SQL library code

Hi @calebmer - I can’t keep track of a discussion in a large commit, so if you want to discuss it, let’s talk here.

Regarding the source of the code, the initial version is loosely based on the pg-sql implementation. I’d be happy to provide some sort of attribution if you’d like? I put this implementation into this code base for a few reasons though:

• I wanted to use TypeScript for it natively, to match the rest of the code base
• I wanted to also support generating slightly different output for different SQL dialects (not all of them support the explicit $1 style placeholder syntax)
• The various db libraries here are very tightly integrated with that package, so I need to be able to manage version updates carefully.
• I felt it was important that sql.raw had a value that was more obviously dangerous.

Regarding the symbols in pg-sql2, this library uses instanceof, which is equivalently secure - you can’t create an instance of SQLQuery via JSON.parse.

Let me know if you have any other concerns/if you want specific attribution.

[ForbesLindesay]

I’ve got a primitive SQL parser just about working: #20

Next steps:

1. create a proper AST for it
2. write something to generate types from the AST + a database schema
3. use the resulting utility to generate and print out types from sql template literals.

[ForbesLindesay]

I think I’ll go down the path of being able to generate types for some growing subset of sql statements. I think falling back to un-typed SQL from typed SQL is friendlier than falling back to un-typed SQL from our own DSL style API.

I think a library that understood/validated/added types for basic INSERT, UPDATE, DELETE and simple SELECT ... FROM ... style queries would be hugely useful, even if more complex queries were just typed as unknown. I think a very minimal SQL parser could get something like 60% of the queries in my current code base to be typed. Unfortunately that’s still going to be a lot of work to build, so I don’t know when I’ll get time.