fix: harden NL2SQLTool — read-only default, query validation, parameterized queries#5311

Merged

joaomdmoura merged 15 commits into

mainfrom

fix/nl2sql-security-hardening

Apr 9, 2026

Commits on Apr 9, 2026

fix: harden NL2SQLTool — read-only by default, parameterized queries, query validation

alex-clawd
and
claude
committed
fix: address CI lint failures and remove unused import

alex-clawd
and
claude
committed
fix: expand _WRITE_COMMANDS and block multi-statement semicolon injection

alex-clawd
and
claude
committed
ci: retrigger
alex-clawd
committed
fix: use typing_extensions.Self for Python 3.10 compat
alex-clawd
committed
chore: update tool specifications

github-actions[bot]
authored and
alex-clawd
committed
docs: document NL2SQLTool read-only default and DML configuration

alex-clawd
and
claude
committed
fix: close three NL2SQLTool security gaps (writable CTEs, EXPLAIN ANALYZE, multi-stmt commit)

alex-clawd
and
claude
committed
fix: handle parenthesized EXPLAIN options syntax; remove unused _seed_db

alex-clawd
and
claude
committed
chore: update tool specifications

github-actions[bot]
authored and
alex-clawd
committed
fix: smarter CTE write detection, fix commit logic for writable CTEs
alex-clawd
committed
fix: catch write commands in CTE main query + handle whitespace in AS()
alex-clawd
committed
fix: EXPLAIN ANALYZE VERBOSE handling, string literal paren bypass, commit logic for EXPLAIN ANALYZE
alex-clawd
committed
fix: deduplicate EXPLAIN parsing, fix AS( regex in strings, block unknown CTE commands, bump langchain-core
alex-clawd
committed
fix: add return type annotation to _iter_as_paren_matches
alex-clawd
committed