db-mcp 2.0.0 → 3.0.1

package/dist/worker-script.js

@@ -1,150 +0,0 @@
-import { transformAutoReturn } from './chunk-OKOVZ5QE.js';
-import { workerData, parentPort } from 'worker_threads';
-import vm from 'vm';
-
-function buildSqliteProxy(bindings, rpcPort) {
-  const pending = /* @__PURE__ */ new Map();
-  let nextId = 0;
-  rpcPort.on("message", (msg) => {
-    const p = pending.get(msg.id);
-    if (p) {
-      pending.delete(msg.id);
-      if (msg.error !== void 0) {
-        const err = new Error(msg.error || "Empty error message");
-        if (msg.errorDetails) {
-          Object.assign(err, msg.errorDetails);
-        }
-        p.reject(err);
-      } else {
-        p.resolve(msg.result);
-      }
-    }
-  });
-  const sqlite = {};
-  const groupNames = [];
-  for (const [key, methods] of Object.entries(bindings)) {
-    if (key === "_topLevel") continue;
-    groupNames.push(key);
-    const groupApi = {};
-    for (const method of methods) {
-      if (method === "help") continue;
-      groupApi[method] = (...args) => new Promise((resolve, reject) => {
-        const id = nextId++;
-        pending.set(id, { resolve, reject });
-        rpcPort.postMessage({ id, group: key, method, args });
-      });
-    }
-    groupApi["help"] = () => ({
-      group: key,
-      methods: methods.filter((m) => m !== "help")
-    });
-    sqlite[key] = groupApi;
-  }
-  const topLevel = bindings["_topLevel"];
-  if (topLevel) {
-    for (const method of topLevel) {
-      if (method === "help") {
-        sqlite["help"] = () => {
-          let totalMethods = 0;
-          for (const k of groupNames) {
-            totalMethods += (bindings[k] ?? []).filter(
-              (m) => m !== "help"
-            ).length;
-          }
-          return {
-            groups: groupNames,
-            totalMethods,
-            usage: "Use sqlite.<group>.help() for group details. Example: sqlite.core.help()"
-          };
-        };
-      } else {
-        sqlite[method] = (...args) => new Promise((resolve, reject) => {
-          const id = nextId++;
-          pending.set(id, { resolve, reject });
-          rpcPort.postMessage({
-            id,
-            group: "_topLevel",
-            method,
-            args
-          });
-        });
-      }
-    }
-  }
-  if (sqlite["help"] === void 0) {
-    sqlite["help"] = () => {
-      let totalMethods = 0;
-      for (const k of groupNames) {
-        totalMethods += (bindings[k] ?? []).filter(
-          (m) => m !== "help"
-        ).length;
-      }
-      return {
-        groups: groupNames,
-        totalMethods,
-        usage: "Use sqlite.<group>.help() for group details. Example: sqlite.core.help()"
-      };
-    };
-  }
-  return sqlite;
-}
-async function executeInWorker() {
-  const data = workerData;
-  const { code, apiBindings, timeout, rpcPort } = data;
-  try {
-    rpcPort.ref();
-    const sqlite = buildSqliteProxy(apiBindings, rpcPort);
-    const sandbox = {
-      sqlite,
-      console: {
-        log: () => {
-        },
-        error: () => {
-        },
-        warn: () => {
-        },
-        info: () => {
-        },
-        debug: () => {
-        }
-      },
-      setTimeout: void 0,
-      setInterval: void 0,
-      setImmediate: void 0,
-      process: void 0,
-      require: void 0,
-      __dirname: void 0,
-      __filename: void 0,
-      globalThis: void 0,
-      global: void 0
-    };
-    const context = vm.createContext(sandbox, {
-      name: "worker-sandbox"
-    });
-    const wrappedCode = `(async () => { ${transformAutoReturn(code)} })()`;
-    const script = new vm.Script(wrappedCode, {
-      filename: "user-code.js"
-    });
-    const result = await script.runInContext(context, {
-      timeout,
-      displayErrors: true
-    });
-    rpcPort.unref();
-    rpcPort.close();
-    const response = {
-      success: true,
-      result
-    };
-    parentPort?.postMessage(response);
-  } catch (error) {
-    rpcPort.unref();
-    rpcPort.close();
-    const response = {
-      success: false,
-      error: error instanceof Error ? error.message : String(error),
-      stack: error instanceof Error ? error.stack : void 0
-    };
-    parentPort?.postMessage(response);
-  }
-}
-void executeInWorker();

package/logs/.gitkeep

@@ -1 +0,0 @@
-

package/mcp-config-example.json

@@ -1,83 +0,0 @@
-{
-  "mcpServers": {
-    "db-mcp": {
-      "command": "docker",
-      "args": [
-        "run",
-        "--rm",
-        "-i",
-        "-v",
-        "./data:/app/data",
-        "-e",
-        "MCP_HOST",
-        "-e",
-        "LOG_LEVEL",
-        "-e",
-        "METADATA_CACHE_TTL_MS",
-        "-e",
-        "CODEMODE_ISOLATION",
-        "-e",
-        "MCP_RATE_LIMIT_MAX",
-        "-e",
-        "SQLITE_DATABASE",
-        "-e",
-        "DB_MCP_TOOL_FILTER",
-        "-e",
-        "CSV_EXTENSION_PATH",
-        "-e",
-        "SPATIALITE_PATH",
-        "-e",
-        "MCP_AUTH_TOKEN",
-        "-e",
-        "OAUTH_ENABLED",
-        "-e",
-        "OAUTH_ISSUER",
-        "-e",
-        "OAUTH_AUDIENCE",
-        "-e",
-        "OAUTH_JWKS_URI",
-        "-e",
-        "OAUTH_CLOCK_TOLERANCE",
-        "-e",
-        "AUDIT_BACKUP",
-        "-e",
-        "AUDIT_REDACT",
-        "-e",
-        "AUDIT_READS",
-        "-e",
-        "AUDIT_BACKUP_DATA",
-        "-e",
-        "AUDIT_LOG",
-        "writenotenow/db-mcp:latest",
-        "--sqlite-native",
-        "/app/data/my-database.db",
-        "--tool-filter",
-        "codemode",
-        "--audit-log",
-        "/tmp/db-mcp-logs/audit.jsonl"
-      ],
-      "env": {
-        "MCP_HOST": "0.0.0.0",
-        "LOG_LEVEL": "info",
-        "METADATA_CACHE_TTL_MS": "5000",
-        "CODEMODE_ISOLATION": "worker",
-        "MCP_RATE_LIMIT_MAX": "100",
-        "SQLITE_DATABASE": "",
-        "DB_MCP_TOOL_FILTER": "",
-        "CSV_EXTENSION_PATH": "",
-        "SPATIALITE_PATH": "",
-        "MCP_AUTH_TOKEN": "",
-        "OAUTH_ENABLED": "false",
-        "OAUTH_ISSUER": "",
-        "OAUTH_AUDIENCE": "",
-        "OAUTH_JWKS_URI": "",
-        "OAUTH_CLOCK_TOLERANCE": "60",
-        "AUDIT_BACKUP": "false",
-        "AUDIT_REDACT": "false",
-        "AUDIT_READS": "false",
-        "AUDIT_BACKUP_DATA": "false",
-        "AUDIT_LOG": ""
-      }
-    }
-  }
-}

package/playwright.config.ts

@@ -1,101 +0,0 @@
-import { defineConfig, devices } from "@playwright/test";
-
-export default defineConfig({
-  testDir: "./tests/e2e",
-  fullyParallel: false,
-  forbidOnly: !!process.env.CI,
-  retries: process.env.CI ? 2 : 0,
-  // MCP SDK McpServer only supports one active transport at a time.
-  // Parallel workers create competing SSE connections that steal each other's transport.
-  workers: 1,
-  reporter: [["list"], ["json", { outputFile: "playwright-results.json" }]],
-  use: {
-    trace: "on-first-retry",
-    // 60s timeout — allows slow operations (vector stats, code mode ETL)
-    // to complete without flaky timeouts from rate-limit backpressure
-    actionTimeout: 0,
-  },
-  timeout: 60_000,
-  projects: [
-    {
-      name: "wasm",
-      use: {
-        ...devices["Desktop Chrome"],
-        baseURL: "http://localhost:3000",
-      },
-      testIgnore: [
-        /native\./,
-        /auth\./,
-        /payloads-window\./,
-        /payloads-fts\./,
-        /payloads-transactions\./,
-        /payloads-spatialite\./,
-        /payloads-csv\./,
-        /transactions-nested\./,
-        /integration-workflows\./,
-        /codemode-introspection\./,
-      ],
-    },
-    {
-      name: "native",
-      use: {
-        ...devices["Desktop Chrome"],
-        baseURL: "http://localhost:3001",
-      },
-      testIgnore: [/wasm\./, /auth\./],
-      dependencies: ["wasm"],
-    },
-    {
-      name: "auth",
-      use: {
-        ...devices["Desktop Chrome"],
-        baseURL: "http://localhost:3003",
-      },
-      testMatch: /auth\./,
-      dependencies: ["native"],
-    },
-  ],
-  webServer: [
-    {
-      command:
-        "node dist/cli.js --transport http --port 3000 --sqlite ./test-server/test.db --tool-filter +all",
-      url: "http://localhost:3000/health",
-      reuseExistingServer: !process.env.CI,
-      timeout: 30000,
-      stdout: "pipe",
-      stderr: "pipe",
-      env: {
-        ...process.env,
-        MCP_RATE_LIMIT_MAX: "10000",
-        MCP_CODEMODE_RATE_LIMIT: "10000",
-      },
-    },
-    {
-      command:
-        "node dist/cli.js --transport http --port 3001 --sqlite-native ./test-server/test.db --csv --spatialite --tool-filter +all",
-      url: "http://localhost:3001/health",
-      reuseExistingServer: !process.env.CI,
-      timeout: 30000,
-      stdout: "pipe",
-      stderr: "pipe",
-      env: {
-        ...process.env,
-        MCP_RATE_LIMIT_MAX: "10000",
-        MCP_CODEMODE_RATE_LIMIT: "10000",
-        SPATIALITE_PATH:
-          "./extensions/mod_spatialite-5.1.0-win-amd64/mod_spatialite.dll",
-        CSV_EXTENSION_PATH: "./extensions/xsv0.dll",
-      },
-    },
-    {
-      command:
-        "node dist/cli.js --transport http --port 3003 --auth-token test-secret --sqlite ./test-server/test.db --tool-filter +all",
-      url: "http://localhost:3003/health",
-      reuseExistingServer: !process.env.CI,
-      timeout: 30000,
-      stdout: "pipe",
-      stderr: "pipe",
-      env: { ...process.env, MCP_RATE_LIMIT_MAX: "10000" },
-    },
-  ],
-});

package/scripts/generate-server-instructions.ts

@@ -1,111 +0,0 @@
-/**
- * Generates src/constants/server-instructions.ts from per-group markdown files.
- *
- * Reads server-instructions/*.md, escapes for template literals, and wraps them
- * in a TypeScript module with a slim INSTRUCTIONS constant and a HELP_CONTENT map.
- *
- * Usage: node scripts/generate-server-instructions.ts
- */
-
-import { readFileSync, readdirSync, writeFileSync } from "node:fs";
-import { dirname, resolve, basename } from "node:path";
-import { fileURLToPath } from "node:url";
-
-const __dirname = dirname(fileURLToPath(import.meta.url));
-const projectRoot = resolve(__dirname, "..");
-const constantsDir = resolve(projectRoot, "src/constants");
-const helpDir = resolve(constantsDir, "server-instructions");
-
-/**
- * Escape content for use inside a JS/TS template literal.
- * Handles: backslashes, backticks, and template expressions (${).
- */
-function escapeForTemplateLiteral(content: string): string {
-  return content
-    .replace(/\\/g, "\\\\")
-    .replace(/`/g, "\\`")
-    .replace(/\$\{/g, "\\${");
-}
-
-// Read overview (slim instructions field content)
-const overviewMd = readFileSync(
-  resolve(helpDir, "overview.md"),
-  "utf-8",
-).trim();
-const overviewEscaped = escapeForTemplateLiteral(overviewMd);
-
-// Read all help files (everything except overview.md)
-const helpFiles = readdirSync(helpDir)
-  .filter((f) => f.endsWith(".md") && f !== "overview.md")
-  .sort();
-
-const helpEntries: { key: string; content: string }[] = [];
-for (const file of helpFiles) {
-  const key = basename(file, ".md"); // "gotchas", "json", "stats", etc.
-  const content = readFileSync(resolve(helpDir, file), "utf-8").trim();
-  helpEntries.push({ key, content });
-}
-
-// Use backtick char for building string to avoid nesting issues
-const BT = "`";
-
-// Build the TypeScript file using string concatenation
-const lines: string[] = [];
-
-lines.push("/**");
-lines.push(" * Server instructions for db-mcp (SQLite MCP Server).");
-lines.push(" *");
-lines.push(
-  " * \u26a0\ufe0f  AUTO-GENERATED \u2014 DO NOT EDIT THIS FILE DIRECTLY",
-);
-lines.push(" *     Edit src/constants/server-instructions/*.md instead,");
-lines.push(" *     then run: npm run generate:instructions");
-lines.push(" *");
-lines.push(
-  " * Slim instructions are sent to MCP clients during initialization.",
-);
-lines.push(
-  " * Detailed help is available on-demand via sqlite://help resources.",
-);
-lines.push(" */");
-lines.push("");
-lines.push("/**");
-lines.push(" * Slim instructions for the MCP instructions field (~600 chars).");
-lines.push(
-  " * Points agents to sqlite://help resources for detailed reference.",
-);
-lines.push(" */");
-lines.push("export const INSTRUCTIONS = " + BT + overviewEscaped + BT + ";");
-lines.push("");
-lines.push("/**");
-lines.push(" * Help content keyed by group name.");
-lines.push(" * 'gotchas' is the always-available help (sqlite://help).");
-lines.push(" * Other keys are tool groups (sqlite://help/{group}).");
-lines.push(" */");
-lines.push(
-  "export const HELP_CONTENT: ReadonlyMap<string, string> = new Map([",
-);
-for (const { key, content } of helpEntries) {
-  const escaped = escapeForTemplateLiteral(content);
-  lines.push("  [" + JSON.stringify(key) + ", " + BT + escaped + BT + "],");
-}
-lines.push("]);");
-lines.push("");
-
-const tsContent = lines.join("\n");
-const tsPath = resolve(constantsDir, "server-instructions.ts");
-writeFileSync(tsPath, tsContent, "utf-8");
-
-process.stderr.write(
-  [
-    "",
-    "\u2705 Generated server-instructions.ts (" +
-      tsContent.length.toLocaleString() +
-      " bytes) from " +
-      (helpEntries.length + 1) +
-      " markdown files",
-    "   Overview: " + overviewMd.length.toLocaleString() + " chars",
-    "   Help entries: " + helpEntries.map((e) => e.key).join(", "),
-    "",
-  ].join("\n"),
-);

package/scripts/update-badges.ts

@@ -1,99 +0,0 @@
-import fs from "fs";
-import path from "path";
-import { fileURLToPath } from "url";
-
-const __filename = fileURLToPath(import.meta.url);
-const __dirname = path.dirname(__filename);
-const ROOT_DIR = path.resolve(__dirname, "..");
-
-function getBadgeColor(percentage: number): string {
-  if (percentage >= 95) return "brightgreen";
-  if (percentage >= 85) return "green";
-  if (percentage >= 75) return "yellowgreen";
-  if (percentage >= 65) return "yellow";
-  if (percentage >= 50) return "orange";
-  return "red";
-}
-
-function updateBadges() {
-  const summaryPath = path.join(ROOT_DIR, "coverage/coverage-summary.json");
-  const playwrightPath = path.join(ROOT_DIR, "playwright-results.json");
-
-  let linesPct = 0;
-  let coverageColor = "red";
-  let hasCoverage = false;
-
-  if (fs.existsSync(summaryPath)) {
-    const summary = JSON.parse(fs.readFileSync(summaryPath, "utf-8"));
-    linesPct = summary.total.lines.pct;
-    coverageColor = getBadgeColor(linesPct);
-    hasCoverage = true;
-  } else {
-    console.warn(`Coverage summary not found at ${summaryPath}`);
-  }
-
-  let e2ePassing = 0;
-  let e2eSkipped = 0;
-  let hasE2e = false;
-
-  if (fs.existsSync(playwrightPath)) {
-    const pw = JSON.parse(fs.readFileSync(playwrightPath, "utf-8"));
-    e2ePassing = pw.stats.expected || 0;
-    e2eSkipped = pw.stats.skipped || 0;
-    hasE2e = true;
-  } else {
-    console.warn(`Playwright results not found at ${playwrightPath}`);
-  }
-
-  // ![Coverage](https://img.shields.io/badge/Coverage-96.7%25-brightgreen.svg)
-  const covRegex =
-    /!\[Coverage\]\(https:\/\/img\.shields\.io\/badge\/Coverage-[0-9.]+.*?\.svg\)/g;
-  const newCovBadge = `![Coverage](https://img.shields.io/badge/Coverage-${linesPct}%25-${coverageColor}.svg)`;
-
-  // ![E2E](https://img.shields.io/badge/E2E-179%20tests%20%C2%B7%20224%20tools-blue.svg)
-  const e2eRegex =
-    /!\[E2E\]\(https:\/\/img\.shields\.io\/badge\/E2E-[a-zA-Z0-9%.-]+.*?\.svg\)/g;
-  const newE2eBadge = `![E2E](https://img.shields.io/badge/E2E-${e2ePassing}%20passing%20%C2%B7%20${e2eSkipped}%20skipped-blue.svg)`;
-
-  const filesToUpdate = ["README.md", "DOCKER_README.md"];
-
-  for (const file of filesToUpdate) {
-    const filePath = path.join(ROOT_DIR, file);
-    try {
-      let content = fs.readFileSync(filePath, "utf-8");
-      let changed = false;
-
-      if (hasCoverage) {
-        covRegex.lastIndex = 0;
-        if (covRegex.test(content)) {
-          covRegex.lastIndex = 0;
-          content = content.replace(covRegex, newCovBadge);
-          changed = true;
-          console.log(`Updated coverage badge in ${file} to ${linesPct}%`);
-        }
-      }
-
-      if (hasE2e) {
-        e2eRegex.lastIndex = 0;
-        if (e2eRegex.test(content)) {
-          e2eRegex.lastIndex = 0;
-          content = content.replace(e2eRegex, newE2eBadge);
-          changed = true;
-          console.log(
-            `Updated E2E badge in ${file} to ${e2ePassing} passing, ${e2eSkipped} skipped`,
-          );
-        }
-      }
-
-      if (changed) {
-        fs.writeFileSync(filePath, content, "utf-8");
-      } else {
-        console.log(`No badges found to update in ${file}.`);
-      }
-    } catch (err) {
-      console.warn(`Skipped updating ${file}: File not found or unreadable.`);
-    }
-  }
-}
-
-updateBadges();

package/server.json

@@ -1,54 +0,0 @@
-{
-  "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
-  "name": "io.github.neverinfamous/db-mcp",
-  "title": "db-mcp (SQLite MCP Server)",
-  "description": "SQLite MCP server with OAuth 2.1, HTTP/SSE, audit logging, 151 tools, and smart tool filtering",
-  "version": "2.0.0",
-  "packages": [
-    {
-      "registryType": "npm",
-      "identifier": "db-mcp",
-      "version": "2.0.0",
-      "transport": {
-        "type": "stdio"
-      }
-    },
-    {
-      "registryType": "oci",
-      "identifier": "docker.io/writenotenow/db-mcp:v2.0.0",
-      "transport": {
-        "type": "stdio"
-      }
-    }
-  ],
-  "keywords": [
-    "mcp",
-    "model-context-protocol",
-    "database",
-    "sqlite",
-    "sql",
-    "oauth",
-    "ai",
-    "llm",
-    "developer-tools",
-    "json",
-    "fts5",
-    "vector-search",
-    "geospatial",
-    "spatialite",
-    "statistical-analysis",
-    "audit-logging",
-    "token-estimation"
-  ],
-  "author": {
-    "name": "Chris LeRoux",
-    "email": "writenotenow@gmail.com"
-  },
-  "homepage": "https://github.com/neverinfamous/db-mcp",
-  "repository": {
-    "type": "git",
-    "url": "https://github.com/neverinfamous/db-mcp.git",
-    "source": "github"
-  },
-  "license": "MIT"
-}