Skip to content

Feat builder#2

Draft
abnegate wants to merge 15 commits intomainfrom
feat-builder
Draft

Feat builder#2
abnegate wants to merge 15 commits intomainfrom
feat-builder

Conversation

@abnegate
Copy link
Member

@abnegate abnegate commented Mar 4, 2026

No description provided.

@coderabbitai
Copy link

coderabbitai bot commented Mar 4, 2026

Important

Review skipped

Draft detected.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Run ID: 4b3a74d6-8bc1-4064-bb9a-6b25b264e3bf

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Post copyable unit tests in a comment
  • Commit unit tests in branch feat-builder

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands and usage tips.

abnegate and others added 8 commits March 5, 2026 10:10
- Fix compileIn/compileNotIn to return `1 = 0` / `1 = 1` for empty arrays instead of invalid `IN ()` / `NOT IN ()`
- Fix NOT MATCH() syntax: wrap in parentheses for valid MySQL (`NOT (MATCH(...) AGAINST(?))`)
- Fix toRawSql SQL injection: escape single quotes in string bindings
- Fix toRawSql corruption: use substr_replace instead of preg_replace to avoid `?` and `$` in values corrupting output
- Fix page(0, n) producing negative offset: clamp to max(0, ...)
- Guard compileLogical/compileExists/compileNotExists against empty arrays producing bare `()`
- Simplify null tracking in compileIn/compileNotIn with boolean flag

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
- Fix dotted identifier wrapping (users.id → `users`.`id`)
- Escape wrap character in identifiers to prevent SQL injection
- Wrap _cursor column in identifier quotes
- Return 1=1 for empty raw SQL to prevent invalid WHERE clauses
- Treat COUNT('') as COUNT(*)
- Only emit OFFSET when LIMIT is present
- Escape LIKE metacharacters (% and _) in user input
- Validate JOIN operator against allowlist
- Fix condition provider binding order mismatch with cursor
- Wrap UNION queries in parentheses for correct precedence
- Validate ClickHouse SAMPLE fraction range (0,1)
- Use explicit map for aggregate SQL function names
- Escape backslashes in LIKE pattern values
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant