db-mcp 3.0.2 → 5.0.0

package/dist/adapters/sqlite-native/tools/window/schemas.d.ts

@@ -0,0 +1,159 @@
+import { z } from "zod";
+export declare const RowNumberSchema: z.ZodObject<{
+    table: z.ZodString;
+    orderBy: z.ZodString;
+    partitionBy: z.ZodOptional<z.ZodString>;
+    selectColumns: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    conditions: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        column: z.ZodString;
+        operator: z.ZodEnum<{
+            "=": "=";
+            "!=": "!=";
+            ">": ">";
+            ">=": ">=";
+            "<": "<";
+            "<=": "<=";
+            LIKE: "LIKE";
+            IN: "IN";
+            IS: "IS";
+            "IS NOT": "IS NOT";
+            "NOT LIKE": "NOT LIKE";
+        }>;
+        value: z.ZodUnknown;
+    }, z.core.$strip>>>;
+    limit: z.ZodPreprocess<z.ZodDefault<z.ZodOptional<z.ZodNumber>>>;
+}, z.core.$strip>;
+export declare const RankSchema: z.ZodObject<{
+    table: z.ZodString;
+    orderBy: z.ZodString;
+    partitionBy: z.ZodOptional<z.ZodString>;
+    selectColumns: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    rankType: z.ZodPreprocess<z.ZodDefault<z.ZodOptional<z.ZodEnum<{
+        rank: "rank";
+        dense_rank: "dense_rank";
+        percent_rank: "percent_rank";
+    }>>>>;
+    conditions: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        column: z.ZodString;
+        operator: z.ZodEnum<{
+            "=": "=";
+            "!=": "!=";
+            ">": ">";
+            ">=": ">=";
+            "<": "<";
+            "<=": "<=";
+            LIKE: "LIKE";
+            IN: "IN";
+            IS: "IS";
+            "IS NOT": "IS NOT";
+            "NOT LIKE": "NOT LIKE";
+        }>;
+        value: z.ZodUnknown;
+    }, z.core.$strip>>>;
+    limit: z.ZodPreprocess<z.ZodDefault<z.ZodOptional<z.ZodNumber>>>;
+}, z.core.$strip>;
+export declare const LagLeadSchema: z.ZodObject<{
+    table: z.ZodString;
+    column: z.ZodString;
+    orderBy: z.ZodString;
+    direction: z.ZodString;
+    offset: z.ZodPreprocess<z.ZodDefault<z.ZodOptional<z.ZodNumber>>>;
+    defaultValue: z.ZodOptional<z.ZodString>;
+    partitionBy: z.ZodOptional<z.ZodString>;
+    selectColumns: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    conditions: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        column: z.ZodString;
+        operator: z.ZodEnum<{
+            "=": "=";
+            "!=": "!=";
+            ">": ">";
+            ">=": ">=";
+            "<": "<";
+            "<=": "<=";
+            LIKE: "LIKE";
+            IN: "IN";
+            IS: "IS";
+            "IS NOT": "IS NOT";
+            "NOT LIKE": "NOT LIKE";
+        }>;
+        value: z.ZodUnknown;
+    }, z.core.$strip>>>;
+    limit: z.ZodPreprocess<z.ZodDefault<z.ZodOptional<z.ZodNumber>>>;
+}, z.core.$strip>;
+export declare const RunningTotalSchema: z.ZodObject<{
+    table: z.ZodString;
+    column: z.ZodString;
+    orderBy: z.ZodString;
+    partitionBy: z.ZodOptional<z.ZodString>;
+    selectColumns: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    conditions: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        column: z.ZodString;
+        operator: z.ZodEnum<{
+            "=": "=";
+            "!=": "!=";
+            ">": ">";
+            ">=": ">=";
+            "<": "<";
+            "<=": "<=";
+            LIKE: "LIKE";
+            IN: "IN";
+            IS: "IS";
+            "IS NOT": "IS NOT";
+            "NOT LIKE": "NOT LIKE";
+        }>;
+        value: z.ZodUnknown;
+    }, z.core.$strip>>>;
+    limit: z.ZodPreprocess<z.ZodDefault<z.ZodOptional<z.ZodNumber>>>;
+}, z.core.$strip>;
+export declare const MovingAverageSchema: z.ZodObject<{
+    table: z.ZodString;
+    column: z.ZodString;
+    orderBy: z.ZodString;
+    windowSize: z.ZodPreprocess<z.ZodNumber>;
+    partitionBy: z.ZodOptional<z.ZodString>;
+    selectColumns: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    conditions: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        column: z.ZodString;
+        operator: z.ZodEnum<{
+            "=": "=";
+            "!=": "!=";
+            ">": ">";
+            ">=": ">=";
+            "<": "<";
+            "<=": "<=";
+            LIKE: "LIKE";
+            IN: "IN";
+            IS: "IS";
+            "IS NOT": "IS NOT";
+            "NOT LIKE": "NOT LIKE";
+        }>;
+        value: z.ZodUnknown;
+    }, z.core.$strip>>>;
+    limit: z.ZodPreprocess<z.ZodDefault<z.ZodOptional<z.ZodNumber>>>;
+}, z.core.$strip>;
+export declare const NtileSchema: z.ZodObject<{
+    table: z.ZodString;
+    orderBy: z.ZodString;
+    buckets: z.ZodPreprocess<z.ZodNumber>;
+    partitionBy: z.ZodOptional<z.ZodString>;
+    selectColumns: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    conditions: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        column: z.ZodString;
+        operator: z.ZodEnum<{
+            "=": "=";
+            "!=": "!=";
+            ">": ">";
+            ">=": ">=";
+            "<": "<";
+            "<=": "<=";
+            LIKE: "LIKE";
+            IN: "IN";
+            IS: "IS";
+            "IS NOT": "IS NOT";
+            "NOT LIKE": "NOT LIKE";
+        }>;
+        value: z.ZodUnknown;
+    }, z.core.$strip>>>;
+    limit: z.ZodPreprocess<z.ZodDefault<z.ZodOptional<z.ZodNumber>>>;
+}, z.core.$strip>;
+//# sourceMappingURL=schemas.d.ts.map

package/dist/adapters/sqlite-native/tools/window/schemas.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schemas.d.ts","sourceRoot":"","sources":["../../../../../src/adapters/sqlite-native/tools/window/schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAKxB,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;;;iBAgB1B,CAAC;AAEH,eAAO,MAAM,UAAU;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAwBrB,CAAC;AAEH,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;iBA8BxB,CAAC;AAEH,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;iBAoB7B,CAAC;AAEH,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;iBAqB9B,CAAC;AAEH,eAAO,MAAM,WAAW;;;;;;;;;;;;;;;;;;;;;;;;iBAoBtB,CAAC"}

package/dist/adapters/sqlite-native/transaction-methods.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"transaction-methods.d.ts","sourceRoot":"","sources":["../../../src/adapters/sqlite-native/transaction-methods.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,QAAQ,IAAI,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAGjE;;;GAGG;AAEH;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,EAAE,EAAE,cAAc,GAAG,IAAI,CAEzD;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,EAAE,EAAE,cAAc,GAAG,IAAI,CAE1D;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,EAAE,EAAE,cAAc,GAAG,IAAI,CAE5D;AAED;;GAEG;AACH,wBAAgB,SAAS,CAAC,EAAE,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAShE;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,EAAE,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAOvE;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,EAAE,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAO1E"}
+{"version":3,"file":"transaction-methods.d.ts","sourceRoot":"","sources":["../../../src/adapters/sqlite-native/transaction-methods.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,QAAQ,IAAI,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAGjE;;;GAGG;AAEH;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,EAAE,EAAE,cAAc,GAAG,IAAI,CAEzD;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,EAAE,EAAE,cAAc,GAAG,IAAI,CAE1D;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,EAAE,EAAE,cAAc,GAAG,IAAI,CAE5D;AAED;;GAEG;AACH,wBAAgB,SAAS,CAAC,EAAE,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAShE;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,EAAE,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAQvE;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,EAAE,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAQ1E"}

package/dist/audit/interceptor.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"interceptor.d.ts","sourceRoot":"","sources":["../../src/audit/interceptor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAGH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,KAAK,EAAE,aAAa,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAqE/E;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B;;;;;;;;;OASG;IACH,MAAM,CAAC,CAAC,EACN,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,OAAO,EACb,SAAS,EAAE,MAAM,EACjB,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,EACpB,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GAC3B,OAAO,CAAC,CAAC,CAAC,CAAC;IAEd;;OAEG;IACH,eAAe,CAAC,OAAO,EAAE,oBAAoB,GAAG,IAAI,CAAC;CACtD;AAiBD;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CACpC,WAAW,EAAE,WAAW,EACxB,aAAa,CAAC,EAAE,aAAa,GAC5B,gBAAgB,CA6IlB"}
+{"version":3,"file":"interceptor.d.ts","sourceRoot":"","sources":["../../src/audit/interceptor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAGH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,KAAK,EAAE,aAAa,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAuE/E;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B;;;;;;;;;OASG;IACH,MAAM,CAAC,CAAC,EACN,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,OAAO,EACb,SAAS,EAAE,MAAM,EACjB,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,EACpB,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GAC3B,OAAO,CAAC,CAAC,CAAC,CAAC;IAEd;;OAEG;IACH,eAAe,CAAC,OAAO,EAAE,oBAAoB,GAAG,IAAI,CAAC;CACtD;AAiBD;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CACpC,WAAW,EAAE,WAAW,EACxB,aAAa,CAAC,EAAE,aAAa,GAC5B,gBAAgB,CAyJlB"}

package/dist/audit/logger.d.ts

@@ -1,37 +1,36 @@
 /**
  * db-mcp — Audit Logger
  *
- * Async-buffered JSONL writer for the audit trail. Appends one
- * JSON object per line to a configurable file path, or writes to
+ * Async-buffered SQLite writer for the audit trail. Uses SystemDb
+ * to persist structured logs for queryability, or writes to
  * stderr for containerised deployments (`--audit-log stderr`).
  *
  * Non-throwing by design: audit failures log to stderr but never
  * propagate to tool callers.
  */
 import type { AuditConfig, AuditEntry } from "./types.js";
+import type { SystemDb } from "../observability/system-db.js";
 export declare class AuditLogger {
     readonly config: AuditConfig;
     private buffer;
     private flushTimer;
     private activeFlush;
     private closed;
-    private dirEnsured;
     private readonly stderrMode;
-    constructor(config: AuditConfig);
+    private systemDb;
+    constructor(config: AuditConfig, systemDb?: SystemDb | null);
     /**
-     * Eagerly create the log directory and touch the log file on startup.
-     * Provides immediate confirmation that audit is configured correctly.
-     * Non-throwing — falls back silently if the path is inaccessible.
+     * Initialization is handled externally by SystemDb.
      */
     init(): Promise<void>;
     /**
      * Append an audit entry to the buffer.
-     * Non-blocking — the entry is serialised and queued; the
-     * actual file write happens on the next flush cycle.
+     * Non-blocking — the entry is queued; the
+     * actual DB write happens on the next flush cycle.
      */
     log(entry: AuditEntry): void;
     /**
-     * Flush the buffer to disk.
+     * Flush the buffer to SystemDb or stderr.
      * Safe to call concurrently — serialises via `this.activeFlush` Promise.
      */
     flush(): Promise<void>;
@@ -40,23 +39,25 @@ export declare class AuditLogger {
      */
     close(): Promise<void>;
     /**
-     * Read the most recent audit entries from the log file.
-     * Uses a streaming tail-read: only the last TAIL_READ_BYTES (64 KB) are
-     * read from disk, preventing O(n) memory spikes for large audit logs.
-     * Used by the `sqlite://audit` resource.
-     *
-     * @param count Maximum number of entries to return (default 50)
+     * Read the most recent audit entries from the SystemDb.
+     * Retrieve recent entries directly from the SystemDb.
      */
-    recent(count?: number): Promise<AuditEntry[]>;
+    recent(limit?: number): Promise<AuditEntry[]>;
     /**
-     * Ensure the parent directory of the log file exists.
+     * Search and filter audit entries from the SystemDb.
      */
-    private ensureDirectory;
-    /**
-     * Rotate the log file if it exceeds the configured size limit.
-     * Keeps up to 5 rotated files (`.1` through `.5`); older data is discarded.
-     * Rotation failure is non-fatal — audit must not block tool execution.
-     */
-    private rotateIfNeeded;
+    search(filters: {
+        tool?: string | undefined;
+        category?: string | undefined;
+        success?: boolean | undefined;
+        requestId?: string | undefined;
+        fromTimestamp?: string | undefined;
+        toTimestamp?: string | undefined;
+        limit?: number | undefined;
+        offset?: number | undefined;
+    }): Promise<{
+        entries: AuditEntry[];
+        totalCount: number;
+    }>;
 }
 //# sourceMappingURL=logger.d.ts.map

package/dist/audit/logger.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"logger.d.ts","sourceRoot":"","sources":["../../src/audit/logger.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAIH,OAAO,KAAK,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAsB1D,qBAAa,WAAW;IACtB,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAE7B,OAAO,CAAC,MAAM,CAAgB;IAC9B,OAAO,CAAC,UAAU,CAA+C;IACjE,OAAO,CAAC,WAAW,CAA8B;IACjD,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,UAAU,CAAS;IAC3B,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAU;gBAEzB,MAAM,EAAE,WAAW;IAa/B;;;;OAIG;IACG,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAgB3B;;;;OAIG;IACH,GAAG,CAAC,KAAK,EAAE,UAAU,GAAG,IAAI;IAa5B;;;OAGG;IACG,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAgD5B;;OAEG;IACG,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAW5B;;;;;;;OAOG;IACG,MAAM,CAAC,KAAK,GAAE,MAA6B,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC;IAqDzE;;OAEG;YACW,eAAe;IAW7B;;;;OAIG;YACW,cAAc;CAoB7B"}
+{"version":3,"file":"logger.d.ts","sourceRoot":"","sources":["../../src/audit/logger.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,UAAU,EAAiB,MAAM,YAAY,CAAC;AAEzE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,+BAA+B,CAAC;AA8B9D,qBAAa,WAAW;IACtB,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAE7B,OAAO,CAAC,MAAM,CAAoB;IAClC,OAAO,CAAC,UAAU,CAA+C;IACjE,OAAO,CAAC,WAAW,CAA8B;IACjD,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAU;IACrC,OAAO,CAAC,QAAQ,CAAkB;gBAEtB,MAAM,EAAE,WAAW,EAAE,QAAQ,GAAE,QAAQ,GAAG,IAAW;IAcjE;;OAEG;IACH,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAKrB;;;;OAIG;IACH,GAAG,CAAC,KAAK,EAAE,UAAU,GAAG,IAAI;IAa5B;;;OAGG;IACG,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAmE5B;;OAEG;IACG,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAW5B;;;OAGG;IACG,MAAM,CAAC,KAAK,GAAE,MAA6B,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC;IAyCzE;;OAEG;IACG,MAAM,CAAC,OAAO,EAAE;QACpB,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAC1B,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAC9B,OAAO,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;QAC9B,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAC/B,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QACnC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QACjC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAC3B,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;KAC7B,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,UAAU,EAAE,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC;CA4E3D"}

package/dist/auth/authorization-server-discovery.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"authorization-server-discovery.d.ts","sourceRoot":"","sources":["../../src/auth/authorization-server-discovery.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EACV,2BAA2B,EAC3B,yBAAyB,EAC1B,MAAM,YAAY,CAAC;AAWpB;;;;;GAKG;AACH,qBAAa,4BAA4B;IACvC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAS;IACvC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;IAClC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IAEjC,OAAO,CAAC,cAAc,CAA4C;IAClE,OAAO,CAAC,WAAW,CAAK;gBAEZ,MAAM,EAAE,yBAAyB;IAgC7C;;;;;;;;OAQG;IACG,QAAQ,IAAI,OAAO,CAAC,2BAA2B,CAAC;IAqEtD;;OAEG;IACH,OAAO,CAAC,gBAAgB;IAyCxB;;OAEG;IACH,WAAW,IAAI,2BAA2B;IAW1C;;;;OAIG;IACH,UAAU,IAAI,MAAM;IAcpB;;OAEG;IACH,gBAAgB,IAAI,MAAM;IAI1B;;OAEG;IACH,SAAS,IAAI,MAAM;IAInB;;;;OAIG;IACH,uBAAuB,IAAI,MAAM,GAAG,IAAI;IAIxC;;OAEG;IACH,0BAA0B,IAAI,OAAO;IAIrC;;OAEG;IACH,kBAAkB,IAAI,MAAM,EAAE;IAI9B;;OAEG;IACH,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO;IAMxC;;OAEG;IACH,UAAU,IAAI,IAAI;IAQlB;;OAEG;IACH,YAAY,IAAI,OAAO;IAIvB;;OAEG;IACH,gBAAgB,IAAI,MAAM;CAG3B;AAMD;;GAEG;AACH,wBAAgB,yBAAyB,CACvC,aAAa,EAAE,MAAM,EACrB,OAAO,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC,yBAAyB,EAAE,eAAe,CAAC,CAAC,GAClE,4BAA4B,CAM9B"}
+{"version":3,"file":"authorization-server-discovery.d.ts","sourceRoot":"","sources":["../../src/auth/authorization-server-discovery.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EACV,2BAA2B,EAC3B,yBAAyB,EAC1B,MAAM,YAAY,CAAC;AAYpB;;;;;GAKG;AACH,qBAAa,4BAA4B;IACvC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAS;IACvC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;IAClC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IAEjC,OAAO,CAAC,cAAc,CAA4C;IAClE,OAAO,CAAC,WAAW,CAAK;gBAEZ,MAAM,EAAE,yBAAyB;IAgC7C;;;;;;;;OAQG;IACG,QAAQ,IAAI,OAAO,CAAC,2BAA2B,CAAC;IAqEtD;;OAEG;IACH,OAAO,CAAC,gBAAgB;IAyCxB;;OAEG;IACH,WAAW,IAAI,2BAA2B;IAW1C;;;;OAIG;IACH,UAAU,IAAI,MAAM;IAcpB;;OAEG;IACH,gBAAgB,IAAI,MAAM;IAI1B;;OAEG;IACH,SAAS,IAAI,MAAM;IAInB;;;;OAIG;IACH,uBAAuB,IAAI,MAAM,GAAG,IAAI;IAIxC;;OAEG;IACH,0BAA0B,IAAI,OAAO;IAIrC;;OAEG;IACH,kBAAkB,IAAI,MAAM,EAAE;IAI9B;;OAEG;IACH,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO;IAMxC;;OAEG;IACH,UAAU,IAAI,IAAI;IAQlB;;OAEG;IACH,YAAY,IAAI,OAAO;IAIvB;;OAEG;IACH,gBAAgB,IAAI,MAAM;CAG3B;AAMD;;GAEG;AACH,wBAAgB,yBAAyB,CACvC,aAAa,EAAE,MAAM,EACrB,OAAO,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC,yBAAyB,EAAE,eAAe,CAAC,CAAC,GAClE,4BAA4B,CAM9B"}

package/dist/auth/scopes/mapping.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"mapping.d.ts","sourceRoot":"","sources":["../../../src/auth/scopes/mapping.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAU,KAAK,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAG5D;;;GAGG;AACH,eAAO,MAAM,iBAAiB,EAAE,MAAM,CAAC,SAAS,EAAE,aAAa,CAY9D,CAAC;AAEF;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,SAAS,GAAG,aAAa,CAEpE;AAgBD;;GAEG;AACH,eAAO,MAAM,iBAAiB,EAAE,SAAS,EAAgC,CAAC;AAE1E;;GAEG;AACH,eAAO,MAAM,kBAAkB,EAAE,SAAS,EAAiC,CAAC;AAE5E;;GAEG;AACH,eAAO,MAAM,kBAAkB,EAAE,SAAS,EAAiC,CAAC;AA6C5E,eAAO,MAAM,WAAW,EAAE,WAAW,CAAC,MAAM,CACV,CAAC;AAEnC;;;;;GAKG;AACH,eAAO,MAAM,eAAe,EAAE,WAAW,CAAC,MAAM,CA+F9C,CAAC;AAEH;;;;;GAKG;AACH,eAAO,MAAM,WAAW,EAAE,WAAW,CAAC,MAAM,CAsD1C,CAAC"}
+{"version":3,"file":"mapping.d.ts","sourceRoot":"","sources":["../../../src/auth/scopes/mapping.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAU,KAAK,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAG5D;;;GAGG;AACH,eAAO,MAAM,iBAAiB,EAAE,MAAM,CAAC,SAAS,EAAE,aAAa,CAY9D,CAAC;AAEF;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,SAAS,GAAG,aAAa,CAEpE;AAgBD;;GAEG;AACH,eAAO,MAAM,iBAAiB,EAAE,SAAS,EAAgC,CAAC;AAE1E;;GAEG;AACH,eAAO,MAAM,kBAAkB,EAAE,SAAS,EAAiC,CAAC;AAE5E;;GAEG;AACH,eAAO,MAAM,kBAAkB,EAAE,SAAS,EAAiC,CAAC;AA+C5E,eAAO,MAAM,WAAW,EAAE,WAAW,CAAC,MAAM,CACV,CAAC;AAEnC;;;;;GAKG;AACH,eAAO,MAAM,eAAe,EAAE,WAAW,CAAC,MAAM,CAgG9C,CAAC;AAEH;;;;;GAKG;AACH,eAAO,MAAM,WAAW,EAAE,WAAW,CAAC,MAAM,CAuD1C,CAAC"}

package/dist/auth/token-validator.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"token-validator.d.ts","sourceRoot":"","sources":["../../src/auth/token-validator.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,KAAK,EACV,qBAAqB,EAErB,oBAAoB,EACrB,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,iBAAiB,EACjB,iBAAiB,EACjB,qBAAqB,EAEtB,MAAM,aAAa,CAAC;AAUrB;;;;GAIG;AACH,qBAAa,cAAc;IACzB,sEAAsE;IACtE,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,kBAAkB,CAOxC;IAEF,uDAAuD;IACvD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;IAClC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAS;IACxC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAS;IACtC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAW;IAEtC,OAAO,CAAC,IAAI,CAAqC;IACjD,OAAO,CAAC,UAAU,CAAK;gBAEX,MAAM,EAAE,oBAAoB;IAiCxC;;;;;OAKG;IACG,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,CAAC;IAiC7D;;OAEG;IACH,OAAO,CAAC,OAAO;IAoCf;;OAEG;IACH,OAAO,CAAC,aAAa;IAiDrB;;OAEG;IACH,OAAO,CAAC,qBAAqB;IAyE7B;;OAEG;IACH,WAAW,IAAI,IAAI;IAOnB;;OAEG;IACH,UAAU,IAAI,IAAI;IAQlB;;OAEG;IACH,MAAM,CAAC,YAAY,CACjB,MAAM,EAAE,qBAAqB,GAC5B,iBAAiB,GAAG,iBAAiB,GAAG,qBAAqB;CAWjE;AAMD;;GAEG;AACH,wBAAgB,oBAAoB,CAClC,MAAM,EAAE,oBAAoB,GAC3B,cAAc,CAEhB"}
+{"version":3,"file":"token-validator.d.ts","sourceRoot":"","sources":["../../src/auth/token-validator.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,KAAK,EACV,qBAAqB,EAErB,oBAAoB,EACrB,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,iBAAiB,EACjB,iBAAiB,EACjB,qBAAqB,EAEtB,MAAM,aAAa,CAAC;AAWrB;;;;GAIG;AACH,qBAAa,cAAc;IACzB,sEAAsE;IACtE,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,kBAAkB,CAOxC;IAEF,uDAAuD;IACvD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;IAClC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAS;IACxC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAS;IACtC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAW;IAEtC,OAAO,CAAC,IAAI,CAAqC;IACjD,OAAO,CAAC,UAAU,CAAK;gBAEX,MAAM,EAAE,oBAAoB;IAiCxC;;;;;OAKG;IACG,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,CAAC;IAiC7D;;OAEG;IACH,OAAO,CAAC,OAAO;IAoCf;;OAEG;IACH,OAAO,CAAC,aAAa;IAiDrB;;OAEG;IACH,OAAO,CAAC,qBAAqB;IAyE7B;;OAEG;IACH,WAAW,IAAI,IAAI;IAOnB;;OAEG;IACH,UAAU,IAAI,IAAI;IAQlB;;OAEG;IACH,MAAM,CAAC,YAAY,CACjB,MAAM,EAAE,qBAAqB,GAC5B,iBAAiB,GAAG,iBAAiB,GAAG,qBAAqB;CAWjE;AAMD;;GAEG;AACH,wBAAgB,oBAAoB,CAClC,MAAM,EAAE,oBAAoB,GAC3B,cAAc,CAEhB"}

package/dist/{chunk-W5WQVNVX.js → chunk-27C5EE6U.js}

@@ -1,8 +1,9 @@
-import { registerToolScope } from './chunk-E5IESRTK.js';
-import { ValidationError, getAuthContext, isToolEnabled, ConnectionError, registerToolScopes, scopesGrantToolAccess, InsufficientScopeError, formatHandlerError } from './chunk-L552U3QS.js';
+import { registerToolScope, estimateTokens } from './chunk-2TYICG7B.js';
+import { ValidationError, getAuthContext, isToolEnabled, ConnectionError, registerToolScopes, scopesGrantToolAccess, InsufficientScopeError, formatHandlerError, metrics } from './chunk-XLIYO3YA.js';
 import sqliteParser from 'sqlite-parser';
 import { ResourceTemplate } from '@modelcontextprotocol/sdk/server/mcp.js';
 import { z } from 'zod';
+import { EventEmitter } from 'events';
 
 var UNSAFE_FUNCTIONS = /* @__PURE__ */ new Set([
   "LOAD_EXTENSION",
@@ -208,9 +209,7 @@ function registerToolImpl(adapter, server, tool) {
               ...result,
               _meta: { tokenEstimate: 0 }
             });
-            const tokenEstimate = Math.ceil(
-              Buffer.byteLength(enriched, "utf8") / 4
-            );
+            const tokenEstimate = estimateTokens(enriched, "json");
             const finalText = enriched.replace(
               '"tokenEstimate":0',
               `"tokenEstimate":${String(tokenEstimate)}`
@@ -235,9 +234,7 @@ function registerToolImpl(adapter, server, tool) {
               null,
               2
             );
-            const tokenEstimate = Math.ceil(
-              Buffer.byteLength(withMeta, "utf8") / 4
-            );
+            const tokenEstimate = estimateTokens(withMeta, "json");
             const finalText = withMeta.replace(
               '"tokenEstimate": 0',
               `"tokenEstimate": ${String(tokenEstimate)}`
@@ -276,9 +273,7 @@ function registerToolImpl(adapter, server, tool) {
             ...structured,
             _meta: { tokenEstimate: 0 }
           });
-          const tokenEstimate2 = Math.ceil(
-            Buffer.byteLength(enriched, "utf8") / 4
-          );
+          const tokenEstimate2 = estimateTokens(enriched, "json");
           const finalText2 = enriched.replace(
             '"tokenEstimate":0',
             `"tokenEstimate":${String(tokenEstimate2)}`
@@ -299,9 +294,7 @@ function registerToolImpl(adapter, server, tool) {
           null,
           2
         );
-        const tokenEstimate = Math.ceil(
-          Buffer.byteLength(withMeta, "utf8") / 4
-        );
+        const tokenEstimate = estimateTokens(withMeta, "json");
         const finalText = withMeta.replace(
           '"tokenEstimate": 0',
           `"tokenEstimate": ${String(tokenEstimate)}`
@@ -332,6 +325,7 @@ function registerResourceImpl(adapter, server, resource) {
         ...resource.icons ? { icons: resource.icons } : {}
       },
       async (resourceUri, _variables) => {
+        metrics.recordResourceRead(resourceUri.toString());
         const context = adapter.createContext();
         const content = await resource.handler(resourceUri.toString(), context);
         return {
@@ -355,6 +349,7 @@ function registerResourceImpl(adapter, server, resource) {
         ...resource.icons ? { icons: resource.icons } : {}
       },
       async (resourceUri) => {
+        metrics.recordResourceRead(resourceUri.toString());
         const context = adapter.createContext();
         const content = await resource.handler(resourceUri.toString(), context);
         return {
@@ -413,9 +408,7 @@ function registerPromptImpl(adapter, server, prompt) {
     );
   }
 }
-
-// src/adapters/database-adapter.ts
-var DatabaseAdapter = class {
+var DatabaseAdapter = class extends EventEmitter {
   /** Connection status */
   connected = false;
   /** Database configuration */
@@ -449,6 +442,19 @@ var DatabaseAdapter = class {
   getAuditInterceptor() {
     return this.auditInterceptor;
   }
+  allowedIoRoots;
+  /**
+   * Inject the allowed IO roots for filesystem boundary enforcement.
+   */
+  setAllowedIoRoots(roots) {
+    this.allowedIoRoots = roots;
+  }
+  /**
+   * Get the allowed IO roots for filesystem boundary enforcement.
+   */
+  getAllowedIoRoots() {
+    return this.allowedIoRoots;
+  }
   /**
    * Register tools with the MCP server
    * @param server - MCP server instance