db-mcp 3.0.1 → 4.0.0

package/dist/adapters/sqlite-native/tools/spatialite/tools.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tools.d.ts","sourceRoot":"","sources":["../../../../../src/adapters/sqlite-native/tools/spatialite/tools.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EACV,cAAc,EAEf,MAAM,4BAA4B,CAAC;AACpC,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,gCAAgC,CAAC;AA2B1E;;GAEG;AACH,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,mBAAmB,GAC3B,cAAc,CA6ChB;AAED;;GAEG;AACH,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,mBAAmB,GAC3B,cAAc,CAkHhB;AAED;;GAEG;AACH,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,mBAAmB,GAC3B,cAAc,CAuChB;AAED;;GAEG;AACH,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,mBAAmB,GAC3B,cAAc,CA2MhB"}
+{"version":3,"file":"tools.d.ts","sourceRoot":"","sources":["../../../../../src/adapters/sqlite-native/tools/spatialite/tools.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EACV,cAAc,EAEf,MAAM,4BAA4B,CAAC;AACpC,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,gCAAgC,CAAC;AA2B1E;;GAEG;AACH,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,mBAAmB,GAC3B,cAAc,CAuDhB;AAED;;GAEG;AACH,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,mBAAmB,GAC3B,cAAc,CAkHhB;AAED;;GAEG;AACH,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,mBAAmB,GAC3B,cAAc,CAuChB;AAED;;GAEG;AACH,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,mBAAmB,GAC3B,cAAc,CA2MhB"}

package/dist/audit/interceptor.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"interceptor.d.ts","sourceRoot":"","sources":["../../src/audit/interceptor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAGH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,KAAK,EAAE,aAAa,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAqE/E;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B;;;;;;;;;OASG;IACH,MAAM,CAAC,CAAC,EACN,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,OAAO,EACb,SAAS,EAAE,MAAM,EACjB,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,EACpB,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GAC3B,OAAO,CAAC,CAAC,CAAC,CAAC;IAEd;;OAEG;IACH,eAAe,CAAC,OAAO,EAAE,oBAAoB,GAAG,IAAI,CAAC;CACtD;AAiBD;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CACpC,WAAW,EAAE,WAAW,EACxB,aAAa,CAAC,EAAE,aAAa,GAC5B,gBAAgB,CA6IlB"}
+{"version":3,"file":"interceptor.d.ts","sourceRoot":"","sources":["../../src/audit/interceptor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAGH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,KAAK,EAAE,aAAa,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAuE/E;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B;;;;;;;;;OASG;IACH,MAAM,CAAC,CAAC,EACN,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,OAAO,EACb,SAAS,EAAE,MAAM,EACjB,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,EACpB,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GAC3B,OAAO,CAAC,CAAC,CAAC,CAAC;IAEd;;OAEG;IACH,eAAe,CAAC,OAAO,EAAE,oBAAoB,GAAG,IAAI,CAAC;CACtD;AAiBD;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CACpC,WAAW,EAAE,WAAW,EACxB,aAAa,CAAC,EAAE,aAAa,GAC5B,gBAAgB,CAyJlB"}

package/dist/audit/logger.d.ts

@@ -1,37 +1,36 @@
 /**
  * db-mcp — Audit Logger
  *
- * Async-buffered JSONL writer for the audit trail. Appends one
- * JSON object per line to a configurable file path, or writes to
+ * Async-buffered SQLite writer for the audit trail. Uses SystemDb
+ * to persist structured logs for queryability, or writes to
  * stderr for containerised deployments (`--audit-log stderr`).
  *
  * Non-throwing by design: audit failures log to stderr but never
  * propagate to tool callers.
  */
 import type { AuditConfig, AuditEntry } from "./types.js";
+import type { SystemDb } from "../observability/system-db.js";
 export declare class AuditLogger {
     readonly config: AuditConfig;
     private buffer;
     private flushTimer;
     private activeFlush;
     private closed;
-    private dirEnsured;
     private readonly stderrMode;
-    constructor(config: AuditConfig);
+    private systemDb;
+    constructor(config: AuditConfig, systemDb?: SystemDb | null);
     /**
-     * Eagerly create the log directory and touch the log file on startup.
-     * Provides immediate confirmation that audit is configured correctly.
-     * Non-throwing — falls back silently if the path is inaccessible.
+     * Initialization is handled externally by SystemDb.
      */
     init(): Promise<void>;
     /**
      * Append an audit entry to the buffer.
-     * Non-blocking — the entry is serialised and queued; the
-     * actual file write happens on the next flush cycle.
+     * Non-blocking — the entry is queued; the
+     * actual DB write happens on the next flush cycle.
      */
     log(entry: AuditEntry): void;
     /**
-     * Flush the buffer to disk.
+     * Flush the buffer to SystemDb or stderr.
      * Safe to call concurrently — serialises via `this.activeFlush` Promise.
      */
     flush(): Promise<void>;
@@ -40,23 +39,25 @@ export declare class AuditLogger {
      */
     close(): Promise<void>;
     /**
-     * Read the most recent audit entries from the log file.
-     * Uses a streaming tail-read: only the last TAIL_READ_BYTES (64 KB) are
-     * read from disk, preventing O(n) memory spikes for large audit logs.
-     * Used by the `sqlite://audit` resource.
-     *
-     * @param count Maximum number of entries to return (default 50)
+     * Read the most recent audit entries from the SystemDb.
+     * Retrieve recent entries directly from the SystemDb.
      */
-    recent(count?: number): Promise<AuditEntry[]>;
+    recent(limit?: number): Promise<AuditEntry[]>;
     /**
-     * Ensure the parent directory of the log file exists.
+     * Search and filter audit entries from the SystemDb.
      */
-    private ensureDirectory;
-    /**
-     * Rotate the log file if it exceeds the configured size limit.
-     * Keeps up to 5 rotated files (`.1` through `.5`); older data is discarded.
-     * Rotation failure is non-fatal — audit must not block tool execution.
-     */
-    private rotateIfNeeded;
+    search(filters: {
+        tool?: string | undefined;
+        category?: string | undefined;
+        success?: boolean | undefined;
+        requestId?: string | undefined;
+        fromTimestamp?: string | undefined;
+        toTimestamp?: string | undefined;
+        limit?: number | undefined;
+        offset?: number | undefined;
+    }): Promise<{
+        entries: AuditEntry[];
+        totalCount: number;
+    }>;
 }
 //# sourceMappingURL=logger.d.ts.map

package/dist/audit/logger.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"logger.d.ts","sourceRoot":"","sources":["../../src/audit/logger.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAIH,OAAO,KAAK,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAsB1D,qBAAa,WAAW;IACtB,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAE7B,OAAO,CAAC,MAAM,CAAgB;IAC9B,OAAO,CAAC,UAAU,CAA+C;IACjE,OAAO,CAAC,WAAW,CAA8B;IACjD,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,UAAU,CAAS;IAC3B,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAU;gBAEzB,MAAM,EAAE,WAAW;IAa/B;;;;OAIG;IACG,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAgB3B;;;;OAIG;IACH,GAAG,CAAC,KAAK,EAAE,UAAU,GAAG,IAAI;IAa5B;;;OAGG;IACG,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAgD5B;;OAEG;IACG,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAW5B;;;;;;;OAOG;IACG,MAAM,CAAC,KAAK,GAAE,MAA6B,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC;IAqDzE;;OAEG;YACW,eAAe;IAW7B;;;;OAIG;YACW,cAAc;CAoB7B"}
+{"version":3,"file":"logger.d.ts","sourceRoot":"","sources":["../../src/audit/logger.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,UAAU,EAAiB,MAAM,YAAY,CAAC;AAEzE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,+BAA+B,CAAC;AA8B9D,qBAAa,WAAW;IACtB,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAE7B,OAAO,CAAC,MAAM,CAAoB;IAClC,OAAO,CAAC,UAAU,CAA+C;IACjE,OAAO,CAAC,WAAW,CAA8B;IACjD,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAU;IACrC,OAAO,CAAC,QAAQ,CAAkB;gBAEtB,MAAM,EAAE,WAAW,EAAE,QAAQ,GAAE,QAAQ,GAAG,IAAW;IAcjE;;OAEG;IAEG,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAI3B;;;;OAIG;IACH,GAAG,CAAC,KAAK,EAAE,UAAU,GAAG,IAAI;IAa5B;;;OAGG;IACG,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAmE5B;;OAEG;IACG,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAW5B;;;OAGG;IACG,MAAM,CAAC,KAAK,GAAE,MAA6B,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC;IAyCzE;;OAEG;IACG,MAAM,CAAC,OAAO,EAAE;QACpB,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAC1B,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAC9B,OAAO,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;QAC9B,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAC/B,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QACnC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QACjC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAC3B,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;KAC7B,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,UAAU,EAAE,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC;CA4E3D"}

package/dist/{chunk-W5WQVNVX.js → chunk-EQF3WZHX.js}

@@ -1,8 +1,9 @@
-import { registerToolScope } from './chunk-E5IESRTK.js';
-import { ValidationError, getAuthContext, isToolEnabled, ConnectionError, registerToolScopes, scopesGrantToolAccess, InsufficientScopeError, formatHandlerError } from './chunk-L552U3QS.js';
+import { registerToolScope, estimateTokens } from './chunk-R5M4WKDM.js';
+import { ValidationError, getAuthContext, isToolEnabled, ConnectionError, registerToolScopes, scopesGrantToolAccess, InsufficientScopeError, formatHandlerError, metrics } from './chunk-Y57WFKAP.js';
 import sqliteParser from 'sqlite-parser';
 import { ResourceTemplate } from '@modelcontextprotocol/sdk/server/mcp.js';
 import { z } from 'zod';
+import { EventEmitter } from 'events';
 
 var UNSAFE_FUNCTIONS = /* @__PURE__ */ new Set([
   "LOAD_EXTENSION",
@@ -208,9 +209,7 @@ function registerToolImpl(adapter, server, tool) {
               ...result,
               _meta: { tokenEstimate: 0 }
             });
-            const tokenEstimate = Math.ceil(
-              Buffer.byteLength(enriched, "utf8") / 4
-            );
+            const tokenEstimate = estimateTokens(enriched, "json");
             const finalText = enriched.replace(
               '"tokenEstimate":0',
               `"tokenEstimate":${String(tokenEstimate)}`
@@ -235,9 +234,7 @@ function registerToolImpl(adapter, server, tool) {
               null,
               2
             );
-            const tokenEstimate = Math.ceil(
-              Buffer.byteLength(withMeta, "utf8") / 4
-            );
+            const tokenEstimate = estimateTokens(withMeta, "json");
             const finalText = withMeta.replace(
               '"tokenEstimate": 0',
               `"tokenEstimate": ${String(tokenEstimate)}`
@@ -276,9 +273,7 @@ function registerToolImpl(adapter, server, tool) {
             ...structured,
             _meta: { tokenEstimate: 0 }
           });
-          const tokenEstimate2 = Math.ceil(
-            Buffer.byteLength(enriched, "utf8") / 4
-          );
+          const tokenEstimate2 = estimateTokens(enriched, "json");
           const finalText2 = enriched.replace(
             '"tokenEstimate":0',
             `"tokenEstimate":${String(tokenEstimate2)}`
@@ -299,9 +294,7 @@ function registerToolImpl(adapter, server, tool) {
           null,
           2
         );
-        const tokenEstimate = Math.ceil(
-          Buffer.byteLength(withMeta, "utf8") / 4
-        );
+        const tokenEstimate = estimateTokens(withMeta, "json");
         const finalText = withMeta.replace(
           '"tokenEstimate": 0',
           `"tokenEstimate": ${String(tokenEstimate)}`
@@ -332,6 +325,7 @@ function registerResourceImpl(adapter, server, resource) {
         ...resource.icons ? { icons: resource.icons } : {}
       },
       async (resourceUri, _variables) => {
+        metrics.recordResourceRead(resourceUri.toString());
         const context = adapter.createContext();
         const content = await resource.handler(resourceUri.toString(), context);
         return {
@@ -355,6 +349,7 @@ function registerResourceImpl(adapter, server, resource) {
         ...resource.icons ? { icons: resource.icons } : {}
       },
       async (resourceUri) => {
+        metrics.recordResourceRead(resourceUri.toString());
         const context = adapter.createContext();
         const content = await resource.handler(resourceUri.toString(), context);
         return {
@@ -413,9 +408,7 @@ function registerPromptImpl(adapter, server, prompt) {
     );
   }
 }
-
-// src/adapters/database-adapter.ts
-var DatabaseAdapter = class {
+var DatabaseAdapter = class extends EventEmitter {
   /** Connection status */
   connected = false;
   /** Database configuration */