vmoo-mcp-database-server 1.1.0 → 1.2.1

package/vmoo-database-prod/server.js

@@ -1,313 +1,313 @@
-#!/usr/bin/env node
-
-import { Server } from '@modelcontextprotocol/sdk/server/index.js';
-import { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';
-import { CallToolRequestSchema, ListToolsRequestSchema } from '@modelcontextprotocol/sdk/types.js';
-import mysql from 'mysql2/promise';
-import fs from 'fs';
-import path from 'path';
-import { fileURLToPath } from 'url';
-
-const __filename = fileURLToPath(import.meta.url);
-const __dirname = path.dirname(__filename);
-
-// 导入共享模块
-const { createConnectionPool, executeQuery, normalizeTableName, getTableStructure, getTableCount, getTableSampleData, listTables } = await import('../shared/database-utils.js');
-const { SECURITY_LEVELS, performSecurityCheck, applyQueryLimits } = await import('../shared/security-utils.js');
-const { processTimeFields } = await import('../shared/time-utils.js');
-const { anonymizeQueryResults } = await import('../shared/privacy-utils.js');
-
-// 读取配置文件
-const config = JSON.parse(fs.readFileSync(path.join(__dirname, 'config.json'), 'utf8'));
-
-// 创建数据库连接池
-const pool = createConnectionPool(config.database);
-
-// 创建MCP服务器
-const server = new Server(
-  {
-    name: config.server.name,
-    version: config.server.version,
-  },
-  {
-    capabilities: {
-      tools: {},
-    },
-  }
-);
-
-// 注册工具
-server.setRequestHandler(ListToolsRequestSchema, async () => {
-  return {
-    tools: [
-      {
-        name: 'query_database',
-        description: '执行SQL查询语句（生产环境：仅支持查询，有频率限制和数据匿名化）',
-        inputSchema: {
-          type: 'object',
-          properties: {
-            query: {
-              type: 'string',
-              description: 'SQL查询语句（仅支持SELECT、SHOW、DESCRIBE、EXPLAIN）'
-            },
-            limit: {
-              type: 'number',
-              description: '限制返回结果数量，默认50，最大50',
-              default: 50
-            }
-          },
-          required: ['query']
-        }
-      },
-      {
-        name: 'query_with_time_format',
-        description: '执行SQL查询并自动格式化时间字段（生产环境专用，包含数据匿名化）',
-        inputSchema: {
-          type: 'object',
-          properties: {
-            query: {
-              type: 'string',
-              description: 'SQL查询语句，时间字段会自动转换为北京时间，个人信息会被匿名化'
-            },
-            limit: {
-              type: 'number',
-              description: '限制返回结果数量，默认50，最大50',
-              default: 50
-            }
-          },
-          required: ['query']
-        }
-      },
-      {
-        name: 'describe_table',
-        description: '获取表结构信息',
-        inputSchema: {
-          type: 'object',
-          properties: {
-            table_name: {
-              type: 'string',
-              description: '表名（可以包含或不包含fanwe_前缀）'
-            }
-          },
-          required: ['table_name']
-        }
-      },
-      {
-        name: 'list_tables',
-        description: '列出数据库中所有表',
-        inputSchema: {
-          type: 'object',
-          properties: {
-            pattern: {
-              type: 'string',
-              description: '表名匹配模式（可选）'
-            }
-          }
-        }
-      },
-      {
-        name: 'table_sample_data',
-        description: '获取表的示例数据（数据已匿名化）',
-        inputSchema: {
-          type: 'object',
-          properties: {
-            table_name: {
-              type: 'string',
-              description: '表名'
-            },
-            limit: {
-              type: 'number',
-              description: '返回记录数量，默认10，最大10',
-              default: 10
-            }
-          },
-          required: ['table_name']
-        }
-      },
-      {
-        name: 'table_count',
-        description: '获取表的记录总数',
-        inputSchema: {
-          type: 'object',
-          properties: {
-            table_name: {
-              type: 'string',
-              description: '表名'
-            }
-          },
-          required: ['table_name']
-        }
-      }
-    ]
-  };
-});
-
-// 处理工具调用
-server.setRequestHandler(CallToolRequestSchema, async (request) => {
-  const { name, arguments: args } = request.params;
-
-  try {
-    switch (name) {
-      case 'query_database':
-        return await handleQueryDatabase(args);
-      case 'query_with_time_format':
-        return await handleQueryWithTimeFormat(args);
-      case 'describe_table':
-        return await handleDescribeTable(args);
-      case 'list_tables':
-        return await handleListTables(args);
-      case 'table_sample_data':
-        return await handleTableSampleData(args);
-      case 'table_count':
-        return await handleTableCount(args);
-      default:
-        throw new Error(`未知工具: ${name}`);
-    }
-  } catch (error) {
-    return {
-      content: [
-        {
-          type: 'text',
-          text: `错误: ${error.message}`
-        }
-      ]
-    };
-  }
-});
-
-// 查询数据库（生产环境）
-async function handleQueryDatabase(args) {
-  const { query, limit = 50 } = args;
-  
-  // 限制最大记录数
-  const actualLimit = Math.min(limit, 50);
-  
-  // 安全检查（包含频率限制和复杂度检测）
-  const securityCheck = performSecurityCheck(query, SECURITY_LEVELS.PRODUCTION);
-  if (!securityCheck.allowed) {
-    throw new Error(securityCheck.reason);
-  }
-  
-  // 应用查询限制
-  const finalQuery = applyQueryLimits(query, actualLimit);
-  
-  const rows = await executeQuery(pool, finalQuery);
-  
-  // 数据匿名化
-  const anonymizedRows = anonymizeQueryResults(rows);
-  
-  return {
-    content: [
-      {
-        type: 'text',
-        text: `🔴 生产环境查询结果 (${Array.isArray(anonymizedRows) ? anonymizedRows.length : 0} 条记录):\n🛡️ 个人信息已匿名化处理\n\n${JSON.stringify(anonymizedRows, null, 2)}`
-      }
-    ]
-  };
-}
-
-// 带时间格式化的查询（生产环境）
-async function handleQueryWithTimeFormat(args) {
-  const { query, limit = 50 } = args;
-  
-  // 限制最大记录数
-  const actualLimit = Math.min(limit, 50);
-  
-  // 安全检查（包含频率限制和复杂度检测）
-  const securityCheck = performSecurityCheck(query, SECURITY_LEVELS.PRODUCTION);
-  if (!securityCheck.allowed) {
-    throw new Error(securityCheck.reason);
-  }
-  
-  // 应用查询限制
-  const finalQuery = applyQueryLimits(query, actualLimit);
-  
-  const rows = await executeQuery(pool, finalQuery);
-  const processedRows = processTimeFields(rows);
-  
-  // 数据匿名化
-  const anonymizedRows = anonymizeQueryResults(processedRows);
-  
-  return {
-    content: [
-      {
-        type: 'text',
-        text: `🔴 生产环境查询结果 (${Array.isArray(anonymizedRows) ? anonymizedRows.length : 0} 条记录):\n📅 时间字段已自动转换为北京时间\n🛡️ 个人信息已匿名化处理\n\n${JSON.stringify(anonymizedRows, null, 2)}`
-      }
-    ]
-  };
-}
-
-// 其他处理函数...
-async function handleDescribeTable(args) {
-  const { table_name } = args;
-  const rows = await getTableStructure(pool, table_name);
-  
-  return {
-    content: [
-      {
-        type: 'text',
-        text: `表 ${normalizeTableName(table_name)} 的结构:\n\n${JSON.stringify(rows, null, 2)}`
-      }
-    ]
-  };
-}
-
-async function handleListTables(args) {
-  const { pattern } = args;
-  const rows = await listTables(pool, pattern);
-  
-  return {
-    content: [
-      {
-        type: 'text',
-        text: `数据库表列表:\n\n${JSON.stringify(rows, null, 2)}`
-      }
-    ]
-  };
-}
-
-async function handleTableSampleData(args) {
-  const { table_name, limit = 10 } = args;
-  const actualLimit = Math.min(limit, 10); // 生产环境限制更严格
-  
-  const rows = await getTableSampleData(pool, table_name, actualLimit);
-  const processedRows = processTimeFields(rows);
-  
-  // 数据匿名化
-  const anonymizedRows = anonymizeQueryResults(processedRows);
-  
-  return {
-    content: [
-      {
-        type: 'text',
-        text: `表 ${normalizeTableName(table_name)} 的示例数据 (前${actualLimit}条，已匿名化):\n\n${JSON.stringify(anonymizedRows, null, 2)}`
-      }
-    ]
-  };
-}
-
-async function handleTableCount(args) {
-  const { table_name } = args;
-  const count = await getTableCount(pool, table_name);
-  
-  return {
-    content: [
-      {
-        type: 'text',
-        text: `表 ${normalizeTableName(table_name)} 共有 ${count} 条记录`
-      }
-    ]
-  };
-}
-
-// 启动服务器
-async function main() {
-  const transport = new StdioServerTransport();
-  await server.connect(transport);
-  console.error(`🔴 VMOO生产环境MCP服务器已启动 - ${config.server.name} v${config.server.version}`);
-  console.error(`🔒 安全级别: ${config.security.level} - ${config.security.description}`);
-  console.error(`🛡️ 防护功能: 频率限制、防爬虫、数据匿名化`);
-}
-
-main().catch(console.error);
+#!/usr/bin/env node
+
+import { Server } from '@modelcontextprotocol/sdk/server/index.js';
+import { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';
+import { CallToolRequestSchema, ListToolsRequestSchema } from '@modelcontextprotocol/sdk/types.js';
+import mysql from 'mysql2/promise';
+import fs from 'fs';
+import path from 'path';
+import { fileURLToPath } from 'url';
+
+const __filename = fileURLToPath(import.meta.url);
+const __dirname = path.dirname(__filename);
+
+// 导入共享模块
+const { createConnectionPool, executeQuery, normalizeTableName, getTableStructure, getTableCount, getTableSampleData, listTables } = await import('../shared/database-utils.js');
+const { SECURITY_LEVELS, performSecurityCheck, applyQueryLimits } = await import('../shared/security-utils.js');
+const { processTimeFields } = await import('../shared/time-utils.js');
+const { anonymizeQueryResults } = await import('../shared/privacy-utils.js');
+
+// 读取配置文件
+const config = JSON.parse(fs.readFileSync(path.join(__dirname, 'config.json'), 'utf8'));
+
+// 创建数据库连接池
+const pool = createConnectionPool(config.database);
+
+// 创建MCP服务器
+const server = new Server(
+  {
+    name: config.server.name,
+    version: config.server.version,
+  },
+  {
+    capabilities: {
+      tools: {},
+    },
+  }
+);
+
+// 注册工具
+server.setRequestHandler(ListToolsRequestSchema, async () => {
+  return {
+    tools: [
+      {
+        name: 'query_database',
+        description: '执行SQL查询语句（生产环境：仅支持查询，有频率限制和数据匿名化）',
+        inputSchema: {
+          type: 'object',
+          properties: {
+            query: {
+              type: 'string',
+              description: 'SQL查询语句（仅支持SELECT、SHOW、DESCRIBE、EXPLAIN）'
+            },
+            limit: {
+              type: 'number',
+              description: '限制返回结果数量，默认50，最大50',
+              default: 50
+            }
+          },
+          required: ['query']
+        }
+      },
+      {
+        name: 'query_with_time_format',
+        description: '执行SQL查询并自动格式化时间字段（生产环境专用，包含数据匿名化）',
+        inputSchema: {
+          type: 'object',
+          properties: {
+            query: {
+              type: 'string',
+              description: 'SQL查询语句，时间字段会自动转换为北京时间，个人信息会被匿名化'
+            },
+            limit: {
+              type: 'number',
+              description: '限制返回结果数量，默认50，最大50',
+              default: 50
+            }
+          },
+          required: ['query']
+        }
+      },
+      {
+        name: 'describe_table',
+        description: '获取表结构信息',
+        inputSchema: {
+          type: 'object',
+          properties: {
+            table_name: {
+              type: 'string',
+              description: '表名（可以包含或不包含fanwe_前缀）'
+            }
+          },
+          required: ['table_name']
+        }
+      },
+      {
+        name: 'list_tables',
+        description: '列出数据库中所有表',
+        inputSchema: {
+          type: 'object',
+          properties: {
+            pattern: {
+              type: 'string',
+              description: '表名匹配模式（可选）'
+            }
+          }
+        }
+      },
+      {
+        name: 'table_sample_data',
+        description: '获取表的示例数据（数据已匿名化）',
+        inputSchema: {
+          type: 'object',
+          properties: {
+            table_name: {
+              type: 'string',
+              description: '表名'
+            },
+            limit: {
+              type: 'number',
+              description: '返回记录数量，默认10，最大10',
+              default: 10
+            }
+          },
+          required: ['table_name']
+        }
+      },
+      {
+        name: 'table_count',
+        description: '获取表的记录总数',
+        inputSchema: {
+          type: 'object',
+          properties: {
+            table_name: {
+              type: 'string',
+              description: '表名'
+            }
+          },
+          required: ['table_name']
+        }
+      }
+    ]
+  };
+});
+
+// 处理工具调用
+server.setRequestHandler(CallToolRequestSchema, async (request) => {
+  const { name, arguments: args } = request.params;
+
+  try {
+    switch (name) {
+      case 'query_database':
+        return await handleQueryDatabase(args);
+      case 'query_with_time_format':
+        return await handleQueryWithTimeFormat(args);
+      case 'describe_table':
+        return await handleDescribeTable(args);
+      case 'list_tables':
+        return await handleListTables(args);
+      case 'table_sample_data':
+        return await handleTableSampleData(args);
+      case 'table_count':
+        return await handleTableCount(args);
+      default:
+        throw new Error(`未知工具: ${name}`);
+    }
+  } catch (error) {
+    return {
+      content: [
+        {
+          type: 'text',
+          text: `错误: ${error.message}`
+        }
+      ]
+    };
+  }
+});
+
+// 查询数据库（生产环境）
+async function handleQueryDatabase(args) {
+  const { query, limit = 50 } = args;
+  
+  // 限制最大记录数
+  const actualLimit = Math.min(limit, 50);
+  
+  // 安全检查（包含频率限制和复杂度检测）
+  const securityCheck = performSecurityCheck(query, SECURITY_LEVELS.PRODUCTION);
+  if (!securityCheck.allowed) {
+    throw new Error(securityCheck.reason);
+  }
+  
+  // 应用查询限制
+  const finalQuery = applyQueryLimits(query, actualLimit);
+  
+  const rows = await executeQuery(pool, finalQuery);
+  
+  // 数据匿名化
+  const anonymizedRows = anonymizeQueryResults(rows);
+  
+  return {
+    content: [
+      {
+        type: 'text',
+        text: `🔴 生产环境查询结果 (${Array.isArray(anonymizedRows) ? anonymizedRows.length : 0} 条记录):\n🛡️ 个人信息已匿名化处理\n\n${JSON.stringify(anonymizedRows, null, 2)}`
+      }
+    ]
+  };
+}
+
+// 带时间格式化的查询（生产环境）
+async function handleQueryWithTimeFormat(args) {
+  const { query, limit = 50 } = args;
+  
+  // 限制最大记录数
+  const actualLimit = Math.min(limit, 50);
+  
+  // 安全检查（包含频率限制和复杂度检测）
+  const securityCheck = performSecurityCheck(query, SECURITY_LEVELS.PRODUCTION);
+  if (!securityCheck.allowed) {
+    throw new Error(securityCheck.reason);
+  }
+  
+  // 应用查询限制
+  const finalQuery = applyQueryLimits(query, actualLimit);
+  
+  const rows = await executeQuery(pool, finalQuery);
+  const processedRows = processTimeFields(rows);
+  
+  // 数据匿名化
+  const anonymizedRows = anonymizeQueryResults(processedRows);
+  
+  return {
+    content: [
+      {
+        type: 'text',
+        text: `🔴 生产环境查询结果 (${Array.isArray(anonymizedRows) ? anonymizedRows.length : 0} 条记录):\n📅 时间字段已自动转换为北京时间\n🛡️ 个人信息已匿名化处理\n\n${JSON.stringify(anonymizedRows, null, 2)}`
+      }
+    ]
+  };
+}
+
+// 其他处理函数...
+async function handleDescribeTable(args) {
+  const { table_name } = args;
+  const rows = await getTableStructure(pool, table_name);
+  
+  return {
+    content: [
+      {
+        type: 'text',
+        text: `表 ${normalizeTableName(table_name)} 的结构:\n\n${JSON.stringify(rows, null, 2)}`
+      }
+    ]
+  };
+}
+
+async function handleListTables(args) {
+  const { pattern } = args;
+  const rows = await listTables(pool, pattern);
+  
+  return {
+    content: [
+      {
+        type: 'text',
+        text: `数据库表列表:\n\n${JSON.stringify(rows, null, 2)}`
+      }
+    ]
+  };
+}
+
+async function handleTableSampleData(args) {
+  const { table_name, limit = 10 } = args;
+  const actualLimit = Math.min(limit, 10); // 生产环境限制更严格
+  
+  const rows = await getTableSampleData(pool, table_name, actualLimit);
+  const processedRows = processTimeFields(rows);
+  
+  // 数据匿名化
+  const anonymizedRows = anonymizeQueryResults(processedRows);
+  
+  return {
+    content: [
+      {
+        type: 'text',
+        text: `表 ${normalizeTableName(table_name)} 的示例数据 (前${actualLimit}条，已匿名化):\n\n${JSON.stringify(anonymizedRows, null, 2)}`
+      }
+    ]
+  };
+}
+
+async function handleTableCount(args) {
+  const { table_name } = args;
+  const count = await getTableCount(pool, table_name);
+  
+  return {
+    content: [
+      {
+        type: 'text',
+        text: `表 ${normalizeTableName(table_name)} 共有 ${count} 条记录`
+      }
+    ]
+  };
+}
+
+// 启动服务器
+async function main() {
+  const transport = new StdioServerTransport();
+  await server.connect(transport);
+  console.error(`🔴 VMOO生产环境MCP服务器已启动 - ${config.server.name} v${config.server.version}`);
+  console.error(`🔒 安全级别: ${config.security.level} - ${config.security.description}`);
+  console.error(`🛡️ 防护功能: 频率限制、防爬虫、数据匿名化`);
+}
+
+main().catch(console.error);