@yejiming/dsh-data-agent 0.0.11 → 0.0.13

package/lib/types/client/locales.d.ts

@@ -13,6 +13,9 @@ export declare const zh: {
     'type.oracle': string;
     'type.hive': string;
     'type.impala': string;
+    'type.clickhouse': string;
+    'type.doris': string;
+    'type.sqlserver': string;
     'form.host': string;
     'form.port': string;
     'form.user': string;
@@ -28,6 +31,8 @@ export declare const zh: {
     'form.rememberPassword.hint': string;
     'form.readonly': string;
     'form.readonly.hint': string;
+    'form.secure': string;
+    'form.secure.hint': string;
     'form.database': string;
     'form.database.oracle': string;
     'form.database.hive': string;
@@ -57,10 +62,29 @@ export declare const zh: {
     'wb.columns': string;
     'wb.sql': string;
     'wb.sql.placeholder': string;
+    'wb.sql.placeholder.sqlserver': string;
     'wb.sql.run': string;
     'wb.sql.running': string;
     'wb.sql.shortcut': string;
     'wb.sql.empty': string;
+    'wb.sql.result.summary': string;
+    'wb.sql.result.capped': string;
+    'wb.sql.result.outputTruncated': string;
+    'wb.sql.result.table': string;
+    'wb.sql.result.noRows': string;
+    'wb.sql.command.done': string;
+    'wb.sql.export.actions': string;
+    'wb.sql.export.excel': string;
+    'wb.sql.export.csv': string;
+    'wb.sql.export.clipboard': string;
+    'wb.sql.exporting': string;
+    'wb.sql.copying': string;
+    'wb.sql.export.done': string;
+    'wb.sql.copy.done': string;
+    'wb.sql.export.failed': string;
+    'wb.sql.page.summary': string;
+    'wb.sql.page.previous': string;
+    'wb.sql.page.next': string;
     'wb.loading': string;
     'wb.empty': string;
     'wb.modal.title': string;
@@ -101,6 +125,9 @@ export declare const en: {
     'type.oracle': string;
     'type.hive': string;
     'type.impala': string;
+    'type.clickhouse': string;
+    'type.doris': string;
+    'type.sqlserver': string;
     'form.host': string;
     'form.port': string;
     'form.user': string;
@@ -116,6 +143,8 @@ export declare const en: {
     'form.rememberPassword.hint': string;
     'form.readonly': string;
     'form.readonly.hint': string;
+    'form.secure': string;
+    'form.secure.hint': string;
     'form.database': string;
     'form.database.oracle': string;
     'form.database.hive': string;
@@ -145,10 +174,29 @@ export declare const en: {
     'wb.columns': string;
     'wb.sql': string;
     'wb.sql.placeholder': string;
+    'wb.sql.placeholder.sqlserver': string;
     'wb.sql.run': string;
     'wb.sql.running': string;
     'wb.sql.shortcut': string;
     'wb.sql.empty': string;
+    'wb.sql.result.summary': string;
+    'wb.sql.result.capped': string;
+    'wb.sql.result.outputTruncated': string;
+    'wb.sql.result.table': string;
+    'wb.sql.result.noRows': string;
+    'wb.sql.command.done': string;
+    'wb.sql.export.actions': string;
+    'wb.sql.export.excel': string;
+    'wb.sql.export.csv': string;
+    'wb.sql.export.clipboard': string;
+    'wb.sql.exporting': string;
+    'wb.sql.copying': string;
+    'wb.sql.export.done': string;
+    'wb.sql.copy.done': string;
+    'wb.sql.export.failed': string;
+    'wb.sql.page.summary': string;
+    'wb.sql.page.previous': string;
+    'wb.sql.page.next': string;
     'wb.loading': string;
     'wb.empty': string;
     'wb.modal.title': string;

package/lib/types/client/persistence.d.ts

@@ -9,7 +9,7 @@
  * key is versioned so a future shape change can migrate or ignore old data.
  * @module @yejiming/dsh-data-agent/persistence
  */
-import type { DatabaseType } from './DataAgentWorkbench.tsx';
+import { type DatabaseType } from '../database-types.ts';
 /** localStorage key holding the most recent connection configuration. */
 export declare const CONNECTION_STORAGE_KEY = "dsh-data-agent.connection.v1";
 /** The persisted connection configuration. */
@@ -28,6 +28,8 @@ export interface SavedConnection {
     /** Opt-in flag; when true, {@link saveConnection} may write `password`. */
     persistPassword?: boolean;
     readonly?: boolean;
+    /** ClickHouse only: HTTPS with normal certificate verification. */
+    secure?: boolean;
     /** Diagnostic timestamp of the save. */
     savedAt: string;
 }

package/lib/types/client/query-export.d.ts

@@ -0,0 +1,11 @@
+/** One structured result shape accepted by every workbench export. */
+export interface QueryExportData {
+    columns: readonly string[];
+    rows: readonly Readonly<Record<string, string | null>>[];
+}
+/** UTF-8 CSV with BOM so desktop Excel opens Chinese text correctly. */
+export declare function queryResultToCsv(data: QueryExportData): string;
+/** Tabular plain text suitable for spreadsheet clipboard paste. */
+export declare function queryResultToTsv(data: QueryExportData): string;
+/** Build a real XLSX workbook using inline strings, frozen headers, and filters. */
+export declare function queryResultToXlsx(data: QueryExportData): Uint8Array;

package/lib/types/client-discovery.d.ts

@@ -8,8 +8,7 @@
  * involved, and the exact discovery environment is returned for spawn.
  * @module @yejiming/dsh-data-agent/client-discovery
  */
-import type { ClientConfig } from './clients.ts';
-import type { DatabaseType } from './connections.ts';
+import type { CliDatabaseType, ClientConfig } from './clients.ts';
 /** Host facts are injectable so all supported platforms can be tested on one CI host. */
 export interface ClientDiscoverySystem {
     platform: NodeJS.Platform;
@@ -28,7 +27,7 @@ export interface ClientExecutableResolution {
 }
 /** Input for one database client resolution attempt. */
 export interface ResolveClientExecutableOptions {
-    type: DatabaseType;
+    type: CliDatabaseType;
     command: string;
     config?: ClientConfig;
     env: Readonly<Record<string, string>>;
@@ -37,7 +36,7 @@ export interface ResolveClientExecutableOptions {
     system?: ClientDiscoverySystem;
 }
 /** Build ordered fallback directories without recursively scanning the host. */
-export declare function buildClientSearchDirectories(type: DatabaseType, config: ClientConfig | undefined, signal: AbortSignal, system?: ClientDiscoverySystem): Promise<string[]>;
+export declare function buildClientSearchDirectories(type: CliDatabaseType, config: ClientConfig | undefined, signal: AbortSignal, system?: ClientDiscoverySystem): Promise<string[]>;
 /**
  * Resolve one configured/default client. Current PATH (or an explicit path)
  * always wins. Only a missing bare command activates bounded PATH discovery.

package/lib/types/clients.d.ts

@@ -1,11 +1,12 @@
 /**
  * Pure CLI-client template construction for the supported database types.
  * Everything here is a function of (type, connection, optional overrides) —
- * no process, no I/O — so the injection-safety surface is unit-testable:
+ * no process, no I/O — so the CLI injection-safety surface is unit-testable:
  * argv stays an array (never shell-interpreted), the SQL itself always
  * travels on stdin, and passwords only ever appear in the environment
- * entries (`MYSQL_PWD` / `PGPASSWORD`) or in a stdin connect prefix
- * (Oracle `connect`, Hive `!connect`) — never in argv, logs, or returns.
+ * entries (`MYSQL_PWD` / `PGPASSWORD` / `SQLCMDPASSWORD`) or in a stdin
+ * connect prefix (Oracle `connect`, Hive `!connect`) — never in argv, logs,
+ * or returns. ClickHouse HTTP authentication lives in the shared runner.
  *
  * Metadata (schemas / tables / describe) queries and their per-type output
  * parsers live here too, so the /schemas /tables /describe routes stay thin.
@@ -13,8 +14,8 @@
  */
 import type { DatabaseConnection, DatabaseType } from './connections.ts';
 import z from 'schemastery';
-import { assertSingleStatement, hasTopLevelKeyword, stripTrailingTerminator } from './sql.ts';
-export { assertSingleStatement, hasTopLevelKeyword, stripTrailingTerminator };
+import { assertSingleStatement, assertSqlServerSafeInput, hasTopLevelKeyword, stripTrailingTerminator } from './sql.ts';
+export { assertSingleStatement, assertSqlServerSafeInput, hasTopLevelKeyword, stripTrailingTerminator };
 /**
  * Classify a SQL text as a read or write statement by its FIRST effective
  * token (a conservative read whitelist, not a parser). `with` is read only
@@ -33,6 +34,8 @@ export declare function classifyStatement(sql: string, type: DatabaseType): 'rea
  * unparseable LIMIT is left for the client (structured tools still truncate).
  */
 export declare function enforceReadRowLimit(sql: string, type: DatabaseType, maxRows: number): string;
+/** Rare control separator keeps ordinary tabs/pipes inside sqlcmd values intact. */
+export declare const SQLSERVER_COLUMN_SEPARATOR = "\u001F";
 /**
  * Validate and quote one schema/table identifier for a safe metadata query.
  * Identifiers are restricted to `[A-Za-z0-9_$]+` and then wrapped per type:
@@ -51,6 +54,8 @@ export interface ClientConfig {
     /** Absolute directories searched after the current subprocess PATH. */
     searchPaths?: readonly string[];
 }
+/** Database types backed by a locally resolved CLI executable. */
+export type CliDatabaseType = Exclude<DatabaseType, 'clickhouse'>;
 /** Loader schema for one client override (all fields optional at input). */
 export declare const clientConfigSchema: z<Schemastery.ObjectS<{
     command: z<string, string>;
@@ -61,16 +66,15 @@ export declare const clientConfigSchema: z<Schemastery.ObjectS<{
     args: z<string[], string[]>;
     searchPaths: z<string[], string[]>;
 }>>;
-/** Loader schema for the whole `clients` config object (any type key). */
 export declare const clientsSchema: z<import("cosmokit").Dict<{
     command?: string | null | undefined;
     args?: string[] | null | undefined;
     searchPaths?: string[] | null | undefined;
-} & import("@deepseek-ai/cosmokit").Dict, string>, import("cosmokit").Dict<Schemastery.ObjectT<{
+} & import("@deepseek-ai/cosmokit").Dict, "mysql" | "postgres" | "sqlite" | "oracle" | "hive" | "impala" | "doris" | "sqlserver">, import("cosmokit").Dict<Schemastery.ObjectT<{
     command: z<string, string>;
     args: z<string[], string[]>;
     searchPaths: z<string[], string[]>;
-}>, string>>;
+}>, "mysql" | "postgres" | "sqlite" | "oracle" | "hive" | "impala" | "doris" | "sqlserver">>;
 /**
  * A fully constructed client invocation: argv (command + flags, no SQL),
  * the credential env entries, and the stdin prefix (Oracle/Hive connect
@@ -127,6 +131,8 @@ export interface ColumnInfo {
     type: string;
     nullable?: boolean;
 }
+/** Remove only terminal sqlcmd row-count footer lines, never matching data in the middle. */
+export declare function stripSqlServerRowCountFooter(stdout: string): string;
 /**
  * Parse one type's describe output into columns. Formats:
  * - mysql `--batch`: `Field\tType\tNull\tKey\t...` (skip header);

package/lib/types/command.d.ts

@@ -6,7 +6,7 @@
  */
 import type { Context } from '@deepseek-ai/cordis';
 import type { CommandInvocation, CommandResult } from '@deepseek-ai/dsh-commands';
-import { type ConnectionFormDraft, type ConnectionSummary, type DatabaseConnectionInput } from './connections.ts';
+import { type ConnectionFormDraft, type ConnectionFormInitial, type ConnectionSummary, type DatabaseConnectionInput } from './connections.ts';
 export declare const name = "data-agent-database-command";
 export declare const inject: string[];
 export declare const DATABASE_COMMAND_USAGE: string;
@@ -24,7 +24,7 @@ export declare const DATA_AGENT_TOOL_NAMES: readonly ["str_replace_editor", "sql
 export interface DatabaseCommandInteraction {
     isTuiFormAvailable(): boolean;
     collectTuiConnection(signal: AbortSignal, options: {
-        initialDraft?: ConnectionFormDraft;
+        initialDraft?: ConnectionFormInitial;
         persistDraft(draft: ConnectionFormDraft): Promise<void>;
     }): Promise<DatabaseConnectionInput | undefined>;
 }

package/lib/types/connections.d.ts

@@ -9,11 +9,11 @@
  */
 import type { Context } from '@deepseek-ai/cordis';
 import { type ClientConfig, type ColumnInfo } from './clients.ts';
+import { type DatabaseType } from './database-types.ts';
 import { type QueryResult } from './query.ts';
+export type { DatabaseType } from './database-types.ts';
 /** Key of the wildcard connection applied to sessions without an exact entry. */
 export declare const WILDCARD_SESSION = "*";
-/** Supported database client kinds. */
-export type DatabaseType = 'mysql' | 'postgres' | 'sqlite' | 'oracle' | 'hive' | 'impala';
 /** How a non-SQLite profile authenticates without ever persisting a secret. */
 export type CredentialMode = 'none' | 'password' | 'reference';
 /** Safe credential facts returned to UI/command surfaces. */
@@ -33,6 +33,8 @@ export interface DatabaseConnectionInput {
     /** Non-secret DSH credential reference, mutually exclusive with password. */
     passwordRef?: string;
     readonly?: boolean;
+    /** ClickHouse HTTP transport uses HTTPS with normal certificate verification. */
+    secure?: boolean;
     /** Optional stable durable profile id. */
     profileId?: string;
     /** Optional human-readable profile label. */
@@ -53,6 +55,7 @@ export interface ConnectionSummary {
     database: string;
     passwordRef?: string;
     readonly?: boolean;
+    secure?: boolean;
     profileId?: string;
     name?: string;
     tables?: string[];
@@ -72,6 +75,7 @@ export interface PersistedConnectionProfile {
     user?: string;
     database: string;
     readonly?: boolean;
+    secure?: boolean;
     passwordRef?: string;
     credentialMode?: CredentialMode;
     updatedAt: string;
@@ -89,14 +93,25 @@ export interface ConnectionFormDraft {
     user: string;
     database: string;
     readonly: boolean;
+    secure?: boolean;
+}
+/** Form initial values may also restore one non-secret credential reference. */
+export interface ConnectionFormInitial extends ConnectionFormDraft {
+    passwordRef?: string;
 }
 /** Durable draft record. Passwords and credential references are forbidden. */
 export interface PersistedConnectionFormDraft extends ConnectionFormDraft {
     updatedAt: string;
 }
+/** Deterministic latest-profile lookup result supplied by durable adapters. */
+export interface PersistedConnectionProfileEntry {
+    profileId: string;
+    profile: PersistedConnectionProfile;
+}
 /** Minimal durable seam; backed by a DSH storage domain in production. */
 export interface ConnectionPersistence {
     getProfile(profileId: string): PersistedConnectionProfile | undefined;
+    getLatestProfile?(): PersistedConnectionProfileEntry | undefined;
     putProfile(profileId: string, profile: PersistedConnectionProfile): Promise<void>;
     deleteProfile(profileId: string): Promise<boolean>;
     getBinding(sessionId: string): SessionConnectionBinding | undefined;
@@ -104,6 +119,7 @@ export interface ConnectionPersistence {
     deleteBinding(sessionId: string): Promise<boolean>;
     getDraft?(sessionId: string): PersistedConnectionFormDraft | undefined;
     putDraft?(sessionId: string, draft: PersistedConnectionFormDraft): Promise<void>;
+    deleteDraft?(sessionId: string): Promise<boolean>;
 }
 /** Shared service configuration supplied by the host plugin. */
 export interface ConnectionServiceOptions {
@@ -120,6 +136,17 @@ export interface ConnectResult {
     tables: string[];
     summary: ConnectionSummary;
 }
+/** Structured read result or raw command message returned to interactive surfaces. */
+export type InteractiveQueryResult = {
+    kind: 'table';
+    columns: string[];
+    rows: Record<string, string | null>[];
+    elapsedMs: number;
+    truncated: boolean;
+    maxRows: number;
+} | ({
+    kind: 'message';
+} & QueryResult);
 /** Host-plane service (`ctx.dataAgentConnections`). */
 export interface DataAgentConnections {
     /** Compatibility setter for config seeds/tests; does not persist. */
@@ -131,8 +158,8 @@ export interface DataAgentConnections {
     has(sessionId: string): boolean;
     /** Compatibility runtime-only clear. Use disconnect() for durable bindings. */
     clear(sessionId: string): void;
-    /** Restore the latest non-secret interactive form values for this session. */
-    getFormDraft(sessionId: string): ConnectionFormDraft | undefined;
+    /** Restore exact or latest-profile non-secret interactive form values. */
+    getFormDraft(sessionId: string): ConnectionFormInitial | undefined;
     /** Save non-secret form values; the implementation never accepts a password. */
     saveFormDraft(sessionId: string, draft: ConnectionFormDraft): Promise<void>;
     status(sessionId: string): Promise<ConnectionSummary | undefined>;
@@ -144,6 +171,7 @@ export interface DataAgentConnections {
     listTables(sessionId: string, schema: string | undefined, signal: AbortSignal): Promise<string[]>;
     describe(sessionId: string, schema: string | undefined, table: string, signal: AbortSignal): Promise<ColumnInfo[]>;
     query(sessionId: string, sql: string, signal: AbortSignal): Promise<QueryResult>;
+    executeInteractive(sessionId: string, sql: string, signal: AbortSignal): Promise<InteractiveQueryResult>;
 }
 /** Build a password-stripped copy of one connection. */
 export declare function summarize(connection: DatabaseConnection): ConnectionSummary;
@@ -157,3 +185,4 @@ export declare function normalizeConnectionInput(input: DatabaseConnectionInput,
 export declare function createConnectionService(ctx?: Context, options?: ConnectionServiceOptions, persistence?: ConnectionPersistence): DataAgentConnections;
 /** Backward-compatible in-memory store factory used by embedders/tests. */
 export declare function createConnectionStore(): DataAgentConnections;
+export declare function validatePasswordRef(value: string): void;

package/lib/types/database-types.d.ts

@@ -0,0 +1,23 @@
+/**
+ * Browser-safe database type descriptors shared by every DSH surface.
+ * Keep this module dependency-free: server-only client/process details belong
+ * in the database adapters, not in Web or persistence bundles.
+ */
+export declare const DATABASE_TYPES: readonly ["mysql", "postgres", "sqlite", "oracle", "hive", "impala", "clickhouse", "doris", "sqlserver"];
+export type DatabaseType = typeof DATABASE_TYPES[number];
+export interface DatabaseTypeDescriptor {
+    type: DatabaseType;
+    label: string;
+    localeKey: `type.${DatabaseType}`;
+    defaultPort: number;
+    defaultUser: string;
+    fileBased: boolean;
+    /** HTTPS port used when ClickHouse secure transport is selected. */
+    securePort?: number;
+}
+export declare const DATABASE_TYPE_DESCRIPTORS: Readonly<Record<DatabaseType, DatabaseTypeDescriptor>>;
+export declare function isDatabaseType(value: unknown): value is DatabaseType;
+export declare function databaseTypeDescriptor(type: DatabaseType): DatabaseTypeDescriptor;
+export declare function defaultDatabasePort(type: DatabaseType, secure?: boolean): number;
+export declare function defaultDatabaseUser(type: DatabaseType): string;
+export declare function databaseTypeLabel(type: DatabaseType): string;

package/lib/types/defaults.d.ts

@@ -16,6 +16,10 @@ export declare const DEFAULT_QUERY_TIMEOUT_MS = 30000;
 export declare const DEFAULT_MAX_RESULT_CHARS = 20000;
 /** Maximum structured rows returned by one database read tool call. */
 export declare const DEFAULT_MAX_ROWS = 100;
+/** Hard row cap for one structured Web workbench result/export. */
+export declare const WORKBENCH_MAX_EXPORT_ROWS = 50000;
+/** Bounded capture size for the larger structured Web workbench result. */
+export declare const WORKBENCH_MAX_RESULT_CHARS: number;
 /** Cap on one /query SQL text length (abuse guard; the wire body stays small). */
 export declare const DEFAULT_MAX_QUERY_CHARS = 65536;
 /** Grace period for the subprocess terminate escalation. */

package/lib/types/ecosystem.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Community v0.15 host facet.
+ *
+ * This facet intentionally publishes no commands, tools, UI, routes, storage,
+ * credentials, or database effects. The existing Cordis bundle remains the
+ * sole functional runtime so hosts may discover the ecosystem declaration
+ * without double-registering data-agent behavior.
+ */
+import { type FacetProjection } from '@dsh-std/sdk';
+/** Stable degraded snapshot for declaration-only ecosystem discovery. */
+export declare const ECOSYSTEM_SNAPSHOT: FacetProjection;
+declare const ecosystemFacet: import("@dsh-std/sdk").FacetModule;
+export default ecosystemFacet;

package/lib/types/index.d.ts

@@ -25,14 +25,14 @@ declare module '@deepseek-ai/cordis' {
 }
 import z from 'schemastery';
 import { type DataAgentConnections, type DatabaseType } from './connections.ts';
-import { type ClientConfig } from './clients.ts';
+import { type CliDatabaseType, type ClientConfig } from './clients.ts';
 import { type Config as ToolConfig } from './tool.ts';
 /** Cordis plugin name (diagnostics only). */
 export declare const name = "data-agent";
 /** Services required before the profile entry can mount its preset layer. */
 export declare const inject: string[];
 /** Deployment overrides for one database type's CLI client. */
-export type ClientsConfig = Partial<Record<DatabaseType, ClientConfig>>;
+export type ClientsConfig = Partial<Record<CliDatabaseType, ClientConfig>>;
 /**
  * One config-seeded connection. Deliberately password-free: passwords are a
  * memory-only / connect-time value, so only the /connect route may carry one.
@@ -47,6 +47,8 @@ export interface SeededConnectionConfig {
     database: string;
     /** Optional per-seed read-only guard. */
     readonly?: boolean;
+    /** ClickHouse only: use HTTPS with certificate verification. */
+    secure?: boolean;
     /** Safe credential reference. Real passwords are rejected by the schema. */
     passwordRef?: string;
     password?: never;
@@ -94,27 +96,29 @@ export declare const Config: z<Schemastery.ObjectS<{
         command?: string | null | undefined;
         args?: string[] | null | undefined;
         searchPaths?: string[] | null | undefined;
-    } & import("@deepseek-ai/cosmokit").Dict, string>, import("cosmokit").Dict<Schemastery.ObjectT<{
+    } & import("@deepseek-ai/cosmokit").Dict, "mysql" | "postgres" | "sqlite" | "oracle" | "hive" | "impala" | "doris" | "sqlserver">, import("cosmokit").Dict<Schemastery.ObjectT<{
         command: z<string, string>;
         args: z<string[], string[]>;
         searchPaths: z<string[], string[]>;
-    }>, string>>;
+    }>, "mysql" | "postgres" | "sqlite" | "oracle" | "hive" | "impala" | "doris" | "sqlserver">>;
     connections: z<import("cosmokit").Dict<{
-        type?: "mysql" | "postgres" | "sqlite" | "oracle" | "hive" | "impala" | null | undefined;
+        type?: "mysql" | "postgres" | "sqlite" | "oracle" | "hive" | "impala" | "clickhouse" | "doris" | "sqlserver" | null | undefined;
         host?: string | null | undefined;
         port?: number | null | undefined;
         user?: string | null | undefined;
         database?: string | null | undefined;
         readonly?: boolean | null | undefined;
+        secure?: boolean | null | undefined;
         passwordRef?: string | null | undefined;
         password?: null | undefined;
     } & import("@deepseek-ai/cosmokit").Dict, string>, import("cosmokit").Dict<Schemastery.ObjectT<{
-        type: z<"mysql" | "postgres" | "sqlite" | "oracle" | "hive" | "impala", "mysql" | "postgres" | "sqlite" | "oracle" | "hive" | "impala">;
+        type: z<"mysql" | "postgres" | "sqlite" | "oracle" | "hive" | "impala" | "clickhouse" | "doris" | "sqlserver", "mysql" | "postgres" | "sqlite" | "oracle" | "hive" | "impala" | "clickhouse" | "doris" | "sqlserver">;
         host: z<string, string>;
         port: z<number, number>;
         user: z<string, string>;
         database: z<string, string>;
         readonly: z<boolean, boolean>;
+        secure: z<boolean, boolean>;
         passwordRef: z<string, string>;
         password: z<never, never>;
     }>, string>>;
@@ -133,27 +137,29 @@ export declare const Config: z<Schemastery.ObjectS<{
         command?: string | null | undefined;
         args?: string[] | null | undefined;
         searchPaths?: string[] | null | undefined;
-    } & import("@deepseek-ai/cosmokit").Dict, string>, import("cosmokit").Dict<Schemastery.ObjectT<{
+    } & import("@deepseek-ai/cosmokit").Dict, "mysql" | "postgres" | "sqlite" | "oracle" | "hive" | "impala" | "doris" | "sqlserver">, import("cosmokit").Dict<Schemastery.ObjectT<{
         command: z<string, string>;
         args: z<string[], string[]>;
         searchPaths: z<string[], string[]>;
-    }>, string>>;
+    }>, "mysql" | "postgres" | "sqlite" | "oracle" | "hive" | "impala" | "doris" | "sqlserver">>;
     connections: z<import("cosmokit").Dict<{
-        type?: "mysql" | "postgres" | "sqlite" | "oracle" | "hive" | "impala" | null | undefined;
+        type?: "mysql" | "postgres" | "sqlite" | "oracle" | "hive" | "impala" | "clickhouse" | "doris" | "sqlserver" | null | undefined;
         host?: string | null | undefined;
         port?: number | null | undefined;
         user?: string | null | undefined;
         database?: string | null | undefined;
         readonly?: boolean | null | undefined;
+        secure?: boolean | null | undefined;
         passwordRef?: string | null | undefined;
         password?: null | undefined;
     } & import("@deepseek-ai/cosmokit").Dict, string>, import("cosmokit").Dict<Schemastery.ObjectT<{
-        type: z<"mysql" | "postgres" | "sqlite" | "oracle" | "hive" | "impala", "mysql" | "postgres" | "sqlite" | "oracle" | "hive" | "impala">;
+        type: z<"mysql" | "postgres" | "sqlite" | "oracle" | "hive" | "impala" | "clickhouse" | "doris" | "sqlserver", "mysql" | "postgres" | "sqlite" | "oracle" | "hive" | "impala" | "clickhouse" | "doris" | "sqlserver">;
         host: z<string, string>;
         port: z<number, number>;
         user: z<string, string>;
         database: z<string, string>;
         readonly: z<boolean, boolean>;
+        secure: z<boolean, boolean>;
         passwordRef: z<string, string>;
         password: z<never, never>;
     }>, string>>;
@@ -166,12 +172,11 @@ export declare function resolveDshHome(env?: Record<string, string | undefined>)
 /**
  * Install the packaged `preset/data-agent/` directory into
  * `$DSH_HOME/.agent-presets/<presetId>/`. Idempotent: an existing target is
- * normally left untouched. The exact package-owned 0.0.9 composition is
- * migrated once because its two dynamic package rows are incompatible with
- * DSH Desktop's unpacked-ASAR loader; user-edited compositions are never
- * overwritten. `installPreset: false` never calls this. Best-effort — a
- * failure logs a warning with manual install instructions instead of failing
- * the boot.
+ * normally left untouched. Exact package-owned legacy compositions are
+ * migrated once when their runtime contract changes; user-edited compositions
+ * are never overwritten. `installPreset: false` never calls this. Best-effort
+ * — a failure logs a warning with manual install instructions instead of
+ * failing the boot.
  */
 export declare function installPreset(ctx: Context, presetId: string): Promise<boolean>;
 /** Public for regression tests of the non-destructive preset migration gate. */

package/lib/types/presentation-text.d.ts

@@ -0,0 +1,3 @@
+/** Surface-neutral control-sequence sanitization for generic tool cards. */
+/** Remove control effects while keeping their presence visible to the user. */
+export declare function sanitizePresentationText(value: unknown): string;

package/lib/types/query.d.ts

@@ -1,10 +1,10 @@
 /**
- * The shared client-process runner used by both halves: the /connect
- * connectivity check (server half) and the database tools (tool half). All
- * execution goes through `ctx.subprocess` — no shell layer, argv arrays only,
- * SQL on stdin, credentials in env entries — with a caller-owned timeout
- * (AbortController → process-tree terminate escalation) and bounded captured
- * output.
+ * The shared database runner used by both halves: the /connect connectivity
+ * check (server half) and the database tools (tool half). CLI-backed adapters
+ * go through `ctx.subprocess` with argv arrays, SQL on stdin, and credentials
+ * in their dedicated environment/stdin channel. ClickHouse uses the official
+ * Node HTTP client with explicit transport/authentication fields. Both paths
+ * share caller-owned cancellation, deadlines, and bounded captured output.
  * @module @yejiming/dsh-data-agent/query
  */
 import type { Context } from '@deepseek-ai/cordis';
@@ -26,11 +26,11 @@ export interface QueryResult {
     /** True when either stream hit the maxResultChars cap. */
     truncated: boolean;
 }
-/** Which CLI flag set to use for one run. */
+/** Which deterministic raw/introspection/structured output mode to use. */
 export type QueryTemplateMode = 'query' | 'introspect' | 'structured';
 /** Runner options: client overrides, deadlines, output caps. */
 export interface QueryOptions {
-    /** Deployment client overrides keyed by database type. */
+    /** Deployment CLI overrides keyed by CLI-backed database type. */
     clients: Readonly<Partial<Record<DatabaseType, ClientConfig>>>;
     /** End-to-end deadline in milliseconds (timeout → terminate the tree). */
     timeoutMs: number;
@@ -41,10 +41,12 @@ export interface QueryOptions {
     /** CLI flag set; overrides the legacy `introspect` parameter when set. */
     mode?: QueryTemplateMode;
 }
+/** ClickHouse endpoint construction never embeds username or password. */
+export declare function clickHouseConnectionUrl(connection: DatabaseConnection): string;
 /**
- * Run one SQL text through the type's CLI client. The SQL is written to the
- * child's stdin (`{ data }` batch disposition) so it never appears in argv;
- * passwords travel in the env entries built by the template.
+ * Run one SQL text through the type's shared adapter. CLI SQL is written to
+ * child stdin (`{ data }` batch disposition), while ClickHouse SQL is an HTTP
+ * request body; neither path puts SQL or credentials in argv.
  *
  * Failure classification:
  * - the caller's external signal (e.g. the tool exec signal) aborts → the

package/lib/types/sql.d.ts

@@ -6,7 +6,7 @@
  * docs/optimization-opportunities.md:
  *
  * - a single tool call carries at most ONE SQL statement;
- * - `maxRows` can be enforced with a real top-level LIMIT, not just a prompt.
+ * - `maxRows` can be enforced with a real dialect-level row bound, not just a prompt.
  *
  * @module @yejiming/dsh-data-agent/sql
  */
@@ -18,6 +18,14 @@
 export declare function assertSingleStatement(sql: string, label?: string): void;
 /** Whether `keyword` appears at top level as a whole word in `sql`. */
 export declare function hasTopLevelKeyword(sql: string, keyword: string): boolean;
+/**
+ * Preserve executable SQL text while replacing strings, quoted identifiers,
+ * dollar/Oracle quoted bodies, and comments with spaces. Newlines are kept so
+ * line-oriented client directives can be checked without false positives.
+ */
+export declare function maskSqlLiteralsAndComments(sql: string): string;
+/** Reject commands interpreted by sqlcmd itself rather than by SQL Server. */
+export declare function assertSqlServerSafeInput(sql: string, label?: string): void;
 /**
  * Strip trailing whitespace, statement terminators and trailing comments so a
  * limit clause can be appended to the actual statement text. Only comments