@rmwxxwmr/mcp-database-service 0.1.2

package/dist/config/configTypes.d.ts

@@ -0,0 +1,81 @@
+export type DatabaseType = "mysql" | "oracle" | "postgresql" | "redis" | "opengauss";
+export interface BaseDatabaseConfig {
+    key: string;
+    type: DatabaseType;
+    readonly: boolean;
+}
+export interface MysqlDatabaseConfig extends BaseDatabaseConfig {
+    type: "mysql";
+    connection: {
+        host: string;
+        port?: number;
+        databaseName: string;
+        user: string;
+        password: string;
+        connectTimeoutMs?: number;
+        ssl?: boolean | Record<string, unknown>;
+    };
+}
+export interface OracleDatabaseConfig extends BaseDatabaseConfig {
+    type: "oracle";
+    connection: {
+        host: string;
+        port?: number;
+        serviceName?: string;
+        sid?: string;
+        user: string;
+        password: string;
+        connectTimeoutMs?: number;
+        clientMode?: "thin" | "thick";
+        clientLibDir?: string;
+    };
+}
+export interface PostgresDatabaseConfig extends BaseDatabaseConfig {
+    type: "postgresql" | "opengauss";
+    connection: {
+        host: string;
+        port?: number;
+        databaseName: string;
+        user: string;
+        password: string;
+        connectTimeoutMs?: number;
+        ssl?: boolean | Record<string, unknown>;
+    };
+}
+export interface RedisDatabaseConfig extends BaseDatabaseConfig {
+    type: "redis";
+    connection: {
+        url?: string;
+        host?: string;
+        port?: number;
+        databaseName?: number;
+        username?: string;
+        password?: string;
+        connectTimeoutMs?: number;
+    };
+}
+export type DatabaseConfig = MysqlDatabaseConfig | OracleDatabaseConfig | PostgresDatabaseConfig | RedisDatabaseConfig;
+export interface LoggingConfig {
+    enabled: boolean;
+    directory?: string;
+}
+export interface QueryConfig {
+    timeoutMs?: number;
+}
+export interface RootConfig {
+    databases: DatabaseConfig[];
+    logging: LoggingConfig;
+    query: QueryConfig;
+}
+export interface LoadedConfig {
+    configPath: string;
+    loadedAt: string;
+    databases: DatabaseConfig[];
+    databaseMap: Map<string, DatabaseConfig>;
+    logging: LoggingConfig & {
+        directory: string;
+    };
+    query: {
+        timeoutMs: number | null;
+    };
+}

package/dist/config/configTypes.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=configTypes.js.map

package/dist/config/configTypes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"configTypes.js","sourceRoot":"","sources":["../../src/config/configTypes.ts"],"names":[],"mappings":""}

package/dist/config/configValidation.d.ts

@@ -0,0 +1,6 @@
+import type { RootConfig } from "./configTypes.js";
+/**
+ * Validation happens once at startup. The returned array is already typed and
+ * safe for the runtime to consume.
+ */
+export declare function validateDatabaseConfig(rawConfig: unknown): RootConfig;

package/dist/config/configValidation.js

@@ -0,0 +1,142 @@
+import { z } from "zod";
+import { ApplicationError } from "../core/errors.js";
+const readonlySchema = z.boolean();
+const keySchema = z.string().min(1);
+const mysqlSchema = z.object({
+    key: keySchema,
+    type: z.literal("mysql"),
+    readonly: readonlySchema,
+    connection: z.object({
+        host: z.string().min(1),
+        port: z.number().int().positive().optional(),
+        databaseName: z.string().min(1),
+        user: z.string().min(1),
+        password: z.string(),
+        connectTimeoutMs: z.number().int().positive().optional(),
+        ssl: z.union([z.boolean(), z.record(z.unknown())]).optional()
+    })
+});
+const oracleSchema = z.object({
+    key: keySchema,
+    type: z.literal("oracle"),
+    readonly: readonlySchema,
+    connection: z
+        .object({
+        host: z.string().min(1),
+        port: z.number().int().positive().optional(),
+        serviceName: z.string().min(1).optional(),
+        sid: z.string().min(1).optional(),
+        user: z.string().min(1),
+        password: z.string(),
+        connectTimeoutMs: z.number().int().positive().optional(),
+        clientMode: z.union([z.literal("thin"), z.literal("thick")]).optional(),
+        clientLibDir: z.string().min(1).optional()
+    })
+        .superRefine((value, context) => {
+        if (!value.serviceName && !value.sid) {
+            context.addIssue({
+                code: z.ZodIssueCode.custom,
+                message: "Oracle connection requires either serviceName or sid"
+            });
+        }
+        if (value.clientMode === "thick" && !value.clientLibDir) {
+            context.addIssue({
+                code: z.ZodIssueCode.custom,
+                message: "Oracle thick mode requires clientLibDir"
+            });
+        }
+    })
+});
+const postgresConnectionSchema = z.object({
+    host: z.string().min(1),
+    port: z.number().int().positive().optional(),
+    databaseName: z.string().min(1),
+    user: z.string().min(1),
+    password: z.string(),
+    connectTimeoutMs: z.number().int().positive().optional(),
+    ssl: z.union([z.boolean(), z.record(z.unknown())]).optional()
+});
+const postgresSchema = z.object({
+    key: keySchema,
+    type: z.literal("postgresql"),
+    readonly: readonlySchema,
+    connection: postgresConnectionSchema
+});
+const openGaussSchema = z.object({
+    key: keySchema,
+    type: z.literal("opengauss"),
+    readonly: readonlySchema,
+    connection: postgresConnectionSchema
+});
+const redisSchema = z.object({
+    key: keySchema,
+    type: z.literal("redis"),
+    readonly: readonlySchema,
+    connection: z
+        .object({
+        url: z.string().min(1).optional(),
+        host: z.string().min(1).optional(),
+        port: z.number().int().positive().optional(),
+        databaseName: z.number().int().nonnegative().optional(),
+        username: z.string().optional(),
+        password: z.string().optional(),
+        connectTimeoutMs: z.number().int().positive().optional()
+    })
+        .superRefine((value, context) => {
+        if (!value.url && !value.host) {
+            context.addIssue({
+                code: z.ZodIssueCode.custom,
+                message: "Redis connection requires either url or host"
+            });
+        }
+    })
+});
+const databaseArraySchema = z
+    .array(z.discriminatedUnion("type", [mysqlSchema, oracleSchema, postgresSchema, openGaussSchema, redisSchema]))
+    .min(1);
+const rootConfigSchema = z.object({
+    databases: databaseArraySchema,
+    logging: z
+        .object({
+        enabled: z.boolean().default(false),
+        directory: z.string().min(1).optional()
+    })
+        .default({
+        enabled: false
+    }),
+    query: z
+        .object({
+        timeoutMs: z.number().int().positive().optional()
+    })
+        .default({})
+}).strict();
+/**
+ * Validation happens once at startup. The returned array is already typed and
+ * safe for the runtime to consume.
+ */
+export function validateDatabaseConfig(rawConfig) {
+    const parsed = rootConfigSchema.safeParse(rawConfig);
+    if (!parsed.success) {
+        throw new ApplicationError("CONFIG_ERROR", "Invalid database configuration", {
+            issues: parsed.error.issues
+        });
+    }
+    const keys = new Set();
+    for (const config of parsed.data.databases) {
+        if (keys.has(config.key)) {
+            throw new ApplicationError("CONFIG_ERROR", `Duplicate database key: ${config.key}`);
+        }
+        keys.add(config.key);
+    }
+    return {
+        databases: parsed.data.databases,
+        logging: {
+            enabled: parsed.data.logging.enabled,
+            directory: parsed.data.logging.directory
+        },
+        query: {
+            timeoutMs: parsed.data.query.timeoutMs
+        }
+    };
+}
+//# sourceMappingURL=configValidation.js.map

package/dist/config/configValidation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"configValidation.js","sourceRoot":"","sources":["../../src/config/configValidation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAGrD,MAAM,cAAc,GAAG,CAAC,CAAC,OAAO,EAAE,CAAC;AACnC,MAAM,SAAS,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AAEpC,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3B,GAAG,EAAE,SAAS;IACd,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;IACxB,QAAQ,EAAE,cAAc;IACxB,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC;QACnB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QACvB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;QAC5C,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAC/B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QACvB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;QACpB,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;QACxD,GAAG,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;KAC9D,CAAC;CACH,CAAC,CAAC;AAEH,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5B,GAAG,EAAE,SAAS;IACd,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;IACzB,QAAQ,EAAE,cAAc;IACxB,UAAU,EAAE,CAAC;SACV,MAAM,CAAC;QACN,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QACvB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;QAC5C,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;QACzC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;QACjC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QACvB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;QACpB,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;QACxD,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;QACvE,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;KAC3C,CAAC;SACD,WAAW,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;QAC9B,IAAI,CAAC,KAAK,CAAC,WAAW,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;YACrC,OAAO,CAAC,QAAQ,CAAC;gBACf,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;gBAC3B,OAAO,EAAE,sDAAsD;aAChE,CAAC,CAAC;QACL,CAAC;QAED,IAAI,KAAK,CAAC,UAAU,KAAK,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,EAAE,CAAC;YACxD,OAAO,CAAC,QAAQ,CAAC;gBACf,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;gBAC3B,OAAO,EAAE,yCAAyC;aACnD,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC;CACL,CAAC,CAAC;AAEH,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC5C,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IACpB,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACxD,GAAG,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CAC9D,CAAC,CAAC;AAEH,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9B,GAAG,EAAE,SAAS;IACd,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC;IAC7B,QAAQ,EAAE,cAAc;IACxB,UAAU,EAAE,wBAAwB;CACrC,CAAC,CAAC;AAEH,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/B,GAAG,EAAE,SAAS;IACd,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC;IAC5B,QAAQ,EAAE,cAAc;IACxB,UAAU,EAAE,wBAAwB;CACrC,CAAC,CAAC;AAEH,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3B,GAAG,EAAE,SAAS;IACd,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;IACxB,QAAQ,EAAE,cAAc;IACxB,UAAU,EAAE,CAAC;SACV,MAAM,CAAC;QACN,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;QACjC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;QAClC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;QAC5C,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;QACvD,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC/B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC/B,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;KACzD,CAAC;SACD,WAAW,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;QAC9B,IAAI,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;YAC9B,OAAO,CAAC,QAAQ,CAAC;gBACf,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;gBAC3B,OAAO,EAAE,8CAA8C;aACxD,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC;CACL,CAAC,CAAC;AAEH,MAAM,mBAAmB,GAAG,CAAC;KAC1B,KAAK,CAAC,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE,YAAY,EAAE,cAAc,EAAE,eAAe,EAAE,WAAW,CAAC,CAAC,CAAC;KAC9G,GAAG,CAAC,CAAC,CAAC,CAAC;AAEV,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChC,SAAS,EAAE,mBAAmB;IAC9B,OAAO,EAAE,CAAC;SACP,MAAM,CAAC;QACN,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;QACnC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;KACxC,CAAC;SACD,OAAO,CAAC;QACP,OAAO,EAAE,KAAK;KACf,CAAC;IACJ,KAAK,EAAE,CAAC;SACL,MAAM,CAAC;QACN,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;KAClD,CAAC;SACD,OAAO,CAAC,EAAE,CAAC;CACf,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ;;;GAGG;AACH,MAAM,UAAU,sBAAsB,CAAC,SAAkB;IACvD,MAAM,MAAM,GAAG,gBAAgB,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;IACrD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,gBAAgB,CAAC,cAAc,EAAE,gCAAgC,EAAE;YAC3E,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM;SAC5B,CAAC,CAAC;IACL,CAAC;IAED,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;QAC3C,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;YACzB,MAAM,IAAI,gBAAgB,CAAC,cAAc,EAAE,2BAA2B,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC;QACtF,CAAC;QAED,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACvB,CAAC;IAED,OAAO;QACL,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,SAA6B;QACpD,OAAO,EAAE;YACP,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO;YACpC,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS;SACzC;QACD,KAAK,EAAE;YACL,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS;SACvC;KACF,CAAC;AACJ,CAAC"}

package/dist/config/loadConfig.d.ts

@@ -0,0 +1,8 @@
+import type { LoadedConfig } from "./configTypes.js";
+export declare function resolveConfigPath(argv: string[], env: NodeJS.ProcessEnv): string;
+/**
+ * Startup loads configuration once and keeps only validated metadata in memory.
+ * No actual database connection is opened here.
+ */
+export declare function loadConfigFromPath(configPath: string): Promise<LoadedConfig>;
+export declare function loadConfig(argv: string[], env: NodeJS.ProcessEnv): Promise<LoadedConfig>;

package/dist/config/loadConfig.js

@@ -0,0 +1,85 @@
+import { readFile } from "node:fs/promises";
+import os from "node:os";
+import path from "node:path";
+import { ApplicationError } from "../core/errors.js";
+import { configureLogger, log } from "../core/logger.js";
+import { validateDatabaseConfig } from "./configValidation.js";
+export function resolveConfigPath(argv, env) {
+    const configIndex = argv.findIndex((value) => value === "--config");
+    if (configIndex >= 0) {
+        const explicitPath = argv[configIndex + 1];
+        if (!explicitPath) {
+            throw new ApplicationError("CONFIG_ERROR", "Missing value for --config");
+        }
+        return path.resolve(explicitPath);
+    }
+    if (env.MCP_DATABASE_CONFIG) {
+        return path.resolve(env.MCP_DATABASE_CONFIG);
+    }
+    throw new ApplicationError("CONFIG_ERROR", "No configuration path provided. Use --config <path> or MCP_DATABASE_CONFIG.");
+}
+/**
+ * Startup loads configuration once and keeps only validated metadata in memory.
+ * No actual database connection is opened here.
+ */
+export async function loadConfigFromPath(configPath) {
+    const rawText = await readFile(configPath, "utf8");
+    let rawConfig;
+    try {
+        rawConfig = JSON.parse(rawText);
+    }
+    catch (error) {
+        throw new ApplicationError("CONFIG_ERROR", "Configuration file is not valid JSON", {
+            configPath,
+            reason: error instanceof Error ? error.message : String(error)
+        });
+    }
+    const validatedConfig = validateDatabaseConfig(rawConfig);
+    const databases = validatedConfig.databases;
+    const databaseMap = new Map(databases.map((item) => [item.key, item]));
+    const loggingDirectory = resolveLoggingDirectory(configPath, validatedConfig.logging.directory);
+    configureLogger({
+        enabled: validatedConfig.logging.enabled,
+        directory: loggingDirectory
+    });
+    log("info", "Database configuration loaded", {
+        configPath,
+        count: databases.length,
+        logging: {
+            enabled: validatedConfig.logging.enabled,
+            directory: loggingDirectory
+        },
+        query: {
+            timeoutMs: validatedConfig.query.timeoutMs ?? null
+        },
+        databases: databases.map((item) => ({
+            key: item.key,
+            type: item.type,
+            readonly: item.readonly
+        }))
+    });
+    return {
+        configPath,
+        loadedAt: new Date().toISOString(),
+        databases,
+        databaseMap,
+        logging: {
+            enabled: validatedConfig.logging.enabled,
+            directory: loggingDirectory
+        },
+        query: {
+            timeoutMs: validatedConfig.query.timeoutMs ?? null
+        }
+    };
+}
+export async function loadConfig(argv, env) {
+    const configPath = resolveConfigPath(argv, env);
+    return loadConfigFromPath(configPath);
+}
+function resolveLoggingDirectory(configPath, directory) {
+    if (!directory) {
+        return path.join(os.tmpdir(), "mcp-database-service");
+    }
+    return path.isAbsolute(directory) ? directory : path.resolve(path.dirname(configPath), directory);
+}
+//# sourceMappingURL=loadConfig.js.map

package/dist/config/loadConfig.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"loadConfig.js","sourceRoot":"","sources":["../../src/config/loadConfig.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,EAAE,eAAe,EAAE,GAAG,EAAE,MAAM,mBAAmB,CAAC;AAEzD,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAE/D,MAAM,UAAU,iBAAiB,CAAC,IAAc,EAAE,GAAsB;IACtE,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,UAAU,CAAC,CAAC;IACpE,IAAI,WAAW,IAAI,CAAC,EAAE,CAAC;QACrB,MAAM,YAAY,GAAG,IAAI,CAAC,WAAW,GAAG,CAAC,CAAC,CAAC;QAC3C,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,MAAM,IAAI,gBAAgB,CAAC,cAAc,EAAE,4BAA4B,CAAC,CAAC;QAC3E,CAAC;QAED,OAAO,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IACpC,CAAC;IAED,IAAI,GAAG,CAAC,mBAAmB,EAAE,CAAC;QAC5B,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;IAC/C,CAAC;IAED,MAAM,IAAI,gBAAgB,CACxB,cAAc,EACd,6EAA6E,CAC9E,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,UAAkB;IACzD,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IAEnD,IAAI,SAAkB,CAAC;IACvB,IAAI,CAAC;QACH,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAClC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,gBAAgB,CAAC,cAAc,EAAE,sCAAsC,EAAE;YACjF,UAAU;YACV,MAAM,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;SAC/D,CAAC,CAAC;IACL,CAAC;IAED,MAAM,eAAe,GAAG,sBAAsB,CAAC,SAAS,CAAC,CAAC;IAC1D,MAAM,SAAS,GAAG,eAAe,CAAC,SAAS,CAAC;IAC5C,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;IACvE,MAAM,gBAAgB,GAAG,uBAAuB,CAAC,UAAU,EAAE,eAAe,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAEhG,eAAe,CAAC;QACd,OAAO,EAAE,eAAe,CAAC,OAAO,CAAC,OAAO;QACxC,SAAS,EAAE,gBAAgB;KAC5B,CAAC,CAAC;IAEH,GAAG,CAAC,MAAM,EAAE,+BAA+B,EAAE;QAC3C,UAAU;QACV,KAAK,EAAE,SAAS,CAAC,MAAM;QACvB,OAAO,EAAE;YACP,OAAO,EAAE,eAAe,CAAC,OAAO,CAAC,OAAO;YACxC,SAAS,EAAE,gBAAgB;SAC5B;QACD,KAAK,EAAE;YACL,SAAS,EAAE,eAAe,CAAC,KAAK,CAAC,SAAS,IAAI,IAAI;SACnD;QACD,SAAS,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YAClC,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,QAAQ,EAAE,IAAI,CAAC,QAAQ;SACxB,CAAC,CAAC;KACJ,CAAC,CAAC;IAEH,OAAO;QACL,UAAU;QACV,QAAQ,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QAClC,SAAS;QACT,WAAW;QACX,OAAO,EAAE;YACP,OAAO,EAAE,eAAe,CAAC,OAAO,CAAC,OAAO;YACxC,SAAS,EAAE,gBAAgB;SAC5B;QACD,KAAK,EAAE;YACL,SAAS,EAAE,eAAe,CAAC,KAAK,CAAC,SAAS,IAAI,IAAI;SACnD;KACF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,IAAc,EAAE,GAAsB;IACrE,MAAM,UAAU,GAAG,iBAAiB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAChD,OAAO,kBAAkB,CAAC,UAAU,CAAC,CAAC;AACxC,CAAC;AAED,SAAS,uBAAuB,CAAC,UAAkB,EAAE,SAAkB;IACrE,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,sBAAsB,CAAC,CAAC;IACxD,CAAC;IAED,OAAO,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,SAAS,CAAC,CAAC;AACpG,CAAC"}

package/dist/core/errors.d.ts

@@ -0,0 +1,15 @@
+export type ErrorCode = "CONFIG_ERROR" | "DATABASE_NOT_FOUND" | "UNSUPPORTED_DATABASE_TYPE" | "READONLY_VIOLATION" | "INVALID_ARGUMENT" | "NOT_SUPPORTED" | "CONNECTION_ERROR" | "QUERY_ERROR" | "TIMEOUT";
+/**
+ * ApplicationError is the single normalized error type used across the service.
+ * Wrapping driver-specific exceptions early keeps the MCP layer predictable.
+ */
+export declare class ApplicationError extends Error {
+    readonly code: ErrorCode;
+    readonly details?: Record<string, unknown>;
+    constructor(code: ErrorCode, message: string, details?: Record<string, unknown>);
+}
+/**
+ * Any unexpected thrown value is converted into ApplicationError before it crosses
+ * a service boundary. This keeps responses stable and easier to debug.
+ */
+export declare function toApplicationError(error: unknown, fallbackCode: ErrorCode): ApplicationError;

package/dist/core/errors.js

@@ -0,0 +1,28 @@
+/**
+ * ApplicationError is the single normalized error type used across the service.
+ * Wrapping driver-specific exceptions early keeps the MCP layer predictable.
+ */
+export class ApplicationError extends Error {
+    code;
+    details;
+    constructor(code, message, details) {
+        super(message);
+        this.name = "ApplicationError";
+        this.code = code;
+        this.details = details;
+    }
+}
+/**
+ * Any unexpected thrown value is converted into ApplicationError before it crosses
+ * a service boundary. This keeps responses stable and easier to debug.
+ */
+export function toApplicationError(error, fallbackCode) {
+    if (error instanceof ApplicationError) {
+        return error;
+    }
+    if (error instanceof Error) {
+        return new ApplicationError(fallbackCode, error.message, { cause: error.name });
+    }
+    return new ApplicationError(fallbackCode, "Unknown error", { error });
+}
+//# sourceMappingURL=errors.js.map

package/dist/core/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/core/errors.ts"],"names":[],"mappings":"AAWA;;;GAGG;AACH,MAAM,OAAO,gBAAiB,SAAQ,KAAK;IACzB,IAAI,CAAY;IAEhB,OAAO,CAA2B;IAElD,YAAmB,IAAe,EAAE,OAAe,EAAE,OAAiC;QACpF,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAC;QAC/B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;CACF;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAAc,EAAE,YAAuB;IACxE,IAAI,KAAK,YAAY,gBAAgB,EAAE,CAAC;QACtC,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;QAC3B,OAAO,IAAI,gBAAgB,CAAC,YAAY,EAAE,KAAK,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IAClF,CAAC;IAED,OAAO,IAAI,gBAAgB,CAAC,YAAY,EAAE,eAAe,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;AACxE,CAAC"}

package/dist/core/logger.d.ts

@@ -0,0 +1,7 @@
+type LogLevel = "info" | "warn" | "error";
+export declare function configureLogger(config: {
+    enabled: boolean;
+    directory: string;
+}): void;
+export declare function log(level: LogLevel, message: string, fields?: Record<string, unknown>): void;
+export {};

package/dist/core/logger.js

@@ -0,0 +1,68 @@
+import { appendFileSync, mkdirSync } from "node:fs";
+import path from "node:path";
+/**
+ * The service uses very small structured logs so operators can inspect what
+ * happened without leaking credentials or query payloads.
+ */
+const loggerState = {
+    enabled: false,
+    directory: "",
+    filePath: ""
+};
+export function configureLogger(config) {
+    loggerState.enabled = config.enabled;
+    loggerState.directory = config.directory;
+    loggerState.filePath = path.join(config.directory, "mcp-database-service.log");
+    if (config.enabled) {
+        mkdirSync(config.directory, { recursive: true });
+    }
+}
+export function log(level, message, fields) {
+    const payload = {
+        timestamp: new Date().toISOString(),
+        level,
+        message,
+        ...(fields ?? {})
+    };
+    const line = JSON.stringify(payload);
+    console.error(line);
+    if (loggerState.enabled) {
+        appendFileSync(loggerState.filePath, `${formatFileLog(payload)}\n`, "utf8");
+    }
+}
+function formatFileLog(payload) {
+    const timestamp = String(payload.timestamp ?? "");
+    const level = String(payload.level ?? "info").toUpperCase();
+    const message = String(payload.message ?? "");
+    const extraEntries = Object.entries(payload).filter(([key]) => key !== "timestamp" && key !== "level" && key !== "message");
+    const lines = [`[${timestamp}] ${level} ${message}`];
+    for (const [key, value] of extraEntries) {
+        if (value === undefined) {
+            continue;
+        }
+        if (typeof value === "string" && value.includes("\n")) {
+            lines.push(`  ${key}:`);
+            for (const line of value.split(/\r?\n/)) {
+                lines.push(`    ${line}`);
+            }
+            continue;
+        }
+        lines.push(`  ${key}: ${formatFieldValue(value)}`);
+    }
+    return lines.join("\n");
+}
+function formatFieldValue(value) {
+    if (typeof value === "string") {
+        return value;
+    }
+    if (typeof value === "number" || typeof value === "boolean" || value === null) {
+        return String(value);
+    }
+    try {
+        return JSON.stringify(value);
+    }
+    catch {
+        return String(value);
+    }
+}
+//# sourceMappingURL=logger.js.map

package/dist/core/logger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.js","sourceRoot":"","sources":["../../src/core/logger.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpD,OAAO,IAAI,MAAM,WAAW,CAAC;AAI7B;;;GAGG;AACH,MAAM,WAAW,GAIb;IACF,OAAO,EAAE,KAAK;IACd,SAAS,EAAE,EAAE;IACb,QAAQ,EAAE,EAAE;CACb,CAAC;AAEF,MAAM,UAAU,eAAe,CAAC,MAA+C;IAC7E,WAAW,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;IACrC,WAAW,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;IACzC,WAAW,CAAC,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,0BAA0B,CAAC,CAAC;IAE/E,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,SAAS,CAAC,MAAM,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACnD,CAAC;AACH,CAAC;AAED,MAAM,UAAU,GAAG,CAAC,KAAe,EAAE,OAAe,EAAE,MAAgC;IACpF,MAAM,OAAO,GAAG;QACd,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,KAAK;QACL,OAAO;QACP,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC;KAClB,CAAC;IAEF,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IAErC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAEpB,IAAI,WAAW,CAAC,OAAO,EAAE,CAAC;QACxB,cAAc,CAAC,WAAW,CAAC,QAAQ,EAAE,GAAG,aAAa,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC9E,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,OAAgC;IACrD,MAAM,SAAS,GAAG,MAAM,CAAC,OAAO,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;IAClD,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,IAAI,MAAM,CAAC,CAAC,WAAW,EAAE,CAAC;IAC5D,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;IAC9C,MAAM,YAAY,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,CACjD,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK,WAAW,IAAI,GAAG,KAAK,OAAO,IAAI,GAAG,KAAK,SAAS,CACvE,CAAC;IAEF,MAAM,KAAK,GAAG,CAAC,IAAI,SAAS,KAAK,KAAK,IAAI,OAAO,EAAE,CAAC,CAAC;IAErD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,YAAY,EAAE,CAAC;QACxC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,SAAS;QACX,CAAC;QAED,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YACtD,KAAK,CAAC,IAAI,CAAC,KAAK,GAAG,GAAG,CAAC,CAAC;YACxB,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;gBACxC,KAAK,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;YAC5B,CAAC;YACD,SAAS;QACX,CAAC;QAED,KAAK,CAAC,IAAI,CAAC,KAAK,GAAG,KAAK,gBAAgB,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACrD,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc;IACtC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAC9E,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;IAED,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;AACH,CAAC"}

package/dist/core/resultTypes.d.ts

@@ -0,0 +1,49 @@
+export interface PingResult {
+    ok: true;
+    latencyMs: number;
+}
+export interface SchemaInfo {
+    schema: string;
+}
+export interface TableInfo {
+    schema: string;
+    name: string;
+    type: string;
+}
+export interface ColumnInfo {
+    name: string;
+    dataType: string;
+    nullable: boolean;
+    defaultValue: string | null;
+    comment: string | null;
+    primaryKey: boolean;
+}
+export interface QueryResult {
+    rowCount: number;
+    rows: Record<string, unknown>[];
+    truncated: boolean;
+}
+export interface IndexInfo {
+    schema: string;
+    tableName: string;
+    indexName: string;
+    columnName: string | null;
+    isUnique: boolean | null;
+    columnPosition: number | null;
+    sortOrder: string | null;
+    indexType: string | null;
+    definition: string | null;
+}
+export interface TableStatistics {
+    schema: string;
+    tableName: string;
+    metrics: Record<string, unknown>;
+}
+export interface StatementResult {
+    command: string;
+    affectedRows: number | null;
+}
+export interface RedisScanResult {
+    nextCursor: string;
+    keys: string[];
+}

package/dist/core/resultTypes.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=resultTypes.js.map

package/dist/core/resultTypes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resultTypes.js","sourceRoot":"","sources":["../../src/core/resultTypes.ts"],"names":[],"mappings":""}

package/dist/db/clientFactory.d.ts

@@ -0,0 +1,9 @@
+import type { DatabaseConfig } from "../config/configTypes.js";
+import type { DatabaseAdapter } from "./types.js";
+/**
+ * Adapters are created per request so each tool call owns its own connection
+ * lifecycle and can clean up independently.
+ */
+export declare function createClient(config: DatabaseConfig, options?: {
+    queryTimeoutMs?: number | null;
+}): DatabaseAdapter;

package/dist/db/clientFactory.js

@@ -0,0 +1,27 @@
+import { ApplicationError } from "../core/errors.js";
+import { RedisAdapter } from "./redis/redisClient.js";
+import { MysqlAdapter } from "./sql/mysqlClient.js";
+import { OpenGaussAdapter } from "./sql/openGaussClient.js";
+import { OracleAdapter } from "./sql/oracleClient.js";
+import { PostgresAdapter } from "./sql/postgresClient.js";
+/**
+ * Adapters are created per request so each tool call owns its own connection
+ * lifecycle and can clean up independently.
+ */
+export function createClient(config, options) {
+    switch (config.type) {
+        case "mysql":
+            return new MysqlAdapter(config, options?.queryTimeoutMs ?? null);
+        case "oracle":
+            return new OracleAdapter(config, options?.queryTimeoutMs ?? null);
+        case "postgresql":
+            return new PostgresAdapter(config, options?.queryTimeoutMs ?? null);
+        case "opengauss":
+            return new OpenGaussAdapter(config, options?.queryTimeoutMs ?? null);
+        case "redis":
+            return new RedisAdapter(config, options?.queryTimeoutMs ?? null);
+        default:
+            throw new ApplicationError("UNSUPPORTED_DATABASE_TYPE", `Unsupported database type: ${config.type}`);
+    }
+}
+//# sourceMappingURL=clientFactory.js.map

package/dist/db/clientFactory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"clientFactory.js","sourceRoot":"","sources":["../../src/db/clientFactory.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AACtD,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACpD,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAC5D,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAG1D;;;GAGG;AACH,MAAM,UAAU,YAAY,CAC1B,MAAsB,EACtB,OAEC;IAED,QAAQ,MAAM,CAAC,IAAI,EAAE,CAAC;QACpB,KAAK,OAAO;YACV,OAAO,IAAI,YAAY,CAAC,MAAM,EAAE,OAAO,EAAE,cAAc,IAAI,IAAI,CAAC,CAAC;QACnE,KAAK,QAAQ;YACX,OAAO,IAAI,aAAa,CAAC,MAAM,EAAE,OAAO,EAAE,cAAc,IAAI,IAAI,CAAC,CAAC;QACpE,KAAK,YAAY;YACf,OAAO,IAAI,eAAe,CAAC,MAAM,EAAE,OAAO,EAAE,cAAc,IAAI,IAAI,CAAC,CAAC;QACtE,KAAK,WAAW;YACd,OAAO,IAAI,gBAAgB,CAAC,MAAM,EAAE,OAAO,EAAE,cAAc,IAAI,IAAI,CAAC,CAAC;QACvE,KAAK,OAAO;YACV,OAAO,IAAI,YAAY,CAAC,MAAM,EAAE,OAAO,EAAE,cAAc,IAAI,IAAI,CAAC,CAAC;QACnE;YACE,MAAM,IAAI,gBAAgB,CAAC,2BAA2B,EAAE,8BAA+B,MAAyB,CAAC,IAAI,EAAE,CAAC,CAAC;IAC7H,CAAC;AACH,CAAC"}

package/dist/db/readonlyGuard.d.ts

@@ -0,0 +1,14 @@
+export interface SqlStatementInfo {
+    normalizedSql: string;
+    firstKeyword: string;
+    isReadonlyQuery: boolean;
+    hasWhereClause: boolean;
+    riskLevel: "normal" | "high" | "critical";
+    riskReasons: string[];
+}
+/**
+ * SQL validation is intentionally conservative. The service is for read-only
+ * access, so a false negative is safer than accidentally allowing a write.
+ */
+export declare function assertReadonlySql(sql: string): void;
+export declare function inspectSqlStatement(sql: string): SqlStatementInfo;