mcpg 0.5.1__py3-none-any.whl

mcpg/__init__.py

@@ -0,0 +1,3 @@
+"""MCPg — a PostgreSQL Model Context Protocol server."""
+
+__version__ = "0.5.1"

mcpg/__main__.py

@@ -0,0 +1,37 @@
+"""Console entry point for the MCPg server (``mcpg`` / ``python -m mcpg``)."""
+
+from __future__ import annotations
+
+import asyncio
+import sys
+
+if sys.platform == "win32":
+    asyncio.set_event_loop_policy(asyncio.WindowsSelectorEventLoopPolicy())
+
+from mcpg import __version__
+from mcpg.config import ConfigError, load_settings
+from mcpg.server import run
+
+
+def main() -> int:
+    """Load configuration from the environment and run the server.
+
+    Returns:
+        A process exit code: 0 on clean shutdown, 1 on a configuration error.
+    """
+    # SECURITY.md asks bug reporters to include ``mcpg --version`` in
+    # their report; this is the surface that gives them an answer.
+    if len(sys.argv) > 1 and sys.argv[1] in {"--version", "-V"}:
+        print(f"mcpg {__version__}")
+        return 0
+    try:
+        settings = load_settings()
+    except ConfigError as exc:
+        print(f"mcpg: configuration error: {exc}", file=sys.stderr)
+        return 1
+    run(settings)
+    return 0
+
+
+if __name__ == "__main__":  # pragma: no cover
+    sys.exit(main())

mcpg/_vendor/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2025, Crystal Corp.
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

mcpg/_vendor/README.md

@@ -0,0 +1,37 @@
+# Vendored code
+
+This directory contains third-party code vendored into MCPg. It is **not**
+authored by the MCPg project and is excluded from the coverage gate and from
+`mypy --strict`.
+
+## `sql/` — PostgreSQL SQL-safety kernel
+
+- **Source:** [`crystaldba/postgres-mcp`](https://github.com/crystaldba/postgres-mcp)
+- **Pinned commit:** `07eb329c8c48e49640e0d1b5b35465d4d024c3ee` (2026-01-22)
+- **Licence:** MIT — see [`LICENSE`](LICENSE) (Copyright (c) 2025, Crystal Corp.)
+- **What it is:** the `pglast`-based SQL allowlist validator (`safe_sql.py`),
+  async connection pool / driver (`sql_driver.py`), parameter binding
+  (`bind_params.py`), and extension utilities. See ADR-0001 for why only this
+  subpackage was vendored.
+
+### Local modifications
+
+The source files are near-verbatim copies. Deliberate local changes:
+
+- **Test import paths** (`tests/vendor/`): `postgres_mcp.sql` →
+  `mcpg._vendor.sql`. The `sql/` source files use relative imports and were
+  otherwise copied unchanged.
+- **`sql_driver.py` — `DbConnPool` pool sizing (ADR-0003):** `__init__` gained
+  `min_size`/`max_size` parameters (defaulting to `1`/`5`, reproducing the
+  original behaviour), used in `pool_connect`. A ~3-line, behaviour-preserving
+  change; re-apply on re-sync. Marked in-file with `MCPg local modification`.
+
+### Re-sync procedure
+
+To pull upstream security fixes:
+
+1. `git clone https://github.com/crystaldba/postgres-mcp /tmp/pg-mcp`
+2. Diff `/tmp/pg-mcp/src/postgres_mcp/sql/` against `./sql/`.
+3. Apply relevant changes; do not introduce new imports outside the subpackage.
+4. Update the pinned commit above and note the change in `CHANGELOG.md`.
+5. Run `tests/vendor/` to confirm behaviour is preserved.

mcpg/_vendor/__init__.py

@@ -0,0 +1,6 @@
+"""Vendored third-party code. See README.md for provenance and licence.
+
+Code under this package is NOT authored by the MCPg project. It is a pinned
+copy of an upstream project, kept verbatim except for import paths. Do not
+hand-edit; re-sync via the procedure in README.md.
+"""

mcpg/_vendor/sql/__init__.py

@@ -0,0 +1,31 @@
+"""SQL utilities."""
+
+from .bind_params import ColumnCollector
+from .bind_params import SqlBindParams
+from .bind_params import TableAliasVisitor
+from .extension_utils import check_extension
+from .extension_utils import check_hypopg_installation_status
+from .extension_utils import check_postgres_version_requirement
+from .extension_utils import get_postgres_version
+from .extension_utils import reset_postgres_version_cache
+from .index import IndexDefinition
+from .safe_sql import SafeSqlDriver
+from .sql_driver import DbConnPool
+from .sql_driver import SqlDriver
+from .sql_driver import obfuscate_password
+
+__all__ = [
+    "ColumnCollector",
+    "DbConnPool",
+    "IndexDefinition",
+    "SafeSqlDriver",
+    "SqlBindParams",
+    "SqlDriver",
+    "TableAliasVisitor",
+    "check_extension",
+    "check_hypopg_installation_status",
+    "check_postgres_version_requirement",
+    "get_postgres_version",
+    "obfuscate_password",
+    "reset_postgres_version_cache",
+]