neonctl 2.27.1 → 2.29.0

package/dist/psql/command/cmd_restrict.js

@@ -31,7 +31,7 @@
  *    `\restrict NAME` provided. A mismatch keeps the session in
  *    restricted mode and returns an error.
  */
-import { writeErr } from './shared.js';
+import { writeErr } from "./shared.js";
 /** Standard refusal message emitted when a gated command is invoked while
  * the session is in restricted mode. Public so callers and tests can match
  * against the exact string. */
@@ -48,19 +48,19 @@ export const RESTRICTED_REFUSAL_MESSAGE = (cmdName) => `\\${cmdName}: command is
  * registry level" and avoids touching cmd_copy.ts internals.
  */
 export const RESTRICTED_COMMANDS = new Set([
-    '!', // shell escape
-    'cd', // change directory
-    'copy', // \copy — including \copy FROM PROGRAM
-    'setenv', // mutate process env
-    'w', // \w / \write — file write of query buffer
+    "!", // shell escape
+    "cd", // change directory
+    "copy", // \copy — including \copy FROM PROGRAM
+    "setenv", // mutate process env
+    "w", // \w / \write — file write of query buffer
     // `\o`/`\g`/`\gx` route through openWriter(), which spawns `sh -c <cmd>`
     // for a `|command` target (arbitrary shell exec) and writes the filesystem
     // for a FILE target; `\s FILE` writes history to disk. Block them by name
     // (review item #13). Plain query execution still works via `;`.
-    'o', // \o [FILE | |cmd]
-    'g', // \g [FILE | |cmd]
-    'gx', // \gx [FILE | |cmd]
-    's', // \s [FILE] — write command history
+    "o", // \o [FILE | |cmd]
+    "g", // \g [FILE | |cmd]
+    "gx", // \gx [FILE | |cmd]
+    "s", // \s [FILE] — write command history
 ]);
 /**
  * True iff the session is currently in restricted mode. Reads the
@@ -86,20 +86,20 @@ export const isCommandRestricted = (settings, primaryName) => isRestricted(setti
  * with an Assert; we surface it as a regular command error.
  */
 export const cmdRestrict = {
-    name: 'restrict',
-    helpKey: 'restrict',
+    name: "restrict",
+    helpKey: "restrict",
     run: (ctx) => {
-        const arg = ctx.nextArg('normal');
+        const arg = ctx.nextArg("normal");
         if (arg === null || arg.length === 0) {
             writeErr(`\\${ctx.cmdName}: missing required argument\n`);
-            return Promise.resolve({ status: 'error' });
+            return Promise.resolve({ status: "error" });
         }
         if (isRestricted(ctx.settings)) {
             writeErr(`\\${ctx.cmdName}: already in restricted mode\n`);
-            return Promise.resolve({ status: 'error' });
+            return Promise.resolve({ status: "error" });
         }
         ctx.settings.restrictedKey = arg;
-        return Promise.resolve({ status: 'ok' });
+        return Promise.resolve({ status: "ok" });
     },
 };
 /**
@@ -107,25 +107,25 @@ export const cmdRestrict = {
  * given to the original `\restrict`.
  */
 export const cmdUnrestrict = {
-    name: 'unrestrict',
-    helpKey: 'unrestrict',
+    name: "unrestrict",
+    helpKey: "unrestrict",
     run: (ctx) => {
-        const arg = ctx.nextArg('normal');
+        const arg = ctx.nextArg("normal");
         if (arg === null || arg.length === 0) {
             writeErr(`\\${ctx.cmdName}: missing required argument\n`);
-            return Promise.resolve({ status: 'error' });
+            return Promise.resolve({ status: "error" });
         }
         const current = restrictedName(ctx.settings);
         if (current === null) {
             writeErr(`\\${ctx.cmdName}: not currently in restricted mode\n`);
-            return Promise.resolve({ status: 'error' });
+            return Promise.resolve({ status: "error" });
         }
         if (arg !== current) {
             writeErr(`\\${ctx.cmdName}: wrong key\n`);
-            return Promise.resolve({ status: 'error' });
+            return Promise.resolve({ status: "error" });
         }
         ctx.settings.restrictedKey = null;
-        return Promise.resolve({ status: 'ok' });
+        return Promise.resolve({ status: "ok" });
     },
 };
 /**
@@ -148,7 +148,7 @@ export const registerRestrictCommands = (registry) => {
  * call is a no-op. Must be called *after* all restricted commands have
  * been registered (so we see them via `registry.lookup`).
  */
-const WRAPPED_FLAG = Symbol.for('neonctl.psql.restrictWrapped');
+const WRAPPED_FLAG = Symbol.for("neonctl.psql.restrictWrapped");
 export const wrapRestrictedCommands = (registry) => {
     for (const name of RESTRICTED_COMMANDS) {
         const spec = registry.lookup(name);
@@ -160,7 +160,7 @@ export const wrapRestrictedCommands = (registry) => {
             run: (ctx) => {
                 if (isRestricted(ctx.settings)) {
                     writeErr(RESTRICTED_REFUSAL_MESSAGE(ctx.cmdName));
-                    return Promise.resolve({ status: 'error' });
+                    return Promise.resolve({ status: "error" });
                 }
                 return originalRun(ctx);
             },