@scopebond/hook 0.8.1 → 0.10.0

package/dist/sql-classify.js

@@ -0,0 +1,251 @@
+// A conservative SQL classifier for the typed `database` operation.
+//
+// It reads a statement only to decide its verb and whether an UPDATE or DELETE names a
+// selective predicate. Its result is two closed values; the text, the table names, the
+// column names, the literals and the rows never leave this function. It is a classifier for
+// a coding agent's own command line, not a parser: a statement it cannot place with
+// confidence makes the whole input `null` (the caller then records no database operation and
+// the command stays a plain shell action), and an UPDATE or DELETE whose predicate it cannot
+// show to be selective is reported as covering `all` rows. Unknown is never reported clean.
+//
+// Known limits, on purpose: a function call inside a SELECT can have effects (`SELECT
+// pg_terminate_backend(...)`), dynamic SQL and procedural blocks are not read, and a predicate
+// that is selective in form but matches every row at run time (`WHERE id > -1`) is bounded.
+const MAX_SQL = 1_000_000;
+const SEVERITY = { read: 0, insert: 1, create: 2, update: 3, delete: 4, alter: 5, delete_all: 6, drop: 7 };
+/** Comments removed, string literals reduced to `'s'` (or kept as `'%'` when only wildcards),
+ *  quoted identifiers unquoted. Null when a quote or comment is left open or a dollar-quoted body is present. */
+function clean(text) {
+    let out = "";
+    for (let i = 0; i < text.length;) {
+        const c = text[i];
+        const next = text[i + 1];
+        if (c === "-" && next === "-") {
+            const e = text.indexOf("\n", i);
+            i = e < 0 ? text.length : e;
+            out += " ";
+            continue;
+        }
+        if (c === "/" && next === "*") {
+            const e = text.indexOf("*/", i + 2);
+            if (e < 0)
+                return null;
+            i = e + 2;
+            out += " ";
+            continue;
+        }
+        if (c === "'") {
+            let j = i + 1;
+            let body = "";
+            for (;;) {
+                if (j >= text.length)
+                    return null;
+                if (text[j] === "'" && text[j + 1] === "'") {
+                    body += "'";
+                    j += 2;
+                    continue;
+                }
+                if (text[j] === "'")
+                    break;
+                body += text[j++];
+            }
+            out += /^[%_]+$/.test(body) ? `'${body}'` : "'s'";
+            i = j + 1;
+            continue;
+        }
+        if (c === '"' || c === "`") {
+            const e = text.indexOf(c, i + 1);
+            if (e < 0)
+                return null;
+            out += ` ${text.slice(i + 1, e).replace(/[^A-Za-z0-9_]/g, "_")} `;
+            i = e + 1;
+            continue;
+        }
+        if (c === "[" && /^\[[A-Za-z0-9_ ]+\]/.test(text.slice(i))) {
+            const e = text.indexOf("]", i);
+            out += ` ${text.slice(i + 1, e).replace(/ /g, "_")} `;
+            i = e + 1;
+            continue;
+        }
+        if (c === "$" && (next === "$" || /[A-Za-z_]/.test(next ?? "")))
+            return null; // dollar-quoted body
+        out += c;
+        i++;
+    }
+    return out;
+}
+/** Split on `;` outside parentheses. */
+function statements(text) {
+    const out = [];
+    let depth = 0;
+    let cur = "";
+    for (const c of text) {
+        if (c === "(")
+            depth++;
+        else if (c === ")")
+            depth = Math.max(0, depth - 1);
+        if (c === ";" && depth === 0) {
+            out.push(cur);
+            cur = "";
+            continue;
+        }
+        cur += c;
+    }
+    out.push(cur);
+    return out.map((s) => s.trim()).filter((s) => s !== "");
+}
+/** Split `text` at a top-level (depth 0) whole-word keyword; returns the parts. */
+function splitTop(text, word) {
+    const parts = [];
+    const re = new RegExp(`^${word}(?![A-Za-z0-9_])`, "i");
+    let depth = 0;
+    let last = 0;
+    for (let i = 0; i < text.length; i++) {
+        const c = text[i];
+        if (c === "(")
+            depth++;
+        else if (c === ")")
+            depth = Math.max(0, depth - 1);
+        else if (depth === 0 && (i === 0 || /[^A-Za-z0-9_]/.test(text[i - 1])) && re.test(text.slice(i))) {
+            parts.push(text.slice(last, i));
+            last = i + word.length;
+            i = last - 1;
+        }
+    }
+    parts.push(text.slice(last));
+    return parts;
+}
+const LITERAL = /^(?:'[^']*'|-?\d+(?:\.\d+)?|true|false|null)$/i;
+function stripParens(s) {
+    let t = s.trim();
+    while (t.startsWith("(") && t.endsWith(")")) {
+        let depth = 0;
+        let closesAtEnd = true;
+        for (let i = 0; i < t.length; i++) {
+            if (t[i] === "(")
+                depth++;
+            else if (t[i] === ")") {
+                depth--;
+                if (depth === 0 && i < t.length - 1) {
+                    closesAtEnd = false;
+                    break;
+                }
+            }
+        }
+        if (!closesAtEnd)
+            break;
+        t = t.slice(1, -1).trim();
+    }
+    return t;
+}
+/** Whether one AND-ed condition narrows the rows: a comparison, IN, EXISTS or IS NULL that is
+ *  neither a tautology nor a bare `IS NOT NULL`. */
+function selective(raw) {
+    const c = stripParens(raw).replace(/\s+/g, " ");
+    if (c === "")
+        return false;
+    if (splitTop(c, "or").length > 1)
+        return false;
+    if (splitTop(c, "and").length > 1)
+        return splitTop(c, "and").some((p) => selective(p));
+    if (/^(?:true|1|not false|not 0)$/i.test(c))
+        return false;
+    if (/\bis not null$/i.test(c))
+        return false;
+    if (/between_r$/i.test(c))
+        return true;
+    if (/^(?:not )?exists\b/i.test(c) || /\bis null$/i.test(c))
+        return true;
+    const m = /^(.+?) ?(==|=|<>|!=|<=|>=|<|>|\bnot like\b|\bnot ilike\b|\blike\b|\bilike\b|\bnot in\b|\bin\b|\bbetween_r\b|\bis not\b|\bis\b) ?(.+)$/i.exec(c);
+    if (!m)
+        return false;
+    const left = m[1].trim();
+    const right = m[3].trim();
+    if (LITERAL.test(left) && LITERAL.test(right))
+        return false;
+    if (left.toLowerCase() === right.toLowerCase())
+        return false;
+    if (/like$/i.test(m[2]) && /^'[%_]+'$/.test(right))
+        return false;
+    return true;
+}
+/** The predicate of an UPDATE or DELETE, `bounded` only when a top-level AND-ed condition is selective. */
+function predicateOf(stmt) {
+    const parts = splitTop(stmt, "where");
+    if (parts.length < 2)
+        return "all";
+    let where = parts.slice(1).join(" ");
+    where = where.replace(/\b(?:returning|order by|limit)\b[\s\S]*$/i, "");
+    where = where.replace(/\bbetween\s+\S+\s+and\s+\S+/gi, "between_r");
+    if (splitTop(where, "or").length > 1)
+        return "all";
+    return splitTop(where, "and").some((p) => selective(p)) ? "bounded" : "all";
+}
+const NEUTRAL = new Set(["BEGIN", "COMMIT", "ROLLBACK", "END", "SAVEPOINT", "RELEASE", "START"]);
+const DOT_READ = new Set([".schema", ".tables", ".dump", ".indexes", ".databases", ".headers", ".mode", ".timer", ".help", ".quit", ".exit", ".show", ".width", ".nullvalue", ".separator"]);
+function one(stmt) {
+    const s = stmt.trim();
+    if (s.startsWith(".")) {
+        const word = s.split(/\s+/)[0].toLowerCase();
+        return DOT_READ.has(word) ? { verb: "read", predicate: "not_applicable" } : null;
+    }
+    const first = /^[A-Za-z]+/.exec(s)?.[0].toUpperCase() ?? "";
+    if (NEUTRAL.has(first))
+        return "neutral";
+    switch (first) {
+        case "SELECT": return /\binto\b/i.test(s) ? { verb: "create", predicate: "not_applicable" } : { verb: "read", predicate: "not_applicable" };
+        case "SHOW":
+        case "DESCRIBE":
+        case "DESC": return { verb: "read", predicate: "not_applicable" };
+        case "PRAGMA": return s.includes("=") ? null : { verb: "read", predicate: "not_applicable" };
+        case "EXPLAIN": {
+            const rest = s.replace(/^explain\s+(?:analyze\s+|verbose\s+|query\s+plan\s+)*(?:\([^)]*\)\s*)?/i, "");
+            return rest === s || rest === "" ? null : one(rest);
+        }
+        case "WITH": return /\b(?:insert|update|delete|merge)\b/i.test(s) ? null : { verb: "read", predicate: "not_applicable" };
+        case "INSERT":
+        case "REPLACE": return { verb: "insert", predicate: "not_applicable" };
+        case "UPDATE": return { verb: "update", predicate: predicateOf(s) };
+        case "DELETE": {
+            const p = predicateOf(s);
+            return { verb: p === "all" ? "delete_all" : "delete", predicate: p };
+        }
+        case "TRUNCATE": return { verb: "delete_all", predicate: "all" };
+        case "CREATE": return { verb: "create", predicate: "not_applicable" };
+        case "ALTER": return { verb: "alter", predicate: "not_applicable", destructive: /\b(?:drop|rename)\b/i.test(s) };
+        case "DROP": return { verb: "drop", predicate: "not_applicable" };
+        default: return null;
+    }
+}
+/** Classify SQL text, or null when any statement cannot be placed. */
+export function classifySql(text) {
+    if (text.length > MAX_SQL)
+        return null;
+    const cleaned = clean(text);
+    if (cleaned === null)
+        return null;
+    let verb = "read";
+    let sawStatement = false;
+    let broadest = "not_applicable";
+    let destructive = false;
+    for (const stmt of statements(cleaned)) {
+        const r = one(stmt);
+        if (r === null)
+            return null;
+        if (r === "neutral")
+            continue;
+        sawStatement = true;
+        if (SEVERITY[r.verb] > SEVERITY[verb])
+            verb = r.verb;
+        if (r.predicate === "all")
+            broadest = "all";
+        else if (r.predicate === "bounded" && broadest !== "all")
+            broadest = "bounded";
+        if (r.verb === "drop" || r.verb === "delete_all" || r.destructive === true)
+            destructive = true;
+    }
+    if (!sawStatement)
+        return null;
+    return { verb, predicate_class: verb === "delete_all" ? "all" : broadest, destructive };
+}
+//# sourceMappingURL=sql-classify.js.map

package/dist/sql-classify.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sql-classify.js","sourceRoot":"","sources":["../src/sql-classify.ts"],"names":[],"mappings":"AAAA,oEAAoE;AACpE,EAAE;AACF,uFAAuF;AACvF,uFAAuF;AACvF,4FAA4F;AAC5F,oFAAoF;AACpF,6FAA6F;AAC7F,6FAA6F;AAC7F,4FAA4F;AAC5F,EAAE;AACF,sFAAsF;AACtF,+FAA+F;AAC/F,4FAA4F;AAW5F,MAAM,OAAO,GAAG,SAAS,CAAC;AAC1B,MAAM,QAAQ,GAA4B,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;AAEpI;iHACiH;AACjH,SAAS,KAAK,CAAC,IAAY;IACzB,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC;QACjC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QACzB,IAAI,CAAC,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YAAC,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;YAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;YAAC,GAAG,IAAI,GAAG,CAAC;YAAC,SAAS;QAAC,CAAC;QACtH,IAAI,CAAC,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YAAC,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;YAAC,IAAI,CAAC,GAAG,CAAC;gBAAE,OAAO,IAAI,CAAC;YAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAAC,GAAG,IAAI,GAAG,CAAC;YAAC,SAAS;QAAC,CAAC;QAChI,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;YACd,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACd,IAAI,IAAI,GAAG,EAAE,CAAC;YACd,SAAS,CAAC;gBACR,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM;oBAAE,OAAO,IAAI,CAAC;gBAClC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;oBAAC,IAAI,IAAI,GAAG,CAAC;oBAAC,CAAC,IAAI,CAAC,CAAC;oBAAC,SAAS;gBAAC,CAAC;gBAC9E,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,GAAG;oBAAE,MAAM;gBAC3B,IAAI,IAAI,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC;YACpB,CAAC;YACD,GAAG,IAAI,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC;YAClD,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACV,SAAS;QACX,CAAC;QACD,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;YAC3B,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;YACjC,IAAI,CAAC,GAAG,CAAC;gBAAE,OAAO,IAAI,CAAC;YACvB,GAAG,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,gBAAgB,EAAE,GAAG,CAAC,GAAG,CAAC;YAClE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACV,SAAS;QACX,CAAC;QACD,IAAI,CAAC,KAAK,GAAG,IAAI,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAAC,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;YAAC,GAAG,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,GAAG,CAAC;YAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAAC,SAAS;QAAC,CAAC;QAC3K,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,IAAI,KAAK,GAAG,IAAI,WAAW,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC,CAAC,qBAAqB;QACnG,GAAG,IAAI,CAAC,CAAC;QACT,CAAC,EAAE,CAAC;IACN,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,wCAAwC;AACxC,SAAS,UAAU,CAAC,IAAY;IAC9B,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QACrB,IAAI,CAAC,KAAK,GAAG;YAAE,KAAK,EAAE,CAAC;aAClB,IAAI,CAAC,KAAK,GAAG;YAAE,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;QACnD,IAAI,CAAC,KAAK,GAAG,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;YAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAAC,GAAG,GAAG,EAAE,CAAC;YAAC,SAAS;QAAC,CAAC;QACpE,GAAG,IAAI,CAAC,CAAC;IACX,CAAC;IACD,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACd,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;AAC1D,CAAC;AAED,mFAAmF;AACnF,SAAS,QAAQ,CAAC,IAAY,EAAE,IAAY;IAC1C,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,EAAE,GAAG,IAAI,MAAM,CAAC,IAAI,IAAI,kBAAkB,EAAE,GAAG,CAAC,CAAC;IACvD,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,IAAI,CAAC,KAAK,GAAG;YAAE,KAAK,EAAE,CAAC;aAClB,IAAI,CAAC,KAAK,GAAG;YAAE,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;aAC9C,IAAI,KAAK,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACjG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YAChC,IAAI,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC;YACvB,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC;QACf,CAAC;IACH,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IAC7B,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,OAAO,GAAG,gDAAgD,CAAC;AAEjE,SAAS,WAAW,CAAC,CAAS;IAC5B,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IACjB,OAAO,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC5C,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,IAAI,WAAW,GAAG,IAAI,CAAC;QACvB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAClC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG;gBAAE,KAAK,EAAE,CAAC;iBACrB,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;gBAAC,KAAK,EAAE,CAAC;gBAAC,IAAI,KAAK,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAAC,WAAW,GAAG,KAAK,CAAC;oBAAC,MAAM;gBAAC,CAAC;YAAC,CAAC;QAC1G,CAAC;QACD,IAAI,CAAC,WAAW;YAAE,MAAM;QACxB,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC5B,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED;oDACoD;AACpD,SAAS,SAAS,CAAC,GAAW;IAC5B,MAAM,CAAC,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAChD,IAAI,CAAC,KAAK,EAAE;QAAE,OAAO,KAAK,CAAC;IAC3B,IAAI,QAAQ,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IAC/C,IAAI,QAAQ,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,QAAQ,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;IACvF,IAAI,+BAA+B,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAC1D,IAAI,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAC5C,IAAI,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACvC,IAAI,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACxE,MAAM,CAAC,GAAG,wIAAwI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC3J,IAAI,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACrB,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACzB,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC1B,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC5D,IAAI,IAAI,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC,WAAW,EAAE;QAAE,OAAO,KAAK,CAAC;IAC7D,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACjE,OAAO,IAAI,CAAC;AACd,CAAC;AAED,2GAA2G;AAC3G,SAAS,WAAW,CAAC,IAAY;IAC/B,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACtC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IACnC,IAAI,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACrC,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,2CAA2C,EAAE,EAAE,CAAC,CAAC;IACvE,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,+BAA+B,EAAE,WAAW,CAAC,CAAC;IACpE,IAAI,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IACnD,OAAO,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC;AAC9E,CAAC;AAED,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC;AACjG,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,CAAC,SAAS,EAAE,SAAS,EAAE,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,UAAU,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,YAAY,CAAC,CAAC,CAAC;AAI7L,SAAS,GAAG,CAAC,IAAY;IACvB,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IACtB,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;QAC7C,OAAO,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IACnF,CAAC;IACD,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC;IAC5D,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACzC,QAAQ,KAAK,EAAE,CAAC;QACd,KAAK,QAAQ,CAAC,CAAC,OAAO,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,gBAAgB,EAAE,CAAC;QAC5I,KAAK,MAAM,CAAC;QAAC,KAAK,UAAU,CAAC;QAAC,KAAK,MAAM,CAAC,CAAC,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,gBAAgB,EAAE,CAAC;QAChG,KAAK,QAAQ,CAAC,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,gBAAgB,EAAE,CAAC;QAC7F,KAAK,SAAS,CAAC,CAAC,CAAC;YACf,MAAM,IAAI,GAAG,CAAC,CAAC,OAAO,CAAC,yEAAyE,EAAE,EAAE,CAAC,CAAC;YACtG,OAAO,IAAI,KAAK,CAAC,IAAI,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACtD,CAAC;QACD,KAAK,MAAM,CAAC,CAAC,OAAO,qCAAqC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,gBAAgB,EAAE,CAAC;QACzH,KAAK,QAAQ,CAAC;QAAC,KAAK,SAAS,CAAC,CAAC,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,gBAAgB,EAAE,CAAC;QACtF,KAAK,QAAQ,CAAC,CAAC,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC;QACpE,KAAK,QAAQ,CAAC,CAAC,CAAC;YAAC,MAAM,CAAC,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;YAAC,OAAO,EAAE,IAAI,EAAE,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;QAAC,CAAC;QAClH,KAAK,UAAU,CAAC,CAAC,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;QACjE,KAAK,QAAQ,CAAC,CAAC,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,gBAAgB,EAAE,CAAC;QACtE,KAAK,OAAO,CAAC,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,gBAAgB,EAAE,WAAW,EAAE,sBAAsB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QACjH,KAAK,MAAM,CAAC,CAAC,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,gBAAgB,EAAE,CAAC;QAClE,OAAO,CAAC,CAAC,OAAO,IAAI,CAAC;IACvB,CAAC;AACH,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,IAAI,IAAI,CAAC,MAAM,GAAG,OAAO;QAAE,OAAO,IAAI,CAAC;IACvC,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;IAC5B,IAAI,OAAO,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAClC,IAAI,IAAI,GAAY,MAAM,CAAC;IAC3B,IAAI,YAAY,GAAG,KAAK,CAAC;IACzB,IAAI,QAAQ,GAAyC,gBAAgB,CAAC;IACtE,IAAI,WAAW,GAAG,KAAK,CAAC;IACxB,KAAK,MAAM,IAAI,IAAI,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QACvC,MAAM,CAAC,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC;QACpB,IAAI,CAAC,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QAC5B,IAAI,CAAC,KAAK,SAAS;YAAE,SAAS;QAC9B,YAAY,GAAG,IAAI,CAAC;QACpB,IAAI,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC;YAAE,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC;QACrD,IAAI,CAAC,CAAC,SAAS,KAAK,KAAK;YAAE,QAAQ,GAAG,KAAK,CAAC;aACvC,IAAI,CAAC,CAAC,SAAS,KAAK,SAAS,IAAI,QAAQ,KAAK,KAAK;YAAE,QAAQ,GAAG,SAAS,CAAC;QAC/E,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,CAAC,IAAI,KAAK,YAAY,IAAI,CAAC,CAAC,WAAW,KAAK,IAAI;YAAE,WAAW,GAAG,IAAI,CAAC;IACjG,CAAC;IACD,IAAI,CAAC,YAAY;QAAE,OAAO,IAAI,CAAC;IAC/B,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,EAAE,WAAW,EAAE,CAAC;AAC1F,CAAC","sourcesContent":["// A conservative SQL classifier for the typed `database` operation.\n//\n// It reads a statement only to decide its verb and whether an UPDATE or DELETE names a\n// selective predicate. Its result is two closed values; the text, the table names, the\n// column names, the literals and the rows never leave this function. It is a classifier for\n// a coding agent's own command line, not a parser: a statement it cannot place with\n// confidence makes the whole input `null` (the caller then records no database operation and\n// the command stays a plain shell action), and an UPDATE or DELETE whose predicate it cannot\n// show to be selective is reported as covering `all` rows. Unknown is never reported clean.\n//\n// Known limits, on purpose: a function call inside a SELECT can have effects (`SELECT\n// pg_terminate_backend(...)`), dynamic SQL and procedural blocks are not read, and a predicate\n// that is selective in form but matches every row at run time (`WHERE id > -1`) is bounded.\n\nexport type SqlVerb = \"read\" | \"insert\" | \"update\" | \"delete\" | \"delete_all\" | \"create\" | \"alter\" | \"drop\";\nexport interface SqlClass {\n  verb: SqlVerb;\n  /** The broadest predicate among the UPDATE and DELETE statements, `not_applicable` when there are none. */\n  predicate_class: \"bounded\" | \"all\" | \"not_applicable\";\n  /** Any statement that removes data or structure: drop, delete_all (a truncate too), or an ALTER that drops or renames. */\n  destructive: boolean;\n}\n\nconst MAX_SQL = 1_000_000;\nconst SEVERITY: Record<SqlVerb, number> = { read: 0, insert: 1, create: 2, update: 3, delete: 4, alter: 5, delete_all: 6, drop: 7 };\n\n/** Comments removed, string literals reduced to `'s'` (or kept as `'%'` when only wildcards),\n *  quoted identifiers unquoted. Null when a quote or comment is left open or a dollar-quoted body is present. */\nfunction clean(text: string): string | null {\n  let out = \"\";\n  for (let i = 0; i < text.length;) {\n    const c = text[i];\n    const next = text[i + 1];\n    if (c === \"-\" && next === \"-\") { const e = text.indexOf(\"\\n\", i); i = e < 0 ? text.length : e; out += \" \"; continue; }\n    if (c === \"/\" && next === \"*\") { const e = text.indexOf(\"*/\", i + 2); if (e < 0) return null; i = e + 2; out += \" \"; continue; }\n    if (c === \"'\") {\n      let j = i + 1;\n      let body = \"\";\n      for (;;) {\n        if (j >= text.length) return null;\n        if (text[j] === \"'\" && text[j + 1] === \"'\") { body += \"'\"; j += 2; continue; }\n        if (text[j] === \"'\") break;\n        body += text[j++];\n      }\n      out += /^[%_]+$/.test(body) ? `'${body}'` : \"'s'\";\n      i = j + 1;\n      continue;\n    }\n    if (c === '\"' || c === \"`\") {\n      const e = text.indexOf(c, i + 1);\n      if (e < 0) return null;\n      out += ` ${text.slice(i + 1, e).replace(/[^A-Za-z0-9_]/g, \"_\")} `;\n      i = e + 1;\n      continue;\n    }\n    if (c === \"[\" && /^\\[[A-Za-z0-9_ ]+\\]/.test(text.slice(i))) { const e = text.indexOf(\"]\", i); out += ` ${text.slice(i + 1, e).replace(/ /g, \"_\")} `; i = e + 1; continue; }\n    if (c === \"$\" && (next === \"$\" || /[A-Za-z_]/.test(next ?? \"\"))) return null; // dollar-quoted body\n    out += c;\n    i++;\n  }\n  return out;\n}\n\n/** Split on `;` outside parentheses. */\nfunction statements(text: string): string[] {\n  const out: string[] = [];\n  let depth = 0;\n  let cur = \"\";\n  for (const c of text) {\n    if (c === \"(\") depth++;\n    else if (c === \")\") depth = Math.max(0, depth - 1);\n    if (c === \";\" && depth === 0) { out.push(cur); cur = \"\"; continue; }\n    cur += c;\n  }\n  out.push(cur);\n  return out.map((s) => s.trim()).filter((s) => s !== \"\");\n}\n\n/** Split `text` at a top-level (depth 0) whole-word keyword; returns the parts. */\nfunction splitTop(text: string, word: string): string[] {\n  const parts: string[] = [];\n  const re = new RegExp(`^${word}(?![A-Za-z0-9_])`, \"i\");\n  let depth = 0;\n  let last = 0;\n  for (let i = 0; i < text.length; i++) {\n    const c = text[i];\n    if (c === \"(\") depth++;\n    else if (c === \")\") depth = Math.max(0, depth - 1);\n    else if (depth === 0 && (i === 0 || /[^A-Za-z0-9_]/.test(text[i - 1])) && re.test(text.slice(i))) {\n      parts.push(text.slice(last, i));\n      last = i + word.length;\n      i = last - 1;\n    }\n  }\n  parts.push(text.slice(last));\n  return parts;\n}\n\nconst LITERAL = /^(?:'[^']*'|-?\\d+(?:\\.\\d+)?|true|false|null)$/i;\n\nfunction stripParens(s: string): string {\n  let t = s.trim();\n  while (t.startsWith(\"(\") && t.endsWith(\")\")) {\n    let depth = 0;\n    let closesAtEnd = true;\n    for (let i = 0; i < t.length; i++) {\n      if (t[i] === \"(\") depth++;\n      else if (t[i] === \")\") { depth--; if (depth === 0 && i < t.length - 1) { closesAtEnd = false; break; } }\n    }\n    if (!closesAtEnd) break;\n    t = t.slice(1, -1).trim();\n  }\n  return t;\n}\n\n/** Whether one AND-ed condition narrows the rows: a comparison, IN, EXISTS or IS NULL that is\n *  neither a tautology nor a bare `IS NOT NULL`. */\nfunction selective(raw: string): boolean {\n  const c = stripParens(raw).replace(/\\s+/g, \" \");\n  if (c === \"\") return false;\n  if (splitTop(c, \"or\").length > 1) return false;\n  if (splitTop(c, \"and\").length > 1) return splitTop(c, \"and\").some((p) => selective(p));\n  if (/^(?:true|1|not false|not 0)$/i.test(c)) return false;\n  if (/\\bis not null$/i.test(c)) return false;\n  if (/between_r$/i.test(c)) return true;\n  if (/^(?:not )?exists\\b/i.test(c) || /\\bis null$/i.test(c)) return true;\n  const m = /^(.+?) ?(==|=|<>|!=|<=|>=|<|>|\\bnot like\\b|\\bnot ilike\\b|\\blike\\b|\\bilike\\b|\\bnot in\\b|\\bin\\b|\\bbetween_r\\b|\\bis not\\b|\\bis\\b) ?(.+)$/i.exec(c);\n  if (!m) return false;\n  const left = m[1].trim();\n  const right = m[3].trim();\n  if (LITERAL.test(left) && LITERAL.test(right)) return false;\n  if (left.toLowerCase() === right.toLowerCase()) return false;\n  if (/like$/i.test(m[2]) && /^'[%_]+'$/.test(right)) return false;\n  return true;\n}\n\n/** The predicate of an UPDATE or DELETE, `bounded` only when a top-level AND-ed condition is selective. */\nfunction predicateOf(stmt: string): \"bounded\" | \"all\" {\n  const parts = splitTop(stmt, \"where\");\n  if (parts.length < 2) return \"all\";\n  let where = parts.slice(1).join(\" \");\n  where = where.replace(/\\b(?:returning|order by|limit)\\b[\\s\\S]*$/i, \"\");\n  where = where.replace(/\\bbetween\\s+\\S+\\s+and\\s+\\S+/gi, \"between_r\");\n  if (splitTop(where, \"or\").length > 1) return \"all\";\n  return splitTop(where, \"and\").some((p) => selective(p)) ? \"bounded\" : \"all\";\n}\n\nconst NEUTRAL = new Set([\"BEGIN\", \"COMMIT\", \"ROLLBACK\", \"END\", \"SAVEPOINT\", \"RELEASE\", \"START\"]);\nconst DOT_READ = new Set([\".schema\", \".tables\", \".dump\", \".indexes\", \".databases\", \".headers\", \".mode\", \".timer\", \".help\", \".quit\", \".exit\", \".show\", \".width\", \".nullvalue\", \".separator\"]);\n\ninterface One { verb: SqlVerb; predicate: \"bounded\" | \"all\" | \"not_applicable\"; destructive?: boolean }\n\nfunction one(stmt: string): One | \"neutral\" | null {\n  const s = stmt.trim();\n  if (s.startsWith(\".\")) {\n    const word = s.split(/\\s+/)[0].toLowerCase();\n    return DOT_READ.has(word) ? { verb: \"read\", predicate: \"not_applicable\" } : null;\n  }\n  const first = /^[A-Za-z]+/.exec(s)?.[0].toUpperCase() ?? \"\";\n  if (NEUTRAL.has(first)) return \"neutral\";\n  switch (first) {\n    case \"SELECT\": return /\\binto\\b/i.test(s) ? { verb: \"create\", predicate: \"not_applicable\" } : { verb: \"read\", predicate: \"not_applicable\" };\n    case \"SHOW\": case \"DESCRIBE\": case \"DESC\": return { verb: \"read\", predicate: \"not_applicable\" };\n    case \"PRAGMA\": return s.includes(\"=\") ? null : { verb: \"read\", predicate: \"not_applicable\" };\n    case \"EXPLAIN\": {\n      const rest = s.replace(/^explain\\s+(?:analyze\\s+|verbose\\s+|query\\s+plan\\s+)*(?:\\([^)]*\\)\\s*)?/i, \"\");\n      return rest === s || rest === \"\" ? null : one(rest);\n    }\n    case \"WITH\": return /\\b(?:insert|update|delete|merge)\\b/i.test(s) ? null : { verb: \"read\", predicate: \"not_applicable\" };\n    case \"INSERT\": case \"REPLACE\": return { verb: \"insert\", predicate: \"not_applicable\" };\n    case \"UPDATE\": return { verb: \"update\", predicate: predicateOf(s) };\n    case \"DELETE\": { const p = predicateOf(s); return { verb: p === \"all\" ? \"delete_all\" : \"delete\", predicate: p }; }\n    case \"TRUNCATE\": return { verb: \"delete_all\", predicate: \"all\" };\n    case \"CREATE\": return { verb: \"create\", predicate: \"not_applicable\" };\n    case \"ALTER\": return { verb: \"alter\", predicate: \"not_applicable\", destructive: /\\b(?:drop|rename)\\b/i.test(s) };\n    case \"DROP\": return { verb: \"drop\", predicate: \"not_applicable\" };\n    default: return null;\n  }\n}\n\n/** Classify SQL text, or null when any statement cannot be placed. */\nexport function classifySql(text: string): SqlClass | null {\n  if (text.length > MAX_SQL) return null;\n  const cleaned = clean(text);\n  if (cleaned === null) return null;\n  let verb: SqlVerb = \"read\";\n  let sawStatement = false;\n  let broadest: \"bounded\" | \"all\" | \"not_applicable\" = \"not_applicable\";\n  let destructive = false;\n  for (const stmt of statements(cleaned)) {\n    const r = one(stmt);\n    if (r === null) return null;\n    if (r === \"neutral\") continue;\n    sawStatement = true;\n    if (SEVERITY[r.verb] > SEVERITY[verb]) verb = r.verb;\n    if (r.predicate === \"all\") broadest = \"all\";\n    else if (r.predicate === \"bounded\" && broadest !== \"all\") broadest = \"bounded\";\n    if (r.verb === \"drop\" || r.verb === \"delete_all\" || r.destructive === true) destructive = true;\n  }\n  if (!sawStatement) return null;\n  return { verb, predicate_class: verb === \"delete_all\" ? \"all\" : broadest, destructive };\n}\n"]}

package/dist/typed-infra.d.ts

@@ -0,0 +1,73 @@
+import { type SimpleCommand } from "./shell.js";
+import type { BindingKey } from "./observation.js";
+type Operation = Record<string, unknown>;
+/** Everything the derivations read from disk or the environment. Injected in tests and by the proof runner. */
+export interface FileProbe {
+    /** UTF-8 text of a file, or null when missing, unreadable or larger than `max` bytes. */
+    readText(path: string, max: number): string | null;
+    /** Lowercase SHA-256 of a file's bytes, or null. */
+    sha256File(path: string): string | null;
+    /** Lowercase SHA-256 over the relative paths and bytes of every file under a directory, or null. */
+    sha256Dir(path: string): string | null;
+    /** The `.sql` files of a directory in name order, or null when it cannot be read or holds none. */
+    listSql(path: string): Array<{
+        name: string;
+        text: string;
+    }> | null;
+}
+export declare const systemFiles: FileProbe;
+/** No files, deterministic: what the proof fixtures read, so a proof never depends on the machine it runs on. */
+export declare const fixtureFiles: FileProbe;
+/** What the derivations need beyond the binding key. */
+export interface InfraContext {
+    key: BindingKey;
+    cwd: string;
+    referenceSetVersion: string;
+    files?: FileProbe;
+    /** Environment variable lookup for account and PostgreSQL defaults; `process.env` when absent. */
+    env?: (name: string) => string | undefined;
+}
+/** What the database and Wrangler readers need: no key, because they only read facts. */
+export type ReadContext = Pick<InfraContext, "cwd" | "files" | "env">;
+/** A URL reduced to scheme, IDNA-lowercase host and effective port. Null for anything else
+ *  (an unexpanded variable, a glob, an IPv6 literal, a non-HTTP scheme, a host that is not a
+ *  plain hostname). A scheme-less operand reads as `http`, as curl does. */
+export declare function parseDestination(raw: string, assumeHttp: boolean): {
+    scheme: "http" | "https";
+    host: string;
+    port: number;
+} | null;
+/** A WebFetch tool call: a GET of the URL in its input. */
+export declare function fetchOperation(url: string, ctx: InfraContext, request: unknown): Operation | null;
+/** What a database command is, before it is wrapped in an operation. */
+export interface DatabaseFacts {
+    provider: "cloudflare_d1" | "postgres" | "sqlite";
+    verb: string;
+    predicate_class: "bounded" | "all" | "not_applicable";
+    /** A drop, a delete of every row, an ALTER that drops, or an unbounded UPDATE; `unknown` when the SQL could not be read. */
+    risk: "ordinary" | "destructive" | "unknown";
+    scope: "remote" | "local" | "unknown";
+    /** Environment class the command itself shows. */
+    environment: string;
+    /** Provider-scoped name the id is keyed from. */
+    databaseKey: string;
+    databaseKind: string;
+    /** Keyed digest input: the statement text or the migration set. Never exported. */
+    digestInput?: unknown;
+    migrate?: boolean;
+}
+/** The database facts of a simple command, or null when it is not a readable database command. */
+export declare function databaseFacts(sc: SimpleCommand, ctx: ReadContext): DatabaseFacts | null;
+/** The typed operation for one simple command: a Wrangler or database CLI call, or a shell fetcher. */
+export declare function deriveInfraOperation(sc: SimpleCommand, ctx: InfraContext, request: unknown, dialect?: "posix" | "powershell", networkOnly?: boolean): Operation | null;
+/** One remote-database action per command of a shell call that touches a remote database, for
+ *  the opt-in enforcement rule. `risk` is the same classification the typed operation uses. */
+export interface DatabaseGuardAction {
+    provider: string;
+    verb: string;
+    scope: string;
+    risk: string;
+}
+export declare function databaseGuardActions(command: string, dialect: "posix" | "powershell", ctx: ReadContext): DatabaseGuardAction[];
+export {};
+//# sourceMappingURL=typed-infra.d.ts.map

package/dist/typed-infra.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"typed-infra.d.ts","sourceRoot":"","sources":["../src/typed-infra.ts"],"names":[],"mappings":"AAqBA,OAAO,EAAgC,KAAK,aAAa,EAAE,MAAM,YAAY,CAAC;AAG9E,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAEnD,KAAK,SAAS,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAEzC,+GAA+G;AAC/G,MAAM,WAAW,SAAS;IACxB,yFAAyF;IACzF,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;IACnD,oDAAoD;IACpD,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;IACxC,oGAAoG;IACpG,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;IACvC,mGAAmG;IACnG,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,GAAG,IAAI,CAAC;CACrE;AAMD,eAAO,MAAM,WAAW,EAAE,SA8CzB,CAAC;AAEF,iHAAiH;AACjH,eAAO,MAAM,YAAY,EAAE,SAAwG,CAAC;AAEpI,wDAAwD;AACxD,MAAM,WAAW,YAAY;IAC3B,GAAG,EAAE,UAAU,CAAC;IAChB,GAAG,EAAE,MAAM,CAAC;IACZ,mBAAmB,EAAE,MAAM,CAAC;IAC5B,KAAK,CAAC,EAAE,SAAS,CAAC;IAClB,kGAAkG;IAClG,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,GAAG,SAAS,CAAC;CAC5C;AAED,yFAAyF;AACzF,MAAM,MAAM,WAAW,GAAG,IAAI,CAAC,YAAY,EAAE,KAAK,GAAG,OAAO,GAAG,KAAK,CAAC,CAAC;AAkBtE;;4EAE4E;AAC5E,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,GAAG;IAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAelI;AAcD,2DAA2D;AAC3D,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,YAAY,EAAE,OAAO,EAAE,OAAO,GAAG,SAAS,GAAG,IAAI,CAGjG;AA+PD,wEAAwE;AACxE,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,eAAe,GAAG,UAAU,GAAG,QAAQ,CAAC;IAClD,IAAI,EAAE,MAAM,CAAC;IACb,eAAe,EAAE,SAAS,GAAG,KAAK,GAAG,gBAAgB,CAAC;IACtD,4HAA4H;IAC5H,IAAI,EAAE,UAAU,GAAG,aAAa,GAAG,SAAS,CAAC;IAC7C,KAAK,EAAE,QAAQ,GAAG,OAAO,GAAG,SAAS,CAAC;IACtC,kDAAkD;IAClD,WAAW,EAAE,MAAM,CAAC;IACpB,iDAAiD;IACjD,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,mFAAmF;IACnF,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAiHD,kGAAkG;AAClG,wBAAgB,aAAa,CAAC,EAAE,EAAE,aAAa,EAAE,GAAG,EAAE,WAAW,GAAG,aAAa,GAAG,IAAI,CAOvF;AA2CD,uGAAuG;AACvG,wBAAgB,oBAAoB,CAAC,EAAE,EAAE,aAAa,EAAE,GAAG,EAAE,YAAY,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,GAAE,OAAO,GAAG,YAAsB,EAAE,WAAW,UAAQ,GAAG,SAAS,GAAG,IAAI,CAQ7K;AASD;+FAC+F;AAC/F,MAAM,WAAW,mBAAmB;IAAG,QAAQ,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE;AAEpG,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,YAAY,EAAE,GAAG,EAAE,WAAW,GAAG,mBAAmB,EAAE,CAkB9H"}