spindb 0.37.2 → 0.38.0

package/dist/core/credential-generator.js

@@ -0,0 +1,67 @@
+/**
+ * Credential Generator
+ *
+ * Generates secure random credentials for Docker exports.
+ * Uses Node.js crypto module for cryptographically secure random values.
+ */
+import { randomBytes } from 'crypto';
+// Character sets for password generation
+const LOWERCASE = 'abcdefghijklmnopqrstuvwxyz';
+const UPPERCASE = 'ABCDEFGHIJKLMNOPQRSTUVWXYZ';
+const DIGITS = '0123456789';
+// Shell-safe symbols only (no # $ & * ? \ ' " ` ! | ; < > etc.)
+const SYMBOLS = '%+-=@^_';
+// Default character set (alphanumeric + shell-safe symbols)
+const DEFAULT_CHARSET = LOWERCASE + UPPERCASE + DIGITS + SYMBOLS;
+// Alphanumeric only (for systems that don't support special chars)
+const ALPHANUMERIC_CHARSET = LOWERCASE + UPPERCASE + DIGITS;
+/**
+ * Generate a cryptographically secure random password
+ * @param options Password generation options
+ * @returns Generated password string
+ */
+export function generatePassword(options = {}) {
+    const { length = 16, alphanumericOnly = false, charset } = options;
+    const chars = charset || (alphanumericOnly ? ALPHANUMERIC_CHARSET : DEFAULT_CHARSET);
+    // Generate random bytes
+    const bytes = randomBytes(length);
+    // Convert to password characters
+    let password = '';
+    for (let i = 0; i < length; i++) {
+        // Use modulo to map byte to character index
+        // This is slightly biased but acceptable for password generation
+        password += chars[bytes[i] % chars.length];
+    }
+    return password;
+}
+/**
+ * Generate a random hex string (for API keys, tokens, etc.)
+ * @param byteLength Number of random bytes (output will be 2x this length in hex)
+ * @returns Hex string
+ */
+export function generateHexToken(byteLength = 32) {
+    return randomBytes(byteLength).toString('hex');
+}
+/**
+ * Generate a random alphanumeric ID (for container names, etc.)
+ * @param length Length of the ID
+ * @returns Alphanumeric string
+ */
+export function generateId(length = 8) {
+    return generatePassword({ length, alphanumericOnly: true }).toLowerCase();
+}
+/**
+ * Generate standard credentials for a Docker export
+ * Uses alphanumeric only to avoid issues with special characters in:
+ * - Connection strings (@ is a separator, % needs URL encoding)
+ * - Environment variable parsing (= can cause issues)
+ * - SQL/shell commands (quotes, backslashes need escaping)
+ * @returns Object with username and password
+ */
+export function generateCredentials() {
+    return {
+        username: 'spindb',
+        password: generatePassword({ length: 20, alphanumericOnly: true }),
+    };
+}
+//# sourceMappingURL=credential-generator.js.map

package/dist/core/credential-generator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"credential-generator.js","sourceRoot":"","sources":["../../core/credential-generator.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,QAAQ,CAAA;AAEpC,yCAAyC;AACzC,MAAM,SAAS,GAAG,4BAA4B,CAAA;AAC9C,MAAM,SAAS,GAAG,4BAA4B,CAAA;AAC9C,MAAM,MAAM,GAAG,YAAY,CAAA;AAC3B,gEAAgE;AAChE,MAAM,OAAO,GAAG,SAAS,CAAA;AAEzB,4DAA4D;AAC5D,MAAM,eAAe,GAAG,SAAS,GAAG,SAAS,GAAG,MAAM,GAAG,OAAO,CAAA;AAEhE,mEAAmE;AACnE,MAAM,oBAAoB,GAAG,SAAS,GAAG,SAAS,GAAG,MAAM,CAAA;AAW3D;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,UAA2B,EAAE;IAC5D,MAAM,EAAE,MAAM,GAAG,EAAE,EAAE,gBAAgB,GAAG,KAAK,EAAE,OAAO,EAAE,GAAG,OAAO,CAAA;IAElE,MAAM,KAAK,GACT,OAAO,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,eAAe,CAAC,CAAA;IAExE,wBAAwB;IACxB,MAAM,KAAK,GAAG,WAAW,CAAC,MAAM,CAAC,CAAA;IAEjC,iCAAiC;IACjC,IAAI,QAAQ,GAAG,EAAE,CAAA;IACjB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAChC,4CAA4C;QAC5C,iEAAiE;QACjE,QAAQ,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,CAAA;IAC5C,CAAC;IAED,OAAO,QAAQ,CAAA;AACjB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,aAAqB,EAAE;IACtD,OAAO,WAAW,CAAC,UAAU,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;AAChD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,UAAU,CAAC,SAAiB,CAAC;IAC3C,OAAO,gBAAgB,CAAC,EAAE,MAAM,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAA;AAC3E,CAAC;AAOD;;;;;;;GAOG;AACH,MAAM,UAAU,mBAAmB;IACjC,OAAO;QACL,QAAQ,EAAE,QAAQ;QAClB,QAAQ,EAAE,gBAAgB,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC;KACnE,CAAA;AACH,CAAC"}

package/dist/core/credential-manager.js

@@ -0,0 +1,211 @@
+/**
+ * Credential Manager
+ *
+ * Manages saved database credentials on disk.
+ * Credentials are stored as .env files in the container's credentials/ directory.
+ */
+import { existsSync } from 'fs';
+import { readFile, writeFile, readdir, mkdir, chmod } from 'fs/promises';
+import { join } from 'path';
+import { paths } from '../config/paths.js';
+import { Engine } from '../types/index.js';
+import { isValidUsername } from './error-handler.js';
+/**
+ * Get the credentials directory for a container.
+ */
+function getCredentialsDir(containerName, engine) {
+    const containerPath = paths.getContainerPath(containerName, { engine });
+    return join(containerPath, 'credentials');
+}
+/**
+ * Get the credential file path for a specific username.
+ * Validates the username to prevent path traversal (same rules as assertValidUsername).
+ */
+function getCredentialFilePath(containerName, engine, username) {
+    if (!isValidUsername(username)) {
+        throw new Error(`Invalid username for credential file: "${username}". Must match ^[a-zA-Z][a-zA-Z0-9_]{0,62}$`);
+    }
+    return join(getCredentialsDir(containerName, engine), `.env.${username}`);
+}
+/**
+ * Format credentials as .env file content.
+ */
+function encodeEnvValue(value) {
+    if (/[\n\r=\\]/.test(value)) {
+        return JSON.stringify(value);
+    }
+    return value;
+}
+function decodeEnvValue(raw) {
+    if (raw.startsWith('"') && raw.endsWith('"')) {
+        try {
+            return JSON.parse(raw);
+        }
+        catch {
+            return raw;
+        }
+    }
+    return raw;
+}
+function formatCredentials(credentials) {
+    const lines = [];
+    if (credentials.apiKey) {
+        lines.push(`API_KEY_NAME=${encodeEnvValue(credentials.username)}`);
+        lines.push(`API_KEY=${encodeEnvValue(credentials.apiKey)}`);
+        lines.push(`API_URL=${encodeEnvValue(credentials.connectionString)}`);
+    }
+    else {
+        lines.push(`DB_USER=${encodeEnvValue(credentials.username)}`);
+        lines.push(`DB_PASSWORD=${encodeEnvValue(credentials.password)}`);
+        // Extract host and port from the connection string.
+        // Use URL parsing when possible; fall back to a regex targeting host:port.
+        let extractedHost;
+        let extractedPort;
+        try {
+            const url = new URL(credentials.connectionString);
+            if (url.hostname) {
+                extractedHost = url.hostname;
+            }
+            if (url.port) {
+                extractedPort = url.port;
+            }
+        }
+        catch {
+            // Not a valid URL (e.g. custom scheme). Use regex targeting host:port segment.
+            const hostPortMatch = credentials.connectionString.match(/@(\[[^\]]+\]|[^:/?#]+):(\d+)(?:\/|$)/);
+            if (hostPortMatch) {
+                extractedHost = hostPortMatch[1].replace(/^\[|\]$/g, '');
+                extractedPort = hostPortMatch[2];
+            }
+        }
+        lines.push(`DB_HOST=${extractedHost || '127.0.0.1'}`);
+        if (extractedPort) {
+            lines.push(`DB_PORT=${extractedPort}`);
+        }
+        if (credentials.database) {
+            lines.push(`DB_NAME=${encodeEnvValue(credentials.database)}`);
+        }
+        lines.push(`DB_URL=${encodeEnvValue(credentials.connectionString)}`);
+    }
+    return lines.join('\n') + '\n';
+}
+/**
+ * Parse a .env credential file back into UserCredentials.
+ */
+function parseCredentialFile(content, containerName, engine) {
+    const vars = {};
+    for (const line of content.split('\n')) {
+        const trimmed = line.trim();
+        if (!trimmed || trimmed.startsWith('#'))
+            continue;
+        const eqIdx = trimmed.indexOf('=');
+        if (eqIdx === -1)
+            continue;
+        const key = trimmed.slice(0, eqIdx).trim();
+        const rawValue = trimmed.slice(eqIdx + 1).trim();
+        vars[key] = decodeEnvValue(rawValue);
+    }
+    // API key credentials: password is intentionally empty (auth uses API key, not password)
+    if (vars.API_KEY) {
+        if (!vars.API_KEY_NAME || !vars.API_URL) {
+            throw new Error(`Corrupt credential file for container "${containerName}": missing API_KEY_NAME or API_URL`);
+        }
+        return {
+            username: vars.API_KEY_NAME,
+            password: '', // API-based auth does not use a password
+            connectionString: vars.API_URL,
+            engine,
+            container: containerName,
+            apiKey: vars.API_KEY,
+        };
+    }
+    // Empty string DB_PASSWORD is intentionally allowed (some DBs permit passwordless connections)
+    if (!vars.DB_USER || vars.DB_PASSWORD === undefined || !vars.DB_URL) {
+        throw new Error(`Corrupt credential file for container "${containerName}": missing DB_USER, DB_PASSWORD, or DB_URL`);
+    }
+    return {
+        username: vars.DB_USER,
+        password: vars.DB_PASSWORD,
+        connectionString: vars.DB_URL,
+        engine,
+        container: containerName,
+        database: vars.DB_NAME,
+    };
+}
+/**
+ * Save credentials to disk as a .env file.
+ * Creates the credentials/ directory if it doesn't exist.
+ * @returns The path to the saved credential file.
+ */
+export async function saveCredentials(containerName, engine, credentials) {
+    const credDir = getCredentialsDir(containerName, engine);
+    if (!existsSync(credDir)) {
+        await mkdir(credDir, { recursive: true, mode: 0o700 });
+    }
+    const filePath = getCredentialFilePath(containerName, engine, credentials.username);
+    await writeFile(filePath, formatCredentials(credentials), {
+        encoding: 'utf-8',
+        mode: 0o600,
+    });
+    // POSIX file permissions are no-ops on Windows
+    if (process.platform !== 'win32') {
+        await chmod(credDir, 0o700);
+        await chmod(filePath, 0o600);
+    }
+    return filePath;
+}
+/**
+ * Load credentials for a specific username from disk.
+ * Returns null if the credential file doesn't exist.
+ */
+export async function loadCredentials(containerName, engine, username) {
+    const filePath = getCredentialFilePath(containerName, engine, username);
+    try {
+        const content = await readFile(filePath, 'utf-8');
+        return parseCredentialFile(content, containerName, engine);
+    }
+    catch (error) {
+        if (error.code === 'ENOENT') {
+            return null;
+        }
+        throw error;
+    }
+}
+/**
+ * List all saved credential usernames for a container.
+ * Returns an empty array if no credentials directory exists.
+ */
+export async function listCredentials(containerName, engine) {
+    const credDir = getCredentialsDir(containerName, engine);
+    if (!existsSync(credDir)) {
+        return [];
+    }
+    const files = await readdir(credDir);
+    return files
+        .filter((f) => f.startsWith('.env.'))
+        .map((f) => f.slice(5)) // Remove '.env.' prefix
+        .sort();
+}
+/**
+ * Check if credentials exist for a specific username.
+ */
+export function credentialsExist(containerName, engine, username) {
+    return existsSync(getCredentialFilePath(containerName, engine, username));
+}
+/**
+ * Get the default username for a given engine.
+ * API key engines use 'search_key' or 'api_key', all others use 'spindb'.
+ */
+export function getDefaultUsername(engine) {
+    switch (engine) {
+        case Engine.Meilisearch:
+            return 'search_key';
+        case Engine.Qdrant:
+            return 'api_key';
+        case Engine.Weaviate:
+            return 'api_key';
+        default:
+            return 'spindb';
+    }
+}
+//# sourceMappingURL=credential-manager.js.map

package/dist/core/credential-manager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"credential-manager.js","sourceRoot":"","sources":["../../core/credential-manager.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,IAAI,CAAA;AAC/B,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,aAAa,CAAA;AACxE,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAC3B,OAAO,EAAE,KAAK,EAAE,MAAM,iBAAiB,CAAA;AACvC,OAAO,EAAE,MAAM,EAAwB,MAAM,UAAU,CAAA;AACvD,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAA;AAEjD;;GAEG;AACH,SAAS,iBAAiB,CAAC,aAAqB,EAAE,MAAc;IAC9D,MAAM,aAAa,GAAG,KAAK,CAAC,gBAAgB,CAAC,aAAa,EAAE,EAAE,MAAM,EAAE,CAAC,CAAA;IACvE,OAAO,IAAI,CAAC,aAAa,EAAE,aAAa,CAAC,CAAA;AAC3C,CAAC;AAED;;;GAGG;AACH,SAAS,qBAAqB,CAC5B,aAAqB,EACrB,MAAc,EACd,QAAgB;IAEhB,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CACb,0CAA0C,QAAQ,4CAA4C,CAC/F,CAAA;IACH,CAAC;IACD,OAAO,IAAI,CAAC,iBAAiB,CAAC,aAAa,EAAE,MAAM,CAAC,EAAE,QAAQ,QAAQ,EAAE,CAAC,CAAA;AAC3E,CAAC;AAED;;GAEG;AACH,SAAS,cAAc,CAAC,KAAa;IACnC,IAAI,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5B,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAA;IAC9B,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,SAAS,cAAc,CAAC,GAAW;IACjC,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC7C,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAW,CAAA;QAClC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,GAAG,CAAA;QACZ,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,SAAS,iBAAiB,CAAC,WAA4B;IACrD,MAAM,KAAK,GAAa,EAAE,CAAA;IAE1B,IAAI,WAAW,CAAC,MAAM,EAAE,CAAC;QACvB,KAAK,CAAC,IAAI,CAAC,gBAAgB,cAAc,CAAC,WAAW,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAA;QAClE,KAAK,CAAC,IAAI,CAAC,WAAW,cAAc,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;QAC3D,KAAK,CAAC,IAAI,CAAC,WAAW,cAAc,CAAC,WAAW,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAA;IACvE,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,IAAI,CAAC,WAAW,cAAc,CAAC,WAAW,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAA;QAC7D,KAAK,CAAC,IAAI,CAAC,eAAe,cAAc,CAAC,WAAW,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAA;QACjE,oDAAoD;QACpD,2EAA2E;QAC3E,IAAI,aAAiC,CAAA;QACrC,IAAI,aAAiC,CAAA;QACrC,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,gBAAgB,CAAC,CAAA;YACjD,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;gBACjB,aAAa,GAAG,GAAG,CAAC,QAAQ,CAAA;YAC9B,CAAC;YACD,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC;gBACb,aAAa,GAAG,GAAG,CAAC,IAAI,CAAA;YAC1B,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,+EAA+E;YAC/E,MAAM,aAAa,GAAG,WAAW,CAAC,gBAAgB,CAAC,KAAK,CACtD,sCAAsC,CACvC,CAAA;YACD,IAAI,aAAa,EAAE,CAAC;gBAClB,aAAa,GAAG,aAAa,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAA;gBACxD,aAAa,GAAG,aAAa,CAAC,CAAC,CAAC,CAAA;YAClC,CAAC;QACH,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,WAAW,aAAa,IAAI,WAAW,EAAE,CAAC,CAAA;QACrD,IAAI,aAAa,EAAE,CAAC;YAClB,KAAK,CAAC,IAAI,CAAC,WAAW,aAAa,EAAE,CAAC,CAAA;QACxC,CAAC;QACD,IAAI,WAAW,CAAC,QAAQ,EAAE,CAAC;YACzB,KAAK,CAAC,IAAI,CAAC,WAAW,cAAc,CAAC,WAAW,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAA;QAC/D,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,UAAU,cAAc,CAAC,WAAW,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAA;IACtE,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAA;AAChC,CAAC;AAED;;GAEG;AACH,SAAS,mBAAmB,CAC1B,OAAe,EACf,aAAqB,EACrB,MAAc;IAEd,MAAM,IAAI,GAA2B,EAAE,CAAA;IACvC,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACvC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAA;QAC3B,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAQ;QACjD,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;QAClC,IAAI,KAAK,KAAK,CAAC,CAAC;YAAE,SAAQ;QAC1B,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,IAAI,EAAE,CAAA;QAC1C,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;QAChD,IAAI,CAAC,GAAG,CAAC,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAA;IACtC,CAAC;IAED,yFAAyF;IACzF,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QACjB,IAAI,CAAC,IAAI,CAAC,YAAY,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YACxC,MAAM,IAAI,KAAK,CACb,0CAA0C,aAAa,oCAAoC,CAC5F,CAAA;QACH,CAAC;QACD,OAAO;YACL,QAAQ,EAAE,IAAI,CAAC,YAAY;YAC3B,QAAQ,EAAE,EAAE,EAAE,yCAAyC;YACvD,gBAAgB,EAAE,IAAI,CAAC,OAAO;YAC9B,MAAM;YACN,SAAS,EAAE,aAAa;YACxB,MAAM,EAAE,IAAI,CAAC,OAAO;SACrB,CAAA;IACH,CAAC;IAED,+FAA+F;IAC/F,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;QACpE,MAAM,IAAI,KAAK,CACb,0CAA0C,aAAa,4CAA4C,CACpG,CAAA;IACH,CAAC;IAED,OAAO;QACL,QAAQ,EAAE,IAAI,CAAC,OAAO;QACtB,QAAQ,EAAE,IAAI,CAAC,WAAW;QAC1B,gBAAgB,EAAE,IAAI,CAAC,MAAM;QAC7B,MAAM;QACN,SAAS,EAAE,aAAa;QACxB,QAAQ,EAAE,IAAI,CAAC,OAAO;KACvB,CAAA;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,aAAqB,EACrB,MAAc,EACd,WAA4B;IAE5B,MAAM,OAAO,GAAG,iBAAiB,CAAC,aAAa,EAAE,MAAM,CAAC,CAAA;IACxD,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QACzB,MAAM,KAAK,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;IACxD,CAAC;IAED,MAAM,QAAQ,GAAG,qBAAqB,CACpC,aAAa,EACb,MAAM,EACN,WAAW,CAAC,QAAQ,CACrB,CAAA;IACD,MAAM,SAAS,CAAC,QAAQ,EAAE,iBAAiB,CAAC,WAAW,CAAC,EAAE;QACxD,QAAQ,EAAE,OAAO;QACjB,IAAI,EAAE,KAAK;KACZ,CAAC,CAAA;IAEF,+CAA+C;IAC/C,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QACjC,MAAM,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,CAAA;QAC3B,MAAM,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAA;IAC9B,CAAC;IACD,OAAO,QAAQ,CAAA;AACjB,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,aAAqB,EACrB,MAAc,EACd,QAAgB;IAEhB,MAAM,QAAQ,GAAG,qBAAqB,CAAC,aAAa,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAA;IACvE,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAA;QACjD,OAAO,mBAAmB,CAAC,OAAO,EAAE,aAAa,EAAE,MAAM,CAAC,CAAA;IAC5D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACvD,OAAO,IAAI,CAAA;QACb,CAAC;QACD,MAAM,KAAK,CAAA;IACb,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,aAAqB,EACrB,MAAc;IAEd,MAAM,OAAO,GAAG,iBAAiB,CAAC,aAAa,EAAE,MAAM,CAAC,CAAA;IACxD,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QACzB,OAAO,EAAE,CAAA;IACX,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,CAAA;IACpC,OAAO,KAAK;SACT,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;SACpC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,wBAAwB;SAC/C,IAAI,EAAE,CAAA;AACX,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAC9B,aAAqB,EACrB,MAAc,EACd,QAAgB;IAEhB,OAAO,UAAU,CAAC,qBAAqB,CAAC,aAAa,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAA;AAC3E,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,MAAc;IAC/C,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,MAAM,CAAC,WAAW;YACrB,OAAO,YAAY,CAAA;QACrB,KAAK,MAAM,CAAC,MAAM;YAChB,OAAO,SAAS,CAAA;QAClB,KAAK,MAAM,CAAC,QAAQ;YAClB,OAAO,SAAS,CAAA;QAClB;YACE,OAAO,QAAQ,CAAA;IACnB,CAAC;AACH,CAAC"}

package/dist/core/dblab-utils.js

@@ -0,0 +1,105 @@
+import { Engine } from '../types/index.js';
+/** Pinned dblab version — single source of truth for download URL */
+export const DBLAB_VERSION = '0.34.2';
+/** Engines that support dblab (PostgreSQL, MySQL, or SQLite wire protocol) */
+export const DBLAB_ENGINES = new Set([
+    Engine.PostgreSQL,
+    Engine.MySQL,
+    Engine.MariaDB,
+    Engine.CockroachDB,
+    Engine.SQLite,
+    Engine.QuestDB,
+]);
+/**
+ * Get the platform suffix for the dblab download URL.
+ * Returns e.g. 'darwin_arm64', 'linux_amd64', 'windows_amd64'
+ */
+export function getDblabPlatformSuffix() {
+    const platform = process.platform;
+    const arch = process.arch;
+    if (platform === 'darwin' && arch === 'arm64')
+        return 'darwin_arm64';
+    if (platform === 'darwin' && arch === 'x64')
+        return 'darwin_amd64';
+    if (platform === 'linux' && arch === 'arm64')
+        return 'linux_arm64';
+    if (platform === 'linux' && arch === 'x64')
+        return 'linux_amd64';
+    if (platform === 'win32' && arch === 'x64')
+        return 'windows_amd64';
+    throw new Error(`Unsupported platform: ${platform} ${arch}`);
+}
+/**
+ * Build the CLI args array for launching dblab against a container.
+ * Uses flag-based approach to avoid MySQL tcp() URL wrapper issues.
+ */
+export function getDblabArgs(config, database) {
+    switch (config.engine) {
+        case Engine.PostgreSQL:
+            return [
+                '--host',
+                '127.0.0.1',
+                '--port',
+                String(config.port),
+                '--user',
+                'postgres',
+                '--db',
+                database,
+                '--driver',
+                'postgres',
+                '--ssl',
+                'disable',
+            ];
+        case Engine.MySQL:
+        case Engine.MariaDB:
+            return [
+                '--host',
+                '127.0.0.1',
+                '--port',
+                String(config.port),
+                '--user',
+                'root',
+                '--db',
+                database,
+                '--driver',
+                'mysql',
+            ];
+        case Engine.CockroachDB:
+            return [
+                '--host',
+                '127.0.0.1',
+                '--port',
+                String(config.port),
+                '--user',
+                'root',
+                '--db',
+                database,
+                '--driver',
+                'postgres',
+                '--ssl',
+                'disable',
+            ];
+        case Engine.QuestDB:
+            return [
+                '--host',
+                '127.0.0.1',
+                '--port',
+                String(config.port),
+                '--user',
+                'admin',
+                '--pass',
+                'quest',
+                '--db',
+                database || 'qdb',
+                '--driver',
+                'postgres',
+                '--ssl',
+                'disable',
+            ];
+        case Engine.SQLite:
+            return ['--db', config.database, '--driver', 'sqlite3'];
+        default:
+            throw new Error(`dblab is not supported for engine: ${config.engine}`);
+    }
+}
+//# sourceMappingURL=dblab-utils.js.map

package/dist/core/dblab-utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dblab-utils.js","sourceRoot":"","sources":["../../core/dblab-utils.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAwB,MAAM,UAAU,CAAA;AAEvD,qEAAqE;AACrE,MAAM,CAAC,MAAM,aAAa,GAAG,QAAQ,CAAA;AAErC,8EAA8E;AAC9E,MAAM,CAAC,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC;IACnC,MAAM,CAAC,UAAU;IACjB,MAAM,CAAC,KAAK;IACZ,MAAM,CAAC,OAAO;IACd,MAAM,CAAC,WAAW;IAClB,MAAM,CAAC,MAAM;IACb,MAAM,CAAC,OAAO;CACf,CAAC,CAAA;AAEF;;;GAGG;AACH,MAAM,UAAU,sBAAsB;IACpC,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAA;IACjC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAA;IAEzB,IAAI,QAAQ,KAAK,QAAQ,IAAI,IAAI,KAAK,OAAO;QAAE,OAAO,cAAc,CAAA;IACpE,IAAI,QAAQ,KAAK,QAAQ,IAAI,IAAI,KAAK,KAAK;QAAE,OAAO,cAAc,CAAA;IAClE,IAAI,QAAQ,KAAK,OAAO,IAAI,IAAI,KAAK,OAAO;QAAE,OAAO,aAAa,CAAA;IAClE,IAAI,QAAQ,KAAK,OAAO,IAAI,IAAI,KAAK,KAAK;QAAE,OAAO,aAAa,CAAA;IAChE,IAAI,QAAQ,KAAK,OAAO,IAAI,IAAI,KAAK,KAAK;QAAE,OAAO,eAAe,CAAA;IAElE,MAAM,IAAI,KAAK,CAAC,yBAAyB,QAAQ,IAAI,IAAI,EAAE,CAAC,CAAA;AAC9D,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,YAAY,CAC1B,MAAuB,EACvB,QAAgB;IAEhB,QAAQ,MAAM,CAAC,MAAM,EAAE,CAAC;QACtB,KAAK,MAAM,CAAC,UAAU;YACpB,OAAO;gBACL,QAAQ;gBACR,WAAW;gBACX,QAAQ;gBACR,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC;gBACnB,QAAQ;gBACR,UAAU;gBACV,MAAM;gBACN,QAAQ;gBACR,UAAU;gBACV,UAAU;gBACV,OAAO;gBACP,SAAS;aACV,CAAA;QAEH,KAAK,MAAM,CAAC,KAAK,CAAC;QAClB,KAAK,MAAM,CAAC,OAAO;YACjB,OAAO;gBACL,QAAQ;gBACR,WAAW;gBACX,QAAQ;gBACR,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC;gBACnB,QAAQ;gBACR,MAAM;gBACN,MAAM;gBACN,QAAQ;gBACR,UAAU;gBACV,OAAO;aACR,CAAA;QAEH,KAAK,MAAM,CAAC,WAAW;YACrB,OAAO;gBACL,QAAQ;gBACR,WAAW;gBACX,QAAQ;gBACR,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC;gBACnB,QAAQ;gBACR,MAAM;gBACN,MAAM;gBACN,QAAQ;gBACR,UAAU;gBACV,UAAU;gBACV,OAAO;gBACP,SAAS;aACV,CAAA;QAEH,KAAK,MAAM,CAAC,OAAO;YACjB,OAAO;gBACL,QAAQ;gBACR,WAAW;gBACX,QAAQ;gBACR,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC;gBACnB,QAAQ;gBACR,OAAO;gBACP,QAAQ;gBACR,OAAO;gBACP,MAAM;gBACN,QAAQ,IAAI,KAAK;gBACjB,UAAU;gBACV,UAAU;gBACV,OAAO;gBACP,SAAS;aACV,CAAA;QAEH,KAAK,MAAM,CAAC,MAAM;YAChB,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,QAAQ,EAAE,UAAU,EAAE,SAAS,CAAC,CAAA;QAEzD;YACE,MAAM,IAAI,KAAK,CAAC,sCAAsC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAA;IAC1E,CAAC;AACH,CAAC"}