datatug / datatug-cli / 42374465490

100%

push

github

feat(query): bind cross-database saved TugQL in chat and serve (#594)

Follow-up to datatug/datatug-cli#592 (merged).

Source commits:

- 750b61fb71fc feat(query): bind cross-database saved TugQL in chat and serve
  A saved TugQL query that reads named databases (a text body's databases
  block with alias::path sources, or a structured body whose sources carry
  a database) now runs from `datatug chat` and from `datatug serve`'s
  exec/run_query the way the query run command does after #592: every
  alias is bound to a project source and read as its own secured leaf
  through Executor.RunFederatedTugQL. Before, both ran it single-source
  through RunTugQL, so no alias was ever bound.
  - pkg/tugqlbind holds the shared binding: Saved parses once and binds,
  Sources/Databases/Unqualified walk the root, joins and every subquery
  (FROM, EXISTS/NOT EXISTS, column, condition, ORDER BY) as DALgo's
  collectTugQLQueryDatabases does, LabelGuard maps each leaf to its
  source's catalog id, Root names the source a result reports.
  - The CLI's saved run binds once and passes the bindings to the
  ClickHouse check, the label check, the read, the result's sources and
  meta.json's db (was up to five binds per run).
  - A source naming no database next to one that does is refused in
  subqueries too (exit 2, not 4), with wording that fits text and
  structured queries.
  - chat checks each leaf strictly against its source's labels; serve
  binds only its own project's sources, installs a label guard from
  `datatug serve` (endpoints.SetFederatedLabelGuard), and judges an
  agent's federated read like raw SQL on every bound source.
  - secureread.Executor.WithFederatedColumns swaps only the leaf guard.
  Specs: cli/query REQ:cross-database-sources, new cli/serve
  REQ:serve-cross-database-queries and AC:saved-query-reads-two-databases.
- 252c51d8ce58 Merge remote-tracking branch 'origin/main' into tugql-federated-serve
- 1f420b65883a fix(serve): name federated bin... (continued)

372 of 372 new or added lines in 12 files covered. (100.0%)

99206 of 99208 relevant lines covered (100.0%)

1.01 hits per line