@gizmodata/gizmosql-mcp 0.1.0

package/dist/server.js

@@ -0,0 +1,446 @@
+// Transport-agnostic MCP server: tool + resource definitions for GizmoSQL.
+import { McpServer, ResourceTemplate } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { z } from "zod";
+import { GizmoConnection, QueryTimeoutError, redactedUri } from "./connection.js";
+import { cellToJson, cellToText, escapeMarkdownCell, formatTable, resultFooter, toMarkdownTable, truncateText, } from "./format.js";
+import { convertParams, paramsSchema, PARAMS_DESCRIPTION, ParameterError } from "./params.js";
+import { runSsoLogin } from "./sso.js";
+import { guardStatement, normalizeStatement, SqlGuardError, WRAPPER_ALIAS, wrapWithLimit, } from "./sql-guard.js";
+import { PACKAGE_NAME, PACKAGE_VERSION } from "./version.js";
+const SERVER_INSTRUCTIONS = "GizmoSQL is an Arrow Flight SQL server built on DuckDB, so DuckDB SQL syntax and functions apply. " +
+    "Start with list_catalogs / list_schemas / list_tables / describe_table to discover the schema, then " +
+    "use run_query for SELECT queries. Results are capped at a configurable number of rows; use LIMIT, " +
+    "aggregation, or WHERE filters to keep results small. Bind user-supplied literals with ? placeholders " +
+    "and the params argument instead of interpolating them into SQL. Unless GIZMOSQL_ALLOW_WRITES is " +
+    "enabled the server is read-only.";
+function text(body, structured) {
+    const result = { content: [{ type: "text", text: body }] };
+    if (structured)
+        result.structuredContent = structured;
+    return result;
+}
+function errorResult(message) {
+    return { isError: true, content: [{ type: "text", text: `Error: ${message}` }] };
+}
+/** Converts a thrown error into a redacted, user-facing message. */
+export function describeError(err, connection) {
+    if (err instanceof SqlGuardError || err instanceof ParameterError || err instanceof QueryTimeoutError) {
+        return connection.redact(err.message);
+    }
+    const raw = err instanceof Error ? err.message : String(err);
+    // Surface the server's message verbatim (minus credentials); strip the
+    // client's generic prefix so the DuckDB error is front and center.
+    const cleaned = raw.replace(/^Failed to execute (?:query|update): /u, "");
+    return connection.redact(cleaned);
+}
+const sqlArg = z.string().min(1).describe("A single SQL statement (DuckDB dialect).");
+/** Identifier quoting for generated SQL (used only for DDL synthesis). */
+function quoteIdent(name) {
+    return `"${name.replace(/"/g, '""')}"`;
+}
+/** Table/view DDL from DuckDB's catalog functions, or synthesized from information_schema. */
+async function fetchDdl(connection, ref) {
+    const fromTables = await connection.query("SELECT sql FROM duckdb_tables() WHERE database_name = ? AND schema_name = ? AND table_name = ?", [ref.catalog, ref.schema, ref.table]);
+    if (fromTables.numRows > 0) {
+        const sql = fromTables.getChildAt(0)?.get(0);
+        if (typeof sql === "string" && sql.trim())
+            return sql;
+    }
+    const fromViews = await connection.query("SELECT sql FROM duckdb_views() WHERE database_name = ? AND schema_name = ? AND view_name = ?", [ref.catalog, ref.schema, ref.table]);
+    if (fromViews.numRows > 0) {
+        const sql = fromViews.getChildAt(0)?.get(0);
+        if (typeof sql === "string" && sql.trim())
+            return sql;
+    }
+    const cols = await connection.query("SELECT column_name, data_type, is_nullable FROM information_schema.columns " +
+        "WHERE table_catalog = ? AND table_schema = ? AND table_name = ? ORDER BY ordinal_position", [ref.catalog, ref.schema, ref.table]);
+    if (cols.numRows === 0)
+        return null;
+    const lines = [];
+    for (let i = 0; i < cols.numRows; i++) {
+        const name = String(cols.getChildAt(0)?.get(i));
+        const type = String(cols.getChildAt(1)?.get(i));
+        const nullable = String(cols.getChildAt(2)?.get(i)) !== "NO";
+        lines.push(`  ${quoteIdent(name)} ${type}${nullable ? "" : " NOT NULL"}`);
+    }
+    return `CREATE TABLE ${quoteIdent(ref.catalog)}.${quoteIdent(ref.schema)}.${quoteIdent(ref.table)} (\n${lines.join(",\n")}\n);`;
+}
+/** Builds the McpServer with every tool/resource registered against `ctx`. */
+export function createServer(ctx) {
+    const { connection, config } = ctx;
+    const server = new McpServer({ name: PACKAGE_NAME, version: PACKAGE_VERSION }, { instructions: SERVER_INSTRUCTIONS });
+    /** Wraps a tool body so every failure becomes a redacted isError result. */
+    const tool = (fn) => {
+        return async (args) => {
+            try {
+                return await fn(args);
+            }
+            catch (err) {
+                return errorResult(describeError(err, connection));
+            }
+        };
+    };
+    server.registerTool("list_catalogs", {
+        title: "List catalogs",
+        description: "Lists the catalogs (attached databases) visible to the connected GizmoSQL user.",
+        inputSchema: {},
+        annotations: { readOnlyHint: true, idempotentHint: true },
+    }, tool(async () => {
+        const catalogs = await connection.run((c) => c.getCatalogs());
+        const body = catalogs.length
+            ? catalogs.map((c) => `- ${c}`).join("\n")
+            : "(no catalogs visible)";
+        return text(body, { catalogs });
+    }));
+    server.registerTool("list_schemas", {
+        title: "List schemas",
+        description: "Lists schemas, optionally filtered to one catalog.",
+        inputSchema: {
+            catalog: z.string().optional().describe("Catalog name to filter by (exact match)."),
+        },
+        annotations: { readOnlyHint: true, idempotentHint: true },
+    }, tool(async ({ catalog }) => {
+        const schemas = await connection.run((c) => c.getSchemas(catalog));
+        const rows = schemas.map((s) => [escapeMarkdownCell(s.catalog), escapeMarkdownCell(s.schema)]);
+        const body = rows.length ? toMarkdownTable(["catalog", "schema"], rows) : "(no schemas found)";
+        return text(body, { schemas });
+    }));
+    server.registerTool("list_tables", {
+        title: "List tables",
+        description: "Lists tables and views with their type. Filters are optional; `like` is a SQL LIKE pattern " +
+            "on the table name (e.g. 'orders%').",
+        inputSchema: {
+            catalog: z.string().optional().describe("Catalog name (exact match)."),
+            schema: z.string().optional().describe("Schema name (SQL LIKE pattern, e.g. 'main')."),
+            like: z.string().optional().describe("Table-name LIKE pattern, e.g. 'cust%'."),
+        },
+        annotations: { readOnlyHint: true, idempotentHint: true },
+    }, tool(async ({ catalog, schema, like }) => {
+        const tables = await connection.run((c) => c.getTables(catalog, schema, like));
+        const rows = tables.map((t) => [
+            escapeMarkdownCell(t.catalog),
+            escapeMarkdownCell(t.schema),
+            escapeMarkdownCell(t.tableName),
+            escapeMarkdownCell(t.tableType),
+        ]);
+        const body = rows.length
+            ? toMarkdownTable(["catalog", "schema", "table", "type"], rows)
+            : "(no tables matched)";
+        return text(body, { tables });
+    }));
+    server.registerTool("describe_table", {
+        title: "Describe table",
+        description: "Describes a table or view: columns with types and nullability, constraints, and an " +
+            "estimated row count when it is cheap to obtain. Provide schema/catalog when the table " +
+            "name is ambiguous.",
+        inputSchema: {
+            table: z.string().min(1).describe("Table or view name (exact match)."),
+            schema: z.string().optional().describe("Schema name (exact match)."),
+            catalog: z.string().optional().describe("Catalog name (exact match)."),
+        },
+        annotations: { readOnlyHint: true, idempotentHint: true },
+    }, tool(async ({ table, schema, catalog }) => {
+        const filters = ["table_name = ?"];
+        const params = [table];
+        if (schema !== undefined) {
+            filters.push("table_schema = ?");
+            params.push(schema);
+        }
+        if (catalog !== undefined) {
+            filters.push("table_catalog = ?");
+            params.push(catalog);
+        }
+        const columns = await connection.query("SELECT table_catalog, table_schema, table_name, column_name, data_type, is_nullable, column_default " +
+            `FROM information_schema.columns WHERE ${filters.join(" AND ")} ORDER BY table_catalog, table_schema, ordinal_position`, params);
+        if (columns.numRows === 0) {
+            return errorResult(`Table "${table}" not found${schema ? ` in schema "${schema}"` : ""}${catalog ? ` (catalog "${catalog}")` : ""}. ` +
+                "Use list_tables to find the exact name.");
+        }
+        const locations = new Set();
+        for (let i = 0; i < columns.numRows; i++) {
+            locations.add(`${columns.getChildAt(0)?.get(i)}.${columns.getChildAt(1)?.get(i)}`);
+        }
+        if (locations.size > 1) {
+            return errorResult(`Table "${table}" exists in multiple locations: ${[...locations].join(", ")}. ` +
+                "Pass schema (and catalog) to disambiguate.");
+        }
+        const ref = {
+            catalog: String(columns.getChildAt(0)?.get(0)),
+            schema: String(columns.getChildAt(1)?.get(0)),
+            table,
+        };
+        const colRows = [];
+        const colJson = [];
+        for (let i = 0; i < columns.numRows; i++) {
+            const name = String(columns.getChildAt(3)?.get(i));
+            const type = String(columns.getChildAt(4)?.get(i));
+            const nullable = String(columns.getChildAt(5)?.get(i)) === "YES";
+            const def = columns.getChildAt(6)?.get(i);
+            colRows.push([
+                escapeMarkdownCell(name),
+                escapeMarkdownCell(type),
+                nullable ? "YES" : "NO",
+                escapeMarkdownCell(def === null || def === undefined ? "" : String(def)),
+            ]);
+            colJson.push({ name, type, nullable, default: def === undefined ? null : def });
+        }
+        const meta = await connection.query("SELECT 'BASE TABLE' AS kind, estimated_size FROM duckdb_tables() " +
+            "WHERE database_name = ? AND schema_name = ? AND table_name = ? " +
+            "UNION ALL SELECT 'VIEW', NULL FROM duckdb_views() " +
+            "WHERE database_name = ? AND schema_name = ? AND view_name = ?", [ref.catalog, ref.schema, ref.table, ref.catalog, ref.schema, ref.table]);
+        let kind = "TABLE";
+        let estimatedRows = null;
+        if (meta.numRows > 0) {
+            kind = String(meta.getChildAt(0)?.get(0));
+            const est = meta.getChildAt(1)?.get(0);
+            if (est !== null && est !== undefined)
+                estimatedRows = Number(est);
+        }
+        const constraints = await connection.query("SELECT constraint_type, constraint_column_names, constraint_text FROM duckdb_constraints() " +
+            "WHERE database_name = ? AND schema_name = ? AND table_name = ? " +
+            "AND constraint_type IN ('PRIMARY KEY', 'UNIQUE', 'FOREIGN KEY', 'CHECK') " +
+            "ORDER BY constraint_index", [ref.catalog, ref.schema, ref.table]);
+        const constraintJson = [];
+        const constraintLines = [];
+        for (let i = 0; i < constraints.numRows; i++) {
+            const type = String(constraints.getChildAt(0)?.get(i));
+            const cols = cellToJson(constraints.getChildAt(1)?.get(i), constraints.schema.fields[1].type);
+            const ctext = String(constraints.getChildAt(2)?.get(i) ?? "");
+            constraintJson.push({ type, columns: cols, text: ctext });
+            constraintLines.push(`- ${type}: ${ctext || cellToText(cols)}`);
+        }
+        const header = `**${ref.catalog}.${ref.schema}.${ref.table}** (${kind})` +
+            (estimatedRows !== null ? ` · estimated rows: ${estimatedRows}` : "");
+        const parts = [header, "", toMarkdownTable(["column", "type", "nullable", "default"], colRows)];
+        if (constraintLines.length)
+            parts.push("", "Constraints:", ...constraintLines);
+        return text(parts.join("\n"), {
+            catalog: ref.catalog,
+            schema: ref.schema,
+            table: ref.table,
+            kind,
+            estimated_rows: estimatedRows,
+            columns: colJson,
+            constraints: constraintJson,
+        });
+    }));
+    server.registerTool("run_query", {
+        title: "Run query",
+        description: "Runs a SQL query against GizmoSQL (DuckDB dialect) and returns the rows as a Markdown table " +
+            `plus structured JSON. Results are capped at max_rows (default ${config.maxRows}, hard maximum ` +
+            `${config.maxRows}); long cells are truncated to ${config.maxCellChars} characters with …. ` +
+            (config.allowWrites
+                ? "Writes are enabled on this server; prefer execute_statement for DML/DDL."
+                : "This server is read-only: only SELECT/WITH/SHOW/DESCRIBE/SUMMARIZE/EXPLAIN/PRAGMA(read) statements are accepted."),
+        inputSchema: {
+            sql: sqlArg,
+            params: paramsSchema.optional().describe(PARAMS_DESCRIPTION),
+            max_rows: z
+                .number()
+                .int()
+                .min(1)
+                .optional()
+                .describe(`Row cap for this call (1..${config.maxRows}; default ${config.maxRows}).`),
+        },
+        outputSchema: {
+            columns: z.array(z.object({ name: z.string(), type: z.string() })),
+            rows: z.array(z.array(z.unknown())),
+            row_count: z.number(),
+            truncated: z.boolean(),
+            elapsed_ms: z.number(),
+        },
+        annotations: { readOnlyHint: !config.allowWrites, idempotentHint: !config.allowWrites },
+    }, tool(async ({ sql, params, max_rows }) => {
+        const guarded = guardStatement(sql, config.allowWrites);
+        const maxRows = Math.min(max_rows ?? config.maxRows, config.maxRows);
+        const bound = convertParams(params);
+        const effectiveSql = guarded.classification.wrappable
+            ? wrapWithLimit(guarded.sql, maxRows + 1)
+            : guarded.sql;
+        const started = Date.now();
+        let capped;
+        try {
+            capped = await connection.queryCapped(effectiveSql, bound, maxRows);
+        }
+        catch (err) {
+            if (guarded.classification.wrappable && !(err instanceof QueryTimeoutError)) {
+                throw new Error(`${describeError(err, connection)}\n(Note: to enforce max_rows the query was executed as ` +
+                    `SELECT * FROM (<your query>) AS ${WRAPPER_ALIAS} LIMIT ${maxRows + 1}, so line numbers in the ` +
+                    "server's message are offset by one.)");
+            }
+            throw err;
+        }
+        const elapsedMs = Date.now() - started;
+        const formatted = formatTable(capped.table, { maxRows, maxCellChars: config.maxCellChars });
+        const truncated = formatted.truncated || capped.truncated;
+        const footer = resultFooter({
+            rowCount: formatted.rowCount,
+            truncated,
+            maxRows,
+            elapsedMs,
+        });
+        const body = formatted.rowCount > 0 ? `${formatted.markdown}\n\n${footer}` : `(no rows)\n\n${footer}`;
+        return text(body, {
+            columns: formatted.columns,
+            rows: formatted.rows,
+            row_count: formatted.rowCount,
+            truncated,
+            elapsed_ms: elapsedMs,
+        });
+    }));
+    server.registerTool("explain_query", {
+        title: "Explain query",
+        description: "Returns DuckDB's EXPLAIN output (the physical plan) for a SQL statement without executing it.",
+        inputSchema: { sql: sqlArg },
+        annotations: { readOnlyHint: true, idempotentHint: true },
+    }, tool(async ({ sql }) => {
+        const guarded = guardStatement(sql, config.allowWrites);
+        const normalized = normalizeStatement(guarded.sql);
+        const explainSql = /^\s*EXPLAIN\b/iu.test(normalized) ? normalized : `EXPLAIN ${normalized}`;
+        const table = await connection.query(explainSql);
+        const sections = [];
+        const keyCol = table.schema.fields.findIndex((f) => f.name === "explain_key");
+        const valCol = table.schema.fields.findIndex((f) => f.name === "explain_value");
+        for (let i = 0; i < table.numRows; i++) {
+            const key = keyCol >= 0 ? String(table.getChildAt(keyCol)?.get(i)) : `row ${i + 1}`;
+            const value = valCol >= 0
+                ? String(table.getChildAt(valCol)?.get(i) ?? "")
+                : table.schema.fields.map((_, c) => String(table.getChildAt(c)?.get(i))).join(" ");
+            sections.push(`### ${key}\n\`\`\`\n${value.replace(/\s+$/u, "")}\n\`\`\``);
+        }
+        return text(sections.join("\n\n") || "(no plan returned)");
+    }));
+    if (config.allowWrites) {
+        server.registerTool("execute_statement", {
+            title: "Execute statement",
+            description: "Executes a DML/DDL statement (INSERT/UPDATE/DELETE/CREATE/...) with optional bound parameters " +
+                "and returns the affected-row count (-1 when the server does not report one).",
+            inputSchema: {
+                sql: sqlArg,
+                params: paramsSchema.optional().describe(PARAMS_DESCRIPTION),
+            },
+            annotations: { readOnlyHint: false, destructiveHint: true, idempotentHint: false },
+        }, tool(async ({ sql, params }) => {
+            const guarded = guardStatement(sql, true);
+            const bound = convertParams(params);
+            const started = Date.now();
+            const affected = await connection.update(guarded.sql, bound);
+            const elapsedMs = Date.now() - started;
+            const count = affected < 0 ? "unknown" : String(affected);
+            return text(`Statement executed. Affected rows: ${count} · ${elapsedMs} ms`, {
+                affected_rows: affected,
+                elapsed_ms: elapsedMs,
+            });
+        }));
+    }
+    server.registerTool("server_info", {
+        title: "Server info",
+        description: "Reports the GizmoSQL and DuckDB versions, the connection (credentials redacted), the " +
+            "effective limits, and this MCP server's version.",
+        inputSchema: {},
+        annotations: { readOnlyHint: true, idempotentHint: true },
+    }, tool(async () => {
+        let gizmosqlVersion = "unknown";
+        let duckdbVersion = "unknown";
+        let user = "unknown";
+        let currentCatalog = "unknown";
+        let currentSchema = "unknown";
+        try {
+            const t = await connection.query("SELECT GIZMOSQL_VERSION() AS gv, version() AS dv, GIZMOSQL_USER() AS u, current_catalog() AS c, current_schema() AS s");
+            gizmosqlVersion = String(t.getChildAt(0)?.get(0));
+            duckdbVersion = String(t.getChildAt(1)?.get(0));
+            user = String(t.getChildAt(2)?.get(0));
+            currentCatalog = String(t.getChildAt(3)?.get(0));
+            currentSchema = String(t.getChildAt(4)?.get(0));
+        }
+        catch {
+            // Older servers lack GIZMOSQL_VERSION(); fall back to Flight SQL SqlInfo.
+            try {
+                const info = await connection.run((c) => c.getSqlInfo([0, 1]));
+                duckdbVersion = String(info.get(1) ?? "unknown");
+                gizmosqlVersion = `${info.get(0) ?? "gizmosql"} (version not reported)`;
+            }
+            catch {
+                // leave unknowns
+            }
+        }
+        const auth = connection.effectiveAuth();
+        const info = {
+            gizmosql_version: gizmosqlVersion,
+            duckdb_version: duckdbVersion,
+            connection_uri: redactedUri(config, auth.user),
+            auth_method: auth.method,
+            user,
+            tls: !config.plaintext,
+            tls_skip_verify: config.tlsSkipVerify,
+            current_catalog: currentCatalog,
+            current_schema: currentSchema,
+            allow_writes: config.allowWrites,
+            max_rows: config.maxRows,
+            max_cell_chars: config.maxCellChars,
+            query_timeout_seconds: config.queryTimeoutSeconds,
+            transport: ctx.transport,
+            mcp_server: `${PACKAGE_NAME} ${PACKAGE_VERSION}`,
+            session_warnings: connection.sessionWarnings(),
+        };
+        const lines = Object.entries(info).map(([k, v]) => `- ${k}: ${Array.isArray(v) ? (v.length ? v.join("; ") : "none") : String(v)}`);
+        return text(lines.join("\n"), info);
+    }));
+    if (config.enableSso) {
+        server.registerTool("login_sso", {
+            title: "Sign in with SSO",
+            description: "Signs in to GizmoSQL with the server's OAuth/SSO identity provider: opens the provider's " +
+                "login page in your browser, waits for you to finish, then reconnects with the identity " +
+                "token (kept in memory only). If the wait times out, call login_sso again to keep waiting.",
+            inputSchema: {
+                wait_seconds: z
+                    .number()
+                    .int()
+                    .min(5)
+                    .max(600)
+                    .optional()
+                    .describe("How long to wait for the browser login before returning (default 90)."),
+            },
+            annotations: { readOnlyHint: false, idempotentHint: true, openWorldHint: true },
+        }, tool(async ({ wait_seconds }) => {
+            const outcome = await runSsoLogin(connection, { waitSeconds: wait_seconds ?? 90 });
+            return text(outcome.message, { status: outcome.status, auth_url: outcome.authUrl ?? null });
+        }));
+    }
+    server.registerResource("table_schema", new ResourceTemplate("gizmosql://schema/{catalog}/{schema}/{table}", {
+        list: async () => {
+            const tables = await connection.run((c) => c.getTables());
+            return {
+                resources: tables.slice(0, 500).map((t) => ({
+                    uri: `gizmosql://schema/${encodeURIComponent(t.catalog)}/${encodeURIComponent(t.schema)}/${encodeURIComponent(t.tableName)}`,
+                    name: `${t.catalog}.${t.schema}.${t.tableName}`,
+                    description: `${t.tableType} DDL`,
+                    mimeType: "text/plain",
+                })),
+            };
+        },
+    }), {
+        title: "Table DDL",
+        description: "CREATE statement (DDL) for a table or view: gizmosql://schema/{catalog}/{schema}/{table}",
+        mimeType: "text/plain",
+    }, async (uri, variables) => {
+        const pick = (v) => decodeURIComponent(Array.isArray(v) ? v[0] : (v ?? ""));
+        const ref = {
+            catalog: pick(variables.catalog),
+            schema: pick(variables.schema),
+            table: pick(variables.table),
+        };
+        try {
+            const ddl = await fetchDdl(connection, ref);
+            const body = ddl ?? `-- ${ref.catalog}.${ref.schema}.${ref.table} not found`;
+            return { contents: [{ uri: uri.href, mimeType: "text/plain", text: truncateText(body, 100000) }] };
+        }
+        catch (err) {
+            return {
+                contents: [{ uri: uri.href, mimeType: "text/plain", text: `-- error: ${describeError(err, connection)}` }],
+            };
+        }
+    });
+    return server;
+}
+//# sourceMappingURL=server.js.map

package/dist/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA,2EAA2E;AAE3E,OAAO,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,yCAAyC,CAAC;AAEtF,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE,WAAW,EAAkB,MAAM,iBAAiB,CAAC;AAClG,OAAO,EACL,UAAU,EACV,UAAU,EACV,kBAAkB,EAClB,WAAW,EACX,YAAY,EACZ,eAAe,EACf,YAAY,GACb,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC9F,OAAO,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AACvC,OAAO,EACL,cAAc,EACd,kBAAkB,EAClB,aAAa,EACb,aAAa,EACb,aAAa,GACd,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAQ7D,MAAM,mBAAmB,GACvB,oGAAoG;IACpG,sGAAsG;IACtG,oGAAoG;IACpG,uGAAuG;IACvG,kGAAkG;IAClG,kCAAkC,CAAC;AAErC,SAAS,IAAI,CAAC,IAAY,EAAE,UAAoC;IAC9D,MAAM,MAAM,GAAmB,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;IAC3E,IAAI,UAAU;QAAE,MAAM,CAAC,iBAAiB,GAAG,UAAU,CAAC;IACtD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,WAAW,CAAC,OAAe;IAClC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,OAAO,EAAE,EAAE,CAAC,EAAE,CAAC;AACnF,CAAC;AAED,oEAAoE;AACpE,MAAM,UAAU,aAAa,CAAC,GAAY,EAAE,UAA2B;IACrE,IAAI,GAAG,YAAY,aAAa,IAAI,GAAG,YAAY,cAAc,IAAI,GAAG,YAAY,iBAAiB,EAAE,CAAC;QACtG,OAAO,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACxC,CAAC;IACD,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC7D,uEAAuE;IACvE,mEAAmE;IACnE,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,wCAAwC,EAAE,EAAE,CAAC,CAAC;IAC1E,OAAO,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;AACpC,CAAC;AAED,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,0CAA0C,CAAC,CAAC;AAEtF,0EAA0E;AAC1E,SAAS,UAAU,CAAC,IAAY;IAC9B,OAAO,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC;AACzC,CAAC;AAQD,8FAA8F;AAC9F,KAAK,UAAU,QAAQ,CAAC,UAA2B,EAAE,GAAa;IAChE,MAAM,UAAU,GAAG,MAAM,UAAU,CAAC,KAAK,CACvC,gGAAgG,EAChG,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,KAAK,CAAC,CACrC,CAAC;IACF,IAAI,UAAU,CAAC,OAAO,GAAG,CAAC,EAAE,CAAC;QAC3B,MAAM,GAAG,GAAG,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;QAC7C,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,IAAI,EAAE;YAAE,OAAO,GAAG,CAAC;IACxD,CAAC;IACD,MAAM,SAAS,GAAG,MAAM,UAAU,CAAC,KAAK,CACtC,8FAA8F,EAC9F,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,KAAK,CAAC,CACrC,CAAC;IACF,IAAI,SAAS,CAAC,OAAO,GAAG,CAAC,EAAE,CAAC;QAC1B,MAAM,GAAG,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;QAC5C,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,IAAI,EAAE;YAAE,OAAO,GAAG,CAAC;IACxD,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,KAAK,CACjC,6EAA6E;QAC3E,2FAA2F,EAC7F,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,KAAK,CAAC,CACrC,CAAC;IACF,IAAI,IAAI,CAAC,OAAO,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACpC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QAChD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QAChD,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC;QAC7D,KAAK,CAAC,IAAI,CAAC,KAAK,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;IAC5E,CAAC;IACD,OAAO,gBAAgB,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;AAClI,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,YAAY,CAAC,GAAkB;IAC7C,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,GAAG,CAAC;IACnC,MAAM,MAAM,GAAG,IAAI,SAAS,CAC1B,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,eAAe,EAAE,EAChD,EAAE,YAAY,EAAE,mBAAmB,EAAE,CACtC,CAAC;IAEF,4EAA4E;IAC5E,MAAM,IAAI,GAAG,CAAI,EAAwC,EAAE,EAAE;QAC3D,OAAO,KAAK,EAAE,IAAO,EAA2B,EAAE;YAChD,IAAI,CAAC;gBACH,OAAO,MAAM,EAAE,CAAC,IAAI,CAAC,CAAC;YACxB,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,WAAW,CAAC,aAAa,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC,CAAC;YACrD,CAAC;QACH,CAAC,CAAC;IACJ,CAAC,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,eAAe,EACf;QACE,KAAK,EAAE,eAAe;QACtB,WAAW,EAAE,iFAAiF;QAC9F,WAAW,EAAE,EAAE;QACf,WAAW,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE;KAC1D,EACD,IAAI,CAAC,KAAK,IAAI,EAAE;QACd,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;QAC9D,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM;YAC1B,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;YAC1C,CAAC,CAAC,uBAAuB,CAAC;QAC5B,OAAO,IAAI,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;IAClC,CAAC,CAAC,CACH,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,cAAc,EACd;QACE,KAAK,EAAE,cAAc;QACrB,WAAW,EAAE,oDAAoD;QACjE,WAAW,EAAE;YACX,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,0CAA0C,CAAC;SACpF;QACD,WAAW,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE;KAC1D,EACD,IAAI,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE;QACzB,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC;QACnE,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,kBAAkB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAC/F,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,SAAS,EAAE,QAAQ,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,oBAAoB,CAAC;QAC/F,OAAO,IAAI,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;IACjC,CAAC,CAAC,CACH,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,aAAa,EACb;QACE,KAAK,EAAE,aAAa;QACpB,WAAW,EACT,6FAA6F;YAC7F,qCAAqC;QACvC,WAAW,EAAE;YACX,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,6BAA6B,CAAC;YACtE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,8CAA8C,CAAC;YACtF,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,wCAAwC,CAAC;SAC/E;QACD,WAAW,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE;KAC1D,EACD,IAAI,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE;QACvC,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC;QAC/E,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;YAC7B,kBAAkB,CAAC,CAAC,CAAC,OAAO,CAAC;YAC7B,kBAAkB,CAAC,CAAC,CAAC,MAAM,CAAC;YAC5B,kBAAkB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC/B,kBAAkB,CAAC,CAAC,CAAC,SAAS,CAAC;SAChC,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM;YACtB,CAAC,CAAC,eAAe,CAAC,CAAC,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,IAAI,CAAC;YAC/D,CAAC,CAAC,qBAAqB,CAAC;QAC1B,OAAO,IAAI,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;IAChC,CAAC,CAAC,CACH,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,gBAAgB,EAChB;QACE,KAAK,EAAE,gBAAgB;QACvB,WAAW,EACT,qFAAqF;YACrF,wFAAwF;YACxF,oBAAoB;QACtB,WAAW,EAAE;YACX,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,mCAAmC,CAAC;YACtE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,4BAA4B,CAAC;YACpE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,6BAA6B,CAAC;SACvE;QACD,WAAW,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE;KAC1D,EACD,IAAI,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE;QACxC,MAAM,OAAO,GAAa,CAAC,gBAAgB,CAAC,CAAC;QAC7C,MAAM,MAAM,GAAkB,CAAC,KAAK,CAAC,CAAC;QACtC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,OAAO,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;YACjC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACtB,CAAC;QACD,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,OAAO,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;YAClC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACvB,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,KAAK,CACpC,sGAAsG;YACpG,yCAAyC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,yDAAyD,EACzH,MAAM,CACP,CAAC;QACF,IAAI,OAAO,CAAC,OAAO,KAAK,CAAC,EAAE,CAAC;YAC1B,OAAO,WAAW,CAChB,UAAU,KAAK,cAAc,MAAM,CAAC,CAAC,CAAC,eAAe,MAAM,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,OAAO,CAAC,CAAC,CAAC,cAAc,OAAO,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI;gBAChH,yCAAyC,CAC5C,CAAC;QACJ,CAAC;QACD,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;QACpC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,EAAE,EAAE,CAAC;YACzC,SAAS,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACrF,CAAC;QACD,IAAI,SAAS,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;YACvB,OAAO,WAAW,CAChB,UAAU,KAAK,mCAAmC,CAAC,GAAG,SAAS,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;gBAC7E,4CAA4C,CAC/C,CAAC;QACJ,CAAC;QACD,MAAM,GAAG,GAAa;YACpB,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;YAC9C,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;YAC7C,KAAK;SACN,CAAC;QAEF,MAAM,OAAO,GAAe,EAAE,CAAC;QAC/B,MAAM,OAAO,GAAmC,EAAE,CAAC;QACnD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,EAAE,EAAE,CAAC;YACzC,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YACnD,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YACnD,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC;YACjE,MAAM,GAAG,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;YAC1C,OAAO,CAAC,IAAI,CAAC;gBACX,kBAAkB,CAAC,IAAI,CAAC;gBACxB,kBAAkB,CAAC,IAAI,CAAC;gBACxB,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI;gBACvB,kBAAkB,CAAC,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;aACzE,CAAC,CAAC;YACH,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;QAClF,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,KAAK,CACjC,mEAAmE;YACjE,iEAAiE;YACjE,oDAAoD;YACpD,+DAA+D,EACjE,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,KAAK,CAAC,CACzE,CAAC;QACF,IAAI,IAAI,GAAG,OAAO,CAAC;QACnB,IAAI,aAAa,GAAkB,IAAI,CAAC;QACxC,IAAI,IAAI,CAAC,OAAO,GAAG,CAAC,EAAE,CAAC;YACrB,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YAC1C,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;YACvC,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,SAAS;gBAAE,aAAa,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QACrE,CAAC;QAED,MAAM,WAAW,GAAG,MAAM,UAAU,CAAC,KAAK,CACxC,6FAA6F;YAC3F,iEAAiE;YACjE,2EAA2E;YAC3E,2BAA2B,EAC7B,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,KAAK,CAAC,CACrC,CAAC;QACF,MAAM,cAAc,GAA4D,EAAE,CAAC;QACnF,MAAM,eAAe,GAAa,EAAE,CAAC;QACrC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,WAAW,CAAC,OAAO,EAAE,CAAC,EAAE,EAAE,CAAC;YAC7C,MAAM,IAAI,GAAG,MAAM,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YACvD,MAAM,IAAI,GAAG,UAAU,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YAC9F,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;YAC9D,cAAc,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YAC1D,eAAe,CAAC,IAAI,CAAC,KAAK,IAAI,KAAK,KAAK,IAAI,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAClE,CAAC;QAED,MAAM,MAAM,GAAG,KAAK,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,KAAK,OAAO,IAAI,GAAG;YACtE,CAAC,aAAa,KAAK,IAAI,CAAC,CAAC,CAAC,sBAAsB,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACxE,MAAM,KAAK,GAAG,CAAC,MAAM,EAAE,EAAE,EAAE,eAAe,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;QAChG,IAAI,eAAe,CAAC,MAAM;YAAE,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,cAAc,EAAE,GAAG,eAAe,CAAC,CAAC;QAC/E,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;YAC5B,OAAO,EAAE,GAAG,CAAC,OAAO;YACpB,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,KAAK,EAAE,GAAG,CAAC,KAAK;YAChB,IAAI;YACJ,cAAc,EAAE,aAAa;YAC7B,OAAO,EAAE,OAAO;YAChB,WAAW,EAAE,cAAc;SAC5B,CAAC,CAAC;IACL,CAAC,CAAC,CACH,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,WAAW,EACX;QACE,KAAK,EAAE,WAAW;QAClB,WAAW,EACT,8FAA8F;YAC9F,iEAAiE,MAAM,CAAC,OAAO,iBAAiB;YAChG,GAAG,MAAM,CAAC,OAAO,kCAAkC,MAAM,CAAC,YAAY,sBAAsB;YAC5F,CAAC,MAAM,CAAC,WAAW;gBACjB,CAAC,CAAC,0EAA0E;gBAC5E,CAAC,CAAC,kHAAkH,CAAC;QACzH,WAAW,EAAE;YACX,GAAG,EAAE,MAAM;YACX,MAAM,EAAE,YAAY,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,kBAAkB,CAAC;YAC5D,QAAQ,EAAE,CAAC;iBACR,MAAM,EAAE;iBACR,GAAG,EAAE;iBACL,GAAG,CAAC,CAAC,CAAC;iBACN,QAAQ,EAAE;iBACV,QAAQ,CAAC,6BAA6B,MAAM,CAAC,OAAO,aAAa,MAAM,CAAC,OAAO,IAAI,CAAC;SACxF;QACD,YAAY,EAAE;YACZ,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YAClE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;YACnC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;YACrB,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE;YACtB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;SACvB;QACD,WAAW,EAAE,EAAE,YAAY,EAAE,CAAC,MAAM,CAAC,WAAW,EAAE,cAAc,EAAE,CAAC,MAAM,CAAC,WAAW,EAAE;KACxF,EACD,IAAI,CAAC,KAAK,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,EAAE;QACvC,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC;QACxD,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,IAAI,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;QACrE,MAAM,KAAK,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;QACpC,MAAM,YAAY,GAAG,OAAO,CAAC,cAAc,CAAC,SAAS;YACnD,CAAC,CAAC,aAAa,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,GAAG,CAAC,CAAC;YACzC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC;QAChB,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC3B,IAAI,MAAM,CAAC;QACX,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,UAAU,CAAC,WAAW,CAAC,YAAY,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;QACtE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,OAAO,CAAC,cAAc,CAAC,SAAS,IAAI,CAAC,CAAC,GAAG,YAAY,iBAAiB,CAAC,EAAE,CAAC;gBAC5E,MAAM,IAAI,KAAK,CACb,GAAG,aAAa,CAAC,GAAG,EAAE,UAAU,CAAC,yDAAyD;oBACxF,mCAAmC,aAAa,UAAU,OAAO,GAAG,CAAC,2BAA2B;oBAChG,sCAAsC,CACzC,CAAC;YACJ,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;QACD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC;QACvC,MAAM,SAAS,GAAG,WAAW,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC;QAC5F,MAAM,SAAS,GAAG,SAAS,CAAC,SAAS,IAAI,MAAM,CAAC,SAAS,CAAC;QAC1D,MAAM,MAAM,GAAG,YAAY,CAAC;YAC1B,QAAQ,EAAE,SAAS,CAAC,QAAQ;YAC5B,SAAS;YACT,OAAO;YACP,SAAS;SACV,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,SAAS,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,SAAS,CAAC,QAAQ,OAAO,MAAM,EAAE,CAAC,CAAC,CAAC,gBAAgB,MAAM,EAAE,CAAC;QACtG,OAAO,IAAI,CAAC,IAAI,EAAE;YAChB,OAAO,EAAE,SAAS,CAAC,OAAO;YAC1B,IAAI,EAAE,SAAS,CAAC,IAAI;YACpB,SAAS,EAAE,SAAS,CAAC,QAAQ;YAC7B,SAAS;YACT,UAAU,EAAE,SAAS;SACtB,CAAC,CAAC;IACL,CAAC,CAAC,CACH,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,eAAe,EACf;QACE,KAAK,EAAE,eAAe;QACtB,WAAW,EACT,+FAA+F;QACjG,WAAW,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE;QAC5B,WAAW,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE;KAC1D,EACD,IAAI,CAAC,KAAK,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE;QACrB,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC;QACxD,MAAM,UAAU,GAAG,kBAAkB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACnD,MAAM,UAAU,GAAG,iBAAiB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,WAAW,UAAU,EAAE,CAAC;QAC7F,MAAM,KAAK,GAAG,MAAM,UAAU,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QACjD,MAAM,QAAQ,GAAa,EAAE,CAAC;QAC9B,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,aAAa,CAAC,CAAC;QAC9E,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,eAAe,CAAC,CAAC;QAChF,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC,EAAE,EAAE,CAAC;YACvC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YACpF,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC;gBACvB,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;gBAChD,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACrF,QAAQ,CAAC,IAAI,CAAC,OAAO,GAAG,aAAa,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC;QAC7E,CAAC;QACD,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,oBAAoB,CAAC,CAAC;IAC7D,CAAC,CAAC,CACH,CAAC;IAEF,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;QACvB,MAAM,CAAC,YAAY,CACjB,mBAAmB,EACnB;YACE,KAAK,EAAE,mBAAmB;YAC1B,WAAW,EACT,gGAAgG;gBAChG,8EAA8E;YAChF,WAAW,EAAE;gBACX,GAAG,EAAE,MAAM;gBACX,MAAM,EAAE,YAAY,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,kBAAkB,CAAC;aAC7D;YACD,WAAW,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE,eAAe,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE;SACnF,EACD,IAAI,CAAC,KAAK,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE;YAC7B,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YAC1C,MAAM,KAAK,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;YACpC,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YAC3B,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YAC7D,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC;YACvC,MAAM,KAAK,GAAG,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAC1D,OAAO,IAAI,CAAC,sCAAsC,KAAK,MAAM,SAAS,KAAK,EAAE;gBAC3E,aAAa,EAAE,QAAQ;gBACvB,UAAU,EAAE,SAAS;aACtB,CAAC,CAAC;QACL,CAAC,CAAC,CACH,CAAC;IACJ,CAAC;IAED,MAAM,CAAC,YAAY,CACjB,aAAa,EACb;QACE,KAAK,EAAE,aAAa;QACpB,WAAW,EACT,uFAAuF;YACvF,kDAAkD;QACpD,WAAW,EAAE,EAAE;QACf,WAAW,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE;KAC1D,EACD,IAAI,CAAC,KAAK,IAAI,EAAE;QACd,IAAI,eAAe,GAAG,SAAS,CAAC;QAChC,IAAI,aAAa,GAAG,SAAS,CAAC;QAC9B,IAAI,IAAI,GAAG,SAAS,CAAC;QACrB,IAAI,cAAc,GAAG,SAAS,CAAC;QAC/B,IAAI,aAAa,GAAG,SAAS,CAAC;QAC9B,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,MAAM,UAAU,CAAC,KAAK,CAC9B,uHAAuH,CACxH,CAAC;YACF,eAAe,GAAG,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YAClD,aAAa,GAAG,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YAChD,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YACvC,cAAc,GAAG,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YACjD,aAAa,GAAG,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QAClD,CAAC;QAAC,MAAM,CAAC;YACP,0EAA0E;YAC1E,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC/D,aAAa,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,SAAS,CAAC,CAAC;gBACjD,eAAe,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,UAAU,yBAAyB,CAAC;YAC1E,CAAC;YAAC,MAAM,CAAC;gBACP,iBAAiB;YACnB,CAAC;QACH,CAAC;QACD,MAAM,IAAI,GAAG,UAAU,CAAC,aAAa,EAAE,CAAC;QACxC,MAAM,IAAI,GAAG;YACX,gBAAgB,EAAE,eAAe;YACjC,cAAc,EAAE,aAAa;YAC7B,cAAc,EAAE,WAAW,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC;YAC9C,WAAW,EAAE,IAAI,CAAC,MAAM;YACxB,IAAI;YACJ,GAAG,EAAE,CAAC,MAAM,CAAC,SAAS;YACtB,eAAe,EAAE,MAAM,CAAC,aAAa;YACrC,eAAe,EAAE,cAAc;YAC/B,cAAc,EAAE,aAAa;YAC7B,YAAY,EAAE,MAAM,CAAC,WAAW;YAChC,QAAQ,EAAE,MAAM,CAAC,OAAO;YACxB,cAAc,EAAE,MAAM,CAAC,YAAY;YACnC,qBAAqB,EAAE,MAAM,CAAC,mBAAmB;YACjD,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,UAAU,EAAE,GAAG,YAAY,IAAI,eAAe,EAAE;YAChD,gBAAgB,EAAE,UAAU,CAAC,eAAe,EAAE;SAC/C,CAAC;QACF,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,CACpC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAC3F,CAAC;QACF,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC;IACtC,CAAC,CAAC,CACH,CAAC;IAEF,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;QACrB,MAAM,CAAC,YAAY,CACjB,WAAW,EACX;YACE,KAAK,EAAE,kBAAkB;YACzB,WAAW,EACT,2FAA2F;gBAC3F,yFAAyF;gBACzF,2FAA2F;YAC7F,WAAW,EAAE;gBACX,YAAY,EAAE,CAAC;qBACZ,MAAM,EAAE;qBACR,GAAG,EAAE;qBACL,GAAG,CAAC,CAAC,CAAC;qBACN,GAAG,CAAC,GAAG,CAAC;qBACR,QAAQ,EAAE;qBACV,QAAQ,CAAC,uEAAuE,CAAC;aACrF;YACD,WAAW,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE,cAAc,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE;SAChF,EACD,IAAI,CAAC,KAAK,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE;YAC9B,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,UAAU,EAAE,EAAE,WAAW,EAAE,YAAY,IAAI,EAAE,EAAE,CAAC,CAAC;YACnF,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO,CAAC,OAAO,IAAI,IAAI,EAAE,CAAC,CAAC;QAC9F,CAAC,CAAC,CACH,CAAC;IACJ,CAAC;IAED,MAAM,CAAC,gBAAgB,CACrB,cAAc,EACd,IAAI,gBAAgB,CAAC,8CAA8C,EAAE;QACnE,IAAI,EAAE,KAAK,IAAI,EAAE;YACf,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;YAC1D,OAAO;gBACL,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;oBAC1C,GAAG,EAAE,qBAAqB,kBAAkB,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,kBAAkB,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,kBAAkB,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE;oBAC5H,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,SAAS,EAAE;oBAC/C,WAAW,EAAE,GAAG,CAAC,CAAC,SAAS,MAAM;oBACjC,QAAQ,EAAE,YAAY;iBACvB,CAAC,CAAC;aACJ,CAAC;QACJ,CAAC;KACF,CAAC,EACF;QACE,KAAK,EAAE,WAAW;QAClB,WAAW,EAAE,0FAA0F;QACvG,QAAQ,EAAE,YAAY;KACvB,EACD,KAAK,EAAE,GAAG,EAAE,SAAS,EAA+B,EAAE;QACpD,MAAM,IAAI,GAAG,CAAC,CAAgC,EAAE,EAAE,CAAC,kBAAkB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QAC3G,MAAM,GAAG,GAAa;YACpB,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;YAChC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC;YAC9B,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;SAC7B,CAAC;QACF,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;YAC5C,MAAM,IAAI,GAAG,GAAG,IAAI,MAAM,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,KAAK,YAAY,CAAC;YAC7E,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,IAAI,EAAE,QAAQ,EAAE,YAAY,EAAE,IAAI,EAAE,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC;QACrG,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO;gBACL,QAAQ,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,IAAI,EAAE,QAAQ,EAAE,YAAY,EAAE,IAAI,EAAE,aAAa,aAAa,CAAC,GAAG,EAAE,UAAU,CAAC,EAAE,EAAE,CAAC;aAC3G,CAAC;QACJ,CAAC;IACH,CAAC,CACF,CAAC;IAEF,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/sql-guard.d.ts

@@ -0,0 +1,57 @@
+export type StatementKind = "read" | "write" | "unknown";
+export interface Classification {
+    /** Whether the statement is a read, a write, or could not be classified. */
+    kind: StatementKind;
+    /** The leading keyword that determined the classification (upper-cased). */
+    keyword: string;
+    /**
+     * Whether the statement can be wrapped as `SELECT * FROM (<sql>) LIMIT n`
+     * to enforce the row cap on the server side.
+     */
+    wrappable: boolean;
+}
+/**
+ * Removes SQL comments (`-- ...`, `/* ... *\/` with nesting) while
+ * preserving string literals, quoted identifiers and dollar-quoted
+ * strings. Comments are replaced by a single space so offsets stay
+ * meaningful for error messages.
+ */
+export declare function stripComments(sql: string): string;
+/**
+ * Splits SQL into top-level statements on semicolons that are outside
+ * strings, quoted identifiers and comments. Empty statements (e.g. from a
+ * trailing semicolon) are dropped.
+ */
+export declare function splitStatements(sql: string): string[];
+/**
+ * Returns the statement with comments removed and any trailing
+ * semicolons stripped, ready to be wrapped in a subquery.
+ */
+export declare function normalizeStatement(sql: string): string;
+/**
+ * Classifies a single SQL statement by its leading keyword, looking
+ * through leading parentheses and CTE lists to find the statement that
+ * actually executes.
+ */
+export declare function classifyStatement(sql: string): Classification;
+export declare class SqlGuardError extends Error {
+    constructor(message: string);
+}
+export interface GuardedStatement {
+    /** Comment-stripped statement without trailing semicolons. */
+    sql: string;
+    classification: Classification;
+}
+/**
+ * Validates that `sql` is exactly one statement and, when writes are
+ * disabled, that it is a read. Throws {@link SqlGuardError} otherwise.
+ */
+export declare function guardStatement(sql: string, allowWrites: boolean): GuardedStatement;
+/** Alias used by the query wrapper so it never collides with user aliases. */
+export declare const WRAPPER_ALIAS = "gizmosql_mcp_q";
+/**
+ * Wraps a read statement so the server enforces the row cap:
+ * `SELECT * FROM (<sql>) AS gizmosql_mcp_q LIMIT <limit>`.
+ * The caller must pass a normalized (comment-free, no trailing `;`) statement.
+ */
+export declare function wrapWithLimit(sql: string, limit: number): string;