@yejiming/dsh-data-agent 0.1.0 → 0.1.2

package/lib/{command-CzzSPmag.js → command-scZcZG11.js}

@@ -1,4 +1,4 @@
-import { C as isDatabaseType, S as defaultDatabasePort$1, b as DATABASE_TYPES, i as validatePasswordRef, r as redactSecretText, x as databaseTypeLabel$1 } from "./connections-CFXOZTHZ.js";
+import { C as isDatabaseType, S as defaultDatabasePort$1, b as DATABASE_TYPES, i as validatePasswordRef, r as redactSecretText, x as databaseTypeLabel$1 } from "./connections-dGPjgsGg.js";
 import { RUN_CODE_NAME } from "@deepseek-ai/dsh-tools";
 //#region src/tui-connection-form.ts
 /**

package/lib/command.js

@@ -1,2 +1,2 @@
-import { a as executeDatabaseCommand, c as isDshTuiPluginLoaded, d as parseDatabaseAction, i as apply, l as name, n as DATA_AGENT_TOOL_NAMES, o as formatConnectionStatus, r as DSH_TUI_PLUGIN_RUNTIME_NAME, s as inject, t as DATABASE_COMMAND_USAGE, u as parseConnectArguments } from "./command-CzzSPmag.js";
+import { a as executeDatabaseCommand, c as isDshTuiPluginLoaded, d as parseDatabaseAction, i as apply, l as name, n as DATA_AGENT_TOOL_NAMES, o as formatConnectionStatus, r as DSH_TUI_PLUGIN_RUNTIME_NAME, s as inject, t as DATABASE_COMMAND_USAGE, u as parseConnectArguments } from "./command-scZcZG11.js";
 export { DATABASE_COMMAND_USAGE, DATA_AGENT_TOOL_NAMES, DSH_TUI_PLUGIN_RUNTIME_NAME, apply, executeDatabaseCommand, formatConnectionStatus, inject, isDshTuiPluginLoaded, name, parseConnectArguments, parseDatabaseAction };

package/lib/{connections-CFXOZTHZ.js → connections-dGPjgsGg.js}

@@ -807,16 +807,16 @@ function rewriteTopLevelLimit(sql, maxRows) {
 	}
 	return sql;
 }
+const METADATA_IDENTIFIER = /^[\p{L}\p{M}\p{N}_$]+$/u;
 /**
 * Validate and quote one schema/table identifier for a safe metadata query.
-* Identifiers are restricted to `[A-Za-z0-9_$]+` and then wrapped per type:
-* backticks (mysql/hive/impala) or double quotes (postgres/oracle/sqlite),
-* with the wrapping quote doubled for any interior occurrence. Rejects any
-* input that could cross the identifier boundary (`#`, `--`, `;`, `'`, `` ` ``,
-* `"`, `.`, `-` are all refused).
+* Identifiers accept Unicode letters, combining marks and numbers plus `_`/`$`
+* without normalizing or case-folding the database-provided text. Each value is
+* then wrapped for its dialect. Whitespace, controls, punctuation and quoting
+* delimiters remain outside the deliberately narrow metadata-input boundary.
 */
 function sanitizeIdentifier(type, identifier) {
-	if (!/^[A-Za-z0-9_$]+$/.test(identifier)) throw new Error(`标识符含非法字符（仅允许字母、数字与 _ $）：${identifier}`);
+	if (!METADATA_IDENTIFIER.test(identifier)) throw new Error(`标识符含非法字符（仅允许 Unicode 字母、组合标记、数字与 _ $）：${identifier}`);
 	switch (type) {
 		case "mysql":
 		case "doris":
@@ -834,8 +834,8 @@ function sanitizeIdentifier(type, identifier) {
 * interior `'` doubled). postgres/oracle metadata queries filter system
 * catalogs by NAME (a string value), not by identifier, so those positions
 * need a quoted literal — not {@link sanitizeIdentifier}'s identifier quoting.
-* The whitelist already excludes `'`, so doubling is a defense-in-depth no-op
-* here but keeps the helper correct for any future widened charset.
+* The whitelist excludes `'`, so doubling is a defense-in-depth no-op here but
+* keeps the helper correct for any future widened metadata-input boundary.
 */
 function quoteStringLiteral(value) {
 	return "'" + value.replace(/'/g, "''") + "'";
@@ -1124,8 +1124,9 @@ function tableListingSql(type, connection) {
 	}
 }
 /**
-* Metadata query per kind × type. `schema`/`table` are identifier whitelist
-* validated by the caller (`[A-Za-z0-9_$]`) before they reach here.
+* Metadata query per kind × type. `schema`/`table` are validated by the shared
+* connection service before they reach here; builders still quote identifier
+* positions or escape value positions rather than concatenating raw text.
 */
 function metadataQuery(kind, type, schema, table) {
 	switch (kind) {

package/lib/index.js

@@ -1,7 +1,7 @@
-import { _ as clientsSchema, b as DATABASE_TYPES, c as DEFAULT_CATALOG_MAX_RESULT_CHARS, d as DEFAULT_CONNECT_TIMEOUT_MS, f as DEFAULT_MAX_QUERY_CHARS, h as DEFAULT_QUERY_TIMEOUT_MS, l as DEFAULT_CATALOG_MAX_TEXT_CHARS, m as DEFAULT_PRESET_ID, p as DEFAULT_MAX_RESULT_CHARS, s as DEFAULT_CATALOG_MAX_ASSETS, t as createConnectionService, u as DEFAULT_CATALOG_QUERY_TIMEOUT_MS } from "./connections-CFXOZTHZ.js";
-import { a as catalogDateTimeSchema, c as catalogRunSchema, f as catalogSemanticEntrySchema, i as catalogAssetRevisionSchema, m as catalogSourceSchema, n as createCatalogService, o as catalogObservationSchema, p as catalogSemanticRevisionSchema, r as catalogAssetHeadSchema, s as catalogRelationSchema, u as catalogSearchItemSchema } from "./catalog-DEJqOXRo.js";
-import { i as apply$1 } from "./command-CzzSPmag.js";
-import { n as apply$2 } from "./tool-DNkywSph.js";
+import { _ as clientsSchema, b as DATABASE_TYPES, c as DEFAULT_CATALOG_MAX_RESULT_CHARS, d as DEFAULT_CONNECT_TIMEOUT_MS, f as DEFAULT_MAX_QUERY_CHARS, h as DEFAULT_QUERY_TIMEOUT_MS, l as DEFAULT_CATALOG_MAX_TEXT_CHARS, m as DEFAULT_PRESET_ID, p as DEFAULT_MAX_RESULT_CHARS, s as DEFAULT_CATALOG_MAX_ASSETS, t as createConnectionService, u as DEFAULT_CATALOG_QUERY_TIMEOUT_MS } from "./connections-dGPjgsGg.js";
+import { a as catalogDateTimeSchema, c as catalogRunSchema, f as catalogSemanticEntrySchema, i as catalogAssetRevisionSchema, m as catalogSourceSchema, n as createCatalogService, o as catalogObservationSchema, p as catalogSemanticRevisionSchema, r as catalogAssetHeadSchema, s as catalogRelationSchema, u as catalogSearchItemSchema } from "./catalog-CbxIDQBG.js";
+import { i as apply$1 } from "./command-scZcZG11.js";
+import { n as apply$2 } from "./tool-Du1EadNP.js";
 import { createHash } from "node:crypto";
 import { access, cp, mkdir, readFile, writeFile } from "node:fs/promises";
 import { homedir } from "node:os";

package/lib/routes.js

@@ -1,5 +1,5 @@
-import { C as isDatabaseType, b as DATABASE_TYPES, d as DEFAULT_CONNECT_TIMEOUT_MS, f as DEFAULT_MAX_QUERY_CHARS, h as DEFAULT_QUERY_TIMEOUT_MS, p as DEFAULT_MAX_RESULT_CHARS } from "./connections-CFXOZTHZ.js";
-import { d as catalogSearchRequestSchema, h as semanticDefinitionSchema, l as catalogScopeSchema, t as CatalogVersionConflictError } from "./catalog-DEJqOXRo.js";
+import { C as isDatabaseType, b as DATABASE_TYPES, d as DEFAULT_CONNECT_TIMEOUT_MS, f as DEFAULT_MAX_QUERY_CHARS, h as DEFAULT_QUERY_TIMEOUT_MS, p as DEFAULT_MAX_RESULT_CHARS } from "./connections-dGPjgsGg.js";
+import { d as catalogSearchRequestSchema, h as semanticDefinitionSchema, l as catalogScopeSchema, t as CatalogVersionConflictError } from "./catalog-CbxIDQBG.js";
 import { resolve } from "node:path";
 import z from "schemastery";
 import { z as z$1 } from "zod";

package/lib/{tool-DNkywSph.js → tool-Du1EadNP.js}

@@ -1,4 +1,4 @@
-import { _ as clientsSchema, a as parseStructuredQueryOutput, f as DEFAULT_MAX_QUERY_CHARS, g as classifyStatement, h as DEFAULT_QUERY_TIMEOUT_MS, n as redactQueryResult, o as runClientQuery, p as DEFAULT_MAX_RESULT_CHARS, r as redactSecretText, v as enforceReadRowLimit, y as assertSingleStatement } from "./connections-CFXOZTHZ.js";
+import { _ as clientsSchema, a as parseStructuredQueryOutput, f as DEFAULT_MAX_QUERY_CHARS, g as classifyStatement, h as DEFAULT_QUERY_TIMEOUT_MS, n as redactQueryResult, o as runClientQuery, p as DEFAULT_MAX_RESULT_CHARS, r as redactSecretText, v as enforceReadRowLimit, y as assertSingleStatement } from "./connections-dGPjgsGg.js";
 import { l as normalizeCatalogText } from "./catalog-identity-CVftmvQL.js";
 import { randomUUID } from "node:crypto";
 import { link, mkdir, unlink, writeFile } from "node:fs/promises";

package/lib/tool.js

@@ -1,2 +1,2 @@
-import { i as name, n as apply, r as inject, t as Config } from "./tool-DNkywSph.js";
+import { i as name, n as apply, r as inject, t as Config } from "./tool-Du1EadNP.js";
 export { Config, apply, inject, name };

package/lib/types/clients.d.ts

@@ -38,11 +38,10 @@ export declare function enforceReadRowLimit(sql: string, type: DatabaseType, max
 export declare const SQLSERVER_COLUMN_SEPARATOR = "\u001F";
 /**
  * Validate and quote one schema/table identifier for a safe metadata query.
- * Identifiers are restricted to `[A-Za-z0-9_$]+` and then wrapped per type:
- * backticks (mysql/hive/impala) or double quotes (postgres/oracle/sqlite),
- * with the wrapping quote doubled for any interior occurrence. Rejects any
- * input that could cross the identifier boundary (`#`, `--`, `;`, `'`, `` ` ``,
- * `"`, `.`, `-` are all refused).
+ * Identifiers accept Unicode letters, combining marks and numbers plus `_`/`$`
+ * without normalizing or case-folding the database-provided text. Each value is
+ * then wrapped for its dialect. Whitespace, controls, punctuation and quoting
+ * delimiters remain outside the deliberately narrow metadata-input boundary.
  */
 export declare function sanitizeIdentifier(type: DatabaseType, identifier: string): string;
 /** One deployment override for a database type's CLI client. */
@@ -112,8 +111,9 @@ export declare function buildStructuredQueryTemplate(type: DatabaseType, connect
  */
 export declare function tableListingSql(type: DatabaseType, connection?: DatabaseConnection): string;
 /**
- * Metadata query per kind × type. `schema`/`table` are identifier whitelist
- * validated by the caller (`[A-Za-z0-9_$]`) before they reach here.
+ * Metadata query per kind × type. `schema`/`table` are validated by the shared
+ * connection service before they reach here; builders still quote identifier
+ * positions or escape value positions rather than concatenating raw text.
  */
 export declare function metadataQuery(kind: 'schemas' | 'tables' | 'describe', type: DatabaseType, schema?: string, table?: string): string;
 /**

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@yejiming/dsh-data-agent",
   "description": "Data Agent for DSH Web and TUI: shared database connections, versioned metadata Catalog governance, secure credentials, SQL and Catalog tools, and the data-agent preset",
-  "version": "0.1.0",
+  "version": "0.1.2",
   "publishConfig": {
     "access": "public"
   },