T

* Replaced the nested export form with a scrollable layout.
* Made the table selection checkboxes directly visible.
* Preserved the Select All and Select None buttons.
* Kept the view selection controls.
* Cleared stale table selections when switching databases.
* Added automatic database loading when the application opens.
* Preserved the existing SQL editor and administration functionality.

2026-10-16 21:51:45 +01:00

.idea

updates

2026-10-16 17:26:02 +01:00

build

Changes

2026-10-16 21:51:45 +01:00

WorkbenchReplacement

Changes

2026-10-16 21:51:45 +01:00

WorkbenchReplacement.xcodeproj

new ui

2026-10-16 21:45:53 +01:00

.gitignore

updates

2026-10-16 17:35:29 +01:00

README.md

Initial commit

2026-10-16 17:03:05 +01:00

README.md

WorkbenchReplacement — native MySQL transport milestone

Open WorkbenchReplacement.xcodeproj in Xcode and build the WorkbenchReplacement macOS scheme.

This project removes the external mysql executable requirement. The app includes a Swift MySQL wire-protocol implementation and stores passwords in macOS Keychain. It has no Homebrew dependency or separately installed MySQL client requirement.

Implemented

macOS SwiftUI Xcode application
Connection profiles and Keychain password storage
Direct TCP MySQL handshake and mysql_native_password authentication
caching_sha2_password fast authentication (when the server permits it)
Query execution, text result parsing, database listing
No external MySQL command line calls

Known limitations (important)

This is not yet a complete MySQL Workbench replacement.
Only loopback TCP (localhost, 127.0.0.1, ::1) is allowed to prevent sending credentials to remote hosts without TLS. You can use an independently established local SSH tunnel.
TLS negotiation, full caching_sha2_password authentication, Unix sockets, multi-result sets, server-side prepared statements, and full protocol error handling are not yet implemented.
EER diagrams, .mwb support, admin features, backup/restore and integrated SSH are not yet implemented.
MySQL servers requiring full caching_sha2 authentication will return an explicit unsupported error. Do not weaken server authentication to work around this.
Network read/write timeout handling and production hardening remain necessary.

This code was assembled in a Linux environment without Xcode; compile and runtime testing on macOS are required.

Authentication update (October 2026)

This build adds caching_sha2_password full authentication on trusted loopback TCP connections using the server-provided RSA public key and RSA-OAEP-SHA1, implemented with Apple's Security.framework. No Homebrew or external MySQL client is needed. The server public key is not pinned or independently verified, so this mode must not be used over untrusted networks or untrusted local proxies. Remote direct connections are refused. TLS, SSH tunnelling, key pinning, multi-result handling and full Workbench feature parity remain unimplemented.

The source was modified and packaged on Linux; it has not been compiled or integration-tested in Xcode.