feat(inbound): read-only InboundDatabaseHelper for inbound scripts

2026-06-16 21:36:07 -04:00
parent f63055c296
commit 90ac746fdc
3 changed files with 116 additions and 0 deletions
@@ -0,0 +1,68 @@
+using System.Data.Common;
+using System.Globalization;
+using ZB.MOM.WW.ScadaBridge.Commons.Interfaces.Services;
+
+namespace ZB.MOM.WW.ScadaBridge.InboundAPI;
+
+/// <summary>
+/// Read-only database access exposed to inbound API scripts. All ADO.NET stays
+/// internal here — scripts call QuerySingle/Query by name and never reference
+/// System.Data. Named connections only; parameters are bound (anonymous-object
+/// properties become @-prefixed SQL parameters), never string-concatenated.
+/// </summary>
+public sealed class InboundDatabaseHelper
+{
+    private readonly IDatabaseGateway _gateway;
+    private readonly CancellationToken _ct;
+
+    public InboundDatabaseHelper(IDatabaseGateway gateway, CancellationToken ct)
+    { _gateway = gateway; _ct = ct; }
+
+    /// <summary>First column of the first row converted to T (default if no rows).</summary>
+    public T? QuerySingle<T>(string connectionName, string sql, object? parameters = null)
+    {
+        using var conn = _gateway.GetConnectionAsync(connectionName, _ct).GetAwaiter().GetResult();
+        using var cmd = conn.CreateCommand();
+        cmd.CommandText = sql;
+        AddParameters(cmd, parameters);
+        var result = cmd.ExecuteScalar();
+        if (result is null or DBNull) return default;
+        if (result is T t) return t;
+        return (T)Convert.ChangeType(result, typeof(T), CultureInfo.InvariantCulture);
+    }
+
+    /// <summary>All rows as column→value dictionaries (case-insensitive keys).</summary>
+    public IReadOnlyList<IReadOnlyDictionary<string, object?>> Query(
+        string connectionName, string sql, object? parameters = null)
+    {
+        using var conn = _gateway.GetConnectionAsync(connectionName, _ct).GetAwaiter().GetResult();
+        using var cmd = conn.CreateCommand();
+        cmd.CommandText = sql;
+        AddParameters(cmd, parameters);
+        using var reader = cmd.ExecuteReader();
+        var rows = new List<IReadOnlyDictionary<string, object?>>();
+        while (reader.Read())
+        {
+            var row = new Dictionary<string, object?>(StringComparer.OrdinalIgnoreCase);
+            for (var i = 0; i < reader.FieldCount; i++)
+            {
+                var v = reader.GetValue(i);
+                row[reader.GetName(i)] = v is DBNull ? null : v;
+            }
+            rows.Add(row);
+        }
+        return rows;
+    }
+
+    private static void AddParameters(DbCommand cmd, object? parameters)
+    {
+        if (parameters is null) return;
+        foreach (var prop in parameters.GetType().GetProperties())
+        {
+            var p = cmd.CreateParameter();
+            p.ParameterName = "@" + prop.Name;
+            p.Value = prop.GetValue(parameters) ?? DBNull.Value;
+            cmd.Parameters.Add(p);
+        }
+    }
+}