db-mcp 1.1.1 → 3.0.0

package/dist/cli.js

@@ -1,7 +1,13 @@
 #!/usr/bin/env node
-import { DEFAULT_CONFIG, createServer } from './chunk-RHVEZ42P.js';
-import { VERSION } from './chunk-FW7UCRLN.js';
-import './chunk-AOUL5SHS.js';
+import { DEFAULT_CONFIG, createServer } from './chunk-THATOQRT.js';
+import { VERSION } from './chunk-E5IESRTK.js';
+import { logger } from './chunk-L552U3QS.js';
+
+// src/audit/types.ts
+var DEFAULT_AUDIT_LOG_MAX_SIZE_BYTES = 10 * 1024 * 1024;
+var DEFAULT_AUDIT_BACKUP_MAX_DATA_SIZE_BYTES = 50 * 1024 * 1024;
+var DEFAULT_AUDIT_BACKUP_MAX_AGE_DAYS = 30;
+var DEFAULT_AUDIT_BACKUP_MAX_COUNT = 1e3;
 
 // src/cli.ts
 function parseArgs() {
@@ -10,6 +16,11 @@ function parseArgs() {
   const databases = [];
   let enableCsv = false;
   let enableSpatialite = false;
+  let auditLogPath;
+  let auditRedact = true;
+  let auditReads = false;
+  let auditBackup = false;
+  let auditBackupData = false;
   for (let i = 0; i < args.length; i++) {
     const arg = args[i];
     if (arg === "--transport" || arg === "-t") {
@@ -31,11 +42,8 @@ function parseArgs() {
       config.statelessHttp = true;
     } else if (arg === "--enable-hsts") {
       config.enableHSTS = true;
-    } else if (arg === "--auth-token") {
-      const tokenValue = args[++i];
-      if (tokenValue) {
-        config.authToken = tokenValue;
-      }
+    } else if (arg === "--no-auth-enforcement") {
+      config.noAuthEnforcement = true;
     } else if (arg === "--oauth-enabled" || arg === "-o") {
       if (!config.oauth) {
         config.oauth = { enabled: true };
@@ -115,6 +123,19 @@ function parseArgs() {
       if (lastDb?.options && "backend" in lastDb.options) {
         lastDb.options["spatialite"] = true;
       }
+    } else if (arg === "--audit-log") {
+      const logPath = args[++i];
+      if (logPath) {
+        auditLogPath = logPath;
+      }
+    } else if (arg === "--audit-no-redact") {
+      auditRedact = false;
+    } else if (arg === "--audit-reads") {
+      auditReads = true;
+    } else if (arg === "--audit-backup") {
+      auditBackup = true;
+    } else if (arg === "--audit-backup-data") {
+      auditBackupData = true;
     } else if (arg === "--help" || arg === "-h") {
       printHelp();
       process.exit(0);
@@ -123,6 +144,24 @@ function parseArgs() {
   if (databases.length > 0) {
     config.databases = databases;
   }
+  if (auditLogPath) {
+    config.audit = {
+      enabled: true,
+      logPath: auditLogPath,
+      redact: auditRedact,
+      auditReads,
+      maxSizeBytes: DEFAULT_AUDIT_LOG_MAX_SIZE_BYTES,
+      ...auditBackup && {
+        backup: {
+          enabled: true,
+          includeData: auditBackupData,
+          maxAgeDays: DEFAULT_AUDIT_BACKUP_MAX_AGE_DAYS,
+          maxCount: DEFAULT_AUDIT_BACKUP_MAX_COUNT,
+          maxDataSizeBytes: DEFAULT_AUDIT_BACKUP_MAX_DATA_SIZE_BYTES
+        }
+      }
+    };
+  }
   return config;
 }
 function printHelp() {
@@ -134,19 +173,19 @@ Usage: db-mcp [options]
 Transport Options:
   --transport, -t <type>    Transport type: stdio (default), http, sse
   --port, -p <port>         HTTP port (default: 3000)
-  --server-host <host>      Host/IP to bind to (default: 0.0.0.0)
-                            Use 127.0.0.1 to restrict to local connections
+  --server-host <host>      Host/IP to bind to (default: 127.0.0.1)
+                            Use 127.0.0.1 for local, 0.0.0.0 to allow external connections
   --stateless               Use stateless HTTP mode (no session management, no SSE)
                             Ideal for serverless deployments (Lambda, Workers)
   --enable-hsts             Enable HSTS header (use when behind HTTPS)
 
 Authentication Options:
-  --auth-token <token>      Simple bearer token for HTTP authentication
+  --no-auth-enforcement     Explicitly bypass auth enforcement for HTTP
   --oauth-enabled, -o       Enable OAuth 2.1 authentication
   --oauth-issuer <url>      Authorization server URL (issuer)
   --oauth-audience <aud>    Expected token audience
   --oauth-jwks-uri <url>    JWKS URI (auto-discovered from issuer if not set)
-  --oauth-clock-tolerance <seconds>  Clock tolerance in seconds (default: 60)
+  --oauth-clock-tolerance <seconds>  Clock tolerance in seconds (default: 30)
 
 Database Options:
   --sqlite <path>           Add SQLite database (WASM/sql.js)
@@ -156,6 +195,13 @@ Extension Options (Native only):
   --csv                     Load CSV extension for CSV virtual tables
   --spatialite              Load SpatiaLite extension for GIS capabilities
 
+Audit Options:
+  --audit-log <path>        Enable audit logging (JSONL file path, or "stderr")
+  --audit-no-redact          Include tool arguments in audit entries (default: redacted)
+  --audit-reads             Also log read-scoped tool invocations
+  --audit-backup            Enable pre-mutation DDL snapshots
+  --audit-backup-data       Include sample data rows in snapshots
+
 Server Options:
   --name <name>             Server name (default: db-mcp)
   --version <version>       Server version (default: ${VERSION})
@@ -166,8 +212,8 @@ Server Options:
                               Legacy: -vector,-geo (exclusion from all)
 
 Environment Variables:
-  MCP_HOST                  Host/IP to bind to (default: 0.0.0.0)
-  MCP_AUTH_TOKEN             Simple bearer token (same as --auth-token)
+  MCP_HOST                  Host/IP to bind to (default: 127.0.0.1)
+  MCP_AUTH_TOKEN             Simple bearer token
   OAUTH_ENABLED              Enable OAuth 2.1 (same as --oauth-enabled)
   OAUTH_ISSUER               Authorization server URL
   OAUTH_AUDIENCE             Expected token audience
@@ -178,6 +224,11 @@ Environment Variables:
   SQLITE_DATABASE           SQLite database path
   CSV_EXTENSION_PATH        Custom path to CSV extension binary
   SPATIALITE_PATH           Custom path to SpatiaLite extension binary
+  AUDIT_LOG                 Audit log file path (or "stderr")
+  AUDIT_REDACT              Redact arguments (default: true, set false to include args)
+  AUDIT_READS               Log reads (true/false)
+  AUDIT_BACKUP              Enable backups (true/false)
+  AUDIT_BACKUP_DATA         Include data (true/false)
 
 Examples:
   db-mcp --sqlite-native ./data.db
@@ -197,8 +248,19 @@ function loadEnvConfig() {
   }
   const authToken = process.env["MCP_AUTH_TOKEN"];
   if (authToken) {
+    if (authToken.length < 32) {
+      logger.warning(
+        "MCP_AUTH_TOKEN is too short (< 32 chars). Use a cryptographically random token."
+      );
+    }
     config.authToken = authToken;
   }
+  if (process.env["NO_AUTH_ENFORCEMENT"] === "true") {
+    logger.warning(
+      "Auth enforcement explicitly disabled via NO_AUTH_ENFORCEMENT. Ensure this is not running in production."
+    );
+    config.noAuthEnforcement = true;
+  }
   const oauthEnabled = process.env["OAUTH_ENABLED"] === "true";
   if (oauthEnabled) {
     const oauth = { enabled: true };
@@ -219,6 +281,25 @@ function loadEnvConfig() {
   if (toolFilter) {
     config.toolFilter = toolFilter;
   }
+  const auditLog = process.env["AUDIT_LOG"];
+  if (auditLog) {
+    config.audit = {
+      enabled: true,
+      logPath: auditLog,
+      redact: process.env["AUDIT_REDACT"] !== "false",
+      auditReads: process.env["AUDIT_READS"] === "true",
+      maxSizeBytes: DEFAULT_AUDIT_LOG_MAX_SIZE_BYTES,
+      ...process.env["AUDIT_BACKUP"] === "true" && {
+        backup: {
+          enabled: true,
+          includeData: process.env["AUDIT_BACKUP_DATA"] === "true",
+          maxAgeDays: DEFAULT_AUDIT_BACKUP_MAX_AGE_DAYS,
+          maxCount: DEFAULT_AUDIT_BACKUP_MAX_COUNT,
+          maxDataSizeBytes: DEFAULT_AUDIT_BACKUP_MAX_DATA_SIZE_BYTES
+        }
+      }
+    };
+  }
   const sqliteUri = process.env["SQLITE_DATABASE"] ?? process.env["SQLITE_PATH"];
   if (sqliteUri) {
     databases.push({ type: "sqlite", connectionString: sqliteUri });
@@ -241,6 +322,13 @@ async function main() {
         ...cliConfig.databases ?? []
       ]
     };
+    if (process.env["NODE_ENV"] === "production" && config.transport === "http" && !config.oauth?.enabled && !config.authToken && !config.noAuthEnforcement) {
+      logger.error(
+        "FATAL SECURITY ERROR: HTTP transport in production requires authentication (--oauth-enabled or --auth-token). If you intend to run without authentication, you must explicitly pass --no-auth-enforcement.",
+        { module: "SERVER" }
+      );
+      process.exit(1);
+    }
     const server = createServer(config);
     process.on("SIGINT", () => {
       void server.shutdown().then(() => {
@@ -256,25 +344,32 @@ async function main() {
       if (dbConfig.type === "sqlite") {
         const options = dbConfig.options;
         if (options?.backend === "better-sqlite3") {
-          const { NativeSqliteAdapter } = await import('./sqlite-native-5O7FZJGB.js');
+          const { NativeSqliteAdapter } = await import('./sqlite-native-ZSSWCTYC.js');
           const adapter = new NativeSqliteAdapter();
           await server.registerAdapter(adapter, dbConfig);
         } else {
-          const { SqliteAdapter } = await import('./sqlite-26V3Y4MK.js');
+          const { SqliteAdapter } = await import('./sqlite-6C3AJI4I.js');
           const adapter = new SqliteAdapter();
           await server.registerAdapter(adapter, dbConfig);
         }
       }
     }
     if (config.databases.length === 0) {
-      console.error(
+      logger.warning(
         "Warning: No databases configured. Use --sqlite or --sqlite-native, or set SQLITE_DATABASE"
       );
     }
     await server.start();
   } catch (error) {
-    console.error("Fatal error:", error);
+    logger.error("Fatal error", {
+      error: error instanceof Error ? error : new Error(String(error))
+    });
     process.exit(1);
   }
 }
-main().catch(console.error);
+main().catch((error) => {
+  logger.error("Unhandled fatal error", {
+    error: error instanceof Error ? error : new Error(String(error))
+  });
+  process.exit(1);
+});

package/dist/codemode/api-constants.d.ts

@@ -0,0 +1,40 @@
+/**
+ * db-mcp - Code Mode API Constants
+ *
+ * Static constant maps for the sandbox API:
+ * - METHOD_ALIASES: shorthand names within each group
+ * - GROUP_EXAMPLES: help() output per group
+ * - POSITIONAL_PARAM_MAP: positional → named arg mapping
+ * - GROUP_PREFIX_MAP: tool name prefix stripping rules
+ * - KEEP_PREFIX_GROUPS: groups that retain their prefix in method names
+ */
+/**
+ * Aliases for common naming shortcuts within each group.
+ * Maps alias name → canonical method name.
+ */
+export declare const METHOD_ALIASES: Record<string, Record<string, string>>;
+/**
+ * Usage examples for each group's help() output
+ */
+export declare const GROUP_EXAMPLES: Record<string, string[]>;
+/**
+ * Maps method names to their parameter names for positional argument support.
+ * Single string = first positional arg maps to this key.
+ * Array = multiple positional args map to these keys in order.
+ *
+ * Enables:
+ * - `sqlite.core.readQuery("SELECT...")` → `{ query: "SELECT..." }`
+ * - `sqlite.core.describeTable("users")` → `{ table: "users" }`
+ */
+export declare const POSITIONAL_PARAM_MAP: Record<string, string | string[]>;
+/**
+ * Map group name to the prefix used in tool names.
+ * Some groups use different prefixes.
+ */
+export declare const GROUP_PREFIX_MAP: Record<string, string>;
+/**
+ * Groups where the prefix should be kept in the method name
+ * (because it's semantically part of the method identity)
+ */
+export declare const KEEP_PREFIX_GROUPS: Set<string>;
+//# sourceMappingURL=api-constants.d.ts.map

package/dist/codemode/api-constants.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-constants.d.ts","sourceRoot":"","sources":["../../src/codemode/api-constants.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAMH;;;GAGG;AACH,eAAO,MAAM,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAsEjE,CAAC;AAMF;;GAEG;AACH,eAAO,MAAM,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAwDnD,CAAC;AAMF;;;;;;;;GAQG;AACH,eAAO,MAAM,oBAAoB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,CAkIlE,CAAC;AAMF;;;GAGG;AACH,eAAO,MAAM,gBAAgB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAYnD,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,kBAAkB,aAA2C,CAAC"}

package/dist/codemode/api.d.ts

@@ -0,0 +1,70 @@
+/**
+ * db-mcp - Code Mode API
+ *
+ * Generates the `sqlite.*` API object that is injected into the sandbox.
+ * Each tool group becomes a namespace (e.g., `sqlite.core.readQuery()`).
+ *
+ * Architecture:
+ * - Reads tool definitions from the adapter
+ * - Groups tools by their `group` property
+ * - Converts tool names to camelCase method names
+ * - Creates proxy methods that normalize positional args and call handlers
+ * - Exposes `help()` at top level and per-group for discoverability
+ */
+import type { ToolDefinition, ToolGroup, RequestContext } from "../types/index.js";
+/**
+ * Convert tool name to camelCase method name.
+ *
+ * Examples:
+ *   sqlite_read_query (core) → readQuery
+ *   sqlite_json_extract (json) → extract
+ *   sqlite_stats_basic (stats) → statsBasic
+ *   sqlite_vector_search (vector) → search
+ *   sqlite_geo_distance (geo) → distance
+ *   sqlite_backup (admin) → backup
+ *   sqlite_transaction_begin (admin) → transactionBegin
+ *   sqlite_transaction_begin (transactions) → begin
+ */
+export declare function toolNameToMethodName(toolName: string, groupName: string): string;
+/** Type alias for group API record */
+type GroupApiRecord = Record<string, (...args: unknown[]) => Promise<unknown>>;
+/**
+ * Main API class exposing all SQLite tool groups.
+ * This is the object injected as `sqlite` in the sandbox.
+ */
+export declare class SqliteApi {
+    readonly core: GroupApiRecord;
+    readonly json: GroupApiRecord;
+    readonly text: GroupApiRecord;
+    readonly stats: GroupApiRecord;
+    readonly vector: GroupApiRecord;
+    readonly admin: GroupApiRecord;
+    readonly transactions: GroupApiRecord;
+    readonly geo: GroupApiRecord;
+    readonly introspection: GroupApiRecord;
+    readonly migration: GroupApiRecord;
+    private readonly toolsByGroup;
+    private readonly baseContext;
+    constructor(tools: ToolDefinition[], baseContext?: RequestContext);
+    /**
+     * Get all available groups
+     */
+    getGroups(): string[];
+    /**
+     * Get method names for a group
+     */
+    getGroupMethods(group: ToolGroup): string[];
+    /**
+     * Create the sandbox bindings object.
+     * This is the object injected as `sqlite` in the sandbox.
+     * Includes group namespaces + top-level aliases for common operations.
+     */
+    createSandboxBindings(): Record<string, unknown>;
+}
+/**
+ * Create a SqliteApi instance from tool definitions.
+ * Convenience factory for use in tool handler setup.
+ */
+export declare function createSqliteApi(tools: ToolDefinition[], baseContext?: RequestContext): SqliteApi;
+export {};
+//# sourceMappingURL=api.d.ts.map

package/dist/codemode/api.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"api.d.ts","sourceRoot":"","sources":["../../src/codemode/api.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,EACV,cAAc,EACd,SAAS,EACT,cAAc,EACf,MAAM,mBAAmB,CAAC;AAW3B;;;;;;;;;;;;GAYG;AACH,wBAAgB,oBAAoB,CAClC,QAAQ,EAAE,MAAM,EAChB,SAAS,EAAE,MAAM,GAChB,MAAM,CAcR;AA6GD,sCAAsC;AACtC,KAAK,cAAc,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;AA8E/E;;;GAGG;AACH,qBAAa,SAAS;IACpB,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAC9B,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAC9B,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAC9B,QAAQ,CAAC,KAAK,EAAE,cAAc,CAAC;IAC/B,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAChC,QAAQ,CAAC,KAAK,EAAE,cAAc,CAAC;IAC/B,QAAQ,CAAC,YAAY,EAAE,cAAc,CAAC;IACtC,QAAQ,CAAC,GAAG,EAAE,cAAc,CAAC;IAC7B,QAAQ,CAAC,aAAa,EAAE,cAAc,CAAC;IACvC,QAAQ,CAAC,SAAS,EAAE,cAAc,CAAC;IAEnC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAgC;IAC7D,OAAO,CAAC,QAAQ,CAAC,WAAW,CAA6B;gBAE7C,KAAK,EAAE,cAAc,EAAE,EAAE,WAAW,CAAC,EAAE,cAAc;IAkEjE;;OAEG;IACH,SAAS,IAAI,MAAM,EAAE;IAIrB;;OAEG;IACH,eAAe,CAAC,KAAK,EAAE,SAAS,GAAG,MAAM,EAAE;IAU3C;;;;OAIG;IACH,qBAAqB,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;CAuDjD;AAMD;;;GAGG;AACH,wBAAgB,eAAe,CAC7B,KAAK,EAAE,cAAc,EAAE,EACvB,WAAW,CAAC,EAAE,cAAc,GAC3B,SAAS,CAEX"}

package/dist/codemode/auto-return.d.ts

@@ -0,0 +1,25 @@
+/**
+ * db-mcp — Code Mode Auto-Return Transform
+ *
+ * Transforms user code so the last expression statement is implicitly
+ * returned from the async IIFE wrapper.  Mimics Node REPL / Chrome
+ * DevTools semantics where bare expressions surface their value.
+ *
+ * The transform is intentionally heuristic (string-based, not AST)
+ * because the code runs in a sandboxed vm.Script that already
+ * handles syntax errors.  Edge-case misfires are safe — they either
+ * produce a benign return of the last expression or leave the code
+ * unchanged (returning undefined, the previous behavior).
+ */
+/**
+ * Transform user code so the last expression statement gets an
+ * implicit `return`, enabling the IIFE wrapper to propagate the value.
+ *
+ * Examples:
+ *   `sqlite.help()`                   → `return sqlite.help()`
+ *   `const r = await foo(); r`        → `const r = await foo(); return r`
+ *   `return 42`                       → `return 42`          (no change)
+ *   `for (const x of xs) { ... }`    → unchanged             (control flow)
+ */
+export declare function transformAutoReturn(code: string): string;
+//# sourceMappingURL=auto-return.d.ts.map

package/dist/codemode/auto-return.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auto-return.d.ts","sourceRoot":"","sources":["../../src/codemode/auto-return.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAMH;;;;;;;;;GASG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAsCxD"}

package/dist/codemode/index.d.ts

@@ -0,0 +1,12 @@
+/**
+ * db-mcp - Code Mode Module
+ *
+ * Exports for the sandboxed code execution environment.
+ */
+export type { SandboxOptions, PoolOptions, SandboxResult, ExecutionMetrics, SecurityConfig, ValidationResult, ExecutionRecord, ExecuteCodeOptions, ExecuteCodeResult, GroupApi, } from "./types.js";
+export { DEFAULT_SANDBOX_OPTIONS, DEFAULT_POOL_OPTIONS, DEFAULT_SECURITY_CONFIG, } from "./types.js";
+export { CodeModeSandbox, SandboxPool } from "./sandbox.js";
+export { setDefaultSandboxMode, getDefaultSandboxMode, getAvailableSandboxModes, createSandbox, createSandboxPool, getSandboxModeInfo, type SandboxMode, type ISandbox, type ISandboxPool, type SandboxModeInfo, } from "./sandbox-factory.js";
+export { CodeModeSecurityManager } from "./security.js";
+export { SqliteApi, createSqliteApi } from "./api.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/codemode/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/codemode/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,YAAY,EACV,cAAc,EACd,WAAW,EACX,aAAa,EACb,gBAAgB,EAChB,cAAc,EACd,gBAAgB,EAChB,eAAe,EACf,kBAAkB,EAClB,iBAAiB,EACjB,QAAQ,GACT,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,uBAAuB,EACvB,oBAAoB,EACpB,uBAAuB,GACxB,MAAM,YAAY,CAAC;AAGpB,OAAO,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAG5D,OAAO,EACL,qBAAqB,EACrB,qBAAqB,EACrB,wBAAwB,EACxB,aAAa,EACb,iBAAiB,EACjB,kBAAkB,EAClB,KAAK,WAAW,EAChB,KAAK,QAAQ,EACb,KAAK,YAAY,EACjB,KAAK,eAAe,GACrB,MAAM,sBAAsB,CAAC;AAG9B,OAAO,EAAE,uBAAuB,EAAE,MAAM,eAAe,CAAC;AAGxD,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,UAAU,CAAC"}

package/dist/codemode/sandbox-factory.d.ts

@@ -0,0 +1,72 @@
+/**
+ * db-mcp - Sandbox Factory
+ *
+ * Factory functions for creating sandbox instances with configurable isolation modes.
+ * Allows runtime selection between isolated-vm and worker-based sandboxes.
+ */
+import type { SandboxOptions, PoolOptions, SandboxResult } from "./types.js";
+/**
+ * Sandbox isolation mode
+ */
+export type SandboxMode = "isolate";
+/**
+ * Unified sandbox interface
+ */
+export interface ISandbox {
+    execute(code: string, apiBindings: Record<string, unknown>, timeoutMs?: number): Promise<SandboxResult>;
+    isHealthy(): boolean;
+    dispose(): void;
+}
+/**
+ * Unified sandbox pool interface
+ */
+export interface ISandboxPool {
+    initialize(): void;
+    execute(code: string, apiBindings: Record<string, unknown>, timeoutMs?: number): Promise<SandboxResult>;
+    getStats(): {
+        available: number;
+        inUse: number;
+        max: number;
+    };
+    dispose(): void;
+}
+/**
+ * Mode info for documentation/selection
+ */
+export interface SandboxModeInfo {
+    name: string;
+    isolation: string;
+    performance: string;
+    security: string;
+    requirements: string;
+}
+/**
+ * Set the default sandbox mode
+ */
+export declare function setDefaultSandboxMode(mode: SandboxMode): void;
+/**
+ * Get the current default mode
+ */
+export declare function getDefaultSandboxMode(): SandboxMode;
+/**
+ * Get available sandbox modes
+ */
+export declare function getAvailableSandboxModes(): SandboxMode[];
+/**
+ * Create a sandbox instance
+ * @param mode - Isolation mode ('isolate' or 'worker')
+ * @param options - Sandbox options
+ */
+export declare function createSandbox(mode?: SandboxMode, options?: SandboxOptions): ISandbox;
+/**
+ * Create a sandbox pool
+ * @param mode - Isolation mode ('isolate' or 'worker')
+ * @param poolOptions - Pool configuration
+ * @param sandboxOptions - Sandbox configuration
+ */
+export declare function createSandboxPool(mode?: SandboxMode, poolOptions?: PoolOptions, sandboxOptions?: SandboxOptions): ISandboxPool;
+/**
+ * Get mode characteristics for documentation/selection
+ */
+export declare function getSandboxModeInfo(_mode: SandboxMode): SandboxModeInfo;
+//# sourceMappingURL=sandbox-factory.d.ts.map

package/dist/codemode/sandbox-factory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox-factory.d.ts","sourceRoot":"","sources":["../../src/codemode/sandbox-factory.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAKH,OAAO,KAAK,EAAE,cAAc,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAE7E;;GAEG;AACH,MAAM,MAAM,WAAW,GAAG,SAAS,CAAC;AAEpC;;GAEG;AACH,MAAM,WAAW,QAAQ;IACvB,OAAO,CACL,IAAI,EAAE,MAAM,EACZ,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACpC,SAAS,CAAC,EAAE,MAAM,GACjB,OAAO,CAAC,aAAa,CAAC,CAAC;IAC1B,SAAS,IAAI,OAAO,CAAC;IACrB,OAAO,IAAI,IAAI,CAAC;CACjB;AAED;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,UAAU,IAAI,IAAI,CAAC;IACnB,OAAO,CACL,IAAI,EAAE,MAAM,EACZ,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACpC,SAAS,CAAC,EAAE,MAAM,GACjB,OAAO,CAAC,aAAa,CAAC,CAAC;IAC1B,QAAQ,IAAI;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC;IAC9D,OAAO,IAAI,IAAI,CAAC;CACjB;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;CACtB;AAKD;;GAEG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,WAAW,GAAG,IAAI,CAK7D;AAED;;GAEG;AACH,wBAAgB,qBAAqB,IAAI,WAAW,CAEnD;AAED;;GAEG;AACH,wBAAgB,wBAAwB,IAAI,WAAW,EAAE,CAExD;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAC3B,IAAI,CAAC,EAAE,WAAW,EAClB,OAAO,CAAC,EAAE,cAAc,GACvB,QAAQ,CASV;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAC/B,IAAI,CAAC,EAAE,WAAW,EAClB,WAAW,CAAC,EAAE,WAAW,EACzB,cAAc,CAAC,EAAE,cAAc,GAC9B,YAAY,CASd;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,WAAW,GAAG,eAAe,CAQtE"}

package/dist/codemode/sandbox.d.ts

@@ -0,0 +1,54 @@
+/**
+ * db-mcp - Code Mode Sandbox
+ *
+ * Sandboxed execution environment using isolated-vm.
+ * Provides true V8 isolate separation for maximum security.
+ */
+import type ivm from "isolated-vm";
+import { type SandboxOptions, type PoolOptions, type SandboxResult } from "./types.js";
+/**
+ * A sandboxed execution context using isolated-vm
+ */
+export declare class CodeModeSandbox {
+    private readonly options;
+    private disposed;
+    private accumulatedLogs;
+    private constructor();
+    /**
+     * Create a new sandbox instance
+     */
+    static create(options?: SandboxOptions): CodeModeSandbox;
+    /**
+     * Execute code in the sandbox
+     */
+    execute(code: string, apiBindings: Record<string, unknown>, timeoutMs?: number): Promise<SandboxResult>;
+    getConsoleOutput(): string[];
+    clearConsoleOutput(): void;
+    isHealthy(): boolean;
+    dispose(): void;
+}
+/**
+ * Pool of sandbox instances for reuse
+ */
+export declare class SandboxPool {
+    private readonly options;
+    private readonly sandboxOptions;
+    private inUseCount;
+    private readonly idlePool;
+    private static ivmPromise;
+    private static cachedIvmLib;
+    constructor(poolOptions?: PoolOptions, sandboxOptions?: SandboxOptions);
+    static getIvmLib(): typeof ivm;
+    static initialize(): Promise<void>;
+    initialize(): Promise<void>;
+    execute(code: string, apiBindings: Record<string, unknown>, timeoutMs?: number): Promise<SandboxResult>;
+    cleanup(): void;
+    getStats(): {
+        available: number;
+        inUse: number;
+        max: number;
+        idle: number;
+    };
+    dispose(): void;
+}
+//# sourceMappingURL=sandbox.d.ts.map

package/dist/codemode/sandbox.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox.d.ts","sourceRoot":"","sources":["../../src/codemode/sandbox.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,GAAG,MAAM,aAAa,CAAC;AAEnC,OAAO,EAGL,KAAK,cAAc,EACnB,KAAK,WAAW,EAChB,KAAK,aAAa,EACnB,MAAM,YAAY,CAAC;AAGpB;;GAEG;AACH,qBAAa,eAAe;IAC1B,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA2B;IACnD,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,eAAe,CAAgB;IAEvC,OAAO;IAIP;;OAEG;IACH,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,cAAc,GAAG,eAAe;IAQxD;;OAEG;IACG,OAAO,CACX,IAAI,EAAE,MAAM,EACZ,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACpC,SAAS,CAAC,EAAE,MAAM,GACjB,OAAO,CAAC,aAAa,CAAC;IAwSzB,gBAAgB,IAAI,MAAM,EAAE;IAI5B,kBAAkB,IAAI,IAAI;IAI1B,SAAS,IAAI,OAAO;IAIpB,OAAO,IAAI,IAAI;CAIhB;AAED;;GAEG;AACH,qBAAa,WAAW;IACtB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAwB;IAChD,OAAO,CAAC,QAAQ,CAAC,cAAc,CAA2B;IAC1D,OAAO,CAAC,UAAU,CAAK;IACvB,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAyB;IAClD,OAAO,CAAC,MAAM,CAAC,UAAU,CAAoC;IAC7D,OAAO,CAAC,MAAM,CAAC,YAAY,CAA2B;gBAE1C,WAAW,CAAC,EAAE,WAAW,EAAE,cAAc,CAAC,EAAE,cAAc;IAKtE,MAAM,CAAC,SAAS,IAAI,OAAO,GAAG;WAOjB,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAUlC,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAI3B,OAAO,CACX,IAAI,EAAE,MAAM,EACZ,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACpC,SAAS,CAAC,EAAE,MAAM,GACjB,OAAO,CAAC,aAAa,CAAC;IAgCzB,OAAO,IAAI,IAAI;IAOf,QAAQ,IAAI;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE;IAS3E,OAAO,IAAI,IAAI;CAGhB"}

package/dist/codemode/security.d.ts

@@ -0,0 +1,45 @@
+/**
+ * db-mcp - Code Mode Security
+ *
+ * Input validation, rate limiting, and audit logging for code execution.
+ */
+import { type SecurityConfig, type ValidationResult, type ExecutionRecord, type SandboxResult } from "./types.js";
+/**
+ * Security manager for Code Mode executions
+ */
+export declare class CodeModeSecurityManager {
+    private readonly config;
+    private readonly rateLimitMap;
+    private redisClient?;
+    constructor(config?: Partial<SecurityConfig>);
+    /**
+     * Validate code before execution
+     */
+    validateCode(code: string): ValidationResult;
+    /**
+     * Check rate limit for a client
+     * @returns true if within limits, false if rate limited
+     */
+    checkRateLimit(clientId: string): Promise<boolean>;
+    /**
+     * Get remaining rate limit for a client
+     */
+    getRateLimitRemaining(clientId: string): Promise<number>;
+    /**
+     * Sanitize and truncate result if too large
+     */
+    sanitizeResult(result: unknown): unknown;
+    /**
+     * Log execution for audit purposes
+     */
+    auditLog(execution: ExecutionRecord): void;
+    /**
+     * Create execution record for audit
+     */
+    createExecutionRecord(code: string, result: SandboxResult, readonly: boolean, clientId?: string): ExecutionRecord;
+    /**
+     * Clean up old rate limit entries
+     */
+    cleanupRateLimits(): void;
+}
+//# sourceMappingURL=security.d.ts.map

package/dist/codemode/security.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"security.d.ts","sourceRoot":"","sources":["../../src/codemode/security.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,EAEL,KAAK,cAAc,EACnB,KAAK,gBAAgB,EACrB,KAAK,eAAe,EACpB,KAAK,aAAa,EACnB,MAAM,YAAY,CAAC;AAIpB;;GAEG;AACH,qBAAa,uBAAuB;IAClC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAiB;IACxC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAGzB;IACJ,OAAO,CAAC,WAAW,CAAC,CAAkB;gBAE1B,MAAM,CAAC,EAAE,OAAO,CAAC,cAAc,CAAC;IAa5C;;OAEG;IACH,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,gBAAgB;IA2C5C;;;OAGG;IACG,cAAc,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAsDxD;;OAEG;IACG,qBAAqB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAmB9D;;OAEG;IACH,cAAc,CAAC,MAAM,EAAE,OAAO,GAAG,OAAO;IA8BxC;;OAEG;IACH,QAAQ,CAAC,SAAS,EAAE,eAAe,GAAG,IAAI;IAqC1C;;OAEG;IACH,qBAAqB,CACnB,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,aAAa,EACrB,QAAQ,EAAE,OAAO,EACjB,QAAQ,CAAC,EAAE,MAAM,GAChB,eAAe;IAclB;;OAEG;IACH,iBAAiB,IAAI,IAAI;CAQ1B"}