@askdb/core 1.0.0-beta.43 → 1.0.0-beta.45

package/dist/sql/guardrail-decide.d.ts

@@ -0,0 +1,56 @@
+import { type GuardrailFinding, type GuardrailForm, type GuardrailVerdict, type SensitiveReference, type SensitiveReferenceRuleCode, type SensitiveScopeReport, type TenantGuardrailWarning } from "../errors.js";
+/**
+ * The decision point (ADR 0010, decision 2): the only code that knows what `strict`,
+ * `warn` and `off` mean, at each enforcement point. A leaf module: the checks and the
+ * enforcement points import it, and it imports only the error vocabulary.
+ */
+/** `return`: `ask()` / `generateSelectSql()` handing SQL back. `rebind`: `bindPreparedQuery()`. */
+export type GuardrailPoint = "return" | "rebind";
+export type GuardrailModes = {
+    /** The tenant policy's `enforcement`; absent without a policy. */
+    tenant?: "warn" | "strict";
+    /** The caller's `sensitiveGuardrailMode`, default `"warn"`. With `"off"` the check doesn't run. */
+    sensitive: "off" | "warn" | "strict";
+    /** Rebind only: checks whose `warn` the caller accepts. */
+    acceptWarnings?: ReadonlyArray<"tenant">;
+};
+/**
+ * Map findings to a verdict. Read-only findings always deny. Tenant findings deny under
+ * `strict`; under `warn` they warn when returned, and deny at rebind unless the caller
+ * lists `"tenant"` in `acceptWarnings`. Sensitive findings deny under `strict` and warn
+ * otherwise, at both points. The outcome is the most severe finding's.
+ */
+export declare function decide(findings: GuardrailFinding[], modes: GuardrailModes, point: GuardrailPoint): GuardrailVerdict;
+/**
+ * Throw the typed error for a `deny` verdict, with the verdict attached. When several
+ * checks deny, the precedence is read-only (`SqlValidationError`), then tenant
+ * (`TenantGuardrailError`), then sensitive (`SensitiveReferenceError`).
+ */
+export declare function throwIfDenied(verdict: GuardrailVerdict, modes: GuardrailModes, point: GuardrailPoint): void;
+/** Tenant findings for one form, from the rule's warnings. */
+export declare function tenantFindings(warnings: readonly TenantGuardrailWarning[], form: GuardrailForm | "generator"): GuardrailFinding[];
+/** The tenant findings as warnings, once each across forms (same rule, table and message). */
+export declare function tenantWarnings(findings: readonly GuardrailFinding[]): TenantGuardrailWarning[];
+/** `result.tenantGuardrail`, derived from the verdict. */
+export declare function tenantGuardrailResult(findings: readonly GuardrailFinding[]): {
+    passed: boolean;
+    warnings: TenantGuardrailWarning[];
+};
+type SensitiveScan = {
+    references: SensitiveReference[];
+    unresolvedScope?: SensitiveScopeReport;
+};
+/** Render a reference as `schema.table.column` (or `table.column` when the schema has no namespace). */
+export declare function formatSensitiveReference(ref: SensitiveReference): string;
+/** Sensitive findings for one form: one per reference, plus one when the scope wasn't resolved. */
+export declare function sensitiveFindings(scan: SensitiveScan, form: GuardrailForm): GuardrailFinding[];
+/** `result.sensitiveGuardrail`, derived from the verdict: references once each across forms. */
+export declare function sensitiveGuardrailResult(findings: readonly GuardrailFinding[]): {
+    passed: boolean;
+    references: SensitiveReference[];
+    unresolvedScope?: SensitiveScopeReport;
+};
+export declare function sensitiveRuleFor(scan: SensitiveScan): SensitiveReferenceRuleCode;
+export declare function sensitiveStrictMessage(scan: SensitiveScan): string;
+export {};
+//# sourceMappingURL=guardrail-decide.d.ts.map

package/dist/sql/guardrail-decide.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"guardrail-decide.d.ts","sourceRoot":"","sources":["../../src/sql/guardrail-decide.ts"],"names":[],"mappings":"AAAA,OAAO,EAKL,KAAK,gBAAgB,EACrB,KAAK,aAAa,EAElB,KAAK,gBAAgB,EACrB,KAAK,kBAAkB,EACvB,KAAK,0BAA0B,EAC/B,KAAK,oBAAoB,EACzB,KAAK,sBAAsB,EAC5B,MAAM,cAAc,CAAC;AAEtB;;;;GAIG;AAEH,mGAAmG;AACnG,MAAM,MAAM,cAAc,GAAG,QAAQ,GAAG,QAAQ,CAAC;AAEjD,MAAM,MAAM,cAAc,GAAG;IAC3B,kEAAkE;IAClE,MAAM,CAAC,EAAE,MAAM,GAAG,QAAQ,CAAC;IAC3B,mGAAmG;IACnG,SAAS,EAAE,KAAK,GAAG,MAAM,GAAG,QAAQ,CAAC;IACrC,2DAA2D;IAC3D,cAAc,CAAC,EAAE,aAAa,CAAC,QAAQ,CAAC,CAAC;CAC1C,CAAC;AAIF;;;;;GAKG;AACH,wBAAgB,MAAM,CACpB,QAAQ,EAAE,gBAAgB,EAAE,EAC5B,KAAK,EAAE,cAAc,EACrB,KAAK,EAAE,cAAc,GACpB,gBAAgB,CAOlB;AAiBD;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,OAAO,EAAE,gBAAgB,EAAE,KAAK,EAAE,cAAc,EAAE,KAAK,EAAE,cAAc,GAAG,IAAI,CAgC3G;AAMD,8DAA8D;AAC9D,wBAAgB,cAAc,CAC5B,QAAQ,EAAE,SAAS,sBAAsB,EAAE,EAC3C,IAAI,EAAE,aAAa,GAAG,WAAW,GAChC,gBAAgB,EAAE,CAEpB;AAED,8FAA8F;AAC9F,wBAAgB,cAAc,CAAC,QAAQ,EAAE,SAAS,gBAAgB,EAAE,GAAG,sBAAsB,EAAE,CAW9F;AAED,0DAA0D;AAC1D,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,SAAS,gBAAgB,EAAE,GAAG;IAC5E,MAAM,EAAE,OAAO,CAAC;IAChB,QAAQ,EAAE,sBAAsB,EAAE,CAAC;CACpC,CAGA;AAMD,KAAK,aAAa,GAAG;IAAE,UAAU,EAAE,kBAAkB,EAAE,CAAC;IAAC,eAAe,CAAC,EAAE,oBAAoB,CAAA;CAAE,CAAC;AAElG,wGAAwG;AACxG,wBAAgB,wBAAwB,CAAC,GAAG,EAAE,kBAAkB,GAAG,MAAM,CAGxE;AAED,mGAAmG;AACnG,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,aAAa,GAAG,gBAAgB,EAAE,CAuB9F;AAED,gGAAgG;AAChG,wBAAgB,wBAAwB,CAAC,QAAQ,EAAE,SAAS,gBAAgB,EAAE,GAAG;IAC/E,MAAM,EAAE,OAAO,CAAC;IAChB,UAAU,EAAE,kBAAkB,EAAE,CAAC;IACjC,eAAe,CAAC,EAAE,oBAAoB,CAAC;CACxC,CAiBA;AAED,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,aAAa,GAAG,0BAA0B,CAIhF;AAED,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,aAAa,GAAG,MAAM,CAOlE"}

package/dist/sql/guardrail-decide.js

@@ -0,0 +1,161 @@
+import { SensitiveReferenceError, SqlValidationError, TenantGuardrailError, } from "../errors.js";
+const SEVERITY = { allow: 0, warn: 1, deny: 2 };
+/**
+ * Map findings to a verdict. Read-only findings always deny. Tenant findings deny under
+ * `strict`; under `warn` they warn when returned, and deny at rebind unless the caller
+ * lists `"tenant"` in `acceptWarnings`. Sensitive findings deny under `strict` and warn
+ * otherwise, at both points. The outcome is the most severe finding's.
+ */
+export function decide(findings, modes, point) {
+    let outcome = "allow";
+    for (const finding of findings) {
+        const o = outcomeOf(finding.check, modes, point);
+        if (SEVERITY[o] > SEVERITY[outcome])
+            outcome = o;
+    }
+    return { outcome, findings };
+}
+function outcomeOf(check, modes, point) {
+    switch (check) {
+        case "read-only":
+            return "deny";
+        case "tenant":
+            // A tenant finding without a recognized mode (no policy, or an unknown value) fails closed.
+            if (modes.tenant !== "warn")
+                return "deny";
+            if (point === "rebind" && !modes.acceptWarnings?.includes("tenant"))
+                return "deny";
+            return "warn";
+        case "sensitive":
+            // Like the tenant case, a mode it doesn't recognize fails closed.
+            return modes.sensitive === "warn" ? "warn" : modes.sensitive === "off" ? "allow" : "deny";
+    }
+}
+/**
+ * Throw the typed error for a `deny` verdict, with the verdict attached. When several
+ * checks deny, the precedence is read-only (`SqlValidationError`), then tenant
+ * (`TenantGuardrailError`), then sensitive (`SensitiveReferenceError`).
+ */
+export function throwIfDenied(verdict, modes, point) {
+    if (verdict.outcome !== "deny")
+        return;
+    const denied = (check) => verdict.findings.filter((f) => f.check === check && outcomeOf(check, modes, point) === "deny");
+    let error;
+    const readOnly = denied("read-only");
+    const tenant = denied("tenant");
+    if (readOnly.length > 0) {
+        const first = readOnly[0];
+        error = new SqlValidationError(first.message, first.rule, first.hint);
+    }
+    else if (tenant.length > 0) {
+        const warnings = tenantWarnings(tenant);
+        const detail = warnings.map((w) => w.message).join("; ");
+        error = new TenantGuardrailError(modes.tenant === "warn"
+            ? "Tenant guardrail found issues (policy enforcement: warn), and bindPreparedQuery() refuses a " +
+                `tenant warning unless acceptWarnings includes "tenant": ${detail}`
+            : `Tenant guardrail validation failed (strict mode): ${detail}`, warnings);
+    }
+    else {
+        const result = sensitiveGuardrailResult(denied("sensitive"));
+        error = new SensitiveReferenceError(sensitiveStrictMessage(result), sensitiveRuleFor(result), result.references, result.unresolvedScope);
+    }
+    error.verdict = verdict;
+    throw error;
+}
+// ---------------------------------------------------------------------------
+// Tenant findings ↔ the TenantGuardrailResult shape
+// ---------------------------------------------------------------------------
+/** Tenant findings for one form, from the rule's warnings. */
+export function tenantFindings(warnings, form) {
+    return warnings.map((w) => ({ check: "tenant", form, rule: w.rule, message: w.message, tableId: w.tableId }));
+}
+/** The tenant findings as warnings, once each across forms (same rule, table and message). */
+export function tenantWarnings(findings) {
+    const seen = new Set();
+    const out = [];
+    for (const f of findings) {
+        if (f.check !== "tenant")
+            continue;
+        const key = `${f.rule}\u0000${f.tableId}\u0000${f.message}`;
+        if (seen.has(key))
+            continue;
+        seen.add(key);
+        out.push({ rule: f.rule, tableId: f.tableId, message: f.message });
+    }
+    return out;
+}
+/** `result.tenantGuardrail`, derived from the verdict. */
+export function tenantGuardrailResult(findings) {
+    const warnings = tenantWarnings(findings);
+    return { passed: warnings.length === 0, warnings };
+}
+/** Render a reference as `schema.table.column` (or `table.column` when the schema has no namespace). */
+export function formatSensitiveReference(ref) {
+    const table = ref.schema ? `${ref.schema}.${ref.table}` : ref.table;
+    return `${table}.${ref.column}`;
+}
+/** Sensitive findings for one form: one per reference, plus one when the scope wasn't resolved. */
+export function sensitiveFindings(scan, form) {
+    const findings = scan.references.map((reference) => {
+        const table = reference.matchKind === "table";
+        return {
+            check: "sensitive",
+            form,
+            rule: table ? "SENSITIVE_TABLE_REFERENCED" : "SENSITIVE_COLUMN_REFERENCED",
+            message: table
+                ? `SQL references sensitive table ${formatSensitiveReference(reference).replace(/\.\*$/, "")}`
+                : `SQL references sensitive column ${formatSensitiveReference(reference)}`,
+            reference,
+        };
+    });
+    if (scan.unresolvedScope) {
+        findings.push({
+            check: "sensitive",
+            form,
+            rule: "UNRESOLVED_TABLE_SCOPE",
+            message: scan.unresolvedScope.message,
+            unresolvedScope: scan.unresolvedScope,
+        });
+    }
+    return findings;
+}
+/** `result.sensitiveGuardrail`, derived from the verdict: references once each across forms. */
+export function sensitiveGuardrailResult(findings) {
+    const references = [];
+    const seen = new Set();
+    let unresolvedScope;
+    let any = false;
+    for (const f of findings) {
+        if (f.check !== "sensitive")
+            continue;
+        any = true;
+        if (f.unresolvedScope)
+            unresolvedScope ??= f.unresolvedScope;
+        if (!f.reference)
+            continue;
+        const r = f.reference;
+        const key = `${r.schema ?? ""}\u0000${r.table}\u0000${r.column}\u0000${r.matchKind}`;
+        if (seen.has(key))
+            continue;
+        seen.add(key);
+        references.push(r);
+    }
+    return { passed: !any, references, ...(unresolvedScope ? { unresolvedScope } : {}) };
+}
+export function sensitiveRuleFor(scan) {
+    if (scan.references.some((r) => r.matchKind === "table"))
+        return "SENSITIVE_TABLE_REFERENCED";
+    if (scan.references.length > 0)
+        return "SENSITIVE_COLUMN_REFERENCED";
+    return "UNRESOLVED_TABLE_SCOPE";
+}
+export function sensitiveStrictMessage(scan) {
+    const parts = [];
+    if (scan.references.length > 0) {
+        parts.push(`SQL references sensitive identifiers: ${scan.references.map(formatSensitiveReference).join(", ")}`);
+    }
+    if (scan.unresolvedScope)
+        parts.push(scan.unresolvedScope.message);
+    return `Sensitive-identifier guardrail failed (strict mode): ${parts.join("; ")}`;
+}
+//# sourceMappingURL=guardrail-decide.js.map

package/dist/sql/guardrail-decide.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"guardrail-decide.js","sourceRoot":"","sources":["../../src/sql/guardrail-decide.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,uBAAuB,EACvB,kBAAkB,EAClB,oBAAoB,GAUrB,MAAM,cAAc,CAAC;AAoBtB,MAAM,QAAQ,GAAqC,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;AAElF;;;;;GAKG;AACH,MAAM,UAAU,MAAM,CACpB,QAA4B,EAC5B,KAAqB,EACrB,KAAqB;IAErB,IAAI,OAAO,GAAqB,OAAO,CAAC;IACxC,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,MAAM,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;QACjD,IAAI,QAAQ,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,OAAO,CAAC;YAAE,OAAO,GAAG,CAAC,CAAC;IACnD,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;AAC/B,CAAC;AAED,SAAS,SAAS,CAAC,KAAuB,EAAE,KAAqB,EAAE,KAAqB;IACtF,QAAQ,KAAK,EAAE,CAAC;QACd,KAAK,WAAW;YACd,OAAO,MAAM,CAAC;QAChB,KAAK,QAAQ;YACX,4FAA4F;YAC5F,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM;gBAAE,OAAO,MAAM,CAAC;YAC3C,IAAI,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,QAAQ,CAAC,QAAQ,CAAC;gBAAE,OAAO,MAAM,CAAC;YACnF,OAAO,MAAM,CAAC;QAChB,KAAK,WAAW;YACd,kEAAkE;YAClE,OAAO,KAAK,CAAC,SAAS,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,KAAK,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC;IAC9F,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,OAAyB,EAAE,KAAqB,EAAE,KAAqB;IACnG,IAAI,OAAO,CAAC,OAAO,KAAK,MAAM;QAAE,OAAO;IACvC,MAAM,MAAM,GAAG,CAAC,KAAuB,EAAE,EAAE,CACzC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,KAAK,IAAI,SAAS,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,MAAM,CAAC,CAAC;IAEjG,IAAI,KAA0E,CAAC;IAC/E,MAAM,QAAQ,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC;IACrC,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;IAChC,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,KAAK,GAAG,QAAQ,CAAC,CAAC,CAAsD,CAAC;QAC/E,KAAK,GAAG,IAAI,kBAAkB,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IACxE,CAAC;SAAM,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC7B,MAAM,QAAQ,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;QACxC,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzD,KAAK,GAAG,IAAI,oBAAoB,CAC9B,KAAK,CAAC,MAAM,KAAK,MAAM;YACrB,CAAC,CAAC,8FAA8F;gBAC5F,2DAA2D,MAAM,EAAE;YACvE,CAAC,CAAC,qDAAqD,MAAM,EAAE,EACjE,QAAQ,CACT,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,MAAM,MAAM,GAAG,wBAAwB,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC;QAC7D,KAAK,GAAG,IAAI,uBAAuB,CACjC,sBAAsB,CAAC,MAAM,CAAC,EAC9B,gBAAgB,CAAC,MAAM,CAAC,EACxB,MAAM,CAAC,UAAU,EACjB,MAAM,CAAC,eAAe,CACvB,CAAC;IACJ,CAAC;IACD,KAAK,CAAC,OAAO,GAAG,OAAO,CAAC;IACxB,MAAM,KAAK,CAAC;AACd,CAAC;AAED,8EAA8E;AAC9E,oDAAoD;AACpD,8EAA8E;AAE9E,8DAA8D;AAC9D,MAAM,UAAU,cAAc,CAC5B,QAA2C,EAC3C,IAAiC;IAEjC,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;AAChH,CAAC;AAED,8FAA8F;AAC9F,MAAM,UAAU,cAAc,CAAC,QAAqC;IAClE,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,GAAG,GAA6B,EAAE,CAAC;IACzC,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,IAAI,CAAC,CAAC,KAAK,KAAK,QAAQ;YAAE,SAAS;QACnC,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,IAAI,SAAS,CAAC,CAAC,OAAO,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC;QAC5D,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAS;QAC5B,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACd,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;IACrE,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,0DAA0D;AAC1D,MAAM,UAAU,qBAAqB,CAAC,QAAqC;IAIzE,MAAM,QAAQ,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAC;IAC1C,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,QAAQ,EAAE,CAAC;AACrD,CAAC;AAQD,wGAAwG;AACxG,MAAM,UAAU,wBAAwB,CAAC,GAAuB;IAC9D,MAAM,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC;IACpE,OAAO,GAAG,KAAK,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;AAClC,CAAC;AAED,mGAAmG;AACnG,MAAM,UAAU,iBAAiB,CAAC,IAAmB,EAAE,IAAmB;IACxE,MAAM,QAAQ,GAAuB,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE;QACrE,MAAM,KAAK,GAAG,SAAS,CAAC,SAAS,KAAK,OAAO,CAAC;QAC9C,OAAO;YACL,KAAK,EAAE,WAAW;YAClB,IAAI;YACJ,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,4BAA4B,CAAC,CAAC,CAAC,6BAA6B;YAC1E,OAAO,EAAE,KAAK;gBACZ,CAAC,CAAC,kCAAkC,wBAAwB,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,EAAE;gBAC9F,CAAC,CAAC,mCAAmC,wBAAwB,CAAC,SAAS,CAAC,EAAE;YAC5E,SAAS;SACV,CAAC;IACJ,CAAC,CAAC,CAAC;IACH,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;QACzB,QAAQ,CAAC,IAAI,CAAC;YACZ,KAAK,EAAE,WAAW;YAClB,IAAI;YACJ,IAAI,EAAE,wBAAwB;YAC9B,OAAO,EAAE,IAAI,CAAC,eAAe,CAAC,OAAO;YACrC,eAAe,EAAE,IAAI,CAAC,eAAe;SACtC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,gGAAgG;AAChG,MAAM,UAAU,wBAAwB,CAAC,QAAqC;IAK5E,MAAM,UAAU,GAAyB,EAAE,CAAC;IAC5C,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,IAAI,eAAiD,CAAC;IACtD,IAAI,GAAG,GAAG,KAAK,CAAC;IAChB,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,IAAI,CAAC,CAAC,KAAK,KAAK,WAAW;YAAE,SAAS;QACtC,GAAG,GAAG,IAAI,CAAC;QACX,IAAI,CAAC,CAAC,eAAe;YAAE,eAAe,KAAK,CAAC,CAAC,eAAe,CAAC;QAC7D,IAAI,CAAC,CAAC,CAAC,SAAS;YAAE,SAAS;QAC3B,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC;QACtB,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,MAAM,IAAI,EAAE,SAAS,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,MAAM,SAAS,CAAC,CAAC,SAAS,EAAE,CAAC;QACrF,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAS;QAC5B,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACd,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACrB,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,CAAC,GAAG,EAAE,UAAU,EAAE,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;AACvF,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,IAAmB;IAClD,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,OAAO,CAAC;QAAE,OAAO,4BAA4B,CAAC;IAC9F,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,6BAA6B,CAAC;IACrE,OAAO,wBAAwB,CAAC;AAClC,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,IAAmB;IACxD,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/B,KAAK,CAAC,IAAI,CAAC,yCAAyC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAClH,CAAC;IACD,IAAI,IAAI,CAAC,eAAe;QAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;IACnE,OAAO,wDAAwD,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;AACpF,CAAC"}

package/dist/sql/guardrails.d.ts

@@ -0,0 +1,52 @@
+import { type GuardrailCheckId, type GuardrailFinding, type GuardrailForm, type GuardrailVerdict } from "../errors.js";
+import type { AskDbLogger } from "../logging/askdb-logger.js";
+import type { AnyNormalizedSchema } from "../schema/types.js";
+import type { NormalizedTenantPolicy, TenantScope } from "../schema/v2/tenant-policy.js";
+import type { DialectSpec } from "./dialect-spec.js";
+import { type GuardrailModes } from "./guardrail-decide.js";
+import { type SensitiveGuardrailMode } from "./sensitive-guardrail.js";
+/**
+ * The checks as pure rules (ADR 0010, decision 1): each takes a candidate and returns
+ * findings. They know nothing about modes and never throw for a finding; `decide`
+ * (`guardrail-decide.ts`) maps the findings to a verdict. Internal to `@askdb/core`.
+ */
+/** What every enforcement point checks: the untrusted forms, before AskDB renders them. */
+export type Candidate = {
+    /** `sql`: the model's bound SQL. `template`: its `sql-unbound` block (`preparedQuery.namedSql`). */
+    forms: Partial<Record<GuardrailForm, string>>;
+    /** Undefined for a custom `AskDialect`. */
+    dialect: DialectSpec | undefined;
+    schema: AnyNormalizedSchema;
+    /** A v2 schema's tenant policy, with the enforcement point's (expanded) scope. */
+    tenant?: {
+        policy: NormalizedTenantPolicy;
+        scope: TenantScope;
+    };
+};
+/**
+ * ADR 0010, decision 3: which checks each enforcement point runs, and the modes `decide`
+ * reads there. `ask()` with a custom `AskDialect` has no `dialect`, so no read-only check;
+ * `generateSelectSql()` takes no sensitive mode, so no sensitive check; `acceptWarnings`
+ * means something at rebind only.
+ */
+export declare function guardrailPlan(path: "ask" | "generate" | "rebind", input: {
+    dialect: DialectSpec | undefined;
+    schema: AnyNormalizedSchema;
+    tenantPolicy: NormalizedTenantPolicy | undefined;
+    sensitiveGuardrailMode?: SensitiveGuardrailMode | "off";
+    acceptWarnings?: ReadonlyArray<"tenant">;
+}): {
+    checks: GuardrailCheckId[];
+    modes: GuardrailModes;
+};
+/** Run each listed check on every form in the candidate. */
+export declare function evaluateGuardrails(candidate: Candidate, checks: readonly GuardrailCheckId[]): GuardrailFinding[];
+/**
+ * Log a verdict the way `ask()` and `generateSelectSql()` always have: one tenant
+ * pass/fail event (with a tenant policy), and the sensitive references (when checked).
+ */
+export declare function logGuardrailVerdict(logger: AskDbLogger | undefined, verdict: GuardrailVerdict, context: {
+    tenantPolicy: NormalizedTenantPolicy | undefined;
+    sensitiveChecked: boolean;
+}): void;
+//# sourceMappingURL=guardrails.d.ts.map

package/dist/sql/guardrails.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"guardrails.d.ts","sourceRoot":"","sources":["../../src/sql/guardrails.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,gBAAgB,EACrB,KAAK,gBAAgB,EACrB,KAAK,aAAa,EAClB,KAAK,gBAAgB,EACtB,MAAM,cAAc,CAAC;AACtB,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AAE9D,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAC9D,OAAO,KAAK,EAAE,sBAAsB,EAAE,WAAW,EAAE,MAAM,+BAA+B,CAAC;AACzF,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,EACL,KAAK,cAAc,EAMpB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAGL,KAAK,sBAAsB,EAC5B,MAAM,0BAA0B,CAAC;AAIlC;;;;GAIG;AAEH,2FAA2F;AAC3F,MAAM,MAAM,SAAS,GAAG;IACtB,oGAAoG;IACpG,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC,CAAC;IAC9C,2CAA2C;IAC3C,OAAO,EAAE,WAAW,GAAG,SAAS,CAAC;IACjC,MAAM,EAAE,mBAAmB,CAAC;IAC5B,kFAAkF;IAClF,MAAM,CAAC,EAAE;QAAE,MAAM,EAAE,sBAAsB,CAAC;QAAC,KAAK,EAAE,WAAW,CAAA;KAAE,CAAC;CACjE,CAAC;AAgCF;;;;;GAKG;AACH,wBAAgB,aAAa,CAC3B,IAAI,EAAE,KAAK,GAAG,UAAU,GAAG,QAAQ,EACnC,KAAK,EAAE;IACL,OAAO,EAAE,WAAW,GAAG,SAAS,CAAC;IACjC,MAAM,EAAE,mBAAmB,CAAC;IAC5B,YAAY,EAAE,sBAAsB,GAAG,SAAS,CAAC;IACjD,sBAAsB,CAAC,EAAE,sBAAsB,GAAG,KAAK,CAAC;IACxD,cAAc,CAAC,EAAE,aAAa,CAAC,QAAQ,CAAC,CAAC;CAC1C,GACA;IAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC;IAAC,KAAK,EAAE,cAAc,CAAA;CAAE,CAcvD;AAED,4DAA4D;AAC5D,wBAAgB,kBAAkB,CAChC,SAAS,EAAE,SAAS,EACpB,MAAM,EAAE,SAAS,gBAAgB,EAAE,GAClC,gBAAgB,EAAE,CASpB;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,WAAW,GAAG,SAAS,EAC/B,OAAO,EAAE,gBAAgB,EACzB,OAAO,EAAE;IAAE,YAAY,EAAE,sBAAsB,GAAG,SAAS,CAAC;IAAC,gBAAgB,EAAE,OAAO,CAAA;CAAE,GACvF,IAAI,CA4BN"}

package/dist/sql/guardrails.js

@@ -0,0 +1,100 @@
+import { SqlValidationError, } from "../errors.js";
+import { AskDbLogEvent } from "../logging/log-events.js";
+import { formatSensitiveReference, sensitiveFindings, sensitiveGuardrailResult, tenantFindings, tenantWarnings, } from "./guardrail-decide.js";
+import { scanSensitiveReferences, schemaHasSensitiveIdentifiers, } from "./sensitive-guardrail.js";
+import { tenantRuleWarnings } from "./tenant-guardrail.js";
+import { validateSelectSql } from "./validate.js";
+const CHECKS = {
+    // Needs a DialectSpec: a custom AskDialect may target non-SELECT SQL (decision 3).
+    "read-only": ({ dialect }, form, sql) => {
+        if (!dialect)
+            return [];
+        try {
+            validateSelectSql(dialect, sql);
+            return [];
+        }
+        catch (error) {
+            if (!(error instanceof SqlValidationError))
+                throw error;
+            return [
+                {
+                    check: "read-only",
+                    form,
+                    rule: error.rule,
+                    message: error.message,
+                    ...(error.hint !== undefined ? { hint: error.hint } : {}),
+                },
+            ];
+        }
+    },
+    tenant: ({ tenant, dialect }, form, sql) => tenant ? tenantFindings(tenantRuleWarnings(sql, tenant.policy, tenant.scope, dialect), form) : [],
+    sensitive: ({ schema, dialect }, form, sql) => sensitiveFindings(scanSensitiveReferences(sql, schema, dialect), form),
+};
+const FORMS = ["sql", "template"];
+/**
+ * ADR 0010, decision 3: which checks each enforcement point runs, and the modes `decide`
+ * reads there. `ask()` with a custom `AskDialect` has no `dialect`, so no read-only check;
+ * `generateSelectSql()` takes no sensitive mode, so no sensitive check; `acceptWarnings`
+ * means something at rebind only.
+ */
+export function guardrailPlan(path, input) {
+    const sensitive = path === "generate" ? "off" : (input.sensitiveGuardrailMode ?? "warn");
+    const checks = [];
+    if (input.dialect)
+        checks.push("read-only");
+    if (input.tenantPolicy)
+        checks.push("tenant");
+    if (sensitive !== "off" && schemaHasSensitiveIdentifiers(input.schema))
+        checks.push("sensitive");
+    return {
+        checks,
+        modes: {
+            ...(input.tenantPolicy ? { tenant: input.tenantPolicy.enforcement } : {}),
+            sensitive,
+            ...(path === "rebind" && input.acceptWarnings ? { acceptWarnings: input.acceptWarnings } : {}),
+        },
+    };
+}
+/** Run each listed check on every form in the candidate. */
+export function evaluateGuardrails(candidate, checks) {
+    const findings = [];
+    for (const check of checks) {
+        for (const form of FORMS) {
+            const sql = candidate.forms[form];
+            if (sql !== undefined)
+                findings.push(...CHECKS[check](candidate, form, sql));
+        }
+    }
+    return findings;
+}
+/**
+ * Log a verdict the way `ask()` and `generateSelectSql()` always have: one tenant
+ * pass/fail event (with a tenant policy), and the sensitive references (when checked).
+ */
+export function logGuardrailVerdict(logger, verdict, context) {
+    if (context.tenantPolicy) {
+        const warnings = tenantWarnings(verdict.findings);
+        if (warnings.length === 0) {
+            logger?.info({ event: AskDbLogEvent.TenantGuardrailPassed }, "tenant guardrail validation passed");
+        }
+        else {
+            logger?.info({
+                event: AskDbLogEvent.TenantGuardrailFailed,
+                warningCount: warnings.length,
+                enforcement: context.tenantPolicy.enforcement,
+            }, "tenant guardrail validation found issues");
+        }
+    }
+    if (!context.sensitiveChecked)
+        return;
+    const references = sensitiveGuardrailResult(verdict.findings).references;
+    if (references.length === 0)
+        return;
+    const sensitiveColumns = references.map(formatSensitiveReference);
+    logger?.info({
+        event: AskDbLogEvent.PipelineSensitiveSqlWarning,
+        sensitiveColumnCount: sensitiveColumns.length,
+        sensitiveColumns,
+    }, "generated SQL references sensitive identifiers");
+}
+//# sourceMappingURL=guardrails.js.map

package/dist/sql/guardrails.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"guardrails.js","sourceRoot":"","sources":["../../src/sql/guardrails.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,kBAAkB,GAKnB,MAAM,cAAc,CAAC;AAEtB,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAIzD,OAAO,EAEL,wBAAwB,EACxB,iBAAiB,EACjB,wBAAwB,EACxB,cAAc,EACd,cAAc,GACf,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,uBAAuB,EACvB,6BAA6B,GAE9B,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAqBlD,MAAM,MAAM,GAA6C;IACvD,mFAAmF;IACnF,WAAW,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;QACtC,IAAI,CAAC,OAAO;YAAE,OAAO,EAAE,CAAC;QACxB,IAAI,CAAC;YACH,iBAAiB,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;YAChC,OAAO,EAAE,CAAC;QACZ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,CAAC,KAAK,YAAY,kBAAkB,CAAC;gBAAE,MAAM,KAAK,CAAC;YACxD,OAAO;gBACL;oBACE,KAAK,EAAE,WAAW;oBAClB,IAAI;oBACJ,IAAI,EAAE,KAAK,CAAC,IAAI;oBAChB,OAAO,EAAE,KAAK,CAAC,OAAO;oBACtB,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAC1D;aACF,CAAC;QACJ,CAAC;IACH,CAAC;IACD,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,CACzC,MAAM,CAAC,CAAC,CAAC,cAAc,CAAC,kBAAkB,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE;IACnG,SAAS,EAAE,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,CAC5C,iBAAiB,CAAC,uBAAuB,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,IAAI,CAAC;CACzE,CAAC;AAEF,MAAM,KAAK,GAA6B,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;AAE5D;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAC3B,IAAmC,EACnC,KAMC;IAED,MAAM,SAAS,GAAG,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,sBAAsB,IAAI,MAAM,CAAC,CAAC;IACzF,MAAM,MAAM,GAAuB,EAAE,CAAC;IACtC,IAAI,KAAK,CAAC,OAAO;QAAE,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAC5C,IAAI,KAAK,CAAC,YAAY;QAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC9C,IAAI,SAAS,KAAK,KAAK,IAAI,6BAA6B,CAAC,KAAK,CAAC,MAAM,CAAC;QAAE,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACjG,OAAO;QACL,MAAM;QACN,KAAK,EAAE;YACL,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,YAAY,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACzE,SAAS;YACT,GAAG,CAAC,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,KAAK,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC/F;KACF,CAAC;AACJ,CAAC;AAED,4DAA4D;AAC5D,MAAM,UAAU,kBAAkB,CAChC,SAAoB,EACpB,MAAmC;IAEnC,MAAM,QAAQ,GAAuB,EAAE,CAAC;IACxC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,GAAG,GAAG,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAClC,IAAI,GAAG,KAAK,SAAS;gBAAE,QAAQ,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;QAC/E,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CACjC,MAA+B,EAC/B,OAAyB,EACzB,OAAwF;IAExF,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;QACzB,MAAM,QAAQ,GAAG,cAAc,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAClD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1B,MAAM,EAAE,IAAI,CAAC,EAAE,KAAK,EAAE,aAAa,CAAC,qBAAqB,EAAE,EAAE,oCAAoC,CAAC,CAAC;QACrG,CAAC;aAAM,CAAC;YACN,MAAM,EAAE,IAAI,CACV;gBACE,KAAK,EAAE,aAAa,CAAC,qBAAqB;gBAC1C,YAAY,EAAE,QAAQ,CAAC,MAAM;gBAC7B,WAAW,EAAE,OAAO,CAAC,YAAY,CAAC,WAAW;aAC9C,EACD,0CAA0C,CAC3C,CAAC;QACJ,CAAC;IACH,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,gBAAgB;QAAE,OAAO;IACtC,MAAM,UAAU,GAAG,wBAAwB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,UAAU,CAAC;IACzE,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IACpC,MAAM,gBAAgB,GAAG,UAAU,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC;IAClE,MAAM,EAAE,IAAI,CACV;QACE,KAAK,EAAE,aAAa,CAAC,2BAA2B;QAChD,oBAAoB,EAAE,gBAAgB,CAAC,MAAM;QAC7C,gBAAgB;KACjB,EACD,gDAAgD,CACjD,CAAC;AACJ,CAAC"}

package/dist/sql/index.d.ts

@@ -1,9 +1,11 @@
 export { extractSqlFromModelText, extractUnboundSqlFromModelText } from "./extract-sql.js";
-export { bindPreparedQuery, escapeSqlLiteral, type QueryParameterType, type QueryParameterValue, type QueryParamSlot, type QueryParameterBinding, type PreparedQuery, type BoundQuery, } from "./bind.js";
+export { escapeSqlLiteral, type QueryParameterType, type QueryParameterValue, type QueryParamSlot, type QueryParameterBinding, type PreparedQuery, } from "./bind.js";
+export { bindPreparedQuery, type BindGuardrails, type BoundQuery } from "./rebind.js";
 export { parseParameterManifest, type ParameterManifest, type ManifestParameter, } from "./parameter-manifest.js";
 export { generateSelectSql, type GenerateSelectSqlResult, type GenerateSqlDeps, } from "./generate.js";
 export { validateSelectSql, buildSelectGuardrailExplanation, type SelectGuardrailExplain, } from "./validate.js";
 export { buildNlToSqlUserPrompt, buildNlToSqlSystemPrompt, } from "./prompt.js";
+export { promptIdentifierQuoter } from "./prompt-identifiers.js";
 export { assertNlToSqlInputs, nlToSqlAmbiguityNotes, } from "./schema-question-precheck.js";
-export { type DialectId, type DialectSpec, type BuiltInDialectId, POSTGRES_DIALECT, COCKROACHDB_DIALECT, MYSQL_DIALECT, MARIADB_DIALECT, SQLITE_DIALECT, SQLSERVER_DIALECT, BUILT_IN_DIALECTS, SUPPORTED_DIALECT_IDS, isBuiltInDialectId, getDialectSpec, } from "./dialect-spec.js";
+export { type DialectId, type DialectSpec, type BuiltInDialectId, POSTGRES_DIALECT, COCKROACHDB_DIALECT, MYSQL_DIALECT, MARIADB_DIALECT, SQLITE_DIALECT, SQLSERVER_DIALECT, SINGLE_NAMESPACE_LABEL, BUILT_IN_DIALECTS, SUPPORTED_DIALECT_IDS, isBuiltInDialectId, getDialectSpec, } from "./dialect-spec.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/sql/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/sql/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,8BAA8B,EAAE,MAAM,kBAAkB,CAAC;AAC3F,OAAO,EACL,iBAAiB,EACjB,gBAAgB,EAChB,KAAK,kBAAkB,EACvB,KAAK,mBAAmB,EACxB,KAAK,cAAc,EACnB,KAAK,qBAAqB,EAC1B,KAAK,aAAa,EAClB,KAAK,UAAU,GAChB,MAAM,WAAW,CAAC;AACnB,OAAO,EACL,sBAAsB,EACtB,KAAK,iBAAiB,EACtB,KAAK,iBAAiB,GACvB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,iBAAiB,EACjB,KAAK,uBAAuB,EAC5B,KAAK,eAAe,GACrB,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,iBAAiB,EACjB,+BAA+B,EAC/B,KAAK,sBAAsB,GAC5B,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,sBAAsB,EACtB,wBAAwB,GACzB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,mBAAmB,EACnB,qBAAqB,GACtB,MAAM,+BAA+B,CAAC;AACvC,OAAO,EACL,KAAK,SAAS,EACd,KAAK,WAAW,EAChB,KAAK,gBAAgB,EACrB,gBAAgB,EAChB,mBAAmB,EACnB,aAAa,EACb,eAAe,EACf,cAAc,EACd,iBAAiB,EACjB,iBAAiB,EACjB,qBAAqB,EACrB,kBAAkB,EAClB,cAAc,GACf,MAAM,mBAAmB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/sql/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,8BAA8B,EAAE,MAAM,kBAAkB,CAAC;AAC3F,OAAO,EACL,gBAAgB,EAChB,KAAK,kBAAkB,EACvB,KAAK,mBAAmB,EACxB,KAAK,cAAc,EACnB,KAAK,qBAAqB,EAC1B,KAAK,aAAa,GACnB,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,iBAAiB,EAAE,KAAK,cAAc,EAAE,KAAK,UAAU,EAAE,MAAM,aAAa,CAAC;AACtF,OAAO,EACL,sBAAsB,EACtB,KAAK,iBAAiB,EACtB,KAAK,iBAAiB,GACvB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,iBAAiB,EACjB,KAAK,uBAAuB,EAC5B,KAAK,eAAe,GACrB,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,iBAAiB,EACjB,+BAA+B,EAC/B,KAAK,sBAAsB,GAC5B,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,sBAAsB,EACtB,wBAAwB,GACzB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AACjE,OAAO,EACL,mBAAmB,EACnB,qBAAqB,GACtB,MAAM,+BAA+B,CAAC;AACvC,OAAO,EACL,KAAK,SAAS,EACd,KAAK,WAAW,EAChB,KAAK,gBAAgB,EACrB,gBAAgB,EAChB,mBAAmB,EACnB,aAAa,EACb,eAAe,EACf,cAAc,EACd,iBAAiB,EACjB,sBAAsB,EACtB,iBAAiB,EACjB,qBAAqB,EACrB,kBAAkB,EAClB,cAAc,GACf,MAAM,mBAAmB,CAAC"}

package/dist/sql/index.js

@@ -1,9 +1,11 @@
 export { extractSqlFromModelText, extractUnboundSqlFromModelText } from "./extract-sql.js";
-export { bindPreparedQuery, escapeSqlLiteral, } from "./bind.js";
+export { escapeSqlLiteral, } from "./bind.js";
+export { bindPreparedQuery } from "./rebind.js";
 export { parseParameterManifest, } from "./parameter-manifest.js";
 export { generateSelectSql, } from "./generate.js";
 export { validateSelectSql, buildSelectGuardrailExplanation, } from "./validate.js";
 export { buildNlToSqlUserPrompt, buildNlToSqlSystemPrompt, } from "./prompt.js";
+export { promptIdentifierQuoter } from "./prompt-identifiers.js";
 export { assertNlToSqlInputs, nlToSqlAmbiguityNotes, } from "./schema-question-precheck.js";
-export { POSTGRES_DIALECT, COCKROACHDB_DIALECT, MYSQL_DIALECT, MARIADB_DIALECT, SQLITE_DIALECT, SQLSERVER_DIALECT, BUILT_IN_DIALECTS, SUPPORTED_DIALECT_IDS, isBuiltInDialectId, getDialectSpec, } from "./dialect-spec.js";
+export { POSTGRES_DIALECT, COCKROACHDB_DIALECT, MYSQL_DIALECT, MARIADB_DIALECT, SQLITE_DIALECT, SQLSERVER_DIALECT, SINGLE_NAMESPACE_LABEL, BUILT_IN_DIALECTS, SUPPORTED_DIALECT_IDS, isBuiltInDialectId, getDialectSpec, } from "./dialect-spec.js";
 //# sourceMappingURL=index.js.map

package/dist/sql/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/sql/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,8BAA8B,EAAE,MAAM,kBAAkB,CAAC;AAC3F,OAAO,EACL,iBAAiB,EACjB,gBAAgB,GAOjB,MAAM,WAAW,CAAC;AACnB,OAAO,EACL,sBAAsB,GAGvB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,iBAAiB,GAGlB,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,iBAAiB,EACjB,+BAA+B,GAEhC,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,sBAAsB,EACtB,wBAAwB,GACzB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,mBAAmB,EACnB,qBAAqB,GACtB,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAIL,gBAAgB,EAChB,mBAAmB,EACnB,aAAa,EACb,eAAe,EACf,cAAc,EACd,iBAAiB,EACjB,iBAAiB,EACjB,qBAAqB,EACrB,kBAAkB,EAClB,cAAc,GACf,MAAM,mBAAmB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/sql/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,8BAA8B,EAAE,MAAM,kBAAkB,CAAC;AAC3F,OAAO,EACL,gBAAgB,GAMjB,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,iBAAiB,EAAwC,MAAM,aAAa,CAAC;AACtF,OAAO,EACL,sBAAsB,GAGvB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,iBAAiB,GAGlB,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,iBAAiB,EACjB,+BAA+B,GAEhC,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,sBAAsB,EACtB,wBAAwB,GACzB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AACjE,OAAO,EACL,mBAAmB,EACnB,qBAAqB,GACtB,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAIL,gBAAgB,EAChB,mBAAmB,EACnB,aAAa,EACb,eAAe,EACf,cAAc,EACd,iBAAiB,EACjB,sBAAsB,EACtB,iBAAiB,EACjB,qBAAqB,EACrB,kBAAkB,EAClB,cAAc,GACf,MAAM,mBAAmB,CAAC"}

package/dist/sql/lexer.d.ts

@@ -19,6 +19,11 @@
  * | `#` line comment          | —        | yes                    | —          | —      |
  * | `--` line comment         | yes      | only before whitespace | yes        | yes    |
  * | nested `/* … *\/`         | yes      | no (`/*! … *\/` runs)  | yes        | no     |
+ * | `0x`, `1E`, `$`/`€` money | —        | —                      | literal    | —      |
+ * | U+00A0 etc. end a name    | —        | —                      | yes        | —      |
+ * | `@` continues a name      | —        | —                      | yes        | —      |
+ *
+ * The last three rows are `tsqlLiterals`; U+FEFF does not end a SQL Server name.
  *
  * The lexer never throws: a string, quoted identifier, or comment that runs off the end
  * of the input is returned with `unterminated: true` so callers can fail closed.
@@ -49,6 +54,14 @@ export type SqlLexerProfile = {
     atVariables: boolean;
     /** SQL Server `#temp` / `##temp` table names. */
     hashIdentifiers: boolean;
+    /**
+     * SQL Server's token ends: `0x` with no hex digits, an exponent with no digits (`1E`,
+     * `1E+`), and money literals that start with a currency symbol (`$`, `$1.5`, `€`) are
+     * complete literals; U+200B and U+0085 are whitespace; and a name or variable continues
+     * through `@` and ends at any whitespace character except U+FEFF. A keyword written right after one of these
+     * is its own token, as it is to SQL Server.
+     */
+    tsqlLiterals: boolean;
 };
 export declare const POSTGRES_LEXER: SqlLexerProfile;
 export declare const MYSQL_LEXER: SqlLexerProfile;

package/dist/sql/lexer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"lexer.d.ts","sourceRoot":"","sources":["../../src/sql/lexer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAErD,MAAM,MAAM,iBAAiB,GAAG,UAAU,GAAG,OAAO,GAAG,WAAW,GAAG,QAAQ,GAAG,SAAS,CAAC;AAE1F,MAAM,MAAM,eAAe,GAAG;IAC5B,EAAE,EAAE,iBAAiB,CAAC;IACtB,sEAAsE;IACtE,gBAAgB,EAAE,OAAO,CAAC;IAC1B,4FAA4F;IAC5F,WAAW,EAAE,YAAY,GAAG,QAAQ,CAAC;IACrC,mBAAmB,EAAE,OAAO,CAAC;IAC7B,yFAAyF;IACzF,kBAAkB,EAAE,KAAK,GAAG,QAAQ,GAAG,SAAS,CAAC;IACjD,wCAAwC;IACxC,YAAY,EAAE,OAAO,CAAC;IACtB,sDAAsD;IACtD,aAAa,EAAE,OAAO,CAAC;IACvB,+BAA+B;IAC/B,YAAY,EAAE,OAAO,CAAC;IACtB,6FAA6F;IAC7F,qBAAqB,EAAE,OAAO,CAAC;IAC/B,mBAAmB,EAAE,OAAO,CAAC;IAC7B,gGAAgG;IAChG,kBAAkB,EAAE,OAAO,CAAC;IAC5B,+FAA+F;IAC/F,WAAW,EAAE,OAAO,CAAC;IACrB,iDAAiD;IACjD,eAAe,EAAE,OAAO,CAAC;CAC1B,CAAC;AAEF,eAAO,MAAM,cAAc,EAAE,eAc5B,CAAC;AAEF,eAAO,MAAM,WAAW,EAAE,eAczB,CAAC;AAEF,eAAO,MAAM,eAAe,EAAE,eAc7B,CAAC;AAEF,eAAO,MAAM,YAAY,EAAE,eAc1B,CAAC;AAEF;;;;;GAKG;AACH,eAAO,MAAM,aAAa,EAAE,eAc3B,CAAC;AAEF,qGAAqG;AACrG,eAAO,MAAM,qBAAqB,EAAE,SAAS,eAAe,EAK3D,CAAC;AAEF;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAC7B,OAAO,EAAE,IAAI,CAAC,WAAW,EAAE,IAAI,GAAG,kBAAkB,CAAC,GACpD,eAAe,GAAG,SAAS,CAmB7B;AAED,MAAM,MAAM,YAAY;AACtB,sCAAsC;AACpC,MAAM,GACN,mBAAmB,GACnB,QAAQ,GACR,QAAQ;AACV,wCAAwC;GACtC,WAAW;AACb,+EAA+E;GAC7E,OAAO,GACP,SAAS,CAAC;AAEd,MAAM,MAAM,QAAQ,GAAG;IACrB,IAAI,EAAE,YAAY,CAAC;IACnB,sCAAsC;IACtC,IAAI,EAAE,MAAM,CAAC;IACb;;;OAGG;IACH,KAAK,EAAE,MAAM,CAAC;IACd,2EAA2E;IAC3E,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,MAAM,CAAC;IACZ,8FAA8F;IAC9F,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;;OAIG;IACH,YAAY,CAAC,EAAE,IAAI,CAAC;CACrB,CAAC;AAQF;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,GAAG,OAAO,CAItF;AAED,yFAAyF;AACzF,wBAAgB,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,eAAe,GAAG,QAAQ,EAAE,CAsQxE;AAED,wDAAwD;AACxD,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,SAAS,QAAQ,EAAE,GAAG,OAAO,CAEzE"}
+{"version":3,"file":"lexer.d.ts","sourceRoot":"","sources":["../../src/sql/lexer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAErD,MAAM,MAAM,iBAAiB,GAAG,UAAU,GAAG,OAAO,GAAG,WAAW,GAAG,QAAQ,GAAG,SAAS,CAAC;AAE1F,MAAM,MAAM,eAAe,GAAG;IAC5B,EAAE,EAAE,iBAAiB,CAAC;IACtB,sEAAsE;IACtE,gBAAgB,EAAE,OAAO,CAAC;IAC1B,4FAA4F;IAC5F,WAAW,EAAE,YAAY,GAAG,QAAQ,CAAC;IACrC,mBAAmB,EAAE,OAAO,CAAC;IAC7B,yFAAyF;IACzF,kBAAkB,EAAE,KAAK,GAAG,QAAQ,GAAG,SAAS,CAAC;IACjD,wCAAwC;IACxC,YAAY,EAAE,OAAO,CAAC;IACtB,sDAAsD;IACtD,aAAa,EAAE,OAAO,CAAC;IACvB,+BAA+B;IAC/B,YAAY,EAAE,OAAO,CAAC;IACtB,6FAA6F;IAC7F,qBAAqB,EAAE,OAAO,CAAC;IAC/B,mBAAmB,EAAE,OAAO,CAAC;IAC7B,gGAAgG;IAChG,kBAAkB,EAAE,OAAO,CAAC;IAC5B,+FAA+F;IAC/F,WAAW,EAAE,OAAO,CAAC;IACrB,iDAAiD;IACjD,eAAe,EAAE,OAAO,CAAC;IACzB;;;;;;OAMG;IACH,YAAY,EAAE,OAAO,CAAC;CACvB,CAAC;AAEF,eAAO,MAAM,cAAc,EAAE,eAe5B,CAAC;AAEF,eAAO,MAAM,WAAW,EAAE,eAezB,CAAC;AAEF,eAAO,MAAM,eAAe,EAAE,eAe7B,CAAC;AAEF,eAAO,MAAM,YAAY,EAAE,eAe1B,CAAC;AAEF;;;;;GAKG;AACH,eAAO,MAAM,aAAa,EAAE,eAe3B,CAAC;AAEF,qGAAqG;AACrG,eAAO,MAAM,qBAAqB,EAAE,SAAS,eAAe,EAK3D,CAAC;AAEF;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAC7B,OAAO,EAAE,IAAI,CAAC,WAAW,EAAE,IAAI,GAAG,kBAAkB,CAAC,GACpD,eAAe,GAAG,SAAS,CAmB7B;AAED,MAAM,MAAM,YAAY;AACtB,sCAAsC;AACpC,MAAM,GACN,mBAAmB,GACnB,QAAQ,GACR,QAAQ;AACV,wCAAwC;GACtC,WAAW;AACb,+EAA+E;GAC7E,OAAO,GACP,SAAS,CAAC;AAEd,MAAM,MAAM,QAAQ,GAAG;IACrB,IAAI,EAAE,YAAY,CAAC;IACnB,sCAAsC;IACtC,IAAI,EAAE,MAAM,CAAC;IACb;;;OAGG;IACH,KAAK,EAAE,MAAM,CAAC;IACd,2EAA2E;IAC3E,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,MAAM,CAAC;IACZ,8FAA8F;IAC9F,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;;OAIG;IACH,YAAY,CAAC,EAAE,IAAI,CAAC;CACrB,CAAC;AAgBF;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,GAAG,OAAO,CAItF;AAED,yFAAyF;AACzF,wBAAgB,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,eAAe,GAAG,QAAQ,EAAE,CA4RxE;AAED,wDAAwD;AACxD,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,SAAS,QAAQ,EAAE,GAAG,OAAO,CAEzE"}

package/dist/sql/lexer.js

@@ -12,6 +12,7 @@ export const POSTGRES_LEXER = {
     executableComments: false,
     atVariables: false,
     hashIdentifiers: false,
+    tsqlLiterals: false,
 };
 export const MYSQL_LEXER = {
     id: "mysql",
@@ -27,6 +28,7 @@ export const MYSQL_LEXER = {
     executableComments: true,
     atVariables: true,
     hashIdentifiers: false,
+    tsqlLiterals: false,
 };
 export const SQLSERVER_LEXER = {
     id: "sqlserver",
@@ -42,6 +44,7 @@ export const SQLSERVER_LEXER = {
     executableComments: false,
     atVariables: true,
     hashIdentifiers: true,
+    tsqlLiterals: true,
 };
 export const SQLITE_LEXER = {
     id: "sqlite",
@@ -57,6 +60,7 @@ export const SQLITE_LEXER = {
     executableComments: false,
     atVariables: true,
     hashIdentifiers: false,
+    tsqlLiterals: false,
 };
 /**
  * Dialect-agnostic profile for callers that have no dialect (the tenant placeholder
@@ -78,6 +82,7 @@ export const GENERIC_LEXER = {
     executableComments: false,
     atVariables: true,
     hashIdentifiers: false,
+    tsqlLiterals: false,
 };
 /** Every engine-specific profile. Used when the dialect is unknown and each reading must be safe. */
 export const ENGINE_LEXER_PROFILES = [
@@ -118,6 +123,14 @@ const WORD_START = /[A-Za-z_\u0080-
 const WORD_CHAR = /[A-Za-z0-9_$\u0080-￿]/;
 const DIGIT = /[0-9]/;
 const HEX = /[0-9A-Fa-f]/;
+/** Currency symbols. SQL Server starts a money literal with one (its list is a subset). */
+const CURRENCY = /\p{Sc}/u;
+/**
+ * Characters SQL Server reads as whitespace that `\s` does not match. With `\s` minus
+ * U+FEFF they are the only characters at or above U+0080 that end a T-SQL name or
+ * number (every BMP character probed on SQL Server 2022, #327); U+FEFF continues a name.
+ */
+const TSQL_EXTRA_SPACE = /[\u200b\u0085]/;
 const DOLLAR_TAG = /^\$([A-Za-z_\u0080-￿][A-Za-z0-9_\u0080-￿]*)?\$/;
 /**
  * Whether the `--` at `i` starts a line comment. It always does, except on MySQL/MariaDB
@@ -137,6 +150,13 @@ export function lexSql(sql, profile) {
     let i = 0;
     /** Index in `tokens` of the open MySQL `/*! … *\/` executable-comment opener, or -1. */
     let executableOpener = -1;
+    const isSpace = (c) => /\s/.test(c) || (profile.tsqlLiterals && TSQL_EXTRA_SPACE.test(c));
+    /**
+     * `WORD_CHAR`, except that a SQL Server name also continues through `@` (`a@b` is one
+     * name, as `a$b` and `a#b` are) and ends at Unicode whitespace other than U+FEFF.
+     */
+    const isWordChar = (c) => (WORD_CHAR.test(c) || (profile.tsqlLiterals && c === "@")) &&
+        !(profile.tsqlLiterals && c !== "\ufeff" && isSpace(c));
     const push = (kind, start, end, extra) => {
         const text = sql.slice(start, end);
         const value = extra?.value ?? text;
@@ -187,7 +207,7 @@ export function lexSql(sql, profile) {
     while (i < n) {
         const ch = sql[i];
         const next = sql[i + 1];
-        if (/\s/.test(ch)) {
+        if (isSpace(ch)) {
             i++;
             continue;
         }
@@ -285,6 +305,21 @@ export function lexSql(sql, profile) {
             i = j;
             continue;
         }
+        // SQL Server money: a currency symbol, then optional digits (`$`, `$1.5`, `€2`). `$`
+        // before a letter is a pseudocolumn (`$action`), lexed below as a parameter.
+        if (profile.tsqlLiterals && CURRENCY.test(ch) && !(ch === "$" && next !== undefined && WORD_START.test(next))) {
+            let j = i + 1;
+            while (j < n && DIGIT.test(sql[j]))
+                j++;
+            if (sql[j] === ".") {
+                j++;
+                while (j < n && DIGIT.test(sql[j]))
+                    j++;
+            }
+            push("number", i, j);
+            i = j;
+            continue;
+        }
         if (ch === "$") {
             if (profile.dollarQuotes) {
                 const tag = DOLLAR_TAG.exec(sql.slice(i));
@@ -299,7 +334,7 @@ export function lexSql(sql, profile) {
             }
             if (next !== undefined && (DIGIT.test(next) || (!profile.dollarQuotes && WORD_START.test(next)))) {
                 let j = i + 1;
-                while (j < n && WORD_CHAR.test(sql[j]) && sql[j] !== "$")
+                while (j < n && isWordChar(sql[j]) && sql[j] !== "$")
                     j++;
                 push("parameter", i, j);
                 i = j;
@@ -309,7 +344,7 @@ export function lexSql(sql, profile) {
         // ---- words (and prefixed string literals) ---------------------------
         if (WORD_START.test(ch) || (ch === "#" && profile.hashIdentifiers && next !== undefined && (next === "#" || WORD_START.test(next)))) {
             let j = i + 1;
-            while (j < n && (WORD_CHAR.test(sql[j]) || (profile.hashIdentifiers && sql[j] === "#")))
+            while (j < n && (isWordChar(sql[j]) || (profile.hashIdentifiers && sql[j] === "#")))
                 j++;
             const word = sql.slice(i, j);
             if (sql[j] === "'" && j - i === 1) {
@@ -330,7 +365,7 @@ export function lexSql(sql, profile) {
         // ---- numbers --------------------------------------------------------
         if (DIGIT.test(ch) || (ch === "." && next !== undefined && DIGIT.test(next))) {
             let j = i;
-            if (ch === "0" && (next === "x" || next === "X") && HEX.test(sql[i + 2] ?? "")) {
+            if (ch === "0" && (next === "x" || next === "X") && (profile.tsqlLiterals || HEX.test(sql[i + 2] ?? ""))) {
                 j = i + 2;
                 while (j < n && HEX.test(sql[j]))
                     j++;
@@ -343,7 +378,7 @@ export function lexSql(sql, profile) {
                     while (j < n && DIGIT.test(sql[j]))
                         j++;
                 }
-                if ((sql[j] === "e" || sql[j] === "E") && /^[eE][+-]?[0-9]/.test(sql.slice(j))) {
+                if ((sql[j] === "e" || sql[j] === "E") && (profile.tsqlLiterals || /^[eE][+-]?[0-9]/.test(sql.slice(j)))) {
                     j += sql[j + 1] === "+" || sql[j + 1] === "-" ? 2 : 1;
                     while (j < n && DIGIT.test(sql[j]))
                         j++;
@@ -363,7 +398,7 @@ export function lexSql(sql, profile) {
         }
         if (ch === ":" && next !== undefined && WORD_START.test(next)) {
             let j = i + 1;
-            while (j < n && WORD_CHAR.test(sql[j]))
+            while (j < n && isWordChar(sql[j]))
                 j++;
             push("parameter", i, j);
             i = j;
@@ -374,7 +409,7 @@ export function lexSql(sql, profile) {
             if (sql[j] === "@")
                 j++;
             if (j < n && WORD_START.test(sql[j])) {
-                while (j < n && WORD_CHAR.test(sql[j]))
+                while (j < n && isWordChar(sql[j]))
                     j++;
                 push("parameter", i, j);
                 i = j;