db-mcp 4.0.0 → 5.0.1

package/dist/{chunk-R5M4WKDM.js → chunk-2TYICG7B.js}

@@ -1,13 +1,306 @@
-import { ValidationError, SCOPES } from './chunk-Y57WFKAP.js';
+import { ConfigurationError, SCOPES, ValidationError, DbMcpError, ErrorCategory } from './chunk-XLIYO3YA.js';
 import { createRequire } from 'module';
-import { dirname, resolve, basename, normalize, relative } from 'path';
-import { realpathSync } from 'fs';
+import { resolve, parse, dirname, relative, join, sep, isAbsolute, basename, normalize } from 'path';
+import { realpathSync, lstatSync, existsSync } from 'fs';
 import { z } from 'zod';
 
 var _require = createRequire(import.meta.url);
 var pkg = _require("../package.json");
 var VERSION = pkg.version;
 var NAME = pkg.name;
+var IoPathError = class extends DbMcpError {
+  constructor(message) {
+    super(message, "SECURITY_ERROR", ErrorCategory.VALIDATION, {
+      suggestion: "Check that the target path is within the allowed IO roots.",
+      recoverable: false
+    });
+    this.name = "IoPathError";
+  }
+};
+function assertSafeIoPath(targetPath, allowedRoots, validateExtension = true) {
+  if (targetPath.includes("\0")) {
+    throw new IoPathError("Security: path must not contain null bytes.");
+  }
+  if (targetPath.startsWith("file:") || targetPath.includes("?")) {
+    throw new IoPathError(
+      "Security: SQLite URIs and query parameters are not allowed."
+    );
+  }
+  const normalized = targetPath.replace(/\\/g, "/");
+  const segments = normalized.split("/");
+  if (segments.some((s) => s === "..")) {
+    throw new IoPathError("Security: Path traversal (..) detected.");
+  }
+  const base = segments[segments.length - 1];
+  if (!base) {
+    throw new IoPathError("Security: Invalid path structure.");
+  }
+  if (base.startsWith(".")) {
+    throw new IoPathError("Security: Cannot access hidden files or dotfiles.");
+  }
+  if (validateExtension) {
+    const validExtensions = [
+      ".db",
+      ".sqlite",
+      ".sqlite3",
+      ".sql",
+      ".csv",
+      ".tsv"
+    ];
+    const hasValidExt = validExtensions.some(
+      (ext) => base.toLowerCase().endsWith(ext)
+    );
+    if (!hasValidExt) {
+      throw new IoPathError(
+        `Security: Invalid file extension. Allowed extensions are: ${validExtensions.join(", ")}`
+      );
+    }
+  }
+  const resolved = resolve(targetPath);
+  let currentDir = resolved;
+  let existingRealPath = "";
+  while (currentDir !== parse(currentDir).root) {
+    try {
+      existingRealPath = realpathSync(currentDir);
+      break;
+    } catch {
+      currentDir = dirname(currentDir);
+    }
+  }
+  if (!existingRealPath) {
+    try {
+      existingRealPath = realpathSync(currentDir);
+    } catch {
+      existingRealPath = currentDir;
+    }
+  }
+  const remainder = relative(currentDir, resolved);
+  const finalTargetPath = remainder ? join(existingRealPath, remainder) : existingRealPath;
+  if (allowedRoots.length === 0) {
+    throw new IoPathError(
+      "No allowed input/output roots configured for sandbox boundary. Please configure ALLOWED_IO_ROOTS env variable or pass --allowed-io-roots with absolute paths to enable filesystem operations."
+    );
+  }
+  const safeRoots = [];
+  for (const root of allowedRoots) {
+    try {
+      safeRoots.push(realpathSync(resolve(root)));
+    } catch {
+      safeRoots.push(resolve(root));
+    }
+  }
+  const isAllowed = safeRoots.some((root) => {
+    const rel = relative(root, finalTargetPath);
+    return rel !== ".." && !rel.startsWith(".." + sep) && !isAbsolute(rel);
+  });
+  if (!isAllowed) {
+    throw new IoPathError(
+      `Directory path escapes allowed sandbox boundaries: ${targetPath}`
+    );
+  }
+  let isSymlink = false;
+  try {
+    const stats = lstatSync(resolved);
+    if (stats.isSymbolicLink()) {
+      isSymlink = true;
+    }
+  } catch {
+  }
+  if (isSymlink) {
+    throw new IoPathError(
+      `Symlinks are strictly forbidden for file operations: ${targetPath}`
+    );
+  }
+}
+function parseAllowedIoRoots(raw) {
+  if (!raw) return void 0;
+  if (raw.length > 51200) {
+    throw new ConfigurationError(
+      "ALLOWED_IO_ROOTS configuration exceeds size limit (50KB)"
+    );
+  }
+  let paths;
+  try {
+    if (raw.trim().startsWith("[")) {
+      const parsed = JSON.parse(raw);
+      if (Array.isArray(parsed) && parsed.every((p) => typeof p === "string" && isAbsolute(p))) {
+        paths = parsed;
+      } else {
+        throw new ConfigurationError("Must be an array of absolute paths");
+      }
+    } else {
+      paths = raw.split(",").map((s) => s.trim()).filter(Boolean);
+      if (paths.some((p) => !isAbsolute(p))) {
+        throw new ConfigurationError("All paths must be absolute");
+      }
+    }
+  } catch (e) {
+    const errName = e instanceof Error ? e.message : String(e);
+    throw new ConfigurationError(
+      `Invalid ALLOWED_IO_ROOTS configuration: ${errName}`,
+      "CONFIG_ERROR",
+      {
+        cause: e instanceof Error ? e : void 0
+      }
+    );
+  }
+  for (const p of paths) {
+    try {
+      if (!existsSync(p)) {
+        console.warn(`
+[WARN] ALLOWED_IO_ROOTS path does not exist: ${p}
+`);
+      }
+    } catch {
+    }
+  }
+  return paths;
+}
+
+// src/utils/annotations.ts
+var READ_ONLY = {
+  readOnlyHint: true,
+  destructiveHint: false,
+  openWorldHint: false,
+  sensitiveHint: false
+};
+var WRITE = {
+  readOnlyHint: false,
+  destructiveHint: false,
+  openWorldHint: false,
+  sensitiveHint: false
+};
+var DESTRUCTIVE = {
+  readOnlyHint: false,
+  destructiveHint: true,
+  openWorldHint: false,
+  sensitiveHint: false
+};
+var IDEMPOTENT = {
+  readOnlyHint: false,
+  destructiveHint: false,
+  idempotentHint: true,
+  openWorldHint: false,
+  sensitiveHint: false
+};
+var ADMIN = {
+  readOnlyHint: false,
+  destructiveHint: true,
+  openWorldHint: false,
+  sensitiveHint: true
+  // System maintenance may expose internal db structures
+};
+function readOnly(title) {
+  return { title, ...READ_ONLY };
+}
+function write(title) {
+  return { title, ...WRITE };
+}
+function destructive(title) {
+  return { title, ...DESTRUCTIVE };
+}
+function idempotent(title) {
+  return { title, ...IDEMPOTENT };
+}
+function admin(title) {
+  return { title, ...ADMIN };
+}
+var ADMIN_FS = {
+  readOnlyHint: false,
+  destructiveHint: true,
+  openWorldHint: true,
+  sensitiveHint: true
+};
+var WRITE_FS = {
+  readOnlyHint: false,
+  destructiveHint: false,
+  openWorldHint: true,
+  sensitiveHint: true
+};
+function adminFs(title) {
+  return { title, ...ADMIN_FS };
+}
+function writeFs(title) {
+  return { title, ...WRITE_FS };
+}
+function toSDK(annotations) {
+  return annotations;
+}
+
+// src/utils/icons.ts
+var MDI_BASE = "https://cdn.jsdelivr.net/npm/@mdi/svg@7.4.47/svg";
+var SERVER_ICONS = [
+  {
+    src: `${MDI_BASE}/server.svg`,
+    mimeType: "image/svg+xml"
+  }
+];
+var TOOL_GROUP_ICONS = {
+  core: [{ src: `${MDI_BASE}/database.svg`, mimeType: "image/svg+xml" }],
+  json: [{ src: `${MDI_BASE}/code-json.svg`, mimeType: "image/svg+xml" }],
+  text: [{ src: `${MDI_BASE}/format-text.svg`, mimeType: "image/svg+xml" }],
+  stats: [{ src: `${MDI_BASE}/chart-bar.svg`, mimeType: "image/svg+xml" }],
+  vector: [
+    { src: `${MDI_BASE}/vector-polyline.svg`, mimeType: "image/svg+xml" }
+  ],
+  admin: [{ src: `${MDI_BASE}/cog.svg`, mimeType: "image/svg+xml" }],
+  transactions: [
+    { src: `${MDI_BASE}/swap-horizontal.svg`, mimeType: "image/svg+xml" }
+  ],
+  geo: [{ src: `${MDI_BASE}/earth.svg`, mimeType: "image/svg+xml" }],
+  introspection: [
+    { src: `${MDI_BASE}/graph-outline.svg`, mimeType: "image/svg+xml" }
+  ],
+  migration: [
+    { src: `${MDI_BASE}/source-branch.svg`, mimeType: "image/svg+xml" }
+  ],
+  codemode: [{ src: `${MDI_BASE}/code-braces.svg`, mimeType: "image/svg+xml" }]
+};
+function getToolGroupIcon(group) {
+  return TOOL_GROUP_ICONS[group];
+}
+
+// src/utils/redaction.ts
+var SENSITIVE_KEY_PATTERN = /(?:sk-|Bearer |token\s*[:=]\s*|password\s*[:=]\s*|secret\s*[:=]\s*|apikey\s*[:=]\s*|api_key\s*[:=]\s*|AWS_SECRET_ACCESS_KEY\s*[:=]\s*|GITHUB_TOKEN\s*[:=]\s*|ghp_|gho_|ghu_|ghs_|xoxb-|xoxp-|xoxs-|AZURE_[A-Z_]*\s*[:=]\s*|DATABASE_URL\s*[:=]\s*|AKIA|sk-ant-api[a-zA-Z0-9_-]+|sk_live_[a-zA-Z0-9_]+|rk_live_[a-zA-Z0-9_]+|SG\.[a-zA-Z0-9_-]+\.[a-zA-Z0-9_-]+|npm_[a-zA-Z0-9]{30,}|dpl_[a-zA-Z0-9]{30,}|hvs\.[a-zA-Z0-9_-]+)[^\s'",;)}\]]{2,}/i;
+var SENSITIVE_VALUE_REGEX = new RegExp(SENSITIVE_KEY_PATTERN.source, "gi");
+var SENSITIVE_KEY_REGEX = /^(password|passwd|token|secret|authorization|api_?key|credential|private_?key|access_?token|refresh_?token|database_url)$/i;
+function redactObject(obj, depth = 0, maxDepth = 15) {
+  if (depth > maxDepth || obj === null || obj === void 0) {
+    return obj;
+  }
+  if (typeof obj === "string") {
+    return obj.replace(SENSITIVE_VALUE_REGEX, "[REDACTED]");
+  }
+  if (typeof obj !== "object") {
+    return obj;
+  }
+  if (Array.isArray(obj)) {
+    return obj.map((item) => redactObject(item, depth + 1, maxDepth));
+  }
+  const redacted = {};
+  for (const [key, value] of Object.entries(obj)) {
+    if (SENSITIVE_KEY_REGEX.test(key)) {
+      redacted[key] = "[REDACTED]";
+    } else {
+      redacted[key] = redactObject(value, depth + 1, maxDepth);
+    }
+  }
+  return redacted;
+}
+
+// src/auth/scope-map.ts
+var toolScopeMap = /* @__PURE__ */ new Map();
+function registerToolScope(toolName, scope) {
+  toolScopeMap.set(toolName, scope);
+  if (!toolName.startsWith("sqlite_")) {
+    toolScopeMap.set(`sqlite_${toolName}`, scope);
+  } else {
+    toolScopeMap.set(toolName.slice(7), scope);
+  }
+}
+function getRequiredScope(toolName) {
+  return toolScopeMap.get(toolName) ?? SCOPES.ADMIN;
+}
 
 // src/utils/where-clause.ts
 var UnsafeWhereClauseError = class extends Error {
@@ -265,7 +558,7 @@ function buildWhereClause(conditions, whereClause) {
     ]);
     for (const cond of conditions) {
       if (!allowedOperators.has(cond.operator.toUpperCase())) {
-        throw new Error(`Invalid operator: ${cond.operator}`);
+        throw new ValidationError(`Invalid operator: ${cond.operator}`);
       }
       const col = `"${cond.column.replace(/"/g, '""')}"`;
       if (cond.operator.toUpperCase() === "IN" && Array.isArray(cond.value)) {
@@ -334,6 +627,65 @@ function sanitizeIdentifiers(names) {
 function createColumnList(columns) {
   return sanitizeIdentifiers(columns).join(", ");
 }
+
+// src/utils/tokens.ts
+function estimateTokens(text, contentType = "text") {
+  const bytes = Buffer.byteLength(text, "utf8");
+  switch (contentType) {
+    case "json":
+      return Math.ceil(bytes / 3);
+    case "sql":
+      return Math.ceil(bytes / 3.5);
+    case "text":
+    default:
+      return Math.ceil(bytes / 4);
+  }
+}
+
+// src/utils/progress-utils.ts
+function buildProgressContext(ctx) {
+  if (ctx?.server === void 0 || ctx.progressToken === void 0) {
+    return void 0;
+  }
+  return {
+    server: ctx.server,
+    progressToken: ctx.progressToken
+  };
+}
+async function sendProgress(ctx, progress, total, message) {
+  if (ctx === void 0) return;
+  if (ctx.progressToken === void 0) return;
+  try {
+    const notification = {
+      method: "notifications/progress",
+      params: {
+        progressToken: ctx.progressToken,
+        progress,
+        ...total !== void 0 && { total },
+        ...message !== void 0 && message !== "" && { message }
+      }
+    };
+    await ctx.server.notification(notification);
+  } catch {
+  }
+}
+
+// src/utils/stream-utils.ts
+var STREAM_CHUNK_SIZE = 10;
+async function streamResultRows(ctx, rows, chunkSize = STREAM_CHUNK_SIZE) {
+  if (rows.length === 0) {
+    return 0;
+  }
+  const effectiveChunkSize = Math.max(1, chunkSize);
+  const totalChunks = Math.ceil(rows.length / effectiveChunkSize);
+  for (let i = 0; i < totalChunks; i++) {
+    const start = i * effectiveChunkSize;
+    const end = Math.min(start + effectiveChunkSize, rows.length);
+    const chunk = rows.slice(start, end);
+    await sendProgress(ctx, i + 1, totalChunks, JSON.stringify(chunk));
+  }
+  return totalChunks;
+}
 function validateSameDirPath(targetPath, dbPath) {
   if (targetPath.includes("\0")) {
     return {
@@ -479,180 +831,6 @@ function validateAggregateFunction(fn) {
     );
   }
 }
-
-// src/utils/tokens.ts
-function estimateTokens(text, contentType = "text") {
-  const bytes = Buffer.byteLength(text, "utf8");
-  switch (contentType) {
-    case "json":
-      return Math.ceil(bytes / 3);
-    case "sql":
-      return Math.ceil(bytes / 3.5);
-    case "text":
-    default:
-      return Math.ceil(bytes / 4);
-  }
-}
-
-// src/utils/icons.ts
-var MDI_BASE = "https://cdn.jsdelivr.net/npm/@mdi/svg@7.4.47/svg";
-var SERVER_ICONS = [
-  {
-    src: `${MDI_BASE}/server.svg`,
-    mimeType: "image/svg+xml"
-  }
-];
-var TOOL_GROUP_ICONS = {
-  core: [{ src: `${MDI_BASE}/database.svg`, mimeType: "image/svg+xml" }],
-  json: [{ src: `${MDI_BASE}/code-json.svg`, mimeType: "image/svg+xml" }],
-  text: [{ src: `${MDI_BASE}/format-text.svg`, mimeType: "image/svg+xml" }],
-  stats: [{ src: `${MDI_BASE}/chart-bar.svg`, mimeType: "image/svg+xml" }],
-  vector: [
-    { src: `${MDI_BASE}/vector-polyline.svg`, mimeType: "image/svg+xml" }
-  ],
-  admin: [{ src: `${MDI_BASE}/cog.svg`, mimeType: "image/svg+xml" }],
-  transactions: [
-    { src: `${MDI_BASE}/swap-horizontal.svg`, mimeType: "image/svg+xml" }
-  ],
-  geo: [{ src: `${MDI_BASE}/earth.svg`, mimeType: "image/svg+xml" }],
-  introspection: [
-    { src: `${MDI_BASE}/graph-outline.svg`, mimeType: "image/svg+xml" }
-  ],
-  migration: [
-    { src: `${MDI_BASE}/source-branch.svg`, mimeType: "image/svg+xml" }
-  ],
-  codemode: [{ src: `${MDI_BASE}/code-braces.svg`, mimeType: "image/svg+xml" }]
-};
-function getToolGroupIcon(group) {
-  return TOOL_GROUP_ICONS[group];
-}
-
-// src/utils/annotations.ts
-var READ_ONLY = {
-  readOnlyHint: true,
-  destructiveHint: false,
-  openWorldHint: false,
-  sensitiveHint: false
-};
-var WRITE = {
-  readOnlyHint: false,
-  destructiveHint: false,
-  openWorldHint: false,
-  sensitiveHint: false
-};
-var DESTRUCTIVE = {
-  readOnlyHint: false,
-  destructiveHint: true,
-  openWorldHint: false,
-  sensitiveHint: false
-};
-var IDEMPOTENT = {
-  readOnlyHint: false,
-  destructiveHint: false,
-  idempotentHint: true,
-  openWorldHint: false,
-  sensitiveHint: false
-};
-var ADMIN = {
-  readOnlyHint: false,
-  destructiveHint: true,
-  openWorldHint: false,
-  sensitiveHint: true
-  // System maintenance may expose internal db structures
-};
-function readOnly(title) {
-  return { title, ...READ_ONLY };
-}
-function write(title) {
-  return { title, ...WRITE };
-}
-function destructive(title) {
-  return { title, ...DESTRUCTIVE };
-}
-function idempotent(title) {
-  return { title, ...IDEMPOTENT };
-}
-function admin(title) {
-  return { title, ...ADMIN };
-}
-var ADMIN_FS = {
-  readOnlyHint: false,
-  destructiveHint: true,
-  openWorldHint: true,
-  sensitiveHint: true
-};
-var WRITE_FS = {
-  readOnlyHint: false,
-  destructiveHint: false,
-  openWorldHint: true,
-  sensitiveHint: true
-};
-function adminFs(title) {
-  return { title, ...ADMIN_FS };
-}
-function writeFs(title) {
-  return { title, ...WRITE_FS };
-}
-
-// src/utils/redaction.ts
-var SENSITIVE_KEY_PATTERN = /(?:sk-|Bearer |token\s*[:=]\s*|password\s*[:=]\s*|secret\s*[:=]\s*|apikey\s*[:=]\s*|api_key\s*[:=]\s*|AWS_SECRET_ACCESS_KEY\s*[:=]\s*|GITHUB_TOKEN\s*[:=]\s*|ghp_|gho_|ghu_|ghs_|xoxb-|xoxp-|xoxs-|AZURE_[A-Z_]*\s*[:=]\s*|DATABASE_URL\s*[:=]\s*|AKIA|sk-ant-api[a-zA-Z0-9_-]+|sk_live_[a-zA-Z0-9_]+|rk_live_[a-zA-Z0-9_]+|SG\.[a-zA-Z0-9_-]+\.[a-zA-Z0-9_-]+|npm_[a-zA-Z0-9]{30,}|dpl_[a-zA-Z0-9]{30,}|hvs\.[a-zA-Z0-9_-]+)[^\s'",;)}\]]{2,}/i;
-var SENSITIVE_VALUE_REGEX = new RegExp(SENSITIVE_KEY_PATTERN.source, "gi");
-var SENSITIVE_KEY_REGEX = /^(password|passwd|token|secret|authorization|api_?key|credential|private_?key|access_?token|refresh_?token|database_url)$/i;
-function redactObject(obj, depth = 0, maxDepth = 15) {
-  if (depth > maxDepth || obj === null || obj === void 0) {
-    return obj;
-  }
-  if (typeof obj === "string") {
-    return obj.replace(SENSITIVE_VALUE_REGEX, "[REDACTED]");
-  }
-  if (typeof obj !== "object") {
-    return obj;
-  }
-  if (Array.isArray(obj)) {
-    return obj.map((item) => redactObject(item, depth + 1, maxDepth));
-  }
-  const redacted = {};
-  for (const [key, value] of Object.entries(obj)) {
-    if (SENSITIVE_KEY_REGEX.test(key)) {
-      redacted[key] = "[REDACTED]";
-    } else {
-      redacted[key] = redactObject(value, depth + 1, maxDepth);
-    }
-  }
-  return redacted;
-}
-
-// src/auth/scope-map.ts
-var toolScopeMap = /* @__PURE__ */ new Map();
-function registerToolScope(toolName, scope) {
-  toolScopeMap.set(toolName, scope);
-  if (!toolName.startsWith("sqlite_")) {
-    toolScopeMap.set(`sqlite_${toolName}`, scope);
-  } else {
-    toolScopeMap.set(toolName.slice(7), scope);
-  }
-}
-function getRequiredScope(toolName) {
-  return toolScopeMap.get(toolName) ?? SCOPES.ADMIN;
-}
-
-// src/utils/resource-annotations.ts
-var HIGH_PRIORITY = {
-  audience: ["user", "assistant"],
-  priority: 0.9
-};
-var MEDIUM_PRIORITY = {
-  audience: ["user", "assistant"],
-  priority: 0.6
-};
-var LOW_PRIORITY = {
-  audience: ["user", "assistant"],
-  priority: 0.4
-};
-var ASSISTANT_FOCUSED = {
-  audience: ["assistant"],
-  priority: 0.5
-};
 var ErrorResponseFields = z.object({
   error: z.string().optional().describe("Error message (human-readable)"),
   code: z.string().optional().describe("Error code (e.g. VALIDATION_ERROR, QUERY_ERROR)"),
@@ -719,7 +897,7 @@ var PragmaCompileOptionsSchema = z.object({
     "Optional filter pattern (case-insensitive substring match) to limit returned options"
   )
 });
-var PragmaDatabaseListSchema = z.object({});
+var PragmaDatabaseListSchema = z.object({}).strict();
 z.object({
   analyze: z.boolean().optional().default(true).describe("Run ANALYZE after VACUUM")
 });
@@ -768,7 +946,7 @@ var AuditSearchSchema = z.object({
   toTimestamp: z.string().optional().describe("Filter by end timestamp (ISO 8601)"),
   limit: z.preprocess(
     coerceNumber,
-    z.number().int().min(1).max(1e3).optional().default(50).describe("Maximum number of entries to return (default 50)")
+    z.number().int().min(1).max(1e3).optional().default(10).describe("Maximum number of entries to return (default 10)")
   ),
   offset: z.preprocess(
     coerceNumber,
@@ -782,14 +960,14 @@ var SqlDumpSchema = z.object({
 });
 var AuditListBackupsOutputSchema = z.object({
   success: z.boolean(),
-  snapshots: z.array(z.any()).optional(),
+  snapshots: z.array(z.unknown()).optional(),
   count: z.number().optional(),
   totalCount: z.number().optional(),
   _meta: z.object({ tokenEstimate: z.number() }).optional()
 }).extend(ErrorResponseFields.shape);
 var AuditGetBackupOutputSchema = z.object({
   success: z.boolean(),
-  metadata: z.any().optional(),
+  metadata: z.unknown().optional(),
   ddl: z.string().optional(),
   data: z.string().optional()
 }).extend(ErrorResponseFields.shape);
@@ -800,7 +978,7 @@ var AuditCleanupOutputSchema = z.object({
 }).extend(ErrorResponseFields.shape);
 var AuditDiffBackupOutputSchema = z.object({
   success: z.boolean(),
-  diffs: z.array(z.any()).optional(),
+  diffs: z.array(z.unknown()).optional(),
   snapshotTimestamp: z.string().optional(),
   snapshotTarget: z.string().optional()
 }).extend(ErrorResponseFields.shape);
@@ -813,7 +991,7 @@ var AuditRestoreBackupOutputSchema = z.object({
 }).extend(ErrorResponseFields.shape);
 var AuditSearchOutputSchema = z.object({
   success: z.boolean(),
-  entries: z.array(z.any()).optional(),
+  entries: z.array(z.unknown()).optional(),
   count: z.number().optional(),
   totalCount: z.number().optional()
 }).extend(ErrorResponseFields.shape);
@@ -984,4 +1162,22 @@ var WalOutputSchema = z.object({
   checkpointedPages: z.number().optional()
 }).extend(ErrorResponseFields.shape);
 
-export { ASSISTANT_FOCUSED, AnalyzeOutputSchema, AnalyzeSchema, AttachDatabaseOutputSchema, AttachDatabaseSchema, AuditCleanupOutputSchema, AuditDiffBackupOutputSchema, AuditGetBackupOutputSchema, AuditListBackupsOutputSchema, AuditListBackupsSchema, AuditRestoreBackupOutputSchema, AuditSearchOutputSchema, AuditSearchSchema, BackupOutputSchema, BackupSchema, DetachDatabaseOutputSchema, DetachDatabaseSchema, ErrorResponseFields, HIGH_PRIORITY, IndexStatsOutputSchema, IndexStatsSchema, IntegrityCheckOutputSchema, IntegrityCheckSchema, LOW_PRIORITY, MEDIUM_PRIORITY, NAME, OptimizeOutputSchema, OptimizeSchema, PragmaCompileOptionsOutputSchema, PragmaCompileOptionsSchema, PragmaDatabaseListOutputSchema, PragmaDatabaseListSchema, PragmaOptimizeOutputSchema, PragmaOptimizeSchema, PragmaSettingsOutputSchema, PragmaSettingsSchema, PragmaTableInfoOutputSchema, PragmaTableInfoSchema, READ_ONLY, ReindexOutputSchema, ReindexSchema, RestoreOutputSchema, RestoreSchema, SENSITIVE_KEY_PATTERN, SERVER_ICONS, SqlDumpOutputSchema, SqlDumpSchema, VERSION, VacuumIntoCopyOutputSchema, VacuumIntoCopySchema, VacuumOutputSchema, VerifyBackupOutputSchema, VerifyBackupSchema, WalOutputSchema, WalSchema, admin, adminFs, buildWhereClause, createColumnList, destructive, estimateTokens, getRequiredScope, getToolGroupIcon, idempotent, readOnly, redactObject, registerToolScope, sanitizeIdentifier, sanitizeWhereClause, validateAggregateFunction, validateIdentifier, validateJsonPath, validateSameDirPath, write, writeFs };
+// src/utils/resource-annotations.ts
+var HIGH_PRIORITY = {
+  audience: ["user", "assistant"],
+  priority: 0.9
+};
+var MEDIUM_PRIORITY = {
+  audience: ["user", "assistant"],
+  priority: 0.6
+};
+var LOW_PRIORITY = {
+  audience: ["user", "assistant"],
+  priority: 0.4
+};
+var ASSISTANT_FOCUSED = {
+  audience: ["assistant"],
+  priority: 0.5
+};
+
+export { ASSISTANT_FOCUSED, AnalyzeOutputSchema, AnalyzeSchema, AttachDatabaseOutputSchema, AttachDatabaseSchema, AuditCleanupOutputSchema, AuditDiffBackupOutputSchema, AuditGetBackupOutputSchema, AuditListBackupsOutputSchema, AuditListBackupsSchema, AuditRestoreBackupOutputSchema, AuditSearchOutputSchema, AuditSearchSchema, BackupOutputSchema, BackupSchema, DetachDatabaseOutputSchema, DetachDatabaseSchema, ErrorResponseFields, HIGH_PRIORITY, IndexStatsOutputSchema, IndexStatsSchema, IntegrityCheckOutputSchema, IntegrityCheckSchema, LOW_PRIORITY, MEDIUM_PRIORITY, NAME, OptimizeOutputSchema, OptimizeSchema, PragmaCompileOptionsOutputSchema, PragmaCompileOptionsSchema, PragmaDatabaseListOutputSchema, PragmaDatabaseListSchema, PragmaOptimizeOutputSchema, PragmaOptimizeSchema, PragmaSettingsOutputSchema, PragmaSettingsSchema, PragmaTableInfoOutputSchema, PragmaTableInfoSchema, READ_ONLY, ReindexOutputSchema, ReindexSchema, RestoreOutputSchema, RestoreSchema, SENSITIVE_KEY_PATTERN, SERVER_ICONS, SqlDumpOutputSchema, SqlDumpSchema, VERSION, VacuumIntoCopyOutputSchema, VacuumIntoCopySchema, VacuumOutputSchema, VerifyBackupOutputSchema, VerifyBackupSchema, WalOutputSchema, WalSchema, admin, adminFs, assertSafeIoPath, buildProgressContext, buildWhereClause, createColumnList, destructive, estimateTokens, getRequiredScope, getToolGroupIcon, idempotent, parseAllowedIoRoots, readOnly, redactObject, registerToolScope, sanitizeIdentifier, sanitizeWhereClause, sendProgress, streamResultRows, toSDK, validateAggregateFunction, validateIdentifier, validateJsonPath, validateSameDirPath, write, writeFs };