db-mcp 1.1.1 → 2.0.0

package/dist/{chunk-4IA3DB5C.js → chunk-X3MUUOWM.js}

@@ -1,4 +1,4 @@
-import { DbMcpError, findSuggestion } from './chunk-AOUL5SHS.js';
+import { DbMcpError, findSuggestion } from './chunk-645ZEFLA.js';
 
 // src/utils/errors/classes.ts
 var ValidationError = class extends DbMcpError {
@@ -67,6 +67,23 @@ var AuthorizationError = class extends DbMcpError {
     });
   }
 };
+var ExtensionNotAvailableError = class extends DbMcpError {
+  constructor(extensionName, options) {
+    const isWasm = options?.wasmLimitation ?? options?.details?.["wasmLimitation"] ?? false;
+    const baseMessage = `Extension '${extensionName}' is not installed or available`;
+    const message = isWasm === true ? `${baseMessage} in WASM mode` : baseMessage;
+    super(message, "EXTENSION_MISSING", "config" /* CONFIGURATION */, {
+      suggestion: options?.suggestion ?? `Install or enable the '${extensionName}' extension. Check environment variable or CLI flag configuration.`,
+      details: {
+        extension: extensionName,
+        ...options?.details,
+        ...isWasm === true ? { wasmLimitation: true } : {}
+      },
+      recoverable: false,
+      cause: options?.cause
+    });
+  }
+};
 
 // src/utils/errors/format.ts
 var CATEGORY_DEFAULT_CODES = {
@@ -132,4 +149,4 @@ function formatHandlerError(error, _context) {
   };
 }
 
-export { AuthenticationError, AuthorizationError, ConfigurationError, ConnectionError, QueryError, ResourceNotFoundError, ValidationError, formatHandlerError };
+export { AuthenticationError, AuthorizationError, ConfigurationError, ConnectionError, ExtensionNotAvailableError, QueryError, ResourceNotFoundError, ValidationError, formatHandlerError };

package/dist/{chunk-Z2GFQU3G.js → chunk-Z7C2TM4L.js}

@@ -1,5 +1,5 @@
-import { ConnectionError, formatHandlerError, ValidationError } from './chunk-4IA3DB5C.js';
-import { isToolEnabled } from './chunk-AOUL5SHS.js';
+import { ConnectionError, formatHandlerError, ValidationError } from './chunk-X3MUUOWM.js';
+import { isToolEnabled } from './chunk-645ZEFLA.js';
 import { ResourceTemplate } from '@modelcontextprotocol/sdk/server/mcp.js';
 import { z } from 'zod';
 
@@ -65,8 +65,13 @@ function registerToolImpl(adapter, server, tool) {
   };
   if (tool.inputSchema !== void 0) {
     const schema = tool.inputSchema;
-    if (typeof schema === "object" && schema !== null && "partial" in schema && typeof schema.partial === "function") {
-      toolOptions["inputSchema"] = schema.partial().passthrough();
+    if (typeof schema === "object" && schema !== null && "partial" in schema && typeof schema["partial"] === "function") {
+      try {
+        toolOptions["inputSchema"] = schema.partial().passthrough();
+      } catch (e) {
+        console.error(`Error applying .partial() to ${tool.name}:`, e);
+        toolOptions["inputSchema"] = schema;
+      }
     } else {
       toolOptions["inputSchema"] = schema;
     }
@@ -84,8 +89,10 @@ function registerToolImpl(adapter, server, tool) {
   server.registerTool(
     tool.name,
     toolOptions,
-    async (args, extra) => {
+    async (argsOrExtra, possibleExtra) => {
       try {
+        const extra = possibleExtra !== void 0 ? possibleExtra : argsOrExtra;
+        const args = possibleExtra !== void 0 ? argsOrExtra : {};
         const extraMeta = extra;
         const progressToken = extraMeta?._meta?.progressToken;
         const context = adapter.createContext(
@@ -93,45 +100,108 @@ function registerToolImpl(adapter, server, tool) {
           server.server,
           progressToken
         );
-        const result = await tool.handler(args, context);
-        if (hasOutputSchema) {
+        const execFn = async () => {
+          const result = await tool.handler(args, context);
+          if (hasOutputSchema) {
+            const enriched = JSON.stringify({
+              ...result,
+              _meta: { tokenEstimate: 0 }
+            });
+            const tokenEstimate = Math.ceil(
+              Buffer.byteLength(enriched, "utf8") / 4
+            );
+            const finalText = enriched.replace(
+              '"tokenEstimate":0',
+              `"tokenEstimate":${String(tokenEstimate)}`
+            );
+            return {
+              content: [
+                {
+                  type: "text",
+                  text: finalText
+                }
+              ],
+              structuredContent: result
+            };
+          }
+          if (typeof result === "object" && result !== null) {
+            const withMeta = JSON.stringify(
+              { ...result, _meta: { tokenEstimate: 0 } },
+              null,
+              2
+            );
+            const tokenEstimate = Math.ceil(
+              Buffer.byteLength(withMeta, "utf8") / 4
+            );
+            const finalText = withMeta.replace(
+              '"tokenEstimate": 0',
+              `"tokenEstimate": ${String(tokenEstimate)}`
+            );
+            return {
+              content: [{ type: "text", text: finalText }]
+            };
+          }
           return {
             content: [
               {
                 type: "text",
-                text: JSON.stringify(result)
+                text: typeof result === "string" ? result : JSON.stringify(result)
               }
-            ],
-            structuredContent: result
+            ]
           };
-        }
-        return {
-          content: [
-            {
-              type: "text",
-              text: typeof result === "string" ? result : JSON.stringify(result)
-            }
-          ]
         };
+        const auditInterceptor = adapter.getAuditInterceptor?.();
+        if (auditInterceptor) {
+          return await auditInterceptor.around(
+            tool.name,
+            args,
+            context.requestId,
+            execFn
+          );
+        }
+        return await execFn();
       } catch (error) {
         const structured = formatHandlerError(error);
         if (hasOutputSchema) {
+          const enriched = JSON.stringify({
+            ...structured,
+            _meta: { tokenEstimate: 0 }
+          });
+          const tokenEstimate2 = Math.ceil(
+            Buffer.byteLength(enriched, "utf8") / 4
+          );
+          const finalText2 = enriched.replace(
+            '"tokenEstimate":0',
+            `"tokenEstimate":${String(tokenEstimate2)}`
+          );
           return {
             content: [
               {
                 type: "text",
-                text: JSON.stringify(structured, null, 2)
+                text: finalText2
               }
             ],
             structuredContent: structured,
             isError: true
           };
         }
+        const withMeta = JSON.stringify(
+          { ...structured, _meta: { tokenEstimate: 0 } },
+          null,
+          2
+        );
+        const tokenEstimate = Math.ceil(
+          Buffer.byteLength(withMeta, "utf8") / 4
+        );
+        const finalText = withMeta.replace(
+          '"tokenEstimate": 0',
+          `"tokenEstimate": ${String(tokenEstimate)}`
+        );
         return {
           content: [
             {
               type: "text",
-              text: JSON.stringify(structured, null, 2)
+              text: finalText
             }
           ],
           isError: true
@@ -209,7 +279,7 @@ function registerPromptImpl(adapter, server, prompt) {
     const context = adapter.createContext();
     const safeArgs = args ?? {};
     const result = await prompt.handler(safeArgs, context);
-    const messages = Array.isArray(result) ? result : [
+    const messages = Array.isArray(result) ? result : result !== null && result !== void 0 && typeof result === "object" && "messages" in result && Array.isArray(result.messages) ? result.messages : [
       {
         role: "assistant",
         content: {
@@ -247,6 +317,29 @@ var DatabaseAdapter = class {
   isConnected() {
     return this.connected;
   }
+  // ===========================================================================
+  // Audit Subsystem
+  // ===========================================================================
+  auditInterceptor = null;
+  backupManager = null;
+  /**
+   * Inject the audit interceptor.
+   */
+  setAuditInterceptor(interceptor) {
+    this.auditInterceptor = interceptor;
+  }
+  /**
+   * Inject the backup manager for tools to use natively.
+   */
+  setBackupManager(manager) {
+    this.backupManager = manager;
+  }
+  /**
+   * Get the audit interceptor (used by registration layer and Code Mode).
+   */
+  getAuditInterceptor() {
+    return this.auditInterceptor;
+  }
   /**
    * Register tools with the MCP server
    * @param server - MCP server instance

package/dist/cli.js

@@ -1,7 +1,14 @@
 #!/usr/bin/env node
-import { DEFAULT_CONFIG, createServer } from './chunk-RHVEZ42P.js';
-import { VERSION } from './chunk-FW7UCRLN.js';
-import './chunk-AOUL5SHS.js';
+import { DEFAULT_CONFIG, createServer } from './chunk-WBER5YY4.js';
+import './chunk-SFJQCNG7.js';
+import { VERSION } from './chunk-VIDSICEL.js';
+import './chunk-645ZEFLA.js';
+
+// src/audit/types.ts
+var DEFAULT_AUDIT_LOG_MAX_SIZE_BYTES = 10 * 1024 * 1024;
+var DEFAULT_AUDIT_BACKUP_MAX_DATA_SIZE_BYTES = 50 * 1024 * 1024;
+var DEFAULT_AUDIT_BACKUP_MAX_AGE_DAYS = 30;
+var DEFAULT_AUDIT_BACKUP_MAX_COUNT = 1e3;
 
 // src/cli.ts
 function parseArgs() {
@@ -10,6 +17,11 @@ function parseArgs() {
   const databases = [];
   let enableCsv = false;
   let enableSpatialite = false;
+  let auditLogPath;
+  let auditRedact = false;
+  let auditReads = false;
+  let auditBackup = false;
+  let auditBackupData = false;
   for (let i = 0; i < args.length; i++) {
     const arg = args[i];
     if (arg === "--transport" || arg === "-t") {
@@ -115,6 +127,19 @@ function parseArgs() {
       if (lastDb?.options && "backend" in lastDb.options) {
         lastDb.options["spatialite"] = true;
       }
+    } else if (arg === "--audit-log") {
+      const logPath = args[++i];
+      if (logPath) {
+        auditLogPath = logPath;
+      }
+    } else if (arg === "--audit-redact") {
+      auditRedact = true;
+    } else if (arg === "--audit-reads") {
+      auditReads = true;
+    } else if (arg === "--audit-backup") {
+      auditBackup = true;
+    } else if (arg === "--audit-backup-data") {
+      auditBackupData = true;
     } else if (arg === "--help" || arg === "-h") {
       printHelp();
       process.exit(0);
@@ -123,6 +148,24 @@ function parseArgs() {
   if (databases.length > 0) {
     config.databases = databases;
   }
+  if (auditLogPath) {
+    config.audit = {
+      enabled: true,
+      logPath: auditLogPath,
+      redact: auditRedact,
+      auditReads,
+      maxSizeBytes: DEFAULT_AUDIT_LOG_MAX_SIZE_BYTES,
+      ...auditBackup && {
+        backup: {
+          enabled: true,
+          includeData: auditBackupData,
+          maxAgeDays: DEFAULT_AUDIT_BACKUP_MAX_AGE_DAYS,
+          maxCount: DEFAULT_AUDIT_BACKUP_MAX_COUNT,
+          maxDataSizeBytes: DEFAULT_AUDIT_BACKUP_MAX_DATA_SIZE_BYTES
+        }
+      }
+    };
+  }
   return config;
 }
 function printHelp() {
@@ -156,6 +199,13 @@ Extension Options (Native only):
   --csv                     Load CSV extension for CSV virtual tables
   --spatialite              Load SpatiaLite extension for GIS capabilities
 
+Audit Options:
+  --audit-log <path>        Enable audit logging (JSONL file path, or "stderr")
+  --audit-redact            Redact tool arguments from audit entries
+  --audit-reads             Also log read-scoped tool invocations
+  --audit-backup            Enable pre-mutation DDL snapshots
+  --audit-backup-data       Include sample data rows in snapshots
+
 Server Options:
   --name <name>             Server name (default: db-mcp)
   --version <version>       Server version (default: ${VERSION})
@@ -178,6 +228,11 @@ Environment Variables:
   SQLITE_DATABASE           SQLite database path
   CSV_EXTENSION_PATH        Custom path to CSV extension binary
   SPATIALITE_PATH           Custom path to SpatiaLite extension binary
+  AUDIT_LOG                 Audit log file path (or "stderr")
+  AUDIT_REDACT              Redact arguments (true/false)
+  AUDIT_READS               Log reads (true/false)
+  AUDIT_BACKUP              Enable backups (true/false)
+  AUDIT_BACKUP_DATA         Include data (true/false)
 
 Examples:
   db-mcp --sqlite-native ./data.db
@@ -219,6 +274,25 @@ function loadEnvConfig() {
   if (toolFilter) {
     config.toolFilter = toolFilter;
   }
+  const auditLog = process.env["AUDIT_LOG"];
+  if (auditLog) {
+    config.audit = {
+      enabled: true,
+      logPath: auditLog,
+      redact: process.env["AUDIT_REDACT"] === "true",
+      auditReads: process.env["AUDIT_READS"] === "true",
+      maxSizeBytes: DEFAULT_AUDIT_LOG_MAX_SIZE_BYTES,
+      ...process.env["AUDIT_BACKUP"] === "true" && {
+        backup: {
+          enabled: true,
+          includeData: process.env["AUDIT_BACKUP_DATA"] === "true",
+          maxAgeDays: DEFAULT_AUDIT_BACKUP_MAX_AGE_DAYS,
+          maxCount: DEFAULT_AUDIT_BACKUP_MAX_COUNT,
+          maxDataSizeBytes: DEFAULT_AUDIT_BACKUP_MAX_DATA_SIZE_BYTES
+        }
+      }
+    };
+  }
   const sqliteUri = process.env["SQLITE_DATABASE"] ?? process.env["SQLITE_PATH"];
   if (sqliteUri) {
     databases.push({ type: "sqlite", connectionString: sqliteUri });
@@ -256,11 +330,11 @@ async function main() {
       if (dbConfig.type === "sqlite") {
         const options = dbConfig.options;
         if (options?.backend === "better-sqlite3") {
-          const { NativeSqliteAdapter } = await import('./sqlite-native-5O7FZJGB.js');
+          const { NativeSqliteAdapter } = await import('./sqlite-native-JXMCFQBA.js');
           const adapter = new NativeSqliteAdapter();
           await server.registerAdapter(adapter, dbConfig);
         } else {
-          const { SqliteAdapter } = await import('./sqlite-26V3Y4MK.js');
+          const { SqliteAdapter } = await import('./sqlite-U5KSYQXK.js');
           const adapter = new SqliteAdapter();
           await server.registerAdapter(adapter, dbConfig);
         }