db-mcp 2.0.0 → 3.0.1

package/dist/chunk-E5IESRTK.js

@@ -0,0 +1,489 @@
+import { SCOPES } from './chunk-L552U3QS.js';
+import { createRequire } from 'module';
+import { z } from 'zod';
+
+var _require = createRequire(import.meta.url);
+var pkg = _require("../package.json");
+var VERSION = pkg.version;
+var NAME = pkg.name;
+
+// src/utils/icons.ts
+var MDI_BASE = "https://cdn.jsdelivr.net/npm/@mdi/svg@7.4.47/svg";
+var SERVER_ICONS = [
+  {
+    src: `${MDI_BASE}/server.svg`,
+    mimeType: "image/svg+xml"
+  }
+];
+var TOOL_GROUP_ICONS = {
+  core: [{ src: `${MDI_BASE}/database.svg`, mimeType: "image/svg+xml" }],
+  json: [{ src: `${MDI_BASE}/code-json.svg`, mimeType: "image/svg+xml" }],
+  text: [{ src: `${MDI_BASE}/format-text.svg`, mimeType: "image/svg+xml" }],
+  stats: [{ src: `${MDI_BASE}/chart-bar.svg`, mimeType: "image/svg+xml" }],
+  vector: [
+    { src: `${MDI_BASE}/vector-polyline.svg`, mimeType: "image/svg+xml" }
+  ],
+  admin: [{ src: `${MDI_BASE}/cog.svg`, mimeType: "image/svg+xml" }],
+  transactions: [
+    { src: `${MDI_BASE}/swap-horizontal.svg`, mimeType: "image/svg+xml" }
+  ],
+  geo: [{ src: `${MDI_BASE}/earth.svg`, mimeType: "image/svg+xml" }],
+  introspection: [
+    { src: `${MDI_BASE}/graph-outline.svg`, mimeType: "image/svg+xml" }
+  ],
+  migration: [
+    { src: `${MDI_BASE}/source-branch.svg`, mimeType: "image/svg+xml" }
+  ],
+  codemode: [{ src: `${MDI_BASE}/code-braces.svg`, mimeType: "image/svg+xml" }]
+};
+function getToolGroupIcon(group) {
+  return TOOL_GROUP_ICONS[group];
+}
+
+// src/utils/annotations.ts
+var READ_ONLY = {
+  readOnlyHint: true,
+  destructiveHint: false,
+  openWorldHint: false,
+  sensitiveHint: false
+};
+var WRITE = {
+  readOnlyHint: false,
+  destructiveHint: false,
+  openWorldHint: false,
+  sensitiveHint: false
+};
+var DESTRUCTIVE = {
+  readOnlyHint: false,
+  destructiveHint: true,
+  openWorldHint: false,
+  sensitiveHint: false
+};
+var IDEMPOTENT = {
+  readOnlyHint: false,
+  destructiveHint: false,
+  idempotentHint: true,
+  openWorldHint: false,
+  sensitiveHint: false
+};
+var ADMIN = {
+  readOnlyHint: false,
+  destructiveHint: true,
+  openWorldHint: false,
+  sensitiveHint: true
+  // System maintenance may expose internal db structures
+};
+function readOnly(title) {
+  return { title, ...READ_ONLY };
+}
+function write(title) {
+  return { title, ...WRITE };
+}
+function destructive(title) {
+  return { title, ...DESTRUCTIVE };
+}
+function idempotent(title) {
+  return { title, ...IDEMPOTENT };
+}
+function admin(title) {
+  return { title, ...ADMIN };
+}
+var ADMIN_FS = {
+  readOnlyHint: false,
+  destructiveHint: true,
+  openWorldHint: true,
+  sensitiveHint: true
+};
+var WRITE_FS = {
+  readOnlyHint: false,
+  destructiveHint: false,
+  openWorldHint: true,
+  sensitiveHint: true
+};
+function adminFs(title) {
+  return { title, ...ADMIN_FS };
+}
+function writeFs(title) {
+  return { title, ...WRITE_FS };
+}
+
+// src/utils/redaction.ts
+var SENSITIVE_KEY_PATTERN = /(?:sk-|Bearer |token\s*[:=]\s*|password\s*[:=]\s*|secret\s*[:=]\s*|apikey\s*[:=]\s*|api_key\s*[:=]\s*|AWS_SECRET_ACCESS_KEY\s*[:=]\s*|GITHUB_TOKEN\s*[:=]\s*|ghp_|gho_|ghu_|ghs_|xoxb-|xoxp-|xoxs-|AZURE_[A-Z_]*\s*[:=]\s*|DATABASE_URL\s*[:=]\s*|AKIA|sk-ant-api[a-zA-Z0-9_-]+|sk_live_[a-zA-Z0-9_]+|rk_live_[a-zA-Z0-9_]+|SG\.[a-zA-Z0-9_-]+\.[a-zA-Z0-9_-]+|npm_[a-zA-Z0-9]{30,}|dpl_[a-zA-Z0-9]{30,}|hvs\.[a-zA-Z0-9_-]+)[^\s'",;)}\]]{2,}/i;
+var SENSITIVE_VALUE_REGEX = new RegExp(SENSITIVE_KEY_PATTERN.source, "gi");
+var SENSITIVE_KEY_REGEX = /^(password|passwd|token|secret|authorization|api_?key|credential|private_?key|access_?token|refresh_?token|database_url)$/i;
+function redactObject(obj, depth = 0, maxDepth = 15) {
+  if (depth > maxDepth || obj === null || obj === void 0) {
+    return obj;
+  }
+  if (typeof obj === "string") {
+    return obj.replace(SENSITIVE_VALUE_REGEX, "[REDACTED]");
+  }
+  if (typeof obj !== "object") {
+    return obj;
+  }
+  if (Array.isArray(obj)) {
+    return obj.map((item) => redactObject(item, depth + 1, maxDepth));
+  }
+  const redacted = {};
+  for (const [key, value] of Object.entries(obj)) {
+    if (SENSITIVE_KEY_REGEX.test(key)) {
+      redacted[key] = "[REDACTED]";
+    } else {
+      redacted[key] = redactObject(value, depth + 1, maxDepth);
+    }
+  }
+  return redacted;
+}
+
+// src/auth/scope-map.ts
+var toolScopeMap = /* @__PURE__ */ new Map();
+function registerToolScope(toolName, scope) {
+  toolScopeMap.set(toolName, scope);
+  if (!toolName.startsWith("sqlite_")) {
+    toolScopeMap.set(`sqlite_${toolName}`, scope);
+  } else {
+    toolScopeMap.set(toolName.slice(7), scope);
+  }
+}
+function getRequiredScope(toolName) {
+  return toolScopeMap.get(toolName) ?? SCOPES.ADMIN;
+}
+
+// src/utils/resource-annotations.ts
+var HIGH_PRIORITY = {
+  audience: ["user", "assistant"],
+  priority: 0.9
+};
+var MEDIUM_PRIORITY = {
+  audience: ["user", "assistant"],
+  priority: 0.6
+};
+var LOW_PRIORITY = {
+  audience: ["user", "assistant"],
+  priority: 0.4
+};
+var ASSISTANT_FOCUSED = {
+  audience: ["assistant"],
+  priority: 0.5
+};
+var ErrorResponseFields = z.object({
+  error: z.string().optional().describe("Error message (human-readable)"),
+  code: z.string().optional().describe("Error code (e.g. VALIDATION_ERROR, QUERY_ERROR)"),
+  category: z.string().optional().describe("Error category (validation, query, connection, internal)"),
+  recoverable: z.boolean().optional().describe("Whether the error is recoverable"),
+  suggestion: z.string().optional().describe("Suggested fix for the error"),
+  details: z.record(z.string(), z.unknown()).optional().describe("Additional error context")
+});
+var coerceNumber = (val) => {
+  if (typeof val === "string") {
+    if (val.trim() === "") return void 0;
+    const num = Number(val);
+    return isNaN(num) ? val : num;
+  }
+  return val;
+};
+var BackupSchema = z.object({
+  targetPath: z.string().describe("Path for backup file")
+});
+var AnalyzeSchema = z.object({
+  table: z.string().optional().describe("Specific table to analyze (default: all)")
+});
+var IntegrityCheckSchema = z.object({
+  maxErrors: z.preprocess(
+    coerceNumber,
+    z.number().int().optional().default(100).describe("Maximum errors to report")
+  )
+});
+var OptimizeSchema = z.object({
+  table: z.string().optional().describe("Specific table to optimize"),
+  reindex: z.boolean().optional().default(false),
+  analyze: z.boolean().optional().default(true)
+});
+var RestoreSchema = z.object({
+  sourcePath: z.string().describe("Path to backup file to restore from"),
+  allowTriggers: z.boolean().optional().default(false).describe(
+    "If true, allows triggers in the backup file to be restored. This is a security risk if the backup file is untrusted."
+  )
+});
+var VerifyBackupSchema = z.object({
+  backupPath: z.string().describe("Path to backup file to verify")
+});
+var IndexStatsSchema = z.object({
+  table: z.string().optional().describe("Filter indexes by table name (default: all tables)"),
+  excludeSystemIndexes: z.boolean().optional().default(true).describe(
+    "Exclude SpatiaLite system indexes (default: true). Set to false to include all indexes."
+  )
+});
+var PragmaOptimizeSchema = z.object({
+  mask: z.preprocess(
+    coerceNumber,
+    z.number().int().optional().describe("Optional optimization mask (default: 0xfffe)")
+  )
+});
+var PragmaSettingsSchema = z.object({
+  pragma: z.string().describe("PRAGMA name (e.g., 'cache_size', 'journal_mode')"),
+  value: z.union([z.string(), z.number().int()]).optional().describe("Value to set (omit to only read)")
+});
+var PragmaTableInfoSchema = z.object({
+  table: z.string().describe("Table name to get column information for")
+});
+var PragmaCompileOptionsSchema = z.object({
+  filter: z.string().optional().describe(
+    "Optional filter pattern (case-insensitive substring match) to limit returned options"
+  )
+});
+var PragmaDatabaseListSchema = z.object({});
+var AppendInsightSchema = z.object({
+  insight: z.string().max(2e3).regex(
+    /^[\x20-\x7E\n\r]*$/,
+    "Insight must contain only printable ASCII characters"
+  ).describe("Business insight discovered from data analysis")
+});
+z.object({
+  analyze: z.boolean().optional().default(true).describe("Run ANALYZE after VACUUM")
+});
+var AttachDatabaseSchema = z.object({
+  filepath: z.string().describe("Path to the database file to attach"),
+  alias: z.string().regex(
+    /^[a-zA-Z_]\w*$/,
+    "Alias must start with a letter or underscore and contain only alphanumeric characters"
+  ).describe("Schema alias for the attached database (e.g., 'analytics')")
+});
+var DetachDatabaseSchema = z.object({
+  alias: z.string().describe("Schema alias of the database to detach (cannot be 'main')")
+});
+var VacuumIntoCopySchema = z.object({
+  outputPath: z.string().describe(
+    "Path for the output database file. Creates a compacted copy of the database."
+  )
+});
+var AuditListBackupsSchema = z.object({
+  limit: z.preprocess(
+    coerceNumber,
+    z.number().int().min(1).max(100).optional().default(10).describe("Maximum number of snapshots to return (default 10, max 100)")
+  ),
+  offset: z.preprocess(
+    coerceNumber,
+    z.number().int().min(0).optional().default(0).describe("Pagination offset")
+  )
+});
+z.object({
+  filename: z.string().describe(
+    "Snapshot filename from sqlite_audit_list_backups results (e.g., '2025-01-01T00-00-00-000Z_sqlite_drop_table_users.snapshot.json.gz')"
+  ),
+  dryRun: z.boolean().optional().default(false).describe(
+    "If true, returns the DDL that would be executed without applying changes"
+  )
+});
+z.object({
+  filename: z.string().describe("Snapshot filename to compare against the live database schema")
+});
+var SqlDumpSchema = z.object({
+  outputPath: z.string().describe(
+    "Absolute path where the SQL text dump file will be written (e.g. '/path/to/dump.sql')"
+  )
+});
+var AuditListBackupsOutputSchema = z.object({
+  success: z.boolean(),
+  snapshots: z.array(z.any()).optional(),
+  count: z.number().optional(),
+  totalCount: z.number().optional(),
+  _meta: z.object({ tokenEstimate: z.number() }).optional()
+}).extend(ErrorResponseFields.shape);
+var AuditGetBackupOutputSchema = z.object({
+  success: z.boolean(),
+  metadata: z.any().optional(),
+  ddl: z.string().optional(),
+  data: z.string().optional()
+}).extend(ErrorResponseFields.shape);
+var AuditCleanupOutputSchema = z.object({
+  success: z.boolean(),
+  deletedCount: z.number().optional(),
+  message: z.string().optional()
+}).extend(ErrorResponseFields.shape);
+var AuditDiffBackupOutputSchema = z.object({
+  success: z.boolean(),
+  diffs: z.array(z.any()).optional(),
+  snapshotTimestamp: z.string().optional(),
+  snapshotTarget: z.string().optional()
+}).extend(ErrorResponseFields.shape);
+var AuditRestoreBackupOutputSchema = z.object({
+  success: z.boolean(),
+  message: z.string().optional(),
+  ddl: z.string().optional(),
+  dryRun: z.boolean().optional(),
+  changesApplied: z.number().optional()
+}).extend(ErrorResponseFields.shape);
+var VacuumOutputSchema = z.object({
+  success: z.boolean(),
+  message: z.string().optional(),
+  durationMs: z.number().optional(),
+  wasmLimitation: z.boolean().optional(),
+  sizeChange: z.object({
+    before: z.number(),
+    after: z.number(),
+    saved: z.number()
+  }).optional()
+}).extend(ErrorResponseFields.shape);
+var BackupOutputSchema = z.object({
+  success: z.boolean(),
+  message: z.string().optional(),
+  path: z.string().optional(),
+  sizeBytes: z.number().optional(),
+  durationMs: z.number().optional(),
+  wasmLimitation: z.boolean().optional(),
+  note: z.string().optional()
+}).extend(ErrorResponseFields.shape);
+var SqlDumpOutputSchema = z.object({
+  success: z.boolean(),
+  message: z.string().optional(),
+  path: z.string().optional(),
+  durationMs: z.number().optional(),
+  wasmLimitation: z.boolean().optional()
+}).extend(ErrorResponseFields.shape);
+var AnalyzeOutputSchema = z.object({
+  success: z.boolean(),
+  message: z.string().optional(),
+  tablesAnalyzed: z.number().optional(),
+  durationMs: z.number().optional()
+}).extend(ErrorResponseFields.shape);
+var OptimizeOutputSchema = z.object({
+  success: z.boolean(),
+  message: z.string().optional(),
+  operations: z.array(z.string()).optional(),
+  durationMs: z.number().optional()
+}).extend(ErrorResponseFields.shape);
+var IntegrityCheckOutputSchema = z.object({
+  success: z.boolean(),
+  integrity: z.enum(["ok", "errors_found"]).optional(),
+  errorCount: z.number().optional(),
+  messages: z.array(z.string()).optional()
+}).extend(ErrorResponseFields.shape);
+var RestoreOutputSchema = z.object({
+  success: z.boolean(),
+  message: z.string().optional(),
+  sourcePath: z.string().optional(),
+  durationMs: z.number().optional(),
+  wasmLimitation: z.boolean().optional(),
+  skippedTables: z.array(z.string()).optional(),
+  note: z.string().optional()
+}).extend(ErrorResponseFields.shape);
+var VerifyBackupOutputSchema = z.object({
+  success: z.boolean(),
+  valid: z.boolean().optional(),
+  pageCount: z.number().optional(),
+  pageSize: z.number().optional(),
+  integrity: z.enum(["ok", "errors_found"]).optional(),
+  messages: z.array(z.string()).optional(),
+  message: z.string().optional(),
+  wasmLimitation: z.boolean().optional(),
+  backupPath: z.string().optional()
+}).extend(ErrorResponseFields.shape);
+var IndexColumnSchema = z.object({
+  name: z.string(),
+  seqno: z.number()
+});
+var IndexStatsEntrySchema = z.object({
+  name: z.string(),
+  table: z.string(),
+  unique: z.boolean(),
+  partial: z.boolean(),
+  columns: z.array(IndexColumnSchema)
+});
+var IndexStatsOutputSchema = z.object({
+  success: z.boolean(),
+  indexes: z.array(IndexStatsEntrySchema).optional()
+}).extend(ErrorResponseFields.shape);
+var PragmaCompileOptionsOutputSchema = z.object({
+  success: z.boolean(),
+  options: z.array(z.string()).optional()
+}).extend(ErrorResponseFields.shape);
+var DatabaseListEntrySchema = z.object({
+  seq: z.number(),
+  name: z.string(),
+  file: z.string()
+});
+var PragmaDatabaseListOutputSchema = z.object({
+  success: z.boolean(),
+  databases: z.array(DatabaseListEntrySchema).optional(),
+  configuredPath: z.string().optional(),
+  note: z.string().optional()
+}).extend(ErrorResponseFields.shape);
+var PragmaOptimizeOutputSchema = z.object({
+  success: z.boolean(),
+  message: z.string().optional(),
+  durationMs: z.number().optional()
+}).extend(ErrorResponseFields.shape);
+var PragmaSettingsOutputSchema = z.object({
+  success: z.boolean(),
+  pragma: z.string().optional(),
+  value: z.unknown().optional(),
+  oldValue: z.unknown().optional(),
+  newValue: z.unknown().optional()
+}).extend(ErrorResponseFields.shape);
+var PragmaTableInfoColumnSchema = z.object({
+  cid: z.number(),
+  name: z.string(),
+  type: z.string(),
+  notNull: z.boolean(),
+  defaultValue: z.unknown().nullable(),
+  pk: z.number()
+});
+var PragmaTableInfoOutputSchema = z.object({
+  success: z.boolean(),
+  table: z.string().optional(),
+  columns: z.array(PragmaTableInfoColumnSchema).optional()
+}).extend(ErrorResponseFields.shape);
+var AppendInsightOutputSchema = z.object({
+  success: z.boolean(),
+  message: z.string().optional(),
+  insightCount: z.number().optional()
+}).extend(ErrorResponseFields.shape);
+var AttachDatabaseOutputSchema = z.object({
+  success: z.boolean(),
+  message: z.string().optional(),
+  alias: z.string().optional(),
+  filepath: z.string().optional()
+}).extend(ErrorResponseFields.shape);
+var DetachDatabaseOutputSchema = z.object({
+  success: z.boolean(),
+  message: z.string().optional(),
+  alias: z.string().optional()
+}).extend(ErrorResponseFields.shape);
+var VacuumIntoCopyOutputSchema = z.object({
+  success: z.boolean(),
+  message: z.string().optional(),
+  outputPath: z.string().optional(),
+  sizeBytes: z.number().optional(),
+  durationMs: z.number().optional(),
+  wasmLimitation: z.boolean().optional()
+}).extend(ErrorResponseFields.shape);
+var ReindexSchema = z.object({
+  target: z.string().optional().describe(
+    "Index name, table name, or collation name to reindex. Omit to reindex the entire database."
+  )
+});
+var ReindexOutputSchema = z.object({
+  success: z.boolean(),
+  message: z.string().optional(),
+  sql: z.string().optional(),
+  durationMs: z.number().optional()
+}).extend(ErrorResponseFields.shape);
+var WalSchema = z.object({
+  action: z.enum(["status", "enable", "disable", "checkpoint"]).describe(
+    "WAL action: 'status' = check journal_mode, 'enable' = switch to WAL, 'disable' = switch to DELETE (default journal mode), 'checkpoint' = force WAL checkpoint"
+  ),
+  checkpointMode: z.enum(["PASSIVE", "FULL", "RESTART", "TRUNCATE"]).optional().default("PASSIVE").describe(
+    "Checkpoint mode (only used with 'checkpoint' action). PASSIVE = checkpoint without blocking readers (default). FULL = wait for readers to finish. RESTART = same as FULL but restart WAL file. TRUNCATE = same as RESTART but truncate WAL file to zero bytes."
+  )
+});
+var WalOutputSchema = z.object({
+  success: z.boolean(),
+  message: z.string().optional(),
+  journalMode: z.string().optional(),
+  previousMode: z.string().optional(),
+  walPages: z.number().optional(),
+  checkpointedPages: z.number().optional()
+}).extend(ErrorResponseFields.shape);
+
+export { ASSISTANT_FOCUSED, AnalyzeOutputSchema, AnalyzeSchema, AppendInsightOutputSchema, AppendInsightSchema, AttachDatabaseOutputSchema, AttachDatabaseSchema, AuditCleanupOutputSchema, AuditDiffBackupOutputSchema, AuditGetBackupOutputSchema, AuditListBackupsOutputSchema, AuditListBackupsSchema, AuditRestoreBackupOutputSchema, BackupOutputSchema, BackupSchema, DetachDatabaseOutputSchema, DetachDatabaseSchema, ErrorResponseFields, HIGH_PRIORITY, IndexStatsOutputSchema, IndexStatsSchema, IntegrityCheckOutputSchema, IntegrityCheckSchema, LOW_PRIORITY, MEDIUM_PRIORITY, NAME, OptimizeOutputSchema, OptimizeSchema, PragmaCompileOptionsOutputSchema, PragmaCompileOptionsSchema, PragmaDatabaseListOutputSchema, PragmaDatabaseListSchema, PragmaOptimizeOutputSchema, PragmaOptimizeSchema, PragmaSettingsOutputSchema, PragmaSettingsSchema, PragmaTableInfoOutputSchema, PragmaTableInfoSchema, READ_ONLY, ReindexOutputSchema, ReindexSchema, RestoreOutputSchema, RestoreSchema, SENSITIVE_KEY_PATTERN, SERVER_ICONS, SqlDumpOutputSchema, SqlDumpSchema, VERSION, VacuumIntoCopyOutputSchema, VacuumIntoCopySchema, VacuumOutputSchema, VerifyBackupOutputSchema, VerifyBackupSchema, WalOutputSchema, WalSchema, admin, adminFs, destructive, getRequiredScope, getToolGroupIcon, idempotent, readOnly, redactObject, registerToolScope, write, writeFs };