v3.1.0 - Release version 3.1.0 by neverinfamous · Pull Request #152 · neverinfamous/postgres-mcp

neverinfamous · 2026-05-14T20:46:05Z

Highlights

New Tool Groups: Added Security, Roles, and Document Store tool groups, totaling 30 new tools for advanced auditing, RLS management, and JSONB document collections.
Architectural Fixes: Enforced strict Object Existence (P154) verification and resolved Zod validation leaks across 10 tool groups to prevent silent failures and raw exceptions.
Security Updates: Pinned transitive Dockerfile dependencies and bumped hono, ip-address, and fast-uri to address known vulnerabilities.

Added

Automated coverage badge updates upon test suite execution.
Added initializationSql config to safely execute session setup queries on connection checkout.
Introduced 9 new tools for Security (auditing, SSL/TLS, masking, firewall).
Introduced 12 new tools for Roles (CRUD, privilege, RLS management).
Introduced 9 new tools for Document Store (JSONB document management, indexing).

Changed

Updated core dependencies (typescript, eslint, zod, jose, @playwright/test, vitest).
Pinned transitive Docker dependencies for security.
Optimized default limits and payload truncation parameters to prevent LLM token bloat.
Streamlined pg_schema_snapshot and added exclude parameter to pg_list_views.

Fixed

Remediated Zod validation leaks across multiple groups to ensure structured handler errors.
Enforced strict P154 object existence verification across Migration, Core, PostGIS, Performance, etc.
Standardized alias parsing and type coercion across tool groups.
Standardized parsing for missing extensions and native Postgres exceptions into structured errors.
Fixed numerous bugs across Backup, Docstore, Ltree, Transactions, Partman, and Pgcrypto tools.
Stabilized testing infrastructure (PowerShell bleed and E2E assertions).

Security

Bumped hono to 4.12.18, ip-address to 10.2.0, and fast-uri to 3.1.2 via package overrides.

View Full Changelog: v3.0.7...v3.1.0

Port the initializationSql feature from mysql-mcp for cross-project parity. - Add initializationSql?: string[] to ConnectionPoolConfig - Track initialized connections via WeakSet<PoolClient> for zero-GC dedup - Add applyInitializationSql() that runs SQL once per connection lifetime - Hook into getConnection() to apply init before returning client - Reroute query() through getConnection() for full init coverage - Fix 2 existing query error tests (mockPoolQuery → mockClientQuery) - Add 5 new unit tests: no-op, once-per-conn, query path, failure, empty - Update UNRELEASED.md and code-map.md documentation

…rectory Move migration Zod schemas to dedicated schemas/migration/ directory. Update imports in core-exports.ts and introspection barrel. Completes migration tool group restructuring for mysql-mcp parity.

Add 9 security tools: pg_security_audit, pg_security_firewall_status, pg_security_firewall_rules, pg_security_ssl_status, pg_security_encryption_status, pg_security_password_validate, pg_security_mask_data, pg_security_user_privileges, pg_security_sensitive_tables. Includes Zod schemas, handler implementations, adapter registration, Code Mode integration (pg.security.*), help resource, and full documentation sync across README, DOCKER_README, Tool-Reference, code-map, and test-server docs (248->257 tools, 22->23 groups).

- Add test-tool-group-security.md (direct, 23-item checklist) - Add test-tool-group-codemode-security.md (code mode, 23-item checklist) - Add test-tools-advanced-security.md (advanced, 14 stress tests across 6 categories) - Update READMEs: prompt counts 27->28, 28->29, 28->29 - Update test-results.md: add security rows + monitoring pairing

- Add roles tool group: management, privileges, session (12 tools) - Add Zod schemas (roles.ts) and wire into tool registry - Add Code Mode API (pg.roles.*) with aliases - Add server instructions (roles.md) and regenerate constants - Update capabilities.ts (totalTools: 269, totalPrompts: 20) - Sync README, DOCKER_README, code-map, Tool-Reference, test-server - Update tool-filter test to 24 groups - Fix UNRELEASED.md with roles changelog entry

- Add test-tool-group-roles.md (Direct MCP, 29 checklist items) - Add test-tool-group-codemode-roles.md (Code Mode, 29 items) - Add test-tools-advanced-roles.md (Advanced Stress, 15 items / 6 categories) - Update READMEs: prompt counts (28->29, 29->30, 29->30) - Update test-results: add TBD rows, update safe pairs - Roles tools: role CRUD, privilege grants, membership, RLS, SET ROLE

…umentation audit - Add 9 NoSQL-style JSONB document collection tools: pg_doc_list_collections, pg_doc_create_collection, pg_doc_drop_collection, pg_doc_collection_info, pg_doc_find, pg_doc_add, pg_doc_modify, pg_doc_remove, pg_doc_create_index - Add Zod schemas, Code Mode bridge (pg.docstore.*), resource, prompt, help - Update code-map.md, Tool-Reference.md, README.md, DOCKER_README.md - Update tool-constants.ts header (248->278), all counts (269->278 tools, 24->25 groups, 22->23 resources, 20->21 prompts) - Verified: tsc 0 errors, eslint 0 errors, Docker README 23,246/25,000 chars

- Add test_documents seed collection (5 JSONB docs) to test-database.sql - Add test_documents verification to reset-database.ps1 - Create test-tool-group-docstore.md (Direct MCP, 31 items) - Create test-tool-group-codemode-docstore.md (Code Mode, 26 items) - Create test-tools-advanced-docstore.md (Advanced, 15 items, 6 categories) - Update all 3 READMEs with counts (30/31/31 prompts) - Update all 3 test-results.md with docstore tracking rows - Update test-server/README.md (25 groups, 278 tools, schema+group rows)

…ma pattern

…o operators

…nsure accurate P154 error reporting

…mode certification

… split violation

…g_list_objects

…yload

…erification

…rror parity

…g extension error

…lidation

…t objects - Enforced strict canonical Schema X does not exist and Table X does not exist messages in helpers.ts - Updated performance.test.ts assertions to expect the new canonical strings - Logged changes in UNRELEASED.md

Copilot

Copilot wasn't able to review this pull request because it exceeds the maximum number of files (300). Try reducing the number of changed files and requesting a review from Copilot again.

Chris & Mike added 30 commits April 8, 2026 20:20

ci: enforce tag-only deployments to prevent duplicate pipeline failures

7a152ab

Delete test-agent-experience.md.

141ee6a

refactor(migration): decouple migration schemas from introspection di…

f2548ee

…rectory Move migration Zod schemas to dedicated schemas/migration/ directory. Update imports in core-exports.ts and introspection barrel. Completes migration tool group restructuring for mysql-mcp parity.

build: update dependencies and resolve linting errors

ab33625

test: fix jsonb test assertion for zod 4.4 error formatting

802bdfe

test(backup): certify tool group via code mode and enforce split sche…

1ad9abf

…ma pattern

test(backup): fix output schema invariant for error payloads

86a66eb

fix(docstore): fix rowCount coercion, add split schemas, support mong…

6bc52cc

…o operators

fix(docstore): certify docstore tool group, fix alias mappings, and e…

f91f95d

…nsure accurate P154 error reporting

docs: certify introspection tool group

0345d7c

chore: certify jsonb tool group part 2

2f83079

chore: certify kcache tool group via code mode

a66fa23

chore(ltree): fix create_extension validation leak and complete code …

706bcda

…mode certification

test(ltree): complete full Code Mode certification and resolve schema…

c7d342a

… split violation

test: certify migration tool group via code mode

3d3621e

test: add migration tool group matrix to task.md

a7fb783

test(monitoring): certify full code mode parity for 11 tools

e0d1321

test: remediate split test prompts for postgis, stats, and vector

46a8679

chore(core): fix test checklist expectations for pg_write_query and p…

7b9b4a7

…g_list_objects

test: complete codemode testing for pgcrypto group

67db084

chore: certify pgcrypto tool group

72e2b07

fix(security): implement includeGrants and verify code mode parity

b22e698

fix(security): resolve Zod validation leaks via Split Schema pattern

719ad35

Chris & Mike added 25 commits May 13, 2026 23:28

feat(schema): certify schema tool group and optimize pg_list_views pa…

63063a8

…yload

test: fix reset-database.ps1 powershell unicode parsing errors

31c3372

chore(test): certify admin tool group via Code Mode

e3868c7

chore(postgres-mcp): remove unused PartmanUpdateConfigSchema export

7974149

chore(postgres-mcp): commit uncommitted changes

8ac16fb

fix(performance): enforce P154 schema check and fix tests

4fcb288

fix(vector): split schema exports and inline definitions

a6725b6

fix: resolve state bleed in test suite database seeding and partman v…

45577d8

…erification

fix(docstore): finalize docstore group certification and structured e…

b6a0a9f

…rror parity

fix(kcache): implement dbname/username filtering and normalize missin…

da81f98

…g extension error

fix(core): improve ltree extension missing error mapping

dfd9d1c

fix(migration): remediate zod leaks and p154 schema verification

4a2b2fb

fix(partman): dynamic extension schema resolution and split schema va…

ee0f726

…lidation

chore(postgis): certify toolkit via stress tests

19b49d6

fix: add fuzzystrmatch extension check to error parser for text tools

2ae9395

fix: correct regex for extension function parsing in error-parser.ts

6a8aa77

test: certify citext tool group via codemode

adc9941

Reset citext prompt.

fe9c217

chore: update dependencies and security patches

cbf5083

Update test coverage badges.

b5ffacc

docs: synchronize tool counts across documentation files

31f95b4

Update tool count in docker-publish.yml

32c23fb

docs: restructure UNRELEASED.md to adhere to Keep a Changelog standards

edbe40c

v3.1.0 - Release version 3.1.0

ed713d9

Copilot AI review requested due to automatic review settings May 14, 2026 20:46

Copilot AI reviewed May 14, 2026

View reviewed changes

Merge main and resolve package-lock.json conflict

651f279

neverinfamous merged commit ba84229 into main May 14, 2026
10 checks passed

neverinfamous deleted the release/v3.1.0 branch May 14, 2026 20:53

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

v3.1.0 - Release version 3.1.0#152

v3.1.0 - Release version 3.1.0#152
neverinfamous merged 246 commits into
mainfrom
release/v3.1.0

neverinfamous commented May 14, 2026

Uh oh!

Copilot AI left a comment

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Conversation

neverinfamous commented May 14, 2026

Highlights

Added

Changed

Fixed

Security

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants