@neverinfamous/mysql-mcp 2.1.0

package/dist/utils/promptGenerator.d.ts

@@ -0,0 +1,15 @@
+/**
+ * Prompt generator utilities
+ *
+ * Helpers for generating tool documentation and discovery prompts.
+ */
+import type { ToolDefinition } from '../types/index.js';
+/**
+ * Generate a compact index of all tools grouped by category
+ */
+export declare function generateCompactIndex(tools: ToolDefinition[]): string;
+/**
+ * Generate a discovery prompt with common use cases
+ */
+export declare function generateDiscoveryPrompt(tools: ToolDefinition[]): string;
+//# sourceMappingURL=promptGenerator.d.ts.map

package/dist/utils/promptGenerator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"promptGenerator.d.ts","sourceRoot":"","sources":["../../src/utils/promptGenerator.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAExD;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,cAAc,EAAE,GAAG,MAAM,CAsBpE;AAED;;GAEG;AACH,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,cAAc,EAAE,GAAG,MAAM,CAoCvE"}

package/dist/utils/promptGenerator.js

@@ -0,0 +1,51 @@
+/**
+ * Generate a compact index of all tools grouped by category
+ */
+export function generateCompactIndex(tools) {
+    // Group tools by category
+    const groups = {};
+    for (const tool of tools) {
+        const group = tool.group ?? 'other';
+        groups[group] ??= [];
+        groups[group].push(tool);
+    }
+    // Generate compact format
+    const lines = [];
+    for (const [group, groupTools] of Object.entries(groups)) {
+        lines.push(`### ${group} (${String(groupTools.length)} tools)`);
+        lines.push('');
+        for (const tool of groupTools) {
+            lines.push(`- **${tool.name}**: ${tool.description}`);
+        }
+        lines.push('');
+    }
+    return lines.join('\n');
+}
+/**
+ * Generate a discovery prompt with common use cases
+ */
+export function generateDiscoveryPrompt(tools) {
+    // Find commonly used tools based on tags
+    const queryTools = tools.filter(t => t.name.includes('query') || t.name.includes('read') || t.name.includes('write')).slice(0, 3);
+    const schemaTools = tools.filter(t => t.name.includes('table') || t.name.includes('schema') || t.name.includes('describe')).slice(0, 3);
+    const perfTools = tools.filter(t => t.name.includes('explain') || t.name.includes('performance') || t.name.includes('stats')).slice(0, 3);
+    const lines = [
+        '## Quick Start',
+        '',
+        '### Query Data',
+    ];
+    for (const tool of queryTools) {
+        lines.push(`- \`${tool.name}\`: ${tool.description}`);
+    }
+    lines.push('', '### Explore Schema');
+    for (const tool of schemaTools) {
+        lines.push(`- \`${tool.name}\`: ${tool.description}`);
+    }
+    lines.push('', '### Analyze Performance');
+    for (const tool of perfTools) {
+        lines.push(`- \`${tool.name}\`: ${tool.description}`);
+    }
+    lines.push('');
+    return lines.join('\n');
+}
+//# sourceMappingURL=promptGenerator.js.map

package/dist/utils/promptGenerator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"promptGenerator.js","sourceRoot":"","sources":["../../src/utils/promptGenerator.ts"],"names":[],"mappings":"AAOA;;GAEG;AACH,MAAM,UAAU,oBAAoB,CAAC,KAAuB;IACxD,0BAA0B;IAC1B,MAAM,MAAM,GAAqC,EAAE,CAAC;IAEpD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACvB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,OAAO,CAAC;QACpC,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACrB,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC7B,CAAC;IAED,0BAA0B;IAC1B,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,CAAC,KAAK,EAAE,UAAU,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACvD,KAAK,CAAC,IAAI,CAAC,OAAO,KAAK,KAAK,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAChE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;YAC5B,KAAK,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,OAAO,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;QAC1D,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACnB,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC5B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,uBAAuB,CAAC,KAAuB;IAC3D,yCAAyC;IACzC,MAAM,UAAU,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAChC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAClF,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAEd,MAAM,WAAW,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CACjC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CACvF,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAEd,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAC/B,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAC3F,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAEd,MAAM,KAAK,GAAa;QACpB,gBAAgB;QAChB,EAAE;QACF,gBAAgB;KACnB,CAAC;IAEF,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;QAC5B,KAAK,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,OAAO,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;IAC1D,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,oBAAoB,CAAC,CAAC;IACrC,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;QAC7B,KAAK,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,OAAO,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;IAC1D,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,yBAAyB,CAAC,CAAC;IAC1C,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;QAC3B,KAAK,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,OAAO,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;IAC1D,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC5B,CAAC"}

package/dist/utils/validators.d.ts

@@ -0,0 +1,59 @@
+/**
+ * mysql-mcp - Input Validators
+ *
+ * Centralized input validation utilities for SQL security.
+ */
+/**
+ * Validation error for security-related input issues
+ */
+export declare class ValidationError extends Error {
+    readonly field: string;
+    constructor(message: string, field: string);
+}
+/**
+ * Validate a SQL identifier (table name, column name, schema name)
+ *
+ * @param name - The identifier to validate
+ * @param type - Type of identifier for error messages
+ * @throws ValidationError if identifier is invalid
+ */
+export declare function validateIdentifier(name: string, type?: 'table' | 'column' | 'schema' | 'database' | 'index' | 'view' | 'event' | 'procedure' | 'function'): void;
+/**
+ * Validate a qualified identifier (e.g., schema.table)
+ *
+ * @param name - The qualified identifier to validate
+ * @param type - Type of identifier for error messages
+ * @throws ValidationError if identifier is invalid
+ */
+export declare function validateQualifiedIdentifier(name: string, type?: 'table' | 'column' | 'view'): void;
+/**
+ * Escape a SQL identifier for safe inclusion in queries
+ *
+ * @param name - The identifier to escape
+ * @returns Escaped identifier (backticks escaped)
+ */
+export declare function escapeIdentifier(name: string): string;
+/**
+ * Validate a WHERE clause for dangerous SQL injection patterns
+ *
+ * This performs pattern-based detection of common SQL injection attempts.
+ * It allows legitimate complex WHERE clauses while blocking known attack patterns.
+ *
+ * @param where - The WHERE clause to validate (without the WHERE keyword)
+ * @throws ValidationError if dangerous patterns are detected
+ */
+export declare function validateWhereClause(where: string | undefined): void;
+/**
+ * Validate a LIKE pattern for safe usage
+ * Already used in monitoring.ts, but centralized here for consistency
+ *
+ * @param pattern - The LIKE pattern to escape
+ * @returns Escaped pattern safe for SQL
+ */
+export declare function escapeLikePattern(pattern: string): string;
+/**
+ * Escape a potentially qualified table name
+ * Handles "table" -> "`table`" and "db.table" -> "`db`.`table`"
+ */
+export declare function escapeQualifiedTable(table: string): string;
+//# sourceMappingURL=validators.d.ts.map

package/dist/utils/validators.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validators.d.ts","sourceRoot":"","sources":["../../src/utils/validators.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH;;GAEG;AACH,qBAAa,eAAgB,SAAQ,KAAK;aACO,KAAK,EAAE,MAAM;gBAA9C,OAAO,EAAE,MAAM,EAAkB,KAAK,EAAE,MAAM;CAI7D;AAsCD;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAC9B,IAAI,EAAE,MAAM,EACZ,IAAI,GAAE,OAAO,GAAG,QAAQ,GAAG,QAAQ,GAAG,UAAU,GAAG,OAAO,GAAG,MAAM,GAAG,OAAO,GAAG,WAAW,GAAG,UAAoB,GACnH,IAAI,CAeN;AAED;;;;;;GAMG;AACH,wBAAgB,2BAA2B,CACvC,IAAI,EAAE,MAAM,EACZ,IAAI,GAAE,OAAO,GAAG,QAAQ,GAAG,MAAgB,GAC5C,IAAI,CAWN;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAGrD;AAED;;;;;;;;GAQG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,CAsCnE;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAGzD;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAE1D"}

package/dist/utils/validators.js

@@ -0,0 +1,145 @@
+/**
+ * mysql-mcp - Input Validators
+ *
+ * Centralized input validation utilities for SQL security.
+ */
+/**
+ * Validation error for security-related input issues
+ */
+export class ValidationError extends Error {
+    field;
+    constructor(message, field) {
+        super(message);
+        this.field = field;
+        this.name = 'ValidationError';
+    }
+}
+/**
+ * Valid MySQL identifier pattern
+ * - Must start with letter or underscore
+ * - Can contain letters, numbers, underscores
+ * - Max length 64 characters (MySQL limit)
+ */
+const IDENTIFIER_PATTERN = /^[a-zA-Z_][a-zA-Z0-9_]{0,63}$/;
+/**
+ * Extended identifier pattern allowing dots for schema.table format
+ */
+const QUALIFIED_IDENTIFIER_PATTERN = /^[a-zA-Z_][a-zA-Z0-9_]{0,63}(\.[a-zA-Z_][a-zA-Z0-9_]{0,63})?$/;
+/**
+ * Dangerous patterns in WHERE clauses that indicate SQL injection attempts
+ */
+const DANGEROUS_WHERE_PATTERNS = [
+    // Stacked queries - semicolon followed by SQL keyword
+    /;\s*(SELECT|INSERT|UPDATE|DELETE|DROP|CREATE|ALTER|TRUNCATE|EXEC|EXECUTE)\b/i,
+    // SQL comments that could hide malicious code
+    /--\s*$/m,
+    /\/\*[\s\S]*?\*\//,
+    // Query manipulation keywords (usually not in WHERE)
+    /\bUNION\s+(ALL\s+)?SELECT\b/i,
+    /\bEXCEPT\s+SELECT\b/i,
+    /\bINTERSECT\s+SELECT\b/i,
+    // Dangerous functions
+    /\bINTO\s+(OUTFILE|DUMPFILE)\b/i,
+    /\bLOAD_FILE\s*\(/i,
+    // Information schema probing (common in attacks)
+    /\bINFORMATION_SCHEMA\b.*\bTABLES\b/i,
+    // Benchmark/sleep (timing attacks)
+    /\bBENCHMARK\s*\(/i,
+    /\bSLEEP\s*\(/i,
+];
+/**
+ * Validate a SQL identifier (table name, column name, schema name)
+ *
+ * @param name - The identifier to validate
+ * @param type - Type of identifier for error messages
+ * @throws ValidationError if identifier is invalid
+ */
+export function validateIdentifier(name, type = 'table') {
+    if (!name || typeof name !== 'string') {
+        throw new ValidationError(`${type} name must be a non-empty string`, type);
+    }
+    if (name.length > 64) {
+        throw new ValidationError(`${type} name exceeds maximum length of 64 characters`, type);
+    }
+    if (!IDENTIFIER_PATTERN.test(name)) {
+        throw new ValidationError(`Invalid ${type} name: must start with letter/underscore and contain only alphanumeric characters`, type);
+    }
+}
+/**
+ * Validate a qualified identifier (e.g., schema.table)
+ *
+ * @param name - The qualified identifier to validate
+ * @param type - Type of identifier for error messages
+ * @throws ValidationError if identifier is invalid
+ */
+export function validateQualifiedIdentifier(name, type = 'table') {
+    if (!name || typeof name !== 'string') {
+        throw new ValidationError(`${type} name must be a non-empty string`, type);
+    }
+    if (!QUALIFIED_IDENTIFIER_PATTERN.test(name)) {
+        throw new ValidationError(`Invalid ${type} name: must be alphanumeric with optional schema prefix (schema.name)`, type);
+    }
+}
+/**
+ * Escape a SQL identifier for safe inclusion in queries
+ *
+ * @param name - The identifier to escape
+ * @returns Escaped identifier (backticks escaped)
+ */
+export function escapeIdentifier(name) {
+    // Replace backticks with double backticks (MySQL escaping)
+    return name.replace(/`/g, '``');
+}
+/**
+ * Validate a WHERE clause for dangerous SQL injection patterns
+ *
+ * This performs pattern-based detection of common SQL injection attempts.
+ * It allows legitimate complex WHERE clauses while blocking known attack patterns.
+ *
+ * @param where - The WHERE clause to validate (without the WHERE keyword)
+ * @throws ValidationError if dangerous patterns are detected
+ */
+export function validateWhereClause(where) {
+    if (where === undefined || where === null || typeof where !== 'string') {
+        return; // Empty/null WHERE is valid (will be skipped)
+    }
+    const trimmed = where.trim();
+    if (trimmed.length === 0) {
+        return;
+    }
+    for (const pattern of DANGEROUS_WHERE_PATTERNS) {
+        if (pattern.test(trimmed)) {
+            throw new ValidationError('WHERE clause contains potentially dangerous SQL patterns', 'where');
+        }
+    }
+    // Check for unbalanced quotes (sign of injection attempt)
+    // Note: escaped quotes ('') count as 2, so we check odd counts
+    // after removing escaped quotes
+    const unescapedSingles = trimmed.replace(/''/g, '').match(/'/g);
+    const unescapedDoubles = trimmed.replace(/""/g, '').match(/"/g);
+    if ((unescapedSingles?.length ?? 0) % 2 !== 0) {
+        throw new ValidationError('WHERE clause contains unbalanced single quotes', 'where');
+    }
+    if ((unescapedDoubles?.length ?? 0) % 2 !== 0) {
+        throw new ValidationError('WHERE clause contains unbalanced double quotes', 'where');
+    }
+}
+/**
+ * Validate a LIKE pattern for safe usage
+ * Already used in monitoring.ts, but centralized here for consistency
+ *
+ * @param pattern - The LIKE pattern to escape
+ * @returns Escaped pattern safe for SQL
+ */
+export function escapeLikePattern(pattern) {
+    // Escape single quotes for selected text
+    return pattern.replace(/'/g, "''");
+}
+/**
+ * Escape a potentially qualified table name
+ * Handles "table" -> "`table`" and "db.table" -> "`db`.`table`"
+ */
+export function escapeQualifiedTable(table) {
+    return table.split('.').map(part => `\`${part.replace(/`/g, '``')}\``).join('.');
+}
+//# sourceMappingURL=validators.js.map

package/dist/utils/validators.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validators.js","sourceRoot":"","sources":["../../src/utils/validators.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH;;GAEG;AACH,MAAM,OAAO,eAAgB,SAAQ,KAAK;IACO;IAA7C,YAAY,OAAe,EAAkB,KAAa;QACtD,KAAK,CAAC,OAAO,CAAC,CAAC;QAD0B,UAAK,GAAL,KAAK,CAAQ;QAEtD,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;IAClC,CAAC;CACJ;AAED;;;;;GAKG;AACH,MAAM,kBAAkB,GAAG,+BAA+B,CAAC;AAE3D;;GAEG;AACH,MAAM,4BAA4B,GAAG,+DAA+D,CAAC;AAErG;;GAEG;AACH,MAAM,wBAAwB,GAAG;IAC7B,sDAAsD;IACtD,8EAA8E;IAC9E,8CAA8C;IAC9C,SAAS;IACT,kBAAkB;IAClB,qDAAqD;IACrD,8BAA8B;IAC9B,sBAAsB;IACtB,yBAAyB;IACzB,sBAAsB;IACtB,gCAAgC;IAChC,mBAAmB;IACnB,iDAAiD;IACjD,qCAAqC;IACrC,mCAAmC;IACnC,mBAAmB;IACnB,eAAe;CAClB,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CAC9B,IAAY,EACZ,OAA2G,OAAO;IAElH,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QACpC,MAAM,IAAI,eAAe,CAAC,GAAG,IAAI,kCAAkC,EAAE,IAAI,CAAC,CAAC;IAC/E,CAAC;IAED,IAAI,IAAI,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;QACnB,MAAM,IAAI,eAAe,CAAC,GAAG,IAAI,+CAA+C,EAAE,IAAI,CAAC,CAAC;IAC5F,CAAC;IAED,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,eAAe,CACrB,WAAW,IAAI,mFAAmF,EAClG,IAAI,CACP,CAAC;IACN,CAAC;AACL,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,2BAA2B,CACvC,IAAY,EACZ,OAAoC,OAAO;IAE3C,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QACpC,MAAM,IAAI,eAAe,CAAC,GAAG,IAAI,kCAAkC,EAAE,IAAI,CAAC,CAAC;IAC/E,CAAC;IAED,IAAI,CAAC,4BAA4B,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3C,MAAM,IAAI,eAAe,CACrB,WAAW,IAAI,uEAAuE,EACtF,IAAI,CACP,CAAC;IACN,CAAC;AACL,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAY;IACzC,2DAA2D;IAC3D,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;AACpC,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,mBAAmB,CAAC,KAAyB;IACzD,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACrE,OAAO,CAAC,8CAA8C;IAC1D,CAAC;IAED,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO;IACX,CAAC;IAED,KAAK,MAAM,OAAO,IAAI,wBAAwB,EAAE,CAAC;QAC7C,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YACxB,MAAM,IAAI,eAAe,CACrB,0DAA0D,EAC1D,OAAO,CACV,CAAC;QACN,CAAC;IACL,CAAC;IAED,0DAA0D;IAC1D,+DAA+D;IAC/D,gCAAgC;IAChC,MAAM,gBAAgB,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAChE,MAAM,gBAAgB,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAEhE,IAAI,CAAC,gBAAgB,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5C,MAAM,IAAI,eAAe,CACrB,gDAAgD,EAChD,OAAO,CACV,CAAC;IACN,CAAC;IAED,IAAI,CAAC,gBAAgB,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5C,MAAM,IAAI,eAAe,CACrB,gDAAgD,EAChD,OAAO,CACV,CAAC;IACN,CAAC;AACL,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,iBAAiB,CAAC,OAAe;IAC7C,yCAAyC;IACzC,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;AACvC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAAC,KAAa;IAC9C,OAAO,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACrF,CAAC"}

package/eslint.config.js

@@ -0,0 +1,86 @@
+import js from '@eslint/js'
+import globals from 'globals'
+import tseslint from 'typescript-eslint'
+
+export default tseslint.config(
+    { ignores: ['dist', 'node_modules', '.wrangler', '**/__tests__/**', '**/*.test.ts', '**/*.spec.ts'] },
+    // Main source configuration
+    {
+        extends: [
+            js.configs.recommended,
+            ...tseslint.configs.strictTypeChecked,
+            ...tseslint.configs.stylisticTypeChecked,
+        ],
+        files: ['src/**/*.ts'],
+        languageOptions: {
+            ecmaVersion: 2022,
+            globals: {
+                ...globals.node,
+            },
+            parserOptions: {
+                projectService: true,
+                tsconfigRootDir: import.meta.dirname,
+            },
+        },
+        rules: {
+            // Strict rules - type safety
+            '@typescript-eslint/no-explicit-any': 'error',
+            '@typescript-eslint/explicit-function-return-type': ['error', {
+                allowExpressions: true,
+                allowTypedFunctionExpressions: true,
+                allowHigherOrderFunctions: true,
+                allowDirectConstAssertionInArrowFunctions: true,
+                allowConciseArrowFunctionExpressionsStartingWithVoid: true,
+            }],
+            '@typescript-eslint/no-unused-vars': ['error', { argsIgnorePattern: '^_' }],
+            '@typescript-eslint/no-non-null-assertion': 'error',
+            '@typescript-eslint/strict-boolean-expressions': ['error', {
+                allowNullableBoolean: true,
+                allowNullableString: true,
+                allowNullableNumber: false,
+                allowNullableObject: true,
+            }],
+            '@typescript-eslint/no-floating-promises': 'error',
+            '@typescript-eslint/no-misused-promises': ['error', {
+                checksVoidReturn: {
+                    attributes: false,
+                    properties: false,
+                },
+            }],
+            '@typescript-eslint/await-thenable': 'error',
+            '@typescript-eslint/require-await': 'error',
+            '@typescript-eslint/no-unnecessary-condition': 'off',
+            '@typescript-eslint/prefer-nullish-coalescing': ['error', {
+                ignorePrimitives: { string: true, number: true },
+            }],
+            '@typescript-eslint/prefer-optional-chain': 'error',
+            // Unsafe any rules
+            '@typescript-eslint/no-unsafe-assignment': 'error',
+            '@typescript-eslint/no-unsafe-member-access': 'error',
+            '@typescript-eslint/no-unsafe-call': 'error',
+            '@typescript-eslint/no-unsafe-return': 'error',
+            '@typescript-eslint/no-unsafe-argument': 'error',
+            '@typescript-eslint/restrict-template-expressions': ['error', {
+                allowNumber: true,
+                allowBoolean: true,
+            }],
+            '@typescript-eslint/restrict-plus-operands': ['error', {
+                allowNumberAndString: true,
+                allowAny: true,
+            }],
+            '@typescript-eslint/no-confusing-void-expression': ['error', {
+                ignoreArrowShorthand: true,
+                ignoreVoidOperator: true,
+            }],
+            '@typescript-eslint/consistent-type-imports': ['error', {
+                prefer: 'type-imports',
+                fixStyle: 'inline-type-imports',
+            }],
+            '@typescript-eslint/consistent-type-exports': 'error',
+            '@typescript-eslint/no-misused-spread': 'off',
+            // Prevent console.log() which writes to stdout and corrupts MCP stdio transport
+            // Only stderr output (error, warn) is safe for MCP servers
+            'no-console': ['error', { allow: ['error', 'warn'] }],
+        },
+    },
+)

package/package.json

@@ -0,0 +1,66 @@
+{
+    "name": "@neverinfamous/mysql-mcp",
+    "version": "2.1.0",
+    "description": "Enterprise-grade MySQL MCP Server with OAuth 2.0 authentication, connection pooling & tool filtering",
+    "type": "module",
+    "main": "dist/index.js",
+    "types": "dist/index.d.ts",
+    "bin": {
+        "mysql-mcp": "dist/cli.js"
+    },
+    "scripts": {
+        "build": "tsc",
+        "dev": "tsc --watch",
+        "lint": "eslint src/",
+        "lint:fix": "eslint src/ --fix",
+        "typecheck": "tsc --noEmit",
+        "test": "vitest run",
+        "test:watch": "vitest",
+        "test:coverage": "vitest run --coverage",
+        "check": "npm run lint && npm run typecheck"
+    },
+    "keywords": [
+        "mcp",
+        "mysql",
+        "database",
+        "model-context-protocol",
+        "ai",
+        "llm",
+        "claude",
+        "cursor",
+        "oauth",
+        "typescript"
+    ],
+    "author": "Adamic.tech",
+    "license": "MIT",
+    "repository": {
+        "type": "git",
+        "url": "git+https://github.com/neverinfamous/mysql-mcp.git"
+    },
+    "bugs": {
+        "url": "https://github.com/neverinfamous/mysql-mcp/issues"
+    },
+    "homepage": "https://github.com/neverinfamous/mysql-mcp#readme",
+    "engines": {
+        "node": ">=18.0.0"
+    },
+    "dependencies": {
+        "@modelcontextprotocol/sdk": "^1.25.1",
+        "commander": "^14.0.2",
+        "cors": "^2.8.5",
+        "jose": "^6.1.3",
+        "mysql2": "^3.16.0",
+        "zod": "^4.2.1"
+    },
+    "devDependencies": {
+        "@eslint/js": "^9.39.2",
+        "@types/cors": "^2.8.19",
+        "@types/node": "^25.0.3",
+        "@vitest/coverage-v8": "^4.0.16",
+        "eslint": "^9.39.2",
+        "globals": "^16.5.0",
+        "typescript": "^5.9.3",
+        "typescript-eslint": "^8.50.1",
+        "vitest": "^4.0.16"
+    }
+}

package/releases/release-notes.md

@@ -0,0 +1,134 @@
+# mysql-mcp v1.0.0 Release Notes
+
+**Release Date:** December 13, 2025  
+**Status:** Production/Stable
+
+Enterprise-grade MySQL MCP Server with OAuth 2.0 authentication, connection pooling, and granular tool filtering. Written in TypeScript.
+
+---
+
+## 🎉 Highlights
+
+- **106 MySQL Tools** across 15 categories
+- **4 AI-Powered Prompts** for guided MySQL workflows
+- **Docker Support** with multi-architecture images (amd64/arm64)
+- **OAuth 2.0 Authentication** for enterprise deployments
+- **Tool Filtering** to stay within AI IDE limits
+
+---
+
+## ✨ Features
+
+### Tool Categories (106 tools)
+
+| Category | Tools | Description |
+|----------|-------|-------------|
+| Core Database | 8 | CRUD, schema, tables, indexes |
+| Transactions | 7 | BEGIN, COMMIT, ROLLBACK, savepoints |
+| JSON Operations | 12 | JSON_EXTRACT, JSON_SET, JSON_CONTAINS |
+| Text Processing | 6 | REGEXP, LIKE, SOUNDEX, SUBSTRING |
+| FULLTEXT Search | 4 | Natural language and boolean search |
+| Performance | 8 | EXPLAIN, query analysis, buffer pool |
+| Optimization | 4 | Index hints, query rewrite suggestions |
+| Admin | 6 | OPTIMIZE, ANALYZE, CHECK, REPAIR |
+| Monitoring | 7 | PROCESSLIST, status variables, health |
+| Backup | 4 | Export, import, mysqldump |
+| Replication | 5 | Master/slave status, binlog, GTID |
+| Partitioning | 4 | Partition management |
+| MySQL Router | 9 | Router REST API management |
+| ProxySQL | 12 | Proxy monitoring and configuration |
+| MySQL Shell | 10 | Shell utilities, dump/load, upgrades |
+
+### AI-Powered Prompts
+
+| Prompt | Description |
+|--------|-------------|
+| `mysql_query_builder` | Construct SQL queries with security best practices |
+| `mysql_schema_design` | Design table schemas with indexes and relationships |
+| `mysql_performance_analysis` | Analyze slow queries with optimization recommendations |
+| `mysql_migration` | Generate migration scripts with rollback options |
+
+### Enterprise Features
+
+- **OAuth 2.0** - RFC 9728/8414 compliant authentication
+- **Tool Filtering** - Granular control over exposed operations
+- **Connection Pooling** - Configurable mysql2 pool
+- **Multiple Transports** - stdio, HTTP, SSE
+
+---
+
+## 🐳 Docker Deployment
+
+```bash
+docker pull writenotenow/mysql-mcp:v1.0.0
+```
+
+```bash
+docker run -i --rm writenotenow/mysql-mcp:v1.0.0 \
+  --transport stdio \
+  --mysql mysql://user:password@host:3306/database
+```
+
+**Architectures:** linux/amd64, linux/arm64
+
+---
+
+## 🔧 MCP Client Configuration
+
+### Cursor IDE / Claude Desktop
+
+```json
+{
+  "mcpServers": {
+    "mysql-mcp": {
+      "command": "docker",
+      "args": [
+        "run", "-i", "--rm",
+        "writenotenow/mysql-mcp:v1.0.0",
+        "--transport", "stdio",
+        "--mysql", "mysql://user:password@host:3306/database"
+      ]
+    }
+  }
+}
+```
+
+---
+
+## 🎛️ Tool Filtering
+
+Reduce tool count for clients with limits:
+
+```json
+{
+  "args": [
+    "--tool-filter", "-performance,-optimization,-backup,-replication,-partitioning,-router,-proxysql,-shell"
+  ]
+}
+```
+
+**Presets:**
+- Minimal (~30 tools): Core + JSON + Text
+- DBA (~37 tools): Admin + Monitoring + Performance
+- Development (~42 tools): Core + JSON + Text + Transactions
+
+---
+
+## 📚 Documentation
+
+- **[GitHub Repository](https://github.com/neverinfamous/mysql-mcp)**
+- **[Wiki](https://github.com/neverinfamous/mysql-mcp/wiki)**
+- **[Docker Hub](https://hub.docker.com/r/writenotenow/mysql-mcp)**
+
+---
+
+## 🛡️ Security
+
+- SQL injection prevention via parameterized queries
+- OAuth 2.0 scope-based access control
+- Environment variable configuration for sensitive data
+- Non-root Docker container execution
+
+---
+
+**Full Changelog:** https://github.com/neverinfamous/mysql-mcp/blob/master/CHANGELOG.md