taurusdb-mcp 0.5.0-rc.10 → 0.5.0-rc.2

package/README.md

@@ -10,7 +10,7 @@ TaurusDB MCP server for MCP clients such as:
 ## Install
 
 ```bash
-npm install taurusdb-mcp@latest
+npm install taurusdb-mcp
 ```
 
 Run directly with:
@@ -45,6 +45,10 @@ claude mcp add huaweicloud-taurusdb \
   --transport stdio \
   -e TAURUSDB_CLOUD_REGION=<your-region> \
   -e TAURUSDB_CLOUD_KEYCHAIN_SERVICE=taurusdb-mcp/huaweicloud \
+  -e TAURUSDB_ENABLE_DYNAMIC_TARGETS=true \
+  -e TAURUSDB_SQL_DATABASE=<your-database> \
+  -e TAURUSDB_SQL_USER=<your-readonly-user> \
+  -e TAURUSDB_SQL_PASSWORD='hw-kms-file:~/.taurusdb-mcp/password.ciphertext' \
   -- npx -y taurusdb-mcp
 ```
 
@@ -54,19 +58,13 @@ Codex:
 codex mcp add huaweicloud-taurusdb \
   --env TAURUSDB_CLOUD_REGION=<your-region> \
   --env TAURUSDB_CLOUD_KEYCHAIN_SERVICE=taurusdb-mcp/huaweicloud \
+  --env TAURUSDB_ENABLE_DYNAMIC_TARGETS=true \
+  --env TAURUSDB_SQL_DATABASE=<your-database> \
+  --env TAURUSDB_SQL_USER=<your-readonly-user> \
+  --env TAURUSDB_SQL_PASSWORD='hw-kms-file:~/.taurusdb-mcp/password.ciphertext' \
   -- npx -y taurusdb-mcp
 ```
 
-Interactive connection flow:
-
-1. Call `list_cloud_taurus_instances`.
-2. Call `select_cloud_taurus_instance`.
-3. Open the returned `login_url` in a browser and enter the database credentials.
-4. Continue with `list_databases`, `set_default_database`, and readonly tools.
-
-The browser submits credentials directly to the loopback MCP process. They are not
-sent through Agent-visible tool arguments or persisted by MCP.
-
 Initialize local MCP client config:
 
 ```bash
@@ -86,25 +84,32 @@ npx taurusdb-mcp credentials check
 
 - Requires Node.js `>= 20`
 - Depends on `taurusdb-core`
-- Interactive clients do not need database usernames or passwords in MCP configuration
-- Unattended static deployments may use `env:`, `file:`, `hw-csms:`, `hw-kms:`, or `hw-kms-file:` password references
+- Database passwords support `env:`, `file:`, `hw-csms:`, `hw-kms:`, and `hw-kms-file:` references
+- Huawei DEW CSMS is recommended when the database password should be stored and retrieved from Huawei Cloud
 - macOS Keychain, Linux Secret Service, or Windows Credential Manager cloud identity is enabled with `TAURUSDB_CLOUD_KEYCHAIN_SERVICE`
 - SQL TLS with certificate verification is required by default
-- General database mutation tools do not exist; the Agent-facing operating plane remains read-only regardless of database account privileges
-- `restore_recycle_bin_table` is visible by default and directly restores one exact recycle-bin object to one explicit non-existing destination after readonly preflight; it uses the active in-memory SQL session, post-verifies the destination, and writes audit evidence without a browser approval step
-- `analyze_mutation_sql` returns evidence-backed SQL Advice with `execution_status: not_executed`
-- Selecting a cloud instance returns a local SQL login link immediately; login validates the connection before binding credentials, allows at most three attempts per five-minute link, and never sends the password through Agent-visible tool arguments
-- Interactive instance selection binds the read/write public IP and fails immediately when the instance has no public IP; it never falls back to a VPC-private address that a local MCP client cannot route to
-- Before issuing a login link, instance selection performs a credential-free TCP endpoint preflight and returns actionable security-group/network guidance when the public database port is unreachable
-- Login validation distinguishes unreachable endpoint, refused port, TLS, authentication, and database validation timeout failures instead of returning a generic HTTP 504
-- Recoverable login errors render their structured code and remediation directly in the browser page with HTTP 200 so embedded webviews do not hide the message; cross-origin requests remain blocked with HTTP 403
-- Instance selection and local login tools are enabled by default; fixed static deployments may set `TAURUSDB_ENABLE_DYNAMIC_TARGETS=false`
-- Session SQL credentials expire after 30 idle minutes and eight absolute hours; administrators may shorten these limits with `TAURUSDB_SQL_CREDENTIAL_IDLE_TTL_MINUTES` and `TAURUSDB_SQL_CREDENTIAL_MAX_TTL_MINUTES`
+- Mutation and dynamic-target tools are disabled by default
+- Mutation tools require a dedicated `TAURUSDB_SQL_MUTATION_USER` /
+  `TAURUSDB_SQL_MUTATION_PASSWORD` pair and an external operator-signed approval
 - MCP audit events are written to `~/.taurusdb-mcp/audit.jsonl` by default, with
   configurable size rotation for collection into centralized immutable storage
 - Run one stdio process per customer/client trust boundary; this package is not
   a shared multi-tenant HTTP service
 
-Customers execute reviewed general-purpose `advised_sql` through their own controlled
-change process. The only MCP database-state exception is the target-bound,
-same-browser-confirmed recycle-bin recovery described above.
+Enable mutations only when required:
+
+```bash
+export TAURUSDB_ENABLE_MUTATIONS=true
+export TAURUSDB_SQL_MUTATION_USER='<dedicated-writer>'
+export TAURUSDB_SQL_MUTATION_PASSWORD='hw-csms:<writer-secret-name>'
+export TAURUSDB_MUTATION_APPROVAL_SECRET_FILE='/run/secrets/taurusdb-approval'
+```
+
+Sign a returned `approval_request` outside the MCP client:
+
+```bash
+npx taurusdb-mcp approve \
+  --request '<approval_request>' \
+  --actor '<operator-identity>' \
+  --secret-file /run/secrets/taurusdb-approval
+```

package/dist/security/local-credential-login.d.ts

@@ -3,27 +3,14 @@ export type SqlLoginCredentials = {
     username: string;
     password: string;
 };
-export type SqlLoginTarget = {
-    datasource: string;
-    instanceId?: string;
-    region?: string;
-    credentialIdleTtlMinutes?: number;
-    credentialMaxTtlMinutes?: number;
-};
 export type SqlLoginRequest = {
     datasource: string;
-    target?: SqlLoginTarget;
     bind: (credentials: SqlLoginCredentials) => Promise<void>;
 };
 export type IssuedSqlLogin = {
     loginUrl: string;
     expiresAt: string;
 };
-export type CredentialValidationFailure = "credentials" | "unreachable" | "refused" | "connectivity" | "tls" | "timeout";
-export declare class SqlCredentialValidationError extends Error {
-    readonly kind: CredentialValidationFailure;
-    constructor(kind: CredentialValidationFailure);
-}
 export interface CredentialLoginService {
     issueSqlLogin(request: SqlLoginRequest): Promise<IssuedSqlLogin>;
     close(): Promise<void>;
@@ -31,14 +18,10 @@ export interface CredentialLoginService {
 export type LocalCredentialLoginServiceOptions = {
     now?: () => number;
     tokenTtlMs?: number;
-    maxAttempts?: number;
-    failureDelayMs?: number;
 };
 export declare class LocalCredentialLoginService implements CredentialLoginService {
     private readonly now;
     private readonly tokenTtlMs;
-    private readonly maxAttempts;
-    private readonly failureDelayMs;
     private readonly pending;
     private server;
     private port;

package/dist/security/local-credential-login.js

@@ -1,253 +1,42 @@
 import { randomBytes } from "node:crypto";
 import { createServer, } from "node:http";
 const DEFAULT_TOKEN_TTL_MS = 5 * 60 * 1000;
-const DEFAULT_MAX_ATTEMPTS = 3;
-const DEFAULT_FAILURE_DELAY_MS = 1_000;
 const MAX_REQUEST_BODY_BYTES = 16 * 1024;
-export class SqlCredentialValidationError extends Error {
-    kind;
-    constructor(kind) {
-        super(`SQL credential validation failed: ${kind}`);
-        this.name = "SqlCredentialValidationError";
-        this.kind = kind;
-    }
-}
-const COPY = {
-    "zh-CN": {
-        product: "TaurusDB MCP",
-        title: "连接数据库",
-        intro: "输入数据库账号和密码以验证连接。",
-        target: "连接目标",
-        instance: "实例",
-        region: "区域",
-        datasource: "数据源",
-        configured: "已配置的数据源",
-        unknown: "未指定",
-        username: "数据库账号",
-        password: "数据库密码",
-        usernamePlaceholder: "请输入数据库账号",
-        passwordPlaceholder: "请输入数据库密码",
-        submit: "连接数据库",
-        submitting: "正在验证连接…",
-        privacy: "凭据对 Agent 不可见，仅用于连接您选择的数据库，不会由 MCP 持久化保存。",
-        retention: (idle, maximum) => `空闲 ${idle} 分钟后清除 · 最长保留 ${maximum >= 60 ? `${maximum / 60} 小时` : `${maximum} 分钟`}`,
-        attempts: (remaining) => `本链接还可尝试 ${remaining} 次`,
-        diagnostic: "连接检查",
-        required: "请输入数据库账号和密码。",
-        credentials: "无法验证账号信息，请检查账号和密码。",
-        unreachable: "无法访问数据库公网地址。请检查实例安全组入方向规则是否已向当前公网出口 IP 放通数据库端口，并检查网络 ACL、VPN 和本机出口防火墙。",
-        refused: "数据库公网地址可以访问，但端口拒绝连接。请检查实例状态和数据库端口。",
-        connectivity: "数据库连接失败，请检查公网地址、实例状态和网络配置。",
-        tls: "TLS 安全连接验证失败，请联系管理员检查证书配置。",
-        timeout: "数据库端口已连接，但验证未在限定时间内完成。请检查实例负载、连接数和数据库状态。",
-        busy: "连接正在验证，请勿重复提交。",
-        successTitle: "账号验证成功",
-        successMessage: "您现在可以返回 MCP 会话并选择需要访问的数据库。",
-        expiredTitle: "登录链接已失效",
-        expiredMessage: "请返回 MCP 会话并重新调用 begin_sql_login。",
-        lockedTitle: "尝试次数已用完",
-        lockedMessage: "为保护数据库账号，此链接已失效。请返回 MCP 会话重新生成登录链接。",
-        methodTitle: "不支持此请求",
-        methodMessage: "请使用登录表单继续。",
-        invalidTitle: "无法处理请求",
-        invalidMessage: "登录请求无效，请重新生成登录链接。",
-    },
-    en: {
-        product: "TaurusDB MCP",
-        title: "Connect to database",
-        intro: "Enter your database credentials to validate the connection.",
-        target: "Connection target",
-        instance: "Instance",
-        region: "Region",
-        datasource: "Datasource",
-        configured: "Configured datasource",
-        unknown: "Not specified",
-        username: "Database username",
-        password: "Database password",
-        usernamePlaceholder: "Enter database username",
-        passwordPlaceholder: "Enter database password",
-        submit: "Connect to database",
-        submitting: "Validating connection…",
-        privacy: "Credentials are not visible to the Agent. They are used only to connect to your selected database and are not persisted by MCP.",
-        retention: (idle, maximum) => `Cleared after ${idle} idle minutes · ${maximum >= 60 ? `${maximum / 60} ${maximum === 60 ? "hour" : "hours"}` : `${maximum} ${maximum === 1 ? "minute" : "minutes"}`} maximum`,
-        attempts: (remaining) => `${remaining} attempts remaining for this link`,
-        diagnostic: "Connection check",
-        required: "Enter both the database username and password.",
-        credentials: "The account could not be validated. Check the username and password.",
-        unreachable: "The public database endpoint is unreachable. Allow the database port from this client's public egress IP in the instance security group's inbound rules, then check network ACL, VPN, and outbound firewall rules.",
-        refused: "The public database endpoint is reachable, but the port refused the connection. Check the instance status and database port.",
-        connectivity: "The database connection failed. Check the public endpoint, instance status, and network configuration.",
-        tls: "The TLS connection could not be validated. Ask an administrator to check the certificate configuration.",
-        timeout: "The database port connected, but validation did not finish in time. Check instance load, connection capacity, and database status.",
-        busy: "Connection validation is already in progress. Do not submit again.",
-        successTitle: "Account validated",
-        successMessage: "Return to your MCP session and select the database you want to access.",
-        expiredTitle: "Login link expired",
-        expiredMessage: "Return to your MCP session and call begin_sql_login again.",
-        lockedTitle: "Attempt limit reached",
-        lockedMessage: "This link has expired to protect the database account. Return to your MCP session and create a new login link.",
-        methodTitle: "Unsupported request",
-        methodMessage: "Use the login form to continue.",
-        invalidTitle: "Request could not be processed",
-        invalidMessage: "The login request is invalid. Create a new login link.",
-    },
-};
-function localeFromRequest(req) {
-    return /(?:^|,)\s*zh(?:-|_|;|,|$)/i.test(req.headers["accept-language"] ?? "")
-        ? "zh-CN"
-        : "en";
-}
-function escapeHtml(value) {
-    return value
-        .replaceAll("&", "&")
-        .replaceAll("<", "&lt;")
-        .replaceAll(">", "&gt;")
-        .replaceAll('"', "&quot;")
-        .replaceAll("'", "&#39;");
-}
-function page(input) {
-    const copy = COPY[input.locale];
-    const isForm = input.state === "form";
-    const title = isForm
-        ? copy.title
-        : input.state === "success"
-            ? copy.successTitle
-            : input.state === "expired"
-                ? copy.expiredTitle
-                : input.state === "locked"
-                    ? copy.lockedTitle
-                    : input.state === "method"
-                        ? copy.methodTitle
-                        : copy.invalidTitle;
-    const message = input.message ?? (isForm
-        ? copy.intro
-        : input.state === "success"
-            ? copy.successMessage
-            : input.state === "expired"
-                ? copy.expiredMessage
-                : input.state === "locked"
-                    ? copy.lockedMessage
-                    : input.state === "method"
-                        ? copy.methodMessage
-                        : copy.invalidMessage);
-    const nonce = randomBytes(18).toString("base64url");
-    const target = input.target;
-    const formHtml = isForm
-        ? `<form method="post" autocomplete="on" data-login-form>
-        ${input.message ? `<div class="alert" role="alert">
-          <div class="alert-head"><strong>${copy.diagnostic}</strong>${input.errorCode ? `<code>${escapeHtml(input.errorCode)}</code>` : ""}</div>
-          <p>${escapeHtml(input.message)}</p>
-        </div>` : ""}
-        <div class="field">
-          <label for="username">${copy.username}</label>
-          <input id="username" name="username" autocomplete="username" maxlength="256" value="${escapeHtml(input.username ?? "")}" placeholder="${copy.usernamePlaceholder}" required autofocus>
-        </div>
-        <div class="field">
-          <label for="password">${copy.password}</label>
-          <input id="password" name="password" type="password" autocomplete="current-password" maxlength="4096" placeholder="${copy.passwordPlaceholder}" required>
-        </div>
-        <button type="submit" data-submit data-pending="${copy.submitting}">${copy.submit}</button>
-        ${input.remainingAttempts !== undefined ? `<p class="attempts">${copy.attempts(input.remainingAttempts)}</p>` : ""}
-      </form>`
-        : `<section class="result ${input.state}" aria-live="polite">
-        <span class="result-mark" aria-hidden="true">${input.state === "success" ? "✓" : "!"}</span>
-        <h1>${escapeHtml(title)}</h1>
-        <p>${escapeHtml(message)}</p>
-      </section>`;
+function page(title, message, form = false) {
+    const formHtml = form
+        ? `<form method="post">
+  <label>Database username <input name="username" autocomplete="username" required></label>
+  <label>Database password <input name="password" type="password" autocomplete="current-password" required></label>
+  <button type="submit">Connect</button>
+</form>`
+        : "";
     return `<!doctype html>
-<html lang="${input.locale}">
+<html lang="en">
 <head>
   <meta charset="utf-8">
   <meta name="viewport" content="width=device-width, initial-scale=1">
-  <meta name="color-scheme" content="light">
-  <title>${escapeHtml(title)} · ${copy.product}</title>
+  <title>${title}</title>
   <style>
-    :root { color-scheme:light; --ink:#20242c; --ink-soft:#303640; --muted:#687181; --cloud:#f5f6f8; --surface:#fff; --line:#dfe3e8; --brand:#c7000b; --brand-dark:#9f0712; --brand-soft:#fdebec; --danger:#a61b29; --danger-soft:#fff1f2; --success:#16794e; --shadow:0 24px 68px rgba(32,36,44,.14); }
-    * { box-sizing:border-box; }
-    body { margin:0; min-height:100vh; color:var(--ink); background:var(--cloud); font-family:"Avenir Next","Segoe UI Variable","PingFang SC","Microsoft YaHei",ui-sans-serif,sans-serif; }
-    .shell { width:min(1000px,calc(100% - 32px)); margin:clamp(24px,7vh,72px) auto; }
-    .masthead { display:flex; justify-content:space-between; align-items:center; margin-bottom:16px; font-size:13px; letter-spacing:.035em; }
-    .brand { font-size:15px; font-weight:750; letter-spacing:-.015em; }
-    .panel { display:grid; grid-template-columns:minmax(300px,.9fr) minmax(390px,1.25fr); overflow:hidden; border:1px solid rgba(21,34,56,.08); border-radius:20px; background:var(--surface); box-shadow:var(--shadow); }
-    .context { padding:46px 42px 40px; color:#f8f9fb; background:linear-gradient(155deg,var(--ink-soft),var(--ink)); }
-    .eyebrow { margin:0 0 34px; color:#f3aeb3; font-size:11px; font-weight:760; letter-spacing:.14em; text-transform:uppercase; }
-    .rail { margin:0; }
-    .rail-item { position:relative; display:grid; grid-template-columns:12px minmax(0,1fr); column-gap:17px; min-height:86px; }
-    .rail-item:last-child { min-height:auto; }
-    .target-row { grid-column:2; min-width:0; padding:0 0 25px; border-bottom:1px solid rgba(255,255,255,.1); }
-    .rail-item:last-child .target-row { padding-bottom:0; border-bottom:0; }
-    .rail dt { margin:0 0 7px; color:#aebbd0; font-size:11px; font-weight:650; letter-spacing:.04em; line-height:1.2; }
-    .rail dd { margin:0; color:#fff; font-family:"SFMono-Regular",Consolas,"Liberation Mono",monospace; font-size:14px; font-weight:620; line-height:1.45; letter-spacing:-.01em; overflow-wrap:anywhere; }
-    .node { position:relative; width:10px; height:10px; margin-top:2px; border:2px solid #f05b64; border-radius:50%; background:var(--ink-soft); box-shadow:0 0 0 4px rgba(199,0,11,.11); }
-    .node:not(.last):after { content:""; position:absolute; left:2px; top:11px; width:2px; height:73px; background:linear-gradient(#d53a44,rgba(213,58,68,.16)); }
-    .retention { margin:30px 0 0 29px; padding-top:18px; border-top:1px solid rgba(255,255,255,.1); color:#aebbd0; font-size:11px; line-height:1.65; }
-    .content { padding:48px 52px 38px; }
-    .content h1 { margin:0 0 11px; font-size:clamp(30px,4vw,40px); font-weight:760; line-height:1.08; letter-spacing:-.04em; }
-    .intro { margin:0 0 31px; color:var(--muted); font-size:14px; line-height:1.65; }
-    form { display:grid; gap:18px; }
-    .field { display:grid; gap:8px; }
-    label { font-size:12px; font-weight:730; letter-spacing:.01em; }
-    input { width:100%; min-height:50px; border:1px solid #c8d2de; border-radius:9px; padding:12px 14px; color:var(--ink); background:#fbfcfe; font:inherit; outline:none; transition:border-color .16s,box-shadow .16s,background .16s; }
-    input:focus { border-color:var(--brand); background:#fff; box-shadow:0 0 0 4px rgba(199,0,11,.11); }
-    button { min-height:50px; margin-top:3px; border:0; border-radius:9px; color:#fff; background:var(--brand); font:inherit; font-size:14px; font-weight:730; cursor:pointer; transition:background .16s,transform .16s; }
-    button:hover { background:var(--brand-dark); }
-    button:active { transform:translateY(1px); }
-    button:focus-visible { outline:3px solid rgba(199,0,11,.24); outline-offset:3px; }
-    button:disabled { cursor:wait; opacity:.72; }
-    .alert { margin-bottom:1px; border:1px solid #f3cbd0; border-left:4px solid var(--danger); border-radius:8px; padding:13px 14px; color:#771721; background:var(--danger-soft); font-size:12px; line-height:1.55; }
-    .alert-head { display:flex; align-items:center; justify-content:space-between; gap:12px; margin-bottom:7px; }
-    .alert-head strong { color:#64121b; font-size:12px; font-weight:760; }
-    .alert-head code { border:1px solid #eab9bf; border-radius:5px; padding:2px 6px; color:#8b1824; background:#fff8f8; font-family:"SFMono-Regular",Consolas,"Liberation Mono",monospace; font-size:10px; font-weight:650; overflow-wrap:anywhere; }
-    .alert p { margin:0; }
-    .attempts { margin:-8px 0 0; color:var(--muted); text-align:center; font-size:11px; }
-    .privacy { display:flex; gap:11px; align-items:flex-start; margin:27px 0 0; padding-top:20px; border-top:1px solid var(--line); color:var(--muted); font-size:11px; line-height:1.65; }
-    .shield { flex:0 0 auto; width:8px; height:8px; margin-top:5px; border-radius:50%; color:transparent; background:var(--brand); box-shadow:0 0 0 4px var(--brand-soft); }
-    .result { min-height:280px; display:flex; flex-direction:column; align-items:flex-start; justify-content:center; }
-    .result-mark { display:grid; place-items:center; width:46px; height:46px; margin-bottom:22px; border-radius:50%; color:#fff; background:var(--danger); font-size:22px; font-weight:800; }
-    .result.success .result-mark { background:var(--success); }
-    .result p { max-width:35rem; color:var(--muted); line-height:1.7; }
-    @media (max-width:760px) { .shell{width:min(100% - 20px,560px);margin:18px auto}.panel{grid-template-columns:1fr;border-radius:17px}.context{padding:30px 27px}.content{padding:34px 27px 29px}.eyebrow{margin-bottom:25px}.rail-item{min-height:76px}.node:not(.last):after{height:63px}.retention{margin-top:24px}.content h1{font-size:31px} }
-    @media (prefers-reduced-motion:reduce) { *,*:before,*:after{scroll-behavior:auto!important;transition:none!important} }
+    body { font-family: system-ui, sans-serif; max-width: 32rem; margin: 4rem auto; padding: 0 1rem; }
+    form { display: grid; gap: 1rem; }
+    label { display: grid; gap: .35rem; }
+    input, button { font: inherit; padding: .65rem; }
   </style>
 </head>
 <body>
-  <main class="shell">
-    <header class="masthead"><span class="brand">${copy.product}</span></header>
-    <section class="panel">
-      <aside class="context">
-        <p class="eyebrow">${copy.target}</p>
-        <dl class="rail">
-          <div class="rail-item"><span class="node"></span><div class="target-row"><dt>${copy.instance}</dt><dd>${escapeHtml(target?.instanceId ?? copy.configured)}</dd></div></div>
-          <div class="rail-item"><span class="node"></span><div class="target-row"><dt>${copy.region}</dt><dd>${escapeHtml(target?.region ?? copy.unknown)}</dd></div></div>
-          <div class="rail-item"><span class="node last"></span><div class="target-row"><dt>${copy.datasource}</dt><dd>${escapeHtml(target?.datasource ?? copy.unknown)}</dd></div></div>
-        </dl>
-        ${target?.credentialIdleTtlMinutes && target.credentialMaxTtlMinutes ? `<p class="retention">${copy.retention(target.credentialIdleTtlMinutes, target.credentialMaxTtlMinutes)}</p>` : ""}
-      </aside>
-      <div class="content">
-        ${isForm ? `<h1>${copy.title}</h1><p class="intro">${copy.intro}</p>` : ""}
-        ${formHtml}
-        ${isForm ? `<p class="privacy"><span class="shield" aria-hidden="true">◆</span><span>${copy.privacy}</span></p>` : ""}
-      </div>
-    </section>
-  </main>
-  ${isForm ? `<script nonce="${nonce}">document.querySelector('[data-login-form]').addEventListener('submit',()=>{const b=document.querySelector('[data-submit]');b.disabled=true;b.textContent=b.dataset.pending;});</script>` : ""}
+  <h1>${title}</h1>
+  <p>${message}</p>
+  ${formHtml}
 </body>
 </html>`;
 }
 function respond(res, status, body) {
-    const nonce = /<script nonce="([^"]+)"/.exec(body)?.[1];
     res.writeHead(status, {
         "cache-control": "no-store",
-        "content-security-policy": `default-src 'none'; style-src 'unsafe-inline'; form-action 'self'; base-uri 'none'; frame-ancestors 'none'${nonce ? `; script-src 'nonce-${nonce}'` : ""}`,
+        "content-security-policy": "default-src 'none'; style-src 'unsafe-inline'; form-action 'self'",
         "content-type": "text/html; charset=utf-8",
-        "cross-origin-opener-policy": "same-origin",
-        "cross-origin-resource-policy": "same-origin",
-        expires: "0",
-        "permissions-policy": "camera=(), microphone=(), geolocation=()",
-        pragma: "no-cache",
         "referrer-policy": "no-referrer",
         "x-content-type-options": "nosniff",
-        "x-frame-options": "DENY",
     });
     res.end(body);
 }
@@ -264,67 +53,21 @@ async function readBody(req) {
     }
     return Buffer.concat(chunks).toString("utf8");
 }
-function delay(ms) {
-    return ms > 0 ? new Promise((resolve) => setTimeout(resolve, ms)) : Promise.resolve();
-}
-function isLoopbackHostname(hostname) {
-    const normalized = hostname.toLowerCase();
-    return normalized === "127.0.0.1" || normalized === "localhost" || normalized === "[::1]";
-}
-function isAllowedBrowserRequest(req, port) {
-    if (!port)
-        return false;
-    try {
-        const requestUrl = new URL(`http://${req.headers.host ?? ""}`);
-        if (!isLoopbackHostname(requestUrl.hostname) || requestUrl.port !== String(port)) {
-            return false;
-        }
-    }
-    catch {
-        return false;
-    }
-    const origin = req.headers.origin;
-    if (!origin || origin === "null")
-        return true;
-    try {
-        const originUrl = new URL(origin);
-        return originUrl.protocol === "http:"
-            && isLoopbackHostname(originUrl.hostname)
-            && originUrl.port === String(port);
-    }
-    catch {
-        return false;
-    }
-}
-function validationErrorCode(kind) {
-    switch (kind) {
-        case "credentials": return "DB_AUTH_FAILED";
-        case "unreachable": return "DB_ENDPOINT_UNREACHABLE";
-        case "refused": return "DB_CONNECTION_REFUSED";
-        case "tls": return "DB_TLS_FAILED";
-        case "timeout": return "DB_VALIDATION_TIMEOUT";
-        default: return "DB_CONNECTION_FAILED";
-    }
-}
 export class LocalCredentialLoginService {
     now;
     tokenTtlMs;
-    maxAttempts;
-    failureDelayMs;
     pending = new Map();
     server;
     port;
     constructor(options = {}) {
         this.now = options.now ?? Date.now;
         this.tokenTtlMs = options.tokenTtlMs ?? DEFAULT_TOKEN_TTL_MS;
-        this.maxAttempts = options.maxAttempts ?? DEFAULT_MAX_ATTEMPTS;
-        this.failureDelayMs = options.failureDelayMs ?? DEFAULT_FAILURE_DELAY_MS;
     }
     async issueSqlLogin(request) {
         await this.ensureStarted();
         const token = randomBytes(32).toString("base64url");
         const expiresAtMs = this.now() + this.tokenTtlMs;
-        this.pending.set(token, { ...request, expiresAtMs, failedAttempts: 0, inFlight: false });
+        this.pending.set(token, { ...request, expiresAtMs });
         return {
             loginUrl: `http://127.0.0.1:${this.port}/sql-login/${token}`,
             expiresAt: new Date(expiresAtMs).toISOString(),
@@ -365,7 +108,6 @@ export class LocalCredentialLoginService {
         this.port = address.port;
     }
     async handle(req, res) {
-        const locale = localeFromRequest(req);
         try {
             const url = new URL(req.url ?? "/", "http://127.0.0.1");
             const match = url.pathname.match(/^\/sql-login\/([^/]+)$/);
@@ -375,82 +117,40 @@ export class LocalCredentialLoginService {
                 if (token) {
                     this.pending.delete(token);
                 }
-                respond(res, 200, page({ locale, state: "expired", target: pending?.target }));
+                respond(res, 410, page("Invalid login link", "This login link is invalid or has expired."));
                 return;
             }
             if (req.method === "GET") {
-                respond(res, 200, page({
-                    locale,
-                    state: "form",
-                    target: pending.target,
-                    remainingAttempts: this.maxAttempts - pending.failedAttempts,
-                }));
+                respond(res, 200, page("Connect to TaurusDB", "Enter your database credentials.", true));
                 return;
             }
             if (req.method !== "POST") {
-                respond(res, 405, page({ locale, state: "method", target: pending.target }));
-                return;
-            }
-            if (!isAllowedBrowserRequest(req, this.port)) {
-                respond(res, 403, page({ locale, state: "invalid", target: pending.target }));
-                return;
-            }
-            if (pending.inFlight) {
-                respond(res, 200, page({
-                    locale,
-                    state: "form",
-                    target: pending.target,
-                    message: COPY[locale].busy,
-                    remainingAttempts: this.maxAttempts - pending.failedAttempts,
-                }));
+                respond(res, 405, page("Unsupported request", "Use the login form to continue."));
                 return;
             }
             const form = new URLSearchParams(await readBody(req));
             const username = form.get("username")?.trim() ?? "";
             const password = form.get("password") ?? "";
             if (!username || !password) {
-                respond(res, 200, page({
-                    locale,
-                    state: "form",
-                    target: pending.target,
-                    message: COPY[locale].required,
-                    username,
-                    remainingAttempts: this.maxAttempts - pending.failedAttempts,
-                }));
+                respond(res, 400, page("Connect to TaurusDB", "Username and password are required.", true));
                 return;
             }
+            this.pending.delete(token);
             try {
-                pending.inFlight = true;
-                await pending.bind({ datasource: pending.datasource, username, password });
-            }
-            catch (error) {
-                pending.inFlight = false;
-                const kind = error instanceof SqlCredentialValidationError ? error.kind : "connectivity";
-                if (kind === "credentials") {
-                    pending.failedAttempts += 1;
-                    await delay(this.failureDelayMs * 2 ** (pending.failedAttempts - 1));
-                    if (pending.failedAttempts >= this.maxAttempts) {
-                        this.pending.delete(token);
-                        respond(res, 200, page({ locale, state: "locked", target: pending.target }));
-                        return;
-                    }
-                }
-                respond(res, 200, page({
-                    locale,
-                    state: "form",
-                    target: pending.target,
-                    message: COPY[locale][kind],
-                    errorCode: validationErrorCode(kind),
+                await pending.bind({
+                    datasource: pending.datasource,
                     username,
-                    remainingAttempts: this.maxAttempts - pending.failedAttempts,
-                }));
+                    password,
+                });
+            }
+            catch {
+                respond(res, 500, page("Connection failed", "Credentials could not be bound to this session."));
                 return;
             }
-            this.pending.delete(token);
-            respond(res, 200, page({ locale, state: "success", target: pending.target }));
+            respond(res, 200, page("Connected", "Database credentials are now active for this MCP session."));
         }
         catch {
-            respond(res, 400, page({ locale, state: "invalid" }));
+            respond(res, 400, page("Invalid request", "The login request could not be processed."));
         }
     }
 }

package/dist/server.d.ts

@@ -2,7 +2,6 @@ import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 import { TaurusDBEngine, type Config, type AuditWriter, type RuntimeTargetProfileLoader } from "taurusdb-core";
 import { type CredentialLoginService } from "./security/local-credential-login.js";
 import { SessionCoordinator } from "./security/session-coordinator.js";
-import { SessionCredentialManager } from "./security/session-credential-manager.js";
 export interface ServerDeps {
     config: Config;
     profileLoader: RuntimeTargetProfileLoader;
@@ -10,13 +9,10 @@ export interface ServerDeps {
     credentialLogin: CredentialLoginService;
     auditWriter?: AuditWriter;
     sessionCoordinator?: SessionCoordinator;
-    credentialSessions?: SessionCredentialManager;
-    sqlCredentialValidator?: (engine: TaurusDBEngine, datasource: string, taskId: string) => Promise<void>;
     clientIdentityProvider?: () => {
         name: string;
         version: string;
     } | undefined;
-    endpointPreflight?: (host: string, port: number) => Promise<void>;
     pingResponse: string;
 }
 export declare function bootstrapDependencies(): Promise<ServerDeps>;

package/dist/server.js

@@ -6,8 +6,6 @@ import { logger } from "taurusdb-core";
 import { VERSION } from "./version.js";
 import { LocalCredentialLoginService, } from "./security/local-credential-login.js";
 import { SessionCoordinator } from "./security/session-coordinator.js";
-import { SessionCredentialManager } from "./security/session-credential-manager.js";
-import { preflightDatabaseEndpoint } from "./security/database-endpoint-preflight.js";
 export async function bootstrapDependencies() {
     const config = getConfig();
     const profileLoader = new RuntimeOverrideProfileLoader(createSqlProfileLoader({ config }));
@@ -17,23 +15,13 @@ export async function bootstrapDependencies() {
         maxBytes: config.audit.maxBytes,
         maxFiles: config.audit.maxFiles,
     });
-    const sessionCoordinator = new SessionCoordinator();
-    const credentialSessions = new SessionCredentialManager({
-        idleTtlMs: config.security.credentialIdleTtlMinutes * 60_000,
-        maxTtlMs: config.security.credentialMaxTtlMinutes * 60_000,
-        onExpirationError: (error, datasource) => {
-            logger.error({ err: error, datasource }, "Failed to expire SQL credential session");
-        },
-    });
     return {
         config,
         profileLoader,
         engine,
         credentialLogin: new LocalCredentialLoginService(),
         auditWriter,
-        sessionCoordinator,
-        credentialSessions,
-        endpointPreflight: preflightDatabaseEndpoint,
+        sessionCoordinator: new SessionCoordinator(),
         pingResponse: "pong",
     };
 }
@@ -47,7 +35,6 @@ export function createServer(deps) {
     const cleanup = () => {
         cleanupPromise ??= Promise.all([
             deps.credentialLogin.close(),
-            deps.credentialSessions?.close() ?? Promise.resolve(),
             deps.engine.close(),
             deps.auditWriter?.close() ?? Promise.resolve(),
         ]).then(() => undefined);