@fanduzi/deltascope-mcp 0.16.3 → 0.18.0

package/README.md

@@ -14,9 +14,9 @@ The launched `deltascope-mcp` server exposes a unified `audit_sql` surface for:
 
 - MySQL offline audit
 - TiDB offline audit
-- PostgreSQL offline audit on PG-capable release binaries
+- PostgreSQL offline audit on the main PG-capable release binaries across the supported macOS and Linux platforms
 
-Connection-backed metadata-aware audit remains limited to MySQL/TiDB-compatible instances. PostgreSQL requests must stay offline-only on the MCP surface.
+Connection-backed metadata-aware audit supports MySQL/TiDB-compatible instances and PostgreSQL on the main PG-capable release binaries across the supported macOS and Linux platforms.
 
 ## Version Contract
 

package/bin/deltascope-mcp.js

@@ -37,6 +37,12 @@ const archiveName = resolveArchiveName({
   arch: platform.arch,
 });
 const checksumsURL = resolveChecksumsURL({ version });
+const preferredChecksumsURL = resolveChecksumsURL({
+  version,
+  os: platform.os,
+  arch: platform.arch,
+});
+const checksumsURLs = [...new Set([preferredChecksumsURL, checksumsURL])];
 
 function log(message) {
   process.stderr.write(`[deltascope-mcp-launcher] ${message}\n`);
@@ -54,11 +60,16 @@ const binaryPath = await ensureExecutable({
     (async () => {
       log(`cache miss; downloading ${archiveURL}`);
       log(`cache target ${destinationPath}`);
-      log(`verifying archive against ${checksumsURL}`);
+      log(
+        checksumsURLs.length > 1
+          ? `verifying archive against ${checksumsURLs[0]} (fallback ${checksumsURLs[1]})`
+          : `verifying archive against ${checksumsURLs[0]}`,
+      );
       try {
         const result = await downloadAndExtractBinary({
           archiveURL,
-          checksumsURL,
+          checksumsURL: preferredChecksumsURL,
+          checksumsURLs,
           archiveName,
           destinationPath,
         });

package/lib/download.js

@@ -44,6 +44,7 @@ function parseChecksums(text) {
 export async function downloadAndExtractBinary({
   archiveURL,
   checksumsURL,
+  checksumsURLs = [],
   archiveName,
   destinationPath,
   fetchImpl = globalThis.fetch
@@ -52,33 +53,51 @@ export async function downloadAndExtractBinary({
     throw new Error("fetch implementation is required");
   }
 
-  const [archiveResponse, checksumsResponse] = await Promise.all([
-    fetchImpl(archiveURL),
-    fetchImpl(checksumsURL)
-  ]);
+  const requestedChecksumsURLs = [
+    ...checksumsURLs,
+    ...(checksumsURL ? [checksumsURL] : [])
+  ].filter(Boolean);
+  const uniqueChecksumsURLs = [...new Set(requestedChecksumsURLs)];
+  if (uniqueChecksumsURLs.length === 0) {
+    throw new Error("at least one checksums URL is required");
+  }
+
+  const archiveResponse = await fetchImpl(archiveURL);
 
   if (!archiveResponse.ok) {
     throw new Error(`failed to download ${archiveURL}`);
   }
-  if (!checksumsResponse.ok) {
-    throw new Error(`failed to download ${checksumsURL}`);
-  }
 
   const tempDir = await fs.mkdtemp(path.join(os.tmpdir(), "deltascope-mcp-archive-"));
   const archivePath = path.join(tempDir, "archive.tar.gz");
   const extractDir = path.join(tempDir, "extract");
   const archiveBuffer = Buffer.from(await archiveResponse.arrayBuffer());
-  const checksums = parseChecksums(await checksumsResponse.text());
-  const expectedChecksum = checksums.get(archiveName);
   const actualChecksum = sha256(archiveBuffer);
 
-  try {
-    if (!expectedChecksum) {
-      throw new Error(`missing checksum for ${archiveName}`);
-    }
-    if (actualChecksum !== expectedChecksum) {
-      throw new Error(`checksum mismatch for ${archiveName}`);
+  const resolveExpectedChecksum = async () => {
+    let lastError = new Error(`missing checksum for ${archiveName}`);
+    for (const candidateURL of uniqueChecksumsURLs) {
+      const checksumsResponse = await fetchImpl(candidateURL);
+      if (!checksumsResponse.ok) {
+        lastError = new Error(`failed to download ${candidateURL}`);
+        continue;
+      }
+      const checksums = parseChecksums(await checksumsResponse.text());
+      const expectedChecksum = checksums.get(archiveName);
+      if (!expectedChecksum) {
+        lastError = new Error(`missing checksum for ${archiveName}`);
+        continue;
+      }
+      if (actualChecksum !== expectedChecksum) {
+        throw new Error(`checksum mismatch for ${archiveName}`);
+      }
+      return expectedChecksum;
     }
+    throw lastError;
+  };
+
+  try {
+    const expectedChecksum = await resolveExpectedChecksum();
     await fs.mkdir(extractDir, { recursive: true });
     await fs.writeFile(archivePath, archiveBuffer);
     await runTar(["-xzf", archivePath, "-C", extractDir]);

package/lib/releases.js

@@ -43,8 +43,11 @@ export function resolveArchiveName({ version, os, arch }) {
   return `deltascope_${version.replace(/^v/, "")}_${os}_${arch}.tar.gz`;
 }
 
-export function resolveChecksumsName({ version }) {
+export function resolveChecksumsName({ version, os = "", arch = "" }) {
   const rawVersion = version.replace(/^v/, "");
+  if (os && arch) {
+    return `deltascope_${rawVersion}_${os}_${arch}_checksums.txt`;
+  }
   return `deltascope_${rawVersion}_checksums.txt`;
 }
 
@@ -61,6 +64,6 @@ export function resolveArchiveURL({
   return `https://github.com/${repo}/releases/download/${version}/${resolveArchiveName({ version, os, arch })}`;
 }
 
-export function resolveChecksumsURL({ repo = "Fanduzi/DeltaScope", version }) {
-  return `https://github.com/${repo}/releases/download/${version}/${resolveChecksumsName({ version })}`;
+export function resolveChecksumsURL({ repo = "Fanduzi/DeltaScope", version, os = "", arch = "" }) {
+  return `https://github.com/${repo}/releases/download/${version}/${resolveChecksumsName({ version, os, arch })}`;
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fanduzi/deltascope-mcp",
-  "version": "0.16.3",
+  "version": "0.18.0",
   "description": "Launcher package for the DeltaScope MCP stdio server",
   "type": "module",
   "repository": {