@yawlabs/postgres-mcp 0.6.13 → 0.6.15

package/CHANGELOG.md

@@ -7,6 +7,26 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.6.15] - 2026-05-16
+
+### Docs
+- `RunHooks` interface in `api.ts` now documents that `__pgmcp_sp` is a
+  reserved savepoint name. `runUserQueryBounded` opens and releases that
+  savepoint around the user SQL; a hook that opens a savepoint with the
+  same name would be unwound by the inner `RELEASE`. Today no hook collides
+  -- this is a contract note for future hook authors. Closes #8.
+
+## [0.6.14] - 2026-05-16
+
+### Security
+- `paramValue` (used by `pg_query`, `pg_readonly`, `pg_explain` for positional
+  parameters) was unbounded recursive via `z.lazy`. A pathologically nested
+  request body could surface a `Maximum call stack size exceeded` RangeError
+  out of the request path instead of a clear validation error. The new
+  `paramsArray` schema wraps the top-level params array with an iterative
+  depth check capped at 32 levels (arrays and objects each count as one
+  level). Closes #7.
+
 ## [0.6.13] - 2026-05-16
 
 ### Fixed

package/dist/index.js

@@ -36353,6 +36353,25 @@ async function shutdown() {
 var paramValue = external_exports.lazy(
   () => external_exports.union([external_exports.string(), external_exports.number(), external_exports.boolean(), external_exports.null(), external_exports.array(paramValue), external_exports.record(external_exports.string(), paramValue)])
 );
+var MAX_PARAM_DEPTH = 32;
+function isWithinDepth(value, maxDepth) {
+  const stack = [[value, 0]];
+  while (stack.length > 0) {
+    const next = stack.pop();
+    if (!next) break;
+    const [v, d] = next;
+    if (d > maxDepth) return false;
+    if (Array.isArray(v)) {
+      for (const item of v) stack.push([item, d + 1]);
+    } else if (v !== null && typeof v === "object") {
+      for (const item of Object.values(v)) stack.push([item, d + 1]);
+    }
+  }
+  return true;
+}
+var paramsArray = external_exports.array(paramValue).refine((arr) => arr.every((v) => isWithinDepth(v, MAX_PARAM_DEPTH)), {
+  message: `Parameter value exceeds maximum nesting depth of ${MAX_PARAM_DEPTH}`
+});
 var identSchema = external_exports.string().min(1).max(63).refine((v) => Buffer.byteLength(v, "utf8") <= 63, {
   message: "Identifier exceeds PostgreSQL's 63-byte NAMEDATALEN limit (multi-byte characters count as multiple bytes)."
 });
@@ -36833,7 +36852,7 @@ var explainTools = [
       sql: external_exports.string().min(1).max(1e6).describe("The SQL statement to explain. Do NOT prefix with EXPLAIN."),
       analyze: external_exports.boolean().default(false).describe("Run EXPLAIN ANALYZE (actually executes the query)."),
       format: external_exports.enum(["text", "json"]).default("text").describe("Output format."),
-      params: external_exports.array(paramValue).optional().describe("Positional parameters referenced as $1, $2, ... in the SQL."),
+      params: paramsArray.optional().describe("Positional parameters referenced as $1, $2, ... in the SQL."),
       hypothetical_indexes: external_exports.array(hypotheticalIndex).optional().describe(
         "List of indexes the planner should pretend exist for this EXPLAIN. Requires the HypoPG extension. Indexes are session-scoped and reset at the end of the call."
       )
@@ -36985,7 +37004,7 @@ var queryTools = [
     },
     inputSchema: external_exports.object({
       sql: external_exports.string().min(1).max(1e6).describe("The SQL statement to execute. Hard cap of 1 MB."),
-      params: external_exports.array(paramValue).optional().describe("Positional parameters referenced as $1, $2, ... in the SQL.")
+      params: paramsArray.optional().describe("Positional parameters referenced as $1, $2, ... in the SQL.")
     }),
     handler: async (input) => {
       const { sql, params } = input;
@@ -37005,7 +37024,7 @@ var queryTools = [
     },
     inputSchema: external_exports.object({
       sql: external_exports.string().min(1).max(1e6).describe("The SQL statement to execute. Hard cap of 1 MB."),
-      params: external_exports.array(paramValue).optional().describe("Positional parameters referenced as $1, $2, ... in the SQL.")
+      params: paramsArray.optional().describe("Positional parameters referenced as $1, $2, ... in the SQL.")
     }),
     handler: async (input) => {
       const { sql, params } = input;
@@ -37591,7 +37610,7 @@ function compareVersions(a, b) {
 }
 
 // src/index.ts
-var version2 = true ? "0.6.13" : (await null).createRequire(import.meta.url)("../package.json").version;
+var version2 = true ? "0.6.15" : (await null).createRequire(import.meta.url)("../package.json").version;
 var subcommand = process.argv[2];
 if (subcommand === "version" || subcommand === "--version") {
   console.log(version2);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@yawlabs/postgres-mcp",
-  "version": "0.6.13",
+  "version": "0.6.15",
   "mcpName": "io.github.YawLabs/postgres-mcp",
   "description": "PostgreSQL MCP server - query, schema introspection, explain, and health checks for AI assistants",
   "license": "MIT",