tellaro-query-language 0.1.7__tar.gz → 0.1.8__tar.gz

{tellaro_query_language-0.1.7 → tellaro_query_language-0.1.8}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: tellaro-query-language
-Version: 0.1.7
+Version: 0.1.8
 Summary: A flexible, human-friendly query language for searching and filtering structured data
 Home-page: https://github.com/tellaro/tellaro-query-language
 License: MIT

{tellaro_query_language-0.1.7 → tellaro_query_language-0.1.8}/pyproject.toml

@@ -1,6 +1,6 @@
 [tool.poetry]
 name = "tellaro-query-language"
-version = "0.1.7"
+version = "0.1.8"
 description = "A flexible, human-friendly query language for searching and filtering structured data"
 authors = ["Justin Henderson <justin@tellaro.io>"]
 license = "MIT"

{tellaro_query_language-0.1.7 → tellaro_query_language-0.1.8}/src/tql/core.py

@@ -167,7 +167,7 @@ class TQL:
             return f"NOT {operand}"
         return str(ast)
 
-    def query(
+    def query(  # noqa: C901
         self, data: Union[List[Dict], str], query: str, size: int = 10, save_enrichment: bool = False
     ) -> Dict[str, Any]:  # noqa: C901
         """Execute a TQL query against data and return results in execute_opensearch format.
@@ -470,8 +470,7 @@ class TQL:
             size: Number of results to return (default: 500)
             from_: Starting offset for pagination (default: 0)
             timestamp_field: Field name for timestamp filtering (default: "@timestamp")
-            time_range: Optional time range dict with 'gte' and/or 'lte' keys.
-                       If None, defaults to 'gte': 'now-15m', 'lte': 'now'
+            time_range: Optional time range dict with 'gte' and/or 'lte' keys
             scan_all: If True, use scroll API to retrieve all matching documents
             scroll_size: Size per scroll when scan_all=True (default: 1000)
             scroll_timeout: Scroll timeout when scan_all=True (default: "5m")

{tellaro_query_language-0.1.7 → tellaro_query_language-0.1.8}/src/tql/core_components/opensearch_operations.py

@@ -311,10 +311,6 @@ class OpenSearchOperations:
         search_body = opensearch_query.copy()
 
         # Handle time range filtering
-        if time_range is None:
-            # Default time range: last 15 minutes
-            time_range = {"gte": "now-15m", "lte": "now"}
-
         # Add time range filter to the query
         if time_range:
             base_query = search_body.get("query", {})
@@ -492,7 +488,7 @@ class OpenSearchOperations:
                         }
                     else:
                         # Multiple aggregations
-                        results = {}
+                        agg_results = {}
                         for i, agg in enumerate(aggregations):
                             func = agg.get("function", "")
                             field = agg.get("field", "*")
@@ -522,11 +518,11 @@ class OpenSearchOperations:
                                 value = agg_result
 
                             key = agg.get("alias") or f"{func}_{field}"
-                            results[key] = value
+                            agg_results[key] = value
 
                         stats_results = {
                             "type": "stats",
-                            "results": results,
+                            "results": agg_results,
                         }
                 else:
                     stats_results = {"type": "stats", "operation": "unknown", "field": "*", "values": 0, "group_by": []}

{tellaro_query_language-0.1.7 → tellaro_query_language-0.1.8}/src/tql/opensearch_stats.py

@@ -404,7 +404,7 @@ class OpenSearchStatsTranslator:
 
     def _extract_aggregation_value(  # noqa: C901
         self, agg_result: Dict[str, Any], function: str
-    ) -> Union[int, float, Dict[str, Any], None]:
+    ) -> Union[int, float, Dict[str, Any], List[Any], None]:
         """Extract value from OpenSearch aggregation result.
 
         Args:

{tellaro_query_language-0.1.7 → tellaro_query_language-0.1.8}/src/tql/stats_evaluator.py

@@ -198,7 +198,7 @@ class TQLStatsEvaluator:
 
     def _calculate_aggregation(  # noqa: C901
         self, records: List[Dict[str, Any]], agg_spec: Dict[str, Any]
-    ) -> Union[int, float, Dict[str, Any], None]:
+    ) -> Union[int, float, Dict[str, Any], List[Any], None]:
         """Calculate a single aggregation value.
 
         Args: