64 lines
2.6 KiB
TypeScript
64 lines
2.6 KiB
TypeScript
import { useProductionSafetyStore } from "@/stores/productionSafetyStore";
|
|
import { assessProductionSql, productionContextForDatabase } from "@/lib/database/productionSafety";
|
|
import { ensureReadOnlyWriteAccess } from "@/lib/database/readOnlyWriteAccess";
|
|
import type { ConnectionConfig } from "@/types/database";
|
|
|
|
export interface ProductionSqlExecutionGuardOptions<T> {
|
|
connection?: ConnectionConfig;
|
|
database?: string | null;
|
|
sql: string;
|
|
source?: string;
|
|
execute: () => Promise<T>;
|
|
}
|
|
|
|
export async function executeWithProductionSqlGuard<T>(options: ProductionSqlExecutionGuardOptions<T>): Promise<T | undefined> {
|
|
if (!(await ensureReadOnlyWriteAccess({ connection: options.connection, sql: options.sql, source: options.source }))) {
|
|
return undefined;
|
|
}
|
|
const assessment = assessProductionSql(options.sql, options.connection, options.database);
|
|
if (assessment.active && assessment.isMutation) {
|
|
// Centralize production write confirmation so secondary tool surfaces cannot
|
|
// bypass the same explicit review step used by the SQL editor.
|
|
const confirmed = await useProductionSafetyStore().requestConfirmation({
|
|
sql: options.sql,
|
|
connectionName: options.connection?.name,
|
|
database: options.database ?? undefined,
|
|
productionDatabases: assessment.databases,
|
|
source: options.source,
|
|
});
|
|
if (!confirmed) return undefined;
|
|
}
|
|
return options.execute();
|
|
}
|
|
|
|
export interface ProductionContextExecutionGuardOptions<T> {
|
|
connection?: ConnectionConfig;
|
|
database?: string | null;
|
|
/** Review text shown in the production confirmation dialog (SQL or shell preview). */
|
|
reviewText: string;
|
|
source?: string;
|
|
execute: () => Promise<T>;
|
|
}
|
|
|
|
/**
|
|
* Gate non-SQL mutations (Mongo shell commands, structured editors, etc.) using
|
|
* connection/database production scope rather than SQL risk classification.
|
|
*/
|
|
export async function executeWithProductionContextGuard<T>(options: ProductionContextExecutionGuardOptions<T>): Promise<T | undefined> {
|
|
if (!(await ensureReadOnlyWriteAccess({ connection: options.connection, sql: options.reviewText, source: options.source, treatAsMutation: true }))) {
|
|
return undefined;
|
|
}
|
|
const productionContext = productionContextForDatabase(options.connection, options.database);
|
|
if (productionContext.active) {
|
|
const confirmed = await useProductionSafetyStore().requestConfirmation({
|
|
sql: options.reviewText,
|
|
connectionName: options.connection?.name,
|
|
database: options.database ?? undefined,
|
|
productionDatabases: productionContext.databases,
|
|
source: options.source,
|
|
});
|
|
if (!confirmed) return undefined;
|
|
}
|
|
return options.execute();
|
|
}
|