pg-admin-mcp 0.0.0-stage → 0.1.0

package/dist/config/env.js

@@ -0,0 +1,67 @@
+import { PgMcpError } from '../core/errors.js';
+/** Returns `fallback` (default `undefined`) when unset or empty. */
+export function readString(env, name, fallback) {
+    const raw = env[name];
+    return raw === undefined || raw === '' ? fallback : raw;
+}
+/**
+ * Parses an integer, clamping to `[min, max]` when given. A value that is not
+ * a finite number is a hard `PgMcpError` naming the variable — clamping only
+ * applies to numbers that parsed fine but landed out of range.
+ */
+export function readInt(env, name, opts) {
+    const raw = env[name];
+    if (raw === undefined || raw === '')
+        return opts.default;
+    const parsed = Number(raw);
+    if (!Number.isFinite(parsed)) {
+        throw new PgMcpError({
+            code: 'PROFILE_MISCONFIGURED',
+            message: `${name} must be a number, got "${raw}"`,
+            hint: `set ${name} to a whole number, e.g. ${name}=${opts.default}`,
+        });
+    }
+    let value = parsed;
+    if (opts.min !== undefined && value < opts.min)
+        value = opts.min;
+    if (opts.max !== undefined && value > opts.max)
+        value = opts.max;
+    return value;
+}
+const TRUE_VALUES = new Set(['1', 'true', 'yes']);
+const FALSE_VALUES = new Set(['0', 'false', 'no', '']);
+/**
+ * `1`/`true`/`yes` (any case) -> `true`. `0`/`false`/`no`/unset/empty -> `false`.
+ * Anything else is a hard `PgMcpError` naming the variable — an unrecognized
+ * bool spelling is a typo, not a value to guess at.
+ */
+export function readBool(env, name) {
+    const raw = env[name] ?? '';
+    const normalized = raw.trim().toLowerCase();
+    if (TRUE_VALUES.has(normalized))
+        return true;
+    if (FALSE_VALUES.has(normalized))
+        return false;
+    throw new PgMcpError({
+        code: 'PROFILE_MISCONFIGURED',
+        message: `${name} must be a boolean, got "${raw}"`,
+        hint: `set ${name} to one of 1/true/yes or 0/false/no`,
+    });
+}
+function splitList(raw) {
+    if (raw === undefined)
+        return [];
+    return raw
+        .split(',')
+        .map((entry) => entry.trim())
+        .filter((entry) => entry.length > 0);
+}
+/** Comma-separated, trimmed, empties dropped. `[]` when unset. */
+export function readCsv(env, name) {
+    return splitList(env[name]);
+}
+/** Same rules as {@link readCsv} — path lists use the comma separator too, see the file header. */
+export function readPathList(env, name) {
+    return splitList(env[name]);
+}
+//# sourceMappingURL=env.js.map

package/dist/config/env.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"env.js","sourceRoot":"","sources":["../../src/config/env.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAsB/C,oEAAoE;AACpE,MAAM,UAAU,UAAU,CAAC,GAAsB,EAAE,IAAY,EAAE,QAAiB;IAChF,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC;IACtB,OAAO,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC;AAC1D,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,OAAO,CAAC,GAAsB,EAAE,IAAY,EAAE,IAAoB;IAChF,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC;IACtB,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,EAAE;QAAE,OAAO,IAAI,CAAC,OAAO,CAAC;IAEzD,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IAC3B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,UAAU,CAAC;YACnB,IAAI,EAAE,uBAAuB;YAC7B,OAAO,EAAE,GAAG,IAAI,2BAA2B,GAAG,GAAG;YACjD,IAAI,EAAE,OAAO,IAAI,4BAA4B,IAAI,IAAI,IAAI,CAAC,OAAO,EAAE;SACpE,CAAC,CAAC;IACL,CAAC;IAED,IAAI,KAAK,GAAG,MAAM,CAAC;IACnB,IAAI,IAAI,CAAC,GAAG,KAAK,SAAS,IAAI,KAAK,GAAG,IAAI,CAAC,GAAG;QAAE,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC;IACjE,IAAI,IAAI,CAAC,GAAG,KAAK,SAAS,IAAI,KAAK,GAAG,IAAI,CAAC,GAAG;QAAE,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC;IACjE,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;AAClD,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC;AAEvD;;;;GAIG;AACH,MAAM,UAAU,QAAQ,CAAC,GAAsB,EAAE,IAAY;IAC3D,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;IAC5B,MAAM,UAAU,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC5C,IAAI,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7C,IAAI,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC;QAAE,OAAO,KAAK,CAAC;IAC/C,MAAM,IAAI,UAAU,CAAC;QACnB,IAAI,EAAE,uBAAuB;QAC7B,OAAO,EAAE,GAAG,IAAI,4BAA4B,GAAG,GAAG;QAClD,IAAI,EAAE,OAAO,IAAI,qCAAqC;KACvD,CAAC,CAAC;AACL,CAAC;AAED,SAAS,SAAS,CAAC,GAAuB;IACxC,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IACjC,OAAO,GAAG;SACP,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;SAC5B,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AACzC,CAAC;AAED,kEAAkE;AAClE,MAAM,UAAU,OAAO,CAAC,GAAsB,EAAE,IAAY;IAC1D,OAAO,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;AAC9B,CAAC;AAED,mGAAmG;AACnG,MAAM,UAAU,YAAY,CAAC,GAAsB,EAAE,IAAY;IAC/D,OAAO,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;AAC9B,CAAC"}

package/dist/config/profiles.js

@@ -0,0 +1,257 @@
+import process from 'node:process';
+import { PgMcpError, envPrefix, isLoopbackHost } from '../core/errors.js';
+import { logger } from '../core/logger.js';
+import { inContainer } from '../runtime/environment.js';
+import { readBool, readCsv, readInt, readPathList, readString } from './env.js';
+/**
+ * The profile registry — env-vars-only multi-database configuration.
+ *
+ * `PG_MCP_PROFILES` is a required CSV of aliases; every other per-profile
+ * setting lives under `PG_<ALIAS>_*`, where `<ALIAS>` is the alias uppercased
+ * with every non-alphanumeric character replaced by `_` (see `envPrefix` in
+ * `core/errors.ts` — the one place that mapping is defined, reused here so it
+ * cannot drift from the hints `errors.ts` renders).
+ *
+ * **Failure isolation.** A broken profile does not stop the server: its error
+ * is recorded in `errors` and the other profiles stay usable. Only a missing
+ * `PG_MCP_PROFILES` or a prefix collision between two distinct aliases is
+ * fatal — the latter would otherwise silently share credentials between two
+ * profiles the caller believes are different.
+ */
+export const CAPABILITIES = ['write', 'ddl', 'admin', 'explainAnalyze', 'backup', 'restore'];
+/**
+ * Per-profile env var suffix for each capability, constrained to the `ALLOW_*`
+ * shape by the template literal type. Exported so `core/policy.ts` names the
+ * exact variable in its refusal hints from this one table rather than a second
+ * copy that could drift.
+ */
+export const CAPABILITY_ENV_SUFFIX = {
+    write: 'ALLOW_WRITE',
+    ddl: 'ALLOW_DDL',
+    admin: 'ALLOW_ADMIN',
+    explainAnalyze: 'ALLOW_EXPLAIN_ANALYZE',
+    backup: 'ALLOW_BACKUP',
+    restore: 'ALLOW_RESTORE',
+};
+const PROFILE_ENVS = new Set(['development', 'staging', 'production']);
+/** Unrecognized or missing `ENV` is always `production` — this server never fails open. */
+function normalizeProfileEnv(raw) {
+    if (raw !== undefined && PROFILE_ENVS.has(raw))
+        return raw;
+    return 'production';
+}
+function readCapabilities(prefix, env) {
+    const result = {};
+    for (const cap of CAPABILITIES) {
+        result[cap] = readBool(env, `${prefix}_${CAPABILITY_ENV_SUFFIX[cap]}`);
+    }
+    return result;
+}
+function inheritList(values, fallback) {
+    return values.length > 0 ? values : fallback;
+}
+function buildProfile(alias, env) {
+    const prefix = envPrefix(alias);
+    const rawUrl = readString(env, `${prefix}_URL`);
+    if (rawUrl === undefined) {
+        throw new PgMcpError({
+            code: 'PROFILE_MISCONFIGURED',
+            message: `${prefix}_URL is not set`,
+            hint: `set ${prefix}_URL to a postgres:// connection string for profile "${alias}"`,
+        });
+    }
+    let parsed;
+    try {
+        parsed = new URL(rawUrl);
+    }
+    catch {
+        // Deliberately no `cause` here: Node's URL parse error can echo the raw
+        // (password-bearing) input back in its own `.message`, and this
+        // PgMcpError lives on for the lifetime of the process on the registry's
+        // `errors` map — attaching that as `cause` would be exactly the kind of
+        // password storage this module exists to prevent.
+        throw new PgMcpError({
+            code: 'PROFILE_MISCONFIGURED',
+            message: `${prefix}_URL could not be parsed as a URL`,
+            hint: "Docker's --env-file does no quote stripping or interpolation and handles a mid-line # inconsistently, " +
+                `so a password containing # or a URL containing a space silently truncates — percent-encode the password ` +
+                `inside ${prefix}_URL and retry`,
+        });
+    }
+    const envClass = normalizeProfileEnv(readString(env, `${prefix}_ENV`));
+    const capabilities = readCapabilities(prefix, env);
+    // `min: 1` keeps a negative or zero MAX_ROWS from reaching core/format.ts,
+    // which uses this as a slice/truncation bound. `max: 100_000` is a sane
+    // operator ceiling — large enough for any legitimate query preview, small
+    // enough that a typo (an extra zero) can't make the server buffer an
+    // unbounded result set in memory.
+    const globalAllowedDirs = readPathList(env, 'PG_MCP_ALLOWED_DIRS');
+    const globalMaxRows = readInt(env, 'PG_MCP_MAX_ROWS', { default: 500, min: 1, max: 100_000 });
+    const allowedDirs = inheritList(readPathList(env, `${prefix}_ALLOWED_DIRS`), globalAllowedDirs);
+    const maxRows = readInt(env, `${prefix}_MAX_ROWS`, { default: globalMaxRows, min: 1, max: 100_000 });
+    const schemasCsv = readCsv(env, `${prefix}_SCHEMAS`);
+    const schemas = schemasCsv.length > 0 ? schemasCsv : undefined;
+    const host = parsed.hostname;
+    const port = parsed.port === '' ? 5432 : Number(parsed.port);
+    const database = decodeURIComponent(parsed.pathname.replace(/^\//, ''));
+    const user = decodeURIComponent(parsed.username);
+    // Empty stays `undefined` so `pg`'s own PGPASSWORD/.pgpass fallback still
+    // applies, exactly as it did when the URL was handed to pg whole.
+    const password = parsed.password === '' ? undefined : decodeURIComponent(parsed.password);
+    // Every other query parameter is dropped on the floor — see the `Profile`
+    // doc comment for why the URL is not allowed to be authoritative. Dropping
+    // one silently would be its own support nightmare, so name them.
+    const ignoredParams = Array.from(new Set(parsed.searchParams.keys())).filter((key) => key !== 'sslmode');
+    if (ignoredParams.length > 0) {
+        logger.warn(`profile "${alias}": ignoring URL parameter(s) ${ignoredParams.join(', ')} — ` +
+            `they would silently outrank the ${prefix}_* settings; use those instead`);
+    }
+    const containerLoopback = inContainer(env) && isLoopbackHost(host);
+    const hostRewrite = readString(env, 'PG_MCP_HOST_REWRITE');
+    let rewrittenFrom;
+    let effectiveHost = host;
+    if (containerLoopback && hostRewrite !== undefined) {
+        rewrittenFrom = host;
+        effectiveHost = hostRewrite;
+        logger.warn(`profile "${alias}" host rewritten from ${host} to ${hostRewrite} (PG_MCP_HOST_REWRITE)`);
+    }
+    const redacted = () => ({
+        alias,
+        envClass,
+        host: effectiveHost,
+        port,
+        database,
+        user,
+        containerLoopback,
+        rewrittenFrom,
+    });
+    return {
+        alias,
+        envClass,
+        capabilities,
+        statementTimeoutMs: readInt(env, `${prefix}_STATEMENT_TIMEOUT_MS`, { default: 30000, min: 1 }),
+        lockTimeoutMs: readInt(env, `${prefix}_LOCK_TIMEOUT_MS`, { default: 5000, min: 1 }),
+        // 10 minutes: generous enough for a large export/copy, small enough that a
+        // misbehaving query cannot pin a connection open indefinitely.
+        exportTimeoutMaxMs: readInt(env, `${prefix}_EXPORT_TIMEOUT_MAX_MS`, { default: 600_000, min: 1 }),
+        // 1 hour. A backup is a child process, not a statement: the profile's
+        // statement_timeout is never applied to it (design.md risk 6), so this is
+        // the only thing bounding it — generous enough for a real database, finite
+        // enough that a wedged pg_dump cannot hold a server connection forever.
+        backupTimeoutMaxMs: readInt(env, `${prefix}_BACKUP_TIMEOUT_MAX_MS`, { default: 3_600_000, min: 1 }),
+        idleTxTimeoutMs: readInt(env, `${prefix}_IDLE_TX_TIMEOUT_MS`, { default: 60000, min: 1 }),
+        // `max: 50` — Postgres' own default `max_connections` is 100; capping one
+        // profile's pool at half that leaves headroom for every other profile
+        // plus non-MCP clients, even if an operator fat-fingers an extra zero.
+        poolMax: readInt(env, `${prefix}_POOL_MAX`, { default: 4, min: 1, max: 50 }),
+        // Global-only, deliberately: this bounds how long a *pool checkout* may
+        // wait, and the failure it turns from a silent hang into a loud error —
+        // a second checkout taken while the first is still held — is a code bug,
+        // not a per-database tuning knob. 10s is comfortably above a healthy
+        // TCP+TLS+auth handshake and above any queueing a sane pool does, while
+        // still surfacing a wedged profile inside one tool call.
+        connectTimeoutMs: readInt(env, 'PG_MCP_CONNECT_TIMEOUT_MS', { default: 10_000, min: 1 }),
+        schemas,
+        allowedDirs,
+        maxRows,
+        // The URL's `sslmode` is the fallback, not the winner: an operator who only
+        // ever configured TLS in the URL keeps it, and `PG_<ALIAS>_SSL_MODE`
+        // overrides it. Either way `db/pool.ts` validates the value — an
+        // unrecognized mode is a hard error there, never a quiet drop to plaintext.
+        sslMode: readString(env, `${prefix}_SSL_MODE`) ?? (parsed.searchParams.get('sslmode') ?? undefined),
+        sslRootCert: readString(env, `${prefix}_SSL_ROOT_CERT`),
+        host: effectiveHost,
+        port,
+        database,
+        user,
+        containerLoopback,
+        rewrittenFrom,
+        password: () => password,
+        redacted,
+        toString: () => `Profile(${alias})`,
+        toJSON: redacted,
+    };
+}
+/** Pure function of its `env` argument — no module-level singleton, so tests never fight shared state. */
+export function loadProfiles(env = process.env) {
+    const aliases = readCsv(env, 'PG_MCP_PROFILES');
+    if (aliases.length === 0) {
+        throw new PgMcpError({
+            code: 'PROFILE_MISCONFIGURED',
+            message: 'PG_MCP_PROFILES is not set',
+            hint: 'set PG_MCP_PROFILES to a comma-separated list of profile aliases, e.g. PG_MCP_PROFILES=dev,prod',
+        });
+    }
+    // Seeded with the reserved global prefix so an alias that normalizes to it
+    // (e.g. `PG_MCP_PROFILES=MCP`) hits the same fatal collision path as an
+    // alias-vs-alias collision below — otherwise its `${prefix}_ALLOWED_DIRS` /
+    // `${prefix}_MAX_ROWS` would resolve to the real `PG_MCP_*` globals and the
+    // profile would silently read global config as if it were its own.
+    const aliasByPrefix = new Map([['PG_MCP', '(reserved for global settings)']]);
+    for (const alias of aliases) {
+        const prefix = envPrefix(alias);
+        const collidingAlias = aliasByPrefix.get(prefix);
+        if (collidingAlias !== undefined) {
+            throw new PgMcpError({
+                code: 'PROFILE_MISCONFIGURED',
+                message: prefix === 'PG_MCP'
+                    ? `profile "${alias}" normalizes to the env prefix PG_MCP_, which is reserved for global settings`
+                    : `profiles "${collidingAlias}" and "${alias}" both normalize to the env prefix ${prefix}_`,
+                hint: prefix === 'PG_MCP'
+                    ? `pick a different alias for "${alias}" — the PG_MCP_ prefix is reserved for global settings, not a profile`
+                    : 'rename one of the aliases so their uppercased, alphanumeric-only forms differ — ' +
+                        'sharing a prefix would silently share one profile\'s credentials with the other',
+            });
+        }
+        aliasByPrefix.set(prefix, alias);
+    }
+    const firstAlias = aliases[0];
+    if (firstAlias === undefined) {
+        // Unreachable: the empty-CSV case above already returned. Guarding anyway
+        // keeps `defaultAlias` typed as `string`, not `string | undefined`.
+        throw new PgMcpError({
+            code: 'PROFILE_MISCONFIGURED',
+            message: 'PG_MCP_PROFILES is not set',
+            hint: 'set PG_MCP_PROFILES to a comma-separated list of profile aliases, e.g. PG_MCP_PROFILES=dev,prod',
+        });
+    }
+    const defaultAlias = readString(env, 'PG_MCP_DEFAULT_PROFILE') ?? firstAlias;
+    const profiles = new Map();
+    const errors = new Map();
+    for (const alias of aliases) {
+        try {
+            profiles.set(alias, buildProfile(alias, env));
+        }
+        catch (err) {
+            const pgErr = err instanceof PgMcpError
+                ? err
+                : new PgMcpError({
+                    code: 'PROFILE_MISCONFIGURED',
+                    message: err instanceof Error ? err.message : String(err),
+                    hint: 'fix the profile configuration and restart the server',
+                });
+            errors.set(alias, pgErr);
+            logger.warn(`profile "${alias}" failed to load: ${pgErr.message}`);
+        }
+    }
+    return {
+        defaultAlias,
+        errors,
+        list: () => Array.from(profiles.values()),
+        get: (alias) => {
+            const target = alias ?? defaultAlias;
+            const profile = profiles.get(target);
+            if (profile !== undefined)
+                return profile;
+            const known = Array.from(profiles.keys());
+            throw new PgMcpError({
+                code: 'PROFILE_UNKNOWN',
+                message: `no profile named "${target}"`,
+                hint: known.length > 0
+                    ? `known profiles: ${known.join(', ')}`
+                    : 'no profiles loaded successfully — check PG_MCP_PROFILES and the startup warnings on stderr',
+            });
+        },
+    };
+}
+//# sourceMappingURL=profiles.js.map

package/dist/config/profiles.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"profiles.js","sourceRoot":"","sources":["../../src/config/profiles.ts"],"names":[],"mappings":"AAAA,OAAO,OAAO,MAAM,cAAc,CAAC;AACnC,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAC1E,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAC3C,OAAO,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AACxD,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AAEhF;;;;;;;;;;;;;;GAcG;AAEH,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,gBAAgB,EAAE,QAAQ,EAAE,SAAS,CAAU,CAAC;AAItG;;;;;GAKG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACnC,KAAK,EAAE,aAAa;IACpB,GAAG,EAAE,WAAW;IAChB,KAAK,EAAE,aAAa;IACpB,cAAc,EAAE,uBAAuB;IACvC,MAAM,EAAE,cAAc;IACtB,OAAO,EAAE,eAAe;CACgC,CAAC;AAG3D,MAAM,YAAY,GAAG,IAAI,GAAG,CAAa,CAAC,aAAa,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC,CAAC;AAEnF,2FAA2F;AAC3F,SAAS,mBAAmB,CAAC,GAAuB;IAClD,IAAI,GAAG,KAAK,SAAS,IAAI,YAAY,CAAC,GAAG,CAAC,GAAiB,CAAC;QAAE,OAAO,GAAiB,CAAC;IACvF,OAAO,YAAY,CAAC;AACtB,CAAC;AA4ED,SAAS,gBAAgB,CAAC,MAAc,EAAE,GAAsB;IAC9D,MAAM,MAAM,GAAG,EAAiC,CAAC;IACjD,KAAK,MAAM,GAAG,IAAI,YAAY,EAAE,CAAC;QAC/B,MAAM,CAAC,GAAG,CAAC,GAAG,QAAQ,CAAC,GAAG,EAAE,GAAG,MAAM,IAAI,qBAAqB,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACzE,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,WAAW,CAAC,MAAyB,EAAE,QAA2B;IACzE,OAAO,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC;AAC/C,CAAC;AAED,SAAS,YAAY,CAAC,KAAa,EAAE,GAAsB;IACzD,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;IAEhC,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,EAAE,GAAG,MAAM,MAAM,CAAC,CAAC;IAChD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,MAAM,IAAI,UAAU,CAAC;YACnB,IAAI,EAAE,uBAAuB;YAC7B,OAAO,EAAE,GAAG,MAAM,iBAAiB;YACnC,IAAI,EAAE,OAAO,MAAM,wDAAwD,KAAK,GAAG;SACpF,CAAC,CAAC;IACL,CAAC;IAED,IAAI,MAAW,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,wEAAwE;QACxE,gEAAgE;QAChE,wEAAwE;QACxE,wEAAwE;QACxE,kDAAkD;QAClD,MAAM,IAAI,UAAU,CAAC;YACnB,IAAI,EAAE,uBAAuB;YAC7B,OAAO,EAAE,GAAG,MAAM,mCAAmC;YACrD,IAAI,EACF,wGAAwG;gBACxG,0GAA0G;gBAC1G,UAAU,MAAM,gBAAgB;SACnC,CAAC,CAAC;IACL,CAAC;IAED,MAAM,QAAQ,GAAG,mBAAmB,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,MAAM,MAAM,CAAC,CAAC,CAAC;IACvE,MAAM,YAAY,GAAG,gBAAgB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAEnD,2EAA2E;IAC3E,wEAAwE;IACxE,0EAA0E;IAC1E,qEAAqE;IACrE,kCAAkC;IAClC,MAAM,iBAAiB,GAAG,YAAY,CAAC,GAAG,EAAE,qBAAqB,CAAC,CAAC;IACnE,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,EAAE,iBAAiB,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;IAE9F,MAAM,WAAW,GAAG,WAAW,CAAC,YAAY,CAAC,GAAG,EAAE,GAAG,MAAM,eAAe,CAAC,EAAE,iBAAiB,CAAC,CAAC;IAChG,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,MAAM,WAAW,EAAE,EAAE,OAAO,EAAE,aAAa,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;IAErG,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,MAAM,UAAU,CAAC,CAAC;IACrD,MAAM,OAAO,GAAG,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;IAE/D,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC;IAC7B,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC7D,MAAM,QAAQ,GAAG,kBAAkB,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC;IACxE,MAAM,IAAI,GAAG,kBAAkB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACjD,0EAA0E;IAC1E,kEAAkE;IAClE,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,kBAAkB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAE1F,0EAA0E;IAC1E,2EAA2E;IAC3E,iEAAiE;IACjE,MAAM,aAAa,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC;IACzG,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC7B,MAAM,CAAC,IAAI,CACT,YAAY,KAAK,gCAAgC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK;YAC5E,mCAAmC,MAAM,gCAAgC,CAC5E,CAAC;IACJ,CAAC;IAED,MAAM,iBAAiB,GAAG,WAAW,CAAC,GAAG,CAAC,IAAI,cAAc,CAAC,IAAI,CAAC,CAAC;IACnE,MAAM,WAAW,GAAG,UAAU,CAAC,GAAG,EAAE,qBAAqB,CAAC,CAAC;IAE3D,IAAI,aAAiC,CAAC;IACtC,IAAI,aAAa,GAAG,IAAI,CAAC;IACzB,IAAI,iBAAiB,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;QACnD,aAAa,GAAG,IAAI,CAAC;QACrB,aAAa,GAAG,WAAW,CAAC;QAC5B,MAAM,CAAC,IAAI,CAAC,YAAY,KAAK,yBAAyB,IAAI,OAAO,WAAW,wBAAwB,CAAC,CAAC;IACxG,CAAC;IAED,MAAM,QAAQ,GAAG,GAAoB,EAAE,CAAC,CAAC;QACvC,KAAK;QACL,QAAQ;QACR,IAAI,EAAE,aAAa;QACnB,IAAI;QACJ,QAAQ;QACR,IAAI;QACJ,iBAAiB;QACjB,aAAa;KACd,CAAC,CAAC;IAEH,OAAO;QACL,KAAK;QACL,QAAQ;QACR,YAAY;QACZ,kBAAkB,EAAE,OAAO,CAAC,GAAG,EAAE,GAAG,MAAM,uBAAuB,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;QAC9F,aAAa,EAAE,OAAO,CAAC,GAAG,EAAE,GAAG,MAAM,kBAAkB,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;QACnF,2EAA2E;QAC3E,+DAA+D;QAC/D,kBAAkB,EAAE,OAAO,CAAC,GAAG,EAAE,GAAG,MAAM,wBAAwB,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;QACjG,sEAAsE;QACtE,0EAA0E;QAC1E,2EAA2E;QAC3E,wEAAwE;QACxE,kBAAkB,EAAE,OAAO,CAAC,GAAG,EAAE,GAAG,MAAM,wBAAwB,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;QACnG,eAAe,EAAE,OAAO,CAAC,GAAG,EAAE,GAAG,MAAM,qBAAqB,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;QACzF,0EAA0E;QAC1E,sEAAsE;QACtE,uEAAuE;QACvE,OAAO,EAAE,OAAO,CAAC,GAAG,EAAE,GAAG,MAAM,WAAW,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC;QAC5E,wEAAwE;QACxE,wEAAwE;QACxE,yEAAyE;QACzE,qEAAqE;QACrE,wEAAwE;QACxE,yDAAyD;QACzD,gBAAgB,EAAE,OAAO,CAAC,GAAG,EAAE,2BAA2B,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;QACxF,OAAO;QACP,WAAW;QACX,OAAO;QACP,4EAA4E;QAC5E,qEAAqE;QACrE,iEAAiE;QACjE,4EAA4E;QAC5E,OAAO,EAAE,UAAU,CAAC,GAAG,EAAE,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,SAAS,CAAC;QACnG,WAAW,EAAE,UAAU,CAAC,GAAG,EAAE,GAAG,MAAM,gBAAgB,CAAC;QACvD,IAAI,EAAE,aAAa;QACnB,IAAI;QACJ,QAAQ;QACR,IAAI;QACJ,iBAAiB;QACjB,aAAa;QACb,QAAQ,EAAE,GAAG,EAAE,CAAC,QAAQ;QACxB,QAAQ;QACR,QAAQ,EAAE,GAAG,EAAE,CAAC,WAAW,KAAK,GAAG;QACnC,MAAM,EAAE,QAAQ;KACjB,CAAC;AACJ,CAAC;AAWD,0GAA0G;AAC1G,MAAM,UAAU,YAAY,CAAC,MAAyB,OAAO,CAAC,GAAG;IAC/D,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,EAAE,iBAAiB,CAAC,CAAC;IAChD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,UAAU,CAAC;YACnB,IAAI,EAAE,uBAAuB;YAC7B,OAAO,EAAE,4BAA4B;YACrC,IAAI,EAAE,iGAAiG;SACxG,CAAC,CAAC;IACL,CAAC;IAED,2EAA2E;IAC3E,wEAAwE;IACxE,4EAA4E;IAC5E,4EAA4E;IAC5E,mEAAmE;IACnE,MAAM,aAAa,GAAG,IAAI,GAAG,CAAiB,CAAC,CAAC,QAAQ,EAAE,gCAAgC,CAAC,CAAC,CAAC,CAAC;IAC9F,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;QAChC,MAAM,cAAc,GAAG,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACjD,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;YACjC,MAAM,IAAI,UAAU,CAAC;gBACnB,IAAI,EAAE,uBAAuB;gBAC7B,OAAO,EACL,MAAM,KAAK,QAAQ;oBACjB,CAAC,CAAC,YAAY,KAAK,+EAA+E;oBAClG,CAAC,CAAC,aAAa,cAAc,UAAU,KAAK,sCAAsC,MAAM,GAAG;gBAC/F,IAAI,EACF,MAAM,KAAK,QAAQ;oBACjB,CAAC,CAAC,+BAA+B,KAAK,uEAAuE;oBAC7G,CAAC,CAAC,kFAAkF;wBAClF,iFAAiF;aACxF,CAAC,CAAC;QACL,CAAC;QACD,aAAa,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IACnC,CAAC;IAED,MAAM,UAAU,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IAC9B,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC7B,0EAA0E;QAC1E,oEAAoE;QACpE,MAAM,IAAI,UAAU,CAAC;YACnB,IAAI,EAAE,uBAAuB;YAC7B,OAAO,EAAE,4BAA4B;YACrC,IAAI,EAAE,iGAAiG;SACxG,CAAC,CAAC;IACL,CAAC;IACD,MAAM,YAAY,GAAG,UAAU,CAAC,GAAG,EAAE,wBAAwB,CAAC,IAAI,UAAU,CAAC;IAE7E,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAmB,CAAC;IAC5C,MAAM,MAAM,GAAG,IAAI,GAAG,EAAsB,CAAC;IAC7C,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,CAAC;YACH,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAE,YAAY,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC;QAChD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,KAAK,GACT,GAAG,YAAY,UAAU;gBACvB,CAAC,CAAC,GAAG;gBACL,CAAC,CAAC,IAAI,UAAU,CAAC;oBACb,IAAI,EAAE,uBAAuB;oBAC7B,OAAO,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;oBACzD,IAAI,EAAE,sDAAsD;iBAC7D,CAAC,CAAC;YACT,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;YACzB,MAAM,CAAC,IAAI,CAAC,YAAY,KAAK,qBAAqB,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QACrE,CAAC;IACH,CAAC;IAED,OAAO;QACL,YAAY;QACZ,MAAM;QACN,IAAI,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;QACzC,GAAG,EAAE,CAAC,KAAK,EAAE,EAAE;YACb,MAAM,MAAM,GAAG,KAAK,IAAI,YAAY,CAAC;YACrC,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YACrC,IAAI,OAAO,KAAK,SAAS;gBAAE,OAAO,OAAO,CAAC;YAE1C,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;YAC1C,MAAM,IAAI,UAAU,CAAC;gBACnB,IAAI,EAAE,iBAAiB;gBACvB,OAAO,EAAE,qBAAqB,MAAM,GAAG;gBACvC,IAAI,EACF,KAAK,CAAC,MAAM,GAAG,CAAC;oBACd,CAAC,CAAC,mBAAmB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;oBACvC,CAAC,CAAC,4FAA4F;aACnG,CAAC,CAAC;QACL,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/core/audit-context.js

@@ -0,0 +1,21 @@
+import { AsyncLocalStorage } from 'node:async_hooks';
+const als = new AsyncLocalStorage();
+/** Runs `fn` inside a fresh contribution slot and returns what was contributed. */
+export async function withAuditContext(fn) {
+    const store = {};
+    const result = await als.run(store, fn);
+    return { result, contributed: store };
+}
+/**
+ * Merges `c` into the currently open slot — last write wins per field.
+ * A silent no-op outside a context: a unit test that calls a handler directly
+ * (no wrapper, no ALS) must not crash, and this is the only call site
+ * `runGuardedMutation` has, so it cannot special-case "am I under a wrapper".
+ */
+export function noteAudit(c) {
+    const store = als.getStore();
+    if (store === undefined)
+        return;
+    Object.assign(store, c);
+}
+//# sourceMappingURL=audit-context.js.map

package/dist/core/audit-context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-context.js","sourceRoot":"","sources":["../../src/core/audit-context.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAoBrD,MAAM,GAAG,GAAG,IAAI,iBAAiB,EAAqB,CAAC;AAEvD,mFAAmF;AACnF,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAI,EAAoB;IAC5D,MAAM,KAAK,GAAsB,EAAE,CAAC;IACpC,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACxC,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC;AACxC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,SAAS,CAAC,CAAoB;IAC5C,MAAM,KAAK,GAAG,GAAG,CAAC,QAAQ,EAAE,CAAC;IAC7B,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO;IAChC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;AAC1B,CAAC"}

package/dist/core/audit.js

@@ -0,0 +1,91 @@
+import { appendFile } from 'node:fs/promises';
+import path from 'node:path';
+import process from 'node:process';
+import { readBool, readString } from '../config/env.js';
+import { logger } from './logger.js';
+import { assertNoTraversalSegment } from './paths.js';
+import { onShutdown } from './shutdown.js';
+const SQL_MAX_BYTES = 2048;
+function clipSql(sql) {
+    const buf = Buffer.from(sql, 'utf8');
+    if (buf.byteLength <= SQL_MAX_BYTES)
+        return sql;
+    return `${buf.subarray(0, SQL_MAX_BYTES).toString('utf8')}…[truncated]`;
+}
+/** A malformed `PG_MCP_AUDIT_PARAMS` degrades to the safe default (redacted) instead of throwing on every audited call — this runs on every tool call, so it must never be the thing that breaks one. */
+function auditParamsEnabled(env) {
+    try {
+        return readBool(env, 'PG_MCP_AUDIT_PARAMS');
+    }
+    catch {
+        return false;
+    }
+}
+function redactParams(params, env) {
+    if (params === undefined)
+        return null;
+    if (auditParamsEnabled(env))
+        return [...params];
+    return [`<redacted:${params.length}>`];
+}
+function buildRecord(input, env) {
+    return {
+        timestamp: new Date().toISOString(),
+        profile: input.profile,
+        envClass: input.envClass,
+        tool: input.tool,
+        sqlHash: input.sqlHash ?? null,
+        sql: input.sql === undefined ? null : clipSql(input.sql),
+        params: redactParams(input.params, env),
+        rowCount: input.rowCount ?? null,
+        durationMs: input.durationMs,
+        outcome: input.outcome,
+        errorCode: input.errorCode ?? null,
+    };
+}
+/** Canonicalizes `raw` and rejects an explicit `..` path segment. See the module doc for why this is deliberately not allow-list-scoped. */
+function resolveAuditPath(raw) {
+    assertNoTraversalSegment(raw);
+    return path.resolve(raw);
+}
+const queues = new Map();
+const warnedPaths = new Set();
+function warnOncePerPath(key, message) {
+    if (warnedPaths.has(key))
+        return;
+    warnedPaths.add(key);
+    logger.warn(message);
+}
+function enqueue(rawPath, line) {
+    let resolved;
+    try {
+        resolved = resolveAuditPath(rawPath);
+    }
+    catch (err) {
+        warnOncePerPath(rawPath, `audit: ${err instanceof Error ? err.message : String(err)} — audit logging disabled for this path`);
+        return;
+    }
+    const prior = queues.get(resolved) ?? Promise.resolve();
+    const next = prior
+        .then(() => appendFile(resolved, line, 'utf8'))
+        .catch((err) => {
+        // Degrade to a warn and keep serving — never let a bad audit path fail a tool call.
+        logger.warn(`audit: failed to write ${resolved} — ${err instanceof Error ? err.message : String(err)}`);
+    });
+    queues.set(resolved, next);
+}
+/** Records one tool call. No-op (opens nothing) when `PG_MCP_AUDIT_PATH` is unset. */
+export function auditLog(input, env = process.env) {
+    const rawPath = readString(env, 'PG_MCP_AUDIT_PATH');
+    if (rawPath === undefined)
+        return;
+    const line = `${JSON.stringify(buildRecord(input, env))}\n`;
+    enqueue(rawPath, line);
+}
+/** Resolves once every write enqueued so far has settled — used by tests and by the shutdown hook. */
+export async function flush() {
+    await Promise.allSettled(Array.from(queues.values()));
+}
+// Without this, buffered audit writes are lost when the container stops.
+onShutdown(flush);
+//# sourceMappingURL=audit.js.map

package/dist/core/audit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit.js","sourceRoot":"","sources":["../../src/core/audit.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,OAAO,MAAM,cAAc,CAAC;AACnC,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AACxD,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,wBAAwB,EAAE,MAAM,YAAY,CAAC;AACtD,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAmD3C,MAAM,aAAa,GAAG,IAAI,CAAC;AAE3B,SAAS,OAAO,CAAC,GAAW;IAC1B,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACrC,IAAI,GAAG,CAAC,UAAU,IAAI,aAAa;QAAE,OAAO,GAAG,CAAC;IAChD,OAAO,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,cAAc,CAAC;AAC1E,CAAC;AAED,yMAAyM;AACzM,SAAS,kBAAkB,CAAC,GAAsB;IAChD,IAAI,CAAC;QACH,OAAO,QAAQ,CAAC,GAAG,EAAE,qBAAqB,CAAC,CAAC;IAC9C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,MAAsC,EAAE,GAAsB;IAClF,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACtC,IAAI,kBAAkB,CAAC,GAAG,CAAC;QAAE,OAAO,CAAC,GAAG,MAAM,CAAC,CAAC;IAChD,OAAO,CAAC,aAAa,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC;AACzC,CAAC;AAED,SAAS,WAAW,CAAC,KAAiB,EAAE,GAAsB;IAC5D,OAAO;QACL,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,OAAO,EAAE,KAAK,CAAC,OAAO,IAAI,IAAI;QAC9B,GAAG,EAAE,KAAK,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC;QACxD,MAAM,EAAE,YAAY,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,CAAC;QACvC,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,IAAI;QAChC,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,IAAI;KACnC,CAAC;AACJ,CAAC;AAED,4IAA4I;AAC5I,SAAS,gBAAgB,CAAC,GAAW;IACnC,wBAAwB,CAAC,GAAG,CAAC,CAAC;IAC9B,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;AAC3B,CAAC;AAED,MAAM,MAAM,GAAG,IAAI,GAAG,EAAyB,CAAC;AAChD,MAAM,WAAW,GAAG,IAAI,GAAG,EAAU,CAAC;AAEtC,SAAS,eAAe,CAAC,GAAW,EAAE,OAAe;IACnD,IAAI,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC;QAAE,OAAO;IACjC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACrB,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AACvB,CAAC;AAED,SAAS,OAAO,CAAC,OAAe,EAAE,IAAY;IAC5C,IAAI,QAAgB,CAAC;IACrB,IAAI,CAAC;QACH,QAAQ,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IACvC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,eAAe,CACb,OAAO,EACP,UAAU,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,yCAAyC,CACpG,CAAC;QACF,OAAO;IACT,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;IACxD,MAAM,IAAI,GAAG,KAAK;SACf,IAAI,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;SAC9C,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;QACtB,oFAAoF;QACpF,MAAM,CAAC,IAAI,CAAC,0BAA0B,QAAQ,MAAM,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC1G,CAAC,CAAC,CAAC;IACL,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;AAC7B,CAAC;AAED,sFAAsF;AACtF,MAAM,UAAU,QAAQ,CAAC,KAAiB,EAAE,MAAyB,OAAO,CAAC,GAAG;IAC9E,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;IACrD,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO;IAElC,MAAM,IAAI,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC;IAC5D,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;AACzB,CAAC;AAED,sGAAsG;AACtG,MAAM,CAAC,KAAK,UAAU,KAAK;IACzB,MAAM,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;AACxD,CAAC;AAED,yEAAyE;AACzE,UAAU,CAAC,KAAK,CAAC,CAAC"}

package/dist/core/brands.js

@@ -0,0 +1,24 @@
+/**
+ * Branded identifier types.
+ *
+ * Every SQL-building signature in this codebase takes `SafeIdent`, never
+ * `string`. A raw user-supplied string does not satisfy `SafeIdent`, so
+ * passing one is a compile error at the call site of any function typed to
+ * take `SafeIdent` — the type system, not review discipline, is what keeps
+ * identifiers out of SQL text.
+ *
+ * The only legitimate way to obtain one of these values is a catalog lookup in
+ * `core/identifiers.ts` (added in a later phase), which resolves the name against
+ * `pg_catalog`, quotes it, and then brands the result.
+ */
+/**
+ * Applies a brand to a plain string.
+ *
+ * @internal Callable ONLY from `core/identifiers.ts`, and only on a string that
+ * has just been returned by a `pg_catalog` lookup and quoted. Calling it
+ * anywhere else defeats the entire point of the brand.
+ */
+export function unsafeBrand(value) {
+    return value;
+}
+//# sourceMappingURL=brands.js.map

package/dist/core/brands.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"brands.js","sourceRoot":"","sources":["../../src/core/brands.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAKH;;;;;;GAMG;AACH,MAAM,UAAU,WAAW,CAAC,KAAa;IACvC,OAAO,KAA6B,CAAC;AACvC,CAAC"}