@carllee1983/dbcli 9.0.0 → 9.1.1

package/dist/cli.mjs

@@ -3,7 +3,7 @@
 // package.json
 var package_default = {
   name: "@carllee1983/dbcli",
-  version: "9.0.0",
+  version: "9.1.1",
   description: "Database CLI for AI agents",
   type: "module",
   publishConfig: {
@@ -89,9 +89,10 @@ var package_default = {
     "core-stdout:check": "bun run scripts/check-core-no-stdout.ts",
     "plan:check": "bun run scripts/check-plan-acceptance.ts",
     "forgeflow:check": "bun run scripts/check-forgeflow-adoption.ts && bun run scripts/check-forgeflow-handoff.ts",
+    "forgeflow:contract": "bun run scripts/check-forgeflow-contract.ts",
     typecheck: "tsc --noEmit --pretty false",
     "typecheck:tests": "tsc --noEmit --pretty false -p tsconfig.tests.json",
-    "test:perf": "bun test ./tests/perf/*.bench.ts",
+    "test:perf": "bun test --timeout 30000 ./tests/perf/*.bench.ts",
     lint: "eslint src tests scripts --ext .ts --max-warnings=0",
     "format:check": "prettier --check .",
     format: "prettier --write .",

package/dist/core.d.ts

@@ -6,8 +6,8 @@ import { z } from 'zod';
  * Database adapter type definitions and interfaces
  * Defines the contract that all database adapters must implement
  */
-export type DatabaseSystem = "postgresql" | "mysql" | "mariadb" | "mongodb" | "redis" | "elasticsearch";
-type SqlDatabaseSystem = Extract<DatabaseSystem, "postgresql" | "mysql" | "mariadb">;
+export type DatabaseSystem = "postgresql" | "mysql" | "mariadb" | "sqlite" | "mongodb" | "redis" | "elasticsearch";
+type SqlDatabaseSystem = Extract<DatabaseSystem, "postgresql" | "mysql" | "mariadb" | "sqlite">;
 type SqlExecutionMode = "normal" | "native-read-only";
 type QueryableDatabaseSystem = Exclude<DatabaseSystem, SqlDatabaseSystem>;
 /**
@@ -26,6 +26,8 @@ export interface ConnectionOptions {
 	password: string;
 	/** Database name */
 	database: string;
+	/** SQLite database file path (required for SQLite connections, absent otherwise) */
+	file?: string;
 	/** MongoDB connection URI (optional, for MongoDB connections) */
 	uri?: string;
 	/** MongoDB auth database — used when building URI from host/port/user/password (default: 'admin') */
@@ -389,6 +391,27 @@ interface SqlConnectionConfig {
 		$env: string;
 	};
 }
+interface SqliteConnectionConfig {
+	system: "sqlite";
+	file: string | {
+		$env: string;
+	};
+	host: string | {
+		$env: string;
+	};
+	port: number | {
+		$env: string;
+	};
+	user: string | {
+		$env: string;
+	};
+	password: string | {
+		$env: string;
+	};
+	database: string | {
+		$env: string;
+	};
+}
 interface MongoDBConnectionConfig {
 	system: "mongodb";
 	uri?: string | {
@@ -467,7 +490,7 @@ interface ElasticsearchConnectionConfig {
 	caPath?: string;
 	rejectUnauthorized?: boolean;
 }
-type ConnectionConfig = SqlConnectionConfig | MongoDBConnectionConfig | RedisConnectionConfig | ElasticsearchConnectionConfig;
+type ConnectionConfig = SqlConnectionConfig | SqliteConnectionConfig | MongoDBConnectionConfig | RedisConnectionConfig | ElasticsearchConnectionConfig;
 /**
  * Permission level (coarse-grained access control)
  */
@@ -544,7 +567,8 @@ export interface QueryResult<T> {
 declare const SQL_DIALECTS: readonly [
 	"postgresql",
 	"mysql",
-	"mariadb"
+	"mariadb",
+	"sqlite"
 ];
 type SqlDialect = (typeof SQL_DIALECTS)[number];
 export declare class BlacklistManager {
@@ -635,9 +659,40 @@ export declare class BlacklistManager {
 	 */
 	getState(): BlacklistState;
 }
+interface MaskingCost {
+	/** Rows walked to collect the column names present. */
+	readonly rowsScanned: number;
+	/** Own property names read during that pass. */
+	readonly keysScanned: number;
+	/** Blacklist rules considered against the result. */
+	readonly ruleEvaluations: number;
+	/** Rules whose dotted path had to be split into segments. */
+	readonly pathSplits: number;
+	/**
+	 * Rows a literal dotted rule descended into.
+	 *
+	 * The regression this exists for: deciding once for the whole result set
+	 * whether recursion is needed puts every row on this path, where deciding per
+	 * rule leaves it at zero for a rule whose head is never an object.
+	 */
+	readonly nestedProbeRows: number;
+	/** Rows the nested wildcard walk descended into. */
+	readonly nestedGlobRows: number;
+	/**
+	 * Nested wildcard *rules* found to match.
+	 *
+	 * The regression this exists for: collecting matched keys instead of matched
+	 * rules made the removal pass rebuild each record once per key per row — 200
+	 * rows of 20 row-specific keys measured 1.8s. One rule that hits a different
+	 * key in every row is one entry here, not one per row.
+	 */
+	readonly nestedGlobMatches: number;
+}
 interface FilterColumnsResult {
 	filteredRows: Record<string, unknown>[];
 	omittedColumns: string[];
+	/** See {@link MaskingCost}. */
+	cost: MaskingCost;
 	/**
 	 * Whether a caller-supplied field path is covered by what was omitted.
 	 *
@@ -852,6 +907,119 @@ declare const DbcliConfigSchema: z.ZodObject<{
 			timeout?: number | undefined;
 			statementTimeout?: number | undefined;
 		}>,
+		z.ZodObject<{
+			timeout: z.ZodOptional<z.ZodNumber>;
+			statementTimeout: z.ZodOptional<z.ZodNumber>;
+			system: z.ZodLiteral<"sqlite">;
+			file: z.ZodEffects<z.ZodUnion<[
+				z.ZodString,
+				z.ZodObject<{
+					$env: z.ZodString;
+				}, "strict", z.ZodTypeAny, {
+					$env: string;
+				}, {
+					$env: string;
+				}>
+			]>, string | {
+				$env: string;
+			}, string | {
+				$env: string;
+			}>;
+			host: z.ZodDefault<z.ZodOptional<z.ZodUnion<[
+				z.ZodString,
+				z.ZodObject<{
+					$env: z.ZodString;
+				}, "strict", z.ZodTypeAny, {
+					$env: string;
+				}, {
+					$env: string;
+				}>
+			]>>>;
+			port: z.ZodDefault<z.ZodOptional<z.ZodUnion<[
+				z.ZodNumber,
+				z.ZodObject<{
+					$env: z.ZodString;
+				}, "strict", z.ZodTypeAny, {
+					$env: string;
+				}, {
+					$env: string;
+				}>
+			]>>>;
+			user: z.ZodDefault<z.ZodOptional<z.ZodUnion<[
+				z.ZodString,
+				z.ZodObject<{
+					$env: z.ZodString;
+				}, "strict", z.ZodTypeAny, {
+					$env: string;
+				}, {
+					$env: string;
+				}>
+			]>>>;
+			password: z.ZodDefault<z.ZodOptional<z.ZodUnion<[
+				z.ZodString,
+				z.ZodObject<{
+					$env: z.ZodString;
+				}, "strict", z.ZodTypeAny, {
+					$env: string;
+				}, {
+					$env: string;
+				}>
+			]>>>;
+			database: z.ZodDefault<z.ZodOptional<z.ZodUnion<[
+				z.ZodString,
+				z.ZodObject<{
+					$env: z.ZodString;
+				}, "strict", z.ZodTypeAny, {
+					$env: string;
+				}, {
+					$env: string;
+				}>
+			]>>>;
+		}, "strip", z.ZodTypeAny, {
+			password: string | {
+				$env: string;
+			};
+			system: "sqlite";
+			host: string | {
+				$env: string;
+			};
+			port: number | {
+				$env: string;
+			};
+			user: string | {
+				$env: string;
+			};
+			database: string | {
+				$env: string;
+			};
+			file: string | {
+				$env: string;
+			};
+			timeout?: number | undefined;
+			statementTimeout?: number | undefined;
+		}, {
+			system: "sqlite";
+			file: string | {
+				$env: string;
+			};
+			password?: string | {
+				$env: string;
+			} | undefined;
+			host?: string | {
+				$env: string;
+			} | undefined;
+			port?: number | {
+				$env: string;
+			} | undefined;
+			user?: string | {
+				$env: string;
+			} | undefined;
+			database?: string | {
+				$env: string;
+			} | undefined;
+			timeout?: number | undefined;
+			statementTimeout?: number | undefined;
+		}>,
 		z.ZodObject<{
 			timeout: z.ZodOptional<z.ZodNumber>;
 			statementTimeout: z.ZodOptional<z.ZodNumber>;
@@ -1422,6 +1590,28 @@ declare const DbcliConfigSchema: z.ZodObject<{
 		};
 		timeout?: number | undefined;
 		statementTimeout?: number | undefined;
+	} | {
+		password: string | {
+			$env: string;
+		};
+		system: "sqlite";
+		host: string | {
+			$env: string;
+		};
+		port: number | {
+			$env: string;
+		};
+		user: string | {
+			$env: string;
+		};
+		database: string | {
+			$env: string;
+		};
+		file: string | {
+			$env: string;
+		};
+		timeout?: number | undefined;
+		statementTimeout?: number | undefined;
 	} | {
 		password: string | {
 			$env: string;
@@ -1533,6 +1723,28 @@ declare const DbcliConfigSchema: z.ZodObject<{
 		} | undefined;
 		timeout?: number | undefined;
 		statementTimeout?: number | undefined;
+	} | {
+		system: "sqlite";
+		file: string | {
+			$env: string;
+		};
+		password?: string | {
+			$env: string;
+		} | undefined;
+		host?: string | {
+			$env: string;
+		} | undefined;
+		port?: number | {
+			$env: string;
+		} | undefined;
+		user?: string | {
+			$env: string;
+		} | undefined;
+		database?: string | {
+			$env: string;
+		} | undefined;
+		timeout?: number | undefined;
+		statementTimeout?: number | undefined;
 	} | {
 		system: "redis";
 		host: string | {
@@ -1729,6 +1941,134 @@ declare const DbcliConfigV2Schema: z.ZodEffects<z.ZodObject<{
 			envFile?: string | undefined;
 			environment?: string | undefined;
 		}>,
+		z.ZodObject<{
+			timeout: z.ZodOptional<z.ZodNumber>;
+			statementTimeout: z.ZodOptional<z.ZodNumber>;
+			system: z.ZodLiteral<"sqlite">;
+			file: z.ZodEffects<z.ZodUnion<[
+				z.ZodString,
+				z.ZodObject<{
+					$env: z.ZodString;
+				}, "strict", z.ZodTypeAny, {
+					$env: string;
+				}, {
+					$env: string;
+				}>
+			]>, string | {
+				$env: string;
+			}, string | {
+				$env: string;
+			}>;
+			host: z.ZodDefault<z.ZodOptional<z.ZodUnion<[
+				z.ZodString,
+				z.ZodObject<{
+					$env: z.ZodString;
+				}, "strict", z.ZodTypeAny, {
+					$env: string;
+				}, {
+					$env: string;
+				}>
+			]>>>;
+			port: z.ZodDefault<z.ZodOptional<z.ZodUnion<[
+				z.ZodNumber,
+				z.ZodObject<{
+					$env: z.ZodString;
+				}, "strict", z.ZodTypeAny, {
+					$env: string;
+				}, {
+					$env: string;
+				}>
+			]>>>;
+			user: z.ZodDefault<z.ZodOptional<z.ZodUnion<[
+				z.ZodString,
+				z.ZodObject<{
+					$env: z.ZodString;
+				}, "strict", z.ZodTypeAny, {
+					$env: string;
+				}, {
+					$env: string;
+				}>
+			]>>>;
+			password: z.ZodDefault<z.ZodOptional<z.ZodUnion<[
+				z.ZodString,
+				z.ZodObject<{
+					$env: z.ZodString;
+				}, "strict", z.ZodTypeAny, {
+					$env: string;
+				}, {
+					$env: string;
+				}>
+			]>>>;
+			database: z.ZodDefault<z.ZodOptional<z.ZodUnion<[
+				z.ZodString,
+				z.ZodObject<{
+					$env: z.ZodString;
+				}, "strict", z.ZodTypeAny, {
+					$env: string;
+				}, {
+					$env: string;
+				}>
+			]>>>;
+		} & {
+			permission: z.ZodDefault<z.ZodEnum<[
+				"query-only",
+				"read-write",
+				"data-admin",
+				"admin"
+			]>>;
+			envFile: z.ZodOptional<z.ZodString>;
+			environment: z.ZodOptional<z.ZodEffects<z.ZodString, string | undefined, string>>;
+		}, "strip", z.ZodTypeAny, {
+			password: string | {
+				$env: string;
+			};
+			system: "sqlite";
+			host: string | {
+				$env: string;
+			};
+			port: number | {
+				$env: string;
+			};
+			user: string | {
+				$env: string;
+			};
+			database: string | {
+				$env: string;
+			};
+			file: string | {
+				$env: string;
+			};
+			permission: "admin" | "query-only" | "read-write" | "data-admin";
+			timeout?: number | undefined;
+			statementTimeout?: number | undefined;
+			envFile?: string | undefined;
+			environment?: string | undefined;
+		}, {
+			system: "sqlite";
+			file: string | {
+				$env: string;
+			};
+			password?: string | {
+				$env: string;
+			} | undefined;
+			host?: string | {
+				$env: string;
+			} | undefined;
+			port?: number | {
+				$env: string;
+			} | undefined;
+			user?: string | {
+				$env: string;
+			} | undefined;
+			database?: string | {
+				$env: string;
+			} | undefined;
+			timeout?: number | undefined;
+			permission?: "admin" | "query-only" | "read-write" | "data-admin" | undefined;
+			statementTimeout?: number | undefined;
+			envFile?: string | undefined;
+			environment?: string | undefined;
+		}>,
 		z.ZodObject<{
 			timeout: z.ZodOptional<z.ZodNumber>;
 			statementTimeout: z.ZodOptional<z.ZodNumber>;
@@ -2176,6 +2516,31 @@ declare const DbcliConfigV2Schema: z.ZodEffects<z.ZodObject<{
 		statementTimeout?: number | undefined;
 		envFile?: string | undefined;
 		environment?: string | undefined;
+	} | {
+		password: string | {
+			$env: string;
+		};
+		system: "sqlite";
+		host: string | {
+			$env: string;
+		};
+		port: number | {
+			$env: string;
+		};
+		user: string | {
+			$env: string;
+		};
+		database: string | {
+			$env: string;
+		};
+		file: string | {
+			$env: string;
+		};
+		permission: "admin" | "query-only" | "read-write" | "data-admin";
+		timeout?: number | undefined;
+		statementTimeout?: number | undefined;
+		envFile?: string | undefined;
+		environment?: string | undefined;
 	} | {
 		password: string | {
 			$env: string;
@@ -2285,6 +2650,31 @@ declare const DbcliConfigV2Schema: z.ZodEffects<z.ZodObject<{
 		statementTimeout?: number | undefined;
 		envFile?: string | undefined;
 		environment?: string | undefined;
+	} | {
+		password: string | {
+			$env: string;
+		};
+		system: "sqlite";
+		host: string | {
+			$env: string;
+		};
+		port: number | {
+			$env: string;
+		};
+		user: string | {
+			$env: string;
+		};
+		database: string | {
+			$env: string;
+		};
+		file: string | {
+			$env: string;
+		};
+		permission: "admin" | "query-only" | "read-write" | "data-admin";
+		timeout?: number | undefined;
+		statementTimeout?: number | undefined;
+		envFile?: string | undefined;
+		environment?: string | undefined;
 	} | {
 		password: string | {
 			$env: string;
@@ -2537,6 +2927,31 @@ declare const DbcliConfigV2Schema: z.ZodEffects<z.ZodObject<{
 		statementTimeout?: number | undefined;
 		envFile?: string | undefined;
 		environment?: string | undefined;
+	} | {
+		password: string | {
+			$env: string;
+		};
+		system: "sqlite";
+		host: string | {
+			$env: string;
+		};
+		port: number | {
+			$env: string;
+		};
+		user: string | {
+			$env: string;
+		};
+		database: string | {
+			$env: string;
+		};
+		file: string | {
+			$env: string;
+		};
+		permission: "admin" | "query-only" | "read-write" | "data-admin";
+		timeout?: number | undefined;
+		statementTimeout?: number | undefined;
+		envFile?: string | undefined;
+		environment?: string | undefined;
 	} | {
 		password: string | {
 			$env: string;
@@ -2706,6 +3121,31 @@ declare const DbcliConfigV2Schema: z.ZodEffects<z.ZodObject<{
 		statementTimeout?: number | undefined;
 		envFile?: string | undefined;
 		environment?: string | undefined;
+	} | {
+		password: string | {
+			$env: string;
+		};
+		system: "sqlite";
+		host: string | {
+			$env: string;
+		};
+		port: number | {
+			$env: string;
+		};
+		user: string | {
+			$env: string;
+		};
+		database: string | {
+			$env: string;
+		};
+		file: string | {
+			$env: string;
+		};
+		permission: "admin" | "query-only" | "read-write" | "data-admin";
+		timeout?: number | undefined;
+		statementTimeout?: number | undefined;
+		envFile?: string | undefined;
+		environment?: string | undefined;
 	} | {
 		password: string | {
 			$env: string;
@@ -2893,7 +3333,7 @@ export declare class DataExecutor {
 	private permission;
 	private dbSystem;
 	private blacklistValidator?;
-	constructor(adapter: DatabaseAdapter, permission: Permission, dbSystem?: "postgresql" | "mysql", blacklistValidator?: BlacklistValidator | undefined);
+	constructor(adapter: DatabaseAdapter, permission: Permission, dbSystem?: SqlDatabaseSystem, blacklistValidator?: BlacklistValidator | undefined);
 	/**
 	 * Build a parameterized INSERT SQL statement
 	 * Returns {sql, params} form to prevent SQL injection
@@ -3145,7 +3585,10 @@ export declare function detectConfigVersion(raw: unknown): 1 | 2;
 export interface ResolvedConnection {
 	name: string;
 	connection: {
-		system: "postgresql" | "mysql" | "mariadb" | "mongodb" | "redis" | "elasticsearch";
+		system: DatabaseSystem;
+		file?: string | {
+			$env: string;
+		};
 		host: string | {
 			$env: string;
 		};
@@ -3213,6 +3656,9 @@ export declare function listConnections(config: DbcliConfigV2): Array<{
 	uri?: string | {
 		$env: string;
 	};
+	file?: string | {
+		$env: string;
+	};
 	isDefault: boolean;
 }>;
 export type SqlSystem = "postgresql" | "mysql" | "mariadb";