/** * SQL escaping utilities to prevent SQL injection attacks */ /** * Escape a SQL identifier (table name, column name, schema name) * DuckDB uses double quotes for identifiers */ export declare function escapeIdentifier(identifier: string): string; /** * Escape a SQL string value * DuckDB uses single quotes for strings */ export declare function escapeString(value: string): string; /** * Escape a file path for use in DuckDB file functions * File paths need special handling to prevent directory traversal */ export declare function escapeFilePath(path: string): string; /** * Build a safe qualified table name (schema.table) */ export declare function buildQualifiedName(schema: string, table: string): string; /** * Validate and escape a limit value */ export declare function escapeLimit(limit: number | string): number; /** * Create a parameterized query placeholder * Note: DuckDB Node.js API may not support prepared statements yet, * so this is for future use */ export declare function createPlaceholder(index: number): string; //# sourceMappingURL=sql-escape.d.ts.map