[FIX] tsquery: check for multiple operators

.github/workflows/deploy-to-staging.yml

@@ -70,8 +70,8 @@ jobs:
           # Wait for PostgreSQL to be ready
           until docker compose exec store_pgsql pg_isready; do sleep 5; done
 
-          docker compose exec store flask db migrate
-          docker compose exec store flask db upgrade
+          docker compose exec neurostore flask db migrate
+          docker compose exec neurostore flask db upgrade
         '
 
     - name: Run Docker commands in compose directory if changes detected

store/neurostore/resources/utils.py

@@ -57,6 +57,8 @@ def validate_search_query(query: str) -> bool:
     Returns:
         bool: True if the query is valid, False otherwise.
     """
+    query = query.upper()
+
     # Check for valid parentheses
     if not validate_parentheses(query):
         raise errors.SyntaxError("Unmatched parentheses")
@@ -65,6 +67,9 @@ def validate_search_query(query: str) -> bool:
     if not validate_query_end(query):
         raise errors.SyntaxError("Query cannot end with an operator")
 
+    if not validate_multiple_operators(query):
+        raise errors.SyntaxError("Consecutive operators are not allowed")
+
     return True
 
 
@@ -98,6 +103,16 @@ def validate_query_end(query: str) -> bool:
     return True
 
 
+def validate_multiple_operators(query: str) -> bool:
+    """Validate that there are no consecutive operators in a query."""
+    operators = ("AND", "OR", "NOT", "&", "|", "&!")
+    query = query.strip().split(" ")
+    for i in range(len(query) - 1):
+        if query[i] in operators and query[i + 1] in operators:
+            return False
+    return True
+
+
 def count_chars(target, query: str) -> int:
     """Count the number of chars in a query string.
     Excluding those in quoted phrases."""

store/neurostore/tests/conftest.py

@@ -597,11 +597,15 @@ def simple_neurosynth_annotation(session, ingest_neurosynth):
         "Unmatched parentheses",
     ),
     ('"autism" OR "ASD" OR "autistic" OR ', "Query cannot end with an operator"),
+    ("memory and", "Query cannot end with an operator"),
     (
         '(("Autism Spectrum Disorder" OR "autism spectrum disorder") OR ("Autism" OR "autism") '
         'OR ("ASD")) AND (("decision*" OR "Dec',
         "Unmatched parentheses",
     ),
+    (
+        'smoking AND NOT memory', "Consecutive operators are not allowed"
+    )
 ]
 
 valid_queries = [