pg-admin-mcp 0.0.0-stage → 0.1.0

package/dist/tools/admin/sessions.js

@@ -0,0 +1,104 @@
+import { z } from 'zod';
+import { PgMcpError } from '../../core/errors.js';
+import { requireCapability } from '../../core/policy.js';
+import { getBackendInfo, getBackendPid, listSessions } from '../../db/catalog.js';
+import { withSession } from '../../db/session.js';
+import { reportList } from './_shared.js';
+/**
+ * `sessions` sub-operation. `sessions_list` (read-only, no capability) reads
+ * `pg_stat_activity`.
+ *
+ * `sessions_cancel`/`sessions_terminate` require `admin` and both refuse to
+ * target the caller's own backend or a non-`client backend` process. Neither
+ * goes through `runGuardedMutation`'s dry-run/confirm hash ceremony:
+ * `pg_cancel_backend`/`pg_terminate_backend` send an OS-level signal the
+ * instant they run — that effect is NOT undone by a transaction rollback, so
+ * a "dry run" executed inside `runGuardedMutation`'s rolled-back transaction
+ * would still really cancel/terminate the target while claiming nothing
+ * happened. That is exactly the dishonesty the phase brief forbids, so
+ * `sessions_terminate` instead uses a plain `confirm: true` gate with no
+ * hash/expect token — there is nothing transactional to preview. `cancel` is
+ * lower stakes still (the target connection survives; only its in-flight
+ * statement fails) and executes immediately once identity checks pass.
+ */
+export const sessionsListSchema = z.object({
+    op: z.literal('sessions_list'),
+    allDatabases: z.boolean().optional().default(false).describe('false (default) = this profile\'s database only.'),
+});
+export const sessionsCancelSchema = z.object({
+    op: z.literal('sessions_cancel'),
+    pid: z.number().int().positive(),
+});
+export const sessionsTerminateSchema = z.object({
+    op: z.literal('sessions_terminate'),
+    pid: z.number().int().positive(),
+    confirm: z
+        .boolean()
+        .optional()
+        .describe('Must be true to actually terminate. No dry run is offered: pg_terminate_backend signals immediately and is not undone by a rolled-back transaction.'),
+});
+export async function handleSessionsList(profile, args) {
+    const sessions = await withSession(profile, (client) => listSessions(client, args.allDatabases), { operation: 'admin_sessions_list' });
+    return reportList(profile, sessions);
+}
+async function checkTargetable(profile, pid) {
+    requireCapability('admin', profile);
+    return withSession(profile, async (client) => {
+        const backendPid = await getBackendPid(client);
+        if (pid === backendPid) {
+            throw new PgMcpError({
+                code: 'PG_ERROR',
+                message: 'refusing to target the connection postgres_admin is using to run this call',
+                hint: 'terminating/cancelling your own backend would abort this very request; target a different pid',
+                details: { pid },
+            });
+        }
+        const info = await getBackendInfo(client, pid);
+        if (info === null) {
+            throw new PgMcpError({
+                code: 'IDENTIFIER_UNKNOWN',
+                message: `no backend with pid ${pid} is currently connected`,
+                hint: 'run sessions_list to see current backends',
+                details: { pid },
+            });
+        }
+        if (info.backendType !== 'client backend') {
+            throw new PgMcpError({
+                code: 'PG_ERROR',
+                message: `refusing to target pid ${pid}: backend_type is "${info.backendType}", not a client backend`,
+                hint: 'only ordinary client connections can be targeted through postgres_admin; a background/system process needs operator intervention outside this tool',
+                details: { pid, backendType: info.backendType },
+            });
+        }
+        return { backendPid, usename: info.usename };
+    }, { operation: 'admin_sessions_check' });
+}
+export async function handleSessionsCancel(profile, args) {
+    await checkTargetable(profile, args.pid);
+    const ok = await withSession(profile, async (client) => {
+        const { rows } = await client.query({ text: 'SELECT pg_cancel_backend($1) AS ok', values: [args.pid], queryMode: 'extended' });
+        return rows[0]?.ok ?? false;
+    }, { operation: 'admin_sessions_cancel' });
+    return { kind: 'mutation', rowCount: ok ? 1 : 0, committed: ok };
+}
+export async function handleSessionsTerminate(profile, args) {
+    const target = await checkTargetable(profile, args.pid);
+    if (args.confirm !== true) {
+        throw new PgMcpError({
+            code: 'GUARD_CONFIRM_REQUIRED',
+            message: `terminating pid ${args.pid} (${target.usename ?? 'unknown user'}) requires confirm:true`,
+            hint: 'pg_terminate_backend sends an immediate, non-transactional signal, so no dry run is offered — re-run with confirm:true once you are sure',
+            details: { profile: profile.alias, pid: args.pid, usename: target.usename },
+        });
+    }
+    const ok = await withSession(profile, async (client) => {
+        const { rows } = await client.query({ text: 'SELECT pg_terminate_backend($1) AS ok', values: [args.pid], queryMode: 'extended' });
+        return rows[0]?.ok ?? false;
+    }, { operation: 'admin_sessions_terminate' });
+    return { kind: 'mutation', rowCount: ok ? 1 : 0, committed: ok };
+}
+export const SESSIONS_DESCRIPTION = '`sessions_list` (read-only, no capability) reads pg_stat_activity. `sessions_cancel`/`sessions_terminate` require `admin` and refuse to ' +
+    "target your own backend or a non-client-backend process. Neither offers a dry run: pg_cancel_backend/pg_terminate_backend signal " +
+    'immediately and are not transactional, so a rolled-back "dry run" would still really act. `sessions_terminate` needs `confirm: true`; ' +
+    '`sessions_cancel` (the connection survives, only its in-flight statement fails) does not.';
+//# sourceMappingURL=sessions.js.map

package/dist/tools/admin/sessions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sessions.js","sourceRoot":"","sources":["../../../src/tools/admin/sessions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAClD,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AACzD,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAClF,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAElD,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAE1C;;;;;;;;;;;;;;;;GAgBG;AAEH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC;IAC9B,YAAY,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,kDAAkD,CAAC;CACjH,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC;IAChC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;CACjC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,oBAAoB,CAAC;IACnC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAChC,OAAO,EAAE,CAAC;SACP,OAAO,EAAE;SACT,QAAQ,EAAE;SACV,QAAQ,CAAC,qJAAqJ,CAAC;CACnK,CAAC,CAAC;AAEH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,OAAgB,EAAE,IAAwC;IACjG,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,OAAO,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,IAAI,CAAC,YAAY,CAAC,EAAE,EAAE,SAAS,EAAE,qBAAqB,EAAE,CAAC,CAAC;IACvI,OAAO,UAAU,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;AACvC,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,OAAgB,EAAE,GAAW;IAC1D,iBAAiB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACpC,OAAO,WAAW,CAChB,OAAO,EACP,KAAK,EAAE,MAAM,EAAE,EAAE;QACf,MAAM,UAAU,GAAG,MAAM,aAAa,CAAC,MAAM,CAAC,CAAC;QAC/C,IAAI,GAAG,KAAK,UAAU,EAAE,CAAC;YACvB,MAAM,IAAI,UAAU,CAAC;gBACnB,IAAI,EAAE,UAAU;gBAChB,OAAO,EAAE,4EAA4E;gBACrF,IAAI,EAAE,+FAA+F;gBACrG,OAAO,EAAE,EAAE,GAAG,EAAE;aACjB,CAAC,CAAC;QACL,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAC/C,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YAClB,MAAM,IAAI,UAAU,CAAC;gBACnB,IAAI,EAAE,oBAAoB;gBAC1B,OAAO,EAAE,uBAAuB,GAAG,yBAAyB;gBAC5D,IAAI,EAAE,2CAA2C;gBACjD,OAAO,EAAE,EAAE,GAAG,EAAE;aACjB,CAAC,CAAC;QACL,CAAC;QACD,IAAI,IAAI,CAAC,WAAW,KAAK,gBAAgB,EAAE,CAAC;YAC1C,MAAM,IAAI,UAAU,CAAC;gBACnB,IAAI,EAAE,UAAU;gBAChB,OAAO,EAAE,0BAA0B,GAAG,sBAAsB,IAAI,CAAC,WAAW,yBAAyB;gBACrG,IAAI,EAAE,oJAAoJ;gBAC1J,OAAO,EAAE,EAAE,GAAG,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE;aAChD,CAAC,CAAC;QACL,CAAC;QACD,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC;IAC/C,CAAC,EACD,EAAE,SAAS,EAAE,sBAAsB,EAAE,CACtC,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,OAAgB,EAAE,IAA0C;IACrG,MAAM,eAAe,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;IACzC,MAAM,EAAE,GAAG,MAAM,WAAW,CAC1B,OAAO,EACP,KAAK,EAAE,MAAM,EAAE,EAAE;QACf,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,KAAK,CAAkB,EAAE,IAAI,EAAE,oCAAoC,EAAE,MAAM,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC,CAAC;QAChJ,OAAO,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,KAAK,CAAC;IAC9B,CAAC,EACD,EAAE,SAAS,EAAE,uBAAuB,EAAE,CACvC,CAAC;IACF,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;AACnE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,OAAgB,EAAE,IAA6C;IAC3G,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;IACxD,IAAI,IAAI,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC;QAC1B,MAAM,IAAI,UAAU,CAAC;YACnB,IAAI,EAAE,wBAAwB;YAC9B,OAAO,EAAE,mBAAmB,IAAI,CAAC,GAAG,KAAK,MAAM,CAAC,OAAO,IAAI,cAAc,yBAAyB;YAClG,IAAI,EAAE,0IAA0I;YAChJ,OAAO,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,KAAK,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE;SAC5E,CAAC,CAAC;IACL,CAAC;IACD,MAAM,EAAE,GAAG,MAAM,WAAW,CAC1B,OAAO,EACP,KAAK,EAAE,MAAM,EAAE,EAAE;QACf,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,KAAK,CAAkB,EAAE,IAAI,EAAE,uCAAuC,EAAE,MAAM,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC,CAAC;QACnJ,OAAO,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,KAAK,CAAC;IAC9B,CAAC,EACD,EAAE,SAAS,EAAE,0BAA0B,EAAE,CAC1C,CAAC;IACF,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;AACnE,CAAC;AAED,MAAM,CAAC,MAAM,oBAAoB,GAC/B,0IAA0I;IAC1I,mIAAmI;IACnI,wIAAwI;IACxI,2FAA2F,CAAC"}

package/dist/tools/admin/stats.js

@@ -0,0 +1,63 @@
+import { z } from 'zod';
+import { resolveSchemaScope } from '../../core/identifiers.js';
+import { getBlockedQueries, getIndexStats, getLongRunningQueries, getTableStats } from '../../db/catalog.js';
+import { withSession } from '../../db/session.js';
+import { reportList } from './_shared.js';
+/**
+ * `stats` sub-operation — table/index statistics (with a dead-tuple-ratio
+ * bloat *estimate*, not a `pgstattuple`-precision bloat number — that
+ * extension is not assumed installed), cache hit info (`heapBlksRead`/
+ * `heapBlksHit`, `idxBlksRead`/`idxBlksHit` are in the row data itself, ratio
+ * left to the caller), long-running queries, and blocked/blocking pairs.
+ * Entirely read-only, no capability beyond connecting — matches every other
+ * pure-listing tool in this server.
+ */
+export const statsTablesSchema = z.object({
+    op: z.literal('stats_tables'),
+    schemas: z.array(z.string().min(1)).optional().describe('Defaults to every schema in scope for this profile.'),
+    namePattern: z.string().optional().describe('SQL ILIKE pattern to filter table names.'),
+});
+export const statsIndexesSchema = z.object({
+    op: z.literal('stats_indexes'),
+    schemas: z.array(z.string().min(1)).optional(),
+    namePattern: z.string().optional(),
+});
+export const statsActivitySchema = z.object({
+    op: z.literal('stats_activity'),
+    longRunningThresholdMs: z.number().int().min(0).optional().default(5000),
+});
+export async function handleStatsTables(profile, args) {
+    const stats = await withSession(profile, async (client) => {
+        const schemas = await resolveSchemaScope(client, profile, args.schemas);
+        return getTableStats(client, schemas, args.namePattern);
+    }, { operation: 'admin_stats_tables' });
+    return reportList(profile, stats.map((s) => ({
+        ...s,
+        deadTupleRatioEstimate: bloatEstimate(s.liveTuples, s.deadTuples),
+    })));
+}
+function bloatEstimate(live, dead) {
+    const liveN = Number(live);
+    const deadN = Number(dead);
+    const total = liveN + deadN;
+    return total > 0 ? Math.round((deadN / total) * 10000) / 10000 : null;
+}
+export async function handleStatsIndexes(profile, args) {
+    const stats = await withSession(profile, async (client) => {
+        const schemas = await resolveSchemaScope(client, profile, args.schemas);
+        return getIndexStats(client, schemas, args.namePattern);
+    }, { operation: 'admin_stats_indexes' });
+    return reportList(profile, stats);
+}
+export async function handleStatsActivity(profile, args) {
+    const [longRunning, blocked] = await withSession(profile, async (client) => {
+        const lr = await getLongRunningQueries(client, args.longRunningThresholdMs);
+        const bl = await getBlockedQueries(client);
+        return [lr, bl];
+    }, { operation: 'admin_stats_activity' });
+    return { kind: 'report', data: { longRunning, blocked } };
+}
+export const STATS_DESCRIPTION = 'Read-only, no capability beyond connecting. `stats_tables`/`stats_indexes` report pg_stat_user_tables/pg_stat_user_indexes plus IO cache ' +
+    'counters and total size; `deadTupleRatioEstimate` on stats_tables is a heuristic (n_dead_tup / (n_live_tup + n_dead_tup)), NOT a ' +
+    'pgstattuple-precision bloat number. `stats_activity` reports long-running queries and blocked/blocking backend pairs from pg_locks.';
+//# sourceMappingURL=stats.js.map

package/dist/tools/admin/stats.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stats.js","sourceRoot":"","sources":["../../../src/tools/admin/stats.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAC/D,OAAO,EAAE,iBAAiB,EAAE,aAAa,EAAE,qBAAqB,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAC7G,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAElD,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAE1C;;;;;;;;GAQG;AAEH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC;IAC7B,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,qDAAqD,CAAC;IAC9G,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,0CAA0C,CAAC;CACxF,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC;IAC9B,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC9C,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACnC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC;IAC/B,sBAAsB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;CACzE,CAAC,CAAC;AAEH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,OAAgB,EAAE,IAAuC;IAC/F,MAAM,KAAK,GAAG,MAAM,WAAW,CAC7B,OAAO,EACP,KAAK,EAAE,MAAM,EAAE,EAAE;QACf,MAAM,OAAO,GAAG,MAAM,kBAAkB,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QACxE,OAAO,aAAa,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;IAC1D,CAAC,EACD,EAAE,SAAS,EAAE,oBAAoB,EAAE,CACpC,CAAC;IACF,OAAO,UAAU,CACf,OAAO,EACP,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAChB,GAAG,CAAC;QACJ,sBAAsB,EAAE,aAAa,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,UAAU,CAAC;KAClE,CAAC,CAAC,CACJ,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,IAAY,EAAE,IAAY;IAC/C,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;IAC3B,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;IAC3B,MAAM,KAAK,GAAG,KAAK,GAAG,KAAK,CAAC;IAC5B,OAAO,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,GAAG,KAAK,CAAC,GAAG,KAAK,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AACxE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,OAAgB,EAAE,IAAwC;IACjG,MAAM,KAAK,GAAG,MAAM,WAAW,CAC7B,OAAO,EACP,KAAK,EAAE,MAAM,EAAE,EAAE;QACf,MAAM,OAAO,GAAG,MAAM,kBAAkB,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QACxE,OAAO,aAAa,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;IAC1D,CAAC,EACD,EAAE,SAAS,EAAE,qBAAqB,EAAE,CACrC,CAAC;IACF,OAAO,UAAU,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;AACpC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,OAAgB,EAAE,IAAyC;IACnG,MAAM,CAAC,WAAW,EAAE,OAAO,CAAC,GAAG,MAAM,WAAW,CAC9C,OAAO,EACP,KAAK,EAAE,MAAM,EAAE,EAAE;QACf,MAAM,EAAE,GAAG,MAAM,qBAAqB,CAAC,MAAM,EAAE,IAAI,CAAC,sBAAsB,CAAC,CAAC;QAC5E,MAAM,EAAE,GAAG,MAAM,iBAAiB,CAAC,MAAM,CAAC,CAAC;QAC3C,OAAO,CAAC,EAAE,EAAE,EAAE,CAAU,CAAC;IAC3B,CAAC,EACD,EAAE,SAAS,EAAE,sBAAsB,EAAE,CACtC,CAAC;IACF,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,WAAW,EAAE,OAAO,EAAE,EAAE,CAAC;AAC5D,CAAC;AAED,MAAM,CAAC,MAAM,iBAAiB,GAC5B,2IAA2I;IAC3I,mIAAmI;IACnI,qIAAqI,CAAC"}

package/dist/tools/backup.js

@@ -0,0 +1,288 @@
+import { createHash } from 'node:crypto';
+import { mkdir, readdir, readFile, rename, rm, stat } from 'node:fs/promises';
+import path from 'node:path';
+import { Transform } from 'node:stream';
+import { pipeline } from 'node:stream/promises';
+import { z } from 'zod';
+import { loadProfiles } from '../config/profiles.js';
+import { PgMcpError, toToolResult } from '../core/errors.js';
+import { formatOutcome } from '../core/format.js';
+import { renderHostPath, resolveWorkspacePath, writeFileAtomic } from '../core/paths.js';
+import { requireCapability } from '../core/policy.js';
+import { assertClientCoversServer, connectionArgs, requireBinary, runBinary } from '../runtime/binaries.js';
+import { ARCHIVE_META_VERSION, serverVersionOf, sidecarPathFor } from './_archive_meta.js';
+import { defineTool, profileParam } from './_shared.js';
+/**
+ * `postgres_backup` — `pg_dump` of a database, of named schemas, or of named
+ * tables, into the workspace.
+ *
+ * **It runs outside the guard, and says so.** `core/guards.ts#runGuardedMutation`
+ * previews a mutation by running it inside a transaction this server opened and
+ * then rolling back. `pg_dump` is a separate process holding its own
+ * connections; there is no transaction here to roll back, no row count to
+ * compare, and nothing to preview — a "dry run" of a backup would either be a
+ * lie or a second full dump. It is also not destructive to the database: it
+ * only reads, and the one thing it writes is a file, whose accidental
+ * overwrite is refused by `writeFileAtomic` unless `overwrite: true`. So the
+ * gate is the `backup` capability (`PG_<ALIAS>_ALLOW_BACKUP`) plus the workspace
+ * path rules, and that is the whole gate. Same shape, and same reasoning, as
+ * `tools/admin/maintenance.ts`'s VACUUM: not possible, rather than defeated.
+ *
+ * **`statement_timeout` is never applied to the child** (design.md risk 6). It
+ * is a different process, and a legitimate backup runs far longer than any
+ * per-statement limit a profile sets for interactive queries. The child gets
+ * its own wall-clock deadline instead, `timeoutMs`, clamped to the profile's
+ * own `PG_<ALIAS>_BACKUP_TIMEOUT_MAX_MS` (1 hour by default), and is killed
+ * when it fires — a `pg_dump` left running holds a server connection open.
+ *
+ * **The version pre-check** (design.md risk 2) reads the server's version and
+ * compares it against `pg_dump --version` *before* spawning anything, so a
+ * client older than the server fails with an actionable message naming the
+ * image tag rather than with `pg_dump`'s own "server version mismatch" on
+ * stderr.
+ *
+ * **Nothing reaches stdout.** stdout is the MCP transport. For the three
+ * single-file formats `pg_dump` writes its archive to *its* stdout, which is a
+ * pipe this module streams into `core/paths.ts#writeFileAtomic` — the same
+ * `<name>.partial`-then-publish path `postgres_export` uses, so a killed
+ * `pg_dump` leaves no plausible truncated archive under the real name, and the
+ * `wx` flag on the partial file refuses a pre-planted symlink. Directory format
+ * cannot come down a pipe, so that one branch uses `pg_dump --file=<dir>.partial`
+ * into a directory this module created with `mkdir` (which fails `EEXIST`
+ * rather than following a symlink) and renames on success.
+ *
+ * **The sidecar** (`<path>.meta.json`, see `tools/_archive_meta.ts`) records
+ * the client major, the server version, the scope and a checksum, so
+ * `postgres_restore` can refuse a forward-only archive before spawning
+ * anything (design.md risk 10).
+ */
+const FORMATS = {
+    custom: 'custom',
+    directory: 'directory',
+    tar: 'tar',
+    plain: 'plain',
+};
+const inputSchema = z
+    .object({
+    ...profileParam,
+    path: z
+        .string()
+        .min(1)
+        .describe('Destination. Relative paths resolve against the profile\'s first allowed directory; absolute paths must still land inside one. For format:"directory" this is the directory pg_dump fills.'),
+    format: z
+        .enum(['custom', 'directory', 'tar', 'plain'])
+        .optional()
+        .describe('custom (default) — compressed, selective restore, the only format postgres_restore prefers. directory — one file per table, restorable in parallel. tar. plain — SQL text, which pg_restore CANNOT read (feed it to psql).'),
+    schemas: z.array(z.string().min(1)).optional().describe('Dump only these schemas (pg_dump --schema). Omit for the whole database.'),
+    tables: z.array(z.string().min(1)).optional().describe('Dump only these tables (pg_dump --table), optionally schema-qualified.'),
+    schemaOnly: z.boolean().optional().describe('DDL only, no rows.'),
+    dataOnly: z.boolean().optional().describe('Rows only, no DDL.'),
+    noOwner: z.boolean().optional().describe('Omit ownership commands, so the archive restores as whoever runs the restore.'),
+    overwrite: z.boolean().optional().describe('Required (true) to replace an existing file at path. Defaults to false.'),
+    timeoutMs: z
+        .number()
+        .int()
+        .min(1)
+        .optional()
+        .describe('Wall-clock ceiling for the pg_dump child, clamped to PG_<ALIAS>_BACKUP_TIMEOUT_MAX_MS (1 h by default). The profile\'s statement_timeout is deliberately NOT applied to a backup.'),
+})
+    .refine((args) => !(args.schemaOnly === true && args.dataOnly === true), {
+    message: 'schemaOnly and dataOnly are mutually exclusive — pg_dump refuses both at once',
+});
+/**
+ * Every option in `--opt=value` form, deliberately: a schema or table pattern
+ * beginning with `-` is then a value, not a flag. Nothing here is interpolated
+ * into a shell — {@link runBinary} spawns with an argv array and
+ * `shell: false` — and the password is not in this list at all (it reaches the
+ * child through `PGPASSWORD` on its env).
+ */
+export function dumpArgs(profile, args, format, fileTarget) {
+    return [
+        ...connectionArgs(profile),
+        `--dbname=${profile.database}`,
+        `--format=${FORMATS[format]}`,
+        ...(fileTarget === undefined ? [] : [`--file=${fileTarget}`]),
+        ...(args.schemas ?? []).map((s) => `--schema=${s}`),
+        ...(args.tables ?? []).map((t) => `--table=${t}`),
+        ...(args.schemaOnly === true ? ['--schema-only'] : []),
+        ...(args.dataOnly === true ? ['--data-only'] : []),
+        ...(args.noOwner === true ? ['--no-owner'] : []),
+    ];
+}
+/** Hashes the archive in the same pass the bytes already make on their way to disk — the checksum costs no second read. */
+function hashingPassThrough(digest) {
+    return new Transform({
+        transform(chunk, _encoding, callback) {
+            digest.update(chunk);
+            callback(null, chunk);
+        },
+    });
+}
+async function directorySize(dir) {
+    const entries = await readdir(dir, { withFileTypes: true });
+    let total = 0;
+    for (const entry of entries) {
+        const full = path.join(dir, entry.name);
+        if (entry.isDirectory()) {
+            total += await directorySize(full);
+            continue;
+        }
+        total += (await stat(full)).size;
+    }
+    return total;
+}
+/**
+ * Directory format cannot be streamed: `pg_dump -Fd` writes one file per table
+ * into a directory it opens itself. `mkdir` of the `.partial` directory is what
+ * replaces `writeFileAtomic`'s `wx` flag here — it fails `EEXIST` on anything
+ * already at that name, including a symlink, rather than following it out of
+ * the allow-list — and the whole directory is removed if `pg_dump` fails, so a
+ * half-written dump is never published.
+ */
+async function dumpToDirectory(profile, args, destination, command, timeoutMs, overwrite) {
+    const exists = await stat(destination).then(() => true, () => false);
+    if (exists && !overwrite) {
+        throw new PgMcpError({
+            code: 'PATH_DENIED',
+            message: `"${destination}" already exists`,
+            hint: 'pass overwrite: true to replace it, or choose a different destination path',
+            details: { path: destination },
+        });
+    }
+    const partial = `${destination}.partial`;
+    try {
+        await mkdir(partial);
+    }
+    catch (err) {
+        throw new PgMcpError({
+            code: 'PATH_DENIED',
+            message: `"${partial}" could not be created`,
+            hint: `something already exists there — if a killed pg_dump left it behind, delete ${partial} and re-run`,
+            details: { path: partial },
+            cause: err,
+        });
+    }
+    try {
+        await runBinary('pg_dump', command, dumpArgs(profile, args, 'directory', partial), {
+            timeoutMs,
+            password: profile.password(),
+            operation: 'backup',
+        });
+        // The TOC is the one file every directory archive has and the one
+        // `pg_restore` reads first, so it is what identifies this dump. Hashing
+        // every data file would double the I/O of the backup itself.
+        const toc = await readFile(path.join(partial, 'toc.dat'));
+        const checksum = createHash('sha256').update(toc).digest('hex');
+        const bytes = await directorySize(partial);
+        // `rename` onto an existing directory fails rather than merging, so an
+        // approved overwrite has to clear the old one first. Done only after the
+        // dump succeeded — a failed backup never destroys the previous one.
+        if (overwrite)
+            await rm(destination, { recursive: true, force: true });
+        await rename(partial, destination);
+        return { bytes, checksum, checksumOf: 'toc.dat' };
+    }
+    catch (err) {
+        await rm(partial, { recursive: true, force: true });
+        throw err;
+    }
+}
+/** custom / tar / plain all come down `pg_dump`'s stdout, which goes straight into the atomic-write partial file. */
+async function dumpToFile(profile, args, destination, format, command, timeoutMs, overwrite) {
+    const digest = createHash('sha256');
+    const bytes = await writeFileAtomic(destination, async (dest) => {
+        await runBinary('pg_dump', command, dumpArgs(profile, args, format, undefined), {
+            timeoutMs,
+            password: profile.password(),
+            operation: 'backup',
+            // `pipeline`, never a manual data loop: pg_dump only fills its pipe as
+            // fast as the file drains it. Piped to the destination file handle —
+            // never to process.stdout, which is the MCP transport.
+            sink: (stdout) => pipeline(stdout, hashingPassThrough(digest), dest),
+        });
+    }, { overwrite });
+    return { bytes, checksum: digest.digest('hex'), checksumOf: 'archive' };
+}
+export const backupTool = defineTool('postgres_backup', {
+    title: 'Back up a database, schema or table with pg_dump',
+    description: 'Runs pg_dump into a file inside the profile\'s allowed directories. Requires PG_<ALIAS>_ALLOW_BACKUP=true. ' +
+        'Scope: the whole database (default), or only the named `schemas` / `tables`. Formats: custom (default, and the ' +
+        'one postgres_restore wants), directory, tar, plain (plain is SQL TEXT — pg_restore cannot read it). Writes ' +
+        '<path>.partial and renames on success, so a killed pg_dump never leaves a plausible truncated archive, and ' +
+        'writes a <path>.meta.json sidecar recording the client major, the server version, the scope and a checksum — ' +
+        'postgres_restore reads it to refuse an archive newer than the local pg_restore. There is no dry run: pg_dump is ' +
+        'a separate process with no transaction to roll back and nothing to preview. The profile\'s statement_timeout is ' +
+        'NOT applied to the child; use timeoutMs (clamped to PG_<ALIAS>_BACKUP_TIMEOUT_MAX_MS) instead.',
+    inputSchema,
+    // Writes a file, never the database. Idempotent in the sense that matters
+    // here: re-running produces the same artifact for the same scope, and an
+    // accidental clobber is refused unless `overwrite: true` — unlike
+    // `postgres_copy`, whose other direction really does mutate a table.
+    annotations: { readOnlyHint: false, destructiveHint: false, idempotentHint: true, openWorldHint: true },
+}, async (args) => {
+    try {
+        const profile = loadProfiles().get(args.profile);
+        requireCapability('backup', profile);
+        const format = args.format ?? 'custom';
+        const timeoutMs = Math.min(args.timeoutMs ?? profile.backupTimeoutMaxMs, profile.backupTimeoutMaxMs);
+        const destination = await resolveWorkspacePath(args.path, profile.allowedDirs);
+        const overwrite = args.overwrite === true;
+        // Both lazy, both before any child is spawned: the binary probe is what
+        // raises BINARY_MISSING at the tool boundary, and the version comparison
+        // is design.md risk 2 — an older client would otherwise fail with raw
+        // stderr after the destination file already existed.
+        const pgDump = await requireBinary('pg_dump');
+        const server = await serverVersionOf(profile, 'backup');
+        assertClientCoversServer(pgDump, server.num, server.version, profile.alias);
+        const written = format === 'directory'
+            ? await dumpToDirectory(profile, args, destination, pgDump.command, timeoutMs, overwrite)
+            : await dumpToFile(profile, args, destination, format, pgDump.command, timeoutMs, overwrite);
+        const meta = {
+            metaVersion: ARCHIVE_META_VERSION,
+            createdAt: new Date().toISOString(),
+            clientVersion: pgDump.version,
+            clientMajor: pgDump.major,
+            serverVersion: server.version,
+            serverVersionNum: server.num,
+            database: profile.database,
+            format,
+            scope: {
+                schemas: [...(args.schemas ?? [])],
+                tables: [...(args.tables ?? [])],
+                schemaOnly: args.schemaOnly === true,
+                dataOnly: args.dataOnly === true,
+            },
+            bytes: written.bytes,
+            checksum: written.checksum,
+            checksumOf: written.checksumOf,
+        };
+        const sidecarPath = sidecarPathFor(destination);
+        await writeFileAtomic(sidecarPath, async (dest) => {
+            dest.write(`${JSON.stringify(meta, null, 2)}\n`);
+        }, 
+        // Always overwrite: the sidecar belongs to the archive that was just
+        // published, and a stale one left over from a previous dump at the same
+        // path would describe an archive that no longer exists.
+        { overwrite: true });
+        const hostPath = renderHostPath(destination, profile.allowedDirs);
+        return formatOutcome({
+            kind: 'file',
+            path: destination,
+            bytes: written.bytes,
+            ...(hostPath === undefined ? {} : { hostPath }),
+            meta: {
+                format,
+                clientVersion: pgDump.version,
+                clientMajor: pgDump.major,
+                serverVersion: server.version,
+                checksum: `sha256:${written.checksum} (${written.checksumOf})`,
+                sidecarPath,
+                restoreWith: `pg-admin-mcp:pg${pgDump.major} or newer — an archive can never be read by an older pg_restore`,
+            },
+        });
+    }
+    catch (err) {
+        return toToolResult(err);
+    }
+});
+//# sourceMappingURL=backup.js.map

package/dist/tools/backup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"backup.js","sourceRoot":"","sources":["../../src/tools/backup.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAC9E,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxC,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAChD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,YAAY,EAAgB,MAAM,uBAAuB,CAAC;AACnE,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAC7D,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAClD,OAAO,EAAE,cAAc,EAAE,oBAAoB,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACzF,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,EAAE,wBAAwB,EAAE,cAAc,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AAC5G,OAAO,EAAE,oBAAoB,EAAE,eAAe,EAAE,cAAc,EAAoB,MAAM,oBAAoB,CAAC;AAC7G,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAExD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2CG;AAEH,MAAM,OAAO,GAAG;IACd,MAAM,EAAE,QAAQ;IAChB,SAAS,EAAE,WAAW;IACtB,GAAG,EAAE,KAAK;IACV,KAAK,EAAE,OAAO;CACN,CAAC;AAGX,MAAM,WAAW,GAAG,CAAC;KAClB,MAAM,CAAC;IACN,GAAG,YAAY;IACf,IAAI,EAAE,CAAC;SACJ,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,CACP,4LAA4L,CAC7L;IACH,MAAM,EAAE,CAAC;SACN,IAAI,CAAC,CAAC,QAAQ,EAAE,WAAW,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;SAC7C,QAAQ,EAAE;SACV,QAAQ,CAAC,4NAA4N,CAAC;IACzO,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,0EAA0E,CAAC;IACnI,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,wEAAwE,CAAC;IAChI,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,oBAAoB,CAAC;IACjE,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,oBAAoB,CAAC;IAC/D,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,+EAA+E,CAAC;IACzH,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,yEAAyE,CAAC;IACrH,SAAS,EAAE,CAAC;SACT,MAAM,EAAE;SACR,GAAG,EAAE;SACL,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,EAAE;SACV,QAAQ,CAAC,mLAAmL,CAAC;CACjM,CAAC;KACD,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,KAAK,IAAI,IAAI,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC,EAAE;IACvE,OAAO,EAAE,+EAA+E;CACzF,CAAC,CAAC;AAIL;;;;;;GAMG;AACH,MAAM,UAAU,QAAQ,CAAC,OAAgB,EAAE,IAAgB,EAAE,MAAoB,EAAE,UAA8B;IAC/G,OAAO;QACL,GAAG,cAAc,CAAC,OAAO,CAAC;QAC1B,YAAY,OAAO,CAAC,QAAQ,EAAE;QAC9B,YAAY,OAAO,CAAC,MAAM,CAAC,EAAE;QAC7B,GAAG,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,UAAU,EAAE,CAAC,CAAC;QAC7D,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,EAAE,CAAC;QACnD,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,EAAE,CAAC;QACjD,GAAG,CAAC,IAAI,CAAC,UAAU,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACtD,GAAG,CAAC,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAClD,GAAG,CAAC,IAAI,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;KACjD,CAAC;AACJ,CAAC;AAED,2HAA2H;AAC3H,SAAS,kBAAkB,CAAC,MAAqC;IAC/D,OAAO,IAAI,SAAS,CAAC;QACnB,SAAS,CAAC,KAAa,EAAE,SAAS,EAAE,QAAQ;YAC1C,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACrB,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QACxB,CAAC;KACF,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,GAAW;IACtC,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5D,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QACxC,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;YACxB,KAAK,IAAI,MAAM,aAAa,CAAC,IAAI,CAAC,CAAC;YACnC,SAAS;QACX,CAAC;QACD,KAAK,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IACnC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;GAOG;AACH,KAAK,UAAU,eAAe,CAC5B,OAAgB,EAChB,IAAgB,EAChB,WAAmB,EACnB,OAAe,EACf,SAAiB,EACjB,SAAkB;IAElB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,CAAC,IAAI,CACzC,GAAG,EAAE,CAAC,IAAI,EACV,GAAG,EAAE,CAAC,KAAK,CACZ,CAAC;IACF,IAAI,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;QACzB,MAAM,IAAI,UAAU,CAAC;YACnB,IAAI,EAAE,aAAa;YACnB,OAAO,EAAE,IAAI,WAAW,kBAAkB;YAC1C,IAAI,EAAE,4EAA4E;YAClF,OAAO,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE;SAC/B,CAAC,CAAC;IACL,CAAC;IAED,MAAM,OAAO,GAAG,GAAG,WAAW,UAAU,CAAC;IACzC,IAAI,CAAC;QACH,MAAM,KAAK,CAAC,OAAO,CAAC,CAAC;IACvB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,UAAU,CAAC;YACnB,IAAI,EAAE,aAAa;YACnB,OAAO,EAAE,IAAI,OAAO,wBAAwB;YAC5C,IAAI,EAAE,+EAA+E,OAAO,aAAa;YACzG,OAAO,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE;YAC1B,KAAK,EAAE,GAAG;SACX,CAAC,CAAC;IACL,CAAC;IAED,IAAI,CAAC;QACH,MAAM,SAAS,CAAC,SAAS,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,CAAC,EAAE;YACjF,SAAS;YACT,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE;YAC5B,SAAS,EAAE,QAAQ;SACpB,CAAC,CAAC;QAEH,kEAAkE;QAClE,wEAAwE;QACxE,6DAA6D;QAC7D,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC;QAC1D,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAChE,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC,OAAO,CAAC,CAAC;QAC3C,uEAAuE;QACvE,yEAAyE;QACzE,oEAAoE;QACpE,IAAI,SAAS;YAAE,MAAM,EAAE,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACvE,MAAM,MAAM,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;QACnC,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC;IACpD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACpD,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED,qHAAqH;AACrH,KAAK,UAAU,UAAU,CACvB,OAAgB,EAChB,IAAgB,EAChB,WAAmB,EACnB,MAAoB,EACpB,OAAe,EACf,SAAiB,EACjB,SAAkB;IAElB,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IACpC,MAAM,KAAK,GAAG,MAAM,eAAe,CACjC,WAAW,EACX,KAAK,EAAE,IAAI,EAAE,EAAE;QACb,MAAM,SAAS,CAAC,SAAS,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE;YAC9E,SAAS;YACT,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE;YAC5B,SAAS,EAAE,QAAQ;YACnB,uEAAuE;YACvE,qEAAqE;YACrE,uDAAuD;YACvD,IAAI,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,QAAQ,CAAC,MAAM,EAAE,kBAAkB,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC;SACrE,CAAC,CAAC;IACL,CAAC,EACD,EAAE,SAAS,EAAE,CACd,CAAC;IACF,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC;AAC1E,CAAC;AAED,MAAM,CAAC,MAAM,UAAU,GAAG,UAAU,CAClC,iBAAiB,EACjB;IACE,KAAK,EAAE,kDAAkD;IACzD,WAAW,EACT,6GAA6G;QAC7G,iHAAiH;QACjH,6GAA6G;QAC7G,6GAA6G;QAC7G,+GAA+G;QAC/G,kHAAkH;QAClH,kHAAkH;QAClH,gGAAgG;IAClG,WAAW;IACX,0EAA0E;IAC1E,yEAAyE;IACzE,kEAAkE;IAClE,qEAAqE;IACrE,WAAW,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE,eAAe,EAAE,KAAK,EAAE,cAAc,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE;CACxG,EACD,KAAK,EAAE,IAAI,EAAE,EAAE;IACb,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,YAAY,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACjD,iBAAiB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAErC,MAAM,MAAM,GAAiB,IAAI,CAAC,MAAM,IAAI,QAAQ,CAAC;QACrD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,IAAI,OAAO,CAAC,kBAAkB,EAAE,OAAO,CAAC,kBAAkB,CAAC,CAAC;QACrG,MAAM,WAAW,GAAG,MAAM,oBAAoB,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC;QAC/E,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,KAAK,IAAI,CAAC;QAE1C,wEAAwE;QACxE,yEAAyE;QACzE,sEAAsE;QACtE,qDAAqD;QACrD,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,SAAS,CAAC,CAAC;QAC9C,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QACxD,wBAAwB,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;QAE5E,MAAM,OAAO,GACX,MAAM,KAAK,WAAW;YACpB,CAAC,CAAC,MAAM,eAAe,CAAC,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,CAAC,OAAO,EAAE,SAAS,EAAE,SAAS,CAAC;YACzF,CAAC,CAAC,MAAM,UAAU,CAAC,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,CAAC,OAAO,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;QAEjG,MAAM,IAAI,GAAgB;YACxB,WAAW,EAAE,oBAAoB;YACjC,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,aAAa,EAAE,MAAM,CAAC,OAAO;YAC7B,WAAW,EAAE,MAAM,CAAC,KAAK;YACzB,aAAa,EAAE,MAAM,CAAC,OAAO;YAC7B,gBAAgB,EAAE,MAAM,CAAC,GAAG;YAC5B,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,MAAM;YACN,KAAK,EAAE;gBACL,OAAO,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;gBAClC,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;gBAChC,UAAU,EAAE,IAAI,CAAC,UAAU,KAAK,IAAI;gBACpC,QAAQ,EAAE,IAAI,CAAC,QAAQ,KAAK,IAAI;aACjC;YACD,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,UAAU,EAAE,OAAO,CAAC,UAAU;SAC/B,CAAC;QAEF,MAAM,WAAW,GAAG,cAAc,CAAC,WAAW,CAAC,CAAC;QAChD,MAAM,eAAe,CACnB,WAAW,EACX,KAAK,EAAE,IAAI,EAAE,EAAE;YACb,IAAI,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;QACnD,CAAC;QACD,qEAAqE;QACrE,wEAAwE;QACxE,wDAAwD;QACxD,EAAE,SAAS,EAAE,IAAI,EAAE,CACpB,CAAC;QAEF,MAAM,QAAQ,GAAG,cAAc,CAAC,WAAW,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC;QAClE,OAAO,aAAa,CAAC;YACnB,IAAI,EAAE,MAAM;YACZ,IAAI,EAAE,WAAW;YACjB,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC;YAC/C,IAAI,EAAE;gBACJ,MAAM;gBACN,aAAa,EAAE,MAAM,CAAC,OAAO;gBAC7B,WAAW,EAAE,MAAM,CAAC,KAAK;gBACzB,aAAa,EAAE,MAAM,CAAC,OAAO;gBAC7B,QAAQ,EAAE,UAAU,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,UAAU,GAAG;gBAC9D,WAAW;gBACX,WAAW,EAAE,kBAAkB,MAAM,CAAC,KAAK,iEAAiE;aAC7G;SACF,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,YAAY,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;AACH,CAAC,CACF,CAAC"}

package/dist/tools/connection_status.js

@@ -0,0 +1,138 @@
+import { z } from 'zod';
+import { loadProfiles } from '../config/profiles.js';
+import { PgMcpError, enrichUnreachable, fromPgError, toToolResult } from '../core/errors.js';
+import { formatOutcome } from '../core/format.js';
+import { getCurrentRoleInfo } from '../db/catalog.js';
+import { withSession } from '../db/session.js';
+import { PG_BINARIES, requireBinary } from '../runtime/binaries.js';
+import { runtimeReport } from '../runtime/environment.js';
+import { defineTool } from './_shared.js';
+/**
+ * The first real tool: `postgres_connection_status`.
+ *
+ * Reports on one named profile, or every configured profile when `profile` is
+ * omitted — deliberately not `_shared.ts#profileParam`, whose docstring says
+ * "defaults to PG_MCP_DEFAULT_PROFILE"; this tool's omitted-profile meaning is
+ * "report on all of them", not "pick one default".
+ *
+ * **A broken profile is reported, never thrown.** Two distinct kinds of
+ * "broken" exist and are both handled without ever failing the whole call:
+ *  - a profile that failed to *load* (bad/missing `PG_<ALIAS>_URL`, etc.) —
+ *    `config/profiles.ts#loadProfiles` already isolates these into
+ *    `ProfileRegistry.errors`, so there is no `Profile` object for it at all;
+ *  - a profile that loaded fine but the actual connection attempt fails —
+ *    caught around the connect-and-probe step and run through
+ *    `enrichUnreachable` for the container-loopback remediation.
+ * Either way the tool call itself never throws for one bad profile among
+ * several good ones.
+ */
+const inputSchema = z.object({
+    profile: z
+        .string()
+        .optional()
+        .describe('Connection profile alias to report on. Omit to report on every configured profile.'),
+});
+/** Never touches the password — `Profile.password()` is not called anywhere in this module. */
+async function probeConnection(profile) {
+    return withSession(profile, async (client) => {
+        const info = await getCurrentRoleInfo(client);
+        if (info === null) {
+            throw new Error('server did not return a version or current-role row');
+        }
+        return {
+            serverVersion: info.serverVersion,
+            role: {
+                role: info.role,
+                isSuperuser: info.isSuperuser,
+                canCreateRole: info.canCreateRole,
+                canCreateDb: info.canCreateDb,
+                canReplicate: info.canReplicate,
+                bypassRls: info.bypassRls,
+            },
+        };
+    }, { operation: 'connection_status' });
+}
+/**
+ * Client binary versions, as design.md's "Networking" section requires this
+ * tool to report — so an agent can tell *before* calling `postgres_backup`
+ * whether the binaries exist and whether their major covers the servers it is
+ * pointed at. Resolution is lazy and cached (`runtime/binaries.ts`), and a
+ * missing binary is reported here rather than thrown: this tool's whole job is
+ * to describe breakage without failing.
+ */
+async function binaryReport() {
+    const entries = await Promise.all(PG_BINARIES.map(async (name) => {
+        try {
+            return [name, (await requireBinary(name)).version];
+        }
+        catch (err) {
+            return [name, `not available — ${err instanceof PgMcpError ? err.hint : String(err)}`];
+        }
+    }));
+    return Object.fromEntries(entries);
+}
+function hostRewriteOf(rewrittenFrom) {
+    return { applied: rewrittenFrom !== undefined, ...(rewrittenFrom === undefined ? {} : { from: rewrittenFrom }) };
+}
+async function buildStatus(alias, profile, loadError) {
+    const runtime = runtimeReport().runtime;
+    if (profile === undefined) {
+        const err = loadError ?? new PgMcpError({ code: 'PROFILE_UNKNOWN', message: `no profile named "${alias}"`, hint: 'check PG_MCP_PROFILES' });
+        return { alias, ok: false, runtime, error: { code: err.code, message: err.message, hint: err.hint } };
+    }
+    const redacted = profile.redacted();
+    const known = {
+        envClass: redacted.envClass,
+        host: redacted.host,
+        port: redacted.port,
+        database: redacted.database,
+        user: redacted.user,
+        hostRewrite: hostRewriteOf(redacted.rewrittenFrom),
+        capabilities: profile.capabilities,
+    };
+    try {
+        const connection = await probeConnection(profile);
+        return { alias, ok: true, runtime, ...known, connection };
+    }
+    catch (err) {
+        const enriched = enrichUnreachable(err, { alias: profile.alias, host: profile.host, port: profile.port });
+        return { alias, ok: false, runtime, ...known, error: { code: enriched.code, message: enriched.message, hint: enriched.hint } };
+    }
+}
+export const connectionStatusTool = defineTool('postgres_connection_status', {
+    title: 'PostgreSQL connection status',
+    description: 'Reports resolved configuration, reachability, server version, current-role privileges and the pg_dump/pg_restore/psql ' +
+        'client binary versions (which postgres_backup and postgres_restore need) for one named profile ' +
+        'or every configured profile (when `profile` is omitted). A profile that fails to load or connect is reported ' +
+        'with its error and hint, never thrown — the other profiles still report normally. Never returns a password.',
+    inputSchema,
+    annotations: {
+        readOnlyHint: true,
+        destructiveHint: false,
+        idempotentHint: true,
+        openWorldHint: true,
+    },
+}, async (args) => {
+    try {
+        const registry = loadProfiles();
+        const aliases = args.profile !== undefined
+            ? [args.profile]
+            : Array.from(new Set([...registry.list().map((p) => p.alias), ...registry.errors.keys()]));
+        const statuses = await Promise.all(aliases.map(async (alias) => {
+            const loadError = registry.errors.get(alias);
+            if (loadError !== undefined)
+                return buildStatus(alias, undefined, loadError);
+            try {
+                return await buildStatus(alias, registry.get(alias), undefined);
+            }
+            catch (err) {
+                return buildStatus(alias, undefined, err instanceof PgMcpError ? err : fromPgError(err));
+            }
+        }));
+        return formatOutcome({ kind: 'report', data: { binaries: await binaryReport(), profiles: statuses } });
+    }
+    catch (err) {
+        return toToolResult(err);
+    }
+});
+//# sourceMappingURL=connection_status.js.map

package/dist/tools/connection_status.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"connection_status.js","sourceRoot":"","sources":["../../src/tools/connection_status.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,EAAE,UAAU,EAAE,iBAAiB,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAC7F,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAClD,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACpE,OAAO,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAC1D,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAE1C;;;;;;;;;;;;;;;;;;GAkBG;AAEH,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3B,OAAO,EAAE,CAAC;SACP,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CAAC,oFAAoF,CAAC;CAClG,CAAC,CAAC;AAiDH,+FAA+F;AAC/F,KAAK,UAAU,eAAe,CAAC,OAAgB;IAC7C,OAAO,WAAW,CAChB,OAAO,EACP,KAAK,EAAE,MAAM,EAAE,EAAE;QACf,MAAM,IAAI,GAAG,MAAM,kBAAkB,CAAC,MAAM,CAAC,CAAC;QAC9C,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YAClB,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;QACzE,CAAC;QAED,OAAO;YACL,aAAa,EAAE,IAAI,CAAC,aAAa;YACjC,IAAI,EAAE;gBACJ,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,WAAW,EAAE,IAAI,CAAC,WAAW;gBAC7B,aAAa,EAAE,IAAI,CAAC,aAAa;gBACjC,WAAW,EAAE,IAAI,CAAC,WAAW;gBAC7B,YAAY,EAAE,IAAI,CAAC,YAAY;gBAC/B,SAAS,EAAE,IAAI,CAAC,SAAS;aAC1B;SACF,CAAC;IACJ,CAAC,EACD,EAAE,SAAS,EAAE,mBAAmB,EAAE,CACnC,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,KAAK,UAAU,YAAY;IACzB,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAC/B,WAAW,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;QAC7B,IAAI,CAAC;YACH,OAAO,CAAC,IAAI,EAAE,CAAC,MAAM,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAU,CAAC;QAC9D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,IAAI,EAAE,mBAAmB,GAAG,YAAY,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAU,CAAC;QAClG,CAAC;IACH,CAAC,CAAC,CACH,CAAC;IACF,OAAO,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;AACrC,CAAC;AAED,SAAS,aAAa,CAAC,aAAiC;IACtD,OAAO,EAAE,OAAO,EAAE,aAAa,KAAK,SAAS,EAAE,GAAG,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC,EAAE,CAAC;AACnH,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,KAAa,EAAE,OAA4B,EAAE,SAAiC;IACvG,MAAM,OAAO,GAAG,aAAa,EAAE,CAAC,OAAO,CAAC;IAExC,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,MAAM,GAAG,GAAG,SAAS,IAAI,IAAI,UAAU,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,qBAAqB,KAAK,GAAG,EAAE,IAAI,EAAE,uBAAuB,EAAE,CAAC,CAAC;QAC5I,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC;IACxG,CAAC;IAED,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC;IACpC,MAAM,KAAK,GAAG;QACZ,QAAQ,EAAE,QAAQ,CAAC,QAAQ;QAC3B,IAAI,EAAE,QAAQ,CAAC,IAAI;QACnB,IAAI,EAAE,QAAQ,CAAC,IAAI;QACnB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;QAC3B,IAAI,EAAE,QAAQ,CAAC,IAAI;QACnB,WAAW,EAAE,aAAa,CAAC,QAAQ,CAAC,aAAa,CAAC;QAClD,YAAY,EAAE,OAAO,CAAC,YAAY;KACnC,CAAC;IAEF,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,MAAM,eAAe,CAAC,OAAO,CAAC,CAAC;QAClD,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,KAAK,EAAE,UAAU,EAAE,CAAC;IAC5D,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,QAAQ,GAAG,iBAAiB,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;QAC1G,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC;IACjI,CAAC;AACH,CAAC;AAED,MAAM,CAAC,MAAM,oBAAoB,GAAG,UAAU,CAC5C,4BAA4B,EAC5B;IACE,KAAK,EAAE,8BAA8B;IACrC,WAAW,EACT,wHAAwH;QACxH,iGAAiG;QACjG,+GAA+G;QAC/G,6GAA6G;IAC/G,WAAW;IACX,WAAW,EAAE;QACX,YAAY,EAAE,IAAI;QAClB,eAAe,EAAE,KAAK;QACtB,cAAc,EAAE,IAAI;QACpB,aAAa,EAAE,IAAI;KACpB;CACF,EACD,KAAK,EAAE,IAAI,EAAE,EAAE;IACb,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,YAAY,EAAE,CAAC;QAChC,MAAM,OAAO,GACX,IAAI,CAAC,OAAO,KAAK,SAAS;YACxB,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC;YAChB,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,GAAG,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAE/F,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,CAChC,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,EAA0B,EAAE;YAClD,MAAM,SAAS,GAAG,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YAC7C,IAAI,SAAS,KAAK,SAAS;gBAAE,OAAO,WAAW,CAAC,KAAK,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;YAC7E,IAAI,CAAC;gBACH,OAAO,MAAM,WAAW,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,SAAS,CAAC,CAAC;YAClE,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,WAAW,CAAC,KAAK,EAAE,SAAS,EAAE,GAAG,YAAY,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC;YAC3F,CAAC;QACH,CAAC,CAAC,CACH,CAAC;QAEF,OAAO,aAAa,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,MAAM,YAAY,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;IACzG,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,YAAY,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;AACH,CAAC,CACF,CAAC"}