@bytebase/dbhub 0.21.1 → 0.21.2

package/README.md

@@ -119,8 +119,8 @@ See [Testing](.claude/skills/testing/SKILL.md) and [Debug](https://dbhub.ai/conf
 
 <a href="https://www.star-history.com/?repos=bytebase%2Fdbhub&type=date&legend=top-left">
  <picture>
-   <source media="(prefers-color-scheme: dark)" srcset="https://api.star-history.com/image?repos=bytebase/dbhub&type=date&theme=dark&legend=top-left" />
-   <source media="(prefers-color-scheme: light)" srcset="https://api.star-history.com/image?repos=bytebase/dbhub&type=date&legend=top-left" />
-   <img alt="Star History Chart" src="https://api.star-history.com/image?repos=bytebase/dbhub&type=date&legend=top-left" />
+   <source media="(prefers-color-scheme: dark)" srcset="https://api.star-history.com/chart?repos=bytebase/dbhub&type=date&theme=dark&legend=top-left" />
+   <source media="(prefers-color-scheme: light)" srcset="https://api.star-history.com/chart?repos=bytebase/dbhub&type=date&legend=top-left" />
+   <img alt="Star History Chart" src="https://api.star-history.com/chart?repos=bytebase/dbhub&type=date&legend=top-left" />
  </picture>
 </a>

package/dist/{chunk-6JFMPX62.js → chunk-7D6RKVK2.js}

@@ -1,6 +1,6 @@
 import {
   isDriverNotInstalled
-} from "./chunk-GWPUVYLO.js";
+} from "./chunk-WVVMH6FJ.js";
 import {
   ConnectorRegistry,
   SafeURL,

package/dist/{chunk-GWPUVYLO.js → chunk-WVVMH6FJ.js}

@@ -11,6 +11,13 @@ function isDriverNotInstalled(err, driver) {
   const missingSpecifier = match[1];
   return missingSpecifier === driver || missingSpecifier.startsWith(`${driver}/`);
 }
+function isModuleNotFound(err) {
+  if (!(err instanceof Error) || !("code" in err)) {
+    return false;
+  }
+  const code = err.code;
+  return code === "ERR_MODULE_NOT_FOUND" || code === "MODULE_NOT_FOUND";
+}
 async function loadConnectors(connectorModules) {
   await Promise.all(
     connectorModules.map(async ({ load, name, driver }) => {
@@ -21,6 +28,13 @@ async function loadConnectors(connectorModules) {
           console.error(
             `Skipping ${name} connector: driver package "${driver}" not installed.`
           );
+        } else if (isModuleNotFound(err)) {
+          const msg = err instanceof Error ? err.message : String(err);
+          const match = msg.match(MISSING_MODULE_RE);
+          const missing = match ? match[1] : "unknown";
+          console.error(
+            `Skipping ${name} connector: required dependency "${missing}" not installed.`
+          );
         } else {
           throw err;
         }

package/dist/index.js

@@ -12,10 +12,10 @@ import {
   resolveSourceConfigs,
   resolveTomlConfigPath,
   resolveTransport
-} from "./chunk-6JFMPX62.js";
+} from "./chunk-7D6RKVK2.js";
 import {
   loadConnectors
-} from "./chunk-GWPUVYLO.js";
+} from "./chunk-WVVMH6FJ.js";
 import {
   quoteQualifiedIdentifier
 } from "./chunk-JFWX35TB.js";
@@ -1421,7 +1421,7 @@ See documentation for more details on configuring database connections.
     const sources = sourceConfigsData.sources;
     console.error(`Configuration source: ${sourceConfigsData.source}`);
     await connectorManager.connectWithSources(sources);
-    const { initializeToolRegistry: initializeToolRegistry2 } = await import("./registry-I2JQWFDX.js");
+    const { initializeToolRegistry: initializeToolRegistry2 } = await import("./registry-Y755MTUO.js");
     initializeToolRegistry2({
       sources: sourceConfigsData.sources,
       tools: sourceConfigsData.tools
@@ -1466,6 +1466,20 @@ See documentation for more details on configuring database connections.
       app.use(express.json());
       app.use((req, res, next) => {
         const origin = req.headers.origin;
+        if (origin) {
+          const host = (req.headers.host ?? "").split(":")[0].toLowerCase();
+          try {
+            const originHost = new URL(origin).hostname.toLowerCase();
+            if (originHost !== host) {
+              return res.status(403).json({
+                error: "Forbidden",
+                message: "Origin does not match Host header (DNS rebinding protection)"
+              });
+            }
+          } catch {
+            return res.status(400).json({ error: "Bad Request", message: "Malformed Origin header" });
+          }
+        }
         res.header("Access-Control-Allow-Origin", origin || "http://localhost");
         res.header("Access-Control-Allow-Methods", "GET, POST, OPTIONS");
         res.header("Access-Control-Allow-Headers", "Content-Type, Mcp-Session-Id");
@@ -1550,10 +1564,10 @@ See documentation for more details on configuring database connections.
 // src/index.ts
 var connectorModules = [
   { load: () => import("./postgres-4PCNQDGV.js"), name: "PostgreSQL", driver: "pg" },
-  { load: () => import("./sqlserver-JBR6X37Z.js"), name: "SQL Server", driver: "mssql" },
+  { load: () => import("./sqlserver-YV3KVJ3B.js"), name: "SQL Server", driver: "mssql" },
   { load: () => import("./sqlite-FSCLCRIH.js"), name: "SQLite", driver: "better-sqlite3" },
-  { load: () => import("./mysql-I35IQ2GH.js"), name: "MySQL", driver: "mysql2" },
-  { load: () => import("./mariadb-VGTS4WXE.js"), name: "MariaDB", driver: "mariadb" }
+  { load: () => import("./mysql-M4INQQ46.js"), name: "MySQL", driver: "mysql2" },
+  { load: () => import("./mariadb-4IBCPIEV.js"), name: "MariaDB", driver: "mariadb" }
 ];
 loadConnectors(connectorModules).then(() => main()).catch((error) => {
   console.error("Fatal error:", error);

package/dist/{mariadb-VGTS4WXE.js → mariadb-4IBCPIEV.js}

@@ -2,6 +2,9 @@ import {
   extractAffectedRows,
   parseQueryResults
 } from "./chunk-RTB262PR.js";
+import {
+  quoteIdentifier
+} from "./chunk-JFWX35TB.js";
 import {
   SQLRowLimiter
 } from "./chunk-BRXZ5ZQB.js";
@@ -352,10 +355,12 @@ var MariaDBConnector = class _MariaDBConnector {
       let definition = procedure.ROUTINE_DEFINITION;
       try {
         const schemaValue = schema || await this.getCurrentSchema();
+        const quotedSchema = quoteIdentifier(schemaValue, "mariadb");
+        const quotedProcName = quoteIdentifier(procedureName, "mariadb");
         if (procedure.procedure_type === "procedure") {
           try {
             const defRows = await this.pool.query(`
-              SHOW CREATE PROCEDURE ${schemaValue}.${procedureName}
+              SHOW CREATE PROCEDURE ${quotedSchema}.${quotedProcName}
             `);
             if (defRows && defRows.length > 0) {
               definition = defRows[0]["Create Procedure"];
@@ -366,7 +371,7 @@ var MariaDBConnector = class _MariaDBConnector {
         } else {
           try {
             const defRows = await this.pool.query(`
-              SHOW CREATE FUNCTION ${schemaValue}.${procedureName}
+              SHOW CREATE FUNCTION ${quotedSchema}.${quotedProcName}
             `);
             if (defRows && defRows.length > 0) {
               definition = defRows[0]["Create Function"];

package/dist/{mysql-I35IQ2GH.js → mysql-M4INQQ46.js}

@@ -2,6 +2,9 @@ import {
   extractAffectedRows,
   parseQueryResults
 } from "./chunk-RTB262PR.js";
+import {
+  quoteIdentifier
+} from "./chunk-JFWX35TB.js";
 import {
   SQLRowLimiter
 } from "./chunk-BRXZ5ZQB.js";
@@ -358,10 +361,12 @@ var MySQLConnector = class _MySQLConnector {
       let definition = procedure.ROUTINE_DEFINITION;
       try {
         const schemaValue = schema || await this.getCurrentSchema();
+        const quotedSchema = quoteIdentifier(schemaValue, "mysql");
+        const quotedProcName = quoteIdentifier(procedureName, "mysql");
         if (procedure.procedure_type === "procedure") {
           try {
             const [defRows] = await this.pool.query(`
-              SHOW CREATE PROCEDURE ${schemaValue}.${procedureName}
+              SHOW CREATE PROCEDURE ${quotedSchema}.${quotedProcName}
             `);
             if (defRows && defRows.length > 0) {
               definition = defRows[0]["Create Procedure"];
@@ -372,7 +377,7 @@ var MySQLConnector = class _MySQLConnector {
         } else {
           try {
             const [defRows] = await this.pool.query(`
-              SHOW CREATE FUNCTION ${schemaValue}.${procedureName}
+              SHOW CREATE FUNCTION ${quotedSchema}.${quotedProcName}
             `);
             if (defRows && defRows.length > 0) {
               definition = defRows[0]["Create Function"];

package/dist/{registry-I2JQWFDX.js → registry-Y755MTUO.js}

@@ -2,8 +2,8 @@ import {
   ToolRegistry,
   getToolRegistry,
   initializeToolRegistry
-} from "./chunk-6JFMPX62.js";
-import "./chunk-GWPUVYLO.js";
+} from "./chunk-7D6RKVK2.js";
+import "./chunk-WVVMH6FJ.js";
 import "./chunk-C7WEAPX4.js";
 export {
   ToolRegistry,

package/dist/{sqlserver-JBR6X37Z.js → sqlserver-YV3KVJ3B.js}

@@ -1,6 +1,6 @@
 import {
   isDriverNotInstalled
-} from "./chunk-GWPUVYLO.js";
+} from "./chunk-WVVMH6FJ.js";
 import {
   SQLRowLimiter
 } from "./chunk-BRXZ5ZQB.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bytebase/dbhub",
-  "version": "0.21.1",
+  "version": "0.21.2",
   "mcpName": "io.github.bytebase/dbhub",
   "description": "Minimal, token-efficient Database MCP Server for PostgreSQL, MySQL, SQL Server, SQLite, MariaDB",
   "repository": {