@deepsql/mcp 0.2.0

package/src/commands/logout.js

@@ -0,0 +1,33 @@
+"use strict";
+
+const store = require("../auth/store");
+const { request } = require("../api/client");
+
+async function run(opts, { stdout = process.stdout, stderr = process.stderr } = {}) {
+  const baseUrl = opts.url ? store.normalizeBaseUrl(opts.url) : store.defaultBaseUrl();
+  if (!baseUrl) {
+    stdout.write("No saved DeepSQL profile to log out of.\n");
+    return;
+  }
+  const profile = store.getProfile(baseUrl);
+  if (!profile) {
+    stdout.write(`No saved profile for ${baseUrl}.\n`);
+    return;
+  }
+
+  if (profile.tokenId) {
+    try {
+      await request(baseUrl, `/auth/mcp-tokens/${profile.tokenId}`, {
+        method: "DELETE",
+        token: profile.token,
+      });
+    } catch (err) {
+      stderr.write(`[deepsql] Could not revoke token server-side: ${err.message}\n`);
+    }
+  }
+
+  store.removeProfile(baseUrl);
+  stdout.write(`Logged out of ${baseUrl}.\n`);
+}
+
+module.exports = { run };

package/src/commands/mcp.js

@@ -0,0 +1,31 @@
+"use strict";
+
+const path = require("node:path");
+const { spawn } = require("node:child_process");
+
+const { resolveSession } = require("./_session");
+
+/**
+ * Launch the existing Phase 1 stdio MCP server with the saved auth token
+ * injected via env vars. The server is unchanged — this command is a thin
+ * shim that means editor configs no longer need to embed a raw token.
+ */
+async function run(opts) {
+  const session = resolveSession(opts);
+  const serverPath = path.resolve(__dirname, "..", "..", "deepsql-phase1-server.js");
+  const env = {
+    ...process.env,
+    DEEPSQL_API_BASE_URL: `${session.baseUrl}/api/`,
+    DEEPSQL_AUTH_TOKEN: session.token,
+  };
+  const child = spawn(process.execPath, [serverPath], {
+    stdio: ["inherit", "inherit", "inherit"],
+    env,
+  });
+  child.on("exit", (code, signal) => {
+    if (signal) process.kill(process.pid, signal);
+    else process.exit(code ?? 0);
+  });
+}
+
+module.exports = { run };

package/src/commands/query.js

@@ -0,0 +1,66 @@
+"use strict";
+
+const fs = require("node:fs");
+const { request } = require("../api/client");
+const { validateReadOnlySql } = require("../../deepsql-phase1-lib");
+const { resolveSession } = require("./_session");
+
+async function run(opts, { stdout = process.stdout } = {}) {
+  if (!opts.connection) throw new Error("--connection <id> is required.");
+  const sql = readSqlInput(opts);
+  const validation = validateReadOnlySql(sql, { allowExplain: true });
+  if (!validation.ok) throw new Error(validation.reason);
+
+  const session = resolveSession(opts);
+  const limit = clampInt(opts.limit, 1, 1000, 100);
+  const timeout = opts.timeoutSeconds == null ? null : clampInt(opts.timeoutSeconds, 1, 60, null);
+
+  const response = await request(session.baseUrl, "/mcp/query-readonly", {
+    method: "POST",
+    token: session.token,
+    json: {
+      connectionId: opts.connection,
+      query: validation.normalizedQuery,
+      limit,
+      timeoutSeconds: timeout,
+    },
+  });
+
+  if (opts.json) {
+    stdout.write(`${JSON.stringify(response, null, 2)}\n`);
+    return;
+  }
+  printRows(stdout, response);
+}
+
+function readSqlInput(opts) {
+  if (opts.file) return fs.readFileSync(opts.file, "utf8");
+  if (opts.positional.length > 0) return opts.positional.join(" ");
+  if (!process.stdin.isTTY) return fs.readFileSync(0, "utf8");
+  throw new Error("Pass SQL as an argument, via --file <path>, or pipe it to stdin.");
+}
+
+function clampInt(value, min, max, fallback) {
+  if (value == null) return fallback;
+  const n = Number.parseInt(value, 10);
+  if (!Number.isFinite(n)) return fallback;
+  return Math.min(max, Math.max(min, n));
+}
+
+function printRows(stdout, response) {
+  const rows = response?.rows || response?.data || [];
+  const columns = response?.columns || (rows[0] ? Object.keys(rows[0]) : []);
+  if (columns.length === 0) {
+    stdout.write("(no rows)\n");
+    return;
+  }
+  const widths = columns.map((c) => Math.max(c.length, ...rows.map((r) => String(r[c] ?? "").length)));
+  const sep = widths.map((w) => "-".repeat(w)).join("  ");
+  stdout.write(`${columns.map((c, i) => c.padEnd(widths[i])).join("  ")}\n${sep}\n`);
+  for (const row of rows) {
+    stdout.write(`${columns.map((c, i) => String(row[c] ?? "").padEnd(widths[i])).join("  ")}\n`);
+  }
+  if (response?.truncated) stdout.write(`(truncated to ${rows.length} rows)\n`);
+}
+
+module.exports = { run };

package/src/commands/schema.js

@@ -0,0 +1,18 @@
+"use strict";
+
+const { request } = require("../api/client");
+const { resolveSession } = require("./_session");
+
+async function run(opts, { stdout = process.stdout } = {}) {
+  if (!opts.connection) throw new Error("--connection <id> is required.");
+  const session = resolveSession(opts);
+  const sub = opts.positional[0] || "tables";
+  const path =
+    sub === "objects"
+      ? `/connections/${encodeURIComponent(opts.connection)}/objects`
+      : `/connections/${encodeURIComponent(opts.connection)}/schema`;
+  const response = await request(session.baseUrl, path, { token: session.token });
+  stdout.write(`${JSON.stringify(response, null, 2)}\n`);
+}
+
+module.exports = { run };

package/src/commands/whoami.js

@@ -0,0 +1,23 @@
+"use strict";
+
+const store = require("../auth/store");
+const { request } = require("../api/client");
+const { resolveSession } = require("./_session");
+
+async function run(opts, { stdout = process.stdout } = {}) {
+  const session = resolveSession(opts);
+  try {
+    const me = await request(session.baseUrl, "/auth/me", { token: session.token });
+    stdout.write(`Username: ${me.username || me.email || session.profile?.username || "(unknown)"}\n`);
+    if (me.role) stdout.write(`Role:     ${me.role}\n`);
+    stdout.write(`URL:      ${session.baseUrl}\n`);
+    if (session.profile?.tokenId) stdout.write(`Token id: ${session.profile.tokenId}\n`);
+  } catch (err) {
+    if (err.status === 401 || err.status === 403) {
+      throw new Error("Saved token is no longer valid. Run `deepsql login` again.");
+    }
+    throw err;
+  }
+}
+
+module.exports = { run };