narai-primitives 2.0.0-rc.1

package/dist/connectors/db/lib/query.js

@@ -0,0 +1,93 @@
+/**
+ * query.ts — Parameterized query execution with policy enforcement.
+ *
+ * Wraps `driver.executeReadAsync(conn, sql, params, maxRows, timeoutMs)`
+ * with policy checks, error handling, and structured results.
+ * NEVER raises — all exceptions are caught and returned as error dicts.
+ *
+ * Possible statuses:
+ *   ok           — query ran successfully
+ *   denied       — policy blocked the query
+ *   present_only — statement displayed but not executed (per policy)
+ *   escalate     — query needs human approval
+ *   error        — execution failed
+ *
+ * Driver contract: callers supply a `QueryableDriver` whose
+ * `executeReadAsync` maps onto the public result format. Sync drivers
+ * (SQLite, legacy test stubs) wrap their `executeRead` into an async
+ * shim at the call site — see `adaptDriver` in
+ * `agents/wiki-db-agent/scripts/db_query.ts`.
+ */
+import { performance } from "node:perf_hooks";
+import { Decision } from "./policy.js";
+/** Execute a SQL query through policy checks and the database driver.
+ *
+ * Returns a structured dict — never raises.
+ */
+export async function executeQuery(driver, sql, policy, options = {}) {
+    const { conn, params = null, max_rows: maxRows = 1000, timeout_ms: timeoutMs = 30000, } = options;
+    const start = performance.now();
+    try {
+        // 1. Policy check
+        const policyResult = policy.checkQuery(sql);
+        if (policyResult.decision === Decision.DENY) {
+            return {
+                status: "denied",
+                reason: policyResult.reason,
+                execution_time_ms: _elapsedMs(start),
+            };
+        }
+        if (policyResult.decision === Decision.PRESENT_ONLY) {
+            return {
+                status: "present_only",
+                reason: policyResult.reason,
+                formatted_sql: policyResult.formatted_sql,
+                execution_time_ms: _elapsedMs(start),
+            };
+        }
+        if (policyResult.decision === Decision.ESCALATE) {
+            return {
+                status: "escalate",
+                reason: policyResult.reason,
+                execution_time_ms: _elapsedMs(start),
+            };
+        }
+        // 2. Execute via driver (ALLOW). G-QUERY-ASYNC-ONLY: every driver
+        // must expose executeReadAsync. Sync drivers (SQLite, legacy test
+        // stubs) get wrapped by `adaptDriver` at the call site.
+        if (typeof driver.executeReadAsync !== "function") {
+            throw new Error("driver.executeReadAsync is required — wrap sync drivers at the call site");
+        }
+        const raw = await driver.executeReadAsync(conn, sql, params, maxRows, timeoutMs);
+        if (raw.status === "error") {
+            return {
+                status: "error",
+                error: `${raw.error_code ?? "SQL_ERROR"}: ${raw.error ?? "unknown driver error"}`,
+                execution_time_ms: _elapsedMs(start),
+            };
+        }
+        const rows = raw.rows ?? [];
+        const columns = raw.columns ?? [];
+        const truncated = raw.truncated ?? rows.length >= maxRows;
+        return {
+            status: "ok",
+            rows,
+            columns,
+            row_count: rows.length,
+            truncated,
+            execution_time_ms: _elapsedMs(start),
+        };
+    }
+    catch (exc) {
+        return {
+            status: "error",
+            error: exc.message,
+            execution_time_ms: _elapsedMs(start),
+        };
+    }
+}
+function _elapsedMs(start) {
+    // performance.now() returns ms directly.
+    return Math.round((performance.now() - start) * 100) / 100;
+}
+//# sourceMappingURL=query.js.map

package/dist/connectors/db/lib/query.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"query.js","sourceRoot":"","sources":["../../../../src/connectors/db/lib/query.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AACH,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAkC,MAAM,aAAa,CAAC;AAyBvE;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,MAAuB,EACvB,GAAW,EACX,MAAc,EACd,UAA+B,EAAE;IAEjC,MAAM,EACJ,IAAI,EACJ,MAAM,GAAG,IAAI,EACb,QAAQ,EAAE,OAAO,GAAG,IAAI,EACxB,UAAU,EAAE,SAAS,GAAG,KAAK,GAC9B,GAAG,OAAO,CAAC;IACZ,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;IAEhC,IAAI,CAAC;QACH,kBAAkB;QAClB,MAAM,YAAY,GAAiB,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QAE1D,IAAI,YAAY,CAAC,QAAQ,KAAK,QAAQ,CAAC,IAAI,EAAE,CAAC;YAC5C,OAAO;gBACL,MAAM,EAAE,QAAQ;gBAChB,MAAM,EAAE,YAAY,CAAC,MAAM;gBAC3B,iBAAiB,EAAE,UAAU,CAAC,KAAK,CAAC;aACrC,CAAC;QACJ,CAAC;QAED,IAAI,YAAY,CAAC,QAAQ,KAAK,QAAQ,CAAC,YAAY,EAAE,CAAC;YACpD,OAAO;gBACL,MAAM,EAAE,cAAc;gBACtB,MAAM,EAAE,YAAY,CAAC,MAAM;gBAC3B,aAAa,EAAE,YAAY,CAAC,aAAa;gBACzC,iBAAiB,EAAE,UAAU,CAAC,KAAK,CAAC;aACrC,CAAC;QACJ,CAAC;QAED,IAAI,YAAY,CAAC,QAAQ,KAAK,QAAQ,CAAC,QAAQ,EAAE,CAAC;YAChD,OAAO;gBACL,MAAM,EAAE,UAAU;gBAClB,MAAM,EAAE,YAAY,CAAC,MAAM;gBAC3B,iBAAiB,EAAE,UAAU,CAAC,KAAK,CAAC;aACrC,CAAC;QACJ,CAAC;QAED,kEAAkE;QAClE,kEAAkE;QAClE,wDAAwD;QACxD,IAAI,OAAO,MAAM,CAAC,gBAAgB,KAAK,UAAU,EAAE,CAAC;YAClD,MAAM,IAAI,KAAK,CACb,0EAA0E,CAC3E,CAAC;QACJ,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,gBAAgB,CACvC,IAAI,EACJ,GAAG,EACH,MAAM,EACN,OAAO,EACP,SAAS,CACV,CAAC;QACF,IAAI,GAAG,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;YAC3B,OAAO;gBACL,MAAM,EAAE,OAAO;gBACf,KAAK,EAAE,GAAG,GAAG,CAAC,UAAU,IAAI,WAAW,KAAK,GAAG,CAAC,KAAK,IAAI,sBAAsB,EAAE;gBACjF,iBAAiB,EAAE,UAAU,CAAC,KAAK,CAAC;aACrC,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,GAA8B,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;QACvD,MAAM,OAAO,GAAa,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC;QAC5C,MAAM,SAAS,GAAG,GAAG,CAAC,SAAS,IAAI,IAAI,CAAC,MAAM,IAAI,OAAO,CAAC;QAC1D,OAAO;YACL,MAAM,EAAE,IAAI;YACZ,IAAI;YACJ,OAAO;YACP,SAAS,EAAE,IAAI,CAAC,MAAM;YACtB,SAAS;YACT,iBAAiB,EAAE,UAAU,CAAC,KAAK,CAAC;SACrC,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO;YACL,MAAM,EAAE,OAAO;YACf,KAAK,EAAG,GAAa,CAAC,OAAO;YAC7B,iBAAiB,EAAE,UAAU,CAAC,KAAK,CAAC;SACrC,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,KAAa;IAC/B,yCAAyC;IACzC,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,GAAG,GAAG,CAAC,GAAG,GAAG,CAAC;AAC7D,CAAC"}

package/dist/connectors/db/lib/schema.d.ts

@@ -0,0 +1,13 @@
+import type { DatabaseDriver, Table } from "./drivers/base.js";
+/** Cached schema introspection via a database driver. */
+export declare class SchemaManager {
+    private readonly _driver;
+    private readonly _ttl;
+    private readonly _cache;
+    constructor(driver: DatabaseDriver, ttl?: number);
+    /** Get schema, using cache if within TTL. */
+    getSchema(conn: unknown, env: string, schemaName?: string, tableFilter?: string | null): Promise<Table[]>;
+    /** Force re-query on next call. */
+    clearCache(): void;
+}
+//# sourceMappingURL=schema.d.ts.map

package/dist/connectors/db/lib/schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../../../src/connectors/db/lib/schema.ts"],"names":[],"mappings":"AAgBA,OAAO,KAAK,EAAE,cAAc,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAC;AAkB/D,yDAAyD;AACzD,qBAAa,aAAa;IACxB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAiB;IACzC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAS;IAC9B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA0B;gBAErC,MAAM,EAAE,cAAc,EAAE,GAAG,GAAE,MAAc;IAMvD,6CAA6C;IACvC,SAAS,CACb,IAAI,EAAE,OAAO,EACb,GAAG,EAAE,MAAM,EACX,UAAU,GAAE,MAAW,EACvB,WAAW,GAAE,MAAM,GAAG,IAAW,GAChC,OAAO,CAAC,KAAK,EAAE,CAAC;IAqDnB,mCAAmC;IACnC,UAAU,IAAI,IAAI;CAGnB"}

package/dist/connectors/db/lib/schema.js

@@ -0,0 +1,80 @@
+/**
+ * schema.ts — Schema introspection with TTL cache.
+ *
+ * Mirrors `schema.py`:
+ *  - `SchemaManager(driver, ttl=300)` caches driver.getSchema results,
+ *    keyed by `(env, schemaName, tableFilter)`.
+ *  - On driver error, returns `[]` (never raises).
+ *  - `clearCache()` forces re-query on next call.
+ *
+ * Phase E bridge:
+ *  - Phase E drivers (pg, mysql, mssql, mongo, dynamo) expose
+ *    `getSchemaAsync(conn, schema?, tableFilter?)` and return a useless
+ *    stub from the sync `getSchema`. We detect the async method and await
+ *    it when present; otherwise fall back to the sync call (sqlite path).
+ */
+import { performance } from "node:perf_hooks";
+import { logEvent } from "./audit.js";
+/** Cached schema introspection via a database driver. */
+export class SchemaManager {
+    _driver;
+    _ttl; // seconds
+    _cache;
+    constructor(driver, ttl = 300.0) {
+        this._driver = driver;
+        this._ttl = ttl;
+        this._cache = new Map();
+    }
+    /** Get schema, using cache if within TTL. */
+    async getSchema(conn, env, schemaName = "", tableFilter = null) {
+        // Python uses a tuple cache key; emulate with a JSON-encoded key so
+        // (None, "", "") and ("", "", "") differ exactly as in Python.
+        const cacheKey = JSON.stringify([env, schemaName, tableFilter]);
+        const now = performance.now();
+        const entry = this._cache.get(cacheKey);
+        if (entry !== undefined) {
+            // `ts` stored in ms; `_ttl` is seconds → compare in seconds.
+            if ((now - entry.ts) / 1000 < this._ttl) {
+                return entry.data;
+            }
+        }
+        let tables;
+        try {
+            const asyncHook = this._driver.getSchemaAsync;
+            if (typeof asyncHook === "function") {
+                tables = await asyncHook.call(this._driver, conn, schemaName, tableFilter);
+            }
+            else {
+                tables = this._driver.getSchema(conn, schemaName, tableFilter);
+            }
+        }
+        catch {
+            return [];
+        }
+        // A5 (G-DB-AUDIT extension): emit `schema_inspect` BEFORE returning the
+        // tables to the caller. The event documents which env+filter the
+        // introspection ran against and how much surface area it exposed
+        // (column_count is the sum across all tables — the most useful
+        // single number for capacity-style audits). We never throw from
+        // logEvent (the audit pipe is best-effort), so this is safe in every
+        // code path including the cache-hit fast-path above.
+        let columnCount = 0;
+        for (const t of tables)
+            columnCount += t.columns.length;
+        logEvent({
+            event_type: "schema_inspect",
+            details: {
+                env,
+                table_filter: tableFilter,
+                column_count: columnCount,
+            },
+        });
+        this._cache.set(cacheKey, { ts: now, data: tables });
+        return tables;
+    }
+    /** Force re-query on next call. */
+    clearCache() {
+        this._cache.clear();
+    }
+}
+//# sourceMappingURL=schema.js.map

package/dist/connectors/db/lib/schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../../../src/connectors/db/lib/schema.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAE9C,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAiBtC,yDAAyD;AACzD,MAAM,OAAO,aAAa;IACP,OAAO,CAAiB;IACxB,IAAI,CAAS,CAAC,UAAU;IACxB,MAAM,CAA0B;IAEjD,YAAY,MAAsB,EAAE,MAAc,KAAK;QACrD,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC;QACtB,IAAI,CAAC,IAAI,GAAG,GAAG,CAAC;QAChB,IAAI,CAAC,MAAM,GAAG,IAAI,GAAG,EAAE,CAAC;IAC1B,CAAC;IAED,6CAA6C;IAC7C,KAAK,CAAC,SAAS,CACb,IAAa,EACb,GAAW,EACX,aAAqB,EAAE,EACvB,cAA6B,IAAI;QAEjC,oEAAoE;QACpE,+DAA+D;QAC/D,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,GAAG,EAAE,UAAU,EAAE,WAAW,CAAC,CAAC,CAAC;QAChE,MAAM,GAAG,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;QAE9B,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACxC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,6DAA6D;YAC7D,IAAI,CAAC,GAAG,GAAG,KAAK,CAAC,EAAE,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;gBACxC,OAAO,KAAK,CAAC,IAAI,CAAC;YACpB,CAAC;QACH,CAAC;QAED,IAAI,MAAe,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,SAAS,GAAI,IAAI,CAAC,OAA6B,CAAC,cAAc,CAAC;YACrE,IAAI,OAAO,SAAS,KAAK,UAAU,EAAE,CAAC;gBACpC,MAAM,GAAG,MAAM,SAAS,CAAC,IAAI,CAC3B,IAAI,CAAC,OAAO,EACZ,IAAI,EACJ,UAAU,EACV,WAAW,CACZ,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,EAAE,UAAU,EAAE,WAAW,CAAC,CAAC;YACjE,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,wEAAwE;QACxE,iEAAiE;QACjE,iEAAiE;QACjE,+DAA+D;QAC/D,gEAAgE;QAChE,qEAAqE;QACrE,qDAAqD;QACrD,IAAI,WAAW,GAAG,CAAC,CAAC;QACpB,KAAK,MAAM,CAAC,IAAI,MAAM;YAAE,WAAW,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;QACxD,QAAQ,CAAC;YACP,UAAU,EAAE,gBAAgB;YAC5B,OAAO,EAAE;gBACP,GAAG;gBACH,YAAY,EAAE,WAAW;gBACzB,YAAY,EAAE,WAAW;aAC1B;SACF,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;QACrD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,mCAAmC;IACnC,UAAU;QACR,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;IACtB,CAAC;CACF"}

package/dist/connectors/gcp/cli.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=cli.d.ts.map

package/dist/connectors/gcp/cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../../../src/connectors/gcp/cli.ts"],"names":[],"mappings":""}

package/dist/connectors/gcp/cli.js

@@ -0,0 +1,24 @@
+#!/usr/bin/env node
+/**
+ * Thin bin entry. Library code lives in index.ts.
+ *
+ * Reads `~/.connectors/config.yaml` (or `NARAI_CONFIG_BLOB`, when injected
+ * by `@narai/connector-hub`) before `main()` runs and applies any configured
+ * GCP project / region / credentials path to `process.env`. Existing exports
+ * win — the bootstrap only fills in undefined entries.
+ */
+import { loadConnectorEnvironment } from "narai-primitives/config";
+import connector from "./index.js";
+const GCP_ENV_MAPPING = {
+    project_id: "GCP_PROJECT_ID",
+    region: "GCP_REGION",
+    credentials: "GOOGLE_APPLICATION_CREDENTIALS",
+};
+async function run() {
+    await loadConnectorEnvironment("gcp", { envMapping: GCP_ENV_MAPPING });
+    return connector.main(process.argv.slice(2));
+}
+void run().then((code) => {
+    process.exit(code);
+});
+//# sourceMappingURL=cli.js.map

package/dist/connectors/gcp/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../../../src/connectors/gcp/cli.ts"],"names":[],"mappings":";AACA;;;;;;;GAOG;AACH,OAAO,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAC;AACnE,OAAO,SAAS,MAAM,YAAY,CAAC;AAEnC,MAAM,eAAe,GAA2B;IAC9C,UAAU,EAAE,gBAAgB;IAC5B,MAAM,EAAE,YAAY;IACpB,WAAW,EAAE,gCAAgC;CAC9C,CAAC;AAEF,KAAK,UAAU,GAAG;IAChB,MAAM,wBAAwB,CAAC,KAAK,EAAE,EAAE,UAAU,EAAE,eAAe,EAAE,CAAC,CAAC;IACvE,OAAO,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AAC/C,CAAC;AAED,KAAK,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE;IACvB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACrB,CAAC,CAAC,CAAC"}

package/dist/connectors/gcp/index.d.ts

@@ -0,0 +1,24 @@
+/**
+ * @narai/gcp-agent-connector — read-only GCP connector.
+ *
+ * Built on @narai/connector-toolkit. The default export is a ready-to-use
+ * `Connector`; `buildGcpConnector(overrides?)` is exposed for tests that
+ * want to inject a fake GcpClient.
+ *
+ * Runtime requirement: `gcloud` (and optionally `bq`) must be on PATH with
+ * Application Default Credentials configured. Missing binaries surface as
+ * CONFIG_ERROR envelopes.
+ */
+import { type Connector } from "narai-primitives/toolkit";
+import { GcpClient } from "./lib/gcp_client.js";
+export interface BuildOptions {
+    sdk?: () => Promise<GcpClient>;
+    credentials?: () => Promise<Record<string, unknown>>;
+}
+export declare function buildGcpConnector(overrides?: BuildOptions): Connector;
+declare const connector: Connector;
+export default connector;
+export declare const main: (argv: readonly string[]) => Promise<number>, fetch: (action: string, params: unknown) => Promise<import("narai-primitives/toolkit").Envelope>, validActions: ReadonlySet<string>;
+export { GcpClient, detectGcloudAvailable, type GcpClientOptions, type GcpResult, } from "./lib/gcp_client.js";
+export { GcpCliError } from "./lib/gcp_error.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/connectors/gcp/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/connectors/gcp/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EAAmB,KAAK,SAAS,EAAkB,MAAM,0BAA0B,CAAC;AAE3F,OAAO,EACL,SAAS,EAGV,MAAM,qBAAqB,CAAC;AAiF7B,MAAM,WAAW,YAAY;IAC3B,GAAG,CAAC,EAAE,MAAM,OAAO,CAAC,SAAS,CAAC,CAAC;IAC/B,WAAW,CAAC,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CACtD;AAYD,wBAAgB,iBAAiB,CAAC,SAAS,GAAE,YAAiB,GAAG,SAAS,CAiIzE;AAGD,QAAA,MAAM,SAAS,WAAsB,CAAC;AACtC,eAAe,SAAS,CAAC;AACzB,eAAO,MAAQ,IAAI,gDAAE,KAAK,6FAAE,YAAY,qBAAc,CAAC;AAEvD,OAAO,EACL,SAAS,EACT,qBAAqB,EACrB,KAAK,gBAAgB,EACrB,KAAK,SAAS,GACf,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC"}

package/dist/connectors/gcp/index.js

@@ -0,0 +1,205 @@
+/**
+ * @narai/gcp-agent-connector — read-only GCP connector.
+ *
+ * Built on @narai/connector-toolkit. The default export is a ready-to-use
+ * `Connector`; `buildGcpConnector(overrides?)` is exposed for tests that
+ * want to inject a fake GcpClient.
+ *
+ * Runtime requirement: `gcloud` (and optionally `bq`) must be on PATH with
+ * Application Default Credentials configured. Missing binaries surface as
+ * CONFIG_ERROR envelopes.
+ */
+import { createConnector } from "narai-primitives/toolkit";
+import { z } from "zod";
+import { GcpClient, detectGcloudAvailable, } from "./lib/gcp_client.js";
+import { GcpCliError } from "./lib/gcp_error.js";
+// ───────────────────────────────────────────────────────────────────────────
+// Param schemas
+// ───────────────────────────────────────────────────────────────────────────
+const MAX_RESULTS_DEFAULT = 100;
+const MAX_RESULTS_CAP = 1000;
+const MAX_LOG_HOURS = 168;
+const projectIdField = z
+    .string()
+    .regex(/^[a-z][a-z0-9-]{4,28}[a-z0-9]$/, "Invalid project_id — must be 6-30 lowercase letters, digits, hyphens");
+const listServicesParams = z.object({ project_id: projectIdField });
+const listTopicsParams = z.object({ project_id: projectIdField });
+const describeDbParams = z.object({
+    project_id: projectIdField,
+    instance_id: z.string().min(1, "describe_db requires a non-empty 'instance_id'"),
+    database: z.string().default(""),
+});
+const queryLogsParams = z.object({
+    project_id: projectIdField,
+    filter: z
+        .string()
+        .min(1, "query_logs requires a non-empty 'filter'")
+        .refine((f) => !/[;'"]/.test(f), {
+        message: "Filter contains forbidden characters — no semicolons or quotes allowed",
+    })
+        .transform((f) => f.trim()),
+    hours: z.coerce.number().int().positive().max(MAX_LOG_HOURS).default(24),
+    max_results: z.coerce
+        .number()
+        .int()
+        .positive()
+        .max(MAX_RESULTS_CAP)
+        .default(MAX_RESULTS_DEFAULT),
+});
+// ───────────────────────────────────────────────────────────────────────────
+// Error-code translation
+// ───────────────────────────────────────────────────────────────────────────
+const CODE_MAP = {
+    INVALID_PROJECT: "VALIDATION_ERROR",
+    INVALID_INSTANCE: "VALIDATION_ERROR",
+    INVALID_FILTER: "VALIDATION_ERROR",
+    FORBIDDEN_BINARY: "VALIDATION_ERROR",
+    FORBIDDEN_COMMAND: "VALIDATION_ERROR",
+    UNSAFE_ARG: "VALIDATION_ERROR",
+    WRITE_FORBIDDEN: "VALIDATION_ERROR",
+    EXEC_ERROR: "CONNECTION_ERROR",
+    TIMEOUT: "TIMEOUT",
+    PARSE_ERROR: "CONNECTION_ERROR",
+    GCLOUD_MISSING: "CONFIG_ERROR",
+    CONFIG_ERROR: "CONFIG_ERROR",
+    AUTH_ERROR: "AUTH_ERROR",
+    NOT_FOUND: "NOT_FOUND",
+    PERMISSION_DENIED: "AUTH_ERROR",
+    RATE_LIMITED: "RATE_LIMITED",
+};
+function throwIfError(result) {
+    if (!result.ok) {
+        throw new GcpCliError(result.code, result.message, result.retriable);
+    }
+}
+async function loadGcpDefaults() {
+    return {
+        defaultProjectId: process.env["GCP_PROJECT_ID"] ?? null,
+        defaultRegion: process.env["GCP_REGION"] ?? null,
+    };
+}
+export function buildGcpConnector(overrides = {}) {
+    const defaultCredentials = async () => {
+        // GCP uses Application Default Credentials via gcloud; no explicit secret load.
+        return {};
+    };
+    const defaultSdk = async () => {
+        if (!detectGcloudAvailable()) {
+            throw new GcpCliError("GCLOUD_MISSING", "gcloud CLI not available on PATH. Install Google Cloud SDK and " +
+                "authenticate with Application Default Credentials (gcloud auth " +
+                "application-default login).", false);
+        }
+        const defaults = await loadGcpDefaults();
+        return new GcpClient({
+            ...(defaults.defaultProjectId
+                ? { defaultProjectId: defaults.defaultProjectId }
+                : {}),
+            ...(defaults.defaultRegion
+                ? { defaultRegion: defaults.defaultRegion }
+                : {}),
+        });
+    };
+    return createConnector({
+        name: "gcp",
+        version: "3.0.0",
+        scope: (ctx) => ctx.sdk.defaultProjectId && ctx.sdk.defaultRegion
+            ? `${ctx.sdk.defaultProjectId}/${ctx.sdk.defaultRegion}`
+            : null,
+        credentials: overrides.credentials ?? defaultCredentials,
+        sdk: overrides.sdk ?? defaultSdk,
+        actions: {
+            list_services: {
+                description: "List Cloud Run services in a project",
+                params: listServicesParams,
+                classify: { kind: "read" },
+                handler: async (p, ctx) => {
+                    const result = await ctx.sdk.listServices(p.project_id);
+                    throwIfError(result);
+                    return {
+                        project_id: p.project_id,
+                        services: result.data.map((s) => ({
+                            name: s.name ?? "",
+                            title: s.config?.title ?? "",
+                            state: s.state ?? "",
+                        })),
+                        service_count: result.data.length,
+                    };
+                },
+            },
+            describe_db: {
+                description: "Describe a Cloud SQL instance",
+                params: describeDbParams,
+                classify: { kind: "read" },
+                handler: async (p, ctx) => {
+                    const result = await ctx.sdk.describeSqlInstance(p.project_id, p.instance_id);
+                    throwIfError(result);
+                    const inst = result.data;
+                    const [engine, version] = (inst.databaseVersion ?? "").split("_");
+                    return {
+                        project_id: p.project_id,
+                        instance_id: p.instance_id,
+                        database: p.database,
+                        engine: (engine ?? "").toLowerCase(),
+                        version: version ?? "",
+                        tier: inst.settings?.tier ?? "",
+                        region: inst.region ?? "",
+                        state: inst.state ?? "",
+                        tables: [],
+                    };
+                },
+            },
+            list_topics: {
+                description: "List Pub/Sub topics in a project",
+                params: listTopicsParams,
+                classify: { kind: "read" },
+                handler: async (p, ctx) => {
+                    const result = await ctx.sdk.listPubsubTopics(p.project_id);
+                    throwIfError(result);
+                    return {
+                        project_id: p.project_id,
+                        topics: result.data.map((t) => t.name ?? ""),
+                        topic_count: result.data.length,
+                    };
+                },
+            },
+            query_logs: {
+                description: "Query Cloud Logging for entries matching a filter",
+                params: queryLogsParams,
+                classify: { kind: "read" },
+                handler: async (p, ctx) => {
+                    const result = await ctx.sdk.queryLogs(p.project_id, p.filter, p.hours, p.max_results);
+                    throwIfError(result);
+                    return {
+                        project_id: p.project_id,
+                        filter: p.filter,
+                        hours: p.hours,
+                        entries: result.data.map((e) => ({
+                            timestamp: e.timestamp ?? null,
+                            severity: e.severity ?? "",
+                            message: e.textPayload ?? "",
+                        })),
+                        entry_count: result.data.length,
+                        truncated: result.data.length >= p.max_results,
+                    };
+                },
+            },
+        },
+        mapError: (err) => {
+            if (err instanceof GcpCliError) {
+                return {
+                    error_code: CODE_MAP[err.code] ?? "CONNECTION_ERROR",
+                    message: err.message,
+                    retriable: err.retriable,
+                };
+            }
+            return undefined;
+        },
+    });
+}
+// Default production connector.
+const connector = buildGcpConnector();
+export default connector;
+export const { main, fetch, validActions } = connector;
+export { GcpClient, detectGcloudAvailable, } from "./lib/gcp_client.js";
+export { GcpCliError } from "./lib/gcp_error.js";
+//# sourceMappingURL=index.js.map

package/dist/connectors/gcp/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/connectors/gcp/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EAAE,eAAe,EAAkC,MAAM,0BAA0B,CAAC;AAC3F,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,SAAS,EACT,qBAAqB,GAEtB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAEjD,8EAA8E;AAC9E,gBAAgB;AAChB,8EAA8E;AAE9E,MAAM,mBAAmB,GAAG,GAAG,CAAC;AAChC,MAAM,eAAe,GAAG,IAAI,CAAC;AAC7B,MAAM,aAAa,GAAG,GAAG,CAAC;AAE1B,MAAM,cAAc,GAAG,CAAC;KACrB,MAAM,EAAE;KACR,KAAK,CACJ,gCAAgC,EAChC,sEAAsE,CACvE,CAAC;AAEJ,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,cAAc,EAAE,CAAC,CAAC;AACpE,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,cAAc,EAAE,CAAC,CAAC;AAElE,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChC,UAAU,EAAE,cAAc;IAC1B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,gDAAgD,CAAC;IAChF,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;CACjC,CAAC,CAAC;AAEH,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/B,UAAU,EAAE,cAAc;IAC1B,MAAM,EAAE,CAAC;SACN,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,EAAE,0CAA0C,CAAC;SAClD,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE;QAC/B,OAAO,EACL,wEAAwE;KAC3E,CAAC;SACD,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC7B,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACxE,WAAW,EAAE,CAAC,CAAC,MAAM;SAClB,MAAM,EAAE;SACR,GAAG,EAAE;SACL,QAAQ,EAAE;SACV,GAAG,CAAC,eAAe,CAAC;SACpB,OAAO,CAAC,mBAAmB,CAAC;CAChC,CAAC,CAAC;AAEH,8EAA8E;AAC9E,yBAAyB;AACzB,8EAA8E;AAE9E,MAAM,QAAQ,GAA8B;IAC1C,eAAe,EAAE,kBAAkB;IACnC,gBAAgB,EAAE,kBAAkB;IACpC,cAAc,EAAE,kBAAkB;IAClC,gBAAgB,EAAE,kBAAkB;IACpC,iBAAiB,EAAE,kBAAkB;IACrC,UAAU,EAAE,kBAAkB;IAC9B,eAAe,EAAE,kBAAkB;IACnC,UAAU,EAAE,kBAAkB;IAC9B,OAAO,EAAE,SAAS;IAClB,WAAW,EAAE,kBAAkB;IAC/B,cAAc,EAAE,cAAc;IAC9B,YAAY,EAAE,cAAc;IAC5B,UAAU,EAAE,YAAY;IACxB,SAAS,EAAE,WAAW;IACtB,iBAAiB,EAAE,YAAY;IAC/B,YAAY,EAAE,cAAc;CAC7B,CAAC;AAEF,SAAS,YAAY,CACnB,MAAoB;IAEpB,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACf,MAAM,IAAI,WAAW,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;IACvE,CAAC;AACH,CAAC;AAWD,KAAK,UAAU,eAAe;IAI5B,OAAO;QACL,gBAAgB,EAAE,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,IAAI;QACvD,aAAa,EAAE,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,IAAI;KACjD,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,YAA0B,EAAE;IAC5D,MAAM,kBAAkB,GAAG,KAAK,IAAsC,EAAE;QACtE,gFAAgF;QAChF,OAAO,EAAE,CAAC;IACZ,CAAC,CAAC;IAEF,MAAM,UAAU,GAAG,KAAK,IAAwB,EAAE;QAChD,IAAI,CAAC,qBAAqB,EAAE,EAAE,CAAC;YAC7B,MAAM,IAAI,WAAW,CACnB,gBAAgB,EAChB,iEAAiE;gBAC/D,iEAAiE;gBACjE,6BAA6B,EAC/B,KAAK,CACN,CAAC;QACJ,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,eAAe,EAAE,CAAC;QACzC,OAAO,IAAI,SAAS,CAAC;YACnB,GAAG,CAAC,QAAQ,CAAC,gBAAgB;gBAC3B,CAAC,CAAC,EAAE,gBAAgB,EAAE,QAAQ,CAAC,gBAAgB,EAAE;gBACjD,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,QAAQ,CAAC,aAAa;gBACxB,CAAC,CAAC,EAAE,aAAa,EAAE,QAAQ,CAAC,aAAa,EAAE;gBAC3C,CAAC,CAAC,EAAE,CAAC;SACR,CAAC,CAAC;IACL,CAAC,CAAC;IAEF,OAAO,eAAe,CAAY;QAChC,IAAI,EAAE,KAAK;QACX,OAAO,EAAE,OAAO;QAChB,KAAK,EAAE,CAAC,GAAG,EAAE,EAAE,CACb,GAAG,CAAC,GAAG,CAAC,gBAAgB,IAAI,GAAG,CAAC,GAAG,CAAC,aAAa;YAC/C,CAAC,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,gBAAgB,IAAI,GAAG,CAAC,GAAG,CAAC,aAAa,EAAE;YACxD,CAAC,CAAC,IAAI;QACV,WAAW,EAAE,SAAS,CAAC,WAAW,IAAI,kBAAkB;QACxD,GAAG,EAAE,SAAS,CAAC,GAAG,IAAI,UAAU;QAChC,OAAO,EAAE;YACP,aAAa,EAAE;gBACb,WAAW,EAAE,sCAAsC;gBACnD,MAAM,EAAE,kBAAkB;gBAC1B,QAAQ,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;gBAC1B,OAAO,EAAE,KAAK,EAAE,CAAqC,EAAE,GAAG,EAAE,EAAE;oBAC5D,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;oBACxD,YAAY,CAAC,MAAM,CAAC,CAAC;oBACrB,OAAO;wBACL,UAAU,EAAE,CAAC,CAAC,UAAU;wBACxB,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;4BAChC,IAAI,EAAE,CAAC,CAAC,IAAI,IAAI,EAAE;4BAClB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,KAAK,IAAI,EAAE;4BAC5B,KAAK,EAAE,CAAC,CAAC,KAAK,IAAI,EAAE;yBACrB,CAAC,CAAC;wBACH,aAAa,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM;qBAClC,CAAC;gBACJ,CAAC;aACF;YACD,WAAW,EAAE;gBACX,WAAW,EAAE,+BAA+B;gBAC5C,MAAM,EAAE,gBAAgB;gBACxB,QAAQ,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;gBAC1B,OAAO,EAAE,KAAK,EAAE,CAAmC,EAAE,GAAG,EAAE,EAAE;oBAC1D,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,WAAW,CAAC,CAAC;oBAC9E,YAAY,CAAC,MAAM,CAAC,CAAC;oBACrB,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;oBACzB,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,eAAe,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;oBAClE,OAAO;wBACL,UAAU,EAAE,CAAC,CAAC,UAAU;wBACxB,WAAW,EAAE,CAAC,CAAC,WAAW;wBAC1B,QAAQ,EAAE,CAAC,CAAC,QAAQ;wBACpB,MAAM,EAAE,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE;wBACpC,OAAO,EAAE,OAAO,IAAI,EAAE;wBACtB,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,IAAI,EAAE;wBAC/B,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,EAAE;wBACzB,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,EAAE;wBACvB,MAAM,EAAE,EAAE;qBACX,CAAC;gBACJ,CAAC;aACF;YACD,WAAW,EAAE;gBACX,WAAW,EAAE,kCAAkC;gBAC/C,MAAM,EAAE,gBAAgB;gBACxB,QAAQ,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;gBAC1B,OAAO,EAAE,KAAK,EAAE,CAAmC,EAAE,GAAG,EAAE,EAAE;oBAC1D,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;oBAC5D,YAAY,CAAC,MAAM,CAAC,CAAC;oBACrB,OAAO;wBACL,UAAU,EAAE,CAAC,CAAC,UAAU;wBACxB,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC;wBAC5C,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM;qBAChC,CAAC;gBACJ,CAAC;aACF;YACD,UAAU,EAAE;gBACV,WAAW,EAAE,mDAAmD;gBAChE,MAAM,EAAE,eAAe;gBACvB,QAAQ,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;gBAC1B,OAAO,EAAE,KAAK,EAAE,CAAkC,EAAE,GAAG,EAAE,EAAE;oBACzD,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,GAAG,CAAC,SAAS,CACpC,CAAC,CAAC,UAAU,EACZ,CAAC,CAAC,MAAM,EACR,CAAC,CAAC,KAAK,EACP,CAAC,CAAC,WAAW,CACd,CAAC;oBACF,YAAY,CAAC,MAAM,CAAC,CAAC;oBACrB,OAAO;wBACL,UAAU,EAAE,CAAC,CAAC,UAAU;wBACxB,MAAM,EAAE,CAAC,CAAC,MAAM;wBAChB,KAAK,EAAE,CAAC,CAAC,KAAK;wBACd,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;4BAC/B,SAAS,EAAE,CAAC,CAAC,SAAS,IAAI,IAAI;4BAC9B,QAAQ,EAAE,CAAC,CAAC,QAAQ,IAAI,EAAE;4BAC1B,OAAO,EAAE,CAAC,CAAC,WAAW,IAAI,EAAE;yBAC7B,CAAC,CAAC;wBACH,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM;wBAC/B,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC,WAAW;qBAC/C,CAAC;gBACJ,CAAC;aACF;SACF;QACD,QAAQ,EAAE,CAAC,GAAG,EAAE,EAAE;YAChB,IAAI,GAAG,YAAY,WAAW,EAAE,CAAC;gBAC/B,OAAO;oBACL,UAAU,EAAE,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,kBAAkB;oBACpD,OAAO,EAAE,GAAG,CAAC,OAAO;oBACpB,SAAS,EAAE,GAAG,CAAC,SAAS;iBACzB,CAAC;YACJ,CAAC;YACD,OAAO,SAAS,CAAC;QACnB,CAAC;KACF,CAAC,CAAC;AACL,CAAC;AAED,gCAAgC;AAChC,MAAM,SAAS,GAAG,iBAAiB,EAAE,CAAC;AACtC,eAAe,SAAS,CAAC;AACzB,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,YAAY,EAAE,GAAG,SAAS,CAAC;AAEvD,OAAO,EACL,SAAS,EACT,qBAAqB,GAGtB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC"}

package/dist/connectors/gcp/lib/gcp_client.d.ts

@@ -0,0 +1,88 @@
+/**
+ * gcp_client.ts — read-only GCP facade that shells out to `gcloud` / `bq`
+ * with Application Default Credentials.
+ *
+ * Security notes:
+ * - Uses `execFileSync` — **never** a shell string — so arguments are not
+ *   word-split or glob-expanded.
+ * - Enforces a whitelist of permitted commands; anything else raises.
+ * - Validates project IDs and flag values against conservative regexes.
+ * - Read-only flags enforced at the argv level: for example `bq query`
+ *   always runs with `--use_legacy_sql=false --max_rows=…`.
+ */
+import { type ExecFileSyncOptionsWithStringEncoding } from "node:child_process";
+type CommandRunner = (file: string, args: string[], options: ExecFileSyncOptionsWithStringEncoding) => string;
+export interface GcpClientOptions {
+    rateLimitPerMin?: number;
+    connectTimeoutMs?: number;
+    readTimeoutMs?: number;
+    runner?: CommandRunner;
+    sleepImpl?: (ms: number) => Promise<void>;
+    defaultProjectId?: string;
+    defaultRegion?: string;
+}
+export interface GcpErrorPayload {
+    ok: false;
+    code: string;
+    message: string;
+    retriable: boolean;
+}
+export interface GcpSuccessPayload<T> {
+    ok: true;
+    data: T;
+}
+export type GcpResult<T> = GcpSuccessPayload<T> | GcpErrorPayload;
+export declare class GcpClient {
+    private readonly _rateLimitPerMin;
+    private readonly _connectTimeoutMs;
+    private readonly _readTimeoutMs;
+    private readonly _runner;
+    private readonly _sleep;
+    private _timestamps;
+    private _defaultProjectId;
+    private _defaultRegion;
+    constructor(opts?: GcpClientOptions);
+    get defaultProjectId(): string | null;
+    get defaultRegion(): string | null;
+    private _throttle;
+    private _run;
+    listServices(projectId: string): Promise<GcpResult<GcpServiceRecord[]>>;
+    describeSqlInstance(projectId: string, instanceId: string): Promise<GcpResult<GcpSqlInstance>>;
+    listPubsubTopics(projectId: string): Promise<GcpResult<GcpTopic[]>>;
+    queryLogs(projectId: string, filter: string, hours: number, maxResults: number): Promise<GcpResult<GcpLogEntry[]>>;
+    bqQuery(projectId: string, sql: string, maxRows: number): Promise<GcpResult<GcpBqResult>>;
+}
+export interface GcpServiceRecord {
+    name?: string;
+    config?: {
+        title?: string;
+    };
+    state?: string;
+}
+export interface GcpSqlInstance {
+    name?: string;
+    databaseVersion?: string;
+    settings?: {
+        tier?: string;
+    };
+    region?: string;
+    state?: string;
+    connectionName?: string;
+}
+export interface GcpTopic {
+    name?: string;
+}
+export interface GcpLogEntry {
+    timestamp?: string;
+    severity?: string;
+    textPayload?: string;
+    jsonPayload?: Record<string, unknown>;
+}
+export interface GcpBqResult {
+    rows: Array<Record<string, unknown>>;
+    row_count: number;
+}
+/** Detect whether gcloud/bq are available on PATH. Returns `null` on detection failure. */
+export declare function detectGcloudAvailable(runner?: CommandRunner): boolean;
+export {};
+//# sourceMappingURL=gcp_client.d.ts.map

package/dist/connectors/gcp/lib/gcp_client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gcp_client.d.ts","sourceRoot":"","sources":["../../../../src/connectors/gcp/lib/gcp_client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,EAEL,KAAK,qCAAqC,EAC3C,MAAM,oBAAoB,CAAC;AAE5B,KAAK,aAAa,GAAG,CACnB,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,EAAE,EACd,OAAO,EAAE,qCAAqC,KAC3C,MAAM,CAAC;AAoBZ,MAAM,WAAW,gBAAgB;IAC/B,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,MAAM,CAAC,EAAE,aAAa,CAAC;IACvB,SAAS,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1C,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,KAAK,CAAC;IACV,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,OAAO,CAAC;CACpB;AACD,MAAM,WAAW,iBAAiB,CAAC,CAAC;IAClC,EAAE,EAAE,IAAI,CAAC;IACT,IAAI,EAAE,CAAC,CAAC;CACT;AACD,MAAM,MAAM,SAAS,CAAC,CAAC,IAAI,iBAAiB,CAAC,CAAC,CAAC,GAAG,eAAe,CAAC;AAElE,qBAAa,SAAS;IACpB,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAS;IAC1C,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAS;IAC3C,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAS;IACxC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAgB;IACxC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAgC;IACvD,OAAO,CAAC,WAAW,CAAgB;IACnC,OAAO,CAAC,iBAAiB,CAAuB;IAChD,OAAO,CAAC,cAAc,CAAuB;gBAEjC,IAAI,GAAE,gBAAqB;IAYvC,IAAI,gBAAgB,IAAI,MAAM,GAAG,IAAI,CAEpC;IAED,IAAI,aAAa,IAAI,MAAM,GAAG,IAAI,CAEjC;YAEa,SAAS;IAevB,OAAO,CAAC,IAAI;IA2DC,YAAY,CACvB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,SAAS,CAAC,gBAAgB,EAAE,CAAC,CAAC;IAoB5B,mBAAmB,CAC9B,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC;IA4BxB,gBAAgB,CAC3B,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,SAAS,CAAC,QAAQ,EAAE,CAAC,CAAC;IAmBpB,SAAS,CACpB,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,MAAM,EACb,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC,CAAC;IAwCvB,OAAO,CAClB,SAAS,EAAE,MAAM,EACjB,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;CA6CnC;AAED,MAAM,WAAW,gBAAgB;IAC/B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC5B,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,cAAc;IAC7B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC7B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,QAAQ;IACvB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,WAAW;IAC1B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACvC;AAED,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACrC,SAAS,EAAE,MAAM,CAAC;CACnB;AAyJD,2FAA2F;AAC3F,wBAAgB,qBAAqB,CACnC,MAAM,GAAE,aAA4B,GACnC,OAAO,CAWT"}