db-mcp 4.0.0 → 5.0.0

package/dist/{sqlite-native-DLVS2T52.js → sqlite-native-5GQ3WKCZ.js}

@@ -1,7 +1,7 @@
-import { RowRecordSchema, WhereConditionSchema, resolveAliases, autoEnableWal, detectAndSetJsonbSupport, SchemaManager, applyCommonPragmas, isDDL, getResourceDefinitions, getPromptDefinitions, normalizeSqliteParams, translateSqliteError, getCoreTools, getJsonOperationTools, getJsonHelperTools, getTextTools, getStatsTools, getVirtualTools, getVectorTools, getGeoTools, getAdminTools, getIntrospectionTools, getMigrationTools, getCodeModeTools, validateTableExists, sanitizeFtsQuery, FtsHeadlineSchema } from './chunk-TGE7LFAR.js';
-import { DatabaseAdapter } from './chunk-EQF3WZHX.js';
-import { ErrorResponseFields, write, readOnly, sanitizeIdentifier, buildWhereClause, VERSION, validateIdentifier, admin, writeFs, getToolGroupIcon, idempotent } from './chunk-R5M4WKDM.js';
-import { logger, formatHandlerError, ValidationError, ConfigurationError, ERROR_CODES, ConnectionError, DbMcpError, ResourceNotFoundError, ExtensionNotAvailableError } from './chunk-Y57WFKAP.js';
+import { RowRecordSchema, WhereConditionSchema, autoEnableWal, detectAndSetJsonbSupport, SchemaManager, applyCommonPragmas, isDDL, getResourceDefinitions, getPromptDefinitions, resolveAliases, normalizeSqliteParams, translateSqliteError, getCoreTools, getJsonOperationTools, getJsonHelperTools, getTextTools, getStatsTools, getVirtualTools, getVectorTools, getGeoTools, getAdminTools, getIntrospectionTools, getMigrationTools, getCodeModeTools, validateTableExists, sanitizeFtsQuery, FtsHeadlineSchema } from './chunk-UE7GVOBV.js';
+import { DatabaseAdapter } from './chunk-27C5EE6U.js';
+import { ErrorResponseFields, write, readOnly, VERSION, sanitizeIdentifier, buildWhereClause, admin, validateIdentifier, writeFs, getToolGroupIcon, idempotent } from './chunk-2TYICG7B.js';
+import { logger, formatHandlerError, ValidationError, ConfigurationError, ERROR_CODES, ConnectionError, DbMcpError, ErrorCategory, ResourceNotFoundError, ExtensionNotAvailableError } from './chunk-XLIYO3YA.js';
 import { z } from 'zod';
 import { createRequire } from 'module';
 import { fileURLToPath } from 'url';
@@ -452,6 +452,7 @@ function createFtsHeadlineTool(adapter) {
         }
         const queryEscaped = sanitizedQuery.replace(/'/g, "''");
         let columnIndex = 0;
+        let snippetColumnIndex = -1;
         if (input.column) {
           const colResult = await adapter.executeReadQuery(
             `PRAGMA table_info("${input.table}")`,
@@ -463,12 +464,13 @@ function createFtsHeadlineTool(adapter) {
           );
           if (found >= 0) {
             columnIndex = found;
+            snippetColumnIndex = found;
           }
         }
         const startSel = input.startSel.replace(/'/g, "''");
         const stopSel = input.stopSel.replace(/'/g, "''");
         const highlightExpr = `highlight("${input.table}", ${String(columnIndex)}, '${startSel}', '${stopSel}')`;
-        const snippetExpr = `snippet("${input.table}", ${String(columnIndex)}, '${startSel}', '${stopSel}', '...', ${String(input.snippetWords)})`;
+        const snippetExpr = `snippet("${input.table}", ${String(snippetColumnIndex)}, '${startSel}', '${stopSel}', '...', ${String(input.snippetWords)})`;
         if (input.query === "*" || input.query.trim() === "") {
           const sql2 = `SELECT *, NULL as headline, NULL as snippet, NULL as rank FROM "${input.table}" ORDER BY rowid LIMIT ${String(input.limit)}`;
           const result2 = await adapter.executeReadQuery(sql2, queryParams);
@@ -656,14 +658,14 @@ var BeginTransactionSchema = z.object({
   mode: z.enum(["deferred", "immediate", "exclusive"]).optional().default("deferred").describe(
     "Transaction mode: deferred waits for first write, immediate acquires lock immediately, exclusive blocks all access"
   )
-});
+}).strict();
 var SavepointSchema = z.object({
   name: z.string().describe("Savepoint name")
-});
+}).strict();
 var ExecuteInTransactionSchema = z.object({
   statements: z.array(z.string()).describe("Array of SQL statements to execute in order"),
   rollbackOnError: z.boolean().optional().default(true).describe("If true, rollback all changes when any statement fails")
-});
+}).strict();
 function getTransactionTools(adapter) {
   return [
     createBeginTransactionTool(adapter),
@@ -706,7 +708,7 @@ function createTransactionStatusTool(adapter) {
     name: "sqlite_transaction_status",
     description: "Check whether a transaction is currently active. Returns status and a boolean flag. Read-only \u2014 does not alter transaction state.",
     group: "transactions",
-    inputSchema: z.object({}),
+    inputSchema: z.object({}).strict(),
     outputSchema: TransactionStatusOutputSchema,
     annotations: readOnly("Transaction Status"),
     requiredScopes: ["read"],
@@ -731,7 +733,7 @@ function createCommitTransactionTool(adapter) {
     name: "sqlite_transaction_commit",
     description: "Commit the current transaction, making all changes permanent.",
     group: "transactions",
-    inputSchema: z.object({}),
+    inputSchema: z.object({}).strict(),
     outputSchema: TransactionCommitOutputSchema,
     annotations: write("Commit Transaction"),
     requiredScopes: ["write"],
@@ -754,7 +756,7 @@ function createRollbackTransactionTool(adapter) {
     description: "Rollback the current transaction, discarding all changes.",
     group: "transactions",
     outputSchema: TransactionRollbackOutputSchema,
-    inputSchema: z.object({}),
+    inputSchema: z.object({}).strict(),
     annotations: write("Rollback Transaction"),
     requiredScopes: ["write"],
     handler: (_params, _context) => {
@@ -952,6 +954,14 @@ function createExecuteInTransactionTool(adapter) {
         if (transactionStarted) {
           adapter.commitTransaction();
         }
+        if (results.length > 50) {
+          const omitted = results.length - 50;
+          results.splice(50);
+          results.push({
+            statement: "TRUNCATED",
+            error: `Results array truncated. Omitted ${omitted} results to conserve payload size.`
+          });
+        }
         return {
           success,
           error: success ? void 0 : "Transaction completed with errors",
@@ -982,17 +992,28 @@ function createExecuteInTransactionTool(adapter) {
         } else if (!transactionStarted && !originallyInTransaction) {
           rollbackMessage = `Transaction failed to start: ${message}`;
         }
+        const totalExecuted = results.length;
+        if (results.length > 50) {
+          const omitted = results.length - 50;
+          results.splice(50);
+          results.push({
+            statement: "TRUNCATED",
+            error: `Results array truncated. Omitted ${omitted} results to conserve payload size.`
+          });
+        }
         return {
           ...formatted,
           error: formatted.error ?? rollbackMessage,
           message: rollbackMessage,
-          statementsExecuted: results.length,
+          statementsExecuted: totalExecuted,
           results
         };
       }
     }
   };
 }
+
+// src/adapters/sqlite-native/tools/window/helpers.ts
 var coerceNumber = (val) => {
   if (typeof val === "string") {
     if (val.trim() === "") return void 0;
@@ -1003,93 +1024,6 @@ var coerceNumber = (val) => {
 };
 var coerceEnumValues2 = (allowed) => (val) => typeof val === "string" && allowed.includes(val) ? val : void 0;
 var VALID_DIRECTIONS = ["lag", "lead"];
-var RowNumberSchema = z.object({
-  table: z.string().describe("Table name"),
-  orderBy: z.string().describe("Column(s) to order by"),
-  partitionBy: z.string().optional().describe("Column(s) to partition by"),
-  selectColumns: z.array(z.string()).optional().describe("Columns to include in result"),
-  conditions: z.array(WhereConditionSchema).optional().describe("Optional WHERE clause conditions"),
-  limit: z.preprocess(
-    coerceNumber,
-    z.number().optional().default(20).describe("Maximum rows to return")
-  )
-});
-var RankSchema = z.object({
-  table: z.string().describe("Table name"),
-  orderBy: z.string().describe("Column(s) to order by (determines rank)"),
-  partitionBy: z.string().optional().describe("Column(s) to partition by"),
-  selectColumns: z.array(z.string()).optional().describe("Columns to include in result"),
-  rankType: z.preprocess(
-    coerceEnumValues2(["rank", "dense_rank", "percent_rank"]),
-    z.enum(["rank", "dense_rank", "percent_rank"]).optional().default("rank").describe("Rank function type")
-  ),
-  conditions: z.array(WhereConditionSchema).optional().describe("Optional WHERE clause conditions"),
-  limit: z.preprocess(
-    coerceNumber,
-    z.number().optional().default(20).describe("Maximum rows to return")
-  )
-});
-var LagLeadSchema = z.object({
-  table: z.string().describe("Table name"),
-  column: z.string().describe("Column to get lag/lead value from"),
-  orderBy: z.string().describe("Column(s) to order by"),
-  direction: z.string().describe("LAG (previous) or LEAD (next) row"),
-  offset: z.preprocess(
-    coerceNumber,
-    z.number().optional().default(1).describe("Number of rows to look back/ahead")
-  ),
-  defaultValue: z.string().optional().describe("Default value if no row exists"),
-  partitionBy: z.string().optional().describe("Column(s) to partition by"),
-  selectColumns: z.array(z.string()).optional().describe("Columns to include in result"),
-  conditions: z.array(WhereConditionSchema).optional().describe("Optional WHERE clause conditions"),
-  limit: z.preprocess(
-    coerceNumber,
-    z.number().optional().default(20).describe("Maximum rows to return")
-  )
-});
-var RunningTotalSchema = z.object({
-  table: z.string().describe("Table name"),
-  column: z.string().describe("Column to sum"),
-  orderBy: z.string().describe("Column(s) to order by"),
-  partitionBy: z.string().optional().describe("Reset running total for each partition"),
-  selectColumns: z.array(z.string()).optional().describe("Columns to include in result"),
-  conditions: z.array(WhereConditionSchema).optional().describe("Optional WHERE clause conditions"),
-  limit: z.preprocess(
-    coerceNumber,
-    z.number().optional().default(20).describe("Maximum rows to return")
-  )
-});
-var MovingAverageSchema = z.object({
-  table: z.string().describe("Table name"),
-  column: z.string().describe("Column to average"),
-  orderBy: z.string().describe("Column(s) to order by"),
-  windowSize: z.preprocess(
-    coerceNumber,
-    z.number().describe("Number of rows in the moving window")
-  ),
-  partitionBy: z.string().optional().describe("Column(s) to partition by"),
-  selectColumns: z.array(z.string()).optional().describe("Columns to include in result"),
-  conditions: z.array(WhereConditionSchema).optional().describe("Optional WHERE clause conditions"),
-  limit: z.preprocess(
-    coerceNumber,
-    z.number().optional().default(20).describe("Maximum rows to return")
-  )
-});
-var NtileSchema = z.object({
-  table: z.string().describe("Table name"),
-  orderBy: z.string().describe("Column(s) to order by"),
-  buckets: z.preprocess(
-    coerceNumber,
-    z.number().describe("Number of buckets (e.g., 4 for quartiles)")
-  ),
-  partitionBy: z.string().optional().describe("Column(s) to partition by"),
-  selectColumns: z.array(z.string()).optional().describe("Columns to include in result"),
-  conditions: z.array(WhereConditionSchema).optional().describe("Optional WHERE clause conditions"),
-  limit: z.preprocess(
-    coerceNumber,
-    z.number().optional().default(20).describe("Maximum rows to return")
-  )
-});
 async function validateTableExists2(adapter, table) {
   validateIdentifier(table);
   const result = await adapter.executeReadQuery(
@@ -1135,7 +1069,7 @@ async function validateOrderByColumns(adapter, table, orderBy) {
       throw new DbMcpError(
         `Invalid ORDER BY expression: '${colName}' contains disallowed characters. Only column names with optional ASC/DESC are permitted.`,
         "NATIVE_WINDOW_INVALID_ORDERBY",
-        "validation" /* VALIDATION */
+        ErrorCategory.VALIDATION
       );
     }
     if (/^(ASC|DESC)$/i.test(colName)) continue;
@@ -1251,19 +1185,100 @@ function validateDefaultValue(value) {
   throw new DbMcpError(
     `Invalid default value: '${value}'. Only numeric literals, single-quoted strings, or NULL are permitted.`,
     "NATIVE_WINDOW_INVALID_DEFAULT",
-    "validation" /* VALIDATION */
+    ErrorCategory.VALIDATION
   );
 }
-function getWindowTools(adapter) {
-  return [
-    createRowNumberTool(adapter),
-    createRankTool(adapter),
-    createLagLeadTool(adapter),
-    createRunningTotalTool(adapter),
-    createMovingAverageTool(adapter),
-    createNtileTool(adapter)
-  ];
-}
+
+// src/adapters/sqlite-native/tools/window/schemas.ts
+var RowNumberSchema = z.object({
+  table: z.string().describe("Table name"),
+  orderBy: z.string().describe("Column(s) to order by"),
+  partitionBy: z.string().optional().describe("Column(s) to partition by"),
+  selectColumns: z.array(z.string()).optional().describe("Columns to include in result"),
+  conditions: z.array(WhereConditionSchema).optional().describe("Optional WHERE clause conditions"),
+  limit: z.preprocess(
+    coerceNumber,
+    z.number().optional().default(20).describe("Maximum rows to return")
+  )
+});
+var RankSchema = z.object({
+  table: z.string().describe("Table name"),
+  orderBy: z.string().describe("Column(s) to order by (determines rank)"),
+  partitionBy: z.string().optional().describe("Column(s) to partition by"),
+  selectColumns: z.array(z.string()).optional().describe("Columns to include in result"),
+  rankType: z.preprocess(
+    coerceEnumValues2(["rank", "dense_rank", "percent_rank"]),
+    z.enum(["rank", "dense_rank", "percent_rank"]).optional().default("rank").describe("Rank function type")
+  ),
+  conditions: z.array(WhereConditionSchema).optional().describe("Optional WHERE clause conditions"),
+  limit: z.preprocess(
+    coerceNumber,
+    z.number().optional().default(20).describe("Maximum rows to return")
+  )
+});
+var LagLeadSchema = z.object({
+  table: z.string().describe("Table name"),
+  column: z.string().describe("Column to get lag/lead value from"),
+  orderBy: z.string().describe("Column(s) to order by"),
+  direction: z.string().describe("LAG (previous) or LEAD (next) row"),
+  offset: z.preprocess(
+    coerceNumber,
+    z.number().optional().default(1).describe("Number of rows to look back/ahead")
+  ),
+  defaultValue: z.string().optional().describe("Default value if no row exists"),
+  partitionBy: z.string().optional().describe("Column(s) to partition by"),
+  selectColumns: z.array(z.string()).optional().describe("Columns to include in result"),
+  conditions: z.array(WhereConditionSchema).optional().describe("Optional WHERE clause conditions"),
+  limit: z.preprocess(
+    coerceNumber,
+    z.number().optional().default(20).describe("Maximum rows to return")
+  )
+});
+var RunningTotalSchema = z.object({
+  table: z.string().describe("Table name"),
+  column: z.string().describe("Column to sum"),
+  orderBy: z.string().describe("Column(s) to order by"),
+  partitionBy: z.string().optional().describe("Reset running total for each partition"),
+  selectColumns: z.array(z.string()).optional().describe("Columns to include in result"),
+  conditions: z.array(WhereConditionSchema).optional().describe("Optional WHERE clause conditions"),
+  limit: z.preprocess(
+    coerceNumber,
+    z.number().optional().default(20).describe("Maximum rows to return")
+  )
+});
+var MovingAverageSchema = z.object({
+  table: z.string().describe("Table name"),
+  column: z.string().describe("Column to average"),
+  orderBy: z.string().describe("Column(s) to order by"),
+  windowSize: z.preprocess(
+    coerceNumber,
+    z.number().describe("Number of rows in the moving window")
+  ),
+  partitionBy: z.string().optional().describe("Column(s) to partition by"),
+  selectColumns: z.array(z.string()).optional().describe("Columns to include in result"),
+  conditions: z.array(WhereConditionSchema).optional().describe("Optional WHERE clause conditions"),
+  limit: z.preprocess(
+    coerceNumber,
+    z.number().optional().default(20).describe("Maximum rows to return")
+  )
+});
+var NtileSchema = z.object({
+  table: z.string().describe("Table name"),
+  orderBy: z.string().describe("Column(s) to order by"),
+  buckets: z.preprocess(
+    coerceNumber,
+    z.number().describe("Number of buckets (e.g., 4 for quartiles)")
+  ),
+  partitionBy: z.string().optional().describe("Column(s) to partition by"),
+  selectColumns: z.array(z.string()).optional().describe("Columns to include in result"),
+  conditions: z.array(WhereConditionSchema).optional().describe("Optional WHERE clause conditions"),
+  limit: z.preprocess(
+    coerceNumber,
+    z.number().optional().default(20).describe("Maximum rows to return")
+  )
+});
+
+// src/adapters/sqlite-native/tools/window/row-number.ts
 function createRowNumberTool(adapter) {
   return {
     name: "sqlite_window_row_number",
@@ -1315,6 +1330,8 @@ function createRowNumberTool(adapter) {
     }
   };
 }
+
+// src/adapters/sqlite-native/tools/window/rank.ts
 function createRankTool(adapter) {
   return {
     name: "sqlite_window_rank",
@@ -1368,6 +1385,8 @@ function createRankTool(adapter) {
     }
   };
 }
+
+// src/adapters/sqlite-native/tools/window/lag-lead.ts
 function createLagLeadTool(adapter) {
   return {
     name: "sqlite_window_lag_lead",
@@ -1443,6 +1462,8 @@ function createLagLeadTool(adapter) {
     }
   };
 }
+
+// src/adapters/sqlite-native/tools/window/running-total.ts
 function createRunningTotalTool(adapter) {
   return {
     name: "sqlite_window_running_total",
@@ -1499,6 +1520,8 @@ function createRunningTotalTool(adapter) {
     }
   };
 }
+
+// src/adapters/sqlite-native/tools/window/moving-average.ts
 function createMovingAverageTool(adapter) {
   return {
     name: "sqlite_window_moving_avg",
@@ -1557,6 +1580,8 @@ function createMovingAverageTool(adapter) {
     }
   };
 }
+
+// src/adapters/sqlite-native/tools/window/ntile.ts
 function createNtileTool(adapter) {
   return {
     name: "sqlite_window_ntile",
@@ -1609,6 +1634,18 @@ function createNtileTool(adapter) {
     }
   };
 }
+
+// src/adapters/sqlite-native/tools/window/index.ts
+function getWindowTools(adapter) {
+  return [
+    createRowNumberTool(adapter),
+    createRankTool(adapter),
+    createLagLeadTool(adapter),
+    createRunningTotalTool(adapter),
+    createMovingAverageTool(adapter),
+    createNtileTool(adapter)
+  ];
+}
 var coerceNumber2 = (val) => {
   if (typeof val === "string") {
     if (val.trim() === "") return void 0;
@@ -2740,16 +2777,18 @@ function savepoint(db, name) {
 }
 function releaseSavepoint(db, name) {
   if (!/^[a-zA-Z_][a-zA-Z0-9_]*$/.test(name)) {
-    throw new Error(
-      "Invalid savepoint name. Must start with a letter/underscore and contain only alphanumeric chars."
+    throw new ValidationError(
+      "Invalid savepoint name. Must start with a letter/underscore and contain only alphanumeric chars.",
+      "INVALID_SAVEPOINT_NAME"
     );
   }
   db.exec(`RELEASE SAVEPOINT "${name}"`);
 }
 function rollbackToSavepoint(db, name) {
   if (!/^[a-zA-Z_][a-zA-Z0-9_]*$/.test(name)) {
-    throw new Error(
-      "Invalid savepoint name. Must start with a letter/underscore and contain only alphanumeric chars."
+    throw new ValidationError(
+      "Invalid savepoint name. Must start with a letter/underscore and contain only alphanumeric chars.",
+      "INVALID_SAVEPOINT_NAME"
     );
   }
   db.exec(`ROLLBACK TO SAVEPOINT "${name}"`);
@@ -3068,7 +3107,7 @@ var NativeSqliteAdapter = class extends DatabaseAdapter {
       throw new DbMcpError(
         "Invalid table name",
         "SQLITE_INVALID_TABLE",
-        "validation" /* VALIDATION */
+        ErrorCategory.VALIDATION
       );
     }
     const result = await this.executeReadQuery(
@@ -3078,7 +3117,7 @@ var NativeSqliteAdapter = class extends DatabaseAdapter {
       throw new DbMcpError(
         `Table '${tableName}' does not exist`,
         "SQLITE_TABLE_NOT_FOUND",
-        "resource" /* RESOURCE */
+        ErrorCategory.RESOURCE
       );
     }
     return {

package/dist/transports/http/middleware.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"middleware.d.ts","sourceRoot":"","sources":["../../../src/transports/http/middleware.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAOH,OAAO,EAIL,KAAK,kBAAkB,EACxB,MAAM,YAAY,CAAC;AAUpB;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,kBAAkB,GAAG,IAAI,CAkCpE;AAMD;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAkB1E;AAED;;GAEG;AACH,wBAAgB,SAAS,CAAC,KAAK,EAAE,kBAAkB,GAAG,IAAI,CA6CzD;AAMD;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,kBAAkB,GAAG,IAAI,CA+CjE"}
+{"version":3,"file":"middleware.d.ts","sourceRoot":"","sources":["../../../src/transports/http/middleware.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAOH,OAAO,EAIL,KAAK,kBAAkB,EACxB,MAAM,YAAY,CAAC;AAUpB;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,kBAAkB,GAAG,IAAI,CAkCpE;AAMD;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAkB1E;AAED;;GAEG;AACH,wBAAgB,SAAS,CAAC,KAAK,EAAE,kBAAkB,GAAG,IAAI,CA6CzD;AAMD;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,kBAAkB,GAAG,IAAI,CAqDjE"}

package/dist/transports/http/oauth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"oauth.d.ts","sourceRoot":"","sources":["../../../src/transports/http/oauth.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAcH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AASrD;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,kBAAkB,GAAG,IAAI,CAiCnE;AAED;;;;GAIG;AACH,wBAAgB,+BAA+B,CAC7C,KAAK,EAAE,kBAAkB,GACxB,IAAI,CA0KN;AAMD;;GAEG;AACH,wBAAsB,UAAU,CAC9B,KAAK,EAAE,kBAAkB,EACzB,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,IAAI,CAAC,CAiEf"}
+{"version":3,"file":"oauth.d.ts","sourceRoot":"","sources":["../../../src/transports/http/oauth.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAeH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AASrD;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,kBAAkB,GAAG,IAAI,CAiCnE;AAED;;;;GAIG;AACH,wBAAgB,+BAA+B,CAC7C,KAAK,EAAE,kBAAkB,GACxB,IAAI,CA0KN;AAMD;;GAEG;AACH,wBAAsB,UAAU,CAC9B,KAAK,EAAE,kBAAkB,EACzB,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,IAAI,CAAC,CAiEf"}

package/dist/transports/http/sessions/legacy-sse.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"legacy-sse.d.ts","sourceRoot":"","sources":["../../../../src/transports/http/sessions/legacy-sse.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAStD;;GAEG;AACH,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,kBAAkB,GAAG,IAAI,CAiLvE"}
+{"version":3,"file":"legacy-sse.d.ts","sourceRoot":"","sources":["../../../../src/transports/http/sessions/legacy-sse.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAStD;;GAEG;AACH,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,kBAAkB,GAAG,IAAI,CA0LvE"}

package/dist/transports/http/sessions/stateful.d.ts

@@ -5,8 +5,12 @@ import type { HttpTransportState } from "../types.js";
  * Returns true if access is allowed, false if denied.
  */
 export declare function verifySessionOwner(state: HttpTransportState, sessionId: string, reqAuthSub: string | undefined): boolean;
+/**
+ * Helper to update session activity timestamp
+ */
+export declare function touchSession(state: HttpTransportState, sessionId: string): void;
 /**
  * Set up stateful mode endpoints with session management and SSE
  */
-export declare function setupStatefulEndpoints(state: HttpTransportState): void;
+export declare function setupStatefulEndpoints(state: HttpTransportState): ReturnType<typeof setInterval>;
 //# sourceMappingURL=stateful.d.ts.map

package/dist/transports/http/sessions/stateful.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"stateful.d.ts","sourceRoot":"","sources":["../../../../src/transports/http/sessions/stateful.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAUtD;;;;GAIG;AACH,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,kBAAkB,EACzB,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,GAAG,SAAS,GAC7B,OAAO,CAOT;AAYD;;GAEG;AACH,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,kBAAkB,GAAG,IAAI,CAuRtE"}
+{"version":3,"file":"stateful.d.ts","sourceRoot":"","sources":["../../../../src/transports/http/sessions/stateful.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAgBtD;;;;GAIG;AACH,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,kBAAkB,EACzB,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,GAAG,SAAS,GAC7B,OAAO,CAOT;AAYD;;GAEG;AACH,wBAAgB,YAAY,CAC1B,KAAK,EAAE,kBAAkB,EACzB,SAAS,EAAE,MAAM,GAChB,IAAI,CAEN;AAED;;GAEG;AACH,wBAAgB,sBAAsB,CACpC,KAAK,EAAE,kBAAkB,GACxB,UAAU,CAAC,OAAO,WAAW,CAAC,CAiahC"}

package/dist/transports/http/transport.d.ts

@@ -27,6 +27,8 @@ import type { OAuthResourceServer } from "../../auth/oauth-resource-server.js";
 export declare class HttpTransport {
     /** Internal state shared with session/middleware/oauth modules */
     private readonly state;
+    /** Sweep timer for session timeout cleanup */
+    private sweepTimer;
     constructor(config: HttpTransportConfig);
     /**
      * Initialize the transport with the MCP server.

package/dist/transports/http/transport.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"transport.d.ts","sourceRoot":"","sources":["../../../src/transports/http/transport.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,OAAgC,MAAM,SAAS,CAAC;AAEvD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAMzE,OAAO,EAKL,KAAK,mBAAmB,EAEzB,MAAM,YAAY,CAAC;AAgBpB,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAC;AAW/E;;;;;;;;;GASG;AACH,qBAAa,aAAa;IACxB,kEAAkE;IAClE,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAqB;gBAE/B,MAAM,EAAE,mBAAmB;IAsBvC;;;;;;;OAOG;IACG,UAAU,CAAC,MAAM,EAAE,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC;IA2LlD;;OAEG;IACG,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAgD5B;;OAEG;IACG,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAuE3B;;OAEG;IACH,MAAM,IAAI,OAAO,CAAC,OAAO,GAAG,IAAI;IAIhC;;OAEG;IACH,qBAAqB,IAAI,MAAM;IAI/B;;OAEG;IACH,iBAAiB,IAAI,mBAAmB,GAAG,IAAI;CAGhD;AAMD;;GAEG;AACH,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,mBAAmB,GAC1B,aAAa,CAEf"}
+{"version":3,"file":"transport.d.ts","sourceRoot":"","sources":["../../../src/transports/http/transport.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,OAAgC,MAAM,SAAS,CAAC;AAEvD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAMzE,OAAO,EAKL,KAAK,mBAAmB,EAEzB,MAAM,YAAY,CAAC;AAgBpB,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAC;AAW/E;;;;;;;;;GASG;AACH,qBAAa,aAAa;IACxB,kEAAkE;IAClE,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAqB;IAE3C,8CAA8C;IAC9C,OAAO,CAAC,UAAU,CAA+C;gBAErD,MAAM,EAAE,mBAAmB;IAyBvC;;;;;;;OAOG;IACG,UAAU,CAAC,MAAM,EAAE,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC;IA2LlD;;OAEG;IACG,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAgD5B;;OAEG;IACG,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IA4E3B;;OAEG;IACH,MAAM,IAAI,OAAO,CAAC,OAAO,GAAG,IAAI;IAIhC;;OAEG;IACH,qBAAqB,IAAI,MAAM;IAI/B;;OAEG;IACH,iBAAiB,IAAI,mBAAmB,GAAG,IAAI;CAGhD;AAMD;;GAEG;AACH,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,mBAAmB,GAC1B,aAAa,CAEf"}

package/dist/transports/http/types.d.ts

@@ -24,6 +24,12 @@ export declare const HTTP_REQUEST_TIMEOUT_MS = 120000;
 export declare const HTTP_KEEP_ALIVE_TIMEOUT_MS = 65000;
 /** Headers timeout (ms) — must be > keepAliveTimeout per Node.js docs */
 export declare const HTTP_HEADERS_TIMEOUT_MS = 66000;
+/** Session idle timeout for stateful HTTP mode (30 minutes) */
+export declare const SESSION_TIMEOUT_MS: number;
+/** Session timeout sweep interval (1 minute) */
+export declare const SESSION_SWEEP_INTERVAL_MS: number;
+/** Session absolute TTL (24 hours) — hard cap regardless of activity */
+export declare const SESSION_ABSOLUTE_TTL_MS: number;
 /**
  * HTTP transport configuration
  */
@@ -114,6 +120,9 @@ export interface HttpTransportState {
     sseTransports: Map<string, SSEServerTransport>;
     statelessTransport: StreamableHTTPServerTransport | null;
     sessionOwners: Map<string, string | undefined>;
+    sessionLastActivity: Map<string, number>;
+    sessionCreatedAt: Map<string, number>;
+    sessionLocks: Map<string, number>;
     resourceServer: OAuthResourceServer | null;
     authServerDiscovery: AuthorizationServerDiscovery | null;
     tokenValidator: TokenValidator | null;

package/dist/transports/http/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/transports/http/types.ts"],"names":[],"mappings":"AACA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,oDAAoD,CAAC;AACxG,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,yCAAyC,CAAC;AAClF,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACzE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAC;AAC/E,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,8CAA8C,CAAC;AACjG,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AACpE,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAMvC,eAAO,MAAM,4BAA4B,QAAS,CAAC;AACnD,eAAO,MAAM,sBAAsB,MAAM,CAAC;AAC1C,eAAO,MAAM,sBAAsB,UAAY,CAAC;AAChD,eAAO,MAAM,oBAAoB,WAAa,CAAC;AAE/C,oCAAoC;AACpC,eAAO,MAAM,oBAAoB,SAAS,CAAC;AAC3C,eAAO,MAAM,sBAAsB,SAAS,CAAC;AAE7C,+DAA+D;AAC/D,eAAO,MAAM,uBAAuB,SAAU,CAAC;AAC/C,sEAAsE;AACtE,eAAO,MAAM,0BAA0B,QAAS,CAAC;AACjD,yEAAyE;AACzE,eAAO,MAAM,uBAAuB,QAAS,CAAC;AAM9C;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,wBAAwB;IACxB,IAAI,EAAE,MAAM,CAAC;IAEb,2CAA2C;IAC3C,IAAI,CAAC,EAAE,MAAM,CAAC;IAEd;;;;OAIG;IACH,SAAS,CAAC,EAAE,OAAO,CAAC;IAEpB,yCAAyC;IACzC,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAE5B,mDAAmD;IACnD,aAAa,CAAC,EAAE,YAAY,CAAC;IAE7B,8BAA8B;IAC9B,KAAK,EAAE;QACL,kCAAkC;QAClC,OAAO,EAAE,OAAO,CAAC;QAEjB,+BAA+B;QAC/B,sBAAsB,EAAE,MAAM,CAAC;QAE/B,kCAAkC;QAClC,QAAQ,EAAE,MAAM,CAAC;QAEjB,2DAA2D;QAC3D,MAAM,CAAC,EAAE,MAAM,CAAC;QAEhB,iDAAiD;QACjD,OAAO,CAAC,EAAE,MAAM,CAAC;QAEjB,+CAA+C;QAC/C,cAAc,CAAC,EAAE,MAAM,CAAC;QAExB,uCAAuC;QACvC,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;KACxB,CAAC;IAEF,yBAAyB;IACzB,IAAI,CAAC,EAAE;QACL,sBAAsB;QACtB,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,OAAO,CAAC;QAErC,sBAAsB;QACtB,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;QAEnB,sBAAsB;QACtB,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;QAE1B,sBAAsB;QACtB,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;QAE1B,wBAAwB;QACxB,WAAW,CAAC,EAAE,OAAO,CAAC;KACvB,CAAC;IAEF;;;;OAIG;IACH,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IAEvB,yDAAyD;IACzD,YAAY,CAAC,EAAE,MAAM,CAAC;IAEtB;;;;;OAKG;IACH,eAAe,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IAEpC;;;OAGG;IACH,UAAU,CAAC,EAAE,OAAO,CAAC;IAErB;;;OAGG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpB,yDAAyD;IACzD,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB,qEAAqE;IACrE,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAMD;;;GAGG;AACH,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,MAAM,EAAE,mBAAmB,CAAC;IACrC,GAAG,EAAE,OAAO,GAAG,IAAI,CAAC;IACpB,UAAU,EAAE,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;IAG/B,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,6BAA6B,CAAC,CAAC;IAGvD,aAAa,EAAE,GAAG,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;IAG/C,kBAAkB,EAAE,6BAA6B,GAAG,IAAI,CAAC;IAKzD,aAAa,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;IAG/C,cAAc,EAAE,mBAAmB,GAAG,IAAI,CAAC;IAC3C,mBAAmB,EAAE,4BAA4B,GAAG,IAAI,CAAC;IACzD,cAAc,EAAE,cAAc,GAAG,IAAI,CAAC;IAGtC,SAAS,EAAE,SAAS,GAAG,IAAI,CAAC;CAC7B"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/transports/http/types.ts"],"names":[],"mappings":"AACA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,oDAAoD,CAAC;AACxG,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,yCAAyC,CAAC;AAClF,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACzE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAC;AAC/E,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,8CAA8C,CAAC;AACjG,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AACpE,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAMvC,eAAO,MAAM,4BAA4B,QAAS,CAAC;AACnD,eAAO,MAAM,sBAAsB,MAAM,CAAC;AAC1C,eAAO,MAAM,sBAAsB,UAAY,CAAC;AAChD,eAAO,MAAM,oBAAoB,WAAa,CAAC;AAE/C,oCAAoC;AACpC,eAAO,MAAM,oBAAoB,SAAS,CAAC;AAC3C,eAAO,MAAM,sBAAsB,SAAS,CAAC;AAE7C,+DAA+D;AAC/D,eAAO,MAAM,uBAAuB,SAAU,CAAC;AAC/C,sEAAsE;AACtE,eAAO,MAAM,0BAA0B,QAAS,CAAC;AACjD,yEAAyE;AACzE,eAAO,MAAM,uBAAuB,QAAS,CAAC;AAE9C,+DAA+D;AAC/D,eAAO,MAAM,kBAAkB,QAAiB,CAAC;AACjD,gDAAgD;AAChD,eAAO,MAAM,yBAAyB,QAAgB,CAAC;AACvD,wEAAwE;AACxE,eAAO,MAAM,uBAAuB,QAAsB,CAAC;AAM3D;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,wBAAwB;IACxB,IAAI,EAAE,MAAM,CAAC;IAEb,2CAA2C;IAC3C,IAAI,CAAC,EAAE,MAAM,CAAC;IAEd;;;;OAIG;IACH,SAAS,CAAC,EAAE,OAAO,CAAC;IAEpB,yCAAyC;IACzC,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAE5B,mDAAmD;IACnD,aAAa,CAAC,EAAE,YAAY,CAAC;IAE7B,8BAA8B;IAC9B,KAAK,EAAE;QACL,kCAAkC;QAClC,OAAO,EAAE,OAAO,CAAC;QAEjB,+BAA+B;QAC/B,sBAAsB,EAAE,MAAM,CAAC;QAE/B,kCAAkC;QAClC,QAAQ,EAAE,MAAM,CAAC;QAEjB,2DAA2D;QAC3D,MAAM,CAAC,EAAE,MAAM,CAAC;QAEhB,iDAAiD;QACjD,OAAO,CAAC,EAAE,MAAM,CAAC;QAEjB,+CAA+C;QAC/C,cAAc,CAAC,EAAE,MAAM,CAAC;QAExB,uCAAuC;QACvC,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;KACxB,CAAC;IAEF,yBAAyB;IACzB,IAAI,CAAC,EAAE;QACL,sBAAsB;QACtB,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,OAAO,CAAC;QAErC,sBAAsB;QACtB,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;QAEnB,sBAAsB;QACtB,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;QAE1B,sBAAsB;QACtB,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;QAE1B,wBAAwB;QACxB,WAAW,CAAC,EAAE,OAAO,CAAC;KACvB,CAAC;IAEF;;;;OAIG;IACH,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IAEvB,yDAAyD;IACzD,YAAY,CAAC,EAAE,MAAM,CAAC;IAEtB;;;;;OAKG;IACH,eAAe,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IAEpC;;;OAGG;IACH,UAAU,CAAC,EAAE,OAAO,CAAC;IAErB;;;OAGG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpB,yDAAyD;IACzD,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB,qEAAqE;IACrE,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAMD;;;GAGG;AACH,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,MAAM,EAAE,mBAAmB,CAAC;IACrC,GAAG,EAAE,OAAO,GAAG,IAAI,CAAC;IACpB,UAAU,EAAE,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;IAG/B,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,6BAA6B,CAAC,CAAC;IAGvD,aAAa,EAAE,GAAG,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;IAG/C,kBAAkB,EAAE,6BAA6B,GAAG,IAAI,CAAC;IAKzD,aAAa,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;IAG/C,mBAAmB,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACzC,gBAAgB,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACtC,YAAY,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAGlC,cAAc,EAAE,mBAAmB,GAAG,IAAI,CAAC;IAC3C,mBAAmB,EAAE,4BAA4B,GAAG,IAAI,CAAC;IACzD,cAAc,EAAE,cAAc,GAAG,IAAI,CAAC;IAGtC,SAAS,EAAE,SAAS,GAAG,IAAI,CAAC;CAC7B"}

package/dist/types/auth.d.ts

@@ -75,5 +75,9 @@ export interface RequestContext {
      * Client IP address for rate limiting fallback
      */
     clientIp?: string | undefined;
+    /**
+     * Whether the request is originating from Code Mode execution
+     */
+    isCodeMode?: boolean;
 }
 //# sourceMappingURL=auth.d.ts.map

package/dist/types/auth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../src/types/auth.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAMH;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,kCAAkC;IAClC,OAAO,EAAE,OAAO,CAAC;IAEjB,+BAA+B;IAC/B,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAEhC,gCAAgC;IAChC,aAAa,CAAC,EAAE,MAAM,CAAC;IAEvB,sCAAsC;IACtC,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB,kCAAkC;IAClC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB,gCAAgC;IAChC,MAAM,CAAC,EAAE,MAAM,CAAC;IAEhB,qDAAqD;IACrD,cAAc,CAAC,EAAE,MAAM,CAAC;IAExB,+BAA+B;IAC/B,YAAY,CAAC,EAAE,MAAM,CAAC;IAEtB,uCAAuC;IACvC,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;CACxB;AAED;;GAEG;AACH,MAAM,MAAM,UAAU,GAClB,MAAM,GACN,OAAO,GACP,OAAO,GACP,MAAM,MAAM,EAAE,GACd,SAAS,MAAM,IAAI,MAAM,EAAE,CAAC;AAEhC;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,wBAAwB;IACxB,GAAG,EAAE,MAAM,CAAC;IAEZ,qBAAqB;IACrB,MAAM,EAAE,MAAM,EAAE,CAAC;IAEjB,4BAA4B;IAC5B,GAAG,EAAE,MAAM,CAAC;IAEZ,2BAA2B;IAC3B,GAAG,EAAE,MAAM,CAAC;IAEZ,mBAAmB;IACnB,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAEzB,qBAAqB;IACrB,GAAG,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CAAC;IAEpC,wBAAwB;IACxB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,gDAAgD;IAChD,IAAI,CAAC,EAAE,WAAW,GAAG,SAAS,CAAC;IAE/B,uBAAuB;IACvB,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB,wBAAwB;IACxB,SAAS,EAAE,IAAI,CAAC;IAEhB,6BAA6B;IAC7B,SAAS,EAAE,MAAM,CAAC;IAElB;;;OAGG;IACH,MAAM,CAAC,EAAE,OAAO,CAAC;IAEjB;;;OAGG;IACH,aAAa,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAEhC;;OAEG;IACH,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC/B"}
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../src/types/auth.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAMH;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,kCAAkC;IAClC,OAAO,EAAE,OAAO,CAAC;IAEjB,+BAA+B;IAC/B,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAEhC,gCAAgC;IAChC,aAAa,CAAC,EAAE,MAAM,CAAC;IAEvB,sCAAsC;IACtC,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB,kCAAkC;IAClC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB,gCAAgC;IAChC,MAAM,CAAC,EAAE,MAAM,CAAC;IAEhB,qDAAqD;IACrD,cAAc,CAAC,EAAE,MAAM,CAAC;IAExB,+BAA+B;IAC/B,YAAY,CAAC,EAAE,MAAM,CAAC;IAEtB,uCAAuC;IACvC,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;CACxB;AAED;;GAEG;AACH,MAAM,MAAM,UAAU,GAClB,MAAM,GACN,OAAO,GACP,OAAO,GACP,MAAM,MAAM,EAAE,GACd,SAAS,MAAM,IAAI,MAAM,EAAE,CAAC;AAEhC;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,wBAAwB;IACxB,GAAG,EAAE,MAAM,CAAC;IAEZ,qBAAqB;IACrB,MAAM,EAAE,MAAM,EAAE,CAAC;IAEjB,4BAA4B;IAC5B,GAAG,EAAE,MAAM,CAAC;IAEZ,2BAA2B;IAC3B,GAAG,EAAE,MAAM,CAAC;IAEZ,mBAAmB;IACnB,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAEzB,qBAAqB;IACrB,GAAG,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CAAC;IAEpC,wBAAwB;IACxB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,gDAAgD;IAChD,IAAI,CAAC,EAAE,WAAW,GAAG,SAAS,CAAC;IAE/B,uBAAuB;IACvB,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB,wBAAwB;IACxB,SAAS,EAAE,IAAI,CAAC;IAEhB,6BAA6B;IAC7B,SAAS,EAAE,MAAM,CAAC;IAElB;;;OAGG;IACH,MAAM,CAAC,EAAE,OAAO,CAAC;IAEjB;;;OAGG;IACH,aAAa,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAEhC;;OAEG;IACH,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAE9B;;OAEG;IACH,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB"}

package/dist/types/server.d.ts

@@ -46,5 +46,8 @@ export interface McpServerConfig {
     noAuthEnforcement?: boolean;
     /** Enable Prometheus metrics export at /metrics */
     metricsExport?: "prometheus";
+    /** Allowlisted filesystem roots for IO operations (backup, dump, attach, CSV).
+     *  Empty array = NO filesystem access. Undefined = legacy mode (same-dir validation). */
+    allowedIoRoots?: string[] | undefined;
 }
 //# sourceMappingURL=server.d.ts.map

package/dist/types/server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/types/server.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AACpD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAMrD;;GAEG;AACH,MAAM,MAAM,aAAa,GAAG,OAAO,GAAG,MAAM,GAAG,KAAK,CAAC;AAErD;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,kBAAkB;IAClB,IAAI,EAAE,MAAM,CAAC;IAEb,qBAAqB;IACrB,OAAO,EAAE,MAAM,CAAC;IAEhB,8BAA8B;IAC9B,SAAS,EAAE,aAAa,CAAC;IAEzB,0CAA0C;IAC1C,IAAI,CAAC,EAAE,MAAM,CAAC;IAEd,qEAAqE;IACrE,IAAI,CAAC,EAAE,MAAM,CAAC;IAEd,8BAA8B;IAC9B,SAAS,EAAE,cAAc,EAAE,CAAC;IAE5B,8BAA8B;IAC9B,KAAK,CAAC,EAAE,WAAW,CAAC;IAEpB,8DAA8D;IAC9D,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB,mCAAmC;IACnC,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpB;;;;OAIG;IACH,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,UAAU,CAAC,EAAE,OAAO,CAAC;IAErB,kCAAkC;IAClC,KAAK,CAAC,EAAE,WAAW,CAAC;IAEpB,4DAA4D;IAC5D,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAE5B,mDAAmD;IACnD,aAAa,CAAC,EAAE,YAAY,CAAC;CAC9B"}
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/types/server.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AACpD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAMrD;;GAEG;AACH,MAAM,MAAM,aAAa,GAAG,OAAO,GAAG,MAAM,GAAG,KAAK,CAAC;AAErD;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,kBAAkB;IAClB,IAAI,EAAE,MAAM,CAAC;IAEb,qBAAqB;IACrB,OAAO,EAAE,MAAM,CAAC;IAEhB,8BAA8B;IAC9B,SAAS,EAAE,aAAa,CAAC;IAEzB,0CAA0C;IAC1C,IAAI,CAAC,EAAE,MAAM,CAAC;IAEd,qEAAqE;IACrE,IAAI,CAAC,EAAE,MAAM,CAAC;IAEd,8BAA8B;IAC9B,SAAS,EAAE,cAAc,EAAE,CAAC;IAE5B,8BAA8B;IAC9B,KAAK,CAAC,EAAE,WAAW,CAAC;IAEpB,8DAA8D;IAC9D,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB,mCAAmC;IACnC,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpB;;;;OAIG;IACH,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,UAAU,CAAC,EAAE,OAAO,CAAC;IAErB,kCAAkC;IAClC,KAAK,CAAC,EAAE,WAAW,CAAC;IAEpB,4DAA4D;IAC5D,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAE5B,mDAAmD;IACnD,aAAa,CAAC,EAAE,YAAY,CAAC;IAE7B;6FACyF;IACzF,cAAc,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC;CACvC"}

package/dist/utils/annotations.d.ts

@@ -7,6 +7,7 @@
  * Follows MCP 2025-11-25 specification.
  */
 import type { ToolAnnotations } from "../types/index.js";
+import type { ToolAnnotations as SDKToolAnnotations } from "@modelcontextprotocol/sdk/types.js";
 /** Read-only query tools (SELECT, schema retrieval, metadata) */
 export declare const READ_ONLY: ToolAnnotations;
 /** Standard write tools (INSERT, UPDATE, CREATE) */
@@ -59,4 +60,11 @@ export declare const CODEMODE: ToolAnnotations;
  * Create codemode annotations with title
  */
 export declare function codemode(title: string): ToolAnnotations;
+/**
+ * Casts internal annotations to the SDK annotations type.
+ * This bypasses TypeScript excess property checks when registering tools directly
+ * via the SDK (which lacks our custom sensitiveHint annotation), while preserving
+ * the data at runtime for clients that do support it.
+ */
+export declare function toSDK(annotations: ToolAnnotations): SDKToolAnnotations;
 //# sourceMappingURL=annotations.d.ts.map

package/dist/utils/annotations.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"annotations.d.ts","sourceRoot":"","sources":["../../src/utils/annotations.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAMzD,iEAAiE;AACjE,eAAO,MAAM,SAAS,EAAE,eAKvB,CAAC;AAEF,oDAAoD;AACpD,eAAO,MAAM,KAAK,EAAE,eAKnB,CAAC;AAEF,iDAAiD;AACjD,eAAO,MAAM,WAAW,EAAE,eAKzB,CAAC;AAEF,uDAAuD;AACvD,eAAO,MAAM,UAAU,EAAE,eAMxB,CAAC;AAEF,wDAAwD;AACxD,eAAO,MAAM,KAAK,EAAE,eAKnB,CAAC;AAMF;;GAEG;AACH,wBAAgB,SAAS,CACvB,KAAK,EAAE,MAAM,EACb,IAAI,GAAE,eAA2B,GAChC,eAAe,CAEjB;AAED;;GAEG;AACH,wBAAgB,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,eAAe,CAEvD;AAED;;GAEG;AACH,wBAAgB,KAAK,CAAC,KAAK,EAAE,MAAM,GAAG,eAAe,CAEpD;AAED;;GAEG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,eAAe,CAE1D;AAED;;GAEG;AACH,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,eAAe,CAEzD;AAED;;GAEG;AACH,wBAAgB,KAAK,CAAC,KAAK,EAAE,MAAM,GAAG,eAAe,CAEpD;AAED,gFAAgF;AAChF,eAAO,MAAM,QAAQ,EAAE,eAKtB,CAAC;AAEF,wEAAwE;AACxE,eAAO,MAAM,QAAQ,EAAE,eAKtB,CAAC;AAEF;;GAEG;AACH,wBAAgB,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,eAAe,CAEtD;AAED;;GAEG;AACH,wBAAgB,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,eAAe,CAEtD;AAED,6DAA6D;AAC7D,eAAO,MAAM,QAAQ,EAAE,eAMtB,CAAC;AAEF;;GAEG;AACH,wBAAgB,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,eAAe,CAEvD"}
+{"version":3,"file":"annotations.d.ts","sourceRoot":"","sources":["../../src/utils/annotations.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACzD,OAAO,KAAK,EAAE,eAAe,IAAI,kBAAkB,EAAE,MAAM,oCAAoC,CAAC;AAMhG,iEAAiE;AACjE,eAAO,MAAM,SAAS,EAAE,eAKvB,CAAC;AAEF,oDAAoD;AACpD,eAAO,MAAM,KAAK,EAAE,eAKnB,CAAC;AAEF,iDAAiD;AACjD,eAAO,MAAM,WAAW,EAAE,eAKzB,CAAC;AAEF,uDAAuD;AACvD,eAAO,MAAM,UAAU,EAAE,eAMxB,CAAC;AAEF,wDAAwD;AACxD,eAAO,MAAM,KAAK,EAAE,eAKnB,CAAC;AAMF;;GAEG;AACH,wBAAgB,SAAS,CACvB,KAAK,EAAE,MAAM,EACb,IAAI,GAAE,eAA2B,GAChC,eAAe,CAEjB;AAED;;GAEG;AACH,wBAAgB,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,eAAe,CAEvD;AAED;;GAEG;AACH,wBAAgB,KAAK,CAAC,KAAK,EAAE,MAAM,GAAG,eAAe,CAEpD;AAED;;GAEG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,eAAe,CAE1D;AAED;;GAEG;AACH,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,eAAe,CAEzD;AAED;;GAEG;AACH,wBAAgB,KAAK,CAAC,KAAK,EAAE,MAAM,GAAG,eAAe,CAEpD;AAED,gFAAgF;AAChF,eAAO,MAAM,QAAQ,EAAE,eAKtB,CAAC;AAEF,wEAAwE;AACxE,eAAO,MAAM,QAAQ,EAAE,eAKtB,CAAC;AAEF;;GAEG;AACH,wBAAgB,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,eAAe,CAEtD;AAED;;GAEG;AACH,wBAAgB,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,eAAe,CAEtD;AAED,6DAA6D;AAC7D,eAAO,MAAM,QAAQ,EAAE,eAMtB,CAAC;AAEF;;GAEG;AACH,wBAAgB,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,eAAe,CAEvD;AAED;;;;;GAKG;AACH,wBAAgB,KAAK,CAAC,WAAW,EAAE,eAAe,GAAG,kBAAkB,CAEtE"}

package/dist/utils/errors/categories.d.ts

@@ -6,26 +6,31 @@
 /**
  * Error categories for classification and handling
  */
-export declare enum ErrorCategory {
+export declare const ErrorCategory: {
     /** Input validation failures (invalid names, paths, types) */
-    VALIDATION = "validation",
+    readonly VALIDATION: "validation";
     /** Database connection issues */
-    CONNECTION = "connection",
+    readonly CONNECTION: "connection";
     /** SQL execution errors */
-    QUERY = "query",
+    readonly QUERY: "query";
     /** Authorization/permission failures */
-    PERMISSION = "permission",
+    readonly PERMISSION: "permission";
     /** Configuration/setup issues */
-    CONFIGURATION = "config",
+    readonly CONFIGURATION: "config";
     /** Missing resources (tables, columns, views) */
-    RESOURCE = "resource",
+    readonly RESOURCE: "resource";
     /** Authentication failures (invalid credentials, expired tokens) */
-    AUTHENTICATION = "authentication",
+    readonly AUTHENTICATION: "authentication";
     /** Authorization failures (insufficient scope/permissions) */
-    AUTHORIZATION = "authorization",
+    readonly AUTHORIZATION: "authorization";
     /** Unexpected internal errors */
-    INTERNAL = "internal"
-}
+    readonly INTERNAL: "internal";
+    /** Execution timeout errors */
+    readonly TIMEOUT: "timeout";
+    /** Rate limit enforcement errors */
+    readonly RATE_LIMIT: "rate_limit";
+};
+export type ErrorCategory = (typeof ErrorCategory)[keyof typeof ErrorCategory];
 /**
  * Structured error response format
  */