@yejiming/dsh-data-agent 0.0.12 → 0.1.0

package/lib/{connections-5sfdEDsG.js → connections-CFXOZTHZ.js}

@@ -1,9 +1,115 @@
-import "./defaults-DP4RyRh1.js";
 import { readdir } from "node:fs/promises";
 import { homedir } from "node:os";
 import { posix, resolve, win32 } from "node:path";
 import z from "schemastery";
 import { credentialRef } from "@deepseek-ai/dsh-credentials";
+import { createClient } from "@clickhouse/client";
+//#region src/database-types.ts
+/**
+* Browser-safe database type descriptors shared by every DSH surface.
+* Keep this module dependency-free: server-only client/process details belong
+* in the database adapters, not in Web or persistence bundles.
+*/
+const DATABASE_TYPES = [
+	"mysql",
+	"postgres",
+	"sqlite",
+	"oracle",
+	"hive",
+	"impala",
+	"clickhouse",
+	"doris",
+	"sqlserver"
+];
+const DATABASE_TYPE_DESCRIPTORS = {
+	mysql: {
+		type: "mysql",
+		label: "MySQL",
+		localeKey: "type.mysql",
+		defaultPort: 3306,
+		defaultUser: "root",
+		fileBased: false
+	},
+	postgres: {
+		type: "postgres",
+		label: "PostgreSQL",
+		localeKey: "type.postgres",
+		defaultPort: 5432,
+		defaultUser: "postgres",
+		fileBased: false
+	},
+	sqlite: {
+		type: "sqlite",
+		label: "SQLite",
+		localeKey: "type.sqlite",
+		defaultPort: 0,
+		defaultUser: "",
+		fileBased: true
+	},
+	oracle: {
+		type: "oracle",
+		label: "Oracle",
+		localeKey: "type.oracle",
+		defaultPort: 1521,
+		defaultUser: "",
+		fileBased: false
+	},
+	hive: {
+		type: "hive",
+		label: "Hive",
+		localeKey: "type.hive",
+		defaultPort: 1e4,
+		defaultUser: "",
+		fileBased: false
+	},
+	impala: {
+		type: "impala",
+		label: "Impala",
+		localeKey: "type.impala",
+		defaultPort: 21050,
+		defaultUser: "",
+		fileBased: false
+	},
+	clickhouse: {
+		type: "clickhouse",
+		label: "ClickHouse",
+		localeKey: "type.clickhouse",
+		defaultPort: 8123,
+		securePort: 8443,
+		defaultUser: "default",
+		fileBased: false
+	},
+	doris: {
+		type: "doris",
+		label: "Apache Doris",
+		localeKey: "type.doris",
+		defaultPort: 9030,
+		defaultUser: "root",
+		fileBased: false
+	},
+	sqlserver: {
+		type: "sqlserver",
+		label: "SQL Server",
+		localeKey: "type.sqlserver",
+		defaultPort: 1433,
+		defaultUser: "sa",
+		fileBased: false
+	}
+};
+function isDatabaseType(value) {
+	return typeof value === "string" && DATABASE_TYPES.includes(value);
+}
+function defaultDatabasePort(type, secure = false) {
+	const descriptor = DATABASE_TYPE_DESCRIPTORS[type];
+	return secure && descriptor.securePort !== void 0 ? descriptor.securePort : descriptor.defaultPort;
+}
+function defaultDatabaseUser(type) {
+	return DATABASE_TYPE_DESCRIPTORS[type].defaultUser;
+}
+function databaseTypeLabel(type) {
+	return DATABASE_TYPE_DESCRIPTORS[type].label;
+}
+//#endregion
 //#region src/sql.ts
 /**
 * Lightweight SQL-text scanning helpers shared by the sql-cmd tool half and
@@ -13,7 +119,7 @@ import { credentialRef } from "@deepseek-ai/dsh-credentials";
 * docs/optimization-opportunities.md:
 *
 * - a single tool call carries at most ONE SQL statement;
-* - `maxRows` can be enforced with a real top-level LIMIT, not just a prompt.
+* - `maxRows` can be enforced with a real dialect-level row bound, not just a prompt.
 *
 * @module @yejiming/dsh-data-agent/sql
 */
@@ -233,6 +339,82 @@ function hasTopLevelKeyword(sql, keyword) {
 	}
 	return false;
 }
+/**
+* Preserve executable SQL text while replacing strings, quoted identifiers,
+* dollar/Oracle quoted bodies, and comments with spaces. Newlines are kept so
+* line-oriented client directives can be checked without false positives.
+*/
+function maskSqlLiteralsAndComments(sql) {
+	const chars = sql.split("");
+	const mask = (start, end) => {
+		for (let index = start; index < end; index += 1) if (chars[index] !== "\n" && chars[index] !== "\r") chars[index] = " ";
+	};
+	let index = 0;
+	while (index < sql.length) {
+		const char = sql[index];
+		if (sql.startsWith("--", index)) {
+			const end = skipLineComment(sql, index + 2);
+			mask(index, end);
+			index = end;
+			continue;
+		}
+		if (sql.startsWith("/*", index)) {
+			const end = skipBlockComment(sql, index);
+			mask(index, end);
+			index = end;
+			continue;
+		}
+		if (char === "'" || char === "\"" || char === "`") {
+			const end = skipQuoted(sql, index);
+			mask(index, end);
+			index = end;
+			continue;
+		}
+		if (char === "[") {
+			let end = index + 1;
+			while (end < sql.length) {
+				if (sql[end] === "]" && sql[end + 1] === "]") {
+					end += 2;
+					continue;
+				}
+				if (sql[end] === "]") {
+					end += 1;
+					break;
+				}
+				end += 1;
+			}
+			mask(index, end);
+			index = end;
+			continue;
+		}
+		if (char === "$") {
+			const end = skipDollarQuoted(sql, index);
+			if (end !== -1) {
+				mask(index, end);
+				index = end;
+				continue;
+			}
+		}
+		const oracleEnd = skipOracleQuoted(sql, index);
+		if (oracleEnd !== -1) {
+			mask(index, oracleEnd);
+			index = oracleEnd;
+			continue;
+		}
+		index += 1;
+	}
+	return chars.join("");
+}
+/** Reject commands interpreted by sqlcmd itself rather than by SQL Server. */
+function assertSqlServerSafeInput(sql, label = "SQL Server SQL") {
+	const executable = maskSqlLiteralsAndComments(sql);
+	if (/\$\([^\r\n)]*\)/.test(executable)) throw new Error(`${label}: 禁止 sqlcmd 变量替换 $(...)`);
+	for (const line of executable.split(/\r?\n/)) {
+		const command = line.trimStart();
+		if (command === "") continue;
+		if (/^!!/.test(command) || /^:/.test(command) || /^(?:reset|ed|exit|quit)\b/i.test(command) || /^go(?:\s+\d+)?\s*;?\s*$/i.test(command)) throw new Error(`${label}: 禁止 sqlcmd 元命令、GO 批次分隔符与客户端脚本指令`);
+	}
+}
 function trailingLineCommentStart(sql, end) {
 	let index = sql.lastIndexOf("\n", end - 1) + 1;
 	while (index < end) {
@@ -449,7 +631,11 @@ function classifyStatement(sql, type) {
 	const rest = stripLeadingComments(sql);
 	const tokenMatch = rest.match(/^[A-Za-z_]+/);
 	if (tokenMatch === null) return "write";
-	switch (tokenMatch[0].toLowerCase()) {
+	const token = tokenMatch[0].toLowerCase();
+	const executable = maskSqlLiteralsAndComments(rest);
+	if (type === "sqlserver" && /\binto\b/i.test(executable)) return "write";
+	if ((type === "mysql" || type === "doris" || type === "clickhouse") && /\binto\s+(?:out|dump)file\b/i.test(executable)) return "write";
+	switch (token) {
 		case "select":
 		case "show":
 		case "describe":
@@ -478,12 +664,69 @@ function enforceReadRowLimit(sql, type, maxRows) {
 	if (classifyStatement(sql, type) !== "read") return sql;
 	const first = stripLeadingComments(sql).match(/^[A-Za-z_]+/)?.[0]?.toLowerCase();
 	if (first !== "select" && first !== "with") return sql;
+	if (type === "sqlserver") return enforceSqlServerRowLimit(sql, maxRows);
 	const hadTrailingSemicolon = /;\s*$/.test(sql);
 	if (!hasTopLevelKeyword(sql, "limit") && type !== "oracle") return `${stripTrailingTerminator(sql)} LIMIT ${maxRows}${hadTrailingSemicolon ? ";" : ""}`;
 	if (type === "oracle") return `SELECT * FROM (${stripTrailingTerminator(sql)}) dsh_limit WHERE ROWNUM <= ${maxRows}${hadTrailingSemicolon ? ";" : ""}`;
 	if (!hasTopLevelKeyword(sql, "limit")) return sql;
 	return rewriteTopLevelLimit(sql, maxRows);
 }
+function findTopLevelKeywordIndex(sql, keyword) {
+	const masked = maskSqlLiteralsAndComments(sql);
+	const needle = keyword.toLowerCase();
+	let depth = 0;
+	for (let index = 0; index < masked.length; index += 1) {
+		const char = masked[index];
+		if (char === "(") {
+			depth += 1;
+			continue;
+		}
+		if (char === ")") {
+			depth = Math.max(0, depth - 1);
+			continue;
+		}
+		if (depth !== 0) continue;
+		if (masked.slice(index, index + needle.length).toLowerCase() !== needle) continue;
+		const before = index === 0 ? "" : masked[index - 1];
+		const after = masked[index + needle.length] ?? "";
+		if ((before === "" || !/[A-Za-z0-9_$]/.test(before)) && (after === "" || !/[A-Za-z0-9_$]/.test(after))) return index;
+	}
+	return -1;
+}
+/** Add or tighten a T-SQL row limit without ever emitting MySQL LIMIT. */
+function enforceSqlServerRowLimit(sql, maxRows) {
+	const hadTrailingSemicolon = /;\s*$/.test(sql);
+	const body = stripTrailingTerminator(sql);
+	for (const keyword of [
+		"union",
+		"intersect",
+		"except"
+	]) if (hasTopLevelKeyword(body, keyword)) throw new Error("SQL Server compound query 无法安全自动限行，请显式包装查询并使用 TOP");
+	const selectIndex = findTopLevelKeywordIndex(body, "select");
+	if (selectIndex === -1) throw new Error("SQL Server 查询无法定位顶层 SELECT，无法安全自动限行");
+	const offsetIndex = findTopLevelKeywordIndex(body, "offset");
+	const fetchIndex = findTopLevelKeywordIndex(body, "fetch");
+	if (offsetIndex !== -1 || fetchIndex !== -1) {
+		if (offsetIndex === -1 || fetchIndex === -1 || fetchIndex < offsetIndex) throw new Error("SQL Server OFFSET/FETCH 查询无法安全自动改写，请使用完整的 OFFSET ... FETCH NEXT n ROWS ONLY");
+		const fetch = body.slice(fetchIndex).match(/^fetch\s+next\s+(\d+)\s+rows?\s+only\b/i);
+		if (fetch === null) throw new Error("SQL Server OFFSET/FETCH 查询无法安全自动改写，请显式设置数字 FETCH NEXT");
+		if (Number(fetch[1]) <= maxRows) return sql;
+		const replacement = fetch[0].replace(fetch[1], String(maxRows));
+		return `${body.slice(0, fetchIndex)}${replacement}${body.slice(fetchIndex + fetch[0].length)}${hadTrailingSemicolon ? ";" : ""}`;
+	}
+	const prefixMatch = body.slice(selectIndex + 6).match(/^(\s+(?:all\s+|distinct\s+)?)(?:top\s*(?:\(\s*(\d+)\s*\)|(\d+))(\s+percent)?(\s+with\s+ties)?\s*)?/i);
+	if (prefixMatch === null) throw new Error("SQL Server SELECT 形态无法安全自动限行");
+	const existing = prefixMatch[2] ?? prefixMatch[3];
+	if (prefixMatch[4] !== void 0 || prefixMatch[5] !== void 0) throw new Error("SQL Server TOP PERCENT/WITH TIES 无法安全自动限行，请改用显式 TOP (n)");
+	if (existing !== void 0) {
+		if (Number(existing) <= maxRows) return sql;
+		const topStart = selectIndex + 6 + prefixMatch[1].length;
+		const topLength = prefixMatch[0].length - prefixMatch[1].length;
+		return `${body.slice(0, topStart)}TOP (${maxRows}) ${body.slice(topStart + topLength)}${hadTrailingSemicolon ? ";" : ""}`;
+	}
+	const insertAt = selectIndex + 6 + prefixMatch[1].length;
+	return `${body.slice(0, insertAt)}TOP (${maxRows}) ${body.slice(insertAt)}${hadTrailingSemicolon ? ";" : ""}`;
+}
 /** Rewrite the first top-level `LIMIT n` / `LIMIT n, m` with a capped row count. */
 function rewriteTopLevelLimit(sql, maxRows) {
 	let depth = 0;
@@ -576,11 +819,14 @@ function sanitizeIdentifier(type, identifier) {
 	if (!/^[A-Za-z0-9_$]+$/.test(identifier)) throw new Error(`标识符含非法字符（仅允许字母、数字与 _ $）：${identifier}`);
 	switch (type) {
 		case "mysql":
+		case "doris":
+		case "clickhouse":
 		case "hive":
 		case "impala": return "`" + identifier.replace(/`/g, "``") + "`";
 		case "postgres":
 		case "oracle":
 		case "sqlite": return "\"" + identifier.replace(/"/g, "\"\"") + "\"";
+		case "sqlserver": return "[" + identifier.replace(/]/g, "]]") + "]";
 	}
 }
 /**
@@ -600,43 +846,100 @@ const clientConfigSchema = z.object({
 	args: z.array(z.string()),
 	searchPaths: z.array(z.string())
 });
-/** Loader schema for the whole `clients` config object (any type key). */
-const clientsSchema = z.dict(clientConfigSchema).default({});
+/** Loader schema for CLI overrides; ClickHouse has connection-level HTTP transport instead. */
+const cliDatabaseTypeSchema = z.union([
+	z.const("mysql"),
+	z.const("postgres"),
+	z.const("sqlite"),
+	z.const("oracle"),
+	z.const("hive"),
+	z.const("impala"),
+	z.const("doris"),
+	z.const("sqlserver")
+]);
+const clientsSchema = z.dict(clientConfigSchema, cliDatabaseTypeSchema).default({});
+/**
+* MySQL output must match the subprocess collector's UTF-8 decoder instead of
+* inheriting a platform locale such as a legacy Windows code page.
+*/
+const MYSQL_COMMON_ARGS = [
+	"--default-character-set=utf8mb4",
+	"--batch",
+	"--raw"
+];
 /** Query-mode flag arguments per type (plain/human output). */
 const QUERY_ARGS = {
-	mysql: ["--batch", "--raw"],
+	mysql: MYSQL_COMMON_ARGS,
+	doris: MYSQL_COMMON_ARGS,
 	postgres: ["-A"],
 	sqlite: ["-header", "-column"],
 	oracle: ["-S", "/nolog"],
 	hive: ["--silent=true", "--outputformat=tsv2"],
-	impala: ["-B"]
+	impala: ["-B"],
+	sqlserver: [
+		"-b",
+		"-V",
+		"11",
+		"-r",
+		"1",
+		"-x",
+		"-W",
+		"-w",
+		"65535",
+		"-s",
+		""
+	],
+	clickhouse: []
 };
 /** Introspection-mode flag arguments per type (machine-readable listing). */
 const INTROSPECT_ARGS = {
-	mysql: ["--batch", "--raw"],
+	mysql: MYSQL_COMMON_ARGS,
+	doris: MYSQL_COMMON_ARGS,
 	postgres: ["-t", "-A"],
 	sqlite: ["-noheader", "-list"],
 	oracle: ["-S", "/nolog"],
 	hive: ["--silent=true", "--outputformat=tsv2"],
-	impala: ["-B"]
+	impala: ["-B"],
+	sqlserver: [
+		"-b",
+		"-V",
+		"11",
+		"-r",
+		"1",
+		"-x",
+		"-W",
+		"-w",
+		"65535",
+		"-s",
+		"",
+		"-h",
+		"-1"
+	],
+	clickhouse: []
 };
 /** Structured `sql-query` flag arguments: header + one row per line. */
 const STRUCTURED_QUERY_ARGS = {
-	mysql: ["--batch", "--raw"],
+	mysql: MYSQL_COMMON_ARGS,
+	doris: MYSQL_COMMON_ARGS,
 	postgres: ["-A"],
 	sqlite: ["-header", "-csv"],
 	oracle: ["-S", "/nolog"],
 	hive: ["--silent=true", "--outputformat=tsv2"],
-	impala: ["-B", "--print_header"]
-};
-/** Default ports when the connection does not carry one. */
-const DEFAULT_PORTS = {
-	mysql: 3306,
-	postgres: 5432,
-	sqlite: 0,
-	oracle: 1521,
-	hive: 1e4,
-	impala: 21050
+	impala: ["-B", "--print_header"],
+	sqlserver: [
+		"-b",
+		"-V",
+		"11",
+		"-r",
+		"1",
+		"-x",
+		"-W",
+		"-w",
+		"65535",
+		"-s",
+		""
+	],
+	clickhouse: []
 };
 /** Built-in commands per type (also the loader defaults; see `src/defaults.ts`). */
 const DEFAULT_CLIENTS_COMMAND = {
@@ -645,7 +948,10 @@ const DEFAULT_CLIENTS_COMMAND = {
 	sqlite: "sqlite3",
 	oracle: "sqlplus",
 	hive: "beeline",
-	impala: "impala-shell"
+	impala: "impala-shell",
+	doris: "mysql",
+	sqlserver: "sqlcmd",
+	clickhouse: ""
 };
 /**
 * Connection flags for one type. Oracle and Hive carry NO connection flags:
@@ -655,13 +961,14 @@ const DEFAULT_CLIENTS_COMMAND = {
 */
 function connectionArgs(type, connection) {
 	switch (type) {
-		case "mysql": return [
+		case "mysql":
+		case "doris": return [
 			"-h",
 			connection.host ?? "127.0.0.1",
 			"-P",
-			String(connection.port ?? DEFAULT_PORTS.mysql),
+			String(connection.port ?? defaultDatabasePort(type)),
 			"-u",
-			connection.user ?? "root",
+			connection.user ?? defaultDatabaseUser(type),
 			"-D",
 			connection.database
 		];
@@ -669,7 +976,7 @@ function connectionArgs(type, connection) {
 			"-h",
 			connection.host ?? "127.0.0.1",
 			"-p",
-			String(connection.port ?? DEFAULT_PORTS.postgres),
+			String(connection.port ?? defaultDatabasePort("postgres")),
 			"-U",
 			connection.user ?? "postgres",
 			"-d",
@@ -678,12 +985,21 @@ function connectionArgs(type, connection) {
 		case "sqlite": return [connection.database];
 		case "impala": return [
 			"-i",
-			`${connection.host ?? "127.0.0.1"}:${connection.port ?? DEFAULT_PORTS.impala}`,
+			`${connection.host ?? "127.0.0.1"}:${connection.port ?? defaultDatabasePort("impala")}`,
+			"-d",
+			connection.database
+		];
+		case "sqlserver": return [
+			"-S",
+			`${connection.host ?? "127.0.0.1"},${connection.port ?? defaultDatabasePort("sqlserver")}`,
+			"-U",
+			connection.user ?? defaultDatabaseUser(type),
 			"-d",
 			connection.database
 		];
 		case "oracle":
 		case "hive": return [];
+		case "clickhouse": throw new Error("ClickHouse 使用官方 HTTP 客户端，不构造 CLI argv");
 	}
 }
 /** Credential environment entries per type; absent password yields an empty env. */
@@ -691,8 +1007,11 @@ function credentialEnv(type, connection) {
 	const password = connection.password;
 	if (password === void 0) return {};
 	switch (type) {
-		case "mysql": return { MYSQL_PWD: password };
+		case "mysql":
+		case "doris": return { MYSQL_PWD: password };
 		case "postgres": return { PGPASSWORD: password };
+		case "sqlserver": return { SQLCMDPASSWORD: password };
+		case "clickhouse":
 		case "sqlite":
 		case "oracle":
 		case "hive":
@@ -713,13 +1032,16 @@ function stdinPrefix(type, connection) {
 			"SET HEADING OFF",
 			"SET COLSEP '|'",
 			"SET TRIMSPOOL ON",
-			connection.user !== void 0 ? `connect ${connection.user}${connection.password !== void 0 ? `/${connection.password}` : ""}@${connection.host ?? "127.0.0.1"}:${connection.port ?? DEFAULT_PORTS.oracle}/${connection.database}` : ""
+			connection.user !== void 0 ? `connect ${connection.user}${connection.password !== void 0 ? `/${connection.password}` : ""}@${connection.host ?? "127.0.0.1"}:${connection.port ?? defaultDatabasePort("oracle")}/${connection.database}` : ""
 		].filter((line) => line !== "").join("\n")}\n`;
-		case "hive": return connection.user !== void 0 ? `!connect jdbc:hive2://${connection.host ?? "127.0.0.1"}:${connection.port ?? DEFAULT_PORTS.hive}/${connection.database} ${connection.user} ${connection.password ?? ""}\n` : "";
+		case "hive": return connection.user !== void 0 ? `!connect jdbc:hive2://${connection.host ?? "127.0.0.1"}:${connection.port ?? defaultDatabasePort("hive")}/${connection.database} ${connection.user} ${connection.password ?? ""}\n` : "";
 		case "mysql":
+		case "doris":
 		case "postgres":
 		case "sqlite":
-		case "impala": return "";
+		case "impala":
+		case "clickhouse": return "";
+		case "sqlserver": return "SET NOCOUNT ON;\n";
 	}
 }
 /**
@@ -736,7 +1058,7 @@ function structuredStdinPrefix(type, connection) {
 		"SET UNDERLINE OFF",
 		"SET COLSEP '|'",
 		"SET TRIMSPOOL ON",
-		connection.user !== void 0 ? `connect ${connection.user}${connection.password !== void 0 ? `/${connection.password}` : ""}@${connection.host ?? "127.0.0.1"}:${connection.port ?? DEFAULT_PORTS.oracle}/${connection.database}` : ""
+		connection.user !== void 0 ? `connect ${connection.user}${connection.password !== void 0 ? `/${connection.password}` : ""}@${connection.host ?? "127.0.0.1"}:${connection.port ?? defaultDatabasePort("oracle")}/${connection.database}` : ""
 	].filter((line) => line !== "").join("\n")}\n`;
 }
 /** Apply one deployment override's extra args in front of the built-in flags. */
@@ -750,6 +1072,7 @@ function withOverrides(flags, override) {
 * `[options] <database>`, and putting flags first is harmless for the others.
 */
 function buildClientTemplate(type, connection, override) {
+	if (type === "clickhouse") throw new Error("ClickHouse 使用官方 HTTP 客户端，不构造 CLI 模板");
 	return {
 		command: override?.command ?? DEFAULT_CLIENTS_COMMAND[type],
 		args: [...withOverrides(QUERY_ARGS[type], override), ...connectionArgs(type, connection)],
@@ -759,6 +1082,7 @@ function buildClientTemplate(type, connection, override) {
 }
 /** Build one client invocation for metadata runs (machine-readable flags). */
 function buildIntrospectTemplate(type, connection, override) {
+	if (type === "clickhouse") throw new Error("ClickHouse 使用官方 HTTP 客户端，不构造 CLI 模板");
 	return {
 		command: override?.command ?? DEFAULT_CLIENTS_COMMAND[type],
 		args: [...withOverrides(INTROSPECT_ARGS[type], override), ...connectionArgs(type, connection)],
@@ -772,6 +1096,7 @@ function buildIntrospectTemplate(type, connection, override) {
 * tab, postgres pipe, sqlite csv, oracle pipe, hive/impala tsv).
 */
 function buildStructuredQueryTemplate(type, connection, override) {
+	if (type === "clickhouse") throw new Error("ClickHouse 使用官方 HTTP 客户端，不构造 CLI 模板");
 	return {
 		command: override?.command ?? DEFAULT_CLIENTS_COMMAND[type],
 		args: [...withOverrides(STRUCTURED_QUERY_ARGS[type], override), ...connectionArgs(type, connection)],
@@ -787,12 +1112,15 @@ function buildStructuredQueryTemplate(type, connection, override) {
 */
 function tableListingSql(type, connection) {
 	switch (type) {
-		case "mysql": return `SHOW TABLES FROM \`${connection?.database ?? ""}\`;`;
+		case "mysql":
+		case "doris": return `SHOW TABLES FROM \`${connection?.database ?? ""}\`;`;
+		case "clickhouse": return "SELECT name FROM system.tables WHERE database = currentDatabase() ORDER BY name;";
 		case "postgres": return "SELECT tablename FROM pg_tables WHERE schemaname='public' ORDER BY 1;";
 		case "sqlite": return "SELECT name FROM sqlite_master WHERE type='table' ORDER BY 1;";
 		case "oracle": return "SELECT table_name FROM user_tables ORDER BY 1;";
 		case "hive":
 		case "impala": return "SHOW TABLES;";
+		case "sqlserver": return "SELECT TABLE_NAME FROM INFORMATION_SCHEMA.TABLES WHERE TABLE_TYPE='BASE TABLE' ORDER BY TABLE_SCHEMA, TABLE_NAME;";
 	}
 }
 /**
@@ -802,28 +1130,37 @@ function tableListingSql(type, connection) {
 function metadataQuery(kind, type, schema, table) {
 	switch (kind) {
 		case "schemas": switch (type) {
-			case "mysql": return "SHOW DATABASES;";
+			case "mysql":
+			case "doris": return "SHOW DATABASES;";
+			case "clickhouse": return "SELECT name FROM system.databases ORDER BY name;";
 			case "postgres": return "SELECT schema_name FROM information_schema.schemata ORDER BY 1;";
 			case "sqlite": return "SELECT 'main';";
 			case "oracle": return "SELECT username FROM all_users ORDER BY 1;";
 			case "hive":
 			case "impala": return "SHOW DATABASES;";
+			case "sqlserver": return "SELECT SCHEMA_NAME FROM INFORMATION_SCHEMA.SCHEMATA ORDER BY SCHEMA_NAME;";
 		}
 		case "tables": switch (type) {
-			case "mysql": return `SHOW TABLES FROM ${sanitizeIdentifier(type, schema)};`;
+			case "mysql":
+			case "doris": return `SHOW TABLES FROM ${sanitizeIdentifier(type, schema)};`;
+			case "clickhouse": return `SELECT name FROM system.tables WHERE database=${quoteStringLiteral(schema)} ORDER BY name;`;
 			case "postgres": return `SELECT tablename FROM pg_tables WHERE schemaname=${quoteStringLiteral(schema)} ORDER BY 1;`;
 			case "sqlite": return "SELECT name FROM sqlite_master WHERE type='table' ORDER BY 1;";
 			case "oracle": return `SELECT table_name FROM all_tables WHERE owner=${quoteStringLiteral(schema)} ORDER BY 1;`;
 			case "hive":
 			case "impala": return `SHOW TABLES IN ${sanitizeIdentifier(type, schema)};`;
+			case "sqlserver": return `SELECT TABLE_NAME FROM INFORMATION_SCHEMA.TABLES WHERE TABLE_SCHEMA=${quoteStringLiteral(schema)} AND TABLE_TYPE='BASE TABLE' ORDER BY TABLE_NAME;`;
 		}
 		case "describe": switch (type) {
-			case "mysql": return `DESCRIBE ${sanitizeIdentifier(type, schema)}.${sanitizeIdentifier(type, table)};`;
+			case "mysql":
+			case "doris": return `DESCRIBE ${sanitizeIdentifier(type, schema)}.${sanitizeIdentifier(type, table)};`;
+			case "clickhouse": return `SELECT name, type, if(startsWith(type, 'Nullable('), 'YES', 'NO') FROM system.columns WHERE database=${quoteStringLiteral(schema)} AND table=${quoteStringLiteral(table)} ORDER BY position;`;
 			case "postgres": return `SELECT column_name, data_type, is_nullable FROM information_schema.columns WHERE table_schema=${quoteStringLiteral(schema)} AND table_name=${quoteStringLiteral(table)} ORDER BY ordinal_position;`;
 			case "sqlite": return `PRAGMA table_info(${sanitizeIdentifier(type, table)});`;
 			case "oracle": return `SELECT column_name, data_type, nullable FROM all_tab_columns WHERE owner=${quoteStringLiteral(schema)} AND table_name=${quoteStringLiteral(table)} ORDER BY column_id;`;
 			case "hive":
 			case "impala": return `DESCRIBE ${sanitizeIdentifier(type, schema)}.${sanitizeIdentifier(type, table)};`;
+			case "sqlserver": return `SELECT COLUMN_NAME, DATA_TYPE, IS_NULLABLE FROM INFORMATION_SCHEMA.COLUMNS WHERE TABLE_SCHEMA=${quoteStringLiteral(schema)} AND TABLE_NAME=${quoteStringLiteral(table)} ORDER BY ORDINAL_POSITION;`;
 		}
 	}
 }
@@ -834,8 +1171,8 @@ function metadataQuery(kind, type, schema, table) {
 * hive/impala batch modes print none (skip 0).
 */
 function parseListing(type, stdout) {
-	const lines = stdout.split("\n");
-	const start = type === "mysql" ? 1 : 0;
+	const lines = (type === "sqlserver" ? stripSqlServerRowCountFooter(stdout) : stdout).split("\n");
+	const start = type === "mysql" || type === "doris" ? 1 : 0;
 	const items = [];
 	for (let index = start; index < lines.length; index += 1) {
 		const name = lines[index].trim();
@@ -847,6 +1184,18 @@ function parseListing(type, stdout) {
 function parseTableListing(type, stdout) {
 	return parseListing(type, stdout);
 }
+const SQLSERVER_ROW_COUNT_FOOTER = /^\((?:\d+\s+rows?\s+affected|(?:共)?影响(?:了)?\s*\d+\s*行|\d+\s*行受(?:到)?影响)\)$/i;
+/** Remove only terminal sqlcmd row-count footer lines, never matching data in the middle. */
+function stripSqlServerRowCountFooter(stdout) {
+	const newline = stdout.includes("\r\n") ? "\r\n" : "\n";
+	const lines = stdout.replace(/\r\n?/g, "\n").split("\n");
+	while (lines.length > 0 && lines[lines.length - 1].trim() === "") lines.pop();
+	while (lines.length > 0 && SQLSERVER_ROW_COUNT_FOOTER.test(lines[lines.length - 1].trim())) {
+		lines.pop();
+		while (lines.length > 0 && lines[lines.length - 1].trim() === "") lines.pop();
+	}
+	return lines.join(newline);
+}
 /**
 * Parse one type's describe output into columns. Formats:
 * - mysql `--batch`: `Field\tType\tNull\tKey\t...` (skip header);
@@ -856,13 +1205,13 @@ function parseTableListing(type, stdout) {
 * - hive/impala batch: `name\ttype\tcomment`.
 */
 function parseColumns(type, stdout) {
-	const lines = stdout.split("\n");
-	const start = type === "mysql" ? 1 : 0;
+	const lines = (type === "sqlserver" ? stripSqlServerRowCountFooter(stdout) : stdout).split(/\r?\n/);
+	const start = type === "mysql" || type === "doris" ? 1 : 0;
 	const columns = [];
 	for (let index = start; index < lines.length; index += 1) {
 		const line = lines[index].trim();
 		if (line.length === 0) continue;
-		const parts = line.includes("	") ? line.split("	") : line.split("|");
+		const parts = type === "sqlserver" ? line.split("") : line.includes("	") ? line.split("	") : line.split("|");
 		const nameIndex = type === "sqlite" ? 1 : 0;
 		const name = parts[nameIndex]?.trim() ?? "";
 		const columnType = parts[nameIndex + 1]?.trim() ?? "";
@@ -871,6 +1220,10 @@ function parseColumns(type, stdout) {
 		let nullable;
 		switch (type) {
 			case "mysql":
+			case "doris":
+				nullable = rawNullable === "yes";
+				break;
+			case "clickhouse":
 				nullable = rawNullable === "yes";
 				break;
 			case "postgres":
@@ -882,6 +1235,9 @@ function parseColumns(type, stdout) {
 			case "oracle":
 				nullable = rawNullable === "y";
 				break;
+			case "sqlserver":
+				nullable = rawNullable === "yes";
+				break;
 			case "hive":
 			case "impala": nullable = void 0;
 		}
@@ -894,6 +1250,40 @@ function parseColumns(type, stdout) {
 	return columns;
 }
 //#endregion
+//#region src/defaults.ts
+/**
+* Package-wide defaults shared by the server half (`src/index.ts`) and the
+* database tool half (`src/tool.ts`). Loader schemas carry these as their
+* defaults so a deployment may override every one of them in cordis.yml.
+* @module @yejiming/dsh-data-agent/defaults
+*/
+/** Preset directory name installed into `$DSH_HOME/.agent-presets/`. */
+const DEFAULT_PRESET_ID = "data-agent";
+/** End-to-end deadline for one `/connect` connectivity check, milliseconds. */
+const DEFAULT_CONNECT_TIMEOUT_MS = 1e4;
+/** End-to-end deadline for one database-tool query, milliseconds. */
+const DEFAULT_QUERY_TIMEOUT_MS = 3e4;
+/** In-memory cap on database-tool captured output (stdout and stderr each). */
+const DEFAULT_MAX_RESULT_CHARS = 2e4;
+/** Hard row cap for one structured Web workbench result/export. */
+const WORKBENCH_MAX_EXPORT_ROWS = 5e4;
+/** Bounded capture size for the larger structured Web workbench result. */
+const WORKBENCH_MAX_RESULT_CHARS = 33554432;
+/** Cap on one /query SQL text length (abuse guard; the wire body stays small). */
+const DEFAULT_MAX_QUERY_CHARS = 65536;
+/** Catalog metadata query deadline. Kept separate from user SQL execution. */
+const DEFAULT_CATALOG_QUERY_TIMEOUT_MS = 3e4;
+/**
+* Per-stream capture budget for one system-catalog query. Catalog metadata is
+* intentionally independent from the much smaller model/interactive SQL
+* result budget because a schema snapshot can contain thousands of objects.
+*/
+const DEFAULT_CATALOG_MAX_RESULT_CHARS = 33554432;
+/** Hard bound on technical assets (including columns) staged by one run. */
+const DEFAULT_CATALOG_MAX_ASSETS = 5e4;
+/** Maximum normalized length of one database or human-authored text field. */
+const DEFAULT_CATALOG_MAX_TEXT_CHARS = 4096;
+//#endregion
 //#region src/client-discovery.ts
 /**
 * Cross-platform database CLI discovery.
@@ -923,7 +1313,9 @@ const HOME_ENV_BY_TYPE = {
 	sqlite: ["SQLITE_HOME"],
 	oracle: ["ORACLE_HOME"],
 	hive: ["HIVE_HOME"],
-	impala: ["IMPALA_HOME"]
+	impala: ["IMPALA_HOME"],
+	doris: ["MYSQL_HOME"],
+	sqlserver: ["SQLCMD_HOME", "MSSQL_TOOLS_HOME"]
 };
 function pathApi(platform) {
 	return platform === "win32" ? win32 : posix;
@@ -980,7 +1372,20 @@ function macFixedDirectories(type) {
 			sqlite: ["/opt/homebrew/opt/sqlite/bin", "/usr/local/opt/sqlite/bin"],
 			oracle: [],
 			hive: ["/opt/homebrew/opt/hive/bin", "/usr/local/opt/hive/bin"],
-			impala: ["/opt/homebrew/opt/impala/bin", "/usr/local/opt/impala/bin"]
+			impala: ["/opt/homebrew/opt/impala/bin", "/usr/local/opt/impala/bin"],
+			doris: [
+				"/opt/homebrew/opt/mysql-client/bin",
+				"/opt/homebrew/opt/mysql/bin",
+				"/usr/local/opt/mysql-client/bin",
+				"/usr/local/opt/mysql/bin",
+				"/usr/local/mysql/bin"
+			],
+			sqlserver: [
+				"/opt/homebrew/opt/mssql-tools18/bin",
+				"/usr/local/opt/mssql-tools18/bin",
+				"/opt/mssql-tools18/bin",
+				"/opt/mssql-tools/bin"
+			]
 		}[type],
 		"/usr/local/bin",
 		"/opt/local/bin",
@@ -1011,7 +1416,9 @@ function windowsFixedDirectories(type, system, paths) {
 		sqlite: [paths.join("C:\\", "sqlite"), paths.join(programFiles, "SQLite")],
 		oracle: [],
 		hive: [],
-		impala: []
+		impala: [],
+		doris: [],
+		sqlserver: [paths.join(programFiles, "Microsoft SQL Server", "Client SDK", "ODBC", "180", "Tools", "Binn"), paths.join(programFiles, "Microsoft SQL Server", "Client SDK", "ODBC", "170", "Tools", "Binn")]
 	};
 	return [
 		...localAppData === void 0 ? [] : [paths.join(localAppData, "Microsoft", "WinGet", "Links")],
@@ -1029,6 +1436,8 @@ function formulaPattern(type) {
 		case "oracle": return /^(?:oracle|instantclient)(?:@.+)?$/i;
 		case "hive": return /^hive(?:@.+)?$/i;
 		case "impala": return /^impala(?:@.+)?$/i;
+		case "doris": return /^(?:mysql|mysql-client)(?:@.+)?$/i;
+		case "sqlserver": return /^(?:mssql-tools|mssql-tools18)(?:@.+)?$/i;
 	}
 }
 function dynamicDirectories(type, system, paths) {
@@ -1071,7 +1480,7 @@ function dynamicDirectories(type, system, paths) {
 		});
 	} else if (system.platform === "win32") {
 		const roots = [environmentValue(system.env, "ProgramFiles", system.platform) ?? "C:\\Program Files", environmentValue(system.env, "ProgramFiles(x86)", system.platform) ?? "C:\\Program Files (x86)"];
-		for (const root of roots) if (type === "mysql") result.push({
+		for (const root of roots) if (type === "mysql" || type === "doris") result.push({
 			root: paths.join(root, "MySQL"),
 			accepts: () => true,
 			suffix: ["bin"]
@@ -1090,6 +1499,11 @@ function dynamicDirectories(type, system, paths) {
 			accepts: () => true,
 			suffix: ["bin"]
 		});
+		else if (type === "sqlserver") result.push({
+			root: paths.join(root, "Microsoft SQL Server", "Client SDK", "ODBC"),
+			accepts: () => true,
+			suffix: ["Tools", "Binn"]
+		});
 	}
 	return result;
 }
@@ -1192,10 +1606,85 @@ function readCaptured(reader) {
 		truncated: read.lossy
 	};
 }
+/** ClickHouse endpoint construction never embeds username or password. */
+function clickHouseConnectionUrl(connection) {
+	const secure = connection.secure === true;
+	const url = new URL(`${secure ? "https" : "http"}://127.0.0.1`);
+	url.hostname = connection.host ?? "127.0.0.1";
+	url.port = String(connection.port ?? defaultDatabasePort("clickhouse", secure));
+	return url.toString();
+}
+async function collectClickHouseStream(stream, maxBytes, signal) {
+	const chunks = [];
+	let size = 0;
+	let truncated = false;
+	for await (const chunk of stream) {
+		signal.throwIfAborted();
+		const buffer = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk);
+		const remaining = maxBytes - size;
+		if (remaining <= 0) {
+			truncated = true;
+			stream.destroy?.();
+			break;
+		}
+		if (buffer.byteLength > remaining) {
+			chunks.push(buffer.subarray(0, remaining));
+			size += remaining;
+			truncated = true;
+			stream.destroy?.();
+			break;
+		}
+		chunks.push(buffer);
+		size += buffer.byteLength;
+	}
+	return {
+		text: Buffer.concat(chunks, size).toString("utf8"),
+		truncated
+	};
+}
+async function runClickHouseQuery(connection, sql, options, signal) {
+	const client = createClient({
+		url: clickHouseConnectionUrl(connection),
+		username: connection.user ?? defaultDatabaseUser("clickhouse"),
+		password: connection.password ?? "",
+		database: connection.database,
+		request_timeout: options.timeoutMs
+	});
+	try {
+		if (classifyStatement(sql, "clickhouse") !== "read") {
+			await client.command({
+				query: sql,
+				abort_signal: signal,
+				clickhouse_settings: { wait_end_of_query: 1 }
+			});
+			return {
+				exitCode: 0,
+				stdout: "",
+				stderr: "",
+				truncated: false
+			};
+		}
+		const format = options.mode === "structured" ? "JSONCompactEachRowWithNamesAndTypes" : options.mode === "introspect" ? "TabSeparated" : "TabSeparatedWithNames";
+		const { stream } = await client.exec({
+			query: sql,
+			abort_signal: signal,
+			clickhouse_settings: { default_format: format }
+		});
+		const stdout = await collectClickHouseStream(stream, options.maxResultChars, signal);
+		return {
+			exitCode: 0,
+			stdout: stdout.text,
+			stderr: "",
+			truncated: stdout.truncated
+		};
+	} finally {
+		await client.close();
+	}
+}
 /**
-* Run one SQL text through the type's CLI client. The SQL is written to the
-* child's stdin (`{ data }` batch disposition) so it never appears in argv;
-* passwords travel in the env entries built by the template.
+* Run one SQL text through the type's shared adapter. CLI SQL is written to
+* child stdin (`{ data }` batch disposition), while ClickHouse SQL is an HTTP
+* request body; neither path puts SQL or credentials in argv.
 *
 * Failure classification:
 * - the caller's external signal (e.g. the tool exec signal) aborts → the
@@ -1213,7 +1702,6 @@ function readCaptured(reader) {
 * @returns the captured outcome.
 */
 async function runClientQuery(ctx, connection, sql, options, externalSignal, introspect = false) {
-	const template = options.mode === "structured" ? buildStructuredQueryTemplate(connection.type, connection, options.clients[connection.type]) : options.mode === "introspect" || introspect ? buildIntrospectTemplate(connection.type, connection, options.clients[connection.type]) : buildClientTemplate(connection.type, connection, options.clients[connection.type]);
 	const controller = new AbortController();
 	const timer = setTimeout(() => controller.abort(/* @__PURE__ */ new Error(`查询超过 ${options.timeoutMs}ms 未完成，已终止客户端进程`)), options.timeoutMs);
 	const onExternalAbort = () => {
@@ -1222,6 +1710,12 @@ async function runClientQuery(ctx, connection, sql, options, externalSignal, int
 	if (externalSignal.aborted) controller.abort(externalSignal.reason);
 	else externalSignal.addEventListener("abort", onExternalAbort, { once: true });
 	try {
+		if (connection.type === "clickhouse") return await runClickHouseQuery(connection, sql, {
+			...options,
+			mode: options.mode ?? (introspect ? "introspect" : "query")
+		}, controller.signal);
+		if (connection.type === "sqlserver") assertSqlServerSafeInput(sql);
+		const template = options.mode === "structured" ? buildStructuredQueryTemplate(connection.type, connection, options.clients[connection.type]) : options.mode === "introspect" || introspect ? buildIntrospectTemplate(connection.type, connection, options.clients[connection.type]) : buildClientTemplate(connection.type, connection, options.clients[connection.type]);
 		const resolution = await resolveClientExecutable({
 			type: connection.type,
 			command: template.command,
@@ -1254,7 +1748,7 @@ async function runClientQuery(ctx, connection, sql, options, externalSignal, int
 		const stderr = readCaptured(handle.collected.stderr);
 		return {
 			exitCode: outcome.exitCode,
-			stdout: stdout.text,
+			stdout: connection.type === "sqlserver" ? stripSqlServerRowCountFooter(stdout.text) : stdout.text,
 			stderr: stderr.text,
 			truncated: stdout.truncated || stderr.truncated
 		};
@@ -1263,6 +1757,231 @@ async function runClientQuery(ctx, connection, sql, options, externalSignal, int
 		externalSignal.removeEventListener("abort", onExternalAbort);
 	}
 }
+//#endregion
+//#region src/structured.ts
+function normalizeNewlines(text) {
+	return text.replace(/\r\n?/g, "\n");
+}
+function splitLine(line, delimiter) {
+	return line.split(delimiter);
+}
+/** Make column names valid unique JSON object keys. */
+function uniqueColumns(columns) {
+	const used = /* @__PURE__ */ new Set();
+	return columns.map((raw, index) => {
+		let name = raw.trim();
+		if (name.length === 0) name = `column_${index + 1}`;
+		if (used.has(name)) {
+			let suffix = 2;
+			while (used.has(`${name}_${suffix}`)) suffix += 1;
+			name = `${name}_${suffix}`;
+		}
+		used.add(name);
+		return name;
+	});
+}
+function rowObject(columns, fields) {
+	const row = {};
+	for (let index = 0; index < columns.length; index += 1) row[columns[index]] = fields[index] ?? null;
+	return row;
+}
+function emptyOutput() {
+	return {
+		columns: [],
+		rows: [],
+		rowLimitExceeded: false
+	};
+}
+function skipLeadingBlank(lines) {
+	let index = 0;
+	while (index < lines.length && lines[index].trim().length === 0) index += 1;
+	return index;
+}
+/** PostgreSQL `-A` appends a `(N rows)` / `(N row)` footer after SELECT output. */
+function isPostgresFooter(line) {
+	return /^\(\d+ rows?\)$/.test(line.trim());
+}
+function parseDelimited(stdout, delimiter, maxRows, skipFooter = false) {
+	const lines = normalizeNewlines(stdout).split("\n");
+	if (lines.length > 0 && lines[lines.length - 1] === "") lines.pop();
+	const headerIndex = skipLeadingBlank(lines);
+	if (headerIndex >= lines.length) return emptyOutput();
+	const columns = uniqueColumns(splitLine(lines[headerIndex], delimiter));
+	const rows = [];
+	let rowLimitExceeded = false;
+	for (let index = headerIndex + 1; index < lines.length; index += 1) {
+		const line = lines[index];
+		if (skipFooter && isPostgresFooter(line)) continue;
+		if (rows.length >= maxRows) {
+			rowLimitExceeded = true;
+			break;
+		}
+		rows.push(rowObject(columns, splitLine(line, delimiter)));
+	}
+	return {
+		columns,
+		rows,
+		rowLimitExceeded
+	};
+}
+/** Minimal RFC-4180-style parser for sqlite3 `-csv` output. */
+function parseCsv(text) {
+	const records = [];
+	let record = [];
+	let field = "";
+	let quoted = false;
+	let index = 0;
+	const pushField = () => {
+		record.push(field);
+		field = "";
+	};
+	const pushRecord = () => {
+		pushField();
+		records.push(record);
+		record = [];
+	};
+	while (index < text.length) {
+		const char = text[index];
+		if (quoted) {
+			if (char === "\"") {
+				if (text[index + 1] === "\"") {
+					field += "\"";
+					index += 2;
+					continue;
+				}
+				quoted = false;
+				index += 1;
+				continue;
+			}
+			field += char;
+			index += 1;
+			continue;
+		}
+		if (char === "\"" && field.length === 0) {
+			quoted = true;
+			index += 1;
+			continue;
+		}
+		if (char === ",") {
+			pushField();
+			index += 1;
+			continue;
+		}
+		if (char === "\n") {
+			pushRecord();
+			index += 1;
+			continue;
+		}
+		if (char === "\r") {
+			if (text[index + 1] === "\n") index += 1;
+			pushRecord();
+			index += 1;
+			continue;
+		}
+		field += char;
+		index += 1;
+	}
+	if (field.length > 0 || record.length > 0) pushRecord();
+	return records;
+}
+function parseCsvOutput(stdout, maxRows) {
+	const records = parseCsv(normalizeNewlines(stdout)).filter((record) => !(record.length === 1 && record[0] === ""));
+	if (records.length === 0) return emptyOutput();
+	const columns = uniqueColumns(records[0]);
+	const rows = [];
+	let rowLimitExceeded = false;
+	for (let index = 1; index < records.length; index += 1) {
+		if (rows.length >= maxRows) {
+			rowLimitExceeded = true;
+			break;
+		}
+		rows.push(rowObject(columns, records[index]));
+	}
+	return {
+		columns,
+		rows,
+		rowLimitExceeded
+	};
+}
+function parseClickHouseOutput(stdout, maxRows) {
+	const lines = normalizeNewlines(stdout).split("\n").filter((line) => line.trim() !== "");
+	if (lines.length === 0) return emptyOutput();
+	const parsed = lines.map((line) => JSON.parse(line));
+	if (!Array.isArray(parsed[0])) throw new Error("ClickHouse结构化输出缺少列名行");
+	const columns = uniqueColumns(parsed[0].map((value) => String(value)));
+	const firstDataIndex = parsed.length > 1 && Array.isArray(parsed[1]) ? 2 : 1;
+	const rows = [];
+	let rowLimitExceeded = false;
+	for (let index = firstDataIndex; index < parsed.length; index += 1) {
+		if (rows.length >= maxRows) {
+			rowLimitExceeded = true;
+			break;
+		}
+		const record = parsed[index];
+		if (!Array.isArray(record)) throw new Error("ClickHouse结构化输出包含非数组数据行");
+		rows.push(rowObject(columns, record.map((value) => {
+			if (value === null || value === void 0) return null;
+			return typeof value === "object" ? JSON.stringify(value) : String(value);
+		})));
+	}
+	return {
+		columns,
+		rows,
+		rowLimitExceeded
+	};
+}
+function parseSqlServerOutput(stdout, maxRows) {
+	const lines = normalizeNewlines(stripSqlServerRowCountFooter(stdout)).split("\n");
+	if (lines.length > 0 && lines[lines.length - 1] === "") lines.pop();
+	const headerIndex = skipLeadingBlank(lines);
+	if (headerIndex >= lines.length) return emptyOutput();
+	const columns = uniqueColumns(lines[headerIndex].split(""));
+	let dataIndex = headerIndex + 1;
+	const divider = lines[dataIndex]?.split("");
+	if (divider !== void 0 && divider.length === columns.length && divider.every((field) => /^-+$/.test(field.trim()))) dataIndex += 1;
+	const rows = [];
+	let rowLimitExceeded = false;
+	for (let index = dataIndex; index < lines.length; index += 1) {
+		if (lines[index].trim() === "") continue;
+		if (rows.length >= maxRows) {
+			rowLimitExceeded = true;
+			break;
+		}
+		const fields = lines[index].split("");
+		const row = {};
+		for (let column = 0; column < columns.length; column += 1) {
+			const value = fields[column];
+			row[columns[column]] = value === void 0 || value === "NULL" ? null : value;
+		}
+		rows.push(row);
+	}
+	return {
+		columns,
+		rows,
+		rowLimitExceeded
+	};
+}
+/**
+* Parse one database type's structured-query stdout. The matching template is
+* `buildStructuredQueryTemplate`: mysql tab-separated with a header, postgres
+* pipe-separated with a header and row-count footer, sqlite CSV with a header,
+* oracle pipe-separated with heading on, hive/impala tsv with a header.
+*/
+function parseStructuredQueryOutput(type, stdout, maxRows) {
+	switch (type) {
+		case "mysql": return parseDelimited(stdout, "	", maxRows);
+		case "doris": return parseDelimited(stdout, "	", maxRows);
+		case "clickhouse": return parseClickHouseOutput(stdout, maxRows);
+		case "postgres": return parseDelimited(stdout, "|", maxRows, true);
+		case "sqlite": return parseCsvOutput(stdout, maxRows);
+		case "oracle": return parseDelimited(stdout, "|", maxRows);
+		case "hive":
+		case "impala": return parseDelimited(stdout, "	", maxRows);
+		case "sqlserver": return parseSqlServerOutput(stdout, maxRows);
+	}
+}
+const MYSQL_SCHEMA_PROBE_CONCURRENCY = 4;
+const MYSQL_DATABASE_ACCESS_DENIED = /\bERROR\s+1044\s+\(42000\)/i;
 /** Build a password-stripped copy of one connection. */
 function summarize(connection) {
 	const summary = {
@@ -1274,6 +1993,7 @@ function summarize(connection) {
 	if (connection.user !== void 0) summary.user = connection.user;
 	if (connection.passwordRef !== void 0) summary.passwordRef = connection.passwordRef;
 	if (connection.readonly !== void 0) summary.readonly = connection.readonly;
+	if (connection.secure !== void 0) summary.secure = connection.secure;
 	if (connection.profileId !== void 0) summary.profileId = connection.profileId;
 	if (connection.name !== void 0) summary.name = connection.name;
 	if (connection.tables !== void 0) summary.tables = [...connection.tables];
@@ -1303,19 +2023,22 @@ function normalizeConnectionInput(input, cwd = process.cwd()) {
 	if (input.port !== void 0 && (!Number.isInteger(input.port) || input.port < 1 || input.port > 65535)) throw new Error("port 必须是 1-65535 的整数");
 	if (input.profileId !== void 0 && input.profileId.trim().length === 0) throw new Error("profileId 不能为空");
 	if (input.name !== void 0 && input.name.trim().length === 0) throw new Error("name 不能为空");
+	if (input.secure !== void 0 && typeof input.secure !== "boolean") throw new Error("secure 必须是布尔值");
 	const connection = {
 		type: input.type,
 		database: input.type === "sqlite" ? resolve(cwd, input.database) : input.database,
 		credentialMode: input.type === "sqlite" ? "none" : input.passwordRef !== void 0 ? "reference" : input.password !== void 0 && input.password.length > 0 ? "password" : "none"
 	};
 	if (input.type !== "sqlite") {
-		if (input.host !== void 0 && input.host.length > 0) connection.host = input.host;
-		if (input.port !== void 0) connection.port = input.port;
-		if (input.user !== void 0 && input.user.length > 0) connection.user = input.user;
+		connection.host = input.host !== void 0 && input.host.length > 0 ? input.host : "127.0.0.1";
+		connection.port = input.port ?? defaultDatabasePort(input.type, input.type === "clickhouse" && input.secure === true);
+		const user = input.user !== void 0 && input.user.length > 0 ? input.user : defaultDatabaseUser(input.type);
+		if (user !== "") connection.user = user;
 		if (input.password !== void 0 && input.password.length > 0) connection.password = input.password;
 		if (input.passwordRef !== void 0) connection.passwordRef = input.passwordRef;
 	}
 	if (input.readonly !== void 0) connection.readonly = input.readonly;
+	if (input.type === "clickhouse" && input.secure !== void 0) connection.secure = input.secure;
 	if (input.profileId !== void 0) connection.profileId = input.profileId;
 	if (input.name !== void 0) connection.name = input.name;
 	return connection;
@@ -1333,6 +2056,7 @@ function createConnectionService(ctx, options, persistence) {
 	};
 	const runtime = /* @__PURE__ */ new Map();
 	const formDrafts = /* @__PURE__ */ new Map();
+	let latestFormInitial;
 	const profileConnection = (sessionId) => {
 		if (persistence === void 0) return void 0;
 		const binding = persistence.getBinding(sessionId);
@@ -1365,15 +2089,15 @@ function createConnectionService(ctx, options, persistence) {
 			tables: copyTables(connection.tables)
 		};
 	};
-	const queryOptions = (mode, connect = false) => ({
+	const queryOptions = (mode, connect = false, maxResultChars = resolvedOptions.maxResultChars, catalog = false) => ({
 		clients: resolvedOptions.clients,
-		timeoutMs: connect ? resolvedOptions.connectTimeoutMs : resolvedOptions.queryTimeoutMs,
-		maxResultChars: resolvedOptions.maxResultChars,
+		timeoutMs: connect ? resolvedOptions.connectTimeoutMs : catalog ? resolvedOptions.catalogQueryTimeoutMs ?? resolvedOptions.queryTimeoutMs : resolvedOptions.queryTimeoutMs,
+		maxResultChars,
 		...mode !== void 0 ? { mode } : {}
 	});
-	const run = async (connection, sql, signal, introspection = false, connect = false) => {
+	const run = async (connection, sql, signal, introspection = false, connect = false, mode, maxResultChars, catalog = false) => {
 		try {
-			return redactQueryResult(await runClientQuery(requireContext(), connection, sql, queryOptions(void 0, connect), signal, introspection), connection);
+			return redactQueryResult(await runClientQuery(requireContext(), connection, sql, queryOptions(mode, connect, maxResultChars, catalog), signal, introspection), connection);
 		} catch (error) {
 			const message = redactSecretText(error instanceof Error ? error.message : String(error), [connection.password]);
 			throw new Error(message, error instanceof Error ? { cause: error } : void 0);
@@ -1387,17 +2111,48 @@ function createConnectionService(ctx, options, persistence) {
 		}
 		return parseTableListing(connection.type, result.stdout).slice(0, resolvedOptions.introspectMaxTables);
 	};
-	const persistAtomically = async (sessionId, profileId, profile) => {
+	const canAccessMySqlSchema = async (connection, schema, signal) => {
+		if (schema === connection.database) return true;
+		const result = await run({
+			...connection,
+			database: schema
+		}, "SHOW TABLES;", signal, true);
+		if (result.exitCode === 0) return true;
+		const detail = result.stderr.trim() !== "" ? result.stderr.trim() : result.stdout.trim();
+		if (MYSQL_DATABASE_ACCESS_DENIED.test(detail)) return false;
+		throw new Error(`元数据查询失败（exit ${result.exitCode}）：${detail}`);
+	};
+	const listAccessibleMySqlSchemas = async (connection, schemas, signal) => {
+		const visible = [];
+		for (let offset = 0; offset < schemas.length && visible.length < resolvedOptions.introspectMaxTables; offset += MYSQL_SCHEMA_PROBE_CONCURRENCY) {
+			signal.throwIfAborted();
+			const batch = schemas.slice(offset, offset + MYSQL_SCHEMA_PROBE_CONCURRENCY);
+			const accessible = await Promise.all(batch.map((schema) => canAccessMySqlSchema(connection, schema, signal)));
+			for (let index = 0; index < batch.length; index += 1) {
+				if (accessible[index]) visible.push(batch[index]);
+				if (visible.length === resolvedOptions.introspectMaxTables) return visible;
+			}
+		}
+		return visible;
+	};
+	const persistAtomically = async (sessionId, profileId, profile, draft) => {
 		if (persistence === void 0) return;
 		const previousProfile = persistence.getProfile(profileId);
 		const previousBinding = persistence.getBinding(sessionId);
+		const previousDraft = persistence.getDraft?.(sessionId);
 		await persistence.putProfile(profileId, profile);
 		try {
 			await persistence.putBinding(sessionId, {
 				profileId,
 				updatedAt: profile.updatedAt
 			});
+			await persistence.putDraft?.(sessionId, {
+				...draft,
+				updatedAt: profile.updatedAt
+			});
 		} catch (error) {
+			if (previousDraft === void 0) await persistence.deleteDraft?.(sessionId);
+			else await persistence.putDraft?.(sessionId, previousDraft);
 			if (previousProfile === void 0) await persistence.deleteProfile(profileId);
 			else await persistence.putProfile(profileId, previousProfile);
 			if (previousBinding === void 0) await persistence.deleteBinding(sessionId);
@@ -1405,6 +2160,50 @@ function createConnectionService(ctx, options, persistence) {
 			throw error;
 		}
 	};
+	const matchingProfiles = (connection) => (persistence?.listProfiles?.() ?? []).filter((entry) => profileMatchesConnection(entry.profile, connection, resolvedOptions.cwd));
+	const preferredMatches = (matches) => {
+		const preferred = new Set(resolvedOptions.preferredProfileIds?.() ?? []);
+		return matches.filter((entry) => preferred.has(entry.profileId));
+	};
+	const reusableProfileId = (sessionId, connection) => {
+		if (connection.profileId !== void 0) return connection.profileId;
+		const fallback = `session:${sessionId}`;
+		const matches = matchingProfiles(connection);
+		const binding = persistence?.getBinding(sessionId);
+		const boundMatch = binding === void 0 ? void 0 : matches.find((entry) => entry.profileId === binding.profileId);
+		const preferred = preferredMatches(matches);
+		const stableMatches = matches.filter((entry) => !entry.profileId.startsWith("session:"));
+		if (boundMatch !== void 0 && preferred.some((entry) => entry.profileId === boundMatch.profileId)) return boundMatch.profileId;
+		if (preferred.length === 1) return preferred[0].profileId;
+		if (preferred.length > 1) return fallback;
+		if (boundMatch !== void 0 && !boundMatch.profileId.startsWith("session:")) return boundMatch.profileId;
+		if (stableMatches.length === 1) return stableMatches[0].profileId;
+		if (stableMatches.length > 1) return fallback;
+		if (boundMatch !== void 0) return boundMatch.profileId;
+		return matches.length === 1 ? matches[0].profileId : fallback;
+	};
+	const reconcileStableProfile = async (sessionId, connection) => {
+		if (persistence === void 0 || connection.profileId === void 0) return connection;
+		const matches = matchingProfiles(connection);
+		const preferred = preferredMatches(matches);
+		if (preferred.some((entry) => entry.profileId === connection.profileId)) return connection;
+		const stableMatches = matches.filter((entry) => !entry.profileId.startsWith("session:"));
+		const target = preferred.length === 1 ? preferred[0] : connection.profileId.startsWith("session:") ? stableMatches.length === 1 ? stableMatches[0] : void 0 : void 0;
+		if (target === void 0) return connection;
+		const profileId = target.profileId;
+		const updatedAt = (/* @__PURE__ */ new Date()).toISOString();
+		await persistence.putBinding(sessionId, {
+			profileId,
+			updatedAt
+		});
+		const reconciled = {
+			...connection,
+			profileId,
+			tables: copyTables(connection.tables)
+		};
+		runtime.set(sessionId, reconciled);
+		return reconciled;
+	};
 	const credentialSummary = async (connection) => {
 		const mode = credentialModeOf(connection);
 		if (connection.type === "sqlite" || mode === "none") return void 0;
@@ -1457,7 +2256,15 @@ function createConnectionService(ctx, options, persistence) {
 		},
 		getFormDraft(sessionId) {
 			const draft = persistence?.getDraft?.(sessionId) ?? formDrafts.get(sessionId);
-			return draft === void 0 ? void 0 : copyFormDraft(draft);
+			const exactProfile = profileConnection(sessionId);
+			if (draft !== void 0) return {
+				...copyFormDraft(draft),
+				...exactProfile?.passwordRef !== void 0 ? { passwordRef: exactProfile.passwordRef } : {}
+			};
+			if (exactProfile !== void 0) return formInitialFromConnection(exactProfile);
+			const latestProfile = persistence?.getLatestProfile?.();
+			if (latestProfile !== void 0) return formInitialFromConnection(connectionFromProfile(latestProfile.profileId, latestProfile.profile));
+			return latestFormInitial === void 0 ? void 0 : copyFormInitial(latestFormInitial);
 		},
 		async saveFormDraft(sessionId, draft) {
 			if (sessionId.length === 0) throw new Error("sessionId 必须是非空字符串");
@@ -1471,16 +2278,19 @@ function createConnectionService(ctx, options, persistence) {
 		async status(sessionId) {
 			const connection = rawConnection(sessionId);
 			if (connection === void 0) return void 0;
-			return statusSummary(connection);
+			return statusSummary(await reconcileStableProfile(sessionId, connection));
 		},
 		async connect(sessionId, input, signal) {
 			if (sessionId.length === 0) throw new Error("sessionId 必须是非空字符串");
 			const normalized = normalizeConnectionInput(input, resolvedOptions.cwd);
 			const execution = await resolveCredential(normalized);
 			const tables = await verify(execution, signal, true);
-			const profileId = normalized.profileId ?? `session:${sessionId}`;
+			const profileId = reusableProfileId(sessionId, normalized);
 			const updatedAt = (/* @__PURE__ */ new Date()).toISOString();
-			await persistAtomically(sessionId, profileId, profileFromConnection(normalized, updatedAt));
+			const draft = formDraftFromConnection(normalized);
+			await persistAtomically(sessionId, profileId, profileFromConnection(normalized, updatedAt), draft);
+			if (persistence === void 0) formDrafts.set(sessionId, draft);
+			latestFormInitial = formInitialFromConnection(normalized);
 			const published = {
 				...normalized,
 				profileId,
@@ -1514,10 +2324,26 @@ function createConnectionService(ctx, options, persistence) {
 			if (connection === void 0) throw new Error("请先在 Web「数据库」标签页连接数据库，或在 TUI 运行 /database connect（未找到当前会话的连接）");
 			return resolveCredential(connection);
 		},
+		async queryMetadata(sessionId, sql, signal) {
+			if (sql.trim().length === 0) throw new Error("Catalog metadata SQL must not be empty");
+			const maxQueryChars = resolvedOptions.maxQueryChars ?? 65536;
+			if (sql.length > maxQueryChars) throw new Error(`Catalog metadata SQL exceeds ${maxQueryChars} characters`);
+			assertSingleStatement(sql, "Catalog metadata query");
+			const connection = await service.resolveForExecution(sessionId);
+			if (classifyStatement(sql, connection.type) !== "read") throw new Error("Catalog metadata execution accepts read-only system catalog statements only");
+			const result = await run(connection, sql, signal, true, false, void 0, resolvedOptions.catalogMaxResultChars ?? resolvedOptions.maxResultChars, true);
+			if (result.exitCode !== 0) {
+				const detail = result.stderr.trim() !== "" ? result.stderr.trim() : result.stdout.trim();
+				throw new Error(`Catalog metadata query failed (exit ${result.exitCode}): ${detail}`);
+			}
+			return result;
+		},
 		async listSchemas(sessionId, signal) {
 			const connection = await service.resolveForExecution(sessionId);
 			const stdout = await runMetadata(connection, "schemas", signal);
-			return parseListing(connection.type, stdout).slice(0, resolvedOptions.introspectMaxTables);
+			const schemas = parseListing(connection.type, stdout);
+			if (connection.type === "mysql" || connection.type === "doris") return listAccessibleMySqlSchemas(connection, schemas, signal);
+			return schemas.slice(0, resolvedOptions.introspectMaxTables);
 		},
 		async listTables(sessionId, schema, signal) {
 			const connection = await service.resolveForExecution(sessionId);
@@ -1540,6 +2366,36 @@ function createConnectionService(ctx, options, persistence) {
 			const connection = await service.resolveForExecution(sessionId);
 			if ((connection.readonly ?? resolvedOptions.readonly) && classifyStatement(sql, connection.type) === "write") throw new Error("当前连接为只读模式，拒绝执行非读语句（仅放行 SELECT/SHOW/DESCRIBE/EXPLAIN/PRAGMA 等）");
 			return run(connection, sql, signal);
+		},
+		async executeInteractive(sessionId, sql, signal) {
+			if (sql.trim().length === 0) throw new Error("sql 必须是非空字符串");
+			const maxQueryChars = resolvedOptions.maxQueryChars ?? 65536;
+			if (sql.length > maxQueryChars) throw new Error(`sql 超过长度上限（${maxQueryChars} 字符）`);
+			assertSingleStatement(sql, "/query");
+			const connection = await service.resolveForExecution(sessionId);
+			const statementKind = classifyStatement(sql, connection.type);
+			if ((connection.readonly ?? resolvedOptions.readonly) && statementKind === "write") throw new Error("当前连接为只读模式，拒绝执行非读语句（仅放行 SELECT/SHOW/DESCRIBE/EXPLAIN/PRAGMA 等）");
+			if (statementKind === "write") return {
+				kind: "message",
+				...await run(connection, sql, signal)
+			};
+			const limitedSql = enforceReadRowLimit(sql, connection.type, 50001);
+			const startedAt = Date.now();
+			const result = await run(connection, limitedSql, signal, false, false, "structured", WORKBENCH_MAX_RESULT_CHARS);
+			if (result.exitCode !== 0) return {
+				kind: "message",
+				...result
+			};
+			if (result.truncated) throw new Error("查询结果超过 Web 工作台大小上限，请减少返回列或缩小字段后重试");
+			const parsed = parseStructuredQueryOutput(connection.type, result.stdout, WORKBENCH_MAX_EXPORT_ROWS);
+			return {
+				kind: "table",
+				columns: parsed.columns,
+				rows: parsed.rows,
+				elapsedMs: Date.now() - startedAt,
+				truncated: parsed.rowLimitExceeded,
+				maxRows: WORKBENCH_MAX_EXPORT_ROWS
+			};
 		}
 	};
 	async function runMetadata(connection, kind, signal, schema, table) {
@@ -1557,7 +2413,7 @@ function copyTables(tables) {
 }
 function normalizeFormDraft(draft) {
 	if (!isDatabaseType(draft.type)) throw new Error("数据库类型无效");
-	if (typeof draft.host !== "string" || typeof draft.port !== "string" || typeof draft.user !== "string" || typeof draft.database !== "string" || typeof draft.readonly !== "boolean") throw new Error("数据库表单草稿无效");
+	if (typeof draft.host !== "string" || typeof draft.port !== "string" || typeof draft.user !== "string" || typeof draft.database !== "string" || typeof draft.readonly !== "boolean" || draft.secure !== void 0 && typeof draft.secure !== "boolean") throw new Error("数据库表单草稿无效");
 	return copyFormDraft(draft);
 }
 function copyFormDraft(draft) {
@@ -1567,11 +2423,32 @@ function copyFormDraft(draft) {
 		port: draft.port,
 		user: draft.user,
 		database: draft.database,
-		readonly: draft.readonly
+		readonly: draft.readonly,
+		...draft.type === "clickhouse" ? { secure: draft.secure ?? false } : {}
 	};
 }
-function isDatabaseType(value) {
-	return value === "mysql" || value === "postgres" || value === "sqlite" || value === "oracle" || value === "hive" || value === "impala";
+function copyFormInitial(initial) {
+	return {
+		...copyFormDraft(initial),
+		...initial.passwordRef !== void 0 ? { passwordRef: initial.passwordRef } : {}
+	};
+}
+function formDraftFromConnection(connection) {
+	return {
+		type: connection.type,
+		host: connection.type === "sqlite" ? "" : connection.host ?? "",
+		port: connection.type === "sqlite" || connection.port === void 0 ? "" : String(connection.port),
+		user: connection.type === "sqlite" ? "" : connection.user ?? "",
+		database: connection.database,
+		readonly: connection.readonly ?? false,
+		...connection.type === "clickhouse" ? { secure: connection.secure ?? false } : {}
+	};
+}
+function formInitialFromConnection(connection) {
+	return {
+		...formDraftFromConnection(connection),
+		...connection.passwordRef !== void 0 ? { passwordRef: connection.passwordRef } : {}
+	};
 }
 function validatePasswordRef(value) {
 	try {
@@ -1594,6 +2471,7 @@ function connectionFromProfile(profileId, profile) {
 		...profile.port !== void 0 ? { port: profile.port } : {},
 		...profile.user !== void 0 ? { user: profile.user } : {},
 		...profile.readonly !== void 0 ? { readonly: profile.readonly } : {},
+		...profile.secure !== void 0 ? { secure: profile.secure } : {},
 		...profile.passwordRef !== void 0 ? { passwordRef: profile.passwordRef } : {},
 		credentialMode: profile.credentialMode ?? (profile.type === "sqlite" ? "none" : profile.passwordRef !== void 0 ? "reference" : "password")
 	};
@@ -1608,10 +2486,28 @@ function profileFromConnection(connection, updatedAt) {
 		...connection.port !== void 0 ? { port: connection.port } : {},
 		...connection.user !== void 0 ? { user: connection.user } : {},
 		...connection.readonly !== void 0 ? { readonly: connection.readonly } : {},
+		...connection.secure !== void 0 ? { secure: connection.secure } : {},
 		...connection.passwordRef !== void 0 ? { passwordRef: connection.passwordRef } : {},
 		...connection.credentialMode !== void 0 ? { credentialMode: connection.credentialMode } : {}
 	};
 }
+/** Match only normalized, non-secret endpoint/principal identity fields. */
+function profileMatchesConnection(profile, connection, cwd = process.cwd()) {
+	let candidate;
+	try {
+		candidate = normalizeConnectionInput({
+			type: profile.type,
+			database: profile.database,
+			...profile.host !== void 0 ? { host: profile.host } : {},
+			...profile.port !== void 0 ? { port: profile.port } : {},
+			...profile.user !== void 0 ? { user: profile.user } : {},
+			...profile.secure !== void 0 ? { secure: profile.secure } : {}
+		}, cwd);
+	} catch {
+		return false;
+	}
+	return candidate.type === connection.type && candidate.database === connection.database && candidate.host === connection.host && candidate.port === connection.port && candidate.user === connection.user && (candidate.secure ?? false) === (connection.secure ?? false);
+}
 /** Infer legacy records while leaving ambiguous secret-less SQL profiles conservative. */
 function credentialModeOf(connection) {
 	if (connection.credentialMode !== void 0) return connection.credentialMode;
@@ -1626,4 +2522,4 @@ function requireIdentifier(type, value, label) {
 	return value;
 }
 //#endregion
-export { classifyStatement as a, assertSingleStatement as c, runClientQuery as i, redactQueryResult as n, clientsSchema as o, redactSecretText as r, enforceReadRowLimit as s, createConnectionService as t };
+export { isDatabaseType as C, defaultDatabasePort as S, clientsSchema as _, parseStructuredQueryOutput as a, DATABASE_TYPES as b, DEFAULT_CATALOG_MAX_RESULT_CHARS as c, DEFAULT_CONNECT_TIMEOUT_MS as d, DEFAULT_MAX_QUERY_CHARS as f, classifyStatement as g, DEFAULT_QUERY_TIMEOUT_MS as h, validatePasswordRef as i, DEFAULT_CATALOG_MAX_TEXT_CHARS as l, DEFAULT_PRESET_ID as m, redactQueryResult as n, runClientQuery as o, DEFAULT_MAX_RESULT_CHARS as p, redactSecretText as r, DEFAULT_CATALOG_MAX_ASSETS as s, createConnectionService as t, DEFAULT_CATALOG_QUERY_TIMEOUT_MS as u, enforceReadRowLimit as v, databaseTypeLabel as x, assertSingleStatement as y };