nomoreide 0.2.0 → 0.3.2

package/dist/core/db/data-masking.d.ts

@@ -1,3 +0,0 @@
-export declare function isSensitiveDatabaseColumn(name: string): boolean;
-export declare function maskDatabaseRow(row: Record<string, unknown>): Record<string, unknown>;
-export declare function maskDatabaseRows(rows: Array<Record<string, unknown>>): Array<Record<string, unknown>>;

package/dist/core/db/data-masking.js

@@ -1,14 +0,0 @@
-const SENSITIVE_COLUMN = /(^|_)(password|passwd|pwd|secret|token|api_?key|access_?key|private_?key|credential|authorization|cookie)(_|$)/i;
-export function isSensitiveDatabaseColumn(name) {
-    return SENSITIVE_COLUMN.test(name);
-}
-export function maskDatabaseRow(row) {
-    return Object.fromEntries(Object.entries(row).map(([column, value]) => [
-        column,
-        isSensitiveDatabaseColumn(column) && value !== null ? "••••" : value,
-    ]));
-}
-export function maskDatabaseRows(rows) {
-    return rows.map(maskDatabaseRow);
-}
-//# sourceMappingURL=data-masking.js.map

package/dist/core/db/data-masking.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"data-masking.js","sourceRoot":"","sources":["../../../src/core/db/data-masking.ts"],"names":[],"mappings":"AAAA,MAAM,gBAAgB,GACpB,iHAAiH,CAAC;AAEpH,MAAM,UAAU,yBAAyB,CAAC,IAAY;IACpD,OAAO,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACrC,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,GAA4B;IAC1D,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC;QAC3C,MAAM;QACN,yBAAyB,CAAC,MAAM,CAAC,IAAI,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK;KACrE,CAAC,CACH,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,gBAAgB,CAC9B,IAAoC;IAEpC,OAAO,IAAI,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;AACnC,CAAC"}

package/dist/core/db/driver.d.ts

@@ -1,151 +0,0 @@
-import type { DatabaseEngine } from "../types.js";
-import type { DatabaseCapabilities, DatabaseObject, DatabaseObjectDetails, DatabaseObjectKind, DatabaseSchema } from "./catalog.js";
-/** A table the user can browse. `schema` is undefined for SQLite. */
-export interface TableRef {
-    schema?: string;
-    name: string;
-    /** Stable key used by the API/UI, e.g. "public.users" or "users". */
-    qualifiedName: string;
-}
-export interface ColumnInfo {
-    name: string;
-    dataType: string;
-    nullable: boolean;
-    primaryKey: boolean;
-}
-export interface RowSample {
-    columns: ColumnInfo[];
-    rows: Array<Record<string, unknown>>;
-    /** Number of rows returned (≤ requested limit). */
-    rowCount: number;
-    /** The page window actually applied, echoed back so the UI can paginate. */
-    limit: number;
-    offset: number;
-}
-export type RowFilterOperator = "eq" | "neq" | "contains" | "startsWith" | "endsWith" | "gt" | "gte" | "lt" | "lte" | "isNull" | "isNotNull";
-export interface RowFilter {
-    column: string;
-    operator: RowFilterOperator;
-    value?: string;
-}
-export interface RowSort {
-    column: string;
-    direction: "asc" | "desc";
-}
-export interface RowBrowseQuery {
-    filters?: RowFilter[];
-    sort?: RowSort;
-}
-export interface StreamRowsOptions {
-    batchSize?: number;
-    signal?: AbortSignal;
-}
-/** Result of running a user-authored read-only query through the SQL console. */
-export interface QueryResult {
-    columns: ColumnInfo[];
-    rows: Array<Record<string, unknown>>;
-    /** Number of rows returned (≤ the row cap). */
-    rowCount: number;
-    /** True when the query produced more rows than the cap; the UI flags it. */
-    truncated: boolean;
-}
-/**
- * Read-only access to a single database. Implementations enforce read-only at
- * the connection/transaction level: `runQuery` accepts user SQL but the server
- * itself rejects any write — there is no write passthrough.
- */
-export interface DbDriver {
-    readonly engine: DatabaseEngine;
-    /** Throws if the connection cannot be established. */
-    testConnection(): Promise<void>;
-    listTables(): Promise<TableRef[]>;
-    capabilities(): DatabaseCapabilities;
-    listSchemas(): Promise<DatabaseSchema[]>;
-    listObjects(schema: string, kinds?: DatabaseObjectKind[]): Promise<DatabaseObject[]>;
-    describeObject(object: DatabaseObject): Promise<DatabaseObjectDetails>;
-    sampleRows(table: TableRef, limit: number, offset?: number, query?: RowBrowseQuery): Promise<RowSample>;
-    /** Stream a stable read-only snapshot in bounded batches. */
-    streamRows(table: TableRef, columns: ColumnInfo[], options?: StreamRowsOptions): AsyncIterable<Array<Record<string, unknown>>>;
-    /** Run an arbitrary SELECT-style statement in a read-only context. */
-    runQuery(sql: string, maxRows: number): Promise<QueryResult>;
-    close(): Promise<void>;
-}
-/** Outcome of a write run — previewed (rolled back) or committed. */
-export interface WriteResult {
-    /** Rows the statement affected (INSERT/UPDATE/DELETE) or returned (SELECT). */
-    affectedRows: number;
-    /** Rows produced by a SELECT or RETURNING clause, if any. */
-    rows: Array<Record<string, unknown>>;
-    columns: ColumnInfo[];
-    /** True when committed; false when this was a rolled-back preview. */
-    committed: boolean;
-}
-/**
- * Write-capable view of a database, deliberately separate from `DbDriver` so a
- * read-only consumer can never reach a write. A writable connection is only
- * ever constructed by the `DbWrite` module, behind a per-connection unlock.
- */
-export type PrimaryKeyValue = string | number | boolean;
-export type PrimaryKeyTuple = Record<string, PrimaryKeyValue>;
-export interface DeleteRowsOptions {
-    table: TableRef;
-    primaryKeys: string[];
-    tuples: PrimaryKeyTuple[];
-    commit: boolean;
-    /** When supplied for a commit, a mismatch must roll the transaction back. */
-    expectedAffectedRows?: number;
-}
-export interface DbWriteDriver extends DbDriver {
-    /**
-     * Run a statement inside a read-write transaction. When `commit` is false the
-     * transaction is rolled back, so the caller can preview affected rows without
-     * persisting anything.
-     */
-    executeWrite(sql: string, commit: boolean): Promise<WriteResult>;
-    /** Delete exact primary-key tuples using bound values in one transaction. */
-    deleteRows(options: DeleteRowsOptions): Promise<WriteResult>;
-}
-/** Throw inside the active transaction when a guarded commit changed unexpectedly. */
-export declare function assertExpectedDeleteCount(options: DeleteRowsOptions, affectedRows: number): void;
-/** Defence in depth: a catalog-sourced identifier must still be well-formed. */
-export declare function assertSafeIdentifier(value: string): string;
-/** Clamp a caller-supplied row limit into a sane range. */
-export declare function clampLimit(limit: number | undefined, fallback?: number): number;
-/** Clamp a caller-supplied page offset to a non-negative integer. */
-export declare function clampOffset(offset: number | undefined): number;
-/** Validate browser query controls against columns read from the live catalog. */
-export declare function normalizeRowBrowseQuery(columns: ColumnInfo[], query: RowBrowseQuery | undefined): RowBrowseQuery;
-/** Build a parameterized WHERE/ORDER BY fragment shared by all Node drivers. */
-export declare function buildRowBrowseClauses(columns: ColumnInfo[], query: RowBrowseQuery | undefined, quoteIdentifier: (value: string) => string, placeholder: (index: number) => string): {
-    whereSql: string;
-    orderBySql: string;
-    values: string[];
-};
-/**
- * Normalize user SQL before we wrap it in a row-capping subquery: trim and drop
- * a single trailing semicolon. Drivers run the result inside a read-only
- * transaction, so a write would be rejected server-side regardless.
- */
-export declare function prepareUserQuery(sql: string): string;
-/** The leading keyword of a statement, lowercased (e.g. "select", "delete"). */
-export declare function leadingKeyword(sql: string): string;
-/** True for plain read statements; anything else is treated as a write. */
-export declare function isReadStatement(sql: string): boolean;
-/**
- * Whether a write can be safely previewed by running it in a transaction and
- * rolling back. True everywhere except MySQL DDL, which auto-commits — there a
- * "preview" would actually apply the change, so we refuse to dry-run it.
- */
-export declare function canPreviewWrite(engine: DatabaseEngine, sql: string): boolean;
-/**
- * Query results carry no catalog metadata, so synthesize ColumnInfo from the
- * result's field names — preserving order even when zero rows come back.
- */
-export declare function columnsFromNames(names: string[]): ColumnInfo[];
-/**
- * Drivers select `*` and return whatever the row shapes are. JSON.stringify
- * can't serialize Buffers/BigInts/Dates cleanly, so normalize to display-safe
- * primitives before they leave the core layer.
- */
-export declare function normalizeCell(value: unknown): unknown;
-export declare function normalizeRow(row: Record<string, unknown>): Record<string, unknown>;

package/dist/core/db/driver.js

@@ -1,209 +0,0 @@
-/** Throw inside the active transaction when a guarded commit changed unexpectedly. */
-export function assertExpectedDeleteCount(options, affectedRows) {
-    if (options.commit &&
-        options.expectedAffectedRows !== undefined &&
-        affectedRows !== options.expectedAffectedRows) {
-        throw new Error(`Delete affected ${affectedRows} rows; expected ${options.expectedAffectedRows}. The transaction was rolled back.`);
-    }
-}
-/** Identifiers we accept after resolving against the live catalog. */
-const SAFE_IDENTIFIER = /^[A-Za-z0-9_$]+$/;
-/** Defence in depth: a catalog-sourced identifier must still be well-formed. */
-export function assertSafeIdentifier(value) {
-    if (!SAFE_IDENTIFIER.test(value)) {
-        throw new Error(`Unsafe identifier: ${value}`);
-    }
-    return value;
-}
-/** Clamp a caller-supplied row limit into a sane range. */
-export function clampLimit(limit, fallback = 100) {
-    if (!Number.isFinite(limit) || limit === undefined)
-        return fallback;
-    return Math.min(Math.max(Math.trunc(limit), 1), 5_000);
-}
-/** Clamp a caller-supplied page offset to a non-negative integer. */
-export function clampOffset(offset) {
-    if (!Number.isFinite(offset) || offset === undefined)
-        return 0;
-    return Math.max(Math.trunc(offset), 0);
-}
-const ROW_FILTER_OPERATORS = new Set([
-    "eq",
-    "neq",
-    "contains",
-    "startsWith",
-    "endsWith",
-    "gt",
-    "gte",
-    "lt",
-    "lte",
-    "isNull",
-    "isNotNull",
-]);
-/** Validate browser query controls against columns read from the live catalog. */
-export function normalizeRowBrowseQuery(columns, query) {
-    const columnNames = new Set(columns.map((column) => column.name));
-    const filters = query?.filters ?? [];
-    if (filters.length > 8)
-        throw new Error("A maximum of 8 row filters is supported.");
-    const normalizedFilters = filters.map((filter) => {
-        if (!columnNames.has(filter.column)) {
-            throw new Error(`Unknown filter column: ${filter.column}`);
-        }
-        if (!ROW_FILTER_OPERATORS.has(filter.operator)) {
-            throw new Error(`Unsupported row filter operator: ${filter.operator}`);
-        }
-        const unary = filter.operator === "isNull" || filter.operator === "isNotNull";
-        const value = unary ? undefined : filter.value;
-        if (!unary && value === undefined)
-            throw new Error("This row filter requires a value.");
-        if (value !== undefined && value.length > 2_000) {
-            throw new Error("Row filter values must be 2,000 characters or fewer.");
-        }
-        return { column: filter.column, operator: filter.operator, value };
-    });
-    const sort = query?.sort;
-    if (sort && !columnNames.has(sort.column)) {
-        throw new Error(`Unknown sort column: ${sort.column}`);
-    }
-    if (sort && sort.direction !== "asc" && sort.direction !== "desc") {
-        throw new Error("Sort direction must be asc or desc.");
-    }
-    return { filters: normalizedFilters, sort };
-}
-/** Build a parameterized WHERE/ORDER BY fragment shared by all Node drivers. */
-export function buildRowBrowseClauses(columns, query, quoteIdentifier, placeholder) {
-    const normalized = normalizeRowBrowseQuery(columns, query);
-    const values = [];
-    const filters = (normalized.filters ?? []).map((filter) => {
-        const column = quoteIdentifier(filter.column);
-        if (filter.operator === "isNull")
-            return `${column} IS NULL`;
-        if (filter.operator === "isNotNull")
-            return `${column} IS NOT NULL`;
-        let value = filter.value ?? "";
-        let operator = "=";
-        if (filter.operator === "neq")
-            operator = "<>";
-        else if (filter.operator === "gt")
-            operator = ">";
-        else if (filter.operator === "gte")
-            operator = ">=";
-        else if (filter.operator === "lt")
-            operator = "<";
-        else if (filter.operator === "lte")
-            operator = "<=";
-        else if (["contains", "startsWith", "endsWith"].includes(filter.operator)) {
-            value = value.replaceAll("!", "!!").replaceAll("%", "!%").replaceAll("_", "!_");
-            if (filter.operator !== "startsWith")
-                value = `%${value}`;
-            if (filter.operator !== "endsWith")
-                value = `${value}%`;
-            operator = "LIKE";
-        }
-        values.push(value);
-        const likeEscape = operator === "LIKE" ? " ESCAPE '!'" : "";
-        return `${column} ${operator} ${placeholder(values.length)}${likeEscape}`;
-    });
-    const orderColumns = [];
-    if (normalized.sort)
-        orderColumns.push(normalized.sort);
-    for (const column of columns.filter((candidate) => candidate.primaryKey)) {
-        if (column.name !== normalized.sort?.column) {
-            orderColumns.push({ column: column.name, direction: "asc" });
-        }
-    }
-    return {
-        whereSql: filters.length > 0 ? ` WHERE ${filters.join(" AND ")}` : "",
-        orderBySql: orderColumns.length > 0
-            ? ` ORDER BY ${orderColumns.map((sort) => `${quoteIdentifier(sort.column)} ${sort.direction.toUpperCase()}`).join(", ")}`
-            : "",
-        values,
-    };
-}
-/**
- * Normalize user SQL before we wrap it in a row-capping subquery: trim and drop
- * a single trailing semicolon. Drivers run the result inside a read-only
- * transaction, so a write would be rejected server-side regardless.
- */
-export function prepareUserQuery(sql) {
-    const trimmed = sql.trim().replace(/;\s*$/, "").trim();
-    if (!trimmed)
-        throw new Error("Query is empty.");
-    return trimmed;
-}
-/** The leading keyword of a statement, lowercased (e.g. "select", "delete"). */
-export function leadingKeyword(sql) {
-    return /^\s*([a-z]+)/i.exec(sql)?.[1]?.toLowerCase() ?? "";
-}
-/** Statements we treat as reads — routed through the read-only query path. */
-const READ_KEYWORDS = new Set([
-    "select",
-    "show",
-    "explain",
-    "pragma",
-    "describe",
-    "desc",
-]);
-/** True for plain read statements; anything else is treated as a write. */
-export function isReadStatement(sql) {
-    return READ_KEYWORDS.has(leadingKeyword(sql));
-}
-/** DDL implicitly commits on MySQL, so a rolled-back preview can't be trusted. */
-const DDL_KEYWORDS = new Set([
-    "create",
-    "alter",
-    "drop",
-    "truncate",
-    "rename",
-    "grant",
-    "revoke",
-]);
-/**
- * Whether a write can be safely previewed by running it in a transaction and
- * rolling back. True everywhere except MySQL DDL, which auto-commits — there a
- * "preview" would actually apply the change, so we refuse to dry-run it.
- */
-export function canPreviewWrite(engine, sql) {
-    if (engine === "mysql" && DDL_KEYWORDS.has(leadingKeyword(sql)))
-        return false;
-    return true;
-}
-/**
- * Query results carry no catalog metadata, so synthesize ColumnInfo from the
- * result's field names — preserving order even when zero rows come back.
- */
-export function columnsFromNames(names) {
-    return names.map((name) => ({
-        name,
-        dataType: "",
-        nullable: true,
-        primaryKey: false,
-    }));
-}
-/**
- * Drivers select `*` and return whatever the row shapes are. JSON.stringify
- * can't serialize Buffers/BigInts/Dates cleanly, so normalize to display-safe
- * primitives before they leave the core layer.
- */
-export function normalizeCell(value) {
-    if (value === null || value === undefined)
-        return null;
-    if (typeof value === "bigint")
-        return value.toString();
-    if (value instanceof Date)
-        return value.toISOString();
-    if (Buffer.isBuffer(value))
-        return `\\x${value.toString("hex")}`;
-    if (typeof value === "object")
-        return value; // arrays / json columns
-    return value;
-}
-export function normalizeRow(row) {
-    const out = {};
-    for (const [key, value] of Object.entries(row)) {
-        out[key] = normalizeCell(value);
-    }
-    return out;
-}
-//# sourceMappingURL=driver.js.map

package/dist/core/db/driver.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"driver.js","sourceRoot":"","sources":["../../../src/core/db/driver.ts"],"names":[],"mappings":"AAoJA,sFAAsF;AACtF,MAAM,UAAU,yBAAyB,CACvC,OAA0B,EAC1B,YAAoB;IAEpB,IACE,OAAO,CAAC,MAAM;QACd,OAAO,CAAC,oBAAoB,KAAK,SAAS;QAC1C,YAAY,KAAK,OAAO,CAAC,oBAAoB,EAC7C,CAAC;QACD,MAAM,IAAI,KAAK,CACb,mBAAmB,YAAY,mBAAmB,OAAO,CAAC,oBAAoB,oCAAoC,CACnH,CAAC;IACJ,CAAC;AACH,CAAC;AAED,sEAAsE;AACtE,MAAM,eAAe,GAAG,kBAAkB,CAAC;AAE3C,gFAAgF;AAChF,MAAM,UAAU,oBAAoB,CAAC,KAAa;IAChD,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CAAC,sBAAsB,KAAK,EAAE,CAAC,CAAC;IACjD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,2DAA2D;AAC3D,MAAM,UAAU,UAAU,CAAC,KAAyB,EAAE,QAAQ,GAAG,GAAG;IAClE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,QAAQ,CAAC;IACpE,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;AACzD,CAAC;AAED,qEAAqE;AACrE,MAAM,UAAU,WAAW,CAAC,MAA0B;IACpD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,CAAC,CAAC;IAC/D,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;AACzC,CAAC;AAED,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAoB;IACtD,IAAI;IACJ,KAAK;IACL,UAAU;IACV,YAAY;IACZ,UAAU;IACV,IAAI;IACJ,KAAK;IACL,IAAI;IACJ,KAAK;IACL,QAAQ;IACR,WAAW;CACZ,CAAC,CAAC;AAEH,kFAAkF;AAClF,MAAM,UAAU,uBAAuB,CACrC,OAAqB,EACrB,KAAiC;IAEjC,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IAClE,MAAM,OAAO,GAAG,KAAK,EAAE,OAAO,IAAI,EAAE,CAAC;IACrC,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IACpF,MAAM,iBAAiB,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;QAC/C,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;YACpC,MAAM,IAAI,KAAK,CAAC,0BAA0B,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QAC7D,CAAC;QACD,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC/C,MAAM,IAAI,KAAK,CAAC,oCAAoC,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;QACzE,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,KAAK,WAAW,CAAC;QAC9E,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;QAC/C,IAAI,CAAC,KAAK,IAAI,KAAK,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;QACxF,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,GAAG,KAAK,EAAE,CAAC;YAChD,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;QAC1E,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAC;IACrE,CAAC,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,KAAK,EAAE,IAAI,CAAC;IACzB,IAAI,IAAI,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QAC1C,MAAM,IAAI,KAAK,CAAC,wBAAwB,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IACzD,CAAC;IACD,IAAI,IAAI,IAAI,IAAI,CAAC,SAAS,KAAK,KAAK,IAAI,IAAI,CAAC,SAAS,KAAK,MAAM,EAAE,CAAC;QAClE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACzD,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC;AAC9C,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,qBAAqB,CACnC,OAAqB,EACrB,KAAiC,EACjC,eAA0C,EAC1C,WAAsC;IAEtC,MAAM,UAAU,GAAG,uBAAuB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAC3D,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,OAAO,GAAG,CAAC,UAAU,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;QACxD,MAAM,MAAM,GAAG,eAAe,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC9C,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ;YAAE,OAAO,GAAG,MAAM,UAAU,CAAC;QAC7D,IAAI,MAAM,CAAC,QAAQ,KAAK,WAAW;YAAE,OAAO,GAAG,MAAM,cAAc,CAAC;QACpE,IAAI,KAAK,GAAG,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC;QAC/B,IAAI,QAAQ,GAAG,GAAG,CAAC;QACnB,IAAI,MAAM,CAAC,QAAQ,KAAK,KAAK;YAAE,QAAQ,GAAG,IAAI,CAAC;aAC1C,IAAI,MAAM,CAAC,QAAQ,KAAK,IAAI;YAAE,QAAQ,GAAG,GAAG,CAAC;aAC7C,IAAI,MAAM,CAAC,QAAQ,KAAK,KAAK;YAAE,QAAQ,GAAG,IAAI,CAAC;aAC/C,IAAI,MAAM,CAAC,QAAQ,KAAK,IAAI;YAAE,QAAQ,GAAG,GAAG,CAAC;aAC7C,IAAI,MAAM,CAAC,QAAQ,KAAK,KAAK;YAAE,QAAQ,GAAG,IAAI,CAAC;aAC/C,IAAI,CAAC,UAAU,EAAE,YAAY,EAAE,UAAU,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC1E,KAAK,GAAG,KAAK,CAAC,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YAChF,IAAI,MAAM,CAAC,QAAQ,KAAK,YAAY;gBAAE,KAAK,GAAG,IAAI,KAAK,EAAE,CAAC;YAC1D,IAAI,MAAM,CAAC,QAAQ,KAAK,UAAU;gBAAE,KAAK,GAAG,GAAG,KAAK,GAAG,CAAC;YACxD,QAAQ,GAAG,MAAM,CAAC;QACpB,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnB,MAAM,UAAU,GAAG,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5D,OAAO,GAAG,MAAM,IAAI,QAAQ,IAAI,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,UAAU,EAAE,CAAC;IAC5E,CAAC,CAAC,CAAC;IACH,MAAM,YAAY,GAAc,EAAE,CAAC;IACnC,IAAI,UAAU,CAAC,IAAI;QAAE,YAAY,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;IACxD,KAAK,MAAM,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,UAAU,CAAC,EAAE,CAAC;QACzE,IAAI,MAAM,CAAC,IAAI,KAAK,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC;YAC5C,YAAY,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;QAC/D,CAAC;IACH,CAAC;IACD,OAAO;QACL,QAAQ,EAAE,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE;QACrE,UAAU,EAAE,YAAY,CAAC,MAAM,GAAG,CAAC;YACjC,CAAC,CAAC,aAAa,YAAY,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;YACzH,CAAC,CAAC,EAAE;QACN,MAAM;KACP,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,GAAW;IAC1C,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACvD,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC;IACjD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,cAAc,CAAC,GAAW;IACxC,OAAO,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;AAC7D,CAAC;AAED,8EAA8E;AAC9E,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC;IAC5B,QAAQ;IACR,MAAM;IACN,SAAS;IACT,QAAQ;IACR,UAAU;IACV,MAAM;CACP,CAAC,CAAC;AAEH,2EAA2E;AAC3E,MAAM,UAAU,eAAe,CAAC,GAAW;IACzC,OAAO,aAAa,CAAC,GAAG,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC;AAChD,CAAC;AAED,kFAAkF;AAClF,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC;IAC3B,QAAQ;IACR,OAAO;IACP,MAAM;IACN,UAAU;IACV,QAAQ;IACR,OAAO;IACP,QAAQ;CACT,CAAC,CAAC;AAEH;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,MAAsB,EAAE,GAAW;IACjE,IAAI,MAAM,KAAK,OAAO,IAAI,YAAY,CAAC,GAAG,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAC9E,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAe;IAC9C,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAC1B,IAAI;QACJ,QAAQ,EAAE,EAAE;QACZ,QAAQ,EAAE,IAAI;QACd,UAAU,EAAE,KAAK;KAClB,CAAC,CAAC,CAAC;AACN,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,KAAc;IAC1C,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACvD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC,QAAQ,EAAE,CAAC;IACvD,IAAI,KAAK,YAAY,IAAI;QAAE,OAAO,KAAK,CAAC,WAAW,EAAE,CAAC;IACtD,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,MAAM,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;IACjE,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC,CAAC,wBAAwB;IACrE,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,YAAY,CAC1B,GAA4B;IAE5B,MAAM,GAAG,GAA4B,EAAE,CAAC;IACxC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/C,GAAG,CAAC,GAAG,CAAC,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;IAClC,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/core/db/export.d.ts

@@ -1,17 +0,0 @@
-import type { ColumnInfo } from "./driver.js";
-export type DatabaseExportFormat = "csv" | "json";
-export interface DatabaseExportWriter {
-    write(chunk: string): Promise<void>;
-}
-export interface DatabaseExportProgress {
-    rowsWritten: number;
-    bytesWritten: number;
-}
-export interface DatabaseExportSummary extends DatabaseExportProgress {
-    maskedColumns: string[];
-}
-export declare function writeDatabaseExport(writer: DatabaseExportWriter, format: DatabaseExportFormat, columns: ColumnInfo[], batches: AsyncIterable<Array<Record<string, unknown>>>, options?: {
-    signal?: AbortSignal;
-    onProgress?: (progress: DatabaseExportProgress) => void;
-}): Promise<DatabaseExportSummary>;
-export declare function csvCell(value: unknown): string;

package/dist/core/db/export.js

@@ -1,67 +0,0 @@
-import { isSensitiveDatabaseColumn, maskDatabaseRow } from "./data-masking.js";
-export async function writeDatabaseExport(writer, format, columns, batches, options = {}) {
-    const names = columns.map((column) => column.name);
-    const maskedColumns = names.filter(isSensitiveDatabaseColumn);
-    let rowsWritten = 0;
-    let bytesWritten = 0;
-    let firstJsonRow = true;
-    async function write(chunk) {
-        throwIfAborted(options.signal);
-        await writer.write(chunk);
-        bytesWritten += Buffer.byteLength(chunk);
-    }
-    if (format === "csv")
-        await write(`${names.map(csvCell).join(",")}\r\n`);
-    else
-        await write("[");
-    for await (const batch of batches) {
-        for (const rawRow of batch) {
-            throwIfAborted(options.signal);
-            const row = maskDatabaseRow(rawRow);
-            if (format === "csv") {
-                await write(`${names.map((name) => csvCell(row[name])).join(",")}\r\n`);
-            }
-            else {
-                const normalized = Object.fromEntries(names.map((name) => [name, stableValue(row[name] ?? null)]));
-                await write(`${firstJsonRow ? "" : ","}${JSON.stringify(normalized)}`);
-                firstJsonRow = false;
-            }
-            rowsWritten += 1;
-            options.onProgress?.({ rowsWritten, bytesWritten });
-        }
-    }
-    if (format === "json")
-        await write("]\n");
-    return { rowsWritten, bytesWritten, maskedColumns };
-}
-export function csvCell(value) {
-    let text = exportScalar(value);
-    if (typeof value === "string" && /^[\t\r]|^\s*[=+\-@]/.test(text))
-        text = `'${text}`;
-    return /[",\r\n]/.test(text) ? `"${text.replaceAll('"', '""')}"` : text;
-}
-function exportScalar(value) {
-    if (value === null || value === undefined)
-        return "";
-    if (typeof value === "object")
-        return stableStringify(value);
-    return String(value);
-}
-function stableStringify(value) {
-    return JSON.stringify(stableValue(value));
-}
-function stableValue(value) {
-    if (Array.isArray(value))
-        return value.map(stableValue);
-    if (value && typeof value === "object") {
-        return Object.fromEntries(Object.entries(value)
-            .sort(([left], [right]) => left.localeCompare(right))
-            .map(([key, entry]) => [key, stableValue(entry)]));
-    }
-    return value;
-}
-function throwIfAborted(signal) {
-    if (signal?.aborted)
-        throw new DOMException("Database export cancelled", "AbortError");
-}
-//# sourceMappingURL=export.js.map

package/dist/core/db/export.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"export.js","sourceRoot":"","sources":["../../../src/core/db/export.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,yBAAyB,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAkB/E,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,MAA4B,EAC5B,MAA4B,EAC5B,OAAqB,EACrB,OAAsD,EACtD,UAGI,EAAE;IAEN,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACnD,MAAM,aAAa,GAAG,KAAK,CAAC,MAAM,CAAC,yBAAyB,CAAC,CAAC;IAC9D,IAAI,WAAW,GAAG,CAAC,CAAC;IACpB,IAAI,YAAY,GAAG,CAAC,CAAC;IACrB,IAAI,YAAY,GAAG,IAAI,CAAC;IAExB,KAAK,UAAU,KAAK,CAAC,KAAa;QAChC,cAAc,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC/B,MAAM,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC1B,YAAY,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;IAC3C,CAAC;IAED,IAAI,MAAM,KAAK,KAAK;QAAE,MAAM,KAAK,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;;QACpE,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;IAEtB,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAClC,KAAK,MAAM,MAAM,IAAI,KAAK,EAAE,CAAC;YAC3B,cAAc,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YAC/B,MAAM,GAAG,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;YACpC,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;gBACrB,MAAM,KAAK,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YAC1E,CAAC;iBAAM,CAAC;gBACN,MAAM,UAAU,GAAG,MAAM,CAAC,WAAW,CACnC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAC5D,CAAC;gBACF,MAAM,KAAK,CAAC,GAAG,YAAY,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;gBACvE,YAAY,GAAG,KAAK,CAAC;YACvB,CAAC;YACD,WAAW,IAAI,CAAC,CAAC;YACjB,OAAO,CAAC,UAAU,EAAE,CAAC,EAAE,WAAW,EAAE,YAAY,EAAE,CAAC,CAAC;QACtD,CAAC;IACH,CAAC;IACD,IAAI,MAAM,KAAK,MAAM;QAAE,MAAM,KAAK,CAAC,KAAK,CAAC,CAAC;IAE1C,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,aAAa,EAAE,CAAC;AACtD,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,KAAc;IACpC,IAAI,IAAI,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;IAC/B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;IACrF,OAAO,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;AAC1E,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IACrD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,eAAe,CAAC,KAAK,CAAC,CAAC;IAC7D,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;AACvB,CAAC;AAED,SAAS,eAAe,CAAC,KAAc;IACrC,OAAO,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC;AAC5C,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IACxD,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC;aAC7C,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;aACpD,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,CACpD,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,cAAc,CAAC,MAAoB;IAC1C,IAAI,MAAM,EAAE,OAAO;QAAE,MAAM,IAAI,YAAY,CAAC,2BAA2B,EAAE,YAAY,CAAC,CAAC;AACzF,CAAC"}

package/dist/core/db/mysql-driver.d.ts

@@ -1,33 +0,0 @@
-import type { DatabaseEngine } from "../types.js";
-import { type DatabaseCapabilities, type DatabaseObject, type DatabaseObjectDetails, type DatabaseObjectKind, type DatabaseSchema } from "./catalog.js";
-import { type ColumnInfo, type DeleteRowsOptions, type DbDriver, type DbWriteDriver, type QueryResult, type RowBrowseQuery, type RowSample, type StreamRowsOptions, type TableRef, type WriteResult } from "./driver.js";
-/**
- * MySQL / MariaDB driver. Read operations run in a `START TRANSACTION READ
- * ONLY` block, then roll back. A driver constructed with `{ writable: true }`
- * (only the DbWrite module does this) exposes the guarded `executeWrite` path.
- */
-export declare class MysqlDriver implements DbDriver, DbWriteDriver {
-    private readonly url;
-    readonly engine: DatabaseEngine;
-    private poolPromise;
-    private readonly writable;
-    constructor(url: string, options?: {
-        writable?: boolean;
-    });
-    private pool;
-    private withReadOnly;
-    testConnection(): Promise<void>;
-    listTables(): Promise<TableRef[]>;
-    capabilities(): DatabaseCapabilities;
-    listSchemas(): Promise<DatabaseSchema[]>;
-    listObjects(schema: string, kinds?: DatabaseObjectKind[]): Promise<DatabaseObject[]>;
-    describeObject(object: DatabaseObject): Promise<DatabaseObjectDetails>;
-    private createScriptFor;
-    sampleRows(table: TableRef, limit: number, offset?: number, query?: RowBrowseQuery): Promise<RowSample>;
-    streamRows(table: TableRef, columns: ColumnInfo[], options?: StreamRowsOptions): AsyncIterable<Array<Record<string, unknown>>>;
-    runQuery(sql: string, maxRows: number): Promise<QueryResult>;
-    executeWrite(sql: string, commit: boolean): Promise<WriteResult>;
-    deleteRows(options: DeleteRowsOptions): Promise<WriteResult>;
-    private columnsFor;
-    close(): Promise<void>;
-}