move sandbox plugins to feature branch and fix build

Signed-off-by: Marc Handalian <marc.handalian@gmail.com>

Author: mch2

sandbox/libs/analytics-framework/README.md

@@ -0,0 +1,20 @@
+# analytics-framework
+
+Shared library containing the SPI interfaces and core types for the analytics engine. All plugins depend on this library — it defines the contracts but contains no implementation logic.
+
+## SPI Interfaces
+
+- **`QueryPlanExecutorPlugin`** — Factory for creating a `QueryPlanExecutor` from discovered back-end plugins.
+- **`AnalyticsBackEndPlugin`** — Extension point for native execution engines (DataFusion, Lucene, etc.). Exposes engine name, bridge, and capabilities.
+- **`AnalyticsFrontEndPlugin`** — Marker interface for query language front-ends (PPL, SQL). Discovered by the hub for lifecycle tracking.
+- **`SchemaProvider`** — Functional interface that builds a Calcite `SchemaPlus` from cluster state.
+
+## Core Types
+
+- **`QueryPlanExecutor`** — Executes a Calcite `RelNode` plan fragment and returns result rows.
+- **`EngineBridge<T>`** — JNI/native boundary for engine-specific plan conversion and execution (e.g., Substrait → Arrow batches).
+- **`AnalyticsEngineContext`** — Provides schema and aggregated operator table to front-ends for parsing and validation.
+
+## Dependencies
+
+Calcite and Arrow — no dependency on the OpenSearch server module.

sandbox/libs/analytics-framework/build.gradle

@@ -0,0 +1,293 @@
+/*
+ * SPDX-License-Identifier: Apache-2.0
+ *
+ * The OpenSearch Contributors require contributions made to
+ * this file be licensed under the Apache-2.0 license or a
+ * compatible open source license.
+ */
+
+/*
+ * Shared Calcite/Arrow types for the analytics engine plugins.
+ * Contains EngineBridge, QueryPlanExecutor, AnalyticsEngineContext.
+ * Plugins depend on this; the /modules SPI layer does NOT.
+ */
+
+def calciteVersion = '1.41.0'
+
+dependencies {
+  api "org.apache.calcite:calcite-core:${calciteVersion}"
+  // Calcite's expression tree and Enumerable runtime — required by calcite-core API
+  api "org.apache.calcite:calcite-linq4j:${calciteVersion}"
+  // Calcite's JDBC abstraction layer — required by calcite-core internals
+  runtimeOnly 'org.apache.calcite.avatica:avatica-core:1.27.0'
+  // Guava — required by Calcite internally, forbidden on compile classpaths by OpenSearch policy
+  runtimeOnly "com.google.guava:guava:${versions.guava}"
+  runtimeOnly 'com.google.guava:failureaccess:1.0.2'
+  // SLF4J — Calcite's logging facade
+  runtimeOnly "org.slf4j:slf4j-api:${versions.slf4j}"
+
+  // Calcite bytecode references annotations from apiguardian (@API) and
+  // checker-framework (@EnsuresNonNullIf). compileOnlyApi propagates to
+  // consumers' compile/javadoc classpath without becoming a runtime dep.
+  compileOnlyApi 'org.apiguardian:apiguardian-api:1.1.2'
+  compileOnlyApi 'org.checkerframework:checker-qual:3.43.0'
+}
+
+testingConventions.enabled = false
+
+// analytics-framework does not depend on server
+tasks.named('forbiddenApisMain').configure {
+  replaceSignatureFiles 'jdk-signatures'
+  failOnMissingClasses = false
+  ignoreSignaturesOfMissingClasses = true
+}
+
+// Calcite-core's optional runtime-scope transitive deps are not on the classpath.
+// These are features of Calcite we don't use (spatial, JSON path, JDBC pooling, etc.).
+// Split into multiple calls to stay under the JVM method parameter limit.
+tasks.named('thirdPartyAudit').configure {
+  ignoreMissingClasses(
+    // Jackson (optional JSON serialization in Calcite)
+    'com.fasterxml.jackson.core.JsonParser$Feature',
+    'com.fasterxml.jackson.core.PrettyPrinter',
+    'com.fasterxml.jackson.core.type.TypeReference',
+    'com.fasterxml.jackson.core.util.DefaultIndenter',
+    'com.fasterxml.jackson.core.util.DefaultPrettyPrinter',
+    'com.fasterxml.jackson.core.util.Separators',
+    'com.fasterxml.jackson.core.util.Separators$Spacing',
+    'com.fasterxml.jackson.databind.DeserializationFeature',
+    'com.fasterxml.jackson.databind.ObjectMapper',
+    'com.fasterxml.jackson.databind.ObjectWriter',
+
+    // Protobuf (Avatica RPC serialization, not used)
+    'com.google.protobuf.AbstractMessageLite$Builder',
+    'com.google.protobuf.AbstractParser',
+    'com.google.protobuf.ByteString',
+    'com.google.protobuf.CodedInputStream',
+    'com.google.protobuf.CodedOutputStream',
+    'com.google.protobuf.Descriptors$Descriptor',
+    'com.google.protobuf.Descriptors$EnumDescriptor',
+    'com.google.protobuf.Descriptors$EnumValueDescriptor',
+    'com.google.protobuf.Descriptors$FieldDescriptor',
+    'com.google.protobuf.Descriptors$FileDescriptor',
+    'com.google.protobuf.Descriptors$OneofDescriptor',
+    'com.google.protobuf.ExtensionRegistry',
+    'com.google.protobuf.ExtensionRegistryLite',
+    'com.google.protobuf.GeneratedMessageV3',
+    'com.google.protobuf.GeneratedMessageV3$Builder',
+    'com.google.protobuf.GeneratedMessageV3$BuilderParent',
+    'com.google.protobuf.GeneratedMessageV3$FieldAccessorTable',
+    'com.google.protobuf.GeneratedMessageV3$UnusedPrivateParameter',
+    'com.google.protobuf.Internal',
+    'com.google.protobuf.Internal$EnumLiteMap',
+    'com.google.protobuf.Internal$IntList',
+    'com.google.protobuf.Internal$LongList',
+    'com.google.protobuf.InvalidProtocolBufferException',
+    'com.google.protobuf.LazyStringArrayList',
+    'com.google.protobuf.MapEntry',
+    'com.google.protobuf.MapEntry$Builder',
+    'com.google.protobuf.MapField',
+    'com.google.protobuf.MapFieldReflectionAccessor',
+    'com.google.protobuf.Message',
+    'com.google.protobuf.MessageOrBuilder',
+    'com.google.protobuf.Parser',
+    'com.google.protobuf.ProtocolMessageEnum',
+    'com.google.protobuf.ProtocolStringList',
+    'com.google.protobuf.RepeatedFieldBuilderV3',
+    'com.google.protobuf.SingleFieldBuilderV3',
+    'com.google.protobuf.TextFormat',
+    'com.google.protobuf.UninitializedMessageException',
+    'com.google.protobuf.UnknownFieldSet',
+    'com.google.protobuf.UnsafeByteOperations',
+    'com.google.protobuf.WireFormat$FieldType',
+
+    // Uzaygezen (optional Hilbert curve spatial indexing)
+    'com.google.uzaygezen.core.BacktrackingQueryBuilder',
+    'com.google.uzaygezen.core.BitVector',
+    'com.google.uzaygezen.core.BitVectorFactories',
+    'com.google.uzaygezen.core.CompactHilbertCurve',
+    'com.google.uzaygezen.core.FilteredIndexRange',
+    'com.google.uzaygezen.core.Query',
+    'com.google.uzaygezen.core.SimpleRegionInspector',
+    'com.google.uzaygezen.core.ranges.LongRange',
+    'com.google.uzaygezen.core.ranges.LongRangeHome',
+
+    // JsonPath (optional JSON path support)
+    'com.jayway.jsonpath.Configuration',
+    'com.jayway.jsonpath.Configuration$ConfigurationBuilder',
+    'com.jayway.jsonpath.DocumentContext',
+    'com.jayway.jsonpath.InvalidPathException',
+    'com.jayway.jsonpath.JsonPath',
+    'com.jayway.jsonpath.Option',
+    'com.jayway.jsonpath.Predicate',
+    'com.jayway.jsonpath.spi.json.JacksonJsonProvider',
+    'com.jayway.jsonpath.spi.mapper.MappingProvider',
+
+    // Yahoo Sketches (optional approximate distinct counting)
+    'com.yahoo.sketches.hll.HllSketch',
+    'com.yahoo.sketches.hll.HllSketchBuilder',
+
+    // Avatica metrics (optional metrics subsystem)
+    'org.apache.calcite.avatica.metrics.MetricsSystem',
+    'org.apache.calcite.avatica.metrics.Timer',
+    'org.apache.calcite.avatica.metrics.Timer$Context',
+    'org.apache.calcite.avatica.metrics.noop.NoopMetricsSystem',
+
+    // Apache Commons (optional Calcite features)
+    'org.apache.commons.codec.binary.Base32',
+    'org.apache.commons.codec.binary.Hex',
+    'org.apache.commons.codec.digest.DigestUtils',
+    'org.apache.commons.codec.language.Soundex',
+    'org.apache.commons.dbcp2.BasicDataSource',
+    'org.apache.commons.io.IOUtils',
+    'org.apache.commons.lang3.StringUtils',
+    'org.apache.commons.lang3.Strings',
+    'org.apache.commons.lang3.mutable.MutableBoolean',
+    'org.apache.commons.math3.fraction.BigFraction',
+    'org.apache.commons.math3.util.CombinatoricsUtils',
+    'org.apache.commons.text.StringEscapeUtils',
+    'org.apache.commons.text.similarity.LevenshteinDistance'
+  )
+
+  ignoreMissingClasses(
+    // HttpClient5 (Avatica remote JDBC transport, not used)
+    'org.apache.hc.client5.http.SystemDefaultDnsResolver',
+    'org.apache.hc.client5.http.auth.AuthScope',
+    'org.apache.hc.client5.http.auth.Credentials',
+    'org.apache.hc.client5.http.auth.CredentialsProvider',
+    'org.apache.hc.client5.http.auth.KerberosConfig',
+    'org.apache.hc.client5.http.auth.KerberosConfig$Builder',
+    'org.apache.hc.client5.http.auth.UsernamePasswordCredentials',
+    'org.apache.hc.client5.http.classic.methods.HttpPost',
+    'org.apache.hc.client5.http.config.RequestConfig',
+    'org.apache.hc.client5.http.config.RequestConfig$Builder',
+    'org.apache.hc.client5.http.impl.auth.BasicAuthCache',
+    'org.apache.hc.client5.http.impl.auth.BasicCredentialsProvider',
+    'org.apache.hc.client5.http.impl.classic.CloseableHttpClient',
+    'org.apache.hc.client5.http.impl.classic.HttpClientBuilder',
+    'org.apache.hc.client5.http.impl.classic.HttpClients',
+    'org.apache.hc.client5.http.impl.io.PoolingHttpClientConnectionManager',
+    'org.apache.hc.client5.http.impl.io.PoolingHttpClientConnectionManagerBuilder',
+    'org.apache.hc.client5.http.protocol.HttpClientContext',
+    'org.apache.hc.client5.http.routing.RoutingSupport',
+    'org.apache.hc.client5.http.ssl.HttpsSupport',
+    'org.apache.hc.client5.http.ssl.NoopHostnameVerifier',
+    'org.apache.hc.client5.http.ssl.TlsSocketStrategy',
+    'org.apache.hc.core5.http.ClassicHttpResponse',
+    'org.apache.hc.core5.http.ContentType',
+    'org.apache.hc.core5.http.HttpHost',
+    'org.apache.hc.core5.http.config.Lookup',
+    'org.apache.hc.core5.http.config.RegistryBuilder',
+    'org.apache.hc.core5.http.io.entity.EntityUtils',
+    'org.apache.hc.core5.ssl.SSLContextBuilder',
+    'org.apache.hc.core5.ssl.SSLContexts',
+    'org.apache.hc.core5.util.Timeout',
+
+    // Janino (optional code generation for Enumerable pipeline)
+    'org.codehaus.commons.compiler.CompilerFactoryFactory',
+    'org.codehaus.commons.compiler.IClassBodyEvaluator',
+    'org.codehaus.commons.compiler.ICompilerFactory',
+    'org.codehaus.commons.compiler.ISimpleCompiler',
+    'org.codehaus.commons.compiler.util.resource.ResourceFinder',
+    'org.codehaus.janino.ClassBodyEvaluator',
+    'org.codehaus.janino.JavaSourceClassLoader',
+    'org.codehaus.janino.util.ClassFile',
+
+    // jOOU (optional unsigned integer types)
+    'org.joou.UByte',
+    'org.joou.UInteger',
+    'org.joou.ULong',
+    'org.joou.UShort',
+    'org.joou.Unsigned',
+
+    // JTS / Proj4j (optional spatial/geometry support)
+    'org.locationtech.jts.algorithm.InteriorPoint',
+    'org.locationtech.jts.algorithm.LineIntersector',
+    'org.locationtech.jts.algorithm.MinimumBoundingCircle',
+    'org.locationtech.jts.algorithm.MinimumDiameter',
+    'org.locationtech.jts.densify.Densifier',
+    'org.locationtech.jts.geom.Coordinate',
+    'org.locationtech.jts.geom.CoordinateSequence',
+    'org.locationtech.jts.geom.CoordinateSequenceFactory',
+    'org.locationtech.jts.geom.Envelope',
+    'org.locationtech.jts.geom.Geometry',
+    'org.locationtech.jts.geom.GeometryCollection',
+    'org.locationtech.jts.geom.GeometryFactory',
+    'org.locationtech.jts.geom.GeometryFilter',
+    'org.locationtech.jts.geom.IntersectionMatrix',
+    'org.locationtech.jts.geom.LineSegment',
+    'org.locationtech.jts.geom.LineString',
+    'org.locationtech.jts.geom.LinearRing',
+    'org.locationtech.jts.geom.MultiLineString',
+    'org.locationtech.jts.geom.MultiPoint',
+    'org.locationtech.jts.geom.MultiPolygon',
+    'org.locationtech.jts.geom.OctagonalEnvelope',
+    'org.locationtech.jts.geom.Point',
+    'org.locationtech.jts.geom.Polygon',
+    'org.locationtech.jts.geom.util.AffineTransformation',
+    'org.locationtech.jts.geom.util.GeometryEditor',
+    'org.locationtech.jts.geom.util.GeometryEditor$CoordinateOperation',
+    'org.locationtech.jts.geom.util.GeometryFixer',
+    'org.locationtech.jts.geom.util.GeometryTransformer',
+    'org.locationtech.jts.geom.util.LineStringExtracter',
+    'org.locationtech.jts.io.WKBReader',
+    'org.locationtech.jts.io.WKBWriter',
+    'org.locationtech.jts.io.WKTReader',
+    'org.locationtech.jts.io.WKTWriter',
+    'org.locationtech.jts.io.geojson.GeoJsonReader',
+    'org.locationtech.jts.io.geojson.GeoJsonWriter',
+    'org.locationtech.jts.io.gml2.GMLReader',
+    'org.locationtech.jts.io.gml2.GMLWriter',
+    'org.locationtech.jts.linearref.LengthIndexedLine',
+    'org.locationtech.jts.operation.buffer.BufferOp',
+    'org.locationtech.jts.operation.buffer.BufferParameters',
+    'org.locationtech.jts.operation.buffer.OffsetCurve',
+    'org.locationtech.jts.operation.distance.DistanceOp',
+    'org.locationtech.jts.operation.linemerge.LineMerger',
+    'org.locationtech.jts.operation.overlay.snap.GeometrySnapper',
+    'org.locationtech.jts.operation.polygonize.Polygonizer',
+    'org.locationtech.jts.operation.union.UnaryUnionOp',
+    'org.locationtech.jts.precision.GeometryPrecisionReducer',
+    'org.locationtech.jts.simplify.DouglasPeuckerSimplifier',
+    'org.locationtech.jts.simplify.TopologyPreservingSimplifier',
+    'org.locationtech.jts.triangulate.DelaunayTriangulationBuilder',
+    'org.locationtech.jts.triangulate.polygon.ConstrainedDelaunayTriangulator',
+    'org.locationtech.jts.triangulate.quadedge.QuadEdgeSubdivision',
+    'org.locationtech.jts.triangulate.tri.Tri',
+    'org.locationtech.jts.util.GeometricShapeFactory',
+    'org.locationtech.proj4j.CRSFactory',
+    'org.locationtech.proj4j.CoordinateReferenceSystem',
+    'org.locationtech.proj4j.CoordinateTransform',
+    'org.locationtech.proj4j.CoordinateTransformFactory',
+    'org.locationtech.proj4j.ProjCoordinate',
+    'org.locationtech.proj4j.proj.Projection',
+
+    // Pentaho (optional aggregate designer)
+    'org.pentaho.aggdes.algorithm.Algorithm',
+    'org.pentaho.aggdes.algorithm.Algorithm$ParameterEnum',
+    'org.pentaho.aggdes.algorithm.Result',
+    'org.pentaho.aggdes.model.Aggregate',
+    'org.pentaho.aggdes.model.Attribute',
+    'org.pentaho.aggdes.model.Dialect',
+    'org.pentaho.aggdes.model.Schema',
+    'org.pentaho.aggdes.model.StatisticsProvider',
+    'org.pentaho.aggdes.model.Table'
+  )
+
+  // Guava internal Unsafe usage — standard for any module depending on Guava
+  ignoreViolations(
+    'com.google.common.cache.Striped64',
+    'com.google.common.cache.Striped64$1',
+    'com.google.common.cache.Striped64$Cell',
+    'com.google.common.hash.LittleEndianByteArray$UnsafeByteArray',
+    'com.google.common.hash.LittleEndianByteArray$UnsafeByteArray$1',
+    'com.google.common.hash.LittleEndianByteArray$UnsafeByteArray$2',
+    'com.google.common.hash.Striped64',
+    'com.google.common.hash.Striped64$1',
+    'com.google.common.hash.Striped64$Cell',
+    'com.google.common.primitives.UnsignedBytes$LexicographicalComparatorHolder$UnsafeComparator',
+    'com.google.common.primitives.UnsignedBytes$LexicographicalComparatorHolder$UnsafeComparator$1',
+    'com.google.common.util.concurrent.AbstractFuture$UnsafeAtomicHelper',
+    'com.google.common.util.concurrent.AbstractFuture$UnsafeAtomicHelper$1'
+  )
+}

sandbox/libs/analytics-framework/licenses/avatica-core-1.27.0.jar.sha1

@@ -0,0 +1 @@
+59990a6fd24dc7f398fcb06cdd570a99de7a7c4f