@onequery/cli 0.1.64-win32-x64 → 0.1.65-darwin-arm64

package/package.json

@@ -1,6 +1,6 @@
 {
   "cpu": [
-    "x64"
+    "arm64"
   ],
   "bugs": {
     "url": "https://github.com/wordbricks/onequery/issues"
@@ -14,7 +14,7 @@
   "license": "Apache-2.0",
   "name": "@onequery/cli",
   "os": [
-    "win32"
+    "darwin"
   ],
   "publishConfig": {
     "access": "public"
@@ -24,5 +24,5 @@
     "url": "git+https://github.com/wordbricks/onequery.git",
     "directory": "apps/cli"
   },
-  "version": "0.1.64-win32-x64"
+  "version": "0.1.65-darwin-arm64"
 }

package/vendor/{x86_64-pc-windows-msvc → aarch64-apple-darwin}/server/onequery-server.mjs

@@ -128043,12 +128043,15 @@ function extractParsedQuery(statements, context) {
 	});
 	const metadataStatement = findReadOnlyMetadataStatement(statement, context);
 	if (metadataStatement) return G$5.ok({
+		metadataStatementDefinition: metadataStatement,
 		statement,
 		statementKind: metadataStatement.statementKind
 	});
 	return invalid("non_select_query", buildNonReadOnlyQueryError(context, getDeepestExpressionKind(statement) ?? "unknown"));
 }
 function validateReadOnlyQuery(parsedQuery, context) {
+	const metadataStatementViolation = findMetadataStatementViolation(parsedQuery);
+	if (metadataStatementViolation) return invalid("non_select_query", metadataStatementViolation);
 	const cteViolation = findCteViolation(parsedQuery.statement);
 	if (cteViolation) return invalid("cte_must_select", cteViolation);
 	const selectIntoViolation = findSelectIntoViolationInQuery(parsedQuery.statement, context.dbType);
@@ -128125,6 +128128,23 @@ function readFirstKeyword(context) {
 	const keyword = normalizeTokenText(tokenization.tokens.find((token) => normalizeTokenText(token).length > 0));
 	return keyword.length > 0 ? keyword : null;
 }
+function findMetadataStatementViolation(parsedQuery) {
+	if (parsedQuery.statementKind === "query") return null;
+	return parsedQuery.metadataStatementDefinition?.validateStatement?.(parsedQuery.statement) ?? null;
+}
+function findReadOnlySqlitePragmaViolation(expr) {
+	const pragma = getExpressionData(expr, "pragma");
+	if (!pragma) return ERRORS.unsafePragma;
+	const name = normalizeIdentifierName(pragma.name);
+	if (!name || !READ_ONLY_SQLITE_PRAGMA_NAMES.has(name)) return ERRORS.unsafePragma;
+	if (pragma.use_assignment_syntax === true || pragma.value !== null && pragma.value !== void 0) return ERRORS.unsafePragma;
+	const args = pragma.args ?? [];
+	if (!Array.isArray(args) || args.some((arg) => !isReadOnlySqlitePragmaArg(arg))) return ERRORS.unsafePragma;
+	return null;
+}
+function isReadOnlySqlitePragmaArg(value) {
+	return isExpression(value) && READ_ONLY_SQLITE_PRAGMA_ARG_KINDS.has(getExpressionKind(value));
+}
 function isCteQueryExpression(expr) {
 	const unwrapped = unwrapParenthesizedQuery(expr);
 	return Boolean(unwrapped && isTopLevelQueryExpression(unwrapped));
@@ -128222,7 +128242,7 @@ async function validateAndNormalizeReadOnlyQuery(sql, dbType) {
 		return finalizeSql(context);
 	});
 }
-var OUTFILE_ERROR, ERRORS, SqlValidationError, DIALECT_MAP, SIDE_EFFECTING_EXPRESSION_KINDS, POSTGRES_UNSAFE_FUNCTIONS, MYSQL_UNSAFE_FUNCTIONS, SNOWFLAKE_UNSAFE_FUNCTIONS, DEFAULT_READ_ONLY_METADATA_STATEMENTS, READ_ONLY_METADATA_STATEMENT_OVERRIDES;
+var OUTFILE_ERROR, ERRORS, SqlValidationError, DIALECT_MAP, SIDE_EFFECTING_EXPRESSION_KINDS, POSTGRES_UNSAFE_FUNCTIONS, MYSQL_UNSAFE_FUNCTIONS, SNOWFLAKE_UNSAFE_FUNCTIONS, DEFAULT_READ_ONLY_METADATA_STATEMENTS, READ_ONLY_METADATA_STATEMENT_OVERRIDES, READ_ONLY_SQLITE_PRAGMA_NAMES, READ_ONLY_SQLITE_PRAGMA_ARG_KINDS;
 var init_validate_sql = __esmMin((async () => {
 	await init_dist$1();
 	init_dist$4();
@@ -128230,6 +128250,7 @@ var init_validate_sql = __esmMin((async () => {
 	ERRORS = {
 		cteSelectOnly: "CTEs must only contain SELECT statements",
 		unsafeFunction: (name) => `Side-effecting SQL functions are not allowed: ${name}`,
+		unsafePragma: "Only read-only PRAGMA statements are allowed",
 		locking: "SELECT locking clauses are not allowed",
 		selectInto: "SELECT INTO is not allowed"
 	};
@@ -128416,7 +128437,26 @@ var init_validate_sql = __esmMin((async () => {
 			statementKind: "explain"
 		}
 	];
-	READ_ONLY_METADATA_STATEMENT_OVERRIDES = {};
+	READ_ONLY_METADATA_STATEMENT_OVERRIDES = { cloudflare_d1: [...DEFAULT_READ_ONLY_METADATA_STATEMENTS, {
+		allowOpaqueCommand: false,
+		displayName: "PRAGMA",
+		expressionKinds: ["pragma"],
+		firstKeywords: ["pragma"],
+		statementKind: "pragma",
+		validateStatement: findReadOnlySqlitePragmaViolation
+	}] };
+	READ_ONLY_SQLITE_PRAGMA_NAMES = new Set([
+		"foreign_key_check",
+		"foreign_key_list",
+		"index_info",
+		"index_list",
+		"index_xinfo",
+		"quick_check",
+		"table_info",
+		"table_list",
+		"table_xinfo"
+	]);
+	READ_ONLY_SQLITE_PRAGMA_ARG_KINDS = new Set(["column", "literal"]);
 }));
 //#endregion
 //#region packages/server/src/services/data-source-query/core/validation.ts