@saptools/cf-hana 0.1.4 → 0.1.6

package/CHANGELOG.md

@@ -1,5 +1,22 @@
 # Changelog
 
+## 0.1.6 - 2026-06-23
+
+- Expand fake-backed E2E coverage for complex `UPDATE` and `DELETE` backups,
+  including mixed-case keywords, comments, quoted identifiers, nested queries,
+  placeholder filtering, and unscoped writes.
+- Verify backup SELECT failures, write failures, filesystem failures, read-only
+  mode, malformed SQL, and parameter mismatches cannot bypass backup safety.
+- Add opt-in fake-driver statement tracing and deterministic failure injection
+  without recording parameter values.
+
+## 0.1.5 - 2026-06-23
+
+- Remove the CLI `--no-backup` opt-out so `cf-hana query` always attempts a
+  local backup before running `UPDATE` or `DELETE`.
+- Keep backup paths on stderr and keep stdout parseable for table, JSON, and CSV
+  output.
+
 ## 0.1.4 - 2026-06-23
 
 - Add automatic local CSV backups before CLI `query` runs an `UPDATE` or
@@ -7,7 +24,7 @@
 - Derive the backup `SELECT` from the write target and top-level `WHERE`
   clause, preserving only the WHERE parameters for `UPDATE` statements.
 - Save each backup in its own non-expiring folder with `statement.sql` and
-  `backup.csv`, and add `--no-backup` for explicit CLI opt-out.
+  `backup.csv`.
 
 ## 0.1.3 - 2026-06-23
 

package/README.md

@@ -88,8 +88,8 @@ cf-hana info    <selector>                  Print the resolved connection metada
 Common options: `--format <table|json|csv>`, `--refresh`, `--role <runtime|hdi>`,
 `--binding <name>` / `--binding-index <n>`, `--timeout <ms>`, `--read-only`,
 `--allow-destructive`, `--limit <n>`, `--no-auto-limit`. The `query` command also
-accepts `--param <value>` (repeatable) to bind `?` placeholders and
-`--no-backup` to skip the default write backup.
+accepts `--param <value>` (repeatable) to bind `?` placeholders. CLI `UPDATE`
+and `DELETE` statements are backed up automatically before the write runs.
 
 ```bash
 cf-hana query eu10/example-org/space-demo/app-demo "SELECT ID, STATUS FROM ORDERS WHERE STATUS = ?" \
@@ -169,13 +169,6 @@ rows returned by the derived `SELECT`. Backup folders are not deleted by
 `cf-hana`; clean them up manually when they are no longer needed. The backup path
 is printed to stderr so JSON and CSV stdout remain parseable.
 
-Use `--no-backup` when an external backup or transaction workflow already covers
-the write:
-
-```bash
-cf-hana query app-demo "DELETE FROM ORDERS WHERE ID = ?" --param 42 --no-backup
-```
-
 ## Safety
 
 - **Read-only mode** (`readOnly` / `--read-only`) rejects every DML and DDL statement.

package/dist/cli.js

@@ -514,7 +514,7 @@ async function listColumns(connection, schema, table) {
 
 // src/config.ts
 var CLI_NAME = "cf-hana";
-var CLI_VERSION = "0.1.4";
+var CLI_VERSION = "0.1.6";
 var ENV_PREFIX = "CF_HANA";
 var DEFAULT_QUERY_TIMEOUT_MS = 3e4;
 var DEFAULT_CONNECT_TIMEOUT_MS = 3e4;
@@ -633,7 +633,13 @@ function toConnectionTarget(binding, role) {
 }
 
 // src/driver/fake.ts
+import { appendFile } from "fs/promises";
 function fakeExec(sql) {
+  const kind = classifyStatement(sql);
+  const forcedFailure = readEnv(envName("FAKE_FAIL_STATEMENT"))?.toLowerCase();
+  if (forcedFailure === kind) {
+    throw new Error(`fake driver forced ${kind.toUpperCase()} failure`);
+  }
   if (sql.toUpperCase().includes("DUMMY")) {
     return {
       rows: [{ "1": 1 }],
@@ -641,7 +647,6 @@ function fakeExec(sql) {
       affectedRows: 0
     };
   }
-  const kind = classifyStatement(sql);
   if (kind === "select") {
     return {
       rows: [
@@ -660,10 +665,23 @@ function fakeExec(sql) {
   }
   return { rows: [], columns: [], affectedRows: 0 };
 }
+async function traceFakeExec(sql, params) {
+  const tracePath = readEnv(envName("FAKE_TRACE_FILE"));
+  if (tracePath === void 0) {
+    return;
+  }
+  const entry = { sql, paramCount: params.length };
+  await appendFile(tracePath, `${JSON.stringify(entry)}
+`, {
+    encoding: "utf8",
+    mode: 384
+  });
+}
 var FakeConnection = class {
   closed = false;
-  exec(sql, _params) {
-    return Promise.resolve(fakeExec(sql));
+  async exec(sql, params) {
+    await traceFakeExec(sql, params);
+    return fakeExec(sql);
   }
   setAutoCommit(_enabled) {
     return Promise.resolve();
@@ -937,7 +955,7 @@ function createDriver(name) {
 }
 
 // src/history.ts
-import { appendFile, mkdir as mkdir2, readdir, rm } from "fs/promises";
+import { appendFile as appendFile2, mkdir as mkdir2, readdir, rm } from "fs/promises";
 import { homedir as homedir2 } from "os";
 import { join as join2 } from "path";
 var SAPTOOLS_DIR_NAME2 = ".saptools";
@@ -999,7 +1017,7 @@ async function appendSqlHistory(input, options = {}) {
     ...input
   };
   await mkdir2(historyDir, { recursive: true, mode: 448 });
-  await appendFile(sqlHistoryFilePath(now, options.saptoolsRoot), `${JSON.stringify(entry)}
+  await appendFile2(sqlHistoryFilePath(now, options.saptoolsRoot), `${JSON.stringify(entry)}
 `, {
     encoding: "utf8",
     mode: 384
@@ -1780,7 +1798,7 @@ async function runQuery(selector, sql, command) {
   const client = await connect(selector, toConnectOptions(opts));
   try {
     const params = opts.param ?? [];
-    const backup = opts.backup ? await client.backupWriteStatement(sql, params) : void 0;
+    const backup = await client.backupWriteStatement(sql, params);
     if (backup !== void 0) {
       process.stderr.write(`${CLI_NAME}: backup saved to ${backup.directory}
 `);
@@ -1861,7 +1879,7 @@ function buildProgram() {
   const program = new Command();
   program.name(CLI_NAME).description("Run SQL against SAP HANA Cloud databases bound to a Cloud Foundry app").version(CLI_VERSION);
   withConnectionOptions(
-    program.command("query <selector> <sql>").description("run a single SQL statement").option("--param <value>", "bind a SQL parameter (repeatable)", collectParam, []).option("--no-backup", "skip the local CSV backup before UPDATE or DELETE")
+    program.command("query <selector> <sql>").description("run a single SQL statement").option("--param <value>", "bind a SQL parameter (repeatable)", collectParam, [])
   ).action(async (selector, sql, _options, command) => {
     await runQuery(selector, sql, command);
   });