funifier-mcp 0.3.17 → 0.3.19

package/dist/mcp/tools/_scope-engine.js

@@ -0,0 +1,197 @@
+"use strict";
+/**
+ * Pure authorization engine mirroring SecurityFilter.doFilter from funifier-service.
+ * No I/O, no imports beyond types — fully unit-testable against a transcribed table.
+ *
+ * Source: SecurityFilter.java (funifier-service)
+ * Each rule carries a line reference so source drift can be detected via validate:skills claims.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MANUAL_REVIEW_TOKENS = void 0;
+exports.entityFull = entityFull;
+exports.verbFor = verbFor;
+exports.isPublicPath = isPublicPath;
+exports.evaluateScope = evaluateScope;
+exports.usedTokens = usedTokens;
+/**
+ * Non-path-auditable tokens: their usage cannot be proven or disproven from a path manifest.
+ * These are always classified `manual-review`, never `excess`.
+ */
+exports.MANUAL_REVIEW_TOKENS = new Set([
+    "cross_domain",
+    "read_encrypted_field_values",
+    "read_encrypted_player_password",
+    "write_upload",
+]);
+// SecurityFilter.java:108-151: paths that bypass the scope check entirely.
+// GET /v3/widget, /v3/global, /v3/system/global require no scope.
+// NOTE: this list is hardcoded by mirroring SecurityFilter source; validate via sourceClaims.
+const PUBLIC_GET_PREFIXES = ["/v3/widget", "/v3/global", "/v3/system/global"];
+/** SecurityFilter.java:85-86: strip "/v3/", replace "/" → "_". */
+function entityFull(path) {
+    const clean = path.split("?")[0];
+    const withoutV3 = clean.startsWith("/v3/") ? clean.slice(4) : clean.replace(/^\//, "");
+    return withoutV3.replace(/\//g, "_");
+}
+/** SecurityFilter.java:226-227: GET→read, POST/PUT→write, else lowercase. */
+function verbFor(method) {
+    if (method === "GET")
+        return "read";
+    if (method === "POST" || method === "PUT")
+        return "write";
+    return method.toLowerCase();
+}
+/** SecurityFilter.java:108-151: true when the path requires no scope. */
+function isPublicPath(method, path) {
+    const clean = path.split("?")[0];
+    if (method === "GET") {
+        for (const prefix of PUBLIC_GET_PREFIXES) {
+            if (clean === prefix || clean.startsWith(prefix + "/"))
+                return true;
+        }
+    }
+    return false;
+}
+/** SecurityFilter.java:223-224: remove spaces, split on comma, drop empty tokens. */
+function normalizeScope(scope) {
+    return scope.replace(/ /g, "").split(",").filter(Boolean);
+}
+/**
+ * Evaluate whether `scope` authorizes `method` on `path`, reproducing the exact decision
+ * tree of SecurityFilter.doFilter.
+ */
+function evaluateScope(scope, method, path) {
+    const cleanPath = path.split("?")[0];
+    // SecurityFilter.java:108-151: public-path bypass
+    if (isPublicPath(method, cleanPath)) {
+        return { allowed: true, rule: "public-path", requiredTokens: [] };
+    }
+    const verb = verbFor(method);
+    const entity = entityFull(cleanPath);
+    const tokens = normalizeScope(scope);
+    const isDatabase = cleanPath === "/v3/database" || cleanPath.startsWith("/v3/database/");
+    // SecurityFilter.java:259-263: special POST exceptions (checked before grammar)
+    if (method === "POST") {
+        if (cleanPath === "/v3/action/log") {
+            if (tokens.includes("write_actionlog")) {
+                return {
+                    allowed: true,
+                    rule: "special-actionlog",
+                    matchedToken: "write_actionlog",
+                    requiredTokens: ["write_actionlog"],
+                };
+            }
+            // write_actionlog absent — falls through to grammar
+        }
+        if (cleanPath === "/v3/mobile/device") {
+            // Any non-empty scope passes (SecurityFilter.java:262-263)
+            if (tokens.length > 0) {
+                return { allowed: true, rule: "special-mobile-device", matchedToken: tokens[0], requiredTokens: [] };
+            }
+        }
+    }
+    // SecurityFilter.java:230-253: grammar allow rules — {verb}_all, exact, fallback m1, m2
+    let grammarAllowed = false;
+    let grammarRule = "denied";
+    let grammarToken;
+    let grammarRequired = [];
+    // 1. {verb}_all (SecurityFilter.java:230)
+    const verbAll = `${verb}_all`;
+    if (tokens.includes(verbAll)) {
+        grammarAllowed = true;
+        grammarRule = "all";
+        grammarToken = verbAll;
+        grammarRequired = [verbAll];
+    }
+    // 2. Exact: {verb}_{entity_full} (SecurityFilter.java:234)
+    if (!grammarAllowed) {
+        const exactToken = `${verb}_${entity}`;
+        if (tokens.includes(exactToken)) {
+            grammarAllowed = true;
+            grammarRule = "exact";
+            grammarToken = exactToken;
+            grammarRequired = [exactToken];
+        }
+    }
+    // 3. Fallback minus-1: {verb}_{prefix}_all (SecurityFilter.java:238-246, allow_full_m1)
+    if (!grammarAllowed) {
+        const segs = entity.split("_");
+        if (segs.length > 1) {
+            const m1Token = `${verb}_${segs.slice(0, -1).join("_")}_all`;
+            if (tokens.includes(m1Token)) {
+                grammarAllowed = true;
+                grammarRule = "fallback-m1";
+                grammarToken = m1Token;
+                grammarRequired = [m1Token];
+            }
+        }
+    }
+    // 4. Fallback minus-2: {verb}_{prefix}_all (SecurityFilter.java:247-253, allow_full_m2)
+    //    Code stops at m2 despite the "menos n" comment — confirmed at source.
+    if (!grammarAllowed) {
+        const segs = entity.split("_");
+        if (segs.length > 2) {
+            const m2Token = `${verb}_${segs.slice(0, -2).join("_")}_all`;
+            if (tokens.includes(m2Token)) {
+                grammarAllowed = true;
+                grammarRule = "fallback-m2";
+                grammarToken = m2Token;
+                grammarRequired = [m2Token];
+            }
+        }
+    }
+    // DatabaseRest.java: every /v3/database handler additionally requires the literal
+    // "database" scope token regardless of which grammar rule would otherwise allow it.
+    // Applies to ALL verbs including GET — verified at all 13 DatabaseRest check sites.
+    if (isDatabase) {
+        if (grammarAllowed && !tokens.includes("database")) {
+            return {
+                allowed: false,
+                rule: "database-keyword-missing",
+                matchedToken: grammarToken,
+                requiredTokens: [...grammarRequired, "database"],
+            };
+        }
+        if (grammarAllowed) {
+            return {
+                allowed: true,
+                rule: grammarRule,
+                matchedToken: grammarToken,
+                requiredTokens: [...grammarRequired, "database"],
+            };
+        }
+        // Grammar denied on a database path: suggest exact token + database keyword
+        return {
+            allowed: false,
+            rule: "denied",
+            requiredTokens: [`${verb}_${entity}`, "database"],
+        };
+    }
+    if (grammarAllowed) {
+        return { allowed: true, rule: grammarRule, matchedToken: grammarToken, requiredTokens: grammarRequired };
+    }
+    return { allowed: false, rule: "denied", requiredTokens: [`${verb}_${entity}`] };
+}
+/**
+ * Returns the subset of tokens in `scope` that actually authorized at least one entry
+ * in `entries`. Used for excess-token calculation in the audit diff.
+ */
+function usedTokens(scope, entries) {
+    const tokens = normalizeScope(scope);
+    const used = new Set();
+    for (const entry of entries) {
+        const decision = evaluateScope(scope, entry.method, entry.path);
+        if (decision.allowed) {
+            if (decision.matchedToken)
+                used.add(decision.matchedToken);
+            // "database" is a co-required token for /v3/database paths — mark it used too
+            const cleanPath = entry.path.split("?")[0];
+            if ((cleanPath === "/v3/database" || cleanPath.startsWith("/v3/database/")) &&
+                tokens.includes("database")) {
+                used.add("database");
+            }
+        }
+    }
+    return used;
+}
+//# sourceMappingURL=_scope-engine.js.map

package/dist/mcp/tools/_scope-engine.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_scope-engine.js","sourceRoot":"","sources":["../../../src/mcp/tools/_scope-engine.ts"],"names":[],"mappings":";AAAA;;;;;;GAMG;;;AAsCH,gCAIC;AAGD,0BAIC;AAGD,oCAQC;AAWD,sCA0HC;AAMD,gCAuBC;AAzMD;;;GAGG;AACU,QAAA,oBAAoB,GAAwB,IAAI,GAAG,CAAC;IAC/D,cAAc;IACd,6BAA6B;IAC7B,gCAAgC;IAChC,cAAc;CACf,CAAC,CAAC;AAEH,2EAA2E;AAC3E,kEAAkE;AAClE,8FAA8F;AAC9F,MAAM,mBAAmB,GAAG,CAAC,YAAY,EAAE,YAAY,EAAE,mBAAmB,CAAC,CAAC;AAE9E,kEAAkE;AAClE,SAAgB,UAAU,CAAC,IAAY;IACrC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACjC,MAAM,SAAS,GAAG,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACvF,OAAO,SAAS,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;AACvC,CAAC;AAED,6EAA6E;AAC7E,SAAgB,OAAO,CAAC,MAAkB;IACxC,IAAI,MAAM,KAAK,KAAK;QAAE,OAAO,MAAM,CAAC;IACpC,IAAI,MAAM,KAAK,MAAM,IAAI,MAAM,KAAK,KAAK;QAAE,OAAO,OAAO,CAAC;IAC1D,OAAO,MAAM,CAAC,WAAW,EAAE,CAAC;AAC9B,CAAC;AAED,yEAAyE;AACzE,SAAgB,YAAY,CAAC,MAAkB,EAAE,IAAY;IAC3D,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACjC,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;QACrB,KAAK,MAAM,MAAM,IAAI,mBAAmB,EAAE,CAAC;YACzC,IAAI,KAAK,KAAK,MAAM,IAAI,KAAK,CAAC,UAAU,CAAC,MAAM,GAAG,GAAG,CAAC;gBAAE,OAAO,IAAI,CAAC;QACtE,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,qFAAqF;AACrF,SAAS,cAAc,CAAC,KAAa;IACnC,OAAO,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;AAC5D,CAAC;AAED;;;GAGG;AACH,SAAgB,aAAa,CAAC,KAAa,EAAE,MAAkB,EAAE,IAAY;IAC3E,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAErC,kDAAkD;IAClD,IAAI,YAAY,CAAC,MAAM,EAAE,SAAS,CAAC,EAAE,CAAC;QACpC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,aAAa,EAAE,cAAc,EAAE,EAAE,EAAE,CAAC;IACpE,CAAC;IAED,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC7B,MAAM,MAAM,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC;IACrC,MAAM,MAAM,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;IACrC,MAAM,UAAU,GAAG,SAAS,KAAK,cAAc,IAAI,SAAS,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC;IAEzF,gFAAgF;IAChF,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACtB,IAAI,SAAS,KAAK,gBAAgB,EAAE,CAAC;YACnC,IAAI,MAAM,CAAC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,CAAC;gBACvC,OAAO;oBACL,OAAO,EAAE,IAAI;oBACb,IAAI,EAAE,mBAAmB;oBACzB,YAAY,EAAE,iBAAiB;oBAC/B,cAAc,EAAE,CAAC,iBAAiB,CAAC;iBACpC,CAAC;YACJ,CAAC;YACD,oDAAoD;QACtD,CAAC;QACD,IAAI,SAAS,KAAK,mBAAmB,EAAE,CAAC;YACtC,2DAA2D;YAC3D,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACtB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,uBAAuB,EAAE,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,EAAE,EAAE,CAAC;YACvG,CAAC;QACH,CAAC;IACH,CAAC;IAED,wFAAwF;IACxF,IAAI,cAAc,GAAG,KAAK,CAAC;IAC3B,IAAI,WAAW,GAA0B,QAAQ,CAAC;IAClD,IAAI,YAAgC,CAAC;IACrC,IAAI,eAAe,GAAa,EAAE,CAAC;IAEnC,0CAA0C;IAC1C,MAAM,OAAO,GAAG,GAAG,IAAI,MAAM,CAAC;IAC9B,IAAI,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QAC7B,cAAc,GAAG,IAAI,CAAC;QACtB,WAAW,GAAG,KAAK,CAAC;QACpB,YAAY,GAAG,OAAO,CAAC;QACvB,eAAe,GAAG,CAAC,OAAO,CAAC,CAAC;IAC9B,CAAC;IAED,2DAA2D;IAC3D,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,MAAM,UAAU,GAAG,GAAG,IAAI,IAAI,MAAM,EAAE,CAAC;QACvC,IAAI,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;YAChC,cAAc,GAAG,IAAI,CAAC;YACtB,WAAW,GAAG,OAAO,CAAC;YACtB,YAAY,GAAG,UAAU,CAAC;YAC1B,eAAe,GAAG,CAAC,UAAU,CAAC,CAAC;QACjC,CAAC;IACH,CAAC;IAED,wFAAwF;IACxF,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACpB,MAAM,OAAO,GAAG,GAAG,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC;YAC7D,IAAI,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC7B,cAAc,GAAG,IAAI,CAAC;gBACtB,WAAW,GAAG,aAAa,CAAC;gBAC5B,YAAY,GAAG,OAAO,CAAC;gBACvB,eAAe,GAAG,CAAC,OAAO,CAAC,CAAC;YAC9B,CAAC;QACH,CAAC;IACH,CAAC;IAED,wFAAwF;IACxF,2EAA2E;IAC3E,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACpB,MAAM,OAAO,GAAG,GAAG,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC;YAC7D,IAAI,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC7B,cAAc,GAAG,IAAI,CAAC;gBACtB,WAAW,GAAG,aAAa,CAAC;gBAC5B,YAAY,GAAG,OAAO,CAAC;gBACvB,eAAe,GAAG,CAAC,OAAO,CAAC,CAAC;YAC9B,CAAC;QACH,CAAC;IACH,CAAC;IAED,kFAAkF;IAClF,oFAAoF;IACpF,oFAAoF;IACpF,IAAI,UAAU,EAAE,CAAC;QACf,IAAI,cAAc,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;YACnD,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,IAAI,EAAE,0BAA0B;gBAChC,YAAY,EAAE,YAAY;gBAC1B,cAAc,EAAE,CAAC,GAAG,eAAe,EAAE,UAAU,CAAC;aACjD,CAAC;QACJ,CAAC;QACD,IAAI,cAAc,EAAE,CAAC;YACnB,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,IAAI,EAAE,WAAW;gBACjB,YAAY,EAAE,YAAY;gBAC1B,cAAc,EAAE,CAAC,GAAG,eAAe,EAAE,UAAU,CAAC;aACjD,CAAC;QACJ,CAAC;QACD,4EAA4E;QAC5E,OAAO;YACL,OAAO,EAAE,KAAK;YACd,IAAI,EAAE,QAAQ;YACd,cAAc,EAAE,CAAC,GAAG,IAAI,IAAI,MAAM,EAAE,EAAE,UAAU,CAAC;SAClD,CAAC;IACJ,CAAC;IAED,IAAI,cAAc,EAAE,CAAC;QACnB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,YAAY,EAAE,YAAY,EAAE,cAAc,EAAE,eAAe,EAAE,CAAC;IAC3G,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,cAAc,EAAE,CAAC,GAAG,IAAI,IAAI,MAAM,EAAE,CAAC,EAAE,CAAC;AACnF,CAAC;AAED;;;GAGG;AACH,SAAgB,UAAU,CACxB,KAAa,EACb,OAA4D;IAE5D,MAAM,MAAM,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;IACrC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAE/B,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,QAAQ,GAAG,aAAa,CAAC,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QAChE,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;YACrB,IAAI,QAAQ,CAAC,YAAY;gBAAE,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;YAC3D,8EAA8E;YAC9E,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YAC3C,IACE,CAAC,SAAS,KAAK,cAAc,IAAI,SAAS,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC;gBACvE,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,EAC3B,CAAC;gBACD,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;YACvB,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/mcp/tools/_scope-engine.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=_scope-engine.test.d.ts.map

package/dist/mcp/tools/_scope-engine.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"_scope-engine.test.d.ts","sourceRoot":"","sources":["../../../src/mcp/tools/_scope-engine.test.ts"],"names":[],"mappings":""}

package/dist/mcp/tools/_scope-engine.test.js

@@ -0,0 +1,241 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const vitest_1 = require("vitest");
+const _scope_engine_1 = require("./_scope-engine");
+// ─── entityFull ───────────────────────────────────────────────────────────────
+(0, vitest_1.describe)("entityFull", () => {
+    (0, vitest_1.it)("strips /v3/ and replaces / with _", () => {
+        (0, vitest_1.expect)((0, _scope_engine_1.entityFull)("/v3/database/mycoll/aggregate")).toBe("database_mycoll_aggregate");
+        (0, vitest_1.expect)((0, _scope_engine_1.entityFull)("/v3/action/log")).toBe("action_log");
+        (0, vitest_1.expect)((0, _scope_engine_1.entityFull)("/v3/game")).toBe("game");
+        (0, vitest_1.expect)((0, _scope_engine_1.entityFull)("/v3/game/level/experience")).toBe("game_level_experience");
+    });
+    (0, vitest_1.it)("strips query string before processing", () => {
+        (0, vitest_1.expect)((0, _scope_engine_1.entityFull)("/v3/action/log?limit=10")).toBe("action_log");
+    });
+});
+// ─── verbFor ─────────────────────────────────────────────────────────────────
+(0, vitest_1.describe)("verbFor (SecurityFilter.java:226-227)", () => {
+    (0, vitest_1.it)("maps GET → read", () => (0, vitest_1.expect)((0, _scope_engine_1.verbFor)("GET")).toBe("read"));
+    (0, vitest_1.it)("maps POST → write", () => (0, vitest_1.expect)((0, _scope_engine_1.verbFor)("POST")).toBe("write"));
+    (0, vitest_1.it)("maps PUT → write", () => (0, vitest_1.expect)((0, _scope_engine_1.verbFor)("PUT")).toBe("write"));
+    (0, vitest_1.it)("maps DELETE → delete", () => (0, vitest_1.expect)((0, _scope_engine_1.verbFor)("DELETE")).toBe("delete"));
+    (0, vitest_1.it)("lowercases other methods", () => (0, vitest_1.expect)((0, _scope_engine_1.verbFor)("PATCH")).toBe("patch"));
+});
+// ─── isPublicPath ─────────────────────────────────────────────────────────────
+(0, vitest_1.describe)("isPublicPath (SecurityFilter.java:108-151)", () => {
+    (0, vitest_1.it)("GET /v3/widget is public", () => (0, vitest_1.expect)((0, _scope_engine_1.isPublicPath)("GET", "/v3/widget")).toBe(true));
+    (0, vitest_1.it)("GET /v3/widget/my-widget is public (prefix match)", () => (0, vitest_1.expect)((0, _scope_engine_1.isPublicPath)("GET", "/v3/widget/my-widget")).toBe(true));
+    (0, vitest_1.it)("GET /v3/global is public", () => (0, vitest_1.expect)((0, _scope_engine_1.isPublicPath)("GET", "/v3/global")).toBe(true));
+    (0, vitest_1.it)("GET /v3/system/global is public", () => (0, vitest_1.expect)((0, _scope_engine_1.isPublicPath)("GET", "/v3/system/global")).toBe(true));
+    (0, vitest_1.it)("POST /v3/widget is NOT public (method mismatch)", () => (0, vitest_1.expect)((0, _scope_engine_1.isPublicPath)("POST", "/v3/widget")).toBe(false));
+    (0, vitest_1.it)("GET /v3/game is not a public path", () => (0, vitest_1.expect)((0, _scope_engine_1.isPublicPath)("GET", "/v3/game")).toBe(false));
+});
+// ─── evaluateScope — grammar rules ───────────────────────────────────────────
+(0, vitest_1.describe)("evaluateScope — public-path bypass", () => {
+    (0, vitest_1.it)("allows GET /v3/widget regardless of scope", () => {
+        const d = (0, _scope_engine_1.evaluateScope)("", "GET", "/v3/widget");
+        (0, vitest_1.expect)(d.allowed).toBe(true);
+        (0, vitest_1.expect)(d.rule).toBe("public-path");
+    });
+    (0, vitest_1.it)("allows GET /v3/global regardless of scope", () => {
+        const d = (0, _scope_engine_1.evaluateScope)("", "GET", "/v3/global");
+        (0, vitest_1.expect)(d.allowed).toBe(true);
+        (0, vitest_1.expect)(d.rule).toBe("public-path");
+    });
+});
+(0, vitest_1.describe)("evaluateScope — _all rule (SecurityFilter.java:230)", () => {
+    (0, vitest_1.it)("read_all allows GET on any non-database path", () => {
+        const d = (0, _scope_engine_1.evaluateScope)("read_all", "GET", "/v3/game/level");
+        (0, vitest_1.expect)(d.allowed).toBe(true);
+        (0, vitest_1.expect)(d.rule).toBe("all");
+        (0, vitest_1.expect)(d.matchedToken).toBe("read_all");
+    });
+    (0, vitest_1.it)("write_all allows POST on any non-database path", () => {
+        const d = (0, _scope_engine_1.evaluateScope)("write_all", "POST", "/v3/action/log");
+        // /v3/action/log POST: write_actionlog fires first — but write_all doesn't include write_actionlog, so grammar fires
+        // Actually write_all should be checked in grammar, but /v3/action/log is a special POST:
+        // write_actionlog is checked first; if not present, grammar runs. write_all would match grammar.
+        // BUT wait: the special-actionlog check only fires when write_actionlog IS present.
+        // So with scope=write_all, grammar check runs: write_all → allowed via "all" rule.
+        (0, vitest_1.expect)(d.allowed).toBe(true);
+        (0, vitest_1.expect)(d.rule).toBe("all");
+    });
+    (0, vitest_1.it)("delete_all allows DELETE on any non-database path", () => {
+        const d = (0, _scope_engine_1.evaluateScope)("delete_all", "DELETE", "/v3/game/level");
+        (0, vitest_1.expect)(d.allowed).toBe(true);
+        (0, vitest_1.expect)(d.rule).toBe("all");
+        (0, vitest_1.expect)(d.matchedToken).toBe("delete_all");
+    });
+});
+(0, vitest_1.describe)("evaluateScope — exact match (SecurityFilter.java:234)", () => {
+    (0, vitest_1.it)("read_action_log allows GET /v3/action/log", () => {
+        const d = (0, _scope_engine_1.evaluateScope)("read_action_log", "GET", "/v3/action/log");
+        (0, vitest_1.expect)(d.allowed).toBe(true);
+        (0, vitest_1.expect)(d.rule).toBe("exact");
+        (0, vitest_1.expect)(d.matchedToken).toBe("read_action_log");
+    });
+    (0, vitest_1.it)("write_game_level allows POST /v3/game/level", () => {
+        const d = (0, _scope_engine_1.evaluateScope)("write_game_level", "POST", "/v3/game/level");
+        (0, vitest_1.expect)(d.allowed).toBe(true);
+        (0, vitest_1.expect)(d.rule).toBe("exact");
+    });
+    (0, vitest_1.it)("denies when the exact token is absent", () => {
+        const d = (0, _scope_engine_1.evaluateScope)("read_game", "GET", "/v3/game/level");
+        (0, vitest_1.expect)(d.allowed).toBe(false);
+    });
+});
+(0, vitest_1.describe)("evaluateScope — fallback minus-1 (allow_full_m1, SecurityFilter.java:238-246)", () => {
+    (0, vitest_1.it)("read_game_all allows GET /v3/game/level (entity=game_level, m1=game_all)", () => {
+        const d = (0, _scope_engine_1.evaluateScope)("read_game_all", "GET", "/v3/game/level");
+        (0, vitest_1.expect)(d.allowed).toBe(true);
+        (0, vitest_1.expect)(d.rule).toBe("fallback-m1");
+        (0, vitest_1.expect)(d.matchedToken).toBe("read_game_all");
+    });
+    (0, vitest_1.it)("read_game_level_all allows GET /v3/game/level/experience (m1=game_level_all)", () => {
+        const d = (0, _scope_engine_1.evaluateScope)("read_game_level_all", "GET", "/v3/game/level/experience");
+        (0, vitest_1.expect)(d.allowed).toBe(true);
+        (0, vitest_1.expect)(d.rule).toBe("fallback-m1");
+    });
+});
+(0, vitest_1.describe)("evaluateScope — fallback minus-2 (allow_full_m2, SecurityFilter.java:247-253)", () => {
+    (0, vitest_1.it)("read_game_all allows GET /v3/game/level/experience (entity=game_level_experience, m2=game_all)", () => {
+        const d = (0, _scope_engine_1.evaluateScope)("read_game_all", "GET", "/v3/game/level/experience");
+        (0, vitest_1.expect)(d.allowed).toBe(true);
+        (0, vitest_1.expect)(d.rule).toBe("fallback-m2");
+        (0, vitest_1.expect)(d.matchedToken).toBe("read_game_all");
+    });
+    (0, vitest_1.it)("read_database_all does NOT authorize GET /v3/database/coll/find without database keyword (m2 denied first by db-keyword)", () => {
+        // read_database_all would be m1 for database_coll_find (entity has 3 segments)
+        // But /v3/database path requires "database" keyword regardless of grammar
+        const d = (0, _scope_engine_1.evaluateScope)("read_database_all", "GET", "/v3/database/coll/find");
+        (0, vitest_1.expect)(d.allowed).toBe(false);
+        (0, vitest_1.expect)(d.rule).toBe("database-keyword-missing");
+    });
+});
+(0, vitest_1.describe)("evaluateScope — beyond minus-2 denied", () => {
+    (0, vitest_1.it)("read_a_all does NOT authorize GET /v3/a/b/c/d (entity=a_b_c_d, m2=a_b, no token)", () => {
+        // m1 would be read_a_b_c_all, m2 would be read_a_b_all — neither in scope
+        const d = (0, _scope_engine_1.evaluateScope)("read_a_all", "GET", "/v3/a/b/c/d");
+        (0, vitest_1.expect)(d.allowed).toBe(false);
+        (0, vitest_1.expect)(d.rule).toBe("denied");
+    });
+});
+// ─── evaluateScope — special POST exceptions (SecurityFilter.java:259-263) ───
+(0, vitest_1.describe)("evaluateScope — special POST exceptions", () => {
+    (0, vitest_1.it)("POST /v3/action/log with write_actionlog → special-actionlog (PSEC-06)", () => {
+        const d = (0, _scope_engine_1.evaluateScope)("write_actionlog", "POST", "/v3/action/log");
+        (0, vitest_1.expect)(d.allowed).toBe(true);
+        (0, vitest_1.expect)(d.rule).toBe("special-actionlog");
+        (0, vitest_1.expect)(d.matchedToken).toBe("write_actionlog");
+        (0, vitest_1.expect)(d.requiredTokens).toContain("write_actionlog");
+    });
+    (0, vitest_1.it)("POST /v3/action/log without write_actionlog falls through to grammar (denied if no other token)", () => {
+        const d = (0, _scope_engine_1.evaluateScope)("read_all", "POST", "/v3/action/log");
+        // grammar: write_all not present, exact write_action_log not present... read_all is for GET.
+        // Actually: verb for POST is "write". write_all not in scope. exact write_action_log not in scope.
+        // Falls through → denied (read_all doesn't authorize write)
+        (0, vitest_1.expect)(d.allowed).toBe(false);
+    });
+    (0, vitest_1.it)("POST /v3/mobile/device with any non-empty scope → special-mobile-device", () => {
+        const d = (0, _scope_engine_1.evaluateScope)("read_all", "POST", "/v3/mobile/device");
+        (0, vitest_1.expect)(d.allowed).toBe(true);
+        (0, vitest_1.expect)(d.rule).toBe("special-mobile-device");
+    });
+    (0, vitest_1.it)("POST /v3/mobile/device with empty scope → denied (falls through to grammar)", () => {
+        const d = (0, _scope_engine_1.evaluateScope)("", "POST", "/v3/mobile/device");
+        (0, vitest_1.expect)(d.allowed).toBe(false);
+    });
+});
+// ─── evaluateScope — scope normalization (SecurityFilter.java:223-224) ────────
+(0, vitest_1.describe)("evaluateScope — scope normalization", () => {
+    (0, vitest_1.it)("removes spaces before splitting (space-separated scope string)", () => {
+        const d = (0, _scope_engine_1.evaluateScope)("read_all, write_all", "GET", "/v3/game");
+        (0, vitest_1.expect)(d.allowed).toBe(true);
+        (0, vitest_1.expect)(d.matchedToken).toBe("read_all");
+    });
+    (0, vitest_1.it)("handles duplicate tokens without false denials", () => {
+        const d = (0, _scope_engine_1.evaluateScope)("read_game,read_game,read_all", "GET", "/v3/game");
+        (0, vitest_1.expect)(d.allowed).toBe(true);
+    });
+});
+// ─── T6: database keyword rule (DatabaseRest.java, all 13 handler sites) ─────
+(0, vitest_1.describe)("evaluateScope — database keyword (PSEC-07)", () => {
+    (0, vitest_1.it)("GET /v3/database/coll with read_all but without database keyword → database-keyword-missing", () => {
+        const d = (0, _scope_engine_1.evaluateScope)("read_all", "GET", "/v3/database/coll");
+        (0, vitest_1.expect)(d.allowed).toBe(false);
+        (0, vitest_1.expect)(d.rule).toBe("database-keyword-missing");
+        (0, vitest_1.expect)(d.requiredTokens).toContain("database");
+        (0, vitest_1.expect)(d.requiredTokens).toContain("read_all");
+    });
+    (0, vitest_1.it)("GET /v3/database/coll with read_all AND database keyword → allowed", () => {
+        const d = (0, _scope_engine_1.evaluateScope)("read_all,database", "GET", "/v3/database/coll");
+        (0, vitest_1.expect)(d.allowed).toBe(true);
+        (0, vitest_1.expect)(d.requiredTokens).toContain("database");
+        (0, vitest_1.expect)(d.requiredTokens).toContain("read_all");
+    });
+    (0, vitest_1.it)("POST /v3/database/coll with write_all but without database → database-keyword-missing", () => {
+        const d = (0, _scope_engine_1.evaluateScope)("write_all", "POST", "/v3/database/coll");
+        (0, vitest_1.expect)(d.allowed).toBe(false);
+        (0, vitest_1.expect)(d.rule).toBe("database-keyword-missing");
+    });
+    (0, vitest_1.it)("POST /v3/database/coll with write_all AND database → allowed", () => {
+        const d = (0, _scope_engine_1.evaluateScope)("write_all,database", "POST", "/v3/database/coll");
+        (0, vitest_1.expect)(d.allowed).toBe(true);
+    });
+    (0, vitest_1.it)("DELETE /v3/database/coll with delete_all AND database → allowed", () => {
+        const d = (0, _scope_engine_1.evaluateScope)("delete_all,database", "DELETE", "/v3/database/coll");
+        (0, vitest_1.expect)(d.allowed).toBe(true);
+    });
+    (0, vitest_1.it)("GET /v3/database/coll/aggregate denied when grammar itself denies (suggests entity token + database)", () => {
+        const d = (0, _scope_engine_1.evaluateScope)("database", "GET", "/v3/database/coll/aggregate");
+        (0, vitest_1.expect)(d.allowed).toBe(false);
+        (0, vitest_1.expect)(d.rule).toBe("denied");
+        (0, vitest_1.expect)(d.requiredTokens).toContain("database");
+    });
+    (0, vitest_1.it)("non-database path is unaffected by database keyword presence/absence", () => {
+        const d = (0, _scope_engine_1.evaluateScope)("read_all", "GET", "/v3/game");
+        (0, vitest_1.expect)(d.allowed).toBe(true);
+        (0, vitest_1.expect)(d.rule).not.toBe("database-keyword-missing");
+    });
+});
+// ─── T6: usedTokens ──────────────────────────────────────────────────────────
+(0, vitest_1.describe)("usedTokens", () => {
+    (0, vitest_1.it)("returns empty set when no entries match", () => {
+        const used = (0, _scope_engine_1.usedTokens)("read_all", [{ method: "POST", path: "/v3/game" }]);
+        // POST needs write_* not read_*
+        (0, vitest_1.expect)(used.size).toBe(0);
+    });
+    (0, vitest_1.it)("attributes read_all when it authorizes a GET entry", () => {
+        const used = (0, _scope_engine_1.usedTokens)("read_all,write_all", [{ method: "GET", path: "/v3/game/level" }]);
+        (0, vitest_1.expect)(used.has("read_all")).toBe(true);
+        (0, vitest_1.expect)(used.has("write_all")).toBe(false);
+    });
+    (0, vitest_1.it)("attributes both grammar token and 'database' for /v3/database entries", () => {
+        const used = (0, _scope_engine_1.usedTokens)("read_all,database", [{ method: "GET", path: "/v3/database/coll" }]);
+        (0, vitest_1.expect)(used.has("read_all")).toBe(true);
+        (0, vitest_1.expect)(used.has("database")).toBe(true);
+    });
+    (0, vitest_1.it)("does not attribute database when path is not /v3/database", () => {
+        const used = (0, _scope_engine_1.usedTokens)("read_all,database", [{ method: "GET", path: "/v3/game" }]);
+        (0, vitest_1.expect)(used.has("database")).toBe(false);
+    });
+    (0, vitest_1.it)("handles multiple entries across different tokens", () => {
+        const used = (0, _scope_engine_1.usedTokens)("read_all,write_game,database", [
+            { method: "GET", path: "/v3/game" },
+            { method: "POST", path: "/v3/game" },
+        ]);
+        (0, vitest_1.expect)(used.has("read_all")).toBe(true);
+        (0, vitest_1.expect)(used.has("write_game")).toBe(true);
+    });
+});
+// ─── MANUAL_REVIEW_TOKENS ─────────────────────────────────────────────────────
+(0, vitest_1.describe)("MANUAL_REVIEW_TOKENS", () => {
+    (0, vitest_1.it)("includes cross_domain, read_encrypted_field_values, read_encrypted_player_password, write_upload", () => {
+        (0, vitest_1.expect)(_scope_engine_1.MANUAL_REVIEW_TOKENS.has("cross_domain")).toBe(true);
+        (0, vitest_1.expect)(_scope_engine_1.MANUAL_REVIEW_TOKENS.has("read_encrypted_field_values")).toBe(true);
+        (0, vitest_1.expect)(_scope_engine_1.MANUAL_REVIEW_TOKENS.has("read_encrypted_player_password")).toBe(true);
+        (0, vitest_1.expect)(_scope_engine_1.MANUAL_REVIEW_TOKENS.has("write_upload")).toBe(true);
+    });
+});
+//# sourceMappingURL=_scope-engine.test.js.map

package/dist/mcp/tools/_scope-engine.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_scope-engine.test.js","sourceRoot":"","sources":["../../../src/mcp/tools/_scope-engine.test.ts"],"names":[],"mappings":";;AAAA,mCAA8C;AAC9C,mDAOyB;AAEzB,iFAAiF;AAEjF,IAAA,iBAAQ,EAAC,YAAY,EAAE,GAAG,EAAE;IAC1B,IAAA,WAAE,EAAC,mCAAmC,EAAE,GAAG,EAAE;QAC3C,IAAA,eAAM,EAAC,IAAA,0BAAU,EAAC,+BAA+B,CAAC,CAAC,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;QACtF,IAAA,eAAM,EAAC,IAAA,0BAAU,EAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACxD,IAAA,eAAM,EAAC,IAAA,0BAAU,EAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC5C,IAAA,eAAM,EAAC,IAAA,0BAAU,EAAC,2BAA2B,CAAC,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;IAChF,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,uCAAuC,EAAE,GAAG,EAAE;QAC/C,IAAA,eAAM,EAAC,IAAA,0BAAU,EAAC,yBAAyB,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACnE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,gFAAgF;AAEhF,IAAA,iBAAQ,EAAC,uCAAuC,EAAE,GAAG,EAAE;IACrD,IAAA,WAAE,EAAC,iBAAiB,EAAE,GAAG,EAAE,CAAC,IAAA,eAAM,EAAC,IAAA,uBAAO,EAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;IACjE,IAAA,WAAE,EAAC,mBAAmB,EAAE,GAAG,EAAE,CAAC,IAAA,eAAM,EAAC,IAAA,uBAAO,EAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;IACrE,IAAA,WAAE,EAAC,kBAAkB,EAAE,GAAG,EAAE,CAAC,IAAA,eAAM,EAAC,IAAA,uBAAO,EAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;IACnE,IAAA,WAAE,EAAC,sBAAsB,EAAE,GAAG,EAAE,CAAC,IAAA,eAAM,EAAC,IAAA,uBAAO,EAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC3E,IAAA,WAAE,EAAC,0BAA0B,EAAE,GAAG,EAAE,CAAC,IAAA,eAAM,EAAC,IAAA,uBAAO,EAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;AAC/E,CAAC,CAAC,CAAC;AAEH,iFAAiF;AAEjF,IAAA,iBAAQ,EAAC,4CAA4C,EAAE,GAAG,EAAE;IAC1D,IAAA,WAAE,EAAC,0BAA0B,EAAE,GAAG,EAAE,CAAC,IAAA,eAAM,EAAC,IAAA,4BAAY,EAAC,KAAK,EAAE,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAC3F,IAAA,WAAE,EAAC,mDAAmD,EAAE,GAAG,EAAE,CAAC,IAAA,eAAM,EAAC,IAAA,4BAAY,EAAC,KAAK,EAAE,sBAAsB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAC9H,IAAA,WAAE,EAAC,0BAA0B,EAAE,GAAG,EAAE,CAAC,IAAA,eAAM,EAAC,IAAA,4BAAY,EAAC,KAAK,EAAE,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAC3F,IAAA,WAAE,EAAC,iCAAiC,EAAE,GAAG,EAAE,CAAC,IAAA,eAAM,EAAC,IAAA,4BAAY,EAAC,KAAK,EAAE,mBAAmB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IACzG,IAAA,WAAE,EAAC,iDAAiD,EAAE,GAAG,EAAE,CAAC,IAAA,eAAM,EAAC,IAAA,4BAAY,EAAC,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IACpH,IAAA,WAAE,EAAC,mCAAmC,EAAE,GAAG,EAAE,CAAC,IAAA,eAAM,EAAC,IAAA,4BAAY,EAAC,KAAK,EAAE,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;AACrG,CAAC,CAAC,CAAC;AAEH,gFAAgF;AAEhF,IAAA,iBAAQ,EAAC,oCAAoC,EAAE,GAAG,EAAE;IAClD,IAAA,WAAE,EAAC,2CAA2C,EAAE,GAAG,EAAE;QACnD,MAAM,CAAC,GAAG,IAAA,6BAAa,EAAC,EAAE,EAAE,KAAK,EAAE,YAAY,CAAC,CAAC;QACjD,IAAA,eAAM,EAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7B,IAAA,eAAM,EAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,2CAA2C,EAAE,GAAG,EAAE;QACnD,MAAM,CAAC,GAAG,IAAA,6BAAa,EAAC,EAAE,EAAE,KAAK,EAAE,YAAY,CAAC,CAAC;QACjD,IAAA,eAAM,EAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7B,IAAA,eAAM,EAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,IAAA,iBAAQ,EAAC,qDAAqD,EAAE,GAAG,EAAE;IACnE,IAAA,WAAE,EAAC,8CAA8C,EAAE,GAAG,EAAE;QACtD,MAAM,CAAC,GAAG,IAAA,6BAAa,EAAC,UAAU,EAAE,KAAK,EAAE,gBAAgB,CAAC,CAAC;QAC7D,IAAA,eAAM,EAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7B,IAAA,eAAM,EAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC3B,IAAA,eAAM,EAAC,CAAC,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,gDAAgD,EAAE,GAAG,EAAE;QACxD,MAAM,CAAC,GAAG,IAAA,6BAAa,EAAC,WAAW,EAAE,MAAM,EAAE,gBAAgB,CAAC,CAAC;QAC/D,qHAAqH;QACrH,yFAAyF;QACzF,iGAAiG;QACjG,oFAAoF;QACpF,mFAAmF;QACnF,IAAA,eAAM,EAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7B,IAAA,eAAM,EAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC7B,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,mDAAmD,EAAE,GAAG,EAAE;QAC3D,MAAM,CAAC,GAAG,IAAA,6BAAa,EAAC,YAAY,EAAE,QAAQ,EAAE,gBAAgB,CAAC,CAAC;QAClE,IAAA,eAAM,EAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7B,IAAA,eAAM,EAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC3B,IAAA,eAAM,EAAC,CAAC,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,IAAA,iBAAQ,EAAC,uDAAuD,EAAE,GAAG,EAAE;IACrE,IAAA,WAAE,EAAC,2CAA2C,EAAE,GAAG,EAAE;QACnD,MAAM,CAAC,GAAG,IAAA,6BAAa,EAAC,iBAAiB,EAAE,KAAK,EAAE,gBAAgB,CAAC,CAAC;QACpE,IAAA,eAAM,EAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7B,IAAA,eAAM,EAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC7B,IAAA,eAAM,EAAC,CAAC,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,6CAA6C,EAAE,GAAG,EAAE;QACrD,MAAM,CAAC,GAAG,IAAA,6BAAa,EAAC,kBAAkB,EAAE,MAAM,EAAE,gBAAgB,CAAC,CAAC;QACtE,IAAA,eAAM,EAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7B,IAAA,eAAM,EAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC/B,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,uCAAuC,EAAE,GAAG,EAAE;QAC/C,MAAM,CAAC,GAAG,IAAA,6BAAa,EAAC,WAAW,EAAE,KAAK,EAAE,gBAAgB,CAAC,CAAC;QAC9D,IAAA,eAAM,EAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,IAAA,iBAAQ,EAAC,+EAA+E,EAAE,GAAG,EAAE;IAC7F,IAAA,WAAE,EAAC,0EAA0E,EAAE,GAAG,EAAE;QAClF,MAAM,CAAC,GAAG,IAAA,6BAAa,EAAC,eAAe,EAAE,KAAK,EAAE,gBAAgB,CAAC,CAAC;QAClE,IAAA,eAAM,EAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7B,IAAA,eAAM,EAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QACnC,IAAA,eAAM,EAAC,CAAC,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,8EAA8E,EAAE,GAAG,EAAE;QACtF,MAAM,CAAC,GAAG,IAAA,6BAAa,EAAC,qBAAqB,EAAE,KAAK,EAAE,2BAA2B,CAAC,CAAC;QACnF,IAAA,eAAM,EAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7B,IAAA,eAAM,EAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,IAAA,iBAAQ,EAAC,+EAA+E,EAAE,GAAG,EAAE;IAC7F,IAAA,WAAE,EAAC,gGAAgG,EAAE,GAAG,EAAE;QACxG,MAAM,CAAC,GAAG,IAAA,6BAAa,EAAC,eAAe,EAAE,KAAK,EAAE,2BAA2B,CAAC,CAAC;QAC7E,IAAA,eAAM,EAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7B,IAAA,eAAM,EAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QACnC,IAAA,eAAM,EAAC,CAAC,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,0HAA0H,EAAE,GAAG,EAAE;QAClI,+EAA+E;QAC/E,0EAA0E;QAC1E,MAAM,CAAC,GAAG,IAAA,6BAAa,EAAC,mBAAmB,EAAE,KAAK,EAAE,wBAAwB,CAAC,CAAC;QAC9E,IAAA,eAAM,EAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC9B,IAAA,eAAM,EAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,IAAA,iBAAQ,EAAC,uCAAuC,EAAE,GAAG,EAAE;IACrD,IAAA,WAAE,EAAC,kFAAkF,EAAE,GAAG,EAAE;QAC1F,0EAA0E;QAC1E,MAAM,CAAC,GAAG,IAAA,6BAAa,EAAC,YAAY,EAAE,KAAK,EAAE,aAAa,CAAC,CAAC;QAC5D,IAAA,eAAM,EAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC9B,IAAA,eAAM,EAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAChC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,gFAAgF;AAEhF,IAAA,iBAAQ,EAAC,yCAAyC,EAAE,GAAG,EAAE;IACvD,IAAA,WAAE,EAAC,wEAAwE,EAAE,GAAG,EAAE;QAChF,MAAM,CAAC,GAAG,IAAA,6BAAa,EAAC,iBAAiB,EAAE,MAAM,EAAE,gBAAgB,CAAC,CAAC;QACrE,IAAA,eAAM,EAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7B,IAAA,eAAM,EAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;QACzC,IAAA,eAAM,EAAC,CAAC,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QAC/C,IAAA,eAAM,EAAC,CAAC,CAAC,cAAc,CAAC,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,iGAAiG,EAAE,GAAG,EAAE;QACzG,MAAM,CAAC,GAAG,IAAA,6BAAa,EAAC,UAAU,EAAE,MAAM,EAAE,gBAAgB,CAAC,CAAC;QAC9D,6FAA6F;QAC7F,mGAAmG;QACnG,4DAA4D;QAC5D,IAAA,eAAM,EAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChC,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,yEAAyE,EAAE,GAAG,EAAE;QACjF,MAAM,CAAC,GAAG,IAAA,6BAAa,EAAC,UAAU,EAAE,MAAM,EAAE,mBAAmB,CAAC,CAAC;QACjE,IAAA,eAAM,EAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7B,IAAA,eAAM,EAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,6EAA6E,EAAE,GAAG,EAAE;QACrF,MAAM,CAAC,GAAG,IAAA,6BAAa,EAAC,EAAE,EAAE,MAAM,EAAE,mBAAmB,CAAC,CAAC;QACzD,IAAA,eAAM,EAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,iFAAiF;AAEjF,IAAA,iBAAQ,EAAC,qCAAqC,EAAE,GAAG,EAAE;IACnD,IAAA,WAAE,EAAC,gEAAgE,EAAE,GAAG,EAAE;QACxE,MAAM,CAAC,GAAG,IAAA,6BAAa,EAAC,qBAAqB,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;QAClE,IAAA,eAAM,EAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7B,IAAA,eAAM,EAAC,CAAC,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,gDAAgD,EAAE,GAAG,EAAE;QACxD,MAAM,CAAC,GAAG,IAAA,6BAAa,EAAC,8BAA8B,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;QAC3E,IAAA,eAAM,EAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC/B,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,gFAAgF;AAEhF,IAAA,iBAAQ,EAAC,4CAA4C,EAAE,GAAG,EAAE;IAC1D,IAAA,WAAE,EAAC,6FAA6F,EAAE,GAAG,EAAE;QACrG,MAAM,CAAC,GAAG,IAAA,6BAAa,EAAC,UAAU,EAAE,KAAK,EAAE,mBAAmB,CAAC,CAAC;QAChE,IAAA,eAAM,EAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC9B,IAAA,eAAM,EAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;QAChD,IAAA,eAAM,EAAC,CAAC,CAAC,cAAc,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QAC/C,IAAA,eAAM,EAAC,CAAC,CAAC,cAAc,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,oEAAoE,EAAE,GAAG,EAAE;QAC5E,MAAM,CAAC,GAAG,IAAA,6BAAa,EAAC,mBAAmB,EAAE,KAAK,EAAE,mBAAmB,CAAC,CAAC;QACzE,IAAA,eAAM,EAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7B,IAAA,eAAM,EAAC,CAAC,CAAC,cAAc,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QAC/C,IAAA,eAAM,EAAC,CAAC,CAAC,cAAc,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,uFAAuF,EAAE,GAAG,EAAE;QAC/F,MAAM,CAAC,GAAG,IAAA,6BAAa,EAAC,WAAW,EAAE,MAAM,EAAE,mBAAmB,CAAC,CAAC;QAClE,IAAA,eAAM,EAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC9B,IAAA,eAAM,EAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,8DAA8D,EAAE,GAAG,EAAE;QACtE,MAAM,CAAC,GAAG,IAAA,6BAAa,EAAC,oBAAoB,EAAE,MAAM,EAAE,mBAAmB,CAAC,CAAC;QAC3E,IAAA,eAAM,EAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC/B,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,iEAAiE,EAAE,GAAG,EAAE;QACzE,MAAM,CAAC,GAAG,IAAA,6BAAa,EAAC,qBAAqB,EAAE,QAAQ,EAAE,mBAAmB,CAAC,CAAC;QAC9E,IAAA,eAAM,EAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC/B,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,sGAAsG,EAAE,GAAG,EAAE;QAC9G,MAAM,CAAC,GAAG,IAAA,6BAAa,EAAC,UAAU,EAAE,KAAK,EAAE,6BAA6B,CAAC,CAAC;QAC1E,IAAA,eAAM,EAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC9B,IAAA,eAAM,EAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC9B,IAAA,eAAM,EAAC,CAAC,CAAC,cAAc,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,sEAAsE,EAAE,GAAG,EAAE;QAC9E,MAAM,CAAC,GAAG,IAAA,6BAAa,EAAC,UAAU,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;QACvD,IAAA,eAAM,EAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7B,IAAA,eAAM,EAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,gFAAgF;AAEhF,IAAA,iBAAQ,EAAC,YAAY,EAAE,GAAG,EAAE;IAC1B,IAAA,WAAE,EAAC,yCAAyC,EAAE,GAAG,EAAE;QACjD,MAAM,IAAI,GAAG,IAAA,0BAAU,EAAC,UAAU,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC;QAC5E,gCAAgC;QAChC,IAAA,eAAM,EAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC5B,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,oDAAoD,EAAE,GAAG,EAAE;QAC5D,MAAM,IAAI,GAAG,IAAA,0BAAU,EAAC,oBAAoB,EAAE,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC;QAC3F,IAAA,eAAM,EAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxC,IAAA,eAAM,EAAC,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,uEAAuE,EAAE,GAAG,EAAE;QAC/E,MAAM,IAAI,GAAG,IAAA,0BAAU,EAAC,mBAAmB,EAAE,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,mBAAmB,EAAE,CAAC,CAAC,CAAC;QAC7F,IAAA,eAAM,EAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxC,IAAA,eAAM,EAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,2DAA2D,EAAE,GAAG,EAAE;QACnE,MAAM,IAAI,GAAG,IAAA,0BAAU,EAAC,mBAAmB,EAAE,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC;QACpF,IAAA,eAAM,EAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,kDAAkD,EAAE,GAAG,EAAE;QAC1D,MAAM,IAAI,GAAG,IAAA,0BAAU,EAAC,8BAA8B,EAAE;YACtD,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE;YACnC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE;SACrC,CAAC,CAAC;QACH,IAAA,eAAM,EAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxC,IAAA,eAAM,EAAC,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,iFAAiF;AAEjF,IAAA,iBAAQ,EAAC,sBAAsB,EAAE,GAAG,EAAE;IACpC,IAAA,WAAE,EAAC,kGAAkG,EAAE,GAAG,EAAE;QAC1G,IAAA,eAAM,EAAC,oCAAoB,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5D,IAAA,eAAM,EAAC,oCAAoB,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3E,IAAA,eAAM,EAAC,oCAAoB,CAAC,GAAG,CAAC,gCAAgC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9E,IAAA,eAAM,EAAC,oCAAoB,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC9D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/mcp/tools/database.d.ts

@@ -1,4 +1,8 @@
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 import { ApiHolder } from "../api-holder";
+export declare function capAggregatePipeline(pipeline: unknown): {
+    pipeline: any[];
+    capped: boolean;
+};
 export declare function registerDatabaseTool(server: McpServer, apiHolder: ApiHolder): void;
 //# sourceMappingURL=database.d.ts.map

package/dist/mcp/tools/database.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"database.d.ts","sourceRoot":"","sources":["../../../src/mcp/tools/database.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACpE,OAAO,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAuB1C,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,QAqP3E"}
+{"version":3,"file":"database.d.ts","sourceRoot":"","sources":["../../../src/mcp/tools/database.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACpE,OAAO,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAQ1C,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,OAAO,GAAG;IAAE,QAAQ,EAAE,GAAG,EAAE,CAAC;IAAC,MAAM,EAAE,OAAO,CAAA;CAAE,CAS5F;AAsBD,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,QAyP3E"}

package/dist/mcp/tools/database.js

@@ -1,8 +1,23 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.capAggregatePipeline = capAggregatePipeline;
 exports.registerDatabaseTool = registerDatabaseTool;
 const zod_1 = require("zod");
 const _char_guard_1 = require("./_char-guard");
+const constants_1 = require("../../core/constants");
+// Safety backstop: if an ad-hoc aggregate pipeline has no $limit stage anywhere,
+// append one so a missing limit can't pull an unbounded result set. Returns the
+// (possibly) augmented pipeline and whether the cap was injected, so the response
+// can tell the agent to paginate explicitly with $skip/$limit.
+function capAggregatePipeline(pipeline) {
+    if (!Array.isArray(pipeline)) {
+        return { pipeline: pipeline, capped: false };
+    }
+    const hasLimit = pipeline.some((stage) => stage && typeof stage === "object" && "$limit" in stage);
+    if (hasLimit)
+        return { pipeline, capped: false };
+    return { pipeline: [...pipeline, { $limit: constants_1.API.DEFAULT_AGGREGATE_LIMIT }], capped: true };
+}
 function pathLikeCollectionError(collection) {
     if (!collection.includes("/"))
         return null;
@@ -129,7 +144,7 @@ function registerDatabaseTool(server, apiHolder) {
                     skip: offset ?? 0,
                 });
                 const header = `Found ${results.length} document(s) in '${collection}':`;
-                return (0, _char_guard_1.applyCharGuard)(results, header);
+                return (0, _char_guard_1.applyCharGuard)(results, header, undefined, true);
             }
             if (action === "aggregate") {
                 if (!pipeline) {
@@ -139,10 +154,14 @@ function registerDatabaseTool(server, apiHolder) {
                     };
                 }
                 const pipelineArr = JSON.parse(pipeline);
-                const results = await api.aggregateCollection(collection, pipelineArr);
+                const { pipeline: safePipeline, capped } = capAggregatePipeline(pipelineArr);
+                const results = await api.aggregateCollection(collection, safePipeline);
                 const docs = Array.isArray(results) ? results : [results];
-                const header = `Aggregate result (${docs.length} document(s)) from '${collection}':`;
-                return (0, _char_guard_1.applyCharGuard)(docs, header);
+                const capNote = capped
+                    ? ` (no $limit in pipeline — auto-applied $limit:${constants_1.API.DEFAULT_AGGREGATE_LIMIT}; add an explicit $skip/$limit to paginate)`
+                    : "";
+                const header = `Aggregate result (${docs.length} document(s)) from '${collection}'${capNote}:`;
+                return (0, _char_guard_1.applyCharGuard)(docs, header, undefined, true);
             }
             if (action === "insert") {
                 if (!data) {

package/dist/mcp/tools/database.js.map

@@ -1 +1 @@
-{"version":3,"file":"database.js","sourceRoot":"","sources":["../../../src/mcp/tools/database.ts"],"names":[],"mappings":";;AAyBA,oDAqPC;AA9QD,6BAAwB;AAGxB,+CAA+C;AAE/C,SAAS,uBAAuB,CAAC,UAAkB;IACjD,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3C,MAAM,IAAI,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACtC,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACjD,IAAI,MAAM,KAAK,OAAO,IAAI,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QACtD,OAAO,CACL,yEAAyE,UAAU,OAAO;YAC1F,oGAAoG;YACpG,6CAA6C,IAAI,IAAI;YACrD,6CAA6C,IAAI,uCAAuC;YACxF,6CAA6C,IAAI,oBAAoB,CACtE,CAAC;IACJ,CAAC;IACD,OAAO,CACL,qDAAqD,UAAU,MAAM;QACrE,yCAAyC,IAAI,oCAAoC;QACjF,mGAAmG,CACpG,CAAC;AACJ,CAAC;AAED,SAAgB,oBAAoB,CAAC,MAAiB,EAAE,SAAoB;IAC1E,MAAM,CAAC,YAAY,CACjB,mBAAmB,EACnB;QACE,KAAK,EAAE,8BAA8B;QACrC,WAAW,EACT,2EAA2E;YAC3E,kMAAkM;YAClM,yDAAyD;YACzD,gIAAgI;YAChI,kDAAkD;YAClD,uFAAuF;YACvF,6DAA6D;QAC/D,WAAW,EAAE;YACX,MAAM,EAAE,OAAC;iBACN,IAAI,CAAC,CAAC,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;iBACjF,QAAQ,CACP,qFAAqF;gBACrF,+DAA+D;gBAC/D,qDAAqD;gBACrD,4GAA4G;gBAC5G,2FAA2F;gBAC3F,mDAAmD;gBACnD,qGAAqG;gBACrG,6DAA6D;gBAC7D,wDAAwD;gBACxD,4CAA4C,CAC7C;YACH,UAAU,EAAE,OAAC;iBACV,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,CACP,qGAAqG;gBACrG,6FAA6F;gBAC7F,qDAAqD,CACtD;YACH,KAAK,EAAE,OAAC;iBACL,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,CACP,oEAAoE;gBACpE,8FAA8F;gBAC9F,sGAAsG,CACvG;YACH,QAAQ,EAAE,OAAC;iBACR,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,CAAC,yEAAyE,CAAC;YACtF,IAAI,EAAE,OAAC;iBACJ,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,CAAC,yEAAyE,CAAC;YACtF,KAAK,EAAE,OAAC;iBACL,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,CAAC,yEAAyE,CAAC;YACtF,MAAM,EAAE,OAAC;iBACN,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,CAAC,6EAA6E,CAAC;YAC1F,IAAI,EAAE,OAAC;iBACJ,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,CACP,iFAAiF;gBACjF,gEAAgE,CACjE;SACJ;QACD,WAAW,EAAE;YACX,YAAY,EAAE,KAAK;YACnB,eAAe,EAAE,IAAI;YACrB,cAAc,EAAE,KAAK;YACrB,aAAa,EAAE,IAAI;SACpB;KACF,EACD,KAAK,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE;QAC3E,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,SAAS,CAAC,aAAa,EAAE,CAAC;YAEtC,IAAI,MAAM,KAAK,aAAa,EAAE,CAAC;gBAC7B,MAAM,WAAW,GAAG,MAAM,GAAG,CAAC,cAAc,EAAE,CAAC;gBAC/C,OAAO;oBACL,OAAO,EAAE;wBACP;4BACE,IAAI,EAAE,MAAM;4BACZ,IAAI,EAAE,SAAS,WAAW,CAAC,MAAM,oBAAoB,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;yBAC9E;qBACF;iBACF,CAAC;YACJ,CAAC;YAED,IAAI,CAAC,UAAU,EAAE,CAAC;gBAChB,OAAO;oBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,kEAAkE,EAAE,CAAC;oBACrG,OAAO,EAAE,IAAI;iBACd,CAAC;YACJ,CAAC;YAED,MAAM,cAAc,GAAG,uBAAuB,CAAC,UAAU,CAAC,CAAC;YAC3D,IAAI,cAAc,EAAE,CAAC;gBACnB,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;YAC9E,CAAC;YAED,IAAI,UAAU,KAAK,UAAU,IAAI,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;gBACzF,OAAO;oBACL,OAAO,EAAE;wBACP;4BACE,IAAI,EAAE,MAAM;4BACZ,IAAI,EACF,qEAAqE;gCACrE,wHAAwH;gCACxH,qDAAqD;gCACrD,uIAAuI;yBAC1I;qBACF;oBACD,OAAO,EAAE,IAAI;iBACd,CAAC;YACJ,CAAC;YAED,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;gBACvB,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBACnD,MAAM,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;gBACpD,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,eAAe,CAAC,UAAU,EAAE,WAAW,EAAE;oBACjE,IAAI,EAAE,OAAO;oBACb,KAAK,EAAE,KAAK,IAAI,EAAE;oBAClB,IAAI,EAAE,MAAM,IAAI,CAAC;iBAClB,CAAC,CAAC;gBAEH,MAAM,MAAM,GAAG,SAAS,OAAO,CAAC,MAAM,oBAAoB,UAAU,IAAI,CAAC;gBACzE,OAAO,IAAA,4BAAc,EAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YACzC,CAAC;YAED,IAAI,MAAM,KAAK,WAAW,EAAE,CAAC;gBAC3B,IAAI,CAAC,QAAQ,EAAE,CAAC;oBACd,OAAO;wBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,qDAAqD,EAAE,CAAC;wBACxF,OAAO,EAAE,IAAI;qBACd,CAAC;gBACJ,CAAC;gBACD,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;gBACzC,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,mBAAmB,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;gBAEvE,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;gBAC1D,MAAM,MAAM,GAAG,qBAAqB,IAAI,CAAC,MAAM,uBAAuB,UAAU,IAAI,CAAC;gBACrF,OAAO,IAAA,4BAAc,EAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YACtC,CAAC;YAED,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;gBACxB,IAAI,CAAC,IAAI,EAAE,CAAC;oBACV,OAAO;wBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,8CAA8C,EAAE,CAAC;wBACjF,OAAO,EAAE,IAAI;qBACd,CAAC;gBACJ,CAAC;gBACD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAC7B,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,cAAc,CAAC,UAAW,EAAE,GAAG,CAAC,CAAC;gBAC1D,OAAO;oBACL,OAAO,EAAE;wBACP;4BACE,IAAI,EAAE,MAAM;4BACZ,IAAI,EAAE,2BAA2B,UAAU,SAAS,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE;yBACtF;qBACF;iBACF,CAAC;YACJ,CAAC;YAED,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;gBACxB,IAAI,CAAC,IAAI,EAAE,CAAC;oBACV,OAAO;wBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,8CAA8C,EAAE,CAAC;wBACjF,OAAO,EAAE,IAAI;qBACd,CAAC;gBACJ,CAAC;gBACD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAC7B,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC;oBACb,OAAO;wBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,sDAAsD,EAAE,CAAC;wBACzF,OAAO,EAAE,IAAI;qBACd,CAAC;gBACJ,CAAC;gBACD,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,cAAc,CAAC,UAAW,EAAE,GAAG,CAAC,CAAC;gBAC1D,OAAO;oBACL,OAAO,EAAE;wBACP;4BACE,IAAI,EAAE,MAAM;4BACZ,IAAI,EAAE,wBAAwB,UAAU,SAAS,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE;yBACnF;qBACF;iBACF,CAAC;YACJ,CAAC;YAED,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;gBACxB,IAAI,CAAC,KAAK,EAAE,CAAC;oBACX,OAAO;wBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,6DAA6D,EAAE,CAAC;wBAChG,OAAO,EAAE,IAAI;qBACd,CAAC;gBACJ,CAAC;gBACD,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,cAAc,CAAC,UAAW,EAAE,KAAK,CAAC,CAAC;gBAC5D,OAAO;oBACL,OAAO,EAAE;wBACP;4BACE,IAAI,EAAE,MAAM;4BACZ,IAAI,EAAE,6BAA6B,UAAU,SAAS,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE;yBACxF;qBACF;iBACF,CAAC;YACJ,CAAC;YAED,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;gBACtB,IAAI,CAAC,IAAI,EAAE,CAAC;oBACV,OAAO;wBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,yDAAyD,EAAE,CAAC;wBAC5F,OAAO,EAAE,IAAI;qBACd,CAAC;gBACJ,CAAC;gBACD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAC9B,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,UAAU,CAAC,UAAW,EAAE,IAAI,CAAC,CAAC;gBACvD,OAAO;oBACL,OAAO,EAAE;wBACP;4BACE,IAAI,EAAE,MAAM;4BACZ,IAAI,EAAE,iBAAiB,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,oBAAoB,UAAU,SAAS,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE;yBACvI;qBACF;iBACF,CAAC;YACJ,CAAC;YAED,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,mBAAmB,MAAM,EAAE,EAAE,CAAC;gBAC9D,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,qBAAqB,MAAM,QAAQ,UAAU,MAAM,KAAK,CAAC,OAAO,EAAE;qBACzE;iBACF;gBACD,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;IACH,CAAC,CACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"database.js","sourceRoot":"","sources":["../../../src/mcp/tools/database.ts"],"names":[],"mappings":";;AAUA,oDASC;AAsBD,oDAyPC;AAlSD,6BAAwB;AAGxB,+CAA+C;AAC/C,oDAA2C;AAE3C,iFAAiF;AACjF,gFAAgF;AAChF,kFAAkF;AAClF,+DAA+D;AAC/D,SAAgB,oBAAoB,CAAC,QAAiB;IACpD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC7B,OAAO,EAAE,QAAQ,EAAE,QAAiB,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IACxD,CAAC;IACD,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAC5B,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,QAAQ,IAAK,KAAgB,CAC/E,CAAC;IACF,IAAI,QAAQ;QAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IACjD,OAAO,EAAE,QAAQ,EAAE,CAAC,GAAG,QAAQ,EAAE,EAAE,MAAM,EAAE,eAAG,CAAC,uBAAuB,EAAE,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;AAC5F,CAAC;AAED,SAAS,uBAAuB,CAAC,UAAkB;IACjD,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3C,MAAM,IAAI,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACtC,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACjD,IAAI,MAAM,KAAK,OAAO,IAAI,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QACtD,OAAO,CACL,yEAAyE,UAAU,OAAO;YAC1F,oGAAoG;YACpG,6CAA6C,IAAI,IAAI;YACrD,6CAA6C,IAAI,uCAAuC;YACxF,6CAA6C,IAAI,oBAAoB,CACtE,CAAC;IACJ,CAAC;IACD,OAAO,CACL,qDAAqD,UAAU,MAAM;QACrE,yCAAyC,IAAI,oCAAoC;QACjF,mGAAmG,CACpG,CAAC;AACJ,CAAC;AAED,SAAgB,oBAAoB,CAAC,MAAiB,EAAE,SAAoB;IAC1E,MAAM,CAAC,YAAY,CACjB,mBAAmB,EACnB;QACE,KAAK,EAAE,8BAA8B;QACrC,WAAW,EACT,2EAA2E;YAC3E,kMAAkM;YAClM,yDAAyD;YACzD,gIAAgI;YAChI,kDAAkD;YAClD,uFAAuF;YACvF,6DAA6D;QAC/D,WAAW,EAAE;YACX,MAAM,EAAE,OAAC;iBACN,IAAI,CAAC,CAAC,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;iBACjF,QAAQ,CACP,qFAAqF;gBACrF,+DAA+D;gBAC/D,qDAAqD;gBACrD,4GAA4G;gBAC5G,2FAA2F;gBAC3F,mDAAmD;gBACnD,qGAAqG;gBACrG,6DAA6D;gBAC7D,wDAAwD;gBACxD,4CAA4C,CAC7C;YACH,UAAU,EAAE,OAAC;iBACV,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,CACP,qGAAqG;gBACrG,6FAA6F;gBAC7F,qDAAqD,CACtD;YACH,KAAK,EAAE,OAAC;iBACL,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,CACP,oEAAoE;gBACpE,8FAA8F;gBAC9F,sGAAsG,CACvG;YACH,QAAQ,EAAE,OAAC;iBACR,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,CAAC,yEAAyE,CAAC;YACtF,IAAI,EAAE,OAAC;iBACJ,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,CAAC,yEAAyE,CAAC;YACtF,KAAK,EAAE,OAAC;iBACL,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,CAAC,yEAAyE,CAAC;YACtF,MAAM,EAAE,OAAC;iBACN,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,CAAC,6EAA6E,CAAC;YAC1F,IAAI,EAAE,OAAC;iBACJ,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,CACP,iFAAiF;gBACjF,gEAAgE,CACjE;SACJ;QACD,WAAW,EAAE;YACX,YAAY,EAAE,KAAK;YACnB,eAAe,EAAE,IAAI;YACrB,cAAc,EAAE,KAAK;YACrB,aAAa,EAAE,IAAI;SACpB;KACF,EACD,KAAK,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE;QAC3E,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,SAAS,CAAC,aAAa,EAAE,CAAC;YAEtC,IAAI,MAAM,KAAK,aAAa,EAAE,CAAC;gBAC7B,MAAM,WAAW,GAAG,MAAM,GAAG,CAAC,cAAc,EAAE,CAAC;gBAC/C,OAAO;oBACL,OAAO,EAAE;wBACP;4BACE,IAAI,EAAE,MAAM;4BACZ,IAAI,EAAE,SAAS,WAAW,CAAC,MAAM,oBAAoB,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;yBAC9E;qBACF;iBACF,CAAC;YACJ,CAAC;YAED,IAAI,CAAC,UAAU,EAAE,CAAC;gBAChB,OAAO;oBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,kEAAkE,EAAE,CAAC;oBACrG,OAAO,EAAE,IAAI;iBACd,CAAC;YACJ,CAAC;YAED,MAAM,cAAc,GAAG,uBAAuB,CAAC,UAAU,CAAC,CAAC;YAC3D,IAAI,cAAc,EAAE,CAAC;gBACnB,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;YAC9E,CAAC;YAED,IAAI,UAAU,KAAK,UAAU,IAAI,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;gBACzF,OAAO;oBACL,OAAO,EAAE;wBACP;4BACE,IAAI,EAAE,MAAM;4BACZ,IAAI,EACF,qEAAqE;gCACrE,wHAAwH;gCACxH,qDAAqD;gCACrD,uIAAuI;yBAC1I;qBACF;oBACD,OAAO,EAAE,IAAI;iBACd,CAAC;YACJ,CAAC;YAED,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;gBACvB,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBACnD,MAAM,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;gBACpD,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,eAAe,CAAC,UAAU,EAAE,WAAW,EAAE;oBACjE,IAAI,EAAE,OAAO;oBACb,KAAK,EAAE,KAAK,IAAI,EAAE;oBAClB,IAAI,EAAE,MAAM,IAAI,CAAC;iBAClB,CAAC,CAAC;gBAEH,MAAM,MAAM,GAAG,SAAS,OAAO,CAAC,MAAM,oBAAoB,UAAU,IAAI,CAAC;gBACzE,OAAO,IAAA,4BAAc,EAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;YAC1D,CAAC;YAED,IAAI,MAAM,KAAK,WAAW,EAAE,CAAC;gBAC3B,IAAI,CAAC,QAAQ,EAAE,CAAC;oBACd,OAAO;wBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,qDAAqD,EAAE,CAAC;wBACxF,OAAO,EAAE,IAAI;qBACd,CAAC;gBACJ,CAAC;gBACD,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;gBACzC,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,EAAE,GAAG,oBAAoB,CAAC,WAAW,CAAC,CAAC;gBAC7E,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,mBAAmB,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;gBAExE,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;gBAC1D,MAAM,OAAO,GAAG,MAAM;oBACpB,CAAC,CAAC,iDAAiD,eAAG,CAAC,uBAAuB,6CAA6C;oBAC3H,CAAC,CAAC,EAAE,CAAC;gBACP,MAAM,MAAM,GAAG,qBAAqB,IAAI,CAAC,MAAM,uBAAuB,UAAU,IAAI,OAAO,GAAG,CAAC;gBAC/F,OAAO,IAAA,4BAAc,EAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;YACvD,CAAC;YAED,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;gBACxB,IAAI,CAAC,IAAI,EAAE,CAAC;oBACV,OAAO;wBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,8CAA8C,EAAE,CAAC;wBACjF,OAAO,EAAE,IAAI;qBACd,CAAC;gBACJ,CAAC;gBACD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAC7B,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,cAAc,CAAC,UAAW,EAAE,GAAG,CAAC,CAAC;gBAC1D,OAAO;oBACL,OAAO,EAAE;wBACP;4BACE,IAAI,EAAE,MAAM;4BACZ,IAAI,EAAE,2BAA2B,UAAU,SAAS,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE;yBACtF;qBACF;iBACF,CAAC;YACJ,CAAC;YAED,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;gBACxB,IAAI,CAAC,IAAI,EAAE,CAAC;oBACV,OAAO;wBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,8CAA8C,EAAE,CAAC;wBACjF,OAAO,EAAE,IAAI;qBACd,CAAC;gBACJ,CAAC;gBACD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAC7B,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC;oBACb,OAAO;wBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,sDAAsD,EAAE,CAAC;wBACzF,OAAO,EAAE,IAAI;qBACd,CAAC;gBACJ,CAAC;gBACD,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,cAAc,CAAC,UAAW,EAAE,GAAG,CAAC,CAAC;gBAC1D,OAAO;oBACL,OAAO,EAAE;wBACP;4BACE,IAAI,EAAE,MAAM;4BACZ,IAAI,EAAE,wBAAwB,UAAU,SAAS,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE;yBACnF;qBACF;iBACF,CAAC;YACJ,CAAC;YAED,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;gBACxB,IAAI,CAAC,KAAK,EAAE,CAAC;oBACX,OAAO;wBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,6DAA6D,EAAE,CAAC;wBAChG,OAAO,EAAE,IAAI;qBACd,CAAC;gBACJ,CAAC;gBACD,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,cAAc,CAAC,UAAW,EAAE,KAAK,CAAC,CAAC;gBAC5D,OAAO;oBACL,OAAO,EAAE;wBACP;4BACE,IAAI,EAAE,MAAM;4BACZ,IAAI,EAAE,6BAA6B,UAAU,SAAS,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE;yBACxF;qBACF;iBACF,CAAC;YACJ,CAAC;YAED,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;gBACtB,IAAI,CAAC,IAAI,EAAE,CAAC;oBACV,OAAO;wBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,yDAAyD,EAAE,CAAC;wBAC5F,OAAO,EAAE,IAAI;qBACd,CAAC;gBACJ,CAAC;gBACD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAC9B,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,UAAU,CAAC,UAAW,EAAE,IAAI,CAAC,CAAC;gBACvD,OAAO;oBACL,OAAO,EAAE;wBACP;4BACE,IAAI,EAAE,MAAM;4BACZ,IAAI,EAAE,iBAAiB,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,oBAAoB,UAAU,SAAS,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE;yBACvI;qBACF;iBACF,CAAC;YACJ,CAAC;YAED,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,mBAAmB,MAAM,EAAE,EAAE,CAAC;gBAC9D,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,qBAAqB,MAAM,QAAQ,UAAU,MAAM,KAAK,CAAC,OAAO,EAAE;qBACzE;iBACF;gBACD,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;IACH,CAAC,CACF,CAAC;AACJ,CAAC"}

package/dist/mcp/tools/database.test.js

@@ -2,7 +2,26 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 const vitest_1 = require("vitest");
 const database_1 = require("./database");
+const constants_1 = require("../../core/constants");
 const MAX_CHARS = 50000;
+(0, vitest_1.describe)("capAggregatePipeline", () => {
+    (0, vitest_1.it)("appends a $limit backstop when the pipeline has none", () => {
+        const { pipeline, capped } = (0, database_1.capAggregatePipeline)([{ $match: { active: true } }]);
+        (0, vitest_1.expect)(capped).toBe(true);
+        (0, vitest_1.expect)(pipeline[pipeline.length - 1]).toEqual({ $limit: constants_1.API.DEFAULT_AGGREGATE_LIMIT });
+    });
+    (0, vitest_1.it)("leaves a pipeline with an explicit $limit untouched", () => {
+        const input = [{ $match: { active: true } }, { $limit: 5 }];
+        const { pipeline, capped } = (0, database_1.capAggregatePipeline)(input);
+        (0, vitest_1.expect)(capped).toBe(false);
+        (0, vitest_1.expect)(pipeline).toEqual(input);
+    });
+    (0, vitest_1.it)("does not mutate the original pipeline array", () => {
+        const input = [{ $match: {} }];
+        (0, database_1.capAggregatePipeline)(input);
+        (0, vitest_1.expect)(input).toHaveLength(1);
+    });
+});
 function makeHarness(fakeApi) {
     const handlers = {};
     const server = {