@kweaver-ai/kweaver-sdk 0.5.1 → 0.5.2

package/dist/commands/dataview.d.ts

@@ -1 +1,8 @@
+/**
+ * Strip SQL line/block comments and leading whitespace, then return the first identifier token (lowercase).
+ * Used to reject DDL/DML passed to dataview query (server applies LIMIT semantics).
+ */
+export declare function getFirstSqlTokenAfterComments(sql: string): string;
+/** True if ad-hoc SQL is safe for dataview query (SELECT / WITH only). */
+export declare function isDataviewSelectLikeSql(sql: string): boolean;
 export declare function runDataviewCommand(args: string[]): Promise<number>;

package/dist/commands/dataview.js

@@ -3,6 +3,33 @@ import { ensureValidToken, formatHttpError, with401RefreshRetry } from "../auth/
 import { deleteDataView, findDataView, getDataView, listDataViews, queryDataView, } from "../api/dataviews.js";
 import { formatCallOutput } from "./call.js";
 import { resolveBusinessDomain } from "../config/store.js";
+/**
+ * Strip SQL line/block comments and leading whitespace, then return the first identifier token (lowercase).
+ * Used to reject DDL/DML passed to dataview query (server applies LIMIT semantics).
+ */
+export function getFirstSqlTokenAfterComments(sql) {
+    let s = sql.replace(/\/\*[\s\S]*?\*\//g, " ");
+    const lines = s.split("\n").map((line) => {
+        const idx = line.indexOf("--");
+        return idx >= 0 ? line.slice(0, idx) : line;
+    });
+    s = lines.join("\n");
+    s = s.replace(/\s+/g, " ").trim();
+    if (!s)
+        return "";
+    const match = /^([a-zA-Z_][a-zA-Z0-9_]*|"(?:[^"]|"")*")/.exec(s);
+    if (!match)
+        return "";
+    const tok = match[1];
+    if (tok.startsWith('"'))
+        return tok.slice(1, -1).replace(/""/g, '"').toLowerCase();
+    return tok.toLowerCase();
+}
+/** True if ad-hoc SQL is safe for dataview query (SELECT / WITH only). */
+export function isDataviewSelectLikeSql(sql) {
+    const kw = getFirstSqlTokenAfterComments(sql);
+    return kw === "select" || kw === "with";
+}
 function confirmYes(prompt) {
     return new Promise((resolve) => {
         const rl = createInterface({ input: process.stdin, output: process.stdout });
@@ -27,7 +54,7 @@ Subcommands:
 
   list  — list all data views (no keyword search)
   find  — search by name; default fuzzy, --exact for strict match, --wait to poll
-  query — run SQL query against a data view (mdl-uniquery); omit --sql to use view default SQL`);
+  query — run SQL query against a data view (mdl-uniquery); omit --sql to use view default SQL; only SELECT/WITH unless --raw-sql`);
         return 0;
     }
     const dispatch = () => {
@@ -214,8 +241,9 @@ async function runDataviewQueryCommand(args) {
     let limit = 50;
     let offset = 0;
     let needTotal = false;
+    let rawSql = false;
     if (args.length === 0 || args[0].startsWith("-")) {
-        console.error("Usage: kweaver dataview query <id> [--sql <sql>] [--limit <n>] [--offset <n>] [--need-total] [-bd value] [--pretty]");
+        console.error("Usage: kweaver dataview query <id> [--sql <sql>] [--limit <n>] [--offset <n>] [--need-total] [--raw-sql] [-bd value] [--pretty]");
         return 1;
     }
     const id = args[0];
@@ -228,6 +256,10 @@ async function runDataviewQueryCommand(args) {
         }
         if (arg === "--pretty")
             continue;
+        if (arg === "--raw-sql") {
+            rawSql = true;
+            continue;
+        }
         if ((arg === "--sql" || arg === "-s") && tail[i + 1]) {
             sql = tail[++i];
             continue;
@@ -249,6 +281,10 @@ async function runDataviewQueryCommand(args) {
             continue;
         }
     }
+    if (sql !== undefined && sql !== "" && !rawSql && !isDataviewSelectLikeSql(sql)) {
+        console.error("dataview query only supports SELECT statements (or WITH for CTEs). Use --raw-sql to send other SQL at your own risk.");
+        return 1;
+    }
     const token = await ensureValidToken();
     const result = await queryDataView({
         baseUrl: token.baseUrl,

package/dist/commands/ds.d.ts

@@ -11,6 +11,7 @@ export declare function parseImportCsvArgs(args: string[]): {
     tablePrefix: string;
     batchSize: number;
     businessDomain: string;
+    recreate: boolean;
 };
 export declare function resolveFiles(pattern: string): Promise<string[]>;
 export interface ImportCsvResult {

package/dist/commands/ds.js

@@ -306,6 +306,7 @@ Options:
   --files <s>          CSV file paths (comma-separated or glob pattern, required)
   --table-prefix <s>   Table name prefix (default: none)
   --batch-size <n>     Rows per batch (default: 500, range: 1-10000)
+  --recreate           First batch uses overwrite (drop/recreate table) then append; use when schema changed
   -bd, --biz-domain    Business domain (default: bd_public)`;
 export function parseImportCsvArgs(args) {
     let datasourceId = "";
@@ -313,6 +314,7 @@ export function parseImportCsvArgs(args) {
     let tablePrefix = "";
     let batchSize = 500;
     let businessDomain = "";
+    let recreate = false;
     for (let i = 0; i < args.length; i += 1) {
         const arg = args[i];
         if (arg === "--help" || arg === "-h")
@@ -321,6 +323,10 @@ export function parseImportCsvArgs(args) {
             files = args[++i];
             continue;
         }
+        if (arg === "--recreate") {
+            recreate = true;
+            continue;
+        }
         if (arg === "--table-prefix" && args[i + 1]) {
             tablePrefix = args[++i];
             continue;
@@ -343,7 +349,7 @@ export function parseImportCsvArgs(args) {
     }
     if (!businessDomain)
         businessDomain = resolveBusinessDomain();
-    return { datasourceId, files, tablePrefix, batchSize, businessDomain };
+    return { datasourceId, files, tablePrefix, batchSize, businessDomain, recreate };
 }
 export async function resolveFiles(pattern) {
     const parts = pattern.split(",").map((p) => p.trim()).filter(Boolean);
@@ -446,6 +452,7 @@ export async function runDsImportCsv(args) {
                 tableExist,
                 data: batch,
                 fieldMappings,
+                recreate: options.recreate,
             });
             const t0 = Date.now();
             process.stderr.write(`[${tableName}] batch ${batchLabel} (${rowCount} rows)... `);

package/dist/commands/import-csv.d.ts

@@ -19,6 +19,8 @@ export interface DagBodyOptions {
     tableExist: boolean;
     data: Array<Record<string, string | null>>;
     fieldMappings: FieldMapping[];
+    /** When true on the first batch (`tableExist` false), use overwrite to drop/recreate table before import. */
+    recreate?: boolean;
 }
 /**
  * Read a CSV file and return its headers and rows.

package/dist/commands/import-csv.js

@@ -80,8 +80,9 @@ export function buildFieldMappings(headers) {
  * The DAG has two steps: a manual trigger and the database write.
  */
 export function buildDagBody(options) {
-    const { datasourceId, datasourceType, tableName, tableExist, data, fieldMappings } = options;
+    const { datasourceId, datasourceType, tableName, tableExist, data, fieldMappings, recreate } = options;
     const ts = Date.now();
+    const operateType = tableExist ? "append" : recreate ? "overwrite" : "append";
     const triggerStep = {
         id: "step-trigger",
         title: "Trigger",
@@ -97,7 +98,7 @@ export function buildDagBody(options) {
             datasource_id: datasourceId,
             table_name: tableName,
             table_exist: tableExist,
-            operate_type: "append",
+            operate_type: operateType,
             data,
             sync_model_fields: fieldMappings,
         },

package/dist/commands/skill.d.ts

@@ -0,0 +1,26 @@
+import { type SkillStatus } from "../api/skills.js";
+interface BaseOptions {
+    businessDomain: string;
+    pretty: boolean;
+}
+interface ListOptions extends BaseOptions {
+    page: number;
+    pageSize: number;
+    all: boolean;
+    name?: string;
+    source?: string;
+    status?: SkillStatus;
+    createUser?: string;
+    sortBy?: "create_time" | "update_time" | "name";
+    sortOrder?: "asc" | "desc";
+}
+interface RegisterOptions extends BaseOptions {
+    contentFile?: string;
+    zipFile?: string;
+    source?: string;
+    extendInfo?: Record<string, unknown>;
+}
+export declare function parseSkillListArgs(args: string[]): ListOptions;
+export declare function parseSkillRegisterArgs(args: string[]): RegisterOptions;
+export declare function runSkillCommand(args: string[]): Promise<number>;
+export {};