@neverinfamous/mysql-mcp 2.1.0

package/dist/adapters/mysql/tools/security/audit.d.ts

@@ -0,0 +1,20 @@
+/**
+ * MySQL Security - Audit and Firewall Tools
+ *
+ * Tools for security auditing, firewall monitoring, and compliance.
+ */
+import type { MySQLAdapter } from '../../MySQLAdapter.js';
+import type { ToolDefinition } from '../../../../types/index.js';
+/**
+ * Query audit log
+ */
+export declare function createSecurityAuditTool(adapter: MySQLAdapter): ToolDefinition;
+/**
+ * Get firewall status
+ */
+export declare function createSecurityFirewallStatusTool(adapter: MySQLAdapter): ToolDefinition;
+/**
+ * List firewall rules
+ */
+export declare function createSecurityFirewallRulesTool(adapter: MySQLAdapter): ToolDefinition;
+//# sourceMappingURL=audit.d.ts.map

package/dist/adapters/mysql/tools/security/audit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit.d.ts","sourceRoot":"","sources":["../../../../../src/adapters/mysql/tools/security/audit.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,KAAK,EAAE,cAAc,EAAkB,MAAM,4BAA4B,CAAC;AAsBjF;;GAEG;AACH,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,YAAY,GAAG,cAAc,CAuG7E;AAED;;GAEG;AACH,wBAAgB,gCAAgC,CAAC,OAAO,EAAE,YAAY,GAAG,cAAc,CAwDtF;AAED;;GAEG;AACH,wBAAgB,+BAA+B,CAAC,OAAO,EAAE,YAAY,GAAG,cAAc,CAqErF"}

package/dist/adapters/mysql/tools/security/audit.js

@@ -0,0 +1,233 @@
+/**
+ * MySQL Security - Audit and Firewall Tools
+ *
+ * Tools for security auditing, firewall monitoring, and compliance.
+ */
+import { z } from 'zod';
+// =============================================================================
+// Zod Schemas
+// ============================================================================
+const AuditLogSchema = z.object({
+    limit: z.number().default(100).describe('Maximum number of records'),
+    user: z.string().optional().describe('Filter by username'),
+    eventType: z.string().optional().describe('Filter by event type (e.g., "CONNECT", "QUERY")'),
+    startTime: z.string().optional().describe('Start time filter (ISO 8601)')
+});
+const FirewallRulesSchema = z.object({
+    user: z.string().optional().describe('Filter by username'),
+    mode: z.enum(['RECORDING', 'PROTECTING', 'DETECTING', 'OFF']).optional().describe('Filter by mode')
+});
+// =============================================================================
+// Tool Creation Functions
+// =============================================================================
+/**
+ * Query audit log
+ */
+export function createSecurityAuditTool(adapter) {
+    return {
+        name: 'mysql_security_audit',
+        title: 'MySQL Security Audit Log',
+        description: 'Query the MySQL audit log (requires Enterprise Audit or compatible plugin).',
+        group: 'security',
+        inputSchema: AuditLogSchema,
+        requiredScopes: ['admin'],
+        annotations: {
+            readOnlyHint: true,
+            idempotentHint: true
+        },
+        handler: async (params, _context) => {
+            const { limit, user, eventType, startTime } = AuditLogSchema.parse(params);
+            // First check if audit log table exists
+            try {
+                const checkResult = await adapter.executeQuery(`
+                    SELECT TABLE_NAME 
+                    FROM information_schema.TABLES 
+                    WHERE TABLE_SCHEMA = 'mysql' 
+                      AND TABLE_NAME = 'audit_log'
+                `);
+                if (!checkResult.rows || checkResult.rows.length === 0) {
+                    // Try performance_schema alternative
+                    let query = `
+                        SELECT 
+                            EVENT_NAME as event,
+                            OBJECT_TYPE as objectType,
+                            OBJECT_NAME as objectName,
+                            CURRENT_USER as user,
+                            HOST as host,
+                            TIMER_START as startTime
+                        FROM performance_schema.events_statements_history
+                    `;
+                    const conditions = [];
+                    const queryParams = [];
+                    if (user) {
+                        conditions.push('CURRENT_USER LIKE ?');
+                        queryParams.push(`%${user}%`);
+                    }
+                    if (conditions.length > 0) {
+                        query += ' WHERE ' + conditions.join(' AND ');
+                    }
+                    query += ` ORDER BY TIMER_START DESC LIMIT ${String(limit)}`;
+                    const result = await adapter.executeQuery(query, queryParams);
+                    return {
+                        source: 'performance_schema',
+                        message: 'Using performance_schema as audit log is not available',
+                        events: result.rows ?? [],
+                        count: result.rows?.length ?? 0
+                    };
+                }
+                // Query actual audit log
+                let query = `
+                    SELECT *
+                    FROM mysql.audit_log
+                `;
+                const conditions = [];
+                const queryParams = [];
+                if (user) {
+                    conditions.push('user LIKE ?');
+                    queryParams.push(`%${user}%`);
+                }
+                if (eventType) {
+                    conditions.push('event_type = ?');
+                    queryParams.push(eventType);
+                }
+                if (startTime) {
+                    conditions.push('timestamp >= ?');
+                    queryParams.push(startTime);
+                }
+                if (conditions.length > 0) {
+                    query += ' WHERE ' + conditions.join(' AND ');
+                }
+                query += ` ORDER BY timestamp DESC LIMIT ${String(limit)}`;
+                const result = await adapter.executeQuery(query, queryParams);
+                return {
+                    source: 'mysql.audit_log',
+                    events: result.rows ?? [],
+                    count: result.rows?.length ?? 0
+                };
+            }
+            catch {
+                return {
+                    available: false,
+                    message: 'Audit logging is not enabled. Install MySQL Enterprise Audit or Percona Audit plugin.',
+                    suggestion: 'Install audit plugin with: INSTALL PLUGIN audit_log SONAME "audit_log.so"'
+                };
+            }
+        }
+    };
+}
+/**
+ * Get firewall status
+ */
+export function createSecurityFirewallStatusTool(adapter) {
+    return {
+        name: 'mysql_security_firewall_status',
+        title: 'MySQL Firewall Status',
+        description: 'Get MySQL Enterprise Firewall plugin status.',
+        group: 'security',
+        inputSchema: z.object({}),
+        requiredScopes: ['read'],
+        annotations: {
+            readOnlyHint: true,
+            idempotentHint: true
+        },
+        handler: async (_params, _context) => {
+            try {
+                // Check if firewall plugin is installed
+                const pluginResult = await adapter.executeQuery(`
+                    SELECT PLUGIN_NAME, PLUGIN_STATUS
+                    FROM information_schema.PLUGINS
+                    WHERE PLUGIN_NAME LIKE '%firewall%'
+                `);
+                if (!pluginResult.rows || pluginResult.rows.length === 0) {
+                    return {
+                        installed: false,
+                        message: 'MySQL Enterprise Firewall is not installed',
+                        suggestion: 'Install with: INSTALL PLUGIN mysql_firewall SONAME "firewall.so"'
+                    };
+                }
+                // Get firewall variables
+                const varsResult = await adapter.executeQuery("SHOW VARIABLES LIKE 'mysql_firewall%'");
+                const variables = Object.fromEntries((varsResult.rows ?? []).map(row => {
+                    const r = row;
+                    const varName = typeof r['Variable_name'] === 'string' ? r['Variable_name'] : '';
+                    return [varName, r['Value']];
+                }));
+                return {
+                    installed: true,
+                    plugins: pluginResult.rows,
+                    configuration: variables
+                };
+            }
+            catch {
+                return {
+                    installed: false,
+                    message: 'Firewall plugin check failed',
+                    suggestion: 'Ensure you have privileges to view plugin information'
+                };
+            }
+        }
+    };
+}
+/**
+ * List firewall rules
+ */
+export function createSecurityFirewallRulesTool(adapter) {
+    return {
+        name: 'mysql_security_firewall_rules',
+        title: 'MySQL Firewall Rules',
+        description: 'List MySQL Enterprise Firewall allowlist rules.',
+        group: 'security',
+        inputSchema: FirewallRulesSchema,
+        requiredScopes: ['admin'],
+        annotations: {
+            readOnlyHint: true,
+            idempotentHint: true
+        },
+        handler: async (params, _context) => {
+            const { user, mode } = FirewallRulesSchema.parse(params);
+            try {
+                // Get firewall users
+                let usersQuery = `
+                    SELECT USERHOST, MODE
+                    FROM mysql.firewall_users
+                `;
+                const conditions = [];
+                const queryParams = [];
+                if (user) {
+                    conditions.push('USERHOST LIKE ?');
+                    queryParams.push(`%${user}%`);
+                }
+                if (mode) {
+                    conditions.push('MODE = ?');
+                    queryParams.push(mode);
+                }
+                if (conditions.length > 0) {
+                    usersQuery += ' WHERE ' + conditions.join(' AND ');
+                }
+                const usersResult = await adapter.executeQuery(usersQuery, queryParams);
+                // Get firewall whitelist
+                let rulesQuery = `
+                    SELECT USERHOST, RULE
+                    FROM mysql.firewall_whitelist
+                `;
+                if (user) {
+                    rulesQuery += ' WHERE USERHOST LIKE ?';
+                }
+                const rulesResult = await adapter.executeQuery(rulesQuery, user ? [`%${user}%`] : []);
+                return {
+                    users: usersResult.rows ?? [],
+                    rules: rulesResult.rows ?? [],
+                    userCount: usersResult.rows?.length ?? 0,
+                    ruleCount: rulesResult.rows?.length ?? 0
+                };
+            }
+            catch {
+                return {
+                    available: false,
+                    message: 'Firewall tables not accessible. Ensure MySQL Enterprise Firewall is installed and you have appropriate privileges.'
+                };
+            }
+        }
+    };
+}
+//# sourceMappingURL=audit.js.map

package/dist/adapters/mysql/tools/security/audit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit.js","sourceRoot":"","sources":["../../../../../src/adapters/mysql/tools/security/audit.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB,gFAAgF;AAChF,cAAc;AACd,+EAA+E;AAE/E,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,2BAA2B,CAAC;IACpE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,oBAAoB,CAAC;IAC1D,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,iDAAiD,CAAC;IAC5F,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,8BAA8B,CAAC;CAC5E,CAAC,CAAC;AAEH,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IACjC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,oBAAoB,CAAC;IAC1D,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,YAAY,EAAE,WAAW,EAAE,KAAK,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,gBAAgB,CAAC;CACtG,CAAC,CAAC;AAEH,gFAAgF;AAChF,0BAA0B;AAC1B,gFAAgF;AAEhF;;GAEG;AACH,MAAM,UAAU,uBAAuB,CAAC,OAAqB;IACzD,OAAO;QACH,IAAI,EAAE,sBAAsB;QAC5B,KAAK,EAAE,0BAA0B;QACjC,WAAW,EAAE,6EAA6E;QAC1F,KAAK,EAAE,UAAU;QACjB,WAAW,EAAE,cAAc;QAC3B,cAAc,EAAE,CAAC,OAAO,CAAC;QACzB,WAAW,EAAE;YACT,YAAY,EAAE,IAAI;YAClB,cAAc,EAAE,IAAI;SACvB;QACD,OAAO,EAAE,KAAK,EAAE,MAAe,EAAE,QAAwB,EAAE,EAAE;YACzD,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,cAAc,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YAE3E,wCAAwC;YACxC,IAAI,CAAC;gBACD,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC,YAAY,CAAC;;;;;iBAK9C,CAAC,CAAC;gBAEH,IAAI,CAAC,WAAW,CAAC,IAAI,IAAI,WAAW,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBACrD,qCAAqC;oBACrC,IAAI,KAAK,GAAG;;;;;;;;;qBASX,CAAC;oBAEF,MAAM,UAAU,GAAa,EAAE,CAAC;oBAChC,MAAM,WAAW,GAAc,EAAE,CAAC;oBAElC,IAAI,IAAI,EAAE,CAAC;wBACP,UAAU,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;wBACvC,WAAW,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC;oBAClC,CAAC;oBAED,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;wBACxB,KAAK,IAAI,SAAS,GAAG,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;oBAClD,CAAC;oBAED,KAAK,IAAI,oCAAoC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;oBAE7D,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,YAAY,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;oBAC9D,OAAO;wBACH,MAAM,EAAE,oBAAoB;wBAC5B,OAAO,EAAE,wDAAwD;wBACjE,MAAM,EAAE,MAAM,CAAC,IAAI,IAAI,EAAE;wBACzB,KAAK,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,IAAI,CAAC;qBAClC,CAAC;gBACN,CAAC;gBAED,yBAAyB;gBACzB,IAAI,KAAK,GAAG;;;iBAGX,CAAC;gBAEF,MAAM,UAAU,GAAa,EAAE,CAAC;gBAChC,MAAM,WAAW,GAAc,EAAE,CAAC;gBAElC,IAAI,IAAI,EAAE,CAAC;oBACP,UAAU,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;oBAC/B,WAAW,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC;gBAClC,CAAC;gBACD,IAAI,SAAS,EAAE,CAAC;oBACZ,UAAU,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;oBAClC,WAAW,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBAChC,CAAC;gBACD,IAAI,SAAS,EAAE,CAAC;oBACZ,UAAU,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;oBAClC,WAAW,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBAChC,CAAC;gBAED,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACxB,KAAK,IAAI,SAAS,GAAG,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBAClD,CAAC;gBAED,KAAK,IAAI,kCAAkC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;gBAE3D,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,YAAY,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;gBAC9D,OAAO;oBACH,MAAM,EAAE,iBAAiB;oBACzB,MAAM,EAAE,MAAM,CAAC,IAAI,IAAI,EAAE;oBACzB,KAAK,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,IAAI,CAAC;iBAClC,CAAC;YACN,CAAC;YAAC,MAAM,CAAC;gBACL,OAAO;oBACH,SAAS,EAAE,KAAK;oBAChB,OAAO,EAAE,uFAAuF;oBAChG,UAAU,EAAE,2EAA2E;iBAC1F,CAAC;YACN,CAAC;QACL,CAAC;KACJ,CAAC;AACN,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gCAAgC,CAAC,OAAqB;IAClE,OAAO;QACH,IAAI,EAAE,gCAAgC;QACtC,KAAK,EAAE,uBAAuB;QAC9B,WAAW,EAAE,8CAA8C;QAC3D,KAAK,EAAE,UAAU;QACjB,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;QACzB,cAAc,EAAE,CAAC,MAAM,CAAC;QACxB,WAAW,EAAE;YACT,YAAY,EAAE,IAAI;YAClB,cAAc,EAAE,IAAI;SACvB;QACD,OAAO,EAAE,KAAK,EAAE,OAAgB,EAAE,QAAwB,EAAE,EAAE;YAC1D,IAAI,CAAC;gBACD,wCAAwC;gBACxC,MAAM,YAAY,GAAG,MAAM,OAAO,CAAC,YAAY,CAAC;;;;iBAI/C,CAAC,CAAC;gBAEH,IAAI,CAAC,YAAY,CAAC,IAAI,IAAI,YAAY,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBACvD,OAAO;wBACH,SAAS,EAAE,KAAK;wBAChB,OAAO,EAAE,4CAA4C;wBACrD,UAAU,EAAE,kEAAkE;qBACjF,CAAC;gBACN,CAAC;gBAED,yBAAyB;gBACzB,MAAM,UAAU,GAAG,MAAM,OAAO,CAAC,YAAY,CACzC,uCAAuC,CAC1C,CAAC;gBAEF,MAAM,SAAS,GAA4B,MAAM,CAAC,WAAW,CACzD,CAAC,UAAU,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE;oBAC9B,MAAM,CAAC,GAAG,GAAG,CAAC;oBACd,MAAM,OAAO,GAAG,OAAO,CAAC,CAAC,eAAe,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;oBACjF,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;gBACjC,CAAC,CAAC,CACL,CAAC;gBAEF,OAAO;oBACH,SAAS,EAAE,IAAI;oBACf,OAAO,EAAE,YAAY,CAAC,IAAI;oBAC1B,aAAa,EAAE,SAAS;iBAC3B,CAAC;YACN,CAAC;YAAC,MAAM,CAAC;gBACL,OAAO;oBACH,SAAS,EAAE,KAAK;oBAChB,OAAO,EAAE,8BAA8B;oBACvC,UAAU,EAAE,uDAAuD;iBACtE,CAAC;YACN,CAAC;QACL,CAAC;KACJ,CAAC;AACN,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,+BAA+B,CAAC,OAAqB;IACjE,OAAO;QACH,IAAI,EAAE,+BAA+B;QACrC,KAAK,EAAE,sBAAsB;QAC7B,WAAW,EAAE,iDAAiD;QAC9D,KAAK,EAAE,UAAU;QACjB,WAAW,EAAE,mBAAmB;QAChC,cAAc,EAAE,CAAC,OAAO,CAAC;QACzB,WAAW,EAAE;YACT,YAAY,EAAE,IAAI;YAClB,cAAc,EAAE,IAAI;SACvB;QACD,OAAO,EAAE,KAAK,EAAE,MAAe,EAAE,QAAwB,EAAE,EAAE;YACzD,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,mBAAmB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YAEzD,IAAI,CAAC;gBACD,qBAAqB;gBACrB,IAAI,UAAU,GAAG;;;iBAGhB,CAAC;gBAEF,MAAM,UAAU,GAAa,EAAE,CAAC;gBAChC,MAAM,WAAW,GAAc,EAAE,CAAC;gBAElC,IAAI,IAAI,EAAE,CAAC;oBACP,UAAU,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;oBACnC,WAAW,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC;gBAClC,CAAC;gBACD,IAAI,IAAI,EAAE,CAAC;oBACP,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;oBAC5B,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAC3B,CAAC;gBAED,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACxB,UAAU,IAAI,SAAS,GAAG,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBACvD,CAAC;gBAED,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC,YAAY,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;gBAExE,yBAAyB;gBACzB,IAAI,UAAU,GAAG;;;iBAGhB,CAAC;gBAEF,IAAI,IAAI,EAAE,CAAC;oBACP,UAAU,IAAI,wBAAwB,CAAC;gBAC3C,CAAC;gBAED,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC,YAAY,CAC1C,UAAU,EACV,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAC5B,CAAC;gBAEF,OAAO;oBACH,KAAK,EAAE,WAAW,CAAC,IAAI,IAAI,EAAE;oBAC7B,KAAK,EAAE,WAAW,CAAC,IAAI,IAAI,EAAE;oBAC7B,SAAS,EAAE,WAAW,CAAC,IAAI,EAAE,MAAM,IAAI,CAAC;oBACxC,SAAS,EAAE,WAAW,CAAC,IAAI,EAAE,MAAM,IAAI,CAAC;iBAC3C,CAAC;YACN,CAAC;YAAC,MAAM,CAAC;gBACL,OAAO;oBACH,SAAS,EAAE,KAAK;oBAChB,OAAO,EAAE,oHAAoH;iBAChI,CAAC;YACN,CAAC;QACL,CAAC;KACJ,CAAC;AACN,CAAC"}

package/dist/adapters/mysql/tools/security/data-protection.d.ts

@@ -0,0 +1,20 @@
+/**
+ * MySQL Security - Data Protection Tools
+ *
+ * Tools for data masking, privilege management, and sensitive data identification.
+ */
+import type { MySQLAdapter } from '../../MySQLAdapter.js';
+import type { ToolDefinition } from '../../../../types/index.js';
+/**
+ * Mask sensitive data
+ */
+export declare function createSecurityMaskDataTool(_adapter: MySQLAdapter): ToolDefinition;
+/**
+ * Get comprehensive user privileges
+ */
+export declare function createSecurityUserPrivilegesTool(adapter: MySQLAdapter): ToolDefinition;
+/**
+ * Identify tables with potentially sensitive data
+ */
+export declare function createSecuritySensitiveTablesTool(adapter: MySQLAdapter): ToolDefinition;
+//# sourceMappingURL=data-protection.d.ts.map

package/dist/adapters/mysql/tools/security/data-protection.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"data-protection.d.ts","sourceRoot":"","sources":["../../../../../src/adapters/mysql/tools/security/data-protection.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,KAAK,EAAE,cAAc,EAAkB,MAAM,4BAA4B,CAAC;AAgCjF;;GAEG;AACH,wBAAgB,0BAA0B,CAAC,QAAQ,EAAE,YAAY,GAAG,cAAc,CAgEjF;AAED;;GAEG;AACH,wBAAgB,gCAAgC,CAAC,OAAO,EAAE,YAAY,GAAG,cAAc,CAgGtF;AAED;;GAEG;AACH,wBAAgB,iCAAiC,CAAC,OAAO,EAAE,YAAY,GAAG,cAAc,CA4DvF"}

package/dist/adapters/mysql/tools/security/data-protection.js

@@ -0,0 +1,243 @@
+/**
+ * MySQL Security - Data Protection Tools
+ *
+ * Tools for data masking, privilege management, and sensitive data identification.
+ */
+import { z } from 'zod';
+// =============================================================================
+// Zod Schemas
+// =============================================================================
+const MaskDataSchema = z.object({
+    value: z.string().describe('Value to mask'),
+    type: z.enum(['email', 'phone', 'ssn', 'credit_card', 'partial']).describe('Masking type'),
+    keepFirst: z.number().default(0).describe('Characters to keep from start'),
+    keepLast: z.number().default(0).describe('Characters to keep from end'),
+    maskChar: z.string().default('*').describe('Character to use for masking')
+});
+const UserPrivilegesSchema = z.object({
+    user: z.string().optional().describe('Filter by username'),
+    host: z.string().default('%').describe('Host pattern'),
+    includeRoles: z.boolean().default(true).describe('Include role grants')
+});
+const SensitiveTablesSchema = z.object({
+    schema: z.string().optional().describe('Schema to scan (defaults to current database)'),
+    patterns: z.array(z.string()).default([
+        'password', 'secret', 'token', 'key', 'ssn', 'credit', 'card',
+        'phone', 'email', 'address', 'salary', 'medical', 'health'
+    ]).describe('Column name patterns to consider sensitive')
+});
+// =============================================================================
+// Tool Creation Functions
+// =============================================================================
+/**
+ * Mask sensitive data
+ */
+export function createSecurityMaskDataTool(_adapter) {
+    return {
+        name: 'mysql_security_mask_data',
+        title: 'MySQL Data Masking',
+        description: 'Apply data masking to sensitive values (implementation for Community Edition).',
+        group: 'security',
+        inputSchema: MaskDataSchema,
+        requiredScopes: ['read'],
+        annotations: {
+            readOnlyHint: true,
+            idempotentHint: true
+        },
+        handler: (params, _context) => {
+            const { value, type, keepFirst, keepLast, maskChar } = MaskDataSchema.parse(params);
+            let maskedValue;
+            switch (type) {
+                case 'email': {
+                    const atIndex = value.indexOf('@');
+                    if (atIndex > 0) {
+                        const localPart = value.substring(0, atIndex);
+                        const domain = value.substring(atIndex);
+                        const maskedLocal = localPart.length > 2
+                            ? localPart[0] + maskChar.repeat(localPart.length - 2) + localPart[localPart.length - 1]
+                            : maskChar.repeat(localPart.length);
+                        maskedValue = maskedLocal + domain;
+                    }
+                    else {
+                        maskedValue = maskChar.repeat(value.length);
+                    }
+                    break;
+                }
+                case 'phone': {
+                    // Keep last 4 digits, mask rest
+                    const digits = value.replace(/\D/g, '');
+                    maskedValue = maskChar.repeat(Math.max(0, digits.length - 4)) + digits.slice(-4);
+                    break;
+                }
+                case 'ssn': {
+                    // Show only last 4
+                    const ssnDigits = value.replace(/\D/g, '');
+                    maskedValue = `${maskChar}${maskChar}${maskChar}-${maskChar}${maskChar}-${ssnDigits.slice(-4)}`;
+                    break;
+                }
+                case 'credit_card': {
+                    // Show first 4 and last 4
+                    const ccDigits = value.replace(/\D/g, '');
+                    maskedValue = ccDigits.slice(0, 4) + maskChar.repeat(Math.max(0, ccDigits.length - 8)) + ccDigits.slice(-4);
+                    break;
+                }
+                case 'partial': {
+                    const maskLength = Math.max(0, value.length - keepFirst - keepLast);
+                    maskedValue = value.slice(0, keepFirst) +
+                        maskChar.repeat(maskLength) +
+                        (keepLast > 0 ? value.slice(-keepLast) : '');
+                    break;
+                }
+                default:
+                    maskedValue = maskChar.repeat(value.length);
+            }
+            return Promise.resolve({ original: value, masked: maskedValue, type });
+        }
+    };
+}
+/**
+ * Get comprehensive user privileges
+ */
+export function createSecurityUserPrivilegesTool(adapter) {
+    return {
+        name: 'mysql_security_user_privileges',
+        title: 'MySQL User Privileges',
+        description: 'Get comprehensive privilege report for users.',
+        group: 'security',
+        inputSchema: UserPrivilegesSchema,
+        requiredScopes: ['admin'],
+        annotations: {
+            readOnlyHint: true,
+            idempotentHint: true
+        },
+        handler: async (params, _context) => {
+            const { user, host, includeRoles } = UserPrivilegesSchema.parse(params);
+            // Get users
+            let usersQuery = `
+                SELECT User, Host, 
+                       plugin as authPlugin,
+                       account_locked as accountLocked,
+                       password_expired as passwordExpired,
+                       password_lifetime as passwordLifetime,
+                       max_connections as maxConnections,
+                       max_user_connections as maxUserConnections
+                FROM mysql.user
+            `;
+            const conditions = [];
+            const queryParams = [];
+            if (user) {
+                conditions.push('User = ?');
+                queryParams.push(user);
+            }
+            if (host !== '%') {
+                conditions.push('Host = ?');
+                queryParams.push(host);
+            }
+            if (conditions.length > 0) {
+                usersQuery += ' WHERE ' + conditions.join(' AND ');
+            }
+            const usersResult = await adapter.executeQuery(usersQuery, queryParams);
+            // For each user, get their grants
+            const userPrivileges = [];
+            for (const userRow of (usersResult.rows ?? [])) {
+                const u = userRow;
+                const userName = u['User'];
+                const userHost = u['Host'];
+                const grantsResult = await adapter.executeQuery(`SHOW GRANTS FOR '${userName}'@'${userHost}'`);
+                const grants = (grantsResult.rows ?? []).map(r => {
+                    const values = Object.values(r);
+                    return values[0];
+                });
+                let roles = [];
+                if (includeRoles) {
+                    try {
+                        const rolesResult = await adapter.executeQuery(`
+                            SELECT FROM_USER, FROM_HOST
+                            FROM mysql.role_edges
+                            WHERE TO_USER = ? AND TO_HOST = ?
+                        `, [userName, userHost]);
+                        roles = (rolesResult.rows ?? []).map(r => {
+                            const role = r;
+                            return `${role['FROM_USER']}@${role['FROM_HOST']}`;
+                        });
+                    }
+                    catch {
+                        // Role edges table might not exist in older versions
+                    }
+                }
+                userPrivileges.push({
+                    user: userName,
+                    host: userHost,
+                    authPlugin: u['authPlugin'],
+                    accountLocked: u['accountLocked'] === 'Y',
+                    passwordExpired: u['passwordExpired'] === 'Y',
+                    grants,
+                    roles
+                });
+            }
+            return {
+                users: userPrivileges,
+                count: userPrivileges.length
+            };
+        }
+    };
+}
+/**
+ * Identify tables with potentially sensitive data
+ */
+export function createSecuritySensitiveTablesTool(adapter) {
+    return {
+        name: 'mysql_security_sensitive_tables',
+        title: 'MySQL Sensitive Tables',
+        description: 'Identify tables and columns that may contain sensitive data.',
+        group: 'security',
+        inputSchema: SensitiveTablesSchema,
+        requiredScopes: ['read'],
+        annotations: {
+            readOnlyHint: true,
+            idempotentHint: true
+        },
+        handler: async (params, _context) => {
+            const { schema, patterns } = SensitiveTablesSchema.parse(params);
+            // Build pattern conditions
+            const patternConditions = patterns.map(() => 'COLUMN_NAME LIKE ?').join(' OR ');
+            const patternParams = patterns.map(p => `%${p}%`);
+            const query = `
+                SELECT 
+                    TABLE_NAME as tableName,
+                    COLUMN_NAME as columnName,
+                    DATA_TYPE as dataType,
+                    COLUMN_TYPE as columnType,
+                    IS_NULLABLE as nullable,
+                    COLUMN_COMMENT as comment
+                FROM information_schema.COLUMNS
+                WHERE TABLE_SCHEMA = COALESCE(?, DATABASE())
+                  AND (${patternConditions})
+                ORDER BY TABLE_NAME, COLUMN_NAME
+            `;
+            const result = await adapter.executeQuery(query, [schema ?? null, ...patternParams]);
+            // Group by table
+            const tableMap = new Map();
+            for (const row of (result.rows ?? [])) {
+                const r = row;
+                const tableName = r['tableName'];
+                if (!tableMap.has(tableName)) {
+                    tableMap.set(tableName, []);
+                }
+                tableMap.get(tableName)?.push(r);
+            }
+            const sensitiveItems = Array.from(tableMap.entries()).map(([table, columns]) => ({
+                table,
+                sensitiveColumns: columns,
+                columnCount: columns.length
+            }));
+            return {
+                sensitiveTables: sensitiveItems,
+                tableCount: sensitiveItems.length,
+                totalSensitiveColumns: result.rows?.length ?? 0,
+                patternsUsed: patterns
+            };
+        }
+    };
+}
+//# sourceMappingURL=data-protection.js.map

package/dist/adapters/mysql/tools/security/data-protection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"data-protection.js","sourceRoot":"","sources":["../../../../../src/adapters/mysql/tools/security/data-protection.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB,gFAAgF;AAChF,cAAc;AACd,gFAAgF;AAEhF,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,eAAe,CAAC;IAC3C,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,cAAc,CAAC;IAC1F,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,+BAA+B,CAAC;IAC1E,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,6BAA6B,CAAC;IACvE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,8BAA8B,CAAC;CAC7E,CAAC,CAAC;AAEH,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAClC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,oBAAoB,CAAC;IAC1D,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,cAAc,CAAC;IACtD,YAAY,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,qBAAqB,CAAC;CAC1E,CAAC,CAAC;AAEH,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IACnC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,+CAA+C,CAAC;IACvF,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC;QAClC,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM;QAC7D,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ;KAC7D,CAAC,CAAC,QAAQ,CAAC,4CAA4C,CAAC;CAC5D,CAAC,CAAC;AAEH,gFAAgF;AAChF,0BAA0B;AAC1B,gFAAgF;AAEhF;;GAEG;AACH,MAAM,UAAU,0BAA0B,CAAC,QAAsB;IAC7D,OAAO;QACH,IAAI,EAAE,0BAA0B;QAChC,KAAK,EAAE,oBAAoB;QAC3B,WAAW,EAAE,gFAAgF;QAC7F,KAAK,EAAE,UAAU;QACjB,WAAW,EAAE,cAAc;QAC3B,cAAc,EAAE,CAAC,MAAM,CAAC;QACxB,WAAW,EAAE;YACT,YAAY,EAAE,IAAI;YAClB,cAAc,EAAE,IAAI;SACvB;QACD,OAAO,EAAE,CAAC,MAAe,EAAE,QAAwB,EAAoB,EAAE;YACrE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,cAAc,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YAEpF,IAAI,WAAmB,CAAC;YAExB,QAAQ,IAAI,EAAE,CAAC;gBACX,KAAK,OAAO,CAAC,CAAC,CAAC;oBACX,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;oBACnC,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;wBACd,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;wBAC9C,MAAM,MAAM,GAAG,KAAK,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;wBACxC,MAAM,WAAW,GAAG,SAAS,CAAC,MAAM,GAAG,CAAC;4BACpC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,SAAS,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC;4BACxF,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;wBACxC,WAAW,GAAG,WAAW,GAAG,MAAM,CAAC;oBACvC,CAAC;yBAAM,CAAC;wBACJ,WAAW,GAAG,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;oBAChD,CAAC;oBACD,MAAM;gBACV,CAAC;gBACD,KAAK,OAAO,CAAC,CAAC,CAAC;oBACX,gCAAgC;oBAChC,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;oBACxC,WAAW,GAAG,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;oBACjF,MAAM;gBACV,CAAC;gBACD,KAAK,KAAK,CAAC,CAAC,CAAC;oBACT,mBAAmB;oBACnB,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;oBAC3C,WAAW,GAAG,GAAG,QAAQ,GAAG,QAAQ,GAAG,QAAQ,IAAI,QAAQ,GAAG,QAAQ,IAAI,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;oBAChG,MAAM;gBACV,CAAC;gBACD,KAAK,aAAa,CAAC,CAAC,CAAC;oBACjB,0BAA0B;oBAC1B,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;oBAC1C,WAAW,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;oBAC5G,MAAM;gBACV,CAAC;gBACD,KAAK,SAAS,CAAC,CAAC,CAAC;oBACb,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,MAAM,GAAG,SAAS,GAAG,QAAQ,CAAC,CAAC;oBACpE,WAAW,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC;wBACnC,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC;wBAC3B,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;oBACjD,MAAM;gBACV,CAAC;gBACD;oBACI,WAAW,GAAG,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YACpD,CAAC;YAED,OAAO,OAAO,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3E,CAAC;KACJ,CAAC;AACN,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gCAAgC,CAAC,OAAqB;IAClE,OAAO;QACH,IAAI,EAAE,gCAAgC;QACtC,KAAK,EAAE,uBAAuB;QAC9B,WAAW,EAAE,+CAA+C;QAC5D,KAAK,EAAE,UAAU;QACjB,WAAW,EAAE,oBAAoB;QACjC,cAAc,EAAE,CAAC,OAAO,CAAC;QACzB,WAAW,EAAE;YACT,YAAY,EAAE,IAAI;YAClB,cAAc,EAAE,IAAI;SACvB;QACD,OAAO,EAAE,KAAK,EAAE,MAAe,EAAE,QAAwB,EAAE,EAAE;YACzD,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,YAAY,EAAE,GAAG,oBAAoB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YAExE,YAAY;YACZ,IAAI,UAAU,GAAG;;;;;;;;;aAShB,CAAC;YAEF,MAAM,UAAU,GAAa,EAAE,CAAC;YAChC,MAAM,WAAW,GAAc,EAAE,CAAC;YAElC,IAAI,IAAI,EAAE,CAAC;gBACP,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;gBAC5B,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC3B,CAAC;YACD,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;gBACf,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;gBAC5B,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC3B,CAAC;YAED,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACxB,UAAU,IAAI,SAAS,GAAG,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACvD,CAAC;YAED,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC,YAAY,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;YAExE,kCAAkC;YAClC,MAAM,cAAc,GAAG,EAAE,CAAC;YAC1B,KAAK,MAAM,OAAO,IAAI,CAAC,WAAW,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,CAAC;gBAC7C,MAAM,CAAC,GAAG,OAAO,CAAC;gBAClB,MAAM,QAAQ,GAAG,CAAC,CAAC,MAAM,CAAW,CAAC;gBACrC,MAAM,QAAQ,GAAG,CAAC,CAAC,MAAM,CAAW,CAAC;gBAErC,MAAM,YAAY,GAAG,MAAM,OAAO,CAAC,YAAY,CAC3C,oBAAoB,QAAQ,MAAM,QAAQ,GAAG,CAChD,CAAC;gBAEF,MAAM,MAAM,GAAG,CAAC,YAAY,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE;oBAC7C,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;oBAChC,OAAO,MAAM,CAAC,CAAC,CAAW,CAAC;gBAC/B,CAAC,CAAC,CAAC;gBAEH,IAAI,KAAK,GAAa,EAAE,CAAC;gBACzB,IAAI,YAAY,EAAE,CAAC;oBACf,IAAI,CAAC;wBACD,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC,YAAY,CAAC;;;;yBAI9C,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC;wBAEzB,KAAK,GAAG,CAAC,WAAW,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE;4BACrC,MAAM,IAAI,GAAG,CAAC,CAAC;4BACf,OAAO,GAAG,IAAI,CAAC,WAAW,CAAW,IAAI,IAAI,CAAC,WAAW,CAAW,EAAE,CAAC;wBAC3E,CAAC,CAAC,CAAC;oBACP,CAAC;oBAAC,MAAM,CAAC;wBACL,qDAAqD;oBACzD,CAAC;gBACL,CAAC;gBAED,cAAc,CAAC,IAAI,CAAC;oBAChB,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,QAAQ;oBACd,UAAU,EAAE,CAAC,CAAC,YAAY,CAAC;oBAC3B,aAAa,EAAE,CAAC,CAAC,eAAe,CAAC,KAAK,GAAG;oBACzC,eAAe,EAAE,CAAC,CAAC,iBAAiB,CAAC,KAAK,GAAG;oBAC7C,MAAM;oBACN,KAAK;iBACR,CAAC,CAAC;YACP,CAAC;YAED,OAAO;gBACH,KAAK,EAAE,cAAc;gBACrB,KAAK,EAAE,cAAc,CAAC,MAAM;aAC/B,CAAC;QACN,CAAC;KACJ,CAAC;AACN,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iCAAiC,CAAC,OAAqB;IACnE,OAAO;QACH,IAAI,EAAE,iCAAiC;QACvC,KAAK,EAAE,wBAAwB;QAC/B,WAAW,EAAE,8DAA8D;QAC3E,KAAK,EAAE,UAAU;QACjB,WAAW,EAAE,qBAAqB;QAClC,cAAc,EAAE,CAAC,MAAM,CAAC;QACxB,WAAW,EAAE;YACT,YAAY,EAAE,IAAI;YAClB,cAAc,EAAE,IAAI;SACvB;QACD,OAAO,EAAE,KAAK,EAAE,MAAe,EAAE,QAAwB,EAAE,EAAE;YACzD,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,qBAAqB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YAEjE,2BAA2B;YAC3B,MAAM,iBAAiB,GAAG,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,oBAAoB,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAChF,MAAM,aAAa,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAElD,MAAM,KAAK,GAAG;;;;;;;;;;yBAUD,iBAAiB;;aAE7B,CAAC;YAEF,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC,MAAM,IAAI,IAAI,EAAE,GAAG,aAAa,CAAC,CAAC,CAAC;YAErF,iBAAiB;YACjB,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAqC,CAAC;YAC9D,KAAK,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,CAAC;gBACpC,MAAM,CAAC,GAAG,GAAG,CAAC;gBACd,MAAM,SAAS,GAAG,CAAC,CAAC,WAAW,CAAW,CAAC;gBAC3C,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;oBAC3B,QAAQ,CAAC,GAAG,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;gBAChC,CAAC;gBACD,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;YACrC,CAAC;YAED,MAAM,cAAc,GAAG,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC;gBAC7E,KAAK;gBACL,gBAAgB,EAAE,OAAO;gBACzB,WAAW,EAAE,OAAO,CAAC,MAAM;aAC9B,CAAC,CAAC,CAAC;YAEJ,OAAO;gBACH,eAAe,EAAE,cAAc;gBAC/B,UAAU,EAAE,cAAc,CAAC,MAAM;gBACjC,qBAAqB,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,IAAI,CAAC;gBAC/C,YAAY,EAAE,QAAQ;aACzB,CAAC;QACN,CAAC;KACJ,CAAC;AACN,CAAC"}

package/dist/adapters/mysql/tools/security/encryption.d.ts

@@ -0,0 +1,20 @@
+/**
+ * MySQL Security - Encryption and SSL Tools
+ *
+ * Tools for SSL/TLS monitoring, encryption status, and password validation.
+ */
+import type { MySQLAdapter } from '../../MySQLAdapter.js';
+import type { ToolDefinition } from '../../../../types/index.js';
+/**
+ * Get SSL/TLS connection status
+ */
+export declare function createSecuritySSLStatusTool(adapter: MySQLAdapter): ToolDefinition;
+/**
+ * Check encryption status
+ */
+export declare function createSecurityEncryptionStatusTool(adapter: MySQLAdapter): ToolDefinition;
+/**
+ * Validate password strength
+ */
+export declare function createSecurityPasswordValidateTool(adapter: MySQLAdapter): ToolDefinition;
+//# sourceMappingURL=encryption.d.ts.map

package/dist/adapters/mysql/tools/security/encryption.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"encryption.d.ts","sourceRoot":"","sources":["../../../../../src/adapters/mysql/tools/security/encryption.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,KAAK,EAAE,cAAc,EAAkB,MAAM,4BAA4B,CAAC;AAcjF;;GAEG;AACH,wBAAgB,2BAA2B,CAAC,OAAO,EAAE,YAAY,GAAG,cAAc,CAyEjF;AAED;;GAEG;AACH,wBAAgB,kCAAkC,CAAC,OAAO,EAAE,YAAY,GAAG,cAAc,CAoExF;AAED;;GAEG;AACH,wBAAgB,kCAAkC,CAAC,OAAO,EAAE,YAAY,GAAG,cAAc,CA4DxF"}