@pilat/mcp-datalink 1.0.3 → 1.2.0

package/dist/adapters/sqlite/url-parser.d.ts

@@ -0,0 +1,34 @@
+/**
+ * SQLite URL and Path Parsing Utilities
+ *
+ * Handles parsing of SQLite connection URLs and path validation/resolution.
+ */
+/**
+ * Parse SQLite URL to extract file path
+ *
+ * Supported formats:
+ * - sqlite:///absolute/path.db
+ * - sqlite://./relative/path.db
+ * - sqlite://:memory:
+ * - /absolute/path.db (plain file path)
+ * - ./relative/path.db (plain file path)
+ *
+ * @param url - SQLite connection URL or file path
+ * @returns Resolved absolute file path or :memory:
+ */
+export declare function parseSqliteUrl(url: string): string;
+/**
+ * Validate and resolve SQLite database path
+ *
+ * SECURITY: Prevents path traversal attacks by:
+ * 1. Resolving to absolute path
+ * 2. Ensuring path doesn't contain suspicious patterns
+ * 3. Checking file exists (unless :memory:)
+ *
+ * @param rawPath - Raw path from config
+ * @param basePath - Base directory for relative paths (process.cwd())
+ * @returns Validated absolute path
+ * @throws DbMcpError if path is invalid or file not found
+ */
+export declare function validateAndResolvePath(rawPath: string, basePath: string): string;
+//# sourceMappingURL=url-parser.d.ts.map

package/dist/adapters/sqlite/url-parser.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"url-parser.d.ts","sourceRoot":"","sources":["../../../src/adapters/sqlite/url-parser.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAMH;;;;;;;;;;;;GAYG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAelD;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAqChF"}

package/dist/adapters/sqlite/url-parser.js

@@ -0,0 +1,73 @@
+/**
+ * SQLite URL and Path Parsing Utilities
+ *
+ * Handles parsing of SQLite connection URLs and path validation/resolution.
+ */
+import * as path from 'path';
+import * as fs from 'fs';
+import { DbMcpError, ErrorCode } from '../../utils/errors.js';
+/**
+ * Parse SQLite URL to extract file path
+ *
+ * Supported formats:
+ * - sqlite:///absolute/path.db
+ * - sqlite://./relative/path.db
+ * - sqlite://:memory:
+ * - /absolute/path.db (plain file path)
+ * - ./relative/path.db (plain file path)
+ *
+ * @param url - SQLite connection URL or file path
+ * @returns Resolved absolute file path or :memory:
+ */
+export function parseSqliteUrl(url) {
+    if (url.startsWith('sqlite://')) {
+        const pathPart = url.slice('sqlite://'.length);
+        // Special case: :memory:
+        if (pathPart === ':memory:') {
+            return ':memory:';
+        }
+        // Handle both absolute (/path) and relative (./path) paths
+        return pathPart;
+    }
+    // Plain file path (no sqlite:// prefix)
+    return url;
+}
+/**
+ * Validate and resolve SQLite database path
+ *
+ * SECURITY: Prevents path traversal attacks by:
+ * 1. Resolving to absolute path
+ * 2. Ensuring path doesn't contain suspicious patterns
+ * 3. Checking file exists (unless :memory:)
+ *
+ * @param rawPath - Raw path from config
+ * @param basePath - Base directory for relative paths (process.cwd())
+ * @returns Validated absolute path
+ * @throws DbMcpError if path is invalid or file not found
+ */
+export function validateAndResolvePath(rawPath, basePath) {
+    // :memory: is always valid
+    if (rawPath === ':memory:') {
+        return ':memory:';
+    }
+    // Resolve to absolute path
+    const absolutePath = path.isAbsolute(rawPath) ? rawPath : path.resolve(basePath, rawPath);
+    // Normalize to remove any .. or . components
+    const normalizedPath = path.normalize(absolutePath);
+    // SECURITY: Check for path traversal attempts
+    // After normalization, path should not go above the base directory for relative paths
+    if (!path.isAbsolute(rawPath)) {
+        // For relative paths, ensure the resolved path is still within reasonable bounds
+        // This prevents sqlite://../../etc/passwd type attacks
+        const relativeToCwd = path.relative(basePath, normalizedPath);
+        if (relativeToCwd.startsWith('..')) {
+            throw new DbMcpError(ErrorCode.CONFIG_INVALID, 'Path traversal detected. SQLite path must not escape the working directory.', { path: rawPath, resolved: normalizedPath });
+        }
+    }
+    // Check file exists
+    if (!fs.existsSync(normalizedPath)) {
+        throw new DbMcpError(ErrorCode.CONNECTION_FAILED, `SQLite database file not found: ${normalizedPath}`, { path: rawPath, resolved: normalizedPath });
+    }
+    return normalizedPath;
+}
+//# sourceMappingURL=url-parser.js.map

package/dist/adapters/sqlite/url-parser.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"url-parser.js","sourceRoot":"","sources":["../../../src/adapters/sqlite/url-parser.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAE9D;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,cAAc,CAAC,GAAW;IACxC,IAAI,GAAG,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QAChC,MAAM,QAAQ,GAAG,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QAE/C,yBAAyB;QACzB,IAAI,QAAQ,KAAK,UAAU,EAAE,CAAC;YAC5B,OAAO,UAAU,CAAC;QACpB,CAAC;QAED,2DAA2D;QAC3D,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,wCAAwC;IACxC,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,sBAAsB,CAAC,OAAe,EAAE,QAAgB;IACtE,2BAA2B;IAC3B,IAAI,OAAO,KAAK,UAAU,EAAE,CAAC;QAC3B,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,2BAA2B;IAC3B,MAAM,YAAY,GAAG,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAE1F,6CAA6C;IAC7C,MAAM,cAAc,GAAG,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;IAEpD,8CAA8C;IAC9C,sFAAsF;IACtF,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QAC9B,iFAAiF;QACjF,uDAAuD;QACvD,MAAM,aAAa,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;QAC9D,IAAI,aAAa,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACnC,MAAM,IAAI,UAAU,CAClB,SAAS,CAAC,cAAc,EACxB,6EAA6E,EAC7E,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,CAC5C,CAAC;QACJ,CAAC;IACH,CAAC;IAED,oBAAoB;IACpB,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,UAAU,CAClB,SAAS,CAAC,iBAAiB,EAC3B,mCAAmC,cAAc,EAAE,EACnD,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,CAC5C,CAAC;IACJ,CAAC;IAED,OAAO,cAAc,CAAC;AACxB,CAAC"}

package/dist/adapters/types.d.ts

@@ -4,152 +4,49 @@
  * Core abstractions for multi-database support.
  */
 import type { ParsedQuery, TableInfo, TableDescription, DefaultsConfig, DatabaseConfig } from '../types.js';
-/**
- * Result from a raw query execution
- * Normalized format across all database drivers
- */
+/** Normalized result format across all database drivers */
 export interface RawQueryResult {
-    /** Column metadata */
     fields: Array<{
         name: string;
     }>;
-    /** Row data as arrays (positional, not named) */
     rows: unknown[][];
-    /** Number of rows returned or affected */
     rowCount: number;
 }
-/**
- * Database adapter interface - implemented by each database driver
- *
- * Combines connection management with SQL dialect operations.
- */
+/** Implemented by each database driver */
 export interface DatabaseAdapter {
-    /** Unique identifier for this adapter type */
     readonly type: 'postgresql' | 'mysql' | 'sqlite';
-    /**
-     * Execute a function with a managed connection.
-     * Connection is created at start and destroyed at end.
-     */
     withConnection<T>(fn: (conn: AdapterConnection) => Promise<T>): Promise<T>;
-    /**
-     * Get the default schema name for this database type
-     *
-     * PostgreSQL: "public"
-     * MySQL: database name from connection URL
-     * SQLite: "main"
-     */
+    /** PostgreSQL: "public", MySQL: db name from URL, SQLite: "main" */
     getDefaultSchema(): string;
-    /**
-     * Clean up any resources (called on server shutdown)
-     */
     dispose(): Promise<void>;
-    /**
-     * Parse a SQL statement and validate it
-     *
-     * SECURITY: This validates:
-     * - Single statement only (no multi-statement attacks)
-     * - No dangerous operations (DROP, TRUNCATE, etc.)
-     *
-     * @param sql - Raw SQL to parse
-     * @throws DbMcpError if SQL is invalid or multi-statement
-     */
+    /** Parse and validate SQL (rejects multi-statement, dangerous ops) */
     parseQuery(sql: string): ParsedQuery;
-    /**
-     * Inject LIMIT clause if query doesn't have one
-     *
-     * Used to enforce maxRows limit on SELECT queries.
-     *
-     * @param sql - Original SQL
-     * @param limit - Limit value to inject
-     * @returns Modified SQL with LIMIT, or original if already has LIMIT
-     */
+    /** Add LIMIT if missing */
     injectLimit(sql: string, limit: number): string;
-    /**
-     * Validate that a SQL query is appropriate for a specific tool
-     *
-     * @param sql - The SQL query string
-     * @param tool - Either 'query' (SELECT only) or 'execute' (INSERT/UPDATE/DELETE)
-     * @throws DbMcpError with QUERY_BLOCKED if query type is not allowed
-     */
+    /** Validate query is appropriate for tool (query=SELECT, execute=INSERT/UPDATE/DELETE) */
     validateQueryForTool(sql: string, tool: 'query' | 'execute'): void;
-    /**
-     * Get the EXPLAIN prefix for this dialect
-     *
-     * @param analyze - Whether to include ANALYZE
-     * @returns Prefix to prepend to SQL for EXPLAIN
-     *
-     * PostgreSQL: "EXPLAIN " or "EXPLAIN ANALYZE "
-     * MySQL: "EXPLAIN " or "EXPLAIN ANALYZE "
-     * SQLite: "EXPLAIN QUERY PLAN "
-     */
     getExplainPrefix(analyze: boolean): string;
-    /**
-     * Convert parameter placeholders to dialect-specific format
-     *
-     * PostgreSQL uses $1, $2, $3 (no conversion needed)
-     * MySQL/SQLite use ? placeholders (convert $1 -> ?)
-     *
-     * @param sql - SQL with placeholders
-     * @returns SQL with converted placeholders
-     */
+    /** PostgreSQL: no-op, MySQL/SQLite: $1 -> ? */
     convertPlaceholders(sql: string): string;
 }
-/**
- * Active connection handle - passed to tool implementations
- *
- * Provides database operations during a single request lifecycle.
- * Connection is automatically recycled after the request completes.
- */
+/** Active connection handle for a single request */
 export interface AdapterConnection {
-    /**
-     * Execute a parameterized query
-     *
-     * SECURITY: All user SQL MUST go through this method with parameters
-     *
-     * @param sql - SQL with placeholders ($1, $2 for PG; ? for MySQL/SQLite)
-     * @param params - Parameter values (type-safe, prevents injection)
-     */
     query(sql: string, params?: unknown[]): Promise<RawQueryResult>;
-    /**
-     * Execute a raw SQL statement (for SET, BEGIN, etc.)
-     *
-     * Only use for validated internal commands.
-     * Never pass user-provided values through this method.
-     */
+    /** For internal commands only (SET, BEGIN, COMMIT) - never user input */
     execute(sql: string): Promise<void>;
-    /**
-     * List tables in a schema (adapter-specific implementation)
-     *
-     * @param schema - Schema name (ignored for SQLite)
-     * @param maxTables - Maximum number of tables to return
-     */
     listTables(schema: string, maxTables: number): Promise<ListTablesInternalResult>;
-    /**
-     * Describe a table structure (adapter-specific implementation)
-     *
-     * @param table - Table name
-     * @param schema - Schema name (ignored for SQLite)
-     * @param limits - Limits for columns and indexes
-     */
     describeTable(table: string, schema: string, limits: {
         maxColumns: number;
         maxIndexes: number;
     }): Promise<TableDescription>;
 }
-/**
- * Internal result from listTables before tool formatting
- */
 export interface ListTablesInternalResult {
     tables: TableInfo[];
+    truncated?: boolean;
     totalAvailable: number;
 }
-/**
- * Configuration passed to adapter constructors
- */
 export interface AdapterConfig {
-    /** Database configuration (url, readonly, etc.) */
     database: DatabaseConfig;
-    /** Default settings (timeout, limits) */
     defaults: DefaultsConfig;
 }
 //# sourceMappingURL=types.d.ts.map

package/dist/adapters/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/adapters/types.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EACV,WAAW,EACX,SAAS,EACT,gBAAgB,EAChB,cAAc,EACd,cAAc,EACf,MAAM,aAAa,CAAC;AAErB;;;GAGG;AACH,MAAM,WAAW,cAAc;IAC7B,sBAAsB;IACtB,MAAM,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAChC,iDAAiD;IACjD,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC;IAClB,0CAA0C;IAC1C,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;;;GAIG;AACH,MAAM,WAAW,eAAe;IAC9B,8CAA8C;IAC9C,QAAQ,CAAC,IAAI,EAAE,YAAY,GAAG,OAAO,GAAG,QAAQ,CAAC;IAEjD;;;OAGG;IACH,cAAc,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,EAAE,iBAAiB,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IAE3E;;;;;;OAMG;IACH,gBAAgB,IAAI,MAAM,CAAC;IAE3B;;OAEG;IACH,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAMzB;;;;;;;;;OASG;IACH,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,WAAW,CAAC;IAErC;;;;;;;;OAQG;IACH,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAAC;IAEhD;;;;;;OAMG;IACH,oBAAoB,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,GAAG,SAAS,GAAG,IAAI,CAAC;IAEnE;;;;;;;;;OASG;IACH,gBAAgB,CAAC,OAAO,EAAE,OAAO,GAAG,MAAM,CAAC;IAE3C;;;;;;;;OAQG;IACH,mBAAmB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAC;CAC1C;AAED;;;;;GAKG;AACH,MAAM,WAAW,iBAAiB;IAChC;;;;;;;OAOG;IACH,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IAEhE;;;;;OAKG;IACH,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAEpC;;;;;OAKG;IACH,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,wBAAwB,CAAC,CAAC;IAEjF;;;;;;OAMG;IACH,aAAa,CACX,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,MAAM,EACd,MAAM,EAAE;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,GACjD,OAAO,CAAC,gBAAgB,CAAC,CAAC;CAC9B;AAED;;GAEG;AACH,MAAM,WAAW,wBAAwB;IACvC,MAAM,EAAE,SAAS,EAAE,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC;CACxB;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,mDAAmD;IACnD,QAAQ,EAAE,cAAc,CAAC;IACzB,yCAAyC;IACzC,QAAQ,EAAE,cAAc,CAAC;CAC1B"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/adapters/types.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EACV,WAAW,EACX,SAAS,EACT,gBAAgB,EAChB,cAAc,EACd,cAAc,EACf,MAAM,aAAa,CAAC;AAErB,2DAA2D;AAC3D,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAChC,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,0CAA0C;AAC1C,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,IAAI,EAAE,YAAY,GAAG,OAAO,GAAG,QAAQ,CAAC;IAEjD,cAAc,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,EAAE,iBAAiB,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IAE3E,oEAAoE;IACpE,gBAAgB,IAAI,MAAM,CAAC;IAE3B,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAMzB,sEAAsE;IACtE,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,WAAW,CAAC;IAErC,2BAA2B;IAC3B,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAAC;IAEhD,0FAA0F;IAC1F,oBAAoB,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,GAAG,SAAS,GAAG,IAAI,CAAC;IAEnE,gBAAgB,CAAC,OAAO,EAAE,OAAO,GAAG,MAAM,CAAC;IAE3C,+CAA+C;IAC/C,mBAAmB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAC;CAC1C;AAED,oDAAoD;AACpD,MAAM,WAAW,iBAAiB;IAChC,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IAEhE,yEAAyE;IACzE,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAEpC,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,wBAAwB,CAAC,CAAC;IAEjF,aAAa,CACX,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,MAAM,EACd,MAAM,EAAE;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,GACjD,OAAO,CAAC,gBAAgB,CAAC,CAAC;CAC9B;AAED,MAAM,WAAW,wBAAwB;IACvC,MAAM,EAAE,SAAS,EAAE,CAAC;IACpB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,cAAc,CAAC;IACzB,QAAQ,EAAE,cAAc,CAAC;CAC1B"}

package/dist/config/loader.d.ts

@@ -1,11 +1,14 @@
 import type { Config } from '../types.js';
 /**
- * Load configuration with resolution priority:
- * 1. CLI argument: --config ./path/to/config.json
- * 2. Environment variable: DB_MCP_CONFIG
- * 3. Current directory: ./databases.json
- * 4. Home directory: ~/.config/db-mcp/databases.json
- * 5. ENV-only mode: DB_MCP_{NAME}_URL variables
+ * Load configuration from environment variables.
+ *
+ * Environment variables:
+ *   DATALINK_{NAME}_URL      - Database connection URL (required)
+ *   DATALINK_{NAME}_READONLY - Set to "true" for read-only mode (optional)
+ *
+ * Example:
+ *   DATALINK_PROD_URL=postgresql://user:pass@host:5432/db
+ *   DATALINK_PROD_READONLY=true
  */
-export declare function loadConfig(cliConfigPath?: string): Promise<Config>;
+export declare function loadConfig(): Config;
 //# sourceMappingURL=loader.d.ts.map

package/dist/config/loader.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"loader.d.ts","sourceRoot":"","sources":["../../src/config/loader.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,MAAM,EAA6C,MAAM,aAAa,CAAC;AAqErF;;;;;;;GAOG;AACH,wBAAsB,UAAU,CAAC,aAAa,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CA8ExE"}
+{"version":3,"file":"loader.d.ts","sourceRoot":"","sources":["../../src/config/loader.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAkC,MAAM,aAAa,CAAC;AAuC1E;;;;;;;;;;GAUG;AACH,wBAAgB,UAAU,IAAI,MAAM,CAWnC"}

package/dist/config/loader.js

@@ -1,6 +1,3 @@
-import { readFile } from 'fs/promises';
-import { homedir } from 'os';
-import { resolve, join } from 'path';
 import { DbMcpError, ErrorCode } from '../utils/errors.js';
 const DEFAULT_CONFIG = {
     maxRows: 100,
@@ -12,116 +9,42 @@ const DEFAULT_CONFIG = {
     timeout: 30000,
 };
 /**
- * Try to read and parse a JSON config file.
- * Returns null if file doesn't exist.
- */
-async function tryReadConfigFile(path) {
-    try {
-        const content = await readFile(path, 'utf-8');
-        return JSON.parse(content);
-    }
-    catch (err) {
-        if (err.code === 'ENOENT') {
-            return null;
-        }
-        throw new DbMcpError(ErrorCode.CONFIG_INVALID, `Failed to parse config file ${path}: ${err.message}`);
-    }
-}
-/**
- * Resolve ${ENV_VAR} placeholders in a string.
- */
-function resolveEnvPlaceholders(value) {
-    return value.replace(/\$\{([^}]+)\}/g, (_, envVar) => {
-        const envValue = process.env[envVar];
-        if (envValue === undefined) {
-            throw new DbMcpError(ErrorCode.CONFIG_INVALID, `Environment variable ${envVar} is not defined`);
-        }
-        return envValue;
-    });
-}
-/**
- * Extract databases from DB_MCP_{NAME}_URL environment variables.
+ * Extract databases from DATALINK_{NAME}_URL environment variables.
+ * Also supports DATALINK_{NAME}_READONLY=true for read-only mode.
  */
 function getDatabasesFromEnv() {
     const databases = {};
-    const pattern = /^DB_MCP_([A-Z0-9_]+)_URL$/;
+    const urlPattern = /^DATALINK_([A-Z0-9_]+)_URL$/;
     for (const [key, value] of Object.entries(process.env)) {
-        const match = key.match(pattern);
+        const match = key.match(urlPattern);
         if (match && value) {
             const name = match[1].toLowerCase();
+            const readonlyKey = `DATALINK_${match[1]}_READONLY`;
+            const readonlyValue = process.env[readonlyKey];
             databases[name] = {
                 url: value,
-                readonly: false,
+                readonly: readonlyValue === 'true' || readonlyValue === '1',
             };
         }
     }
     return databases;
 }
 /**
- * Load configuration with resolution priority:
- * 1. CLI argument: --config ./path/to/config.json
- * 2. Environment variable: DB_MCP_CONFIG
- * 3. Current directory: ./databases.json
- * 4. Home directory: ~/.config/db-mcp/databases.json
- * 5. ENV-only mode: DB_MCP_{NAME}_URL variables
+ * Load configuration from environment variables.
+ *
+ * Environment variables:
+ *   DATALINK_{NAME}_URL      - Database connection URL (required)
+ *   DATALINK_{NAME}_READONLY - Set to "true" for read-only mode (optional)
+ *
+ * Example:
+ *   DATALINK_PROD_URL=postgresql://user:pass@host:5432/db
+ *   DATALINK_PROD_READONLY=true
  */
-export async function loadConfig(cliConfigPath) {
-    let rawConfig = null;
-    // 1. CLI argument
-    if (cliConfigPath) {
-        const resolvedPath = resolve(cliConfigPath);
-        rawConfig = await tryReadConfigFile(resolvedPath);
-        if (!rawConfig) {
-            throw new DbMcpError(ErrorCode.CONFIG_NOT_FOUND, `Config file not found: ${resolvedPath}`);
-        }
-    }
-    // 2. Environment variable
-    if (!rawConfig && process.env.DB_MCP_CONFIG) {
-        const envPath = resolve(process.env.DB_MCP_CONFIG);
-        rawConfig = await tryReadConfigFile(envPath);
-        if (!rawConfig) {
-            throw new DbMcpError(ErrorCode.CONFIG_NOT_FOUND, `Config file not found: ${envPath}`);
-        }
-    }
-    // 3. Current directory
-    if (!rawConfig) {
-        rawConfig = await tryReadConfigFile(resolve('./databases.json'));
-    }
-    // 4. Home directory
-    if (!rawConfig) {
-        const homePath = join(homedir(), '.config', 'db-mcp', 'databases.json');
-        rawConfig = await tryReadConfigFile(homePath);
-    }
-    // 5. ENV-only mode
-    const envDatabases = getDatabasesFromEnv();
-    // Build final config
-    const databases = {};
-    // Add databases from config file (with env placeholder resolution)
-    if (rawConfig?.databases) {
-        for (const [name, dbConfig] of Object.entries(rawConfig.databases)) {
-            databases[name] = {
-                url: resolveEnvPlaceholders(dbConfig.url),
-                readonly: dbConfig.readonly ?? false,
-                maxRows: dbConfig.maxRows,
-            };
-        }
-    }
-    // Add databases from environment (ENV-only mode)
-    // These don't override config file databases
-    for (const [name, dbConfig] of Object.entries(envDatabases)) {
-        if (!(name in databases)) {
-            databases[name] = dbConfig;
-        }
-    }
-    // Validate at least one database is configured
+export function loadConfig() {
+    const databases = getDatabasesFromEnv();
     if (Object.keys(databases).length === 0) {
-        throw new DbMcpError(ErrorCode.CONFIG_NOT_FOUND, 'No databases configured. Provide a config file or set DB_MCP_{NAME}_URL environment variables.');
+        throw new DbMcpError(ErrorCode.CONFIG_NOT_FOUND, 'No databases configured. Set DATALINK_{NAME}_URL environment variables.');
     }
-    // Merge defaults
-    const defaults = {
-        ...DEFAULT_CONFIG,
-        ...rawConfig?.defaults,
-    };
-    return { databases, defaults };
+    return { databases, defaults: DEFAULT_CONFIG };
 }
 //# sourceMappingURL=loader.js.map

package/dist/config/loader.js.map

@@ -1 +1 @@
-{"version":3,"file":"loader.js","sourceRoot":"","sources":["../../src/config/loader.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC;AAC7B,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAErC,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAE3D,MAAM,cAAc,GAAmB;IACrC,OAAO,EAAE,GAAG;IACZ,aAAa,EAAE,GAAG;IAClB,YAAY,EAAE,KAAK,EAAE,OAAO;IAC5B,UAAU,EAAE,EAAE;IACd,SAAS,EAAE,GAAG;IACd,UAAU,EAAE,EAAE;IACd,OAAO,EAAE,KAAK;CACf,CAAC;AAEF;;;GAGG;AACH,KAAK,UAAU,iBAAiB,CAAC,IAAY;IAC3C,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC9C,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAc,CAAC;IAC1C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACrD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,IAAI,UAAU,CAClB,SAAS,CAAC,cAAc,EACxB,+BAA+B,IAAI,KAAM,GAAa,CAAC,OAAO,EAAE,CACjE,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAS,sBAAsB,CAAC,KAAa;IAC3C,OAAO,KAAK,CAAC,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAAC,EAAE,MAAc,EAAE,EAAE;QAC3D,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACrC,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,MAAM,IAAI,UAAU,CAClB,SAAS,CAAC,cAAc,EACxB,wBAAwB,MAAM,iBAAiB,CAChD,CAAC;QACJ,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;GAEG;AACH,SAAS,mBAAmB;IAC1B,MAAM,SAAS,GAAmC,EAAE,CAAC;IACrD,MAAM,OAAO,GAAG,2BAA2B,CAAC;IAE5C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACvD,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACjC,IAAI,KAAK,IAAI,KAAK,EAAE,CAAC;YACnB,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;YACpC,SAAS,CAAC,IAAI,CAAC,GAAG;gBAChB,GAAG,EAAE,KAAK;gBACV,QAAQ,EAAE,KAAK;aAChB,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,aAAsB;IACrD,IAAI,SAAS,GAAqB,IAAI,CAAC;IAEvC,kBAAkB;IAClB,IAAI,aAAa,EAAE,CAAC;QAClB,MAAM,YAAY,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;QAC5C,SAAS,GAAG,MAAM,iBAAiB,CAAC,YAAY,CAAC,CAAC;QAClD,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,MAAM,IAAI,UAAU,CAClB,SAAS,CAAC,gBAAgB,EAC1B,0BAA0B,YAAY,EAAE,CACzC,CAAC;QACJ,CAAC;IACH,CAAC;IAED,0BAA0B;IAC1B,IAAI,CAAC,SAAS,IAAI,OAAO,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC;QAC5C,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;QACnD,SAAS,GAAG,MAAM,iBAAiB,CAAC,OAAO,CAAC,CAAC;QAC7C,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,MAAM,IAAI,UAAU,CAClB,SAAS,CAAC,gBAAgB,EAC1B,0BAA0B,OAAO,EAAE,CACpC,CAAC;QACJ,CAAC;IACH,CAAC;IAED,uBAAuB;IACvB,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,SAAS,GAAG,MAAM,iBAAiB,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC,CAAC;IACnE,CAAC;IAED,oBAAoB;IACpB,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,gBAAgB,CAAC,CAAC;QACxE,SAAS,GAAG,MAAM,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IAChD,CAAC;IAED,mBAAmB;IACnB,MAAM,YAAY,GAAG,mBAAmB,EAAE,CAAC;IAE3C,qBAAqB;IACrB,MAAM,SAAS,GAAmC,EAAE,CAAC;IAErD,mEAAmE;IACnE,IAAI,SAAS,EAAE,SAAS,EAAE,CAAC;QACzB,KAAK,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,CAAC;YACnE,SAAS,CAAC,IAAI,CAAC,GAAG;gBAChB,GAAG,EAAE,sBAAsB,CAAC,QAAQ,CAAC,GAAG,CAAC;gBACzC,QAAQ,EAAE,QAAQ,CAAC,QAAQ,IAAI,KAAK;gBACpC,OAAO,EAAE,QAAQ,CAAC,OAAO;aAC1B,CAAC;QACJ,CAAC;IACH,CAAC;IAED,iDAAiD;IACjD,6CAA6C;IAC7C,KAAK,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC;QAC5D,IAAI,CAAC,CAAC,IAAI,IAAI,SAAS,CAAC,EAAE,CAAC;YACzB,SAAS,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC;QAC7B,CAAC;IACH,CAAC;IAED,+CAA+C;IAC/C,IAAI,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxC,MAAM,IAAI,UAAU,CAClB,SAAS,CAAC,gBAAgB,EAC1B,gGAAgG,CACjG,CAAC;IACJ,CAAC;IAED,iBAAiB;IACjB,MAAM,QAAQ,GAAmB;QAC/B,GAAG,cAAc;QACjB,GAAG,SAAS,EAAE,QAAQ;KACvB,CAAC;IAEF,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC;AACjC,CAAC"}
+{"version":3,"file":"loader.js","sourceRoot":"","sources":["../../src/config/loader.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAE3D,MAAM,cAAc,GAAmB;IACrC,OAAO,EAAE,GAAG;IACZ,aAAa,EAAE,GAAG;IAClB,YAAY,EAAE,KAAK,EAAE,OAAO;IAC5B,UAAU,EAAE,EAAE;IACd,SAAS,EAAE,GAAG;IACd,UAAU,EAAE,EAAE;IACd,OAAO,EAAE,KAAK;CACf,CAAC;AAEF;;;GAGG;AACH,SAAS,mBAAmB;IAC1B,MAAM,SAAS,GAAmC,EAAE,CAAC;IACrD,MAAM,UAAU,GAAG,6BAA6B,CAAC;IAEjD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACvD,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QACpC,IAAI,KAAK,IAAI,KAAK,EAAE,CAAC;YACnB,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;YACpC,MAAM,WAAW,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC;YACpD,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;YAE/C,SAAS,CAAC,IAAI,CAAC,GAAG;gBAChB,GAAG,EAAE,KAAK;gBACV,QAAQ,EAAE,aAAa,KAAK,MAAM,IAAI,aAAa,KAAK,GAAG;aAC5D,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,UAAU;IACxB,MAAM,SAAS,GAAG,mBAAmB,EAAE,CAAC;IAExC,IAAI,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxC,MAAM,IAAI,UAAU,CAClB,SAAS,CAAC,gBAAgB,EAC1B,yEAAyE,CAC1E,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,cAAc,EAAE,CAAC;AACjD,CAAC"}

package/dist/index.d.ts

@@ -1,8 +1,6 @@
 #!/usr/bin/env node
 /**
  * Entry point for mcp-datalink server
- *
- * Parses CLI arguments and starts the MCP server.
  */
 export {};
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAEA;;;;GAIG"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAEA;;GAEG"}

package/dist/index.js

@@ -1,8 +1,6 @@
 #!/usr/bin/env node
 /**
  * Entry point for mcp-datalink server
- *
- * Parses CLI arguments and starts the MCP server.
  */
 import { parseArgs } from 'node:util';
 import { loadConfig } from './config/loader.js';
@@ -10,7 +8,6 @@ import { runServer } from './server.js';
 async function main() {
     const { values } = parseArgs({
         options: {
-            config: { type: 'string', short: 'c' },
             help: { type: 'boolean', short: 'h' },
         },
     });
@@ -18,17 +15,21 @@ async function main() {
         console.log(`
 mcp-datalink - MCP server for secure database access
 
-Usage: mcp-datalink [options]
+Usage: mcp-datalink
 
-Options:
-  -c, --config <path>  Path to config file (default: databases.json)
-  -h, --help           Show this help message
+Configuration via environment variables:
+  DATALINK_{NAME}_URL       Database connection URL
+  DATALINK_{NAME}_READONLY  Set to "true" for read-only mode
 
-Supported databases: PostgreSQL (MySQL, SQLite coming soon)
+Example:
+  DATALINK_PROD_URL=postgresql://user:pass@host:5432/db
+  DATALINK_PROD_READONLY=true
+
+Supported databases: PostgreSQL, MySQL, SQLite
 `);
         process.exit(0);
     }
-    const config = await loadConfig(values.config);
+    const config = loadConfig();
     await runServer(config);
 }
 main().catch((error) => {

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAEA;;;;GAIG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAExC,KAAK,UAAU,IAAI;IACjB,MAAM,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC;QAC3B,OAAO,EAAE;YACP,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,EAAE;YACtC,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,EAAE;SACtC;KACF,CAAC,CAAC;IAEH,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC;;;;;;;;;;CAUf,CAAC,CAAC;QACC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC/C,MAAM,SAAS,CAAC,MAAM,CAAC,CAAC;AAC1B,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,KAAY,EAAE,EAAE;IAC5B,OAAO,CAAC,KAAK,CAAC,cAAc,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;IAC7C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAEA;;GAEG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAExC,KAAK,UAAU,IAAI;IACjB,MAAM,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC;QAC3B,OAAO,EAAE;YACP,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,EAAE;SACtC;KACF,CAAC,CAAC;IAEH,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC;;;;;;;;;;;;;;CAcf,CAAC,CAAC;QACC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAC5B,MAAM,SAAS,CAAC,MAAM,CAAC,CAAC;AAC1B,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,KAAY,EAAE,EAAE;IAC5B,OAAO,CAAC,KAAK,CAAC,cAAc,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;IAC7C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AAMnE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC;AASzC;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAoLnD;AAED;;;;GAIG;AACH,wBAAsB,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAI7D"}
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AAInE,OAAO,KAAK,EACV,MAAM,EAMP,MAAM,YAAY,CAAC;AAyBpB;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CA0OnD;AAED;;;;GAIG;AACH,wBAAsB,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAI7D"}