Class

src/tools/database/db-tools.ts:212–212

const READ_ONLY_PREFIXES = /^\s*(SELECT|EXPLAIN|SHOW|DESCRIBE|DESC|PRAGMA|WITH)\b/i;

export class DbQueryTool extends Tool<z.infer<typeof DbQueryArgs>> {
  name = 'db_query';
  description = 'Run a SQL query against the database. By default ONLY SELECT/EXPLAIN/SHOW/DESCRIBE/PRAGMA are allowed (safe). Pass allow_write=true for mutating statements — these are DESTRUCTIVE and cannot be /restored by QodeX (remote DB state). Use prepared-statement params to avoid injection.';
  isReadOnly = false; // can be destructive with allow_write