db-mcp 1.0.2 → 1.1.0

package/dist/cli.js

@@ -1,111 +1,132 @@
 #!/usr/bin/env node
-/**
- * db-mcp - Command Line Interface
- *
- * Entry point for running the db-mcp server from the command line.
- */
-import { createServer, DEFAULT_CONFIG } from "./server/McpServer.js";
-/**
- * Parse command line arguments
- */
+import { DEFAULT_CONFIG, createServer, VERSION } from './chunk-DZQLDEQS.js';
+import './chunk-S5IDDSSB.js';
+import './chunk-AOUL5SHS.js';
+
+// src/cli.ts
 function parseArgs() {
-    const args = process.argv.slice(2);
-    const config = {};
-    const databases = [];
-    // Track extension flags (apply to last native sqlite database)
-    let enableCsv = false;
-    let enableSpatialite = false;
-    for (let i = 0; i < args.length; i++) {
-        const arg = args[i];
-        if (arg === "--transport" || arg === "-t") {
-            const value = args[++i];
-            if (value === "stdio" || value === "http" || value === "sse") {
-                config.transport = value;
-            }
-        }
-        else if (arg === "--port" || arg === "-p") {
-            const portValue = args[++i];
-            if (portValue) {
-                config.port = parseInt(portValue, 10);
-            }
-        }
-        else if (arg === "--stateless") {
-            // Enable stateless HTTP mode (no session management, no SSE)
-            config.statelessHttp = true;
-        }
-        else if (arg === "--name") {
-            const nameValue = args[++i];
-            if (nameValue) {
-                config.name = nameValue;
-            }
-        }
-        else if (arg === "--version") {
-            const versionValue = args[++i];
-            if (versionValue) {
-                config.version = versionValue;
-            }
-        }
-        else if (arg === "--tool-filter") {
-            const filterValue = args[++i];
-            if (filterValue) {
-                config.toolFilter = filterValue;
-            }
-        }
-        else if (arg === "--sqlite") {
-            const dbPath = args[++i];
-            if (dbPath) {
-                databases.push({
-                    type: "sqlite",
-                    connectionString: dbPath,
-                });
-            }
-        }
-        else if (arg === "--sqlite-native") {
-            const dbPath = args[++i];
-            if (dbPath) {
-                databases.push({
-                    type: "sqlite",
-                    connectionString: dbPath,
-                    options: {
-                        backend: "better-sqlite3",
-                        csv: enableCsv,
-                        spatialite: enableSpatialite,
-                    },
-                });
-            }
-        }
-        else if (arg === "--csv") {
-            enableCsv = true;
-            // Apply to already-added native database if exists
-            const lastDb = databases[databases.length - 1];
-            if (lastDb?.options && "backend" in lastDb.options) {
-                lastDb.options["csv"] = true;
-            }
-        }
-        else if (arg === "--spatialite") {
-            enableSpatialite = true;
-            // Apply to already-added native database if exists
-            const lastDb = databases[databases.length - 1];
-            if (lastDb?.options && "backend" in lastDb.options) {
-                lastDb.options["spatialite"] = true;
-            }
-        }
-        else if (arg === "--help" || arg === "-h") {
-            printHelp();
-            process.exit(0);
-        }
-    }
-    if (databases.length > 0) {
-        config.databases = databases;
+  const args = process.argv.slice(2);
+  const config = {};
+  const databases = [];
+  let enableCsv = false;
+  let enableSpatialite = false;
+  for (let i = 0; i < args.length; i++) {
+    const arg = args[i];
+    if (arg === "--transport" || arg === "-t") {
+      const value = args[++i];
+      if (value === "stdio" || value === "http" || value === "sse") {
+        config.transport = value;
+      }
+    } else if (arg === "--port" || arg === "-p") {
+      const portValue = args[++i];
+      if (portValue) {
+        config.port = parseInt(portValue, 10);
+      }
+    } else if (arg === "--server-host") {
+      const hostValue = args[++i];
+      if (hostValue) {
+        config.host = hostValue;
+      }
+    } else if (arg === "--stateless") {
+      config.statelessHttp = true;
+    } else if (arg === "--enable-hsts") {
+      config.enableHSTS = true;
+    } else if (arg === "--auth-token") {
+      const tokenValue = args[++i];
+      if (tokenValue) {
+        config.authToken = tokenValue;
+      }
+    } else if (arg === "--oauth-enabled" || arg === "-o") {
+      if (!config.oauth) {
+        config.oauth = { enabled: true };
+      } else {
+        config.oauth.enabled = true;
+      }
+    } else if (arg === "--oauth-issuer") {
+      const issuerValue = args[++i];
+      if (issuerValue) {
+        config.oauth ??= { enabled: true };
+        config.oauth.authorizationServerUrl = issuerValue;
+        config.oauth.issuer = issuerValue;
+      }
+    } else if (arg === "--oauth-audience") {
+      const audValue = args[++i];
+      if (audValue) {
+        config.oauth ??= { enabled: true };
+        config.oauth.audience = audValue;
+      }
+    } else if (arg === "--oauth-jwks-uri") {
+      const jwksValue = args[++i];
+      if (jwksValue) {
+        config.oauth ??= { enabled: true };
+        config.oauth.jwksUri = jwksValue;
+      }
+    } else if (arg === "--oauth-clock-tolerance") {
+      const tolValue = args[++i];
+      if (tolValue) {
+        config.oauth ??= { enabled: true };
+        config.oauth.clockTolerance = parseInt(tolValue, 10);
+      }
+    } else if (arg === "--name") {
+      const nameValue = args[++i];
+      if (nameValue) {
+        config.name = nameValue;
+      }
+    } else if (arg === "--version") {
+      const versionValue = args[++i];
+      if (versionValue) {
+        config.version = versionValue;
+      }
+    } else if (arg === "--tool-filter") {
+      const filterValue = args[++i];
+      if (filterValue) {
+        config.toolFilter = filterValue;
+      }
+    } else if (arg === "--sqlite") {
+      const dbPath = args[++i];
+      if (dbPath) {
+        databases.push({
+          type: "sqlite",
+          connectionString: dbPath
+        });
+      }
+    } else if (arg === "--sqlite-native") {
+      const dbPath = args[++i];
+      if (dbPath) {
+        databases.push({
+          type: "sqlite",
+          connectionString: dbPath,
+          options: {
+            backend: "better-sqlite3",
+            csv: enableCsv,
+            spatialite: enableSpatialite
+          }
+        });
+      }
+    } else if (arg === "--csv") {
+      enableCsv = true;
+      const lastDb = databases[databases.length - 1];
+      if (lastDb?.options && "backend" in lastDb.options) {
+        lastDb.options["csv"] = true;
+      }
+    } else if (arg === "--spatialite") {
+      enableSpatialite = true;
+      const lastDb = databases[databases.length - 1];
+      if (lastDb?.options && "backend" in lastDb.options) {
+        lastDb.options["spatialite"] = true;
+      }
+    } else if (arg === "--help" || arg === "-h") {
+      printHelp();
+      process.exit(0);
     }
-    return config;
+  }
+  if (databases.length > 0) {
+    config.databases = databases;
+  }
+  return config;
 }
-/**
- * Print help message
- */
 function printHelp() {
-    // Use stderr for all output - stdout is reserved for MCP protocol
-    console.error(`
+  console.error(`
 db-mcp - SQLite MCP Server
 
 Usage: db-mcp [options]
@@ -113,8 +134,19 @@ Usage: db-mcp [options]
 Transport Options:
   --transport, -t <type>    Transport type: stdio (default), http, sse
   --port, -p <port>         HTTP port (default: 3000)
+  --server-host <host>      Host/IP to bind to (default: 0.0.0.0)
+                            Use 127.0.0.1 to restrict to local connections
   --stateless               Use stateless HTTP mode (no session management, no SSE)
                             Ideal for serverless deployments (Lambda, Workers)
+  --enable-hsts             Enable HSTS header (use when behind HTTPS)
+
+Authentication Options:
+  --auth-token <token>      Simple bearer token for HTTP authentication
+  --oauth-enabled, -o       Enable OAuth 2.1 authentication
+  --oauth-issuer <url>      Authorization server URL (issuer)
+  --oauth-audience <aud>    Expected token audience
+  --oauth-jwks-uri <url>    JWKS URI (auto-discovered from issuer if not set)
+  --oauth-clock-tolerance <seconds>  Clock tolerance in seconds (default: 60)
 
 Database Options:
   --sqlite <path>           Add SQLite database (WASM/sql.js)
@@ -126,7 +158,7 @@ Extension Options (Native only):
 
 Server Options:
   --name <name>             Server name (default: db-mcp)
-  --version <version>       Server version (default: 0.1.0)
+  --version <version>       Server version (default: ${VERSION})
   --tool-filter <filter>    Tool filter string. Supports:
                               Shortcuts: starter, analytics, search, spatial, minimal, full
                               Groups: core, json, text, fts5, stats, vector, geo, ...
@@ -134,6 +166,14 @@ Server Options:
                               Legacy: -vector,-geo (exclusion from all)
 
 Environment Variables:
+  MCP_HOST                  Host/IP to bind to (default: 0.0.0.0)
+  MCP_AUTH_TOKEN             Simple bearer token (same as --auth-token)
+  OAUTH_ENABLED              Enable OAuth 2.1 (same as --oauth-enabled)
+  OAUTH_ISSUER               Authorization server URL
+  OAUTH_AUDIENCE             Expected token audience
+  OAUTH_JWKS_URI             JWKS URI
+  OAUTH_CLOCK_TOLERANCE      Clock tolerance in seconds
+  MCP_ENABLE_HSTS            Enable HSTS header (same as --enable-hsts)
   DB_MCP_TOOL_FILTER        Tool filter string
   SQLITE_DATABASE           SQLite database path
   CSV_EXTENSION_PATH        Custom path to CSV extension binary
@@ -142,95 +182,99 @@ Environment Variables:
 Examples:
   db-mcp --sqlite-native ./data.db
   db-mcp --sqlite-native ./data.db --tool-filter "starter"
-  db-mcp --sqlite-native ./data.db --tool-filter "core,json,text"
-  db-mcp --sqlite-native ./data.db --tool-filter "-vector,-stats"
-  db-mcp --transport http --port 3000 --sqlite ./data.db
+  db-mcp --transport http --port 3000 --auth-token my-secret --sqlite ./data.db
+  db-mcp --transport http --oauth-enabled --oauth-issuer http://keycloak:8080/realms/mcp --oauth-audience db-mcp --sqlite ./data.db
 
 For more information, visit: https://github.com/neverinfamous/db-mcp
 `);
 }
-/**
- * Load configuration from environment variables
- */
 function loadEnvConfig() {
-    const config = {};
-    const databases = [];
-    // Tool filter from environment
-    const toolFilter = process.env["DB_MCP_TOOL_FILTER"] ?? process.env["TOOL_FILTER"];
-    if (toolFilter) {
-        config.toolFilter = toolFilter;
+  const config = {};
+  const databases = [];
+  const host = process.env["MCP_HOST"] ?? process.env["HOST"];
+  if (host) {
+    config.host = host;
+  }
+  const authToken = process.env["MCP_AUTH_TOKEN"];
+  if (authToken) {
+    config.authToken = authToken;
+  }
+  const oauthEnabled = process.env["OAUTH_ENABLED"] === "true";
+  if (oauthEnabled) {
+    const oauth = { enabled: true };
+    const issuer = process.env["OAUTH_ISSUER"];
+    if (issuer) {
+      oauth.authorizationServerUrl = issuer;
+      oauth.issuer = issuer;
     }
-    // SQLite database from environment
-    const sqliteUri = process.env["SQLITE_DATABASE"] ?? process.env["SQLITE_PATH"];
-    if (sqliteUri) {
-        databases.push({ type: "sqlite", connectionString: sqliteUri });
-    }
-    if (databases.length > 0) {
-        config.databases = databases;
-    }
-    return config;
+    const audience = process.env["OAUTH_AUDIENCE"];
+    if (audience) oauth.audience = audience;
+    const jwksUri = process.env["OAUTH_JWKS_URI"];
+    if (jwksUri) oauth.jwksUri = jwksUri;
+    const clockTolerance = process.env["OAUTH_CLOCK_TOLERANCE"];
+    if (clockTolerance) oauth.clockTolerance = parseInt(clockTolerance, 10);
+    config.oauth = oauth;
+  }
+  const toolFilter = process.env["DB_MCP_TOOL_FILTER"] ?? process.env["TOOL_FILTER"];
+  if (toolFilter) {
+    config.toolFilter = toolFilter;
+  }
+  const sqliteUri = process.env["SQLITE_DATABASE"] ?? process.env["SQLITE_PATH"];
+  if (sqliteUri) {
+    databases.push({ type: "sqlite", connectionString: sqliteUri });
+  }
+  if (databases.length > 0) {
+    config.databases = databases;
+  }
+  return config;
 }
-/**
- * Main entry point
- */
 async function main() {
-    try {
-        // Load configuration from environment, then CLI (CLI overrides env)
-        const envConfig = loadEnvConfig();
-        const cliConfig = parseArgs();
-        const config = {
-            ...DEFAULT_CONFIG,
-            ...envConfig,
-            ...cliConfig,
-            databases: [
-                ...(envConfig.databases ?? []),
-                ...(cliConfig.databases ?? []),
-            ],
-        };
-        // Create server
-        const server = createServer(config);
-        // Handle shutdown signals
-        process.on("SIGINT", () => {
-            void server.shutdown().then(() => {
-                process.exit(0);
-            });
-        });
-        process.on("SIGTERM", () => {
-            void server.shutdown().then(() => {
-                process.exit(0);
-            });
-        });
-        // Register database adapters based on config.databases
-        for (const dbConfig of config.databases) {
-            if (dbConfig.type === "sqlite") {
-                const options = dbConfig.options;
-                if (options?.backend === "better-sqlite3") {
-                    // Use native SQLite adapter with FTS5, window functions, transactions
-                    const { NativeSqliteAdapter } = await import("./adapters/sqlite-native/index.js");
-                    const adapter = new NativeSqliteAdapter();
-                    await server.registerAdapter(adapter, dbConfig);
-                }
-                else {
-                    // Use sql.js WASM adapter (default)
-                    const { SqliteAdapter } = await import("./adapters/sqlite/index.js");
-                    const adapter = new SqliteAdapter();
-                    await server.registerAdapter(adapter, dbConfig);
-                }
-            }
-            // TODO: Add other database adapters as they are implemented
-            // else if (dbConfig.type === 'postgresql') { ... }
-        }
-        if (config.databases.length === 0) {
-            console.error("Warning: No databases configured. Use --sqlite, --postgresql, etc. or set DATABASE_URI");
+  try {
+    const envConfig = loadEnvConfig();
+    const cliConfig = parseArgs();
+    const config = {
+      ...DEFAULT_CONFIG,
+      ...envConfig,
+      ...cliConfig,
+      databases: [
+        ...envConfig.databases ?? [],
+        ...cliConfig.databases ?? []
+      ]
+    };
+    const server = createServer(config);
+    process.on("SIGINT", () => {
+      void server.shutdown().then(() => {
+        process.exit(0);
+      });
+    });
+    process.on("SIGTERM", () => {
+      void server.shutdown().then(() => {
+        process.exit(0);
+      });
+    });
+    for (const dbConfig of config.databases) {
+      if (dbConfig.type === "sqlite") {
+        const options = dbConfig.options;
+        if (options?.backend === "better-sqlite3") {
+          const { NativeSqliteAdapter } = await import('./sqlite-native-D2LH5ZT7.js');
+          const adapter = new NativeSqliteAdapter();
+          await server.registerAdapter(adapter, dbConfig);
+        } else {
+          const { SqliteAdapter } = await import('./sqlite-VHBA4ABV.js');
+          const adapter = new SqliteAdapter();
+          await server.registerAdapter(adapter, dbConfig);
         }
-        // Start server
-        await server.start();
+      }
     }
-    catch (error) {
-        console.error("Fatal error:", error);
-        process.exit(1);
+    if (config.databases.length === 0) {
+      console.error(
+        "Warning: No databases configured. Use --sqlite or --sqlite-native, or set SQLITE_DATABASE"
+      );
     }
+    await server.start();
+  } catch (error) {
+    console.error("Fatal error:", error);
+    process.exit(1);
+  }
 }
-// Run
 main().catch(console.error);
-//# sourceMappingURL=cli.js.map