@carllee1983/dbcli 1.30.0 → 1.31.0

package/dist/cli.mjs

@@ -81224,7 +81224,7 @@ var {
 // package.json
 var package_default = {
   name: "@carllee1983/dbcli",
-  version: "1.30.0",
+  version: "1.31.0",
   description: "Database CLI for AI agents",
   type: "module",
   publishConfig: {

package/dist/core.d.ts

@@ -354,6 +354,40 @@ export declare class AdapterFactory {
 	static createRedisAdapter(options: ConnectionOptions, blacklistRules?: string[], maskRules?: RedisMaskRule[]): QueryableAdapter;
 	static createElasticsearchAdapter(options: ConnectionOptions): QueryableAdapter;
 }
+/**
+ * Type definitions for data modification operations
+ * Defines results and options for data modification (INSERT, UPDATE, DELETE) operations
+ */
+/**
+ * Result of a data execution operation
+ * Used to wrap the execution result and metadata of data modification operations
+ */
+export interface DataExecutionResult {
+	/** Execution status: success or error */
+	status: "success" | "error";
+	/** Type of operation executed */
+	operation: "insert" | "update" | "delete";
+	/** Number of rows affected */
+	rows_affected: number;
+	/** Execution timestamp in ISO 8601 format */
+	timestamp?: string;
+	/** Generated SQL statement (for confirmation and error messages) */
+	sql?: string;
+	/** Error message (only when status is 'error') */
+	error?: string;
+}
+/**
+ * Data execution options
+ * Controls how data modification operations are executed
+ */
+export interface DataExecutionOptions {
+	/** Dry run mode: display SQL without executing */
+	dryRun?: boolean;
+	/** Skip confirmation prompt */
+	force?: boolean;
+	/** Verbose output */
+	verbose?: boolean;
+}
 interface SqlConnectionConfig {
 	system: "postgresql" | "mysql" | "mariadb";
 	host: string | {
@@ -2544,6 +2578,82 @@ export declare class QueryExecutor {
 		limitValue?: number;
 	}): Promise<QueryResult<Record<string, unknown>>>;
 }
+/**
+ * DataExecutor class for executing INSERT, UPDATE, DELETE operations
+ */
+export declare class DataExecutor {
+	private adapter;
+	private permission;
+	private dbSystem;
+	private blacklistValidator?;
+	constructor(adapter: DatabaseAdapter, permission: Permission, dbSystem?: "postgresql" | "mysql", blacklistValidator?: BlacklistValidator | undefined);
+	/**
+	 * Build a parameterized INSERT SQL statement
+	 * Returns {sql, params} form to prevent SQL injection
+	 *
+	 * @param tableName Table name
+	 * @param data Data object to insert {column: value, ...}
+	 * @param schema Table schema
+	 * @returns Parameterized SQL and parameters array
+	 * @throws Error if a data column is not found in the table schema
+	 */
+	buildInsertSql(tableName: string, data: Record<string, unknown>, schema: TableSchema): {
+		sql: string;
+		params: (string | number | boolean | null)[];
+	};
+	/**
+	 * Execute an INSERT operation
+	 * Enforces permission check, builds SQL, shows confirmation prompt, executes
+	 *
+	 * @param tableName Table name
+	 * @param data Data object to insert
+	 * @param schema Table schema
+	 * @param options Execution options (dryRun, force, verbose)
+	 * @returns DataExecutionResult
+	 * @throws PermissionError if insufficient permissions
+	 * @throws Error if execution fails
+	 */
+	executeInsert(tableName: string, data: Record<string, unknown>, schema: TableSchema, options?: DataExecutionOptions): Promise<DataExecutionResult>;
+	/**
+	 * Execute an UPDATE operation
+	 * Enforces permission check, builds SQL, shows confirmation prompt, executes
+	 *
+	 * @param tableName Table name
+	 * @param data Updated data object
+	 * @param where WHERE clause condition object
+	 * @param schema Table schema
+	 * @param options Execution options
+	 * @returns DataExecutionResult
+	 */
+	executeUpdate(tableName: string, data: Record<string, unknown>, where: Record<string, unknown>, schema: TableSchema, options?: DataExecutionOptions): Promise<DataExecutionResult>;
+	/**
+	 * Execute a DELETE operation
+	 * Admin-only operation, requires strict permission check
+	 *
+	 * @param tableName Table name
+	 * @param where WHERE clause condition object
+	 * @param schema Table schema
+	 * @param options Execution options
+	 * @returns DataExecutionResult
+	 */
+	executeDelete(tableName: string, where: Record<string, unknown>, schema: TableSchema, options?: DataExecutionOptions): Promise<DataExecutionResult>;
+	/**
+	 * Get database system type (used to determine parameter placeholder and identifier quoting)
+	 */
+	private getSystemType;
+	/**
+	 * Get identifier quote character (for table names and column names)
+	 */
+	private getQuoteChar;
+	/**
+	 * Build a parameterized UPDATE SQL statement
+	 */
+	private buildUpdateSql;
+	/**
+	 * Build a parameterized DELETE SQL statement
+	 */
+	private buildDeleteSql;
+}
 interface SchemaIndex {
 	tables: Record<string, {
 		location: "hot" | "cold";