feat(storage): implement backend sorting with sql injection protection#145

Merged

Lutherwaves merged 18 commits intomainfrom

fix/AddSortingSQLAdapter

Mar 9, 2026

Commits on Feb 17, 2026

feat: add sorting to sql adapter
Lutherwaves
committed

Commits on Feb 23, 2026

feat: add validateSortKey to guard against ORDER BY injection
Lutherwaves
committed
fix: allow underscore-prefixed sort keys, add edge case tests
Lutherwaves
committed
fix: validate sortKey in CosmosDB executePaginatedQuery to prevent injection
Lutherwaves
committed
fix: validate sortKey in SQL executePaginatedQuery to prevent injection
Lutherwaves
committed
chore(test): restore sqlAdapterInstance singleton after TestListRejectsMaliciousSortKey
Lutherwaves
committed
fix: warn on cursor field extraction failure, remove redundant else branch
Lutherwaves
committed
refactor(style): use snake_case log keys in cursor extraction warnings
Lutherwaves
committed
fix: validate sortKey in DynamoDB List and Search to prevent PartiQL injection
Lutherwaves
committed
chore(docs): add godoc to executePaginatedQuery in SQL and CosmosDB adapters
Lutherwaves
committed
chore(docs): document sortKey and SortDirectionKey on StorageAdapter interface
Lutherwaves
committed

Commits on Feb 25, 2026

refactor: more explicit error msgs on failure to list/search
Lutherwaves
committed