pCQPde.cjs

@@ -0,0 +1 @@
+const e=require("./utils-_whV4fXL.cjs"),t=require("./mcp-transport-CNIPoe1i.cjs");var n=`x-dc-locale`;function r(e){if(!e)return;let t=(Array.isArray(e)?e[0]:e).split(`,`)[0]?.trim();if(t&&/^[A-Za-z0-9-]{2,35}$/.test(t))return t}function i(e){return r(e(n))}function a(e,t){let n=e&&typeof e==`object`?e:{},r=typeof n.locale==`string`?n.locale:void 0,i=t??r??`en-GB`;return r===i?n:{...n,locale:i}}function o(e){let t=Array.isArray(e)?[...e]:(e??``).split(`,`).map(e=>e.trim()).filter(Boolean);return t.some(e=>e.toLowerCase()===`x-dc-locale`)||t.push(`X-DC-Locale`),t}function s(e,t){return a(e,i(t))}async function c(e,t){return s(await e(),t)}function l(e){return String(e).replace(/\n|\r/g,``)}function u(t){async function n(n,r,i){let a=t.validateQuery(n);if(!a.isValid)return i.send(400,e.i(`Query validation failed: ${a.errors.join(`, `)}`,400));let o=n.measures?.[0]||n.dimensions?.[0];if(!o)return i.send(400,e.i(`No measures or dimensions specified`,400));let s=o.split(`.`)[0],c=await t.generateSQL(s,n,r);return i.send(200,e.o(n,c))}function r(n){try{return n.send(200,e.a(t.getMetadata()))}catch(t){return console.error(`Metadata error:`,t),n.send(500,e.i(t instanceof Error?t.message:`Failed to fetch metadata`,500))}}async function i(t,r){try{let e=await t.getBody();return await n(e?.query||e,await c(r,e=>t.getHeader(e)),t)}catch(n){return console.error(`SQL generation error:`,l(n)),t.send(500,e.i(n instanceof Error?n.message:`SQL generation failed`,500))}}async function a(t,r){try{let i=t.getQueryParam(`query`);if(!i)return t.send(400,e.i(`Query parameter is required`,400));let a;try{a=JSON.parse(i)}catch{return t.send(400,e.i(`Invalid JSON in query parameter`,400))}let o=await c(r,e=>t.getHeader(e));return await n(a,o,t)}catch(n){return console.error(`SQL generation error:`,l(n)),t.send(500,e.i(n instanceof Error?n.message:`SQL generation failed`,500))}}async function o(n,r){try{let i=await n.getBody(),a=await e.u(i?.query||i,await c(r,e=>n.getHeader(e)),t);return n.send(200,a)}catch(e){return console.error(`Dry-run error:`,e),n.send(400,{error:e instanceof Error?e.message:`Dry-run validation failed`,valid:!1})}}async function s(n,r){try{let i=n.getQueryParam(`query`);if(!i)return n.send(400,{error:`Query parameter is required`,valid:!1});let a=await e.u(JSON.parse(i),await c(r,e=>n.getHeader(e)),t);return n.send(200,a)}catch(e){return console.error(`Dry-run error:`,e),n.send(400,{error:e instanceof Error?e.message:`Dry-run validation failed`,valid:!1})}}async function u(n,r){try{let i=(await n.getBody())?.queries;if(!i||!Array.isArray(i))return n.send(400,e.i(`Request body must contain a "queries" array`,400));if(i.length===0)return n.send(400,e.i(`Queries array cannot be empty`,400));let a=await e.l(i,await c(r,e=>n.getHeader(e)),t,{skipCache:n.getHeader(`x-cache-control`)===`no-cache`});return n.send(200,a)}catch(t){return console.error(`Batch execution error:`,t),n.send(500,e.i(t instanceof Error?t.message:`Batch execution failed`,500))}}async function d(e,n){try{let r=await e.getBody(),i=r?.query||r,a=r?.options||{},o=await c(n,t=>e.getHeader(t)),s=t.validateQuery(i);if(!s.isValid)return e.send(400,{error:`Query validation failed: ${s.errors.join(`, `)}`});let l=await t.explainQuery(i,o,a);return e.send(200,l)}catch(t){return console.error(`Explain error:`,t),e.send(500,{error:t instanceof Error?t.message:`Explain query failed`})}}return{handleMetaGet:r,handleSqlGet:a,handleSqlPost:i,handleDryRunGet:s,handleDryRunPost:o,handleBatchPost:u,handleExplainPost:d}}function d(e,n){let r=e?.code??-32603,i=e?.data,a=e.message||`MCP request failed`;return t.i(n??null,r,a,i)}function f(e,n){let r=!!n.app,i=typeof n.app==`object`?n.app:void 0,a;function o(){return a||={resources:t.o(e,n.resources),prompts:t.y(n.prompts),instructions:t.v(n.instructions)},a}async function s(a,s){if(n.resourceMetadataUrl&&!t.u(a.getHeader(`authorization`)))return a.setHeader(`WWW-Authenticate`,t.c(n.resourceMetadataUrl)),a.send(401,{error:`Bearer token required`});let u=t.S(a.getHeader(`origin`),n.allowedOrigins?{allowedOrigins:n.allowedOrigins}:{});if(!u.valid)return a.send(403,t.i(null,-32600,u.reason));let f=a.getHeader(`accept`);if(!t.x(f))return a.send(400,t.i(null,-32600,`Accept header must include both application/json and text/event-stream`));let p=t.h({"mcp-protocol-version":a.getHeader(`mcp-protocol-version`)});if(!p.ok)return a.send(426,{error:`Unsupported MCP protocol version`,supported:p.supported});let m=t.g(await a.getBody());if(!m)return a.send(400,t.i(null,-32600,`Invalid JSON-RPC 2.0 request`));let h=t.C(f),g=m.method===`initialize`,{resources:_,prompts:v,instructions:y}=o();try{let o=await t.l(m.method,m.params,{semanticLayer:e,extractSecurityContext:()=>c(s,e=>a.getHeader(e)),rawRequest:void 0,rawResponse:void 0,negotiatedProtocol:p.negotiated,resources:_,prompts:v,instructions:y,appEnabled:r,appConfig:i,serverName:n.serverName});if(t.m(m))return a.sendEmpty(202);let l=g&&o&&typeof o==`object`&&`sessionId`in o?o.sessionId:void 0;l&&a.setHeader(t.r,l);let u=t.a(m.id??null,o);if(h){let e=t._();return a.sendSse(200,`id: ${e}\n\n`+t.b(u,e))}return a.send(200,u)}catch(e){if(t.m(m))return console.error(`MCP notification processing error:`,l(e)),a.sendEmpty(202);console.error(`MCP RPC error:`,l(e));let n=d(e,m.id);if(h){let e=t._();return a.sendSse(200,`id: ${e}\n\n`+t.b(n,e))}return a.send(200,n)}}return{handleMcpPost:s}}function p(t){let{semanticLayer:n,onError:r,mcp:i={}}=t,a=u(n),{handleMcpPost:o}=f(n,i);function s(t,n){return r(t),n.send(500,e.i(t instanceof Error?t.message:`Query execution failed`,500))}async function l(t,r,i){let a=await c(i,e=>r.getHeader(e)),o=n.validateQuery(t);if(!o.isValid)return r.send(400,e.i(`Query validation failed: ${o.errors.join(`, `)}`,400));let s=r.getHeader(`x-cache-control`)===`no-cache`,l=await n.executeMultiCubeQuery(t,a,{skipCache:s});return r.send(200,e.r(t,l,n))}async function d(e,t){try{let n=await e.getBody();return await l(n?.query||n,e,t)}catch(t){return s(t,e)}}async function p(t,n){try{let r=t.getQueryParam(`query`);if(!r)return t.send(400,e.i(`Query parameter is required`,400));let i;try{i=JSON.parse(r)}catch{return t.send(400,e.i(`Invalid JSON in query parameter`,400))}return await l(i,t,n)}catch(e){return s(e,t)}}return{handleLoadGet:p,handleLoadPost:d,handleMcpPost:o,...a}}Object.defineProperty(exports,"a",{enumerable:!0,get:function(){return i}}),Object.defineProperty(exports,"i",{enumerable:!0,get:function(){return o}}),Object.defineProperty(exports,"n",{enumerable:!0,get:function(){return c}}),Object.defineProperty(exports,"o",{enumerable:!0,get:function(){return a}}),Object.defineProperty(exports,"r",{enumerable:!0,get:function(){return s}}),Object.defineProperty(exports,"t",{enumerable:!0,get:function(){return p}});

package/dist/adapters/express/index.cjs

@@ -1,3 +1,3 @@
-Object.defineProperty(exports,Symbol.toStringTag,{value:`Module`});const e=require("../utils-_whV4fXL.cjs"),t=require("../locale-ZLUUNUxr.cjs"),n=require("../mcp-transport-B7ddET3M.cjs");let r=require("express");r=e.k(r,1);let i=require("cors");i=e.k(i,1);function a(a){let{cubes:o,drizzle:s,schema:c,extractSecurityContext:l,engineType:u,cors:d,basePath:f=`/cubejs-api/v1`,jsonLimit:p=`10mb`,cache:m,mcp:h={enabled:!0},agent:g}=a;if(!o||o.length===0)throw Error(`At least one cube must be provided in the cubes array`);let _=(0,r.Router)(),v=async(e,n)=>t.r(await l(e,n),t.n(t=>e.get(t)));if(d){let e={...d,allowedHeaders:t.t(d.allowedHeaders)};_.use((0,i.default)(e))}_.use(r.default.json({limit:p})),_.use(r.default.urlencoded({extended:!0,limit:p}));let y=new t.i({drizzle:s,schema:c,engineType:u,cache:m,rlsSetup:a.rlsSetup});if(o.forEach(e=>{y.registerCube(e)}),_.post(`${f}/load`,async(t,n)=>{try{let r=t.body.query||t.body,i=await v(t,n),a=y.validateQuery(r);if(!a.isValid)return n.status(400).json(e.i(`Query validation failed: ${a.errors.join(`, `)}`,400));let o=t.headers[`x-cache-control`]===`no-cache`,s=await y.executeMultiCubeQuery(r,i,{skipCache:o});n.json(e.r(r,s,y))}catch(t){console.error(`Query execution error:`,t),n.status(500).json(e.i(t instanceof Error?t.message:`Query execution failed`,500))}}),_.get(`${f}/load`,async(t,n)=>{try{let r=t.query.query;if(!r)return n.status(400).json(e.i(`Query parameter is required`,400));let i;try{i=JSON.parse(r)}catch{return n.status(400).json(e.i(`Invalid JSON in query parameter`,400))}let a=await v(t,n),o=y.validateQuery(i);if(!o.isValid)return n.status(400).json(e.i(`Query validation failed: ${o.errors.join(`, `)}`,400));let s=t.headers[`x-cache-control`]===`no-cache`,c=await y.executeMultiCubeQuery(i,a,{skipCache:s});n.json(e.r(i,c,y))}catch(t){console.error(`Query execution error:`,t),n.status(500).json(e.i(t instanceof Error?t.message:`Query execution failed`,500))}}),_.post(`${f}/batch`,async(t,n)=>{try{let{queries:r}=t.body;if(!r||!Array.isArray(r))return n.status(400).json(e.i(`Request body must contain a "queries" array`,400));if(r.length===0)return n.status(400).json(e.i(`Queries array cannot be empty`,400));let i=await e.l(r,await v(t,n),y,{skipCache:t.headers[`x-cache-control`]===`no-cache`});n.json(i)}catch(t){console.error(`Batch execution error:`,t),n.status(500).json(e.i(t instanceof Error?t.message:`Batch execution failed`,500))}}),_.get(`${f}/meta`,(t,n)=>{try{let t=y.getMetadata();n.json(e.a(t))}catch(t){console.error(`Metadata error:`,t),n.status(500).json(e.i(t instanceof Error?t.message:`Failed to fetch metadata`,500))}}),_.post(`${f}/sql`,async(t,n)=>{try{let r=t.body,i=await v(t,n),a=y.validateQuery(r);if(!a.isValid)return n.status(400).json(e.i(`Query validation failed: ${a.errors.join(`, `)}`,400));let o=r.measures?.[0]||r.dimensions?.[0];if(!o)return n.status(400).json(e.i(`No measures or dimensions specified`,400));let s=o.split(`.`)[0],c=await y.generateSQL(s,r,i);n.json(e.o(r,c))}catch(t){console.error(`SQL generation error:`,String(t).replace(/\n|\r/g,``)),n.status(500).json(e.i(t instanceof Error?t.message:`SQL generation failed`,500))}}),_.get(`${f}/sql`,async(t,n)=>{try{let r=t.query.query;if(!r)return n.status(400).json(e.i(`Query parameter is required`,400));let i=JSON.parse(r),a=await v(t,n),o=y.validateQuery(i);if(!o.isValid)return n.status(400).json(e.i(`Query validation failed: ${o.errors.join(`, `)}`,400));let s=i.measures?.[0]||i.dimensions?.[0];if(!s)return n.status(400).json(e.i(`No measures or dimensions specified`,400));let c=s.split(`.`)[0],l=await y.generateSQL(c,i,a);n.json(e.o(i,l))}catch(t){console.error(`SQL generation error:`,String(t).replace(/\n|\r/g,``)),n.status(500).json(e.i(t instanceof Error?t.message:`SQL generation failed`,500))}}),_.post(`${f}/dry-run`,async(t,n)=>{try{let r=await e.u(t.body.query||t.body,await v(t,n),y);n.json(r)}catch(e){console.error(`Dry-run error:`,e),n.status(400).json({error:e instanceof Error?e.message:`Dry-run validation failed`,valid:!1})}}),_.get(`${f}/dry-run`,async(t,n)=>{try{let r=t.query.query;if(!r)return n.status(400).json({error:`Query parameter is required`,valid:!1});let i=await e.u(JSON.parse(r),await v(t,n),y);n.json(i)}catch(e){console.error(`Dry-run error:`,e),n.status(400).json({error:e instanceof Error?e.message:`Dry-run validation failed`,valid:!1})}}),_.post(`${f}/explain`,async(e,t)=>{try{let n=e.body.query||e.body,r=e.body.options||{},i=await v(e,t),a=y.validateQuery(n);if(!a.isValid)return t.status(400).json({error:`Query validation failed: ${a.errors.join(`, `)}`});let o=await y.explainQuery(n,i,r);t.json(o)}catch(e){console.error(`Explain error:`,e),t.status(500).json({error:e instanceof Error?e.message:`Explain query failed`})}}),g&&_.post(`${f}/agent/chat`,async(e,t)=>{try{let{handleAgentChat:n}=await Promise.resolve().then(()=>require("../handler-OwxSBJH8.cjs")),{message:r,sessionId:i,history:a}=e.body;if(!r||typeof r!=`string`)return t.status(400).json({error:`message is required and must be a string`});let o=(g.apiKey||``).trim();if(g.allowClientApiKey){let t=e.headers[`x-agent-api-key`];t&&(o=t.trim())}if(!o)return t.status(401).json({error:`No API key configured. Set agent.apiKey in server config or send X-Agent-Api-Key header.`});let s=g.allowClientApiKey?e.headers[`x-agent-provider`]:void 0,c=g.allowClientApiKey?e.headers[`x-agent-model`]:void 0,l=g.allowClientApiKey?e.headers[`x-agent-provider-endpoint`]:void 0,u=await v(e,t),d=g.buildSystemContext?.(u);t.writeHead(200,{"Content-Type":`text/event-stream`,"Cache-Control":`no-cache`,Connection:`keep-alive`});try{let e=n({message:r,sessionId:i,history:a,semanticLayer:y,securityContext:u,agentConfig:g,apiKey:o,systemContext:d,providerOverride:s,modelOverride:c,baseURLOverride:l});for await(let n of e)t.write(`data: ${JSON.stringify(n)}\n\n`)}catch(e){let n={type:`error`,data:{message:e instanceof Error?e.message:`Stream failed`}};t.write(`data: ${JSON.stringify(n)}\n\n`)}finally{t.end()}}catch(e){console.error(`Agent chat error:`,e),t.headersSent||t.status(500).json({error:e instanceof Error?e.message:`Agent chat failed`})}}),h.enabled!==!1){let e=n.o(y,h.resources),t=n.y(h.prompts),r=n.v(h.instructions),i=h.basePath??`/mcp`;_.post(`${i}`,async(i,a)=>{if(h.resourceMetadataUrl&&!n.u(i.headers.authorization))return a.setHeader(`WWW-Authenticate`,n.c(h.resourceMetadataUrl)),a.status(401).json({error:`Bearer token required`});let o=n.S(i.headers.origin,h.allowedOrigins?{allowedOrigins:h.allowedOrigins}:{});if(!o.valid)return a.status(403).json(n.i(null,-32600,o.reason));let s=i.headers.accept;if(!n.x(s))return a.status(400).json(n.i(null,-32600,`Accept header must include both application/json and text/event-stream`));let c=n.h(i.headers);if(!c.ok)return a.status(426).json({error:`Unsupported MCP protocol version`,supported:c.supported});let l=n.g(i.body);if(!l)return a.status(400).json(n.i(null,-32600,`Invalid JSON-RPC 2.0 request`));let u=n.C(s),d=l.method===`initialize`;try{let o=await n.l(l.method,l.params,{semanticLayer:y,extractSecurityContext:(e,t)=>v(e,t),rawRequest:i,rawResponse:a,negotiatedProtocol:c.negotiated,resources:e,prompts:t,instructions:r,appEnabled:!!h.app,appConfig:typeof h.app==`object`?h.app:void 0,serverName:h.serverName});if(n.m(l))return a.status(202).end();let s=d&&o&&typeof o==`object`&&`sessionId`in o?o.sessionId:void 0;s&&a.setHeader(n.r,s);let f=n.a(l.id??null,o);if(u){let e=n._();return a.status(200),a.setHeader(`Content-Type`,`text/event-stream`),a.setHeader(`Cache-Control`,`no-cache`),a.setHeader(`Connection`,`keep-alive`),a.write(`id: ${e}\n\n`),a.write(n.b(f,e)),a.end()}return a.json(f)}catch(e){if(n.m(l))return console.error(`MCP notification processing error:`,String(e).replace(/\n|\r/g,``)),a.status(202).end();console.error(`MCP RPC error:`,String(e).replace(/\n|\r/g,``));let t=e?.code??-32603,r=e?.data,i=e.message||`MCP request failed`,o=n.i(l.id??null,t,i,r);if(u){let e=n._();return a.status(200),a.setHeader(`Content-Type`,`text/event-stream`),a.setHeader(`Cache-Control`,`no-cache`),a.setHeader(`Connection`,`keep-alive`),a.write(`id: ${e}\n\n`),a.write(n.b(o,e)),a.end()}return a.status(200).json(o)}}),_.get(`${i}`,async(e,t)=>{if(h.resourceMetadataUrl&&!n.u(e.headers.authorization))return t.setHeader(`WWW-Authenticate`,n.c(h.resourceMetadataUrl)),t.status(401).json({error:`Bearer token required`});let r=n._();t.status(200),t.setHeader(`Content-Type`,`text/event-stream`),t.setHeader(`Cache-Control`,`no-cache`),t.setHeader(`Connection`,`keep-alive`),t.write(n.b({jsonrpc:`2.0`,method:`mcp/ready`,params:{protocol:`streamable-http`}},r,15e3));let i=setInterval(()=>{t.write(`: keep-alive
+Object.defineProperty(exports,Symbol.toStringTag,{value:`Module`});const e=require("../utils-_whV4fXL.cjs"),t=require("../compiler-DyyBaLry.cjs"),n=require("../mcp-transport-CNIPoe1i.cjs"),r=require("../core-F1pCQPde.cjs");let i=require("express");i=e.k(i,1);let a=require("cors");a=e.k(a,1);function o(e,t){return{getHeader:t=>e.get(t),getBody:async()=>e.body,getQueryParam:t=>e.query[t],send:(e,n)=>t.status(e).json(n),setHeader:(e,n)=>{t.setHeader(e,n)},sendEmpty:e=>t.status(e).end(),sendSse:(e,n)=>(t.status(e),t.setHeader(`Content-Type`,`text/event-stream`),t.setHeader(`Cache-Control`,`no-cache`),t.setHeader(`Connection`,`keep-alive`),t.write(n),t.end())}}function s(s){let{cubes:c,drizzle:l,schema:u,extractSecurityContext:d,engineType:f,cors:p,basePath:m=`/cubejs-api/v1`,jsonLimit:h=`10mb`,cache:g,mcp:_={enabled:!0},agent:v}=s;if(!c||c.length===0)throw Error(`At least one cube must be provided in the cubes array`);let y=(0,i.Router)();if(p){let e={...p,allowedHeaders:r.i(p.allowedHeaders)};y.use((0,a.default)(e))}y.use(i.default.json({limit:h})),y.use(i.default.urlencoded({extended:!0,limit:h}));let b=new t.t({drizzle:l,schema:u,engineType:f,cache:g,rlsSetup:s.rlsSetup});c.forEach(e=>{b.registerCube(e)});let x=r.t({semanticLayer:b,onError:e=>console.error(`Query execution error:`,e),mcp:_}),S=(e,t)=>()=>d(e,t);if(y.post(`${m}/load`,async(e,t)=>{await x.handleLoadPost(o(e,t),S(e,t))}),y.get(`${m}/load`,async(e,t)=>{await x.handleLoadGet(o(e,t),S(e,t))}),y.post(`${m}/batch`,async(e,t)=>{await x.handleBatchPost(o(e,t),S(e,t))}),y.get(`${m}/meta`,(e,t)=>{x.handleMetaGet(o(e,t))}),y.post(`${m}/sql`,async(e,t)=>{await x.handleSqlPost(o(e,t),S(e,t))}),y.get(`${m}/sql`,async(e,t)=>{await x.handleSqlGet(o(e,t),S(e,t))}),y.post(`${m}/dry-run`,async(e,t)=>{await x.handleDryRunPost(o(e,t),S(e,t))}),y.get(`${m}/dry-run`,async(e,t)=>{await x.handleDryRunGet(o(e,t),S(e,t))}),y.post(`${m}/explain`,async(e,t)=>{await x.handleExplainPost(o(e,t),S(e,t))}),v&&y.post(`${m}/agent/chat`,async(e,t)=>{try{let{handleAgentChat:n}=await Promise.resolve().then(()=>require("../handler-DRZb2ip6.cjs")),{message:i,sessionId:a,history:o}=e.body;if(!i||typeof i!=`string`)return t.status(400).json({error:`message is required and must be a string`});let s=(v.apiKey||``).trim();if(v.allowClientApiKey){let t=e.headers[`x-agent-api-key`];t&&(s=t.trim())}if(!s)return t.status(401).json({error:`No API key configured. Set agent.apiKey in server config or send X-Agent-Api-Key header.`});let c=v.allowClientApiKey?e.headers[`x-agent-provider`]:void 0,l=v.allowClientApiKey?e.headers[`x-agent-model`]:void 0,u=v.allowClientApiKey?e.headers[`x-agent-provider-endpoint`]:void 0,f=r.r(await d(e,t),t=>e.get(t)),p=v.buildSystemContext?.(f);t.writeHead(200,{"Content-Type":`text/event-stream`,"Cache-Control":`no-cache`,Connection:`keep-alive`});try{let e=n({message:i,sessionId:a,history:o,semanticLayer:b,securityContext:f,agentConfig:v,apiKey:s,systemContext:p,providerOverride:c,modelOverride:l,baseURLOverride:u});for await(let n of e)t.write(`data: ${JSON.stringify(n)}\n\n`)}catch(e){let n={type:`error`,data:{message:e instanceof Error?e.message:`Stream failed`}};t.write(`data: ${JSON.stringify(n)}\n\n`)}finally{t.end()}}catch(e){console.error(`Agent chat error:`,e),t.headersSent||t.status(500).json({error:e instanceof Error?e.message:`Agent chat failed`})}}),_.enabled!==!1){let e=_.basePath??`/mcp`;y.post(`${e}`,async(e,t)=>{await x.handleMcpPost(o(e,t),S(e,t))}),y.get(`${e}`,async(e,t)=>{if(_.resourceMetadataUrl&&!n.u(e.headers.authorization))return t.setHeader(`WWW-Authenticate`,n.c(_.resourceMetadataUrl)),t.status(401).json({error:`Bearer token required`});let r=n._();t.status(200),t.setHeader(`Content-Type`,`text/event-stream`),t.setHeader(`Cache-Control`,`no-cache`),t.setHeader(`Connection`,`keep-alive`),t.write(n.b({jsonrpc:`2.0`,method:`mcp/ready`,params:{protocol:`streamable-http`}},r,15e3));let i=setInterval(()=>{t.write(`: keep-alive
 
-`)},15e3);e.on(`close`,()=>{clearInterval(i)})}),_.delete(`${i}`,(e,t)=>h.resourceMetadataUrl&&!n.u(e.headers.authorization)?(t.setHeader(`WWW-Authenticate`,n.c(h.resourceMetadataUrl)),t.status(401).json({error:`Bearer token required`})):t.status(405).json({error:`Session termination not supported`}))}return _.use((t,n,r,i)=>{console.error(`Express adapter error:`,t),r.headersSent||r.status(500).json(e.i(t,500))}),_}function o(e,t){let n=a(t);return e.use(`/`,n),e}function s(e){return o((0,r.default)(),e)}exports.createCubeApp=s,exports.createCubeRouter=a,exports.mountCubeRoutes=o;
+`)},15e3);e.on(`close`,()=>{clearInterval(i)})}),y.delete(`${e}`,(e,t)=>_.resourceMetadataUrl&&!n.u(e.headers.authorization)?(t.setHeader(`WWW-Authenticate`,n.c(_.resourceMetadataUrl)),t.status(401).json({error:`Bearer token required`})):t.status(405).json({error:`Session termination not supported`}))}return y.use((t,n,r,i)=>{console.error(`Express adapter error:`,t),r.headersSent||r.status(500).json(e.i(t,500))}),y}function c(e,t){let n=s(t);return e.use(`/`,n),e}function l(e){return c((0,i.default)(),e)}exports.createCubeApp=l,exports.createCubeRouter=s,exports.mountCubeRoutes=c;