@dbx-app/node-core 0.4.4 → 0.4.5

package/dist/database.js

@@ -4,6 +4,7 @@ import { join } from "node:path";
 import { homedir, platform } from "node:os";
 import Database from "better-sqlite3";
 import { sqlSafetyFromEnv } from "./sql-safety.js";
+import { isDirectQueryType } from "./diagnostics.js";
 const MAX_ROWS = 100;
 const IDLE_TIMEOUT_MS = 5 * 60 * 1000;
 const QUERY_TIMEOUT_MS = 30_000;
@@ -194,19 +195,6 @@ function portBytes(port) {
 function isMysqlType(dbType) {
     return dbType === "mysql" || dbType === "doris" || dbType === "starrocks";
 }
-function isDirectType(dbType) {
-    switch (dbType) {
-        case "postgres":
-        case "redshift":
-        case "mysql":
-        case "doris":
-        case "starrocks":
-        case "sqlite":
-            return true;
-        default:
-            return false;
-    }
-}
 function bridgeAppDataDir() {
     const home = homedir();
     switch (platform()) {
@@ -366,7 +354,7 @@ export async function executeQuery(config, sql, options) {
         }
         throw new Error("Use MongoDB shell-style commands, for example: db.projects.find({}).limit(100), db.projects.countDocuments({}), db.projects.insertOne({...}), db.projects.updateOne({...}, {$set: {...}}), or db.projects.deleteOne({...})");
     }
-    if (isDirectType(config.db_type)) {
+    if (isDirectQueryType(config.db_type)) {
         return query(config, sql, undefined, options);
     }
     const result = await withTimeout(bridgeDataRequest("/data/execute-query", {
@@ -389,7 +377,7 @@ export async function listTables(config, schema) {
         const result = await query(config, `SELECT name, type FROM sqlite_master WHERE type IN ('table', 'view') AND name NOT LIKE 'sqlite_%' ORDER BY name`);
         return result.rows.map((r) => ({ name: String(r.name || ""), type: String(r.type || "table") }));
     }
-    if (!isDirectType(config.db_type)) {
+    if (!isDirectQueryType(config.db_type)) {
         const tables = await bridgeDataRequest("/data/list-tables", {
             connection_name: config.name,
             database: config.database || "",
@@ -422,7 +410,7 @@ export async function describeTable(config, table, schema) {
             comment: null,
         }));
     }
-    if (!isDirectType(config.db_type)) {
+    if (!isDirectQueryType(config.db_type)) {
         const columns = await bridgeDataRequest("/data/describe-table", {
             connection_name: config.name,
             database: config.database || "",

package/dist/diagnostics.d.ts

@@ -1,4 +1,6 @@
 export declare const DIRECT_QUERY_TYPES: readonly ["postgres", "redshift", "mysql", "doris", "starrocks", "sqlite", "gaussdb", "opengauss"];
+export type DirectQueryType = (typeof DIRECT_QUERY_TYPES)[number];
+export declare function isDirectQueryType(dbType: string): dbType is DirectQueryType;
 export declare const BRIDGE_REQUIRED_TYPES: readonly ["redis", "mongodb", "duckdb", "clickhouse", "sqlserver", "oracle", "elasticsearch", "dameng", "kingbase", "highgo", "vastbase", "goldendb", "yashandb", "databricks", "saphana", "teradata", "vertica", "firebird", "exasol", "oceanbase-oracle", "gbase", "tdengine", "h2", "snowflake", "trino", "hive", "db2", "informix", "neo4j", "cassandra", "bigquery", "kylin", "sundb", "xugu", "jdbc", "access"];
 export interface DbxDiagnostics {
     appDataDir: string;

package/dist/diagnostics.js

@@ -2,6 +2,10 @@ import { access, readFile } from "node:fs/promises";
 import { bridgePortFilePath, dbPath, appDataDir } from "./paths.js";
 import { inspectConnectionStore } from "./connections.js";
 export const DIRECT_QUERY_TYPES = ["postgres", "redshift", "mysql", "doris", "starrocks", "sqlite", "gaussdb", "opengauss"];
+const DIRECT_QUERY_TYPE_SET = new Set(DIRECT_QUERY_TYPES);
+export function isDirectQueryType(dbType) {
+    return DIRECT_QUERY_TYPE_SET.has(dbType);
+}
 export const BRIDGE_REQUIRED_TYPES = [
     "redis",
     "mongodb",

package/dist/entrypoint.d.ts

@@ -0,0 +1 @@
+export declare function isMainModule(moduleUrl: string, argvPath: string | undefined): boolean;

package/dist/entrypoint.js

@@ -0,0 +1,20 @@
+import { realpathSync } from "node:fs";
+import { normalize, resolve } from "node:path";
+import { fileURLToPath } from "node:url";
+export function isMainModule(moduleUrl, argvPath) {
+    if (!argvPath)
+        return false;
+    return normalizeEntryPath(fileURLToPath(moduleUrl)) === normalizeEntryPath(argvPath);
+}
+function normalizeEntryPath(path) {
+    const normalized = normalize(realpathIfPossible(resolve(path)));
+    return process.platform === "win32" ? normalized.toLowerCase() : normalized;
+}
+function realpathIfPossible(path) {
+    try {
+        return realpathSync.native(path);
+    }
+    catch {
+        return path;
+    }
+}

package/dist/index.d.ts

@@ -3,6 +3,7 @@ export * from "./bridge.js";
 export * from "./connections.js";
 export * from "./database.js";
 export * from "./diagnostics.js";
+export * from "./entrypoint.js";
 export * from "./format.js";
 export * from "./paths.js";
 export * from "./schema-context.js";

package/dist/index.js

@@ -3,6 +3,7 @@ export * from "./bridge.js";
 export * from "./connections.js";
 export * from "./database.js";
 export * from "./diagnostics.js";
+export * from "./entrypoint.js";
 export * from "./format.js";
 export * from "./paths.js";
 export * from "./schema-context.js";

package/dist/sql-safety.d.ts

@@ -1,6 +1,7 @@
 export interface SqlSafetyOptions {
     allowWrites?: boolean;
     allowDangerous?: boolean;
+    allowMultipleStatements?: boolean;
 }
 export interface SqlSafetyDecision {
     allowed: boolean;
@@ -8,3 +9,4 @@ export interface SqlSafetyDecision {
 }
 export declare function evaluateSqlSafety(sql: string, options?: SqlSafetyOptions): SqlSafetyDecision;
 export declare function sqlSafetyFromEnv(env?: NodeJS.ProcessEnv): SqlSafetyOptions;
+export declare function splitSqlStatements(sql: string): string[];

package/dist/sql-safety.js

@@ -4,9 +4,24 @@ export function evaluateSqlSafety(sql, options = {}) {
     const statements = splitSqlStatements(sql);
     if (statements.length === 0)
         return { allowed: false, reason: "SQL is empty." };
-    if (statements.length > 1)
-        return { allowed: false, reason: "Only one SQL statement is allowed per MCP query." };
-    const normalized = stripSqlCommentsAndStrings(statements[0]).trim();
+    if (statements.length > 1 && !options.allowMultipleStatements) {
+        return { allowed: false, reason: "Only one SQL statement is allowed per query." };
+    }
+    for (let i = 0; i < statements.length; i++) {
+        const decision = evaluateSingleSqlStatementSafety(statements[i], options);
+        if (!decision.allowed && statements.length > 1) {
+            return {
+                allowed: false,
+                reason: `Statement ${i + 1}: ${decision.reason ?? "SQL blocked."}`,
+            };
+        }
+        if (!decision.allowed)
+            return decision;
+    }
+    return { allowed: true };
+}
+function evaluateSingleSqlStatementSafety(sql, options = {}) {
+    const normalized = stripSqlCommentsAndStrings(sql).trim();
     const firstKeyword = normalized.match(/^[a-zA-Z_]+/)?.[0]?.toLowerCase();
     if (!firstKeyword)
         return { allowed: false, reason: "SQL statement is not recognized." };
@@ -37,7 +52,7 @@ export function sqlSafetyFromEnv(env = process.env) {
         allowDangerous: env.DBX_MCP_ALLOW_DANGEROUS_SQL === "1" || env.DBX_MCP_ALLOW_DANGEROUS_SQL === "true",
     };
 }
-function splitSqlStatements(sql) {
+export function splitSqlStatements(sql) {
     const statements = [];
     let current = "";
     let quote = null;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dbx-app/node-core",
-  "version": "0.4.4",
+  "version": "0.4.5",
   "description": "Shared Node.js database and DBX connection utilities for DBX CLI and MCP server",
   "type": "module",
   "engines": {
@@ -16,6 +16,7 @@
     "./connections": "./dist/connections.js",
     "./database": "./dist/database.js",
     "./diagnostics": "./dist/diagnostics.js",
+    "./entrypoint": "./dist/entrypoint.js",
     "./format": "./dist/format.js",
     "./paths": "./dist/paths.js",
     "./schema-context": "./dist/schema-context.js",