Filament Dbview Laravel Package

What's new in v1.4.0

Security

• Enforce connection allowlist; reject qualified table names and SELECT row-locks
• Harden Browser read-only path and side-effect function denylist
• Optional export_gate and audit.log_sql for safer exports and logs

Query Runner

• Structure header action uses the table from your SQL (no full-table dropdown)
• Saved queries / history lists scroll in a fixed-height pane

Docs & CI

• Authorization, auditing, discovery, and analyzer limits documented
• Tests run on every push via GitHub Actions

Upgrade: publish config if you want export_gate / audit.log_sql. Defaults stay allow-by-default and compatible with v1.3.x.

Added

• EXPLAIN / EXPLAIN ANALYZE in the Query Runner. Two toolbar buttons take the typed SELECT, validate it through the same read-only guards, and only then prepend a driver-aware EXPLAIN / EXPLAIN ANALYZE prefix — so the analysed statement is always a single read-only SELECT (never EXPLAIN ANALYZE DELETE).
• Show structure — an Adminer-style structure view. Each table in the Runner sidebar has a structure icon that lists the table's columns, indexes and foreign keys, gated by the new features.structure flag.
• Cross-links between the Database Browser and Query Runner. The Runner's table sidebar shows a Browse link on model-backed tables that opens them in the Database Browser. The Browser gains Query and Structure header actions that open the Query Runner with the current table prefilled (SELECT * FROM , on the table's connection) or on its structure view.
• ?table= / ?structure= URL parameters on the Query Runner drive the prefill, so the links are bookmarkable. Prefilled SQL still passes every read-only guard when run, and the structure parameter stays scope-checked.

Fixed

• The Query Runner table list is now scoped to the connection's own database instead of every schema the connection user can access (Laravel 12 changed getTables() to span all schemas).
• Schema introspection now resolves the physical table name with the connection prefix cleared, so tables on mixed-prefix databases (some tables prefixed, some not) are described correctly.