Merge branch 'main' into fix/inspector-edit-grid-sync-2851

Signed-off-by: Ngô Quốc Đạt <datlechin@gmail.com>

Author: datlechin

CHANGELOG.md

@@ -13,12 +13,16 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - A line on the welcome window naming the version TablePro updated from, with a link to what changed.
 - What's New window, from Help > What's New.
 - Update install mode and check frequency in the anonymous usage heartbeat.
+- SQL Server alias, table and CLR types in the sidebar's **Types** section, each with a rebuilt `CREATE TYPE` statement.
 - OceanBase MySQL-mode connection type on the MySQL driver. (#1748)
 - On the Server mode for a SQLite Remote Database File, editing a database on an SSH server in place with statements run on the server. (#2831)
 - **System Databases and Schemas** for the sidebar tree, in View Options and Settings > General. (#2832)
 - Favorites and Recent sections, sorting, drag and drop into groups, inline rename and tag search tokens in the welcome window.
 - **File > New Group…**, **File > Rename** and **View > Sort Connections By** for the welcome window.
 - Favorites, Recent, nested groups, sorting and tag search tokens in the iOS connection list.
+- **File > Import > Import from AWS…** for RDS instances and Aurora clusters, imported as connections. (#2852)
+- Per-table row filter, with an optional separate target filter, and row limit in data Compare & Sync. (#2537)
+- Row grid for data Compare & Sync with every column shown and each differing value marked. (#2537)
 
 ### Changed
 
@@ -33,11 +37,32 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - Welcome window list moved with the arrow keys instead of `Ctrl+J`, `Ctrl+K`, `Ctrl+H` and `Ctrl+L`.
 - Connection switcher lists Favorites, Recent and groups at every depth.
 - Connection rows without colored dots, on the Mac and on iOS.
+- SQL Server sessions open with the ANSI SET profile the server requires, matching every other client.
+- Compared columns in data Compare & Sync chosen per table, and saved with each table's key, filter and row limit. (#2537)
 
 ### Fixed
 
 - Row inspector edits missing from the grid cell and gone from the inspector on reselect. (#2851)
+- Empty Procedures and Functions lists on every SQL Server connection.
+- SQL Server rows that could not be saved on a table with a filtered index or an index on a computed column.
+- SQL Server CLR and extended procedures and functions missing from the Procedures and Functions lists.
+- SQL Server routines labelled encrypted when the account simply cannot read their source.
+- SQL Server version detection on a patched server, which left `CREATE OR ALTER` unused since 2016.
 - SQL editor jumping back while scrolling sideways near the start of a long line. (#2841)
+- Data sync scripts missing every UPDATE and DELETE. (#2537)
+- Data sync statements written to the source schema instead of the target.
+- Numeric-looking text such as `007` written unquoted by data sync, and key matches that hit extra rows.
+- Data sync pairing arbitrary rows on a key that is not unique.
+- Data sync inserts failing on SQL Server identity and PostgreSQL `GENERATED ALWAYS` columns.
+- Text columns compared as timestamps, and keys that differ only in case never synced.
+- Data sync scripts including tables never compared, or rows that changed after comparing.
+- Apply unavailable for a second sync in the same Compare & Sync window.
+- Choosing a source, target, mode or option during Apply cancelling the running sync.
+- Apply offered for a target switched to Read-Only after it was picked.
+- Compare & Sync reporting nothing written after a sync had written to the target.
+- Rolled-back data sync on MyISAM tables reported as leaving the target unchanged.
+- Cancelling a repeated data comparison clearing the previous results.
+- Table whose data comparison failed stuck included with no way to exclude it.
 - SSH settings dropped from a Mac connection after it synced from the iPhone app, turning off its tunnel or remote database file.
 - Remote database file path and access mode dropped when a connection was exported, shared as a link, or imported.
 - Remote database file connection hanging for minutes when its SSH connection dropped silently, with Cancel doing nothing.
@@ -94,12 +119,16 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - Fit to Window on an ER diagram fitting empty space left behind by a dragged table.
 - Query plan mode, selected step, zoom and scroll lost on a mode or editor tab switch, or zoom carried over to another plan.
 - Zoom Out on a diagram at 5% jumping to 1%.
+- An AWS profile backed by IAM Identity Center, or an assume-role chain rooted on one, failing to authenticate.
+- AWS SSO sign-in leaving the `aws` CLI unable to refresh its own token.
+- AWS SSO, STS and RDS unreachable in the China, GovCloud and secret partitions.
 
 ### Security
 
 - SQLite denies the `fts3_tokenizer` function, which could crash the app from a crafted query on any connection.
 - The AI assistant refuses statements that read or write files or run server-side code (ATTACH, LOAD, VACUUM INTO), matching the MCP server. (#2831)
 - Remote `VACUUM INTO` snapshot created world-readable beside a database with stricter permissions.
+- AWS SSO access token cached world-readable in `~/.aws/sso/cache`.
 
 ## [0.74.0] - 2026-09-13
 

Packages/TableProCore/Sources/TableProMSSQLCore/MSSQLServerBanner.swift

@@ -0,0 +1,36 @@
+import Foundation
+
+/// Reads the two things TablePro needs out of `@@VERSION`.
+///
+/// `@@VERSION` is a multi-line banner: a first line naming the product and its build, then the
+/// build date, the copyright and the host OS, each on its own tab-indented line. Only the first
+/// line carries the `major.minor.build.revision` the feature gates read, and only the first line is
+/// worth showing a user.
+///
+/// Truncating the banner to a fixed prefix does not work, and shipped as a silent regression: 50
+/// characters of a patched SQL Server 2022 is
+/// `Microsoft SQL Server 2022 (RTM-CU26-GDR) (KB512276`, which cuts the build off mid-KB-number and
+/// leaves no `major.minor.build` to match. The major version then read as unknown on every patched
+/// server, so `CREATE OR ALTER` was never used even on servers that have had it since 2016. The
+/// cumulative-update suffix grows with every patch, so the prefix that fitted when it was written
+/// stops fitting later.
+public enum MSSQLServerBanner {
+    /// The product line, without the build date, copyright and host OS lines under it.
+    public static func displayText(from banner: String) -> String {
+        let firstLine = banner.split(separator: "\n", maxSplits: 1, omittingEmptySubsequences: false)[0]
+        return firstLine.trimmingCharacters(in: .whitespaces)
+    }
+
+    /// Matches against the whole banner rather than the first line alone, so a future layout that
+    /// moves the build number cannot silently return nil the way the fixed prefix did.
+    public static func majorVersion(from banner: String?) -> Int? {
+        guard let banner else { return nil }
+        guard let regex = try? NSRegularExpression(pattern: #"(\d+)\.\d+\.\d+"#),
+              let match = regex.firstMatch(in: banner, range: NSRange(banner.startIndex..., in: banner)),
+              let range = Range(match.range(at: 1), in: banner)
+        else {
+            return nil
+        }
+        return Int(banner[range])
+    }
+}

Packages/TableProCore/Sources/TableProMSSQLCore/MSSQLSessionOptions.swift

@@ -0,0 +1,64 @@
+import Foundation
+
+/// The session state a SQL Server connection has to be put into before anything else runs.
+///
+/// FreeTDS db-lib inherits Sybase's 1990s defaults and hands back a session with every one of
+/// these off. Measured on SQL Server 2022 by reading `SESSIONPROPERTY` for all seven straight
+/// after `dbopen`: `0 0 0 0 0 0 0`. Every other client reaches the server with the six ON options
+/// already on, because ODBC, OLE DB, JDBC and .NET all set them in the login packet, and
+/// `sqlcmd -I` does the same; db-lib is the outlier.
+///
+/// Six on and `NUMERIC_ROUNDABORT` off is the SET profile SQL Server requires for an indexed view,
+/// an index on a computed column, a filtered index, an XML data type method and a spatial index
+/// operation. Miss any one and the server answers `Msg 1934`, naming the options rather than the
+/// real problem. Two of them reached users. The stored procedure and function lists were empty on
+/// every connection, because the catalog query aggregates a parameter list through `FOR XML PATH`
+/// and `.value()`. And no INSERT, UPDATE or DELETE could touch a table carrying a filtered index or
+/// an index on a computed column, so such a row edit could never be saved. Both were measured
+/// failing and then succeeding on one connection, either side of this establishment.
+///
+/// `NUMERIC_ROUNDABORT` already arrives off, so setting it changes nothing on a default server. It
+/// is set anyway because a database or a login can carry it on, and a session that inherits it
+/// fails those same writes while all six ON options read correctly. Measured: with the six on and
+/// `NUMERIC_ROUNDABORT` on, the INSERT fails with `Msg 1934` naming `NUMERIC_ROUNDABORT` alone.
+///
+/// `ANSI_NULLS` and `CONCAT_NULL_YIELDS_NULL` also decide how the user's own SQL reads: `col = NULL`
+/// stops matching, and concatenating a NULL yields NULL. That is the standard behaviour, the
+/// behaviour every other client gets, and the behaviour Microsoft documents these options as always
+/// having in a future version. A session that keeps db-lib's defaults is the surprising one.
+///
+/// Statements are sent one at a time rather than as a batch, so a server that refuses one still
+/// receives the rest.
+public enum MSSQLSessionOptions {
+    /// Required on. `ARITHABORT` is implied by `ANSI_WARNINGS` at database compatibility level 90
+    /// and above, which is every server TDS 7.4 can reach, so it is belt and braces rather than
+    /// load-bearing; it is set because Microsoft documents it as part of the required profile.
+    public static let optionsRequiredOn = [
+        "ANSI_NULLS",
+        "ANSI_PADDING",
+        "ANSI_WARNINGS",
+        "ARITHABORT",
+        "CONCAT_NULL_YIELDS_NULL",
+        "QUOTED_IDENTIFIER"
+    ]
+
+    /// Required off. The one member of the profile that is not an "ON".
+    public static let optionsRequiredOff = ["NUMERIC_ROUNDABORT"]
+
+    /// Every option in the profile, paired with the value the server requires.
+    public static var requiredValues: [(name: String, isOn: Bool)] {
+        optionsRequiredOn.map { ($0, true) } + optionsRequiredOff.map { ($0, false) }
+    }
+
+    /// `TEXTSIZE` defaults to 4096 bytes on db-lib, which truncates a large text or image column
+    /// mid-value and reads as corrupted data rather than as a limit.
+    public static let maxTextSize = "SET TEXTSIZE \(Int32.max)"
+
+    public static let ansiDefaults = requiredValues
+        .map { "SET \($0.name) \($0.isOn ? "ON" : "OFF")" }
+        .joined(separator: " ")
+
+    /// Run in this order: the profile first, because a server that drops the connection while
+    /// applying `TEXTSIZE` should not leave the session in db-lib's defaults.
+    public static let establishment = [ansiDefaults, maxTextSize]
+}

Packages/TableProCore/Tests/TableProMSSQLCoreTests/MSSQLSessionOptionsTests.swift

@@ -0,0 +1,101 @@
+import Foundation
+import Testing
+
+@testable import TableProMSSQLCore
+
+@Suite("MSSQL Session Options")
+struct MSSQLSessionOptionsTests {
+    /// Dropping any one leaves the server refusing every XML data type method and every write to a
+    /// table with a filtered or computed-column index, which is what emptied the procedure and
+    /// function lists.
+    @Test("Every option SQL Server requires on is turned on")
+    func requiredOnOptionsAreSet() {
+        let sql = MSSQLSessionOptions.ansiDefaults
+        for option in [
+            "ANSI_NULLS", "ANSI_PADDING", "ANSI_WARNINGS",
+            "ARITHABORT", "CONCAT_NULL_YIELDS_NULL", "QUOTED_IDENTIFIER"
+        ] {
+            #expect(sql.contains("SET \(option) ON"))
+        }
+        #expect(MSSQLSessionOptions.optionsRequiredOn.count == 6)
+    }
+
+    /// Measured on SQL Server 2022: with all six on and this one also on, the write still fails
+    /// with Msg 1934 naming NUMERIC_ROUNDABORT alone. It arrives off, so this only matters when a
+    /// database or a login carries it on, which is exactly the case nothing else would catch.
+    @Test("NUMERIC_ROUNDABORT is turned off, not on")
+    func roundabortIsTurnedOff() {
+        #expect(MSSQLSessionOptions.ansiDefaults.contains("SET NUMERIC_ROUNDABORT OFF"))
+        #expect(!MSSQLSessionOptions.ansiDefaults.contains("SET NUMERIC_ROUNDABORT ON"))
+        #expect(MSSQLSessionOptions.optionsRequiredOff == ["NUMERIC_ROUNDABORT"])
+    }
+
+    @Test("The profile is seven options and no option appears in both lists")
+    func profileIsSevenDistinctOptions() {
+        let values = MSSQLSessionOptions.requiredValues
+        #expect(values.count == 7)
+        #expect(Set(values.map(\.name)).count == 7)
+        #expect(values.filter { !$0.isOn }.map(\.name) == ["NUMERIC_ROUNDABORT"])
+    }
+
+    /// db-lib defaults TEXTSIZE to 4096 bytes, which truncates a large value mid-character and
+    /// reads as damaged data rather than as a limit.
+    @Test("Text size is raised to the protocol maximum")
+    func textSizeIsRaised() {
+        #expect(MSSQLSessionOptions.maxTextSize == "SET TEXTSIZE \(Int32.max)")
+    }
+
+    /// One statement per element, so a server that refuses one still receives the rest.
+    @Test("Establishment sends the ANSI options before the text size")
+    func establishmentOrder() {
+        #expect(MSSQLSessionOptions.establishment == [
+            MSSQLSessionOptions.ansiDefaults,
+            MSSQLSessionOptions.maxTextSize
+        ])
+    }
+}
+
+@Suite("MSSQL Server Banner")
+struct MSSQLServerBannerTests {
+    /// Measured from a live SQL Server 2022 CU26. The 50-character prefix this replaced cut the
+    /// build off mid-KB-number, so every version gate read the server as unknown.
+    static let sqlServer2022 = """
+        Microsoft SQL Server 2022 (RTM-CU26-GDR) (KB5122768) - 16.0.4275.2 (X64) \n\tAug 20 2026 00:33:45 \n\tCopyright (C) 2022 Microsoft Corporation\n\tDeveloper Edition (64-bit) on Linux (Ubuntu 22.04.5 LTS) <X64>
+        """
+
+    @Test("A patched server's major version survives the banner")
+    func patchedServerParses() {
+        #expect(MSSQLServerBanner.majorVersion(from: Self.sqlServer2022) == 16)
+    }
+
+    @Test("A fixed 50-character prefix would have lost it")
+    func fixedPrefixLosesTheBuild() {
+        #expect(MSSQLServerBanner.majorVersion(from: String(Self.sqlServer2022.prefix(50))) == nil)
+    }
+
+    @Test("Display text is the product line alone")
+    func displayTextIsOneLine() {
+        let text = MSSQLServerBanner.displayText(from: Self.sqlServer2022)
+        #expect(text == "Microsoft SQL Server 2022 (RTM-CU26-GDR) (KB5122768) - 16.0.4275.2 (X64)")
+        #expect(!text.contains("\n"))
+        #expect(!text.contains("Copyright"))
+    }
+
+    @Test("Azure SQL Database reports its version on the first line too")
+    func azureParses() {
+        let banner = "Microsoft SQL Azure (RTM) - 12.0.2000.8 \n\tOct 18 2025 12:00:00 \n\tCopyright (C) 2025 Microsoft Corporation"
+        #expect(MSSQLServerBanner.majorVersion(from: banner) == 12)
+        #expect(MSSQLServerBanner.displayText(from: banner) == "Microsoft SQL Azure (RTM) - 12.0.2000.8")
+    }
+
+    @Test("A banner with no build number reports no version rather than a wrong one")
+    func unparsableBanner() {
+        #expect(MSSQLServerBanner.majorVersion(from: "Microsoft SQL Server") == nil)
+        #expect(MSSQLServerBanner.majorVersion(from: nil) == nil)
+    }
+
+    @Test("A single-line banner is returned whole")
+    func singleLineBanner() {
+        #expect(MSSQLServerBanner.displayText(from: "Microsoft SQL Server 2019 - 15.0.1.1") == "Microsoft SQL Server 2019 - 15.0.1.1")
+    }
+}

Plugins/BeancountDriverPlugin/Info.plist

@@ -3,7 +3,7 @@
 <plist version="1.0">
 <dict>
 	<key>TableProPluginKitVersion</key>
-	<integer>30</integer>
+	<integer>31</integer>
 	<key>TableProProvidesDatabaseTypeIds</key>
 	<array>
 		<string>Beancount</string>

Plugins/BigQueryDriverPlugin/Info.plist

@@ -5,6 +5,6 @@
 	<key>TableProMinAppVersion</key>
 	<string>0.42.0</string>
 	<key>TableProPluginKitVersion</key>
-	<integer>30</integer>
+	<integer>31</integer>
 </dict>
 </plist>

Plugins/CSVExportPlugin/Info.plist

@@ -3,7 +3,7 @@
 <plist version="1.0">
 <dict>
 	<key>TableProPluginKitVersion</key>
-	<integer>30</integer>
+	<integer>31</integer>
 	<key>TableProProvidesExportFormatIds</key>
 	<array>
 		<string>csv</string>

Plugins/CSVImportPlugin/Info.plist

@@ -3,7 +3,7 @@
 <plist version="1.0">
 <dict>
 	<key>TableProPluginKitVersion</key>
-	<integer>30</integer>
+	<integer>31</integer>
 	<key>TableProProvidesImportFormatIds</key>
 	<array>
 		<string>csv</string>

Plugins/CassandraDriverPlugin/Info.plist

@@ -21,6 +21,6 @@
 	<key>NSPrincipalClass</key>
 	<string>$(PRODUCT_MODULE_NAME).CassandraPlugin</string>
 	<key>TableProPluginKitVersion</key>
-	<integer>30</integer>
+	<integer>31</integer>
 </dict>
 </plist>

Plugins/ClickHouseDriverPlugin/Info.plist

@@ -3,7 +3,7 @@
 <plist version="1.0">
 <dict>
 	<key>TableProPluginKitVersion</key>
-	<integer>30</integer>
+	<integer>31</integer>
 	<key>TableProProvidesDatabaseTypeIds</key>
 	<array>
 		<string>ClickHouse</string>