fix(mcp): add direct Redis command execution

packages/node-core/tests/redis-command.test.ts

@@ -0,0 +1,36 @@
+import assert from "node:assert/strict";
+import { test } from "vitest";
+import { classifyRedisCommand, evaluateRedisCommandSafety, firstRedisCommandToken, parseRedisCommandArgv } from "../src/redis-command.js";
+
+test("firstRedisCommandToken normalizes the command name", () => {
+  assert.equal(firstRedisCommandToken("  get session:1"), "GET");
+});
+
+test("parseRedisCommandArgv handles quoted values and escapes", () => {
+  assert.deepEqual(parseRedisCommandArgv('SET session:1 "hello world"'), ["SET", "session:1", "hello world"]);
+  assert.deepEqual(parseRedisCommandArgv("SET key line\\nnext;"), ["SET", "key", "line\nnext"]);
+  assert.throws(() => parseRedisCommandArgv('GET "unterminated'), /unterminated quote/);
+});
+
+test("classifyRedisCommand mirrors DBX redis command safety classes", () => {
+  assert.equal(classifyRedisCommand("GET session:1"), "allowed");
+  assert.equal(classifyRedisCommand("SET session:1 value"), "confirm");
+  assert.equal(classifyRedisCommand("KEYS *"), "blocked");
+});
+
+test("evaluateRedisCommandSafety blocks write commands when writes are disabled", () => {
+  const decision = evaluateRedisCommandSafety("SET session:1 value", { allowWrites: false });
+
+  assert.equal(decision.allowed, false);
+  assert.match(decision.reason ?? "", /read-only/i);
+});
+
+test("evaluateRedisCommandSafety requires dangerous mode for blocked commands", () => {
+  const blocked = evaluateRedisCommandSafety("KEYS *", { allowWrites: true, allowDangerous: false });
+  const allowed = evaluateRedisCommandSafety("KEYS *", { allowWrites: true, allowDangerous: true });
+
+  assert.equal(blocked.allowed, false);
+  assert.match(blocked.reason ?? "", /dangerous/i);
+  assert.equal(allowed.allowed, true);
+  assert.equal(allowed.skipSafetyCheck, true);
+});