xiaoxue_admin
/
dbx
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

fix(cli): keep queries read-only by default

This commit is contained in:
t8y2 2026-06-04 02:05:29 +08:00
parent 7ba941ce79
commit 55fd81363f
1 changed files with 14 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

16
packages/cli/src/cli.ts
View File

@ -10,7 +10,6 @@ import {
getDbxDiagnostics,
isMainModule,
postBridge,
sqlSafetyFromEnv,
type Backend,
type DbxDiagnostics,
type SqlSafetyOptions,
@ -174,7 +173,7 @@ export async function runCli(argv: string[], options: RunOptions = {}): Promise<
}
const sqlArg = usesDefaultConnection ? args[1] : args[2];
const sql = flags.file ? await readFile(flags.file, "utf-8") : required(sqlArg, "SQL string or --file is required.");
const envSafety = sqlSafetyFromEnv(env);
const envSafety = sqlSafetyFromCliEnv(env);
if (flags.allowDangerous && !flags.allowWrites && !envSafety.allowWrites) {
throw new CliError("INVALID_OPTION", "--allow-dangerous-sql requires --allow-writes.");
}
@ -329,6 +328,19 @@ function parseDurationMs(value: string, option: string): number {
return amount * 60_000;
}
function parseBooleanEnv(value: string | undefined): boolean {
if (value === undefined) return false;
const normalized = value.trim().toLowerCase();
return normalized === "1" || normalized === "true";
}
function sqlSafetyFromCliEnv(env: NodeJS.ProcessEnv): Required<Pick<SqlSafetyOptions, "allowWrites" | "allowDangerous">> {
return {
allowWrites: parseBooleanEnv(env.DBX_MCP_ALLOW_WRITES),
allowDangerous: parseBooleanEnv(env.DBX_MCP_ALLOW_DANGEROUS_SQL),
};
}
function splitCsv(value: string | undefined): string[] {
return (value ?? "")
.split(",")