@nifrajs/mcp-db 2.11.0 → 2.12.0

package/dist/index.d.ts

@@ -31,6 +31,10 @@ export interface SqliteDatabaseLike {
     };
     /** Execute a statement for its side effect (used only for `PRAGMA query_only`). */
     run(sql: string): unknown;
+    /** Optional path this database was opened from; a file-backed one can be reopened read-only in a
+     * worker so `run_query` runs off the serving connection. `:memory:` and the empty anonymous
+     * database cannot, and run in process. */
+    readonly filename?: string;
 }
 /** Context forwarded to `authorize` - the inbound HTTP Request carrying the `run_query` call. */
 export interface McpDbAuthorizeContext {
@@ -49,6 +53,19 @@ export interface RunQueryOptions {
     readonly maxRows?: number;
     /** Max serialized result size in bytes (default 100 KB). */
     readonly maxResultBytes?: number;
+    /**
+     * Maximum wall-clock time for planning, execution, and optional counting (default 5 seconds).
+     * The deadline always bounds the RESPONSE. Whether it also stops the WORK depends on where the
+     * query runs: a file-backed database runs it in a reusable read-only worker that is terminated
+     * on expiry, while an in-memory database (or a shim with no `filename`) runs it on this thread,
+     * where a synchronous statement cannot be preempted and the overrun is only reported after it
+     * returns.
+     */
+    readonly queryTimeoutMs?: number;
+    /** Return an exact total after row truncation. Off by default because it re-executes the query. */
+    readonly exactTotal?: boolean;
+    /** Maximum simultaneous run_query calls on this database connection (default 1). */
+    readonly maxConcurrentQueries?: number;
 }
 export interface ServeDatabaseAsMcpOptions {
     /**

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,EAAwD,KAAK,SAAS,EAAE,MAAM,cAAc,CAAA;AAEnG,4EAA4E;AAC5E,MAAM,WAAW,kBAAkB;IACjC,kEAAkE;IAClE,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG;QAAE,GAAG,CAAC,GAAG,MAAM,EAAE,OAAO,EAAE,GAAG,OAAO,EAAE,CAAA;KAAE,CAAA;IAC9D,mFAAmF;IACnF,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;CAC1B;AAED,iGAAiG;AACjG,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAA;IAC9B,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;CAC1B;AAED,MAAM,WAAW,eAAe;IAC9B;;;;;OAKG;IACH,QAAQ,CAAC,SAAS,EAAE,CAAC,OAAO,EAAE,qBAAqB,KAAK,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IAClF,iDAAiD;IACjD,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;IACzB,4DAA4D;IAC5D,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAA;CACjC;AAED,MAAM,WAAW,yBAAyB;IACxC;;;;OAIG;IACH,QAAQ,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAA;IAClC,gEAAgE;IAChE,QAAQ,CAAC,QAAQ,CAAC,EAAE,eAAe,CAAA;IACnC,wEAAwE;IACxE,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;IACzB;;;;;OAKG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,OAAO,CAAA;CACpC;AAED,qBAAa,gBAAiB,SAAQ,KAAK;gBAC7B,OAAO,EAAE,MAAM;CAI5B;AAwID;;;;GAIG;AACH,wBAAgB,kBAAkB,CAChC,EAAE,EAAE,kBAAkB,EACtB,OAAO,EAAE,yBAAyB,GACjC,SAAS,CAiOX"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,EAAwD,KAAK,SAAS,EAAE,MAAM,cAAc,CAAA;AAEnG,4EAA4E;AAC5E,MAAM,WAAW,kBAAkB;IACjC,kEAAkE;IAClE,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG;QAAE,GAAG,CAAC,GAAG,MAAM,EAAE,OAAO,EAAE,GAAG,OAAO,EAAE,CAAA;KAAE,CAAA;IAC9D,mFAAmF;IACnF,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;IACzB;;8CAE0C;IAC1C,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAC3B;AAED,iGAAiG;AACjG,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAA;IAC9B,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;CAC1B;AAED,MAAM,WAAW,eAAe;IAC9B;;;;;OAKG;IACH,QAAQ,CAAC,SAAS,EAAE,CAAC,OAAO,EAAE,qBAAqB,KAAK,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IAClF,iDAAiD;IACjD,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;IACzB,4DAA4D;IAC5D,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAA;IAChC;;;;;;;OAOG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAA;IAChC,mGAAmG;IACnG,QAAQ,CAAC,UAAU,CAAC,EAAE,OAAO,CAAA;IAC7B,oFAAoF;IACpF,QAAQ,CAAC,oBAAoB,CAAC,EAAE,MAAM,CAAA;CACvC;AAED,MAAM,WAAW,yBAAyB;IACxC;;;;OAIG;IACH,QAAQ,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAA;IAClC,gEAAgE;IAChE,QAAQ,CAAC,QAAQ,CAAC,EAAE,eAAe,CAAA;IACnC,wEAAwE;IACxE,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;IACzB;;;;;OAKG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,OAAO,CAAA;CACpC;AAED,qBAAa,gBAAiB,SAAQ,KAAK;gBAC7B,OAAO,EAAE,MAAM;CAI5B;AAqaD;;;;GAIG;AACH,wBAAgB,kBAAkB,CAChC,EAAE,EAAE,kBAAkB,EACtB,OAAO,EAAE,yBAAyB,GACjC,SAAS,CA6PX"}

package/dist/index.js

@@ -48,6 +48,130 @@ const stripSqlNoise = (sql) => sql
     .replace(/"(?:[^"]|"")*"/g, '""')
     .replace(/--[^\n]*/g, " ")
     .replace(/\/\*[\s\S]*?\*\//g, " ");
+// SQLite's bare-identifier alphabet. Non-ASCII is included because SQLite treats any byte >= 0x80 as
+// an identifier character; leaving it out would end a word early and split one table name into two.
+const WORD_START = /[A-Za-z_\u0080-\uffff]/;
+const WORD_PART = /[A-Za-z0-9_$\u0080-\uffff]/;
+/**
+ * Tokenize far enough to name every relation. A regex cannot do this job: SQLite needs no separator
+ * between a keyword and a quoted identifier (`FROM"users"` is legal), and it accepts four identifier
+ * quotings - `"x"`, `[x]`, `` `x` ``, and bare. A `\s+`-anchored pattern silently reads none of
+ * those as a table reference, which is exactly how an aliased `FROM"users"AS habits` slipped past
+ * the allowlist and returned a non-exposed table's rows.
+ *
+ * String literals and comments become nothing, so a `FROM` inside attacker-controlled text is inert.
+ */
+function tokenizeSql(sql) {
+    const tokens = [];
+    let i = 0;
+    /** Read a quoted identifier, collapsing the doubled-delimiter escape SQLite uses for `"` and `` ` ``. */
+    const readQuoted = (close, escapable) => {
+        let value = "";
+        i++; // past the opening delimiter
+        while (i < sql.length) {
+            if (sql[i] === close) {
+                if (escapable && sql[i + 1] === close) {
+                    value += close;
+                    i += 2;
+                    continue;
+                }
+                i++;
+                tokens.push({ kind: "word", value, bare: false });
+                return;
+            }
+            value += sql[i];
+            i++;
+        }
+        // Unterminated - emit what we have. The caller's single-statement and plan checks still run.
+        tokens.push({ kind: "word", value, bare: false });
+    };
+    while (i < sql.length) {
+        const char = sql[i];
+        if (char === " " || char === "\t" || char === "\n" || char === "\r" || char === "\f") {
+            i++;
+        }
+        else if (char === "-" && sql[i + 1] === "-") {
+            const end = sql.indexOf("\n", i);
+            i = end === -1 ? sql.length : end + 1;
+        }
+        else if (char === "/" && sql[i + 1] === "*") {
+            const end = sql.indexOf("*/", i + 2);
+            i = end === -1 ? sql.length : end + 2;
+        }
+        else if (char === "'") {
+            // Literal: consumed and dropped, so its contents can never be read as SQL.
+            i++;
+            while (i < sql.length) {
+                if (sql[i] === "'") {
+                    if (sql[i + 1] === "'") {
+                        i += 2;
+                        continue;
+                    }
+                    i++;
+                    break;
+                }
+                i++;
+            }
+        }
+        else if (char === '"') {
+            readQuoted('"', true);
+        }
+        else if (char === "`") {
+            readQuoted("`", true);
+        }
+        else if (char === "[") {
+            readQuoted("]", false); // MSSQL-style bracket quoting: no escape form
+        }
+        else if (WORD_START.test(char)) {
+            const start = i;
+            while (i < sql.length && WORD_PART.test(sql[i]))
+                i++;
+            tokens.push({ kind: "word", value: sql.slice(start, i), bare: true });
+        }
+        else if (char >= "0" && char <= "9") {
+            while (i < sql.length && /[0-9A-Za-z._]/.test(sql[i]))
+                i++;
+        }
+        else {
+            tokens.push({ kind: "punct", value: char, bare: false });
+            i++;
+        }
+    }
+    return tokens;
+}
+/** True when `token` is the unquoted keyword `word` (case-insensitive). */
+const isKeyword = (token, word) => token?.bare === true && token.value.toLowerCase() === word;
+/**
+ * Every relation the statement names after `FROM`/`JOIN`, lowercased, with CTE names excluded.
+ * A schema qualifier resolves to its table (`main.habits` -> `habits`); a subquery contributes
+ * nothing of its own because its inner `FROM` is tokenized alongside everything else.
+ */
+function relationNames(sql) {
+    const tokens = tokenizeSql(sql);
+    // `name AS (` only ever introduces a CTE - a column alias cannot be followed by a paren - so this
+    // needs no `WITH` tracking to be exact.
+    const ctes = new Set();
+    for (let i = 1; i < tokens.length - 1; i++) {
+        const name = tokens[i - 1];
+        if (isKeyword(tokens[i], "as") && tokens[i + 1]?.value === "(" && name.kind === "word") {
+            ctes.add(name.value.toLowerCase());
+        }
+    }
+    const names = [];
+    for (let i = 0; i < tokens.length; i++) {
+        if (!isKeyword(tokens[i], "from") && !isKeyword(tokens[i], "join"))
+            continue;
+        const first = tokens[i + 1];
+        if (first === undefined || first.kind !== "word")
+            continue; // `FROM (subquery)` - nothing to name here
+        // A qualified reference names the table second; an unqualified one names it first.
+        const qualified = tokens[i + 2]?.value === "." && tokens[i + 3]?.kind === "word";
+        const table = qualified ? tokens[i + 3].value : first.value;
+        if (table !== "" && !ctes.has(table.toLowerCase()))
+            names.push(table.toLowerCase());
+    }
+    return names;
+}
 /** Reject multi-statement input: allow one terminator only when it is the final character. */
 const isSingleStatement = (sql) => {
     let quote = null;
@@ -162,6 +286,154 @@ function assertResultLimit(value, name) {
         throw new McpDbConfigError(`${name} must be a finite positive safe integer`);
     }
 }
+class QueryTimeoutError extends Error {
+    constructor() {
+        super("query exceeded the time limit");
+        this.name = "QueryTimeoutError";
+    }
+}
+/**
+ * The isolated lane. The worker reopens the SAME database FILE read-only and answers one statement
+ * at a time; it is spawned once and reused for the life of the server. It deliberately does not
+ * take a `serialize()` snapshot - that copies the whole database into memory on EVERY call, which
+ * is a larger availability problem than the slow query the deadline exists to bound.
+ */
+const SQLITE_WORKER_SOURCE = `
+const { Database } = require("bun:sqlite")
+let db
+self.onmessage = (event) => {
+  const { id, filename, sql } = event.data
+  try {
+    if (db === undefined) {
+      db = new Database(filename, { readonly: true })
+      db.run("PRAGMA query_only = ON")
+    }
+    self.postMessage({ id, ok: true, rows: db.prepare(sql).all() })
+  } catch (error) {
+    self.postMessage({ id, ok: false, error: String(error) })
+  }
+}
+`;
+function isWorkerAvailable() {
+    return typeof Worker !== "undefined" && typeof Blob !== "undefined" && typeof URL !== "undefined";
+}
+/** Only a file-backed database can be reopened in a worker. `:memory:` and the anonymous temp
+ * database live in this process alone, so they take the in-process lane instead. */
+function reopenableFilename(db) {
+    const filename = db.filename;
+    if (typeof filename !== "string" || filename === "" || filename === ":memory:")
+        return undefined;
+    return filename.startsWith("file::memory:") ? undefined : filename;
+}
+function workerSession(filename) {
+    let worker;
+    let sourceUrl;
+    let nextId = 0;
+    const pending = new Map();
+    let lane = Promise.resolve();
+    /** Drop the worker and fail everything riding on it. The only bound this side can enforce over a
+     * statement already running inside native SQLite is to stop owning the connection it runs on. */
+    const discard = (error) => {
+        const waiters = [...pending.values()];
+        pending.clear();
+        worker?.terminate();
+        if (sourceUrl !== undefined)
+            URL.revokeObjectURL(sourceUrl);
+        worker = undefined;
+        sourceUrl = undefined;
+        for (const waiter of waiters)
+            waiter.reject(error);
+    };
+    const ensureWorker = () => {
+        if (worker !== undefined)
+            return worker;
+        sourceUrl = URL.createObjectURL(new Blob([SQLITE_WORKER_SOURCE], { type: "text/javascript" }));
+        const spawned = new Worker(sourceUrl);
+        spawned.onmessage = (event) => {
+            const { id, ok, rows, error } = event.data;
+            if (typeof id !== "number")
+                return;
+            const waiter = pending.get(id);
+            if (waiter === undefined)
+                return;
+            pending.delete(id);
+            if (ok === true)
+                waiter.resolve(rows ?? []);
+            else
+                waiter.reject(new Error(error ?? "query failed in worker"));
+        };
+        spawned.onerror = () => discard(new Error("query failed in worker"));
+        spawned.unref?.();
+        worker = spawned;
+        return spawned;
+    };
+    const dispatch = (sql, deadline) => {
+        const remaining = deadline - Date.now();
+        if (remaining <= 0)
+            return Promise.reject(new QueryTimeoutError());
+        const active = ensureWorker();
+        const id = ++nextId;
+        return new Promise((resolve, reject) => {
+            const timer = setTimeout(() => discard(new QueryTimeoutError()), remaining);
+            pending.set(id, {
+                resolve: (rows) => {
+                    clearTimeout(timer);
+                    resolve(rows);
+                },
+                reject: (error) => {
+                    clearTimeout(timer);
+                    reject(error);
+                },
+            });
+            try {
+                active.postMessage({ id, filename, sql });
+            }
+            catch (error) {
+                pending.delete(id);
+                clearTimeout(timer);
+                reject(error instanceof Error ? error : new Error(String(error)));
+            }
+        });
+    };
+    return {
+        run(sql, deadline) {
+            // One worker owns the connection, so overlapping calls queue behind each other rather than
+            // interleaving statements on it.
+            const result = lane.then(() => dispatch(sql, deadline));
+            lane = result.catch(() => undefined);
+            return result;
+        },
+    };
+}
+/**
+ * The in-process lane, used when the database cannot be reopened elsewhere. The deadline is checked
+ * around the statement and nothing more: `prepare().all()` is synchronous, so it holds the only
+ * thread there is and no timer of ours can fire while it runs. That makes this lane BEST EFFORT -
+ * it reports an overrun, it does not cut one short.
+ */
+function inProcessSession(db) {
+    return {
+        async run(sql, deadline) {
+            if (Date.now() >= deadline)
+                throw new QueryTimeoutError();
+            const rows = db.prepare(sql).all();
+            if (Date.now() > deadline)
+                throw new QueryTimeoutError();
+            return rows;
+        },
+    };
+}
+/**
+ * Pick the lane once, at construction. A file-backed database is isolated in a reusable read-only
+ * worker, which is the only arrangement that can actually stop a running statement. Anything else
+ * runs in process - every database keeps working, none is refused.
+ */
+function openQuerySession(db) {
+    const filename = reopenableFilename(db);
+    if (filename !== undefined && isWorkerAvailable())
+        return workerSession(filename);
+    return inProcessSession(db);
+}
 /**
  * Serve `db` as a mountable MCP server (`mcp.fetch` at `POST /mcp`). See module docs for the
  * security model. Throws {@link McpDbConfigError} on any unsafe configuration - always at
@@ -187,8 +459,13 @@ export function serveDatabaseAsMcp(db, options) {
     }
     const maxRows = options.runQuery?.maxRows ?? 100;
     const maxResultBytes = options.runQuery?.maxResultBytes ?? 100 * 1024;
+    const queryTimeoutMs = options.runQuery?.queryTimeoutMs ?? 5_000;
+    const maxConcurrentQueries = options.runQuery?.maxConcurrentQueries ?? 1;
     assertResultLimit(maxRows, "maxRows");
     assertResultLimit(maxResultBytes, "maxResultBytes");
+    assertResultLimit(queryTimeoutMs, "queryTimeoutMs");
+    assertResultLimit(maxConcurrentQueries, "maxConcurrentQueries");
+    let activeQueries = 0;
     const listTables = defineMcpTool({
         name: "list_tables",
         description: "List the tables this server exposes, with row counts.",
@@ -223,6 +500,8 @@ export function serveDatabaseAsMcp(db, options) {
     });
     const tools = [listTables, describeTable];
     if (options.runQuery !== undefined) {
+        // One lane for the life of the server: picked once here, so the handler below always has it.
+        const session = openQuerySession(db);
         const runQuery = defineMcpTool({
             name: "run_query",
             description: "Run one read-only SELECT against the exposed tables. Results are capped by rows and bytes.",
@@ -234,88 +513,124 @@ export function serveDatabaseAsMcp(db, options) {
                 required: ["sql"],
             },
             intent: "table",
-            handler: (args) => {
-                const sql = String(args.sql ?? "").trim();
-                if (sql === "")
-                    return { isError: true, text: "empty query" };
-                if (!isSingleStatement(sql)) {
-                    return { isError: true, text: "only a single statement is allowed" };
-                }
-                if (!isReadStatement(sql)) {
-                    return { isError: true, text: "only SELECT (or WITH…SELECT) statements are allowed" };
+            handler: async (args) => {
+                if (activeQueries >= maxConcurrentQueries) {
+                    return { isError: true, text: "too many concurrent queries" };
                 }
-                // Verify via the query plan that only allowlisted tables are touched. SQLite names every
-                // scanned/searched relation in EXPLAIN QUERY PLAN detail rows.
-                const query = executableSql(sql);
-                let planRows;
+                activeQueries += 1;
                 try {
-                    planRows = db.prepare(`EXPLAIN QUERY PLAN ${query}`).all();
-                }
-                catch (error) {
-                    return { isError: true, text: `query failed to plan: ${String(error)}` };
-                }
-                for (const row of planRows) {
-                    const detail = typeof row.detail === "string" ? row.detail : "";
-                    // SQLite also emits non-table nodes such as `SCAN CONSTANT ROW` for a
-                    // constant-only SELECT. Only treat a scan/search target as a relation
-                    // when it is not one of those planner pseudo-nodes.
-                    if (/^SCAN\s+CONSTANT\s+ROW$/i.test(detail.trim()) ||
-                        /^SCAN\s+SUBQUERY\s+\d+$/i.test(detail.trim())) {
-                        continue;
+                    const sql = String(args.sql ?? "").trim();
+                    if (sql === "")
+                        return { isError: true, text: "empty query" };
+                    if (!isSingleStatement(sql)) {
+                        return { isError: true, text: "only a single statement is allowed" };
+                    }
+                    if (!isReadStatement(sql)) {
+                        return { isError: true, text: "only SELECT (or WITH…SELECT) statements are allowed" };
                     }
-                    const match = /(?:SCAN|SEARCH)\s+(?:TABLE\s+)?([A-Za-z_][A-Za-z0-9_]*)/i.exec(detail);
-                    if (match !== null) {
-                        const relation = match[1]?.toLowerCase() ?? "";
+                    const deadline = Date.now() + queryTimeoutMs;
+                    // Verify SQL relation tokens before the plan check. SQLite's plan output uses aliases as
+                    // scan targets (e.g. `users AS habits` becomes `SCAN habits`), so plan-only validation can
+                    // mistake an attacker-controlled alias for an allowlisted table.
+                    const executable = executableSql(sql);
+                    for (const relation of relationNames(executable)) {
                         if (!allowlist.has(relation)) {
                             return {
                                 isError: true,
-                                text: `query touches ${JSON.stringify(match[1])}, which is not exposed`,
+                                text: `query touches ${JSON.stringify(relation)}, which is not exposed`,
                             };
                         }
                     }
-                }
-                let limitedRows;
-                try {
-                    // Fetch at most one row beyond the advertised cap. This keeps the database driver's
-                    // materialization bounded even when the caller submits `SELECT * FROM a_huge_table`.
-                    limitedRows = db
-                        .prepare(`SELECT * FROM (${query}) AS "__nifra_result" LIMIT ${maxRows + 1}`)
-                        .all();
-                }
-                catch (error) {
-                    return { isError: true, text: `query failed: ${String(error)}` };
-                }
-                const wasLimited = limitedRows.length > maxRows;
-                let total = limitedRows.length;
-                if (wasLimited) {
+                    // Verify via the query plan that only allowlisted tables are touched. SQLite names every
+                    // scanned/searched relation in EXPLAIN QUERY PLAN detail rows.
+                    const query = executable;
+                    let planRows;
                     try {
-                        const countRows = db
-                            .prepare(`SELECT count(*) AS "__nifra_total" FROM (${query}) AS "__nifra_count"`)
-                            .all();
-                        const count = countRows[0]?.__nifra_total;
-                        if (typeof count !== "number" || !Number.isSafeInteger(count) || count < maxRows) {
-                            return { isError: true, text: "query failed: invalid row count" };
+                        planRows = (await session.run(`EXPLAIN QUERY PLAN ${query}`, deadline));
+                    }
+                    catch (error) {
+                        if (error instanceof QueryTimeoutError)
+                            return { isError: true, text: error.message };
+                        return { isError: true, text: `query failed to plan: ${String(error)}` };
+                    }
+                    for (const row of planRows) {
+                        const detail = typeof row.detail === "string" ? row.detail : "";
+                        // SQLite also emits non-table nodes such as `SCAN CONSTANT ROW` for a
+                        // constant-only SELECT. Only treat a scan/search target as a relation
+                        // when it is not one of those planner pseudo-nodes.
+                        if (/^SCAN\s+CONSTANT\s+ROW$/i.test(detail.trim()) ||
+                            /^SCAN\s+SUBQUERY\s+\d+$/i.test(detail.trim())) {
+                            continue;
                         }
-                        total = count;
+                        // A schema-qualified reference plans as `SCAN main.habits`. The table is the last dotted
+                        // segment; reading the first would reject `main.habits` as a table literally named "main".
+                        const match = /(?:SCAN|SEARCH)\s+(?:TABLE\s+)?(?:[A-Za-z_][A-Za-z0-9_]*\.)?([A-Za-z_][A-Za-z0-9_]*)/i.exec(detail);
+                        if (match !== null) {
+                            const relation = match[1]?.toLowerCase() ?? "";
+                            if (!allowlist.has(relation)) {
+                                return {
+                                    isError: true,
+                                    text: `query touches ${JSON.stringify(match[1])}, which is not exposed`,
+                                };
+                            }
+                        }
+                    }
+                    let limitedRows;
+                    try {
+                        // Fetch at most one row beyond the advertised cap. This keeps the database driver's
+                        // materialization bounded even when the caller submits `SELECT * FROM a_huge_table`.
+                        limitedRows = await session.run(`SELECT * FROM (${query}) AS "__nifra_result" LIMIT ${maxRows + 1}`, deadline);
                     }
                     catch (error) {
-                        return { isError: true, text: `query failed to count results: ${String(error)}` };
+                        if (error instanceof QueryTimeoutError)
+                            return { isError: true, text: error.message };
+                        return { isError: true, text: `query failed: ${String(error)}` };
+                    }
+                    const wasLimited = limitedRows.length > maxRows;
+                    let total = limitedRows.length;
+                    if (wasLimited && options.runQuery?.exactTotal === true) {
+                        try {
+                            const countRows = (await session.run(`SELECT count(*) AS "__nifra_total" FROM (${query}) AS "__nifra_count"`, deadline));
+                            const count = countRows[0]?.__nifra_total;
+                            if (typeof count !== "number" || !Number.isSafeInteger(count) || count < maxRows) {
+                                return { isError: true, text: "query failed: invalid row count" };
+                            }
+                            total = count;
+                        }
+                        catch (error) {
+                            if (error instanceof QueryTimeoutError)
+                                return { isError: true, text: error.message };
+                            return { isError: true, text: `query failed to count results: ${String(error)}` };
+                        }
+                    }
+                    else if (wasLimited) {
+                        total = null;
+                    }
+                    let shown = Math.min(limitedRows.length, maxRows);
+                    let payload = limitedRows.slice(0, shown);
+                    let result = {
+                        rows: payload,
+                        ...(wasLimited || shown < limitedRows.length ? { truncated: true, total } : {}),
+                    };
+                    let serialized = JSON.stringify(result);
+                    const encoded = new TextEncoder();
+                    while (encoded.encode(serialized).byteLength > maxResultBytes && shown > 0) {
+                        shown = Math.max(0, Math.floor(shown / 2));
+                        payload = limitedRows.slice(0, shown);
+                        result = {
+                            rows: payload,
+                            ...(wasLimited || shown < limitedRows.length ? { truncated: true, total } : {}),
+                        };
+                        serialized = JSON.stringify(result);
+                    }
+                    if (encoded.encode(serialized).byteLength > maxResultBytes) {
+                        return { isError: true, text: "query result exceeds maxResultBytes" };
                     }
+                    return { text: serialized, structuredContent: result };
                 }
-                let shown = Math.min(limitedRows.length, maxRows);
-                let payload = limitedRows.slice(0, shown);
-                let serialized = JSON.stringify(payload);
-                while (serialized.length > maxResultBytes && shown > 0) {
-                    shown = Math.max(0, Math.floor(shown / 2));
-                    payload = limitedRows.slice(0, shown);
-                    serialized = JSON.stringify(payload);
+                finally {
+                    activeQueries -= 1;
                 }
-                const truncated = shown < total;
-                const result = {
-                    rows: payload,
-                    ...(truncated ? { truncated: { shown, total } } : {}),
-                };
-                return { text: JSON.stringify(result), structuredContent: result };
             },
         });
         tools.push(runQuery);
@@ -331,45 +646,21 @@ export function serveDatabaseAsMcp(db, options) {
     // are visible - the handler itself performs no auth, so every path to it must pass this gate:
     // the wrapped fetch authorizes, and direct handle() dispatch fails closed (no Request → no auth).
     const { authorize } = options.runQuery;
-    const rpcId = (id) => typeof id === "string" || typeof id === "number" ? id : null;
-    const unauthorizedResult = (id) => ({
-        jsonrpc: "2.0",
-        id: rpcId(id),
-        result: {
-            content: [{ type: "text", text: "unauthorized" }],
-            isError: true,
-        },
-    });
-    const isRunQueryCall = (message) => {
-        if (typeof message !== "object" || message === null)
-            return false;
-        const { method, params } = message;
-        return method === "tools/call" && params?.name === "run_query";
-    };
     return {
         ...server,
-        async fetch(request) {
-            if (request.method === "POST") {
-                let body;
-                try {
-                    body = await request.clone().json();
-                }
-                catch {
-                    return server.fetch(request); // malformed JSON → the protocol layer's error handling
-                }
-                const messages = Array.isArray(body) ? body : [body];
-                const queryCall = messages.find(isRunQueryCall);
-                if (queryCall !== undefined) {
-                    const ok = await authorize({ toolName: "run_query", request });
-                    if (!ok)
-                        return Response.json(unauthorizedResult(queryCall.id));
-                }
-            }
-            return server.fetch(request);
-        },
+        fetch: (request) => server.fetch(request, {
+            authorizeMessage: async (message, inbound) => message.method !== "tools/call" || message.params?.name !== "run_query"
+                ? true
+                : authorize({ toolName: "run_query", request: inbound }),
+        }),
         async handle(message) {
-            if (isRunQueryCall(message))
-                return unauthorizedResult(message.id);
+            if (message.method === "tools/call" && message.params?.name === "run_query") {
+                return {
+                    jsonrpc: "2.0",
+                    id: typeof message.id === "string" || typeof message.id === "number" ? message.id : null,
+                    result: { content: [{ type: "text", text: "unauthorized" }], isError: true },
+                };
+            }
             return server.handle(message);
         },
     };

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,EAAE,eAAe,EAAE,aAAa,EAAwC,MAAM,cAAc,CAAA;AAmDnG,MAAM,OAAO,gBAAiB,SAAQ,KAAK;IACzC,YAAY,OAAe;QACzB,KAAK,CAAC,oBAAoB,OAAO,EAAE,CAAC,CAAA;QACpC,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAA;IAChC,CAAC;CACF;AAED,wFAAwF;AACxF,MAAM,eAAe,GAAG,0BAA0B,CAAA;AAElD,kGAAkG;AAClG,SAAS,cAAc,CAAC,OAA6B,EAAE,GAAG,WAA8B;IACtF,IAAI,GAAG,GAAG,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;IAC1B,KAAK,MAAM,CAAC,KAAK,EAAE,UAAU,CAAC,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,CAAC;QACxD,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;YACtC,MAAM,IAAI,gBAAgB,CAAC,yBAAyB,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,EAAE,CAAC,CAAA;QACnF,CAAC;QACD,GAAG,IAAI,UAAU,GAAG,CAAC,OAAO,CAAC,KAAK,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAA;IAChD,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,MAAM,aAAa,GAAG,CAAC,GAAW,EAAU,EAAE,CAC5C,GAAG;IACD,gEAAgE;KAC/D,OAAO,CAAC,iBAAiB,EAAE,IAAI,CAAC;KAChC,OAAO,CAAC,iBAAiB,EAAE,IAAI,CAAC;KAChC,OAAO,CAAC,WAAW,EAAE,GAAG,CAAC;KACzB,OAAO,CAAC,mBAAmB,EAAE,GAAG,CAAC,CAAA;AAEtC,8FAA8F;AAC9F,MAAM,iBAAiB,GAAG,CAAC,GAAW,EAAW,EAAE;IACjD,IAAI,KAAK,GAAqB,IAAI,CAAA;IAClC,IAAI,WAAW,GAAG,KAAK,CAAA;IACvB,IAAI,YAAY,GAAG,KAAK,CAAA;IACxB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACpC,MAAM,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,CAAA;QACnB,MAAM,IAAI,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAA;QACvB,IAAI,WAAW,EAAE,CAAC;YAChB,IAAI,IAAI,KAAK,IAAI;gBAAE,WAAW,GAAG,KAAK,CAAA;YACtC,SAAQ;QACV,CAAC;QACD,IAAI,YAAY,EAAE,CAAC;YACjB,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;gBACjC,YAAY,GAAG,KAAK,CAAA;gBACpB,CAAC,EAAE,CAAA;YACL,CAAC;YACD,SAAQ;QACV,CAAC;QACD,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YACnB,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;gBACnB,IAAI,IAAI,KAAK,KAAK;oBAAE,CAAC,EAAE,CAAA;;oBAClB,KAAK,GAAG,IAAI,CAAA;YACnB,CAAC;YACD,SAAQ;QACV,CAAC;QACD,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACjC,KAAK,GAAG,IAAI,CAAA;YACZ,SAAQ;QACV,CAAC;QACD,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACjC,WAAW,GAAG,IAAI,CAAA;YAClB,CAAC,EAAE,CAAA;YACH,SAAQ;QACV,CAAC;QACD,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACjC,YAAY,GAAG,IAAI,CAAA;YACnB,CAAC,EAAE,CAAA;YACH,SAAQ;QACV,CAAC;QACD,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACjB,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,CAAA;QACvC,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC,CAAA;AAED,MAAM,eAAe,GAAG,CAAC,GAAW,EAAW,EAAE;IAC/C,MAAM,IAAI,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;IACpD,OAAO,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAA;AAC7D,CAAC,CAAA;AAED;;oCAEoC;AACpC,SAAS,aAAa,CAAC,GAAW;IAChC,IAAI,KAAK,GAAqB,IAAI,CAAA;IAClC,IAAI,WAAW,GAAG,KAAK,CAAA;IACvB,IAAI,gBAAgB,GAAG,CAAC,CAAC,CAAA;IACzB,IAAI,YAAY,GAAG,KAAK,CAAA;IACxB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACpC,MAAM,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,CAAA;QACnB,MAAM,IAAI,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAA;QACvB,IAAI,WAAW,EAAE,CAAC;YAChB,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;gBAClB,WAAW,GAAG,KAAK,CAAA;gBACnB,gBAAgB,GAAG,CAAC,CAAC,CAAA;YACvB,CAAC;YACD,SAAQ;QACV,CAAC;QACD,IAAI,YAAY,EAAE,CAAC;YACjB,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;gBACjC,YAAY,GAAG,KAAK,CAAA;gBACpB,CAAC,EAAE,CAAA;YACL,CAAC;YACD,SAAQ;QACV,CAAC;QACD,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YACnB,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;gBACnB,IAAI,IAAI,KAAK,KAAK;oBAAE,CAAC,EAAE,CAAA;;oBAClB,KAAK,GAAG,IAAI,CAAA;YACnB,CAAC;YACD,SAAQ;QACV,CAAC;QACD,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACjC,KAAK,GAAG,IAAI,CAAA;YACZ,SAAQ;QACV,CAAC;QACD,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACjC,WAAW,GAAG,IAAI,CAAA;YAClB,gBAAgB,GAAG,CAAC,CAAA;YACpB,CAAC,EAAE,CAAA;YACH,SAAQ;QACV,CAAC;QACD,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACjC,YAAY,GAAG,IAAI,CAAA;YACnB,CAAC,EAAE,CAAA;YACH,SAAQ;QACV,CAAC;QACD,IAAI,IAAI,KAAK,GAAG;YAAE,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;IACjD,CAAC;IACD,IAAI,WAAW,IAAI,gBAAgB,IAAI,CAAC;QAAE,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,gBAAgB,CAAC,CAAC,IAAI,EAAE,CAAA;IACtF,OAAO,GAAG,CAAC,IAAI,EAAE,CAAA;AACnB,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAa,EAAE,IAAY;IACpD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,KAAK,IAAI,MAAM,CAAC,gBAAgB,EAAE,CAAC;QACnF,MAAM,IAAI,gBAAgB,CAAC,GAAG,IAAI,yCAAyC,CAAC,CAAA;IAC9E,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAChC,EAAsB,EACtB,OAAkC;IAElC,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChC,MAAM,IAAI,gBAAgB,CACxB,iHAAiH,CAClH,CAAA;IACH,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QACnC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACjC,MAAM,IAAI,gBAAgB,CACxB,qBAAqB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,gCAAgC,CAC3E,CAAA;QACH,CAAC;IACH,CAAC;IACD,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAA;IAE7E,IAAI,OAAO,CAAC,gBAAgB,KAAK,KAAK,EAAE,CAAC;QACvC,IAAI,CAAC;YACH,EAAE,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAA;QAClC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,gBAAgB,CACxB,sDAAsD,MAAM,CAAC,KAAK,CAAC,kGAAkG,CACtK,CAAA;QACH,CAAC;IACH,CAAC;IAED,MAAM,OAAO,GAAG,OAAO,CAAC,QAAQ,EAAE,OAAO,IAAI,GAAG,CAAA;IAChD,MAAM,cAAc,GAAG,OAAO,CAAC,QAAQ,EAAE,cAAc,IAAI,GAAG,GAAG,IAAI,CAAA;IACrE,iBAAiB,CAAC,OAAO,EAAE,SAAS,CAAC,CAAA;IACrC,iBAAiB,CAAC,cAAc,EAAE,gBAAgB,CAAC,CAAA;IAEnD,MAAM,UAAU,GAAG,aAAa,CAAC;QAC/B,IAAI,EAAE,aAAa;QACnB,WAAW,EAAE,uDAAuD;QACpE,OAAO,EAAE,GAAG,EAAE;YACZ,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;gBACxC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE;qBACf,OAAO,CAAC,cAAc,CAAA,8BAA8B,KAAK,GAAG,CAAC;qBAC7D,GAAG,EAEJ,CAAA;gBACF,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,IAAI,CAAC,EAAE,CAAA;YACvC,CAAC,CAAC,CAAA;YACF,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,iBAAiB,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,CAAA;QAC5E,CAAC;KACF,CAAC,CAAA;IAEF,MAAM,aAAa,GAAG,aAAa,CAAC;QAClC,IAAI,EAAE,gBAAgB;QACtB,WAAW,EAAE,sEAAsE;QACnF,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,8BAA8B,EAAE,EAAE;YACtF,QAAQ,EAAE,CAAC,OAAO,CAAC;SACpB;QACD,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;YAChB,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAA;YACtC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;gBACxC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,iBAAiB,EAAE,CAAA;YACjF,CAAC;YACD,sFAAsF;YACtF,uCAAuC;YACvC,MAAM,OAAO,GAAG,EAAE,CAAC,OAAO,CAAC,cAAc,CAAA,sBAAsB,KAAK,IAAI,CAAC,CAAC,GAAG,EAAE,CAAA;YAC/E,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,iBAAiB,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,CAAA;QACjF,CAAC;KACF,CAAC,CAAA;IAEF,MAAM,KAAK,GAAG,CAAC,UAAU,EAAE,aAAa,CAAC,CAAA;IAEzC,IAAI,OAAO,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QACnC,MAAM,QAAQ,GAAG,aAAa,CAAC;YAC7B,IAAI,EAAE,WAAW;YACjB,WAAW,EACT,4FAA4F;YAC9F,WAAW,EAAE;gBACX,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,4CAA4C,EAAE;iBACnF;gBACD,QAAQ,EAAE,CAAC,KAAK,CAAC;aAClB;YACD,MAAM,EAAE,OAAO;YACf,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;gBAChB,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAA;gBACzC,IAAI,GAAG,KAAK,EAAE;oBAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,aAAa,EAAE,CAAA;gBAC7D,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,EAAE,CAAC;oBAC5B,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,oCAAoC,EAAE,CAAA;gBACtE,CAAC;gBACD,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,EAAE,CAAC;oBAC1B,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,qDAAqD,EAAE,CAAA;gBACvF,CAAC;gBAED,yFAAyF;gBACzF,+DAA+D;gBAC/D,MAAM,KAAK,GAAG,aAAa,CAAC,GAAG,CAAC,CAAA;gBAChC,IAAI,QAAqC,CAAA;gBACzC,IAAI,CAAC;oBACH,QAAQ,GAAG,EAAE,CAAC,OAAO,CAAC,sBAAsB,KAAK,EAAE,CAAC,CAAC,GAAG,EAAiC,CAAA;gBAC3F,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,yBAAyB,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,CAAA;gBAC1E,CAAC;gBACD,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;oBAC3B,MAAM,MAAM,GAAG,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAA;oBAC/D,sEAAsE;oBACtE,sEAAsE;oBACtE,oDAAoD;oBACpD,IACE,0BAA0B,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;wBAC9C,0BAA0B,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,EAC9C,CAAC;wBACD,SAAQ;oBACV,CAAC;oBACD,MAAM,KAAK,GAAG,0DAA0D,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;oBACrF,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;wBACnB,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAA;wBAC9C,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;4BAC7B,OAAO;gCACL,OAAO,EAAE,IAAI;gCACb,IAAI,EAAE,iBAAiB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,wBAAwB;6BACxE,CAAA;wBACH,CAAC;oBACH,CAAC;gBACH,CAAC;gBAED,IAAI,WAAsB,CAAA;gBAC1B,IAAI,CAAC;oBACH,oFAAoF;oBACpF,qFAAqF;oBACrF,WAAW,GAAG,EAAE;yBACb,OAAO,CAAC,kBAAkB,KAAK,+BAA+B,OAAO,GAAG,CAAC,EAAE,CAAC;yBAC5E,GAAG,EAAE,CAAA;gBACV,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,iBAAiB,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,CAAA;gBAClE,CAAC;gBAED,MAAM,UAAU,GAAG,WAAW,CAAC,MAAM,GAAG,OAAO,CAAA;gBAC/C,IAAI,KAAK,GAAG,WAAW,CAAC,MAAM,CAAA;gBAC9B,IAAI,UAAU,EAAE,CAAC;oBACf,IAAI,CAAC;wBACH,MAAM,SAAS,GAAG,EAAE;6BACjB,OAAO,CAAC,4CAA4C,KAAK,sBAAsB,CAAC;6BAChF,GAAG,EAAwC,CAAA;wBAC9C,MAAM,KAAK,GAAG,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,CAAA;wBACzC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,OAAO,EAAE,CAAC;4BACjF,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,iCAAiC,EAAE,CAAA;wBACnE,CAAC;wBACD,KAAK,GAAG,KAAK,CAAA;oBACf,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBACf,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,kCAAkC,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,CAAA;oBACnF,CAAC;gBACH,CAAC;gBACD,IAAI,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;gBACjD,IAAI,OAAO,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAA;gBACzC,IAAI,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAA;gBACxC,OAAO,UAAU,CAAC,MAAM,GAAG,cAAc,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;oBACvD,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAA;oBAC1C,OAAO,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAA;oBACrC,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAA;gBACtC,CAAC;gBACD,MAAM,SAAS,GAAG,KAAK,GAAG,KAAK,CAAA;gBAC/B,MAAM,MAAM,GAA4B;oBACtC,IAAI,EAAE,OAAO;oBACb,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACtD,CAAA;gBACD,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,iBAAiB,EAAE,MAAM,EAAE,CAAA;YACpE,CAAC;SACF,CAAC,CAAA;QACF,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;IACtB,CAAC;IAED,MAAM,MAAM,GAAG,eAAe,CAAC;QAC7B,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,UAAU;QAChC,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,OAAO;QACnC,KAAK;KACN,CAAC,CAAA;IAEF,IAAI,OAAO,CAAC,QAAQ,KAAK,SAAS;QAAE,OAAO,MAAM,CAAA;IAEjD,+FAA+F;IAC/F,8FAA8F;IAC9F,kGAAkG;IAClG,MAAM,EAAE,SAAS,EAAE,GAAG,OAAO,CAAC,QAAQ,CAAA;IAEtC,MAAM,KAAK,GAAG,CAAC,EAAW,EAA0B,EAAE,CACpD,OAAO,EAAE,KAAK,QAAQ,IAAI,OAAO,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAA;IAE9D,MAAM,kBAAkB,GAAG,CAAC,EAAW,EAAmB,EAAE,CAC1D,CAAC;QACC,OAAO,EAAE,KAAK;QACd,EAAE,EAAE,KAAK,CAAC,EAAE,CAAC;QACb,MAAM,EAAE;YACN,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC;YACjD,OAAO,EAAE,IAAI;SACd;KACF,CAAoB,CAAA;IAEvB,MAAM,cAAc,GAAG,CAAC,OAAgB,EAA+B,EAAE;QACvE,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI;YAAE,OAAO,KAAK,CAAA;QACjE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,OAA4D,CAAA;QACvF,OAAO,MAAM,KAAK,YAAY,IAAI,MAAM,EAAE,IAAI,KAAK,WAAW,CAAA;IAChE,CAAC,CAAA;IAED,OAAO;QACL,GAAG,MAAM;QACT,KAAK,CAAC,KAAK,CAAC,OAAgB;YAC1B,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;gBAC9B,IAAI,IAAa,CAAA;gBACjB,IAAI,CAAC;oBACH,IAAI,GAAG,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,CAAA;gBACrC,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA,CAAC,uDAAuD;gBACtF,CAAC;gBACD,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAA;gBACpD,MAAM,SAAS,GAAG,QAAQ,CAAC,IAAI,CAAC,cAAc,CAAC,CAAA;gBAC/C,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;oBAC5B,MAAM,EAAE,GAAG,MAAM,SAAS,CAAC,EAAE,QAAQ,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,CAAA;oBAC9D,IAAI,CAAC,EAAE;wBAAE,OAAO,QAAQ,CAAC,IAAI,CAAC,kBAAkB,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAA;gBACjE,CAAC;YACH,CAAC;YACD,OAAO,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;QAC9B,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,OAAO;YAClB,IAAI,cAAc,CAAC,OAAO,CAAC;gBAAE,OAAO,kBAAkB,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;YAClE,OAAO,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;QAC/B,CAAC;KACF,CAAA;AACH,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,EAAE,eAAe,EAAE,aAAa,EAAwC,MAAM,cAAc,CAAA;AAoEnG,MAAM,OAAO,gBAAiB,SAAQ,KAAK;IACzC,YAAY,OAAe;QACzB,KAAK,CAAC,oBAAoB,OAAO,EAAE,CAAC,CAAA;QACpC,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAA;IAChC,CAAC;CACF;AAED,wFAAwF;AACxF,MAAM,eAAe,GAAG,0BAA0B,CAAA;AAElD,kGAAkG;AAClG,SAAS,cAAc,CAAC,OAA6B,EAAE,GAAG,WAA8B;IACtF,IAAI,GAAG,GAAG,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;IAC1B,KAAK,MAAM,CAAC,KAAK,EAAE,UAAU,CAAC,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,CAAC;QACxD,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;YACtC,MAAM,IAAI,gBAAgB,CAAC,yBAAyB,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,EAAE,CAAC,CAAA;QACnF,CAAC;QACD,GAAG,IAAI,UAAU,GAAG,CAAC,OAAO,CAAC,KAAK,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAA;IAChD,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,MAAM,aAAa,GAAG,CAAC,GAAW,EAAU,EAAE,CAC5C,GAAG;IACD,gEAAgE;KAC/D,OAAO,CAAC,iBAAiB,EAAE,IAAI,CAAC;KAChC,OAAO,CAAC,iBAAiB,EAAE,IAAI,CAAC;KAChC,OAAO,CAAC,WAAW,EAAE,GAAG,CAAC;KACzB,OAAO,CAAC,mBAAmB,EAAE,GAAG,CAAC,CAAA;AAEtC,qGAAqG;AACrG,oGAAoG;AACpG,MAAM,UAAU,GAAG,wBAAwB,CAAA;AAC3C,MAAM,SAAS,GAAG,4BAA4B,CAAA;AAY9C;;;;;;;;GAQG;AACH,SAAS,WAAW,CAAC,GAAW;IAC9B,MAAM,MAAM,GAAe,EAAE,CAAA;IAC7B,IAAI,CAAC,GAAG,CAAC,CAAA;IACT,yGAAyG;IACzG,MAAM,UAAU,GAAG,CAAC,KAAa,EAAE,SAAkB,EAAQ,EAAE;QAC7D,IAAI,KAAK,GAAG,EAAE,CAAA;QACd,CAAC,EAAE,CAAA,CAAC,6BAA6B;QACjC,OAAO,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC;YACtB,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,KAAK,EAAE,CAAC;gBACrB,IAAI,SAAS,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,KAAK,EAAE,CAAC;oBACtC,KAAK,IAAI,KAAK,CAAA;oBACd,CAAC,IAAI,CAAC,CAAA;oBACN,SAAQ;gBACV,CAAC;gBACD,CAAC,EAAE,CAAA;gBACH,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;gBACjD,OAAM;YACR,CAAC;YACD,KAAK,IAAI,GAAG,CAAC,CAAC,CAAC,CAAA;YACf,CAAC,EAAE,CAAA;QACL,CAAC;QACD,6FAA6F;QAC7F,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;IACnD,CAAC,CAAA;IACD,OAAO,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC;QACtB,MAAM,IAAI,GAAG,GAAG,CAAC,CAAC,CAAW,CAAA;QAC7B,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YACrF,CAAC,EAAE,CAAA;QACL,CAAC;aAAM,IAAI,IAAI,KAAK,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;YAC9C,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAA;YAChC,CAAC,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAA;QACvC,CAAC;aAAM,IAAI,IAAI,KAAK,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;YAC9C,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAA;YACpC,CAAC,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAA;QACvC,CAAC;aAAM,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACxB,2EAA2E;YAC3E,CAAC,EAAE,CAAA;YACH,OAAO,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC;gBACtB,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;oBACnB,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;wBACvB,CAAC,IAAI,CAAC,CAAA;wBACN,SAAQ;oBACV,CAAC;oBACD,CAAC,EAAE,CAAA;oBACH,MAAK;gBACP,CAAC;gBACD,CAAC,EAAE,CAAA;YACL,CAAC;QACH,CAAC;aAAM,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACxB,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;QACvB,CAAC;aAAM,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACxB,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;QACvB,CAAC;aAAM,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACxB,UAAU,CAAC,GAAG,EAAE,KAAK,CAAC,CAAA,CAAC,8CAA8C;QACvE,CAAC;aAAM,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACjC,MAAM,KAAK,GAAG,CAAC,CAAA;YACf,OAAO,CAAC,GAAG,GAAG,CAAC,MAAM,IAAI,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAW,CAAC;gBAAE,CAAC,EAAE,CAAA;YAC9D,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;QACvE,CAAC;aAAM,IAAI,IAAI,IAAI,GAAG,IAAI,IAAI,IAAI,GAAG,EAAE,CAAC;YACtC,OAAO,CAAC,GAAG,GAAG,CAAC,MAAM,IAAI,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAW,CAAC;gBAAE,CAAC,EAAE,CAAA;QACtE,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;YACxD,CAAC,EAAE,CAAA;QACL,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAA;AACf,CAAC;AAED,2EAA2E;AAC3E,MAAM,SAAS,GAAG,CAAC,KAA2B,EAAE,IAAY,EAAW,EAAE,CACvE,KAAK,EAAE,IAAI,KAAK,IAAI,IAAI,KAAK,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,IAAI,CAAA;AAE5D;;;;GAIG;AACH,SAAS,aAAa,CAAC,GAAW;IAChC,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,CAAA;IAC/B,kGAAkG;IAClG,wCAAwC;IACxC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAA;IAC9B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3C,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,CAAa,CAAA;QACtC,IAAI,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,KAAK,GAAG,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YACvF,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAA;QACpC,CAAC;IACH,CAAC;IACD,MAAM,KAAK,GAAa,EAAE,CAAA;IAC1B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACvC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC;YAAE,SAAQ;QAC5E,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAA;QAC3B,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM;YAAE,SAAQ,CAAC,2CAA2C;QACtG,mFAAmF;QACnF,MAAM,SAAS,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,KAAK,GAAG,IAAI,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,KAAK,MAAM,CAAA;QAChF,MAAM,KAAK,GAAG,SAAS,CAAC,CAAC,CAAE,MAAM,CAAC,CAAC,GAAG,CAAC,CAAc,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAA;QACzE,IAAI,KAAK,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAA;IACrF,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,8FAA8F;AAC9F,MAAM,iBAAiB,GAAG,CAAC,GAAW,EAAW,EAAE;IACjD,IAAI,KAAK,GAAqB,IAAI,CAAA;IAClC,IAAI,WAAW,GAAG,KAAK,CAAA;IACvB,IAAI,YAAY,GAAG,KAAK,CAAA;IACxB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACpC,MAAM,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,CAAA;QACnB,MAAM,IAAI,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAA;QACvB,IAAI,WAAW,EAAE,CAAC;YAChB,IAAI,IAAI,KAAK,IAAI;gBAAE,WAAW,GAAG,KAAK,CAAA;YACtC,SAAQ;QACV,CAAC;QACD,IAAI,YAAY,EAAE,CAAC;YACjB,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;gBACjC,YAAY,GAAG,KAAK,CAAA;gBACpB,CAAC,EAAE,CAAA;YACL,CAAC;YACD,SAAQ;QACV,CAAC;QACD,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YACnB,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;gBACnB,IAAI,IAAI,KAAK,KAAK;oBAAE,CAAC,EAAE,CAAA;;oBAClB,KAAK,GAAG,IAAI,CAAA;YACnB,CAAC;YACD,SAAQ;QACV,CAAC;QACD,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACjC,KAAK,GAAG,IAAI,CAAA;YACZ,SAAQ;QACV,CAAC;QACD,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACjC,WAAW,GAAG,IAAI,CAAA;YAClB,CAAC,EAAE,CAAA;YACH,SAAQ;QACV,CAAC;QACD,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACjC,YAAY,GAAG,IAAI,CAAA;YACnB,CAAC,EAAE,CAAA;YACH,SAAQ;QACV,CAAC;QACD,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACjB,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,CAAA;QACvC,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC,CAAA;AAED,MAAM,eAAe,GAAG,CAAC,GAAW,EAAW,EAAE;IAC/C,MAAM,IAAI,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;IACpD,OAAO,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAA;AAC7D,CAAC,CAAA;AAED;;oCAEoC;AACpC,SAAS,aAAa,CAAC,GAAW;IAChC,IAAI,KAAK,GAAqB,IAAI,CAAA;IAClC,IAAI,WAAW,GAAG,KAAK,CAAA;IACvB,IAAI,gBAAgB,GAAG,CAAC,CAAC,CAAA;IACzB,IAAI,YAAY,GAAG,KAAK,CAAA;IACxB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACpC,MAAM,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,CAAA;QACnB,MAAM,IAAI,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAA;QACvB,IAAI,WAAW,EAAE,CAAC;YAChB,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;gBAClB,WAAW,GAAG,KAAK,CAAA;gBACnB,gBAAgB,GAAG,CAAC,CAAC,CAAA;YACvB,CAAC;YACD,SAAQ;QACV,CAAC;QACD,IAAI,YAAY,EAAE,CAAC;YACjB,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;gBACjC,YAAY,GAAG,KAAK,CAAA;gBACpB,CAAC,EAAE,CAAA;YACL,CAAC;YACD,SAAQ;QACV,CAAC;QACD,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YACnB,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;gBACnB,IAAI,IAAI,KAAK,KAAK;oBAAE,CAAC,EAAE,CAAA;;oBAClB,KAAK,GAAG,IAAI,CAAA;YACnB,CAAC;YACD,SAAQ;QACV,CAAC;QACD,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACjC,KAAK,GAAG,IAAI,CAAA;YACZ,SAAQ;QACV,CAAC;QACD,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACjC,WAAW,GAAG,IAAI,CAAA;YAClB,gBAAgB,GAAG,CAAC,CAAA;YACpB,CAAC,EAAE,CAAA;YACH,SAAQ;QACV,CAAC;QACD,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACjC,YAAY,GAAG,IAAI,CAAA;YACnB,CAAC,EAAE,CAAA;YACH,SAAQ;QACV,CAAC;QACD,IAAI,IAAI,KAAK,GAAG;YAAE,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;IACjD,CAAC;IACD,IAAI,WAAW,IAAI,gBAAgB,IAAI,CAAC;QAAE,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,gBAAgB,CAAC,CAAC,IAAI,EAAE,CAAA;IACtF,OAAO,GAAG,CAAC,IAAI,EAAE,CAAA;AACnB,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAa,EAAE,IAAY;IACpD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,KAAK,IAAI,MAAM,CAAC,gBAAgB,EAAE,CAAC;QACnF,MAAM,IAAI,gBAAgB,CAAC,GAAG,IAAI,yCAAyC,CAAC,CAAA;IAC9E,CAAC;AACH,CAAC;AAED,MAAM,iBAAkB,SAAQ,KAAK;IACnC;QACE,KAAK,CAAC,+BAA+B,CAAC,CAAA;QACtC,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAA;IACjC,CAAC;CACF;AAOD;;;;;GAKG;AACH,MAAM,oBAAoB,GAAG;;;;;;;;;;;;;;;CAe5B,CAAA;AAED,SAAS,iBAAiB;IACxB,OAAO,OAAO,MAAM,KAAK,WAAW,IAAI,OAAO,IAAI,KAAK,WAAW,IAAI,OAAO,GAAG,KAAK,WAAW,CAAA;AACnG,CAAC;AAED;oFACoF;AACpF,SAAS,kBAAkB,CAAC,EAAsB;IAChD,MAAM,QAAQ,GAAG,EAAE,CAAC,QAAQ,CAAA;IAC5B,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,EAAE,IAAI,QAAQ,KAAK,UAAU;QAAE,OAAO,SAAS,CAAA;IAChG,OAAO,QAAQ,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAA;AACpE,CAAC;AAOD,SAAS,aAAa,CAAC,QAAgB;IACrC,IAAI,MAA0B,CAAA;IAC9B,IAAI,SAA6B,CAAA;IACjC,IAAI,MAAM,GAAG,CAAC,CAAA;IACd,MAAM,OAAO,GAAG,IAAI,GAAG,EAAwB,CAAA;IAC/C,IAAI,IAAI,GAAqB,OAAO,CAAC,OAAO,EAAE,CAAA;IAE9C;qGACiG;IACjG,MAAM,OAAO,GAAG,CAAC,KAAY,EAAQ,EAAE;QACrC,MAAM,OAAO,GAAG,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAA;QACrC,OAAO,CAAC,KAAK,EAAE,CAAA;QACf,MAAM,EAAE,SAAS,EAAE,CAAA;QACnB,IAAI,SAAS,KAAK,SAAS;YAAE,GAAG,CAAC,eAAe,CAAC,SAAS,CAAC,CAAA;QAC3D,MAAM,GAAG,SAAS,CAAA;QAClB,SAAS,GAAG,SAAS,CAAA;QACrB,KAAK,MAAM,MAAM,IAAI,OAAO;YAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;IACpD,CAAC,CAAA;IAED,MAAM,YAAY,GAAG,GAAW,EAAE;QAChC,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,MAAM,CAAA;QACvC,SAAS,GAAG,GAAG,CAAC,eAAe,CAAC,IAAI,IAAI,CAAC,CAAC,oBAAoB,CAAC,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC,CAAC,CAAA;QAC9F,MAAM,OAAO,GAAG,IAAI,MAAM,CAAC,SAAS,CAAC,CAAA;QACrC,OAAO,CAAC,SAAS,GAAG,CAClB,KAAoF,EACpF,EAAE;YACF,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC,IAAI,CAAA;YAC1C,IAAI,OAAO,EAAE,KAAK,QAAQ;gBAAE,OAAM;YAClC,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;YAC9B,IAAI,MAAM,KAAK,SAAS;gBAAE,OAAM;YAChC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;YAClB,IAAI,EAAE,KAAK,IAAI;gBAAE,MAAM,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC,CAAA;;gBACtC,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,KAAK,IAAI,wBAAwB,CAAC,CAAC,CAAA;QAClE,CAAC,CAAA;QACD,OAAO,CAAC,OAAO,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC,CAGnE;QAAC,OAAkC,CAAC,KAAK,EAAE,EAAE,CAAA;QAC9C,MAAM,GAAG,OAAO,CAAA;QAChB,OAAO,OAAO,CAAA;IAChB,CAAC,CAAA;IAED,MAAM,QAAQ,GAAG,CAAC,GAAW,EAAE,QAAgB,EAAsB,EAAE;QACrE,MAAM,SAAS,GAAG,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QACvC,IAAI,SAAS,IAAI,CAAC;YAAE,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,iBAAiB,EAAE,CAAC,CAAA;QAClE,MAAM,MAAM,GAAG,YAAY,EAAE,CAAA;QAC7B,MAAM,EAAE,GAAG,EAAE,MAAM,CAAA;QACnB,OAAO,IAAI,OAAO,CAAY,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAChD,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,iBAAiB,EAAE,CAAC,EAAE,SAAS,CAAC,CAAA;YAC3E,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE;gBACd,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;oBAChB,YAAY,CAAC,KAAK,CAAC,CAAA;oBACnB,OAAO,CAAC,IAAI,CAAC,CAAA;gBACf,CAAC;gBACD,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE;oBAChB,YAAY,CAAC,KAAK,CAAC,CAAA;oBACnB,MAAM,CAAC,KAAK,CAAC,CAAA;gBACf,CAAC;aACF,CAAC,CAAA;YACF,IAAI,CAAC;gBACH,MAAM,CAAC,WAAW,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAA;YAC3C,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;gBAClB,YAAY,CAAC,KAAK,CAAC,CAAA;gBACnB,MAAM,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;YACnE,CAAC;QACH,CAAC,CAAC,CAAA;IACJ,CAAC,CAAA;IAED,OAAO;QACL,GAAG,CAAC,GAAG,EAAE,QAAQ;YACf,2FAA2F;YAC3F,iCAAiC;YACjC,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAA;YACvD,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;YACpC,OAAO,MAAM,CAAA;QACf,CAAC;KACF,CAAA;AACH,CAAC;AAED;;;;;GAKG;AACH,SAAS,gBAAgB,CAAC,EAAsB;IAC9C,OAAO;QACL,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,QAAQ;YACrB,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ;gBAAE,MAAM,IAAI,iBAAiB,EAAE,CAAA;YACzD,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAA;YAClC,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ;gBAAE,MAAM,IAAI,iBAAiB,EAAE,CAAA;YACxD,OAAO,IAAI,CAAA;QACb,CAAC;KACF,CAAA;AACH,CAAC;AAED;;;;GAIG;AACH,SAAS,gBAAgB,CAAC,EAAsB;IAC9C,MAAM,QAAQ,GAAG,kBAAkB,CAAC,EAAE,CAAC,CAAA;IACvC,IAAI,QAAQ,KAAK,SAAS,IAAI,iBAAiB,EAAE;QAAE,OAAO,aAAa,CAAC,QAAQ,CAAC,CAAA;IACjF,OAAO,gBAAgB,CAAC,EAAE,CAAC,CAAA;AAC7B,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAChC,EAAsB,EACtB,OAAkC;IAElC,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChC,MAAM,IAAI,gBAAgB,CACxB,iHAAiH,CAClH,CAAA;IACH,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QACnC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACjC,MAAM,IAAI,gBAAgB,CACxB,qBAAqB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,gCAAgC,CAC3E,CAAA;QACH,CAAC;IACH,CAAC;IACD,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAA;IAE7E,IAAI,OAAO,CAAC,gBAAgB,KAAK,KAAK,EAAE,CAAC;QACvC,IAAI,CAAC;YACH,EAAE,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAA;QAClC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,gBAAgB,CACxB,sDAAsD,MAAM,CAAC,KAAK,CAAC,kGAAkG,CACtK,CAAA;QACH,CAAC;IACH,CAAC;IAED,MAAM,OAAO,GAAG,OAAO,CAAC,QAAQ,EAAE,OAAO,IAAI,GAAG,CAAA;IAChD,MAAM,cAAc,GAAG,OAAO,CAAC,QAAQ,EAAE,cAAc,IAAI,GAAG,GAAG,IAAI,CAAA;IACrE,MAAM,cAAc,GAAG,OAAO,CAAC,QAAQ,EAAE,cAAc,IAAI,KAAK,CAAA;IAChE,MAAM,oBAAoB,GAAG,OAAO,CAAC,QAAQ,EAAE,oBAAoB,IAAI,CAAC,CAAA;IACxE,iBAAiB,CAAC,OAAO,EAAE,SAAS,CAAC,CAAA;IACrC,iBAAiB,CAAC,cAAc,EAAE,gBAAgB,CAAC,CAAA;IACnD,iBAAiB,CAAC,cAAc,EAAE,gBAAgB,CAAC,CAAA;IACnD,iBAAiB,CAAC,oBAAoB,EAAE,sBAAsB,CAAC,CAAA;IAC/D,IAAI,aAAa,GAAG,CAAC,CAAA;IAErB,MAAM,UAAU,GAAG,aAAa,CAAC;QAC/B,IAAI,EAAE,aAAa;QACnB,WAAW,EAAE,uDAAuD;QACpE,OAAO,EAAE,GAAG,EAAE;YACZ,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;gBACxC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE;qBACf,OAAO,CAAC,cAAc,CAAA,8BAA8B,KAAK,GAAG,CAAC;qBAC7D,GAAG,EAEJ,CAAA;gBACF,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,IAAI,CAAC,EAAE,CAAA;YACvC,CAAC,CAAC,CAAA;YACF,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,iBAAiB,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,CAAA;QAC5E,CAAC;KACF,CAAC,CAAA;IAEF,MAAM,aAAa,GAAG,aAAa,CAAC;QAClC,IAAI,EAAE,gBAAgB;QACtB,WAAW,EAAE,sEAAsE;QACnF,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,8BAA8B,EAAE,EAAE;YACtF,QAAQ,EAAE,CAAC,OAAO,CAAC;SACpB;QACD,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;YAChB,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAA;YACtC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;gBACxC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,iBAAiB,EAAE,CAAA;YACjF,CAAC;YACD,sFAAsF;YACtF,uCAAuC;YACvC,MAAM,OAAO,GAAG,EAAE,CAAC,OAAO,CAAC,cAAc,CAAA,sBAAsB,KAAK,IAAI,CAAC,CAAC,GAAG,EAAE,CAAA;YAC/E,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,iBAAiB,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,CAAA;QACjF,CAAC;KACF,CAAC,CAAA;IAEF,MAAM,KAAK,GAAG,CAAC,UAAU,EAAE,aAAa,CAAC,CAAA;IAEzC,IAAI,OAAO,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QACnC,6FAA6F;QAC7F,MAAM,OAAO,GAAG,gBAAgB,CAAC,EAAE,CAAC,CAAA;QACpC,MAAM,QAAQ,GAAG,aAAa,CAAC;YAC7B,IAAI,EAAE,WAAW;YACjB,WAAW,EACT,4FAA4F;YAC9F,WAAW,EAAE;gBACX,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,4CAA4C,EAAE;iBACnF;gBACD,QAAQ,EAAE,CAAC,KAAK,CAAC;aAClB;YACD,MAAM,EAAE,OAAO;YACf,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;gBACtB,IAAI,aAAa,IAAI,oBAAoB,EAAE,CAAC;oBAC1C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,6BAA6B,EAAE,CAAA;gBAC/D,CAAC;gBACD,aAAa,IAAI,CAAC,CAAA;gBAClB,IAAI,CAAC;oBACH,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAA;oBACzC,IAAI,GAAG,KAAK,EAAE;wBAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,aAAa,EAAE,CAAA;oBAC7D,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,EAAE,CAAC;wBAC5B,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,oCAAoC,EAAE,CAAA;oBACtE,CAAC;oBACD,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,EAAE,CAAC;wBAC1B,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,qDAAqD,EAAE,CAAA;oBACvF,CAAC;oBAED,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,cAAc,CAAA;oBAE5C,yFAAyF;oBACzF,2FAA2F;oBAC3F,iEAAiE;oBACjE,MAAM,UAAU,GAAG,aAAa,CAAC,GAAG,CAAC,CAAA;oBACrC,KAAK,MAAM,QAAQ,IAAI,aAAa,CAAC,UAAU,CAAC,EAAE,CAAC;wBACjD,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;4BAC7B,OAAO;gCACL,OAAO,EAAE,IAAI;gCACb,IAAI,EAAE,iBAAiB,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,wBAAwB;6BACxE,CAAA;wBACH,CAAC;oBACH,CAAC;oBAED,yFAAyF;oBACzF,+DAA+D;oBAC/D,MAAM,KAAK,GAAG,UAAU,CAAA;oBACxB,IAAI,QAAqC,CAAA;oBACzC,IAAI,CAAC;wBACH,QAAQ,GAAG,CAAC,MAAM,OAAO,CAAC,GAAG,CAAC,sBAAsB,KAAK,EAAE,EAAE,QAAQ,CAAC,CAEpE,CAAA;oBACJ,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBACf,IAAI,KAAK,YAAY,iBAAiB;4BAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,OAAO,EAAE,CAAA;wBACrF,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,yBAAyB,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,CAAA;oBAC1E,CAAC;oBACD,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;wBAC3B,MAAM,MAAM,GAAG,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAA;wBAC/D,sEAAsE;wBACtE,sEAAsE;wBACtE,oDAAoD;wBACpD,IACE,0BAA0B,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;4BAC9C,0BAA0B,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,EAC9C,CAAC;4BACD,SAAQ;wBACV,CAAC;wBACD,yFAAyF;wBACzF,2FAA2F;wBAC3F,MAAM,KAAK,GACT,uFAAuF,CAAC,IAAI,CAC1F,MAAM,CACP,CAAA;wBACH,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;4BACnB,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAA;4BAC9C,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;gCAC7B,OAAO;oCACL,OAAO,EAAE,IAAI;oCACb,IAAI,EAAE,iBAAiB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,wBAAwB;iCACxE,CAAA;4BACH,CAAC;wBACH,CAAC;oBACH,CAAC;oBAED,IAAI,WAAsB,CAAA;oBAC1B,IAAI,CAAC;wBACH,oFAAoF;wBACpF,qFAAqF;wBACrF,WAAW,GAAG,MAAM,OAAO,CAAC,GAAG,CAC7B,kBAAkB,KAAK,+BAA+B,OAAO,GAAG,CAAC,EAAE,EACnE,QAAQ,CACT,CAAA;oBACH,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBACf,IAAI,KAAK,YAAY,iBAAiB;4BAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,OAAO,EAAE,CAAA;wBACrF,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,iBAAiB,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,CAAA;oBAClE,CAAC;oBAED,MAAM,UAAU,GAAG,WAAW,CAAC,MAAM,GAAG,OAAO,CAAA;oBAC/C,IAAI,KAAK,GAAkB,WAAW,CAAC,MAAM,CAAA;oBAC7C,IAAI,UAAU,IAAI,OAAO,CAAC,QAAQ,EAAE,UAAU,KAAK,IAAI,EAAE,CAAC;wBACxD,IAAI,CAAC;4BACH,MAAM,SAAS,GAAG,CAAC,MAAM,OAAO,CAAC,GAAG,CAClC,4CAA4C,KAAK,sBAAsB,EACvE,QAAQ,CACT,CAAuC,CAAA;4BACxC,MAAM,KAAK,GAAG,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,CAAA;4BACzC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,OAAO,EAAE,CAAC;gCACjF,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,iCAAiC,EAAE,CAAA;4BACnE,CAAC;4BACD,KAAK,GAAG,KAAK,CAAA;wBACf,CAAC;wBAAC,OAAO,KAAK,EAAE,CAAC;4BACf,IAAI,KAAK,YAAY,iBAAiB;gCAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,OAAO,EAAE,CAAA;4BACrF,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,kCAAkC,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,CAAA;wBACnF,CAAC;oBACH,CAAC;yBAAM,IAAI,UAAU,EAAE,CAAC;wBACtB,KAAK,GAAG,IAAI,CAAA;oBACd,CAAC;oBACD,IAAI,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;oBACjD,IAAI,OAAO,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAA;oBACzC,IAAI,MAAM,GAA4B;wBACpC,IAAI,EAAE,OAAO;wBACb,GAAG,CAAC,UAAU,IAAI,KAAK,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;qBAChF,CAAA;oBACD,IAAI,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAA;oBACvC,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAA;oBACjC,OAAO,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,UAAU,GAAG,cAAc,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;wBAC3E,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAA;wBAC1C,OAAO,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAA;wBACrC,MAAM,GAAG;4BACP,IAAI,EAAE,OAAO;4BACb,GAAG,CAAC,UAAU,IAAI,KAAK,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;yBAChF,CAAA;wBACD,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAA;oBACrC,CAAC;oBACD,IAAI,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,UAAU,GAAG,cAAc,EAAE,CAAC;wBAC3D,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,qCAAqC,EAAE,CAAA;oBACvE,CAAC;oBACD,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,iBAAiB,EAAE,MAAM,EAAE,CAAA;gBACxD,CAAC;wBAAS,CAAC;oBACT,aAAa,IAAI,CAAC,CAAA;gBACpB,CAAC;YACH,CAAC;SACF,CAAC,CAAA;QACF,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;IACtB,CAAC;IAED,MAAM,MAAM,GAAG,eAAe,CAAC;QAC7B,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,UAAU;QAChC,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,OAAO;QACnC,KAAK;KACN,CAAC,CAAA;IAEF,IAAI,OAAO,CAAC,QAAQ,KAAK,SAAS;QAAE,OAAO,MAAM,CAAA;IAEjD,+FAA+F;IAC/F,8FAA8F;IAC9F,kGAAkG;IAClG,MAAM,EAAE,SAAS,EAAE,GAAG,OAAO,CAAC,QAAQ,CAAA;IAEtC,OAAO;QACL,GAAG,MAAM;QACT,KAAK,EAAE,CAAC,OAAgB,EAAE,EAAE,CAC1B,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE;YACpB,gBAAgB,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,CAC3C,OAAO,CAAC,MAAM,KAAK,YAAY,IAAI,OAAO,CAAC,MAAM,EAAE,IAAI,KAAK,WAAW;gBACrE,CAAC,CAAC,IAAI;gBACN,CAAC,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,WAAW,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;SAC7D,CAAC;QACJ,KAAK,CAAC,MAAM,CAAC,OAAO;YAClB,IAAI,OAAO,CAAC,MAAM,KAAK,YAAY,IAAI,OAAO,CAAC,MAAM,EAAE,IAAI,KAAK,WAAW,EAAE,CAAC;gBAC5E,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,EAAE,EAAE,OAAO,OAAO,CAAC,EAAE,KAAK,QAAQ,IAAI,OAAO,OAAO,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI;oBACxF,MAAM,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE;iBAC1D,CAAA;YACtB,CAAC;YACD,OAAO,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;QAC/B,CAAC;KACF,CAAA;AACH,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nifrajs/mcp-db",
-  "version": "2.11.0",
+  "version": "2.12.0",
   "description": "Serve a SQLite database as a fail-closed MCP server - allowlisted schema tools by default, opt-in read-only queries with plan verification.",
   "keywords": [
     "bun",
@@ -35,7 +35,7 @@
     "access": "public"
   },
   "dependencies": {
-    "@nifrajs/mcp": "2.11.0"
+    "@nifrajs/mcp": "2.12.0"
   },
   "repository": {
     "type": "git",

package/src/index.ts

@@ -31,6 +31,10 @@ export interface SqliteDatabaseLike {
   prepare(sql: string): { all(...params: unknown[]): unknown[] }
   /** Execute a statement for its side effect (used only for `PRAGMA query_only`). */
   run(sql: string): unknown
+  /** Optional path this database was opened from; a file-backed one can be reopened read-only in a
+   * worker so `run_query` runs off the serving connection. `:memory:` and the empty anonymous
+   * database cannot, and run in process. */
+  readonly filename?: string
 }
 
 /** Context forwarded to `authorize` - the inbound HTTP Request carrying the `run_query` call. */
@@ -51,6 +55,19 @@ export interface RunQueryOptions {
   readonly maxRows?: number
   /** Max serialized result size in bytes (default 100 KB). */
   readonly maxResultBytes?: number
+  /**
+   * Maximum wall-clock time for planning, execution, and optional counting (default 5 seconds).
+   * The deadline always bounds the RESPONSE. Whether it also stops the WORK depends on where the
+   * query runs: a file-backed database runs it in a reusable read-only worker that is terminated
+   * on expiry, while an in-memory database (or a shim with no `filename`) runs it on this thread,
+   * where a synchronous statement cannot be preempted and the overrun is only reported after it
+   * returns.
+   */
+  readonly queryTimeoutMs?: number
+  /** Return an exact total after row truncation. Off by default because it re-executes the query. */
+  readonly exactTotal?: boolean
+  /** Maximum simultaneous run_query calls on this database connection (default 1). */
+  readonly maxConcurrentQueries?: number
 }
 
 export interface ServeDatabaseAsMcpOptions {
@@ -104,6 +121,131 @@ const stripSqlNoise = (sql: string): string =>
     .replace(/--[^\n]*/g, " ")
     .replace(/\/\*[\s\S]*?\*\//g, " ")
 
+// SQLite's bare-identifier alphabet. Non-ASCII is included because SQLite treats any byte >= 0x80 as
+// an identifier character; leaving it out would end a word early and split one table name into two.
+const WORD_START = /[A-Za-z_\u0080-\uffff]/
+const WORD_PART = /[A-Za-z0-9_$\u0080-\uffff]/
+
+/** One lexical unit of SQL. `bare` distinguishes a keyword-capable word from a quoted identifier, so
+ * `FROM "from"` reads the second token as a table name and not as another clause. */
+interface SqlToken {
+  readonly kind: "word" | "punct"
+  /** Identifier text with quoting removed and escapes collapsed; the raw character for punctuation. */
+  readonly value: string
+  /** True for an unquoted word - only these can be SQL keywords. */
+  readonly bare: boolean
+}
+
+/**
+ * Tokenize far enough to name every relation. A regex cannot do this job: SQLite needs no separator
+ * between a keyword and a quoted identifier (`FROM"users"` is legal), and it accepts four identifier
+ * quotings - `"x"`, `[x]`, `` `x` ``, and bare. A `\s+`-anchored pattern silently reads none of
+ * those as a table reference, which is exactly how an aliased `FROM"users"AS habits` slipped past
+ * the allowlist and returned a non-exposed table's rows.
+ *
+ * String literals and comments become nothing, so a `FROM` inside attacker-controlled text is inert.
+ */
+function tokenizeSql(sql: string): SqlToken[] {
+  const tokens: SqlToken[] = []
+  let i = 0
+  /** Read a quoted identifier, collapsing the doubled-delimiter escape SQLite uses for `"` and `` ` ``. */
+  const readQuoted = (close: string, escapable: boolean): void => {
+    let value = ""
+    i++ // past the opening delimiter
+    while (i < sql.length) {
+      if (sql[i] === close) {
+        if (escapable && sql[i + 1] === close) {
+          value += close
+          i += 2
+          continue
+        }
+        i++
+        tokens.push({ kind: "word", value, bare: false })
+        return
+      }
+      value += sql[i]
+      i++
+    }
+    // Unterminated - emit what we have. The caller's single-statement and plan checks still run.
+    tokens.push({ kind: "word", value, bare: false })
+  }
+  while (i < sql.length) {
+    const char = sql[i] as string
+    if (char === " " || char === "\t" || char === "\n" || char === "\r" || char === "\f") {
+      i++
+    } else if (char === "-" && sql[i + 1] === "-") {
+      const end = sql.indexOf("\n", i)
+      i = end === -1 ? sql.length : end + 1
+    } else if (char === "/" && sql[i + 1] === "*") {
+      const end = sql.indexOf("*/", i + 2)
+      i = end === -1 ? sql.length : end + 2
+    } else if (char === "'") {
+      // Literal: consumed and dropped, so its contents can never be read as SQL.
+      i++
+      while (i < sql.length) {
+        if (sql[i] === "'") {
+          if (sql[i + 1] === "'") {
+            i += 2
+            continue
+          }
+          i++
+          break
+        }
+        i++
+      }
+    } else if (char === '"') {
+      readQuoted('"', true)
+    } else if (char === "`") {
+      readQuoted("`", true)
+    } else if (char === "[") {
+      readQuoted("]", false) // MSSQL-style bracket quoting: no escape form
+    } else if (WORD_START.test(char)) {
+      const start = i
+      while (i < sql.length && WORD_PART.test(sql[i] as string)) i++
+      tokens.push({ kind: "word", value: sql.slice(start, i), bare: true })
+    } else if (char >= "0" && char <= "9") {
+      while (i < sql.length && /[0-9A-Za-z._]/.test(sql[i] as string)) i++
+    } else {
+      tokens.push({ kind: "punct", value: char, bare: false })
+      i++
+    }
+  }
+  return tokens
+}
+
+/** True when `token` is the unquoted keyword `word` (case-insensitive). */
+const isKeyword = (token: SqlToken | undefined, word: string): boolean =>
+  token?.bare === true && token.value.toLowerCase() === word
+
+/**
+ * Every relation the statement names after `FROM`/`JOIN`, lowercased, with CTE names excluded.
+ * A schema qualifier resolves to its table (`main.habits` -> `habits`); a subquery contributes
+ * nothing of its own because its inner `FROM` is tokenized alongside everything else.
+ */
+function relationNames(sql: string): string[] {
+  const tokens = tokenizeSql(sql)
+  // `name AS (` only ever introduces a CTE - a column alias cannot be followed by a paren - so this
+  // needs no `WITH` tracking to be exact.
+  const ctes = new Set<string>()
+  for (let i = 1; i < tokens.length - 1; i++) {
+    const name = tokens[i - 1] as SqlToken
+    if (isKeyword(tokens[i], "as") && tokens[i + 1]?.value === "(" && name.kind === "word") {
+      ctes.add(name.value.toLowerCase())
+    }
+  }
+  const names: string[] = []
+  for (let i = 0; i < tokens.length; i++) {
+    if (!isKeyword(tokens[i], "from") && !isKeyword(tokens[i], "join")) continue
+    const first = tokens[i + 1]
+    if (first === undefined || first.kind !== "word") continue // `FROM (subquery)` - nothing to name here
+    // A qualified reference names the table second; an unqualified one names it first.
+    const qualified = tokens[i + 2]?.value === "." && tokens[i + 3]?.kind === "word"
+    const table = qualified ? (tokens[i + 3] as SqlToken).value : first.value
+    if (table !== "" && !ctes.has(table.toLowerCase())) names.push(table.toLowerCase())
+  }
+  return names
+}
+
 /** Reject multi-statement input: allow one terminator only when it is the final character. */
 const isSingleStatement = (sql: string): boolean => {
   let quote: "'" | '"' | null = null
@@ -215,6 +357,166 @@ function assertResultLimit(value: number, name: string): void {
   }
 }
 
+class QueryTimeoutError extends Error {
+  constructor() {
+    super("query exceeded the time limit")
+    this.name = "QueryTimeoutError"
+  }
+}
+
+/** One execution lane for `run_query`: `run` resolves rows, or rejects once the deadline passes. */
+interface QuerySession {
+  run(sql: string, deadline: number): Promise<unknown[]>
+}
+
+/**
+ * The isolated lane. The worker reopens the SAME database FILE read-only and answers one statement
+ * at a time; it is spawned once and reused for the life of the server. It deliberately does not
+ * take a `serialize()` snapshot - that copies the whole database into memory on EVERY call, which
+ * is a larger availability problem than the slow query the deadline exists to bound.
+ */
+const SQLITE_WORKER_SOURCE = `
+const { Database } = require("bun:sqlite")
+let db
+self.onmessage = (event) => {
+  const { id, filename, sql } = event.data
+  try {
+    if (db === undefined) {
+      db = new Database(filename, { readonly: true })
+      db.run("PRAGMA query_only = ON")
+    }
+    self.postMessage({ id, ok: true, rows: db.prepare(sql).all() })
+  } catch (error) {
+    self.postMessage({ id, ok: false, error: String(error) })
+  }
+}
+`
+
+function isWorkerAvailable(): boolean {
+  return typeof Worker !== "undefined" && typeof Blob !== "undefined" && typeof URL !== "undefined"
+}
+
+/** Only a file-backed database can be reopened in a worker. `:memory:` and the anonymous temp
+ * database live in this process alone, so they take the in-process lane instead. */
+function reopenableFilename(db: SqliteDatabaseLike): string | undefined {
+  const filename = db.filename
+  if (typeof filename !== "string" || filename === "" || filename === ":memory:") return undefined
+  return filename.startsWith("file::memory:") ? undefined : filename
+}
+
+interface PendingQuery {
+  resolve(rows: unknown[]): void
+  reject(error: Error): void
+}
+
+function workerSession(filename: string): QuerySession {
+  let worker: Worker | undefined
+  let sourceUrl: string | undefined
+  let nextId = 0
+  const pending = new Map<number, PendingQuery>()
+  let lane: Promise<unknown> = Promise.resolve()
+
+  /** Drop the worker and fail everything riding on it. The only bound this side can enforce over a
+   * statement already running inside native SQLite is to stop owning the connection it runs on. */
+  const discard = (error: Error): void => {
+    const waiters = [...pending.values()]
+    pending.clear()
+    worker?.terminate()
+    if (sourceUrl !== undefined) URL.revokeObjectURL(sourceUrl)
+    worker = undefined
+    sourceUrl = undefined
+    for (const waiter of waiters) waiter.reject(error)
+  }
+
+  const ensureWorker = (): Worker => {
+    if (worker !== undefined) return worker
+    sourceUrl = URL.createObjectURL(new Blob([SQLITE_WORKER_SOURCE], { type: "text/javascript" }))
+    const spawned = new Worker(sourceUrl)
+    spawned.onmessage = (
+      event: MessageEvent<{ id?: number; ok?: boolean; rows?: unknown[]; error?: string }>,
+    ) => {
+      const { id, ok, rows, error } = event.data
+      if (typeof id !== "number") return
+      const waiter = pending.get(id)
+      if (waiter === undefined) return
+      pending.delete(id)
+      if (ok === true) waiter.resolve(rows ?? [])
+      else waiter.reject(new Error(error ?? "query failed in worker"))
+    }
+    spawned.onerror = () => discard(new Error("query failed in worker"))
+    // An in-flight query holds its own deadline timer on the loop, so an IDLE worker must not be
+    // what keeps the process alive.
+    ;(spawned as { unref?: () => void }).unref?.()
+    worker = spawned
+    return spawned
+  }
+
+  const dispatch = (sql: string, deadline: number): Promise<unknown[]> => {
+    const remaining = deadline - Date.now()
+    if (remaining <= 0) return Promise.reject(new QueryTimeoutError())
+    const active = ensureWorker()
+    const id = ++nextId
+    return new Promise<unknown[]>((resolve, reject) => {
+      const timer = setTimeout(() => discard(new QueryTimeoutError()), remaining)
+      pending.set(id, {
+        resolve: (rows) => {
+          clearTimeout(timer)
+          resolve(rows)
+        },
+        reject: (error) => {
+          clearTimeout(timer)
+          reject(error)
+        },
+      })
+      try {
+        active.postMessage({ id, filename, sql })
+      } catch (error) {
+        pending.delete(id)
+        clearTimeout(timer)
+        reject(error instanceof Error ? error : new Error(String(error)))
+      }
+    })
+  }
+
+  return {
+    run(sql, deadline) {
+      // One worker owns the connection, so overlapping calls queue behind each other rather than
+      // interleaving statements on it.
+      const result = lane.then(() => dispatch(sql, deadline))
+      lane = result.catch(() => undefined)
+      return result
+    },
+  }
+}
+
+/**
+ * The in-process lane, used when the database cannot be reopened elsewhere. The deadline is checked
+ * around the statement and nothing more: `prepare().all()` is synchronous, so it holds the only
+ * thread there is and no timer of ours can fire while it runs. That makes this lane BEST EFFORT -
+ * it reports an overrun, it does not cut one short.
+ */
+function inProcessSession(db: SqliteDatabaseLike): QuerySession {
+  return {
+    async run(sql, deadline) {
+      if (Date.now() >= deadline) throw new QueryTimeoutError()
+      const rows = db.prepare(sql).all()
+      if (Date.now() > deadline) throw new QueryTimeoutError()
+      return rows
+    },
+  }
+}
+
+/**
+ * Pick the lane once, at construction. A file-backed database is isolated in a reusable read-only
+ * worker, which is the only arrangement that can actually stop a running statement. Anything else
+ * runs in process - every database keeps working, none is refused.
+ */
+function openQuerySession(db: SqliteDatabaseLike): QuerySession {
+  const filename = reopenableFilename(db)
+  if (filename !== undefined && isWorkerAvailable()) return workerSession(filename)
+  return inProcessSession(db)
+}
+
 /**
  * Serve `db` as a mountable MCP server (`mcp.fetch` at `POST /mcp`). See module docs for the
  * security model. Throws {@link McpDbConfigError} on any unsafe configuration - always at
@@ -250,8 +552,13 @@ export function serveDatabaseAsMcp(
 
   const maxRows = options.runQuery?.maxRows ?? 100
   const maxResultBytes = options.runQuery?.maxResultBytes ?? 100 * 1024
+  const queryTimeoutMs = options.runQuery?.queryTimeoutMs ?? 5_000
+  const maxConcurrentQueries = options.runQuery?.maxConcurrentQueries ?? 1
   assertResultLimit(maxRows, "maxRows")
   assertResultLimit(maxResultBytes, "maxResultBytes")
+  assertResultLimit(queryTimeoutMs, "queryTimeoutMs")
+  assertResultLimit(maxConcurrentQueries, "maxConcurrentQueries")
+  let activeQueries = 0
 
   const listTables = defineMcpTool({
     name: "list_tables",
@@ -292,6 +599,8 @@ export function serveDatabaseAsMcp(
   const tools = [listTables, describeTable]
 
   if (options.runQuery !== undefined) {
+    // One lane for the life of the server: picked once here, so the handler below always has it.
+    const session = openQuerySession(db)
     const runQuery = defineMcpTool({
       name: "run_query",
       description:
@@ -304,89 +613,133 @@ export function serveDatabaseAsMcp(
         required: ["sql"],
       },
       intent: "table",
-      handler: (args) => {
-        const sql = String(args.sql ?? "").trim()
-        if (sql === "") return { isError: true, text: "empty query" }
-        if (!isSingleStatement(sql)) {
-          return { isError: true, text: "only a single statement is allowed" }
+      handler: async (args) => {
+        if (activeQueries >= maxConcurrentQueries) {
+          return { isError: true, text: "too many concurrent queries" }
         }
-        if (!isReadStatement(sql)) {
-          return { isError: true, text: "only SELECT (or WITH…SELECT) statements are allowed" }
-        }
-
-        // Verify via the query plan that only allowlisted tables are touched. SQLite names every
-        // scanned/searched relation in EXPLAIN QUERY PLAN detail rows.
-        const query = executableSql(sql)
-        let planRows: Array<{ detail?: unknown }>
+        activeQueries += 1
         try {
-          planRows = db.prepare(`EXPLAIN QUERY PLAN ${query}`).all() as Array<{ detail?: unknown }>
-        } catch (error) {
-          return { isError: true, text: `query failed to plan: ${String(error)}` }
-        }
-        for (const row of planRows) {
-          const detail = typeof row.detail === "string" ? row.detail : ""
-          // SQLite also emits non-table nodes such as `SCAN CONSTANT ROW` for a
-          // constant-only SELECT. Only treat a scan/search target as a relation
-          // when it is not one of those planner pseudo-nodes.
-          if (
-            /^SCAN\s+CONSTANT\s+ROW$/i.test(detail.trim()) ||
-            /^SCAN\s+SUBQUERY\s+\d+$/i.test(detail.trim())
-          ) {
-            continue
+          const sql = String(args.sql ?? "").trim()
+          if (sql === "") return { isError: true, text: "empty query" }
+          if (!isSingleStatement(sql)) {
+            return { isError: true, text: "only a single statement is allowed" }
           }
-          const match = /(?:SCAN|SEARCH)\s+(?:TABLE\s+)?([A-Za-z_][A-Za-z0-9_]*)/i.exec(detail)
-          if (match !== null) {
-            const relation = match[1]?.toLowerCase() ?? ""
+          if (!isReadStatement(sql)) {
+            return { isError: true, text: "only SELECT (or WITH…SELECT) statements are allowed" }
+          }
+
+          const deadline = Date.now() + queryTimeoutMs
+
+          // Verify SQL relation tokens before the plan check. SQLite's plan output uses aliases as
+          // scan targets (e.g. `users AS habits` becomes `SCAN habits`), so plan-only validation can
+          // mistake an attacker-controlled alias for an allowlisted table.
+          const executable = executableSql(sql)
+          for (const relation of relationNames(executable)) {
             if (!allowlist.has(relation)) {
               return {
                 isError: true,
-                text: `query touches ${JSON.stringify(match[1])}, which is not exposed`,
+                text: `query touches ${JSON.stringify(relation)}, which is not exposed`,
               }
             }
           }
-        }
-
-        let limitedRows: unknown[]
-        try {
-          // Fetch at most one row beyond the advertised cap. This keeps the database driver's
-          // materialization bounded even when the caller submits `SELECT * FROM a_huge_table`.
-          limitedRows = db
-            .prepare(`SELECT * FROM (${query}) AS "__nifra_result" LIMIT ${maxRows + 1}`)
-            .all()
-        } catch (error) {
-          return { isError: true, text: `query failed: ${String(error)}` }
-        }
 
-        const wasLimited = limitedRows.length > maxRows
-        let total = limitedRows.length
-        if (wasLimited) {
+          // Verify via the query plan that only allowlisted tables are touched. SQLite names every
+          // scanned/searched relation in EXPLAIN QUERY PLAN detail rows.
+          const query = executable
+          let planRows: Array<{ detail?: unknown }>
           try {
-            const countRows = db
-              .prepare(`SELECT count(*) AS "__nifra_total" FROM (${query}) AS "__nifra_count"`)
-              .all() as Array<{ __nifra_total?: unknown }>
-            const count = countRows[0]?.__nifra_total
-            if (typeof count !== "number" || !Number.isSafeInteger(count) || count < maxRows) {
-              return { isError: true, text: "query failed: invalid row count" }
+            planRows = (await session.run(`EXPLAIN QUERY PLAN ${query}`, deadline)) as Array<{
+              detail?: unknown
+            }>
+          } catch (error) {
+            if (error instanceof QueryTimeoutError) return { isError: true, text: error.message }
+            return { isError: true, text: `query failed to plan: ${String(error)}` }
+          }
+          for (const row of planRows) {
+            const detail = typeof row.detail === "string" ? row.detail : ""
+            // SQLite also emits non-table nodes such as `SCAN CONSTANT ROW` for a
+            // constant-only SELECT. Only treat a scan/search target as a relation
+            // when it is not one of those planner pseudo-nodes.
+            if (
+              /^SCAN\s+CONSTANT\s+ROW$/i.test(detail.trim()) ||
+              /^SCAN\s+SUBQUERY\s+\d+$/i.test(detail.trim())
+            ) {
+              continue
             }
-            total = count
+            // A schema-qualified reference plans as `SCAN main.habits`. The table is the last dotted
+            // segment; reading the first would reject `main.habits` as a table literally named "main".
+            const match =
+              /(?:SCAN|SEARCH)\s+(?:TABLE\s+)?(?:[A-Za-z_][A-Za-z0-9_]*\.)?([A-Za-z_][A-Za-z0-9_]*)/i.exec(
+                detail,
+              )
+            if (match !== null) {
+              const relation = match[1]?.toLowerCase() ?? ""
+              if (!allowlist.has(relation)) {
+                return {
+                  isError: true,
+                  text: `query touches ${JSON.stringify(match[1])}, which is not exposed`,
+                }
+              }
+            }
+          }
+
+          let limitedRows: unknown[]
+          try {
+            // Fetch at most one row beyond the advertised cap. This keeps the database driver's
+            // materialization bounded even when the caller submits `SELECT * FROM a_huge_table`.
+            limitedRows = await session.run(
+              `SELECT * FROM (${query}) AS "__nifra_result" LIMIT ${maxRows + 1}`,
+              deadline,
+            )
           } catch (error) {
-            return { isError: true, text: `query failed to count results: ${String(error)}` }
+            if (error instanceof QueryTimeoutError) return { isError: true, text: error.message }
+            return { isError: true, text: `query failed: ${String(error)}` }
           }
+
+          const wasLimited = limitedRows.length > maxRows
+          let total: number | null = limitedRows.length
+          if (wasLimited && options.runQuery?.exactTotal === true) {
+            try {
+              const countRows = (await session.run(
+                `SELECT count(*) AS "__nifra_total" FROM (${query}) AS "__nifra_count"`,
+                deadline,
+              )) as Array<{ __nifra_total?: unknown }>
+              const count = countRows[0]?.__nifra_total
+              if (typeof count !== "number" || !Number.isSafeInteger(count) || count < maxRows) {
+                return { isError: true, text: "query failed: invalid row count" }
+              }
+              total = count
+            } catch (error) {
+              if (error instanceof QueryTimeoutError) return { isError: true, text: error.message }
+              return { isError: true, text: `query failed to count results: ${String(error)}` }
+            }
+          } else if (wasLimited) {
+            total = null
+          }
+          let shown = Math.min(limitedRows.length, maxRows)
+          let payload = limitedRows.slice(0, shown)
+          let result: Record<string, unknown> = {
+            rows: payload,
+            ...(wasLimited || shown < limitedRows.length ? { truncated: true, total } : {}),
+          }
+          let serialized = JSON.stringify(result)
+          const encoded = new TextEncoder()
+          while (encoded.encode(serialized).byteLength > maxResultBytes && shown > 0) {
+            shown = Math.max(0, Math.floor(shown / 2))
+            payload = limitedRows.slice(0, shown)
+            result = {
+              rows: payload,
+              ...(wasLimited || shown < limitedRows.length ? { truncated: true, total } : {}),
+            }
+            serialized = JSON.stringify(result)
+          }
+          if (encoded.encode(serialized).byteLength > maxResultBytes) {
+            return { isError: true, text: "query result exceeds maxResultBytes" }
+          }
+          return { text: serialized, structuredContent: result }
+        } finally {
+          activeQueries -= 1
         }
-        let shown = Math.min(limitedRows.length, maxRows)
-        let payload = limitedRows.slice(0, shown)
-        let serialized = JSON.stringify(payload)
-        while (serialized.length > maxResultBytes && shown > 0) {
-          shown = Math.max(0, Math.floor(shown / 2))
-          payload = limitedRows.slice(0, shown)
-          serialized = JSON.stringify(payload)
-        }
-        const truncated = shown < total
-        const result: Record<string, unknown> = {
-          rows: payload,
-          ...(truncated ? { truncated: { shown, total } } : {}),
-        }
-        return { text: JSON.stringify(result), structuredContent: result }
       },
     })
     tools.push(runQuery)
@@ -405,46 +758,23 @@ export function serveDatabaseAsMcp(
   // the wrapped fetch authorizes, and direct handle() dispatch fails closed (no Request → no auth).
   const { authorize } = options.runQuery
 
-  const rpcId = (id: unknown): string | number | null =>
-    typeof id === "string" || typeof id === "number" ? id : null
-
-  const unauthorizedResult = (id: unknown): JsonRpcResponse =>
-    ({
-      jsonrpc: "2.0",
-      id: rpcId(id),
-      result: {
-        content: [{ type: "text", text: "unauthorized" }],
-        isError: true,
-      },
-    }) as JsonRpcResponse
-
-  const isRunQueryCall = (message: unknown): message is { id?: unknown } => {
-    if (typeof message !== "object" || message === null) return false
-    const { method, params } = message as { method?: unknown; params?: { name?: unknown } }
-    return method === "tools/call" && params?.name === "run_query"
-  }
-
   return {
     ...server,
-    async fetch(request: Request): Promise<Response> {
-      if (request.method === "POST") {
-        let body: unknown
-        try {
-          body = await request.clone().json()
-        } catch {
-          return server.fetch(request) // malformed JSON → the protocol layer's error handling
-        }
-        const messages = Array.isArray(body) ? body : [body]
-        const queryCall = messages.find(isRunQueryCall)
-        if (queryCall !== undefined) {
-          const ok = await authorize({ toolName: "run_query", request })
-          if (!ok) return Response.json(unauthorizedResult(queryCall.id))
-        }
-      }
-      return server.fetch(request)
-    },
+    fetch: (request: Request) =>
+      server.fetch(request, {
+        authorizeMessage: async (message, inbound) =>
+          message.method !== "tools/call" || message.params?.name !== "run_query"
+            ? true
+            : authorize({ toolName: "run_query", request: inbound }),
+      }),
     async handle(message) {
-      if (isRunQueryCall(message)) return unauthorizedResult(message.id)
+      if (message.method === "tools/call" && message.params?.name === "run_query") {
+        return {
+          jsonrpc: "2.0",
+          id: typeof message.id === "string" || typeof message.id === "number" ? message.id : null,
+          result: { content: [{ type: "text", text: "unauthorized" }], isError: true },
+        } as JsonRpcResponse
+      }
       return server.handle(message)
     },
   }