@askdb/core 1.0.0-beta.44 → 1.0.0-beta.46

package/dist/sql/tenant-scope-expand.js

@@ -0,0 +1,101 @@
+import { TenantScopeError } from "../errors.js";
+import { subtreeRootIds } from "./tenant-hierarchy.js";
+import { validateTenantScope } from "./tenant-scope-validate.js";
+/**
+ * Replace a `subtree` access with the per-root access it expands to: `multi_root`
+ * with one entry per root the subtree covers (the scope's root first, then its
+ * descendant roots breadth-first), including a level with no IDs (`ids: []`), or `ids`
+ * when the subtree is the scope's root alone. Other access kinds pass through untouched.
+ *
+ * Each root's IDs stay under that root, so they bind only to its own placeholder:
+ * root tables have separate ID spaces, and folding a client ID into the agency
+ * placeholder would match another agency (#338). This relies on every root deriving a distinct
+ * placeholder, which `validateTenantScope()` and the policy loader enforce. The seeds are unioned into the
+ * `tenantRoot` entry here, not trusted to the resolver, so an ancestor never loses
+ * its own rows when a host returns strict descendants only.
+ *
+ * `ask()` runs this before generation, and a host runs it before a synchronous
+ * `bindPreparedQuery()` (`askdb.bind()` does it for you), so there is one expansion (ADR 0014).
+ * The scope is validated first (`validateTenantScope`), so an unknown root fails as in `ask()`.
+ *
+ * Fails closed with `SUBTREE_NOT_RESOLVABLE`: no resolver; a result that is an
+ * array (the old flat shape) or not a plain object; a key that isn't a root in
+ * this subtree; a value that isn't an array of non-empty strings; or no IDs at all.
+ */
+export async function expandTenantScope(policy, scope, resolve) {
+    validateTenantScope(policy, scope);
+    const access = scope.access;
+    if (access.kind !== "subtree")
+        return scope;
+    const { tenantRoot, rootIds } = access;
+    const levels = subtreeRootIds(policy, tenantRoot);
+    const shape = `{ ${levels.map((root) => `"${root}": [...]`).join(", ")} }`;
+    const fail = (message) => new TenantScopeError(message, "SUBTREE_NOT_RESOLVABLE");
+    if (!resolve) {
+        throw fail(`tenantScope.access is a 'subtree' of '${tenantRoot}', but no ` +
+            "resolveTenantDescendants was passed. AskDB does not query your database " +
+            "to find descendants: pass resolveTenantDescendants to expand the seed IDs, or pass " +
+            "an 'ids' or 'multi_root' access with each root's IDs already expanded.");
+    }
+    const result = await resolve(tenantRoot, rootIds);
+    if (Array.isArray(result)) {
+        throw fail(`resolveTenantDescendants for '${tenantRoot}' returned an array. It must return IDs per ` +
+            `tenant root, keyed by root table id: ${shape}. Root tables have separate ID spaces, so ` +
+            "a flat list can't say which root each ID belongs to, and binding them all to " +
+            `'${tenantRoot}' would match other tenants. Put the seeds and any same-table ` +
+            `descendants under '${tenantRoot}', and each descendant root's IDs under that root.`);
+    }
+    if (!isPlainObject(result)) {
+        throw fail(`resolveTenantDescendants for '${tenantRoot}' must return an object mapping each ` +
+            `tenant root in the subtree to its IDs: ${shape}.`);
+    }
+    // Read the result exactly once: validate and build from this snapshot, so a getter
+    // can't return one value to validation and another to the scope, and a property
+    // validation can't see (non-enumerable) is never read at all.
+    const idsByRoot = new Map();
+    const knownRoots = new Set(policy.roots.map((root) => root.id));
+    let returned = 0;
+    for (const [root, value] of Object.entries(result)) {
+        const ids = Array.isArray(value) ? [...value] : value;
+        if (!knownRoots.has(root)) {
+            throw fail(`resolveTenantDescendants returned IDs under a key the subtree can't have: '${root}' is ` +
+                `not a tenant root in the policy. Allowed keys for a subtree of '${tenantRoot}': ` +
+                `${levels.join(", ")}.`);
+        }
+        if (!levels.includes(root)) {
+            throw fail(`resolveTenantDescendants returned IDs under a key the subtree can't have: '${root}' is ` +
+                `not in the subtree of '${tenantRoot}' (the policy's hierarchy doesn't reach it from ` +
+                `there). Allowed keys: ${levels.join(", ")}.`);
+        }
+        if (!isTenantIdArray(ids)) {
+            throw fail(`resolveTenantDescendants: the IDs for '${root}' must be an array of non-empty strings.`);
+        }
+        idsByRoot.set(root, ids);
+        returned += ids.length;
+    }
+    if (returned === 0) {
+        throw fail(`resolveTenantDescendants returned no IDs for '${tenantRoot}' (seeds: ${rootIds.join(", ")}). ` +
+            `Return at least the seeds under '${tenantRoot}'; refusing to build an empty tenant scope.`);
+    }
+    // Every level the subtree covers stays in the scope, even one with no IDs. The
+    // guardrail then checks a read of that root on its own placeholder, and binding that
+    // placeholder fails closed (UNRESOLVED_TENANT_PLACEHOLDER). Dropping the level would
+    // leave its rows readable through a parent's foreign key or an ancestor, which is
+    // less restricted than a level the resolver narrowed to some IDs.
+    const scopes = levels.map((root) => {
+        const own = idsByRoot.get(root) ?? [];
+        return { tenantRoot: root, ids: [...new Set(root === tenantRoot ? [...rootIds, ...own] : own)] };
+    });
+    const expanded = scopes.length === 1 ? { kind: "ids", ...scopes[0] } : { kind: "multi_root", scopes };
+    return { ...scope, access: expanded };
+}
+function isTenantIdArray(value) {
+    return Array.isArray(value) && value.every((id) => typeof id === "string" && id.length > 0);
+}
+function isPlainObject(value) {
+    if (typeof value !== "object" || value === null)
+        return false;
+    const proto = Object.getPrototypeOf(value);
+    return proto === Object.prototype || proto === null;
+}
+//# sourceMappingURL=tenant-scope-expand.js.map

package/dist/sql/tenant-scope-expand.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tenant-scope-expand.js","sourceRoot":"","sources":["../../src/sql/tenant-scope-expand.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAEhD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AA6BjE;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,MAA8B,EAC9B,KAAkB,EAClB,OAA6C;IAE7C,mBAAmB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IACnC,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;IAC5B,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IAC5C,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC;IACvC,MAAM,MAAM,GAAG,cAAc,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IAClD,MAAM,KAAK,GAAG,KAAK,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,IAAI,UAAU,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;IAC3E,MAAM,IAAI,GAAG,CAAC,OAAe,EAAE,EAAE,CAAC,IAAI,gBAAgB,CAAC,OAAO,EAAE,wBAAwB,CAAC,CAAC;IAE1F,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,CACR,yCAAyC,UAAU,YAAY;YAC7D,0EAA0E;YAC1E,qFAAqF;YACrF,wEAAwE,CAC3E,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAY,MAAM,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IAC3D,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,CACR,iCAAiC,UAAU,8CAA8C;YACvF,wCAAwC,KAAK,4CAA4C;YACzF,+EAA+E;YAC/E,IAAI,UAAU,gEAAgE;YAC9E,sBAAsB,UAAU,oDAAoD,CACvF,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,CACR,iCAAiC,UAAU,uCAAuC;YAChF,0CAA0C,KAAK,GAAG,CACrD,CAAC;IACJ,CAAC;IAED,mFAAmF;IACnF,gFAAgF;IAChF,8DAA8D;IAC9D,MAAM,SAAS,GAAG,IAAI,GAAG,EAA6B,CAAC;IACvD,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;IAChE,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACnD,MAAM,GAAG,GAAY,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;QAC/D,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,CACR,8EAA8E,IAAI,OAAO;gBACvF,mEAAmE,UAAU,KAAK;gBAClF,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAC1B,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3B,MAAM,IAAI,CACR,8EAA8E,IAAI,OAAO;gBACvF,0BAA0B,UAAU,kDAAkD;gBACtF,yBAAyB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAChD,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,CAAC,0CAA0C,IAAI,0CAA0C,CAAC,CAAC;QACvG,CAAC;QACD,SAAS,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACzB,QAAQ,IAAI,GAAG,CAAC,MAAM,CAAC;IACzB,CAAC;IACD,IAAI,QAAQ,KAAK,CAAC,EAAE,CAAC;QACnB,MAAM,IAAI,CACR,iDAAiD,UAAU,aAAa,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK;YAC7F,oCAAoC,UAAU,6CAA6C,CAC9F,CAAC;IACJ,CAAC;IAED,+EAA+E;IAC/E,qFAAqF;IACrF,qFAAqF;IACrF,kFAAkF;IAClF,kEAAkE;IAClE,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QACjC,MAAM,GAAG,GAAG,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QACtC,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,CAAC,GAAG,OAAO,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;IACnG,CAAC,CAAC,CAAC;IACH,MAAM,QAAQ,GACZ,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,CAAC,CAAC,CAAE,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,CAAC;IACxF,OAAO,EAAE,GAAG,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;AACxC,CAAC;AAED,SAAS,eAAe,CAAC,KAAc;IACrC,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,OAAO,EAAE,KAAK,QAAQ,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AAC9F,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAC9D,MAAM,KAAK,GAAG,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;IAC3C,OAAO,KAAK,KAAK,MAAM,CAAC,SAAS,IAAI,KAAK,KAAK,IAAI,CAAC;AACtD,CAAC"}

package/dist/sql/tsql-batch.d.ts

@@ -0,0 +1,56 @@
+/**
+ * Where a T-SQL batch starts a second statement without a `;`.
+ *
+ * SQL Server needs no separator between statements: `SELECT 1 SELECT 2` is two
+ * statements, and Studio's Execute runs the validated SQL inside a batch. This check
+ * finds the second statement in SQL that is otherwise a single SELECT. Only the top
+ * level (outside every bracket) is checked: a second statement inside brackets is a
+ * syntax error, and SQL Server runs nothing from a batch that does not compile.
+ *
+ * Verbs that start a statement (`DECLARE`, `WHILE`, `EXEC`, …) are the keyword
+ * denylist's job (`SQLSERVER_DIALECT.extraForbiddenKeywords`). This module covers the
+ * statements no verb announces:
+ *
+ * - a top-level `SELECT` that follows no set operator and is not the main query
+ *   after a leading `WITH` list;
+ * - a top-level `(SELECT …` right after a complete expression, such as
+ *   `SELECT 1 (SELECT 2)`. After a keyword, an operator, a comma or a function name
+ *   the bracket opens a subquery instead;
+ * - a label: a `:` written directly against anything but `(`, a comma or an operator.
+ *
+ * It also rejects code SQL Server may split into tokens differently from the lexer
+ * ({@link findAmbiguousTsqlText}): rather than copy every corner of SQL Server's
+ * tokenizer, the check accepts plain code only.
+ */
+import type { SqlToken } from "./lexer.js";
+/** The token where a second statement starts. */
+export type TsqlStatementBoundary = {
+    token: SqlToken;
+    /**
+     * `select`: a top-level SELECT that continues nothing. `query`: a top-level
+     * `(SELECT …` after a complete expression. `label`: a `:` that ends a label.
+     */
+    kind: "select" | "query" | "label";
+};
+/**
+ * Code SQL Server may split into tokens differently from the lexer, described for an
+ * error message, or `undefined`. Text inside strings and quoted identifiers is not
+ * checked; `tokens` holds no comments. Fails closed on:
+ *
+ * - a character outside {@link PLAIN_CODE}: Unicode whitespace and format characters
+ *   (U+00A0, U+200B, U+FEFF), symbols, currency signs other than `$`, `\` (a money
+ *   sign to SQL Server) and ASCII control characters;
+ * - a money sign with no digits after it (`$ .5` is one money literal to SQL Server);
+ * - a number written directly against a word or variable (`1ESELECT`, `0xSELECT`);
+ * - a `?` written directly against a name or number: Studio binds it as `@p0`, which
+ *   SQL Server reads as part of that name (`x?:` becomes the label `x@p0:`).
+ *
+ * Model-written SQL contains none of these.
+ */
+export declare function findAmbiguousTsqlText(sql: string, tokens: readonly SqlToken[]): string | undefined;
+/**
+ * The first place `tokens` starts a second T-SQL statement, or `undefined`.
+ * `tokens` holds no comments and no trailing `;`.
+ */
+export declare function findTsqlStatementBoundary(tokens: readonly SqlToken[]): TsqlStatementBoundary | undefined;
+//# sourceMappingURL=tsql-batch.d.ts.map

package/dist/sql/tsql-batch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tsql-batch.d.ts","sourceRoot":"","sources":["../../src/sql/tsql-batch.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAG3C,iDAAiD;AACjD,MAAM,MAAM,qBAAqB,GAAG;IAClC,KAAK,EAAE,QAAQ,CAAC;IAChB;;;OAGG;IACH,IAAI,EAAE,QAAQ,GAAG,OAAO,GAAG,OAAO,CAAC;CACpC,CAAC;AAqCF;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,QAAQ,EAAE,GAAG,MAAM,GAAG,SAAS,CA6BlG;AAED;;;GAGG;AACH,wBAAgB,yBAAyB,CAAC,MAAM,EAAE,SAAS,QAAQ,EAAE,GAAG,qBAAqB,GAAG,SAAS,CA8HxG"}

package/dist/sql/tsql-batch.js

@@ -0,0 +1,246 @@
+import { SQLSERVER_RESERVED_WORDS } from "./reserved-words.js";
+/**
+ * Reserved words after which an expression or a subquery follows, so a `(SELECT …`
+ * after one of them is a subquery. Each is reserved in T-SQL, so none is an alias.
+ */
+const EXPRESSION_KEYWORDS = new Set([
+    "select", "distinct", "all", "any", "some", "top", "percent",
+    "from", "join", "where", "on", "having", "by",
+    "and", "or", "not", "in", "exists", "like", "between", "escape",
+    "case", "when", "then", "else",
+    "union", "except", "intersect",
+]);
+/** Reserved words that are also function names, so `name((SELECT …))` is a call. */
+const RESERVED_FUNCTIONS = new Set([
+    "coalesce", "nullif", "convert", "try_convert", "left", "right",
+    "contains", "containstable", "freetext", "freetexttable", "openxml", "tsequal",
+]);
+/**
+ * Punctuation an expression may follow: `(`, a comma, an operator, and `.` or `::`
+ * before a qualified function name.
+ */
+const EXPRESSION_PUNCTUATION = new Set(["(", ",", "=", "<", ">", "+", "-", "*", "/", "%", "&", "|", "^", "~", ".", "::"]);
+const RESERVED = new Set(SQLSERVER_RESERVED_WORDS);
+const SET_OPERATORS = new Set(["union", "except", "intersect"]);
+/**
+ * A character allowed in T-SQL code outside strings and quoted names: printable ASCII
+ * except `\`, tab, line feed, carriage return, and Unicode letters, combining marks
+ * and decimal digits.
+ */
+const PLAIN_CODE = /[\t\n\r\x20-\x5b\x5d-\x7e\p{L}\p{M}\p{Nd}]/u;
+const MONEY_SIGN = /^\p{Sc}$/u;
+/**
+ * Code SQL Server may split into tokens differently from the lexer, described for an
+ * error message, or `undefined`. Text inside strings and quoted identifiers is not
+ * checked; `tokens` holds no comments. Fails closed on:
+ *
+ * - a character outside {@link PLAIN_CODE}: Unicode whitespace and format characters
+ *   (U+00A0, U+200B, U+FEFF), symbols, currency signs other than `$`, `\` (a money
+ *   sign to SQL Server) and ASCII control characters;
+ * - a money sign with no digits after it (`$ .5` is one money literal to SQL Server);
+ * - a number written directly against a word or variable (`1ESELECT`, `0xSELECT`);
+ * - a `?` written directly against a name or number: Studio binds it as `@p0`, which
+ *   SQL Server reads as part of that name (`x?:` becomes the label `x@p0:`).
+ *
+ * Model-written SQL contains none of these.
+ */
+export function findAmbiguousTsqlText(sql, tokens) {
+    let from = 0;
+    const scanTo = (end) => {
+        for (const ch of sql.slice(from, end)) {
+            if (PLAIN_CODE.test(ch))
+                continue;
+            if (ch === "\\")
+                return "the character '\\'";
+            return `the character U+${ch.codePointAt(0).toString(16).toUpperCase().padStart(4, "0")}`;
+        }
+        return undefined;
+    };
+    for (const [i, t] of tokens.entries()) {
+        if (t.kind === "string" || t.kind === "quoted_identifier") {
+            const found = scanTo(t.start);
+            if (found)
+                return found;
+            from = t.end;
+            continue;
+        }
+        const prev = tokens[i - 1];
+        if (isPunct(t, "?") && prev?.end === t.start && prev.kind !== "punct" && prev.kind !== "string") {
+            return `'${prev.text}?', a parameter marker written against a name`;
+        }
+        if (t.kind !== "number")
+            continue;
+        if (MONEY_SIGN.test(t.text))
+            return `the money sign '${t.text}'`;
+        const next = tokens[i + 1];
+        if (next?.start === t.end && (next.kind === "word" || next.kind === "parameter")) {
+            return `'${t.text}${next.text}', a number written against a word`;
+        }
+    }
+    return scanTo(sql.length);
+}
+/**
+ * The first place `tokens` starts a second T-SQL statement, or `undefined`.
+ * `tokens` holds no comments and no trailing `;`.
+ */
+export function findTsqlStatementBoundary(tokens) {
+    /** Index of each `)` mapped to the index of the `(` it closes. */
+    const opener = new Map();
+    /** A top-level `ORDER BY` came earlier, so a later `OFFSET` is the keyword. */
+    let orderBy = false;
+    /** `tokens[i]` is `(` and a `SELECT` follows it, after any further `(`. */
+    const opensQuery = (i) => {
+        let j = i;
+        while (isPunct(tokens[j], "("))
+            j++;
+        return isWord(tokens[j], "select");
+    };
+    /**
+     * The word at `j` is a keyword an expression follows. Keywords SQL Server does not
+     * reserve count only in their clause; anywhere else they are aliases
+     * (`SELECT 1 offset (SELECT 2)` is two statements).
+     */
+    const introducesExpression = (j) => {
+        const word = tokens[j].lower;
+        if (EXPRESSION_KEYWORDS.has(word))
+            return true;
+        const prev = tokens[j - 1];
+        switch (word) {
+            case "offset":
+                // After a sort item, not as one (`ORDER BY offset` sorts by a column).
+                return orderBy && !isWord(prev, "by") && !isPunct(prev, ",");
+            case "next":
+            case "first":
+                return isWord(prev, "fetch");
+            case "ties":
+                return isWord(prev, "with");
+            case "apply":
+                return isWord(prev, "cross") || isWord(prev, "outer");
+            case "zone":
+                return isWord(prev, "time") && isWord(tokens[j - 2], "at");
+            default:
+                return false;
+        }
+    };
+    /**
+     * An expression may start right after `tokens[j]`, so a `(SELECT …` there is a
+     * subquery. Fails closed: anything not listed (a value, a name, `}`, an unknown
+     * keyword) ends the statement, and a `(SELECT …` after it starts a second one.
+     */
+    const expressionMayFollow = (j) => {
+        const t = tokens[j];
+        if (!t)
+            return true;
+        switch (t.kind) {
+            case "number":
+            case "string":
+            case "parameter":
+                // `TOP 5 (SELECT …)`: the count, then the first select-list item.
+                return isWord(tokens[j - 1], "top");
+            case "word":
+                return introducesExpression(j);
+            case "punct": {
+                if (t.text !== ")")
+                    return EXPRESSION_PUNCTUATION.has(t.text);
+                const openIndex = opener.get(j);
+                // `TOP (5) (SELECT …)`.
+                return openIndex !== undefined && isWord(tokens[openIndex - 1], "top");
+            }
+            default:
+                return false;
+        }
+    };
+    /**
+     * `name((SELECT …))` where `name` is a function: SQL Server reads an unquoted `name(`
+     * as a call whenever `name` is not an alias, that is, when an expression may start
+     * before it. A quoted name is a call only when qualified (`[dbo].[fn](`); alone,
+     * `[name]` is a column.
+     */
+    const opensCallArgument = (i) => {
+        if (!isPunct(tokens[i + 1], "("))
+            return false;
+        const name = tokens[i - 1];
+        const callable = (name?.kind === "quoted_identifier" && isPunct(tokens[i - 2], ".")) ||
+            (name?.kind === "word" && (!RESERVED.has(name.lower) || RESERVED_FUNCTIONS.has(name.lower)));
+        return callable && expressionMayFollow(i - 2);
+    };
+    const open = [];
+    let headSeen = false;
+    /** After a leading `WITH`, the main query that follows the CTE list is still to come. */
+    let mainPending = false;
+    for (const [i, t] of tokens.entries()) {
+        const topLevel = open.length === 0;
+        if (isPunct(t, "(")) {
+            if (topLevel && opensQuery(i)) {
+                const prev = tokens[i - 1];
+                if (mainPending && (isWord(prev, "as") || isWord(prev, "materialized"))) {
+                    // A CTE body.
+                }
+                else if (mainPending && isPunct(prev, ")")) {
+                    mainPending = false;
+                }
+                else if (!expressionMayFollow(i - 1) && !opensCallArgument(i)) {
+                    return { token: t, kind: "query" };
+                }
+            }
+            open.push(i);
+            continue;
+        }
+        if (isPunct(t, ")")) {
+            const openIndex = open.pop();
+            if (openIndex !== undefined)
+                opener.set(i, openIndex);
+            if (open.length === 0 && startsLabel(t, tokens[i + 1]))
+                return { token: t, kind: "label" };
+            continue;
+        }
+        if (!headSeen) {
+            headSeen = true;
+            mainPending = isWord(t, "with");
+            continue;
+        }
+        if (!topLevel)
+            continue;
+        if (startsLabel(t, tokens[i + 1]))
+            return { token: t, kind: "label" };
+        if (isWord(t, "by") && isWord(tokens[i - 1], "order"))
+            orderBy = true;
+        if (isWord(t, "select")) {
+            if (mainPending && isPunct(tokens[i - 1], ")")) {
+                mainPending = false;
+            }
+            else if (!followsSetOperator(tokens, i)) {
+                return { token: t, kind: "select" };
+            }
+        }
+    }
+    return undefined;
+}
+/** `UNION [ALL | DISTINCT]`, `EXCEPT` or `INTERSECT` right before `tokens[i]`. */
+function followsSetOperator(tokens, i) {
+    let prev = tokens[i - 1];
+    if (isWord(prev, "all") || isWord(prev, "distinct"))
+        prev = tokens[i - 2];
+    return prev?.kind === "word" && SET_OPERATORS.has(prev.lower);
+}
+/**
+ * A `:` written directly against `t`, which T-SQL reads as ending a label (`name :` is a
+ * syntax error). Fails closed: any `t` counts except `(`, a comma or an operator, where
+ * an AskDB `:name` placeholder may follow, because SQL Server's label names include
+ * forms the lexer splits (`#@:`, `#1#:`). The lexer reads `l:SELECT` as `l` and a
+ * `:SELECT` parameter; `::` is one token and never a label.
+ */
+function startsLabel(t, next) {
+    if (next?.start !== t.end)
+        return false;
+    if (t.kind === "punct" && t.text !== "." && t.text !== "::" && EXPRESSION_PUNCTUATION.has(t.text))
+        return false;
+    return isPunct(next, ":") || (next.kind === "parameter" && next.text.startsWith(":"));
+}
+function isPunct(t, text) {
+    return t?.kind === "punct" && t.text === text;
+}
+function isWord(t, lower) {
+    return t?.kind === "word" && t.lower === lower;
+}
+//# sourceMappingURL=tsql-batch.js.map

package/dist/sql/tsql-batch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tsql-batch.js","sourceRoot":"","sources":["../../src/sql/tsql-batch.ts"],"names":[],"mappings":"AAyBA,OAAO,EAAE,wBAAwB,EAAE,MAAM,qBAAqB,CAAC;AAY/D;;;GAGG;AACH,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC;IAClC,QAAQ,EAAE,UAAU,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS;IAC5D,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI;IAC7C,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ;IAC/D,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;IAC9B,OAAO,EAAE,QAAQ,EAAE,WAAW;CAC/B,CAAC,CAAC;AAEH,oFAAoF;AACpF,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC;IACjC,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,EAAE,OAAO;IAC/D,UAAU,EAAE,eAAe,EAAE,UAAU,EAAE,eAAe,EAAE,SAAS,EAAE,SAAS;CAC/E,CAAC,CAAC;AAEH;;;GAGG;AACH,MAAM,sBAAsB,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;AAE1H,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,wBAAwB,CAAC,CAAC;AACnD,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC;AAEhE;;;;GAIG;AACH,MAAM,UAAU,GAAG,6CAA6C,CAAC;AACjE,MAAM,UAAU,GAAG,WAAW,CAAC;AAE/B;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,qBAAqB,CAAC,GAAW,EAAE,MAA2B;IAC5E,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,MAAM,MAAM,GAAG,CAAC,GAAW,EAAsB,EAAE;QACjD,KAAK,MAAM,EAAE,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC;YACtC,IAAI,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;gBAAE,SAAS;YAClC,IAAI,EAAE,KAAK,IAAI;gBAAE,OAAO,oBAAoB,CAAC;YAC7C,OAAO,mBAAmB,EAAE,CAAC,WAAW,CAAC,CAAC,CAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;QAC7F,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC,CAAC;IACF,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC;QACtC,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,KAAK,mBAAmB,EAAE,CAAC;YAC1D,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;YAC9B,IAAI,KAAK;gBAAE,OAAO,KAAK,CAAC;YACxB,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC;YACb,SAAS;QACX,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAC3B,IAAI,OAAO,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,IAAI,EAAE,GAAG,KAAK,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAChG,OAAO,IAAI,IAAI,CAAC,IAAI,+CAA+C,CAAC;QACtE,CAAC;QACD,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ;YAAE,SAAS;QAClC,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;YAAE,OAAO,mBAAmB,CAAC,CAAC,IAAI,GAAG,CAAC;QACjE,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAC3B,IAAI,IAAI,EAAE,KAAK,KAAK,CAAC,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,MAAM,IAAI,IAAI,CAAC,IAAI,KAAK,WAAW,CAAC,EAAE,CAAC;YACjF,OAAO,IAAI,CAAC,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,oCAAoC,CAAC;QACpE,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;AAC5B,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,yBAAyB,CAAC,MAA2B;IACnE,kEAAkE;IAClE,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;IACzC,+EAA+E;IAC/E,IAAI,OAAO,GAAG,KAAK,CAAC;IAEpB,2EAA2E;IAC3E,MAAM,UAAU,GAAG,CAAC,CAAS,EAAW,EAAE;QACxC,IAAI,CAAC,GAAG,CAAC,CAAC;QACV,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC;YAAE,CAAC,EAAE,CAAC;QACpC,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;IACrC,CAAC,CAAC;IAEF;;;;OAIG;IACH,MAAM,oBAAoB,GAAG,CAAC,CAAS,EAAW,EAAE;QAClD,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAE,CAAC,KAAK,CAAC;QAC9B,IAAI,mBAAmB,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;QAC/C,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAC3B,QAAQ,IAAI,EAAE,CAAC;YACb,KAAK,QAAQ;gBACX,uEAAuE;gBACvE,OAAO,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YAC/D,KAAK,MAAM,CAAC;YACZ,KAAK,OAAO;gBACV,OAAO,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YAC/B,KAAK,MAAM;gBACT,OAAO,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YAC9B,KAAK,OAAO;gBACV,OAAO,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YACxD,KAAK,MAAM;gBACT,OAAO,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;YAC7D;gBACE,OAAO,KAAK,CAAC;QACjB,CAAC;IACH,CAAC,CAAC;IAEF;;;;OAIG;IACH,MAAM,mBAAmB,GAAG,CAAC,CAAS,EAAW,EAAE;QACjD,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QACpB,IAAI,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QACpB,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;YACf,KAAK,QAAQ,CAAC;YACd,KAAK,QAAQ,CAAC;YACd,KAAK,WAAW;gBACd,kEAAkE;gBAClE,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;YACtC,KAAK,MAAM;gBACT,OAAO,oBAAoB,CAAC,CAAC,CAAC,CAAC;YACjC,KAAK,OAAO,CAAC,CAAC,CAAC;gBACb,IAAI,CAAC,CAAC,IAAI,KAAK,GAAG;oBAAE,OAAO,sBAAsB,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;gBAC9D,MAAM,SAAS,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;gBAChC,wBAAwB;gBACxB,OAAO,SAAS,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,CAAC,SAAS,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;YACzE,CAAC;YACD;gBACE,OAAO,KAAK,CAAC;QACjB,CAAC;IACH,CAAC,CAAC;IAEF;;;;;OAKG;IACH,MAAM,iBAAiB,GAAG,CAAC,CAAS,EAAW,EAAE;QAC/C,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC;QAC/C,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAC3B,MAAM,QAAQ,GACZ,CAAC,IAAI,EAAE,IAAI,KAAK,mBAAmB,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;YACnE,CAAC,IAAI,EAAE,IAAI,KAAK,MAAM,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC/F,OAAO,QAAQ,IAAI,mBAAmB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAChD,CAAC,CAAC;IAEF,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,yFAAyF;IACzF,IAAI,WAAW,GAAG,KAAK,CAAC;IAExB,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC;QACtC,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC;QACnC,IAAI,OAAO,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;YACpB,IAAI,QAAQ,IAAI,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC9B,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;gBAC3B,IAAI,WAAW,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC,EAAE,CAAC;oBACxE,cAAc;gBAChB,CAAC;qBAAM,IAAI,WAAW,IAAI,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC;oBAC7C,WAAW,GAAG,KAAK,CAAC;gBACtB,CAAC;qBAAM,IAAI,CAAC,mBAAmB,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,CAAC;oBAChE,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;gBACrC,CAAC;YACH,CAAC;YACD,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACb,SAAS;QACX,CAAC;QACD,IAAI,OAAO,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;YACpB,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YAC7B,IAAI,SAAS,KAAK,SAAS;gBAAE,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;YACtD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,WAAW,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;gBAAE,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;YAC3F,SAAS;QACX,CAAC;QACD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,QAAQ,GAAG,IAAI,CAAC;YAChB,WAAW,GAAG,MAAM,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;YAChC,SAAS;QACX,CAAC;QACD,IAAI,CAAC,QAAQ;YAAE,SAAS;QACxB,IAAI,WAAW,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YAAE,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;QACtE,IAAI,MAAM,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC;YAAE,OAAO,GAAG,IAAI,CAAC;QACtE,IAAI,MAAM,CAAC,CAAC,EAAE,QAAQ,CAAC,EAAE,CAAC;YACxB,IAAI,WAAW,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;gBAC/C,WAAW,GAAG,KAAK,CAAC;YACtB,CAAC;iBAAM,IAAI,CAAC,kBAAkB,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,CAAC;gBAC1C,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;YACtC,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,kFAAkF;AAClF,SAAS,kBAAkB,CAAC,MAA2B,EAAE,CAAS;IAChE,IAAI,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACzB,IAAI,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,EAAE,UAAU,CAAC;QAAE,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1E,OAAO,IAAI,EAAE,IAAI,KAAK,MAAM,IAAI,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAChE,CAAC;AAED;;;;;;GAMG;AACH,SAAS,WAAW,CAAC,CAAW,EAAE,IAA0B;IAC1D,IAAI,IAAI,EAAE,KAAK,KAAK,CAAC,CAAC,GAAG;QAAE,OAAO,KAAK,CAAC;IACxC,IAAI,CAAC,CAAC,IAAI,KAAK,OAAO,IAAI,CAAC,CAAC,IAAI,KAAK,GAAG,IAAI,CAAC,CAAC,IAAI,KAAK,IAAI,IAAI,sBAAsB,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IAChH,OAAO,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,WAAW,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;AACxF,CAAC;AAED,SAAS,OAAO,CAAC,CAAuB,EAAE,IAAY;IACpD,OAAO,CAAC,EAAE,IAAI,KAAK,OAAO,IAAI,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC;AAChD,CAAC;AAED,SAAS,MAAM,CAAC,CAAuB,EAAE,KAAa;IACpD,OAAO,CAAC,EAAE,IAAI,KAAK,MAAM,IAAI,CAAC,CAAC,KAAK,KAAK,KAAK,CAAC;AACjD,CAAC"}

package/dist/sql/validate.d.ts

@@ -14,9 +14,17 @@ import { type DialectSpec } from "./dialect-spec.js";
  * 3. `SQL_MULTI_STATEMENT` — any `;` other than a single trailing one.
  * 4. `SQL_COMMENT` — any comment (`--`, `/* *\/`, and MySQL `#`).
  * 5. `SQL_NOT_SELECT_OR_WITH` — the first token (after any `(`) is not `SELECT`/`WITH`.
- * 6. `SQL_FORBIDDEN_KEYWORD` — an unquoted keyword from the shared denylist or the
+ * 6. `SQL_MULTI_STATEMENT`, SQL Server lexer only (so also for a dialect id that is no
+ *    built-in engine) — a second statement written without `;`, which T-SQL doesn't
+ *    need, or code SQL Server may split differently from the lexer (see `tsql-batch.ts`).
+ * 7. `SQL_LOCKING_READ` — a locking read, at any depth: `FOR UPDATE`, `FOR NO KEY UPDATE`,
+ *    `FOR SHARE`, `FOR KEY SHARE` or `LOCK IN SHARE MODE` on every lexer, and on the SQL Server
+ *    lexer a lock hint such as `UPDLOCK` or `HOLDLOCK` unquoted anywhere, or quoted alone in
+ *    parentheses right after a name, at any depth and with trailing spaces, and any such name
+ *    that isn't printable ASCII, which SQL Server may read as a hint (#319).
+ * 8. `SQL_FORBIDDEN_KEYWORD` — an unquoted keyword from the shared denylist or the
  *    dialect's `extraForbiddenKeywords`.
- * 7. `SQL_FORBIDDEN_FUNCTION` — a call (`name(`) to a function in the dialect's
+ * 9. `SQL_FORBIDDEN_FUNCTION` — a call (`name(`) to a function in the dialect's
  *    `blockedFunctions` (side-effecting or file/network/sleep functions).
  *
  * Then the dialect's `extraValidate` runs on the statement without its trailing `;`.
@@ -32,9 +40,16 @@ export declare function validateSelectSql(dialect: DialectSpec, sql: string): st
 /**
  * The words `validateSelectSql` rejects unquoted for a dialect, lowercase: the shared denylist
  * and the spec's `extraForbiddenKeywords`, plus every built-in spec's for an id that is no
- * built-in engine family. The NL→SQL prompt quotes names in this set.
+ * built-in engine family, and T-SQL's lock hints wherever the SQL Server lexer runs. The
+ * NL→SQL prompt quotes names in this set.
  */
 export declare function keywordsRejectedUnquoted(dialect: Pick<DialectSpec, "id" | "backslashEscapes" | "extraForbiddenKeywords">): Set<string>;
+/**
+ * Whether `validateSelectSql` runs the SQL Server lexer, and so the T-SQL hint checks, for a
+ * dialect: `sqlserver`, and an id that is no built-in engine family, which is checked every
+ * engine's way. The NL→SQL prompt follows it (#319).
+ */
+export declare function checkedAsTsql(dialect: Pick<DialectSpec, "id" | "backslashEscapes">): boolean;
 /** Explanation of guardrails satisfied by a string already passing {@link validateSelectSql}. */
 export type SelectGuardrailExplain = {
     statementKind: "select" | "with";

package/dist/sql/validate.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"validate.d.ts","sourceRoot":"","sources":["../../src/sql/validate.ts"],"names":[],"mappings":"AACA,OAAO,EAAqB,KAAK,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAwCxE;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,WAAW,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAyB3E;AAmFD;;;;GAIG;AACH,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,IAAI,CAAC,WAAW,EAAE,IAAI,GAAG,kBAAkB,GAAG,wBAAwB,CAAC,GAC/E,GAAG,CAAC,MAAM,CAAC,CAIb;AAsCD,iGAAiG;AACjG,MAAM,MAAM,sBAAsB,GAAG;IACnC,aAAa,EAAE,QAAQ,GAAG,MAAM,CAAC;IACjC,cAAc,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,eAAe,EAAE,MAAM,CAAC;CACzB,CAAC;AAEF,6FAA6F;AAC7F,wBAAgB,+BAA+B,CAAC,YAAY,EAAE,MAAM,GAAG,sBAAsB,CAiB5F"}
+{"version":3,"file":"validate.d.ts","sourceRoot":"","sources":["../../src/sql/validate.ts"],"names":[],"mappings":"AACA,OAAO,EAAqB,KAAK,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAyCxE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,WAAW,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAyB3E;AAsHD;;;;;GAKG;AACH,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,IAAI,CAAC,WAAW,EAAE,IAAI,GAAG,kBAAkB,GAAG,wBAAwB,CAAC,GAC/E,GAAG,CAAC,MAAM,CAAC,CAIb;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC,WAAW,EAAE,IAAI,GAAG,kBAAkB,CAAC,GAAG,OAAO,CAG5F;AAqHD,iGAAiG;AACjG,MAAM,MAAM,sBAAsB,GAAG;IACnC,aAAa,EAAE,QAAQ,GAAG,MAAM,CAAC;IACjC,cAAc,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,eAAe,EAAE,MAAM,CAAC;CACzB,CAAC;AAEF,6FAA6F;AAC7F,wBAAgB,+BAA+B,CAAC,YAAY,EAAE,MAAM,GAAG,sBAAsB,CAkB5F"}