@munlib/mongodb-readonly-mcp 0.1.0

package/README.md

@@ -0,0 +1,323 @@
+# MongoDB Read-Only MCP
+
+Servidor MCP en Node.js/TypeScript para consultar una o varias conexiones MongoDB desde OpenCode sin exponer herramientas de escritura.
+
+## Capacidades
+
+- Lista conexiones configuradas sin mostrar credenciales.
+- Lista bases de datos y colecciones.
+- Ejecuta `find`, `count`, `distinct` y pipelines `aggregate` en modo lectura.
+- Busca un valor en varias colecciones de una base cuando no sabes dónde está la información.
+- Bloquea etapas de agregación de escritura o administración como `$out`, `$merge`, `$currentOp` y `$listSessions`.
+- Limita resultados y tiempo de consulta para evitar respuestas enormes o consultas colgadas.
+
+## Requisitos
+
+- Node.js 20 o superior.
+- Acceso de red a MongoDB.
+- Un usuario MongoDB idealmente con permisos de solo lectura (`read` o `readAnyDatabase`).
+
+## Uso con NPX
+
+Una vez publicado en npm, se puede consumir sin clonar el repositorio:
+
+```powershell
+npx -y @munlib/mongodb-readonly-mcp
+```
+
+## Instalación Para Desarrollo
+
+```powershell
+npm install
+npm run build
+```
+
+## Configuración Segura
+
+No guardes credenciales reales en el repositorio. Usa variables de entorno desde OpenCode, tu terminal o un gestor de secretos.
+
+### Una Conexión
+
+```powershell
+$env:MONGO_NAME = "mongoKubernet"
+$env:MONGO_URI = "mongodb://usuario:password@192.168.xx.xx:27017/admin?authSource=admin"
+npm start
+```
+
+### Varias Conexiones
+
+```powershell
+$env:MONGO_CONNECTIONS = '[{"name":"mongoKubernet","uri":"mongodb://usuario:password@192.168.xx.xx:27017/admin?authSource=admin"},{"name":"local","uri":"mongodb://localhost:27017/admin"}]'
+npm start
+```
+
+También puedes usar una URL larga como la de Studio 3T siempre que sea una URI MongoDB válida:
+
+```text
+mongodb://admin:password@192.168.xx.xx:27017/admin?retryWrites=true&loadBalanced=false&serverSelectionTimeoutMS=5000&connectTimeoutMS=10000&authSource=admin&authMechanism=SCRAM-SHA-1
+```
+
+## Variables Disponibles
+
+| Variable | Descripción | Default |
+| --- | --- | --- |
+| `MONGO_CONNECTIONS` | JSON con múltiples conexiones: `[{"name":"...","uri":"..."}]`. | - |
+| `MONGO_URI` | URI de una sola conexión. | - |
+| `MONGO_NAME` | Nombre lógico para `MONGO_URI`. | `default` |
+| `MONGO_DEFAULT_LIMIT` | Límite por defecto de documentos devueltos. | `25` |
+| `MONGO_MAX_LIMIT` | Límite máximo permitido. | `100` |
+| `MONGO_QUERY_TIMEOUT_MS` | Timeout por consulta. | `15000` |
+| `MONGO_SEARCH_COLLECTION_LIMIT` | Máximo de colecciones escaneadas por búsqueda global. | `50` |
+| `MONGO_SEARCH_FIELDS_LIMIT` | Máximo de campos detectados por colección para búsqueda global. | `30` |
+
+## Configuración en OpenCode
+
+Agrega un MCP local en tu `opencode.json` o `opencode.jsonc`. El campo `command` debe ser un arreglo.
+
+### Usando NPM
+
+Esta es la forma recomendada para otros equipos o máquinas:
+
+```json
+{
+  "$schema": "https://opencode.ai/config.json",
+  "mcp": {
+    "mongodb-readonly": {
+      "type": "local",
+      "enabled": true,
+      "command": ["npx", "-y", "@munlib/mongodb-readonly-mcp"],
+      "env": {
+        "MONGO_CONNECTIONS": "[{\"name\":\"mongoKubernet\",\"uri\":\"mongodb://usuario:password@192.168.xx.xx:27017/admin?authSource=admin\"}]",
+        "MONGO_DEFAULT_LIMIT": "25",
+        "MONGO_MAX_LIMIT": "100",
+        "MONGO_QUERY_TIMEOUT_MS": "15000",
+        "MONGO_SEARCH_COLLECTION_LIMIT": "50",
+        "MONGO_SEARCH_FIELDS_LIMIT": "30"
+      }
+    }
+  }
+}
+```
+
+Después de cambiar `opencode.json`, reinicia OpenCode para que cargue el MCP.
+
+### Usando Build Local
+
+Para desarrollo local también puedes apuntar al archivo compilado:
+
+```json
+{
+  "$schema": "https://opencode.ai/config.json",
+  "mcp": {
+    "mongodb-readonly": {
+      "type": "local",
+      "enabled": true,
+      "command": ["node", "C:/ruta/al/proyecto/dist/index.js"],
+      "env": {
+        "MONGO_CONNECTIONS": "[{\"name\":\"mongoKubernet\",\"uri\":\"mongodb://usuario:password@192.168.xx.xx:27017/admin?authSource=admin\"}]"
+      }
+    }
+  }
+}
+```
+
+## Herramientas MCP
+
+| Herramienta | Uso |
+| --- | --- |
+| `mongo_list_connections` | Ver nombres de conexiones configuradas. |
+| `mongo_list_databases` | Ver bases disponibles en una conexión. |
+| `mongo_list_collections` | Ver colecciones de una base. |
+| `mongo_find_documents` | Consultar documentos con filtro, proyección, orden, límite y skip. |
+| `mongo_count_documents` | Contar documentos por filtro. |
+| `mongo_distinct_values` | Obtener valores distintos de un campo. |
+| `mongo_aggregate_readonly` | Ejecutar agregaciones de lectura. |
+| `mongo_search_database` | Buscar un valor en varias colecciones de una base. |
+
+## Ejemplos de Preguntas en OpenCode
+
+- "Lista las bases de datos disponibles en `mongoKubernet`."
+- "En la base `apiLogs`, lista las colecciones."
+- "Busca el id `64f...` en toda la base `backoffice`."
+- "En `ecommerce_mercados_prod.orders`, encuentra documentos donde `customer.email` sea `correo@dominio.com`."
+- "Cuenta documentos en `logs.requests` para el endpoint `/api/login`."
+
+## Garantías y Límites de Solo Lectura
+
+Este MCP no expone operaciones `insert`, `update`, `delete`, `drop`, `create`, `renameCollection` ni comandos arbitrarios. Para agregaciones, bloquea etapas conocidas que escriben o exponen información administrativa.
+
+La recomendación fuerte es usar además un usuario MongoDB con permisos de solo lectura. La seguridad real debe aplicarse en la base de datos, no solo en el MCP.
+
+## Publicación en NPM
+
+El paquete está preparado para publicarse como:
+
+```text
+@munlib/mongodb-readonly-mcp
+```
+
+Antes de publicar, verifica que no existan credenciales en archivos versionados. Los scripts ejecutan `build`, `typecheck`, `npm pack --dry-run` y piden confirmación antes de publicar.
+
+### Windows PowerShell
+
+Modo guiado:
+
+```powershell
+npm run publish:npm
+```
+
+Solo validar sin publicar:
+
+```powershell
+npm run publish:dry-run
+```
+
+Publicar una actualización patch:
+
+```powershell
+pwsh -File scripts/publish-npm.ps1 -Bump patch
+```
+
+Si npm exige 2FA al publicar, el script pedirá el código OTP. También puedes pasarlo directamente:
+
+```powershell
+pwsh -File scripts/publish-npm.ps1 -Bump none -Otp 123456
+```
+
+También puedes publicar usando un Access Token de npm sin guardar credenciales en el proyecto:
+
+```powershell
+$env:NPM_TOKEN = "npm_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx"
+pwsh -File scripts/publish-npm.ps1 -Bump none
+```
+
+### Linux o macOS
+
+Modo guiado:
+
+```bash
+npm run publish:npm:bash
+```
+
+En el modo guiado puedes escribir el número de la opción o el nombre directamente, por ejemplo `1`, `none`, `patch`, `minor`, `major` o `prerelease`.
+
+Solo validar sin publicar:
+
+```bash
+npm run publish:npm:bash -- --dry-run
+```
+
+Solo validar sin publicar y sin pedir login:
+
+```bash
+npm run publish:npm:bash -- --bump none --dry-run --skip-login
+```
+
+Primera publicación sin cambiar la versión:
+
+```bash
+npm run publish:npm:bash -- --bump none
+```
+
+Publicar una actualización patch:
+
+```bash
+npm run publish:npm:bash -- --bump patch
+```
+
+Si npm exige 2FA al publicar, el script pedirá el código OTP. También puedes pasarlo directamente:
+
+```bash
+npm run publish:npm:bash -- --bump none --otp 123456
+```
+
+También puedes publicar usando un Access Token de npm sin guardar credenciales en el proyecto:
+
+```bash
+export NPM_TOKEN="npm_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx"
+npm run publish:npm:bash -- --bump none
+```
+
+### Comprobación Manual Rápida
+
+Si solo quieres revisar el paquete sin iniciar sesión ni publicar:
+
+```powershell
+npm run publish:check
+```
+
+### Login y Credenciales
+
+Los scripts no guardan credenciales. Si no hay sesión activa, ejecutan:
+
+```powershell
+npm login
+```
+
+`npm login` pedirá usuario, contraseña y 2FA si tu cuenta lo tiene activado, o abrirá el navegador según la configuración actual de npm.
+
+Si al publicar aparece `E403 Two-factor authentication or granular access token with bypass 2fa enabled is required`, significa que npm requiere un código 2FA para esa publicación. Vuelve a ejecutar el script y escribe el código OTP actual de tu app autenticadora cuando lo solicite.
+
+También puedes usar un token granular de npm con permiso de publicación y `bypass 2FA` habilitado, pero para uso manual es más simple usar el OTP.
+
+### Publicar con Access Token de NPM
+
+Sí se puede publicar directamente con un Access Token. Es la opción recomendada si tu cuenta u organización exige 2FA y el OTP manual falla.
+
+En npm crea un token desde `Access Tokens`. Para publicar paquetes necesitas un token con permisos de publicación sobre `@munlib/mongodb-readonly-mcp` o sobre la organización `munlib`.
+
+Recomendaciones para el token:
+
+- Usa un token granular si npm te da esa opción.
+- Dale permiso de lectura/escritura solo al paquete u organización necesaria.
+- Habilita `bypass 2FA` si npm lo solicita para publicaciones automatizadas.
+- No pegues el token en `README.md`, `.env`, `opencode.jsonc` ni commits.
+- Si se filtra, revócalo inmediatamente desde npm.
+
+Los scripts leen el token desde `NPM_TOKEN`, crean un `.npmrc` temporal fuera del proyecto, publican con ese archivo y lo eliminan al terminar.
+
+Windows PowerShell:
+
+```powershell
+$env:NPM_TOKEN = "npm_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx"
+npm run publish:npm
+```
+
+Linux o macOS:
+
+```bash
+export NPM_TOKEN="npm_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx"
+npm run publish:npm:bash -- --bump none
+```
+
+Para probar sin publicar:
+
+```bash
+export NPM_TOKEN="npm_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx"
+npm run publish:npm:bash -- --bump none --dry-run
+```
+
+Si no quieres dejar el token en la sesión después de publicar, elimínalo:
+
+```powershell
+Remove-Item Env:NPM_TOKEN
+```
+
+```bash
+unset NPM_TOKEN
+```
+
+### Versiones
+
+Para primera publicación, selecciona `none` cuando el script pregunte el tipo de publicación.
+
+Para actualizaciones, usa:
+
+```powershell
+patch      # 0.1.0 -> 0.1.1
+minor      # 0.1.0 -> 0.2.0
+major      # 0.1.0 -> 1.0.0
+prerelease # 0.1.0 -> 0.1.1-0
+```
+
+Los scripts usan `npm version --no-git-tag-version`, por lo que actualizan `package.json` y `package-lock.json`, pero no crean commits ni tags automáticamente.

package/dist/index.d.ts

@@ -0,0 +1,2 @@
+#!/usr/bin/env node
+import "dotenv/config";

package/dist/index.js

@@ -0,0 +1,436 @@
+#!/usr/bin/env node
+import "dotenv/config";
+import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
+import { MongoClient, ObjectId } from "mongodb";
+import { z } from "zod";
+const forbiddenAggregationStages = new Set([
+    "$out",
+    "$merge",
+    "$documents",
+    "$currentOp",
+    "$listSessions",
+    "$listLocalSessions",
+]);
+const jsonObjectSchema = z.record(z.unknown()).default({});
+const config = loadRuntimeConfig();
+const connections = new Map();
+const server = new McpServer({
+    name: "mongodb-readonly-mcp",
+    version: "0.1.0",
+});
+server.registerTool("mongo_list_connections", {
+    title: "List MongoDB connections",
+    description: "Lists configured MongoDB connections without exposing credentials.",
+    inputSchema: {},
+}, async () => asText({ connections: config.connections.map(({ name }) => ({ name })) }));
+server.registerTool("mongo_list_databases", {
+    title: "List MongoDB databases",
+    description: "Lists databases available in a configured MongoDB connection.",
+    inputSchema: {
+        connection: z.string().optional().describe("Connection name. Optional when only one connection is configured."),
+    },
+}, async ({ connection }) => {
+    const { client, config: selected } = getConnection(connection);
+    const result = await client.db("admin").admin().listDatabases({ nameOnly: false });
+    return asText({
+        connection: selected.name,
+        databases: result.databases.map((database) => ({
+            name: database.name,
+            sizeOnDisk: database.sizeOnDisk,
+            empty: database.empty,
+        })),
+    });
+});
+server.registerTool("mongo_list_collections", {
+    title: "List MongoDB collections",
+    description: "Lists collections from a database.",
+    inputSchema: {
+        connection: z.string().optional().describe("Connection name. Optional when only one connection is configured."),
+        database: z.string().min(1).describe("Database name."),
+    },
+}, async ({ connection, database }) => {
+    const { client, config: selected } = getConnection(connection);
+    const collections = await client.db(database).listCollections({}, { nameOnly: false }).toArray();
+    return asText({
+        connection: selected.name,
+        database,
+        collections: collections.map((collection) => ({
+            name: collection.name,
+            type: collection.type,
+        })),
+    });
+});
+server.registerTool("mongo_find_documents", {
+    title: "Find MongoDB documents",
+    description: "Runs a read-only find query on a collection. Accepts JSON filter, projection and sort objects.",
+    inputSchema: {
+        connection: z.string().optional().describe("Connection name. Optional when only one connection is configured."),
+        database: z.string().min(1),
+        collection: z.string().min(1),
+        filter: jsonObjectSchema.describe("MongoDB filter object. Example: {\"_id\": \"65...\"}"),
+        projection: jsonObjectSchema.optional().describe("MongoDB projection object."),
+        sort: jsonObjectSchema.optional().describe("MongoDB sort object."),
+        limit: z.number().int().positive().optional().describe("Maximum documents to return."),
+        skip: z.number().int().nonnegative().optional().describe("Documents to skip."),
+    },
+}, async ({ connection, database, collection, filter, projection, sort, limit, skip }) => {
+    const { client, config: selected } = getConnection(connection);
+    const safeLimit = normalizeLimit(limit);
+    const parsedFilter = normalizeFilter(filter ?? {});
+    const options = {
+        limit: safeLimit,
+        maxTimeMS: config.queryTimeoutMs,
+        ...(projection ? { projection: projection } : {}),
+        ...(sort ? { sort: sort } : {}),
+        ...(skip ? { skip } : {}),
+    };
+    const docs = await client.db(database).collection(collection).find(parsedFilter, options).toArray();
+    return asText({
+        connection: selected.name,
+        database,
+        collection,
+        count: docs.length,
+        limit: safeLimit,
+        documents: sanitizeMongoValues(docs),
+    });
+});
+server.registerTool("mongo_count_documents", {
+    title: "Count MongoDB documents",
+    description: "Counts documents matching a read-only filter in a collection.",
+    inputSchema: {
+        connection: z.string().optional().describe("Connection name. Optional when only one connection is configured."),
+        database: z.string().min(1),
+        collection: z.string().min(1),
+        filter: jsonObjectSchema.describe("MongoDB filter object."),
+    },
+}, async ({ connection, database, collection, filter }) => {
+    const { client, config: selected } = getConnection(connection);
+    const count = await client
+        .db(database)
+        .collection(collection)
+        .countDocuments(normalizeFilter(filter ?? {}), { maxTimeMS: config.queryTimeoutMs });
+    return asText({ connection: selected.name, database, collection, count });
+});
+server.registerTool("mongo_distinct_values", {
+    title: "Distinct MongoDB values",
+    description: "Returns distinct values for a field using an optional read-only filter.",
+    inputSchema: {
+        connection: z.string().optional().describe("Connection name. Optional when only one connection is configured."),
+        database: z.string().min(1),
+        collection: z.string().min(1),
+        field: z.string().min(1),
+        filter: jsonObjectSchema.describe("MongoDB filter object."),
+        limit: z.number().int().positive().optional().describe("Maximum values to return."),
+    },
+}, async ({ connection, database, collection, field, filter, limit }) => {
+    const { client, config: selected } = getConnection(connection);
+    const safeLimit = normalizeLimit(limit);
+    const values = await client
+        .db(database)
+        .collection(collection)
+        .distinct(field, normalizeFilter(filter ?? {}), { maxTimeMS: config.queryTimeoutMs });
+    return asText({
+        connection: selected.name,
+        database,
+        collection,
+        field,
+        count: values.length,
+        limit: safeLimit,
+        values: sanitizeMongoValues(values.slice(0, safeLimit)),
+    });
+});
+server.registerTool("mongo_aggregate_readonly", {
+    title: "Aggregate MongoDB documents read-only",
+    description: "Runs a read-only aggregation pipeline. Write or administrative stages such as $out and $merge are blocked.",
+    inputSchema: {
+        connection: z.string().optional().describe("Connection name. Optional when only one connection is configured."),
+        database: z.string().min(1),
+        collection: z.string().min(1),
+        pipeline: z.array(z.record(z.unknown())).describe("Aggregation pipeline."),
+        limit: z.number().int().positive().optional().describe("Maximum documents to return. A final $limit is added automatically."),
+    },
+}, async ({ connection, database, collection, pipeline, limit }) => {
+    assertReadonlyPipeline(pipeline);
+    const { client, config: selected } = getConnection(connection);
+    const safeLimit = normalizeLimit(limit);
+    const limitedPipeline = [...pipeline, { $limit: safeLimit }];
+    const docs = await client
+        .db(database)
+        .collection(collection)
+        .aggregate(limitedPipeline, { maxTimeMS: config.queryTimeoutMs, allowDiskUse: false })
+        .toArray();
+    return asText({
+        connection: selected.name,
+        database,
+        collection,
+        count: docs.length,
+        limit: safeLimit,
+        documents: sanitizeMongoValues(docs),
+    });
+});
+server.registerTool("mongo_search_database", {
+    title: "Search MongoDB database",
+    description: "Searches across collections in one database for an ObjectId, exact scalar value, or text in string fields. Useful for investigation when the target collection is unknown.",
+    inputSchema: {
+        connection: z.string().optional().describe("Connection name. Optional when only one connection is configured."),
+        database: z.string().min(1),
+        query: z.string().min(1).describe("ObjectId, id, email, text fragment, or any scalar value to search."),
+        collections: z.array(z.string().min(1)).optional().describe("Optional collection names. If omitted, collections are discovered."),
+        limitPerCollection: z.number().int().positive().optional().describe("Maximum matching documents per collection."),
+    },
+}, async ({ connection, database, query, collections: requestedCollections, limitPerCollection }) => {
+    const { client, config: selected } = getConnection(connection);
+    const db = client.db(database);
+    const safeLimit = normalizeLimit(limitPerCollection);
+    const collections = requestedCollections?.length
+        ? requestedCollections.slice(0, config.searchCollectionLimit)
+        : (await db.listCollections({}, { nameOnly: true }).toArray())
+            .map((collection) => collection.name)
+            .slice(0, config.searchCollectionLimit);
+    const results = [];
+    for (const collectionName of collections) {
+        const collection = db.collection(collectionName);
+        const fields = await discoverSearchableFields(collection, config.searchFieldsLimit);
+        const filter = buildSearchFilter(query, fields);
+        const documents = await collection.find(filter, { limit: safeLimit, maxTimeMS: config.queryTimeoutMs }).toArray();
+        if (documents.length > 0) {
+            results.push({
+                collection: collectionName,
+                count: documents.length,
+                searchedFields: fields,
+                documents: sanitizeMongoValues(documents),
+            });
+        }
+    }
+    return asText({
+        connection: selected.name,
+        database,
+        query,
+        searchedCollections: collections.length,
+        limitPerCollection: safeLimit,
+        results,
+    });
+});
+async function main() {
+    for (const connection of config.connections) {
+        const client = new MongoClient(connection.uri, {
+            appName: "mongodb-readonly-mcp",
+            serverSelectionTimeoutMS: config.queryTimeoutMs,
+            connectTimeoutMS: config.queryTimeoutMs,
+        });
+        await client.connect();
+        connections.set(connection.name, { config: connection, client });
+    }
+    const transport = new StdioServerTransport();
+    await server.connect(transport);
+}
+function loadRuntimeConfig() {
+    const connections = loadConnections();
+    return {
+        connections,
+        defaultLimit: readPositiveInteger("MONGO_DEFAULT_LIMIT", 25),
+        maxLimit: readPositiveInteger("MONGO_MAX_LIMIT", 100),
+        queryTimeoutMs: readPositiveInteger("MONGO_QUERY_TIMEOUT_MS", 15_000),
+        searchCollectionLimit: readPositiveInteger("MONGO_SEARCH_COLLECTION_LIMIT", 50),
+        searchFieldsLimit: readPositiveInteger("MONGO_SEARCH_FIELDS_LIMIT", 30),
+    };
+}
+function loadConnections() {
+    const rawConnections = process.env.MONGO_CONNECTIONS;
+    if (rawConnections) {
+        const parsed = JSON.parse(rawConnections);
+        const connections = z
+            .array(z.object({
+            name: z.string().min(1),
+            uri: z.string().min(1).startsWith("mongodb"),
+        }))
+            .min(1)
+            .parse(parsed);
+        ensureUniqueConnectionNames(connections);
+        return connections;
+    }
+    const uri = process.env.MONGO_URI;
+    if (uri) {
+        return [{ name: process.env.MONGO_NAME || "default", uri }];
+    }
+    throw new Error("Configure MONGO_CONNECTIONS or MONGO_URI before starting the MCP server.");
+}
+function ensureUniqueConnectionNames(connections) {
+    const seen = new Set();
+    for (const connection of connections) {
+        if (seen.has(connection.name)) {
+            throw new Error(`Duplicate MongoDB connection name: ${connection.name}`);
+        }
+        seen.add(connection.name);
+    }
+}
+function readPositiveInteger(name, fallback) {
+    const value = process.env[name];
+    if (!value)
+        return fallback;
+    const parsed = Number(value);
+    if (!Number.isInteger(parsed) || parsed <= 0) {
+        throw new Error(`${name} must be a positive integer.`);
+    }
+    return parsed;
+}
+function getConnection(name) {
+    if (name) {
+        const connection = connections.get(name);
+        if (!connection) {
+            throw new Error(`Unknown MongoDB connection: ${name}`);
+        }
+        return connection;
+    }
+    if (connections.size === 1) {
+        const connection = connections.values().next().value;
+        if (connection)
+            return connection;
+    }
+    throw new Error("Connection name is required because multiple MongoDB connections are configured.");
+}
+function normalizeLimit(limit) {
+    return Math.min(limit ?? config.defaultLimit, config.maxLimit);
+}
+function normalizeFilter(filter) {
+    return convertObjectIds(filter);
+}
+function convertObjectIds(value) {
+    if (Array.isArray(value)) {
+        return value.map(convertObjectIds);
+    }
+    if (!value || typeof value !== "object") {
+        return value;
+    }
+    const result = {};
+    for (const [key, raw] of Object.entries(value)) {
+        if ((key === "_id" || key.endsWith("Id") || key.endsWith("_id")) && typeof raw === "string" && ObjectId.isValid(raw)) {
+            result[key] = new ObjectId(raw);
+            continue;
+        }
+        result[key] = convertObjectIds(raw);
+    }
+    return result;
+}
+function assertReadonlyPipeline(pipeline) {
+    for (const stage of pipeline) {
+        for (const stageName of Object.keys(stage)) {
+            if (forbiddenAggregationStages.has(stageName)) {
+                throw new Error(`Aggregation stage ${stageName} is not allowed in read-only mode.`);
+            }
+        }
+        assertNoForbiddenNestedStage(stage);
+    }
+}
+function assertNoForbiddenNestedStage(value) {
+    if (Array.isArray(value)) {
+        value.forEach(assertNoForbiddenNestedStage);
+        return;
+    }
+    if (!value || typeof value !== "object")
+        return;
+    for (const [key, nestedValue] of Object.entries(value)) {
+        if (forbiddenAggregationStages.has(key)) {
+            throw new Error(`Aggregation stage ${key} is not allowed in read-only mode.`);
+        }
+        assertNoForbiddenNestedStage(nestedValue);
+    }
+}
+async function discoverSearchableFields(collection, limit) {
+    const sample = await collection.find({}, { limit: 5, maxTimeMS: config.queryTimeoutMs }).toArray();
+    const fields = new Set(["_id"]);
+    for (const document of sample) {
+        collectScalarFields(document, "", fields, limit);
+        if (fields.size >= limit)
+            break;
+    }
+    return [...fields].slice(0, limit);
+}
+function collectScalarFields(value, prefix, fields, limit) {
+    if (fields.size >= limit || !value || typeof value !== "object" || Array.isArray(value))
+        return;
+    for (const [key, nestedValue] of Object.entries(value)) {
+        if (fields.size >= limit)
+            return;
+        const path = prefix ? `${prefix}.${key}` : key;
+        if (nestedValue === null || ["string", "number", "boolean"].includes(typeof nestedValue) || nestedValue instanceof Date || nestedValue instanceof ObjectId) {
+            fields.add(path);
+            continue;
+        }
+        collectScalarFields(nestedValue, path, fields, limit);
+    }
+}
+function buildSearchFilter(query, fields) {
+    const or = [];
+    if (ObjectId.isValid(query)) {
+        or.push({ _id: new ObjectId(query) });
+    }
+    or.push({ _id: query });
+    const numeric = Number(query);
+    const hasNumericValue = query.trim() !== "" && Number.isFinite(numeric);
+    const escaped = escapeRegex(query);
+    for (const field of fields.filter((field) => field !== "_id")) {
+        or.push({ [field]: query });
+        or.push({ [field]: { $regex: escaped, $options: "i" } });
+        if (hasNumericValue) {
+            or.push({ [field]: numeric });
+        }
+    }
+    return { $or: or };
+}
+function escapeRegex(value) {
+    return value.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+}
+function sanitizeMongoValues(value) {
+    if (value === null || ["boolean", "number", "string"].includes(typeof value)) {
+        return value;
+    }
+    if (value instanceof ObjectId) {
+        return value.toHexString();
+    }
+    if (value instanceof Date) {
+        return value.toISOString();
+    }
+    if (Array.isArray(value)) {
+        return value.map(sanitizeMongoValues);
+    }
+    if (value && typeof value === "object") {
+        const result = {};
+        for (const [key, nestedValue] of Object.entries(value)) {
+            result[key] = sanitizeMongoValues(nestedValue);
+        }
+        return result;
+    }
+    return String(value);
+}
+function asText(value) {
+    return {
+        content: [
+            {
+                type: "text",
+                text: JSON.stringify(value, null, 2),
+            },
+        ],
+    };
+}
+process.on("SIGINT", async () => {
+    await closeConnections();
+    process.exit(0);
+});
+process.on("SIGTERM", async () => {
+    await closeConnections();
+    process.exit(0);
+});
+async function closeConnections() {
+    await Promise.all([...connections.values()].map(({ client }) => client.close(true)));
+}
+main().catch((error) => {
+    const message = error instanceof Error ? error.message : String(error);
+    console.error(redactMongoUris(message));
+    process.exit(1);
+});
+function redactMongoUris(message) {
+    return message.replace(/mongodb(?:\+srv)?:\/\/[^\s"']+/gi, "mongodb://<redacted>");
+}
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA,OAAO,eAAe,CAAC;AAEvB,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAgD,MAAM,SAAS,CAAC;AAC9F,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAuBxB,MAAM,0BAA0B,GAAG,IAAI,GAAG,CAAC;IACzC,MAAM;IACN,QAAQ;IACR,YAAY;IACZ,YAAY;IACZ,eAAe;IACf,oBAAoB;CACrB,CAAC,CAAC;AAEH,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;AAE3D,MAAM,MAAM,GAAG,iBAAiB,EAAE,CAAC;AACnC,MAAM,WAAW,GAAG,IAAI,GAAG,EAA2B,CAAC;AAEvD,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC;IAC3B,IAAI,EAAE,sBAAsB;IAC5B,OAAO,EAAE,OAAO;CACjB,CAAC,CAAC;AAEH,MAAM,CAAC,YAAY,CACjB,wBAAwB,EACxB;IACE,KAAK,EAAE,0BAA0B;IACjC,WAAW,EAAE,oEAAoE;IACjF,WAAW,EAAE,EAAE;CAChB,EACD,KAAK,IAAI,EAAE,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,CACtF,CAAC;AAEF,MAAM,CAAC,YAAY,CACjB,sBAAsB,EACtB;IACE,KAAK,EAAE,wBAAwB;IAC/B,WAAW,EAAE,+DAA+D;IAC5E,WAAW,EAAE;QACX,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,mEAAmE,CAAC;KAChH;CACF,EACD,KAAK,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE;IACvB,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,aAAa,CAAC,UAAU,CAAC,CAAC;IAC/D,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,CAAC,aAAa,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;IACnF,OAAO,MAAM,CAAC;QACZ,UAAU,EAAE,QAAQ,CAAC,IAAI;QACzB,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;YAC7C,IAAI,EAAE,QAAQ,CAAC,IAAI;YACnB,UAAU,EAAE,QAAQ,CAAC,UAAU;YAC/B,KAAK,EAAE,QAAQ,CAAC,KAAK;SACtB,CAAC,CAAC;KACJ,CAAC,CAAC;AACL,CAAC,CACF,CAAC;AAEF,MAAM,CAAC,YAAY,CACjB,wBAAwB,EACxB;IACE,KAAK,EAAE,0BAA0B;IACjC,WAAW,EAAE,oCAAoC;IACjD,WAAW,EAAE;QACX,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,mEAAmE,CAAC;QAC/G,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,gBAAgB,CAAC;KACvD;CACF,EACD,KAAK,EAAE,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,EAAE;IACjC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,aAAa,CAAC,UAAU,CAAC,CAAC;IAC/D,MAAM,WAAW,GAAG,MAAM,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,eAAe,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;IACjG,OAAO,MAAM,CAAC;QACZ,UAAU,EAAE,QAAQ,CAAC,IAAI;QACzB,QAAQ;QACR,WAAW,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;YAC5C,IAAI,EAAE,UAAU,CAAC,IAAI;YACrB,IAAI,EAAE,UAAU,CAAC,IAAI;SACtB,CAAC,CAAC;KACJ,CAAC,CAAC;AACL,CAAC,CACF,CAAC;AAEF,MAAM,CAAC,YAAY,CACjB,sBAAsB,EACtB;IACE,KAAK,EAAE,wBAAwB;IAC/B,WAAW,EAAE,gGAAgG;IAC7G,WAAW,EAAE;QACX,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,mEAAmE,CAAC;QAC/G,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAC3B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAC7B,MAAM,EAAE,gBAAgB,CAAC,QAAQ,CAAC,sDAAsD,CAAC;QACzF,UAAU,EAAE,gBAAgB,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,4BAA4B,CAAC;QAC9E,IAAI,EAAE,gBAAgB,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,sBAAsB,CAAC;QAClE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,8BAA8B,CAAC;QACtF,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,oBAAoB,CAAC;KAC/E;CACF,EACD,KAAK,EAAE,EAAE,UAAU,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE;IACpF,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,aAAa,CAAC,UAAU,CAAC,CAAC;IAC/D,MAAM,SAAS,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;IACxC,MAAM,YAAY,GAAG,eAAe,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;IACnD,MAAM,OAAO,GAAgB;QAC3B,KAAK,EAAE,SAAS;QAChB,SAAS,EAAE,MAAM,CAAC,cAAc;QAChC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,UAAsB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7D,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3C,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC1B,CAAC;IAEF,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC,OAAO,EAAE,CAAC;IACpG,OAAO,MAAM,CAAC;QACZ,UAAU,EAAE,QAAQ,CAAC,IAAI;QACzB,QAAQ;QACR,UAAU;QACV,KAAK,EAAE,IAAI,CAAC,MAAM;QAClB,KAAK,EAAE,SAAS;QAChB,SAAS,EAAE,mBAAmB,CAAC,IAAI,CAAC;KACrC,CAAC,CAAC;AACL,CAAC,CACF,CAAC;AAEF,MAAM,CAAC,YAAY,CACjB,uBAAuB,EACvB;IACE,KAAK,EAAE,yBAAyB;IAChC,WAAW,EAAE,+DAA+D;IAC5E,WAAW,EAAE;QACX,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,mEAAmE,CAAC;QAC/G,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAC3B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAC7B,MAAM,EAAE,gBAAgB,CAAC,QAAQ,CAAC,wBAAwB,CAAC;KAC5D;CACF,EACD,KAAK,EAAE,EAAE,UAAU,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,EAAE,EAAE,EAAE;IACrD,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,aAAa,CAAC,UAAU,CAAC,CAAC;IAC/D,MAAM,KAAK,GAAG,MAAM,MAAM;SACvB,EAAE,CAAC,QAAQ,CAAC;SACZ,UAAU,CAAC,UAAU,CAAC;SACtB,cAAc,CAAC,eAAe,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,EAAE,SAAS,EAAE,MAAM,CAAC,cAAc,EAAE,CAAC,CAAC;IAEvF,OAAO,MAAM,CAAC,EAAE,UAAU,EAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC;AAC5E,CAAC,CACF,CAAC;AAEF,MAAM,CAAC,YAAY,CACjB,uBAAuB,EACvB;IACE,KAAK,EAAE,yBAAyB;IAChC,WAAW,EAAE,yEAAyE;IACtF,WAAW,EAAE;QACX,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,mEAAmE,CAAC;QAC/G,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAC3B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAC7B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QACxB,MAAM,EAAE,gBAAgB,CAAC,QAAQ,CAAC,wBAAwB,CAAC;QAC3D,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,2BAA2B,CAAC;KACpF;CACF,EACD,KAAK,EAAE,EAAE,UAAU,EAAE,QAAQ,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE;IACnE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,aAAa,CAAC,UAAU,CAAC,CAAC;IAC/D,MAAM,SAAS,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;IACxC,MAAM,MAAM,GAAG,MAAM,MAAM;SACxB,EAAE,CAAC,QAAQ,CAAC;SACZ,UAAU,CAAC,UAAU,CAAC;SACtB,QAAQ,CAAC,KAAK,EAAE,eAAe,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,EAAE,SAAS,EAAE,MAAM,CAAC,cAAc,EAAE,CAAC,CAAC;IAExF,OAAO,MAAM,CAAC;QACZ,UAAU,EAAE,QAAQ,CAAC,IAAI;QACzB,QAAQ;QACR,UAAU;QACV,KAAK;QACL,KAAK,EAAE,MAAM,CAAC,MAAM;QACpB,KAAK,EAAE,SAAS;QAChB,MAAM,EAAE,mBAAmB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;KACxD,CAAC,CAAC;AACL,CAAC,CACF,CAAC;AAEF,MAAM,CAAC,YAAY,CACjB,0BAA0B,EAC1B;IACE,KAAK,EAAE,uCAAuC;IAC9C,WAAW,EAAE,4GAA4G;IACzH,WAAW,EAAE;QACX,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,mEAAmE,CAAC;QAC/G,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAC3B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAC7B,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,uBAAuB,CAAC;QAC1E,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,qEAAqE,CAAC;KAC9H;CACF,EACD,KAAK,EAAE,EAAE,UAAU,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,EAAE;IAC9D,sBAAsB,CAAC,QAAQ,CAAC,CAAC;IACjC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,aAAa,CAAC,UAAU,CAAC,CAAC;IAC/D,MAAM,SAAS,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;IACxC,MAAM,eAAe,GAAG,CAAC,GAAI,QAAuB,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;IAC7E,MAAM,IAAI,GAAG,MAAM,MAAM;SACtB,EAAE,CAAC,QAAQ,CAAC;SACZ,UAAU,CAAC,UAAU,CAAC;SACtB,SAAS,CAAC,eAAe,EAAE,EAAE,SAAS,EAAE,MAAM,CAAC,cAAc,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC;SACrF,OAAO,EAAE,CAAC;IAEb,OAAO,MAAM,CAAC;QACZ,UAAU,EAAE,QAAQ,CAAC,IAAI;QACzB,QAAQ;QACR,UAAU;QACV,KAAK,EAAE,IAAI,CAAC,MAAM;QAClB,KAAK,EAAE,SAAS;QAChB,SAAS,EAAE,mBAAmB,CAAC,IAAI,CAAC;KACrC,CAAC,CAAC;AACL,CAAC,CACF,CAAC;AAEF,MAAM,CAAC,YAAY,CACjB,uBAAuB,EACvB;IACE,KAAK,EAAE,yBAAyB;IAChC,WAAW,EACT,4KAA4K;IAC9K,WAAW,EAAE;QACX,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,mEAAmE,CAAC;QAC/G,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAC3B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,oEAAoE,CAAC;QACvG,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,oEAAoE,CAAC;QACjI,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,4CAA4C,CAAC;KAClH;CACF,EACD,KAAK,EAAE,EAAE,UAAU,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,EAAE,EAAE;IAC/F,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,aAAa,CAAC,UAAU,CAAC,CAAC;IAC/D,MAAM,EAAE,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC;IAC/B,MAAM,SAAS,GAAG,cAAc,CAAC,kBAAkB,CAAC,CAAC;IACrD,MAAM,WAAW,GAAG,oBAAoB,EAAE,MAAM;QAC9C,CAAC,CAAC,oBAAoB,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,qBAAqB,CAAC;QAC7D,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,eAAe,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;aACzD,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC;aACpC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,qBAAqB,CAAC,CAAC;IAE9C,MAAM,OAAO,GAAG,EAAE,CAAC;IACnB,KAAK,MAAM,cAAc,IAAI,WAAW,EAAE,CAAC;QACzC,MAAM,UAAU,GAAG,EAAE,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC;QACjD,MAAM,MAAM,GAAG,MAAM,wBAAwB,CAAC,UAAU,EAAE,MAAM,CAAC,iBAAiB,CAAC,CAAC;QACpF,MAAM,MAAM,GAAG,iBAAiB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAChD,MAAM,SAAS,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,CAAC,cAAc,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;QAClH,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzB,OAAO,CAAC,IAAI,CAAC;gBACX,UAAU,EAAE,cAAc;gBAC1B,KAAK,EAAE,SAAS,CAAC,MAAM;gBACvB,cAAc,EAAE,MAAM;gBACtB,SAAS,EAAE,mBAAmB,CAAC,SAAS,CAAC;aAC1C,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;QACZ,UAAU,EAAE,QAAQ,CAAC,IAAI;QACzB,QAAQ;QACR,KAAK;QACL,mBAAmB,EAAE,WAAW,CAAC,MAAM;QACvC,kBAAkB,EAAE,SAAS;QAC7B,OAAO;KACR,CAAC,CAAC;AACL,CAAC,CACF,CAAC;AAEF,KAAK,UAAU,IAAI;IACjB,KAAK,MAAM,UAAU,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;QAC5C,MAAM,MAAM,GAAG,IAAI,WAAW,CAAC,UAAU,CAAC,GAAG,EAAE;YAC7C,OAAO,EAAE,sBAAsB;YAC/B,wBAAwB,EAAE,MAAM,CAAC,cAAc;YAC/C,gBAAgB,EAAE,MAAM,CAAC,cAAc;SACxC,CAAC,CAAC;QACH,MAAM,MAAM,CAAC,OAAO,EAAE,CAAC;QACvB,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,CAAC;IACnE,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAC7C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;AAClC,CAAC;AAED,SAAS,iBAAiB;IACxB,MAAM,WAAW,GAAG,eAAe,EAAE,CAAC;IACtC,OAAO;QACL,WAAW;QACX,YAAY,EAAE,mBAAmB,CAAC,qBAAqB,EAAE,EAAE,CAAC;QAC5D,QAAQ,EAAE,mBAAmB,CAAC,iBAAiB,EAAE,GAAG,CAAC;QACrD,cAAc,EAAE,mBAAmB,CAAC,wBAAwB,EAAE,MAAM,CAAC;QACrE,qBAAqB,EAAE,mBAAmB,CAAC,+BAA+B,EAAE,EAAE,CAAC;QAC/E,iBAAiB,EAAE,mBAAmB,CAAC,2BAA2B,EAAE,EAAE,CAAC;KACxE,CAAC;AACJ,CAAC;AAED,SAAS,eAAe;IACtB,MAAM,cAAc,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC;IACrD,IAAI,cAAc,EAAE,CAAC;QACnB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,cAAc,CAAY,CAAC;QACrD,MAAM,WAAW,GAAG,CAAC;aAClB,KAAK,CACJ,CAAC,CAAC,MAAM,CAAC;YACP,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;YACvB,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,SAAS,CAAC;SAC7C,CAAC,CACH;aACA,GAAG,CAAC,CAAC,CAAC;aACN,KAAK,CAAC,MAAM,CAAC,CAAC;QAEjB,2BAA2B,CAAC,WAAW,CAAC,CAAC;QACzC,OAAO,WAAW,CAAC;IACrB,CAAC;IAED,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC;IAClC,IAAI,GAAG,EAAE,CAAC;QACR,OAAO,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC;IAC9D,CAAC;IAED,MAAM,IAAI,KAAK,CAAC,0EAA0E,CAAC,CAAC;AAC9F,CAAC;AAED,SAAS,2BAA2B,CAAC,WAAoC;IACvE,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;QACrC,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CAAC,sCAAsC,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC;QAC3E,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;AACH,CAAC;AAED,SAAS,mBAAmB,CAAC,IAAY,EAAE,QAAgB;IACzD,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAChC,IAAI,CAAC,KAAK;QAAE,OAAO,QAAQ,CAAC;IAC5B,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC7B,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,MAAM,IAAI,CAAC,EAAE,CAAC;QAC7C,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,8BAA8B,CAAC,CAAC;IACzD,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,aAAa,CAAC,IAAa;IAClC,IAAI,IAAI,EAAE,CAAC;QACT,MAAM,UAAU,GAAG,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACzC,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,MAAM,IAAI,KAAK,CAAC,+BAA+B,IAAI,EAAE,CAAC,CAAC;QACzD,CAAC;QACD,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,IAAI,WAAW,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;QAC3B,MAAM,UAAU,GAAG,WAAW,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,KAAoC,CAAC;QACpF,IAAI,UAAU;YAAE,OAAO,UAAU,CAAC;IACpC,CAAC;IAED,MAAM,IAAI,KAAK,CAAC,kFAAkF,CAAC,CAAC;AACtG,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,OAAO,IAAI,CAAC,GAAG,CAAC,KAAK,IAAI,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;AACjE,CAAC;AAED,SAAS,eAAe,CAAC,MAA+B;IACtD,OAAO,gBAAgB,CAAC,MAAM,CAAqB,CAAC;AACtD,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc;IACtC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;IACrC,CAAC;IAED,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACxC,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,MAAM,GAA4B,EAAE,CAAC;IAC3C,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC/C,IAAI,CAAC,GAAG,KAAK,KAAK,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YACrH,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI,QAAQ,CAAC,GAAG,CAAC,CAAC;YAChC,SAAS;QACX,CAAC;QACD,MAAM,CAAC,GAAG,CAAC,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;IACtC,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,sBAAsB,CAAC,QAAmC;IACjE,KAAK,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC;QAC7B,KAAK,MAAM,SAAS,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YAC3C,IAAI,0BAA0B,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC9C,MAAM,IAAI,KAAK,CAAC,qBAAqB,SAAS,oCAAoC,CAAC,CAAC;YACtF,CAAC;QACH,CAAC;QACD,4BAA4B,CAAC,KAAK,CAAC,CAAC;IACtC,CAAC;AACH,CAAC;AAED,SAAS,4BAA4B,CAAC,KAAc;IAClD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,KAAK,CAAC,OAAO,CAAC,4BAA4B,CAAC,CAAC;QAC5C,OAAO;IACT,CAAC;IAED,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO;IAEhD,KAAK,MAAM,CAAC,GAAG,EAAE,WAAW,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACvD,IAAI,0BAA0B,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACxC,MAAM,IAAI,KAAK,CAAC,qBAAqB,GAAG,oCAAoC,CAAC,CAAC;QAChF,CAAC;QACD,4BAA4B,CAAC,WAAW,CAAC,CAAC;IAC5C,CAAC;AACH,CAAC;AAED,KAAK,UAAU,wBAAwB,CAAC,UAAmE,EAAE,KAAa;IACxH,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,cAAc,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;IACnG,MAAM,MAAM,GAAG,IAAI,GAAG,CAAS,CAAC,KAAK,CAAC,CAAC,CAAC;IACxC,KAAK,MAAM,QAAQ,IAAI,MAAM,EAAE,CAAC;QAC9B,mBAAmB,CAAC,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;QACjD,IAAI,MAAM,CAAC,IAAI,IAAI,KAAK;YAAE,MAAM;IAClC,CAAC;IACD,OAAO,CAAC,GAAG,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;AACrC,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAc,EAAE,MAAc,EAAE,MAAmB,EAAE,KAAa;IAC7F,IAAI,MAAM,CAAC,IAAI,IAAI,KAAK,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO;IAEhG,KAAK,MAAM,CAAC,GAAG,EAAE,WAAW,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACvD,IAAI,MAAM,CAAC,IAAI,IAAI,KAAK;YAAE,OAAO;QACjC,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;QAC/C,IAAI,WAAW,KAAK,IAAI,IAAI,CAAC,QAAQ,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,OAAO,WAAW,CAAC,IAAI,WAAW,YAAY,IAAI,IAAI,WAAW,YAAY,QAAQ,EAAE,CAAC;YAC3J,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACjB,SAAS;QACX,CAAC;QACD,mBAAmB,CAAC,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;IACxD,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAa,EAAE,MAAgB;IACxD,MAAM,EAAE,GAAe,EAAE,CAAC;IAC1B,IAAI,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5B,EAAE,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,IAAI,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACxC,CAAC;IAED,EAAE,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC;IAExB,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC9B,MAAM,eAAe,GAAG,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IACxE,MAAM,OAAO,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;IAEnC,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,KAAK,CAAC,EAAE,CAAC;QAC9D,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QAC5B,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;QACzD,IAAI,eAAe,EAAE,CAAC;YACpB,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;QAChC,CAAC;IACH,CAAC;IAED,OAAO,EAAE,GAAG,EAAE,EAAE,EAAsB,CAAC;AACzC,CAAC;AAED,SAAS,WAAW,CAAC,KAAa;IAChC,OAAO,KAAK,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;AACtD,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAc;IACzC,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,SAAS,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,OAAO,KAAK,CAAC,EAAE,CAAC;QAC7E,OAAO,KAAkB,CAAC;IAC5B,CAAC;IAED,IAAI,KAAK,YAAY,QAAQ,EAAE,CAAC;QAC9B,OAAO,KAAK,CAAC,WAAW,EAAE,CAAC;IAC7B,CAAC;IAED,IAAI,KAAK,YAAY,IAAI,EAAE,CAAC;QAC1B,OAAO,KAAK,CAAC,WAAW,EAAE,CAAC;IAC7B,CAAC;IAED,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;IACxC,CAAC;IAED,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,MAAM,MAAM,GAA8B,EAAE,CAAC;QAC7C,KAAK,MAAM,CAAC,GAAG,EAAE,WAAW,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACvD,MAAM,CAAC,GAAG,CAAC,GAAG,mBAAmB,CAAC,WAAW,CAAC,CAAC;QACjD,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;AACvB,CAAC;AAED,SAAS,MAAM,CAAC,KAAc;IAC5B,OAAO;QACL,OAAO,EAAE;YACP;gBACE,IAAI,EAAE,MAAe;gBACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;aACrC;SACF;KACF,CAAC;AACJ,CAAC;AAED,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,KAAK,IAAI,EAAE;IAC9B,MAAM,gBAAgB,EAAE,CAAC;IACzB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC;AAEH,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,KAAK,IAAI,EAAE;IAC/B,MAAM,gBAAgB,EAAE,CAAC;IACzB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC;AAEH,KAAK,UAAU,gBAAgB;IAC7B,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACvF,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;IAC9B,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACvE,OAAO,CAAC,KAAK,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC;IACxC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC;AAEH,SAAS,eAAe,CAAC,OAAe;IACtC,OAAO,OAAO,CAAC,OAAO,CAAC,kCAAkC,EAAE,sBAAsB,CAAC,CAAC;AACrF,CAAC"}

package/package.json

@@ -0,0 +1,49 @@
+{
+  "name": "@munlib/mongodb-readonly-mcp",
+  "version": "0.1.0",
+  "description": "Read-only MCP server for querying one or more MongoDB connections.",
+  "type": "module",
+  "bin": {
+    "mongodb-readonly-mcp": "dist/index.js"
+  },
+  "scripts": {
+    "build": "tsc -p tsconfig.json",
+    "dev": "tsx src/index.ts",
+    "publish:check": "npm run build && npm run typecheck && npm pack --dry-run",
+    "publish:dry-run": "pwsh -File scripts/publish-npm.ps1 -Bump none -DryRun -SkipLogin",
+    "publish:npm": "pwsh -File scripts/publish-npm.ps1",
+    "publish:npm:bash": "bash scripts/publish-npm.sh",
+    "prepublishOnly": "npm run build && npm run typecheck",
+    "start": "node dist/index.js",
+    "typecheck": "tsc -p tsconfig.json --noEmit"
+  },
+  "files": [
+    "dist",
+    "README.md",
+    "package.json"
+  ],
+  "publishConfig": {
+    "access": "public"
+  },
+  "keywords": [
+    "mcp",
+    "mongodb",
+    "readonly",
+    "model-context-protocol"
+  ],
+  "license": "MIT",
+  "engines": {
+    "node": ">=20"
+  },
+  "dependencies": {
+    "@modelcontextprotocol/sdk": "^1.17.5",
+    "dotenv": "^16.4.7",
+    "mongodb": "^6.12.0",
+    "zod": "^3.24.1"
+  },
+  "devDependencies": {
+    "@types/node": "^22.10.7",
+    "tsx": "^4.19.2",
+    "typescript": "^5.7.3"
+  }
+}