agent-database-cli 0.2.7

package/dist/security.js

@@ -0,0 +1,239 @@
+const SQL_READ_COMMANDS = new Set(["select", "show", "describe", "desc", "explain", "with"]);
+const SQL_WRITE_COMMANDS = [
+    "insert",
+    "update",
+    "delete",
+    "merge",
+    "replace",
+    "drop",
+    "truncate",
+    "alter",
+    "create",
+    "grant",
+    "revoke"
+];
+const REDIS_READ_COMMANDS = new Set([
+    "get",
+    "mget",
+    "exists",
+    "ttl",
+    "pttl",
+    "type",
+    "strlen",
+    "keys",
+    "scan",
+    "hget",
+    "hgetall",
+    "hmget",
+    "hexists",
+    "hlen",
+    "hkeys",
+    "hvals",
+    "lrange",
+    "llen",
+    "lindex",
+    "smembers",
+    "scard",
+    "sismember",
+    "zrange",
+    "zrevrange",
+    "zcard",
+    "zscore"
+]);
+const MONGO_READ_COMMANDS = new Set([
+    "find",
+    "findOne",
+    "aggregate",
+    "count",
+    "countDocuments",
+    "estimatedDocumentCount",
+    "distinct"
+]);
+export class SecurityError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = "SecurityError";
+    }
+}
+export function normalizeCommand(command) {
+    return command.trim().replace(/\s+/g, " ");
+}
+export function getCommandHead(command, type) {
+    const normalized = normalizeCommand(command);
+    if (type === "mongodb") {
+        return getMongoCommandName(normalized).toLowerCase();
+    }
+    return normalized.split(/\s+/)[0]?.replace(/;$/, "").toLowerCase() || "";
+}
+export function assertCommandAllowed(config, command) {
+    const normalized = normalizeCommand(command);
+    const head = getCommandHead(normalized, config.type);
+    assertNotBlacklisted(config, normalized, head);
+    // 默认开启只读，只有显式配置 readonly: false 才允许写操作。
+    if (isReadonlyEnabled(config) && !isReadOnlyCommand(config.type, normalized)) {
+        throw new SecurityError(`只读模式拒绝执行命令: ${head || normalized}`);
+    }
+}
+function assertNotBlacklisted(config, normalized, head) {
+    const commandForBlacklist = isSqlDatabase(config.type) ? stripSqlLiteralsAndComments(normalized) : normalized;
+    for (const item of config.blacklist || []) {
+        const black = normalizeCommand(item).toLowerCase();
+        if (!black) {
+            continue;
+        }
+        if (head === black || hasBlacklistedKeyword(commandForBlacklist, black)) {
+            throw new SecurityError(`黑名单拒绝执行命令: ${item}`);
+        }
+    }
+}
+function hasBlacklistedKeyword(command, keyword) {
+    const normalized = command.toLowerCase();
+    const escaped = escapeRegExp(keyword).replace(/\s+/g, "\\s+");
+    // 黑名单按完整命令关键字匹配，避免 FCREATETIME 这类字段名误命中 create。
+    return new RegExp(`(?<![\\p{L}\\p{N}_$])${escaped}(?![\\p{L}\\p{N}_$])`, "u").test(normalized);
+}
+function escapeRegExp(value) {
+    return value.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+}
+function stripSqlLiteralsAndComments(command) {
+    let result = "";
+    let index = 0;
+    while (index < command.length) {
+        const char = command[index];
+        const next = command[index + 1];
+        if ((char === "q" || char === "Q") && next === "'") {
+            const endIndex = findOracleQuotedLiteralEnd(command, index);
+            if (endIndex !== -1) {
+                result += " ".repeat(endIndex - index);
+                index = endIndex;
+                continue;
+            }
+        }
+        if (char === "-" && next === "-") {
+            const endIndex = findLineEnd(command, index + 2);
+            result += " ".repeat(endIndex - index);
+            index = endIndex;
+            continue;
+        }
+        if (char === "#") {
+            const endIndex = findLineEnd(command, index + 1);
+            result += " ".repeat(endIndex - index);
+            index = endIndex;
+            continue;
+        }
+        if (char === "/" && next === "*") {
+            const endIndex = findBlockCommentEnd(command, index + 2);
+            result += " ".repeat(endIndex - index);
+            index = endIndex;
+            continue;
+        }
+        if (char === "'") {
+            const endIndex = findQuotedTokenEnd(command, index, "'", "'");
+            result += " ".repeat(endIndex - index);
+            index = endIndex;
+            continue;
+        }
+        if (char === '"') {
+            const endIndex = findQuotedTokenEnd(command, index, '"', '"');
+            result += " ".repeat(endIndex - index);
+            index = endIndex;
+            continue;
+        }
+        if (char === "`") {
+            const endIndex = findQuotedTokenEnd(command, index, "`", "`");
+            result += " ".repeat(endIndex - index);
+            index = endIndex;
+            continue;
+        }
+        if (char === "[") {
+            const endIndex = findQuotedTokenEnd(command, index, "[", "]");
+            result += " ".repeat(endIndex - index);
+            index = endIndex;
+            continue;
+        }
+        result += char;
+        index += 1;
+    }
+    return result;
+}
+function findLineEnd(command, start) {
+    const lineEnd = command.indexOf("\n", start);
+    return lineEnd === -1 ? command.length : lineEnd;
+}
+function findBlockCommentEnd(command, start) {
+    const commentEnd = command.indexOf("*/", start);
+    return commentEnd === -1 ? command.length : commentEnd + 2;
+}
+function findQuotedTokenEnd(command, start, open, close) {
+    let index = start + open.length;
+    while (index < command.length) {
+        if (command[index] === close) {
+            if (command[index + close.length] === close) {
+                index += close.length * 2;
+                continue;
+            }
+            return index + close.length;
+        }
+        if (command[index] === "\\" && close !== "]") {
+            index += 2;
+            continue;
+        }
+        index += 1;
+    }
+    return command.length;
+}
+function findOracleQuotedLiteralEnd(command, start) {
+    const open = command[start + 2];
+    if (!open) {
+        return -1;
+    }
+    const close = getOracleQuotedLiteralClose(open);
+    const closeSequence = `${close}'`;
+    const contentStart = start + 3;
+    const closeIndex = command.indexOf(closeSequence, contentStart);
+    return closeIndex === -1 ? -1 : closeIndex + closeSequence.length;
+}
+function getOracleQuotedLiteralClose(open) {
+    if (open === "[") {
+        return "]";
+    }
+    if (open === "(") {
+        return ")";
+    }
+    if (open === "{") {
+        return "}";
+    }
+    if (open === "<") {
+        return ">";
+    }
+    return open;
+}
+function isSqlDatabase(type) {
+    return type === "mysql" || type === "postgres" || type === "oracle";
+}
+export function isReadOnlyCommand(type, command) {
+    const head = getCommandHead(command, type);
+    if (type === "redis") {
+        return REDIS_READ_COMMANDS.has(head);
+    }
+    if (type === "mongodb") {
+        return MONGO_READ_COMMANDS.has(getMongoCommandName(command));
+    }
+    if (!SQL_READ_COMMANDS.has(head)) {
+        return false;
+    }
+    const sanitizedCommand = stripSqlLiteralsAndComments(command);
+    return !SQL_WRITE_COMMANDS.some((keyword) => hasBlacklistedKeyword(sanitizedCommand, keyword));
+}
+function isReadonlyEnabled(config) {
+    return config.readonly !== false;
+}
+function getMongoCommandName(command) {
+    const parsed = JSON.parse(command);
+    const firstKey = Object.keys(parsed)[0];
+    if (!firstKey) {
+        throw new SecurityError("MongoDB 命令 JSON 不能为空");
+    }
+    return firstKey;
+}
+//# sourceMappingURL=security.js.map

package/dist/security.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"security.js","sourceRoot":"","sources":["../src/security.ts"],"names":[],"mappings":"AAEA,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;AAC7F,MAAM,kBAAkB,GAAG;IACzB,QAAQ;IACR,QAAQ;IACR,QAAQ;IACR,OAAO;IACP,SAAS;IACT,MAAM;IACN,UAAU;IACV,OAAO;IACP,QAAQ;IACR,OAAO;IACP,QAAQ;CACT,CAAC;AACF,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC;IAClC,KAAK;IACL,MAAM;IACN,QAAQ;IACR,KAAK;IACL,MAAM;IACN,MAAM;IACN,QAAQ;IACR,MAAM;IACN,MAAM;IACN,MAAM;IACN,SAAS;IACT,OAAO;IACP,SAAS;IACT,MAAM;IACN,OAAO;IACP,OAAO;IACP,QAAQ;IACR,MAAM;IACN,QAAQ;IACR,UAAU;IACV,OAAO;IACP,WAAW;IACX,QAAQ;IACR,WAAW;IACX,OAAO;IACP,QAAQ;CACT,CAAC,CAAC;AACH,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC;IAClC,MAAM;IACN,SAAS;IACT,WAAW;IACX,OAAO;IACP,gBAAgB;IAChB,wBAAwB;IACxB,UAAU;CACX,CAAC,CAAC;AAEH,MAAM,OAAO,aAAc,SAAQ,KAAK;IACtC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,eAAe,CAAC;IAC9B,CAAC;CACF;AAED,MAAM,UAAU,gBAAgB,CAAC,OAAe;IAC9C,OAAO,OAAO,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;AAC7C,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,OAAe,EAAE,IAAkB;IAChE,MAAM,UAAU,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAC7C,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,OAAO,mBAAmB,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE,CAAC;IACvD,CAAC;IACD,OAAO,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC;AAC3E,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,MAAsB,EAAE,OAAe;IAC1E,MAAM,UAAU,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAC7C,MAAM,IAAI,GAAG,cAAc,CAAC,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;IACrD,oBAAoB,CAAC,MAAM,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC;IAE/C,wCAAwC;IACxC,IAAI,iBAAiB,CAAC,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,IAAI,EAAE,UAAU,CAAC,EAAE,CAAC;QAC7E,MAAM,IAAI,aAAa,CAAC,eAAe,IAAI,IAAI,UAAU,EAAE,CAAC,CAAC;IAC/D,CAAC;AACH,CAAC;AAED,SAAS,oBAAoB,CAAC,MAAsB,EAAE,UAAkB,EAAE,IAAY;IACpF,MAAM,mBAAmB,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,2BAA2B,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC;IAC9G,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,SAAS,IAAI,EAAE,EAAE,CAAC;QAC1C,MAAM,KAAK,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;QACnD,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,SAAS;QACX,CAAC;QACD,IAAI,IAAI,KAAK,KAAK,IAAI,qBAAqB,CAAC,mBAAmB,EAAE,KAAK,CAAC,EAAE,CAAC;YACxE,MAAM,IAAI,aAAa,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC;QAChD,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,qBAAqB,CAAC,OAAe,EAAE,OAAe;IAC7D,MAAM,UAAU,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;IACzC,MAAM,OAAO,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC9D,gDAAgD;IAChD,OAAO,IAAI,MAAM,CAAC,wBAAwB,OAAO,sBAAsB,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;AACjG,CAAC;AAED,SAAS,YAAY,CAAC,KAAa;IACjC,OAAO,KAAK,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;AACtD,CAAC;AAED,SAAS,2BAA2B,CAAC,OAAe;IAClD,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,IAAI,KAAK,GAAG,CAAC,CAAC;IAEd,OAAO,KAAK,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;QAC9B,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;QAC5B,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;QAEhC,IAAI,CAAC,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,CAAC,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACnD,MAAM,QAAQ,GAAG,0BAA0B,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YAC5D,IAAI,QAAQ,KAAK,CAAC,CAAC,EAAE,CAAC;gBACpB,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,QAAQ,GAAG,KAAK,CAAC,CAAC;gBACvC,KAAK,GAAG,QAAQ,CAAC;gBACjB,SAAS;YACX,CAAC;QACH,CAAC;QAED,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACjC,MAAM,QAAQ,GAAG,WAAW,CAAC,OAAO,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;YACjD,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,QAAQ,GAAG,KAAK,CAAC,CAAC;YACvC,KAAK,GAAG,QAAQ,CAAC;YACjB,SAAS;QACX,CAAC;QAED,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACjB,MAAM,QAAQ,GAAG,WAAW,CAAC,OAAO,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;YACjD,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,QAAQ,GAAG,KAAK,CAAC,CAAC;YACvC,KAAK,GAAG,QAAQ,CAAC;YACjB,SAAS;QACX,CAAC;QAED,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACjC,MAAM,QAAQ,GAAG,mBAAmB,CAAC,OAAO,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;YACzD,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,QAAQ,GAAG,KAAK,CAAC,CAAC;YACvC,KAAK,GAAG,QAAQ,CAAC;YACjB,SAAS;QACX,CAAC;QAED,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACjB,MAAM,QAAQ,GAAG,kBAAkB,CAAC,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;YAC9D,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,QAAQ,GAAG,KAAK,CAAC,CAAC;YACvC,KAAK,GAAG,QAAQ,CAAC;YACjB,SAAS;QACX,CAAC;QAED,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACjB,MAAM,QAAQ,GAAG,kBAAkB,CAAC,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;YAC9D,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,QAAQ,GAAG,KAAK,CAAC,CAAC;YACvC,KAAK,GAAG,QAAQ,CAAC;YACjB,SAAS;QACX,CAAC;QAED,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACjB,MAAM,QAAQ,GAAG,kBAAkB,CAAC,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;YAC9D,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,QAAQ,GAAG,KAAK,CAAC,CAAC;YACvC,KAAK,GAAG,QAAQ,CAAC;YACjB,SAAS;QACX,CAAC;QAED,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACjB,MAAM,QAAQ,GAAG,kBAAkB,CAAC,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;YAC9D,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,QAAQ,GAAG,KAAK,CAAC,CAAC;YACvC,KAAK,GAAG,QAAQ,CAAC;YACjB,SAAS;QACX,CAAC;QAED,MAAM,IAAI,IAAI,CAAC;QACf,KAAK,IAAI,CAAC,CAAC;IACb,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,WAAW,CAAC,OAAe,EAAE,KAAa;IACjD,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC7C,OAAO,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;AACnD,CAAC;AAED,SAAS,mBAAmB,CAAC,OAAe,EAAE,KAAa;IACzD,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAChD,OAAO,UAAU,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC;AAC7D,CAAC;AAED,SAAS,kBAAkB,CAAC,OAAe,EAAE,KAAa,EAAE,IAAY,EAAE,KAAa;IACrF,IAAI,KAAK,GAAG,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC;IAChC,OAAO,KAAK,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;QAC9B,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK,KAAK,EAAE,CAAC;YAC7B,IAAI,OAAO,CAAC,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,KAAK,KAAK,EAAE,CAAC;gBAC5C,KAAK,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;gBAC1B,SAAS;YACX,CAAC;YACD,OAAO,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC;QAC9B,CAAC;QACD,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK,IAAI,IAAI,KAAK,KAAK,GAAG,EAAE,CAAC;YAC7C,KAAK,IAAI,CAAC,CAAC;YACX,SAAS;QACX,CAAC;QACD,KAAK,IAAI,CAAC,CAAC;IACb,CAAC;IACD,OAAO,OAAO,CAAC,MAAM,CAAC;AACxB,CAAC;AAED,SAAS,0BAA0B,CAAC,OAAe,EAAE,KAAa;IAChE,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;IAChC,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,CAAC,CAAC,CAAC;IACZ,CAAC;IACD,MAAM,KAAK,GAAG,2BAA2B,CAAC,IAAI,CAAC,CAAC;IAChD,MAAM,aAAa,GAAG,GAAG,KAAK,GAAG,CAAC;IAClC,MAAM,YAAY,GAAG,KAAK,GAAG,CAAC,CAAC;IAC/B,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,aAAa,EAAE,YAAY,CAAC,CAAC;IAChE,OAAO,UAAU,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,GAAG,aAAa,CAAC,MAAM,CAAC;AACpE,CAAC;AAED,SAAS,2BAA2B,CAAC,IAAY;IAC/C,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;QACjB,OAAO,GAAG,CAAC;IACb,CAAC;IACD,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;QACjB,OAAO,GAAG,CAAC;IACb,CAAC;IACD,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;QACjB,OAAO,GAAG,CAAC;IACb,CAAC;IACD,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;QACjB,OAAO,GAAG,CAAC;IACb,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,aAAa,CAAC,IAAkB;IACvC,OAAO,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,UAAU,IAAI,IAAI,KAAK,QAAQ,CAAC;AACtE,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,IAAkB,EAAE,OAAe;IACnE,MAAM,IAAI,GAAG,cAAc,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAC3C,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;QACrB,OAAO,mBAAmB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACvC,CAAC;IACD,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,OAAO,mBAAmB,CAAC,GAAG,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC,CAAC;IAC/D,CAAC;IACD,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QACjC,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,gBAAgB,GAAG,2BAA2B,CAAC,OAAO,CAAC,CAAC;IAC9D,OAAO,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,qBAAqB,CAAC,gBAAgB,EAAE,OAAO,CAAC,CAAC,CAAC;AACjG,CAAC;AAED,SAAS,iBAAiB,CAAC,MAAsB;IAC/C,OAAO,MAAM,CAAC,QAAQ,KAAK,KAAK,CAAC;AACnC,CAAC;AAED,SAAS,mBAAmB,CAAC,OAAe;IAC1C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAA4B,CAAC;IAC9D,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IACxC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,aAAa,CAAC,sBAAsB,CAAC,CAAC;IAClD,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/ssh-tunnel.d.ts

@@ -0,0 +1,8 @@
+import type { DatabaseConfig, DatabaseType, RedisClusterConnectionConfig } from "./types.js";
+export interface StartedSshTunnel {
+    url: string;
+    redisCluster?: RedisClusterConnectionConfig;
+    close(): Promise<void>;
+}
+export declare function startSshTunnel(config: DatabaseConfig): Promise<StartedSshTunnel | undefined>;
+export declare function rewriteDatabaseUrl(type: DatabaseType, url: string, host: string, port: number): string;

package/dist/ssh-tunnel.js

@@ -0,0 +1,231 @@
+import { readFile } from "node:fs/promises";
+import { homedir } from "node:os";
+import { isAbsolute, join } from "node:path";
+import net from "node:net";
+import { Client } from "ssh2";
+const DEFAULT_PORTS = {
+    mysql: 3306,
+    postgres: 5432,
+    redis: 6379,
+    oracle: 1521,
+    mongodb: 27017
+};
+export async function startSshTunnel(config) {
+    if (!config.sshTunnel) {
+        return undefined;
+    }
+    if (config.type === "redis" && config.redisCluster) {
+        return startRedisClusterSshTunnel(config);
+    }
+    const endpoint = parseDatabaseEndpoint(config.type, config.url);
+    const ssh = new Client();
+    const server = net.createServer((socket) => {
+        ssh.forwardOut(socket.localAddress || "127.0.0.1", socket.localPort || 0, endpoint.host, endpoint.port, (error, stream) => {
+            if (error) {
+                socket.destroy(error);
+                return;
+            }
+            socket.pipe(stream).pipe(socket);
+        });
+    });
+    try {
+        await connectSshClient(ssh, config.sshTunnel);
+        const localPort = await listenLocal(server);
+        const url = rewriteDatabaseUrl(config.type, config.url, "127.0.0.1", localPort);
+        return {
+            url,
+            async close() {
+                await closeServer(server);
+                ssh.end();
+            }
+        };
+    }
+    catch (error) {
+        await closeServer(server);
+        ssh.end();
+        throw error;
+    }
+}
+async function startRedisClusterSshTunnel(config) {
+    const ssh = new Client();
+    const servers = [];
+    try {
+        await connectSshClient(ssh, config.sshTunnel);
+        const nodeAddressMap = {};
+        const localNodes = [];
+        for (const nodeUrl of config.redisCluster.nodes) {
+            const endpoint = parseRedisClusterNode(nodeUrl);
+            const server = createForwardServer(ssh, endpoint.host, endpoint.port);
+            servers.push(server);
+            const localPort = await listenLocal(server);
+            localNodes.push(rewriteDatabaseUrl("redis", nodeUrl, "127.0.0.1", localPort));
+            nodeAddressMap[`${endpoint.host}:${endpoint.port}`] = { host: "127.0.0.1", port: localPort };
+        }
+        return {
+            url: rewriteDatabaseUrl("redis", config.url, "127.0.0.1", extractPort(localNodes[0])),
+            redisCluster: {
+                nodes: localNodes,
+                nodeAddressMap
+            },
+            async close() {
+                await Promise.all(servers.map((server) => closeServer(server)));
+                ssh.end();
+            }
+        };
+    }
+    catch (error) {
+        await Promise.all(servers.map((server) => closeServer(server).catch(() => undefined)));
+        ssh.end();
+        throw error;
+    }
+}
+function createForwardServer(ssh, host, port) {
+    return net.createServer((socket) => {
+        ssh.forwardOut(socket.localAddress || "127.0.0.1", socket.localPort || 0, host, port, (error, stream) => {
+            if (error) {
+                socket.destroy(error);
+                return;
+            }
+            socket.pipe(stream).pipe(socket);
+        });
+    });
+}
+export function rewriteDatabaseUrl(type, url, host, port) {
+    if (type === "mongodb") {
+        return rewriteMongoUrl(url, host, port);
+    }
+    const parsed = new URL(url);
+    parsed.hostname = host;
+    parsed.port = String(port);
+    return parsed.toString();
+}
+function rewriteMongoUrl(url, host, port) {
+    if (isMongoMultiHostUrl(url)) {
+        throw new Error("SSH 隧道暂不支持 MongoDB 多 host URL");
+    }
+    const parsed = new URL(url);
+    parsed.hostname = host;
+    parsed.port = String(port);
+    return parsed.toString();
+}
+function parseDatabaseEndpoint(type, url) {
+    if (type === "mongodb" && isMongoMultiHostUrl(url)) {
+        throw new Error("SSH 隧道暂不支持 MongoDB 多 host URL");
+    }
+    const parsed = new URL(url);
+    const host = parsed.hostname;
+    if (!host) {
+        throw new Error("数据库 URL 必须包含 host 才能建立 SSH 隧道");
+    }
+    return {
+        host,
+        port: parsed.port ? Number(parsed.port) : DEFAULT_PORTS[type]
+    };
+}
+function parseRedisClusterNode(url) {
+    const parsed = new URL(url);
+    if (!parsed.hostname) {
+        throw new Error("Redis Cluster 节点 URL 必须包含 host");
+    }
+    return {
+        host: parsed.hostname,
+        port: parsed.port ? Number(parsed.port) : DEFAULT_PORTS.redis
+    };
+}
+function extractPort(url) {
+    const parsed = new URL(url);
+    return parsed.port ? Number(parsed.port) : DEFAULT_PORTS.redis;
+}
+async function connectSshClient(client, tunnel) {
+    const connectConfig = await buildConnectConfig(tunnel);
+    await new Promise((resolve, reject) => {
+        const onReady = () => {
+            cleanup();
+            resolve();
+        };
+        const onError = (error) => {
+            cleanup();
+            reject(error);
+        };
+        const cleanup = () => {
+            client.off("ready", onReady);
+            client.off("error", onError);
+        };
+        client.once("ready", onReady);
+        client.once("error", onError);
+        client.connect(connectConfig);
+    });
+}
+async function buildConnectConfig(tunnel) {
+    const connectConfig = {
+        host: tunnel.host,
+        port: tunnel.port ?? 22,
+        username: tunnel.username,
+        readyTimeout: tunnel.readyTimeout
+    };
+    if (tunnel.password) {
+        connectConfig.password = tunnel.password;
+    }
+    if (tunnel.privateKeyPath) {
+        connectConfig.privateKey = await readFile(resolveHomePath(tunnel.privateKeyPath), "utf8");
+    }
+    else if (tunnel.privateKey) {
+        connectConfig.privateKey = tunnel.privateKey;
+    }
+    if (tunnel.passphrase) {
+        connectConfig.passphrase = tunnel.passphrase;
+    }
+    return connectConfig;
+}
+function listenLocal(server) {
+    return new Promise((resolve, reject) => {
+        const onError = (error) => {
+            server.off("listening", onListening);
+            reject(error);
+        };
+        const onListening = () => {
+            server.off("error", onError);
+            const address = server.address();
+            if (!address || typeof address === "string") {
+                reject(new Error("本地 SSH 隧道端口监听失败"));
+                return;
+            }
+            resolve(address.port);
+        };
+        server.once("error", onError);
+        server.once("listening", onListening);
+        server.listen(0, "127.0.0.1");
+    });
+}
+function closeServer(server) {
+    if (!server.listening) {
+        return Promise.resolve();
+    }
+    return new Promise((resolve, reject) => {
+        server.close((error) => {
+            if (error) {
+                reject(error);
+                return;
+            }
+            resolve();
+        });
+    });
+}
+function resolveHomePath(path) {
+    if (path === "~") {
+        return homedir();
+    }
+    if (path.startsWith("~/")) {
+        return join(homedir(), path.slice(2));
+    }
+    return isAbsolute(path) ? path : path;
+}
+function isMongoMultiHostUrl(url) {
+    if (!url.startsWith("mongodb://")) {
+        return false;
+    }
+    const authority = url.slice("mongodb://".length).split(/[/?#]/, 1)[0] ?? "";
+    const hosts = authority.includes("@") ? authority.slice(authority.lastIndexOf("@") + 1) : authority;
+    return hosts.includes(",");
+}
+//# sourceMappingURL=ssh-tunnel.js.map

package/dist/ssh-tunnel.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ssh-tunnel.js","sourceRoot":"","sources":["../src/ssh-tunnel.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,GAAG,MAAM,UAAU,CAAC;AAC3B,OAAO,EAAE,MAAM,EAAsB,MAAM,MAAM,CAAC;AAoBlD,MAAM,aAAa,GAAiC;IAClD,KAAK,EAAE,IAAI;IACX,QAAQ,EAAE,IAAI;IACd,KAAK,EAAE,IAAI;IACX,MAAM,EAAE,IAAI;IACZ,OAAO,EAAE,KAAK;CACf,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,MAAsB;IACzD,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;QACtB,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;QACnD,OAAO,0BAA0B,CAAC,MAAM,CAAC,CAAC;IAC5C,CAAC;IAED,MAAM,QAAQ,GAAG,qBAAqB,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;IAChE,MAAM,GAAG,GAAG,IAAI,MAAM,EAAE,CAAC;IACzB,MAAM,MAAM,GAAG,GAAG,CAAC,YAAY,CAAC,CAAC,MAAM,EAAE,EAAE;QACzC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,YAAY,IAAI,WAAW,EAAE,MAAM,CAAC,SAAS,IAAI,CAAC,EAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE;YACxH,IAAI,KAAK,EAAE,CAAC;gBACV,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;gBACtB,OAAO;YACT,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACnC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC;QACH,MAAM,gBAAgB,CAAC,GAAG,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;QAC9C,MAAM,SAAS,GAAG,MAAM,WAAW,CAAC,MAAM,CAAC,CAAC;QAC5C,MAAM,GAAG,GAAG,kBAAkB,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC;QAChF,OAAO;YACL,GAAG;YACH,KAAK,CAAC,KAAK;gBACT,MAAM,WAAW,CAAC,MAAM,CAAC,CAAC;gBAC1B,GAAG,CAAC,GAAG,EAAE,CAAC;YACZ,CAAC;SACF,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,WAAW,CAAC,MAAM,CAAC,CAAC;QAC1B,GAAG,CAAC,GAAG,EAAE,CAAC;QACV,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,KAAK,UAAU,0BAA0B,CAAC,MAAsB;IAC9D,MAAM,GAAG,GAAG,IAAI,MAAM,EAAE,CAAC;IACzB,MAAM,OAAO,GAAiB,EAAE,CAAC;IAEjC,IAAI,CAAC;QACH,MAAM,gBAAgB,CAAC,GAAG,EAAE,MAAM,CAAC,SAAU,CAAC,CAAC;QAE/C,MAAM,cAAc,GAAqC,EAAE,CAAC;QAC5D,MAAM,UAAU,GAAa,EAAE,CAAC;QAEhC,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,YAAa,CAAC,KAAK,EAAE,CAAC;YACjD,MAAM,QAAQ,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAC;YAChD,MAAM,MAAM,GAAG,mBAAmB,CAAC,GAAG,EAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;YACtE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACrB,MAAM,SAAS,GAAG,MAAM,WAAW,CAAC,MAAM,CAAC,CAAC;YAC5C,UAAU,CAAC,IAAI,CAAC,kBAAkB,CAAC,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC,CAAC;YAC9E,cAAc,CAAC,GAAG,QAAQ,CAAC,IAAI,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;QAC/F,CAAC;QAED,OAAO;YACL,GAAG,EAAE,kBAAkB,CAAC,OAAO,EAAE,MAAM,CAAC,GAAG,EAAE,WAAW,EAAE,WAAW,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;YACrF,YAAY,EAAE;gBACZ,KAAK,EAAE,UAAU;gBACjB,cAAc;aACf;YACD,KAAK,CAAC,KAAK;gBACT,MAAM,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;gBAChE,GAAG,CAAC,GAAG,EAAE,CAAC;YACZ,CAAC;SACF,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QACvF,GAAG,CAAC,GAAG,EAAE,CAAC;QACV,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,mBAAmB,CAAC,GAAW,EAAE,IAAY,EAAE,IAAY;IAClE,OAAO,GAAG,CAAC,YAAY,CAAC,CAAC,MAAM,EAAE,EAAE;QACjC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,YAAY,IAAI,WAAW,EAAE,MAAM,CAAC,SAAS,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE;YACtG,IAAI,KAAK,EAAE,CAAC;gBACV,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;gBACtB,OAAO;YACT,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACnC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,IAAkB,EAAE,GAAW,EAAE,IAAY,EAAE,IAAY;IAC5F,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,OAAO,eAAe,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IAC1C,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IAC5B,MAAM,CAAC,QAAQ,GAAG,IAAI,CAAC;IACvB,MAAM,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;IAC3B,OAAO,MAAM,CAAC,QAAQ,EAAE,CAAC;AAC3B,CAAC;AAED,SAAS,eAAe,CAAC,GAAW,EAAE,IAAY,EAAE,IAAY;IAC9D,IAAI,mBAAmB,CAAC,GAAG,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IACnD,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IAC5B,MAAM,CAAC,QAAQ,GAAG,IAAI,CAAC;IACvB,MAAM,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;IAC3B,OAAO,MAAM,CAAC,QAAQ,EAAE,CAAC;AAC3B,CAAC;AAED,SAAS,qBAAqB,CAAC,IAAkB,EAAE,GAAW;IAC5D,IAAI,IAAI,KAAK,SAAS,IAAI,mBAAmB,CAAC,GAAG,CAAC,EAAE,CAAC;QACnD,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IACnD,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IAE5B,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC;IAC7B,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IACnD,CAAC;IAED,OAAO;QACL,IAAI;QACJ,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC;KAC9D,CAAC;AACJ,CAAC;AAED,SAAS,qBAAqB,CAAC,GAAW;IACxC,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IAC5B,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IACpD,CAAC;IAED,OAAO;QACL,IAAI,EAAE,MAAM,CAAC,QAAQ;QACrB,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,KAAK;KAC9D,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,GAAW;IAC9B,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IAC5B,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC;AACjE,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,MAAc,EAAE,MAAuB;IACrE,MAAM,aAAa,GAAG,MAAM,kBAAkB,CAAC,MAAM,CAAC,CAAC;IACvD,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC1C,MAAM,OAAO,GAAG,GAAG,EAAE;YACnB,OAAO,EAAE,CAAC;YACV,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC;QACF,MAAM,OAAO,GAAG,CAAC,KAAY,EAAE,EAAE;YAC/B,OAAO,EAAE,CAAC;YACV,MAAM,CAAC,KAAK,CAAC,CAAC;QAChB,CAAC,CAAC;QACF,MAAM,OAAO,GAAG,GAAG,EAAE;YACnB,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC7B,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC/B,CAAC,CAAC;QAEF,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC9B,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC9B,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;IAChC,CAAC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,kBAAkB,CAAC,MAAuB;IACvD,MAAM,aAAa,GAAkB;QACnC,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,EAAE;QACvB,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,YAAY,EAAE,MAAM,CAAC,YAAY;KAClC,CAAC;IAEF,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACpB,aAAa,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;IAC3C,CAAC;IACD,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC;QAC1B,aAAa,CAAC,UAAU,GAAG,MAAM,QAAQ,CAAC,eAAe,CAAC,MAAM,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC,CAAC;IAC5F,CAAC;SAAM,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;QAC7B,aAAa,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;IAC/C,CAAC;IACD,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;QACtB,aAAa,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;IAC/C,CAAC;IAED,OAAO,aAAa,CAAC;AACvB,CAAC;AAED,SAAS,WAAW,CAAC,MAAkB;IACrC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,OAAO,GAAG,CAAC,KAAY,EAAE,EAAE;YAC/B,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;YACrC,MAAM,CAAC,KAAK,CAAC,CAAC;QAChB,CAAC,CAAC;QACF,MAAM,WAAW,GAAG,GAAG,EAAE;YACvB,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC7B,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;YACjC,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;gBAC5C,MAAM,CAAC,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC;gBACrC,OAAO;YACT,CAAC;YACD,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACxB,CAAC,CAAC;QAEF,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC9B,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;QACtC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC;IAChC,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,WAAW,CAAC,MAAkB;IACrC,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;QACtB,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;IAC3B,CAAC;IAED,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;YACrB,IAAI,KAAK,EAAE,CAAC;gBACV,MAAM,CAAC,KAAK,CAAC,CAAC;gBACd,OAAO;YACT,CAAC;YACD,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,eAAe,CAAC,IAAY;IACnC,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;QACjB,OAAO,OAAO,EAAE,CAAC;IACnB,CAAC;IACD,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1B,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACxC,CAAC;IACD,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;AACxC,CAAC;AAED,SAAS,mBAAmB,CAAC,GAAW;IACtC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QAClC,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,SAAS,GAAG,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC5E,MAAM,KAAK,GAAG,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,SAAS,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACpG,OAAO,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;AAC7B,CAAC"}

package/dist/types.d.ts

@@ -0,0 +1,69 @@
+export type DatabaseType = "mysql" | "postgres" | "redis" | "oracle" | "mongodb";
+export type OutputFormat = "json" | "table";
+export interface DatabaseConfig {
+    type: DatabaseType;
+    url: string;
+    redisCluster?: RedisClusterConfig;
+    sshTunnel?: SshTunnelConfig;
+    database?: string;
+    oracleDriver?: "oracledb" | "sqlcl";
+    sqlclPath?: string;
+    javaHome?: string;
+    readonly?: boolean;
+    blacklist?: string[];
+    keepAliveSeconds?: number;
+}
+export interface RedisClusterConfig {
+    nodes: string[];
+}
+export interface RedisClusterConnectionConfig {
+    nodes: string[];
+    nodeAddressMap?: Record<string, RedisNodeAddress>;
+}
+export interface RedisNodeAddress {
+    host: string;
+    port: number;
+}
+export interface SshTunnelConfig {
+    host: string;
+    port?: number;
+    username: string;
+    password?: string;
+    privateKeyPath?: string;
+    privateKey?: string;
+    passphrase?: string;
+    readyTimeout?: number;
+}
+export interface AppConfig {
+    databases: Record<string, DatabaseConfig>;
+}
+export interface MetadataRequest {
+    type: "tables" | "columns" | "collections" | "keys";
+    table?: string;
+    pattern?: string;
+}
+export interface QueryResult {
+    rows: unknown[];
+    fields?: string[];
+    rowCount?: number;
+}
+export interface DatabaseAdapter {
+    connect(): Promise<void>;
+    disconnect(): Promise<void>;
+    test(): Promise<void>;
+    execute(command: string): Promise<QueryResult>;
+    metadata(request: MetadataRequest): Promise<QueryResult>;
+}
+export type DaemonAction = "test" | "execute" | "metadata" | "reset" | "status" | "stop";
+export interface DaemonRequest {
+    action: DaemonAction;
+    db?: string;
+    command?: string;
+    metadata?: MetadataRequest;
+    configPath?: string;
+}
+export interface DaemonResponse {
+    ok: boolean;
+    data?: unknown;
+    error?: string;
+}

package/dist/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":""}

package/dist/utils/masking.d.ts

@@ -0,0 +1,2 @@
+export declare function maskSecret(input: string): string;
+export declare function toErrorMessage(error: unknown): string;

package/dist/utils/masking.js

@@ -0,0 +1,14 @@
+export function maskSecret(input) {
+    return input
+        .replace(/(password=)([^&\s]+)/gi, "$1****")
+        .replace(/(token=)([^&\s]+)/gi, "$1****")
+        .replace(/(secret=)([^&\s]+)/gi, "$1****")
+        .replace(/:\/\/([^:\s/@]+):([^@\s]+)@/g, "://$1:****@");
+}
+export function toErrorMessage(error) {
+    if (error instanceof Error) {
+        return maskSecret(error.message);
+    }
+    return maskSecret(String(error));
+}
+//# sourceMappingURL=masking.js.map

package/dist/utils/masking.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"masking.js","sourceRoot":"","sources":["../../src/utils/masking.ts"],"names":[],"mappings":"AAAA,MAAM,UAAU,UAAU,CAAC,KAAa;IACtC,OAAO,KAAK;SACT,OAAO,CAAC,wBAAwB,EAAE,QAAQ,CAAC;SAC3C,OAAO,CAAC,qBAAqB,EAAE,QAAQ,CAAC;SACxC,OAAO,CAAC,sBAAsB,EAAE,QAAQ,CAAC;SACzC,OAAO,CAAC,8BAA8B,EAAE,aAAa,CAAC,CAAC;AAC5D,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,KAAc;IAC3C,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;QAC3B,OAAO,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACnC,CAAC;IACD,OAAO,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;AACnC,CAAC"}

package/package.json

@@ -0,0 +1,50 @@
+{
+  "name": "agent-database-cli",
+  "version": "0.2.7",
+  "description": "统一数据库命令行工具，支持只读、黑名单和本地连接守护进程。",
+  "type": "module",
+  "bin": {
+    "agent-database-cli": "dist/cli.js"
+  },
+  "scripts": {
+    "build": "tsc -p tsconfig.json",
+    "dev": "tsx src/cli.ts",
+    "prepack": "npm run build",
+    "test": "vitest run",
+    "test:unit": "vitest run tests/unit",
+    "test:integration": "AGENT_DATABASE_CLI_CONFIG=config/docker-test.json vitest run tests/integration --exclude tests/integration/oracle.test.ts",
+    "test:integration:oracle": "AGENT_DATABASE_CLI_CONFIG=config/docker-test.json vitest run tests/integration/oracle.test.ts"
+  },
+  "files": [
+    "dist",
+    "README.md",
+    "README_EN.md",
+    "AI_INSTALL.md",
+    "SKILL.md",
+    "LICENSE",
+    "config/docker-test.json"
+  ],
+  "publishConfig": {
+    "access": "public"
+  },
+  "dependencies": {
+    "commander": "^12.1.0",
+    "mongodb": "^6.20.0",
+    "mysql2": "^3.15.3",
+    "oracledb": "^6.10.0",
+    "pg": "^8.16.3",
+    "redis": "^4.7.1",
+    "ssh2": "^1.17.0"
+  },
+  "devDependencies": {
+    "@types/node": "^22.10.2",
+    "@types/pg": "^8.15.5",
+    "@types/ssh2": "^1.15.5",
+    "tsx": "^4.20.6",
+    "typescript": "^5.9.3",
+    "vitest": "^2.1.9"
+  },
+  "engines": {
+    "node": ">=20"
+  }
+}