dsh-d1

Cloudflare D1 is serverless SQLite with no TCP socket, reachable only through its REST API. That means the connection-pooling SQL plugins in the dsh ecosystem simply cannot talk to it. dsh-d1 fills exactly that gap: it speaks the D1 HTTP interface directly and hands your dsh agent a full set of query and introspection tools.

Six tools come out of the box. d1_list enumerates configured databases and probes each with a SELECT 1. d1_query runs a single read-only statement with optional bound parameters and a row cap. d1_schema surfaces table lists and per-column details via PRAGMA table_info. d1_stats reports table counts, batched row counts, and database size. d1_health runs a connectivity check across every database and prints the active safety configuration. The one write path, d1_exec, is locked behind a readOnly flag by default; flipping it on still routes every write through dsh approval service, and headless sessions with no interactive answerer get an automatic rejection so nothing can land silently.

If your production stack runs on D1 and you want your agent to flip through data or inspect schemas, but you do not want it dropping ALTER TABLE at 2 a.m., this plugin defaults to exactly that posture: reading is yours by default, writing only exists after you explicitly say yes.