Function bind_dsl

nodedb-sql/src/dsl_bind.rs:75–109

Substitute `$N` placeholders in DSL SQL text with concrete literals. Uses sqlparser's own tokenizer so that string literals, quoted identifiers, comments, and dollar-quoted strings are never accidentally rewritten — the tokenizer has already classified them.

(sql: &str, params: &[ParamValue])

/// identifiers, comments, and dollar-quoted strings are never
/// accidentally rewritten — the tokenizer has already classified them.
pub fn bind_dsl(sql: &str, params: &[ParamValue]) -> Result<BoundDslSql> {
    if params.is_empty() {
        return Ok(BoundDslSql(sql.to_owned()));
    }
    let dialect = PostgreSqlDialect {};
    let tokens = Tokenizer::new(&dialect, sql)
        .tokenize()
        .map_err(|e| SqlError::Parse {
            detail: format!("tokenize DSL for parameter binding: {e}"),
        })?;

    let mut out = String::with_capacity(sql.len());
    for tok in &tokens {
        if let Token::Placeholder(p) = tok
            && p.starts_with('$')
        {
            // Every `$N` must resolve to a provided parameter. A
            // silent pass-through here would let an out-of-range
            // placeholder reach the engine as a raw `$N` literal —
            // exactly the bug class this module exists to close.
            let replacement =
                placeholder_literal_token(p, params).ok_or_else(|| SqlError::Parse {
                    detail: format!(
                        "DSL parameter bind: placeholder {p} has no corresponding \
                         parameter ({len} provided)",
                        len = params.len()
                    ),
                })?;
            out.push_str(&replacement.to_string());
            continue;
        }
        out.push_str(&tok.to_string());
    }
    Ok(BoundDslSql(out))
}

fn placeholder_literal_token(placeholder: &str, params: &[ParamValue]) -> Option<Token> {
    let idx_str = placeholder.strip_prefix('$')?;