@carllee1983/dbcli 1.41.0 → 1.43.0

package/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "dbcli-agent",
-  "version": "1.41.0",
+  "version": "1.43.0",
   "description": "Database CLI skill and command reference for AI agents.",
   "author": {
     "name": "Carl Lee",

package/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "dbcli-agent",
-  "version": "1.41.0",
+  "version": "1.43.0",
   "description": "Database CLI skill and command reference for AI agents",
   "author": {
     "name": "Carl Lee",

package/.cursor/rules/dbcli.mdc

@@ -239,8 +239,10 @@ dbcli init --system elasticsearch \
 dbcli init --conn-name staging --env-file .env.staging --permission query-only
 dbcli init --conn-name prod    --env-file .env.production --use-env-refs --skip-test
 dbcli use --list                          # show all, * marks default
-dbcli use prod                            # switch default
+dbcli use prod                            # switch default (persists — avoid for one-off queries)
 dbcli query --use staging "SELECT 1"      # one-shot override on any subcommand
+DBCLI_CONNECTION=staging dbcli query "SELECT 1"   # one-shot via env; parallel-safe
+dbcli --use staging,prod query "SELECT count(*) FROM users"   # read-only fan-out
 dbcli init --rename staging:stg           # rename
 dbcli init --remove stg                   # remove
 ```
@@ -296,7 +298,7 @@ Full flags and edge cases: see [reference.md](reference.md) `init` section.
 | `use` | n/a | Show/switch default named connection (v2 only). |
 | `list` | query-only+ | Tables (SQL), collections (MongoDB), keys (Redis), or indices (Elasticsearch). |
 | `schema` | query-only+ | SQL: per-table or full scan into `.dbcli/schemas/`. MongoDB: sampled. ES: flattened mapping. Redis: per-key only (type/TTL/size). Supports `--recovery`. |
-| `query` | query-only+ | SQL, Mongo JSON (`--collection`), Redis command, or ES DSL/Lucene (`--collection`). `--format table\|json\|csv\|html`, `--ui` to open the interactive dashboard in a browser. Supports `--recovery`. |
+| `query` | query-only+ | SQL, Mongo JSON (`--collection`), Redis command, or ES DSL/Lucene (`--collection`). `--format table\|json\|csv\|html`, `--ui` to open the interactive dashboard in a browser. `--fields` (projection), `--truncate` (cell width), `-f/--query-file` (read query from file or stdin), `--use a,b` (read-only fan-out). Supports `--recovery`. See **Query workflow flags**. |
 | `explain` | query-only+ | **(v1.23)** Read-only query plan with annotations. SQL only. Single query, `@saved-query`, `@file.sql`, or `--bulk @glob/*`. `--analyze` (EXPLAIN ANALYZE / MariaDB ANALYZE SELECT), `--format markdown\|json\|table`. |
 | `lint` | n/a | Static SQL anti-pattern advisor (no DB connection). 9 rules incl. schema-aware implicit-cast / NOT IN-nullable checks via the layered `.dbcli/schemas/` cache; global `--use <conn>` selects a named cache. Findings carry rewrite drafts + guarded `explain` verify commands (`--analyze` only for proven read-only SQL) — report-only, never executes. `--format text\|json\|markdown`, `--min-severity`, `--no-schema`, `--bulk`. Supports `--recovery`. |
 | `plan` | n/a | Static SQL risk analyzer (`--format text\|json`); classifies a statement without connecting to the database. |
@@ -304,10 +306,10 @@ Full flags and edge cases: see [reference.md](reference.md) `init` section.
 | `queries` | n/a | Manage saved snippets: `list` / `show` / `search` / `suggest` / `new` / `edit` / `check` / `delete` / `rename` / `copy` / `import` / `export`. |
 | `insert` / `update` | read-write+ | SQL or MongoDB only. JSON `--data` / `--set`; `--where` required on `update`; `--dry-run` first. Redis writes go through `query`. Supports `--recovery`. |
 | `delete` | data-admin+ | SQL or MongoDB; Redis has a basic implementation (see Redis section). `--where` required; `--dry-run` first. Supports `--recovery`. |
-| `export` | query-only+ | SQL, MongoDB, or **(v1.22)** Elasticsearch (DSL `--index` or whole-index scroll). Query → `--format json\|jsonl\|csv\|html` file or stdout. `html` emits a standalone interactive dashboard. Supports `--recovery`. |
+| `export` | query-only+ | SQL, MongoDB, or **(v1.22)** Elasticsearch (DSL `--index` or whole-index scroll). Query → `--format json\|jsonl\|csv\|html` file or stdout. `html` emits a standalone interactive dashboard. **Fails closed rather than truncating silently**: if the auto-limit would drop rows, the export errors out and you must pass `--no-limit` or `--limit N`. Supports `--recovery`. |
 | `blacklist` | n/a | `list` / `table` / `column` subcommands redact sensitive data from query results. |
 | `check` | query-only+ | SQL only (best on MySQL/MariaDB). |
-| `diff` | query-only+ | SQL only. Save/compare schema snapshots. **(P1b)** `--against-orm <path>` compares a Prisma schema / DDL file / normalized JSON against the local schema cache (no DB connection): categorized drift (`missing_in_db` = error, `missing_in_orm` = warn, `mismatch` per tolerance table, `unmanaged`) with dry-run `migrate` proposals; exit 1 on error-level drift. `--orm-format prisma\|ddl\|json`, `--ignore <globs>`, `--format json\|table\|markdown`. |
+| `diff` | query-only+ | SQL only. Save/compare schema snapshots. **(P1b)** `--against-orm <path>` compares a Prisma schema / DDL file / normalized JSON against the local schema cache (no DB connection): categorized drift (`missing_in_db` = error, `missing_in_orm` = warn, `mismatch` per tolerance table, `unmanaged`) with dry-run `migrate` proposals; exit 1 on error-level drift. `--orm-format prisma\|ddl\|json\|drizzle\|typeorm\|sequelize`, `--ignore <globs>`, `--format json\|table\|markdown`. Drizzle: point at `drizzle/meta/<NNNN>_snapshot.json` (run `drizzle-kit generate` first; `.ts` sources are rejected with a hint). TypeORM/Sequelize: feed tool-generated DDL (`schema:log` / a schema-only dump); source files are rejected with the exact generation command to run. |
 | `snapshot` | query-only+ | **(v1.25)** SQL only. Capture a result fingerprint (`rowCount` + per-column null/distinct/min/max/sum + order-independent checksum). `--out` (default `.dbcli/snapshots/snap-<ts>.json`), `--rows`, `--stdout`, `--format`, `--no-limit`. Baseline for `assert --against`. |
 | `assert` | query-only+ | **(v1.25)** SQL only. Verify an invariant; exit 1 on failure unless `--no-fail`. `--expect "rows>0\|value==X\|col:c not null\|unique\|between a and b\|>= n"`, `--vs <query> --compare rows\|value` (reconcile), `--against <snapshot> --tolerance <pct>`. |
 | `verification` | n/a | Inspect and manage local verification artifacts. `list` / `show <id-or-path>` / `summary` are read-only; `prune` is dry-run by default and deletes only with `--execute --force`. Reads `<cwd>/.dbcli/verification/`; no DB connection, no audit writes. |
@@ -325,8 +327,9 @@ Full flags and edge cases: see [reference.md](reference.md) `init` section.
 | `skill` | n/a | Generate / install AI skill docs (`--install <claude\|gemini\|antigravity\|copilot\|cursor\|codex\|windsurf>`); `skill tasks list/show/plan` for Agent Task Packs; `skill context` for an LLM prompt-context payload (for injecting into another LLM, not needed for normal operation). |
 | `migrate` | admin | SQL only. **DDL; dry-run by default** — needs `--execute`. |
 
-`--use <name>` on any subcommand (including `status` / `doctor`) targets a v2 connection
-without changing the default. `--recovery` is honoured by `query`, `q`, `insert`, `update`,
+Use root-level `dbcli --use <name> <command>` for any command; `query`, `schema`, `list`,
+`export`, and `check` also accept command-level `--use`. Both target a v2 connection without
+changing the default. `--recovery` is honoured by `query`, `q`, `insert`, `update`,
 `delete`, `export`, `schema`, `inspect`, `lint`, and `diff --against-orm` (see **On failure** above).
 
 **Write & query flag semantics** (SQL/Mongo `insert`/`update`):
@@ -344,6 +347,27 @@ without changing the default. `--recovery` is honoured by `query`, `q`, `insert`
 - `--recovery` is recommended for automated agent pipelines (enables `dbcli recover --apply`
   after a failure); optional for one-off manual writes.
 
+## Query workflow flags
+
+These exist so you do not have to pipe output through `head` / `jq` / `python3`
+to make it usable. Reach for them instead of post-processing.
+
+| Need | Flag | Notes |
+|------|------|-------|
+| Only some columns | `--fields sn,bet,created_at` | SQL and MongoDB. Mongo pushes a real `projection` / `$project` to the driver; `_id` is dropped unless you ask for it. A field the result lacks comes back as `null`, so verify spellings with `schema` before reading meaning into an all-null column. |
+| Everything except a huge column | `--fields=-raw_response` | Exclusion form. Include and exclude cannot be mixed. |
+| One field is a giant JSON blob | `--truncate 120` | Table output truncates cells at 120 chars **by default** and marks them `…(+3412 chars)`. `--no-truncate` disables it. Explicit truncation flags are rejected on JSON, CSV, HTML, and `--ui` output. |
+| Query has quotes / newlines / `$regex` | `-f pipeline.json` or `-f -` | Reads the query from a file or stdin; use a heredoc for Mongo pipelines. Passing both a file and positional query text is an error, never a silent pick. `-f -` needs piped input — it refuses an interactive terminal rather than hanging. |
+| Same query across connections | `--use hub-prod,site-a` | Read-only fan-out. Per-connection results, one failure does not cancel the others. Exit `0` all-ok, `2` mixed, `1` all-failed. Rejects writes, `--recovery`, `--ui`, CSV/HTML. |
+| Pick a connection for one call | `DBCLI_CONNECTION=hub-prod dbcli query …` | Env var, or `--use` on the subcommand. Priority: `--use` > `DBCLI_CONNECTION` > saved default. Neither writes the default back to disk, so parallel shells never fight. Requires a v2 config — a single-connection (v1) project rejects both rather than silently running its only connection. **Do not** use `dbcli use <name>` just to switch for one query. |
+
+**Truncation is reported, never implied.** When the query-only auto-limit trims a
+result, the table footer reads `Rows: 1000 (truncated; limit 1000)`, `--format json`
+carries `metadata.truncated` / `metadata.limit_applied`, and CSV appends a `#`
+comment. `Rows: 1000` with no marker means exactly 1000 rows exist — do not infer
+truncation from a round number. This applies to `query` and to `q` snippets
+(whose own 1000-row guard reports the same way). `export` refuses to truncate at all. Redis replies trimmed by the size guard report the same way, and each size-guard warning is printed on stderr.
+
 ## Permission levels
 
 | Level | Allowed |

package/.cursor/skills/dbcli/reference.md

@@ -112,7 +112,7 @@ dbcli schema --use prod             # Scan prod DB; saves to .dbcli/schemas/prod
 
 ### query
 
-Execute SQL query (MySQL/PostgreSQL/MariaDB) or JSON filter/pipeline (MongoDB).
+Execute a SQL statement, MongoDB filter/pipeline, allow-listed Redis command, or Elasticsearch DSL/Lucene query.
 
 ```bash
 # SQL databases
@@ -143,13 +143,84 @@ dbcli query "SELECT day, dau FROM dau_daily" --ui                # open in brows
 dbcli query "SELECT * FROM orders" --format html > orders.html   # pipe to stdout
 ```
 
-**Options:** `--format <table|json|csv|html>`, `--ui` (open the dashboard in the system browser; implies `--format html`), `--limit <number>`, `--no-limit`, `--collection <name>` (MongoDB / Elasticsearch), `--index <name>` (Elasticsearch alias for `--collection`), `--recovery`
+**Options:** `--format <table|json|csv|html>`, `--ui` (open the dashboard in the system browser; implies `--format html`), `--limit <number>`, `--no-limit`, `--collection <name>` (MongoDB / Elasticsearch), `--index <name>` (Elasticsearch alias for `--collection`), `--fields <list>`, `--truncate <number>` / `--no-truncate`, `-f, --query-file <path>`, `--use <name[,name]>`, `--recovery`
 **Permission:** query-only+ (Redis: per-command; Elasticsearch: per HTTP method/path)
 
+#### Field projection (`--fields`)
+
+```bash
+dbcli query "SELECT * FROM bet_log" --fields sn,currency,bet
+dbcli query "SELECT * FROM bet_log" --fields=-raw_response,-created_at   # exclusion
+dbcli query '{"station_code":"cmg9998"}' --collection raw_bet_log --fields sn,bet
+```
+
+Include and exclude forms cannot be mixed. Dotted paths (`user.email`) are supported.
+On MongoDB the selection becomes a driver-level `projection` (find) or a trailing
+`$project` stage (aggregate), so the omitted fields never leave the server; `_id` is
+excluded unless listed explicitly. On SQL the rows are projected after fetch — write
+an explicit column list in the `SELECT` when you also want to cut transfer cost.
+Blacklisted columns stay blacklisted: naming one in `--fields` yields no value and the
+result still carries the blacklist `securityNotification`. A requested field that does
+not exist in the result comes back as `null`.
+
+#### Cell truncation (`--truncate`)
+
+```bash
+dbcli query "SELECT sn, raw_response FROM bet_log"                 # table: 120-char default
+dbcli query "SELECT sn, raw_response FROM bet_log" --truncate 40
+dbcli query "SELECT sn, raw_response FROM bet_log" --no-truncate
+```
+
+Table output truncates each serialized cell at 120 Unicode code points by default and
+appends `…(+N chars)`; counting by code point keeps multi-byte characters and emoji
+intact. `--truncate <n>` sets the width, `--no-truncate` disables it. Explicit truncation
+flags are rejected with JSON, CSV, HTML, and `--ui` output.
+
+#### Query from a file or stdin (`-f`)
+
+```bash
+dbcli query -f report.sql
+dbcli query --collection raw_bet_log -f - <<'EOF'
+[{"$match": {"sn": {"$regex": "^SN0000"}}}, {"$group": {"_id": "$currency", "n": {"$sum": 1}}}]
+EOF
+```
+
+Avoids shell quoting entirely — the usual reason a Mongo pipeline containing `$regex`
+or nested date objects fails. Supplying both `--query-file` and positional query text
+is an error rather than a silent choice, and an empty file or empty stdin is refused.
+`-f -` requires piped input: on an interactive terminal dbcli refuses immediately
+instead of waiting silently for input that is never coming.
+
+#### One-shot connection selection and read-only fan-out
+
+Selection precedence is explicit `--use`, then `DBCLI_CONNECTION`, then the saved default.
+`query`, `schema`, `list`, `export`, and `check` accept command-level `--use`; for other
+commands use root-level `dbcli --use <name> <command>`. One-shot selectors never update the
+saved default and require a v2 config. A legacy v1 single-connection config rejects them
+instead of silently running its only connection.
+
+An explicit comma-separated `--use primary,staging` fans one query out to several named
+connections. `DBCLI_CONNECTION` always names one literal connection and never enables
+fan-out. SQL permits `SELECT`, `SHOW`, `DESCRIBE`, and `EXPLAIN`; MongoDB permits filters and
+read-only pipelines without top-level `$out` / `$merge`; Elasticsearch permits searches.
+Redis, writes, `--recovery`, `--ui`, CSV, and HTML are rejected before execution. Each
+connection keeps its own blacklist, limit metadata, audit entry, and error. Aggregate exit
+codes are `0` when all succeed, `2` for mixed outcomes, and `1` when all fail or preflight
+rejects the request.
+
+#### Truncation is stated, not implied
+
+When the query-only auto-limit trims the result, the table footer reads
+`Rows: 1000 (truncated; limit 1000)`, `--format json` carries
+`metadata.truncated` and `metadata.limit_applied`, and CSV appends a `#` comment line.
+dbcli fetches one row past the cap to decide this, so a result of exactly 1000 rows is
+reported as `truncated: false` — never infer truncation from a round row count.
+
 > **MongoDB notes:**
 > - SQL syntax is rejected — use JSON object (filter) or JSON array (pipeline)
 > - `--collection <name>` is required
-> - Auto-limit does not apply; use `$limit` in your pipeline if needed
+> - Query-only auto-limit applies to filters and to pipelines without their own
+>   `$limit`; the applied cap and truncation are reported in the result metadata
 
 > **Redis notes:**
 > - The first token must be an allow-listed command (`GET`/`SET`/`HGET`/`HSET`/`DEL`/...). Unknown commands are refused.
@@ -661,9 +732,13 @@ dbcli export orders --no-limit --format jsonl             # scroll the whole ind
 **Options:** `--format <json|jsonl|csv|html>` (required), `--output <path>`, `--force`, `--recovery`, `--collection <name>` (MongoDB collection) / `--index <name>` (Elasticsearch index; alias for `--collection`), `--limit <number>` (overrides auto-limit), `--no-limit` (Elasticsearch full-index scroll)
 **Permission:** query-only+ — SQL, MongoDB, and **(v1.22)** Elasticsearch.
 
+If the query-only auto-limit would omit rows, export fails closed with exit code `1` and
+writes no partial file. Re-run with `--no-limit` to export everything, or `--limit N` to
+accept a bounded export explicitly. This applies to SQL, MongoDB, and Elasticsearch.
+
 The `html` format emits the same self-contained dashboard as `query --ui` (see [Interactive HTML dashboard](#interactive-html-dashboard)). Because `export` runs raw SQL (no snippet metadata), the HTML report is always rendered as a sortable / filterable table — no KPIs or charts. Use `dbcli q @<name> --format html` (or `--ui`) for the charted view.
 
-> **Elasticsearch export (v1.22):** pass a search DSL with `--index <index>` to export the hits, or pass an index name as the query to scroll the whole index via `match_all`. Default cap is 1000 rows; `--no-limit` streams the full index via scroll in batches. Index-level blacklist is checked before export and an audit record is written.
+> **Elasticsearch export (v1.22):** pass a search DSL with `--index <index>` to export the hits, or pass an index name as the query to scroll the whole index via `match_all`. Default cap is 1000 rows; reaching it fails closed unless the caller explicitly uses `--limit N`, while `--no-limit` streams the full index via scroll in batches. Index-level blacklist is checked before export and an audit record is written.
 
 ### blacklist
 
@@ -722,6 +797,10 @@ separate `--snapshot` / `--against` workflow.
 dbcli diff --against-orm prisma/schema.prisma --format json
 dbcli diff --against-orm schema.normalized.json --orm-format json --format table
 
+# Drizzle requires a PostgreSQL drizzle-kit v7 snapshot (generate it first)
+drizzle-kit generate
+dbcli diff --against-orm drizzle/meta/0001_snapshot.json --orm-format drizzle --format table
+
 # DDL accepts repeatable or comma-separated paths and real filesystem globs
 dbcli diff --against-orm "migrations/*.sql" --format markdown
 dbcli diff --against-orm migrations/base.sql,migrations/accounts.sql \
@@ -731,11 +810,60 @@ dbcli diff --against-orm migrations/base.sql,migrations/accounts.sql \
 dbcli diff --against-orm prisma/schema.prisma --ignore 'public.audit_*,public.Legacy'
 ```
 
+##### TypeORM
+
+TypeORM entities are not parsed directly. `schema:log` prints the SQL that
+`schema:sync` would execute without applying it; `-d` is the required data-source
+path. Generate that DDL, then select the `typeorm` alias so the report is tagged
+`ormSource: typeorm`:
+
+```bash
+bunx typeorm schema:log -d <path/to/datasource> > schema.sql
+dbcli diff --against-orm schema.sql --orm-format typeorm --format table
+```
+
+With `--orm-format typeorm`, `typeorm_metadata` and `migrations` are
+default-ignored and appear as `unmanaged` rather than scored drift. Passing a
+TypeORM `.ts`, `.js`, `.mjs`, or `.cjs` source file is rejected with the
+`schema:log` command to run. See the
+[TypeORM CLI documentation](https://typeorm.io/docs/using-cli) and
+[`SchemaLogCommand`](https://github.com/typeorm/typeorm/blob/master/src/commands/SchemaLogCommand.ts).
+
+##### Sequelize
+
+Sequelize CLI does not provide a universal `db:migrate --dry-run`. Point the
+project's existing Sequelize configuration at an empty scratch database, apply
+the migrations there, and dump definitions without row data:
+
+```bash
+# Configure Sequelize for an empty scratch database first
+bunx sequelize-cli db:migrate
+
+# PostgreSQL scratch database
+pg_dump --schema-only <scratch-database> > schema.sql
+
+# MySQL scratch database
+mysqldump --no-data <database> > schema.sql
+
+dbcli diff --against-orm schema.sql --orm-format sequelize --format json
+```
+
+With `--orm-format sequelize`, `SequelizeMeta` is default-ignored and appears as
+`unmanaged` rather than scored drift. Passing a Sequelize `.ts`, `.js`, `.mjs`,
+or `.cjs` model file is rejected with the scratch-database and schema-only dump
+recipe. See the
+[Sequelize CLI migration command](https://github.com/sequelize/cli/blob/main/src/commands/migrate.js),
+[PostgreSQL `pg_dump`](https://www.postgresql.org/docs/current/app-pgdump.html),
+and [MySQL `mysqldump`](https://dev.mysql.com/doc/refman/8.4/en/mysqldump-definition-data-dumps.html)
+references.
+
 | Option | Behavior |
 | :--- | :--- |
-| `--against-orm <paths>` | Repeatable or comma-separated input. DDL inputs support real filesystem globs; matches are deduplicated and put in deterministic path order, then parsed as one shared ordered context so an index in a later file can attach to a table declared in an earlier file. Prisma and normalized JSON accept exactly one file, and globs are rejected for those formats. |
-| `--orm-format prisma\|ddl\|json` | Override extension/content detection. Without it, dbcli detects Prisma, DDL, or normalized JSON from the path and content. |
-| `--ignore <globs>` | Comma-separated, case-sensitive table globs. Patterns match the qualified display identity (for example `public.Users`). `_prisma_migrations` is always unmanaged. |
+| `--against-orm <paths>` | Repeatable or comma-separated input. DDL-family inputs (raw DDL, TypeORM, and Sequelize) support real filesystem globs; matches are deduplicated and put in deterministic path order, then parsed as one shared ordered context so an index in a later file can attach to a table declared in an earlier file. Prisma, normalized JSON, and Drizzle accept exactly one file, and globs are rejected for those formats. |
+| Drizzle input | Run `drizzle-kit generate`, then pass the PostgreSQL drizzle-kit v7 snapshot at `drizzle/meta/<NNNN>_snapshot.json`. TypeScript ORM schema sources (`.ts` or `.TS`) are rejected with that snapshot-generation hint; dbcli does not parse them directly. |
+| TypeORM / Sequelize input | Generate DDL with the ORM/database tooling, then pass the SQL file with the matching `typeorm` or `sequelize` alias. Entity/model source files are rejected rather than parsed. |
+| `--orm-format prisma\|ddl\|json\|drizzle\|typeorm\|sequelize` | Override extension/content detection. The `typeorm` and `sequelize` aliases use the DDL adapter while preserving the source tag and ORM-specific default ignores. Without an override, dbcli detects Prisma, raw DDL, normalized JSON, or a Drizzle snapshot from the path and content. |
+| `--ignore <globs>` | Comma-separated, case-sensitive table globs. Patterns match the qualified display identity (for example `public.Users`). `_prisma_migrations` is always unmanaged; the TypeORM alias additionally ignores `typeorm_metadata` and `migrations`, and the Sequelize alias additionally ignores `SequelizeMeta`. |
 | `--format json\|table\|markdown` | Select machine JSON, human table, or Markdown output. Markdown is available only in ORM drift mode. |
 | `--recovery` | On an I/O, configuration, empty-cache, invalid-format, or unsupported-engine failure, emit and save a structured recovery envelope. Invalid Prisma/DDL constructs normally become `unparsed` entries instead of throwing. |
 
@@ -783,9 +911,11 @@ another.
 columns, multi-schema datasource configuration, malformed declarations, unknown
 attributes, and unsupported native mappings are never guessed.
 
-Prisma and DDL constructs outside the supported subset are retained in
+Prisma, DDL, and Drizzle constructs outside the supported subset are retained in
 `unparsed` with a `blocked:` reason. These entries are separate from scored drift:
 inspect and resolve them before treating an otherwise clean summary as complete.
+Drizzle enums and other unsupported snapshot constructs therefore appear as blocked
+`unparsed` entries rather than managed tables or columns.
 Multi-file DDL is consumed as one deterministic shared ordered statement context,
 so later `CREATE INDEX` statements can reference tables declared in earlier
 files. PostgreSQL `PARTITION BY` and MySQL/MariaDB table engine, charset, and

package/.cursor-plugin/plugin.json

@@ -2,7 +2,7 @@
   "name": "dbcli-agent",
   "displayName": "dbcli Agent",
   "description": "Database CLI skill and command reference for AI agents.",
-  "version": "1.41.0",
+  "version": "1.43.0",
   "author": {
     "name": "Carl Lee",
     "url": "https://github.com/CarlLee1983"

package/.github/skills/dbcli/SKILL.md

@@ -239,8 +239,10 @@ dbcli init --system elasticsearch \
 dbcli init --conn-name staging --env-file .env.staging --permission query-only
 dbcli init --conn-name prod    --env-file .env.production --use-env-refs --skip-test
 dbcli use --list                          # show all, * marks default
-dbcli use prod                            # switch default
+dbcli use prod                            # switch default (persists — avoid for one-off queries)
 dbcli query --use staging "SELECT 1"      # one-shot override on any subcommand
+DBCLI_CONNECTION=staging dbcli query "SELECT 1"   # one-shot via env; parallel-safe
+dbcli --use staging,prod query "SELECT count(*) FROM users"   # read-only fan-out
 dbcli init --rename staging:stg           # rename
 dbcli init --remove stg                   # remove
 ```
@@ -296,7 +298,7 @@ Full flags and edge cases: see [reference.md](reference.md) `init` section.
 | `use` | n/a | Show/switch default named connection (v2 only). |
 | `list` | query-only+ | Tables (SQL), collections (MongoDB), keys (Redis), or indices (Elasticsearch). |
 | `schema` | query-only+ | SQL: per-table or full scan into `.dbcli/schemas/`. MongoDB: sampled. ES: flattened mapping. Redis: per-key only (type/TTL/size). Supports `--recovery`. |
-| `query` | query-only+ | SQL, Mongo JSON (`--collection`), Redis command, or ES DSL/Lucene (`--collection`). `--format table\|json\|csv\|html`, `--ui` to open the interactive dashboard in a browser. Supports `--recovery`. |
+| `query` | query-only+ | SQL, Mongo JSON (`--collection`), Redis command, or ES DSL/Lucene (`--collection`). `--format table\|json\|csv\|html`, `--ui` to open the interactive dashboard in a browser. `--fields` (projection), `--truncate` (cell width), `-f/--query-file` (read query from file or stdin), `--use a,b` (read-only fan-out). Supports `--recovery`. See **Query workflow flags**. |
 | `explain` | query-only+ | **(v1.23)** Read-only query plan with annotations. SQL only. Single query, `@saved-query`, `@file.sql`, or `--bulk @glob/*`. `--analyze` (EXPLAIN ANALYZE / MariaDB ANALYZE SELECT), `--format markdown\|json\|table`. |
 | `lint` | n/a | Static SQL anti-pattern advisor (no DB connection). 9 rules incl. schema-aware implicit-cast / NOT IN-nullable checks via the layered `.dbcli/schemas/` cache; global `--use <conn>` selects a named cache. Findings carry rewrite drafts + guarded `explain` verify commands (`--analyze` only for proven read-only SQL) — report-only, never executes. `--format text\|json\|markdown`, `--min-severity`, `--no-schema`, `--bulk`. Supports `--recovery`. |
 | `plan` | n/a | Static SQL risk analyzer (`--format text\|json`); classifies a statement without connecting to the database. |
@@ -304,10 +306,10 @@ Full flags and edge cases: see [reference.md](reference.md) `init` section.
 | `queries` | n/a | Manage saved snippets: `list` / `show` / `search` / `suggest` / `new` / `edit` / `check` / `delete` / `rename` / `copy` / `import` / `export`. |
 | `insert` / `update` | read-write+ | SQL or MongoDB only. JSON `--data` / `--set`; `--where` required on `update`; `--dry-run` first. Redis writes go through `query`. Supports `--recovery`. |
 | `delete` | data-admin+ | SQL or MongoDB; Redis has a basic implementation (see Redis section). `--where` required; `--dry-run` first. Supports `--recovery`. |
-| `export` | query-only+ | SQL, MongoDB, or **(v1.22)** Elasticsearch (DSL `--index` or whole-index scroll). Query → `--format json\|jsonl\|csv\|html` file or stdout. `html` emits a standalone interactive dashboard. Supports `--recovery`. |
+| `export` | query-only+ | SQL, MongoDB, or **(v1.22)** Elasticsearch (DSL `--index` or whole-index scroll). Query → `--format json\|jsonl\|csv\|html` file or stdout. `html` emits a standalone interactive dashboard. **Fails closed rather than truncating silently**: if the auto-limit would drop rows, the export errors out and you must pass `--no-limit` or `--limit N`. Supports `--recovery`. |
 | `blacklist` | n/a | `list` / `table` / `column` subcommands redact sensitive data from query results. |
 | `check` | query-only+ | SQL only (best on MySQL/MariaDB). |
-| `diff` | query-only+ | SQL only. Save/compare schema snapshots. **(P1b)** `--against-orm <path>` compares a Prisma schema / DDL file / normalized JSON against the local schema cache (no DB connection): categorized drift (`missing_in_db` = error, `missing_in_orm` = warn, `mismatch` per tolerance table, `unmanaged`) with dry-run `migrate` proposals; exit 1 on error-level drift. `--orm-format prisma\|ddl\|json`, `--ignore <globs>`, `--format json\|table\|markdown`. |
+| `diff` | query-only+ | SQL only. Save/compare schema snapshots. **(P1b)** `--against-orm <path>` compares a Prisma schema / DDL file / normalized JSON against the local schema cache (no DB connection): categorized drift (`missing_in_db` = error, `missing_in_orm` = warn, `mismatch` per tolerance table, `unmanaged`) with dry-run `migrate` proposals; exit 1 on error-level drift. `--orm-format prisma\|ddl\|json\|drizzle\|typeorm\|sequelize`, `--ignore <globs>`, `--format json\|table\|markdown`. Drizzle: point at `drizzle/meta/<NNNN>_snapshot.json` (run `drizzle-kit generate` first; `.ts` sources are rejected with a hint). TypeORM/Sequelize: feed tool-generated DDL (`schema:log` / a schema-only dump); source files are rejected with the exact generation command to run. |
 | `snapshot` | query-only+ | **(v1.25)** SQL only. Capture a result fingerprint (`rowCount` + per-column null/distinct/min/max/sum + order-independent checksum). `--out` (default `.dbcli/snapshots/snap-<ts>.json`), `--rows`, `--stdout`, `--format`, `--no-limit`. Baseline for `assert --against`. |
 | `assert` | query-only+ | **(v1.25)** SQL only. Verify an invariant; exit 1 on failure unless `--no-fail`. `--expect "rows>0\|value==X\|col:c not null\|unique\|between a and b\|>= n"`, `--vs <query> --compare rows\|value` (reconcile), `--against <snapshot> --tolerance <pct>`. |
 | `verification` | n/a | Inspect and manage local verification artifacts. `list` / `show <id-or-path>` / `summary` are read-only; `prune` is dry-run by default and deletes only with `--execute --force`. Reads `<cwd>/.dbcli/verification/`; no DB connection, no audit writes. |
@@ -325,8 +327,9 @@ Full flags and edge cases: see [reference.md](reference.md) `init` section.
 | `skill` | n/a | Generate / install AI skill docs (`--install <claude\|gemini\|antigravity\|copilot\|cursor\|codex\|windsurf>`); `skill tasks list/show/plan` for Agent Task Packs; `skill context` for an LLM prompt-context payload (for injecting into another LLM, not needed for normal operation). |
 | `migrate` | admin | SQL only. **DDL; dry-run by default** — needs `--execute`. |
 
-`--use <name>` on any subcommand (including `status` / `doctor`) targets a v2 connection
-without changing the default. `--recovery` is honoured by `query`, `q`, `insert`, `update`,
+Use root-level `dbcli --use <name> <command>` for any command; `query`, `schema`, `list`,
+`export`, and `check` also accept command-level `--use`. Both target a v2 connection without
+changing the default. `--recovery` is honoured by `query`, `q`, `insert`, `update`,
 `delete`, `export`, `schema`, `inspect`, `lint`, and `diff --against-orm` (see **On failure** above).
 
 **Write & query flag semantics** (SQL/Mongo `insert`/`update`):
@@ -344,6 +347,27 @@ without changing the default. `--recovery` is honoured by `query`, `q`, `insert`
 - `--recovery` is recommended for automated agent pipelines (enables `dbcli recover --apply`
   after a failure); optional for one-off manual writes.
 
+## Query workflow flags
+
+These exist so you do not have to pipe output through `head` / `jq` / `python3`
+to make it usable. Reach for them instead of post-processing.
+
+| Need | Flag | Notes |
+|------|------|-------|
+| Only some columns | `--fields sn,bet,created_at` | SQL and MongoDB. Mongo pushes a real `projection` / `$project` to the driver; `_id` is dropped unless you ask for it. A field the result lacks comes back as `null`, so verify spellings with `schema` before reading meaning into an all-null column. |
+| Everything except a huge column | `--fields=-raw_response` | Exclusion form. Include and exclude cannot be mixed. |
+| One field is a giant JSON blob | `--truncate 120` | Table output truncates cells at 120 chars **by default** and marks them `…(+3412 chars)`. `--no-truncate` disables it. Explicit truncation flags are rejected on JSON, CSV, HTML, and `--ui` output. |
+| Query has quotes / newlines / `$regex` | `-f pipeline.json` or `-f -` | Reads the query from a file or stdin; use a heredoc for Mongo pipelines. Passing both a file and positional query text is an error, never a silent pick. `-f -` needs piped input — it refuses an interactive terminal rather than hanging. |
+| Same query across connections | `--use hub-prod,site-a` | Read-only fan-out. Per-connection results, one failure does not cancel the others. Exit `0` all-ok, `2` mixed, `1` all-failed. Rejects writes, `--recovery`, `--ui`, CSV/HTML. |
+| Pick a connection for one call | `DBCLI_CONNECTION=hub-prod dbcli query …` | Env var, or `--use` on the subcommand. Priority: `--use` > `DBCLI_CONNECTION` > saved default. Neither writes the default back to disk, so parallel shells never fight. Requires a v2 config — a single-connection (v1) project rejects both rather than silently running its only connection. **Do not** use `dbcli use <name>` just to switch for one query. |
+
+**Truncation is reported, never implied.** When the query-only auto-limit trims a
+result, the table footer reads `Rows: 1000 (truncated; limit 1000)`, `--format json`
+carries `metadata.truncated` / `metadata.limit_applied`, and CSV appends a `#`
+comment. `Rows: 1000` with no marker means exactly 1000 rows exist — do not infer
+truncation from a round number. This applies to `query` and to `q` snippets
+(whose own 1000-row guard reports the same way). `export` refuses to truncate at all. Redis replies trimmed by the size guard report the same way, and each size-guard warning is printed on stderr.
+
 ## Permission levels
 
 | Level | Allowed |

package/.github/skills/dbcli/reference.md

@@ -112,7 +112,7 @@ dbcli schema --use prod             # Scan prod DB; saves to .dbcli/schemas/prod
 
 ### query
 
-Execute SQL query (MySQL/PostgreSQL/MariaDB) or JSON filter/pipeline (MongoDB).
+Execute a SQL statement, MongoDB filter/pipeline, allow-listed Redis command, or Elasticsearch DSL/Lucene query.
 
 ```bash
 # SQL databases
@@ -143,13 +143,84 @@ dbcli query "SELECT day, dau FROM dau_daily" --ui                # open in brows
 dbcli query "SELECT * FROM orders" --format html > orders.html   # pipe to stdout
 ```
 
-**Options:** `--format <table|json|csv|html>`, `--ui` (open the dashboard in the system browser; implies `--format html`), `--limit <number>`, `--no-limit`, `--collection <name>` (MongoDB / Elasticsearch), `--index <name>` (Elasticsearch alias for `--collection`), `--recovery`
+**Options:** `--format <table|json|csv|html>`, `--ui` (open the dashboard in the system browser; implies `--format html`), `--limit <number>`, `--no-limit`, `--collection <name>` (MongoDB / Elasticsearch), `--index <name>` (Elasticsearch alias for `--collection`), `--fields <list>`, `--truncate <number>` / `--no-truncate`, `-f, --query-file <path>`, `--use <name[,name]>`, `--recovery`
 **Permission:** query-only+ (Redis: per-command; Elasticsearch: per HTTP method/path)
 
+#### Field projection (`--fields`)
+
+```bash
+dbcli query "SELECT * FROM bet_log" --fields sn,currency,bet
+dbcli query "SELECT * FROM bet_log" --fields=-raw_response,-created_at   # exclusion
+dbcli query '{"station_code":"cmg9998"}' --collection raw_bet_log --fields sn,bet
+```
+
+Include and exclude forms cannot be mixed. Dotted paths (`user.email`) are supported.
+On MongoDB the selection becomes a driver-level `projection` (find) or a trailing
+`$project` stage (aggregate), so the omitted fields never leave the server; `_id` is
+excluded unless listed explicitly. On SQL the rows are projected after fetch — write
+an explicit column list in the `SELECT` when you also want to cut transfer cost.
+Blacklisted columns stay blacklisted: naming one in `--fields` yields no value and the
+result still carries the blacklist `securityNotification`. A requested field that does
+not exist in the result comes back as `null`.
+
+#### Cell truncation (`--truncate`)
+
+```bash
+dbcli query "SELECT sn, raw_response FROM bet_log"                 # table: 120-char default
+dbcli query "SELECT sn, raw_response FROM bet_log" --truncate 40
+dbcli query "SELECT sn, raw_response FROM bet_log" --no-truncate
+```
+
+Table output truncates each serialized cell at 120 Unicode code points by default and
+appends `…(+N chars)`; counting by code point keeps multi-byte characters and emoji
+intact. `--truncate <n>` sets the width, `--no-truncate` disables it. Explicit truncation
+flags are rejected with JSON, CSV, HTML, and `--ui` output.
+
+#### Query from a file or stdin (`-f`)
+
+```bash
+dbcli query -f report.sql
+dbcli query --collection raw_bet_log -f - <<'EOF'
+[{"$match": {"sn": {"$regex": "^SN0000"}}}, {"$group": {"_id": "$currency", "n": {"$sum": 1}}}]
+EOF
+```
+
+Avoids shell quoting entirely — the usual reason a Mongo pipeline containing `$regex`
+or nested date objects fails. Supplying both `--query-file` and positional query text
+is an error rather than a silent choice, and an empty file or empty stdin is refused.
+`-f -` requires piped input: on an interactive terminal dbcli refuses immediately
+instead of waiting silently for input that is never coming.
+
+#### One-shot connection selection and read-only fan-out
+
+Selection precedence is explicit `--use`, then `DBCLI_CONNECTION`, then the saved default.
+`query`, `schema`, `list`, `export`, and `check` accept command-level `--use`; for other
+commands use root-level `dbcli --use <name> <command>`. One-shot selectors never update the
+saved default and require a v2 config. A legacy v1 single-connection config rejects them
+instead of silently running its only connection.
+
+An explicit comma-separated `--use primary,staging` fans one query out to several named
+connections. `DBCLI_CONNECTION` always names one literal connection and never enables
+fan-out. SQL permits `SELECT`, `SHOW`, `DESCRIBE`, and `EXPLAIN`; MongoDB permits filters and
+read-only pipelines without top-level `$out` / `$merge`; Elasticsearch permits searches.
+Redis, writes, `--recovery`, `--ui`, CSV, and HTML are rejected before execution. Each
+connection keeps its own blacklist, limit metadata, audit entry, and error. Aggregate exit
+codes are `0` when all succeed, `2` for mixed outcomes, and `1` when all fail or preflight
+rejects the request.
+
+#### Truncation is stated, not implied
+
+When the query-only auto-limit trims the result, the table footer reads
+`Rows: 1000 (truncated; limit 1000)`, `--format json` carries
+`metadata.truncated` and `metadata.limit_applied`, and CSV appends a `#` comment line.
+dbcli fetches one row past the cap to decide this, so a result of exactly 1000 rows is
+reported as `truncated: false` — never infer truncation from a round row count.
+
 > **MongoDB notes:**
 > - SQL syntax is rejected — use JSON object (filter) or JSON array (pipeline)
 > - `--collection <name>` is required
-> - Auto-limit does not apply; use `$limit` in your pipeline if needed
+> - Query-only auto-limit applies to filters and to pipelines without their own
+>   `$limit`; the applied cap and truncation are reported in the result metadata
 
 > **Redis notes:**
 > - The first token must be an allow-listed command (`GET`/`SET`/`HGET`/`HSET`/`DEL`/...). Unknown commands are refused.
@@ -661,9 +732,13 @@ dbcli export orders --no-limit --format jsonl             # scroll the whole ind
 **Options:** `--format <json|jsonl|csv|html>` (required), `--output <path>`, `--force`, `--recovery`, `--collection <name>` (MongoDB collection) / `--index <name>` (Elasticsearch index; alias for `--collection`), `--limit <number>` (overrides auto-limit), `--no-limit` (Elasticsearch full-index scroll)
 **Permission:** query-only+ — SQL, MongoDB, and **(v1.22)** Elasticsearch.
 
+If the query-only auto-limit would omit rows, export fails closed with exit code `1` and
+writes no partial file. Re-run with `--no-limit` to export everything, or `--limit N` to
+accept a bounded export explicitly. This applies to SQL, MongoDB, and Elasticsearch.
+
 The `html` format emits the same self-contained dashboard as `query --ui` (see [Interactive HTML dashboard](#interactive-html-dashboard)). Because `export` runs raw SQL (no snippet metadata), the HTML report is always rendered as a sortable / filterable table — no KPIs or charts. Use `dbcli q @<name> --format html` (or `--ui`) for the charted view.
 
-> **Elasticsearch export (v1.22):** pass a search DSL with `--index <index>` to export the hits, or pass an index name as the query to scroll the whole index via `match_all`. Default cap is 1000 rows; `--no-limit` streams the full index via scroll in batches. Index-level blacklist is checked before export and an audit record is written.
+> **Elasticsearch export (v1.22):** pass a search DSL with `--index <index>` to export the hits, or pass an index name as the query to scroll the whole index via `match_all`. Default cap is 1000 rows; reaching it fails closed unless the caller explicitly uses `--limit N`, while `--no-limit` streams the full index via scroll in batches. Index-level blacklist is checked before export and an audit record is written.
 
 ### blacklist
 
@@ -722,6 +797,10 @@ separate `--snapshot` / `--against` workflow.
 dbcli diff --against-orm prisma/schema.prisma --format json
 dbcli diff --against-orm schema.normalized.json --orm-format json --format table
 
+# Drizzle requires a PostgreSQL drizzle-kit v7 snapshot (generate it first)
+drizzle-kit generate
+dbcli diff --against-orm drizzle/meta/0001_snapshot.json --orm-format drizzle --format table
+
 # DDL accepts repeatable or comma-separated paths and real filesystem globs
 dbcli diff --against-orm "migrations/*.sql" --format markdown
 dbcli diff --against-orm migrations/base.sql,migrations/accounts.sql \
@@ -731,11 +810,60 @@ dbcli diff --against-orm migrations/base.sql,migrations/accounts.sql \
 dbcli diff --against-orm prisma/schema.prisma --ignore 'public.audit_*,public.Legacy'
 ```
 
+##### TypeORM
+
+TypeORM entities are not parsed directly. `schema:log` prints the SQL that
+`schema:sync` would execute without applying it; `-d` is the required data-source
+path. Generate that DDL, then select the `typeorm` alias so the report is tagged
+`ormSource: typeorm`:
+
+```bash
+bunx typeorm schema:log -d <path/to/datasource> > schema.sql
+dbcli diff --against-orm schema.sql --orm-format typeorm --format table
+```
+
+With `--orm-format typeorm`, `typeorm_metadata` and `migrations` are
+default-ignored and appear as `unmanaged` rather than scored drift. Passing a
+TypeORM `.ts`, `.js`, `.mjs`, or `.cjs` source file is rejected with the
+`schema:log` command to run. See the
+[TypeORM CLI documentation](https://typeorm.io/docs/using-cli) and
+[`SchemaLogCommand`](https://github.com/typeorm/typeorm/blob/master/src/commands/SchemaLogCommand.ts).
+
+##### Sequelize
+
+Sequelize CLI does not provide a universal `db:migrate --dry-run`. Point the
+project's existing Sequelize configuration at an empty scratch database, apply
+the migrations there, and dump definitions without row data:
+
+```bash
+# Configure Sequelize for an empty scratch database first
+bunx sequelize-cli db:migrate
+
+# PostgreSQL scratch database
+pg_dump --schema-only <scratch-database> > schema.sql
+
+# MySQL scratch database
+mysqldump --no-data <database> > schema.sql
+
+dbcli diff --against-orm schema.sql --orm-format sequelize --format json
+```
+
+With `--orm-format sequelize`, `SequelizeMeta` is default-ignored and appears as
+`unmanaged` rather than scored drift. Passing a Sequelize `.ts`, `.js`, `.mjs`,
+or `.cjs` model file is rejected with the scratch-database and schema-only dump
+recipe. See the
+[Sequelize CLI migration command](https://github.com/sequelize/cli/blob/main/src/commands/migrate.js),
+[PostgreSQL `pg_dump`](https://www.postgresql.org/docs/current/app-pgdump.html),
+and [MySQL `mysqldump`](https://dev.mysql.com/doc/refman/8.4/en/mysqldump-definition-data-dumps.html)
+references.
+
 | Option | Behavior |
 | :--- | :--- |
-| `--against-orm <paths>` | Repeatable or comma-separated input. DDL inputs support real filesystem globs; matches are deduplicated and put in deterministic path order, then parsed as one shared ordered context so an index in a later file can attach to a table declared in an earlier file. Prisma and normalized JSON accept exactly one file, and globs are rejected for those formats. |
-| `--orm-format prisma\|ddl\|json` | Override extension/content detection. Without it, dbcli detects Prisma, DDL, or normalized JSON from the path and content. |
-| `--ignore <globs>` | Comma-separated, case-sensitive table globs. Patterns match the qualified display identity (for example `public.Users`). `_prisma_migrations` is always unmanaged. |
+| `--against-orm <paths>` | Repeatable or comma-separated input. DDL-family inputs (raw DDL, TypeORM, and Sequelize) support real filesystem globs; matches are deduplicated and put in deterministic path order, then parsed as one shared ordered context so an index in a later file can attach to a table declared in an earlier file. Prisma, normalized JSON, and Drizzle accept exactly one file, and globs are rejected for those formats. |
+| Drizzle input | Run `drizzle-kit generate`, then pass the PostgreSQL drizzle-kit v7 snapshot at `drizzle/meta/<NNNN>_snapshot.json`. TypeScript ORM schema sources (`.ts` or `.TS`) are rejected with that snapshot-generation hint; dbcli does not parse them directly. |
+| TypeORM / Sequelize input | Generate DDL with the ORM/database tooling, then pass the SQL file with the matching `typeorm` or `sequelize` alias. Entity/model source files are rejected rather than parsed. |
+| `--orm-format prisma\|ddl\|json\|drizzle\|typeorm\|sequelize` | Override extension/content detection. The `typeorm` and `sequelize` aliases use the DDL adapter while preserving the source tag and ORM-specific default ignores. Without an override, dbcli detects Prisma, raw DDL, normalized JSON, or a Drizzle snapshot from the path and content. |
+| `--ignore <globs>` | Comma-separated, case-sensitive table globs. Patterns match the qualified display identity (for example `public.Users`). `_prisma_migrations` is always unmanaged; the TypeORM alias additionally ignores `typeorm_metadata` and `migrations`, and the Sequelize alias additionally ignores `SequelizeMeta`. |
 | `--format json\|table\|markdown` | Select machine JSON, human table, or Markdown output. Markdown is available only in ORM drift mode. |
 | `--recovery` | On an I/O, configuration, empty-cache, invalid-format, or unsupported-engine failure, emit and save a structured recovery envelope. Invalid Prisma/DDL constructs normally become `unparsed` entries instead of throwing. |
 
@@ -783,9 +911,11 @@ another.
 columns, multi-schema datasource configuration, malformed declarations, unknown
 attributes, and unsupported native mappings are never guessed.
 
-Prisma and DDL constructs outside the supported subset are retained in
+Prisma, DDL, and Drizzle constructs outside the supported subset are retained in
 `unparsed` with a `blocked:` reason. These entries are separate from scored drift:
 inspect and resolve them before treating an otherwise clean summary as complete.
+Drizzle enums and other unsupported snapshot constructs therefore appear as blocked
+`unparsed` entries rather than managed tables or columns.
 Multi-file DDL is consumed as one deterministic shared ordered statement context,
 so later `CREATE INDEX` statements can reference tables declared in earlier
 files. PostgreSQL `PARTITION BY` and MySQL/MariaDB table engine, charset, and