@deepnote/database-integrations 1.4.1 → 1.4.3

package/dist/index.js

@@ -299,12 +299,12 @@ const commonIntegrationConfig = z$1.object({
 const databaseIntegrationConfigSchema = z$1.discriminatedUnion("type", [
 	commonIntegrationConfig.extend({
 		type: z$1.literal("alloydb"),
-		metadata: databaseMetadataSchemasByType["alloydb"],
+		metadata: databaseMetadataSchemasByType.alloydb,
 		federated_auth_method: z$1.null().optional()
 	}),
 	commonIntegrationConfig.extend({
 		type: z$1.literal("athena"),
-		metadata: databaseMetadataSchemasByType["athena"],
+		metadata: databaseMetadataSchemasByType.athena,
 		federated_auth_method: z$1.null().optional()
 	}),
 	commonIntegrationConfig.extend({
@@ -314,42 +314,42 @@ const databaseIntegrationConfigSchema = z$1.discriminatedUnion("type", [
 	}),
 	commonIntegrationConfig.extend({
 		type: z$1.literal("clickhouse"),
-		metadata: databaseMetadataSchemasByType["clickhouse"],
+		metadata: databaseMetadataSchemasByType.clickhouse,
 		federated_auth_method: z$1.null().optional()
 	}),
 	commonIntegrationConfig.extend({
 		type: z$1.literal("databricks"),
-		metadata: databaseMetadataSchemasByType["databricks"],
+		metadata: databaseMetadataSchemasByType.databricks,
 		federated_auth_method: z$1.null().optional()
 	}),
 	commonIntegrationConfig.extend({
 		type: z$1.literal("dremio"),
-		metadata: databaseMetadataSchemasByType["dremio"],
+		metadata: databaseMetadataSchemasByType.dremio,
 		federated_auth_method: z$1.null().optional()
 	}),
 	commonIntegrationConfig.extend({
 		type: z$1.literal("mariadb"),
-		metadata: databaseMetadataSchemasByType["mariadb"],
+		metadata: databaseMetadataSchemasByType.mariadb,
 		federated_auth_method: z$1.null().optional()
 	}),
 	commonIntegrationConfig.extend({
 		type: z$1.literal("materialize"),
-		metadata: databaseMetadataSchemasByType["materialize"],
+		metadata: databaseMetadataSchemasByType.materialize,
 		federated_auth_method: z$1.null().optional()
 	}),
 	commonIntegrationConfig.extend({
 		type: z$1.literal("mindsdb"),
-		metadata: databaseMetadataSchemasByType["mindsdb"],
+		metadata: databaseMetadataSchemasByType.mindsdb,
 		federated_auth_method: z$1.null().optional()
 	}),
 	commonIntegrationConfig.extend({
 		type: z$1.literal("mongodb"),
-		metadata: databaseMetadataSchemasByType["mongodb"],
+		metadata: databaseMetadataSchemasByType.mongodb,
 		federated_auth_method: z$1.null().optional()
 	}),
 	commonIntegrationConfig.extend({
 		type: z$1.literal("mysql"),
-		metadata: databaseMetadataSchemasByType["mysql"],
+		metadata: databaseMetadataSchemasByType.mysql,
 		federated_auth_method: z$1.null().optional()
 	}),
 	commonIntegrationConfig.extend({
@@ -359,12 +359,12 @@ const databaseIntegrationConfigSchema = z$1.discriminatedUnion("type", [
 	}),
 	commonIntegrationConfig.extend({
 		type: z$1.literal("pgsql"),
-		metadata: databaseMetadataSchemasByType["pgsql"],
+		metadata: databaseMetadataSchemasByType.pgsql,
 		federated_auth_method: z$1.null().optional()
 	}),
 	commonIntegrationConfig.extend({
 		type: z$1.literal("redshift"),
-		metadata: databaseMetadataSchemasByType["redshift"],
+		metadata: databaseMetadataSchemasByType.redshift,
 		federated_auth_method: z$1.enum([
 			"username-and-password",
 			"iam-role",
@@ -373,7 +373,7 @@ const databaseIntegrationConfigSchema = z$1.discriminatedUnion("type", [
 	}),
 	commonIntegrationConfig.extend({
 		type: z$1.literal("snowflake"),
-		metadata: databaseMetadataSchemasByType["snowflake"],
+		metadata: databaseMetadataSchemasByType.snowflake,
 		federated_auth_method: z$1.enum([
 			"okta",
 			"snowflake",
@@ -385,7 +385,7 @@ const databaseIntegrationConfigSchema = z$1.discriminatedUnion("type", [
 	}),
 	commonIntegrationConfig.extend({
 		type: z$1.literal("spanner"),
-		metadata: databaseMetadataSchemasByType["spanner"],
+		metadata: databaseMetadataSchemasByType.spanner,
 		federated_auth_method: z$1.null().optional()
 	}),
 	commonIntegrationConfig.extend({
@@ -395,7 +395,7 @@ const databaseIntegrationConfigSchema = z$1.discriminatedUnion("type", [
 	}),
 	commonIntegrationConfig.extend({
 		type: z$1.literal("trino"),
-		metadata: databaseMetadataSchemasByType["trino"],
+		metadata: databaseMetadataSchemasByType.trino,
 		federated_auth_method: z$1.enum(["trino-oauth", "password"]).optional().nullable()
 	})
 ]);
@@ -701,6 +701,7 @@ const getTrinoEnvVars = (integrationId, metadata, projectRootDirectory) => {
 	return {
 		url: `trino://${encodeURIComponent(metadata.user)}:${encodeURIComponent(metadata.password)}@${metadata.host}:${metadata.port}/${encodeURIComponent(metadata.database)}`,
 		params: { connect_args: {
+			client_tags: ["deepnote/toolkit"],
 			...metadata.sslEnabled ? { http_scheme: "https" } : {},
 			...metadata.caCertificateName ? { verify: getCACertificatePath({
 				projectRoot: projectRootDirectory,
@@ -874,4 +875,61 @@ function isDatabaseIntegrationTypeWithSslSupport(type) {
 }
 
 //#endregion
-export { AwsAuthMethods, BigQueryAuthMethods, BigQueryServiceAccountParseError, DatabaseAuthMethods, SnowflakeAuthMethods, SpannerServiceAccountParseError, TrinoAuthMethods, databaseIntegrationConfigSchema, databaseIntegrationTypes, databaseIntegrationTypesWithSslSupport, databaseMetadataSchemasByType, federatedAuthMethods, getEnvironmentVariablesForIntegrations, getSnowflakeFederatedAuthSqlAlchemyInput, getSqlAlchemyInput, isDatabaseIntegrationType, isDatabaseIntegrationTypeWithSslSupport, isFederatedAuthMetadata, isFederatedAuthMethod, isSqlIntegrationType, sqlIntegrationTypes };
+//#region src/secret-field-paths.ts
+/**
+* All secret fields for each integration type.
+* This includes all possible secret fields regardless of auth method.
+*
+* Note: For integrations with multiple auth methods (e.g., snowflake, bigquery),
+* this includes all secret fields from all auth variants.
+*/
+const SECRET_PATHS = {
+	alloydb: ["password", "caCertificateText"],
+	mariadb: ["password", "caCertificateText"],
+	materialize: ["password", "caCertificateText"],
+	mindsdb: ["password", "caCertificateText"],
+	mysql: ["password", "caCertificateText"],
+	pgsql: ["password", "caCertificateText"],
+	"sql-server": ["password"],
+	clickhouse: ["password", "caCertificateText"],
+	databricks: ["token"],
+	dremio: ["token"],
+	athena: ["secret_access_key"],
+	spanner: ["service_account"],
+	mongodb: [
+		"password",
+		"connection_string",
+		"rawConnectionString",
+		"caCertificateText"
+	],
+	"pandas-dataframe": [],
+	"big-query": ["service_account", "clientSecret"],
+	snowflake: [
+		"password",
+		"clientSecret",
+		"privateKey",
+		"privateKeyPassphrase"
+	],
+	redshift: ["password", "caCertificateText"],
+	trino: [
+		"password",
+		"clientSecret",
+		"caCertificateText"
+	]
+};
+/**
+* Get the list of secret field paths for a given integration type.
+*
+* @param type - The integration type (e.g., 'pgsql', 'snowflake')
+* @returns Array of field names that contain secrets
+*
+* @example
+* getSecretFieldPaths('pgsql') // => ['password', 'caCertificateText']
+* getSecretFieldPaths('snowflake') // => ['password', 'clientSecret', 'privateKey', 'privateKeyPassphrase']
+*/
+function getSecretFieldPaths(type) {
+	return SECRET_PATHS[type] ?? [];
+}
+
+//#endregion
+export { AwsAuthMethods, BigQueryAuthMethods, BigQueryServiceAccountParseError, DatabaseAuthMethods, SnowflakeAuthMethods, SpannerServiceAccountParseError, TrinoAuthMethods, databaseIntegrationConfigSchema, databaseIntegrationTypes, databaseIntegrationTypesWithSslSupport, databaseMetadataSchemasByType, federatedAuthMethods, getEnvironmentVariablesForIntegrations, getSecretFieldPaths, getSnowflakeFederatedAuthSqlAlchemyInput, getSqlAlchemyInput, isDatabaseIntegrationType, isDatabaseIntegrationTypeWithSslSupport, isFederatedAuthMetadata, isFederatedAuthMethod, isSqlIntegrationType, sqlIntegrationTypes };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@deepnote/database-integrations",
-  "version": "1.4.1",
+  "version": "1.4.3",
   "description": "Deepnote database integration definitions",
   "keywords": [],
   "repository": {