narai-primitives 2.0.0-rc.1

package/dist/connectors/db/lib/drivers/sqlserver.d.ts

@@ -0,0 +1,58 @@
+import { DatabaseDriver, Table, type ExecuteReadResult } from "./base.js";
+import { type OperationType } from "../policy.js";
+interface MssqlRequest {
+    query<T = Record<string, unknown>>(sql: string): Promise<{
+        recordset: T[];
+        recordsets: T[][];
+        rowsAffected: number[];
+    }>;
+    input(name: string, value: unknown): MssqlRequest;
+    cancel(): void;
+}
+interface MssqlTransaction {
+    begin(isolationLevel?: number): Promise<void>;
+    commit(): Promise<void>;
+    rollback(): Promise<void>;
+    request(): MssqlRequest;
+}
+interface MssqlPool {
+    connect(): Promise<MssqlPool>;
+    close(): Promise<void>;
+    request(): MssqlRequest;
+    transaction(): MssqlTransaction;
+}
+/**
+ * Handle returned by {@link SqlServerDriver.connect}. Holds the shared
+ * pool reference — there is no per-call "checkout" with mssql, so `close`
+ * is a no-op and the pool is destroyed once via {@link shutdown}.
+ */
+interface MssqlHandle {
+    pool: MssqlPool;
+    database: string;
+}
+export declare class SqlServerDriver extends DatabaseDriver {
+    private _mssqlModule;
+    private _pool;
+    private _poolPromise;
+    private _database;
+    private _loadMssql;
+    private _ensurePool;
+    connect(envConfig: Record<string, unknown>): Promise<MssqlHandle>;
+    executeRead(_conn: unknown, _query: string, _params?: unknown[] | null, _maxRows?: number, _timeoutMs?: number): ExecuteReadResult;
+    executeReadAsync(conn: unknown, query: string, params?: unknown[] | null, maxRows?: number, timeoutMs?: number): Promise<ExecuteReadResult>;
+    getSchema(_conn: unknown, _schemaName?: string, _tableFilter?: string | null): Table[];
+    getSchemaAsync(conn: unknown, schemaName?: string, tableFilter?: string | null): Promise<Table[]>;
+    /**
+     * No-op: the mssql pool multiplexes requests internally, there is no
+     * per-call client to release. {@link shutdown} destroys the pool.
+     */
+    close(_conn: unknown): void;
+    classifyOperation(query: string): OperationType;
+    closeAsync(_conn: unknown): Promise<void>;
+    /** Per-driver health check via `SELECT 1` on a fresh request. */
+    healthCheck(conn: unknown): Promise<boolean>;
+    /** Drain and destroy the pool. */
+    shutdown(): Promise<void>;
+}
+export {};
+//# sourceMappingURL=sqlserver.d.ts.map

package/dist/connectors/db/lib/drivers/sqlserver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sqlserver.d.ts","sourceRoot":"","sources":["../../../../../src/connectors/db/lib/drivers/sqlserver.ts"],"names":[],"mappings":"AAqBA,OAAO,EAEL,cAAc,EACd,KAAK,EACL,KAAK,iBAAiB,EACvB,MAAM,WAAW,CAAC;AACnB,OAAO,EAAuB,KAAK,aAAa,EAAE,MAAM,cAAc,CAAC;AAMvE,UAAU,YAAY;IACpB,KAAK,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;QACvD,SAAS,EAAE,CAAC,EAAE,CAAC;QACf,UAAU,EAAE,CAAC,EAAE,EAAE,CAAC;QAClB,YAAY,EAAE,MAAM,EAAE,CAAC;KACxB,CAAC,CAAC;IACH,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,YAAY,CAAC;IAClD,MAAM,IAAI,IAAI,CAAC;CAChB;AACD,UAAU,gBAAgB;IACxB,KAAK,CAAC,cAAc,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9C,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACxB,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1B,OAAO,IAAI,YAAY,CAAC;CACzB;AACD,UAAU,SAAS;IACjB,OAAO,IAAI,OAAO,CAAC,SAAS,CAAC,CAAC;IAC9B,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACvB,OAAO,IAAI,YAAY,CAAC;IACxB,WAAW,IAAI,gBAAgB,CAAC;CACjC;AAUD;;;;GAIG;AACH,UAAU,WAAW;IACnB,IAAI,EAAE,SAAS,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,qBAAa,eAAgB,SAAQ,cAAc;IACjD,OAAO,CAAC,YAAY,CAA4B;IAChD,OAAO,CAAC,KAAK,CAA0B;IACvC,OAAO,CAAC,YAAY,CAAmC;IACvD,OAAO,CAAC,SAAS,CAAM;YAET,UAAU;IAoBxB,OAAO,CAAC,WAAW;IAmEV,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,WAAW,CAAC;IAMjE,WAAW,CAClB,KAAK,EAAE,OAAO,EACd,MAAM,EAAE,MAAM,EACd,OAAO,GAAE,OAAO,EAAE,GAAG,IAAW,EAChC,QAAQ,GAAE,MAAa,EACvB,UAAU,GAAE,MAAe,GAC1B,iBAAiB;IAUd,gBAAgB,CACpB,IAAI,EAAE,OAAO,EACb,KAAK,EAAE,MAAM,EACb,MAAM,GAAE,OAAO,EAAE,GAAG,IAAW,EAC/B,OAAO,GAAE,MAAa,EACtB,SAAS,GAAE,MAAe,GACzB,OAAO,CAAC,iBAAiB,CAAC;IAgEpB,SAAS,CAChB,KAAK,EAAE,OAAO,EACd,WAAW,GAAE,MAAW,EACxB,YAAY,GAAE,MAAM,GAAG,IAAW,GACjC,KAAK,EAAE;IAIJ,cAAc,CAClB,IAAI,EAAE,OAAO,EACb,UAAU,GAAE,MAAW,EACvB,WAAW,GAAE,MAAM,GAAG,IAAW,GAChC,OAAO,CAAC,KAAK,EAAE,CAAC;IA+DnB;;;OAGG;IACM,KAAK,CAAC,KAAK,EAAE,OAAO,GAAG,IAAI;IAI3B,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,aAAa;IAIlD,UAAU,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC;IAI/C,iEAAiE;IAC3D,WAAW,CAAC,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IAUlD,kCAAkC;IAC5B,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;CAYhC"}

package/dist/connectors/db/lib/drivers/sqlserver.js

@@ -0,0 +1,274 @@
+/**
+ * drivers/sqlserver.ts — Microsoft SQL Server driver via `mssql`.
+ *
+ * Design:
+ *  - The driver owns an `mssql.ConnectionPool` lazily created on the
+ *    first `connect()` call and cached for the lifetime of the driver
+ *    instance. `mssql` multiplexes requests onto the pool automatically
+ *    via `pool.request()` / `pool.transaction()`; there are no per-call
+ *    "checkout / release" semantics to expose. `connect()` returns a
+ *    lightweight handle carrying a reference to the pool, and `close()`
+ *    is a no-op (the pool is shared). `shutdown()` drains the pool.
+ *  - Named instances + Windows (NTLM) authentication are supported via
+ *    `envConfig.instance` / `envConfig.trusted_connection`.
+ *  - Read-only: every `executeReadAsync` opens an explicit transaction,
+ *    sets `READ COMMITTED` isolation + `LOCK_TIMEOUT`, runs the SELECT,
+ *    and `COMMIT`s. A parser in the driver also rewrites `?` placeholders
+ *    to `@pN` and clamps results via `SELECT TOP N+1`.
+ *  - `mssql` is loaded via dynamic `import()`; a missing install throws
+ *    a clear `npm install mssql` hint.
+ */
+import { performance } from "node:perf_hooks";
+import { Column, DatabaseDriver, Table, } from "./base.js";
+import { classifySqlKeywords } from "../policy.js";
+export class SqlServerDriver extends DatabaseDriver {
+    _mssqlModule = null;
+    _pool = null;
+    _poolPromise = null;
+    _database = "";
+    async _loadMssql() {
+        if (this._mssqlModule !== null)
+            return this._mssqlModule;
+        try {
+            const mod = (await import("mssql"));
+            this._mssqlModule =
+                "ConnectionPool" in mod
+                    ? mod
+                    : mod.default;
+            return this._mssqlModule;
+        }
+        catch (e) {
+            throw new Error(`Driver 'sqlserver' requires 'mssql' — run: npm install mssql (${e.message})`);
+        }
+    }
+    _ensurePool(envConfig) {
+        if (this._pool !== null)
+            return Promise.resolve(this._pool);
+        if (this._poolPromise !== null)
+            return this._poolPromise;
+        this._poolPromise = this._loadMssql().then(async (mssql) => {
+            const server = typeof envConfig["host"] === "string" ? envConfig["host"] : "localhost";
+            const port = typeof envConfig["port"] === "number" ? envConfig["port"] : 1433;
+            this._database =
+                typeof envConfig["database"] === "string" ? envConfig["database"] : "";
+            const user = typeof envConfig["user"] === "string" ? envConfig["user"] : undefined;
+            const password = typeof envConfig["password"] === "string"
+                ? envConfig["password"]
+                : undefined;
+            const instanceName = typeof envConfig["instance"] === "string"
+                ? envConfig["instance"]
+                : undefined;
+            const domain = typeof envConfig["domain"] === "string" ? envConfig["domain"] : undefined;
+            const trustedConnection = envConfig["trusted_connection"] === true;
+            const encrypt = envConfig["ssl"] === true;
+            const options = {
+                encrypt,
+                trustServerCertificate: encrypt === false,
+            };
+            if (instanceName !== undefined)
+                options["instanceName"] = instanceName;
+            const poolConfig = {
+                server,
+                port,
+                database: this._database,
+                options,
+                pool: {
+                    max: typeof envConfig["pool_max"] === "number"
+                        ? envConfig["pool_max"]
+                        : 10,
+                    min: 0,
+                    idleTimeoutMillis: 30_000,
+                },
+            };
+            if (user !== undefined)
+                poolConfig["user"] = user;
+            if (password !== undefined)
+                poolConfig["password"] = password;
+            if (domain !== undefined)
+                poolConfig["domain"] = domain;
+            if (trustedConnection) {
+                poolConfig["authentication"] = {
+                    type: "ntlm",
+                    options: {
+                        domain: domain ?? "",
+                        userName: user ?? "",
+                        password: password ?? "",
+                    },
+                };
+            }
+            const pool = new mssql.ConnectionPool(poolConfig);
+            await pool.connect();
+            this._pool = pool;
+            return pool;
+        });
+        return this._poolPromise;
+    }
+    connect(envConfig) {
+        return this._ensurePool(envConfig).then((pool) => ({ pool, database: this._database }));
+    }
+    executeRead(_conn, _query, _params = null, _maxRows = 1000, _timeoutMs = 30_000) {
+        return {
+            status: "error",
+            error_code: "SYNC_UNSUPPORTED",
+            error: "SqlServerDriver.executeRead is async — call executeReadAsync() instead.",
+            execution_time_ms: 0,
+        };
+    }
+    async executeReadAsync(conn, query, params = null, maxRows = 1000, timeoutMs = 30_000) {
+        const handle = (await conn);
+        const start = performance.now();
+        const tx = handle.pool.transaction();
+        let inTx = false;
+        try {
+            await tx.begin();
+            inTx = true;
+            const guardReq = tx.request();
+            await guardReq.query(`SET TRANSACTION ISOLATION LEVEL READ COMMITTED; SET LOCK_TIMEOUT ${Math.max(1, timeoutMs)};`);
+            const req = tx.request();
+            for (let i = 0; i < (params ?? []).length; i++) {
+                req.input(`p${i}`, (params ?? [])[i]);
+            }
+            let rewritten = query;
+            if (params !== null && params !== undefined && params.length > 0) {
+                let n = 0;
+                rewritten = query.replace(/\?/g, () => `@p${n++}`);
+            }
+            const limited = /\btop\s+\d/i.test(rewritten)
+                ? rewritten
+                : rewritten.replace(/^\s*select\s/i, `SELECT TOP ${maxRows + 1} `);
+            const result = await req.query(limited);
+            await tx.commit();
+            inTx = false;
+            let truncated = false;
+            let rows = result.recordset ?? [];
+            if (rows.length > maxRows) {
+                truncated = true;
+                rows = rows.slice(0, maxRows);
+            }
+            const columns = rows.length > 0 ? Object.keys(rows[0] ?? {}) : [];
+            return {
+                status: "success",
+                rows: rows,
+                row_count: rows.length,
+                columns,
+                execution_time_ms: roundTo2(performance.now() - start),
+                truncated,
+            };
+        }
+        catch (e) {
+            if (inTx) {
+                try {
+                    await tx.rollback();
+                }
+                catch {
+                    /* best-effort */
+                }
+            }
+            return {
+                status: "error",
+                error_code: "SQL_ERROR",
+                error: e.message,
+                execution_time_ms: roundTo2(performance.now() - start),
+            };
+        }
+    }
+    getSchema(_conn, _schemaName = "", _tableFilter = null) {
+        return [];
+    }
+    async getSchemaAsync(conn, schemaName = "", tableFilter = null) {
+        const handle = (await conn);
+        const ns = schemaName.length > 0 ? schemaName : "dbo";
+        try {
+            const req = handle.pool.request();
+            req.input("schema", ns);
+            if (tableFilter !== null && tableFilter !== undefined) {
+                req.input("filter", tableFilter);
+            }
+            const tableSql = "SELECT TABLE_NAME AS table_name FROM INFORMATION_SCHEMA.TABLES " +
+                "WHERE TABLE_SCHEMA = @schema AND TABLE_TYPE = 'BASE TABLE'" +
+                (tableFilter !== null ? " AND TABLE_NAME LIKE @filter" : "") +
+                " ORDER BY TABLE_NAME";
+            const tableRes = await req.query(tableSql);
+            const tables = tableRes.recordset ?? [];
+            const out = [];
+            for (const row of tables) {
+                const tableName = String(row["table_name"] ??
+                    row["TABLE_NAME"]);
+                const colReq = handle.pool.request();
+                colReq.input("schema", ns);
+                colReq.input("table", tableName);
+                const colRes = await colReq.query("SELECT c.COLUMN_NAME AS column_name, c.DATA_TYPE AS data_type, " +
+                    "c.IS_NULLABLE AS is_nullable, c.COLUMN_DEFAULT AS column_default, " +
+                    "CASE WHEN tc.CONSTRAINT_TYPE = 'PRIMARY KEY' THEN 1 ELSE 0 END AS is_pk " +
+                    "FROM INFORMATION_SCHEMA.COLUMNS c " +
+                    "LEFT JOIN INFORMATION_SCHEMA.KEY_COLUMN_USAGE kcu " +
+                    "  ON c.TABLE_SCHEMA = kcu.TABLE_SCHEMA AND c.TABLE_NAME = kcu.TABLE_NAME " +
+                    "  AND c.COLUMN_NAME = kcu.COLUMN_NAME " +
+                    "LEFT JOIN INFORMATION_SCHEMA.TABLE_CONSTRAINTS tc " +
+                    "  ON kcu.CONSTRAINT_NAME = tc.CONSTRAINT_NAME " +
+                    "  AND tc.TABLE_SCHEMA = c.TABLE_SCHEMA " +
+                    "WHERE c.TABLE_SCHEMA = @schema AND c.TABLE_NAME = @table " +
+                    "ORDER BY c.ORDINAL_POSITION");
+                const columns = (colRes.recordset ?? []).map((r) => {
+                    const rec = r;
+                    return new Column({
+                        name: String(rec["column_name"]),
+                        data_type: String(rec["data_type"]),
+                        nullable: String(rec["is_nullable"]).toUpperCase() === "YES",
+                        is_primary_key: Number(rec["is_pk"] ?? 0) === 1,
+                        default: rec["column_default"] === null || rec["column_default"] === undefined
+                            ? null
+                            : String(rec["column_default"]),
+                    });
+                });
+                out.push(new Table({ name: tableName, schema: ns, columns }));
+            }
+            return out;
+        }
+        catch {
+            return [];
+        }
+    }
+    /**
+     * No-op: the mssql pool multiplexes requests internally, there is no
+     * per-call client to release. {@link shutdown} destroys the pool.
+     */
+    close(_conn) {
+        /* pool is shared — nothing to release per-handle */
+    }
+    classifyOperation(query) {
+        return classifySqlKeywords(query);
+    }
+    async closeAsync(_conn) {
+        /* pool is shared — nothing to release per-handle */
+    }
+    /** Per-driver health check via `SELECT 1` on a fresh request. */
+    async healthCheck(conn) {
+        try {
+            const handle = (await conn);
+            const res = await handle.pool.request().query("SELECT 1 AS one");
+            return (res.recordset ?? []).length === 1;
+        }
+        catch {
+            return false;
+        }
+    }
+    /** Drain and destroy the pool. */
+    async shutdown() {
+        const pool = this._pool;
+        this._pool = null;
+        this._poolPromise = null;
+        if (pool !== null) {
+            try {
+                await pool.close();
+            }
+            catch {
+                /* best-effort */
+            }
+        }
+    }
+}
+function roundTo2(n) {
+    return Math.round(n * 100) / 100;
+}
+//# sourceMappingURL=sqlserver.js.map

package/dist/connectors/db/lib/drivers/sqlserver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sqlserver.js","sourceRoot":"","sources":["../../../../../src/connectors/db/lib/drivers/sqlserver.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AACH,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAC9C,OAAO,EACL,MAAM,EACN,cAAc,EACd,KAAK,GAEN,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,mBAAmB,EAAsB,MAAM,cAAc,CAAC;AA8CvE,MAAM,OAAO,eAAgB,SAAQ,cAAc;IACzC,YAAY,GAAuB,IAAI,CAAC;IACxC,KAAK,GAAqB,IAAI,CAAC;IAC/B,YAAY,GAA8B,IAAI,CAAC;IAC/C,SAAS,GAAG,EAAE,CAAC;IAEf,KAAK,CAAC,UAAU;QACtB,IAAI,IAAI,CAAC,YAAY,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC,YAAY,CAAC;QACzD,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,CAAC,MAAM,MAAM,CAAC,OAAO,CAAC,CAEN,CAAC;YAC7B,IAAI,CAAC,YAAY;gBACf,gBAAgB,IAAK,GAAc;oBACjC,CAAC,CAAE,GAAmB;oBACtB,CAAC,CAAE,GAAgC,CAAC,OAAO,CAAC;YAChD,OAAO,IAAI,CAAC,YAAY,CAAC;QAC3B,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,IAAI,KAAK,CACb,iEACG,CAAW,CAAC,OACf,GAAG,CACJ,CAAC;QACJ,CAAC;IACH,CAAC;IAEO,WAAW,CAAC,SAAkC;QACpD,IAAI,IAAI,CAAC,KAAK,KAAK,IAAI;YAAE,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC5D,IAAI,IAAI,CAAC,YAAY,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC,YAAY,CAAC;QACzD,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;YACzD,MAAM,MAAM,GACV,OAAO,SAAS,CAAC,MAAM,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC;YAC1E,MAAM,IAAI,GACR,OAAO,SAAS,CAAC,MAAM,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YACnE,IAAI,CAAC,SAAS;gBACZ,OAAO,SAAS,CAAC,UAAU,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACzE,MAAM,IAAI,GACR,OAAO,SAAS,CAAC,MAAM,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,MAAM,QAAQ,GACZ,OAAO,SAAS,CAAC,UAAU,CAAC,KAAK,QAAQ;gBACvC,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC;gBACvB,CAAC,CAAC,SAAS,CAAC;YAChB,MAAM,YAAY,GAChB,OAAO,SAAS,CAAC,UAAU,CAAC,KAAK,QAAQ;gBACvC,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC;gBACvB,CAAC,CAAC,SAAS,CAAC;YAChB,MAAM,MAAM,GACV,OAAO,SAAS,CAAC,QAAQ,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,MAAM,iBAAiB,GAAG,SAAS,CAAC,oBAAoB,CAAC,KAAK,IAAI,CAAC;YACnE,MAAM,OAAO,GAAG,SAAS,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC;YAE1C,MAAM,OAAO,GAA4B;gBACvC,OAAO;gBACP,sBAAsB,EAAE,OAAO,KAAK,KAAK;aAC1C,CAAC;YACF,IAAI,YAAY,KAAK,SAAS;gBAAE,OAAO,CAAC,cAAc,CAAC,GAAG,YAAY,CAAC;YAEvE,MAAM,UAAU,GAA4B;gBAC1C,MAAM;gBACN,IAAI;gBACJ,QAAQ,EAAE,IAAI,CAAC,SAAS;gBACxB,OAAO;gBACP,IAAI,EAAE;oBACJ,GAAG,EACD,OAAO,SAAS,CAAC,UAAU,CAAC,KAAK,QAAQ;wBACvC,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC;wBACvB,CAAC,CAAC,EAAE;oBACR,GAAG,EAAE,CAAC;oBACN,iBAAiB,EAAE,MAAM;iBAC1B;aACF,CAAC;YACF,IAAI,IAAI,KAAK,SAAS;gBAAE,UAAU,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC;YAClD,IAAI,QAAQ,KAAK,SAAS;gBAAE,UAAU,CAAC,UAAU,CAAC,GAAG,QAAQ,CAAC;YAC9D,IAAI,MAAM,KAAK,SAAS;gBAAE,UAAU,CAAC,QAAQ,CAAC,GAAG,MAAM,CAAC;YACxD,IAAI,iBAAiB,EAAE,CAAC;gBACtB,UAAU,CAAC,gBAAgB,CAAC,GAAG;oBAC7B,IAAI,EAAE,MAAM;oBACZ,OAAO,EAAE;wBACP,MAAM,EAAE,MAAM,IAAI,EAAE;wBACpB,QAAQ,EAAE,IAAI,IAAI,EAAE;wBACpB,QAAQ,EAAE,QAAQ,IAAI,EAAE;qBACzB;iBACF,CAAC;YACJ,CAAC;YAED,MAAM,IAAI,GAAG,IAAI,KAAK,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC;YAClD,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;YACrB,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;YAClB,OAAO,IAAI,CAAC;QACd,CAAC,CAAC,CAAC;QACH,OAAO,IAAI,CAAC,YAAY,CAAC;IAC3B,CAAC;IAEQ,OAAO,CAAC,SAAkC;QACjD,OAAO,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,IAAI,CACrC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,SAAS,EAAE,CAAuB,CACrE,CAAC;IACJ,CAAC;IAEQ,WAAW,CAClB,KAAc,EACd,MAAc,EACd,UAA4B,IAAI,EAChC,WAAmB,IAAI,EACvB,aAAqB,MAAM;QAE3B,OAAO;YACL,MAAM,EAAE,OAAO;YACf,UAAU,EAAE,kBAAkB;YAC9B,KAAK,EACH,yEAAyE;YAC3E,iBAAiB,EAAE,CAAC;SACrB,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,gBAAgB,CACpB,IAAa,EACb,KAAa,EACb,SAA2B,IAAI,EAC/B,UAAkB,IAAI,EACtB,YAAoB,MAAM;QAE1B,MAAM,MAAM,GAAG,CAAC,MAAO,IAA2C,CAAgB,CAAC;QACnF,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;QAChC,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;QACrC,IAAI,IAAI,GAAG,KAAK,CAAC;QACjB,IAAI,CAAC;YACH,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC;YACjB,IAAI,GAAG,IAAI,CAAC;YAEZ,MAAM,QAAQ,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC;YAC9B,MAAM,QAAQ,CAAC,KAAK,CAClB,oEAAoE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,SAAS,CAAC,GAAG,CAC9F,CAAC;YAEF,MAAM,GAAG,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC;YACzB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBAC/C,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACxC,CAAC;YACD,IAAI,SAAS,GAAG,KAAK,CAAC;YACtB,IAAI,MAAM,KAAK,IAAI,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACjE,IAAI,CAAC,GAAG,CAAC,CAAC;gBACV,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;YACrD,CAAC;YACD,MAAM,OAAO,GAAG,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC;gBAC3C,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,eAAe,EAAE,cAAc,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC;YAErE,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACxC,MAAM,EAAE,CAAC,MAAM,EAAE,CAAC;YAClB,IAAI,GAAG,KAAK,CAAC;YAEb,IAAI,SAAS,GAAG,KAAK,CAAC;YACtB,IAAI,IAAI,GAAG,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC;YAClC,IAAI,IAAI,CAAC,MAAM,GAAG,OAAO,EAAE,CAAC;gBAC1B,SAAS,GAAG,IAAI,CAAC;gBACjB,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;YAChC,CAAC;YAED,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAClE,OAAO;gBACL,MAAM,EAAE,SAAS;gBACjB,IAAI,EAAE,IAAiC;gBACvC,SAAS,EAAE,IAAI,CAAC,MAAM;gBACtB,OAAO;gBACP,iBAAiB,EAAE,QAAQ,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC;gBACtD,SAAS;aACV,CAAC;QACJ,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAI,IAAI,EAAE,CAAC;gBACT,IAAI,CAAC;oBACH,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC;gBACtB,CAAC;gBAAC,MAAM,CAAC;oBACP,iBAAiB;gBACnB,CAAC;YACH,CAAC;YACD,OAAO;gBACL,MAAM,EAAE,OAAO;gBACf,UAAU,EAAE,WAAW;gBACvB,KAAK,EAAG,CAAW,CAAC,OAAO;gBAC3B,iBAAiB,EAAE,QAAQ,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC;aACvD,CAAC;QACJ,CAAC;IACH,CAAC;IAEQ,SAAS,CAChB,KAAc,EACd,cAAsB,EAAE,EACxB,eAA8B,IAAI;QAElC,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,KAAK,CAAC,cAAc,CAClB,IAAa,EACb,aAAqB,EAAE,EACvB,cAA6B,IAAI;QAEjC,MAAM,MAAM,GAAG,CAAC,MAAO,IAA2C,CAAgB,CAAC;QACnF,MAAM,EAAE,GAAG,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC;QACtD,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YAClC,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;YACxB,IAAI,WAAW,KAAK,IAAI,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;gBACtD,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;YACnC,CAAC;YAED,MAAM,QAAQ,GACZ,iEAAiE;gBACjE,4DAA4D;gBAC5D,CAAC,WAAW,KAAK,IAAI,CAAC,CAAC,CAAC,8BAA8B,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC5D,sBAAsB,CAAC;YAEzB,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YAC3C,MAAM,MAAM,GAAG,QAAQ,CAAC,SAAS,IAAI,EAAE,CAAC;YAExC,MAAM,GAAG,GAAY,EAAE,CAAC;YACxB,KAAK,MAAM,GAAG,IAAI,MAAM,EAAE,CAAC;gBACzB,MAAM,SAAS,GAAG,MAAM,CACrB,GAA+B,CAAC,YAAY,CAAC;oBAC3C,GAA+B,CAAC,YAAY,CAAC,CACjD,CAAC;gBACF,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;gBACrC,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;gBAC3B,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;gBACjC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,KAAK,CAC/B,iEAAiE;oBAC/D,oEAAoE;oBACpE,0EAA0E;oBAC1E,oCAAoC;oBACpC,oDAAoD;oBACpD,2EAA2E;oBAC3E,wCAAwC;oBACxC,oDAAoD;oBACpD,gDAAgD;oBAChD,yCAAyC;oBACzC,2DAA2D;oBAC3D,6BAA6B,CAChC,CAAC;gBACF,MAAM,OAAO,GAAa,CAAC,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;oBAC3D,MAAM,GAAG,GAAG,CAA4B,CAAC;oBACzC,OAAO,IAAI,MAAM,CAAC;wBAChB,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;wBAChC,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;wBACnC,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,KAAK;wBAC5D,cAAc,EAAE,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC;wBAC/C,OAAO,EACL,GAAG,CAAC,gBAAgB,CAAC,KAAK,IAAI,IAAI,GAAG,CAAC,gBAAgB,CAAC,KAAK,SAAS;4BACnE,CAAC,CAAC,IAAI;4BACN,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;qBACpC,CAAC,CAAC;gBACL,CAAC,CAAC,CAAC;gBACH,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;YAChE,CAAC;YACD,OAAO,GAAG,CAAC;QACb,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAED;;;OAGG;IACM,KAAK,CAAC,KAAc;QAC3B,oDAAoD;IACtD,CAAC;IAEQ,iBAAiB,CAAC,KAAa;QACtC,OAAO,mBAAmB,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,KAAc;QAC7B,oDAAoD;IACtD,CAAC;IAED,iEAAiE;IACjE,KAAK,CAAC,WAAW,CAAC,IAAa;QAC7B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,CAAC,MAAO,IAA2C,CAAgB,CAAC;YACnF,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;YACjE,OAAO,CAAC,GAAG,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC;QAC5C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,kCAAkC;IAClC,KAAK,CAAC,QAAQ;QACZ,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC;QACxB,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QAClB,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;QACzB,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YAClB,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;YACrB,CAAC;YAAC,MAAM,CAAC;gBACP,iBAAiB;YACnB,CAAC;QACH,CAAC;IACH,CAAC;CACF;AAED,SAAS,QAAQ,CAAC,CAAS;IACzB,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,GAAG,CAAC,GAAG,GAAG,CAAC;AACnC,CAAC"}

package/dist/connectors/db/lib/environments.d.ts

@@ -0,0 +1,68 @@
+/**
+ * environments.ts — Environment configuration registry for wiki_db.
+ *
+ * Mirrors `environments.py`:
+ *  - `EnvironmentConfig` is an immutable plain object (frozen).
+ *  - `registerEnvironment` / `getEnvironment` / `listEnvironments` /
+ *    `clearEnvironments` operate on a module-level `Map`.
+ *
+ * Note: Python uses hyphenated approval modes for the environment layer
+ * (`confirm-once`, not `confirm_once`). This matches the existing Python
+ * tests, which assert on the hyphenated form. The Policy class continues
+ * to accept underscores only; the env layer is purely metadata.
+ *
+ * v2 (plugin config): environments may carry arbitrary driver-specific
+ * `extras` (passed through to `driver.connect(envCfg)`) and an optional
+ * per-env `policy` rule map (merged with the global defaults by the
+ * plugin-config loader).
+ */
+import type { PolicyRules } from "./plugin_config.js";
+/** Immutable configuration for a database environment. */
+export interface EnvironmentConfig {
+    readonly host: string;
+    readonly port: number;
+    readonly database: string;
+    readonly schema: string;
+    readonly approval_mode: string;
+    readonly driver: string;
+    /**
+     * Duration of a read grant issued via `grant-required` approval mode,
+     * in hours. Consumed by `grantFromEnv()` in policy.ts. Per v2 design §4,
+     * the default is 8 hours; callers may override per-environment.
+     */
+    readonly grant_duration_hours?: number;
+    /**
+     * Arbitrary driver-specific fields (user, password, ssl, region, endpoint,
+     * url, pool, ttl, etc.). Passed through to `driver.connect(envCfg)` so
+     * each driver can pick up its own knobs without the registry needing to
+     * know about them. Populated by the plugin-config path; empty for
+     * legacy `wiki.config.yaml` environments.
+     */
+    readonly extras?: Readonly<Record<string, unknown>>;
+    /**
+     * Merged policy rules (global defaults + per-server override). Populated
+     * by the plugin-config path. When undefined, callers should fall back to
+     * `DEFAULT_POLICY` — which matches the legacy hard-coded behaviour.
+     */
+    readonly policy?: PolicyRules;
+}
+export interface RegisterEnvironmentOptions {
+    host?: string;
+    port?: number;
+    database?: string;
+    schema?: string;
+    approval_mode?: string;
+    driver?: string;
+    grant_duration_hours?: number;
+    extras?: Record<string, unknown>;
+    policy?: PolicyRules;
+}
+/** Register a named environment configuration. */
+export declare function registerEnvironment(name: string, opts: RegisterEnvironmentOptions): void;
+/** Return the config for `name`, or throw an EnvironmentNotRegisteredError. */
+export declare function getEnvironment(name: string): EnvironmentConfig;
+/** Return a list of registered environment names. */
+export declare function listEnvironments(): string[];
+/** Remove all registered environments. */
+export declare function clearEnvironments(): void;
+//# sourceMappingURL=environments.d.ts.map

package/dist/connectors/db/lib/environments.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"environments.d.ts","sourceRoot":"","sources":["../../../../src/connectors/db/lib/environments.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAOtD,0DAA0D;AAC1D,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB;;;;OAIG;IACH,QAAQ,CAAC,oBAAoB,CAAC,EAAE,MAAM,CAAC;IACvC;;;;;;OAMG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACpD;;;;OAIG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;CAC/B;AAID,MAAM,WAAW,0BAA0B;IACzC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED,kDAAkD;AAClD,wBAAgB,mBAAmB,CACjC,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,0BAA0B,GAC/B,IAAI,CAiDN;AAED,+EAA+E;AAC/E,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,iBAAiB,CAQ9D;AAED,qDAAqD;AACrD,wBAAgB,gBAAgB,IAAI,MAAM,EAAE,CAE3C;AAED,0CAA0C;AAC1C,wBAAgB,iBAAiB,IAAI,IAAI,CAExC"}

package/dist/connectors/db/lib/environments.js

@@ -0,0 +1,53 @@
+/** Valid approval modes for env registration (hyphenated, per Python). */
+const _VALID_APPROVAL_MODES = new Set([
+    "auto", "confirm-once", "confirm-each", "grant-required",
+]);
+const _registry = new Map();
+/** Register a named environment configuration. */
+export function registerEnvironment(name, opts) {
+    const { host = "", port = 0, database = "", schema = "public", approval_mode = "auto", driver = "postgresql", grant_duration_hours, extras, policy, } = opts;
+    if (!_VALID_APPROVAL_MODES.has(approval_mode)) {
+        // Python sorts the frozenset; mirror that for parity with pytest-match.
+        const sorted = [..._VALID_APPROVAL_MODES].sort();
+        const sortedRepr = "[" + sorted.map((s) => `'${s}'`).join(", ") + "]";
+        throw new Error(`approval_mode must be one of ${sortedRepr}, got '${approval_mode}'`);
+    }
+    const base = {
+        host,
+        port,
+        database,
+        schema,
+        approval_mode,
+        driver,
+    };
+    if (grant_duration_hours !== undefined) {
+        base.grant_duration_hours = grant_duration_hours;
+    }
+    if (extras !== undefined) {
+        base.extras = Object.freeze({ ...extras });
+    }
+    if (policy !== undefined) {
+        base.policy = Object.freeze({ ...policy });
+    }
+    const cfg = Object.freeze(base);
+    _registry.set(name, cfg);
+}
+/** Return the config for `name`, or throw an EnvironmentNotRegisteredError. */
+export function getEnvironment(name) {
+    const cfg = _registry.get(name);
+    if (cfg === undefined) {
+        const err = new Error(`Environment '${name}' is not registered`);
+        err.name = "EnvironmentNotRegisteredError";
+        throw err;
+    }
+    return cfg;
+}
+/** Return a list of registered environment names. */
+export function listEnvironments() {
+    return [..._registry.keys()];
+}
+/** Remove all registered environments. */
+export function clearEnvironments() {
+    _registry.clear();
+}
+//# sourceMappingURL=environments.js.map

package/dist/connectors/db/lib/environments.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"environments.js","sourceRoot":"","sources":["../../../../src/connectors/db/lib/environments.ts"],"names":[],"mappings":"AAoBA,0EAA0E;AAC1E,MAAM,qBAAqB,GAAwB,IAAI,GAAG,CAAC;IACzD,MAAM,EAAE,cAAc,EAAE,cAAc,EAAE,gBAAgB;CACzD,CAAC,CAAC;AAgCH,MAAM,SAAS,GAAmC,IAAI,GAAG,EAAE,CAAC;AAc5D,kDAAkD;AAClD,MAAM,UAAU,mBAAmB,CACjC,IAAY,EACZ,IAAgC;IAEhC,MAAM,EACJ,IAAI,GAAG,EAAE,EACT,IAAI,GAAG,CAAC,EACR,QAAQ,GAAG,EAAE,EACb,MAAM,GAAG,QAAQ,EACjB,aAAa,GAAG,MAAM,EACtB,MAAM,GAAG,YAAY,EACrB,oBAAoB,EACpB,MAAM,EACN,MAAM,GACP,GAAG,IAAI,CAAC;IACT,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,CAAC;QAC9C,wEAAwE;QACxE,MAAM,MAAM,GAAG,CAAC,GAAG,qBAAqB,CAAC,CAAC,IAAI,EAAE,CAAC;QACjD,MAAM,UAAU,GAAG,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC;QACtE,MAAM,IAAI,KAAK,CACb,gCAAgC,UAAU,UAAU,aAAa,GAAG,CACrE,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAUN;QACF,IAAI;QACJ,IAAI;QACJ,QAAQ;QACR,MAAM;QACN,aAAa;QACb,MAAM;KACP,CAAC;IACF,IAAI,oBAAoB,KAAK,SAAS,EAAE,CAAC;QACvC,IAAI,CAAC,oBAAoB,GAAG,oBAAoB,CAAC;IACnD,CAAC;IACD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC;IAC7C,CAAC;IACD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC;IAC7C,CAAC;IACD,MAAM,GAAG,GAAsB,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACnD,SAAS,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;AAC3B,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,MAAM,GAAG,GAAG,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAChC,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;QACtB,MAAM,GAAG,GAAG,IAAI,KAAK,CAAC,gBAAgB,IAAI,qBAAqB,CAAC,CAAC;QACjE,GAAG,CAAC,IAAI,GAAG,+BAA+B,CAAC;QAC3C,MAAM,GAAG,CAAC;IACZ,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,qDAAqD;AACrD,MAAM,UAAU,gBAAgB;IAC9B,OAAO,CAAC,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC;AAC/B,CAAC;AAED,0CAA0C;AAC1C,MAAM,UAAU,iBAAiB;IAC/B,SAAS,CAAC,KAAK,EAAE,CAAC;AACpB,CAAC"}

package/dist/connectors/db/lib/index.d.ts

@@ -0,0 +1,28 @@
+/**
+ * wiki_db — shared library for safe database access.
+ *
+ * Public API mirrors `.claude/agents/lib/wiki_db/__init__.py`:
+ *   import { executeQuery, enableAudit, disableAudit } from "wiki_db";
+ *   import { Policy, Decision, checkQuery } from "wiki_db/policy";
+ *   import { getEnvironment, listEnvironments } from "wiki_db/environments";
+ *
+ * v2: drivers load on demand via `ensureDriver(name)` (invoked internally
+ * by `connection.getConnection(envName)`). Importing this barrel no longer
+ * pulls the optional Phase E deps (`pg`, `mysql2`, `mssql`, `mongodb`,
+ * `@aws-sdk/client-dynamodb`) into memory. Consumers that need a driver
+ * class directly should import from its path (e.g.
+ * `"./drivers/postgresql.js"`) — this barrel only re-exports the
+ * mandatory SQLite driver.
+ */
+export * from "./policy.js";
+export * from "./query.js";
+export * from "./environments.js";
+export * from "./audit.js";
+export * from "./credentials.js";
+export * from "./schema.js";
+export * from "./connection.js";
+export * from "./plugin_config.js";
+export * from "./drivers/base.js";
+export { SQLiteDriver } from "./drivers/sqlite.js";
+export { ensureDriver, registerAll as registerAllDrivers } from "./drivers/register.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/connectors/db/lib/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/connectors/db/lib/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAGH,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC;AAC3B,cAAc,mBAAmB,CAAC;AAClC,cAAc,YAAY,CAAC;AAC3B,cAAc,kBAAkB,CAAC;AACjC,cAAc,aAAa,CAAC;AAC5B,cAAc,iBAAiB,CAAC;AAChC,cAAc,oBAAoB,CAAC;AAGnC,cAAc,mBAAmB,CAAC;AAClC,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,YAAY,EAAE,WAAW,IAAI,kBAAkB,EAAE,MAAM,uBAAuB,CAAC"}

package/dist/connectors/db/lib/index.js

@@ -0,0 +1,30 @@
+/**
+ * wiki_db — shared library for safe database access.
+ *
+ * Public API mirrors `.claude/agents/lib/wiki_db/__init__.py`:
+ *   import { executeQuery, enableAudit, disableAudit } from "wiki_db";
+ *   import { Policy, Decision, checkQuery } from "wiki_db/policy";
+ *   import { getEnvironment, listEnvironments } from "wiki_db/environments";
+ *
+ * v2: drivers load on demand via `ensureDriver(name)` (invoked internally
+ * by `connection.getConnection(envName)`). Importing this barrel no longer
+ * pulls the optional Phase E deps (`pg`, `mysql2`, `mssql`, `mongodb`,
+ * `@aws-sdk/client-dynamodb`) into memory. Consumers that need a driver
+ * class directly should import from its path (e.g.
+ * `"./drivers/postgresql.js"`) — this barrel only re-exports the
+ * mandatory SQLite driver.
+ */
+// Core
+export * from "./policy.js";
+export * from "./query.js";
+export * from "./environments.js";
+export * from "./audit.js";
+export * from "./credentials.js";
+export * from "./schema.js";
+export * from "./connection.js";
+export * from "./plugin_config.js";
+// Drivers
+export * from "./drivers/base.js";
+export { SQLiteDriver } from "./drivers/sqlite.js";
+export { ensureDriver, registerAll as registerAllDrivers } from "./drivers/register.js";
+//# sourceMappingURL=index.js.map

package/dist/connectors/db/lib/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/connectors/db/lib/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO;AACP,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC;AAC3B,cAAc,mBAAmB,CAAC;AAClC,cAAc,YAAY,CAAC;AAC3B,cAAc,kBAAkB,CAAC;AACjC,cAAc,aAAa,CAAC;AAC5B,cAAc,iBAAiB,CAAC;AAChC,cAAc,oBAAoB,CAAC;AAEnC,UAAU;AACV,cAAc,mBAAmB,CAAC;AAClC,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,YAAY,EAAE,WAAW,IAAI,kBAAkB,EAAE,MAAM,uBAAuB,CAAC"}

package/dist/connectors/db/lib/plugin_config.d.ts

@@ -0,0 +1,64 @@
+export type PolicyRule = "allow" | "present" | "escalate" | "deny";
+export type RestrictedPolicyRule = Exclude<PolicyRule, "allow">;
+export type UnboundedSelectMode = "escalate" | "allow";
+export interface PolicyRules {
+    read: PolicyRule;
+    write: PolicyRule;
+    delete: PolicyRule;
+    admin: RestrictedPolicyRule;
+    privilege: RestrictedPolicyRule;
+    unbounded_select: UnboundedSelectMode;
+}
+export interface ServerConfig {
+    driver: string;
+    policy?: Partial<PolicyRules>;
+    approval_mode?: string;
+    [key: string]: unknown;
+}
+export interface AuditConfig {
+    enabled: boolean;
+    path?: string;
+}
+export interface PluginConfig {
+    policy: PolicyRules;
+    servers: Record<string, ServerConfig>;
+    audit?: AuditConfig;
+}
+export declare const DEFAULT_POLICY: PolicyRules;
+/**
+ * Merge a global + (optional) per-server policy on top of defaults.
+ * Keys absent from the override fall back to `base`.
+ */
+export declare function mergePolicy(base: PolicyRules, override?: Partial<PolicyRules>): PolicyRules;
+/**
+ * Validate a raw parsed YAML object against the plugin-config schema.
+ * Throws a descriptive error on any shape or value violation.
+ */
+export declare function validatePluginConfig(raw: unknown): PluginConfig;
+export interface LoadPluginConfigOptions {
+    /** Explicit path (file is parsed directly). */
+    explicitPath?: string;
+}
+/**
+ * Parse + validate a plugin config from an explicit YAML file. Returns null
+ * when the file is not plugin-shaped (no `policy:` or `servers:` at the
+ * root) so callers can fall through to legacy parsers.
+ *
+ * V2.0: discovery via `~/.db-agent/` is removed. Standalone CLI runs read
+ * from `~/.connectors/config.yaml` via `@narai/connector-config`. This API
+ * remains for callers that pass `--config-path` directly.
+ */
+export declare function loadPluginConfig(opts?: LoadPluginConfigOptions): PluginConfig | null;
+/**
+ * Build a `PluginConfig` from a `connector-config`-resolved slice.
+ *
+ * The connector-config lib uses the new vocab natively. Each value in
+ * `slice.policy` is mapped onto our `PolicyRules`; `slice.options.servers`
+ * is validated through the same `validateServer` path so per-server
+ * overrides are still safety-checked.
+ */
+export declare function pluginConfigFromSlice(slice: {
+    policy?: Record<string, unknown>;
+    options?: Record<string, unknown>;
+}): PluginConfig;
+//# sourceMappingURL=plugin_config.d.ts.map

package/dist/connectors/db/lib/plugin_config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin_config.d.ts","sourceRoot":"","sources":["../../../../src/connectors/db/lib/plugin_config.ts"],"names":[],"mappings":"AAyBA,MAAM,MAAM,UAAU,GAAG,OAAO,GAAG,SAAS,GAAG,UAAU,GAAG,MAAM,CAAC;AACnE,MAAM,MAAM,oBAAoB,GAAG,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;AAEhE,MAAM,MAAM,mBAAmB,GAAG,UAAU,GAAG,OAAO,CAAC;AAEvD,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,UAAU,CAAC;IACjB,KAAK,EAAE,UAAU,CAAC;IAClB,MAAM,EAAE,UAAU,CAAC;IACnB,KAAK,EAAE,oBAAoB,CAAC;IAC5B,SAAS,EAAE,oBAAoB,CAAC;IAIhC,gBAAgB,EAAE,mBAAmB,CAAC;CACvC;AAUD,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC;IAC9B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,WAAW,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;IACtC,KAAK,CAAC,EAAE,WAAW,CAAC;CACrB;AAED,eAAO,MAAM,cAAc,EAAE,WAO5B,CAAC;AA6CF;;;GAGG;AACH,wBAAgB,WAAW,CACzB,IAAI,EAAE,WAAW,EACjB,QAAQ,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC,GAC9B,WAAW,CAUb;AAsJD;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,OAAO,GAAG,YAAY,CA0C/D;AAED,MAAM,WAAW,uBAAuB;IACtC,+CAA+C;IAC/C,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED;;;;;;;;GAQG;AACH,wBAAgB,gBAAgB,CAC9B,IAAI,GAAE,uBAA4B,GACjC,YAAY,GAAG,IAAI,CAUrB;AASD;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE;IAC3C,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACnC,GAAG,YAAY,CA8Bf"}