@dezhouzhang/archery-query-mcp 0.1.0

package/dist/cli.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=cli.d.ts.map

package/dist/cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":""}

package/dist/cli.js

@@ -0,0 +1,38 @@
+#!/usr/bin/env node
+import { Command } from "commander";
+import { HttpArcheryClient, StubArcheryClient } from "./archeryClient.js";
+import { loadConfig } from "./config.js";
+import { runHttpServer } from "./httpServer.js";
+import { runStdioServer } from "./mcpServer.js";
+import { createServiceContext } from "./services.js";
+const program = new Command()
+    .name("archery-query-mcp")
+    .description("MCP server for querying Archery safely via stdio or HTTP")
+    .option("--transport <transport>", "stdio or http", "stdio")
+    .option("--port <port>", "HTTP port", "8080")
+    .option("--archery-auth-mode <mode>", "simulated-login or personal-session", "simulated-login")
+    .option("--archery-client-mode <mode>", "http-query or stub", "http-query")
+    .option("--query-path <path>", "Archery query endpoint path", "/query/")
+    .option("--user <subject>", "Authenticated MCP user subject");
+program.parse(process.argv);
+const config = loadConfig(process.env, program.opts());
+const archeryClient = config.clientMode === "stub" ? new StubArcheryClient() : new HttpArcheryClient(config);
+const context = createServiceContext({
+    userSubject: config.userSubject,
+    policy: config.policy,
+    archeryClient,
+});
+// no-excuse-ok: catch
+try {
+    if (config.transport === "stdio") {
+        await runStdioServer(context);
+    }
+    else {
+        runHttpServer(context, config.port);
+    }
+}
+catch (error) {
+    console.error(error);
+    process.exit(1);
+}
+//# sourceMappingURL=cli.js.map

package/dist/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AACnC,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAA;AACzE,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAA;AAC/C,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAA;AAC/C,OAAO,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAA;AAEpD,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE;KAC1B,IAAI,CAAC,mBAAmB,CAAC;KACzB,WAAW,CAAC,0DAA0D,CAAC;KACvE,MAAM,CAAC,yBAAyB,EAAE,eAAe,EAAE,OAAO,CAAC;KAC3D,MAAM,CAAC,eAAe,EAAE,WAAW,EAAE,MAAM,CAAC;KAC5C,MAAM,CAAC,4BAA4B,EAAE,qCAAqC,EAAE,iBAAiB,CAAC;KAC9F,MAAM,CAAC,8BAA8B,EAAE,oBAAoB,EAAE,YAAY,CAAC;KAC1E,MAAM,CAAC,qBAAqB,EAAE,6BAA6B,EAAE,SAAS,CAAC;KACvE,MAAM,CAAC,kBAAkB,EAAE,gCAAgC,CAAC,CAAA;AAE/D,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;AAE3B,MAAM,MAAM,GAAG,UAAU,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAA;AACtD,MAAM,aAAa,GACjB,MAAM,CAAC,UAAU,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,iBAAiB,EAAE,CAAC,CAAC,CAAC,IAAI,iBAAiB,CAAC,MAAM,CAAC,CAAA;AACxF,MAAM,OAAO,GAAG,oBAAoB,CAAC;IACnC,WAAW,EAAE,MAAM,CAAC,WAAW;IAC/B,MAAM,EAAE,MAAM,CAAC,MAAM;IACrB,aAAa;CACd,CAAC,CAAA;AAEF,sBAAsB;AACtB,IAAI,CAAC;IACH,IAAI,MAAM,CAAC,SAAS,KAAK,OAAO,EAAE,CAAC;QACjC,MAAM,cAAc,CAAC,OAAO,CAAC,CAAA;IAC/B,CAAC;SAAM,CAAC;QACN,aAAa,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,CAAA;IACrC,CAAC;AACH,CAAC;AAAC,OAAO,KAAK,EAAE,CAAC;IACf,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;IACpB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;AACjB,CAAC"}

package/dist/clouds.d.ts

@@ -0,0 +1,9 @@
+import type { CloudName } from "./types.js";
+export declare const CLOUD_BASE_URLS: {
+    readonly hangzhou: "https://archery-hangzhou.ihr360.com/";
+    readonly beijing: "https://archery-beijing.ihr360.com/";
+    readonly huawei: "http://archery-hw.irenshi.net/";
+};
+export declare function parseCloudName(value: string): CloudName | null;
+export declare function supportedCloudNames(): string;
+//# sourceMappingURL=clouds.d.ts.map

package/dist/clouds.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"clouds.d.ts","sourceRoot":"","sources":["../src/clouds.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAA;AAE3C,eAAO,MAAM,eAAe;;;;CAIkB,CAAA;AAc9C,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,CAE9D;AAED,wBAAgB,mBAAmB,IAAI,MAAM,CAE5C"}

package/dist/clouds.js

@@ -0,0 +1,23 @@
+export const CLOUD_BASE_URLS = {
+    hangzhou: "https://archery-hangzhou.ihr360.com/",
+    beijing: "https://archery-beijing.ihr360.com/",
+    huawei: "http://archery-hw.irenshi.net/",
+};
+const CLOUD_ALIASES = new Map([
+    ["hangzhou", "hangzhou"],
+    ["hz", "hangzhou"],
+    ["杭州云", "hangzhou"],
+    ["beijing", "beijing"],
+    ["bj", "beijing"],
+    ["北京云", "beijing"],
+    ["huawei", "huawei"],
+    ["hw", "huawei"],
+    ["华为云", "huawei"],
+]);
+export function parseCloudName(value) {
+    return CLOUD_ALIASES.get(value.trim().toLowerCase()) ?? null;
+}
+export function supportedCloudNames() {
+    return "hangzhou, beijing, huawei";
+}
+//# sourceMappingURL=clouds.js.map

package/dist/clouds.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"clouds.js","sourceRoot":"","sources":["../src/clouds.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,QAAQ,EAAE,sCAAsC;IAChD,OAAO,EAAE,qCAAqC;IAC9C,MAAM,EAAE,gCAAgC;CACI,CAAA;AAE9C,MAAM,aAAa,GAAG,IAAI,GAAG,CAAoB;IAC/C,CAAC,UAAU,EAAE,UAAU,CAAC;IACxB,CAAC,IAAI,EAAE,UAAU,CAAC;IAClB,CAAC,KAAK,EAAE,UAAU,CAAC;IACnB,CAAC,SAAS,EAAE,SAAS,CAAC;IACtB,CAAC,IAAI,EAAE,SAAS,CAAC;IACjB,CAAC,KAAK,EAAE,SAAS,CAAC;IAClB,CAAC,QAAQ,EAAE,QAAQ,CAAC;IACpB,CAAC,IAAI,EAAE,QAAQ,CAAC;IAChB,CAAC,KAAK,EAAE,QAAQ,CAAC;CAClB,CAAC,CAAA;AAEF,MAAM,UAAU,cAAc,CAAC,KAAa;IAC1C,OAAO,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,IAAI,IAAI,CAAA;AAC9D,CAAC;AAED,MAAM,UAAU,mBAAmB;IACjC,OAAO,2BAA2B,CAAA;AACpC,CAAC"}

package/dist/config.d.ts

@@ -0,0 +1,30 @@
+import { z } from "zod";
+import type { PolicyConfig } from "./types.js";
+declare const AuthModeSchema: z.ZodUnion<readonly [z.ZodLiteral<"personal-session">, z.ZodLiteral<"simulated-login">]>;
+declare const ClientModeSchema: z.ZodUnion<readonly [z.ZodLiteral<"http-query">, z.ZodLiteral<"stub">]>;
+declare const TransportSchema: z.ZodUnion<readonly [z.ZodLiteral<"stdio">, z.ZodLiteral<"http">]>;
+export type AuthMode = z.infer<typeof AuthModeSchema>;
+export type ClientMode = z.infer<typeof ClientModeSchema>;
+export type TransportMode = z.infer<typeof TransportSchema>;
+export type RuntimeConfig = {
+    readonly transport: TransportMode;
+    readonly port: number;
+    readonly authMode: AuthMode;
+    readonly clientMode: ClientMode;
+    readonly queryPath: string;
+    readonly username: string | null;
+    readonly password: string | null;
+    readonly userSubject: string;
+    readonly policy: PolicyConfig;
+};
+export type CliOptions = {
+    readonly transport?: string;
+    readonly port?: string | number;
+    readonly archeryAuthMode?: string;
+    readonly archeryClientMode?: string;
+    readonly queryPath?: string;
+    readonly user?: string;
+};
+export declare function loadConfig(env: NodeJS.ProcessEnv, options: CliOptions): RuntimeConfig;
+export {};
+//# sourceMappingURL=config.d.ts.map

package/dist/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AACvB,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAA;AAE9C,QAAA,MAAM,cAAc,0FAAyE,CAAA;AAC7F,QAAA,MAAM,gBAAgB,yEAAwD,CAAA;AAC9E,QAAA,MAAM,eAAe,oEAAmD,CAAA;AAiBxE,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAA;AACrD,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAA;AACzD,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAA;AAE3D,MAAM,MAAM,aAAa,GAAG;IAC1B,QAAQ,CAAC,SAAS,EAAE,aAAa,CAAA;IACjC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAA;IAC3B,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAA;IAC/B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;IAChC,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;IAChC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAA;CAC9B,CAAA;AAmBD,MAAM,MAAM,UAAU,GAAG;IACvB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,CAAA;IAC/B,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAA;IACjC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAA;IACnC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CACvB,CAAA;AAED,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC,UAAU,EAAE,OAAO,EAAE,UAAU,GAAG,aAAa,CAiCrF"}

package/dist/config.js

@@ -0,0 +1,75 @@
+import { z } from "zod";
+const AuthModeSchema = z.union([z.literal("personal-session"), z.literal("simulated-login")]);
+const ClientModeSchema = z.union([z.literal("http-query"), z.literal("stub")]);
+const TransportSchema = z.union([z.literal("stdio"), z.literal("http")]);
+const EnvBooleanSchema = z
+    .preprocess((value) => {
+    if (typeof value !== "string") {
+        return value;
+    }
+    const normalized = value.trim().toLowerCase();
+    if (["true", "1", "yes", "y", "on"].includes(normalized)) {
+        return true;
+    }
+    if (["false", "0", "no", "n", "off"].includes(normalized)) {
+        return false;
+    }
+    return value;
+}, z.boolean())
+    .default(true);
+const CsvSchema = z
+    .string()
+    .optional()
+    .transform((value) => new Set(splitCsv(value)));
+const EnvSchema = z.object({
+    MCP_ARCHERY_LOGIN_USERNAME: z.string().optional(),
+    MCP_ARCHERY_LOGIN_PASSWORD: z.string().optional(),
+    MCP_AUTHENTICATED_USER: z.string().optional(),
+    ARCHERY_QUERY_DEFAULT_LIMIT: z.coerce.number().int().min(1).default(100),
+    ARCHERY_QUERY_MAX_LIMIT: z.coerce.number().int().min(1).default(500),
+    ARCHERY_QUERY_REQUIRE_CONFIRMATION: EnvBooleanSchema,
+    ARCHERY_QUERY_ALLOWED_INSTANCES: CsvSchema,
+    ARCHERY_QUERY_ALLOWED_DATABASES: CsvSchema,
+    ARCHERY_QUERY_BLOCKED_TABLES: CsvSchema,
+});
+export function loadConfig(env, options) {
+    const parsedEnv = EnvSchema.parse(env);
+    const transport = TransportSchema.parse(options.transport ?? "stdio");
+    const authMode = AuthModeSchema.parse(options.archeryAuthMode ?? "simulated-login");
+    const clientMode = ClientModeSchema.parse(options.archeryClientMode ?? "http-query");
+    const port = z.coerce
+        .number()
+        .int()
+        .min(1)
+        .max(65535)
+        .parse(options.port ?? 8080);
+    const maxLimit = Math.max(parsedEnv.ARCHERY_QUERY_MAX_LIMIT, parsedEnv.ARCHERY_QUERY_DEFAULT_LIMIT);
+    return {
+        transport,
+        port,
+        authMode,
+        clientMode,
+        queryPath: options.queryPath ?? "/query/",
+        username: parsedEnv.MCP_ARCHERY_LOGIN_USERNAME ?? null,
+        password: parsedEnv.MCP_ARCHERY_LOGIN_PASSWORD ?? null,
+        userSubject: options.user ?? parsedEnv.MCP_AUTHENTICATED_USER ?? "local-user",
+        policy: {
+            defaultLimit: parsedEnv.ARCHERY_QUERY_DEFAULT_LIMIT,
+            maxLimit,
+            requireConfirmation: parsedEnv.ARCHERY_QUERY_REQUIRE_CONFIRMATION,
+            allowedInstances: parsedEnv.ARCHERY_QUERY_ALLOWED_INSTANCES,
+            allowedDatabases: parsedEnv.ARCHERY_QUERY_ALLOWED_DATABASES,
+            blockedTables: parsedEnv.ARCHERY_QUERY_BLOCKED_TABLES,
+        },
+    };
+}
+function splitCsv(value) {
+    if (value === undefined || value.trim() === "") {
+        return [];
+    }
+    return value
+        .split(",")
+        .map((item) => item.trim())
+        .filter((item) => item.length > 0);
+}
+//# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAGvB,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAA;AAC7F,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;AAC9E,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;AACxE,MAAM,gBAAgB,GAAG,CAAC;KACvB,UAAU,CAAC,CAAC,KAAK,EAAE,EAAE;IACpB,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,KAAK,CAAA;IACd,CAAC;IACD,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;IAC7C,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;QACzD,OAAO,IAAI,CAAA;IACb,CAAC;IACD,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;QAC1D,OAAO,KAAK,CAAA;IACd,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;KACd,OAAO,CAAC,IAAI,CAAC,CAAA;AAkBhB,MAAM,SAAS,GAAG,CAAC;KAChB,MAAM,EAAE;KACR,QAAQ,EAAE;KACV,SAAS,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;AAEjD,MAAM,SAAS,GAAG,CAAC,CAAC,MAAM,CAAC;IACzB,0BAA0B,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjD,0BAA0B,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjD,sBAAsB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7C,2BAA2B,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC;IACxE,uBAAuB,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC;IACpE,kCAAkC,EAAE,gBAAgB;IACpD,+BAA+B,EAAE,SAAS;IAC1C,+BAA+B,EAAE,SAAS;IAC1C,4BAA4B,EAAE,SAAS;CACxC,CAAC,CAAA;AAWF,MAAM,UAAU,UAAU,CAAC,GAAsB,EAAE,OAAmB;IACpE,MAAM,SAAS,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IACtC,MAAM,SAAS,GAAG,eAAe,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,CAAA;IACrE,MAAM,QAAQ,GAAG,cAAc,CAAC,KAAK,CAAC,OAAO,CAAC,eAAe,IAAI,iBAAiB,CAAC,CAAA;IACnF,MAAM,UAAU,GAAG,gBAAgB,CAAC,KAAK,CAAC,OAAO,CAAC,iBAAiB,IAAI,YAAY,CAAC,CAAA;IACpF,MAAM,IAAI,GAAG,CAAC,CAAC,MAAM;SAClB,MAAM,EAAE;SACR,GAAG,EAAE;SACL,GAAG,CAAC,CAAC,CAAC;SACN,GAAG,CAAC,KAAK,CAAC;SACV,KAAK,CAAC,OAAO,CAAC,IAAI,IAAI,IAAI,CAAC,CAAA;IAC9B,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CACvB,SAAS,CAAC,uBAAuB,EACjC,SAAS,CAAC,2BAA2B,CACtC,CAAA;IACD,OAAO;QACL,SAAS;QACT,IAAI;QACJ,QAAQ;QACR,UAAU;QACV,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,SAAS;QACzC,QAAQ,EAAE,SAAS,CAAC,0BAA0B,IAAI,IAAI;QACtD,QAAQ,EAAE,SAAS,CAAC,0BAA0B,IAAI,IAAI;QACtD,WAAW,EAAE,OAAO,CAAC,IAAI,IAAI,SAAS,CAAC,sBAAsB,IAAI,YAAY;QAC7E,MAAM,EAAE;YACN,YAAY,EAAE,SAAS,CAAC,2BAA2B;YACnD,QAAQ;YACR,mBAAmB,EAAE,SAAS,CAAC,kCAAkC;YACjE,gBAAgB,EAAE,SAAS,CAAC,+BAA+B;YAC3D,gBAAgB,EAAE,SAAS,CAAC,+BAA+B;YAC3D,aAAa,EAAE,SAAS,CAAC,4BAA4B;SACtD;KACF,CAAA;AACH,CAAC;AAED,SAAS,QAAQ,CAAC,KAAyB;IACzC,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QAC/C,OAAO,EAAE,CAAA;IACX,CAAC;IACD,OAAO,KAAK;SACT,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;SAC1B,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;AACtC,CAAC"}

package/dist/httpServer.d.ts

@@ -0,0 +1,9 @@
+import { Hono } from "hono";
+import type { ServiceContext } from "./services.js";
+import type { JsonObject } from "./types.js";
+type JsonRpcId = string | number | null;
+export declare function createHttpApp(context: ServiceContext): Hono;
+export declare function runHttpServer(context: ServiceContext, port: number): void;
+export declare function handleJsonRpc(context: ServiceContext, id: JsonRpcId, method: string, params: unknown): Promise<JsonObject>;
+export {};
+//# sourceMappingURL=httpServer.d.ts.map

package/dist/httpServer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"httpServer.d.ts","sourceRoot":"","sources":["../src/httpServer.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAE3B,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAA;AAEnD,OAAO,KAAK,EAAE,UAAU,EAAa,MAAM,YAAY,CAAA;AASvD,KAAK,SAAS,GAAG,MAAM,GAAG,MAAM,GAAG,IAAI,CAAA;AAEvC,wBAAgB,aAAa,CAAC,OAAO,EAAE,cAAc,GAAG,IAAI,CAwB3D;AAED,wBAAgB,aAAa,CAAC,OAAO,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAEzE;AAED,wBAAsB,aAAa,CACjC,OAAO,EAAE,cAAc,EACvB,EAAE,EAAE,SAAS,EACb,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,OAAO,GACd,OAAO,CAAC,UAAU,CAAC,CAkBrB"}

package/dist/httpServer.js

@@ -0,0 +1,87 @@
+import { serve } from "@hono/node-server";
+import { Hono } from "hono";
+import { z } from "zod";
+import { callTool, toolDefinitions, UnknownToolError } from "./tools.js";
+const JsonRpcRequestSchema = z.object({
+    jsonrpc: z.string().optional(),
+    id: z.union([z.string(), z.number(), z.null()]).optional().default(null),
+    method: z.string(),
+    params: z.unknown().optional(),
+});
+export function createHttpApp(context) {
+    const app = new Hono();
+    app.post("/mcp", async (c) => {
+        let body;
+        try {
+            body = await c.req.json();
+        }
+        catch (errorValue) {
+            if (errorValue instanceof SyntaxError) {
+                return jsonResponse(error(null, -32700, "Parse error"));
+            }
+            throw errorValue;
+        }
+        const request = JsonRpcRequestSchema.safeParse(body);
+        if (!request.success) {
+            return jsonResponse(error(null, -32600, "Invalid Request"));
+        }
+        if (request.data.method.startsWith("notifications/")) {
+            return new Response(null, { status: 204 });
+        }
+        return jsonResponse(await handleJsonRpc(context, request.data.id, request.data.method, request.data.params));
+    });
+    return app;
+}
+export function runHttpServer(context, port) {
+    serve({ fetch: createHttpApp(context).fetch, port });
+}
+export async function handleJsonRpc(context, id, method, params) {
+    if (method === "initialize") {
+        return result(id, {
+            protocolVersion: "2025-03-26",
+            capabilities: { tools: {} },
+            serverInfo: { name: "archery-query-mcp", version: "0.1.0" },
+        });
+    }
+    if (method === "tools/list") {
+        return result(id, { tools: toolDefinitions() });
+    }
+    if (method === "tools/call") {
+        return callToolRpc(context, id, params);
+    }
+    if (method.startsWith("notifications/")) {
+        return result(id, {});
+    }
+    return error(id, -32601, `Unknown MCP method: ${method}`);
+}
+async function callToolRpc(context, id, params) {
+    try {
+        const parsed = z
+            .object({ name: z.string(), arguments: z.unknown().optional().default({}) })
+            .parse(params);
+        const payload = await callTool(context, parsed.name, parsed.arguments);
+        return result(id, { content: [{ type: "text", text: JSON.stringify(payload) }] });
+    }
+    catch (errorValue) {
+        if (errorValue instanceof UnknownToolError) {
+            return error(id, -32602, errorValue.message);
+        }
+        if (errorValue instanceof z.ZodError) {
+            return error(id, -32602, "Invalid tool arguments");
+        }
+        throw errorValue;
+    }
+}
+function result(id, payload) {
+    return { jsonrpc: "2.0", id, result: payload };
+}
+function error(id, code, message) {
+    return { jsonrpc: "2.0", id, error: { code, message } };
+}
+function jsonResponse(payload) {
+    return new Response(JSON.stringify(payload), {
+        status: 200,
+        headers: { "Content-Type": "application/json" },
+    });
+}
+//# sourceMappingURL=httpServer.js.map

package/dist/httpServer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"httpServer.js","sourceRoot":"","sources":["../src/httpServer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAA;AACzC,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAC3B,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAEvB,OAAO,EAAE,QAAQ,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAA;AAGxE,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IACpC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IACxE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CAC/B,CAAC,CAAA;AAIF,MAAM,UAAU,aAAa,CAAC,OAAuB;IACnD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAA;IACtB,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC3B,IAAI,IAAa,CAAA;QACjB,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAA;QAC3B,CAAC;QAAC,OAAO,UAAU,EAAE,CAAC;YACpB,IAAI,UAAU,YAAY,WAAW,EAAE,CAAC;gBACtC,OAAO,YAAY,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC,CAAA;YACzD,CAAC;YACD,MAAM,UAAU,CAAA;QAClB,CAAC;QACD,MAAM,OAAO,GAAG,oBAAoB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAA;QACpD,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;YACrB,OAAO,YAAY,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE,iBAAiB,CAAC,CAAC,CAAA;QAC7D,CAAC;QACD,IAAI,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,gBAAgB,CAAC,EAAE,CAAC;YACrD,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAA;QAC5C,CAAC;QACD,OAAO,YAAY,CACjB,MAAM,aAAa,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CACxF,CAAA;IACH,CAAC,CAAC,CAAA;IACF,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,OAAuB,EAAE,IAAY;IACjE,KAAK,CAAC,EAAE,KAAK,EAAE,aAAa,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;AACtD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,OAAuB,EACvB,EAAa,EACb,MAAc,EACd,MAAe;IAEf,IAAI,MAAM,KAAK,YAAY,EAAE,CAAC;QAC5B,OAAO,MAAM,CAAC,EAAE,EAAE;YAChB,eAAe,EAAE,YAAY;YAC7B,YAAY,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;YAC3B,UAAU,EAAE,EAAE,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,OAAO,EAAE;SAC5D,CAAC,CAAA;IACJ,CAAC;IACD,IAAI,MAAM,KAAK,YAAY,EAAE,CAAC;QAC5B,OAAO,MAAM,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,eAAe,EAAE,EAAE,CAAC,CAAA;IACjD,CAAC;IACD,IAAI,MAAM,KAAK,YAAY,EAAE,CAAC;QAC5B,OAAO,WAAW,CAAC,OAAO,EAAE,EAAE,EAAE,MAAM,CAAC,CAAA;IACzC,CAAC;IACD,IAAI,MAAM,CAAC,UAAU,CAAC,gBAAgB,CAAC,EAAE,CAAC;QACxC,OAAO,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAA;IACvB,CAAC;IACD,OAAO,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,EAAE,uBAAuB,MAAM,EAAE,CAAC,CAAA;AAC3D,CAAC;AAED,KAAK,UAAU,WAAW,CACxB,OAAuB,EACvB,EAAa,EACb,MAAe;IAEf,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,CAAC;aACb,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC;aAC3E,KAAK,CAAC,MAAM,CAAC,CAAA;QAChB,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,SAAS,CAAC,CAAA;QACtE,OAAO,MAAM,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC,CAAA;IACnF,CAAC;IAAC,OAAO,UAAU,EAAE,CAAC;QACpB,IAAI,UAAU,YAAY,gBAAgB,EAAE,CAAC;YAC3C,OAAO,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,EAAE,UAAU,CAAC,OAAO,CAAC,CAAA;QAC9C,CAAC;QACD,IAAI,UAAU,YAAY,CAAC,CAAC,QAAQ,EAAE,CAAC;YACrC,OAAO,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,EAAE,wBAAwB,CAAC,CAAA;QACpD,CAAC;QACD,MAAM,UAAU,CAAA;IAClB,CAAC;AACH,CAAC;AAED,SAAS,MAAM,CAAC,EAAa,EAAE,OAAkB;IAC/C,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,CAAA;AAChD,CAAC;AAED,SAAS,KAAK,CAAC,EAAa,EAAE,IAAY,EAAE,OAAe;IACzD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,CAAA;AACzD,CAAC;AAED,SAAS,YAAY,CAAC,OAAmB;IACvC,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE;QAC3C,MAAM,EAAE,GAAG;QACX,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;KAChD,CAAC,CAAA;AACJ,CAAC"}

package/dist/mcpServer.d.ts

@@ -0,0 +1,5 @@
+import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import type { ServiceContext } from "./services.js";
+export declare function createMcpServer(context: ServiceContext): McpServer;
+export declare function runStdioServer(context: ServiceContext): Promise<void>;
+//# sourceMappingURL=mcpServer.d.ts.map

package/dist/mcpServer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcpServer.d.ts","sourceRoot":"","sources":["../src/mcpServer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAA;AAGnE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAA;AASnD,wBAAgB,eAAe,CAAC,OAAO,EAAE,cAAc,GAAG,SAAS,CA+BlE;AAED,wBAAsB,cAAc,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAG3E"}

package/dist/mcpServer.js

@@ -0,0 +1,22 @@
+import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
+import { callTool, DescribeTableShape, ExecuteQueryShape, PrepareQueryShape, QueryHistoryShape, } from "./tools.js";
+export function createMcpServer(context) {
+    const server = new McpServer({ name: "archery-query-mcp", version: "0.1.0" });
+    registerJsonTool(server, context, "archery_prepare_query", "Validate and prepare a read-only SQL query for Archery execution", PrepareQueryShape);
+    registerJsonTool(server, context, "archery_execute_query", "Execute a prepared query through Archery", ExecuteQueryShape);
+    registerJsonTool(server, context, "archery_describe_table", "Read table metadata through Archery", DescribeTableShape);
+    registerJsonTool(server, context, "archery_query_history", "Search prior query history summaries", QueryHistoryShape);
+    return server;
+}
+export async function runStdioServer(context) {
+    const server = createMcpServer(context);
+    await server.connect(new StdioServerTransport());
+}
+function registerJsonTool(server, context, name, description, inputSchema) {
+    server.registerTool(name, { description, inputSchema }, async (args) => {
+        const payload = await callTool(context, name, args);
+        return { content: [{ type: "text", text: JSON.stringify(payload) }] };
+    });
+}
+//# sourceMappingURL=mcpServer.js.map

package/dist/mcpServer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcpServer.js","sourceRoot":"","sources":["../src/mcpServer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAA;AACnE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAA;AAGhF,OAAO,EACL,QAAQ,EACR,kBAAkB,EAClB,iBAAiB,EACjB,iBAAiB,EACjB,iBAAiB,GAClB,MAAM,YAAY,CAAA;AAEnB,MAAM,UAAU,eAAe,CAAC,OAAuB;IACrD,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC,EAAE,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAA;IAC7E,gBAAgB,CACd,MAAM,EACN,OAAO,EACP,uBAAuB,EACvB,kEAAkE,EAClE,iBAAiB,CAClB,CAAA;IACD,gBAAgB,CACd,MAAM,EACN,OAAO,EACP,uBAAuB,EACvB,0CAA0C,EAC1C,iBAAiB,CAClB,CAAA;IACD,gBAAgB,CACd,MAAM,EACN,OAAO,EACP,wBAAwB,EACxB,qCAAqC,EACrC,kBAAkB,CACnB,CAAA;IACD,gBAAgB,CACd,MAAM,EACN,OAAO,EACP,uBAAuB,EACvB,sCAAsC,EACtC,iBAAiB,CAClB,CAAA;IACD,OAAO,MAAM,CAAA;AACf,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,OAAuB;IAC1D,MAAM,MAAM,GAAG,eAAe,CAAC,OAAO,CAAC,CAAA;IACvC,MAAM,MAAM,CAAC,OAAO,CAAC,IAAI,oBAAoB,EAAE,CAAC,CAAA;AAClD,CAAC;AAED,SAAS,gBAAgB,CACvB,MAAiB,EACjB,OAAuB,EACvB,IAAY,EACZ,WAAmB,EACnB,WAA0B;IAE1B,MAAM,CAAC,YAAY,CAAC,IAAI,EAAE,EAAE,WAAW,EAAE,WAAW,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;QACrE,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,CAAA;QACnD,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,CAAA;IAChF,CAAC,CAAC,CAAA;AACJ,CAAC"}

package/dist/policy.d.ts

@@ -0,0 +1,4 @@
+import type { PolicyConfig, PolicyDecision } from "./types.js";
+export declare function validateSql(config: PolicyConfig, instanceName: string, dbName: string, sql: string, requestedLimit: number): PolicyDecision;
+export declare function sqlHash(sql: string): string;
+//# sourceMappingURL=policy.d.ts.map

package/dist/policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.d.ts","sourceRoot":"","sources":["../src/policy.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,YAAY,EAAE,cAAc,EAAiB,MAAM,YAAY,CAAA;AAU7E,wBAAgB,WAAW,CACzB,MAAM,EAAE,YAAY,EACpB,YAAY,EAAE,MAAM,EACpB,MAAM,EAAE,MAAM,EACd,GAAG,EAAE,MAAM,EACX,cAAc,EAAE,MAAM,GACrB,cAAc,CAoDhB;AAED,wBAAgB,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAE3C"}

package/dist/policy.js

@@ -0,0 +1,91 @@
+import { createHash } from "node:crypto";
+const WRITE_OR_DDL = /\b(insert|update|delete|merge|replace|create|alter|drop|truncate|grant|revoke)\b/i;
+const SESSION_OR_EXPORT = /\b(set|reset|use|into\s+outfile|into\s+dumpfile|load_file|xp_cmdshell)\b/i;
+const LIMIT_PATTERN = /\blimit\s+(\d+)\b/i;
+const CONSERVATIVE_SELECT = /^select\s+[a-z0-9_.,\s`]+\s+from\s+[a-z0-9_`]+(?:\s+where\s+[a-z0-9_`]+\s*=\s*(?:\?|[-]?[0-9]+|'[^']*'))?(?:\s+limit\s+\d+)?$/i;
+export function validateSql(config, instanceName, dbName, sql, requestedLimit) {
+    const findings = [];
+    let normalizedSql = normalizeSql(sql);
+    const lower = normalizedSql.toLowerCase();
+    if (normalizedSql.length === 0) {
+        findings.push({ code: "EMPTY_SQL", message: "SQL must not be empty" });
+    }
+    if (containsMultipleStatements(normalizedSql)) {
+        findings.push({ code: "MULTI_STATEMENT", message: "Multiple SQL statements are not allowed" });
+    }
+    if (!lower.startsWith("select") && !lower.startsWith("show") && !lower.startsWith("explain")) {
+        findings.push({ code: "NON_READ", message: "Only read-oriented SQL is allowed" });
+    }
+    if (WRITE_OR_DDL.test(normalizedSql)) {
+        findings.push({ code: "WRITE_OR_DDL", message: "Write and DDL statements are blocked" });
+    }
+    if (SESSION_OR_EXPORT.test(normalizedSql)) {
+        findings.push({
+            code: "SESSION_OR_EXPORT",
+            message: "Session changes and file export operations are blocked",
+        });
+    }
+    if (config.allowedInstances.size > 0 && !config.allowedInstances.has(instanceName)) {
+        findings.push({
+            code: "INSTANCE_NOT_ALLOWED",
+            message: "Instance is outside the configured allowlist",
+        });
+    }
+    if (config.allowedDatabases.size > 0 && !config.allowedDatabases.has(dbName)) {
+        findings.push({
+            code: "DATABASE_NOT_ALLOWED",
+            message: "Database is outside the configured allowlist",
+        });
+    }
+    for (const blockedTable of config.blockedTables) {
+        if (blockedTable.trim().length > 0 && lower.includes(blockedTable.toLowerCase())) {
+            findings.push({ code: "BLOCKED_TABLE", message: "SQL references a blocked table" });
+        }
+    }
+    const effectiveLimit = requestedLimit <= 0 ? config.defaultLimit : Math.min(requestedLimit, config.maxLimit);
+    if (!LIMIT_PATTERN.test(normalizedSql) && lower.startsWith("select")) {
+        normalizedSql = `${normalizedSql} LIMIT ${effectiveLimit}`;
+    }
+    const allowed = findings.length === 0;
+    return {
+        allowed,
+        normalizedSql,
+        effectiveLimit,
+        riskLevel: allowed ? riskLevel(normalizedSql) : "blocked",
+        findings,
+    };
+}
+export function sqlHash(sql) {
+    return `sha256:${createHash("sha256").update(sql, "utf8").digest("hex")}`;
+}
+function normalizeSql(sql) {
+    return sql.trim().replace(/\s+/g, " ").replace(/;+$/g, "");
+}
+function containsMultipleStatements(sql) {
+    return sql.trim().replace(/;+$/g, "").includes(";");
+}
+function riskLevel(normalizedSql) {
+    const lower = normalizedSql.toLowerCase();
+    if (lower.startsWith("show") || lower.startsWith("explain")) {
+        return "low";
+    }
+    if (!lower.startsWith("select")) {
+        return "medium";
+    }
+    if (containsBroaderReadPattern(lower)) {
+        return "medium";
+    }
+    return CONSERVATIVE_SELECT.test(normalizedSql) ? "low" : "medium";
+}
+function containsBroaderReadPattern(lower) {
+    return (lower.includes(" join ") ||
+        lower.includes(" union ") ||
+        lower.includes(" group by ") ||
+        lower.includes(" order by ") ||
+        lower.includes(" having ") ||
+        lower.includes(" distinct ") ||
+        lower.includes("(") ||
+        lower.includes(")") ||
+        !lower.includes(" where "));
+}
+//# sourceMappingURL=policy.js.map

package/dist/policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.js","sourceRoot":"","sources":["../src/policy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAGxC,MAAM,YAAY,GAChB,mFAAmF,CAAA;AACrF,MAAM,iBAAiB,GACrB,2EAA2E,CAAA;AAC7E,MAAM,aAAa,GAAG,oBAAoB,CAAA;AAC1C,MAAM,mBAAmB,GACvB,gIAAgI,CAAA;AAElI,MAAM,UAAU,WAAW,CACzB,MAAoB,EACpB,YAAoB,EACpB,MAAc,EACd,GAAW,EACX,cAAsB;IAEtB,MAAM,QAAQ,GAAoB,EAAE,CAAA;IACpC,IAAI,aAAa,GAAG,YAAY,CAAC,GAAG,CAAC,CAAA;IACrC,MAAM,KAAK,GAAG,aAAa,CAAC,WAAW,EAAE,CAAA;IACzC,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/B,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,uBAAuB,EAAE,CAAC,CAAA;IACxE,CAAC;IACD,IAAI,0BAA0B,CAAC,aAAa,CAAC,EAAE,CAAC;QAC9C,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,yCAAyC,EAAE,CAAC,CAAA;IAChG,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC7F,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,mCAAmC,EAAE,CAAC,CAAA;IACnF,CAAC;IACD,IAAI,YAAY,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC;QACrC,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,sCAAsC,EAAE,CAAC,CAAA;IAC1F,CAAC;IACD,IAAI,iBAAiB,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC;QAC1C,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,mBAAmB;YACzB,OAAO,EAAE,wDAAwD;SAClE,CAAC,CAAA;IACJ,CAAC;IACD,IAAI,MAAM,CAAC,gBAAgB,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;QACnF,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,sBAAsB;YAC5B,OAAO,EAAE,8CAA8C;SACxD,CAAC,CAAA;IACJ,CAAC;IACD,IAAI,MAAM,CAAC,gBAAgB,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;QAC7E,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,sBAAsB;YAC5B,OAAO,EAAE,8CAA8C;SACxD,CAAC,CAAA;IACJ,CAAC;IACD,KAAK,MAAM,YAAY,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;QAChD,IAAI,YAAY,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;YACjF,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,gCAAgC,EAAE,CAAC,CAAA;QACrF,CAAC;IACH,CAAC;IACD,MAAM,cAAc,GAClB,cAAc,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,cAAc,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAA;IACvF,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QACrE,aAAa,GAAG,GAAG,aAAa,UAAU,cAAc,EAAE,CAAA;IAC5D,CAAC;IACD,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAA;IACrC,OAAO;QACL,OAAO;QACP,aAAa;QACb,cAAc;QACd,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,SAAS;QACzD,QAAQ;KACT,CAAA;AACH,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,GAAW;IACjC,OAAO,UAAU,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAA;AAC3E,CAAC;AAED,SAAS,YAAY,CAAC,GAAW;IAC/B,OAAO,GAAG,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;AAC5D,CAAC;AAED,SAAS,0BAA0B,CAAC,GAAW;IAC7C,OAAO,GAAG,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAA;AACrD,CAAC;AAED,SAAS,SAAS,CAAC,aAAqB;IACtC,MAAM,KAAK,GAAG,aAAa,CAAC,WAAW,EAAE,CAAA;IACzC,IAAI,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC5D,OAAO,KAAK,CAAA;IACd,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAChC,OAAO,QAAQ,CAAA;IACjB,CAAC;IACD,IAAI,0BAA0B,CAAC,KAAK,CAAC,EAAE,CAAC;QACtC,OAAO,QAAQ,CAAA;IACjB,CAAC;IACD,OAAO,mBAAmB,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAA;AACnE,CAAC;AAED,SAAS,0BAA0B,CAAC,KAAa;IAC/C,OAAO,CACL,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC;QACxB,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC;QACzB,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC;QAC5B,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC;QAC5B,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC;QAC1B,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC;QAC5B,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC;QACnB,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC;QACnB,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,CAC3B,CAAA;AACH,CAAC"}

package/dist/responses.d.ts

@@ -0,0 +1,31 @@
+import type { HistoryMatch, JsonObject, PolicyFinding, TableColumn } from "./types.js";
+export type PrepareQueryResponse = {
+    readonly prepareId: string | null;
+    readonly normalizedSql: string;
+    readonly riskLevel: string;
+    readonly requiresConfirmation: boolean;
+    readonly policyFindings: readonly PolicyFinding[];
+    readonly confirmationSummary: string;
+};
+export type ExecuteQueryResponse = {
+    readonly executionId: string;
+    readonly status: string;
+    readonly columns: readonly string[];
+    readonly rows: readonly JsonObject[];
+    readonly rowCount: number;
+    readonly durationMs: number;
+    readonly masked: boolean;
+    readonly archeryMessage: string;
+    readonly archeryQueryLogId: string | null;
+};
+export type DescribeTableResponse = {
+    readonly columns: readonly TableColumn[];
+    readonly source: string;
+};
+export type QueryHistoryResponse = {
+    readonly matches: readonly HistoryMatch[];
+    readonly total: number;
+    readonly truncated: boolean;
+    readonly status: string;
+};
+//# sourceMappingURL=responses.d.ts.map

package/dist/responses.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"responses.d.ts","sourceRoot":"","sources":["../src/responses.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,UAAU,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,YAAY,CAAA;AAEtF,MAAM,MAAM,oBAAoB,GAAG;IACjC,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACjC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;IAC9B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,oBAAoB,EAAE,OAAO,CAAA;IACtC,QAAQ,CAAC,cAAc,EAAE,SAAS,aAAa,EAAE,CAAA;IACjD,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAA;CACrC,CAAA;AAED,MAAM,MAAM,oBAAoB,GAAG;IACjC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAA;IACnC,QAAQ,CAAC,IAAI,EAAE,SAAS,UAAU,EAAE,CAAA;IACpC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAA;IACxB,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAA;IAC/B,QAAQ,CAAC,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAA;CAC1C,CAAA;AAED,MAAM,MAAM,qBAAqB,GAAG;IAClC,QAAQ,CAAC,OAAO,EAAE,SAAS,WAAW,EAAE,CAAA;IACxC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CACxB,CAAA;AAED,MAAM,MAAM,oBAAoB,GAAG;IACjC,QAAQ,CAAC,OAAO,EAAE,SAAS,YAAY,EAAE,CAAA;IACzC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAA;IAC3B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CACxB,CAAA"}

package/dist/responses.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=responses.js.map

package/dist/responses.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"responses.js","sourceRoot":"","sources":["../src/responses.ts"],"names":[],"mappings":""}

package/dist/scope.d.ts

@@ -0,0 +1,21 @@
+import type { QueryScope } from "./types.js";
+export type QueryScopeInput = {
+    readonly cloudName?: string;
+    readonly instanceName?: string;
+    readonly dbName?: string;
+};
+export type ScopeResolutionResult = {
+    readonly ok: true;
+    readonly scope: QueryScope;
+} | {
+    readonly ok: false;
+    readonly code: "missing_scope";
+    readonly message: string;
+};
+export declare class QueryScopeStore {
+    #private;
+    bind(user: string, scope: QueryScope): void;
+    find(user: string): QueryScope | null;
+}
+export declare function resolveScope(store: QueryScopeStore, user: string, input: QueryScopeInput): ScopeResolutionResult;
+//# sourceMappingURL=scope.d.ts.map

package/dist/scope.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scope.d.ts","sourceRoot":"","sources":["../src/scope.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAA;AAE5C,MAAM,MAAM,eAAe,GAAG;IAC5B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAA;IAC9B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CACzB,CAAA;AAED,MAAM,MAAM,qBAAqB,GAC7B;IAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAA;CAAE,GACjD;IAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAA;AAEpF,qBAAa,eAAe;;IAG1B,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,GAAG,IAAI;IAI3C,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU,GAAG,IAAI;CAGtC;AAED,wBAAgB,YAAY,CAC1B,KAAK,EAAE,eAAe,EACtB,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,eAAe,GACrB,qBAAqB,CAmCvB"}

package/dist/scope.js

@@ -0,0 +1,44 @@
+import { parseCloudName, supportedCloudNames } from "./clouds.js";
+export class QueryScopeStore {
+    #scopes = new Map();
+    bind(user, scope) {
+        this.#scopes.set(user, scope);
+    }
+    find(user) {
+        return this.#scopes.get(user) ?? null;
+    }
+}
+export function resolveScope(store, user, input) {
+    const cloudName = input.cloudName?.trim() ?? "";
+    const instanceName = input.instanceName?.trim() ?? "";
+    const dbName = input.dbName?.trim() ?? "";
+    const explicitFieldCount = [cloudName, instanceName, dbName].filter((value) => value.length > 0).length;
+    if (explicitFieldCount === 3) {
+        const canonicalCloudName = parseCloudName(cloudName);
+        if (canonicalCloudName === null) {
+            return {
+                ok: false,
+                code: "missing_scope",
+                message: `Unsupported cloudName; provide one of ${supportedCloudNames()} with instanceName and dbName`,
+            };
+        }
+        return { ok: true, scope: { cloudName: canonicalCloudName, instanceName, dbName } };
+    }
+    if (explicitFieldCount > 0) {
+        return {
+            ok: false,
+            code: "missing_scope",
+            message: "Provide cloudName, instanceName, and dbName together, or omit all three to reuse the current session scope",
+        };
+    }
+    const boundScope = store.find(user);
+    if (boundScope === null) {
+        return {
+            ok: false,
+            code: "missing_scope",
+            message: "No active session scope is bound; provide cloudName, instanceName, and dbName",
+        };
+    }
+    return { ok: true, scope: boundScope };
+}
+//# sourceMappingURL=scope.js.map

package/dist/scope.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scope.js","sourceRoot":"","sources":["../src/scope.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAA;AAajE,MAAM,OAAO,eAAe;IACjB,OAAO,GAAG,IAAI,GAAG,EAAsB,CAAA;IAEhD,IAAI,CAAC,IAAY,EAAE,KAAiB;QAClC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;IAC/B,CAAC;IAED,IAAI,CAAC,IAAY;QACf,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,CAAA;IACvC,CAAC;CACF;AAED,MAAM,UAAU,YAAY,CAC1B,KAAsB,EACtB,IAAY,EACZ,KAAsB;IAEtB,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,CAAA;IAC/C,MAAM,YAAY,GAAG,KAAK,CAAC,YAAY,EAAE,IAAI,EAAE,IAAI,EAAE,CAAA;IACrD,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,CAAA;IACzC,MAAM,kBAAkB,GAAG,CAAC,SAAS,EAAE,YAAY,EAAE,MAAM,CAAC,CAAC,MAAM,CACjE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAC5B,CAAC,MAAM,CAAA;IACR,IAAI,kBAAkB,KAAK,CAAC,EAAE,CAAC;QAC7B,MAAM,kBAAkB,GAAG,cAAc,CAAC,SAAS,CAAC,CAAA;QACpD,IAAI,kBAAkB,KAAK,IAAI,EAAE,CAAC;YAChC,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,IAAI,EAAE,eAAe;gBACrB,OAAO,EAAE,yCAAyC,mBAAmB,EAAE,+BAA+B;aACvG,CAAA;QACH,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,SAAS,EAAE,kBAAkB,EAAE,YAAY,EAAE,MAAM,EAAE,EAAE,CAAA;IACrF,CAAC;IACD,IAAI,kBAAkB,GAAG,CAAC,EAAE,CAAC;QAC3B,OAAO;YACL,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,eAAe;YACrB,OAAO,EACL,4GAA4G;SAC/G,CAAA;IACH,CAAC;IACD,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACnC,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;QACxB,OAAO;YACL,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,eAAe;YACrB,OAAO,EAAE,+EAA+E;SACzF,CAAA;IACH,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,UAAU,EAAE,CAAA;AACxC,CAAC"}