inline-sql-toolkit 0.4.9 → 0.4.11

package/CHANGELOG.md

@@ -1,5 +1,47 @@
 # Changelog
 
+## 0.4.11 - 2026-09-24
+
+- Feature: added the `inlineSql.format.commaPosition` setting (`after` |
+  `before`, default `after`) for codebases that want a wrapped item's comma at
+  the start of the next line instead of the end of the previous one. The
+  default reproduces the previous output byte for byte, so existing files do
+  not move until the setting is turned on; `before` emits the comma at the
+  next line's indent in front of the item, and a trailing `-- comment` stays
+  with its own column (`order_id -- note` followed by `, order_date -- note`)
+  rather than pinning the comma behind it.
+- The same choice is exposed everywhere the other options are: the VS Code
+  setting, the CLI flag `--comma-position after|before`, and
+  `"commaPosition"` in `.inline-sql.json`, under the unchanged CLI flags >
+  configuration file > defaults precedence.
+- Safety: `sql-formatter` removed its own `commaPosition` option long ago, so
+  the move is a small post-pass over its output. A scanner locates the
+  wrapping separator comma and never moves one from inside a quoted string
+  (`'...'`, `"..."`, backticks) or from after a `--` line comment, and a
+  candidate whose output still fails to converge to a fixed point is skipped
+  untouched as before, so no file can be rewritten with corrupted SQL.
+
+## 0.4.10 - 2026-09-19
+
+- CI: the npm publish job is now OIDC-only. The dormant `NPM_TOKEN` path that was
+  kept for the one-time 0.4.7 bootstrap is gone, so a stray token secret can no
+  longer silently take precedence over trusted publishing — one did, and it would
+  have expired a week later. npm exchanges the GitHub OIDC token for a
+  short-lived publish credential and attaches provenance attestations, matching
+  the setup already used by `sql-template-formatter`.
+- Documentation: `docs/releasing.md` now records the bootstrap as a one-time
+  local publish that is needed only for a brand-new package name: install with
+  `bun install --frozen-lockfile --ignore-scripts`, build with `bun run build`,
+  then `npm publish`. It also states that dispatching the workflow can no longer
+  verify OIDC, because the publish is skipped when the version is already on npm:
+  the next release is the first real test of the credential exchange.
+- Documentation: the tarball check now requires `dist/cli.js` and
+  `dist/package.json` together: the latter marks `dist/` as CommonJS, and 0.4.7
+  shipped without it, so the published CLI died with the error
+  `module is not defined in ES module scope`.
+- No formatting behavior changes and no code changes: this release is publish
+  workflow and release-documentation only.
+
 ## 0.4.9 - 2026-09-18
 
 - CI: the Open VSX publish step now retries up to four times with a 30-second

package/README.md

@@ -110,6 +110,9 @@ later atomic precondition.
   aliases (default `true`).
 - `inlineSql.format.dialect`: SQL dialect used by the formatter (`sql`,
   `mysql`, `postgresql`, or `sqlite`; default `postgresql`).
+- `inlineSql.format.commaPosition`: `after` (default) keeps a wrapping comma at
+  the end of the previous line; `before` moves it to the start of the next
+  line.
 
 The extension highlights inline SQL with an injected TextMate grammar: SQL
 strings that start with `-- sql` (or a leading SQL keyword) are embedded as
@@ -144,6 +147,7 @@ When run without file arguments, the CLI reads Python source from standard input
 | `--wrap-after <20-500>`       | Preferred expression line width                                   | `88`                       |
 | `--no-space-around-operators` | Keep dense operators                                              | spaced                     |
 | `--no-ordinals`               | Do not replace `GROUP BY` / `ORDER BY` ordinals with column names | replace                    |
+| `--comma-position <pos>`      | Where a wrapping comma sits: `after` or `before`                  | `after`                    |
 | `-c, --config <file>`         | Configuration JSON file                                           | Nearest `.inline-sql.json` |
 | `-h, --help`                  | Show usage help                                                   |                            |
 | `--version`                   | Show version number                                               |                            |
@@ -162,7 +166,8 @@ The CLI automatically searches for a `.inline-sql.json` file in the current work
     "wrapAfter": 88,
     "useSpaceAroundOperators": true,
     "replaceOrdinals": true,
-    "dialect": "postgresql"
+    "dialect": "postgresql",
+    "commaPosition": "after"
   }
 }
 ```

package/dist/cli.js

@@ -494,7 +494,8 @@ function resolveFormatOptions(raw) {
   const useSpaceAroundOperators = raw.useSpaceAroundOperators === void 0 ? true : raw.useSpaceAroundOperators;
   const replaceOrdinals2 = raw.replaceOrdinals === void 0 ? true : raw.replaceOrdinals;
   const dialect = raw.dialect === void 0 ? "postgresql" : raw.dialect;
-  if (keywordCase !== "upper" && keywordCase !== "lower" && keywordCase !== "preserve" || !integerBetween(indentWidth, 1, 8) || !integerBetween(wrapAfter, 20, 500) || typeof useSpaceAroundOperators !== "boolean" || typeof replaceOrdinals2 !== "boolean" || dialect !== "sql" && dialect !== "mysql" && dialect !== "postgresql" && dialect !== "sqlite") {
+  const commaPosition = raw.commaPosition === void 0 ? "after" : raw.commaPosition;
+  if (keywordCase !== "upper" && keywordCase !== "lower" && keywordCase !== "preserve" || !integerBetween(indentWidth, 1, 8) || !integerBetween(wrapAfter, 20, 500) || typeof useSpaceAroundOperators !== "boolean" || typeof replaceOrdinals2 !== "boolean" || dialect !== "sql" && dialect !== "mysql" && dialect !== "postgresql" && dialect !== "sqlite" || commaPosition !== "after" && commaPosition !== "before") {
     return { ok: false, reason: "INVALID_CONFIGURATION" };
   }
   return {
@@ -505,7 +506,8 @@ function resolveFormatOptions(raw) {
       wrapAfter,
       useSpaceAroundOperators,
       replaceOrdinals: replaceOrdinals2,
-      dialect
+      dialect,
+      commaPosition
     }
   };
 }
@@ -1584,6 +1586,38 @@ function breakTrailingDistributeLines(text) {
 ${indent}${rest}`
   );
 }
+function wrappingComma(line) {
+  let comma = -1;
+  for (let index = 0; index < line.length; index++) {
+    const char = line[index];
+    if (char === "'" || char === '"' || char === "`") {
+      for (index += 1; index < line.length && line[index] !== char; index++) {
+        if (line[index] === "\\") index += 1;
+      }
+      continue;
+    }
+    if (char === "-" && line[index + 1] === "-") break;
+    if (char === ",") comma = index;
+  }
+  if (comma < 0) return -1;
+  return /^[ \t]*(?:--.*)?$/.test(line.slice(comma + 1)) ? comma : -1;
+}
+function moveCommasToLineStarts(text) {
+  const lines = text.split("\n");
+  for (let index = 0; index + 1 < lines.length; index++) {
+    const line = lines[index] ?? "";
+    const next = lines[index + 1] ?? "";
+    if (next.trim() === "") continue;
+    const comma = wrappingComma(line);
+    if (comma < 0 || line.slice(0, comma).trim() === "") continue;
+    const nextParts = /^([ \t]*)([\s\S]*)$/.exec(next);
+    const indent = nextParts?.[1] ?? "";
+    const content = nextParts?.[2] ?? "";
+    lines[index] = `${line.slice(0, comma)}${line.slice(comma + 1)}`.trimEnd();
+    lines[index + 1] = `${indent}, ${content}`;
+  }
+  return lines.join("\n");
+}
 function formatOnce(analysis, literal, detection, options, nonce, sqlFormatter) {
   const plan = buildProtectionPlan(analysis.sourceMap, literal, detection, nonce);
   let formatted = sqlFormatter(plan.protectedSql, {
@@ -1598,6 +1632,9 @@ function formatOnce(analysis, literal, detection, options, nonce, sqlFormatter)
   }
   formatted = breakTrailingFieldMarkers(formatted);
   formatted = moveCommasBeforeLineComments(formatted);
+  if (options.commaPosition === "before") {
+    formatted = moveCommasToLineStarts(formatted);
+  }
   formatted = breakTrailingDistributeLines(formatted);
   const restored = restoreProtected(formatted, plan);
   const resolved = options.replaceOrdinals ? replaceOrdinals(restored) : restored;
@@ -1824,7 +1861,7 @@ function formatDocument(source, options, target, nonce, sqlFormatter, logger) {
   };
   if (logger !== void 0) {
     logger(
-      `format: dialect=${options.dialect} keywordCase=${options.keywordCase} indentWidth=${options.indentWidth} wrapAfter=${options.wrapAfter} useSpaceAroundOperators=${options.useSpaceAroundOperators} replaceOrdinals=${options.replaceOrdinals} discovered=${summary.discovered} selected=${summary.selected} changed=${summary.changed} unchanged=${summary.unchanged} skipped=${summary.skipped}${skipReasons.length > 0 ? ` reasons=[${skipReasons.join(", ")}]` : ""}`
+      `format: dialect=${options.dialect} keywordCase=${options.keywordCase} indentWidth=${options.indentWidth} wrapAfter=${options.wrapAfter} useSpaceAroundOperators=${options.useSpaceAroundOperators} replaceOrdinals=${options.replaceOrdinals} commaPosition=${options.commaPosition} discovered=${summary.discovered} selected=${summary.selected} changed=${summary.changed} unchanged=${summary.unchanged} skipped=${summary.skipped}${skipReasons.length > 0 ? ` reasons=[${skipReasons.join(", ")}]` : ""}`
     );
   }
   return {
@@ -22476,6 +22513,7 @@ var USAGE = `Usage: inline-sql-toolkit [options] [files...]
       --wrap-after <20-500>        (default: 88)
       --no-space-around-operators  keep dense operators (default: spaced)
       --no-ordinals                do not replace GROUP BY / ORDER BY ordinals
+      --comma-position <pos>       after | before (default: after)
   -c, --config <file>              config JSON (default: nearest .inline-sql.json)
   -h, --help / --version`;
 function printError(message) {
@@ -22534,7 +22572,8 @@ function buildRawOptions(fileOptions, cliValues) {
     indentWidth: cliValues["indent-width"] !== void 0 ? Number(cliValues["indent-width"]) : fileOptions.indentWidth,
     wrapAfter: cliValues["wrap-after"] !== void 0 ? Number(cliValues["wrap-after"]) : fileOptions.wrapAfter,
     useSpaceAroundOperators: cliValues["no-space-around-operators"] ? false : fileOptions.useSpaceAroundOperators,
-    replaceOrdinals: cliValues["no-ordinals"] ? false : fileOptions.replaceOrdinals
+    replaceOrdinals: cliValues["no-ordinals"] ? false : fileOptions.replaceOrdinals,
+    commaPosition: cliValues["comma-position"] ?? fileOptions.commaPosition
   };
 }
 function formatPythonSource(text, options, logger) {
@@ -22570,6 +22609,7 @@ function runCli(argv) {
         "wrap-after": { type: "string" },
         "no-space-around-operators": { type: "boolean", default: false },
         "no-ordinals": { type: "boolean", default: false },
+        "comma-position": { type: "string" },
         config: { type: "string", short: "c" },
         help: { type: "boolean", short: "h", default: false },
         version: { type: "boolean", default: false }

package/package.json

@@ -11,7 +11,7 @@
   "bugs": {
     "url": "https://github.com/hidenobunagai/inline-sql-toolkit/issues"
   },
-  "version": "0.4.9",
+  "version": "0.4.11",
   "icon": "icon.png",
   "type": "module",
   "bin": {
@@ -104,6 +104,16 @@
           "default": "postgresql",
           "scope": "resource",
           "description": "%configuration.format.dialect.description%"
+        },
+        "inlineSql.format.commaPosition": {
+          "type": "string",
+          "enum": [
+            "after",
+            "before"
+          ],
+          "default": "after",
+          "scope": "resource",
+          "description": "%configuration.format.commaPosition.description%"
         }
       }
     },