@neverinfamous/postgres-mcp 1.0.1

package/dist/transports/http.js

@@ -0,0 +1,303 @@
+/**
+ * postgres-mcp - HTTP Transport
+ *
+ * HTTP/SSE transport with OAuth 2.0 support.
+ */
+import { createServer, } from "node:http";
+import { StreamableHTTPServerTransport } from "@modelcontextprotocol/sdk/server/streamableHttp.js";
+import { validateAuth, formatOAuthError } from "../auth/middleware.js";
+import { logger } from "../utils/logger.js";
+/**
+ * HTTP Transport for MCP
+ */
+export class HttpTransport {
+    server = null;
+    config;
+    transport = null;
+    onConnect;
+    // Rate limiting state
+    rateLimitMap = new Map();
+    // Default configuration values
+    static DEFAULT_RATE_LIMIT_WINDOW_MS = 60000; // 1 minute
+    static DEFAULT_RATE_LIMIT_MAX_REQUESTS = 100;
+    static DEFAULT_MAX_BODY_SIZE = 1048576; // 1MB
+    static DEFAULT_HSTS_MAX_AGE = 31536000; // 1 year
+    constructor(config, onConnect) {
+        this.config = {
+            ...config,
+            host: config.host ?? "localhost",
+            publicPaths: config.publicPaths ?? ["/health", "/.well-known/*"],
+            enableRateLimit: config.enableRateLimit ?? true,
+            rateLimitWindowMs: config.rateLimitWindowMs ?? HttpTransport.DEFAULT_RATE_LIMIT_WINDOW_MS,
+            rateLimitMaxRequests: config.rateLimitMaxRequests ??
+                HttpTransport.DEFAULT_RATE_LIMIT_MAX_REQUESTS,
+            maxBodySize: config.maxBodySize ?? HttpTransport.DEFAULT_MAX_BODY_SIZE,
+            enableHSTS: config.enableHSTS ?? false,
+            hstsMaxAge: config.hstsMaxAge ?? HttpTransport.DEFAULT_HSTS_MAX_AGE,
+        };
+        if (onConnect) {
+            this.onConnect = onConnect;
+        }
+    }
+    /**
+     * Start the HTTP server
+     */
+    async start() {
+        return new Promise((resolve, reject) => {
+            this.server = createServer((req, res) => {
+                this.handleRequest(req, res).catch((error) => {
+                    logger.error("HTTP request handler error", { error: String(error) });
+                    if (!res.headersSent) {
+                        res.writeHead(500);
+                        res.end(JSON.stringify({ error: "Internal server error" }));
+                    }
+                });
+            });
+            this.server.on("error", reject);
+            this.server.listen(this.config.port, this.config.host, () => {
+                logger.info(`HTTP transport listening on ${this.config.host ?? "localhost"}:${String(this.config.port)}`);
+                resolve();
+            });
+        });
+    }
+    /**
+     * Stop the HTTP server
+     */
+    async stop() {
+        return new Promise((resolve) => {
+            if (this.server) {
+                this.server.close(() => {
+                    logger.info("HTTP transport stopped");
+                    resolve();
+                });
+            }
+            else {
+                resolve();
+            }
+        });
+    }
+    /**
+     * Check if a path is public (bypasses authentication)
+     */
+    isPublicPath(pathname) {
+        const publicPaths = this.config.publicPaths ?? [];
+        for (const pattern of publicPaths) {
+            if (pattern.endsWith("/*")) {
+                // Wildcard pattern
+                const prefix = pattern.slice(0, -2);
+                if (pathname.startsWith(prefix)) {
+                    return true;
+                }
+            }
+            else if (pattern === pathname) {
+                return true;
+            }
+        }
+        return false;
+    }
+    /**
+     * Check rate limit for a request
+     * @returns true if request should be allowed, false if rate limited
+     */
+    checkRateLimit(req) {
+        if (!this.config.enableRateLimit) {
+            return true;
+        }
+        const clientIp = req.socket.remoteAddress ?? "unknown";
+        const now = Date.now();
+        const windowMs = this.config.rateLimitWindowMs ??
+            HttpTransport.DEFAULT_RATE_LIMIT_WINDOW_MS;
+        const maxRequests = this.config.rateLimitMaxRequests ??
+            HttpTransport.DEFAULT_RATE_LIMIT_MAX_REQUESTS;
+        const entry = this.rateLimitMap.get(clientIp);
+        // Clean up expired entries periodically (every 100 checks)
+        if (this.rateLimitMap.size > 100 && Math.random() < 0.01) {
+            for (const [ip, e] of this.rateLimitMap) {
+                if (now > e.resetTime) {
+                    this.rateLimitMap.delete(ip);
+                }
+            }
+        }
+        if (!entry || now > entry.resetTime) {
+            // Start new window
+            this.rateLimitMap.set(clientIp, { count: 1, resetTime: now + windowMs });
+            return true;
+        }
+        if (entry.count >= maxRequests) {
+            return false;
+        }
+        entry.count++;
+        return true;
+    }
+    /**
+     * Handle incoming HTTP request
+     */
+    async handleRequest(req, res) {
+        // Set security headers for all responses
+        this.setSecurityHeaders(res);
+        // Set CORS headers
+        this.setCorsHeaders(req, res);
+        // Handle preflight
+        if (req.method === "OPTIONS") {
+            res.writeHead(204);
+            res.end();
+            return;
+        }
+        // Check rate limit
+        if (!this.checkRateLimit(req)) {
+            res.writeHead(429, { "Content-Type": "application/json" });
+            res.end(JSON.stringify({
+                error: "rate_limit_exceeded",
+                error_description: "Too many requests. Please try again later.",
+            }));
+            return;
+        }
+        const url = new URL(req.url ?? "/", `http://${req.headers.host ?? "localhost"}`);
+        // Handle well-known endpoints
+        if (url.pathname === "/.well-known/oauth-protected-resource") {
+            this.handleProtectedResourceMetadata(res);
+            return;
+        }
+        // Health check
+        if (url.pathname === "/health") {
+            this.handleHealthCheck(res);
+            return;
+        }
+        // Authenticate if OAuth is configured and path is not public
+        if (this.config.resourceServer && this.config.tokenValidator) {
+            if (!this.isPublicPath(url.pathname)) {
+                try {
+                    await validateAuth(req.headers.authorization, {
+                        tokenValidator: this.config.tokenValidator,
+                        required: true,
+                    });
+                }
+                catch (error) {
+                    const { status, body } = formatOAuthError(error);
+                    res.writeHead(status, {
+                        "Content-Type": "application/json",
+                        "WWW-Authenticate": "Bearer",
+                    });
+                    res.end(JSON.stringify(body));
+                    return;
+                }
+            }
+        }
+        // Handle MCP requests
+        if (url.pathname === "/sse") {
+            await this.handleSSERequest(req, res);
+            return;
+        }
+        if (url.pathname === "/messages") {
+            await this.handleMessageRequest(req, res);
+            return;
+        }
+        res.writeHead(404);
+        res.end(JSON.stringify({ error: "Not found" }));
+    }
+    /**
+     * Handle SSE connection request
+     */
+    async handleSSERequest(req, res) {
+        // Create new transport for this connection
+        // Note: Do NOT call transport.start() here - the MCP SDK's Server.connect()
+        // calls start() internally, and calling it twice throws "Transport already started"
+        const transport = new StreamableHTTPServerTransport();
+        this.transport = transport;
+        if (this.onConnect) {
+            this.onConnect(transport);
+        }
+        // Handle the request (keeps connection open for SSE)
+        await transport.handleRequest(req, res);
+    }
+    /**
+     * Handle MCP message request
+     */
+    async handleMessageRequest(req, res) {
+        if (!this.transport) {
+            res.writeHead(400);
+            res.end(JSON.stringify({ error: "No active connection" }));
+            return;
+        }
+        await this.transport.handleRequest(req, res);
+    }
+    /**
+     * Handle protected resource metadata endpoint
+     */
+    handleProtectedResourceMetadata(res) {
+        if (!this.config.resourceServer) {
+            res.writeHead(404);
+            res.end(JSON.stringify({ error: "OAuth not configured" }));
+            return;
+        }
+        const metadata = this.config.resourceServer.getMetadata();
+        res.writeHead(200, { "Content-Type": "application/json" });
+        res.end(JSON.stringify(metadata));
+    }
+    /**
+     * Handle health check endpoint
+     */
+    handleHealthCheck(res) {
+        res.writeHead(200, { "Content-Type": "application/json" });
+        res.end(JSON.stringify({
+            status: "healthy",
+            timestamp: new Date().toISOString(),
+        }));
+    }
+    /**
+     * Set security headers for all responses
+     */
+    setSecurityHeaders(res) {
+        // Prevent MIME type sniffing
+        res.setHeader("X-Content-Type-Options", "nosniff");
+        // Prevent clickjacking
+        res.setHeader("X-Frame-Options", "DENY");
+        // Enable XSS filtering
+        res.setHeader("X-XSS-Protection", "1; mode=block");
+        // Prevent caching of API responses
+        res.setHeader("Cache-Control", "no-store, no-cache, must-revalidate");
+        // Content Security Policy - API server has no content to load
+        res.setHeader("Content-Security-Policy", "default-src 'none'; frame-ancestors 'none'");
+        // HTTP Strict Transport Security (for HTTPS deployments)
+        if (this.config.enableHSTS) {
+            const maxAge = this.config.hstsMaxAge ?? HttpTransport.DEFAULT_HSTS_MAX_AGE;
+            res.setHeader("Strict-Transport-Security", `max-age=${String(maxAge)}; includeSubDomains`);
+        }
+    }
+    /**
+     * Set CORS headers for browser-based MCP client support
+     *
+     * This implements the MCP SDK 1.25.1 recommendation of using external middleware
+     * for origin validation rather than the deprecated built-in options.
+     */
+    setCorsHeaders(req, res) {
+        const origin = req.headers.origin;
+        // Only allow configured origins
+        if (origin && this.config.corsOrigins?.includes(origin)) {
+            res.setHeader("Access-Control-Allow-Origin", origin);
+            res.setHeader("Access-Control-Allow-Methods", "GET, POST, DELETE, OPTIONS");
+            res.setHeader("Access-Control-Allow-Headers", "Content-Type, Authorization, Mcp-Session-Id, Mcp-Protocol-Version, Last-Event-ID");
+            res.setHeader("Access-Control-Expose-Headers", "Mcp-Session-Id");
+            res.setHeader("Access-Control-Max-Age", "86400");
+            // Vary header is important for correct caching behavior
+            res.setHeader("Vary", "Origin");
+            // Allow credentials if explicitly configured (needed for browser cookies/auth)
+            if (this.config.corsAllowCredentials) {
+                res.setHeader("Access-Control-Allow-Credentials", "true");
+            }
+        }
+    }
+    /**
+     * Get the underlying transport
+     */
+    getTransport() {
+        return this.transport;
+    }
+}
+/**
+ * Create an HTTP transport instance
+ */
+export function createHttpTransport(config, onConnect) {
+    return new HttpTransport(config, onConnect);
+}
+//# sourceMappingURL=http.js.map

package/dist/transports/http.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.js","sourceRoot":"","sources":["../../src/transports/http.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EACL,YAAY,GAGb,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,6BAA6B,EAAE,MAAM,oDAAoD,CAAC;AAGnG,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AACvE,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAyE5C;;GAEG;AACH,MAAM,OAAO,aAAa;IAChB,MAAM,GAA2C,IAAI,CAAC;IAC7C,MAAM,CAAsB;IACrC,SAAS,GAAyC,IAAI,CAAC;IAC9C,SAAS,CAEhB;IAEV,sBAAsB;IACL,YAAY,GAAG,IAAI,GAAG,EAA0B,CAAC;IAElE,+BAA+B;IACvB,MAAM,CAAU,4BAA4B,GAAG,KAAK,CAAC,CAAC,WAAW;IACjE,MAAM,CAAU,+BAA+B,GAAG,GAAG,CAAC;IACtD,MAAM,CAAU,qBAAqB,GAAG,OAAO,CAAC,CAAC,MAAM;IACvD,MAAM,CAAU,oBAAoB,GAAG,QAAQ,CAAC,CAAC,SAAS;IAElE,YACE,MAA2B,EAC3B,SAA8D;QAE9D,IAAI,CAAC,MAAM,GAAG;YACZ,GAAG,MAAM;YACT,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,WAAW;YAChC,WAAW,EAAE,MAAM,CAAC,WAAW,IAAI,CAAC,SAAS,EAAE,gBAAgB,CAAC;YAChE,eAAe,EAAE,MAAM,CAAC,eAAe,IAAI,IAAI;YAC/C,iBAAiB,EACf,MAAM,CAAC,iBAAiB,IAAI,aAAa,CAAC,4BAA4B;YACxE,oBAAoB,EAClB,MAAM,CAAC,oBAAoB;gBAC3B,aAAa,CAAC,+BAA+B;YAC/C,WAAW,EAAE,MAAM,CAAC,WAAW,IAAI,aAAa,CAAC,qBAAqB;YACtE,UAAU,EAAE,MAAM,CAAC,UAAU,IAAI,KAAK;YACtC,UAAU,EAAE,MAAM,CAAC,UAAU,IAAI,aAAa,CAAC,oBAAoB;SACpE,CAAC;QACF,IAAI,SAAS,EAAE,CAAC;YACd,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC7B,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,KAAK;QACT,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,IAAI,CAAC,MAAM,GAAG,YAAY,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;gBACtC,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;oBACpD,MAAM,CAAC,KAAK,CAAC,4BAA4B,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;oBACrE,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;wBACrB,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;wBACnB,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,CAAC,CAAC;oBAC9D,CAAC;gBACH,CAAC,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;YAEH,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAEhC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE;gBAC1D,MAAM,CAAC,IAAI,CACT,+BAA+B,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,WAAW,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAC7F,CAAC;gBACF,OAAO,EAAE,CAAC;YACZ,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,IAAI;QACR,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;YAC7B,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;gBAChB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE;oBACrB,MAAM,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;oBACtC,OAAO,EAAE,CAAC;gBACZ,CAAC,CAAC,CAAC;YACL,CAAC;iBAAM,CAAC;gBACN,OAAO,EAAE,CAAC;YACZ,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACK,YAAY,CAAC,QAAgB;QACnC,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,IAAI,EAAE,CAAC;QAClD,KAAK,MAAM,OAAO,IAAI,WAAW,EAAE,CAAC;YAClC,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC3B,mBAAmB;gBACnB,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;gBACpC,IAAI,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;oBAChC,OAAO,IAAI,CAAC;gBACd,CAAC;YACH,CAAC;iBAAM,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;gBAChC,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;;OAGG;IACK,cAAc,CAAC,GAAoB;QACzC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,eAAe,EAAE,CAAC;YACjC,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,QAAQ,GAAG,GAAG,CAAC,MAAM,CAAC,aAAa,IAAI,SAAS,CAAC;QACvD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,QAAQ,GACZ,IAAI,CAAC,MAAM,CAAC,iBAAiB;YAC7B,aAAa,CAAC,4BAA4B,CAAC;QAC7C,MAAM,WAAW,GACf,IAAI,CAAC,MAAM,CAAC,oBAAoB;YAChC,aAAa,CAAC,+BAA+B,CAAC;QAEhD,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAE9C,2DAA2D;QAC3D,IAAI,IAAI,CAAC,YAAY,CAAC,IAAI,GAAG,GAAG,IAAI,IAAI,CAAC,MAAM,EAAE,GAAG,IAAI,EAAE,CAAC;YACzD,KAAK,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;gBACxC,IAAI,GAAG,GAAG,CAAC,CAAC,SAAS,EAAE,CAAC;oBACtB,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBAC/B,CAAC;YACH,CAAC;QACH,CAAC;QAED,IAAI,CAAC,KAAK,IAAI,GAAG,GAAG,KAAK,CAAC,SAAS,EAAE,CAAC;YACpC,mBAAmB;YACnB,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,SAAS,EAAE,GAAG,GAAG,QAAQ,EAAE,CAAC,CAAC;YACzE,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,KAAK,CAAC,KAAK,IAAI,WAAW,EAAE,CAAC;YAC/B,OAAO,KAAK,CAAC;QACf,CAAC;QAED,KAAK,CAAC,KAAK,EAAE,CAAC;QACd,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,aAAa,CACzB,GAAoB,EACpB,GAAmB;QAEnB,yCAAyC;QACzC,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC;QAE7B,mBAAmB;QACnB,IAAI,CAAC,cAAc,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAE9B,mBAAmB;QACnB,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC7B,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YACnB,GAAG,CAAC,GAAG,EAAE,CAAC;YACV,OAAO;QACT,CAAC;QAED,mBAAmB;QACnB,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC;YAC9B,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;YAC3D,GAAG,CAAC,GAAG,CACL,IAAI,CAAC,SAAS,CAAC;gBACb,KAAK,EAAE,qBAAqB;gBAC5B,iBAAiB,EAAE,4CAA4C;aAChE,CAAC,CACH,CAAC;YACF,OAAO;QACT,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,GAAG,CACjB,GAAG,CAAC,GAAG,IAAI,GAAG,EACd,UAAU,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,WAAW,EAAE,CAC5C,CAAC;QAEF,8BAA8B;QAC9B,IAAI,GAAG,CAAC,QAAQ,KAAK,uCAAuC,EAAE,CAAC;YAC7D,IAAI,CAAC,+BAA+B,CAAC,GAAG,CAAC,CAAC;YAC1C,OAAO;QACT,CAAC;QAED,eAAe;QACf,IAAI,GAAG,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC/B,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC;YAC5B,OAAO;QACT,CAAC;QAED,6DAA6D;QAC7D,IAAI,IAAI,CAAC,MAAM,CAAC,cAAc,IAAI,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;YAC7D,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACrC,IAAI,CAAC;oBACH,MAAM,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,aAAa,EAAE;wBAC5C,cAAc,EAAE,IAAI,CAAC,MAAM,CAAC,cAAc;wBAC1C,QAAQ,EAAE,IAAI;qBACf,CAAC,CAAC;gBACL,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;oBACjD,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE;wBACpB,cAAc,EAAE,kBAAkB;wBAClC,kBAAkB,EAAE,QAAQ;qBAC7B,CAAC,CAAC;oBACH,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;oBAC9B,OAAO;gBACT,CAAC;YACH,CAAC;QACH,CAAC;QAED,sBAAsB;QACtB,IAAI,GAAG,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;YAC5B,MAAM,IAAI,CAAC,gBAAgB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YACtC,OAAO;QACT,CAAC;QAED,IAAI,GAAG,CAAC,QAAQ,KAAK,WAAW,EAAE,CAAC;YACjC,MAAM,IAAI,CAAC,oBAAoB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YAC1C,OAAO;QACT,CAAC;QAED,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QACnB,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC;IAClD,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,gBAAgB,CAC5B,GAAoB,EACpB,GAAmB;QAEnB,2CAA2C;QAC3C,4EAA4E;QAC5E,oFAAoF;QACpF,MAAM,SAAS,GAAG,IAAI,6BAA6B,EAAE,CAAC;QACtD,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAE3B,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACnB,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QAC5B,CAAC;QAED,qDAAqD;QACrD,MAAM,SAAS,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAC1C,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,oBAAoB,CAChC,GAAoB,EACpB,GAAmB;QAEnB,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YACpB,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YACnB,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAC,CAAC,CAAC;YAC3D,OAAO;QACT,CAAC;QAED,MAAM,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAC/C,CAAC;IAED;;OAEG;IACK,+BAA+B,CAAC,GAAmB;QACzD,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;YAChC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YACnB,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAC,CAAC,CAAC;YAC3D,OAAO;QACT,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,WAAW,EAAE,CAAC;QAC1D,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;QAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC;IACpC,CAAC;IAED;;OAEG;IACK,iBAAiB,CAAC,GAAmB;QAC3C,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;QAC3D,GAAG,CAAC,GAAG,CACL,IAAI,CAAC,SAAS,CAAC;YACb,MAAM,EAAE,SAAS;YACjB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACpC,CAAC,CACH,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,kBAAkB,CAAC,GAAmB;QAC5C,6BAA6B;QAC7B,GAAG,CAAC,SAAS,CAAC,wBAAwB,EAAE,SAAS,CAAC,CAAC;QACnD,uBAAuB;QACvB,GAAG,CAAC,SAAS,CAAC,iBAAiB,EAAE,MAAM,CAAC,CAAC;QACzC,uBAAuB;QACvB,GAAG,CAAC,SAAS,CAAC,kBAAkB,EAAE,eAAe,CAAC,CAAC;QACnD,mCAAmC;QACnC,GAAG,CAAC,SAAS,CAAC,eAAe,EAAE,qCAAqC,CAAC,CAAC;QACtE,8DAA8D;QAC9D,GAAG,CAAC,SAAS,CACX,yBAAyB,EACzB,4CAA4C,CAC7C,CAAC;QAEF,yDAAyD;QACzD,IAAI,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;YAC3B,MAAM,MAAM,GACV,IAAI,CAAC,MAAM,CAAC,UAAU,IAAI,aAAa,CAAC,oBAAoB,CAAC;YAC/D,GAAG,CAAC,SAAS,CACX,2BAA2B,EAC3B,WAAW,MAAM,CAAC,MAAM,CAAC,qBAAqB,CAC/C,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACK,cAAc,CAAC,GAAoB,EAAE,GAAmB;QAC9D,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC;QAElC,gCAAgC;QAChC,IAAI,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YACxD,GAAG,CAAC,SAAS,CAAC,6BAA6B,EAAE,MAAM,CAAC,CAAC;YACrD,GAAG,CAAC,SAAS,CACX,8BAA8B,EAC9B,4BAA4B,CAC7B,CAAC;YACF,GAAG,CAAC,SAAS,CACX,8BAA8B,EAC9B,kFAAkF,CACnF,CAAC;YACF,GAAG,CAAC,SAAS,CAAC,+BAA+B,EAAE,gBAAgB,CAAC,CAAC;YACjE,GAAG,CAAC,SAAS,CAAC,wBAAwB,EAAE,OAAO,CAAC,CAAC;YAEjD,wDAAwD;YACxD,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;YAEhC,+EAA+E;YAC/E,IAAI,IAAI,CAAC,MAAM,CAAC,oBAAoB,EAAE,CAAC;gBACrC,GAAG,CAAC,SAAS,CAAC,kCAAkC,EAAE,MAAM,CAAC,CAAC;YAC5D,CAAC;QACH,CAAC;IACH,CAAC;IAED;;OAEG;IACH,YAAY;QACV,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;;AAGH;;GAEG;AACH,MAAM,UAAU,mBAAmB,CACjC,MAA2B,EAC3B,SAA8D;IAE9D,OAAO,IAAI,aAAa,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;AAC9C,CAAC"}

package/dist/transports/index.d.ts

@@ -0,0 +1,8 @@
+/**
+ * postgres-mcp - Transports
+ *
+ * Transport layer for MCP communication.
+ */
+export { HttpTransport, createHttpTransport } from "./http.js";
+export type { HttpTransportConfig } from "./http.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/transports/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/transports/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,aAAa,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAC/D,YAAY,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC"}

package/dist/transports/index.js

@@ -0,0 +1,7 @@
+/**
+ * postgres-mcp - Transports
+ *
+ * Transport layer for MCP communication.
+ */
+export { HttpTransport, createHttpTransport } from "./http.js";
+//# sourceMappingURL=index.js.map

package/dist/transports/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/transports/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,aAAa,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC"}

package/dist/types/adapters.d.ts

@@ -0,0 +1,136 @@
+/**
+ * postgres-mcp - Adapter Types
+ *
+ * Database adapter capabilities and tool/resource/prompt definitions.
+ */
+import type { OAuthScope, RequestContext } from "./oauth.js";
+import type { ToolGroup } from "./filtering.js";
+/**
+ * Capabilities supported by a database adapter
+ */
+export interface AdapterCapabilities {
+    /** Supports JSON/JSONB operations */
+    json: boolean;
+    /** Supports full-text search */
+    fullTextSearch: boolean;
+    /** Supports vector/embedding operations (pgvector) */
+    vector: boolean;
+    /** Supports geospatial operations (PostGIS) */
+    geospatial: boolean;
+    /** Supports transactions */
+    transactions: boolean;
+    /** Supports prepared statements */
+    preparedStatements: boolean;
+    /** Supports connection pooling */
+    connectionPooling: boolean;
+    /** Supports partitioning */
+    partitioning: boolean;
+    /** Supports logical replication */
+    replication: boolean;
+    /** Supports CTE (WITH queries) */
+    cte: boolean;
+    /** Supports window functions */
+    windowFunctions: boolean;
+    /** Additional capability flags */
+    [key: string]: boolean;
+}
+/**
+ * MCP Tool Annotations (SDK 1.25+)
+ * Provides metadata hints about tool behavior to help clients
+ * present and manage tools appropriately.
+ */
+export interface ToolAnnotations {
+    /** Human-readable title for display */
+    title?: string;
+    /** Tool does not modify its environment (default: false) */
+    readOnlyHint?: boolean;
+    /** Tool may perform destructive updates (default: true) */
+    destructiveHint?: boolean;
+    /** Repeated calls with same args have no additional effect */
+    idempotentHint?: boolean;
+    /** Tool may interact with external systems (default: false) */
+    openWorldHint?: boolean;
+}
+/**
+ * MCP Tool Icon (SDK 1.25+)
+ * Visual representation of a tool for display in client UIs.
+ */
+export interface ToolIcon {
+    /** URI for the icon (data:, http:, https:, file://) */
+    src: string;
+    /** MIME type (image/svg+xml, image/png, image/jpeg) */
+    mimeType?: string;
+    /** Size hints (e.g., ["48x48"] or ["any"] for SVG) */
+    sizes?: string[];
+}
+/**
+ * Tool definition for registration
+ */
+export interface ToolDefinition {
+    /** Unique tool name */
+    name: string;
+    /** Human-readable description */
+    description: string;
+    /** Tool group for filtering */
+    group: ToolGroup;
+    /** Searchable tags for tool discovery (used by lazy hydration) */
+    tags?: string[];
+    /** Zod schema for input validation */
+    inputSchema: unknown;
+    /** Required OAuth scopes */
+    requiredScopes?: OAuthScope[];
+    /** MCP Tool Annotations for behavior hints */
+    annotations?: ToolAnnotations;
+    /** MCP Tool Icons for visual representation */
+    icons?: ToolIcon[];
+    /** Tool handler function */
+    handler: (params: unknown, context: RequestContext) => Promise<unknown>;
+}
+/**
+ * Resource definition for MCP
+ */
+export interface ResourceDefinition {
+    /** Resource URI template */
+    uri: string;
+    /** Human-readable name */
+    name: string;
+    /** Description */
+    description: string;
+    /** MIME type */
+    mimeType?: string;
+    /** MCP Resource Annotations for behavior hints */
+    annotations?: ResourceAnnotations;
+    /** Resource handler */
+    handler: (uri: string, context: RequestContext) => Promise<unknown>;
+}
+/**
+ * MCP Resource Annotations (SDK 1.25+)
+ * Provides metadata hints about resource content to help clients
+ * manage and display resources appropriately.
+ */
+export interface ResourceAnnotations {
+    /** Intended audience for the resource content */
+    audience?: ("user" | "assistant")[];
+    /** Priority hint for display ordering (0-1 range) */
+    priority?: number;
+    /** ISO 8601 timestamp of last modification for cache invalidation */
+    lastModified?: string;
+}
+/**
+ * Prompt definition for MCP
+ */
+export interface PromptDefinition {
+    /** Prompt name */
+    name: string;
+    /** Description */
+    description: string;
+    /** Argument definitions */
+    arguments?: {
+        name: string;
+        description: string;
+        required?: boolean;
+    }[];
+    /** Prompt handler */
+    handler: (args: Record<string, string>, context: RequestContext) => Promise<unknown>;
+}
+//# sourceMappingURL=adapters.d.ts.map

package/dist/types/adapters.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapters.d.ts","sourceRoot":"","sources":["../../src/types/adapters.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAC7D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAEhD;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,qCAAqC;IACrC,IAAI,EAAE,OAAO,CAAC;IAEd,gCAAgC;IAChC,cAAc,EAAE,OAAO,CAAC;IAExB,sDAAsD;IACtD,MAAM,EAAE,OAAO,CAAC;IAEhB,+CAA+C;IAC/C,UAAU,EAAE,OAAO,CAAC;IAEpB,4BAA4B;IAC5B,YAAY,EAAE,OAAO,CAAC;IAEtB,mCAAmC;IACnC,kBAAkB,EAAE,OAAO,CAAC;IAE5B,kCAAkC;IAClC,iBAAiB,EAAE,OAAO,CAAC;IAE3B,4BAA4B;IAC5B,YAAY,EAAE,OAAO,CAAC;IAEtB,mCAAmC;IACnC,WAAW,EAAE,OAAO,CAAC;IAErB,kCAAkC;IAClC,GAAG,EAAE,OAAO,CAAC;IAEb,gCAAgC;IAChC,eAAe,EAAE,OAAO,CAAC;IAEzB,kCAAkC;IAClC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED;;;;GAIG;AACH,MAAM,WAAW,eAAe;IAC9B,uCAAuC;IACvC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,4DAA4D;IAC5D,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,2DAA2D;IAC3D,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,8DAA8D;IAC9D,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,+DAA+D;IAC/D,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB;AAED;;;GAGG;AACH,MAAM,WAAW,QAAQ;IACvB,uDAAuD;IACvD,GAAG,EAAE,MAAM,CAAC;IACZ,uDAAuD;IACvD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,sDAAsD;IACtD,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,uBAAuB;IACvB,IAAI,EAAE,MAAM,CAAC;IAEb,iCAAiC;IACjC,WAAW,EAAE,MAAM,CAAC;IAEpB,+BAA+B;IAC/B,KAAK,EAAE,SAAS,CAAC;IAEjB,kEAAkE;IAClE,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAEhB,sCAAsC;IACtC,WAAW,EAAE,OAAO,CAAC;IAErB,4BAA4B;IAC5B,cAAc,CAAC,EAAE,UAAU,EAAE,CAAC;IAE9B,8CAA8C;IAC9C,WAAW,CAAC,EAAE,eAAe,CAAC;IAE9B,+CAA+C;IAC/C,KAAK,CAAC,EAAE,QAAQ,EAAE,CAAC;IAEnB,4BAA4B;IAC5B,OAAO,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,cAAc,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;CACzE;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,4BAA4B;IAC5B,GAAG,EAAE,MAAM,CAAC;IAEZ,0BAA0B;IAC1B,IAAI,EAAE,MAAM,CAAC;IAEb,kBAAkB;IAClB,WAAW,EAAE,MAAM,CAAC;IAEpB,gBAAgB;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB,kDAAkD;IAClD,WAAW,CAAC,EAAE,mBAAmB,CAAC;IAElC,uBAAuB;IACvB,OAAO,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,cAAc,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;CACrE;AAED;;;;GAIG;AACH,MAAM,WAAW,mBAAmB;IAClC,iDAAiD;IACjD,QAAQ,CAAC,EAAE,CAAC,MAAM,GAAG,WAAW,CAAC,EAAE,CAAC;IACpC,qDAAqD;IACrD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,qEAAqE;IACrE,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,kBAAkB;IAClB,IAAI,EAAE,MAAM,CAAC;IAEb,kBAAkB;IAClB,WAAW,EAAE,MAAM,CAAC;IAEpB,2BAA2B;IAC3B,SAAS,CAAC,EAAE;QACV,IAAI,EAAE,MAAM,CAAC;QACb,WAAW,EAAE,MAAM,CAAC;QACpB,QAAQ,CAAC,EAAE,OAAO,CAAC;KACpB,EAAE,CAAC;IAEJ,qBAAqB;IACrB,OAAO,EAAE,CACP,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC5B,OAAO,EAAE,cAAc,KACpB,OAAO,CAAC,OAAO,CAAC,CAAC;CACvB"}

package/dist/types/adapters.js

@@ -0,0 +1,7 @@
+/**
+ * postgres-mcp - Adapter Types
+ *
+ * Database adapter capabilities and tool/resource/prompt definitions.
+ */
+export {};
+//# sourceMappingURL=adapters.js.map

package/dist/types/adapters.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapters.js","sourceRoot":"","sources":["../../src/types/adapters.ts"],"names":[],"mappings":"AAAA;;;;GAIG"}