@lightdash/warehouses 0.2606.0 → 0.2607.1

package/dist/warehouseClients/DuckdbWarehouseClient.d.ts

@@ -47,6 +47,10 @@ export declare class DuckdbWarehouseClient extends WarehouseBaseClient<CreatePos
     private getBindValues;
     private static logQueryProfile;
     private static getFieldsFromStreamResult;
+    private static stripSqlComments;
+    private static validateSqlFunctions;
+    private validateUserSql;
+    private validateInternalSql;
     streamQuery(sql: string, streamCallback: (data: WarehouseResults) => void | Promise<void>, options?: {
         values?: AnyType[];
         queryParams?: Record<string, AnyType>;

package/dist/warehouseClients/DuckdbWarehouseClient.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"DuckdbWarehouseClient.d.ts","sourceRoot":"","sources":["../../src/warehouseClients/DuckdbWarehouseClient.ts"],"names":[],"mappings":"AACA,OAAO,EACH,OAAO,EACP,yBAAyB,EACzB,aAAa,EACb,MAAM,EAGN,mBAAmB,EACnB,gBAAgB,EAChB,gBAAgB,EAEnB,MAAM,mBAAmB,CAAC;AAI3B,OAAO,mBAAmB,MAAM,uBAAuB,CAAC;AACxD,OAAO,uBAAuB,MAAM,2BAA2B,CAAC;AA2BhE,MAAM,MAAM,qBAAqB,GAAG;IAChC,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,OAAO,CAAC;IACxB,MAAM,EAAE,OAAO,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG;IAC/B,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG;IACvB,IAAI,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;CACvE,CAAC;AAEF,MAAM,MAAM,yBAAyB,GAAG;IACpC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,qBAAqB,CAAC;IACjC,cAAc,CAAC,EAAE,oBAAoB,CAAC;IACtC,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,MAAM,CAAC,EAAE,YAAY,CAAC;CACzB,CAAC;AAYF,eAAO,MAAM,sBAAsB,GAAI,QAAQ,MAAM,KAAG,aA+BvD,CAAC;AAEF,qBAAa,gBAAiB,SAAQ,uBAAuB;IACzD,cAAc,IAAI,mBAAmB;IAIrC,eAAe,IAAI,MAAM;IAIzB,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM;IAWjD,YAAY,CAAC,GAAG,IAAI,EAAE,MAAM,EAAE,GAAG,MAAM;CAG1C;AA4CD,mFAAmF;AACnF,wBAAgB,gCAAgC,IAAI,IAAI,CAIvD;AAED,qBAAa,qBAAsB,SAAQ,mBAAmB,CAAC,yBAAyB,CAAC;IACrF,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAS;IAEtC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAwB;IAElD,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAuB;IAEvD,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAS;IAEzC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAe;gBAE3B,IAAI,GAAE,yBAA8B;IAS1C,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAI5B,OAAO,CAAC,kBAAkB;YAQZ,gBAAgB;YAoBhB,WAAW;YAwCX,gBAAgB;IA6F9B,OAAO,CAAC,aAAa;mBA0BA,eAAe;IAoFpC,OAAO,CAAC,MAAM,CAAC,yBAAyB;IAalC,WAAW,CACb,GAAG,EAAE,MAAM,EACX,cAAc,EAAE,CAAC,IAAI,EAAE,gBAAgB,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,EAChE,OAAO,CAAC,EAAE;QACN,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC;QACnB,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACtC,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC9B,QAAQ,CAAC,EAAE,MAAM,CAAC;KACrB,GACF,OAAO,CAAC,IAAI,CAAC;IA0CV,iBAAiB,CACnB,GAAG,IAAI,EAAE,UAAU,CACf,mBAAmB,CAAC,yBAAyB,CAAC,CAAC,mBAAmB,CAAC,CACtE;;;;;;IA8BC,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAMlC,iBAAiB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;QAC1C,WAAW,EAAE,MAAM,CAAC;QACpB,OAAO,EAAE,MAAM,CAAC;QAChB,OAAO,EAAE,MAAM,CAAC;KACnB,CAAC;IAmBI,QAAQ,CACV,GAAG,IAAI,EAAE,UAAU,CACf,mBAAmB,CAAC,yBAAyB,CAAC,CAAC,UAAU,CAAC,CAC7D;;;;;;IAKC,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAIrB,UAAU,CACZ,OAAO,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,EAAE,GAC/D,OAAO,CAAC,gBAAgB,CAAC;IAMtB,YAAY,CACd,OAAO,CAAC,EAAE,MAAM,EAChB,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAC/B,OAAO,CACN;QACI,QAAQ,EAAE,MAAM,CAAC;QACjB,MAAM,EAAE,MAAM,CAAC;QACf,KAAK,EAAE,MAAM,CAAC;KACjB,EAAE,CACN;IAMK,SAAS,CACX,UAAU,EAAE,MAAM,EAClB,OAAO,CAAC,EAAE,MAAM,EAChB,SAAS,CAAC,EAAE,MAAM,EAClB,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAC/B,OAAO,CAAC,gBAAgB,CAAC;CAK/B"}
+{"version":3,"file":"DuckdbWarehouseClient.d.ts","sourceRoot":"","sources":["../../src/warehouseClients/DuckdbWarehouseClient.ts"],"names":[],"mappings":"AACA,OAAO,EACH,OAAO,EACP,yBAAyB,EACzB,aAAa,EACb,MAAM,EAGN,mBAAmB,EACnB,gBAAgB,EAChB,gBAAgB,EAEnB,MAAM,mBAAmB,CAAC;AAI3B,OAAO,mBAAmB,MAAM,uBAAuB,CAAC;AACxD,OAAO,uBAAuB,MAAM,2BAA2B,CAAC;AAsChE,MAAM,MAAM,qBAAqB,GAAG;IAChC,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,OAAO,CAAC;IACxB,MAAM,EAAE,OAAO,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG;IAC/B,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG;IACvB,IAAI,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;CACvE,CAAC;AAEF,MAAM,MAAM,yBAAyB,GAAG;IACpC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,qBAAqB,CAAC;IACjC,cAAc,CAAC,EAAE,oBAAoB,CAAC;IACtC,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,MAAM,CAAC,EAAE,YAAY,CAAC;CACzB,CAAC;AAYF,eAAO,MAAM,sBAAsB,GAAI,QAAQ,MAAM,KAAG,aA+BvD,CAAC;AAEF,qBAAa,gBAAiB,SAAQ,uBAAuB;IACzD,cAAc,IAAI,mBAAmB;IAIrC,eAAe,IAAI,MAAM;IAIzB,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM;IAWjD,YAAY,CAAC,GAAG,IAAI,EAAE,MAAM,EAAE,GAAG,MAAM;CAG1C;AA4CD,mFAAmF;AACnF,wBAAgB,gCAAgC,IAAI,IAAI,CAIvD;AAiBD,qBAAa,qBAAsB,SAAQ,mBAAmB,CAAC,yBAAyB,CAAC;IACrF,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAS;IAEtC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAwB;IAElD,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAuB;IAEvD,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAS;IAEzC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAe;gBAE3B,IAAI,GAAE,yBAA8B;IAS1C,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAI5B,OAAO,CAAC,kBAAkB;YAQZ,gBAAgB;YAoBhB,WAAW;YAwCX,gBAAgB;IA0F9B,OAAO,CAAC,aAAa;mBA0BA,eAAe;IAoFpC,OAAO,CAAC,MAAM,CAAC,yBAAyB;IAaxC,OAAO,CAAC,MAAM,CAAC,gBAAgB;IAM/B,OAAO,CAAC,MAAM,CAAC,oBAAoB;YAUrB,eAAe;YA8Bf,mBAAmB;IA6B3B,WAAW,CACb,GAAG,EAAE,MAAM,EACX,cAAc,EAAE,CAAC,IAAI,EAAE,gBAAgB,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,EAChE,OAAO,CAAC,EAAE;QACN,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC;QACnB,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACtC,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC9B,QAAQ,CAAC,EAAE,MAAM,CAAC;KACrB,GACF,OAAO,CAAC,IAAI,CAAC;IA4CV,iBAAiB,CACnB,GAAG,IAAI,EAAE,UAAU,CACf,mBAAmB,CAAC,yBAAyB,CAAC,CAAC,mBAAmB,CAAC,CACtE;;;;;;IA8BC,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAOlC,iBAAiB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;QAC1C,WAAW,EAAE,MAAM,CAAC;QACpB,OAAO,EAAE,MAAM,CAAC;QAChB,OAAO,EAAE,MAAM,CAAC;KACnB,CAAC;IAoBI,QAAQ,CACV,GAAG,IAAI,EAAE,UAAU,CACf,mBAAmB,CAAC,yBAAyB,CAAC,CAAC,UAAU,CAAC,CAC7D;;;;;;IAKC,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAIrB,UAAU,CACZ,OAAO,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,EAAE,GAC/D,OAAO,CAAC,gBAAgB,CAAC;IAMtB,YAAY,CACd,OAAO,CAAC,EAAE,MAAM,EAChB,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAC/B,OAAO,CACN;QACI,QAAQ,EAAE,MAAM,CAAC;QACjB,MAAM,EAAE,MAAM,CAAC;QACf,KAAK,EAAE,MAAM,CAAC;KACjB,EAAE,CACN;IAMK,SAAS,CACX,UAAU,EAAE,MAAM,EAClB,OAAO,CAAC,EAAE,MAAM,EAChB,SAAS,CAAC,EAAE,MAAM,EAClB,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAC/B,OAAO,CAAC,gBAAgB,CAAC;CAK/B"}

package/dist/warehouseClients/DuckdbWarehouseClient.js

@@ -115,6 +115,17 @@ function resetSharedDuckdbStateForTesting() {
     httpfsInstalled = false;
     cachesConfigured = false;
 }
+// DuckDB StatementType values — see duckdb/common/enums/statement_type.hpp
+const ALLOWED_STATEMENT_TYPES_USER_SQL = new Set([1 /* SELECT */]);
+const BLOCKED_STATEMENT_TYPES_INTERNAL_SQL = new Set([
+    12, // VARIABLE_SET
+    20, // SET
+    21, // LOAD
+    23, // EXTENSION (INSTALL)
+    25, // ATTACH
+    26, // DETACH
+]);
+const BLOCKED_FUNCTION_PATTERN = /\b(current_setting|duckdb_settings|duckdb_secrets)\s*\(/i;
 class DuckdbWarehouseClient extends WarehouseBaseClient_1.default {
     constructor(args = {}) {
         super(DUCKDB_INTERNAL_CREDENTIALS, new DuckdbSqlBuilder());
@@ -191,6 +202,12 @@ class DuckdbWarehouseClient extends WarehouseBaseClient_1.default {
             await db.run('SET enable_http_metadata_cache = true;');
             await db.run('SET enable_external_file_cache = true;');
             await db.run('SET parquet_metadata_cache = true;');
+            // Security: lock down after our extensions are installed/loaded
+            await db.run("SET disabled_filesystems = 'LocalFileSystem';");
+            await db.run('SET allow_community_extensions = false;');
+            await db.run('SET autoinstall_known_extensions = false;');
+            await db.run('SET autoload_known_extensions = false;');
+            await db.run('SET allow_unredacted_secrets = false;');
             cachesConfigured = true;
             if (this.bufferPoolSize) {
                 await db.run(`SET buffer_pool_size = '${this.bufferPoolSize}';`);
@@ -207,18 +224,24 @@ class DuckdbWarehouseClient extends WarehouseBaseClient_1.default {
             return;
         }
         const t2 = performance.now();
-        await db.run(`SET s3_endpoint = '${this.escapeString(this.s3Config.endpoint)}';`);
-        if (this.s3Config.region) {
-            await db.run(`SET s3_region = '${this.escapeString(this.s3Config.region)}';`);
-        }
-        if (this.s3Config.accessKey) {
-            await db.run(`SET s3_access_key_id = '${this.escapeString(this.s3Config.accessKey)}';`);
-        }
-        if (this.s3Config.secretKey) {
-            await db.run(`SET s3_secret_access_key = '${this.escapeString(this.s3Config.secretKey)}';`);
-        }
-        await db.run(`SET s3_use_ssl = ${this.s3Config.useSsl};`);
-        await db.run(`SET s3_url_style = '${this.s3Config.forcePathStyle ? 'path' : 'vhost'}';`);
+        const regionClause = this.s3Config.region
+            ? `REGION '${this.escapeString(this.s3Config.region)}',`
+            : '';
+        const keyIdClause = this.s3Config.accessKey
+            ? `KEY_ID '${this.escapeString(this.s3Config.accessKey)}',`
+            : '';
+        const secretClause = this.s3Config.secretKey
+            ? `SECRET '${this.escapeString(this.s3Config.secretKey)}',`
+            : '';
+        await db.run(`CREATE OR REPLACE SECRET __lightdash_s3 (
+            TYPE s3,
+            ${keyIdClause}
+            ${secretClause}
+            ENDPOINT '${this.escapeString(this.s3Config.endpoint)}',
+            ${regionClause}
+            URL_STYLE '${this.s3Config.forcePathStyle ? 'path' : 'vhost'}',
+            USE_SSL ${this.s3Config.useSsl}
+        );`);
         const s3ConfigMs = performance.now() - t2;
         this.logger?.info(`DuckDB bootstrap timing: install_httpfs=${Math.round(installMs)}ms load_httpfs=${Math.round(loadMs)}ms s3_config=${Math.round(s3ConfigMs)}ms`);
     }
@@ -307,6 +330,56 @@ class DuckdbWarehouseClient extends WarehouseBaseClient_1.default {
         }
         return fields;
     }
+    static stripSqlComments(sql) {
+        return sql
+            .replace(/--[^\n]*/g, '') // line comments
+            .replace(/\/\*[\s\S]*?\*\//g, ''); // block comments
+    }
+    static validateSqlFunctions(sql) {
+        const stripped = DuckdbWarehouseClient.stripSqlComments(sql);
+        const match = stripped.match(BLOCKED_FUNCTION_PATTERN);
+        if (match) {
+            throw new Error(`SQL validation error: function '${match[1]}' is not allowed`);
+        }
+    }
+    async validateUserSql(db, sql) {
+        const extracted = await db.extractStatements(sql);
+        if (extracted.count === 0) {
+            throw new Error('SQL validation error: empty SQL statement');
+        }
+        if (extracted.count > 1) {
+            throw new Error('SQL validation error: multiple SQL statements are not allowed');
+        }
+        const stmt = await extracted.prepare(0);
+        try {
+            if (!ALLOWED_STATEMENT_TYPES_USER_SQL.has(stmt.statementType)) {
+                throw new Error(`SQL validation error: only SELECT statements are allowed (got statement type ${stmt.statementType})`);
+            }
+        }
+        finally {
+            stmt.destroySync();
+        }
+        DuckdbWarehouseClient.validateSqlFunctions(sql);
+    }
+    async validateInternalSql(db, sql) {
+        const extracted = await db.extractStatements(sql);
+        if (extracted.count === 0) {
+            throw new Error('SQL validation error: empty SQL statement');
+        }
+        for (let i = 0; i < extracted.count; i += 1) {
+            // eslint-disable-next-line no-await-in-loop
+            const stmt = await extracted.prepare(i);
+            try {
+                if (BLOCKED_STATEMENT_TYPES_INTERNAL_SQL.has(stmt.statementType)) {
+                    throw new Error(`SQL validation error: statement type ${stmt.statementType} is not allowed in internal SQL`);
+                }
+            }
+            finally {
+                stmt.destroySync();
+            }
+        }
+        DuckdbWarehouseClient.validateSqlFunctions(sql);
+    }
     async streamQuery(sql, streamCallback, options) {
         await this.withSession(async (db) => {
             if (options?.timezone) {
@@ -319,6 +392,7 @@ class DuckdbWarehouseClient extends WarehouseBaseClient_1.default {
                 await db.run("PRAGMA enable_profiling='json';");
                 await db.run(`PRAGMA profiling_output='${profilePath}';`);
             }
+            await this.validateUserSql(db, sql);
             const result = await db.stream(this.getSQLWithMetadata(sql, options?.tags), this.getBindValues(options));
             const fields = DuckdbWarehouseClient.getFieldsFromStreamResult(result);
             // eslint-disable-next-line no-restricted-syntax
@@ -353,6 +427,7 @@ class DuckdbWarehouseClient extends WarehouseBaseClient_1.default {
     }
     async runSql(sql) {
         await this.withSession(async (db) => {
+            await this.validateInternalSql(db, sql);
             await db.run(sql);
         });
     }
@@ -361,6 +436,7 @@ class DuckdbWarehouseClient extends WarehouseBaseClient_1.default {
         let bootstrapMs = 0;
         let queryMs = 0;
         await this.withSession(async (db) => {
+            await this.validateInternalSql(db, sql);
             bootstrapMs = performance.now() - totalStart;
             const queryStart = performance.now();
             await db.run(sql);

package/dist/warehouseClients/DuckdbWarehouseClient.test.js

@@ -79,10 +79,18 @@ const getMockStreamResult = (chunks, columnTypeIds) => {
         },
     };
 };
-const createMockConnection = (streamMock, runMock = jest.fn()) => ({
+const createMockExtractStatements = (overrides) => jest.fn(async () => ({
+    count: overrides?.count ?? 1,
+    prepare: async () => ({
+        statementType: overrides?.statementType ?? 1, // SELECT
+        destroySync: jest.fn(),
+    }),
+}));
+const createMockConnection = (streamMock, runMock = jest.fn(), opts) => ({
     connect: async () => ({
         run: runMock,
         stream: streamMock,
+        extractStatements: opts?.extractStatements ?? createMockExtractStatements(),
         closeSync: jest.fn(),
         disconnectSync: jest.fn(),
     }),
@@ -219,8 +227,23 @@ describe('DuckdbWarehouseClient', () => {
         expect(runCalls).toContain('SET enable_http_metadata_cache = true;');
         expect(runCalls).toContain('SET enable_external_file_cache = true;');
         expect(runCalls).toContain('SET parquet_metadata_cache = true;');
-        expect(runCalls).toContain("SET s3_endpoint = 'localhost:9000';");
-        expect(runCalls).toContain("SET s3_region = 'us-east-1';");
+        expect(runCalls).toContain("SET disabled_filesystems = 'LocalFileSystem';");
+        expect(runCalls).toContain('SET allow_community_extensions = false;');
+        expect(runCalls).toContain('SET autoinstall_known_extensions = false;');
+        expect(runCalls).toContain('SET autoload_known_extensions = false;');
+        expect(runCalls).toContain('SET allow_unredacted_secrets = false;');
+        // S3 credentials should use CREATE SECRET, not individual SET commands
+        const createSecretCall = runCalls.find((call) => call.includes('CREATE OR REPLACE SECRET'));
+        expect(createSecretCall).toBeDefined();
+        expect(createSecretCall).toContain("ENDPOINT 'localhost:9000'");
+        expect(createSecretCall).toContain("KEY_ID 'key'");
+        expect(createSecretCall).toContain("SECRET 'secret'");
+        expect(createSecretCall).toContain("REGION 'us-east-1'");
+        expect(createSecretCall).toContain("URL_STYLE 'path'");
+        expect(createSecretCall).toContain('USE_SSL false');
+        // Should NOT use individual SET s3_* commands
+        const s3SetCalls = runCalls.filter((call) => call.startsWith('SET s3_'));
+        expect(s3SetCalls).toHaveLength(0);
         expect(runCalls).toContain("SET TimeZone = 'UTC';");
         expect(streamMock).toHaveBeenCalledTimes(1);
     });
@@ -269,4 +292,142 @@ describe('DuckdbWarehouseClient', () => {
             scanAmplification: 9905024 / 68,
         }));
     });
+    describe('SQL security validation', () => {
+        it('should reject SET statements', async () => {
+            const streamMock = jest.fn(async () => getMockStreamResult([[{ val: 1 }]], [DUCKDB_TYPE_IDS.INTEGER]));
+            createInstanceMock.mockResolvedValue(createMockConnection(streamMock, jest.fn(), {
+                extractStatements: createMockExtractStatements({
+                    statementType: 20, // SET
+                }),
+            }));
+            const client = new DuckdbWarehouseClient_1.DuckdbWarehouseClient();
+            await expect(client.runQuery("SET s3_endpoint = 'attacker.com'")).rejects.toThrow('SQL validation error: only SELECT statements are allowed');
+            expect(streamMock).not.toHaveBeenCalled();
+        });
+        it('should reject COPY statements', async () => {
+            const streamMock = jest.fn(async () => getMockStreamResult([[{ val: 1 }]], [DUCKDB_TYPE_IDS.INTEGER]));
+            createInstanceMock.mockResolvedValue(createMockConnection(streamMock, jest.fn(), {
+                extractStatements: createMockExtractStatements({
+                    statementType: 11, // COPY
+                }),
+            }));
+            const client = new DuckdbWarehouseClient_1.DuckdbWarehouseClient();
+            await expect(client.runQuery("COPY t TO '/tmp/data.csv'")).rejects.toThrow('SQL validation error: only SELECT statements are allowed');
+        });
+        it('should reject ATTACH statements', async () => {
+            const streamMock = jest.fn(async () => getMockStreamResult([[{ val: 1 }]], [DUCKDB_TYPE_IDS.INTEGER]));
+            createInstanceMock.mockResolvedValue(createMockConnection(streamMock, jest.fn(), {
+                extractStatements: createMockExtractStatements({
+                    statementType: 25, // ATTACH
+                }),
+            }));
+            const client = new DuckdbWarehouseClient_1.DuckdbWarehouseClient();
+            await expect(client.runQuery("ATTACH DATABASE 'file.db'")).rejects.toThrow('SQL validation error: only SELECT statements are allowed');
+        });
+        it('should reject multiple statements', async () => {
+            const streamMock = jest.fn(async () => getMockStreamResult([[{ val: 1 }]], [DUCKDB_TYPE_IDS.INTEGER]));
+            createInstanceMock.mockResolvedValue(createMockConnection(streamMock, jest.fn(), {
+                extractStatements: createMockExtractStatements({
+                    count: 2,
+                }),
+            }));
+            const client = new DuckdbWarehouseClient_1.DuckdbWarehouseClient();
+            await expect(client.runQuery('SELECT 1; DROP TABLE users')).rejects.toThrow('SQL validation error: multiple SQL statements are not allowed');
+        });
+        it('should reject queries with current_setting()', async () => {
+            const streamMock = jest.fn(async () => getMockStreamResult([[{ val: 1 }]], [DUCKDB_TYPE_IDS.INTEGER]));
+            createInstanceMock.mockResolvedValue(createMockConnection(streamMock));
+            const client = new DuckdbWarehouseClient_1.DuckdbWarehouseClient();
+            await expect(client.runQuery("SELECT current_setting('s3_secret_access_key')")).rejects.toThrow("SQL validation error: function 'current_setting' is not allowed");
+        });
+        it('should reject queries with duckdb_settings()', async () => {
+            const streamMock = jest.fn(async () => getMockStreamResult([[{ val: 1 }]], [DUCKDB_TYPE_IDS.INTEGER]));
+            createInstanceMock.mockResolvedValue(createMockConnection(streamMock));
+            const client = new DuckdbWarehouseClient_1.DuckdbWarehouseClient();
+            await expect(client.runQuery('SELECT * FROM duckdb_settings()')).rejects.toThrow("SQL validation error: function 'duckdb_settings' is not allowed");
+        });
+        it('should reject queries with duckdb_secrets()', async () => {
+            const streamMock = jest.fn(async () => getMockStreamResult([[{ val: 1 }]], [DUCKDB_TYPE_IDS.INTEGER]));
+            createInstanceMock.mockResolvedValue(createMockConnection(streamMock));
+            const client = new DuckdbWarehouseClient_1.DuckdbWarehouseClient();
+            await expect(client.runQuery('SELECT * FROM duckdb_secrets()')).rejects.toThrow("SQL validation error: function 'duckdb_secrets' is not allowed");
+        });
+        it('should ignore blocked functions inside SQL comments', async () => {
+            const streamMock = jest.fn(async () => getMockStreamResult([[{ val: 1 }]], [DUCKDB_TYPE_IDS.INTEGER]));
+            createInstanceMock.mockResolvedValue(createMockConnection(streamMock));
+            const client = new DuckdbWarehouseClient_1.DuckdbWarehouseClient();
+            // Should NOT throw because current_setting is in a comment
+            const result = await client.runQuery("SELECT 1 -- current_setting('s3_secret_access_key')");
+            expect(result.rows).toEqual([{ val: 1 }]);
+        });
+        it('should allow COPY statements in runSql', async () => {
+            const streamMock = jest.fn();
+            const runMock = jest.fn();
+            createInstanceMock.mockResolvedValue(createMockConnection(streamMock, runMock, {
+                extractStatements: createMockExtractStatements({
+                    statementType: 10, // COPY
+                }),
+            }));
+            const client = new DuckdbWarehouseClient_1.DuckdbWarehouseClient();
+            await client.runSql("COPY table TO 's3://bucket/data.parquet' (FORMAT PARQUET)");
+            expect(runMock).toHaveBeenCalledWith("COPY table TO 's3://bucket/data.parquet' (FORMAT PARQUET)");
+        });
+        it('should reject SET statements in runSql', async () => {
+            const streamMock = jest.fn();
+            const runMock = jest.fn();
+            createInstanceMock.mockResolvedValue(createMockConnection(streamMock, runMock, {
+                extractStatements: createMockExtractStatements({
+                    statementType: 20, // SET
+                }),
+            }));
+            const client = new DuckdbWarehouseClient_1.DuckdbWarehouseClient();
+            await expect(client.runSql("SET s3_endpoint = 'attacker.com'")).rejects.toThrow('SQL validation error: statement type 20 is not allowed in internal SQL');
+        });
+        it('should reject ATTACH statements in runSql', async () => {
+            const streamMock = jest.fn();
+            const runMock = jest.fn();
+            createInstanceMock.mockResolvedValue(createMockConnection(streamMock, runMock, {
+                extractStatements: createMockExtractStatements({
+                    statementType: 25, // ATTACH
+                }),
+            }));
+            const client = new DuckdbWarehouseClient_1.DuckdbWarehouseClient();
+            await expect(client.runSql("ATTACH DATABASE 'file.db'")).rejects.toThrow('SQL validation error: statement type 25 is not allowed in internal SQL');
+        });
+        it('should reject LOAD statements in runSql', async () => {
+            const streamMock = jest.fn();
+            const runMock = jest.fn();
+            createInstanceMock.mockResolvedValue(createMockConnection(streamMock, runMock, {
+                extractStatements: createMockExtractStatements({
+                    statementType: 21, // LOAD
+                }),
+            }));
+            const client = new DuckdbWarehouseClient_1.DuckdbWarehouseClient();
+            await expect(client.runSql("LOAD 'malicious_extension'")).rejects.toThrow('SQL validation error: statement type 21 is not allowed in internal SQL');
+        });
+        it('should reject introspection functions in runSql', async () => {
+            const streamMock = jest.fn();
+            const runMock = jest.fn();
+            createInstanceMock.mockResolvedValue(createMockConnection(streamMock, runMock));
+            const client = new DuckdbWarehouseClient_1.DuckdbWarehouseClient();
+            await expect(client.runSql("COPY (SELECT current_setting('s3_secret_access_key')) TO '/tmp/out.csv'")).rejects.toThrow("SQL validation error: function 'current_setting' is not allowed");
+        });
+        it('should allow valid SELECT queries', async () => {
+            const streamMock = jest.fn(async () => getMockStreamResult([[{ id: 1, name: 'test' }]], [DUCKDB_TYPE_IDS.INTEGER, DUCKDB_TYPE_IDS.VARCHAR]));
+            createInstanceMock.mockResolvedValue(createMockConnection(streamMock));
+            const client = new DuckdbWarehouseClient_1.DuckdbWarehouseClient();
+            const result = await client.runQuery('SELECT id, name FROM users WHERE id = 1');
+            expect(result.rows).toEqual([{ id: 1, name: 'test' }]);
+        });
+        it('should reject EXPLAIN statements', async () => {
+            const streamMock = jest.fn(async () => getMockStreamResult([[{ explain_value: 'plan output' }]], [DUCKDB_TYPE_IDS.VARCHAR]));
+            createInstanceMock.mockResolvedValue(createMockConnection(streamMock, jest.fn(), {
+                extractStatements: createMockExtractStatements({
+                    statementType: 4, // EXPLAIN
+                }),
+            }));
+            const client = new DuckdbWarehouseClient_1.DuckdbWarehouseClient();
+            await expect(client.runQuery('EXPLAIN SELECT * FROM users')).rejects.toThrow('SQL validation error: only SELECT statements are allowed');
+        });
+    });
 });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lightdash/warehouses",
-  "version": "0.2606.0",
+  "version": "0.2607.1",
   "description": "Warehouse connectors for Lightdash",
   "license": "MIT",
   "repository": {
@@ -26,7 +26,7 @@
     "snowflake-sdk": "~2.3.4",
     "ssh2": "^1.14.0",
     "trino-client": "0.2.9",
-    "@lightdash/common": "0.2606.0"
+    "@lightdash/common": "0.2607.1"
   },
   "devDependencies": {
     "@types/node-fetch": "^2.6.13",