qj@BdZddlmZddlZddlZddlmZmZddlm Z m Z m Z m Z ddl mZddlmZdd lmZdd lmZdd lmZdd lmZddd ZGddeZGddeZGddeZGddeZGddeZGddeZedZedZ y)z SQL composition utility module ) annotationsN)ABCabstractmethod)AnyIteratorIterableSequence)Escaping) AdaptContext)PyFormat) LiteralString) conn_encoding) Transformerc6t|j|S)a Adapt a Python object to a quoted SQL string. Use this function only if you absolutely want to convert a Python string to an SQL quoted literal to use e.g. to generate batch SQL and you won't have a connection available when you will need to use it. This function is relatively inefficient, because it doesn't cache the adaptation rules. If you pass a `!context` you can adapt the adaptation rules used, otherwise only global rules are used. )Literal as_string)objcontexts L/var/www/html/kelly-backend/venv/lib/python3.12/site-packages/psycopg/sql.pyquoters 3< ! !' **c^eZdZdZd dZd dZed ddZd ddZddZ ddZ dd Z dd Z y) ComposableaP Abstract base class for objects that can be used to compose an SQL string. `!Composable` objects can be joined using the ``+`` operator: the result will be a `Composed` instance containing the objects joined. The operator ``*`` is also supported with an integer argument: the result is a `!Composed` instance containing the left argument repeated as many times as requested. `!SQL` and `!Composed` objects can be passed directly to `~psycopg.Cursor.execute()`, `~psycopg.Cursor.executemany()`, `~psycopg.Cursor.copy()` in place of the query string. c||_yN_obj)selfrs r__init__zComposable.__init__5s  rcN|jjd|jdS)N()) __class____name__rrs r__repr__zComposable.__repr__8s$..))*!DII=::rNct)a~ Return the value of the object as bytes. :param context: the context to evaluate the object into. :type context: `connection` or `cursor` The method is automatically invoked by `~psycopg.Cursor.execute()`, `~psycopg.Cursor.executemany()`, `~psycopg.Cursor.copy()` if a `!Composable` is passed instead of the query string. )NotImplementedErrorrrs ras_byteszComposable.as_bytes;s "!rc|r |jnd}t|}|j|}t|tr|j |St j|j |dS)z Return the value of the object as string. :param context: the context to evaluate the string into. :type context: `connection` or `cursor` Nr) connectionrr+ isinstancebytesdecodecodecslookup)rrconnencbs rrzComposable.as_stringJsd&-w!!$D! MM' " a 88C= ==%,,Q/2 2rct|trt|g|zSt|trt|gt|gzStSr)r.ComposedrNotImplementedrothers r__add__zComposable.__add__[sG eX &TF#e+ + eZ (TF#hw&77 7! !rc t|g|zSr)r7)rns r__mul__zComposable.__mul__cs ##rcdt|t|uxr|j|jk(Sr)typerr9s r__eq__zComposable.__eq__fs'DzT%[(DTYY%**-DDrc&|j| Sr)rAr9s r__ne__zComposable.__ne__is;;u%%%r)rrreturnstrrrAdaptContext | NonerEr/rrHrErFr:rrEr7)r=intrEr7)r:rrEbool) r% __module__ __qualname____doc__r r'rr+rr;r>rArCrrrr&s? ; " "3""$E&rrcReZdZUdZded<d fd Zd d dZd dZd dZddZ xZ S)r7a. A `Composable` object made of a sequence of `!Composable`. The object is usually created using `!Composable` operators and methods (such as the `SQL.format()` method). `!Composed` objects can be passed directly to `~psycopg.Cursor.execute()`, `~psycopg.Cursor.executemany()`, `~psycopg.Cursor.copy()` in place of the query string. It is also possible to create a `!Composed` directly specifying a sequence of objects as arguments: if they are not `!Composable` they will be wrapped in a `Literal`. Example:: >>> comp = sql.Composed( ... [sql.SQL("INSERT INTO "), sql.Identifier("table")]) >>> print(comp.as_string(conn)) INSERT INTO "table" `!Composed` objects are iterable (so they can be used in `SQL.join` for instance). zlist[Composable]rc|Dcgc]}t|tr|n t|!}}t||ycc}wr)r.rrsuperr )rseqrr$s rr zComposed.__init__s<ORSsjj1sws|CsS Ts$<cLdjfd|jDS)Nrc3@K|]}|jywr)r+).0rrs r z$Composed.as_bytes..sC# W-s)joinrr*s `rr+zComposed.as_bytessxxCCCCrc,t|jSr)iterrr&s r__iter__zComposed.__iter__sDIIrct|tr"t|j|jzSt|trt|j|gzStSr)r.r7rrr8r9s rr;zComposed.__add__sJ eX &DII 23 3 eZ (DII/0 0! !rct|tr t|}nt|tstd|d|j |j S)a~ Return a new `!Composed` interposing the `!joiner` with the `!Composed` items. The `!joiner` must be a `SQL` or a string which will be interpreted as an `SQL`. Example:: >>> fields = sql.Identifier('foo') + sql.Identifier('bar') # a Composed >>> print(fields.join(', ').as_string(conn)) "foo", "bar" z5Composed.join() argument must be strings or SQL, got  instead)r.rFSQL TypeErrorrYr)rjoiners rrYz Composed.joinsT fc "[FFC(z+  {{499%%r)rTz Sequence[Any]rrG)rEzIterator[Composable]rJ)rbzSQL | LiteralStringrEr7) r%rMrNrO__annotations__r r+r\r;rY __classcell__r$s@rr7r7ms*. D"&rr7cveZdZUdZded<ej Zd fd Zd d dZ d d dZ d dZ ddZ xZ S)r`a A `Composable` representing a snippet of SQL statement. `!SQL` exposes `join()` and `format()` methods useful to create a template where to merge variable parts of a query (for instance field or table names). The `!obj` string doesn't undergo any form of escaping, so it is not suitable to represent variable identifiers or values: you should only use it to pass constant strings representing templates or snippets of SQL statements; use other objects such as `Identifier` or `Literal` to represent variable parts. `!SQL` objects can be passed directly to `~psycopg.Cursor.execute()`, `~psycopg.Cursor.executemany()`, `~psycopg.Cursor.copy()` in place of the query string. Example:: >>> query = sql.SQL("SELECT {0} FROM {1}").format( ... sql.SQL(', ').join([sql.Identifier('foo'), sql.Identifier('bar')]), ... sql.Identifier('table')) >>> print(query.as_string(conn)) SELECT "foo", "bar" FROM "table" rrcbt||t|tst d|dy)Nz SQL values must be strings, got r_)rSr r.rFra)rrr$s rr z SQL.__init__s4 #s#>sgXNO O$rc|jSrrr*s rrz SQL.as_strings yyrcn|r |jnd}t|}|jj|Sr)r-rrencoderrr3r4s rr+z SQL.as_bytess0%,w!!$D!yy$$rcg}d}|jj|jD]\}}}}|r td|r td|r|j t ||A|j r-|r td|j |t|d}~|s'| td|j |||dz }|j ||t|S)a Merge `Composable` objects into a template. :param args: parameters to replace to numbered (``{0}``, ``{1}``) or auto-numbered (``{}``) placeholders :param kwargs: parameters to replace to named (``{name}``) placeholders :return: the union of the `!SQL` string with placeholders replaced :rtype: `Composed` The method is similar to the Python `str.format()` method: the string template supports auto-numbered (``{}``), numbered (``{0}``, ``{1}``...), and named placeholders (``{name}``), with positional arguments replacing the numbered placeholders and keywords replacing the named ones. However placeholder modifiers (``{0!r}``, ``{0:<10}``) are not supported. If a `!Composable` objects is passed to the template it will be merged according to its `as_string()` method. If any other Python object is passed, it will be wrapped in a `Literal` object and so escaped according to SQL rules. Example:: >>> print(sql.SQL("SELECT * FROM {} WHERE {} = %s") ... .format(sql.Identifier('people'), sql.Identifier('id')) ... .as_string(conn)) SELECT * FROM "people" WHERE "id" = %s >>> print(sql.SQL("SELECT * FROM {tbl} WHERE name = {name}") ... .format(tbl=sql.Identifier('people'), name="O'Rourke")) ... .as_string(conn)) SELECT * FROM "people" WHERE name = 'O''Rourke' rz(no format specification supported by SQLz%no format conversion supported by SQLNz6cannot switch from automatic field numbering to manualz6cannot switch from manual field numbering to automaticr ) _formatterparser ValueErrorappendr`isdigitrKr7) rargskwargsrvautonumprenamespecconvs rformatz SQL.formatsF "&*__%:%:499%E !CtT !KLL !HII #c(#|||~$P $s4y/*?$P $w-(1  &,'9&F<|rcg}t|} |jt||D]$}|j||j|&t |S#t$r Yt |SwxYw)a Join a sequence of `Composable`. :param seq: the elements to join. :type seq: iterable of `!Composable` Use the `!SQL` object's string to separate the elements in `!seq`. Note that `Composed` objects are iterable too, so they can be used as argument for this method. Example:: >>> snip = sql.SQL(', ').join( ... sql.Identifier(n) for n in ['foo', 'bar', 'baz']) >>> print(snip.as_string(conn)) "foo", "bar", "baz" )r[rpnext StopIterationr7)rrTrtitis rrYzSQL.join%su$ #Y  IId2h  $ ! |   | sA A32A3)rrrrIrG)rrrrsrrEr7)rTzIterable[Composable]rEr7)r%rMrNrOrcstring Formatterrmr rr+rzrYrdres@rr`r`s<4 !!!#JP % FPrr`cJeZdZUdZded<dfd Zd dZd d dZd dZxZ S) Identifiera# A `Composable` representing an SQL identifier or a dot-separated sequence. Identifiers usually represent names of database objects, such as tables or fields. PostgreSQL identifiers follow `different rules`__ than SQL string literals for escaping (e.g. they use double quotes instead of single). .. __: https://www.postgresql.org/docs/current/sql-syntax-lexical.html# SQL-SYNTAX-IDENTIFIERS Example:: >>> t1 = sql.Identifier("foo") >>> t2 = sql.Identifier("ba'r") >>> t3 = sql.Identifier('ba"z') >>> print(sql.SQL(', ').join([t1, t2, t3]).as_string(conn)) "foo", "ba'r", "ba""z" Multiple strings can be passed to the object to represent a qualified name, i.e. a dot-separated sequence of identifiers. Example:: >>> query = sql.SQL("SELECT {} FROM {}").format( ... sql.Identifier("table", "field"), ... sql.Identifier("schema", "table")) >>> print(query.as_string(conn)) SELECT "table"."field" FROM "schema"."table" z Sequence[str]rct|||s td|D]!}t|trtd|dy)NzIdentifier cannot be emptyz*SQL identifier parts must be strings, got r_)rSr rar.rF)rstringssr$s rr zIdentifier.__init__gsL !89 9Aa%@XNrc|jjddjtt|j dS)Nr", r#)r$r%rYmapreprrr&s rr'zIdentifier.__repr__ts5..))*!DIIc$ 6J,K+LANNrcx|r |jnd}|rXt|j}t|}|jDcgc]"}|j |j |$}}n6|jDcgc]!}|j|j #}}dj|Scc}wcc}w)N.) r-r pgconnrrescape_identifierrj_escape_identifierrY)rrr3escr4rescss rr+zIdentifier.as_bytesws%,w!!$ 4;;'C%CBF))L)QC))!((3-8)DLAEKAD++AHHJ7DKyyMKs 'B29&B7c2d|jddzdzS)zK Approximation of PQescapeIdentifier taking no connection. "s"")replace)rrs rrzIdentifier._escape_identifiersaiie,,t33r)rrFrDrrG)rr/rEr/) r%rMrNrOrcr r'r+rrdres@rrrEs%>  O4rrceZdZdZdddZy)ra A `Composable` representing an SQL value to include in a query. Usually you will want to include placeholders in the query and pass values as `~cursor.execute()` arguments. If however you really really need to include a literal value in the query you can use this object. The string returned by `!as_string()` follows the normal :ref:`adaptation rules ` for Python objects. Example:: >>> s1 = sql.Literal("fo'o") >>> s2 = sql.Literal(42) >>> s3 = sql.Literal(date(2000, 1, 1)) >>> print(sql.SQL(', ').join([s1, s2, s3]).as_string(conn)) 'fo''o', 42, '2000-01-01'::date Ncbtj|}|j|jSr)r from_context as_literalr)rrtxs rr+zLiteral.as_bytess%  % %g .}}TYY''rrrG)r%rMrNrOr+rPrrrrs ((rrcZeZdZdZdej fdfd ZddZd d dZd d dZ xZ S) Placeholdera A `Composable` representing a placeholder for query parameters. If the name is specified, generate a named placeholder (e.g. ``%(name)s``, ``%(name)b``), otherwise generate a positional placeholder (e.g. ``%s``, ``%b``). The object is useful to generate SQL queries with a variable number of arguments. Examples:: >>> names = ['foo', 'bar', 'baz'] >>> q1 = sql.SQL("INSERT INTO my_table ({}) VALUES ({})").format( ... sql.SQL(', ').join(map(sql.Identifier, names)), ... sql.SQL(', ').join(sql.Placeholder() * len(names))) >>> print(q1.as_string(conn)) INSERT INTO my_table ("foo", "bar", "baz") VALUES (%s, %s, %s) >>> q2 = sql.SQL("INSERT INTO my_table ({}) VALUES ({})").format( ... sql.SQL(', ').join(map(sql.Identifier, names)), ... sql.SQL(', ').join(map(sql.Placeholder, names))) >>> print(q2.as_string(conn)) INSERT INTO my_table ("foo", "bar", "baz") VALUES (%(foo)s, %(bar)s, %(baz)s) c,t||t|tst d|d|vrt d|t |tur t|}t|ts!t dt |j||_ y)Nzexpected string as name, got r#zinvalid name: z!expected PyFormat as format, got ) rSr r.rFraror@r r%_format)rrwrzr$s rr zPlaceholder.__init__s $$;D8DE E $;~dX67 7 <3 f%F&(+3DL4I4I3LM "( rcDg}|jr$|jt|j|jtj ur(|jd|jj |jjddj|dS)Nzformat=r"rr#) rrprrr AUTOrwr$r%rY)rpartss rr'zPlaceholder.__repr__sx 99 LLdii ) <rs # #44"%% + D&D&NB&zB&JP*Pf@4@4F(j(4=3*=3B 6{ i.r