@neverinfamous/postgres-mcp 1.0.1

package/dist/auth/scopes.js

@@ -0,0 +1,189 @@
+/**
+ * postgres-mcp - OAuth Scopes
+ *
+ * Scope definitions and utilities for PostgreSQL MCP OAuth 2.0.
+ */
+// =============================================================================
+// Scope Definitions
+// =============================================================================
+/**
+ * Standard OAuth scopes for postgres-mcp
+ */
+export const SCOPES = {
+    /** Read-only access to all databases */
+    READ: "read",
+    /** Read and write access to all databases */
+    WRITE: "write",
+    /** Administrative access (VACUUM, ANALYZE, etc.) */
+    ADMIN: "admin",
+    /** Full access to all operations */
+    FULL: "full",
+};
+/**
+ * All supported scopes including patterns
+ */
+export const ALL_SCOPES = [
+    SCOPES.READ,
+    SCOPES.WRITE,
+    SCOPES.ADMIN,
+    SCOPES.FULL,
+    // Pattern scopes: db:{name}, schema:{name}, table:{schema}:{table}
+];
+// =============================================================================
+// Tool Group to Scope Mapping
+// =============================================================================
+/**
+ * Map PostgreSQL tool groups to required minimum scopes
+ */
+export const TOOL_GROUP_SCOPES = {
+    // Core database operations
+    core: SCOPES.READ,
+    transactions: SCOPES.WRITE,
+    jsonb: SCOPES.READ,
+    text: SCOPES.READ,
+    stats: SCOPES.READ,
+    // Performance and monitoring
+    performance: SCOPES.READ,
+    monitoring: SCOPES.READ,
+    // Administrative operations
+    admin: SCOPES.ADMIN,
+    backup: SCOPES.ADMIN,
+    schema: SCOPES.READ,
+    partitioning: SCOPES.ADMIN,
+    // Extensions
+    vector: SCOPES.READ,
+    postgis: SCOPES.READ,
+    cron: SCOPES.ADMIN,
+    partman: SCOPES.ADMIN,
+    kcache: SCOPES.READ,
+    citext: SCOPES.READ,
+    ltree: SCOPES.READ,
+    pgcrypto: SCOPES.READ,
+    // Code Mode (requires admin - can execute arbitrary operations)
+    codemode: SCOPES.ADMIN,
+};
+// =============================================================================
+// Scope Utilities
+// =============================================================================
+/**
+ * Parse scope string into array
+ */
+export function parseScopes(scopeString) {
+    if (!scopeString)
+        return [];
+    return scopeString.split(" ").filter((s) => s.length > 0);
+}
+/**
+ * Check if granted scopes include the required scope
+ */
+export function hasScope(grantedScopes, requiredScope) {
+    // Full scope grants everything
+    if (grantedScopes.includes(SCOPES.FULL)) {
+        return true;
+    }
+    // Direct match
+    if (grantedScopes.includes(requiredScope)) {
+        return true;
+    }
+    // Admin scope includes write and read
+    if (requiredScope === SCOPES.READ || requiredScope === SCOPES.WRITE) {
+        if (grantedScopes.includes(SCOPES.ADMIN)) {
+            return true;
+        }
+    }
+    // Write scope includes read
+    if (requiredScope === SCOPES.READ) {
+        if (grantedScopes.includes(SCOPES.WRITE)) {
+            return true;
+        }
+    }
+    return false;
+}
+/**
+ * Check if granted scopes include any of the required scopes
+ */
+export function hasAnyScope(grantedScopes, requiredScopes) {
+    return requiredScopes.some((scope) => hasScope(grantedScopes, scope));
+}
+/**
+ * Check if granted scopes include all of the required scopes
+ */
+export function hasAllScopes(grantedScopes, requiredScopes) {
+    return requiredScopes.every((scope) => hasScope(grantedScopes, scope));
+}
+/**
+ * Get the required scope for a tool group
+ */
+export function getScopeForToolGroup(group) {
+    return TOOL_GROUP_SCOPES[group] ?? SCOPES.READ;
+}
+/**
+ * Check if database-specific scope matches
+ */
+export function hasDatabaseScope(grantedScopes, database) {
+    // Full or admin grants all databases
+    if (grantedScopes.includes(SCOPES.FULL) ||
+        grantedScopes.includes(SCOPES.ADMIN)) {
+        return true;
+    }
+    // Check for db:{name} pattern
+    const dbScope = `db:${database}`;
+    return grantedScopes.includes(dbScope);
+}
+/**
+ * Check if schema-specific scope matches
+ */
+export function hasSchemaScope(grantedScopes, schema) {
+    // Full or admin grants all schemas
+    if (grantedScopes.includes(SCOPES.FULL) ||
+        grantedScopes.includes(SCOPES.ADMIN)) {
+        return true;
+    }
+    // Check for schema:{name} pattern
+    const schemaScope = `schema:${schema}`;
+    return grantedScopes.includes(schemaScope);
+}
+/**
+ * Check if table-specific scope matches
+ */
+export function hasTableScope(grantedScopes, schema, table) {
+    // Full or admin grants all tables
+    if (grantedScopes.includes(SCOPES.FULL) ||
+        grantedScopes.includes(SCOPES.ADMIN)) {
+        return true;
+    }
+    // Check for schema:{name} scope (grants access to all tables in schema)
+    if (hasSchemaScope(grantedScopes, schema)) {
+        return true;
+    }
+    // Check for table:{schema}:{table} pattern
+    const tableScope = `table:${schema}:${table}`;
+    return grantedScopes.includes(tableScope);
+}
+/**
+ * Get scope display name
+ */
+export function getScopeDisplayName(scope) {
+    switch (scope) {
+        case SCOPES.READ:
+            return "Read Only";
+        case SCOPES.WRITE:
+            return "Read/Write";
+        case SCOPES.ADMIN:
+            return "Administrative";
+        case SCOPES.FULL:
+            return "Full Access";
+        default:
+            if (scope.startsWith("db:")) {
+                return `Database: ${scope.slice(3)}`;
+            }
+            if (scope.startsWith("schema:")) {
+                return `Schema: ${scope.slice(7)}`;
+            }
+            if (scope.startsWith("table:")) {
+                return `Table: ${scope.slice(6)}`;
+            }
+            return scope;
+    }
+}
+//# sourceMappingURL=scopes.js.map

package/dist/auth/scopes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scopes.js","sourceRoot":"","sources":["../../src/auth/scopes.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,gFAAgF;AAChF,oBAAoB;AACpB,gFAAgF;AAEhF;;GAEG;AACH,MAAM,CAAC,MAAM,MAAM,GAAG;IACpB,wCAAwC;IACxC,IAAI,EAAE,MAAM;IAEZ,6CAA6C;IAC7C,KAAK,EAAE,OAAO;IAEd,oDAAoD;IACpD,KAAK,EAAE,OAAO;IAEd,oCAAoC;IACpC,IAAI,EAAE,MAAM;CACJ,CAAC;AAIX;;GAEG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG;IACxB,MAAM,CAAC,IAAI;IACX,MAAM,CAAC,KAAK;IACZ,MAAM,CAAC,KAAK;IACZ,MAAM,CAAC,IAAI;IACX,mEAAmE;CAC3D,CAAC;AAEX,gFAAgF;AAChF,8BAA8B;AAC9B,gFAAgF;AAEhF;;GAEG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAqC;IACjE,2BAA2B;IAC3B,IAAI,EAAE,MAAM,CAAC,IAAI;IACjB,YAAY,EAAE,MAAM,CAAC,KAAK;IAC1B,KAAK,EAAE,MAAM,CAAC,IAAI;IAClB,IAAI,EAAE,MAAM,CAAC,IAAI;IACjB,KAAK,EAAE,MAAM,CAAC,IAAI;IAElB,6BAA6B;IAC7B,WAAW,EAAE,MAAM,CAAC,IAAI;IACxB,UAAU,EAAE,MAAM,CAAC,IAAI;IAEvB,4BAA4B;IAC5B,KAAK,EAAE,MAAM,CAAC,KAAK;IACnB,MAAM,EAAE,MAAM,CAAC,KAAK;IACpB,MAAM,EAAE,MAAM,CAAC,IAAI;IACnB,YAAY,EAAE,MAAM,CAAC,KAAK;IAE1B,aAAa;IACb,MAAM,EAAE,MAAM,CAAC,IAAI;IACnB,OAAO,EAAE,MAAM,CAAC,IAAI;IACpB,IAAI,EAAE,MAAM,CAAC,KAAK;IAClB,OAAO,EAAE,MAAM,CAAC,KAAK;IACrB,MAAM,EAAE,MAAM,CAAC,IAAI;IACnB,MAAM,EAAE,MAAM,CAAC,IAAI;IACnB,KAAK,EAAE,MAAM,CAAC,IAAI;IAClB,QAAQ,EAAE,MAAM,CAAC,IAAI;IAErB,gEAAgE;IAChE,QAAQ,EAAE,MAAM,CAAC,KAAK;CACvB,CAAC;AAEF,gFAAgF;AAChF,kBAAkB;AAClB,gFAAgF;AAEhF;;GAEG;AACH,MAAM,UAAU,WAAW,CAAC,WAA+B;IACzD,IAAI,CAAC,WAAW;QAAE,OAAO,EAAE,CAAC;IAC5B,OAAO,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AAC5D,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,QAAQ,CACtB,aAAuB,EACvB,aAAqB;IAErB,+BAA+B;IAC/B,IAAI,aAAa,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;QACxC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,eAAe;IACf,IAAI,aAAa,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC;QAC1C,OAAO,IAAI,CAAC;IACd,CAAC;IAED,sCAAsC;IACtC,IAAI,aAAa,KAAK,MAAM,CAAC,IAAI,IAAI,aAAa,KAAK,MAAM,CAAC,KAAK,EAAE,CAAC;QACpE,IAAI,aAAa,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;YACzC,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,4BAA4B;IAC5B,IAAI,aAAa,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC;QAClC,IAAI,aAAa,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;YACzC,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,WAAW,CACzB,aAAuB,EACvB,cAAwB;IAExB,OAAO,cAAc,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,QAAQ,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC,CAAC;AACxE,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,YAAY,CAC1B,aAAuB,EACvB,cAAwB;IAExB,OAAO,cAAc,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,QAAQ,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC,CAAC;AACzE,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,oBAAoB,CAAC,KAAgB;IACnD,OAAO,iBAAiB,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC;AACjD,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAC9B,aAAuB,EACvB,QAAgB;IAEhB,qCAAqC;IACrC,IACE,aAAa,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC;QACnC,aAAa,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,EACpC,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,8BAA8B;IAC9B,MAAM,OAAO,GAAG,MAAM,QAAQ,EAAE,CAAC;IACjC,OAAO,aAAa,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;AACzC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,cAAc,CAC5B,aAAuB,EACvB,MAAc;IAEd,mCAAmC;IACnC,IACE,aAAa,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC;QACnC,aAAa,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,EACpC,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,kCAAkC;IAClC,MAAM,WAAW,GAAG,UAAU,MAAM,EAAE,CAAC;IACvC,OAAO,aAAa,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AAC7C,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,aAAa,CAC3B,aAAuB,EACvB,MAAc,EACd,KAAa;IAEb,kCAAkC;IAClC,IACE,aAAa,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC;QACnC,aAAa,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,EACpC,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,wEAAwE;IACxE,IAAI,cAAc,CAAC,aAAa,EAAE,MAAM,CAAC,EAAE,CAAC;QAC1C,OAAO,IAAI,CAAC;IACd,CAAC;IAED,2CAA2C;IAC3C,MAAM,UAAU,GAAG,SAAS,MAAM,IAAI,KAAK,EAAE,CAAC;IAC9C,OAAO,aAAa,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;AAC5C,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,mBAAmB,CAAC,KAAa;IAC/C,QAAQ,KAAK,EAAE,CAAC;QACd,KAAK,MAAM,CAAC,IAAI;YACd,OAAO,WAAW,CAAC;QACrB,KAAK,MAAM,CAAC,KAAK;YACf,OAAO,YAAY,CAAC;QACtB,KAAK,MAAM,CAAC,KAAK;YACf,OAAO,gBAAgB,CAAC;QAC1B,KAAK,MAAM,CAAC,IAAI;YACd,OAAO,aAAa,CAAC;QACvB;YACE,IAAI,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC5B,OAAO,aAAa,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;YACvC,CAAC;YACD,IAAI,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;gBAChC,OAAO,WAAW,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;YACrC,CAAC;YACD,IAAI,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC/B,OAAO,UAAU,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;YACpC,CAAC;YACD,OAAO,KAAK,CAAC;IACjB,CAAC;AACH,CAAC"}

package/dist/auth/types.d.ts

@@ -0,0 +1,208 @@
+/**
+ * postgres-mcp - OAuth Types
+ *
+ * Type definitions for OAuth 2.0 components including
+ * RFC 9728, RFC 8414, and RFC 7591 compliance.
+ */
+/**
+ * OAuth 2.0 Protected Resource Metadata (RFC 9728)
+ */
+export interface ProtectedResourceMetadata {
+    /** Resource identifier (canonical URI) */
+    resource: string;
+    /** Authorization servers that can issue tokens for this resource */
+    authorization_servers?: string[];
+    /** JWKS URI for token verification */
+    jwks_uri?: string;
+    /** Scopes supported by this resource */
+    scopes_supported?: string[];
+    /** Bearer token presentation methods supported */
+    bearer_methods_supported?: ("header" | "body" | "query")[];
+    /** Resource signing algorithms supported */
+    resource_signing_alg_values_supported?: string[];
+    /** Resource documentation URL */
+    resource_documentation?: string;
+    /** Resource policy URI */
+    resource_policy_uri?: string;
+    /** Resource terms of service URI */
+    resource_tos_uri?: string;
+}
+/**
+ * OAuth 2.0 Authorization Server Metadata (RFC 8414)
+ */
+export interface AuthorizationServerMetadata {
+    /** Authorization server issuer identifier */
+    issuer: string;
+    /** Authorization endpoint URL */
+    authorization_endpoint?: string;
+    /** Token endpoint URL */
+    token_endpoint: string;
+    /** JWKS URI */
+    jwks_uri?: string;
+    /** Registration endpoint (RFC 7591) */
+    registration_endpoint?: string;
+    /** Scopes supported */
+    scopes_supported?: string[];
+    /** Response types supported */
+    response_types_supported?: string[];
+    /** Grant types supported */
+    grant_types_supported?: string[];
+    /** Token endpoint auth methods supported */
+    token_endpoint_auth_methods_supported?: string[];
+    /** Code challenge methods supported (PKCE) */
+    code_challenge_methods_supported?: string[];
+}
+/**
+ * OAuth 2.0 Dynamic Client Registration Request (RFC 7591)
+ */
+export interface ClientRegistrationRequest {
+    /** Redirect URIs */
+    redirect_uris?: string[];
+    /** Token endpoint auth method */
+    token_endpoint_auth_method?: string;
+    /** Grant types requested */
+    grant_types?: string[];
+    /** Response types requested */
+    response_types?: string[];
+    /** Client name */
+    client_name?: string;
+    /** Client URI */
+    client_uri?: string;
+    /** Scopes requested */
+    scope?: string;
+    /** JWKS URI for client authentication */
+    jwks_uri?: string;
+    /** JWKS document for client authentication */
+    jwks?: JWKSDocument;
+}
+/**
+ * OAuth 2.0 Dynamic Client Registration Response (RFC 7591)
+ */
+export interface ClientRegistrationResponse {
+    /** Client identifier */
+    client_id: string;
+    /** Client secret (for confidential clients) */
+    client_secret?: string;
+    /** Client secret expiration timestamp */
+    client_secret_expires_at?: number;
+    /** Registration access token */
+    registration_access_token?: string;
+    /** Registration client URI */
+    registration_client_uri?: string;
+    /** Client ID issued at timestamp */
+    client_id_issued_at?: number;
+    /** All other fields from the request */
+    [key: string]: unknown;
+}
+/**
+ * JSON Web Key (JWK)
+ */
+export interface JWK {
+    /** Key type (e.g., 'RSA', 'EC') */
+    kty: string;
+    /** Key use ('sig' for signature, 'enc' for encryption) */
+    use?: string;
+    /** Key operations */
+    key_ops?: string[];
+    /** Algorithm */
+    alg?: string;
+    /** Key ID */
+    kid?: string;
+    /** RSA modulus */
+    n?: string;
+    /** RSA public exponent */
+    e?: string;
+    /** EC curve */
+    crv?: string;
+    /** EC x coordinate */
+    x?: string;
+    /** EC y coordinate */
+    y?: string;
+}
+/**
+ * JSON Web Key Set (JWKS)
+ */
+export interface JWKSDocument {
+    /** Array of JWK keys */
+    keys: JWK[];
+}
+/**
+ * Result of token validation
+ */
+export interface TokenValidationResult {
+    /** Whether the token is valid */
+    valid: boolean;
+    /** Validated claims (if valid) */
+    claims?: TokenClaims;
+    /** Error message (if invalid) */
+    error?: string;
+    /** Error code (if invalid) */
+    errorCode?: string;
+}
+/**
+ * Validated token claims
+ */
+export interface TokenClaims {
+    /** Subject (user ID) */
+    sub: string;
+    /** Granted scopes (parsed from space-delimited string) */
+    scopes: string[];
+    /** Token expiration time (Unix timestamp) */
+    exp: number;
+    /** Token issued at time (Unix timestamp) */
+    iat: number;
+    /** Token issuer */
+    iss?: string | undefined;
+    /** Token audience */
+    aud?: string | string[] | undefined;
+    /** Not before time (Unix timestamp) */
+    nbf?: number | undefined;
+    /** JWT ID */
+    jti?: string | undefined;
+    /** Client ID */
+    client_id?: string | undefined;
+    /** Additional claims */
+    [key: string]: unknown;
+}
+/**
+ * Resource server configuration
+ */
+export interface ResourceServerConfig {
+    /** Resource identifier (canonical server URI) */
+    resource: string;
+    /** Authorization servers that can issue tokens */
+    authorizationServers: string[];
+    /** Scopes supported by this resource */
+    scopesSupported: string[];
+    /** Bearer token methods accepted (default: ['header']) */
+    bearerMethodsSupported?: ("header" | "body" | "query")[];
+}
+/**
+ * Token validator configuration
+ */
+export interface TokenValidatorConfig {
+    /** JWKS URI for key discovery */
+    jwksUri: string;
+    /** Expected issuer */
+    issuer: string;
+    /** Expected audience */
+    audience: string;
+    /** Clock tolerance in seconds (default: 60) */
+    clockTolerance?: number | undefined;
+    /** JWKS cache TTL in seconds (default: 3600) */
+    jwksCacheTtl?: number | undefined;
+    /** Supported algorithms (default: ['RS256', 'RS384', 'RS512', 'ES256', 'ES384', 'ES512']) */
+    algorithms?: string[] | undefined;
+}
+/**
+ * Authorization server discovery configuration
+ */
+export interface AuthServerDiscoveryConfig {
+    /** Authorization server URL (issuer) */
+    authServerUrl: string;
+    /** Cache TTL in seconds (default: 3600) */
+    cacheTtl?: number | undefined;
+    /** Request timeout in milliseconds (default: 5000) */
+    timeout?: number | undefined;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/auth/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/auth/types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAMH;;GAEG;AACH,MAAM,WAAW,yBAAyB;IACxC,0CAA0C;IAC1C,QAAQ,EAAE,MAAM,CAAC;IAEjB,oEAAoE;IACpE,qBAAqB,CAAC,EAAE,MAAM,EAAE,CAAC;IAEjC,sCAAsC;IACtC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB,wCAAwC;IACxC,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAE5B,kDAAkD;IAClD,wBAAwB,CAAC,EAAE,CAAC,QAAQ,GAAG,MAAM,GAAG,OAAO,CAAC,EAAE,CAAC;IAE3D,4CAA4C;IAC5C,qCAAqC,CAAC,EAAE,MAAM,EAAE,CAAC;IAEjD,iCAAiC;IACjC,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAEhC,0BAA0B;IAC1B,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAE7B,oCAAoC;IACpC,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAMD;;GAEG;AACH,MAAM,WAAW,2BAA2B;IAC1C,6CAA6C;IAC7C,MAAM,EAAE,MAAM,CAAC;IAEf,iCAAiC;IACjC,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAEhC,yBAAyB;IACzB,cAAc,EAAE,MAAM,CAAC;IAEvB,eAAe;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB,uCAAuC;IACvC,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAE/B,uBAAuB;IACvB,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAE5B,+BAA+B;IAC/B,wBAAwB,CAAC,EAAE,MAAM,EAAE,CAAC;IAEpC,4BAA4B;IAC5B,qBAAqB,CAAC,EAAE,MAAM,EAAE,CAAC;IAEjC,4CAA4C;IAC5C,qCAAqC,CAAC,EAAE,MAAM,EAAE,CAAC;IAEjD,8CAA8C;IAC9C,gCAAgC,CAAC,EAAE,MAAM,EAAE,CAAC;CAC7C;AAMD;;GAEG;AACH,MAAM,WAAW,yBAAyB;IACxC,oBAAoB;IACpB,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IAEzB,iCAAiC;IACjC,0BAA0B,CAAC,EAAE,MAAM,CAAC;IAEpC,4BAA4B;IAC5B,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IAEvB,+BAA+B;IAC/B,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAE1B,kBAAkB;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB,iBAAiB;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpB,uBAAuB;IACvB,KAAK,CAAC,EAAE,MAAM,CAAC;IAEf,yCAAyC;IACzC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB,8CAA8C;IAC9C,IAAI,CAAC,EAAE,YAAY,CAAC;CACrB;AAED;;GAEG;AACH,MAAM,WAAW,0BAA0B;IACzC,wBAAwB;IACxB,SAAS,EAAE,MAAM,CAAC;IAElB,+CAA+C;IAC/C,aAAa,CAAC,EAAE,MAAM,CAAC;IAEvB,yCAAyC;IACzC,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAElC,gCAAgC;IAChC,yBAAyB,CAAC,EAAE,MAAM,CAAC;IAEnC,8BAA8B;IAC9B,uBAAuB,CAAC,EAAE,MAAM,CAAC;IAEjC,oCAAoC;IACpC,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAE7B,wCAAwC;IACxC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAMD;;GAEG;AACH,MAAM,WAAW,GAAG;IAClB,mCAAmC;IACnC,GAAG,EAAE,MAAM,CAAC;IAEZ,0DAA0D;IAC1D,GAAG,CAAC,EAAE,MAAM,CAAC;IAEb,qBAAqB;IACrB,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IAEnB,gBAAgB;IAChB,GAAG,CAAC,EAAE,MAAM,CAAC;IAEb,aAAa;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IAGb,kBAAkB;IAClB,CAAC,CAAC,EAAE,MAAM,CAAC;IACX,0BAA0B;IAC1B,CAAC,CAAC,EAAE,MAAM,CAAC;IAGX,eAAe;IACf,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,sBAAsB;IACtB,CAAC,CAAC,EAAE,MAAM,CAAC;IACX,sBAAsB;IACtB,CAAC,CAAC,EAAE,MAAM,CAAC;CACZ;AAED;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,wBAAwB;IACxB,IAAI,EAAE,GAAG,EAAE,CAAC;CACb;AAMD;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC,iCAAiC;IACjC,KAAK,EAAE,OAAO,CAAC;IAEf,kCAAkC;IAClC,MAAM,CAAC,EAAE,WAAW,CAAC;IAErB,iCAAiC;IACjC,KAAK,CAAC,EAAE,MAAM,CAAC;IAEf,8BAA8B;IAC9B,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,wBAAwB;IACxB,GAAG,EAAE,MAAM,CAAC;IAEZ,0DAA0D;IAC1D,MAAM,EAAE,MAAM,EAAE,CAAC;IAEjB,6CAA6C;IAC7C,GAAG,EAAE,MAAM,CAAC;IAEZ,4CAA4C;IAC5C,GAAG,EAAE,MAAM,CAAC;IAEZ,mBAAmB;IACnB,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAEzB,qBAAqB;IACrB,GAAG,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CAAC;IAEpC,uCAAuC;IACvC,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAEzB,aAAa;IACb,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAEzB,gBAAgB;IAChB,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAE/B,wBAAwB;IACxB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAMD;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC,iDAAiD;IACjD,QAAQ,EAAE,MAAM,CAAC;IAEjB,kDAAkD;IAClD,oBAAoB,EAAE,MAAM,EAAE,CAAC;IAE/B,wCAAwC;IACxC,eAAe,EAAE,MAAM,EAAE,CAAC;IAE1B,0DAA0D;IAC1D,sBAAsB,CAAC,EAAE,CAAC,QAAQ,GAAG,MAAM,GAAG,OAAO,CAAC,EAAE,CAAC;CAC1D;AAED;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC,iCAAiC;IACjC,OAAO,EAAE,MAAM,CAAC;IAEhB,sBAAsB;IACtB,MAAM,EAAE,MAAM,CAAC;IAEf,wBAAwB;IACxB,QAAQ,EAAE,MAAM,CAAC;IAEjB,+CAA+C;IAC/C,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAEpC,gDAAgD;IAChD,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAElC,6FAA6F;IAC7F,UAAU,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC;CACnC;AAED;;GAEG;AACH,MAAM,WAAW,yBAAyB;IACxC,wCAAwC;IACxC,aAAa,EAAE,MAAM,CAAC;IAEtB,2CAA2C;IAC3C,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAE9B,sDAAsD;IACtD,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC9B"}

package/dist/auth/types.js

@@ -0,0 +1,8 @@
+/**
+ * postgres-mcp - OAuth Types
+ *
+ * Type definitions for OAuth 2.0 components including
+ * RFC 9728, RFC 8414, and RFC 7591 compliance.
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/auth/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/auth/types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG"}

package/dist/cli/args.d.ts

@@ -0,0 +1,34 @@
+/**
+ * postgres-mcp - CLI Arguments Parser
+ *
+ * Command-line argument parsing for the PostgreSQL MCP server.
+ */
+import type { TransportType, DatabaseConfig, OAuthConfig } from "../types/index.js";
+/**
+ * Parsed CLI configuration
+ */
+export interface ParsedArgs {
+    /** Server transport type */
+    transport: TransportType;
+    /** HTTP port (for http/sse transports) */
+    port?: number;
+    /** Database configuration */
+    database?: DatabaseConfig;
+    /** OAuth configuration */
+    oauth?: OAuthConfig;
+    /** Tool filter string */
+    toolFilter?: string;
+    /** Log level */
+    logLevel?: "debug" | "info" | "notice" | "warning" | "error" | "critical" | "alert" | "emergency";
+    /** Whether to exit after printing help/version */
+    shouldExit: boolean;
+}
+/**
+ * Parse command line arguments
+ */
+export declare function parseArgs(argv?: string[]): ParsedArgs;
+/**
+ * Print help message
+ */
+export declare function printHelp(): void;
+//# sourceMappingURL=args.d.ts.map

package/dist/cli/args.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"args.d.ts","sourceRoot":"","sources":["../../src/cli/args.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EACV,aAAa,EACb,cAAc,EACd,WAAW,EACZ,MAAM,mBAAmB,CAAC;AAE3B;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,4BAA4B;IAC5B,SAAS,EAAE,aAAa,CAAC;IAEzB,0CAA0C;IAC1C,IAAI,CAAC,EAAE,MAAM,CAAC;IAEd,6BAA6B;IAC7B,QAAQ,CAAC,EAAE,cAAc,CAAC;IAE1B,0BAA0B;IAC1B,KAAK,CAAC,EAAE,WAAW,CAAC;IAEpB,yBAAyB;IACzB,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpB,gBAAgB;IAChB,QAAQ,CAAC,EACL,OAAO,GACP,MAAM,GACN,QAAQ,GACR,SAAS,GACT,OAAO,GACP,UAAU,GACV,OAAO,GACP,WAAW,CAAC;IAEhB,kDAAkD;IAClD,UAAU,EAAE,OAAO,CAAC;CACrB;AAID;;GAEG;AACH,wBAAgB,SAAS,CAAC,IAAI,GAAE,MAAM,EAA0B,GAAG,UAAU,CA8Q5E;AAoCD;;GAEG;AACH,wBAAgB,SAAS,IAAI,IAAI,CAgDhC"}