@zlash65/postgres-ssh-mcp 0.0.1

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":""}

package/dist/index.js

@@ -0,0 +1,67 @@
+#!/usr/bin/env node
+import { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';
+import { parseConfig } from './config.js';
+import { ConnectionManager } from './connection/postgres-pool.js';
+import { createServer } from './server.js';
+import { obfuscateConnectionString } from './lib/obfuscate.js';
+async function main() {
+    console.error('[postgres-mcp] Starting server...');
+    let cleanup = null;
+    try {
+        const config = parseConfig();
+        const connectionManager = new ConnectionManager(config);
+        await connectionManager.initialize();
+        const { server, cleanup: serverCleanup } = createServer(connectionManager);
+        cleanup = serverCleanup;
+        const handleShutdown = async (signal) => {
+            console.error(`[postgres-mcp] Received ${signal}, shutting down...`);
+            if (cleanup) {
+                try {
+                    await cleanup();
+                }
+                catch (err) {
+                    console.error('[postgres-mcp] Error during cleanup:', err);
+                }
+            }
+            process.exit(0);
+        };
+        process.on('SIGINT', () => handleShutdown('SIGINT'));
+        process.on('SIGTERM', () => handleShutdown('SIGTERM'));
+        process.on('uncaughtException', (err) => {
+            console.error('[postgres-mcp] Uncaught exception:', obfuscateConnectionString(err.message));
+            console.error(err.stack);
+            process.exit(1);
+        });
+        process.on('unhandledRejection', (reason) => {
+            const message = reason instanceof Error ? reason.message : String(reason);
+            console.error('[postgres-mcp] Unhandled rejection:', obfuscateConnectionString(message));
+            process.exit(1);
+        });
+        const transport = new StdioServerTransport();
+        await server.connect(transport);
+        console.error('[postgres-mcp] Server running on STDIO');
+        console.error(`[postgres-mcp] Mode: ${config.readOnly ? 'read-only' : 'read-write'}`);
+        console.error(`[postgres-mcp] Max rows per query: ${config.maxRows}`);
+        if (config.ssh) {
+            console.error('[postgres-mcp] SSH tunnel: enabled');
+        }
+    }
+    catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        console.error('[postgres-mcp] Fatal error:', obfuscateConnectionString(message));
+        if (cleanup) {
+            try {
+                await cleanup();
+            }
+            catch {
+                // Ignore cleanup errors during fatal shutdown
+            }
+        }
+        process.exit(1);
+    }
+}
+main().catch((err) => {
+    console.error('[postgres-mcp] Failed to start:', err);
+    process.exit(1);
+});
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAEA,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAClE,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,yBAAyB,EAAE,MAAM,oBAAoB,CAAC;AAE/D,KAAK,UAAU,IAAI;IACjB,OAAO,CAAC,KAAK,CAAC,mCAAmC,CAAC,CAAC;IAEnD,IAAI,OAAO,GAAiC,IAAI,CAAC;IAEjD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,WAAW,EAAE,CAAC;QAE7B,MAAM,iBAAiB,GAAG,IAAI,iBAAiB,CAAC,MAAM,CAAC,CAAC;QACxD,MAAM,iBAAiB,CAAC,UAAU,EAAE,CAAC;QAErC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,EAAE,GAAG,YAAY,CAAC,iBAAiB,CAAC,CAAC;QAC3E,OAAO,GAAG,aAAa,CAAC;QAExB,MAAM,cAAc,GAAG,KAAK,EAAE,MAAc,EAAiB,EAAE;YAC7D,OAAO,CAAC,KAAK,CAAC,2BAA2B,MAAM,oBAAoB,CAAC,CAAC;YAErE,IAAI,OAAO,EAAE,CAAC;gBACZ,IAAI,CAAC;oBACH,MAAM,OAAO,EAAE,CAAC;gBAClB,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,OAAO,CAAC,KAAK,CAAC,sCAAsC,EAAE,GAAG,CAAC,CAAC;gBAC7D,CAAC;YACH,CAAC;YAED,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC,CAAC;QAEF,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC;QACrD,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC,CAAC;QAEvD,OAAO,CAAC,EAAE,CAAC,mBAAmB,EAAE,CAAC,GAAG,EAAE,EAAE;YACtC,OAAO,CAAC,KAAK,CACX,oCAAoC,EACpC,yBAAyB,CAAC,GAAG,CAAC,OAAO,CAAC,CACvC,CAAC;YACF,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YACzB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC,CAAC,CAAC;QAEH,OAAO,CAAC,EAAE,CAAC,oBAAoB,EAAE,CAAC,MAAM,EAAE,EAAE;YAC1C,MAAM,OAAO,GACX,MAAM,YAAY,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAC5D,OAAO,CAAC,KAAK,CACX,qCAAqC,EACrC,yBAAyB,CAAC,OAAO,CAAC,CACnC,CAAC;YACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC,CAAC,CAAC;QAEH,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;QAC7C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAEhC,OAAO,CAAC,KAAK,CAAC,wCAAwC,CAAC,CAAC;QACxD,OAAO,CAAC,KAAK,CACX,wBAAwB,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,YAAY,EAAE,CACvE,CAAC;QACF,OAAO,CAAC,KAAK,CAAC,sCAAsC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;QAEtE,IAAI,MAAM,CAAC,GAAG,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,oCAAoC,CAAC,CAAC;QACtD,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,OAAO,CAAC,KAAK,CACX,6BAA6B,EAC7B,yBAAyB,CAAC,OAAO,CAAC,CACnC,CAAC;QAEF,IAAI,OAAO,EAAE,CAAC;YACZ,IAAI,CAAC;gBACH,MAAM,OAAO,EAAE,CAAC;YAClB,CAAC;YAAC,MAAM,CAAC;gBACP,8CAA8C;YAChD,CAAC;QACH,CAAC;QAED,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;IACnB,OAAO,CAAC,KAAK,CAAC,iCAAiC,EAAE,GAAG,CAAC,CAAC;IACtD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/lib/obfuscate.d.ts

@@ -0,0 +1,2 @@
+export declare function obfuscateConnectionString(str: string): string;
+//# sourceMappingURL=obfuscate.d.ts.map

package/dist/lib/obfuscate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"obfuscate.d.ts","sourceRoot":"","sources":["../../src/lib/obfuscate.ts"],"names":[],"mappings":"AAAA,wBAAgB,yBAAyB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAW7D"}

package/dist/lib/obfuscate.js

@@ -0,0 +1,13 @@
+export function obfuscateConnectionString(str) {
+    return str
+        .replace(/:([^:@/]+)@/g, ':****@')
+        .replace(/password[=:]\s*\S+/gi, 'password=****')
+        .replace(/privateKey[=:]\s*\S+/gi, 'privateKey=****')
+        .replace(/privatekey[=:]\s*\S+/gi, 'privateKey=****')
+        .replace(/passphrase[=:]\s*\S+/gi, 'passphrase=****')
+        .replace(/secret[=:]\s*\S+/gi, 'secret=****')
+        .replace(/token[=:]\s*\S+/gi, 'token=****')
+        .replace(/api[_-]?key[=:]\s*\S+/gi, 'apiKey=****')
+        .replace(/authorization[=:]\s*\S+/gi, 'authorization=****');
+}
+//# sourceMappingURL=obfuscate.js.map

package/dist/lib/obfuscate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"obfuscate.js","sourceRoot":"","sources":["../../src/lib/obfuscate.ts"],"names":[],"mappings":"AAAA,MAAM,UAAU,yBAAyB,CAAC,GAAW;IACnD,OAAO,GAAG;SACP,OAAO,CAAC,cAAc,EAAE,QAAQ,CAAC;SACjC,OAAO,CAAC,sBAAsB,EAAE,eAAe,CAAC;SAChD,OAAO,CAAC,wBAAwB,EAAE,iBAAiB,CAAC;SACpD,OAAO,CAAC,wBAAwB,EAAE,iBAAiB,CAAC;SACpD,OAAO,CAAC,wBAAwB,EAAE,iBAAiB,CAAC;SACpD,OAAO,CAAC,oBAAoB,EAAE,aAAa,CAAC;SAC5C,OAAO,CAAC,mBAAmB,EAAE,YAAY,CAAC;SAC1C,OAAO,CAAC,yBAAyB,EAAE,aAAa,CAAC;SACjD,OAAO,CAAC,2BAA2B,EAAE,oBAAoB,CAAC,CAAC;AAChE,CAAC"}

package/dist/lib/sql-validator.d.ts

@@ -0,0 +1,6 @@
+export declare function validateReadOnlyStatement(sql: string): void;
+export declare function cteContainsDML(sql: string): boolean;
+export declare function extractFinalStatementAfterCTEs(sql: string): string | null;
+export declare function stripLeadingComments(sql: string): string;
+export declare function getFirstKeyword(sql: string): string | null;
+//# sourceMappingURL=sql-validator.d.ts.map

package/dist/lib/sql-validator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sql-validator.d.ts","sourceRoot":"","sources":["../../src/lib/sql-validator.ts"],"names":[],"mappings":"AAAA,wBAAgB,yBAAyB,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAoE3D;AAiOD,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAgDnD;AA2GD,wBAAgB,8BAA8B,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAqHzE;AAED,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAsBxD;AAoMD,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAQ1D"}