@hasna/domains 0.0.24 → 0.0.25

package/dist/mcp/tool-filter.d.ts

@@ -0,0 +1,4 @@
+import type { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+export declare function isReadOnlyMcpTool(name: string): boolean;
+export declare function applySafeModeToolFilter(server: McpServer, env?: Record<string, string | undefined>): void;
+//# sourceMappingURL=tool-filter.d.ts.map

package/dist/mcp/tool-filter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-filter.d.ts","sourceRoot":"","sources":["../../src/mcp/tool-filter.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AA0CzE,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAEvD;AAED,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,SAAS,EAAE,GAAG,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAqD,GAAG,IAAI,CAgB5J"}

package/dist/storage.js

@@ -1010,8 +1010,7 @@ var require_defaults = __commonJS((exports, module) => {
 // node_modules/pg/lib/utils.js
 var require_utils = __commonJS((exports, module) => {
   var defaults = require_defaults();
-  var util = __require("util");
-  var { isDate } = util.types || util;
+  var { isDate } = __require("util/types");
   function escapeElement(elementRepresentation) {
     const escaped = elementRepresentation.replace(/\\/g, "\\\\").replace(/"/g, "\\\"");
     return '"' + escaped + '"';
@@ -1020,28 +1019,23 @@ var require_utils = __commonJS((exports, module) => {
     let result = "{";
     for (let i = 0;i < val.length; i++) {
       if (i > 0) {
-        result = result + ",";
-      }
-      if (val[i] === null || typeof val[i] === "undefined") {
-        result = result + "NULL";
-      } else if (Array.isArray(val[i])) {
-        result = result + arrayString(val[i]);
-      } else if (ArrayBuffer.isView(val[i])) {
-        let item = val[i];
+        result += ",";
+      }
+      let item = val[i];
+      if (item == null) {
+        result += "NULL";
+      } else if (Array.isArray(item)) {
+        result += arrayString(item);
+      } else if (ArrayBuffer.isView(item)) {
         if (!(item instanceof Buffer)) {
-          const buf = Buffer.from(item.buffer, item.byteOffset, item.byteLength);
-          if (buf.length === item.byteLength) {
-            item = buf;
-          } else {
-            item = buf.slice(item.byteOffset, item.byteOffset + item.byteLength);
-          }
+          item = Buffer.from(item.buffer, item.byteOffset, item.byteLength);
         }
         result += "\\\\x" + item.toString("hex");
       } else {
-        result += escapeElement(prepareValue(val[i]));
+        result += escapeElement(prepareValue(item));
       }
     }
-    result = result + "}";
+    result += "}";
     return result;
   }
   var prepareValue = function(val, seen) {
@@ -1053,11 +1047,7 @@ var require_utils = __commonJS((exports, module) => {
         return val;
       }
       if (ArrayBuffer.isView(val)) {
-        const buf = Buffer.from(val.buffer, val.byteOffset, val.byteLength);
-        if (buf.length === val.byteLength) {
-          return buf;
-        }
-        return buf.slice(val.byteOffset, val.byteOffset + val.byteLength);
+        return Buffer.from(val.buffer, val.byteOffset, val.byteLength);
       }
       if (isDate(val)) {
         if (defaults.parseInputDatesAsUTC) {
@@ -1166,43 +1156,8 @@ var require_utils = __commonJS((exports, module) => {
   };
 });
 
-// node_modules/pg/lib/crypto/utils-legacy.js
-var require_utils_legacy = __commonJS((exports, module) => {
-  var nodeCrypto = __require("crypto");
-  function md5(string) {
-    return nodeCrypto.createHash("md5").update(string, "utf-8").digest("hex");
-  }
-  function postgresMd5PasswordHash(user, password, salt) {
-    const inner = md5(password + user);
-    const outer = md5(Buffer.concat([Buffer.from(inner), salt]));
-    return "md5" + outer;
-  }
-  function sha256(text) {
-    return nodeCrypto.createHash("sha256").update(text).digest();
-  }
-  function hashByName(hashName, text) {
-    hashName = hashName.replace(/(\D)-/, "$1");
-    return nodeCrypto.createHash(hashName).update(text).digest();
-  }
-  function hmacSha256(key, msg) {
-    return nodeCrypto.createHmac("sha256", key).update(msg).digest();
-  }
-  async function deriveKey(password, salt, iterations) {
-    return nodeCrypto.pbkdf2Sync(password, salt, iterations, 32, "sha256");
-  }
-  module.exports = {
-    postgresMd5PasswordHash,
-    randomBytes: nodeCrypto.randomBytes,
-    deriveKey,
-    sha256,
-    hashByName,
-    hmacSha256,
-    md5
-  };
-});
-
-// node_modules/pg/lib/crypto/utils-webcrypto.js
-var require_utils_webcrypto = __commonJS((exports, module) => {
+// node_modules/pg/lib/crypto/utils.js
+var require_utils2 = __commonJS((exports, module) => {
   var nodeCrypto = __require("crypto");
   module.exports = {
     postgresMd5PasswordHash,
@@ -1250,16 +1205,6 @@ var require_utils_webcrypto = __commonJS((exports, module) => {
   }
 });
 
-// node_modules/pg/lib/crypto/utils.js
-var require_utils2 = __commonJS((exports, module) => {
-  var useLegacyCrypto = parseInt(process.versions && process.versions.node && process.versions.node.split(".")[0]) < 15;
-  if (useLegacyCrypto) {
-    module.exports = require_utils_legacy();
-  } else {
-    module.exports = require_utils_webcrypto();
-  }
-});
-
 // node_modules/pg/lib/crypto/cert-signatures.js
 var require_cert_signatures = __commonJS((exports, module) => {
   function x509Error(msg, cert) {
@@ -1376,7 +1321,13 @@ var require_cert_signatures = __commonJS((exports, module) => {
 var require_sasl = __commonJS((exports, module) => {
   var crypto = require_utils2();
   var { signatureAlgorithmHashFromCertificate } = require_cert_signatures();
-  function startSession(mechanisms, stream) {
+  function saslprep(password) {
+    const nonAsciiSpace = /[\u00A0\u1680\u2000-\u200B\u202F\u205F\u3000]/g;
+    const mappedToNothing = /[\u00AD\u034F\u1806\u180B\u180C\u180D\u200C\u200D\u2060\uFE00-\uFE0F\uFEFF]/g;
+    return password.replace(nonAsciiSpace, " ").replace(mappedToNothing, "").normalize("NFKC");
+  }
+  var DEFAULT_MAX_SCRAM_ITERATIONS = 1e5;
+  function startSession(mechanisms, stream, scramMaxIterations = DEFAULT_MAX_SCRAM_ITERATIONS) {
     const candidates = ["SCRAM-SHA-256"];
     if (stream)
       candidates.unshift("SCRAM-SHA-256-PLUS");
@@ -1393,7 +1344,8 @@ var require_sasl = __commonJS((exports, module) => {
       mechanism,
       clientNonce,
       response: gs2Header + ",,n=*,r=" + clientNonce,
-      message: "SASLInitialResponse"
+      message: "SASLInitialResponse",
+      scramMaxIterations
     };
   }
   async function continueSession(session, password, serverData, stream) {
@@ -1415,6 +1367,10 @@ var require_sasl = __commonJS((exports, module) => {
     } else if (sv.nonce.length === session.clientNonce.length) {
       throw new Error("SASL: SCRAM-SERVER-FIRST-MESSAGE: server nonce is too short");
     }
+    const scramMaxIterations = typeof session.scramMaxIterations === "number" ? session.scramMaxIterations : DEFAULT_MAX_SCRAM_ITERATIONS;
+    if (scramMaxIterations !== 0 && sv.iteration > scramMaxIterations) {
+      throw new Error("SASL: SCRAM-SERVER-FIRST-MESSAGE: iteration count " + sv.iteration + " exceeds scramMaxIterations of " + scramMaxIterations);
+    }
     const clientFirstMessageBare = "n=*,r=" + session.clientNonce;
     const serverFirstMessage = "r=" + sv.nonce + ",s=" + sv.salt + ",i=" + sv.iteration;
     let channelBinding = stream ? "eSws" : "biws";
@@ -1430,7 +1386,7 @@ var require_sasl = __commonJS((exports, module) => {
     const clientFinalMessageWithoutProof = "c=" + channelBinding + ",r=" + sv.nonce;
     const authMessage = clientFirstMessageBare + "," + serverFirstMessage + "," + clientFinalMessageWithoutProof;
     const saltBytes = Buffer.from(sv.salt, "base64");
-    const saltedPassword = await crypto.deriveKey(password, saltBytes, sv.iteration);
+    const saltedPassword = await crypto.deriveKey(saslprep(password), saltBytes, sv.iteration);
     const clientKey = await crypto.hmacSha256(saltedPassword, "Client Key");
     const storedKey = await crypto.sha256(clientKey);
     const clientSignature = await crypto.hmacSha256(storedKey, authMessage);
@@ -1504,7 +1460,11 @@ var require_sasl = __commonJS((exports, module) => {
   }
   function parseServerFinalMessage(serverData) {
     const attrPairs = parseAttributePairs(serverData);
+    const error = attrPairs.get("e");
     const serverSignature = attrPairs.get("v");
+    if (error) {
+      throw new Error(`SASL: SCRAM-SERVER-FINAL-MESSAGE: server returned error: "${error}"`);
+    }
     if (!serverSignature) {
       throw new Error("SASL: SCRAM-SERVER-FINAL-MESSAGE: server signature is missing");
     } else if (!isBase64(serverSignature)) {
@@ -1532,7 +1492,8 @@ var require_sasl = __commonJS((exports, module) => {
   module.exports = {
     startSession,
     continueSession,
-    finalizeSession
+    finalizeSession,
+    DEFAULT_MAX_SCRAM_ITERATIONS
   };
 });
 
@@ -1575,7 +1536,7 @@ var require_pg_connection_string = __commonJS((exports, module) => {
       const config2 = str.split(" ");
       return { host: config2[0], database: config2[1] };
     }
-    const config = {};
+    const config = Object.create(null);
     let result;
     let dummyHost = false;
     if (/ |%[^a-f0-9]|%[a-f0-9][^a-f0-9]/i.test(str)) {
@@ -1694,7 +1655,7 @@ var require_pg_connection_string = __commonJS((exports, module) => {
         c[key] = value;
       }
       return c;
-    }, {});
+    }, Object.create(null));
     return connectionOptions;
   }
   function toClientConfig(config) {
@@ -1721,7 +1682,7 @@ var require_pg_connection_string = __commonJS((exports, module) => {
         }
       }
       return c;
-    }, {});
+    }, Object.create(null));
     return poolConfig;
   }
   function parseIntoClientConfig(str) {
@@ -1957,7 +1918,7 @@ var require_result = __commonJS((exports, module) => {
       if (this.fields.length) {
         this._parsers = new Array(fieldDescriptions.length);
       }
-      const row = {};
+      const row = Object.create(null);
       for (let i = 0;i < fieldDescriptions.length; i++) {
         const desc = fieldDescriptions[i];
         row[desc.name] = null;
@@ -2159,7 +2120,7 @@ var require_query = __commonJS((exports, module) => {
   module.exports = Query;
 });
 
-// node_modules/pg-protocol/dist/messages.js
+// node_modules/pg/node_modules/pg-protocol/dist/messages.js
 var require_messages = __commonJS((exports) => {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.NoticeMessage = exports.DataRowMessage = exports.CommandCompleteMessage = exports.ReadyForQueryMessage = exports.NotificationResponseMessage = exports.BackendKeyDataMessage = exports.AuthenticationMD5Password = exports.ParameterStatusMessage = exports.ParameterDescriptionMessage = exports.RowDescriptionMessage = exports.Field = exports.CopyResponse = exports.CopyDataMessage = exports.DatabaseError = exports.copyDone = exports.emptyQuery = exports.replicationStart = exports.portalSuspended = exports.noData = exports.closeComplete = exports.bindComplete = exports.parseComplete = undefined;
@@ -2335,7 +2296,7 @@ var require_messages = __commonJS((exports) => {
   exports.NoticeMessage = NoticeMessage;
 });
 
-// node_modules/pg-protocol/dist/buffer-writer.js
+// node_modules/pg/node_modules/pg-protocol/dist/buffer-writer.js
 var require_buffer_writer = __commonJS((exports) => {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.Writer = undefined;
@@ -2414,7 +2375,7 @@ var require_buffer_writer = __commonJS((exports) => {
   exports.Writer = Writer;
 });
 
-// node_modules/pg-protocol/dist/serializer.js
+// node_modules/pg/node_modules/pg-protocol/dist/serializer.js
 var require_serializer = __commonJS((exports) => {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.serialize = undefined;
@@ -2577,7 +2538,7 @@ var require_serializer = __commonJS((exports) => {
   exports.serialize = serialize;
 });
 
-// node_modules/pg-protocol/dist/buffer-reader.js
+// node_modules/pg/node_modules/pg-protocol/dist/buffer-reader.js
 var require_buffer_reader = __commonJS((exports) => {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.BufferReader = undefined;
@@ -2633,7 +2594,7 @@ var require_buffer_reader = __commonJS((exports) => {
   exports.BufferReader = BufferReader;
 });
 
-// node_modules/pg-protocol/dist/parser.js
+// node_modules/pg/node_modules/pg-protocol/dist/parser.js
 var require_parser = __commonJS((exports) => {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.Parser = undefined;
@@ -2938,7 +2899,7 @@ var require_parser = __commonJS((exports) => {
   };
 });
 
-// node_modules/pg-protocol/dist/index.js
+// node_modules/pg/node_modules/pg-protocol/dist/index.js
 var require_dist = __commonJS((exports) => {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.DatabaseError = exports.serialize = exports.parse = undefined;
@@ -3496,6 +3457,16 @@ var require_client = __commonJS((exports, module) => {
   var pgPassDeprecationNotice = nodeUtils.deprecate(() => {}, "pgpass support is deprecated and will be removed in pg@9.0. " + "You can provide an async function as the password property to the Client/Pool constructor that returns a password instead. Within this function you can call the pgpass module in your own code.");
   var byoPromiseDeprecationNotice = nodeUtils.deprecate(() => {}, "Passing a custom Promise implementation to the Client/Pool constructor is deprecated and will be removed in pg@9.0.");
   var queryQueueLengthDeprecationNotice = nodeUtils.deprecate(() => {}, "Calling client.query() when the client is already executing a query is deprecated and will be removed in pg@9.0. Use async/await or an external async flow control mechanism instead.");
+  function coerceNumberOrDefault(value, defaultValue) {
+    if (typeof value === "number") {
+      return Number.isFinite(value) ? value : defaultValue;
+    }
+    if (typeof value === "string" && value.trim() !== "") {
+      const n = Number(value);
+      return Number.isFinite(n) ? n : defaultValue;
+    }
+    return defaultValue;
+  }
 
   class Client extends EventEmitter {
     constructor(config) {
@@ -3525,7 +3496,9 @@ var require_client = __commonJS((exports, module) => {
       this._connectionError = false;
       this._queryable = true;
       this._activeQuery = null;
+      this._txStatus = null;
       this.enableChannelBinding = Boolean(c.enableChannelBinding);
+      this.scramMaxIterations = coerceNumberOrDefault(c.scramMaxIterations, sasl.DEFAULT_MAX_SCRAM_ITERATIONS);
       this.connection = c.connection || new Connection({
         stream: c.stream,
         ssl: this.connectionParameters.ssl,
@@ -3716,7 +3689,7 @@ var require_client = __commonJS((exports, module) => {
     _handleAuthSASL(msg) {
       this._getPassword(() => {
         try {
-          this.saslSession = sasl.startSession(msg.mechanisms, this.enableChannelBinding && this.connection.stream);
+          this.saslSession = sasl.startSession(msg.mechanisms, this.enableChannelBinding && this.connection.stream, this.scramMaxIterations);
           this.connection.sendSASLInitialResponseMessage(this.saslSession.mechanism, this.saslSession.response);
         } catch (err) {
           this.connection.emit("error", err);
@@ -3756,6 +3729,7 @@ var require_client = __commonJS((exports, module) => {
       }
       const activeQuery = this._getActiveQuery();
       this._activeQuery = null;
+      this._txStatus = msg?.status ?? null;
       this.readyForQuery = true;
       if (activeQuery) {
         activeQuery.handleReadyForQuery(this.connection);
@@ -3951,13 +3925,10 @@ var require_client = __commonJS((exports, module) => {
     query(config, values, callback) {
       let query;
       let result;
-      let readTimeout;
-      let readTimeoutTimer;
-      let queryCallback;
-      if (config === null || config === undefined) {
+      if (config == null) {
         throw new TypeError("Client was passed a null or undefined query");
-      } else if (typeof config.submit === "function") {
-        readTimeout = config.query_timeout || this.connectionParameters.query_timeout;
+      }
+      if (typeof config.submit === "function") {
         result = query = config;
         if (!query.callback) {
           if (typeof values === "function") {
@@ -3967,7 +3938,6 @@ var require_client = __commonJS((exports, module) => {
           }
         }
       } else {
-        readTimeout = config.query_timeout || this.connectionParameters.query_timeout;
         query = new Query(config, values, callback);
         if (!query.callback) {
           result = new this._Promise((resolve, reject) => {
@@ -3976,11 +3946,14 @@ var require_client = __commonJS((exports, module) => {
             Error.captureStackTrace(err);
             throw err;
           });
+        } else if (typeof query.callback !== "function") {
+          throw new TypeError("callback is not a function");
         }
       }
+      const readTimeout = config.query_timeout || this.connectionParameters.query_timeout;
       if (readTimeout) {
-        queryCallback = query.callback || (() => {});
-        readTimeoutTimer = setTimeout(() => {
+        const queryCallback = query.callback || (() => {});
+        const readTimeoutTimer = setTimeout(() => {
           const error = new Error("Query read timeout");
           process.nextTick(() => {
             query.handleError(error, this.connection);
@@ -4029,11 +4002,15 @@ var require_client = __commonJS((exports, module) => {
     unref() {
       this.connection.unref();
     }
+    getTransactionStatus() {
+      return this._txStatus;
+    }
     end(cb) {
       this._ending = true;
       if (!this.connection._connecting || this._ended) {
         if (cb) {
           cb();
+          return;
         } else {
           return this._Promise.resolve();
         }
@@ -4790,8 +4767,10 @@ var require_client2 = __commonJS((exports, module) => {
   Client.prototype.end = function(cb) {
     const self = this;
     this._ending = true;
-    if (!this._connected) {
-      this.once("connect", this.end.bind(this, cb));
+    if (this._connecting && !this._connected) {
+      this.once("connect", () => {
+        this.end(() => {});
+      });
     }
     let result;
     if (!cb) {
@@ -4852,6 +4831,9 @@ var require_client2 = __commonJS((exports, module) => {
   Client.prototype.isConnected = function() {
     return this._connected;
   };
+  Client.prototype.getTransactionStatus = function() {
+    return this.native.getTransactionStatus();
+  };
 });
 
 // node_modules/pg/lib/index.js

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@hasna/domains",
-  "version": "0.0.24",
-  "description": "Domain portfolio and DNS management for AI agents — CLI + MCP server with SQLite",
+  "version": "0.0.25",
+  "description": "Domain portfolio, registrar, marketplace, and DNS management for AI agents — CLI + MCP server with SQLite",
   "type": "module",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -64,21 +64,23 @@
   "author": "Andrei Hasna <andrei@hasna.com>",
   "license": "Apache-2.0",
   "dependencies": {
-    "@aws-sdk/client-route-53": "^3.1017.0",
-    "@aws-sdk/client-route-53-domains": "^3.1017.0",
-    "@hasna/contacts": "^0.6.19",
-    "@hasna/events": "^0.1.3",
-    "@modelcontextprotocol/sdk": "^1.12.1",
+    "@aws-sdk/client-route-53": "^3.1067.0",
+    "@aws-sdk/client-route-53-domains": "^3.1067.0",
+    "@modelcontextprotocol/sdk": "^1.29.0",
     "chalk": "^5.4.1",
     "commander": "^13.1.0",
     "ink": "^5.2.0",
     "ink-text-input": "^6.0.0",
-    "pg": "^8.13.3",
+    "pg": "^8.21.0",
     "react": "^18.3.1",
     "zod": "^3.24.2"
   },
+  "optionalDependencies": {
+    "@hasna/contacts": "^0.6.19",
+    "@hasna/events": "^0.1.3"
+  },
   "devDependencies": {
-    "@types/bun": "^1.2.4",
+    "@types/bun": "^1.3.14",
     "@types/pg": "^8.20.0",
     "@types/react": "^18.3.18",
     "ink-testing-library": "^4.0.0",