@askdb/core 1.0.0-beta.41 → 1.0.0-beta.43

package/dist/sql/lexer.js

@@ -0,0 +1,397 @@
+export const POSTGRES_LEXER = {
+    id: "postgres",
+    backslashEscapes: false,
+    doubleQuote: "identifier",
+    backtickIdentifiers: false,
+    bracketIdentifiers: false,
+    dollarQuotes: true,
+    escapeStrings: true,
+    hashComments: false,
+    dashCommentNeedsSpace: false,
+    nestedBlockComments: true,
+    executableComments: false,
+    atVariables: false,
+    hashIdentifiers: false,
+};
+export const MYSQL_LEXER = {
+    id: "mysql",
+    backslashEscapes: true,
+    doubleQuote: "string",
+    backtickIdentifiers: true,
+    bracketIdentifiers: false,
+    dollarQuotes: false,
+    escapeStrings: false,
+    hashComments: true,
+    dashCommentNeedsSpace: true,
+    nestedBlockComments: false,
+    executableComments: true,
+    atVariables: true,
+    hashIdentifiers: false,
+};
+export const SQLSERVER_LEXER = {
+    id: "sqlserver",
+    backslashEscapes: false,
+    doubleQuote: "identifier",
+    backtickIdentifiers: false,
+    bracketIdentifiers: "doubled",
+    dollarQuotes: false,
+    escapeStrings: false,
+    hashComments: false,
+    dashCommentNeedsSpace: false,
+    nestedBlockComments: true,
+    executableComments: false,
+    atVariables: true,
+    hashIdentifiers: true,
+};
+export const SQLITE_LEXER = {
+    id: "sqlite",
+    backslashEscapes: false,
+    doubleQuote: "identifier",
+    backtickIdentifiers: true,
+    bracketIdentifiers: "simple",
+    dollarQuotes: false,
+    escapeStrings: false,
+    hashComments: false,
+    dashCommentNeedsSpace: false,
+    nestedBlockComments: false,
+    executableComments: false,
+    atVariables: true,
+    hashIdentifiers: false,
+};
+/**
+ * Dialect-agnostic profile for callers that have no dialect (the tenant placeholder
+ * path, the sensitive guardrail when no dialect is supplied). Recognizes the union of
+ * quoting forms — `'…'`, `E'…'`, `$tag$…$tag$`, `"…"`, `` `…` ``, `[…]` — with the
+ * escape rules the owning engine uses, and standard `--` / `/* *\/` comments.
+ */
+export const GENERIC_LEXER = {
+    id: "generic",
+    backslashEscapes: false,
+    doubleQuote: "identifier",
+    backtickIdentifiers: true,
+    bracketIdentifiers: "doubled",
+    dollarQuotes: true,
+    escapeStrings: true,
+    hashComments: false,
+    dashCommentNeedsSpace: false,
+    nestedBlockComments: false,
+    executableComments: false,
+    atVariables: true,
+    hashIdentifiers: false,
+};
+/** Every engine-specific profile. Used when the dialect is unknown and each reading must be safe. */
+export const ENGINE_LEXER_PROFILES = [
+    POSTGRES_LEXER,
+    MYSQL_LEXER,
+    SQLSERVER_LEXER,
+    SQLITE_LEXER,
+];
+/**
+ * The lexer profile for a dialect, or `undefined` when the id is not a built-in engine
+ * family (callers should then check every profile in {@link ENGINE_LEXER_PROFILES}).
+ *
+ * `backslashEscapes` on the spec is honored: MySQL with `NO_BACKSLASH_ESCAPES` sets it
+ * to `false`; Postgres with `standard_conforming_strings = off` sets it to `true`.
+ * An unset value on a MySQL-family spec means the server default (escapes on).
+ */
+export function lexerProfileFor(dialect) {
+    switch (dialect.id) {
+        case "postgres":
+        case "cockroachdb":
+            return dialect.backslashEscapes === true
+                ? { ...POSTGRES_LEXER, backslashEscapes: true }
+                : POSTGRES_LEXER;
+        case "mysql":
+        case "mariadb":
+            return dialect.backslashEscapes === false
+                ? { ...MYSQL_LEXER, backslashEscapes: false }
+                : MYSQL_LEXER;
+        case "sqlserver":
+            return SQLSERVER_LEXER;
+        case "sqlite":
+            return SQLITE_LEXER;
+        default:
+            return undefined;
+    }
+}
+const WORD_START = /[A-Za-z_\u0080-￿]/;
+const WORD_CHAR = /[A-Za-z0-9_$\u0080-￿]/;
+const DIGIT = /[0-9]/;
+const HEX = /[0-9A-Fa-f]/;
+const DOLLAR_TAG = /^\$([A-Za-z_\u0080-￿][A-Za-z0-9_\u0080-￿]*)?\$/;
+/**
+ * Whether the `--` at `i` starts a line comment. It always does, except on MySQL/MariaDB
+ * (`needsSpace`), where it must be followed by whitespace, a control character, or the end
+ * of the statement: there `--1` is two minus signs and a number.
+ */
+export function startsDashComment(sql, i, needsSpace) {
+    if (sql[i] !== "-" || sql[i + 1] !== "-")
+        return false;
+    const after = sql[i + 2];
+    return !needsSpace || after === undefined || /[\s\x00-\x1f]/.test(after);
+}
+/** Split `sql` into tokens under `profile`. Whitespace is dropped; comments are kept. */
+export function lexSql(sql, profile) {
+    const tokens = [];
+    const n = sql.length;
+    let i = 0;
+    /** Index in `tokens` of the open MySQL `/*! … *\/` executable-comment opener, or -1. */
+    let executableOpener = -1;
+    const push = (kind, start, end, extra) => {
+        const text = sql.slice(start, end);
+        const value = extra?.value ?? text;
+        const token = { kind, text, value, lower: value.toLowerCase(), start, end };
+        if (extra?.quote !== undefined)
+            token.quote = extra.quote;
+        if (extra?.unterminated)
+            token.unterminated = true;
+        tokens.push(token);
+    };
+    /**
+     * Scan a delimited run starting after the opening delimiter at `from`. `close` doubled
+     * is always an escaped delimiter; `backslash` additionally makes `\x` an escape.
+     */
+    const scanDelimited = (from, close, backslash) => {
+        let j = from;
+        let value = "";
+        while (j < n) {
+            const c = sql[j];
+            if (backslash && c === "\\") {
+                value += sql.slice(j, j + 2);
+                j += 2;
+                continue;
+            }
+            if (c === close) {
+                if (sql[j + 1] === close) {
+                    value += close;
+                    j += 2;
+                    continue;
+                }
+                return { end: j + 1, value, terminated: true };
+            }
+            value += c;
+            j++;
+        }
+        return { end: n, value, terminated: false };
+    };
+    const lexString = (start, quoteAt, backslash, kind) => {
+        const q = sql[quoteAt];
+        const r = scanDelimited(quoteAt + 1, q, backslash);
+        push(kind, start, Math.min(r.end, n), {
+            quote: q,
+            ...(kind === "quoted_identifier" ? { value: r.value } : {}),
+            unterminated: !r.terminated,
+        });
+        i = r.end;
+    };
+    while (i < n) {
+        const ch = sql[i];
+        const next = sql[i + 1];
+        if (/\s/.test(ch)) {
+            i++;
+            continue;
+        }
+        // ---- comments -------------------------------------------------------
+        if (ch === "-" && next === "-") {
+            if (startsDashComment(sql, i, profile.dashCommentNeedsSpace)) {
+                let j = i + 2;
+                while (j < n && sql[j] !== "\n" && sql[j] !== "\r")
+                    j++;
+                push("comment", i, j);
+                i = j;
+                continue;
+            }
+        }
+        if (ch === "#" && profile.hashComments) {
+            let j = i + 1;
+            while (j < n && sql[j] !== "\n" && sql[j] !== "\r")
+                j++;
+            push("comment", i, j);
+            i = j;
+            continue;
+        }
+        if (ch === "*" && next === "/" && executableOpener !== -1) {
+            push("comment", i, i + 2);
+            executableOpener = -1;
+            i += 2;
+            continue;
+        }
+        if (ch === "/" && next === "*") {
+            if (profile.executableComments && executableOpener === -1) {
+                const exec = /^\/\*M?!\d*/.exec(sql.slice(i));
+                if (exec) {
+                    executableOpener = tokens.length;
+                    push("comment", i, i + exec[0].length);
+                    i += exec[0].length;
+                    continue;
+                }
+            }
+            let j = i + 2;
+            let depth = 1;
+            while (j < n) {
+                if (sql[j] === "*" && sql[j + 1] === "/") {
+                    depth--;
+                    j += 2;
+                    if (depth === 0)
+                        break;
+                    continue;
+                }
+                if (profile.nestedBlockComments && sql[j] === "/" && sql[j + 1] === "*") {
+                    depth++;
+                    j += 2;
+                    continue;
+                }
+                j++;
+            }
+            push("comment", i, Math.min(j, n), { unterminated: depth > 0 });
+            i = j;
+            continue;
+        }
+        // ---- strings and quoted identifiers ---------------------------------
+        if (ch === "'") {
+            lexString(i, i, profile.backslashEscapes, "string");
+            continue;
+        }
+        if (ch === '"') {
+            if (profile.doubleQuote === "identifier")
+                lexString(i, i, false, "quoted_identifier");
+            else
+                lexString(i, i, profile.backslashEscapes, "string");
+            continue;
+        }
+        if (ch === "`" && profile.backtickIdentifiers) {
+            lexString(i, i, false, "quoted_identifier");
+            continue;
+        }
+        if (ch === "[" && profile.bracketIdentifiers) {
+            let j = i + 1;
+            let value = "";
+            let terminated = false;
+            while (j < n) {
+                if (sql[j] === "]") {
+                    if (profile.bracketIdentifiers === "doubled" && sql[j + 1] === "]") {
+                        value += "]";
+                        j += 2;
+                        continue;
+                    }
+                    j++;
+                    terminated = true;
+                    break;
+                }
+                value += sql[j];
+                j++;
+            }
+            push("quoted_identifier", i, j, { value, quote: "[", unterminated: !terminated });
+            i = j;
+            continue;
+        }
+        if (ch === "$") {
+            if (profile.dollarQuotes) {
+                const tag = DOLLAR_TAG.exec(sql.slice(i));
+                if (tag) {
+                    const opener = tag[0];
+                    const closeAt = sql.indexOf(opener, i + opener.length);
+                    const end = closeAt === -1 ? n : closeAt + opener.length;
+                    push("string", i, end, { quote: opener, unterminated: closeAt === -1 });
+                    i = end;
+                    continue;
+                }
+            }
+            if (next !== undefined && (DIGIT.test(next) || (!profile.dollarQuotes && WORD_START.test(next)))) {
+                let j = i + 1;
+                while (j < n && WORD_CHAR.test(sql[j]) && sql[j] !== "$")
+                    j++;
+                push("parameter", i, j);
+                i = j;
+                continue;
+            }
+        }
+        // ---- words (and prefixed string literals) ---------------------------
+        if (WORD_START.test(ch) || (ch === "#" && profile.hashIdentifiers && next !== undefined && (next === "#" || WORD_START.test(next)))) {
+            let j = i + 1;
+            while (j < n && (WORD_CHAR.test(sql[j]) || (profile.hashIdentifiers && sql[j] === "#")))
+                j++;
+            const word = sql.slice(i, j);
+            if (sql[j] === "'" && j - i === 1) {
+                const prefix = word.toLowerCase();
+                if (prefix === "e" && profile.escapeStrings) {
+                    lexString(i, j, true, "string");
+                    continue;
+                }
+                if (prefix === "n" || prefix === "x" || prefix === "b") {
+                    lexString(i, j, profile.backslashEscapes, "string");
+                    continue;
+                }
+            }
+            push("word", i, j);
+            i = j;
+            continue;
+        }
+        // ---- numbers --------------------------------------------------------
+        if (DIGIT.test(ch) || (ch === "." && next !== undefined && DIGIT.test(next))) {
+            let j = i;
+            if (ch === "0" && (next === "x" || next === "X") && HEX.test(sql[i + 2] ?? "")) {
+                j = i + 2;
+                while (j < n && HEX.test(sql[j]))
+                    j++;
+            }
+            else {
+                while (j < n && DIGIT.test(sql[j]))
+                    j++;
+                if (sql[j] === "." && sql[j + 1] !== ".") {
+                    j++;
+                    while (j < n && DIGIT.test(sql[j]))
+                        j++;
+                }
+                if ((sql[j] === "e" || sql[j] === "E") && /^[eE][+-]?[0-9]/.test(sql.slice(j))) {
+                    j += sql[j + 1] === "+" || sql[j + 1] === "-" ? 2 : 1;
+                    while (j < n && DIGIT.test(sql[j]))
+                        j++;
+                }
+            }
+            // Trailing letters (`1from`, MySQL `1abc`) are lexed as a separate word so a keyword
+            // glued to a number is still seen.
+            push("number", i, j);
+            i = j;
+            continue;
+        }
+        // ---- parameters and punctuation -------------------------------------
+        if (ch === ":" && next === ":") {
+            push("punct", i, i + 2);
+            i += 2;
+            continue;
+        }
+        if (ch === ":" && next !== undefined && WORD_START.test(next)) {
+            let j = i + 1;
+            while (j < n && WORD_CHAR.test(sql[j]))
+                j++;
+            push("parameter", i, j);
+            i = j;
+            continue;
+        }
+        if (ch === "@" && profile.atVariables) {
+            let j = i + 1;
+            if (sql[j] === "@")
+                j++;
+            if (j < n && WORD_START.test(sql[j])) {
+                while (j < n && WORD_CHAR.test(sql[j]))
+                    j++;
+                push("parameter", i, j);
+                i = j;
+                continue;
+            }
+        }
+        push("punct", i, i + 1);
+        i++;
+    }
+    // An executable comment whose `*\/` never came: its body was lexed as code, but the
+    // comment itself runs off the end, so flag the opener like any other unclosed comment.
+    if (executableOpener !== -1)
+        tokens[executableOpener].unterminated = true;
+    return tokens;
+}
+/** True when any token ran off the end of the input. */
+export function hasUnterminatedToken(tokens) {
+    return tokens.some((t) => t.unterminated === true);
+}
+//# sourceMappingURL=lexer.js.map

package/dist/sql/lexer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lexer.js","sourceRoot":"","sources":["../../src/sql/lexer.ts"],"names":[],"mappings":"AAuDA,MAAM,CAAC,MAAM,cAAc,GAAoB;IAC7C,EAAE,EAAE,UAAU;IACd,gBAAgB,EAAE,KAAK;IACvB,WAAW,EAAE,YAAY;IACzB,mBAAmB,EAAE,KAAK;IAC1B,kBAAkB,EAAE,KAAK;IACzB,YAAY,EAAE,IAAI;IAClB,aAAa,EAAE,IAAI;IACnB,YAAY,EAAE,KAAK;IACnB,qBAAqB,EAAE,KAAK;IAC5B,mBAAmB,EAAE,IAAI;IACzB,kBAAkB,EAAE,KAAK;IACzB,WAAW,EAAE,KAAK;IAClB,eAAe,EAAE,KAAK;CACvB,CAAC;AAEF,MAAM,CAAC,MAAM,WAAW,GAAoB;IAC1C,EAAE,EAAE,OAAO;IACX,gBAAgB,EAAE,IAAI;IACtB,WAAW,EAAE,QAAQ;IACrB,mBAAmB,EAAE,IAAI;IACzB,kBAAkB,EAAE,KAAK;IACzB,YAAY,EAAE,KAAK;IACnB,aAAa,EAAE,KAAK;IACpB,YAAY,EAAE,IAAI;IAClB,qBAAqB,EAAE,IAAI;IAC3B,mBAAmB,EAAE,KAAK;IAC1B,kBAAkB,EAAE,IAAI;IACxB,WAAW,EAAE,IAAI;IACjB,eAAe,EAAE,KAAK;CACvB,CAAC;AAEF,MAAM,CAAC,MAAM,eAAe,GAAoB;IAC9C,EAAE,EAAE,WAAW;IACf,gBAAgB,EAAE,KAAK;IACvB,WAAW,EAAE,YAAY;IACzB,mBAAmB,EAAE,KAAK;IAC1B,kBAAkB,EAAE,SAAS;IAC7B,YAAY,EAAE,KAAK;IACnB,aAAa,EAAE,KAAK;IACpB,YAAY,EAAE,KAAK;IACnB,qBAAqB,EAAE,KAAK;IAC5B,mBAAmB,EAAE,IAAI;IACzB,kBAAkB,EAAE,KAAK;IACzB,WAAW,EAAE,IAAI;IACjB,eAAe,EAAE,IAAI;CACtB,CAAC;AAEF,MAAM,CAAC,MAAM,YAAY,GAAoB;IAC3C,EAAE,EAAE,QAAQ;IACZ,gBAAgB,EAAE,KAAK;IACvB,WAAW,EAAE,YAAY;IACzB,mBAAmB,EAAE,IAAI;IACzB,kBAAkB,EAAE,QAAQ;IAC5B,YAAY,EAAE,KAAK;IACnB,aAAa,EAAE,KAAK;IACpB,YAAY,EAAE,KAAK;IACnB,qBAAqB,EAAE,KAAK;IAC5B,mBAAmB,EAAE,KAAK;IAC1B,kBAAkB,EAAE,KAAK;IACzB,WAAW,EAAE,IAAI;IACjB,eAAe,EAAE,KAAK;CACvB,CAAC;AAEF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,aAAa,GAAoB;IAC5C,EAAE,EAAE,SAAS;IACb,gBAAgB,EAAE,KAAK;IACvB,WAAW,EAAE,YAAY;IACzB,mBAAmB,EAAE,IAAI;IACzB,kBAAkB,EAAE,SAAS;IAC7B,YAAY,EAAE,IAAI;IAClB,aAAa,EAAE,IAAI;IACnB,YAAY,EAAE,KAAK;IACnB,qBAAqB,EAAE,KAAK;IAC5B,mBAAmB,EAAE,KAAK;IAC1B,kBAAkB,EAAE,KAAK;IACzB,WAAW,EAAE,IAAI;IACjB,eAAe,EAAE,KAAK;CACvB,CAAC;AAEF,qGAAqG;AACrG,MAAM,CAAC,MAAM,qBAAqB,GAA+B;IAC/D,cAAc;IACd,WAAW;IACX,eAAe;IACf,YAAY;CACb,CAAC;AAEF;;;;;;;GAOG;AACH,MAAM,UAAU,eAAe,CAC7B,OAAqD;IAErD,QAAQ,OAAO,CAAC,EAAY,EAAE,CAAC;QAC7B,KAAK,UAAU,CAAC;QAChB,KAAK,aAAa;YAChB,OAAO,OAAO,CAAC,gBAAgB,KAAK,IAAI;gBACtC,CAAC,CAAC,EAAE,GAAG,cAAc,EAAE,gBAAgB,EAAE,IAAI,EAAE;gBAC/C,CAAC,CAAC,cAAc,CAAC;QACrB,KAAK,OAAO,CAAC;QACb,KAAK,SAAS;YACZ,OAAO,OAAO,CAAC,gBAAgB,KAAK,KAAK;gBACvC,CAAC,CAAC,EAAE,GAAG,WAAW,EAAE,gBAAgB,EAAE,KAAK,EAAE;gBAC7C,CAAC,CAAC,WAAW,CAAC;QAClB,KAAK,WAAW;YACd,OAAO,eAAe,CAAC;QACzB,KAAK,QAAQ;YACX,OAAO,YAAY,CAAC;QACtB;YACE,OAAO,SAAS,CAAC;IACrB,CAAC;AACH,CAAC;AAqCD,MAAM,UAAU,GAAG,mBAAmB,CAAC;AACvC,MAAM,SAAS,GAAG,uBAAuB,CAAC;AAC1C,MAAM,KAAK,GAAG,OAAO,CAAC;AACtB,MAAM,GAAG,GAAG,aAAa,CAAC;AAC1B,MAAM,UAAU,GAAG,gDAAgD,CAAC;AAEpE;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,GAAW,EAAE,CAAS,EAAE,UAAmB;IAC3E,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG;QAAE,OAAO,KAAK,CAAC;IACvD,MAAM,KAAK,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACzB,OAAO,CAAC,UAAU,IAAI,KAAK,KAAK,SAAS,IAAI,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC3E,CAAC;AAED,yFAAyF;AACzF,MAAM,UAAU,MAAM,CAAC,GAAW,EAAE,OAAwB;IAC1D,MAAM,MAAM,GAAe,EAAE,CAAC;IAC9B,MAAM,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC;IACrB,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,wFAAwF;IACxF,IAAI,gBAAgB,GAAG,CAAC,CAAC,CAAC;IAE1B,MAAM,IAAI,GAAG,CACX,IAAkB,EAClB,KAAa,EACb,GAAW,EACX,KAAkE,EAC5D,EAAE;QACR,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QACnC,MAAM,KAAK,GAAG,KAAK,EAAE,KAAK,IAAI,IAAI,CAAC;QACnC,MAAM,KAAK,GAAa,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;QACtF,IAAI,KAAK,EAAE,KAAK,KAAK,SAAS;YAAE,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;QAC1D,IAAI,KAAK,EAAE,YAAY;YAAE,KAAK,CAAC,YAAY,GAAG,IAAI,CAAC;QACnD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACrB,CAAC,CAAC;IAEF;;;OAGG;IACH,MAAM,aAAa,GAAG,CACpB,IAAY,EACZ,KAAa,EACb,SAAkB,EACmC,EAAE;QACvD,IAAI,CAAC,GAAG,IAAI,CAAC;QACb,IAAI,KAAK,GAAG,EAAE,CAAC;QACf,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YACb,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC,CAAE,CAAC;YAClB,IAAI,SAAS,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;gBAC5B,KAAK,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;gBAC7B,CAAC,IAAI,CAAC,CAAC;gBACP,SAAS;YACX,CAAC;YACD,IAAI,CAAC,KAAK,KAAK,EAAE,CAAC;gBAChB,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,KAAK,EAAE,CAAC;oBACzB,KAAK,IAAI,KAAK,CAAC;oBACf,CAAC,IAAI,CAAC,CAAC;oBACP,SAAS;gBACX,CAAC;gBACD,OAAO,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;YACjD,CAAC;YACD,KAAK,IAAI,CAAC,CAAC;YACX,CAAC,EAAE,CAAC;QACN,CAAC;QACD,OAAO,EAAE,GAAG,EAAE,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;IAC9C,CAAC,CAAC;IAEF,MAAM,SAAS,GAAG,CAAC,KAAa,EAAE,OAAe,EAAE,SAAkB,EAAE,IAAkB,EAAQ,EAAE;QACjG,MAAM,CAAC,GAAG,GAAG,CAAC,OAAO,CAAE,CAAC;QACxB,MAAM,CAAC,GAAG,aAAa,CAAC,OAAO,GAAG,CAAC,EAAE,CAAC,EAAE,SAAS,CAAC,CAAC;QACnD,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE;YACpC,KAAK,EAAE,CAAC;YACR,GAAG,CAAC,IAAI,KAAK,mBAAmB,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3D,YAAY,EAAE,CAAC,CAAC,CAAC,UAAU;SAC5B,CAAC,CAAC;QACH,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC;IACZ,CAAC,CAAC;IAEF,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACb,MAAM,EAAE,GAAG,GAAG,CAAC,CAAC,CAAE,CAAC;QACnB,MAAM,IAAI,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAExB,IAAI,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;YAClB,CAAC,EAAE,CAAC;YACJ,SAAS;QACX,CAAC;QAED,wEAAwE;QACxE,IAAI,EAAE,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YAC/B,IAAI,iBAAiB,CAAC,GAAG,EAAE,CAAC,EAAE,OAAO,CAAC,qBAAqB,CAAC,EAAE,CAAC;gBAC7D,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBACd,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI;oBAAE,CAAC,EAAE,CAAC;gBACxD,IAAI,CAAC,SAAS,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;gBACtB,CAAC,GAAG,CAAC,CAAC;gBACN,SAAS;YACX,CAAC;QACH,CAAC;QACD,IAAI,EAAE,KAAK,GAAG,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;YACvC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACd,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI;gBAAE,CAAC,EAAE,CAAC;YACxD,IAAI,CAAC,SAAS,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;YACtB,CAAC,GAAG,CAAC,CAAC;YACN,SAAS;QACX,CAAC;QACD,IAAI,EAAE,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,IAAI,gBAAgB,KAAK,CAAC,CAAC,EAAE,CAAC;YAC1D,IAAI,CAAC,SAAS,EAAE,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;YAC1B,gBAAgB,GAAG,CAAC,CAAC,CAAC;YACtB,CAAC,IAAI,CAAC,CAAC;YACP,SAAS;QACX,CAAC;QACD,IAAI,EAAE,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YAC/B,IAAI,OAAO,CAAC,kBAAkB,IAAI,gBAAgB,KAAK,CAAC,CAAC,EAAE,CAAC;gBAC1D,MAAM,IAAI,GAAG,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC9C,IAAI,IAAI,EAAE,CAAC;oBACT,gBAAgB,GAAG,MAAM,CAAC,MAAM,CAAC;oBACjC,IAAI,CAAC,SAAS,EAAE,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;oBACvC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;oBACpB,SAAS;gBACX,CAAC;YACH,CAAC;YACD,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACd,IAAI,KAAK,GAAG,CAAC,CAAC;YACd,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;gBACb,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;oBACzC,KAAK,EAAE,CAAC;oBACR,CAAC,IAAI,CAAC,CAAC;oBACP,IAAI,KAAK,KAAK,CAAC;wBAAE,MAAM;oBACvB,SAAS;gBACX,CAAC;gBACD,IAAI,OAAO,CAAC,mBAAmB,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;oBACxE,KAAK,EAAE,CAAC;oBACR,CAAC,IAAI,CAAC,CAAC;oBACP,SAAS;gBACX,CAAC;gBACD,CAAC,EAAE,CAAC;YACN,CAAC;YACD,IAAI,CAAC,SAAS,EAAE,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,YAAY,EAAE,KAAK,GAAG,CAAC,EAAE,CAAC,CAAC;YAChE,CAAC,GAAG,CAAC,CAAC;YACN,SAAS;QACX,CAAC;QAED,wEAAwE;QACxE,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YACf,SAAS,CAAC,CAAC,EAAE,CAAC,EAAE,OAAO,CAAC,gBAAgB,EAAE,QAAQ,CAAC,CAAC;YACpD,SAAS;QACX,CAAC;QACD,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YACf,IAAI,OAAO,CAAC,WAAW,KAAK,YAAY;gBAAE,SAAS,CAAC,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,mBAAmB,CAAC,CAAC;;gBACjF,SAAS,CAAC,CAAC,EAAE,CAAC,EAAE,OAAO,CAAC,gBAAgB,EAAE,QAAQ,CAAC,CAAC;YACzD,SAAS;QACX,CAAC;QACD,IAAI,EAAE,KAAK,GAAG,IAAI,OAAO,CAAC,mBAAmB,EAAE,CAAC;YAC9C,SAAS,CAAC,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,mBAAmB,CAAC,CAAC;YAC5C,SAAS;QACX,CAAC;QACD,IAAI,EAAE,KAAK,GAAG,IAAI,OAAO,CAAC,kBAAkB,EAAE,CAAC;YAC7C,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACd,IAAI,KAAK,GAAG,EAAE,CAAC;YACf,IAAI,UAAU,GAAG,KAAK,CAAC;YACvB,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;gBACb,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;oBACnB,IAAI,OAAO,CAAC,kBAAkB,KAAK,SAAS,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;wBACnE,KAAK,IAAI,GAAG,CAAC;wBACb,CAAC,IAAI,CAAC,CAAC;wBACP,SAAS;oBACX,CAAC;oBACD,CAAC,EAAE,CAAC;oBACJ,UAAU,GAAG,IAAI,CAAC;oBAClB,MAAM;gBACR,CAAC;gBACD,KAAK,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC;gBAChB,CAAC,EAAE,CAAC;YACN,CAAC;YACD,IAAI,CAAC,mBAAmB,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,YAAY,EAAE,CAAC,UAAU,EAAE,CAAC,CAAC;YAClF,CAAC,GAAG,CAAC,CAAC;YACN,SAAS;QACX,CAAC;QACD,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YACf,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;gBACzB,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC1C,IAAI,GAAG,EAAE,CAAC;oBACR,MAAM,MAAM,GAAG,GAAG,CAAC,CAAC,CAAE,CAAC;oBACvB,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;oBACvD,MAAM,GAAG,GAAG,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC;oBACzD,IAAI,CAAC,QAAQ,EAAE,CAAC,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,OAAO,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;oBACxE,CAAC,GAAG,GAAG,CAAC;oBACR,SAAS;gBACX,CAAC;YACH,CAAC;YACD,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,YAAY,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;gBACjG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBACd,OAAO,CAAC,GAAG,CAAC,IAAI,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAE,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,GAAG;oBAAE,CAAC,EAAE,CAAC;gBAC/D,IAAI,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;gBACxB,CAAC,GAAG,CAAC,CAAC;gBACN,SAAS;YACX,CAAC;QACH,CAAC;QAED,wEAAwE;QACxE,IAAI,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,GAAG,IAAI,OAAO,CAAC,eAAe,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,IAAI,KAAK,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YACpI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACd,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAE,CAAC,IAAI,CAAC,OAAO,CAAC,eAAe,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC;gBAAE,CAAC,EAAE,CAAC;YAC9F,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YAC7B,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;gBAClC,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;gBAClC,IAAI,MAAM,KAAK,GAAG,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC;oBAC5C,SAAS,CAAC,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;oBAChC,SAAS;gBACX,CAAC;gBACD,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;oBACvD,SAAS,CAAC,CAAC,EAAE,CAAC,EAAE,OAAO,CAAC,gBAAgB,EAAE,QAAQ,CAAC,CAAC;oBACpD,SAAS;gBACX,CAAC;YACH,CAAC;YACD,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;YACnB,CAAC,GAAG,CAAC,CAAC;YACN,SAAS;QACX,CAAC;QAED,wEAAwE;QACxE,IAAI,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,GAAG,IAAI,IAAI,KAAK,SAAS,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;YAC7E,IAAI,CAAC,GAAG,CAAC,CAAC;YACV,IAAI,EAAE,KAAK,GAAG,IAAI,CAAC,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;gBAC/E,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBACV,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAE,CAAC;oBAAE,CAAC,EAAE,CAAC;YACzC,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAE,CAAC;oBAAE,CAAC,EAAE,CAAC;gBACzC,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;oBACzC,CAAC,EAAE,CAAC;oBACJ,OAAO,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAE,CAAC;wBAAE,CAAC,EAAE,CAAC;gBAC3C,CAAC;gBACD,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,IAAI,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC/E,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;oBACtD,OAAO,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAE,CAAC;wBAAE,CAAC,EAAE,CAAC;gBAC3C,CAAC;YACH,CAAC;YACD,qFAAqF;YACrF,mCAAmC;YACnC,IAAI,CAAC,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;YACrB,CAAC,GAAG,CAAC,CAAC;YACN,SAAS;QACX,CAAC;QAED,wEAAwE;QACxE,IAAI,EAAE,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YAC/B,IAAI,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;YACxB,CAAC,IAAI,CAAC,CAAC;YACP,SAAS;QACX,CAAC;QACD,IAAI,EAAE,KAAK,GAAG,IAAI,IAAI,KAAK,SAAS,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC9D,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACd,OAAO,CAAC,GAAG,CAAC,IAAI,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAE,CAAC;gBAAE,CAAC,EAAE,CAAC;YAC7C,IAAI,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;YACxB,CAAC,GAAG,CAAC,CAAC;YACN,SAAS;QACX,CAAC;QACD,IAAI,EAAE,KAAK,GAAG,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;YACtC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACd,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,GAAG;gBAAE,CAAC,EAAE,CAAC;YACxB,IAAI,CAAC,GAAG,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAE,CAAC,EAAE,CAAC;gBACtC,OAAO,CAAC,GAAG,CAAC,IAAI,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAE,CAAC;oBAAE,CAAC,EAAE,CAAC;gBAC7C,IAAI,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;gBACxB,CAAC,GAAG,CAAC,CAAC;gBACN,SAAS;YACX,CAAC;QACH,CAAC;QAED,IAAI,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QACxB,CAAC,EAAE,CAAC;IACN,CAAC;IAED,oFAAoF;IACpF,uFAAuF;IACvF,IAAI,gBAAgB,KAAK,CAAC,CAAC;QAAE,MAAM,CAAC,gBAAgB,CAAE,CAAC,YAAY,GAAG,IAAI,CAAC;IAE3E,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,wDAAwD;AACxD,MAAM,UAAU,oBAAoB,CAAC,MAA2B;IAC9D,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,KAAK,IAAI,CAAC,CAAC;AACrD,CAAC"}

package/dist/sql/parameter-manifest.d.ts

@@ -0,0 +1,34 @@
+import type { QueryParameterRejectionReason } from "../errors.js";
+import { type QueryParameterType, type QueryParameterValue } from "./bind.js";
+import type { DialectSpec } from "./dialect-spec.js";
+export type ManifestParameter = {
+    name: string;
+    type: QueryParameterType;
+    cardinality: "one" | "many";
+    description?: string;
+    value: QueryParameterValue | QueryParameterValue[];
+};
+export type ParameterManifest = {
+    parameters: ManifestParameter[];
+};
+export type ManifestParseFailure = {
+    ok: false;
+    reason: QueryParameterRejectionReason | "MALFORMED" | "EMPTY" | "MISSING";
+    message: string;
+};
+export type ManifestParseSuccess = {
+    ok: true;
+    manifest: ParameterManifest;
+};
+export type ManifestParseResult = ManifestParseSuccess | ManifestParseFailure;
+/**
+ * Extract and validate the ```json parameter manifest fence from model text.
+ * Returns a typed failure the caller can act on — never throws.
+ */
+export declare function parseParameterManifest(modelText: string): ManifestParseResult;
+/**
+ * Cross-validate a parsed manifest against unbound SQL.
+ * Returns a typed failure — never throws.
+ */
+export declare function crossValidateManifestAgainstSql(unboundSql: string, manifest: ParameterManifest, dialect: Pick<DialectSpec, "listBinding">): ManifestParseResult;
+//# sourceMappingURL=parameter-manifest.d.ts.map

package/dist/sql/parameter-manifest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"parameter-manifest.d.ts","sourceRoot":"","sources":["../../src/sql/parameter-manifest.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,cAAc,CAAC;AAClE,OAAO,EAGL,KAAK,kBAAkB,EACvB,KAAK,mBAAmB,EACzB,MAAM,WAAW,CAAC;AACnB,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAErD,MAAM,MAAM,iBAAiB,GAAG;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,kBAAkB,CAAC;IACzB,WAAW,EAAE,KAAK,GAAG,MAAM,CAAC;IAC5B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,mBAAmB,GAAG,mBAAmB,EAAE,CAAC;CACpD,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG;IAC9B,UAAU,EAAE,iBAAiB,EAAE,CAAC;CACjC,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG;IACjC,EAAE,EAAE,KAAK,CAAC;IACV,MAAM,EAAE,6BAA6B,GAAG,WAAW,GAAG,OAAO,GAAG,SAAS,CAAC;IAC1E,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG;IACjC,EAAE,EAAE,IAAI,CAAC;IACT,QAAQ,EAAE,iBAAiB,CAAC;CAC7B,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG,oBAAoB,GAAG,oBAAoB,CAAC;AA0F9E;;;GAGG;AACH,wBAAgB,sBAAsB,CAAC,SAAS,EAAE,MAAM,GAAG,mBAAmB,CA2C7E;AAED;;;GAGG;AACH,wBAAgB,+BAA+B,CAC7C,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,iBAAiB,EAC3B,OAAO,EAAE,IAAI,CAAC,WAAW,EAAE,aAAa,CAAC,GACxC,mBAAmB,CAmCrB"}

package/dist/sql/parameter-manifest.js

@@ -0,0 +1,150 @@
+import { z } from "zod";
+import { isValidListContext, scanPlaceholders, } from "./bind.js";
+const NAME_RE = /^[a-z][a-z0-9_]*$/;
+const scalarValueSchema = z.union([z.string(), z.number().finite(), z.boolean()]);
+const parameterSchema = z.object({
+    name: z.string(),
+    type: z.enum(["string", "number", "boolean", "date", "datetime"]),
+    cardinality: z.enum(["one", "many"]),
+    description: z.string().optional(),
+    value: z.unknown(),
+});
+const manifestSchema = z.object({
+    parameters: z.array(parameterSchema),
+});
+function failure(reason, message) {
+    return { ok: false, reason, message };
+}
+function validateValue(type, cardinality, value) {
+    if (value === null || value === undefined) {
+        return failure("INVALID_VALUE", "Parameter value must not be null or undefined.");
+    }
+    if (cardinality === "many") {
+        if (!Array.isArray(value) || value.length === 0) {
+            return failure("INVALID_VALUE", "List parameter requires a non-empty array value.");
+        }
+        const items = [];
+        for (const item of value) {
+            const one = validateScalar(type, item);
+            if (!one.ok)
+                return one;
+            items.push(one.value);
+        }
+        return { ok: true, value: items };
+    }
+    if (Array.isArray(value)) {
+        return failure("INVALID_VALUE", "Scalar parameter must not be an array.");
+    }
+    return validateScalar(type, value);
+}
+function validateScalar(type, value) {
+    if (typeof value === "object" && value !== null) {
+        return failure("INVALID_VALUE", "Parameter value must be a string, number, or boolean.");
+    }
+    switch (type) {
+        case "string":
+            if (typeof value !== "string") {
+                return failure("INVALID_VALUE", "Parameter of type string requires a string value.");
+            }
+            return { ok: true, value };
+        case "date":
+            if (typeof value !== "string" || !/^\d{4}-\d{2}-\d{2}$/.test(value)) {
+                return failure("INVALID_VALUE", "Date parameter must be an ISO date string (YYYY-MM-DD).");
+            }
+            return { ok: true, value };
+        case "datetime":
+            if (typeof value !== "string" ||
+                !/^\d{4}-\d{2}-\d{2}([T ]\d{2}:\d{2}(:\d{2}(\.\d+)?)?(Z|[+-]\d{2}:?\d{2})?)?$/.test(value)) {
+                return failure("INVALID_VALUE", "Datetime parameter must be an ISO datetime string.");
+            }
+            return { ok: true, value };
+        case "number":
+            if (typeof value !== "number" || !Number.isFinite(value)) {
+                return failure("INVALID_VALUE", "Numeric parameter must be a finite number.");
+            }
+            return { ok: true, value };
+        case "boolean":
+            if (typeof value !== "boolean") {
+                return failure("INVALID_VALUE", "Boolean parameter requires a boolean value.");
+            }
+            return { ok: true, value };
+    }
+}
+/**
+ * Extract and validate the ```json parameter manifest fence from model text.
+ * Returns a typed failure the caller can act on — never throws.
+ */
+export function parseParameterManifest(modelText) {
+    const fence = /```json\s*([\s\S]*?)```/im.exec(modelText.trim());
+    if (!fence?.[1]) {
+        return failure("MISSING", "No ```json parameter manifest fence found.");
+    }
+    let parsed;
+    try {
+        parsed = JSON.parse(fence[1].trim());
+    }
+    catch {
+        return failure("MALFORMED", "Parameter manifest JSON is malformed.");
+    }
+    const result = manifestSchema.safeParse(parsed);
+    if (!result.success) {
+        return failure("MALFORMED", "Parameter manifest does not match the expected shape.");
+    }
+    if (result.data.parameters.length === 0) {
+        return failure("EMPTY", "Parameter manifest has an empty parameters array.");
+    }
+    const parameters = [];
+    for (const p of result.data.parameters) {
+        if (!NAME_RE.test(p.name)) {
+            return failure("INVALID_NAME", "Parameter name must match ^[a-z][a-z0-9_]*$.");
+        }
+        if (p.name.startsWith("tenant_") || p.name.startsWith("askdb_")) {
+            return failure("RESERVED_NAME", "Parameter name uses a reserved prefix.");
+        }
+        const valueCheck = validateValue(p.type, p.cardinality, p.value);
+        if (!valueCheck.ok)
+            return valueCheck;
+        // Reject mixed-type arrays already handled by per-item type checks.
+        void scalarValueSchema; // keep import used for documentation of accepted scalars
+        parameters.push({
+            name: p.name,
+            type: p.type,
+            cardinality: p.cardinality,
+            description: p.description,
+            value: valueCheck.value,
+        });
+    }
+    return { ok: true, manifest: { parameters } };
+}
+/**
+ * Cross-validate a parsed manifest against unbound SQL.
+ * Returns a typed failure — never throws.
+ */
+export function crossValidateManifestAgainstSql(unboundSql, manifest, dialect) {
+    const listBinding = dialect.listBinding ?? "expand";
+    const occurrences = scanPlaceholders(unboundSql);
+    const nonTenant = occurrences.filter((o) => !o.name.startsWith("tenant_"));
+    const byName = new Map(manifest.parameters.map((p) => [p.name, p]));
+    for (const p of manifest.parameters) {
+        if (!nonTenant.some((o) => o.name === p.name) && !occurrences.some((o) => o.name === p.name)) {
+            return failure("UNRESOLVED_PLACEHOLDER", "Manifest parameter does not appear in unbound SQL.");
+        }
+        // Tenant placeholders must not appear in the manifest (already rejected by RESERVED_NAME
+        // for tenant_ prefix). Double-check appearance of tenant_* in unbound is OK without manifest entry.
+    }
+    for (const occ of nonTenant) {
+        if (!byName.has(occ.name)) {
+            return failure("UNRESOLVED_PLACEHOLDER", "Unbound SQL contains a non-tenant placeholder absent from the manifest.");
+        }
+    }
+    for (const occ of occurrences) {
+        const p = byName.get(occ.name);
+        if (!p)
+            continue; // tenant placeholders have no manifest entry
+        if (p.cardinality === "many" && !isValidListContext(unboundSql, occ, listBinding)) {
+            return failure("INVALID_LIST_CONTEXT", "List parameter is not in a valid IN (...) or = ANY(...) context.");
+        }
+    }
+    return { ok: true, manifest };
+}
+//# sourceMappingURL=parameter-manifest.js.map

package/dist/sql/parameter-manifest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"parameter-manifest.js","sourceRoot":"","sources":["../../src/sql/parameter-manifest.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EACL,kBAAkB,EAClB,gBAAgB,GAGjB,MAAM,WAAW,CAAC;AA4BnB,MAAM,OAAO,GAAG,mBAAmB,CAAC;AAEpC,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;AAElF,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;IACjE,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IACpC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE;CACnB,CAAC,CAAC;AAEH,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9B,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC;CACrC,CAAC,CAAC;AAEH,SAAS,OAAO,CACd,MAAsC,EACtC,OAAe;IAEf,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;AACxC,CAAC;AAED,SAAS,aAAa,CACpB,IAAwB,EACxB,WAA2B,EAC3B,KAAc;IAEd,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QAC1C,OAAO,OAAO,CAAC,eAAe,EAAE,gDAAgD,CAAC,CAAC;IACpF,CAAC;IACD,IAAI,WAAW,KAAK,MAAM,EAAE,CAAC;QAC3B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAChD,OAAO,OAAO,CAAC,eAAe,EAAE,kDAAkD,CAAC,CAAC;QACtF,CAAC;QACD,MAAM,KAAK,GAA0B,EAAE,CAAC;QACxC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,GAAG,GAAG,cAAc,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YACvC,IAAI,CAAC,GAAG,CAAC,EAAE;gBAAE,OAAO,GAAG,CAAC;YACxB,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACxB,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;IACpC,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,OAAO,CAAC,eAAe,EAAE,wCAAwC,CAAC,CAAC;IAC5E,CAAC;IACD,OAAO,cAAc,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AACrC,CAAC;AAED,SAAS,cAAc,CACrB,IAAwB,EACxB,KAAc;IAEd,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAChD,OAAO,OAAO,CAAC,eAAe,EAAE,uDAAuD,CAAC,CAAC;IAC3F,CAAC;IACD,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,QAAQ;YACX,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;gBAC9B,OAAO,OAAO,CAAC,eAAe,EAAE,mDAAmD,CAAC,CAAC;YACvF,CAAC;YACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;QAC7B,KAAK,MAAM;YACT,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;gBACpE,OAAO,OAAO,CAAC,eAAe,EAAE,yDAAyD,CAAC,CAAC;YAC7F,CAAC;YACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;QAC7B,KAAK,UAAU;YACb,IACE,OAAO,KAAK,KAAK,QAAQ;gBACzB,CAAC,6EAA6E,CAAC,IAAI,CAAC,KAAK,CAAC,EAC1F,CAAC;gBACD,OAAO,OAAO,CAAC,eAAe,EAAE,oDAAoD,CAAC,CAAC;YACxF,CAAC;YACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;QAC7B,KAAK,QAAQ;YACX,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;gBACzD,OAAO,OAAO,CAAC,eAAe,EAAE,4CAA4C,CAAC,CAAC;YAChF,CAAC;YACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;QAC7B,KAAK,SAAS;YACZ,IAAI,OAAO,KAAK,KAAK,SAAS,EAAE,CAAC;gBAC/B,OAAO,OAAO,CAAC,eAAe,EAAE,6CAA6C,CAAC,CAAC;YACjF,CAAC;YACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IAC/B,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,sBAAsB,CAAC,SAAiB;IACtD,MAAM,KAAK,GAAG,2BAA2B,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC;IACjE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChB,OAAO,OAAO,CAAC,SAAS,EAAE,4CAA4C,CAAC,CAAC;IAC1E,CAAC;IACD,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IACvC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,OAAO,CAAC,WAAW,EAAE,uCAAuC,CAAC,CAAC;IACvE,CAAC;IAED,MAAM,MAAM,GAAG,cAAc,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IAChD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,OAAO,OAAO,CAAC,WAAW,EAAE,uDAAuD,CAAC,CAAC;IACvF,CAAC;IAED,IAAI,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxC,OAAO,OAAO,CAAC,OAAO,EAAE,mDAAmD,CAAC,CAAC;IAC/E,CAAC;IAED,MAAM,UAAU,GAAwB,EAAE,CAAC;IAC3C,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;QACvC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1B,OAAO,OAAO,CAAC,cAAc,EAAE,8CAA8C,CAAC,CAAC;QACjF,CAAC;QACD,IAAI,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAChE,OAAO,OAAO,CAAC,eAAe,EAAE,wCAAwC,CAAC,CAAC;QAC5E,CAAC;QACD,MAAM,UAAU,GAAG,aAAa,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;QACjE,IAAI,CAAC,UAAU,CAAC,EAAE;YAAE,OAAO,UAAU,CAAC;QACtC,oEAAoE;QACpE,KAAK,iBAAiB,CAAC,CAAC,yDAAyD;QACjF,UAAU,CAAC,IAAI,CAAC;YACd,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,WAAW,EAAE,CAAC,CAAC,WAAW;YAC1B,WAAW,EAAE,CAAC,CAAC,WAAW;YAC1B,KAAK,EAAE,UAAU,CAAC,KAAK;SACxB,CAAC,CAAC;IACL,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,UAAU,EAAE,EAAE,CAAC;AAChD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,+BAA+B,CAC7C,UAAkB,EAClB,QAA2B,EAC3B,OAAyC;IAEzC,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,QAAQ,CAAC;IACpD,MAAM,WAAW,GAAG,gBAAgB,CAAC,UAAU,CAAC,CAAC;IACjD,MAAM,SAAS,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC;IAC3E,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAEpE,KAAK,MAAM,CAAC,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC;QACpC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7F,OAAO,OAAO,CAAC,wBAAwB,EAAE,oDAAoD,CAAC,CAAC;QACjG,CAAC;QACD,yFAAyF;QACzF,oGAAoG;IACtG,CAAC;IAED,KAAK,MAAM,GAAG,IAAI,SAAS,EAAE,CAAC;QAC5B,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1B,OAAO,OAAO,CACZ,wBAAwB,EACxB,yEAAyE,CAC1E,CAAC;QACJ,CAAC;IACH,CAAC;IAED,KAAK,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC;QAC9B,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC/B,IAAI,CAAC,CAAC;YAAE,SAAS,CAAC,6CAA6C;QAC/D,IAAI,CAAC,CAAC,WAAW,KAAK,MAAM,IAAI,CAAC,kBAAkB,CAAC,UAAU,EAAE,GAAG,EAAE,WAAW,CAAC,EAAE,CAAC;YAClF,OAAO,OAAO,CACZ,sBAAsB,EACtB,kEAAkE,CACnE,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;AAChC,CAAC"}

package/dist/sql/prompt.d.ts

@@ -16,7 +16,13 @@ export declare function buildNlToSqlUserPrompt(dialect: DialectSpec, question: s
  * still fires using the consumer-supplied `nlToSqlSchemaOptions` to keep
  * observability consistent.
  */
-prebuiltDdl?: string, tenantPolicy?: NormalizedTenantPolicy, tenantScope?: TenantScope): string;
+prebuiltDdl?: string, tenantPolicy?: NormalizedTenantPolicy, tenantScope?: TenantScope, 
+/**
+ * When true, append the unbound-SQL + parameter-manifest output-format
+ * instructions. When false/undefined, the prompt is unchanged from the
+ * pre-parameterize path (byte-identical).
+ */
+parameterize?: boolean): string;
 /** Dialect-parameterized system prompt for the NL→SQL generator. */
 export declare function buildNlToSqlSystemPrompt(dialect: DialectSpec): string;
 //# sourceMappingURL=prompt.d.ts.map

package/dist/sql/prompt.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"prompt.d.ts","sourceRoot":"","sources":["../../src/sql/prompt.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AAC9D,OAAO,EAEL,KAAK,oBAAoB,EAC1B,MAAM,wBAAwB,CAAC;AAChC,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAK9D,OAAO,KAAK,EAAE,sBAAsB,EAAE,WAAW,EAAE,MAAM,+BAA+B,CAAC;AACzF,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAOrD;;;;GAIG;AACH,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,WAAW,EACpB,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,mBAAmB,EAC3B,cAAc,GAAE,SAAS,MAAM,EAAO,EACtC,MAAM,CAAC,EAAE,WAAW,EACpB,oBAAoB,CAAC,EAAE,oBAAoB;AAC3C;;;;;;GAMG;AACH,WAAW,CAAC,EAAE,MAAM,EACpB,YAAY,CAAC,EAAE,sBAAsB,EACrC,WAAW,CAAC,EAAE,WAAW,GACxB,MAAM,CA8DR;AAED,oEAAoE;AACpE,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,WAAW,GAAG,MAAM,CAErE"}
+{"version":3,"file":"prompt.d.ts","sourceRoot":"","sources":["../../src/sql/prompt.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AAC9D,OAAO,EAEL,KAAK,oBAAoB,EAC1B,MAAM,wBAAwB,CAAC;AAChC,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAK9D,OAAO,KAAK,EAAE,sBAAsB,EAAE,WAAW,EAAE,MAAM,+BAA+B,CAAC;AACzF,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAOrD;;;;GAIG;AACH,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,WAAW,EACpB,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,mBAAmB,EAC3B,cAAc,GAAE,SAAS,MAAM,EAAO,EACtC,MAAM,CAAC,EAAE,WAAW,EACpB,oBAAoB,CAAC,EAAE,oBAAoB;AAC3C;;;;;;GAMG;AACH,WAAW,CAAC,EAAE,MAAM,EACpB,YAAY,CAAC,EAAE,sBAAsB,EACrC,WAAW,CAAC,EAAE,WAAW;AACzB;;;;GAIG;AACH,YAAY,CAAC,EAAE,OAAO,GACrB,MAAM,CAkGR;AAED,oEAAoE;AACpE,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,WAAW,GAAG,MAAM,CAErE"}