core/

Package audit defines a best-effort, non-blocking audit sink.

Package budget provides role/tenant scoped execution budgets.

Package cache defines a generic read-result cache with per-table invalidation.

Package codegen renders a relalg.Expr (logical plan) into dialect-specific, fully parameterized SQL.

Package config defines the runtime configuration model: database, entities, per-tool toggles, cost thresholds, cache, rate limits, and audit.

Package cost implements the defense-in-depth cost & resource gate.

Package dialect abstracts SQL dialect differences: identifier quoting, parameter placeholders, EXPLAIN wrapping, and capability negotiation.

Package engine enforces bounded concurrency with backpressure, request deduplication (singleflight), and integration with adaptive limiting and the circuit breaker.

Package entity defines the entity abstraction layer: configured tables, views, and procedures exposed to MCP tools, with aliases, field projection, masking, descriptions, role permissions, row-level security, and keys.

Package hook defines nil-safe lifecycle callbacks for observability.

Package introspect defines schema introspection: discovering entity metadata from a live database, and detecting drift between configured and discovered schemas.

Package mask defines field masking for sensitive data.

Package provider defines the database adapter contract consumed by the application assembly layer.

Package ratelimit provides adaptive concurrency control (AIMD) and a circuit breaker.

Package rbac defines authorization with row-level security.

Package relalg defines a dialect-neutral relational algebra intermediate representation (IR).

Package store defines the database execution abstraction used by core tools.

Package tool defines the DML tool components and their registry.