Skip to main content Module sql Copy item path Source cancel Server-side statement cancellation (D2). ddl DDL semantics (D4): protection modelling and absent-target preflight. docker Docker bridge validation and command construction (no shell strings). hints MAX_EXECUTION_TIME hint injection (legacy sql/hints.ts port). known_hosts SSH known_hosts parsing, matching and verification (sshHostKey.ts
port): plain, wildcard, [host]:port, hashed |1| entries,
@cert-authority/@revoked markers, SHA-256 fingerprints. mysql MySQL/MariaDB execution: bounded pools, TLS with server-name override,
hard-failing READ ONLY transactions, MAX_EXECUTION_TIME hints,
streaming with caps, lossless numerics, LOCAL INFILE disabled. pool Credential identity and pool lifecycle (Phase 2 of the hardening plan). sqlite SQLite execution: read-only handles for reads, BEGIN IMMEDIATE for
writes, interrupt-handle cancellation, streaming with caps, symlink
checks, and the shared backup pipeline. ssh SSH direct-tunnel transport (russh port of the legacy tunnel runtime).