@carllee1983/dbcli 11.0.0 → 12.0.0

package/dist/cli.mjs

@@ -3,7 +3,7 @@
 // package.json
 var package_default = {
   name: "@carllee1983/dbcli",
-  version: "11.0.0",
+  version: "12.0.0",
   description: "Database CLI for AI agents",
   type: "module",
   publishConfig: {

package/dist/core.d.ts

@@ -101,6 +101,8 @@ export interface ColumnSchema {
  * Complete schema information for a table
  */
 export interface TableSchema {
+	/** Some metadata was omitted to protect blacklisted identities. No protected names. */
+	metadataOmitted?: boolean;
 	/** Table name */
 	name: string;
 	/** Exact database schema/catalog namespace, when reliably available */
@@ -126,6 +128,8 @@ export interface TableSchema {
 		name: string;
 		columns: string[];
 		unique: boolean;
+		/** False when expressions/predicates prevent complete column-only representation. */
+		columnsComplete?: boolean;
 	}>;
 	/** Column count (used by listTables when full column details are not loaded) */
 	columnCount?: number;
@@ -134,7 +138,7 @@ export interface TableSchema {
 	/** Type of table (table or view) */
 	tableType?: "table" | "view";
 }
-type ConnectionErrorCode = "ECONNREFUSED" | "ETIMEDOUT" | "AUTH_FAILED" | "ENOTFOUND" | "EHOSTUNREACH" | "CONNECTION_LOST" | "TOO_MANY_CONNECTIONS" | "TLS_ERROR" | "SERVER_NOT_READY" | "CONNECTION_REJECTED" | "SQL_SYNTAX_ERROR" | "STATEMENT_TIMEOUT" | "TABLE_NOT_FOUND" | "COLUMN_NOT_FOUND" | "QUERY_ONLY_BOUNDARY_FAILED" | "UNKNOWN";
+type ConnectionErrorCode = "ECONNREFUSED" | "ETIMEDOUT" | "AUTH_FAILED" | "DB_PERMISSION_DENIED" | "ENOTFOUND" | "EHOSTUNREACH" | "CONNECTION_LOST" | "TOO_MANY_CONNECTIONS" | "TLS_ERROR" | "SERVER_NOT_READY" | "CONNECTION_REJECTED" | "SQL_SYNTAX_ERROR" | "STATEMENT_TIMEOUT" | "TABLE_NOT_FOUND" | "COLUMN_NOT_FOUND" | "QUERY_ONLY_BOUNDARY_FAILED" | "UNKNOWN";
 export declare class ConnectionError extends Error {
 	/** Error category code */
 	code: ConnectionErrorCode;
@@ -196,6 +200,10 @@ type RedisWarning = {
 	count: number;
 };
 interface TableSchemaOptions {
+	/** Single-object schema command: validate presence/type and mark incomplete index metadata. */
+	metadataProtection?: boolean;
+	/** Explicit SQL namespace; local tableName remains literal. Never performs an exact count. */
+	namespace?: string;
 	/** MongoDB: 取樣文件數 */
 	sampleSize?: number;
 	/** MongoDB: 取樣方式 */

package/dist/core.mjs

@@ -1028,6 +1028,7 @@ var COMMAND_CAPABILITY_KEYS = Object.freeze([
   "update",
   "delete",
   "export",
+  "blacklistRead",
   "blacklist",
   "check",
   "diff",
@@ -1096,6 +1097,7 @@ var SQL_BASE = {
   update: cap("supported", "db-write", "Dedicated UPDATE command is supported."),
   delete: cap("supported", "db-write", "Dedicated DELETE command is supported."),
   export: cap("supported", "readonly", "SQL export is supported."),
+  blacklistRead: cap("supported", "readonly", "Reads the configured blacklist rules."),
   blacklist: cap("supported", "local-write", "Blacklist management and enforcement are supported."),
   check: cap("supported", "readonly", "Data health checks are SQL-only."),
   diff: cap("supported", "readonly", "Relational schema snapshots are supported."),
@@ -1196,6 +1198,7 @@ var ENGINE_CAPABILITIES = Object.freeze({
     update: cap("limited", "db-write", "Document update is supported with Mongo-specific behavior."),
     delete: cap("limited", "db-write", "Document delete is supported with Mongo-specific behavior."),
     export: cap("limited", "readonly", "MongoDB export is supported with document-query syntax."),
+    blacklistRead: cap("limited", "readonly", "Reads the engine-specific blacklist rules."),
     blacklist: cap("limited", "local-write", "Rule management works; enforcement differs from SQL column enforcement."),
     check: cap("unsupported", "none", "Data health check is SQL-only."),
     diff: cap("unsupported", "none", "Schema snapshots are relational only."),
@@ -1216,6 +1219,7 @@ var ENGINE_CAPABILITIES = Object.freeze({
     update: cap("unsupported", "none", "Dedicated write subcommand is not exposed."),
     delete: cap("limited", "db-write", "Basic delete via DEL/HDEL/LREM/SREM/ZREM (needs data-admin); supports --dry-run."),
     export: cap("unsupported", "none", "Redis export is not supported."),
+    blacklistRead: cap("limited", "readonly", "Reads the engine-specific blacklist rules."),
     blacklist: cap("limited", "local-write", "Key-glob rejection (Redis-native pattern) plus value/hash-field masking ([REDACTED])."),
     check: cap("unsupported", "none", "Data health check is SQL-only."),
     diff: cap("unsupported", "none", "Schema snapshots are relational only."),
@@ -1236,6 +1240,7 @@ var ENGINE_CAPABILITIES = Object.freeze({
     update: cap("unsupported", "none", "Dedicated write subcommand is not exposed."),
     delete: cap("unsupported", "none", "Dedicated write subcommand is not exposed."),
     export: cap("limited", "readonly", "Exports DSL hits or a full index via scroll, capped at 1000 rows (use --no-limit)."),
+    blacklistRead: cap("limited", "readonly", "Reads the engine-specific blacklist rules."),
     blacklist: cap("limited", "local-write", "Index-level and flattened-column enforcement differ from SQL."),
     check: cap("unsupported", "none", "Data health check is SQL-only."),
     diff: cap("unsupported", "none", "Schema snapshots are relational only."),
@@ -1264,6 +1269,7 @@ var messages_default = {
     mongo_uri_conflicts_fields: "--uri cannot be combined with {flags}: the connection string already carries those settings. Use one or the other (--name may be combined to override the database name).",
     mongo_uri_with_env_refs: "--uri cannot be combined with --use-env-refs: the connection string is decomposed into config fields, and its credentials are not moved into environment variables. Either remove --use-env-refs so dbcli decomposes the string into the field config, or use the --env-* flags (--env-host, --env-user, --env-password, ...) to name one variable per field.",
     mongo_uri_fallback_warning: "\u26A0\uFE0F  This connection string {reasons}, so it cannot become fields. It is stored as-is in uri, and its credentials will sit in plaintext in the config file.",
+    mongo_uri_reason_unix_socket: "uses a Unix domain socket",
     mongo_uri_reason_multi_host: "contains more than one host (a field config holds only one)",
     mongo_uri_reason_secret_option: "contains secret option(s) ({keys}) that would land in plaintext options",
     mongo_uri_reason_duplicate_key: "repeats the query key(s) {keys} (a field config can hold only one value per key)",
@@ -1617,6 +1623,7 @@ var messages_default2 = {
     mongo_uri_conflicts_fields: "--uri \u4E0D\u80FD\u8207 {flags} \u4E26\u7528\uFF1A\u9023\u7DDA\u5B57\u4E32\u5DF2\u5305\u542B\u9019\u4E9B\u8A2D\u5B9A\u3002\u8ACB\u64C7\u4E00\u4F7F\u7528\uFF08--name \u53EF\u4E26\u7528\uFF0C\u7528\u4F86\u8986\u84CB\u8CC7\u6599\u5EAB\u540D\u7A31\uFF09\u3002",
     mongo_uri_with_env_refs: "--uri \u4E0D\u80FD\u8207 --use-env-refs \u4E26\u7528\uFF1A\u9023\u7DDA\u5B57\u4E32\u6703\u88AB\u62C6\u89E3\u6210\u6B04\u4F4D\u8A2D\u5B9A\u5BEB\u5165\uFF0C\u5E33\u5BC6\u4E0D\u6703\u88AB\u62BD\u6210\u74B0\u5883\u8B8A\u6578\u53C3\u7167\u3002\u8ACB\u6539\u8D70\u4E0B\u5217\u4EFB\u4E00\u505A\u6CD5\uFF1A\u62FF\u6389 --use-env-refs\uFF0C\u8B93 dbcli \u62C6\u89E3\u5B57\u4E32\u5BEB\u5165\u6B04\u4F4D\u8A2D\u5B9A\uFF1B\u6216\u6539\u7528 --env-* flag\uFF08--env-host\u3001--env-user\u3001--env-password \u7B49\uFF09\u9010\u6B04\u7D66\u8B8A\u6578\u540D\u7A31\u3002",
     mongo_uri_fallback_warning: "\u26A0\uFE0F  \u6B64\u9023\u7DDA\u5B57\u4E32{reasons}\uFF0C\u7121\u6CD5\u62C6\u6210\u6B04\u4F4D\u8A2D\u5B9A\uFF0C\u5DF2\u539F\u6A23\u5B58\u5165 uri\uFF1B\u5E33\u5BC6\u5C07\u660E\u6587\u5B58\u653E\u65BC\u8A2D\u5B9A\u6A94\u3002",
+    mongo_uri_reason_unix_socket: "\u4F7F\u7528 Unix domain socket\uFF08\u672C\u6A5F\u901A\u8A0A\u7AEF\uFF09",
     mongo_uri_reason_multi_host: "\u542B\u591A\u7D44 host\uFF08\u6B04\u4F4D\u8A2D\u5B9A\u53EA\u80FD\u8868\u9054\u4E00\u7D44\uFF09",
     mongo_uri_reason_secret_option: "\u542B\u6A5F\u5BC6 option\uFF08{keys}\uFF09\uFF0C\u62C6\u9032 options \u6703\u660E\u6587\u843D\u76E4",
     mongo_uri_reason_duplicate_key: "\u542B\u91CD\u8907\u7684 query \u9375\uFF08{keys}\uFF09\uFF08\u6B04\u4F4D\u8A2D\u5B9A\u6BCF\u500B\u9375\u53EA\u80FD\u5B58\u4E00\u500B\u503C\uFF09",
@@ -2200,6 +2207,61 @@ var messageLoader = MessageLoader.getInstance();
 var t = (key) => messageLoader.t(key);
 var t_vars = (key, vars) => messageLoader.interpolate(key, vars);
 
+// src/adapters/grant-redaction.ts
+var PRIVILEGES = new Set([
+  "ALL",
+  "ALL PRIVILEGES",
+  "ALTER",
+  "ALTER ROUTINE",
+  "BINLOG ADMIN",
+  "BINLOG MONITOR",
+  "BINLOG REPLAY",
+  "CONNECTION ADMIN",
+  "CREATE",
+  "CREATE ROUTINE",
+  "CREATE TABLESPACE",
+  "CREATE TEMPORARY TABLES",
+  "CREATE USER",
+  "CREATE VIEW",
+  "DELETE",
+  "DELETE HISTORY",
+  "DROP",
+  "EVENT",
+  "EXECUTE",
+  "FEDERATED ADMIN",
+  "FILE",
+  "GRANT OPTION",
+  "INDEX",
+  "INSERT",
+  "LOCK TABLES",
+  "PROCESS",
+  "READ ONLY ADMIN",
+  "RELOAD",
+  "REPLICATION CLIENT",
+  "REPLICATION MASTER ADMIN",
+  "REPLICATION SLAVE",
+  "REPLICATION SLAVE ADMIN",
+  "REFERENCES",
+  "SELECT",
+  "SET USER",
+  "SHOW CREATE ROUTINE",
+  "SHOW DATABASES",
+  "SHOW VIEW",
+  "SHUTDOWN",
+  "SLAVE MONITOR",
+  "SUPER",
+  "TRIGGER",
+  "UPDATE",
+  "USAGE"
+]);
+var RESOURCE_OPTIONS = new Set([
+  "MAX_QUERIES_PER_HOUR",
+  "MAX_UPDATES_PER_HOUR",
+  "MAX_CONNECTIONS_PER_HOUR",
+  "MAX_USER_CONNECTIONS",
+  "MAX_STATEMENT_TIME"
+]);
+
 // src/utils/case-fold.ts
 function foldCase(text) {
   const lowered = (text.includes("\u0130") ? text.replaceAll("\u0130", "i") : text).toLowerCase();
@@ -9928,6 +9990,15 @@ var DECLARATIONS = [
     permission: "query-only",
     requiresConnection: true
   },
+  {
+    id: "blacklist.read",
+    key: "blacklistRead",
+    command: "blacklist list",
+    description: "Read the configured table, column and key rules that hide sensitive data.",
+    permission: "query-only",
+    requiresConnection: false,
+    mutatesConfiguration: false
+  },
   {
     id: "blacklist.manage",
     key: "blacklist",
@@ -10242,6 +10313,7 @@ var COMMAND_SURFACE = Object.freeze({
     "delete",
     "export",
     "check",
+    "blacklist list",
     "inspect",
     "report",
     "guide",

package/gemini-extension.json

@@ -1,6 +1,6 @@
 {
   "name": "dbcli-agent",
-  "version": "11.0.0",
+  "version": "12.0.0",
   "description": "Database CLI skill and command reference for AI agents.",
   "contextFileName": "AGENTS.md"
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@carllee1983/dbcli",
-  "version": "11.0.0",
+  "version": "12.0.0",
   "description": "Database CLI for AI agents",
   "type": "module",
   "publishConfig": {

package/plugins/dbcli-agent/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "dbcli-agent",
-  "version": "11.0.0",
+  "version": "12.0.0",
   "description": "Database CLI skill and command reference for AI agents",
   "author": {
     "name": "Carl Lee",

package/plugins/dbcli-agent/skills/dbcli/reference.md

@@ -1868,8 +1868,11 @@ at execution time, and no human has agreed to anything. `admin` in a config file
 is a permission level, not a DBA sign-off.
 
 `schema.read` is available under `DBCLI_AGENT_MODE=1`, and `dbcli schema` runs
-there: storing the schema cache is not a configuration change. Agent mode still
-refuses every change to connection identity, permission and credentials.
+there: storing the schema cache is not a configuration change. `blacklist.read`
+(`blacklist list`) is available there too, so read-only Task Packs that inspect
+the blacklist can plan; `blacklist.manage`, which adds and removes rules, is
+refused. Agent mode still refuses every change to connection identity,
+permission and credentials.
 
 **Permission:** query-only+ (no connection is made)
 

package/skills/dbcli/reference.md

@@ -1868,8 +1868,11 @@ at execution time, and no human has agreed to anything. `admin` in a config file
 is a permission level, not a DBA sign-off.
 
 `schema.read` is available under `DBCLI_AGENT_MODE=1`, and `dbcli schema` runs
-there: storing the schema cache is not a configuration change. Agent mode still
-refuses every change to connection identity, permission and credentials.
+there: storing the schema cache is not a configuration change. `blacklist.read`
+(`blacklist list`) is available there too, so read-only Task Packs that inspect
+the blacklist can plan; `blacklist.manage`, which adds and removes rules, is
+refused. Agent mode still refuses every change to connection identity,
+permission and credentials.
 
 **Permission:** query-only+ (no connection is made)