db-read 0.1.0

package/.db-read.example.yml

@@ -0,0 +1,28 @@
+version: 1
+defaultEnvironment: dev
+defaults:
+  timeoutMs: 10000
+  maxRows: 1000
+  maxDocuments: 1000
+environments:
+  dev:
+    connections:
+      local_pg:
+        kind: postgres
+        uri: postgresql://readonly:readonly@localhost:5432/app
+      hosted_mysql:
+        kind: mysql
+        host: mysql.example.com
+        port: 3306
+        user: readonly
+        password: change-me
+        database: billing
+        ssl: true
+      local_mongo:
+        kind: mongodb
+        uri: mongodb://readonly:readonly@localhost:27017
+        database: analytics
+  staging:
+    connections: {}
+  prod:
+    connections: {}

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,81 @@
+# db-read
+
+`db-read` is a read-only MCP server for coding agents that need safe access to PostgreSQL, MySQL, and MongoDB. It supports both hosted and local databases through a git-ignored `.db-read.yml`.
+
+## Features
+
+- One MCP server for PostgreSQL, MySQL, and MongoDB
+- Environment-based config: `dev`, `staging`, `prod`
+- Local and hosted connection support via `uri` or explicit host settings
+- Read-only guards for SQL and MongoDB aggregation
+- MCP tools for listing connections, describing them, inspecting schema, and running read queries
+
+## Config
+
+Copy `.db-read.example.yml` to `.db-read.yml` and fill in your credentials.
+
+```yaml
+version: 1
+defaultEnvironment: dev
+defaults:
+  timeoutMs: 10000
+  maxRows: 1000
+  maxDocuments: 1000
+environments:
+  dev:
+    connections:
+      app_pg:
+        kind: postgres
+        uri: postgresql://readonly:secret@localhost:5432/app
+      billing_mysql:
+        kind: mysql
+        host: db.example.com
+        port: 3306
+        user: readonly
+        password: secret
+        database: billing
+        ssl: true
+      analytics_mongo:
+        kind: mongodb
+        uri: mongodb+srv://readonly:secret@cluster.example.mongodb.net
+        database: analytics
+```
+
+## CLI
+
+```bash
+npm run build
+node dist/cli.js validate-config --config .db-read.yml
+node dist/cli.js serve --env dev --config .db-read.yml
+```
+
+## MCP client examples
+
+Codex-style stdio config:
+
+```json
+{
+  "mcpServers": {
+    "db-read": {
+      "command": "node",
+      "args": [
+        "/absolute/path/to/db-read/dist/cli.js",
+        "serve",
+        "--env",
+        "dev",
+        "--config",
+        "/absolute/path/to/project/.db-read.yml"
+      ]
+    }
+  }
+}
+```
+
+Cursor and Claude Code can use the same `stdio` command/args pattern.
+
+## Safety model
+
+- Use least-privileged read-only DB credentials.
+- SQL tools reject multi-statement and non-read queries.
+- MongoDB tools expose only `find` and aggregation, and block `$out` and `$merge`.
+- Timeouts and result limits are enforced per request.

package/dist/adapters/base.d.ts

@@ -0,0 +1,10 @@
+import type { LoadedConnection, MongoQueryResult, SchemaOverview, SqlQueryResult } from "../lib/types.js";
+export interface DatabaseAdapter {
+    readonly connection: LoadedConnection;
+    describe(): Promise<Record<string, unknown>>;
+    getSchemaOverview(): Promise<SchemaOverview>;
+    runSqlQuery?(sql: string): Promise<SqlQueryResult>;
+    runMongoFind?(collection: string, filter: Record<string, unknown>, limit?: number): Promise<MongoQueryResult>;
+    runMongoAggregate?(collection: string, pipeline: unknown[], limit?: number): Promise<MongoQueryResult>;
+    close(): Promise<void>;
+}

package/dist/adapters/base.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=base.js.map

package/dist/adapters/base.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"base.js","sourceRoot":"","sources":["../../src/adapters/base.ts"],"names":[],"mappings":""}

package/dist/adapters/createAdapter.d.ts

@@ -0,0 +1,3 @@
+import type { LoadedConnection } from "../lib/types.js";
+import type { DatabaseAdapter } from "./base.js";
+export declare function createAdapter(connection: LoadedConnection): DatabaseAdapter;

package/dist/adapters/createAdapter.js

@@ -0,0 +1,14 @@
+import { MongoAdapter } from "./mongoAdapter.js";
+import { MysqlAdapter } from "./mysqlAdapter.js";
+import { PostgresAdapter } from "./postgresAdapter.js";
+export function createAdapter(connection) {
+    switch (connection.kind) {
+        case "postgres":
+            return new PostgresAdapter(connection);
+        case "mysql":
+            return new MysqlAdapter(connection);
+        case "mongodb":
+            return new MongoAdapter(connection);
+    }
+}
+//# sourceMappingURL=createAdapter.js.map

package/dist/adapters/createAdapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"createAdapter.js","sourceRoot":"","sources":["../../src/adapters/createAdapter.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjD,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjD,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAEvD,MAAM,UAAU,aAAa,CAAC,UAA4B;IACxD,QAAQ,UAAU,CAAC,IAAI,EAAE,CAAC;QACxB,KAAK,UAAU;YACb,OAAO,IAAI,eAAe,CAAC,UAAU,CAAC,CAAC;QACzC,KAAK,OAAO;YACV,OAAO,IAAI,YAAY,CAAC,UAAU,CAAC,CAAC;QACtC,KAAK,SAAS;YACZ,OAAO,IAAI,YAAY,CAAC,UAAU,CAAC,CAAC;IACxC,CAAC;AACH,CAAC"}

package/dist/adapters/mongoAdapter.d.ts

@@ -0,0 +1,12 @@
+import type { LoadedConnection, MongoQueryResult, SchemaOverview } from "../lib/types.js";
+import type { DatabaseAdapter } from "./base.js";
+export declare class MongoAdapter implements DatabaseAdapter {
+    #private;
+    readonly connection: LoadedConnection;
+    constructor(connection: LoadedConnection);
+    describe(): Promise<Record<string, unknown>>;
+    getSchemaOverview(): Promise<SchemaOverview>;
+    runMongoFind(collection: string, filter: Record<string, unknown>, limit?: number): Promise<MongoQueryResult>;
+    runMongoAggregate(collection: string, pipeline: unknown[], limit?: number): Promise<MongoQueryResult>;
+    close(): Promise<void>;
+}

package/dist/adapters/mongoAdapter.js

@@ -0,0 +1,79 @@
+import { MongoClient } from "mongodb";
+import { buildMongoConnectionOptions } from "../config/loadConfig.js";
+import { ExecutionError } from "../lib/errors.js";
+import { assertSafeMongoCollection, assertSafeMongoPipeline } from "../lib/mongoGuard.js";
+export class MongoAdapter {
+    connection;
+    #client;
+    #databaseName;
+    constructor(connection) {
+        this.connection = connection;
+        const options = buildMongoConnectionOptions(connection);
+        this.#databaseName = options.database;
+        this.#client = new MongoClient(options.uri, options.options);
+    }
+    async describe() {
+        return {
+            connection: this.connection.name,
+            kind: this.connection.kind,
+            database: this.#databaseName,
+            host: this.connection.config.host ?? null
+        };
+    }
+    async getSchemaOverview() {
+        try {
+            const database = this.#client.db(this.#databaseName);
+            const collections = await database.listCollections({}, { nameOnly: true }).toArray();
+            return {
+                connection: this.connection.name,
+                kind: this.connection.kind,
+                summary: {
+                    database: this.#databaseName,
+                    collections: collections.map((collection) => collection.name)
+                }
+            };
+        }
+        catch (error) {
+            throw new ExecutionError(`MongoDB schema lookup failed: ${String(error)}`);
+        }
+    }
+    async runMongoFind(collection, filter, limit) {
+        assertSafeMongoCollection(collection);
+        try {
+            const database = this.#client.db(this.#databaseName);
+            const resolvedLimit = Math.min(limit ?? this.connection.defaults.maxDocuments, this.connection.defaults.maxDocuments);
+            const cursor = database.collection(collection).find(filter).limit(resolvedLimit + 1);
+            const documents = await cursor.toArray();
+            return {
+                documents: documents.slice(0, resolvedLimit),
+                count: Math.min(documents.length, resolvedLimit),
+                truncated: documents.length > resolvedLimit
+            };
+        }
+        catch (error) {
+            throw new ExecutionError(`MongoDB find failed: ${String(error)}`);
+        }
+    }
+    async runMongoAggregate(collection, pipeline, limit) {
+        assertSafeMongoCollection(collection);
+        assertSafeMongoPipeline(pipeline);
+        try {
+            const database = this.#client.db(this.#databaseName);
+            const resolvedLimit = Math.min(limit ?? this.connection.defaults.maxDocuments, this.connection.defaults.maxDocuments);
+            const stages = [...pipeline, { $limit: resolvedLimit + 1 }];
+            const documents = await database.collection(collection).aggregate(stages).toArray();
+            return {
+                documents: documents.slice(0, resolvedLimit),
+                count: Math.min(documents.length, resolvedLimit),
+                truncated: documents.length > resolvedLimit
+            };
+        }
+        catch (error) {
+            throw new ExecutionError(`MongoDB aggregate failed: ${String(error)}`);
+        }
+    }
+    async close() {
+        await this.#client.close();
+    }
+}
+//# sourceMappingURL=mongoAdapter.js.map

package/dist/adapters/mongoAdapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mongoAdapter.js","sourceRoot":"","sources":["../../src/adapters/mongoAdapter.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAiB,MAAM,SAAS,CAAC;AACrD,OAAO,EAAE,2BAA2B,EAAE,MAAM,yBAAyB,CAAC;AACtE,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,yBAAyB,EAAE,uBAAuB,EAAE,MAAM,sBAAsB,CAAC;AAI1F,MAAM,OAAO,YAAY;IACd,UAAU,CAAmB;IAC7B,OAAO,CAAc;IACrB,aAAa,CAAS;IAE/B,YAAY,UAA4B;QACtC,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,MAAM,OAAO,GAAG,2BAA2B,CAAC,UAAU,CAAC,CAAC;QACxD,IAAI,CAAC,aAAa,GAAG,OAAO,CAAC,QAAQ,CAAC;QACtC,IAAI,CAAC,OAAO,GAAG,IAAI,WAAW,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IAC/D,CAAC;IAED,KAAK,CAAC,QAAQ;QACZ,OAAO;YACL,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI;YAChC,IAAI,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI;YAC1B,QAAQ,EAAE,IAAI,CAAC,aAAa;YAC5B,IAAI,EAAE,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,IAAI,IAAI;SAC1C,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,iBAAiB;QACrB,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;YACrD,MAAM,WAAW,GAAG,MAAM,QAAQ,CAAC,eAAe,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;YACrF,OAAO;gBACL,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI;gBAChC,IAAI,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI;gBAC1B,OAAO,EAAE;oBACP,QAAQ,EAAE,IAAI,CAAC,aAAa;oBAC5B,WAAW,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC;iBAC9D;aACF,CAAC;QACJ,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,MAAM,IAAI,cAAc,CAAC,iCAAiC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC7E,CAAC;IACH,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,UAAkB,EAAE,MAA+B,EAAE,KAAc;QACpF,yBAAyB,CAAC,UAAU,CAAC,CAAC;QAEtC,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;YACrD,MAAM,aAAa,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,YAAY,EAAE,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;YACtH,MAAM,MAAM,GAAG,QAAQ,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,aAAa,GAAG,CAAC,CAAC,CAAC;YACrF,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,OAAO,EAAE,CAAC;YACzC,OAAO;gBACL,SAAS,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,aAAa,CAAmC;gBAC9E,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,aAAa,CAAC;gBAChD,SAAS,EAAE,SAAS,CAAC,MAAM,GAAG,aAAa;aAC5C,CAAC;QACJ,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,MAAM,IAAI,cAAc,CAAC,wBAAwB,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACpE,CAAC;IACH,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,UAAkB,EAAE,QAAmB,EAAE,KAAc;QAC7E,yBAAyB,CAAC,UAAU,CAAC,CAAC;QACtC,uBAAuB,CAAC,QAAQ,CAAC,CAAC;QAElC,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;YACrD,MAAM,aAAa,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,YAAY,EAAE,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;YACtH,MAAM,MAAM,GAAe,CAAC,GAAI,QAAuB,EAAE,EAAE,MAAM,EAAE,aAAa,GAAG,CAAC,EAAE,CAAC,CAAC;YACxF,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,CAAC;YACpF,OAAO;gBACL,SAAS,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,aAAa,CAAmC;gBAC9E,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,aAAa,CAAC;gBAChD,SAAS,EAAE,SAAS,CAAC,MAAM,GAAG,aAAa;aAC5C,CAAC;QACJ,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,MAAM,IAAI,cAAc,CAAC,6BAA6B,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACzE,CAAC;IACH,CAAC;IAED,KAAK,CAAC,KAAK;QACT,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;IAC7B,CAAC;CACF"}

package/dist/adapters/mysqlAdapter.d.ts

@@ -0,0 +1,11 @@
+import type { LoadedConnection, SchemaOverview, SqlQueryResult } from "../lib/types.js";
+import type { DatabaseAdapter } from "./base.js";
+export declare class MysqlAdapter implements DatabaseAdapter {
+    #private;
+    readonly connection: LoadedConnection;
+    constructor(connection: LoadedConnection);
+    describe(): Promise<Record<string, unknown>>;
+    getSchemaOverview(): Promise<SchemaOverview>;
+    runSqlQuery(sql: string): Promise<SqlQueryResult>;
+    close(): Promise<void>;
+}

package/dist/adapters/mysqlAdapter.js

@@ -0,0 +1,68 @@
+import mysql from "mysql2/promise";
+import { buildSqlConnectionOptions } from "../config/loadConfig.js";
+import { ExecutionError } from "../lib/errors.js";
+import { assertReadOnlySql } from "../lib/sqlGuard.js";
+export class MysqlAdapter {
+    connection;
+    #pool;
+    constructor(connection) {
+        this.connection = connection;
+        this.#pool = mysql.createPool({
+            ...buildSqlConnectionOptions(connection),
+            waitForConnections: true,
+            connectionLimit: 5,
+            queueLimit: 0
+        });
+    }
+    async describe() {
+        return {
+            connection: this.connection.name,
+            kind: this.connection.kind,
+            database: this.connection.config.database ?? null,
+            host: this.connection.config.host ?? null
+        };
+    }
+    async getSchemaOverview() {
+        const [rows] = await this.#pool.query(`
+        select table_schema, table_name
+        from information_schema.tables
+        where table_schema not in ('information_schema', 'mysql', 'performance_schema', 'sys')
+        order by table_schema, table_name
+        limit ?
+      `, [this.connection.defaults.maxRows]);
+        const grouped = new Map();
+        for (const row of rows) {
+            const schema = String(row.table_schema);
+            const table = String(row.table_name);
+            const tables = grouped.get(schema) ?? [];
+            tables.push(table);
+            grouped.set(schema, tables);
+        }
+        return {
+            connection: this.connection.name,
+            kind: this.connection.kind,
+            summary: Object.fromEntries(grouped)
+        };
+    }
+    async runSqlQuery(sql) {
+        assertReadOnlySql(sql);
+        const limitedSql = `select * from (${sql}) as db_read_subquery limit ${this.connection.defaults.maxRows + 1}`;
+        try {
+            const [rows, fields] = await this.#pool.query(limitedSql);
+            const limitedRows = rows.slice(0, this.connection.defaults.maxRows);
+            return {
+                columns: (fields ?? []).map((field) => field.name),
+                rows: limitedRows,
+                rowCount: limitedRows.length,
+                truncated: rows.length > this.connection.defaults.maxRows
+            };
+        }
+        catch (error) {
+            throw new ExecutionError(`MySQL query failed: ${String(error)}`);
+        }
+    }
+    async close() {
+        await this.#pool.end();
+    }
+}
+//# sourceMappingURL=mysqlAdapter.js.map

package/dist/adapters/mysqlAdapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mysqlAdapter.js","sourceRoot":"","sources":["../../src/adapters/mysqlAdapter.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,gBAAgB,CAAC;AACnC,OAAO,EAAE,yBAAyB,EAAE,MAAM,yBAAyB,CAAC;AACpE,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAIvD,MAAM,OAAO,YAAY;IACd,UAAU,CAAmB;IAC7B,KAAK,CAAa;IAE3B,YAAY,UAA4B;QACtC,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC,UAAU,CAAC;YAC5B,GAAG,yBAAyB,CAAC,UAAU,CAAC;YACxC,kBAAkB,EAAE,IAAI;YACxB,eAAe,EAAE,CAAC;YAClB,UAAU,EAAE,CAAC;SACd,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,QAAQ;QACZ,OAAO;YACL,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI;YAChC,IAAI,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI;YAC1B,QAAQ,EAAE,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,QAAQ,IAAI,IAAI;YACjD,IAAI,EAAE,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,IAAI,IAAI;SAC1C,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,iBAAiB;QACrB,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CACnC;;;;;;OAMC,EACD,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC,CACnC,CAAC;QAEF,MAAM,OAAO,GAAG,IAAI,GAAG,EAAoB,CAAC;QAE5C,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;YACxC,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;YACrC,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;YACzC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACnB,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC9B,CAAC;QAED,OAAO;YACL,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI;YAChC,IAAI,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI;YAC1B,OAAO,EAAE,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC;SACrC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,GAAW;QAC3B,iBAAiB,CAAC,GAAG,CAAC,CAAC;QACvB,MAAM,UAAU,GAAG,kBAAkB,GAAG,+BAA+B,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,OAAO,GAAG,CAAC,EAAE,CAAC;QAE9G,IAAI,CAAC;YACH,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CAAwB,UAAU,CAAC,CAAC;YACjF,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAmC,CAAC;YACtG,OAAO;gBACL,OAAO,EAAE,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC;gBAClD,IAAI,EAAE,WAAW;gBACjB,QAAQ,EAAE,WAAW,CAAC,MAAM;gBAC5B,SAAS,EAAE,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,OAAO;aAC1D,CAAC;QACJ,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,MAAM,IAAI,cAAc,CAAC,uBAAuB,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACnE,CAAC;IACH,CAAC;IAED,KAAK,CAAC,KAAK;QACT,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;IACzB,CAAC;CACF"}

package/dist/adapters/postgresAdapter.d.ts

@@ -0,0 +1,11 @@
+import type { LoadedConnection, SchemaOverview, SqlQueryResult } from "../lib/types.js";
+import type { DatabaseAdapter } from "./base.js";
+export declare class PostgresAdapter implements DatabaseAdapter {
+    #private;
+    readonly connection: LoadedConnection;
+    constructor(connection: LoadedConnection);
+    describe(): Promise<Record<string, unknown>>;
+    getSchemaOverview(): Promise<SchemaOverview>;
+    runSqlQuery(sql: string): Promise<SqlQueryResult>;
+    close(): Promise<void>;
+}

package/dist/adapters/postgresAdapter.js

@@ -0,0 +1,64 @@
+import pg from "pg";
+import { buildSqlConnectionOptions } from "../config/loadConfig.js";
+import { ExecutionError } from "../lib/errors.js";
+import { assertReadOnlySql } from "../lib/sqlGuard.js";
+export class PostgresAdapter {
+    connection;
+    #pool;
+    constructor(connection) {
+        this.connection = connection;
+        this.#pool = new pg.Pool(buildSqlConnectionOptions(connection));
+    }
+    async describe() {
+        return {
+            connection: this.connection.name,
+            kind: this.connection.kind,
+            database: this.connection.config.database ?? null,
+            host: this.connection.config.host ?? null
+        };
+    }
+    async getSchemaOverview() {
+        const sql = `
+      select table_schema, table_name
+      from information_schema.tables
+      where table_schema not in ('pg_catalog', 'information_schema')
+      order by table_schema, table_name
+      limit $1
+    `;
+        const result = await this.#pool.query(sql, [this.connection.defaults.maxRows]);
+        const grouped = new Map();
+        for (const row of result.rows) {
+            const schema = String(row.table_schema);
+            const table = String(row.table_name);
+            const tables = grouped.get(schema) ?? [];
+            tables.push(table);
+            grouped.set(schema, tables);
+        }
+        return {
+            connection: this.connection.name,
+            kind: this.connection.kind,
+            summary: Object.fromEntries(grouped)
+        };
+    }
+    async runSqlQuery(sql) {
+        assertReadOnlySql(sql);
+        const limitedSql = `select * from (${sql}) as db_read_subquery limit ${this.connection.defaults.maxRows + 1}`;
+        try {
+            const result = await this.#pool.query(limitedSql);
+            const rows = result.rows.slice(0, this.connection.defaults.maxRows);
+            return {
+                columns: result.fields.map((field) => field.name),
+                rows,
+                rowCount: rows.length,
+                truncated: result.rows.length > this.connection.defaults.maxRows
+            };
+        }
+        catch (error) {
+            throw new ExecutionError(`PostgreSQL query failed: ${String(error)}`);
+        }
+    }
+    async close() {
+        await this.#pool.end();
+    }
+}
+//# sourceMappingURL=postgresAdapter.js.map

package/dist/adapters/postgresAdapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"postgresAdapter.js","sourceRoot":"","sources":["../../src/adapters/postgresAdapter.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,EAAE,yBAAyB,EAAE,MAAM,yBAAyB,CAAC;AACpE,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAIvD,MAAM,OAAO,eAAe;IACjB,UAAU,CAAmB;IAC7B,KAAK,CAAU;IAExB,YAAY,UAA4B;QACtC,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,KAAK,GAAG,IAAI,EAAE,CAAC,IAAI,CAAC,yBAAyB,CAAC,UAAU,CAAC,CAAC,CAAC;IAClE,CAAC;IAED,KAAK,CAAC,QAAQ;QACZ,OAAO;YACL,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI;YAChC,IAAI,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI;YAC1B,QAAQ,EAAE,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,QAAQ,IAAI,IAAI;YACjD,IAAI,EAAE,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,IAAI,IAAI;SAC1C,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,iBAAiB;QACrB,MAAM,GAAG,GAAG;;;;;;KAMX,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;QAC/E,MAAM,OAAO,GAAG,IAAI,GAAG,EAAoB,CAAC;QAE5C,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;YAC9B,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;YACxC,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;YACrC,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;YACzC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACnB,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC9B,CAAC;QAED,OAAO;YACL,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI;YAChC,IAAI,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI;YAC1B,OAAO,EAAE,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC;SACrC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,GAAW;QAC3B,iBAAiB,CAAC,GAAG,CAAC,CAAC;QACvB,MAAM,UAAU,GAAG,kBAAkB,GAAG,+BAA+B,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,OAAO,GAAG,CAAC,EAAE,CAAC;QAE9G,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;YAClD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YACpE,OAAO;gBACL,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAkB,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC;gBAC9D,IAAI;gBACJ,QAAQ,EAAE,IAAI,CAAC,MAAM;gBACrB,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,OAAO;aACjE,CAAC;QACJ,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,MAAM,IAAI,cAAc,CAAC,4BAA4B,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACxE,CAAC;IACH,CAAC;IAED,KAAK,CAAC,KAAK;QACT,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;IACzB,CAAC;CACF"}

package/dist/cli.d.ts

@@ -0,0 +1,2 @@
+#!/usr/bin/env node
+export {};

package/dist/cli.js

@@ -0,0 +1,81 @@
+#!/usr/bin/env node
+import process from "node:process";
+import { loadConfig } from "./config/loadConfig.js";
+import { ConfigError, ExecutionError, ValidationError } from "./lib/errors.js";
+import { startMcpServer } from "./mcp/server.js";
+async function main() {
+    const [command, ...args] = process.argv.slice(2);
+    switch (command) {
+        case "serve":
+            await serveCommand(args);
+            return;
+        case "validate-config":
+            await validateConfigCommand(args);
+            return;
+        default:
+            printUsage();
+            process.exitCode = 1;
+    }
+}
+async function serveCommand(args) {
+    const options = parseArgs(args);
+    const config = await loadConfig({
+        configPath: options.configPath,
+        environment: options.environment,
+        connectionNames: options.connections
+    });
+    await startMcpServer(config);
+}
+async function validateConfigCommand(args) {
+    const options = parseArgs(args);
+    const config = await loadConfig({
+        configPath: options.configPath,
+        environment: options.environment,
+        connectionNames: options.connections
+    });
+    process.stdout.write(`${JSON.stringify({
+        ok: true,
+        environment: config.activeEnvironment.name,
+        connectionCount: config.activeEnvironment.connections.size
+    }, null, 2)}\n`);
+}
+function parseArgs(args) {
+    let configPath = ".db-read.yml";
+    let environment;
+    let connections;
+    for (let index = 0; index < args.length; index += 1) {
+        const arg = args[index];
+        const next = args[index + 1];
+        if (arg === "--config" && next) {
+            configPath = next;
+            index += 1;
+            continue;
+        }
+        if (arg === "--env" && next) {
+            environment = next;
+            index += 1;
+            continue;
+        }
+        if (arg === "--connections" && next) {
+            connections = next.split(",").map((value) => value.trim()).filter(Boolean);
+            index += 1;
+            continue;
+        }
+    }
+    return { configPath, environment, connections };
+}
+function printUsage() {
+    process.stderr.write([
+        "Usage:",
+        "  db-read serve --env <environment> [--config .db-read.yml] [--connections a,b,c]",
+        "  db-read validate-config [--env <environment>] [--config .db-read.yml] [--connections a,b,c]"
+    ].join("\n") + "\n");
+}
+main().catch((error) => {
+    const message = error instanceof ConfigError || error instanceof ValidationError || error instanceof ExecutionError
+        ? error.message
+        : String(error);
+    process.stderr.write(`${message}\n`);
+    process.exitCode = 1;
+});
+//# sourceMappingURL=cli.js.map

package/dist/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AACA,OAAO,OAAO,MAAM,cAAc,CAAC;AACnC,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACpD,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAC/E,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAEjD,KAAK,UAAU,IAAI;IACjB,MAAM,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAEjD,QAAQ,OAAO,EAAE,CAAC;QAChB,KAAK,OAAO;YACV,MAAM,YAAY,CAAC,IAAI,CAAC,CAAC;YACzB,OAAO;QACT,KAAK,iBAAiB;YACpB,MAAM,qBAAqB,CAAC,IAAI,CAAC,CAAC;YAClC,OAAO;QACT;YACE,UAAU,EAAE,CAAC;YACb,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;IACzB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,IAAc;IACxC,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAChC,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC;QAC9B,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,eAAe,EAAE,OAAO,CAAC,WAAW;KACrC,CAAC,CAAC;IAEH,MAAM,cAAc,CAAC,MAAM,CAAC,CAAC;AAC/B,CAAC;AAED,KAAK,UAAU,qBAAqB,CAAC,IAAc;IACjD,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAChC,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC;QAC9B,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,eAAe,EAAE,OAAO,CAAC,WAAW;KACrC,CAAC,CAAC;IAEH,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,GAAG,IAAI,CAAC,SAAS,CAAC;QAChB,EAAE,EAAE,IAAI;QACR,WAAW,EAAE,MAAM,CAAC,iBAAiB,CAAC,IAAI;QAC1C,eAAe,EAAE,MAAM,CAAC,iBAAiB,CAAC,WAAW,CAAC,IAAI;KAC3D,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAChB,CAAC;AACJ,CAAC;AAED,SAAS,SAAS,CAAC,IAAc;IAK/B,IAAI,UAAU,GAAG,cAAc,CAAC;IAChC,IAAI,WAA+B,CAAC;IACpC,IAAI,WAAiC,CAAC;IAEtC,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACpD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;QACxB,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;QAE7B,IAAI,GAAG,KAAK,UAAU,IAAI,IAAI,EAAE,CAAC;YAC/B,UAAU,GAAG,IAAI,CAAC;YAClB,KAAK,IAAI,CAAC,CAAC;YACX,SAAS;QACX,CAAC;QAED,IAAI,GAAG,KAAK,OAAO,IAAI,IAAI,EAAE,CAAC;YAC5B,WAAW,GAAG,IAAI,CAAC;YACnB,KAAK,IAAI,CAAC,CAAC;YACX,SAAS;QACX,CAAC;QAED,IAAI,GAAG,KAAK,eAAe,IAAI,IAAI,EAAE,CAAC;YACpC,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YAC3E,KAAK,IAAI,CAAC,CAAC;YACX,SAAS;QACX,CAAC;IACH,CAAC;IAED,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,WAAW,EAAE,CAAC;AAClD,CAAC;AAED,SAAS,UAAU;IACjB,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB;QACE,QAAQ;QACR,mFAAmF;QACnF,+FAA+F;KAChG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CACpB,CAAC;AACJ,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;IAC9B,MAAM,OAAO,GAAG,KAAK,YAAY,WAAW,IAAI,KAAK,YAAY,eAAe,IAAI,KAAK,YAAY,cAAc;QACjH,CAAC,CAAC,KAAK,CAAC,OAAO;QACf,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAClB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,OAAO,IAAI,CAAC,CAAC;IACrC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;AACvB,CAAC,CAAC,CAAC"}

package/dist/config/loadConfig.d.ts

@@ -0,0 +1,20 @@
+import type { ConfigDefaults, LoadedConnection, LoadedEnvironment } from "../lib/types.js";
+export interface LoadConfigOptions {
+    configPath: string;
+    environment?: string;
+    connectionNames?: string[];
+}
+export interface LoadedConfig {
+    configPath: string;
+    defaults: ConfigDefaults;
+    activeEnvironment: LoadedEnvironment;
+    environments: string[];
+}
+export declare function loadConfig(options: LoadConfigOptions): Promise<LoadedConfig>;
+export declare function maskConnection(connection: LoadedConnection): Record<string, unknown>;
+export declare function buildSqlConnectionOptions(connection: LoadedConnection): Record<string, unknown>;
+export declare function buildMongoConnectionOptions(connection: LoadedConnection): {
+    uri: string;
+    database: string;
+    options: Record<string, unknown>;
+};

package/dist/config/loadConfig.js

@@ -0,0 +1,158 @@
+import { readFile } from "node:fs/promises";
+import path from "node:path";
+import { parse } from "yaml";
+import { z } from "zod";
+import { ConfigError } from "../lib/errors.js";
+const DEFAULTS = {
+    timeoutMs: 10_000,
+    maxRows: 1_000,
+    maxDocuments: 1_000
+};
+const baseConnectionSchema = z.object({
+    kind: z.enum(["postgres", "mysql", "mongodb"]),
+    uri: z.string().min(1).optional(),
+    host: z.string().min(1).optional(),
+    port: z.number().int().positive().optional(),
+    user: z.string().min(1).optional(),
+    password: z.string().min(1).optional(),
+    database: z.string().min(1).optional(),
+    ssl: z.boolean().optional(),
+    options: z.record(z.string(), z.union([z.string(), z.number(), z.boolean()])).optional()
+});
+const configSchema = z.object({
+    version: z.literal(1),
+    defaultEnvironment: z.string().min(1).optional(),
+    defaults: z.object({
+        timeoutMs: z.number().int().positive().optional(),
+        maxRows: z.number().int().positive().optional(),
+        maxDocuments: z.number().int().positive().optional()
+    }).optional(),
+    environments: z.record(z.string(), z.object({
+        connections: z.record(z.string(), baseConnectionSchema)
+    }))
+});
+export async function loadConfig(options) {
+    const resolvedPath = path.resolve(options.configPath);
+    const raw = await readFile(resolvedPath, "utf8").catch((error) => {
+        throw new ConfigError(`Unable to read config file at ${resolvedPath}: ${String(error)}`);
+    });
+    const parsed = parse(raw);
+    const config = configSchema.safeParse(parsed);
+    if (!config.success) {
+        throw new ConfigError(`Invalid config file: ${config.error.message}`);
+    }
+    const defaults = {
+        ...DEFAULTS,
+        ...config.data.defaults
+    };
+    const environmentName = options.environment ?? config.data.defaultEnvironment ?? firstEnvironmentName(config.data);
+    const envConfig = config.data.environments[environmentName];
+    if (!envConfig) {
+        throw new ConfigError(`Environment '${environmentName}' was not found in ${resolvedPath}.`);
+    }
+    const requestedNames = options.connectionNames?.length ? new Set(options.connectionNames) : null;
+    const connections = new Map();
+    for (const [name, connection] of Object.entries(envConfig.connections)) {
+        if (requestedNames && !requestedNames.has(name)) {
+            continue;
+        }
+        validateConnectionShape(name, connection);
+        connections.set(name, {
+            name,
+            environment: environmentName,
+            kind: connection.kind,
+            config: connection,
+            defaults
+        });
+    }
+    if (requestedNames) {
+        for (const name of requestedNames) {
+            if (!connections.has(name)) {
+                throw new ConfigError(`Connection '${name}' was not found in environment '${environmentName}'.`);
+            }
+        }
+    }
+    return {
+        configPath: resolvedPath,
+        defaults,
+        activeEnvironment: {
+            name: environmentName,
+            connections
+        },
+        environments: Object.keys(config.data.environments)
+    };
+}
+function firstEnvironmentName(config) {
+    const name = Object.keys(config.environments)[0];
+    if (!name) {
+        throw new ConfigError("At least one environment is required.");
+    }
+    return name;
+}
+function validateConnectionShape(name, connection) {
+    const hasUri = Boolean(connection.uri);
+    const hasHostShape = Boolean(connection.host && connection.user && connection.database);
+    if (!hasUri && !hasHostShape) {
+        throw new ConfigError(`Connection '${name}' must define either 'uri' or host/user/database fields.`);
+    }
+    if (connection.kind === "mongodb" && !connection.database) {
+        throw new ConfigError(`MongoDB connection '${name}' requires 'database'.`);
+    }
+}
+export function maskConnection(connection) {
+    return {
+        name: connection.name,
+        environment: connection.environment,
+        kind: connection.kind,
+        database: connection.config.database ?? null,
+        host: connection.config.host ?? null,
+        hasUri: Boolean(connection.config.uri),
+        ssl: connection.config.ssl ?? false
+    };
+}
+export function buildSqlConnectionOptions(connection) {
+    const options = { ...(connection.config.options ?? {}) };
+    if (connection.config.uri) {
+        return {
+            connectionString: connection.config.uri,
+            ssl: connection.config.ssl ? { rejectUnauthorized: false } : undefined,
+            ...options
+        };
+    }
+    return {
+        host: connection.config.host,
+        port: connection.config.port,
+        user: connection.config.user,
+        password: connection.config.password,
+        database: connection.config.database,
+        ssl: connection.config.ssl ? { rejectUnauthorized: false } : undefined,
+        ...options
+    };
+}
+export function buildMongoConnectionOptions(connection) {
+    const database = connection.config.database;
+    if (!database) {
+        throw new ConfigError(`MongoDB connection '${connection.name}' is missing 'database'.`);
+    }
+    if (connection.config.uri) {
+        return {
+            uri: connection.config.uri,
+            database,
+            options: { ...(connection.config.options ?? {}) }
+        };
+    }
+    const auth = connection.config.user
+        ? `${encodeURIComponent(connection.config.user)}:${encodeURIComponent(connection.config.password ?? "")}@`
+        : "";
+    const host = connection.config.host ?? "localhost";
+    const port = connection.config.port ?? 27017;
+    return {
+        uri: `${connection.config.uri ?? `mongodb://${auth}${host}:${port}`}`,
+        database,
+        options: {
+            ...(connection.config.ssl ? { tls: true } : {}),
+            ...(connection.config.options ?? {})
+        }
+    };
+}
+//# sourceMappingURL=loadConfig.js.map

package/dist/config/loadConfig.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"loadConfig.js","sourceRoot":"","sources":["../../src/config/loadConfig.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,KAAK,EAAE,MAAM,MAAM,CAAC;AAC7B,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAU/C,MAAM,QAAQ,GAAmB;IAC/B,SAAS,EAAE,MAAM;IACjB,OAAO,EAAE,KAAK;IACd,YAAY,EAAE,KAAK;CACpB,CAAC;AAEF,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IACpC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;IAC9C,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACjC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAClC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC5C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAClC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACtC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACtC,GAAG,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC3B,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CACzF,CAAC,CAAC;AAEH,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5B,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IACrB,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAChD,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC;QACjB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;QACjD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;QAC/C,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;KACrD,CAAC,CAAC,QAAQ,EAAE;IACb,YAAY,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC;QAC1C,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,oBAAoB,CAAC;KACxD,CAAC,CAAC;CACJ,CAAC,CAAC;AAeH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,OAA0B;IACzD,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACtD,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;QACxE,MAAM,IAAI,WAAW,CAAC,iCAAiC,YAAY,KAAK,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC3F,CAAC,CAAC,CAAC;IAEH,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAY,CAAC;IACrC,MAAM,MAAM,GAAG,YAAY,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IAE9C,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,WAAW,CAAC,wBAAwB,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;IACxE,CAAC;IAED,MAAM,QAAQ,GAAmB;QAC/B,GAAG,QAAQ;QACX,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ;KACxB,CAAC;IAEF,MAAM,eAAe,GAAG,OAAO,CAAC,WAAW,IAAI,MAAM,CAAC,IAAI,CAAC,kBAAkB,IAAI,oBAAoB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACnH,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,eAAe,CAAC,CAAC;IAE5D,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,MAAM,IAAI,WAAW,CAAC,gBAAgB,eAAe,sBAAsB,YAAY,GAAG,CAAC,CAAC;IAC9F,CAAC;IAED,MAAM,cAAc,GAAG,OAAO,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACjG,MAAM,WAAW,GAAG,IAAI,GAAG,EAA4B,CAAC;IAExD,KAAK,MAAM,CAAC,IAAI,EAAE,UAAU,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,WAAW,CAAC,EAAE,CAAC;QACvE,IAAI,cAAc,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAChD,SAAS;QACX,CAAC;QAED,uBAAuB,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QAC1C,WAAW,CAAC,GAAG,CAAC,IAAI,EAAE;YACpB,IAAI;YACJ,WAAW,EAAE,eAAe;YAC5B,IAAI,EAAE,UAAU,CAAC,IAAI;YACrB,MAAM,EAAE,UAAU;YAClB,QAAQ;SACT,CAAC,CAAC;IACL,CAAC;IAED,IAAI,cAAc,EAAE,CAAC;QACnB,KAAK,MAAM,IAAI,IAAI,cAAc,EAAE,CAAC;YAClC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC3B,MAAM,IAAI,WAAW,CAAC,eAAe,IAAI,mCAAmC,eAAe,IAAI,CAAC,CAAC;YACnG,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO;QACL,UAAU,EAAE,YAAY;QACxB,QAAQ;QACR,iBAAiB,EAAE;YACjB,IAAI,EAAE,eAAe;YACrB,WAAW;SACZ;QACD,YAAY,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC;KACpD,CAAC;AACJ,CAAC;AAED,SAAS,oBAAoB,CAAC,MAAoB;IAChD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;IACjD,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,WAAW,CAAC,uCAAuC,CAAC,CAAC;IACjE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,uBAAuB,CAAC,IAAY,EAAE,UAA4B;IACzE,MAAM,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;IACvC,MAAM,YAAY,GAAG,OAAO,CAAC,UAAU,CAAC,IAAI,IAAI,UAAU,CAAC,IAAI,IAAI,UAAU,CAAC,QAAQ,CAAC,CAAC;IAExF,IAAI,CAAC,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;QAC7B,MAAM,IAAI,WAAW,CAAC,eAAe,IAAI,0DAA0D,CAAC,CAAC;IACvG,CAAC;IAED,IAAI,UAAU,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QAC1D,MAAM,IAAI,WAAW,CAAC,uBAAuB,IAAI,wBAAwB,CAAC,CAAC;IAC7E,CAAC;AACH,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,UAA4B;IACzD,OAAO;QACL,IAAI,EAAE,UAAU,CAAC,IAAI;QACrB,WAAW,EAAE,UAAU,CAAC,WAAW;QACnC,IAAI,EAAE,UAAU,CAAC,IAAI;QACrB,QAAQ,EAAE,UAAU,CAAC,MAAM,CAAC,QAAQ,IAAI,IAAI;QAC5C,IAAI,EAAE,UAAU,CAAC,MAAM,CAAC,IAAI,IAAI,IAAI;QACpC,MAAM,EAAE,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC;QACtC,GAAG,EAAE,UAAU,CAAC,MAAM,CAAC,GAAG,IAAI,KAAK;KACpC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,UAA4B;IACpE,MAAM,OAAO,GAAG,EAAE,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,CAAC;IAEzD,IAAI,UAAU,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC;QAC1B,OAAO;YACL,gBAAgB,EAAE,UAAU,CAAC,MAAM,CAAC,GAAG;YACvC,GAAG,EAAE,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS;YACtE,GAAG,OAAO;SACX,CAAC;IACJ,CAAC;IAED,OAAO;QACL,IAAI,EAAE,UAAU,CAAC,MAAM,CAAC,IAAI;QAC5B,IAAI,EAAE,UAAU,CAAC,MAAM,CAAC,IAAI;QAC5B,IAAI,EAAE,UAAU,CAAC,MAAM,CAAC,IAAI;QAC5B,QAAQ,EAAE,UAAU,CAAC,MAAM,CAAC,QAAQ;QACpC,QAAQ,EAAE,UAAU,CAAC,MAAM,CAAC,QAAQ;QACpC,GAAG,EAAE,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS;QACtE,GAAG,OAAO;KACX,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,UAA4B;IAKtE,MAAM,QAAQ,GAAG,UAAU,CAAC,MAAM,CAAC,QAAQ,CAAC;IAC5C,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,WAAW,CAAC,uBAAuB,UAAU,CAAC,IAAI,0BAA0B,CAAC,CAAC;IAC1F,CAAC;IAED,IAAI,UAAU,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC;QAC1B,OAAO;YACL,GAAG,EAAE,UAAU,CAAC,MAAM,CAAC,GAAG;YAC1B,QAAQ;YACR,OAAO,EAAE,EAAE,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE;SAClD,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,UAAU,CAAC,MAAM,CAAC,IAAI;QACjC,CAAC,CAAC,GAAG,kBAAkB,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,kBAAkB,CAAC,UAAU,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC,GAAG;QAC1G,CAAC,CAAC,EAAE,CAAC;IACP,MAAM,IAAI,GAAG,UAAU,CAAC,MAAM,CAAC,IAAI,IAAI,WAAW,CAAC;IACnD,MAAM,IAAI,GAAG,UAAU,CAAC,MAAM,CAAC,IAAI,IAAI,KAAK,CAAC;IAE7C,OAAO;QACL,GAAG,EAAE,GAAG,UAAU,CAAC,MAAM,CAAC,GAAG,IAAI,aAAa,IAAI,GAAG,IAAI,IAAI,IAAI,EAAE,EAAE;QACrE,QAAQ;QACR,OAAO,EAAE;YACP,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/C,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC;SACrC;KACF,CAAC;AACJ,CAAC"}

package/dist/lib/errors.d.ts

@@ -0,0 +1,9 @@
+export declare class ConfigError extends Error {
+    constructor(message: string);
+}
+export declare class ValidationError extends Error {
+    constructor(message: string);
+}
+export declare class ExecutionError extends Error {
+    constructor(message: string);
+}

package/dist/lib/errors.js

@@ -0,0 +1,19 @@
+export class ConfigError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = "ConfigError";
+    }
+}
+export class ValidationError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = "ValidationError";
+    }
+}
+export class ExecutionError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = "ExecutionError";
+    }
+}
+//# sourceMappingURL=errors.js.map

package/dist/lib/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/lib/errors.ts"],"names":[],"mappings":"AAAA,MAAM,OAAO,WAAY,SAAQ,KAAK;IACpC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,aAAa,CAAC;IAC5B,CAAC;CACF;AAED,MAAM,OAAO,eAAgB,SAAQ,KAAK;IACxC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;IAChC,CAAC;CACF;AAED,MAAM,OAAO,cAAe,SAAQ,KAAK;IACvC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAC;IAC/B,CAAC;CACF"}

package/dist/lib/mongoGuard.d.ts

@@ -0,0 +1,2 @@
+export declare function assertSafeMongoCollection(name: string): void;
+export declare function assertSafeMongoPipeline(pipeline: unknown[]): void;

package/dist/lib/mongoGuard.js

@@ -0,0 +1,20 @@
+import { ValidationError } from "./errors.js";
+const FORBIDDEN_STAGES = new Set(["$out", "$merge"]);
+export function assertSafeMongoCollection(name) {
+    if (!name.trim()) {
+        throw new ValidationError("Collection name is required.");
+    }
+}
+export function assertSafeMongoPipeline(pipeline) {
+    for (const stage of pipeline) {
+        if (!stage || typeof stage !== "object" || Array.isArray(stage)) {
+            throw new ValidationError("Each pipeline stage must be an object.");
+        }
+        for (const key of Object.keys(stage)) {
+            if (FORBIDDEN_STAGES.has(key)) {
+                throw new ValidationError(`Aggregation stage ${key} is not allowed.`);
+            }
+        }
+    }
+}
+//# sourceMappingURL=mongoGuard.js.map

package/dist/lib/mongoGuard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mongoGuard.js","sourceRoot":"","sources":["../../src/lib/mongoGuard.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAE9C,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC;AAErD,MAAM,UAAU,yBAAyB,CAAC,IAAY;IACpD,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,eAAe,CAAC,8BAA8B,CAAC,CAAC;IAC5D,CAAC;AACH,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,QAAmB;IACzD,KAAK,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC;QAC7B,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAChE,MAAM,IAAI,eAAe,CAAC,wCAAwC,CAAC,CAAC;QACtE,CAAC;QAED,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,KAAgC,CAAC,EAAE,CAAC;YAChE,IAAI,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC9B,MAAM,IAAI,eAAe,CAAC,qBAAqB,GAAG,kBAAkB,CAAC,CAAC;YACxE,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/lib/sqlGuard.d.ts

@@ -0,0 +1 @@
+export declare function assertReadOnlySql(sql: string): void;

package/dist/lib/sqlGuard.js

@@ -0,0 +1,41 @@
+import { ValidationError } from "./errors.js";
+const READ_ONLY_KEYWORDS = new Set([
+    "select",
+    "with"
+]);
+const FORBIDDEN_SQL_PATTERNS = [
+    /\binsert\b/i,
+    /\bupdate\b/i,
+    /\bdelete\b/i,
+    /\bdrop\b/i,
+    /\btruncate\b/i,
+    /\balter\b/i,
+    /\bcreate\b/i,
+    /\bgrant\b/i,
+    /\brevoke\b/i,
+    /\bcopy\b/i,
+    /\bmerge\b/i,
+    /\bcall\b/i,
+    /\bdo\b/i,
+    /\bset\b/i,
+    /\block\b/i
+];
+export function assertReadOnlySql(sql) {
+    const trimmed = sql.trim();
+    if (!trimmed) {
+        throw new ValidationError("SQL query is required.");
+    }
+    if (trimmed.includes(";")) {
+        throw new ValidationError("Only a single SQL statement is allowed.");
+    }
+    const firstToken = trimmed.split(/\s+/u, 1)[0]?.toLowerCase();
+    if (!firstToken || !READ_ONLY_KEYWORDS.has(firstToken)) {
+        throw new ValidationError(`Only read-only SQL statements are allowed. Received: ${firstToken ?? "unknown"}`);
+    }
+    for (const pattern of FORBIDDEN_SQL_PATTERNS) {
+        if (pattern.test(trimmed)) {
+            throw new ValidationError("Write or session-modifying SQL is not allowed.");
+        }
+    }
+}
+//# sourceMappingURL=sqlGuard.js.map

package/dist/lib/sqlGuard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sqlGuard.js","sourceRoot":"","sources":["../../src/lib/sqlGuard.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAE9C,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC;IACjC,QAAQ;IACR,MAAM;CACP,CAAC,CAAC;AAEH,MAAM,sBAAsB,GAAG;IAC7B,aAAa;IACb,aAAa;IACb,aAAa;IACb,WAAW;IACX,eAAe;IACf,YAAY;IACZ,aAAa;IACb,YAAY;IACZ,aAAa;IACb,WAAW;IACX,YAAY;IACZ,WAAW;IACX,SAAS;IACT,UAAU;IACV,WAAW;CACZ,CAAC;AAEF,MAAM,UAAU,iBAAiB,CAAC,GAAW;IAC3C,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IAE3B,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,eAAe,CAAC,wBAAwB,CAAC,CAAC;IACtD,CAAC;IAED,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,eAAe,CAAC,yCAAyC,CAAC,CAAC;IACvE,CAAC;IAED,MAAM,UAAU,GAAG,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC;IAC9D,IAAI,CAAC,UAAU,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;QACvD,MAAM,IAAI,eAAe,CAAC,wDAAwD,UAAU,IAAI,SAAS,EAAE,CAAC,CAAC;IAC/G,CAAC;IAED,KAAK,MAAM,OAAO,IAAI,sBAAsB,EAAE,CAAC;QAC7C,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,eAAe,CAAC,gDAAgD,CAAC,CAAC;QAC9E,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/lib/types.d.ts

@@ -0,0 +1,64 @@
+export type ConnectionKind = "postgres" | "mysql" | "mongodb";
+export interface ConfigDefaults {
+    timeoutMs: number;
+    maxRows: number;
+    maxDocuments: number;
+}
+interface BaseConnectionConfig {
+    kind: ConnectionKind;
+    uri?: string;
+    host?: string;
+    port?: number;
+    user?: string;
+    password?: string;
+    database?: string;
+    ssl?: boolean;
+    options?: Record<string, string | number | boolean>;
+}
+export interface PostgresConnectionConfig extends BaseConnectionConfig {
+    kind: "postgres";
+}
+export interface MysqlConnectionConfig extends BaseConnectionConfig {
+    kind: "mysql";
+}
+export interface MongoConnectionConfig extends BaseConnectionConfig {
+    kind: "mongodb";
+}
+export type ConnectionConfig = PostgresConnectionConfig | MysqlConnectionConfig | MongoConnectionConfig;
+export interface EnvironmentConfig {
+    connections: Record<string, ConnectionConfig>;
+}
+export interface DbReadConfig {
+    version: 1;
+    defaultEnvironment?: string;
+    defaults?: Partial<ConfigDefaults>;
+    environments: Record<string, EnvironmentConfig>;
+}
+export interface LoadedConnection {
+    name: string;
+    environment: string;
+    kind: ConnectionKind;
+    config: ConnectionConfig;
+    defaults: ConfigDefaults;
+}
+export interface LoadedEnvironment {
+    name: string;
+    connections: Map<string, LoadedConnection>;
+}
+export interface SqlQueryResult {
+    columns: string[];
+    rows: Array<Record<string, unknown>>;
+    rowCount: number;
+    truncated: boolean;
+}
+export interface MongoQueryResult {
+    documents: Array<Record<string, unknown>>;
+    count: number;
+    truncated: boolean;
+}
+export interface SchemaOverview {
+    connection: string;
+    kind: ConnectionKind;
+    summary: Record<string, unknown>;
+}
+export {};

package/dist/lib/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/lib/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/lib/types.ts"],"names":[],"mappings":""}

package/dist/mcp/server.d.ts

@@ -0,0 +1,2 @@
+import type { LoadedConfig } from "../config/loadConfig.js";
+export declare function startMcpServer(config: LoadedConfig): Promise<void>;

package/dist/mcp/server.js

@@ -0,0 +1,172 @@
+import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
+import { z } from "zod";
+import { createAdapter } from "../adapters/createAdapter.js";
+import { maskConnection } from "../config/loadConfig.js";
+import { ExecutionError, ValidationError } from "../lib/errors.js";
+export async function startMcpServer(config) {
+    const server = new McpServer({
+        name: "db-read",
+        version: "0.1.0"
+    });
+    const adapters = new Map(Array.from(config.activeEnvironment.connections.values()).map((connection) => [connection.name, createAdapter(connection)]));
+    server.registerResource("connections", "dbread://connections", {
+        title: "Configured DB connections",
+        description: "Configured database connections for the active environment.",
+        mimeType: "application/json"
+    }, async () => ({
+        contents: [{
+                uri: "dbread://connections",
+                mimeType: "application/json",
+                text: JSON.stringify(Array.from(config.activeEnvironment.connections.values()).map(maskConnection), null, 2)
+            }]
+    }));
+    for (const [name, adapter] of adapters.entries()) {
+        server.registerResource(`${name}-schema`, `dbread://connections/${name}/schema`, {
+            title: `${name} schema overview`,
+            description: `High-level schema overview for ${name}.`,
+            mimeType: "application/json"
+        }, async () => {
+            const overview = await withAdapter(adapter, () => adapter.getSchemaOverview());
+            return {
+                contents: [{
+                        uri: `dbread://connections/${name}/schema`,
+                        mimeType: "application/json",
+                        text: JSON.stringify(overview, null, 2)
+                    }]
+            };
+        });
+    }
+    server.registerTool("list_connections", {
+        title: "List connections",
+        description: "List the configured database connections for the active environment."
+    }, async () => ({
+        content: [{
+                type: "text",
+                text: JSON.stringify(Array.from(config.activeEnvironment.connections.values()).map(maskConnection), null, 2)
+            }]
+    }));
+    server.registerTool("describe_connection", {
+        title: "Describe connection",
+        description: "Describe one configured database connection.",
+        inputSchema: {
+            name: z.string().min(1)
+        }
+    }, async ({ name }) => {
+        const adapter = requireAdapter(adapters, name);
+        const description = await withAdapter(adapter, () => adapter.describe());
+        return {
+            content: [{
+                    type: "text",
+                    text: JSON.stringify(description, null, 2)
+                }]
+        };
+    });
+    server.registerTool("get_schema_overview", {
+        title: "Get schema overview",
+        description: "Inspect the high-level schema for one configured connection.",
+        inputSchema: {
+            name: z.string().min(1)
+        }
+    }, async ({ name }) => {
+        const adapter = requireAdapter(adapters, name);
+        const overview = await withAdapter(adapter, () => adapter.getSchemaOverview());
+        return {
+            content: [{
+                    type: "text",
+                    text: JSON.stringify(overview, null, 2)
+                }]
+        };
+    });
+    server.registerTool("sql_query", {
+        title: "Run SQL query",
+        description: "Run a single read-only SQL query against a PostgreSQL or MySQL connection.",
+        inputSchema: {
+            name: z.string().min(1),
+            sql: z.string().min(1)
+        }
+    }, async ({ name, sql }) => {
+        const adapter = requireAdapter(adapters, name);
+        if (!adapter.runSqlQuery) {
+            throw new ValidationError(`Connection '${name}' does not support SQL queries.`);
+        }
+        const result = await withAdapter(adapter, () => adapter.runSqlQuery(sql));
+        return {
+            content: [{
+                    type: "text",
+                    text: JSON.stringify(result, null, 2)
+                }]
+        };
+    });
+    server.registerTool("mongo_find", {
+        title: "Run Mongo find",
+        description: "Run a read-only MongoDB find query against one collection.",
+        inputSchema: {
+            name: z.string().min(1),
+            collection: z.string().min(1),
+            filter: z.record(z.string(), z.unknown()).default({}),
+            limit: z.number().int().positive().optional()
+        }
+    }, async ({ name, collection, filter, limit }) => {
+        const adapter = requireAdapter(adapters, name);
+        if (!adapter.runMongoFind) {
+            throw new ValidationError(`Connection '${name}' does not support MongoDB find queries.`);
+        }
+        const result = await withAdapter(adapter, () => adapter.runMongoFind(collection, filter, limit));
+        return {
+            content: [{
+                    type: "text",
+                    text: JSON.stringify(result, null, 2)
+                }]
+        };
+    });
+    server.registerTool("mongo_aggregate", {
+        title: "Run Mongo aggregate",
+        description: "Run a read-only MongoDB aggregation pipeline.",
+        inputSchema: {
+            name: z.string().min(1),
+            collection: z.string().min(1),
+            pipeline: z.array(z.unknown()),
+            limit: z.number().int().positive().optional()
+        }
+    }, async ({ name, collection, pipeline, limit }) => {
+        const adapter = requireAdapter(adapters, name);
+        if (!adapter.runMongoAggregate) {
+            throw new ValidationError(`Connection '${name}' does not support MongoDB aggregation.`);
+        }
+        const result = await withAdapter(adapter, () => adapter.runMongoAggregate(collection, pipeline, limit));
+        return {
+            content: [{
+                    type: "text",
+                    text: JSON.stringify(result, null, 2)
+                }]
+        };
+    });
+    const transport = new StdioServerTransport();
+    await server.connect(transport);
+}
+function requireAdapter(adapters, name) {
+    const adapter = adapters.get(name);
+    if (!adapter) {
+        throw new ValidationError(`Unknown connection '${name}'.`);
+    }
+    return adapter;
+}
+async function withAdapter(adapter, fn) {
+    const timeoutMs = adapter.connection.defaults.timeoutMs;
+    let timeout;
+    try {
+        return await Promise.race([
+            fn(),
+            new Promise((_, reject) => {
+                timeout = setTimeout(() => reject(new ExecutionError(`Operation timed out after ${timeoutMs}ms.`)), timeoutMs);
+            })
+        ]);
+    }
+    finally {
+        if (timeout) {
+            clearTimeout(timeout);
+        }
+    }
+}
+//# sourceMappingURL=server.js.map

package/dist/mcp/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../../src/mcp/server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAC7D,OAAO,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAEzD,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAEnE,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,MAAoB;IACvD,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC;QAC3B,IAAI,EAAE,SAAS;QACf,OAAO,EAAE,OAAO;KACjB,CAAC,CAAC;IAEH,MAAM,QAAQ,GAAG,IAAI,GAAG,CACtB,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,aAAa,CAAC,UAAU,CAAC,CAAC,CAAC,CAC5H,CAAC;IAEF,MAAM,CAAC,gBAAgB,CACrB,aAAa,EACb,sBAAsB,EACtB;QACE,KAAK,EAAE,2BAA2B;QAClC,WAAW,EAAE,6DAA6D;QAC1E,QAAQ,EAAE,kBAAkB;KAC7B,EACD,KAAK,IAAI,EAAE,CAAC,CAAC;QACX,QAAQ,EAAE,CAAC;gBACT,GAAG,EAAE,sBAAsB;gBAC3B,QAAQ,EAAE,kBAAkB;gBAC5B,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;aAC7G,CAAC;KACH,CAAC,CACH,CAAC;IAEF,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC;QACjD,MAAM,CAAC,gBAAgB,CACrB,GAAG,IAAI,SAAS,EAChB,wBAAwB,IAAI,SAAS,EACrC;YACE,KAAK,EAAE,GAAG,IAAI,kBAAkB;YAChC,WAAW,EAAE,kCAAkC,IAAI,GAAG;YACtD,QAAQ,EAAE,kBAAkB;SAC7B,EACD,KAAK,IAAI,EAAE;YACT,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAAC;YAC/E,OAAO;gBACL,QAAQ,EAAE,CAAC;wBACT,GAAG,EAAE,wBAAwB,IAAI,SAAS;wBAC1C,QAAQ,EAAE,kBAAkB;wBAC5B,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;qBACxC,CAAC;aACH,CAAC;QACJ,CAAC,CACF,CAAC;IACJ,CAAC;IAED,MAAM,CAAC,YAAY,CACjB,kBAAkB,EAClB;QACE,KAAK,EAAE,kBAAkB;QACzB,WAAW,EAAE,sEAAsE;KACpF,EACD,KAAK,IAAI,EAAE,CAAC,CAAC;QACX,OAAO,EAAE,CAAC;gBACR,IAAI,EAAE,MAAM;gBACZ,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;aAC7G,CAAC;KACH,CAAC,CACH,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,qBAAqB,EACrB;QACE,KAAK,EAAE,qBAAqB;QAC5B,WAAW,EAAE,8CAA8C;QAC3D,WAAW,EAAE;YACX,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;SACxB;KACF,EACD,KAAK,EAAE,EAAE,IAAI,EAAoB,EAAE,EAAE;QACnC,MAAM,OAAO,GAAG,cAAc,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QAC/C,MAAM,WAAW,GAAG,MAAM,WAAW,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;QACzE,OAAO;YACL,OAAO,EAAE,CAAC;oBACR,IAAI,EAAE,MAAM;oBACZ,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;iBAC3C,CAAC;SACH,CAAC;IACJ,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,qBAAqB,EACrB;QACE,KAAK,EAAE,qBAAqB;QAC5B,WAAW,EAAE,8DAA8D;QAC3E,WAAW,EAAE;YACX,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;SACxB;KACF,EACD,KAAK,EAAE,EAAE,IAAI,EAAoB,EAAE,EAAE;QACnC,MAAM,OAAO,GAAG,cAAc,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QAC/C,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAAC;QAC/E,OAAO;YACL,OAAO,EAAE,CAAC;oBACR,IAAI,EAAE,MAAM;oBACZ,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;iBACxC,CAAC;SACH,CAAC;IACJ,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,WAAW,EACX;QACE,KAAK,EAAE,eAAe;QACtB,WAAW,EAAE,4EAA4E;QACzF,WAAW,EAAE;YACX,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;YACvB,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;SACvB;KACF,EACD,KAAK,EAAE,EAAE,IAAI,EAAE,GAAG,EAAiC,EAAE,EAAE;QACrD,MAAM,OAAO,GAAG,cAAc,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QAC/C,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;YACzB,MAAM,IAAI,eAAe,CAAC,eAAe,IAAI,iCAAiC,CAAC,CAAC;QAClF,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,WAAY,CAAC,GAAG,CAAC,CAAC,CAAC;QAC3E,OAAO;YACL,OAAO,EAAE,CAAC;oBACR,IAAI,EAAE,MAAM;oBACZ,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;iBACtC,CAAC;SACH,CAAC;IACJ,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,YAAY,EACZ;QACE,KAAK,EAAE,gBAAgB;QACvB,WAAW,EAAE,4DAA4D;QACzE,WAAW,EAAE;YACX,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;YACvB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;YAC7B,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;YACrD,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;SAC9C;KACF,EACD,KAAK,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,KAAK,EAKvC,EAAE,EAAE;QACH,MAAM,OAAO,GAAG,cAAc,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QAC/C,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC;YAC1B,MAAM,IAAI,eAAe,CAAC,eAAe,IAAI,0CAA0C,CAAC,CAAC;QAC3F,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,YAAa,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;QAClG,OAAO;YACL,OAAO,EAAE,CAAC;oBACR,IAAI,EAAE,MAAM;oBACZ,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;iBACtC,CAAC;SACH,CAAC;IACJ,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,iBAAiB,EACjB;QACE,KAAK,EAAE,qBAAqB;QAC5B,WAAW,EAAE,+CAA+C;QAC5D,WAAW,EAAE;YACX,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;YACvB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;YAC7B,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;YAC9B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;SAC9C;KACF,EACD,KAAK,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,KAAK,EAKzC,EAAE,EAAE;QACH,MAAM,OAAO,GAAG,cAAc,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QAC/C,IAAI,CAAC,OAAO,CAAC,iBAAiB,EAAE,CAAC;YAC/B,MAAM,IAAI,eAAe,CAAC,eAAe,IAAI,yCAAyC,CAAC,CAAC;QAC1F,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,iBAAkB,CAAC,UAAU,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC;QACzG,OAAO;YACL,OAAO,EAAE,CAAC;oBACR,IAAI,EAAE,MAAM;oBACZ,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;iBACtC,CAAC;SACH,CAAC;IACJ,CAAC,CACF,CAAC;IAEF,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAC7C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;AAClC,CAAC;AAED,SAAS,cAAc,CAAI,QAAwB,EAAE,IAAY;IAC/D,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACnC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,eAAe,CAAC,uBAAuB,IAAI,IAAI,CAAC,CAAC;IAC7D,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,KAAK,UAAU,WAAW,CAAI,OAA4D,EAAE,EAAoB;IAC9G,MAAM,SAAS,GAAG,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,SAAS,CAAC;IACxD,IAAI,OAAmC,CAAC;IAExC,IAAI,CAAC;QACH,OAAO,MAAM,OAAO,CAAC,IAAI,CAAC;YACxB,EAAE,EAAE;YACJ,IAAI,OAAO,CAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE;gBAC/B,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,cAAc,CAAC,6BAA6B,SAAS,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;YACjH,CAAC,CAAC;SACH,CAAC,CAAC;IACL,CAAC;YAAS,CAAC;QACT,IAAI,OAAO,EAAE,CAAC;YACZ,YAAY,CAAC,OAAO,CAAC,CAAC;QACxB,CAAC;IACH,CAAC;AACH,CAAC"}

package/package.json

@@ -0,0 +1,46 @@
+{
+  "name": "db-read",
+  "version": "0.1.0",
+  "description": "Read-only MCP server for PostgreSQL, MySQL, and MongoDB.",
+  "type": "module",
+  "bin": "dist/cli.js",
+  "files": [
+    "dist",
+    ".db-read.example.yml",
+    "README.md"
+  ],
+  "scripts": {
+    "build": "tsc -p tsconfig.json",
+    "dev": "tsx src/cli.ts serve --env dev --config .db-read.yml",
+    "prepublishOnly": "npm run typecheck && npm test && npm run build",
+    "test": "vitest run",
+    "typecheck": "tsc --noEmit -p tsconfig.json"
+  },
+  "keywords": [
+    "mcp",
+    "database",
+    "postgres",
+    "mysql",
+    "mongodb",
+    "read-only"
+  ],
+  "license": "MIT",
+  "engines": {
+    "node": ">=20"
+  },
+  "dependencies": {
+    "@modelcontextprotocol/sdk": "^1.29.0",
+    "mongodb": "^6.21.0",
+    "mysql2": "^3.22.3",
+    "pg": "^8.21.0",
+    "yaml": "^2.9.0",
+    "zod": "^4.4.3"
+  },
+  "devDependencies": {
+    "@types/node": "^25.9.1",
+    "@types/pg": "^8.20.0",
+    "tsx": "^4.22.3",
+    "typescript": "^6.0.3",
+    "vitest": "^4.1.7"
+  }
+}