Validate ClickHouse 26.9 for native read-only agent execution

Open
#2,210 0 comments 0 reactions 1 assignee View on GitHub

Maintainers usually reply within 1 day

@saronic-tantona is already working on this.

Since Nov 2, 2026.

  • #2213 by @saronic-tantona — open

Assessment

This issue has not been assessed yet.

Description

ai clickhouse

Request

Validate ClickHouse 26.9 for native read-only agent execution and add it to CLICKHOUSE_CHECKED_RELEASES.

LibreDB 1.2.0 currently admits only ClickHouse 26.7. A SELECT-only account on 26.9.23.15 is refused with PROFILE_UNSUPPORTED_TARGET before the remaining permission and server checks run.

Evidence

I ran tests/live/clickhouse-agent-boundary.ts against a disposable clickhouse/clickhouse-server:26.9.23.15 instance after locally adding 26.9 to the checked releases. The suite passed, including reads, write refusal, inherited grants, external sources, executable functions, and query budgets.

Proposed change

Recheck the engine and privilege inventories, document the tested server version, and add regression coverage for 26.9 admission. Keep the existing permission, object, read-only, and unchecked-version refusals.

Dominant language
TypeScript
Stars
810
Forks
158
Avg merge
9h 45m
Merged PRs (30d)
521

Getting set up

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

More from libredb/libredb-studio

All issues in libredb/libredb-studio

Similar issues

More TypeScript issues

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.