sql-mini-mcp 0.9.1__tar.gz

sql_mini_mcp-0.9.1/.gitignore

@@ -0,0 +1,19 @@
+/.serena/
+/*.agents.md
+/.coverage
+/.coverage.*
+/coverage.xml
+/htmlcov/
+.venv/
+__pycache__/
+*.egg-info/
+/dist/
+/.pytest_cache/
+/.ruff_cache/
+.env
+.env.*
+/.hypothesis/
+/.mutmut-cache
+/mutants/
+/.cbm-cache/
+/.cbm-runtime/

sql_mini_mcp-0.9.1/CHANGELOG.md

@@ -0,0 +1,25 @@
+# Changelog
+
+All notable externally observable changes to this project are documented in this file.
+
+The format follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/) and uses the
+categories `Added`, `Changed`, `Deprecated`, `Removed`, `Fixed`, and `Security`.
+
+## [Unreleased]
+
+## [0.9.1] - 2026-09-20
+
+### Added
+
+- Publishing of release-tag packages to PyPI and their metadata to the MCP Registry.
+
+### Fixed
+
+- Source distributions now include only release files, excluding local development caches.
+
+## [0.9.0] - 2026-09-20
+
+### Added
+
+- Read-only SQL Server metadata tools for configured server aliases, databases, tables, and
+  stored procedures.

sql_mini_mcp-0.9.1/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Anton Padapryhara
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

sql_mini_mcp-0.9.1/PKG-INFO

@@ -0,0 +1,130 @@
+Metadata-Version: 2.5
+Name: sql-mini-mcp
+Version: 0.9.1
+Summary: Minimal, read-only, PII-safe MCP server for SQL databases.
+License: MIT License
+        
+        Copyright (c) 2026 Anton Padapryhara
+        
+        Permission is hereby granted, free of charge, to any person obtaining a copy
+        of this software and associated documentation files (the "Software"), to deal
+        in the Software without restriction, including without limitation the rights
+        to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+        copies of the Software, and to permit persons to whom the Software is
+        furnished to do so, subject to the following conditions:
+        
+        The above copyright notice and this permission notice shall be included in all
+        copies or substantial portions of the Software.
+        
+        THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+        IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+        FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+        AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+        LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+        OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+        SOFTWARE.
+License-File: LICENSE
+Requires-Python: <3.15,>=3.12
+Requires-Dist: anyio<5,>=4.8
+Requires-Dist: mcp<3,>=2
+Requires-Dist: pydantic<3,>=2.10
+Requires-Dist: pyodbc<6,>=5.2
+Requires-Dist: pyyaml<7,>=6
+Requires-Dist: sqlalchemy<3,>=2.0
+Description-Content-Type: text/markdown
+
+# sql-mini-mcp
+
+<!-- mcp-name: io.github.proprock/sql-mini-mcp -->
+
+Compact MCP server for SQL Server metadata. The current Milestone 1 build supports only SQL
+Server and is metadata-only; PII-safe `execute_sql` is developed separately in Milestone 2.
+
+## Tools
+
+- `list_servers`
+- `list_databases`
+- `list_tables`
+- `get_table_definition`
+- `list_stored_procedures`
+- `get_stored_procedure`
+
+The server does not discover network servers, expose a full catalog as resources, use an ORM, or
+execute caller-provided SQL.
+
+## Install and run
+
+Python 3.12–3.14 and `uv` are required. SQL Server uses `pyodbc` and needs Microsoft ODBC Driver
+18 for SQL Server.
+
+```powershell
+uv sync --all-groups --locked
+Copy-Item sql-mini-mcp.example.yaml sql-mini-mcp.yaml
+$env:SQL_MINI_MCP_CONFIG = "$PWD\sql-mini-mcp.yaml"
+uv run sql-mini-mcp --check-config
+uv run sql-mini-mcp
+```
+
+`sql-mini-mcp` speaks MCP over stdio. Configure the same command and environment in the MCP host.
+All logs go to stderr.
+
+MySQL/MariaDB configuration is intentionally rejected until Milestone 3.
+
+## Configuration and secrets
+
+Connection topology stays in YAML while `${NAME}` placeholders read process environment values.
+A placeholder occupying the entire `connection_url` may contain a complete SQLAlchemy URL;
+embedded values are URL-encoded before substitution.
+
+Every `pii_safe` alias requires its own base64-encoded 32-byte key:
+
+```powershell
+$bytes = New-Object byte[] 32
+[System.Security.Cryptography.RandomNumberGenerator]::Fill($bytes)
+$env:LEGACY_PROD_PII_KEY = [Convert]::ToBase64String($bytes)
+```
+
+Keys are rejected if reused by two aliases. Milestone 2 will authenticate the server alias as
+AES-GCM associated data, so tokens cannot cross aliases even if keys are accidentally duplicated
+outside normal config loading. Key rotation or alias renaming will invalidate existing tokens.
+
+See [sql-mini-mcp.example.yaml](sql-mini-mcp.example.yaml) for a complete example.
+
+## Development
+
+```powershell
+uv run ruff format --check .
+uv run ruff check .
+uv run ty check
+uv run pytest tests/unit tests/contract -m "not integration"
+```
+
+## Live SQL Server gate
+
+The reproducible Windows gate requires Docker Desktop in Linux-container mode and ODBC Driver 18.
+It starts the digest-pinned SQL Server 2022 service when needed, then reuses the healthy container
+and its test database on later runs:
+
+```powershell
+.\scripts\test-sqlserver.ps1
+```
+
+Each run creates uniquely named schemas, tables, stored procedures, users, and logins, then removes
+those objects in `finally`. The container and its volume remain available for fast repeat runs. To
+explicitly remove that local test service and its volume:
+
+```powershell
+.\scripts\test-sqlserver.ps1 -Reset
+```
+
+The container runs SQL Server 2022 with the test database at compatibility level 130. That exercises
+the SQL Server 2016 compatibility surface, but it is not evidence of a run against an actual SQL
+Server 2016 instance. An external disposable SQL Server can be checked directly:
+
+```powershell
+$env:SQL_MINI_MCP_TEST_SQLSERVER_URL = "mssql+pyodbc://..."
+uv run pytest tests/integration/sqlserver -m integration -v
+```
+
+Live and future Milestone 2 security gates are documented in [CHECKS.md](CHECKS.md). Architecture
+and threat assumptions are in [ARCHITECTURE.md](ARCHITECTURE.md) and [SECURITY.md](SECURITY.md).

sql_mini_mcp-0.9.1/README.md

@@ -0,0 +1,95 @@
+# sql-mini-mcp
+
+<!-- mcp-name: io.github.proprock/sql-mini-mcp -->
+
+Compact MCP server for SQL Server metadata. The current Milestone 1 build supports only SQL
+Server and is metadata-only; PII-safe `execute_sql` is developed separately in Milestone 2.
+
+## Tools
+
+- `list_servers`
+- `list_databases`
+- `list_tables`
+- `get_table_definition`
+- `list_stored_procedures`
+- `get_stored_procedure`
+
+The server does not discover network servers, expose a full catalog as resources, use an ORM, or
+execute caller-provided SQL.
+
+## Install and run
+
+Python 3.12–3.14 and `uv` are required. SQL Server uses `pyodbc` and needs Microsoft ODBC Driver
+18 for SQL Server.
+
+```powershell
+uv sync --all-groups --locked
+Copy-Item sql-mini-mcp.example.yaml sql-mini-mcp.yaml
+$env:SQL_MINI_MCP_CONFIG = "$PWD\sql-mini-mcp.yaml"
+uv run sql-mini-mcp --check-config
+uv run sql-mini-mcp
+```
+
+`sql-mini-mcp` speaks MCP over stdio. Configure the same command and environment in the MCP host.
+All logs go to stderr.
+
+MySQL/MariaDB configuration is intentionally rejected until Milestone 3.
+
+## Configuration and secrets
+
+Connection topology stays in YAML while `${NAME}` placeholders read process environment values.
+A placeholder occupying the entire `connection_url` may contain a complete SQLAlchemy URL;
+embedded values are URL-encoded before substitution.
+
+Every `pii_safe` alias requires its own base64-encoded 32-byte key:
+
+```powershell
+$bytes = New-Object byte[] 32
+[System.Security.Cryptography.RandomNumberGenerator]::Fill($bytes)
+$env:LEGACY_PROD_PII_KEY = [Convert]::ToBase64String($bytes)
+```
+
+Keys are rejected if reused by two aliases. Milestone 2 will authenticate the server alias as
+AES-GCM associated data, so tokens cannot cross aliases even if keys are accidentally duplicated
+outside normal config loading. Key rotation or alias renaming will invalidate existing tokens.
+
+See [sql-mini-mcp.example.yaml](sql-mini-mcp.example.yaml) for a complete example.
+
+## Development
+
+```powershell
+uv run ruff format --check .
+uv run ruff check .
+uv run ty check
+uv run pytest tests/unit tests/contract -m "not integration"
+```
+
+## Live SQL Server gate
+
+The reproducible Windows gate requires Docker Desktop in Linux-container mode and ODBC Driver 18.
+It starts the digest-pinned SQL Server 2022 service when needed, then reuses the healthy container
+and its test database on later runs:
+
+```powershell
+.\scripts\test-sqlserver.ps1
+```
+
+Each run creates uniquely named schemas, tables, stored procedures, users, and logins, then removes
+those objects in `finally`. The container and its volume remain available for fast repeat runs. To
+explicitly remove that local test service and its volume:
+
+```powershell
+.\scripts\test-sqlserver.ps1 -Reset
+```
+
+The container runs SQL Server 2022 with the test database at compatibility level 130. That exercises
+the SQL Server 2016 compatibility surface, but it is not evidence of a run against an actual SQL
+Server 2016 instance. An external disposable SQL Server can be checked directly:
+
+```powershell
+$env:SQL_MINI_MCP_TEST_SQLSERVER_URL = "mssql+pyodbc://..."
+uv run pytest tests/integration/sqlserver -m integration -v
+```
+
+Live and future Milestone 2 security gates are documented in [CHECKS.md](CHECKS.md). Architecture
+and threat assumptions are in [ARCHITECTURE.md](ARCHITECTURE.md) and [SECURITY.md](SECURITY.md).

sql_mini_mcp-0.9.1/pyproject.toml

@@ -0,0 +1,70 @@
+[project]
+name = "sql-mini-mcp"
+version = "0.9.1"
+description = "Minimal, read-only, PII-safe MCP server for SQL databases."
+readme = "README.md"
+requires-python = ">=3.12,<3.15"
+license = { file = "LICENSE" }
+dependencies = [
+    "anyio>=4.8,<5",
+    "mcp>=2,<3",
+    "pydantic>=2.10,<3",
+    "pyodbc>=5.2,<6",
+    "pyyaml>=6,<7",
+    "sqlalchemy>=2.0,<3",
+]
+
+[project.scripts]
+sql-mini-mcp = "sql_mini_mcp.__main__:main"
+
+[dependency-groups]
+dev = [
+    "prek>=0.2",
+    "pytest>=8.3,<10",
+    "pytest-cov>=6,<8",
+    "ruff>=0.11",
+    "ty>=0.0.1a20",
+]
+
+[build-system]
+requires = ["hatchling"]
+build-backend = "hatchling.build"
+
+[tool.hatch.build.targets.wheel]
+packages = ["src/sql_mini_mcp"]
+
+[tool.hatch.build.targets.sdist]
+include = [
+    "/CHANGELOG.md",
+    "/LICENSE",
+    "/README.md",
+    "/pyproject.toml",
+    "/server.json",
+    "/sql-mini-mcp.example.yaml",
+    "/src",
+]
+
+[tool.pytest.ini_options]
+addopts = "-ra --strict-markers"
+testpaths = ["tests"]
+markers = [
+    "integration: requires a live database",
+    "deep: expensive security verification",
+]
+
+[tool.coverage.run]
+branch = true
+source = ["sql_mini_mcp"]
+
+[tool.ruff]
+line-length = 100
+target-version = "py312"
+
+[tool.ruff.lint]
+select = ["E", "F", "I", "B", "UP", "SIM", "RUF"]
+
+[tool.ruff.format]
+quote-style = "double"
+
+[tool.ty.src]
+include = ["src", "tests"]

sql_mini_mcp-0.9.1/server.json

@@ -0,0 +1,21 @@
+{
+  "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
+  "name": "io.github.proprock/sql-mini-mcp",
+  "title": "SQL Mini MCP",
+  "description": "Minimal, read-only, PII-safe MCP server for SQL databases.",
+  "repository": {
+    "url": "https://github.com/proprock/sql-mini-mcp",
+    "source": "github"
+  },
+  "version": "0.9.1",
+  "packages": [
+    {
+      "registryType": "pypi",
+      "identifier": "sql-mini-mcp",
+      "version": "0.9.1",
+      "transport": {
+        "type": "stdio"
+      }
+    }
+  ]
+}

sql_mini_mcp-0.9.1/sql-mini-mcp.example.yaml

@@ -0,0 +1,32 @@
+version: 1
+
+runtime:
+  max_concurrent_db_operations: 8
+  engine_cache_size: 32
+  pool_size: 2
+  max_overflow: 2
+  pool_timeout_seconds: 10
+  statement_timeout_seconds: 30
+  default_max_rows: 200
+  hard_max_rows: 1000
+
+servers:
+  legacy-prod:
+    engine: sqlserver
+    access_level: pii_safe
+    connection_url: >-
+      mssql+pyodbc://${LEGACY_PROD_USER}:${LEGACY_PROD_PASSWORD}
+      @${LEGACY_PROD_HOST}/master
+      ?driver=ODBC+Driver+18+for+SQL+Server&Encrypt=yes
+    pii_key_env: LEGACY_PROD_PII_KEY
+    pii:
+      rules:
+        - database: "*"
+          schema: dbo
+          table: Users
+          columns: [Email, FirstName, LastName]
+
+  reporting-metadata:
+    engine: sqlserver
+    access_level: metadata
+    connection_url: "${REPORTING_SQL_URL}"

sql_mini_mcp-0.9.1/src/sql_mini_mcp/__init__.py

@@ -0,0 +1,3 @@
+"""Minimal, PII-safe MCP server for relational databases."""
+
+__version__ = "0.9.1"

sql_mini_mcp-0.9.1/src/sql_mini_mcp/__main__.py

@@ -0,0 +1,43 @@
+from __future__ import annotations
+
+import argparse
+import os
+import sys
+from pathlib import Path
+
+from sql_mini_mcp.config import load_config
+from sql_mini_mcp.errors import DomainError
+from sql_mini_mcp.mcp_server import create_server
+
+
+def _parser() -> argparse.ArgumentParser:
+    parser = argparse.ArgumentParser(description="Run the sql-mini-mcp stdio server.")
+    parser.add_argument(
+        "--config",
+        type=Path,
+        default=os.environ.get("SQL_MINI_MCP_CONFIG", "sql-mini-mcp.yaml"),
+        help="YAML configuration path (default: SQL_MINI_MCP_CONFIG or sql-mini-mcp.yaml)",
+    )
+    parser.add_argument(
+        "--check-config",
+        action="store_true",
+        help="Validate configuration and secrets without connecting to databases.",
+    )
+    return parser
+
+
+def main() -> None:
+    args = _parser().parse_args()
+    try:
+        config = load_config(args.config)
+    except DomainError as exc:
+        print(str(exc), file=sys.stderr)
+        raise SystemExit(2) from None
+    if args.check_config:
+        print(f"Configuration valid: {len(config.servers)} server alias(es).")
+        return
+    create_server(config).run("stdio")
+
+
+if __name__ == "__main__":
+    main()

sql_mini_mcp-0.9.1/src/sql_mini_mcp/config.py

@@ -0,0 +1,194 @@
+from __future__ import annotations
+
+import base64
+import binascii
+import os
+import re
+from collections.abc import Mapping
+from pathlib import Path
+from typing import Literal
+from urllib.parse import quote
+
+import yaml
+from pydantic import BaseModel, ConfigDict, Field, SecretStr, ValidationError, model_validator
+from sqlalchemy.engine import make_url
+
+from sql_mini_mcp.errors import DomainError, ErrorCode
+
+_ENV_PATTERN = re.compile(r"\$\{([A-Z_][A-Z0-9_]*)\}")
+_FULL_ENV_PATTERN = re.compile(r"^\$\{([A-Z_][A-Z0-9_]*)\}$")
+
+
+class RuntimeConfig(BaseModel):
+    model_config = ConfigDict(extra="forbid")
+
+    max_concurrent_db_operations: int = Field(default=8, ge=1, le=128)
+    engine_cache_size: int = Field(default=32, ge=1, le=1024)
+    pool_size: int = Field(default=2, ge=1, le=32)
+    max_overflow: int = Field(default=2, ge=0, le=64)
+    pool_timeout_seconds: int = Field(default=10, ge=1, le=300)
+    statement_timeout_seconds: int = Field(default=30, ge=1, le=3600)
+    max_definition_chars: int = Field(default=262_144, ge=1024, le=10_000_000)
+    default_max_rows: int = Field(default=200, ge=1, le=100_000)
+    hard_max_rows: int = Field(default=1000, ge=1, le=100_000)
+    max_sql_chars: int = Field(default=65_536, ge=256, le=1_000_000)
+    max_ast_nodes: int = Field(default=2000, ge=10, le=100_000)
+    max_joins: int = Field(default=8, ge=0, le=100)
+    max_in_list_items: int = Field(default=500, ge=1, le=100_000)
+
+    @model_validator(mode="after")
+    def validate_row_limits(self) -> RuntimeConfig:
+        if self.default_max_rows > self.hard_max_rows:
+            raise ValueError("default_max_rows cannot exceed hard_max_rows")
+        return self
+
+
+class PiiRule(BaseModel):
+    model_config = ConfigDict(extra="forbid")
+
+    database: str = Field(min_length=1)
+    schema_: str | None = Field(default=None, alias="schema")
+    table: str = Field(min_length=1)
+    columns: list[str] = Field(min_length=1)
+
+    @model_validator(mode="after")
+    def validate_wildcards(self) -> PiiRule:
+        if "*" in self.table or (self.schema_ and "*" in self.schema_):
+            raise ValueError("wildcards are allowed only in pii rule database")
+        if self.database != "*" and "*" in self.database:
+            raise ValueError("database must be an exact name or '*'")
+        folded = [column.casefold() for column in self.columns]
+        if len(folded) != len(set(folded)):
+            raise ValueError("pii rule columns must be unique")
+        return self
+
+
+class PiiConfig(BaseModel):
+    model_config = ConfigDict(extra="forbid")
+
+    rules: list[PiiRule] = Field(min_length=1)
+
+
+class ServerConfig(BaseModel):
+    model_config = ConfigDict(extra="forbid")
+
+    engine: Literal["sqlserver"]
+    access_level: Literal["metadata", "pii_safe"] = "metadata"
+    connection_url: SecretStr
+    pii_key_env: str | None = Field(default=None, pattern=r"^[A-Z_][A-Z0-9_]*$")
+    pii: PiiConfig | None = None
+    pii_key: SecretStr | None = Field(default=None, exclude=True)
+
+    @model_validator(mode="after")
+    def validate_security_shape(self) -> ServerConfig:
+        if self.access_level == "pii_safe":
+            if not self.pii_key_env or self.pii is None:
+                raise ValueError("pii_safe servers require pii_key_env and pii rules")
+        elif self.pii_key_env is not None or self.pii is not None:
+            raise ValueError("metadata servers cannot configure pii_key_env or pii rules")
+
+        driver = make_url(self.connection_url.get_secret_value()).drivername
+        expected = "mssql+pyodbc"
+        if driver != expected:
+            raise ValueError(f"engine {self.engine!r} requires SQLAlchemy dialect {expected!r}")
+        return self
+
+    def key_bytes(self) -> bytes | None:
+        if self.pii_key is None:
+            return None
+        return base64.b64decode(self.pii_key.get_secret_value(), validate=True)
+
+
+class AppConfig(BaseModel):
+    model_config = ConfigDict(extra="forbid")
+
+    version: Literal[1]
+    runtime: RuntimeConfig = Field(default_factory=RuntimeConfig)
+    servers: dict[str, ServerConfig] = Field(min_length=1)
+
+    @model_validator(mode="after")
+    def validate_aliases_and_keys(self) -> AppConfig:
+        seen_keys: dict[bytes, str] = {}
+        for alias, server in self.servers.items():
+            if not re.fullmatch(r"[A-Za-z0-9][A-Za-z0-9._-]*", alias):
+                raise ValueError(f"invalid server alias {alias!r}")
+            key = server.key_bytes()
+            if key is None:
+                continue
+            if len(key) != 32:
+                raise ValueError(f"PII key for server {alias!r} must decode to 32 bytes")
+            if previous := seen_keys.get(key):
+                raise ValueError(
+                    f"PII keys must be unique per server alias; {alias!r} duplicates {previous!r}"
+                )
+            seen_keys[key] = alias
+        return self
+
+
+def _expand_connection_url(template: str, environ: Mapping[str, str]) -> str:
+    full_match = _FULL_ENV_PATTERN.fullmatch(template)
+    if full_match:
+        name = full_match.group(1)
+        if name not in environ:
+            raise ValueError(f"missing environment variable {name}")
+        return environ[name]
+
+    def replace(match: re.Match[str]) -> str:
+        name = match.group(1)
+        if name not in environ:
+            raise ValueError(f"missing environment variable {name}")
+        return quote(environ[name], safe="")
+
+    expanded = _ENV_PATTERN.sub(replace, template)
+    if "${" in expanded:
+        raise ValueError("invalid environment placeholder in connection_url")
+    return expanded
+
+
+def _validation_summary(error: ValidationError) -> str:
+    issues: list[str] = []
+    for issue in error.errors(include_url=False, include_context=False, include_input=False):
+        location = ".".join(str(part) for part in issue["loc"])
+        issues.append(f"{location}: {issue['msg']}" if location else str(issue["msg"]))
+    return "; ".join(issues)
+
+
+def load_config(path: str | Path, environ: Mapping[str, str] | None = None) -> AppConfig:
+    env = os.environ if environ is None else environ
+    try:
+        raw = yaml.safe_load(Path(path).read_text(encoding="utf-8"))
+        if not isinstance(raw, dict):
+            raise ValueError("configuration root must be a mapping")
+        servers = raw.get("servers")
+        if not isinstance(servers, dict):
+            raise ValueError("servers must be a mapping")
+        for alias, value in servers.items():
+            if not isinstance(value, dict):
+                raise ValueError(f"server {alias!r} must be a mapping")
+            url = value.get("connection_url")
+            if not isinstance(url, str):
+                raise ValueError(f"server {alias!r} requires connection_url")
+            value["connection_url"] = _expand_connection_url(url, env)
+            key_env = value.get("pii_key_env")
+            if key_env is not None:
+                if not isinstance(key_env, str) or key_env not in env:
+                    raise ValueError(f"missing PII key environment variable {key_env!r}")
+                try:
+                    decoded = base64.b64decode(env[key_env], validate=True)
+                except (binascii.Error, ValueError) as exc:
+                    raise ValueError(f"PII key for server {alias!r} is not valid base64") from exc
+                if len(decoded) != 32:
+                    raise ValueError(f"PII key for server {alias!r} must decode to 32 bytes")
+                value["pii_key"] = env[key_env]
+        return AppConfig.model_validate(raw)
+    except DomainError:
+        raise
+    except ValidationError as exc:
+        raise DomainError(
+            ErrorCode.CONFIG_ERROR,
+            f"Invalid configuration: {_validation_summary(exc)}",
+        ) from exc
+    except (OSError, yaml.YAMLError) as exc:
+        raise DomainError(ErrorCode.CONFIG_ERROR, "Invalid configuration file.") from exc
+    except ValueError as exc:
+        raise DomainError(ErrorCode.CONFIG_ERROR, f"Invalid configuration: {exc}") from exc

sql_mini_mcp-0.9.1/src/sql_mini_mcp/db/__init__.py

@@ -0,0 +1 @@
+"""Database integration layer."""