@bytebase/dbhub 0.22.4 → 0.22.6

package/README.md

@@ -93,6 +93,8 @@ npx @bytebase/dbhub@latest --transport http --host 127.0.0.1 --port 8080 --demo
 ```
 
 > The HTTP transport defaults to `--host 0.0.0.0`, exposing DBHub on every network interface. For production, bind to `127.0.0.1` and front DBHub with a reverse proxy (nginx/Caddy) or firewall — DBHub does not authenticate HTTP clients.
+>
+> The HTTP transport also has built-in DNS-rebinding protection: it only accepts requests whose `Host` is loopback, this machine's own hostname/IPs, or a name you allow via [`--allowed-hosts`](https://dbhub.ai/config/command-line#allowed-hosts). If a client behind a reverse proxy or custom DNS name gets a `403`, add that hostname with `--allowed-hosts`.
 
 See [Command-Line Options](https://dbhub.ai/config/command-line) for all available parameters.
 

package/dist/{chunk-BRXZ5ZQB.js → chunk-BXXHWEQS.js}

@@ -1,6 +1,6 @@
 import {
   stripCommentsAndStrings
-} from "./chunk-C7WEAPX4.js";
+} from "./chunk-JEZZN2YZ.js";
 
 // src/utils/sql-row-limiter.ts
 var SQLRowLimiter = class {

package/dist/{chunk-C7WEAPX4.js → chunk-JEZZN2YZ.js}

@@ -267,6 +267,20 @@ function scanSingleLineComment(sql, i) {
   }
   return { type: TokenType.Comment, end: j };
 }
+function scanSingleLineCommentMySQL(sql, i) {
+  if (sql[i] !== "-" || sql[i + 1] !== "-") {
+    return null;
+  }
+  const next = sql[i + 2];
+  if (next !== void 0 && next.charCodeAt(0) > 32 && next.charCodeAt(0) !== 127) {
+    return null;
+  }
+  let j = i;
+  while (j < sql.length && sql[j] !== "\n") {
+    j++;
+  }
+  return { type: TokenType.Comment, end: j };
+}
 function scanMultiLineComment(sql, i) {
   if (sql[i] !== "/" || sql[i + 1] !== "*") {
     return null;
@@ -405,7 +419,7 @@ function scanTokenPostgres(sql, i) {
   return scanSingleLineComment(sql, i) ?? scanNestedMultiLineComment(sql, i) ?? scanSingleQuotedString(sql, i) ?? scanDoubleQuotedString(sql, i) ?? scanDollarQuotedBlock(sql, i) ?? plainToken(i);
 }
 function scanTokenMySQL(sql, i) {
-  return scanSingleLineComment(sql, i) ?? scanMultiLineCommentMySQL(sql, i) ?? scanSingleQuotedString(sql, i) ?? scanDoubleQuotedString(sql, i) ?? scanBacktickQuotedIdentifier(sql, i) ?? plainToken(i);
+  return scanSingleLineCommentMySQL(sql, i) ?? scanMultiLineCommentMySQL(sql, i) ?? scanSingleQuotedString(sql, i) ?? scanDoubleQuotedString(sql, i) ?? scanBacktickQuotedIdentifier(sql, i) ?? plainToken(i);
 }
 function scanTokenSQLite(sql, i) {
   return scanSingleLineComment(sql, i) ?? scanMultiLineComment(sql, i) ?? scanSingleQuotedString(sql, i) ?? scanDoubleQuotedString(sql, i) ?? scanBacktickQuotedIdentifier(sql, i) ?? scanBracketQuotedIdentifier(sql, i) ?? plainToken(i);

package/dist/{chunk-DN45LGY4.js → chunk-WPXPKRDU.js}

@@ -8,7 +8,7 @@ import {
   getDefaultPortForType,
   parseConnectionInfoFromDSN,
   stripCommentsAndStrings
-} from "./chunk-C7WEAPX4.js";
+} from "./chunk-JEZZN2YZ.js";
 
 // src/tools/builtin-tools.ts
 var BUILTIN_TOOL_EXECUTE_SQL = "execute_sql";
@@ -733,6 +733,21 @@ function resolveHost() {
   }
   return { host: "0.0.0.0", source: "default" };
 }
+function resolveAllowedHosts() {
+  const args = parseCommandLineArgs();
+  const cliValue = requireFlagValue("allowed-hosts", args, "db.internal,app.example.com");
+  if (cliValue !== void 0) {
+    return { hosts: splitHostList(cliValue), source: "command line argument" };
+  }
+  const envValue = process.env.DBHUB_ALLOWED_HOSTS?.trim();
+  if (envValue) {
+    return { hosts: splitHostList(envValue), source: "environment variable" };
+  }
+  return { hosts: [], source: "default" };
+}
+function splitHostList(value) {
+  return value.split(",").map((h) => h.trim()).filter((h) => h.length > 0);
+}
 function redactDSN(dsn) {
   try {
     const url = new URL(dsn);
@@ -1787,9 +1802,6 @@ var ConnectorManager = class {
     if (source.query_timeout !== void 0 && connector.id !== "sqlite") {
       config.queryTimeoutSeconds = source.query_timeout;
     }
-    if (source.readonly !== void 0) {
-      config.readonly = source.readonly;
-    }
     if (source.search_path) {
       config.searchPath = source.search_path;
     }
@@ -2371,6 +2383,7 @@ export {
   resolveTransport,
   resolvePort,
   resolveHost,
+  resolveAllowedHosts,
   resolveSourceConfigs,
   BUILTIN_TOOL_EXECUTE_SQL,
   BUILTIN_TOOL_SEARCH_OBJECTS,

package/dist/index.js

@@ -9,12 +9,13 @@ import {
   isDemoMode,
   loadTomlConfig,
   mapArgumentsToArray,
+  resolveAllowedHosts,
   resolveHost,
   resolvePort,
   resolveSourceConfigs,
   resolveTomlConfigPath,
   resolveTransport
-} from "./chunk-DN45LGY4.js";
+} from "./chunk-WPXPKRDU.js";
 import {
   loadConnectors
 } from "./chunk-WVVMH6FJ.js";
@@ -28,7 +29,7 @@ import {
   parseConnectionInfoFromDSN,
   splitSQLStatements,
   stripCommentsAndStrings
-} from "./chunk-C7WEAPX4.js";
+} from "./chunk-JEZZN2YZ.js";
 
 // src/server.ts
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
@@ -133,6 +134,13 @@ var mutatingPatterns = {
   sqlserver: mutatingPattern
 };
 var selectIntoPattern = /\bselect\b[\s\S]+\binto\b/i;
+var sqliteReadOnlyArgPragmas = /* @__PURE__ */ new Set([
+  "table_info",
+  "index_info",
+  "index_list",
+  "foreign_key_list"
+]);
+var sqlitePragmaParenPattern = /^pragma\s+(?:[a-z0-9_]+\.)?([a-z0-9_]+)\s*\(/;
 var explainAnalyzePattern = /^explain\s+(?:\([^)]*\banalyze\b(?!\s*(?:=\s*)?(?:false|off|0)\b)[^)]*\)|\banalyze\b(?!\s*(?:=\s*)?(?:false|off|0)\b)(?:\s+verbose\b)?)/i;
 function isReadOnlySQL(sql, connectorType) {
   return checkReadOnly(
@@ -155,6 +163,15 @@ function checkReadOnly(cleanedSQL, connectorType) {
       return false;
     }
   }
+  if (firstWord === "pragma" && connectorType === "sqlite") {
+    if (cleanedSQL.includes("=")) {
+      return false;
+    }
+    const parenMatch = cleanedSQL.match(sqlitePragmaParenPattern);
+    if (parenMatch && !sqliteReadOnlyArgPragmas.has(parenMatch[1])) {
+      return false;
+    }
+  }
   if ((firstWord === "select" || firstWord === "with") && selectIntoPattern.test(cleanedSQL)) {
     return false;
   }
@@ -1490,22 +1507,78 @@ Detected change in ${configPath}, reloading configuration...`);
 }
 
 // src/utils/cross-origin.ts
+import os from "node:os";
 var INVALID_HOST_CHARS = /[\s/\\@?#]/;
-function validateOrigin(originHeader, hostHeader) {
-  if (originHeader === void 0) return { ok: true };
-  const trimmedOrigin = originHeader.trim();
-  if (!trimmedOrigin) {
-    return { ok: false, status: 400, message: "Malformed Origin header" };
+var LOOPBACK_HOSTS = ["localhost", "127.0.0.1", "[::1]"];
+var ALLOW_ANY_HOST = "*";
+function normalizeHost(raw) {
+  const trimmed = raw.trim();
+  if (!trimmed) return null;
+  if (trimmed === ALLOW_ANY_HOST) return ALLOW_ANY_HOST;
+  if (INVALID_HOST_CHARS.test(trimmed)) return null;
+  try {
+    const hostname = new URL(`http://${trimmed}`).hostname.toLowerCase();
+    return hostname || null;
+  } catch {
+    return null;
   }
-  const trimmedHost = (hostHeader ?? "").trim();
-  if (!trimmedHost || INVALID_HOST_CHARS.test(trimmedHost)) {
-    return { ok: false, status: 400, message: "Malformed Host header" };
+}
+function getSelfHosts() {
+  const hosts = [];
+  try {
+    const hostname = os.hostname().trim();
+    if (hostname) hosts.push(hostname);
+  } catch {
   }
-  let originHostname;
+  let interfaces = {};
   try {
-    originHostname = new URL(trimmedOrigin).hostname.toLowerCase();
+    interfaces = os.networkInterfaces();
   } catch {
-    return { ok: false, status: 400, message: "Malformed Origin header" };
+  }
+  for (const addrs of Object.values(interfaces)) {
+    for (const addr of addrs ?? []) {
+      if (!addr.address || addr.internal) continue;
+      const isIPv6 = addr.family === "IPv6" || addr.family === 6;
+      if (isIPv6) {
+        const bare = addr.address.split("%")[0];
+        if (bare.toLowerCase().startsWith("fe80")) continue;
+        hosts.push(`[${bare}]`);
+      } else {
+        hosts.push(addr.address);
+      }
+    }
+  }
+  return hosts;
+}
+function buildAllowedHosts(configured = [], bindHost, selfHosts = []) {
+  const normalizedConfigured = configured.map(normalizeHost).filter((h) => h !== null);
+  if (normalizedConfigured.includes(ALLOW_ANY_HOST)) {
+    return /* @__PURE__ */ new Set([ALLOW_ANY_HOST]);
+  }
+  const hosts = /* @__PURE__ */ new Set();
+  for (const h of LOOPBACK_HOSTS) {
+    const normalized = normalizeHost(h);
+    if (normalized) hosts.add(normalized);
+  }
+  const normalizedBind = bindHost ? normalizeHost(bindHost) : null;
+  const bindIsWildcard = !normalizedBind || normalizedBind === "0.0.0.0" || normalizedBind === "[::]";
+  if (normalizedBind && !bindIsWildcard) {
+    hosts.add(normalizedBind);
+  }
+  if (bindIsWildcard) {
+    for (const h of selfHosts) {
+      const normalized = normalizeHost(h);
+      if (normalized) hosts.add(normalized);
+    }
+  }
+  for (const h of normalizedConfigured) hosts.add(h);
+  return hosts;
+}
+function validateOrigin(originHeader, hostHeader, allowedHosts) {
+  const allowAny = allowedHosts.has(ALLOW_ANY_HOST);
+  const trimmedHost = (hostHeader ?? "").trim();
+  if (!trimmedHost || INVALID_HOST_CHARS.test(trimmedHost)) {
+    return { ok: false, status: 400, message: "Malformed Host header" };
   }
   let hostname;
   try {
@@ -1516,11 +1589,32 @@ function validateOrigin(originHeader, hostHeader) {
   if (!hostname) {
     return { ok: false, status: 400, message: "Malformed Host header" };
   }
-  if (originHostname !== hostname) {
+  if (!allowAny && !allowedHosts.has(hostname)) {
+    return {
+      ok: false,
+      status: 403,
+      message: `Host '${hostname}' is not allowed. Only loopback is permitted by default; set --allowed-hosts (or DBHUB_ALLOWED_HOSTS) to serve other hostnames. This protects against DNS rebinding.`
+    };
+  }
+  if (originHeader === void 0) return { ok: true };
+  const trimmedOrigin = originHeader.trim();
+  if (!trimmedOrigin) {
+    return { ok: false, status: 400, message: "Malformed Origin header" };
+  }
+  let originHostname;
+  try {
+    originHostname = new URL(trimmedOrigin).hostname.toLowerCase();
+  } catch {
+    return { ok: false, status: 400, message: "Malformed Origin header" };
+  }
+  if (!originHostname) {
+    return { ok: false, status: 400, message: "Malformed Origin header" };
+  }
+  if (!allowAny && !allowedHosts.has(originHostname)) {
     return {
       ok: false,
       status: 403,
-      message: "Origin does not match Host header"
+      message: `Origin '${originHostname}' is not allowed`
     };
   }
   return { ok: true };
@@ -1578,7 +1672,7 @@ See documentation for more details on configuring database connections.
     const sources = sourceConfigsData.sources;
     console.error(`Configuration source: ${sourceConfigsData.source}`);
     await connectorManager.connectWithSources(sources);
-    const { initializeToolRegistry: initializeToolRegistry2 } = await import("./registry-OF5GPCBK.js");
+    const { initializeToolRegistry: initializeToolRegistry2 } = await import("./registry-IPRZ55YC.js");
     initializeToolRegistry2({
       sources: sourceConfigsData.sources,
       tools: sourceConfigsData.tools
@@ -1599,6 +1693,7 @@ See documentation for more details on configuring database connections.
     const transportData = resolveTransport();
     const port = transportData.type === "http" ? resolvePort().port : null;
     const host = transportData.type === "http" ? resolveHost().host : null;
+    const allowedHosts = transportData.type === "http" ? buildAllowedHosts(resolveAllowedHosts().hosts, host ?? void 0, getSelfHosts()) : /* @__PURE__ */ new Set();
     const activeModes = [];
     const modeDescriptions = [];
     const isDemo = isDemoMode();
@@ -1624,7 +1719,7 @@ See documentation for more details on configuring database connections.
       app.use(express.json());
       app.use((req, res, next) => {
         const origin = req.headers.origin;
-        const result = validateOrigin(origin, req.headers.host);
+        const result = validateOrigin(origin, req.headers.host, allowedHosts);
         if (!result.ok) {
           return res.status(result.status).json({
             error: result.status === 400 ? "Bad Request" : "Forbidden",
@@ -1690,6 +1785,11 @@ See documentation for more details on configuring database connections.
         const displayHost = boundHost.includes(":") ? `[${boundHost}]` : boundHost;
         const userHost = boundHost === "0.0.0.0" || boundHost === "::" ? "localhost" : displayHost;
         console.error(`HTTP server listening on ${displayHost}:${boundPort}`);
+        if (allowedHosts.has(ALLOW_ANY_HOST)) {
+          console.error("Allowed hosts: * (DNS-rebinding protection DISABLED \u2014 ensure DBHub is fronted by your own auth/proxy)");
+        } else {
+          console.error(`Allowed hosts: ${[...allowedHosts].join(", ")} (set --allowed-hosts to serve other hostnames)`);
+        }
         if (process.env.NODE_ENV === "development") {
           console.error("Development mode detected!");
           console.error("   Workbench dev server (with HMR): http://localhost:5173");
@@ -1726,11 +1826,11 @@ See documentation for more details on configuring database connections.
 
 // src/index.ts
 var connectorModules = [
-  { load: () => import("./postgres-EKVOBAH6.js"), name: "PostgreSQL", driver: "pg" },
-  { load: () => import("./sqlserver-5TFVBCMA.js"), name: "SQL Server", driver: "mssql" },
-  { load: () => import("./sqlite-2GBIF3MQ.js"), name: "SQLite", driver: "node:sqlite" },
-  { load: () => import("./mysql-WG6UFALX.js"), name: "MySQL", driver: "mysql2" },
-  { load: () => import("./mariadb-ERB4D3RP.js"), name: "MariaDB", driver: "mariadb" }
+  { load: () => import("./postgres-BKBCGDZS.js"), name: "PostgreSQL", driver: "pg" },
+  { load: () => import("./sqlserver-47APXMSF.js"), name: "SQL Server", driver: "mssql" },
+  { load: () => import("./sqlite-CQ4LCBB6.js"), name: "SQLite", driver: "node:sqlite" },
+  { load: () => import("./mysql-EK6TCER5.js"), name: "MySQL", driver: "mysql2" },
+  { load: () => import("./mariadb-JPEKVFEW.js"), name: "MariaDB", driver: "mariadb" }
 ];
 loadConnectors(connectorModules).then(() => main()).catch((error) => {
   console.error("Fatal error:", error);

package/dist/{mariadb-ERB4D3RP.js → mariadb-JPEKVFEW.js}

@@ -7,13 +7,13 @@ import {
 } from "./chunk-JFWX35TB.js";
 import {
   SQLRowLimiter
-} from "./chunk-BRXZ5ZQB.js";
+} from "./chunk-BXXHWEQS.js";
 import {
   ConnectorRegistry,
   SafeURL,
   obfuscateDSNPassword,
   splitSQLStatements
-} from "./chunk-C7WEAPX4.js";
+} from "./chunk-JEZZN2YZ.js";
 
 // src/connectors/mariadb/index.ts
 import * as mariadb from "mariadb";
@@ -466,6 +466,9 @@ var MariaDBConnector = class _MariaDBConnector {
     }
     const conn = await this.pool.getConnection();
     try {
+      if (options.readonly) {
+        await conn.query("START TRANSACTION READ ONLY");
+      }
       let processedSQL = sql;
       if (options.maxRows) {
         const statements = splitSQLStatements(sql, "mariadb");
@@ -492,8 +495,17 @@ var MariaDBConnector = class _MariaDBConnector {
       }
       const rows = parseQueryResults(results);
       const rowCount = extractAffectedRows(results);
+      if (options.readonly) {
+        await conn.query("COMMIT");
+      }
       return { rows, rowCount };
     } catch (error) {
+      if (options.readonly) {
+        try {
+          await conn.query("ROLLBACK");
+        } catch {
+        }
+      }
       console.error("Error executing query:", error);
       throw error;
     } finally {

package/dist/{mysql-WG6UFALX.js → mysql-EK6TCER5.js}

@@ -7,13 +7,13 @@ import {
 } from "./chunk-JFWX35TB.js";
 import {
   SQLRowLimiter
-} from "./chunk-BRXZ5ZQB.js";
+} from "./chunk-BXXHWEQS.js";
 import {
   ConnectorRegistry,
   SafeURL,
   obfuscateDSNPassword,
   splitSQLStatements
-} from "./chunk-C7WEAPX4.js";
+} from "./chunk-JEZZN2YZ.js";
 
 // src/connectors/mysql/index.ts
 import mysql from "mysql2/promise";
@@ -472,6 +472,9 @@ var MySQLConnector = class _MySQLConnector {
     }
     const conn = await this.pool.getConnection();
     try {
+      if (options.readonly) {
+        await conn.query("START TRANSACTION READ ONLY");
+      }
       let processedSQL = sql;
       if (options.maxRows) {
         const statements = splitSQLStatements(sql, "mysql");
@@ -499,8 +502,17 @@ var MySQLConnector = class _MySQLConnector {
       const [firstResult] = results;
       const rows = parseQueryResults(firstResult);
       const rowCount = extractAffectedRows(firstResult);
+      if (options.readonly) {
+        await conn.query("COMMIT");
+      }
       return { rows, rowCount };
     } catch (error) {
+      if (options.readonly) {
+        try {
+          await conn.query("ROLLBACK");
+        } catch {
+        }
+      }
       console.error("Error executing query:", error);
       throw error;
     } finally {

package/dist/{postgres-EKVOBAH6.js → postgres-BKBCGDZS.js}

@@ -3,13 +3,13 @@ import {
 } from "./chunk-JFWX35TB.js";
 import {
   SQLRowLimiter
-} from "./chunk-BRXZ5ZQB.js";
+} from "./chunk-BXXHWEQS.js";
 import {
   ConnectorRegistry,
   SafeURL,
   obfuscateDSNPassword,
   splitSQLStatements
-} from "./chunk-C7WEAPX4.js";
+} from "./chunk-JEZZN2YZ.js";
 
 // src/connectors/postgres/index.ts
 import fs from "fs";
@@ -491,6 +491,25 @@ var PostgresConnector = class _PostgresConnector {
       const statements = splitSQLStatements(sql, "postgres");
       if (statements.length === 1) {
         const processedStatement = SQLRowLimiter.applyMaxRows(statements[0], options.maxRows);
+        if (options.readonly) {
+          await client.query("BEGIN READ ONLY");
+          try {
+            const result2 = parameters && parameters.length > 0 ? await client.query(processedStatement, parameters) : await client.query(processedStatement);
+            await client.query("COMMIT");
+            return { rows: result2.rows, rowCount: result2.rowCount ?? result2.rows.length };
+          } catch (error) {
+            try {
+              await client.query("ROLLBACK");
+            } catch {
+            }
+            console.error(`[PostgreSQL executeSQL] ERROR: ${error.message}`);
+            console.error(`[PostgreSQL executeSQL] SQL: ${processedStatement}`);
+            if (parameters && parameters.length > 0) {
+              console.error(`[PostgreSQL executeSQL] Parameters: ${JSON.stringify(parameters)}`);
+            }
+            throw error;
+          }
+        }
         let result;
         if (parameters && parameters.length > 0) {
           try {
@@ -511,7 +530,7 @@ var PostgresConnector = class _PostgresConnector {
         }
         let allRows = [];
         let totalRowCount = 0;
-        await client.query("BEGIN");
+        await client.query(options.readonly ? "BEGIN READ ONLY" : "BEGIN");
         try {
           for (let statement of statements) {
             const processedStatement = SQLRowLimiter.applyMaxRows(statement, options.maxRows);
@@ -525,7 +544,10 @@ var PostgresConnector = class _PostgresConnector {
           }
           await client.query("COMMIT");
         } catch (error) {
-          await client.query("ROLLBACK");
+          try {
+            await client.query("ROLLBACK");
+          } catch {
+          }
           throw error;
         }
         return { rows: allRows, rowCount: totalRowCount };

package/dist/{registry-OF5GPCBK.js → registry-IPRZ55YC.js}

@@ -2,9 +2,9 @@ import {
   ToolRegistry,
   getToolRegistry,
   initializeToolRegistry
-} from "./chunk-DN45LGY4.js";
+} from "./chunk-WPXPKRDU.js";
 import "./chunk-WVVMH6FJ.js";
-import "./chunk-C7WEAPX4.js";
+import "./chunk-JEZZN2YZ.js";
 export {
   ToolRegistry,
   getToolRegistry,

package/dist/{sqlite-2GBIF3MQ.js → sqlite-CQ4LCBB6.js}

@@ -3,13 +3,13 @@ import {
 } from "./chunk-JFWX35TB.js";
 import {
   SQLRowLimiter
-} from "./chunk-BRXZ5ZQB.js";
+} from "./chunk-BXXHWEQS.js";
 import {
   ConnectorRegistry,
   SafeURL,
   obfuscateDSNPassword,
   splitSQLStatements
-} from "./chunk-C7WEAPX4.js";
+} from "./chunk-JEZZN2YZ.js";
 
 // src/connectors/sqlite/suppress-experimental-warning.ts
 var installed = false;
@@ -319,6 +319,9 @@ var SQLiteConnector = class _SQLiteConnector {
     if (!this.db) {
       throw new Error("Not connected to SQLite database");
     }
+    if (options.readonly) {
+      this.db.exec("PRAGMA query_only = ON");
+    }
     try {
       const statements = splitSQLStatements(sql, "sqlite");
       if (statements.length === 1) {
@@ -375,19 +378,30 @@ var SQLiteConnector = class _SQLiteConnector {
         }
         let totalChanges = 0;
         for (const statement of writeStatements) {
+          if (options.readonly) {
+            this.db.exec("PRAGMA query_only = ON");
+          }
           const result = this.prepare(statement).run();
           totalChanges += Number(result.changes);
         }
         let allRows = [];
         for (let statement of readStatements) {
+          if (options.readonly) {
+            this.db.exec("PRAGMA query_only = ON");
+          }
           statement = SQLRowLimiter.applyMaxRows(statement, options.maxRows);
           const result = this.prepare(statement).all();
           allRows.push(...result);
         }
         return { rows: allRows, rowCount: totalChanges + allRows.length };
       }
-    } catch (error) {
-      throw error;
+    } finally {
+      if (options.readonly) {
+        try {
+          this.db.exec("PRAGMA query_only = OFF");
+        } catch {
+        }
+      }
     }
   }
 };

package/dist/{sqlserver-5TFVBCMA.js → sqlserver-47APXMSF.js}

@@ -3,13 +3,13 @@ import {
 } from "./chunk-WVVMH6FJ.js";
 import {
   SQLRowLimiter
-} from "./chunk-BRXZ5ZQB.js";
+} from "./chunk-BXXHWEQS.js";
 import {
   ConnectorRegistry,
   SafeURL,
   obfuscateDSNPassword,
   stripCommentsAndStrings
-} from "./chunk-C7WEAPX4.js";
+} from "./chunk-JEZZN2YZ.js";
 
 // src/connectors/sqlserver/index.ts
 import sql from "mssql";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bytebase/dbhub",
-  "version": "0.22.4",
+  "version": "0.22.6",
   "mcpName": "io.github.bytebase/dbhub",
   "description": "Minimal, token-efficient Database MCP Server for PostgreSQL, MySQL, SQL Server, SQLite, MariaDB",
   "repository": {