udbmcp 0.2.0__py3-none-any.whl

udbmcp-0.2.0.dist-info/METADATA

@@ -0,0 +1,403 @@
+Metadata-Version: 2.5
+Name: udbmcp
+Version: 0.2.0
+Summary: Read-only MCP server that gives AI agents safe access to your databases
+Project-URL: Homepage, https://github.com/alghanim/universal-db-mcp
+Project-URL: Repository, https://github.com/alghanim/universal-db-mcp
+Project-URL: Issues, https://github.com/alghanim/universal-db-mcp/issues
+Project-URL: Security, https://github.com/alghanim/universal-db-mcp/security/policy
+Author: universal-db-mcp maintainers
+License-Expression: Apache-2.0
+License-File: LICENSE
+License-File: NOTICE
+Keywords: ai-agents,clickhouse,database,db2,mariadb,mcp,model-context-protocol,mysql,oracle,postgresql,read-only,sql,sql-server,sqlite
+Classifier: Development Status :: 4 - Beta
+Classifier: Environment :: Console
+Classifier: Intended Audience :: Developers
+Classifier: Intended Audience :: System Administrators
+Classifier: Operating System :: MacOS
+Classifier: Operating System :: POSIX :: Linux
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3 :: Only
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Topic :: Database
+Classifier: Topic :: Database :: Front-Ends
+Classifier: Topic :: Security
+Requires-Python: >=3.12
+Requires-Dist: cryptography>=50
+Requires-Dist: h11<0.17,>=0.16
+Requires-Dist: mcp<3,>=2.2.0
+Requires-Dist: pyyaml<7,>=6.0.2
+Requires-Dist: sqlglot~=30.18.0
+Requires-Dist: uvicorn<0.54,>=0.52.4
+Provides-Extra: all
+Requires-Dist: clickhouse-connect<1.9,>=1.8; extra == 'all'
+Requires-Dist: oracledb<5,>=4; extra == 'all'
+Requires-Dist: psycopg[binary]<4,>=3.2; extra == 'all'
+Requires-Dist: pymysql[ed25519,rsa]<2,>=1.2.0; extra == 'all'
+Requires-Dist: pynacl>=1.6.2; extra == 'all'
+Provides-Extra: clickhouse
+Requires-Dist: clickhouse-connect<1.9,>=1.8; extra == 'clickhouse'
+Provides-Extra: db2
+Requires-Dist: ibm-db<4,>=3.2; extra == 'db2'
+Provides-Extra: dev
+Requires-Dist: build>=1.2; extra == 'dev'
+Requires-Dist: mypy>=2.4.0; extra == 'dev'
+Requires-Dist: pytest>=9; extra == 'dev'
+Requires-Dist: ruff>=0.16; extra == 'dev'
+Requires-Dist: types-pyyaml; extra == 'dev'
+Provides-Extra: mssql
+Requires-Dist: pyodbc<6,>=5.1; extra == 'mssql'
+Provides-Extra: mysql
+Requires-Dist: pymysql[ed25519,rsa]<2,>=1.2.0; extra == 'mysql'
+Requires-Dist: pynacl>=1.6.2; extra == 'mysql'
+Provides-Extra: oracle
+Requires-Dist: oracledb<5,>=4; extra == 'oracle'
+Provides-Extra: pg
+Requires-Dist: psycopg[binary]<4,>=3.2; extra == 'pg'
+Description-Content-Type: text/markdown
+
+<h1 align="center">universal-db-mcp</h1>
+
+<!-- mcp-name: io.github.alghanim/universal-db-mcp -->
+
+<p align="center">
+  <a href="https://github.com/alghanim/universal-db-mcp/actions/workflows/ci.yml"><img alt="CI" src="https://img.shields.io/github/actions/workflow/status/alghanim/universal-db-mcp/ci.yml?branch=main&label=CI"></a>
+  <a href="https://scorecard.dev/viewer/?uri=github.com/alghanim/universal-db-mcp"><img alt="OpenSSF Scorecard" src="https://api.scorecard.dev/projects/github.com/alghanim/universal-db-mcp/badge"></a>
+  <a href="https://m8ven.ai/mcp/alghanim-universal-db-mcp-s7tavw?s=readme"><img alt="M8ven Score" src="https://m8ven.ai/badge/mcp/alghanim-universal-db-mcp-s7tavw?v=5eb12f3910935759c86d7f0e5e0874ec"></a>
+  <a href="LICENSE"><img alt="license: Apache-2.0" src="https://img.shields.io/badge/license-Apache--2.0-4c1"></a>
+  <a href="pyproject.toml"><img alt="python: 3.12" src="https://img.shields.io/badge/python-3.12-3776ab"></a>
+  <a href="docs/tools.md"><img alt="MCP: 29 tools" src="https://img.shields.io/badge/MCP-29%20tools-6f42c1"></a>
+  <a href="#what-it-does"><img alt="databases: 8" src="https://img.shields.io/badge/databases-8-e67e22"></a>
+  <a href="#how-it-keeps-the-databases-safe"><img alt="access: read-only" src="https://img.shields.io/badge/access-read--only-0e8a7d"></a>
+  <a href="docs/claude-code-integration.md"><img alt="works with: Claude · Cursor · VS Code" src="https://img.shields.io/badge/works%20with-Claude%20%C2%B7%20Cursor%20%C2%B7%20VS%20Code-5b5bd6"></a>
+</p>
+
+<p align="center">
+  <a href="#quick-start">Quick start</a> ·
+  <a href="docs/tools.md">Tools</a> ·
+  <a href="docs/security.md">Security model</a> ·
+  <a href="#install-offline-air-gapped-sites">Offline install</a> ·
+  <a href="#documentation-map">Docs</a> ·
+  <a href="https://alghanim.github.io/universal-db-mcp/">Landing page</a> ·
+  <a href="SECURITY.md">Report a vulnerability</a>
+</p>
+
+**Give AI agents read-only access to your databases, safely.**
+universal-db-mcp is an [MCP](https://modelcontextprotocol.io) server that lets
+Claude Code, Cursor, VS Code or any MCP client discover, document, profile,
+search and query the databases you declare, and nothing else. Every statement
+is parsed before it runs and must be a single read; it runs on a read-only
+session, columns that look sensitive are masked, and every call is audited.
+Writes are refused, not discouraged. The server never calls an LLM, sends no
+telemetry and installs nothing at runtime, so it also runs on networks with
+no internet access at all.
+
+**Status:** hardened through a production security review and three follow-up
+code reviews (2026-09/10). `IMPLEMENTATION_STATUS.md` is the honest ledger of
+what is implemented, what is verified and how, and what is still open; claims
+here are limited to what its gates and `test-evidence/` demonstrate.
+
+## What it does
+
+**Engines** (each version below passes the version matrix,
+`scripts/version_matrix/`, results in `test-evidence/version-matrix/`):
+
+| Engine | Verified versions |
+| --- | --- |
+| PostgreSQL | 12, 13, 14, 15, 16, 17 |
+| MySQL / MariaDB | MySQL 5.7, 8.0, 8.4; MariaDB 10.6, 11.4 |
+| ClickHouse | 23.8, 24.3, 24.8, 25.3 |
+| Oracle | 18c, 21c, 23 (thin mode); 11g, 18c, 23 (thick mode, for legacy password verifiers) |
+| SQL Server | 2017, 2019, 2022 |
+| Db2 | 11.5.8, 11.5.9 |
+| SQLite | the CPython build's SQLite |
+
+**29 tools** (`docs/tools.md` is the contract):
+
+- **Connections:** `db_list_connections`, `db_test_connection`, `db_get_capabilities`.
+- **Catalog:** `db_list_catalogs`, `db_list_databases`, `db_list_schemas`,
+  `db_list_tables`, `db_get_table`, `db_list_columns`, `db_list_views`,
+  `db_list_synonyms`, `db_list_routines`, `db_list_indexes`,
+  `db_get_relationships`, `db_get_statistics`, `db_search_metadata`,
+  `db_get_catalog`.
+- **Reading data:** `db_validate_query`, `db_query`, `db_sample_table`,
+  `db_explain` (plans, never executions), `db_get_query_history`.
+- **Discovery, review and documentation:** `db_profile_table`,
+  `db_search_values` (find a value across tables and connections without
+  writing SQL), `db_infer_relationships`, `db_review_schema` (prioritized
+  optimization findings), `db_document_schema` (Markdown data dictionary).
+- **Federated reads:** `db_federated_query` (one statement, or one per
+  connection, merged) and `db_federated_join` (a bounded hash join across two
+  connections).
+
+## How it keeps the databases safe
+
+Defence in depth; details and limitations in `docs/security.md` and
+`docs/session-safety.md`.
+
+1. **The database login is the primary control.** Give every connection a
+   SELECT-only login limited to the schemas you list in `allowed_schemas`.
+   The one exception is Db2's `db_explain`, which writes its plan rows into
+   the explain tables a DBA provisions, reads them back and deletes them:
+   that login also needs INSERT, SELECT and DELETE on those tables, and only
+   there (Oracle's plans go to the session-private `PLAN_TABLE`, which needs
+   no grant). Column-level grants or views are the real protection for
+   sensitive columns.
+2. **Read-only sessions.** On by default and enforced by the server itself on
+   PostgreSQL, MySQL/MariaDB, ClickHouse and SQLite; Db2 runs at `UR` and SQL
+   Server at `READ UNCOMMITTED`, so reads take no share locks. There is no
+   write mode: `security.read_only: false`, `allow_write_operations: true` and
+   a connection's `read_only: false` are rejected when the config loads. Every
+   session is also pinned to the settings that decide how its server lexes a
+   statement (MySQL `sql_mode`, PostgreSQL `standard_conforming_strings`, SQL
+   Server `QUOTED_IDENTIFIER`, ...), so the server reads exactly what the
+   guard parsed.
+3. **The SQL guard** parses every statement in the connection's dialect and
+   accepts one read statement only; anything it cannot parse is refused.
+   Under a non-empty `allowed_schemas`, every table must be schema-qualified
+   (`SELECT * FROM ocean.buoys`, not `SELECT * FROM buoys`), because the
+   engine would otherwise choose the schema. On Oracle, Db2 and PostgreSQL,
+   CTE names and unquoted table names must be ASCII. Views that show other
+   sessions' SQL, column statistics or stored credentials are refused whatever
+   `allowed_system_schemas` opens; Oracle's `SYS.DUAL` and Db2's
+   `SYSIBM.SYSDUMMY1` to `SYSDUMMY4` are always readable. Bound parameters
+   reach the driver exactly as validated.
+4. **Masking that refuses what it cannot prove.** Columns matching the
+   sensitive patterns (built in, plus `security.mask_columns`) are masked by
+   where each output value comes from. A statement over a table with masked
+   columns is accepted only in shapes the analysis fully proves (columns,
+   expressions, aggregates, window functions, joins, CTEs, subqueries,
+   unions, `*` over listed tables); anything else is refused before it runs,
+   with the construct named. Predicates are not masked: a `WHERE` on a masked
+   column can still narrow results.
+5. **Bounded, sanitized, audited.** Row, byte, cell and time ceilings; a
+   per-query memory cap on ClickHouse (2 GiB by default,
+   `options.max_memory_usage`); size caps checked before any parsing; driver
+   error text sanitized. Every call is audited, by default to the platform's
+   state directory (`/var/log/universal-db-mcp/audit.jsonl` for the service's
+   config, `%ProgramData%\UniversalDB MCP\logs\audit.jsonl` on Windows,
+   `~/.universal-db-mcp/audit.jsonl` for a per-user config).
+6. **stdio is not a security boundary.** A stdio registration runs the server
+   as your user inside the agent, so an agent that can run shell commands or
+   read files can read the credentials in `~/.universal-db-mcp/secrets/` and
+   connect directly, outside the guard. Use SELECT-only logins, or run the
+   server in HTTP mode (bearer token, behind your reverse proxy) under a
+   separate service account.
+
+## Quick start
+
+### From PyPI
+
+```bash
+uv tool install 'udbmcp[all]'   # or: pipx install 'udbmcp[all]'
+udbmcp add-connection            # writes ~/.universal-db-mcp/config.yaml, secrets in private files beside it
+udbmcp configure-agents          # registers it with Claude Code, Claude Desktop, Cursor, VS Code, Cline
+```
+
+`[all]` brings the PostgreSQL, MySQL/MariaDB, ClickHouse and Oracle (thin
+mode) drivers; SQLite needs none. SQL Server (`udbmcp[mssql]`) and Db2
+(`udbmcp[db2]`) also need their vendors' client libraries. The wheel on PyPI
+is the one the release's signed bundle carries, uploaded with PEP 740
+attestations. Run `configure-agents` from an install like this one, not
+through `uvx`: `uvx` runs from a cache that uv prunes, and `configure-agents`
+refuses to register an interpreter there.
+
+### From source
+
+```bash
+uv venv --python 3.12 .venv
+uv pip install --python .venv/bin/python -e '.[dev]'
+.venv/bin/python examples/sqlite-demo/create_demo.py   # synthetic fixture
+UDBMCP_CONFIG=examples/sqlite-demo/config.yaml .venv/bin/python -m universal_db_mcp serve --transport stdio
+```
+
+Register the server with your agents with `.venv/bin/udbmcp configure-agents`
+(Claude Code, Claude Desktop, Cursor, VS Code, Cline and others;
+`docs/claude-code-integration.md`). It writes the launch command with
+`python -I` (isolated mode), so the package and its dependencies must be
+installed in a virtual environment, as above; `pip install --user` or
+`PYTHONPATH`-only setups are refused. It registers the system config
+(`/etc/universal-db-mcp/config.yaml`, on Windows
+`%ProgramData%\UniversalDB MCP\config.yaml`) when your user can read it,
+otherwise the per-user `~/.universal-db-mcp/config.yaml`; export an absolute
+`UDBMCP_CONFIG` first to choose another. The `.deb` ships the system config
+readable by every user, so on a `.deb` host make it `root:udbmcp` 0640 first
+(`docs/claude-code-integration.md`).
+
+`udbmcp add-connection` adds a connection interactively and stores its
+secrets with private permissions; `udbmcp doctor` checks a config, its
+secrets and (with `--connectivity`) every database.
+
+### With the container image
+
+```bash
+docker pull ghcr.io/alghanim/universal-db-mcp:0.2.0
+gh attestation verify oci://ghcr.io/alghanim/universal-db-mcp:0.2.0 --repo alghanim/universal-db-mcp
+```
+
+It is listed in the official [MCP Registry](https://registry.modelcontextprotocol.io)
+as `io.github.alghanim/universal-db-mcp`, so clients that browse the registry
+can install it. Mount your config and its secrets read-only and run it over
+stdio or HTTP as `docs/offline-deployment.md` (Container mode) describes. The image has no SQL
+Server driver; the same section shows how to add Microsoft's.
+
+## A minimal connection
+
+```yaml
+connections:
+  sales:
+    type: postgres
+    host: pg.example.internal
+    port: 5432
+    database: sales
+    username_file: /etc/universal-db-mcp/secrets/sales.user   # 0600, owned by the service account
+    password_file: /etc/universal-db-mcp/secrets/sales.pw
+    allowed_schemas: [reporting]
+    tls:
+      enabled: true
+      ca_file: /etc/universal-db-mcp/ca/internal-ca.pem
+```
+
+`config.example.yaml` documents every setting, per engine.
+
+## Install offline (air-gapped sites)
+
+| Artifact | Platform | Status |
+| --- | --- | --- |
+| `.deb` | Ubuntu 24.04 x86-64 | release gate: install, upgrade, rollback and refusal cases with no network |
+| `.pkg` | macOS arm64 | release gate passes; unsigned (no Developer ID yet) |
+| `.msi` | Windows x64 | compiles with WiX and its custom actions are tested under PowerShell; never run on a Windows host yet |
+| offline bundle | any of the above | signed with the release key; `scripts/install_offline.sh` |
+| container image | linux/amd64, connected hosts | `ghcr.io/alghanim/universal-db-mcp`, built by CI from each release's signed bundle, with a provenance attestation (`docs/offline-deployment.md`) |
+
+See `docs/offline-deployment.md`, and `docs/site-upgrade-runbook.md` for a
+site that installs from a release stick (`scripts/package/release_usb.sh`
+builds one). Short version:
+
+```bash
+# staging machine (authorized for network): the bundle is signed with the release
+# key (docs/offline-build.md; scripts/package/release_usb.sh builds a whole stick)
+python scripts/prepare_offline_bundle.py --profile linux-x86_64-ubuntu24.04-cp312 --out out/bundle \
+  --signing-key udbmcp-release.pem
+
+# target machine (offline), after the trust bootstrap in docs/offline-deployment.md,
+# which installs the public key once its fingerprint matches one received out of band:
+sudo UDBMCP_RELEASE_PUBKEY=/etc/universal-db-mcp/keys/release.pub.pem \
+  bash /usr/local/lib/udbmcp-trust/install_offline.sh out/bundle/universal-db-mcp-*/ /opt/universal-db-mcp
+# the installer does not create the config: start from the bundle's template, readable by the service only
+sudo install -m 640 -o root -g udbmcp out/bundle/universal-db-mcp-*/config-templates/config.yaml /etc/universal-db-mcp/config.yaml
+sudo -u udbmcp /opt/universal-db-mcp/venv/bin/python -m universal_db_mcp doctor --config /etc/universal-db-mcp/config.yaml
+```
+
+Nothing from a bundle or stick runs before its Ed25519 signature is checked
+against the installed release key. The installers refuse a bundle whose
+signed `release_seq` is older than the installed release unless you ask for
+the downgrade: `--allow-downgrade` for the scripts, `UDBMCP_ALLOW_DOWNGRADE=1`
+for the `.deb`, a one-shot flag file the `.pkg` names, and
+`UDBMCP_ALLOW_DOWNGRADE=1` for one of this release's MSIs after uninstalling
+the newer one (Windows Installer refuses any older MSI over a newer install).
+In container mode, `scripts/load_images_offline.sh` keeps a root-owned release
+record (`/var/lib/universal-db-mcp/release.json`) and refuses an older bundle
+the same way.
+
+## Verification
+
+- **Tests:** over 12,000 unit tests, run by GitHub Actions CI on
+  ubuntu-24.04 and locally on macOS; ruff and `mypy --strict` clean.
+  `IMPLEMENTATION_STATUS.md` (section 3f) records the latest counts.
+- **Real databases:** the version matrix above, and
+  `scripts/live_evidence.py` against the mock databases of
+  `scripts/fixtures/start_mock_dbs.sh` (`docs/mock-environment.md`).
+- **Packages:** the `.deb` and `.pkg` release gates and the offline upgrade
+  gate (`docs/acceptance-tests.md`).
+- **Supply chain:** pinned, hash-checked locks for every platform, checked
+  with pip-audit.
+- **Fuzzing:** the SQL guard is fuzzed with Atheris (`tests/fuzz/`) after each
+  push to `main` and weekly: any input it neither accepts nor refuses cleanly fails the run.
+
+Not yet verified anywhere: the MSI on a real Windows host and a real macOS
+Installer run of the `.pkg`.
+
+## Development
+
+```bash
+.venv/bin/python -m pytest -o addopts='' -q tests                 # the whole suite
+UDBMCP_LIVE_FIXTURES=1 UDBMCP_DOCKER_TESTS=1 \
+  .venv/bin/python -m pytest -o addopts='' -q tests               # plus the live-database and container tests
+.venv/bin/ruff check src tests scripts && .venv/bin/mypy --strict src
+```
+
+Tests that use the local mock databases run only with
+`UDBMCP_LIVE_FIXTURES=1`, so a package gate never waits on a paused or absent
+database; the real-`dpkg` container sequences run only with
+`UDBMCP_DOCKER_TESTS=1`. The bundle-builder tests need pip in the venv: after
+`uv sync`, run
+`uv pip install --python .venv/bin/python --require-hashes -r .github/ci-pip-requirements.txt`.
+
+**CI.** `.github/workflows/ci.yml` is a GitHub Actions workflow (ubuntu-24.04,
+CPython 3.12): the unit suite (including the MSI custom-action tests under
+`pwsh`), ruff, `mypy --strict`, `prepare_offline_bundle.py --check-locks`, and
+pip-audit over every lock. Actions are pinned to commit SHAs. It runs on
+every pull request and every push to `main`, in two jobs at once: the slowest
+installer and packaging test files run in `installer-tests`, and `checks`
+runs the rest and every other check. `.github/workflows/audit.yml` runs the
+same pip-audit every week, so a new advisory fails a run between commits too.
+Dependabot proposes grouped updates monthly.
+`tests/unit/test_hardening_2026_09_27_ci_hygiene.py` guards the CI setup
+itself (pinned actions, pytest options, the two jobs together running every
+test once, no skips or hooks hidden in conftests or helpers, no compiled or
+symlinked files in the tree); it is a tripwire, not a sandbox, so changes to
+conftests, test helpers and CI files still need a reviewer. After a
+Dependabot bump of `requirements/runtime.in`, refresh and review the locks
+(`docs/offline-build.md`).
+
+## Documentation map
+
+| Document | Purpose |
+| --- | --- |
+| `docs/architecture.md` | components, data flow, process boundaries, execution limits |
+| `docs/security.md` | threat model, policy, masking, audit, secrets, TLS |
+| `docs/tools.md` | the MCP tool contract (29 `db_*` tools) |
+| `docs/session-safety.md` | what every connection does to the server session so agent reads cannot hurt production |
+| `docs/driver-matrix.md` | per-engine drivers, native dependencies, provisioning SQL, test status |
+| `docs/oracle-connect-modes.md` | Oracle thick mode (legacy password verifiers), SID and TNS alias connections, TLS |
+| `docs/db2-tls-setup.md` | Db2 TLS enablement runbook |
+| `docs/claude-code-integration.md` | registering the server with Claude Code and other agents, internal gateway setup |
+| `docs/offline-build.md` | Stage A: bundle preparation on the staging machine |
+| `docs/offline-deployment.md` | Stage B: install inside the air gap (`.deb`, `.pkg`, `.msi`, bundle, containers) |
+| `docs/offline-upgrade-rollback.md` | upgrade and rollback |
+| `docs/site-upgrade-runbook.md` | step-by-step site upgrade, with this release's behaviour changes (shipped on the stick as `UPGRADE-README.md`) |
+| `docs/acceptance-tests.md` | release gates and how to run them |
+| `docs/mock-environment.md` | the local mock databases used for live evidence |
+| `docs/adding-connectors.md` | how to add an engine adapter |
+| `docs/troubleshooting.md` | common failures and `doctor` output |
+| `IMPLEMENTATION_STATUS.md` | the implemented / verified / open ledger |
+| `SECURITY.md` | how to report a vulnerability, supported versions, how fixes reach an air-gapped site |
+| `site/index.html` | the product landing page, published by `.github/workflows/pages.yml` (`tests/unit/test_landing_page.py` re-runs every guard verdict it shows) |
+
+## Reporting a vulnerability
+
+Please report security issues privately through GitHub private vulnerability
+reporting, never in a public issue. `SECURITY.md` says what to include and
+how fixes reach air-gapped sites. The project is maintained by the
+universal-db-mcp maintainers and publishes no e-mail address: the one in the
+`.deb`'s Maintainer field, which Debian requires, is a placeholder under the
+reserved `.invalid` domain and reaches no one.
+
+## License
+
+Apache-2.0. See `LICENSE` and `NOTICE`. Both ship in the wheel and in the
+offline bundle's `licenses/` directory; the `.deb` states the license in its
+DEP-5 `/usr/share/doc/universal-db-mcp/copyright` file, with `NOTICE` beside
+it. Third-party components keep their own licenses: the bundle lists them in
+`sbom/cyclonedx.json`, and each wheel in its `wheelhouse/` carries its license
+files.
+
+The Db2 connector's `ibm_db` wheel contains IBM Data Server Driver for ODBC
+and CLI redistributables, which IBM licenses for distribution as part of an
+application. They ship unmodified, with IBM's license and notice files,
+which govern them (see `NOTICE`). Db2 and IBM are trademarks of International
+Business Machines Corporation, used here only to name the database and its
+driver. Microsoft's ODBC Driver for SQL Server and Oracle's Instant Client are
+not redistributed: sites install them from the vendor.

udbmcp-0.2.0.dist-info/RECORD

@@ -0,0 +1,55 @@
+universal_db_mcp/__init__.py,sha256=CE2m_fw2AzPSBTq0-db_NdIEPhllt2DppIRTInCLaPk,107
+universal_db_mcp/__main__.py,sha256=1UJe9XFQcfWMdRTE12kinD7cd4a8k5POAOLcfDfQhvI,49908
+universal_db_mcp/config.py,sha256=lM2G1otjrRd1duw1SZpkzvca3DanlYFR7PBFPSNOrNs,79037
+universal_db_mcp/errors.py,sha256=cG5nyeVqAL-TYJpzT1dDF21PIKvUr_qIbza4Zx9GCG0,884
+universal_db_mcp/http_protocol.py,sha256=QGoX6QL7XYQlw-FbjT7KCnjtmXRg3Qmawo9U1k6bMGc,25574
+universal_db_mcp/server.py,sha256=kuOCvdW_ahEbSisTekBaCKNo4E3LTLoq-cKPhZBxGRQ,302812
+universal_db_mcp/wizard.py,sha256=RZCdniH3oW0foR2rGSvPk0X5bqlSY-_FJ722W3cWa5E,71685
+universal_db_mcp/agents/__init__.py,sha256=sxLXTWg3dbSeu57TRXxSyaPee4G5Ge_3u-jJUgjPsp4,85
+universal_db_mcp/agents/claude_code.py,sha256=LNqXC_Wynj9wmWL4XkGUhMh3ocuMbP2IrjNoez8mB_0,22924
+universal_db_mcp/agents/claude_desktop.py,sha256=s0uDLnrYiWZbd1b5NSDHwdd0Yc4FquBkrx1aDamoCBA,19594
+universal_db_mcp/agents/cline.py,sha256=HnCAmu4DsI3ylc_Pv2fJT42YBz_Js3eicxfbiahbjHw,15942
+universal_db_mcp/agents/core.py,sha256=Dr-1oNcoipEenFth0l4DunjAi3CIafgNaUXt7N8_HS4,77995
+universal_db_mcp/agents/cursor.py,sha256=7GoS0gPduD9quFl5jSpJn7O6yswElbDxbH-05D1x-9s,16247
+universal_db_mcp/agents/dsh.py,sha256=lsnGD4k_FKoR53O20fXnm0Kt3wt1a7sh7zGzNPM9A38,32917
+universal_db_mcp/agents/registry.py,sha256=4v_wYEl3Sf2I3Dvxm0EG7a75hGITElreSYhRuk35Rhk,4812
+universal_db_mcp/agents/vscode.py,sha256=KkcMG5NrScWGas7bLwiiY9EodMmvwe-lE1-zcNUtOnI,24593
+universal_db_mcp/connectors/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
+universal_db_mcp/connectors/base.py,sha256=atw8kckpF1pOu8LuRmfFhV6T_-kCsb72nz2ltfZy984,21273
+universal_db_mcp/connectors/clickhouse.py,sha256=R6LD9bkPQMzfqE-1EPqq4wF46RJiCqHnHQdEf13rLDc,75655
+universal_db_mcp/connectors/db2.py,sha256=jHF6wToCnYp_ylKIpVdKB8keBodNx3LeRN4KhMQbBBU,56559
+universal_db_mcp/connectors/driver_helpers.py,sha256=W2xUErzPs39ZQBMUqVAMi2ZllZ-ZBjPqa8eiTQ6nQYo,31208
+universal_db_mcp/connectors/mssql.py,sha256=dT8QI0dz6WDsChkT6D04BpCJ7-V8ybv0AMjNFYF0LFk,55416
+universal_db_mcp/connectors/mysql.py,sha256=iyvFHgvK3uYJckBEx9oFaggZwDmahLMgokSn-fbbVg0,58282
+universal_db_mcp/connectors/oracle.py,sha256=xOQg3x_QAi_-_jqaHZmzLUh4PGnFxaSa8D9ZydE-fc4,63808
+universal_db_mcp/connectors/postgres.py,sha256=DGuSO866HMFaaQtlMZpn2gBQsc4De5ko4LSKCt2wLm0,53086
+universal_db_mcp/connectors/registry.py,sha256=fjzxZSU40zCrxz2WIJlFv6QUDG1Rw-ljTalHFDkAldE,1760
+universal_db_mcp/connectors/sqlite.py,sha256=BA1zlZbdZ_nCHnkDOve0FnaBLzK_UHZNGBvYBA8PrlU,60489
+universal_db_mcp/diagnostics/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
+universal_db_mcp/diagnostics/doctor.py,sha256=5je0YH2V_K7PKpkdBwGgzyu6Na77kBTtLxNSuJzpZpg,61873
+universal_db_mcp/diagnostics/site_check.py,sha256=5xDj_Twp1zzbmWP4iLRCAXeYz0-lketjxr1a0Njr1Ls,11486
+universal_db_mcp/discovery/__init__.py,sha256=A9mKPuuRd7YQ_ZTq1wnOSb73ut7AYprrMvPrihZrI90,85
+universal_db_mcp/discovery/document.py,sha256=ZYvhH3gM_0F4RSP3pNqGxpclUXtE-EQM6TiHsZO-I8k,6368
+universal_db_mcp/discovery/inference.py,sha256=PYgbUDLFPwH2ue-jxJTKoozDDmfSCoWdfyXyXBjyC2g,6787
+universal_db_mcp/discovery/profile.py,sha256=kUEwMMtk7uxmq7yaQB0RMh77A_OGSUCu0VFYqnIBig8,11492
+universal_db_mcp/discovery/system_schemas.py,sha256=z2ArU2ikq299-f4t76kO-1Ap8gvpAJ8VeWphiYGttSY,35121
+universal_db_mcp/discovery/types.py,sha256=L664QpGEGooq-ESOAyodE2KxkNKOMfv0Igz-o7x6kcg,9371
+universal_db_mcp/models/__init__.py,sha256=VRjlzQ12zmWSwSNvdugR07yYhaX0kPU4ENFDQnpK090,320
+universal_db_mcp/models/capabilities.py,sha256=3jQ7Wctg4kiKKblLZssREhLW2D_cPVhXm7XgdWaI7-4,2693
+universal_db_mcp/models/responses.py,sha256=6wSVi4VkKBzPwhMMeu0uIXS0Fx3x88ZS76UA-l3gfzk,2018
+universal_db_mcp/security/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
+universal_db_mcp/security/cursors.py,sha256=QeX8D1BrVv-UtwlAMsxDaXUNQMOeTjG451DyELmTdog,5602
+universal_db_mcp/security/policy.py,sha256=4C8yKw-5rNHmhHjcePxIwkRlXYNBn-kGMVhrV5JooNQ,14834
+universal_db_mcp/security/redact.py,sha256=nXZ5eHVkUkPweiVmPMfak4j1waBgWIIe9SLhTLs1K90,8571
+universal_db_mcp/security/session.py,sha256=c2v3LtqOAI9getaBdJ71VGcCRZIhxK8VzYkPzKOMbgs,3281
+universal_db_mcp/security/sql_guard.py,sha256=Q2g7240AqZD_5-pTutsIuUsZoIfdNEtOd4haNNpxW7g,140114
+universal_db_mcp/services/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
+universal_db_mcp/services/audit.py,sha256=9UoD5xE2D31rU9cr3afj9g3OK12UsXiVsW39GIC_P5Q,40425
+universal_db_mcp/services/executor.py,sha256=7nWLfMDDvoF8w4G47S2WcGWXXj6CDCtZ-tUm53nnsDQ,51824
+universal_db_mcp/services/metadata.py,sha256=KnnU1VkhOn7dn1FhVxqocwmrDrWTIFGnZVgB44oBVBI,20317
+udbmcp-0.2.0.dist-info/METADATA,sha256=ioLIDpvaV1iXHUr41INNDXpe5fbk8XtX7--cpLlobMI,22107
+udbmcp-0.2.0.dist-info/WHEEL,sha256=W3fkpkm7-wf9vBI5Z-7s0eWkeM-spu78I8Neb98DeEg,87
+udbmcp-0.2.0.dist-info/entry_points.txt,sha256=roBlxBOXmk2bEDKWA-NF1o2tq8o8jjhz-ng-za_hKDo,58
+udbmcp-0.2.0.dist-info/licenses/LICENSE,sha256=z8d0m5b2O9McPEK1xHG_dWgUBT6EfBDz6wA0F7xSPTA,11358
+udbmcp-0.2.0.dist-info/licenses/NOTICE,sha256=ebx4RqRunFmBr0-MF6uAniAgp6GZeipMgI9HKvRlDIg,725
+udbmcp-0.2.0.dist-info/RECORD,,

udbmcp-0.2.0.dist-info/WHEEL

@@ -0,0 +1,4 @@
+Wheel-Version: 1.0
+Generator: hatchling 1.32.4
+Root-Is-Purelib: true
+Tag: py3-none-any

udbmcp-0.2.0.dist-info/entry_points.txt

@@ -0,0 +1,2 @@
+[console_scripts]
+udbmcp = universal_db_mcp.__main__:main