dsh-db-tool 0.1.4 → 0.1.6

package/client/client.js

@@ -68,6 +68,7 @@ window.__ModuleLoader__.load({
 			noDatabases: "无可用数据库",
 			noSchemas: "无模式",
 			noTables: "无表",
+			defaultDb: "默认库",
 			loadFailed: "加载失败",
 			structure: "结构",
 			preview: "数据预览",
@@ -153,6 +154,7 @@ window.__ModuleLoader__.load({
 			noDatabases: "No databases available",
 			noSchemas: "No schemas",
 			noTables: "No tables",
+			defaultDb: "Default DB",
 			loadFailed: "Failed to load",
 			structure: "Structure",
 			preview: "Preview",
@@ -445,6 +447,20 @@ window.__ModuleLoader__.load({
 		/** 新建表单初始态：分字段模式 + 当前 kind 的官方默认值 */
 		const freshForm = () => withKindDefaults({ ...EMPTY_FORM, mode: "fields" });
 
+		/** 编辑回填：从 meta 还原已存配置（密码不出库，留空=保留原密码）。
+		 *  url 方式 → 回填脱敏 url；分字段方式 → 回填 host/port/user/database。 */
+		function buildEditForm(c) {
+			const mode = c.mode || (c.safeUrl ? "url" : "fields");
+			return {
+				...EMPTY_FORM,
+				id: c.id, kind: c.kind, name: c.name || "", mode,
+				url: c.safeUrl || "",
+				host: c.host || "", port: c.port != null ? String(c.port) : "",
+				user: c.user || "", database: c.database || "",
+				ssl: !!c.ssl,
+			};
+		}
+
 		function ConnForm(props) {
 			// 新建（无 initial）默认分字段模式并预填官方默认值；编辑保持用户数据原样
 			const [form, setForm] = React.useState(() => props.initial || freshForm());
@@ -459,18 +475,29 @@ window.__ModuleLoader__.load({
 				setDirty(new Set());
 				setDraftTest(null);
 			}
-			/** 从 URL 模式切回分字段：按当前 kind 重新补全官方默认值（未手改字段） */
+			/** 从 URL 模式切回分字段：保留表单里已有值（编辑回填场景），只对空字段补官方默认值 */
 			function reenterFields() {
-				setForm((prev) => withKindDefaults(Object.assign({}, prev, { mode: "fields" }), dirty));
+				setForm((prev) => {
+					const keep = new Set(dirty);
+					for (const k of ["host", "port", "user", "database"]) if (prev[k]) keep.add(k);
+					return withKindDefaults(Object.assign({}, prev, { mode: "fields" }), keep);
+				});
 				setDraftTest(null);
 			}
 			function draftBody() {
 				const body = { kind: form.kind, ssl: !!form.ssl };
-				if (form.mode === "url") body.url = form.url;
-				else {
+				// 编辑保存语义：url 模式未改动（仍等于回填的脱敏 url）→ 不发 url，保留 secrets 原值
+				const origUrl = props.initial && props.initial.mode === "url" ? props.initial.url : undefined;
+				if (form.mode === "url") {
+					if (form.url && form.url !== origUrl) body.url = form.url;
+					// 新建 url 连接必须发
+					if (!props.initial && form.url) body.url = form.url;
+				} else {
 					body.fields = { host: form.host, user: form.user, database: form.database || undefined };
 					if (form.port) body.fields.port = Number(form.port);
 					if (form.password) body.fields.password = form.password;
+					// 从 url 方式切到分字段保存 → 服务端清除已存 url（否则连接仍走旧 url）
+					if (props.initial && props.initial.mode === "url") body.clearUrl = true;
 				}
 				return body;
 			}
@@ -583,7 +610,7 @@ window.__ModuleLoader__.load({
 
 			if (editing) {
 				return React.createElement(ConnForm, {
-					initial: editing === "new" ? null : Object.assign({}, EMPTY_FORM, editing),
+					initial: editing === "new" ? null : buildEditForm(editing),
 					busy: busy === "save",
 					onSubmit: saveConn,
 					onCancel: () => setEditing(null),
@@ -761,20 +788,23 @@ window.__ModuleLoader__.load({
 			}
 			function toggleSchema(c, d, s) {
 				if (!projectPath) return;
+				// PG 系跨库浏览：tables 的 database 传 "库名.schema"（Navicat 官方行为，服务端按库开连接）
 				toggle("s:" + c.id + "/" + d + "/" + s, () =>
-					api("tables" + qs({ project: projectPath, connId: c.id, database: s })).then((list) => {
-						setTablesMap((m) => Object.assign({}, m, { [c.id + "/" + s]: list || [] }));
+					api("tables" + qs({ project: projectPath, connId: c.id, database: d + "." + s })).then((list) => {
+						setTablesMap((m) => Object.assign({}, m, { [c.id + "/" + d + "/" + s]: list || [] }));
 					}));
 			}
 			// 请求序号守卫：快速切换选中表/翻页时，丢弃晚到的旧响应，防止旧数据覆盖新选中项
 			const openSeq = React.useRef(0);
 			const openTable = React.useCallback((s, pg) => {
 				if (!s || !projectPath) return;
+				// PG 系跨库：database 传 "库名.schema"；其它库传库名
+				const dbRef = s.schemaName ? s.db + "." + s.schemaName : s.db;
 				const seq = ++openSeq.current;
 				setBusy("open");
 				Promise.all([
-					api("schema" + qs({ project: projectPath, connId: s.connId, database: s.db, table: s.table.name })),
-					api("preview" + qs({ project: projectPath, connId: s.connId, database: s.db, table: s.table.name, limit: PAGE_SIZE, offset: ((pg || 1) - 1) * PAGE_SIZE })),
+					api("schema" + qs({ project: projectPath, connId: s.connId, database: dbRef, table: s.table.name })),
+					api("preview" + qs({ project: projectPath, connId: s.connId, database: dbRef, table: s.table.name, limit: PAGE_SIZE, offset: ((pg || 1) - 1) * PAGE_SIZE })),
 				])
 					.then(([sch, prev]) => {
 						if (seq !== openSeq.current) return; // 旧请求晚到，丢弃
@@ -827,16 +857,16 @@ window.__ModuleLoader__.load({
 							const sOpen = !!open[sk];
 							treeRows.push(treerow(sk, 2, sOpen, false, s, () => toggleSchema(c, d, s)));
 							if (!sOpen) continue;
-							const tlist = tablesMap[c.id + "/" + s];
+							const tlist = tablesMap[c.id + "/" + d + "/" + s];
 							if (loading[sk]) { treeRows.push(treerow(sk + ":l", 3, false, true, "…")); continue; }
 							if (error[sk]) { treeRows.push(treerow(sk + ":x", 3, false, true, t("loadFailed") + "：" + error[sk], () => retry(sk, () => toggleSchema(c, d, s)))); continue; }
 							if (!tlist) continue;
 							if (tlist.length === 0) { treeRows.push(treerow(sk + ":e", 3, false, true, t("noTables"))); continue; }
 							for (const tb of tlist) {
-								const active = !!sel && sel.connId === c.id && sel.db === s && sel.table.name === tb.name;
+								const active = !!sel && sel.connId === c.id && sel.db === d && sel.schemaName === s && sel.table.name === tb.name;
 								treeRows.push(treerow("t:" + sk + "/" + tb.name, 3, false, true,
 									tb.name + (tb.type && tb.type !== "table" ? " · " + tb.type : ""),
-									() => setSel({ connId: c.id, db: s, table: tb }), active));
+									() => setSel({ connId: c.id, db: d, schemaName: s, table: tb }), active));
 							}
 						}
 						continue;
@@ -871,7 +901,7 @@ window.__ModuleLoader__.load({
 							["structure", "preview"].map((v) =>
 								React.createElement("button", { key: v, className: view === v ? "active" : "", onClick: () => setView(v) }, v === "structure" ? t("structure") : t("preview"))),
 						),
-						React.createElement("strong", null, (view === "structure" ? t("structure") : t("preview")) + " · " + sel.db + " / " + sel.table.name),
+						React.createElement("strong", null, (view === "structure" ? t("structure") : t("preview")) + " · " + sel.db + (sel.schemaName ? "." + sel.schemaName : "") + " / " + sel.table.name),
 						view === "structure"
 							? resultTable(
 								[t("column"), t("dataType"), t("nullable"), t("keyCol"), t("defaultVal"), t("comment")],
@@ -906,6 +936,14 @@ window.__ModuleLoader__.load({
 			const [params, setParams] = React.useState("");
 			const [result, setResult] = React.useState(null); // {kind:'query',...}|{kind:'exec',...}
 			const [busy, setBusy] = React.useState(false);
+			// Navicat 式跨库操控：当前库下拉（""=连接默认库），查询/执行路由到所选库
+			const [dbList, setDbList] = React.useState([]);
+			const [db, setDb] = React.useState("");
+			React.useEffect(() => {
+				setDbList([]); setDb("");
+				if (!connId || !projectPath) return;
+				api("databases" + qs({ project: projectPath, connId })).then((l) => setDbList(l || []), () => setDbList([]));
+			}, [connId, projectPath]);
 
 			async function run() {
 				setBusy(true);
@@ -921,7 +959,7 @@ window.__ModuleLoader__.load({
 						let parsedParams;
 						if (params.trim()) { try { parsedParams = JSON.parse(params); } catch (e) { throw new Error(t("paramsJson") + ": " + e.message); } }
 						const data = await runGuarded(
-							(challengeId) => api("execute", { method: "POST", body: { projectPath, connId, statement: sql, params: parsedParams, challengeId } }),
+							(challengeId) => api("execute", { method: "POST", body: { projectPath, connId, statement: sql, params: parsedParams, database: db || undefined, challengeId } }),
 							askConfirm,
 						);
 						setResult({ kind: "exec", message: (data && data.message) || "", affectedRows: data && data.affectedRows });
@@ -929,7 +967,7 @@ window.__ModuleLoader__.load({
 						let parsedParams;
 						if (params.trim()) { try { parsedParams = JSON.parse(params); } catch (e) { throw new Error(t("paramsJson") + ": " + e.message); } }
 						const data = await runGuarded(
-							(challengeId) => api("query", { method: "POST", body: { projectPath, connId, sql, params: parsedParams, challengeId } }),
+							(challengeId) => api("query", { method: "POST", body: { projectPath, connId, sql, params: parsedParams, database: db || undefined, challengeId } }),
 							askConfirm,
 						);
 						setResult({ kind: "query", data });
@@ -968,6 +1006,10 @@ window.__ModuleLoader__.load({
 						React.createElement("select", { value: connId, onChange: (e) => setConnId(e.target.value) },
 							React.createElement("option", { value: "" }, t("viewManage") + "…"),
 							conns.map((c) => React.createElement("option", { key: c.id, value: c.id }, (c.name || c.id) + " (" + c.kind + ")"))),
+						// 当前库（Navicat 式跨库：选中非默认库后 SQL 在该库执行，pg/gaussdb 按库路由）
+						dbList.length > 1 ? React.createElement("select", { value: db, onChange: (e) => setDb(e.target.value) },
+							React.createElement("option", { value: "" }, t("defaultDb")),
+							dbList.map((d) => React.createElement("option", { key: d, value: d }, d))) : null,
 					),
 					React.createElement(
 						"div",

package/dist/adapters/sql-shared/pg-like.js

@@ -28,25 +28,64 @@ function poolConfig(conn) {
 export async function createPgLikeAdapter(kind, Driver, conn, opts) {
     const pool = new Driver.Pool(poolConfig(conn));
     const readOnly = opts?.mode === 'ro';
-    if (readOnly) {
-        // 服务器级 ro 强制（官方手段）：每个新连接会话设为只读事务。
-        // fail-closed：SET 失败时 release(err) 让驱动销毁该连接、等待的 acquire 收到错误——
-        // 会话级只读是 ro 的最后防线，不允许静默降级成可写连接。
-        pool.on('connect', (c) => {
+    // 服务器级 ro 强制（官方手段）：每个新连接会话设为只读事务。
+    // fail-closed：SET 失败时 release(err) 让驱动销毁该连接、等待的 acquire 收到错误——
+    // 会话级只读是 ro 的最后防线，不允许静默降级成可写连接。
+    const setupReadOnly = (p) => {
+        p.on('connect', (c) => {
             void c.query('SET SESSION CHARACTERISTICS AS TRANSACTION READ ONLY').catch((err) => {
                 c.release(err instanceof Error ? err : new Error(String(err)));
             });
         });
         // pg 约定：release(err) 若无等待者会 emit pool 'error'，不监听会崩进程
-        pool.on('error', () => { });
-    }
+        p.on('error', () => { });
+    };
+    if (readOnly)
+        setupReadOnly(pool);
     // 事务激活期间所有 query/execute 路由到同一 client
     let txClient = null;
     const run = (sql, params) => txClient ? txClient.query(sql, params) : pool.query(sql, params);
+    // 跨库浏览（Navicat 行为）：树列出服务器上所有库，展开非连接库时用同一凭据开指向该库的池。
+    // 池按库缓存复用；ro 模式下新池同样套会话只读。连接自身的库（fields.database 或 url 库名）直接复用主池。
+    const dbPools = new Map();
+    const mainDb = () => {
+        if (conn.fields)
+            return conn.fields.database ? String(conn.fields.database) : null;
+        if (!conn.url)
+            return null;
+        try {
+            return decodeURIComponent(new URL(conn.url).pathname.replace(/^\//, '')) || null;
+        }
+        catch {
+            return null;
+        }
+    };
+    const poolFor = (db) => {
+        if (!db || db === mainDb())
+            return pool;
+        const cached = dbPools.get(db);
+        if (cached)
+            return cached;
+        const created = new Driver.Pool({ ...poolConfig(conn), database: db });
+        if (readOnly)
+            setupReadOnly(created);
+        dbPools.set(db, created);
+        return created;
+    };
     const defaultSchema = () => {
         const f = conn.fields;
         return f && typeof f.schema === 'string' && f.schema ? f.schema : 'public';
     };
+    /** 浏览目标解析："db.schema"（跨库）| "schema"（当前库）| 空（当前库默认 schema）。
+     *  PG 标识符不允许裸点，按第一个点切分安全；多余点由 assertIdent 拒绝。 */
+    const parseBrowseTarget = (ref, what) => {
+        if (!ref)
+            return { db: null, schema: defaultSchema() };
+        const i = ref.indexOf('.');
+        if (i < 0)
+            return { db: null, schema: assertIdent(ref, what) };
+        return { db: assertIdent(ref.slice(0, i), '数据库'), schema: assertIdent(ref.slice(i + 1), what) };
+    };
     function toQueryResult(res) {
         let columns = (res.fields ?? []).map((f) => f.name);
         if (columns.length === 0 && res.rows.length > 0) {
@@ -103,9 +142,17 @@ export async function createPgLikeAdapter(kind, Driver, conn, opts) {
             const v = res.rows[0]?.v;
             return { ok: true, serverInfo: v == null ? kind : String(v) };
         }),
-        query: (sql, params) => humanize(`${kind} 查询失败`, async () => toQueryResult(await run(sql, params ?? []))),
-        execute: (statement, params) => humanize(`${kind} 执行失败`, async () => {
-            const res = await run(statement, params ?? []);
+        query: (sql, params, database) => humanize(`${kind} 查询失败`, async () => {
+            // 跨库操控（Navicat 式）：指定目标库 → 路由到该库的池（主池事务不跨库，忽略事务路由）
+            const res = database
+                ? await poolFor(assertIdent(database, '数据库')).query(sql, params ?? [])
+                : await run(sql, params ?? []);
+            return toQueryResult(res);
+        }),
+        execute: (statement, params, database) => humanize(`${kind} 执行失败`, async () => {
+            const res = database
+                ? await poolFor(assertIdent(database, '数据库')).query(statement, params ?? [])
+                : await run(statement, params ?? []);
             const n = res.rowCount;
             return {
                 affectedRows: typeof n === 'number' ? n : undefined,
@@ -117,37 +164,40 @@ export async function createPgLikeAdapter(kind, Driver, conn, opts) {
             return res.rows.map((r) => String(r.datname));
         }),
         // 库内 schema 清单（Navicat 官方层级：数据库 → 模式 → 表）。
-        // PG 连接固定单库，database 参数无法跨库，忽略；pg_* 前缀覆盖 pg_catalog/pg_toast/pg_temp 系。
-        listSchemas: () => humanize(`${kind} 列出模式`, async () => {
-            const res = await pool.query(`SELECT nspname FROM pg_catalog.pg_namespace
+        // database 参数 = 库名（UI 树第一层）；pg_* 前缀覆盖 pg_catalog/pg_toast/pg_temp 系。
+        listSchemas: (database) => humanize(`${kind} 列出模式`, async () => {
+            const p = poolFor(database ? assertIdent(database, '数据库') : null);
+            const res = await p.query(`SELECT nspname FROM pg_catalog.pg_namespace
            WHERE nspname NOT LIKE 'pg\\_%' AND nspname <> 'information_schema'
            ORDER BY nspname`);
             return res.rows.map((r) => String(r.nspname));
         }),
+        // database 参数 = "库名.schema"（跨库浏览）或 "schema"（当前库）
         listTables: (database) => humanize(`${kind} 列出表`, async () => {
-            const schema = database ? assertIdent(database, 'schema') : defaultSchema();
-            const res = await pool.query(`SELECT table_name, table_type FROM information_schema.tables
+            const { db, schema } = parseBrowseTarget(database, 'schema');
+            const res = await poolFor(db).query(`SELECT table_name, table_type FROM information_schema.tables
            WHERE table_schema = $1 ORDER BY table_name`, [schema]);
             return res.rows.map((r) => {
                 const rawType = String(r.table_type);
                 return {
                     name: String(r.table_name),
                     type: rawType === 'BASE TABLE' ? 'TABLE' : rawType,
-                    database: schema,
+                    database: db ? `${db}.${schema}` : schema,
                 };
             });
         }),
         describeTable: (table, database) => humanize(`${kind} 查看表结构`, async () => {
-            const schema = database ? assertIdent(database, 'schema') : defaultSchema();
+            const { db, schema } = parseBrowseTarget(database, 'schema');
             const tbl = assertIdent(table, '表名');
-            const res = await pool.query(`SELECT c.column_name, c.data_type, c.is_nullable, c.column_default, c.character_maximum_length,
+            const p = poolFor(db);
+            const res = await p.query(`SELECT c.column_name, c.data_type, c.is_nullable, c.column_default, c.character_maximum_length,
                   col_description((quote_ident($1) || '.' || quote_ident($2))::regclass, c.ordinal_position) AS col_comment
            FROM information_schema.columns c
            WHERE c.table_schema = $1 AND c.table_name = $2
            ORDER BY c.ordinal_position`, [schema, tbl]);
             if (res.rows.length === 0)
-                throw new Error(`表不存在: ${schema}.${tbl}`);
-            const pks = await pool.query(`SELECT kcu.column_name FROM information_schema.table_constraints tc
+                throw new Error(`表不存在: ${db ? db + '.' : ''}${schema}.${tbl}`);
+            const pks = await p.query(`SELECT kcu.column_name FROM information_schema.table_constraints tc
            JOIN information_schema.key_column_usage kcu
              ON tc.constraint_name = kcu.constraint_name AND tc.table_schema = kcu.table_schema
            WHERE tc.constraint_type = 'PRIMARY KEY' AND tc.table_schema = $1 AND tc.table_name = $2`, [schema, tbl]);
@@ -166,13 +216,17 @@ export async function createPgLikeAdapter(kind, Driver, conn, opts) {
             });
         }),
         previewRows: (table, limit, database, offset) => humanize(`${kind} 预览行`, async () => {
-            const schema = database ? assertIdent(database, 'schema') : defaultSchema();
+            const { db, schema } = parseBrowseTarget(database, 'schema');
             const tbl = assertIdent(table, '表名');
             const lim = clampLimit(limit);
             const off = clampOffset(offset);
-            const res = await run(`SELECT * FROM ${quoteIdent(schema)}.${quoteIdent(tbl)} LIMIT $1 OFFSET $2`, [lim, off]);
+            const sql = `SELECT * FROM ${quoteIdent(schema)}.${quoteIdent(tbl)} LIMIT $1 OFFSET $2`;
+            // 当前库保持事务路由（run）；跨库必须用该库自己的池
+            const res = db ? await poolFor(db).query(sql, [lim, off]) : await run(sql, [lim, off]);
             return toQueryResult(res);
         }),
-        close: () => humanize(`${kind} 关闭连接`, () => pool.end()),
+        close: () => humanize(`${kind} 关闭连接`, async () => {
+            await Promise.all([pool.end(), ...[...dbPools.values()].map((p) => p.end())]);
+        }),
     };
 }

package/dist/http/index.js

@@ -177,6 +177,7 @@ async function route(req, res, service, path, q, opts) {
                 ...(b['name'] !== undefined ? { name: str(b['name']) } : {}),
                 ...(b['url'] !== undefined ? { url: str(b['url']) } : {}),
                 ...(b['fields'] !== undefined ? { fields: b['fields'] } : {}),
+                ...(b['clearUrl'] === true ? { clearUrl: true } : {}),
                 ...(ssl !== undefined ? { ssl } : {}),
             }));
         }
@@ -222,11 +223,11 @@ async function route(req, res, service, path, q, opts) {
     }
     if (path === '/api/query' && req.method === 'POST') {
         const b = await readBody(req);
-        return await sendMaybeConfirm(res, service.query(projectOfBody(b), str(b['connId']), str(b['sql']), b['params'], optStr(b['challengeId'])));
+        return await sendMaybeConfirm(res, service.query(projectOfBody(b), str(b['connId']), str(b['sql']), b['params'], optStr(b['challengeId']), optStr(b['database'])));
     }
     if (path === '/api/execute' && req.method === 'POST') {
         const b = await readBody(req);
-        return await sendMaybeConfirm(res, service.execute(projectOfBody(b), str(b['connId']), str(b['statement']), b['params'], optStr(b['challengeId'])));
+        return await sendMaybeConfirm(res, service.execute(projectOfBody(b), str(b['connId']), str(b['statement']), b['params'], optStr(b['challengeId']), optStr(b['database'])));
     }
     if (path === '/api/script' && req.method === 'POST') {
         const b = await readBody(req);

package/dist/index.js

@@ -25,7 +25,7 @@ const TOOL_DESCRIPTION = `数据库管理工具（dsh-db-tool）：在已配置
 action 说明：
 - list_connections：列出连接（脱敏，含各连接的 kind 与授权信息需另经 HTTP 面板查看）。
 - query：只读 SQL/命令（conn_id, sql, params?）。
-- execute：写操作/DDL（conn_id, statement, params?）。
+- execute：写操作/DDL（conn_id, statement, params?, database? 跨库目标）。
 - schema：结构浏览（conn_id；给 table 查列、给 database 查表、都不给列库）。
 - preview：预览行，limit≤50（conn_id, table, database?, limit?）。
 - run_script：子进程沙箱脚本（conn_id, code），60s 超时强杀，permission model 禁文件
@@ -84,7 +84,7 @@ export function apply(ctx) {
                 sql: { type: 'string', description: 'query 的只读 SQL/命令' },
                 statement: { type: 'string', description: 'execute 的语句' },
                 params: { type: 'array', items: {}, description: '占位符参数' },
-                database: { type: 'string', description: '库/schema（可选）' },
+                database: { type: 'string', description: '库/schema（可选）。query/execute：指定目标库即跨库执行（Navicat 式，pg/gaussdb 支持按库路由）；schema/preview：浏览目标（pg/gaussdb 传 "库名.schema"）' },
                 table: { type: 'string', description: '表/集合/键（schema/preview 用）' },
                 limit: { type: 'number', description: 'preview 行数上限（≤50）' },
                 offset: { type: 'number', description: 'preview 行偏移（翻页用，默认 0）' },

package/dist/manager.js

@@ -190,7 +190,7 @@ export class DbToolService {
         }
     }
     /* -- SQL 控制台（guard + challenge） -- */
-    async query(projectPath, connId, sql, params, challengeId) {
+    async query(projectPath, connId, sql, params, challengeId, database) {
         const statement = assertNonEmpty(sql, 'sql');
         return this.runGuarded({
             projectPath,
@@ -198,11 +198,11 @@ export class DbToolService {
             op: 'query',
             statement,
             challengeId,
-            run: (adapter) => adapter.query(statement, params),
+            run: (adapter) => adapter.query(statement, params, database),
             rowsAffected: (r) => r.rowCount,
         });
     }
-    async execute(projectPath, connId, statement, params, challengeId) {
+    async execute(projectPath, connId, statement, params, challengeId, database) {
         const stmt = assertNonEmpty(statement, 'statement');
         return this.runGuarded({
             projectPath,
@@ -210,7 +210,7 @@ export class DbToolService {
             op: 'execute',
             statement: stmt,
             challengeId,
-            run: (adapter) => adapter.execute(stmt, params),
+            run: (adapter) => adapter.execute(stmt, params, database),
             rowsAffected: (r) => r.affectedRows,
         });
     }
@@ -429,11 +429,11 @@ export async function handleToolAction(service, args, projectPath) {
             case 'list_connections':
                 return ok(j(service.listConnections()));
             case 'query': {
-                const r = await service.query(projectPath, requireConn(connId), assertArg(args.sql, 'sql'), args.params, challengeId);
+                const r = await service.query(projectPath, requireConn(connId), assertArg(args.sql, 'sql'), args.params, challengeId, args.database);
                 return ok(needConfirmText(r) ?? j(r));
             }
             case 'execute': {
-                const r = await service.execute(projectPath, requireConn(connId), assertArg(args.statement ?? args.sql, 'statement'), args.params, challengeId);
+                const r = await service.execute(projectPath, requireConn(connId), assertArg(args.statement ?? args.sql, 'statement'), args.params, challengeId, args.database);
                 return ok(needConfirmText(r) ?? j(r));
             }
             case 'schema': {

package/dist/store/connections.js

@@ -40,14 +40,21 @@ function toMeta(rec) {
     const meta = { id: rec.id, kind: rec.kind };
     if (rec.name !== undefined)
         meta.name = rec.name;
-    if (rec.urlSafe !== undefined)
+    if (rec.urlSafe !== undefined) {
         meta.safeUrl = rec.urlSafe;
+        meta.mode = 'url';
+    }
+    else {
+        meta.mode = 'fields';
+    }
     if (rec.fields) {
-        const { host, port, database } = rec.fields;
+        const { host, port, user, database } = rec.fields;
         if (typeof host === 'string')
             meta.host = host;
         if (typeof port === 'number')
             meta.port = port;
+        if (typeof user === 'string')
+            meta.user = user;
         if (typeof database === 'string')
             meta.database = database;
     }
@@ -125,6 +132,11 @@ export class ConnectionStore {
             rec.urlSafe = redactUrl(patch.url);
             this.secrets.set(id, { url: patch.url });
         }
+        if (patch.clearUrl && rec.urlSafe !== undefined) {
+            delete rec.urlSafe;
+            // set 为合并写；显式置 undefined 经 JSON 序列化后等效删除该键
+            this.secrets.set(id, { url: undefined });
+        }
         this.save(data);
         return toMeta(rec);
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-db-tool",
-  "version": "0.1.4",
+  "version": "0.1.6",
   "description": "DSH community plugin: chat-operated multi-database admin tool with sidebar management, project-scoped grants, ro/rw modes and dangerous-operation confirmation",
   "type": "module",
   "license": "MIT",

package/skills/db-admin/SKILL.md

@@ -33,6 +33,7 @@ DatabaseManager({ action: "query", conn_id: "c1", sql: "SELECT id, name FROM use
 ```
 
 - `sql` 必填；`params` 为参数数组（占位符见方言速查）；可选 `challenge_id`（危险读如 Redis `KEYS *` 触发确认后重试用）。
+- 可选 `database`：跨库执行目标（Navicat 式）。pg/gaussdb 传库名（如 `gycwd`）即在该库上执行（同一凭据开独立连接，ro 授权下同样强制只读）；其余库种忽略此参数（MySQL 可直接用 `库名.表` 语法）。
 - 返回 `{columns, rows, rowCount, truncated?}`，所有单元格已规范化为 string/number/null。
 - ro 与 rw 授权下都可用，但只读接口收到非查询语句会被拒。
 
@@ -43,6 +44,7 @@ DatabaseManager({ action: "execute", conn_id: "c1", statement: "UPDATE users SET
 ```
 
 - `statement`（或 `sql`）必填，单条语句；DDL/DML/维护命令都会触发危险确认。
+- 可选 `database`：跨库执行目标，语义同 query（pg/gaussdb 支持按库路由，目标库权限由数据库侧用户权限控制）。
 - 返回 `{affectedRows?, message}`，`message` 为中文结果描述。
 - ro 授权下直接返回 `READ_ONLY` 错误。
 
@@ -57,7 +59,7 @@ DatabaseManager({ action: "schema", conn_id: "c1", database: "shop", table: "use
 ```
 
 - 表列表返回 `TableInfo[]`：`{name, type?, comment?, database?}`（Redis 的 type 为 hash|list|set|zset|string|stream）。
-- PostgreSQL/GaussDB 为「数据库 → 模式(schema) → 表」三层语义：`database` 参数此时应传 **schema 名**（如 `public`）；不确定时先执行 `SELECT nspname FROM pg_catalog.pg_namespace WHERE nspname NOT LIKE 'pg\_%' AND nspname <> 'information_schema'` 列出可用 schema。
+- PostgreSQL/GaussDB 为「数据库 → 模式(schema) → 表」三层语义，支持跨库浏览（Navicat 行为）：`database` 参数传 `"库名.schema"` 即可浏览连接库之外的库（如 `gycwd.public`，服务端自动用同一凭据开指向该库的连接）；只传 schema 名（如 `public`）则查连接自身库。`listSchemas(database)` 的参数是**纯库名**。不确定 schema 时先执行 `SELECT nspname FROM pg_catalog.pg_namespace WHERE nspname NOT LIKE 'pg\_%' AND nspname <> 'information_schema'`。
 - 列结构返回 `ColumnInfo[]`：`{name, dataType, nullable, key?, default?, comment?}`。
 
 ### 5. preview — 预览表数据