@mcpolyglot/connector-sql 0.2.0 → 0.3.1

package/dist/__tests__/dialects.integration.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=dialects.integration.test.d.ts.map

package/dist/__tests__/dialects.integration.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dialects.integration.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/dialects.integration.test.ts"],"names":[],"mappings":""}

package/dist/__tests__/dialects.integration.test.js

@@ -0,0 +1,183 @@
+import { afterAll, beforeAll, describe, expect, it } from 'vitest';
+import { SqlConnector } from '../connector.js';
+import { PostgresDialect } from '../dialects/postgres.js';
+import { MysqlDialect } from '../dialects/mysql.js';
+// Real servers, same assertions for each dialect. Each block runs only when its URL is set
+// (CI sets both via service containers):
+//   PG_TEST_URL=postgres://postgres:test@localhost:55432/postgres
+//   MYSQL_TEST_URL=mysql://root:test@localhost:53306/test
+const SEED = [
+    'DROP TABLE IF EXISTS orders',
+    'DROP TABLE IF EXISTS users',
+    'CREATE TABLE users (id INT PRIMARY KEY, email VARCHAR(100), password_hash VARCHAR(100))',
+    'CREATE TABLE orders (id INT PRIMARY KEY, user_id INT, total_cents INT)',
+    "INSERT INTO users VALUES (1, 'alice@example.com', 'h1'), (2, 'bob@example.com', 'h2')",
+    'INSERT INTO orders VALUES (1, 1, 4995), (2, 1, 12000), (3, 2, 2500)',
+];
+const targets = [
+    {
+        name: 'postgres',
+        url: process.env.PG_TEST_URL,
+        make: (u) => new PostgresDialect(u),
+        param: '$1',
+        sleep: 'SELECT pg_sleep(3)',
+        seed: async (u) => {
+            const { Client } = await import('pg');
+            const c = new Client({ connectionString: u });
+            await c.connect();
+            for (const s of SEED)
+                await c.query(s);
+            await c.end();
+        },
+    },
+    {
+        name: 'mysql',
+        url: process.env.MYSQL_TEST_URL,
+        make: (u) => new MysqlDialect(u),
+        param: '?',
+        sleep: 'SELECT SLEEP(3) AS s',
+        seed: async (u) => {
+            const mysql = await import('mysql2/promise');
+            const c = await mysql.createConnection(u);
+            for (const s of SEED)
+                await c.query(s);
+            await c.end();
+        },
+    },
+];
+const logger = { debug: () => { }, info: () => { }, warn: () => { }, error: () => { } };
+const ctx = {
+    sessionId: 't',
+    scopes: new Set(['schema:read', 'tables:read', 'query:raw']),
+    signal: new AbortController().signal,
+    limits: { rowCap: 100, timeoutMs: 5_000, maxBytes: 256 * 1024 },
+    logger,
+};
+for (const t of targets) {
+    describe.skipIf(!t.url)(`${t.name} end-to-end`, () => {
+        const connectors = [];
+        async function open(policy) {
+            const c = new SqlConnector({
+                id: t.name,
+                dialect: t.make(t.url),
+                ...(policy && { policy }),
+            });
+            await c.init({ logger });
+            connectors.push(c);
+            const tools = Object.fromEntries(c.listPrimitiveTools().map((x) => [x.name.slice(t.name.length + 1), x]));
+            return tools;
+        }
+        beforeAll(async () => {
+            await t.seed(t.url);
+        });
+        afterAll(async () => {
+            for (const c of connectors)
+                await c.close();
+        });
+        it('reads with bind params', async () => {
+            const { query } = await open();
+            const r = await query.handler({ sql: `SELECT id FROM orders WHERE user_id = ${t.param} ORDER BY id`, params: [1] }, ctx);
+            expect(r.content[0].data.rows).toHaveLength(2);
+        });
+        it('caps rows and flags truncation', async () => {
+            const { query } = await open();
+            const r = await query.handler({ sql: 'SELECT id FROM orders' }, { ...ctx, limits: { ...ctx.limits, rowCap: 2 } });
+            expect(r.metadata).toMatchObject({ rows: 2, truncated: true });
+        });
+        it('policy denies DDL and writes before the DB sees them', async () => {
+            const { query } = await open();
+            for (const sql of ['DROP TABLE users', "UPDATE users SET email = 'x' WHERE id = 1"]) {
+                await expect(query.handler({ sql }, ctx)).rejects.toMatchObject({
+                    code: 'forbidden.policy',
+                });
+            }
+        });
+        // Postgres: BEGIN READ ONLY rejects it. MySQL: the dialect's own AST gate rejects it first.
+        it('dialect read-only layer blocks a write the policy allowed', async () => {
+            const { query } = await open({
+                tables: { users: 'write' },
+                defaultAccess: 'read',
+                denyColumns: [],
+                maxWritesPerCall: 1,
+            });
+            await expect(query.handler({ sql: "UPDATE users SET email = 'pwned' WHERE id = 1" }, ctx)).rejects.toMatchObject({ code: 'forbidden.read_only' });
+            const check = await (await open()).query.handler({ sql: 'SELECT email FROM users WHERE id = 1' }, ctx);
+            expect(check.content[0].data.rows[0].email).toBe('alice@example.com');
+        });
+        it('denied columns are blocked in queries and hidden from list_tables', async () => {
+            const tools = await open({
+                tables: {},
+                defaultAccess: 'read',
+                denyColumns: ['users.password_hash'],
+                maxWritesPerCall: 1,
+            });
+            await expect(tools.query.handler({ sql: 'SELECT password_hash FROM users' }, ctx)).rejects.toMatchObject({ code: 'forbidden.policy' });
+            const list = await tools.list_tables.handler({}, ctx);
+            const users = list.content[0].data.find((x) => x.name === 'users');
+            expect(users.columns.map((c) => c.name)).toEqual(['id', 'email']);
+        });
+        it('the DB enforces the statement timeout', async () => {
+            const { query } = await open();
+            const t0 = Date.now();
+            await query
+                .handler({ sql: t.sleep }, { ...ctx, limits: { ...ctx.limits, timeoutMs: 300 } })
+                .catch(() => { }); // pg errors; MySQL's SLEEP returns early instead
+            expect(Date.now() - t0).toBeLessThan(2_000);
+        });
+        const writePolicy = { tables: { orders: 'write' }, maxWritesPerCall: 1 };
+        const count = async (where) => {
+            const { query } = await open();
+            const r = await query.handler({ sql: `SELECT count(*) AS n FROM orders WHERE ${where}` }, ctx);
+            return Number(r.content[0].data.rows[0].n);
+        };
+        it('read-only connection refuses a raw write even when the tool layer is bypassed', async () => {
+            const dialect = t.make(t.url);
+            await dialect.connect(); // no policy writes -> read-only connection
+            try {
+                await expect(dialect.runWrite('UPDATE orders SET total_cents = 0 WHERE id = 1', [], {
+                    maxRowsAffected: 10,
+                    timeoutMs: 5_000,
+                })).rejects.toMatchObject({ code: 'forbidden.read_only' });
+            }
+            finally {
+                await dialect.close();
+            }
+            expect(await count('total_cents = 0')).toBe(0);
+        });
+        it('execute is registered only when a table is writable', async () => {
+            expect((await open()).execute).toBeUndefined();
+            expect((await open(writePolicy)).execute).toBeDefined();
+        });
+        it('execute over maxWritesPerCall rolls back', async () => {
+            const { execute } = await open(writePolicy);
+            await expect(execute.handler({ sql: 'UPDATE orders SET total_cents = 0 WHERE user_id = 1' }, ctx)).rejects.toMatchObject({ code: 'forbidden.policy' });
+            expect(await count('total_cents = 0')).toBe(0);
+            const ok = await execute.handler({ sql: `UPDATE orders SET total_cents = 1 WHERE id = ${t.param}`, params: [3] }, ctx);
+            expect(ok.metadata?.rows).toBe(1);
+        });
+        it('idempotencyKey replays without re-executing; reuse with different args errors', async () => {
+            const { execute } = await open(writePolicy);
+            const args = { sql: `INSERT INTO orders VALUES (${t.param}, 2, 7)`, params: [50] };
+            await execute.handler({ ...args, idempotencyKey: 'k' }, ctx);
+            // A real re-run would hit the primary key and throw.
+            const again = await execute.handler({ ...args, idempotencyKey: 'k' }, ctx);
+            expect(again.metadata?.rows).toBe(1);
+            expect(await count('id = 50')).toBe(1);
+            await expect(execute.handler({ ...args, params: [51], idempotencyKey: 'k' }, ctx)).rejects.toMatchObject({ code: 'invalid_argument' });
+            expect(await count('id = 51')).toBe(0);
+        });
+        it('maxConcurrentQueries rejects the call over the cap', async () => {
+            const c = new SqlConnector({ id: 'cap', dialect: t.make(t.url), maxConcurrentQueries: 1 });
+            await c.init({ logger });
+            connectors.push(c);
+            const query = c.listPrimitiveTools().find((x) => x.name === 'cap.query');
+            const [a, b] = await Promise.allSettled([
+                query.handler({ sql: 'SELECT 1 AS x' }, ctx),
+                query.handler({ sql: 'SELECT 1 AS x' }, ctx),
+            ]);
+            expect(a.status).toBe('fulfilled');
+            expect(b).toMatchObject({ status: 'rejected', reason: { code: 'rate_limited' } });
+        });
+    });
+}
+//# sourceMappingURL=dialects.integration.test.js.map

package/dist/__tests__/dialects.integration.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dialects.integration.test.js","sourceRoot":"","sources":["../../src/__tests__/dialects.integration.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAEnE,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAE/C,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC1D,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAGpD,2FAA2F;AAC3F,yCAAyC;AACzC,kEAAkE;AAClE,0DAA0D;AAE1D,MAAM,IAAI,GAAG;IACX,6BAA6B;IAC7B,4BAA4B;IAC5B,yFAAyF;IACzF,wEAAwE;IACxE,uFAAuF;IACvF,qEAAqE;CACtE,CAAC;AAWF,MAAM,OAAO,GAAa;IACxB;QACE,IAAI,EAAE,UAAU;QAChB,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,WAAW;QAC5B,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,eAAe,CAAC,CAAC,CAAC;QACnC,KAAK,EAAE,IAAI;QACX,KAAK,EAAE,oBAAoB;QAC3B,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;YAChB,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;YACtC,MAAM,CAAC,GAAG,IAAI,MAAM,CAAC,EAAE,gBAAgB,EAAE,CAAC,EAAE,CAAC,CAAC;YAC9C,MAAM,CAAC,CAAC,OAAO,EAAE,CAAC;YAClB,KAAK,MAAM,CAAC,IAAI,IAAI;gBAAE,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YACvC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC;QAChB,CAAC;KACF;IACD;QACE,IAAI,EAAE,OAAO;QACb,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,cAAc;QAC/B,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,YAAY,CAAC,CAAC,CAAC;QAChC,KAAK,EAAE,GAAG;QACV,KAAK,EAAE,sBAAsB;QAC7B,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;YAChB,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,gBAAgB,CAAC,CAAC;YAC7C,MAAM,CAAC,GAAG,MAAM,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC;YAC1C,KAAK,MAAM,CAAC,IAAI,IAAI;gBAAE,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YACvC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC;QAChB,CAAC;KACF;CACF,CAAC;AAEF,MAAM,MAAM,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,GAAE,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,GAAE,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,GAAE,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,GAAE,CAAC,EAAE,CAAC;AACpF,MAAM,GAAG,GAAgB;IACvB,SAAS,EAAE,GAAG;IACd,MAAM,EAAE,IAAI,GAAG,CAAC,CAAC,aAAa,EAAE,aAAa,EAAE,WAAW,CAAC,CAAC;IAC5D,MAAM,EAAE,IAAI,eAAe,EAAE,CAAC,MAAM;IACpC,MAAM,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,GAAG,IAAI,EAAE;IAC/D,MAAM;CACP,CAAC;AAEF,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;IACxB,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,aAAa,EAAE,GAAG,EAAE;QACnD,MAAM,UAAU,GAAmB,EAAE,CAAC;QAEtC,KAAK,UAAU,IAAI,CAAC,MAAsC;YACxD,MAAM,CAAC,GAAG,IAAI,YAAY,CAAC;gBACzB,EAAE,EAAE,CAAC,CAAC,IAAI;gBACV,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAI,CAAC;gBACvB,GAAG,CAAC,MAAM,IAAI,EAAE,MAAM,EAAE,CAAC;aAC1B,CAAC,CAAC;YACH,MAAM,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;YACzB,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACnB,MAAM,KAAK,GAAmC,MAAM,CAAC,WAAW,CAC9D,CAAC,CAAC,kBAAkB,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CACxE,CAAC;YACF,OAAO,KAAK,CAAC;QACf,CAAC;QAED,SAAS,CAAC,KAAK,IAAI,EAAE;YACnB,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAI,CAAC,CAAC;QACvB,CAAC,CAAC,CAAC;QACH,QAAQ,CAAC,KAAK,IAAI,EAAE;YAClB,KAAK,MAAM,CAAC,IAAI,UAAU;gBAAE,MAAM,CAAC,CAAC,KAAK,EAAE,CAAC;QAC9C,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,wBAAwB,EAAE,KAAK,IAAI,EAAE;YACtC,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,EAAE,CAAC;YAC/B,MAAM,CAAC,GAAG,MAAM,KAAM,CAAC,OAAO,CAC5B,EAAE,GAAG,EAAE,yCAAyC,CAAC,CAAC,KAAK,cAAc,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,EACpF,GAAG,CACJ,CAAC;YACF,MAAM,CAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAE,CAAC,IAA4B,CAAC,IAAI,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAC3E,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,gCAAgC,EAAE,KAAK,IAAI,EAAE;YAC9C,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,EAAE,CAAC;YAC/B,MAAM,CAAC,GAAG,MAAM,KAAM,CAAC,OAAO,CAC5B,EAAE,GAAG,EAAE,uBAAuB,EAAE,EAChC,EAAE,GAAG,GAAG,EAAE,MAAM,EAAE,EAAE,GAAG,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,EAAE,EAAE,CACjD,CAAC;YACF,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACjE,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;YACpE,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,EAAE,CAAC;YAC/B,KAAK,MAAM,GAAG,IAAI,CAAC,kBAAkB,EAAE,2CAA2C,CAAC,EAAE,CAAC;gBACpF,MAAM,MAAM,CAAC,KAAM,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC;oBAC/D,IAAI,EAAE,kBAAkB;iBACzB,CAAC,CAAC;YACL,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,4FAA4F;QAC5F,EAAE,CAAC,2DAA2D,EAAE,KAAK,IAAI,EAAE;YACzE,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC;gBAC3B,MAAM,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE;gBAC1B,aAAa,EAAE,MAAM;gBACrB,WAAW,EAAE,EAAE;gBACf,gBAAgB,EAAE,CAAC;aACpB,CAAC,CAAC;YACH,MAAM,MAAM,CACV,KAAM,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,+CAA+C,EAAE,EAAE,GAAG,CAAC,CAC9E,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,qBAAqB,EAAE,CAAC,CAAC;YACzD,MAAM,KAAK,GAAG,MAAM,CAClB,MAAM,IAAI,EAAE,CACb,CAAC,KAAM,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,sCAAsC,EAAE,EAAE,GAAG,CAAC,CAAC;YACvE,MAAM,CAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAE,CAAC,IAA2C,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,KAAK,CAAC,CAAC,IAAI,CACxF,mBAAmB,CACpB,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,mEAAmE,EAAE,KAAK,IAAI,EAAE;YACjF,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC;gBACvB,MAAM,EAAE,EAAE;gBACV,aAAa,EAAE,MAAM;gBACrB,WAAW,EAAE,CAAC,qBAAqB,CAAC;gBACpC,gBAAgB,EAAE,CAAC;aACpB,CAAC,CAAC;YACH,MAAM,MAAM,CACV,KAAK,CAAC,KAAM,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,iCAAiC,EAAE,EAAE,GAAG,CAAC,CACtE,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,kBAAkB,EAAE,CAAC,CAAC;YACtD,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,WAAY,CAAC,OAAO,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;YACvD,MAAM,KAAK,GACT,IAAI,CAAC,OAAO,CAAC,CAAC,CAAE,CAAC,IAClB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAE,CAAC;YACnC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;QACpE,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,uCAAuC,EAAE,KAAK,IAAI,EAAE;YACrD,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,EAAE,CAAC;YAC/B,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACtB,MAAM,KAAM;iBACT,OAAO,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,KAAK,EAAE,EAAE,EAAE,GAAG,GAAG,EAAE,MAAM,EAAE,EAAE,GAAG,GAAG,CAAC,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,EAAE,CAAC;iBAChF,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC,CAAC,iDAAiD;YACrE,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;QAC9C,CAAC,CAAC,CAAC;QAEH,MAAM,WAAW,GAAG,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,OAAgB,EAAE,EAAE,gBAAgB,EAAE,CAAC,EAAE,CAAC;QAClF,MAAM,KAAK,GAAG,KAAK,EAAE,KAAa,EAAE,EAAE;YACpC,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,EAAE,CAAC;YAC/B,MAAM,CAAC,GAAG,MAAM,KAAM,CAAC,OAAO,CAC5B,EAAE,GAAG,EAAE,0CAA0C,KAAK,EAAE,EAAE,EAC1D,GAAG,CACJ,CAAC;YACF,OAAO,MAAM,CAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAE,CAAC,IAAwC,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,CAAC;QACpF,CAAC,CAAC;QAEF,EAAE,CAAC,+EAA+E,EAAE,KAAK,IAAI,EAAE;YAC7F,MAAM,OAAO,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAI,CAAC,CAAC;YAC/B,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,2CAA2C;YACpE,IAAI,CAAC;gBACH,MAAM,MAAM,CACV,OAAO,CAAC,QAAQ,CAAC,gDAAgD,EAAE,EAAE,EAAE;oBACrE,eAAe,EAAE,EAAE;oBACnB,SAAS,EAAE,KAAK;iBACjB,CAAC,CACH,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,qBAAqB,EAAE,CAAC,CAAC;YAC3D,CAAC;oBAAS,CAAC;gBACT,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;YACxB,CAAC;YACD,MAAM,CAAC,MAAM,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACjD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;YACnE,MAAM,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,aAAa,EAAE,CAAC;YAC/C,MAAM,CAAC,CAAC,MAAM,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC;QAC1D,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,0CAA0C,EAAE,KAAK,IAAI,EAAE;YACxD,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,CAAC;YAC5C,MAAM,MAAM,CACV,OAAQ,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,qDAAqD,EAAE,EAAE,GAAG,CAAC,CACtF,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,kBAAkB,EAAE,CAAC,CAAC;YACtD,MAAM,CAAC,MAAM,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAC/C,MAAM,EAAE,GAAG,MAAM,OAAQ,CAAC,OAAO,CAC/B,EAAE,GAAG,EAAE,gDAAgD,CAAC,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,EAC/E,GAAG,CACJ,CAAC;YACF,MAAM,CAAC,EAAE,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACpC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,+EAA+E,EAAE,KAAK,IAAI,EAAE;YAC7F,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,CAAC;YAC5C,MAAM,IAAI,GAAG,EAAE,GAAG,EAAE,8BAA8B,CAAC,CAAC,KAAK,SAAS,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC;YACnF,MAAM,OAAQ,CAAC,OAAO,CAAC,EAAE,GAAG,IAAI,EAAE,cAAc,EAAE,GAAG,EAAE,EAAE,GAAG,CAAC,CAAC;YAC9D,qDAAqD;YACrD,MAAM,KAAK,GAAG,MAAM,OAAQ,CAAC,OAAO,CAAC,EAAE,GAAG,IAAI,EAAE,cAAc,EAAE,GAAG,EAAE,EAAE,GAAG,CAAC,CAAC;YAC5E,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACrC,MAAM,CAAC,MAAM,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACvC,MAAM,MAAM,CACV,OAAQ,CAAC,OAAO,CAAC,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,EAAE,cAAc,EAAE,GAAG,EAAE,EAAE,GAAG,CAAC,CACtE,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,kBAAkB,EAAE,CAAC,CAAC;YACtD,MAAM,CAAC,MAAM,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACzC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,oDAAoD,EAAE,KAAK,IAAI,EAAE;YAClE,MAAM,CAAC,GAAG,IAAI,YAAY,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAI,CAAC,EAAE,oBAAoB,EAAE,CAAC,EAAE,CAAC,CAAC;YAC5F,MAAM,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;YACzB,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACnB,MAAM,KAAK,GAAG,CAAC,CAAC,kBAAkB,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,WAAW,CAAE,CAAC;YAC1E,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC;gBACtC,KAAK,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,eAAe,EAAE,EAAE,GAAG,CAAC;gBAC5C,KAAK,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,eAAe,EAAE,EAAE,GAAG,CAAC;aAC7C,CAAC,CAAC;YACH,MAAM,CAAC,CAAE,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YACpC,MAAM,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,EAAE,CAAC,CAAC;QACpF,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/__tests__/policy.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=policy.test.d.ts.map

package/dist/__tests__/policy.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/policy.test.ts"],"names":[],"mappings":""}

package/dist/__tests__/policy.test.js

@@ -0,0 +1,190 @@
+import { describe, expect, it } from 'vitest';
+import { classify, isColumnDenied, narrowPolicy, PolicySchema } from '../policy.js';
+import { stripDeniedKeys } from '../connector.js';
+const policy = PolicySchema.parse({
+    tables: { users: 'read', orders: 'write', 'public.secrets': 'none', audit_log: 'none' },
+    defaultAccess: 'read',
+    denyColumns: ['users.password_hash', '*.ssn'],
+});
+// [sql, allow, reason substring]
+const cases = [
+    // reads
+    ['SELECT email FROM users', true, 'Allowed'],
+    ['SELECT u.email FROM users u JOIN orders o ON o.user_id = u.id', true, 'Allowed'],
+    ['SELECT count(*) FROM users', true, 'Allowed'],
+    ['SELECT id, total_cents FROM orders', true, 'Allowed'],
+    // `*.column` rules can't know which tables have the column, so any SELECT * is denied.
+    ['SELECT * FROM orders', false, '*.ssn'],
+    ['SELECT id FROM unlisted_table', true, 'Allowed'],
+    // table access
+    ['SELECT * FROM audit_log', false, 'not accessible'],
+    ['SELECT * FROM public.secrets', false, 'not accessible'],
+    ['SELECT * FROM secrets', false, 'not accessible'], // unqualified can't dodge schema rule
+    ['SELECT id FROM users WHERE id IN (SELECT user_id FROM audit_log)', false, 'not accessible'],
+    // column denies
+    ['SELECT password_hash FROM users', false, 'users.password_hash'],
+    ['SELECT u.password_hash AS p FROM users u', false, 'users.password_hash'],
+    ['SELECT email FROM users WHERE password_hash = $1', false, 'users.password_hash'],
+    ['SELECT (SELECT password_hash FROM users LIMIT 1)', false, 'users.password_hash'],
+    ['SELECT * FROM users', false, 'SELECT *'],
+    ['SELECT u.* FROM users u', false, 'SELECT *'],
+    ['SELECT ssn FROM anything', false, '*.ssn'],
+    ['SELECT PASSWORD_HASH FROM Users', false, 'password_hash'],
+    // whole-row references return every column, denied ones included, inside one value
+    ['SELECT u FROM users u', false, 'Whole-row'],
+    ['SELECT users FROM users', false, 'Whole-row'],
+    ['SELECT to_jsonb(u) FROM users u', false, 'Whole-row'],
+    ['SELECT json_agg(u) FROM users u', false, 'Whole-row'],
+    ['SELECT u::text FROM users u', false, 'Whole-row'],
+    ['SELECT row_to_json(users) FROM users', false, 'Whole-row'],
+    ['SELECT o FROM orders o', false, '*.ssn'], // `*.col` rule: any whole row could carry it
+    ['SELECT o.id FROM orders o JOIN users u ON u.id = o.user_id', true, 'Allowed'],
+    // writes
+    ['INSERT INTO orders (user_id, total_cents) VALUES (1, 100)', true, 'Allowed'],
+    ['UPDATE orders SET total_cents = 1 WHERE id = 1', true, 'Allowed'],
+    ['DELETE FROM orders WHERE id = 1', true, 'Allowed'],
+    ["INSERT INTO users (email) VALUES ('x')", false, 'read-only'],
+    ['INSERT INTO unlisted_table (id) VALUES (1)', false, 'read-only'], // default never grants write
+    ['INSERT INTO orders (user_id) SELECT id FROM audit_log', false, 'not accessible'],
+    ['UPDATE orders SET total_cents = 0', false, 'without a WHERE'],
+    ['DELETE FROM orders', false, 'without a WHERE'],
+    ['UPDATE orders SET total_cents = 0 WHERE 1=1', false, 'names no column'],
+    ['DELETE FROM orders WHERE true', false, 'names no column'],
+    // server access through functions / INTO / system catalogs
+    ["SELECT pg_read_file('/etc/passwd')", false, 'pg_read_file'],
+    ["SELECT PG_READ_FILE('/etc/passwd')", false, 'pg_read_file'],
+    ["SELECT pg_catalog.pg_read_file('/etc/passwd')", false, 'pg_read_file'],
+    ["SELECT * FROM pg_ls_dir('.')", false, 'pg_ls_dir'],
+    ["SELECT email FROM users WHERE id = (SELECT lo_import('/etc/passwd'))", false, 'lo_import'],
+    ["SELECT dblink_connect('host=x')", false, 'dblink_connect'],
+    ['SELECT pg_sleep(10)', false, 'pg_sleep'],
+    ['SELECT * FROM information_schema.tables', false, 'System table'],
+    ['SELECT * FROM pg_catalog.pg_shadow', false, 'System table'],
+    ['SELECT * FROM pg_shadow', false, 'System table'],
+    // DDL / admin / multi-statement / garbage
+    ['DROP TABLE orders', false, 'always blocked'],
+    ['CREATE TABLE x (id int)', false, 'always blocked'],
+    ['ALTER TABLE orders ADD COLUMN y int', false, 'always blocked'],
+    ['TRUNCATE orders', false, 'always blocked'],
+    ['GRANT ALL ON orders TO public', false, ''],
+    ['SELECT 1; DROP TABLE orders', false, 'one statement'],
+    ['WITH x AS (DELETE FROM orders RETURNING id) SELECT * FROM x', false, ''],
+    ['SELEC oops', false, 'Could not parse'],
+];
+describe('classify (postgres)', () => {
+    it.each(cases)('%s → allow=%s', (sql, allow, reason) => {
+        const d = classify(sql, policy, 'postgres');
+        expect(d.allow, d.reason).toBe(allow);
+        expect(d.reason).toContain(reason);
+    });
+});
+describe('classify (mysql): file access', () => {
+    it.each([
+        ["SELECT LOAD_FILE('/etc/passwd')", 'load_file'],
+        ["SELECT * FROM orders INTO OUTFILE '/tmp/x'", 'INTO'],
+        ["SELECT id FROM orders INTO DUMPFILE '/tmp/x'", 'INTO'],
+        ['SELECT SLEEP(10)', 'sleep'],
+        ['SELECT * FROM mysql.user', 'System table'],
+    ])('%s denied', (sql, reason) => {
+        const d = classify(sql, policy, 'mysql');
+        expect(d.allow, d.reason).toBe(false);
+        expect(d.reason).toContain(reason);
+    });
+    it('a system table can be exposed by listing it explicitly', () => {
+        const p = PolicySchema.parse({ tables: { 'information_schema.tables': 'read' } });
+        expect(classify('SELECT * FROM information_schema.tables', p, 'mysql').allow).toBe(true);
+        expect(classify('SELECT * FROM information_schema.columns', p, 'mysql').allow).toBe(false);
+    });
+});
+describe('classify (sqlite): extensions', () => {
+    it('denies load_extension and sqlite_master', () => {
+        expect(classify("SELECT load_extension('x')", policy, 'sqlite').allow).toBe(false);
+        expect(classify('SELECT * FROM sqlite_master', policy, 'sqlite').allow).toBe(false);
+    });
+});
+describe('classify across dialects', () => {
+    it.each(['mysql', 'sqlite'])('%s: denies column + DDL, allows plain read', (dialect) => {
+        expect(classify('SELECT email FROM users', policy, dialect).allow).toBe(true);
+        expect(classify('SELECT password_hash FROM users', policy, dialect).allow).toBe(false);
+        expect(classify('DROP TABLE users', policy, dialect).allow).toBe(false);
+    });
+});
+describe('policy defaults', () => {
+    it('empty policy: reads allowed, every write denied', () => {
+        const p = PolicySchema.parse({});
+        expect(classify('SELECT * FROM anything', p, 'postgres').allow).toBe(true);
+        expect(classify('DELETE FROM anything WHERE id = 1', p, 'postgres').allow).toBe(false);
+    });
+    it('defaultAccess cannot be write', () => {
+        expect(() => PolicySchema.parse({ defaultAccess: 'write' })).toThrow();
+    });
+    it('defaultAccess none hides unlisted tables', () => {
+        const p = PolicySchema.parse({ defaultAccess: 'none', tables: { users: 'read' } });
+        expect(classify('SELECT id FROM users', p, 'postgres').allow).toBe(true);
+        expect(classify('SELECT id FROM other', p, 'postgres').allow).toBe(false);
+    });
+    it('most restrictive matching key wins', () => {
+        const p = PolicySchema.parse({ tables: { users: 'write', 'public.users': 'none' } });
+        expect(classify('SELECT id FROM public.users', p, 'postgres').allow).toBe(false);
+    });
+    it('isColumnDenied', () => {
+        expect(isColumnDenied(policy, 'public.users', 'password_hash')).toBe(true);
+        expect(isColumnDenied(policy, 'users', 'email')).toBe(false);
+        expect(isColumnDenied(policy, 'whatever', 'SSN')).toBe(true);
+    });
+});
+describe('narrowPolicy', () => {
+    const base = PolicySchema.parse({
+        tables: { 'public.users': 'none', orders: 'write' },
+        defaultAccess: 'none',
+        denyColumns: ['orders.card'],
+        maxRows: 50,
+    });
+    const wider = PolicySchema.parse({
+        tables: { users: 'write', orders: 'write', items: 'write' },
+        defaultAccess: 'read',
+        denyColumns: ['orders.note'],
+        maxRows: 500,
+        maxWritesPerCall: 10,
+    });
+    const n = narrowPolicy(base, wider);
+    it('never widens table access, even via a differently-qualified key', () => {
+        expect(classify('SELECT id FROM users', n, 'postgres').allow).toBe(false);
+        expect(classify('SELECT id FROM public.users', n, 'postgres').allow).toBe(false);
+        expect(classify('SELECT id FROM items', n, 'postgres').allow).toBe(false); // base default none
+        expect(n.defaultAccess).toBe('none');
+    });
+    it('keeps grants both sides agree on', () => {
+        expect(classify('DELETE FROM orders WHERE id = 1', n, 'postgres').allow).toBe(true);
+    });
+    it('unions deny lists and takes the smaller caps', () => {
+        expect(n.denyColumns.sort()).toEqual(['orders.card', 'orders.note']);
+        expect(n.maxRows).toBe(50);
+        expect(n.maxWritesPerCall).toBe(1);
+    });
+    it('can narrow further', () => {
+        const tighter = narrowPolicy(base, PolicySchema.parse({ tables: { orders: 'read' } }));
+        expect(classify('DELETE FROM orders WHERE id = 1', tighter, 'postgres').allow).toBe(false);
+        expect(classify('SELECT id FROM orders', tighter, 'postgres').allow).toBe(true);
+    });
+});
+describe('stripDeniedKeys (output-side filter)', () => {
+    const denied = new Set(['password_hash', 'ssn']);
+    it('drops denied keys at any depth, in objects and arrays', () => {
+        const rows = [
+            { id: 1, password_hash: 'x', profile: { ssn: '1', name: 'a' } },
+            { agg: [{ id: 2, PASSWORD_HASH: 'y' }, { id: 3 }] },
+        ];
+        expect(stripDeniedKeys(rows, denied)).toEqual([
+            { id: 1, profile: { name: 'a' } },
+            { agg: [{ id: 2 }, { id: 3 }] },
+        ]);
+    });
+    it('leaves scalars, nulls, and class instances alone', () => {
+        const d = new Date(0);
+        expect(stripDeniedKeys([{ at: d, n: null, s: 'ssn' }], denied)).toEqual([
+            { at: d, n: null, s: 'ssn' },
+        ]);
+    });
+});
+//# sourceMappingURL=policy.test.js.map

package/dist/__tests__/policy.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.test.js","sourceRoot":"","sources":["../../src/__tests__/policy.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,YAAY,EAAE,YAAY,EAAe,MAAM,cAAc,CAAC;AACjG,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAElD,MAAM,MAAM,GAAW,YAAY,CAAC,KAAK,CAAC;IACxC,MAAM,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,gBAAgB,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE;IACvF,aAAa,EAAE,MAAM;IACrB,WAAW,EAAE,CAAC,qBAAqB,EAAE,OAAO,CAAC;CAC9C,CAAC,CAAC;AAEH,iCAAiC;AACjC,MAAM,KAAK,GAAqC;IAC9C,QAAQ;IACR,CAAC,yBAAyB,EAAE,IAAI,EAAE,SAAS,CAAC;IAC5C,CAAC,+DAA+D,EAAE,IAAI,EAAE,SAAS,CAAC;IAClF,CAAC,4BAA4B,EAAE,IAAI,EAAE,SAAS,CAAC;IAC/C,CAAC,oCAAoC,EAAE,IAAI,EAAE,SAAS,CAAC;IACvD,uFAAuF;IACvF,CAAC,sBAAsB,EAAE,KAAK,EAAE,OAAO,CAAC;IACxC,CAAC,+BAA+B,EAAE,IAAI,EAAE,SAAS,CAAC;IAElD,eAAe;IACf,CAAC,yBAAyB,EAAE,KAAK,EAAE,gBAAgB,CAAC;IACpD,CAAC,8BAA8B,EAAE,KAAK,EAAE,gBAAgB,CAAC;IACzD,CAAC,uBAAuB,EAAE,KAAK,EAAE,gBAAgB,CAAC,EAAE,sCAAsC;IAC1F,CAAC,kEAAkE,EAAE,KAAK,EAAE,gBAAgB,CAAC;IAE7F,gBAAgB;IAChB,CAAC,iCAAiC,EAAE,KAAK,EAAE,qBAAqB,CAAC;IACjE,CAAC,0CAA0C,EAAE,KAAK,EAAE,qBAAqB,CAAC;IAC1E,CAAC,kDAAkD,EAAE,KAAK,EAAE,qBAAqB,CAAC;IAClF,CAAC,kDAAkD,EAAE,KAAK,EAAE,qBAAqB,CAAC;IAClF,CAAC,qBAAqB,EAAE,KAAK,EAAE,UAAU,CAAC;IAC1C,CAAC,yBAAyB,EAAE,KAAK,EAAE,UAAU,CAAC;IAC9C,CAAC,0BAA0B,EAAE,KAAK,EAAE,OAAO,CAAC;IAC5C,CAAC,iCAAiC,EAAE,KAAK,EAAE,eAAe,CAAC;IAC3D,mFAAmF;IACnF,CAAC,uBAAuB,EAAE,KAAK,EAAE,WAAW,CAAC;IAC7C,CAAC,yBAAyB,EAAE,KAAK,EAAE,WAAW,CAAC;IAC/C,CAAC,iCAAiC,EAAE,KAAK,EAAE,WAAW,CAAC;IACvD,CAAC,iCAAiC,EAAE,KAAK,EAAE,WAAW,CAAC;IACvD,CAAC,6BAA6B,EAAE,KAAK,EAAE,WAAW,CAAC;IACnD,CAAC,sCAAsC,EAAE,KAAK,EAAE,WAAW,CAAC;IAC5D,CAAC,wBAAwB,EAAE,KAAK,EAAE,OAAO,CAAC,EAAE,6CAA6C;IACzF,CAAC,4DAA4D,EAAE,IAAI,EAAE,SAAS,CAAC;IAE/E,SAAS;IACT,CAAC,2DAA2D,EAAE,IAAI,EAAE,SAAS,CAAC;IAC9E,CAAC,gDAAgD,EAAE,IAAI,EAAE,SAAS,CAAC;IACnE,CAAC,iCAAiC,EAAE,IAAI,EAAE,SAAS,CAAC;IACpD,CAAC,wCAAwC,EAAE,KAAK,EAAE,WAAW,CAAC;IAC9D,CAAC,4CAA4C,EAAE,KAAK,EAAE,WAAW,CAAC,EAAE,6BAA6B;IACjG,CAAC,uDAAuD,EAAE,KAAK,EAAE,gBAAgB,CAAC;IAClF,CAAC,mCAAmC,EAAE,KAAK,EAAE,iBAAiB,CAAC;IAC/D,CAAC,oBAAoB,EAAE,KAAK,EAAE,iBAAiB,CAAC;IAChD,CAAC,6CAA6C,EAAE,KAAK,EAAE,iBAAiB,CAAC;IACzE,CAAC,+BAA+B,EAAE,KAAK,EAAE,iBAAiB,CAAC;IAE3D,2DAA2D;IAC3D,CAAC,oCAAoC,EAAE,KAAK,EAAE,cAAc,CAAC;IAC7D,CAAC,oCAAoC,EAAE,KAAK,EAAE,cAAc,CAAC;IAC7D,CAAC,+CAA+C,EAAE,KAAK,EAAE,cAAc,CAAC;IACxE,CAAC,8BAA8B,EAAE,KAAK,EAAE,WAAW,CAAC;IACpD,CAAC,sEAAsE,EAAE,KAAK,EAAE,WAAW,CAAC;IAC5F,CAAC,iCAAiC,EAAE,KAAK,EAAE,gBAAgB,CAAC;IAC5D,CAAC,qBAAqB,EAAE,KAAK,EAAE,UAAU,CAAC;IAC1C,CAAC,yCAAyC,EAAE,KAAK,EAAE,cAAc,CAAC;IAClE,CAAC,oCAAoC,EAAE,KAAK,EAAE,cAAc,CAAC;IAC7D,CAAC,yBAAyB,EAAE,KAAK,EAAE,cAAc,CAAC;IAElD,0CAA0C;IAC1C,CAAC,mBAAmB,EAAE,KAAK,EAAE,gBAAgB,CAAC;IAC9C,CAAC,yBAAyB,EAAE,KAAK,EAAE,gBAAgB,CAAC;IACpD,CAAC,qCAAqC,EAAE,KAAK,EAAE,gBAAgB,CAAC;IAChE,CAAC,iBAAiB,EAAE,KAAK,EAAE,gBAAgB,CAAC;IAC5C,CAAC,+BAA+B,EAAE,KAAK,EAAE,EAAE,CAAC;IAC5C,CAAC,6BAA6B,EAAE,KAAK,EAAE,eAAe,CAAC;IACvD,CAAC,6DAA6D,EAAE,KAAK,EAAE,EAAE,CAAC;IAC1E,CAAC,YAAY,EAAE,KAAK,EAAE,iBAAiB,CAAC;CACzC,CAAC;AAEF,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;IACnC,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,eAAe,EAAE,CAAC,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;QACrD,MAAM,CAAC,GAAG,QAAQ,CAAC,GAAG,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;QAC5C,MAAM,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACtC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,+BAA+B,EAAE,GAAG,EAAE;IAC7C,EAAE,CAAC,IAAI,CAAC;QACN,CAAC,iCAAiC,EAAE,WAAW,CAAC;QAChD,CAAC,4CAA4C,EAAE,MAAM,CAAC;QACtD,CAAC,8CAA8C,EAAE,MAAM,CAAC;QACxD,CAAC,kBAAkB,EAAE,OAAO,CAAC;QAC7B,CAAC,0BAA0B,EAAE,cAAc,CAAC;KAC7C,CAAC,CAAC,WAAW,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE;QAC9B,MAAM,CAAC,GAAG,QAAQ,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;QACzC,MAAM,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACtC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wDAAwD,EAAE,GAAG,EAAE;QAChE,MAAM,CAAC,GAAG,YAAY,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,EAAE,2BAA2B,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;QAClF,MAAM,CAAC,QAAQ,CAAC,yCAAyC,EAAE,CAAC,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzF,MAAM,CAAC,QAAQ,CAAC,0CAA0C,EAAE,CAAC,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC7F,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,+BAA+B,EAAE,GAAG,EAAE;IAC7C,EAAE,CAAC,yCAAyC,EAAE,GAAG,EAAE;QACjD,MAAM,CAAC,QAAQ,CAAC,4BAA4B,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnF,MAAM,CAAC,QAAQ,CAAC,6BAA6B,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACtF,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,0BAA0B,EAAE,GAAG,EAAE;IACxC,EAAE,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAU,CAAC,CAAC,4CAA4C,EAAE,CAAC,OAAO,EAAE,EAAE;QAC9F,MAAM,CAAC,QAAQ,CAAC,yBAAyB,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9E,MAAM,CAAC,QAAQ,CAAC,iCAAiC,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACvF,MAAM,CAAC,QAAQ,CAAC,kBAAkB,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC1E,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,iBAAiB,EAAE,GAAG,EAAE;IAC/B,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;QACzD,MAAM,CAAC,GAAG,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACjC,MAAM,CAAC,QAAQ,CAAC,wBAAwB,EAAE,CAAC,EAAE,UAAU,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3E,MAAM,CAAC,QAAQ,CAAC,mCAAmC,EAAE,CAAC,EAAE,UAAU,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACzF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+BAA+B,EAAE,GAAG,EAAE;QACvC,MAAM,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,aAAa,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;IACzE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;QAClD,MAAM,CAAC,GAAG,YAAY,CAAC,KAAK,CAAC,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;QACnF,MAAM,CAAC,QAAQ,CAAC,sBAAsB,EAAE,CAAC,EAAE,UAAU,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzE,MAAM,CAAC,QAAQ,CAAC,sBAAsB,EAAE,CAAC,EAAE,UAAU,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC5E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;QAC5C,MAAM,CAAC,GAAG,YAAY,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;QACrF,MAAM,CAAC,QAAQ,CAAC,6BAA6B,EAAE,CAAC,EAAE,UAAU,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACnF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gBAAgB,EAAE,GAAG,EAAE;QACxB,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE,cAAc,EAAE,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3E,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC7D,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC/D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,cAAc,EAAE,GAAG,EAAE;IAC5B,MAAM,IAAI,GAAG,YAAY,CAAC,KAAK,CAAC;QAC9B,MAAM,EAAE,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE;QACnD,aAAa,EAAE,MAAM;QACrB,WAAW,EAAE,CAAC,aAAa,CAAC;QAC5B,OAAO,EAAE,EAAE;KACZ,CAAC,CAAC;IACH,MAAM,KAAK,GAAG,YAAY,CAAC,KAAK,CAAC;QAC/B,MAAM,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE;QAC3D,aAAa,EAAE,MAAM;QACrB,WAAW,EAAE,CAAC,aAAa,CAAC;QAC5B,OAAO,EAAE,GAAG;QACZ,gBAAgB,EAAE,EAAE;KACrB,CAAC,CAAC;IACH,MAAM,CAAC,GAAG,YAAY,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAEpC,EAAE,CAAC,iEAAiE,EAAE,GAAG,EAAE;QACzE,MAAM,CAAC,QAAQ,CAAC,sBAAsB,EAAE,CAAC,EAAE,UAAU,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1E,MAAM,CAAC,QAAQ,CAAC,6BAA6B,EAAE,CAAC,EAAE,UAAU,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACjF,MAAM,CAAC,QAAQ,CAAC,sBAAsB,EAAE,CAAC,EAAE,UAAU,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,oBAAoB;QAC/F,MAAM,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kCAAkC,EAAE,GAAG,EAAE;QAC1C,MAAM,CAAC,QAAQ,CAAC,iCAAiC,EAAE,CAAC,EAAE,UAAU,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACtF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8CAA8C,EAAE,GAAG,EAAE;QACtD,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,aAAa,EAAE,aAAa,CAAC,CAAC,CAAC;QACrE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC3B,MAAM,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oBAAoB,EAAE,GAAG,EAAE;QAC5B,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,EAAE,YAAY,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC;QACvF,MAAM,CAAC,QAAQ,CAAC,iCAAiC,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC3F,MAAM,CAAC,QAAQ,CAAC,uBAAuB,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAClF,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,sCAAsC,EAAE,GAAG,EAAE;IACpD,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,CAAC,eAAe,EAAE,KAAK,CAAC,CAAC,CAAC;IACjD,EAAE,CAAC,uDAAuD,EAAE,GAAG,EAAE;QAC/D,MAAM,IAAI,GAAG;YACX,EAAE,EAAE,EAAE,CAAC,EAAE,aAAa,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;YAC/D,EAAE,GAAG,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,aAAa,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE;SACpD,CAAC;QACF,MAAM,CAAC,eAAe,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;YAC5C,EAAE,EAAE,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;YACjC,EAAE,GAAG,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE;SAChC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IACH,EAAE,CAAC,kDAAkD,EAAE,GAAG,EAAE;QAC1D,MAAM,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC;QACtB,MAAM,CAAC,eAAe,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;YACtE,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE;SAC7B,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/__tests__/sqlite.integration.test.js

@@ -119,15 +119,82 @@ d('sqlite end-to-end via SqlConnector', () => {
         expect(data.truncated).toBe(true);
         expect(r.metadata?.truncated).toBe(true);
     });
-    it('rejects non-read SQL with forbidden.read_only', async () => {
+    it('policy rejects writes before they reach the DB, with a reason', async () => {
         const t = tools['sqlite.test.query'];
-        await expect(t.handler({ sql: 'UPDATE users SET name = ? WHERE id = ?', params: ['Eve', 1] }, ctx)).rejects.toMatchObject({ code: 'forbidden.read_only' });
+        await expect(t.handler({ sql: 'UPDATE users SET name = ? WHERE id = ?', params: ['Eve', 1] }, ctx)).rejects.toMatchObject({
+            code: 'forbidden.policy',
+            message: expect.stringContaining('read-only'),
+        });
     });
-    it('rejects DDL with forbidden.read_only', async () => {
+    it('policy rejects DDL with a reason', async () => {
         const t = tools['sqlite.test.query'];
         await expect(t.handler({ sql: 'DROP TABLE users' }, ctx)).rejects.toMatchObject({
-            code: 'forbidden.read_only',
+            code: 'forbidden.policy',
+            message: expect.stringContaining('always blocked'),
+        });
+    });
+    it('DB-level read-only still blocks a write the policy allows (defense in depth)', async () => {
+        const c = new SqlConnector({
+            id: 'sqlite.rw',
+            dialect: new SqliteDialect(dbPath),
+            policy: {
+                tables: { users: 'write' },
+                defaultAccess: 'read',
+                denyColumns: [],
+                maxWritesPerCall: 1,
+            },
         });
+        await c.init({ logger: ctx.logger });
+        try {
+            const q = c.listPrimitiveTools().find((x) => x.name === 'sqlite.rw.query');
+            await expect(q.handler({ sql: "UPDATE users SET name = 'Eve' WHERE id = 1" }, ctx)).rejects.toMatchObject({ code: 'forbidden.read_only' });
+        }
+        finally {
+            await c.close();
+        }
+    });
+    it('dryRun returns the decision without executing', async () => {
+        const t = tools['sqlite.test.query'];
+        const r = await t.handler({ sql: 'DROP TABLE users', dryRun: true }, ctx);
+        const data = r.content[0]?.data;
+        expect(data.dryRun).toBe(true);
+        expect(data.decision.allow).toBe(false);
+        // table still there
+        const ok = await t.handler({ sql: 'SELECT count(*) AS n FROM users' }, ctx);
+        expect((ok.content[0]?.data).rows[0]?.n).toBe(2);
+    });
+    it('policy hides denied columns and tables from list_tables and blocks querying them', async () => {
+        const c = new SqlConnector({
+            id: 'sqlite.p',
+            dialect: new SqliteDialect(dbPath),
+            policy: {
+                tables: { orders: 'none' },
+                defaultAccess: 'read',
+                denyColumns: ['users.password_hash'],
+                maxWritesPerCall: 1,
+                maxRows: 1,
+            },
+        });
+        await c.init({ logger: ctx.logger });
+        try {
+            const byName = Object.fromEntries(c.listPrimitiveTools().map((x) => [x.name, x]));
+            const list = await byName['sqlite.p.list_tables'].handler({}, ctx);
+            const tables = list.content[0]?.data;
+            expect(tables.map((x) => x.name)).toEqual(['users']);
+            expect(tables[0].columns.map((x) => x.name)).not.toContain('password_hash');
+            const q = byName['sqlite.p.query'];
+            await expect(q.handler({ sql: 'SELECT password_hash FROM users' }, ctx)).rejects.toMatchObject({
+                code: 'forbidden.policy',
+            });
+            await expect(q.handler({ sql: 'SELECT id FROM orders' }, ctx)).rejects.toMatchObject({
+                code: 'forbidden.policy',
+            });
+            const r = await q.handler({ sql: 'SELECT email FROM users' }, ctx);
+            expect((r.content[0]?.data).rowCount).toBe(1); // maxRows
+        }
+        finally {
+            await c.close();
+        }
     });
     it('health() returns ok with a real latency reading', async () => {
         const h = await connector.health();
@@ -142,4 +209,115 @@ d('sqlite end-to-end via SqlConnector', () => {
         expect(snap.tables.length).toBe(2);
     });
 });
+d('sqlite writes via SqlConnector.execute', () => {
+    let tmpDir;
+    let dbPath;
+    const open = [];
+    const logger = { debug: () => { }, info: () => { }, warn: () => { }, error: () => { } };
+    const ctx = {
+        sessionId: 'w',
+        scopes: new Set(['tables:read', 'tables:write', 'query:raw']),
+        signal: new AbortController().signal,
+        limits: { rowCap: 100, timeoutMs: 5_000, maxBytes: 256 * 1024 },
+        logger,
+    };
+    async function connect(opts = {}) {
+        const c = new SqlConnector({
+            id: 'w',
+            dialect: new SqliteDialect(dbPath),
+            policy: { tables: { orders: 'write' }, maxWritesPerCall: 1 },
+            ...opts,
+        });
+        await c.init({ logger });
+        open.push(c);
+        return Object.fromEntries(c.listPrimitiveTools().map((t) => [t.name.slice(2), t]));
+    }
+    const count = async (q, where = '1=1') => ((await q.handler({ sql: `SELECT count(*) AS n FROM orders WHERE ${where}` }, ctx)).content[0]
+        ?.data).rows[0].n;
+    beforeAll(async () => {
+        tmpDir = mkdtempSync(join(tmpdir(), 'mcpolyglot-sqlite-w-'));
+        dbPath = join(tmpDir, 'w.db');
+        const Database = (await import('better-sqlite3')).default;
+        const seed = new Database(dbPath);
+        seed.exec(`
+      CREATE TABLE users (id INTEGER PRIMARY KEY, email TEXT);
+      CREATE TABLE orders (id INTEGER PRIMARY KEY, user_id INTEGER, total_cents INTEGER);
+      INSERT INTO users VALUES (1, 'a@x'), (2, 'b@x');
+      INSERT INTO orders VALUES (1, 1, 100), (2, 1, 200), (3, 2, 300);
+    `);
+        seed.close();
+    });
+    afterAll(async () => {
+        for (const c of open)
+            await c.close();
+        rmSync(tmpDir, { recursive: true, force: true });
+    });
+    it('execute is not registered when no table is writable', async () => {
+        const tools = await connect({ policy: { tables: { orders: 'read' } } });
+        expect(tools.execute).toBeUndefined();
+    });
+    it('read-only connection refuses a raw write even when the tool layer is bypassed', async () => {
+        const dialect = new SqliteDialect(dbPath);
+        await dialect.connect(); // default: read-only
+        try {
+            await expect(dialect.runWrite('UPDATE orders SET total_cents = 0 WHERE id = 1', [], {
+                maxRowsAffected: 10,
+                timeoutMs: 5_000,
+            })).rejects.toMatchObject({ code: 'forbidden.read_only' });
+        }
+        finally {
+            await dialect.close();
+        }
+    });
+    it('execute writes, returns rowsAffected, and is scoped tables:write', async () => {
+        const { execute, query } = await connect();
+        expect(execute.scopes).toEqual(['tables:write']);
+        expect(execute.readOnly).toBe(false);
+        const r = await execute.handler({ sql: 'UPDATE orders SET total_cents = ? WHERE id = ?', params: [101, 1] }, ctx);
+        expect(r.metadata?.rows).toBe(1);
+        expect(await count(query, 'total_cents = 101')).toBe(1);
+    });
+    it('execute over maxWritesPerCall rolls back', async () => {
+        const { execute, query } = await connect();
+        await expect(execute.handler({ sql: 'UPDATE orders SET total_cents = 0 WHERE user_id = 1' }, ctx)).rejects.toMatchObject({
+            code: 'forbidden.policy',
+            message: expect.stringMatching(/affected 2 rows.*maxWritesPerCall is 1/),
+        });
+        expect(await count(query, 'total_cents = 0')).toBe(0);
+    });
+    it('execute refuses reads and non-write tables, and honors dryRun', async () => {
+        const { execute, query } = await connect();
+        for (const sql of ['SELECT id FROM orders', "UPDATE users SET email = 'x' WHERE id = 1"]) {
+            await expect(execute.handler({ sql }, ctx)).rejects.toMatchObject({
+                code: 'forbidden.policy',
+            });
+        }
+        const before = await count(query);
+        const r = await execute.handler({ sql: 'INSERT INTO orders VALUES (99, 1, 1)', dryRun: true }, ctx);
+        expect((r.content[0]?.data).decision.allow).toBe(true);
+        expect(await count(query)).toBe(before);
+    });
+    it('idempotencyKey replays without re-executing; reuse with different args errors', async () => {
+        const { execute, query } = await connect();
+        const before = await count(query);
+        const args = { sql: 'INSERT INTO orders (user_id, total_cents) VALUES (?, ?)', params: [2, 7] };
+        const a = await execute.handler({ ...args, idempotencyKey: 'k1' }, ctx);
+        const b = await execute.handler({ ...args, idempotencyKey: 'k1' }, ctx);
+        expect(a.metadata?.rows).toBe(1);
+        expect(b.metadata?.rows).toBe(1);
+        expect(await count(query)).toBe(before + 1);
+        await expect(execute.handler({ ...args, params: [2, 8], idempotencyKey: 'k1' }, ctx)).rejects.toMatchObject({ code: 'invalid_argument' });
+        expect(await count(query)).toBe(before + 1);
+    });
+    it('maxConcurrentQueries rejects the call over the cap and frees the slot after', async () => {
+        const { query } = await connect({ maxConcurrentQueries: 1 });
+        const results = await Promise.allSettled([
+            query.handler({ sql: 'SELECT 1 AS x' }, ctx),
+            query.handler({ sql: 'SELECT 1 AS x' }, ctx),
+        ]);
+        expect(results[0].status).toBe('fulfilled');
+        expect(results[1]).toMatchObject({ status: 'rejected', reason: { code: 'rate_limited' } });
+        await expect(query.handler({ sql: 'SELECT 1 AS x' }, ctx)).resolves.toBeDefined();
+    });
+});
 //# sourceMappingURL=sqlite.integration.test.js.map