@neverinfamous/mysql-mcp 2.1.0 → 2.3.0

package/dist/utils/validators.js

@@ -11,7 +11,7 @@ export class ValidationError extends Error {
     constructor(message, field) {
         super(message);
         this.field = field;
-        this.name = 'ValidationError';
+        this.name = "ValidationError";
     }
 }
 /**
@@ -38,6 +38,8 @@ const DANGEROUS_WHERE_PATTERNS = [
     /\bUNION\s+(ALL\s+)?SELECT\b/i,
     /\bEXCEPT\s+SELECT\b/i,
     /\bINTERSECT\s+SELECT\b/i,
+    // Subquery injection - SELECT inside WHERE (data exfiltration)
+    /\(\s*SELECT\b/i,
     // Dangerous functions
     /\bINTO\s+(OUTFILE|DUMPFILE)\b/i,
     /\bLOAD_FILE\s*\(/i,
@@ -54,8 +56,8 @@ const DANGEROUS_WHERE_PATTERNS = [
  * @param type - Type of identifier for error messages
  * @throws ValidationError if identifier is invalid
  */
-export function validateIdentifier(name, type = 'table') {
-    if (!name || typeof name !== 'string') {
+export function validateIdentifier(name, type = "table") {
+    if (!name || typeof name !== "string") {
         throw new ValidationError(`${type} name must be a non-empty string`, type);
     }
     if (name.length > 64) {
@@ -65,6 +67,35 @@ export function validateIdentifier(name, type = 'table') {
         throw new ValidationError(`Invalid ${type} name: must start with letter/underscore and contain only alphanumeric characters`, type);
     }
 }
+/**
+ * Valid MySQL user/host pattern
+ * - Allows alphanumeric, underscore, percent (wildcard), dot, hyphen
+ * - Max length 255 characters (MySQL host limit)
+ * - Blocks injection characters: quotes, semicolons, backticks, parentheses, spaces
+ */
+const MYSQL_USER_HOST_PATTERN = /^[a-zA-Z0-9_%.-]+$/;
+/**
+ * Validate a MySQL user or host value for safe interpolation
+ *
+ * Unlike identifiers, MySQL usernames and hosts can contain wildcards (%),
+ * dots, hyphens, and can start with digits. This validator blocks SQL
+ * injection characters while permitting legitimate MySQL auth ID patterns.
+ *
+ * @param value - The user or host string to validate
+ * @param type - "user" or "host" for error messages
+ * @throws ValidationError if value contains dangerous characters
+ */
+export function validateMySQLUserHost(value, type = "user") {
+    if (!value || typeof value !== "string") {
+        throw new ValidationError(`${type} must be a non-empty string`, type);
+    }
+    if (value.length > 255) {
+        throw new ValidationError(`${type} exceeds maximum length of 255 characters`, type);
+    }
+    if (!MYSQL_USER_HOST_PATTERN.test(value)) {
+        throw new ValidationError(`Invalid ${type}: contains disallowed characters. Only alphanumeric, underscore, percent, dot, and hyphen are allowed.`, type);
+    }
+}
 /**
  * Validate a qualified identifier (e.g., schema.table)
  *
@@ -72,8 +103,8 @@ export function validateIdentifier(name, type = 'table') {
  * @param type - Type of identifier for error messages
  * @throws ValidationError if identifier is invalid
  */
-export function validateQualifiedIdentifier(name, type = 'table') {
-    if (!name || typeof name !== 'string') {
+export function validateQualifiedIdentifier(name, type = "table") {
+    if (!name || typeof name !== "string") {
         throw new ValidationError(`${type} name must be a non-empty string`, type);
     }
     if (!QUALIFIED_IDENTIFIER_PATTERN.test(name)) {
@@ -88,7 +119,7 @@ export function validateQualifiedIdentifier(name, type = 'table') {
  */
 export function escapeIdentifier(name) {
     // Replace backticks with double backticks (MySQL escaping)
-    return name.replace(/`/g, '``');
+    return name.replace(/`/g, "``");
 }
 /**
  * Validate a WHERE clause for dangerous SQL injection patterns
@@ -100,7 +131,7 @@ export function escapeIdentifier(name) {
  * @throws ValidationError if dangerous patterns are detected
  */
 export function validateWhereClause(where) {
-    if (where === undefined || where === null || typeof where !== 'string') {
+    if (where === undefined || where === null || typeof where !== "string") {
         return; // Empty/null WHERE is valid (will be skipped)
     }
     const trimmed = where.trim();
@@ -109,19 +140,73 @@ export function validateWhereClause(where) {
     }
     for (const pattern of DANGEROUS_WHERE_PATTERNS) {
         if (pattern.test(trimmed)) {
-            throw new ValidationError('WHERE clause contains potentially dangerous SQL patterns', 'where');
+            throw new ValidationError("WHERE clause contains potentially dangerous SQL patterns", "where");
         }
     }
     // Check for unbalanced quotes (sign of injection attempt)
     // Note: escaped quotes ('') count as 2, so we check odd counts
     // after removing escaped quotes
-    const unescapedSingles = trimmed.replace(/''/g, '').match(/'/g);
-    const unescapedDoubles = trimmed.replace(/""/g, '').match(/"/g);
+    const unescapedSingles = trimmed.replace(/''/g, "").match(/'/g);
+    const unescapedDoubles = trimmed.replace(/""/g, "").match(/"/g);
     if ((unescapedSingles?.length ?? 0) % 2 !== 0) {
-        throw new ValidationError('WHERE clause contains unbalanced single quotes', 'where');
+        throw new ValidationError("WHERE clause contains unbalanced single quotes", "where");
     }
     if ((unescapedDoubles?.length ?? 0) % 2 !== 0) {
-        throw new ValidationError('WHERE clause contains unbalanced double quotes', 'where');
+        throw new ValidationError("WHERE clause contains unbalanced double quotes", "where");
+    }
+}
+/**
+ * Valid MySQL privilege keywords (allowlist for GRANT statements)
+ */
+const VALID_MYSQL_PRIVILEGES = new Set([
+    "ALL",
+    "ALL PRIVILEGES",
+    "ALTER",
+    "ALTER ROUTINE",
+    "CREATE",
+    "CREATE ROLE",
+    "CREATE ROUTINE",
+    "CREATE TABLESPACE",
+    "CREATE TEMPORARY TABLES",
+    "CREATE USER",
+    "CREATE VIEW",
+    "DELETE",
+    "DROP",
+    "DROP ROLE",
+    "EVENT",
+    "EXECUTE",
+    "FILE",
+    "GRANT OPTION",
+    "INDEX",
+    "INSERT",
+    "LOCK TABLES",
+    "PROCESS",
+    "REFERENCES",
+    "RELOAD",
+    "REPLICATION CLIENT",
+    "REPLICATION SLAVE",
+    "SELECT",
+    "SHOW DATABASES",
+    "SHOW VIEW",
+    "SHUTDOWN",
+    "SUPER",
+    "TRIGGER",
+    "UPDATE",
+    "USAGE",
+]);
+/**
+ * Validate a MySQL privilege keyword against the allowlist
+ *
+ * @param privilege - The privilege string to validate
+ * @throws ValidationError if the privilege is not recognized
+ */
+export function validateMySQLPrivilege(privilege) {
+    if (!privilege || typeof privilege !== "string") {
+        throw new ValidationError("Privilege must be a non-empty string", "privilege");
+    }
+    const normalized = privilege.trim().toUpperCase();
+    if (!VALID_MYSQL_PRIVILEGES.has(normalized)) {
+        throw new ValidationError(`Invalid MySQL privilege: '${privilege}'. Must be a valid MySQL privilege keyword.`, "privilege");
     }
 }
 /**
@@ -140,6 +225,9 @@ export function escapeLikePattern(pattern) {
  * Handles "table" -> "`table`" and "db.table" -> "`db`.`table`"
  */
 export function escapeQualifiedTable(table) {
-    return table.split('.').map(part => `\`${part.replace(/`/g, '``')}\``).join('.');
+    return table
+        .split(".")
+        .map((part) => `\`${part.replace(/`/g, "``")}\``)
+        .join(".");
 }
 //# sourceMappingURL=validators.js.map

package/dist/utils/validators.js.map

@@ -1 +1 @@
-{"version":3,"file":"validators.js","sourceRoot":"","sources":["../../src/utils/validators.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH;;GAEG;AACH,MAAM,OAAO,eAAgB,SAAQ,KAAK;IACO;IAA7C,YAAY,OAAe,EAAkB,KAAa;QACtD,KAAK,CAAC,OAAO,CAAC,CAAC;QAD0B,UAAK,GAAL,KAAK,CAAQ;QAEtD,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;IAClC,CAAC;CACJ;AAED;;;;;GAKG;AACH,MAAM,kBAAkB,GAAG,+BAA+B,CAAC;AAE3D;;GAEG;AACH,MAAM,4BAA4B,GAAG,+DAA+D,CAAC;AAErG;;GAEG;AACH,MAAM,wBAAwB,GAAG;IAC7B,sDAAsD;IACtD,8EAA8E;IAC9E,8CAA8C;IAC9C,SAAS;IACT,kBAAkB;IAClB,qDAAqD;IACrD,8BAA8B;IAC9B,sBAAsB;IACtB,yBAAyB;IACzB,sBAAsB;IACtB,gCAAgC;IAChC,mBAAmB;IACnB,iDAAiD;IACjD,qCAAqC;IACrC,mCAAmC;IACnC,mBAAmB;IACnB,eAAe;CAClB,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CAC9B,IAAY,EACZ,OAA2G,OAAO;IAElH,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QACpC,MAAM,IAAI,eAAe,CAAC,GAAG,IAAI,kCAAkC,EAAE,IAAI,CAAC,CAAC;IAC/E,CAAC;IAED,IAAI,IAAI,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;QACnB,MAAM,IAAI,eAAe,CAAC,GAAG,IAAI,+CAA+C,EAAE,IAAI,CAAC,CAAC;IAC5F,CAAC;IAED,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,eAAe,CACrB,WAAW,IAAI,mFAAmF,EAClG,IAAI,CACP,CAAC;IACN,CAAC;AACL,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,2BAA2B,CACvC,IAAY,EACZ,OAAoC,OAAO;IAE3C,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QACpC,MAAM,IAAI,eAAe,CAAC,GAAG,IAAI,kCAAkC,EAAE,IAAI,CAAC,CAAC;IAC/E,CAAC;IAED,IAAI,CAAC,4BAA4B,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3C,MAAM,IAAI,eAAe,CACrB,WAAW,IAAI,uEAAuE,EACtF,IAAI,CACP,CAAC;IACN,CAAC;AACL,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAY;IACzC,2DAA2D;IAC3D,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;AACpC,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,mBAAmB,CAAC,KAAyB;IACzD,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACrE,OAAO,CAAC,8CAA8C;IAC1D,CAAC;IAED,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO;IACX,CAAC;IAED,KAAK,MAAM,OAAO,IAAI,wBAAwB,EAAE,CAAC;QAC7C,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YACxB,MAAM,IAAI,eAAe,CACrB,0DAA0D,EAC1D,OAAO,CACV,CAAC;QACN,CAAC;IACL,CAAC;IAED,0DAA0D;IAC1D,+DAA+D;IAC/D,gCAAgC;IAChC,MAAM,gBAAgB,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAChE,MAAM,gBAAgB,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAEhE,IAAI,CAAC,gBAAgB,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5C,MAAM,IAAI,eAAe,CACrB,gDAAgD,EAChD,OAAO,CACV,CAAC;IACN,CAAC;IAED,IAAI,CAAC,gBAAgB,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5C,MAAM,IAAI,eAAe,CACrB,gDAAgD,EAChD,OAAO,CACV,CAAC;IACN,CAAC;AACL,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,iBAAiB,CAAC,OAAe;IAC7C,yCAAyC;IACzC,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;AACvC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAAC,KAAa;IAC9C,OAAO,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACrF,CAAC"}
+{"version":3,"file":"validators.js","sourceRoot":"","sources":["../../src/utils/validators.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH;;GAEG;AACH,MAAM,OAAO,eAAgB,SAAQ,KAAK;IAGtB;IAFlB,YACE,OAAe,EACC,KAAa;QAE7B,KAAK,CAAC,OAAO,CAAC,CAAC;QAFC,UAAK,GAAL,KAAK,CAAQ;QAG7B,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;IAChC,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,kBAAkB,GAAG,+BAA+B,CAAC;AAE3D;;GAEG;AACH,MAAM,4BAA4B,GAChC,+DAA+D,CAAC;AAElE;;GAEG;AACH,MAAM,wBAAwB,GAAG;IAC/B,sDAAsD;IACtD,8EAA8E;IAC9E,8CAA8C;IAC9C,SAAS;IACT,kBAAkB;IAClB,qDAAqD;IACrD,8BAA8B;IAC9B,sBAAsB;IACtB,yBAAyB;IACzB,+DAA+D;IAC/D,gBAAgB;IAChB,sBAAsB;IACtB,gCAAgC;IAChC,mBAAmB;IACnB,iDAAiD;IACjD,qCAAqC;IACrC,mCAAmC;IACnC,mBAAmB;IACnB,eAAe;CAChB,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CAChC,IAAY,EACZ,OASiB,OAAO;IAExB,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtC,MAAM,IAAI,eAAe,CAAC,GAAG,IAAI,kCAAkC,EAAE,IAAI,CAAC,CAAC;IAC7E,CAAC;IAED,IAAI,IAAI,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;QACrB,MAAM,IAAI,eAAe,CACvB,GAAG,IAAI,+CAA+C,EACtD,IAAI,CACL,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,eAAe,CACvB,WAAW,IAAI,mFAAmF,EAClG,IAAI,CACL,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,uBAAuB,GAAG,oBAAoB,CAAC;AAErD;;;;;;;;;;GAUG;AACH,MAAM,UAAU,qBAAqB,CACnC,KAAa,EACb,OAAwB,MAAM;IAE9B,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACxC,MAAM,IAAI,eAAe,CAAC,GAAG,IAAI,6BAA6B,EAAE,IAAI,CAAC,CAAC;IACxE,CAAC;IAED,IAAI,KAAK,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;QACvB,MAAM,IAAI,eAAe,CACvB,GAAG,IAAI,2CAA2C,EAClD,IAAI,CACL,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACzC,MAAM,IAAI,eAAe,CACvB,WAAW,IAAI,wGAAwG,EACvH,IAAI,CACL,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,2BAA2B,CACzC,IAAY,EACZ,OAAoC,OAAO;IAE3C,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtC,MAAM,IAAI,eAAe,CAAC,GAAG,IAAI,kCAAkC,EAAE,IAAI,CAAC,CAAC;IAC7E,CAAC;IAED,IAAI,CAAC,4BAA4B,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7C,MAAM,IAAI,eAAe,CACvB,WAAW,IAAI,uEAAuE,EACtF,IAAI,CACL,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,2DAA2D;IAC3D,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;AAClC,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,mBAAmB,CAAC,KAAyB;IAC3D,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvE,OAAO,CAAC,8CAA8C;IACxD,CAAC;IAED,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO;IACT,CAAC;IAED,KAAK,MAAM,OAAO,IAAI,wBAAwB,EAAE,CAAC;QAC/C,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,eAAe,CACvB,0DAA0D,EAC1D,OAAO,CACR,CAAC;QACJ,CAAC;IACH,CAAC;IAED,0DAA0D;IAC1D,+DAA+D;IAC/D,gCAAgC;IAChC,MAAM,gBAAgB,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAChE,MAAM,gBAAgB,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAEhE,IAAI,CAAC,gBAAgB,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QAC9C,MAAM,IAAI,eAAe,CACvB,gDAAgD,EAChD,OAAO,CACR,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,gBAAgB,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QAC9C,MAAM,IAAI,eAAe,CACvB,gDAAgD,EAChD,OAAO,CACR,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,sBAAsB,GAAG,IAAI,GAAG,CAAC;IACrC,KAAK;IACL,gBAAgB;IAChB,OAAO;IACP,eAAe;IACf,QAAQ;IACR,aAAa;IACb,gBAAgB;IAChB,mBAAmB;IACnB,yBAAyB;IACzB,aAAa;IACb,aAAa;IACb,QAAQ;IACR,MAAM;IACN,WAAW;IACX,OAAO;IACP,SAAS;IACT,MAAM;IACN,cAAc;IACd,OAAO;IACP,QAAQ;IACR,aAAa;IACb,SAAS;IACT,YAAY;IACZ,QAAQ;IACR,oBAAoB;IACpB,mBAAmB;IACnB,QAAQ;IACR,gBAAgB;IAChB,WAAW;IACX,UAAU;IACV,OAAO;IACP,SAAS;IACT,QAAQ;IACR,OAAO;CACR,CAAC,CAAC;AAEH;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB,CAAC,SAAiB;IACtD,IAAI,CAAC,SAAS,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;QAChD,MAAM,IAAI,eAAe,CACvB,sCAAsC,EACtC,WAAW,CACZ,CAAC;IACJ,CAAC;IAED,MAAM,UAAU,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAClD,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;QAC5C,MAAM,IAAI,eAAe,CACvB,6BAA6B,SAAS,6CAA6C,EACnF,WAAW,CACZ,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,iBAAiB,CAAC,OAAe;IAC/C,yCAAyC;IACzC,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;AACrC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAAC,KAAa;IAChD,OAAO,KAAK;SACT,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC;SAChD,IAAI,CAAC,GAAG,CAAC,CAAC;AACf,CAAC"}

package/eslint.config.js

@@ -1,86 +1,122 @@
-import js from '@eslint/js'
-import globals from 'globals'
-import tseslint from 'typescript-eslint'
+import js from "@eslint/js";
+import globals from "globals";
+import tseslint from "typescript-eslint";
 
 export default tseslint.config(
-    { ignores: ['dist', 'node_modules', '.wrangler', '**/__tests__/**', '**/*.test.ts', '**/*.spec.ts'] },
-    // Main source configuration
-    {
-        extends: [
-            js.configs.recommended,
-            ...tseslint.configs.strictTypeChecked,
-            ...tseslint.configs.stylisticTypeChecked,
-        ],
-        files: ['src/**/*.ts'],
-        languageOptions: {
-            ecmaVersion: 2022,
-            globals: {
-                ...globals.node,
-            },
-            parserOptions: {
-                projectService: true,
-                tsconfigRootDir: import.meta.dirname,
-            },
+  {
+    ignores: [
+      "dist",
+      "node_modules",
+      ".wrangler",
+      "**/__tests__/**",
+      "**/*.test.ts",
+      "**/*.spec.ts",
+    ],
+  },
+  // Main source configuration
+  {
+    extends: [
+      js.configs.recommended,
+      ...tseslint.configs.strictTypeChecked,
+      ...tseslint.configs.stylisticTypeChecked,
+    ],
+    files: ["src/**/*.ts"],
+    languageOptions: {
+      ecmaVersion: 2022,
+      globals: {
+        ...globals.node,
+      },
+      parserOptions: {
+        projectService: true,
+        tsconfigRootDir: import.meta.dirname,
+      },
+    },
+    rules: {
+      // Strict rules - type safety
+      "@typescript-eslint/no-explicit-any": "error",
+      "@typescript-eslint/explicit-function-return-type": [
+        "error",
+        {
+          allowExpressions: true,
+          allowTypedFunctionExpressions: true,
+          allowHigherOrderFunctions: true,
+          allowDirectConstAssertionInArrowFunctions: true,
+          allowConciseArrowFunctionExpressionsStartingWithVoid: true,
+        },
+      ],
+      "@typescript-eslint/no-unused-vars": [
+        "error",
+        { argsIgnorePattern: "^_" },
+      ],
+      "@typescript-eslint/no-non-null-assertion": "error",
+      "@typescript-eslint/strict-boolean-expressions": [
+        "error",
+        {
+          allowNullableBoolean: true,
+          allowNullableString: true,
+          allowNullableNumber: false,
+          allowNullableObject: true,
+        },
+      ],
+      "@typescript-eslint/no-floating-promises": "error",
+      "@typescript-eslint/no-misused-promises": [
+        "error",
+        {
+          checksVoidReturn: {
+            attributes: false,
+            properties: false,
+          },
+        },
+      ],
+      "@typescript-eslint/await-thenable": "error",
+      "@typescript-eslint/require-await": "error",
+      "@typescript-eslint/no-unnecessary-condition": "off",
+      "@typescript-eslint/prefer-nullish-coalescing": [
+        "error",
+        {
+          ignorePrimitives: { string: true, number: true },
+        },
+      ],
+      "@typescript-eslint/prefer-optional-chain": "error",
+      // Unsafe any rules
+      "@typescript-eslint/no-unsafe-assignment": "error",
+      "@typescript-eslint/no-unsafe-member-access": "error",
+      "@typescript-eslint/no-unsafe-call": "error",
+      "@typescript-eslint/no-unsafe-return": "error",
+      "@typescript-eslint/no-unsafe-argument": "error",
+      "@typescript-eslint/restrict-template-expressions": [
+        "error",
+        {
+          allowNumber: true,
+          allowBoolean: true,
+        },
+      ],
+      "@typescript-eslint/restrict-plus-operands": [
+        "error",
+        {
+          allowNumberAndString: true,
+          allowAny: true,
+        },
+      ],
+      "@typescript-eslint/no-confusing-void-expression": [
+        "error",
+        {
+          ignoreArrowShorthand: true,
+          ignoreVoidOperator: true,
         },
-        rules: {
-            // Strict rules - type safety
-            '@typescript-eslint/no-explicit-any': 'error',
-            '@typescript-eslint/explicit-function-return-type': ['error', {
-                allowExpressions: true,
-                allowTypedFunctionExpressions: true,
-                allowHigherOrderFunctions: true,
-                allowDirectConstAssertionInArrowFunctions: true,
-                allowConciseArrowFunctionExpressionsStartingWithVoid: true,
-            }],
-            '@typescript-eslint/no-unused-vars': ['error', { argsIgnorePattern: '^_' }],
-            '@typescript-eslint/no-non-null-assertion': 'error',
-            '@typescript-eslint/strict-boolean-expressions': ['error', {
-                allowNullableBoolean: true,
-                allowNullableString: true,
-                allowNullableNumber: false,
-                allowNullableObject: true,
-            }],
-            '@typescript-eslint/no-floating-promises': 'error',
-            '@typescript-eslint/no-misused-promises': ['error', {
-                checksVoidReturn: {
-                    attributes: false,
-                    properties: false,
-                },
-            }],
-            '@typescript-eslint/await-thenable': 'error',
-            '@typescript-eslint/require-await': 'error',
-            '@typescript-eslint/no-unnecessary-condition': 'off',
-            '@typescript-eslint/prefer-nullish-coalescing': ['error', {
-                ignorePrimitives: { string: true, number: true },
-            }],
-            '@typescript-eslint/prefer-optional-chain': 'error',
-            // Unsafe any rules
-            '@typescript-eslint/no-unsafe-assignment': 'error',
-            '@typescript-eslint/no-unsafe-member-access': 'error',
-            '@typescript-eslint/no-unsafe-call': 'error',
-            '@typescript-eslint/no-unsafe-return': 'error',
-            '@typescript-eslint/no-unsafe-argument': 'error',
-            '@typescript-eslint/restrict-template-expressions': ['error', {
-                allowNumber: true,
-                allowBoolean: true,
-            }],
-            '@typescript-eslint/restrict-plus-operands': ['error', {
-                allowNumberAndString: true,
-                allowAny: true,
-            }],
-            '@typescript-eslint/no-confusing-void-expression': ['error', {
-                ignoreArrowShorthand: true,
-                ignoreVoidOperator: true,
-            }],
-            '@typescript-eslint/consistent-type-imports': ['error', {
-                prefer: 'type-imports',
-                fixStyle: 'inline-type-imports',
-            }],
-            '@typescript-eslint/consistent-type-exports': 'error',
-            '@typescript-eslint/no-misused-spread': 'off',
-            // Prevent console.log() which writes to stdout and corrupts MCP stdio transport
-            // Only stderr output (error, warn) is safe for MCP servers
-            'no-console': ['error', { allow: ['error', 'warn'] }],
+      ],
+      "@typescript-eslint/consistent-type-imports": [
+        "error",
+        {
+          prefer: "type-imports",
+          fixStyle: "inline-type-imports",
         },
+      ],
+      "@typescript-eslint/consistent-type-exports": "error",
+      "@typescript-eslint/no-misused-spread": "off",
+      // Prevent console.log() which writes to stdout and corrupts MCP stdio transport
+      // Only stderr output (error, warn) is safe for MCP servers
+      "no-console": ["error", { allow: ["error", "warn"] }],
     },
-)
+  },
+);

package/package.json

@@ -1,66 +1,68 @@
 {
-    "name": "@neverinfamous/mysql-mcp",
-    "version": "2.1.0",
-    "description": "Enterprise-grade MySQL MCP Server with OAuth 2.0 authentication, connection pooling & tool filtering",
-    "type": "module",
-    "main": "dist/index.js",
-    "types": "dist/index.d.ts",
-    "bin": {
-        "mysql-mcp": "dist/cli.js"
-    },
-    "scripts": {
-        "build": "tsc",
-        "dev": "tsc --watch",
-        "lint": "eslint src/",
-        "lint:fix": "eslint src/ --fix",
-        "typecheck": "tsc --noEmit",
-        "test": "vitest run",
-        "test:watch": "vitest",
-        "test:coverage": "vitest run --coverage",
-        "check": "npm run lint && npm run typecheck"
-    },
-    "keywords": [
-        "mcp",
-        "mysql",
-        "database",
-        "model-context-protocol",
-        "ai",
-        "llm",
-        "claude",
-        "cursor",
-        "oauth",
-        "typescript"
-    ],
-    "author": "Adamic.tech",
-    "license": "MIT",
-    "repository": {
-        "type": "git",
-        "url": "git+https://github.com/neverinfamous/mysql-mcp.git"
-    },
-    "bugs": {
-        "url": "https://github.com/neverinfamous/mysql-mcp/issues"
-    },
-    "homepage": "https://github.com/neverinfamous/mysql-mcp#readme",
-    "engines": {
-        "node": ">=18.0.0"
-    },
-    "dependencies": {
-        "@modelcontextprotocol/sdk": "^1.25.1",
-        "commander": "^14.0.2",
-        "cors": "^2.8.5",
-        "jose": "^6.1.3",
-        "mysql2": "^3.16.0",
-        "zod": "^4.2.1"
-    },
-    "devDependencies": {
-        "@eslint/js": "^9.39.2",
-        "@types/cors": "^2.8.19",
-        "@types/node": "^25.0.3",
-        "@vitest/coverage-v8": "^4.0.16",
-        "eslint": "^9.39.2",
-        "globals": "^16.5.0",
-        "typescript": "^5.9.3",
-        "typescript-eslint": "^8.50.1",
-        "vitest": "^4.0.16"
+  "name": "@neverinfamous/mysql-mcp",
+  "version": "2.3.0",
+  "description": "Enterprise-grade MySQL MCP Server with OAuth 2.0 authentication, connection pooling & tool filtering",
+  "type": "module",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "bin": {
+    "mysql-mcp": "dist/cli.js"
+  },
+  "scripts": {
+    "build": "tsc",
+    "dev": "tsc --watch",
+    "lint": "eslint src/",
+    "lint:fix": "eslint src/ --fix",
+    "typecheck": "tsc --noEmit",
+    "test": "vitest run",
+    "test:watch": "vitest",
+    "test:coverage": "vitest run --coverage",
+    "check": "npm run lint && npm run typecheck"
+  },
+  "keywords": [
+    "mcp",
+    "mysql",
+    "database",
+    "model-context-protocol",
+    "ai",
+    "llm",
+    "claude",
+    "cursor",
+    "oauth",
+    "typescript"
+  ],
+  "author": "Adamic.tech",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/neverinfamous/mysql-mcp.git"
+  },
+  "bugs": {
+    "url": "https://github.com/neverinfamous/mysql-mcp/issues"
+  },
+  "homepage": "https://github.com/neverinfamous/mysql-mcp#readme",
+  "engines": {
+    "node": ">=24.0.0"
+  },
+  "dependencies": {
+    "@modelcontextprotocol/sdk": "^1.26.0",
+    "jose": "^6.1.3",
+    "mysql2": "^3.17.2",
+    "zod": "^4.3.6"
+  },
+  "devDependencies": {
+    "@eslint/js": "^10.0.1",
+    "@types/node": "^25.2.3",
+    "@vitest/coverage-v8": "^4.0.18",
+    "eslint": "^10.0.0",
+    "globals": "^17.3.0",
+    "typescript": "^5.9.3",
+    "typescript-eslint": "^8.56.0",
+    "vitest": "^4.0.18"
+  },
+  "overrides": {
+    "@modelcontextprotocol/sdk": {
+      "ajv": "8.18.0"
     }
-}
+  }
+}

package/releases/release-notes.md

@@ -21,32 +21,32 @@ Enterprise-grade MySQL MCP Server with OAuth 2.0 authentication, connection pool
 
 ### Tool Categories (106 tools)
 
-| Category | Tools | Description |
-|----------|-------|-------------|
-| Core Database | 8 | CRUD, schema, tables, indexes |
-| Transactions | 7 | BEGIN, COMMIT, ROLLBACK, savepoints |
-| JSON Operations | 12 | JSON_EXTRACT, JSON_SET, JSON_CONTAINS |
-| Text Processing | 6 | REGEXP, LIKE, SOUNDEX, SUBSTRING |
-| FULLTEXT Search | 4 | Natural language and boolean search |
-| Performance | 8 | EXPLAIN, query analysis, buffer pool |
-| Optimization | 4 | Index hints, query rewrite suggestions |
-| Admin | 6 | OPTIMIZE, ANALYZE, CHECK, REPAIR |
-| Monitoring | 7 | PROCESSLIST, status variables, health |
-| Backup | 4 | Export, import, mysqldump |
-| Replication | 5 | Master/slave status, binlog, GTID |
-| Partitioning | 4 | Partition management |
-| MySQL Router | 9 | Router REST API management |
-| ProxySQL | 12 | Proxy monitoring and configuration |
-| MySQL Shell | 10 | Shell utilities, dump/load, upgrades |
+| Category        | Tools | Description                            |
+| --------------- | ----- | -------------------------------------- |
+| Core Database   | 8     | CRUD, schema, tables, indexes          |
+| Transactions    | 7     | BEGIN, COMMIT, ROLLBACK, savepoints    |
+| JSON Operations | 12    | JSON_EXTRACT, JSON_SET, JSON_CONTAINS  |
+| Text Processing | 6     | REGEXP, LIKE, SOUNDEX, SUBSTRING       |
+| FULLTEXT Search | 4     | Natural language and boolean search    |
+| Performance     | 8     | EXPLAIN, query analysis, buffer pool   |
+| Optimization    | 4     | Index hints, query rewrite suggestions |
+| Admin           | 6     | OPTIMIZE, ANALYZE, CHECK, REPAIR       |
+| Monitoring      | 7     | PROCESSLIST, status variables, health  |
+| Backup          | 4     | Export, import, mysqldump              |
+| Replication     | 5     | Master/slave status, binlog, GTID      |
+| Partitioning    | 4     | Partition management                   |
+| MySQL Router    | 9     | Router REST API management             |
+| ProxySQL        | 12    | Proxy monitoring and configuration     |
+| MySQL Shell     | 10    | Shell utilities, dump/load, upgrades   |
 
 ### AI-Powered Prompts
 
-| Prompt | Description |
-|--------|-------------|
-| `mysql_query_builder` | Construct SQL queries with security best practices |
-| `mysql_schema_design` | Design table schemas with indexes and relationships |
+| Prompt                       | Description                                            |
+| ---------------------------- | ------------------------------------------------------ |
+| `mysql_query_builder`        | Construct SQL queries with security best practices     |
+| `mysql_schema_design`        | Design table schemas with indexes and relationships    |
 | `mysql_performance_analysis` | Analyze slow queries with optimization recommendations |
-| `mysql_migration` | Generate migration scripts with rollback options |
+| `mysql_migration`            | Generate migration scripts with rollback options       |
 
 ### Enterprise Features
 
@@ -83,10 +83,14 @@ docker run -i --rm writenotenow/mysql-mcp:v1.0.0 \
     "mysql-mcp": {
       "command": "docker",
       "args": [
-        "run", "-i", "--rm",
+        "run",
+        "-i",
+        "--rm",
         "writenotenow/mysql-mcp:v1.0.0",
-        "--transport", "stdio",
-        "--mysql", "mysql://user:password@host:3306/database"
+        "--transport",
+        "stdio",
+        "--mysql",
+        "mysql://user:password@host:3306/database"
       ]
     }
   }
@@ -102,12 +106,14 @@ Reduce tool count for clients with limits:
 ```json
 {
   "args": [
-    "--tool-filter", "-performance,-optimization,-backup,-replication,-partitioning,-router,-proxysql,-shell"
+    "--tool-filter",
+    "-performance,-optimization,-backup,-replication,-partitioning,-router,-proxysql,-shell"
   ]
 }
 ```
 
 **Presets:**
+
 - Minimal (~30 tools): Core + JSON + Text
 - DBA (~37 tools): Admin + Monitoring + Performance
 - Development (~42 tools): Core + JSON + Text + Transactions