db-mcp 1.1.1 → 3.0.0

package/dist/chunk-Z2GFQU3G.js

@@ -1,363 +0,0 @@
-import { ConnectionError, formatHandlerError, ValidationError } from './chunk-4IA3DB5C.js';
-import { isToolEnabled } from './chunk-AOUL5SHS.js';
-import { ResourceTemplate } from '@modelcontextprotocol/sdk/server/mcp.js';
-import { z } from 'zod';
-
-// src/adapters/query-validation.ts
-var DANGEROUS_SQL_PATTERNS = [
-  /;\s*DROP\s+/i,
-  /;\s*DELETE\s+/i,
-  /;\s*TRUNCATE\s+/i,
-  /;\s*ALTER\s+/i,
-  /;\s*UNION\s+ALL\s+SELECT/i,
-  /;\s*UNION\s+SELECT/i,
-  /;\s*ATTACH\s+/i,
-  /;\s*DETACH\s+/i
-];
-var COMMENT_SQL_PATTERNS = [/--.*$/m, /\/\*[\s\S]*?\*\//];
-function stripSqlStringLiterals(sql) {
-  return sql.replace(/'(?:''|[^'])*'/g, "''");
-}
-var WRITE_PREFIXES = [
-  "INSERT",
-  "UPDATE",
-  "DELETE",
-  "DROP",
-  "CREATE",
-  "ALTER",
-  "TRUNCATE"
-];
-function validateQuery(sql, isReadOnly) {
-  const trimmedSql = sql.trim().toUpperCase();
-  if (isReadOnly) {
-    for (const prefix of WRITE_PREFIXES) {
-      if (trimmedSql.startsWith(prefix)) {
-        throw new ValidationError(
-          `Read-only mode: ${prefix} statements are not allowed`,
-          "DB_READ_ONLY_VIOLATION"
-        );
-      }
-    }
-  }
-  for (const pattern of DANGEROUS_SQL_PATTERNS) {
-    if (pattern.test(sql)) {
-      throw new ValidationError(
-        "Query contains potentially dangerous patterns",
-        "DB_DANGEROUS_PATTERN"
-      );
-    }
-  }
-  const sqlWithoutStrings = stripSqlStringLiterals(sql);
-  for (const pattern of COMMENT_SQL_PATTERNS) {
-    if (pattern.test(sqlWithoutStrings)) {
-      throw new ValidationError(
-        "Query contains potentially dangerous patterns",
-        "DB_DANGEROUS_PATTERN"
-      );
-    }
-  }
-}
-
-// src/adapters/registration/tools.ts
-function registerToolImpl(adapter, server, tool) {
-  const toolOptions = {
-    description: tool.description
-  };
-  if (tool.inputSchema !== void 0) {
-    const schema = tool.inputSchema;
-    if (typeof schema === "object" && schema !== null && "partial" in schema && typeof schema.partial === "function") {
-      toolOptions["inputSchema"] = schema.partial().passthrough();
-    } else {
-      toolOptions["inputSchema"] = schema;
-    }
-  }
-  if (tool.outputSchema !== void 0) {
-    toolOptions["outputSchema"] = tool.outputSchema;
-  }
-  if (tool.annotations) {
-    toolOptions["annotations"] = tool.annotations;
-  }
-  if (tool.icons) {
-    toolOptions["icons"] = tool.icons;
-  }
-  const hasOutputSchema = Boolean(tool.outputSchema);
-  server.registerTool(
-    tool.name,
-    toolOptions,
-    async (args, extra) => {
-      try {
-        const extraMeta = extra;
-        const progressToken = extraMeta?._meta?.progressToken;
-        const context = adapter.createContext(
-          void 0,
-          server.server,
-          progressToken
-        );
-        const result = await tool.handler(args, context);
-        if (hasOutputSchema) {
-          return {
-            content: [
-              {
-                type: "text",
-                text: JSON.stringify(result)
-              }
-            ],
-            structuredContent: result
-          };
-        }
-        return {
-          content: [
-            {
-              type: "text",
-              text: typeof result === "string" ? result : JSON.stringify(result)
-            }
-          ]
-        };
-      } catch (error) {
-        const structured = formatHandlerError(error);
-        if (hasOutputSchema) {
-          return {
-            content: [
-              {
-                type: "text",
-                text: JSON.stringify(structured, null, 2)
-              }
-            ],
-            structuredContent: structured,
-            isError: true
-          };
-        }
-        return {
-          content: [
-            {
-              type: "text",
-              text: JSON.stringify(structured, null, 2)
-            }
-          ],
-          isError: true
-        };
-      }
-    }
-  );
-}
-function registerResourceImpl(adapter, server, resource) {
-  const isTemplate = /\{[^}]+\}/.test(resource.uri);
-  if (isTemplate) {
-    const template = new ResourceTemplate(resource.uri, { list: void 0 });
-    server.registerResource(
-      resource.name,
-      template,
-      {
-        mimeType: resource.mimeType ?? "application/json",
-        description: resource.description,
-        ...resource.icons ? { icons: resource.icons } : {}
-      },
-      async (resourceUri, _variables) => {
-        const context = adapter.createContext();
-        const content = await resource.handler(resourceUri.toString(), context);
-        return {
-          contents: [
-            {
-              uri: resourceUri.toString(),
-              mimeType: resource.mimeType ?? "application/json",
-              text: typeof content === "string" ? content : JSON.stringify(content, null, 2)
-            }
-          ]
-        };
-      }
-    );
-  } else {
-    server.registerResource(
-      resource.name,
-      resource.uri,
-      {
-        mimeType: resource.mimeType ?? "application/json",
-        description: resource.description,
-        ...resource.icons ? { icons: resource.icons } : {}
-      },
-      async (resourceUri) => {
-        const context = adapter.createContext();
-        const content = await resource.handler(resourceUri.toString(), context);
-        return {
-          contents: [
-            {
-              uri: resourceUri.toString(),
-              mimeType: resource.mimeType ?? "application/json",
-              text: typeof content === "string" ? content : JSON.stringify(content, null, 2)
-            }
-          ]
-        };
-      }
-    );
-  }
-}
-function buildArgsSchema(args) {
-  if (!args || args.length === 0) return void 0;
-  const hasRequired = args.some((a) => a.required === true);
-  if (!hasRequired) return void 0;
-  const schema = {};
-  for (const arg of args) {
-    const field = z.string().describe(arg.description);
-    schema[arg.name] = arg.required ? field : field.optional();
-  }
-  return schema;
-}
-function registerPromptImpl(adapter, server, prompt) {
-  const argsSchema = buildArgsSchema(prompt.arguments);
-  const iconOpts = prompt.icons ? { icons: prompt.icons } : {};
-  const handleResult = async (args) => {
-    const context = adapter.createContext();
-    const safeArgs = args ?? {};
-    const result = await prompt.handler(safeArgs, context);
-    const messages = Array.isArray(result) ? result : [
-      {
-        role: "assistant",
-        content: {
-          type: "text",
-          text: typeof result === "string" ? result : JSON.stringify(result)
-        }
-      }
-    ];
-    return { messages };
-  };
-  if (argsSchema) {
-    server.registerPrompt(
-      prompt.name,
-      { description: prompt.description, argsSchema, ...iconOpts },
-      async (args) => handleResult(args)
-    );
-  } else {
-    server.registerPrompt(
-      prompt.name,
-      { description: prompt.description, ...iconOpts },
-      async (args) => handleResult(args)
-    );
-  }
-}
-
-// src/adapters/database-adapter.ts
-var DatabaseAdapter = class {
-  /** Connection status */
-  connected = false;
-  /** Database configuration */
-  config = null;
-  /**
-   * Check if connected to the database
-   */
-  isConnected() {
-    return this.connected;
-  }
-  /**
-   * Register tools with the MCP server
-   * @param server - MCP server instance
-   * @param filterConfig - Tool filter configuration
-   */
-  registerTools(server, filterConfig) {
-    const tools = this.getToolDefinitions();
-    for (const tool of tools) {
-      if (!isToolEnabled(tool, filterConfig)) {
-        continue;
-      }
-      this.registerTool(server, tool);
-    }
-  }
-  /**
-   * Register a single tool with the MCP server.
-   * Uses modern registerTool() API for MCP 2025-11-25 compliance.
-   * Subclasses may override for custom behavior.
-   */
-  registerTool(server, tool) {
-    registerToolImpl(this, server, tool);
-  }
-  /**
-   * Register resources with the MCP server
-   */
-  registerResources(server) {
-    const resources = this.getResourceDefinitions();
-    for (const resource of resources) {
-      this.registerResource(server, resource);
-    }
-  }
-  /**
-   * Register a single resource with the MCP server.
-   * Handles both static resources and URI templates.
-   * Subclasses may override for custom behavior.
-   */
-  registerResource(server, resource) {
-    registerResourceImpl(this, server, resource);
-  }
-  /**
-   * Register prompts with the MCP server
-   */
-  registerPrompts(server) {
-    const prompts = this.getPromptDefinitions();
-    for (const prompt of prompts) {
-      this.registerPrompt(server, prompt);
-    }
-  }
-  /**
-   * Register a single prompt with the MCP server.
-   * Subclasses may override for custom behavior.
-   */
-  registerPrompt(server, prompt) {
-    registerPromptImpl(this, server, prompt);
-  }
-  // ===========================================================================
-  // Utility Methods
-  // ===========================================================================
-  /**
-   * Validate query for safety (SQL injection prevention)
-   * @param sql - SQL query to validate
-   * @param isReadOnly - Whether to enforce read-only restrictions
-   */
-  validateQuery(sql, isReadOnly) {
-    validateQuery(sql, isReadOnly);
-  }
-  /**
-   * Create a request context for tool execution
-   * @param requestId Optional request ID for tracing
-   * @param server Optional MCP Server instance for progress notifications
-   * @param progressToken Optional progress token from client request _meta
-   */
-  createContext(requestId, server, progressToken) {
-    const context = {
-      timestamp: /* @__PURE__ */ new Date(),
-      requestId: requestId ?? crypto.randomUUID()
-    };
-    if (server !== void 0) {
-      context.server = server;
-    }
-    if (progressToken !== void 0) {
-      context.progressToken = progressToken;
-    }
-    return context;
-  }
-  /**
-   * Ensure the adapter is connected to the database.
-   * Throws ConnectionError if not connected.
-   * Subclasses may override to add additional checks (e.g., db instance null).
-   */
-  ensureConnected() {
-    if (!this.connected) {
-      throw new ConnectionError(
-        "Not connected to database",
-        "DB_NOT_CONNECTED"
-      );
-    }
-  }
-  /**
-   * Get adapter info for logging/debugging
-   */
-  getInfo() {
-    return {
-      type: this.type,
-      name: this.name,
-      version: this.version,
-      connected: this.connected,
-      capabilities: this.getCapabilities(),
-      toolGroups: this.getSupportedToolGroups()
-    };
-  }
-};
-
-export { DatabaseAdapter };

package/dist/worker-script.d.ts

@@ -1,2 +0,0 @@
-
-export {  }

package/dist/worker-script.js

@@ -1,126 +0,0 @@
-import { workerData, parentPort } from 'worker_threads';
-import vm from 'vm';
-
-// src/codemode/worker-script.ts
-function buildSqliteProxy(bindings, rpcPort) {
-  const pending = /* @__PURE__ */ new Map();
-  let nextId = 0;
-  rpcPort.on("message", (msg) => {
-    const p = pending.get(msg.id);
-    if (p) {
-      pending.delete(msg.id);
-      if (msg.error) {
-        p.reject(new Error(msg.error));
-      } else {
-        p.resolve(msg.result);
-      }
-    }
-  });
-  const sqlite = {};
-  const groupNames = [];
-  for (const [key, methods] of Object.entries(bindings)) {
-    if (key === "_topLevel") continue;
-    groupNames.push(key);
-    const groupApi = {};
-    for (const method of methods) {
-      if (method === "help") continue;
-      groupApi[method] = (...args) => new Promise((resolve, reject) => {
-        const id = nextId++;
-        pending.set(id, { resolve, reject });
-        rpcPort.postMessage({ id, group: key, method, args });
-      });
-    }
-    groupApi["help"] = () => ({
-      group: key,
-      methods: methods.filter((m) => m !== "help")
-    });
-    sqlite[key] = groupApi;
-  }
-  const topLevel = bindings["_topLevel"];
-  if (topLevel) {
-    for (const method of topLevel) {
-      if (method === "help") {
-        sqlite["help"] = () => ({
-          groups: groupNames
-        });
-      } else {
-        sqlite[method] = (...args) => new Promise((resolve, reject) => {
-          const id = nextId++;
-          pending.set(id, { resolve, reject });
-          rpcPort.postMessage({
-            id,
-            group: "_topLevel",
-            method,
-            args
-          });
-        });
-      }
-    }
-  }
-  if (sqlite["help"] === void 0) {
-    sqlite["help"] = () => ({
-      groups: groupNames
-    });
-  }
-  return sqlite;
-}
-async function executeInWorker() {
-  const data = workerData;
-  const { code, apiBindings, timeout, rpcPort } = data;
-  try {
-    rpcPort.ref();
-    const sqlite = buildSqliteProxy(apiBindings, rpcPort);
-    const sandbox = {
-      sqlite,
-      console: {
-        log: () => {
-        },
-        error: () => {
-        },
-        warn: () => {
-        },
-        info: () => {
-        },
-        debug: () => {
-        }
-      },
-      setTimeout: void 0,
-      setInterval: void 0,
-      setImmediate: void 0,
-      process: void 0,
-      require: void 0,
-      __dirname: void 0,
-      __filename: void 0,
-      globalThis: void 0,
-      global: void 0
-    };
-    const context = vm.createContext(sandbox, {
-      name: "worker-sandbox"
-    });
-    const wrappedCode = `(async () => { ${code} })()`;
-    const script = new vm.Script(wrappedCode, {
-      filename: "user-code.js"
-    });
-    const result = await script.runInContext(context, {
-      timeout,
-      displayErrors: true
-    });
-    rpcPort.unref();
-    rpcPort.close();
-    const response = {
-      success: true,
-      result
-    };
-    parentPort?.postMessage(response);
-  } catch (error) {
-    rpcPort.unref();
-    rpcPort.close();
-    const response = {
-      success: false,
-      error: error instanceof Error ? error.message : String(error),
-      stack: error instanceof Error ? error.stack : void 0
-    };
-    parentPort?.postMessage(response);
-  }
-}
-void executeInWorker();

package/playwright.config.ts

@@ -1,101 +0,0 @@
-import { defineConfig, devices } from "@playwright/test";
-
-export default defineConfig({
-  testDir: "./tests/e2e",
-  fullyParallel: false,
-  forbidOnly: !!process.env.CI,
-  retries: process.env.CI ? 2 : 0,
-  // MCP SDK McpServer only supports one active transport at a time.
-  // Parallel workers create competing SSE connections that steal each other's transport.
-  workers: 1,
-  reporter: "list",
-  use: {
-    trace: "on-first-retry",
-    // 60s timeout — allows slow operations (vector stats, code mode ETL)
-    // to complete without flaky timeouts from rate-limit backpressure
-    actionTimeout: 0,
-  },
-  timeout: 60_000,
-  projects: [
-    {
-      name: "wasm",
-      use: {
-        ...devices["Desktop Chrome"],
-        baseURL: "http://localhost:3000",
-      },
-      testIgnore: [
-        /native\./,
-        /auth\./,
-        /payloads-window\./,
-        /payloads-fts\./,
-        /payloads-transactions\./,
-        /payloads-spatialite\./,
-        /payloads-csv\./,
-        /transactions-nested\./,
-        /integration-workflows\./,
-        /codemode-introspection\./,
-      ],
-    },
-    {
-      name: "native",
-      use: {
-        ...devices["Desktop Chrome"],
-        baseURL: "http://localhost:3001",
-      },
-      testIgnore: [/wasm\./, /auth\./],
-      dependencies: ["wasm"],
-    },
-    {
-      name: "auth",
-      use: {
-        ...devices["Desktop Chrome"],
-        baseURL: "http://localhost:3003",
-      },
-      testMatch: /auth\./,
-      dependencies: ["native"],
-    },
-  ],
-  webServer: [
-    {
-      command:
-        "node dist/cli.js --transport http --port 3000 --sqlite ./test-server/test.db --tool-filter +all",
-      url: "http://localhost:3000/health",
-      reuseExistingServer: !process.env.CI,
-      timeout: 30000,
-      stdout: "pipe",
-      stderr: "pipe",
-      env: {
-        ...process.env,
-        MCP_RATE_LIMIT_MAX: "10000",
-        MCP_CODEMODE_RATE_LIMIT: "10000",
-      },
-    },
-    {
-      command:
-        "node dist/cli.js --transport http --port 3001 --sqlite-native ./test-server/test.db --csv --spatialite --tool-filter +all",
-      url: "http://localhost:3001/health",
-      reuseExistingServer: !process.env.CI,
-      timeout: 30000,
-      stdout: "pipe",
-      stderr: "pipe",
-      env: {
-        ...process.env,
-        MCP_RATE_LIMIT_MAX: "10000",
-        MCP_CODEMODE_RATE_LIMIT: "10000",
-        SPATIALITE_PATH:
-          "./extensions/mod_spatialite-5.1.0-win-amd64/mod_spatialite.dll",
-        CSV_EXTENSION_PATH: "./extensions/xsv0.dll",
-      },
-    },
-    {
-      command:
-        "node dist/cli.js --transport http --port 3003 --auth-token test-secret --sqlite ./test-server/test.db --tool-filter +all",
-      url: "http://localhost:3003/health",
-      reuseExistingServer: !process.env.CI,
-      timeout: 30000,
-      stdout: "pipe",
-      stderr: "pipe",
-      env: { ...process.env, MCP_RATE_LIMIT_MAX: "10000" },
-    },
-  ],
-});

package/scripts/generate-server-instructions.ts

@@ -1,111 +0,0 @@
-/**
- * Generates src/constants/server-instructions.ts from per-group markdown files.
- *
- * Reads server-instructions/*.md, escapes for template literals, and wraps them
- * in a TypeScript module with a slim INSTRUCTIONS constant and a HELP_CONTENT map.
- *
- * Usage: node scripts/generate-server-instructions.ts
- */
-
-import { readFileSync, readdirSync, writeFileSync } from "node:fs";
-import { dirname, resolve, basename } from "node:path";
-import { fileURLToPath } from "node:url";
-
-const __dirname = dirname(fileURLToPath(import.meta.url));
-const projectRoot = resolve(__dirname, "..");
-const constantsDir = resolve(projectRoot, "src/constants");
-const helpDir = resolve(constantsDir, "server-instructions");
-
-/**
- * Escape content for use inside a JS/TS template literal.
- * Handles: backslashes, backticks, and template expressions (${).
- */
-function escapeForTemplateLiteral(content: string): string {
-  return content
-    .replace(/\\/g, "\\\\")
-    .replace(/`/g, "\\`")
-    .replace(/\$\{/g, "\\${");
-}
-
-// Read overview (slim instructions field content)
-const overviewMd = readFileSync(
-  resolve(helpDir, "overview.md"),
-  "utf-8",
-).trim();
-const overviewEscaped = escapeForTemplateLiteral(overviewMd);
-
-// Read all help files (everything except overview.md)
-const helpFiles = readdirSync(helpDir)
-  .filter((f) => f.endsWith(".md") && f !== "overview.md")
-  .sort();
-
-const helpEntries: { key: string; content: string }[] = [];
-for (const file of helpFiles) {
-  const key = basename(file, ".md"); // "gotchas", "json", "stats", etc.
-  const content = readFileSync(resolve(helpDir, file), "utf-8").trim();
-  helpEntries.push({ key, content });
-}
-
-// Use backtick char for building string to avoid nesting issues
-const BT = "`";
-
-// Build the TypeScript file using string concatenation
-const lines: string[] = [];
-
-lines.push("/**");
-lines.push(" * Server instructions for db-mcp (SQLite MCP Server).");
-lines.push(" *");
-lines.push(
-  " * \u26a0\ufe0f  AUTO-GENERATED \u2014 DO NOT EDIT THIS FILE DIRECTLY",
-);
-lines.push(" *     Edit src/constants/server-instructions/*.md instead,");
-lines.push(" *     then run: npm run generate:instructions");
-lines.push(" *");
-lines.push(
-  " * Slim instructions are sent to MCP clients during initialization.",
-);
-lines.push(
-  " * Detailed help is available on-demand via sqlite://help resources.",
-);
-lines.push(" */");
-lines.push("");
-lines.push("/**");
-lines.push(" * Slim instructions for the MCP instructions field (~600 chars).");
-lines.push(
-  " * Points agents to sqlite://help resources for detailed reference.",
-);
-lines.push(" */");
-lines.push("export const INSTRUCTIONS = " + BT + overviewEscaped + BT + ";");
-lines.push("");
-lines.push("/**");
-lines.push(" * Help content keyed by group name.");
-lines.push(" * 'gotchas' is the always-available help (sqlite://help).");
-lines.push(" * Other keys are tool groups (sqlite://help/{group}).");
-lines.push(" */");
-lines.push(
-  "export const HELP_CONTENT: ReadonlyMap<string, string> = new Map([",
-);
-for (const { key, content } of helpEntries) {
-  const escaped = escapeForTemplateLiteral(content);
-  lines.push("  [" + JSON.stringify(key) + ", " + BT + escaped + BT + "],");
-}
-lines.push("]);");
-lines.push("");
-
-const tsContent = lines.join("\n");
-const tsPath = resolve(constantsDir, "server-instructions.ts");
-writeFileSync(tsPath, tsContent, "utf-8");
-
-process.stderr.write(
-  [
-    "",
-    "\u2705 Generated server-instructions.ts (" +
-      tsContent.length.toLocaleString() +
-      " bytes) from " +
-      (helpEntries.length + 1) +
-      " markdown files",
-    "   Overview: " + overviewMd.length.toLocaleString() + " chars",
-    "   Help entries: " + helpEntries.map((e) => e.key).join(", "),
-    "",
-  ].join("\n"),
-);