惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

cs.AI updates on arXiv.org
cs.AI updates on arXiv.org
V
Visual Studio Blog
The GitHub Blog
The GitHub Blog
Apple Machine Learning Research
Apple Machine Learning Research
J
Java Code Geeks
T
Tailwind CSS Blog
大猫的无限游戏
大猫的无限游戏
Jina AI
Jina AI
OSCHINA 社区最新新闻
OSCHINA 社区最新新闻
Hugging Face - Blog
Hugging Face - Blog
WordPress大学
WordPress大学
宝玉的分享
宝玉的分享
freeCodeCamp Programming Tutorials: Python, JavaScript, Git & More
罗磊的独立博客
人人都是产品经理
人人都是产品经理
H
Heimdal Security Blog
Last Week in AI
Last Week in AI
博客园 - 【当耐特】
Cyberwarzone
Cyberwarzone
Google DeepMind News
Google DeepMind News
雷峰网
雷峰网
Hacker News: Ask HN
Hacker News: Ask HN
Webroot Blog
Webroot Blog
Microsoft Azure Blog
Microsoft Azure Blog
MyScale Blog
MyScale Blog
A
About on SuperTechFans
V2EX - 技术
V2EX - 技术
小众软件
小众软件
博客园 - Franky
博客园 - 司徒正美
P
Privacy International News Feed
爱范儿
爱范儿
U
Unit 42
博客园 - 叶小钗
The Hacker News
The Hacker News
C
Check Point Blog
奇客Solidot–传递最新科技情报
奇客Solidot–传递最新科技情报
Simon Willison's Weblog
Simon Willison's Weblog
N
News and Events Feed by Topic
D
Docker
T
Threatpost
MongoDB | Blog
MongoDB | Blog
让小产品的独立变现更简单 - ezindie.com
让小产品的独立变现更简单 - ezindie.com
H
Help Net Security
L
LINUX DO - 最新话题
Security Latest
Security Latest
T
The Exploit Database - CXSecurity.com
S
SegmentFault 最新的问题
A
Arctic Wolf
Spread Privacy
Spread Privacy

DEV Community

Authentication Security Deep Dive: From Brute Force to Salted Hashing (With Java Examples) Why AI Systems Don’t Fail — They Drift Spilling beans for how i learn for exam😁"Reinforcement Learning Cheat Sheet" I Replaced Chrome with Safari for AI Browser Automation. Here's What Broke (and What Finally Worked) How Python Borrows Other People's Work The $40 Architecture: Processing 1 Billion API Requests with 99.99% Uptime Vibe Coding: A Workflow Guide (From Zero to SaaS) Most webhook security guides protect the wrong side. The scary part is delivery. Headless CMS for TanStack Start: Build a Blog with Cosmic EU Age Verification App "Hacked in 2 Minutes" — What Actually Happened Comfy Cloud’s delete function does not actually remove files Running AI Models on GPU Cloud Servers: A Beginner Guide Event-driven media intelligence with AWS Step Functions and Bedrock I scored 500 AI prompts across 8 quality dimensions — here's what broke How to Call Google Gemini API from Next.js (Free Tier, No Backend Needed) The Portal Protocol: Reclaiming Human Connection in the Age of AI How to Fix Your Team's Scattered Knowledge Problem With a Self-Hosted Forum Intro to tc Cloud Functors: A Graph-First Mental Model for the Modern Cloud Designing Multi-Tenant Backends With Both Ownership and Team Access I Built a Neumorphic CSS Library with 77+ Components — Here's What I Learned PostgreSQL Performance Optimization: Why Connection Pooling Is Critical at Scale Cómo construí un SaaS multi-rubro para gestionar expensas en Argentina con FastAPI + Vue 3 🚀 I Built an Ethical Hacking Scanner Tool – Open Source Project I Replaced /usage and /context in Claude Code With a Single Statusline A Pythonic Way to Handle Emails (IMAP/SMTP) with Auto-Discovery and AI-Ready Design I Collected 8.9 Million Polymarket Price Points — Here's What I Found About How Markets Really Move EcoTrack AI — Carbon Footprint Tracker & Dashboard Everyone's Using AI. No One Agrees How. 5 self-hosted ebook managers worth trying in 2026 Building Your First AI Agent with LangChain: From Chatbot to Autonomous Assistant Common SOC 2 Failures (Real World) Stop Vibe-Checking Your AI App: A Practical Guide to Evals How to Use SonarQube and SonarScanner Locally to Level Up Your Code Quality Your Next To-Do App Is Dead — I Replaced Mine with an OpenClaw AI Sign a Nostr event in 60 lines of Python using coincurve — no nostr-sdk, no nbxplorer, no rust toolchain ITGC Audit Explained Like You’re in Big 4 Patch Tuesday abril 2026: Microsoft parcha 163 vulnerabilidades y un zero-day en SharePoint Stop scraping everything: a better way to track competitor price changes Listing on MCPize + the Official MCP Registry while routing payments OUTSIDE the marketplace — how I kept 100% of my x402 revenue Building an AI-Powered Risk Intelligence System Using Serverless Architecture Why We Ripped Function Overloading Out of Our AI Toolchain Testing AI-Generated Code: How to Actually Know If It Works SaaS Churn Is Killing Your Business. Here Is What to Do About It (Without a Support Team) The Speed of AI Is No Longer Linear - And Self-Improving Models Are Why How to Implement RBAC for MCP Tools: A Practical Guide for Engineering Teams From Standard Quote to Persuasive Proposal: AI Automation for Arborists I built a CLI that scaffolds complete multi-tenant SaaS apps Axios CVE-2025–62718: The Silent SSRF Bug That Could Be Hiding in Your Node.js App Right Now The dashboard that ended our friendship Data Pipelines Explained Simply (and How to Build Them with Python) The Hidden Cost of AI Systems Nobody Talks About. undefined vs undeclared, and how typeof behaves Switching from file-based jobs to NATS/Kafka in Rust without changing code io_uring Adventures: Rust Servers That Love Syscalls Why Agentic AI is Killing the Traditional Database The POUR principles of web accessibility for developers and designers Quantum Neural Network 3D — A Deep Dive into Interactive WebGL Visualization How To Install Caveman In Codex On macOS And Windows Automation Pipeline Reliability: Why Your Workflow Breaks When Nobody Is Watching I Built an 'Open World' AI Coding Agent — It Works From ANY Folder From Freelancing to Product: A Tech Service Company's SaaS Transformation China's AI Giants: Adding Tencent Hunyuan & ByteDance Doubao to AI University (74 Providers) On the Vibe Coders and Their Lies clerk: Auto-Summarize Your Claude Code Sessions AI Weekly — 2026/04/10–04/17 | The Model Lockdown Is Here, but the Toolchain Is the Real Battleground AI 週報 — 2026/04/10–2026/04/17 模型封鎖潮來了,但工具鏈才是真戰場 Maybe this is how Open-Source apps are born... 🚀 Fine-Tune LLMs with LoRA and QLoRA: 2026 Guide tRPC v11 + Next.js App Router: End-to-End Type Safety Without the Boilerplate ShadCN UI in 2026: Why I Stopped Installing Component Libraries and Started Owning My Components SaaS Billing in React Server Components: Stripe + Supabase Without a Single `useEffect` Join our DEV Weekend Challenge — $1,000 in Prizes Across TEN winners! Submissions Due April 20 at 6:59 AM UTC. Implementing FSRS Spaced Repetition in Flutter + Supabase — Adding Memory Science to an AI Learning App "I Texted My Localhost From the Train — Claude Code Fixed the Bug Before I Got Home" I Built a Sales Prep AI and It Went Deeper Than Expected Design to Code #2: One JSON, Eleven Outputs Solving the 100M-Row Problem: A Summary Table Pattern for High-Volume Push Notification Logs Flutter Web With Wasm: What Actually Changes For Developers I Built 50 Royalty-Free Soundtracks for My Side Project in a Weekend Using AI Music Generation The Vibe Coding Security Checklist: 7 Things to Check Before You Ship Stop Letting Googlebot Guess Fix Your React App's SEO Right Desconstruindo o Streaming do LinkedIn: Como Criar um Engine de Extração de Vídeo de Alta Performance com HLS e FFmpeg (EDA Part-1) EDA (Exploratory Data Analysis) Explained With Real Life — Why Looking at Your Data Is the Most Important Step in Machine Learning Brand Relationship Management at Scale: Our 4-Touch Outreach System for 200+ Brands Why String.fromEnvironment() Might Return an Empty String in Dart JGuardrails 1.0.0 — Hardening Java LLM Apps Against Jailbreaks, Toxicity, and Prompt Injection Plan and Schedule a Full Week of Threads Content From One Claude Conversation Coding Cat Oran Ep3, Five Tables Changed Everything Updated: BFF Pattern I'm done watching freelancers get buried by 200 proposals. So I'm building the alternative. This is my first post BFS Algorithm in Java Step by Step Tutorial with Examples Tracking LLM Pricing Monthly: An Open Dataset for 22 AI Models How We Measure Content ROI on a Comparison Site: Revenue Attribution Without Perfect Data Introducing Nova AI Ops: The AI-Native Operating System for SRE Teams I built a free desktop video downloader for Windows — Grabbit How Talkie OCR Helps Vision-Impaired & Dyslexic Users Read the World Around Them VRCFaceTracking安装和iPhone面捕配置教程,有bug Even CrowdStrike Can't See Your Agents The Automation Gold Rush: What n8n Workflows and Claude Are Opening Up for Developers Right Now
OQL (Object Query Language)
angga · 2026-06-22 · via DEV Community

OQL is the built-in dynamic CRUD engine. It maps per-client YAML config files to HTTP endpoints automatically — no handler or repository code required for basic operations.


How It Works

  1. YAML config files in clients_configs/{accname}/oql/{module}/yaml/{object}.yaml define the object schema.
  2. The SDK reads these at startup and registers routes.
  3. Standard CRUD endpoints are served automatically for each object.
  4. Custom business logic is layered on top via Extended Objects.

Directory Structure

clients_configs/
└── {accname}/
    └── oql/
        └── {module}/
            └── yaml/
                └── {object-name}.yaml

Active modules registered in internal/router/router.go:

Module Domain
sf Settings Framework (access groups, employee groups, system tables, etc.)
ge General (cities, countries, currencies, etc.)
em Employee module (positions, employment status, etc.)
og Org structure (companies, cost centers, job grades, etc.)
py Payroll
ta Time & Attendance

Auto-Generated Endpoints

For each YAML object, the following routes are served automatically:

POST /oql/{module}/{object}/listing
POST /oql/{module}/{object}/view
POST /oql/{module}/{object}/add
POST /oql/{module}/{object}/edit
POST /oql/{module}/{object}/delete
POST /oql/{module}/{object}/reference


YAML Schema Reference

Minimal Example

access:
    default: sys.setting.system.doc
table:
    name: TSFMSYSTABLE
    alias: ST
    primary_keys:
        - table_name
fields:
    - name: table_name
      table_alias: ST
    - name: description
      table_alias: ST


Top-Level Keys

Key Required Description
access yes Access control keys per operation
table yes Primary table definition
fields yes Columns exposed by this object
selector no Computed/expression fields
soft_filter no Always-applied WHERE conditions
sort no Default ORDER BY
limit no Default page size
lookup no Dropdown/reference field subset
data_auth no Row-level data authorization

access

Controls which permission key is checked for each operation. Use NONE to deny all, omit a key to fall back to default.

access:
    default: sys.setting.access.datagroup      # fallback for unlisted operations
    add: sys.setting.access.datagroup:add
    edit: sys.setting.access.datagroup:edit
    delete: sys.setting.access.datagroup:delete
    listing: sys.setting.access.datagroup:read
    view: sys.setting.access.datagroup:read
    _custom_action: some.permission.key        # custom extended actions use _ prefix

Special values:

  • NONE — deny all access (no auth check bypasses)
  • <nil> — skip access check entirely (used in data_auth)

table

Defines the primary table and optional JOIN relationships.

table:
    name: TCLMACCESSGROUP    # DB table name (case-insensitive for most drivers)
    alias: AG                # SQL alias used in fields/conditions
    primary_keys:
        - usergroup_id       # one or more PK columns
    relations:               # optional JOINs (see below)


table.relations — JOINs

Defines JOINs as a nested tree. Each relation has:

Key Values Description
join_type INNER, LEFT SQL JOIN type
on list of conditions JOIN condition fields
table object or string Joined table (inline object with name+alias, or plain string with separate alias)

Simple form (table as string + separate alias):

relations:
    - join_type: INNER
      on:
        - field_name: user_id
          table_alias: E
          op: =
          value:
            name: user_id
            table_alias: U
      table: TEOMEmpPersonal
      alias: E

Nested form (table as inline object, supports deep nesting):

relations:
    - join_type: LEFT
      on:
        - field_name: state_id
          table_alias: CITY
          op: =
          value:
            name: state_id
            table_alias: STATE
      table:
        name: TGEMSTATE
        alias: STATE
        relations:                     # nested — STATE also joins COUNTRY
            - join_type: LEFT
              on:
                - field_name: country_id
                  table_alias: STATE
                  op: =
                  value:
                    name: country_id
                    table_alias: COUNTRY
              table:
                name: TGEMCOUNTRY
                alias: COUNTRY

Multi-condition JOIN (multiple on entries = AND):

on:
    - field_name: worklocation_code
      table_alias: wloc
      op: =
      value:
        name: work_location_code
        table_alias: empco
    - field_name: company_id
      table_alias: wloc
      op: =
      value:
        name: company_id
        table_alias: empco


fields

Columns exposed by the object. Each entry maps a DB column to an API field name.

fields:
    - name: usergroup_id       # DB column name
      table_alias: AG          # which table alias to qualify with

    - name: enabled            # DB column name
      table_alias: ST
      field_alias: status      # override the API field name

    - name: pos_name
      table_alias: P
      mlang_modifier: true     # auto-appends language suffix: pos_name_en / pos_name_id / etc.

    - name: pos_name           # same DB column, different alias (used for multi-role joins)
      field_alias: dept_name
      table_alias: D
      mlang_modifier: true

Field options:

Option Description
name DB column name
table_alias Qualifying table alias
field_alias Override API output name
mlang_modifier Appends _{lang} suffix for multilanguage columns

selector

Computed or expression fields added to SELECT. Not part of fields — use for CASE expressions, derived columns, or raw SQL fragments.

selector:
    STATUS_NAME:
        field_alias: STATUS_NAME
        expression:
            value: CASE city.status WHEN 0 THEN 'Unverified' ELSE 'Verified' END

    dorder:                              # override a column with an expression
        name: (CASE WHEN DORDER IS NULL THEN 9999 ELSE DORDER END)
        field_alias: dorder

    service_length:                      # raw SQL fragment (unusual, use carefully)
        name: join_date,getdate())
        field_alias: service_length
        table_alias: TIMESTAMPDIFF(month,empgroup

    emp_photo:                           # direct column selector
        name: photo
        field_alias: AVATAR
        table_alias: employee


soft_filter

Always-applied WHERE conditions — appended to every query regardless of request payload.

soft_filter:
    - field_name: company_id
      table_alias: G
      op: =
      value: '[COID]'        # [COID] = resolved from current session's company ID

    - field_name: status
      table_alias: G
      op: in
      value:
        - 0
        - 1

    - field_name: pos_flag
      table_alias: A
      op: =
      value: 2

Supported op values: =, !=, <>, >, <, >=, <=, in, like.

Special placeholders in value:

  • [COID] — resolved to the current user's company ID at runtime.

sort

Default ORDER BY applied when no order is specified in the request.

sort:
    - name: table_name
      order: ASC
    - name: created_date
      order: DESC


limit

Default page size when limit is not provided in the request body.

limit: 10


data_auth

Row-level data authorization. Controls whether data access filtering is applied.

data_auth:
    default: <nil>     # <nil> = skip data auth entirely


lookup

A slimmed-down field set returned for dropdown/reference use cases (used by the reference endpoint). Optionally has its own access key and selector.

lookup:
    fields:
        - name: company_id
          field_alias: optvalue
          table_alias: COMPANY
        - name: company_name
          field_alias: opttext
          table_alias: COMPANY
          mlang_modifier: true
    access: hrm.employee        # optional override access key for reference
    selector:
        parent_code:
            name: parent_code
            table_alias: CC


Request / Response Types

Listing — POST /oql/{module}/{object}/listing

Request (LuceeReqListing):

{
  "selector": "field1,field2",
  "limit": 20,
  "page": 1,
  "ufilter": {
    "and": [{"group_name": "Admin"}],
    "or":  [{"status": 1}]
  },
  "order": "group_name asc"
}

Response:

{
  "rows": [...],
  "rowCount": 100,
  "columns": [...]
}

View — POST /oql/{module}/{object}/view

Request (LuceeReqView):

{
  "key": {"usergroup_id": 1}
}

Response: {"row": {...}}

Add — POST /oql/{module}/{object}/add

Request (LuceeReqAdd):

{
  "entries": {
    "group_name": "New Group",
    "status": 1,
    "company_id": 10
  }
}

Response: {"row": {...}} — the inserted row.

Edit — POST /oql/{module}/{object}/edit

Request (LuceeReqEdit):

{
  "key": {"usergroup_id": 1},
  "entries": {
    "group_name": "Updated Name"
  }
}

Response: {"row": {...}} — the updated row.

Delete — POST /oql/{module}/{object}/delete

Request (LuceeReqDelete):

{
  "key": {"usergroup_id": 1}
}

Response: {"message": "OK"}

Reference — POST /oql/{module}/{object}/reference

Same request shape as listing. Returns lookup.fields subset, used for dropdowns.


OQL in Go Code

Calling OQL from a usecase

All SDK operations use the global sdk.OQL.* singleton:

import (
    "gitlab.dataon.com/sunfish-framework/sdk"
    oqlTypes "gitlab.dataon.com/sunfish-framework/sdk/public/oql/types"
    dtoql "framework-settings/internal/dto/oql"
)

// Listing
builder, err := sdk.OQL.Listing(ctx, "sf", "access-group")
result, err := builder.
    Selector(strings.Split(req.Selector, ",")...).
    Where(sdk.OQL.LuceeParser.ParseLuceeUfilter(oqlTypes.ParseLuceeUfilterParams{
        Ufilter:   req.Ufilter,
        RefFields: builder.Fields(),  // pass fields for type-safe filtering
    })...).
    Limit(req.Limit).
    Page(req.Page).
    Sort(sdk.OQL.LuceeParser.ParseLuceeOrder(req.Order)...).
    Execute(ctx)

// View
builder, err := sdk.OQL.View(ctx, "sf", "access-group")
result, err := builder.PKIdentifier(req.Key).Execute(ctx)

// Add
builder, err := sdk.OQL.Add(ctx, "sf", "systable")
result, err := builder.Entry(req.Entries).Execute(ctx)

// Edit
builder, err := sdk.OQL.Edit(ctx, "sf", "systable")
result, err := builder.PKIdentifier(req.Key).Entry(req.Entries).Execute(ctx)

// Delete
builder, err := sdk.OQL.Delete(ctx, "sf", "systable")
_, err = builder.PKIdentifier(req.Key).Execute(ctx)

// Reference
builder, err := sdk.OQL.Reference(ctx, "em", "position")
result, err := builder.
    Selector("position_id", "pos_name").
    Where(...).
    Execute(ctx)

Result types

// Multi-row operations (listing, reference)
result *oqlTypes.MultiRowsResult
result.Rows      // []map[string]any
result.Columns   // []string
result.RowCount  // int64

// Single-row operations (view, add, edit)
result *oqlTypes.SingleRowResult
result.Row       // map[string]any


Extended Objects — Custom Logic on OQL Objects

When standard CRUD is insufficient, extend an OQL object with custom endpoints.

Pattern

import "gitlab.dataon.com/sunfish-framework/sdk/public/util/fiberkit/oql"

type MyObject struct {
    oql.ExtensionRegistry   // embed — no Initialize() call needed
    usecase uc.Iusecase
}

func NewExtendedObject(uc uc.Iusecase) *MyObject {
    return &MyObject{usecase: uc}
}

func (o *MyObject) ObjectName() string { return "my-object" }  // matches YAML filename
func (o *MyObject) Module() string     { return "sf" }         // matches module dir

// Any public method with fiber.Handler signature becomes a custom endpoint
func (o *MyObject) Members(c *fiber.Ctx) error {
    ctx := c.UserContext()
    // ...
    return sdk.Util.StandardResponse.Response(ctx, types.ResponseParams{
        Data:            result,
        RowCount:        count,
        UseLegacyFormat: c.QueryBool(legacyformat.LegacyFormatQueryKey),
    })
}

Registration

In the module router (internal/handler/extendedmodule/sf/module_router.go):

return fiberkit.Module.Routers.OQL.RegisterExtensions(
    holiday,
    accessgroup,
    employeegroup,
    systable,
)

Custom endpoints are served at:

POST /oql/{module}/{object}/{method-name-lowercase}

For example, Members on access-group in module sf:

POST /oql/sf/access-group/members


Adding a New OQL Object

Step 1 — Create the YAML

# clients_configs/main/oql/sf/yaml/my-object.yaml
access:
    default: sys.setting.my.permission
table:
    name: MY_TABLE
    alias: T
    primary_keys:
        - my_id
fields:
    - name: my_id
      table_alias: T
    - name: my_name
      table_alias: T

All 6 CRUD endpoints are now live automatically.

Step 2 — Add custom logic (if needed)

Only needed when the standard CRUD isn't enough:

  1. Define Iusecase in internal/interface/usecase/{domain}/
  2. Implement Usecase in internal/usecase/{domain}/
  3. Create handler in internal/handler/extendedmodule/{module}/{domain}/
  4. Register in internal/handler/extendedmodule/{module}/module_router.go

Step 3 — Per-client overrides (optional)

Copy the YAML to a client-specific path to override the default:

clients_configs/{accname}/oql/{module}/yaml/{object}.yaml


ufilter Format

Used in listing, reference, and programmatic Where() calls.

{
  "and": [
    {"group_name": "Admin"},
    {"status": 1},
    {"company_id": {">=": 10}}
  ],
  "or": [
    {"group_type": 2},
    {"group_type": 3}
  ]
}

In Go, when remapping field names before passing to OQL (column names differ between the request and the YAML):

colMap := map[string]string{
    "emp_name":  "full_name",
    "dept_name": "D.pos_name",
}

remapClause := func(items []any) map[string]any {
    clause := map[string]any{}
    for _, item := range items {
        v, ok := item.(map[string]any)
        if !ok { continue }
        for k, val := range v {
            key := k
            if mapped, ok := colMap[strings.ToLower(k)]; ok {
                key = mapped
            }
            clause[key] = val
        }
    }
    return clause
}

ufilter := map[string]any{}
if and, ok := payload.Ufilter["and"].([]any); ok {
    ufilter["and"] = remapClause(and)
}


Existing Objects Reference

Module sf

Object Table PK Notes
access-group TCLMACCESSGROUP usergroup_id
access-group-members TCLMUser user_id multi-join
employee-group TSFMFilterGroup seq_id soft_filter on owner
emp-group-member TEOMEmpPersonal emp_id deep nested joins
emp-group-member-ne TEOMEmpPersonal emp_id no-entity variant
datagroup TCLMDataGroup datagroup_id expression fields
systable TSFMSYSTABLE table_name string PK, selector
holiday TGEMHOLIDAY seq_id default limit 10
menu TSFMMenu menu_id
reqapvset TCLCREQAPPSETTING seq_id soft_filter COID
filter-group TSFMFILTERGROUP seq_id
user-management TCLMUser user_id deep nested joins

Module ge

Object Table PK Notes
city TGEMCITY city_id nested LEFT joins, default limit 10
country TGEMCOUNTRY country_id
currency

Module og

Object Table PK Notes
company TEOMCOMPANY company_id lookup access override
cost-center TEOMCOSTCENTER costcenter_code string PK, mlang
org-struct-tree TEOMPOSITION position_id soft_filter COID
job-grade

Module em

Object Table PK Notes
position teomposition position_id mlang, lookup optvalue/opttext
employment-status
marital