From b513dc0813ef50f1fc20f05ac3abc095a4713cc2 Mon Sep 17 00:00:00 2001 From: Priec Date: Wed, 15 Jul 2026 23:37:15 +0200 Subject: [PATCH] removing steel sql --- Cargo.lock | 1 + client | 2 +- common/proto/table_script.proto | 13 +++++-------- common/src/proto/descriptor.bin | Bin 94645 -> 94454 bytes common/src/proto/komp_ac.table_script.rs | 15 ++++++--------- server | 2 +- 6 files changed, 14 insertions(+), 19 deletions(-) diff --git a/Cargo.lock b/Cargo.lock index a7ddfb0..e9703fa 100644 --- a/Cargo.lock +++ b/Cargo.lock @@ -5951,6 +5951,7 @@ dependencies = [ "tracing-subscriber", "tui-canvas-validation-core 0.8.2", "unicode-width 0.2.2", + "url", "uuid", "validator", ] diff --git a/client b/client index 4023272..cf925ae 160000 --- a/client +++ b/client @@ -1 +1 @@ -Subproject commit 4023272451240ebf6c8b5c3157181a69332cd727 +Subproject commit cf925ae05b44c9588067de5375a5204687fbf042 diff --git a/common/proto/table_script.proto b/common/proto/table_script.proto index ea25295..0c00dfe 100644 --- a/common/proto/table_script.proto +++ b/common/proto/table_script.proto @@ -26,7 +26,7 @@ service TableScript { // • Allowed always: self-references (same table) // • Structured access via steel_get_column // requires an explicit link in table_definition_links - // • Raw SQL access via steel_query_sql is permitted (still validated) + // - Rejects raw SQL access; steel_query_sql is not part of the supported DSL // - Detects and rejects circular dependencies across all scripts in the schema // (self-references are allowed and not treated as cycles) // - Transforms the script to decimal-safe operations (steel_decimal) @@ -70,10 +70,7 @@ message PostTableScriptRequest { // • self-references are allowed without links // • other tables require an explicit link from the source table // (table_definition_links) or the request fails - // - Raw SQL access (no link required, but still validated): - // (steel_query_sql "SELECT ...") - // • Basic checks disallow operations that imply prohibited types, - // e.g., EXTRACT(…), DATE_PART(…), ::DATE, ::TIMESTAMPTZ, ::BIGINT, CAST(…) + // - Raw SQL access is not supported; steel_query_sql is rejected // - Self variable access in transformed scripts: // (get-var "column_name") is treated as referencing the current table // @@ -85,8 +82,8 @@ message PostTableScriptRequest { // BIGINT, TEXT, BOOLEAN, DATE, TIMESTAMPTZ // // Dependency tracking and cycles: - // - Dependencies are extracted from steel_get_column, get-var, - // and steel_query_sql and stored in script_dependencies with context + // - Dependencies are extracted from steel_get_column and get-var and stored + // in script_dependencies with context // - Cycles across tables are rejected (self-dependency is allowed) string script = 3; @@ -105,7 +102,6 @@ message TableScriptResponse { // Human-readable warnings concatenated into a single string. Possible messages: // - Warning if the script references itself (may affect first population) - // - Count of raw SQL queries present // - Info about number of structured linked-table accesses // - Warning if many dependencies may affect performance string warnings = 2; @@ -137,5 +133,6 @@ message ScriptDependency { string target_table = 1; string dependency_type = 2; string column = 3; + // Deprecated legacy field. Raw SQL dependencies are no longer produced. string query_fragment = 4; } diff --git a/common/src/proto/descriptor.bin b/common/src/proto/descriptor.bin index 474be61b874d75326b2793c0f5295439b3c70684..469951902a5daad0dc8b3207460538797f7a8d13 100644 GIT binary patch delta 1509 zcmZuxOKjX!6rFedJTrdj2i!E1nWXI#A2m%$qe_*!$c`2vp=@YX6^+ycXZ#uxrsIh{ zGu7nhpr+xsU|~dI0d&J2Y4}LpAQe@rRH=d%A+{7GmR%qrvEw}Zc~*Gk<9pA!_nmwF zzWu}g=Xd+-kMGb|bAwOr{KcJbPK%Ojv%>p>y&o=F?w=*Wiv=pU)^jvp`?Vy`C2RMq zgW``>dTmBtP^+rZiDc+qmlt23mtLcxqG(P=9i^I!Yh4xg7o)YNT!~~W=*YGgc4Tl> zcHUAl>bBcK*ipVbe{p`WeD7akiv#ceE7mjj9Km^k$h9uhXzhDv@ZEzaY{p0oY5!X! zO#4y(;N6GM)1>rTzFbzFnVuJ>?@=cRl`kZo=U*w$WYNam?I0w zJtUUWW&r9*?`QvHeVA?`z3z;fbW3Mc#>M9>&F8MQkl2sDoL-=!$>7LeD7}~?k=as&l`{{itCrTK`h(pc@o z4wMd%zd9Nk4YR!O_CT;45Q z&$`gAcFV`a2(&ESMUPIT6abjoqwM%VMWB(%JO*0t$O}1wc<=ZWL}KFHwflv4SSGKB z&@We0d9LNxDH}KdPPlHo214Sx@frw%>+o84l^V4{6KO2~&^F8=fk4}E#`2gI16FH> zhmGDOX<`K4=8&h&-*j?KLb=VOnF(BjEz0%`0JN-Fc1r{!|*fg!%Et2@dj=m%xeToi5mO{E03qLHU`Fb8P!rA z5L5xnIYjO*!&YilM4`GHGwh{q$%e!HCZi)Jim_>!b1^qSXFQLBdy`G*?b1~ICVLDc z$b>OD4Rfj%-eVYoiGsSvFojE+8e@9=Jw}tYSLJ!t4pqa`S6)*sdyT%lx}uu?DS5%% zp1x|Umakfk6%|P@RJb!`GiWWVP`1Os?>3ZwN|-X(1Ff4kfkgmxDtR=mTANrJ{QcYA GPyYiz4%_7b delta 1695 zcmZXUZ)h8J7{~Mb-CdgdWq%XOH)xq$b6I5poMPECc-R~a!qdOu`FqF z*OXM&i*0pVEBGSf^o2S_d_4$)?1jQW5k%SM5Z_t_!MB1S_`>h+?tX(|U-fg(^Zh>0 zJ(`>-dNaXGQTVKDb96cCdYBWM4hB86tlMniT z-g%b3#5q6ce##fj4PJa@o}1;e=L~=jg|ML3-;-%^hUbE|$c*|<8 z+bye-;VbJd>OAU{W9Uizp~j;fOcV?Ah1n9%X0sD%nI*cPF&(?i%d1xTlEW*uW7cYo z4co(wOWU-wHmATiY?y4?W|c&MmlkBWvkf?FI*@s zrQTR}IDNJ#+8lNs~sy3>Eq2z>|`YZ>G}h45J9B zR;1DU_uiQ!R&11AfCCZ7RP7b+FHTqKfUm(LI8^{D92x$$y|oa&u>z$Ts03(t||=*N985WJk>5%!#~L8yJ>lh?>}Z|^4a z+7C6Nep^2lYDE3^;E-QmG1N}v^`O2Ocqev}iBCWg^*3qSmjE#DO&UxF6a~e{WDK&+ z@h2p~eDhQaCLUE)L%R}rlLYo+KUZQSzP&2!w`gz+08LP^1`rar!Zm){uKW>s zbkwf}fXoYD5(Js256YP00Y{QRp~IZJgmQKmmk82)j7h|SbcsGH5ku*c6DLC{=nX;> zVNih-D5aPg5Jw#t<4S?JYE<=5NHx@LLPx@=3N27-#a(U_TzH^Wq1`4p@t|Ym?hrZ^ z1~oVVnZ&5Txa?Si(+(L+$taw5h<7>@S|NFt(8(|wg)=ZJ5!zjX?z