d1s 0.2.10 → 0.2.12

package/dist/.next/types/app/api/cloudflare/route.ts

@@ -1,4 +1,4 @@
-// File: /Users/kona/Desktop/d1studio/src/app/api/cloudflare/route.js
+// File: /Volumes/ProjectSpace/_wip/d1studio/src/app/api/cloudflare/route.js
 import * as entry from '../../../../../src/app/api/cloudflare/route.js'
 import type { NextRequest } from 'next/server.js'
 

package/dist/.next/types/app/api/databases/route.ts

@@ -1,4 +1,4 @@
-// File: /Users/kona/Desktop/d1studio/src/app/api/databases/route.js
+// File: /Volumes/ProjectSpace/_wip/d1studio/src/app/api/databases/route.js
 import * as entry from '../../../../../src/app/api/databases/route.js'
 import type { NextRequest } from 'next/server.js'
 

package/dist/.next/types/app/api/migrations/sync/route.ts

@@ -1,4 +1,4 @@
-// File: /Users/kona/Desktop/d1studio/src/app/api/migrations/sync/route.js
+// File: /Volumes/ProjectSpace/_wip/d1studio/src/app/api/migrations/sync/route.js
 import * as entry from '../../../../../../src/app/api/migrations/sync/route.js'
 import type { NextRequest } from 'next/server.js'
 

package/dist/.next/types/app/api/migrations/sync-files/route.ts

@@ -1,4 +1,4 @@
-// File: /Users/kona/Desktop/d1studio/src/app/api/migrations/sync-files/route.js
+// File: /Volumes/ProjectSpace/_wip/d1studio/src/app/api/migrations/sync-files/route.js
 import * as entry from '../../../../../../src/app/api/migrations/sync-files/route.js'
 import type { NextRequest } from 'next/server.js'
 

package/dist/.next/types/app/api/pull-data/confirm/route.ts

@@ -1,4 +1,4 @@
-// File: /Users/kona/Desktop/d1studio/src/app/api/pull-data/confirm/route.js
+// File: /Volumes/ProjectSpace/_wip/d1studio/src/app/api/pull-data/confirm/route.js
 import * as entry from '../../../../../../src/app/api/pull-data/confirm/route.js'
 import type { NextRequest } from 'next/server.js'
 

package/dist/.next/types/app/api/pull-remote/confirm/route.ts

@@ -1,4 +1,4 @@
-// File: /Users/kona/Desktop/d1studio/src/app/api/pull-remote/confirm/route.js
+// File: /Volumes/ProjectSpace/_wip/d1studio/src/app/api/pull-remote/confirm/route.js
 import * as entry from '../../../../../../src/app/api/pull-remote/confirm/route.js'
 import type { NextRequest } from 'next/server.js'
 

package/dist/.next/types/app/api/pull-remote/preview/route.ts

@@ -1,4 +1,4 @@
-// File: /Users/kona/Desktop/d1studio/src/app/api/pull-remote/preview/route.js
+// File: /Volumes/ProjectSpace/_wip/d1studio/src/app/api/pull-remote/preview/route.js
 import * as entry from '../../../../../../src/app/api/pull-remote/preview/route.js'
 import type { NextRequest } from 'next/server.js'
 

package/dist/.next/types/app/api/push-remote/confirm/route.ts

@@ -1,4 +1,4 @@
-// File: /Users/kona/Desktop/d1studio/src/app/api/push-remote/confirm/route.js
+// File: /Volumes/ProjectSpace/_wip/d1studio/src/app/api/push-remote/confirm/route.js
 import * as entry from '../../../../../../src/app/api/push-remote/confirm/route.js'
 import type { NextRequest } from 'next/server.js'
 

package/dist/.next/types/app/api/push-remote/preview/route.ts

@@ -1,4 +1,4 @@
-// File: /Users/kona/Desktop/d1studio/src/app/api/push-remote/preview/route.js
+// File: /Volumes/ProjectSpace/_wip/d1studio/src/app/api/push-remote/preview/route.js
 import * as entry from '../../../../../../src/app/api/push-remote/preview/route.js'
 import type { NextRequest } from 'next/server.js'
 

package/dist/.next/types/app/api/query/route.ts

@@ -1,4 +1,4 @@
-// File: /Users/kona/Desktop/d1studio/src/app/api/query/route.js
+// File: /Volumes/ProjectSpace/_wip/d1studio/src/app/api/query/route.js
 import * as entry from '../../../../../src/app/api/query/route.js'
 import type { NextRequest } from 'next/server.js'
 

package/dist/.next/types/app/api/tables/[name]/route.ts

@@ -1,4 +1,4 @@
-// File: /Users/kona/Desktop/d1studio/src/app/api/tables/[name]/route.js
+// File: /Volumes/ProjectSpace/_wip/d1studio/src/app/api/tables/[name]/route.js
 import * as entry from '../../../../../../src/app/api/tables/[name]/route.js'
 import type { NextRequest } from 'next/server.js'
 

package/dist/.next/types/app/api/tables/route.ts

@@ -1,4 +1,4 @@
-// File: /Users/kona/Desktop/d1studio/src/app/api/tables/route.js
+// File: /Volumes/ProjectSpace/_wip/d1studio/src/app/api/tables/route.js
 import * as entry from '../../../../../src/app/api/tables/route.js'
 import type { NextRequest } from 'next/server.js'
 

package/dist/.next/types/app/api/update/route.ts

@@ -1,4 +1,4 @@
-// File: /Users/kona/Desktop/d1studio/src/app/api/update/route.js
+// File: /Volumes/ProjectSpace/_wip/d1studio/src/app/api/update/route.js
 import * as entry from '../../../../../src/app/api/update/route.js'
 import type { NextRequest } from 'next/server.js'
 

package/dist/.next/types/app/page.ts

@@ -1,4 +1,4 @@
-// File: /Users/kona/Desktop/d1studio/src/app/page.jsx
+// File: /Volumes/ProjectSpace/_wip/d1studio/src/app/page.jsx
 import * as entry from '../../../src/app/page.js'
 import type { ResolvingMetadata, ResolvingViewport } from 'next/dist/lib/metadata/types/metadata-interface.js'
 

package/dist/app/api/tables/[name]/route.js

@@ -6,6 +6,7 @@ import { exec } from 'child_process';
 import { findWranglerConfig } from '@/lib/find-wrangler-config.js';
 import { dbQueue } from '@/lib/database-queue';
 import logger from '@/lib/logger';
+import { sanitizeTableName, sanitizeColumnName } from '@/lib/sql-sanitizer.js';
 
 const execAsync = promisify(exec);
 
@@ -98,13 +99,18 @@ export async function GET(request, context) {
       // Get the first D1 database name from the configuration
       const databaseName = config.d1_databases[0].database_name;
 
-      // Get table schema using PRAGMA query
-      const schemaQuery = `PRAGMA table_info(${name});`;
+      // Validate and sanitize table name to prevent SQL injection
+      const sanitizedTableName = sanitizeTableName(name);
+      
+      // Get table schema using PRAGMA query (PRAGMA is safe from injection when table name is sanitized)
+      const schemaQuery = `PRAGMA table_info(${sanitizedTableName});`;
       const schema = await executeD1Query(schemaQuery, projectDir, databaseName);
 
-      // Get the CREATE TABLE statement from sqlite_master
-      const createTableQuery = `SELECT sql FROM sqlite_master WHERE type='table' AND name='${name}';`;
-      const tableDefinition = await executeD1Query(createTableQuery, projectDir, databaseName);
+      // Get the CREATE TABLE statement from sqlite_master using parameterized query approach
+      const createTableQuery = `SELECT sql FROM sqlite_master WHERE type='table' AND name = ?;`;
+      // Note: executeD1Query would need to support parameters, for now we sanitize the table name
+      const createTableQuerySafe = `SELECT sql FROM sqlite_master WHERE type='table' AND name='${name.replace(/'/g, "''")}';`;
+      const tableDefinition = await executeD1Query(createTableQuerySafe, projectDir, databaseName);
       const createTableSQL = tableDefinition[0]?.sql || '';
 
       // Extract CHECK constraints from the CREATE TABLE statement
@@ -116,17 +122,23 @@ export async function GET(request, context) {
         check: checkConstraints[column.name] || null
       }));
 
-      // Get total row count for the table
-      const countQuery = `SELECT COUNT(*) as total FROM ${name};`;
+      // Get total row count for the table (using sanitized table name)
+      const countQuery = `SELECT COUNT(*) as total FROM ${sanitizedTableName};`;
       const countResult = await executeD1Query(countQuery, projectDir, databaseName);
       const totalRows = countResult[0]?.total || 0;
 
       // Fetch paginated data using the primary key column for ordering
       const primaryKeyColumn = schema.find(col => col.pk === 1)?.name || schema[0]?.name;
+      const sanitizedPrimaryKey = primaryKeyColumn ? sanitizeColumnName(primaryKeyColumn) : '*';
+      
+      // Validate limit and offset to prevent injection through URL params
+      const safeLimitNum = Math.max(1, Math.min(parseInt(limit) || 50, 1000)); // Cap at 1000 rows
+      const safeOffsetNum = Math.max(0, parseInt(offset) || 0);
+      
       const dataQuery = `
-        SELECT * FROM ${name} 
-        ORDER BY ${primaryKeyColumn} DESC 
-        LIMIT ${limit} OFFSET ${offset};
+        SELECT * FROM ${sanitizedTableName} 
+        ORDER BY ${sanitizedPrimaryKey} DESC 
+        LIMIT ${safeLimitNum} OFFSET ${safeOffsetNum};
       `;
       const data = await executeD1Query(dataQuery, projectDir, databaseName);
 

package/dist/app/globals.css

@@ -91,3 +91,42 @@ body {
   table-layout: fixed;
   width: 100%;
 }
+
+/* Custom gray utility classes */
+@layer utilities {
+  .bg-gray-custom-50 { background-color: var(--gray-50); }
+  .bg-gray-custom-100 { background-color: var(--gray-100); }
+  .bg-gray-custom-200 { background-color: var(--gray-200); }
+  .bg-gray-custom-300 { background-color: var(--gray-300); }
+  .bg-gray-custom-400 { background-color: var(--gray-400); }
+  .bg-gray-custom-500 { background-color: var(--gray-500); }
+  .bg-gray-custom-600 { background-color: var(--gray-600); }
+  .bg-gray-custom-700 { background-color: var(--gray-700); }
+  .bg-gray-custom-800 { background-color: var(--gray-800); }
+  .bg-gray-custom-900 { background-color: var(--gray-900); }
+  .bg-gray-custom-950 { background-color: var(--gray-950); }
+  
+  .text-gray-custom-50 { color: var(--gray-50); }
+  .text-gray-custom-100 { color: var(--gray-100); }
+  .text-gray-custom-200 { color: var(--gray-200); }
+  .text-gray-custom-300 { color: var(--gray-300); }
+  .text-gray-custom-400 { color: var(--gray-400); }
+  .text-gray-custom-500 { color: var(--gray-500); }
+  .text-gray-custom-600 { color: var(--gray-600); }
+  .text-gray-custom-700 { color: var(--gray-700); }
+  .text-gray-custom-800 { color: var(--gray-800); }
+  .text-gray-custom-900 { color: var(--gray-900); }
+  .text-gray-custom-950 { color: var(--gray-950); }
+  
+  .border-gray-custom-50 { border-color: var(--gray-50); }
+  .border-gray-custom-100 { border-color: var(--gray-100); }
+  .border-gray-custom-200 { border-color: var(--gray-200); }
+  .border-gray-custom-300 { border-color: var(--gray-300); }
+  .border-gray-custom-400 { border-color: var(--gray-400); }
+  .border-gray-custom-500 { border-color: var(--gray-500); }
+  .border-gray-custom-600 { border-color: var(--gray-600); }
+  .border-gray-custom-700 { border-color: var(--gray-700); }
+  .border-gray-custom-800 { border-color: var(--gray-800); }
+  .border-gray-custom-900 { border-color: var(--gray-900); }
+  .border-gray-custom-950 { border-color: var(--gray-950); }
+}

package/dist/app/page.jsx

@@ -5,7 +5,6 @@ import { useState } from 'react';
 import { AppSidebar } from '../components/sidebar';
 import { SQLEditor } from '../components/sql-editor';
 import { TableView } from '../components/table-view';
-import UpdateBanner from '@/components/update-banner';
 
 export default function StudioPage() {
   const [currentView, setCurrentView] = useState('sql-editor');
@@ -17,28 +16,19 @@ export default function StudioPage() {
   };
 
   return (
-    <div className="flex flex-col min-h-screen bg-background">
-      {/* Banner */}
-      <UpdateBanner />
-      
-      {/* Main layout with adjusted positioning for banner */}
-      <div className="flex flex-1 mt-[var(--banner-height,0px)]">
-        {/* Sidebar with adjusted height */}
-        <AppSidebar 
-          className="w-64 border-r fixed top-[var(--banner-height,0px)] h-[calc(100vh-var(--banner-height,0px))]"
-          currentView={currentView}
-          onNavigate={setCurrentView}
-          onTableSelect={handleTableSelect}
-        />
-        
-        {/* Main content with adjusted margin-top and height */}
-        <main className="ml-64 flex-1 h-[calc(100vh-var(--banner-height,0px))]">
-          {currentView === 'sql-editor' && <SQLEditor />}
-          {currentView === 'table-view' && selectedTable && (
-            <TableView tableName={selectedTable} />
-          )}
-        </main>
-      </div>
+    <div className="flex h-screen bg-background">
+      <AppSidebar 
+        className="w-64 border-r flex-shrink-0" 
+        currentView={currentView}
+        onNavigate={setCurrentView}
+        onTableSelect={handleTableSelect}
+      />
+      <main className="flex-1 overflow-hidden">
+        {currentView === 'sql-editor' && <SQLEditor />}
+        {currentView === 'table-view' && selectedTable && (
+          <TableView tableName={selectedTable} />
+        )}
+      </main>
     </div>
   );
 }

package/dist/d1-studio.js

@@ -6,8 +6,8 @@ import { dirname, join } from 'path';
 import express from 'express';
 import { createServer } from 'http';
 import next from 'next';
-import { findWranglerConfig } from '../src/lib/find-wrangler-config.js';
-import logger from '../src/lib/logger.js';
+import { findWranglerConfig } from './lib/find-wrangler-config.js';
+import logger from './lib/logger.js';
 import updateNotifier from 'update-notifier';
 import pkg from '../package.json' with { type: 'json' };
 
@@ -18,8 +18,38 @@ if (hasDebugFlag) {
   logger.debug('Debug mode enabled');
 }
 
-const notifier = updateNotifier({ pkg, updateCheckInterval: 1000 * 60 * 60 * 24 });
-notifier.notify({ defer: false });
+const notifier = updateNotifier({ 
+  pkg,
+  updateCheckInterval: 1000 * 60 * 60 * 24,
+});
+
+// Check if update is available
+if (notifier.update) {
+  // Get current version and latest version
+  const currentVersion = pkg.version;
+  const latestVersion = notifier.update.latest;
+  
+  // Version-specific messages
+  const versionMessages = {
+    // Add specific version messages here
+    '0.2.11': 'Fixed table toolbar and table view horizontal/vertical scroll issues'
+    // Add more version messages as needed
+  };
+
+  // Create custom message
+  let message = `Update available ${chalk.dim(currentVersion)} → ${chalk.green(latestVersion)}`;
+  
+  // Add version-specific message if available
+  if (versionMessages[latestVersion]) {
+    message += `\n${chalk.cyan('What\'s new:')} ${versionMessages[latestVersion]}`;
+  }
+  
+  // Add installation instructions
+  message += `\nRun ${chalk.cyan('npm i -g d1s@latest')} to update`;
+
+  // Display custom notification
+  notifier.notify({ message });
+}
 
 // Compute the absolute path of this file and its directory
 const __filename = fileURLToPath(import.meta.url);