Skip to content

feat: session/slow-query/privilege DBA capabilities - #138

Merged
Blankll merged 1 commit into
masterfrom
feat/dba-capabilities
Aug 14, 2026
Merged

feat: session/slow-query/privilege DBA capabilities#138
Blankll merged 1 commit into
masterfrom
feat/dba-capabilities

Conversation

@Blankll

@Blankll Blankll commented Aug 14, 2026

Copy link
Copy Markdown
Member

Summary

Adds 5 new DBA capabilities to the sqlkit MCP bridge (25 total sqlkit tools):

Capability Risk Description
sqlkit__list_sessions Safe List active DB sessions (pg_stat_activity / SHOW PROCESSLIST / sys.dm_exec_sessions)
sqlkit__kill_session Elevated Terminate a session (pg_terminate_backend / KILL)
sqlkit__get_slow_queries Safe Slow-running queries
sqlkit__grant_privilege Elevated GRANT with identifier whitelist + privilege allowlist (SQL-injection safe)
sqlkit__revoke_privilege Elevated REVOKE with same guards

Implementation

  • DatabaseAdapter trait +5 methods with DbError::unsupported defaults
  • Implemented for PostgreSQL, MySQL, SQL Server (SQLite/others inherit unsupported)
  • New capabilities/dba.rs with handlers + registration, wired into init_registry
  • agent-tag regression test asserts all 25 sqlkit capabilities are agent-visible

Verification

  • cargo test: 361 passed, 0 failed
  • agent-tag test test_all_sql_capabilities_are_agent_tagged: GREEN@25
  • cargo fmt: clean; clippy: 0 warnings in new code

@Blankll
Blankll force-pushed the feat/dba-capabilities branch from 2918be9 to 6a68351 Compare August 14, 2026 09:03
Adds 5 new sqlkit capabilities — list_sessions, kill_session,
get_slow_queries, grant_privilege, revoke_privilege — via a new
capabilities/dba.rs module wired into the registry:
- DatabaseAdapter trait gains 5 methods with unsupported default stubs
- Implemented for PostgreSQL (pg_stat_activity / pg_terminate_backend /
  GRANT/REVOKE), MySQL (processlist / KILL / GRANT/REVOKE) and SQL Server
  (sys.dm_exec_sessions / KILL / sys.dm_exec_query_stats / GRANT/REVOKE)
- Identifier whitelist + privilege allowlist guard against SQL injection in
  GRANT/REVOKE object/grantee arguments
- agent-tag regression test asserts all 25 sqlkit capabilities are agent-visible

Ultraworked with [Sisyphus](https://github.com/code-yeongyu/oh-my-openagent)

Co-authored-by: Sisyphus <clio-agent@sisyphuslabs.ai>
@Blankll
Blankll force-pushed the feat/dba-capabilities branch from 6a68351 to 929dc35 Compare August 14, 2026 16:01
@Blankll
Blankll merged commit 3df8561 into master Aug 14, 2026
3 checks passed
@Blankll
Blankll deleted the feat/dba-capabilities branch August 14, 2026 16:15
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant